1370   expanded_key[0].v32[0] = key->v32[0];  in aes_expand_encryption_key()
1371   expanded_key[0].v32[1] = key->v32[1];  in aes_expand_encryption_key()
1372   expanded_key[0].v32[2] = key->v32[2];  in aes_expand_encryption_key()
1373   expanded_key[0].v32[3] = key->v32[3];  in aes_expand_encryption_key()
1389     expanded_key[i].v32[0] ^=  expanded_key[i-1].v32[0];  in aes_expand_encryption_key()
1394     expanded_key[i].v32[1] =  in aes_expand_encryption_key()
1395       expanded_key[i].v32[0] ^ expanded_key[i-1].v32[1];  in aes_expand_encryption_key()
1397     expanded_key[i].v32[2] =  in aes_expand_encryption_key()
1398       expanded_key[i].v32[1] ^ expanded_key[i-1].v32[2];  in aes_expand_encryption_key()
1400     expanded_key[i].v32[3] =  in aes_expand_encryption_key()
1401       expanded_key[i].v32[2] ^ expanded_key[i-1].v32[3];  in aes_expand_encryption_key()
1441     tmp = expanded_key[i].v32[0];  in aes_expand_decryption_key()
1442     expanded_key[i].v32[0] =   in aes_expand_decryption_key()
1448     tmp = expanded_key[i].v32[1];  in aes_expand_decryption_key()
1449     expanded_key[i].v32[1] =   in aes_expand_decryption_key()
1455     tmp = expanded_key[i].v32[2];  in aes_expand_decryption_key()
1456     expanded_key[i].v32[2] =   in aes_expand_decryption_key()
1462     tmp = expanded_key[i].v32[3];  in aes_expand_decryption_key()
1463     expanded_key[i].v32[3] =   in aes_expand_decryption_key()
1492     expanded_key[i].v32[0] = c0;  in aes_expand_decryption_key()
1493     expanded_key[i].v32[1] = c1;  in aes_expand_decryption_key()
1494     expanded_key[i].v32[2] = c2;  in aes_expand_decryption_key()
1495     expanded_key[i].v32[3] = c3;  in aes_expand_decryption_key()
1523   state->v32[0] = column0 ^ round_key->v32[0];  in aes_round()
1524   state->v32[1] = column1 ^ round_key->v32[1];  in aes_round()
1525   state->v32[2] = column2 ^ round_key->v32[2];  in aes_round()
1526   state->v32[3] = column3 ^ round_key->v32[3];  in aes_round()
1550   state->v32[0] = column0 ^ round_key->v32[0];  in aes_inv_round()
1551   state->v32[1] = column1 ^ round_key->v32[1];  in aes_inv_round()
1552   state->v32[2] = column2 ^ round_key->v32[2];  in aes_inv_round()
1553   state->v32[3] = column3 ^ round_key->v32[3];  in aes_inv_round()
1639   column0 = T0[state->v32[0] >> 24] ^ T1[(state->v32[1] >> 16) & 0xff]  in aes_round()
1640     ^ T2[(state->v32[2] >> 8) & 0xff] ^ T3[state->v32[3] & 0xff];  in aes_round()
1642   column1 = T0[state->v32[1] >> 24] ^ T1[(state->v32[2] >> 16) & 0xff]  in aes_round()
1643     ^ T2[(state->v32[3] >> 8) & 0xff] ^ T3[state->v32[0] & 0xff];  in aes_round()
1645   column2 = T0[state->v32[2] >> 24] ^ T1[(state->v32[3] >> 16) & 0xff]  in aes_round()
1646     ^ T2[(state->v32[0] >> 8) & 0xff] ^ T3[state->v32[1] & 0xff];  in aes_round()
1648   column3 = T0[state->v32[3] >> 24] ^ T1[(state->v32[0] >> 16) & 0xff]  in aes_round()
1649     ^ T2[(state->v32[1] >> 8) & 0xff] ^ T3[state->v32[2] & 0xff];  in aes_round()
1651   column0 = T0[state->v32[0] & 0xff] ^ T1[(state->v32[1] >> 8) & 0xff]  in aes_round()
1652 	^ T2[(state->v32[2] >> 16) & 0xff] ^ T3[state->v32[3] >> 24];  in aes_round()
1654   column1 = T0[state->v32[1] & 0xff] ^ T1[(state->v32[2] >> 8) & 0xff]  in aes_round()
1655 	^ T2[(state->v32[3] >> 16) & 0xff] ^ T3[state->v32[0] >> 24];  in aes_round()
