584       ctx->Xi.c[n] ^= *(out++) = *(in++) ^ ctx->EKi.c[n];  in CRYPTO_gcm128_encrypt()
598         (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_encrypt()
602       ctx->Xi.c[n] ^= out[i] = in[i] ^ ctx->EKi.c[n];  in CRYPTO_gcm128_encrypt()
620       (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_encrypt()
624         out_t[i] = in_t[i] ^ ctx->EKi.t[i];  in CRYPTO_gcm128_encrypt()
639       (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_encrypt()
643         out_t[i] = in_t[i] ^ ctx->EKi.t[i];  in CRYPTO_gcm128_encrypt()
656     (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_encrypt()
660       ctx->Xi.t[i] ^= out_t[i] = in_t[i] ^ ctx->EKi.t[i];  in CRYPTO_gcm128_encrypt()
669     (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_encrypt()
673       ctx->Xi.c[n] ^= out[n] = in[n] ^ ctx->EKi.c[n];  in CRYPTO_gcm128_encrypt()
715       *(out++) = c ^ ctx->EKi.c[n];  in CRYPTO_gcm128_decrypt()
731         (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_decrypt()
736       out[i] = c ^ ctx->EKi.c[n];  in CRYPTO_gcm128_decrypt()
756       (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_decrypt()
760         out_t[i] = in_t[i] ^ ctx->EKi.t[i];  in CRYPTO_gcm128_decrypt()
775       (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_decrypt()
779         out_t[i] = in_t[i] ^ ctx->EKi.t[i];  in CRYPTO_gcm128_decrypt()
791     (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_decrypt()
796       out_t[i] = c ^ ctx->EKi.t[i];  in CRYPTO_gcm128_decrypt()
806     (*block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_decrypt()
812       out[n] = c ^ ctx->EKi.c[n];  in CRYPTO_gcm128_decrypt()
850       ctx->Xi.c[n] ^= *(out++) = *(in++) ^ ctx->EKi.c[n];  in CRYPTO_gcm128_encrypt_ctr32()
909     (*ctx->block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_encrypt_ctr32()
913       ctx->Xi.c[n] ^= out[n] = in[n] ^ ctx->EKi.c[n];  in CRYPTO_gcm128_encrypt_ctr32()
952       *(out++) = c ^ ctx->EKi.c[n];  in CRYPTO_gcm128_decrypt_ctr32()
1015     (*ctx->block)(ctx->Yi.c, ctx->EKi.c, key);  in CRYPTO_gcm128_decrypt_ctr32()
1021       out[n] = c ^ ctx->EKi.c[n];  in CRYPTO_gcm128_decrypt_ctr32()