174 	u8 i, p_len, q_len;  in _bip0340_sign()  local
210 	q_len = (u8)BYTECEIL(q_bit_len);  in _bip0340_sign()
227 	MUST_HAVE((q_len == BIP0340_S_LEN(q_bit_len)), ret, err);  in _bip0340_sign()
250 	ret = nn_lshift(&e, &e, (bitcnt_t)(8 * q_len)); EG(ret, err);  in _bip0340_sign()
257 	MUST_HAVE((siglen >= q_len), ret, err);  in _bip0340_sign()
258 	ret = nn_export_to_buf(&sig[0], q_len, &k); EG(ret, err);  in _bip0340_sign()
262 		      &sig[0], q_len, hm, &h_ctx); EG(ret, err);  in _bip0340_sign()
265 	ret = nn_export_to_buf(&sig[0], q_len, &d); EG(ret, err);  in _bip0340_sign()
267 	if(q_len > hm->digest_size){  in _bip0340_sign()
272 				    &sig[0], q_len, hm, &h_ctx); EG(ret, err);  in _bip0340_sign()
275 		for(i = 0; i < q_len; i++){  in _bip0340_sign()
356 	ret = nn_export_to_buf(&sig[p_len], q_len, &e); EG(ret, err);  in _bip0340_sign()
387 	u8 p_len, q_len;  in _bip0340_verify_init()  local
412 	q_len = (u8)BYTECEIL(q_bit_len);  in _bip0340_verify_init()
418 	MUST_HAVE((q_len == BIP0340_S_LEN(q_bit_len)), ret, err);  in _bip0340_verify_init()
429 	ret = nn_init_from_buf(s, &sig[p_len], q_len); EG(ret, err);  in _bip0340_verify_init()
720 									   bitcnt_t q_bit_len, u8 q_len,  in _bip0340_compute_batch_csprng_scalars()  argument
727 	MUST_HAVE((scalar_len >= q_len), ret, err);  in _bip0340_compute_batch_csprng_scalars()
731 	while(size < q_len){  in _bip0340_compute_batch_csprng_scalars()
733 		remain = ((q_len - size) < CHACHA20_MAX_ASKED_LEN) ? (q_len - size): CHACHA20_MAX_ASKED_LEN;  in _bip0340_compute_batch_csprng_scalars()
745 	ret = nn_init_from_buf(a, scalar, q_len); EG(ret, err);  in _bip0340_compute_batch_csprng_scalars()
828 	u8 p_len, q_len;  in _bip0340_verify_batch_no_memory()  local
881 		q_len = (u8)BYTECEIL(q_bit_len);  in _bip0340_verify_batch_no_memory()
912 								    q_bit_len, q_len, &a); EG(ret, err);  in _bip0340_verify_batch_no_memory()
919 		ret = nn_init_from_buf(&S, &sig[p_len], q_len); EG(ret, err);  in _bip0340_verify_batch_no_memory()
1048 	u8 p_len, q_len;  in _bip0340_verify_batch()  local
1138 		q_len = (u8)BYTECEIL(q_bit_len);  in _bip0340_verify_batch()
1164 								    q_bit_len, q_len, &a); EG(ret, err);  in _bip0340_verify_batch()
1171 		ret = nn_init_from_buf(&S, &sig[p_len], q_len); EG(ret, err);  in _bip0340_verify_batch()