92 #define RNDr(S, W, i, k)			\  argument
97 	    W[i] + k)
106 	uint32_t W[64];  in SHA256_Transform()  local
112 	be32dec_vect(W, block, 64);  in SHA256_Transform()
114 		W[i] = s1(W[i - 2]) + W[i - 7] + s0(W[i - 15]) + W[i - 16];  in SHA256_Transform()
120 	RNDr(S, W, 0, 0x428a2f98);  in SHA256_Transform()
121 	RNDr(S, W, 1, 0x71374491);  in SHA256_Transform()
122 	RNDr(S, W, 2, 0xb5c0fbcf);  in SHA256_Transform()
123 	RNDr(S, W, 3, 0xe9b5dba5);  in SHA256_Transform()
124 	RNDr(S, W, 4, 0x3956c25b);  in SHA256_Transform()
125 	RNDr(S, W, 5, 0x59f111f1);  in SHA256_Transform()
126 	RNDr(S, W, 6, 0x923f82a4);  in SHA256_Transform()
127 	RNDr(S, W, 7, 0xab1c5ed5);  in SHA256_Transform()
128 	RNDr(S, W, 8, 0xd807aa98);  in SHA256_Transform()
129 	RNDr(S, W, 9, 0x12835b01);  in SHA256_Transform()
130 	RNDr(S, W, 10, 0x243185be);  in SHA256_Transform()
131 	RNDr(S, W, 11, 0x550c7dc3);  in SHA256_Transform()
132 	RNDr(S, W, 12, 0x72be5d74);  in SHA256_Transform()
133 	RNDr(S, W, 13, 0x80deb1fe);  in SHA256_Transform()
134 	RNDr(S, W, 14, 0x9bdc06a7);  in SHA256_Transform()
135 	RNDr(S, W, 15, 0xc19bf174);  in SHA256_Transform()
136 	RNDr(S, W, 16, 0xe49b69c1);  in SHA256_Transform()
137 	RNDr(S, W, 17, 0xefbe4786);  in SHA256_Transform()
138 	RNDr(S, W, 18, 0x0fc19dc6);  in SHA256_Transform()
139 	RNDr(S, W, 19, 0x240ca1cc);  in SHA256_Transform()
140 	RNDr(S, W, 20, 0x2de92c6f);  in SHA256_Transform()
141 	RNDr(S, W, 21, 0x4a7484aa);  in SHA256_Transform()
142 	RNDr(S, W, 22, 0x5cb0a9dc);  in SHA256_Transform()
143 	RNDr(S, W, 23, 0x76f988da);  in SHA256_Transform()
144 	RNDr(S, W, 24, 0x983e5152);  in SHA256_Transform()
145 	RNDr(S, W, 25, 0xa831c66d);  in SHA256_Transform()
146 	RNDr(S, W, 26, 0xb00327c8);  in SHA256_Transform()
147 	RNDr(S, W, 27, 0xbf597fc7);  in SHA256_Transform()
148 	RNDr(S, W, 28, 0xc6e00bf3);  in SHA256_Transform()
149 	RNDr(S, W, 29, 0xd5a79147);  in SHA256_Transform()
150 	RNDr(S, W, 30, 0x06ca6351);  in SHA256_Transform()
151 	RNDr(S, W, 31, 0x14292967);  in SHA256_Transform()
152 	RNDr(S, W, 32, 0x27b70a85);  in SHA256_Transform()
153 	RNDr(S, W, 33, 0x2e1b2138);  in SHA256_Transform()
154 	RNDr(S, W, 34, 0x4d2c6dfc);  in SHA256_Transform()
155 	RNDr(S, W, 35, 0x53380d13);  in SHA256_Transform()
156 	RNDr(S, W, 36, 0x650a7354);  in SHA256_Transform()
157 	RNDr(S, W, 37, 0x766a0abb);  in SHA256_Transform()
158 	RNDr(S, W, 38, 0x81c2c92e);  in SHA256_Transform()
159 	RNDr(S, W, 39, 0x92722c85);  in SHA256_Transform()
160 	RNDr(S, W, 40, 0xa2bfe8a1);  in SHA256_Transform()
161 	RNDr(S, W, 41, 0xa81a664b);  in SHA256_Transform()
162 	RNDr(S, W, 42, 0xc24b8b70);  in SHA256_Transform()
163 	RNDr(S, W, 43, 0xc76c51a3);  in SHA256_Transform()
164 	RNDr(S, W, 44, 0xd192e819);  in SHA256_Transform()
165 	RNDr(S, W, 45, 0xd6990624);  in SHA256_Transform()
166 	RNDr(S, W, 46, 0xf40e3585);  in SHA256_Transform()
167 	RNDr(S, W, 47, 0x106aa070);  in SHA256_Transform()
168 	RNDr(S, W, 48, 0x19a4c116);  in SHA256_Transform()
169 	RNDr(S, W, 49, 0x1e376c08);  in SHA256_Transform()
170 	RNDr(S, W, 50, 0x2748774c);  in SHA256_Transform()
171 	RNDr(S, W, 51, 0x34b0bcb5);  in SHA256_Transform()
172 	RNDr(S, W, 52, 0x391c0cb3);  in SHA256_Transform()
173 	RNDr(S, W, 53, 0x4ed8aa4a);  in SHA256_Transform()
174 	RNDr(S, W, 54, 0x5b9cca4f);  in SHA256_Transform()
175 	RNDr(S, W, 55, 0x682e6ff3);  in SHA256_Transform()
176 	RNDr(S, W, 56, 0x748f82ee);  in SHA256_Transform()
177 	RNDr(S, W, 57, 0x78a5636f);  in SHA256_Transform()
178 	RNDr(S, W, 58, 0x84c87814);  in SHA256_Transform()
179 	RNDr(S, W, 59, 0x8cc70208);  in SHA256_Transform()
180 	RNDr(S, W, 60, 0x90befffa);  in SHA256_Transform()
181 	RNDr(S, W, 61, 0xa4506ceb);  in SHA256_Transform()
182 	RNDr(S, W, 62, 0xbef9a3f7);  in SHA256_Transform()
183 	RNDr(S, W, 63, 0xc67178f2);  in SHA256_Transform()