[openssl/openssl] 10d8a1: Add an extra reduction step to RSAZ mod_exp implem...

[Tomas Mraz]

  Branch: refs/heads/openssl-3.0
  Home:   https://github.openssl.org/openssl/openssl
  Commit: 10d8a109be0fe50315e4eeb0676f6571914cd47a
      https://github.openssl.org/openssl/openssl/commit/10d8a109be0fe50315e4eeb0676f6571914cd47a
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2022-06-16 (Thu, 16 Jun 2022)

  Changed paths:
    M crypto/bn/rsaz_exp.c
    M crypto/bn/rsaz_exp.h
    M crypto/bn/rsaz_exp_x2.c
    M test/recipes/10-test_bn_data/bnmod.txt

  Log Message:
  -----------
  Add an extra reduction step to RSAZ mod_exp implementations

Inspired by BoringSSL fix by David Benjamin.

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18510)

(cherry picked from commit 6d702cebfce3ffd9d8c0cb2af80a987d3288e7a3)