BN_MASK2
r[0] = (t1 - t2 - c) & BN_MASK2;
r[1] = (t1 - t2 - c) & BN_MASK2;
r[2] = (t1 - t2 - c) & BN_MASK2;
r[3] = (t1 - t2 - c) & BN_MASK2;
t2 = (t1 + carry) & BN_MASK2;
t2 = (t1 - borrow) & BN_MASK2;
c1 = (tp[num] + c0) & BN_MASK2;
c1 = (tp[num] + c0) & BN_MASK2;
return BN_MASK2;
h = ((h << BN_BITS4) | (l >> BN_BITS4)) & BN_MASK2;
r[0] = (BN_ULONG)ll & BN_MASK2;
r[1] = (BN_ULONG)ll & BN_MASK2;
r[2] = (BN_ULONG)ll & BN_MASK2;
r[3] = (BN_ULONG)ll & BN_MASK2;
r[0] = (BN_ULONG)ll & BN_MASK2;
t = (t + c) & BN_MASK2;
l = (t + b[0]) & BN_MASK2;
t = (t + c) & BN_MASK2;
l = (t + b[1]) & BN_MASK2;
t = (t + c) & BN_MASK2;
l = (t + b[2]) & BN_MASK2;
t = (t + c) & BN_MASK2;
l = (t + b[3]) & BN_MASK2;
t = (t + c) & BN_MASK2;
l = (t + b[0]) & BN_MASK2;
t2 = (t1 - c) & BN_MASK2;
t1 = (t2 - t1) & BN_MASK2;
t2 = (t1 - c) & BN_MASK2;
t1 = (t2 - t1) & BN_MASK2;
t2 = (t1 - c) & BN_MASK2;
t1 = (t2 - t1) & BN_MASK2;
t2 = (t1 - c) & BN_MASK2;
t1 = (t2 - t1) & BN_MASK2;
t2 = (t1 - c) & BN_MASK2;
t1 = (t2 - t1) & BN_MASK2;
c1 = (c1 + hi) & BN_MASK2; \
c1 = (c1 + hi) & BN_MASK2; \
c1 = (c1 + hi) & BN_MASK2; \
c1 = (c1 + hi) & BN_MASK2; \
c0 = (c0 + lo) & BN_MASK2; \
c1 = (c1 + hi) & BN_MASK2; \
c0 = (c0 + lo) & BN_MASK2; \
c1 = (c1 + tt) & BN_MASK2; \
c0 = (c0 + lo) & BN_MASK2; \
c1 = (c1 + hi) & BN_MASK2; \
c0 = (c0 + lo) & BN_MASK2; \
c1 = (c1 + hi) & BN_MASK2; \
c1 = (tp[num] + c0) & BN_MASK2;
ml = (c1 * n0) & BN_MASK2;
tp[j - 1] = c1 & BN_MASK2;
c1 = (tp[num] + c0) & BN_MASK2;
return (Q | mask) & BN_MASK2;
d[i] = ((n << lshift) | m) & BN_MASK2;
q = BN_MASK2;
rem = (n1 - q * d0) & BN_MASK2;
rem = (n1 - q * d0) & BN_MASK2;
r->d[0] = (0 - m->d[0]) & BN_MASK2;
r->d[i] = (~m->d[i]) & BN_MASK2;
ret = a->d[wordpos] & BN_MASK2;
return ret & BN_MASK2;
tmp.d[0] = (0 - m->d[0]) & BN_MASK2;
tmp.d[i] = (~m->d[i]) & BN_MASK2;
udp[i] = ((u0 >> 1) | (u1 << (BN_BITS2 - 1))) & BN_MASK2;
bdp[i] = ((b0 >> 1) | (b1 << (BN_BITS2 - 1))) & BN_MASK2;
mask = (0 - x) & BN_MASK2;
mask = (0 - x) & BN_MASK2;
mask = (0 - x) & BN_MASK2;
mask = (0 - x) & BN_MASK2;
mask = (0 - x) & BN_MASK2;
