> Interestingly, the code continues to check the entire hash after a mismatch.

This is a standard practice in cryptography, but maybe not at the time.