Problem: bn_mul_normal() misbehaves if the size of b is 0.