433 #define subl(x) subL[(x)]  macro
455     subl(0) = kll; subr(0) = klr;  in camellia_setup128()
456     subl(1) = krl; subr(1) = krr;  in camellia_setup128()
458     subl(4) = kll; subr(4) = klr;  in camellia_setup128()
459     subl(5) = krl; subr(5) = krr;  in camellia_setup128()
461     subl(10) = kll; subr(10) = klr;  in camellia_setup128()
462     subl(11) = krl; subr(11) = krr;  in camellia_setup128()
464     subl(13) = krl; subr(13) = krr;  in camellia_setup128()
466     subl(16) = kll; subr(16) = klr;  in camellia_setup128()
467     subl(17) = krl; subr(17) = krr;  in camellia_setup128()
469     subl(18) = kll; subr(18) = klr;  in camellia_setup128()
470     subl(19) = krl; subr(19) = krr;  in camellia_setup128()
472     subl(22) = kll; subr(22) = klr;  in camellia_setup128()
473     subl(23) = krl; subr(23) = krr;  in camellia_setup128()
476     kll = subl(0); klr = subr(0);  in camellia_setup128()
477     krl = subl(1); krr = subr(1);  in camellia_setup128()
491     subl(2) = kll; subr(2) = klr;  in camellia_setup128()
492     subl(3) = krl; subr(3) = krr;  in camellia_setup128()
494     subl(6) = kll; subr(6) = klr;  in camellia_setup128()
495     subl(7) = krl; subr(7) = krr;  in camellia_setup128()
497     subl(8) = kll; subr(8) = klr;  in camellia_setup128()
498     subl(9) = krl; subr(9) = krr;  in camellia_setup128()
500     subl(12) = kll; subr(12) = klr;  in camellia_setup128()
502     subl(14) = kll; subr(14) = klr;  in camellia_setup128()
503     subl(15) = krl; subr(15) = krr;  in camellia_setup128()
505     subl(20) = kll; subr(20) = klr;  in camellia_setup128()
506     subl(21) = krl; subr(21) = krr;  in camellia_setup128()
508     subl(24) = kll; subr(24) = klr;  in camellia_setup128()
509     subl(25) = krl; subr(25) = krr;  in camellia_setup128()
513     subl(3) ^= subl(1); subr(3) ^= subr(1);  in camellia_setup128()
514     subl(5) ^= subl(1); subr(5) ^= subr(1);  in camellia_setup128()
515     subl(7) ^= subl(1); subr(7) ^= subr(1);  in camellia_setup128()
516     subl(1) ^= subr(1) & ~subr(9);  in camellia_setup128()
517     dw = subl(1) & subl(9), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup128()
518     subl(11) ^= subl(1); subr(11) ^= subr(1);  in camellia_setup128()
519     subl(13) ^= subl(1); subr(13) ^= subr(1);  in camellia_setup128()
520     subl(15) ^= subl(1); subr(15) ^= subr(1);  in camellia_setup128()
521     subl(1) ^= subr(1) & ~subr(17);  in camellia_setup128()
522     dw = subl(1) & subl(17), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup128()
523     subl(19) ^= subl(1); subr(19) ^= subr(1);  in camellia_setup128()
524     subl(21) ^= subl(1); subr(21) ^= subr(1);  in camellia_setup128()
525     subl(23) ^= subl(1); subr(23) ^= subr(1);  in camellia_setup128()
526     subl(24) ^= subl(1); subr(24) ^= subr(1);  in camellia_setup128()
529     kw4l = subl(25); kw4r = subr(25);  in camellia_setup128()
530     subl(22) ^= kw4l; subr(22) ^= kw4r;  in camellia_setup128()
531     subl(20) ^= kw4l; subr(20) ^= kw4r;  in camellia_setup128()
532     subl(18) ^= kw4l; subr(18) ^= kw4r;  in camellia_setup128()
534     dw = kw4l & subl(16), kw4r ^= CAMELLIA_RL1(dw);  in camellia_setup128()
535     subl(14) ^= kw4l; subr(14) ^= kw4r;  in camellia_setup128()
536     subl(12) ^= kw4l; subr(12) ^= kw4r;  in camellia_setup128()
537     subl(10) ^= kw4l; subr(10) ^= kw4r;  in camellia_setup128()
