/*
Copyright (C) 1999-2007 The Botan Project. All rights reserved.

Redistribution and use in source and binary forms, for any use, with or without
modification, is permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this
list of conditions, and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice,
this list of conditions, and the following disclaimer in the documentation
and/or other materials provided with the distribution.

THIS SOFTWARE IS PROVIDED BY THE AUTHOR(S) "AS IS" AND ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ARE DISCLAIMED.

IN NO EVENT SHALL THE AUTHOR(S) OR CONTRIBUTOR(S) BE LIABLE FOR ANY DIRECT,
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/
// LICENSEHEADER_END
namespace QCA { // WRAPNS_LINE
/*************************************************
 * Comba Multiplication and Squaring Source File  *
 * (C) 1999-2007 The Botan Project                *
 *************************************************/

} // WRAPNS_LINE
#include <botan/mp_core.h>
namespace QCA { // WRAPNS_LINE
} // WRAPNS_LINE
#include <botan/mp_asmi.h>
namespace QCA { // WRAPNS_LINE

namespace Botan {

extern "C" {

/*************************************************
 * Comba 4x4 Multiplication                       *
 *************************************************/
void bigint_comba_mul4(word z[8], const word x[4], const word y[4])
{
    word w2 = 0, w1 = 0, w0 = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[0]);
    z[0] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[1]);
    word3_muladd(&w2, &w1, &w0, x[1], y[0]);
    z[1] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[2]);
    word3_muladd(&w2, &w1, &w0, x[1], y[1]);
    word3_muladd(&w2, &w1, &w0, x[2], y[0]);
    z[2] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[3]);
    word3_muladd(&w2, &w1, &w0, x[1], y[2]);
    word3_muladd(&w2, &w1, &w0, x[2], y[1]);
    word3_muladd(&w2, &w1, &w0, x[3], y[0]);
    z[3] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[1], y[3]);
    word3_muladd(&w2, &w1, &w0, x[2], y[2]);
    word3_muladd(&w2, &w1, &w0, x[3], y[1]);
    z[4] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[2], y[3]);
    word3_muladd(&w2, &w1, &w0, x[3], y[2]);
    z[5] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[3], y[3]);
    z[6] = w0;
    z[7] = w1;
}

/*************************************************
 * Comba 6x6 Multiplication                       *
 *************************************************/
void bigint_comba_mul6(word z[12], const word x[6], const word y[6])
{
    word w2 = 0, w1 = 0, w0 = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[0]);
    z[0] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[1]);
    word3_muladd(&w2, &w1, &w0, x[1], y[0]);
    z[1] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[2]);
    word3_muladd(&w2, &w1, &w0, x[1], y[1]);
    word3_muladd(&w2, &w1, &w0, x[2], y[0]);
    z[2] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[3]);
    word3_muladd(&w2, &w1, &w0, x[1], y[2]);
    word3_muladd(&w2, &w1, &w0, x[2], y[1]);
    word3_muladd(&w2, &w1, &w0, x[3], y[0]);
    z[3] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[4]);
    word3_muladd(&w2, &w1, &w0, x[1], y[3]);
    word3_muladd(&w2, &w1, &w0, x[2], y[2]);
    word3_muladd(&w2, &w1, &w0, x[3], y[1]);
    word3_muladd(&w2, &w1, &w0, x[4], y[0]);
    z[4] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[5]);
    word3_muladd(&w2, &w1, &w0, x[1], y[4]);
    word3_muladd(&w2, &w1, &w0, x[2], y[3]);
    word3_muladd(&w2, &w1, &w0, x[3], y[2]);
    word3_muladd(&w2, &w1, &w0, x[4], y[1]);
    word3_muladd(&w2, &w1, &w0, x[5], y[0]);
    z[5] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[1], y[5]);
    word3_muladd(&w2, &w1, &w0, x[2], y[4]);
    word3_muladd(&w2, &w1, &w0, x[3], y[3]);
    word3_muladd(&w2, &w1, &w0, x[4], y[2]);
    word3_muladd(&w2, &w1, &w0, x[5], y[1]);
    z[6] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[2], y[5]);
    word3_muladd(&w2, &w1, &w0, x[3], y[4]);
    word3_muladd(&w2, &w1, &w0, x[4], y[3]);
    word3_muladd(&w2, &w1, &w0, x[5], y[2]);
    z[7] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[3], y[5]);
    word3_muladd(&w2, &w1, &w0, x[4], y[4]);
    word3_muladd(&w2, &w1, &w0, x[5], y[3]);
    z[8] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[4], y[5]);
    word3_muladd(&w2, &w1, &w0, x[5], y[4]);
    z[9] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[5], y[5]);
    z[10] = w0;
    z[11] = w1;
}

