43 static inline void LOAD_OP(int I, u32 *W, const u8 *input)  in LOAD_OP()  argument
45 	W[I] = __be32_to_cpu( ((__be32*)(input))[I] );  in LOAD_OP()
48 static inline void BLEND_OP(int I, u32 *W)  in BLEND_OP()  argument
50 	W[I] = s1(W[I-2]) + W[I-7] + s0(W[I-15]) + W[I-16];  in BLEND_OP()
56 	u32 W[64];  in sha256_transform()  local
61 		LOAD_OP(i, W, input);  in sha256_transform()
65 		BLEND_OP(i, W);  in sha256_transform()
72 	t1 = h + e1(e) + Ch(e,f,g) + 0x428a2f98 + W[ 0];  in sha256_transform()
74 	t1 = g + e1(d) + Ch(d,e,f) + 0x71374491 + W[ 1];  in sha256_transform()
76 	t1 = f + e1(c) + Ch(c,d,e) + 0xb5c0fbcf + W[ 2];  in sha256_transform()
78 	t1 = e + e1(b) + Ch(b,c,d) + 0xe9b5dba5 + W[ 3];  in sha256_transform()
80 	t1 = d + e1(a) + Ch(a,b,c) + 0x3956c25b + W[ 4];  in sha256_transform()
82 	t1 = c + e1(h) + Ch(h,a,b) + 0x59f111f1 + W[ 5];  in sha256_transform()
84 	t1 = b + e1(g) + Ch(g,h,a) + 0x923f82a4 + W[ 6];  in sha256_transform()
86 	t1 = a + e1(f) + Ch(f,g,h) + 0xab1c5ed5 + W[ 7];  in sha256_transform()
89 	t1 = h + e1(e) + Ch(e,f,g) + 0xd807aa98 + W[ 8];  in sha256_transform()
91 	t1 = g + e1(d) + Ch(d,e,f) + 0x12835b01 + W[ 9];  in sha256_transform()
93 	t1 = f + e1(c) + Ch(c,d,e) + 0x243185be + W[10];  in sha256_transform()
95 	t1 = e + e1(b) + Ch(b,c,d) + 0x550c7dc3 + W[11];  in sha256_transform()
97 	t1 = d + e1(a) + Ch(a,b,c) + 0x72be5d74 + W[12];  in sha256_transform()
99 	t1 = c + e1(h) + Ch(h,a,b) + 0x80deb1fe + W[13];  in sha256_transform()
101 	t1 = b + e1(g) + Ch(g,h,a) + 0x9bdc06a7 + W[14];  in sha256_transform()
103 	t1 = a + e1(f) + Ch(f,g,h) + 0xc19bf174 + W[15];  in sha256_transform()
106 	t1 = h + e1(e) + Ch(e,f,g) + 0xe49b69c1 + W[16];  in sha256_transform()
108 	t1 = g + e1(d) + Ch(d,e,f) + 0xefbe4786 + W[17];  in sha256_transform()
110 	t1 = f + e1(c) + Ch(c,d,e) + 0x0fc19dc6 + W[18];  in sha256_transform()
112 	t1 = e + e1(b) + Ch(b,c,d) + 0x240ca1cc + W[19];  in sha256_transform()
114 	t1 = d + e1(a) + Ch(a,b,c) + 0x2de92c6f + W[20];  in sha256_transform()
116 	t1 = c + e1(h) + Ch(h,a,b) + 0x4a7484aa + W[21];  in sha256_transform()
118 	t1 = b + e1(g) + Ch(g,h,a) + 0x5cb0a9dc + W[22];  in sha256_transform()
120 	t1 = a + e1(f) + Ch(f,g,h) + 0x76f988da + W[23];  in sha256_transform()
123 	t1 = h + e1(e) + Ch(e,f,g) + 0x983e5152 + W[24];  in sha256_transform()
125 	t1 = g + e1(d) + Ch(d,e,f) + 0xa831c66d + W[25];  in sha256_transform()
127 	t1 = f + e1(c) + Ch(c,d,e) + 0xb00327c8 + W[26];  in sha256_transform()
129 	t1 = e + e1(b) + Ch(b,c,d) + 0xbf597fc7 + W[27];  in sha256_transform()
131 	t1 = d + e1(a) + Ch(a,b,c) + 0xc6e00bf3 + W[28];  in sha256_transform()
133 	t1 = c + e1(h) + Ch(h,a,b) + 0xd5a79147 + W[29];  in sha256_transform()
