Lines Matching refs:i
44 long long top,p,q,r,i,j; in crypto_sort_int32() local
52 i = 0; in crypto_sort_int32()
53 while (i + 2 * p <= n) { in crypto_sort_int32()
54 for (j = i;j < i + p;++j) in crypto_sort_int32()
56 i += 2 * p; in crypto_sort_int32()
58 for (j = i;j < n - p;++j) in crypto_sort_int32()
61 i = 0; in crypto_sort_int32()
64 if (j != i) for (;;) { in crypto_sort_int32()
71 if (j == i + p) { in crypto_sort_int32()
72 i += 2 * p; in crypto_sort_int32()
76 while (i + p <= n - q) { in crypto_sort_int32()
77 for (j = i;j < i + p;++j) { in crypto_sort_int32()
83 i += 2 * p; in crypto_sort_int32()
86 j = i; in crypto_sort_int32()
304 long long i; in Decode() local
305 for (i = 0;i < len-1;i += 2) { in Decode()
306 uint32 m = M[i]*(uint32) M[i+1]; in Decode()
308 bottomt[i/2] = 256*256; in Decode()
309 bottomr[i/2] = S[0]+256*S[1]; in Decode()
311 M2[i/2] = (((m+255)>>8)+255)>>8; in Decode()
313 bottomt[i/2] = 256; in Decode()
314 bottomr[i/2] = S[0]; in Decode()
316 M2[i/2] = (m+255)>>8; in Decode()
318 bottomt[i/2] = 1; in Decode()
319 bottomr[i/2] = 0; in Decode()
320 M2[i/2] = m; in Decode()
323 if (i < len) in Decode()
324 M2[i/2] = M[i]; in Decode()
326 for (i = 0;i < len-1;i += 2) { in Decode()
327 uint32 r = bottomr[i/2]; in Decode()
330 r += bottomt[i/2]*R2[i/2]; in Decode()
331 uint32_divmod_uint14(&r1,&r0,r,M[i]); in Decode()
332 r1 = uint32_mod_uint14(r1,M[i+1]); /* only needed for invalid inputs */ in Decode()
336 if (i < len) in Decode()
337 *out++ = R2[i/2]; in Decode()
368 long long i; in Encode() local
369 for (i = 0;i < len-1;i += 2) { in Encode()
370 uint32 m0 = M[i]; in Encode()
371 uint32 r = R[i]+R[i+1]*m0; in Encode()
372 uint32 m = M[i+1]*m0; in Encode()
378 R2[i/2] = r; in Encode()
379 M2[i/2] = m; in Encode()
381 if (i < len) { in Encode()
382 R2[i/2] = R[i]; in Encode()
383 M2[i/2] = M[i]; in Encode()
451 int i = 1; in Fq_recip() local
454 while (i < q-2) { in Fq_recip()
456 i += 1; in Fq_recip()
487 int i; in Weightw_mask() local
489 for (i = 0;i < p;++i) weight += r[i]&1; in Weightw_mask()
496 int i; in R3_fromRq() local
497 for (i = 0;i < p;++i) out[i] = F3_freeze(r[i]); in R3_fromRq()
505 int i,j; in R3_mult() local
507 for (i = 0;i < p;++i) { in R3_mult()
509 for (j = 0;j <= i;++j) result = F3_freeze(result+f[j]*g[i-j]); in R3_mult()
510 fg[i] = result; in R3_mult()
512 for (i = p;i < p+p-1;++i) { in R3_mult()
514 for (j = i-p+1;j < p;++j) result = F3_freeze(result+f[j]*g[i-j]); in R3_mult()
515 fg[i] = result; in R3_mult()
518 for (i = p+p-2;i >= p;--i) { in R3_mult()
519 fg[i-p] = F3_freeze(fg[i-p]+fg[i]); in R3_mult()
520 fg[i-p+1] = F3_freeze(fg[i-p+1]+fg[i]); in R3_mult()
523 for (i = 0;i < p;++i) h[i] = fg[i]; in R3_mult()
530 int i,loop,delta; in R3_recip() local
533 for (i = 0;i < p+1;++i) v[i] = 0; in R3_recip()
534 for (i = 0;i < p+1;++i) r[i] = 0; in R3_recip()
536 for (i = 0;i < p;++i) f[i] = 0; in R3_recip()
