47   uint32_t h0, h1, h2, h3, h4;  member
84   state->h1 += ((((uint64_t)t1 << 32) | t0) >> 26) & 0x3ffffff;  in poly1305_update()
90   t[0] = mul32x32_64(state->h0, state->r0) + mul32x32_64(state->h1, state->s4) +  in poly1305_update()
93   t[1] = mul32x32_64(state->h0, state->r1) + mul32x32_64(state->h1, state->r0) +  in poly1305_update()
96   t[2] = mul32x32_64(state->h0, state->r2) + mul32x32_64(state->h1, state->r1) +  in poly1305_update()
99   t[3] = mul32x32_64(state->h0, state->r3) + mul32x32_64(state->h1, state->r2) +  in poly1305_update()
102   t[4] = mul32x32_64(state->h0, state->r4) + mul32x32_64(state->h1, state->r3) +  in poly1305_update()
109   state->h1 = (uint32_t)t[1] & 0x3ffffff;  in poly1305_update()
147   state->h1 += ((((uint64_t)t1 << 32) | t0) >> 26) & 0x3ffffff;  in poly1305_update()
192   state->h1 = 0;  in CRYPTO_poly1305_init()
265   state->h1 += b;  in CRYPTO_poly1305_finish()
266   b = state->h1 >> 26;  in CRYPTO_poly1305_finish()
267   state->h1 = state->h1 & 0x3ffffff;  in CRYPTO_poly1305_finish()
282   g1 = state->h1 + b;  in CRYPTO_poly1305_finish()
296   state->h1 = (state->h1 & nb) | (g1 & b);  in CRYPTO_poly1305_finish()
301   f0 = ((state->h0) | (state->h1 << 26)) + (uint64_t)U8TO32_LE(&state->key[0]);  in CRYPTO_poly1305_finish()
302   f1 = ((state->h1 >> 6) | (state->h2 << 20)) +  in CRYPTO_poly1305_finish()