lib/libcrypto/cast/cast.c

679

CAST_LONG X[4], Z[4];

lib/libcrypto/cast/cast.c

703

CAST_exp(l, Z, z, 0);

lib/libcrypto/cast/cast.c

705

CAST_exp(l, Z, z, 4);

lib/libcrypto/cast/cast.c

707

CAST_exp(l, Z, z, 8);

lib/libcrypto/cast/cast.c

709

CAST_exp(l, Z,z, 12);

lib/libcrypto/cast/cast.c

716

l = Z[2]^S4[z[ 5]]^S5[z[ 7]]^S6[z[ 4]]^S7[z[ 6]]^S6[z[ 0]];

lib/libcrypto/cast/cast.c

718

l = Z[0]^S4[x[ 0]]^S5[x[ 2]]^S6[x[ 1]]^S7[x[ 3]]^S7[z[ 2]];

lib/libcrypto/cast/cast.c

720

l = Z[1]^S4[x[ 7]]^S5[x[ 6]]^S6[x[ 5]]^S7[x[ 4]]^S4[z[ 1]];

lib/libcrypto/cast/cast.c

722

l = Z[3]^S4[x[10]]^S5[x[ 9]]^S6[x[11]]^S7[x[ 8]]^S5[z[ 3]];

lib/libcrypto/cast/cast.c

731

CAST_exp(l, Z, z, 0);

lib/libcrypto/cast/cast.c

733

CAST_exp(l, Z, z, 4);

lib/libcrypto/cast/cast.c

735

CAST_exp(l, Z, z, 8);

lib/libcrypto/cast/cast.c

737

CAST_exp(l, Z,z, 12);

lib/libcrypto/cast/cast.c

744

l = Z[2]^S4[z[ 5]]^S5[z[ 7]]^S6[z[ 4]]^S7[z[ 6]]^S6[z[ 0]];

lib/libcrypto/cast/cast.c

746

l = Z[0]^S4[x[ 0]]^S5[x[ 2]]^S6[x[ 1]]^S7[x[ 3]]^S7[z[ 2]];

lib/libcrypto/cast/cast.c

748

l = Z[1]^S4[x[ 7]]^S5[x[ 6]]^S6[x[ 5]]^S7[x[ 4]]^S4[z[ 1]];

lib/libcrypto/cast/cast.c

750

l = Z[3]^S4[x[10]]^S5[x[ 9]]^S6[x[11]]^S7[x[ 8]]^S5[z[ 3]];

lib/libcrypto/curve25519/curve25519.c

1032

fe_1(h->Z);

lib/libcrypto/curve25519/curve25519.c

1038

fe_1(h->Z);

lib/libcrypto/curve25519/curve25519.c

1045

fe_1(h->Z);

lib/libcrypto/curve25519/curve25519.c

1059

fe_copy(r->Z, p->Z);

lib/libcrypto/curve25519/curve25519.c

1069

fe_copy(r->Z, p->Z);

lib/libcrypto/curve25519/curve25519.c

1076

fe_mul(r->Y, p->Y, p->Z);

lib/libcrypto/curve25519/curve25519.c

1077

fe_mul(r->Z, p->Z, p->T);

lib/libcrypto/curve25519/curve25519.c

1083

fe_mul(r->Y, p->Y, p->Z);

lib/libcrypto/curve25519/curve25519.c

1084

fe_mul(r->Z, p->Z, p->T);

lib/libcrypto/curve25519/curve25519.c

1100

fe_sq(r->Z, p->Y);

lib/libcrypto/curve25519/curve25519.c

1101

fe_sq2(r->T, p->Z);

lib/libcrypto/curve25519/curve25519.c

1104

fe_add(r->Y, r->Z, r->X);

lib/libcrypto/curve25519/curve25519.c

1105

fe_sub(r->Z, r->Z, r->X);

lib/libcrypto/curve25519/curve25519.c

1107

fe_sub(r->T, r->T, r->Z);

