129   BN_ULONG c1 = 0;
133     return c1;
137     mul_add(rp[0], ap[0], w, c1);
138     mul_add(rp[1], ap[1], w, c1);
139     mul_add(rp[2], ap[2], w, c1);
140     mul_add(rp[3], ap[3], w, c1);
147     mul_add(rp[0], ap[0], w, c1);
153   return c1;
157   BN_ULONG c1 = 0;
161     return c1;
165     mul(rp[0], ap[0], w, c1);
166     mul(rp[1], ap[1], w, c1);
167     mul(rp[2], ap[2], w, c1);
168     mul(rp[3], ap[3], w, c1);
174     mul(rp[0], ap[0], w, c1);
179   return c1;
359 /* mul_add_c(a,b,c0,c1,c2)  -- c+=a*b for three word number c=(c2,c1,c0) */
360 /* mul_add_c2(a,b,c0,c1,c2) -- c+=2*a*b for three word number c=(c2,c1,c0) */
361 /* sqr_add_c(a,i,c0,c1,c2)  -- c+=a[i]^2 for three word number c=(c2,c1,c0) */
362 /* sqr_add_c2(a,i,c0,c1,c2) -- c+=2*a[i]*a[j] for three word number c=(c2,c1,c0) */
368 #define mul_add_c(a, b, c0, c1, c2)     \
375     (c1) = ((c1) + (hi)) & BN_MASK2;    \
376     if ((c1) < hi) {                    \
381 #define mul_add_c2(a, b, c0, c1, c2)        \
388     (c1) = ((c1) + hi) & BN_MASK2;          \
389     if ((c1) < hi) {                        \
395     (c1) = ((c1) + hi) & BN_MASK2;          \
396     if ((c1) < hi) {                        \
401 #define sqr_add_c(a, i, c0, c1, c2)           \
408     (c1) = ((c1) + hi) & BN_MASK2;            \
409     if ((c1) < hi) {                          \
414 #define sqr_add_c2(a, i, j, c0, c1, c2) mul_add_c2((a)[i], (a)[j], c0, c1, c2)
420 #define mul_add_c(a, b, c0, c1, c2) \
427     (c1) += hi;                     \
428     (c2) += ((c1) < hi) ? 1 : 0;    \
431 #define mul_add_c2(a, b, c0, c1, c2) \
438     (c1) += tt;                      \
439     (c2) += ((c1) < tt) ? 1 : 0;     \
442     (c1) += hi;                      \
443     (c2) += ((c1) < hi) ? 1 : 0;     \
446 #define sqr_add_c(a, i, c0, c1, c2) \
453     (c1) += hi;                     \
454     (c2) += ((c1) < hi) ? 1 : 0;    \
457 #define sqr_add_c2(a, i, j, c0, c1, c2) mul_add_c2((a)[i], (a)[j], c0, c1, c2)
462   BN_ULONG c1, c2, c3;
464   c1 = 0;
467   mul_add_c(a[0], b[0], c1, c2, c3);
468   r[0] = c1;
469   c1 = 0;
470   mul_add_c(a[0], b[1], c2, c3, c1);
471   mul_add_c(a[1], b[0], c2, c3, c1);
474   mul_add_c(a[2], b[0], c3, c1, c2);
475   mul_add_c(a[1], b[1], c3, c1, c2);
476   mul_add_c(a[0], b[2], c3, c1, c2);
479   mul_add_c(a[0], b[3], c1, c2, c3);
480   mul_add_c(a[1], b[2], c1, c2, c3);
481   mul_add_c(a[2], b[1], c1, c2, c3);
482   mul_add_c(a[3], b[0], c1, c2, c3);
483   r[3] = c1;
484   c1 = 0;
485   mul_add_c(a[4], b[0], c2, c3, c1);
486   mul_add_c(a[3], b[1], c2, c3, c1);
