attacks. For maximum security, consider additional countermeasures such as scalar blinding.
pointMul
Constant-time scalar multiplication using double-and-add-always.
This implementation performs the same sequence of operations regardless of the scalar bits, preventing timing side-channel attacks. Both the addition and the "dummy" path execute, with the result selected via constant-time conditional copy.
SecurityNote
This provides protection against simple timing