451 #define subr(x) subR[(x)]  macro
471     subl(0) = kll; subr(0) = klr;  in camellia_setup128()
472     subl(1) = krl; subr(1) = krr;  in camellia_setup128()
474     subl(4) = kll; subr(4) = klr;  in camellia_setup128()
475     subl(5) = krl; subr(5) = krr;  in camellia_setup128()
477     subl(10) = kll; subr(10) = klr;  in camellia_setup128()
478     subl(11) = krl; subr(11) = krr;  in camellia_setup128()
480     subl(13) = krl; subr(13) = krr;  in camellia_setup128()
482     subl(16) = kll; subr(16) = klr;  in camellia_setup128()
483     subl(17) = krl; subr(17) = krr;  in camellia_setup128()
485     subl(18) = kll; subr(18) = klr;  in camellia_setup128()
486     subl(19) = krl; subr(19) = krr;  in camellia_setup128()
488     subl(22) = kll; subr(22) = klr;  in camellia_setup128()
489     subl(23) = krl; subr(23) = krr;  in camellia_setup128()
492     kll = subl(0); klr = subr(0);  in camellia_setup128()
493     krl = subl(1); krr = subr(1);  in camellia_setup128()
511     subl(2) = kll; subr(2) = klr;  in camellia_setup128()
512     subl(3) = krl; subr(3) = krr;  in camellia_setup128()
514     subl(6) = kll; subr(6) = klr;  in camellia_setup128()
515     subl(7) = krl; subr(7) = krr;  in camellia_setup128()
517     subl(8) = kll; subr(8) = klr;  in camellia_setup128()
518     subl(9) = krl; subr(9) = krr;  in camellia_setup128()
520     subl(12) = kll; subr(12) = klr;  in camellia_setup128()
522     subl(14) = kll; subr(14) = klr;  in camellia_setup128()
523     subl(15) = krl; subr(15) = krr;  in camellia_setup128()
525     subl(20) = kll; subr(20) = klr;  in camellia_setup128()
526     subl(21) = krl; subr(21) = krr;  in camellia_setup128()
528     subl(24) = kll; subr(24) = klr;  in camellia_setup128()
529     subl(25) = krl; subr(25) = krr;  in camellia_setup128()
533     subl(3) ^= subl(1); subr(3) ^= subr(1);  in camellia_setup128()
534     subl(5) ^= subl(1); subr(5) ^= subr(1);  in camellia_setup128()
535     subl(7) ^= subl(1); subr(7) ^= subr(1);  in camellia_setup128()
536     subl(1) ^= subr(1) & ~subr(9);  in camellia_setup128()
537     dw = subl(1) & subl(9), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup128()
538     subl(11) ^= subl(1); subr(11) ^= subr(1);  in camellia_setup128()
539     subl(13) ^= subl(1); subr(13) ^= subr(1);  in camellia_setup128()
540     subl(15) ^= subl(1); subr(15) ^= subr(1);  in camellia_setup128()
541     subl(1) ^= subr(1) & ~subr(17);  in camellia_setup128()
542     dw = subl(1) & subl(17), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup128()
543     subl(19) ^= subl(1); subr(19) ^= subr(1);  in camellia_setup128()
544     subl(21) ^= subl(1); subr(21) ^= subr(1);  in camellia_setup128()
545     subl(23) ^= subl(1); subr(23) ^= subr(1);  in camellia_setup128()
546     subl(24) ^= subl(1); subr(24) ^= subr(1);  in camellia_setup128()
549     kw4l = subl(25); kw4r = subr(25);  in camellia_setup128()
550     subl(22) ^= kw4l; subr(22) ^= kw4r;  in camellia_setup128()
551     subl(20) ^= kw4l; subr(20) ^= kw4r;  in camellia_setup128()
552     subl(18) ^= kw4l; subr(18) ^= kw4r;  in camellia_setup128()
553     kw4l ^= kw4r & ~subr(16);  in camellia_setup128()
555     subl(14) ^= kw4l; subr(14) ^= kw4r;  in camellia_setup128()
556     subl(12) ^= kw4l; subr(12) ^= kw4r;  in camellia_setup128()
557     subl(10) ^= kw4l; subr(10) ^= kw4r;  in camellia_setup128()
558     kw4l ^= kw4r & ~subr(8);  in camellia_setup128()
560     subl(6) ^= kw4l; subr(6) ^= kw4r;  in camellia_setup128()
