Fixed a bug in the secp384r1 code. The carry bits were getting put into the wrong place, which would result in incorrect values in about 1/2^32 of cases.