484 	 * these things can be, we still prefer the SHA-2 functions over  in rng_init()
524 			cc->rng_init_done = 2;  in br_ssl_engine_init_rand()
528 	if (cc->rng_init_done < 2) {  in br_ssl_engine_init_rand()
550 	cc->rng_init_done = 2;  in br_ssl_engine_inject_entropy()
1033  * 2 for a renegotiation, or 0 for a jump due to I/O completion.
1217 			if (cc->application_data == 2) {  in br_ssl_engine_recvrec_ack()
1266 	jump_handshake(cc, 2);  in br_ssl_engine_renegotiate()
1343 	br_tls_prf_seed_chunk seed[2] = {  in br_ssl_engine_compute_master()
1350 		pms, pms_len, "master secret", 2, seed);  in br_ssl_engine_compute_master()
1358 	size_t half_len, unsigned char *kb)  in compute_key_block()  argument
1361 	br_tls_prf_seed_chunk seed[2] = {  in compute_key_block()
1367 	iprf(kb, half_len << 1,  in compute_key_block()
1369 		"key expansion", 2, seed);  in compute_key_block()
1378 	unsigned char kb[192];  in br_ssl_engine_switch_cbc_in()  local
1396 		mac_key_len + cipher_key_len + iv_len, kb);  in br_ssl_engine_switch_cbc_in()
1398 		mac_key = &kb[mac_key_len];  in br_ssl_engine_switch_cbc_in()
1399 		cipher_key = &kb[(mac_key_len << 1) + cipher_key_len];  in br_ssl_engine_switch_cbc_in()
1400 		iv = &kb[((mac_key_len + cipher_key_len) << 1) + iv_len];  in br_ssl_engine_switch_cbc_in()
1402 		mac_key = &kb[0];  in br_ssl_engine_switch_cbc_in()
1403 		cipher_key = &kb[mac_key_len << 1];  in br_ssl_engine_switch_cbc_in()
1404 		iv = &kb[(mac_key_len + cipher_key_len) << 1];  in br_ssl_engine_switch_cbc_in()
1421 	unsigned char kb[192];  in br_ssl_engine_switch_cbc_out()  local
1439 		mac_key_len + cipher_key_len + iv_len, kb);  in br_ssl_engine_switch_cbc_out()
1441 		mac_key = &kb[0];  in br_ssl_engine_switch_cbc_out()
1442 		cipher_key = &kb[mac_key_len << 1];  in br_ssl_engine_switch_cbc_out()
1443 		iv = &kb[(mac_key_len + cipher_key_len) << 1];  in br_ssl_engine_switch_cbc_out()
1445 		mac_key = &kb[mac_key_len];  in br_ssl_engine_switch_cbc_out()
1446 		cipher_key = &kb[(mac_key_len << 1) + cipher_key_len];  in br_ssl_engine_switch_cbc_out()
1447 		iv = &kb[((mac_key_len + cipher_key_len) << 1) + iv_len];  in br_ssl_engine_switch_cbc_out()
1463 	unsigned char kb[72];  in br_ssl_engine_switch_gcm_in()  local
1466 	compute_key_block(cc, prf_id, cipher_key_len + 4, kb);  in br_ssl_engine_switch_gcm_in()
1468 		cipher_key = &kb[cipher_key_len];  in br_ssl_engine_switch_gcm_in()
1469 		iv = &kb[(cipher_key_len << 1) + 4];  in br_ssl_engine_switch_gcm_in()
1471 		cipher_key = &kb[0];  in br_ssl_engine_switch_gcm_in()
1472 		iv = &kb[cipher_key_len << 1];  in br_ssl_engine_switch_gcm_in()
1485 	unsigned char kb[72];  in br_ssl_engine_switch_gcm_out()  local
1488 	compute_key_block(cc, prf_id, cipher_key_len + 4, kb);  in br_ssl_engine_switch_gcm_out()
1490 		cipher_key = &kb[0];  in br_ssl_engine_switch_gcm_out()
1491 		iv = &kb[cipher_key_len << 1];  in br_ssl_engine_switch_gcm_out()
1493 		cipher_key = &kb[cipher_key_len];  in br_ssl_engine_switch_gcm_out()
1494 		iv = &kb[(cipher_key_len << 1) + 4];  in br_ssl_engine_switch_gcm_out()
1505 	unsigned char kb[88];  in br_ssl_engine_switch_chapol_in()  local
1508 	compute_key_block(cc, prf_id, 44, kb);  in br_ssl_engine_switch_chapol_in()
1510 		cipher_key = &kb[32];  in br_ssl_engine_switch_chapol_in()
1511 		iv = &kb[76];  in br_ssl_engine_switch_chapol_in()
1513 		cipher_key = &kb[0];  in br_ssl_engine_switch_chapol_in()
1514 		iv = &kb[64];  in br_ssl_engine_switch_chapol_in()
1526 	unsigned char kb[88];  in br_ssl_engine_switch_chapol_out()  local
1529 	compute_key_block(cc, prf_id, 44, kb);  in br_ssl_engine_switch_chapol_out()
1531 		cipher_key = &kb[0];  in br_ssl_engine_switch_chapol_out()
1532 		iv = &kb[64];  in br_ssl_engine_switch_chapol_out()
1534 		cipher_key = &kb[32];  in br_ssl_engine_switch_chapol_out()
1535 		iv = &kb[76];  in br_ssl_engine_switch_chapol_out()
1548 	unsigned char kb[72];  in br_ssl_engine_switch_ccm_in()  local
1551 	compute_key_block(cc, prf_id, cipher_key_len + 4, kb);  in br_ssl_engine_switch_ccm_in()
1553 		cipher_key = &kb[cipher_key_len];  in br_ssl_engine_switch_ccm_in()
1554 		iv = &kb[(cipher_key_len << 1) + 4];  in br_ssl_engine_switch_ccm_in()
1556 		cipher_key = &kb[0];  in br_ssl_engine_switch_ccm_in()
1557 		iv = &kb[cipher_key_len << 1];  in br_ssl_engine_switch_ccm_in()
1571 	unsigned char kb[72];  in br_ssl_engine_switch_ccm_out()  local
1574 	compute_key_block(cc, prf_id, cipher_key_len + 4, kb);  in br_ssl_engine_switch_ccm_out()
1576 		cipher_key = &kb[0];  in br_ssl_engine_switch_ccm_out()
1577 		iv = &kb[cipher_key_len << 1];  in br_ssl_engine_switch_ccm_out()
1579 		cipher_key = &kb[cipher_key_len];  in br_ssl_engine_switch_ccm_out()
1580 		iv = &kb[(cipher_key_len << 1) + 4];  in br_ssl_engine_switch_ccm_out()