86 {   k[4*(i)+4] = ss[0] ^= ls_box(ss[3],3) ^ t_use(r,c)[i]; \
89     k[4*(i)+7] = ss[3] ^= ss[2]; \
98     cx->ks[3] = ss[3] = word_in(key, 3);  in aes_xi()
102     ke4(cx->ks, 2);  ke4(cx->ks, 3);  in aes_xi()
129 {   k[6*(i)+ 6] = ss[0] ^= ls_box(ss[5],3) ^ t_use(r,c)[i]; \
132     k[6*(i)+ 9] = ss[3] ^= ss[2]; \
137     k[6*(i)+10] = ss[4] ^= ss[3]; \
147     cx->ks[3] = ss[3] = word_in(key, 3);  in aes_xi()
153     ke6(cx->ks, 2);  ke6(cx->ks, 3);  in aes_xi()
179 {   k[8*(i)+ 8] = ss[0] ^= ls_box(ss[7],3) ^ t_use(r,c)[i]; \
182     k[8*(i)+11] = ss[3] ^= ss[2]; \
187     k[8*(i)+12] = ss[4] ^= ls_box(ss[3],0); \
199     cx->ks[3] = ss[3] = word_in(key, 3);  in aes_xi()
207     ke8(cx->ks, 2); ke8(cx->ks, 3);  in aes_xi()
237 #define v(n,i)  ((n) - (i) + 2 * ((i) & 3))  macro
239 #define v(n,i)  (i)  macro
254 {   k[v(40,(4*(i))+4)] = ss[0] ^= ls_box(ss[3],3) ^ t_use(r,c)[i]; \
255     k[v(40,(4*(i))+5)] = ss[1] ^= ss[0]; \
256     k[v(40,(4*(i))+6)] = ss[2] ^= ss[1]; \
257     k[v(40,(4*(i))+7)] = ss[3] ^= ss[2]; \
263 {   ss[0] = ss[0] ^ ss[2] ^ ss[1] ^ ss[3]; \
264     ss[1] = ss[1] ^ ss[3]; \
265     ss[2] = ss[2] ^ ss[3]; \
266     ss[4] = ls_box(ss[(i+3) % 4], 3) ^ t_use(r,c)[i]; \
268     ss[4] ^= k[v(40,(4*(i)))];   k[v(40,(4*(i))+4)] = ff(ss[4]); \
269     ss[4] ^= k[v(40,(4*(i))+1)]; k[v(40,(4*(i))+5)] = ff(ss[4]); \
270     ss[4] ^= k[v(40,(4*(i))+2)]; k[v(40,(4*(i))+6)] = ff(ss[4]); \
271     ss[4] ^= k[v(40,(4*(i))+3)]; k[v(40,(4*(i))+7)] = ff(ss[4]); \
275 {   ss[4] = ls_box(ss[(i+3) % 4], 3) ^ t_use(r,c)[i]; \
277     k[v(40,(4*(i))+4)] = ss[4] ^= k[v(40,(4*(i)))]; \
278     k[v(40,(4*(i))+5)] = ss[4] ^= k[v(40,(4*(i))+1)]; \
279     k[v(40,(4*(i))+6)] = ss[4] ^= k[v(40,(4*(i))+2)]; \
280     k[v(40,(4*(i))+7)] = ss[4] ^= k[v(40,(4*(i))+3)]; \
284 {   ss[4] = ls_box(ss[(i+3) % 4], 3) ^ t_use(r,c)[i]; ss[i % 4] ^= ss[4]; \
285     k[v(40,(4*(i))+4)] = (ss[0] ^= ss[1]) ^ ss[2] ^ ss[3]; \
286     k[v(40,(4*(i))+5)] = ss[1] ^ ss[3]; \
287     k[v(40,(4*(i))+6)] = ss[0]; \
288     k[v(40,(4*(i))+7)] = ss[1]; \
294 {   ss[0] ^= ls_box(ss[3],3) ^ t_use(r,c)[i]; k[v(40,(4*(i))+ 4)] = ff(ss[0]); \
295     ss[1] ^= ss[0]; k[v(40,(4*(i))+ 5)] = ff(ss[1]); \
296     ss[2] ^= ss[1]; k[v(40,(4*(i))+ 6)] = ff(ss[2]); \
297     ss[3] ^= ss[2]; k[v(40,(4*(i))+ 7)] = ff(ss[3]); \
301 {   ss[4] = ls_box(ss[3],3) ^ t_use(r,c)[i]; \
302     ss[0] ^= ss[4]; ss[4] = ff(ss[4]); k[v(40,(4*(i))+ 4)] = ss[4] ^= k[v(40,(4*(i)))]; \
303     ss[1] ^= ss[0]; k[v(40,(4*(i))+ 5)] = ss[4] ^= k[v(40,(4*(i))+ 1)]; \
304     ss[2] ^= ss[1]; k[v(40,(4*(i))+ 6)] = ss[4] ^= k[v(40,(4*(i))+ 2)]; \
305     ss[3] ^= ss[2]; k[v(40,(4*(i))+ 7)] = ss[4] ^= k[v(40,(4*(i))+ 3)]; \
