crypto/openssl/crypto/bn/bn_lib.c

1152

BN_ULONG limb;

crypto/openssl/crypto/bn/bn_lib.c

1156

limb = a->d[j];

crypto/openssl/crypto/bn/bn_lib.c

1157

limb |= 0 - limb;

crypto/openssl/crypto/bn/bn_lib.c

1158

limb >>= BN_BITS2 - 1;

crypto/openssl/crypto/bn/bn_lib.c

1159

limb = 0 - limb;

crypto/openssl/crypto/bn/bn_lib.c

1160

mask = (unsigned int)limb;

crypto/openssl/crypto/ec/curve448/arch_32/f_impl.h

32

out->limb[i] = a->limb[i] + b->limb[i];

crypto/openssl/crypto/ec/curve448/arch_32/f_impl.h

40

out->limb[i] = a->limb[i] - b->limb[i];

crypto/openssl/crypto/ec/curve448/arch_32/f_impl.h

49

a->limb[i] += (i == NLIMBS / 2) ? co2 : co1;

crypto/openssl/crypto/ec/curve448/arch_32/f_impl.h

55

uint32_t tmp = a->limb[NLIMBS - 1] >> 28;

crypto/openssl/crypto/ec/curve448/arch_32/f_impl.h

58

a->limb[NLIMBS / 2] += tmp;

crypto/openssl/crypto/ec/curve448/arch_32/f_impl.h

60

a->limb[i] = (a->limb[i] & mask) + (a->limb[i - 1] >> 28);

crypto/openssl/crypto/ec/curve448/arch_32/f_impl.h

61

a->limb[0] = (a->limb[0] & mask) + tmp;

crypto/openssl/crypto/ec/curve448/arch_32/f_impl32.c

26

const uint32_t *a = as->limb, *b = bs->limb;

crypto/openssl/crypto/ec/curve448/arch_32/f_impl32.c

27

uint32_t *c = cs->limb;

crypto/openssl/crypto/ec/curve448/arch_32/f_impl32.c

75

const uint32_t *a = as->limb;

crypto/openssl/crypto/ec/curve448/arch_32/f_impl32.c

76

uint32_t *c = cs->limb;

crypto/openssl/crypto/ec/curve448/arch_64/f_impl.h

31

out->limb[i] = a->limb[i] + b->limb[i];

crypto/openssl/crypto/ec/curve448/arch_64/f_impl.h

42

out->limb[i] = a->limb[i] - b->limb[i] + ((i == NLIMBS / 2) ? co2 : co1);

crypto/openssl/crypto/ec/curve448/arch_64/f_impl.h

54

uint64_t tmp = a->limb[NLIMBS - 1] >> 56;

crypto/openssl/crypto/ec/curve448/arch_64/f_impl.h

57

a->limb[NLIMBS / 2] += tmp;

crypto/openssl/crypto/ec/curve448/arch_64/f_impl.h

59

a->limb[i] = (a->limb[i] & mask) + (a->limb[i - 1] >> 56);

crypto/openssl/crypto/ec/curve448/arch_64/f_impl.h

60

a->limb[0] = (a->limb[0] & mask) + tmp;

crypto/openssl/crypto/ec/curve448/arch_64/f_impl64.c

104

const uint64_t *a = as->limb;

crypto/openssl/crypto/ec/curve448/arch_64/f_impl64.c

105

uint64_t *c = cs->limb;

crypto/openssl/crypto/ec/curve448/arch_64/f_impl64.c

26

const uint64_t *a = as->limb, *b = bs->limb;

crypto/openssl/crypto/ec/curve448/arch_64/f_impl64.c

27

uint64_t *c = cs->limb;

crypto/openssl/crypto/ec/curve448/arch_64/f_impl64.c

78

const uint64_t *a = as->limb;

crypto/openssl/crypto/ec/curve448/arch_64/f_impl64.c

79

uint64_t *c = cs->limb;

