442 #define mul_add_c(a,b,c0,c1,c2) \  argument
446 	c0=(c0+t1)&BN_MASK2; if ((c0) < t1) t2++; \
449 #define mul_add_c2(a,b,c0,c1,c2) \  argument
455 	c0=(c0+t1)&BN_MASK2;  \
456 	if ((c0 < t1) && (((++t2)&BN_MASK2) == 0)) c2++; \
459 #define sqr_add_c(a,i,c0,c1,c2) \  argument
463 	c0=(c0+t1)&BN_MASK2; if ((c0) < t1) t2++; \
466 #define sqr_add_c2(a,i,j,c0,c1,c2) \  argument
467 	mul_add_c2((a)[i],(a)[j],c0,c1,c2)
471 #define mul_add_c(a,b,c0,c1,c2)	{	\  argument
474 	c0 += t1; t2 += (c0<t1)?1:0;	\
478 #define mul_add_c2(a,b,c0,c1,c2) {	\  argument
483 	c0 += t1; t2 += (c0<t1)?1:0;	\
487 #define sqr_add_c(a,i,c0,c1,c2)	{	\  argument
490 	c0 += t1; t2 += (c0<t1)?1:0;	\
494 #define sqr_add_c2(a,i,j,c0,c1,c2)	\  argument
495 	mul_add_c2((a)[i],(a)[j],c0,c1,c2)
499 #define mul_add_c(a,b,c0,c1,c2)	{	\  argument
503 	c0 += t1; t2 += (c0<t1)?1:0;	\
507 #define mul_add_c2(a,b,c0,c1,c2) {	\  argument
513 	c0 += t1; t2 += (c0<t1)?1:0;	\
517 #define sqr_add_c(a,i,c0,c1,c2)	{	\  argument
521 	c0 += t1; t2 += (c0<t1)?1:0;	\
525 #define sqr_add_c2(a,i,j,c0,c1,c2)	\  argument
526 	mul_add_c2((a)[i],(a)[j],c0,c1,c2)
529 #define mul_add_c(a,b,c0,c1,c2) \  argument
533 	c0=(c0+t1)&BN_MASK2; if ((c0) < t1) t2++; \
536 #define mul_add_c2(a,b,c0,c1,c2) \  argument
544 	c0=(c0+t1)&BN_MASK2;  \
545 	if ((c0 < t1) && (((++t2)&BN_MASK2) == 0)) c2++; \
548 #define sqr_add_c(a,i,c0,c1,c2) \  argument
550 	c0=(c0+t1)&BN_MASK2; if ((c0) < t1) t2++; \
553 #define sqr_add_c2(a,i,j,c0,c1,c2) \  argument
554 	mul_add_c2((a)[i],(a)[j],c0,c1,c2)
849 	BN_ULONG c0,c1,ml,*tp,n0;  in bn_mul_mont()  local
863 	c0 = 0;  in bn_mul_mont()
869 		mul(tp[j],ap[j],ml,mh,c0);  in bn_mul_mont()
872 		mul(tp[j],ap[j],ml,c0);  in bn_mul_mont()
875 	tp[num]   = c0;  in bn_mul_mont()
881 		c0 = 0;  in bn_mul_mont()
887 			mul_add(tp[j],ap[j],ml,mh,c0);  in bn_mul_mont()
890 			mul_add(tp[j],ap[j],ml,c0);  in bn_mul_mont()
892 		c1 = (tp[num] + c0)&BN_MASK2;  in bn_mul_mont()
894 		tp[num+1] = (c1<c0?1:0);  in bn_mul_mont()
898 		c0 = 0;  in bn_mul_mont()
902 		mul_add(c1,np[0],ml,mh,c0);  in bn_mul_mont()
904 		mul_add(c1,ml,np[0],c0);  in bn_mul_mont()
910 			mul_add(c1,np[j],ml,mh,c0);  in bn_mul_mont()
912 			mul_add(c1,ml,np[j],c0);  in bn_mul_mont()
916 		c1        = (tp[num] + c0)&BN_MASK2;  in bn_mul_mont()
918 		tp[num]   = tp[num+1] + (c1<c0?1:0);  in bn_mul_mont()
923 		c0 = bn_sub_words(rp,tp,np,num);  in bn_mul_mont()
924 		if (tp[num]!=0 || c0==0)  in bn_mul_mont()
988 	BN_ULONG c0,c1,*tp,n0=*n0p;  in bn_mul_mont()  local
998 		c0         = bn_mul_add_words(tp,ap,num,bp[i]);  in bn_mul_mont()
999 		c1         = (tp[num] + c0)&BN_MASK2;  in bn_mul_mont()
1001 		tp[num+1]  = (c1<c0?1:0);  in bn_mul_mont()
1003 		c0         = bn_mul_add_words(tp,np,num,tp[0]*n0);  in bn_mul_mont()
1004 		c1         = (tp[num] + c0)&BN_MASK2;  in bn_mul_mont()
1006 		tp[num+1] += (c1<c0?1:0);  in bn_mul_mont()
1012 		c0 = bn_sub_words(rp,tp,np,num);  in bn_mul_mont()
1013 		if (tp[num]!=0 || c0==0)  in bn_mul_mont()