663 #define AES_FROUND(X0,X1,X2,X3,Y0,Y1,Y2,Y3)     \  argument
665     X0 = *RK++ ^ FT0[ ( Y0       ) & 0xFF ] ^   \
673                  FT3[ ( Y0 >> 24 ) & 0xFF ];    \
677                  FT2[ ( Y0 >> 16 ) & 0xFF ] ^   \
681                  FT1[ ( Y0 >>  8 ) & 0xFF ] ^   \
686 #define AES_RROUND(X0,X1,X2,X3,Y0,Y1,Y2,Y3)     \  argument
688     X0 = *RK++ ^ RT0[ ( Y0       ) & 0xFF ] ^   \
694                  RT1[ ( Y0 >>  8 ) & 0xFF ] ^   \
700                  RT2[ ( Y0 >> 16 ) & 0xFF ] ^   \
706                  RT3[ ( Y0 >> 24 ) & 0xFF ];    \
718     uint32_t *RK, X0, X1, X2, X3, Y0, Y1, Y2, Y3;  in mbedtls_aes_encrypt()  local
729         AES_FROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 );  in mbedtls_aes_encrypt()
730         AES_FROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 );  in mbedtls_aes_encrypt()
733     AES_FROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 );  in mbedtls_aes_encrypt()
736             ( (uint32_t) FSb[ ( Y0       ) & 0xFF ]       ) ^  in mbedtls_aes_encrypt()
745             ( (uint32_t) FSb[ ( Y0 >> 24 ) & 0xFF ] << 24 );  in mbedtls_aes_encrypt()
750             ( (uint32_t) FSb[ ( Y0 >> 16 ) & 0xFF ] << 16 ) ^  in mbedtls_aes_encrypt()
755             ( (uint32_t) FSb[ ( Y0 >>  8 ) & 0xFF ] <<  8 ) ^  in mbedtls_aes_encrypt()
775     uint32_t *RK, X0, X1, X2, X3, Y0, Y1, Y2, Y3;  in mbedtls_aes_decrypt()  local
786         AES_RROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 );  in mbedtls_aes_decrypt()
787         AES_RROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 );  in mbedtls_aes_decrypt()
790     AES_RROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 );  in mbedtls_aes_decrypt()
793             ( (uint32_t) RSb[ ( Y0       ) & 0xFF ]       ) ^  in mbedtls_aes_decrypt()
800             ( (uint32_t) RSb[ ( Y0 >>  8 ) & 0xFF ] <<  8 ) ^  in mbedtls_aes_decrypt()
807             ( (uint32_t) RSb[ ( Y0 >> 16 ) & 0xFF ] << 16 ) ^  in mbedtls_aes_decrypt()
814             ( (uint32_t) RSb[ ( Y0 >> 24 ) & 0xFF ] << 24 );  in mbedtls_aes_decrypt()