510       ctx->Xi.c[n] ^= *(out++) = *(in++) ^ ctx->EKi.c[n];  in CRYPTO_gcm128_encrypt()
527       (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_encrypt()
532                       load_word_le(in + i) ^ ctx->EKi.t[i / sizeof(size_t)]);  in CRYPTO_gcm128_encrypt()
544       (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_encrypt()
549                       load_word_le(in + i) ^ ctx->EKi.t[i / sizeof(size_t)]);  in CRYPTO_gcm128_encrypt()
558     (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_encrypt()
562       ctx->Xi.c[n] ^= out[n] = in[n] ^ ctx->EKi.c[n];  in CRYPTO_gcm128_encrypt()
599       *(out++) = c ^ ctx->EKi.c[n];  in CRYPTO_gcm128_decrypt()
618       (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_decrypt()
623                       load_word_le(in + i) ^ ctx->EKi.t[i / sizeof(size_t)]);  in CRYPTO_gcm128_decrypt()
635       (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_decrypt()
640                       load_word_le(in + i) ^ ctx->EKi.t[i / sizeof(size_t)]);  in CRYPTO_gcm128_decrypt()
648     (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_decrypt()
654       out[n] = c ^ ctx->EKi.c[n];  in CRYPTO_gcm128_decrypt()
689       ctx->Xi.c[n] ^= *(out++) = *(in++) ^ ctx->EKi.c[n];  in CRYPTO_gcm128_encrypt_ctr32()
735     (*ctx->gcm_key.block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_encrypt_ctr32()
739       ctx->Xi.c[n] ^= out[n] = in[n] ^ ctx->EKi.c[n];  in CRYPTO_gcm128_encrypt_ctr32()
775       *(out++) = c ^ ctx->EKi.c[n];  in CRYPTO_gcm128_decrypt_ctr32()
822     (*ctx->gcm_key.block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_decrypt_ctr32()
828       out[n] = c ^ ctx->EKi.c[n];  in CRYPTO_gcm128_decrypt_ctr32()