663 #define AES_FROUND(X0,X1,X2,X3,Y0,Y1,Y2,Y3)     \  argument
666                  FT1[ ( Y1 >>  8 ) & 0xFF ] ^   \
670     X1 = *RK++ ^ FT0[ ( Y1       ) & 0xFF ] ^   \
678                  FT3[ ( Y1 >> 24 ) & 0xFF ];    \
682                  FT2[ ( Y1 >> 16 ) & 0xFF ] ^   \
686 #define AES_RROUND(X0,X1,X2,X3,Y0,Y1,Y2,Y3)     \  argument
691                  RT3[ ( Y1 >> 24 ) & 0xFF ];    \
693     X1 = *RK++ ^ RT0[ ( Y1       ) & 0xFF ] ^   \
699                  RT1[ ( Y1 >>  8 ) & 0xFF ] ^   \
705                  RT2[ ( Y1 >> 16 ) & 0xFF ] ^   \
718     uint32_t *RK, X0, X1, X2, X3, Y0, Y1, Y2, Y3;  in mbedtls_aes_encrypt()  local
729         AES_FROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 );  in mbedtls_aes_encrypt()
730         AES_FROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 );  in mbedtls_aes_encrypt()
733     AES_FROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 );  in mbedtls_aes_encrypt()
737             ( (uint32_t) FSb[ ( Y1 >>  8 ) & 0xFF ] <<  8 ) ^  in mbedtls_aes_encrypt()
742             ( (uint32_t) FSb[ ( Y1       ) & 0xFF ]       ) ^  in mbedtls_aes_encrypt()
751             ( (uint32_t) FSb[ ( Y1 >> 24 ) & 0xFF ] << 24 );  in mbedtls_aes_encrypt()
756             ( (uint32_t) FSb[ ( Y1 >> 16 ) & 0xFF ] << 16 ) ^  in mbedtls_aes_encrypt()
775     uint32_t *RK, X0, X1, X2, X3, Y0, Y1, Y2, Y3;  in mbedtls_aes_decrypt()  local
786         AES_RROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 );  in mbedtls_aes_decrypt()
787         AES_RROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 );  in mbedtls_aes_decrypt()
790     AES_RROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 );  in mbedtls_aes_decrypt()
796             ( (uint32_t) RSb[ ( Y1 >> 24 ) & 0xFF ] << 24 );  in mbedtls_aes_decrypt()
799             ( (uint32_t) RSb[ ( Y1       ) & 0xFF ]       ) ^  in mbedtls_aes_decrypt()
806             ( (uint32_t) RSb[ ( Y1 >>  8 ) & 0xFF ] <<  8 ) ^  in mbedtls_aes_decrypt()
813             ( (uint32_t) RSb[ ( Y1 >> 16 ) & 0xFF ] << 16 ) ^  in mbedtls_aes_decrypt()