123   unsigned *rot[5], *temp;  in sha1_transform()  local
128     rot[i] = TT.state + i;  in sha1_transform()
135       work = *rot[2] ^ *rot[3];  in sha1_transform()
136       if (!i) work = (work & *rot[1]) ^ *rot[3];  in sha1_transform()
138         if (i==2) work = ((*rot[1]|*rot[2])&*rot[3])|(*rot[1]&*rot[2]);  in sha1_transform()
139         else work ^= *rot[1];  in sha1_transform()
148       *rot[4] += work + rol(*rot[0],5) + rconsts[i];  in sha1_transform()
149       *rot[1] = rol(*rot[1],30);  in sha1_transform()
152       temp = rot[4];  in sha1_transform()
153       for (k=4; k; k--) rot[k] = rot[k-1];  in sha1_transform()
154       *rot = temp;  in sha1_transform()