struct gcm_context_data *gdata,
                                   u8 *auth_tag, unsigned long auth_tag_len);
 
-static struct aesni_gcm_tfm_s {
-void (*init)(void *ctx,
-                               struct gcm_context_data *gdata,
-                               u8 *iv,
-                               u8 *hash_subkey, const u8 *aad,
-                               unsigned long aad_len);
-void (*enc_update)(void *ctx,
-                                       struct gcm_context_data *gdata, u8 *out,
-                                       const u8 *in,
-                                       unsigned long plaintext_len);
-void (*dec_update)(void *ctx,
-                                       struct gcm_context_data *gdata, u8 *out,
-                                       const u8 *in,
-                                       unsigned long ciphertext_len);
-void (*finalize)(void *ctx,
-                               struct gcm_context_data *gdata,
-                               u8 *auth_tag, unsigned long auth_tag_len);
+static const struct aesni_gcm_tfm_s {
+       void (*init)(void *ctx, struct gcm_context_data *gdata, u8 *iv,
+                    u8 *hash_subkey, const u8 *aad, unsigned long aad_len);
+       void (*enc_update)(void *ctx, struct gcm_context_data *gdata, u8 *out,
+                          const u8 *in, unsigned long plaintext_len);
+       void (*dec_update)(void *ctx, struct gcm_context_data *gdata, u8 *out,
+                          const u8 *in, unsigned long ciphertext_len);
+       void (*finalize)(void *ctx, struct gcm_context_data *gdata,
+                        u8 *auth_tag, unsigned long auth_tag_len);
 } *aesni_gcm_tfm;
 
-struct aesni_gcm_tfm_s aesni_gcm_tfm_sse = {
+static const struct aesni_gcm_tfm_s aesni_gcm_tfm_sse = {
        .init = &aesni_gcm_init,
        .enc_update = &aesni_gcm_enc_update,
        .dec_update = &aesni_gcm_dec_update,
                        const u8 *aad, unsigned long aad_len,
                        u8 *auth_tag, unsigned long auth_tag_len);
 
-struct aesni_gcm_tfm_s aesni_gcm_tfm_avx_gen2 = {
+static const struct aesni_gcm_tfm_s aesni_gcm_tfm_avx_gen2 = {
        .init = &aesni_gcm_init_avx_gen2,
        .enc_update = &aesni_gcm_enc_update_avx_gen2,
        .dec_update = &aesni_gcm_dec_update_avx_gen2,
                        const u8 *aad, unsigned long aad_len,
                        u8 *auth_tag, unsigned long auth_tag_len);
 
-struct aesni_gcm_tfm_s aesni_gcm_tfm_avx_gen4 = {
+static const struct aesni_gcm_tfm_s aesni_gcm_tfm_avx_gen4 = {
        .init = &aesni_gcm_init_avx_gen4,
        .enc_update = &aesni_gcm_enc_update_avx_gen4,
        .dec_update = &aesni_gcm_dec_update_avx_gen4,
 {
        struct crypto_aead *tfm = crypto_aead_reqtfm(req);
        unsigned long auth_tag_len = crypto_aead_authsize(tfm);
-       struct aesni_gcm_tfm_s *gcm_tfm = aesni_gcm_tfm;
+       const struct aesni_gcm_tfm_s *gcm_tfm = aesni_gcm_tfm;
        struct gcm_context_data data AESNI_ALIGN_ATTR;
        struct scatter_walk dst_sg_walk = {};
        unsigned long left = req->cryptlen;