539     dw = kw4l & subl(8), kw4r ^= CAMELLIA_RL1(dw);  in camellia_setup128()
540     subl(6) ^= kw4l; subr(6) ^= kw4r;  in camellia_setup128()
541     subl(4) ^= kw4l; subr(4) ^= kw4r;  in camellia_setup128()
542     subl(2) ^= kw4l; subr(2) ^= kw4r;  in camellia_setup128()
543     subl(0) ^= kw4l; subr(0) ^= kw4r;  in camellia_setup128()
546     SUBL(0) = subl(0) ^ subl(2);  in camellia_setup128()
548     SUBL(2) = subl(3);  in camellia_setup128()
550     SUBL(3) = subl(2) ^ subl(4);  in camellia_setup128()
552     SUBL(4) = subl(3) ^ subl(5);  in camellia_setup128()
554     SUBL(5) = subl(4) ^ subl(6);  in camellia_setup128()
556     SUBL(6) = subl(5) ^ subl(7);  in camellia_setup128()
558     tl = subl(10) ^ (subr(10) & ~subr(8));  in camellia_setup128()
559     dw = tl & subl(8), tr = subr(10) ^ CAMELLIA_RL1(dw);  in camellia_setup128()
560     SUBL(7) = subl(6) ^ tl;  in camellia_setup128()
562     SUBL(8) = subl(8);  in camellia_setup128()
564     SUBL(9) = subl(9);  in camellia_setup128()
566     tl = subl(7) ^ (subr(7) & ~subr(9));  in camellia_setup128()
567     dw = tl & subl(9), tr = subr(7) ^ CAMELLIA_RL1(dw);  in camellia_setup128()
568     SUBL(10) = tl ^ subl(11);  in camellia_setup128()
570     SUBL(11) = subl(10) ^ subl(12);  in camellia_setup128()
572     SUBL(12) = subl(11) ^ subl(13);  in camellia_setup128()
574     SUBL(13) = subl(12) ^ subl(14);  in camellia_setup128()
576     SUBL(14) = subl(13) ^ subl(15);  in camellia_setup128()
578     tl = subl(18) ^ (subr(18) & ~subr(16));  in camellia_setup128()
579     dw = tl & subl(16), tr = subr(18) ^ CAMELLIA_RL1(dw);  in camellia_setup128()
580     SUBL(15) = subl(14) ^ tl;  in camellia_setup128()
582     SUBL(16) = subl(16);  in camellia_setup128()
584     SUBL(17) = subl(17);  in camellia_setup128()
586     tl = subl(15) ^ (subr(15) & ~subr(17));  in camellia_setup128()
587     dw = tl & subl(17), tr = subr(15) ^ CAMELLIA_RL1(dw);  in camellia_setup128()
588     SUBL(18) = tl ^ subl(19);  in camellia_setup128()
590     SUBL(19) = subl(18) ^ subl(20);  in camellia_setup128()
592     SUBL(20) = subl(19) ^ subl(21);  in camellia_setup128()
594     SUBL(21) = subl(20) ^ subl(22);  in camellia_setup128()
596     SUBL(22) = subl(21) ^ subl(23);  in camellia_setup128()
598     SUBL(23) = subl(22);  in camellia_setup128()
600     SUBL(24) = subl(24) ^ subl(23);  in camellia_setup128()
667     subl(0) = kll; subr(0) = klr;  in camellia_setup256()
668     subl(1) = krl; subr(1) = krr;  in camellia_setup256()
670     subl(12) = kll; subr(12) = klr;  in camellia_setup256()
671     subl(13) = krl; subr(13) = krr;  in camellia_setup256()
673     subl(16) = kll; subr(16) = klr;  in camellia_setup256()
674     subl(17) = krl; subr(17) = krr;  in camellia_setup256()
676     subl(22) = kll; subr(22) = klr;  in camellia_setup256()
677     subl(23) = krl; subr(23) = krr;  in camellia_setup256()
679     subl(30) = kll; subr(30) = klr;  in camellia_setup256()
680     subl(31) = krl; subr(31) = krr;  in camellia_setup256()
684     subl(4) = krll; subr(4) = krlr;  in camellia_setup256()
685     subl(5) = krrl; subr(5) = krrr;  in camellia_setup256()
687     subl(8) = krll; subr(8) = krlr;  in camellia_setup256()
688     subl(9) = krrl; subr(9) = krrr;  in camellia_setup256()
690     subl(18) = krll; subr(18) = krlr;  in camellia_setup256()
691     subl(19) = krrl; subr(19) = krrr;  in camellia_setup256()
