365 static void camellia_setup_tail(u32 *subkey, u32 *subL, u32 *subR, int max)  in camellia_setup_tail()  argument
372 	subL[3] ^= subL[1]; subR[3] ^= subR[1];  in camellia_setup_tail()
374 	subL[5] ^= subL[1]; subR[5] ^= subR[1];  in camellia_setup_tail()
376 	subL[7] ^= subL[1]; subR[7] ^= subR[1];  in camellia_setup_tail()
377 	subL[1] ^= subR[1] & ~subR[9];  in camellia_setup_tail()
378 	dw = subL[1] & subL[9];  in camellia_setup_tail()
381 	subL[11] ^= subL[1]; subR[11] ^= subR[1];  in camellia_setup_tail()
383 	subL[13] ^= subL[1]; subR[13] ^= subR[1];  in camellia_setup_tail()
385 	subL[15] ^= subL[1]; subR[15] ^= subR[1];  in camellia_setup_tail()
386 	subL[1] ^= subR[1] & ~subR[17];  in camellia_setup_tail()
387 	dw = subL[1] & subL[17];  in camellia_setup_tail()
390 	subL[19] ^= subL[1]; subR[19] ^= subR[1];  in camellia_setup_tail()
392 	subL[21] ^= subL[1]; subR[21] ^= subR[1];  in camellia_setup_tail()
394 	subL[23] ^= subL[1]; subR[23] ^= subR[1];  in camellia_setup_tail()
397 		subL[24] ^= subL[1]; subR[24] ^= subR[1];  in camellia_setup_tail()
400 		kw4l = subL[25]; kw4r = subR[25];  in camellia_setup_tail()
402 		subL[1] ^= subR[1] & ~subR[25];  in camellia_setup_tail()
403 		dw = subL[1] & subL[25];  in camellia_setup_tail()
406 		subL[27] ^= subL[1]; subR[27] ^= subR[1];  in camellia_setup_tail()
408 		subL[29] ^= subL[1]; subR[29] ^= subR[1];  in camellia_setup_tail()
410 		subL[31] ^= subL[1]; subR[31] ^= subR[1];  in camellia_setup_tail()
412 		subL[32] ^= subL[1]; subR[32] ^= subR[1];  in camellia_setup_tail()
415 		kw4l = subL[33]; kw4r = subR[33];  in camellia_setup_tail()
417 		subL[30] ^= kw4l; subR[30] ^= kw4r;  in camellia_setup_tail()
419 		subL[28] ^= kw4l; subR[28] ^= kw4r;  in camellia_setup_tail()
421 		subL[26] ^= kw4l; subR[26] ^= kw4r;  in camellia_setup_tail()
423 		dw = kw4l & subL[24];  in camellia_setup_tail()
427 	subL[22] ^= kw4l; subR[22] ^= kw4r;  in camellia_setup_tail()
429 	subL[20] ^= kw4l; subR[20] ^= kw4r;  in camellia_setup_tail()
431 	subL[18] ^= kw4l; subR[18] ^= kw4r;  in camellia_setup_tail()
433 	dw = kw4l & subL[16];  in camellia_setup_tail()
436 	subL[14] ^= kw4l; subR[14] ^= kw4r;  in camellia_setup_tail()
438 	subL[12] ^= kw4l; subR[12] ^= kw4r;  in camellia_setup_tail()
440 	subL[10] ^= kw4l; subR[10] ^= kw4r;  in camellia_setup_tail()
442 	dw = kw4l & subL[8];  in camellia_setup_tail()
445 	subL[6] ^= kw4l; subR[6] ^= kw4r;  in camellia_setup_tail()
447 	subL[4] ^= kw4l; subR[4] ^= kw4r;  in camellia_setup_tail()
449 	subL[2] ^= kw4l; subR[2] ^= kw4r;  in camellia_setup_tail()
451 	subL[0] ^= kw4l; subR[0] ^= kw4r;  in camellia_setup_tail()
454 	SUBKEY_L(0) = subL[0] ^ subL[2];/* kw1 */  in camellia_setup_tail()
456 	SUBKEY_L(2) = subL[3];       /* round 1 */  in camellia_setup_tail()
458 	SUBKEY_L(3) = subL[2] ^ subL[4]; /* round 2 */  in camellia_setup_tail()
460 	SUBKEY_L(4) = subL[3] ^ subL[5]; /* round 3 */  in camellia_setup_tail()
462 	SUBKEY_L(5) = subL[4] ^ subL[6]; /* round 4 */  in camellia_setup_tail()
464 	SUBKEY_L(6) = subL[5] ^ subL[7]; /* round 5 */  in camellia_setup_tail()
466 	tl = subL[10] ^ (subR[10] & ~subR[8]);  in camellia_setup_tail()
467 	dw = tl & subL[8];  /* FL(kl1) */  in camellia_setup_tail()
469 	SUBKEY_L(7) = subL[6] ^ tl; /* round 6 */  in camellia_setup_tail()
471 	SUBKEY_L(8) = subL[8];       /* FL(kl1) */  in camellia_setup_tail()
473 	SUBKEY_L(9) = subL[9];       /* FLinv(kl2) */  in camellia_setup_tail()
