crypto/ec/ecp_nistp521.c

590  * felem_reduce converts a largefelem to an felem.
596 static void felem_reduce(felem out, const largefelem in)
675     felem_reduce(out, tmp);
682     felem_reduce(out, tmp);
700     felem_reduce(ftmp, tmp);    /* 2^1 */
702     felem_reduce(ftmp, tmp);    /* 2^2 - 2^0 */
705     felem_reduce(ftmp, tmp);    /* 2^3 - 2^1 */
707     felem_reduce(ftmp, tmp);    /* 2^3 - 2^0 */
709     felem_reduce(ftmp, tmp);    /* 2^4 - 2^1 */
712     felem_reduce(ftmp3, tmp);   /* 2^3 - 2^1 */
714     felem_reduce(ftmp3, tmp);   /* 2^4 - 2^2 */
716     felem_reduce(ftmp3, tmp);   /* 2^4 - 2^0 */
720     felem_reduce(ftmp3, tmp);   /* 2^5 - 2^1 */
722     felem_reduce(ftmp3, tmp);   /* 2^6 - 2^2 */
724     felem_reduce(ftmp3, tmp);   /* 2^7 - 2^3 */
726     felem_reduce(ftmp3, tmp);   /* 2^8 - 2^4 */
729     felem_reduce(ftmp4, tmp);   /* 2^8 - 2^1 */
731     felem_reduce(ftmp4, tmp);   /* 2^9 - 2^2 */
733     felem_reduce(ftmp3, tmp);   /* 2^8 - 2^0 */
738         felem_reduce(ftmp3, tmp); /* 2^16 - 2^8 */
741     felem_reduce(ftmp3, tmp);   /* 2^16 - 2^0 */
746         felem_reduce(ftmp3, tmp); /* 2^32 - 2^16 */
749     felem_reduce(ftmp3, tmp);   /* 2^32 - 2^0 */
754         felem_reduce(ftmp3, tmp); /* 2^64 - 2^32 */
757     felem_reduce(ftmp3, tmp);   /* 2^64 - 2^0 */
762         felem_reduce(ftmp3, tmp); /* 2^128 - 2^64 */
765     felem_reduce(ftmp3, tmp);   /* 2^128 - 2^0 */
770         felem_reduce(ftmp3, tmp); /* 2^256 - 2^128 */
773     felem_reduce(ftmp3, tmp);   /* 2^256 - 2^0 */
778         felem_reduce(ftmp3, tmp); /* 2^512 - 2^256 */
781     felem_reduce(ftmp3, tmp);   /* 2^512 - 2^0 */
785         felem_reduce(ftmp3, tmp); /* 2^521 - 2^9 */
788     felem_reduce(ftmp3, tmp);   /* 2^512 - 2^2 */
790     felem_reduce(out, tmp);     /* 2^512 - 3 */
1041     felem_reduce(delta, tmp);   /* delta[i] < 2^59 + 2^14 */
1045     felem_reduce(gamma, tmp);   /* gamma[i] < 2^59 + 2^14 */
1049     felem_reduce(beta, tmp);    /* beta[i] < 2^59 + 2^14 */
1066     felem_reduce(alpha, tmp);
1078     felem_reduce(x_out, tmp);
1092     felem_reduce(z_out, tmp);
1124     felem_reduce(y_out, tmp);
1162     felem_reduce(ftmp, tmp);
1167         felem_reduce(ftmp2, tmp);
1171         felem_reduce(ftmp3, tmp);
1185         felem_reduce(ftmp5, tmp);
1189         felem_reduce(ftmp2, tmp);
1193         felem_reduce(ftmp6, tmp);
1216     felem_reduce(ftmp4, tmp);
1222     felem_reduce(z_out, tmp);
1226     felem_reduce(ftmp, tmp);
1235     felem_reduce(ftmp5, tmp);
1251     felem_reduce(ftmp, tmp);
1255     felem_reduce(ftmp2, tmp);
1259     felem_reduce(ftmp4, tmp);
1271     felem_reduce(x_out, tmp);
1290     felem_reduce(y_out, tmp);
1751     felem_reduce(z1, tmp);
1753     felem_reduce(x_in, tmp);
1763     felem_reduce(z1, tmp);
1765     felem_reduce(y_in, tmp);