1657   column2 = T0[state->v32[2] & 0xff] ^ T1[(state->v32[3] >> 8) & 0xff]  in aes_round()
1658 	^ T2[(state->v32[0] >> 16) & 0xff] ^ T3[state->v32[1] >> 24];  in aes_round()
1660   column3 = T0[state->v32[3] & 0xff] ^ T1[(state->v32[0] >> 8) & 0xff]  in aes_round()
1661 	^ T2[(state->v32[1] >> 16) & 0xff] ^ T3[state->v32[2] >> 24];  in aes_round()
1664   state->v32[0] = column0 ^ round_key->v32[0];  in aes_round()
1665   state->v32[1] = column1 ^ round_key->v32[1];  in aes_round()
1666   state->v32[2] = column2 ^ round_key->v32[2];  in aes_round()
1667   state->v32[3] = column3 ^ round_key->v32[3];  in aes_round()
1680   column0 = U0[state->v32[0] >> 24] ^ U1[(state->v32[3] >> 16) & 0xff]  in aes_inv_round()
1681     ^ U2[(state->v32[2] >> 8) & 0xff] ^ U3[state->v32[1] & 0xff];  in aes_inv_round()
1683   column1 = U0[state->v32[1] >> 24] ^ U1[(state->v32[0] >> 16) & 0xff]  in aes_inv_round()
1684     ^ U2[(state->v32[3] >> 8) & 0xff] ^ U3[state->v32[2] & 0xff];  in aes_inv_round()
1686   column2 = U0[state->v32[2] >> 24] ^ U1[(state->v32[1] >> 16) & 0xff]  in aes_inv_round()
1687     ^ U2[(state->v32[0] >> 8) & 0xff] ^ U3[state->v32[3] & 0xff];  in aes_inv_round()
1689   column3 = U0[state->v32[3] >> 24] ^ U1[(state->v32[2] >> 16) & 0xff]  in aes_inv_round()
1690     ^ U2[(state->v32[1] >> 8) & 0xff] ^ U3[state->v32[0] & 0xff];  in aes_inv_round()
1692   column0 = U0[state->v32[0] & 0xff] ^ U1[(state->v32[1] >> 8) & 0xff]  in aes_inv_round()
1693 	^ U2[(state->v32[2] >> 16) & 0xff] ^ U3[state->v32[3] >> 24];  in aes_inv_round()
1695   column1 = U0[state->v32[1] & 0xff] ^ U1[(state->v32[2] >> 8) & 0xff]  in aes_inv_round()
1696 	^ U2[(state->v32[3] >> 16) & 0xff] ^ U3[state->v32[0] >> 24];  in aes_inv_round()
1698   column2 = U0[state->v32[2] & 0xff] ^ U1[(state->v32[3] >> 8) & 0xff]  in aes_inv_round()
1699 	^ U2[(state->v32[0] >> 16) & 0xff] ^ U3[state->v32[1] >> 24];  in aes_inv_round()
1701   column3 = U0[state->v32[3] & 0xff] ^ U1[(state->v32[0] >> 8) & 0xff]  in aes_inv_round()
1702 	^ U2[(state->v32[1] >> 16) & 0xff] ^ U3[state->v32[2] >> 24];  in aes_inv_round()
1705   state->v32[0] = column0 ^ round_key->v32[0];  in aes_inv_round()
1706   state->v32[1] = column1 ^ round_key->v32[1];  in aes_inv_round()
1707   state->v32[2] = column2 ^ round_key->v32[2];  in aes_inv_round()
1708   state->v32[3] = column3 ^ round_key->v32[3];  in aes_inv_round()
1716   tmp0 = (T4[(state->v32[0] >> 24)]        & 0xff000000)   in aes_final_round()
1717        ^ (T4[(state->v32[1] >> 16) & 0xff] & 0x00ff0000)   in aes_final_round()
1718        ^ (T4[(state->v32[2] >>  8) & 0xff] & 0x0000ff00)   in aes_final_round()
1719        ^ (T4[(state->v32[3]      ) & 0xff] & 0x000000ff)   in aes_final_round()
1720        ^ round_key->v32[0];  in aes_final_round()
1722   tmp1 = (T4[(state->v32[1] >> 24)]        & 0xff000000)  in aes_final_round()
1723        ^ (T4[(state->v32[2] >> 16) & 0xff] & 0x00ff0000)  in aes_final_round()
1724        ^ (T4[(state->v32[3] >>  8) & 0xff] & 0x0000ff00)  in aes_final_round()
1725        ^ (T4[(state->v32[0]      ) & 0xff] & 0x000000ff)  in aes_final_round()
1726        ^ round_key->v32[1];  in aes_final_round()
1728   tmp2 = (T4[(state->v32[2] >> 24)]        & 0xff000000)  in aes_final_round()
