```release-note:security
core: Use constant-time recovery token comparison
```