>> operations similar to multiplyToLen and squareToLen?
> intermediate product is never written into memory.
// length result into the accumulator formed of T0, T1, and T2.
// Dusse and Kaliski, Proc. EUROCRYPT 90, pp. 230-237.