t1 =            Te0[(s1 >> 24)       ] ^            Te1[(s2 >> 16) & 0xff] ^            Te2[(s3 >>  8) & 0xff] ^            Te3[(s0      ) & 0xff] ^            rk[5];        t2 =            Te0[(s2 >> 24)       ] ^            Te1[(s3 >> 16) & 0xff] ^            Te2[(s0 >>  8) & 0xff] ^            Te3[(s1      ) & 0xff] ^            rk[6];        t3 =            Te0[(s3 >> 24)       ] ^            Te1[(s0 >> 16) & 0xff] ^            Te2[(s1 >>  8) & 0xff] ^            Te3[(s2      ) & 0xff] ^            rk[7];        rk += 8;        if (--r == 0) {            break;        }        s0 =            Te0[(t0 >> 24)       ] ^            Te1[(t1 >> 16) & 0xff] ^            Te2[(t2 >>  8) & 0xff] ^            Te3[(t3      ) & 0xff] ^            rk[0];        s1 =            Te0[(t1 >> 24)       ] ^            Te1[(t2 >> 16) & 0xff] ^            Te2[(t3 >>  8) & 0xff] ^            Te3[(t0      ) & 0xff] ^            rk[1];        s2 =            Te0[(t2 >> 24)       ] ^            Te1[(t3 >> 16) & 0xff] ^            Te2[(t0 >>  8) & 0xff] ^            Te3[(t1      ) & 0xff] ^            rk[2];        s3 =            Te0[(t3 >> 24)       ] ^            Te1[(t0 >> 16) & 0xff] ^            Te2[(t1 >>  8) & 0xff] ^            Te3[(t2      ) & 0xff] ^            rk[3];    }#endif /* ?FULL_UNROLL */    /*	 * apply last round and	 * map cipher state to byte array block:	 */	s0 =		(Te4[(t0 >> 24)       ] & 0xff000000) ^		(Te4[(t1 >> 16) & 0xff] & 0x00ff0000) ^		(Te4[(t2 >>  8) & 0xff] & 0x0000ff00) ^		(Te4[(t3      ) & 0xff] & 0x000000ff) ^		rk[0];	PUTU32(out     , s0);	s1 =		(Te4[(t1 >> 24)       ] & 0xff000000) ^		(Te4[(t2 >> 16) & 0xff] & 0x00ff0000) ^		(Te4[(t3 >>  8) & 0xff] & 0x0000ff00) ^		(Te4[(t0      ) & 0xff] & 0x000000ff) ^		rk[1];	PUTU32(out +  4, s1);	s2 =		(Te4[(t2 >> 24)       ] & 0xff000000) ^		(Te4[(t3 >> 16) & 0xff] & 0x00ff0000) ^		(Te4[(t0 >>  8) & 0xff] & 0x0000ff00) ^		(Te4[(t1      ) & 0xff] & 0x000000ff) ^		rk[2];	PUTU32(out +  8, s2);	s3 =		(Te4[(t3 >> 24)       ] & 0xff000000) ^		(Te4[(t0 >> 16) & 0xff] & 0x00ff0000) ^		(Te4[(t1 >>  8) & 0xff] & 0x0000ff00) ^		(Te4[(t2      ) & 0xff] & 0x000000ff) ^		rk[3];	PUTU32(out + 12, s3);}/* * Decrypt a single block * in and out can overlap */void AES_decrypt(const unsigned char *in, unsigned char *out,		 const AES_KEY *key) {	const u32 *rk;	u32 s0, s1, s2, s3, t0, t1, t2, t3;#ifndef FULL_UNROLL	int r;#endif /* ?FULL_UNROLL */	assert(in && out && key);	rk = key->rd_key;	/*	 * map byte array block to cipher state	 * and add initial round key:	 */    s0 = GETU32(in     ) ^ rk[0];    s1 = GETU32(in +  4) ^ rk[1];    s2 = GETU32(in +  8) ^ rk[2];    s3 = GETU32(in + 12) ^ rk[3];#ifdef FULL_UNROLL    /* round 1: */    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[ 4];    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[ 5];    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[ 6];    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[ 7];    /* round 2: */    s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[ 8];    s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[ 9];    s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[10];    s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[11];    /* round 3: */    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[12];    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[13];    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[14];    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[15];    /* round 4: */    s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[16];    s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[17];    s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[18];    s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[19];    /* round 5: */    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[20];    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[21];    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[22];    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[23];    /* round 6: */    s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[24];    s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[25];    s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[26];    s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[27];    /* round 7: */    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[28];    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[29];    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[30];    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[31];    /* round 8: */    s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[32];    s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[33];    s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[34];    s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[35];    /* round 9: */    t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[36];    t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[37];    t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[38];    t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[39];    if (key->rounds > 10) {        /* round 10: */        s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[40];        s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[41];        