Lines Matching refs:h1
110 u32 h0, h1, h2, h3, h4; in poly1305_blocks() local
132 h1 = dctx->h[1]; in poly1305_blocks()
141 h1 += (le32_to_cpuvp(src + 3) >> 2) & 0x3ffffff; in poly1305_blocks()
147 d0 = mlt(h0, r0) + mlt(h1, s4) + mlt(h2, s3) + in poly1305_blocks()
149 d1 = mlt(h0, r1) + mlt(h1, r0) + mlt(h2, s4) + in poly1305_blocks()
151 d2 = mlt(h0, r2) + mlt(h1, r1) + mlt(h2, r0) + in poly1305_blocks()
153 d3 = mlt(h0, r3) + mlt(h1, r2) + mlt(h2, r1) + in poly1305_blocks()
155 d4 = mlt(h0, r4) + mlt(h1, r3) + mlt(h2, r2) + in poly1305_blocks()
160 d2 += sr(d1, 26); h1 = and(d1, 0x3ffffff); in poly1305_blocks()
164 h1 += h0 >> 26; h0 = h0 & 0x3ffffff; in poly1305_blocks()
171 dctx->h[1] = h1; in poly1305_blocks()
218 u32 h0, h1, h2, h3, h4; in crypto_poly1305_final() local
235 h1 = dctx->h[1]; in crypto_poly1305_final()
240 h2 += (h1 >> 26); h1 = h1 & 0x3ffffff; in crypto_poly1305_final()
244 h1 += (h0 >> 26); h0 = h0 & 0x3ffffff; in crypto_poly1305_final()
248 g1 = h1 + (g0 >> 26); g0 &= 0x3ffffff; in crypto_poly1305_final()
262 h1 = (h1 & mask) | g1; in crypto_poly1305_final()
268 h0 = (h0 >> 0) | (h1 << 26); in crypto_poly1305_final()
269 h1 = (h1 >> 6) | (h2 << 20); in crypto_poly1305_final()
275 f = (f >> 32) + h1 + dctx->s[1]; mac[1] = cpu_to_le32(f); in crypto_poly1305_final()