Lines Matching +full:1 +full:st
23 * On some 32-bit architectures, such as h8300, GCC ends up using over 1 KB of
52 static SHA3_INLINE void sha3_keccakf_one_round_generic(u64 st[25], int round) in sha3_keccakf_one_round_generic()
57 bc[0] = st[0] ^ st[5] ^ st[10] ^ st[15] ^ st[20]; in sha3_keccakf_one_round_generic()
58 bc[1] = st[1] ^ st[6] ^ st[11] ^ st[16] ^ st[21]; in sha3_keccakf_one_round_generic()
59 bc[2] = st[2] ^ st[7] ^ st[12] ^ st[17] ^ st[22]; in sha3_keccakf_one_round_generic()
60 bc[3] = st[3] ^ st[8] ^ st[13] ^ st[18] ^ st[23]; in sha3_keccakf_one_round_generic()
61 bc[4] = st[4] ^ st[9] ^ st[14] ^ st[19] ^ st[24]; in sha3_keccakf_one_round_generic()
63 t[0] = bc[4] ^ rol64(bc[1], 1); in sha3_keccakf_one_round_generic()
64 t[1] = bc[0] ^ rol64(bc[2], 1); in sha3_keccakf_one_round_generic()
65 t[2] = bc[1] ^ rol64(bc[3], 1); in sha3_keccakf_one_round_generic()
66 t[3] = bc[2] ^ rol64(bc[4], 1); in sha3_keccakf_one_round_generic()
67 t[4] = bc[3] ^ rol64(bc[0], 1); in sha3_keccakf_one_round_generic()
69 st[0] ^= t[0]; in sha3_keccakf_one_round_generic()
72 tt = st[1]; in sha3_keccakf_one_round_generic()
73 st[ 1] = rol64(st[ 6] ^ t[1], 44); in sha3_keccakf_one_round_generic()
74 st[ 6] = rol64(st[ 9] ^ t[4], 20); in sha3_keccakf_one_round_generic()
75 st[ 9] = rol64(st[22] ^ t[2], 61); in sha3_keccakf_one_round_generic()
76 st[22] = rol64(st[14] ^ t[4], 39); in sha3_keccakf_one_round_generic()
77 st[14] = rol64(st[20] ^ t[0], 18); in sha3_keccakf_one_round_generic()
78 st[20] = rol64(st[ 2] ^ t[2], 62); in sha3_keccakf_one_round_generic()
79 st[ 2] = rol64(st[12] ^ t[2], 43); in sha3_keccakf_one_round_generic()
80 st[12] = rol64(st[13] ^ t[3], 25); in sha3_keccakf_one_round_generic()
81 st[13] = rol64(st[19] ^ t[4], 8); in sha3_keccakf_one_round_generic()
82 st[19] = rol64(st[23] ^ t[3], 56); in sha3_keccakf_one_round_generic()
83 st[23] = rol64(st[15] ^ t[0], 41); in sha3_keccakf_one_round_generic()
84 st[15] = rol64(st[ 4] ^ t[4], 27); in sha3_keccakf_one_round_generic()
85 st[ 4] = rol64(st[24] ^ t[4], 14); in sha3_keccakf_one_round_generic()
86 st[24] = rol64(st[21] ^ t[1], 2); in sha3_keccakf_one_round_generic()
87 st[21] = rol64(st[ 8] ^ t[3], 55); in sha3_keccakf_one_round_generic()
88 st[ 8] = rol64(st[16] ^ t[1], 45); in sha3_keccakf_one_round_generic()
89 st[16] = rol64(st[ 5] ^ t[0], 36); in sha3_keccakf_one_round_generic()
90 st[ 5] = rol64(st[ 3] ^ t[3], 28); in sha3_keccakf_one_round_generic()
91 st[ 3] = rol64(st[18] ^ t[3], 21); in sha3_keccakf_one_round_generic()
92 st[18] = rol64(st[17] ^ t[2], 15); in sha3_keccakf_one_round_generic()
93 st[17] = rol64(st[11] ^ t[1], 10); in sha3_keccakf_one_round_generic()
94 st[11] = rol64(st[ 7] ^ t[2], 6); in sha3_keccakf_one_round_generic()
95 st[ 7] = rol64(st[10] ^ t[0], 3); in sha3_keccakf_one_round_generic()
96 st[10] = rol64( tt ^ t[1], 1); in sha3_keccakf_one_round_generic()
99 bc[ 0] = ~st[ 1] & st[ 2]; in sha3_keccakf_one_round_generic()
100 bc[ 1] = ~st[ 2] & st[ 3]; in sha3_keccakf_one_round_generic()
101 bc[ 2] = ~st[ 3] & st[ 4]; in sha3_keccakf_one_round_generic()
