269 #define square_casper(c, a) multiply_casper(c, a, a)
423 static void multiply_casper(uint32_t w_out[], const uint32_t a[], const uint32_t b[]);
1204     multiply_casper(  in CASPER_ECC_SECP256R1_Mul()
1208     multiply_casper(  in CASPER_ECC_SECP256R1_Mul()
1295     multiply_casper(  in CASPER_ECC_SECP256R1_MulAdd()
1299     multiply_casper(  in CASPER_ECC_SECP256R1_MulAdd()
1350     multiply_casper(  in CASPER_ECC_SECP384R1_Mul()
1354     multiply_casper(  in CASPER_ECC_SECP384R1_Mul()
1429     multiply_casper(  in CASPER_ECC_SECP384R1_MulAdd()
1433     multiply_casper(  in CASPER_ECC_SECP384R1_MulAdd()
1497     multiply_casper(  in CASPER_ECC_SECP521R1_Mul()
1504     multiply_casper(  in CASPER_ECC_SECP521R1_Mul()
1596     multiply_casper(  in CASPER_ECC_SECP521R1_MulAdd()
1600     multiply_casper(  in CASPER_ECC_SECP521R1_MulAdd()
1905 static void multiply_casper(uint32_t w_out[], const uint32_t a[], const uint32_t b[])  in multiply_casper()  function
1938     multiply_casper(T2, T1, Z1); // Z^3  in Jac_toAffine()
1956     multiply_casper(Y3, Y1, T1); // Y3 = Y/Z^3  in Jac_toAffine()
1957     multiply_casper(T2, T1, Z1); // Z^-2  in Jac_toAffine()
1958     multiply_casper(X3, X1, T2); // X3 = X/Z^2  in Jac_toAffine()
2007     multiply_casper(U1, X1, Z2Z2);  in Jac_addition()
2008     multiply_casper(H, X2, Z1Z1); /* if H equals U1 then X's are the same */  in Jac_addition()
2009     multiply_casper(t0, Z2, Z2Z2);  in Jac_addition()
2010     multiply_casper(S1, Y1, t0);  in Jac_addition()
2011     multiply_casper(t0, Z1, Z1Z1);  in Jac_addition()
2012     multiply_casper(J, Y2, t0);   /* if (S1 == J) then Y's are the same */  in Jac_addition()
2033     multiply_casper(J, H, t1);  in Jac_addition()
2034     multiply_casper(V, U1, t1);  in Jac_addition()
2041     multiply_casper(t1, S1, J);  in Jac_addition()
2043     multiply_casper(V, U1, t0);  in Jac_addition()
2049     multiply_casper(Z3, t1, H);  in Jac_addition()
2094     multiply_casper(T2, T3, Z1);  in Jac_add_affine()
2095     multiply_casper(T4, T3, X2);  in Jac_add_affine()
2096     multiply_casper(T3, T2, Y2);  in Jac_add_affine()
2115     multiply_casper(Z3, T5, T1);  in Jac_add_affine()
2117     multiply_casper(T4, T3, T1);  in Jac_add_affine()
2118     multiply_casper(T5, T3, X1);  in Jac_add_affine()
2124     multiply_casper(T1, T3, T2);  in Jac_add_affine()
2125     multiply_casper(T2, T4, Y1);  in Jac_add_affine()
2148     multiply_casper(T4, T3, T1);  in Jac_double()
2157     multiply_casper(Z3, Y3, T5);  in Jac_double()
2161     multiply_casper(T3, T5, X1);  in Jac_double()
2175     multiply_casper(T3, T1, T2);  in Jac_double()
2839     multiply_casper(t2, tmp, a);  in invert_mod_p256()
2844     multiply_casper(s1, tmp, t2);  in invert_mod_p256()
2852     multiply_casper(s2, tmp, s1);  in invert_mod_p256()
2862     multiply_casper(s4, tmp, s2);  in invert_mod_p256()
2872     multiply_casper(s8, tmp, s4);  in invert_mod_p256()
2882     multiply_casper(tmp, t, a);  in invert_mod_p256()
2890     multiply_casper(t, tmp, s8);  in invert_mod_p256()
2898     multiply_casper(tmp, t, s8);  in invert_mod_p256()
2906     multiply_casper(t, tmp, s4);  in invert_mod_p256()
2914     multiply_casper(tmp, t, s2);  in invert_mod_p256()
2922     multiply_casper(t, tmp, s1);  in invert_mod_p256()
2927     multiply_casper(tmp, t, t2);  in invert_mod_p256()
2932     multiply_casper(c, tmp, a);  in invert_mod_p256()
2955     multiply_casper(T3, T2, T1);  in toMontgomery_ECC_P256()
2989     multiply_casper(t2, tmp, t1); // 12  in invert_mod_p384()
2990     multiply_casper(d, a, t2);    // 13  in invert_mod_p384()
2991     multiply_casper(e, d, a);     // 14  in invert_mod_p384()
2992     multiply_casper(t0, e, a);    // 15  in invert_mod_p384()
2999     multiply_casper(t1, t2, t0);  in invert_mod_p384()
3009     multiply_casper(t2, t3, t1);  in invert_mod_p384()
3019     multiply_casper(t3, t4, t2);  in invert_mod_p384()
3029     multiply_casper(t4, t5, t3);  in invert_mod_p384()
3039     multiply_casper(t5, t6, t4);  in invert_mod_p384()
3049     multiply_casper(t5, t6, t4);  in invert_mod_p384()
3059     multiply_casper(t5, t6, t3);  in invert_mod_p384()
3069     multiply_casper(t5, t6, t2);  in invert_mod_p384()
3079     multiply_casper(t5, t6, t1);  in invert_mod_p384()
3089     multiply_casper(t5, t6, t0);  in invert_mod_p384()
3099     multiply_casper(t5, t6, e);  in invert_mod_p384()
3109     multiply_casper(t5, t6, t3);  in invert_mod_p384()
3128     multiply_casper(t5, t6, t2);  in invert_mod_p384()
3138     multiply_casper(t5, t6, t1);  in invert_mod_p384()
3148     multiply_casper(t5, t6, t0);  in invert_mod_p384()
3158     multiply_casper(c, t6, d);  in invert_mod_p384()
3181     multiply_casper(T3, T2, T1);  in toMontgomery_ECC_P384()
3201     multiply_casper(T2, d2, a);  in invert_mod_p521()
3206     multiply_casper(T4, e3, T2);  in invert_mod_p521()
3213     multiply_casper(d2, e3, T4);  in invert_mod_p521()
3223     multiply_casper(d4, e3, d2);  in invert_mod_p521()
3233     multiply_casper(d2, e3, d4);  in invert_mod_p521()
3243     multiply_casper(d4, e3, d2);  in invert_mod_p521()
3253     multiply_casper(d2, e3, d4);  in invert_mod_p521()
3263     multiply_casper(d4, e3, d2);  in invert_mod_p521()
3273     multiply_casper(d2, e3, d4);  in invert_mod_p521()
3278     multiply_casper(d2, e3, T2);  in invert_mod_p521()
3285     multiply_casper(d2, e3, T4);  in invert_mod_p521()
3288     multiply_casper(d2, d3, a);  in invert_mod_p521()
3293     multiply_casper(c, e3, a);  in invert_mod_p521()
3314     multiply_casper(T3, T2, T1);  in toMontgomery_ECC_P521()