35   uint32_t h0, h1, h2, h3, h4;  member
79   state->h4 += (t3 >> 8) | (1 << 24);  in poly1305_update()
84          mul32x32_64(state->h4, state->s1);  in poly1305_update()
87          mul32x32_64(state->h4, state->s2);  in poly1305_update()
90          mul32x32_64(state->h4, state->s3);  in poly1305_update()
93          mul32x32_64(state->h4, state->s4);  in poly1305_update()
96          mul32x32_64(state->h4, state->r0);  in poly1305_update()
110   state->h4 = (uint32_t)t[4] & 0x3ffffff;  in poly1305_update()
142   state->h4 += (t3 >> 8);  in poly1305_update()
187   state->h4 = 0;  in CRYPTO_poly1305_init()
269   state->h4 += b;  in CRYPTO_poly1305_finish()
270   b = state->h4 >> 26;  in CRYPTO_poly1305_finish()
271   state->h4 = state->h4 & 0x3ffffff;  in CRYPTO_poly1305_finish()
286   g4 = state->h4 + b - (1 << 26);  in CRYPTO_poly1305_finish()
294   state->h4 = (state->h4 & nb) | (g4 & b);  in CRYPTO_poly1305_finish()
302   uint64_t f3 = ((state->h3 >> 18) | (state->h4 << 8)) +  in CRYPTO_poly1305_finish()