487   mul_add_c(a[2], b[2], c2, c3, c1);
488   mul_add_c(a[1], b[3], c2, c3, c1);
489   mul_add_c(a[0], b[4], c2, c3, c1);
492   mul_add_c(a[0], b[5], c3, c1, c2);
493   mul_add_c(a[1], b[4], c3, c1, c2);
494   mul_add_c(a[2], b[3], c3, c1, c2);
495   mul_add_c(a[3], b[2], c3, c1, c2);
496   mul_add_c(a[4], b[1], c3, c1, c2);
497   mul_add_c(a[5], b[0], c3, c1, c2);
500   mul_add_c(a[6], b[0], c1, c2, c3);
501   mul_add_c(a[5], b[1], c1, c2, c3);
502   mul_add_c(a[4], b[2], c1, c2, c3);
503   mul_add_c(a[3], b[3], c1, c2, c3);
504   mul_add_c(a[2], b[4], c1, c2, c3);
505   mul_add_c(a[1], b[5], c1, c2, c3);
506   mul_add_c(a[0], b[6], c1, c2, c3);
507   r[6] = c1;
508   c1 = 0;
509   mul_add_c(a[0], b[7], c2, c3, c1);
510   mul_add_c(a[1], b[6], c2, c3, c1);
511   mul_add_c(a[2], b[5], c2, c3, c1);
512   mul_add_c(a[3], b[4], c2, c3, c1);
513   mul_add_c(a[4], b[3], c2, c3, c1);
514   mul_add_c(a[5], b[2], c2, c3, c1);
515   mul_add_c(a[6], b[1], c2, c3, c1);
516   mul_add_c(a[7], b[0], c2, c3, c1);
519   mul_add_c(a[7], b[1], c3, c1, c2);
520   mul_add_c(a[6], b[2], c3, c1, c2);
521   mul_add_c(a[5], b[3], c3, c1, c2);
522   mul_add_c(a[4], b[4], c3, c1, c2);
523   mul_add_c(a[3], b[5], c3, c1, c2);
524   mul_add_c(a[2], b[6], c3, c1, c2);
525   mul_add_c(a[1], b[7], c3, c1, c2);
528   mul_add_c(a[2], b[7], c1, c2, c3);
529   mul_add_c(a[3], b[6], c1, c2, c3);
530   mul_add_c(a[4], b[5], c1, c2, c3);
531   mul_add_c(a[5], b[4], c1, c2, c3);
532   mul_add_c(a[6], b[3], c1, c2, c3);
533   mul_add_c(a[7], b[2], c1, c2, c3);
534   r[9] = c1;
535   c1 = 0;
536   mul_add_c(a[7], b[3], c2, c3, c1);
537   mul_add_c(a[6], b[4], c2, c3, c1);
538   mul_add_c(a[5], b[5], c2, c3, c1);
539   mul_add_c(a[4], b[6], c2, c3, c1);
540   mul_add_c(a[3], b[7], c2, c3, c1);
543   mul_add_c(a[4], b[7], c3, c1, c2);
544   mul_add_c(a[5], b[6], c3, c1, c2);
545   mul_add_c(a[6], b[5], c3, c1, c2);
546   mul_add_c(a[7], b[4], c3, c1, c2);
549   mul_add_c(a[7], b[5], c1, c2, c3);
550   mul_add_c(a[6], b[6], c1, c2, c3);
551   mul_add_c(a[5], b[7], c1, c2, c3);
552   r[12] = c1;
553   c1 = 0;
554   mul_add_c(a[6], b[7], c2, c3, c1);
555   mul_add_c(a[7], b[6], c2, c3, c1);
558   mul_add_c(a[7], b[7], c3, c1, c2);
560   r[15] = c1;
564   BN_ULONG c1, c2, c3;
566   c1 = 0;
569   mul_add_c(a[0], b[0], c1, c2, c3);
570   r[0] = c1;
571   c1 = 0;
572   mul_add_c(a[0], b[1], c2, c3, c1);
573   mul_add_c(a[1], b[0], c2, c3, c1);
576   mul_add_c(a[2], b[0], c3, c1, c2);
577   mul_add_c(a[1], b[1], c3, c1, c2);
578   mul_add_c(a[0], b[2], c3, c1, c2);
