crypto/ec/ecp_nistp256.c

583  * smallfelem_mul sets |out| = |small1| * |small2|
585  *   small1[i] < 2^64
590 static void smallfelem_mul(longfelem out, const smallfelem small1,
596     a = ((uint128_t) small1[0]) * small2[0];
602     a = ((uint128_t) small1[0]) * small2[1];
608     a = ((uint128_t) small1[1]) * small2[0];
614     a = ((uint128_t) small1[0]) * small2[2];
620     a = ((uint128_t) small1[1]) * small2[1];
626     a = ((uint128_t) small1[2]) * small2[0];
632     a = ((uint128_t) small1[0]) * small2[3];
638     a = ((uint128_t) small1[1]) * small2[2];
644     a = ((uint128_t) small1[2]) * small2[1];
650     a = ((uint128_t) small1[3]) * small2[0];
656     a = ((uint128_t) small1[1]) * small2[3];
662     a = ((uint128_t) small1[2]) * small2[2];
668     a = ((uint128_t) small1[3]) * small2[1];
674     a = ((uint128_t) small1[2]) * small2[3];
680     a = ((uint128_t) small1[3]) * small2[2];
686     a = ((uint128_t) small1[3]) * small2[3];
703     smallfelem small1, small2;
704     felem_shrink(small1, in1);
706     smallfelem_mul(out, small1, small2);
710  * felem_small_mul sets |out| = |small1| * |in2|
712  *   small1[i] < 2^64
717 static void felem_small_mul(longfelem out, const smallfelem small1,
722     smallfelem_mul(out, small1, small2);
1120     smallfelem small1, small2;
1136     felem_shrink(small1, gamma);
1139     felem_small_mul(tmp, small1, x_in);
1182     smallfelem_square(tmp2, small1);
1253     smallfelem small1, small2, small3, small4, small5;
1265     felem_shrink(small1, ftmp);
1323     smallfelem_mul(tmp, x2, small1);
1339     smallfelem_mul(tmp, small1, small3);
1351     felem_shrink(small1, ftmp5);
1352     y_equal = smallfelem_is_zero(small1);
1375     smallfelem_square(tmp, small1);
1387     felem_small_mul(tmp, small1, ftmp3);