Lines Matching refs:s15
4637 int64_t s15 = kBottom21Bits & (load_3(s + 39) >> 3); in x25519_sc_reduce() local
4668 s15 += s23 * 136657; in x25519_sc_reduce()
4677 s15 -= s22 * 683901; in x25519_sc_reduce()
4725 s15 += carry14; in x25519_sc_reduce()
4743 carry15 = (s15 + (1 << 20)) >> 21; in x25519_sc_reduce()
4745 s15 -= carry15 * (1 << 21); in x25519_sc_reduce()
4763 s3 += s15 * 666643; in x25519_sc_reduce()
4764 s4 += s15 * 470296; in x25519_sc_reduce()
4765 s5 += s15 * 654183; in x25519_sc_reduce()
4766 s6 -= s15 * 997805; in x25519_sc_reduce()
4767 s7 += s15 * 136657; in x25519_sc_reduce()
4768 s8 -= s15 * 683901; in x25519_sc_reduce()
4769 s15 = 0; in x25519_sc_reduce()
5018 int64_t s15; in sc_muladd() local
5066 …s15 = a4 * b11 + a5 * b10 + a6 * b9 + a7 * b8 + a8 * b7 + a9 * b6 + a10 *… in sc_muladd()
5098 s15 += carry14; in sc_muladd()
5134 carry15 = (s15 + (1 << 20)) >> 21; in sc_muladd()
5136 s15 -= carry15 * (1 << 21); in sc_muladd()
5151 s15 += s23 * 136657; in sc_muladd()
5160 s15 -= s22 * 683901; in sc_muladd()
5208 s15 += carry14; in sc_muladd()
5226 carry15 = (s15 + (1 << 20)) >> 21; in sc_muladd()
5228 s15 -= carry15 * (1 << 21); in sc_muladd()
5246 s3 += s15 * 666643; in sc_muladd()
5247 s4 += s15 * 470296; in sc_muladd()
5248 s5 += s15 * 654183; in sc_muladd()
5249 s6 -= s15 * 997805; in sc_muladd()
5250 s7 += s15 * 136657; in sc_muladd()
5251 s8 -= s15 * 683901; in sc_muladd()
5252 s15 = 0; in sc_muladd()