31 	union aegis_block blocks[AEGIS128_STATE_BLOCKS];  member
80 	tmp = state->blocks[AEGIS128_STATE_BLOCKS - 1];  in crypto_aegis128_update()
82 		crypto_aegis_aesenc(&state->blocks[i], &state->blocks[i - 1],  in crypto_aegis128_update()
83 				    &state->blocks[i]);  in crypto_aegis128_update()
84 	crypto_aegis_aesenc(&state->blocks[0], &tmp, &state->blocks[0]);  in crypto_aegis128_update()
96 	crypto_aegis_block_xor(&state->blocks[0], msg);  in crypto_aegis128_update_a()
107 	crypto_xor(state->blocks[0].bytes, msg, AEGIS_BLOCK_SIZE);  in crypto_aegis128_update_u()
120 	state->blocks[0] = key_iv;  in crypto_aegis128_init()
121 	state->blocks[1] = crypto_aegis_const[1];  in crypto_aegis128_init()
122 	state->blocks[2] = crypto_aegis_const[0];  in crypto_aegis128_init()
123 	state->blocks[3] = *key;  in crypto_aegis128_init()
124 	state->blocks[4] = *key;  in crypto_aegis128_init()
126 	crypto_aegis_block_xor(&state->blocks[3], &crypto_aegis_const[0]);  in crypto_aegis128_init()
127 	crypto_aegis_block_xor(&state->blocks[4], &crypto_aegis_const[1]);  in crypto_aegis128_init()
170 			tmp = state->blocks[2];  in crypto_aegis128_encrypt_chunk()
171 			crypto_aegis_block_and(&tmp, &state->blocks[3]);  in crypto_aegis128_encrypt_chunk()
172 			crypto_aegis_block_xor(&tmp, &state->blocks[4]);  in crypto_aegis128_encrypt_chunk()
173 			crypto_aegis_block_xor(&tmp, &state->blocks[1]);  in crypto_aegis128_encrypt_chunk()
186 			tmp = state->blocks[2];  in crypto_aegis128_encrypt_chunk()
187 			crypto_aegis_block_and(&tmp, &state->blocks[3]);  in crypto_aegis128_encrypt_chunk()
188 			crypto_aegis_block_xor(&tmp, &state->blocks[4]);  in crypto_aegis128_encrypt_chunk()
189 			crypto_aegis_block_xor(&tmp, &state->blocks[1]);  in crypto_aegis128_encrypt_chunk()
206 		tmp = state->blocks[2];  in crypto_aegis128_encrypt_chunk()
207 		crypto_aegis_block_and(&tmp, &state->blocks[3]);  in crypto_aegis128_encrypt_chunk()
208 		crypto_aegis_block_xor(&tmp, &state->blocks[4]);  in crypto_aegis128_encrypt_chunk()
209 		crypto_aegis_block_xor(&tmp, &state->blocks[1]);  in crypto_aegis128_encrypt_chunk()
231 			tmp = state->blocks[2];  in crypto_aegis128_decrypt_chunk()
232 			crypto_aegis_block_and(&tmp, &state->blocks[3]);  in crypto_aegis128_decrypt_chunk()
233 			crypto_aegis_block_xor(&tmp, &state->blocks[4]);  in crypto_aegis128_decrypt_chunk()
234 			crypto_aegis_block_xor(&tmp, &state->blocks[1]);  in crypto_aegis128_decrypt_chunk()
247 			tmp = state->blocks[2];  in crypto_aegis128_decrypt_chunk()
248 			crypto_aegis_block_and(&tmp, &state->blocks[3]);  in crypto_aegis128_decrypt_chunk()
249 			crypto_aegis_block_xor(&tmp, &state->blocks[4]);  in crypto_aegis128_decrypt_chunk()
250 			crypto_aegis_block_xor(&tmp, &state->blocks[1]);  in crypto_aegis128_decrypt_chunk()
267 		tmp = state->blocks[2];  in crypto_aegis128_decrypt_chunk()
268 		crypto_aegis_block_and(&tmp, &state->blocks[3]);  in crypto_aegis128_decrypt_chunk()
269 		crypto_aegis_block_xor(&tmp, &state->blocks[4]);  in crypto_aegis128_decrypt_chunk()
270 		crypto_aegis_block_xor(&tmp, &state->blocks[1]);  in crypto_aegis128_decrypt_chunk()
360 	crypto_aegis_block_xor(&tmp, &state->blocks[3]);  in crypto_aegis128_final()
366 		crypto_aegis_block_xor(tag_xor, &state->blocks[i]);  in crypto_aegis128_final()