805             block ta[BPI], oa[BPI];  in process_ad()  local
808             oa[0] = xor_block(ad_offset, ctx->L[0]);  in process_ad()
809             ta[0] = xor_block(oa[0], adp[0]);  in process_ad()
810             oa[1] = xor_block(oa[0], ctx->L[1]);  in process_ad()
811             ta[1] = xor_block(oa[1], adp[1]);  in process_ad()
812             oa[2] = xor_block(ad_offset, ctx->L[1]);  in process_ad()
813             ta[2] = xor_block(oa[2], adp[2]);  in process_ad()
815             ad_offset = xor_block(oa[2], getL(ctx, tz));  in process_ad()
818             oa[3] = xor_block(oa[2], ctx->L[2]);  in process_ad()
819             ta[3] = xor_block(oa[3], adp[3]);  in process_ad()
820             oa[4] = xor_block(oa[1], ctx->L[2]);  in process_ad()
821             ta[4] = xor_block(oa[4], adp[4]);  in process_ad()
822             oa[5] = xor_block(oa[0], ctx->L[2]);  in process_ad()
823             ta[5] = xor_block(oa[5], adp[5]);  in process_ad()
824             oa[6] = xor_block(ad_offset, ctx->L[2]);  in process_ad()
825             ta[6] = xor_block(oa[6], adp[6]);  in process_ad()
826             ad_offset = xor_block(oa[6], getL(ctx, tz));  in process_ad()
948         block oa[BPI];  in ae_encrypt()  local
950         oa[BPI - 1] = offset;  in ae_encrypt()
954             oa[0] = xor_block(oa[BPI - 1], ctx->L[0]);  in ae_encrypt()
955             ta[0] = xor_block(oa[0], ptp[0]);  in ae_encrypt()
957             oa[1] = xor_block(oa[0], ctx->L[1]);  in ae_encrypt()
958             ta[1] = xor_block(oa[1], ptp[1]);  in ae_encrypt()
960             oa[2] = xor_block(oa[1], ctx->L[0]);  in ae_encrypt()
961             ta[2] = xor_block(oa[2], ptp[2]);  in ae_encrypt()
964             oa[3] = xor_block(oa[2], getL(ctx, ntz(block_num)));  in ae_encrypt()
965             ta[3] = xor_block(oa[3], ptp[3]);  in ae_encrypt()
968             oa[3] = xor_block(oa[2], ctx->L[2]);  in ae_encrypt()
969             ta[3] = xor_block(oa[3], ptp[3]);  in ae_encrypt()
971             oa[4] = xor_block(oa[1], ctx->L[2]);  in ae_encrypt()
972             ta[4] = xor_block(oa[4], ptp[4]);  in ae_encrypt()
974             oa[5] = xor_block(oa[0], ctx->L[2]);  in ae_encrypt()
975             ta[5] = xor_block(oa[5], ptp[5]);  in ae_encrypt()
977             oa[6] = xor_block(oa[7], ctx->L[2]);  in ae_encrypt()
978             ta[6] = xor_block(oa[6], ptp[6]);  in ae_encrypt()
980             oa[7] = xor_block(oa[6], getL(ctx, ntz(block_num)));  in ae_encrypt()
981             ta[7] = xor_block(oa[7], ptp[7]);  in ae_encrypt()
985             ctp[0] = xor_block(ta[0], oa[0]);  in ae_encrypt()
986             ctp[1] = xor_block(ta[1], oa[1]);  in ae_encrypt()
987             ctp[2] = xor_block(ta[2], oa[2]);  in ae_encrypt()
988             ctp[3] = xor_block(ta[3], oa[3]);  in ae_encrypt()
990             ctp[4] = xor_block(ta[4], oa[4]);  in ae_encrypt()
991             ctp[5] = xor_block(ta[5], oa[5]);  in ae_encrypt()
992             ctp[6] = xor_block(ta[6], oa[6]);  in ae_encrypt()
993             ctp[7] = xor_block(ta[7], oa[7]);  in ae_encrypt()
998         ctx->offset = offset = oa[BPI - 1];  in ae_encrypt()
1004         block ta[BPI + 1], oa[BPI];  in ae_encrypt()  local
1012                 oa[0] = xor_block(offset, ctx->L[0]);  in ae_encrypt()
1013                 ta[0] = xor_block(oa[0], ptp[0]);  in ae_encrypt()
1015                 oa[1] = xor_block(oa[0], ctx->L[1]);  in ae_encrypt()
1016                 ta[1] = xor_block(oa[1], ptp[1]);  in ae_encrypt()
1018                 oa[2] = xor_block(oa[1], ctx->L[0]);  in ae_encrypt()
1019                 ta[2] = xor_block(oa[2], ptp[2]);  in ae_encrypt()
1021                 offset = oa[3] = xor_block(oa[2], ctx->L[2]);  in ae_encrypt()
1029                 oa[k] = xor_block(offset, ctx->L[0]);  in ae_encrypt()
1030                 ta[k] = xor_block(oa[k], ptp[k]);  in ae_encrypt()
1032                 offset = oa[k + 1] = xor_block(oa[k], ctx->L[1]);  in ae_encrypt()
