Merge pull request #829 from mpg/ecp-gen-privkey-ct-compare-2.16-restricted

[Backport 2.16] Fix small timing side channel in ECDSA ephemeral key generation