Lines Matching refs:h1
313 uint64_t h1 = load_6(s + 7) << 5; /* 53 bits */ in fe51_frombytes() local
318 h1 |= h0 >> 51; h0 &= MASK51; in fe51_frombytes()
319 h2 |= h1 >> 51; h1 &= MASK51; in fe51_frombytes()
324 h[1] = h1; in fe51_frombytes()
333 uint64_t h1 = h[1]; in fe51_tobytes() local
341 q = (h1 + q) >> 51; in fe51_tobytes()
348 h1 += h0 >> 51; h0 &= MASK51; in fe51_tobytes()
349 h2 += h1 >> 51; h1 &= MASK51; in fe51_tobytes()
361 s[6] = (uint8_t)((h0 >> 48) | ((uint32_t)h1 << 3)); in fe51_tobytes()
362 s[7] = (uint8_t)(h1 >> 5); in fe51_tobytes()
363 s[8] = (uint8_t)(h1 >> 13); in fe51_tobytes()
364 s[9] = (uint8_t)(h1 >> 21); in fe51_tobytes()
365 s[10] = (uint8_t)(h1 >> 29); in fe51_tobytes()
366 s[11] = (uint8_t)(h1 >> 37); in fe51_tobytes()
367 s[12] = (uint8_t)((h1 >> 45) | ((uint32_t)h2 << 6)); in fe51_tobytes()
402 u128 h0, h1, h2, h3, h4; in fe51_mul() local
407 h1 = (u128)f_i * (g1 = g[1]); in fe51_mul()
414 h1 += (u128)f_i * g0; in fe51_mul()
421 h1 += (u128)f_i * g4; in fe51_mul()
428 h1 += (u128)f_i * g3; in fe51_mul()
435 h1 += (u128)f_i * g2; in fe51_mul()
442 h1 += (uint64_t)(h0 >> 51); g0 = (uint64_t)h0 & MASK51; in fe51_mul()
445 g2 += (uint64_t)(h1 >> 51); g1 = (uint64_t)h1 & MASK51; in fe51_mul()
469 u128 h0, h1, h2, h3, h4; in fe51_sq()
472 h1 = (u128)g0 * g1; in fe51_sq()
486 h1 += (u128)g0 * (g3 *= 19); in fe51_sq()
491 h1 += (u128)g2 * g4; in fe51_sq()
495 h1 += (uint64_t)(h0 >> 51); g0 = (uint64_t)h0 & MASK51; in fe51_sq()
498 g2 += (uint64_t)(h1 >> 51); g1 = (uint64_t)h1 & MASK51; in fe51_sq()
515 u128 h1 = f[1] * (u128)121666; in fe51_mul121666() local
522 h1 += (uint64_t)(h0 >> 51); g0 = (uint64_t)h0 & MASK51; in fe51_mul121666()
525 g2 += (uint64_t)(h1 >> 51); g1 = (uint64_t)h1 & MASK51; in fe51_mul121666()
804 int64_t h1 = load_3(s + 4) << 6; in fe_frombytes() local
825 carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits; in fe_frombytes()
830 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_frombytes()
837 h[1] = (int32_t)h1; in fe_frombytes()
875 int32_t h1 = h[1]; in fe_tobytes() local
888 q = (h1 + q) >> 25; in fe_tobytes()
902 h1 += h0 >> 26; h0 &= kBottom26Bits; in fe_tobytes()
903 h2 += h1 >> 25; h1 &= kBottom25Bits; in fe_tobytes()
923 s[ 3] = (uint8_t)((h0 >> 24) | ((uint32_t)(h1) << 2)); in fe_tobytes()
924 s[ 4] = (uint8_t) (h1 >> 6); in fe_tobytes()
925 s[ 5] = (uint8_t) (h1 >> 14); in fe_tobytes()
926 s[ 6] = (uint8_t)((h1 >> 22) | ((uint32_t)(h2) << 3)); in fe_tobytes()
1182 …int64_t h1 = f0g1 + f1g0 + f2g9_19 + f3g8_19 + f4g7_19 + f5g6_19 + f6g5_19 + f7g4_19 + f8g3_19 … in fe_mul() local
1207 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_mul()
1214 carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits; in fe_mul()
1246 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_mul()
1251 h[1] = (int32_t)h1; in fe_mul()
1356 int64_t h1 = f0f1_2 + f2f9_38 + f3f8_38 + f4f7_38 + f5f6_38; in fe_sq() local
1376 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_sq()
1379 carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits; in fe_sq()
1393 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_sq()
1396 h[1] = (int32_t)h1; in fe_sq()
1665 int64_t h1 = f0f1_2 + f2f9_38 + f3f8_38 + f4f7_38 + f5f6_38; in fe_sq2() local
1686 h1 += h1; in fe_sq2()
1696 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_sq2()
1699 carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits; in fe_sq2()
1713 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_sq2()
1716 h[1] = (int32_t)h1; in fe_sq2()
4328 int64_t h1 = f1 * (int64_t) 121666; in fe_mul121666() local
4349 carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits; in fe_mul121666()
4354 carry0 = h0 + (1 << 25); h1 += carry0 >> 26; h0 -= carry0 & kTop38Bits; in fe_mul121666()
4361 h[1] = (int32_t)h1; in fe_mul121666()
