usr.bin/signify/fe25519.c

211 void fe25519_square(fe25519 *r, const fe25519 *x)
230 	/* 2 */ fe25519_square(&z2,x);
231 	/* 4 */ fe25519_square(&t1,&z2);
232 	/* 8 */ fe25519_square(&t0,&t1);
235 	/* 22 */ fe25519_square(&t0,&z11);
238 	/* 2^6 - 2^1 */ fe25519_square(&t0,&z2_5_0);
239 	/* 2^7 - 2^2 */ fe25519_square(&t1,&t0);
240 	/* 2^8 - 2^3 */ fe25519_square(&t0,&t1);
241 	/* 2^9 - 2^4 */ fe25519_square(&t1,&t0);
242 	/* 2^10 - 2^5 */ fe25519_square(&t0,&t1);
245 	/* 2^11 - 2^1 */ fe25519_square(&t0,&z2_10_0);
246 	/* 2^12 - 2^2 */ fe25519_square(&t1,&t0);
247 	/* 2^20 - 2^10 */ for (i = 2;i < 10;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
250 	/* 2^21 - 2^1 */ fe25519_square(&t0,&z2_20_0);
251 	/* 2^22 - 2^2 */ fe25519_square(&t1,&t0);
252 	/* 2^40 - 2^20 */ for (i = 2;i < 20;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
255 	/* 2^41 - 2^1 */ fe25519_square(&t1,&t0);
256 	/* 2^42 - 2^2 */ fe25519_square(&t0,&t1);
257 	/* 2^50 - 2^10 */ for (i = 2;i < 10;i += 2) { fe25519_square(&t1,&t0); fe25519_square(&t0,&t1); }
260 	/* 2^51 - 2^1 */ fe25519_square(&t0,&z2_50_0);
261 	/* 2^52 - 2^2 */ fe25519_square(&t1,&t0);
262 	/* 2^100 - 2^50 */ for (i = 2;i < 50;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
265 	/* 2^101 - 2^1 */ fe25519_square(&t1,&z2_100_0);
266 	/* 2^102 - 2^2 */ fe25519_square(&t0,&t1);
267 	/* 2^200 - 2^100 */ for (i = 2;i < 100;i += 2) { fe25519_square(&t1,&t0); fe25519_square(&t0,&t1); }
270 	/* 2^201 - 2^1 */ fe25519_square(&t0,&t1);
271 	/* 2^202 - 2^2 */ fe25519_square(&t1,&t0);
272 	/* 2^250 - 2^50 */ for (i = 2;i < 50;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
275 	/* 2^251 - 2^1 */ fe25519_square(&t1,&t0);
276 	/* 2^252 - 2^2 */ fe25519_square(&t0,&t1);
277 	/* 2^253 - 2^3 */ fe25519_square(&t1,&t0);
278 	/* 2^254 - 2^4 */ fe25519_square(&t0,&t1);
279 	/* 2^255 - 2^5 */ fe25519_square(&t1,&t0);
296 	/* 2 */ fe25519_square(&z2,x);
297 	/* 4 */ fe25519_square(&t,&z2);
298 	/* 8 */ fe25519_square(&t,&t);
301 	/* 22 */ fe25519_square(&t,&z11);
304 	/* 2^6 - 2^1 */ fe25519_square(&t,&z2_5_0);
305 	/* 2^10 - 2^5 */ for (i = 1;i < 5;i++) { fe25519_square(&t,&t); }
308 	/* 2^11 - 2^1 */ fe25519_square(&t,&z2_10_0);
309 	/* 2^20 - 2^10 */ for (i = 1;i < 10;i++) { fe25519_square(&t,&t); }
312 	/* 2^21 - 2^1 */ fe25519_square(&t,&z2_20_0);
313 	/* 2^40 - 2^20 */ for (i = 1;i < 20;i++) { fe25519_square(&t,&t); }
316 	/* 2^41 - 2^1 */ fe25519_square(&t,&t);
317 	/* 2^50 - 2^10 */ for (i = 1;i < 10;i++) { fe25519_square(&t,&t); }
320 	/* 2^51 - 2^1 */ fe25519_square(&t,&z2_50_0);
321 	/* 2^100 - 2^50 */ for (i = 1;i < 50;i++) { fe25519_square(&t,&t); }
324 	/* 2^101 - 2^1 */ fe25519_square(&t,&z2_100_0);
325 	/* 2^200 - 2^100 */ for (i = 1;i < 100;i++) { fe25519_square(&t,&t); }
328 	/* 2^201 - 2^1 */ fe25519_square(&t,&t);
329 	/* 2^250 - 2^50 */ for (i = 1;i < 50;i++) { fe25519_square(&t,&t); }
332 	/* 2^251 - 2^1 */ fe25519_square(&t,&t);
333 	/* 2^252 - 2^2 */ fe25519_square(&t,&t);