103     t1 = wv[h] + SHA256_F2(wv[e]) + CH(wv[e], wv[f], wv[g]) + sha256_k[j] + \
105     t2 = SHA256_F1(wv[a]) + MAJ(wv[a], wv[b], wv[c]);                       \
106     wv[d] += t1;                                                            \
107     wv[h] = t1 + t2;                                                        \
158   uint32_t wv[8];  in SHA256_transform()  local
180       wv[j] = ctx->h[j];  in SHA256_transform()
184       t1 = wv[7] + SHA256_F2(wv[4]) + CH(wv[4], wv[5], wv[6]) + sha256_k[j] +  in SHA256_transform()
186       t2 = SHA256_F1(wv[0]) + MAJ(wv[0], wv[1], wv[2]);  in SHA256_transform()
187       wv[7] = wv[6];  in SHA256_transform()
188       wv[6] = wv[5];  in SHA256_transform()
189       wv[5] = wv[4];  in SHA256_transform()
190       wv[4] = wv[3] + t1;  in SHA256_transform()
191       wv[3] = wv[2];  in SHA256_transform()
192       wv[2] = wv[1];  in SHA256_transform()
193       wv[1] = wv[0];  in SHA256_transform()
194       wv[0] = t1 + t2;  in SHA256_transform()
198       ctx->h[j] += wv[j];  in SHA256_transform()
267     wv[0] = ctx->h[0];  in SHA256_transform()
268     wv[1] = ctx->h[1];  in SHA256_transform()
269     wv[2] = ctx->h[2];  in SHA256_transform()
270     wv[3] = ctx->h[3];  in SHA256_transform()
271     wv[4] = ctx->h[4];  in SHA256_transform()
272     wv[5] = ctx->h[5];  in SHA256_transform()
273     wv[6] = ctx->h[6];  in SHA256_transform()
274     wv[7] = ctx->h[7];  in SHA256_transform()
341     ctx->h[0] += wv[0];  in SHA256_transform()
342     ctx->h[1] += wv[1];  in SHA256_transform()
343     ctx->h[2] += wv[2];  in SHA256_transform()
344     ctx->h[3] += wv[3];  in SHA256_transform()
345     ctx->h[4] += wv[4];  in SHA256_transform()
346     ctx->h[5] += wv[5];  in SHA256_transform()
347     ctx->h[6] += wv[6];  in SHA256_transform()
348     ctx->h[7] += wv[7];  in SHA256_transform()