1039                 offset = oa[k] = xor_block(offset, ctx->L[0]);  in ae_encrypt()
1066             ctp[6] = xor_block(ta[6], oa[6]);  in ae_encrypt()
1068             ctp[5] = xor_block(ta[5], oa[5]);  in ae_encrypt()
1070             ctp[4] = xor_block(ta[4], oa[4]);  in ae_encrypt()
1072             ctp[3] = xor_block(ta[3], oa[3]);  in ae_encrypt()
1075             ctp[2] = xor_block(ta[2], oa[2]);  in ae_encrypt()
1077             ctp[1] = xor_block(ta[1], oa[1]);  in ae_encrypt()
1079             ctp[0] = xor_block(ta[0], oa[0]);  in ae_encrypt()
1167         block oa[BPI];  in ae_decrypt()  local
1169         oa[BPI - 1] = offset;  in ae_decrypt()
1173             oa[0] = xor_block(oa[BPI - 1], ctx->L[0]);  in ae_decrypt()
1174             ta[0] = xor_block(oa[0], ctp[0]);  in ae_decrypt()
1175             oa[1] = xor_block(oa[0], ctx->L[1]);  in ae_decrypt()
1176             ta[1] = xor_block(oa[1], ctp[1]);  in ae_decrypt()
1177             oa[2] = xor_block(oa[1], ctx->L[0]);  in ae_decrypt()
1178             ta[2] = xor_block(oa[2], ctp[2]);  in ae_decrypt()
1180             oa[3] = xor_block(oa[2], getL(ctx, ntz(block_num)));  in ae_decrypt()
1181             ta[3] = xor_block(oa[3], ctp[3]);  in ae_decrypt()
1183             oa[3] = xor_block(oa[2], ctx->L[2]);  in ae_decrypt()
1184             ta[3] = xor_block(oa[3], ctp[3]);  in ae_decrypt()
1185             oa[4] = xor_block(oa[1], ctx->L[2]);  in ae_decrypt()
1186             ta[4] = xor_block(oa[4], ctp[4]);  in ae_decrypt()
1187             oa[5] = xor_block(oa[0], ctx->L[2]);  in ae_decrypt()
1188             ta[5] = xor_block(oa[5], ctp[5]);  in ae_decrypt()
1189             oa[6] = xor_block(oa[7], ctx->L[2]);  in ae_decrypt()
1190             ta[6] = xor_block(oa[6], ctp[6]);  in ae_decrypt()
1191             oa[7] = xor_block(oa[6], getL(ctx, ntz(block_num)));  in ae_decrypt()
1192             ta[7] = xor_block(oa[7], ctp[7]);  in ae_decrypt()
1195             ptp[0] = xor_block(ta[0], oa[0]);  in ae_decrypt()
1197             ptp[1] = xor_block(ta[1], oa[1]);  in ae_decrypt()
1199             ptp[2] = xor_block(ta[2], oa[2]);  in ae_decrypt()
1201             ptp[3] = xor_block(ta[3], oa[3]);  in ae_decrypt()
1204             ptp[4] = xor_block(ta[4], oa[4]);  in ae_decrypt()
1206             ptp[5] = xor_block(ta[5], oa[5]);  in ae_decrypt()
1208             ptp[6] = xor_block(ta[6], oa[6]);  in ae_decrypt()
1210             ptp[7] = xor_block(ta[7], oa[7]);  in ae_decrypt()
1216         ctx->offset = offset = oa[BPI - 1];  in ae_decrypt()
1222         block ta[BPI + 1], oa[BPI];  in ae_decrypt()  local
1230                 oa[0] = xor_block(offset, ctx->L[0]);  in ae_decrypt()
1231                 ta[0] = xor_block(oa[0], ctp[0]);  in ae_decrypt()
1232                 oa[1] = xor_block(oa[0], ctx->L[1]);  in ae_decrypt()
1233                 ta[1] = xor_block(oa[1], ctp[1]);  in ae_decrypt()
1234                 oa[2] = xor_block(oa[1], ctx->L[0]);  in ae_decrypt()
1235                 ta[2] = xor_block(oa[2], ctp[2]);  in ae_decrypt()
1236                 offset = oa[3] = xor_block(oa[2], ctx->L[2]);  in ae_decrypt()
1243                 oa[k] = xor_block(offset, ctx->L[0]);  in ae_decrypt()
1244                 ta[k] = xor_block(oa[k], ctp[k]);  in ae_decrypt()
1245                 offset = oa[k + 1] = xor_block(oa[k], ctx->L[1]);  in ae_decrypt()
1251                 offset = oa[k] = xor_block(offset, ctx->L[0]);  in ae_decrypt()
1272             ptp[6] = xor_block(ta[6], oa[6]);  in ae_decrypt()
1275             ptp[5] = xor_block(ta[5], oa[5]);  in ae_decrypt()
1278             ptp[4] = xor_block(ta[4], oa[4]);  in ae_decrypt()
1281             ptp[3] = xor_block(ta[3], oa[3]);  in ae_decrypt()
1285             ptp[2] = xor_block(ta[2], oa[2]);  in ae_decrypt()
1288             ptp[1] = xor_block(ta[1], oa[1]);  in ae_decrypt()
1291             ptp[0] = xor_block(ta[0], oa[0]);  in ae_decrypt()