Lines Matching full:tweaks

47  * the XTS tweaks.  This avoids a bottleneck.  Currently there don't seem to be
153 	// V6-V9 hold XTS tweaks.  Each 128-bit lane holds one tweak.
269 // If VL > 16, then there are multiple tweaks, and we use vpclmulqdq to compute
270 // all tweaks in the vector in parallel.  If VL=16, we just do the regular
284 // Given the first XTS tweak at (TWEAK), compute the first set of tweaks and
336 // Do one step in computing the next set of tweaks using the method of just
370 // Do one step in computing the next set of tweaks using the VPCLMULQDQ method
404 // _tweak_step does one step of the computation of the next set of tweaks from
408 // This is used to interleave the computation of the next set of tweaks with the
513 // steps of the computation of the next set of tweaks.  May clobber V4.
568 	// decryption uses the last two tweaks in reverse order.  We'll handle
581 	// Compute the first set of tweaks TWEAK[0-3].
614 	// the computation of the next set of tweaks.
632 	// XOR in the tweaks again.
644 	// Finish computing the next set of tweaks.
714 	// because CTS decryption uses the last two tweaks in reverse order.