385 #define ROUND256_0_TO_15(a,b,c,d,e,f,g,h)	\  argument
387 	T1 = (h) + Sigma1_256(e) + Ch((e), (f), (g)) + \
390 	(h) = T1 + Sigma0_256(a) + Maj((a), (b), (c)); \
396 #define ROUND256_0_TO_15(a,b,c,d,e,f,g,h)	\  argument
397 	T1 = (h) + Sigma1_256(e) + Ch((e), (f), (g)) + \
400 	(h) = T1 + Sigma0_256(a) + Maj((a), (b), (c)); \
405 #define ROUND256(a,b,c,d,e,f,g,h)	\  argument
410 	T1 = (h) + Sigma1_256(e) + Ch((e), (f), (g)) + K256[j] + \
413 	(h) = T1 + Sigma0_256(a) + Maj((a), (b), (c)); \
417 	sha2_word32	a, b, c, d, e, f, g, h, s0, s1;  in SHA256_Transform()  local
431 	h = context->state[7];  in SHA256_Transform()
436 		ROUND256_0_TO_15(a,b,c,d,e,f,g,h);  in SHA256_Transform()
437 		ROUND256_0_TO_15(h,a,b,c,d,e,f,g);  in SHA256_Transform()
438 		ROUND256_0_TO_15(g,h,a,b,c,d,e,f);  in SHA256_Transform()
439 		ROUND256_0_TO_15(f,g,h,a,b,c,d,e);  in SHA256_Transform()
440 		ROUND256_0_TO_15(e,f,g,h,a,b,c,d);  in SHA256_Transform()
441 		ROUND256_0_TO_15(d,e,f,g,h,a,b,c);  in SHA256_Transform()
442 		ROUND256_0_TO_15(c,d,e,f,g,h,a,b);  in SHA256_Transform()
443 		ROUND256_0_TO_15(b,c,d,e,f,g,h,a);  in SHA256_Transform()
448 		ROUND256(a,b,c,d,e,f,g,h);  in SHA256_Transform()
449 		ROUND256(h,a,b,c,d,e,f,g);  in SHA256_Transform()
450 		ROUND256(g,h,a,b,c,d,e,f);  in SHA256_Transform()
451 		ROUND256(f,g,h,a,b,c,d,e);  in SHA256_Transform()
452 		ROUND256(e,f,g,h,a,b,c,d);  in SHA256_Transform()
453 		ROUND256(d,e,f,g,h,a,b,c);  in SHA256_Transform()
454 		ROUND256(c,d,e,f,g,h,a,b);  in SHA256_Transform()
455 		ROUND256(b,c,d,e,f,g,h,a);  in SHA256_Transform()
466 	context->state[7] += h;  in SHA256_Transform()
469 	a = b = c = d = e = f = g = h = T1 = 0;  in SHA256_Transform()
475 	sha2_word32	a, b, c, d, e, f, g, h, s0, s1;  in SHA256_Transform()  local
489 	h = context->state[7];  in SHA256_Transform()
497 		T1 = h + Sigma1_256(e) + Ch(e, f, g) + K256[j] + W256[j];  in SHA256_Transform()
500 		T1 = h + Sigma1_256(e) + Ch(e, f, g) + K256[j] + (W256[j] = *data++);  in SHA256_Transform()
503 		h = g;  in SHA256_Transform()
523 		T1 = h + Sigma1_256(e) + Ch(e, f, g) + K256[j] +   in SHA256_Transform()
526 		h = g;  in SHA256_Transform()
546 	context->state[7] += h;  in SHA256_Transform()
549 	a = b = c = d = e = f = g = h = T1 = T2 = 0;  in SHA256_Transform()
713 #define ROUND512_0_TO_15(a,b,c,d,e,f,g,h)	\  argument
715 	T1 = (h) + Sigma1_512(e) + Ch((e), (f), (g)) + \
718 	(h) = T1 + Sigma0_512(a) + Maj((a), (b), (c)), \
724 #define ROUND512_0_TO_15(a,b,c,d,e,f,g,h)	\  argument
725 	T1 = (h) + Sigma1_512(e) + Ch((e), (f), (g)) + \
728 	(h) = T1 + Sigma0_512(a) + Maj((a), (b), (c)); \
733 #define ROUND512(a,b,c,d,e,f,g,h)	\  argument
738 	T1 = (h) + Sigma1_512(e) + Ch((e), (f), (g)) + K512[j] + \
741 	(h) = T1 + Sigma0_512(a) + Maj((a), (b), (c)); \
745 	sha2_word64	a, b, c, d, e, f, g, h, s0, s1;  in SHA512_Transform()  local
757 	h = context->state[7];  in SHA512_Transform()
761 		ROUND512_0_TO_15(a,b,c,d,e,f,g,h);  in SHA512_Transform()
762 		ROUND512_0_TO_15(h,a,b,c,d,e,f,g);  in SHA512_Transform()
763 		ROUND512_0_TO_15(g,h,a,b,c,d,e,f);  in SHA512_Transform()
764 		ROUND512_0_TO_15(f,g,h,a,b,c,d,e);  in SHA512_Transform()
765 		ROUND512_0_TO_15(e,f,g,h,a,b,c,d);  in SHA512_Transform()
766 		ROUND512_0_TO_15(d,e,f,g,h,a,b,c);  in SHA512_Transform()
767 		ROUND512_0_TO_15(c,d,e,f,g,h,a,b);  in SHA512_Transform()
768 		ROUND512_0_TO_15(b,c,d,e,f,g,h,a);  in SHA512_Transform()
773 		ROUND512(a,b,c,d,e,f,g,h);  in SHA512_Transform()
774 		ROUND512(h,a,b,c,d,e,f,g);  in SHA512_Transform()
775 		ROUND512(g,h,a,b,c,d,e,f);  in SHA512_Transform()
776 		ROUND512(f,g,h,a,b,c,d,e);  in SHA512_Transform()
777 		ROUND512(e,f,g,h,a,b,c,d);  in SHA512_Transform()
778 		ROUND512(d,e,f,g,h,a,b,c);  in SHA512_Transform()
779 		ROUND512(c,d,e,f,g,h,a,b);  in SHA512_Transform()
780 		ROUND512(b,c,d,e,f,g,h,a);  in SHA512_Transform()
791 	context->state[7] += h;  in SHA512_Transform()
794 	a = b = c = d = e = f = g = h = T1 = 0;  in SHA512_Transform()
800 	sha2_word64	a, b, c, d, e, f, g, h, s0, s1;  in SHA512_Transform()  local
812 	h = context->state[7];  in SHA512_Transform()
820 		T1 = h + Sigma1_512(e) + Ch(e, f, g) + K512[j] + W512[j];  in SHA512_Transform()
823 		T1 = h + Sigma1_512(e) + Ch(e, f, g) + K512[j] + (W512[j] = *data++);  in SHA512_Transform()
826 		h = g;  in SHA512_Transform()
846 		T1 = h + Sigma1_512(e) + Ch(e, f, g) + K512[j] +  in SHA512_Transform()
849 		h = g;  in SHA512_Transform()
869 	context->state[7] += h;  in SHA512_Transform()
872 	a = b = c = d = e = f = g = h = T1 = T2 = 0;  in SHA512_Transform()