Lines Matching full:52
67 #define EXP(p) ((1023ULL+(p))<<52)
117 st->h[0].d = TWO(52)*TWO0; in poly1305_init()
118 st->h[1].d = TWO(52)*TWO32; in poly1305_init()
119 st->h[2].d = TWO(52)*TWO64; in poly1305_init()
120 st->h[3].d = TWO(52)*TWO96; in poly1305_init()
122 st->h[0].u = EXP(52+0); in poly1305_init()
123 st->h[1].u = EXP(52+32); in poly1305_init()
124 st->h[2].u = EXP(52+64); in poly1305_init()
125 st->h[3].u = EXP(52+96); in poly1305_init()
160 r0.u = EXP(52+0) | (U8TOU32(&key[0]) & 0x0fffffff); in poly1305_init()
161 r1.u = EXP(52+32) | (U8TOU32(&key[4]) & 0x0ffffffc); in poly1305_init()
162 r2.u = EXP(52+64) | (U8TOU32(&key[8]) & 0x0ffffffc); in poly1305_init()
163 r3.u = EXP(52+96) | (U8TOU32(&key[12]) & 0x0ffffffc); in poly1305_init()
165 st->r[0] = r0.d - TWO(52)*TWO0; in poly1305_init()
166 st->r[2] = r1.d - TWO(52)*TWO32; in poly1305_init()
167 st->r[4] = r2.d - TWO(52)*TWO64; in poly1305_init()
168 st->r[6] = r3.d - TWO(52)*TWO96; in poly1305_init()
177 st->r[1] = (st->r[0] + TWO(52)*TWO(16)*TWO0) - in poly1305_init()
178 TWO(52)*TWO(16)*TWO0; in poly1305_init()
181 st->r[3] = (st->r[2] + TWO(52)*TWO(16)*TWO32) - in poly1305_init()
182 TWO(52)*TWO(16)*TWO32; in poly1305_init()
185 st->r[5] = (st->r[4] + TWO(52)*TWO(16)*TWO64) - in poly1305_init()
186 TWO(52)*TWO(16)*TWO64; in poly1305_init()
189 st->r[7] = (st->r[6] + TWO(52)*TWO(16)*TWO96) - in poly1305_init()
190 TWO(52)*TWO(16)*TWO96; in poly1305_init()
193 st->s[1] = (st->s[0] + TWO(52)*TWO(16)*TWO0/TWO96) - in poly1305_init()
194 TWO(52)*TWO(16)*TWO0/TWO96; in poly1305_init()
197 st->s[3] = (st->s[2] + TWO(52)*TWO(16)*TWO32/TWO96) - in poly1305_init()
198 TWO(52)*TWO(16)*TWO32/TWO96; in poly1305_init()
201 st->s[5] = (st->s[4] + TWO(52)*TWO(16)*TWO64/TWO96) - in poly1305_init()
202 TWO(52)*TWO(16)*TWO64/TWO96; in poly1305_init()
284 h0lo = st->h[0].d - TWO(52)*TWO0; in poly1305_blocks()
285 h1lo = st->h[1].d - TWO(52)*TWO32; in poly1305_blocks()
286 h2lo = st->h[2].d - TWO(52)*TWO64; in poly1305_blocks()
287 h3lo = st->h[3].d - TWO(52)*TWO96; in poly1305_blocks()
295 in0.u = EXP(52+0) | U8TOU32(&inp[0]); in poly1305_blocks()
296 in1.u = EXP(52+32) | U8TOU32(&inp[4]); in poly1305_blocks()
297 in2.u = EXP(52+64) | U8TOU32(&inp[8]); in poly1305_blocks()
298 in3.u = EXP(52+96) | U8TOU32(&inp[12]) | pad; in poly1305_blocks()
300 x0 = in0.d - TWO(52)*TWO0; in poly1305_blocks()
301 x1 = in1.d - TWO(52)*TWO32; in poly1305_blocks()
302 x2 = in2.d - TWO(52)*TWO64; in poly1305_blocks()
303 x3 = in3.d - TWO(52)*TWO96; in poly1305_blocks()
314 in0.u = EXP(52+0) | U8TOU32(&inp[0]); in poly1305_blocks()
315 in1.u = EXP(52+32) | U8TOU32(&inp[4]); in poly1305_blocks()
316 in2.u = EXP(52+64) | U8TOU32(&inp[8]); in poly1305_blocks()
317 in3.u = EXP(52+96) | U8TOU32(&inp[12]) | pad; in poly1305_blocks()
319 x0 = in0.d - TWO(52)*TWO0; in poly1305_blocks()
320 x1 = in1.d - TWO(52)*TWO32; in poly1305_blocks()
321 x2 = in2.d - TWO(52)*TWO64; in poly1305_blocks()
322 x3 = in3.d - TWO(52)*TWO96; in poly1305_blocks()
336 c0lo = (h0lo + TWO(52)*TWO32) - TWO(52)*TWO32; in poly1305_blocks()
337 c1lo = (h1lo + TWO(52)*TWO64) - TWO(52)*TWO64; in poly1305_blocks()
338 c2lo = (h2lo + TWO(52)*TWO96) - TWO(52)*TWO96; in poly1305_blocks()
339 c3lo = (h3lo + TWO(52)*TWO130) - TWO(52)*TWO130; in poly1305_blocks()
341 c0hi = (h0hi + TWO(52)*TWO32) - TWO(52)*TWO32; in poly1305_blocks()
342 c1hi = (h1hi + TWO(52)*TWO64) - TWO(52)*TWO64; in poly1305_blocks()
343 c2hi = (h2hi + TWO(52)*TWO96) - TWO(52)*TWO96; in poly1305_blocks()
344 c3hi = (h3hi + TWO(52)*TWO130) - TWO(52)*TWO130; in poly1305_blocks()
383 c0lo = (h0lo + TWO(52)*TWO32) - TWO(52)*TWO32; in poly1305_blocks()
384 c1lo = (h1lo + TWO(52)*TWO64) - TWO(52)*TWO64; in poly1305_blocks()
385 c2lo = (h2lo + TWO(52)*TWO96) - TWO(52)*TWO96; in poly1305_blocks()
386 c3lo = (h3lo + TWO(52)*TWO130) - TWO(52)*TWO130; in poly1305_blocks()
388 c0hi = (h0hi + TWO(52)*TWO32) - TWO(52)*TWO32; in poly1305_blocks()
389 c1hi = (h1hi + TWO(52)*TWO64) - TWO(52)*TWO64; in poly1305_blocks()
390 c2hi = (h2hi + TWO(52)*TWO96) - TWO(52)*TWO96; in poly1305_blocks()
391 c3hi = (h3hi + TWO(52)*TWO130) - TWO(52)*TWO130; in poly1305_blocks()
409 st->h[1].d = x1 + TWO(52)*TWO32; in poly1305_blocks()
410 st->h[2].d = x2 + TWO(52)*TWO64; in poly1305_blocks()
411 st->h[3].d = x3 + TWO(52)*TWO96; in poly1305_blocks()
412 st->h[0].d = x0 + TWO(52)*TWO0; in poly1305_blocks()