Lines Matching refs:q1
60 /* These two tables are the q0 and q1 permutations, exactly as described in
88 static const byte q1[256] = {
114 /* These MDS tables are actually tables of MDS composed with q0 and q1,
120 * mds[0][i] = MDS (q1[i] 0 0 0)^T mds[1][i] = MDS (0 q0[i] 0 0)^T
121 * mds[2][i] = MDS (0 0 q1[i] 0)^T mds[3][i] = MDS (0 0 0 q0[i])^T
411 * S-box entries, preprocessed through q0 and q1. */
495 * are the index numbers preprocessed through the q0 and q1 tables
503 ctx->s[2][i] = mds[2][q1[(a) ^ sc] ^ sg]; \
504 ctx->s[3][i] = mds[3][q1[(b) ^ sd] ^ sh]
513 ctx->s[0][i] = mds[0][q0[q0[q1[(b) ^ sa] ^ se] ^ si] ^ sm]; \
514 ctx->s[1][i] = mds[1][q0[q1[q1[(a) ^ sb] ^ sf] ^ sj] ^ sn]; \
515 ctx->s[2][i] = mds[2][q1[q0[q0[(a) ^ sc] ^ sg] ^ sk] ^ so]; \
516 ctx->s[3][i] = mds[3][q1[q1[q0[(b) ^ sd] ^ sh] ^ sl] ^ sp];
526 * preprocessed through q0 and q1 respectively; for longer keys they are the
535 * preprocessed through q0 and q1 respectively; j is the index of the first
542 ^ mds[2][q1[c ^ key[(j) + 10]] ^ key[(j) + 2]] \
543 ^ mds[3][q1[d ^ key[(j) + 11]] ^ key[(j) + 3]]
553 CALC_K_2 (q0[q1[b ^ key[(j) + 24]] ^ key[(j) + 16]], \
554 q1[q1[a ^ key[(j) + 25]] ^ key[(j) + 17]], \
556 q1[q0[b ^ key[(j) + 27]] ^ key[(j) + 19]], j)
654 * indices of subkeys, preprocessed through q0 and q1. */
685 * indices of subkeys, preprocessed through q0 and q1. */