36 static void shift_right_block(u8 *v)  in shift_right_block()  argument
40 	val = WPA_GET_BE32(v + 12);  in shift_right_block()
42 	if (v[11] & 0x01)  in shift_right_block()
44 	WPA_PUT_BE32(v + 12, val);  in shift_right_block()
46 	val = WPA_GET_BE32(v + 8);  in shift_right_block()
48 	if (v[7] & 0x01)  in shift_right_block()
50 	WPA_PUT_BE32(v + 8, val);  in shift_right_block()
52 	val = WPA_GET_BE32(v + 4);  in shift_right_block()
54 	if (v[3] & 0x01)  in shift_right_block()
56 	WPA_PUT_BE32(v + 4, val);  in shift_right_block()
58 	val = WPA_GET_BE32(v);  in shift_right_block()
60 	WPA_PUT_BE32(v, val);  in shift_right_block()
67 	u8 v[16];  in gf_mult()  local
70 	os_memset(z, 0, 16); /* Z_0 = 0^128 */  in gf_mult()
71 	os_memcpy(v, y, 16); /* V_0 = Y */  in gf_mult()
73 	for (i = 0; i < 16; i++) {  in gf_mult()
77 				xor_block(z, v);  in gf_mult()
82 			if (v[15] & 0x01) {  in gf_mult()
84 				shift_right_block(v);  in gf_mult()
86 				v[0] ^= 0xe1;  in gf_mult()
89 				shift_right_block(v);  in gf_mult()
99 	os_memset(y, 0, 16);  in ghash_start()
107 	u8 tmp[16];  in ghash()
109 	m = xlen / 16;  in ghash()
114 		xpos += 16;  in ghash()
120 		os_memcpy(y, tmp, 16);  in ghash()
136 		os_memcpy(y, tmp, 16);  in ghash()
153 	n = xlen / 16;  in aes_gctr()
194 	u8 len_buf[16];  in aes_gcm_prepare_j0()
232 	u8 len_buf[16];  in aes_gcm_ghash()
236 	 * v = 128 * ceil[len(A)/128] - len(A)  in aes_gcm_ghash()
237 	 * S = GHASH_H(A || 0^v || C || 0^u || [len(A)]64 || [len(C)]64)  in aes_gcm_ghash()
247 	wpa_hexdump_key(MSG_EXCESSIVE, "S = GHASH_H(...)", S, 16);  in aes_gcm_ghash()
260 	u8 S[16];  in aes_gcm_ae()
294 	u8 S[16], T[16];  in aes_gcm_ad()
313 	if (os_memcmp_const(tag, T, 16) != 0) {  in aes_gcm_ad()