crypto/openssl/crypto/ec/curve448/curve448.c

251

tab |= (scalar1x->limb[bit / WBITS] >> (bit % WBITS) & 1) << k;

crypto/openssl/crypto/ec/curve448/curve448.c

552

uint64_t current = scalar->limb[0] & 0xFFFF;

crypto/openssl/crypto/ec/curve448/curve448.c

555

const unsigned int B_OVER_16 = sizeof(scalar->limb[0]) / 2;

crypto/openssl/crypto/ec/curve448/curve448.c

572

current += (uint32_t)((scalar->limb[w / B_OVER_16]

crypto/openssl/crypto/ec/curve448/f_generic.c

112

scarry = scarry + a->limb[LIMBPERM(i)] - MODULUS->limb[LIMBPERM(i)];

crypto/openssl/crypto/ec/curve448/f_generic.c

113

a->limb[LIMBPERM(i)] = scarry & LIMB_MASK(LIMBPERM(i));

crypto/openssl/crypto/ec/curve448/f_generic.c

128

carry = carry + a->limb[LIMBPERM(i)] + (scarry_0 & MODULUS->limb[LIMBPERM(i)]);

crypto/openssl/crypto/ec/curve448/f_generic.c

129

a->limb[LIMBPERM(i)] = carry & LIMB_MASK(LIMBPERM(i));

crypto/openssl/crypto/ec/curve448/f_generic.c

162

ret |= c->limb[LIMBPERM(i)];

crypto/openssl/crypto/ec/curve448/f_generic.c

35

buffer |= ((dword_t)red->limb[LIMBPERM(j)]) << fill;

crypto/openssl/crypto/ec/curve448/f_generic.c

52

return 0 - (y->limb[0] & 1);

crypto/openssl/crypto/ec/curve448/f_generic.c

62

return 0 - (y->limb[0] & 1);

crypto/openssl/crypto/ec/curve448/f_generic.c

87

x->limb[LIMBPERM(i)] = (word_t)((i < NLIMBS - 1) ? buffer & LIMB_MASK(LIMBPERM(i)) : buffer);

crypto/openssl/crypto/ec/curve448/f_generic.c

90

scarry = (scarry + x->limb[LIMBPERM(i)] - MODULUS->limb[LIMBPERM(i)]) >> (8 * sizeof(word_t));

crypto/openssl/crypto/ec/curve448/field.h

138

x[0].limb[i] = constant_time_select_32(is_z, z[0].limb[i],

crypto/openssl/crypto/ec/curve448/field.h

139

y[0].limb[i]);

crypto/openssl/crypto/ec/curve448/field.h

142

x[0].limb[i] = constant_time_select_64(is_z, z[0].limb[i],

crypto/openssl/crypto/ec/curve448/field.h

143

y[0].limb[i]);

crypto/openssl/crypto/ec/curve448/field.h

164

constant_time_cond_swap_32(swap, &(x[0].limb[i]), &(y->limb[i]));

crypto/openssl/crypto/ec/curve448/field.h

167

constant_time_cond_swap_64(swap, &(x[0].limb[i]), &(y->limb[i]));

crypto/openssl/crypto/ec/curve448/field.h

36

word_t limb[NLIMBS];

crypto/openssl/crypto/ec/curve448/point_448.h

68

c448_word_t limb[C448_SCALAR_LIMBS];

crypto/openssl/crypto/ec/curve448/scalar.c

108

sc_subx(out, a->limb, b, sc_p, 0);

crypto/openssl/crypto/ec/curve448/scalar.c

118

chain = (chain + a->limb[i]) + b->limb[i];

crypto/openssl/crypto/ec/curve448/scalar.c

119

out->limb[i] = (c448_word_t)chain;

crypto/openssl/crypto/ec/curve448/scalar.c

122

sc_subx(out, out->limb, sc_p, sc_p, (c448_word_t)chain);

crypto/openssl/crypto/ec/curve448/scalar.c

136

s->limb[i] = out;

