181  *|   F  4. Compute W = (W_x,W_y) = kG
183  *|   F  6. If |H| > bitlen(q), set r to beta' rightmost bits of
299 	prj_pt kG;  in _eckcdsa_sign_finalize()  local
316 	kG.magic = WORD(0);  in _eckcdsa_sign_finalize()
329 	ret = local_memset(&kG, 0, sizeof(prj_pt)); EG(ret, err);  in _eckcdsa_sign_finalize()
394 	/* 4. Compute W = (W_x,W_y) = kG */  in _eckcdsa_sign_finalize()
397 	ret = prj_pt_mul_blind(&kG, &k, G); EG(ret, err);  in _eckcdsa_sign_finalize()
399 	ret = prj_pt_mul(&kG, &k, G); EG(ret, err);  in _eckcdsa_sign_finalize()
401 	ret = prj_pt_unique(&kG, &kG); EG(ret, err);  in _eckcdsa_sign_finalize()
402 	dbg_nn_print("W_x", &(kG.X.fp_val));  in _eckcdsa_sign_finalize()
403 	dbg_nn_print("W_y", &(kG.Y.fp_val));  in _eckcdsa_sign_finalize()
407 	ret = fp_export_to_buf(tmp_buf, p_len, &(kG.X)); EG(ret, err);  in _eckcdsa_sign_finalize()
417 	 * 6. If |H| > bitlen(q), set r to beta' rightmost bits of  in _eckcdsa_sign_finalize()
474 	prj_pt_uninit(&kG);  in _eckcdsa_sign_finalize()
529  *|   F 6. Compute W' = sY + eG, where Y is the public key
769 	/* 6. Compute W' = sY + eG, where Y is the public key */  in _eckcdsa_verify_finalize()