561     subl(4) ^= kw4l; subr(4) ^= kw4r;  in camellia_setup128()
562     subl(2) ^= kw4l; subr(2) ^= kw4r;  in camellia_setup128()
563     subl(0) ^= kw4l; subr(0) ^= kw4r;  in camellia_setup128()
567     CamelliaSubkeyR(0) = subr(0) ^ subr(2);  in camellia_setup128()
569     CamelliaSubkeyR(2) = subr(3);  in camellia_setup128()
571     CamelliaSubkeyR(3) = subr(2) ^ subr(4);  in camellia_setup128()
573     CamelliaSubkeyR(4) = subr(3) ^ subr(5);  in camellia_setup128()
575     CamelliaSubkeyR(5) = subr(4) ^ subr(6);  in camellia_setup128()
577     CamelliaSubkeyR(6) = subr(5) ^ subr(7);  in camellia_setup128()
578     tl = subl(10) ^ (subr(10) & ~subr(8));  in camellia_setup128()
579     dw = tl & subl(8), tr = subr(10) ^ CAMELLIA_RL1(dw);  in camellia_setup128()
581     CamelliaSubkeyR(7) = subr(6) ^ tr;  in camellia_setup128()
583     CamelliaSubkeyR(8) = subr(8);  in camellia_setup128()
585     CamelliaSubkeyR(9) = subr(9);  in camellia_setup128()
586     tl = subl(7) ^ (subr(7) & ~subr(9));  in camellia_setup128()
587     dw = tl & subl(9), tr = subr(7) ^ CAMELLIA_RL1(dw);  in camellia_setup128()
589     CamelliaSubkeyR(10) = tr ^ subr(11);  in camellia_setup128()
591     CamelliaSubkeyR(11) = subr(10) ^ subr(12);  in camellia_setup128()
593     CamelliaSubkeyR(12) = subr(11) ^ subr(13);  in camellia_setup128()
595     CamelliaSubkeyR(13) = subr(12) ^ subr(14);  in camellia_setup128()
597     CamelliaSubkeyR(14) = subr(13) ^ subr(15);  in camellia_setup128()
598     tl = subl(18) ^ (subr(18) & ~subr(16));  in camellia_setup128()
599     dw = tl & subl(16),	tr = subr(18) ^ CAMELLIA_RL1(dw);  in camellia_setup128()
601     CamelliaSubkeyR(15) = subr(14) ^ tr;  in camellia_setup128()
603     CamelliaSubkeyR(16) = subr(16);  in camellia_setup128()
605     CamelliaSubkeyR(17) = subr(17);  in camellia_setup128()
606     tl = subl(15) ^ (subr(15) & ~subr(17));  in camellia_setup128()
607     dw = tl & subl(17),	tr = subr(15) ^ CAMELLIA_RL1(dw);  in camellia_setup128()
609     CamelliaSubkeyR(18) = tr ^ subr(19);  in camellia_setup128()
611     CamelliaSubkeyR(19) = subr(18) ^ subr(20);  in camellia_setup128()
613     CamelliaSubkeyR(20) = subr(19) ^ subr(21);  in camellia_setup128()
615     CamelliaSubkeyR(21) = subr(20) ^ subr(22);  in camellia_setup128()
617     CamelliaSubkeyR(22) = subr(21) ^ subr(23);  in camellia_setup128()
619     CamelliaSubkeyR(23) = subr(22);  in camellia_setup128()
621     CamelliaSubkeyR(24) = subr(24) ^ subr(23);  in camellia_setup128()
688     subl(0) = kll; subr(0) = klr;  in camellia_setup256()
689     subl(1) = krl; subr(1) = krr;  in camellia_setup256()
691     subl(12) = kll; subr(12) = klr;  in camellia_setup256()
692     subl(13) = krl; subr(13) = krr;  in camellia_setup256()
694     subl(16) = kll; subr(16) = klr;  in camellia_setup256()
695     subl(17) = krl; subr(17) = krr;  in camellia_setup256()
697     subl(22) = kll; subr(22) = klr;  in camellia_setup256()
698     subl(23) = krl; subr(23) = krr;  in camellia_setup256()
700     subl(30) = kll; subr(30) = klr;  in camellia_setup256()
701     subl(31) = krl; subr(31) = krr;  in camellia_setup256()
705     subl(4) = krll; subr(4) = krlr;  in camellia_setup256()
706     subl(5) = krrl; subr(5) = krrr;  in camellia_setup256()
708     subl(8) = krll; subr(8) = krlr;  in camellia_setup256()
709     subl(9) = krrl; subr(9) = krrr;  in camellia_setup256()
711     subl(18) = krll; subr(18) = krlr;  in camellia_setup256()
712     subl(19) = krrl; subr(19) = krrr;  in camellia_setup256()
