Lines Matching full:s2
41 uint32_t *mp, *mq, *s1, *s2, *t1, *t2, *t3; in br_rsa_i31_private() local
139 * Compute s2 = x^dq mod q. in br_rsa_i31_private()
142 s2 = mq + fwlen; in br_rsa_i31_private()
143 br_i31_decode_reduce(s2, x, xlen, mq); in br_rsa_i31_private()
144 r &= br_i31_modpow_opt(s2, sk->dq, sk->dqlen, mq, q0i, in br_rsa_i31_private()
158 * h = (s1 - s2)*(1/q) mod p in br_rsa_i31_private()
159 * s1 is an integer modulo p, but s2 is modulo q. PKCS#1 is in br_rsa_i31_private()
171 br_i31_reduce(t2, s2, mp); in br_rsa_i31_private()
179 * s = s2 + q*h in br_rsa_i31_private()
182 * We need mq, s2 and t2. We use the t3 buffer as destination. in br_rsa_i31_private()
185 * is to copy s2 into t3, after which s2 is not needed. Right in br_rsa_i31_private()
186 * now, mq is in slot 0, s2 is in slot 1, and t2 is in slot 5. in br_rsa_i31_private()
187 * Therefore, we have ample room for t3 by simply using s2. in br_rsa_i31_private()
189 t3 = s2; in br_rsa_i31_private()