This change updates the DTLS code to match the constant-time CBC behaviour in the TLS. (cherry picked from commit 9f27de17)