crypto/openssl/crypto/ec/curve448/scalar.c

149

accum = (accum + s->limb[i] - sc_p->limb[i]) >> WBITS;

crypto/openssl/crypto/ec/curve448/scalar.c

206

ser[k] = s->limb[i] >> (8 * j);

crypto/openssl/crypto/ec/curve448/scalar.c

212

c448_word_t mask = 0 - (a->limb[0] & 1);

crypto/openssl/crypto/ec/curve448/scalar.c

217

chain = (chain + a->limb[i]) + (sc_p->limb[i] & mask);

crypto/openssl/crypto/ec/curve448/scalar.c

218

out->limb[i] = (c448_word_t)chain;

crypto/openssl/crypto/ec/curve448/scalar.c

222

out->limb[i] = out->limb[i] >> 1 | out->limb[i + 1] << (WBITS - 1);

crypto/openssl/crypto/ec/curve448/scalar.c

223

out->limb[i] = out->limb[i] >> 1 | (c448_word_t)(chain << (WBITS - 1));

crypto/openssl/crypto/ec/curve448/scalar.c

47

chain = (chain + accum[i]) - sub->limb[i];

crypto/openssl/crypto/ec/curve448/scalar.c

48

out->limb[i] = (c448_word_t)chain;

crypto/openssl/crypto/ec/curve448/scalar.c

55

chain = (chain + out->limb[i]) + (p->limb[i] & borrow);

crypto/openssl/crypto/ec/curve448/scalar.c

56

out->limb[i] = (c448_word_t)chain;

crypto/openssl/crypto/ec/curve448/scalar.c

69

c448_word_t mand = a->limb[i];

crypto/openssl/crypto/ec/curve448/scalar.c

70

const c448_word_t *mier = b->limb;

crypto/openssl/crypto/ec/curve448/scalar.c

82

mier = sc_p->limb;

crypto/openssl/crypto/ec/ecp_nistp224.c

1094

limb *outlimbs = &out[0][0];

crypto/openssl/crypto/ec/ecp_nistp224.c

1098

const limb *inlimbs = &pre_comp[i][0][0];

crypto/openssl/crypto/ec/ecp_nistp224.c

312

out[0] = *((const limb *)(in)) & 0x00ffffffffffffff;

crypto/openssl/crypto/ec/ecp_nistp224.c

396

static const limb two58p2 = (((limb)1) << 58) + (((limb)1) << 2);

crypto/openssl/crypto/ec/ecp_nistp224.c

397

static const limb two58m2 = (((limb)1) << 58) - (((limb)1) << 2);

crypto/openssl/crypto/ec/ecp_nistp224.c

398

static const limb two58m42m2 = (((limb)1) << 58) - (((limb)1) << 42) - (((limb)1) << 2);

crypto/openssl/crypto/ec/ecp_nistp224.c

462

static void felem_scalar(felem out, const limb scalar)

crypto/openssl/crypto/ec/ecp_nistp224.c

488

limb tmp0, tmp1, tmp2;

crypto/openssl/crypto/ec/ecp_nistp224.c

598

static const int64_t two56 = ((limb)1) << 56;

crypto/openssl/crypto/ec/ecp_nistp224.c

666

static limb felem_is_zero(const felem in)

crypto/openssl/crypto/ec/ecp_nistp224.c

668

limb zero, two224m96p1, two225m97p2;

crypto/openssl/crypto/ec/ecp_nistp224.c

683

return (int)(felem_is_zero(in) & ((limb)1));

crypto/openssl/crypto/ec/ecp_nistp224.c

772

static void copy_conditional(felem out, const felem in, limb icopy)

crypto/openssl/crypto/ec/ecp_nistp224.c

778

const limb copy = -icopy;

crypto/openssl/crypto/ec/ecp_nistp224.c

780

const limb tmp = copy & (in[i] ^ out[i]);

