crypto/adiantum.c

442

if (round_up(stream_len, CHACHA_BLOCK_SIZE) <= req->cryptlen)

crypto/adiantum.c

443

stream_len = round_up(stream_len, CHACHA_BLOCK_SIZE);

crypto/chacha.c

115

.chunksize = CHACHA_BLOCK_SIZE,

crypto/chacha.c

131

.chunksize = CHACHA_BLOCK_SIZE,

crypto/chacha.c

147

.chunksize = CHACHA_BLOCK_SIZE,

crypto/chacha.c

64

nbytes = round_down(nbytes, CHACHA_BLOCK_SIZE);

drivers/char/random.c

312

u8 first_block[CHACHA_BLOCK_SIZE];

drivers/char/random.c

392

u8 tmp[CHACHA_BLOCK_SIZE];

drivers/char/random.c

404

if (len < CHACHA_BLOCK_SIZE) {

drivers/char/random.c

414

len -= CHACHA_BLOCK_SIZE;

drivers/char/random.c

415

buf += CHACHA_BLOCK_SIZE;

drivers/char/random.c

437

u8 block[CHACHA_BLOCK_SIZE];

drivers/char/random.c

500

type entropy[CHACHA_BLOCK_SIZE * 3 / (2 * sizeof(type))]; \

include/crypto/chacha.h

41

u8 out[at_least CHACHA_BLOCK_SIZE], int nrounds);

include/crypto/chacha.h

43

u8 out[at_least CHACHA_BLOCK_SIZE])

include/vdso/getrandom.h

36

u8 batch[CHACHA_BLOCK_SIZE * 3 / 2];

include/vdso/getrandom.h

39

u8 batch_key[CHACHA_BLOCK_SIZE * 2];

lib/crypto/arm/chacha.h

40

u8 buf[CHACHA_BLOCK_SIZE];

lib/crypto/arm/chacha.h

42

while (bytes > CHACHA_BLOCK_SIZE) {

lib/crypto/arm/chacha.h

43

unsigned int l = min(bytes, CHACHA_BLOCK_SIZE * 4U);

lib/crypto/arm/chacha.h

49

state->x[12] += DIV_ROUND_UP(l, CHACHA_BLOCK_SIZE);

lib/crypto/arm/chacha.h

55

if (bytes != CHACHA_BLOCK_SIZE)

lib/crypto/arm/chacha.h

79

bytes <= CHACHA_BLOCK_SIZE) {

lib/crypto/arm/chacha.h

81

state->x[12] += DIV_ROUND_UP(bytes, CHACHA_BLOCK_SIZE);

lib/crypto/arm64/chacha.h

42

int l = min(bytes, CHACHA_BLOCK_SIZE * 5);

lib/crypto/arm64/chacha.h

44

if (l <= CHACHA_BLOCK_SIZE) {

lib/crypto/arm64/chacha.h

45

u8 buf[CHACHA_BLOCK_SIZE];

lib/crypto/arm64/chacha.h

57

state->x[12] += DIV_ROUND_UP(l, CHACHA_BLOCK_SIZE);

lib/crypto/arm64/chacha.h

75

if (!static_branch_likely(&have_neon) || bytes <= CHACHA_BLOCK_SIZE ||

lib/crypto/chacha-block-generic.c

78

u8 out[CHACHA_BLOCK_SIZE], int nrounds)

lib/crypto/chacha.c

19

u8 stream[CHACHA_BLOCK_SIZE] __aligned(sizeof(long));

lib/crypto/chacha.c

21

while (bytes >= CHACHA_BLOCK_SIZE) {

lib/crypto/chacha.c

23

crypto_xor_cpy(dst, src, stream, CHACHA_BLOCK_SIZE);

lib/crypto/chacha.c

24

bytes -= CHACHA_BLOCK_SIZE;

lib/crypto/chacha.c

25

dst += CHACHA_BLOCK_SIZE;

lib/crypto/chacha.c

26

src += CHACHA_BLOCK_SIZE;

lib/crypto/chacha20poly1305.c

231

u8 chacha_stream[CHACHA_BLOCK_SIZE];

lib/crypto/chacha20poly1305.c

268

size_t l = min(length, CHACHA_BLOCK_SIZE - partial);

lib/crypto/chacha20poly1305.c

271

partial = (partial + l) & (CHACHA_BLOCK_SIZE - 1);

