crypto/bn/bn_nist.c

68 /* pre-computed tables are "carry-less" values of modulus*(i+1) */
86                                                     * "carry-full" */
362     int carry;
398     carry = (int)bn_add_words(r_d, r_d, t_d, BN_NIST_192_TOP);
400     carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_192_TOP);
402         carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_192_TOP);
404     if (carry > 0)
405         carry =
406             (int)bn_sub_words(r_d, r_d, _nist_p_192[carry - 1],
409         carry = 1;
412      * we need 'if (carry==0 || result>=modulus) result-=modulus;'
414      * 'tmp=result-modulus; if (!carry || !borrow) result=tmp;'
419     mask &= 0 - (size_t)carry;
446     int carry;
495     carry = (int)bn_add_words(r_d, r_d, t_d, BN_NIST_224_TOP);
497     carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_224_TOP);
499     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_224_TOP);
501     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_224_TOP);
504     carry = (int)(r_d[BN_NIST_224_TOP - 1] >> 32);
507     if (carry > 0) {
508         carry =
509             (int)bn_sub_words(r_d, r_d, _nist_p_224[carry - 1],
512         carry = (int)(~(r_d[BN_NIST_224_TOP - 1] >> 32)) & 1;
514     } else if (carry < 0) {
517          * yields no carry, then result has to be adjusted by unconditionally
522         carry =
523             (int)bn_add_words(r_d, r_d, _nist_p_224[-carry - 1],
525         mask = 0 - (size_t)carry;
528         carry = 1;
532     mask &= 0 - (size_t)carry;
557     int carry = 0;
604     carry = (int)bn_add_words(t_d, t_d, c_d, BN_NIST_256_TOP);
615         carry <<= 1;
616         carry |= c;
618     carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_256_TOP);
623     carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_256_TOP);
628     carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_256_TOP);
633     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_256_TOP);
638     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_256_TOP);
643     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_256_TOP);
648     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_256_TOP);
652     if (carry > 0)
653         carry =
654             (int)bn_sub_words(r_d, r_d, _nist_p_256[carry - 1],
656     else if (carry < 0) {
657         carry =
658             (int)bn_add_words(r_d, r_d, _nist_p_256[-carry - 1],
660         mask = 0 - (size_t)carry;
663         carry = 1;
666     mask &= 0 - (size_t)carry;
695     int carry = 0;
750     carry = (int)bn_add_words(r_d + (128 / BN_BITS2), r_d + (128 / BN_BITS2),
755     carry += (int)bn_add_words(r_d, r_d, buf, BN_NIST_384_TOP);
760     carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_384_TOP);
765     carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_384_TOP);
770     carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_384_TOP);
775     carry += (int)bn_add_words(r_d, r_d, t_d, BN_NIST_384_TOP);
780     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_384_TOP);
785     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_384_TOP);
790     carry -= (int)bn_sub_words(r_d, r_d, t_d, BN_NIST_384_TOP);
794     if (carry > 0)
795         carry =
796             (int)bn_sub_words(r_d, r_d, _nist_p_384[carry - 1],
798     else if (carry < 0) {
799         carry =
800             (int)bn_add_words(r_d, r_d, _nist_p_384[-carry - 1],
802         mask = 0 - (size_t)carry;
805         carry = 1;
808     mask &= 0 - (size_t)carry;