63 #define TWO64           (TWO32*TWO(32))  macro
64 #define TWO96           (TWO64*TWO(32))
119     st->h[2].d = TWO(52)*TWO64;  in poly1305_init()
167         st->r[4] = r2.d - TWO(52)*TWO64;  in poly1305_init()
185         st->r[5] = (st->r[4] + TWO(52)*TWO(16)*TWO64) -  in poly1305_init()
186                                TWO(52)*TWO(16)*TWO64;  in poly1305_init()
201         st->s[5] = (st->s[4] + TWO(52)*TWO(16)*TWO64/TWO96) -  in poly1305_init()
202                                TWO(52)*TWO(16)*TWO64/TWO96;  in poly1305_init()
286     h2lo = st->h[2].d - TWO(52)*TWO64;  in poly1305_blocks()
302     x2 = in2.d - TWO(52)*TWO64;  in poly1305_blocks()
321         x2 = in2.d - TWO(52)*TWO64;  in poly1305_blocks()
337         c1lo = (h1lo + TWO(52)*TWO64)  - TWO(52)*TWO64;  in poly1305_blocks()
342         c1hi = (h1hi + TWO(52)*TWO64)  - TWO(52)*TWO64;  in poly1305_blocks()
384     c1lo = (h1lo + TWO(52)*TWO64)  - TWO(52)*TWO64;  in poly1305_blocks()
389     c1hi = (h1hi + TWO(52)*TWO64)  - TWO(52)*TWO64;  in poly1305_blocks()
410     st->h[2].d = x2 + TWO(52)*TWO64;  in poly1305_blocks()