crypto/modes/gcm128.c

845         memcpy(ctx->Yi.c, iv, 12);
846         ctx->Yi.c[12] = 0;
847         ctx->Yi.c[13] = 0;
848         ctx->Yi.c[14] = 0;
849         ctx->Yi.c[15] = 1;
901         ctx->Yi.u[0] = ctx->Xi.u[0];
902         ctx->Yi.u[1] = ctx->Xi.u[1];
908     (*ctx->block) (ctx->Yi.c, ctx->EK0.c, ctx->key);
912         ctx->Yi.d[3] = BSWAP4(ctr);
914         PUTU32(ctx->Yi.c + 12, ctr);
917         ctx->Yi.d[3] = ctr;
1029         ctr = BSWAP4(ctx->Yi.d[3]);
1031         ctr = GETU32(ctx->Yi.c + 12);
1034         ctr = ctx->Yi.d[3];
1086                     (*block) (ctx->Yi.c, ctx->EKi.c, key);
1090                         ctx->Yi.d[3] = BSWAP4(ctr);
1092                         PUTU32(ctx->Yi.c + 12, ctr);
1095                         ctx->Yi.d[3] = ctr;
1113                     (*block) (ctx->Yi.c, ctx->EKi.c, key);
1117                         ctx->Yi.d[3] = BSWAP4(ctr);
1119                         PUTU32(ctx->Yi.c + 12, ctr);
1122                         ctx->Yi.d[3] = ctr;
1136                 (*block) (ctx->Yi.c, ctx->EKi.c, key);
1140                     ctx->Yi.d[3] = BSWAP4(ctr);
1142                     PUTU32(ctx->Yi.c + 12, ctr);
1145                     ctx->Yi.d[3] = ctr;
1155                 (*block) (ctx->Yi.c, ctx->EKi.c, key);
1159                     ctx->Yi.d[3] = BSWAP4(ctr);
1161                     PUTU32(ctx->Yi.c + 12, ctr);
1164                     ctx->Yi.d[3] = ctr;
1186             (*block) (ctx->Yi.c, ctx->EKi.c, key);
1190                 ctx->Yi.d[3] = BSWAP4(ctr);
1192                 PUTU32(ctx->Yi.c + 12, ctr);
1195                 ctx->Yi.d[3] = ctr;
1264         ctr = BSWAP4(ctx->Yi.d[3]);
1266         ctr = GETU32(ctx->Yi.c + 12);
1269         ctr = ctx->Yi.d[3];
1324                     (*block) (ctx->Yi.c, ctx->EKi.c, key);
1328                         ctx->Yi.d[3] = BSWAP4(ctr);
1330                         PUTU32(ctx->Yi.c + 12, ctr);
1333                         ctx->Yi.d[3] = ctr;
1349                     (*block) (ctx->Yi.c, ctx->EKi.c, key);
1353                         ctx->Yi.d[3] = BSWAP4(ctr);
1355                         PUTU32(ctx->Yi.c + 12, ctr);
1358                         ctx->Yi.d[3] = ctr;
1371                 (*block) (ctx->Yi.c, ctx->EKi.c, key);
1375                     ctx->Yi.d[3] = BSWAP4(ctr);
1377                     PUTU32(ctx->Yi.c + 12, ctr);
1380                     ctx->Yi.d[3] = ctr;
1393                 (*block) (ctx->Yi.c, ctx->EKi.c, key);
1397                     ctx->Yi.d[3] = BSWAP4(ctr);
1399                     PUTU32(ctx->Yi.c + 12, ctr);
1402                     ctx->Yi.d[3] = ctr;
1427             (*block) (ctx->Yi.c, ctx->EKi.c, key);
1431                 ctx->Yi.d[3] = BSWAP4(ctr);
1433                 PUTU32(ctx->Yi.c + 12, ctr);
1436                 ctx->Yi.d[3] = ctr;
1509         ctr = BSWAP4(ctx->Yi.d[3]);
1511         ctr = GETU32(ctx->Yi.c + 12);
1514         ctr = ctx->Yi.d[3];
1553         (*stream) (in, out, GHASH_CHUNK / 16, key, ctx->Yi.c);
1557             ctx->Yi.d[3] = BSWAP4(ctr);
1559             PUTU32(ctx->Yi.c + 12, ctr);
1562             ctx->Yi.d[3] = ctr;
1573         (*stream) (in, out, j, key, ctx->Yi.c);
1577             ctx->Yi.d[3] = BSWAP4(ctr);
1579             PUTU32(ctx->Yi.c + 12, ctr);
1582             ctx->Yi.d[3] = ctr;
1598         (*ctx->block) (ctx->Yi.c, ctx->EKi.c, key);
1602             ctx->Yi.d[3] = BSWAP4(ctr);
1604             PUTU32(ctx->Yi.c + 12, ctr);
1607             ctx->Yi.d[3] = ctr;
1673         ctr = BSWAP4(ctx->Yi.d[3]);
1675         ctr = GETU32(ctx->Yi.c + 12);
1678         ctr = ctx->Yi.d[3];
1720         (*stream) (in, out, GHASH_CHUNK / 16, key, ctx->Yi.c);
1724             ctx->Yi.d[3] = BSWAP4(ctr);
1726             PUTU32(ctx->Yi.c + 12, ctr);
1729             ctx->Yi.d[3] = ctr;
1752         (*stream) (in, out, j, key, ctx->Yi.c);
1756             ctx->Yi.d[3] = BSWAP4(ctr);
1758             PUTU32(ctx->Yi.c + 12, ctr);
1761             ctx->Yi.d[3] = ctr;
1767         (*ctx->block) (ctx->Yi.c, ctx->EKi.c, key);
1771             ctx->Yi.d[3] = BSWAP4(ctr);
1773             PUTU32(ctx->Yi.c + 12, ctr);
1776             ctx->Yi.d[3] = ctr;