crypto/krb5/src/plugins/kdb/test/kdb_test.c

131

set_names(testhandle h, const char *s1, const char *s2, const char *s3)

crypto/krb5/src/plugins/kdb/test/kdb_test.c

137

h->names[4] = s3;

crypto/krb5/src/plugins/kdb/test/kdb_test.c

143

get_string(testhandle h, const char *s1, const char *s2, const char *s3)

crypto/krb5/src/plugins/kdb/test/kdb_test.c

148

set_names(h, s1, s2, s3);

crypto/krb5/src/plugins/kdb/test/kdb_test.c

161

get_duration(testhandle h, const char *s1, const char *s2, const char *s3)

crypto/krb5/src/plugins/kdb/test/kdb_test.c

163

char *strval = get_string(h, s1, s2, s3);

crypto/krb5/src/plugins/kdb/test/kdb_test.c

176

get_time(testhandle h, const char *s1, const char *s2, const char *s3)

crypto/krb5/src/plugins/kdb/test/kdb_test.c

178

char *strval = get_string(h, s1, s2, s3);

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1055

int64_t s3 = 2097151 & (load_4(s + 7) >> 7);

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1193

s3 += s15 * 666643;

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1202

s3 += s14 * 470296;

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1211

s3 += s13 * 654183;

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1220

s3 -= s12 * 997805;

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1229

s3 += carry2;

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1247

carry3 = (s3 + (1 << 20)) >> 21;

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1249

s3 -= int64_lshift21(carry3);

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1266

s3 -= s12 * 997805;

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1278

s3 += carry2;

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1280

carry3 = s3 >> 21;

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1282

s3 -= int64_lshift21(carry3);

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1311

s3 -= s12 * 997805;

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1323

s3 += carry2;

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1325

carry3 = s3 >> 21;

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1327

s3 -= int64_lshift21(carry3);

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1357

s[7] = (s2 >> 14) | (s3 << 7);

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1358

s[8] = s3 >> 1;

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1359

s[9] = s3 >> 9;

crypto/krb5/src/plugins/preauth/spake/edwards25519.c

1360

s[10] = (s3 >> 17) | (s4 << 4);

crypto/krb5/src/util/support/t_json.c

185

k5_json_string s1, s2, s3;

crypto/krb5/src/util/support/t_json.c

191

k5_json_string_create_base64("55555", 5, &s3);

crypto/krb5/src/util/support/t_json.c

195

if (strcmp(k5_json_string_utf8(s3), "NTU1NTU=") != 0)

crypto/krb5/src/util/support/t_json.c

197

k5_json_string_unbase64(s3, &data, &len);

crypto/krb5/src/util/support/t_json.c

204

k5_json_release(s3);

crypto/openssh/poly1305.c

37

uint32_t s1,s2,s3,s4;

crypto/openssh/poly1305.c

61

s3 = r3 * 5;

crypto/openssh/poly1305.c

90

t[0] = mul32x32_64(h0,r0) + mul32x32_64(h1,s4) + mul32x32_64(h2,s3) + mul32x32_64(h3,s2) + mul32x32_64(h4,s1);

crypto/openssh/poly1305.c

91

t[1] = mul32x32_64(h0,r1) + mul32x32_64(h1,r0) + mul32x32_64(h2,s4) + mul32x32_64(h3,s3) + mul32x32_64(h4,s2);

crypto/openssh/poly1305.c

92

t[2] = mul32x32_64(h0,r2) + mul32x32_64(h1,r1) + mul32x32_64(h2,r0) + mul32x32_64(h3,s4) + mul32x32_64(h4,s3);

crypto/openssh/rijndael.c

1003

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[35];

crypto/openssh/rijndael.c

1005

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[36];

crypto/openssh/rijndael.c

1006

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[37];

crypto/openssh/rijndael.c

1007

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[38];

crypto/openssh/rijndael.c

1008

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[39];

crypto/openssh/rijndael.c

1014

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[43];

crypto/openssh/rijndael.c

1016

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[44];

crypto/openssh/rijndael.c

1017

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[45];

crypto/openssh/rijndael.c

1018

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[46];

crypto/openssh/rijndael.c

1019

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[47];

crypto/openssh/rijndael.c

1025

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[51];

crypto/openssh/rijndael.c

1027

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[52];

crypto/openssh/rijndael.c

1028

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[53];

crypto/openssh/rijndael.c

1029

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[54];

crypto/openssh/rijndael.c

1030

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[55];

crypto/openssh/rijndael.c

1042

Td1[(s3 >> 16) & 0xff] ^

crypto/openssh/rijndael.c

1049

Td2[(s3 >> 8) & 0xff] ^

crypto/openssh/rijndael.c

1056

Td3[(s3 ) & 0xff] ^

crypto/openssh/rijndael.c

1059

Td0[(s3 >> 24) ] ^

crypto/openssh/rijndael.c

1088

s3 =

crypto/openssh/rijndael.c

1121

s3 =

crypto/openssh/rijndael.c

1127

PUTU32(pt + 12, s3);

crypto/openssh/rijndael.c

765

u32 s0, s1, s2, s3, t0, t1, t2, t3;

crypto/openssh/rijndael.c

777

s3 = GETU32(pt + 12) ^ rk[3];

crypto/openssh/rijndael.c

780

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[ 4];

crypto/openssh/rijndael.c

781

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[ 5];

crypto/openssh/rijndael.c

782

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[ 6];

crypto/openssh/rijndael.c

783

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[ 7];

crypto/openssh/rijndael.c

788

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[11];

crypto/openssh/rijndael.c

790

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[12];

crypto/openssh/rijndael.c

791

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[13];

crypto/openssh/rijndael.c

792

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[14];

crypto/openssh/rijndael.c

793

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[15];

crypto/openssh/rijndael.c

798

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[19];

crypto/openssh/rijndael.c

800

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[20];

crypto/openssh/rijndael.c

801

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[21];

crypto/openssh/rijndael.c

802

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[22];

crypto/openssh/rijndael.c

803

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[23];

crypto/openssh/rijndael.c

808

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[27];

crypto/openssh/rijndael.c

810

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[28];

crypto/openssh/rijndael.c

811

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[29];

crypto/openssh/rijndael.c

812

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[30];

crypto/openssh/rijndael.c

813

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[31];

crypto/openssh/rijndael.c

818

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[35];

crypto/openssh/rijndael.c

820

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[36];

crypto/openssh/rijndael.c

821

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[37];

crypto/openssh/rijndael.c

822

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[38];

crypto/openssh/rijndael.c

823

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[39];

crypto/openssh/rijndael.c

829

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[43];

crypto/openssh/rijndael.c

831

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[44];

crypto/openssh/rijndael.c

832

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[45];

crypto/openssh/rijndael.c

833

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[46];

crypto/openssh/rijndael.c

834

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[47];

crypto/openssh/rijndael.c

840

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[51];

crypto/openssh/rijndael.c

842

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[52];

crypto/openssh/rijndael.c

843

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[53];

crypto/openssh/rijndael.c

844

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[54];

crypto/openssh/rijndael.c

845

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[55];

crypto/openssh/rijndael.c

859

Te3[(s3 ) & 0xff] ^

crypto/openssh/rijndael.c

864

Te2[(s3 >> 8) & 0xff] ^

crypto/openssh/rijndael.c

869

Te1[(s3 >> 16) & 0xff] ^

crypto/openssh/rijndael.c

874

Te0[(s3 >> 24) ] ^

crypto/openssh/rijndael.c

903

s3 =

crypto/openssh/rijndael.c

936

s3 =

crypto/openssh/rijndael.c

942

PUTU32(ct + 12, s3);

crypto/openssh/rijndael.c

950

u32 s0, s1, s2, s3, t0, t1, t2, t3;

crypto/openssh/rijndael.c

962

s3 = GETU32(ct + 12) ^ rk[3];

crypto/openssh/rijndael.c

965

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[ 4];

crypto/openssh/rijndael.c

966

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[ 5];

crypto/openssh/rijndael.c

967

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[ 6];

crypto/openssh/rijndael.c

968

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[ 7];

crypto/openssh/rijndael.c

973

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[11];

crypto/openssh/rijndael.c

975

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[12];

crypto/openssh/rijndael.c

976

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[13];

crypto/openssh/rijndael.c

977

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[14];

crypto/openssh/rijndael.c

978

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[15];

crypto/openssh/rijndael.c

983

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[19];

crypto/openssh/rijndael.c

985

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[20];

crypto/openssh/rijndael.c

986

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[21];

crypto/openssh/rijndael.c

987

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[22];

crypto/openssh/rijndael.c

988

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[23];

crypto/openssh/rijndael.c

993

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[27];

crypto/openssh/rijndael.c

995

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[28];

crypto/openssh/rijndael.c

996

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[29];

crypto/openssh/rijndael.c

997

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[30];

crypto/openssh/rijndael.c

998

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[31];

crypto/openssl/crypto/aes/aes_core.c

3178

u32 s0, s1, s2, s3, t0, t1, t2, t3;

crypto/openssl/crypto/aes/aes_core.c

3193

s3 = GETU32(in + 12) ^ rk[3];

crypto/openssl/crypto/aes/aes_core.c

3196

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[4];

crypto/openssl/crypto/aes/aes_core.c

3197

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[5];

crypto/openssl/crypto/aes/aes_core.c

3198

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[6];

crypto/openssl/crypto/aes/aes_core.c

3199

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[7];

crypto/openssl/crypto/aes/aes_core.c

3204

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[11];

crypto/openssl/crypto/aes/aes_core.c

3206

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[12];

crypto/openssl/crypto/aes/aes_core.c

3207

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[13];

crypto/openssl/crypto/aes/aes_core.c

3208

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[14];

crypto/openssl/crypto/aes/aes_core.c

3209

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[15];

crypto/openssl/crypto/aes/aes_core.c

3214

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[19];

crypto/openssl/crypto/aes/aes_core.c

3216

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[20];

crypto/openssl/crypto/aes/aes_core.c

3217

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[21];

crypto/openssl/crypto/aes/aes_core.c

3218

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[22];

crypto/openssl/crypto/aes/aes_core.c

3219

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[23];

crypto/openssl/crypto/aes/aes_core.c

3224

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[27];

crypto/openssl/crypto/aes/aes_core.c

3226

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[28];

crypto/openssl/crypto/aes/aes_core.c

3227

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[29];

crypto/openssl/crypto/aes/aes_core.c

3228

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[30];

crypto/openssl/crypto/aes/aes_core.c

3229

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[31];

crypto/openssl/crypto/aes/aes_core.c

3234

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[35];

crypto/openssl/crypto/aes/aes_core.c

3236

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[36];

crypto/openssl/crypto/aes/aes_core.c

3237

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[37];

crypto/openssl/crypto/aes/aes_core.c

3238

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[38];

crypto/openssl/crypto/aes/aes_core.c

3239

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[39];

crypto/openssl/crypto/aes/aes_core.c

3245

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[43];

crypto/openssl/crypto/aes/aes_core.c

3247

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[44];

crypto/openssl/crypto/aes/aes_core.c

3248

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[45];

crypto/openssl/crypto/aes/aes_core.c

3249

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[46];

crypto/openssl/crypto/aes/aes_core.c

3250

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[47];

crypto/openssl/crypto/aes/aes_core.c

3256

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[51];

crypto/openssl/crypto/aes/aes_core.c

3258

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[52];

crypto/openssl/crypto/aes/aes_core.c

3259

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[53];

crypto/openssl/crypto/aes/aes_core.c

3260

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[54];

crypto/openssl/crypto/aes/aes_core.c

3261

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[55];

crypto/openssl/crypto/aes/aes_core.c

3271

t0 = Te0[(s0 >> 24)] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[(s3) & 0xff] ^ rk[4];

crypto/openssl/crypto/aes/aes_core.c

3272

t1 = Te0[(s1 >> 24)] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[(s0) & 0xff] ^ rk[5];

crypto/openssl/crypto/aes/aes_core.c

3273

t2 = Te0[(s2 >> 24)] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[(s1) & 0xff] ^ rk[6];

crypto/openssl/crypto/aes/aes_core.c

3274

t3 = Te0[(s3 >> 24)] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[(s2) & 0xff] ^ rk[7];

crypto/openssl/crypto/aes/aes_core.c

3284

s3 = Te0[(t3 >> 24)] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[(t2) & 0xff] ^ rk[3];

crypto/openssl/crypto/aes/aes_core.c

3297

s3 = (Te2[(t3 >> 24)] & 0xff000000) ^ (Te3[(t0 >> 16) & 0xff] & 0x00ff0000) ^ (Te0[(t1 >> 8) & 0xff] & 0x0000ff00) ^ (Te1[(t2) & 0xff] & 0x000000ff) ^ rk[3];

crypto/openssl/crypto/aes/aes_core.c

3298

PUTU32(out + 12, s3);

crypto/openssl/crypto/aes/aes_core.c

3310

u32 s0, s1, s2, s3, t0, t1, t2, t3;

crypto/openssl/crypto/aes/aes_core.c

3325

s3 = GETU32(in + 12) ^ rk[3];

crypto/openssl/crypto/aes/aes_core.c

3328

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[4];

crypto/openssl/crypto/aes/aes_core.c

3329

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[5];

crypto/openssl/crypto/aes/aes_core.c

3330

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[6];

crypto/openssl/crypto/aes/aes_core.c

3331

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[7];

crypto/openssl/crypto/aes/aes_core.c

3336

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[11];

crypto/openssl/crypto/aes/aes_core.c

3338

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[12];

crypto/openssl/crypto/aes/aes_core.c

3339

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[13];

crypto/openssl/crypto/aes/aes_core.c

3340

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[14];

crypto/openssl/crypto/aes/aes_core.c

3341

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[15];

crypto/openssl/crypto/aes/aes_core.c

3346

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[19];

crypto/openssl/crypto/aes/aes_core.c

3348

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[20];

crypto/openssl/crypto/aes/aes_core.c

3349

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[21];

crypto/openssl/crypto/aes/aes_core.c

3350

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[22];

crypto/openssl/crypto/aes/aes_core.c

3351

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[23];

crypto/openssl/crypto/aes/aes_core.c

3356

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[27];

crypto/openssl/crypto/aes/aes_core.c

3358

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[28];

crypto/openssl/crypto/aes/aes_core.c

3359

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[29];

crypto/openssl/crypto/aes/aes_core.c

3360

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[30];

crypto/openssl/crypto/aes/aes_core.c

3361

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[31];

crypto/openssl/crypto/aes/aes_core.c

3366

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[35];

crypto/openssl/crypto/aes/aes_core.c

3368

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[36];

crypto/openssl/crypto/aes/aes_core.c

3369

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[37];

crypto/openssl/crypto/aes/aes_core.c

3370

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[38];

crypto/openssl/crypto/aes/aes_core.c

3371

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[39];

crypto/openssl/crypto/aes/aes_core.c

3377

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[43];

crypto/openssl/crypto/aes/aes_core.c

3379

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[44];

crypto/openssl/crypto/aes/aes_core.c

3380

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[45];

crypto/openssl/crypto/aes/aes_core.c

3381

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[46];

crypto/openssl/crypto/aes/aes_core.c

3382

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[47];

crypto/openssl/crypto/aes/aes_core.c

3388

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[51];

crypto/openssl/crypto/aes/aes_core.c

3390

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[52];

crypto/openssl/crypto/aes/aes_core.c

3391

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[53];

crypto/openssl/crypto/aes/aes_core.c

3392

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[54];

crypto/openssl/crypto/aes/aes_core.c

3393

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[55];

crypto/openssl/crypto/aes/aes_core.c

3403

t0 = Td0[(s0 >> 24)] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[(s1) & 0xff] ^ rk[4];

crypto/openssl/crypto/aes/aes_core.c

3404

t1 = Td0[(s1 >> 24)] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[(s2) & 0xff] ^ rk[5];

crypto/openssl/crypto/aes/aes_core.c

3405

t2 = Td0[(s2 >> 24)] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[(s3) & 0xff] ^ rk[6];

crypto/openssl/crypto/aes/aes_core.c

3406

t3 = Td0[(s3 >> 24)] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[(s0) & 0xff] ^ rk[7];

crypto/openssl/crypto/aes/aes_core.c

3416

s3 = Td0[(t3 >> 24)] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[(t0) & 0xff] ^ rk[3];

crypto/openssl/crypto/aes/aes_core.c

3429

s3 = ((u32)Td4[(t3 >> 24)] << 24) ^ ((u32)Td4[(t2 >> 16) & 0xff] << 16) ^ ((u32)Td4[(t1 >> 8) & 0xff] << 8) ^ ((u32)Td4[(t0) & 0xff]) ^ rk[3];

crypto/openssl/crypto/aes/aes_core.c

3430

PUTU32(out + 12, s3);

crypto/openssl/crypto/aes/aes_x86core.c

635

u32 s0, s1, s2, s3, t[4];

crypto/openssl/crypto/aes/aes_x86core.c

648

s3 = GETU32(in + 12) ^ rk[3];

crypto/openssl/crypto/aes/aes_x86core.c

653

t[0] = (u32)Te4[(s0) & 0xff] ^ (u32)Te4[(s1 >> 8) & 0xff] << 8 ^ (u32)Te4[(s2 >> 16) & 0xff] << 16 ^ (u32)Te4[(s3 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

654

t[1] = (u32)Te4[(s1) & 0xff] ^ (u32)Te4[(s2 >> 8) & 0xff] << 8 ^ (u32)Te4[(s3 >> 16) & 0xff] << 16 ^ (u32)Te4[(s0 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

655

t[2] = (u32)Te4[(s2) & 0xff] ^ (u32)Te4[(s3 >> 8) & 0xff] << 8 ^ (u32)Te4[(s0 >> 16) & 0xff] << 16 ^ (u32)Te4[(s1 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

656

t[3] = (u32)Te4[(s3) & 0xff] ^ (u32)Te4[(s0 >> 8) & 0xff] << 8 ^ (u32)Te4[(s1 >> 16) & 0xff] << 16 ^ (u32)Te4[(s2 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

676

t[0] = Te0[(s0) & 0xff] ^ Te1[(s1 >> 8) & 0xff] ^ Te2[(s2 >> 16) & 0xff] ^ Te3[(s3 >> 24)] ^ rk[4];

crypto/openssl/crypto/aes/aes_x86core.c

677

t[1] = Te0[(s1) & 0xff] ^ Te1[(s2 >> 8) & 0xff] ^ Te2[(s3 >> 16) & 0xff] ^ Te3[(s0 >> 24)] ^ rk[5];

crypto/openssl/crypto/aes/aes_x86core.c

678

t[2] = Te0[(s2) & 0xff] ^ Te1[(s3 >> 8) & 0xff] ^ Te2[(s0 >> 16) & 0xff] ^ Te3[(s1 >> 24)] ^ rk[6];

crypto/openssl/crypto/aes/aes_x86core.c

679

t[3] = Te0[(s3) & 0xff] ^ Te1[(s0 >> 8) & 0xff] ^ Te2[(s1 >> 16) & 0xff] ^ Te3[(s2 >> 24)] ^ rk[7];

crypto/openssl/crypto/aes/aes_x86core.c

684

s3 = t[3];

crypto/openssl/crypto/aes/aes_x86core.c

691

t[0] = (u32)Te4[(s0) & 0xff] ^ (u32)Te4[(s1 >> 8) & 0xff] << 8 ^ (u32)Te4[(s2 >> 16) & 0xff] << 16 ^ (u32)Te4[(s3 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

692

t[1] = (u32)Te4[(s1) & 0xff] ^ (u32)Te4[(s2 >> 8) & 0xff] << 8 ^ (u32)Te4[(s3 >> 16) & 0xff] << 16 ^ (u32)Te4[(s0 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

693

t[2] = (u32)Te4[(s2) & 0xff] ^ (u32)Te4[(s3 >> 8) & 0xff] << 8 ^ (u32)Te4[(s0 >> 16) & 0xff] << 16 ^ (u32)Te4[(s1 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

694

t[3] = (u32)Te4[(s3) & 0xff] ^ (u32)Te4[(s0 >> 8) & 0xff] << 8 ^ (u32)Te4[(s1 >> 16) & 0xff] << 16 ^ (u32)Te4[(s2 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

