Lines Matching refs:z2
390 gf x1, x2, z2, x3, z3, t1, t2;
397 gf_copy(z2, ZERO);
416 gf_cond_swap(z2, z3, swap);
424 gf_add_nr(t1, x2, z2); /* A = x2 + z2 */ /* 2+e */
425 gf_sub_nr(t2, x2, z2); /* B = x2 - z2 */ /* 3+e */
426 gf_sub_nr(z2, x3, z3); /* D = x3 - z3 */ /* 3+e */
427 gf_mul(x2, t1, z2); /* DA */
428 gf_add_nr(z2, z3, x3); /* C = x3 + z3 */ /* 2+e */
429 gf_mul(x3, t2, z2); /* CB */
431 gf_sqr(z2, z3); /* (DA-CB)^2 */
432 gf_mul(z3, x1, z2); /* z3 = x1(DA-CB)^2 */
433 gf_add_nr(z2, x2, x3); /* (DA+CB) */ /* 2+e */
434 gf_sqr(x3, z2); /* x3 = (DA+CB)^2 */
436 gf_sqr(z2, t1); /* AA = A^2 */
438 gf_mul(x2, z2, t1); /* x2 = AA*BB */
439 gf_sub_nr(t2, z2, t1); /* E = AA-BB */ /* 3+e */
442 gf_add_nr(t1, t1, z2); /* AA + a24*E */ /* 2+e */
443 gf_mul(z2, t2, t1); /* z2 = E(AA+a24*E) */
448 gf_cond_swap(z2, z3, swap);
449 gf_invert(z2, z2, 0);
450 gf_mul(x1, x2, z2);
456 OPENSSL_cleanse(z2, sizeof(z2));