397     memset(ctx->buf, 0x00, sizeof(ctx->buf));  in mbedtls_gcm_starts()
495         mbedtls_xor(ctx->buf + offset, ctx->buf + offset, p, use_len);  in mbedtls_gcm_update_ad()
498             gcm_mult(ctx, ctx->buf, ctx->buf);  in mbedtls_gcm_update_ad()
509         mbedtls_xor(ctx->buf, ctx->buf, p, 16);  in mbedtls_gcm_update_ad()
511         gcm_mult(ctx, ctx->buf, ctx->buf);  in mbedtls_gcm_update_ad()
518         mbedtls_xor(ctx->buf, ctx->buf, p, add_len);  in mbedtls_gcm_update_ad()
554         mbedtls_xor(ctx->buf + offset, ctx->buf + offset, input, use_len);  in gcm_mask()
558         mbedtls_xor(ctx->buf + offset, ctx->buf + offset, output, use_len);  in gcm_mask()
600         gcm_mult(ctx, ctx->buf, ctx->buf);  in mbedtls_gcm_update()
615             gcm_mult(ctx, ctx->buf, ctx->buf);  in mbedtls_gcm_update()
632         gcm_mult(ctx, ctx->buf, ctx->buf);  in mbedtls_gcm_update()
672         gcm_mult(ctx, ctx->buf, ctx->buf);  in mbedtls_gcm_finish()
680         gcm_mult(ctx, ctx->buf, ctx->buf);  in mbedtls_gcm_finish()
693         mbedtls_xor(ctx->buf, ctx->buf, work_buf, 16);  in mbedtls_gcm_finish()
695         gcm_mult(ctx, ctx->buf, ctx->buf);  in mbedtls_gcm_finish()
697         mbedtls_xor(tag, tag, ctx->buf, tag_len);  in mbedtls_gcm_finish()
1020     unsigned char buf[64];  in mbedtls_gcm_self_test()  local
1082                                             buf, 16, tag_buf);  in mbedtls_gcm_self_test()
1095             if (memcmp(buf, ct_test_data[j * 6 + i],  in mbedtls_gcm_self_test()
1128                                             ct_test_data[j * 6 + i], buf, 16, tag_buf);  in mbedtls_gcm_self_test()
1134             if (memcmp(buf, pt_test_data[pt_index_test_data[i]],  in mbedtls_gcm_self_test()
1180                                          buf, sizeof(buf), &olen);  in mbedtls_gcm_self_test()
1191                                          buf + 32, sizeof(buf) - 32, &olen);  in mbedtls_gcm_self_test()
1202                                          buf, sizeof(buf), &olen);  in mbedtls_gcm_self_test()
1216             if (memcmp(buf, ct_test_data[j * 6 + i],  in mbedtls_gcm_self_test()
1260                                          buf, sizeof(buf), &olen);  in mbedtls_gcm_self_test()
1271                                          buf + 32, sizeof(buf) - 32, &olen);  in mbedtls_gcm_self_test()
1282                                          buf, sizeof(buf), &olen);  in mbedtls_gcm_self_test()
1296             if (memcmp(buf, pt_test_data[pt_index_test_data[i]],  in mbedtls_gcm_self_test()