175 static void * aes_gcm_init_hash_subkey(const u8 *key, size_t key_len, u8 *H)  in aes_gcm_init_hash_subkey()  argument
184 	os_memset(H, 0, AES_BLOCK_SIZE);  in aes_gcm_init_hash_subkey()
185 	aes_encrypt(aes, H, H);  in aes_gcm_init_hash_subkey()
187 			H, AES_BLOCK_SIZE);  in aes_gcm_init_hash_subkey()
192 static void aes_gcm_prepare_j0(const u8 *iv, size_t iv_len, const u8 *H, u8 *J0)  in aes_gcm_prepare_j0()  argument
207 		ghash(H, iv, iv_len, J0);  in aes_gcm_prepare_j0()
210 		ghash(H, len_buf, sizeof(len_buf), J0);  in aes_gcm_prepare_j0()
229 static void aes_gcm_ghash(const u8 *H, const u8 *aad, size_t aad_len,  in aes_gcm_ghash()  argument
241 	ghash(H, aad, aad_len, S);  in aes_gcm_ghash()
242 	ghash(H, crypt, crypt_len, S);  in aes_gcm_ghash()
245 	ghash(H, len_buf, sizeof(len_buf), S);  in aes_gcm_ghash()
258 	u8 H[AES_BLOCK_SIZE];  in aes_gcm_ae()  local
263 	aes = aes_gcm_init_hash_subkey(key, key_len, H);  in aes_gcm_ae()
267 	aes_gcm_prepare_j0(iv, iv_len, H, J0);  in aes_gcm_ae()
272 	aes_gcm_ghash(H, aad, aad_len, crypt, plain_len, S);  in aes_gcm_ae()
292 	u8 H[AES_BLOCK_SIZE];  in aes_gcm_ad()  local
297 	aes = aes_gcm_init_hash_subkey(key, key_len, H);  in aes_gcm_ad()
301 	aes_gcm_prepare_j0(iv, iv_len, H, J0);  in aes_gcm_ad()
306 	aes_gcm_ghash(H, aad, aad_len, crypt, crypt_len, S);  in aes_gcm_ad()