124 	size_t C2_len = 0;  in sm2_ltc_pke_decrypt()  local
226 	C2_len = src_len - C1_len - TEE_SM3_HASH_SIZE;  in sm2_ltc_pke_decrypt()
228 	t = calloc(1, C2_len);  in sm2_ltc_pke_decrypt()
234 	res = sm2_kdf(x2y2, sizeof(x2y2), t, C2_len);  in sm2_ltc_pke_decrypt()
238 	if (is_zero(t, C2_len)) {  in sm2_ltc_pke_decrypt()
245 	out_len = MIN(*dst_len, C2_len);  in sm2_ltc_pke_decrypt()
249 	if (out_len < C2_len) {  in sm2_ltc_pke_decrypt()
250 		eom = calloc(1, C2_len - out_len);  in sm2_ltc_pke_decrypt()
255 		for (i = out_len; i < C2_len; i++)  in sm2_ltc_pke_decrypt()
273 	if (out_len < C2_len) {  in sm2_ltc_pke_decrypt()
274 		res = crypto_hash_update(ctx, eom, C2_len - out_len);  in sm2_ltc_pke_decrypt()
286 	if (consttime_memcmp(u, src + C1_len + C2_len, TEE_SM3_HASH_SIZE)) {  in sm2_ltc_pke_decrypt()