> Interestingly, the code continues to check the entire hash after a mismatch.
This is a standard practice in cryptography, but maybe not at the time.