rki                94 arch/arm/crypto/aes-ce-glue.c 		u32 *rki = ctx->key_enc + (i * kwords);
rki                95 arch/arm/crypto/aes-ce-glue.c 		u32 *rko = rki + kwords;
rki                97 arch/arm/crypto/aes-ce-glue.c 		rko[0] = ror32(ce_aes_sub(rki[kwords - 1]), 8);
rki                98 arch/arm/crypto/aes-ce-glue.c 		rko[0] = rko[0] ^ rki[0] ^ rcon[i];
rki                99 arch/arm/crypto/aes-ce-glue.c 		rko[1] = rko[0] ^ rki[1];
rki               100 arch/arm/crypto/aes-ce-glue.c 		rko[2] = rko[1] ^ rki[2];
rki               101 arch/arm/crypto/aes-ce-glue.c 		rko[3] = rko[2] ^ rki[3];
rki               106 arch/arm/crypto/aes-ce-glue.c 			rko[4] = rko[3] ^ rki[4];
rki               107 arch/arm/crypto/aes-ce-glue.c 			rko[5] = rko[4] ^ rki[5];
rki               111 arch/arm/crypto/aes-ce-glue.c 			rko[4] = ce_aes_sub(rko[3]) ^ rki[4];
rki               112 arch/arm/crypto/aes-ce-glue.c 			rko[5] = rko[4] ^ rki[5];
rki               113 arch/arm/crypto/aes-ce-glue.c 			rko[6] = rko[5] ^ rki[6];
rki               114 arch/arm/crypto/aes-ce-glue.c 			rko[7] = rko[6] ^ rki[7];
rki                99 arch/arm64/crypto/aes-ce-glue.c 		u32 *rki = ctx->key_enc + (i * kwords);
rki               100 arch/arm64/crypto/aes-ce-glue.c 		u32 *rko = rki + kwords;
rki               102 arch/arm64/crypto/aes-ce-glue.c 		rko[0] = ror32(__aes_ce_sub(rki[kwords - 1]), 8) ^ rcon[i] ^ rki[0];
rki               103 arch/arm64/crypto/aes-ce-glue.c 		rko[1] = rko[0] ^ rki[1];
rki               104 arch/arm64/crypto/aes-ce-glue.c 		rko[2] = rko[1] ^ rki[2];
rki               105 arch/arm64/crypto/aes-ce-glue.c 		rko[3] = rko[2] ^ rki[3];
rki               110 arch/arm64/crypto/aes-ce-glue.c 			rko[4] = rko[3] ^ rki[4];
rki               111 arch/arm64/crypto/aes-ce-glue.c 			rko[5] = rko[4] ^ rki[5];
rki               115 arch/arm64/crypto/aes-ce-glue.c 			rko[4] = __aes_ce_sub(rko[3]) ^ rki[4];
rki               116 arch/arm64/crypto/aes-ce-glue.c 			rko[5] = rko[4] ^ rki[5];
rki               117 arch/arm64/crypto/aes-ce-glue.c 			rko[6] = rko[5] ^ rki[6];
rki               118 arch/arm64/crypto/aes-ce-glue.c 			rko[7] = rko[6] ^ rki[7];
rki               202 lib/crypto/aes.c 		u32 *rki = ctx->key_enc + (i * kwords);
rki               203 lib/crypto/aes.c 		u32 *rko = rki + kwords;
rki               205 lib/crypto/aes.c 		rko[0] = ror32(subw(rki[kwords - 1]), 8) ^ rc ^ rki[0];
rki               206 lib/crypto/aes.c 		rko[1] = rko[0] ^ rki[1];
rki               207 lib/crypto/aes.c 		rko[2] = rko[1] ^ rki[2];
rki               208 lib/crypto/aes.c 		rko[3] = rko[2] ^ rki[3];
rki               213 lib/crypto/aes.c 			rko[4] = rko[3] ^ rki[4];
rki               214 lib/crypto/aes.c 			rko[5] = rko[4] ^ rki[5];
rki               218 lib/crypto/aes.c 			rko[4] = subw(rko[3]) ^ rki[4];
rki               219 lib/crypto/aes.c 			rko[5] = rko[4] ^ rki[5];
rki               220 lib/crypto/aes.c 			rko[6] = rko[5] ^ rki[6];
rki               221 lib/crypto/aes.c 			rko[7] = rko[6] ^ rki[7];