changed public key check to constant time.

Author: dghgit

prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/mldsa/MLDSAKeyFactorySpi.java

@@ -133,7 +133,7 @@ public PrivateKey engineGeneratePrivate(
                 byte[] publicData = spec.getPublicData();
                 if (publicData != null)
                 {
-                    if (!Arrays.areEqual(publicData, params.getPublicKey()))
+                    if (!Arrays.constantTimeAreEqual(publicData, params.getPublicKey()))
                     {
                         throw new InvalidKeySpecException("public key data does not match private key data");
                     }

prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/mlkem/MLKEMKeyFactorySpi.java

@@ -125,7 +125,7 @@ public PrivateKey engineGeneratePrivate(
                 byte[] publicKeyData = spec.getPublicData();
                 if (publicKeyData != null)
                 {
-                    if (!Arrays.areEqual(publicKeyData, params.getPublicKey()))
+                    if (!Arrays.constantTimeAreEqual(publicKeyData, params.getPublicKey()))
                     {
                         throw new InvalidKeySpecException("public key data does not match private key data");
                     }