crypto/bn/bn_nist.c

406             (int)bn_sub_words(r_d, r_d, _nist_p_192[carry - 1],
418         0 - (size_t)bn_sub_words(c_d, r_d, _nist_p_192[0], BN_NIST_192_TOP);
499     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_224_TOP);
501     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_224_TOP);
506     u.f = bn_sub_words;
509             (int)bn_sub_words(r_d, r_d, _nist_p_224[carry - 1],
526         u.p = ((size_t)bn_sub_words & mask) | ((size_t)bn_add_words & ~mask);
633     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_256_TOP);
638     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_256_TOP);
643     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_256_TOP);
648     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_256_TOP);
651     u.f = bn_sub_words;
654             (int)bn_sub_words(r_d, r_d, _nist_p_256[carry - 1],
661         u.p = ((size_t)bn_sub_words & mask) | ((size_t)bn_add_words & ~mask);
780     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_384_TOP);
785     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_384_TOP);
790     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_384_TOP);
793     u.f = bn_sub_words;
796             (int)bn_sub_words(r_d, r_d, _nist_p_384[carry - 1],
803         u.p = ((size_t)bn_sub_words & mask) | ((size_t)bn_add_words & ~mask);
868     mask = 0 - (size_t)bn_sub_words(t_d, r_d, _nist_p_521, BN_NIST_521_TOP);