253     mbedtls_ecp_point R;  in mbedtls_ecdsa_sign_restartable()  local
267     mbedtls_ecp_point_init(&R);  in mbedtls_ecdsa_sign_restartable()
317             MBEDTLS_MPI_CHK(mbedtls_ecp_mul_restartable(grp, &R, pk, &grp->G,  in mbedtls_ecdsa_sign_restartable()
321             MBEDTLS_MPI_CHK(mbedtls_mpi_mod_mpi(pr, &R.X, &grp->N));  in mbedtls_ecdsa_sign_restartable()
369     mbedtls_ecp_point_free(&R);  in mbedtls_ecdsa_sign_restartable()
497     mbedtls_ecp_point R;  in mbedtls_ecdsa_verify_restartable()  local
500     mbedtls_ecp_point_init(&R);  in mbedtls_ecdsa_verify_restartable()
562                                                    &R, pu1, &grp->G, pu2, Q, ECDSA_RS_ECP));  in mbedtls_ecdsa_verify_restartable()
564     if (mbedtls_ecp_is_zero(&R)) {  in mbedtls_ecdsa_verify_restartable()
573     MBEDTLS_MPI_CHK(mbedtls_mpi_mod_mpi(&R.X, &R.X, &grp->N));  in mbedtls_ecdsa_verify_restartable()
578     if (mbedtls_mpi_cmp_mpi(&R.X, r) != 0) {  in mbedtls_ecdsa_verify_restartable()
584     mbedtls_ecp_point_free(&R);  in mbedtls_ecdsa_verify_restartable()