Lines Matching refs:h2
100 u32 h0, h1, h2, h3, h4; in poly1305_blocks() local
123 h2 = dctx->h[2]; in poly1305_blocks()
132 h2 += (get_unaligned_le32(src + 6) >> 4) & 0x3ffffff; in poly1305_blocks()
137 d0 = mlt(h0, r0) + mlt(h1, s4) + mlt(h2, s3) + in poly1305_blocks()
139 d1 = mlt(h0, r1) + mlt(h1, r0) + mlt(h2, s4) + in poly1305_blocks()
141 d2 = mlt(h0, r2) + mlt(h1, r1) + mlt(h2, r0) + in poly1305_blocks()
143 d3 = mlt(h0, r3) + mlt(h1, r2) + mlt(h2, r1) + in poly1305_blocks()
145 d4 = mlt(h0, r4) + mlt(h1, r3) + mlt(h2, r2) + in poly1305_blocks()
151 d3 += sr(d2, 26); h2 = and(d2, 0x3ffffff); in poly1305_blocks()
162 dctx->h[2] = h2; in poly1305_blocks()
207 u32 h0, h1, h2, h3, h4; in crypto_poly1305_final() local
225 h2 = dctx->h[2]; in crypto_poly1305_final()
229 h2 += (h1 >> 26); h1 = h1 & 0x3ffffff; in crypto_poly1305_final()
230 h3 += (h2 >> 26); h2 = h2 & 0x3ffffff; in crypto_poly1305_final()
238 g2 = h2 + (g1 >> 26); g1 &= 0x3ffffff; in crypto_poly1305_final()
252 h2 = (h2 & mask) | g2; in crypto_poly1305_final()
258 h1 = (h1 >> 6) | (h2 << 20); in crypto_poly1305_final()
259 h2 = (h2 >> 12) | (h3 << 14); in crypto_poly1305_final()
265 f = (f >> 32) + h2 + dctx->s[2]; put_unaligned_le32(f, dst + 8); in crypto_poly1305_final()