714     subl(26) = krll; subr(26) = krlr;  in camellia_setup256()
715     subl(27) = krrl; subr(27) = krrr;  in camellia_setup256()
719     kll = subl(0) ^ krll; klr = subr(0) ^ krlr;  in camellia_setup256()
720     krl = subl(1) ^ krrl; krr = subr(1) ^ krrr;  in camellia_setup256()
752     subl(6) = kll; subr(6) = klr;  in camellia_setup256()
753     subl(7) = krl; subr(7) = krr;  in camellia_setup256()
755     subl(14) = kll; subr(14) = klr;  in camellia_setup256()
756     subl(15) = krl; subr(15) = krr;  in camellia_setup256()
757     subl(24) = klr; subr(24) = krl;  in camellia_setup256()
758     subl(25) = krr; subr(25) = kll;  in camellia_setup256()
760     subl(28) = kll; subr(28) = klr;  in camellia_setup256()
761     subl(29) = krl; subr(29) = krr;  in camellia_setup256()
764     subl(2) = krll; subr(2) = krlr;  in camellia_setup256()
765     subl(3) = krrl; subr(3) = krrr;  in camellia_setup256()
767     subl(10) = krll; subr(10) = krlr;  in camellia_setup256()
768     subl(11) = krrl; subr(11) = krrr;  in camellia_setup256()
770     subl(20) = krll; subr(20) = krlr;  in camellia_setup256()
771     subl(21) = krrl; subr(21) = krrr;  in camellia_setup256()
773     subl(32) = krll; subr(32) = krlr;  in camellia_setup256()
774     subl(33) = krrl; subr(33) = krrr;  in camellia_setup256()
777     subl(3) ^= subl(1); subr(3) ^= subr(1);  in camellia_setup256()
778     subl(5) ^= subl(1); subr(5) ^= subr(1);  in camellia_setup256()
779     subl(7) ^= subl(1); subr(7) ^= subr(1);  in camellia_setup256()
780     subl(1) ^= subr(1) & ~subr(9);  in camellia_setup256()
781     dw = subl(1) & subl(9), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup256()
782     subl(11) ^= subl(1); subr(11) ^= subr(1);  in camellia_setup256()
783     subl(13) ^= subl(1); subr(13) ^= subr(1);  in camellia_setup256()
784     subl(15) ^= subl(1); subr(15) ^= subr(1);  in camellia_setup256()
785     subl(1) ^= subr(1) & ~subr(17);  in camellia_setup256()
786     dw = subl(1) & subl(17), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup256()
787     subl(19) ^= subl(1); subr(19) ^= subr(1);  in camellia_setup256()
788     subl(21) ^= subl(1); subr(21) ^= subr(1);  in camellia_setup256()
789     subl(23) ^= subl(1); subr(23) ^= subr(1);  in camellia_setup256()
790     subl(1) ^= subr(1) & ~subr(25);  in camellia_setup256()
791     dw = subl(1) & subl(25), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup256()
792     subl(27) ^= subl(1); subr(27) ^= subr(1);  in camellia_setup256()
793     subl(29) ^= subl(1); subr(29) ^= subr(1);  in camellia_setup256()
794     subl(31) ^= subl(1); subr(31) ^= subr(1);  in camellia_setup256()
795     subl(32) ^= subl(1); subr(32) ^= subr(1);  in camellia_setup256()
798     kw4l = subl(33); kw4r = subr(33);  in camellia_setup256()
799     subl(30) ^= kw4l; subr(30) ^= kw4r;  in camellia_setup256()
800     subl(28) ^= kw4l; subr(28) ^= kw4r;  in camellia_setup256()
801     subl(26) ^= kw4l; subr(26) ^= kw4r;  in camellia_setup256()
802     kw4l ^= kw4r & ~subr(24);  in camellia_setup256()
804     subl(22) ^= kw4l; subr(22) ^= kw4r;  in camellia_setup256()
805     subl(20) ^= kw4l; subr(20) ^= kw4r;  in camellia_setup256()
806     subl(18) ^= kw4l; subr(18) ^= kw4r;  in camellia_setup256()
807     kw4l ^= kw4r & ~subr(16);  in camellia_setup256()
809     subl(14) ^= kw4l; subr(14) ^= kw4r;  in camellia_setup256()
810     subl(12) ^= kw4l; subr(12) ^= kw4r;  in camellia_setup256()
811     subl(10) ^= kw4l; subr(10) ^= kw4r;  in camellia_setup256()
812     kw4l ^= kw4r & ~subr(8);  in camellia_setup256()
