lib/crypto/aes.c

260 	const u32 *rkp = ctx->key_enc + 4;
281 	for (round = 0;; round += 2, rkp += 8) {
282 		st1[0] = mix_columns(subshift(st0, 0)) ^ rkp[0];
283 		st1[1] = mix_columns(subshift(st0, 1)) ^ rkp[1];
284 		st1[2] = mix_columns(subshift(st0, 2)) ^ rkp[2];
285 		st1[3] = mix_columns(subshift(st0, 3)) ^ rkp[3];
290 		st0[0] = mix_columns(subshift(st1, 0)) ^ rkp[4];
291 		st0[1] = mix_columns(subshift(st1, 1)) ^ rkp[5];
292 		st0[2] = mix_columns(subshift(st1, 2)) ^ rkp[6];
293 		st0[3] = mix_columns(subshift(st1, 3)) ^ rkp[7];
296 	put_unaligned_le32(subshift(st1, 0) ^ rkp[4], out);
297 	put_unaligned_le32(subshift(st1, 1) ^ rkp[5], out + 4);
298 	put_unaligned_le32(subshift(st1, 2) ^ rkp[6], out + 8);
299 	put_unaligned_le32(subshift(st1, 3) ^ rkp[7], out + 12);
311 	const u32 *rkp = ctx->key_dec + 4;
332 	for (round = 0;; round += 2, rkp += 8) {
333 		st1[0] = inv_mix_columns(inv_subshift(st0, 0)) ^ rkp[0];
334 		st1[1] = inv_mix_columns(inv_subshift(st0, 1)) ^ rkp[1];
335 		st1[2] = inv_mix_columns(inv_subshift(st0, 2)) ^ rkp[2];
336 		st1[3] = inv_mix_columns(inv_subshift(st0, 3)) ^ rkp[3];
341 		st0[0] = inv_mix_columns(inv_subshift(st1, 0)) ^ rkp[4];
342 		st0[1] = inv_mix_columns(inv_subshift(st1, 1)) ^ rkp[5];
343 		st0[2] = inv_mix_columns(inv_subshift(st1, 2)) ^ rkp[6];
344 		st0[3] = inv_mix_columns(inv_subshift(st1, 3)) ^ rkp[7];
347 	put_unaligned_le32(inv_subshift(st1, 0) ^ rkp[4], out);
348 	put_unaligned_le32(inv_subshift(st1, 1) ^ rkp[5], out + 4);
349 	put_unaligned_le32(inv_subshift(st1, 2) ^ rkp[6], out + 8);
350 	put_unaligned_le32(inv_subshift(st1, 3) ^ rkp[7], out + 12);