617     BIGNUM *r1, *m1, *vrfy;  in rsa_ossl_mod_exp()  local
632     vrfy = BN_CTX_get(ctx);  in rsa_ossl_mod_exp()
633     if (vrfy == NULL)  in rsa_ossl_mod_exp()
923             if (!BN_mod_exp_mont(vrfy, r0, rsa->e, rsa->n, ctx,  in rsa_ossl_mod_exp()
928             if (!rsa->meth->bn_mod_exp(vrfy, r0, rsa->e, rsa->n, ctx,  in rsa_ossl_mod_exp()
938         if (!BN_sub(vrfy, vrfy, I))  in rsa_ossl_mod_exp()
940         if (BN_is_zero(vrfy)) {  in rsa_ossl_mod_exp()
945         if (!BN_mod(vrfy, vrfy, rsa->n, ctx))  in rsa_ossl_mod_exp()
947         if (BN_is_negative(vrfy))  in rsa_ossl_mod_exp()
948             if (!BN_add(vrfy, vrfy, rsa->n))  in rsa_ossl_mod_exp()
950         if (!BN_is_zero(vrfy)) {  in rsa_ossl_mod_exp()