lib/libcrypto/curve25519/curve25519.c

1123

fe_mul(r->Z, r->X, q->yplusx);

lib/libcrypto/curve25519/curve25519.c

1126

fe_add(t0, p->Z, p->Z);

lib/libcrypto/curve25519/curve25519.c

1127

fe_sub(r->X, r->Z, r->Y);

lib/libcrypto/curve25519/curve25519.c

1128

fe_add(r->Y, r->Z, r->Y);

lib/libcrypto/curve25519/curve25519.c

1129

fe_add(r->Z, t0, r->T);

lib/libcrypto/curve25519/curve25519.c

1139

fe_mul(r->Z, r->X, q->yminusx);

lib/libcrypto/curve25519/curve25519.c

1142

fe_add(t0, p->Z, p->Z);

lib/libcrypto/curve25519/curve25519.c

1143

fe_sub(r->X, r->Z, r->Y);

lib/libcrypto/curve25519/curve25519.c

1144

fe_add(r->Y, r->Z, r->Y);

lib/libcrypto/curve25519/curve25519.c

1145

fe_sub(r->Z, t0, r->T);

lib/libcrypto/curve25519/curve25519.c

1155

fe_mul(r->Z, r->X, q->YplusX);

lib/libcrypto/curve25519/curve25519.c

1158

fe_mul(r->X, p->Z, q->Z);

lib/libcrypto/curve25519/curve25519.c

1160

fe_sub(r->X, r->Z, r->Y);

lib/libcrypto/curve25519/curve25519.c

1161

fe_add(r->Y, r->Z, r->Y);

lib/libcrypto/curve25519/curve25519.c

1162

fe_add(r->Z, t0, r->T);

lib/libcrypto/curve25519/curve25519.c

1172

fe_mul(r->Z, r->X, q->YminusX);

lib/libcrypto/curve25519/curve25519.c

1175

fe_mul(r->X, p->Z, q->Z);

lib/libcrypto/curve25519/curve25519.c

1177

fe_sub(r->X, r->Z, r->Y);

lib/libcrypto/curve25519/curve25519.c

1178

fe_add(r->Y, r->Z, r->Y);

lib/libcrypto/curve25519/curve25519.c

1179

fe_sub(r->Z, t0, r->T);

lib/libcrypto/curve25519/curve25519.c

3551

fe_cmov(t->Z, u->Z, b);

lib/libcrypto/curve25519/curve25519.c

4901

fe_add(zplusy, A.Z, A.Y);

lib/libcrypto/curve25519/curve25519.c

4902

fe_sub(zminusy, A.Z, A.Y);

lib/libcrypto/curve25519/curve25519.c

961

fe_invert(recip, h->Z);

lib/libcrypto/curve25519/curve25519.c

973

fe_invert(recip, h->Z);

lib/libcrypto/curve25519/curve25519.c

994

fe_1(h->Z);

lib/libcrypto/curve25519/curve25519.c

997

fe_sub(u, u, h->Z); /* u = y^2-1 */

lib/libcrypto/curve25519/curve25519.c

998

fe_add(v, v, h->Z); /* v = dy^2+1 */

lib/libcrypto/curve25519/curve25519_internal.h

46

fe Z;

lib/libcrypto/curve25519/curve25519_internal.h

52

fe Z;

lib/libcrypto/curve25519/curve25519_internal.h

59

fe Z;

lib/libcrypto/curve25519/curve25519_internal.h

72

fe Z;

lib/libcrypto/ec/ec_lib.c

824

if ((point->Z = BN_new()) == NULL)

lib/libcrypto/ec/ec_lib.c

847

BN_free(point->Z);

lib/libcrypto/ec/ec_lib.c

876

if (!bn_copy(dst->Z, src->Z))

lib/libcrypto/ec/ec_local.h

181

BIGNUM *Z;

lib/libcrypto/ec/ec_local.h

277

int ecdh_KDF_X9_63(unsigned char *out, size_t outlen, const unsigned char *Z,

lib/libcrypto/ec/ecp_hp_methods.c

134

if (!BN_one(point->Z))

