Lines Matching refs:b
64 } b; in __chacha20poly1305_encrypt() local
66 chacha20_crypt(chacha_state, b.block0, pad0, sizeof(b.block0)); in __chacha20poly1305_encrypt()
67 poly1305_init(&poly1305_state, b.block0); in __chacha20poly1305_encrypt()
79 b.lens[0] = cpu_to_le64(ad_len); in __chacha20poly1305_encrypt()
80 b.lens[1] = cpu_to_le64(src_len); in __chacha20poly1305_encrypt()
81 poly1305_update(&poly1305_state, (u8 *)b.lens, sizeof(b.lens)); in __chacha20poly1305_encrypt()
86 memzero_explicit(&b, sizeof(b)); in __chacha20poly1305_encrypt()
138 } b; in __chacha20poly1305_decrypt() local
143 chacha20_crypt(chacha_state, b.block0, pad0, sizeof(b.block0)); in __chacha20poly1305_decrypt()
144 poly1305_init(&poly1305_state, b.block0); in __chacha20poly1305_decrypt()
155 b.lens[0] = cpu_to_le64(ad_len); in __chacha20poly1305_decrypt()
156 b.lens[1] = cpu_to_le64(dst_len); in __chacha20poly1305_decrypt()
157 poly1305_update(&poly1305_state, (u8 *)b.lens, sizeof(b.lens)); in __chacha20poly1305_decrypt()
159 poly1305_final(&poly1305_state, b.mac); in __chacha20poly1305_decrypt()
161 ret = crypto_memneq(b.mac, src + dst_len, POLY1305_DIGEST_SIZE); in __chacha20poly1305_decrypt()
165 memzero_explicit(&b, sizeof(b)); in __chacha20poly1305_decrypt()
236 } b __aligned(16); in chacha20poly1305_crypt_sg_inplace()
241 chacha_load_key(b.k, key); in chacha20poly1305_crypt_sg_inplace()
243 b.iv[0] = 0; in chacha20poly1305_crypt_sg_inplace()
244 b.iv[1] = cpu_to_le64(nonce); in chacha20poly1305_crypt_sg_inplace()
246 chacha_init(&chacha_state, b.k, (u8 *)b.iv); in chacha20poly1305_crypt_sg_inplace()
247 chacha20_crypt(&chacha_state, b.block0, pad0, sizeof(b.block0)); in chacha20poly1305_crypt_sg_inplace()
248 poly1305_init(&poly1305_state, b.block0); in chacha20poly1305_crypt_sg_inplace()
270 crypto_xor(addr, b.chacha_stream + partial, l); in chacha20poly1305_crypt_sg_inplace()
288 chacha20_crypt(&chacha_state, b.chacha_stream, pad0, in chacha20poly1305_crypt_sg_inplace()
290 crypto_xor(addr, b.chacha_stream, length); in chacha20poly1305_crypt_sg_inplace()
302 b.lens[0] = cpu_to_le64(ad_len); in chacha20poly1305_crypt_sg_inplace()
303 b.lens[1] = cpu_to_le64(src_len); in chacha20poly1305_crypt_sg_inplace()
304 poly1305_update(&poly1305_state, (u8 *)b.lens, sizeof(b.lens)); in chacha20poly1305_crypt_sg_inplace()
312 poly1305_final(&poly1305_state, b.mac[0]); in chacha20poly1305_crypt_sg_inplace()
313 ret = !crypto_memneq(b.mac[0], in chacha20poly1305_crypt_sg_inplace()
322 poly1305_final(&poly1305_state, b.mac[1]); in chacha20poly1305_crypt_sg_inplace()
323 sg_copy_buffer(src, sg_nents(src), b.mac[encrypt], in chacha20poly1305_crypt_sg_inplace()
324 sizeof(b.mac[1]), src_len, !encrypt); in chacha20poly1305_crypt_sg_inplace()
326 !crypto_memneq(b.mac[0], b.mac[1], POLY1305_DIGEST_SIZE); in chacha20poly1305_crypt_sg_inplace()
330 memzero_explicit(&b, sizeof(b)); in chacha20poly1305_crypt_sg_inplace()