25 	({ b ^= d; b ^= c; b ^= a; b ^= PHI ^ i; b = rol32(b, 11); k[j] = b; })
28 	({ x0 = k[i]; x1 = k[i+1]; x2 = k[i+2]; x3 = k[i+3]; })
31 	({ k[i] = x0; k[i+1] = x1; k[i+2] = x2; k[i+3] = x3; })
36 #define K(x0, x1, x2, x3, i) ({				\  macro
37 	x3 ^= k[4*(i)+3];        x2 ^= k[4*(i)+2];	\
38 	x1 ^= k[4*(i)+1];        x0 ^= k[4*(i)+0];	\
48 	x0 ^= x3;		x2 ^= x4;		x3 ^= k[4*i+3];	   \
49 	x1 ^= k[4*i+1];		x0 = rol32(x0, 5);	x2 = rol32(x2, 22);\
50 	x0 ^= k[4*i+0];		x2 ^= k[4*i+2];				   \
54 	x0 ^= k[4*i+0];		x1 ^= k[4*i+1];		x2 ^= k[4*i+2];	   \
55 	x3 ^= k[4*i+3];		x0 = ror32(x0, 5);	x2 = ror32(x2, 22);\
229 					   u32 r3, u32 r4, u32 *k)  in __serpent_setkey_sbox()  argument
231 	k += 100;  in __serpent_setkey_sbox()
246 	k -= 50;  in __serpent_setkey_sbox()
258 	k -= 50;  in __serpent_setkey_sbox()
272 	u32 *k = ctx->expkey;  in __serpent_setkey()  local
273 	u8  *k8 = (u8 *)k;  in __serpent_setkey()
287 	lk = (__le32 *)k;  in __serpent_setkey()
288 	k[0] = le32_to_cpu(lk[0]);  in __serpent_setkey()
289 	k[1] = le32_to_cpu(lk[1]);  in __serpent_setkey()
290 	k[2] = le32_to_cpu(lk[2]);  in __serpent_setkey()
291 	k[3] = le32_to_cpu(lk[3]);  in __serpent_setkey()
292 	k[4] = le32_to_cpu(lk[4]);  in __serpent_setkey()
293 	k[5] = le32_to_cpu(lk[5]);  in __serpent_setkey()
294 	k[6] = le32_to_cpu(lk[6]);  in __serpent_setkey()
295 	k[7] = le32_to_cpu(lk[7]);  in __serpent_setkey()
299 	r0 = k[3];  in __serpent_setkey()
300 	r1 = k[4];  in __serpent_setkey()
301 	r2 = k[5];  in __serpent_setkey()
302 	r3 = k[6];  in __serpent_setkey()
303 	r4 = k[7];  in __serpent_setkey()
305 	keyiter(k[0], r0, r4, r2, 0, 0);  in __serpent_setkey()
306 	keyiter(k[1], r1, r0, r3, 1, 1);  in __serpent_setkey()
307 	keyiter(k[2], r2, r1, r4, 2, 2);  in __serpent_setkey()
308 	keyiter(k[3], r3, r2, r0, 3, 3);  in __serpent_setkey()
309 	keyiter(k[4], r4, r3, r1, 4, 4);  in __serpent_setkey()
310 	keyiter(k[5], r0, r4, r2, 5, 5);  in __serpent_setkey()
311 	keyiter(k[6], r1, r0, r3, 6, 6);  in __serpent_setkey()
312 	keyiter(k[7], r2, r1, r4, 7, 7);  in __serpent_setkey()
314 	keyiter(k[0], r3, r2, r0, 8, 8);  in __serpent_setkey()
315 	keyiter(k[1], r4, r3, r1, 9, 9);  in __serpent_setkey()
316 	keyiter(k[2], r0, r4, r2, 10, 10);  in __serpent_setkey()
317 	keyiter(k[3], r1, r0, r3, 11, 11);  in __serpent_setkey()
318 	keyiter(k[4], r2, r1, r4, 12, 12);  in __serpent_setkey()
319 	keyiter(k[5], r3, r2, r0, 13, 13);  in __serpent_setkey()
320 	keyiter(k[6], r4, r3, r1, 14, 14);  in __serpent_setkey()
321 	keyiter(k[7], r0, r4, r2, 15, 15);  in __serpent_setkey()
322 	keyiter(k[8], r1, r0, r3, 16, 16);  in __serpent_setkey()
