-rw-r--r-- 8530 libntruprime-20240825/crypto_decode/953x6343/int16/decode.c raw
/* auto-generated; do not edit */ #include "crypto_decode.h" #include "crypto_int16.h" #include "crypto_int32.h" #define int16 crypto_int16 #define int32 crypto_int32 static int16 mullo(int16 x,int16 y) { return x*y; } static int16 mulhi(int16 x,int16 y) { return (x*(int32)y)>>16; } void crypto_decode(void *v,const unsigned char *s) { int16 *R = v; long long i; int16 a0,a1,ri,lo,s0,s1; s += crypto_decode_STRBYTES; a1 = 0; a1 += *--s; /* 0...255 */ lo = mullo(a1,-1336); a1 = mulhi(a1,-272)-mulhi(lo,12558); a1 += *--s; /* -6279...6532 */ a1 += crypto_int16_negative_mask(a1)&12558; /* 0...12557 */ R[0] = a1; /* reconstruct mod 1*[2383]+[1349] */ ri = R[0]; s0 = *--s; lo = mullo(ri,-7040); a0 = mulhi(ri,896)-mulhi(lo,2383); /* -1192...1415 */ a0 += s0; /* -1192...1670 */ a0 += crypto_int16_negative_mask(a0)&2383; /* 0...2382 */ a1 = (ri<<8)+s0-a0; a1 = mullo(a1,28079); /* invalid inputs might need reduction mod 1349 */ a1 -= 1349; a1 += crypto_int16_negative_mask(a1)&1349; R[0] = a0; R[1] = a1; /* reconstruct mod 3*[781]+[442] */ ri = R[1]; s0 = *--s; lo = mullo(ri,-21482); a0 = mulhi(ri,-226)-mulhi(lo,781); /* -447...390 */ a0 += s0; /* -447...645 */ a0 += crypto_int16_negative_mask(a0)&781; /* 0...780 */ a1 = (ri<<8)+s0-a0; a1 = mullo(a1,-31803); /* invalid inputs might need reduction mod 442 */ a1 -= 442; a1 += crypto_int16_negative_mask(a1)&442; R[2] = a0; R[3] = a1; for (i = 0;i >= 0;--i) { ri = R[i]; s0 = *--s; lo = mullo(ri,-21482); a0 = mulhi(ri,-226)-mulhi(lo,781); /* -447...390 */ a0 += s0; /* -447...645 */ a0 += crypto_int16_negative_mask(a0)&781; /* 0...780 */ a1 = (ri<<8)+s0-a0; a1 = mullo(a1,-31803); /* invalid inputs might need reduction mod 781 */ a1 -= 781; a1 += crypto_int16_negative_mask(a1)&781; R[2*i] = a0; R[2*i+1] = a1; } /* reconstruct mod 7*[447]+[253] */ ri = R[3]; s0 = *--s; lo = mullo(ri,28003); a0 = mulhi(ri,-35)-mulhi(lo,447); /* -233...223 */ a0 += s0; /* -233...478 */ a0 -= 447; /* -680..>31 */ a0 += crypto_int16_negative_mask(a0)&447; /* -233...446 */ a0 += crypto_int16_negative_mask(a0)&447; /* 0...446 */ a1 = (ri<<8)+s0-a0; a1 = mullo(a1,-4545); /* invalid inputs might need reduction mod 253 */ a1 -= 253; a1 += crypto_int16_negative_mask(a1)&253; R[6] = a0; R[7] = a1; for (i = 2;i >= 0;--i) { ri = R[i]; s0 = *--s; lo = mullo(ri,28003); a0 = mulhi(ri,-35)-mulhi(lo,447); /* -233...223 */ a0 += s0; /* -233...478 */ a0 -= 447; /* -680..