crypto/openssl/crypto/ec/ecp_nistp224.c

79

typedef limb felem[4];

crypto/openssl/crypto/ec/ecp_nistp224.c

900

limb z1_is_zero, z2_is_zero, x_equal, y_equal;

crypto/openssl/crypto/ec/ecp_nistp224.c

901

limb points_equal;

crypto/openssl/crypto/ec/ecp_nistp256.c

116

typedef limb felem[NLIMBS];

crypto/openssl/crypto/ec/ecp_nistp256.c

117

typedef limb longfelem[NLIMBS * 2];

crypto/openssl/crypto/ec/ecp_nistp256.c

1199

static void copy_conditional(felem out, const felem in, limb mask)

crypto/openssl/crypto/ec/ecp_nistp256.c

1203

const limb tmp = mask & (in[i] ^ out[i]);

crypto/openssl/crypto/ec/ecp_nistp256.c

1209

static void copy_small_conditional(felem out, const smallfelem in, limb mask)

crypto/openssl/crypto/ec/ecp_nistp256.c

1214

out[i] = ((limb)(in[i] & mask64)) | (out[i] & ~mask);

crypto/openssl/crypto/ec/ecp_nistp256.c

1238

limb x_equal, y_equal, z1_is_zero, z2_is_zero;

crypto/openssl/crypto/ec/ecp_nistp256.c

1239

limb points_equal;

crypto/openssl/crypto/ec/ecp_nistp256.c

1746

copy_small_conditional(ftmp, tmp[1], (((limb)sign) - 1));

crypto/openssl/crypto/ec/ecp_nistp256.c

246

#define two105m41m9 (((limb)1) << 105) - (((limb)1) << 41) - (((limb)1) << 9)

crypto/openssl/crypto/ec/ecp_nistp256.c

247

#define two105 (((limb)1) << 105)

crypto/openssl/crypto/ec/ecp_nistp256.c

248

#define two105m41p9 (((limb)1) << 105) - (((limb)1) << 41) + (((limb)1) << 9)

crypto/openssl/crypto/ec/ecp_nistp256.c

290

#define two107m43m11 (((limb)1) << 107) - (((limb)1) << 43) - (((limb)1) << 11)

crypto/openssl/crypto/ec/ecp_nistp256.c

291

#define two107 (((limb)1) << 107)

crypto/openssl/crypto/ec/ecp_nistp256.c

292

#define two107m43p11 (((limb)1) << 107) - (((limb)1) << 43) + (((limb)1) << 11)

crypto/openssl/crypto/ec/ecp_nistp256.c

332

static const limb two70m8p6 = (((limb)1) << 70) - (((limb)1) << 8) + (((limb)1) << 6);

crypto/openssl/crypto/ec/ecp_nistp256.c

333

static const limb two70p40 = (((limb)1) << 70) + (((limb)1) << 40);

crypto/openssl/crypto/ec/ecp_nistp256.c

334

static const limb two70 = (((limb)1) << 70);

crypto/openssl/crypto/ec/ecp_nistp256.c

335

static const limb two70m40m38p6 = (((limb)1) << 70) - (((limb)1) << 40) - (((limb)1) << 38) + (((limb)1) << 6);

crypto/openssl/crypto/ec/ecp_nistp256.c

336

static const limb two70m6 = (((limb)1) << 70) - (((limb)1) << 6);

crypto/openssl/crypto/ec/ecp_nistp256.c

359

#define two64m0 (((limb)1) << 64) - 1

crypto/openssl/crypto/ec/ecp_nistp256.c

360

#define two110p32m0 (((limb)1) << 110) + (((limb)1) << 32) - 1

crypto/openssl/crypto/ec/ecp_nistp256.c

361

#define two64m46 (((limb)1) << 64) - (((limb)1) << 46)

crypto/openssl/crypto/ec/ecp_nistp256.c

362

#define two64m32 (((limb)1) << 64) - (((limb)1) << 32)

