scalar_4x64_impl.h File Reference

#include "modinv64_impl.h"

Include dependency graph for scalar_4x64_impl.h:

Go to the source code of this file.

Macros
#define	SECP256K1_N_0   ((uint64_t)0xBFD25E8CD0364141ULL)
#define	SECP256K1_N_1   ((uint64_t)0xBAAEDCE6AF48A03BULL)
#define	SECP256K1_N_2   ((uint64_t)0xFFFFFFFFFFFFFFFEULL)
#define	SECP256K1_N_3   ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
#define	SECP256K1_N_C_0   (~SECP256K1_N_0 + 1)
#define	SECP256K1_N_C_1   (~SECP256K1_N_1)
#define	SECP256K1_N_C_2   (1)
#define	SECP256K1_N_H_0   ((uint64_t)0xDFE92F46681B20A0ULL)
#define	SECP256K1_N_H_1   ((uint64_t)0x5D576E7357A4501DULL)
#define	SECP256K1_N_H_2   ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
#define	SECP256K1_N_H_3   ((uint64_t)0x7FFFFFFFFFFFFFFFULL)
#define	muladd(a, b)
	Add a*b to the number defined by (c0,c1,c2).
#define	muladd_fast(a, b)
	Add a*b to the number defined by (c0,c1).
#define	sumadd(a)
	Add a to the number defined by (c0,c1,c2).
#define	sumadd_fast(a)
	Add a to the number defined by (c0,c1).
#define	extract(n)
	Extract the lowest 64 bits of (c0,c1,c2) into n, and left shift the number 64 bits.
#define	extract_fast(n)
	Extract the lowest 64 bits of (c0,c1,c2) into n, and left shift the number 64 bits.

Functions
static SECP256K1_INLINE void	secp256k1_scalar_clear (secp256k1_scalar *r)
static SECP256K1_INLINE void	secp256k1_scalar_set_int (secp256k1_scalar *r, unsigned int v)
static SECP256K1_INLINE unsigned int	secp256k1_scalar_get_bits (const secp256k1_scalar *a, unsigned int offset, unsigned int count)
static SECP256K1_INLINE unsigned int	secp256k1_scalar_get_bits_var (const secp256k1_scalar *a, unsigned int offset, unsigned int count)
static SECP256K1_INLINE int	secp256k1_scalar_check_overflow (const secp256k1_scalar *a)
static SECP256K1_INLINE int	secp256k1_scalar_reduce (secp256k1_scalar *r, unsigned int overflow)
static int	secp256k1_scalar_add (secp256k1_scalar *r, const secp256k1_scalar *a, const secp256k1_scalar *b)
static void	secp256k1_scalar_cadd_bit (secp256k1_scalar *r, unsigned int bit, int flag)
static void	secp256k1_scalar_set_b32 (secp256k1_scalar *r, const unsigned char *b32, int *overflow)
static void	secp256k1_scalar_get_b32 (unsigned char *bin, const secp256k1_scalar *a)
static SECP256K1_INLINE int	secp256k1_scalar_is_zero (const secp256k1_scalar *a)
static void	secp256k1_scalar_negate (secp256k1_scalar *r, const secp256k1_scalar *a)
static SECP256K1_INLINE int	secp256k1_scalar_is_one (const secp256k1_scalar *a)
static int	secp256k1_scalar_is_high (const secp256k1_scalar *a)
static int	secp256k1_scalar_cond_negate (secp256k1_scalar *r, int flag)
static void	secp256k1_scalar_reduce_512 (secp256k1_scalar *r, const uint64_t *l)
static void	secp256k1_scalar_mul_512 (uint64_t l[8], const secp256k1_scalar *a, const secp256k1_scalar *b)
static void	secp256k1_scalar_mul (secp256k1_scalar *r, const secp256k1_scalar *a, const secp256k1_scalar *b)
static int	secp256k1_scalar_shr_int (secp256k1_scalar *r, int n)
static void	secp256k1_scalar_split_128 (secp256k1_scalar *r1, secp256k1_scalar *r2, const secp256k1_scalar *k)
static SECP256K1_INLINE int	secp256k1_scalar_eq (const secp256k1_scalar *a, const secp256k1_scalar *b)
static SECP256K1_INLINE void	secp256k1_scalar_mul_shift_var (secp256k1_scalar *r, const secp256k1_scalar *a, const secp256k1_scalar *b, unsigned int shift)
static SECP256K1_INLINE void	secp256k1_scalar_cmov (secp256k1_scalar *r, const secp256k1_scalar *a, int flag)
static void	secp256k1_scalar_from_signed62 (secp256k1_scalar *r, const secp256k1_modinv64_signed62 *a)
static void	secp256k1_scalar_to_signed62 (secp256k1_modinv64_signed62 *r, const secp256k1_scalar *a)
static void	secp256k1_scalar_inverse (secp256k1_scalar *r, const secp256k1_scalar *x)
static void	secp256k1_scalar_inverse_var (secp256k1_scalar *r, const secp256k1_scalar *x)
static SECP256K1_INLINE int	secp256k1_scalar_is_even (const secp256k1_scalar *a)

