the ec modular inverse is not constant time, which can be very problematic for security (assumption)