tree 93562b86970c2d0cd9dab5bdcba365465401beb2
parent e6eef1ca16a022e476bbaedffef044597cfc8f4b
author Adam Langley <agl@google.com> 1542232597 -0800
committer Adam Langley <agl@google.com> 1542235092 +0000

Contract P-224 elements before returning them.

cfd50c63 switched to using the add/dbl of p224_64.c, but the outputs
weren't contracted before being returned and could be out of range,
giving invalid results.

Change-Id: I3cc295c7ddbff43375770dbafe73b37a668e4e6b
Reviewed-on: https://boringssl-review.googlesource.com/c/33184
Reviewed-by: David Benjamin <davidben@google.com>
Commit-Queue: Adam Langley <agl@google.com>