192 static void aes_gcm_prepare_j0(const u8 *iv, size_t iv_len, const u8 *H, u8 *J0)  in aes_gcm_prepare_j0()  argument
198 		os_memcpy(J0, iv, iv_len);  in aes_gcm_prepare_j0()
199 		os_memset(J0 + iv_len, 0, AES_BLOCK_SIZE - iv_len);  in aes_gcm_prepare_j0()
200 		J0[AES_BLOCK_SIZE - 1] = 0x01;  in aes_gcm_prepare_j0()
206 		ghash_start(J0);  in aes_gcm_prepare_j0()
207 		ghash(H, iv, iv_len, J0);  in aes_gcm_prepare_j0()
210 		ghash(H, len_buf, sizeof(len_buf), J0);  in aes_gcm_prepare_j0()
215 static void aes_gcm_gctr(void *aes, const u8 *J0, const u8 *in, size_t len,  in aes_gcm_gctr()  argument
223 	os_memcpy(J0inc, J0, AES_BLOCK_SIZE);  in aes_gcm_gctr()
259 	u8 J0[AES_BLOCK_SIZE];  in aes_gcm_ae()  local
267 	aes_gcm_prepare_j0(iv, iv_len, H, J0);  in aes_gcm_ae()
270 	aes_gcm_gctr(aes, J0, plain, plain_len, crypt);  in aes_gcm_ae()
275 	aes_gctr(aes, J0, S, sizeof(S), tag);  in aes_gcm_ae()
293 	u8 J0[AES_BLOCK_SIZE];  in aes_gcm_ad()  local
301 	aes_gcm_prepare_j0(iv, iv_len, H, J0);  in aes_gcm_ad()
304 	aes_gcm_gctr(aes, J0, crypt, crypt_len, plain);  in aes_gcm_ad()
309 	aes_gctr(aes, J0, S, sizeof(S), T);  in aes_gcm_ad()