268 	const u32 *rkp = ctx->key_enc + 4;  in aes_encrypt()  local
296 	for (round = 0;; round += 2, rkp += 8) {  in aes_encrypt()
297 		st1[0] = mix_columns(subshift(st0, 0)) ^ rkp[0];  in aes_encrypt()
298 		st1[1] = mix_columns(subshift(st0, 1)) ^ rkp[1];  in aes_encrypt()
299 		st1[2] = mix_columns(subshift(st0, 2)) ^ rkp[2];  in aes_encrypt()
300 		st1[3] = mix_columns(subshift(st0, 3)) ^ rkp[3];  in aes_encrypt()
305 		st0[0] = mix_columns(subshift(st1, 0)) ^ rkp[4];  in aes_encrypt()
306 		st0[1] = mix_columns(subshift(st1, 1)) ^ rkp[5];  in aes_encrypt()
307 		st0[2] = mix_columns(subshift(st1, 2)) ^ rkp[6];  in aes_encrypt()
308 		st0[3] = mix_columns(subshift(st1, 3)) ^ rkp[7];  in aes_encrypt()
311 	put_unaligned_le32(subshift(st1, 0) ^ rkp[4], out);  in aes_encrypt()
312 	put_unaligned_le32(subshift(st1, 1) ^ rkp[5], out + 4);  in aes_encrypt()
313 	put_unaligned_le32(subshift(st1, 2) ^ rkp[6], out + 8);  in aes_encrypt()
314 	put_unaligned_le32(subshift(st1, 3) ^ rkp[7], out + 12);  in aes_encrypt()
326 	const u32 *rkp = ctx->key_dec + 4;  in aes_decrypt()  local
354 	for (round = 0;; round += 2, rkp += 8) {  in aes_decrypt()
355 		st1[0] = inv_mix_columns(inv_subshift(st0, 0)) ^ rkp[0];  in aes_decrypt()
356 		st1[1] = inv_mix_columns(inv_subshift(st0, 1)) ^ rkp[1];  in aes_decrypt()
357 		st1[2] = inv_mix_columns(inv_subshift(st0, 2)) ^ rkp[2];  in aes_decrypt()
358 		st1[3] = inv_mix_columns(inv_subshift(st0, 3)) ^ rkp[3];  in aes_decrypt()
363 		st0[0] = inv_mix_columns(inv_subshift(st1, 0)) ^ rkp[4];  in aes_decrypt()
364 		st0[1] = inv_mix_columns(inv_subshift(st1, 1)) ^ rkp[5];  in aes_decrypt()
365 		st0[2] = inv_mix_columns(inv_subshift(st1, 2)) ^ rkp[6];  in aes_decrypt()
366 		st0[3] = inv_mix_columns(inv_subshift(st1, 3)) ^ rkp[7];  in aes_decrypt()
369 	put_unaligned_le32(inv_subshift(st1, 0) ^ rkp[4], out);  in aes_decrypt()
370 	put_unaligned_le32(inv_subshift(st1, 1) ^ rkp[5], out + 4);  in aes_decrypt()
371 	put_unaligned_le32(inv_subshift(st1, 2) ^ rkp[6], out + 8);  in aes_decrypt()
372 	put_unaligned_le32(inv_subshift(st1, 3) ^ rkp[7], out + 12);  in aes_decrypt()