1298     if (ctx->Vf.p != NULL) {  in rsa_prepare_blinding()
1302         MBEDTLS_MPI_CHK(mbedtls_mpi_mul_mpi(&ctx->Vf, &ctx->Vf, &ctx->Vf));  in rsa_prepare_blinding()
1303         MBEDTLS_MPI_CHK(mbedtls_mpi_mod_mpi(&ctx->Vf, &ctx->Vf, &ctx->N));  in rsa_prepare_blinding()
1315         MBEDTLS_MPI_CHK(mbedtls_mpi_fill_random(&ctx->Vf, ctx->len - 1, f_rng, p_rng));  in rsa_prepare_blinding()
1319         MBEDTLS_MPI_CHK(mbedtls_mpi_mul_mpi(&ctx->Vi, &ctx->Vf, &R));  in rsa_prepare_blinding()
1352 static int rsa_unblind(mbedtls_mpi *T, mbedtls_mpi *Vf, const mbedtls_mpi *N)  in rsa_unblind()  argument
1367     MBEDTLS_MPI_CHK(mbedtls_mpi_grow(Vf, nlimbs));  in rsa_unblind()
1377     mbedtls_mpi_core_montmul(T->p, T->p, Vf->p, nlimbs, N->p, nlimbs, mm, M_T.p);  in rsa_unblind()
1571     MBEDTLS_MPI_CHK(rsa_unblind(&T, &ctx->Vf, &ctx->N));  in mbedtls_rsa_private()
2805     MBEDTLS_MPI_CHK(mbedtls_mpi_copy(&dst->Vf, &src->Vf));  in mbedtls_rsa_copy()
2828     mbedtls_mpi_free(&ctx->Vf);  in mbedtls_rsa_free()