149   int words = (bits + BN_BITS2 - 1) / BN_BITS2;  in BN_rand()  local
154   if (!bn_wexpand(rnd, words)) {  in BN_rand()
158   RAND_bytes((uint8_t *)rnd->d, words * sizeof(BN_ULONG));  in BN_rand()
159   rnd->d[words - 1] &= mask;  in BN_rand()
163         rnd->d[words - 1] |= 1;  in BN_rand()
164         rnd->d[words - 2] |= kOne << (BN_BITS2 - 1);  in BN_rand()
166         rnd->d[words - 1] |= kThree << (bit - 1);  in BN_rand()
169       rnd->d[words - 1] |= kOne << bit;  in BN_rand()
177   rnd->width = words;  in BN_rand()
220   size_t words = len;  in bn_range_to_mask()  local
221   while (words > 0 && max_exclusive[words - 1] == 0) {  in bn_range_to_mask()
222     words--;  in bn_range_to_mask()
224   if (words == 0 ||  in bn_range_to_mask()
225       (words == 1 && max_exclusive[0] <= min_inclusive)) {  in bn_range_to_mask()
229   BN_ULONG mask = max_exclusive[words - 1];  in bn_range_to_mask()
240   *out_words = words;  in bn_range_to_mask()
255   size_t words;  in bn_rand_range_words()  local
257   if (!bn_range_to_mask(&words, &mask, min_inclusive, max_exclusive, len)) {  in bn_rand_range_words()
262   OPENSSL_memset(out + words, 0, (len - words) * sizeof(BN_ULONG));  in bn_rand_range_words()
273     RAND_bytes_with_additional_data((uint8_t *)out, words * sizeof(BN_ULONG),  in bn_rand_range_words()
275     out[words - 1] &= mask;  in bn_rand_range_words()
279   } while (!bn_in_range_words(out, min_inclusive, max_exclusive, words));  in bn_rand_range_words()
299   size_t words;  in bn_rand_secret_range()  local
301   if (!bn_range_to_mask(&words, &mask, min_inclusive, max_exclusive->d,  in bn_rand_secret_range()
303       !bn_wexpand(r, words)) {  in bn_rand_secret_range()
307   assert(words > 0);  in bn_rand_secret_range()
310   if (words == 1 && min_inclusive > mask >> 1) {  in bn_rand_secret_range()
316   RAND_bytes((uint8_t *)r->d, words * sizeof(BN_ULONG));  in bn_rand_secret_range()
317   r->d[words - 1] &= mask;  in bn_rand_secret_range()
321       bn_in_range_words(r->d, min_inclusive, max_exclusive->d, words);  in bn_rand_secret_range()
327   r->d[words - 1] &= constant_time_select_w(in_range, BN_MASK2, mask >> 1);  in bn_rand_secret_range()
328   assert(bn_in_range_words(r->d, min_inclusive, max_exclusive->d, words));  in bn_rand_secret_range()
331   r->width = words;  in bn_rand_secret_range()