crypto/openssl/crypto/ec/curve25519.c

409

u128 h0, h1, h2, h3, h4;

crypto/openssl/crypto/ec/curve25519.c

413

h0 = (u128)f_i * (g0 = g[0]);

crypto/openssl/crypto/ec/curve25519.c

414

h1 = (u128)f_i * (g1 = g[1]);

crypto/openssl/crypto/ec/curve25519.c

415

h2 = (u128)f_i * (g2 = g[2]);

crypto/openssl/crypto/ec/curve25519.c

416

h3 = (u128)f_i * (g3 = g[3]);

crypto/openssl/crypto/ec/curve25519.c

417

h4 = (u128)f_i * (g4 = g[4]);

crypto/openssl/crypto/ec/curve25519.c

420

h0 += (u128)f_i * (g4 *= 19);

crypto/openssl/crypto/ec/curve25519.c

421

h1 += (u128)f_i * g0;

crypto/openssl/crypto/ec/curve25519.c

422

h2 += (u128)f_i * g1;

crypto/openssl/crypto/ec/curve25519.c

423

h3 += (u128)f_i * g2;

crypto/openssl/crypto/ec/curve25519.c

424

h4 += (u128)f_i * g3;

crypto/openssl/crypto/ec/curve25519.c

427

h0 += (u128)f_i * (g3 *= 19);

crypto/openssl/crypto/ec/curve25519.c

428

h1 += (u128)f_i * g4;

crypto/openssl/crypto/ec/curve25519.c

429

h2 += (u128)f_i * g0;

crypto/openssl/crypto/ec/curve25519.c

430

h3 += (u128)f_i * g1;

crypto/openssl/crypto/ec/curve25519.c

431

h4 += (u128)f_i * g2;

crypto/openssl/crypto/ec/curve25519.c

434

h0 += (u128)f_i * (g2 *= 19);

crypto/openssl/crypto/ec/curve25519.c

435

h1 += (u128)f_i * g3;

crypto/openssl/crypto/ec/curve25519.c

436

h2 += (u128)f_i * g4;

crypto/openssl/crypto/ec/curve25519.c

437

h3 += (u128)f_i * g0;

crypto/openssl/crypto/ec/curve25519.c

438

h4 += (u128)f_i * g1;

crypto/openssl/crypto/ec/curve25519.c

441

h0 += (u128)f_i * (g1 *= 19);

crypto/openssl/crypto/ec/curve25519.c

442

h1 += (u128)f_i * g2;

crypto/openssl/crypto/ec/curve25519.c

443

h2 += (u128)f_i * g3;

crypto/openssl/crypto/ec/curve25519.c

444

h3 += (u128)f_i * g4;

crypto/openssl/crypto/ec/curve25519.c

445

h4 += (u128)f_i * g0;

crypto/openssl/crypto/ec/curve25519.c

483

u128 h0, h1, h2, h3, h4;

crypto/openssl/crypto/ec/curve25519.c

485

h0 = (u128)g0 * g0;

crypto/openssl/crypto/ec/curve25519.c

487

h1 = (u128)g0 * g1;

crypto/openssl/crypto/ec/curve25519.c

488

h2 = (u128)g0 * g2;

crypto/openssl/crypto/ec/curve25519.c

489

h3 = (u128)g0 * g3;

crypto/openssl/crypto/ec/curve25519.c

490

h4 = (u128)g0 * g4;

crypto/openssl/crypto/ec/curve25519.c

493

h3 += (u128)g0 * (g4 *= 19);

crypto/openssl/crypto/ec/curve25519.c

495

h2 += (u128)g1 * g1;

crypto/openssl/crypto/ec/curve25519.c

497

h3 += (u128)g1 * g2;

crypto/openssl/crypto/ec/curve25519.c

498

h4 += (u128)g1 * g3;

crypto/openssl/crypto/ec/curve25519.c

499

h0 += (u128)g1 * g4;

crypto/openssl/crypto/ec/curve25519.c

502

h1 += (u128)g0 * (g3 *= 19);

crypto/openssl/crypto/ec/curve25519.c

503

h2 += (u128)(g0 * 2) * g4;

crypto/openssl/crypto/ec/curve25519.c

505

h4 += (u128)g2 * g2;

