Test nullifiers in constant time

Checking for spent notes in a block is still not completely constant
time, due to filtering out negative results of the constant-time
comparison.

Part of #84.

zcash_client_backend/Cargo.toml

@@ -12,6 +12,7 @@ ff = { path = "../ff" }
 hex = "0.3"
 pairing = { path = "../pairing" }
 protobuf = "2"
+subtle = "2"
 zcash_primitives = { path = "../zcash_primitives" }
 
 [build-dependencies]