22 #define U8V(v) ((u8)(v) & U8C(0xFF))
23 #define U32V(v) ((u32)(v) & U32C(0xFFFFFFFF))
29   (((u32)((p)[0])      ) | \
36     (p)[0] = U8V((v)      ); \
40   } while (0)
61   x->input[4] = U8TO32_LITTLE(k + 0);  in chacha_keysetup()
71   x->input[8] = U8TO32_LITTLE(k + 0);  in chacha_keysetup()
75   x->input[0] = U8TO32_LITTLE(constants + 0);  in chacha_keysetup()
85   x->input[12] = counter == NULL ? 0 : U8TO32_LITTLE(counter + 0);  in chacha_ivsetup()
86   x->input[13] = counter == NULL ? 0 : U8TO32_LITTLE(counter + 4);  in chacha_ivsetup()
87   x->input[14] = U8TO32_LITTLE(iv + 0);  in chacha_ivsetup()
92   x->input[12] = U8TO32_LITTLE(counter + 0);  in chacha_ivsetup()
103     U32TO8_LITTLE(counter + 0, x->input[12]);  in chacha_ctrsave()
113   u32 x0, x1, x2, x3, x4, x5, x6, x7, x8, x9, x10, x11, x12, x13, x14, x15;  in chacha_encrypt_bytes()  local
121   j0 = x->input[0];  in chacha_encrypt_bytes()
141       for (i = 0;i < bytes;++i) tmp[i] = m[i];  in chacha_encrypt_bytes()
162     x15 = j15;  in chacha_encrypt_bytes()
163     for (i = 20;i > 0;i -= 2) {  in chacha_encrypt_bytes()
167       QUARTERROUND( x3, x7,x11,x15)  in chacha_encrypt_bytes()
168       QUARTERROUND( x0, x5,x10,x15)  in chacha_encrypt_bytes()
188     x15 = PLUS(x15,j15);  in chacha_encrypt_bytes()
191     x0 = XOR(x0,U8TO32_LITTLE(m + 0));  in chacha_encrypt_bytes()
206     x15 = XOR(x15,U8TO32_LITTLE(m + 60));  in chacha_encrypt_bytes()
224     U32TO8_LITTLE(c + 0,x0);  in chacha_encrypt_bytes()
239     U32TO8_LITTLE(c + 60,x15);  in chacha_encrypt_bytes()
243         for (i = 0;i < bytes;++i) ctarget[i] = c[i];  in chacha_encrypt_bytes()