Variables
static const secp256k1_modinv64_modinfo	secp256k1_const_modinfo_scalar

Macro Definition Documentation

extract

#define extract

(

n

)

Value:

    { \
    (n) = c0; \
    c0 = c1; \
    c1 = c2; \
    c2 = 0; \
}

Extract the lowest 64 bits of (c0,c1,c2) into n, and left shift the number 64 bits.

Definition at line 235 of file scalar_4x64_impl.h.

extract_fast

#define extract_fast

(

n

)

Value:

    { \
    (n) = c0; \
    c0 = c1; \
    c1 = 0; \
    VERIFY_CHECK(c2 == 0); \
}

Extract the lowest 64 bits of (c0,c1,c2) into n, and left shift the number 64 bits.

c2 is required to be zero.

Definition at line 243 of file scalar_4x64_impl.h.

muladd

#define muladd	(		a,
			b
	)

Value:

    { \
    uint64_t tl, th; \
    { \
        uint128_t t = (uint128_t)a * b; \
        th = t >> 64;         /* at most 0xFFFFFFFFFFFFFFFE */ \
        tl = t; \
    } \
    c0 += tl;                 /* overflow is handled on the next line */ \
    th += (c0 < tl);          /* at most 0xFFFFFFFFFFFFFFFF */ \
    c1 += th;                 /* overflow is handled on the next line */ \
    c2 += (c1 < th);          /* never overflows by contract (verified in the next line) */ \
    VERIFY_CHECK((c1 >= th) || (c2 != 0)); \
}

Add a*b to the number defined by (c0,c1,c2).

c2 must never overflow.

Definition at line 189 of file scalar_4x64_impl.h.

muladd_fast

#define muladd_fast	(		a,
			b
	)

Value:

    { \
    uint64_t tl, th; \
    { \
        uint128_t t = (uint128_t)a * b; \
        th = t >> 64;         /* at most 0xFFFFFFFFFFFFFFFE */ \
        tl = t; \
    } \
    c0 += tl;                 /* overflow is handled on the next line */ \
    th += (c0 < tl);          /* at most 0xFFFFFFFFFFFFFFFF */ \
    c1 += th;                 /* never overflows by contract (verified in the next line) */ \
    VERIFY_CHECK(c1 >= th); \
}

Add a*b to the number defined by (c0,c1).

c1 must never overflow.

Definition at line 204 of file scalar_4x64_impl.h.

SECP256K1_N_0

#define SECP256K1_N_0   ((uint64_t)0xBFD25E8CD0364141ULL)

Definition at line 13 of file scalar_4x64_impl.h.

SECP256K1_N_1

#define SECP256K1_N_1   ((uint64_t)0xBAAEDCE6AF48A03BULL)

Definition at line 14 of file scalar_4x64_impl.h.

SECP256K1_N_2

#define SECP256K1_N_2   ((uint64_t)0xFFFFFFFFFFFFFFFEULL)

Definition at line 15 of file scalar_4x64_impl.h.

SECP256K1_N_3

#define SECP256K1_N_3   ((uint64_t)0xFFFFFFFFFFFFFFFFULL)

Definition at line 16 of file scalar_4x64_impl.h.

SECP256K1_N_C_0

#define SECP256K1_N_C_0   (~SECP256K1_N_0 + 1)

Definition at line 19 of file scalar_4x64_impl.h.

SECP256K1_N_C_1

#define SECP256K1_N_C_1   (~SECP256K1_N_1)

Definition at line 20 of file scalar_4x64_impl.h.

