bn/bn_blind.c: use Montgomery multiplication when possible.

(cherry picked from commit e02c519c)

Resolved conflicts:
	crypto/bn/bn_blind.c

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/6940)