1207         MBEDTLS_MPI_CHK(mbedtls_mpi_sub_mpi(&tmp, &grp->P, (X)));      \
1208         MBEDTLS_MPI_CHK(mbedtls_mpi_safe_cond_assign((X), &tmp,          \
1466     mbedtls_mpi tmp;  in ecp_safe_invert_jac()  local
1467     mbedtls_mpi_init(&tmp);  in ecp_safe_invert_jac()
1472     mbedtls_mpi_free(&tmp);  in ecp_safe_invert_jac()
1492                           mbedtls_mpi tmp[4])  in ecp_double_jac()
1512         MPI_ECP_SQR(&tmp[1],  &P->Z);  in ecp_double_jac()
1513         MPI_ECP_ADD(&tmp[2],  &P->X,  &tmp[1]);  in ecp_double_jac()
1514         MPI_ECP_SUB(&tmp[3],  &P->X,  &tmp[1]);  in ecp_double_jac()
1515         MPI_ECP_MUL(&tmp[1],  &tmp[2],     &tmp[3]);  in ecp_double_jac()
1516         MPI_ECP_MUL_INT(&tmp[0],  &tmp[1],     3);  in ecp_double_jac()
1519         MPI_ECP_SQR(&tmp[1],  &P->X);  in ecp_double_jac()
1520         MPI_ECP_MUL_INT(&tmp[0],  &tmp[1],  3);  in ecp_double_jac()
1525             MPI_ECP_SQR(&tmp[1],  &P->Z);  in ecp_double_jac()
1526             MPI_ECP_SQR(&tmp[2],  &tmp[1]);  in ecp_double_jac()
1527             MPI_ECP_MUL(&tmp[1],  &tmp[2],     &grp->A);  in ecp_double_jac()
1528             MPI_ECP_ADD(&tmp[0],  &tmp[0],     &tmp[1]);  in ecp_double_jac()
1533     MPI_ECP_SQR(&tmp[2],  &P->Y);  in ecp_double_jac()
1534     MPI_ECP_SHIFT_L(&tmp[2],  1);  in ecp_double_jac()
1535     MPI_ECP_MUL(&tmp[1],  &P->X, &tmp[2]);  in ecp_double_jac()
1536     MPI_ECP_SHIFT_L(&tmp[1],  1);  in ecp_double_jac()
1539     MPI_ECP_SQR(&tmp[3],  &tmp[2]);  in ecp_double_jac()
1540     MPI_ECP_SHIFT_L(&tmp[3],  1);  in ecp_double_jac()
1543     MPI_ECP_SQR(&tmp[2],  &tmp[0]);  in ecp_double_jac()
1544     MPI_ECP_SUB(&tmp[2],  &tmp[2], &tmp[1]);  in ecp_double_jac()
1545     MPI_ECP_SUB(&tmp[2],  &tmp[2], &tmp[1]);  in ecp_double_jac()
1548     MPI_ECP_SUB(&tmp[1],  &tmp[1],     &tmp[2]);  in ecp_double_jac()
1549     MPI_ECP_MUL(&tmp[1],  &tmp[1],     &tmp[0]);  in ecp_double_jac()
1550     MPI_ECP_SUB(&tmp[1],  &tmp[1],     &tmp[3]);  in ecp_double_jac()
1553     MPI_ECP_MUL(&tmp[3],  &P->Y,  &P->Z);  in ecp_double_jac()
1554     MPI_ECP_SHIFT_L(&tmp[3],  1);  in ecp_double_jac()
1557     MPI_ECP_MOV(&R->X, &tmp[2]);  in ecp_double_jac()
1558     MPI_ECP_MOV(&R->Y, &tmp[1]);  in ecp_double_jac()
1559     MPI_ECP_MOV(&R->Z, &tmp[3]);  in ecp_double_jac()
1589                          mbedtls_mpi tmp[4])  in ecp_add_mixed()
1635     MPI_ECP_SQR(&tmp[0], &P->Z);  in ecp_add_mixed()
1636     MPI_ECP_MUL(&tmp[1], &tmp[0], &P->Z);  in ecp_add_mixed()
1637     MPI_ECP_MUL(&tmp[0], &tmp[0], &Q->X);  in ecp_add_mixed()
1638     MPI_ECP_MUL(&tmp[1], &tmp[1], &Q->Y);  in ecp_add_mixed()
1639     MPI_ECP_SUB(&tmp[0], &tmp[0], &P->X);  in ecp_add_mixed()
1640     MPI_ECP_SUB(&tmp[1], &tmp[1], &P->Y);  in ecp_add_mixed()
