434 #define subr(x) subR[(x)]  macro
455     subl(0) = kll; subr(0) = klr;  in camellia_setup128()
456     subl(1) = krl; subr(1) = krr;  in camellia_setup128()
458     subl(4) = kll; subr(4) = klr;  in camellia_setup128()
459     subl(5) = krl; subr(5) = krr;  in camellia_setup128()
461     subl(10) = kll; subr(10) = klr;  in camellia_setup128()
462     subl(11) = krl; subr(11) = krr;  in camellia_setup128()
464     subl(13) = krl; subr(13) = krr;  in camellia_setup128()
466     subl(16) = kll; subr(16) = klr;  in camellia_setup128()
467     subl(17) = krl; subr(17) = krr;  in camellia_setup128()
469     subl(18) = kll; subr(18) = klr;  in camellia_setup128()
470     subl(19) = krl; subr(19) = krr;  in camellia_setup128()
472     subl(22) = kll; subr(22) = klr;  in camellia_setup128()
473     subl(23) = krl; subr(23) = krr;  in camellia_setup128()
476     kll = subl(0); klr = subr(0);  in camellia_setup128()
477     krl = subl(1); krr = subr(1);  in camellia_setup128()
491     subl(2) = kll; subr(2) = klr;  in camellia_setup128()
492     subl(3) = krl; subr(3) = krr;  in camellia_setup128()
494     subl(6) = kll; subr(6) = klr;  in camellia_setup128()
495     subl(7) = krl; subr(7) = krr;  in camellia_setup128()
497     subl(8) = kll; subr(8) = klr;  in camellia_setup128()
498     subl(9) = krl; subr(9) = krr;  in camellia_setup128()
500     subl(12) = kll; subr(12) = klr;  in camellia_setup128()
502     subl(14) = kll; subr(14) = klr;  in camellia_setup128()
503     subl(15) = krl; subr(15) = krr;  in camellia_setup128()
505     subl(20) = kll; subr(20) = klr;  in camellia_setup128()
506     subl(21) = krl; subr(21) = krr;  in camellia_setup128()
508     subl(24) = kll; subr(24) = klr;  in camellia_setup128()
509     subl(25) = krl; subr(25) = krr;  in camellia_setup128()
513     subl(3) ^= subl(1); subr(3) ^= subr(1);  in camellia_setup128()
514     subl(5) ^= subl(1); subr(5) ^= subr(1);  in camellia_setup128()
515     subl(7) ^= subl(1); subr(7) ^= subr(1);  in camellia_setup128()
516     subl(1) ^= subr(1) & ~subr(9);  in camellia_setup128()
517     dw = subl(1) & subl(9), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup128()
518     subl(11) ^= subl(1); subr(11) ^= subr(1);  in camellia_setup128()
519     subl(13) ^= subl(1); subr(13) ^= subr(1);  in camellia_setup128()
520     subl(15) ^= subl(1); subr(15) ^= subr(1);  in camellia_setup128()
521     subl(1) ^= subr(1) & ~subr(17);  in camellia_setup128()
522     dw = subl(1) & subl(17), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup128()
523     subl(19) ^= subl(1); subr(19) ^= subr(1);  in camellia_setup128()
524     subl(21) ^= subl(1); subr(21) ^= subr(1);  in camellia_setup128()
525     subl(23) ^= subl(1); subr(23) ^= subr(1);  in camellia_setup128()
526     subl(24) ^= subl(1); subr(24) ^= subr(1);  in camellia_setup128()
529     kw4l = subl(25); kw4r = subr(25);  in camellia_setup128()
530     subl(22) ^= kw4l; subr(22) ^= kw4r;  in camellia_setup128()
531     subl(20) ^= kw4l; subr(20) ^= kw4r;  in camellia_setup128()
532     subl(18) ^= kw4l; subr(18) ^= kw4r;  in camellia_setup128()
533     kw4l ^= kw4r & ~subr(16);  in camellia_setup128()
535     subl(14) ^= kw4l; subr(14) ^= kw4r;  in camellia_setup128()
536     subl(12) ^= kw4l; subr(12) ^= kw4r;  in camellia_setup128()
537     subl(10) ^= kw4l; subr(10) ^= kw4r;  in camellia_setup128()
