diff --git a/SM2-WWMM-(2).md b/SM2-WWMM-(2).md index 51e9d37..67d541d 100644 --- a/SM2-WWMM-(2).md +++ b/SM2-WWMM-(2).md @@ -106,15 +106,15 @@ $t_0=t_0 - a_1$ MOVQ acc0, DX \ SHLQ $32, AX \ // AX = L(acc0 * 2^32), low part SHRQ $32, DX \ // DX = H(acc0 * 2^32), high part - \// calculate the negative part: [0, -0x100000000, 0, -0x100000000] * acc0 + \// calculate the negative part: [1, -0x100000000, 0, -0x100000000] * acc0 SUBQ AX, acc1 \ SBBQ DX, acc2 \ SBBQ AX, acc3 \ MOVQ acc0, AX \ SBBQ DX, acc0 \ - \ // calculate the positive part: [1, 0, 0, 1] * acc0 + [0, acc3, acc2, acc1], + \ // calculate the positive part: [0, 0, 0, 1] * AX + [acc0, acc3, acc2, acc1], \ // due to (-1) * acc0 + acc0 == 0, so last lowest lamb 0 is dropped directly, no carry. - ADDQ AX, acc1 \ // acc1' = L (acc0 + acc1) + ADDQ AX, acc1 \ // acc1' = L (AX+ acc1) ADCQ $0, acc2 \ // acc2' = acc2 + carry1 ADCQ $0, acc3 \ // acc3' = acc3 + carry2 ADCQ $0, acc0 \ // acc0' = acc0 + carry3