crypto/openssh/fe25519.c

228 	fe25519 t0;
234 	/* 8 */ fe25519_square(&t0,&t1);
235 	/* 9 */ fe25519_mul(&z9,&t0,x);
237 	/* 22 */ fe25519_square(&t0,&z11);
238 	/* 2^5 - 2^0 = 31 */ fe25519_mul(&z2_5_0,&t0,&z9);
240 	/* 2^6 - 2^1 */ fe25519_square(&t0,&z2_5_0);
241 	/* 2^7 - 2^2 */ fe25519_square(&t1,&t0);
242 	/* 2^8 - 2^3 */ fe25519_square(&t0,&t1);
243 	/* 2^9 - 2^4 */ fe25519_square(&t1,&t0);
244 	/* 2^10 - 2^5 */ fe25519_square(&t0,&t1);
245 	/* 2^10 - 2^0 */ fe25519_mul(&z2_10_0,&t0,&z2_5_0);
247 	/* 2^11 - 2^1 */ fe25519_square(&t0,&z2_10_0);
248 	/* 2^12 - 2^2 */ fe25519_square(&t1,&t0);
249 	/* 2^20 - 2^10 */ for (i = 2;i < 10;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
252 	/* 2^21 - 2^1 */ fe25519_square(&t0,&z2_20_0);
253 	/* 2^22 - 2^2 */ fe25519_square(&t1,&t0);
254 	/* 2^40 - 2^20 */ for (i = 2;i < 20;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
255 	/* 2^40 - 2^0 */ fe25519_mul(&t0,&t1,&z2_20_0);
257 	/* 2^41 - 2^1 */ fe25519_square(&t1,&t0);
258 	/* 2^42 - 2^2 */ fe25519_square(&t0,&t1);
259 	/* 2^50 - 2^10 */ for (i = 2;i < 10;i += 2) { fe25519_square(&t1,&t0); fe25519_square(&t0,&t1); }
260 	/* 2^50 - 2^0 */ fe25519_mul(&z2_50_0,&t0,&z2_10_0);
262 	/* 2^51 - 2^1 */ fe25519_square(&t0,&z2_50_0);
263 	/* 2^52 - 2^2 */ fe25519_square(&t1,&t0);
264 	/* 2^100 - 2^50 */ for (i = 2;i < 50;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
268 	/* 2^102 - 2^2 */ fe25519_square(&t0,&t1);
269 	/* 2^200 - 2^100 */ for (i = 2;i < 100;i += 2) { fe25519_square(&t1,&t0); fe25519_square(&t0,&t1); }
270 	/* 2^200 - 2^0 */ fe25519_mul(&t1,&t0,&z2_100_0);
272 	/* 2^201 - 2^1 */ fe25519_square(&t0,&t1);
273 	/* 2^202 - 2^2 */ fe25519_square(&t1,&t0);
274 	/* 2^250 - 2^50 */ for (i = 2;i < 50;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
275 	/* 2^250 - 2^0 */ fe25519_mul(&t0,&t1,&z2_50_0);
277 	/* 2^251 - 2^1 */ fe25519_square(&t1,&t0);
278 	/* 2^252 - 2^2 */ fe25519_square(&t0,&t1);
279 	/* 2^253 - 2^3 */ fe25519_square(&t1,&t0);
280 	/* 2^254 - 2^4 */ fe25519_square(&t0,&t1);
281 	/* 2^255 - 2^5 */ fe25519_square(&t1,&t0);