Home
last modified time | relevance | path

Searched refs:limb (Results 1 – 18 of 18) sorted by relevance

/freebsd-head/crypto/openssl/crypto/ec/curve448/
HDscalar.c58 chain = (chain + accum[i]) - sub->limb[i]; in sc_subx()
59 out->limb[i] = (c448_word_t)chain; in sc_subx()
66 chain = (chain + out->limb[i]) + (p->limb[i] & borrow); in sc_subx()
67 out->limb[i] = (c448_word_t)chain; in sc_subx()
80 c448_word_t mand = a->limb[i]; in sc_montmul()
81 const c448_word_t *mier = b->limb; in sc_montmul()
93 mier = sc_p->limb; in sc_montmul()
120 sc_subx(out, a->limb, b, sc_p, 0); in ossl_curve448_scalar_sub()
131 chain = (chain + a->limb[i]) + b->limb[i]; in ossl_curve448_scalar_add()
132 out->limb[i] = (c448_word_t)chain; in ossl_curve448_scalar_add()
[all …]
HDf_generic.c35 buffer |= ((dword_t) red->limb[LIMBPERM(j)]) << fill; in gf_serialize()
52 return 0 - (y->limb[0] & 1); in gf_hibit()
62 return 0 - (y->limb[0] & 1); in gf_lobit()
87 x->limb[LIMBPERM(i)] = (word_t) in gf_deserialize()
92 (scarry + x->limb[LIMBPERM(i)] - in gf_deserialize()
93 MODULUS->limb[LIMBPERM(i)]) >> (8 * sizeof(word_t)); in gf_deserialize()
115 scarry = scarry + a->limb[LIMBPERM(i)] - MODULUS->limb[LIMBPERM(i)]; in gf_strong_reduce()
116 a->limb[LIMBPERM(i)] = scarry & LIMB_MASK(LIMBPERM(i)); in gf_strong_reduce()
132 carry + a->limb[LIMBPERM(i)] + in gf_strong_reduce()
133 (scarry_0 & MODULUS->limb[LIMBPERM(i)]); in gf_strong_reduce()
[all …]
HDfield.h36 word_t limb[NLIMBS]; member
139 x[0].limb[i] = constant_time_select_32(is_z, z[0].limb[i], in gf_cond_sel()
140 y[0].limb[i]); in gf_cond_sel()
143 x[0].limb[i] = constant_time_select_64(is_z, z[0].limb[i], in gf_cond_sel()
144 y[0].limb[i]); in gf_cond_sel()
165 constant_time_cond_swap_32(swap, &(x[0].limb[i]), &(y->limb[i])); in gf_cond_swap()
168 constant_time_cond_swap_64(swap, &(x[0].limb[i]), &(y->limb[i])); in gf_cond_swap()
HDpoint_448.h68 c448_word_t limb[C448_SCALAR_LIMBS]; member
HDcurve448.c256 (scalar1x->limb[bit / WBITS] >> (bit % WBITS) & 1) << k; in ossl_curve448_precomputed_scalarmul()
559 uint64_t current = scalar->limb[0] & 0xFFFF; in recode_wnaf()
562 const unsigned int B_OVER_16 = sizeof(scalar->limb[0]) / 2; in recode_wnaf()
579 current += (uint32_t)((scalar->limb[w / B_OVER_16] in recode_wnaf()
/freebsd-head/crypto/openssl/crypto/ec/curve448/arch_32/
HDf_impl.h28 out->limb[i] = a->limb[i] + b->limb[i]; in gf_add_RAW()
36 out->limb[i] = a->limb[i] - b->limb[i]; in gf_sub_RAW()
45 a->limb[i] += (i == NLIMBS / 2) ? co2 : co1; in gf_bias()
51 uint32_t tmp = a->limb[NLIMBS - 1] >> 28; in gf_weak_reduce()
54 a->limb[NLIMBS / 2] += tmp; in gf_weak_reduce()
56 a->limb[i] = (a->limb[i] & mask) + (a->limb[i - 1] >> 28); in gf_weak_reduce()
57 a->limb[0] = (a->limb[0] & mask) + tmp; in gf_weak_reduce()
HDf_impl32.c26 const uint32_t *a = as->limb, *b = bs->limb;
27 uint32_t *c = cs->limb;
75 const uint32_t *a = as->limb;
76 uint32_t *c = cs->limb;
/freebsd-head/crypto/openssl/crypto/ec/curve448/arch_64/
HDf_impl.h26 out->limb[i] = a->limb[i] + b->limb[i]; in gf_add_RAW()
37 out->limb[i] = a->limb[i] - b->limb[i] + ((i == NLIMBS / 2) ? co2 : co1); in gf_sub_RAW()
49 uint64_t tmp = a->limb[NLIMBS - 1] >> 56; in gf_weak_reduce()
