560 	u32 kll, klr, krl, krr;  in camellia_setup128()  local
570 	krl = get_unaligned_be32(key + 8);  in camellia_setup128()
577 	subL[1] = krl; subR[1] = krr;  in camellia_setup128()
579 	ROLDQ(kll, klr, krl, krr, w0, w1, 15);  in camellia_setup128()
583 	subL[5] = krl; subR[5] = krr;  in camellia_setup128()
585 	ROLDQ(kll, klr, krl, krr, w0, w1, 30);  in camellia_setup128()
589 	subL[11] = krl; subR[11] = krr;  in camellia_setup128()
591 	ROLDQ(kll, klr, krl, krr, w0, w1, 15);  in camellia_setup128()
593 	subL[13] = krl; subR[13] = krr;  in camellia_setup128()
595 	ROLDQ(kll, klr, krl, krr, w0, w1, 17);  in camellia_setup128()
599 	subL[17] = krl; subR[17] = krr;  in camellia_setup128()
601 	ROLDQ(kll, klr, krl, krr, w0, w1, 17);  in camellia_setup128()
605 	subL[19] = krl; subR[19] = krr;  in camellia_setup128()
607 	ROLDQ(kll, klr, krl, krr, w0, w1, 17);  in camellia_setup128()
611 	subL[23] = krl; subR[23] = krr;  in camellia_setup128()
615 	krl = subL[1]; krr = subR[1];  in camellia_setup128()
619 	krl ^= w0; krr ^= w1;  in camellia_setup128()
620 	CAMELLIA_F(krl, krr,  in camellia_setup128()
626 		   krl, krr, il, ir, t0, t1);  in camellia_setup128()
627 	krl ^= w0; krr ^= w1;  in camellia_setup128()
628 	CAMELLIA_F(krl, krr,  in camellia_setup128()
636 	subL[3] = krl; subR[3] = krr;  in camellia_setup128()
637 	ROLDQ(kll, klr, krl, krr, w0, w1, 15);  in camellia_setup128()
640 	subL[7] = krl; subR[7] = krr;  in camellia_setup128()
641 	ROLDQ(kll, klr, krl, krr, w0, w1, 15);  in camellia_setup128()
644 	subL[9] = krl; subR[9] = krr;  in camellia_setup128()
645 	ROLDQ(kll, klr, krl, krr, w0, w1, 15);  in camellia_setup128()
648 	ROLDQ(kll, klr, krl, krr, w0, w1, 15);  in camellia_setup128()
651 	subL[15] = krl; subR[15] = krr;  in camellia_setup128()
652 	ROLDQo32(kll, klr, krl, krr, w0, w1, 34);  in camellia_setup128()
655 	subL[21] = krl; subR[21] = krr;  in camellia_setup128()
656 	ROLDQ(kll, klr, krl, krr, w0, w1, 17);  in camellia_setup128()
659 	subL[25] = krl; subR[25] = krr;  in camellia_setup128()
666 	u32 kll, klr, krl, krr;        /* left half of key */  in camellia_setup256()  local
678 	krl = get_unaligned_be32(key + 8);  in camellia_setup256()
689 	subL[1] = krl; subR[1] = krr;  in camellia_setup256()
690 	ROLDQo32(kll, klr, krl, krr, w0, w1, 45);  in camellia_setup256()
694 	subL[13] = krl; subR[13] = krr;  in camellia_setup256()
695 	ROLDQ(kll, klr, krl, krr, w0, w1, 15);  in camellia_setup256()
699 	subL[17] = krl; subR[17] = krr;  in camellia_setup256()
700 	ROLDQ(kll, klr, krl, krr, w0, w1, 17);  in camellia_setup256()
704 	subL[23] = krl; subR[23] = krr;  in camellia_setup256()
705 	ROLDQo32(kll, klr, krl, krr, w0, w1, 34);  in camellia_setup256()
709 	subL[31] = krl; subR[31] = krr;  in camellia_setup256()
736 	krl = subL[1] ^ krrl; krr = subR[1] ^ krrr;  in camellia_setup256()
740 	krl ^= w0; krr ^= w1;  in camellia_setup256()
741 	CAMELLIA_F(krl, krr,  in camellia_setup256()
747 		   krl, krr, il, ir, t0, t1);  in camellia_setup256()
748 	krl ^= w0 ^ krrl; krr ^= w1 ^ krrr;  in camellia_setup256()
749 	CAMELLIA_F(krl, krr,  in camellia_setup256()
756 	krrl ^= krl; krrr ^= krr;  in camellia_setup256()
767 	ROLDQ(kll, klr, krl, krr, w0, w1, 15);  in camellia_setup256()
771 	subL[7] = krl; subR[7] = krr;  in camellia_setup256()
772 	ROLDQ(kll, klr, krl, krr, w0, w1, 30);  in camellia_setup256()
776 	subL[15] = krl; subR[15] = krr;  in camellia_setup256()
779 	subL[24] = klr; subR[24] = krl;  in camellia_setup256()
783 	ROLDQo32(kll, klr, krl, krr, w0, w1, 49);  in camellia_setup256()
787 	subL[29] = krl; subR[29] = krr;  in camellia_setup256()
832 #define CAMELLIA_FLS(ll, lr, rl, rr, kll, klr, krl, krr, t0, t1, t2, t3) ({ \  argument
839 	t3 = krl;							\