It's defined to return one in Montgomery form, not a normal one. (Not that this matters. This function is only used to Fermat's Little Theorem. Probably it should have been less general, though we'd need to make new test vectors first.) Change-Id: Ia8d7588e6a413b25f01280af9aacef0192283771 Reviewed-on: https://boringssl-review.googlesource.com/27285 Reviewed-by: Adam Langley <agl@google.com>kris/onging/CECPQ3_patch15