363 #define SUBKEY_R(INDEX) (subkey[(INDEX)*2 + 1])  macro
455 	SUBKEY_R(0) = subR[0] ^ subR[2];  in camellia_setup_tail()
457 	SUBKEY_R(2) = subR[3];  in camellia_setup_tail()
459 	SUBKEY_R(3) = subR[2] ^ subR[4];  in camellia_setup_tail()
461 	SUBKEY_R(4) = subR[3] ^ subR[5];  in camellia_setup_tail()
463 	SUBKEY_R(5) = subR[4] ^ subR[6];  in camellia_setup_tail()
465 	SUBKEY_R(6) = subR[5] ^ subR[7];  in camellia_setup_tail()
470 	SUBKEY_R(7) = subR[6] ^ tr;  in camellia_setup_tail()
472 	SUBKEY_R(8) = subR[8];  in camellia_setup_tail()
474 	SUBKEY_R(9) = subR[9];  in camellia_setup_tail()
479 	SUBKEY_R(10) = tr ^ subR[11];  in camellia_setup_tail()
481 	SUBKEY_R(11) = subR[10] ^ subR[12];  in camellia_setup_tail()
483 	SUBKEY_R(12) = subR[11] ^ subR[13];  in camellia_setup_tail()
485 	SUBKEY_R(13) = subR[12] ^ subR[14];  in camellia_setup_tail()
487 	SUBKEY_R(14) = subR[13] ^ subR[15];  in camellia_setup_tail()
492 	SUBKEY_R(15) = subR[14] ^ tr;  in camellia_setup_tail()
494 	SUBKEY_R(16) = subR[16];  in camellia_setup_tail()
496 	SUBKEY_R(17) = subR[17];  in camellia_setup_tail()
501 	SUBKEY_R(18) = tr ^ subR[19];  in camellia_setup_tail()
503 	SUBKEY_R(19) = subR[18] ^ subR[20];  in camellia_setup_tail()
505 	SUBKEY_R(20) = subR[19] ^ subR[21];  in camellia_setup_tail()
507 	SUBKEY_R(21) = subR[20] ^ subR[22];  in camellia_setup_tail()
509 	SUBKEY_R(22) = subR[21] ^ subR[23];  in camellia_setup_tail()
512 		SUBKEY_R(23) = subR[22];  in camellia_setup_tail()
514 		SUBKEY_R(24) = subR[24] ^ subR[23];  in camellia_setup_tail()
520 		SUBKEY_R(23) = subR[22] ^ tr;  in camellia_setup_tail()
522 		SUBKEY_R(24) = subR[24];  in camellia_setup_tail()
524 		SUBKEY_R(25) = subR[25];  in camellia_setup_tail()
529 		SUBKEY_R(26) = tr ^ subR[27];  in camellia_setup_tail()
531 		SUBKEY_R(27) = subR[26] ^ subR[28];  in camellia_setup_tail()
533 		SUBKEY_R(28) = subR[27] ^ subR[29];  in camellia_setup_tail()
535 		SUBKEY_R(29) = subR[28] ^ subR[30];  in camellia_setup_tail()
537 		SUBKEY_R(30) = subR[29] ^ subR[31];  in camellia_setup_tail()
539 		SUBKEY_R(31) = subR[30];  in camellia_setup_tail()
541 		SUBKEY_R(32) = subR[32] ^ subR[31];  in camellia_setup_tail()
857 	io[1] ^= SUBKEY_R(0);  in camellia_do_encrypt()
862 			 SUBKEY_L(i + 2), SUBKEY_R(i + 2), \  in camellia_do_encrypt()
865 			 SUBKEY_L(i + 3), SUBKEY_R(i + 3), \  in camellia_do_encrypt()
868 			 SUBKEY_L(i + 4), SUBKEY_R(i + 4), \  in camellia_do_encrypt()
871 			 SUBKEY_L(i + 5), SUBKEY_R(i + 5), \  in camellia_do_encrypt()
874 			 SUBKEY_L(i + 6), SUBKEY_R(i + 6), \  in camellia_do_encrypt()
877 			 SUBKEY_L(i + 7), SUBKEY_R(i + 7), \  in camellia_do_encrypt()
882 		     SUBKEY_L(i + 0), SUBKEY_R(i + 0), \  in camellia_do_encrypt()
883 		     SUBKEY_L(i + 1), SUBKEY_R(i + 1), \  in camellia_do_encrypt()
902 	io[3] ^= SUBKEY_R(max);  in camellia_do_encrypt()
912 	io[1] ^= SUBKEY_R(i);  in camellia_do_decrypt()
917 			 SUBKEY_L(i + 7), SUBKEY_R(i + 7), \  in camellia_do_decrypt()
920 			 SUBKEY_L(i + 6), SUBKEY_R(i + 6), \  in camellia_do_decrypt()
923 			 SUBKEY_L(i + 5), SUBKEY_R(i + 5), \  in camellia_do_decrypt()
926 			 SUBKEY_L(i + 4), SUBKEY_R(i + 4), \  in camellia_do_decrypt()
929 			 SUBKEY_L(i + 3), SUBKEY_R(i + 3), \  in camellia_do_decrypt()
932 			 SUBKEY_L(i + 2), SUBKEY_R(i + 2), \  in camellia_do_decrypt()
937 		     SUBKEY_L(i + 1), SUBKEY_R(i + 1), \  in camellia_do_decrypt()
938 		     SUBKEY_L(i + 0), SUBKEY_R(i + 0), \  in camellia_do_decrypt()
957 	io[3] ^= SUBKEY_R(0);  in camellia_do_decrypt()