199         CR_ST_WORD(d, 2) = ror32(CR_ST_WORD(d, 1), 2);  in crypto_sha1_3reg()
245     CR_ST_WORD(m, 0) = ror32(CR_ST_WORD(m, 0), 2);  in HELPER()
279     return ror32(x, 2) ^ ror32(x, 13) ^ ror32(x, 22);  in S0()
284     return ror32(x, 6) ^ ror32(x, 11) ^ ror32(x, 25);  in S1()
289     return ror32(x, 7) ^ ror32(x, 18) ^ (x >> 3);  in s0()
294     return ror32(x, 17) ^ ror32(x, 19) ^ (x >> 10);  in s1()
503     t = CR_ST_WORD(d, 0) ^ CR_ST_WORD(n, 0) ^ ror32(CR_ST_WORD(m, 1), 17);  in HELPER()
504     CR_ST_WORD(d, 0) = t ^ ror32(t, 17) ^ ror32(t, 9);  in HELPER()
506     t = CR_ST_WORD(d, 1) ^ CR_ST_WORD(n, 1) ^ ror32(CR_ST_WORD(m, 2), 17);  in HELPER()
507     CR_ST_WORD(d, 1) = t ^ ror32(t, 17) ^ ror32(t, 9);  in HELPER()
509     t = CR_ST_WORD(d, 2) ^ CR_ST_WORD(n, 2) ^ ror32(CR_ST_WORD(m, 3), 17);  in HELPER()
510     CR_ST_WORD(d, 2) = t ^ ror32(t, 17) ^ ror32(t, 9);  in HELPER()
512     t = CR_ST_WORD(d, 3) ^ CR_ST_WORD(n, 3) ^ ror32(CR_ST_WORD(d, 0), 17);  in HELPER()
513     CR_ST_WORD(d, 3) = t ^ ror32(t, 17) ^ ror32(t, 9);  in HELPER()
529     uint32_t t = CR_ST_WORD(n, 0) ^ ror32(CR_ST_WORD(m, 0), 25);  in HELPER()
532     CR_ST_WORD(d, 1) ^= CR_ST_WORD(n, 1) ^ ror32(CR_ST_WORD(m, 1), 25);  in HELPER()
533     CR_ST_WORD(d, 2) ^= CR_ST_WORD(n, 2) ^ ror32(CR_ST_WORD(m, 2), 25);  in HELPER()
534     CR_ST_WORD(d, 3) ^= CR_ST_WORD(n, 3) ^ ror32(CR_ST_WORD(m, 3), 25) ^  in HELPER()
535                         ror32(t, 17) ^ ror32(t, 2) ^ ror32(t, 26);  in HELPER()
574         t += CR_ST_WORD(n, 3) ^ ror32(CR_ST_WORD(d, 3), 20);  in crypto_sm3tt()
576         CR_ST_WORD(d, 1) = ror32(CR_ST_WORD(d, 2), 23);  in crypto_sm3tt()
582         CR_ST_WORD(d, 1) = ror32(CR_ST_WORD(d, 2), 13);  in crypto_sm3tt()