/*************************************************
 * Comba 8x8 Multiplication                       *
 *************************************************/
void bigint_comba_mul8(word z[16], const word x[8], const word y[8])
{
    word w2 = 0, w1 = 0, w0 = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[0]);
    z[0] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[1]);
    word3_muladd(&w2, &w1, &w0, x[1], y[0]);
    z[1] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[2]);
    word3_muladd(&w2, &w1, &w0, x[1], y[1]);
    word3_muladd(&w2, &w1, &w0, x[2], y[0]);
    z[2] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[3]);
    word3_muladd(&w2, &w1, &w0, x[1], y[2]);
    word3_muladd(&w2, &w1, &w0, x[2], y[1]);
    word3_muladd(&w2, &w1, &w0, x[3], y[0]);
    z[3] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[4]);
    word3_muladd(&w2, &w1, &w0, x[1], y[3]);
    word3_muladd(&w2, &w1, &w0, x[2], y[2]);
    word3_muladd(&w2, &w1, &w0, x[3], y[1]);
    word3_muladd(&w2, &w1, &w0, x[4], y[0]);
    z[4] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[5]);
    word3_muladd(&w2, &w1, &w0, x[1], y[4]);
    word3_muladd(&w2, &w1, &w0, x[2], y[3]);
    word3_muladd(&w2, &w1, &w0, x[3], y[2]);
    word3_muladd(&w2, &w1, &w0, x[4], y[1]);
    word3_muladd(&w2, &w1, &w0, x[5], y[0]);
    z[5] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[6]);
    word3_muladd(&w2, &w1, &w0, x[1], y[5]);
    word3_muladd(&w2, &w1, &w0, x[2], y[4]);
    word3_muladd(&w2, &w1, &w0, x[3], y[3]);
    word3_muladd(&w2, &w1, &w0, x[4], y[2]);
    word3_muladd(&w2, &w1, &w0, x[5], y[1]);
    word3_muladd(&w2, &w1, &w0, x[6], y[0]);
    z[6] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[0], y[7]);
    word3_muladd(&w2, &w1, &w0, x[1], y[6]);
    word3_muladd(&w2, &w1, &w0, x[2], y[5]);
    word3_muladd(&w2, &w1, &w0, x[3], y[4]);
    word3_muladd(&w2, &w1, &w0, x[4], y[3]);
    word3_muladd(&w2, &w1, &w0, x[5], y[2]);
    word3_muladd(&w2, &w1, &w0, x[6], y[1]);
    word3_muladd(&w2, &w1, &w0, x[7], y[0]);
    z[7] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[1], y[7]);
    word3_muladd(&w2, &w1, &w0, x[2], y[6]);
    word3_muladd(&w2, &w1, &w0, x[3], y[5]);
    word3_muladd(&w2, &w1, &w0, x[4], y[4]);
    word3_muladd(&w2, &w1, &w0, x[5], y[3]);
    word3_muladd(&w2, &w1, &w0, x[6], y[2]);
    word3_muladd(&w2, &w1, &w0, x[7], y[1]);
    z[8] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[2], y[7]);
    word3_muladd(&w2, &w1, &w0, x[3], y[6]);
    word3_muladd(&w2, &w1, &w0, x[4], y[5]);
    word3_muladd(&w2, &w1, &w0, x[5], y[4]);
    word3_muladd(&w2, &w1, &w0, x[6], y[3]);
    word3_muladd(&w2, &w1, &w0, x[7], y[2]);
    z[9] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[3], y[7]);
    word3_muladd(&w2, &w1, &w0, x[4], y[6]);
    word3_muladd(&w2, &w1, &w0, x[5], y[5]);
    word3_muladd(&w2, &w1, &w0, x[6], y[4]);
    word3_muladd(&w2, &w1, &w0, x[7], y[3]);
    z[10] = w0;
    w0    = w1;
    w1    = w2;
    w2    = 0;

    word3_muladd(&w2, &w1, &w0, x[4], y[7]);
    word3_muladd(&w2, &w1, &w0, x[5], y[6]);
    word3_muladd(&w2, &w1, &w0, x[6], y[5]);
    word3_muladd(&w2, &w1, &w0, x[7], y[4]);
    z[11] = w0;
    w0    = w1;
    w1    = w2;
    w2    = 0;

    word3_muladd(&w2, &w1, &w0, x[5], y[7]);
    word3_muladd(&w2, &w1, &w0, x[6], y[6]);
    word3_muladd(&w2, &w1, &w0, x[7], y[5]);
    z[12] = w0;
    w0    = w1;
    w1    = w2;
    w2    = 0;

    word3_muladd(&w2, &w1, &w0, x[6], y[7]);
    word3_muladd(&w2, &w1, &w0, x[7], y[6]);
    z[13] = w0;
    w0    = w1;
    w1    = w2;
    w2    = 0;

    word3_muladd(&w2, &w1, &w0, x[7], y[7]);
    z[14] = w0;
    z[15] = w1;
}

/*************************************************
 * Comba 4x4 Squaring                             *
 *************************************************/
void bigint_comba_sqr4(word z[8], const word x[4])
{
    word w2 = 0, w1 = 0, w0 = 0;

    word3_muladd(&w2, &w1, &w0, x[0], x[0]);
    z[0] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[1]);
    z[1] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[2]);
    word3_muladd(&w2, &w1, &w0, x[1], x[1]);
    z[2] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[3]);
    word3_muladd_2(&w2, &w1, &w0, x[1], x[2]);
    z[3] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[1], x[3]);
    word3_muladd(&w2, &w1, &w0, x[2], x[2]);
    z[4] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[2], x[3]);
    z[5] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[3], x[3]);
    z[6] = w0;
    z[7] = w1;
}

