70 	erev = _mm_set_epi8(0, 1, 2, 3, 4, 5, 6, 7,  in br_aes_x86ni_ctrcbc_ctr()
92 		__m128i x0, x1, x2, x3;  in br_aes_x86ni_ctrcbc_ctr()  local
101 		x3 = _mm_shuffle_epi8(ivx3, erev);  in br_aes_x86ni_ctrcbc_ctr()
106 		x3 = _mm_xor_si128(x3, sk[0]);  in br_aes_x86ni_ctrcbc_ctr()
110 		x3 = _mm_aesenc_si128(x3, sk[1]);  in br_aes_x86ni_ctrcbc_ctr()
114 		x3 = _mm_aesenc_si128(x3, sk[2]);  in br_aes_x86ni_ctrcbc_ctr()
115 		x0 = _mm_aesenc_si128(x0, sk[3]);  in br_aes_x86ni_ctrcbc_ctr()
116 		x1 = _mm_aesenc_si128(x1, sk[3]);  in br_aes_x86ni_ctrcbc_ctr()
117 		x2 = _mm_aesenc_si128(x2, sk[3]);  in br_aes_x86ni_ctrcbc_ctr()
118 		x3 = _mm_aesenc_si128(x3, sk[3]);  in br_aes_x86ni_ctrcbc_ctr()
122 		x3 = _mm_aesenc_si128(x3, sk[4]);  in br_aes_x86ni_ctrcbc_ctr()
126 		x3 = _mm_aesenc_si128(x3, sk[5]);  in br_aes_x86ni_ctrcbc_ctr()
130 		x3 = _mm_aesenc_si128(x3, sk[6]);  in br_aes_x86ni_ctrcbc_ctr()
134 		x3 = _mm_aesenc_si128(x3, sk[7]);  in br_aes_x86ni_ctrcbc_ctr()
138 		x3 = _mm_aesenc_si128(x3, sk[8]);  in br_aes_x86ni_ctrcbc_ctr()
142 		x3 = _mm_aesenc_si128(x3, sk[9]);  in br_aes_x86ni_ctrcbc_ctr()
147 			x3 = _mm_aesenclast_si128(x3, sk[10]);  in br_aes_x86ni_ctrcbc_ctr()
152 			x3 = _mm_aesenc_si128(x3, sk[10]);  in br_aes_x86ni_ctrcbc_ctr()
156 			x3 = _mm_aesenc_si128(x3, sk[11]);  in br_aes_x86ni_ctrcbc_ctr()
160 			x3 = _mm_aesenclast_si128(x3, sk[12]);  in br_aes_x86ni_ctrcbc_ctr()
165 			x3 = _mm_aesenc_si128(x3, sk[10]);  in br_aes_x86ni_ctrcbc_ctr()
169 			x3 = _mm_aesenc_si128(x3, sk[11]);  in br_aes_x86ni_ctrcbc_ctr()
173 			x3 = _mm_aesenc_si128(x3, sk[12]);  in br_aes_x86ni_ctrcbc_ctr()
177 			x3 = _mm_aesenc_si128(x3, sk[13]);  in br_aes_x86ni_ctrcbc_ctr()
181 			x3 = _mm_aesenclast_si128(x3, sk[14]);  in br_aes_x86ni_ctrcbc_ctr()
190 			x3 = _mm_xor_si128(x3,  in br_aes_x86ni_ctrcbc_ctr()
195 			_mm_storeu_si128((void *)(buf + 48), x3);  in br_aes_x86ni_ctrcbc_ctr()
204 			_mm_storeu_si128((void *)(tmp + 48), x3);  in br_aes_x86ni_ctrcbc_ctr()
278 		x = _mm_aesenc_si128(x, sk[3]);  in br_aes_x86ni_ctrcbc_mac()
327 	erev = _mm_set_epi8(0, 1, 2, 3, 4, 5, 6, 7,  in br_aes_x86ni_ctrcbc_encrypt()
359 		x0 = _mm_aesenc_si128(x0, sk[3]);  in br_aes_x86ni_ctrcbc_encrypt()
360 		x1 = _mm_aesenc_si128(x1, sk[3]);  in br_aes_x86ni_ctrcbc_encrypt()
423 			cmx = _mm_aesenc_si128(cmx, sk[3]);  in br_aes_x86ni_ctrcbc_encrypt()
475 	erev = _mm_set_epi8(0, 1, 2, 3, 4, 5, 6, 7,  in br_aes_x86ni_ctrcbc_decrypt()
506 		x0 = _mm_aesenc_si128(x0, sk[3]);  in br_aes_x86ni_ctrcbc_decrypt()
507 		x1 = _mm_aesenc_si128(x1, sk[3]);  in br_aes_x86ni_ctrcbc_decrypt()