179 	union { u64 u[2]; u8 c[16]; } scratch;  in CRYPTO_ccm128_encrypt()  local
211 		(*block)(ctx->nonce.c,scratch.c,key);  in CRYPTO_ccm128_encrypt()
214 		temp.u[0] ^= scratch.u[0];  in CRYPTO_ccm128_encrypt()
215 		temp.u[1] ^= scratch.u[1];  in CRYPTO_ccm128_encrypt()
218 		((u64*)out)[0] = scratch.u[0]^((u64*)inp)[0];  in CRYPTO_ccm128_encrypt()
219 		((u64*)out)[1] = scratch.u[1]^((u64*)inp)[1];  in CRYPTO_ccm128_encrypt()
229 		(*block)(ctx->nonce.c,scratch.c,key);  in CRYPTO_ccm128_encrypt()
230 		for (i=0; i<len; ++i) out[i] = scratch.c[i]^inp[i];  in CRYPTO_ccm128_encrypt()
236 	(*block)(ctx->nonce.c,scratch.c,key);  in CRYPTO_ccm128_encrypt()
237 	ctx->cmac.u[0] ^= scratch.u[0];  in CRYPTO_ccm128_encrypt()
238 	ctx->cmac.u[1] ^= scratch.u[1];  in CRYPTO_ccm128_encrypt()
254 	union { u64 u[2]; u8 c[16]; } scratch;  in CRYPTO_ccm128_decrypt()  local
274 		(*block)(ctx->nonce.c,scratch.c,key);  in CRYPTO_ccm128_decrypt()
278 		ctx->cmac.u[0] ^= (scratch.u[0] ^= temp.u[0]);  in CRYPTO_ccm128_decrypt()
279 		ctx->cmac.u[1] ^= (scratch.u[1] ^= temp.u[1]);  in CRYPTO_ccm128_decrypt()
280 		memcpy (out,scratch.c,16);  in CRYPTO_ccm128_decrypt()
282 		ctx->cmac.u[0] ^= (((u64*)out)[0] = scratch.u[0]^((u64*)inp)[0]);  in CRYPTO_ccm128_decrypt()
283 		ctx->cmac.u[1] ^= (((u64*)out)[1] = scratch.u[1]^((u64*)inp)[1]);  in CRYPTO_ccm128_decrypt()
293 		(*block)(ctx->nonce.c,scratch.c,key);  in CRYPTO_ccm128_decrypt()
295 			ctx->cmac.c[i] ^= (out[i] = scratch.c[i]^inp[i]);  in CRYPTO_ccm128_decrypt()
302 	(*block)(ctx->nonce.c,scratch.c,key);  in CRYPTO_ccm128_decrypt()
303 	ctx->cmac.u[0] ^= scratch.u[0];  in CRYPTO_ccm128_decrypt()
304 	ctx->cmac.u[1] ^= scratch.u[1];  in CRYPTO_ccm128_decrypt()
333 	union { u64 u[2]; u8 c[16]; } scratch;  in CRYPTO_ccm128_encrypt_ccm64()  local
365 		(*block)(ctx->nonce.c,scratch.c,key);  in CRYPTO_ccm128_encrypt_ccm64()
366 		for (i=0; i<len; ++i) out[i] = scratch.c[i]^inp[i];  in CRYPTO_ccm128_encrypt_ccm64()
372 	(*block)(ctx->nonce.c,scratch.c,key);  in CRYPTO_ccm128_encrypt_ccm64()
373 	ctx->cmac.u[0] ^= scratch.u[0];  in CRYPTO_ccm128_encrypt_ccm64()
374 	ctx->cmac.u[1] ^= scratch.u[1];  in CRYPTO_ccm128_encrypt_ccm64()
390 	union { u64 u[2]; u8 c[16]; } scratch;  in CRYPTO_ccm128_decrypt_ccm64()  local
416 		(*block)(ctx->nonce.c,scratch.c,key);  in CRYPTO_ccm128_decrypt_ccm64()
418 			ctx->cmac.c[i] ^= (out[i] = scratch.c[i]^inp[i]);  in CRYPTO_ccm128_decrypt_ccm64()
425 	(*block)(ctx->nonce.c,scratch.c,key);  in CRYPTO_ccm128_decrypt_ccm64()
426 	ctx->cmac.u[0] ^= scratch.u[0];  in CRYPTO_ccm128_decrypt_ccm64()
427 	ctx->cmac.u[1] ^= scratch.u[1];  in CRYPTO_ccm128_decrypt_ccm64()