47   uint32_t h0, h1, h2, h3, h4;  member
91   state->h4 += (t3 >> 8) | (1 << 24);  in poly1305_update()
96          mul32x32_64(state->h4, state->s1);  in poly1305_update()
99          mul32x32_64(state->h4, state->s2);  in poly1305_update()
102          mul32x32_64(state->h4, state->s3);  in poly1305_update()
105          mul32x32_64(state->h4, state->s4);  in poly1305_update()
108          mul32x32_64(state->h4, state->r0);  in poly1305_update()
122   state->h4 = (uint32_t)t[4] & 0x3ffffff;  in poly1305_update()
154   state->h4 += (t3 >> 8);  in poly1305_update()
199   state->h4 = 0;  in CRYPTO_poly1305_init()
277   state->h4 += b;  in CRYPTO_poly1305_finish()
278   b = state->h4 >> 26;  in CRYPTO_poly1305_finish()
279   state->h4 = state->h4 & 0x3ffffff;  in CRYPTO_poly1305_finish()
294   g4 = state->h4 + b - (1 << 26);  in CRYPTO_poly1305_finish()
302   state->h4 = (state->h4 & nb) | (g4 & b);  in CRYPTO_poly1305_finish()
309   f3 = ((state->h3 >> 18) | (state->h4 << 8)) +  in CRYPTO_poly1305_finish()