Home
last modified time | relevance | path

Searched full:z3 (Results 1 – 25 of 85) sorted by relevance

1234

/freebsd/crypto/openssl/crypto/modes/asm/
H A Dghash-c64xplus.pl33 ($Z0,$Z1,$Z2,$Z3, $H0, $H1, $H2, $H3,
85 || ZERO $Z3:$Z2
104 || LDDW *${xip}[0],$Z3:$Z2
117 || [B0] XOR $H3x,$Z3,$Z3
124 || [B0] XOR $H3x,$Z3,$Z3
130 STDW $Z3:$Z2,*${xip}[0]
131 || [B0] ZERO $Z3:$Z2
183 XOR.L $H3x,$Z3,$Z3 ; 7/1
189 || SHRMB.S $Z3,$Z2,$Z2
192 || SHRU $Z3,8,$Z3
[all …]
H A Daesni-gcm-x86_64.pl83 $Z0,$Z1,$Z2,$Z3,$Xi) = map("%xmm$_",(0..8));
106 vmovdqu $Z0,16+8(%rsp) # "$Z3" = 0
120 vpclmulqdq \$0x10,$Hkey,$Z3,$Z1
123 vpclmulqdq \$0x01,$Hkey,$Z3,$Z2
130 vpclmulqdq \$0x00,$Hkey,$Z3,$T1
134 vpclmulqdq \$0x11,$Hkey,$Z3,$Z3
152 vpxor 16+8(%rsp),$Xi,$Xi # modulo-scheduled [vpxor $Z3,$Xi,$Xi]
173 vpxor $Hkey,$Z3,$Z3
192 vpxor $Z1,$Z3,$Z3
214 vpxor $T1,$Z3,$Z3
[all …]
H A Dghash-riscv64.pl148 my ($z0,$z1,$z2,$z3,$t0,$t1,$polymod) = ("t0","t1","t2","t3","t4","t5","t6");
170 @{[clmulh $z3, $x1, $y1]}
184 @{[clmulh $t1, $z3, $polymod]}
185 @{[clmul $t0, $z3, $polymod]}
205 my ($z0,$z1,$z2,$z3,$t0,$t1,$polymod) = ("t0","t1","t2","t3","t4","t5","t6");
227 @{[clmulh $z3, $x1, $y1]}
241 @{[clmulh $t1, $z3, $polymod]}
242 @{[clmul $t0, $z3, $polymod]}
273 my ($z0,$z1,$z2,$z3,$t0,$t1,$polymod) = ("t0","t1","t2","t3","t4","t5","t6");
306 @{[clmulh $z3, $x1, $y1]}
[all …]
/freebsd/contrib/bearssl/src/ec/
H A Dec_c25519_i15.c188 uint16_t x1[18], x2[18], x3[18], z2[18], z3[18]; in api_mul() local
232 * Initialise variables x1, x2, z2, x3 and z3. We set all of them in api_mul()
240 memcpy(z3, x2, ILEN); in api_mul()
259 cswap(z2, z3, swap); in api_mul()
266 print_int_mont("z3", z3); in api_mul()
274 c255_add(c, x3, z3); in api_mul()
275 c255_sub(d, x3, z3); in api_mul()
293 c255_sub(z3, da, cb); in api_mul()
294 c255_mul(z3, z3, z3); in api_mul()
295 c255_mul(z3, z3, x1); in api_mul()
[all …]
H A Dec_c25519_i31.c179 uint32_t x1[10], x2[10], x3[10], z2[10], z3[10]; in api_mul() local
223 * Initialise variables x1, x2, z2, x3 and z3. We set all of them in api_mul()
231 memcpy(z3, x2, sizeof x2); in api_mul()
253 cswap(z2, z3, swap); in api_mul()
260 print_int_mont("z3", z3); in api_mul()
268 c255_add(c, x3, z3); in api_mul()
269 c255_sub(d, x3, z3); in api_mul()
287 c255_sub(z3, da, cb); in api_mul()
288 c255_mul(z3, z3, z3); in api_mul()
289 c255_mul(z3, z3, x1); in api_mul()
[all …]
H A Dec_c25519_m31.c625 uint32_t x1[9], x2[9], x3[9], z2[9], z3[9]; in api_mul() local
646 * Initialise variables x1, x2, z2, x3 and z3. We set all of them in api_mul()
654 memset(z3, 0, sizeof z3); in api_mul()
655 z3[0] = 1; in api_mul()
674 cswap(z2, z3, swap); in api_mul()
