36 	uint32_t *mp, *mq, *s1, *s2, *t1, *t2, *t3;  in br_rsa_i32_private()  local
44 	 * The mp, mq, s1, s2, t1 and t2 buffers are large enough to  in br_rsa_i32_private()
51 	t2 = tmp + 2 * U;  in br_rsa_i32_private()
88 	br_i32_zero(t2, mp[0]);  in br_rsa_i32_private()
89 	br_i32_mulacc(t2, mp, mq);  in br_rsa_i32_private()
91 	br_i32_encode(t2 + 2 * U, xlen, t2);  in br_rsa_i32_private()
98 		wn = ((unsigned char *)(t2 + 2 * U))[u];  in br_rsa_i32_private()
108 	br_i32_modpow(s1, sk->dp, sk->dplen, mp, p0i, t1, t2);  in br_rsa_i32_private()
115 	br_i32_modpow(s2, sk->dq, sk->dqlen, mq, q0i, t1, t2);  in br_rsa_i32_private()
130 	br_i32_reduce(t2, s2, mp);  in br_rsa_i32_private()
131 	br_i32_add(s1, mp, br_i32_sub(s1, t2, 1));  in br_rsa_i32_private()
134 	br_i32_montymul(t2, s1, t1, mp, p0i);  in br_rsa_i32_private()
137 	 * h is now in t2. We compute the final result:  in br_rsa_i32_private()
141 	 * We need mq, s2 and t2. We use the t3 buffer as destination.  in br_rsa_i32_private()
147 	br_i32_mulacc(t3, mq, t2);  in br_rsa_i32_private()