799     unsigned i, k, tz, remaining;  in process_ad()  local
855             k = 0;  in process_ad()
867                 k = 4;  in process_ad()
872                 ta[k] = xor_block(ad_offset, adp[k]);  in process_ad()
873                 ad_offset = xor_block(ad_offset, getL(ctx, ntz(k + 2)));  in process_ad()
874                 ta[k + 1] = xor_block(ad_offset, adp[k + 1]);  in process_ad()
876                 k += 2;  in process_ad()
880                 ta[k] = xor_block(ad_offset, adp[k]);  in process_ad()
882                 ++k;  in process_ad()
887                 memcpy(tmp.u8, adp + k, remaining);  in process_ad()
889                 ta[k] = xor_block(ad_offset, tmp.bl);  in process_ad()
890                 ++k;  in process_ad()
892             AES_ecb_encrypt_blks(ta, k, &ctx->encrypt_key);  in process_ad()
893             switch (k) {  in process_ad()
928     unsigned i, k;  in ae_encrypt()  local
1010         k = 0; /* How many blocks in ta[] need ECBing */  in ae_encrypt()
1027                 k = 4;  in ae_encrypt()
1031                 oa[k] = xor_block(offset, ctx->L[0]);  in ae_encrypt()
1032                 ta[k] = xor_block(oa[k], ptp[k]);  in ae_encrypt()
1033                 checksum = xor_block(checksum, ptp[k]);  in ae_encrypt()
1034                 offset = oa[k + 1] = xor_block(oa[k], ctx->L[1]);  in ae_encrypt()
1035                 ta[k + 1] = xor_block(offset, ptp[k + 1]);  in ae_encrypt()
1036                 checksum = xor_block(checksum, ptp[k + 1]);  in ae_encrypt()
1038                 k += 2;  in ae_encrypt()
1041                 offset = oa[k] = xor_block(offset, ctx->L[0]);  in ae_encrypt()
1042                 ta[k] = xor_block(offset, ptp[k]);  in ae_encrypt()
1043                 checksum = xor_block(checksum, ptp[k]);  in ae_encrypt()
1045                 ++k;  in ae_encrypt()
1049                 memcpy(tmp.u8, ptp + k, remaining);  in ae_encrypt()
1052                 ta[k] = offset = xor_block(offset, ctx->Lstar);  in ae_encrypt()
1053                 ++k;  in ae_encrypt()
1057         ta[k] = xor_block(offset, checksum);      /* Part of tag gen */  in ae_encrypt()
1058         AES_ecb_encrypt_blks(ta, k + 1, &ctx->encrypt_key);  in ae_encrypt()
1059         offset = xor_block(ta[k], ctx->ad_checksum); /* Part of tag gen */  in ae_encrypt()
1061             --k;  in ae_encrypt()
1062             tmp.bl = xor_block(tmp.bl, ta[k]);  in ae_encrypt()
1063             memcpy(ctp + k, tmp.u8, remaining);  in ae_encrypt()
1065         switch (k) {  in ae_encrypt()
1139     unsigned i, k;  in ae_decrypt()  local
1228         k = 0; /* How many blocks in ta[] need ECBing */  in ae_decrypt()
1241                 k = 4;  in ae_decrypt()
1245                 oa[k] = xor_block(offset, ctx->L[0]);  in ae_decrypt()
1246                 ta[k] = xor_block(oa[k], ctp[k]);  in ae_decrypt()
1247                 offset = oa[k + 1] = xor_block(oa[k], ctx->L[1]);  in ae_decrypt()
1248                 ta[k + 1] = xor_block(offset, ctp[k + 1]);  in ae_decrypt()
1250                 k += 2;  in ae_decrypt()
1253                 offset = oa[k] = xor_block(offset, ctx->L[0]);  in ae_decrypt()
1254                 ta[k] = xor_block(offset, ctp[k]);  in ae_decrypt()
1256                 ++k;  in ae_decrypt()
1263                 memcpy(tmp.u8, ctp + k, remaining);  in ae_decrypt()
1266                 memcpy(ptp + k, tmp.u8, remaining);  in ae_decrypt()
1270         AES_ecb_decrypt_blks(ta, k, &ctx->decrypt_key);  in ae_decrypt()
1271         switch (k) {  in ae_decrypt()