714

t[0] = Te0[(s0) & 0xff] ^ Te1[(s1 >> 8) & 0xff] ^ Te2[(s2 >> 16) & 0xff] ^ Te3[(s3 >> 24)] ^ rk[0];

crypto/openssl/crypto/aes/aes_x86core.c

715

t[1] = Te0[(s1) & 0xff] ^ Te1[(s2 >> 8) & 0xff] ^ Te2[(s3 >> 16) & 0xff] ^ Te3[(s0 >> 24)] ^ rk[1];

crypto/openssl/crypto/aes/aes_x86core.c

716

t[2] = Te0[(s2) & 0xff] ^ Te1[(s3 >> 8) & 0xff] ^ Te2[(s0 >> 16) & 0xff] ^ Te3[(s1 >> 24)] ^ rk[2];

crypto/openssl/crypto/aes/aes_x86core.c

717

t[3] = Te0[(s3) & 0xff] ^ Te1[(s0 >> 8) & 0xff] ^ Te2[(s1 >> 16) & 0xff] ^ Te3[(s2 >> 24)] ^ rk[3];

crypto/openssl/crypto/aes/aes_x86core.c

722

s3 = t[3];

crypto/openssl/crypto/aes/aes_x86core.c

731

*(u32 *)(out + 0) = (u32)Te4[(s0) & 0xff] ^ (u32)Te4[(s1 >> 8) & 0xff] << 8 ^ (u32)Te4[(s2 >> 16) & 0xff] << 16 ^ (u32)Te4[(s3 >> 24)] << 24 ^ rk[0];

crypto/openssl/crypto/aes/aes_x86core.c

732

*(u32 *)(out + 4) = (u32)Te4[(s1) & 0xff] ^ (u32)Te4[(s2 >> 8) & 0xff] << 8 ^ (u32)Te4[(s3 >> 16) & 0xff] << 16 ^ (u32)Te4[(s0 >> 24)] << 24 ^ rk[1];

crypto/openssl/crypto/aes/aes_x86core.c

733

*(u32 *)(out + 8) = (u32)Te4[(s2) & 0xff] ^ (u32)Te4[(s3 >> 8) & 0xff] << 8 ^ (u32)Te4[(s0 >> 16) & 0xff] << 16 ^ (u32)Te4[(s1 >> 24)] << 24 ^ rk[2];

crypto/openssl/crypto/aes/aes_x86core.c

734

*(u32 *)(out + 12) = (u32)Te4[(s3) & 0xff] ^ (u32)Te4[(s0 >> 8) & 0xff] << 8 ^ (u32)Te4[(s1 >> 16) & 0xff] << 16 ^ (u32)Te4[(s2 >> 24)] << 24 ^ rk[3];

crypto/openssl/crypto/aes/aes_x86core.c

736

*(u32 *)(out + 0) = (Te2[(s0) & 0xff] & 0x000000ffU) ^ (Te3[(s1 >> 8) & 0xff] & 0x0000ff00U) ^ (Te0[(s2 >> 16) & 0xff] & 0x00ff0000U) ^ (Te1[(s3 >> 24)] & 0xff000000U) ^ rk[0];

crypto/openssl/crypto/aes/aes_x86core.c

737

*(u32 *)(out + 4) = (Te2[(s1) & 0xff] & 0x000000ffU) ^ (Te3[(s2 >> 8) & 0xff] & 0x0000ff00U) ^ (Te0[(s3 >> 16) & 0xff] & 0x00ff0000U) ^ (Te1[(s0 >> 24)] & 0xff000000U) ^ rk[1];

crypto/openssl/crypto/aes/aes_x86core.c

738

*(u32 *)(out + 8) = (Te2[(s2) & 0xff] & 0x000000ffU) ^ (Te3[(s3 >> 8) & 0xff] & 0x0000ff00U) ^ (Te0[(s0 >> 16) & 0xff] & 0x00ff0000U) ^ (Te1[(s1 >> 24)] & 0xff000000U) ^ rk[2];

crypto/openssl/crypto/aes/aes_x86core.c

739

*(u32 *)(out + 12) = (Te2[(s3) & 0xff] & 0x000000ffU) ^ (Te3[(s0 >> 8) & 0xff] & 0x0000ff00U) ^ (Te0[(s1 >> 16) & 0xff] & 0x00ff0000U) ^ (Te1[(s2 >> 24)] & 0xff000000U) ^ rk[3];

crypto/openssl/crypto/aes/aes_x86core.c

752

u32 s0, s1, s2, s3, t[4];

crypto/openssl/crypto/aes/aes_x86core.c

765

s3 = GETU32(in + 12) ^ rk[3];

crypto/openssl/crypto/aes/aes_x86core.c

770

t[0] = (u32)Td4[(s0) & 0xff] ^ (u32)Td4[(s3 >> 8) & 0xff] << 8 ^ (u32)Td4[(s2 >> 16) & 0xff] << 16 ^ (u32)Td4[(s1 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

771

t[1] = (u32)Td4[(s1) & 0xff] ^ (u32)Td4[(s0 >> 8) & 0xff] << 8 ^ (u32)Td4[(s3 >> 16) & 0xff] << 16 ^ (u32)Td4[(s2 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

772

t[2] = (u32)Td4[(s2) & 0xff] ^ (u32)Td4[(s1 >> 8) & 0xff] << 8 ^ (u32)Td4[(s0 >> 16) & 0xff] << 16 ^ (u32)Td4[(s3 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

773

t[3] = (u32)Td4[(s3) & 0xff] ^ (u32)Td4[(s2 >> 8) & 0xff] << 8 ^ (u32)Td4[(s1 >> 16) & 0xff] << 16 ^ (u32)Td4[(s0 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

801

t[0] = Td0[(s0) & 0xff] ^ Td1[(s3 >> 8) & 0xff] ^ Td2[(s2 >> 16) & 0xff] ^ Td3[(s1 >> 24)] ^ rk[4];

crypto/openssl/crypto/aes/aes_x86core.c

802

t[1] = Td0[(s1) & 0xff] ^ Td1[(s0 >> 8) & 0xff] ^ Td2[(s3 >> 16) & 0xff] ^ Td3[(s2 >> 24)] ^ rk[5];

crypto/openssl/crypto/aes/aes_x86core.c

803

t[2] = Td0[(s2) & 0xff] ^ Td1[(s1 >> 8) & 0xff] ^ Td2[(s0 >> 16) & 0xff] ^ Td3[(s3 >> 24)] ^ rk[6];

crypto/openssl/crypto/aes/aes_x86core.c

804

t[3] = Td0[(s3) & 0xff] ^ Td1[(s2 >> 8) & 0xff] ^ Td2[(s1 >> 16) & 0xff] ^ Td3[(s0 >> 24)] ^ rk[7];

crypto/openssl/crypto/aes/aes_x86core.c

809

s3 = t[3];

crypto/openssl/crypto/aes/aes_x86core.c

816

t[0] = (u32)Td4[(s0) & 0xff] ^ (u32)Td4[(s3 >> 8) & 0xff] << 8 ^ (u32)Td4[(s2 >> 16) & 0xff] << 16 ^ (u32)Td4[(s1 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

817

t[1] = (u32)Td4[(s1) & 0xff] ^ (u32)Td4[(s0 >> 8) & 0xff] << 8 ^ (u32)Td4[(s3 >> 16) & 0xff] << 16 ^ (u32)Td4[(s2 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

818

t[2] = (u32)Td4[(s2) & 0xff] ^ (u32)Td4[(s1 >> 8) & 0xff] << 8 ^ (u32)Td4[(s0 >> 16) & 0xff] << 16 ^ (u32)Td4[(s3 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

819

t[3] = (u32)Td4[(s3) & 0xff] ^ (u32)Td4[(s2 >> 8) & 0xff] << 8 ^ (u32)Td4[(s1 >> 16) & 0xff] << 16 ^ (u32)Td4[(s0 >> 24)] << 24;

crypto/openssl/crypto/aes/aes_x86core.c

847

t[0] = Td0[(s0) & 0xff] ^ Td1[(s3 >> 8) & 0xff] ^ Td2[(s2 >> 16) & 0xff] ^ Td3[(s1 >> 24)] ^ rk[0];

crypto/openssl/crypto/aes/aes_x86core.c

848

t[1] = Td0[(s1) & 0xff] ^ Td1[(s0 >> 8) & 0xff] ^ Td2[(s3 >> 16) & 0xff] ^ Td3[(s2 >> 24)] ^ rk[1];

crypto/openssl/crypto/aes/aes_x86core.c

849

t[2] = Td0[(s2) & 0xff] ^ Td1[(s1 >> 8) & 0xff] ^ Td2[(s0 >> 16) & 0xff] ^ Td3[(s3 >> 24)] ^ rk[2];

crypto/openssl/crypto/aes/aes_x86core.c

850

t[3] = Td0[(s3) & 0xff] ^ Td1[(s2 >> 8) & 0xff] ^ Td2[(s1 >> 16) & 0xff] ^ Td3[(s0 >> 24)] ^ rk[3];

crypto/openssl/crypto/aes/aes_x86core.c

855

s3 = t[3];

crypto/openssl/crypto/aes/aes_x86core.c

863

*(u32 *)(out + 0) = ((u32)Td4[(s0) & 0xff]) ^ ((u32)Td4[(s3 >> 8) & 0xff] << 8) ^ ((u32)Td4[(s2 >> 16) & 0xff] << 16) ^ ((u32)Td4[(s1 >> 24)] << 24) ^ rk[0];

crypto/openssl/crypto/aes/aes_x86core.c

864

*(u32 *)(out + 4) = ((u32)Td4[(s1) & 0xff]) ^ ((u32)Td4[(s0 >> 8) & 0xff] << 8) ^ ((u32)Td4[(s3 >> 16) & 0xff] << 16) ^ ((u32)Td4[(s2 >> 24)] << 24) ^ rk[1];

crypto/openssl/crypto/aes/aes_x86core.c

865

*(u32 *)(out + 8) = ((u32)Td4[(s2) & 0xff]) ^ ((u32)Td4[(s1 >> 8) & 0xff] << 8) ^ ((u32)Td4[(s0 >> 16) & 0xff] << 16) ^ ((u32)Td4[(s3 >> 24)] << 24) ^ rk[2];

crypto/openssl/crypto/aes/aes_x86core.c

866

*(u32 *)(out + 12) = ((u32)Td4[(s3) & 0xff]) ^ ((u32)Td4[(s2 >> 8) & 0xff] << 8) ^ ((u32)Td4[(s1 >> 16) & 0xff] << 16) ^ ((u32)Td4[(s0 >> 24)] << 24) ^ rk[3];

crypto/openssl/crypto/aria/aria.c

608

uint32_t s0, s1, s2, s3;

crypto/openssl/crypto/aria/aria.c

647

s3 = reg3;

crypto/openssl/crypto/aria/aria.c

666

rk_tail->u[3] = s3;

crypto/openssl/crypto/camellia/camellia.c

290

register u32 s0, s1, s2, s3;

crypto/openssl/crypto/camellia/camellia.c

295

k[3] = s3 = GETU32(rawKey + 12);

crypto/openssl/crypto/camellia/camellia.c

302

k[11] = s3 = ~s1;

crypto/openssl/crypto/camellia/camellia.c

305

k[11] = s3 = GETU32(rawKey + 28);

crypto/openssl/crypto/camellia/camellia.c

307

s0 ^= k[0], s1 ^= k[1], s2 ^= k[2], s3 ^= k[3];

crypto/openssl/crypto/camellia/camellia.c

311

Camellia_Feistel(s0, s1, s2, s3, SIGMA + 0);

crypto/openssl/crypto/camellia/camellia.c

312

Camellia_Feistel(s2, s3, s0, s1, SIGMA + 2);

crypto/openssl/crypto/camellia/camellia.c

314

s0 ^= k[0], s1 ^= k[1], s2 ^= k[2], s3 ^= k[3];

crypto/openssl/crypto/camellia/camellia.c

315

Camellia_Feistel(s0, s1, s2, s3, SIGMA + 4);

crypto/openssl/crypto/camellia/camellia.c

316

Camellia_Feistel(s2, s3, s0, s1, SIGMA + 6);

crypto/openssl/crypto/camellia/camellia.c

320

k[4] = s0, k[5] = s1, k[6] = s2, k[7] = s3;

crypto/openssl/crypto/camellia/camellia.c

321

RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 15 */

crypto/openssl/crypto/camellia/camellia.c

322

k[12] = s0, k[13] = s1, k[14] = s2, k[15] = s3;

crypto/openssl/crypto/camellia/camellia.c

323

RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 30 */

crypto/openssl/crypto/camellia/camellia.c

324

k[16] = s0, k[17] = s1, k[18] = s2, k[19] = s3;

crypto/openssl/crypto/camellia/camellia.c

325

RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 45 */

crypto/openssl/crypto/camellia/camellia.c

327

RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 60 */

crypto/openssl/crypto/camellia/camellia.c

328

k[28] = s0, k[29] = s1, k[30] = s2, k[31] = s3;

crypto/openssl/crypto/camellia/camellia.c

329

RotLeft128(s1, s2, s3, s0, 2); /* KA <<< 94 */

crypto/openssl/crypto/camellia/camellia.c

330

k[40] = s1, k[41] = s2, k[42] = s3, k[43] = s0;

crypto/openssl/crypto/camellia/camellia.c

331

RotLeft128(s1, s2, s3, s0, 17); /* KA <<<111 */

crypto/openssl/crypto/camellia/camellia.c

332

k[48] = s1, k[49] = s2, k[50] = s3, k[51] = s0;

crypto/openssl/crypto/camellia/camellia.c

334

s0 = k[0], s1 = k[1], s2 = k[2], s3 = k[3];

crypto/openssl/crypto/camellia/camellia.c

335

RotLeft128(s0, s1, s2, s3, 15); /* KL <<< 15 */

crypto/openssl/crypto/camellia/camellia.c

336

k[8] = s0, k[9] = s1, k[10] = s2, k[11] = s3;

crypto/openssl/crypto/camellia/camellia.c

337

RotLeft128(s0, s1, s2, s3, 30); /* KL <<< 45 */

crypto/openssl/crypto/camellia/camellia.c

338

k[20] = s0, k[21] = s1, k[22] = s2, k[23] = s3;

crypto/openssl/crypto/camellia/camellia.c

339

RotLeft128(s0, s1, s2, s3, 15); /* KL <<< 60 */

crypto/openssl/crypto/camellia/camellia.c

340

k[26] = s2, k[27] = s3;

crypto/openssl/crypto/camellia/camellia.c

341

RotLeft128(s0, s1, s2, s3, 17); /* KL <<< 77 */

crypto/openssl/crypto/camellia/camellia.c

342

k[32] = s0, k[33] = s1, k[34] = s2, k[35] = s3;

crypto/openssl/crypto/camellia/camellia.c

343

RotLeft128(s0, s1, s2, s3, 17); /* KL <<< 94 */

crypto/openssl/crypto/camellia/camellia.c

344

k[36] = s0, k[37] = s1, k[38] = s2, k[39] = s3;

crypto/openssl/crypto/camellia/camellia.c

345

RotLeft128(s0, s1, s2, s3, 17); /* KL <<<111 */

crypto/openssl/crypto/camellia/camellia.c

346

k[44] = s0, k[45] = s1, k[46] = s2, k[47] = s3;

crypto/openssl/crypto/camellia/camellia.c

350

k[12] = s0, k[13] = s1, k[14] = s2, k[15] = s3;

crypto/openssl/crypto/camellia/camellia.c

351

s0 ^= k[8], s1 ^= k[9], s2 ^= k[10], s3 ^= k[11];

crypto/openssl/crypto/camellia/camellia.c

352

Camellia_Feistel(s0, s1, s2, s3, (SIGMA + 8));

crypto/openssl/crypto/camellia/camellia.c

353

Camellia_Feistel(s2, s3, s0, s1, (SIGMA + 10));

crypto/openssl/crypto/camellia/camellia.c

355

k[4] = s0, k[5] = s1, k[6] = s2, k[7] = s3;

crypto/openssl/crypto/camellia/camellia.c

356

RotLeft128(s0, s1, s2, s3, 30); /* KB <<< 30 */

crypto/openssl/crypto/camellia/camellia.c

357

k[20] = s0, k[21] = s1, k[22] = s2, k[23] = s3;

crypto/openssl/crypto/camellia/camellia.c

358

RotLeft128(s0, s1, s2, s3, 30); /* KB <<< 60 */

crypto/openssl/crypto/camellia/camellia.c

359

k[40] = s0, k[41] = s1, k[42] = s2, k[43] = s3;

crypto/openssl/crypto/camellia/camellia.c

360

RotLeft128(s1, s2, s3, s0, 19); /* KB <<<111 */

crypto/openssl/crypto/camellia/camellia.c

361

k[64] = s1, k[65] = s2, k[66] = s3, k[67] = s0;

crypto/openssl/crypto/camellia/camellia.c

363

s0 = k[8], s1 = k[9], s2 = k[10], s3 = k[11];

crypto/openssl/crypto/camellia/camellia.c

364

RotLeft128(s0, s1, s2, s3, 15); /* KR <<< 15 */

crypto/openssl/crypto/camellia/camellia.c

365

k[8] = s0, k[9] = s1, k[10] = s2, k[11] = s3;

crypto/openssl/crypto/camellia/camellia.c

366

RotLeft128(s0, s1, s2, s3, 15); /* KR <<< 30 */

crypto/openssl/crypto/camellia/camellia.c

367

k[16] = s0, k[17] = s1, k[18] = s2, k[19] = s3;

crypto/openssl/crypto/camellia/camellia.c

368

RotLeft128(s0, s1, s2, s3, 30); /* KR <<< 60 */

crypto/openssl/crypto/camellia/camellia.c

369

k[36] = s0, k[37] = s1, k[38] = s2, k[39] = s3;

crypto/openssl/crypto/camellia/camellia.c

370

RotLeft128(s1, s2, s3, s0, 2); /* KR <<< 94 */

crypto/openssl/crypto/camellia/camellia.c

371

k[52] = s1, k[53] = s2, k[54] = s3, k[55] = s0;

crypto/openssl/crypto/camellia/camellia.c

373

s0 = k[12], s1 = k[13], s2 = k[14], s3 = k[15];

crypto/openssl/crypto/camellia/camellia.c

374

RotLeft128(s0, s1, s2, s3, 15); /* KA <<< 15 */

crypto/openssl/crypto/camellia/camellia.c

375

k[12] = s0, k[13] = s1, k[14] = s2, k[15] = s3;

crypto/openssl/crypto/camellia/camellia.c

376

RotLeft128(s0, s1, s2, s3, 30); /* KA <<< 45 */

crypto/openssl/crypto/camellia/camellia.c

377

k[28] = s0, k[29] = s1, k[30] = s2, k[31] = s3;

crypto/openssl/crypto/camellia/camellia.c

379

k[48] = s1, k[49] = s2, k[50] = s3, k[51] = s0;

crypto/openssl/crypto/camellia/camellia.c

380

RotLeft128(s1, s2, s3, s0, 17); /* KA <<< 94 */

crypto/openssl/crypto/camellia/camellia.c

381

k[56] = s1, k[57] = s2, k[58] = s3, k[59] = s0;

crypto/openssl/crypto/camellia/camellia.c

383

s0 = k[0], s1 = k[1], s2 = k[2], s3 = k[3];

crypto/openssl/crypto/camellia/camellia.c

384

RotLeft128(s1, s2, s3, s0, 13); /* KL <<< 45 */

crypto/openssl/crypto/camellia/camellia.c

385

k[24] = s1, k[25] = s2, k[26] = s3, k[27] = s0;

crypto/openssl/crypto/camellia/camellia.c

386

RotLeft128(s1, s2, s3, s0, 15); /* KL <<< 60 */

crypto/openssl/crypto/camellia/camellia.c

387

k[32] = s1, k[33] = s2, k[34] = s3, k[35] = s0;

crypto/openssl/crypto/camellia/camellia.c

388

RotLeft128(s1, s2, s3, s0, 17); /* KL <<< 77 */

crypto/openssl/crypto/camellia/camellia.c

389

k[44] = s1, k[45] = s2, k[46] = s3, k[47] = s0;

crypto/openssl/crypto/camellia/camellia.c

390

RotLeft128(s2, s3, s0, s1, 2); /* KL <<<111 */

crypto/openssl/crypto/camellia/camellia.c

391

k[60] = s2, k[61] = s3, k[62] = s0, k[63] = s1;

crypto/openssl/crypto/camellia/camellia.c

409

register u32 s0, s1, s2, s3;

crypto/openssl/crypto/camellia/camellia.c

415

s3 = GETU32(plaintext + 12) ^ k[3];

crypto/openssl/crypto/camellia/camellia.c

420

Camellia_Feistel(s0, s1, s2, s3, k + 0);

crypto/openssl/crypto/camellia/camellia.c

421

Camellia_Feistel(s2, s3, s0, s1, k + 2);

crypto/openssl/crypto/camellia/camellia.c

422

Camellia_Feistel(s0, s1, s2, s3, k + 4);

crypto/openssl/crypto/camellia/camellia.c

423

Camellia_Feistel(s2, s3, s0, s1, k + 6);

crypto/openssl/crypto/camellia/camellia.c

424

Camellia_Feistel(s0, s1, s2, s3, k + 8);

crypto/openssl/crypto/camellia/camellia.c

425

Camellia_Feistel(s2, s3, s0, s1, k + 10);

