9 /* $OpenBSD: chacha_private.h,v 1.3 2022/02/28 21:56:29 dtucker Exp $ */
16   u32 input[16]; /* could be compressed */
19 #define U8C(v) (v##U)  argument
20 #define U32C(v) (v##U)  argument
22 #define U8V(v) ((u8)(v) & U8C(0xFF))  argument
23 #define U32V(v) ((u32)(v) & U32C(0xFFFFFFFF))  argument
25 #define ROTL32(v, n) \  argument
26   (U32V((v) << (n)) | ((v) >> (32 - (n))))
31    ((u32)((p)[2]) << 16) | \
34 #define U32TO8_LITTLE(p, v) \  argument
36     (p)[0] = U8V((v)      ); \
37     (p)[1] = U8V((v) >>  8); \
38     (p)[2] = U8V((v) >> 16); \
39     (p)[3] = U8V((v) >> 24); \
42 #define ROTATE(v,c) (ROTL32(v,c))  argument
43 #define XOR(v,w) ((v) ^ (w))  argument
44 #define PLUS(v,w) (U32V((v) + (w)))  argument
45 #define PLUSONE(v) (PLUS((v),1))  argument
48   a = PLUS(a,b); d = ROTATE(XOR(d,a),16); \
53 static const char sigma[16] = "expand 32-byte k";
54 static const char tau[16] = "expand 16-byte k";
66     k += 16;  in chacha_keysetup()
173     x4 = XOR(x4,U8TO32_LITTLE(m + 16));  in chacha_encrypt_bytes()
197     U32TO8_LITTLE(c + 16,x4);  in chacha_encrypt_bytes()