474     BIGNUM                    *bnY, *bnR, *bnD;  in _cpri__EccCommitCompute()  local
488     bnR = BN_CTX_get(context);  in _cpri__EccCommitCompute()
506     BnFrom2B(bnR, &r->b);  in _cpri__EccCommitCompute()
530         if((retVal = PointMul(group, pL, NULL, pB, bnR, context)) != CRYPT_SUCCESS)  in _cpri__EccCommitCompute()
551              retVal = PointMul(group, pE, NULL, pM, bnR, context);  in _cpri__EccCommitCompute()
555              retVal = PointMul(group, pE, bnR, NULL, NULL, context);  in _cpri__EccCommitCompute()
801    BIGNUM                        *bnR;  in SignEcdsa()  local
817     bnR = BN_CTX_get(context);  in SignEcdsa()
861               BN_bin2bn(R.x.t.buffer, R.x.t.size, bnR);  in SignEcdsa()
862               BN_mod(bnR, bnR, bnN, context);  in SignEcdsa()
864               if(BN_is_zero(bnR))  in SignEcdsa()
907         if( !BN_mod_mul(bnD, bnR, bnD, bnN, context)  in SignEcdsa()
917              ||   !BnTo2B(&rOut->b, bnR, curveData->n->size))  in SignEcdsa()
1070    BIGNUM                  *bnR, *bnN, *bnK, *bnT, *bnD;  in SchnorrEcc()  local
1101    bnR = BN_CTX_get(context);  in SchnorrEcc()
1134        EC_POINT_get_affine_coordinates_GFp(group, pR, bnR, NULL, context);  in SchnorrEcc()
1136         BN_mod(bnR, bnR, bnN, context);  in SchnorrEcc()
1138        if(BN_is_zero(bnR))  in SchnorrEcc()
1141         BnTo2B(&T2b.b, bnR, (UINT16)(BN_num_bits(bnR)+7)/8);  in SchnorrEcc()
1240    BIGNUM                         *bnR;  in SignSM2()  local
1256    bnR = BN_CTX_get(context);  in SignSM2()
1297        if(!BN_mod_add(bnR, bnE, bnX1, bnN, context))  in SignSM2()
1300 pAssert(cmp_bn2hex(bnR,  in SignSM2()
1305          if(!BN_add(bnT, bnK, bnR))  in SignSM2()
1307         if(BN_is_zero(bnR) || BN_ucmp(bnT, bnN) == 0)  in SignSM2()
1322        if(     !BN_mod_mul(bnS, bnD, bnR, bnN, context) // (r * dA) mod n  in SignSM2()
1336    BnTo2B(&rOut->b, bnR, curveData->n->size);  in SignSM2()
1433    BIGNUM                     *bnR;  in ValidateSignatureEcdsa()  local
1458    bnR = BN_CTX_get(context);  in ValidateSignatureEcdsa()
1485        || BN_bin2bn(rIn->t.buffer, rIn->t.size, bnR) == NULL  in ValidateSignatureEcdsa()
1501       || !BN_mod_mul(bnU2, bnR, bnW, bnN, context))  in ValidateSignatureEcdsa()
1515        if(BN_cmp(bnV, bnR) == 0)  in ValidateSignatureEcdsa()
1620    BIGNUM                         *bnR;  in ValidateSignatureSM2Dsa()  local
1634    bnR = BN_CTX_get(context);  in ValidateSignatureSM2Dsa()
1661    BnFrom2B(bnR, &rIn->b);  in ValidateSignatureSM2Dsa()
1673    fail = (BN_ucmp(bnR, order) >= 0);  in ValidateSignatureSM2Dsa()
1681    if(!BN_mod_add(bnT, bnR, bnS, order, context))  in ValidateSignatureSM2Dsa()
1710    fail = BN_ucmp(bnR, bnRp) != 0 || fail;  in ValidateSignatureSM2Dsa()