crypto/openssl/crypto/camellia/camellia.c

437

s2 ^= s3 | k[3];

crypto/openssl/crypto/camellia/camellia.c

439

s3 ^= LeftRotate(s2 & k[2], 1);

crypto/openssl/crypto/camellia/camellia.c

443

s2 ^= k[0], s3 ^= k[1], s0 ^= k[2], s1 ^= k[3];

crypto/openssl/crypto/camellia/camellia.c

446

PUTU32(ciphertext + 4, s3);

crypto/openssl/crypto/camellia/camellia.c

462

u32 s0, s1, s2, s3;

crypto/openssl/crypto/camellia/camellia.c

468

s3 = GETU32(ciphertext + 12) ^ k[3];

crypto/openssl/crypto/camellia/camellia.c

473

Camellia_Feistel(s0, s1, s2, s3, k + 10);

crypto/openssl/crypto/camellia/camellia.c

474

Camellia_Feistel(s2, s3, s0, s1, k + 8);

crypto/openssl/crypto/camellia/camellia.c

475

Camellia_Feistel(s0, s1, s2, s3, k + 6);

crypto/openssl/crypto/camellia/camellia.c

476

Camellia_Feistel(s2, s3, s0, s1, k + 4);

crypto/openssl/crypto/camellia/camellia.c

477

Camellia_Feistel(s0, s1, s2, s3, k + 2);

crypto/openssl/crypto/camellia/camellia.c

478

Camellia_Feistel(s2, s3, s0, s1, k + 0);

crypto/openssl/crypto/camellia/camellia.c

490

s2 ^= s3 | k[1];

crypto/openssl/crypto/camellia/camellia.c

492

s3 ^= LeftRotate(s2 & k[0], 1);

crypto/openssl/crypto/camellia/camellia.c

496

s2 ^= k[0], s3 ^= k[1], s0 ^= k[2], s1 ^= k[3];

crypto/openssl/crypto/camellia/camellia.c

499

PUTU32(plaintext + 4, s3);

crypto/openssl/crypto/ec/curve25519.c

4779

int64_t s3 = kBottom21Bits & (load_4(s + 7) >> 7);

crypto/openssl/crypto/ec/curve25519.c

4917

s3 += s15 * 666643;

crypto/openssl/crypto/ec/curve25519.c

4926

s3 += s14 * 470296;

crypto/openssl/crypto/ec/curve25519.c

4935

s3 += s13 * 654183;

crypto/openssl/crypto/ec/curve25519.c

4944

s3 -= s12 * 997805;

crypto/openssl/crypto/ec/curve25519.c

4953

s3 += carry2;

crypto/openssl/crypto/ec/curve25519.c

4971

carry3 = (s3 + (1 << 20)) >> 21;

crypto/openssl/crypto/ec/curve25519.c

4973

s3 -= carry3 * (1 << 21);

crypto/openssl/crypto/ec/curve25519.c

4990

s3 -= s12 * 997805;

crypto/openssl/crypto/ec/curve25519.c

5002

s3 += carry2;

crypto/openssl/crypto/ec/curve25519.c

5004

carry3 = s3 >> 21;

crypto/openssl/crypto/ec/curve25519.c

5006

s3 -= carry3 * (1 << 21);

crypto/openssl/crypto/ec/curve25519.c

5035

s3 -= s12 * 997805;

crypto/openssl/crypto/ec/curve25519.c

5047

s3 += carry2;

crypto/openssl/crypto/ec/curve25519.c

5049

carry3 = s3 >> 21;

crypto/openssl/crypto/ec/curve25519.c

5051

s3 -= carry3 * (1 << 21);

crypto/openssl/crypto/ec/curve25519.c

5081

s[7] = (uint8_t)((s2 >> 14) | (s3 << 7));

crypto/openssl/crypto/ec/curve25519.c

5082

s[8] = (uint8_t)(s3 >> 1);

crypto/openssl/crypto/ec/curve25519.c

5083

s[9] = (uint8_t)(s3 >> 9);

crypto/openssl/crypto/ec/curve25519.c

5084

s[10] = (uint8_t)((s3 >> 17) | (s4 << 4));

crypto/openssl/crypto/ec/curve25519.c

5160

int64_t s3;

crypto/openssl/crypto/ec/curve25519.c

5208

s3 = c3 + a0 * b3 + a1 * b2 + a2 * b1 + a3 * b0;

crypto/openssl/crypto/ec/curve25519.c

5234

s3 += carry2;

crypto/openssl/crypto/ec/curve25519.c

5270

carry3 = (s3 + (1 << 20)) >> 21;

crypto/openssl/crypto/ec/curve25519.c

5272

s3 -= carry3 * (1 << 21);

crypto/openssl/crypto/ec/curve25519.c

5400

s3 += s15 * 666643;

crypto/openssl/crypto/ec/curve25519.c

5409

s3 += s14 * 470296;

crypto/openssl/crypto/ec/curve25519.c

5418

s3 += s13 * 654183;

crypto/openssl/crypto/ec/curve25519.c

5427

s3 -= s12 * 997805;

crypto/openssl/crypto/ec/curve25519.c

5436

s3 += carry2;

crypto/openssl/crypto/ec/curve25519.c

5454

carry3 = (s3 + (1 << 20)) >> 21;

crypto/openssl/crypto/ec/curve25519.c

5456

s3 -= carry3 * (1 << 21);

crypto/openssl/crypto/ec/curve25519.c

5473

s3 -= s12 * 997805;

crypto/openssl/crypto/ec/curve25519.c

5485

s3 += carry2;

crypto/openssl/crypto/ec/curve25519.c

5487

carry3 = s3 >> 21;

crypto/openssl/crypto/ec/curve25519.c

5489

s3 -= carry3 * (1 << 21);

crypto/openssl/crypto/ec/curve25519.c

5518

s3 -= s12 * 997805;

crypto/openssl/crypto/ec/curve25519.c

5530

s3 += carry2;

crypto/openssl/crypto/ec/curve25519.c

5532

carry3 = s3 >> 21;

crypto/openssl/crypto/ec/curve25519.c

5534

s3 -= carry3 * (1 << 21);

crypto/openssl/crypto/ec/curve25519.c

5564

s[7] = (uint8_t)((s2 >> 14) | (s3 << 7));

crypto/openssl/crypto/ec/curve25519.c

5565

s[8] = (uint8_t)(s3 >> 1);

crypto/openssl/crypto/ec/curve25519.c

5566

s[9] = (uint8_t)(s3 >> 9);

crypto/openssl/crypto/ec/curve25519.c

5567

s[10] = (uint8_t)((s3 >> 17) | (s4 << 4));

crypto/openssl/crypto/poly1305/poly1305.c

280

u32 s1, s2, s3;

crypto/openssl/crypto/poly1305/poly1305.c

291

s3 = r3 + (r3 >> 2);

crypto/openssl/crypto/poly1305/poly1305.c

308

d0 = ((u64)h0 * r0) + ((u64)h1 * s3) + ((u64)h2 * s2) + ((u64)h3 * s1);

crypto/openssl/crypto/poly1305/poly1305.c

309

d1 = ((u64)h0 * r1) + ((u64)h1 * r0) + ((u64)h2 * s3) + ((u64)h3 * s2) + (h4 * s1);

crypto/openssl/crypto/poly1305/poly1305.c

310

d2 = ((u64)h0 * r2) + ((u64)h1 * r1) + ((u64)h2 * r0) + ((u64)h3 * s3) + (h4 * s2);

crypto/openssl/crypto/poly1305/poly1305.c

311

d3 = ((u64)h0 * r3) + ((u64)h1 * r2) + ((u64)h2 * r1) + ((u64)h3 * r0) + (h4 * s3);

crypto/openssl/crypto/seed/seed.c

394

unsigned int s0, s1, s2, s3, ret;

crypto/openssl/crypto/seed/seed.c

399

s3 = SEED_Sbox[1][(unsigned char)((v) >> 24) & 0xff];

crypto/openssl/crypto/seed/seed.c

401

ret = ((s0 & 0xFC) ^ (s1 & 0xF3) ^ (s2 & 0xCF) ^ (s3 & 0x3F));

crypto/openssl/crypto/seed/seed.c

402

ret |= ((s0 & 0xF3) ^ (s1 & 0xCF) ^ (s2 & 0x3F) ^ (s3 & 0xFC)) << 8;

crypto/openssl/crypto/seed/seed.c

403

ret |= ((s0 & 0xCF) ^ (s1 & 0x3F) ^ (s2 & 0xFC) ^ (s3 & 0xF3)) << 16;

crypto/openssl/crypto/seed/seed.c

404

ret |= ((s0 & 0x3F) ^ (s1 & 0xFC) ^ (s2 & 0xF3) ^ (s3 & 0xCF)) << 24;

crypto/openssl/fuzz/bignum.c

33

int s1 = 0, s3 = 0;

crypto/openssl/fuzz/bignum.c

62

s3 = buf[0] & 4;

crypto/openssl/fuzz/bignum.c

69

BN_set_negative(b3, s3);

crypto/openssl/ssl/d1_msg.c

52

s->s3.alert_dispatch = SSL_ALERT_DISPATCH_NONE;

crypto/openssl/ssl/d1_msg.c

55

*ptr++ = s->s3.send_alert[0];

crypto/openssl/ssl/d1_msg.c

56

*ptr++ = s->s3.send_alert[1];

crypto/openssl/ssl/d1_msg.c

60

s->s3.alert_dispatch = 1;

crypto/openssl/ssl/d1_msg.c

66

s->msg_callback(1, s->version, SSL3_RT_ALERT, s->s3.send_alert,

crypto/openssl/ssl/d1_msg.c

75

j = (s->s3.send_alert[0] << 8) | s->s3.send_alert[1];

crypto/openssl/ssl/quic/quic_impl.c

4496

sc->s3.flags |= TLS1_FLAGS_QUIC | TLS1_FLAGS_QUIC_INTERNAL;

crypto/openssl/ssl/quic/quic_impl.c

622

sc->s3.flags |= TLS1_FLAGS_QUIC | TLS1_FLAGS_QUIC_INTERNAL;

crypto/openssl/ssl/quic/quic_port.c

501

tls_conn->s3.flags |= TLS1_FLAGS_QUIC | TLS1_FLAGS_QUIC_INTERNAL;

crypto/openssl/ssl/quic/quic_tls.c

745

sc->s3.flags |= TLS1_FLAGS_QUIC;

crypto/openssl/ssl/quic/quic_tls.c

809

sc->s3.flags |= TLS1_FLAGS_QUIC_INTERNAL;

crypto/openssl/ssl/quic/quic_tls.c

907

return sc->s3.tmp.message_type == SSL3_MT_CERTIFICATE_REQUEST;

crypto/openssl/ssl/record/rec_layer_d1.c

282

if (sc->s3.change_cipher_spec /* set when we receive ChangeCipherSpec,

crypto/openssl/ssl/record/rec_layer_d1.c

405

sc->s3.warn_alert = alert_descr;

crypto/openssl/ssl/record/rec_layer_d1.c

447

sc->s3.fatal_alert = alert_descr;

crypto/openssl/ssl/record/rec_layer_d1.c

596

if (sc->s3.in_read_app_data && (sc->s3.total_renegotiations != 0) && ossl_statem_app_data_allowed(sc)) {

crypto/openssl/ssl/record/rec_layer_d1.c

597

sc->s3.in_read_app_data = 2;

crypto/openssl/ssl/record/rec_layer_d1.c

634

if (sc->s3.alert_dispatch > 0) {

crypto/openssl/ssl/record/rec_layer_s3.c

1098

s->s3.in_read_app_data = 2;

crypto/openssl/ssl/record/rec_layer_s3.c

369

if (s->s3.alert_dispatch > 0) {

crypto/openssl/ssl/record/rec_layer_s3.c

514

s->s3.warn_alert = SSL_AD_CLOSE_NOTIFY;

crypto/openssl/ssl/record/rec_layer_s3.c

732

if (s->s3.change_cipher_spec /* set when we receive ChangeCipherSpec,

crypto/openssl/ssl/record/rec_layer_s3.c

893

s->s3.warn_alert = alert_descr;

crypto/openssl/ssl/record/rec_layer_s3.c

917

s->s3.fatal_alert = alert_descr;

crypto/openssl/ssl/s3_enc.c

104

ciph = s->s3.tmp.new_sym_enc;

crypto/openssl/ssl/s3_enc.c

105

md = s->s3.tmp.new_hash;

crypto/openssl/ssl/s3_enc.c

112

comp = s->s3.tmp.new_compression;

crypto/openssl/ssl/s3_enc.c

115

p = s->s3.tmp.key_block;

crypto/openssl/ssl/s3_enc.c

142

if (n > s->s3.tmp.key_block_length) {

crypto/openssl/ssl/s3_enc.c

170

if (s->s3.tmp.key_block_length != 0)

crypto/openssl/ssl/s3_enc.c

180

ssl_evp_cipher_free(s->s3.tmp.new_sym_enc);

crypto/openssl/ssl/s3_enc.c

181

s->s3.tmp.new_sym_enc = c;

crypto/openssl/ssl/s3_enc.c

182

ssl_evp_md_free(s->s3.tmp.new_hash);

crypto/openssl/ssl/s3_enc.c

183

s->s3.tmp.new_hash = hash;

crypto/openssl/ssl/s3_enc.c

185

s->s3.tmp.new_compression = NULL;

crypto/openssl/ssl/s3_enc.c

187

s->s3.tmp.new_compression = comp;

crypto/openssl/ssl/s3_enc.c

204

s->s3.tmp.key_block_length = num;

crypto/openssl/ssl/s3_enc.c

205

s->s3.tmp.key_block = p;

crypto/openssl/ssl/s3_enc.c

215

OPENSSL_clear_free(s->s3.tmp.key_block, s->s3.tmp.key_block_length);

crypto/openssl/ssl/s3_enc.c

216

s->s3.tmp.key_block = NULL;

crypto/openssl/ssl/s3_enc.c

217

s->s3.tmp.key_block_length = 0;

crypto/openssl/ssl/s3_enc.c

229

s->s3.handshake_buffer = buf;

crypto/openssl/ssl/s3_enc.c

230

(void)BIO_set_close(s->s3.handshake_buffer, BIO_CLOSE);

crypto/openssl/ssl/s3_enc.c

241

BIO_free(s->s3.handshake_buffer);

crypto/openssl/ssl/s3_enc.c

242

s->s3.handshake_buffer = NULL;

crypto/openssl/ssl/s3_enc.c

243

EVP_MD_CTX_free(s->s3.handshake_dgst);

crypto/openssl/ssl/s3_enc.c

244

s->s3.handshake_dgst = NULL;

crypto/openssl/ssl/s3_enc.c

251

if (s->s3.handshake_dgst == NULL) {

crypto/openssl/ssl/s3_enc.c

257

ret = BIO_write(s->s3.handshake_buffer, (void *)buf, (int)len);

crypto/openssl/ssl/s3_enc.c

263

ret = EVP_DigestUpdate(s->s3.handshake_dgst, buf, len);

crypto/openssl/ssl/s3_enc.c

278

if (s->s3.handshake_dgst == NULL) {

crypto/openssl/ssl/s3_enc.c

279

hdatalen = BIO_get_mem_data(s->s3.handshake_buffer, &hdata);

crypto/openssl/ssl/s3_enc.c

285

s->s3.handshake_dgst = EVP_MD_CTX_new();

crypto/openssl/ssl/s3_enc.c

286

if (s->s3.handshake_dgst == NULL) {

crypto/openssl/ssl/s3_enc.c

297

if (!EVP_DigestInit_ex(s->s3.handshake_dgst, md, NULL)

crypto/openssl/ssl/s3_enc.c

298

|| !EVP_DigestUpdate(s->s3.handshake_dgst, hdata, hdatalen)) {

crypto/openssl/ssl/s3_enc.c

304

BIO_free(s->s3.handshake_buffer);

crypto/openssl/ssl/s3_enc.c

305

s->s3.handshake_buffer = NULL;

crypto/openssl/ssl/s3_enc.c

332

if (EVP_MD_CTX_get_type(s->s3.handshake_dgst) != NID_md5_sha1) {

crypto/openssl/ssl/s3_enc.c

342

if (!EVP_MD_CTX_copy_ex(ctx, s->s3.handshake_dgst)) {

crypto/openssl/ssl/s3_enc.c

405

|| EVP_DigestUpdate(ctx, &(s->s3.client_random[0]),

crypto/openssl/ssl/s3_enc.c

408

|| EVP_DigestUpdate(ctx, &(s->s3.server_random[0]),

crypto/openssl/ssl/s3_enc.c

56

|| !EVP_DigestUpdate(s1, s->s3.server_random, SSL3_RANDOM_SIZE)

crypto/openssl/ssl/s3_enc.c

57

|| !EVP_DigestUpdate(s1, s->s3.client_random, SSL3_RANDOM_SIZE)

crypto/openssl/ssl/s3_lib.c

3835

EVP_PKEY_free(sc->s3.peer_tmp);

crypto/openssl/ssl/s3_lib.c

3836

sc->s3.peer_tmp = NULL;

crypto/openssl/ssl/s3_lib.c

3838

for (i = 0; i < sc->s3.tmp.num_ks_pkey; i++)

crypto/openssl/ssl/s3_lib.c

3839

if (sc->s3.tmp.ks_pkey[i] != NULL) {

crypto/openssl/ssl/s3_lib.c

3840

if (sc->s3.tmp.pkey == sc->s3.tmp.ks_pkey[i])

crypto/openssl/ssl/s3_lib.c

3841

sc->s3.tmp.pkey = NULL;

crypto/openssl/ssl/s3_lib.c

3843

EVP_PKEY_free(sc->s3.tmp.ks_pkey[i]);

crypto/openssl/ssl/s3_lib.c

3844

sc->s3.tmp.ks_pkey[i] = NULL;

crypto/openssl/ssl/s3_lib.c

3846

sc->s3.tmp.num_ks_pkey = 0;

crypto/openssl/ssl/s3_lib.c

3848

if (sc->s3.tmp.pkey != NULL) {

crypto/openssl/ssl/s3_lib.c

3849

EVP_PKEY_free(sc->s3.tmp.pkey);

crypto/openssl/ssl/s3_lib.c

3850

sc->s3.tmp.pkey = NULL;

crypto/openssl/ssl/s3_lib.c

3853

ssl_evp_cipher_free(sc->s3.tmp.new_sym_enc);

crypto/openssl/ssl/s3_lib.c

3854

ssl_evp_md_free(sc->s3.tmp.new_hash);

crypto/openssl/ssl/s3_lib.c

3856

OPENSSL_free(sc->s3.tmp.ctype);

crypto/openssl/ssl/s3_lib.c

3857

sk_X509_NAME_pop_free(sc->s3.tmp.peer_ca_names, X509_NAME_free);

crypto/openssl/ssl/s3_lib.c

3858

OPENSSL_free(sc->s3.tmp.ciphers_raw);

crypto/openssl/ssl/s3_lib.c

3859

OPENSSL_clear_free(sc->s3.tmp.pms, sc->s3.tmp.pmslen);

crypto/openssl/ssl/s3_lib.c

3860

OPENSSL_free(sc->s3.tmp.peer_sigalgs);

crypto/openssl/ssl/s3_lib.c

3861

OPENSSL_free(sc->s3.tmp.peer_cert_sigalgs);

crypto/openssl/ssl/s3_lib.c

3862

OPENSSL_free(sc->s3.tmp.valid_flags);

crypto/openssl/ssl/s3_lib.c

3864

OPENSSL_free(sc->s3.alpn_selected);

crypto/openssl/ssl/s3_lib.c

3865

OPENSSL_free(sc->s3.alpn_proposed);

crypto/openssl/ssl/s3_lib.c

3869

OPENSSL_free(sc->s3.tmp.psk);

crypto/openssl/ssl/s3_lib.c

3875

memset(&sc->s3, 0, sizeof(sc->s3));

crypto/openssl/ssl/s3_lib.c

3888

OPENSSL_free(sc->s3.tmp.ctype);

crypto/openssl/ssl/s3_lib.c

3889

sk_X509_NAME_pop_free(sc->s3.tmp.peer_ca_names, X509_NAME_free);

crypto/openssl/ssl/s3_lib.c

3890

OPENSSL_free(sc->s3.tmp.ciphers_raw);

crypto/openssl/ssl/s3_lib.c

3891

OPENSSL_clear_free(sc->s3.tmp.pms, sc->s3.tmp.pmslen);

crypto/openssl/ssl/s3_lib.c

3892

OPENSSL_free(sc->s3.tmp.peer_sigalgs);

crypto/openssl/ssl/s3_lib.c

3893

OPENSSL_free(sc->s3.tmp.peer_cert_sigalgs);

crypto/openssl/ssl/s3_lib.c

3894

OPENSSL_free(sc->s3.tmp.valid_flags);

