1060                              const uint8_t *ad, size_t ad_len) {  in aead_aes_gcm_seal()  argument
1079   if (ad_len > 0 && !CRYPTO_gcm128_aad(&gcm, ad, ad_len)) {  in aead_aes_gcm_seal()
1103                              const uint8_t *ad, size_t ad_len) {  in aead_aes_gcm_open()  argument
1126   if (!CRYPTO_gcm128_aad(&gcm, ad, ad_len)) {  in aead_aes_gcm_open()
1283                            const uint8_t *ad, size_t ad_len,  in hmac_calculate()  argument
1291   SHA256_Update(&sha256, ad, ad_len);  in hmac_calculate()
1341                                          const uint8_t *ad, size_t ad_len) {  in aead_aes_ctr_hmac_sha256_seal()  argument
1366                  &aes_ctx->outer_init_state, ad, ad_len, nonce, out, in_len);  in aead_aes_ctr_hmac_sha256_seal()
1377                                          const uint8_t *ad, size_t ad_len) {  in aead_aes_ctr_hmac_sha256_open()  argument
1400                  &aes_ctx->outer_init_state, ad, ad_len, nonce, in,  in aead_aes_ctr_hmac_sha256_open()
1553     uint8_t out_tag[16], const uint8_t *in, size_t in_len, const uint8_t *ad,  in gcm_siv_polyval()  argument
1559   CRYPTO_POLYVAL_update_blocks(&polyval_ctx, ad, ad_len & ~15);  in gcm_siv_polyval()
1564     OPENSSL_memcpy(scratch, &ad[ad_len & ~15], ad_len & 15);  in gcm_siv_polyval()
1578       uint64_t ad;  in gcm_siv_polyval()  member
1583   length_block.bitlens.ad = ad_len * 8;  in gcm_siv_polyval()
1636                                  const uint8_t *ad, size_t ad_len) {  in aead_aes_gcm_siv_seal()  argument
1662   gcm_siv_polyval(tag, in, in_len, ad, ad_len, keys.auth_key, nonce);  in aead_aes_gcm_siv_seal()
1677                                  const uint8_t *ad, size_t ad_len) {  in aead_aes_gcm_siv_open()  argument
1711   gcm_siv_polyval(expected_tag, out, plaintext_len, ad, ad_len, keys.auth_key,  in aead_aes_gcm_siv_open()