The cost should be zero. Just turn the LED off during crypto operations. No extra part needed, just connect the led to the MCU instead of actually connecting to power.

Of course, there could still be some LED attack not connected to actually doing crypto operations, but this should mitigate the known attack.