323 	keyiter(k[9], r2, r1, r4, 17, 17);  in __serpent_setkey()
324 	keyiter(k[10], r3, r2, r0, 18, 18);  in __serpent_setkey()
325 	keyiter(k[11], r4, r3, r1, 19, 19);  in __serpent_setkey()
326 	keyiter(k[12], r0, r4, r2, 20, 20);  in __serpent_setkey()
327 	keyiter(k[13], r1, r0, r3, 21, 21);  in __serpent_setkey()
328 	keyiter(k[14], r2, r1, r4, 22, 22);  in __serpent_setkey()
329 	keyiter(k[15], r3, r2, r0, 23, 23);  in __serpent_setkey()
330 	keyiter(k[16], r4, r3, r1, 24, 24);  in __serpent_setkey()
331 	keyiter(k[17], r0, r4, r2, 25, 25);  in __serpent_setkey()
332 	keyiter(k[18], r1, r0, r3, 26, 26);  in __serpent_setkey()
333 	keyiter(k[19], r2, r1, r4, 27, 27);  in __serpent_setkey()
334 	keyiter(k[20], r3, r2, r0, 28, 28);  in __serpent_setkey()
335 	keyiter(k[21], r4, r3, r1, 29, 29);  in __serpent_setkey()
336 	keyiter(k[22], r0, r4, r2, 30, 30);  in __serpent_setkey()
337 	keyiter(k[23], r1, r0, r3, 31, 31);  in __serpent_setkey()
339 	k += 50;  in __serpent_setkey()
341 	keyiter(k[-26], r2, r1, r4, 32, -18);  in __serpent_setkey()
342 	keyiter(k[-25], r3, r2, r0, 33, -17);  in __serpent_setkey()
343 	keyiter(k[-24], r4, r3, r1, 34, -16);  in __serpent_setkey()
344 	keyiter(k[-23], r0, r4, r2, 35, -15);  in __serpent_setkey()
345 	keyiter(k[-22], r1, r0, r3, 36, -14);  in __serpent_setkey()
346 	keyiter(k[-21], r2, r1, r4, 37, -13);  in __serpent_setkey()
347 	keyiter(k[-20], r3, r2, r0, 38, -12);  in __serpent_setkey()
348 	keyiter(k[-19], r4, r3, r1, 39, -11);  in __serpent_setkey()
349 	keyiter(k[-18], r0, r4, r2, 40, -10);  in __serpent_setkey()
350 	keyiter(k[-17], r1, r0, r3, 41, -9);  in __serpent_setkey()
351 	keyiter(k[-16], r2, r1, r4, 42, -8);  in __serpent_setkey()
352 	keyiter(k[-15], r3, r2, r0, 43, -7);  in __serpent_setkey()
353 	keyiter(k[-14], r4, r3, r1, 44, -6);  in __serpent_setkey()
354 	keyiter(k[-13], r0, r4, r2, 45, -5);  in __serpent_setkey()
355 	keyiter(k[-12], r1, r0, r3, 46, -4);  in __serpent_setkey()
356 	keyiter(k[-11], r2, r1, r4, 47, -3);  in __serpent_setkey()
357 	keyiter(k[-10], r3, r2, r0, 48, -2);  in __serpent_setkey()
358 	keyiter(k[-9], r4, r3, r1, 49, -1);  in __serpent_setkey()
359 	keyiter(k[-8], r0, r4, r2, 50, 0);  in __serpent_setkey()
360 	keyiter(k[-7], r1, r0, r3, 51, 1);  in __serpent_setkey()
361 	keyiter(k[-6], r2, r1, r4, 52, 2);  in __serpent_setkey()
362 	keyiter(k[-5], r3, r2, r0, 53, 3);  in __serpent_setkey()
363 	keyiter(k[-4], r4, r3, r1, 54, 4);  in __serpent_setkey()
364 	keyiter(k[-3], r0, r4, r2, 55, 5);  in __serpent_setkey()
365 	keyiter(k[-2], r1, r0, r3, 56, 6);  in __serpent_setkey()
