1 /* $OpenBSD: poly1305.c,v 1.4 2023/07/17 05:26:38 djm Exp $ */
33 poly1305_auth(unsigned char out[POLY1305_TAGLEN], const unsigned char *m, size_t inlen, const unsig…  in poly1305_auth()  argument
53 	r0 = t0 & 0x3ffffff; t0 >>= 26; t0 |= t1 << 6;  in poly1305_auth()
74 	m += 16;  in poly1305_auth()
77 	t0 = U8TO32_LE(m-16);  in poly1305_auth()
78 	t1 = U8TO32_LE(m-12);  in poly1305_auth()
79 	t2 = U8TO32_LE(m-8);  in poly1305_auth()
80 	t3 = U8TO32_LE(m-4);  in poly1305_auth()
83 	h1 += ((((uint64_t)t1 << 32) | t0) >> 26) & 0x3ffffff;  in poly1305_auth()
96 	                h0 = (uint32_t)t[0] & 0x3ffffff; c =           (t[0] >> 26);  in poly1305_auth()
97 	t[1] += c;      h1 = (uint32_t)t[1] & 0x3ffffff; b = (uint32_t)(t[1] >> 26);  in poly1305_auth()
98 	t[2] += b;      h2 = (uint32_t)t[2] & 0x3ffffff; b = (uint32_t)(t[2] >> 26);  in poly1305_auth()
99 	t[3] += b;      h3 = (uint32_t)t[3] & 0x3ffffff; b = (uint32_t)(t[3] >> 26);  in poly1305_auth()
100 	t[4] += b;      h4 = (uint32_t)t[4] & 0x3ffffff; b = (uint32_t)(t[4] >> 26);  in poly1305_auth()
109 	for (j = 0; j < inlen; j++) mp[j] = m[j];  in poly1305_auth()
120 	h1 += ((((uint64_t)t1 << 32) | t0) >> 26) & 0x3ffffff;  in poly1305_auth()
128 	             b = h0 >> 26; h0 = h0 & 0x3ffffff;  in poly1305_auth()
129 	h1 +=     b; b = h1 >> 26; h1 = h1 & 0x3ffffff;  in poly1305_auth()
130 	h2 +=     b; b = h2 >> 26; h2 = h2 & 0x3ffffff;  in poly1305_auth()
131 	h3 +=     b; b = h3 >> 26; h3 = h3 & 0x3ffffff;  in poly1305_auth()
132 	h4 +=     b; b = h4 >> 26; h4 = h4 & 0x3ffffff;  in poly1305_auth()
133 	h0 += b * 5; b = h0 >> 26; h0 = h0 & 0x3ffffff;  in poly1305_auth()
136 	g0 = h0 + 5; b = g0 >> 26; g0 &= 0x3ffffff;  in poly1305_auth()
137 	g1 = h1 + b; b = g1 >> 26; g1 &= 0x3ffffff;  in poly1305_auth()
138 	g2 = h2 + b; b = g2 >> 26; g2 &= 0x3ffffff;  in poly1305_auth()
139 	g3 = h3 + b; b = g3 >> 26; g3 &= 0x3ffffff;  in poly1305_auth()
140 	g4 = h4 + b - (1 << 26);  in poly1305_auth()
150 	f0 = ((h0      ) | (h1 << 26)) + (uint64_t)U8TO32_LE(&key[16]);  in poly1305_auth()