Do you mean that we should add mpn_sec_add_n and mpn_sec_sub_n? No, I think we should avoid having leaky mpn_add_n and mpn_sub_n. -- Torbjörn Please encrypt, key id 0xC8601622