2 chacha-merged.c version 20080118
14   u32 input[16]; /* could be compressed */  member
24   (U32V((v) << (n)) | ((v) >> (32 - (n))))
29    ((u32)((p)[2]) << 16) | \
36     (p)[2] = U8V((v) >> 16); \
46   a = PLUS(a,b); d = ROTATE(XOR(d,a),16); \
51 static const char sigma[16] = "expand 32-byte k";
52 static const char tau[16] = "expand 16-byte k";
59   x->input[4] = U8TO32_LITTLE(k + 0);  in chacha_keysetup()
60   x->input[5] = U8TO32_LITTLE(k + 4);  in chacha_keysetup()
61   x->input[6] = U8TO32_LITTLE(k + 8);  in chacha_keysetup()
62   x->input[7] = U8TO32_LITTLE(k + 12);  in chacha_keysetup()
64     k += 16;  in chacha_keysetup()
69   x->input[8] = U8TO32_LITTLE(k + 0);  in chacha_keysetup()
70   x->input[9] = U8TO32_LITTLE(k + 4);  in chacha_keysetup()
71   x->input[10] = U8TO32_LITTLE(k + 8);  in chacha_keysetup()
72   x->input[11] = U8TO32_LITTLE(k + 12);  in chacha_keysetup()
73   x->input[0] = U8TO32_LITTLE(constants + 0);  in chacha_keysetup()
74   x->input[1] = U8TO32_LITTLE(constants + 4);  in chacha_keysetup()
75   x->input[2] = U8TO32_LITTLE(constants + 8);  in chacha_keysetup()
76   x->input[3] = U8TO32_LITTLE(constants + 12);  in chacha_keysetup()
82   x->input[12] = 0;  in chacha_ivsetup()
83   x->input[13] = 0;  in chacha_ivsetup()
84   x->input[14] = U8TO32_LITTLE(iv + 0);  in chacha_ivsetup()
85   x->input[15] = U8TO32_LITTLE(iv + 4);  in chacha_ivsetup()
99   j0 = x->input[0];  in chacha_encrypt_bytes()
100   j1 = x->input[1];  in chacha_encrypt_bytes()
101   j2 = x->input[2];  in chacha_encrypt_bytes()
102   j3 = x->input[3];  in chacha_encrypt_bytes()
103   j4 = x->input[4];  in chacha_encrypt_bytes()
104   j5 = x->input[5];  in chacha_encrypt_bytes()
105   j6 = x->input[6];  in chacha_encrypt_bytes()
106   j7 = x->input[7];  in chacha_encrypt_bytes()
107   j8 = x->input[8];  in chacha_encrypt_bytes()
108   j9 = x->input[9];  in chacha_encrypt_bytes()
109   j10 = x->input[10];  in chacha_encrypt_bytes()
110   j11 = x->input[11];  in chacha_encrypt_bytes()
111   j12 = x->input[12];  in chacha_encrypt_bytes()
112   j13 = x->input[13];  in chacha_encrypt_bytes()
113   j14 = x->input[14];  in chacha_encrypt_bytes()
114   j15 = x->input[15];  in chacha_encrypt_bytes()
139     for (i = 20;i > 0;i -= 2) {  in chacha_encrypt_bytes()
171     x4 = XOR(x4,U8TO32_LITTLE(m + 16));  in chacha_encrypt_bytes()
195     U32TO8_LITTLE(c + 16,x4);  in chacha_encrypt_bytes()
212       x->input[12] = j12;  in chacha_encrypt_bytes()
213       x->input[13] = j13;  in chacha_encrypt_bytes()
216     bytes -= 64;  in chacha_encrypt_bytes()