Lines Matching full:c3
80 u128 c3 = (a0 * (u128)b3) ^ (a1 * (u128)b2) ^ in clmul64() local
95 (((u64)c3) & 0x8888888888888888) ^ extra_lo; in clmul64()
99 (((u64)(c3 >> 64)) & 0x8888888888888888) ^ extra_hi; in clmul64()
129 u64 c3 = (a0 * (u64)b3) ^ (a1 * (u64)b2) ^ in clmul32() local
136 (c3 & 0x8888888888888888); in clmul32()
161 u64 c0, c1, c2, c3, mi0, mi1; in polyval_mul_generic() local
165 * the 256-bit product in @c0 (low) through @c3 (high). in polyval_mul_generic()
168 clmul64(le64_to_cpu(a->hi), le64_to_cpu(b->hi), &c2, &c3); in polyval_mul_generic()
172 mi1 ^= c1 ^ c3; in polyval_mul_generic()
196 * (c1, c2, c3) = (0, in polyval_mul_generic()
198 * c3 + c1 + floor((c1 * (x^63 + x^62 + x^57)) / x^64)) in polyval_mul_generic()
201 c3 ^= c1 ^ (c1 >> 1) ^ (c1 >> 2) ^ (c1 >> 7); in polyval_mul_generic()
203 /* Return (c2, c3). This implicitly multiplies by x^-128. */ in polyval_mul_generic()
205 a->hi = cpu_to_le64(c3); in polyval_mul_generic()