1203         MBEDTLS_MPI_CHK(mbedtls_mpi_sub_mpi(&tmp, &grp->P, (X)));      \
1204         MBEDTLS_MPI_CHK(mbedtls_mpi_safe_cond_assign((X), &tmp,          \
1462     mbedtls_mpi tmp;  in ecp_safe_invert_jac()  local
1463     mbedtls_mpi_init(&tmp);  in ecp_safe_invert_jac()
1468     mbedtls_mpi_free(&tmp);  in ecp_safe_invert_jac()
1488                           mbedtls_mpi tmp[4])  in ecp_double_jac()
1508         MPI_ECP_SQR(&tmp[1],  &P->Z);  in ecp_double_jac()
1509         MPI_ECP_ADD(&tmp[2],  &P->X,  &tmp[1]);  in ecp_double_jac()
1510         MPI_ECP_SUB(&tmp[3],  &P->X,  &tmp[1]);  in ecp_double_jac()
1511         MPI_ECP_MUL(&tmp[1],  &tmp[2],     &tmp[3]);  in ecp_double_jac()
1512         MPI_ECP_MUL_INT(&tmp[0],  &tmp[1],     3);  in ecp_double_jac()
1515         MPI_ECP_SQR(&tmp[1],  &P->X);  in ecp_double_jac()
1516         MPI_ECP_MUL_INT(&tmp[0],  &tmp[1],  3);  in ecp_double_jac()
1521             MPI_ECP_SQR(&tmp[1],  &P->Z);  in ecp_double_jac()
1522             MPI_ECP_SQR(&tmp[2],  &tmp[1]);  in ecp_double_jac()
1523             MPI_ECP_MUL(&tmp[1],  &tmp[2],     &grp->A);  in ecp_double_jac()
1524             MPI_ECP_ADD(&tmp[0],  &tmp[0],     &tmp[1]);  in ecp_double_jac()
1529     MPI_ECP_SQR(&tmp[2],  &P->Y);  in ecp_double_jac()
1530     MPI_ECP_SHIFT_L(&tmp[2],  1);  in ecp_double_jac()
1531     MPI_ECP_MUL(&tmp[1],  &P->X, &tmp[2]);  in ecp_double_jac()
1532     MPI_ECP_SHIFT_L(&tmp[1],  1);  in ecp_double_jac()
1535     MPI_ECP_SQR(&tmp[3],  &tmp[2]);  in ecp_double_jac()
1536     MPI_ECP_SHIFT_L(&tmp[3],  1);  in ecp_double_jac()
1539     MPI_ECP_SQR(&tmp[2],  &tmp[0]);  in ecp_double_jac()
1540     MPI_ECP_SUB(&tmp[2],  &tmp[2], &tmp[1]);  in ecp_double_jac()
1541     MPI_ECP_SUB(&tmp[2],  &tmp[2], &tmp[1]);  in ecp_double_jac()
1544     MPI_ECP_SUB(&tmp[1],  &tmp[1],     &tmp[2]);  in ecp_double_jac()
1545     MPI_ECP_MUL(&tmp[1],  &tmp[1],     &tmp[0]);  in ecp_double_jac()
1546     MPI_ECP_SUB(&tmp[1],  &tmp[1],     &tmp[3]);  in ecp_double_jac()
1549     MPI_ECP_MUL(&tmp[3],  &P->Y,  &P->Z);  in ecp_double_jac()
1550     MPI_ECP_SHIFT_L(&tmp[3],  1);  in ecp_double_jac()
1553     MPI_ECP_MOV(&R->X, &tmp[2]);  in ecp_double_jac()
1554     MPI_ECP_MOV(&R->Y, &tmp[1]);  in ecp_double_jac()
1555     MPI_ECP_MOV(&R->Z, &tmp[3]);  in ecp_double_jac()
1585                          mbedtls_mpi tmp[4])  in ecp_add_mixed()
1631     MPI_ECP_SQR(&tmp[0], &P->Z);  in ecp_add_mixed()
1632     MPI_ECP_MUL(&tmp[1], &tmp[0], &P->Z);  in ecp_add_mixed()
1633     MPI_ECP_MUL(&tmp[0], &tmp[0], &Q->X);  in ecp_add_mixed()
1634     MPI_ECP_MUL(&tmp[1], &tmp[1], &Q->Y);  in ecp_add_mixed()
1635     MPI_ECP_SUB(&tmp[0], &tmp[0], &P->X);  in ecp_add_mixed()
1636     MPI_ECP_SUB(&tmp[1], &tmp[1], &P->Y);  in ecp_add_mixed()