538 for (i = 0;i < p;++i) g[p-1-i] = in[i]; in R3_recip()
544 for (i = p;i > 0;--i) v[i] = v[i-1]; in R3_recip()
552 for (i = 0;i < p+1;++i) { in R3_recip()
553 t = swap&(f[i]^g[i]); f[i] ^= t; g[i] ^= t; in R3_recip()
554 t = swap&(v[i]^r[i]); v[i] ^= t; r[i] ^= t; in R3_recip()
557 for (i = 0;i < p+1;++i) g[i] = F3_freeze(g[i]+sign*f[i]); in R3_recip()
558 for (i = 0;i < p+1;++i) r[i] = F3_freeze(r[i]+sign*v[i]); in R3_recip()
560 for (i = 0;i < p;++i) g[i] = g[i+1]; in R3_recip()
565 for (i = 0;i < p;++i) out[i] = sign*v[p-1-i]; in R3_recip()
579 int i,j; in Rq_mult_small() local
581 for (i = 0;i < p;++i) { in Rq_mult_small()
583 for (j = 0;j <= i;++j) result = Fq_freeze(result+f[j]*(int32)g[i-j]); in Rq_mult_small()
584 fg[i] = result; in Rq_mult_small()
586 for (i = p;i < p+p-1;++i) { in Rq_mult_small()
588 for (j = i-p+1;j < p;++j) result = Fq_freeze(result+f[j]*(int32)g[i-j]); in Rq_mult_small()
589 fg[i] = result; in Rq_mult_small()
592 for (i = p+p-2;i >= p;--i) { in Rq_mult_small()
593 fg[i-p] = Fq_freeze(fg[i-p]+fg[i]); in Rq_mult_small()
594 fg[i-p+1] = Fq_freeze(fg[i-p+1]+fg[i]); in Rq_mult_small()
597 for (i = 0;i < p;++i) h[i] = fg[i]; in Rq_mult_small()
605 int i; in Rq_mult3() local
607 for (i = 0;i < p;++i) h[i] = Fq_freeze(3*f[i]); in Rq_mult3()
615 int i,loop,delta; in Rq_recip3() local
620 for (i = 0;i < p+1;++i) v[i] = 0; in Rq_recip3()
621 for (i = 0;i < p+1;++i) r[i] = 0; in Rq_recip3()
623 for (i = 0;i < p;++i) f[i] = 0; in Rq_recip3()
625 for (i = 0;i < p;++i) g[p-1-i] = in[i]; in Rq_recip3()
631 for (i = p;i > 0;--i) v[i] = v[i-1]; in Rq_recip3()
638 for (i = 0;i < p+1;++i) { in Rq_recip3()
639 t = swap&(f[i]^g[i]); f[i] ^= t; g[i] ^= t; in Rq_recip3()
640 t = swap&(v[i]^r[i]); v[i] ^= t; r[i] ^= t; in Rq_recip3()
645 for (i = 0;i < p+1;++i) g[i] = Fq_freeze(f0*g[i]-g0*f[i]); in Rq_recip3()
646 for (i = 0;i < p+1;++i) r[i] = Fq_freeze(f0*r[i]-g0*v[i]); in Rq_recip3()
648 for (i = 0;i < p;++i) g[i] = g[i+1]; in Rq_recip3()
653 for (i = 0;i < p;++i) out[i] = Fq_freeze(scale*(int32)v[p-1-i]); in Rq_recip3()
664 int i; in Round() local
665 for (i = 0;i < p;++i) out[i] = a[i]-F3_freeze(a[i]); in Round()
673 int i; in Short_fromlist() local
675 for (i = 0;i < w;++i) L[i] = in[i]&(uint32)-2; in Short_fromlist()
676 for (i = w;i < p;++i) L[i] = (in[i]&(uint32)-3)|1; in Short_fromlist()
678 for (i = 0;i < p;++i) out[i] = (L[i]&3)-1; in Short_fromlist()
690 int i; in Hash_prefix() local
693 for (i = 0;i < inlen;++i) x[i+1] = in[i]; in Hash_prefix()
695 for (i = 0;i < 32;++i) out[i] = h[i]; in Hash_prefix()
716 int i; in Short_random() local
718 for (i = 0;i < p;++i) L[i] = urandom32(); in Short_random()
726 int i; in Small_random() local
728 for (i = 0;i < p;++i) out[i] = (((urandom32()&0x3fffffff)*3)>>30)-1; in Small_random()
769 int i; in Decrypt() local
777 for (i = 0;i < w;++i) r[i] = ((ev[i]^1)&~mask)^1; in Decrypt()
778 for (i = w;i < p;++i) r[i] = ev[i]&~mask; in Decrypt()
