crypto/ec/ecp_nistp224.c

714     felem ftmp, ftmp2, ftmp3, ftmp4;
719     felem_reduce(ftmp, tmp);    /* 2 */
720     felem_mul(tmp, in, ftmp);
721     felem_reduce(ftmp, tmp);    /* 2^2 - 1 */
722     felem_square(tmp, ftmp);
723     felem_reduce(ftmp, tmp);    /* 2^3 - 2 */
724     felem_mul(tmp, in, ftmp);
725     felem_reduce(ftmp, tmp);    /* 2^3 - 1 */
726     felem_square(tmp, ftmp);
732     felem_mul(tmp, ftmp2, ftmp);
733     felem_reduce(ftmp, tmp);    /* 2^6 - 1 */
734     felem_square(tmp, ftmp);
740     felem_mul(tmp, ftmp2, ftmp);
778     felem_mul(tmp, ftmp2, ftmp);
779     felem_reduce(ftmp, tmp);    /* 2^126 - 1 */
780     felem_square(tmp, ftmp);
781     felem_reduce(ftmp, tmp);    /* 2^127 - 2 */
782     felem_mul(tmp, ftmp, in);
783     felem_reduce(ftmp, tmp);    /* 2^127 - 1 */
785         felem_square(tmp, ftmp);
786         felem_reduce(ftmp, tmp);
788     felem_mul(tmp, ftmp, ftmp3);
833     felem delta, gamma, beta, alpha, ftmp, ftmp2;
835     felem_assign(ftmp, x_in);
851     felem_diff(ftmp, delta);
852     /* ftmp[i] < 2^57 + 2^58 + 2 < 2^59 */
857     felem_mul(tmp, ftmp, ftmp2);
864     felem_assign(ftmp, beta);
865     felem_scalar(ftmp, 8);
866     /* ftmp[i] < 8 * 2^57 = 2^60 */
867     felem_diff_128_64(tmp, ftmp);
874     felem_assign(ftmp, y_in);
875     felem_sum(ftmp, z_in);
876     /* ftmp[i] < 2^57 + 2^57 = 2^58 */
877     felem_square(tmp, ftmp);
922     felem ftmp, ftmp2, ftmp3, ftmp4, ftmp5, x_out, y_out, z_out;
954     /* ftmp = z1^2 */
956     felem_reduce(ftmp, tmp);
959     felem_mul(tmp, ftmp, z1);
972     felem_mul(tmp, ftmp, x2);
975     /* ftmp = z1^2*x2 - z2^2*x1 */
978     felem_reduce(ftmp, tmp);
984     x_equal = felem_is_zero(ftmp);
1004     felem_mul(tmp, ftmp, ftmp5);
1007     /* ftmp = (z1^2*x2 - z2^2*x1)^2 */
1008     felem_assign(ftmp5, ftmp);
1009     felem_square(tmp, ftmp);
1010     felem_reduce(ftmp, tmp);
1013     felem_mul(tmp, ftmp, ftmp5);
1017     felem_mul(tmp, ftmp2, ftmp);