Home
last modified time | relevance | path

Searched refs:h0 (Results 1 – 25 of 52) sorted by relevance

123

/freebsd/sys/contrib/libsodium/src/libsodium/crypto_onetimeauth/poly1305/donna/
H A Dpoly1305_donna64.h69 unsigned long long h0, h1, h2; in poly1305_blocks() local
77 h0 = st->h[0]; in poly1305_blocks()
91 h0 += ((t0) &0xfffffffffff); in poly1305_blocks()
96 MUL(d0, h0, r0); in poly1305_blocks()
101 MUL(d1, h0, r1); in poly1305_blocks()
106 MUL(d2, h0, r2); in poly1305_blocks()
114 h0 = LO(d0) & 0xfffffffffff; in poly1305_blocks()
121 h0 += c * 5; in poly1305_blocks()
122 c = (h0 >> 44); in poly1305_blocks()
123 h0 = h0 & 0xfffffffffff; in poly1305_blocks()
[all …]
H A Dpoly1305_donna32.h62 unsigned long h0, h1, h2, h3, h4; in poly1305_blocks() local
77 h0 = st->h[0]; in poly1305_blocks()
85 h0 += (LOAD32_LE(m + 0)) & 0x3ffffff; in poly1305_blocks()
92 d0 = ((unsigned long long) h0 * r0) + ((unsigned long long) h1 * s4) + in poly1305_blocks()
95 d1 = ((unsigned long long) h0 * r1) + ((unsigned long long) h1 * r0) + in poly1305_blocks()
98 d2 = ((unsigned long long) h0 * r2) + ((unsigned long long) h1 * r1) + in poly1305_blocks()
101 d3 = ((unsigned long long) h0 * r3) + ((unsigned long long) h1 * r2) + in poly1305_blocks()
104 d4 = ((unsigned long long) h0 * r4) + ((unsigned long long) h1 * r3) + in poly1305_blocks()
110 h0 = (unsigned long) d0 & 0x3ffffff; in poly1305_blocks()
123 h0 += c * 5; in poly1305_blocks()
[all …]
/freebsd/crypto/openssl/crypto/poly1305/asm/
H A Dpoly1305-armv8.pl55 my ($h0,$h1,$h2,$r0,$r1,$s1,$t0,$t1,$d0,$d1,$d2) = map("x$_",(4..14));
129 ldp $h0,$h1,[$ctx] // load hash value
143 adds $h0,$h0,$t0 // accumulate input
146 mul $d0,$h0,$r0 // h0*r0
148 umulh $d1,$h0,$r0
154 mul $t0,$h0,$r1 // h0*r1
156 umulh $d2,$h0,$r1
174 adds $h0,$d0,$t0
180 stp $h0,$h1,[$ctx] // store hash value
194 ldp $h0,$h1,[$ctx] // load hash base 2^64
[all …]
H A Dpoly1305-ppc.pl103 my ($h0,$h1,$h2,$d0,$d1,$d2, $r0,$r1,$s1, $t0,$t1) = map("r$_",(7..12,27..31));
123 li $h0,4
126 lwbrx $h0,$h0,$inp
130 insrdi $d0,$h0,32,0
137 ori $h0,$h1,3 # 0x0ffffffc0fffffff
139 and $d0,$d0,$h0
171 ld $h0,0($ctx) # load hash value
202 addc $h0,$h0,$t0 # accumulate input
205 mulld $d0,$h0,$r0 # h0*r0
206 mulhdu $d1,$h0,$r0
[all …]
H A Dpoly1305-armv4.pl177 my ($h0,$h1,$h2,$h3,$h4,$r0,$r1,$r2,$r3)=map("r$_",(4..12));
194 ldmia $ctx,{$h0-$r3} @ load context
220 adds $h0,$h0,r3 @ accumulate input
261 adds $h0,$h0,r0 @ accumulate input
273 umull r0,r1,$h0,$r0
281 umlal r2,r3,$h0,$r1
282 str r0,[sp,#0] @ future $h0
299 umlal r0,r1,$h0,$r2
300 umlal r2,r3,$h0,$r3
301 ldr $h0,[sp,#0]
[all …]
H A Dpoly1305-sparcv9.pl51 my ($h0,$h1,$h2,$h3, $t0,$t1,$t2) = map("%o$_",(0..5,7));
109 ldxa [$inp+%g0]0x88,$h0 ! load little-endian key
114 srlx $h0,$shr,$h0
117 or $t2,$h0,$h0
122 and $t0,$h0,$h0
124 stx $h0,[$ctx+32+0] ! store key
162 ld [$ctx+4],$h0
196 addcc $d0,$h0,$h0 ! accumulate input