crypto/openssl/ssl/s3_lib.c

3896

EVP_PKEY_free(sc->s3.peer_tmp);

crypto/openssl/ssl/s3_lib.c

3898

for (i = 0; i < sc->s3.tmp.num_ks_pkey; i++)

crypto/openssl/ssl/s3_lib.c

3899

if (sc->s3.tmp.ks_pkey[i] != NULL) {

crypto/openssl/ssl/s3_lib.c

3900

if (sc->s3.tmp.pkey == sc->s3.tmp.ks_pkey[i])

crypto/openssl/ssl/s3_lib.c

3901

sc->s3.tmp.pkey = NULL;

crypto/openssl/ssl/s3_lib.c

3903

EVP_PKEY_free(sc->s3.tmp.ks_pkey[i]);

crypto/openssl/ssl/s3_lib.c

3904

sc->s3.tmp.ks_pkey[i] = NULL;

crypto/openssl/ssl/s3_lib.c

3906

sc->s3.tmp.num_ks_pkey = 0;

crypto/openssl/ssl/s3_lib.c

3908

if (sc->s3.tmp.pkey != NULL) {

crypto/openssl/ssl/s3_lib.c

3909

EVP_PKEY_free(sc->s3.tmp.pkey);

crypto/openssl/ssl/s3_lib.c

3910

sc->s3.tmp.pkey = NULL;

crypto/openssl/ssl/s3_lib.c

3915

OPENSSL_free(sc->s3.alpn_selected);

crypto/openssl/ssl/s3_lib.c

3916

OPENSSL_free(sc->s3.alpn_proposed);

crypto/openssl/ssl/s3_lib.c

3922

flags = sc->s3.flags & (TLS1_FLAGS_QUIC | TLS1_FLAGS_QUIC_INTERNAL);

crypto/openssl/ssl/s3_lib.c

3923

memset(&sc->s3, 0, sizeof(sc->s3));

crypto/openssl/ssl/s3_lib.c

3924

sc->s3.flags |= flags;

crypto/openssl/ssl/s3_lib.c

3966

ret = sc->s3.num_renegotiations;

crypto/openssl/ssl/s3_lib.c

3969

ret = sc->s3.num_renegotiations;

crypto/openssl/ssl/s3_lib.c

3970

sc->s3.num_renegotiations = 0;

crypto/openssl/ssl/s3_lib.c

3973

ret = sc->s3.total_renegotiations;

crypto/openssl/ssl/s3_lib.c

3976

ret = (int)(sc->s3.flags);

crypto/openssl/ssl/s3_lib.c

4124

cipher = sc->s3.tmp.new_cipher;

crypto/openssl/ssl/s3_lib.c

4133

if (sc->s3.tmp.cert == NULL)

crypto/openssl/ssl/s3_lib.c

4135

sc->cert->key = sc->s3.tmp.cert;

crypto/openssl/ssl/s3_lib.c

4194

if (SSL_CONNECTION_IS_TLS13(sc) && sc->s3.did_kex)

crypto/openssl/ssl/s3_lib.c

4195

id = sc->s3.group_id;

crypto/openssl/ssl/s3_lib.c

4215

if (sc->server || !sc->s3.tmp.cert_req)

crypto/openssl/ssl/s3_lib.c

4218

*pctype = sc->s3.tmp.ctype;

crypto/openssl/ssl/s3_lib.c

4219

return sc->s3.tmp.ctype_len;

crypto/openssl/ssl/s3_lib.c

4243

if (parg == NULL || sc->s3.tmp.peer_sigalg == NULL)

crypto/openssl/ssl/s3_lib.c

4245

*(const char **)parg = sc->s3.tmp.peer_sigalg->name;

crypto/openssl/ssl/s3_lib.c

4249

if (sc->s3.tmp.peer_sigalg == NULL)

crypto/openssl/ssl/s3_lib.c

4251

*(int *)parg = sc->s3.tmp.peer_sigalg->hash;

crypto/openssl/ssl/s3_lib.c

4255

if (parg == NULL || sc->s3.tmp.sigalg == NULL)

crypto/openssl/ssl/s3_lib.c

4257

*(const char **)parg = sc->s3.tmp.sigalg->name;

crypto/openssl/ssl/s3_lib.c

4261

if (sc->s3.tmp.sigalg == NULL)

crypto/openssl/ssl/s3_lib.c

4263

*(int *)parg = sc->s3.tmp.sigalg->hash;

crypto/openssl/ssl/s3_lib.c

4267

if (sc->session == NULL || sc->s3.peer_tmp == NULL) {

crypto/openssl/ssl/s3_lib.c

4270

if (!EVP_PKEY_up_ref(sc->s3.peer_tmp))

crypto/openssl/ssl/s3_lib.c

4273

*(EVP_PKEY **)parg = sc->s3.peer_tmp;

crypto/openssl/ssl/s3_lib.c

4278

if (sc->session == NULL || sc->s3.tmp.pkey == NULL) {

crypto/openssl/ssl/s3_lib.c

4281

if (!EVP_PKEY_up_ref(sc->s3.tmp.pkey))

crypto/openssl/ssl/s3_lib.c

4284

*(EVP_PKEY **)parg = sc->s3.tmp.pkey;

crypto/openssl/ssl/s3_lib.c

4840

mask_k = s->s3.tmp.mask_k;

crypto/openssl/ssl/s3_lib.c

4841

mask_a = s->s3.tmp.mask_a;

crypto/openssl/ssl/s3_lib.c

4881

&& s->s3.is_probably_safari) {

crypto/openssl/ssl/s3_lib.c

4921

alg_k = s->s3.tmp.new_cipher->algorithm_mkey;

crypto/openssl/ssl/s3_lib.c

5002

if (sc->s3.alert_dispatch > 0)

crypto/openssl/ssl/s3_lib.c

5004

} else if (sc->s3.alert_dispatch > 0) {

crypto/openssl/ssl/s3_lib.c

5027

&& sc->s3.alert_dispatch == SSL_ALERT_DISPATCH_NONE)

crypto/openssl/ssl/s3_lib.c

5041

if (sc->s3.renegotiate)

crypto/openssl/ssl/s3_lib.c

5058

if (sc->s3.renegotiate)

crypto/openssl/ssl/s3_lib.c

5060

sc->s3.in_read_app_data = 1;

crypto/openssl/ssl/s3_lib.c

5063

if ((ret == -1) && (sc->s3.in_read_app_data == 2)) {

crypto/openssl/ssl/s3_lib.c

5076

sc->s3.in_read_app_data = 0;

crypto/openssl/ssl/s3_lib.c

5101

sc->s3.renegotiate = 1;

crypto/openssl/ssl/s3_lib.c

5121

if (sc->s3.renegotiate) {

crypto/openssl/ssl/s3_lib.c

5131

sc->s3.renegotiate = 0;

crypto/openssl/ssl/s3_lib.c

5132

sc->s3.num_renegotiations++;

crypto/openssl/ssl/s3_lib.c

5133

sc->s3.total_renegotiations++;

crypto/openssl/ssl/s3_lib.c

5151

if (s->s3.tmp.new_cipher == NULL)

crypto/openssl/ssl/s3_lib.c

5153

alg2 = s->s3.tmp.new_cipher->algorithm2;

crypto/openssl/ssl/s3_lib.c

5157

} else if (s->s3.tmp.new_cipher->algorithm_mkey & SSL_PSK) {

crypto/openssl/ssl/s3_lib.c

5208

unsigned long alg_k = s->s3.tmp.new_cipher->algorithm_mkey;

crypto/openssl/ssl/s3_lib.c

5215

size_t psklen = s->s3.tmp.psklen;

crypto/openssl/ssl/s3_lib.c

5236

memcpy(t, s->s3.tmp.psk, psklen);

crypto/openssl/ssl/s3_lib.c

5238

OPENSSL_clear_free(s->s3.tmp.psk, psklen);

crypto/openssl/ssl/s3_lib.c

5239

s->s3.tmp.psk = NULL;

crypto/openssl/ssl/s3_lib.c

5240

s->s3.tmp.psklen = 0;

crypto/openssl/ssl/s3_lib.c

5271

s->s3.tmp.pms = NULL;

crypto/openssl/ssl/s3_lib.c

5272

s->s3.tmp.pmslen = 0;

crypto/openssl/ssl/s3_lib.c

5445

s->s3.tmp.pms = pms;

crypto/openssl/ssl/s3_lib.c

5446

s->s3.tmp.pmslen = pmslen;

crypto/openssl/ssl/s3_lib.c

5497

s->s3.tmp.pms = pms;

crypto/openssl/ssl/s3_lib.c

5498

s->s3.tmp.pmslen = pmslen;

crypto/openssl/ssl/s3_lib.c

5550

s->s3.tmp.pms = pms;

crypto/openssl/ssl/s3_lib.c

5551

s->s3.tmp.pmslen = pmslen;

crypto/openssl/ssl/s3_lib.c

5578

if (SSL_CONNECTION_IS_TLS13(sc) && sc->s3.did_kex)

crypto/openssl/ssl/s3_lib.c

5579

id = sc->s3.group_id;

crypto/openssl/ssl/s3_msg.c

104

templ.buf = &sc->s3.send_alert[0];

crypto/openssl/ssl/s3_msg.c

108

if (sc->s3.alert_dispatch != SSL_ALERT_DISPATCH_RETRY) {

crypto/openssl/ssl/s3_msg.c

114

sc->s3.alert_dispatch = SSL_ALERT_DISPATCH_NONE;

crypto/openssl/ssl/s3_msg.c

125

sc->s3.alert_dispatch = SSL_ALERT_DISPATCH_NONE;

crypto/openssl/ssl/s3_msg.c

133

sc->s3.alert_dispatch = SSL_ALERT_DISPATCH_RETRY;

crypto/openssl/ssl/s3_msg.c

143

sc->s3.alert_dispatch = SSL_ALERT_DISPATCH_NONE;

crypto/openssl/ssl/s3_msg.c

146

sc->msg_callback(1, sc->version, SSL3_RT_ALERT, sc->s3.send_alert,

crypto/openssl/ssl/s3_msg.c

155

j = (sc->s3.send_alert[0] << 8) | sc->s3.send_alert[1];

crypto/openssl/ssl/s3_msg.c

23

if (s->s3.tmp.key_block == NULL) {

crypto/openssl/ssl/s3_msg.c

30

s->session->cipher = s->s3.tmp.new_cipher;

crypto/openssl/ssl/s3_msg.c

65

s->s3.alert_dispatch = SSL_ALERT_DISPATCH_PENDING;

crypto/openssl/ssl/s3_msg.c

66

s->s3.send_alert[0] = level;

crypto/openssl/ssl/s3_msg.c

67

s->s3.send_alert[1] = desc;

crypto/openssl/ssl/s3_msg.c

91

sc->s3.alert_dispatch = SSL_ALERT_DISPATCH_NONE;

crypto/openssl/ssl/ssl_cert.c

644

return sc->s3.tmp.peer_ca_names;

crypto/openssl/ssl/ssl_cert.c

655

return sc->s3.tmp.peer_ca_names;

crypto/openssl/ssl/ssl_lib.c

1539

OPENSSL_free(s->s3.tmp.valid_flags);

crypto/openssl/ssl/ssl_lib.c

1800

ret = sc->s3.tmp.finish_md_len;

crypto/openssl/ssl/ssl_lib.c

1803

memcpy(buf, sc->s3.tmp.finish_md, count);

crypto/openssl/ssl/ssl_lib.c

1816

ret = sc->s3.tmp.peer_finish_md_len;

crypto/openssl/ssl/ssl_lib.c

1819

memcpy(buf, sc->s3.tmp.peer_finish_md, count);

crypto/openssl/ssl/ssl_lib.c

2605

if (sc->s3.alert_dispatch > 0) {

crypto/openssl/ssl/ssl_lib.c

3024

return sc->s3.send_connection_binding;

crypto/openssl/ssl/ssl_lib.c

3035

if (sc->s3.tmp.ciphers_raw == NULL)

crypto/openssl/ssl/ssl_lib.c

3037

*(unsigned char **)parg = sc->s3.tmp.ciphers_raw;

crypto/openssl/ssl/ssl_lib.c

3038

return (int)sc->s3.tmp.ciphers_rawlen;

crypto/openssl/ssl/ssl_lib.c

3803

*data = sc->s3.alpn_selected;

crypto/openssl/ssl/ssl_lib.c

3807

*len = (unsigned int)sc->s3.alpn_selected_len;

crypto/openssl/ssl/ssl_lib.c

4561

uint32_t *pvalid = s->s3.tmp.valid_flags;

crypto/openssl/ssl/ssl_lib.c

4674

s->s3.tmp.mask_k = mask_k;

crypto/openssl/ssl/ssl_lib.c

4675

s->s3.tmp.mask_a = mask_a;

crypto/openssl/ssl/ssl_lib.c

4680

if (s->s3.tmp.new_cipher->algorithm_auth & SSL_aECDSA) {

crypto/openssl/ssl/ssl_lib.c

4694

CERT_PKEY *cpk = s->s3.tmp.cert;

crypto/openssl/ssl/ssl_lib.c

4922

if ((sc->shutdown & SSL_RECEIVED_SHUTDOWN) && (sc->s3.warn_alert == SSL_AD_CLOSE_NOTIFY))

crypto/openssl/ssl/ssl_lib.c

5297

return sc->s3.tmp.new_cipher;

crypto/openssl/ssl/ssl_lib.c

5658

return sizeof(sc->s3.client_random);

crypto/openssl/ssl/ssl_lib.c

5659

if (outlen > sizeof(sc->s3.client_random))

crypto/openssl/ssl/ssl_lib.c

5660

outlen = sizeof(sc->s3.client_random);

crypto/openssl/ssl/ssl_lib.c

5661

memcpy(out, sc->s3.client_random, outlen);

crypto/openssl/ssl/ssl_lib.c

5673

return sizeof(sc->s3.server_random);

crypto/openssl/ssl/ssl_lib.c

5674

if (outlen > sizeof(sc->s3.server_random))

crypto/openssl/ssl/ssl_lib.c

5675

outlen = sizeof(sc->s3.server_random);

crypto/openssl/ssl/ssl_lib.c

5676

memcpy(out, sc->s3.server_random, outlen);

crypto/openssl/ssl/ssl_lib.c

6067

EVP_MD_CTX *hdgst = s->s3.handshake_dgst;

crypto/openssl/ssl/ssl_lib.c

7035

sc->s3.client_random,

crypto/openssl/ssl/ssl_lib.c

7059

OPENSSL_free(s->s3.tmp.ciphers_raw);

crypto/openssl/ssl/ssl_lib.c

7060

s->s3.tmp.ciphers_raw = NULL;

crypto/openssl/ssl/ssl_lib.c

7061

s->s3.tmp.ciphers_rawlen = 0;

crypto/openssl/ssl/ssl_lib.c

7077

s->s3.tmp.ciphers_raw = raw;

crypto/openssl/ssl/ssl_lib.c

7082

for (s->s3.tmp.ciphers_rawlen = 0;

crypto/openssl/ssl/ssl_lib.c

7092

OPENSSL_free(s->s3.tmp.ciphers_raw);

crypto/openssl/ssl/ssl_lib.c

7093

s->s3.tmp.ciphers_raw = NULL;

crypto/openssl/ssl/ssl_lib.c

7094

s->s3.tmp.ciphers_rawlen = 0;

crypto/openssl/ssl/ssl_lib.c

7098

s->s3.tmp.ciphers_rawlen += TLS_CIPHER_LEN;

crypto/openssl/ssl/ssl_lib.c

7100

} else if (!PACKET_memdup(cipher_suites, &s->s3.tmp.ciphers_raw,

crypto/openssl/ssl/ssl_lib.c

7101

&s->s3.tmp.ciphers_rawlen)) {

crypto/openssl/ssl/ssl_lib.c

7315

sc->s3.flags |= TLS1_FLAGS_STATELESS;

crypto/openssl/ssl/ssl_lib.c

7317

sc->s3.flags &= ~TLS1_FLAGS_STATELESS;

crypto/openssl/ssl/ssl_local.h

1483

} s3;

crypto/openssl/ssl/ssl_local.h

2298

#define SSL_USE_PSS(s) (s->s3.tmp.peer_sigalg != NULL && s->s3.tmp.peer_sigalg->sig == EVP_PKEY_RSA_PSS)

crypto/openssl/ssl/ssl_local.h

277

#define SSL_IS_FIRST_HANDSHAKE(s) ((s)->s3.tmp.finish_md_len == 0 \

crypto/openssl/ssl/ssl_local.h

278

|| (s)->s3.tmp.peer_finish_md_len == 0)

crypto/openssl/ssl/ssl_local.h

300

#define SSL_READ_ETM(s) (s->s3.flags & TLS1_FLAGS_ENCRYPT_THEN_MAC_READ)

crypto/openssl/ssl/ssl_local.h

301

#define SSL_WRITE_ETM(s) (s->s3.flags & TLS1_FLAGS_ENCRYPT_THEN_MAC_WRITE)

crypto/openssl/ssl/ssl_local.h

303

#define SSL_IS_QUIC_HANDSHAKE(s) (((s)->s3.flags & TLS1_FLAGS_QUIC) != 0)

crypto/openssl/ssl/ssl_local.h

304

#define SSL_IS_QUIC_INT_HANDSHAKE(s) (((s)->s3.flags & TLS1_FLAGS_QUIC_INTERNAL) != 0)

crypto/openssl/ssl/ssl_sess.c

485

if (s->s3.flags & TLS1_FLAGS_RECEIVED_EXTMS)

crypto/openssl/ssl/ssl_sess.c

682

if (!(s->s3.flags & TLS1_FLAGS_RECEIVED_EXTMS)) {

crypto/openssl/ssl/ssl_sess.c

687

} else if (s->s3.flags & TLS1_FLAGS_RECEIVED_EXTMS) {

crypto/openssl/ssl/statem/extensions.c

1043

alg_k = s->s3.tmp.new_cipher->algorithm_mkey;

crypto/openssl/ssl/statem/extensions.c

1044

alg_a = s->s3.tmp.new_cipher->algorithm_auth;

crypto/openssl/ssl/statem/extensions.c

1104

s->s3.npn_seen = 0;

crypto/openssl/ssl/statem/extensions.c

1112

OPENSSL_free(s->s3.alpn_selected);

crypto/openssl/ssl/statem/extensions.c

1113

s->s3.alpn_selected = NULL;

crypto/openssl/ssl/statem/extensions.c

1114

s->s3.alpn_selected_len = 0;

crypto/openssl/ssl/statem/extensions.c

1116

OPENSSL_free(s->s3.alpn_proposed);

crypto/openssl/ssl/statem/extensions.c

1117

s->s3.alpn_proposed = NULL;

crypto/openssl/ssl/statem/extensions.c

1118

s->s3.alpn_proposed_len = 0;

crypto/openssl/ssl/statem/extensions.c

1146

OPENSSL_free(s->s3.tmp.peer_sigalgs);

crypto/openssl/ssl/statem/extensions.c

1147

s->s3.tmp.peer_sigalgs = NULL;

crypto/openssl/ssl/statem/extensions.c

1148

s->s3.tmp.peer_sigalgslen = 0;

crypto/openssl/ssl/statem/extensions.c

1157

OPENSSL_free(s->s3.tmp.peer_cert_sigalgs);

crypto/openssl/ssl/statem/extensions.c

1158

s->s3.tmp.peer_cert_sigalgs = NULL;

crypto/openssl/ssl/statem/extensions.c

1159

s->s3.tmp.peer_cert_sigalgslen = 0;

crypto/openssl/ssl/statem/extensions.c

1192

if (s->s3.flags & TLS1_FLAGS_RECEIVED_EXTMS) {

crypto/openssl/ssl/statem/extensions.c

1193

s->s3.flags &= ~TLS1_FLAGS_RECEIVED_EXTMS;

crypto/openssl/ssl/statem/extensions.c

1194

s->s3.flags |= TLS1_FLAGS_REQUIRED_EXTMS;

crypto/openssl/ssl/statem/extensions.c

1206

if (!(s->s3.flags & TLS1_FLAGS_RECEIVED_EXTMS)

crypto/openssl/ssl/statem/extensions.c

1207

&& (s->s3.flags & TLS1_FLAGS_REQUIRED_EXTMS)) {

crypto/openssl/ssl/statem/extensions.c

1216

if (!(s->s3.flags & TLS1_FLAGS_RECEIVED_EXTMS) != !(s->session->flags & SSL_SESS_FLAG_EXTMS)) {

crypto/openssl/ssl/statem/extensions.c

1227

sk_X509_NAME_pop_free(s->s3.tmp.peer_ca_names, X509_NAME_free);

crypto/openssl/ssl/statem/extensions.c

1228

s->s3.tmp.peer_ca_names = NULL;

