265         ctx->state[0] = UL64(0x6A09E667F3BCC908);  in mbedtls_sha512_starts()
266         ctx->state[1] = UL64(0xBB67AE8584CAA73B);  in mbedtls_sha512_starts()
267         ctx->state[2] = UL64(0x3C6EF372FE94F82B);  in mbedtls_sha512_starts()
268         ctx->state[3] = UL64(0xA54FF53A5F1D36F1);  in mbedtls_sha512_starts()
269         ctx->state[4] = UL64(0x510E527FADE682D1);  in mbedtls_sha512_starts()
270         ctx->state[5] = UL64(0x9B05688C2B3E6C1F);  in mbedtls_sha512_starts()
271         ctx->state[6] = UL64(0x1F83D9ABFB41BD6B);  in mbedtls_sha512_starts()
272         ctx->state[7] = UL64(0x5BE0CD19137E2179);  in mbedtls_sha512_starts()
276         ctx->state[0] = UL64(0xCBBB9D5DC1059ED8);  in mbedtls_sha512_starts()
277         ctx->state[1] = UL64(0x629A292A367CD507);  in mbedtls_sha512_starts()
278         ctx->state[2] = UL64(0x9159015A3070DD17);  in mbedtls_sha512_starts()
279         ctx->state[3] = UL64(0x152FECD8F70E5939);  in mbedtls_sha512_starts()
280         ctx->state[4] = UL64(0x67332667FFC00B31);  in mbedtls_sha512_starts()
281         ctx->state[5] = UL64(0x8EB44A8768581511);  in mbedtls_sha512_starts()
282         ctx->state[6] = UL64(0xDB0C2E0D64F98FA7);  in mbedtls_sha512_starts()
283         ctx->state[7] = UL64(0x47B5481DBEFA4FA4);  in mbedtls_sha512_starts()
384     uint64x2_t ab = vld1q_u64(&ctx->state[0]);  in mbedtls_internal_sha512_process_many_a64_crypto()
385     uint64x2_t cd = vld1q_u64(&ctx->state[2]);  in mbedtls_internal_sha512_process_many_a64_crypto()
386     uint64x2_t ef = vld1q_u64(&ctx->state[4]);  in mbedtls_internal_sha512_process_many_a64_crypto()
387     uint64x2_t gh = vld1q_u64(&ctx->state[6]);  in mbedtls_internal_sha512_process_many_a64_crypto()
551     vst1q_u64(&ctx->state[0], ab);  in mbedtls_internal_sha512_process_many_a64_crypto()
552     vst1q_u64(&ctx->state[2], cd);  in mbedtls_internal_sha512_process_many_a64_crypto()
553     vst1q_u64(&ctx->state[4], ef);  in mbedtls_internal_sha512_process_many_a64_crypto()
554     vst1q_u64(&ctx->state[6], gh);  in mbedtls_internal_sha512_process_many_a64_crypto()
631         local.A[i] = ctx->state[i];  in mbedtls_internal_sha512_process_c()
684         ctx->state[i] += local.A[i];  in mbedtls_internal_sha512_process_c()
860     sha512_put_uint64_be(ctx->state[0], output,  0);  in mbedtls_sha512_finish()
861     sha512_put_uint64_be(ctx->state[1], output,  8);  in mbedtls_sha512_finish()
862     sha512_put_uint64_be(ctx->state[2], output, 16);  in mbedtls_sha512_finish()
863     sha512_put_uint64_be(ctx->state[3], output, 24);  in mbedtls_sha512_finish()
864     sha512_put_uint64_be(ctx->state[4], output, 32);  in mbedtls_sha512_finish()
865     sha512_put_uint64_be(ctx->state[5], output, 40);  in mbedtls_sha512_finish()
871         sha512_put_uint64_be(ctx->state[6], output, 48);  in mbedtls_sha512_finish()
872         sha512_put_uint64_be(ctx->state[7], output, 56);  in mbedtls_sha512_finish()