1129 static void ecc_point_double_jacobian(u64 *x1, u64 *y1, u64 *z1,  in ecc_point_double_jacobian()  argument
1141 	/* t4 = y1^2 */  in ecc_point_double_jacobian()
1142 	vli_mod_square_fast(t4, y1, curve);  in ecc_point_double_jacobian()
1143 	/* t5 = x1*y1^2 = A */  in ecc_point_double_jacobian()
1145 	/* t4 = y1^4 */  in ecc_point_double_jacobian()
1147 	/* t2 = y1*z1 = z3 */  in ecc_point_double_jacobian()
1148 	vli_mod_mult_fast(y1, y1, z1, curve);  in ecc_point_double_jacobian()
1185 	/* t4 = B * (A - x3) - y1^4 = y3 */  in ecc_point_double_jacobian()
1189 	vli_set(z1, y1, ndigits);  in ecc_point_double_jacobian()
1190 	vli_set(y1, t4, ndigits);  in ecc_point_double_jacobian()
1193 /* Modify (x1, y1) => (x1 * z^2, y1 * z^3) */
1194 static void apply_z(u64 *x1, u64 *y1, u64 *z, const struct ecc_curve *curve)  in apply_z()  argument
1201 	vli_mod_mult_fast(y1, y1, t1, curve);	/* y1 * z^3 */  in apply_z()
1204 /* P = (x1, y1) => 2P, (x2, y2) => P' */
1205 static void xycz_initial_double(u64 *x1, u64 *y1, u64 *x2, u64 *y2,  in xycz_initial_double()  argument
1212 	vli_set(y2, y1, ndigits);  in xycz_initial_double()
1220 	apply_z(x1, y1, z, curve);  in xycz_initial_double()
1222 	ecc_point_double_jacobian(x1, y1, z, curve);  in xycz_initial_double()
1227 /* Input P = (x1, y1, Z), Q = (x2, y2, Z)
1228  * Output P' = (x1', y1', Z3), P + Q = (x3, y3, Z3)
1231 static void xycz_add(u64 *x1, u64 *y1, u64 *x2, u64 *y2,  in xycz_add()  argument
1234 	/* t1 = X1, t2 = Y1, t3 = X2, t4 = Y2 */  in xycz_add()
1247 	/* t4 = y2 - y1 */  in xycz_add()
1248 	vli_mod_sub(y2, y2, y1, curve_prime, ndigits);  in xycz_add()
1249 	/* t5 = (y2 - y1)^2 = D */  in xycz_add()
1258 	/* t2 = y1*(C - B) */  in xycz_add()
1259 	vli_mod_mult_fast(y1, y1, x2, curve);  in xycz_add()
1262 	/* t4 = (y2 - y1)*(B - x3) */  in xycz_add()
1265 	vli_mod_sub(y2, y2, y1, curve_prime, ndigits);  in xycz_add()
1270 /* Input P = (x1, y1, Z), Q = (x2, y2, Z)
1274 static void xycz_add_c(u64 *x1, u64 *y1, u64 *x2, u64 *y2,  in xycz_add_c()  argument
1277 	/* t1 = X1, t2 = Y1, t3 = X2, t4 = Y2 */  in xycz_add_c()
1292 	/* t4 = y2 + y1 */  in xycz_add_c()
1293 	vli_mod_add(t5, y2, y1, curve_prime, ndigits);  in xycz_add_c()
1294 	/* t4 = y2 - y1 */  in xycz_add_c()
1295 	vli_mod_sub(y2, y2, y1, curve_prime, ndigits);  in xycz_add_c()
1299 	/* t2 = y1 * (C - B) */  in xycz_add_c()
1300 	vli_mod_mult_fast(y1, y1, t6, curve);  in xycz_add_c()
1303 	/* t3 = (y2 - y1)^2 */  in xycz_add_c()
1310 	/* t4 = (y2 - y1)*(B - x3) */  in xycz_add_c()
1313 	vli_mod_sub(y2, y2, y1, curve_prime, ndigits);  in xycz_add_c()
1315 	/* t7 = (y2 + y1)^2 = F */  in xycz_add_c()
1321 	/* t6 = (y2 + y1)*(x3' - B) */  in xycz_add_c()
1324 	vli_mod_sub(y1, t6, y1, curve_prime, ndigits);  in xycz_add_c()