309 {   ss[0] ^= ls_box(ss[3],3) ^ t_use(r,c)[i]; k[v(40,(4*(i))+ 4)] = ss[0]; \
310     ss[1] ^= ss[0]; k[v(40,(4*(i))+ 5)] = ss[1]; \
311     ss[2] ^= ss[1]; k[v(40,(4*(i))+ 6)] = ss[2]; \
312     ss[3] ^= ss[2]; k[v(40,(4*(i))+ 7)] = ss[3]; \
323 	cx->ks[v(40,(0))] = ss[0] = word_in(key, 0);  in aes_xi()
324     cx->ks[v(40,(1))] = ss[1] = word_in(key, 1);  in aes_xi()
325     cx->ks[v(40,(2))] = ss[2] = word_in(key, 2);  in aes_xi()
326     cx->ks[v(40,(3))] = ss[3] = word_in(key, 3);  in aes_xi()
330      kd4(cx->ks, 2);  kd4(cx->ks, 3);  in aes_xi()
360 {   k[v(48,(6*(i))+ 6)] = ss[0] ^= ls_box(ss[5],3) ^ t_use(r,c)[i]; \
361     k[v(48,(6*(i))+ 7)] = ss[1] ^= ss[0]; \
362     k[v(48,(6*(i))+ 8)] = ss[2] ^= ss[1]; \
363     k[v(48,(6*(i))+ 9)] = ss[3] ^= ss[2]; \
368     k[v(48,(6*(i))+10)] = ss[4] ^= ss[3]; \
369     k[v(48,(6*(i))+11)] = ss[5] ^= ss[4]; \
373 {   ss[0] ^= ls_box(ss[5],3) ^ t_use(r,c)[i]; k[v(48,(6*(i))+ 6)] = ff(ss[0]); \
374     ss[1] ^= ss[0]; k[v(48,(6*(i))+ 7)] = ff(ss[1]); \
375     ss[2] ^= ss[1]; k[v(48,(6*(i))+ 8)] = ff(ss[2]); \
376     ss[3] ^= ss[2]; k[v(48,(6*(i))+ 9)] = ff(ss[3]); \
377     ss[4] ^= ss[3]; k[v(48,(6*(i))+10)] = ff(ss[4]); \
378     ss[5] ^= ss[4]; k[v(48,(6*(i))+11)] = ff(ss[5]); \
382 {   ss[6] = ls_box(ss[5],3) ^ t_use(r,c)[i]; \
383     ss[0] ^= ss[6]; ss[6] = ff(ss[6]); k[v(48,(6*(i))+ 6)] = ss[6] ^= k[v(48,(6*(i)))]; \
384     ss[1] ^= ss[0]; k[v(48,(6*(i))+ 7)] = ss[6] ^= k[v(48,(6*(i))+ 1)]; \
385     ss[2] ^= ss[1]; k[v(48,(6*(i))+ 8)] = ss[6] ^= k[v(48,(6*(i))+ 2)]; \
386     ss[3] ^= ss[2]; k[v(48,(6*(i))+ 9)] = ss[6] ^= k[v(48,(6*(i))+ 3)]; \
387     ss[4] ^= ss[3]; k[v(48,(6*(i))+10)] = ss[6] ^= k[v(48,(6*(i))+ 4)]; \
388     ss[5] ^= ss[4]; k[v(48,(6*(i))+11)] = ss[6] ^= k[v(48,(6*(i))+ 5)]; \
392 {   ss[0] ^= ls_box(ss[5],3) ^ t_use(r,c)[i]; k[v(48,(6*(i))+ 6)] = ss[0]; \
393     ss[1] ^= ss[0]; k[v(48,(6*(i))+ 7)] = ss[1]; \
394     ss[2] ^= ss[1]; k[v(48,(6*(i))+ 8)] = ss[2]; \
395     ss[3] ^= ss[2]; k[v(48,(6*(i))+ 9)] = ss[3]; \
404     cx->ks[v(48,(0))] = ss[0] = word_in(key, 0);  in aes_xi()
405     cx->ks[v(48,(1))] = ss[1] = word_in(key, 1);  in aes_xi()
406     cx->ks[v(48,(2))] = ss[2] = word_in(key, 2);  in aes_xi()
407     cx->ks[v(48,(3))] = ss[3] = word_in(key, 3);  in aes_xi()
412     cx->ks[v(48, (4))] = ff(ss[4]);  in aes_xi()
413     cx->ks[v(48, (5))] = ff(ss[5]);  in aes_xi()
415     kd6(cx->ks, 2);  kd6(cx->ks, 3);  in aes_xi()
419     cx->ks[v(48,(4))] = ss[4] = word_in(key, 4);  in aes_xi()
420     cx->ks[v(48,(5))] = ss[5] = word_in(key, 5);  in aes_xi()
448 {   k[v(56,(8*(i))+ 8)] = ss[0] ^= ls_box(ss[7],3) ^ t_use(r,c)[i]; \
