crypto/ec/ecp_nistp521.c

1483  * small point multiples 0*P, 1*P, ..., 16*P are in pre_comp[], the scalars
1484  * in scalars[]. If g_scalar is non-NULL, we also add this multiple of the
1489                       const felem_bytearray scalars[],
1504      * Loop over all scalars msb-to-lsb, interleaving additions of multiples
1537             /* loop over all scalars */
1539                 bits = get_bit(scalars[num], i + 4) << 5;
1540                 bits |= get_bit(scalars[num], i + 3) << 4;
1541                 bits |= get_bit(scalars[num], i + 2) << 3;
1542                 bits |= get_bit(scalars[num], i + 1) << 2;
1543                 bits |= get_bit(scalars[num], i) << 1;
1544                 bits |= get_bit(scalars[num], i - 1);
1809  * Computes scalar*generator + \sum scalars[i]*points[i], ignoring NULL
1815                                const BIGNUM *scalars[], BN_CTX *ctx)
1903          * we treat NULL scalars as 0, and NULL points as points at infinity,
1921                 p_scalar = scalars[i];