The ternary comparison in the return can be improved to be closer to a constant time operation. Additionally "memcmp" is likely a misnomer, as it does not have memcmp semantics but is rather a memory equality test.