62 static u64 curve_p[NUM_ECC_DIGITS] = CURVE_P_32;  variable
432 			carry += vli_add(result, result, curve_p);  in vli_mmod_fast()
435 		while (carry || vli_cmp(curve_p, result) != 1)  in vli_mmod_fast()
436 			carry -= vli_sub(result, result, curve_p);  in vli_mmod_fast()
564 	vli_mod_add(x1, x1, z1, curve_p); /* t1 = x1 + z1^2 */  in ecc_point_double_jacobian()
565 	vli_mod_add(z1, z1, z1, curve_p); /* t3 = 2*z1^2 */  in ecc_point_double_jacobian()
566 	vli_mod_sub(z1, x1, z1, curve_p); /* t3 = x1 - z1^2 */  in ecc_point_double_jacobian()
569 	vli_mod_add(z1, x1, x1, curve_p); /* t3 = 2*(x1^2 - z1^4) */  in ecc_point_double_jacobian()
570 	vli_mod_add(x1, x1, z1, curve_p); /* t1 = 3*(x1^2 - z1^4) */  in ecc_point_double_jacobian()
572 		u64 carry = vli_add(x1, x1, curve_p);  in ecc_point_double_jacobian()
581 	vli_mod_sub(z1, z1, t5, curve_p); /* t3 = B^2 - A */  in ecc_point_double_jacobian()
582 	vli_mod_sub(z1, z1, t5, curve_p); /* t3 = B^2 - 2A = x3 */  in ecc_point_double_jacobian()
583 	vli_mod_sub(t5, t5, z1, curve_p); /* t5 = A - x3 */  in ecc_point_double_jacobian()
585 	vli_mod_sub(t4, x1, t4, curve_p); /* t4 = B * (A - x3) - y1^4 = y3 */  in ecc_point_double_jacobian()
634 	vli_mod_sub(t5, x2, x1, curve_p); /* t5 = x2 - x1 */  in xycz_add()
638 	vli_mod_sub(y2, y2, y1, curve_p); /* t4 = y2 - y1 */  in xycz_add()
641 	vli_mod_sub(t5, t5, x1, curve_p); /* t5 = D - B */  in xycz_add()
642 	vli_mod_sub(t5, t5, x2, curve_p); /* t5 = D - B - C = x3 */  in xycz_add()
643 	vli_mod_sub(x2, x2, x1, curve_p); /* t3 = C - B */  in xycz_add()
645 	vli_mod_sub(x2, x1, t5, curve_p); /* t3 = B - x3 */  in xycz_add()
647 	vli_mod_sub(y2, y2, y1, curve_p); /* t4 = y3 */  in xycz_add()
663 	vli_mod_sub(t5, x2, x1, curve_p); /* t5 = x2 - x1 */  in xycz_add_c()
667 	vli_mod_add(t5, y2, y1, curve_p); /* t4 = y2 + y1 */  in xycz_add_c()
668 	vli_mod_sub(y2, y2, y1, curve_p); /* t4 = y2 - y1 */  in xycz_add_c()
670 	vli_mod_sub(t6, x2, x1, curve_p); /* t6 = C - B */  in xycz_add_c()
672 	vli_mod_add(t6, x1, x2, curve_p); /* t6 = B + C */  in xycz_add_c()
674 	vli_mod_sub(x2, x2, t6, curve_p); /* t3 = x3 */  in xycz_add_c()
676 	vli_mod_sub(t7, x1, x2, curve_p); /* t7 = B - x3 */  in xycz_add_c()
678 	vli_mod_sub(y2, y2, y1, curve_p); /* t4 = y3 */  in xycz_add_c()
681 	vli_mod_sub(t7, t7, t6, curve_p); /* t7 = x3' */  in xycz_add_c()
682 	vli_mod_sub(t6, t7, x1, curve_p); /* t6 = x3' - B */  in xycz_add_c()
684 	vli_mod_sub(y1, t6, y1, curve_p); /* t2 = y3' */  in xycz_add_c()
714 	vli_mod_sub(z, rx[1], rx[0], curve_p); /* X1 - X0 */  in ecc_point_mult()
717 	vli_mod_inv(z, z, curve_p);          /* 1 / (xP * Yb * (X1 - X0)) */  in ecc_point_mult()