crypto/openssl/ssl/statem/extensions.c

1375

if (s->s3.peer_tmp != NULL) {

crypto/openssl/ssl/statem/extensions.c

1377

if ((s->s3.flags & TLS1_FLAGS_STATELESS) != 0

crypto/openssl/ssl/statem/extensions.c

1398

if (s->s3.group_id_candidate != 0) {

crypto/openssl/ssl/statem/extensions.c

1400

s->s3.group_id = s->s3.group_id_candidate;

crypto/openssl/ssl/statem/extensions.c

1413

if ((s->s3.flags & TLS1_FLAGS_STATELESS) != 0

crypto/openssl/ssl/statem/extensions.c

1558

hdatalen = hdatalen_l = BIO_get_mem_data(s->s3.handshake_buffer, &hdata);

crypto/openssl/ssl/statem/extensions_clnt.c

1305

size_t expected_len = s->s3.previous_client_finished_len

crypto/openssl/ssl/statem/extensions_clnt.c

1306

+ s->s3.previous_server_finished_len;

crypto/openssl/ssl/statem/extensions_clnt.c

1312

|| s->s3.previous_client_finished_len != 0)

crypto/openssl/ssl/statem/extensions_clnt.c

1314

|| s->s3.previous_server_finished_len != 0)) {

crypto/openssl/ssl/statem/extensions_clnt.c

1337

if (!PACKET_get_bytes(pkt, &data, s->s3.previous_client_finished_len)

crypto/openssl/ssl/statem/extensions_clnt.c

1338

|| memcmp(data, s->s3.previous_client_finished,

crypto/openssl/ssl/statem/extensions_clnt.c

1339

s->s3.previous_client_finished_len)

crypto/openssl/ssl/statem/extensions_clnt.c

1345

if (!PACKET_get_bytes(pkt, &data, s->s3.previous_server_finished_len)

crypto/openssl/ssl/statem/extensions_clnt.c

1346

|| memcmp(data, s->s3.previous_server_finished,

crypto/openssl/ssl/statem/extensions_clnt.c

1347

s->s3.previous_server_finished_len)

crypto/openssl/ssl/statem/extensions_clnt.c

1352

s->s3.send_connection_binding = 1;

crypto/openssl/ssl/statem/extensions_clnt.c

1665

s->s3.npn_seen = 1;

crypto/openssl/ssl/statem/extensions_clnt.c

1679

if (!s->s3.alpn_sent) {

crypto/openssl/ssl/statem/extensions_clnt.c

1717

OPENSSL_free(s->s3.alpn_selected);

crypto/openssl/ssl/statem/extensions_clnt.c

1718

s->s3.alpn_selected = OPENSSL_malloc(len);

crypto/openssl/ssl/statem/extensions_clnt.c

1719

if (s->s3.alpn_selected == NULL) {

crypto/openssl/ssl/statem/extensions_clnt.c

1720

s->s3.alpn_selected_len = 0;

crypto/openssl/ssl/statem/extensions_clnt.c

1724

if (!PACKET_copy_bytes(pkt, s->s3.alpn_selected, len)) {

crypto/openssl/ssl/statem/extensions_clnt.c

1728

s->s3.alpn_selected_len = len;

crypto/openssl/ssl/statem/extensions_clnt.c

1732

|| memcmp(s->session->ext.alpn_selected, s->s3.alpn_selected, len)

crypto/openssl/ssl/statem/extensions_clnt.c

1746

s->session->ext.alpn_selected = OPENSSL_memdup(s->s3.alpn_selected, s->s3.alpn_selected_len);

crypto/openssl/ssl/statem/extensions_clnt.c

1752

s->session->ext.alpn_selected_len = s->s3.alpn_selected_len;

crypto/openssl/ssl/statem/extensions_clnt.c

1813

&& s->s3.tmp.new_cipher->algorithm_mac != SSL_AEAD

crypto/openssl/ssl/statem/extensions_clnt.c

1814

&& s->s3.tmp.new_cipher->algorithm_enc != SSL_RC4

crypto/openssl/ssl/statem/extensions_clnt.c

1815

&& s->s3.tmp.new_cipher->algorithm_enc != SSL_eGOST2814789CNT

crypto/openssl/ssl/statem/extensions_clnt.c

1816

&& s->s3.tmp.new_cipher->algorithm_enc != SSL_eGOST2814789CNT12

crypto/openssl/ssl/statem/extensions_clnt.c

1817

&& s->s3.tmp.new_cipher->algorithm_enc != SSL_MAGMA

crypto/openssl/ssl/statem/extensions_clnt.c

1818

&& s->s3.tmp.new_cipher->algorithm_enc != SSL_KUZNYECHIK)

crypto/openssl/ssl/statem/extensions_clnt.c

1829

s->s3.flags |= TLS1_FLAGS_RECEIVED_EXTMS;

crypto/openssl/ssl/statem/extensions_clnt.c

1879

EVP_PKEY *ckey = s->s3.tmp.pkey, *skey = NULL;

crypto/openssl/ssl/statem/extensions_clnt.c

1885

if (ckey == NULL || s->s3.peer_tmp != NULL) {

crypto/openssl/ssl/statem/extensions_clnt.c

1909

for (i = 0; i < s->s3.tmp.num_ks_pkey; i++) {

crypto/openssl/ssl/statem/extensions_clnt.c

1910

if (s->s3.tmp.ks_group_id[i] == group_id) {

crypto/openssl/ssl/statem/extensions_clnt.c

1931

s->s3.group_id = group_id;

crypto/openssl/ssl/statem/extensions_clnt.c

1934

for (i = 0; i < s->s3.tmp.num_ks_pkey; i++) {

crypto/openssl/ssl/statem/extensions_clnt.c

1935

if (s->s3.tmp.ks_pkey[i] != NULL) {

crypto/openssl/ssl/statem/extensions_clnt.c

1936

EVP_PKEY_free(s->s3.tmp.ks_pkey[i]);

crypto/openssl/ssl/statem/extensions_clnt.c

1937

s->s3.tmp.ks_pkey[i] = NULL;

crypto/openssl/ssl/statem/extensions_clnt.c

1940

s->s3.tmp.num_ks_pkey = 0;

crypto/openssl/ssl/statem/extensions_clnt.c

1941

s->s3.tmp.pkey = NULL;

crypto/openssl/ssl/statem/extensions_clnt.c

1950

for (i = 0; i < s->s3.tmp.num_ks_pkey; i++) {

crypto/openssl/ssl/statem/extensions_clnt.c

1951

if (s->s3.tmp.ks_group_id[i] == group_id) {

crypto/openssl/ssl/statem/extensions_clnt.c

1953

ckey = s->s3.tmp.ks_pkey[i];

crypto/openssl/ssl/statem/extensions_clnt.c

1954

s->s3.group_id = group_id;

crypto/openssl/ssl/statem/extensions_clnt.c

1955

s->s3.tmp.pkey = ckey;

crypto/openssl/ssl/statem/extensions_clnt.c

2025

s->s3.peer_tmp = skey;

crypto/openssl/ssl/statem/extensions_clnt.c

2036

s->s3.did_kex = 1;

crypto/openssl/ssl/statem/extensions_clnt.c

455

s->s3.alpn_sent = 0;

crypto/openssl/ssl/statem/extensions_clnt.c

469

s->s3.alpn_sent = 1;

crypto/openssl/ssl/statem/extensions_clnt.c

52

|| !WPACKET_sub_memcpy_u8(pkt, s->s3.previous_client_finished,

crypto/openssl/ssl/statem/extensions_clnt.c

53

s->s3.previous_client_finished_len)

crypto/openssl/ssl/statem/extensions_clnt.c

646

if (loop_num < s->s3.tmp.num_ks_pkey) {

crypto/openssl/ssl/statem/extensions_clnt.c

648

|| !ossl_assert(s->s3.tmp.ks_pkey[loop_num] != NULL)) {

crypto/openssl/ssl/statem/extensions_clnt.c

655

key_share_key = s->s3.tmp.ks_pkey[loop_num];

crypto/openssl/ssl/statem/extensions_clnt.c

681

s->s3.tmp.pkey = key_share_key;

crypto/openssl/ssl/statem/extensions_clnt.c

682

s->s3.group_id = group_id;

crypto/openssl/ssl/statem/extensions_clnt.c

685

s->s3.tmp.ks_pkey[loop_num] = key_share_key;

crypto/openssl/ssl/statem/extensions_clnt.c

686

s->s3.tmp.ks_group_id[loop_num] = group_id;

crypto/openssl/ssl/statem/extensions_clnt.c

687

if (loop_num >= s->s3.tmp.num_ks_pkey)

crypto/openssl/ssl/statem/extensions_clnt.c

688

s->s3.tmp.num_ks_pkey++;

crypto/openssl/ssl/statem/extensions_clnt.c

694

if (key_share_key != s->s3.tmp.ks_pkey[loop_num])

crypto/openssl/ssl/statem/extensions_clnt.c

736

if (s->s3.group_id != 0 && s->s3.tmp.pkey == NULL) {

crypto/openssl/ssl/statem/extensions_clnt.c

738

group_id = s->s3.group_id;

crypto/openssl/ssl/statem/extensions_clnt.c

739

s->s3.tmp.num_ks_pkey = 0;

crypto/openssl/ssl/statem/extensions_srvr.c

1022

|| (s->s3.flags & TLS1_FLAGS_STATELESS) == 0)

crypto/openssl/ssl/statem/extensions_srvr.c

1109

if (group_id != s->s3.group_id

crypto/openssl/ssl/statem/extensions_srvr.c

1110

|| s->s3.tmp.new_cipher

crypto/openssl/ssl/statem/extensions_srvr.c

1160

|| !ssl->method->put_cipher_by_char(s->s3.tmp.new_cipher, &hrrpkt,

crypto/openssl/ssl/statem/extensions_srvr.c

1179

|| !WPACKET_put_bytes_u16(&hrrpkt, s->s3.group_id)

crypto/openssl/ssl/statem/extensions_srvr.c

1257

s->s3.flags |= TLS1_FLAGS_RECEIVED_EXTMS;

crypto/openssl/ssl/statem/extensions_srvr.c

1499

s->s3.tmp.new_cipher->algorithm2)))) {

crypto/openssl/ssl/statem/extensions_srvr.c

1575

if (!s->s3.send_connection_binding)

crypto/openssl/ssl/statem/extensions_srvr.c

1582

|| !WPACKET_memcpy(pkt, s->s3.previous_client_finished,

crypto/openssl/ssl/statem/extensions_srvr.c

1583

s->s3.previous_client_finished_len)

crypto/openssl/ssl/statem/extensions_srvr.c

1584

|| !WPACKET_memcpy(pkt, s->s3.previous_server_finished,

crypto/openssl/ssl/statem/extensions_srvr.c

1585

s->s3.previous_server_finished_len)

crypto/openssl/ssl/statem/extensions_srvr.c

1645

unsigned long alg_k = s->s3.tmp.new_cipher->algorithm_mkey;

crypto/openssl/ssl/statem/extensions_srvr.c

1646

unsigned long alg_a = s->s3.tmp.new_cipher->algorithm_auth;

crypto/openssl/ssl/statem/extensions_srvr.c

1676

if (s->s3.group_id == 0)

crypto/openssl/ssl/statem/extensions_srvr.c

1698

if (s->s3.group_id == group)

crypto/openssl/ssl/statem/extensions_srvr.c

1792

int npn_seen = s->s3.npn_seen;

crypto/openssl/ssl/statem/extensions_srvr.c

1795

s->s3.npn_seen = 0;

crypto/openssl/ssl/statem/extensions_srvr.c

1807

s->s3.npn_seen = 1;

crypto/openssl/ssl/statem/extensions_srvr.c

1818

if (s->s3.alpn_selected == NULL)

crypto/openssl/ssl/statem/extensions_srvr.c

1825

|| !WPACKET_sub_memcpy_u8(pkt, s->s3.alpn_selected,

crypto/openssl/ssl/statem/extensions_srvr.c

1826

s->s3.alpn_selected_len)

crypto/openssl/ssl/statem/extensions_srvr.c

1869

if (s->s3.tmp.new_cipher->algorithm_mac == SSL_AEAD

crypto/openssl/ssl/statem/extensions_srvr.c

1870

|| s->s3.tmp.new_cipher->algorithm_enc == SSL_RC4

crypto/openssl/ssl/statem/extensions_srvr.c

1871

|| s->s3.tmp.new_cipher->algorithm_enc == SSL_eGOST2814789CNT

crypto/openssl/ssl/statem/extensions_srvr.c

1872

|| s->s3.tmp.new_cipher->algorithm_enc == SSL_eGOST2814789CNT12

crypto/openssl/ssl/statem/extensions_srvr.c

1873

|| s->s3.tmp.new_cipher->algorithm_enc == SSL_MAGMA

crypto/openssl/ssl/statem/extensions_srvr.c

1874

|| s->s3.tmp.new_cipher->algorithm_enc == SSL_KUZNYECHIK) {

crypto/openssl/ssl/statem/extensions_srvr.c

1892

if ((s->s3.flags & TLS1_FLAGS_RECEIVED_EXTMS) == 0)

crypto/openssl/ssl/statem/extensions_srvr.c

1931

EVP_PKEY *ckey = s->s3.peer_tmp, *skey = NULL;

crypto/openssl/ssl/statem/extensions_srvr.c

1941

|| !WPACKET_put_bytes_u16(pkt, s->s3.group_id)

crypto/openssl/ssl/statem/extensions_srvr.c

1971

|| !WPACKET_put_bytes_u16(pkt, s->s3.group_id)) {

crypto/openssl/ssl/statem/extensions_srvr.c

1977

s->s3.group_id))

crypto/openssl/ssl/statem/extensions_srvr.c

2011

s->s3.tmp.pkey = skey;

crypto/openssl/ssl/statem/extensions_srvr.c

2049

if (ssl_gensecret(s, s->s3.tmp.pms, s->s3.tmp.pmslen) == 0) {

crypto/openssl/ssl/statem/extensions_srvr.c

2054

s->s3.did_kex = 1;

crypto/openssl/ssl/statem/extensions_srvr.c

2076

if ((s->s3.flags & TLS1_FLAGS_STATELESS) == 0)

crypto/openssl/ssl/statem/extensions_srvr.c

2091

|| !WPACKET_put_bytes_u16(pkt, s->s3.group_id)

crypto/openssl/ssl/statem/extensions_srvr.c

2092

|| !ssl->method->put_cipher_by_char(s->s3.tmp.new_cipher, pkt,

crypto/openssl/ssl/statem/extensions_srvr.c

2095

|| !WPACKET_put_bytes_u8(pkt, s->s3.peer_tmp == NULL)

crypto/openssl/ssl/statem/extensions_srvr.c

2206

if (((s->s3.tmp.new_cipher->id & 0xFFFF) != 0x80

crypto/openssl/ssl/statem/extensions_srvr.c

2207

&& (s->s3.tmp.new_cipher->id & 0xFFFF) != 0x81)

crypto/openssl/ssl/statem/extensions_srvr.c

441

s->s3.npn_seen = 1;

crypto/openssl/ssl/statem/extensions_srvr.c

475

OPENSSL_free(s->s3.alpn_proposed);

crypto/openssl/ssl/statem/extensions_srvr.c

476

s->s3.alpn_proposed = NULL;

crypto/openssl/ssl/statem/extensions_srvr.c

477

s->s3.alpn_proposed_len = 0;

crypto/openssl/ssl/statem/extensions_srvr.c

479

&s->s3.alpn_proposed, &s->s3.alpn_proposed_len)) {

crypto/openssl/ssl/statem/extensions_srvr.c

58

if (ilen != s->s3.previous_client_finished_len) {

crypto/openssl/ssl/statem/extensions_srvr.c

623

s->s3.group_id = ksgroup;

crypto/openssl/ssl/statem/extensions_srvr.c

624

s->s3.group_id_candidate = ksgroup;

crypto/openssl/ssl/statem/extensions_srvr.c

627

if ((s->s3.peer_tmp = ssl_generate_param_group(s, ksgroup)) == NULL) {

crypto/openssl/ssl/statem/extensions_srvr.c

63

ok = memcmp(data, s->s3.previous_client_finished,

crypto/openssl/ssl/statem/extensions_srvr.c

633

if (tls13_set_encoded_pub_key(s->s3.peer_tmp,

crypto/openssl/ssl/statem/extensions_srvr.c

64

s->s3.previous_client_finished_len);

crypto/openssl/ssl/statem/extensions_srvr.c

67

if ((data[0] ^ s->s3.previous_client_finished[0]) != 0xFF) {

crypto/openssl/ssl/statem/extensions_srvr.c

687

if (s->s3.group_id != 0

crypto/openssl/ssl/statem/extensions_srvr.c

688

&& (group_id != s->s3.group_id

crypto/openssl/ssl/statem/extensions_srvr.c

712

if (s->s3.group_id != 0) {

crypto/openssl/ssl/statem/extensions_srvr.c

719

if (!tls_accept_ksgroup(s, s->s3.group_id, &encoded_pubkey))

crypto/openssl/ssl/statem/extensions_srvr.c

77

s->s3.send_connection_binding = 1;

crypto/openssl/ssl/statem/extensions_srvr.c

843

s->s3.group_id_candidate = 0;

crypto/openssl/ssl/statem/extensions_srvr.c

848

if (s->s3.peer_tmp != NULL) {

crypto/openssl/ssl/statem/extensions_srvr.c

875

if (s->s3.group_id != 0 && PACKET_remaining(&key_share_list) == 0) {

crypto/openssl/ssl/statem/extensions_srvr.c

951

s->s3.group_id_candidate = group_id_candidate;

crypto/openssl/ssl/statem/extensions_srvr.c

980

s->s3.group_id_candidate = group_id_candidate;

crypto/openssl/ssl/statem/statem.c

1024

return s->s3.previous_server_finished_len != 0

crypto/openssl/ssl/statem/statem.c

381

if ((s->s3.flags & TLS1_FLAGS_STATELESS) == 0 && !SSL_clear(ssl))

crypto/openssl/ssl/statem/statem.c

450

s->s3.change_cipher_spec = 0;

crypto/openssl/ssl/statem/statem.c

650

if (s->s3.tmp.message_size > max_message_size(s)) {

crypto/openssl/ssl/statem/statem.c

658

&& s->s3.tmp.message_size > 0

crypto/openssl/ssl/statem/statem.c

659

&& !grow_init_buf(s, s->s3.tmp.message_size + SSL3_HM_HEADER_LENGTH)) {

crypto/openssl/ssl/statem/statem.c

995

if (!s->s3.in_read_app_data || (s->s3.total_renegotiations == 0))

crypto/openssl/ssl/statem/statem_clnt.c

1205

p = s->s3.client_random;

crypto/openssl/ssl/statem/statem_clnt.c

1214

for (idx = 0; idx < sizeof(s->s3.client_random); idx++) {

crypto/openssl/ssl/statem/statem_clnt.c

1224

if (i && ssl_fill_hello_random(s, 0, p, sizeof(s->s3.client_random), DOWNGRADE_NONE) <= 0) {

crypto/openssl/ssl/statem/statem_clnt.c

1263

|| !WPACKET_memcpy(pkt, s->s3.client_random, SSL3_RANDOM_SIZE)) {

crypto/openssl/ssl/statem/statem_clnt.c

1336

|| s->s3.tmp.max_ver < TLS1_3_VERSION)) {

crypto/openssl/ssl/statem/statem_clnt.c

1419

if (SSL_CONNECTION_IS_TLS13(s) && s->s3.tmp.new_cipher != NULL

crypto/openssl/ssl/statem/statem_clnt.c

1420

&& s->s3.tmp.new_cipher->id != c->id) {

crypto/openssl/ssl/statem/statem_clnt.c

1461

s->s3.tmp.new_cipher = c;

crypto/openssl/ssl/statem/statem_clnt.c

1508

if (!PACKET_copy_bytes(pkt, s->s3.server_random, SSL3_RANDOM_SIZE)) {

crypto/openssl/ssl/statem/statem_clnt.c

1710

s->s3.tmp.min_ver = s->version;

crypto/openssl/ssl/statem/statem_clnt.c

1711

s->s3.tmp.max_ver = s->version;

crypto/openssl/ssl/statem/statem_clnt.c

1753

s->s3.tmp.new_compression = comp;

crypto/openssl/ssl/statem/statem_clnt.c

1870

if (s->ext.tls13_cookie_len == 0 && s->s3.tmp.pkey != NULL) {

crypto/openssl/ssl/statem/statem_clnt.c

1968

if ((clu->amask & sc->s3.tmp.new_cipher->algorithm_auth) == 0) {

crypto/openssl/ssl/statem/statem_clnt.c

2158

if ((clu->amask & s->s3.tmp.new_cipher->algorithm_auth) == 0) {

crypto/openssl/ssl/statem/statem_clnt.c

2276

if (s->s3.tmp.new_cipher->algorithm_auth & (SSL_aRSA | SSL_aDSS))

