crypto/modes/gcm128.c

851         memcpy(ctx->Yi.c, iv, 12);
852         ctx->Yi.c[12] = 0;
853         ctx->Yi.c[13] = 0;
854         ctx->Yi.c[14] = 0;
855         ctx->Yi.c[15] = 1;
907         ctx->Yi.u[0] = ctx->Xi.u[0];
908         ctx->Yi.u[1] = ctx->Xi.u[1];
914     (*ctx->block) (ctx->Yi.c, ctx->EK0.c, ctx->key);
918         ctx->Yi.d[3] = BSWAP4(ctr);
920         PUTU32(ctx->Yi.c + 12, ctr);
923         ctx->Yi.d[3] = ctr;
1035         ctr = BSWAP4(ctx->Yi.d[3]);
1037         ctr = GETU32(ctx->Yi.c + 12);
1040         ctr = ctx->Yi.d[3];
1092                     (*block) (ctx->Yi.c, ctx->EKi.c, key);
1096                         ctx->Yi.d[3] = BSWAP4(ctr);
1098                         PUTU32(ctx->Yi.c + 12, ctr);
1101                         ctx->Yi.d[3] = ctr;
1119                     (*block) (ctx->Yi.c, ctx->EKi.c, key);
1123                         ctx->Yi.d[3] = BSWAP4(ctr);
1125                         PUTU32(ctx->Yi.c + 12, ctr);
1128                         ctx->Yi.d[3] = ctr;
1142                 (*block) (ctx->Yi.c, ctx->EKi.c, key);
1146                     ctx->Yi.d[3] = BSWAP4(ctr);
1148                     PUTU32(ctx->Yi.c + 12, ctr);
1151                     ctx->Yi.d[3] = ctr;
1161                 (*block) (ctx->Yi.c, ctx->EKi.c, key);
1165                     ctx->Yi.d[3] = BSWAP4(ctr);
1167                     PUTU32(ctx->Yi.c + 12, ctr);
1170                     ctx->Yi.d[3] = ctr;
1192             (*block) (ctx->Yi.c, ctx->EKi.c, key);
1196                 ctx->Yi.d[3] = BSWAP4(ctr);
1198                 PUTU32(ctx->Yi.c + 12, ctr);
1201                 ctx->Yi.d[3] = ctr;
1270         ctr = BSWAP4(ctx->Yi.d[3]);
1272         ctr = GETU32(ctx->Yi.c + 12);
1275         ctr = ctx->Yi.d[3];
1330                     (*block) (ctx->Yi.c, ctx->EKi.c, key);
1334                         ctx->Yi.d[3] = BSWAP4(ctr);
1336                         PUTU32(ctx->Yi.c + 12, ctr);
1339                         ctx->Yi.d[3] = ctr;
1355                     (*block) (ctx->Yi.c, ctx->EKi.c, key);
1359                         ctx->Yi.d[3] = BSWAP4(ctr);
1361                         PUTU32(ctx->Yi.c + 12, ctr);
1364                         ctx->Yi.d[3] = ctr;
1377                 (*block) (ctx->Yi.c, ctx->EKi.c, key);
1381                     ctx->Yi.d[3] = BSWAP4(ctr);
1383                     PUTU32(ctx->Yi.c + 12, ctr);
1386                     ctx->Yi.d[3] = ctr;
1399                 (*block) (ctx->Yi.c, ctx->EKi.c, key);
1403                     ctx->Yi.d[3] = BSWAP4(ctr);
1405                     PUTU32(ctx->Yi.c + 12, ctr);
1408                     ctx->Yi.d[3] = ctr;
1433             (*block) (ctx->Yi.c, ctx->EKi.c, key);
1437                 ctx->Yi.d[3] = BSWAP4(ctr);
1439                 PUTU32(ctx->Yi.c + 12, ctr);
1442                 ctx->Yi.d[3] = ctr;
1515         ctr = BSWAP4(ctx->Yi.d[3]);
1517         ctr = GETU32(ctx->Yi.c + 12);
1520         ctr = ctx->Yi.d[3];
1559         (*stream) (in, out, GHASH_CHUNK / 16, key, ctx->Yi.c);
1563             ctx->Yi.d[3] = BSWAP4(ctr);
1565             PUTU32(ctx->Yi.c + 12, ctr);
1568             ctx->Yi.d[3] = ctr;
1579         (*stream) (in, out, j, key, ctx->Yi.c);
1583             ctx->Yi.d[3] = BSWAP4(ctr);
1585             PUTU32(ctx->Yi.c + 12, ctr);
1588             ctx->Yi.d[3] = ctr;
1604         (*ctx->block) (ctx->Yi.c, ctx->EKi.c, key);
1608             ctx->Yi.d[3] = BSWAP4(ctr);
1610             PUTU32(ctx->Yi.c + 12, ctr);
1613             ctx->Yi.d[3] = ctr;
1679         ctr = BSWAP4(ctx->Yi.d[3]);
1681         ctr = GETU32(ctx->Yi.c + 12);
1684         ctr = ctx->Yi.d[3];
1726         (*stream) (in, out, GHASH_CHUNK / 16, key, ctx->Yi.c);
1730             ctx->Yi.d[3] = BSWAP4(ctr);
1732             PUTU32(ctx->Yi.c + 12, ctr);
1735             ctx->Yi.d[3] = ctr;
1758         (*stream) (in, out, j, key, ctx->Yi.c);
1762             ctx->Yi.d[3] = BSWAP4(ctr);
1764             PUTU32(ctx->Yi.c + 12, ctr);
1767             ctx->Yi.d[3] = ctr;
1773         (*ctx->block) (ctx->Yi.c, ctx->EKi.c, key);
1777             ctx->Yi.d[3] = BSWAP4(ctr);
1779             PUTU32(ctx->Yi.c + 12, ctr);
1782             ctx->Yi.d[3] = ctr;