use bn_wexpand instead of bn_expand2 (the latter is not needed here,