42 static void aegis128_save_state_neon(struct aegis128_state st, void *state)  in aegis128_save_state_neon()  argument
44 	vst1q_u8(state, st.v[0]);  in aegis128_save_state_neon()
45 	vst1q_u8(state + 16, st.v[1]);  in aegis128_save_state_neon()
46 	vst1q_u8(state + 32, st.v[2]);  in aegis128_save_state_neon()
47 	vst1q_u8(state + 48, st.v[3]);  in aegis128_save_state_neon()
48 	vst1q_u8(state + 64, st.v[4]);  in aegis128_save_state_neon()
107 struct aegis128_state aegis128_update_neon(struct aegis128_state st,  in aegis128_update_neon()  argument
110 	m       ^= aegis_aes_round(st.v[4]);  in aegis128_update_neon()
111 	st.v[4] ^= aegis_aes_round(st.v[3]);  in aegis128_update_neon()
112 	st.v[3] ^= aegis_aes_round(st.v[2]);  in aegis128_update_neon()
113 	st.v[2] ^= aegis_aes_round(st.v[1]);  in aegis128_update_neon()
114 	st.v[1] ^= aegis_aes_round(st.v[0]);  in aegis128_update_neon()
115 	st.v[0] ^= m;  in aegis128_update_neon()
117 	return st;  in aegis128_update_neon()
147 	struct aegis128_state st = {{  in crypto_aegis128_init_neon()  local
159 		st = aegis128_update_neon(st, k);  in crypto_aegis128_init_neon()
160 		st = aegis128_update_neon(st, kiv);  in crypto_aegis128_init_neon()
162 	aegis128_save_state_neon(st, state);  in crypto_aegis128_init_neon()
167 	struct aegis128_state st = aegis128_load_state_neon(state);  in crypto_aegis128_update_neon()  local
171 	st = aegis128_update_neon(st, vld1q_u8(msg));  in crypto_aegis128_update_neon()
173 	aegis128_save_state_neon(st, state);  in crypto_aegis128_update_neon()
179 	struct aegis128_state st = aegis128_load_state_neon(state);  in crypto_aegis128_encrypt_chunk_neon()  local
185 		uint8x16_t s = st.v[1] ^ (st.v[2] & st.v[3]) ^ st.v[4];  in crypto_aegis128_encrypt_chunk_neon()
188 		st = aegis128_update_neon(st, msg);  in crypto_aegis128_encrypt_chunk_neon()
197 		uint8x16_t s = st.v[1] ^ (st.v[2] & st.v[3]) ^ st.v[4];  in crypto_aegis128_encrypt_chunk_neon()
202 		st = aegis128_update_neon(st, msg);  in crypto_aegis128_encrypt_chunk_neon()
207 	aegis128_save_state_neon(st, state);  in crypto_aegis128_encrypt_chunk_neon()
213 	struct aegis128_state st = aegis128_load_state_neon(state);  in crypto_aegis128_decrypt_chunk_neon()  local
219 		msg = vld1q_u8(src) ^ st.v[1] ^ (st.v[2] & st.v[3]) ^ st.v[4];  in crypto_aegis128_decrypt_chunk_neon()
220 		st = aegis128_update_neon(st, msg);  in crypto_aegis128_decrypt_chunk_neon()
229 		uint8x16_t s = st.v[1] ^ (st.v[2] & st.v[3]) ^ st.v[4];  in crypto_aegis128_decrypt_chunk_neon()
238 		st = aegis128_update_neon(st, msg);  in crypto_aegis128_decrypt_chunk_neon()
241 	aegis128_save_state_neon(st, state);  in crypto_aegis128_decrypt_chunk_neon()
247 	struct aegis128_state st = aegis128_load_state_neon(state);  in crypto_aegis128_final_neon()  local
253 	v = st.v[3] ^ (uint8x16_t)vcombine_u64(vmov_n_u64(8 * assoclen),  in crypto_aegis128_final_neon()
257 		st = aegis128_update_neon(st, v);  in crypto_aegis128_final_neon()
260 	v ^= st.v[0] ^ st.v[1] ^ st.v[2] ^ st.v[3] ^ st.v[4];  in crypto_aegis128_final_neon()