258 	uint8_t *ghash, *macp;  in gcm_encrypt_final()  local
266 	ghash = (uint8_t *)ctx->gcm_ghash;  in gcm_encrypt_final()
298 		GHASH(ctx, macp, ghash);  in gcm_encrypt_final()
305 	GHASH(ctx, ctx->gcm_len_a_len_c, ghash);  in gcm_encrypt_final()
308 	xor_block((uint8_t *)ctx->gcm_J0, ghash);  in gcm_encrypt_final()
317 	rv = crypto_put_output_data(ghash, out, ctx->gcm_tag_len);  in gcm_encrypt_final()
415 	uint8_t *ghash;  in gcm_decrypt_final()  local
425 	ghash = (uint8_t *)ctx->gcm_ghash;  in gcm_decrypt_final()
443 		GHASH(ctx, blockp, ghash);  in gcm_decrypt_final()
466 	GHASH(ctx, ctx->gcm_len_a_len_c, ghash);  in gcm_decrypt_final()
469 	xor_block((uint8_t *)ctx->gcm_J0, ghash);  in gcm_decrypt_final()
472 	if (bcmp(&ctx->gcm_pt_buf[pt_len], ghash, ctx->gcm_tag_len)) {  in gcm_decrypt_final()
521 	uint8_t *datap, *ghash;  in gcm_format_initial_blocks()  local
524 	ghash = (uint8_t *)ctx->gcm_ghash;  in gcm_format_initial_blocks()
547 			GHASH(ctx, datap, ghash);  in gcm_format_initial_blocks()
570 	uint8_t *ghash, *datap, *authp;  in gcm_init()  local
582 	ghash = (uint8_t *)ctx->gcm_ghash;  in gcm_init()
584 	bzero(ghash, block_size);  in gcm_init()
605 		GHASH(ctx, datap, ghash);  in gcm_init()