466 static uint32_t U2[256] = {  variable
1004 static uint32_t U2[256] = {  variable
1445       U2[T4[(tmp >> 8)  & 0xff] & 0xff] ^   in aes_expand_decryption_key()
1452       U2[T4[(tmp >> 8)  & 0xff] & 0xff] ^   in aes_expand_decryption_key()
1459       U2[T4[(tmp >> 8)  & 0xff] & 0xff] ^   in aes_expand_decryption_key()
1466       U2[T4[(tmp >> 8)  & 0xff] & 0xff] ^   in aes_expand_decryption_key()
1474        ^ U2[aes_sbox[expanded_key[i].v8[2]]]   in aes_expand_decryption_key()
1479        ^ U2[aes_sbox[expanded_key[i].v8[6]]]   in aes_expand_decryption_key()
1484        ^ U2[aes_sbox[expanded_key[i].v8[10]]]   in aes_expand_decryption_key()
1489        ^ U2[aes_sbox[expanded_key[i].v8[14]]]   in aes_expand_decryption_key()
1539     ^ U2[state->v8[10]] ^ U3[state->v8[7]];  in aes_inv_round()
1542     ^ U2[state->v8[14]] ^ U3[state->v8[11]];  in aes_inv_round()
1545     ^ U2[state->v8[2]] ^ U3[state->v8[15]];  in aes_inv_round()
1548     ^ U2[state->v8[6]] ^ U3[state->v8[3]];  in aes_inv_round()
1681     ^ U2[(state->v32[2] >> 8) & 0xff] ^ U3[state->v32[1] & 0xff];  in aes_inv_round()
1684     ^ U2[(state->v32[3] >> 8) & 0xff] ^ U3[state->v32[2] & 0xff];  in aes_inv_round()
1687     ^ U2[(state->v32[0] >> 8) & 0xff] ^ U3[state->v32[3] & 0xff];  in aes_inv_round()
1690     ^ U2[(state->v32[1] >> 8) & 0xff] ^ U3[state->v32[0] & 0xff];  in aes_inv_round()
1693 	^ U2[(state->v32[2] >> 16) & 0xff] ^ U3[state->v32[3] >> 24];  in aes_inv_round()
1696 	^ U2[(state->v32[3] >> 16) & 0xff] ^ U3[state->v32[0] >> 24];  in aes_inv_round()
1699 	^ U2[(state->v32[0] >> 16) & 0xff] ^ U3[state->v32[1] >> 24];  in aes_inv_round()
1702 	^ U2[(state->v32[1] >> 16) & 0xff] ^ U3[state->v32[2] >> 24];  in aes_inv_round()
1819     ^ U2[state->v8[10]] ^ U3[state->v8[15]];  in aes_inv_round()
1822     ^ U2[state->v8[14]] ^ U3[state->v8[3]];  in aes_inv_round()
1825     ^ U2[state->v8[2]] ^ U3[state->v8[7]];  in aes_inv_round()
1828     ^ U2[state->v8[6]] ^ U3[state->v8[11]];  in aes_inv_round()