266     BIGNUM *Ri, *R;  in BN_MONT_CTX_set()  local
272     if ((Ri = BN_CTX_get(ctx)) == NULL)  in BN_MONT_CTX_set()
315             BN_zero(Ri);  in BN_MONT_CTX_set()
316         else if ((BN_mod_inverse(Ri, R, &tmod, ctx)) == NULL)  in BN_MONT_CTX_set()
318         if (!BN_lshift(Ri, Ri, 2 * BN_BITS2))  in BN_MONT_CTX_set()
320         if (!BN_is_zero(Ri)) {  in BN_MONT_CTX_set()
321             if (!BN_sub_word(Ri, 1))  in BN_MONT_CTX_set()
325             if (bn_expand(Ri, (int)sizeof(BN_ULONG) * 2) == NULL)  in BN_MONT_CTX_set()
328             Ri->neg = 0;  in BN_MONT_CTX_set()
329             Ri->d[0] = BN_MASK2;  in BN_MONT_CTX_set()
330             Ri->d[1] = BN_MASK2;  in BN_MONT_CTX_set()
331             Ri->top = 2;  in BN_MONT_CTX_set()
333         if (!BN_div(Ri, NULL, Ri, &tmod, ctx))  in BN_MONT_CTX_set()
338         mont->n0[0] = (Ri->top > 0) ? Ri->d[0] : 0;  in BN_MONT_CTX_set()
339         mont->n0[1] = (Ri->top > 1) ? Ri->d[1] : 0;  in BN_MONT_CTX_set()
350             BN_zero(Ri);  in BN_MONT_CTX_set()
351         else if ((BN_mod_inverse(Ri, R, &tmod, ctx)) == NULL)  in BN_MONT_CTX_set()
353         if (!BN_lshift(Ri, Ri, BN_BITS2))  in BN_MONT_CTX_set()
355         if (!BN_is_zero(Ri)) {  in BN_MONT_CTX_set()
356             if (!BN_sub_word(Ri, 1))  in BN_MONT_CTX_set()
360             if (!BN_set_word(Ri, BN_MASK2))  in BN_MONT_CTX_set()
363         if (!BN_div(Ri, NULL, Ri, &tmod, ctx))  in BN_MONT_CTX_set()
368         mont->n0[0] = (Ri->top > 0) ? Ri->d[0] : 0;  in BN_MONT_CTX_set()
379         if ((BN_mod_inverse(Ri, R, &mont->N, ctx)) == NULL)  in BN_MONT_CTX_set()
381         if (!BN_lshift(Ri, Ri, mont->ri))  in BN_MONT_CTX_set()
383         if (!BN_sub_word(Ri, 1))  in BN_MONT_CTX_set()
388         if (!BN_div(&(mont->Ni), NULL, Ri, &mont->N, ctx))  in BN_MONT_CTX_set()