107     MBEDTLS_MPI_CHK( mbedtls_mpi_lset( &L, 2 ) );  in dhm_check_range()
108     MBEDTLS_MPI_CHK( mbedtls_mpi_sub_int( &U, P, 2 ) );  in dhm_check_range()
171             MBEDTLS_MPI_CHK( mbedtls_mpi_shift_r( &ctx->X, 1 ) );  in mbedtls_dhm_make_params()
181     MBEDTLS_MPI_CHK( mbedtls_mpi_exp_mod( &ctx->GX, &ctx->G, &ctx->X,  in mbedtls_dhm_make_params()
191     MBEDTLS_MPI_CHK( mbedtls_mpi_write_binary( X, p + 2, n ) ); \  in mbedtls_dhm_make_params()
257             MBEDTLS_MPI_CHK( mbedtls_mpi_shift_r( &ctx->X, 1 ) );  in mbedtls_dhm_make_public()
264     MBEDTLS_MPI_CHK( mbedtls_mpi_exp_mod( &ctx->GX, &ctx->G, &ctx->X,  in mbedtls_dhm_make_public()
270     MBEDTLS_MPI_CHK( mbedtls_mpi_write_binary( &ctx->GX, output, olen ) );  in mbedtls_dhm_make_public()
297         MBEDTLS_MPI_CHK( mbedtls_mpi_copy( &ctx->pX, &ctx->X ) );  in dhm_update_blinding()
298         MBEDTLS_MPI_CHK( mbedtls_mpi_lset( &ctx->Vi, 1 ) );  in dhm_update_blinding()
299         MBEDTLS_MPI_CHK( mbedtls_mpi_lset( &ctx->Vf, 1 ) );  in dhm_update_blinding()
310         MBEDTLS_MPI_CHK( mbedtls_mpi_mul_mpi( &ctx->Vi, &ctx->Vi, &ctx->Vi ) );  in dhm_update_blinding()
311         MBEDTLS_MPI_CHK( mbedtls_mpi_mod_mpi( &ctx->Vi, &ctx->Vi, &ctx->P ) );  in dhm_update_blinding()
313         MBEDTLS_MPI_CHK( mbedtls_mpi_mul_mpi( &ctx->Vf, &ctx->Vf, &ctx->Vf ) );  in dhm_update_blinding()
314         MBEDTLS_MPI_CHK( mbedtls_mpi_mod_mpi( &ctx->Vf, &ctx->Vf, &ctx->P ) );  in dhm_update_blinding()
330             MBEDTLS_MPI_CHK( mbedtls_mpi_shift_r( &ctx->Vi, 1 ) );  in dhm_update_blinding()
338     MBEDTLS_MPI_CHK( mbedtls_mpi_inv_mod( &ctx->Vf, &ctx->Vi, &ctx->P ) );  in dhm_update_blinding()
339     MBEDTLS_MPI_CHK( mbedtls_mpi_exp_mod( &ctx->Vf, &ctx->Vf, &ctx->X, &ctx->P, &ctx->RP ) );  in dhm_update_blinding()
367         MBEDTLS_MPI_CHK( dhm_update_blinding( ctx, f_rng, p_rng ) );  in mbedtls_dhm_calc_secret()
368         MBEDTLS_MPI_CHK( mbedtls_mpi_mul_mpi( &GYb, &ctx->GY, &ctx->Vi ) );  in mbedtls_dhm_calc_secret()
369         MBEDTLS_MPI_CHK( mbedtls_mpi_mod_mpi( &GYb, &GYb, &ctx->P ) );  in mbedtls_dhm_calc_secret()
372         MBEDTLS_MPI_CHK( mbedtls_mpi_copy( &GYb, &ctx->GY ) );  in mbedtls_dhm_calc_secret()
375     MBEDTLS_MPI_CHK( mbedtls_mpi_exp_mod( &ctx->K, &GYb, &ctx->X,  in mbedtls_dhm_calc_secret()
381         MBEDTLS_MPI_CHK( mbedtls_mpi_mul_mpi( &ctx->K, &ctx->K, &ctx->Vf ) );  in mbedtls_dhm_calc_secret()
382         MBEDTLS_MPI_CHK( mbedtls_mpi_mod_mpi( &ctx->K, &ctx->K, &ctx->P ) );  in mbedtls_dhm_calc_secret()
387     MBEDTLS_MPI_CHK( mbedtls_mpi_write_binary( &ctx->K, output, *olen ) );  in mbedtls_dhm_calc_secret()