pub fn mul_redc(a: &[u64], b: &[u64], result: &mut [u64], m: &[u64], inv: u64)
See Handbook of Applied Cryptography, Algorithm 14.32, p. 601.