1203  * Needs grp and a temporary MPI tmp to be defined. */
1208         MBEDTLS_MPI_CHK(mbedtls_mpi_sub_mpi(&tmp, &grp->P, (X)));      \
1209         MBEDTLS_MPI_CHK(mbedtls_mpi_safe_cond_assign((X), &tmp,          \
1467     mbedtls_mpi tmp;  in ecp_safe_invert_jac()  local
1468     mbedtls_mpi_init(&tmp);  in ecp_safe_invert_jac()
1473     mbedtls_mpi_free(&tmp);  in ecp_safe_invert_jac()
1493                           mbedtls_mpi tmp[4])  in ecp_double_jac()
1512         /* tmp[0] <- M = 3(X + Z^2)(X - Z^2) */  in ecp_double_jac()
1513         MPI_ECP_SQR(&tmp[1],  &P->Z);  in ecp_double_jac()
1514         MPI_ECP_ADD(&tmp[2],  &P->X,  &tmp[1]);  in ecp_double_jac()
1515         MPI_ECP_SUB(&tmp[3],  &P->X,  &tmp[1]);  in ecp_double_jac()
1516         MPI_ECP_MUL(&tmp[1],  &tmp[2],     &tmp[3]);  in ecp_double_jac()
1517         MPI_ECP_MUL_INT(&tmp[0],  &tmp[1],     3);  in ecp_double_jac()
1519         /* tmp[0] <- M = 3.X^2 + A.Z^4 */  in ecp_double_jac()
1520         MPI_ECP_SQR(&tmp[1],  &P->X);  in ecp_double_jac()
1521         MPI_ECP_MUL_INT(&tmp[0],  &tmp[1],  3);  in ecp_double_jac()
1526             MPI_ECP_SQR(&tmp[1],  &P->Z);  in ecp_double_jac()
1527             MPI_ECP_SQR(&tmp[2],  &tmp[1]);  in ecp_double_jac()
1528             MPI_ECP_MUL(&tmp[1],  &tmp[2],     &grp->A);  in ecp_double_jac()
1529             MPI_ECP_ADD(&tmp[0],  &tmp[0],     &tmp[1]);  in ecp_double_jac()
1533     /* tmp[1] <- S = 4.X.Y^2 */  in ecp_double_jac()
1534     MPI_ECP_SQR(&tmp[2],  &P->Y);  in ecp_double_jac()
1535     MPI_ECP_SHIFT_L(&tmp[2],  1);  in ecp_double_jac()
1536     MPI_ECP_MUL(&tmp[1],  &P->X, &tmp[2]);  in ecp_double_jac()
1537     MPI_ECP_SHIFT_L(&tmp[1],  1);  in ecp_double_jac()
1539     /* tmp[3] <- U = 8.Y^4 */  in ecp_double_jac()
1540     MPI_ECP_SQR(&tmp[3],  &tmp[2]);  in ecp_double_jac()
1541     MPI_ECP_SHIFT_L(&tmp[3],  1);  in ecp_double_jac()
1543     /* tmp[2] <- T = M^2 - 2.S */  in ecp_double_jac()
1544     MPI_ECP_SQR(&tmp[2],  &tmp[0]);  in ecp_double_jac()
1545     MPI_ECP_SUB(&tmp[2],  &tmp[2], &tmp[1]);  in ecp_double_jac()
1546     MPI_ECP_SUB(&tmp[2],  &tmp[2], &tmp[1]);  in ecp_double_jac()
1548     /* tmp[1] <- S = M(S - T) - U */  in ecp_double_jac()
1549     MPI_ECP_SUB(&tmp[1],  &tmp[1],     &tmp[2]);  in ecp_double_jac()
1550     MPI_ECP_MUL(&tmp[1],  &tmp[1],     &tmp[0]);  in ecp_double_jac()
1551     MPI_ECP_SUB(&tmp[1],  &tmp[1],     &tmp[3]);  in ecp_double_jac()
1553     /* tmp[3] <- U = 2.Y.Z */  in ecp_double_jac()
1554     MPI_ECP_MUL(&tmp[3],  &P->Y,  &P->Z);  in ecp_double_jac()
1555     MPI_ECP_SHIFT_L(&tmp[3],  1);  in ecp_double_jac()
1558     MPI_ECP_MOV(&R->X, &tmp[2]);  in ecp_double_jac()
1559     MPI_ECP_MOV(&R->Y, &tmp[1]);  in ecp_double_jac()
1560     MPI_ECP_MOV(&R->Z, &tmp[3]);  in ecp_double_jac()
1590                          mbedtls_mpi tmp[4])  in ecp_add_mixed()
1636     MPI_ECP_SQR(&tmp[0], &P->Z);  in ecp_add_mixed()
1637     MPI_ECP_MUL(&tmp[1], &tmp[0], &P->Z);  in ecp_add_mixed()
1638     MPI_ECP_MUL(&tmp[0], &tmp[0], &Q->X);  in ecp_add_mixed()