1643     if (MPI_ECP_CMP_INT(&tmp[0], 0) == 0) {  in ecp_add_mixed()
1644         if (MPI_ECP_CMP_INT(&tmp[1], 0) == 0) {  in ecp_add_mixed()
1645             ret = ecp_double_jac(grp, R, P, tmp);  in ecp_add_mixed()
1654     MPI_ECP_MUL(Z,        &P->Z,    &tmp[0]);  in ecp_add_mixed()
1655     MPI_ECP_SQR(&tmp[2],  &tmp[0]);  in ecp_add_mixed()
1656     MPI_ECP_MUL(&tmp[3],  &tmp[2],  &tmp[0]);  in ecp_add_mixed()
1657     MPI_ECP_MUL(&tmp[2],  &tmp[2],  &P->X);  in ecp_add_mixed()
1659     MPI_ECP_MOV(&tmp[0], &tmp[2]);  in ecp_add_mixed()
1660     MPI_ECP_SHIFT_L(&tmp[0], 1);  in ecp_add_mixed()
1663     MPI_ECP_SQR(X,        &tmp[1]);  in ecp_add_mixed()
1664     MPI_ECP_SUB(X,        X,        &tmp[0]);  in ecp_add_mixed()
1665     MPI_ECP_SUB(X,        X,        &tmp[3]);  in ecp_add_mixed()
1666     MPI_ECP_SUB(&tmp[2],  &tmp[2],  X);  in ecp_add_mixed()
1667     MPI_ECP_MUL(&tmp[2],  &tmp[2],  &tmp[1]);  in ecp_add_mixed()
1668     MPI_ECP_MUL(&tmp[3],  &tmp[3],  &P->Y);  in ecp_add_mixed()
1670     MPI_ECP_SUB(Y,     &tmp[2],     &tmp[3]);  in ecp_add_mixed()
1864     mbedtls_mpi tmp[4];  in ecp_precompute_comb()  local
1866     mpi_init_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_precompute_comb()
1920         MBEDTLS_MPI_CHK(ecp_double_jac(grp, cur, cur, tmp));  in ecp_precompute_comb()
1962             MBEDTLS_MPI_CHK(ecp_add_mixed(grp, &T[i + j], &T[j], &T[i], tmp));  in ecp_precompute_comb()
1997     mpi_free_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_precompute_comb()
2056     mbedtls_mpi tmp[4];  in ecp_mul_comb_core()  local
2060     mpi_init_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_mul_comb_core()
2092         MBEDTLS_MPI_CHK(ecp_double_jac(grp, R, R, tmp));  in ecp_mul_comb_core()
2094         MBEDTLS_MPI_CHK(ecp_add_mixed(grp, R, R, &Txi, tmp));  in ecp_mul_comb_core()
2100     mpi_free_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_mul_comb_core()
2559     mbedtls_mpi tmp[4];  in ecp_mul_mxz()  local
2562     mpi_init_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_mul_mxz()
2596         MBEDTLS_MPI_CHK(ecp_double_add_mxz(grp, R, &RP, R, &RP, &PX, tmp));  in ecp_mul_mxz()
2618     mpi_free_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in ecp_mul_mxz()
2776     mbedtls_mpi tmp;  in mbedtls_ecp_mul_shortcuts()  local
2777     mbedtls_mpi_init(&tmp);  in mbedtls_ecp_mul_shortcuts()
2795     mbedtls_mpi_free(&tmp);  in mbedtls_ecp_mul_shortcuts()
2814     mbedtls_mpi tmp[4];  in mbedtls_ecp_muladd_restartable()  local
2823     mpi_init_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in mbedtls_ecp_muladd_restartable()
2870     MBEDTLS_MPI_CHK(ecp_add_mixed(grp, pR, pmP, pR, tmp));  in mbedtls_ecp_muladd_restartable()
2889     mpi_free_many(tmp, sizeof(tmp) / sizeof(mbedtls_mpi));  in mbedtls_ecp_muladd_restartable()