60 	u32 x[16];  in salsa20_wordtobyte()  local
63 	memcpy(x, input, sizeof(x));  in salsa20_wordtobyte()
65 		x[ 4] ^= rol32((x[ 0] + x[12]),  7);  in salsa20_wordtobyte()
66 		x[ 8] ^= rol32((x[ 4] + x[ 0]),  9);  in salsa20_wordtobyte()
67 		x[12] ^= rol32((x[ 8] + x[ 4]), 13);  in salsa20_wordtobyte()
68 		x[ 0] ^= rol32((x[12] + x[ 8]), 18);  in salsa20_wordtobyte()
69 		x[ 9] ^= rol32((x[ 5] + x[ 1]),  7);  in salsa20_wordtobyte()
70 		x[13] ^= rol32((x[ 9] + x[ 5]),  9);  in salsa20_wordtobyte()
71 		x[ 1] ^= rol32((x[13] + x[ 9]), 13);  in salsa20_wordtobyte()
72 		x[ 5] ^= rol32((x[ 1] + x[13]), 18);  in salsa20_wordtobyte()
73 		x[14] ^= rol32((x[10] + x[ 6]),  7);  in salsa20_wordtobyte()
74 		x[ 2] ^= rol32((x[14] + x[10]),  9);  in salsa20_wordtobyte()
75 		x[ 6] ^= rol32((x[ 2] + x[14]), 13);  in salsa20_wordtobyte()
76 		x[10] ^= rol32((x[ 6] + x[ 2]), 18);  in salsa20_wordtobyte()
77 		x[ 3] ^= rol32((x[15] + x[11]),  7);  in salsa20_wordtobyte()
78 		x[ 7] ^= rol32((x[ 3] + x[15]),  9);  in salsa20_wordtobyte()
79 		x[11] ^= rol32((x[ 7] + x[ 3]), 13);  in salsa20_wordtobyte()
80 		x[15] ^= rol32((x[11] + x[ 7]), 18);  in salsa20_wordtobyte()
81 		x[ 1] ^= rol32((x[ 0] + x[ 3]),  7);  in salsa20_wordtobyte()
82 		x[ 2] ^= rol32((x[ 1] + x[ 0]),  9);  in salsa20_wordtobyte()
83 		x[ 3] ^= rol32((x[ 2] + x[ 1]), 13);  in salsa20_wordtobyte()
84 		x[ 0] ^= rol32((x[ 3] + x[ 2]), 18);  in salsa20_wordtobyte()
85 		x[ 6] ^= rol32((x[ 5] + x[ 4]),  7);  in salsa20_wordtobyte()
86 		x[ 7] ^= rol32((x[ 6] + x[ 5]),  9);  in salsa20_wordtobyte()
87 		x[ 4] ^= rol32((x[ 7] + x[ 6]), 13);  in salsa20_wordtobyte()
88 		x[ 5] ^= rol32((x[ 4] + x[ 7]), 18);  in salsa20_wordtobyte()
89 		x[11] ^= rol32((x[10] + x[ 9]),  7);  in salsa20_wordtobyte()
90 		x[ 8] ^= rol32((x[11] + x[10]),  9);  in salsa20_wordtobyte()
91 		x[ 9] ^= rol32((x[ 8] + x[11]), 13);  in salsa20_wordtobyte()
92 		x[10] ^= rol32((x[ 9] + x[ 8]), 18);  in salsa20_wordtobyte()
93 		x[12] ^= rol32((x[15] + x[14]),  7);  in salsa20_wordtobyte()
94 		x[13] ^= rol32((x[12] + x[15]),  9);  in salsa20_wordtobyte()
95 		x[14] ^= rol32((x[13] + x[12]), 13);  in salsa20_wordtobyte()
96 		x[15] ^= rol32((x[14] + x[13]), 18);  in salsa20_wordtobyte()
99 		x[i] += input[i];  in salsa20_wordtobyte()
101 		U32TO8_LITTLE(output + 4 * i,x[i]);  in salsa20_wordtobyte()