52 a->limb[NLIMBS / 2] += tmp; in gf_weak_reduce()
54 a->limb[i] = (a->limb[i] & mask) + (a->limb[i - 1] >> 56); in gf_weak_reduce()
55 a->limb[0] = (a->limb[0] & mask) + tmp; in gf_weak_reduce()
HDf_impl64.c26 const uint64_t *a = as->limb, *b = bs->limb;
27 uint64_t *c = cs->limb;
78 const uint64_t *a = as->limb;
79 uint64_t *c = cs->limb;
104 const uint64_t *a = as->limb;
105 uint64_t *c = cs->limb;
/freebsd-head/crypto/openssl/crypto/ec/
HDecp_nistp521.c131 typedef uint64_t limb; typedef
132 typedef limb limb_aX __attribute((__aligned__(1)));
133 typedef limb felem[NLIMBS];
136 static const limb bottom57bits = 0x1ffffffffffffff;
137 static const limb bottom58bits = 0x3ffffffffffffff;
145 out[0] = (*((limb *) & in[0])) & bottom58bits; in bin66_to_felem()
163 (*((limb *) & out[0])) = in[0]; in felem_to_bin66()
247 static void felem_scalar(felem out, const felem in, limb scalar) in felem_scalar()
261 static void felem_scalar64(felem out, limb scalar) in felem_scalar64()
275 static void felem_scalar128(largefelem out, limb scalar) in felem_scalar128()
[all …]
HDecp_nistp256.c115 typedef uint128_t limb; typedef
116 typedef limb felem[NLIMBS];
117 typedef limb longfelem[NLIMBS * 2];
245 #define two105m41m9 (((limb)1) << 105) - (((limb)1) << 41) - (((limb)1) << 9)
246 #define two105 (((limb)1) << 105)
247 #define two105m41p9 (((limb)1) << 105) - (((limb)1) << 41) + (((limb)1) << 9)
290 #define two107m43m11 (((limb)1) << 107) - (((limb)1) << 43) - (((limb)1) << 11)
291 #define two107 (((limb)1) << 107)
292 #define two107m43p11 (((limb)1) << 107) - (((limb)1) << 43) + (((limb)1) << 11)
331 static const limb two70m8p6 = in longfelem_diff()
[all …]
HDecp_nistp224.c75 typedef uint64_t limb; typedef
79 typedef limb felem[4];
313 out[0] = *((const limb *)(in)) & 0x00ffffffffffffff; in bin28_to_felem()
397 static const limb two58p2 = (((limb) 1) << 58) + (((limb) 1) << 2); in felem_diff()
398 static const limb two58m2 = (((limb) 1) << 58) - (((limb) 1) << 2); in felem_diff()
399 static const limb two58m42m2 = (((limb) 1) << 58) - in felem_diff()
400 (((limb) 1) << 42) - (((limb) 1) << 2); in felem_diff()
469 static void felem_scalar(felem out, const limb scalar) in felem_scalar()
495 limb tmp0, tmp1, tmp2; in felem_square()
611 static const int64_t two56 = ((limb) 1) << 56; in felem_contract()
[all …]
/freebsd-head/crypto/openssl/crypto/bn/
HDbn_lib.c1068 BN_ULONG limb; in bn_correct_top_consttime() local
1072 limb = a->d[j]; in bn_correct_top_consttime()
1073 limb |= 0 - limb; in bn_correct_top_consttime()
1074 limb >>= BN_BITS2 - 1; in bn_correct_top_consttime()
1075 limb = 0 - limb; in bn_correct_top_consttime()
1076 mask = (unsigned int)limb; in bn_correct_top_consttime()
/freebsd-head/crypto/openssl/test/recipes/30-test_evp_data/
HDevpmac_poly1305.txt54 # What happens if data limb is all ones and there is carry from lower limb?
278 # limb carry
/freebsd-head/crypto/openssl/Configurations/
HDREADME.md223 limb size is implied in
/freebsd-head/crypto/openssl/
HDCHANGES.md10649 mpz_t when openssl and GMP use the same limb size. Otherwise the
/freebsd-head/share/dict/
HDweb2a13903 corolla limb
HDweb2106753 limb