crypto/ec/ecp_nistp256.c

995     felem ftmp, ftmp2;
1051     felem_reduce(ftmp2, tmp);   /* 2^64 - 2^0 */
1053         felem_square(tmp, ftmp2);
1054         felem_reduce(ftmp2, tmp);
1056     felem_mul(tmp, ftmp2, e16);
1057     felem_reduce(ftmp2, tmp);   /* 2^80 - 2^0 */
1059         felem_square(tmp, ftmp2);
1060         felem_reduce(ftmp2, tmp);
1062     felem_mul(tmp, ftmp2, e8);
1063     felem_reduce(ftmp2, tmp);   /* 2^88 - 2^0 */
1065         felem_square(tmp, ftmp2);
1066         felem_reduce(ftmp2, tmp);
1068     felem_mul(tmp, ftmp2, e4);
1069     felem_reduce(ftmp2, tmp);   /* 2^92 - 2^0 */
1070     felem_square(tmp, ftmp2);
1071     felem_reduce(ftmp2, tmp);   /* 2^93 - 2^1 */
1072     felem_square(tmp, ftmp2);
1073     felem_reduce(ftmp2, tmp);   /* 2^94 - 2^2 */
1074     felem_mul(tmp, ftmp2, e2);
1075     felem_reduce(ftmp2, tmp);   /* 2^94 - 2^0 */
1076     felem_square(tmp, ftmp2);
1077     felem_reduce(ftmp2, tmp);   /* 2^95 - 2^1 */
1078     felem_square(tmp, ftmp2);
1079     felem_reduce(ftmp2, tmp);   /* 2^96 - 2^2 */
1080     felem_mul(tmp, ftmp2, in);
1081     felem_reduce(ftmp2, tmp);   /* 2^96 - 3 */
1083     felem_mul(tmp, ftmp2, ftmp);
1119     felem delta, gamma, beta, alpha, ftmp, ftmp2;
1124     felem_assign(ftmp2, x_in);
1125     /* ftmp2[i] < 2^106 */
1146     felem_sum(ftmp2, delta);
1147     /* ftmp2[i] < 2^105 + 2^106 < 2^107 */
1148     felem_scalar(ftmp2, 3);
1149     /* ftmp2[i] < 3 * 2^107 < 2^109 */
1150     felem_mul(tmp, ftmp, ftmp2);
1251     felem ftmp, ftmp2, ftmp3, ftmp4, ftmp5, ftmp6, x_out, y_out, z_out;
1268         /* ftmp2 = z2z2 = z2**2 */
1270         felem_reduce(ftmp2, tmp);
1271         /* ftmp2[i] < 2^101 */
1272         felem_shrink(small2, ftmp2);
1289         /* ftmp2 = z2z2 + z1z1 */
1290         felem_sum(ftmp2, ftmp);
1291         /* ftmp2[i] < 2^101 + 2^101 = 2^102 */
1292         felem_diff(ftmp5, ftmp2);
1295         /* ftmp2 = z2 * z2z2 */
1297         felem_reduce(ftmp2, tmp);
1299         /* s1 = ftmp2 = y1 * z2**3 */
1300         felem_mul(tmp, y1, ftmp2);
1317         /* s1 = ftmp2 = y1 * z2**3 */
1366     /* J = ftmp2 = h * I */
1368     felem_reduce(ftmp2, tmp);
1379     felem_sum(ftmp4, ftmp2);
1388     felem_mul(tmp2, ftmp6, ftmp2);