bn/bn_blind.c: use Montgomery multiplication when possible.