270 	u32 st0[4], st1[4];  in aes_encrypt()  local
280 	st0[0] = ctx->key_enc[0] ^ get_unaligned_le32(in);  in aes_encrypt()
281 	st0[1] = ctx->key_enc[1] ^ get_unaligned_le32(in + 4);  in aes_encrypt()
282 	st0[2] = ctx->key_enc[2] ^ get_unaligned_le32(in + 8);  in aes_encrypt()
283 	st0[3] = ctx->key_enc[3] ^ get_unaligned_le32(in + 12);  in aes_encrypt()
291 	st0[0] ^= aes_sbox[ 0] ^ aes_sbox[ 64] ^ aes_sbox[134] ^ aes_sbox[195];  in aes_encrypt()
292 	st0[1] ^= aes_sbox[16] ^ aes_sbox[ 82] ^ aes_sbox[158] ^ aes_sbox[221];  in aes_encrypt()
293 	st0[2] ^= aes_sbox[32] ^ aes_sbox[ 96] ^ aes_sbox[160] ^ aes_sbox[234];  in aes_encrypt()
294 	st0[3] ^= aes_sbox[48] ^ aes_sbox[112] ^ aes_sbox[186] ^ aes_sbox[241];  in aes_encrypt()
297 		st1[0] = mix_columns(subshift(st0, 0)) ^ rkp[0];  in aes_encrypt()
298 		st1[1] = mix_columns(subshift(st0, 1)) ^ rkp[1];  in aes_encrypt()
299 		st1[2] = mix_columns(subshift(st0, 2)) ^ rkp[2];  in aes_encrypt()
300 		st1[3] = mix_columns(subshift(st0, 3)) ^ rkp[3];  in aes_encrypt()
305 		st0[0] = mix_columns(subshift(st1, 0)) ^ rkp[4];  in aes_encrypt()
306 		st0[1] = mix_columns(subshift(st1, 1)) ^ rkp[5];  in aes_encrypt()
307 		st0[2] = mix_columns(subshift(st1, 2)) ^ rkp[6];  in aes_encrypt()
308 		st0[3] = mix_columns(subshift(st1, 3)) ^ rkp[7];  in aes_encrypt()
328 	u32 st0[4], st1[4];  in aes_decrypt()  local
338 	st0[0] = ctx->key_dec[0] ^ get_unaligned_le32(in);  in aes_decrypt()
339 	st0[1] = ctx->key_dec[1] ^ get_unaligned_le32(in + 4);  in aes_decrypt()
340 	st0[2] = ctx->key_dec[2] ^ get_unaligned_le32(in + 8);  in aes_decrypt()
341 	st0[3] = ctx->key_dec[3] ^ get_unaligned_le32(in + 12);  in aes_decrypt()
349 	st0[0] ^= aes_inv_sbox[ 0] ^ aes_inv_sbox[ 64] ^ aes_inv_sbox[129] ^ aes_inv_sbox[200];  in aes_decrypt()
350 	st0[1] ^= aes_inv_sbox[16] ^ aes_inv_sbox[ 83] ^ aes_inv_sbox[150] ^ aes_inv_sbox[212];  in aes_decrypt()
351 	st0[2] ^= aes_inv_sbox[32] ^ aes_inv_sbox[ 96] ^ aes_inv_sbox[160] ^ aes_inv_sbox[236];  in aes_decrypt()
352 	st0[3] ^= aes_inv_sbox[48] ^ aes_inv_sbox[112] ^ aes_inv_sbox[187] ^ aes_inv_sbox[247];  in aes_decrypt()
355 		st1[0] = inv_mix_columns(inv_subshift(st0, 0)) ^ rkp[0];  in aes_decrypt()
356 		st1[1] = inv_mix_columns(inv_subshift(st0, 1)) ^ rkp[1];  in aes_decrypt()
357 		st1[2] = inv_mix_columns(inv_subshift(st0, 2)) ^ rkp[2];  in aes_decrypt()
358 		st1[3] = inv_mix_columns(inv_subshift(st0, 3)) ^ rkp[3];  in aes_decrypt()
363 		st0[0] = inv_mix_columns(inv_subshift(st1, 0)) ^ rkp[4];  in aes_decrypt()
364 		st0[1] = inv_mix_columns(inv_subshift(st1, 1)) ^ rkp[5];  in aes_decrypt()
365 		st0[2] = inv_mix_columns(inv_subshift(st1, 2)) ^ rkp[6];  in aes_decrypt()
366 		st0[3] = inv_mix_columns(inv_subshift(st1, 3)) ^ rkp[7];  in aes_decrypt()