crypto/openssl/crypto/ec/ecp_nistp256.c

399

tmp[3] += ((limb)a) << 32;

crypto/openssl/crypto/ec/ecp_nistp256.c

407

tmp[3] += ((limb)a) << 32;

crypto/openssl/crypto/ec/ecp_nistp256.c

415

tmp[1] -= (((limb)b) << 32);

crypto/openssl/crypto/ec/ecp_nistp256.c

485

limb a;

crypto/openssl/crypto/ec/ecp_nistp256.c

580

limb a;

crypto/openssl/crypto/ec/ecp_nistp256.c

712

#define two100m36m4 (((limb)1) << 100) - (((limb)1) << 36) - (((limb)1) << 4)

crypto/openssl/crypto/ec/ecp_nistp256.c

713

#define two100 (((limb)1) << 100)

crypto/openssl/crypto/ec/ecp_nistp256.c

714

#define two100m36p4 (((limb)1) << 100) - (((limb)1) << 36) + (((limb)1) << 4)

crypto/openssl/crypto/ec/ecp_nistp256.c

932

static limb smallfelem_is_zero(const smallfelem small)

crypto/openssl/crypto/ec/ecp_nistp256.c

934

limb result;

crypto/openssl/crypto/ec/ecp_nistp256.c

960

result |= ((limb)is_zero) << 64;

crypto/openssl/crypto/ec/ecp_nistp256.c

966

return (int)(smallfelem_is_zero(small) & ((limb)1));

crypto/openssl/crypto/ec/ecp_nistp384.c

1084

static void copy_conditional(felem out, const felem in, limb mask)

crypto/openssl/crypto/ec/ecp_nistp384.c

109

typedef limb limb_aX __attribute((__aligned__(1)));

crypto/openssl/crypto/ec/ecp_nistp384.c

110

typedef limb felem[NLIMBS];

crypto/openssl/crypto/ec/ecp_nistp384.c

1110

limb x_equal, y_equal, z1_is_zero, z2_is_zero;

crypto/openssl/crypto/ec/ecp_nistp384.c

1111

limb points_equal;

crypto/openssl/crypto/ec/ecp_nistp384.c

113

static const limb bottom56bits = 0xffffffffffffff;

crypto/openssl/crypto/ec/ecp_nistp384.c

119

out[0] = (*((limb *)&in[0])) & bottom56bits;

crypto/openssl/crypto/ec/ecp_nistp384.c

131

(*((limb *)&out[0])) |= (in[0] & bottom56bits);

crypto/openssl/crypto/ec/ecp_nistp384.c

1368

static void select_point(const limb idx, unsigned int size,

crypto/openssl/crypto/ec/ecp_nistp384.c

1372

limb *outlimbs = &out[0][0];

crypto/openssl/crypto/ec/ecp_nistp384.c

1377

const limb *inlimbs = &pre_comp[i][0][0];

crypto/openssl/crypto/ec/ecp_nistp384.c

1378

limb mask = i ^ idx;

crypto/openssl/crypto/ec/ecp_nistp384.c

1414

limb bits;

crypto/openssl/crypto/ec/ecp_nistp384.c

1471

copy_conditional(tmp[1], tmp[3], (-(limb)sign));

crypto/openssl/crypto/ec/ecp_nistp384.c

176

memset(&out[1], 0, sizeof(limb) * (NLIMBS - 1));

crypto/openssl/crypto/ec/ecp_nistp384.c

194

static void felem_scalar(felem out, const felem in, limb scalar)

crypto/openssl/crypto/ec/ecp_nistp384.c

203

static void felem_scalar64(felem out, limb scalar)

crypto/openssl/crypto/ec/ecp_nistp384.c

212

static void felem_scalar128(widefelem out, limb scalar)

crypto/openssl/crypto/ec/ecp_nistp384.c

234

static const limb two60m52m4 = (((limb)1) << 60)

