crypto/openssh/smult_curve25519_ref.c

190   unsigned int t0[32];
196   /* 8 */ square(t0,t1);
197   /* 9 */ mult(z9,t0,z);
199   /* 22 */ square(t0,z11);
200   /* 2^5 - 2^0 = 31 */ mult(z2_5_0,t0,z9);
202   /* 2^6 - 2^1 */ square(t0,z2_5_0);
203   /* 2^7 - 2^2 */ square(t1,t0);
204   /* 2^8 - 2^3 */ square(t0,t1);
205   /* 2^9 - 2^4 */ square(t1,t0);
206   /* 2^10 - 2^5 */ square(t0,t1);
207   /* 2^10 - 2^0 */ mult(z2_10_0,t0,z2_5_0);
209   /* 2^11 - 2^1 */ square(t0,z2_10_0);
210   /* 2^12 - 2^2 */ square(t1,t0);
211   /* 2^20 - 2^10 */ for (i = 2;i < 10;i += 2) { square(t0,t1); square(t1,t0); }
214   /* 2^21 - 2^1 */ square(t0,z2_20_0);
215   /* 2^22 - 2^2 */ square(t1,t0);
216   /* 2^40 - 2^20 */ for (i = 2;i < 20;i += 2) { square(t0,t1); square(t1,t0); }
217   /* 2^40 - 2^0 */ mult(t0,t1,z2_20_0);
219   /* 2^41 - 2^1 */ square(t1,t0);
220   /* 2^42 - 2^2 */ square(t0,t1);
221   /* 2^50 - 2^10 */ for (i = 2;i < 10;i += 2) { square(t1,t0); square(t0,t1); }
222   /* 2^50 - 2^0 */ mult(z2_50_0,t0,z2_10_0);
224   /* 2^51 - 2^1 */ square(t0,z2_50_0);
225   /* 2^52 - 2^2 */ square(t1,t0);
226   /* 2^100 - 2^50 */ for (i = 2;i < 50;i += 2) { square(t0,t1); square(t1,t0); }
230   /* 2^102 - 2^2 */ square(t0,t1);
231   /* 2^200 - 2^100 */ for (i = 2;i < 100;i += 2) { square(t1,t0); square(t0,t1); }
232   /* 2^200 - 2^0 */ mult(t1,t0,z2_100_0);
234   /* 2^201 - 2^1 */ square(t0,t1);
235   /* 2^202 - 2^2 */ square(t1,t0);
236   /* 2^250 - 2^50 */ for (i = 2;i < 50;i += 2) { square(t0,t1); square(t1,t0); }
237   /* 2^250 - 2^0 */ mult(t0,t1,z2_50_0);
239   /* 2^251 - 2^1 */ square(t1,t0);
240   /* 2^252 - 2^2 */ square(t0,t1);
241   /* 2^253 - 2^3 */ square(t1,t0);
242   /* 2^254 - 2^4 */ square(t0,t1);
243   /* 2^255 - 2^5 */ square(t1,t0);