814     subl(6) ^= kw4l; subr(6) ^= kw4r;  in camellia_setup256()
815     subl(4) ^= kw4l; subr(4) ^= kw4r;  in camellia_setup256()
816     subl(2) ^= kw4l; subr(2) ^= kw4r;  in camellia_setup256()
817     subl(0) ^= kw4l; subr(0) ^= kw4r;  in camellia_setup256()
821     CamelliaSubkeyR(0) = subr(0) ^ subr(2);  in camellia_setup256()
823     CamelliaSubkeyR(2) = subr(3);  in camellia_setup256()
825     CamelliaSubkeyR(3) = subr(2) ^ subr(4);  in camellia_setup256()
827     CamelliaSubkeyR(4) = subr(3) ^ subr(5);  in camellia_setup256()
829     CamelliaSubkeyR(5) = subr(4) ^ subr(6);  in camellia_setup256()
831     CamelliaSubkeyR(6) = subr(5) ^ subr(7);  in camellia_setup256()
832     tl = subl(10) ^ (subr(10) & ~subr(8));  in camellia_setup256()
833     dw = tl & subl(8), tr = subr(10) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
835     CamelliaSubkeyR(7) = subr(6) ^ tr;  in camellia_setup256()
837     CamelliaSubkeyR(8) = subr(8);  in camellia_setup256()
839     CamelliaSubkeyR(9) = subr(9);  in camellia_setup256()
840     tl = subl(7) ^ (subr(7) & ~subr(9));  in camellia_setup256()
841     dw = tl & subl(9), tr = subr(7) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
843     CamelliaSubkeyR(10) = tr ^ subr(11);  in camellia_setup256()
845     CamelliaSubkeyR(11) = subr(10) ^ subr(12);  in camellia_setup256()
847     CamelliaSubkeyR(12) = subr(11) ^ subr(13);  in camellia_setup256()
849     CamelliaSubkeyR(13) = subr(12) ^ subr(14);  in camellia_setup256()
851     CamelliaSubkeyR(14) = subr(13) ^ subr(15);  in camellia_setup256()
852     tl = subl(18) ^ (subr(18) & ~subr(16));  in camellia_setup256()
853     dw = tl & subl(16), tr = subr(18) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
855     CamelliaSubkeyR(15) = subr(14) ^ tr;  in camellia_setup256()
857     CamelliaSubkeyR(16) = subr(16);  in camellia_setup256()
859     CamelliaSubkeyR(17) = subr(17);  in camellia_setup256()
860     tl = subl(15) ^ (subr(15) & ~subr(17));  in camellia_setup256()
861     dw = tl & subl(17), tr = subr(15) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
863     CamelliaSubkeyR(18) = tr ^ subr(19);  in camellia_setup256()
865     CamelliaSubkeyR(19) = subr(18) ^ subr(20);  in camellia_setup256()
867     CamelliaSubkeyR(20) = subr(19) ^ subr(21);  in camellia_setup256()
869     CamelliaSubkeyR(21) = subr(20) ^ subr(22);  in camellia_setup256()
871     CamelliaSubkeyR(22) = subr(21) ^ subr(23);  in camellia_setup256()
872     tl = subl(26) ^ (subr(26) & ~subr(24));  in camellia_setup256()
873     dw = tl & subl(24), tr = subr(26) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
875     CamelliaSubkeyR(23) = subr(22) ^ tr;  in camellia_setup256()
877     CamelliaSubkeyR(24) = subr(24);  in camellia_setup256()
879     CamelliaSubkeyR(25) = subr(25);  in camellia_setup256()
880     tl = subl(23) ^ (subr(23) &  ~subr(25));  in camellia_setup256()
881     dw = tl & subl(25), tr = subr(23) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
883     CamelliaSubkeyR(26) = tr ^ subr(27);  in camellia_setup256()
885     CamelliaSubkeyR(27) = subr(26) ^ subr(28);  in camellia_setup256()
887     CamelliaSubkeyR(28) = subr(27) ^ subr(29);  in camellia_setup256()
889     CamelliaSubkeyR(29) = subr(28) ^ subr(30);  in camellia_setup256()
891     CamelliaSubkeyR(30) = subr(29) ^ subr(31);  in camellia_setup256()
893     CamelliaSubkeyR(31) = subr(30);  in camellia_setup256()
895     CamelliaSubkeyR(32) = subr(32) ^ subr(31);  in camellia_setup256()