Timing vulnerability in ECDSA signature generation (CVE-2018-0735)