crypto/ec/ecp_nistp224.c

265     felem g_pre_comp[2][16][3];
1119  * generator, using certain (large) precomputed multiples in g_pre_comp.
1126                       const felem g_pre_comp[2][16][3])
1158             select_point(bits, 16, g_pre_comp[1], tmp);
1175             select_point(bits, 16, g_pre_comp[0], tmp);
1228     memset(ret->g_pre_comp, 0, sizeof(ret->g_pre_comp));
1421     const felem(*g_pre_comp)[16][3] = NULL;
1443             g_pre_comp = (const felem(*)[16][3])pre->g_pre_comp;
1446             g_pre_comp = &gmul[0];
1451         if (!felem_to_BN(x, g_pre_comp[0][1][0]) ||
1452             !felem_to_BN(y, g_pre_comp[0][1][1]) ||
1453             !felem_to_BN(z, g_pre_comp[0][1][2])) {
1579                   mixed, (const felem(*)[17][3])pre_comp, g_pre_comp);
1648         memcpy(pre->g_pre_comp, gmul, sizeof(pre->g_pre_comp));
1651     if ((!BN_to_felem(pre->g_pre_comp[0][1][0], &group->generator->X)) ||
1652         (!BN_to_felem(pre->g_pre_comp[0][1][1], &group->generator->Y)) ||
1653         (!BN_to_felem(pre->g_pre_comp[0][1][2], &group->generator->Z)))
1660         point_double(pre->g_pre_comp[1][i][0], pre->g_pre_comp[1][i][1],
1661                      pre->g_pre_comp[1][i][2], pre->g_pre_comp[0][i][0],
1662                      pre->g_pre_comp[0][i][1], pre->g_pre_comp[0][i][2]);
1664             point_double(pre->g_pre_comp[1][i][0], pre->g_pre_comp[1][i][1],
1665                          pre->g_pre_comp[1][i][2], pre->g_pre_comp[1][i][0],
1666                          pre->g_pre_comp[1][i][1], pre->g_pre_comp[1][i][2]);
1670         point_double(pre->g_pre_comp[0][2 * i][0],
1671                      pre->g_pre_comp[0][2 * i][1],
1672                      pre->g_pre_comp[0][2 * i][2], pre->g_pre_comp[1][i][0],
1673                      pre->g_pre_comp[1][i][1], pre->g_pre_comp[1][i][2]);
1675             point_double(pre->g_pre_comp[0][2 * i][0],
1676                          pre->g_pre_comp[0][2 * i][1],
1677                          pre->g_pre_comp[0][2 * i][2],
1678                          pre->g_pre_comp[0][2 * i][0],
1679                          pre->g_pre_comp[0][2 * i][1],
1680                          pre->g_pre_comp[0][2 * i][2]);
1684         /* g_pre_comp[i][0] is the point at infinity */
1685         memset(pre->g_pre_comp[i][0], 0, sizeof(pre->g_pre_comp[i][0]));
1688         point_add(pre->g_pre_comp[i][6][0], pre->g_pre_comp[i][6][1],
1689                   pre->g_pre_comp[i][6][2], pre->g_pre_comp[i][4][0],
1690                   pre->g_pre_comp[i][4][1], pre->g_pre_comp[i][4][2],
1691                   0, pre->g_pre_comp[i][2][0], pre->g_pre_comp[i][2][1],
1692                   pre->g_pre_comp[i][2][2]);
1694         point_add(pre->g_pre_comp[i][10][0], pre->g_pre_comp[i][10][1],
1695                   pre->g_pre_comp[i][10][2], pre->g_pre_comp[i][8][0],
1696                   pre->g_pre_comp[i][8][1], pre->g_pre_comp[i][8][2],
1697                   0, pre->g_pre_comp[i][2][0], pre->g_pre_comp[i][2][1],
1698                   pre->g_pre_comp[i][2][2]);
1700         point_add(pre->g_pre_comp[i][12][0], pre->g_pre_comp[i][12][1],
1701                   pre->g_pre_comp[i][12][2], pre->g_pre_comp[i][8][0],
1702                   pre->g_pre_comp[i][8][1], pre->g_pre_comp[i][8][2],
1703                   0, pre->g_pre_comp[i][4][0], pre->g_pre_comp[i][4][1],
1704                   pre->g_pre_comp[i][4][2]);
1708         point_add(pre->g_pre_comp[i][14][0], pre->g_pre_comp[i][14][1],
1709                   pre->g_pre_comp[i][14][2], pre->g_pre_comp[i][12][0],
1710                   pre->g_pre_comp[i][12][1], pre->g_pre_comp[i][12][2],
1711                   0, pre->g_pre_comp[i][2][0], pre->g_pre_comp[i][2][1],
1712                   pre->g_pre_comp[i][2][2]);
1715             point_add(pre->g_pre_comp[i][2 * j + 1][0],
1716                       pre->g_pre_comp[i][2 * j + 1][1],
1717                       pre->g_pre_comp[i][2 * j + 1][2],
1718                       pre->g_pre_comp[i][2 * j][0],
1719                       pre->g_pre_comp[i][2 * j][1],
1720                       pre->g_pre_comp[i][2 * j][2], 0,
1721                       pre->g_pre_comp[i][1][0], pre->g_pre_comp[i][1][1],
1722                       pre->g_pre_comp[i][1][2]);
1725     make_points_affine(31, &(pre->g_pre_comp[0][1]), tmp_felems);