BN_add(k2, k2, order);
T(EC_POINT_mul(group, p1, NULL, generator, k1, ctx));
T(EC_POINT_mul(group, p2, NULL, generator, k2, ctx));
BN_add(k2, k2, order);
T(EC_POINT_mul(group, p1, NULL, generator, k1, ctx));
T(EC_POINT_mul(group, p2, NULL, generator, k2, ctx));