Lines Matching refs:s12
732 int64_t s12 = 2097151 & (load_4(s + 31) >> 4); in x25519_sc_reduce() local
763 s12 += s23 * 470296; in x25519_sc_reduce()
772 s12 += s22 * 654183; in x25519_sc_reduce()
781 s12 -= s21 * 997805; in x25519_sc_reduce()
790 s12 += s20 * 136657; in x25519_sc_reduce()
799 s12 -= s19 * 683901; in x25519_sc_reduce()
819 carry12 = (s12 + (1 << 20)) >> 21; in x25519_sc_reduce()
821 s12 -= int64_lshift21(carry12); in x25519_sc_reduce()
836 s12 += carry11; in x25519_sc_reduce()
885 s0 += s12 * 666643; in x25519_sc_reduce()
886 s1 += s12 * 470296; in x25519_sc_reduce()
887 s2 += s12 * 654183; in x25519_sc_reduce()
888 s3 -= s12 * 997805; in x25519_sc_reduce()
889 s4 += s12 * 136657; in x25519_sc_reduce()
890 s5 -= s12 * 683901; in x25519_sc_reduce()
891 s12 = 0; in x25519_sc_reduce()
928 s12 += carry11; in x25519_sc_reduce()
931 s0 += s12 * 666643; in x25519_sc_reduce()
932 s1 += s12 * 470296; in x25519_sc_reduce()
933 s2 += s12 * 654183; in x25519_sc_reduce()
934 s3 -= s12 * 997805; in x25519_sc_reduce()
935 s4 += s12 * 136657; in x25519_sc_reduce()
936 s5 -= s12 * 683901; in x25519_sc_reduce()
937 s12 = 0; in x25519_sc_reduce()
973 s12 += carry11; in x25519_sc_reduce()
976 s0 += s12 * 666643; in x25519_sc_reduce()
977 s1 += s12 * 470296; in x25519_sc_reduce()
978 s2 += s12 * 654183; in x25519_sc_reduce()
979 s3 -= s12 * 997805; in x25519_sc_reduce()
980 s4 += s12 * 136657; in x25519_sc_reduce()
981 s5 -= s12 * 683901; in x25519_sc_reduce()
982 s12 = 0; in x25519_sc_reduce()