Also add a few comments about constant-timeness.

Thanks to Brian Smith for reporting this issue.
Reviewed-by: NRich Salz <rsalz@openssl.org>