constant-time RSA