136 	bitcnt_t alpha, beta;  in kcdsa_sign()  local
182 	ret = nn_bitlen(p, &alpha); EG(ret, err);  in kcdsa_sign()
231 	MUST_HAVE((sizeof(pi_buf) >= (u16)BYTECEIL(alpha)), ret, err);  in kcdsa_sign()
232 	ret = _i2osp(pi, pi_buf, (u16)BYTECEIL(alpha)); EG(ret, err);  in kcdsa_sign()
238 		ret = gen_hash_update(&hash_ctx, pi_buf, (u16)BYTECEIL(alpha), kcdsa_hash); EG(ret, err);  in kcdsa_sign()
242 		MUST_HAVE((block_size <= (u16)BYTECEIL(alpha)), ret, err);  in kcdsa_sign()
243 		ret = _i2osp(y, pi_buf, (u16)BYTECEIL(alpha)); EG(ret, err);  in kcdsa_sign()
244 		ret = buf_lshift(pi_buf, (u16)BYTECEIL(alpha), (u16)(BYTECEIL(alpha) - block_size)); EG(ret, err);  in kcdsa_sign()
258 		ret = gen_hash_update(&hash_ctx, pi_buf, (u16)BYTECEIL(alpha), kcdsa_hash); EG(ret, err);  in kcdsa_sign()
265 		MUST_HAVE((block_size <= (u16)BYTECEIL(alpha)), ret, err);  in kcdsa_sign()
266 		ret = _i2osp(y, pi_buf, (u16)BYTECEIL(alpha)); EG(ret, err);  in kcdsa_sign()
267 		ret = buf_lshift(pi_buf, (u16)BYTECEIL(alpha), (u16)(BYTECEIL(alpha) - block_size)); EG(ret, err);  in kcdsa_sign()
351 	bitcnt_t alpha, beta;  in kcdsa_verify()  local
388 	ret = nn_bitlen(p, &alpha); EG(ret, err);  in kcdsa_verify()
426 		MUST_HAVE((block_size <= (u16)BYTECEIL(alpha)), ret, err);  in kcdsa_verify()
427 		ret = _i2osp(y, pi_buf, (u16)BYTECEIL(alpha)); EG(ret, err);  in kcdsa_verify()
428 		ret = buf_lshift(pi_buf, (u16)BYTECEIL(alpha), (u16)(BYTECEIL(alpha) - block_size)); EG(ret, err);  in kcdsa_verify()
441 		MUST_HAVE((block_size <= (u16)BYTECEIL(alpha)), ret, err);  in kcdsa_verify()
442 		ret = _i2osp(y, pi_buf, (u16)BYTECEIL(alpha)); EG(ret, err);  in kcdsa_verify()
443 		ret = buf_lshift(pi_buf, (u16)BYTECEIL(alpha), (u16)(BYTECEIL(alpha) - block_size)); EG(ret, err);  in kcdsa_verify()
471 	MUST_HAVE((sizeof(pi_buf) >= (u16)BYTECEIL(alpha)), ret, err);  in kcdsa_verify()
472 	ret = _i2osp(&pi, pi_buf, (u16)BYTECEIL(alpha)); EG(ret, err);  in kcdsa_verify()
477 		ret = gen_hash_update(&hash_ctx, pi_buf, (u16)BYTECEIL(alpha), kcdsa_hash); EG(ret, err);  in kcdsa_verify()
484 		ret = gen_hash_update(&hash_ctx, pi_buf, (u16)BYTECEIL(alpha), kcdsa_hash); EG(ret, err);  in kcdsa_verify()