86 #define SHA512_EXP(a, b, c, d, e, f, g, h, j)                               \  argument
88     t1 = wv[h] + SHA512_F2(wv[e]) + CH(wv[e], wv[f], wv[g]) + sha512_k[j] + \
89          w[j];                                                              \
176   size_t i, j;  in SHA512_transform()  local
273     j = 0;  in SHA512_transform()
276       SHA512_EXP(0, 1, 2, 3, 4, 5, 6, 7, j);  in SHA512_transform()
277       j++;  in SHA512_transform()
278       SHA512_EXP(7, 0, 1, 2, 3, 4, 5, 6, j);  in SHA512_transform()
279       j++;  in SHA512_transform()
280       SHA512_EXP(6, 7, 0, 1, 2, 3, 4, 5, j);  in SHA512_transform()
281       j++;  in SHA512_transform()
282       SHA512_EXP(5, 6, 7, 0, 1, 2, 3, 4, j);  in SHA512_transform()
283       j++;  in SHA512_transform()
284       SHA512_EXP(4, 5, 6, 7, 0, 1, 2, 3, j);  in SHA512_transform()
285       j++;  in SHA512_transform()
286       SHA512_EXP(3, 4, 5, 6, 7, 0, 1, 2, j);  in SHA512_transform()
287       j++;  in SHA512_transform()
288       SHA512_EXP(2, 3, 4, 5, 6, 7, 0, 1, j);  in SHA512_transform()
289       j++;  in SHA512_transform()
290       SHA512_EXP(1, 2, 3, 4, 5, 6, 7, 0, j);  in SHA512_transform()
291       j++;  in SHA512_transform()
292     } while (j < 80);  in SHA512_transform()
303     for (j = 0; j < 16; j++) {  in SHA512_transform()
304       PACK64(&sub_block[j << 3], &w[j]);  in SHA512_transform()
307     for (j = 16; j < 80; j++) {  in SHA512_transform()
308       SHA512_SCR(j);  in SHA512_transform()
311     for (j = 0; j < 8; j++) {  in SHA512_transform()
312       wv[j] = ctx->h[j];  in SHA512_transform()
315     for (j = 0; j < 80; j++) {  in SHA512_transform()
316       t1 = wv[7] + SHA512_F2(wv[4]) + CH(wv[4], wv[5], wv[6]) + sha512_k[j] +  in SHA512_transform()
317            w[j];  in SHA512_transform()
329     for (j = 0; j < 8; j++)  in SHA512_transform()
330       ctx->h[j] += wv[j];  in SHA512_transform()