Lines Matching full:final
761 ext v8.16b, v11.16b, v11.16b, #8 //prepare final partial tag
793 st1 { v5.16b}, [x2], #16 //AES final-3 block - store result
795 ldp x6, x7, [x0], #16 //AES final-2 block - load input low & high
800 rev64 v4.16b, v5.16b //GHASH final-3 block
803 eor x7, x7, x14 //AES final-2 block - round 10 high
804 eor x6, x6, x13 //AES final-2 block - round 10 low
806 fmov d5, x6 //AES final-2 block - mov low
809 fmov v5.d[1], x7 //AES final-2 block - mov high
811 pmull v11.1q, v4.1d, v15.1d //GHASH final-3 block - low
812 mov d22, v4.d[1] //GHASH final-3 block - mid
814 pmull2 v9.1q, v4.2d, v15.2d //GHASH final-3 block - high
816 mov d10, v17.d[1] //GHASH final-3 block - mid
818 eor v5.16b, v5.16b, v1.16b //AES final-2 block - result
819 eor v22.8b, v22.8b, v4.8b //GHASH final-3 block - mid
821 pmull v10.1q, v22.1d, v10.1d //GHASH final-3 block - mid
824 st1 { v5.16b}, [x2], #16 //AES final-2 block - store result
826 rev64 v4.16b, v5.16b //GHASH final-2 block
827 ldp x6, x7, [x0], #16 //AES final-1 block - load input low & high
834 eor x6, x6, x13 //AES final-1 block - round 10 low
836 fmov d5, x6 //AES final-1 block - mov low
837 eor x7, x7, x14 //AES final-1 block - round 10 high
839 pmull2 v20.1q, v4.2d, v14.2d //GHASH final-2 block - high
840 fmov v5.d[1], x7 //AES final-1 block - mov high
842 mov d22, v4.d[1] //GHASH final-2 block - mid
844 pmull v21.1q, v4.1d, v14.1d //GHASH final-2 block - low
846 eor v9.16b, v9.16b, v20.16b //GHASH final-2 block - high
848 eor v22.8b, v22.8b, v4.8b //GHASH final-2 block - mid
850 eor v5.16b, v5.16b, v2.16b //AES final-1 block - result
852 eor v11.16b, v11.16b, v21.16b //GHASH final-2 block - low
854 pmull v22.1q, v22.1d, v17.1d //GHASH final-2 block - mid
858 eor v10.16b, v10.16b, v22.16b //GHASH final-2 block - mid
861 st1 { v5.16b}, [x2], #16 //AES final-1 block - store result
863 rev64 v4.16b, v5.16b //GHASH final-1 block
864 ldp x6, x7, [x0], #16 //AES final block - load input low & high
871 eor x7, x7, x14 //AES final block - round 10 high
872 eor x6, x6, x13 //AES final block - round 10 low
874 fmov d5, x6 //AES final block - mov low
876 pmull2 v20.1q, v4.2d, v13.2d //GHASH final-1 block - high
877 fmov v5.d[1], x7 //AES final block - mov high
879 mov d22, v4.d[1] //GHASH final-1 block - mid
881 pmull v21.1q, v4.1d, v13.1d //GHASH final-1 block - low
883 eor v22.8b, v22.8b, v4.8b //GHASH final-1 block - mid
885 eor v5.16b, v5.16b, v3.16b //AES final block - result
887 ins v22.d[1], v22.d[0] //GHASH final-1 block - mid
889 pmull2 v22.1q, v22.2d, v16.2d //GHASH final-1 block - mid
891 eor v11.16b, v11.16b, v21.16b //GHASH final-1 block - low
893 eor v9.16b, v9.16b, v20.16b //GHASH final-1 block - high
895 eor v10.16b, v10.16b, v22.16b //GHASH final-1 block - mid
921 rev64 v4.16b, v5.16b //GHASH final block
925 mov d8, v4.d[1] //GHASH final block - mid
927 pmull v21.1q, v4.1d, v12.1d //GHASH final block - low
930 eor v8.8b, v8.8b, v4.8b //GHASH final block - mid
936 pmull2 v20.1q, v4.2d, v12.2d //GHASH final block - high
938 pmull v8.1q, v8.1d, v16.1d //GHASH final block - mid
