I'm pretty sure addition is always 1-clock tick latency / 3-instructions per cycle. While Multiplication is 5-clock tick latency / 1-instruction per cycle IIRC.
So if the timing of those instructions are constant, it seems difficult to side-channel / timing attack them.