Lines Matching defs:U2
315 BN_ULONG U2[P256_LIMBS], S2[P256_LIMBS];
363 ecp_nistz256_mul_mont(U2, in2_x, Z1sqr); /* U2 = X2*Z1^2 */
364 ecp_nistz256_sub(H, U2, U1); /* H = U2 - U1 */
377 * intermediate variables U1, U2 and S1, S2 that are derived from
379 * - U1 = X1 * (Z2)^2 ; U2 = X2 * (Z1)^2
382 * It is easy to prove that is_equal(U1, U2) implies that the affine
393 * Therefore since U1 = U2, we know H = 0, and therefore Z3 = H*Z1*Z2
400 if (is_equal(U1, U2) & ~in1infty & ~in2infty & is_equal(S1, S2)) {
416 ecp_nistz256_mul_mont(U2, U1, Hsqr); /* U1*H^2 */
417 ecp_nistz256_mul_by_2(Hsqr, U2); /* 2*U1*H^2 */
422 ecp_nistz256_sub(res_y, U2, res_x);
446 BN_ULONG U2[P256_LIMBS], S2[P256_LIMBS];
488 ecp_nistz256_mul_mont(U2, in2_x, Z1sqr); /* U2 = X2*Z1^2 */
489 ecp_nistz256_sub(H, U2, in1_x); /* H = U2 - U1 */
502 ecp_nistz256_mul_mont(U2, in1_x, Hsqr); /* U1*H^2 */
503 ecp_nistz256_mul_by_2(Hsqr, U2); /* 2*U1*H^2 */
507 ecp_nistz256_sub(H, U2, res_x);