curve: avoid using `montShl`