453 	const curve_params *cc, const uint16_t *code)  in run_code()  argument
491 			ctl |= NOT(br_i31_sub(t[d], cc->p, 0));  in run_code()
492 			br_i31_sub(t[d], cc->p, ctl);  in run_code()
495 			br_i31_add(t[d], cc->p, br_i31_sub(t[d], t[a], 1));  in run_code()
498 			br_i31_montymul(t[d], t[a], t[b], cc->p, cc->p0i);  in run_code()
501 			plen = (cc->p[0] - (cc->p[0] >> 5) + 7) >> 3;  in run_code()
502 			br_i31_encode(tp, plen, cc->p);  in run_code()
505 				cc->p, cc->p0i, t[a], t[b]);  in run_code()
532 point_zero(jacobian *P, const curve_params *cc)  in point_zero()  argument
535 	P->c[0][0] = P->c[1][0] = P->c[2][0] = cc->p[0];  in point_zero()
539 point_double(jacobian *P, const curve_params *cc)  in point_double()  argument
541 	run_code(P, P, cc, code_double);  in point_double()
545 point_add(jacobian *P1, const jacobian *P2, const curve_params *cc)  in point_add()  argument
547 	return run_code(P1, P2, cc, code_add);  in point_add()
552 	const curve_params *cc)  in point_mul()  argument
572 	point_double(&P2, cc);  in point_mul()
574 	point_add(&P3, &P2, cc);  in point_mul()
576 	point_zero(&Q, cc);  in point_mul()
585 			point_double(&Q, cc);  in point_mul()
586 			point_double(&Q, cc);  in point_mul()
593 			point_add(&U, &T, cc);  in point_mul()
609 point_decode(jacobian *P, const void *src, size_t len, const curve_params *cc)  in point_decode()  argument
634 	point_zero(P, cc);  in point_decode()
635 	plen = (cc->p[0] - (cc->p[0] >> 5) + 7) >> 3;  in point_decode()
639 	r = br_i31_decode_mod(P->c[0], buf + 1, plen, cc->p);  in point_decode()
640 	r &= br_i31_decode_mod(P->c[1], buf + 1 + plen, plen, cc->p);  in point_decode()
654 	zlen = ((cc->p[0] + 63) >> 5) * sizeof(uint32_t);  in point_decode()
655 	memcpy(Q.c[0], cc->R2, zlen);  in point_decode()
656 	memcpy(Q.c[1], cc->b, zlen);  in point_decode()
657 	set_one(Q.c[2], cc->p);  in point_decode()
658 	r &= ~run_code(P, &Q, cc, code_check);  in point_decode()
668 point_encode(void *dst, const jacobian *P, const curve_params *cc)  in point_encode()  argument
676 	xbl = cc->p[0];  in point_encode()
681 	set_one(T.c[2], cc->p);  in point_encode()
682 	run_code(&Q, &T, cc, code_affine);  in point_encode()
734 	const curve_params *cc;  in api_mul()  local
737 	cc = id_to_curve(curve);  in api_mul()
738 	if (Glen != cc->point_len) {  in api_mul()
741 	r = point_decode(&P, G, Glen, cc);  in api_mul()
742 	point_mul(&P, x, xlen, cc);  in api_mul()
743 	point_encode(G, &P, cc);  in api_mul()
766 	const curve_params *cc;  in api_muladd()  local
775 	cc = id_to_curve(curve);  in api_muladd()
776 	if (len != cc->point_len) {  in api_muladd()
779 	r = point_decode(&P, A, len, cc);  in api_muladd()
785 	r &= point_decode(&Q, B, len, cc);  in api_muladd()
786 	point_mul(&P, x, xlen, cc);  in api_muladd()
787 	point_mul(&Q, y, ylen, cc);  in api_muladd()
797 	t = point_add(&P, &Q, cc);  in api_muladd()
798 	point_double(&Q, cc);  in api_muladd()
811 	point_encode(A, &P, cc);  in api_muladd()