796     unsigned i, k, tz, remaining;  in process_ad()  local
852             k = 0;  in process_ad()
864                 k = 4;  in process_ad()
869                 ta[k] = xor_block(ad_offset, adp[k]);  in process_ad()
870                 ad_offset = xor_block(ad_offset, getL(ctx, ntz(k + 2)));  in process_ad()
871                 ta[k + 1] = xor_block(ad_offset, adp[k + 1]);  in process_ad()
873                 k += 2;  in process_ad()
877                 ta[k] = xor_block(ad_offset, adp[k]);  in process_ad()
879                 ++k;  in process_ad()
884                 memcpy(tmp.u8, adp + k, remaining);  in process_ad()
886                 ta[k] = xor_block(ad_offset, tmp.bl);  in process_ad()
887                 ++k;  in process_ad()
889             AES_ecb_encrypt_blks(ta, k, &ctx->encrypt_key);  in process_ad()
890             switch (k) {  in process_ad()
925     unsigned i, k;  in ae_encrypt()  local
1007         k = 0; /* How many blocks in ta[] need ECBing */  in ae_encrypt()
1024                 k = 4;  in ae_encrypt()
1028                 oa[k] = xor_block(offset, ctx->L[0]);  in ae_encrypt()
1029                 ta[k] = xor_block(oa[k], ptp[k]);  in ae_encrypt()
1030                 checksum = xor_block(checksum, ptp[k]);  in ae_encrypt()
1031                 offset = oa[k + 1] = xor_block(oa[k], ctx->L[1]);  in ae_encrypt()
1032                 ta[k + 1] = xor_block(offset, ptp[k + 1]);  in ae_encrypt()
1033                 checksum = xor_block(checksum, ptp[k + 1]);  in ae_encrypt()
1035                 k += 2;  in ae_encrypt()
1038                 offset = oa[k] = xor_block(offset, ctx->L[0]);  in ae_encrypt()
1039                 ta[k] = xor_block(offset, ptp[k]);  in ae_encrypt()
1040                 checksum = xor_block(checksum, ptp[k]);  in ae_encrypt()
1042                 ++k;  in ae_encrypt()
1046                 memcpy(tmp.u8, ptp + k, remaining);  in ae_encrypt()
1049                 ta[k] = offset = xor_block(offset, ctx->Lstar);  in ae_encrypt()
1050                 ++k;  in ae_encrypt()
1054         ta[k] = xor_block(offset, checksum);      /* Part of tag gen */  in ae_encrypt()
1055         AES_ecb_encrypt_blks(ta, k + 1, &ctx->encrypt_key);  in ae_encrypt()
1056         offset = xor_block(ta[k], ctx->ad_checksum); /* Part of tag gen */  in ae_encrypt()
1058             --k;  in ae_encrypt()
1059             tmp.bl = xor_block(tmp.bl, ta[k]);  in ae_encrypt()
1060             memcpy(ctp + k, tmp.u8, remaining);  in ae_encrypt()
1062         switch (k) {  in ae_encrypt()
1136     unsigned i, k;  in ae_decrypt()  local
1225         k = 0; /* How many blocks in ta[] need ECBing */  in ae_decrypt()
1238                 k = 4;  in ae_decrypt()
1242                 oa[k] = xor_block(offset, ctx->L[0]);  in ae_decrypt()
1243                 ta[k] = xor_block(oa[k], ctp[k]);  in ae_decrypt()
1244                 offset = oa[k + 1] = xor_block(oa[k], ctx->L[1]);  in ae_decrypt()
1245                 ta[k + 1] = xor_block(offset, ctp[k + 1]);  in ae_decrypt()
1247                 k += 2;  in ae_decrypt()
1250                 offset = oa[k] = xor_block(offset, ctx->L[0]);  in ae_decrypt()
1251                 ta[k] = xor_block(offset, ctp[k]);  in ae_decrypt()
1253                 ++k;  in ae_decrypt()
1260                 memcpy(tmp.u8, ctp + k, remaining);  in ae_decrypt()
1263                 memcpy(ptp + k, tmp.u8, remaining);  in ae_decrypt()
1267         AES_ecb_decrypt_blks(ta, k, &ctx->decrypt_key);  in ae_decrypt()
1268         switch (k) {  in ae_decrypt()