crypto/ec/ecp_nistp256.c

580                            const smallfelem small2)
585     a = ((uint128_t) small1[0]) * small2[0];
591     a = ((uint128_t) small1[0]) * small2[1];
597     a = ((uint128_t) small1[1]) * small2[0];
603     a = ((uint128_t) small1[0]) * small2[2];
609     a = ((uint128_t) small1[1]) * small2[1];
615     a = ((uint128_t) small1[2]) * small2[0];
621     a = ((uint128_t) small1[0]) * small2[3];
627     a = ((uint128_t) small1[1]) * small2[2];
633     a = ((uint128_t) small1[2]) * small2[1];
639     a = ((uint128_t) small1[3]) * small2[0];
645     a = ((uint128_t) small1[1]) * small2[3];
651     a = ((uint128_t) small1[2]) * small2[2];
657     a = ((uint128_t) small1[3]) * small2[1];
663     a = ((uint128_t) small1[2]) * small2[3];
669     a = ((uint128_t) small1[3]) * small2[2];
675     a = ((uint128_t) small1[3]) * small2[3];
692     smallfelem small1, small2;
694     felem_shrink(small2, in2);
695     smallfelem_mul(out, small1, small2);
709     smallfelem small2;
710     felem_shrink(small2, in2);
711     smallfelem_mul(out, small1, small2);
1109     smallfelem small1, small2;
1142     felem_shrink(small2, alpha);
1145     smallfelem_square(tmp, small2);
1169     felem_small_mul(tmp, small2, beta);
1242     smallfelem small1, small2, small3, small4, small5;
1262         felem_shrink(small2, ftmp2);
1267         smallfelem_mul(tmp, small5, small2);
1286         smallfelem_mul(tmp, small2, z2);