538     kw4l ^= kw4r & ~subr(8);  in camellia_setup128()
540     subl(6) ^= kw4l; subr(6) ^= kw4r;  in camellia_setup128()
541     subl(4) ^= kw4l; subr(4) ^= kw4r;  in camellia_setup128()
542     subl(2) ^= kw4l; subr(2) ^= kw4r;  in camellia_setup128()
543     subl(0) ^= kw4l; subr(0) ^= kw4r;  in camellia_setup128()
547     SUBR(0) = subr(0) ^ subr(2);  in camellia_setup128()
549     SUBR(2) = subr(3);  in camellia_setup128()
551     SUBR(3) = subr(2) ^ subr(4);  in camellia_setup128()
553     SUBR(4) = subr(3) ^ subr(5);  in camellia_setup128()
555     SUBR(5) = subr(4) ^ subr(6);  in camellia_setup128()
557     SUBR(6) = subr(5) ^ subr(7);  in camellia_setup128()
558     tl = subl(10) ^ (subr(10) & ~subr(8));  in camellia_setup128()
559     dw = tl & subl(8), tr = subr(10) ^ CAMELLIA_RL1(dw);  in camellia_setup128()
561     SUBR(7) = subr(6) ^ tr;  in camellia_setup128()
563     SUBR(8) = subr(8);  in camellia_setup128()
565     SUBR(9) = subr(9);  in camellia_setup128()
566     tl = subl(7) ^ (subr(7) & ~subr(9));  in camellia_setup128()
567     dw = tl & subl(9), tr = subr(7) ^ CAMELLIA_RL1(dw);  in camellia_setup128()
569     SUBR(10) = tr ^ subr(11);  in camellia_setup128()
571     SUBR(11) = subr(10) ^ subr(12);  in camellia_setup128()
573     SUBR(12) = subr(11) ^ subr(13);  in camellia_setup128()
575     SUBR(13) = subr(12) ^ subr(14);  in camellia_setup128()
577     SUBR(14) = subr(13) ^ subr(15);  in camellia_setup128()
578     tl = subl(18) ^ (subr(18) & ~subr(16));  in camellia_setup128()
579     dw = tl & subl(16), tr = subr(18) ^ CAMELLIA_RL1(dw);  in camellia_setup128()
581     SUBR(15) = subr(14) ^ tr;  in camellia_setup128()
583     SUBR(16) = subr(16);  in camellia_setup128()
585     SUBR(17) = subr(17);  in camellia_setup128()
586     tl = subl(15) ^ (subr(15) & ~subr(17));  in camellia_setup128()
587     dw = tl & subl(17), tr = subr(15) ^ CAMELLIA_RL1(dw);  in camellia_setup128()
589     SUBR(18) = tr ^ subr(19);  in camellia_setup128()
591     SUBR(19) = subr(18) ^ subr(20);  in camellia_setup128()
593     SUBR(20) = subr(19) ^ subr(21);  in camellia_setup128()
595     SUBR(21) = subr(20) ^ subr(22);  in camellia_setup128()
597     SUBR(22) = subr(21) ^ subr(23);  in camellia_setup128()
599     SUBR(23) = subr(22);  in camellia_setup128()
601     SUBR(24) = subr(24) ^ subr(23);  in camellia_setup128()
667     subl(0) = kll; subr(0) = klr;  in camellia_setup256()
668     subl(1) = krl; subr(1) = krr;  in camellia_setup256()
670     subl(12) = kll; subr(12) = klr;  in camellia_setup256()
671     subl(13) = krl; subr(13) = krr;  in camellia_setup256()
673     subl(16) = kll; subr(16) = klr;  in camellia_setup256()
674     subl(17) = krl; subr(17) = krr;  in camellia_setup256()
676     subl(22) = kll; subr(22) = klr;  in camellia_setup256()
677     subl(23) = krl; subr(23) = krr;  in camellia_setup256()
679     subl(30) = kll; subr(30) = klr;  in camellia_setup256()
680     subl(31) = krl; subr(31) = krr;  in camellia_setup256()
684     subl(4) = krll; subr(4) = krlr;  in camellia_setup256()
685     subl(5) = krrl; subr(5) = krrr;  in camellia_setup256()
687     subl(8) = krll; subr(8) = krlr;  in camellia_setup256()
688     subl(9) = krrl; subr(9) = krrr;  in camellia_setup256()
690     subl(18) = krll; subr(18) = krlr;  in camellia_setup256()
691     subl(19) = krrl; subr(19) = krrr;  in camellia_setup256()
