233     memset(&ctx->sess, 0, sizeof(ctx->sess));  in CRYPTO_ocb128_setiv()
255     ocb_block_lshift(stretch + (bottom / 8), shift, ctx->sess.offset.c);  in CRYPTO_ocb128_setiv()
258     ctx->sess.offset.c[15] |=  in CRYPTO_ocb128_setiv()
277     all_num_blocks = num_blocks + ctx->sess.blocks_hashed;  in CRYPTO_ocb128_aad()
280     for (i = ctx->sess.blocks_hashed + 1; i <= all_num_blocks; i++) {  in CRYPTO_ocb128_aad()
287         ocb_block16_xor(&ctx->sess.offset_aad, lookup, &ctx->sess.offset_aad);  in CRYPTO_ocb128_aad()
293         ocb_block16_xor(&ctx->sess.offset_aad, &tmp, &tmp);  in CRYPTO_ocb128_aad()
295         ocb_block16_xor(&tmp, &ctx->sess.sum, &ctx->sess.sum);  in CRYPTO_ocb128_aad()
306         ocb_block16_xor(&ctx->sess.offset_aad, &ctx->l_star,  in CRYPTO_ocb128_aad()
307                         &ctx->sess.offset_aad);  in CRYPTO_ocb128_aad()
313         ocb_block16_xor(&ctx->sess.offset_aad, &tmp, &tmp);  in CRYPTO_ocb128_aad()
317         ocb_block16_xor(&tmp, &ctx->sess.sum, &ctx->sess.sum);  in CRYPTO_ocb128_aad()
320     ctx->sess.blocks_hashed = all_num_blocks;  in CRYPTO_ocb128_aad()
341     all_num_blocks = num_blocks + ctx->sess.blocks_processed;  in CRYPTO_ocb128_encrypt()
357                     (size_t)ctx->sess.blocks_processed + 1, ctx->sess.offset.c,  in CRYPTO_ocb128_encrypt()
358                     (const unsigned char (*)[16])ctx->l, ctx->sess.checksum.c);  in CRYPTO_ocb128_encrypt()
361         for (i = ctx->sess.blocks_processed + 1; i <= all_num_blocks; i++) {  in CRYPTO_ocb128_encrypt()
369             ocb_block16_xor(&ctx->sess.offset, lookup, &ctx->sess.offset);  in CRYPTO_ocb128_encrypt()
375             ocb_block16_xor(&tmp, &ctx->sess.checksum, &ctx->sess.checksum);  in CRYPTO_ocb128_encrypt()
378             ocb_block16_xor(&ctx->sess.offset, &tmp, &tmp);  in CRYPTO_ocb128_encrypt()
380             ocb_block16_xor(&ctx->sess.offset, &tmp, &tmp);  in CRYPTO_ocb128_encrypt()
397         ocb_block16_xor(&ctx->sess.offset, &ctx->l_star, &ctx->sess.offset);  in CRYPTO_ocb128_encrypt()
400         ctx->encrypt(ctx->sess.offset.c, pad.c, ctx->keyenc);  in CRYPTO_ocb128_encrypt()
409         ocb_block16_xor(&pad, &ctx->sess.checksum, &ctx->sess.checksum);  in CRYPTO_ocb128_encrypt()
412     ctx->sess.blocks_processed = all_num_blocks;  in CRYPTO_ocb128_encrypt()
433     all_num_blocks = num_blocks + ctx->sess.blocks_processed;  in CRYPTO_ocb128_decrypt()
449                     (size_t)ctx->sess.blocks_processed + 1, ctx->sess.offset.c,  in CRYPTO_ocb128_decrypt()
450                     (const unsigned char (*)[16])ctx->l, ctx->sess.checksum.c);  in CRYPTO_ocb128_decrypt()
455         for (i = ctx->sess.blocks_processed + 1; i <= all_num_blocks; i++) {  in CRYPTO_ocb128_decrypt()
461             ocb_block16_xor(&ctx->sess.offset, lookup, &ctx->sess.offset);  in CRYPTO_ocb128_decrypt()
467             ocb_block16_xor(&ctx->sess.offset, &tmp, &tmp);  in CRYPTO_ocb128_decrypt()
469             ocb_block16_xor(&ctx->sess.offset, &tmp, &tmp);  in CRYPTO_ocb128_decrypt()
472             ocb_block16_xor(&tmp, &ctx->sess.checksum, &ctx->sess.checksum);  in CRYPTO_ocb128_decrypt()
489         ocb_block16_xor(&ctx->sess.offset, &ctx->l_star, &ctx->sess.offset);  in CRYPTO_ocb128_decrypt()
492         ctx->encrypt(ctx->sess.offset.c, pad.c, ctx->keyenc);  in CRYPTO_ocb128_decrypt()
501         ocb_block16_xor(&pad, &ctx->sess.checksum, &ctx->sess.checksum);  in CRYPTO_ocb128_decrypt()
504     ctx->sess.blocks_processed = all_num_blocks;  in CRYPTO_ocb128_decrypt()
521     ocb_block16_xor(&ctx->sess.checksum, &ctx->sess.offset, &tmp);  in ocb_finish()
524     ocb_block16_xor(&tmp, &ctx->sess.sum, &tmp);  in ocb_finish()