64   } nonce, cmac;  member
110   (*block)(state->nonce.c, state->cmac.c, key);  in ccm128_init_state()
118       state->cmac.c[0] ^= (uint8_t)(aad_len_u64 >> 8);  in ccm128_init_state()
119       state->cmac.c[1] ^= (uint8_t)aad_len_u64;  in ccm128_init_state()
122       state->cmac.c[0] ^= 0xff;  in ccm128_init_state()
123       state->cmac.c[1] ^= 0xfe;  in ccm128_init_state()
124       state->cmac.c[2] ^= (uint8_t)(aad_len_u64 >> 24);  in ccm128_init_state()
125       state->cmac.c[3] ^= (uint8_t)(aad_len_u64 >> 16);  in ccm128_init_state()
126       state->cmac.c[4] ^= (uint8_t)(aad_len_u64 >> 8);  in ccm128_init_state()
127       state->cmac.c[5] ^= (uint8_t)aad_len_u64;  in ccm128_init_state()
130       state->cmac.c[0] ^= 0xff;  in ccm128_init_state()
131       state->cmac.c[1] ^= 0xff;  in ccm128_init_state()
132       state->cmac.c[2] ^= (uint8_t)(aad_len_u64 >> 56);  in ccm128_init_state()
133       state->cmac.c[3] ^= (uint8_t)(aad_len_u64 >> 48);  in ccm128_init_state()
134       state->cmac.c[4] ^= (uint8_t)(aad_len_u64 >> 40);  in ccm128_init_state()
135       state->cmac.c[5] ^= (uint8_t)(aad_len_u64 >> 32);  in ccm128_init_state()
136       state->cmac.c[6] ^= (uint8_t)(aad_len_u64 >> 24);  in ccm128_init_state()
137       state->cmac.c[7] ^= (uint8_t)(aad_len_u64 >> 16);  in ccm128_init_state()
138       state->cmac.c[8] ^= (uint8_t)(aad_len_u64 >> 8);  in ccm128_init_state()
139       state->cmac.c[9] ^= (uint8_t)aad_len_u64;  in ccm128_init_state()
145         state->cmac.c[i] ^= *aad;  in ccm128_init_state()
149       (*block)(state->cmac.c, state->cmac.c, key);  in ccm128_init_state()
209     state->cmac.u[0] ^= tmp.u[0];  in ccm128_compute_mac()
210     state->cmac.u[1] ^= tmp.u[1];  in ccm128_compute_mac()
211     (*block)(state->cmac.c, state->cmac.c, key);  in ccm128_compute_mac()
217       state->cmac.c[i] ^= in[i];  in ccm128_compute_mac()
219     (*block)(state->cmac.c, state->cmac.c, key);  in ccm128_compute_mac()
227   state->cmac.u[0] ^= tmp.u[0];  in ccm128_compute_mac()
228   state->cmac.u[1] ^= tmp.u[1];  in ccm128_compute_mac()
230   OPENSSL_memcpy(out_tag, state->cmac.c, tag_len);  in ccm128_compute_mac()