lib/crypto/chacha20poly1305.c

277

if (likely(length >= CHACHA_BLOCK_SIZE || length == sl)) {

lib/crypto/chacha20poly1305.c

281

l &= ~(CHACHA_BLOCK_SIZE - 1);

lib/crypto/chacha20poly1305.c

289

CHACHA_BLOCK_SIZE);

lib/crypto/powerpc/chacha.h

42

state->x[12] += l / CHACHA_BLOCK_SIZE;

lib/crypto/powerpc/chacha.h

54

if (!static_branch_likely(&have_p10) || bytes <= CHACHA_BLOCK_SIZE ||

lib/crypto/riscv/chacha.h

24

u8 block_buffer[CHACHA_BLOCK_SIZE];

lib/crypto/riscv/chacha.h

25

unsigned int full_blocks = bytes / CHACHA_BLOCK_SIZE;

lib/crypto/riscv/chacha.h

26

unsigned int tail_bytes = bytes % CHACHA_BLOCK_SIZE;

lib/crypto/riscv/chacha.h

34

src += full_blocks * CHACHA_BLOCK_SIZE;

lib/crypto/riscv/chacha.h

35

dst += full_blocks * CHACHA_BLOCK_SIZE;

lib/crypto/s390/chacha.h

24

if (bytes <= CHACHA_BLOCK_SIZE || nrounds != 20 || !cpu_has_vx()) {

lib/crypto/s390/chacha.h

33

state->x[12] += round_up(bytes, CHACHA_BLOCK_SIZE) /

lib/crypto/s390/chacha.h

34

CHACHA_BLOCK_SIZE;

lib/crypto/x86/chacha.h

102

if (bytes > CHACHA_BLOCK_SIZE) {

lib/crypto/x86/chacha.h

109

while (bytes >= CHACHA_BLOCK_SIZE * 4) {

lib/crypto/x86/chacha.h

111

bytes -= CHACHA_BLOCK_SIZE * 4;

lib/crypto/x86/chacha.h

112

src += CHACHA_BLOCK_SIZE * 4;

lib/crypto/x86/chacha.h

113

dst += CHACHA_BLOCK_SIZE * 4;

lib/crypto/x86/chacha.h

116

if (bytes > CHACHA_BLOCK_SIZE) {

lib/crypto/x86/chacha.h

143

bytes <= CHACHA_BLOCK_SIZE)

lib/crypto/x86/chacha.h

48

len = min(len, maxblocks * CHACHA_BLOCK_SIZE);

lib/crypto/x86/chacha.h

49

return round_up(len, CHACHA_BLOCK_SIZE) / CHACHA_BLOCK_SIZE;

lib/crypto/x86/chacha.h

56

while (bytes >= CHACHA_BLOCK_SIZE * 8) {

lib/crypto/x86/chacha.h

59

bytes -= CHACHA_BLOCK_SIZE * 8;

lib/crypto/x86/chacha.h

60

src += CHACHA_BLOCK_SIZE * 8;

lib/crypto/x86/chacha.h

61

dst += CHACHA_BLOCK_SIZE * 8;

lib/crypto/x86/chacha.h

64

if (bytes > CHACHA_BLOCK_SIZE * 4) {

lib/crypto/x86/chacha.h

70

if (bytes > CHACHA_BLOCK_SIZE * 2) {

lib/crypto/x86/chacha.h

85

while (bytes >= CHACHA_BLOCK_SIZE * 8) {

lib/crypto/x86/chacha.h

87

bytes -= CHACHA_BLOCK_SIZE * 8;

lib/crypto/x86/chacha.h

88

src += CHACHA_BLOCK_SIZE * 8;

lib/crypto/x86/chacha.h

89

dst += CHACHA_BLOCK_SIZE * 8;

lib/crypto/x86/chacha.h

92

if (bytes > CHACHA_BLOCK_SIZE * 4) {

lib/crypto/x86/chacha.h

97

if (bytes > CHACHA_BLOCK_SIZE * 2) {

lib/vdso/getrandom.c

238

nblocks = len / CHACHA_BLOCK_SIZE;

lib/vdso/getrandom.c

241

buffer += nblocks * CHACHA_BLOCK_SIZE;

lib/vdso/getrandom.c

242

len -= nblocks * CHACHA_BLOCK_SIZE;

lib/vdso/getrandom.c

245

BUILD_BUG_ON(sizeof(state->batch_key) % CHACHA_BLOCK_SIZE != 0);

lib/vdso/getrandom.c

249

sizeof(state->batch_key) / CHACHA_BLOCK_SIZE);