608     BIGNUM *r1, *m1, *vrfy, *r2, *m[RSA_MAX_PRIME_NUM - 2];  in rsa_ossl_mod_exp()  local
617     vrfy = BN_CTX_get(ctx);  in rsa_ossl_mod_exp()
618     if (vrfy == NULL)  in rsa_ossl_mod_exp()
903             if (!BN_mod_exp_mont(vrfy, r0, rsa->e, rsa->n, ctx,  in rsa_ossl_mod_exp()
908             if (!rsa->meth->bn_mod_exp(vrfy, r0, rsa->e, rsa->n, ctx,  in rsa_ossl_mod_exp()
918         if (!BN_sub(vrfy, vrfy, I))  in rsa_ossl_mod_exp()
920         if (BN_is_zero(vrfy)) {  in rsa_ossl_mod_exp()
925         if (!BN_mod(vrfy, vrfy, rsa->n, ctx))  in rsa_ossl_mod_exp()
927         if (BN_is_negative(vrfy))  in rsa_ossl_mod_exp()
928             if (!BN_add(vrfy, vrfy, rsa->n))  in rsa_ossl_mod_exp()
930         if (!BN_is_zero(vrfy)) {  in rsa_ossl_mod_exp()