Lines Matching refs:q1
59 /* These two tables are the q0 and q1 permutations, exactly as described in
87 static const byte q1[256] = {
113 /* These MDS tables are actually tables of MDS composed with q0 and q1,
119 * mds[0][i] = MDS (q1[i] 0 0 0)^T mds[1][i] = MDS (0 q0[i] 0 0)^T
120 * mds[2][i] = MDS (0 0 q1[i] 0)^T mds[3][i] = MDS (0 0 0 q0[i])^T
410 * S-box entries, preprocessed through q0 and q1. */
494 * are the index numbers preprocessed through the q0 and q1 tables
502 ctx->s[2][i] = mds[2][q1[(a) ^ sc] ^ sg]; \
503 ctx->s[3][i] = mds[3][q1[(b) ^ sd] ^ sh]
512 ctx->s[0][i] = mds[0][q0[q0[q1[(b) ^ sa] ^ se] ^ si] ^ sm]; \
513 ctx->s[1][i] = mds[1][q0[q1[q1[(a) ^ sb] ^ sf] ^ sj] ^ sn]; \
514 ctx->s[2][i] = mds[2][q1[q0[q0[(a) ^ sc] ^ sg] ^ sk] ^ so]; \
515 ctx->s[3][i] = mds[3][q1[q1[q0[(b) ^ sd] ^ sh] ^ sl] ^ sp];
525 * preprocessed through q0 and q1 respectively; for longer keys they are the
534 * preprocessed through q0 and q1 respectively; j is the index of the first
541 ^ mds[2][q1[c ^ key[(j) + 10]] ^ key[(j) + 2]] \
542 ^ mds[3][q1[d ^ key[(j) + 11]] ^ key[(j) + 3]]
552 CALC_K_2 (q0[q1[b ^ key[(j) + 24]] ^ key[(j) + 16]], \
553 q1[q1[a ^ key[(j) + 25]] ^ key[(j) + 17]], \
555 q1[q0[b ^ key[(j) + 27]] ^ key[(j) + 19]], j)
653 * indices of subkeys, preprocessed through q0 and q1. */
684 * indices of subkeys, preprocessed through q0 and q1. */