203 umul $r0,$h0,$d0
204 umul $r1,$h0,$d1
[all …]
H A Dpoly1305-s390x.pl128 my ($d0hi,$d0lo,$d1hi,$d1lo,$t0,$h0,$t1,$h1,$h2) = map("%r$_",(6..14));
141 lg ($h0,"0($ctx)"); # load hash value
167 algr ($d0lo,$h0); # accumulate input
171 lgr ($h0,$d0lo);
184 algr ($h1,$h0);
196 lghi ($h0,-4); # final reduction step
197 ngr ($h0,$h2);
199 algr ($h0,$t0);
203 algr ($h0,$d0lo);
211 stg ($h0,"0($ctx)"); # store hash value
[all …]
H A Dpoly1305-mips.pl174 my ($h0,$h1,$h2,$r0,$r1,$s1,$d0,$d1,$d2) =
209 ld $h0,0($ctx) # load hash value
271 daddu $h0,$in0 # accumulate input
273 sltu $tmp0,$h0,$in0
277 dmultu ($r0,$h0) # h0*r0
280 mflo ($d0,$r0,$h0)
281 mfhi ($d1,$r0,$h0)
289 dmultu ($r1,$h0) # h0*r1
292 mflo ($tmp2,$r1,$h0)
293 mfhi ($d2,$r1,$h0)
[all …]
H A Dpoly1305-ppcfp.pl552 my ($h0,$h1,$h2,$h3,$h4, $d0,$d1,$d2,$d3
570 lwz $h0,`8*0+(4^$LITTLE_ENDIAN)`($ctx)
592 addc $h0,$h0,$d3
598 addic $d0,$h0,5 # compare to modulus
608 andc $h0,$h0,$mask
612 or $h0,$h0,$d0
625 addc $h0,$h0,$d0 # accumulate nonce
632 add $h0,$h0,$d3
637 srdi $d0,$h0,32
646 insrdi $h0,$h1,32,0
[all …]
H A Dpoly1305-x86_64.pl105 my ($h0,$h1,$h2)=("%r14","%rbx","%rbp");
111 mulq $h0 # h0*r1
116 mulq $h0 # h0*r0
117 mov %rax,$h0 # future $h0
128 add %rax,$h0
146 add %rax,$h0
255 mov 0($ctx),$h0 # load hash value
267 add 0($inp),$h0 # accumulate input
278 mov $h0,0($ctx) # store hash value
363 mov $r0,$h0
[all …]
H A Dpoly1305-ia64.S107 h0=r17; h1=r18; h2=r19;
128 { .mmi; ld8 h0=[r8],16
188 { .mmi; add h0=h0,i0
191 { .mmi; setf.sig HF0=h0
192 cmp.ltu p6,p0=h0,i0
231 { .mmi; add h0=r22,r24
237 { .mmi; cmp.ltu p6,p0=h0,r24
257 { .mmi; add h0=h0,r22;;
258 cmp.ltu p6,p0=h0,r22
271 { .mmi; st8 [r8]=h0,16
/freebsd/crypto/openssl/crypto/poly1305/
H A Dpoly1305.c153 u64 h0, h1, h2, c; in poly1305_blocks() local
161 h0 = st->h[0]; in poly1305_blocks()
167 h0 = (u64)(d0 = (u128)h0 + U8TOU64(inp + 0)); in poly1305_blocks()
176 d0 = ((u128)h0 * r0) + in poly1305_blocks()
178 d1 = ((u128)h0 * r1) + in poly1305_blocks()
185 h0 = (u64)d0; in poly1305_blocks()
191 h0 += c; in poly1305_blocks()
192 h1 += (c = CONSTANT_TIME_CARRY(h0,c)); in poly1305_blocks()
208 st->h[0] = h0; in poly1305_blocks()
217 u64 h0, h1, h2; in poly1305_emit() local
[all …]
H A Dpoly1305_base2_44.c87 u64 h0, h1, h2, c; in poly1305_blocks() local
98 h0 = st->h[0]; in poly1305_blocks()
109 h0 += m0 & 0x0fffffffffff; in poly1305_blocks()
114 d0 = ((u128)h0 * r0) + ((u128)h1 * s2) + ((u128)h2 * s1); in poly1305_blocks()
115 d1 = ((u128)h0 * r1) + ((u128)h1 * r0) + ((u128)h2 * s2); in poly1305_blocks()
116 d2 = ((u128)h0 * r2) + ((u128)h1 * r1) + ((u128)h2 * r0); in poly1305_blocks()
119 h0 = (u64)d0 & 0x0fffffffffff; in poly1305_blocks()
124 h0 += c + (c << 2); in poly1305_blocks()
130 st->h[0] = h0; in poly1305_blocks()
138 u64 h0, h1, h2; in poly1305_emit() local
[all …]
/freebsd/crypto/openssh/
