Lines Matching refs:U1
316 BN_ULONG U1[P256_LIMBS], S1[P256_LIMBS];
362 ecp_nistz256_mul_mont(U1, in1_x, Z2sqr); /* U1 = X1*Z2^2 */
364 ecp_nistz256_sub(H, U2, U1); /* H = U2 - U1 */
377 * intermediate variables U1, U2 and S1, S2 that are derived from
379 * - U1 = X1 * (Z2)^2 ; U2 = X2 * (Z1)^2
382 * It is easy to prove that is_equal(U1, U2) implies that the affine
393 * Therefore since U1 = U2, we know H = 0, and therefore Z3 = H*Z1*Z2
400 if (is_equal(U1, U2) & ~in1infty & ~in2infty & is_equal(S1, S2)) {
416 ecp_nistz256_mul_mont(U2, U1, Hsqr); /* U1*H^2 */
417 ecp_nistz256_mul_by_2(Hsqr, U2); /* 2*U1*H^2 */
489 ecp_nistz256_sub(H, U2, in1_x); /* H = U2 - U1 */
502 ecp_nistz256_mul_mont(U2, in1_x, Hsqr); /* U1*H^2 */
503 ecp_nistz256_mul_by_2(Hsqr, U2); /* 2*U1*H^2 */