Lines Matching refs:h0
110 u32 h0, h1, h2, h3, h4; in poly1305_blocks() local
131 h0 = dctx->h[0]; in poly1305_blocks()
140 h0 += (le32_to_cpuvp(src + 0) >> 0) & 0x3ffffff; in poly1305_blocks()
147 d0 = mlt(h0, r0) + mlt(h1, s4) + mlt(h2, s3) + in poly1305_blocks()
149 d1 = mlt(h0, r1) + mlt(h1, r0) + mlt(h2, s4) + in poly1305_blocks()
151 d2 = mlt(h0, r2) + mlt(h1, r1) + mlt(h2, r0) + in poly1305_blocks()
153 d3 = mlt(h0, r3) + mlt(h1, r2) + mlt(h2, r1) + in poly1305_blocks()
155 d4 = mlt(h0, r4) + mlt(h1, r3) + mlt(h2, r2) + in poly1305_blocks()
159 d1 += sr(d0, 26); h0 = and(d0, 0x3ffffff); in poly1305_blocks()
163 h0 += sr(d4, 26) * 5; h4 = and(d4, 0x3ffffff); in poly1305_blocks()
164 h1 += h0 >> 26; h0 = h0 & 0x3ffffff; in poly1305_blocks()
170 dctx->h[0] = h0; in poly1305_blocks()
218 u32 h0, h1, h2, h3, h4; in crypto_poly1305_final() local
234 h0 = dctx->h[0]; in crypto_poly1305_final()
243 h0 += (h4 >> 26) * 5; h4 = h4 & 0x3ffffff; in crypto_poly1305_final()
244 h1 += (h0 >> 26); h0 = h0 & 0x3ffffff; in crypto_poly1305_final()
247 g0 = h0 + 5; in crypto_poly1305_final()
261 h0 = (h0 & mask) | g0; in crypto_poly1305_final()
268 h0 = (h0 >> 0) | (h1 << 26); in crypto_poly1305_final()
274 f = (f >> 32) + h0 + dctx->s[0]; mac[0] = cpu_to_le32(f); in crypto_poly1305_final()