940 eor v11.16b, v11.16b, v21.16b //GHASH final block - low
942 eor v9.16b, v9.16b, v20.16b //GHASH final block - high
944 eor v10.16b, v10.16b, v8.16b //GHASH final block - mid
1753 ext v8.16b, v11.16b, v11.16b, #8 //prepare final partial tag
1780 rev64 v4.16b, v5.16b //GHASH final-3 block
1781 ld1 { v5.16b}, [x0], #16 //AES final-2 block - load ciphertext
1785 mov d10, v17.d[1] //GHASH final-3 block - mid
1786 stp x6, x7, [x2], #16 //AES final-3 block - store result
1787 eor v0.16b, v5.16b, v1.16b //AES final-2 block - result
1789 mov d22, v4.d[1] //GHASH final-3 block - mid
1790 mov x7, v0.d[1] //AES final-2 block - mov high
1792 pmull v11.1q, v4.1d, v15.1d //GHASH final-3 block - low
1793 mov x6, v0.d[0] //AES final-2 block - mov low
1795 pmull2 v9.1q, v4.2d, v15.2d //GHASH final-3 block - high
1797 eor v22.8b, v22.8b, v4.8b //GHASH final-3 block - mid
1800 eor x7, x7, x14 //AES final-2 block - round 10 high
1804 pmull v10.1q, v22.1d, v10.1d //GHASH final-3 block - mid
1805 eor x6, x6, x13 //AES final-2 block - round 10 low
1811 rev64 v4.16b, v5.16b //GHASH final-2 block
1812 ld1 { v5.16b}, [x0], #16 //AES final-1 block - load ciphertext
1816 eor v0.16b, v5.16b, v2.16b //AES final-1 block - result
1817 stp x6, x7, [x2], #16 //AES final-2 block - store result
1819 mov d22, v4.d[1] //GHASH final-2 block - mid
1821 pmull v21.1q, v4.1d, v14.1d //GHASH final-2 block - low
1823 pmull2 v20.1q, v4.2d, v14.2d //GHASH final-2 block - high
1824 mov x6, v0.d[0] //AES final-1 block - mov low
1826 mov x7, v0.d[1] //AES final-1 block - mov high
1827 eor v22.8b, v22.8b, v4.8b //GHASH final-2 block - mid
1831 pmull v22.1q, v22.1d, v17.1d //GHASH final-2 block - mid
1833 eor x6, x6, x13 //AES final-1 block - round 10 low
1837 eor v11.16b, v11.16b, v21.16b //GHASH final-2 block - low
1839 eor v9.16b, v9.16b, v20.16b //GHASH final-2 block - high
1841 eor v10.16b, v10.16b, v22.16b //GHASH final-2 block - mid
1842 eor x7, x7, x14 //AES final-1 block - round 10 high
1848 rev64 v4.16b, v5.16b //GHASH final-1 block
1850 ld1 { v5.16b}, [x0], #16 //AES final block - load ciphertext
1853 mov d22, v4.d[1] //GHASH final-1 block - mid
1855 eor v0.16b, v5.16b, v3.16b //AES final block - result
1857 eor v22.8b, v22.8b, v4.8b //GHASH final-1 block - mid
1859 stp x6, x7, [x2], #16 //AES final-1 block - store result
1860 mov x6, v0.d[0] //AES final block - mov low
1862 mov x7, v0.d[1] //AES final block - mov high
1863 ins v22.d[1], v22.d[0] //GHASH final-1 block - mid
1865 pmull v21.1q, v4.1d, v13.1d //GHASH final-1 block - low
1867 pmull2 v20.1q, v4.2d, v13.2d //GHASH final-1 block - high
1869 pmull2 v22.1q, v22.2d, v16.2d //GHASH final-1 block - mid
1872 eor v11.16b, v11.16b, v21.16b //GHASH final-1 block - low
1874 eor v9.16b, v9.16b, v20.16b //GHASH final-1 block - high
1875 eor x7, x7, x14 //AES final block - round 10 high
1879 eor x6, x6, x13 //AES final block - round 10 low
1883 eor v10.16b, v10.16b, v22.16b //GHASH final-1 block - mid
1908 rev64 v4.16b, v5.16b //GHASH final block
1916 pmull2 v20.1q, v4.2d, v12.2d //GHASH final block - high
