RSA_padding_check_PKCS1_type_2 is not constant time.