66    int mLen = MOD_LEN(pME);  in gs_mont_add()  local
72       BNU_CHUNK_T extension = cpAdd_BNU(pr, pa, pb, mLen);  in gs_mont_add()
73       extension -= cpSub_BNU(pBuffer, pr, pm, mLen);  in gs_mont_add()
74       cpMaskMove_gs(pr, pBuffer, mLen, cpIsZero(extension));  in gs_mont_add()
91    int mLen = MOD_LEN(pME);  in gs_mont_sub()  local
97       BNU_CHUNK_T extension = cpSub_BNU(pr, pa, pb, mLen);  in gs_mont_sub()
98       cpAdd_BNU(pBuffer, pr, pm, mLen);  in gs_mont_sub()
99       cpMaskMove_gs(pr, pBuffer, mLen, cpIsNonZero(extension));  in gs_mont_sub()
115    int mLen = MOD_LEN(pME);  in gs_mont_neg()  local
121       BNU_CHUNK_T extension = cpSub_BNU(pr, pm, pa, mLen);  in gs_mont_neg()
122       extension -= cpSub_BNU(pBuffer, pr, pm, mLen);  in gs_mont_neg()
123       cpMaskMove_gs(pr, pBuffer, mLen, cpIsZero(extension));  in gs_mont_neg()
139    int mLen = MOD_LEN(pME);  in gs_mont_div2()  local
147       for(i=0; i<mLen; i++) pBuffer[i] = pm[i] & mask;  in gs_mont_div2()
149       pBuffer[mLen] = cpAdd_BNU(pBuffer, pBuffer, pa, mLen);  in gs_mont_div2()
150       cpLSR_BNU(pBuffer, pBuffer, mLen+1, 1);  in gs_mont_div2()
152       for(i=0; i<mLen; i++) pr[i] = pBuffer[i];  in gs_mont_div2()
202    int mLen = MOD_LEN(pME);  in gs_mont_red()  local
208    for(i=0; i<mLen; i++, prod++) {  in gs_mont_red()
220       for(j=1; j<mLen; j++) {  in gs_mont_red()
227       ADD_ABC(carry, prod[mLen], prod[mLen], ex_mu, carry);  in gs_mont_red()
231       carry -= cpSub_BNU(pr, prod, pm, mLen);  in gs_mont_red()
232       cpMaskMove_gs(pr, prod, mLen, cpIsNonZero(carry));  in gs_mont_red()
242    int mLen = MOD_LEN(pME);  in gs_mont_red()  local
244    cpMontRedAdc_BNU(pr, prod, pm, mLen, k0);  in gs_mont_red()
254    int mLen = MOD_LEN(pME);  in gs_mont_redX()  local
256    cpMontRedAdx_BNU(pr, prod, pm, mLen, k0);  in gs_mont_redX()
278    int mLen = MOD_LEN(pME);  in gs_mont_mul()  local
289       for(i=0; i<mLen; i++) pBuffer[i] = 0;  in gs_mont_mul()
292       for(i=0; i<mLen; i++) {  in gs_mont_mul()
315          for(j=1; j<mLen; j++) {  in gs_mont_mul()
326          ADD_ABC(carry, pBuffer[mLen-1], ex_ab, ex_mu, carry);  in gs_mont_mul()
329       carry -= cpSub_BNU(pr, pBuffer, pm, mLen);  in gs_mont_mul()
330       cpMaskMove_gs(pr, pBuffer, mLen, cpIsNonZero(carry));  in gs_mont_mul()
343    int mLen = MOD_LEN(pME);  in gs_mont_mul()  local
349    cpMulAdc_BNU_school(pProduct, pa,mLen, pb,mLen);  in gs_mont_mul()
350    cpMontRedAdc_BNU(pr, pProduct, pm, mLen, m0);  in gs_mont_mul()
361    int mLen = MOD_LEN(pME);  in gs_mont_mulX()  local
367    cpMulAdx_BNU_school(pProduct, pa,mLen, pb,mLen);  in gs_mont_mulX()
368    cpMontRedAdx_BNU(pr, pProduct, pm, mLen, m0);  in gs_mont_mulX()
388    int mLen = MOD_LEN(pME);  in gs_mont_sqr()  local
394    cpSqrAdc_BNU_school(pProduct, pa,mLen);  in gs_mont_sqr()
395    cpMontRedAdc_BNU(pr, pProduct, pm, mLen, m0);  in gs_mont_sqr()
406    int mLen = MOD_LEN(pME);  in gs_mont_sqrX()  local
412    cpSqrAdx_BNU_school(pProduct, pa,mLen);  in gs_mont_sqrX()
413    cpMontRedAdx_BNU(pr, pProduct, pm, mLen, m0);  in gs_mont_sqrX()
432    int mLen = MOD_LEN(pME);  in gs_mont_encode()  local
438    cpMulAdc_BNU_school(pProduct, pa,mLen, MOD_MNT_R2(pME),mLen);  in gs_mont_encode()
439    cpMontRedAdc_BNU(pr, pProduct, pm, mLen, m0);  in gs_mont_encode()
451    int mLen = MOD_LEN(pME);  in gs_mont_encodeX()  local
457    cpMulAdx_BNU_school(pProduct, pa,mLen, MOD_MNT_R2(pME),mLen);  in gs_mont_encodeX()
458    cpMontRedAdx_BNU(pr, pProduct, pm, mLen, m0);  in gs_mont_encodeX()
474    int mLen = MOD_LEN(pME);  in gs_mont_decode()  local
480    ZEXPAND_COPY_BNU(pProduct, 2*mLen, pa, mLen);  in gs_mont_decode()
481    cpMontRedAdc_BNU(pr, pProduct, MOD_MODULUS(pME), mLen, MOD_MNT_FACTOR(pME));  in gs_mont_decode()
490    int mLen = MOD_LEN(pME);  in gs_mont_decodeX()  local
496    ZEXPAND_COPY_BNU(pProduct, 2*mLen, pa, mLen);  in gs_mont_decodeX()
497    cpMontRedAdx_BNU(pr, pProduct, MOD_MODULUS(pME), mLen, MOD_MNT_FACTOR(pME));  in gs_mont_decodeX()