1917 mov d8, v4.d[1] //GHASH final block - mid
1919 eor v8.8b, v8.8b, v4.8b //GHASH final block - mid
1920 eor v9.16b, v9.16b, v20.16b //GHASH final block - high
1922 pmull v8.1q, v8.1d, v16.1d //GHASH final block - mid
1924 pmull v21.1q, v4.1d, v12.1d //GHASH final block - low
1934 eor v10.16b, v10.16b, v8.16b //GHASH final block - mid
1937 eor v11.16b, v11.16b, v21.16b //GHASH final block - low
2820 ext v8.16b, v11.16b, v11.16b, #8 //prepare final partial tag
2843 st1 { v5.16b}, [x2], #16 //AES final-3 block - store result
2845 ldp x6, x7, [x0], #16 //AES final-2 block - load input low & high
2850 rev64 v4.16b, v5.16b //GHASH final-3 block
2852 eor x6, x6, x13 //AES final-2 block - round 12 low
2855 eor x7, x7, x14 //AES final-2 block - round 12 high
2856 fmov d5, x6 //AES final-2 block - mov low
2858 fmov v5.d[1], x7 //AES final-2 block - mov high
2860 mov d22, v4.d[1] //GHASH final-3 block - mid
2862 pmull v11.1q, v4.1d, v15.1d //GHASH final-3 block - low
2864 mov d10, v17.d[1] //GHASH final-3 block - mid
2866 eor v22.8b, v22.8b, v4.8b //GHASH final-3 block - mid
2870 pmull2 v9.1q, v4.2d, v15.2d //GHASH final-3 block - high
2872 pmull v10.1q, v22.1d, v10.1d //GHASH final-3 block - mid
2873 eor v5.16b, v5.16b, v1.16b //AES final-2 block - result
2876 st1 { v5.16b}, [x2], #16 //AES final-2 block - store result
2878 rev64 v4.16b, v5.16b //GHASH final-2 block
2879 ldp x6, x7, [x0], #16 //AES final-1 block - load input low & high
2886 eor x7, x7, x14 //AES final-1 block - round 12 high
2888 pmull2 v20.1q, v4.2d, v14.2d //GHASH final-2 block - high
2889 mov d22, v4.d[1] //GHASH final-2 block - mid
2891 pmull v21.1q, v4.1d, v14.1d //GHASH final-2 block - low
2892 eor x6, x6, x13 //AES final-1 block - round 12 low
2894 fmov d5, x6 //AES final-1 block - mov low
2896 fmov v5.d[1], x7 //AES final-1 block - mov high
2897 eor v9.16b, v9.16b, v20.16b //GHASH final-2 block - high
2898 eor v22.8b, v22.8b, v4.8b //GHASH final-2 block - mid
2900 eor v11.16b, v11.16b, v21.16b //GHASH final-2 block - low
2902 pmull v22.1q, v22.1d, v17.1d //GHASH final-2 block - mid
2906 eor v5.16b, v5.16b, v2.16b //AES final-1 block - result
2908 eor v10.16b, v10.16b, v22.16b //GHASH final-2 block - mid
2911 st1 { v5.16b}, [x2], #16 //AES final-1 block - store result
2913 ldp x6, x7, [x0], #16 //AES final block - load input low & high
2918 rev64 v4.16b, v5.16b //GHASH final-1 block
2920 eor x6, x6, x13 //AES final block - round 12 low
2924 mov d22, v4.d[1] //GHASH final-1 block - mid
2926 eor v22.8b, v22.8b, v4.8b //GHASH final-1 block - mid
2927 eor x7, x7, x14 //AES final block - round 12 high
2928 fmov d5, x6 //AES final block - mov low
2930 pmull2 v20.1q, v4.2d, v13.2d //GHASH final-1 block - high
2931 fmov v5.d[1], x7 //AES final block - mov high
2933 ins v22.d[1], v22.d[0] //GHASH final-1 block - mid
2935 eor v9.16b, v9.16b, v20.16b //GHASH final-1 block - high
2937 pmull v21.1q, v4.1d, v13.1d //GHASH final-1 block - low
2939 pmull2 v22.1q, v22.2d, v16.2d //GHASH final-1 block - mid
