Lines Matching +full:23 +full:- +full:64
47 * blocks whose length is a multiple of 64 bits.
100 tt0 ^= A[23] ^ tt1; in process_block()
124 tt0 ^= A[23]; in process_block()
147 A[23] = A[23] ^ t3; in process_block()
153 A[ 5] = (A[ 5] << 36) | (A[ 5] >> (64 - 36)); in process_block()
154 A[10] = (A[10] << 3) | (A[10] >> (64 - 3)); in process_block()
155 A[15] = (A[15] << 41) | (A[15] >> (64 - 41)); in process_block()
156 A[20] = (A[20] << 18) | (A[20] >> (64 - 18)); in process_block()
157 A[ 1] = (A[ 1] << 1) | (A[ 1] >> (64 - 1)); in process_block()
158 A[ 6] = (A[ 6] << 44) | (A[ 6] >> (64 - 44)); in process_block()
159 A[11] = (A[11] << 10) | (A[11] >> (64 - 10)); in process_block()
160 A[16] = (A[16] << 45) | (A[16] >> (64 - 45)); in process_block()
161 A[21] = (A[21] << 2) | (A[21] >> (64 - 2)); in process_block()
162 A[ 2] = (A[ 2] << 62) | (A[ 2] >> (64 - 62)); in process_block()
163 A[ 7] = (A[ 7] << 6) | (A[ 7] >> (64 - 6)); in process_block()
164 A[12] = (A[12] << 43) | (A[12] >> (64 - 43)); in process_block()
165 A[17] = (A[17] << 15) | (A[17] >> (64 - 15)); in process_block()
166 A[22] = (A[22] << 61) | (A[22] >> (64 - 61)); in process_block()
167 A[ 3] = (A[ 3] << 28) | (A[ 3] >> (64 - 28)); in process_block()
168 A[ 8] = (A[ 8] << 55) | (A[ 8] >> (64 - 55)); in process_block()
169 A[13] = (A[13] << 25) | (A[13] >> (64 - 25)); in process_block()
170 A[18] = (A[18] << 21) | (A[18] >> (64 - 21)); in process_block()
171 A[23] = (A[23] << 56) | (A[23] >> (64 - 56)); in process_block()
172 A[ 4] = (A[ 4] << 27) | (A[ 4] >> (64 - 27)); in process_block()
173 A[ 9] = (A[ 9] << 20) | (A[ 9] >> (64 - 20)); in process_block()
174 A[14] = (A[14] << 39) | (A[14] >> (64 - 39)); in process_block()
175 A[19] = (A[19] << 8) | (A[19] >> (64 - 8)); in process_block()
176 A[24] = (A[24] << 14) | (A[24] >> (64 - 14)); in process_block()
230 kt = bnn | A[23]; in process_block()
232 kt = A[23] & A[ 4]; in process_block()
235 c4 = A[23] ^ kt; in process_block()
240 A[23] = c4; in process_block()
264 tt3 = A[20] ^ A[23]; in process_block()
290 tt1 = A[20] ^ A[23]; in process_block()
332 A[23] = A[23] ^ t4; in process_block()
334 A[ 3] = (A[ 3] << 36) | (A[ 3] >> (64 - 36)); in process_block()
335 A[ 1] = (A[ 1] << 3) | (A[ 1] >> (64 - 3)); in process_block()
336 A[ 4] = (A[ 4] << 41) | (A[ 4] >> (64 - 41)); in process_block()
337 A[ 2] = (A[ 2] << 18) | (A[ 2] >> (64 - 18)); in process_block()
338 A[ 6] = (A[ 6] << 1) | (A[ 6] >> (64 - 1)); in process_block()
339 A[ 9] = (A[ 9] << 44) | (A[ 9] >> (64 - 44)); in process_block()
340 A[ 7] = (A[ 7] << 10) | (A[ 7] >> (64 - 10)); in process_block()
341 A[ 5] = (A[ 5] << 45) | (A[ 5] >> (64 - 45)); in process_block()
342 A[ 8] = (A[ 8] << 2) | (A[ 8] >> (64 - 2)); in process_block()
343 A[12] = (A[12] << 62) | (A[12] >> (64 - 62)); in process_block()
344 A[10] = (A[10] << 6) | (A[10] >> (64 - 6)); in process_block()
