113 	/* compute s->K1 and s->K2 from s->iv using s->keyid */  in tc_cmac_setup()
114 	_set(s->iv, 0, TC_AES_BLOCK_SIZE);  in tc_cmac_setup()
115 	tc_aes_encrypt(s->iv, s->iv, s->sched);  in tc_cmac_setup()
116 	gf_double (s->K1, s->iv);  in tc_cmac_setup()
119 	/* reset s->iv to 0 in case someone wants to compute now */  in tc_cmac_setup()
145 	_set(s->iv, 0, TC_AES_BLOCK_SIZE);  in tc_cmac_init()
198 			s->iv[i] ^= s->leftover[i];  in tc_cmac_update()
200 		tc_aes_encrypt(s->iv, s->iv, s->sched);  in tc_cmac_update()
206 			s->iv[i] ^= data[i];  in tc_cmac_update()
208 		tc_aes_encrypt(s->iv, s->iv, s->sched);  in tc_cmac_update()
245 		s->iv[i] ^= s->leftover[i] ^ k[i];  in tc_cmac_final()
248 	tc_aes_encrypt(tag, s->iv, s->sched);  in tc_cmac_final()