Bug fix: Montgomery multiplication could produce results with the wrong