Lines Matching refs:ghash
135 aes_enc(&ctx->K, (const void *)ctx->ghash.H, (void *)ctx->ghash.H, in AES_GMAC_Setkey()
139 ctx->ghash.H[i] = be64toh(ctx->ghash.H[i]); in AES_GMAC_Setkey()
142 ctx->ghash.H[i] = be32toh(ctx->ghash.H[i]); in AES_GMAC_Setkey()
162 ghash_update(&ctx->ghash, data, len - plen); in AES_GMAC_Update()
165 ghash_update(&ctx->ghash, blk, GMAC_BLOCK_LEN); in AES_GMAC_Update()
184 d[0] = (uint8_t)(ctx->ghash.S[i] >> 56) ^ k[0]; in AES_GMAC_Final()
185 d[1] = (uint8_t)(ctx->ghash.S[i] >> 48) ^ k[1]; in AES_GMAC_Final()
186 d[2] = (uint8_t)(ctx->ghash.S[i] >> 40) ^ k[2]; in AES_GMAC_Final()
187 d[3] = (uint8_t)(ctx->ghash.S[i] >> 32) ^ k[3]; in AES_GMAC_Final()
188 d[4] = (uint8_t)(ctx->ghash.S[i] >> 24) ^ k[4]; in AES_GMAC_Final()
189 d[5] = (uint8_t)(ctx->ghash.S[i] >> 16) ^ k[5]; in AES_GMAC_Final()
190 d[6] = (uint8_t)(ctx->ghash.S[i] >> 8) ^ k[6]; in AES_GMAC_Final()
191 d[7] = (uint8_t)ctx->ghash.S[i] ^ k[7]; in AES_GMAC_Final()
197 d[0] = (uint8_t)(ctx->ghash.S[i] >> 24) ^ k[0]; in AES_GMAC_Final()
198 d[1] = (uint8_t)(ctx->ghash.S[i] >> 16) ^ k[1]; in AES_GMAC_Final()
199 d[2] = (uint8_t)(ctx->ghash.S[i] >> 8) ^ k[2]; in AES_GMAC_Final()
200 d[3] = (uint8_t)ctx->ghash.S[i] ^ k[3]; in AES_GMAC_Final()