crypto/ec/ecp_nistp224.c

63  * a 7-widelimb representation is a 'widefelem'.
74 typedef uint128_t widelimb;
77 typedef widelimb widefelem[7];
456     static const widelimb two120 = ((widelimb) 1) << 120;
457     static const widelimb two120m64 = (((widelimb) 1) << 120) -
458         (((widelimb) 1) << 64);
459     static const widelimb two120m104m64 = (((widelimb) 1) << 120) -
460         (((widelimb) 1) << 104) - (((widelimb) 1) << 64);
484     static const widelimb two64p8 = (((widelimb) 1) << 64) +
485         (((widelimb) 1) << 8);
486     static const widelimb two64m8 = (((widelimb) 1) << 64) -
487         (((widelimb) 1) << 8);
488     static const widelimb two64m48m8 = (((widelimb) 1) << 64) -
489         (((widelimb) 1) << 48) - (((widelimb) 1) << 8);
519 static void widefelem_scalar(widefelem out, const widelimb scalar)
537     out[0] = ((widelimb) in[0]) * in[0];
538     out[1] = ((widelimb) in[0]) * tmp1;
539     out[2] = ((widelimb) in[0]) * tmp2 + ((widelimb) in[1]) * in[1];
540     out[3] = ((widelimb) in[3]) * tmp0 + ((widelimb) in[1]) * tmp2;
541     out[4] = ((widelimb) in[3]) * tmp1 + ((widelimb) in[2]) * in[2];
542     out[5] = ((widelimb) in[3]) * tmp2;
543     out[6] = ((widelimb) in[3]) * in[3];
549     out[0] = ((widelimb) in1[0]) * in2[0];
550     out[1] = ((widelimb) in1[0]) * in2[1] + ((widelimb) in1[1]) * in2[0];
551     out[2] = ((widelimb) in1[0]) * in2[2] + ((widelimb) in1[1]) * in2[1] +
552         ((widelimb) in1[2]) * in2[0];
553     out[3] = ((widelimb) in1[0]) * in2[3] + ((widelimb) in1[1]) * in2[2] +
554         ((widelimb) in1[2]) * in2[1] + ((widelimb) in1[3]) * in2[0];
555     out[4] = ((widelimb) in1[1]) * in2[3] + ((widelimb) in1[2]) * in2[2] +
556         ((widelimb) in1[3]) * in2[1];
557     out[5] = ((widelimb) in1[2]) * in2[3] + ((widelimb) in1[3]) * in2[2];
558     out[6] = ((widelimb) in1[3]) * in2[3];
567     static const widelimb two127p15 = (((widelimb) 1) << 127) +
568         (((widelimb) 1) << 15);
569     static const widelimb two127m71 = (((widelimb) 1) << 127) -
570         (((widelimb) 1) << 71);
571     static const widelimb two127m71m55 = (((widelimb) 1) << 127) -
572         (((widelimb) 1) << 71) - (((widelimb) 1) << 55);
573     widelimb output[5];