531                               size_t AN_limbs,  in mbedtls_mpi_core_montmul()  argument
535     memset(T, 0, (2 * AN_limbs + 1) * ciL);  in mbedtls_mpi_core_montmul()
537     for (size_t i = 0; i < AN_limbs; i++) {  in mbedtls_mpi_core_montmul()
542         (void) mbedtls_mpi_core_mla(T, AN_limbs + 2, B, B_limbs, u0);  in mbedtls_mpi_core_montmul()
543         (void) mbedtls_mpi_core_mla(T, AN_limbs + 2, N, AN_limbs, u1);  in mbedtls_mpi_core_montmul()
558     mbedtls_mpi_uint carry  = T[AN_limbs];  in mbedtls_mpi_core_montmul()
559     mbedtls_mpi_uint borrow = mbedtls_mpi_core_sub(X, T, N, AN_limbs);  in mbedtls_mpi_core_montmul()
579                          AN_limbs * sizeof(mbedtls_mpi_uint));  in mbedtls_mpi_core_montmul()
709 size_t mbedtls_mpi_core_exp_mod_working_limbs(size_t AN_limbs, size_t E_limbs)  in mbedtls_mpi_core_exp_mod_working_limbs()  argument
715     const size_t table_limbs   = welem * AN_limbs;  in mbedtls_mpi_core_exp_mod_working_limbs()
716     const size_t select_limbs  = AN_limbs;  in mbedtls_mpi_core_exp_mod_working_limbs()
717     const size_t temp_limbs    = 2 * AN_limbs + 1;  in mbedtls_mpi_core_exp_mod_working_limbs()
724                                       size_t AN_limbs,  in exp_mod_precompute_window()  argument
732     memset(Wtable, 0, AN_limbs * ciL);  in exp_mod_precompute_window()
734     mbedtls_mpi_core_montmul(Wtable, Wtable, RR, AN_limbs, N, AN_limbs, mm, temp);  in exp_mod_precompute_window()
737     mbedtls_mpi_uint *W1 = Wtable + AN_limbs;  in exp_mod_precompute_window()
738     memcpy(W1, A, AN_limbs * ciL);  in exp_mod_precompute_window()
743         mbedtls_mpi_uint *Wcur = Wprev + AN_limbs;  in exp_mod_precompute_window()
744         mbedtls_mpi_core_montmul(Wcur, Wprev, W1, AN_limbs, N, AN_limbs, mm, temp);  in exp_mod_precompute_window()
809                                                         size_t AN_limbs, size_t welem,  in exp_mod_table_lookup_optionally_safe()  argument
814         memcpy(Wselect, Wtable + window * AN_limbs, AN_limbs * ciL);  in exp_mod_table_lookup_optionally_safe()
822                                               AN_limbs, welem, window);  in exp_mod_table_lookup_optionally_safe()
850                                                      size_t AN_limbs,  in mbedtls_mpi_core_exp_mod_optionally_safe()  argument
870     const size_t table_limbs  = welem * AN_limbs;  in mbedtls_mpi_core_exp_mod_optionally_safe()
871     const size_t select_limbs = AN_limbs;  in mbedtls_mpi_core_exp_mod_optionally_safe()
885     exp_mod_precompute_window(A, N, AN_limbs,  in mbedtls_mpi_core_exp_mod_optionally_safe()
894     memcpy(X, Wtable, AN_limbs * ciL);  in mbedtls_mpi_core_exp_mod_optionally_safe()
903         mbedtls_mpi_core_montmul(X, X, X, AN_limbs, N, AN_limbs, mm, temp);  in mbedtls_mpi_core_exp_mod_optionally_safe()
922             exp_mod_table_lookup_optionally_safe(Wselect, Wtable, AN_limbs, welem,  in mbedtls_mpi_core_exp_mod_optionally_safe()
925             mbedtls_mpi_core_montmul(X, X, Wselect, AN_limbs, N, AN_limbs, mm,  in mbedtls_mpi_core_exp_mod_optionally_safe()
935                               const mbedtls_mpi_uint *N, size_t AN_limbs,  in mbedtls_mpi_core_exp_mod()  argument
943                                              AN_limbs,  in mbedtls_mpi_core_exp_mod()
953                                      const mbedtls_mpi_uint *N, size_t AN_limbs,  in mbedtls_mpi_core_exp_mod_unsafe()  argument
961                                              AN_limbs,  in mbedtls_mpi_core_exp_mod_unsafe()
1000                                   size_t AN_limbs,  in mbedtls_mpi_core_to_mont_rep()  argument
1005     mbedtls_mpi_core_montmul(X, A, rr, AN_limbs, N, AN_limbs, mm, T);  in mbedtls_mpi_core_to_mont_rep()
1011                                     size_t AN_limbs,  in mbedtls_mpi_core_from_mont_rep()  argument
1017     mbedtls_mpi_core_montmul(X, A, &Rinv, 1, N, AN_limbs, mm, T);  in mbedtls_mpi_core_from_mont_rep()