SECP256K1_N_C_2

#define SECP256K1_N_C_2   (1)

Definition at line 21 of file scalar_4x64_impl.h.

SECP256K1_N_H_0

#define SECP256K1_N_H_0   ((uint64_t)0xDFE92F46681B20A0ULL)

Definition at line 24 of file scalar_4x64_impl.h.

SECP256K1_N_H_1

#define SECP256K1_N_H_1   ((uint64_t)0x5D576E7357A4501DULL)

Definition at line 25 of file scalar_4x64_impl.h.

SECP256K1_N_H_2

#define SECP256K1_N_H_2   ((uint64_t)0xFFFFFFFFFFFFFFFFULL)

Definition at line 26 of file scalar_4x64_impl.h.

SECP256K1_N_H_3

#define SECP256K1_N_H_3   ((uint64_t)0x7FFFFFFFFFFFFFFFULL)

Definition at line 27 of file scalar_4x64_impl.h.

sumadd

#define sumadd

(

a

)

Value:

    { \
    unsigned int over; \
    c0 += (a);                  /* overflow is handled on the next line */ \
    over = (c0 < (a));         \
    c1 += over;                 /* overflow is handled on the next line */ \
    c2 += (c1 < over);          /* never overflows by contract */ \
}

Add a to the number defined by (c0,c1,c2).

c2 must never overflow.

Definition at line 218 of file scalar_4x64_impl.h.

sumadd_fast

#define sumadd_fast

(

a

)

Value:

    { \
    c0 += (a);                 /* overflow is handled on the next line */ \
    c1 += (c0 < (a));          /* never overflows by contract (verified the next line) */ \
    VERIFY_CHECK((c1 != 0) | (c0 >= (a))); \
    VERIFY_CHECK(c2 == 0); \
}

Add a to the number defined by (c0,c1).

c1 must never overflow, c2 must be zero.

Definition at line 227 of file scalar_4x64_impl.h.

Function Documentation

secp256k1_scalar_add()

static int secp256k1_scalar_add ( secp256k1_scalar *  r, const secp256k1_scalar *  a, const secp256k1_scalar *  b  )

static

Definition at line 85 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_cadd_bit()

static void secp256k1_scalar_cadd_bit ( secp256k1_scalar *  r, unsigned int  bit, int  flag  )

static

Definition at line 101 of file scalar_4x64_impl.h.

Here is the call graph for this function:

Here is the caller graph for this function:

secp256k1_scalar_check_overflow()

static SECP256K1_INLINE int secp256k1_scalar_check_overflow ( const secp256k1_scalar *  a )

static

Definition at line 59 of file scalar_4x64_impl.h.

Here is the call graph for this function:

Here is the caller graph for this function:

secp256k1_scalar_clear()

static SECP256K1_INLINE void secp256k1_scalar_clear ( secp256k1_scalar *  r )

static

Definition at line 29 of file scalar_4x64_impl.h.

secp256k1_scalar_cmov()

static SECP256K1_INLINE void secp256k1_scalar_cmov ( secp256k1_scalar *  r, const secp256k1_scalar *  a, int  flag  )

static

Definition at line 783 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_cond_negate()

static int secp256k1_scalar_cond_negate ( secp256k1_scalar *  r, int  flag  )

static

Definition at line 170 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_eq()

static SECP256K1_INLINE int secp256k1_scalar_eq ( const secp256k1_scalar *  a, const secp256k1_scalar *  b  )

static

Definition at line 762 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_from_signed62()

static void secp256k1_scalar_from_signed62 ( secp256k1_scalar *  r, const secp256k1_modinv64_signed62 *  a  )

static

Definition at line 794 of file scalar_4x64_impl.h.

Here is the call graph for this function:

Here is the caller graph for this function:

secp256k1_scalar_get_b32()

static void secp256k1_scalar_get_b32 ( unsigned char *  bin, const secp256k1_scalar *  a  )

static

Definition at line 131 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_get_bits()

static SECP256K1_INLINE unsigned int secp256k1_scalar_get_bits ( const secp256k1_scalar *  a, unsigned int  offset, unsigned int  count  )

static

Definition at line 43 of file scalar_4x64_impl.h.

