62 	mp_digit *u, z;  in ec_GF2m_163_mod()  local
71 	u = MP_DIGITS(r);  in ec_GF2m_163_mod()
75 	z = u[5];  in ec_GF2m_163_mod()
76 	u[2] ^= (z << 36) ^ (z << 35) ^ (z << 32) ^ (z << 29);  in ec_GF2m_163_mod()
77 	z = u[4];  in ec_GF2m_163_mod()
78 	u[2] ^= (z >> 28) ^ (z >> 29) ^ (z >> 32) ^ (z >> 35);  in ec_GF2m_163_mod()
79 	u[1] ^= (z << 36) ^ (z << 35) ^ (z << 32) ^ (z << 29);  in ec_GF2m_163_mod()
80 	z = u[3];  in ec_GF2m_163_mod()
81 	u[1] ^= (z >> 28) ^ (z >> 29) ^ (z >> 32) ^ (z >> 35);  in ec_GF2m_163_mod()
82 	u[0] ^= (z << 36) ^ (z << 35) ^ (z << 32) ^ (z << 29);  in ec_GF2m_163_mod()
83 	z = u[2] >> 35;				/* z only has 29 significant bits */  in ec_GF2m_163_mod()
84 	u[0] ^= (z << 7) ^ (z << 6) ^ (z << 3) ^ z;  in ec_GF2m_163_mod()
86 	u[5] = u[4] = u[3] = 0;  in ec_GF2m_163_mod()
87 	u[2] ^= z << 35;  in ec_GF2m_163_mod()
92 	u = MP_DIGITS(r);  in ec_GF2m_163_mod()
96 	z = u[10];  in ec_GF2m_163_mod()
97 	u[5] ^= (z << 4) ^ (z << 3) ^ z ^ (z >> 3);  in ec_GF2m_163_mod()
98 	u[4] ^= (z << 29);  in ec_GF2m_163_mod()
99 	z = u[9];  in ec_GF2m_163_mod()
100 	u[5] ^= (z >> 28) ^ (z >> 29);  in ec_GF2m_163_mod()
101 	u[4] ^= (z << 4) ^ (z << 3) ^ z ^ (z >> 3);  in ec_GF2m_163_mod()
102 	u[3] ^= (z << 29);  in ec_GF2m_163_mod()
103 	z = u[8];  in ec_GF2m_163_mod()
104 	u[4] ^= (z >> 28) ^ (z >> 29);  in ec_GF2m_163_mod()
105 	u[3] ^= (z << 4) ^ (z << 3) ^ z ^ (z >> 3);  in ec_GF2m_163_mod()
106 	u[2] ^= (z << 29);  in ec_GF2m_163_mod()
107 	z = u[7];  in ec_GF2m_163_mod()
108 	u[3] ^= (z >> 28) ^ (z >> 29);  in ec_GF2m_163_mod()
109 	u[2] ^= (z << 4) ^ (z << 3) ^ z ^ (z >> 3);  in ec_GF2m_163_mod()
110 	u[1] ^= (z << 29);  in ec_GF2m_163_mod()
111 	z = u[6];  in ec_GF2m_163_mod()
112 	u[2] ^= (z >> 28) ^ (z >> 29);  in ec_GF2m_163_mod()
113 	u[1] ^= (z << 4) ^ (z << 3) ^ z ^ (z >> 3);  in ec_GF2m_163_mod()
114 	u[0] ^= (z << 29);  in ec_GF2m_163_mod()
115 	z = u[5] >> 3;				/* z only has 29 significant bits */  in ec_GF2m_163_mod()
116 	u[1] ^= (z >> 25) ^ (z >> 26);  in ec_GF2m_163_mod()
117 	u[0] ^= (z << 7) ^ (z << 6) ^ (z << 3) ^ z;  in ec_GF2m_163_mod()
119 	u[11] = u[10] = u[9] = u[8] = u[7] = u[6] = 0;  in ec_GF2m_163_mod()
120 	u[5] ^= z << 3;  in ec_GF2m_163_mod()
134 	mp_digit *u, *v;  in ec_GF2m_163_sqr()  local
155 	u = MP_DIGITS(r);  in ec_GF2m_163_sqr()
158 	u[11] = gf2m_SQR1(v[5]);  in ec_GF2m_163_sqr()
159 	u[10] = gf2m_SQR0(v[5]);  in ec_GF2m_163_sqr()
160 	u[9] = gf2m_SQR1(v[4]);  in ec_GF2m_163_sqr()
161 	u[8] = gf2m_SQR0(v[4]);  in ec_GF2m_163_sqr()
162 	u[7] = gf2m_SQR1(v[3]);  in ec_GF2m_163_sqr()
163 	u[6] = gf2m_SQR0(v[3]);  in ec_GF2m_163_sqr()
165 	u[5] = gf2m_SQR1(v[2]);  in ec_GF2m_163_sqr()
166 	u[4] = gf2m_SQR0(v[2]);  in ec_GF2m_163_sqr()
167 	u[3] = gf2m_SQR1(v[1]);  in ec_GF2m_163_sqr()
168 	u[2] = gf2m_SQR0(v[1]);  in ec_GF2m_163_sqr()
169 	u[1] = gf2m_SQR1(v[0]);  in ec_GF2m_163_sqr()
170 	u[0] = gf2m_SQR0(v[0]);  in ec_GF2m_163_sqr()