366 	keyiter(k[-1], r2, r1, r4, 57, 7);  in __serpent_setkey()
367 	keyiter(k[0], r3, r2, r0, 58, 8);  in __serpent_setkey()
368 	keyiter(k[1], r4, r3, r1, 59, 9);  in __serpent_setkey()
369 	keyiter(k[2], r0, r4, r2, 60, 10);  in __serpent_setkey()
370 	keyiter(k[3], r1, r0, r3, 61, 11);  in __serpent_setkey()
371 	keyiter(k[4], r2, r1, r4, 62, 12);  in __serpent_setkey()
372 	keyiter(k[5], r3, r2, r0, 63, 13);  in __serpent_setkey()
373 	keyiter(k[6], r4, r3, r1, 64, 14);  in __serpent_setkey()
374 	keyiter(k[7], r0, r4, r2, 65, 15);  in __serpent_setkey()
375 	keyiter(k[8], r1, r0, r3, 66, 16);  in __serpent_setkey()
376 	keyiter(k[9], r2, r1, r4, 67, 17);  in __serpent_setkey()
377 	keyiter(k[10], r3, r2, r0, 68, 18);  in __serpent_setkey()
378 	keyiter(k[11], r4, r3, r1, 69, 19);  in __serpent_setkey()
379 	keyiter(k[12], r0, r4, r2, 70, 20);  in __serpent_setkey()
380 	keyiter(k[13], r1, r0, r3, 71, 21);  in __serpent_setkey()
381 	keyiter(k[14], r2, r1, r4, 72, 22);  in __serpent_setkey()
382 	keyiter(k[15], r3, r2, r0, 73, 23);  in __serpent_setkey()
383 	keyiter(k[16], r4, r3, r1, 74, 24);  in __serpent_setkey()
384 	keyiter(k[17], r0, r4, r2, 75, 25);  in __serpent_setkey()
385 	keyiter(k[18], r1, r0, r3, 76, 26);  in __serpent_setkey()
386 	keyiter(k[19], r2, r1, r4, 77, 27);  in __serpent_setkey()
387 	keyiter(k[20], r3, r2, r0, 78, 28);  in __serpent_setkey()
388 	keyiter(k[21], r4, r3, r1, 79, 29);  in __serpent_setkey()
389 	keyiter(k[22], r0, r4, r2, 80, 30);  in __serpent_setkey()
390 	keyiter(k[23], r1, r0, r3, 81, 31);  in __serpent_setkey()
392 	k += 50;  in __serpent_setkey()
394 	keyiter(k[-26], r2, r1, r4, 82, -18);  in __serpent_setkey()
395 	keyiter(k[-25], r3, r2, r0, 83, -17);  in __serpent_setkey()
396 	keyiter(k[-24], r4, r3, r1, 84, -16);  in __serpent_setkey()
397 	keyiter(k[-23], r0, r4, r2, 85, -15);  in __serpent_setkey()
398 	keyiter(k[-22], r1, r0, r3, 86, -14);  in __serpent_setkey()
399 	keyiter(k[-21], r2, r1, r4, 87, -13);  in __serpent_setkey()
400 	keyiter(k[-20], r3, r2, r0, 88, -12);  in __serpent_setkey()
401 	keyiter(k[-19], r4, r3, r1, 89, -11);  in __serpent_setkey()
402 	keyiter(k[-18], r0, r4, r2, 90, -10);  in __serpent_setkey()
403 	keyiter(k[-17], r1, r0, r3, 91, -9);  in __serpent_setkey()
404 	keyiter(k[-16], r2, r1, r4, 92, -8);  in __serpent_setkey()
405 	keyiter(k[-15], r3, r2, r0, 93, -7);  in __serpent_setkey()
406 	keyiter(k[-14], r4, r3, r1, 94, -6);  in __serpent_setkey()
407 	keyiter(k[-13], r0, r4, r2, 95, -5);  in __serpent_setkey()
408 	keyiter(k[-12], r1, r0, r3, 96, -4);  in __serpent_setkey()
