crypto/ec/ecp_nistp256.c

983     felem ftmp, ftmp2;
990     felem_reduce(ftmp, tmp);    /* 2^1 */
991     felem_mul(tmp, in, ftmp);
992     felem_reduce(ftmp, tmp);    /* 2^2 - 2^0 */
993     felem_assign(e2, ftmp);
994     felem_square(tmp, ftmp);
995     felem_reduce(ftmp, tmp);    /* 2^3 - 2^1 */
996     felem_square(tmp, ftmp);
997     felem_reduce(ftmp, tmp);    /* 2^4 - 2^2 */
998     felem_mul(tmp, ftmp, e2);
999     felem_reduce(ftmp, tmp);    /* 2^4 - 2^0 */
1000     felem_assign(e4, ftmp);
1001     felem_square(tmp, ftmp);
1002     felem_reduce(ftmp, tmp);    /* 2^5 - 2^1 */
1003     felem_square(tmp, ftmp);
1004     felem_reduce(ftmp, tmp);    /* 2^6 - 2^2 */
1005     felem_square(tmp, ftmp);
1006     felem_reduce(ftmp, tmp);    /* 2^7 - 2^3 */
1007     felem_square(tmp, ftmp);
1008     felem_reduce(ftmp, tmp);    /* 2^8 - 2^4 */
1009     felem_mul(tmp, ftmp, e4);
1010     felem_reduce(ftmp, tmp);    /* 2^8 - 2^0 */
1011     felem_assign(e8, ftmp);
1013         felem_square(tmp, ftmp);
1014         felem_reduce(ftmp, tmp);
1016     felem_mul(tmp, ftmp, e8);
1017     felem_reduce(ftmp, tmp);    /* 2^16 - 2^0 */
1018     felem_assign(e16, ftmp);
1020         felem_square(tmp, ftmp);
1021         felem_reduce(ftmp, tmp);
1023     felem_mul(tmp, ftmp, e16);
1024     felem_reduce(ftmp, tmp);    /* 2^32 - 2^0 */
1025     felem_assign(e32, ftmp);
1027         felem_square(tmp, ftmp);
1028         felem_reduce(ftmp, tmp);
1030     felem_assign(e64, ftmp);
1031     felem_mul(tmp, ftmp, in);
1032     felem_reduce(ftmp, tmp);    /* 2^64 - 2^32 + 2^0 */
1034         felem_square(tmp, ftmp);
1035         felem_reduce(ftmp, tmp);
1071     felem_mul(tmp, ftmp2, ftmp);
1107     felem delta, gamma, beta, alpha, ftmp, ftmp2;
1110     felem_assign(ftmp, x_in);
1111     /* ftmp[i] < 2^106 */
1132     felem_diff(ftmp, delta);
1133     /* ftmp[i] < 2^105 + 2^106 < 2^107 */
1138     felem_mul(tmp, ftmp, ftmp2);
1146     felem_assign(ftmp, beta);
1147     felem_scalar(ftmp, 8);
1148     /* ftmp[i] < 8 * 2^101 = 2^104 */
1149     felem_diff(x_out, ftmp);
1155     felem_assign(ftmp, y_in);
1156     felem_sum(ftmp, z_in);
1157     /* ftmp[i] < 2^106 + 2^106 = 2^107 */
1158     felem_square(tmp, ftmp);
1239     felem ftmp, ftmp2, ftmp3, ftmp4, ftmp5, ftmp6, x_out, y_out, z_out;
1249     /* ftmp = z1z1 = z1**2 */
1251     felem_reduce(ftmp, tmp);
1252     /* ftmp[i] < 2^101 */
1253     felem_shrink(small1, ftmp);
1278         felem_sum(ftmp2, ftmp);
1326     /* ftmp = z1 * z1z1 */
1328     felem_reduce(ftmp, tmp);
1331     felem_small_mul(tmp, y2, ftmp);
1347     /* I = ftmp = (2h)**2 */
1348     felem_assign(ftmp, ftmp4);
1349     felem_scalar(ftmp, 2);
1350     /* ftmp[i] < 2*2^108 = 2^109 */
1351     felem_square(tmp, ftmp);
1352     felem_reduce(ftmp, tmp);
1355     felem_mul(tmp, ftmp4, ftmp);
1359     felem_mul(tmp, ftmp3, ftmp);
1658     felem nq[3], ftmp;
1727                 smallfelem_neg(ftmp, tmp[1]); /* (X, -Y, Z) is the negative
1729                 copy_small_conditional(ftmp, tmp[1], (((limb) sign) - 1));
1730                 felem_contract(tmp[1], ftmp);