66 typedef limb felem[NLIMBS];  typedef
73 static const felem kOne = {
78 static const felem kZero = {0};
79 static const felem kP = {
84 static const felem k2P = {
196 static void felem_reduce_carry(felem inout, limb carry) {  in felem_reduce_carry()
218 static void felem_sum(felem out, const felem in, const felem in2) {  in felem_sum()
249 static const felem zero31 = { two31m3, two30m2, two31m2, two30p13m2, two31m2, two30m2, two31p24m2, …
256 static void felem_diff(felem out, const felem in, const felem in2) {  in felem_diff()
291 static void felem_reduce_degree(felem out, u64 tmp[17]) {  in felem_reduce_degree()
480 static void felem_square(felem out, const felem in) {  in felem_square()
529 static void felem_mul(felem out, const felem in, const felem in2) {  in felem_mul()
598 static void felem_assign(felem out, const felem in) {  in felem_assign()
599   memcpy(out, in, sizeof(felem));  in felem_assign()
609 static void felem_inv(felem out, const felem in) {  in felem_inv()
610   felem ftmp, ftmp2;  in felem_inv()
612   felem e2, e4, e8, e16, e32, e64;  in felem_inv()
674 static void felem_scalar_3(felem out) {  in felem_scalar_3()
701 static void felem_scalar_4(felem out) {  in felem_scalar_4()
732 static void felem_scalar_8(felem out) {  in felem_scalar_8()
761 static char felem_is_zero_vartime(const felem in) {  in felem_is_zero_vartime()
804 static void point_double(felem x_out, felem y_out, felem z_out, const felem x,  in point_double()
805                          const felem y, const felem z) {  in point_double()
806   felem delta, gamma, alpha, beta, tmp, tmp2;  in point_double()
841 static void point_add_mixed(felem x_out, felem y_out, felem z_out,  in point_add_mixed()
842                             const felem x1, const felem y1, const felem z1,  in point_add_mixed()
843                             const felem x2, const felem y2) {  in point_add_mixed()
844   felem z1z1, z1z1z1, s2, u2, h, i, j, r, rr, v, tmp;  in point_add_mixed()
879 static void point_add(felem x_out, felem y_out, felem z_out, const felem x1,  in point_add()
880                       const felem y1, const felem z1, const felem x2,  in point_add()
881                       const felem y2, const felem z2) {  in point_add()
882   felem z1z1, z1z1z1, z2z2, z2z2z2, s1, s2, u1, u2, h, i, j, r, rr, v, tmp;  in point_add()
927     felem x_out, felem y_out, felem z_out, const felem x1, const felem y1,  in point_add_or_double_vartime()
928     const felem z1, const felem x2, const felem y2, const felem z2) {  in point_add_or_double_vartime()
929   felem z1z1, z1z1z1, z2z2, z2z2z2, s1, s2, u1, u2, h, i, j, r, rr, v, tmp;  in point_add_or_double_vartime()
977 static void copy_conditional(felem out, const felem in, limb mask) {  in copy_conditional()
988 static void select_affine_point(felem out_x, felem out_y, const limb* table,  in select_affine_point()
992   memset(out_x, 0, sizeof(felem));  in select_affine_point()
993   memset(out_y, 0, sizeof(felem));  in select_affine_point()
1012 static void select_jacobian_point(felem out_x, felem out_y, felem out_z,  in select_jacobian_point()
1016   memset(out_x, 0, sizeof(felem));  in select_jacobian_point()
1017   memset(out_y, 0, sizeof(felem));  in select_jacobian_point()
1018   memset(out_z, 0, sizeof(felem));  in select_jacobian_point()
1046 static void scalar_base_mult(felem nx, felem ny, felem nz,  in scalar_base_mult()
1052   felem px, py;  in scalar_base_mult()
1053   felem tx, ty, tz;  in scalar_base_mult()
1055   memset(nx, 0, sizeof(felem));  in scalar_base_mult()
1056   memset(ny, 0, sizeof(felem));  in scalar_base_mult()
1057   memset(nz, 0, sizeof(felem));  in scalar_base_mult()
1103 static void point_to_affine(felem x_out, felem y_out, const felem nx,  in point_to_affine()
1104                             const felem ny, const felem nz) {  in point_to_affine()
1105   felem z_inv, z_inv_sq;  in point_to_affine()
1114 static void scalar_mult(felem nx, felem ny, felem nz, const felem x,  in scalar_mult()
1115                         const felem y, const p256_int* scalar) {  in scalar_mult()
1117   felem px, py, pz, tx, ty, tz;  in scalar_mult()
1118   felem precomp[16][3];  in scalar_mult()
1122   memset(precomp, 0, sizeof(felem) * 3);  in scalar_mult()
1123   memcpy(&precomp[1][0], x, sizeof(felem));  in scalar_mult()
1124   memcpy(&precomp[1][1], y, sizeof(felem));  in scalar_mult()
1125   memcpy(&precomp[1][2], kOne, sizeof(felem));  in scalar_mult()
1135   memset(nx, 0, sizeof(felem));  in scalar_mult()
1136   memset(ny, 0, sizeof(felem));  in scalar_mult()
1137   memset(nz, 0, sizeof(felem));  in scalar_mult()
1179 static void to_montgomery(felem out, const p256_int* in) {  in to_montgomery()
1200 static void from_montgomery(p256_int* out, const felem in) {  in from_montgomery()
1226   felem x, y, z;  in p256_base_point_mul()
1231     felem x_affine, y_affine;  in p256_base_point_mul()
1248   felem x1, y1, z1, x2, y2, z2, px, py;  in p256_points_mul_vartime()