crypto/openssl/crypto/ec/curve25519.c

507

h0 += (u128)g2 * g3;

crypto/openssl/crypto/ec/curve25519.c

508

h1 += (u128)g2 * g4;

crypto/openssl/crypto/ec/curve25519.c

538

u128 h0 = f[0] * (u128)121666;

crypto/openssl/crypto/ec/curve25519.c

539

u128 h1 = f[1] * (u128)121666;

crypto/openssl/crypto/ec/curve25519.c

540

u128 h2 = f[2] * (u128)121666;

crypto/openssl/crypto/ec/curve25519.c

541

u128 h3 = f[3] * (u128)121666;

crypto/openssl/crypto/ec/curve25519.c

542

u128 h4 = f[4] * (u128)121666;

crypto/openssl/crypto/modes/gcm128.c

107

u128 *Hi = Htable + i;

crypto/openssl/crypto/modes/gcm128.c

1551

u128 bitlen;

crypto/openssl/crypto/modes/gcm128.c

168

static void gcm_gmult_4bit(u64 Xi[2], const u128 Htable[16])

crypto/openssl/crypto/modes/gcm128.c

170

u128 Z;

crypto/openssl/crypto/modes/gcm128.c

246

static void gcm_ghash_4bit(u64 Xi[2], const u128 Htable[16],

crypto/openssl/crypto/modes/gcm128.c

249

u128 Z;

crypto/openssl/crypto/modes/gcm128.c

324

void gcm_gmult_4bit(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/crypto/modes/gcm128.c

325

void gcm_ghash_4bit(u64 Xi[2], const u128 Htable[16], const u8 *inp,

crypto/openssl/crypto/modes/gcm128.c

344

void gcm_init_clmul(u128 Htable[16], const u64 Xi[2]);

crypto/openssl/crypto/modes/gcm128.c

345

void gcm_gmult_clmul(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/crypto/modes/gcm128.c

346

void gcm_ghash_clmul(u64 Xi[2], const u128 Htable[16], const u8 *inp,

crypto/openssl/crypto/modes/gcm128.c

354

void gcm_init_avx(u128 Htable[16], const u64 Xi[2]);

crypto/openssl/crypto/modes/gcm128.c

355

void gcm_gmult_avx(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/crypto/modes/gcm128.c

356

void gcm_ghash_avx(u64 Xi[2], const u128 Htable[16], const u8 *inp,

crypto/openssl/crypto/modes/gcm128.c

362

void gcm_gmult_4bit_mmx(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/crypto/modes/gcm128.c

363

void gcm_ghash_4bit_mmx(u64 Xi[2], const u128 Htable[16], const u8 *inp,

crypto/openssl/crypto/modes/gcm128.c

366

void gcm_gmult_4bit_x86(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/crypto/modes/gcm128.c

367

void gcm_ghash_4bit_x86(u64 Xi[2], const u128 Htable[16], const u8 *inp,

crypto/openssl/crypto/modes/gcm128.c

378

void gcm_init_neon(u128 Htable[16], const u64 Xi[2]);

crypto/openssl/crypto/modes/gcm128.c

379

void gcm_gmult_neon(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/crypto/modes/gcm128.c

380

void gcm_ghash_neon(u64 Xi[2], const u128 Htable[16], const u8 *inp,

crypto/openssl/crypto/modes/gcm128.c

382

void gcm_init_v8(u128 Htable[16], const u64 Xi[2]);

crypto/openssl/crypto/modes/gcm128.c

383

void gcm_gmult_v8(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/crypto/modes/gcm128.c

384

void gcm_ghash_v8(u64 Xi[2], const u128 Htable[16], const u8 *inp,

crypto/openssl/crypto/modes/gcm128.c

390

void gcm_init_vis3(u128 Htable[16], const u64 Xi[2]);

crypto/openssl/crypto/modes/gcm128.c

391

void gcm_gmult_vis3(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/crypto/modes/gcm128.c

392

void gcm_ghash_vis3(u64 Xi[2], const u128 Htable[16], const u8 *inp,

crypto/openssl/crypto/modes/gcm128.c

397

void gcm_init_p8(u128 Htable[16], const u64 Xi[2]);

crypto/openssl/crypto/modes/gcm128.c

398

void gcm_gmult_p8(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/crypto/modes/gcm128.c

