241 	aes_encrypt(&ctx->aes_key, key, (u8[AES_BLOCK_SIZE]){});  in gcm_setkey()
347 	u8 buf[AES_BLOCK_SIZE];  in gcm_encrypt()
348 	u8 iv[AES_BLOCK_SIZE];  in gcm_encrypt()
373 			if (unlikely(nbytes > 0 && nbytes < AES_BLOCK_SIZE)) {  in gcm_encrypt()
377 				nbytes &= ~(AES_BLOCK_SIZE - 1);  in gcm_encrypt()
390 			if (unlikely(nbytes > 0 && nbytes < AES_BLOCK_SIZE))  in gcm_encrypt()
397 		while (walk.nbytes >= AES_BLOCK_SIZE) {  in gcm_encrypt()
398 			int blocks = walk.nbytes / AES_BLOCK_SIZE;  in gcm_encrypt()
405 				crypto_xor_cpy(dst, src, buf, AES_BLOCK_SIZE);  in gcm_encrypt()
406 				crypto_inc(iv, AES_BLOCK_SIZE);  in gcm_encrypt()
408 				dst += AES_BLOCK_SIZE;  in gcm_encrypt()
409 				src += AES_BLOCK_SIZE;  in gcm_encrypt()
416 						 walk.nbytes % AES_BLOCK_SIZE);  in gcm_encrypt()
441 		crypto_xor(tag, iv, AES_BLOCK_SIZE);  in gcm_encrypt()
461 	u8 buf[AES_BLOCK_SIZE];  in gcm_decrypt()
462 	u8 iv[AES_BLOCK_SIZE];  in gcm_decrypt()
487 			if (unlikely(nbytes > 0 && nbytes < AES_BLOCK_SIZE)) {  in gcm_decrypt()
491 				nbytes &= ~(AES_BLOCK_SIZE - 1);  in gcm_decrypt()
504 			if (unlikely(nbytes > 0 && nbytes < AES_BLOCK_SIZE))  in gcm_decrypt()
511 		while (walk.nbytes >= AES_BLOCK_SIZE) {  in gcm_decrypt()
512 			int blocks = walk.nbytes / AES_BLOCK_SIZE;  in gcm_decrypt()
521 				crypto_xor_cpy(dst, src, buf, AES_BLOCK_SIZE);  in gcm_decrypt()
522 				crypto_inc(iv, AES_BLOCK_SIZE);  in gcm_decrypt()
524 				dst += AES_BLOCK_SIZE;  in gcm_decrypt()
525 				src += AES_BLOCK_SIZE;  in gcm_decrypt()
529 						 walk.nbytes % AES_BLOCK_SIZE);  in gcm_decrypt()
555 		crypto_xor(tag, iv, AES_BLOCK_SIZE);  in gcm_decrypt()
573 	.chunksize		= AES_BLOCK_SIZE,
574 	.maxauthsize		= AES_BLOCK_SIZE,