crypto/openssl/crypto/ec/ecp_nistp384.c

235

- (((limb)1) << 52)

crypto/openssl/crypto/ec/ecp_nistp384.c

236

- (((limb)1) << 4);

crypto/openssl/crypto/ec/ecp_nistp384.c

237

static const limb two60p44m12 = (((limb)1) << 60)

crypto/openssl/crypto/ec/ecp_nistp384.c

238

+ (((limb)1) << 44)

crypto/openssl/crypto/ec/ecp_nistp384.c

239

- (((limb)1) << 12);

crypto/openssl/crypto/ec/ecp_nistp384.c

240

static const limb two60m28m4 = (((limb)1) << 60)

crypto/openssl/crypto/ec/ecp_nistp384.c

241

- (((limb)1) << 28)

crypto/openssl/crypto/ec/ecp_nistp384.c

242

- (((limb)1) << 4);

crypto/openssl/crypto/ec/ecp_nistp384.c

243

static const limb two60m4 = (((limb)1) << 60)

crypto/openssl/crypto/ec/ecp_nistp384.c

244

- (((limb)1) << 4);

crypto/openssl/crypto/ec/ecp_nistp384.c

280

static const limb two60m52m4 = (((limb)1) << 60)

crypto/openssl/crypto/ec/ecp_nistp384.c

281

- (((limb)1) << 52)

crypto/openssl/crypto/ec/ecp_nistp384.c

282

- (((limb)1) << 4);

crypto/openssl/crypto/ec/ecp_nistp384.c

283

static const limb two60p44m12 = (((limb)1) << 60)

crypto/openssl/crypto/ec/ecp_nistp384.c

284

+ (((limb)1) << 44)

crypto/openssl/crypto/ec/ecp_nistp384.c

285

- (((limb)1) << 12);

crypto/openssl/crypto/ec/ecp_nistp384.c

286

static const limb two60m28m4 = (((limb)1) << 60)

crypto/openssl/crypto/ec/ecp_nistp384.c

287

- (((limb)1) << 28)

crypto/openssl/crypto/ec/ecp_nistp384.c

288

- (((limb)1) << 4);

crypto/openssl/crypto/ec/ecp_nistp384.c

289

static const limb two60m4 = (((limb)1) << 60)

crypto/openssl/crypto/ec/ecp_nistp384.c

290

- (((limb)1) << 4);

crypto/openssl/crypto/ec/ecp_nistp384.c

860

static limb felem_is_zero(const felem in)

crypto/openssl/crypto/ec/ecp_nistp384.c

862

limb zero, p384;

crypto/openssl/crypto/ec/ecp_nistp384.c

877

return (int)(felem_is_zero(in) & ((limb)1));

crypto/openssl/crypto/ec/ecp_nistp384.c

889

static const int64_t two56 = ((limb)1) << 56;

crypto/openssl/crypto/ec/ecp_nistp521.c

1102

static void copy_conditional(felem out, const felem in, limb mask)

crypto/openssl/crypto/ec/ecp_nistp521.c

1106

const limb tmp = mask & (in[i] ^ out[i]);

crypto/openssl/crypto/ec/ecp_nistp521.c

1129

limb x_equal, y_equal, z1_is_zero, z2_is_zero;

crypto/openssl/crypto/ec/ecp_nistp521.c

1130

limb points_equal;

crypto/openssl/crypto/ec/ecp_nistp521.c

132

typedef limb limb_aX __attribute((__aligned__(1)));

crypto/openssl/crypto/ec/ecp_nistp521.c

133

typedef limb felem[NLIMBS];

crypto/openssl/crypto/ec/ecp_nistp521.c

136

static const limb bottom57bits = 0x1ffffffffffffff;

crypto/openssl/crypto/ec/ecp_nistp521.c

137

static const limb bottom58bits = 0x3ffffffffffffff;

crypto/openssl/crypto/ec/ecp_nistp521.c

145

out[0] = (*((limb *)&in[0])) & bottom58bits;

