70     uint32_t acc0, acc1, acc2, acc3, acc4;  in poly1305_process()  local
87     acc2 = ctx->acc[2];  in poly1305_process()
102         d2  += (uint64_t) acc2 + (d1 >> 32U);  in poly1305_process()
106         acc2 = (uint32_t) d2;  in poly1305_process()
113              mul64(acc2, rs2) +  in poly1305_process()
117              mul64(acc2, rs3) +  in poly1305_process()
122              mul64(acc2, r0) +  in poly1305_process()
127              mul64(acc2, r1) +  in poly1305_process()
138         acc2 = (uint32_t) d2;  in poly1305_process()
147         d0 = (uint64_t) acc2 + (d0 >> 32U);  in poly1305_process()
148         acc2 = (uint32_t) d0;  in poly1305_process()
159     ctx->acc[2] = acc2;  in poly1305_process()
176     uint32_t acc0, acc1, acc2, acc3, acc4;  in poly1305_compute_mac()  local
182     acc2 = ctx->acc[2];  in poly1305_compute_mac()
196     d  = ((uint64_t) acc2 + (d >> 32));  in poly1305_compute_mac()
209     acc2 = (acc2 & mask_inv) | (g2 & mask);  in poly1305_compute_mac()
217     d = (uint64_t) acc2 + ctx->s[2] + (d >> 32U);  in poly1305_compute_mac()
218     acc2 = (uint32_t) d;  in poly1305_compute_mac()
224     MBEDTLS_PUT_UINT32_LE(acc2, mac,  8);  in poly1305_compute_mac()