108 poly1305_inner_big(uint64_t *acc, uint64_t *r, const void *data, size_t len)  in poly1305_inner_big()  argument
134 	a0 = acc[0];  in poly1305_inner_big()
135 	a1 = acc[1];  in poly1305_inner_big()
136 	a2 = acc[2];  in poly1305_inner_big()
213 	acc[0] = a0;  in poly1305_inner_big()
214 	acc[1] = a1;  in poly1305_inner_big()
215 	acc[2] = a2;  in poly1305_inner_big()
221 poly1305_inner_small(uint64_t *acc, uint64_t *r, const void *data, size_t len)  in poly1305_inner_small()  argument
233 	a0 = acc[0];  in poly1305_inner_small()
234 	a1 = acc[1];  in poly1305_inner_small()
235 	a2 = acc[2];  in poly1305_inner_small()
293 	acc[0] = a0;  in poly1305_inner_small()
294 	acc[1] = a1;  in poly1305_inner_small()
295 	acc[2] = a2;  in poly1305_inner_small()
299 poly1305_inner(uint64_t *acc, uint64_t *r, const void *data, size_t len)  in poly1305_inner()  argument
305 		poly1305_inner_big(acc, r, data, len2);  in poly1305_inner()
310 		poly1305_inner_small(acc, r, data, len);  in poly1305_inner()
321 	uint64_t r[6], acc[3], r0, r1;  in br_poly1305_ctmulq_run()  local
376 	acc[0] = 0;  in br_poly1305_ctmulq_run()
377 	acc[1] = 0;  in br_poly1305_ctmulq_run()
378 	acc[2] = 0;  in br_poly1305_ctmulq_run()
386 	poly1305_inner(acc, r, aad, aad_len);  in br_poly1305_ctmulq_run()
387 	poly1305_inner(acc, r, data, len);  in br_poly1305_ctmulq_run()
388 	poly1305_inner_small(acc, r, foot, sizeof foot);  in br_poly1305_ctmulq_run()
395 	acc[1] += (acc[0] >> 44);  in br_poly1305_ctmulq_run()
396 	acc[0] &= MASK44;  in br_poly1305_ctmulq_run()
397 	acc[2] += (acc[1] >> 44);  in br_poly1305_ctmulq_run()
398 	acc[1] &= MASK44;  in br_poly1305_ctmulq_run()
399 	acc[0] += 5 * (acc[2] >> 42);  in br_poly1305_ctmulq_run()
400 	acc[2] &= MASK42;  in br_poly1305_ctmulq_run()
401 	acc[1] += (acc[0] >> 44);  in br_poly1305_ctmulq_run()
402 	acc[0] &= MASK44;  in br_poly1305_ctmulq_run()
403 	acc[2] += (acc[1] >> 44);  in br_poly1305_ctmulq_run()
404 	acc[1] &= MASK44;  in br_poly1305_ctmulq_run()
405 	acc[0] += 5 * (acc[2] >> 42);  in br_poly1305_ctmulq_run()
406 	acc[2] &= MASK42;  in br_poly1305_ctmulq_run()
411 	 * in constant-time, between 'acc' and 'acc-p'. We encode the  in br_poly1305_ctmulq_run()
414 	v0 = (uint32_t)acc[0];  in br_poly1305_ctmulq_run()
415 	v1 = (uint32_t)(acc[0] >> 32) | ((uint32_t)acc[1] << 12);  in br_poly1305_ctmulq_run()
416 	v2 = (uint32_t)(acc[1] >> 20) | ((uint32_t)acc[2] << 24);  in br_poly1305_ctmulq_run()
417 	v3 = (uint32_t)(acc[2] >> 8);  in br_poly1305_ctmulq_run()
418 	v4 = (uint32_t)(acc[2] >> 40);  in br_poly1305_ctmulq_run()