1639     MPI_ECP_MUL(&tmp[1], &tmp[1], &Q->Y);  in ecp_add_mixed()
1640     MPI_ECP_SUB(&tmp[0], &tmp[0], &P->X);  in ecp_add_mixed()
1641     MPI_ECP_SUB(&tmp[1], &tmp[1], &P->Y);  in ecp_add_mixed()
1644     if (MPI_ECP_CMP_INT(&tmp[0], 0) == 0) {  in ecp_add_mixed()
1645         if (MPI_ECP_CMP_INT(&tmp[1], 0) == 0) {  in ecp_add_mixed()
1646             ret = ecp_double_jac(grp, R, P, tmp);  in ecp_add_mixed()
1655     MPI_ECP_MUL(Z,        &P->Z,    &tmp[0]);  in ecp_add_mixed()
1656     MPI_ECP_SQR(&tmp[2],  &tmp[0]);  in ecp_add_mixed()
1657     MPI_ECP_MUL(&tmp[3],  &tmp[2],  &tmp[0]);  in ecp_add_mixed()
1658     MPI_ECP_MUL(&tmp[2],  &tmp[2],  &P->X);  in ecp_add_mixed()
1660     MPI_ECP_MOV(&tmp[0], &tmp[2]);  in ecp_add_mixed()
1661     MPI_ECP_SHIFT_L(&tmp[0], 1);  in ecp_add_mixed()
1664     MPI_ECP_SQR(X,        &tmp[1]);  in ecp_add_mixed()
1665     MPI_ECP_SUB(X,        X,        &tmp[0]);  in ecp_add_mixed()
1666     MPI_ECP_SUB(X,        X,        &tmp[3]);  in ecp_add_mixed()
1667     MPI_ECP_SUB(&tmp[2],  &tmp[2],  X);  in ecp_add_mixed()
1668     MPI_ECP_MUL(&tmp[2],  &tmp[2],  &tmp[1]);  in ecp_add_mixed()
1669     MPI_ECP_MUL(&tmp[3],  &tmp[3],  &P->Y);  in ecp_add_mixed()
1671     MPI_ECP_SUB(Y,     &tmp[2],     &tmp[3]);  in ecp_add_mixed()
1865     mbedtls_mpi tmp[4];  in ecp_precompute_comb()  local
1867     mpi_init_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_precompute_comb()
1921         MBEDTLS_MPI_CHK(ecp_double_jac(grp, cur, cur, tmp));  in ecp_precompute_comb()
1963             MBEDTLS_MPI_CHK(ecp_add_mixed(grp, &T[i + j], &T[j], &T[i], tmp));  in ecp_precompute_comb()
1998     mpi_free_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_precompute_comb()
2057     mbedtls_mpi tmp[4];  in ecp_mul_comb_core()  local
2061     mpi_init_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_mul_comb_core()
2093         MBEDTLS_MPI_CHK(ecp_double_jac(grp, R, R, tmp));  in ecp_mul_comb_core()
2095         MBEDTLS_MPI_CHK(ecp_add_mixed(grp, R, R, &Txi, tmp));  in ecp_mul_comb_core()
2101     mpi_free_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_mul_comb_core()
2545     mbedtls_mpi tmp[4];  in ecp_mul_mxz()  local
2548     mpi_init_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_mul_mxz()
2582         MBEDTLS_MPI_CHK(ecp_double_add_mxz(grp, R, &RP, R, &RP, &PX, tmp));  in ecp_mul_mxz()
2592     mpi_free_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_mul_mxz()
2750     mbedtls_mpi tmp;  in mbedtls_ecp_mul_shortcuts()  local
2751     mbedtls_mpi_init(&tmp);  in mbedtls_ecp_mul_shortcuts()
2769     mbedtls_mpi_free(&tmp);  in mbedtls_ecp_mul_shortcuts()
2788     mbedtls_mpi tmp[4];  in mbedtls_ecp_muladd_restartable()  local
2797     mpi_init_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in mbedtls_ecp_muladd_restartable()
2844     MBEDTLS_MPI_CHK(ecp_add_mixed(grp, pR, pmP, pR, tmp));  in mbedtls_ecp_muladd_restartable()
2863     mpi_free_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in mbedtls_ecp_muladd_restartable()