581   mul_add_c(a[0], b[3], c1, c2, c3);
582   mul_add_c(a[1], b[2], c1, c2, c3);
583   mul_add_c(a[2], b[1], c1, c2, c3);
584   mul_add_c(a[3], b[0], c1, c2, c3);
585   r[3] = c1;
586   c1 = 0;
587   mul_add_c(a[3], b[1], c2, c3, c1);
588   mul_add_c(a[2], b[2], c2, c3, c1);
589   mul_add_c(a[1], b[3], c2, c3, c1);
592   mul_add_c(a[2], b[3], c3, c1, c2);
593   mul_add_c(a[3], b[2], c3, c1, c2);
596   mul_add_c(a[3], b[3], c1, c2, c3);
597   r[6] = c1;
602   BN_ULONG c1, c2, c3;
604   c1 = 0;
607   sqr_add_c(a, 0, c1, c2, c3);
608   r[0] = c1;
609   c1 = 0;
610   sqr_add_c2(a, 1, 0, c2, c3, c1);
613   sqr_add_c(a, 1, c3, c1, c2);
614   sqr_add_c2(a, 2, 0, c3, c1, c2);
617   sqr_add_c2(a, 3, 0, c1, c2, c3);
618   sqr_add_c2(a, 2, 1, c1, c2, c3);
619   r[3] = c1;
620   c1 = 0;
621   sqr_add_c(a, 2, c2, c3, c1);
622   sqr_add_c2(a, 3, 1, c2, c3, c1);
623   sqr_add_c2(a, 4, 0, c2, c3, c1);
626   sqr_add_c2(a, 5, 0, c3, c1, c2);
627   sqr_add_c2(a, 4, 1, c3, c1, c2);
628   sqr_add_c2(a, 3, 2, c3, c1, c2);
631   sqr_add_c(a, 3, c1, c2, c3);
632   sqr_add_c2(a, 4, 2, c1, c2, c3);
633   sqr_add_c2(a, 5, 1, c1, c2, c3);
634   sqr_add_c2(a, 6, 0, c1, c2, c3);
635   r[6] = c1;
636   c1 = 0;
637   sqr_add_c2(a, 7, 0, c2, c3, c1);
638   sqr_add_c2(a, 6, 1, c2, c3, c1);
639   sqr_add_c2(a, 5, 2, c2, c3, c1);
640   sqr_add_c2(a, 4, 3, c2, c3, c1);
643   sqr_add_c(a, 4, c3, c1, c2);
644   sqr_add_c2(a, 5, 3, c3, c1, c2);
645   sqr_add_c2(a, 6, 2, c3, c1, c2);
646   sqr_add_c2(a, 7, 1, c3, c1, c2);
649   sqr_add_c2(a, 7, 2, c1, c2, c3);
650   sqr_add_c2(a, 6, 3, c1, c2, c3);
651   sqr_add_c2(a, 5, 4, c1, c2, c3);
652   r[9] = c1;
653   c1 = 0;
654   sqr_add_c(a, 5, c2, c3, c1);
655   sqr_add_c2(a, 6, 4, c2, c3, c1);
656   sqr_add_c2(a, 7, 3, c2, c3, c1);
659   sqr_add_c2(a, 7, 4, c3, c1, c2);
660   sqr_add_c2(a, 6, 5, c3, c1, c2);
663   sqr_add_c(a, 6, c1, c2, c3);
664   sqr_add_c2(a, 7, 5, c1, c2, c3);
665   r[12] = c1;
666   c1 = 0;
667   sqr_add_c2(a, 7, 6, c2, c3, c1);
670   sqr_add_c(a, 7, c3, c1, c2);
672   r[15] = c1;
676   BN_ULONG c1, c2, c3;
678   c1 = 0;
681   sqr_add_c(a, 0, c1, c2, c3);
682   r[0] = c1;
683   c1 = 0;
684   sqr_add_c2(a, 1, 0, c2, c3, c1);
687   sqr_add_c(a, 1, c3, c1, c2);
688   sqr_add_c2(a, 2, 0, c3, c1, c2);
691   sqr_add_c2(a, 3, 0, c1, c2, c3);
692   sqr_add_c2(a, 2, 1, c1, c2, c3);
693   r[3] = c1;
694   c1 = 0;
695   sqr_add_c(a, 2, c2, c3, c1);
696   sqr_add_c2(a, 3, 1, c2, c3, c1);
699   sqr_add_c2(a, 3, 2, c3, c1, c2);
702   sqr_add_c(a, 3, c1, c2, c3);
703   r[6] = c1;

Indexes created Tue Jun 19 19:05:46 CEST 2018