197 static const uint_8t sbox[256]  =  sb_data(f1);
198 static const uint_8t isbox[256] = isb_data(f1);
200 static const uint_8t gfm2_sbox[256] = sb_data(f2);
201 static const uint_8t gfm3_sbox[256] = sb_data(f3);
203 static const uint_8t gfmul_9[256] = mm_data(f9);
204 static const uint_8t gfmul_b[256] = mm_data(fb);
205 static const uint_8t gfmul_d[256] = mm_data(fd);
206 static const uint_8t gfmul_e[256] = mm_data(fe);
224 static uint_8t hibit(const uint_8t x)  in hibit()
225 {   uint_8t r = (uint_8t)((x >> 1) | (x >> 2));  in hibit()
234 static uint_8t gf_inv(const uint_8t x)  in gf_inv()
235 {   uint_8t p1 = x, p2 = BPOLY, n1 = hibit(x), n2 = 0x80, v1 = 1, v2 = 0;  in gf_inv()
267 uint_8t fwd_affine(const uint_8t x)  in fwd_affine()
279 uint_8t inv_affine(const uint_8t x)  in inv_affine()
319     ((uint_8t*)d)[ 0] = ((uint_8t*)s)[ 0];  in copy_block()
320     ((uint_8t*)d)[ 1] = ((uint_8t*)s)[ 1];  in copy_block()
321     ((uint_8t*)d)[ 2] = ((uint_8t*)s)[ 2];  in copy_block()
322     ((uint_8t*)d)[ 3] = ((uint_8t*)s)[ 3];  in copy_block()
323     ((uint_8t*)d)[ 4] = ((uint_8t*)s)[ 4];  in copy_block()
324     ((uint_8t*)d)[ 5] = ((uint_8t*)s)[ 5];  in copy_block()
325     ((uint_8t*)d)[ 6] = ((uint_8t*)s)[ 6];  in copy_block()
326     ((uint_8t*)d)[ 7] = ((uint_8t*)s)[ 7];  in copy_block()
327     ((uint_8t*)d)[ 8] = ((uint_8t*)s)[ 8];  in copy_block()
328     ((uint_8t*)d)[ 9] = ((uint_8t*)s)[ 9];  in copy_block()
329     ((uint_8t*)d)[10] = ((uint_8t*)s)[10];  in copy_block()
330     ((uint_8t*)d)[11] = ((uint_8t*)s)[11];  in copy_block()
331     ((uint_8t*)d)[12] = ((uint_8t*)s)[12];  in copy_block()
332     ((uint_8t*)d)[13] = ((uint_8t*)s)[13];  in copy_block()
333     ((uint_8t*)d)[14] = ((uint_8t*)s)[14];  in copy_block()
334     ((uint_8t*)d)[15] = ((uint_8t*)s)[15];  in copy_block()
338 static void copy_block_nn( void * d, const void *s, uint_8t nn )  in copy_block_nn()
341         *((uint_8t*)d)++ = *((uint_8t*)s)++;  in copy_block_nn()
353     ((uint_8t*)d)[ 0] ^= ((uint_8t*)s)[ 0];  in xor_block()
354     ((uint_8t*)d)[ 1] ^= ((uint_8t*)s)[ 1];  in xor_block()
355     ((uint_8t*)d)[ 2] ^= ((uint_8t*)s)[ 2];  in xor_block()
356     ((uint_8t*)d)[ 3] ^= ((uint_8t*)s)[ 3];  in xor_block()
357     ((uint_8t*)d)[ 4] ^= ((uint_8t*)s)[ 4];  in xor_block()
358     ((uint_8t*)d)[ 5] ^= ((uint_8t*)s)[ 5];  in xor_block()
359     ((uint_8t*)d)[ 6] ^= ((uint_8t*)s)[ 6];  in xor_block()
360     ((uint_8t*)d)[ 7] ^= ((uint_8t*)s)[ 7];  in xor_block()
361     ((uint_8t*)d)[ 8] ^= ((uint_8t*)s)[ 8];  in xor_block()
362     ((uint_8t*)d)[ 9] ^= ((uint_8t*)s)[ 9];  in xor_block()
363     ((uint_8t*)d)[10] ^= ((uint_8t*)s)[10];  in xor_block()
364     ((uint_8t*)d)[11] ^= ((uint_8t*)s)[11];  in xor_block()
365     ((uint_8t*)d)[12] ^= ((uint_8t*)s)[12];  in xor_block()
366     ((uint_8t*)d)[13] ^= ((uint_8t*)s)[13];  in xor_block()
367     ((uint_8t*)d)[14] ^= ((uint_8t*)s)[14];  in xor_block()
368     ((uint_8t*)d)[15] ^= ((uint_8t*)s)[15];  in xor_block()
