358 	BIGNUM *Ri,*R;  in BN_MONT_CTX_set()  local
361 	if((Ri = BN_CTX_get(ctx)) == NULL) goto err;  in BN_MONT_CTX_set()
391 		if ((BN_mod_inverse(Ri,R,&tmod,ctx)) == NULL)  in BN_MONT_CTX_set()
393 		if (!BN_lshift(Ri,Ri,2*BN_BITS2)) goto err; /* R*Ri */  in BN_MONT_CTX_set()
394 		if (!BN_is_zero(Ri))  in BN_MONT_CTX_set()
396 			if (!BN_sub_word(Ri,1)) goto err;  in BN_MONT_CTX_set()
400 			if (bn_expand(Ri,(int)sizeof(BN_ULONG)*2) == NULL)  in BN_MONT_CTX_set()
403 			Ri->neg=0;  in BN_MONT_CTX_set()
404 			Ri->d[0]=BN_MASK2;  in BN_MONT_CTX_set()
405 			Ri->d[1]=BN_MASK2;  in BN_MONT_CTX_set()
406 			Ri->top=2;  in BN_MONT_CTX_set()
408 		if (!BN_div(Ri,NULL,Ri,&tmod,ctx)) goto err;  in BN_MONT_CTX_set()
411 		mont->n0[0] = (Ri->top > 0) ? Ri->d[0] : 0;  in BN_MONT_CTX_set()
412 		mont->n0[1] = (Ri->top > 1) ? Ri->d[1] : 0;  in BN_MONT_CTX_set()
421 		if ((BN_mod_inverse(Ri,R,&tmod,ctx)) == NULL)  in BN_MONT_CTX_set()
423 		if (!BN_lshift(Ri,Ri,BN_BITS2)) goto err; /* R*Ri */  in BN_MONT_CTX_set()
424 		if (!BN_is_zero(Ri))  in BN_MONT_CTX_set()
426 			if (!BN_sub_word(Ri,1)) goto err;  in BN_MONT_CTX_set()
430 			if (!BN_set_word(Ri,BN_MASK2)) goto err;  /* Ri-- (mod word size) */  in BN_MONT_CTX_set()
432 		if (!BN_div(Ri,NULL,Ri,&tmod,ctx)) goto err;  in BN_MONT_CTX_set()
435 		mont->n0[0] = (Ri->top > 0) ? Ri->d[0] : 0;  in BN_MONT_CTX_set()
445 		if ((BN_mod_inverse(Ri,R,&mont->N,ctx)) == NULL)  in BN_MONT_CTX_set()
447 		if (!BN_lshift(Ri,Ri,mont->ri)) goto err; /* R*Ri */  in BN_MONT_CTX_set()
448 		if (!BN_sub_word(Ri,1)) goto err;  in BN_MONT_CTX_set()
450 		if (!BN_div(&(mont->Ni),NULL,Ri,&mont->N,ctx)) goto err;  in BN_MONT_CTX_set()