[mbed-tls] Re: Where is the AES 128 GCM key expansion/generate round key performed?

I have also added logging on all 3x AES-NI key schedule functions, along with what I think is the non-AES-NI in aes.c:547.

The 256 bit version is called 8x times at the beginning. The 128 bit is called 2x times at the beginning, but after neither of all 4 functions are called (and I am receiving data and it's getting decrypted).

I am genuinely puzzled (and intrigued).