399

void gcm_ghash_p8(u64 Xi[2], const u128 Htable[16], const u8 *inp,

crypto/openssl/crypto/modes/gcm128.c

405

void gcm_init_rv64i_zbc(u128 Htable[16], const u64 Xi[2]);

crypto/openssl/crypto/modes/gcm128.c

406

void gcm_init_rv64i_zbc__zbb(u128 Htable[16], const u64 Xi[2]);

crypto/openssl/crypto/modes/gcm128.c

407

void gcm_init_rv64i_zbc__zbkb(u128 Htable[16], const u64 Xi[2]);

crypto/openssl/crypto/modes/gcm128.c

408

void gcm_gmult_rv64i_zbc(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/crypto/modes/gcm128.c

409

void gcm_gmult_rv64i_zbc__zbkb(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/crypto/modes/gcm128.c

410

void gcm_ghash_rv64i_zbc(u64 Xi[2], const u128 Htable[16],

crypto/openssl/crypto/modes/gcm128.c

412

void gcm_ghash_rv64i_zbc__zbkb(u64 Xi[2], const u128 Htable[16],

crypto/openssl/crypto/modes/gcm128.c

415

void gcm_init_rv64i_zvkb_zvbc(u128 Htable[16], const u64 Xi[2]);

crypto/openssl/crypto/modes/gcm128.c

416

void gcm_gmult_rv64i_zvkb_zvbc(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/crypto/modes/gcm128.c

417

void gcm_ghash_rv64i_zvkb_zvbc(u64 Xi[2], const u128 Htable[16],

crypto/openssl/crypto/modes/gcm128.c

420

void gcm_init_rv64i_zvkg(u128 Htable[16], const u64 Xi[2]);

crypto/openssl/crypto/modes/gcm128.c

421

void gcm_init_rv64i_zvkg_zvkb(u128 Htable[16], const u64 Xi[2]);

crypto/openssl/crypto/modes/gcm128.c

422

void gcm_gmult_rv64i_zvkg(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/crypto/modes/gcm128.c

423

void gcm_ghash_rv64i_zvkg(u64 Xi[2], const u128 Htable[16],

crypto/openssl/crypto/modes/gcm128.c

563

void ossl_gcm_init_4bit(u128 Htable[16], const u64 H[2])

crypto/openssl/crypto/modes/gcm128.c

571

void ossl_gcm_gmult_4bit(u64 Xi[2], const u128 Htable[16])

crypto/openssl/crypto/modes/gcm128.c

579

void ossl_gcm_ghash_4bit(u64 Xi[2], const u128 Htable[16],

crypto/openssl/crypto/modes/gcm128.c

88

static void gcm_init_4bit(u128 Htable[16], const u64 H[2])

crypto/openssl/crypto/modes/gcm128.c

90

u128 V;

crypto/openssl/crypto/poly1305/poly1305.c

143

u128 d0, d1;

crypto/openssl/crypto/poly1305/poly1305.c

156

h0 = (u64)(d0 = (u128)h0 + U8TOU64(inp + 0));

crypto/openssl/crypto/poly1305/poly1305.c

157

h1 = (u64)(d1 = (u128)h1 + (d0 >> 64) + U8TOU64(inp + 8));

crypto/openssl/crypto/poly1305/poly1305.c

165

d0 = ((u128)h0 * r0) + ((u128)h1 * s1);

crypto/openssl/crypto/poly1305/poly1305.c

166

d1 = ((u128)h0 * r1) + ((u128)h1 * r0) + (h2 * s1);

crypto/openssl/crypto/poly1305/poly1305.c

205

u128 t;

crypto/openssl/crypto/poly1305/poly1305.c

213

g0 = (u64)(t = (u128)h0 + 5);

crypto/openssl/crypto/poly1305/poly1305.c

214

g1 = (u64)(t = (u128)h1 + (t >> 64));

crypto/openssl/crypto/poly1305/poly1305.c

226

h0 = (u64)(t = (u128)h0 + nonce[0] + ((u64)nonce[1] << 32));

crypto/openssl/crypto/poly1305/poly1305.c

227

h1 = (u64)(t = (u128)h1 + nonce[2] + ((u64)nonce[3] << 32) + (t >> 64));