2941 eor v5.16b, v5.16b, v3.16b //AES final block - result
2943 eor v11.16b, v11.16b, v21.16b //GHASH final-1 block - low
2945 eor v10.16b, v10.16b, v22.16b //GHASH final-1 block - mid
2976 rev64 v4.16b, v5.16b //GHASH final block
2980 mov d8, v4.d[1] //GHASH final block - mid
2982 pmull v21.1q, v4.1d, v12.1d //GHASH final block - low
2984 pmull2 v20.1q, v4.2d, v12.2d //GHASH final block - high
2986 eor v8.8b, v8.8b, v4.8b //GHASH final block - mid
2988 eor v11.16b, v11.16b, v21.16b //GHASH final block - low
2990 eor v9.16b, v9.16b, v20.16b //GHASH final block - high
2992 pmull v8.1q, v8.1d, v16.1d //GHASH final block - mid
2994 eor v10.16b, v10.16b, v8.16b //GHASH final block - mid
3872 ext v8.16b, v11.16b, v11.16b, #8 //prepare final partial tag
3906 rev64 v4.16b, v5.16b //GHASH final-3 block
3907 ld1 { v5.16b}, [x0], #16 //AES final-2 block - load ciphertext
3909 stp x6, x7, [x2], #16 //AES final-3 block - store result
3913 eor v0.16b, v5.16b, v1.16b //AES final-2 block - result
3915 pmull v11.1q, v4.1d, v15.1d //GHASH final-3 block - low
3916 mov x6, v0.d[0] //AES final-2 block - mov low
3917 mov d22, v4.d[1] //GHASH final-3 block - mid
3919 mov x7, v0.d[1] //AES final-2 block - mov high
3921 mov d10, v17.d[1] //GHASH final-3 block - mid
3922 eor v22.8b, v22.8b, v4.8b //GHASH final-3 block - mid
3924 pmull2 v9.1q, v4.2d, v15.2d //GHASH final-3 block - high
3926 eor x6, x6, x13 //AES final-2 block - round 12 low
3932 pmull v10.1q, v22.1d, v10.1d //GHASH final-3 block - mid
3933 eor x7, x7, x14 //AES final-2 block - round 12 high
3939 rev64 v4.16b, v5.16b //GHASH final-2 block
3940 ld1 { v5.16b}, [x0], #16 //AES final-1 block - load ciphertext
3946 eor v0.16b, v5.16b, v2.16b //AES final-1 block - result
3948 mov d22, v4.d[1] //GHASH final-2 block - mid
3950 pmull v21.1q, v4.1d, v14.1d //GHASH final-2 block - low
3952 stp x6, x7, [x2], #16 //AES final-2 block - store result
3954 eor v22.8b, v22.8b, v4.8b //GHASH final-2 block - mid
3955 mov x7, v0.d[1] //AES final-1 block - mov high
3957 eor v11.16b, v11.16b, v21.16b //GHASH final-2 block - low
3958 mov x6, v0.d[0] //AES final-1 block - mov low
3960 pmull2 v20.1q, v4.2d, v14.2d //GHASH final-2 block - high
3962 pmull v22.1q, v22.1d, v17.1d //GHASH final-2 block - mid
3964 eor v9.16b, v9.16b, v20.16b //GHASH final-2 block - high
3965 eor x7, x7, x14 //AES final-1 block - round 12 high
3969 eor x6, x6, x13 //AES final-1 block - round 12 low
3973 eor v10.16b, v10.16b, v22.16b //GHASH final-2 block - mid
3976 rev64 v4.16b, v5.16b //GHASH final-1 block
3979 ld1 { v5.16b}, [x0], #16 //AES final block - load ciphertext
3981 mov d22, v4.d[1] //GHASH final-1 block - mid
3983 pmull2 v20.1q, v4.2d, v13.2d //GHASH final-1 block - high
3985 eor v0.16b, v5.16b, v3.16b //AES final block - result
3986 stp x6, x7, [x2], #16 //AES final-1 block - store result
3988 eor v22.8b, v22.8b, v4.8b //GHASH final-1 block - mid
3990 eor v9.16b, v9.16b, v20.16b //GHASH final-1 block - high
3992 pmull v21.1q, v4.1d, v13.1d //GHASH final-1 block - low
3993 mov x7, v0.d[1] //AES final block - mov high