135 	t1 = b + e1(g) + Ch(g,h,a) + 0x06ca6351 + W[30];  in sha256_transform()
137 	t1 = a + e1(f) + Ch(f,g,h) + 0x14292967 + W[31];  in sha256_transform()
140 	t1 = h + e1(e) + Ch(e,f,g) + 0x27b70a85 + W[32];  in sha256_transform()
142 	t1 = g + e1(d) + Ch(d,e,f) + 0x2e1b2138 + W[33];  in sha256_transform()
144 	t1 = f + e1(c) + Ch(c,d,e) + 0x4d2c6dfc + W[34];  in sha256_transform()
146 	t1 = e + e1(b) + Ch(b,c,d) + 0x53380d13 + W[35];  in sha256_transform()
148 	t1 = d + e1(a) + Ch(a,b,c) + 0x650a7354 + W[36];  in sha256_transform()
150 	t1 = c + e1(h) + Ch(h,a,b) + 0x766a0abb + W[37];  in sha256_transform()
152 	t1 = b + e1(g) + Ch(g,h,a) + 0x81c2c92e + W[38];  in sha256_transform()
154 	t1 = a + e1(f) + Ch(f,g,h) + 0x92722c85 + W[39];  in sha256_transform()
157 	t1 = h + e1(e) + Ch(e,f,g) + 0xa2bfe8a1 + W[40];  in sha256_transform()
159 	t1 = g + e1(d) + Ch(d,e,f) + 0xa81a664b + W[41];  in sha256_transform()
161 	t1 = f + e1(c) + Ch(c,d,e) + 0xc24b8b70 + W[42];  in sha256_transform()
163 	t1 = e + e1(b) + Ch(b,c,d) + 0xc76c51a3 + W[43];  in sha256_transform()
165 	t1 = d + e1(a) + Ch(a,b,c) + 0xd192e819 + W[44];  in sha256_transform()
167 	t1 = c + e1(h) + Ch(h,a,b) + 0xd6990624 + W[45];  in sha256_transform()
169 	t1 = b + e1(g) + Ch(g,h,a) + 0xf40e3585 + W[46];  in sha256_transform()
171 	t1 = a + e1(f) + Ch(f,g,h) + 0x106aa070 + W[47];  in sha256_transform()
174 	t1 = h + e1(e) + Ch(e,f,g) + 0x19a4c116 + W[48];  in sha256_transform()
176 	t1 = g + e1(d) + Ch(d,e,f) + 0x1e376c08 + W[49];  in sha256_transform()
178 	t1 = f + e1(c) + Ch(c,d,e) + 0x2748774c + W[50];  in sha256_transform()
180 	t1 = e + e1(b) + Ch(b,c,d) + 0x34b0bcb5 + W[51];  in sha256_transform()
182 	t1 = d + e1(a) + Ch(a,b,c) + 0x391c0cb3 + W[52];  in sha256_transform()
184 	t1 = c + e1(h) + Ch(h,a,b) + 0x4ed8aa4a + W[53];  in sha256_transform()
186 	t1 = b + e1(g) + Ch(g,h,a) + 0x5b9cca4f + W[54];  in sha256_transform()
188 	t1 = a + e1(f) + Ch(f,g,h) + 0x682e6ff3 + W[55];  in sha256_transform()
191 	t1 = h + e1(e) + Ch(e,f,g) + 0x748f82ee + W[56];  in sha256_transform()
193 	t1 = g + e1(d) + Ch(d,e,f) + 0x78a5636f + W[57];  in sha256_transform()
195 	t1 = f + e1(c) + Ch(c,d,e) + 0x84c87814 + W[58];  in sha256_transform()
197 	t1 = e + e1(b) + Ch(b,c,d) + 0x8cc70208 + W[59];  in sha256_transform()
199 	t1 = d + e1(a) + Ch(a,b,c) + 0x90befffa + W[60];  in sha256_transform()
201 	t1 = c + e1(h) + Ch(h,a,b) + 0xa4506ceb + W[61];  in sha256_transform()
203 	t1 = b + e1(g) + Ch(g,h,a) + 0xbef9a3f7 + W[62];  in sha256_transform()
205 	t1 = a + e1(f) + Ch(f,g,h) + 0xc67178f2 + W[63];  in sha256_transform()
213 	memset(W, 0, 64 * sizeof(u32));  in sha256_transform()