475 	tl = subL[7] ^ (subR[7] & ~subR[9]);  in camellia_setup_tail()
476 	dw = tl & subL[9];  /* FLinv(kl2) */  in camellia_setup_tail()
478 	SUBKEY_L(10) = tl ^ subL[11]; /* round 7 */  in camellia_setup_tail()
480 	SUBKEY_L(11) = subL[10] ^ subL[12]; /* round 8 */  in camellia_setup_tail()
482 	SUBKEY_L(12) = subL[11] ^ subL[13]; /* round 9 */  in camellia_setup_tail()
484 	SUBKEY_L(13) = subL[12] ^ subL[14]; /* round 10 */  in camellia_setup_tail()
486 	SUBKEY_L(14) = subL[13] ^ subL[15]; /* round 11 */  in camellia_setup_tail()
488 	tl = subL[18] ^ (subR[18] & ~subR[16]);  in camellia_setup_tail()
489 	dw = tl & subL[16]; /* FL(kl3) */  in camellia_setup_tail()
491 	SUBKEY_L(15) = subL[14] ^ tl; /* round 12 */  in camellia_setup_tail()
493 	SUBKEY_L(16) = subL[16];     /* FL(kl3) */  in camellia_setup_tail()
495 	SUBKEY_L(17) = subL[17];     /* FLinv(kl4) */  in camellia_setup_tail()
497 	tl = subL[15] ^ (subR[15] & ~subR[17]);  in camellia_setup_tail()
498 	dw = tl & subL[17]; /* FLinv(kl4) */  in camellia_setup_tail()
500 	SUBKEY_L(18) = tl ^ subL[19]; /* round 13 */  in camellia_setup_tail()
502 	SUBKEY_L(19) = subL[18] ^ subL[20]; /* round 14 */  in camellia_setup_tail()
504 	SUBKEY_L(20) = subL[19] ^ subL[21]; /* round 15 */  in camellia_setup_tail()
506 	SUBKEY_L(21) = subL[20] ^ subL[22]; /* round 16 */  in camellia_setup_tail()
508 	SUBKEY_L(22) = subL[21] ^ subL[23]; /* round 17 */  in camellia_setup_tail()
511 		SUBKEY_L(23) = subL[22];     /* round 18 */  in camellia_setup_tail()
513 		SUBKEY_L(24) = subL[24] ^ subL[23]; /* kw3 */  in camellia_setup_tail()
516 		tl = subL[26] ^ (subR[26] & ~subR[24]);  in camellia_setup_tail()
517 		dw = tl & subL[24]; /* FL(kl5) */  in camellia_setup_tail()
519 		SUBKEY_L(23) = subL[22] ^ tl; /* round 18 */  in camellia_setup_tail()
521 		SUBKEY_L(24) = subL[24];     /* FL(kl5) */  in camellia_setup_tail()
523 		SUBKEY_L(25) = subL[25];     /* FLinv(kl6) */  in camellia_setup_tail()
525 		tl = subL[23] ^ (subR[23] & ~subR[25]);  in camellia_setup_tail()
526 		dw = tl & subL[25]; /* FLinv(kl6) */  in camellia_setup_tail()
528 		SUBKEY_L(26) = tl ^ subL[27]; /* round 19 */  in camellia_setup_tail()
530 		SUBKEY_L(27) = subL[26] ^ subL[28]; /* round 20 */  in camellia_setup_tail()
532 		SUBKEY_L(28) = subL[27] ^ subL[29]; /* round 21 */  in camellia_setup_tail()
534 		SUBKEY_L(29) = subL[28] ^ subL[30]; /* round 22 */  in camellia_setup_tail()
536 		SUBKEY_L(30) = subL[29] ^ subL[31]; /* round 23 */  in camellia_setup_tail()
538 		SUBKEY_L(31) = subL[30];     /* round 24 */  in camellia_setup_tail()
540 		SUBKEY_L(32) = subL[32] ^ subL[31]; /* kw3 */  in camellia_setup_tail()
549 	u32 subL[26];  in camellia_setup128()  local
562 	subL[0] = kll; subR[0] = klr;  in camellia_setup128()
564 	subL[1] = krl; subR[1] = krr;  in camellia_setup128()
568 	subL[4] = kll; subR[4] = klr;  in camellia_setup128()
570 	subL[5] = krl; subR[5] = krr;  in camellia_setup128()
574 	subL[10] = kll; subR[10] = klr;  in camellia_setup128()
576 	subL[11] = krl; subR[11] = krr;  in camellia_setup128()
580 	subL[13] = krl; subR[13] = krr;  in camellia_setup128()
584 	subL[16] = kll; subR[16] = klr;  in camellia_setup128()
586 	subL[17] = krl; subR[17] = krr;  in camellia_setup128()
590 	subL[18] = kll; subR[18] = klr;  in camellia_setup128()
592 	subL[19] = krl; subR[19] = krr;  in camellia_setup128()