693     subl(26) = krll; subr(26) = krlr;  in camellia_setup256()
694     subl(27) = krrl; subr(27) = krrr;  in camellia_setup256()
698     kll = subl(0) ^ krll; klr = subr(0) ^ krlr;  in camellia_setup256()
699     krl = subl(1) ^ krrl; krr = subr(1) ^ krrr;  in camellia_setup256()
725     subl(6) = kll; subr(6) = klr;  in camellia_setup256()
726     subl(7) = krl; subr(7) = krr;  in camellia_setup256()
728     subl(14) = kll; subr(14) = klr;  in camellia_setup256()
729     subl(15) = krl; subr(15) = krr;  in camellia_setup256()
730     subl(24) = klr; subr(24) = krl;  in camellia_setup256()
731     subl(25) = krr; subr(25) = kll;  in camellia_setup256()
733     subl(28) = kll; subr(28) = klr;  in camellia_setup256()
734     subl(29) = krl; subr(29) = krr;  in camellia_setup256()
737     subl(2) = krll; subr(2) = krlr;  in camellia_setup256()
738     subl(3) = krrl; subr(3) = krrr;  in camellia_setup256()
740     subl(10) = krll; subr(10) = krlr;  in camellia_setup256()
741     subl(11) = krrl; subr(11) = krrr;  in camellia_setup256()
743     subl(20) = krll; subr(20) = krlr;  in camellia_setup256()
744     subl(21) = krrl; subr(21) = krrr;  in camellia_setup256()
746     subl(32) = krll; subr(32) = krlr;  in camellia_setup256()
747     subl(33) = krrl; subr(33) = krrr;  in camellia_setup256()
750     subl(3) ^= subl(1); subr(3) ^= subr(1);  in camellia_setup256()
751     subl(5) ^= subl(1); subr(5) ^= subr(1);  in camellia_setup256()
752     subl(7) ^= subl(1); subr(7) ^= subr(1);  in camellia_setup256()
753     subl(1) ^= subr(1) & ~subr(9);  in camellia_setup256()
754     dw = subl(1) & subl(9), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup256()
755     subl(11) ^= subl(1); subr(11) ^= subr(1);  in camellia_setup256()
756     subl(13) ^= subl(1); subr(13) ^= subr(1);  in camellia_setup256()
757     subl(15) ^= subl(1); subr(15) ^= subr(1);  in camellia_setup256()
758     subl(1) ^= subr(1) & ~subr(17);  in camellia_setup256()
759     dw = subl(1) & subl(17), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup256()
760     subl(19) ^= subl(1); subr(19) ^= subr(1);  in camellia_setup256()
761     subl(21) ^= subl(1); subr(21) ^= subr(1);  in camellia_setup256()
762     subl(23) ^= subl(1); subr(23) ^= subr(1);  in camellia_setup256()
763     subl(1) ^= subr(1) & ~subr(25);  in camellia_setup256()
764     dw = subl(1) & subl(25), subr(1) ^= CAMELLIA_RL1(dw);  in camellia_setup256()
765     subl(27) ^= subl(1); subr(27) ^= subr(1);  in camellia_setup256()
766     subl(29) ^= subl(1); subr(29) ^= subr(1);  in camellia_setup256()
767     subl(31) ^= subl(1); subr(31) ^= subr(1);  in camellia_setup256()
768     subl(32) ^= subl(1); subr(32) ^= subr(1);  in camellia_setup256()
772     kw4l = subl(33); kw4r = subr(33);  in camellia_setup256()
773     subl(30) ^= kw4l; subr(30) ^= kw4r;  in camellia_setup256()
774     subl(28) ^= kw4l; subr(28) ^= kw4r;  in camellia_setup256()
775     subl(26) ^= kw4l; subr(26) ^= kw4r;  in camellia_setup256()
776     kw4l ^= kw4r & ~subr(24);  in camellia_setup256()
778     subl(22) ^= kw4l; subr(22) ^= kw4r;  in camellia_setup256()
779     subl(20) ^= kw4l; subr(20) ^= kw4r;  in camellia_setup256()
780     subl(18) ^= kw4l; subr(18) ^= kw4r;  in camellia_setup256()
781     kw4l ^= kw4r & ~subr(16);  in camellia_setup256()