693     subl(26) = krll; subr(26) = krlr;  in camellia_setup256()
694     subl(27) = krrl; subr(27) = krrr;  in camellia_setup256()
698     kll = subl(0) ^ krll; klr = subr(0) ^ krlr;  in camellia_setup256()
699     krl = subl(1) ^ krrl; krr = subr(1) ^ krrr;  in camellia_setup256()
725     subl(6) = kll; subr(6) = klr;  in camellia_setup256()
726     subl(7) = krl; subr(7) = krr;  in camellia_setup256()
728     subl(14) = kll; subr(14) = klr;  in camellia_setup256()
729     subl(15) = krl; subr(15) = krr;  in camellia_setup256()
730     subl(24) = klr; subr(24) = krl;  in camellia_setup256()
731     subl(25) = krr; subr(25) = kll;  in camellia_setup256()
733     subl(28) = kll; subr(28) = klr;  in camellia_setup256()
734     subl(29) = krl; subr(29) = krr;  in camellia_setup256()
737     subl(2) = krll; subr(2) = krlr;  in camellia_setup256()
738     subl(3) = krrl; subr(3) = krrr;  in camellia_setup256()
740     subl(10) = krll; subr(10) = krlr;  in camellia_setup256()
741     subl(11) = krrl; subr(11) = krrr;  in camellia_setup256()
743     subl(20) = krll; subr(20) = krlr;  in camellia_setup256()
744     subl(21) = krrl; subr(21) = krrr;  in camellia_setup256()
746     subl(32) = krll; subr(32) = krlr;  in camellia_setup256()
747     subl(33) = krrl; subr(33) = krrr;  in camellia_setup256()
750     subl(3) ^= subl(1); subr(3) ^= subr(1);  in camellia_setup256()
751     subl(5) ^= subl(1); subr(5) ^= subr(1);  in camellia_setup256()
752     subl(7) ^= subl(1); subr(7) ^= subr(1);  in camellia_setup256()
753     subl(1) ^= subr(1) & ~subr(9);  in camellia_setup256()
754     dw = subl(1) & subl(9), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup256()
755     subl(11) ^= subl(1); subr(11) ^= subr(1);  in camellia_setup256()
756     subl(13) ^= subl(1); subr(13) ^= subr(1);  in camellia_setup256()
757     subl(15) ^= subl(1); subr(15) ^= subr(1);  in camellia_setup256()
758     subl(1) ^= subr(1) & ~subr(17);  in camellia_setup256()
759     dw = subl(1) & subl(17), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup256()
760     subl(19) ^= subl(1); subr(19) ^= subr(1);  in camellia_setup256()
761     subl(21) ^= subl(1); subr(21) ^= subr(1);  in camellia_setup256()
762     subl(23) ^= subl(1); subr(23) ^= subr(1);  in camellia_setup256()
763     subl(1) ^= subr(1) & ~subr(25);  in camellia_setup256()
764     dw = subl(1) & subl(25), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup256()
765     subl(27) ^= subl(1); subr(27) ^= subr(1);  in camellia_setup256()
766     subl(29) ^= subl(1); subr(29) ^= subr(1);  in camellia_setup256()
767     subl(31) ^= subl(1); subr(31) ^= subr(1);  in camellia_setup256()
768     subl(32) ^= subl(1); subr(32) ^= subr(1);  in camellia_setup256()
772     kw4l = subl(33); kw4r = subr(33);  in camellia_setup256()
773     subl(30) ^= kw4l; subr(30) ^= kw4r;  in camellia_setup256()
774     subl(28) ^= kw4l; subr(28) ^= kw4r;  in camellia_setup256()
775     subl(26) ^= kw4l; subr(26) ^= kw4r;  in camellia_setup256()
777     dw = kw4l & subl(24), kw4r ^= CAMELLIA_RL1(dw);  in camellia_setup256()
778     subl(22) ^= kw4l; subr(22) ^= kw4r;  in camellia_setup256()
779     subl(20) ^= kw4l; subr(20) ^= kw4r;  in camellia_setup256()
780     subl(18) ^= kw4l; subr(18) ^= kw4r;  in camellia_setup256()
782     dw = kw4l & subl(16), kw4r ^= CAMELLIA_RL1(dw);  in camellia_setup256()