681 print_int("z3", z3); in api_mul()
689 f255_add(c, x3, z3); in api_mul()
690 f255_sub(d, x3, z3); in api_mul()
708 f255_sub(z3, da, cb); in api_mul()
709 f255_square(z3, z3); in api_mul()
[all …]
H A Dec_c25519_m62.c380 uint64_t x1[5], x2[5], z2[5], x3[5], z3[5]; in api_mul() local
414 memcpy(z3, x2, sizeof x2); in api_mul()
436 f255_cswap(z2, z3, swap); in api_mul()
466 f255_add(c, x3, z3); in api_mul()
469 f255_sub(d, x3, z3); in api_mul()
482 f255_sub(z3, da, cb); in api_mul()
483 f255_mul(z3, z3, z3); in api_mul()
484 f255_mul(z3, x1, z3); in api_mul()
496 f255_cswap(z2, z3, swap); in api_mul()
H A Dec_p256_m62.c877 * z3 = h * z1 * z2 in p256_add()
934 * Compute z3 = h*z1*z2. in p256_add()
989 * z3 = h * z1 in p256_add_mixed()
1044 * Compute z3 = h*z1*z2. in p256_add_mixed()
1074 * z3 = h * z1
1078 * - If P1 is the point-at-infinity (z1 = 0), then z3 is
1081 * - If P1 = P2, then u1 = u2 and s1 = s2, and x3, y3 and z3
1085 * we correctly get z3 = 0 (the point-at-infinity).
1091 * we get x3, y3 and z3 equal to 0. We can test for that
1094 * and add it, combined with the mask, to (x3,y3,z3).
[all …]
H A Dec_p256_m64.c897 * z3 = h * z1 * z2 in p256_add()
954 * Compute z3 = h*z1*z2. in p256_add()
1009 * z3 = h * z1 in p256_add_mixed()
1064 * Compute z3 = h*z1*z2. in p256_add_mixed()
1094 * z3 = h * z1
1098 * - If P1 is the point-at-infinity (z1 = 0), then z3 is
1101 * - If P1 = P2, then u1 = u2 and s1 = s2, and x3, y3 and z3
1105 * we correctly get z3 = 0 (the point-at-infinity).
1111 * we get x3, y3 and z3 equal to 0. We can test for that
1114 * and add it, combined with the mask, to (x3,y3,z3).
[all …]
H A Dec_c25519_m64.c624 uint64_t x1[4], x2[4], z2[4], x3[4], z3[4]; in api_mul() local
656 memcpy(z3, x2, sizeof x2); in api_mul()
678 f255_cswap(z2, z3, swap); in api_mul()
697 f255_add(c, x3, z3); in api_mul()
700 f255_sub(d, x3, z3); in api_mul()
713 f255_sub(z3, da, cb); in api_mul()
714 f255_mul(z3, z3, z3); in api_mul()
715 f255_mul(z3, x1, z3); in api_mul()
727 f255_cswap(z2, z3, swap); in api_mul()
/freebsd/sys/crypto/openssl/aarch64/
H A Dchacha-armv8-sve.S157 .inst 0x04a14683 //index z3.s,w20,1
160 .inst 0x04a147a3 //index z3.s,w29,1
187 .inst 0x04703403 //xar z3.s,z3.s,z0.s,16
212 .inst 0x04a30042 //add z2.s,z2.s,z3.s
275 .inst 0x04683403 //xar z3.s,z3.s,z0.s,24
300 .inst 0x04a30042 //add z2.s,z2.s,z3.s
370 .inst 0x04703483 //xar z3.s,z3.s,z4.s,16
392 .inst 0x04a301ce //add z14.s,z14.s,z3.s
458 .inst 0x04683483 //xar z3.s,z3.s,z4.s,24
480 .inst 0x04a301ce //add z14.s,z14.s,z3.s
[all …]
/freebsd/sys/contrib/libsodium/src/libsodium/crypto_scalarmult/curve25519/ref10/
H A Dx25519_ref10.c62 fe25519 z3; in crypto_scalarmult_curve25519_ref10() local
