65   uint32_t h0, h1, h2, h3, h4;  member
98   state->h2 += ((((uint64_t)t2 << 32) | t1) >> 20) & 0x3ffffff;  in poly1305_update()
104          mul32x32_64(state->h2, state->s3) + mul32x32_64(state->h3, state->s2) +  in poly1305_update()
107          mul32x32_64(state->h2, state->s4) + mul32x32_64(state->h3, state->s3) +  in poly1305_update()
110          mul32x32_64(state->h2, state->r0) + mul32x32_64(state->h3, state->s4) +  in poly1305_update()
113          mul32x32_64(state->h2, state->r1) + mul32x32_64(state->h3, state->r0) +  in poly1305_update()
116          mul32x32_64(state->h2, state->r2) + mul32x32_64(state->h3, state->r1) +  in poly1305_update()
125   state->h2 = (uint32_t)t[2] & 0x3ffffff;  in poly1305_update()
161   state->h2 += ((((uint64_t)t2 << 32) | t1) >> 20) & 0x3ffffff;  in poly1305_update()
206   state->h2 = 0;  in CRYPTO_poly1305_init()
281   state->h2 += b;  in CRYPTO_poly1305_finish()
282   b = state->h2 >> 26;  in CRYPTO_poly1305_finish()
283   state->h2 = state->h2 & 0x3ffffff;  in CRYPTO_poly1305_finish()
298   g2 = state->h2 + b;  in CRYPTO_poly1305_finish()
310   state->h2 = (state->h2 & nb) | (g2 & b);  in CRYPTO_poly1305_finish()
315   f1 = ((state->h1 >> 6) | (state->h2 << 20)) +  in CRYPTO_poly1305_finish()
317   f2 = ((state->h2 >> 12) | (state->h3 << 14)) +  in CRYPTO_poly1305_finish()