lib/libcrypto/ec/ecp_hp_methods.c

147

if (!ec_field_element_from_bn(&group->fm, group, &point->fe_z, point->Z, ctx))

lib/libcrypto/ec/ecp_hp_methods.c

168

if (!ec_field_element_to_bn(&group->fm, &point->fe_z, point->Z, ctx))

lib/libcrypto/ec/ecp_hp_methods.c

176

if (BN_mod_inverse_ct(zinv, point->Z, group->p, ctx) == NULL)

lib/libcrypto/ec/ecp_hp_methods.c

719

if (!BN_is_zero(points[0]->Z)) {

lib/libcrypto/ec/ecp_hp_methods.c

720

if (!bn_copy(prod_Z[0], points[0]->Z))

lib/libcrypto/ec/ecp_hp_methods.c

728

if (!BN_is_zero(points[i]->Z)) {

lib/libcrypto/ec/ecp_hp_methods.c

729

if (!BN_mod_mul(prod_Z[i], prod_Z[i - 1], points[i]->Z,

lib/libcrypto/ec/ecp_hp_methods.c

744

if (BN_is_zero(points[i]->Z))

lib/libcrypto/ec/ecp_hp_methods.c

749

if (!BN_mod_mul(tmp, tmp, points[i]->Z, group->p, ctx))

lib/libcrypto/ec/ecp_hp_methods.c

751

if (!bn_copy(points[i]->Z, tmp_Z))

lib/libcrypto/ec/ecp_hp_methods.c

758

if (BN_is_zero(p->Z))

lib/libcrypto/ec/ecp_hp_methods.c

761

if (!BN_mod_mul(p->X, p->X, p->Z, group->p, ctx))

lib/libcrypto/ec/ecp_hp_methods.c

763

if (!BN_mod_mul(p->Y, p->Y, p->Z, group->p, ctx))

lib/libcrypto/ec/ecp_hp_methods.c

766

if (!BN_one(p->Z))

lib/libcrypto/ec/ecp_methods.c

1030

BN_set_flags((P)->Z, (flags)); \

lib/libcrypto/ec/ecp_methods.c

1036

!BN_swap_ct(c, (a)->Z, (b)->Z, w)) \

lib/libcrypto/ec/ecp_methods.c

1133

!bn_wexpand(s->Z, group_top) ||

lib/libcrypto/ec/ecp_methods.c

1136

!bn_wexpand(r->Z, group_top))

lib/libcrypto/ec/ecp_methods.c

185

BN_zero(point->Z);

lib/libcrypto/ec/ecp_methods.c

194

return BN_is_zero(point->Z);

lib/libcrypto/ec/ecp_methods.c

229

if (!ec_field_sqr(group, tmp, point->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

319

if (!ec_field_sqr(group, az, a->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

325

if (!ec_field_mul(group, az, az, a->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

365

if (!ec_field_sqr(group, bz, b->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

369

if (!ec_field_sqr(group, az, a->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

375

if (!ec_field_mul(group, bz, bz, b->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

379

if (!ec_field_mul(group, az, az, a->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

428

if (!ec_encode_scalar(group, point->Z, BN_value_one(), ctx))

lib/libcrypto/ec/ecp_methods.c

442

BIGNUM *z, *Z, *Z_1, *Z_2, *Z_3;

lib/libcrypto/ec/ecp_methods.c

449

if ((Z = BN_CTX_get(ctx)) == NULL)

lib/libcrypto/ec/ecp_methods.c

463

if (!ec_decode_scalar(group, z, point->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

558

if (!BN_is_zero(points[0]->Z)) {

lib/libcrypto/ec/ecp_methods.c

559

if (!bn_copy(prod_Z[0], points[0]->Z))

lib/libcrypto/ec/ecp_methods.c

567

if (!BN_is_zero(points[i]->Z)) {

lib/libcrypto/ec/ecp_methods.c

569

prod_Z[i - 1], points[i]->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

603

if (BN_is_zero(points[i]->Z))

lib/libcrypto/ec/ecp_methods.c

610

if (!ec_field_mul(group, tmp, tmp, points[i]->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

