Merge pull request #6492 from daverodgman/ecp_mul_mxz-timing-leak-2.28

Fix a timing leak in ecp_mul_mxz() - 2.28 backport