626     block ad_offset;     /* Memory correct               */  member
797     block ad_offset, ad_checksum;  in process_ad()  local
801     ad_offset = ctx->ad_offset;  in process_ad()
810             oa[0] = xor_block(ad_offset, ctx->L[0]);  in process_ad()
814             oa[2] = xor_block(ad_offset, ctx->L[1]);  in process_ad()
817             ad_offset = xor_block(oa[2], getL(ctx, tz));  in process_ad()
818             ta[3] = xor_block(ad_offset, adp[3]);  in process_ad()
826             oa[6] = xor_block(ad_offset, ctx->L[2]);  in process_ad()
828             ad_offset = xor_block(oa[6], getL(ctx, tz));  in process_ad()
829             ta[7] = xor_block(ad_offset, adp[7]);  in process_ad()
845         ctx->ad_offset = ad_offset;  in process_ad()
858                 tmp.bl = xor_block(ad_offset, ctx->L[0]);  in process_ad()
862                 ad_offset = xor_block(ad_offset, ctx->L[1]);  in process_ad()
863                 ta[2] = xor_block(ad_offset, adp[2]);  in process_ad()
864                 ad_offset = xor_block(ad_offset, ctx->L[2]);  in process_ad()
865                 ta[3] = xor_block(ad_offset, adp[3]);  in process_ad()
871                 ad_offset = xor_block(ad_offset, ctx->L[0]);  in process_ad()
872                 ta[k] = xor_block(ad_offset, adp[k]);  in process_ad()
873                 ad_offset = xor_block(ad_offset, getL(ctx, ntz(k + 2)));  in process_ad()
874                 ta[k + 1] = xor_block(ad_offset, adp[k + 1]);  in process_ad()
879                 ad_offset = xor_block(ad_offset, ctx->L[0]);  in process_ad()
880                 ta[k] = xor_block(ad_offset, adp[k]);  in process_ad()
885                 ad_offset = xor_block(ad_offset, ctx->Lstar);  in process_ad()
889                 ta[k] = xor_block(ad_offset, tmp.bl);  in process_ad()
935         ctx->ad_offset = ctx->checksum = zero_block();  in ae_encrypt()
1154         ctx->ad_offset = ctx->checksum = zero_block();  in ae_decrypt()