102 bc[ 3] = ~st[ 4] & st[ 0]; in sha3_keccakf_one_round_generic()
103 bc[ 4] = ~st[ 0] & st[ 1]; in sha3_keccakf_one_round_generic()
104 st[ 0] ^= bc[ 0]; in sha3_keccakf_one_round_generic()
105 st[ 1] ^= bc[ 1]; in sha3_keccakf_one_round_generic()
106 st[ 2] ^= bc[ 2]; in sha3_keccakf_one_round_generic()
107 st[ 3] ^= bc[ 3]; in sha3_keccakf_one_round_generic()
108 st[ 4] ^= bc[ 4]; in sha3_keccakf_one_round_generic()
110 bc[ 0] = ~st[ 6] & st[ 7]; in sha3_keccakf_one_round_generic()
111 bc[ 1] = ~st[ 7] & st[ 8]; in sha3_keccakf_one_round_generic()
112 bc[ 2] = ~st[ 8] & st[ 9]; in sha3_keccakf_one_round_generic()
113 bc[ 3] = ~st[ 9] & st[ 5]; in sha3_keccakf_one_round_generic()
114 bc[ 4] = ~st[ 5] & st[ 6]; in sha3_keccakf_one_round_generic()
115 st[ 5] ^= bc[ 0]; in sha3_keccakf_one_round_generic()
116 st[ 6] ^= bc[ 1]; in sha3_keccakf_one_round_generic()
117 st[ 7] ^= bc[ 2]; in sha3_keccakf_one_round_generic()
118 st[ 8] ^= bc[ 3]; in sha3_keccakf_one_round_generic()
119 st[ 9] ^= bc[ 4]; in sha3_keccakf_one_round_generic()
121 bc[ 0] = ~st[11] & st[12]; in sha3_keccakf_one_round_generic()
122 bc[ 1] = ~st[12] & st[13]; in sha3_keccakf_one_round_generic()
123 bc[ 2] = ~st[13] & st[14]; in sha3_keccakf_one_round_generic()
124 bc[ 3] = ~st[14] & st[10]; in sha3_keccakf_one_round_generic()
125 bc[ 4] = ~st[10] & st[11]; in sha3_keccakf_one_round_generic()
126 st[10] ^= bc[ 0]; in sha3_keccakf_one_round_generic()
127 st[11] ^= bc[ 1]; in sha3_keccakf_one_round_generic()
128 st[12] ^= bc[ 2]; in sha3_keccakf_one_round_generic()
129 st[13] ^= bc[ 3]; in sha3_keccakf_one_round_generic()
130 st[14] ^= bc[ 4]; in sha3_keccakf_one_round_generic()
132 bc[ 0] = ~st[16] & st[17]; in sha3_keccakf_one_round_generic()
133 bc[ 1] = ~st[17] & st[18]; in sha3_keccakf_one_round_generic()
134 bc[ 2] = ~st[18] & st[19]; in sha3_keccakf_one_round_generic()
135 bc[ 3] = ~st[19] & st[15]; in sha3_keccakf_one_round_generic()
136 bc[ 4] = ~st[15] & st[16]; in sha3_keccakf_one_round_generic()
137 st[15] ^= bc[ 0]; in sha3_keccakf_one_round_generic()
138 st[16] ^= bc[ 1]; in sha3_keccakf_one_round_generic()
139 st[17] ^= bc[ 2]; in sha3_keccakf_one_round_generic()
140 st[18] ^= bc[ 3]; in sha3_keccakf_one_round_generic()
141 st[19] ^= bc[ 4]; in sha3_keccakf_one_round_generic()
143 bc[ 0] = ~st[21] & st[22]; in sha3_keccakf_one_round_generic()
144 bc[ 1] = ~st[22] & st[23]; in sha3_keccakf_one_round_generic()
145 bc[ 2] = ~st[23] & st[24]; in sha3_keccakf_one_round_generic()
146 bc[ 3] = ~st[24] & st[20]; in sha3_keccakf_one_round_generic()
147 bc[ 4] = ~st[20] & st[21]; in sha3_keccakf_one_round_generic()
148 st[20] ^= bc[ 0]; in sha3_keccakf_one_round_generic()
149 st[21] ^= bc[ 1]; in sha3_keccakf_one_round_generic()
150 st[22] ^= bc[ 2]; in sha3_keccakf_one_round_generic()
151 st[23] ^= bc[ 3]; in sha3_keccakf_one_round_generic()
152 st[24] ^= bc[ 4]; in sha3_keccakf_one_round_generic()
155 st[0] ^= sha3_keccakf_rndc[round]; in sha3_keccakf_one_round_generic()
238 ctx->state.bytes[ctx->block_size - 1] ^= 0x80; in sha3_final()
256 ctx->state.bytes[block_size - 1] ^= 0x80; in shake_squeeze()