EC_METHOD based on bn_mont2 (not used in the library)