332 static uint32_t U0[256] = {  variable
870 static uint32_t U0[256] = {  variable
1443       U0[T4[(tmp >> 24)       ] & 0xff] ^   in aes_expand_decryption_key()
1450       U0[T4[(tmp >> 24)       ] & 0xff] ^   in aes_expand_decryption_key()
1457       U0[T4[(tmp >> 24)       ] & 0xff] ^   in aes_expand_decryption_key()
1464       U0[T4[(tmp >> 24)       ] & 0xff] ^   in aes_expand_decryption_key()
1472     c0 = U0[aes_sbox[expanded_key[i].v8[0]]]   in aes_expand_decryption_key()
1477     c1 = U0[aes_sbox[expanded_key[i].v8[4]]]   in aes_expand_decryption_key()
1482     c2 = U0[aes_sbox[expanded_key[i].v8[8]]]   in aes_expand_decryption_key()
1487     c3 = U0[aes_sbox[expanded_key[i].v8[12]]]   in aes_expand_decryption_key()
1538   column0 = U0[state->v8[0]] ^ U1[state->v8[13]]  in aes_inv_round()
1541   column1 = U0[state->v8[4]] ^ U1[state->v8[1]]  in aes_inv_round()
1544   column2 = U0[state->v8[8]] ^ U1[state->v8[5]]  in aes_inv_round()
1547   column3 = U0[state->v8[12]] ^ U1[state->v8[9]]  in aes_inv_round()
1680   column0 = U0[state->v32[0] >> 24] ^ U1[(state->v32[3] >> 16) & 0xff]  in aes_inv_round()
1683   column1 = U0[state->v32[1] >> 24] ^ U1[(state->v32[0] >> 16) & 0xff]  in aes_inv_round()
1686   column2 = U0[state->v32[2] >> 24] ^ U1[(state->v32[1] >> 16) & 0xff]  in aes_inv_round()
1689   column3 = U0[state->v32[3] >> 24] ^ U1[(state->v32[2] >> 16) & 0xff]  in aes_inv_round()
1692   column0 = U0[state->v32[0] & 0xff] ^ U1[(state->v32[1] >> 8) & 0xff]  in aes_inv_round()
1695   column1 = U0[state->v32[1] & 0xff] ^ U1[(state->v32[2] >> 8) & 0xff]  in aes_inv_round()
1698   column2 = U0[state->v32[2] & 0xff] ^ U1[(state->v32[3] >> 8) & 0xff]  in aes_inv_round()
1701   column3 = U0[state->v32[3] & 0xff] ^ U1[(state->v32[0] >> 8) & 0xff]  in aes_inv_round()
1818   column0 = U0[state->v8[0]] ^ U1[state->v8[5]]  in aes_inv_round()
1821   column1 = U0[state->v8[4]] ^ U1[state->v8[9]]  in aes_inv_round()
1824   column2 = U0[state->v8[8]] ^ U1[state->v8[13]]  in aes_inv_round()
1827   column3 = U0[state->v8[12]] ^ U1[state->v8[1]]  in aes_inv_round()