crypto/openssl/crypto/ec/ecp_nistp521.c

1462

static void select_point(const limb idx, unsigned int size,

crypto/openssl/crypto/ec/ecp_nistp521.c

1466

limb *outlimbs = &out[0][0];

crypto/openssl/crypto/ec/ecp_nistp521.c

1471

const limb *inlimbs = &pre_comp[i][0][0];

crypto/openssl/crypto/ec/ecp_nistp521.c

1472

limb mask = i ^ idx;

crypto/openssl/crypto/ec/ecp_nistp521.c

1507

limb bits;

crypto/openssl/crypto/ec/ecp_nistp521.c

1563

copy_conditional(tmp[1], tmp[3], (-(limb)sign));

crypto/openssl/crypto/ec/ecp_nistp521.c

163

(*((limb *)&out[0])) = in[0];

crypto/openssl/crypto/ec/ecp_nistp521.c

247

static void felem_scalar(felem out, const felem in, limb scalar)

crypto/openssl/crypto/ec/ecp_nistp521.c

261

static void felem_scalar64(felem out, limb scalar)

crypto/openssl/crypto/ec/ecp_nistp521.c

275

static void felem_scalar128(largefelem out, limb scalar)

crypto/openssl/crypto/ec/ecp_nistp521.c

298

static const limb two62m3 = (((limb)1) << 62) - (((limb)1) << 5);

crypto/openssl/crypto/ec/ecp_nistp521.c

299

static const limb two62m2 = (((limb)1) << 62) - (((limb)1) << 4);

crypto/openssl/crypto/ec/ecp_nistp521.c

324

static const limb two62m3 = (((limb)1) << 62) - (((limb)1) << 5);

crypto/openssl/crypto/ec/ecp_nistp521.c

325

static const limb two62m2 = (((limb)1) << 62) - (((limb)1) << 4);

crypto/openssl/crypto/ec/ecp_nistp521.c

355

static const limb two63m6 = (((limb)1) << 63) - (((limb)1) << 6);

crypto/openssl/crypto/ec/ecp_nistp521.c

356

static const limb two63m5 = (((limb)1) << 63) - (((limb)1) << 5);

crypto/openssl/crypto/ec/ecp_nistp521.c

513

static const limb bottom52bits = 0xfffffffffffff;

crypto/openssl/crypto/ec/ecp_nistp521.c

526

out[0] = ((limb)in[0]) & bottom58bits;

crypto/openssl/crypto/ec/ecp_nistp521.c

527

out[1] = ((limb)in[1]) & bottom58bits;

crypto/openssl/crypto/ec/ecp_nistp521.c

528

out[2] = ((limb)in[2]) & bottom58bits;

crypto/openssl/crypto/ec/ecp_nistp521.c

529

out[3] = ((limb)in[3]) & bottom58bits;

crypto/openssl/crypto/ec/ecp_nistp521.c

530

out[4] = ((limb)in[4]) & bottom58bits;

crypto/openssl/crypto/ec/ecp_nistp521.c

531

out[5] = ((limb)in[5]) & bottom58bits;

crypto/openssl/crypto/ec/ecp_nistp521.c

532

out[6] = ((limb)in[6]) & bottom58bits;

crypto/openssl/crypto/ec/ecp_nistp521.c

533

out[7] = ((limb)in[7]) & bottom58bits;

crypto/openssl/crypto/ec/ecp_nistp521.c

534

out[8] = ((limb)in[8]) & bottom58bits;

crypto/openssl/crypto/ec/ecp_nistp521.c

538

out[1] += ((limb)in[0]) >> 58;

crypto/openssl/crypto/ec/ecp_nistp521.c

539

out[1] += (((limb)(in[0] >> 64)) & bottom52bits) << 6;

crypto/openssl/crypto/ec/ecp_nistp521.c

544

out[2] += ((limb)(in[0] >> 64)) >> 52;

