Lines Matching refs:h0
312 uint64_t h0 = load_7(s); /* 56 bits */ in fe51_frombytes() local
318 h1 |= h0 >> 51; h0 &= MASK51; in fe51_frombytes()
323 h[0] = h0; in fe51_frombytes()
332 uint64_t h0 = h[0]; in fe51_tobytes() local
340 q = (h0 + 19) >> 51; in fe51_tobytes()
347 h0 += 19 * q; in fe51_tobytes()
348 h1 += h0 >> 51; h0 &= MASK51; in fe51_tobytes()
355 s[0] = (uint8_t)(h0 >> 0); in fe51_tobytes()
356 s[1] = (uint8_t)(h0 >> 8); in fe51_tobytes()
357 s[2] = (uint8_t)(h0 >> 16); in fe51_tobytes()
358 s[3] = (uint8_t)(h0 >> 24); in fe51_tobytes()
359 s[4] = (uint8_t)(h0 >> 32); in fe51_tobytes()
360 s[5] = (uint8_t)(h0 >> 40); in fe51_tobytes()
361 s[6] = (uint8_t)((h0 >> 48) | ((uint32_t)h1 << 3)); in fe51_tobytes()
402 u128 h0, h1, h2, h3, h4; in fe51_mul() local
406 h0 = (u128)f_i * (g0 = g[0]); in fe51_mul()
413 h0 += (u128)f_i * (g4 *= 19); in fe51_mul()
420 h0 += (u128)f_i * (g3 *= 19); in fe51_mul()
427 h0 += (u128)f_i * (g2 *= 19); in fe51_mul()
434 h0 += (u128)f_i * (g1 *= 19); in fe51_mul()
442 h1 += (uint64_t)(h0 >> 51); g0 = (uint64_t)h0 & MASK51; in fe51_mul()
469 u128 h0, h1, h2, h3, h4; in fe51_sq()
471 h0 = (u128)g0 * g0; g0 *= 2; in fe51_sq()
483 h0 += (u128)g1 * g4; in fe51_sq()
490 h0 += (u128)g2 * g3; in fe51_sq()
495 h1 += (uint64_t)(h0 >> 51); g0 = (uint64_t)h0 & MASK51; in fe51_sq()
514 u128 h0 = f[0] * (u128)121666; in fe51_mul121666() local
522 h1 += (uint64_t)(h0 >> 51); g0 = (uint64_t)h0 & MASK51; in fe51_mul121666()
803 int64_t h0 = load_4(s); in fe_frombytes() local
824 carry9 = h9 + (1 << 24); h0 += (carry9 >> 25) * 19; h9 -= carry9 & kTop39Bits; in fe_frombytes()
830 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_frombytes()
836 h[0] = (int32_t)h0; in fe_frombytes()
874 int32_t h0 = h[0]; in fe_tobytes() local
887 q = (h0 + q) >> 26; in fe_tobytes()
899 h0 += 19 * q; in fe_tobytes()
902 h1 += h0 >> 26; h0 &= kBottom26Bits; in fe_tobytes()
920 s[ 0] = (uint8_t) (h0 >> 0); in fe_tobytes()
921 s[ 1] = (uint8_t) (h0 >> 8); in fe_tobytes()
922 s[ 2] = (uint8_t) (h0 >> 16); in fe_tobytes()
923 s[ 3] = (uint8_t)((h0 >> 24) | ((uint32_t)(h1) << 2)); in fe_tobytes()
1181 …int64_t h0 = f0g0 + f1g9_38 + f2g8_19 + f3g7_38 + f4g6_19 + f5g5_38 + f6g4_19 + f7g3_38 + f8g2_19 … in fe_mul() local
1207 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_mul()
1242 carry9 = h9 + (1 << 24); h0 += (carry9 >> 25) * 19; h9 -= carry9 & kTop39Bits; in fe_mul()
1246 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_mul()
1250 h[0] = (int32_t)h0; in fe_mul()
1355 int64_t h0 = f0f0 + f1f9_76 + f2f8_38 + f3f7_76 + f4f6_38 + f5f5_38; in fe_sq() local
1376 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_sq()
1391 carry9 = h9 + (1 << 24); h0 += (carry9 >> 25) * 19; h9 -= carry9 & kTop39Bits; in fe_sq()
1393 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_sq()
1395 h[0] = (int32_t)h0; in fe_sq()
1664 int64_t h0 = f0f0 + f1f9_76 + f2f8_38 + f3f7_76 + f4f6_38 + f5f5_38; in fe_sq2() local
1685 h0 += h0; in fe_sq2()
1696 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_sq2()
1711 carry9 = h9 + (1 << 24); h0 += (carry9 >> 25) * 19; h9 -= carry9 & kTop39Bits; in fe_sq2()
1713 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_sq2()
1715 h[0] = (int32_t)h0; in fe_sq2()
4327 int64_t h0 = f0 * (int64_t) 121666; in fe_mul121666() local
4348 carry9 = h9 + (1 << 24); h0 += (carry9 >> 25) * 19; h9 -= carry9 & kTop39Bits; in fe_mul121666()
4354 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_mul121666()
4360 h[0] = (int32_t)h0; in fe_mul121666()
