Use only unsigned arithmetic in constant-time operations