jack

Thank you! Yes, that's just the sort of thing I was thinking of, but couldn't bring to mind exactly how you'd do it.

I hope there may be a simpler constant-time solution, but I'm not sure if there is or not, and I think this is good enough.

I agree you probably want to divide at the end rather than take mods.