1009 	struct ecc_point *pk;  in ecc_make_pub_key()  local
1020 	pk = ecc_alloc_point(ndigits);  in ecc_make_pub_key()
1021 	if (!pk) {  in ecc_make_pub_key()
1026 	ecc_point_mult(pk, &curve->g, priv, NULL, curve, ndigits);  in ecc_make_pub_key()
1027 	if (ecc_point_is_zero(pk)) {  in ecc_make_pub_key()
1032 	ecc_swap_digits(pk->x, public_key, ndigits);  in ecc_make_pub_key()
1033 	ecc_swap_digits(pk->y, &public_key[ndigits], ndigits);  in ecc_make_pub_key()
1036 	ecc_free_point(pk);  in ecc_make_pub_key()
1043 				       struct ecc_point *pk)  in ecc_is_pubkey_valid_partial()  argument
1048 	if (ecc_point_is_zero(pk))  in ecc_is_pubkey_valid_partial()
1052 	if (vli_cmp(curve->p, pk->x, pk->ndigits) != 1)  in ecc_is_pubkey_valid_partial()
1054 	if (vli_cmp(curve->p, pk->y, pk->ndigits) != 1)  in ecc_is_pubkey_valid_partial()
1058 	vli_mod_square_fast(yy, pk->y, curve->p, pk->ndigits); /* y^2 */  in ecc_is_pubkey_valid_partial()
1059 	vli_mod_square_fast(xxx, pk->x, curve->p, pk->ndigits); /* x^2 */  in ecc_is_pubkey_valid_partial()
1060 	vli_mod_mult_fast(xxx, xxx, pk->x, curve->p, pk->ndigits); /* x^3 */  in ecc_is_pubkey_valid_partial()
1061 	vli_mod_mult_fast(w, curve->a, pk->x, curve->p, pk->ndigits); /* a·x */  in ecc_is_pubkey_valid_partial()
1062 	vli_mod_add(w, w, curve->b, curve->p, pk->ndigits); /* a·x + b */  in ecc_is_pubkey_valid_partial()
1063 	vli_mod_add(w, w, xxx, curve->p, pk->ndigits); /* x^3 + a·x + b */  in ecc_is_pubkey_valid_partial()
1064 	if (vli_cmp(yy, w, pk->ndigits) != 0) /* Equation */  in ecc_is_pubkey_valid_partial()
1076 	struct ecc_point *product, *pk;  in crypto_ecdh_shared_secret()  local
1092 	pk = ecc_alloc_point(ndigits);  in crypto_ecdh_shared_secret()
1093 	if (!pk) {  in crypto_ecdh_shared_secret()
1098 	ecc_swap_digits(public_key, pk->x, ndigits);  in crypto_ecdh_shared_secret()
1099 	ecc_swap_digits(&public_key[ndigits], pk->y, ndigits);  in crypto_ecdh_shared_secret()
1100 	ret = ecc_is_pubkey_valid_partial(curve, pk);  in crypto_ecdh_shared_secret()
1112 	ecc_point_mult(product, pk, priv, rand_z, curve, ndigits);  in crypto_ecdh_shared_secret()
1121 	ecc_free_point(pk);  in crypto_ecdh_shared_secret()