47   uint32_t h0, h1, h2, h3, h4;  member
86   state->h3 += ((((uint64_t)t3 << 32) | t2) >> 14) & 0x3ffffff;  in poly1305_update()
91          mul32x32_64(state->h2, state->s3) + mul32x32_64(state->h3, state->s2) +  in poly1305_update()
94          mul32x32_64(state->h2, state->s4) + mul32x32_64(state->h3, state->s3) +  in poly1305_update()
97          mul32x32_64(state->h2, state->r0) + mul32x32_64(state->h3, state->s4) +  in poly1305_update()
100          mul32x32_64(state->h2, state->r1) + mul32x32_64(state->h3, state->r0) +  in poly1305_update()
103          mul32x32_64(state->h2, state->r2) + mul32x32_64(state->h3, state->r1) +  in poly1305_update()
115   state->h3 = (uint32_t)t[3] & 0x3ffffff;  in poly1305_update()
149   state->h3 += ((((uint64_t)t3 << 32) | t2) >> 14) & 0x3ffffff;  in poly1305_update()
194   state->h3 = 0;  in CRYPTO_poly1305_init()
271   state->h3 += b;  in CRYPTO_poly1305_finish()
272   b = state->h3 >> 26;  in CRYPTO_poly1305_finish()
273   state->h3 = state->h3 & 0x3ffffff;  in CRYPTO_poly1305_finish()
288   g3 = state->h3 + b;  in CRYPTO_poly1305_finish()
298   state->h3 = (state->h3 & nb) | (g3 & b);  in CRYPTO_poly1305_finish()
304   f2 = ((state->h2 >> 12) | (state->h3 << 14)) +  in CRYPTO_poly1305_finish()
306   f3 = ((state->h3 >> 18) | (state->h4 << 8)) +  in CRYPTO_poly1305_finish()