crypto/openssl/ssl/statem/statem_clnt.c

2358

s->s3.peer_tmp = peer_tmp;

crypto/openssl/ssl/statem/statem_clnt.c

2365

if (s->s3.tmp.new_cipher->algorithm_auth & (SSL_aRSA | SSL_aDSS))

crypto/openssl/ssl/statem/statem_clnt.c

2407

if ((s->s3.peer_tmp = ssl_generate_param_group(s, curve_id)) == NULL) {

crypto/openssl/ssl/statem/statem_clnt.c

2418

if (EVP_PKEY_set1_encoded_public_key(s->s3.peer_tmp,

crypto/openssl/ssl/statem/statem_clnt.c

2431

if (s->s3.tmp.new_cipher->algorithm_auth & SSL_aECDSA)

crypto/openssl/ssl/statem/statem_clnt.c

2433

else if (s->s3.tmp.new_cipher->algorithm_auth & SSL_aRSA)

crypto/openssl/ssl/statem/statem_clnt.c

2451

alg_k = s->s3.tmp.new_cipher->algorithm_mkey;

crypto/openssl/ssl/statem/statem_clnt.c

2455

EVP_PKEY_free(s->s3.peer_tmp);

crypto/openssl/ssl/statem/statem_clnt.c

2456

s->s3.peer_tmp = NULL;

crypto/openssl/ssl/statem/statem_clnt.c

2522

if (!tls1_lookup_md(sctx, s->s3.tmp.peer_sigalg, &md)) {

crypto/openssl/ssl/statem/statem_clnt.c

2578

if (!(s->s3.tmp.new_cipher->algorithm_auth & (SSL_aNULL | SSL_aSRP))

crypto/openssl/ssl/statem/statem_clnt.c

2604

if (s->s3.tmp.valid_flags != NULL)

crypto/openssl/ssl/statem/statem_clnt.c

2605

memset(s->s3.tmp.valid_flags, 0, s->ssl_pkey_num * sizeof(uint32_t));

crypto/openssl/ssl/statem/statem_clnt.c

2607

s->s3.tmp.valid_flags = OPENSSL_zalloc(s->ssl_pkey_num * sizeof(uint32_t));

crypto/openssl/ssl/statem/statem_clnt.c

2610

if (s->s3.tmp.valid_flags == NULL)

crypto/openssl/ssl/statem/statem_clnt.c

2627

OPENSSL_free(s->s3.tmp.ctype);

crypto/openssl/ssl/statem/statem_clnt.c

2628

s->s3.tmp.ctype = NULL;

crypto/openssl/ssl/statem/statem_clnt.c

2629

s->s3.tmp.ctype_len = 0;

crypto/openssl/ssl/statem/statem_clnt.c

2666

if (!PACKET_memdup(&ctypes, &s->s3.tmp.ctype, &s->s3.tmp.ctype_len)) {

crypto/openssl/ssl/statem/statem_clnt.c

2707

s->s3.tmp.cert_req = 1;

crypto/openssl/ssl/statem/statem_clnt.c

3009

if (s->s3.tmp.new_cipher->algorithm_mkey & SSL_kSRP) {

crypto/openssl/ssl/statem/statem_clnt.c

304

} else if (!(s->s3.tmp.new_cipher->algorithm_auth

crypto/openssl/ssl/statem/statem_clnt.c

3075

OPENSSL_free(s->s3.tmp.psk);

crypto/openssl/ssl/statem/statem_clnt.c

3076

s->s3.tmp.psk = tmppsk;

crypto/openssl/ssl/statem/statem_clnt.c

3077

s->s3.tmp.psklen = psklen;

crypto/openssl/ssl/statem/statem_clnt.c

314

|| ((s->s3.tmp.new_cipher->algorithm_mkey & SSL_PSK)

crypto/openssl/ssl/statem/statem_clnt.c

3177

s->s3.tmp.pms = pms;

crypto/openssl/ssl/statem/statem_clnt.c

3178

s->s3.tmp.pmslen = pmslen;

crypto/openssl/ssl/statem/statem_clnt.c

3197

skey = s->s3.peer_tmp;

crypto/openssl/ssl/statem/statem_clnt.c

3258

skey = s->s3.peer_tmp;

crypto/openssl/ssl/statem/statem_clnt.c

3310

if ((s->s3.tmp.new_cipher->algorithm_auth & SSL_aGOST12) != 0)

crypto/openssl/ssl/statem/statem_clnt.c

3357

|| EVP_DigestUpdate(ukm_hash, s->s3.client_random,

crypto/openssl/ssl/statem/statem_clnt.c

3360

|| EVP_DigestUpdate(ukm_hash, s->s3.server_random,

crypto/openssl/ssl/statem/statem_clnt.c

3393

s->s3.tmp.pms = pms;

crypto/openssl/ssl/statem/statem_clnt.c

3394

s->s3.tmp.pmslen = pmslen;

crypto/openssl/ssl/statem/statem_clnt.c

3411

if ((s->s3.tmp.new_cipher->algorithm_enc & SSL_MAGMA) != 0)

crypto/openssl/ssl/statem/statem_clnt.c

3413

else if ((s->s3.tmp.new_cipher->algorithm_enc & SSL_KUZNYECHIK) != 0)

crypto/openssl/ssl/statem/statem_clnt.c

3432

|| EVP_DigestUpdate(hash, s->s3.client_random, SSL3_RANDOM_SIZE) <= 0

crypto/openssl/ssl/statem/statem_clnt.c

3433

|| EVP_DigestUpdate(hash, s->s3.server_random, SSL3_RANDOM_SIZE) <= 0

crypto/openssl/ssl/statem/statem_clnt.c

347

if (ske_expected || ((s->s3.tmp.new_cipher->algorithm_mkey & SSL_PSK) && mt == SSL3_MT_SERVER_KEY_EXCHANGE)) {

crypto/openssl/ssl/statem/statem_clnt.c

3531

s->s3.tmp.pms = pms;

crypto/openssl/ssl/statem/statem_clnt.c

3532

s->s3.tmp.pmslen = pmslen;

crypto/openssl/ssl/statem/statem_clnt.c

3577

alg_k = s->s3.tmp.new_cipher->algorithm_mkey;

crypto/openssl/ssl/statem/statem_clnt.c

3612

OPENSSL_clear_free(s->s3.tmp.pms, s->s3.tmp.pmslen);

crypto/openssl/ssl/statem/statem_clnt.c

3613

s->s3.tmp.pms = NULL;

crypto/openssl/ssl/statem/statem_clnt.c

3614

s->s3.tmp.pmslen = 0;

crypto/openssl/ssl/statem/statem_clnt.c

3616

OPENSSL_clear_free(s->s3.tmp.psk, s->s3.tmp.psklen);

crypto/openssl/ssl/statem/statem_clnt.c

3617

s->s3.tmp.psk = NULL;

crypto/openssl/ssl/statem/statem_clnt.c

3618

s->s3.tmp.psklen = 0;

crypto/openssl/ssl/statem/statem_clnt.c

3628

pms = s->s3.tmp.pms;

crypto/openssl/ssl/statem/statem_clnt.c

3629

pmslen = s->s3.tmp.pmslen;

crypto/openssl/ssl/statem/statem_clnt.c

3633

if (s->s3.tmp.new_cipher->algorithm_mkey & SSL_kSRP) {

crypto/openssl/ssl/statem/statem_clnt.c

3642

if (pms == NULL && !(s->s3.tmp.new_cipher->algorithm_mkey & SSL_kPSK)) {

crypto/openssl/ssl/statem/statem_clnt.c

3691

s->s3.tmp.pms = NULL;

crypto/openssl/ssl/statem/statem_clnt.c

3692

s->s3.tmp.pmslen = 0;

crypto/openssl/ssl/statem/statem_clnt.c

3704

if (!tls_choose_sigalg(s, 0) || s->s3.tmp.sigalg == NULL)

crypto/openssl/ssl/statem/statem_clnt.c

3774

s->s3.tmp.cert_req = 0;

crypto/openssl/ssl/statem/statem_clnt.c

3778

s->s3.tmp.cert_req = 2;

crypto/openssl/ssl/statem/statem_clnt.c

3819

if (s->s3.tmp.cert_req != 2)

crypto/openssl/ssl/statem/statem_clnt.c

3971

alg_k = s->s3.tmp.new_cipher->algorithm_mkey;

crypto/openssl/ssl/statem/statem_clnt.c

3972

alg_a = s->s3.tmp.new_cipher->algorithm_auth;

crypto/openssl/ssl/statem/statem_clnt.c

3994

if ((alg_k & SSL_kDHE) && (s->s3.peer_tmp == NULL)) {

crypto/openssl/ssl/statem/statem_clnt.c

4171

if (ssl_version_cmp(s, maxproto, s->s3.tmp.max_ver) >= 0

crypto/openssl/ssl/statem/statem_clnt.c

4172

&& ssl_version_cmp(s, minproto, s->s3.tmp.max_ver) <= 0)

crypto/openssl/ssl/statem/statem_clnt.c

481

else if (s->s3.tmp.cert_req == 0)

crypto/openssl/ssl/statem/statem_clnt.c

500

if (s->s3.tmp.cert_req == 0)

crypto/openssl/ssl/statem/statem_clnt.c

511

st->hand_state = (s->s3.tmp.cert_req == 1) ? TLS_ST_CW_CERT_VRFY

crypto/openssl/ssl/statem/statem_clnt.c

59

&& (s->s3.tmp.new_cipher->algorithm_auth & SSL_aNULL))

crypto/openssl/ssl/statem/statem_clnt.c

60

|| (s->s3.tmp.new_cipher->algorithm_auth & (SSL_aSRP | SSL_aPSK)))

crypto/openssl/ssl/statem/statem_clnt.c

616

if (s->s3.tmp.cert_req)

crypto/openssl/ssl/statem/statem_clnt.c

637

if (s->s3.tmp.cert_req == 1) {

crypto/openssl/ssl/statem/statem_clnt.c

642

if (s->s3.flags & TLS1_FLAGS_SKIP_CERT_VERIFY) {

crypto/openssl/ssl/statem/statem_clnt.c

660

if (!SSL_CONNECTION_IS_DTLS(s) && s->s3.npn_seen)

crypto/openssl/ssl/statem/statem_clnt.c

75

long alg_k = s->s3.tmp.new_cipher->algorithm_mkey;

crypto/openssl/ssl/statem/statem_clnt.c

855

s->session->cipher = s->s3.tmp.new_cipher;

crypto/openssl/ssl/statem/statem_clnt.c

859

if (s->s3.tmp.new_compression == NULL)

crypto/openssl/ssl/statem/statem_clnt.c

862

s->session->compress_meth = s->s3.tmp.new_compression->id;

crypto/openssl/ssl/statem/statem_dtls.c

1054

s->s3.in_read_app_data = 2;

crypto/openssl/ssl/statem/statem_dtls.c

283

assert(s->s3.tmp.new_compression != NULL

crypto/openssl/ssl/statem/statem_dtls.c

365

*mt = s->s3.tmp.message_type;

crypto/openssl/ssl/statem/statem_dtls.c

409

if (s->s3.tmp.message_type == SSL3_MT_CHANGE_CIPHER_SPEC) {

crypto/openssl/ssl/statem/statem_dtls.c

479

s->s3.tmp.message_size = msg_len;

crypto/openssl/ssl/statem/statem_dtls.c

481

s->s3.tmp.message_type = msg_hdr->type;

crypto/openssl/ssl/statem/statem_dtls.c

862

s->s3.tmp.message_type = SSL3_MT_CHANGE_CIPHER_SPEC;

crypto/openssl/ssl/statem/statem_dtls.c

863

s->s3.tmp.message_size = readbytes - 1;

crypto/openssl/ssl/statem/statem_lib.c

1586

&& (s->s3.flags & TLS1_FLAGS_STATELESS) != 0) {

crypto/openssl/ssl/statem/statem_lib.c

1596

s->s3.tmp.message_type = *mt = SSL3_MT_CHANGE_CIPHER_SPEC;

crypto/openssl/ssl/statem/statem_lib.c

1599

s->s3.tmp.message_size = readbytes;

crypto/openssl/ssl/statem/statem_lib.c

1632

s->s3.tmp.message_type = *(p++);

crypto/openssl/ssl/statem/statem_lib.c

1643

s->s3.tmp.message_size = l;

crypto/openssl/ssl/statem/statem_lib.c

1655

s->s3.tmp.message_size = l;

crypto/openssl/ssl/statem/statem_lib.c

1672

if (s->s3.tmp.message_type == SSL3_MT_CHANGE_CIPHER_SPEC) {

crypto/openssl/ssl/statem/statem_lib.c

1679

n = s->s3.tmp.message_size - s->init_num;

crypto/openssl/ssl/statem/statem_lib.c

1723

|| (s->s3.tmp.message_type != SSL3_MT_NEWSESSION_TICKET

crypto/openssl/ssl/statem/statem_lib.c

1724

&& s->s3.tmp.message_type != SSL3_MT_KEY_UPDATE)) {

crypto/openssl/ssl/statem/statem_lib.c

1725

if (s->s3.tmp.message_type != SSL3_MT_SERVER_HELLO

crypto/openssl/ssl/statem/statem_lib.c

229

s->s3.tmp.cert_request = 0;

crypto/openssl/ssl/statem/statem_lib.c

239

memset(s->s3.client_random, 0, sizeof(s->s3.client_random));

crypto/openssl/ssl/statem/statem_lib.c

2391

s->s3.server_random + SSL3_RANDOM_SIZE

crypto/openssl/ssl/statem/statem_lib.c

2403

s->s3.server_random + SSL3_RANDOM_SIZE

crypto/openssl/ssl/statem/statem_lib.c

242

s->s3.tmp.cert_req = 0;

crypto/openssl/ssl/statem/statem_lib.c

2673

s->s3.tmp.message_size

crypto/openssl/ssl/statem/statem_lib.c

2730

sk_X509_NAME_pop_free(s->s3.tmp.peer_ca_names, X509_NAME_free);

crypto/openssl/ssl/statem/statem_lib.c

2731

s->s3.tmp.peer_ca_names = ca_sk;

crypto/openssl/ssl/statem/statem_lib.c

2805

memcpy(tbs, s->s3.client_random, SSL3_RANDOM_SIZE);

crypto/openssl/ssl/statem/statem_lib.c

2806

memcpy(tbs + SSL3_RANDOM_SIZE, s->s3.server_random, SSL3_RANDOM_SIZE);

crypto/openssl/ssl/statem/statem_lib.c

2831

s->s3.handshake_dgst)) {

crypto/openssl/ssl/statem/statem_lib.c

2851

if (!EVP_MD_CTX_copy_ex(s->s3.handshake_dgst,

crypto/openssl/ssl/statem/statem_lib.c

302

retlen = retlen_l = BIO_get_mem_data(s->s3.handshake_buffer, hdata);

crypto/openssl/ssl/statem/statem_lib.c

323

const SIGALG_LOOKUP *lu = s->s3.tmp.sigalg;

crypto/openssl/ssl/statem/statem_lib.c

326

if (lu == NULL || s->s3.tmp.cert == NULL) {

crypto/openssl/ssl/statem/statem_lib.c

330

pkey = s->s3.tmp.cert->privatekey;

crypto/openssl/ssl/statem/statem_lib.c

493

if (!tls1_lookup_md(sctx, s->s3.tmp.peer_sigalg, &md)) {

crypto/openssl/ssl/statem/statem_lib.c

604

if (!s->server && SSL_CONNECTION_IS_TLS13(s) && s->s3.tmp.cert_req == 1)

crypto/openssl/ssl/statem/statem_lib.c

609

BIO_free(s->s3.handshake_buffer);

crypto/openssl/ssl/statem/statem_lib.c

610

s->s3.handshake_buffer = NULL;

crypto/openssl/ssl/statem/statem_lib.c

640

&& s->s3.tmp.cert_req == 0

crypto/openssl/ssl/statem/statem_lib.c

658

s->s3.tmp.finish_md);

crypto/openssl/ssl/statem/statem_lib.c

664

s->s3.tmp.finish_md_len = finish_md_len;

crypto/openssl/ssl/statem/statem_lib.c

666

if (!WPACKET_memcpy(pkt, s->s3.tmp.finish_md, finish_md_len)) {

crypto/openssl/ssl/statem/statem_lib.c

690

memcpy(s->s3.previous_client_finished, s->s3.tmp.finish_md,

crypto/openssl/ssl/statem/statem_lib.c

692

s->s3.previous_client_finished_len = finish_md_len;

crypto/openssl/ssl/statem/statem_lib.c

694

memcpy(s->s3.previous_server_finished, s->s3.tmp.finish_md,

crypto/openssl/ssl/statem/statem_lib.c

696

s->s3.previous_server_finished_len = finish_md_len;

crypto/openssl/ssl/statem/statem_lib.c

776

s->s3.tmp.peer_finish_md_len = ssl->method->ssl3_enc->final_finish_mac(s, sender, slen,

crypto/openssl/ssl/statem/statem_lib.c

777

s->s3.tmp.peer_finish_md);

crypto/openssl/ssl/statem/statem_lib.c

779

if (s->s3.tmp.peer_finish_md_len == 0) {

crypto/openssl/ssl/statem/statem_lib.c

814

if (s->s3.tmp.new_cipher == NULL) {

crypto/openssl/ssl/statem/statem_lib.c

819

s->s3.change_cipher_spec = 1;

crypto/openssl/ssl/statem/statem_lib.c

879

if (!SSL_CONNECTION_IS_TLS13(s) && !s->s3.change_cipher_spec) {

crypto/openssl/ssl/statem/statem_lib.c

883

s->s3.change_cipher_spec = 0;

crypto/openssl/ssl/statem/statem_lib.c

885

md_len = s->s3.tmp.peer_finish_md_len;

crypto/openssl/ssl/statem/statem_lib.c

892

ok = CRYPTO_memcmp(PACKET_data(pkt), s->s3.tmp.peer_finish_md,

crypto/openssl/ssl/statem/statem_lib.c

896

if ((PACKET_data(pkt)[0] ^ s->s3.tmp.peer_finish_md[0]) != 0xFF) {

crypto/openssl/ssl/statem/statem_lib.c

914

memcpy(s->s3.previous_client_finished, s->s3.tmp.peer_finish_md,

crypto/openssl/ssl/statem/statem_lib.c

916

s->s3.previous_client_finished_len = md_len;

crypto/openssl/ssl/statem/statem_lib.c

918

memcpy(s->s3.previous_server_finished, s->s3.tmp.peer_finish_md,

crypto/openssl/ssl/statem/statem_lib.c

920

s->s3.previous_server_finished_len = md_len;

crypto/openssl/ssl/statem/statem_srvr.c

100

if (s->s3.tmp.cert_request) {

crypto/openssl/ssl/statem/statem_srvr.c

1356

if ((s->s3.tmp.new_cipher->algorithm_mkey & SSL_kSRP) && (s->srp_ctx.TLS_ext_srp_username_callback != NULL)) {

crypto/openssl/ssl/statem/statem_srvr.c

1496

s->s3.is_probably_safari = PACKET_equal(&tmppkt, kSafariExtensionsBlock,

crypto/openssl/ssl/statem/statem_srvr.c

1518

|| (!s->s3.send_connection_binding

crypto/openssl/ssl/statem/statem_srvr.c

1753

memcpy(s->s3.client_random, clienthello->random, SSL3_RANDOM_SIZE);

crypto/openssl/ssl/statem/statem_srvr.c

1825

s->s3.send_connection_binding = 0;

crypto/openssl/ssl/statem/statem_srvr.c

1837

s->s3.send_connection_binding = 1;

crypto/openssl/ssl/statem/statem_srvr.c

1862

&& (s->s3.tmp.new_cipher == NULL

crypto/openssl/ssl/statem/statem_srvr.c

1863

|| s->s3.tmp.new_cipher->id != cipher->id)) {

crypto/openssl/ssl/statem/statem_srvr.c

1871

s->s3.tmp.new_cipher = cipher;

crypto/openssl/ssl/statem/statem_srvr.c

1994

pos = s->s3.server_random;

crypto/openssl/ssl/statem/statem_srvr.c

2053

s->s3.tmp.new_compression = NULL;

crypto/openssl/ssl/statem/statem_srvr.c

2082

s->s3.tmp.new_compression = comp;

crypto/openssl/ssl/statem/statem_srvr.c

2086

if (s->s3.tmp.new_compression == NULL) {

crypto/openssl/ssl/statem/statem_srvr.c

2122

s->s3.tmp.new_compression = comp;

crypto/openssl/ssl/statem/statem_srvr.c

219

if (s->s3.tmp.cert_request) {

crypto/openssl/ssl/statem/statem_srvr.c

2196

if (s->s3.tmp.cert != NULL) {

crypto/openssl/ssl/statem/statem_srvr.c

2201

s->cert->key = s->s3.tmp.cert;