H A Dpoly1305.c35 uint32_t h0,h1,h2,h3,h4; in poly1305_auth() local
65 h0 = 0; in poly1305_auth()
82 h0 += t0 & 0x3ffffff; in poly1305_auth()
90 …t[0] = mul32x32_64(h0,r0) + mul32x32_64(h1,s4) + mul32x32_64(h2,s3) + mul32x32_64(h3,s2) + mul32x… in poly1305_auth()
91 …t[1] = mul32x32_64(h0,r1) + mul32x32_64(h1,r0) + mul32x32_64(h2,s4) + mul32x32_64(h3,s3) + mul32x… in poly1305_auth()
92 …t[2] = mul32x32_64(h0,r2) + mul32x32_64(h1,r1) + mul32x32_64(h2,r0) + mul32x32_64(h3,s4) + mul32x… in poly1305_auth()
93 …t[3] = mul32x32_64(h0,r3) + mul32x32_64(h1,r2) + mul32x32_64(h2,r1) + mul32x32_64(h3,r0) + mul32x… in poly1305_auth()
94 …t[4] = mul32x32_64(h0,r4) + mul32x32_64(h1,r3) + mul32x32_64(h2,r2) + mul32x32_64(h3,r1) + mul32x… in poly1305_auth()
96 h0 = (uint32_t)t[0] & 0x3ffffff; c = (t[0] >> 26); in poly1305_auth()
101 h0 += b * 5; in poly1305_auth()
[all …]
/freebsd/sys/contrib/libsodium/src/libsodium/crypto_core/ed25519/ref10/fe_25_5/
H A Dfe.h8 int64_t h0 = load_4(s); in fe25519_frombytes() local
31 h0 += carry9 * 19; in fe25519_frombytes()
46 carry0 = (h0 + (int64_t)(1L << 25)) >> 26; in fe25519_frombytes()
48 h0 -= carry0 * ((uint64_t) 1L << 26); in fe25519_frombytes()
62 h[0] = (int32_t) h0; in fe25519_frombytes()
102 int32_t h0 = f[0]; in fe25519_reduce() local
117 q = (h0 + q) >> 26; in fe25519_reduce()
129 h0 += 19 * q; in fe25519_reduce()
132 carry0 = h0 >> 26; in fe25519_reduce()
134 h0 -= carry0 * ((uint32_t) 1L << 26); in fe25519_reduce()
[all …]
/freebsd/sys/contrib/libsodium/src/libsodium/include/sodium/private/
H A Ded25519_ref10_fe_25_5.h43 int32_t h0 = f[0] + g[0]; in fe25519_add() local
54 h[0] = h0; in fe25519_add()
81 int32_t h0 = f[0] - g[0]; in fe25519_sub() local
92 h[0] = h0; in fe25519_sub()
117 int32_t h0 = -f[0]; in fe25519_neg() local
128 h[0] = h0; in fe25519_neg()
508 int64_t h0 = f0g0 + f1g9_38 + f2g8_19 + f3g7_38 + f4g6_19 + f5g5_38 + in fe25519_mul() local
547 carry0 = (h0 + (int64_t)(1L << 25)) >> 26; in fe25519_mul()
549 h0 -= carry0 * ((uint64_t) 1L << 26); in fe25519_mul()
603 h0 += carry9 * 19; in fe25519_mul()
[all …]
H A Ded25519_ref10_fe_51.h35 uint64_t h0 = f[0] + g[0]; in fe25519_add() local
41 h[0] = h0; in fe25519_add()
56 uint64_t h0, h1, h2, h3, h4; in fe25519_sub() local
58 h0 = g[0]; in fe25519_sub()
64 h1 += h0 >> 51; in fe25519_sub()
65 h0 &= mask; in fe25519_sub()
72 h0 += 19ULL * (h4 >> 51); in fe25519_sub()
75 h0 = (f[0] + 0xfffffffffffdaULL) - h0; in fe25519_sub()
81 h[0] = h0; in fe25519_sub()
498 uint64_t h0, h1, h2, h3, h4; in fe25519_scalar_product() local
[all …]
/freebsd/sys/contrib/libsodium/src/libsodium/crypto_scalarmult/curve25519/sandy2x/
H A Dfe_frombytes_sandy2x.c33 uint64_t h0 = load_4(s); in fe_frombytes() local
54 carry9 = h9 >> 25; h0 += carry9 * 19; h9 &= 0x1FFFFFF; in fe_frombytes()
60 carry0 = h0 >> 26; h1 += carry0; h0 &= 0x3FFFFFF; in fe_frombytes()
66 h[0] = h0; in fe_frombytes()
/freebsd/crypto/openssl/crypto/sha/asm/
