sys/crypto/curve25519.c

49 /* fe means field element. Here the field is \Z/(2^255-19). An element t,
52  * fe limbs are bounded by 1.125*2^26,1.125*2^25,1.125*2^26,1.125*2^25,etc.
53  * Multiplication and carrying produce fe from fe_loose.
55 typedef struct fe { uint32_t v[10]; } fe;
58  * Addition and subtraction produce fe_loose from (fe, fe).
85 static __always_inline void fe_frombytes(fe *h, const uint8_t *s)
195 static __always_inline void fe_tobytes(uint8_t s[32], const fe *f)
234 static __always_inline void fe_copy(fe *h, const fe *f)
239 static __always_inline void fe_copy_lt(fe_loose *h, const fe *f)
245 static __always_inline void fe_0(fe *h)
251 static __always_inline void fe_1(fe *h)
294 static __always_inline void fe_add(fe_loose *h, const fe *f, const fe *g)
336 static __always_inline void fe_sub(fe_loose *h, const fe *f, const fe *g)
456 static __always_inline void fe_mul_ttt(fe *h, const fe *f, const fe *g)
461 static __always_inline void fe_mul_tlt(fe *h, const fe_loose *f, const fe *g)
467 fe_mul_tll(fe *h, const fe_loose *f, const fe_loose *g)
577 static __always_inline void fe_sq_tl(fe *h, const fe_loose *f)
582 static __always_inline void fe_sq_tt(fe *h, const fe *f)
587 static __always_inline void fe_loose_invert(fe *out, const fe_loose *z)
589 	fe t0;
590 	fe t1;
591 	fe t2;
592 	fe t3;
637 static __always_inline void fe_invert(fe *out, const fe *z)
649 static __always_inline void fe_cswap(fe *f, fe *g, unsigned int b)
777 static __always_inline void fe_mul121666(fe *h, const fe_loose *f)
786 	fe x1, x2, z2, x3, z3;
827 		fe tmp0, tmp1;