496     if (grp->G.Y.p == NULL) {  in mbedtls_ecp_get_type()
509     mbedtls_mpi_init(&pt->Y);  in mbedtls_ecp_point_init()
555     mbedtls_mpi_free(&(pt->Y));  in mbedtls_ecp_point_free()
625     MBEDTLS_MPI_CHK(mbedtls_mpi_copy(&P->Y, &Q->Y));  in mbedtls_ecp_copy()
647     MBEDTLS_MPI_CHK(mbedtls_mpi_lset(&pt->Y, 1));  in mbedtls_ecp_set_zero()
669         mbedtls_mpi_cmp_mpi(&P->Y, &Q->Y) == 0 &&  in mbedtls_ecp_point_cmp()
685     MBEDTLS_MPI_CHK(mbedtls_mpi_read_string(&P->Y, radix, y));  in mbedtls_ecp_point_read_string()
745             MBEDTLS_MPI_CHK(mbedtls_mpi_write_binary(&P->Y, buf + 1 + plen, plen));  in mbedtls_ecp_point_write_binary()
753             buf[0] = 0x02 + mbedtls_mpi_get_bit(&P->Y, 0);  in mbedtls_ecp_point_write_binary()
766                                    mbedtls_mpi *Y,
792         mbedtls_mpi_free(&pt->Y);  in mbedtls_ecp_point_read_binary()
824             return mbedtls_mpi_read_binary(&pt->Y, buf + 1 + plen, plen);  in mbedtls_ecp_point_read_binary()
830             return mbedtls_ecp_sw_derive_y(grp, &pt->X, &pt->Y,  in mbedtls_ecp_point_read_binary()
1194 #define MPI_ECP_CMP(X, Y)                                                     \  argument
1195     mbedtls_mpi_cmp_mpi(X, Y)
1217 #define MPI_ECP_COND_ASSIGN(X, Y, cond)       \  argument
1218     MBEDTLS_MPI_CHK(mbedtls_mpi_safe_cond_assign((X), (Y), (cond)))
1220 #define MPI_ECP_COND_SWAP(X, Y, cond)       \  argument
1221     MBEDTLS_MPI_CHK(mbedtls_mpi_safe_cond_swap((X), (Y), (cond)))
1257                                    mbedtls_mpi *Y,  in mbedtls_ecp_sw_derive_y()  argument
1279     MBEDTLS_MPI_CHK(ecp_sw_rhs(grp, Y, X));  in mbedtls_ecp_sw_derive_y()
1286     MBEDTLS_MPI_CHK(mbedtls_mpi_exp_mod(Y, Y /*y^2*/, &exp, &grp->P, NULL));  in mbedtls_ecp_sw_derive_y()
1293     if (mbedtls_mpi_get_bit(Y, 0) != parity_bit) {  in mbedtls_ecp_sw_derive_y()
1294         MBEDTLS_MPI_CHK(mbedtls_mpi_sub_mpi(Y, &grp->P, Y));  in mbedtls_ecp_sw_derive_y()
1338     MPI_ECP_MUL(&pt->Y,   &pt->Y,     &T);    /* Y'  <- Y*T    = Y / Z   */  in ecp_normalize_jac()
1341     MPI_ECP_MUL(&pt->Y,   &pt->Y,     &T);    /* Y'' <- Y' * T = Y / Z^3 */  in ecp_normalize_jac()
1426         MPI_ECP_MUL(&T[i]->Y, &T[i]->Y, &t);  in ecp_normalize_jac_many()
1429         MPI_ECP_MUL(&T[i]->Y, &T[i]->Y, &t);  in ecp_normalize_jac_many()
1438         MBEDTLS_MPI_CHK(mbedtls_mpi_shrink(&T[i]->Y, grp->P.n));  in ecp_normalize_jac_many()
1469     MPI_ECP_COND_NEG(&Q->Y, inv);  in ecp_safe_invert_jac()
1533     MPI_ECP_SQR(&tmp[2],  &P->Y);  in ecp_double_jac()
1553     MPI_ECP_MUL(&tmp[3],  &P->Y,  &P->Z);  in ecp_double_jac()
1558     MPI_ECP_MOV(&R->Y, &tmp[1]);  in ecp_double_jac()
1610     mbedtls_mpi * const Y = &R->Y;  in ecp_add_mixed()  local
1638     MPI_ECP_MUL(&tmp[1], &tmp[1], &Q->Y);  in ecp_add_mixed()
1640     MPI_ECP_SUB(&tmp[1], &tmp[1], &P->Y);  in ecp_add_mixed()
1668     MPI_ECP_MUL(&tmp[3],  &tmp[3],  &P->Y);  in ecp_add_mixed()
1670     MPI_ECP_SUB(Y,     &tmp[2],     &tmp[3]);  in ecp_add_mixed()
1709     MPI_ECP_MUL(&pt->Y,   &pt->Y,     &l);  in ecp_randomize_jac()
1716     MPI_ECP_MUL(&pt->Y,   &pt->Y,     &l);  in ecp_randomize_jac()
2029         MPI_ECP_COND_ASSIGN(&R->Y, &T[j].Y, j == ii);  in ecp_select_comb()
2309     p_eq_g = (MPI_ECP_CMP(&P->Y, &grp->G.Y) == 0 &&  in ecp_mul_comb()
2575     mbedtls_mpi_free(&R->Y);  in ecp_mul_mxz()
2736         mbedtls_mpi_cmp_int(&pt->Y, 0) < 0 ||  in ecp_check_pubkey_sw()
2738         mbedtls_mpi_cmp_mpi(&pt->Y, &grp->P) >= 0) {  in ecp_check_pubkey_sw()
2748     MPI_ECP_SQR(&YY,  &pt->Y);  in ecp_check_pubkey_sw()
2788         MPI_ECP_NEG(&R->Y);  in mbedtls_ecp_mul_shortcuts()
3400         mbedtls_mpi_cmp_mpi(&pub->Q.Y, &prv->Q.Y) ||  in mbedtls_ecp_check_pub_priv()
3415         mbedtls_mpi_cmp_mpi(&Q.Y, &prv->Q.Y) ||  in mbedtls_ecp_check_pub_priv()