64 	mp_digit *u, z;  in ec_GF2m_193_mod()  local
73 	u = MP_DIGITS(r);  in ec_GF2m_193_mod()
77 	z = u[6];  in ec_GF2m_193_mod()
78 	u[3] ^= (z << 14) ^ (z >> 1);  in ec_GF2m_193_mod()
79 	u[2] ^= (z << 63);  in ec_GF2m_193_mod()
80 	z = u[5];  in ec_GF2m_193_mod()
81 	u[3] ^= (z >> 50);  in ec_GF2m_193_mod()
82 	u[2] ^= (z << 14) ^ (z >> 1);  in ec_GF2m_193_mod()
83 	u[1] ^= (z << 63);  in ec_GF2m_193_mod()
84 	z = u[4];  in ec_GF2m_193_mod()
85 	u[2] ^= (z >> 50);  in ec_GF2m_193_mod()
86 	u[1] ^= (z << 14) ^ (z >> 1);  in ec_GF2m_193_mod()
87 	u[0] ^= (z << 63);  in ec_GF2m_193_mod()
88 	z = u[3] >> 1;				/* z only has 63 significant bits */  in ec_GF2m_193_mod()
89 	u[1] ^= (z >> 49);  in ec_GF2m_193_mod()
90 	u[0] ^= (z << 15) ^ z;  in ec_GF2m_193_mod()
92 	u[6] = u[5] = u[4] = 0;  in ec_GF2m_193_mod()
93 	u[3] ^= z << 1;  in ec_GF2m_193_mod()
98 	u = MP_DIGITS(r);  in ec_GF2m_193_mod()
102 	z = u[12];  in ec_GF2m_193_mod()
103 	u[6] ^= (z << 14) ^ (z >> 1);  in ec_GF2m_193_mod()
104 	u[5] ^= (z << 31);  in ec_GF2m_193_mod()
105 	z = u[11];  in ec_GF2m_193_mod()
106 	u[6] ^= (z >> 18);  in ec_GF2m_193_mod()
107 	u[5] ^= (z << 14) ^ (z >> 1);  in ec_GF2m_193_mod()
108 	u[4] ^= (z << 31);  in ec_GF2m_193_mod()
109 	z = u[10];  in ec_GF2m_193_mod()
110 	u[5] ^= (z >> 18);  in ec_GF2m_193_mod()
111 	u[4] ^= (z << 14) ^ (z >> 1);  in ec_GF2m_193_mod()
112 	u[3] ^= (z << 31);  in ec_GF2m_193_mod()
113 	z = u[9];  in ec_GF2m_193_mod()
114 	u[4] ^= (z >> 18);  in ec_GF2m_193_mod()
115 	u[3] ^= (z << 14) ^ (z >> 1);  in ec_GF2m_193_mod()
116 	u[2] ^= (z << 31);  in ec_GF2m_193_mod()
117 	z = u[8];  in ec_GF2m_193_mod()
118 	u[3] ^= (z >> 18);  in ec_GF2m_193_mod()
119 	u[2] ^= (z << 14) ^ (z >> 1);  in ec_GF2m_193_mod()
120 	u[1] ^= (z << 31);  in ec_GF2m_193_mod()
121 	z = u[7];  in ec_GF2m_193_mod()
122 	u[2] ^= (z >> 18);  in ec_GF2m_193_mod()
123 	u[1] ^= (z << 14) ^ (z >> 1);  in ec_GF2m_193_mod()
124 	u[0] ^= (z << 31);  in ec_GF2m_193_mod()
125 	z = u[6] >> 1;				/* z only has 31 significant bits */  in ec_GF2m_193_mod()
126 	u[1] ^= (z >> 17);  in ec_GF2m_193_mod()
127 	u[0] ^= (z << 15) ^ z;  in ec_GF2m_193_mod()
129 	u[12] = u[11] = u[10] = u[9] = u[8] = u[7] = 0;  in ec_GF2m_193_mod()
130 	u[6] ^= z << 1;  in ec_GF2m_193_mod()
144 	mp_digit *u, *v;  in ec_GF2m_193_sqr()  local
165 	u = MP_DIGITS(r);  in ec_GF2m_193_sqr()
168 	u[12] = gf2m_SQR0(v[6]);  in ec_GF2m_193_sqr()
169 	u[11] = gf2m_SQR1(v[5]);  in ec_GF2m_193_sqr()
170 	u[10] = gf2m_SQR0(v[5]);  in ec_GF2m_193_sqr()
171 	u[9] = gf2m_SQR1(v[4]);  in ec_GF2m_193_sqr()
172 	u[8] = gf2m_SQR0(v[4]);  in ec_GF2m_193_sqr()
173 	u[7] = gf2m_SQR1(v[3]);  in ec_GF2m_193_sqr()
175 	u[6] = gf2m_SQR0(v[3]);  in ec_GF2m_193_sqr()
176 	u[5] = gf2m_SQR1(v[2]);  in ec_GF2m_193_sqr()
177 	u[4] = gf2m_SQR0(v[2]);  in ec_GF2m_193_sqr()
178 	u[3] = gf2m_SQR1(v[1]);  in ec_GF2m_193_sqr()
179 	u[2] = gf2m_SQR0(v[1]);  in ec_GF2m_193_sqr()
180 	u[1] = gf2m_SQR1(v[0]);  in ec_GF2m_193_sqr()
181 	u[0] = gf2m_SQR0(v[0]);  in ec_GF2m_193_sqr()