41 	uint64x2_t S[4];  in SHA512_Transform_arm64_impl()  local
61 	S[0] = vld1q_u64(&state[0]);  in SHA512_Transform_arm64_impl()
62 	S[1] = vld1q_u64(&state[2]);  in SHA512_Transform_arm64_impl()
63 	S[2] = vld1q_u64(&state[4]);  in SHA512_Transform_arm64_impl()
64 	S[3] = vld1q_u64(&state[6]);  in SHA512_Transform_arm64_impl()
66 	S_start[0] = S[0];  in SHA512_Transform_arm64_impl()
67 	S_start[1] = S[1];  in SHA512_Transform_arm64_impl()
68 	S_start[2] = S[2];  in SHA512_Transform_arm64_impl()
69 	S_start[3] = S[3];  in SHA512_Transform_arm64_impl()
93 #define	A64_RNDr(S, W, i, ii)						\  in SHA512_Transform_arm64_impl()  argument
97     K_tmp = vaddq_u64(K_tmp, S[(11 - i) % 4]);				\  in SHA512_Transform_arm64_impl()
99       vextq_u64(S[(10 - i) % 4], S[(11 - i) % 4], 1),			\  in SHA512_Transform_arm64_impl()
100       vextq_u64(S[(9 - i) % 4], S[(10 - i) % 4], 1));			\  in SHA512_Transform_arm64_impl()
101     S[(11 - i) % 4] = vsha512h2q_u64(S_tmp, S[(9 - i) % 4], S[(8 - i) % 4]); \  in SHA512_Transform_arm64_impl()
102     S[(9 - i) % 4] = vaddq_u64(S[(9 - i) % 4], S_tmp)  in SHA512_Transform_arm64_impl()
104 		A64_RNDr(S, W, 0, i);  in SHA512_Transform_arm64_impl()
105 		A64_RNDr(S, W, 1, i);  in SHA512_Transform_arm64_impl()
106 		A64_RNDr(S, W, 2, i);  in SHA512_Transform_arm64_impl()
107 		A64_RNDr(S, W, 3, i);  in SHA512_Transform_arm64_impl()
108 		A64_RNDr(S, W, 4, i);  in SHA512_Transform_arm64_impl()
109 		A64_RNDr(S, W, 5, i);  in SHA512_Transform_arm64_impl()
110 		A64_RNDr(S, W, 6, i);  in SHA512_Transform_arm64_impl()
111 		A64_RNDr(S, W, 7, i);  in SHA512_Transform_arm64_impl()
141 	S[0] = vaddq_u64(S[0], S_start[0]);  in SHA512_Transform_arm64_impl()
142 	S[1] = vaddq_u64(S[1], S_start[1]);  in SHA512_Transform_arm64_impl()
143 	S[2] = vaddq_u64(S[2], S_start[2]);  in SHA512_Transform_arm64_impl()
144 	S[3] = vaddq_u64(S[3], S_start[3]);  in SHA512_Transform_arm64_impl()
146 	vst1q_u64(&state[0], S[0]);  in SHA512_Transform_arm64_impl()
147 	vst1q_u64(&state[2], S[1]);  in SHA512_Transform_arm64_impl()
148 	vst1q_u64(&state[4], S[2]);  in SHA512_Transform_arm64_impl()
149 	vst1q_u64(&state[6], S[3]);  in SHA512_Transform_arm64_impl()