60     t1 = wv[h] + SHA512_F2(wv[e]) + CH(wv[e], wv[f], wv[g]) + sha512_k[j] + \
62     t2 = SHA512_F1(wv[a]) + MAJ(wv[a], wv[b], wv[c]);                       \
63     wv[d] += t1;                                                            \
64     wv[h] = t1 + t2;                                                        \
132   uint64_t wv[8];  in SHA512_transform()  local
223     wv[0] = ctx->h[0];  in SHA512_transform()
224     wv[1] = ctx->h[1];  in SHA512_transform()
225     wv[2] = ctx->h[2];  in SHA512_transform()
226     wv[3] = ctx->h[3];  in SHA512_transform()
227     wv[4] = ctx->h[4];  in SHA512_transform()
228     wv[5] = ctx->h[5];  in SHA512_transform()
229     wv[6] = ctx->h[6];  in SHA512_transform()
230     wv[7] = ctx->h[7];  in SHA512_transform()
253     ctx->h[0] += wv[0];  in SHA512_transform()
254     ctx->h[1] += wv[1];  in SHA512_transform()
255     ctx->h[2] += wv[2];  in SHA512_transform()
256     ctx->h[3] += wv[3];  in SHA512_transform()
257     ctx->h[4] += wv[4];  in SHA512_transform()
258     ctx->h[5] += wv[5];  in SHA512_transform()
259     ctx->h[6] += wv[6];  in SHA512_transform()
260     ctx->h[7] += wv[7];  in SHA512_transform()
271       wv[j] = ctx->h[j];  in SHA512_transform()
275       t1 = wv[7] + SHA512_F2(wv[4]) + CH(wv[4], wv[5], wv[6]) + sha512_k[j] +  in SHA512_transform()
277       t2 = SHA512_F1(wv[0]) + MAJ(wv[0], wv[1], wv[2]);  in SHA512_transform()
278       wv[7] = wv[6];  in SHA512_transform()
279       wv[6] = wv[5];  in SHA512_transform()
280       wv[5] = wv[4];  in SHA512_transform()
281       wv[4] = wv[3] + t1;  in SHA512_transform()
282       wv[3] = wv[2];  in SHA512_transform()
283       wv[2] = wv[1];  in SHA512_transform()
284       wv[1] = wv[0];  in SHA512_transform()
285       wv[0] = t1 + t2;  in SHA512_transform()
289       ctx->h[j] += wv[j];  in SHA512_transform()