55 		uint32_t z, cc1, cc2;  in poly1305_inner()  local
154 		z = cc1 + cc2;  in poly1305_inner()
155 		z += (z << 2) + a[0];  in poly1305_inner()
156 		a[0] = z & 0x1FFF;  in poly1305_inner()
157 		a[1] += z >> 13;  in poly1305_inner()
171 	uint32_t z, r[19], acc[10], cc, ctl;  in br_poly1305_ctmul32_run()  local
200 	z = br_dec32le(pkey) & 0x03FFFFFF;  in br_poly1305_ctmul32_run()
201 	r[9] = z & 0x1FFF;  in br_poly1305_ctmul32_run()
202 	r[10] = z >> 13;  in br_poly1305_ctmul32_run()
203 	z = (br_dec32le(pkey +  3) >> 2) & 0x03FFFF03;  in br_poly1305_ctmul32_run()
204 	r[11] = z & 0x1FFF;  in br_poly1305_ctmul32_run()
205 	r[12] = z >> 13;  in br_poly1305_ctmul32_run()
206 	z = (br_dec32le(pkey +  6) >> 4) & 0x03FFC0FF;  in br_poly1305_ctmul32_run()
207 	r[13] = z & 0x1FFF;  in br_poly1305_ctmul32_run()
208 	r[14] = z >> 13;  in br_poly1305_ctmul32_run()
209 	z = (br_dec32le(pkey +  9) >> 6) & 0x03F03FFF;  in br_poly1305_ctmul32_run()
210 	r[15] = z & 0x1FFF;  in br_poly1305_ctmul32_run()
211 	r[16] = z >> 13;  in br_poly1305_ctmul32_run()
212 	z = (br_dec32le(pkey + 12) >> 8) & 0x000FFFFF;  in br_poly1305_ctmul32_run()
213 	r[17] = z & 0x1FFF;  in br_poly1305_ctmul32_run()
214 	r[18] = z >> 13;  in br_poly1305_ctmul32_run()
247 		z = acc[i] + cc;  in br_poly1305_ctmul32_run()
248 		acc[i] = z & 0x1FFF;  in br_poly1305_ctmul32_run()
249 		cc = z >> 13;  in br_poly1305_ctmul32_run()
251 	z = acc[0] + cc + (cc << 2);  in br_poly1305_ctmul32_run()
252 	acc[0] = z & 0x1FFF;  in br_poly1305_ctmul32_run()
253 	acc[1] += z >> 13;  in br_poly1305_ctmul32_run()
274 	z = acc[0] + (acc[1] << 13) + br_dec16le(pkey + 16);  in br_poly1305_ctmul32_run()
275 	br_enc16le((unsigned char *)tag, z & 0xFFFF);  in br_poly1305_ctmul32_run()
276 	z = (z >> 16) + (acc[2] << 10) + br_dec16le(pkey + 18);  in br_poly1305_ctmul32_run()
277 	br_enc16le((unsigned char *)tag + 2, z & 0xFFFF);  in br_poly1305_ctmul32_run()
278 	z = (z >> 16) + (acc[3] << 7) + br_dec16le(pkey + 20);  in br_poly1305_ctmul32_run()
279 	br_enc16le((unsigned char *)tag + 4, z & 0xFFFF);  in br_poly1305_ctmul32_run()
280 	z = (z >> 16) + (acc[4] << 4) + br_dec16le(pkey + 22);  in br_poly1305_ctmul32_run()
281 	br_enc16le((unsigned char *)tag + 6, z & 0xFFFF);  in br_poly1305_ctmul32_run()
282 	z = (z >> 16) + (acc[5] << 1) + (acc[6] << 14) + br_dec16le(pkey + 24);  in br_poly1305_ctmul32_run()
283 	br_enc16le((unsigned char *)tag + 8, z & 0xFFFF);  in br_poly1305_ctmul32_run()
284 	z = (z >> 16) + (acc[7] << 11) + br_dec16le(pkey + 26);  in br_poly1305_ctmul32_run()
285 	br_enc16le((unsigned char *)tag + 10, z & 0xFFFF);  in br_poly1305_ctmul32_run()
286 	z = (z >> 16) + (acc[8] << 8) + br_dec16le(pkey + 28);  in br_poly1305_ctmul32_run()
287 	br_enc16le((unsigned char *)tag + 12, z & 0xFFFF);  in br_poly1305_ctmul32_run()
288 	z = (z >> 16) + (acc[9] << 5) + br_dec16le(pkey + 30);  in br_poly1305_ctmul32_run()
289 	br_enc16le((unsigned char *)tag + 14, z & 0xFFFF);  in br_poly1305_ctmul32_run()