Make RSA key exchange code actually constant-time.