66    __m128i state0, state1;  in intel_sha256_step()  local
81    state0 = _mm_alignr_epi8(tmp, state1, 8);    // ABEF  in intel_sha256_step()
88       abef_save = state0;  in intel_sha256_step()
96          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
98          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
105          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
107          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
115          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
117          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
125          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
130          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
136          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
141          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
147          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
152          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
158          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
163          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
169          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
174          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
180          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
185          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
191          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
196          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
202          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
207          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
213          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
218          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
224          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
229          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
235          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
240          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
245          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
250          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
255          state1 = _mm_sha256rnds2_epu32(state1, state0, msg);  in intel_sha256_step()
257          state0 = _mm_sha256rnds2_epu32(state0, state1, msg);  in intel_sha256_step()
260       state0 = _mm_add_epi32(state0, abef_save);  in intel_sha256_step()
268    tmp    = _mm_shuffle_epi32(state0, 0x1B);    // FEBA  in intel_sha256_step()
270    state0 = _mm_blend_epi16(tmp, state1, 0xF0); // DCBA  in intel_sha256_step()
273    _mm_store_si128((__m128i*) digest, state0);  in intel_sha256_step()