637     block ad_offset;     /* Memory correct               */  member
808     block ad_offset, ad_checksum;  in process_ad()  local
812     ad_offset = ctx->ad_offset;  in process_ad()
821             oa[0] = xor_block(ad_offset, ctx->L[0]);  in process_ad()
825             oa[2] = xor_block(ad_offset, ctx->L[1]);  in process_ad()
828             ad_offset = xor_block(oa[2], getL(ctx, tz));  in process_ad()
829             ta[3] = xor_block(ad_offset, adp[3]);  in process_ad()
837             oa[6] = xor_block(ad_offset, ctx->L[2]);  in process_ad()
839             ad_offset = xor_block(oa[6], getL(ctx, tz));  in process_ad()
840             ta[7] = xor_block(ad_offset, adp[7]);  in process_ad()
856         ctx->ad_offset = ad_offset;  in process_ad()
869                 tmp.bl = xor_block(ad_offset, ctx->L[0]);  in process_ad()
873                 ad_offset = xor_block(ad_offset, ctx->L[1]);  in process_ad()
874                 ta[2] = xor_block(ad_offset, adp[2]);  in process_ad()
875                 ad_offset = xor_block(ad_offset, ctx->L[2]);  in process_ad()
876                 ta[3] = xor_block(ad_offset, adp[3]);  in process_ad()
882                 ad_offset = xor_block(ad_offset, ctx->L[0]);  in process_ad()
883                 ta[k] = xor_block(ad_offset, adp[k]);  in process_ad()
884                 ad_offset = xor_block(ad_offset, getL(ctx, ntz(k + 2)));  in process_ad()
885                 ta[k + 1] = xor_block(ad_offset, adp[k + 1]);  in process_ad()
890                 ad_offset = xor_block(ad_offset, ctx->L[0]);  in process_ad()
891                 ta[k] = xor_block(ad_offset, adp[k]);  in process_ad()
896                 ad_offset = xor_block(ad_offset, ctx->Lstar);  in process_ad()
900                 ta[k] = xor_block(ad_offset, tmp.bl);  in process_ad()
953         ctx->ad_offset = ctx->checksum = zero_block();  in ae_encrypt()
1178         ctx->ad_offset = ctx->checksum = zero_block();  in ae_decrypt()