95 	crypto_xor(state->blocks[0].bytes, msg, AEGIS_BLOCK_SIZE);  in crypto_aegis128_update_u()
106 	crypto_xor(key_iv.bytes, iv, AEGIS_BLOCK_SIZE);  in crypto_aegis128_init()
131 		while (size >= AEGIS_BLOCK_SIZE) {  in crypto_aegis128_ad()
134 			size -= AEGIS_BLOCK_SIZE;  in crypto_aegis128_ad()
138 		while (size >= AEGIS_BLOCK_SIZE) {  in crypto_aegis128_ad()
141 			size -= AEGIS_BLOCK_SIZE;  in crypto_aegis128_ad()
142 			src += AEGIS_BLOCK_SIZE;  in crypto_aegis128_ad()
159 		while (size >= AEGIS_BLOCK_SIZE) {  in crypto_aegis128_encrypt_chunk()
175 			size -= AEGIS_BLOCK_SIZE;  in crypto_aegis128_encrypt_chunk()
176 			src += AEGIS_BLOCK_SIZE;  in crypto_aegis128_encrypt_chunk()
177 			dst += AEGIS_BLOCK_SIZE;  in crypto_aegis128_encrypt_chunk()
180 		while (size >= AEGIS_BLOCK_SIZE) {  in crypto_aegis128_encrypt_chunk()
185 			crypto_xor(tmp.bytes, src, AEGIS_BLOCK_SIZE);  in crypto_aegis128_encrypt_chunk()
189 			memcpy(dst, tmp.bytes, AEGIS_BLOCK_SIZE);  in crypto_aegis128_encrypt_chunk()
191 			size -= AEGIS_BLOCK_SIZE;  in crypto_aegis128_encrypt_chunk()
192 			src += AEGIS_BLOCK_SIZE;  in crypto_aegis128_encrypt_chunk()
193 			dst += AEGIS_BLOCK_SIZE;  in crypto_aegis128_encrypt_chunk()
220 		while (size >= AEGIS_BLOCK_SIZE) {  in crypto_aegis128_decrypt_chunk()
236 			size -= AEGIS_BLOCK_SIZE;  in crypto_aegis128_decrypt_chunk()
237 			src += AEGIS_BLOCK_SIZE;  in crypto_aegis128_decrypt_chunk()
238 			dst += AEGIS_BLOCK_SIZE;  in crypto_aegis128_decrypt_chunk()
241 		while (size >= AEGIS_BLOCK_SIZE) {  in crypto_aegis128_decrypt_chunk()
246 			crypto_xor(tmp.bytes, src, AEGIS_BLOCK_SIZE);  in crypto_aegis128_decrypt_chunk()
250 			memcpy(dst, tmp.bytes, AEGIS_BLOCK_SIZE);  in crypto_aegis128_decrypt_chunk()
252 			size -= AEGIS_BLOCK_SIZE;  in crypto_aegis128_decrypt_chunk()
253 			src += AEGIS_BLOCK_SIZE;  in crypto_aegis128_decrypt_chunk()
254 			dst += AEGIS_BLOCK_SIZE;  in crypto_aegis128_decrypt_chunk()
268 		memset(msg.bytes + size, 0, AEGIS_BLOCK_SIZE - size);  in crypto_aegis128_decrypt_chunk()
292 		if (pos + size >= AEGIS_BLOCK_SIZE) {  in crypto_aegis128_process_ad()
294 				unsigned int fill = AEGIS_BLOCK_SIZE - pos;  in crypto_aegis128_process_ad()
303 			src += left & ~(AEGIS_BLOCK_SIZE - 1);  in crypto_aegis128_process_ad()
304 			left &= AEGIS_BLOCK_SIZE - 1;  in crypto_aegis128_process_ad()
317 		memset(buf.bytes + pos, 0, AEGIS_BLOCK_SIZE - pos);  in crypto_aegis128_process_ad()
514 	.chunksize		= AEGIS_BLOCK_SIZE,
533 	.chunksize		= AEGIS_BLOCK_SIZE,