82 fe25519_1(z3); in crypto_scalarmult_curve25519_ref10()
90 fe25519_cswap(z2, z3, swap); in crypto_scalarmult_curve25519_ref10()
92 fe25519_sub(tmp0, x3, z3); in crypto_scalarmult_curve25519_ref10()
95 fe25519_add(z2, x3, z3); in crypto_scalarmult_curve25519_ref10()
96 fe25519_mul(z3, tmp0, x2); in crypto_scalarmult_curve25519_ref10()
100 fe25519_add(x3, z3, z2); in crypto_scalarmult_curve25519_ref10()
101 fe25519_sub(z2, z3, z2); in crypto_scalarmult_curve25519_ref10()
105 fe25519_scalar_product(z3, tmp1, 121666); in crypto_scalarmult_curve25519_ref10()
107 fe25519_add(tmp0, tmp0, z3); in crypto_scalarmult_curve25519_ref10()
[all …]
/freebsd/contrib/llvm-project/clang/lib/StaticAnalyzer/Core/
H A DZ3CrosscheckVisitor.cpp1 //===- Z3CrosscheckVisitor.cpp - Crosscheck reports with Z3 -----*- C++ -*-===//
9 // This file declares the visitor and utilities around it for Z3 report
24 STATISTIC(NumZ3QueriesDone, "Number of Z3 queries done");
25 STATISTIC(NumTimesZ3TimedOut, "Number of times Z3 query timed out");
27 "Number of times Z3 query exhausted the rlimit");
30 "too much time in Z3");
33 "Number of Z3 queries accepting a report");
35 "Number of Z3 queries rejecting a report");
/freebsd/sys/contrib/libsodium/src/libsodium/crypto_stream/salsa20/xmm6int/
H A Du4.h4 __m128i z0, z1, z2, z3, z4, z5, z6, z7, z8, z9, z10, z11, z12, z13, z14, variable
30 z3 = _mm_loadu_si128((__m128i *) (x + 12));
31 z4 = _mm_shuffle_epi32(z3, 0x00);
32 z14 = _mm_shuffle_epi32(z3, 0xaa);
33 z3 = _mm_shuffle_epi32(z3, 0xff);
38 orig3 = z3;
85 z3 = orig3;
181 z3 = _mm_xor_si128(z3, y3);
183 z3 = _mm_xor_si128(z3, r3);
194 y7 = _mm_add_epi32(y7, z3);
[all …]
H A Du8.h21 __m256i z3 = _mm256_set1_epi32(x[15]); variable
26 __m256i orig3 = z3;
85 z3 = orig3;
181 z3 = _mm256_xor_si256(z3, y3);
183 z3 = _mm256_xor_si256(z3, r3);
194 y7 = _mm256_add_epi32(y7, z3);
209 y11 = z3;
225 y1 = z3;
269 z3 = _mm256_xor_si256(z3, y3);
271 z3 = _mm256_xor_si256(z3, r3);
[all …]
/freebsd/sys/contrib/openzfs/tests/zfs-tests/tests/functional/cli_root/zpool_split/
H A Dzpool_split_vdevs.ksh50 # "z3" - raidz3
66 disks[z2]="z1 z2 z3"
67 disks[z3]="z1 z2 z3 z4"
82 z3) # raidz3
118 typeset -a badconfs=("d" "z1" "z2" "z3" "m d" "m3 d" "m z1" "m z2" "m z3")
/freebsd/contrib/llvm-project/clang/include/clang/StaticAnalyzer/Core/BugReporter/
H A DZ3CrosscheckVisitor.h1 //===- Z3CrosscheckVisitor.h - Crosscheck reports with Z3 -------*- C++ -*-===//
9 // This file defines the visitor and utilities around it for Z3 report
54 /// the results of the Z3 solver and the statistics of the queries of a report
74 /// - Accumulative time spent in Z3 checks is more than 700ms in the eqclass.
