usr.bin/ssh/ed25519.c

21 #define uint32 crypto_uint32
90   crypto_uint32 v[32];
132 static crypto_uint32 fe25519_equal(crypto_uint32 a,crypto_uint32 b) /* 16-bit inputs */
134   crypto_uint32 x = a ^ b; /* 0: yes; 1..65535: no */
140 static crypto_uint32 ge(crypto_uint32 a,crypto_uint32 b) /* 16-bit inputs */
149 static crypto_uint32 times19(crypto_uint32 a)
154 static crypto_uint32 times38(crypto_uint32 a)
161   crypto_uint32 t;
181   crypto_uint32 t;
203   crypto_uint32 m = fe25519_equal(r->v[31],127);
260   crypto_uint32 mask = b;
304   crypto_uint32 t[32];
315   crypto_uint32 t[63];
471   crypto_uint32 v[32];
477   crypto_uint32 v[16];
514 static const crypto_uint32 sc25519_m[32] = {0xED, 0xD3, 0xF5, 0x5C, 0x1A, 0x63, 0x12, 0x58, 0xD6, 0x9C, 0xF7, 0xA2, 0xDE, 0xF9, 0xDE, 0x14,
517 static const crypto_uint32 sc25519_mu[33] = {0x1B, 0x13, 0x2C, 0x0A, 0xA3, 0xE5, 0x9C, 0xED, 0xA7, 0x29, 0x63, 0x08, 0x5D, 0x21, 0x06, 0x21,
520 static crypto_uint32 lt(crypto_uint32 a,crypto_uint32 b) /* 16-bit inputs */
531   crypto_uint32 pb = 0;
532   crypto_uint32 b;
533   crypto_uint32 mask;
550 static void barrett_reduce(sc25519 *r, const crypto_uint32 x[64])
554   crypto_uint32 q2[66];
555   crypto_uint32 *q3 = q2 + 33;
556   crypto_uint32 r1[33];
557   crypto_uint32 r2[33];
558   crypto_uint32 carry;
559   crypto_uint32 pb = 0;
560   crypto_uint32 b;
604   crypto_uint32 t[64];
614   crypto_uint32 t[64];
646   crypto_uint32 t[64];
1744   crypto_uint32 y = x; /* 0: yes; 1..255: no */