crypto/openssl/ssl/statem/statem_srvr.c

2236

if (sctx->ext.alpn_select_cb != NULL && s->s3.alpn_proposed != NULL) {

crypto/openssl/ssl/statem/statem_srvr.c

2239

s->s3.alpn_proposed,

crypto/openssl/ssl/statem/statem_srvr.c

2240

(unsigned int)s->s3.alpn_proposed_len,

crypto/openssl/ssl/statem/statem_srvr.c

2244

OPENSSL_free(s->s3.alpn_selected);

crypto/openssl/ssl/statem/statem_srvr.c

2245

s->s3.alpn_selected = OPENSSL_memdup(selected, selected_len);

crypto/openssl/ssl/statem/statem_srvr.c

2246

if (s->s3.alpn_selected == NULL) {

crypto/openssl/ssl/statem/statem_srvr.c

2247

s->s3.alpn_selected_len = 0;

crypto/openssl/ssl/statem/statem_srvr.c

2251

s->s3.alpn_selected_len = selected_len;

crypto/openssl/ssl/statem/statem_srvr.c

2254

s->s3.npn_seen = 0;

crypto/openssl/ssl/statem/statem_srvr.c

2352

s->s3.tmp.new_cipher = cipher;

crypto/openssl/ssl/statem/statem_srvr.c

2362

((s->s3.tmp.new_cipher->algorithm_mkey

crypto/openssl/ssl/statem/statem_srvr.c

2371

s->s3.tmp.new_cipher = s->session->cipher;

crypto/openssl/ssl/statem/statem_srvr.c

239

} else if (s->s3.tmp.cert_request) {

crypto/openssl/ssl/statem/statem_srvr.c

2447

: s->s3.server_random,

crypto/openssl/ssl/statem/statem_srvr.c

2492

if (usetls13 || s->s3.tmp.new_compression == NULL)

crypto/openssl/ssl/statem/statem_srvr.c

2495

compm = s->s3.tmp.new_compression->id;

crypto/openssl/ssl/statem/statem_srvr.c

2499

|| !SSL_CONNECTION_GET_SSL(s)->method->put_cipher_by_char(s->s3.tmp.new_cipher,

crypto/openssl/ssl/statem/statem_srvr.c

2542

if (!s->s3.tmp.cert_request) {

crypto/openssl/ssl/statem/statem_srvr.c

2558

const SIGALG_LOOKUP *lu = s->s3.tmp.sigalg;

crypto/openssl/ssl/statem/statem_srvr.c

2579

type = s->s3.tmp.new_cipher->algorithm_mkey;

crypto/openssl/ssl/statem/statem_srvr.c

2621

if (s->s3.tmp.pkey != NULL) {

crypto/openssl/ssl/statem/statem_srvr.c

2626

s->s3.tmp.pkey = ssl_generate_pkey(s, pkdhp);

crypto/openssl/ssl/statem/statem_srvr.c

2627

if (s->s3.tmp.pkey == NULL) {

crypto/openssl/ssl/statem/statem_srvr.c

2637

if (!EVP_PKEY_get_bn_param(s->s3.tmp.pkey, OSSL_PKEY_PARAM_FFC_P,

crypto/openssl/ssl/statem/statem_srvr.c

2639

|| !EVP_PKEY_get_bn_param(s->s3.tmp.pkey, OSSL_PKEY_PARAM_FFC_G,

crypto/openssl/ssl/statem/statem_srvr.c

2641

|| !EVP_PKEY_get_bn_param(s->s3.tmp.pkey,

crypto/openssl/ssl/statem/statem_srvr.c

2648

if (s->s3.tmp.pkey != NULL) {

crypto/openssl/ssl/statem/statem_srvr.c

2663

s->s3.tmp.pkey = ssl_generate_pkey_group(s, curve_id);

crypto/openssl/ssl/statem/statem_srvr.c

2664

if (s->s3.tmp.pkey == NULL) {

crypto/openssl/ssl/statem/statem_srvr.c

2670

encodedlen = EVP_PKEY_get1_encoded_public_key(s->s3.tmp.pkey,

crypto/openssl/ssl/statem/statem_srvr.c

2703

if (((s->s3.tmp.new_cipher->algorithm_auth & (SSL_aNULL | SSL_aSRP)) != 0)

crypto/openssl/ssl/statem/statem_srvr.c

2704

|| ((s->s3.tmp.new_cipher->algorithm_mkey & SSL_PSK)) != 0) {

crypto/openssl/ssl/statem/statem_srvr.c

2792

EVP_PKEY *pkey = s->s3.tmp.cert->privatekey;

crypto/openssl/ssl/statem/statem_srvr.c

291

if (s->s3.npn_seen) {

crypto/openssl/ssl/statem/statem_srvr.c

2931

s->s3.tmp.cert_request = 1;

crypto/openssl/ssl/statem/statem_srvr.c

2975

OPENSSL_free(s->s3.tmp.psk);

crypto/openssl/ssl/statem/statem_srvr.c

2976

s->s3.tmp.psk = OPENSSL_memdup(psk, psklen);

crypto/openssl/ssl/statem/statem_srvr.c

2979

if (s->s3.tmp.psk == NULL) {

crypto/openssl/ssl/statem/statem_srvr.c

2980

s->s3.tmp.psklen = 0;

crypto/openssl/ssl/statem/statem_srvr.c

2985

s->s3.tmp.psklen = psklen;

crypto/openssl/ssl/statem/statem_srvr.c

3105

skey = s->s3.tmp.pkey;

crypto/openssl/ssl/statem/statem_srvr.c

3137

EVP_PKEY_free(s->s3.tmp.pkey);

crypto/openssl/ssl/statem/statem_srvr.c

3138

s->s3.tmp.pkey = NULL;

crypto/openssl/ssl/statem/statem_srvr.c

3146

EVP_PKEY *skey = s->s3.tmp.pkey;

crypto/openssl/ssl/statem/statem_srvr.c

3192

EVP_PKEY_free(s->s3.tmp.pkey);

crypto/openssl/ssl/statem/statem_srvr.c

3193

s->s3.tmp.pkey = NULL;

crypto/openssl/ssl/statem/statem_srvr.c

3254

alg_a = s->s3.tmp.new_cipher->algorithm_auth;

crypto/openssl/ssl/statem/statem_srvr.c

3427

alg_k = s->s3.tmp.new_cipher->algorithm_mkey;

crypto/openssl/ssl/statem/statem_srvr.c

3484

OPENSSL_clear_free(s->s3.tmp.psk, s->s3.tmp.psklen);

crypto/openssl/ssl/statem/statem_srvr.c

3485

s->s3.tmp.psk = NULL;

crypto/openssl/ssl/statem/statem_srvr.c

3486

s->s3.tmp.psklen = 0;

crypto/openssl/ssl/statem/statem_srvr.c

353

unsigned long alg_k = s->s3.tmp.new_cipher->algorithm_mkey;

crypto/openssl/ssl/statem/statem_srvr.c

3539

if (!s->s3.handshake_buffer) {

crypto/openssl/ssl/statem/statem_srvr.c

3756

if (s->s3.handshake_buffer && !ssl3_digest_cached_records(s, 0)) {

crypto/openssl/ssl/statem/statem_srvr.c

3857

CERT_PKEY *cpk = s->s3.tmp.cert;

crypto/openssl/ssl/statem/statem_srvr.c

3897

OSSL_COMP_CERT *cc = sc->s3.tmp.cert->comp_cert[alg];

crypto/openssl/ssl/statem/statem_srvr.c

3914

sc->s3.tmp.cert->cert_comp_used++;

crypto/openssl/ssl/statem/statem_srvr.c

396

if (sc->s3.tmp.cert == NULL)

crypto/openssl/ssl/statem/statem_srvr.c

400

if (sc->s3.tmp.cert->comp_cert[*alg] != NULL)

crypto/openssl/ssl/statem/statem_srvr.c

4281

if (s->s3.alpn_selected != NULL) {

crypto/openssl/ssl/statem/statem_srvr.c

4283

s->session->ext.alpn_selected = OPENSSL_memdup(s->s3.alpn_selected, s->s3.alpn_selected_len);

crypto/openssl/ssl/statem/statem_srvr.c

4289

s->session->ext.alpn_selected_len = s->s3.alpn_selected_len;

crypto/openssl/ssl/statem/statem_srvr.c

436

&& (!(s->s3.tmp.new_cipher->algorithm_auth & SSL_aNULL)

crypto/openssl/ssl/statem/statem_srvr.c

444

&& !(s->s3.tmp.new_cipher->algorithm_auth & SSL_aSRP)

crypto/openssl/ssl/statem/statem_srvr.c

449

&& !(s->s3.tmp.new_cipher->algorithm_auth & SSL_aPSK)) {

crypto/openssl/ssl/statem/statem_srvr.c

672

if (!(s->s3.tmp.new_cipher->algorithm_auth & (SSL_aNULL | SSL_aSRP | SSL_aPSK))) {

crypto/openssl/ssl/statem/statem_srvr.c

816

s->session->cipher = s->s3.tmp.new_cipher;

crypto/openssl/ssl/statem/statem_srvr.c

817

} else if (s->session->cipher != s->s3.tmp.new_cipher) {

crypto/openssl/ssl/statem/statem_srvr.c

838

&& (s->s3.flags & TLS1_FLAGS_STATELESS) == 0)

crypto/openssl/ssl/t1_enc.c

134

c = s->s3.tmp.new_sym_enc;

crypto/openssl/ssl/t1_enc.c

135

m = s->s3.tmp.new_hash;

crypto/openssl/ssl/t1_enc.c

136

mac_type = s->s3.tmp.new_mac_pkey_type;

crypto/openssl/ssl/t1_enc.c

138

comp = s->s3.tmp.new_compression;

crypto/openssl/ssl/t1_enc.c

141

p = s->s3.tmp.key_block;

crypto/openssl/ssl/t1_enc.c

142

i = mac_secret_size = s->s3.tmp.new_mac_secret_size;

crypto/openssl/ssl/t1_enc.c

169

if (n > s->s3.tmp.key_block_length) {

crypto/openssl/ssl/t1_enc.c

179

if ((s->s3.tmp.new_cipher->algorithm_enc

crypto/openssl/ssl/t1_enc.c

191

taglen = s->s3.tmp.new_mac_secret_size;

crypto/openssl/ssl/t1_enc.c

198

s->s3.flags |= TLS1_FLAGS_ENCRYPT_THEN_MAC_READ;

crypto/openssl/ssl/t1_enc.c

200

s->s3.flags &= ~TLS1_FLAGS_ENCRYPT_THEN_MAC_READ;

crypto/openssl/ssl/t1_enc.c

202

if (s->s3.tmp.new_cipher->algorithm2 & TLS1_STREAM_MAC)

crypto/openssl/ssl/t1_enc.c

207

if (s->s3.tmp.new_cipher->algorithm2 & TLS1_TLSTREE)

crypto/openssl/ssl/t1_enc.c

215

s->s3.flags |= TLS1_FLAGS_ENCRYPT_THEN_MAC_WRITE;

crypto/openssl/ssl/t1_enc.c

217

s->s3.flags &= ~TLS1_FLAGS_ENCRYPT_THEN_MAC_WRITE;

crypto/openssl/ssl/t1_enc.c

219

if (s->s3.tmp.new_cipher->algorithm2 & TLS1_STREAM_MAC)

crypto/openssl/ssl/t1_enc.c

224

if (s->s3.tmp.new_cipher->algorithm2 & TLS1_TLSTREE)

crypto/openssl/ssl/t1_enc.c

269

if (s->s3.tmp.key_block_length != 0)

crypto/openssl/ssl/t1_enc.c

280

ssl_evp_cipher_free(s->s3.tmp.new_sym_enc);

crypto/openssl/ssl/t1_enc.c

281

s->s3.tmp.new_sym_enc = c;

crypto/openssl/ssl/t1_enc.c

282

ssl_evp_md_free(s->s3.tmp.new_hash);

crypto/openssl/ssl/t1_enc.c

283

s->s3.tmp.new_hash = hash;

crypto/openssl/ssl/t1_enc.c

284

s->s3.tmp.new_mac_pkey_type = mac_type;

crypto/openssl/ssl/t1_enc.c

285

s->s3.tmp.new_mac_secret_size = mac_secret_size;

crypto/openssl/ssl/t1_enc.c

301

s->s3.tmp.key_block_length = num;

crypto/openssl/ssl/t1_enc.c

302

s->s3.tmp.key_block = p;

crypto/openssl/ssl/t1_enc.c

308

BIO_dump_indent(trc_out, s->s3.client_random, SSL3_RANDOM_SIZE, 4);

crypto/openssl/ssl/t1_enc.c

310

BIO_dump_indent(trc_out, s->s3.server_random, SSL3_RANDOM_SIZE, 4);

crypto/openssl/ssl/t1_enc.c

342

if (s->s3.tmp.new_cipher->algorithm_mkey & SSL_kGOST18)

crypto/openssl/ssl/t1_enc.c

404

s->s3.client_random, SSL3_RANDOM_SIZE,

crypto/openssl/ssl/t1_enc.c

406

s->s3.server_random, SSL3_RANDOM_SIZE,

crypto/openssl/ssl/t1_enc.c

419

BIO_dump_indent(trc_out, s->s3.client_random, SSL3_RANDOM_SIZE, 4);

crypto/openssl/ssl/t1_enc.c

421

BIO_dump_indent(trc_out, s->s3.server_random, SSL3_RANDOM_SIZE, 4);

crypto/openssl/ssl/t1_enc.c

467

memcpy(val + currentvalpos, s->s3.client_random, SSL3_RANDOM_SIZE);

crypto/openssl/ssl/t1_enc.c

469

memcpy(val + currentvalpos, s->s3.server_random, SSL3_RANDOM_SIZE);

crypto/openssl/ssl/t1_enc.c

97

TLS_MD_KEY_EXPANSION_CONST_SIZE, s->s3.server_random,

crypto/openssl/ssl/t1_enc.c

98

SSL3_RANDOM_SIZE, s->s3.client_random, SSL3_RANDOM_SIZE,

crypto/openssl/ssl/t1_lib.c

1020

unsigned long cid = s->s3.tmp.new_cipher->id;

crypto/openssl/ssl/t1_lib.c

1735

if (tls1_suiteb(s) && s->s3.tmp.new_cipher != NULL) {

crypto/openssl/ssl/t1_lib.c

1736

unsigned long cid = s->s3.tmp.new_cipher->id;

crypto/openssl/ssl/t1_lib.c

2465

if (clu->amask & s->s3.tmp.new_cipher->algorithm_auth) {

crypto/openssl/ssl/t1_lib.c

2474

if (idx == SSL_PKEY_GOST01 && s->s3.tmp.new_cipher->algorithm_auth != SSL_aGOST01) {

crypto/openssl/ssl/t1_lib.c

2534

s->s3.tmp.peer_sigalg = lu;

crypto/openssl/ssl/t1_lib.c

2832

s->s3.tmp.peer_sigalg = lu;

crypto/openssl/ssl/t1_lib.c

2843

if (sc->s3.tmp.peer_sigalg == NULL)

crypto/openssl/ssl/t1_lib.c

2845

*pnid = sc->s3.tmp.peer_sigalg->sig;

crypto/openssl/ssl/t1_lib.c

2856

if (sc->s3.tmp.sigalg == NULL)

crypto/openssl/ssl/t1_lib.c

2858

*pnid = sc->s3.tmp.sigalg->sig;

crypto/openssl/ssl/t1_lib.c

2874

s->s3.tmp.mask_a = 0;

crypto/openssl/ssl/t1_lib.c

2875

s->s3.tmp.mask_k = 0;

crypto/openssl/ssl/t1_lib.c

2876

ssl_set_sig_mask(&s->s3.tmp.mask_a, s, SSL_SECOP_SIGALG_MASK);

crypto/openssl/ssl/t1_lib.c

2877

if (ssl_get_min_max_version(s, &s->s3.tmp.min_ver,

crypto/openssl/ssl/t1_lib.c

2878

&s->s3.tmp.max_ver, NULL)

crypto/openssl/ssl/t1_lib.c

2884

s->s3.tmp.mask_a |= SSL_aPSK;

crypto/openssl/ssl/t1_lib.c

2885

s->s3.tmp.mask_k |= SSL_PSK;

crypto/openssl/ssl/t1_lib.c

2890

s->s3.tmp.mask_a |= SSL_aSRP;

crypto/openssl/ssl/t1_lib.c

2891

s->s3.tmp.mask_k |= SSL_kSRP;

crypto/openssl/ssl/t1_lib.c

2912

if (c->algorithm_mkey & s->s3.tmp.mask_k

crypto/openssl/ssl/t1_lib.c

2913

|| c->algorithm_auth & s->s3.tmp.mask_a)

crypto/openssl/ssl/t1_lib.c

2915

if (s->s3.tmp.max_ver == 0)

crypto/openssl/ssl/t1_lib.c

2938

if (ssl_version_cmp(s, minversion, s->s3.tmp.max_ver) > 0

crypto/openssl/ssl/t1_lib.c

2939

|| ssl_version_cmp(s, maxversion, s->s3.tmp.min_ver) < 0)

crypto/openssl/ssl/t1_lib.c

2962

if (s->s3.tmp.valid_flags)

crypto/openssl/ssl/t1_lib.c

2963

memset(s->s3.tmp.valid_flags, 0, s->ssl_pkey_num * sizeof(uint32_t));

crypto/openssl/ssl/t1_lib.c

2965

s->s3.tmp.valid_flags = OPENSSL_zalloc(s->ssl_pkey_num * sizeof(uint32_t));

crypto/openssl/ssl/t1_lib.c

2966

if (s->s3.tmp.valid_flags == NULL)

crypto/openssl/ssl/t1_lib.c

2972

if (s->s3.tmp.peer_cert_sigalgs == NULL

crypto/openssl/ssl/t1_lib.c

2973

&& s->s3.tmp.peer_sigalgs == NULL) {

crypto/openssl/ssl/t1_lib.c

2986

s->s3.tmp.valid_flags[i] = CERT_PKEY_SIGN;

crypto/openssl/ssl/t1_lib.c

3355

&& s->s3.tmp.min_ver >= TLS1_3_VERSION

crypto/openssl/ssl/t1_lib.c

3373

&& s->s3.tmp.max_ver >= TLS1_3_VERSION) {

crypto/openssl/ssl/t1_lib.c

3383

if (s->s3.tmp.min_ver >= TLS1_3_VERSION)

crypto/openssl/ssl/t1_lib.c

3524

allow = s->s3.tmp.peer_sigalgs;

crypto/openssl/ssl/t1_lib.c

3525

allowlen = s->s3.tmp.peer_sigalgslen;

crypto/openssl/ssl/t1_lib.c

3529

pref = s->s3.tmp.peer_sigalgs;

crypto/openssl/ssl/t1_lib.c

3530

preflen = s->s3.tmp.peer_sigalgslen;

crypto/openssl/ssl/t1_lib.c

3586

return tls1_save_u16(pkt, &s->s3.tmp.peer_cert_sigalgs,

crypto/openssl/ssl/t1_lib.c

3587

&s->s3.tmp.peer_cert_sigalgslen);

crypto/openssl/ssl/t1_lib.c

3589

return tls1_save_u16(pkt, &s->s3.tmp.peer_sigalgs,

crypto/openssl/ssl/t1_lib.c

3590

&s->s3.tmp.peer_sigalgslen);

crypto/openssl/ssl/t1_lib.c

3598

uint32_t *pvalid = s->s3.tmp.valid_flags;

crypto/openssl/ssl/t1_lib.c

3632

psig = sc->s3.tmp.peer_sigalgs;

crypto/openssl/ssl/t1_lib.c

3633

numsigalgs = sc->s3.tmp.peer_sigalgslen;

crypto/openssl/ssl/t1_lib.c

3933

if (SSL_CONNECTION_IS_TLS13(s) && s->s3.tmp.peer_cert_sigalgs != NULL) {

crypto/openssl/ssl/t1_lib.c

3939

sigalgslen = s->s3.tmp.peer_cert_sigalgslen;

crypto/openssl/ssl/t1_lib.c

3949

s->s3.tmp.peer_cert_sigalgs[i])

crypto/openssl/ssl/t1_lib.c

4031

pvalid = s->s3.tmp.valid_flags + idx;

crypto/openssl/ssl/t1_lib.c

4056

pvalid = s->s3.tmp.valid_flags + idx;

crypto/openssl/ssl/t1_lib.c

4085

if (s->s3.tmp.peer_cert_sigalgs != NULL

crypto/openssl/ssl/t1_lib.c

4086

|| s->s3.tmp.peer_sigalgs != NULL) {

crypto/openssl/ssl/t1_lib.c

4207

const uint8_t *ctypes = s->s3.tmp.ctype;

