950 	struct noise_handshake *hs = &r->r_handshake;  in noise_create_initiation()  local
961 	noise_param_init(hs->hs_ck, hs->hs_hash, r->r_public);  in noise_create_initiation()
964 	curve25519_generate_secret(hs->hs_e);  in noise_create_initiation()
965 	if (curve25519_generate_public(ue, hs->hs_e) == 0)  in noise_create_initiation()
967 	noise_msg_ephemeral(hs->hs_ck, hs->hs_hash, ue);  in noise_create_initiation()
970 	if (noise_mix_dh(hs->hs_ck, key, hs->hs_e, r->r_public) != 0)  in noise_create_initiation()
975 	    NOISE_PUBLIC_KEY_LEN, key, hs->hs_hash);  in noise_create_initiation()
978 	if (noise_mix_ss(hs->hs_ck, key, r->r_ss) != 0)  in noise_create_initiation()
984 	    NOISE_TIMESTAMP_LEN, key, hs->hs_hash);  in noise_create_initiation()
1006 	struct noise_handshake hs;  in noise_consume_initiation()  local
1015 	noise_param_init(hs.hs_ck, hs.hs_hash, l->l_public);  in noise_consume_initiation()
1018 	noise_msg_ephemeral(hs.hs_ck, hs.hs_hash, ue);  in noise_consume_initiation()
1021 	if (noise_mix_dh(hs.hs_ck, key, l->l_private, ue) != 0)  in noise_consume_initiation()
1026 	    NOISE_PUBLIC_KEY_LEN + NOISE_AUTHTAG_LEN, key, hs.hs_hash) != 0)  in noise_consume_initiation()
1034 	if (noise_mix_ss(hs.hs_ck, key, r->r_ss) != 0)  in noise_consume_initiation()
1039 	    NOISE_TIMESTAMP_LEN + NOISE_AUTHTAG_LEN, key, hs.hs_hash) != 0)  in noise_consume_initiation()
1042 	memcpy(hs.hs_e, ue, NOISE_PUBLIC_KEY_LEN);  in noise_consume_initiation()
1063 	r->r_handshake = hs;  in noise_consume_initiation()
1073 	explicit_bzero(&hs, sizeof(hs));  in noise_consume_initiation()
1083 	struct noise_handshake *hs = &r->r_handshake;  in noise_create_response()  local
1099 	noise_msg_ephemeral(hs->hs_ck, hs->hs_hash, ue);  in noise_create_response()
1102 	if (noise_mix_dh(hs->hs_ck, NULL, e, hs->hs_e) != 0)  in noise_create_response()
1106 	if (noise_mix_dh(hs->hs_ck, NULL, e, r->r_public) != 0)  in noise_create_response()
1110 	noise_mix_psk(hs->hs_ck, hs->hs_hash, key, r->r_psk);  in noise_create_response()
1113 	noise_msg_encrypt(en, NULL, 0, key, hs->hs_hash);  in noise_create_response()
1136 	struct noise_handshake hs;  in noise_consume_response()  local
1153 	hs = r->r_handshake;  in noise_consume_response()
1157 	noise_msg_ephemeral(hs.hs_ck, hs.hs_hash, ue);  in noise_consume_response()
1160 	if (noise_mix_dh(hs.hs_ck, NULL, hs.hs_e, ue) != 0)  in noise_consume_response()
1164 	if (noise_mix_dh(hs.hs_ck, NULL, l->l_private, ue) != 0)  in noise_consume_response()
1168 	noise_mix_psk(hs.hs_ck, hs.hs_hash, key, preshared_key);  in noise_consume_response()
1172 	    0 + NOISE_AUTHTAG_LEN, key, hs.hs_hash) != 0)  in noise_consume_response()
1178 		r->r_handshake = hs;  in noise_consume_response()
1187 	explicit_bzero(&hs, sizeof(hs));  in noise_consume_response()