30 static uint64_t mul64(uint32_t a, uint32_t b)  in mul64()
40     const uint64_t me = (uint64_t) ((uint32_t) ah * bl) + (uint32_t) al * bh;  in mul64()
43     return lo + (me << 16) + ((uint64_t) hi << 32);  in mul64()
46 static inline uint64_t mul64(uint32_t a, uint32_t b)  in mul64()
48     return (uint64_t) a * b;  in mul64()
69     uint64_t d0, d1, d2, d3;  in poly1305_process()
100         d0  += (uint64_t) acc0;  in poly1305_process()
101         d1  += (uint64_t) acc1 + (d0 >> 32U);  in poly1305_process()
102         d2  += (uint64_t) acc2 + (d1 >> 32U);  in poly1305_process()
103         d3  += (uint64_t) acc3 + (d2 >> 32U);  in poly1305_process()
142         d0 = (uint64_t) acc0 + (acc4 >> 2) + (acc4 & 0xFFFFFFFCU);  in poly1305_process()
145         d0 = (uint64_t) acc1 + (d0 >> 32U);  in poly1305_process()
147         d0 = (uint64_t) acc2 + (d0 >> 32U);  in poly1305_process()
149         d0 = (uint64_t) acc3 + (d0 >> 32U);  in poly1305_process()
151         d0 = (uint64_t) acc4 + (d0 >> 32U);  in poly1305_process()
174     uint64_t d;  in poly1305_compute_mac()
192     d  = ((uint64_t) acc0 + 5U);  in poly1305_compute_mac()
194     d  = ((uint64_t) acc1 + (d >> 32));  in poly1305_compute_mac()
196     d  = ((uint64_t) acc2 + (d >> 32));  in poly1305_compute_mac()
198     d  = ((uint64_t) acc3 + (d >> 32));  in poly1305_compute_mac()
213     d = (uint64_t) acc0 + ctx->s[0];  in poly1305_compute_mac()
215     d = (uint64_t) acc1 + ctx->s[1] + (d >> 32U);  in poly1305_compute_mac()
217     d = (uint64_t) acc2 + ctx->s[2] + (d >> 32U);  in poly1305_compute_mac()