Home
last modified time | relevance | path

Searched refs:limb (Results 1 – 13 of 13) sorted by relevance

/freebsd-12.1/crypto/openssl/crypto/ec/curve448/
H A Dscalar.c59 out->limb[i] = (c448_word_t)chain; in sc_subx()
66 chain = (chain + out->limb[i]) + (p->limb[i] & borrow); in sc_subx()
80 c448_word_t mand = a->limb[i]; in sc_montmul()
93 mier = sc_p->limb; in sc_montmul()
119 sc_subx(out, a->limb, b, sc_p, 0); in curve448_scalar_sub()
129 chain = (chain + a->limb[i]) + b->limb[i]; in curve448_scalar_add()
147 s->limb[i] = out; in scalar_decode_short()
160 accum = (accum + s->limb[i] - sc_p->limb[i]) >> WBITS; in curve448_scalar_decode()
228 chain = (chain + a->limb[i]) + (sc_p->limb[i] & mask); in curve448_scalar_halve()
233 out->limb[i] = out->limb[i] >> 1 | out->limb[i + 1] << (WBITS - 1); in curve448_scalar_halve()
[all …]
H A Df_generic.c35 buffer |= ((dword_t) red->limb[LIMBPERM(j)]) << fill; in gf_serialize()
52 return 0 - (y->limb[0] & 1); in gf_hibit()
62 return 0 - (y->limb[0] & 1); in gf_lobit()
87 x->limb[LIMBPERM(i)] = (word_t) in gf_deserialize()
92 (scarry + x->limb[LIMBPERM(i)] - in gf_deserialize()
115 scarry = scarry + a->limb[LIMBPERM(i)] - MODULUS->limb[LIMBPERM(i)]; in gf_strong_reduce()
116 a->limb[LIMBPERM(i)] = scarry & LIMB_MASK(LIMBPERM(i)); in gf_strong_reduce()
132 carry + a->limb[LIMBPERM(i)] + in gf_strong_reduce()
133 (scarry_0 & MODULUS->limb[LIMBPERM(i)]); in gf_strong_reduce()
134 a->limb[LIMBPERM(i)] = carry & LIMB_MASK(LIMBPERM(i)); in gf_strong_reduce()
[all …]
H A Dfield.h36 word_t limb[NLIMBS]; member
134 x[0].limb[i] = constant_time_select_32(is_z, z[0].limb[i], in gf_cond_sel()
135 y[0].limb[i]); in gf_cond_sel()
138 x[0].limb[i] = constant_time_select_64(is_z, z[0].limb[i], in gf_cond_sel()
139 y[0].limb[i]); in gf_cond_sel()
160 constant_time_cond_swap_32(swap, &(x[0].limb[i]), &(y->limb[i])); in gf_cond_swap()
163 constant_time_cond_swap_64(swap, &(x[0].limb[i]), &(y->limb[i])); in gf_cond_swap()
H A Dpoint_448.h68 c448_word_t limb[C448_SCALAR_LIMBS]; member
H A Dcurve448.c252 (scalar1x->limb[bit / WBITS] >> (bit % WBITS) & 1) << k; in curve448_precomputed_scalarmul()
550 uint64_t current = scalar->limb[0] & 0xFFFF; in recode_wnaf()
553 const unsigned int B_OVER_16 = sizeof(scalar->limb[0]) / 2; in recode_wnaf()
570 current += (uint32_t)((scalar->limb[w / B_OVER_16] in recode_wnaf()
/freebsd-12.1/crypto/openssl/crypto/ec/curve448/arch_32/
H A Df_impl.h28 out->limb[i] = a->limb[i] + b->limb[i]; in gf_add_RAW()
36 out->limb[i] = a->limb[i] - b->limb[i]; in gf_sub_RAW()
45 a->limb[i] += (i == NLIMBS / 2) ? co2 : co1; in gf_bias()
51 uint32_t tmp = a->limb[NLIMBS - 1] >> 28; in gf_weak_reduce()
54 a->limb[NLIMBS / 2] += tmp; in gf_weak_reduce()
56 a->limb[i] = (a->limb[i] & mask) + (a->limb[i - 1] >> 28); in gf_weak_reduce()
57 a->limb[0] = (a->limb[0] & mask) + tmp; in gf_weak_reduce()
H A Df_impl.c17 const uint32_t *a = as->limb, *b = bs->limb; in gf_mul()
18 uint32_t *c = cs->limb; in gf_mul()
66 const uint32_t *a = as->limb; in gf_mulw_unsigned()
67 uint32_t *c = cs->limb; in gf_mulw_unsigned()
/freebsd-12.1/crypto/openssl/crypto/ec/
H A Decp_nistp521.c130 typedef uint64_t limb;
131 typedef limb felem[NLIMBS];
296 static const limb two62m3 = (((limb) 1) << 62) - (((limb) 1) << 5);
297 static const limb two62m2 = (((limb) 1) << 62) - (((limb) 1) << 4);
322 static const limb two62m3 = (((limb) 1) << 62) - (((limb) 1) << 5);
323 static const limb two62m2 = (((limb) 1) << 62) - (((limb) 1) << 4);
353 static const limb two63m6 = (((limb) 1) << 63) - (((limb) 1) << 6);
354 static const limb two63m5 = (((limb) 1) << 63) - (((limb) 1) << 5);
814 limb is_zero, is_p;
892 static const limb two58 = ((limb) 1) << 58;
[all …]
H A Decp_nistp256.c245 # define two105m41m9 (((limb)1) << 105) - (((limb)1) << 41) - (((limb)1) << 9)
247 # define two105m41p9 (((limb)1) << 105) - (((limb)1) << 41) + (((limb)1) << 9)
290 # define two107m43m11 (((limb)1) << 107) - (((limb)1) << 43) - (((limb)1) << 11)
292 # define two107m43p11 (((limb)1) << 107) - (((limb)1) << 43) + (((limb)1) << 11)
332 (((limb) 1) << 70) - (((limb) 1) << 8) + (((limb) 1) << 6);
333 static const limb two70p40 = (((limb) 1) << 70) + (((limb) 1) << 40);
334 static const limb two70 = (((limb) 1) << 70);
336 (((limb) 1) << 70) - (((limb) 1) << 40) - (((limb) 1) << 38) +
338 static const limb two70m6 = (((limb) 1) << 70) - (((limb) 1) << 6);
714 # define two100m36m4 (((limb)1) << 100) - (((limb)1) << 36) - (((limb)1) << 4)
[all …]
H A Decp_nistp224.c74 typedef uint64_t limb;
77 typedef limb felem[4];
394 static const limb two58p2 = (((limb) 1) << 58) + (((limb) 1) << 2);
395 static const limb two58m2 = (((limb) 1) << 58) - (((limb) 1) << 2);
396 static const limb two58m42m2 = (((limb) 1) << 58) -
397 (((limb) 1) << 42) - (((limb) 1) << 2);
492 limb tmp0, tmp1, tmp2;
675 static limb felem_is_zero(const felem in)
677 limb zero, two224m96p1, two225m97p2;
787 const limb copy = -icopy;
[all …]
/freebsd-12.1/crypto/openssl/
H A DCHANGES5272 mpz_t when openssl and GMP use the same limb size. Otherwise the
/freebsd-12.1/share/dict/
H A Dweb2a13903 corolla limb
H A Dweb2106732 limb