102   BN_ULONG c1 = 0;
105     return (c1);
109     mul_add(rp[0], ap[0], w, c1);
110     mul_add(rp[1], ap[1], w, c1);
111     mul_add(rp[2], ap[2], w, c1);
112     mul_add(rp[3], ap[3], w, c1);
118     mul_add(rp[0], ap[0], w, c1);
120       return c1;
122     mul_add(rp[1], ap[1], w, c1);
124       return c1;
126     mul_add(rp[2], ap[2], w, c1);
127     return c1;
130   return c1;
134   BN_ULONG c1 = 0;
137     return c1;
141     mul(rp[0], ap[0], w, c1);
142     mul(rp[1], ap[1], w, c1);
143     mul(rp[2], ap[2], w, c1);
144     mul(rp[3], ap[3], w, c1);
150     mul(rp[0], ap[0], w, c1);
152       return c1;
154     mul(rp[1], ap[1], w, c1);
156       return c1;
158     mul(rp[2], ap[2], w, c1);
160   return c1;
244 /* mul_add_c(a,b,c0,c1,c2)  -- c+=a*b for three word number c=(c2,c1,c0) */
245 /* mul_add_c2(a,b,c0,c1,c2) -- c+=2*a*b for three word number c=(c2,c1,c0) */
246 /* sqr_add_c(a,i,c0,c1,c2)  -- c+=a[i]^2 for three word number c=(c2,c1,c0) */
247 /* sqr_add_c2(a,i,c0,c1,c2) -- c+=2*a[i]*a[j] for three word number c=(c2,c1,c0)
252 #define mul_add_c(a, b, c0, c1, c2)          \
257         : "+r"(c0), "+r"(c1), "+r"(c2)       \
262 #define sqr_add_c(a, i, c0, c1, c2)                           \
267         : "+r"(c0), "+r"(c1), "+r"(c2)                        \
272 #define mul_add_c2(a, b, c0, c1, c2)         \
277         : "+r"(c0), "+r"(c1), "+r"(c2)       \
281         : "+r"(c0), "+r"(c1), "+r"(c2)       \
286 #define sqr_add_c2(a, i, j, c0, c1, c2) mul_add_c2((a)[i], (a)[j], c0, c1, c2)
289   BN_ULONG c1, c2, c3;
291   c1 = 0;
294   mul_add_c(a[0], b[0], c1, c2, c3);
295   r[0] = c1;
296   c1 = 0;
297   mul_add_c(a[0], b[1], c2, c3, c1);
298   mul_add_c(a[1], b[0], c2, c3, c1);
301   mul_add_c(a[2], b[0], c3, c1, c2);
302   mul_add_c(a[1], b[1], c3, c1, c2);
303   mul_add_c(a[0], b[2], c3, c1, c2);
306   mul_add_c(a[0], b[3], c1, c2, c3);
307   mul_add_c(a[1], b[2], c1, c2, c3);
308   mul_add_c(a[2], b[1], c1, c2, c3);
309   mul_add_c(a[3], b[0], c1, c2, c3);
310   r[3] = c1;
311   c1 = 0;
312   mul_add_c(a[4], b[0], c2, c3, c1);
313   mul_add_c(a[3], b[1], c2, c3, c1);
314   mul_add_c(a[2], b[2], c2, c3, c1);
315   mul_add_c(a[1], b[3], c2, c3, c1);
316   mul_add_c(a[0], b[4], c2, c3, c1);
319   mul_add_c(a[0], b[5], c3, c1, c2);
320   mul_add_c(a[1], b[4], c3, c1, c2);
321   mul_add_c(a[2], b[3], c3, c1, c2);
322   mul_add_c(a[3], b[2], c3, c1, c2);
