85 #define S(x, n)         ROR64c(x, n)  macro
87 #define Sigma0(x)       (S(x, 28) ^ S(x, 34) ^ S(x, 39))
88 #define Sigma1(x)       (S(x, 14) ^ S(x, 18) ^ S(x, 41))
89 #define Gamma0(x)       (S(x, 1) ^ S(x, 8) ^ R(x, 7))
90 #define Gamma1(x)       (S(x, 19) ^ S(x, 61) ^ R(x, 6))
99     ulong64 S[8], W[80], t0, t1;  in _sha512_compress()  local
104         S[i] = md->sha512.state[i];  in _sha512_compress()
120         t0 = S[7] + Sigma1(S[4]) + Ch(S[4], S[5], S[6]) + K[i] + W[i];  in _sha512_compress()
121         t1 = Sigma0(S[0]) + Maj(S[0], S[1], S[2]);  in _sha512_compress()
122         S[7] = S[6];  in _sha512_compress()
123         S[6] = S[5];  in _sha512_compress()
124         S[5] = S[4];  in _sha512_compress()
125         S[4] = S[3] + t0;  in _sha512_compress()
126         S[3] = S[2];  in _sha512_compress()
127         S[2] = S[1];  in _sha512_compress()
128         S[1] = S[0];  in _sha512_compress()
129         S[0] = t0 + t1;  in _sha512_compress()
139          RND(S[0],S[1],S[2],S[3],S[4],S[5],S[6],S[7],i+0);  in _sha512_compress()
140          RND(S[7],S[0],S[1],S[2],S[3],S[4],S[5],S[6],i+1);  in _sha512_compress()
141          RND(S[6],S[7],S[0],S[1],S[2],S[3],S[4],S[5],i+2);  in _sha512_compress()
142          RND(S[5],S[6],S[7],S[0],S[1],S[2],S[3],S[4],i+3);  in _sha512_compress()
143          RND(S[4],S[5],S[6],S[7],S[0],S[1],S[2],S[3],i+4);  in _sha512_compress()
144          RND(S[3],S[4],S[5],S[6],S[7],S[0],S[1],S[2],i+5);  in _sha512_compress()
145          RND(S[2],S[3],S[4],S[5],S[6],S[7],S[0],S[1],i+6);  in _sha512_compress()
146          RND(S[1],S[2],S[3],S[4],S[5],S[6],S[7],S[0],i+7);  in _sha512_compress()
153         md->sha512.state[i] = md->sha512.state[i] + S[i];  in _sha512_compress()