Make Sure (OpenSSL) DSA Signing Exponentiations Really Are Constant-Time
eprint.iacr.org