Lines Matching refs:st
658 uint32_t sa = st[a];
659 uint32_t sb0 = st[b];
678 st[a] = sa + sb0;
679 - uint32_t sd = st[d];
680 - uint32_t sa10 = st[a];
682 + sd = st[d];
683 + sa10 = st[a];
685 st[d] = Hacl_Impl_Chacha20_rotate_left(sda, (uint32_t)16U);
686 - uint32_t sa0 = st[c];
687 - uint32_t sb1 = st[d];
688 + sa0 = st[c];
689 + sb1 = st[d];
690 st[c] = sa0 + sb1;
691 - uint32_t sd0 = st[b];
692 - uint32_t sa11 = st[c];
694 + sd0 = st[b];
695 + sa11 = st[c];
697 st[b] = Hacl_Impl_Chacha20_rotate_left(sda0, (uint32_t)12U);
698 - uint32_t sa2 = st[a];
699 - uint32_t sb2 = st[b];
700 + sa2 = st[a];
701 + sb2 = st[b];
702 st[a] = sa2 + sb2;
703 - uint32_t sd1 = st[d];
704 - uint32_t sa12 = st[a];
706 + sd1 = st[d];
707 + sa12 = st[a];
709 st[d] = Hacl_Impl_Chacha20_rotate_left(sda1, (uint32_t)8U);
710 - uint32_t sa3 = st[c];
711 - uint32_t sb = st[d];
712 + sa3 = st[c];
713 + sb = st[d];
714 st[c] = sa3 + sb;
715 - uint32_t sd2 = st[b];
716 - uint32_t sa1 = st[c];
718 + sd2 = st[b];
719 + sa1 = st[c];
721 st[b] = Hacl_Impl_Chacha20_rotate_left(sda2, (uint32_t)7U);
726 Hacl_Impl_Chacha20_rounds(uint32_t *st)
731 Hacl_Impl_Chacha20_double_round(st);
735 Hacl_Impl_Chacha20_sum_states(uint32_t *st, uint32_t *st_)
740 uint32_t xi = st[i];
742 st[i] = xi + yi;
748 Hacl_Impl_Chacha20_chacha20_core(k, st, ctr);
761 Hacl_Impl_Chacha20_chacha20_block(block, st, ctr);
770 uint32_t *st,
778 Hacl_Impl_Chacha20_update(o, b, st, ctr + i);
818 Hacl_Impl_Chacha20_Vec128_State_state_setup(vec *st, uint8_t *k, uint8_t *n1, uint32_t c)
828 st[0U] =
837 st[1U] = k0;
838 st[2U] = k1;
851 st[3U] = v1;
855 vec sd0 = st[3U];
873 st[0U] = sa10;
874 st[3U] = sd10;
875 - vec sa0 = st[2U];
876 - vec sb1 = st[3U];
877 - vec sd2 = st[1U];
880 + sa0 = st[2U];
881 + sb1 = st[3U];
882 + sd2 = st[1U];
885 st[2U] = sa11;
886 st[1U] = sd11;
887 - vec sa2 = st[0U];
888 - vec sb2 = st[1U];
889 - vec sd3 = st[3U];
892 + sa2 = st[0U];
893 + sb2 = st[1U];
894 + sd3 = st[3U];
897 st[0U] = sa12;
898 st[3U] = sd12;
899 - vec sa3 = st[2U];
900 - vec sb = st[3U];
901 - vec sd = st[1U];
904 + sa3 = st[2U];
905 + sb = st[3U];
906 + sd = st[1U];
909 st[2U] = sa1;
910 st[1U] = sd1;
914 Hacl_Impl_Chacha20_Vec128_double_round(vec *st)
922 Hacl_Impl_Chacha20_Vec128_round(st);
923 - vec r1 = st[1U];
924 - vec r20 = st[2U];
925 - vec r30 = st[3U];
926 + r1 = st[1U];
927 + r20 = st[2U];
928 + r30 = st[3U];
929 st[1U] = vec_shuffle_right(r1, (uint32_t)1U);
930 st[2U] = vec_shuffle_right(r20, (uint32_t)2U);
931 st[3U] = vec_shuffle_right(r30, (uint32_t)3U);
932 Hacl_Impl_Chacha20_Vec128_round(st);
933 - vec r10 = st[1U];
