111     t1 = wv[h] + SHA256_F2(wv[e]) + CH(wv[e], wv[f], wv[g]) + sha256_k[j] + \
113     t2 = SHA256_F1(wv[a]) + MAJ(wv[a], wv[b], wv[c]);                       \
114     wv[d] += t1;                                                            \
115     wv[h] = t1 + t2;                                                        \
166   uint32_t wv[8];  in SHA256_transform()  local
188       wv[j] = ctx->h[j];  in SHA256_transform()
192       t1 = wv[7] + SHA256_F2(wv[4]) + CH(wv[4], wv[5], wv[6]) + sha256_k[j] +  in SHA256_transform()
194       t2 = SHA256_F1(wv[0]) + MAJ(wv[0], wv[1], wv[2]);  in SHA256_transform()
195       wv[7] = wv[6];  in SHA256_transform()
196       wv[6] = wv[5];  in SHA256_transform()
197       wv[5] = wv[4];  in SHA256_transform()
198       wv[4] = wv[3] + t1;  in SHA256_transform()
199       wv[3] = wv[2];  in SHA256_transform()
200       wv[2] = wv[1];  in SHA256_transform()
201       wv[1] = wv[0];  in SHA256_transform()
202       wv[0] = t1 + t2;  in SHA256_transform()
206       ctx->h[j] += wv[j];  in SHA256_transform()
275     wv[0] = ctx->h[0];  in SHA256_transform()
276     wv[1] = ctx->h[1];  in SHA256_transform()
277     wv[2] = ctx->h[2];  in SHA256_transform()
278     wv[3] = ctx->h[3];  in SHA256_transform()
279     wv[4] = ctx->h[4];  in SHA256_transform()
280     wv[5] = ctx->h[5];  in SHA256_transform()
281     wv[6] = ctx->h[6];  in SHA256_transform()
282     wv[7] = ctx->h[7];  in SHA256_transform()
349     ctx->h[0] += wv[0];  in SHA256_transform()
350     ctx->h[1] += wv[1];  in SHA256_transform()
351     ctx->h[2] += wv[2];  in SHA256_transform()
352     ctx->h[3] += wv[3];  in SHA256_transform()
353     ctx->h[4] += wv[4];  in SHA256_transform()
354     ctx->h[5] += wv[5];  in SHA256_transform()
355     ctx->h[6] += wv[6];  in SHA256_transform()
356     ctx->h[7] += wv[7];  in SHA256_transform()