crypto/mpi/ec.c

202 	mpi_size_t wsize = LIMB_SIZE_25519;
206 	if (w->nlimbs != wsize || u->nlimbs != wsize || v->nlimbs != wsize)
214 	mpihelp_add_n(wp, up, vp, wsize);
215 	borrow = mpihelp_sub_n(wp, wp, ctx->p->d, wsize);
216 	mpih_set_cond(n, ctx->p->d, wsize, (borrow != 0UL));
217 	mpihelp_add_n(wp, wp, n, wsize);
224 	mpi_size_t wsize = LIMB_SIZE_25519;
228 	if (w->nlimbs != wsize || u->nlimbs != wsize || v->nlimbs != wsize)
236 	borrow = mpihelp_sub_n(wp, up, vp, wsize);
237 	mpih_set_cond(n, ctx->p->d, wsize, (borrow != 0UL));
238 	mpihelp_add_n(wp, wp, n, wsize);
245 	mpi_size_t wsize = LIMB_SIZE_25519;
252 	if (w->nlimbs != wsize || u->nlimbs != wsize || v->nlimbs != wsize)
259 	mpihelp_mul_n(n, up, vp, wsize);
260 	memcpy(wp, n, wsize * BYTES_PER_MPI_LIMB);
263 	memcpy(m, n+LIMB_SIZE_25519-1, (wsize+1) * BYTES_PER_MPI_LIMB);
266 	memcpy(n, m, wsize * BYTES_PER_MPI_LIMB);
269 	cy = mpihelp_add_n(m, m, n, wsize);
271 	cy = mpihelp_add_n(m, m, n, wsize);
273 	cy = mpihelp_add_n(m, m, n, wsize);
276 	cy = mpihelp_add_n(wp, wp, m, wsize);
279 	memset(m, 0, wsize * BYTES_PER_MPI_LIMB);
283 	mpihelp_add_n(wp, wp, m, wsize);
286 	cy = mpihelp_sub_n(wp, wp, ctx->p->d, wsize);
287 	mpih_set_cond(m, ctx->p->d, wsize, (cy != 0UL));
288 	mpihelp_add_n(wp, wp, m, wsize);
309 	mpi_size_t wsize = LIMB_SIZE_448;
313 	if (w->nlimbs != wsize || u->nlimbs != wsize || v->nlimbs != wsize)
321 	cy = mpihelp_add_n(wp, up, vp, wsize);
322 	mpih_set_cond(n, ctx->p->d, wsize, (cy != 0UL));
323 	mpihelp_sub_n(wp, wp, n, wsize);
329 	mpi_size_t wsize = LIMB_SIZE_448;
333 	if (w->nlimbs != wsize || u->nlimbs != wsize || v->nlimbs != wsize)
341 	borrow = mpihelp_sub_n(wp, up, vp, wsize);
342 	mpih_set_cond(n, ctx->p->d, wsize, (borrow != 0UL));
343 	mpihelp_add_n(wp, wp, n, wsize);
349 	mpi_size_t wsize = LIMB_SIZE_448;
361 	if (w->nlimbs != wsize || u->nlimbs != wsize || v->nlimbs != wsize)
368 	mpihelp_mul_n(n, up, vp, wsize);
370 	for (i = 0; i < (wsize + 1) / 2; i++) {
372 		b1[i] = n[i+wsize/2];
373 		a2[i] = n[i+wsize];
374 		a3[i] = n[i+wsize+wsize/2];
384 	for (i = (wsize + 1) / 2 - 1; i >= 0; i--) {
397 	for (i = 0; i < (wsize + 1) / 2; i++)
413 	for (i = (wsize + 1) / 2 - 1; i >= 0; i--) {
420 	for (i = 0; i < wsize / 2; i++)
421 		wp[i+(wsize + 1) / 2] = b1[i];
427 	memset(n, 0, wsize * BYTES_PER_MPI_LIMB);
435 	mpihelp_add_n(wp, wp, n, wsize);
437 	memset(n, 0, wsize * BYTES_PER_MPI_LIMB);
438 	cy = mpihelp_sub_n(wp, wp, ctx->p->d, wsize);
439 	mpih_set_cond(n, ctx->p->d, wsize, (cy != 0UL));
440 	mpihelp_add_n(wp, wp, n, wsize);