238 aes_gcm_init_hash_subkey(rijndael_ctx *aes, uint8_t *H)  in aes_gcm_init_hash_subkey()  argument
241 	memset(H, 0, AES_BLOCK_LEN);  in aes_gcm_init_hash_subkey()
243 	rijndael_encrypt(aes, H, H);  in aes_gcm_init_hash_subkey()
247 aes_gcm_prepare_j0(const uint8_t *iv, size_t iv_len, const uint8_t *H,  in aes_gcm_prepare_j0()  argument
263 		ghash(H, iv, iv_len, J0);  in aes_gcm_prepare_j0()
266 		ghash(H, len_buf, sizeof(len_buf), J0);  in aes_gcm_prepare_j0()
286 aes_gcm_ghash(const uint8_t *H, const uint8_t *aad, size_t aad_len,  in aes_gcm_ghash()  argument
298 	ghash(H, aad, aad_len, S);  in aes_gcm_ghash()
299 	ghash(H, crypt, crypt_len, S);  in aes_gcm_ghash()
302 	ghash(H, len_buf, sizeof(len_buf), S);  in aes_gcm_ghash()
313 	uint8_t H[AES_BLOCK_LEN];  in ieee80211_crypto_aes_gcm_ae()  local
317 	aes_gcm_init_hash_subkey(aes, H);  in ieee80211_crypto_aes_gcm_ae()
319 	aes_gcm_prepare_j0(iv, iv_len, H, J0);  in ieee80211_crypto_aes_gcm_ae()
324 	aes_gcm_ghash(H, aad, aad_len, crypt, plain_len, S);  in ieee80211_crypto_aes_gcm_ae()
342 	uint8_t H[AES_BLOCK_LEN];  in ieee80211_crypto_aes_gcm_ad()  local
346 	aes_gcm_init_hash_subkey(aes, H);  in ieee80211_crypto_aes_gcm_ad()
348 	aes_gcm_prepare_j0(iv, iv_len, H, J0);  in ieee80211_crypto_aes_gcm_ad()
353 	aes_gcm_ghash(H, aad, aad_len, crypt, crypt_len, S);  in ieee80211_crypto_aes_gcm_ad()