BN_BLINDING_COUNTER
ret->counter = BN_BLINDING_COUNTER - 1;
if (++b->counter >= BN_BLINDING_COUNTER) {