Lines Matching refs:s8
728 int64_t s8 = 2097151 & load_3(s + 21); in x25519_sc_reduce() local
786 s8 += s20 * 666643; in x25519_sc_reduce()
795 s8 += s19 * 470296; in x25519_sc_reduce()
804 s8 += s18 * 654183; in x25519_sc_reduce()
813 carry8 = (s8 + (1 << 20)) >> 21; in x25519_sc_reduce()
815 s8 -= int64_lshift21(carry8); in x25519_sc_reduce()
830 s8 += carry7; in x25519_sc_reduce()
848 s8 -= s17 * 997805; in x25519_sc_reduce()
857 s8 += s16 * 136657; in x25519_sc_reduce()
866 s8 -= s15 * 683901; in x25519_sc_reduce()
905 carry8 = (s8 + (1 << 20)) >> 21; in x25519_sc_reduce()
907 s8 -= int64_lshift21(carry8); in x25519_sc_reduce()
922 s8 += carry7; in x25519_sc_reduce()
961 s8 += carry7; in x25519_sc_reduce()
963 carry8 = s8 >> 21; in x25519_sc_reduce()
965 s8 -= int64_lshift21(carry8); in x25519_sc_reduce()
1006 s8 += carry7; in x25519_sc_reduce()
1008 carry8 = s8 >> 21; in x25519_sc_reduce()
1010 s8 -= int64_lshift21(carry8); in x25519_sc_reduce()
1039 s[21] = s8 >> 0; in x25519_sc_reduce()
1040 s[22] = s8 >> 8; in x25519_sc_reduce()
1041 s[23] = (s8 >> 16) | (s9 << 5); in x25519_sc_reduce()