crypto/modes/gcm128.c

355     size_t rem, nlo, nhi;
363     nlo = ((const u8 *)Xi)[15];
364     nhi = nlo >> 4;
365     nlo &= 0xf;
367     Z.hi = Htable[nlo].hi;
368     Z.lo = Htable[nlo].lo;
385         nlo = ((const u8 *)Xi)[cnt];
386         nhi = nlo >> 4;
387         nlo &= 0xf;
397         Z.hi ^= Htable[nlo].hi;
398         Z.lo ^= Htable[nlo].lo;
436     size_t rem, nlo, nhi;
447         nlo = ((const u8 *)Xi)[15];
448         nlo ^= inp[15];
449         nhi = nlo >> 4;
450         nlo &= 0xf;
452         Z.hi = Htable[nlo].hi;
453         Z.lo = Htable[nlo].lo;
470             nlo = ((const u8 *)Xi)[cnt];
471             nlo ^= inp[cnt];
472             nhi = nlo >> 4;
473             nlo &= 0xf;
483             Z.hi ^= Htable[nlo].hi;
484             Z.lo ^= Htable[nlo].lo;
545             nlo = ((const u8 *)Xi)[cnt];
546             nlo ^= inp[cnt];
547             nhi = nlo >> 4;
548             nlo &= 0xf;
550             Z.hi ^= Htable[nlo].hi;
551             Z.lo ^= Htable[nlo].lo;
563         nlo = ((const u8 *)Xi)[0];
564         nlo ^= inp[0];
565         nhi = nlo >> 4;
566         nlo &= 0xf;
568         Z.hi ^= Htable[nlo].hi;
569         Z.lo ^= Htable[nlo].lo;