42 static void aegis128_save_state_neon(struct aegis128_state st, void *state)  in aegis128_save_state_neon()  argument
44 	vst1q_u8(state, st.v[0]);  in aegis128_save_state_neon()
45 	vst1q_u8(state + 16, st.v[1]);  in aegis128_save_state_neon()
46 	vst1q_u8(state + 32, st.v[2]);  in aegis128_save_state_neon()
47 	vst1q_u8(state + 48, st.v[3]);  in aegis128_save_state_neon()
48 	vst1q_u8(state + 64, st.v[4]);  in aegis128_save_state_neon()
57 	if (!__builtin_expect(aegis128_have_aes_insn, 1)) {  in aegis_aes_round()
88 		w = (v << 1) ^ (uint8x16_t)(((int8x16_t)v >> 7) & 0x1b);  in aegis_aes_round()
107 struct aegis128_state aegis128_update_neon(struct aegis128_state st,  in aegis128_update_neon()  argument
110 	m       ^= aegis_aes_round(st.v[4]);  in aegis128_update_neon()
111 	st.v[4] ^= aegis_aes_round(st.v[3]);  in aegis128_update_neon()
112 	st.v[3] ^= aegis_aes_round(st.v[2]);  in aegis128_update_neon()
113 	st.v[2] ^= aegis_aes_round(st.v[1]);  in aegis128_update_neon()
114 	st.v[1] ^= aegis_aes_round(st.v[0]);  in aegis128_update_neon()
115 	st.v[0] ^= m;  in aegis128_update_neon()
117 	return st;  in aegis128_update_neon()
125 	    __builtin_expect(aegis128_have_aes_insn, 1))  in preload_sbox()
147 	struct aegis128_state st = {{  in crypto_aegis128_init_neon()  local
159 		st = aegis128_update_neon(st, k);  in crypto_aegis128_init_neon()
160 		st = aegis128_update_neon(st, kiv);  in crypto_aegis128_init_neon()
162 	aegis128_save_state_neon(st, state);  in crypto_aegis128_init_neon()
167 	struct aegis128_state st = aegis128_load_state_neon(state);  in crypto_aegis128_update_neon()  local
171 	st = aegis128_update_neon(st, vld1q_u8(msg));  in crypto_aegis128_update_neon()
173 	aegis128_save_state_neon(st, state);  in crypto_aegis128_update_neon()
217 	-1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
218 	 0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14, 15,
219 	-1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
225 	struct aegis128_state st = aegis128_load_state_neon(state);  in crypto_aegis128_encrypt_chunk_neon()  local
232 		uint8x16_t s = st.v[1] ^ (st.v[2] & st.v[3]) ^ st.v[4];  in crypto_aegis128_encrypt_chunk_neon()
235 		st = aegis128_update_neon(st, msg);  in crypto_aegis128_encrypt_chunk_neon()
245 		uint8x16_t s = st.v[1] ^ (st.v[2] & st.v[3]) ^ st.v[4];  in crypto_aegis128_encrypt_chunk_neon()
257 		st = aegis128_update_neon(st, m);  in crypto_aegis128_encrypt_chunk_neon()
268 	aegis128_save_state_neon(st, state);  in crypto_aegis128_encrypt_chunk_neon()
274 	struct aegis128_state st = aegis128_load_state_neon(state);  in crypto_aegis128_decrypt_chunk_neon()  local
281 		msg = vld1q_u8(src) ^ st.v[1] ^ (st.v[2] & st.v[3]) ^ st.v[4];  in crypto_aegis128_decrypt_chunk_neon()
282 		st = aegis128_update_neon(st, msg);  in crypto_aegis128_decrypt_chunk_neon()
291 		uint8x16_t s = st.v[1] ^ (st.v[2] & st.v[3]) ^ st.v[4];  in crypto_aegis128_decrypt_chunk_neon()
303 		st = aegis128_update_neon(st, m);  in crypto_aegis128_decrypt_chunk_neon()
314 	aegis128_save_state_neon(st, state);  in crypto_aegis128_decrypt_chunk_neon()
322 	struct aegis128_state st = aegis128_load_state_neon(state);  in crypto_aegis128_final_neon()  local
328 	v = st.v[3] ^ (uint8x16_t)vcombine_u64(vmov_n_u64(8ULL * assoclen),  in crypto_aegis128_final_neon()
332 		st = aegis128_update_neon(st, v);  in crypto_aegis128_final_neon()
334 	v = st.v[0] ^ st.v[1] ^ st.v[2] ^ st.v[3] ^ st.v[4];  in crypto_aegis128_final_neon()