323   mul_add_c(a[4], b[1], c3, c1, c2);
324   mul_add_c(a[5], b[0], c3, c1, c2);
327   mul_add_c(a[6], b[0], c1, c2, c3);
328   mul_add_c(a[5], b[1], c1, c2, c3);
329   mul_add_c(a[4], b[2], c1, c2, c3);
330   mul_add_c(a[3], b[3], c1, c2, c3);
331   mul_add_c(a[2], b[4], c1, c2, c3);
332   mul_add_c(a[1], b[5], c1, c2, c3);
333   mul_add_c(a[0], b[6], c1, c2, c3);
334   r[6] = c1;
335   c1 = 0;
336   mul_add_c(a[0], b[7], c2, c3, c1);
337   mul_add_c(a[1], b[6], c2, c3, c1);
338   mul_add_c(a[2], b[5], c2, c3, c1);
339   mul_add_c(a[3], b[4], c2, c3, c1);
340   mul_add_c(a[4], b[3], c2, c3, c1);
341   mul_add_c(a[5], b[2], c2, c3, c1);
342   mul_add_c(a[6], b[1], c2, c3, c1);
343   mul_add_c(a[7], b[0], c2, c3, c1);
346   mul_add_c(a[7], b[1], c3, c1, c2);
347   mul_add_c(a[6], b[2], c3, c1, c2);
348   mul_add_c(a[5], b[3], c3, c1, c2);
349   mul_add_c(a[4], b[4], c3, c1, c2);
350   mul_add_c(a[3], b[5], c3, c1, c2);
351   mul_add_c(a[2], b[6], c3, c1, c2);
352   mul_add_c(a[1], b[7], c3, c1, c2);
355   mul_add_c(a[2], b[7], c1, c2, c3);
356   mul_add_c(a[3], b[6], c1, c2, c3);
357   mul_add_c(a[4], b[5], c1, c2, c3);
358   mul_add_c(a[5], b[4], c1, c2, c3);
359   mul_add_c(a[6], b[3], c1, c2, c3);
360   mul_add_c(a[7], b[2], c1, c2, c3);
361   r[9] = c1;
362   c1 = 0;
363   mul_add_c(a[7], b[3], c2, c3, c1);
364   mul_add_c(a[6], b[4], c2, c3, c1);
365   mul_add_c(a[5], b[5], c2, c3, c1);
366   mul_add_c(a[4], b[6], c2, c3, c1);
367   mul_add_c(a[3], b[7], c2, c3, c1);
370   mul_add_c(a[4], b[7], c3, c1, c2);
371   mul_add_c(a[5], b[6], c3, c1, c2);
372   mul_add_c(a[6], b[5], c3, c1, c2);
373   mul_add_c(a[7], b[4], c3, c1, c2);
376   mul_add_c(a[7], b[5], c1, c2, c3);
377   mul_add_c(a[6], b[6], c1, c2, c3);
378   mul_add_c(a[5], b[7], c1, c2, c3);
379   r[12] = c1;
380   c1 = 0;
381   mul_add_c(a[6], b[7], c2, c3, c1);
382   mul_add_c(a[7], b[6], c2, c3, c1);
385   mul_add_c(a[7], b[7], c3, c1, c2);
387   r[15] = c1;
391   BN_ULONG c1, c2, c3;
393   c1 = 0;
396   mul_add_c(a[0], b[0], c1, c2, c3);
397   r[0] = c1;
398   c1 = 0;
399   mul_add_c(a[0], b[1], c2, c3, c1);
400   mul_add_c(a[1], b[0], c2, c3, c1);
403   mul_add_c(a[2], b[0], c3, c1, c2);
404   mul_add_c(a[1], b[1], c3, c1, c2);
405   mul_add_c(a[0], b[2], c3, c1, c2);
408   mul_add_c(a[0], b[3], c1, c2, c3);
409   mul_add_c(a[1], b[2], c1, c2, c3);
410   mul_add_c(a[2], b[1], c1, c2, c3);
411   mul_add_c(a[3], b[0], c1, c2, c3);
