88 	/* We compute bits2octets(hash) here */  in __ecdsa_rfc6979_nonce()
110 	/* We compute bits2octets(hash) here */  in __ecdsa_rfc6979_nonce()
125 	 * 3.  Compute:  in __ecdsa_rfc6979_nonce()
131 	 * Otherwise, compute:  in __ecdsa_rfc6979_nonce()
231  *|  UF	 1. Compute h = H(m)
236  *|   F	 5. Compute W = (W_x,W_y) = kG
237  *|   F	 6. Compute r = W_x mod q
240  *|   F	 9. Compute s = k^-1 * (xr + e) mod q
309 	/* 1. Compute h = H(m) */  in __ecdsa_sign_update()
382 	/* 1. Compute h = H(m) */  in __ecdsa_sign_finalize()
404 	 * 3. Compute e = OS2I(h) mod q, i.e. by converting h to an  in __ecdsa_sign_finalize()
475 	/* 5. Compute W = (W_x,W_y) = kG */  in __ecdsa_sign_finalize()
486 	/* 6. Compute r = W_x mod q */  in __ecdsa_sign_finalize()
520 	/* 9. Compute s = k^-1 * (xr + e) mod q */  in __ecdsa_sign_finalize()
528 	 * In case of blinding, we compute (b*k)^-1, and b^-1 will  in __ecdsa_sign_finalize()
533 	/* Compute k^-1 mod q */  in __ecdsa_sign_finalize()
602  *|  UF	 2. Compute h = H(m)
605  *|   F	 4. Compute e = OS2I(h) mod q
606  *|   F	 5. Compute u = (s^-1)e mod q
607  *|   F	 6. Compute v = (s^-1)r mod q
608  *|   F	 7. Compute W' = uG + vY
610  *|   F	 9. Compute r' = W'_x mod q
693 	/* 2. Compute h = H(m) */  in __ecdsa_verify_update()
745 	/* 2. Compute h = H(m) */  in __ecdsa_verify_finalize()
766 	 * 4. Compute e = OS2I(h) mod q, by converting h to an integer  in __ecdsa_verify_finalize()
780 	/* Compute s^-1 mod q */  in __ecdsa_verify_finalize()
785 	/* 5. Compute u = (s^-1)e mod q */  in __ecdsa_verify_finalize()
790 	/* 6. Compute v = (s^-1)r mod q */  in __ecdsa_verify_finalize()
795 	/* 7. Compute W' = uG + vY */  in __ecdsa_verify_finalize()
802 	/* 9. Compute r' = W'_x mod q */  in __ecdsa_verify_finalize()
934 	 * Compute e.  in __ecdsa_public_key_from_sig()
981 	/* Now compute u = (-e r^-1) mod q, and v = (s r^-1) mod q */  in __ecdsa_public_key_from_sig()
992 	/* Compute uG */  in __ecdsa_public_key_from_sig()
994 	/* Compute vR1 and possible Y1 */  in __ecdsa_public_key_from_sig()
997 	/* Compute vR2 and possible Y2 */  in __ecdsa_public_key_from_sig()