Lines Matching refs:h3
110 u32 h0, h1, h2, h3, h4; in poly1305_blocks() local
134 h3 = dctx->h[3]; in poly1305_blocks()
143 h3 += (le32_to_cpuvp(src + 9) >> 6) & 0x3ffffff; in poly1305_blocks()
148 mlt(h3, s2) + mlt(h4, s1); in poly1305_blocks()
150 mlt(h3, s3) + mlt(h4, s2); in poly1305_blocks()
152 mlt(h3, s4) + mlt(h4, s3); in poly1305_blocks()
154 mlt(h3, r0) + mlt(h4, s4); in poly1305_blocks()
156 mlt(h3, r1) + mlt(h4, r0); in poly1305_blocks()
162 d4 += sr(d3, 26); h3 = and(d3, 0x3ffffff); in poly1305_blocks()
173 dctx->h[3] = h3; in poly1305_blocks()
218 u32 h0, h1, h2, h3, h4; in crypto_poly1305_final() local
237 h3 = dctx->h[3]; in crypto_poly1305_final()
241 h3 += (h2 >> 26); h2 = h2 & 0x3ffffff; in crypto_poly1305_final()
242 h4 += (h3 >> 26); h3 = h3 & 0x3ffffff; in crypto_poly1305_final()
250 g3 = h3 + (g2 >> 26); g2 &= 0x3ffffff; in crypto_poly1305_final()
264 h3 = (h3 & mask) | g3; in crypto_poly1305_final()
270 h2 = (h2 >> 12) | (h3 << 14); in crypto_poly1305_final()
271 h3 = (h3 >> 18) | (h4 << 8); in crypto_poly1305_final()
277 f = (f >> 32) + h3 + dctx->s[3]; mac[3] = cpu_to_le32(f); in crypto_poly1305_final()