H A Dsha1-ia64.pl43 ($h0,$h1,$h2,$h3,$h4) = ("h0","h1","h2","h3","h4");
51 ($h0,$h1,$h2,$h3,$h4) = ("loc5","loc6","loc7","loc8","loc9");
259 { .mlx; ld4 $h0=[ctx],8
275 { .mmi; mov $A=$h0
297 { .mmb; add $h0=$h0,$A
303 { .mmi; st4 [ctx]=$h0,8
/freebsd/contrib/bearssl/src/hash/
H A Dghash_ctmul64.c83 uint64_t h0, h1, h2, h0r, h1r, h2r; in br_ghash_ctmul64() local
91 h0 = br_dec64be(hb + 8); in br_ghash_ctmul64()
92 h0r = rev64(h0); in br_ghash_ctmul64()
94 h2 = h0 ^ h1; in br_ghash_ctmul64()
121 z0 = bmul64(y0, h0); in br_ghash_ctmul64()
/freebsd/crypto/openssl/crypto/ec/
H A Dcurve25519.c312 uint64_t h0 = load_7(s); /* 56 bits */ in fe51_frombytes() local
318 h1 |= h0 >> 51; h0 &= MASK51; in fe51_frombytes()
323 h[0] = h0; in fe51_frombytes()
332 uint64_t h0 = h[0]; in fe51_tobytes() local
340 q = (h0 + 19) >> 51; in fe51_tobytes()
347 h0 += 19 * q; in fe51_tobytes()
348 h1 += h0 >> 51; h0 &= MASK51; in fe51_tobytes()
355 s[0] = (uint8_t)(h0 >> 0); in fe51_tobytes()
356 s[1] = (uint8_t)(h0 >> 8); in fe51_tobytes()
357 s[2] = (uint8_t)(h0 >> 16); in fe51_tobytes()
[all …]
/freebsd/sys/contrib/libsodium/src/libsodium/crypto_onetimeauth/poly1305/sse2/
H A Dpoly1305_sse2.c686 uint64_t h0, h1, h2, g0, g1, g2, c, nc; in poly1305_blocks() local
716 h0 = (((uint64_t) t0) | ((uint64_t) t1 << 26)) & 0xfffffffffffull; in poly1305_blocks()
724 h0 += c * 5; in poly1305_blocks()
725 c = (h0 >> 44); in poly1305_blocks()
726 h0 &= 0xfffffffffff; in poly1305_blocks()
733 h0 += c * 5; in poly1305_blocks()
734 c = (h0 >> 44); in poly1305_blocks()
735 h0 &= 0xfffffffffff; in poly1305_blocks()
738 g0 = h0 + 5; in poly1305_blocks()
748 h0 = (h0 & nc) | (g0 & c); in poly1305_blocks()
[all …]
/freebsd/contrib/bearssl/src/ec/
H A Dec_c25519_m64.c382 uint64_t h0, h1, h2, h3; in f255_mul()
388 t0 = _umul128(a[0], b[0], &h0); in f255_mul()
390 k = _addcarry_u64(0, t1, h0, &t1); in f255_mul()
397 k = _addcarry_u64(0, _umul128(a[1], b[0], &h0), t1, &t1); in f255_mul()
402 k = _addcarry_u64(0, t2, h0, &t2); in f255_mul()
407 k = _addcarry_u64(0, _umul128(a[2], b[0], &h0), t2, &t2); in f255_mul()
412 k = _addcarry_u64(0, t3, h0, &t3); in f255_mul()
417 k = _addcarry_u64(0, _umul128(a[3], b[0], &h0), t3, &t3); in f255_mul()
422 k = _addcarry_u64(0, t4, h0, &t4); in f255_mul()
449 t4 = _umul128(t4, 19, &h0); in f255_mul()
[all …]
/freebsd/sys/fs/ext2fs/
H A Dext2_hash.c182 uint32_t h0, h1 = 0x12A3FE2D, h2 = 0x37ABE8F9; in ext2_legacy_hash() local
194 h0 = h2 + (h1 ^ (val * multi)); in ext2_legacy_hash()
195 if (h0 & 0x80000000) in ext2_legacy_hash()
196 h0 -= 0x7FFFFFFF; in ext2_legacy_hash()
198 h1 = h0; in ext2_legacy_hash()
/freebsd/sys/contrib/libsodium/src/libsodium/crypto_core/ed25519/ref10/fe_51/
H A Dfe.h9 uint64_t h0, h1, h2, h3, h4; in fe25519_frombytes() local
11 h0 = (LOAD64_LE(s ) ) & mask; in fe25519_frombytes()
17 h[0] = h0; in fe25519_frombytes()

123