crypto/openssh/fe25519.c

213 void fe25519_square(fe25519 *r, const fe25519 *x)
232 	/* 2 */ fe25519_square(&z2,x);
233 	/* 4 */ fe25519_square(&t1,&z2);
234 	/* 8 */ fe25519_square(&t0,&t1);
237 	/* 22 */ fe25519_square(&t0,&z11);
240 	/* 2^6 - 2^1 */ fe25519_square(&t0,&z2_5_0);
241 	/* 2^7 - 2^2 */ fe25519_square(&t1,&t0);
242 	/* 2^8 - 2^3 */ fe25519_square(&t0,&t1);
243 	/* 2^9 - 2^4 */ fe25519_square(&t1,&t0);
244 	/* 2^10 - 2^5 */ fe25519_square(&t0,&t1);
247 	/* 2^11 - 2^1 */ fe25519_square(&t0,&z2_10_0);
248 	/* 2^12 - 2^2 */ fe25519_square(&t1,&t0);
249 	/* 2^20 - 2^10 */ for (i = 2;i < 10;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
252 	/* 2^21 - 2^1 */ fe25519_square(&t0,&z2_20_0);
253 	/* 2^22 - 2^2 */ fe25519_square(&t1,&t0);
254 	/* 2^40 - 2^20 */ for (i = 2;i < 20;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
257 	/* 2^41 - 2^1 */ fe25519_square(&t1,&t0);
258 	/* 2^42 - 2^2 */ fe25519_square(&t0,&t1);
259 	/* 2^50 - 2^10 */ for (i = 2;i < 10;i += 2) { fe25519_square(&t1,&t0); fe25519_square(&t0,&t1); }
262 	/* 2^51 - 2^1 */ fe25519_square(&t0,&z2_50_0);
263 	/* 2^52 - 2^2 */ fe25519_square(&t1,&t0);
264 	/* 2^100 - 2^50 */ for (i = 2;i < 50;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
267 	/* 2^101 - 2^1 */ fe25519_square(&t1,&z2_100_0);
268 	/* 2^102 - 2^2 */ fe25519_square(&t0,&t1);
269 	/* 2^200 - 2^100 */ for (i = 2;i < 100;i += 2) { fe25519_square(&t1,&t0); fe25519_square(&t0,&t1); }
272 	/* 2^201 - 2^1 */ fe25519_square(&t0,&t1);
273 	/* 2^202 - 2^2 */ fe25519_square(&t1,&t0);
274 	/* 2^250 - 2^50 */ for (i = 2;i < 50;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
277 	/* 2^251 - 2^1 */ fe25519_square(&t1,&t0);
278 	/* 2^252 - 2^2 */ fe25519_square(&t0,&t1);
279 	/* 2^253 - 2^3 */ fe25519_square(&t1,&t0);
280 	/* 2^254 - 2^4 */ fe25519_square(&t0,&t1);
281 	/* 2^255 - 2^5 */ fe25519_square(&t1,&t0);
298 	/* 2 */ fe25519_square(&z2,x);
299 	/* 4 */ fe25519_square(&t,&z2);
300 	/* 8 */ fe25519_square(&t,&t);
303 	/* 22 */ fe25519_square(&t,&z11);
306 	/* 2^6 - 2^1 */ fe25519_square(&t,&z2_5_0);
307 	/* 2^10 - 2^5 */ for (i = 1;i < 5;i++) { fe25519_square(&t,&t); }
310 	/* 2^11 - 2^1 */ fe25519_square(&t,&z2_10_0);
311 	/* 2^20 - 2^10 */ for (i = 1;i < 10;i++) { fe25519_square(&t,&t); }
314 	/* 2^21 - 2^1 */ fe25519_square(&t,&z2_20_0);
315 	/* 2^40 - 2^20 */ for (i = 1;i < 20;i++) { fe25519_square(&t,&t); }
318 	/* 2^41 - 2^1 */ fe25519_square(&t,&t);
319 	/* 2^50 - 2^10 */ for (i = 1;i < 10;i++) { fe25519_square(&t,&t); }
322 	/* 2^51 - 2^1 */ fe25519_square(&t,&z2_50_0);
323 	/* 2^100 - 2^50 */ for (i = 1;i < 50;i++) { fe25519_square(&t,&t); }
326 	/* 2^101 - 2^1 */ fe25519_square(&t,&z2_100_0);
327 	/* 2^200 - 2^100 */ for (i = 1;i < 100;i++) { fe25519_square(&t,&t); }
330 	/* 2^201 - 2^1 */ fe25519_square(&t,&t);
331 	/* 2^250 - 2^50 */ for (i = 1;i < 50;i++) { fe25519_square(&t,&t); }
334 	/* 2^251 - 2^1 */ fe25519_square(&t,&t);
335 	/* 2^252 - 2^2 */ fe25519_square(&t,&t);