412   r[3] = c1;
413   c1 = 0;
414   mul_add_c(a[3], b[1], c2, c3, c1);
415   mul_add_c(a[2], b[2], c2, c3, c1);
416   mul_add_c(a[1], b[3], c2, c3, c1);
419   mul_add_c(a[2], b[3], c3, c1, c2);
420   mul_add_c(a[3], b[2], c3, c1, c2);
423   mul_add_c(a[3], b[3], c1, c2, c3);
424   r[6] = c1;
429   BN_ULONG c1, c2, c3;
431   c1 = 0;
434   sqr_add_c(a, 0, c1, c2, c3);
435   r[0] = c1;
436   c1 = 0;
437   sqr_add_c2(a, 1, 0, c2, c3, c1);
440   sqr_add_c(a, 1, c3, c1, c2);
441   sqr_add_c2(a, 2, 0, c3, c1, c2);
444   sqr_add_c2(a, 3, 0, c1, c2, c3);
445   sqr_add_c2(a, 2, 1, c1, c2, c3);
446   r[3] = c1;
447   c1 = 0;
448   sqr_add_c(a, 2, c2, c3, c1);
449   sqr_add_c2(a, 3, 1, c2, c3, c1);
450   sqr_add_c2(a, 4, 0, c2, c3, c1);
453   sqr_add_c2(a, 5, 0, c3, c1, c2);
454   sqr_add_c2(a, 4, 1, c3, c1, c2);
455   sqr_add_c2(a, 3, 2, c3, c1, c2);
458   sqr_add_c(a, 3, c1, c2, c3);
459   sqr_add_c2(a, 4, 2, c1, c2, c3);
460   sqr_add_c2(a, 5, 1, c1, c2, c3);
461   sqr_add_c2(a, 6, 0, c1, c2, c3);
462   r[6] = c1;
463   c1 = 0;
464   sqr_add_c2(a, 7, 0, c2, c3, c1);
465   sqr_add_c2(a, 6, 1, c2, c3, c1);
466   sqr_add_c2(a, 5, 2, c2, c3, c1);
467   sqr_add_c2(a, 4, 3, c2, c3, c1);
470   sqr_add_c(a, 4, c3, c1, c2);
471   sqr_add_c2(a, 5, 3, c3, c1, c2);
472   sqr_add_c2(a, 6, 2, c3, c1, c2);
473   sqr_add_c2(a, 7, 1, c3, c1, c2);
476   sqr_add_c2(a, 7, 2, c1, c2, c3);
477   sqr_add_c2(a, 6, 3, c1, c2, c3);
478   sqr_add_c2(a, 5, 4, c1, c2, c3);
479   r[9] = c1;
480   c1 = 0;
481   sqr_add_c(a, 5, c2, c3, c1);
482   sqr_add_c2(a, 6, 4, c2, c3, c1);
483   sqr_add_c2(a, 7, 3, c2, c3, c1);
486   sqr_add_c2(a, 7, 4, c3, c1, c2);
487   sqr_add_c2(a, 6, 5, c3, c1, c2);
490   sqr_add_c(a, 6, c1, c2, c3);
491   sqr_add_c2(a, 7, 5, c1, c2, c3);
492   r[12] = c1;
493   c1 = 0;
494   sqr_add_c2(a, 7, 6, c2, c3, c1);
497   sqr_add_c(a, 7, c3, c1, c2);
499   r[15] = c1;
503   BN_ULONG c1, c2, c3;
505   c1 = 0;
508   sqr_add_c(a, 0, c1, c2, c3);
509   r[0] = c1;
510   c1 = 0;
511   sqr_add_c2(a, 1, 0, c2, c3, c1);
514   sqr_add_c(a, 1, c3, c1, c2);
515   sqr_add_c2(a, 2, 0, c3, c1, c2);
518   sqr_add_c2(a, 3, 0, c1, c2, c3);
519   sqr_add_c2(a, 2, 1, c1, c2, c3);
520   r[3] = c1;
521   c1 = 0;
522   sqr_add_c(a, 2, c2, c3, c1);
523   sqr_add_c2(a, 3, 1, c2, c3, c1);
526   sqr_add_c2(a, 3, 2, c3, c1, c2);
529   sqr_add_c(a, 3, c1, c2, c3);
530   r[6] = c1;

Indexes created Tue Jun 19 19:05:46 CEST 2018