crypto/openssl/crypto/ec/ecp_nistp521.c

546

out[2] += ((limb)in[1]) >> 58;

crypto/openssl/crypto/ec/ecp_nistp521.c

547

out[2] += (((limb)(in[1] >> 64)) & bottom52bits) << 6;

crypto/openssl/crypto/ec/ecp_nistp521.c

548

out[3] += ((limb)(in[1] >> 64)) >> 52;

crypto/openssl/crypto/ec/ecp_nistp521.c

550

out[3] += ((limb)in[2]) >> 58;

crypto/openssl/crypto/ec/ecp_nistp521.c

551

out[3] += (((limb)(in[2] >> 64)) & bottom52bits) << 6;

crypto/openssl/crypto/ec/ecp_nistp521.c

552

out[4] += ((limb)(in[2] >> 64)) >> 52;

crypto/openssl/crypto/ec/ecp_nistp521.c

554

out[4] += ((limb)in[3]) >> 58;

crypto/openssl/crypto/ec/ecp_nistp521.c

555

out[4] += (((limb)(in[3] >> 64)) & bottom52bits) << 6;

crypto/openssl/crypto/ec/ecp_nistp521.c

556

out[5] += ((limb)(in[3] >> 64)) >> 52;

crypto/openssl/crypto/ec/ecp_nistp521.c

558

out[5] += ((limb)in[4]) >> 58;

crypto/openssl/crypto/ec/ecp_nistp521.c

559

out[5] += (((limb)(in[4] >> 64)) & bottom52bits) << 6;

crypto/openssl/crypto/ec/ecp_nistp521.c

560

out[6] += ((limb)(in[4] >> 64)) >> 52;

crypto/openssl/crypto/ec/ecp_nistp521.c

562

out[6] += ((limb)in[5]) >> 58;

crypto/openssl/crypto/ec/ecp_nistp521.c

563

out[6] += (((limb)(in[5] >> 64)) & bottom52bits) << 6;

crypto/openssl/crypto/ec/ecp_nistp521.c

564

out[7] += ((limb)(in[5] >> 64)) >> 52;

crypto/openssl/crypto/ec/ecp_nistp521.c

566

out[7] += ((limb)in[6]) >> 58;

crypto/openssl/crypto/ec/ecp_nistp521.c

567

out[7] += (((limb)(in[6] >> 64)) & bottom52bits) << 6;

crypto/openssl/crypto/ec/ecp_nistp521.c

568

out[8] += ((limb)(in[6] >> 64)) >> 52;

crypto/openssl/crypto/ec/ecp_nistp521.c

570

out[8] += ((limb)in[7]) >> 58;

crypto/openssl/crypto/ec/ecp_nistp521.c

571

out[8] += (((limb)(in[7] >> 64)) & bottom52bits) << 6;

crypto/openssl/crypto/ec/ecp_nistp521.c

576

overflow1 = ((limb)(in[7] >> 64)) >> 52;

crypto/openssl/crypto/ec/ecp_nistp521.c

578

overflow1 += ((limb)in[8]) >> 58;

crypto/openssl/crypto/ec/ecp_nistp521.c

579

overflow1 += (((limb)(in[8] >> 64)) & bottom52bits) << 6;

crypto/openssl/crypto/ec/ecp_nistp521.c

580

overflow2 = ((limb)(in[8] >> 64)) >> 52;

crypto/openssl/crypto/ec/ecp_nistp521.c

780

static limb felem_is_zero(const felem in)

crypto/openssl/crypto/ec/ecp_nistp521.c

783

limb is_zero, is_p;

crypto/openssl/crypto/ec/ecp_nistp521.c

850

return (int)(felem_is_zero(in) & ((limb)1));

crypto/openssl/crypto/ec/ecp_nistp521.c

860

limb is_p, is_greater, sign;

crypto/openssl/crypto/ec/ecp_nistp521.c

861

static const limb two58 = ((limb)1) << 58;