171     W[t] = S1(W[t -  2]) + W[t -  7] +          \
172            S0(W[t - 15]) + W[t - 16]            \
184     uint32_t temp1, temp2, W[64];  in mbedtls_sha256_process()  local
195             GET_UINT32_BE( W[i], data, 4 * i );  in mbedtls_sha256_process()
199         P( A[0], A[1], A[2], A[3], A[4], A[5], A[6], A[7], W[i], K[i] );  in mbedtls_sha256_process()
206         GET_UINT32_BE( W[i], data, 4 * i );  in mbedtls_sha256_process()
210         P( A[0], A[1], A[2], A[3], A[4], A[5], A[6], A[7], W[i+0], K[i+0] );  in mbedtls_sha256_process()
211         P( A[7], A[0], A[1], A[2], A[3], A[4], A[5], A[6], W[i+1], K[i+1] );  in mbedtls_sha256_process()
212         P( A[6], A[7], A[0], A[1], A[2], A[3], A[4], A[5], W[i+2], K[i+2] );  in mbedtls_sha256_process()
213         P( A[5], A[6], A[7], A[0], A[1], A[2], A[3], A[4], W[i+3], K[i+3] );  in mbedtls_sha256_process()
214         P( A[4], A[5], A[6], A[7], A[0], A[1], A[2], A[3], W[i+4], K[i+4] );  in mbedtls_sha256_process()
215         P( A[3], A[4], A[5], A[6], A[7], A[0], A[1], A[2], W[i+5], K[i+5] );  in mbedtls_sha256_process()
216         P( A[2], A[3], A[4], A[5], A[6], A[7], A[0], A[1], W[i+6], K[i+6] );  in mbedtls_sha256_process()
217         P( A[1], A[2], A[3], A[4], A[5], A[6], A[7], A[0], W[i+7], K[i+7] );  in mbedtls_sha256_process()