802 int i; in Encrypt() local
807 for (i = 0;i < I;++i) T[i] = Top(Fq_freeze(bA[i]+r[i]*q12)); in Encrypt()
814 int i; in Decrypt() local
817 for (i = 0;i < I;++i) in Decrypt()
818 r[i] = -int16_negative_mask(Fq_freeze(Right(T[i])-aB[i]+4*w+1)); in Decrypt()
832 int i; in Inputs_encode() local
833 for (i = 0;i < Inputs_bytes;++i) s[i] = 0; in Inputs_encode()
834 for (i = 0;i < I;++i) s[i>>3] |= r[i]<<(i&7); in Inputs_encode()
847 int i; in Expand() local
849 for (i = 0;i < p;++i) { in Expand()
850 uint32 L0 = ((unsigned char *) L)[4*i]; in Expand()
851 uint32 L1 = ((unsigned char *) L)[4*i+1]; in Expand()
852 uint32 L2 = ((unsigned char *) L)[4*i+2]; in Expand()
853 uint32 L3 = ((unsigned char *) L)[4*i+3]; in Expand()
854 L[i] = L0+(L1<<8)+(L2<<16)+(L3<<24); in Expand()
881 int i; in Generator() local
884 for (i = 0;i < p;++i) G[i] = uint32_mod_uint14(L[i],q)-q12; in Generator()
940 int i; in Small_encode() local
942 for (i = 0;i < p/4;++i) { in Small_encode()
956 int i; in Small_decode() local
958 for (i = 0;i < p/4;++i) { in Small_decode()
976 int i; in Rq_encode() local
978 for (i = 0;i < p;++i) R[i] = r[i]+q12; in Rq_encode()
979 for (i = 0;i < p;++i) M[i] = q; in Rq_encode()
986 int i; in Rq_decode() local
988 for (i = 0;i < p;++i) M[i] = q; in Rq_decode()
990 for (i = 0;i < p;++i) r[i] = ((Fq)R[i])-q12; in Rq_decode()
1000 int i; in Rounded_encode() local
1002 for (i = 0;i < p;++i) R[i] = ((r[i]+q12)*10923)>>15; in Rounded_encode()
1003 for (i = 0;i < p;++i) M[i] = (q+2)/3; in Rounded_encode()
1010 int i; in Rounded_decode() local
1012 for (i = 0;i < p;++i) M[i] = (q+2)/3; in Rounded_decode()
1014 for (i = 0;i < p;++i) r[i] = R[i]*3-q12; in Rounded_decode()
1025 int i; in Top_encode() local
1026 for (i = 0;i < Top_bytes;++i) in Top_encode()
1027 s[i] = T[2*i]+(T[2*i+1]<<4); in Top_encode()
1032 int i; in Top_decode() local
1033 for (i = 0;i < Top_bytes;++i) { in Top_decode()
1034 T[2*i] = s[i]&15; in Top_decode()
1035 T[2*i+1] = s[i]>>4; in Top_decode()
1101 int i; in Inputs_random() local
1104 for (i = 0;i < I;++i) r[i] = 1&(s[i>>3]>>(i&7)); in Inputs_random()
1155 int i; in HashConfirm() local
1158 for (i = 0;i < Hash_bytes;++i) x[Hash_bytes+i] = cache[i]; in HashConfirm()
1161 int i; in HashConfirm()
1163 for (i = 0;i < Inputs_bytes;++i) x[i] = r[i]; in HashConfirm()
1164 for (i = 0;i < Hash_bytes;++i) x[Inputs_bytes+i] = cache[i]; in HashConfirm()
1176 int i; in HashSession() local
1179 for (i = 0;i < Ciphertexts_bytes+Confirm_bytes;++i) x[Hash_bytes+i] = z[i]; in HashSession()
1182 int i; in HashSession()
1184 for (i = 0;i < Inputs_bytes;++i) x[i] = y[i]; in HashSession()
1185 for (i = 0;i < Ciphertexts_bytes+Confirm_bytes;++i) x[Inputs_bytes+i] = z[i]; in HashSession()
1195 int i; in KEM_KeyGen() local
1198 for (i = 0;i < PublicKeys_bytes;++i) *sk++ = pk[i]; in KEM_KeyGen()
1244 int i; in Decap() local
1249 for (i = 0;i < Inputs_bytes;++i) r_enc[i] ^= mask&(r_enc[i]^rho[i]); in Decap()