Lines Matching refs:h1
153 u64 h0, h1, h2, c; in poly1305_blocks() local
162 h1 = st->h[1]; in poly1305_blocks()
168 h1 = (u64)(d1 = (u128)h1 + (d0 >> 64) + U8TOU64(inp + 8)); in poly1305_blocks()
177 ((u128)h1 * s1); in poly1305_blocks()
179 ((u128)h1 * r0) + in poly1305_blocks()
186 h1 = (u64)(d1 += d0 >> 64); in poly1305_blocks()
192 h1 += (c = CONSTANT_TIME_CARRY(h0,c)); in poly1305_blocks()
193 h2 += CONSTANT_TIME_CARRY(h1,c); in poly1305_blocks()
209 st->h[1] = h1; in poly1305_blocks()
217 u64 h0, h1, h2; in poly1305_emit() local
223 h1 = st->h[1]; in poly1305_emit()
228 g1 = (u64)(t = (u128)h1 + (t >> 64)); in poly1305_emit()
237 h1 = (h1 & mask) | g1; in poly1305_emit()
241 h1 = (u64)(t = (u128)h1 + nonce[2] + ((u64)nonce[3]<<32) + (t >> 64)); in poly1305_emit()
244 U64TO8(mac + 8, h1); in poly1305_emit()
295 u32 h0, h1, h2, h3, h4, c; in poly1305_blocks() local
308 h1 = st->h[1]; in poly1305_blocks()
316 h1 = (u32)(d1 = (u64)h1 + (d0 >> 32) + U8TOU32(inp + 4)); in poly1305_blocks()
323 ((u64)h1 * s3) + in poly1305_blocks()
327 ((u64)h1 * r0) + in poly1305_blocks()
332 ((u64)h1 * r1) + in poly1305_blocks()
337 ((u64)h1 * r2) + in poly1305_blocks()
346 h1 = (u32)(d1 += d0 >> 32); in poly1305_blocks()
354 h1 += (c = CONSTANT_TIME_CARRY(h0,c)); in poly1305_blocks()
355 h2 += (c = CONSTANT_TIME_CARRY(h1,c)); in poly1305_blocks()
373 st->h[1] = h1; in poly1305_blocks()
383 u32 h0, h1, h2, h3, h4; in poly1305_emit() local
389 h1 = st->h[1]; in poly1305_emit()
396 g1 = (u32)(t = (u64)h1 + (t >> 32)); in poly1305_emit()
409 h1 = (h1 & mask) | g1; in poly1305_emit()
415 h1 = (u32)(t = (u64)h1 + (t >> 32) + nonce[1]); in poly1305_emit()
420 U32TO8(mac + 4, h1); in poly1305_emit()
