Lines Matching +full:3 +full:d1
2 # SPDX-License-Identifier: GPL-1.0+ OR BSD-3-Clause
44 my ($ctx,$inp,$len,$padbit) = map("x$_",(0..3));
47 my ($h0,$h1,$h2,$r0,$r1,$s1,$t0,$t1,$d0,$d1,$d2) = map("x$_",(4..14));
96 adr $d1,.Lpoly1305_emit
101 stp w#$d0,w#$d1,[$len]
103 stp $d0,$d1,[$len]
124 mov w#$d1,w#$h0
130 lsr $d1,$h0,#32
136 add $d0,$d0,$d1,lsl#26 // base 2^26 -> base 2^64
137 lsr $d1,$d2,#12
139 add $d1,$d1,x15,lsl#14
140 adc $d1,$d1,xzr
142 adds $d1,$d1,x16,lsl#40
148 csel $h1,$h1,$d1,eq
163 umulh $d1,$h0,$r0
170 adc $d1,$d1,$t1
173 adds $d1,$d1,$t0
178 adds $d1,$d1,$t0
183 adds $d1,$d1,$t0
187 and $h2,$d2,#3
190 adcs $h1,$d1,xzr
212 mov w#$d1,w#$h0
218 lsr $d1,$h0,#32
224 add $d0,$d0,$d1,lsl#26 // base 2^26 -> base 2^64
225 lsr $d1,$d2,#12
227 add $d1,$d1,x15,lsl#14
228 adc $d1,$d1,xzr
230 adds $d1,$d1,x16,lsl#40
235 csel $h1,$h1,$d1,eq
239 adcs $d1,$h1,xzr
245 csel $h1,$h1,$d1,eq
277 umulh $d1,$h0,$r0
284 adc $d1,$d1,$t1
287 adds $d1,$d1,$t0
292 adds $d1,$d1,$t0
297 adds $d1,$d1,$t0
301 and $h2,$d2,#3
304 adcs $h1,$d1,xzr
325 str w14,[$ctx,#16*3] // r2
377 ldp $d0,$d1,[$inp],#16 // load input
383 rev $d1,$d1
386 adcs $h1,$h1,$d1
410 ldp $d0,$d1,[$inp],#16 // load input
415 rev $d1,$d1
418 adcs $h1,$h1,$d1
453 bl poly1305_mult // r^3
472 ldp x8,x12,[$inp,#32] // inp[2:3]
554 // ((inp[1]*r^4+inp[3]*r^2+inp[5])*r^3+inp[7]*r
557 // ((inp[1]*r^4+inp[3]*r^2+inp[5])*r^4+inp[7]*r^2+inp[9])*r
560 // Note that we start with inp[2:3]*r^2. This is because it
566 // d1 = h0*r1 + h1*r0 + h2*5*r4 + h3*5*r3 + h4*5*r2
574 ldp x8,x12,[$in2],#16 // inp[2:3] (or zero)
744 // multiply (inp[0:1]+hash) or inp[2:3] by r^2:r^1
793 // (hash+inp[0:1])*r^4:r^3 and accumulate
901 s/\b(fmov\s+)v([0-9]+)[^,]*,\s*x([0-9]+)/$1d$2,x$3/ or