345 A[13] = (A[13] << 43) | (A[13] >> (64 - 43)); in process_block()
346 A[11] = (A[11] << 15) | (A[11] >> (64 - 15)); in process_block()
347 A[14] = (A[14] << 61) | (A[14] >> (64 - 61)); in process_block()
348 A[18] = (A[18] << 28) | (A[18] >> (64 - 28)); in process_block()
349 A[16] = (A[16] << 55) | (A[16] >> (64 - 55)); in process_block()
350 A[19] = (A[19] << 25) | (A[19] >> (64 - 25)); in process_block()
351 A[17] = (A[17] << 21) | (A[17] >> (64 - 21)); in process_block()
352 A[15] = (A[15] << 56) | (A[15] >> (64 - 56)); in process_block()
353 A[24] = (A[24] << 27) | (A[24] >> (64 - 27)); in process_block()
354 A[22] = (A[22] << 20) | (A[22] >> (64 - 20)); in process_block()
355 A[20] = (A[20] << 39) | (A[20] >> (64 - 39)); in process_block()
356 A[23] = (A[23] << 8) | (A[23] >> (64 - 8)); in process_block()
357 A[21] = (A[21] << 14) | (A[21] >> (64 - 14)); in process_block()
390 bnn = ~A[23]; in process_block()
393 kt = A[19] & A[23]; in process_block()
404 A[23] = c3; in process_block()
457 A[13] = A[23]; in process_block()
458 A[23] = A[ 4]; in process_block()
472 sc->rate = 200 - (size_t)(security_level >> 2); in br_shake_init()
473 sc->dptr = 0; in br_shake_init()
474 memset(sc->A, 0, sizeof sc->A); in br_shake_init()
475 sc->A[ 1] = ~(uint64_t)0; in br_shake_init()
476 sc->A[ 2] = ~(uint64_t)0; in br_shake_init()
477 sc->A[ 8] = ~(uint64_t)0; in br_shake_init()
478 sc->A[12] = ~(uint64_t)0; in br_shake_init()
479 sc->A[17] = ~(uint64_t)0; in br_shake_init()
480 sc->A[20] = ~(uint64_t)0; in br_shake_init()
491 rate = sc->rate; in br_shake_inject()
492 dptr = sc->dptr; in br_shake_inject()
496 clen = rate - dptr; in br_shake_inject()
500 memcpy(sc->dbuf + dptr, buf, clen); in br_shake_inject()
503 len -= clen; in br_shake_inject()
505 xor_block(sc->A, sc->dbuf, rate); in br_shake_inject()
506 process_block(sc->A); in br_shake_inject()
510 sc->dptr = dptr; in br_shake_inject()
518 * We apply padding and pre-XOR the value into the state. We in br_shake_flip()
522 if ((sc->dptr + 1) == sc->rate) { in br_shake_flip()
523 sc->dbuf[sc->dptr ++] = 0x9F; in br_shake_flip()
525 sc->dbuf[sc->dptr ++] = 0x1F; in br_shake_flip()
526 memset(sc->dbuf + sc->dptr, 0x00, sc->rate - sc->dptr - 1); in br_shake_flip()
527 sc->dbuf[sc->rate - 1] = 0x80; in br_shake_flip()
528 sc->dptr = sc->rate; in br_shake_flip()
530 xor_block(sc->A, sc->dbuf, sc->rate); in br_shake_flip()
541 dptr = sc->dptr; in br_shake_produce()
542 rate = sc->rate; in br_shake_produce()
550 A = sc->A; in br_shake_produce()
551 dbuf = sc->dbuf; in br_shake_produce()
561 br_enc64le(dbuf + 64, ~A[ 8]); in br_shake_produce()
576 br_enc64le(dbuf + 184, A[23]); in br_shake_produce()
580 clen = rate - dptr; in br_shake_produce()
584 memcpy(buf, sc->dbuf + dptr, clen); in br_shake_produce()
587 len -= clen; in br_shake_produce()
589 sc->dptr = dptr; in br_shake_produce()