226   ctx->wbuf[i & 15] +=                                                         \
227       g256_1(ctx->wbuf[(i + 14) & 15]) + ctx->wbuf[(i + 9) & 15] +             \
228       g256_0(ctx->wbuf[(i + 1) & 15])
232       (j ? h2(i) : ctx->wbuf[i & 15]) + k256[i + j] + s256_1(v[(4 - i) & 7]) + \
274 /* ctx->wbuf[] at this point is in such an order that low   */
328 		memcpy(((unsigned char *)ctx->wbuf) + pos, sp, space);  in sha256_hash()
333 		bsw_32(ctx->wbuf, SHA256_BLOCK_SIZE >> 2);  in sha256_hash()
337 	memcpy(((unsigned char *)ctx->wbuf) + pos, sp, len);  in sha256_hash()
354 	bsw_32(ctx->wbuf, (i + 3) >> 2)  in sha256_end()
361 	ctx->wbuf[i >> 2] = (ctx->wbuf[i >> 2] & m1[i & 3]) | b1[i & 3];  in sha256_end()
368 			ctx->wbuf[15] = 0;  in sha256_end()
375 		ctx->wbuf[i++] = 0;  in sha256_end()
382 	ctx->wbuf[14] = (ctx->count[1] << 3) | (ctx->count[0] >> 29);  in sha256_end()
383 	ctx->wbuf[15] = ctx->count[0] << 3;  in sha256_end()
440   ctx->wbuf[i & 15] +=                                                         \
441       g512_1(ctx->wbuf[(i + 14) & 15]) + ctx->wbuf[(i + 9) & 15] +             \
442       g512_0(ctx->wbuf[(i + 1) & 15])
446       (j ? h5(i) : ctx->wbuf[i & 15]) + k512[i + j] + s512_1(v[(4 - i) & 7]) + \
524 /* ctx->wbuf[] at this point is in such an order that low   */
540 		memcpy(((unsigned char *)ctx->wbuf) + pos, sp, space);  in sha512_hash()
545 		bsw_64(ctx->wbuf, SHA512_BLOCK_SIZE >> 3);  in sha512_hash()
549 	memcpy(((unsigned char *)ctx->wbuf) + pos, sp, len);  in sha512_hash()
571 	bsw_64(ctx->wbuf, (i + 7) >> 3);  in sha_end()
579 	ctx->wbuf[i >> 3] = (ctx->wbuf[i >> 3] & m2[i & 7]) | b2[i & 7];  in sha_end()
586 			ctx->wbuf[15] = 0;  in sha_end()
593 		ctx->wbuf[i++] = 0;  in sha_end()
600 	ctx->wbuf[14] = (ctx->count[1] << 3) | (ctx->count[0] >> 61);  in sha_end()
601 	ctx->wbuf[15] = ctx->count[0] << 3;  in sha_end()