crypto/openssh/smult_curve25519_ref.c

90 static void square(unsigned int out[32],const unsigned int a[32])
160     square(b0,a0);
161     square(b0 + 32,a0 + 32);
166     square(r,c1 + 32);
172     square(xzn1b,c1);
194   /* 2 */ square(z2,z);
195   /* 4 */ square(t1,z2);
196   /* 8 */ square(t0,t1);
199   /* 22 */ square(t0,z11);
202   /* 2^6 - 2^1 */ square(t0,z2_5_0);
203   /* 2^7 - 2^2 */ square(t1,t0);
204   /* 2^8 - 2^3 */ square(t0,t1);
205   /* 2^9 - 2^4 */ square(t1,t0);
206   /* 2^10 - 2^5 */ square(t0,t1);
209   /* 2^11 - 2^1 */ square(t0,z2_10_0);
210   /* 2^12 - 2^2 */ square(t1,t0);
211   /* 2^20 - 2^10 */ for (i = 2;i < 10;i += 2) { square(t0,t1); square(t1,t0); }
214   /* 2^21 - 2^1 */ square(t0,z2_20_0);
215   /* 2^22 - 2^2 */ square(t1,t0);
216   /* 2^40 - 2^20 */ for (i = 2;i < 20;i += 2) { square(t0,t1); square(t1,t0); }
219   /* 2^41 - 2^1 */ square(t1,t0);
220   /* 2^42 - 2^2 */ square(t0,t1);
221   /* 2^50 - 2^10 */ for (i = 2;i < 10;i += 2) { square(t1,t0); square(t0,t1); }
224   /* 2^51 - 2^1 */ square(t0,z2_50_0);
225   /* 2^52 - 2^2 */ square(t1,t0);
226   /* 2^100 - 2^50 */ for (i = 2;i < 50;i += 2) { square(t0,t1); square(t1,t0); }
229   /* 2^101 - 2^1 */ square(t1,z2_100_0);
230   /* 2^102 - 2^2 */ square(t0,t1);
231   /* 2^200 - 2^100 */ for (i = 2;i < 100;i += 2) { square(t1,t0); square(t0,t1); }
234   /* 2^201 - 2^1 */ square(t0,t1);
235   /* 2^202 - 2^2 */ square(t1,t0);
236   /* 2^250 - 2^50 */ for (i = 2;i < 50;i += 2) { square(t0,t1); square(t1,t0); }
239   /* 2^251 - 2^1 */ square(t1,t0);
240   /* 2^252 - 2^2 */ square(t0,t1);
241   /* 2^253 - 2^3 */ square(t1,t0);
242   /* 2^254 - 2^4 */ square(t0,t1);
243   /* 2^255 - 2^5 */ square(t1,t0);