1497             xorbuf(x, a, AES_BLOCK_SIZE);  in GHASH()
1504             xorbuf(x, scratch, AES_BLOCK_SIZE);  in GHASH()
1514             xorbuf(x, c, AES_BLOCK_SIZE);  in GHASH()
1521             xorbuf(x, scratch, AES_BLOCK_SIZE);  in GHASH()
1529     xorbuf(x, scratch, AES_BLOCK_SIZE);  in GHASH()
1580             xorbuf(x, authIn, AES_BLOCK_SIZE);  in Aes128GcmEncrypt()
1587             xorbuf(x, scratch, AES_BLOCK_SIZE);  in Aes128GcmEncrypt()
1761         xorbuf(scratch, in, partial);  in Aes128GcmEncrypt()
1766         xorbuf(x, scratch, AES_BLOCK_SIZE);  in Aes128GcmEncrypt()
1774     xorbuf(x, scratch, AES_BLOCK_SIZE);  in Aes128GcmEncrypt()
1898             xorbuf(x, authIn, AES_BLOCK_SIZE);  in Aes192GcmEncrypt()
1905             xorbuf(x, scratch, AES_BLOCK_SIZE);  in Aes192GcmEncrypt()
2088         xorbuf(scratch, in, partial);  in Aes192GcmEncrypt()
2093         xorbuf(x, scratch, AES_BLOCK_SIZE);  in Aes192GcmEncrypt()
2101     xorbuf(x, scratch, AES_BLOCK_SIZE);  in Aes192GcmEncrypt()
2231             xorbuf(x, authIn, AES_BLOCK_SIZE);  in Aes256GcmEncrypt()
2238             xorbuf(x, scratch, AES_BLOCK_SIZE);  in Aes256GcmEncrypt()
2428         xorbuf(scratch, in, partial);  in Aes256GcmEncrypt()
2433         xorbuf(x, scratch, AES_BLOCK_SIZE);  in Aes256GcmEncrypt()
2441     xorbuf(x, scratch, AES_BLOCK_SIZE);  in Aes256GcmEncrypt()
2654         xorbuf(Tprime, EKY0, sizeof(Tprime));  in wc_AesGcmDecrypt()
2892         xorbuf(scratch, c, partial);  in wc_AesGcmDecrypt()
4174             xorbuf(x, a, AES_BLOCK_SIZE);  in GHASH()
4181             xorbuf(x, scratch, AES_BLOCK_SIZE);  in GHASH()
4191             xorbuf(x, c, AES_BLOCK_SIZE);  in GHASH()
4198             xorbuf(x, scratch, AES_BLOCK_SIZE);  in GHASH()
4206     xorbuf(x, scratch, AES_BLOCK_SIZE);  in GHASH()
4269         xorbuf(scratch, p, AES_BLOCK_SIZE);  in wc_AesGcmEncrypt()
4278         xorbuf(scratch, p, partial);  in wc_AesGcmEncrypt()
4286         xorbuf(authTag, scratch, AES_BLOCK_SIZE);  in wc_AesGcmEncrypt()
4289         xorbuf(authTag, scratch, authTagSz);  in wc_AesGcmEncrypt()
4351         xorbuf(Tprime, EKY0, sizeof(Tprime));  in wc_AesGcmDecrypt()
4361         xorbuf(scratch, c, AES_BLOCK_SIZE);  in wc_AesGcmDecrypt()
4375         xorbuf(scratch, c, partial);  in wc_AesGcmDecrypt()
4407         xorbuf(AES_TAG(aes), block, AES_BLOCK_SIZE);    \
4693     xorbuf(authTag, AES_INITCTR(aes), authTagSz);  in AesGcmFinal_C()
5031         xorbuf(out, in, AES_BLOCK_SIZE);  in roll_x()
5040         xorbuf(out, in, inSz);  in roll_x()
5075         xorbuf(out + authLenSz, in, remainder);  in roll_auth()
5081         xorbuf(out + authLenSz, in, inSz);  in roll_auth()
5146     xorbuf(authTag, A, authTagSz);  in wc_AesCcmEncrypt()
5151         xorbuf(A, in, AES_BLOCK_SIZE);  in wc_AesCcmEncrypt()
5161         xorbuf(A, in, inSz);  in wc_AesCcmEncrypt()
5207         xorbuf(A, in, AES_BLOCK_SIZE);  in wc_AesCcmDecrypt()
5217         xorbuf(A, in, oSz);  in wc_AesCcmDecrypt()
5248     xorbuf(A, B, authTagSz);  in wc_AesCcmDecrypt()