Avoid an underflow in ecp_nistp521.c