bug fix: bn_sqr_recursive output is twice its input size.