src/symcipher/aes_x86ni_ctrcbc.c

92 		__m128i x0, x1, x2, x3;
98 		x0 = _mm_shuffle_epi8(ivx0, erev);
103 		x0 = _mm_xor_si128(x0, sk[0]);
107 		x0 = _mm_aesenc_si128(x0, sk[1]);
111 		x0 = _mm_aesenc_si128(x0, sk[2]);
115 		x0 = _mm_aesenc_si128(x0, sk[3]);
119 		x0 = _mm_aesenc_si128(x0, sk[4]);
123 		x0 = _mm_aesenc_si128(x0, sk[5]);
127 		x0 = _mm_aesenc_si128(x0, sk[6]);
131 		x0 = _mm_aesenc_si128(x0, sk[7]);
135 		x0 = _mm_aesenc_si128(x0, sk[8]);
139 		x0 = _mm_aesenc_si128(x0, sk[9]);
144 			x0 = _mm_aesenclast_si128(x0, sk[10]);
149 			x0 = _mm_aesenc_si128(x0, sk[10]);
153 			x0 = _mm_aesenc_si128(x0, sk[11]);
157 			x0 = _mm_aesenclast_si128(x0, sk[12]);
162 			x0 = _mm_aesenc_si128(x0, sk[10]);
166 			x0 = _mm_aesenc_si128(x0, sk[11]);
170 			x0 = _mm_aesenc_si128(x0, sk[12]);
174 			x0 = _mm_aesenc_si128(x0, sk[13]);
178 			x0 = _mm_aesenclast_si128(x0, sk[14]);
184 			x0 = _mm_xor_si128(x0,
192 			_mm_storeu_si128((void *)(buf +  0), x0);
201 			_mm_storeu_si128((void *)(tmp +  0), x0);
341 		__m128i dx, x0, x1;
346 		 *   x0   counter (for CTR encryption)
350 		x0 = _mm_shuffle_epi8(ivx, erev);
353 		x0 = _mm_xor_si128(x0, sk[0]);
355 		x0 = _mm_aesenc_si128(x0, sk[1]);
357 		x0 = _mm_aesenc_si128(x0, sk[2]);
359 		x0 = _mm_aesenc_si128(x0, sk[3]);
361 		x0 = _mm_aesenc_si128(x0, sk[4]);
363 		x0 = _mm_aesenc_si128(x0, sk[5]);
365 		x0 = _mm_aesenc_si128(x0, sk[6]);
367 		x0 = _mm_aesenc_si128(x0, sk[7]);
369 		x0 = _mm_aesenc_si128(x0, sk[8]);
371 		x0 = _mm_aesenc_si128(x0, sk[9]);
374 			x0 = _mm_aesenclast_si128(x0, sk[10]);
377 			x0 = _mm_aesenc_si128(x0, sk[10]);
379 			x0 = _mm_aesenc_si128(x0, sk[11]);
381 			x0 = _mm_aesenclast_si128(x0, sk[12]);
384 			x0 = _mm_aesenc_si128(x0, sk[10]);
386 			x0 = _mm_aesenc_si128(x0, sk[11]);
388 			x0 = _mm_aesenc_si128(x0, sk[12]);
390 			x0 = _mm_aesenc_si128(x0, sk[13]);
392 			x0 = _mm_aesenclast_si128(x0, sk[14]);
396 		x0 = _mm_xor_si128(x0, dx);
398 			cmx = _mm_xor_si128(cmx, x0);
401 			cmx = _mm_xor_si128(x1, x0);
403 		_mm_storeu_si128((void *)buf, x0);
488 		__m128i dx, x0, x1;
493 		 *   x0   counter (for CTR encryption)
497 		x0 = _mm_shuffle_epi8(ivx, erev);
500 		x0 = _mm_xor_si128(x0, sk[0]);
502 		x0 = _mm_aesenc_si128(x0, sk[1]);
504 		x0 = _mm_aesenc_si128(x0, sk[2]);
506 		x0 = _mm_aesenc_si128(x0, sk[3]);
508 		x0 = _mm_aesenc_si128(x0, sk[4]);
510 		x0 = _mm_aesenc_si128(x0, sk[5]);
512 		x0 = _mm_aesenc_si128(x0, sk[6]);
514 		x0 = _mm_aesenc_si128(x0, sk[7]);
516 		x0 = _mm_aesenc_si128(x0, sk[8]);
518 		x0 = _mm_aesenc_si128(x0, sk[9]);
521 			x0 = _mm_aesenclast_si128(x0, sk[10]);
524 			x0 = _mm_aesenc_si128(x0, sk[10]);
526 			x0 = _mm_aesenc_si128(x0, sk[11]);
528 			x0 = _mm_aesenclast_si128(x0, sk[12]);
531 			x0 = _mm_aesenc_si128(x0, sk[10]);
533 			x0 = _mm_aesenc_si128(x0, sk[11]);
535 			x0 = _mm_aesenc_si128(x0, sk[12]);
537 			x0 = _mm_aesenc_si128(x0, sk[13]);
539 			x0 = _mm_aesenclast_si128(x0, sk[14]);
542 		x0 = _mm_xor_si128(x0, dx);
544 		_mm_storeu_si128((void *)buf, x0);