596 	subL[22] = kll; subR[22] = klr;  in camellia_setup128()
598 	subL[23] = krl; subR[23] = krr;  in camellia_setup128()
601 	kll = subL[0]; klr = subR[0];  in camellia_setup128()
602 	krl = subL[1]; krr = subR[1];  in camellia_setup128()
622 	subL[2] = kll; subR[2] = klr;  in camellia_setup128()
623 	subL[3] = krl; subR[3] = krr;  in camellia_setup128()
626 	subL[6] = kll; subR[6] = klr;  in camellia_setup128()
627 	subL[7] = krl; subR[7] = krr;  in camellia_setup128()
630 	subL[8] = kll; subR[8] = klr;  in camellia_setup128()
631 	subL[9] = krl; subR[9] = krr;  in camellia_setup128()
634 	subL[12] = kll; subR[12] = klr;  in camellia_setup128()
637 	subL[14] = kll; subR[14] = klr;  in camellia_setup128()
638 	subL[15] = krl; subR[15] = krr;  in camellia_setup128()
641 	subL[20] = kll; subR[20] = klr;  in camellia_setup128()
642 	subL[21] = krl; subR[21] = krr;  in camellia_setup128()
645 	subL[24] = kll; subR[24] = klr;  in camellia_setup128()
646 	subL[25] = krl; subR[25] = krr;  in camellia_setup128()
648 	camellia_setup_tail(subkey, subL, subR, 24);  in camellia_setup128()
656 	u32 subL[34];  in camellia_setup256()  local
674 	subL[0] = kll; subR[0] = klr;  in camellia_setup256()
676 	subL[1] = krl; subR[1] = krr;  in camellia_setup256()
679 	subL[12] = kll; subR[12] = klr;  in camellia_setup256()
681 	subL[13] = krl; subR[13] = krr;  in camellia_setup256()
684 	subL[16] = kll; subR[16] = klr;  in camellia_setup256()
686 	subL[17] = krl; subR[17] = krr;  in camellia_setup256()
689 	subL[22] = kll; subR[22] = klr;  in camellia_setup256()
691 	subL[23] = krl; subR[23] = krr;  in camellia_setup256()
694 	subL[30] = kll; subR[30] = klr;  in camellia_setup256()
696 	subL[31] = krl; subR[31] = krr;  in camellia_setup256()
701 	subL[4] = krll; subR[4] = krlr;  in camellia_setup256()
703 	subL[5] = krrl; subR[5] = krrr;  in camellia_setup256()
706 	subL[8] = krll; subR[8] = krlr;  in camellia_setup256()
708 	subL[9] = krrl; subR[9] = krrr;  in camellia_setup256()
711 	subL[18] = krll; subR[18] = krlr;  in camellia_setup256()
713 	subL[19] = krrl; subR[19] = krrr;  in camellia_setup256()
716 	subL[26] = krll; subR[26] = krlr;  in camellia_setup256()
718 	subL[27] = krrl; subR[27] = krrr;  in camellia_setup256()
722 	kll = subL[0] ^ krll; klr = subR[0] ^ krlr;  in camellia_setup256()
723 	krl = subL[1] ^ krrl; krr = subR[1] ^ krrr;  in camellia_setup256()
756 	subL[6] = kll; subR[6] = klr;  in camellia_setup256()
758 	subL[7] = krl; subR[7] = krr;  in camellia_setup256()
761 	subL[14] = kll; subR[14] = klr;  in camellia_setup256()
763 	subL[15] = krl; subR[15] = krr;  in camellia_setup256()
766 	subL[24] = klr; subR[24] = krl;  in camellia_setup256()
768 	subL[25] = krr; subR[25] = kll;  in camellia_setup256()
772 	subL[28] = kll; subR[28] = klr;  in camellia_setup256()
774 	subL[29] = krl; subR[29] = krr;  in camellia_setup256()
778 	subL[2] = krll; subR[2] = krlr;  in camellia_setup256()
780 	subL[3] = krrl; subR[3] = krrr;  in camellia_setup256()
783 	subL[10] = krll; subR[10] = krlr;  in camellia_setup256()
785 	subL[11] = krrl; subR[11] = krrr;  in camellia_setup256()
788 	subL[20] = krll; subR[20] = krlr;  in camellia_setup256()
790 	subL[21] = krrl; subR[21] = krrr;  in camellia_setup256()
793 	subL[32] = krll; subR[32] = krlr;  in camellia_setup256()
795 	subL[33] = krrl; subR[33] = krrr;  in camellia_setup256()
797 	camellia_setup_tail(subkey, subL, subR, 32);  in camellia_setup256()