182 static void mpih_set_cond(mpi_ptr_t wp, mpi_ptr_t up,  in mpih_set_cond()  argument
190 		x = mask & (wp[i] ^ up[i]);  in mpih_set_cond()
191 		wp[i] = wp[i] ^ x;  in mpih_set_cond()
201 	mpi_ptr_t wp, up, vp;  in ec_addm_25519()  local
212 	wp = w->d;  in ec_addm_25519()
214 	mpihelp_add_n(wp, up, vp, wsize);  in ec_addm_25519()
215 	borrow = mpihelp_sub_n(wp, wp, ctx->p->d, wsize);  in ec_addm_25519()
217 	mpihelp_add_n(wp, wp, n, wsize);  in ec_addm_25519()
218 	wp[LIMB_SIZE_25519-1] &= ~((mpi_limb_t)1 << (255 % BITS_PER_MPI_LIMB));  in ec_addm_25519()
223 	mpi_ptr_t wp, up, vp;  in ec_subm_25519()  local
234 	wp = w->d;  in ec_subm_25519()
236 	borrow = mpihelp_sub_n(wp, up, vp, wsize);  in ec_subm_25519()
238 	mpihelp_add_n(wp, wp, n, wsize);  in ec_subm_25519()
239 	wp[LIMB_SIZE_25519-1] &= ~((mpi_limb_t)1 << (255 % BITS_PER_MPI_LIMB));  in ec_subm_25519()
244 	mpi_ptr_t wp, up, vp;  in ec_mulm_25519()  local
257 	wp = w->d;  in ec_mulm_25519()
260 	memcpy(wp, n, wsize * BYTES_PER_MPI_LIMB);  in ec_mulm_25519()
261 	wp[LIMB_SIZE_25519-1] &= ~((mpi_limb_t)1 << (255 % BITS_PER_MPI_LIMB));  in ec_mulm_25519()
276 	cy = mpihelp_add_n(wp, wp, m, wsize);  in ec_mulm_25519()
280 	msb = (wp[LIMB_SIZE_25519-1] >> (255 % BITS_PER_MPI_LIMB));  in ec_mulm_25519()
282 	wp[LIMB_SIZE_25519-1] &= ~((mpi_limb_t)1 << (255 % BITS_PER_MPI_LIMB));  in ec_mulm_25519()
283 	mpihelp_add_n(wp, wp, m, wsize);  in ec_mulm_25519()
286 	cy = mpihelp_sub_n(wp, wp, ctx->p->d, wsize);  in ec_mulm_25519()
288 	mpihelp_add_n(wp, wp, m, wsize);  in ec_mulm_25519()
308 	mpi_ptr_t wp, up, vp;  in ec_addm_448()  local
319 	wp = w->d;  in ec_addm_448()
321 	cy = mpihelp_add_n(wp, up, vp, wsize);  in ec_addm_448()
323 	mpihelp_sub_n(wp, wp, n, wsize);  in ec_addm_448()
328 	mpi_ptr_t wp, up, vp;  in ec_subm_448()  local
339 	wp = w->d;  in ec_subm_448()
341 	borrow = mpihelp_sub_n(wp, up, vp, wsize);  in ec_subm_448()
343 	mpihelp_add_n(wp, wp, n, wsize);  in ec_subm_448()
348 	mpi_ptr_t wp, up, vp;  in ec_mulm_448()  local
366 	wp = w->d;  in ec_mulm_448()
398 		wp[i] = b0[i];  in ec_mulm_448()
400 	wp[LIMB_SIZE_HALF_448-1] &= (((mpi_limb_t)1UL << 32)-1);  in ec_mulm_448()
418 	wp[LIMB_SIZE_HALF_448-1] |= (b1_rest << 32);  in ec_mulm_448()
421 		wp[i+(wsize + 1) / 2] = b1[i];  in ec_mulm_448()
435 	mpihelp_add_n(wp, wp, n, wsize);  in ec_mulm_448()
438 	cy = mpihelp_sub_n(wp, wp, ctx->p->d, wsize);  in ec_mulm_448()
440 	mpihelp_add_n(wp, wp, n, wsize);  in ec_mulm_448()