libcrypto/curve25519/curve25519.c

65   int64_t h5 = load_4(s + 16);
84   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;
89   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
98   h[5] = h5;
133   int32_t h5 = h[5];
146   q = (h5 + q) >> 25;
160   h5 += h4 >> 26; h4 &= kBottom26Bits;
161   h6 += h5 >> 25; h5 &= kBottom25Bits;
189   s[16] = h5 >> 0;
190   s[17] = h5 >> 8;
191   s[18] = h5 >> 16;
192   s[19] = (h5 >> 24) | ((uint32_t)(h6) << 1);
420   int64_t h5 = f0g5+f1g4   +f2g3   +f3g2   +f4g1   +f5g0   +f6g9_19+f7g8_19+f8g7_19+f9g6_19;
439    *   i.e. |h1| <= 1.7*2^59; narrower ranges for h3, h5, h7, h9 */
442   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
446   /* |h5| <= 1.71*2^59 */
449   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;
451   /* |h5| <= 2^24; from now on fits into int32 */
469   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
473   /* |h5| <= 1.01*2^24 */
489   h[5] = h5;
590   int64_t h5 = f0f5_2+f1f4_2 +f2f3_2 +f6f9_38+f7f8_38;
607   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
610   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;
618   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
630   h[5] = h5;
841   int64_t h5 = f0f5_2+f1f4_2 +f2f3_2 +f6f9_38+f7f8_38;
862   h5 += h5;
869   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
872   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;
880   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
892   h[5] = h5;
4781   int64_t h5 = f5 * (int64_t) 121666;
4800   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;
4805   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;
4814   h[5] = h5;