1639     if (MPI_ECP_CMP_INT(&tmp[0], 0) == 0) {  in ecp_add_mixed()
1640         if (MPI_ECP_CMP_INT(&tmp[1], 0) == 0) {  in ecp_add_mixed()
1641             ret = ecp_double_jac(grp, R, P, tmp);  in ecp_add_mixed()
1650     MPI_ECP_MUL(Z,        &P->Z,    &tmp[0]);  in ecp_add_mixed()
1651     MPI_ECP_SQR(&tmp[2],  &tmp[0]);  in ecp_add_mixed()
1652     MPI_ECP_MUL(&tmp[3],  &tmp[2],  &tmp[0]);  in ecp_add_mixed()
1653     MPI_ECP_MUL(&tmp[2],  &tmp[2],  &P->X);  in ecp_add_mixed()
1655     MPI_ECP_MOV(&tmp[0], &tmp[2]);  in ecp_add_mixed()
1656     MPI_ECP_SHIFT_L(&tmp[0], 1);  in ecp_add_mixed()
1659     MPI_ECP_SQR(X,        &tmp[1]);  in ecp_add_mixed()
1660     MPI_ECP_SUB(X,        X,        &tmp[0]);  in ecp_add_mixed()
1661     MPI_ECP_SUB(X,        X,        &tmp[3]);  in ecp_add_mixed()
1662     MPI_ECP_SUB(&tmp[2],  &tmp[2],  X);  in ecp_add_mixed()
1663     MPI_ECP_MUL(&tmp[2],  &tmp[2],  &tmp[1]);  in ecp_add_mixed()
1664     MPI_ECP_MUL(&tmp[3],  &tmp[3],  &P->Y);  in ecp_add_mixed()
1666     MPI_ECP_SUB(Y,     &tmp[2],     &tmp[3]);  in ecp_add_mixed()
1860     mbedtls_mpi tmp[4];  in ecp_precompute_comb()  local
1862     mpi_init_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_precompute_comb()
1916         MBEDTLS_MPI_CHK(ecp_double_jac(grp, cur, cur, tmp));  in ecp_precompute_comb()
1958             MBEDTLS_MPI_CHK(ecp_add_mixed(grp, &T[i + j], &T[j], &T[i], tmp));  in ecp_precompute_comb()
1993     mpi_free_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_precompute_comb()
2052     mbedtls_mpi tmp[4];  in ecp_mul_comb_core()  local
2056     mpi_init_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_mul_comb_core()
2088         MBEDTLS_MPI_CHK(ecp_double_jac(grp, R, R, tmp));  in ecp_mul_comb_core()
2090         MBEDTLS_MPI_CHK(ecp_add_mixed(grp, R, R, &Txi, tmp));  in ecp_mul_comb_core()
2096     mpi_free_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_mul_comb_core()
2555     mbedtls_mpi tmp[4];  in ecp_mul_mxz()  local
2558     mpi_init_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_mul_mxz()
2592         MBEDTLS_MPI_CHK(ecp_double_add_mxz(grp, R, &RP, R, &RP, &PX, tmp));  in ecp_mul_mxz()
2614     mpi_free_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_mul_mxz()
2772     mbedtls_mpi tmp;  in mbedtls_ecp_mul_shortcuts()  local
2773     mbedtls_mpi_init(&tmp);  in mbedtls_ecp_mul_shortcuts()
2791     mbedtls_mpi_free(&tmp);  in mbedtls_ecp_mul_shortcuts()
2810     mbedtls_mpi tmp[4];  in mbedtls_ecp_muladd_restartable()  local
2819     mpi_init_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in mbedtls_ecp_muladd_restartable()
2866     MBEDTLS_MPI_CHK(ecp_add_mixed(grp, pR, pmP, pR, tmp));  in mbedtls_ecp_muladd_restartable()
2885     mpi_free_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in mbedtls_ecp_muladd_restartable()