Lines Matching refs:h0
772 uint64_t h0, h1, h2; in CRYPTO_poly1305_finish() local
785 h0 = st->HH[0]; in CRYPTO_poly1305_finish()
803 h0 += t0 & 0xfffffffffff; in CRYPTO_poly1305_finish()
809 d[0] = add128(add128(mul64x64_128(h0, r0), mul64x64_128(h1, s2)), in CRYPTO_poly1305_finish()
811 d[1] = add128(add128(mul64x64_128(h0, r1), mul64x64_128(h1, r0)), in CRYPTO_poly1305_finish()
813 d[2] = add128(add128(mul64x64_128(h0, r2), mul64x64_128(h1, r1)), in CRYPTO_poly1305_finish()
815 h0 = lo128(d[0]) & 0xfffffffffff; in CRYPTO_poly1305_finish()
823 h0 += c * 5; in CRYPTO_poly1305_finish()
843 h0 += t0 & 0xfffffffffff; in CRYPTO_poly1305_finish()
851 c = (h0 >> 44); in CRYPTO_poly1305_finish()
852 h0 &= 0xfffffffffff; in CRYPTO_poly1305_finish()
859 h0 += c * 5; in CRYPTO_poly1305_finish()
861 g0 = h0 + 5; in CRYPTO_poly1305_finish()
871 h0 = (h0 & nc) | (g0 & c); in CRYPTO_poly1305_finish()
878 h0 += (t0 & 0xfffffffffff); in CRYPTO_poly1305_finish()
879 c = (h0 >> 44); in CRYPTO_poly1305_finish()
880 h0 &= 0xfffffffffff; in CRYPTO_poly1305_finish()
888 U64TO8_LE(mac + 0, ((h0) | (h1 << 44))); in CRYPTO_poly1305_finish()