crypto/openssl/crypto/poly1305/poly1305_base2_44.c

107

d0 = ((u128)h0 * r0) + ((u128)h1 * s2) + ((u128)h2 * s1);

crypto/openssl/crypto/poly1305/poly1305_base2_44.c

108

d1 = ((u128)h0 * r1) + ((u128)h1 * r0) + ((u128)h2 * s2);

crypto/openssl/crypto/poly1305/poly1305_base2_44.c

109

d2 = ((u128)h0 * r2) + ((u128)h1 * r1) + ((u128)h2 * r0);

crypto/openssl/crypto/poly1305/poly1305_base2_44.c

133

u128 t;

crypto/openssl/crypto/poly1305/poly1305_base2_44.c

141

h0 = (u64)(t = (u128)h0 + (h1 << 44));

crypto/openssl/crypto/poly1305/poly1305_base2_44.c

143

h1 = (u64)(t = (u128)h1 + (h2 << 24) + (t >> 64));

crypto/openssl/crypto/poly1305/poly1305_base2_44.c

148

g0 = (u64)(t = (u128)h0 + 5);

crypto/openssl/crypto/poly1305/poly1305_base2_44.c

149

g1 = (u64)(t = (u128)h1 + (t >> 64));

crypto/openssl/crypto/poly1305/poly1305_base2_44.c

161

h0 = (u64)(t = (u128)h0 + nonce[0] + ((u64)nonce[1] << 32));

crypto/openssl/crypto/poly1305/poly1305_base2_44.c

162

h1 = (u64)(t = (u128)h1 + nonce[2] + ((u64)nonce[3] << 32) + (t >> 64));

crypto/openssl/crypto/poly1305/poly1305_base2_44.c

81

u128 d0, d1, d2;

crypto/openssl/include/crypto/aes_platform.h

157

void gcm_ghash_v8(u64 Xi[2], const u128 Htable[16], const u8 *inp, size_t len);

crypto/openssl/include/crypto/aes_platform.h

278

void gcm_ghash_avx(u64 Xi[2], const u128 Htable[16], const u8 *in, size_t len);

crypto/openssl/include/crypto/aes_platform.h

486

void gcm_ghash_rv64i_zvkg(u64 Xi[2], const u128 Htable[16], const u8 *inp,

crypto/openssl/include/crypto/aes_platform.h

92

void gcm_ghash_p8(u64 Xi[2], const u128 Htable[16], const u8 *inp, size_t len);

crypto/openssl/include/crypto/modes.h

105

typedef void (*gcm_init_fn)(u128 Htable[16], const u64 H[2]);

crypto/openssl/include/crypto/modes.h

106

typedef void (*gcm_ghash_fn)(u64 Xi[2], const u128 Htable[16], const u8 *inp, size_t len);

crypto/openssl/include/crypto/modes.h

107

typedef void (*gcm_gmult_fn)(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/include/crypto/modes.h

126

u128 Htable[16];

crypto/openssl/include/crypto/modes.h

137

void ossl_gcm_init_4bit(u128 Htable[16], const u64 H[2]);

crypto/openssl/include/crypto/modes.h

138

void ossl_gcm_ghash_4bit(u64 Xi[2], const u128 Htable[16],

crypto/openssl/include/crypto/modes.h

140

void ossl_gcm_gmult_4bit(u64 Xi[2], const u128 Htable[16]);

crypto/openssl/providers/implementations/ciphers/cipher_aes_gcm_siv.h

47

u128 Htable[16]; /* Polyval calculations via ghash */

crypto/openssl/providers/implementations/ciphers/cipher_aes_gcm_siv.h

58

void ossl_polyval_ghash_init(u128 Htable[16], const uint64_t H[2]);

crypto/openssl/providers/implementations/ciphers/cipher_aes_gcm_siv.h

59

void ossl_polyval_ghash_hash(const u128 Htable[16], uint8_t *tag, const uint8_t *inp, size_t len);

crypto/openssl/providers/implementations/ciphers/cipher_aes_gcm_siv_polyval.c

61

void ossl_polyval_ghash_init(u128 Htable[16], const uint64_t H[2])

crypto/openssl/providers/implementations/ciphers/cipher_aes_gcm_siv_polyval.c

78

void ossl_polyval_ghash_hash(const u128 Htable[16], uint8_t *tag, const uint8_t *inp, size_t len)