376 #define SUBKEY_R(INDEX) (subkey[(INDEX)*2 + 1])  macro
468 	SUBKEY_R(0) = subR[0] ^ subR[2];  in camellia_setup_tail()
470 	SUBKEY_R(2) = subR[3];  in camellia_setup_tail()
472 	SUBKEY_R(3) = subR[2] ^ subR[4];  in camellia_setup_tail()
474 	SUBKEY_R(4) = subR[3] ^ subR[5];  in camellia_setup_tail()
476 	SUBKEY_R(5) = subR[4] ^ subR[6];  in camellia_setup_tail()
478 	SUBKEY_R(6) = subR[5] ^ subR[7];  in camellia_setup_tail()
483 	SUBKEY_R(7) = subR[6] ^ tr;  in camellia_setup_tail()
485 	SUBKEY_R(8) = subR[8];  in camellia_setup_tail()
487 	SUBKEY_R(9) = subR[9];  in camellia_setup_tail()
492 	SUBKEY_R(10) = tr ^ subR[11];  in camellia_setup_tail()
494 	SUBKEY_R(11) = subR[10] ^ subR[12];  in camellia_setup_tail()
496 	SUBKEY_R(12) = subR[11] ^ subR[13];  in camellia_setup_tail()
498 	SUBKEY_R(13) = subR[12] ^ subR[14];  in camellia_setup_tail()
500 	SUBKEY_R(14) = subR[13] ^ subR[15];  in camellia_setup_tail()
505 	SUBKEY_R(15) = subR[14] ^ tr;  in camellia_setup_tail()
507 	SUBKEY_R(16) = subR[16];  in camellia_setup_tail()
509 	SUBKEY_R(17) = subR[17];  in camellia_setup_tail()
514 	SUBKEY_R(18) = tr ^ subR[19];  in camellia_setup_tail()
516 	SUBKEY_R(19) = subR[18] ^ subR[20];  in camellia_setup_tail()
518 	SUBKEY_R(20) = subR[19] ^ subR[21];  in camellia_setup_tail()
520 	SUBKEY_R(21) = subR[20] ^ subR[22];  in camellia_setup_tail()
522 	SUBKEY_R(22) = subR[21] ^ subR[23];  in camellia_setup_tail()
525 		SUBKEY_R(23) = subR[22];  in camellia_setup_tail()
527 		SUBKEY_R(24) = subR[24] ^ subR[23];  in camellia_setup_tail()
533 		SUBKEY_R(23) = subR[22] ^ tr;  in camellia_setup_tail()
535 		SUBKEY_R(24) = subR[24];  in camellia_setup_tail()
537 		SUBKEY_R(25) = subR[25];  in camellia_setup_tail()
542 		SUBKEY_R(26) = tr ^ subR[27];  in camellia_setup_tail()
544 		SUBKEY_R(27) = subR[26] ^ subR[28];  in camellia_setup_tail()
546 		SUBKEY_R(28) = subR[27] ^ subR[29];  in camellia_setup_tail()
548 		SUBKEY_R(29) = subR[28] ^ subR[30];  in camellia_setup_tail()
550 		SUBKEY_R(30) = subR[29] ^ subR[31];  in camellia_setup_tail()
552 		SUBKEY_R(31) = subR[30];  in camellia_setup_tail()
554 		SUBKEY_R(32) = subR[32] ^ subR[31];  in camellia_setup_tail()
870 	io[1] ^= SUBKEY_R(0);  in camellia_do_encrypt()
875 			 SUBKEY_L(i + 2), SUBKEY_R(i + 2), \  in camellia_do_encrypt()
878 			 SUBKEY_L(i + 3), SUBKEY_R(i + 3), \  in camellia_do_encrypt()
881 			 SUBKEY_L(i + 4), SUBKEY_R(i + 4), \  in camellia_do_encrypt()
884 			 SUBKEY_L(i + 5), SUBKEY_R(i + 5), \  in camellia_do_encrypt()
887 			 SUBKEY_L(i + 6), SUBKEY_R(i + 6), \  in camellia_do_encrypt()
890 			 SUBKEY_L(i + 7), SUBKEY_R(i + 7), \  in camellia_do_encrypt()
895 		     SUBKEY_L(i + 0), SUBKEY_R(i + 0), \  in camellia_do_encrypt()
896 		     SUBKEY_L(i + 1), SUBKEY_R(i + 1), \  in camellia_do_encrypt()
915 	io[3] ^= SUBKEY_R(max);  in camellia_do_encrypt()
925 	io[1] ^= SUBKEY_R(i);  in camellia_do_decrypt()
930 			 SUBKEY_L(i + 7), SUBKEY_R(i + 7), \  in camellia_do_decrypt()
933 			 SUBKEY_L(i + 6), SUBKEY_R(i + 6), \  in camellia_do_decrypt()
936 			 SUBKEY_L(i + 5), SUBKEY_R(i + 5), \  in camellia_do_decrypt()
939 			 SUBKEY_L(i + 4), SUBKEY_R(i + 4), \  in camellia_do_decrypt()
942 			 SUBKEY_L(i + 3), SUBKEY_R(i + 3), \  in camellia_do_decrypt()
945 			 SUBKEY_L(i + 2), SUBKEY_R(i + 2), \  in camellia_do_decrypt()
950 		     SUBKEY_L(i + 1), SUBKEY_R(i + 1), \  in camellia_do_decrypt()
951 		     SUBKEY_L(i + 0), SUBKEY_R(i + 0), \  in camellia_do_decrypt()
970 	io[3] ^= SUBKEY_R(0);  in camellia_do_decrypt()