Lines Matching refs:t
29 fe25519 t; in fe25519_pack() local
30 t = *x; in fe25519_pack()
31 x25519_x86_64_freeze(&t); in fe25519_pack()
33 r[0] = (uint8_t)(t.v[0] & 0xff); in fe25519_pack()
34 r[1] = (uint8_t)((t.v[0] >> 8) & 0xff); in fe25519_pack()
35 r[2] = (uint8_t)((t.v[0] >> 16) & 0xff); in fe25519_pack()
36 r[3] = (uint8_t)((t.v[0] >> 24) & 0xff); in fe25519_pack()
37 r[4] = (uint8_t)((t.v[0] >> 32) & 0xff); in fe25519_pack()
38 r[5] = (uint8_t)((t.v[0] >> 40) & 0xff); in fe25519_pack()
39 r[6] = (uint8_t)((t.v[0] >> 48)); in fe25519_pack()
41 r[6] ^= (uint8_t)((t.v[1] << 3) & 0xf8); in fe25519_pack()
42 r[7] = (uint8_t)((t.v[1] >> 5) & 0xff); in fe25519_pack()
43 r[8] = (uint8_t)((t.v[1] >> 13) & 0xff); in fe25519_pack()
44 r[9] = (uint8_t)((t.v[1] >> 21) & 0xff); in fe25519_pack()
45 r[10] = (uint8_t)((t.v[1] >> 29) & 0xff); in fe25519_pack()
46 r[11] = (uint8_t)((t.v[1] >> 37) & 0xff); in fe25519_pack()
47 r[12] = (uint8_t)((t.v[1] >> 45)); in fe25519_pack()
49 r[12] ^= (uint8_t)((t.v[2] << 6) & 0xc0); in fe25519_pack()
50 r[13] = (uint8_t)((t.v[2] >> 2) & 0xff); in fe25519_pack()
51 r[14] = (uint8_t)((t.v[2] >> 10) & 0xff); in fe25519_pack()
52 r[15] = (uint8_t)((t.v[2] >> 18) & 0xff); in fe25519_pack()
53 r[16] = (uint8_t)((t.v[2] >> 26) & 0xff); in fe25519_pack()
54 r[17] = (uint8_t)((t.v[2] >> 34) & 0xff); in fe25519_pack()
55 r[18] = (uint8_t)((t.v[2] >> 42) & 0xff); in fe25519_pack()
56 r[19] = (uint8_t)((t.v[2] >> 50)); in fe25519_pack()
58 r[19] ^= (uint8_t)((t.v[3] << 1) & 0xfe); in fe25519_pack()
59 r[20] = (uint8_t)((t.v[3] >> 7) & 0xff); in fe25519_pack()
60 r[21] = (uint8_t)((t.v[3] >> 15) & 0xff); in fe25519_pack()
61 r[22] = (uint8_t)((t.v[3] >> 23) & 0xff); in fe25519_pack()
62 r[23] = (uint8_t)((t.v[3] >> 31) & 0xff); in fe25519_pack()
63 r[24] = (uint8_t)((t.v[3] >> 39) & 0xff); in fe25519_pack()
64 r[25] = (uint8_t)((t.v[3] >> 47)); in fe25519_pack()
66 r[25] ^= (uint8_t)((t.v[4] << 4) & 0xf0); in fe25519_pack()
67 r[26] = (uint8_t)((t.v[4] >> 4) & 0xff); in fe25519_pack()
68 r[27] = (uint8_t)((t.v[4] >> 12) & 0xff); in fe25519_pack()
69 r[28] = (uint8_t)((t.v[4] >> 20) & 0xff); in fe25519_pack()
70 r[29] = (uint8_t)((t.v[4] >> 28) & 0xff); in fe25519_pack()
71 r[30] = (uint8_t)((t.v[4] >> 36) & 0xff); in fe25519_pack()
72 r[31] = (uint8_t)((t.v[4] >> 44)); in fe25519_pack()
127 fe25519 t; in fe25519_invert() local
131 /* 4 */ x25519_x86_64_square(&t, &z2); in fe25519_invert()
132 /* 8 */ x25519_x86_64_square(&t, &t); in fe25519_invert()
133 /* 9 */ x25519_x86_64_mul(&z9, &t, x); in fe25519_invert()