s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[42];        s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[43];        /* round 11: */        t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[44];        t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[45];        t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[46];        t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[47];        if (key->rounds > 12) {            /* round 12: */            s0 = Td0[t0 >> 24] ^ Td1[(t3 >> 16) & 0xff] ^ Td2[(t2 >>  8) & 0xff] ^ Td3[t1 & 0xff] ^ rk[48];            s1 = Td0[t1 >> 24] ^ Td1[(t0 >> 16) & 0xff] ^ Td2[(t3 >>  8) & 0xff] ^ Td3[t2 & 0xff] ^ rk[49];            s2 = Td0[t2 >> 24] ^ Td1[(t1 >> 16) & 0xff] ^ Td2[(t0 >>  8) & 0xff] ^ Td3[t3 & 0xff] ^ rk[50];            s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >>  8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[51];            /* round 13: */            t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >>  8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[52];            t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >>  8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[53];            t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >>  8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[54];            t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >>  8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[55];        }    }	rk += key->rounds << 2;#else  /* !FULL_UNROLL */    /*     * Nr - 1 full rounds:     */    r = key->rounds >> 1;    for (;;) {        t0 =            Td0[(s0 >> 24)       ] ^            Td1[(s3 >> 16) & 0xff] ^            Td2[(s2 >>  8) & 0xff] ^            Td3[(s1      ) & 0xff] ^            rk[4];        t1 =            Td0[(s1 >> 24)       ] ^            Td1[(s0 >> 16) & 0xff] ^            Td2[(s3 >>  8) & 0xff] ^            Td3[(s2      ) & 0xff] ^            rk[5];        t2 =            Td0[(s2 >> 24)       ] ^            Td1[(s1 >> 16) & 0xff] ^            Td2[(s0 >>  8) & 0xff] ^            Td3[(s3      ) & 0xff] ^            rk[6];        t3 =            Td0[(s3 >> 24)       ] ^            Td1[(s2 >> 16) & 0xff] ^            Td2[(s1 >>  8) & 0xff] ^            Td3[(s0      ) & 0xff] ^            rk[7];        rk += 8;        if (--r == 0) {            break;        }        s0 =            Td0[(t0 >> 24)       ] ^            Td1[(t3 >> 16) & 0xff] ^            Td2[(t2 >>  8) & 0xff] ^            Td3[(t1      ) & 0xff] ^            rk[0];        s1 =            Td0[(t1 >> 24)       ] ^            Td1[(t0 >> 16) & 0xff] ^            Td2[(t3 >>  8) & 0xff] ^            Td3[(t2      ) & 0xff] ^            rk[1];        s2 =            Td0[(t2 >> 24)       ] ^            Td1[(t1 >> 16) & 0xff] ^            Td2[(t0 >>  8) & 0xff] ^            Td3[(t3      ) & 0xff] ^            rk[2];        s3 =            Td0[(t3 >> 24)       ] ^            Td1[(t2 >> 16) & 0xff] ^            Td2[(t1 >>  8) & 0xff] ^            Td3[(t0      ) & 0xff] ^            rk[3];    }#endif /* ?FULL_UNROLL */    /*	 * apply last round and	 * map cipher state to byte array block:	 */   	s0 =   		(Td4[(t0 >> 24)       ] & 0xff000000) ^   		(Td4[(t3 >> 16) & 0xff] & 0x00ff0000) ^   		(Td4[(t2 >>  8) & 0xff] & 0x0000ff00) ^   		(Td4[(t1      ) & 0xff] & 0x000000ff) ^   		rk[0];	PUTU32(out     , s0);   	s1 =   		(Td4[(t1 >> 24)       ] & 0xff000000) ^   		(Td4[(t0 >> 16) & 0xff] & 0x00ff0000) ^   		(Td4[(t3 >>  8) & 0xff] & 0x0000ff00) ^   		(Td4[(t2      ) & 0xff] & 0x000000ff) ^   		rk[1];	PUTU32(out +  4, s1);   	s2 =   		(Td4[(t2 >> 24)       ] & 0xff000000) ^   		(Td4[(t1 >> 16) & 0xff] & 0x00ff0000) ^   		(Td4[(t0 >>  8) & 0xff] & 0x0000ff00) ^   		(Td4[(t3      ) & 0xff] & 0x000000ff) ^   		rk[2];	PUTU32(out +  8, s2);   	s3 =   		(Td4[(t3 >> 24)       ] & 0xff000000) ^   		(Td4[(t2 >> 16) & 0xff] & 0x00ff0000) ^   		(Td4[(t1 >>  8) & 0xff] & 0x0000ff00) ^   		(Td4[(t0      ) & 0xff] & 0x000000ff) ^   		rk[3];	PUTU32(out + 12, s3);}#endif /* AES_ASM */void AES_cbc_encrypt(const unsigned char *in, unsigned char *out,		     const unsigned long length, const AES_KEY *key,		     unsigned char *ivec, const int enc){	unsigned long n;	unsigned long len = length;	unsigned char tmp[AES_BLOCK_SIZE];	assert(in && out && key && ivec);	if (enc) {		while (len >= AES_BLOCK_SIZE) {			for(n=0; n < AES_BLOCK_SIZE; ++n)				tmp[n] = in[n] ^ ivec[n];			AES_encrypt(tmp, out, key);			memcpy(ivec, out, AES_BLOCK_SIZE);			len -= AES_BLOCK_SIZE;			in += AES_BLOCK_SIZE;			out += AES_BLOCK_SIZE;		}		if (len) {			for(n=0; n < len; ++n)				tmp[n] = in[n] ^ ivec[n];			for(n=len; n < AES_BLOCK_SIZE; ++n)				tmp[n] = ivec[n];			AES_encrypt(tmp, tmp, key);			memcpy(out, tmp, AES_BLOCK_SIZE);			memcpy(ivec, tmp, AES_BLOCK_SIZE);		}	} else {		while (len >= AES_BLOCK_SIZE) {			memcpy(tmp, in, AES_BLOCK_SIZE);			AES_decrypt(in, out, key);			for(n=0; n < AES_BLOCK_SIZE; ++n)				out[n] ^= ivec[n];			memcpy(ivec, tmp, AES_BLOCK_SIZE);			len -= AES_BLOCK_SIZE;			in += AES_BLOCK_SIZE;			out += AES_BLOCK_SIZE;		}		if (len) {			memcpy(tmp, in, AES_BLOCK_SIZE);			AES_decrypt(tmp, tmp, key);			for(n=0; n < len; ++n)				out[n] = tmp[n] ^ ivec[n];			memcpy(ivec, tmp, AES_BLOCK_SIZE);		}	}}