613

if (!bn_copy(points[i]->Z, tmp_Z))

lib/libcrypto/ec/ecp_methods.c

617

if (!BN_is_zero(points[0]->Z)) {

lib/libcrypto/ec/ecp_methods.c

619

if (!bn_copy(points[0]->Z, tmp))

lib/libcrypto/ec/ecp_methods.c

627

if (BN_is_zero(p->Z))

lib/libcrypto/ec/ecp_methods.c

632

if (!ec_field_sqr(group, tmp, p->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

637

if (!ec_field_mul(group, tmp, tmp, p->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

642

if (!bn_copy(p->Z, one))

lib/libcrypto/ec/ecp_methods.c

702

if (!ec_field_sqr(group, n0, b->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

708

if (!ec_field_mul(group, n0, n0, b->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

724

if (!ec_field_sqr(group, n0, a->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

730

if (!ec_field_mul(group, n0, n0, a->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

754

BN_zero(r->Z);

lib/libcrypto/ec/ecp_methods.c

770

if (!bn_copy(r->Z, n5))

lib/libcrypto/ec/ecp_methods.c

774

if (!bn_copy(n0, b->Z))

lib/libcrypto/ec/ecp_methods.c

777

if (!bn_copy(n0, a->Z))

lib/libcrypto/ec/ecp_methods.c

780

if (!ec_field_mul(group, n0, a->Z, b->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

783

if (!ec_field_mul(group, r->Z, n0, n5, ctx))

lib/libcrypto/ec/ecp_methods.c

870

if (!ec_field_sqr(group, n1, a->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

893

if (!ec_field_sqr(group, n1, a->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

909

if (!ec_field_mul(group, n0, a->Y, a->Z, ctx))

lib/libcrypto/ec/ecp_methods.c

912

if (!BN_mod_lshift1_quick(r->Z, n0, group->p))

lib/libcrypto/ec/ecp_methods.c

998

if (!ec_field_mul(group, p->Z, lambda, p->Z, ctx))

lib/libcrypto/ecdh/ecdh.c

113

if (!EVP_DigestUpdate(mctx, Z, Zlen))

lib/libcrypto/ecdh/ecdh.c

89

ecdh_KDF_X9_63(unsigned char *out, size_t outlen, const unsigned char *Z,

lib/libcrypto/modes/gcm128.c

102

u128 Z;

lib/libcrypto/modes/gcm128.c

110

Z.hi = Htable[nlo].hi;

lib/libcrypto/modes/gcm128.c

111

Z.lo = Htable[nlo].lo;

lib/libcrypto/modes/gcm128.c

114

rem = (size_t)Z.lo & 0xf;

lib/libcrypto/modes/gcm128.c

115

Z.lo = (Z.hi << 60)|(Z.lo >> 4);

lib/libcrypto/modes/gcm128.c

116

Z.hi = (Z.hi >> 4);

lib/libcrypto/modes/gcm128.c

117

Z.hi ^= (uint64_t)rem_4bit[rem] << 48;

lib/libcrypto/modes/gcm128.c

118

Z.hi ^= Htable[nhi].hi;

lib/libcrypto/modes/gcm128.c

119

Z.lo ^= Htable[nhi].lo;

lib/libcrypto/modes/gcm128.c

128

rem = (size_t)Z.lo & 0xf;

lib/libcrypto/modes/gcm128.c

129

Z.lo = (Z.hi << 60)|(Z.lo >> 4);

lib/libcrypto/modes/gcm128.c

130

Z.hi = (Z.hi >> 4);

lib/libcrypto/modes/gcm128.c

131

Z.hi ^= (uint64_t)rem_4bit[rem] << 48;

lib/libcrypto/modes/gcm128.c

132

Z.hi ^= Htable[nlo].hi;

lib/libcrypto/modes/gcm128.c

133

Z.lo ^= Htable[nlo].lo;

