92 	uint8_t *auth = C->authctr;  in aes_ccm_init()  local
109 	auth[0] = __SHIFTIN(adlen == 0 ? 0 : 1, CCM_AFLAGS_ADATA);  in aes_ccm_init()
110 	auth[0] |= __SHIFTIN((M - 2)/2, CCM_AFLAGS_M);  in aes_ccm_init()
111 	auth[0] |= __SHIFTIN(L - 1, CCM_AFLAGS_L);  in aes_ccm_init()
112 	memcpy(auth + 1, nonce, noncelen);  in aes_ccm_init()
115 		auth[16 - i - 1] = mlen & 0xff;  in aes_ccm_init()
117 	aes_enc(enc, auth, auth, C->nr);  in aes_ccm_init()
123 			auth[0] ^= adlen >> 8;  in aes_ccm_init()
124 			auth[1] ^= adlen;  in aes_ccm_init()
127 			auth[0] ^= 0xff;  in aes_ccm_init()
128 			auth[1] ^= 0xfe;  in aes_ccm_init()
129 			auth[2] ^= adlen >> 24;  in aes_ccm_init()
130 			auth[3] ^= adlen >> 16;  in aes_ccm_init()
131 			auth[4] ^= adlen >> 8;  in aes_ccm_init()
132 			auth[5] ^= adlen;  in aes_ccm_init()
137 			auth[0] ^= 0xff;  in aes_ccm_init()
138 			auth[1] ^= 0xff;  in aes_ccm_init()
139 			auth[2] ^= adlen >> 56;  in aes_ccm_init()
140 			auth[3] ^= adlen >> 48;  in aes_ccm_init()
141 			auth[4] ^= adlen >> 40;  in aes_ccm_init()
142 			auth[5] ^= adlen >> 32;  in aes_ccm_init()
143 			auth[6] ^= adlen >> 24;  in aes_ccm_init()
144 			auth[7] ^= adlen >> 16;  in aes_ccm_init()
145 			auth[8] ^= adlen >> 8;  in aes_ccm_init()
146 			auth[9] ^= adlen;  in aes_ccm_init()
152 		xor(auth + i, auth + i, adp, MIN(adlen, 16 - i));  in aes_ccm_init()
155 		aes_enc(enc, auth, auth, C->nr);  in aes_ccm_init()
160 			    auth, C->nr);  in aes_ccm_init()
169 			xor(auth, auth, adp, adlen);  in aes_ccm_init()
170 			aes_enc(enc, auth, auth, C->nr);  in aes_ccm_init()
186 	uint8_t *auth = C->authctr;  in aes_ccm_enc()  local
202 		xor(auth + C->i, auth + C->i, p, m);  in aes_ccm_enc()
211 			aes_enc(C->enc, auth, auth, C->nr);  in aes_ccm_enc()
222 		aes_ccm_enc1(C->enc, p, q, nbytes - (nbytes % 16), auth,  in aes_ccm_enc()
232 		xor(auth, auth, p, nbytes);  in aes_ccm_enc()
246 	uint8_t *auth = C->authctr;  in aes_ccm_dec()  local
263 		xor(auth + C->i, auth + C->i, q, m);  in aes_ccm_dec()
271 			aes_enc(C->enc, auth, auth, C->nr);  in aes_ccm_dec()
282 		aes_ccm_dec1(C->enc, p, q, nbytes - (nbytes % 16), auth,  in aes_ccm_dec()
297 		xor(auth, auth, q, nbytes);  in aes_ccm_dec()
309 	uint8_t *auth = C->authctr;  in aes_ccm_tag()  local
318 		aes_enc(C->enc, auth, auth, C->nr);  in aes_ccm_tag()
325 	xor(out, C->out, auth, C->M);  in aes_ccm_tag()