Lines Matching refs:h2
110 u32 h0, h1, h2, h3, h4; in poly1305_blocks() local
133 h2 = dctx->h[2]; in poly1305_blocks()
142 h2 += (le32_to_cpuvp(src + 6) >> 4) & 0x3ffffff; in poly1305_blocks()
147 d0 = mlt(h0, r0) + mlt(h1, s4) + mlt(h2, s3) + in poly1305_blocks()
149 d1 = mlt(h0, r1) + mlt(h1, r0) + mlt(h2, s4) + in poly1305_blocks()
151 d2 = mlt(h0, r2) + mlt(h1, r1) + mlt(h2, r0) + in poly1305_blocks()
153 d3 = mlt(h0, r3) + mlt(h1, r2) + mlt(h2, r1) + in poly1305_blocks()
155 d4 = mlt(h0, r4) + mlt(h1, r3) + mlt(h2, r2) + in poly1305_blocks()
161 d3 += sr(d2, 26); h2 = and(d2, 0x3ffffff); in poly1305_blocks()
172 dctx->h[2] = h2; in poly1305_blocks()
218 u32 h0, h1, h2, h3, h4; in crypto_poly1305_final() local
236 h2 = dctx->h[2]; in crypto_poly1305_final()
240 h2 += (h1 >> 26); h1 = h1 & 0x3ffffff; in crypto_poly1305_final()
241 h3 += (h2 >> 26); h2 = h2 & 0x3ffffff; in crypto_poly1305_final()
249 g2 = h2 + (g1 >> 26); g1 &= 0x3ffffff; in crypto_poly1305_final()
263 h2 = (h2 & mask) | g2; in crypto_poly1305_final()
269 h1 = (h1 >> 6) | (h2 << 20); in crypto_poly1305_final()
270 h2 = (h2 >> 12) | (h3 << 14); in crypto_poly1305_final()
276 f = (f >> 32) + h2 + dctx->s[2]; mac[2] = cpu_to_le32(f); in crypto_poly1305_final()