1609     mbedtls_mpi RR, T, W[ 2 << MBEDTLS_MPI_WINDOW_SIZE ], Apos;  in mbedtls_mpi_exp_mod()  local
1624     memset( W, 0, sizeof( W ) );  in mbedtls_mpi_exp_mod()
1636     MBEDTLS_MPI_CHK( mbedtls_mpi_grow( &W[1],  j ) );  in mbedtls_mpi_exp_mod()
1669         MBEDTLS_MPI_CHK( mbedtls_mpi_mod_mpi( &W[1], A, N ) );  in mbedtls_mpi_exp_mod()
1671         MBEDTLS_MPI_CHK( mbedtls_mpi_copy( &W[1], A ) );  in mbedtls_mpi_exp_mod()
1673     MBEDTLS_MPI_CHK( mpi_montmul( &W[1], &RR, N, mm, &T ) );  in mbedtls_mpi_exp_mod()
1688         MBEDTLS_MPI_CHK( mbedtls_mpi_grow( &W[j], N->n + 1 ) );  in mbedtls_mpi_exp_mod()
1689         MBEDTLS_MPI_CHK( mbedtls_mpi_copy( &W[j], &W[1]    ) );  in mbedtls_mpi_exp_mod()
1692             MBEDTLS_MPI_CHK( mpi_montmul( &W[j], &W[j], N, mm, &T ) );  in mbedtls_mpi_exp_mod()
1699             MBEDTLS_MPI_CHK( mbedtls_mpi_grow( &W[i], N->n + 1 ) );  in mbedtls_mpi_exp_mod()
1700             MBEDTLS_MPI_CHK( mbedtls_mpi_copy( &W[i], &W[i - 1] ) );  in mbedtls_mpi_exp_mod()
1702             MBEDTLS_MPI_CHK( mpi_montmul( &W[i], &W[1], N, mm, &T ) );  in mbedtls_mpi_exp_mod()
1762             MBEDTLS_MPI_CHK( mpi_montmul( X, &W[wbits], N, mm, &T ) );  in mbedtls_mpi_exp_mod()
1780             MBEDTLS_MPI_CHK( mpi_montmul( X, &W[1], N, mm, &T ) );  in mbedtls_mpi_exp_mod()
1797         mbedtls_mpi_free( &W[i] );  in mbedtls_mpi_exp_mod()
1799     mbedtls_mpi_free( &W[1] ); mbedtls_mpi_free( &T ); mbedtls_mpi_free( &Apos );  in mbedtls_mpi_exp_mod()
2047     mbedtls_mpi W, R, T, A, RR;  in mpi_miller_rabin()  local
2049     mbedtls_mpi_init( &W ); mbedtls_mpi_init( &R ); mbedtls_mpi_init( &T ); mbedtls_mpi_init( &A );  in mpi_miller_rabin()
2056     MBEDTLS_MPI_CHK( mbedtls_mpi_sub_int( &W, X, 1 ) );  in mpi_miller_rabin()
2057     s = mbedtls_mpi_lsb( &W );  in mpi_miller_rabin()
2058     MBEDTLS_MPI_CHK( mbedtls_mpi_copy( &R, &W ) );  in mpi_miller_rabin()
2076         if( mbedtls_mpi_cmp_mpi( &A, &W ) >= 0 )  in mpi_miller_rabin()
2078             j = mbedtls_mpi_bitlen( &A ) - mbedtls_mpi_bitlen( &W );  in mpi_miller_rabin()
2088             k = mbedtls_mpi_bitlen( &W );  in mpi_miller_rabin()
2097         } while ( mbedtls_mpi_cmp_mpi( &A, &W ) >= 0 ||  in mpi_miller_rabin()
2105         if( mbedtls_mpi_cmp_mpi( &A, &W ) == 0 ||  in mpi_miller_rabin()
2110         while( j < s && mbedtls_mpi_cmp_mpi( &A, &W ) != 0 )  in mpi_miller_rabin()
2127         if( mbedtls_mpi_cmp_mpi( &A, &W ) != 0 ||  in mpi_miller_rabin()
2136     mbedtls_mpi_free( &W ); mbedtls_mpi_free( &R ); mbedtls_mpi_free( &T ); mbedtls_mpi_free( &A );  in mpi_miller_rabin()