Backport of 5b8fa431 and remove resolved TODO: see PR#3924.

Make RSA key exchange code actually constant-time.

Reviewed-by: Andy Polyakov <appro@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3935)