135 /* 22 */ x25519_x86_64_square(&t, &z11); in fe25519_invert()
136 /* 2^5 - 2^0 = 31 */ x25519_x86_64_mul(&z2_5_0, &t, &z9); in fe25519_invert()
138 /* 2^6 - 2^1 */ x25519_x86_64_square(&t, &z2_5_0); in fe25519_invert()
139 /* 2^20 - 2^10 */ for (i = 1; i < 5; i++) { x25519_x86_64_square(&t, &t); } in fe25519_invert()
140 /* 2^10 - 2^0 */ x25519_x86_64_mul(&z2_10_0, &t, &z2_5_0); in fe25519_invert()
142 /* 2^11 - 2^1 */ x25519_x86_64_square(&t, &z2_10_0); in fe25519_invert()
143 /* 2^20 - 2^10 */ for (i = 1; i < 10; i++) { x25519_x86_64_square(&t, &t); } in fe25519_invert()
144 /* 2^20 - 2^0 */ x25519_x86_64_mul(&z2_20_0, &t, &z2_10_0); in fe25519_invert()
146 /* 2^21 - 2^1 */ x25519_x86_64_square(&t, &z2_20_0); in fe25519_invert()
147 /* 2^40 - 2^20 */ for (i = 1; i < 20; i++) { x25519_x86_64_square(&t, &t); } in fe25519_invert()
148 /* 2^40 - 2^0 */ x25519_x86_64_mul(&t, &t, &z2_20_0); in fe25519_invert()
150 /* 2^41 - 2^1 */ x25519_x86_64_square(&t, &t); in fe25519_invert()
151 /* 2^50 - 2^10 */ for (i = 1; i < 10; i++) { x25519_x86_64_square(&t, &t); } in fe25519_invert()
152 /* 2^50 - 2^0 */ x25519_x86_64_mul(&z2_50_0, &t, &z2_10_0); in fe25519_invert()
154 /* 2^51 - 2^1 */ x25519_x86_64_square(&t, &z2_50_0); in fe25519_invert()
155 /* 2^100 - 2^50 */ for (i = 1; i < 50; i++) { x25519_x86_64_square(&t, &t); } in fe25519_invert()
156 /* 2^100 - 2^0 */ x25519_x86_64_mul(&z2_100_0, &t, &z2_50_0); in fe25519_invert()
158 /* 2^101 - 2^1 */ x25519_x86_64_square(&t, &z2_100_0); in fe25519_invert()
160 x25519_x86_64_square(&t, &t); in fe25519_invert()
162 /* 2^200 - 2^0 */ x25519_x86_64_mul(&t, &t, &z2_100_0); in fe25519_invert()
164 /* 2^201 - 2^1 */ x25519_x86_64_square(&t, &t); in fe25519_invert()
165 /* 2^250 - 2^50 */ for (i = 1; i < 50; i++) { x25519_x86_64_square(&t, &t); } in fe25519_invert()
166 /* 2^250 - 2^0 */ x25519_x86_64_mul(&t, &t, &z2_50_0); in fe25519_invert()
168 /* 2^251 - 2^1 */ x25519_x86_64_square(&t, &t); in fe25519_invert()
169 /* 2^252 - 2^2 */ x25519_x86_64_square(&t, &t); in fe25519_invert()
170 /* 2^253 - 2^3 */ x25519_x86_64_square(&t, &t); in fe25519_invert()
172 /* 2^254 - 2^4 */ x25519_x86_64_square(&t, &t); in fe25519_invert()
174 /* 2^255 - 2^5 */ x25519_x86_64_square(&t, &t); in fe25519_invert()
175 /* 2^255 - 21 */ x25519_x86_64_mul(r, &t, &z11); in fe25519_invert()
216 fe25519 t; in x25519_x86_64() local
218 fe25519_unpack(&t, point); in x25519_x86_64()
219 mladder(&t, &z, e); in x25519_x86_64()
221 x25519_x86_64_mul(&t, &t, &z); in x25519_x86_64()
222 fe25519_pack(out, &t); in x25519_x86_64()