578 	struct crypto_bignum *a, *u2, *t1, *t2, *z, *t, *zero, *one, *two, *three,  in sswu()  local
601 	t1 = crypto_bignum_init();  in sswu()
615 	if (!u2 || !t1 || !t2 || !z || !t || !zero || !one || !two || !three ||  in sswu()
630 	    crypto_bignum_mulmod(z, u2, prime, t1) < 0 ||  in sswu()
631 	    crypto_bignum_sqrmod(t1, prime, t2) < 0 ||  in sswu()
632 	    crypto_bignum_addmod(t1, t2, prime, t1) < 0)  in sswu()
634 	debug_print_bignum("SSWU: m", t1, prime_len);  in sswu()
640 	m_is_zero = const_time_eq(crypto_bignum_is_zero(t1), 1);  in sswu()
643 	    crypto_bignum_exptmod(t1, t2, prime, t) < 0)  in sswu()
648 	if (crypto_bignum_mulmod(z, a, prime, t1) < 0 ||  in sswu()
649 	    crypto_bignum_inverse(t1, prime, t1) < 0 ||  in sswu()
650 	    crypto_bignum_mulmod(b, t1, prime, x1a) < 0)  in sswu()
655 	if (crypto_bignum_sub(prime, b, t1) < 0 ||  in sswu()
657 	    crypto_bignum_mulmod(t1, t2, prime, t1) < 0 ||  in sswu()
659 	    crypto_bignum_mulmod(t1, t2, prime, x1b) < 0)  in sswu()
674 	if (crypto_bignum_exptmod(x1, three, prime, t1) < 0 ||  in sswu()
676 	    crypto_bignum_addmod(t1, t2, prime, t1) < 0 ||  in sswu()
677 	    crypto_bignum_addmod(t1, b, prime, gx1) < 0)  in sswu()
682 	if (crypto_bignum_mulmod(z, u2, prime, t1) < 0 ||  in sswu()
683 	    crypto_bignum_mulmod(t1, x1, prime, x2) < 0)  in sswu()
688 	if (crypto_bignum_exptmod(x2, three, prime, t1) < 0 ||  in sswu()
690 	    crypto_bignum_addmod(t1, t2, prime, t1) < 0 ||  in sswu()
691 	    crypto_bignum_addmod(t1, b, prime, gx2) < 0)  in sswu()
697 	if (crypto_bignum_sub(prime, one, t1) < 0 ||  in sswu()
698 	    crypto_bignum_rshift(t1, 1, t1) < 0 ||  in sswu()
699 	    crypto_bignum_exptmod(gx1, t1, prime, tmp) < 0)  in sswu()
701 	debug_print_bignum("SSWU: gx1^((p-1)/2) modulo p", t1, prime_len);  in sswu()
736 	if (crypto_bignum_sub(prime, y, t1) < 0)  in sswu()
738 	debug_print_bignum("SSWU: p - y", t1, prime_len);  in sswu()
740 	    crypto_bignum_to_bin(t1, bin2, sizeof(bin2), prime_len) < 0)  in sswu()
753 	crypto_bignum_deinit(t1, 1);  in sswu()