Check the return from BN_sub() in BN_X931_generate_Xpq().