783     subl(14) ^= kw4l; subr(14) ^= kw4r;  in camellia_setup256()
784     subl(12) ^= kw4l; subr(12) ^= kw4r;  in camellia_setup256()
785     subl(10) ^= kw4l; subr(10) ^= kw4r;  in camellia_setup256()
786     kw4l ^= kw4r & ~subr(8);  in camellia_setup256()
788     subl(6) ^= kw4l; subr(6) ^= kw4r;  in camellia_setup256()
789     subl(4) ^= kw4l; subr(4) ^= kw4r;  in camellia_setup256()
790     subl(2) ^= kw4l; subr(2) ^= kw4r;  in camellia_setup256()
791     subl(0) ^= kw4l; subr(0) ^= kw4r;  in camellia_setup256()
795     SUBR(0) = subr(0) ^ subr(2);  in camellia_setup256()
797     SUBR(2) = subr(3);  in camellia_setup256()
799     SUBR(3) = subr(2) ^ subr(4);  in camellia_setup256()
801     SUBR(4) = subr(3) ^ subr(5);  in camellia_setup256()
803     SUBR(5) = subr(4) ^ subr(6);  in camellia_setup256()
805     SUBR(6) = subr(5) ^ subr(7);  in camellia_setup256()
806     tl = subl(10) ^ (subr(10) & ~subr(8));  in camellia_setup256()
807     dw = tl & subl(8), tr = subr(10) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
809     SUBR(7) = subr(6) ^ tr;  in camellia_setup256()
811     SUBR(8) = subr(8);  in camellia_setup256()
813     SUBR(9) = subr(9);  in camellia_setup256()
814     tl = subl(7) ^ (subr(7) & ~subr(9));  in camellia_setup256()
815     dw = tl & subl(9), tr = subr(7) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
817     SUBR(10) = tr ^ subr(11);  in camellia_setup256()
819     SUBR(11) = subr(10) ^ subr(12);  in camellia_setup256()
821     SUBR(12) = subr(11) ^ subr(13);  in camellia_setup256()
823     SUBR(13) = subr(12) ^ subr(14);  in camellia_setup256()
825     SUBR(14) = subr(13) ^ subr(15);  in camellia_setup256()
826     tl = subl(18) ^ (subr(18) & ~subr(16));  in camellia_setup256()
827     dw = tl & subl(16), tr = subr(18) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
829     SUBR(15) = subr(14) ^ tr;  in camellia_setup256()
831     SUBR(16) = subr(16);  in camellia_setup256()
833     SUBR(17) = subr(17);  in camellia_setup256()
834     tl = subl(15) ^ (subr(15) & ~subr(17));  in camellia_setup256()
835     dw = tl & subl(17), tr = subr(15) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
837     SUBR(18) = tr ^ subr(19);  in camellia_setup256()
839     SUBR(19) = subr(18) ^ subr(20);  in camellia_setup256()
841     SUBR(20) = subr(19) ^ subr(21);  in camellia_setup256()
843     SUBR(21) = subr(20) ^ subr(22);  in camellia_setup256()
845     SUBR(22) = subr(21) ^ subr(23);  in camellia_setup256()
846     tl = subl(26) ^ (subr(26) & ~subr(24));  in camellia_setup256()
847     dw = tl & subl(24), tr = subr(26) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
849     SUBR(23) = subr(22) ^ tr;  in camellia_setup256()
851     SUBR(24) = subr(24);  in camellia_setup256()
853     SUBR(25) = subr(25);  in camellia_setup256()
854     tl = subl(23) ^ (subr(23) & ~subr(25));  in camellia_setup256()
855     dw = tl & subl(25), tr = subr(23) ^ CAMELLIA_RL1(dw);  in camellia_setup256()
857     SUBR(26) = tr ^ subr(27);  in camellia_setup256()
859     SUBR(27) = subr(26) ^ subr(28);  in camellia_setup256()
861     SUBR(28) = subr(27) ^ subr(29);  in camellia_setup256()
863     SUBR(29) = subr(28) ^ subr(30);  in camellia_setup256()
865     SUBR(30) = subr(29) ^ subr(31);  in camellia_setup256()
867     SUBR(31) = subr(30);  in camellia_setup256()
869     SUBR(32) = subr(32) ^ subr(31);  in camellia_setup256()