58 #define SHA512_EXP(a, b, c, d, e, f, g, h, j)                               \  argument
60     t1 = wv[h] + SHA512_F2(wv[e]) + CH(wv[e], wv[f], wv[g]) + sha512_k[j] + \
61          w[j];                                                              \
135   int i, j;  in SHA512_transform()  local
232     j = 0;  in SHA512_transform()
235       SHA512_EXP(0, 1, 2, 3, 4, 5, 6, 7, j);  in SHA512_transform()
236       j++;  in SHA512_transform()
237       SHA512_EXP(7, 0, 1, 2, 3, 4, 5, 6, j);  in SHA512_transform()
238       j++;  in SHA512_transform()
239       SHA512_EXP(6, 7, 0, 1, 2, 3, 4, 5, j);  in SHA512_transform()
240       j++;  in SHA512_transform()
241       SHA512_EXP(5, 6, 7, 0, 1, 2, 3, 4, j);  in SHA512_transform()
242       j++;  in SHA512_transform()
243       SHA512_EXP(4, 5, 6, 7, 0, 1, 2, 3, j);  in SHA512_transform()
244       j++;  in SHA512_transform()
245       SHA512_EXP(3, 4, 5, 6, 7, 0, 1, 2, j);  in SHA512_transform()
246       j++;  in SHA512_transform()
247       SHA512_EXP(2, 3, 4, 5, 6, 7, 0, 1, j);  in SHA512_transform()
248       j++;  in SHA512_transform()
249       SHA512_EXP(1, 2, 3, 4, 5, 6, 7, 0, j);  in SHA512_transform()
250       j++;  in SHA512_transform()
251     } while (j < 80);  in SHA512_transform()
262     for (j = 0; j < 16; j++) {  in SHA512_transform()
263       PACK64(&sub_block[j << 3], &w[j]);  in SHA512_transform()
266     for (j = 16; j < 80; j++) {  in SHA512_transform()
267       SHA512_SCR(j);  in SHA512_transform()
270     for (j = 0; j < 8; j++) {  in SHA512_transform()
271       wv[j] = ctx->h[j];  in SHA512_transform()
274     for (j = 0; j < 80; j++) {  in SHA512_transform()
275       t1 = wv[7] + SHA512_F2(wv[4]) + CH(wv[4], wv[5], wv[6]) + sha512_k[j] +  in SHA512_transform()
276            w[j];  in SHA512_transform()
288     for (j = 0; j < 8; j++)  in SHA512_transform()
289       ctx->h[j] += wv[j];  in SHA512_transform()