>31 */ a0 += crypto_int16_negative_mask(a0)&447; /* -233...446 */ a0 += crypto_int16_negative_mask(a0)&447; /* 0...446 */ a1 = (ri<<8)+s0-a0; a1 = mullo(a1,-4545); /* invalid inputs might need reduction mod 447 */ a1 -= 447; a1 += crypto_int16_negative_mask(a1)&447; R[2*i] = a0; R[2*i+1] = a1; } /* reconstruct mod 14*[338]+[253] */ R[14] = R[7]; for (i = 6;i >= 0;--i) { ri = R[i]; s0 = *--s; lo = mullo(ri,15899); a0 = mulhi(ri,-90)-mulhi(lo,338); /* -192...169 */ a0 += s0; /* -192...424 */ a0 -= 338; /* -530..>86 */ a0 += crypto_int16_negative_mask(a0)&338; /* -192...337 */ a0 += crypto_int16_negative_mask(a0)&338; /* 0...337 */ a1 = (ri<<7)+((s0-a0)>>1); a1 = mullo(a1,-23655); /* invalid inputs might need reduction mod 338 */ a1 -= 338; a1 += crypto_int16_negative_mask(a1)&338; R[2*i] = a0; R[2*i+1] = a1; } /* reconstruct mod 29*[4701]+[3519] */ ri = R[14]; s1 = *--s; s0 = *--s; lo = mullo(ri,-3569); a0 = mulhi(ri,-653)-mulhi(lo,4701); /* -2514...2350 */ a0 += s1; /* -2514...2605 */ lo = mullo(a0,-3569); a0 = mulhi(a0,-653)-mulhi(lo,4701); /* -2377...2375 */ a0 += s0; /* -2377...2630 */ a0 += crypto_int16_negative_mask(a0)&4701; /* 0...4700 */ a1 = (s1<<8)+s0-a0; a1 = mullo(a1,20981); /* invalid inputs might need reduction mod 3519 */ a1 -= 3519; a1 += crypto_int16_negative_mask(a1)&3519; R[28] = a0; R[29] = a1; for (i = 13;i >= 0;--i) { ri = R[i]; s1 = *--s; s0 = *--s; lo = mullo(ri,-3569); a0 = mulhi(ri,-653)-mulhi(lo,4701); /* -2514...2350 */ a0 += s1; /* -2514...2605 */ lo = mullo(a0,-3569); a0 = mulhi(a0,-653)-mulhi(lo,4701); /* -2377...2375 */ a0 += s0; /* -2377...2630 */ a0 += crypto_int16_negative_mask(a0)&4701; /* 0...4700 */ a1 = (s1<<8)+s0-a0; a1 = mullo(a1,20981); /* invalid inputs might need reduction mod 4701 */ a1 -= 4701; a1 += crypto_int16_negative_mask(a1)&4701; R[2*i] = a0; R[2*i+1] = a1; } /* reconstruct mod 59*[1097]+[821] */ ri = R[29]; s0 = *--s; lo = mullo(ri,-15294); a0 = mulhi(ri,-302)-mulhi(lo,1097); /* -624...548 */ a0 += s0; /* -624...803 */ a0 += crypto_int16_negative_mask(a0)&1097; /* 0...1096 */ a1 = (ri<<8)+s0-a0; a1 = mullo(a1,11769); /* invalid inputs might need reduction mod 821 */ a1 -= 821; a1 += crypto_int16_negative_mask(a1)&821; R[58] = a0; R[59] = a1; for (i = 28;i >= 0;--i) { ri = R[i]; s0 = *--s; lo = mullo(ri,-15294); a0 = mulhi(ri,-302)-mulhi(lo,1097); /* -624...548 */ a0 += s0; /* -624...803 */ a0 += crypto_int16_negative_mask(a0)&1097; /* 0...1096 */ a1 = (ri<<8)+s0-a0; a1 = mullo(a1,11769); /* invalid inputs might need reduction mod 1097 */ a1 -= 1097; a1 += crypto_int16_negative_mask(a1)&1097; R[2*i] = a0; R[2*i+1] = a1; } /* reconstruct mod 119*[8476]+[6343] */ ri = R[59]; s1 = *--s; s0 = *--s; lo = mullo(ri,-1979); a0 = mulhi(ri,3212)-mulhi(lo,8476); /* -4238...5041 */ a0 += s1; /* -4238...5296 */ lo = mullo(a0,-1979); a0 = mulhi(a0,3212)-mulhi(lo,8476); /* -4446...4497 */ a0 += s0; /* -4446...4752 */ a0 += crypto_int16_negative_mask(a0)&8476; /* 0...8475 */ a1 = (ri<<14)+(s1<<6)+((s0-a0)>>2); a1 = mullo(a1,8567); /* invalid inputs might need reduction mod 6343 */ a1 -= 6343; a1 += crypto_int16_negative_mask(a1)&6343; R[118] = a0; R[119] = a1; for (i = 58;i >= 0;--i) { ri = R[i]; s1 = *--s; s0 = *--s; lo = mullo(ri,-1979); a0 = mulhi(ri,3212)-mulhi(lo,8476); /* -4238...5041 */ a0 += s1; /* -4238...5296 */ lo = mullo(a0,-1979); a0 = mulhi(a0,3212)-mulhi(lo,8476); /* -4446...4497 */ a0 += s0; /* -4446...4752 */ a0 += crypto_int16_negative_mask(a0)&8476; /* 0...8475 */ a1 = (ri<<14)+(s1<<6)+((s0-a0)>>2); a1 = mullo(a1,8567); /* invalid inputs might need reduction mod 8476 */ a1 -= 8476; a1 += crypto_int16_negative_mask(a1)&8476; R[2*i] = a0; R[2*i+1] = a1; } /* reconstruct mod 238*[1473]+[6343] */ R[238] = R[119]; for (i = 118;i >= 0;--i) { ri = R[i]; s0 = *--s; lo = mullo(ri,-11390); a0 = mulhi(ri,-254)-mulhi(lo,1473); /* -800...736 */ a0 += s0; /* -800...991 */ a0 += crypto_int16_negative_mask(a0)&1473; /* 0...1472 */ a1 = (ri<<8)+s0-a0; a1 = mullo(a1,2625); /* invalid inputs might need reduction mod 1473 */ a1 -= 1473; a1 += crypto_int16_negative_mask(a1)&1473; R[2*i] = a0; R[2*i+1] = a1; } /* reconstruct mod 476*[614]+[6343] */ R[476] = R[238]; for (i = 237;i >= 0;--i) { ri = R[i]; s0 = *--s; lo = mullo(ri,-27324); a0 = mulhi(ri,280)-mulhi(lo,614); /* -307...377 */ a0 += s0; /* -307...632 */ a0 -= 614; /* -921..>18 */ a0 += crypto_int16_negative_mask(a0)&614; /* -307...613 */ a0 += crypto_int16_negative_mask(a0)&614; /* 0...613 */ a1 = (ri<<7)+((s0-a0)>>1); a1 = mullo(a1,-7685); /* invalid inputs might need reduction mod 614 */ a1 -= 614; a1 += crypto_int16_negative_mask(a1)&614; R[2*i] = a0; R[2*i+1] = a1; } /* reconstruct mod 953*[6343] */ R[952] = R[476]-3171; for (i = 475;i >= 0;--i) { ri = R[i]; s1 = *--s; s0 = *--s; lo = mullo(ri,-2645); a0 = mulhi(ri,-19)-mulhi(lo,6343); /* -3177...3171 */ a0 += s1; /* -3177...3426 */ lo = mullo(a0,-2645); a0 = mulhi(a0,-19)-mulhi(lo,6343); /* -3173...3172 */ a0 += s0; /* -3173...3427 */ a0 += crypto_int16_negative_mask(a0)&6343; /* 0...6342 */ a1 = (s1<<8)+s0-a0; a1 = mullo(a1,10487); /* invalid inputs might need reduction mod 6343 */ a1 -= 6343; a1 += crypto_int16_negative_mask(a1)&6343; R[2*i] = a0-3171; R[2*i+1] = a1-3171; } }