380     ((uint_8t*)d)[ 0] = ((uint_8t*)s)[ 0] ^ ((uint_8t*)k)[ 0];  in copy_and_key()
381     ((uint_8t*)d)[ 1] = ((uint_8t*)s)[ 1] ^ ((uint_8t*)k)[ 1];  in copy_and_key()
382     ((uint_8t*)d)[ 2] = ((uint_8t*)s)[ 2] ^ ((uint_8t*)k)[ 2];  in copy_and_key()
383     ((uint_8t*)d)[ 3] = ((uint_8t*)s)[ 3] ^ ((uint_8t*)k)[ 3];  in copy_and_key()
384     ((uint_8t*)d)[ 4] = ((uint_8t*)s)[ 4] ^ ((uint_8t*)k)[ 4];  in copy_and_key()
385     ((uint_8t*)d)[ 5] = ((uint_8t*)s)[ 5] ^ ((uint_8t*)k)[ 5];  in copy_and_key()
386     ((uint_8t*)d)[ 6] = ((uint_8t*)s)[ 6] ^ ((uint_8t*)k)[ 6];  in copy_and_key()
387     ((uint_8t*)d)[ 7] = ((uint_8t*)s)[ 7] ^ ((uint_8t*)k)[ 7];  in copy_and_key()
388     ((uint_8t*)d)[ 8] = ((uint_8t*)s)[ 8] ^ ((uint_8t*)k)[ 8];  in copy_and_key()
389     ((uint_8t*)d)[ 9] = ((uint_8t*)s)[ 9] ^ ((uint_8t*)k)[ 9];  in copy_and_key()
390     ((uint_8t*)d)[10] = ((uint_8t*)s)[10] ^ ((uint_8t*)k)[10];  in copy_and_key()
391     ((uint_8t*)d)[11] = ((uint_8t*)s)[11] ^ ((uint_8t*)k)[11];  in copy_and_key()
392     ((uint_8t*)d)[12] = ((uint_8t*)s)[12] ^ ((uint_8t*)k)[12];  in copy_and_key()
393     ((uint_8t*)d)[13] = ((uint_8t*)s)[13] ^ ((uint_8t*)k)[13];  in copy_and_key()
394     ((uint_8t*)d)[14] = ((uint_8t*)s)[14] ^ ((uint_8t*)k)[14];  in copy_and_key()
395     ((uint_8t*)d)[15] = ((uint_8t*)s)[15] ^ ((uint_8t*)k)[15];  in copy_and_key()
402 static void add_round_key( uint_8t d[N_BLOCK], const uint_8t k[N_BLOCK] )  in add_round_key()
407 static void shift_sub_rows( uint_8t st[N_BLOCK] )  in shift_sub_rows()
408 {   uint_8t tt;  in shift_sub_rows()
423 static void inv_shift_sub_rows( uint_8t st[N_BLOCK] )  in inv_shift_sub_rows()
424 {   uint_8t tt;  in inv_shift_sub_rows()
440   static void mix_sub_columns( uint_8t dt[N_BLOCK] )
441   { uint_8t st[N_BLOCK];
444   static void mix_sub_columns( uint_8t dt[N_BLOCK], uint_8t st[N_BLOCK] )
469   static void inv_mix_sub_columns( uint_8t dt[N_BLOCK] )
470   { uint_8t st[N_BLOCK];
473   static void inv_mix_sub_columns( uint_8t dt[N_BLOCK], uint_8t st[N_BLOCK] )
508     uint_8t cc, rc, hi;
532     {   uint_8t tt, t0, t1, t2, t3;
573         uint_8t s1[N_BLOCK], r;
583         {   uint_8t s2[N_BLOCK];
624         uint_8t s1[N_BLOCK], r;
635         {   uint_8t s2[N_BLOCK];
653     {   uint_8t tmp[N_BLOCK];
672 static void update_encrypt_key_128( uint_8t k[N_BLOCK], uint_8t *rc )
673 {   uint_8t cc;
694 {   uint_8t s1[N_BLOCK], r, rc = 1;
708     {   uint_8t s2[N_BLOCK];
726 static void update_decrypt_key_128( uint_8t k[N_BLOCK], uint_8t *rc )
727 {   uint_8t cc;
748     uint_8t s1[N_BLOCK], r, rc = 0x6c;
763     {   uint_8t s2[N_BLOCK];
779 static void update_encrypt_key_256( uint_8t k[2 * N_BLOCK], uint_8t *rc )
780 {   uint_8t cc;
815     uint_8t s1[N_BLOCK], r, rc = 1;
836     {   uint_8t s2[N_BLOCK];
859 static void update_decrypt_key_256( uint_8t k[2 * N_BLOCK], uint_8t *rc )
860 {   uint_8t cc;
896     uint_8t s1[N_BLOCK], r, rc = 0x80;
920     {   uint_8t s2[N_BLOCK];