crypto/openssl/ssl/t1_lib.c

4210

for (j = 0; j < s->s3.tmp.ctype_len; j++, ctypes++) {

crypto/openssl/ssl/t1_lib.c

4222

ca_dn = s->s3.tmp.peer_ca_names;

crypto/openssl/ssl/t1_lib.c

4305

if (s->s3.tmp.new_cipher->algorithm_auth & (SSL_aNULL | SSL_aPSK)) {

crypto/openssl/ssl/t1_lib.c

4306

if (s->s3.tmp.new_cipher->strength_bits == 256)

crypto/openssl/ssl/t1_lib.c

4311

if (s->s3.tmp.cert == NULL)

crypto/openssl/ssl/t1_lib.c

4313

dh_secbits = EVP_PKEY_get_security_bits(s->s3.tmp.cert->privatekey);

crypto/openssl/ssl/t1_lib.c

4464

|| (clu->amask & s->s3.tmp.new_cipher->algorithm_auth) == 0

crypto/openssl/ssl/t1_lib.c

4466

&& (s->s3.tmp.new_cipher->algorithm_mkey & SSL_kRSA) != 0))

crypto/openssl/ssl/t1_lib.c

4471

return s->s3.tmp.valid_flags[sig_idx] & CERT_PKEY_RPK ? sig_idx : -1;

crypto/openssl/ssl/t1_lib.c

4473

return s->s3.tmp.valid_flags[sig_idx] & CERT_PKEY_VALID ? sig_idx : -1;

crypto/openssl/ssl/t1_lib.c

4507

if (s->s3.tmp.peer_cert_sigalgs != NULL) {

crypto/openssl/ssl/t1_lib.c

4510

for (i = 0; i < s->s3.tmp.peer_cert_sigalgslen; i++) {

crypto/openssl/ssl/t1_lib.c

4512

s->s3.tmp.peer_cert_sigalgs[i]);

crypto/openssl/ssl/t1_lib.c

4643

s->s3.tmp.cert = NULL;

crypto/openssl/ssl/t1_lib.c

4644

s->s3.tmp.sigalg = NULL;

crypto/openssl/ssl/t1_lib.c

4657

if (!(s->s3.tmp.new_cipher->algorithm_auth & SSL_aCERT))

crypto/openssl/ssl/t1_lib.c

4664

if (s->s3.tmp.peer_sigalgs != NULL) {

crypto/openssl/ssl/t1_lib.c

4712

&& (s->s3.tmp.new_cipher->algorithm_auth

crypto/openssl/ssl/t1_lib.c

4776

s->s3.tmp.cert = &s->cert->pkeys[sig_idx];

crypto/openssl/ssl/t1_lib.c

4777

s->cert->key = s->s3.tmp.cert;

crypto/openssl/ssl/t1_lib.c

4778

s->s3.tmp.sigalg = lu;

crypto/openssl/ssl/t1_trce.c

1125

unsigned long alg_k = sc->s3.tmp.new_cipher->algorithm_mkey;

crypto/openssl/ssl/tls13_enc.c

330

s->session->cipher = s->s3.tmp.new_cipher;

crypto/openssl/ssl/tls13_enc.c

338

ssl_evp_cipher_free(s->s3.tmp.new_sym_enc);

crypto/openssl/ssl/tls13_enc.c

339

s->s3.tmp.new_sym_enc = c;

crypto/openssl/ssl/tls13_enc.c

340

ssl_evp_md_free(s->s3.tmp.new_hash);

crypto/openssl/ssl/tls13_enc.c

341

s->s3.tmp.new_hash = hash;

crypto/openssl/ssl/tls13_enc.c

342

s->s3.tmp.new_mac_pkey_type = mac_type;

crypto/openssl/ssl/tls13_enc.c

343

s->s3.tmp.new_mac_secret_size = mac_secret_size;

crypto/openssl/ssl/tls13_enc.c

388

*keylen = s->s3.tmp.new_mac_secret_size;

crypto/openssl/ssl/tls13_enc.c

398

if (s->s3.tmp.new_cipher != NULL) {

crypto/openssl/ssl/tls13_enc.c

399

algenc = s->s3.tmp.new_cipher->algorithm_enc;

crypto/openssl/ssl/tls13_enc.c

528

handlen = BIO_get_mem_data(s->s3.handshake_buffer, &hdata);

crypto/openssl/ssl/tls13_enc.c

666

cipher = s->s3.tmp.new_sym_enc;

crypto/openssl/ssl/tls13_enc.c

667

mac_md = s->s3.tmp.new_hash;

crypto/openssl/ssl/tls13_enc.c

668

mac_pkey_type = s->s3.tmp.new_mac_pkey_type;

crypto/openssl/ssl/tls13_enc.c

800

s->s3.tmp.new_sym_enc,

crypto/openssl/ssl/tls13_enc.c

801

s->s3.tmp.new_mac_pkey_type, s->s3.tmp.new_hash,

crypto/openssl/ssl/tls13_enc.c

816

s->s3.tmp.new_sym_enc, taglen, NID_undef, NULL,

lib/libc/net/rcmd.c

210

int s2 = rresvport_af(&lport, ai->ai_family), s3;

lib/libc/net/rcmd.c

247

s3 = _accept(s2, (struct sockaddr *)&from, &len);

lib/libc/net/rcmd.c

266

_close(s3);

lib/libc/net/rcmd.c

270

if (s3 < 0) {

lib/libc/net/rcmd.c

276

*fd2p = s3;

lib/libcompat/4.3/rexec.c

295

int s, timo = 1, s3;

lib/libcompat/4.3/rexec.c

351

s3 = accept(s2, (struct sockaddr *)&from, &len);

lib/libcompat/4.3/rexec.c

353

if (s3 < 0) {

lib/libcompat/4.3/rexec.c

359

*fd2p = s3;

lib/msun/ld128/e_lgammal_r.c

137

s3 = 6.31998137119005233383666791176301800e-01L,

lib/msun/ld128/e_lgammal_r.c

298

p = y*(s0+y*(s1+y*(s2+y*(s3+y*(s4+y*(s5+y*(s6+y*(s7+y*(s8+

lib/msun/ld80/e_lgammal_r.c

330

p = y*(s0+y*(s1+y*(s2+y*(s3+y*(s4+y*(s5+y*s6))))));

lib/msun/src/e_lgamma_r.c

136

s3 = 1.46350472652464452805e-01, /* 0x3FC2BB9C, 0xBEE5F2F7 */

lib/msun/src/e_lgamma_r.c

271

p = y*(s0+y*(s1+y*(s2+y*(s3+y*(s4+y*(s5+y*s6))))));

lib/msun/src/e_lgammaf_r.c

188

p = y*(s0+y*(s1+y*(s2+y*s3)));

lib/msun/src/e_lgammaf_r.c

69

s3 = 1.19389519e-02, /* 0x3c439b98 */

libexec/rpc.rstatd/rstat_proc.c

109

return(&stats_all.s3);

libexec/rpc.rstatd/rstat_proc.c

282

stats_all.s3.curtime.tv_sec = tm.tv_sec;

libexec/rpc.rstatd/rstat_proc.c

283

stats_all.s3.curtime.tv_usec = tm.tv_usec;

libexec/rpc.rstatd/rstat_proc.c

78

struct statstime s3;

sys/crypto/rijndael/rijndael-alg-fst.c

1000

s3 =

sys/crypto/rijndael/rijndael-alg-fst.c

1033

s3 =

sys/crypto/rijndael/rijndael-alg-fst.c

1039

PUTU32(ct + 12, s3);

sys/crypto/rijndael/rijndael-alg-fst.c

1043

u32 s0, s1, s2, s3, t0, t1, t2, t3;

sys/crypto/rijndael/rijndael-alg-fst.c

1055

s3 = GETU32(ct + 12) ^ rk[3];

sys/crypto/rijndael/rijndael-alg-fst.c

1058

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[ 4];

sys/crypto/rijndael/rijndael-alg-fst.c

1059

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[ 5];

sys/crypto/rijndael/rijndael-alg-fst.c

1060

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[ 6];

sys/crypto/rijndael/rijndael-alg-fst.c

1061

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[ 7];

sys/crypto/rijndael/rijndael-alg-fst.c

1066

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[11];

sys/crypto/rijndael/rijndael-alg-fst.c

1068

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[12];

sys/crypto/rijndael/rijndael-alg-fst.c

1069

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[13];

sys/crypto/rijndael/rijndael-alg-fst.c

1070

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[14];

sys/crypto/rijndael/rijndael-alg-fst.c

1071

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[15];

sys/crypto/rijndael/rijndael-alg-fst.c

1076

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[19];

sys/crypto/rijndael/rijndael-alg-fst.c

1078

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[20];

sys/crypto/rijndael/rijndael-alg-fst.c

1079

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[21];

sys/crypto/rijndael/rijndael-alg-fst.c

1080

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[22];

sys/crypto/rijndael/rijndael-alg-fst.c

1081

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[23];

sys/crypto/rijndael/rijndael-alg-fst.c

1086

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[27];

sys/crypto/rijndael/rijndael-alg-fst.c

1088

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[28];

sys/crypto/rijndael/rijndael-alg-fst.c

1089

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[29];

sys/crypto/rijndael/rijndael-alg-fst.c

1090

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[30];

sys/crypto/rijndael/rijndael-alg-fst.c

1091

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[31];

sys/crypto/rijndael/rijndael-alg-fst.c

1096

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[35];

sys/crypto/rijndael/rijndael-alg-fst.c

1098

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[36];

sys/crypto/rijndael/rijndael-alg-fst.c

1099

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[37];

sys/crypto/rijndael/rijndael-alg-fst.c

1100

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[38];

sys/crypto/rijndael/rijndael-alg-fst.c

1101

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[39];

sys/crypto/rijndael/rijndael-alg-fst.c

1107

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[43];

sys/crypto/rijndael/rijndael-alg-fst.c

1109

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[44];

sys/crypto/rijndael/rijndael-alg-fst.c

1110

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[45];

sys/crypto/rijndael/rijndael-alg-fst.c

1111

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[46];

sys/crypto/rijndael/rijndael-alg-fst.c

1112

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[47];

sys/crypto/rijndael/rijndael-alg-fst.c

1118

s3 = Td0[t3 >> 24] ^ Td1[(t2 >> 16) & 0xff] ^ Td2[(t1 >> 8) & 0xff] ^ Td3[t0 & 0xff] ^ rk[51];

sys/crypto/rijndael/rijndael-alg-fst.c

1120

t0 = Td0[s0 >> 24] ^ Td1[(s3 >> 16) & 0xff] ^ Td2[(s2 >> 8) & 0xff] ^ Td3[s1 & 0xff] ^ rk[52];

sys/crypto/rijndael/rijndael-alg-fst.c

1121

t1 = Td0[s1 >> 24] ^ Td1[(s0 >> 16) & 0xff] ^ Td2[(s3 >> 8) & 0xff] ^ Td3[s2 & 0xff] ^ rk[53];

sys/crypto/rijndael/rijndael-alg-fst.c

1122

t2 = Td0[s2 >> 24] ^ Td1[(s1 >> 16) & 0xff] ^ Td2[(s0 >> 8) & 0xff] ^ Td3[s3 & 0xff] ^ rk[54];

sys/crypto/rijndael/rijndael-alg-fst.c

1123

t3 = Td0[s3 >> 24] ^ Td1[(s2 >> 16) & 0xff] ^ Td2[(s1 >> 8) & 0xff] ^ Td3[s0 & 0xff] ^ rk[55];

sys/crypto/rijndael/rijndael-alg-fst.c

1135

Td1[(s3 >> 16) & 0xff] ^

sys/crypto/rijndael/rijndael-alg-fst.c

1142

Td2[(s3 >> 8) & 0xff] ^

sys/crypto/rijndael/rijndael-alg-fst.c

1149

Td3[(s3 ) & 0xff] ^

sys/crypto/rijndael/rijndael-alg-fst.c

1152

Td0[(s3 >> 24) ] ^

sys/crypto/rijndael/rijndael-alg-fst.c

1181

s3 =

sys/crypto/rijndael/rijndael-alg-fst.c

1214

s3 =

sys/crypto/rijndael/rijndael-alg-fst.c

1220

PUTU32(pt + 12, s3);

sys/crypto/rijndael/rijndael-alg-fst.c

862

u32 s0, s1, s2, s3, t0, t1, t2, t3;

sys/crypto/rijndael/rijndael-alg-fst.c

874

s3 = GETU32(pt + 12) ^ rk[3];

sys/crypto/rijndael/rijndael-alg-fst.c

877

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[ 4];

sys/crypto/rijndael/rijndael-alg-fst.c

878

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[ 5];

sys/crypto/rijndael/rijndael-alg-fst.c

879

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[ 6];

sys/crypto/rijndael/rijndael-alg-fst.c

880

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[ 7];

sys/crypto/rijndael/rijndael-alg-fst.c

885

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[11];

sys/crypto/rijndael/rijndael-alg-fst.c

887

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[12];

sys/crypto/rijndael/rijndael-alg-fst.c

888

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[13];

sys/crypto/rijndael/rijndael-alg-fst.c

889

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[14];

sys/crypto/rijndael/rijndael-alg-fst.c

890

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[15];

sys/crypto/rijndael/rijndael-alg-fst.c

895

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[19];

sys/crypto/rijndael/rijndael-alg-fst.c

897

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[20];

sys/crypto/rijndael/rijndael-alg-fst.c

898

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[21];

sys/crypto/rijndael/rijndael-alg-fst.c

899

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[22];

sys/crypto/rijndael/rijndael-alg-fst.c

900

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[23];

sys/crypto/rijndael/rijndael-alg-fst.c

905

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[27];

sys/crypto/rijndael/rijndael-alg-fst.c

907

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[28];

sys/crypto/rijndael/rijndael-alg-fst.c

908

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[29];

sys/crypto/rijndael/rijndael-alg-fst.c

909

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[30];

sys/crypto/rijndael/rijndael-alg-fst.c

910

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[31];

sys/crypto/rijndael/rijndael-alg-fst.c

915

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[35];

sys/crypto/rijndael/rijndael-alg-fst.c

917

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[36];

sys/crypto/rijndael/rijndael-alg-fst.c

918

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[37];

sys/crypto/rijndael/rijndael-alg-fst.c

919

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[38];

sys/crypto/rijndael/rijndael-alg-fst.c

920

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[39];

sys/crypto/rijndael/rijndael-alg-fst.c

926

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[43];

sys/crypto/rijndael/rijndael-alg-fst.c

928

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[44];

sys/crypto/rijndael/rijndael-alg-fst.c

929

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[45];

sys/crypto/rijndael/rijndael-alg-fst.c

930

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[46];

sys/crypto/rijndael/rijndael-alg-fst.c

931

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[47];

sys/crypto/rijndael/rijndael-alg-fst.c

937

s3 = Te0[t3 >> 24] ^ Te1[(t0 >> 16) & 0xff] ^ Te2[(t1 >> 8) & 0xff] ^ Te3[t2 & 0xff] ^ rk[51];

sys/crypto/rijndael/rijndael-alg-fst.c

939

t0 = Te0[s0 >> 24] ^ Te1[(s1 >> 16) & 0xff] ^ Te2[(s2 >> 8) & 0xff] ^ Te3[s3 & 0xff] ^ rk[52];

sys/crypto/rijndael/rijndael-alg-fst.c

940

t1 = Te0[s1 >> 24] ^ Te1[(s2 >> 16) & 0xff] ^ Te2[(s3 >> 8) & 0xff] ^ Te3[s0 & 0xff] ^ rk[53];

sys/crypto/rijndael/rijndael-alg-fst.c

941

t2 = Te0[s2 >> 24] ^ Te1[(s3 >> 16) & 0xff] ^ Te2[(s0 >> 8) & 0xff] ^ Te3[s1 & 0xff] ^ rk[54];

sys/crypto/rijndael/rijndael-alg-fst.c

942

t3 = Te0[s3 >> 24] ^ Te1[(s0 >> 16) & 0xff] ^ Te2[(s1 >> 8) & 0xff] ^ Te3[s2 & 0xff] ^ rk[55];

sys/crypto/rijndael/rijndael-alg-fst.c

956

Te3[(s3 ) & 0xff] ^

sys/crypto/rijndael/rijndael-alg-fst.c

961

Te2[(s3 >> 8) & 0xff] ^

sys/crypto/rijndael/rijndael-alg-fst.c

966

Te1[(s3 >> 16) & 0xff] ^

sys/crypto/rijndael/rijndael-alg-fst.c

971

Te0[(s3 >> 24) ] ^

sys/dev/qat/qat_api/common/crypto/sym/qat/lac_sym_qat_key.c

59

pKeyGenReqParams->u1.s3.output_lgth_tls =

sys/dev/qat/qat_api/common/crypto/sym/qat/lac_sym_qat_key.c

90

pKeyGenReqParams->u1.s3.label_lgth_tls = labelInfo;

sys/dev/qat/qat_api/firmware/include/icp_qat_fw_la.h

1841

} s3;

sys/dev/usb/storage/umass.c

3024

char s3[5];

sys/dev/usb/storage/umass.c

3027

s3[0] = '\0';

sys/dev/usb/storage/umass.c

3040

sprintf(s3, " ...");

sys/dev/usb/storage/umass.c

3042

s1, s2, s3);

tests/sys/netinet/so_reuseport_lb_test.c

575

int error, len, s1, s2, s3;

tests/sys/netinet/so_reuseport_lb_test.c

582

s3 = socket(PF_INET, SOCK_DGRAM, 0);

tests/sys/netinet/so_reuseport_lb_test.c

583

ATF_REQUIRE(s3 >= 0);

tests/sys/netinet/so_reuseport_lb_test.c

595

error = bind(s3, (struct sockaddr *)&sin, sizeof(sin));

tests/sys/netinet/so_reuseport_lb_test.c

599

error = getsockname(s3, (struct sockaddr *)&sin,

tests/sys/netinet/so_reuseport_lb_test.c

624

n = sendto(s3, &ch, sizeof(ch), 0, (struct sockaddr *)&sin,

tests/sys/netinet/so_reuseport_lb_test.c

647

int error, len, s1, s2, s3;

tests/sys/netinet/so_reuseport_lb_test.c

654

s3 = socket(PF_INET6, SOCK_DGRAM, 0);

tests/sys/netinet/so_reuseport_lb_test.c

655

ATF_REQUIRE(s3 >= 0);

tests/sys/netinet/so_reuseport_lb_test.c

667

error = bind(s3, (struct sockaddr *)&sin6, sizeof(sin6));

tests/sys/netinet/so_reuseport_lb_test.c

671

error = getsockname(s3, (struct sockaddr *)&sin6,

tests/sys/netinet/so_reuseport_lb_test.c

696

n = sendto(s3, &ch, sizeof(ch), 0, (struct sockaddr *)&sin6,

tools/regression/posixsem2/semtest.c

100

sem_t *s, *s2, *s3;

tools/regression/posixsem2/semtest.c

113

s3 = sem_open(SEM_NAME, 0);

tools/regression/posixsem2/semtest.c

114

if (s3 == SEM_FAILED)

tools/regression/posixsem2/semtest.c

116

if (s != s3)

tools/regression/posixsem2/semtest.c

119

if (sem_close(s3))

tools/tools/shlib-compat/test/libtest1/test.c

31

int func6(char a, struct s3 *s);

tools/tools/shlib-compat/test/libtest1/test.c

62

func6(char a, struct s3 *s)

tools/tools/shlib-compat/test/libtest2/test.c

32

int func6(char a, struct s3 *s);

tools/tools/shlib-compat/test/libtest2/test.c

70

func6(char a, struct s3 *s)

tools/tools/shlib-compat/test/libtest3/test.c

43

int func6__compat(char a, struct s3 *s);

tools/tools/shlib-compat/test/libtest3/test.c

81

func6__compat(char a, struct s3 *s)

usr.bin/netstat/mroute.c

147

snprintf(s3, sizeof(s3), "%lu.%06lu",

usr.bin/netstat/mroute.c

153

snprintf(s3, sizeof(s3), "-%lu.06%lu",

usr.bin/netstat/mroute.c

157

xo_emit(" {:remaining-time/%s}", s3);

usr.bin/netstat/mroute.c

79

char s1[256], s2[256], s3[256];

usr.sbin/kbdcontrol/kbdcontrol.c

122

static char * mkfullname(const char *s1, const char *s2, const char *s3);

usr.sbin/kbdcontrol/kbdcontrol.c

171

mkfullname(const char *s1, const char *s2, const char *s3)

usr.sbin/kbdcontrol/kbdcontrol.c

177

f = strlen(s1) + strlen(s2) + strlen(s3) + 1;

usr.sbin/kbdcontrol/kbdcontrol.c

192

strcat(buf, s3);