Here is the call graph for this function:

Here is the caller graph for this function:

secp256k1_scalar_get_bits_var()

static SECP256K1_INLINE unsigned int secp256k1_scalar_get_bits_var ( const secp256k1_scalar *  a, unsigned int  offset, unsigned int  count  )

static

Definition at line 48 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_inverse()

static void secp256k1_scalar_inverse ( secp256k1_scalar *  r, const secp256k1_scalar *  x  )

static

Definition at line 836 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_inverse_var()

static void secp256k1_scalar_inverse_var ( secp256k1_scalar *  r, const secp256k1_scalar *  x  )

static

Definition at line 850 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_is_even()

static SECP256K1_INLINE int secp256k1_scalar_is_even ( const secp256k1_scalar *  a )

static

Definition at line 864 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_is_high()

static int secp256k1_scalar_is_high ( const secp256k1_scalar *  a )

static

Definition at line 158 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_is_one()

static SECP256K1_INLINE int secp256k1_scalar_is_one ( const secp256k1_scalar *  a )

static

Definition at line 154 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_is_zero()

static SECP256K1_INLINE int secp256k1_scalar_is_zero ( const secp256k1_scalar *  a )

static

Definition at line 138 of file scalar_4x64_impl.h.

Here is the call graph for this function:

Here is the caller graph for this function:

secp256k1_scalar_mul()

static void secp256k1_scalar_mul ( secp256k1_scalar *  r, const secp256k1_scalar *  a, const secp256k1_scalar *  b  )

static

Definition at line 733 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_mul_512()

static void secp256k1_scalar_mul_512 ( uint64_t  l[8], const secp256k1_scalar *  a, const secp256k1_scalar *  b  )

static

Definition at line 559 of file scalar_4x64_impl.h.

Here is the call graph for this function:

Here is the caller graph for this function:

secp256k1_scalar_mul_shift_var()

static SECP256K1_INLINE void secp256k1_scalar_mul_shift_var ( secp256k1_scalar *  r, const secp256k1_scalar *  a, const secp256k1_scalar *  b, unsigned int  shift  )

static

Definition at line 766 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_negate()

static void secp256k1_scalar_negate ( secp256k1_scalar *  r, const secp256k1_scalar *  a  )

static

Definition at line 142 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_reduce()

static SECP256K1_INLINE int secp256k1_scalar_reduce ( secp256k1_scalar *  r, unsigned int  overflow  )

static

Definition at line 71 of file scalar_4x64_impl.h.

Here is the call graph for this function:

Here is the caller graph for this function:

secp256k1_scalar_reduce_512()

static void secp256k1_scalar_reduce_512 ( secp256k1_scalar *  r, const uint64_t *  l  )

static

Definition at line 250 of file scalar_4x64_impl.h.

Here is the call graph for this function:

Here is the caller graph for this function:

secp256k1_scalar_set_b32()

static void secp256k1_scalar_set_b32 ( secp256k1_scalar *  r, const unsigned char *  b32, int *  overflow  )

static

Definition at line 119 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_set_int()

static SECP256K1_INLINE void secp256k1_scalar_set_int ( secp256k1_scalar *  r, unsigned int  v  )

static

Definition at line 36 of file scalar_4x64_impl.h.

secp256k1_scalar_shr_int()

static int secp256k1_scalar_shr_int ( secp256k1_scalar *  r, int  n  )

static

Definition at line 739 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_split_128()

static void secp256k1_scalar_split_128 ( secp256k1_scalar *  r1, secp256k1_scalar *  r2, const secp256k1_scalar *  k  )

static

Definition at line 751 of file scalar_4x64_impl.h.

Here is the call graph for this function:

secp256k1_scalar_to_signed62()

static void secp256k1_scalar_to_signed62 ( secp256k1_modinv64_signed62 *  r, const secp256k1_scalar *  a  )

static

Definition at line 816 of file scalar_4x64_impl.h.

Here is the call graph for this function:

Here is the caller graph for this function:

Variable Documentation

secp256k1_const_modinfo_scalar

const secp256k1_modinv64_modinfo secp256k1_const_modinfo_scalar

static

Initial value:

= {
    {{0x3FD25E8CD0364141LL, 0x2ABB739ABD2280EELL, -0x15LL, 0, 256}},
    0x34F20099AA774EC1LL
}

Definition at line 831 of file scalar_4x64_impl.h.