449     k[v(56,(8*(i))+ 9)] = ss[1] ^= ss[0]; \
450     k[v(56,(8*(i))+10)] = ss[2] ^= ss[1]; \
451     k[v(56,(8*(i))+11)] = ss[3] ^= ss[2]; \
456     k[v(56,(8*(i))+12)] = ss[4] ^= ls_box(ss[3],0); \
457     k[v(56,(8*(i))+13)] = ss[5] ^= ss[4]; \
458     k[v(56,(8*(i))+14)] = ss[6] ^= ss[5]; \
459     k[v(56,(8*(i))+15)] = ss[7] ^= ss[6]; \
463 {   ss[0] ^= ls_box(ss[7],3) ^ t_use(r,c)[i]; k[v(56,(8*(i))+ 8)] = ff(ss[0]); \
464     ss[1] ^= ss[0]; k[v(56,(8*(i))+ 9)] = ff(ss[1]); \
465     ss[2] ^= ss[1]; k[v(56,(8*(i))+10)] = ff(ss[2]); \
466     ss[3] ^= ss[2]; k[v(56,(8*(i))+11)] = ff(ss[3]); \
467     ss[4] ^= ls_box(ss[3],0); k[v(56,(8*(i))+12)] = ff(ss[4]); \
468     ss[5] ^= ss[4]; k[v(56,(8*(i))+13)] = ff(ss[5]); \
469     ss[6] ^= ss[5]; k[v(56,(8*(i))+14)] = ff(ss[6]); \
470     ss[7] ^= ss[6]; k[v(56,(8*(i))+15)] = ff(ss[7]); \
474 {   ss[8] = ls_box(ss[7],3) ^ t_use(r,c)[i]; \
475     ss[0] ^= ss[8]; ss[8] = ff(ss[8]); k[v(56,(8*(i))+ 8)] = ss[8] ^= k[v(56,(8*(i)))]; \
476     ss[1] ^= ss[0]; k[v(56,(8*(i))+ 9)] = ss[8] ^= k[v(56,(8*(i))+ 1)]; \
477     ss[2] ^= ss[1]; k[v(56,(8*(i))+10)] = ss[8] ^= k[v(56,(8*(i))+ 2)]; \
478     ss[3] ^= ss[2]; k[v(56,(8*(i))+11)] = ss[8] ^= k[v(56,(8*(i))+ 3)]; \
479     ss[8] = ls_box(ss[3],0); \
480     ss[4] ^= ss[8]; ss[8] = ff(ss[8]); k[v(56,(8*(i))+12)] = ss[8] ^= k[v(56,(8*(i))+ 4)]; \
481     ss[5] ^= ss[4]; k[v(56,(8*(i))+13)] = ss[8] ^= k[v(56,(8*(i))+ 5)]; \
482     ss[6] ^= ss[5]; k[v(56,(8*(i))+14)] = ss[8] ^= k[v(56,(8*(i))+ 6)]; \
483     ss[7] ^= ss[6]; k[v(56,(8*(i))+15)] = ss[8] ^= k[v(56,(8*(i))+ 7)]; \
487 {   ss[0] ^= ls_box(ss[7],3) ^ t_use(r,c)[i]; k[v(56,(8*(i))+ 8)] = ss[0]; \
488     ss[1] ^= ss[0]; k[v(56,(8*(i))+ 9)] = ss[1]; \
489     ss[2] ^= ss[1]; k[v(56,(8*(i))+10)] = ss[2]; \
490     ss[3] ^= ss[2]; k[v(56,(8*(i))+11)] = ss[3]; \
499     cx->ks[v(56,(0))] = ss[0] = word_in(key, 0);  in aes_xi()
500     cx->ks[v(56,(1))] = ss[1] = word_in(key, 1);  in aes_xi()
501     cx->ks[v(56,(2))] = ss[2] = word_in(key, 2);  in aes_xi()
502     cx->ks[v(56,(3))] = ss[3] = word_in(key, 3);  in aes_xi()
509     cx->ks[v(56,(4))] = ff(ss[4]);  in aes_xi()
510     cx->ks[v(56,(5))] = ff(ss[5]);  in aes_xi()
511     cx->ks[v(56,(6))] = ff(ss[6]);  in aes_xi()
512     cx->ks[v(56,(7))] = ff(ss[7]);  in aes_xi()
514     kd8(cx->ks, 2);  kd8(cx->ks, 3);  in aes_xi()
518     cx->ks[v(56,(4))] = ss[4] = word_in(key, 4);  in aes_xi()
519     cx->ks[v(56,(5))] = ss[5] = word_in(key, 5);  in aes_xi()
520     cx->ks[v(56,(6))] = ss[6] = word_in(key, 6);  in aes_xi()
521     cx->ks[v(56,(7))] = ss[7] = word_in(key, 7);  in aes_xi()