Prevents timing attacks where an attacker could deduce correct credentials by measuring response times. Not sure if it is real threat, but anyway.
7b001d710a