81 /// https://discourse.llvm.org/t/analyzer-rfc-taming-z3-query-times/79520 to
/freebsd/sys/contrib/openzfs/module/icp/algs/edonr/
H A Dedonr.c78 s2 = rotl64(z5 + x6, 15); z3 = x2 + x3; \
79 s5 = rotl64(z1 + z3 + x5, 40); z4 = x5 + x6; \
80 s6 = rotl64(z2 + z4 + x0, 50); z6 = z3 + z4; \
91 z3 = y3 + y4, z5 = z1 + z3; \
94 z4 = y6 + y7, z8 = z3 + z4; \
105 r1 = (z1 ^ s7) + (t2 ^ z8); z3 = s2 ^ s3; \
106 r7 = (z3 ^ s5) + (t4 ^ z8); z7 = t3 ^ t4; \
107 r3 = (z3 ^ s4) + (t0 ^ z7); z4 = s5 ^ s6; \
125 uint64_t z1, z2, z3, z4, z5, z6, z7, z8; in Q512() local
/freebsd/crypto/openssl/crypto/ec/curve448/
H A Dcurve448.c391 gf x1, x2, z2, x3, z3, t1, t2; in ossl_x448_int() local
400 gf_copy(z3, ONE); in ossl_x448_int()
417 gf_cond_swap(z2, z3, swap); in ossl_x448_int()
427 gf_sub_nr(z2, x3, z3); /* D = x3 - z3 */ /* 3+e */ in ossl_x448_int()
429 gf_add_nr(z2, z3, x3); /* C = x3 + z3 */ /* 2+e */ in ossl_x448_int()
431 gf_sub_nr(z3, x2, x3); /* DA-CB */ /* 3+e */ in ossl_x448_int()
432 ossl_gf_sqr(z2, z3); /* (DA-CB)^2 */ in ossl_x448_int()
433 ossl_gf_mul(z3, x1, z2); /* z3 = x1(DA-CB)^2 */ in ossl_x448_int()
449 gf_cond_swap(z2, z3, swap); in ossl_x448_int()
459 OPENSSL_cleanse(z3, sizeof(z3)); in ossl_x448_int()
/freebsd/contrib/bearssl/src/hash/
H A Dghash_ctmul64.c37 uint64_t z0, z1, z2, z3; in bmul64() local
50 z3 = (x0 * y3) ^ (x1 * y2) ^ (x2 * y1) ^ (x3 * y0); in bmul64()
54 z3 &= (uint64_t)0x8888888888888888; in bmul64()
55 return z0 | z1 | z2 | z3; in bmul64()
H A Dghash_pclmul.c220 __m128i z0, z1, z2, z3; \
222 z3 = pclmulqdq00(kw, kw); \
224 z2 = _mm_shuffle_epi32(z3, 0x0E); \
225 SL_256(z0, z1, z2, z3); \
226 REDUCE_F128(z0, z1, z2, z3); \
/freebsd/contrib/llvm-project/clang/include/clang/StaticAnalyzer/Core/
H A DAnalyzerOptions.def182 ANALYZER_OPTION(bool, ShouldCrosscheckWithZ3, "crosscheck-with-z3",
183 "Whether bug reports should be crosschecked with the Z3 "
189 "crosscheck-with-z3-eqclass-timeout-threshold",
192 "instead of doing more Z3 queries. Set 0 for no timeout.", 700)
196 "crosscheck-with-z3-timeout-threshold",
197 "Set a timeout for individual Z3 queries in milliseconds. "
202 "crosscheck-with-z3-rlimit-threshold",
203 "Set the Z3 resource limit threshold. This sets a deterministic cutoff "
204 "point for Z3 queries, as longer queries usually consume more resources. "
H A DAnalyses.def21 ANALYSIS_CONSTRAINTS(Z3Constraints, "z3", "Use Z3 contraint solver",
/freebsd/contrib/wireguard-tools/
H A Dcurve25519-fiat32.h756 fe x1, x2, z2, x3, z3; in curve25519_generic() local
769 * z2' = z3' = 0, and z2 = z3 = 0 gives z2' = z3' = 0. The statement was in curve25519_generic()
794 fe_1(&z3); in curve25519_generic()
801 * pos >= -1; if z2 = 0 then x2 is nonzero; if z3 = 0 then x3 in curve25519_generic()
805 * to_xz (r*P) === if swap then (x3, z3) else (x2, z2) in curve25519_generic()
806 * to_xz ((r+1)*P) === if swap then (x2, z2) else (x3, z3) in curve25519_generic()
813 fe_cswap(&z2, &z3, swap); in curve25519_generic()
822 fe_sub(&tmp0l, &x3, &z3); in curve25519_generic()
825 fe_add(&z2l, &x3, &z3); in curve25519_generic()
826 fe_mul_tll(&z3, &tmp0l, &x2l); in curve25519_generic()
[all …]
/freebsd/contrib/bearssl/src/symcipher/
H A Daes_ct.c45 uint32_t z0, z1, z2, z3, z4, z5, z6, z7, z8, z9; in br_aes_ct_bitslice_Sbox() local
144 z3 = t43 & y16; in br_aes_ct_bitslice_Sbox()
170 t53 = z0 ^ z3; in br_aes_ct_bitslice_Sbox()
176 t59 = z3 ^ t54; in br_aes_ct_bitslice_Sbox()

1234