4  * Copyright (c) 2015-2016 Red Hat, Inc.
39     D->u[0] = S1->u[0] ^ S2->u[0];  in xts_uint128_xor()
40     D->u[1] = S1->u[1] ^ S2->u[1];  in xts_uint128_xor()
45     cpu_to_le64s(&v->u[0]);  in xts_uint128_cpu_to_les()
46     cpu_to_le64s(&v->u[1]);  in xts_uint128_cpu_to_les()
51     le64_to_cpus(&v->u[0]);  in xts_uint128_le_to_cpus()
52     le64_to_cpus(&v->u[1]);  in xts_uint128_le_to_cpus()
61     tt = I->u[0] >> 63;  in xts_mult_x()
62     I->u[0] <<= 1;  in xts_mult_x()
64     if (I->u[1] >> 63) {  in xts_mult_x()
65         I->u[0] ^= 0x87;  in xts_mult_x()
67     I->u[1] <<= 1;  in xts_mult_x()
68     I->u[1] |= tt;  in xts_mult_x()
93     func(ctx, XTS_BLOCK_SIZE, dst->b, dst->b);  in xts_tweak_encdec()
111     xts_uint128 PP, CC, T;  in xts_decrypt()  local
124         lim = m - 1;  in xts_decrypt()
152         memcpy(&CC, &T, XTS_BLOCK_SIZE);  in xts_decrypt()
153         xts_mult_x(&CC);  in xts_decrypt()
155         /* PP = tweak decrypt block m-1 */  in xts_decrypt()
157         xts_tweak_encdec(datactx, decfunc, &S, &PP, &CC);  in xts_decrypt()
161             CC.b[i] = src[XTS_BLOCK_SIZE + i];  in xts_decrypt()
165             CC.b[i] = PP.b[i];  in xts_decrypt()
168         /* Pm-1 = Tweak uncrypt CC */  in xts_decrypt()
169         xts_tweak_encdec(datactx, decfunc, &CC, &D, &T);  in xts_decrypt()
187     xts_uint128 PP, CC, T;  in xts_encrypt()  local
200         lim = m - 1;  in xts_encrypt()
229         /* CC = tweak encrypt block m-1 */  in xts_encrypt()
231         xts_tweak_encdec(datactx, encfunc, &S, &CC, &T);  in xts_encrypt()
233         /* Cm = first length % XTS_BLOCK_SIZE bytes of CC */  in xts_encrypt()
236             dst[XTS_BLOCK_SIZE + i] = CC.b[i];  in xts_encrypt()
240             PP.b[i] = CC.b[i];  in xts_encrypt()
243         /* Cm-1 = Tweak encrypt PP */  in xts_encrypt()