16 static void inc32(u8 *block)  in inc32()
25 static void xor_block(u8 *dst, const u8 *src)  in xor_block()
36 static void shift_right_block(u8 *v)  in shift_right_block()
65 static void gf_mult(const u8 *x, const u8 *y, u8 *z)  in gf_mult()
67 	u8 v[16];  in gf_mult()
96 static void ghash_start(u8 *y)  in ghash_start()
103 static void ghash(const u8 *h, const u8 *x, size_t xlen, u8 *y)  in ghash()
106 	const u8 *xpos = x;  in ghash()
107 	u8 tmp[16];  in ghash()
143 static void aes_gctr(void *aes, const u8 *icb, const u8 *x, size_t xlen, u8 *y)  in aes_gctr()
146 	u8 cb[AES_BLOCK_SIZE], tmp[AES_BLOCK_SIZE];  in aes_gctr()
147 	const u8 *xpos = x;  in aes_gctr()
148 	u8 *ypos = y;  in aes_gctr()
175 static void * aes_gcm_init_hash_subkey(const u8 *key, size_t key_len, u8 *H)  in aes_gcm_init_hash_subkey()
192 static void aes_gcm_prepare_j0(const u8 *iv, size_t iv_len, const u8 *H, u8 *J0)  in aes_gcm_prepare_j0()
194 	u8 len_buf[16];  in aes_gcm_prepare_j0()
215 static void aes_gcm_gctr(void *aes, const u8 *J0, const u8 *in, size_t len,  in aes_gcm_gctr()
216 			 u8 *out)  in aes_gcm_gctr()
218 	u8 J0inc[AES_BLOCK_SIZE];  in aes_gcm_gctr()
229 static void aes_gcm_ghash(const u8 *H, const u8 *aad, size_t aad_len,  in aes_gcm_ghash()
230 			  const u8 *crypt, size_t crypt_len, u8 *S)  in aes_gcm_ghash()
232 	u8 len_buf[16];  in aes_gcm_ghash()
254 int aes_gcm_ae(const u8 *key, size_t key_len, const u8 *iv, size_t iv_len,  in aes_gcm_ae()
255 	       const u8 *plain, size_t plain_len,  in aes_gcm_ae()
256 	       const u8 *aad, size_t aad_len, u8 *crypt, u8 *tag)  in aes_gcm_ae()
258 	u8 H[AES_BLOCK_SIZE];  in aes_gcm_ae()
259 	u8 J0[AES_BLOCK_SIZE];  in aes_gcm_ae()
260 	u8 S[16];  in aes_gcm_ae()
288 int aes_gcm_ad(const u8 *key, size_t key_len, const u8 *iv, size_t iv_len,  in aes_gcm_ad()
289 	       const u8 *crypt, size_t crypt_len,  in aes_gcm_ad()
290 	       const u8 *aad, size_t aad_len, const u8 *tag, u8 *plain)  in aes_gcm_ad()
292 	u8 H[AES_BLOCK_SIZE];  in aes_gcm_ad()
293 	u8 J0[AES_BLOCK_SIZE];  in aes_gcm_ad()
294 	u8 S[16], T[16];  in aes_gcm_ad()
322 int aes_gmac(const u8 *key, size_t key_len, const u8 *iv, size_t iv_len,  in aes_gmac()
323 	     const u8 *aad, size_t aad_len, u8 *tag)  in aes_gmac()