126 	size_t out_len = 0;  in sm2_ltc_pke_decrypt()  local
245 	out_len = MIN(*dst_len, C2_len);  in sm2_ltc_pke_decrypt()
246 	for (i = 0; i < out_len; i++)  in sm2_ltc_pke_decrypt()
248 	*dst_len = out_len;  in sm2_ltc_pke_decrypt()
249 	if (out_len < C2_len) {  in sm2_ltc_pke_decrypt()
250 		eom = calloc(1, C2_len - out_len);  in sm2_ltc_pke_decrypt()
255 		for (i = out_len; i < C2_len; i++)  in sm2_ltc_pke_decrypt()
256 		       eom[i - out_len] = src[C1_len + i] ^ t[i];  in sm2_ltc_pke_decrypt()
270 	res = crypto_hash_update(ctx, dst, out_len);  in sm2_ltc_pke_decrypt()
273 	if (out_len < C2_len) {  in sm2_ltc_pke_decrypt()
274 		res = crypto_hash_update(ctx, eom, C2_len - out_len);  in sm2_ltc_pke_decrypt()