409 	keyiter(k[-11], r2, r1, r4, 97, -3);  in __serpent_setkey()
410 	keyiter(k[-10], r3, r2, r0, 98, -2);  in __serpent_setkey()
411 	keyiter(k[-9], r4, r3, r1, 99, -1);  in __serpent_setkey()
412 	keyiter(k[-8], r0, r4, r2, 100, 0);  in __serpent_setkey()
413 	keyiter(k[-7], r1, r0, r3, 101, 1);  in __serpent_setkey()
414 	keyiter(k[-6], r2, r1, r4, 102, 2);  in __serpent_setkey()
415 	keyiter(k[-5], r3, r2, r0, 103, 3);  in __serpent_setkey()
416 	keyiter(k[-4], r4, r3, r1, 104, 4);  in __serpent_setkey()
417 	keyiter(k[-3], r0, r4, r2, 105, 5);  in __serpent_setkey()
418 	keyiter(k[-2], r1, r0, r3, 106, 6);  in __serpent_setkey()
419 	keyiter(k[-1], r2, r1, r4, 107, 7);  in __serpent_setkey()
420 	keyiter(k[0], r3, r2, r0, 108, 8);  in __serpent_setkey()
421 	keyiter(k[1], r4, r3, r1, 109, 9);  in __serpent_setkey()
422 	keyiter(k[2], r0, r4, r2, 110, 10);  in __serpent_setkey()
423 	keyiter(k[3], r1, r0, r3, 111, 11);  in __serpent_setkey()
424 	keyiter(k[4], r2, r1, r4, 112, 12);  in __serpent_setkey()
425 	keyiter(k[5], r3, r2, r0, 113, 13);  in __serpent_setkey()
426 	keyiter(k[6], r4, r3, r1, 114, 14);  in __serpent_setkey()
427 	keyiter(k[7], r0, r4, r2, 115, 15);  in __serpent_setkey()
428 	keyiter(k[8], r1, r0, r3, 116, 16);  in __serpent_setkey()
429 	keyiter(k[9], r2, r1, r4, 117, 17);  in __serpent_setkey()
430 	keyiter(k[10], r3, r2, r0, 118, 18);  in __serpent_setkey()
431 	keyiter(k[11], r4, r3, r1, 119, 19);  in __serpent_setkey()
432 	keyiter(k[12], r0, r4, r2, 120, 20);  in __serpent_setkey()
433 	keyiter(k[13], r1, r0, r3, 121, 21);  in __serpent_setkey()
434 	keyiter(k[14], r2, r1, r4, 122, 22);  in __serpent_setkey()
435 	keyiter(k[15], r3, r2, r0, 123, 23);  in __serpent_setkey()
436 	keyiter(k[16], r4, r3, r1, 124, 24);  in __serpent_setkey()
437 	keyiter(k[17], r0, r4, r2, 125, 25);  in __serpent_setkey()
438 	keyiter(k[18], r1, r0, r3, 126, 26);  in __serpent_setkey()
439 	keyiter(k[19], r2, r1, r4, 127, 27);  in __serpent_setkey()
440 	keyiter(k[20], r3, r2, r0, 128, 28);  in __serpent_setkey()
441 	keyiter(k[21], r4, r3, r1, 129, 29);  in __serpent_setkey()
442 	keyiter(k[22], r0, r4, r2, 130, 30);  in __serpent_setkey()
443 	keyiter(k[23], r1, r0, r3, 131, 31);  in __serpent_setkey()
461 	const u32 *k = ctx->expkey;  in __serpent_encrypt()  local
469 					K(r0, r1, r2, r3, 0);  in __serpent_encrypt()
501 	S7(r3, r4, r1, r2, r0);		K(r0, r1, r2, r3, 32);  in __serpent_encrypt()
520 	const u32 *k = ctx->expkey;  in __serpent_decrypt()  local
528 					K(r0, r1, r2, r3, 32);  in __serpent_decrypt()
560 	SI0(r4, r1, r2, r0, r3);	K(r2, r3, r1, r4, 0);  in __serpent_decrypt()