1145 static void apply_z(u64 *x1, u64 *y1, u64 *z, const struct ecc_curve *curve)  in apply_z()  argument
1149 	vli_mod_square_fast(t1, z, curve);		/* z^2 */  in apply_z()
1151 	vli_mod_mult_fast(t1, t1, z, curve);	/* z^3 */  in apply_z()
1159 	u64 z[ECC_MAX_DIGITS];  in xycz_initial_double()  local
1165 	vli_clear(z, ndigits);  in xycz_initial_double()
1166 	z[0] = 1;  in xycz_initial_double()
1169 		vli_set(z, p_initial_z, ndigits);  in xycz_initial_double()
1171 	apply_z(x1, y1, z, curve);  in xycz_initial_double()
1173 	ecc_point_double_jacobian(x1, y1, z, curve);  in xycz_initial_double()
1175 	apply_z(x2, y2, z, curve);  in xycz_initial_double()
1288 	u64 z[ECC_MAX_DIGITS];  in ecc_point_mult()  local
1316 	vli_mod_sub(z, rx[1], rx[0], curve_prime, ndigits);  in ecc_point_mult()
1318 	vli_mod_mult_fast(z, z, ry[1 - nb], curve);  in ecc_point_mult()
1320 	vli_mod_mult_fast(z, z, point->x, curve);  in ecc_point_mult()
1323 	vli_mod_inv(z, z, curve_prime, point->ndigits);  in ecc_point_mult()
1326 	vli_mod_mult_fast(z, z, point->y, curve);  in ecc_point_mult()
1328 	vli_mod_mult_fast(z, z, rx[1 - nb], curve);  in ecc_point_mult()
1333 	apply_z(rx[0], ry[0], z, curve);  in ecc_point_mult()
1344 	u64 z[ECC_MAX_DIGITS];  in ecc_point_add()  local
1351 	vli_mod_sub(z, result->x, p->x, curve->p, ndigits);  in ecc_point_add()
1355 	vli_mod_inv(z, z, curve->p, ndigits);  in ecc_point_add()
1356 	apply_z(result->x, result->y, z, curve);  in ecc_point_add()
1367 	u64 z[ECC_MAX_DIGITS];  in ecc_point_mult_shamir()  local
1393 	vli_clear(z + 1, ndigits - 1);  in ecc_point_mult_shamir()
1394 	z[0] = 1;  in ecc_point_mult_shamir()
1397 		ecc_point_double_jacobian(rx, ry, z, curve);  in ecc_point_mult_shamir()
1408 			apply_z(tx, ty, z, curve);  in ecc_point_mult_shamir()
1411 			vli_mod_mult_fast(z, z, tz, curve);  in ecc_point_mult_shamir()
1414 	vli_mod_inv(z, z, curve->p, ndigits);  in ecc_point_mult_shamir()
1415 	apply_z(rx, ry, z, curve);  in ecc_point_mult_shamir()