crypto/openssl/crypto/ec/ecp_sm2p256.c

133

#define BN_MOD_INV(out, in, mod_div, mod_sub, mod) \

crypto/openssl/crypto/ec/ecp_sm2p256.c

155

mod_sub(x1, x1, x2); \

crypto/openssl/crypto/ec/ecp_sm2p256.c

158

mod_sub(x2, x2, x1); \

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

208

uint32_t z = mod_sub(4, *in++);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

21

#define mod_sub_64(a, b) ((uint64_t)mod_sub(a, b))

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

210

*out++ = z | (mod_sub(4, *in++) << 4);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

251

*out++ = mod_sub(4, v & 15);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

252

*out++ = mod_sub(4, (v >> 4) & 15);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

253

*out++ = mod_sub(4, (v >> 8) & 15);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

254

*out++ = mod_sub(4, (v >> 12) & 15);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

255

*out++ = mod_sub(4, (v >> 16) & 15);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

256

*out++ = mod_sub(4, (v >> 20) & 15);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

257

*out++ = mod_sub(4, (v >> 24) & 15);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

258

*out++ = mod_sub(4, v >> 28);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

298

z = mod_sub(2, *in++);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

299

z |= mod_sub(2, *in++) << 3;

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

300

z |= mod_sub(2, *in++) << 6;

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

301

z |= mod_sub(2, *in++) << 9;

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

302

z |= mod_sub(2, *in++) << 12;

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

303

z |= mod_sub(2, *in++) << 15;

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

304

z |= mod_sub(2, *in++) << 18;

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

305

z |= mod_sub(2, *in++) << 21;

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

351

*out++ = mod_sub(2, v & 7);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

352

*out++ = mod_sub(2, (v >> 3) & 7);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

353

*out++ = mod_sub(2, (v >> 6) & 7);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

354

*out++ = mod_sub(2, (v >> 9) & 7);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

355

*out++ = mod_sub(2, (v >> 12) & 7);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

356

*out++ = mod_sub(2, (v >> 15) & 7);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

357

*out++ = mod_sub(2, (v >> 18) & 7);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

358

*out++ = mod_sub(2, (v >> 21) & 7);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

441

*out++ = mod_sub(range, a1 & mask_13_bits);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

442

*out++ = mod_sub(range, (a1 >> 13) & mask_13_bits);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

443

*out++ = mod_sub(range, (a1 >> 26) & mask_13_bits);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

444

*out++ = mod_sub(range, (a1 >> 39) & mask_13_bits);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

445

*out++ = mod_sub(range, (a1 >> 52) | ((a2 << 12) & mask_13_bits));

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

446

*out++ = mod_sub(range, (a2 >> 1) & mask_13_bits);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

447

*out++ = mod_sub(range, (a2 >> 14) & mask_13_bits);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

448

*out++ = mod_sub(range, (a2 >> 27) | (b13 << 5));

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

487

z0 = mod_sub(range, *in++);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

488

z0 |= (z1 = mod_sub(range, *in++)) << 20;

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

489

z1 = (z1 >> 12) | (mod_sub(range, *in++) << 8);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

490

z1 |= (z2 = mod_sub(range, *in++)) << 28;

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

526

*out++ = mod_sub(range, a1 & mask_20_bits);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

527

*out++ = mod_sub(range, (a1 >> 20) | ((a2 & 0xFF) << 12));

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

528

*out++ = mod_sub(range, (a2 >> 8) & mask_20_bits);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

529

*out++ = mod_sub(range, (a2 >> 28) | (a3 << 4));

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

568

z0 = mod_sub(range, *in++);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

569

z0 |= (z1 = mod_sub(range, *in++)) << 18;

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

570

z1 = (z1 >> 14) | (mod_sub(range, *in++) << 4);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

571

z1 |= (z2 = mod_sub(range, *in++)) << 22;

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

606

*out++ = mod_sub(range, a1 & mask_18_bits);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

607

*out++ = mod_sub(range, (a1 >> 18) | ((a2 & 0xF) << 14));

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

608

*out++ = mod_sub(range, (a2 >> 4) & mask_18_bits);

crypto/openssl/crypto/ml_dsa/ml_dsa_encoders.c

609

*out++ = mod_sub(range, (a2 >> 22) | (a3 << 10));

crypto/openssl/crypto/ml_dsa/ml_dsa_key_compress.c

136

uint32_t r_plus_z = mod_sub(w, cs2);

crypto/openssl/crypto/ml_dsa/ml_dsa_key_compress.c

42

r0_adjusted = mod_sub(*r0, 1 << ML_DSA_D_BITS);

crypto/openssl/crypto/ml_dsa/ml_dsa_ntt.c

147

p->coeff[j + offset] = mod_sub(w_even, t_odd);

crypto/openssl/crypto/ml_dsa/ml_dsa_poly.h

57

out->coeff[i] = mod_sub(lhs->coeff[i], rhs->coeff[i]);

crypto/openssl/crypto/ml_dsa/ml_dsa_sample.c

354

out_c->coeff[index] = mod_sub(1, 2 * (signs & 1));

crypto/openssl/crypto/ml_dsa/ml_dsa_sample.c

72

*out = mod_sub(4, nibble);

crypto/openssl/crypto/ml_dsa/ml_dsa_sample.c

91

*out = mod_sub(2, MOD5(nibble));