47     uint32_t partial_block_len = (uint32_t) (ctx->aad_len % 16U);  in chachapoly_pad_aad()
85     ctx->aad_len        = 0U;  in mbedtls_chachapoly_init()
99     ctx->aad_len        = 0U;  in mbedtls_chachapoly_free()
143         ctx->aad_len        = 0U;  in mbedtls_chachapoly_starts()
156                                   size_t aad_len)  in mbedtls_chachapoly_update_aad()  argument
162     ctx->aad_len += aad_len;  in mbedtls_chachapoly_update_aad()
164     return mbedtls_poly1305_update(&ctx->poly1305_ctx, aad, aad_len);  in mbedtls_chachapoly_update_aad()
242     MBEDTLS_PUT_UINT64_LE(ctx->aad_len, len_block, 0);  in mbedtls_chachapoly_finish()
260                                     size_t aad_len,  in chachapoly_crypt_and_tag()  argument
272     ret = mbedtls_chachapoly_update_aad(ctx, aad, aad_len);  in chachapoly_crypt_and_tag()
292                                        size_t aad_len,  in mbedtls_chachapoly_encrypt_and_tag()  argument
298                                     length, nonce, aad, aad_len,  in mbedtls_chachapoly_encrypt_and_tag()
306                                     size_t aad_len,  in mbedtls_chachapoly_auth_decrypt()  argument
318                                         aad, aad_len, input, output, check_tag)) != 0) {  in mbedtls_chachapoly_auth_decrypt()