34 			 const u8 *key, const u8 *nonce)  in xchacha_init()  argument
40 	memcpy(iv + 8, nonce + 16, 8);  in xchacha_init()
44 	/* Compute the subkey given the original key and first 128 nonce bits */  in xchacha_init()
45 	chacha_init(chacha_state, k, nonce);  in xchacha_init()
91 			      const u64 nonce,  in chacha20poly1305_encrypt()  argument
101 	iv[1] = cpu_to_le64(nonce);  in chacha20poly1305_encrypt()
114 			       const u8 nonce[XCHACHA20POLY1305_NONCE_SIZE],  in xchacha20poly1305_encrypt()
119 	xchacha_init(&chacha_state, key, nonce);  in xchacha20poly1305_encrypt()
172 			      const u64 nonce,  in chacha20poly1305_decrypt()  argument
183 	iv[1] = cpu_to_le64(nonce);  in chacha20poly1305_decrypt()
198 			       const u8 nonce[XCHACHA20POLY1305_NONCE_SIZE],  in xchacha20poly1305_decrypt()
203 	xchacha_init(&chacha_state, key, nonce);  in xchacha20poly1305_decrypt()
213 				       const u64 nonce,  in chacha20poly1305_crypt_sg_inplace()  argument
244 	b.iv[1] = cpu_to_le64(nonce);  in chacha20poly1305_crypt_sg_inplace()
337 					 const u64 nonce,  in chacha20poly1305_encrypt_sg_inplace()  argument
341 						 nonce, key, 1);  in chacha20poly1305_encrypt_sg_inplace()
347 					 const u64 nonce,  in chacha20poly1305_decrypt_sg_inplace()  argument
355 						 ad, ad_len, nonce, key, 0);  in chacha20poly1305_decrypt_sg_inplace()