82 		ctx->state[0] = UL64(0x6A09E667F3BCC908);  in __sha512_starts()
83 		ctx->state[1] = UL64(0xBB67AE8584CAA73B);  in __sha512_starts()
84 		ctx->state[2] = UL64(0x3C6EF372FE94F82B);  in __sha512_starts()
85 		ctx->state[3] = UL64(0xA54FF53A5F1D36F1);  in __sha512_starts()
86 		ctx->state[4] = UL64(0x510E527FADE682D1);  in __sha512_starts()
87 		ctx->state[5] = UL64(0x9B05688C2B3E6C1F);  in __sha512_starts()
88 		ctx->state[6] = UL64(0x1F83D9ABFB41BD6B);  in __sha512_starts()
89 		ctx->state[7] = UL64(0x5BE0CD19137E2179);  in __sha512_starts()
92 		ctx->state[0] = UL64(0xCBBB9D5DC1059ED8);  in __sha512_starts()
93 		ctx->state[1] = UL64(0x629A292A367CD507);  in __sha512_starts()
94 		ctx->state[2] = UL64(0x9159015A3070DD17);  in __sha512_starts()
95 		ctx->state[3] = UL64(0x152FECD8F70E5939);  in __sha512_starts()
96 		ctx->state[4] = UL64(0x67332667FFC00B31);  in __sha512_starts()
97 		ctx->state[5] = UL64(0x8EB44A8768581511);  in __sha512_starts()
98 		ctx->state[6] = UL64(0xDB0C2E0D64F98FA7);  in __sha512_starts()
99 		ctx->state[7] = UL64(0x47B5481DBEFA4FA4);  in __sha512_starts()
192 	A = ctx->state[0];  in sha512_process()
193 	B = ctx->state[1];  in sha512_process()
194 	C = ctx->state[2];  in sha512_process()
195 	D = ctx->state[3];  in sha512_process()
196 	E = ctx->state[4];  in sha512_process()
197 	F = ctx->state[5];  in sha512_process()
198 	G = ctx->state[6];  in sha512_process()
199 	H = ctx->state[7];  in sha512_process()
221 	ctx->state[0] += A;  in sha512_process()
222 	ctx->state[1] += B;  in sha512_process()
223 	ctx->state[2] += C;  in sha512_process()
224 	ctx->state[3] += D;  in sha512_process()
225 	ctx->state[4] += E;  in sha512_process()
226 	ctx->state[5] += F;  in sha512_process()
227 	ctx->state[6] += G;  in sha512_process()
228 	ctx->state[7] += H;  in sha512_process()
323 	PUT_UINT64_BE(ctx->state[0], output,  0);  in sha512_finish()
324 	PUT_UINT64_BE(ctx->state[1], output,  8);  in sha512_finish()
325 	PUT_UINT64_BE(ctx->state[2], output, 16);  in sha512_finish()
326 	PUT_UINT64_BE(ctx->state[3], output, 24);  in sha512_finish()
327 	PUT_UINT64_BE(ctx->state[4], output, 32);  in sha512_finish()
328 	PUT_UINT64_BE(ctx->state[5], output, 40);  in sha512_finish()
331 		PUT_UINT64_BE(ctx->state[6], output, 48);  in sha512_finish()
332 		PUT_UINT64_BE(ctx->state[7], output, 56);  in sha512_finish()