crypto/ec/ecp_nistp256.c

55 typedef uint64_t u64;
118 typedef u64 smallfelem[NLIMBS];
121 static const u64 kPrime[4] =
123 static const u64 bottom63bits = 0x7ffffffffffffffful;
131     out[0] = *((u64 *)&in[0]);
132     out[1] = *((u64 *)&in[8]);
133     out[2] = *((u64 *)&in[16]);
134     out[3] = *((u64 *)&in[24]);
143     *((u64 *)&out[0]) = in[0];
144     *((u64 *)&out[8]) = in[1];
145     *((u64 *)&out[16]) = in[2];
146     *((u64 *)&out[24]) = in[3];
224 static void felem_scalar(felem out, const u64 scalar)
233 static void longfelem_scalar(longfelem out, const u64 scalar)
381     u64 a, b, mask;
382     u64 high, low;
383     static const u64 kPrime3Test = 0x7fffffff00000001ul; /* 2^63 - 2^32 + 1 */
386     tmp[3] = zero110[3] + in[3] + ((u64)(in[2] >> 64));
389     tmp[2] = zero110[2] + (u64)in[2];
399     tmp[3] = (u64)tmp[3];
407     tmp[3] = (u64)tmp[3];
423     high = (u64)(tmp[3] >> 64);
431     low = (u64)tmp[3];
455     tmp[1] += ((u64)(tmp[0] >> 64));
456     tmp[0] = (u64)tmp[0];
457     tmp[2] += ((u64)(tmp[1] >> 64));
458     tmp[1] = (u64)tmp[1];
459     tmp[3] += ((u64)(tmp[2] >> 64));
460     tmp[2] = (u64)tmp[2];
488     u64 high, low;
566     u64 small[4];
583     u64 high, low;
833 static void subtract_u64(u64 *result, u64 *carry, u64 v)
838     *result = (u64)r;
848     u64 all_equal_so_far = 0, result = 0, carry;
856      * each u64, from most-significant to least significant. For each one, if
861         u64 equal;
867         result |= all_equal_so_far & ((u64)(a >> 64));
938     u64 is_p;
940     u64 is_zero = small[0] | small[1] | small[2] | small[3];
1217     const u64 mask64 = mask;
1636 static void select_point(const u64 idx, unsigned int size,
1640     u64 *outlimbs = &out[0][0];
1645         const u64 *inlimbs = (u64 *)&pre_comp[i][0][0];
1646         u64 mask = i ^ idx;
1682     u64 bits;