118 #define RNDr(S, W, i, ii)			\  argument
123 	    W[i + ii] + K[i + ii])
126 #define MSCH(W, ii, i)				\  argument
127 	W[i + ii + 16] = s1(W[i + ii + 14]) + W[i + ii + 9] + s0(W[i + ii + 1]) + W[i + ii]
136 	uint32_t W[64];  in SHA256_Transform()  local
141 	be32dec_vect(W, block, 64);  in SHA256_Transform()
148 		RNDr(S, W, 0, i);  in SHA256_Transform()
149 		RNDr(S, W, 1, i);  in SHA256_Transform()
150 		RNDr(S, W, 2, i);  in SHA256_Transform()
151 		RNDr(S, W, 3, i);  in SHA256_Transform()
152 		RNDr(S, W, 4, i);  in SHA256_Transform()
153 		RNDr(S, W, 5, i);  in SHA256_Transform()
154 		RNDr(S, W, 6, i);  in SHA256_Transform()
155 		RNDr(S, W, 7, i);  in SHA256_Transform()
156 		RNDr(S, W, 8, i);  in SHA256_Transform()
157 		RNDr(S, W, 9, i);  in SHA256_Transform()
158 		RNDr(S, W, 10, i);  in SHA256_Transform()
159 		RNDr(S, W, 11, i);  in SHA256_Transform()
160 		RNDr(S, W, 12, i);  in SHA256_Transform()
161 		RNDr(S, W, 13, i);  in SHA256_Transform()
162 		RNDr(S, W, 14, i);  in SHA256_Transform()
163 		RNDr(S, W, 15, i);  in SHA256_Transform()
167 		MSCH(W, 0, i);  in SHA256_Transform()
168 		MSCH(W, 1, i);  in SHA256_Transform()
169 		MSCH(W, 2, i);  in SHA256_Transform()
170 		MSCH(W, 3, i);  in SHA256_Transform()
171 		MSCH(W, 4, i);  in SHA256_Transform()
172 		MSCH(W, 5, i);  in SHA256_Transform()
173 		MSCH(W, 6, i);  in SHA256_Transform()
174 		MSCH(W, 7, i);  in SHA256_Transform()
175 		MSCH(W, 8, i);  in SHA256_Transform()
176 		MSCH(W, 9, i);  in SHA256_Transform()
177 		MSCH(W, 10, i);  in SHA256_Transform()
178 		MSCH(W, 11, i);  in SHA256_Transform()
179 		MSCH(W, 12, i);  in SHA256_Transform()
180 		MSCH(W, 13, i);  in SHA256_Transform()
181 		MSCH(W, 14, i);  in SHA256_Transform()
182 		MSCH(W, 15, i);  in SHA256_Transform()