36     uint32_t partial_block_len = (uint32_t) (ctx->aad_len % 16U);  in chachapoly_pad_aad()
74     ctx->aad_len        = 0U;  in mbedtls_chachapoly_init()
88     ctx->aad_len        = 0U;  in mbedtls_chachapoly_free()
132         ctx->aad_len        = 0U;  in mbedtls_chachapoly_starts()
145                                   size_t aad_len)  in mbedtls_chachapoly_update_aad()  argument
151     ctx->aad_len += aad_len;  in mbedtls_chachapoly_update_aad()
153     return mbedtls_poly1305_update(&ctx->poly1305_ctx, aad, aad_len);  in mbedtls_chachapoly_update_aad()
231     MBEDTLS_PUT_UINT64_LE(ctx->aad_len, len_block, 0);  in mbedtls_chachapoly_finish()
249                                     size_t aad_len,  in chachapoly_crypt_and_tag()  argument
261     ret = mbedtls_chachapoly_update_aad(ctx, aad, aad_len);  in chachapoly_crypt_and_tag()
281                                        size_t aad_len,  in mbedtls_chachapoly_encrypt_and_tag()  argument
287                                     length, nonce, aad, aad_len,  in mbedtls_chachapoly_encrypt_and_tag()
295                                     size_t aad_len,  in mbedtls_chachapoly_auth_decrypt()  argument
306                                         aad, aad_len, input, output, check_tag)) != 0) {  in mbedtls_chachapoly_auth_decrypt()