663 #define AES_FROUND(X0,X1,X2,X3,Y0,Y1,Y2,Y3)     \  argument
667                  FT2[ ( Y2 >> 16 ) & 0xFF ] ^   \
671                  FT1[ ( Y2 >>  8 ) & 0xFF ] ^   \
675     X2 = *RK++ ^ FT0[ ( Y2       ) & 0xFF ] ^   \
683                  FT3[ ( Y2 >> 24 ) & 0xFF ];    \
686 #define AES_RROUND(X0,X1,X2,X3,Y0,Y1,Y2,Y3)     \  argument
690                  RT2[ ( Y2 >> 16 ) & 0xFF ] ^   \
696                  RT3[ ( Y2 >> 24 ) & 0xFF ];    \
698     X2 = *RK++ ^ RT0[ ( Y2       ) & 0xFF ] ^   \
704                  RT1[ ( Y2 >>  8 ) & 0xFF ] ^   \
718     uint32_t *RK, X0, X1, X2, X3, Y0, Y1, Y2, Y3;  in mbedtls_aes_encrypt()  local
729         AES_FROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 );  in mbedtls_aes_encrypt()
730         AES_FROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 );  in mbedtls_aes_encrypt()
733     AES_FROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 );  in mbedtls_aes_encrypt()
738             ( (uint32_t) FSb[ ( Y2 >> 16 ) & 0xFF ] << 16 ) ^  in mbedtls_aes_encrypt()
743             ( (uint32_t) FSb[ ( Y2 >>  8 ) & 0xFF ] <<  8 ) ^  in mbedtls_aes_encrypt()
748             ( (uint32_t) FSb[ ( Y2       ) & 0xFF ]       ) ^  in mbedtls_aes_encrypt()
757             ( (uint32_t) FSb[ ( Y2 >> 24 ) & 0xFF ] << 24 );  in mbedtls_aes_encrypt()
775     uint32_t *RK, X0, X1, X2, X3, Y0, Y1, Y2, Y3;  in mbedtls_aes_decrypt()  local
786         AES_RROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 );  in mbedtls_aes_decrypt()
787         AES_RROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 );  in mbedtls_aes_decrypt()
790     AES_RROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 );  in mbedtls_aes_decrypt()
795             ( (uint32_t) RSb[ ( Y2 >> 16 ) & 0xFF ] << 16 ) ^  in mbedtls_aes_decrypt()
802             ( (uint32_t) RSb[ ( Y2 >> 24 ) & 0xFF ] << 24 );  in mbedtls_aes_decrypt()
805             ( (uint32_t) RSb[ ( Y2       ) & 0xFF ]       ) ^  in mbedtls_aes_decrypt()
812             ( (uint32_t) RSb[ ( Y2 >>  8 ) & 0xFF ] <<  8 ) ^  in mbedtls_aes_decrypt()