Fix a SCA leak in BN_generate_dsa_nonce