1729        ^ (T4[(state->v32[3] >> 16) & 0xff] & 0x00ff0000)  in aes_final_round()
1730        ^ (T4[(state->v32[0] >>  8) & 0xff] & 0x0000ff00)  in aes_final_round()
1731        ^ (T4[(state->v32[1]      ) & 0xff] & 0x000000ff)  in aes_final_round()
1732        ^ round_key->v32[2];  in aes_final_round()
1734   tmp3 = (T4[(state->v32[3] >> 24)]        & 0xff000000)  in aes_final_round()
1735        ^ (T4[(state->v32[0] >> 16) & 0xff] & 0x00ff0000)  in aes_final_round()
1736        ^ (T4[(state->v32[1] >>  8) & 0xff] & 0x0000ff00)  in aes_final_round()
1737        ^ (T4[(state->v32[2]      ) & 0xff] & 0x000000ff)  in aes_final_round()
1738        ^ round_key->v32[3];  in aes_final_round()
1740   state->v32[0] = tmp0;  in aes_final_round()
1741   state->v32[1] = tmp1;  in aes_final_round()
1742   state->v32[2] = tmp2;  in aes_final_round()
1743   state->v32[3] = tmp3;  in aes_final_round()
1751   tmp0 = (U4[(state->v32[0] >> 24)]        & 0xff000000)   in aes_inv_final_round()
1752        ^ (U4[(state->v32[3] >> 16) & 0xff] & 0x00ff0000)   in aes_inv_final_round()
1753        ^ (U4[(state->v32[2] >>  8) & 0xff] & 0x0000ff00)   in aes_inv_final_round()
1754        ^ (U4[(state->v32[1]      ) & 0xff] & 0x000000ff)   in aes_inv_final_round()
1755        ^ round_key->v32[0];  in aes_inv_final_round()
1757   tmp1 = (U4[(state->v32[1] >> 24)]        & 0xff000000)  in aes_inv_final_round()
1758        ^ (U4[(state->v32[0] >> 16) & 0xff] & 0x00ff0000)  in aes_inv_final_round()
1759        ^ (U4[(state->v32[3] >>  8) & 0xff] & 0x0000ff00)  in aes_inv_final_round()
1760        ^ (U4[(state->v32[2]      ) & 0xff] & 0x000000ff)  in aes_inv_final_round()
1761        ^ round_key->v32[1];  in aes_inv_final_round()
1763   tmp2 = (U4[(state->v32[2] >> 24)]        & 0xff000000)  in aes_inv_final_round()
1764        ^ (U4[(state->v32[1] >> 16) & 0xff] & 0x00ff0000)  in aes_inv_final_round()
1765        ^ (U4[(state->v32[0] >>  8) & 0xff] & 0x0000ff00)  in aes_inv_final_round()
1766        ^ (U4[(state->v32[3]      ) & 0xff] & 0x000000ff)  in aes_inv_final_round()
1767        ^ round_key->v32[2];  in aes_inv_final_round()
1769   tmp3 = (U4[(state->v32[3] >> 24)]        & 0xff000000)  in aes_inv_final_round()
1770        ^ (U4[(state->v32[2] >> 16) & 0xff] & 0x00ff0000)  in aes_inv_final_round()
1771        ^ (U4[(state->v32[1] >>  8) & 0xff] & 0x0000ff00)  in aes_inv_final_round()
1772        ^ (U4[(state->v32[0]      ) & 0xff] & 0x000000ff)  in aes_inv_final_round()
1773        ^ round_key->v32[3];  in aes_inv_final_round()
1775   state->v32[0] = tmp0;  in aes_inv_final_round()
1776   state->v32[1] = tmp1;  in aes_inv_final_round()
1777   state->v32[2] = tmp2;  in aes_inv_final_round()
1778   state->v32[3] = tmp3;  in aes_inv_final_round()
1803   state->v32[0] = column0 ^ round_key->v32[0];  in aes_round()
1804   state->v32[1] = column1 ^ round_key->v32[1];  in aes_round()
1805   state->v32[2] = column2 ^ round_key->v32[2];  in aes_round()
1806   state->v32[3] = column3 ^ round_key->v32[3];  in aes_round()
1830   state->v32[0] = column0 ^ round_key->v32[0];  in aes_inv_round()
1831   state->v32[1] = column1 ^ round_key->v32[1];  in aes_inv_round()
1832   state->v32[2] = column2 ^ round_key->v32[2];  in aes_inv_round()
1833   state->v32[3] = column3 ^ round_key->v32[3];  in aes_inv_round()