• Home
  • History
  • Annotate
  • Raw
  • Download
  • only in /freebsd-12-stable/contrib/bearssl/src/ec/

Lines Matching defs:cc

124 	uint64_t w, cc, s;
131 cc = w >> 52;
132 w = a[1] + cc;
134 cc = w >> 52;
135 w = a[2] + cc;
137 cc = w >> 52;
138 w = a[3] + cc;
140 cc = w >> 52;
141 a[4] += cc;
147 cc = -(w >> 52) & 0xFFF; /* cc < 16 */
148 w = a[2] - cc;
150 cc = w >> 63; /* cc = 0 or 1 */
151 w = a[3] - cc - (s << 36);
153 cc = w >> 63; /* cc = 0 or 1 */
155 a[4] = w + (s << 16) - cc; /* a[4] < 2^48 + 2^30 */
167 uint64_t t[5], w, s, cc;
187 cc = w >> 52;
188 cc |= -(cc & BIT(11));
189 w = a[1] - b[1] + cc;
191 cc = w >> 52;
192 cc |= -(cc & BIT(11));
193 w = a[2] - b[2] + cc;
195 cc = w >> 52;
196 cc |= -(cc & BIT(11));
197 w = a[3] - b[3] + cc;
199 cc = w >> 52;
200 cc |= -(cc & BIT(11));
201 t[4] = (BIT(61) - BIT(29)) + a[4] - b[4] + cc;
222 cc = -(w >> 52) & 0xFFF; /* cc <= 48 */
223 w = t[2] - cc;
224 cc = w >> 63; /* cc = 0 or 1 */
225 d[2] = w + (cc << 52); /* d[2] <= 2^52 + 31 */
226 w = t[3] - cc - (s << 36);
227 cc = w >> 63; /* cc = 0 or 1 */
228 d[3] = w + (cc << 52); /* t[3] <= 2^52 + 2^49 - 1 */
229 d[4] = (t[4] & MASK48) + (s << 16) - cc; /* d[4] < 2^48 + 2^30 */
233 * be an overflow; if s != 0, then (s << 16) > cc, and there is
257 uint64_t x, f, cc, w, s;
264 * 112 bits too. This guarantees that carries (cc)
274 cc = (uint64_t)(z >> 52);
276 + (unsigned __int128)t[1] + cc
279 cc = (uint64_t)(z >> 52);
281 + (unsigned __int128)t[2] + cc;
283 cc = (uint64_t)(z >> 52);
285 + (unsigned __int128)t[3] + cc
288 cc = (uint64_t)(z >> 52);
290 + (unsigned __int128)t[4] + cc
305 cc = -(w >> 52) & 0xFFF; /* cc < 16 */
306 w = t[2] - cc;
308 cc = w >> 63; /* cc = 0 or 1 */
309 w = t[3] - cc - (s << 36);
311 cc = w >> 63; /* cc = 0 or 1 */
313 t[4] = w + (s << 16) - cc; /* t[4] < 2^48 + 2^30 */
316 * The final t[4] cannot overflow because cc is 0 or 1,
317 * and cc can be 1 only if s != 0.
338 uint64_t x, f, cc, w, s, zh, zl;
345 * 112 bits too. This guarantees that carries (cc)
356 cc = (zl >> 52) | (zh << 12);
361 k = _addcarry_u64(0, cc, zl, &zl);
366 cc = (zl >> 52) | (zh << 12);
371 k = _addcarry_u64(0, cc, zl, &zl);
374 cc = (zl >> 52) | (zh << 12);
379 k = _addcarry_u64(0, cc, zl, &zl);
384 cc = (zl >> 52) | (zh << 12);
389 k = _addcarry_u64(0, cc, zl, &zl);
407 cc = -(w >> 52) & 0xFFF; /* cc < 16 */
408 w = t[2] - cc;
410 cc = w >> 63; /* cc = 0 or 1 */
411 w = t[3] - cc - (s << 36);
413 cc = w >> 63; /* cc = 0 or 1 */
415 t[4] = w + (s << 16) - cc; /* t[4] < 2^48 + 2^30 */
418 * The final t[4] cannot overflow because cc is 0 or 1,
419 * and cc can be 1 only if s != 0.
536 uint64_t r[5], t[5], w, cc;
542 cc = 0;
544 w = a[i] + cc;
546 cc = w >> 52;
561 cc = w >> 52;
562 w = r[1] + cc;
564 cc = w >> 52;
565 w = r[2] + cc;
567 cc = w >> 52;
568 w = r[3] + cc;
570 cc = w >> 52;
571 t[4] = r[4] + cc + BIT(16);
579 cc = w >> 63;
580 w = t[2] - cc;
582 cc = w >> 63;
585 cc = w >> 63;
586 t[4] -= cc;
593 cc = -(t[4] >> 48);
596 a[i] = r[i] ^ (cc & (r[i] ^ t[i]));