/*************************************************
 * Comba 6x6 Squaring                             *
 *************************************************/
void bigint_comba_sqr6(word z[12], const word x[6])
{
    word w2 = 0, w1 = 0, w0 = 0;

    word3_muladd(&w2, &w1, &w0, x[0], x[0]);
    z[0] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[1]);
    z[1] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[2]);
    word3_muladd(&w2, &w1, &w0, x[1], x[1]);
    z[2] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[3]);
    word3_muladd_2(&w2, &w1, &w0, x[1], x[2]);
    z[3] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[4]);
    word3_muladd_2(&w2, &w1, &w0, x[1], x[3]);
    word3_muladd(&w2, &w1, &w0, x[2], x[2]);
    z[4] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[5]);
    word3_muladd_2(&w2, &w1, &w0, x[1], x[4]);
    word3_muladd_2(&w2, &w1, &w0, x[2], x[3]);
    z[5] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[1], x[5]);
    word3_muladd_2(&w2, &w1, &w0, x[2], x[4]);
    word3_muladd(&w2, &w1, &w0, x[3], x[3]);
    z[6] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[2], x[5]);
    word3_muladd_2(&w2, &w1, &w0, x[3], x[4]);
    z[7] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[3], x[5]);
    word3_muladd(&w2, &w1, &w0, x[4], x[4]);
    z[8] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[4], x[5]);
    z[9] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd(&w2, &w1, &w0, x[5], x[5]);
    z[10] = w0;
    z[11] = w1;
}

/*************************************************
 * Comba 8x8 Squaring                             *
 *************************************************/
void bigint_comba_sqr8(word z[16], const word x[8])
{
    word w2 = 0, w1 = 0, w0 = 0;

    word3_muladd(&w2, &w1, &w0, x[0], x[0]);
    z[0] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[1]);
    z[1] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[2]);
    word3_muladd(&w2, &w1, &w0, x[1], x[1]);
    z[2] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[3]);
    word3_muladd_2(&w2, &w1, &w0, x[1], x[2]);
    z[3] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[4]);
    word3_muladd_2(&w2, &w1, &w0, x[1], x[3]);
    word3_muladd(&w2, &w1, &w0, x[2], x[2]);
    z[4] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[5]);
    word3_muladd_2(&w2, &w1, &w0, x[1], x[4]);
    word3_muladd_2(&w2, &w1, &w0, x[2], x[3]);
    z[5] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[6]);
    word3_muladd_2(&w2, &w1, &w0, x[1], x[5]);
    word3_muladd_2(&w2, &w1, &w0, x[2], x[4]);
    word3_muladd(&w2, &w1, &w0, x[3], x[3]);
    z[6] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[0], x[7]);
    word3_muladd_2(&w2, &w1, &w0, x[1], x[6]);
    word3_muladd_2(&w2, &w1, &w0, x[2], x[5]);
    word3_muladd_2(&w2, &w1, &w0, x[3], x[4]);
    z[7] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[1], x[7]);
    word3_muladd_2(&w2, &w1, &w0, x[2], x[6]);
    word3_muladd_2(&w2, &w1, &w0, x[3], x[5]);
    word3_muladd(&w2, &w1, &w0, x[4], x[4]);
    z[8] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[2], x[7]);
    word3_muladd_2(&w2, &w1, &w0, x[3], x[6]);
    word3_muladd_2(&w2, &w1, &w0, x[4], x[5]);
    z[9] = w0;
    w0   = w1;
    w1   = w2;
    w2   = 0;

    word3_muladd_2(&w2, &w1, &w0, x[3], x[7]);
    word3_muladd_2(&w2, &w1, &w0, x[4], x[6]);
    word3_muladd(&w2, &w1, &w0, x[5], x[5]);
    z[10] = w0;
    w0    = w1;
    w1    = w2;
    w2    = 0;

    word3_muladd_2(&w2, &w1, &w0, x[4], x[7]);
    word3_muladd_2(&w2, &w1, &w0, x[5], x[6]);
    z[11] = w0;
    w0    = w1;
    w1    = w2;
    w2    = 0;

    word3_muladd_2(&w2, &w1, &w0, x[5], x[7]);
    word3_muladd(&w2, &w1, &w0, x[6], x[6]);
    z[12] = w0;
    w0    = w1;
    w1    = w2;
    w2    = 0;

    word3_muladd_2(&w2, &w1, &w0, x[6], x[7]);
    z[13] = w0;
    w0    = w1;
    w1    = w2;
    w2    = 0;

    word3_muladd(&w2, &w1, &w0, x[7], x[7]);
    z[14] = w0;
    z[15] = w1;
}
}

}
} // WRAPNS_LINE