107 static void salsa20_keysetup(struct salsa20_ctx *ctx, const u8 *k, u32 kbytes)  in salsa20_keysetup()  argument
111 	ctx->input[1] = U8TO32_LITTLE(k + 0);  in salsa20_keysetup()
112 	ctx->input[2] = U8TO32_LITTLE(k + 4);  in salsa20_keysetup()
113 	ctx->input[3] = U8TO32_LITTLE(k + 8);  in salsa20_keysetup()
114 	ctx->input[4] = U8TO32_LITTLE(k + 12);  in salsa20_keysetup()
121 	ctx->input[11] = U8TO32_LITTLE(k + 0);  in salsa20_keysetup()
122 	ctx->input[12] = U8TO32_LITTLE(k + 4);  in salsa20_keysetup()
123 	ctx->input[13] = U8TO32_LITTLE(k + 8);  in salsa20_keysetup()
124 	ctx->input[14] = U8TO32_LITTLE(k + 12);  in salsa20_keysetup()
125 	ctx->input[0] = U8TO32_LITTLE(constants + 0);  in salsa20_keysetup()
126 	ctx->input[5] = U8TO32_LITTLE(constants + 4);  in salsa20_keysetup()
127 	ctx->input[10] = U8TO32_LITTLE(constants + 8);  in salsa20_keysetup()
128 	ctx->input[15] = U8TO32_LITTLE(constants + 12);  in salsa20_keysetup()
131 static void salsa20_ivsetup(struct salsa20_ctx *ctx, const u8 *iv)  in salsa20_ivsetup()  argument
133 	ctx->input[6] = U8TO32_LITTLE(iv + 0);  in salsa20_ivsetup()
134 	ctx->input[7] = U8TO32_LITTLE(iv + 4);  in salsa20_ivsetup()
135 	ctx->input[8] = 0;  in salsa20_ivsetup()
136 	ctx->input[9] = 0;  in salsa20_ivsetup()
139 static void salsa20_encrypt_bytes(struct salsa20_ctx *ctx, u8 *dst,  in salsa20_encrypt_bytes()  argument
148 		salsa20_wordtobyte(buf, ctx->input);  in salsa20_encrypt_bytes()
150 		ctx->input[8]++;  in salsa20_encrypt_bytes()
151 		if (!ctx->input[8])  in salsa20_encrypt_bytes()
152 			ctx->input[9]++;  in salsa20_encrypt_bytes()
172 	struct salsa20_ctx *ctx = crypto_tfm_ctx(tfm);  in setkey()  local
173 	salsa20_keysetup(ctx, key, keysize);  in setkey()
183 	struct salsa20_ctx *ctx = crypto_blkcipher_ctx(tfm);  in encrypt()  local
189 	salsa20_ivsetup(ctx, walk.iv);  in encrypt()
193 		salsa20_encrypt_bytes(ctx, walk.dst.virt.addr,  in encrypt()
199 		salsa20_encrypt_bytes(ctx, walk.dst.virt.addr,  in encrypt()
206 		salsa20_encrypt_bytes(ctx, walk.dst.virt.addr,  in encrypt()