272 	const unsigned char *key, int nr)  in AES_GCM_encrypt()  argument
296 		for (j=1; j < nr-1; j+=2) {  in AES_GCM_encrypt()
303 		tmp1 = _mm_aesenc_si128(tmp1, KEY[nr-1]);  in AES_GCM_encrypt()
304 		tmp2 = _mm_aesenc_si128(tmp2, KEY[nr-1]);  in AES_GCM_encrypt()
306 		H = _mm_aesenclast_si128(tmp1, KEY[nr]);  in AES_GCM_encrypt()
307 		T = _mm_aesenclast_si128(tmp2, KEY[nr]);  in AES_GCM_encrypt()
312 		for (j=1; j <nr; j++)  in AES_GCM_encrypt()
314 		H = _mm_aesenclast_si128(tmp1, KEY[nr]);  in AES_GCM_encrypt()
340 		for (j=1; j < nr; j++)  in AES_GCM_encrypt()
342 		T = _mm_aesenclast_si128(tmp1, KEY[nr]);  in AES_GCM_encrypt()
417 		for (j=1; j<nr; j++) {  in AES_GCM_encrypt()
427 		tmp1 =_mm_aesenclast_si128(tmp1, KEY[nr]);  in AES_GCM_encrypt()
428 		tmp2 =_mm_aesenclast_si128(tmp2, KEY[nr]);  in AES_GCM_encrypt()
429 		tmp3 =_mm_aesenclast_si128(tmp3, KEY[nr]);  in AES_GCM_encrypt()
430 		tmp4 =_mm_aesenclast_si128(tmp4, KEY[nr]);  in AES_GCM_encrypt()
431 		tmp5 =_mm_aesenclast_si128(tmp5, KEY[nr]);  in AES_GCM_encrypt()
432 		tmp6 =_mm_aesenclast_si128(tmp6, KEY[nr]);  in AES_GCM_encrypt()
433 		tmp7 =_mm_aesenclast_si128(tmp7, KEY[nr]);  in AES_GCM_encrypt()
434 		tmp8 =_mm_aesenclast_si128(tmp8, KEY[nr]);  in AES_GCM_encrypt()
482 		for (j=1; j<nr-1; j+=2) {  in AES_GCM_encrypt()
486 		tmp1 = _mm_aesenc_si128(tmp1, KEY[nr-1]);  in AES_GCM_encrypt()
487 		tmp1 = _mm_aesenclast_si128(tmp1, KEY[nr]);  in AES_GCM_encrypt()
499 		for (j=1; j<nr-1; j+=2) {  in AES_GCM_encrypt()
503 		tmp1 = _mm_aesenc_si128(tmp1, KEY[nr-1]);  in AES_GCM_encrypt()
504 		tmp1 = _mm_aesenclast_si128(tmp1, KEY[nr]);  in AES_GCM_encrypt()
533 	const unsigned char *key, int nr)  in AES_GCM_decrypt()  argument
557 		for (j=1; j < nr-1; j+=2) {  in AES_GCM_decrypt()
564 		tmp1 = _mm_aesenc_si128(tmp1, KEY[nr-1]);  in AES_GCM_decrypt()
565 		tmp2 = _mm_aesenc_si128(tmp2, KEY[nr-1]);  in AES_GCM_decrypt()
567 		H = _mm_aesenclast_si128(tmp1, KEY[nr]);  in AES_GCM_decrypt()
568 		T = _mm_aesenclast_si128(tmp2, KEY[nr]);  in AES_GCM_decrypt()
573 		for (j=1; j <nr; j++)  in AES_GCM_decrypt()
575 		H = _mm_aesenclast_si128(tmp1, KEY[nr]);  in AES_GCM_decrypt()
601 		for (j=1; j < nr; j++)  in AES_GCM_decrypt()
603 		T = _mm_aesenclast_si128(tmp1, KEY[nr]);  in AES_GCM_decrypt()
722 		for (j=1; j<nr; j++) {  in AES_GCM_decrypt()
732 		tmp1 =_mm_aesenclast_si128(tmp1, KEY[nr]);  in AES_GCM_decrypt()
733 		tmp2 =_mm_aesenclast_si128(tmp2, KEY[nr]);  in AES_GCM_decrypt()
734 		tmp3 =_mm_aesenclast_si128(tmp3, KEY[nr]);  in AES_GCM_decrypt()
735 		tmp4 =_mm_aesenclast_si128(tmp4, KEY[nr]);  in AES_GCM_decrypt()
736 		tmp5 =_mm_aesenclast_si128(tmp5, KEY[nr]);  in AES_GCM_decrypt()
737 		tmp6 =_mm_aesenclast_si128(tmp6, KEY[nr]);  in AES_GCM_decrypt()
738 		tmp7 =_mm_aesenclast_si128(tmp7, KEY[nr]);  in AES_GCM_decrypt()
739 		tmp8 =_mm_aesenclast_si128(tmp8, KEY[nr]);  in AES_GCM_decrypt()
780 		for (j=1; j<nr-1; j+=2) {  in AES_GCM_decrypt()
784 		tmp1 = _mm_aesenc_si128(tmp1, KEY[nr-1]);  in AES_GCM_decrypt()
785 		tmp1 = _mm_aesenclast_si128(tmp1, KEY[nr]);  in AES_GCM_decrypt()
794 		for (j=1; j<nr-1; j+=2) {  in AES_GCM_decrypt()
798 		tmp1 = _mm_aesenc_si128(tmp1, KEY[nr-1]);  in AES_GCM_decrypt()
799 		tmp1 = _mm_aesenclast_si128(tmp1, KEY[nr]);  in AES_GCM_decrypt()