Lines Matching refs:h2
153 u64 h0, h1, h2, c; in poly1305_blocks() local
163 h2 = st->h[2]; in poly1305_blocks()
173 h2 += (u64)(d1 >> 64) + padbit; in poly1305_blocks()
180 (h2 * s1); in poly1305_blocks()
181 h2 = (h2 * r0); in poly1305_blocks()
187 h2 += (u64)(d1 >> 64); in poly1305_blocks()
189 c = (h2 >> 2) + (h2 & ~3UL); in poly1305_blocks()
190 h2 &= 3; in poly1305_blocks()
193 h2 += CONSTANT_TIME_CARRY(h1,c); in poly1305_blocks()
210 st->h[2] = h2; in poly1305_blocks()
217 u64 h0, h1, h2; in poly1305_emit() local
224 h2 = st->h[2]; in poly1305_emit()
229 g2 = h2 + (u64)(t >> 64); in poly1305_emit()
295 u32 h0, h1, h2, h3, h4, c; in poly1305_blocks() local
309 h2 = st->h[2]; in poly1305_blocks()
317 h2 = (u32)(d2 = (u64)h2 + (d1 >> 32) + U8TOU32(inp + 8)); in poly1305_blocks()
324 ((u64)h2 * s2) + in poly1305_blocks()
328 ((u64)h2 * s3) + in poly1305_blocks()
333 ((u64)h2 * r0) + in poly1305_blocks()
338 ((u64)h2 * r1) + in poly1305_blocks()
347 h2 = (u32)(d2 += d1 >> 32); in poly1305_blocks()
355 h2 += (c = CONSTANT_TIME_CARRY(h1,c)); in poly1305_blocks()
356 h3 += (c = CONSTANT_TIME_CARRY(h2,c)); in poly1305_blocks()
374 st->h[2] = h2; in poly1305_blocks()
383 u32 h0, h1, h2, h3, h4; in poly1305_emit() local
390 h2 = st->h[2]; in poly1305_emit()
397 g2 = (u32)(t = (u64)h2 + (t >> 32)); in poly1305_emit()
410 h2 = (h2 & mask) | g2; in poly1305_emit()
416 h2 = (u32)(t = (u64)h2 + (t >> 32) + nonce[2]); in poly1305_emit()
421 U32TO8(mac + 8, h2); in poly1305_emit()