783     subl(14) ^= kw4l; subr(14) ^= kw4r;  in camellia_setup256()
784     subl(12) ^= kw4l; subr(12) ^= kw4r;  in camellia_setup256()
785     subl(10) ^= kw4l; subr(10) ^= kw4r;  in camellia_setup256()
787     dw = kw4l & subl(8), kw4r ^= CAMELLIA_RL1(dw);  in camellia_setup256()
788     subl(6) ^= kw4l; subr(6) ^= kw4r;  in camellia_setup256()
789     subl(4) ^= kw4l; subr(4) ^= kw4r;  in camellia_setup256()
790     subl(2) ^= kw4l; subr(2) ^= kw4r;  in camellia_setup256()
791     subl(0) ^= kw4l; subr(0) ^= kw4r;  in camellia_setup256()
794     SUBL(0) = subl(0) ^ subl(2);  in camellia_setup256()
796     SUBL(2) = subl(3);  in camellia_setup256()
798     SUBL(3) = subl(2) ^ subl(4);  in camellia_setup256()
800     SUBL(4) = subl(3) ^ subl(5);  in camellia_setup256()
802     SUBL(5) = subl(4) ^ subl(6);  in camellia_setup256()
804     SUBL(6) = subl(5) ^ subl(7);  in camellia_setup256()
806     tl = subl(10) ^ (subr(10) & ~subr(8));  in camellia_setup256()
807     dw = tl & subl(8), tr = subr(10) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
808     SUBL(7) = subl(6) ^ tl;  in camellia_setup256()
810     SUBL(8) = subl(8);  in camellia_setup256()
812     SUBL(9) = subl(9);  in camellia_setup256()
814     tl = subl(7) ^ (subr(7) & ~subr(9));  in camellia_setup256()
815     dw = tl & subl(9), tr = subr(7) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
816     SUBL(10) = tl ^ subl(11);  in camellia_setup256()
818     SUBL(11) = subl(10) ^ subl(12);  in camellia_setup256()
820     SUBL(12) = subl(11) ^ subl(13);  in camellia_setup256()
822     SUBL(13) = subl(12) ^ subl(14);  in camellia_setup256()
824     SUBL(14) = subl(13) ^ subl(15);  in camellia_setup256()
826     tl = subl(18) ^ (subr(18) & ~subr(16));  in camellia_setup256()
827     dw = tl & subl(16), tr = subr(18) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
828     SUBL(15) = subl(14) ^ tl;  in camellia_setup256()
830     SUBL(16) = subl(16);  in camellia_setup256()
832     SUBL(17) = subl(17);  in camellia_setup256()
834     tl = subl(15) ^ (subr(15) & ~subr(17));  in camellia_setup256()
835     dw = tl & subl(17), tr = subr(15) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
836     SUBL(18) = tl ^ subl(19);  in camellia_setup256()
838     SUBL(19) = subl(18) ^ subl(20);  in camellia_setup256()
840     SUBL(20) = subl(19) ^ subl(21);  in camellia_setup256()
842     SUBL(21) = subl(20) ^ subl(22);  in camellia_setup256()
844     SUBL(22) = subl(21) ^ subl(23);  in camellia_setup256()
846     tl = subl(26) ^ (subr(26) & ~subr(24));  in camellia_setup256()
847     dw = tl & subl(24), tr = subr(26) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
848     SUBL(23) = subl(22) ^ tl;  in camellia_setup256()
850     SUBL(24) = subl(24);  in camellia_setup256()
852     SUBL(25) = subl(25);  in camellia_setup256()
854     tl = subl(23) ^ (subr(23) & ~subr(25));  in camellia_setup256()
855     dw = tl & subl(25), tr = subr(23) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
856     SUBL(26) = tl ^ subl(27);  in camellia_setup256()
858     SUBL(27) = subl(26) ^ subl(28);  in camellia_setup256()
860     SUBL(28) = subl(27) ^ subl(29);  in camellia_setup256()
862     SUBL(29) = subl(28) ^ subl(30);  in camellia_setup256()
864     SUBL(30) = subl(29) ^ subl(31);  in camellia_setup256()
866     SUBL(31) = subl(30);  in camellia_setup256()
868     SUBL(32) = subl(32) ^ subl(31);  in camellia_setup256()