31 typedef struct { uint32_t words[16]; } block_t;  member
45     x.words[4] ^= R(x.words[0] + x.words[12], 7);  in salsa208_word_specification()
46     x.words[8] ^= R(x.words[4] + x.words[0], 9);  in salsa208_word_specification()
47     x.words[12] ^= R(x.words[8] + x.words[4], 13);  in salsa208_word_specification()
48     x.words[0] ^= R(x.words[12] + x.words[8], 18);  in salsa208_word_specification()
49     x.words[9] ^= R(x.words[5] + x.words[1], 7);  in salsa208_word_specification()
50     x.words[13] ^= R(x.words[9] + x.words[5], 9);  in salsa208_word_specification()
51     x.words[1] ^= R(x.words[13] + x.words[9], 13);  in salsa208_word_specification()
52     x.words[5] ^= R(x.words[1] + x.words[13], 18);  in salsa208_word_specification()
53     x.words[14] ^= R(x.words[10] + x.words[6], 7);  in salsa208_word_specification()
54     x.words[2] ^= R(x.words[14] + x.words[10], 9);  in salsa208_word_specification()
55     x.words[6] ^= R(x.words[2] + x.words[14], 13);  in salsa208_word_specification()
56     x.words[10] ^= R(x.words[6] + x.words[2], 18);  in salsa208_word_specification()
57     x.words[3] ^= R(x.words[15] + x.words[11], 7);  in salsa208_word_specification()
58     x.words[7] ^= R(x.words[3] + x.words[15], 9);  in salsa208_word_specification()
59     x.words[11] ^= R(x.words[7] + x.words[3], 13);  in salsa208_word_specification()
60     x.words[15] ^= R(x.words[11] + x.words[7], 18);  in salsa208_word_specification()
61     x.words[1] ^= R(x.words[0] + x.words[3], 7);  in salsa208_word_specification()
62     x.words[2] ^= R(x.words[1] + x.words[0], 9);  in salsa208_word_specification()
63     x.words[3] ^= R(x.words[2] + x.words[1], 13);  in salsa208_word_specification()
64     x.words[0] ^= R(x.words[3] + x.words[2], 18);  in salsa208_word_specification()
65     x.words[6] ^= R(x.words[5] + x.words[4], 7);  in salsa208_word_specification()
66     x.words[7] ^= R(x.words[6] + x.words[5], 9);  in salsa208_word_specification()
67     x.words[4] ^= R(x.words[7] + x.words[6], 13);  in salsa208_word_specification()
68     x.words[5] ^= R(x.words[4] + x.words[7], 18);  in salsa208_word_specification()
69     x.words[11] ^= R(x.words[10] + x.words[9], 7);  in salsa208_word_specification()
70     x.words[8] ^= R(x.words[11] + x.words[10], 9);  in salsa208_word_specification()
71     x.words[9] ^= R(x.words[8] + x.words[11], 13);  in salsa208_word_specification()
72     x.words[10] ^= R(x.words[9] + x.words[8], 18);  in salsa208_word_specification()
73     x.words[12] ^= R(x.words[15] + x.words[14], 7);  in salsa208_word_specification()
74     x.words[13] ^= R(x.words[12] + x.words[15], 9);  in salsa208_word_specification()
75     x.words[14] ^= R(x.words[13] + x.words[12], 13);  in salsa208_word_specification()
76     x.words[15] ^= R(x.words[14] + x.words[13], 18);  in salsa208_word_specification()
80     inout->words[i] += x.words[i];  in salsa208_word_specification()
87     out->words[i] = a->words[i] ^ b->words[i];  in xor_block()
126     uint32_t j = B[2 * r - 1].words[0] & (N - 1);  in scryptROMix()