lib/libcrypto/modes/gcm128.c

136

Xi[0] = htobe64(Z.hi);

lib/libcrypto/modes/gcm128.c

137

Xi[1] = htobe64(Z.lo);

lib/libcrypto/modes/gcm128.c

150

u128 Z;

lib/libcrypto/modes/gcm128.c

161

Z.hi = Htable[nlo].hi;

lib/libcrypto/modes/gcm128.c

162

Z.lo = Htable[nlo].lo;

lib/libcrypto/modes/gcm128.c

165

rem = (size_t)Z.lo & 0xf;

lib/libcrypto/modes/gcm128.c

166

Z.lo = (Z.hi << 60)|(Z.lo >> 4);

lib/libcrypto/modes/gcm128.c

167

Z.hi = (Z.hi >> 4);

lib/libcrypto/modes/gcm128.c

168

Z.hi ^= (uint64_t)rem_4bit[rem] << 48;

lib/libcrypto/modes/gcm128.c

169

Z.hi ^= Htable[nhi].hi;

lib/libcrypto/modes/gcm128.c

170

Z.lo ^= Htable[nhi].lo;

lib/libcrypto/modes/gcm128.c

180

rem = (size_t)Z.lo & 0xf;

lib/libcrypto/modes/gcm128.c

181

Z.lo = (Z.hi << 60)|(Z.lo >> 4);

lib/libcrypto/modes/gcm128.c

182

Z.hi = (Z.hi >> 4);

lib/libcrypto/modes/gcm128.c

183

Z.hi ^= (uint64_t)rem_4bit[rem] << 48;

lib/libcrypto/modes/gcm128.c

184

Z.hi ^= Htable[nlo].hi;

lib/libcrypto/modes/gcm128.c

185

Z.lo ^= Htable[nlo].lo;

lib/libcrypto/modes/gcm128.c

188

Xi[0] = htobe64(Z.hi);

lib/libcrypto/modes/gcm128.c

189

Xi[1] = htobe64(Z.lo);

lib/libcrypto/sm3/sm3.c

34

#define FF0(X, Y, Z) (X ^ Y ^ Z)

lib/libcrypto/sm3/sm3.c

35

#define GG0(X, Y, Z) (X ^ Y ^ Z)

lib/libcrypto/sm3/sm3.c

37

#define FF1(X, Y, Z) ((X & Y) | ((X | Y) & Z))

lib/libcrypto/sm3/sm3.c

38

#define GG1(X, Y, Z) ((Z ^ (X & (Y ^ Z))))

sys/arch/amd64/amd64/aesni.c

626

bzero(ses->ses_ghash->Z, GMAC_BLOCK_LEN);

sys/crypto/gmac.c

108

bzero(ctx->ghash.Z, GMAC_BLOCK_LEN);

sys/crypto/gmac.c

80

uint32_t *y = (uint32_t *)ctx->Z;

sys/crypto/gmac.c

96

bcopy(ctx->S, ctx->Z, GMAC_BLOCK_LEN);

sys/crypto/gmac.h

30

uint8_t Z[GMAC_BLOCK_LEN]; /* initial state */

sys/dev/pci/drm/i915/gt/selftest_execlists.c

1185

rq[B1] = create_rewinder(ce, rq[A1], slot, Z);

sys/dev/pci/drm/i915/gt/selftest_execlists.c

1232

if (slot[Z] - slot[X] >= slot[Y] - slot[X]) {

sys/dev/pci/drm/i915/gt/selftest_execlists.c

1235

slot[Z] - slot[X],

usr.bin/systat/vmstat.c

362

Z(ncs_goodhits); Z(ncs_badhits); Z(ncs_miss);

usr.bin/systat/vmstat.c

363

Z(ncs_long); Z(ncs_pass2); Z(ncs_2passes);

usr.sbin/nsd/xfr-inspect.c

202

RD(pkt)?" RD":"", RA(pkt)?" RA":"", Z(pkt)?" Z":"",