167     voprf_blind(const VOPRF_METHOD *method, CBB *cbb, size_t count) {  in STACK_OF()
211     if (!cbb_add_point(cbb, group, &pretoken->Tp)) {  in STACK_OF()
230   CBB cbb;  in hash_to_scalar_dleq()  local
231   CBB_zero(&cbb);  in hash_to_scalar_dleq()
234   if (!CBB_init(&cbb, 0) ||  in hash_to_scalar_dleq()
235       !CBB_add_bytes(&cbb, kDLEQLabel, sizeof(kDLEQLabel)) ||  in hash_to_scalar_dleq()
236       !cbb_add_point(&cbb, method->group, X) ||  in hash_to_scalar_dleq()
237       !cbb_add_point(&cbb, method->group, T) ||  in hash_to_scalar_dleq()
238       !cbb_add_point(&cbb, method->group, W) ||  in hash_to_scalar_dleq()
239       !cbb_add_point(&cbb, method->group, K0) ||  in hash_to_scalar_dleq()
240       !cbb_add_point(&cbb, method->group, K1) ||  in hash_to_scalar_dleq()
241       !CBB_finish(&cbb, &buf, &len) ||  in hash_to_scalar_dleq()
250   CBB_cleanup(&cbb);  in hash_to_scalar_dleq()
265   CBB cbb;  in hash_to_scalar_batch()  local
266   CBB_zero(&cbb);  in hash_to_scalar_batch()
269   if (!CBB_init(&cbb, 0) ||  in hash_to_scalar_batch()
270       !CBB_add_bytes(&cbb, kDLEQBatchLabel, sizeof(kDLEQBatchLabel)) ||  in hash_to_scalar_batch()
271       !CBB_add_bytes(&cbb, CBB_data(points), CBB_len(points)) ||  in hash_to_scalar_batch()
272       !CBB_add_u16(&cbb, (uint16_t)index) ||  in hash_to_scalar_batch()
273       !CBB_finish(&cbb, &buf, &len) ||  in hash_to_scalar_batch()
282   CBB_cleanup(&cbb);  in hash_to_scalar_batch()
287 static int dleq_generate(const VOPRF_METHOD *method, CBB *cbb,  in dleq_generate()  argument
336   if (!scalar_to_cbb(cbb, group, &c) ||  in dleq_generate()
337       !scalar_to_cbb(cbb, group, &u)) {  in dleq_generate()
414                       const TRUST_TOKEN_ISSUER_KEY *key, CBB *cbb, CBS *cbs,  in voprf_sign()  argument
453         !cbb_add_point(cbb, group, &Z_affine)) {  in voprf_sign()
465     if (!CBB_flush(cbb)) {  in voprf_sign()
490   if (!CBB_add_u16_length_prefixed(cbb, &proof) ||  in voprf_sign()
492       !CBB_flush(cbb)) {  in voprf_sign()
730 STACK_OF(TRUST_TOKEN_PRETOKEN) * voprf_exp2_blind(CBB *cbb, size_t count) {  in STACK_OF()
734   return voprf_blind(&voprf_exp2_method, cbb, count);  in STACK_OF()
737 int voprf_exp2_sign(const TRUST_TOKEN_ISSUER_KEY *key, CBB *cbb, CBS *cbs,  in voprf_exp2_sign()  argument
743   return voprf_sign(&voprf_exp2_method, key, cbb, cbs, num_requested,  in voprf_exp2_sign()