crypto/openssh/ed25519.c

122

static void fe25519_mul(fe25519 *r, const fe25519 *x, const fe25519 *y);

crypto/openssh/ed25519.c

1663

fe25519_mul(&r->x, &p->x, &p->t);

crypto/openssh/ed25519.c

1664

fe25519_mul(&r->y, &p->y, &p->z);

crypto/openssh/ed25519.c

1665

fe25519_mul(&r->z, &p->z, &p->t);

crypto/openssh/ed25519.c

1671

fe25519_mul(&r->t, &p->x, &p->y);

crypto/openssh/ed25519.c

1677

fe25519_mul(&qt, &q->x, &q->y);

crypto/openssh/ed25519.c

1682

fe25519_mul(&a, &a, &t1);

crypto/openssh/ed25519.c

1683

fe25519_mul(&b, &b, &t2);

crypto/openssh/ed25519.c

1686

fe25519_mul(&c, &r->t, &qt); /* C = T1*k*T2 */

crypto/openssh/ed25519.c

1687

fe25519_mul(&c, &c, &ge25519_ec2d);

crypto/openssh/ed25519.c

1691

fe25519_mul(&r->x, &e, &f);

crypto/openssh/ed25519.c

1692

fe25519_mul(&r->y, &h, &g);

crypto/openssh/ed25519.c

1693

fe25519_mul(&r->z, &g, &f);

crypto/openssh/ed25519.c

1694

fe25519_mul(&r->t, &e, &h);

crypto/openssh/ed25519.c

1703

fe25519_mul(&a, &a, &t);

crypto/openssh/ed25519.c

1706

fe25519_mul(&b, &b, &t);

crypto/openssh/ed25519.c

1707

fe25519_mul(&c, &p->t, &q->t); /* C = T1*k*T2 */

crypto/openssh/ed25519.c

1708

fe25519_mul(&c, &c, &ge25519_ec2d);

crypto/openssh/ed25519.c

1709

fe25519_mul(&d, &p->z, &q->z); /* D = Z1*2*Z2 */

crypto/openssh/ed25519.c

1795

fe25519_mul(&den, &num, &ge25519_ecd); /* den = dy^2 */

crypto/openssh/ed25519.c

1803

fe25519_mul(&den6, &den4, &den2);

crypto/openssh/ed25519.c

1804

fe25519_mul(&t, &den6, &num);

crypto/openssh/ed25519.c

1805

fe25519_mul(&t, &t, &den);

crypto/openssh/ed25519.c

1809

fe25519_mul(&t, &t, &num);

crypto/openssh/ed25519.c

1810

fe25519_mul(&t, &t, &den);

crypto/openssh/ed25519.c

1811

fe25519_mul(&t, &t, &den);

crypto/openssh/ed25519.c

1812

fe25519_mul(&r->x, &t, &den);

crypto/openssh/ed25519.c

1816

fe25519_mul(&chk, &chk, &den);

crypto/openssh/ed25519.c

1818

fe25519_mul(&r->x, &r->x, &ge25519_sqrtm1);

crypto/openssh/ed25519.c

1822

fe25519_mul(&chk, &chk, &den);

crypto/openssh/ed25519.c

1830

fe25519_mul(&r->t, &r->x, &r->y);

crypto/openssh/ed25519.c

1838

fe25519_mul(&tx, &p->x, &zi);

crypto/openssh/ed25519.c

1839

fe25519_mul(&ty, &p->y, &zi);

crypto/openssh/ed25519.c

1906

fe25519_mul(&r->t, &r->x, &r->y);

crypto/openssh/ed25519.c

335

fe25519_mul(r, x, x);

crypto/openssh/ed25519.c

355

/* 9 */ fe25519_mul(&z9,&t0,x);

crypto/openssh/ed25519.c

356

/* 11 */ fe25519_mul(&z11,&z9,&z2);

crypto/openssh/ed25519.c

358

/* 2^5 - 2^0 = 31 */ fe25519_mul(&z2_5_0,&t0,&z9);

crypto/openssh/ed25519.c

365

/* 2^10 - 2^0 */ fe25519_mul(&z2_10_0,&t0,&z2_5_0);

crypto/openssh/ed25519.c

370

/* 2^20 - 2^0 */ fe25519_mul(&z2_20_0,&t1,&z2_10_0);

crypto/openssh/ed25519.c

375

/* 2^40 - 2^0 */ fe25519_mul(&t0,&t1,&z2_20_0);

crypto/openssh/ed25519.c

380

/* 2^50 - 2^0 */ fe25519_mul(&z2_50_0,&t0,&z2_10_0);

crypto/openssh/ed25519.c

385

/* 2^100 - 2^0 */ fe25519_mul(&z2_100_0,&t1,&z2_50_0);

crypto/openssh/ed25519.c

390

/* 2^200 - 2^0 */ fe25519_mul(&t1,&t0,&z2_100_0);

crypto/openssh/ed25519.c

395

/* 2^250 - 2^0 */ fe25519_mul(&t0,&t1,&z2_50_0);

crypto/openssh/ed25519.c

402

/* 2^255 - 21 */ fe25519_mul(r,&t1,&z11);

crypto/openssh/ed25519.c

421

/* 9 */ fe25519_mul(&z9,&t,x);

crypto/openssh/ed25519.c

422

/* 11 */ fe25519_mul(&z11,&z9,&z2);

crypto/openssh/ed25519.c

424

/* 2^5 - 2^0 = 31 */ fe25519_mul(&z2_5_0,&t,&z9);

crypto/openssh/ed25519.c

428

/* 2^10 - 2^0 */ fe25519_mul(&z2_10_0,&t,&z2_5_0);

crypto/openssh/ed25519.c

432

/* 2^20 - 2^0 */ fe25519_mul(&z2_20_0,&t,&z2_10_0);

crypto/openssh/ed25519.c

436

/* 2^40 - 2^0 */ fe25519_mul(&t,&t,&z2_20_0);

crypto/openssh/ed25519.c

440

/* 2^50 - 2^0 */ fe25519_mul(&z2_50_0,&t,&z2_10_0);

crypto/openssh/ed25519.c

444

/* 2^100 - 2^0 */ fe25519_mul(&z2_100_0,&t,&z2_50_0);

crypto/openssh/ed25519.c

448

/* 2^200 - 2^0 */ fe25519_mul(&t,&t,&z2_100_0);

crypto/openssh/ed25519.c

452

/* 2^250 - 2^0 */ fe25519_mul(&t,&t,&z2_50_0);

crypto/openssh/ed25519.c

456

/* 2^252 - 3 */ fe25519_mul(r,&t,x);