mask = (0 - x) & BN_MASK2;
return BN_MASK2;
a->d[w] &= ~(BN_MASK2 << b);
#define Lw(t) (((BN_ULONG)(t)) & BN_MASK2)
#define Hw(t) (((BN_ULONG)((t) >> BN_BITS2)) & BN_MASK2)
#define L2HBITS(a) (((a) << BN_BITS4) & BN_MASK2)
m = (m + m1) & BN_MASK2; \
lt = (lt + m1) & BN_MASK2; \
l = (l + m) & BN_MASK2; \
l = (l + (c)) & BN_MASK2; \
l = (l + (c)) & BN_MASK2; \
(c) = h & BN_MASK2; \
h += ((l & BN_MASK2) < (c)); \
(c) = h & BN_MASK2; \
(r) = l & BN_MASK2; \
ta = ((ap[i] & mask) + carry) & BN_MASK2;
rp[i] = (rp[i] + ta) & BN_MASK2;
ta = ((ap[i] & mask) + carry) & BN_MASK2;
rp[i] = (rp[i] + ta) & BN_MASK2;
temp = ((ap[ai] & mask) + carry) & BN_MASK2;
tp[i] = ((bp[bi] & mask) + temp) & BN_MASK2;
v = bn_mul_add_words(rp, np, nl, (rp[0] * n0) & BN_MASK2);
v = (v + carry + rp[nl]) & BN_MASK2;
Ri->d[0] = BN_MASK2;
Ri->d[1] = BN_MASK2;
if (!BN_set_word(Ri, BN_MASK2))
r[3] = (t - c) & BN_MASK2;
ln = (lo + c1) & BN_MASK2;
ln = (lo + 1) & BN_MASK2;
ln = (lo + c1) & BN_MASK2;
r[0] = (0 - t - c) & BN_MASK2;
ln = (lo + 1) & BN_MASK2;
r[1] = (0 - t - c) & BN_MASK2;
r[2] = (0 - t - c) & BN_MASK2;
r[3] = (0 - t - c) & BN_MASK2;
r[0] = (t - c) & BN_MASK2;
r[1] = (t - c) & BN_MASK2;
r[2] = (t - c) & BN_MASK2;
*(ap++) = ((t << 1) | c) & BN_MASK2;
#define BN_NIST_521_TOP_MASK ((BN_ULONG)BN_MASK2 >> BN_NIST_521_LSHIFT)
t_d[i] = (tmp | val << BN_NIST_521_LSHIFT) & BN_MASK2;
t_d[i] = (val >> BN_NIST_521_RSHIFT | (tmp = t_d[i + 1]) << BN_NIST_521_LSHIFT) & BN_MASK2;
*(ap++) = ((t << 1) | c) & BN_MASK2;
BN_ULONG maxdelta = BN_MASK2 - primes[trial_divisions - 1];
BN_ULONG maxdelta = BN_MASK2 - primes[trial_divisions - 1];
if (maxdelta > BN_MASK2 - BN_get_word(add))
maxdelta = BN_MASK2 - BN_get_word(add);
t[i] = (m | ((l >> rb) & rmask)) & BN_MASK2;
t[0] = (l << lb) & BN_MASK2;
*(rp++) = ((t << 1) | c) & BN_MASK2;
rp[i] = ((t >> 1) & BN_MASK2) | c;
ln = (lo + c1) & BN_MASK2;
ln = (lo + 1) & BN_MASK2;
w &= BN_MASK2;
a->d[i] = l = (a->d[i] + w) & BN_MASK2;
w &= BN_MASK2;
a->d[i] = (a->d[i] - w) & BN_MASK2;
w &= BN_MASK2;
w &= BN_MASK2;
w &= BN_MASK2;
ret = (l - ((d * w) & BN_MASK2)) & BN_MASK2;