Fix an information leak in the RSA padding check code.