36 	uint32_t h0,h1,h2,h3,h4;  in poly1305_auth()  local
70 	h4 = 0;  in poly1305_auth()
87 	h4 += (t3 >> 8) | (1 << 24);  in poly1305_auth()
91 …2x32_64(h0,r0) + mul32x32_64(h1,s4) + mul32x32_64(h2,s3) + mul32x32_64(h3,s2) + mul32x32_64(h4,s1);  in poly1305_auth()
92 …2x32_64(h0,r1) + mul32x32_64(h1,r0) + mul32x32_64(h2,s4) + mul32x32_64(h3,s3) + mul32x32_64(h4,s2);  in poly1305_auth()
93 …2x32_64(h0,r2) + mul32x32_64(h1,r1) + mul32x32_64(h2,r0) + mul32x32_64(h3,s4) + mul32x32_64(h4,s3);  in poly1305_auth()
94 …2x32_64(h0,r3) + mul32x32_64(h1,r2) + mul32x32_64(h2,r1) + mul32x32_64(h3,r0) + mul32x32_64(h4,s4);  in poly1305_auth()
95 …2x32_64(h0,r4) + mul32x32_64(h1,r3) + mul32x32_64(h2,r2) + mul32x32_64(h3,r1) + mul32x32_64(h4,r0);  in poly1305_auth()
101 	t[4] += b;      h4 = (uint32_t)t[4] & 0x3ffffff; b = (uint32_t)(t[4] >> 26);  in poly1305_auth()
124 	h4 += (t3 >> 8);  in poly1305_auth()
133 	h4 +=     b; b = h4 >> 26; h4 = h4 & 0x3ffffff;  in poly1305_auth()
141 	g4 = h4 + b - (1 << 26);  in poly1305_auth()
149 	h4 = (h4 & nb) | (g4 & b);  in poly1305_auth()
154 	f3 = ((h3 >> 18) | (h4 <<  8)) + (uint64_t)U8TO32_LE(&key[28]);  in poly1305_auth()