crypto/ec/ecp_nistp256.c

1111  * Outputs can equal corresponding inputs, i.e., x_out == x_in is allowed.
1112  * while x_out == y_in is not (maybe this works, but it's not tested).
1115 point_double(felem x_out, felem y_out, felem z_out,
1157     felem_reduce(x_out, tmp);
1161     felem_diff(x_out, ftmp);
1162     /* x_out[i] < 2^105 + 2^101 < 2^106 */
1178     felem_diff_zero107(beta, x_out);
1197 point_double_small(smallfelem x_out, smallfelem y_out, smallfelem z_out,
1209     felem_shrink(x_out, felem_x_out);
1251     felem ftmp, ftmp2, ftmp3, ftmp4, ftmp5, ftmp6, x_out, y_out, z_out;
1374     /* x_out = r**2 - J - 2V */
1376     felem_reduce(x_out, tmp);
1381     felem_diff(x_out, ftmp4);
1382     /* x_out[i] < 2^105 + 2^101 */
1384     /* y_out = r(V-x_out) - 2 * s1 * J */
1385     felem_diff_zero107(ftmp3, x_out);
1396     copy_small_conditional(x_out, x2, z1_is_zero);
1397     copy_conditional(x_out, x1, z2_is_zero);
1402     felem_assign(x3, x_out);
1660  * Output point (X, Y, Z) is stored in x_out, y_out, z_out
1662 static void batch_mul(felem x_out, felem y_out, felem z_out,
1757     felem_assign(x_out, nq[0]);
1930     smallfelem x_out, y_out;
1946     felem_contract(x_out, x_in);
1948         if (!smallfelem_to_BN(x, x_out)) {
2022     felem x_out, y_out, z_out;
2131                 if ((!BN_to_felem(x_out, &p->X)) ||
2135                 felem_shrink(pre_comp[i][1][0], x_out);
2179         batch_mul(x_out, y_out, z_out,
2185         batch_mul(x_out, y_out, z_out,
2189     felem_contract(x_in, x_out);