934 - vec r2 = st[2U];
935 - vec r3 = st[3U];
936 + r10 = st[1U];
937 + r2 = st[2U];
938 + r3 = st[3U];
939 st[1U] = vec_shuffle_right(r10, (uint32_t)3U);
940 st[2U] = vec_shuffle_right(r2, (uint32_t)2U);
941 st[3U] = vec_shuffle_right(r3, (uint32_t)1U);
944 Hacl_Impl_Chacha20_Vec128_chacha20_core(vec *k, vec *st)
947 Hacl_Impl_Chacha20_Vec128_copy_state(k, st);
951 Hacl_Impl_Chacha20_Vec128_sum_states(k, st);
955 Hacl_Impl_Chacha20_Vec128_chacha20_core3(vec *k0, vec *k1, vec *k2, vec *st)
958 Hacl_Impl_Chacha20_Vec128_chacha20_incr3(k0, k1, k2, st);
962 Hacl_Impl_Chacha20_Vec128_chacha20_sum3(k0, k1, k2, st);
966 Hacl_Impl_Chacha20_Vec128_chacha20_block(uint8_t *stream_block, vec *st)
975 Hacl_Impl_Chacha20_Vec128_chacha20_core(k, st);
978 Hacl_Impl_Chacha20_Vec128_update_last(uint8_t *output, uint8_t *plain, uint32_t len, vec *st)
983 Hacl_Impl_Chacha20_Vec128_chacha20_block(block, st);
993 Hacl_Impl_Chacha20_Vec128_update(uint8_t *output, uint8_t *plain, vec *st)
1002 Hacl_Impl_Chacha20_Vec128_chacha20_core(k, st);
1006 Hacl_Impl_Chacha20_Vec128_update3(uint8_t *output, uint8_t *plain, vec *st)
1033 Hacl_Impl_Chacha20_Vec128_chacha20_core3(k0, k1, k2, st);
1051 vec *st)
1056 Hacl_Impl_Chacha20_Vec128_update3_(output, plain, len, st, i);
1067 + vec *st;
1071 - vec *st = buf;
1072 + st = buf;
1073 Hacl_Impl_Chacha20_Vec128_init(st, k, n1, ctr);
1074 Hacl_Impl_Chacha20_Vec128_chacha20_counter_mode(output, plain, len, st);
1702 - Hacl_Impl_Poly1305_32_State_poly1305_state scrut0 = st;
1704 - Hacl_Impl_Poly1305_32_State_poly1305_state scrut = st;
1706 + scrut0 = st;
1708 + scrut = st;
1732 Hacl_Impl_Poly1305_32_poly1305_process_last_block_(block, st, m, rem_);
1914 Hacl_Impl_Poly1305_32_poly1305_update(st, block);
1917 Hacl_Standalone_Poly1305_32_poly1305_blocks(st, tail1, len2);
1932 - Hacl_Impl_Poly1305_32_State_poly1305_state scrut0 = st;
1935 + scrut0 = st;
1948 Hacl_Standalone_Poly1305_32_poly1305_partial(st, part_input, len16, kr);
1950 Hacl_Impl_Poly1305_32_poly1305_process_last_block(st, last_block, rem16);
1951 - Hacl_Impl_Poly1305_32_State_poly1305_state scrut = st;
1954 + scrut = st;
1976 Hacl_Impl_Poly1305_32_State_poly1305_state st = Hacl_Impl_Poly1305_32_mk_state(r, h);
1979 Hacl_Standalone_Poly1305_32_poly1305_complete(st, input, len1, k1);
1980 - Hacl_Impl_Poly1305_32_State_poly1305_state scrut = st;
1991 + scrut = st;
2025 - Hacl_Impl_Poly1305_32_State_poly1305_state scrut0 = st;
2028 + scrut0 = st;
2042 Hacl_Impl_Poly1305_32_poly1305_process_last_block(st, m, (uint64_t)len1);
2043 - Hacl_Impl_Poly1305_32_State_poly1305_state scrut = st;
2046 + scrut = st;