110 	__m128i tmp2, tmp3, tmp4, tmp5, tmp6, tmp7, tmp8, tmp9;  in gfmul()  local
113 	tmp4 = _mm_clmulepi64_si128(a, b, 0x10);  in gfmul()
117 	tmp4 = _mm_xor_si128(tmp4, tmp5);  in gfmul()
118 	tmp5 = _mm_slli_si128(tmp4, 8);  in gfmul()
119 	tmp4 = _mm_srli_si128(tmp4, 8);  in gfmul()
121 	tmp6 = _mm_xor_si128(tmp6, tmp4);  in gfmul()
146 	tmp4 = _mm_srli_epi32(tmp3, 2);  in gfmul()
148 	tmp2 = _mm_xor_si128(tmp2, tmp4);  in gfmul()
168 	__m128i tmp4, tmp5, tmp6, tmp7;  in reduce4()  local
190 	tmp4 = _mm_shuffle_epi32(X1, 78);  in reduce4()
192 	tmp4 = _mm_xor_si128(tmp4, X1);  in reduce4()
206 	tmp0 = _mm_clmulepi64_si128(tmp0, tmp4, 0x00);  in reduce4()
217 	tmp4 = _mm_slli_si128(tmp0, 8);  in reduce4()
220 	lo = _mm_xor_si128(tmp4, lo);  in reduce4()
249 	tmp4 = _mm_srli_epi32(tmp3, 2);  in reduce4()
251 	tmp2 = _mm_xor_si128(tmp2, tmp4);  in reduce4()
275 	__m128i tmp1, tmp2, tmp3, tmp4;  in AES_GCM_encrypt()  local
353 		tmp4 = _mm_loadu_si128(&((const __m128i *)addt)[i*4+3]);  in AES_GCM_encrypt()
358 		tmp4 = _mm_shuffle_epi8(tmp4, BSWAP_MASK);  in AES_GCM_encrypt()
361 		reduce4(H, H2, H3, H4, tmp4, tmp3, tmp2, tmp1, &X);  in AES_GCM_encrypt()
393 		tmp4 = _mm_shuffle_epi8(ctr4, BSWAP_EPI64);  in AES_GCM_encrypt()
411 		tmp4 =_mm_xor_si128(tmp4, KEY[0]);  in AES_GCM_encrypt()
421 			tmp4 = _mm_aesenc_si128(tmp4, KEY[j]);  in AES_GCM_encrypt()
430 		tmp4 =_mm_aesenclast_si128(tmp4, KEY[nr]);  in AES_GCM_encrypt()
442 		tmp4 = _mm_xor_si128(tmp4,  in AES_GCM_encrypt()
456 		_mm_storeu_si128(&((__m128i*)out)[i*8+3], tmp4);  in AES_GCM_encrypt()
465 		tmp4 = _mm_shuffle_epi8(tmp4, BSWAP_MASK);  in AES_GCM_encrypt()
473 		reduce4(H, H2, H3, H4, tmp4, tmp3, tmp2, tmp1, &X);  in AES_GCM_encrypt()
536 	__m128i tmp1, tmp2, tmp3, tmp4;  in AES_GCM_decrypt()  local
614 		tmp4 = _mm_loadu_si128(&((const __m128i *)addt)[i*4+3]);  in AES_GCM_decrypt()
619 		tmp4 = _mm_shuffle_epi8(tmp4, BSWAP_MASK);  in AES_GCM_decrypt()
623 		reduce4(H, H2, H3, H4, tmp4, tmp3, tmp2, tmp1, &X);  in AES_GCM_decrypt()
646 		tmp4 = _mm_loadu_si128(&((const __m128i *)in)[i*4+3]);  in AES_GCM_decrypt()
651 		tmp4 = _mm_shuffle_epi8(tmp4, BSWAP_MASK);  in AES_GCM_decrypt()
655 		reduce4(H, H2, H3, H4, tmp4, tmp3, tmp2, tmp1, &X);  in AES_GCM_decrypt()
698 		tmp4 = _mm_shuffle_epi8(ctr4, BSWAP_EPI64);  in AES_GCM_decrypt()
716 		tmp4 =_mm_xor_si128(tmp4, KEY[0]);  in AES_GCM_decrypt()
726 			tmp4 = _mm_aesenc_si128(tmp4, KEY[j]);  in AES_GCM_decrypt()
735 		tmp4 =_mm_aesenclast_si128(tmp4, KEY[nr]);  in AES_GCM_decrypt()
747 		tmp4 = _mm_xor_si128(tmp4,  in AES_GCM_decrypt()
761 		_mm_storeu_si128(&((__m128i*)out)[i*8+3], tmp4);  in AES_GCM_decrypt()
770 		tmp4 = _mm_shuffle_epi8(tmp4, BSWAP_MASK);  in AES_GCM_decrypt()