47   uint32_t h0, h1, h2, h3, h4;  member
87   state->h4 += (t3 >> 8) | (1 << 24);  in poly1305_update()
92          mul32x32_64(state->h4, state->s1);  in poly1305_update()
95          mul32x32_64(state->h4, state->s2);  in poly1305_update()
98          mul32x32_64(state->h4, state->s3);  in poly1305_update()
101          mul32x32_64(state->h4, state->s4);  in poly1305_update()
104          mul32x32_64(state->h4, state->r0);  in poly1305_update()
118   state->h4 = (uint32_t)t[4] & 0x3ffffff;  in poly1305_update()
150   state->h4 += (t3 >> 8);  in poly1305_update()
195   state->h4 = 0;  in CRYPTO_poly1305_init()
274   state->h4 += b;  in CRYPTO_poly1305_finish()
275   b = state->h4 >> 26;  in CRYPTO_poly1305_finish()
276   state->h4 = state->h4 & 0x3ffffff;  in CRYPTO_poly1305_finish()
291   g4 = state->h4 + b - (1 << 26);  in CRYPTO_poly1305_finish()
299   state->h4 = (state->h4 & nb) | (g4 & b);  in CRYPTO_poly1305_finish()
306   f3 = ((state->h3 >> 18) | (state->h4 << 8)) +  in CRYPTO_poly1305_finish()