if set is -1, append to previous set, 0 'a new one', and 1, * prepend to the guy we are about to stomp on. */

Not strictly speaking an "up_ref" as a STACK doesn't have a reference * count but it has the same effect by duping the STACK and upping the ref * of

Given an ASN1_ITEM CHOICE type return the selector value */

bit_range returns a |uint8_t| with bits |start|, inclusive, to |end|, * exclusive, set. */

constant_time_select returns (mask & a) | (~mask & b). When |mask| is all 1s * or all 0s (as returned by the methods above), the select methods retur

copy_small_conditional copies in to out iff mask is all ones. */

BN_mod_exp_mont_consttime() stores the precomputed powers in a specific * layout so that accessing any of these table values shows the same access *

discardHandshakeBuffer is called when there is no more need to buffer the entirety of the handshake messages.

Return up to 'len' payload bytes received in 'type' records. * 'type' is one of the following: * * - SSL3_RT_HANDSHAKE (when ssl3_get_message ca

encrypt encrypts and macs the data in b.

Compare while ASCII ignoring case. */

Find the difference of two numbers: output = in - output * (note the order of the arguments!) */

Replace (f,g) with (g,f) if b == 1; * replace (f,g) with (f,g) if b == 0. * * Preconditions: b in {0,1}. */

An alternative felem_diff for larger inputs |in| * felem_diff_zero107 subtracts |in| from |out| * On entry: * in[i] < 2^106 * On exit: * out[

Multiply a field element by a scalar: out = out * scalar * The scalars we actually use are small, so results fit without overflow */

To preserve endianness when using BN_bn2bin and BN_bin2bn. */

To preserve endianness when using BN_bn2bin and BN_bin2bn */

Sum two numbers: output += in */

r = p + q */

r = p */

See draft-agl-tls-chacha20poly1305-04 and draft-irtf-cfrg-chacha20-poly1305-10. Where the two differ, the draft-agl-tls-chacha20poly1305-04 variant is