[go](http://golang.org/src/pkg/crypto/rsa/pkcs1v15.go?m=text) seems to have PKCS1 with constant time comparison, but the padding seems to be done on call, and the constant time comparison compares equal length  strings.