3  * Copyright (C) 2016-2017 INRIA and Microsoft Corporation.
4  * Copyright (C) 2018-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
25 	u64 c = xnx - (u64)1U;  in u64_eq_mask()  local
26 	return c;  in u64_eq_mask()
39 	u64 c = x_xor_q_ - (u64)1U;  in u64_gte_mask()  local
40 	return c;  in u64_gte_mask()
94 		u128 c = ((tctr) >> (51));  in fproduct_carry_wide_()  local
96 		tmp[ctr + 1] = ((tctrp1) + (c));  in fproduct_carry_wide_()
103 		u128 c = ((tctr) >> (51));  in fproduct_carry_wide_()  local
105 		tmp[ctr + 1] = ((tctrp1) + (c));  in fproduct_carry_wide_()
113 		u128 c = ((tctr) >> (51));  in fproduct_carry_wide_()  local
115 		tmp[ctr + 1] = ((tctrp1) + (c));  in fproduct_carry_wide_()
122 		u128 c = ((tctr) >> (51));  in fproduct_carry_wide_()  local
124 		tmp[ctr + 1] = ((tctrp1) + (c));  in fproduct_carry_wide_()
133 		u32 ctr = 5 - 0 - 1;  in fmul_shift_reduce()
138 		u32 ctr = 5 - 1 - 1;  in fmul_shift_reduce()
143 		u32 ctr = 5 - 2 - 1;  in fmul_shift_reduce()
148 		u32 ctr = 5 - 3 - 1;  in fmul_shift_reduce()
189 	u64 tmp[5] = { input[0], input[1], input[2], input[3], input[4] };  in fmul_fmul()
199 		u128 t[5] = { 0 };  in fmul_fmul()
286 	u128 t[5];  in fsquare_fsquare_times()
287 	memcpy(output, input, 5 * sizeof(*input));  in fsquare_fsquare_times()
294 	u128 t[5];  in fsquare_fsquare_times_inplace()
302 	u64 *t00 = buf + 5;  in crecip_crecip()
310 	u64 *c;  in crecip_crecip()  local
317 	fsquare_fsquare_times(t00, b0, 5);  in crecip_crecip()
318 	t01 = buf + 5;  in crecip_crecip()
330 	t0 = buf + 5;  in crecip_crecip()
332 	c = buf + 15;  in crecip_crecip()
333 	fmul_fmul(c, t0, b);  in crecip_crecip()
334 	fsquare_fsquare_times(t0, c, 100);  in crecip_crecip()
335 	fmul_fmul(t0, t0, c);  in crecip_crecip()
338 	fsquare_fsquare_times_inplace(t0, 5);  in crecip_crecip()
353 	u64 tmp[5] = { 0 };  in fdifference()
359 	memcpy(tmp, b, 5 * sizeof(*b));  in fdifference()
399 	u128 tmp[5];  in fscalar()
459 	point_swap_conditional_step(a, b, swap1, 5);  in point_swap_conditional5()
470 	point_swap_conditional5(a + 5, b + 5, swap1);  in point_swap_conditional()
475 	memcpy(output, input, 5 * sizeof(*input));  in point_copy()
476 	memcpy(output + 5, input + 5, 5 * sizeof(*input));  in point_copy()
484 	u64 *z2 = pp + 5;  in addanddouble_fmonty()
486 	u64 *z3 = ppq + 5;  in addanddouble_fmonty()
488 	u64 *z = p + 5;  in addanddouble_fmonty()
490 	u64 *zprime = pq + 5;  in addanddouble_fmonty()
493 	u64 *origxprime0 = buf + 5;  in addanddouble_fmonty()
499 	memcpy(origx, x, 5 * sizeof(*x));  in addanddouble_fmonty()
502 	memcpy(origxprime0, xprime, 5 * sizeof(*xprime));  in addanddouble_fmonty()
507 	origxprime = buf + 5;  in addanddouble_fmonty()
519 		memcpy(origxprime, xxprime, 5 * sizeof(*xxprime));  in addanddouble_fmonty()
750 	u64 *z = point + 5;  in format_scalar_of_point()
753 	u64 *sc = buf + 5;  in format_scalar_of_point()
765 	u64 *z = buf0 + 5;  in curve25519_generic()