State in createBlindedExponent's javadoc what its seven bits of exponent blinding do and do not cover - that it removes the exponent bit-length and bit-pattern leak from the variable-time modPow but leaves 128 enumerable multipliers for an adversary averaging many operations under one long-term exponent, and randomises only the exponent so base-dependent leakage is untouched - mirrored into the jdk1.1 overlay, and replace the two non-ASCII em dashes left in areSecretValuesEqual's javadoc.