Lines Matching refs:h1
153 u64 h0, h1, h2, c;
162 h1 = st->h[1];
168 h1 = (u64)(d1 = (u128)h1 + (d0 >> 64) + U8TOU64(inp + 8));
177 ((u128)h1 * s1);
179 ((u128)h1 * r0) +
186 h1 = (u64)(d1 += d0 >> 64);
192 h1 += (c = CONSTANT_TIME_CARRY(h0,c));
193 h2 += CONSTANT_TIME_CARRY(h1,c);
209 st->h[1] = h1;
217 u64 h0, h1, h2;
223 h1 = st->h[1];
228 g1 = (u64)(t = (u128)h1 + (t >> 64));
231 /* if there was carry into 131st bit, h1:h0 = g1:g0 */
237 h1 = (h1 & mask) | g1;
241 h1 = (u64)(t = (u128)h1 + nonce[2] + ((u64)nonce[3]<<32) + (t >> 64));
244 U64TO8(mac + 8, h1);
295 u32 h0, h1, h2, h3, h4, c;
308 h1 = st->h[1];
316 h1 = (u32)(d1 = (u64)h1 + (d0 >> 32) + U8TOU32(inp + 4));
323 ((u64)h1 * s3) +
327 ((u64)h1 * r0) +
332 ((u64)h1 * r1) +
337 ((u64)h1 * r2) +
346 h1 = (u32)(d1 += d0 >> 32);
354 h1 += (c = CONSTANT_TIME_CARRY(h0,c));
355 h2 += (c = CONSTANT_TIME_CARRY(h1,c));
373 st->h[1] = h1;
383 u32 h0, h1, h2, h3, h4;
389 h1 = st->h[1];
396 g1 = (u32)(t = (u64)h1 + (t >> 32));
409 h1 = (h1 & mask) | g1;
415 h1 = (u32)(t = (u64)h1 + (t >> 32) + nonce[1]);
420 U32TO8(mac + 4, h1);