118     t1 = wv[h] + SHA256_F2(wv[e]) + CH(wv[e], wv[f], wv[g]) \
120     t2 = SHA256_F1(wv[a]) + MAJ(wv[a], wv[b], wv[c]);       \
121     wv[d] += t1;                                            \
122     wv[h] = t1 + t2;                                        \
127     t1 = wv[h] + SHA512_F2(wv[e]) + CH(wv[e], wv[f], wv[g]) \
129     t2 = SHA512_F1(wv[a]) + MAJ(wv[a], wv[b], wv[c]);       \
130     wv[d] += t1;                                            \
131     wv[h] = t1 + t2;                                        \
220     uint32 wv[8];  in sha256_transf()  local
242             wv[j] = ctx->h[j];  in sha256_transf()
246             t1 = wv[7] + SHA256_F2(wv[4]) + CH(wv[4], wv[5], wv[6])  in sha256_transf()
248             t2 = SHA256_F1(wv[0]) + MAJ(wv[0], wv[1], wv[2]);  in sha256_transf()
249             wv[7] = wv[6];  in sha256_transf()
250             wv[6] = wv[5];  in sha256_transf()
251             wv[5] = wv[4];  in sha256_transf()
252             wv[4] = wv[3] + t1;  in sha256_transf()
253             wv[3] = wv[2];  in sha256_transf()
254             wv[2] = wv[1];  in sha256_transf()
255             wv[1] = wv[0];  in sha256_transf()
256             wv[0] = t1 + t2;  in sha256_transf()
260             ctx->h[j] += wv[j];  in sha256_transf()
285         wv[0] = ctx->h[0]; wv[1] = ctx->h[1];  in sha256_transf()
286         wv[2] = ctx->h[2]; wv[3] = ctx->h[3];  in sha256_transf()
287         wv[4] = ctx->h[4]; wv[5] = ctx->h[5];  in sha256_transf()
288         wv[6] = ctx->h[6]; wv[7] = ctx->h[7];  in sha256_transf()
323         ctx->h[0] += wv[0]; ctx->h[1] += wv[1];  in sha256_transf()
324         ctx->h[2] += wv[2]; ctx->h[3] += wv[3];  in sha256_transf()
325         ctx->h[4] += wv[4]; ctx->h[5] += wv[5];  in sha256_transf()
326         ctx->h[6] += wv[6]; ctx->h[7] += wv[7];  in sha256_transf()
436     uint64 wv[8];  in sha512_transf()  local
454             wv[j] = ctx->h[j];  in sha512_transf()
458             t1 = wv[7] + SHA512_F2(wv[4]) + CH(wv[4], wv[5], wv[6])  in sha512_transf()
460             t2 = SHA512_F1(wv[0]) + MAJ(wv[0], wv[1], wv[2]);  in sha512_transf()
461             wv[7] = wv[6];  in sha512_transf()
462             wv[6] = wv[5];  in sha512_transf()
463             wv[5] = wv[4];  in sha512_transf()
464             wv[4] = wv[3] + t1;  in sha512_transf()
465             wv[3] = wv[2];  in sha512_transf()
466             wv[2] = wv[1];  in sha512_transf()
467             wv[1] = wv[0];  in sha512_transf()
468             wv[0] = t1 + t2;  in sha512_transf()
472             ctx->h[j] += wv[j];  in sha512_transf()
501         wv[0] = ctx->h[0]; wv[1] = ctx->h[1];  in sha512_transf()
502         wv[2] = ctx->h[2]; wv[3] = ctx->h[3];  in sha512_transf()
503         wv[4] = ctx->h[4]; wv[5] = ctx->h[5];  in sha512_transf()
504         wv[6] = ctx->h[6]; wv[7] = ctx->h[7];  in sha512_transf()
519         ctx->h[0] += wv[0]; ctx->h[1] += wv[1];  in sha512_transf()
520         ctx->h[2] += wv[2]; ctx->h[3] += wv[3];  in sha512_transf()
521         ctx->h[4] += wv[4]; ctx->h[5] += wv[5];  in sha512_transf()
522         ctx->h[6] += wv[6]; ctx->h[7] += wv[7];  in sha512_transf()