3995 ins v22.d[1], v22.d[0] //GHASH final-1 block - mid
3996 mov x6, v0.d[0] //AES final block - mov low
3998 pmull2 v22.1q, v22.2d, v16.2d //GHASH final-1 block - mid
4001 eor v11.16b, v11.16b, v21.16b //GHASH final-1 block - low
4002 eor x7, x7, x14 //AES final block - round 12 high
4006 eor x6, x6, x13 //AES final block - round 12 low
4010 eor v10.16b, v10.16b, v22.16b //GHASH final-1 block - mid
4045 rev64 v4.16b, v5.16b //GHASH final block
4052 pmull2 v20.1q, v4.2d, v12.2d //GHASH final block - high
4053 mov d8, v4.d[1] //GHASH final block - mid
4055 pmull v21.1q, v4.1d, v12.1d //GHASH final block - low
4057 eor v8.8b, v8.8b, v4.8b //GHASH final block - mid
4059 eor v9.16b, v9.16b, v20.16b //GHASH final block - high
4061 pmull v8.1q, v8.1d, v16.1d //GHASH final block - mid
4063 eor v11.16b, v11.16b, v21.16b //GHASH final block - low
4065 eor v10.16b, v10.16b, v8.16b //GHASH final block - mid
4998 ext v8.16b, v11.16b, v11.16b, #8 //prepare final partial tag
5036 st1 { v5.16b}, [x2], #16 //AES final-3 block - store result
5038 ldp x6, x7, [x0], #16 //AES final-2 block - load input low & high
5043 rev64 v4.16b, v5.16b //GHASH final-3 block
5045 eor x6, x6, x13 //AES final-2 block - round 14 low
5048 eor x7, x7, x14 //AES final-2 block - round 14 high
5050 mov d22, v4.d[1] //GHASH final-3 block - mid
5051 fmov d5, x6 //AES final-2 block - mov low
5053 fmov v5.d[1], x7 //AES final-2 block - mov high
5055 eor v22.8b, v22.8b, v4.8b //GHASH final-3 block - mid
5058 mov d10, v17.d[1] //GHASH final-3 block - mid
5060 pmull v11.1q, v4.1d, v15.1d //GHASH final-3 block - low
5062 pmull2 v9.1q, v4.2d, v15.2d //GHASH final-3 block - high
5064 pmull v10.1q, v22.1d, v10.1d //GHASH final-3 block - mid
5065 eor v5.16b, v5.16b, v1.16b //AES final-2 block - result
5068 st1 { v5.16b}, [x2], #16 //AES final-2 block - store result
5070 ldp x6, x7, [x0], #16 //AES final-1 block - load input low & high
5075 rev64 v4.16b, v5.16b //GHASH final-2 block
5077 eor x6, x6, x13 //AES final-1 block - round 14 low
5080 fmov d5, x6 //AES final-1 block - mov low
5081 eor x7, x7, x14 //AES final-1 block - round 14 high
5083 fmov v5.d[1], x7 //AES final-1 block - mov high
5087 pmull2 v20.1q, v4.2d, v14.2d //GHASH final-2 block - high
5088 mov d22, v4.d[1] //GHASH final-2 block - mid
5090 pmull v21.1q, v4.1d, v14.1d //GHASH final-2 block - low
5092 eor v22.8b, v22.8b, v4.8b //GHASH final-2 block - mid
5094 eor v5.16b, v5.16b, v2.16b //AES final-1 block - result
5096 eor v9.16b, v9.16b, v20.16b //GHASH final-2 block - high
5098 pmull v22.1q, v22.1d, v17.1d //GHASH final-2 block - mid
5100 eor v11.16b, v11.16b, v21.16b //GHASH final-2 block - low
5102 eor v10.16b, v10.16b, v22.16b //GHASH final-2 block - mid
5105 st1 { v5.16b}, [x2], #16 //AES final-1 block - store result
5107 rev64 v4.16b, v5.16b //GHASH final-1 block
5109 ldp x6, x7, [x0], #16 //AES final block - load input low & high
5118 eor x6, x6, x13 //AES final block - round 14 low
5119 mov d22, v4.d[1] //GHASH final-1 block - mid
5121 pmull2 v20.1q, v4.2d, v13.2d //GHASH final-1 block - high
5122 eor x7, x7, x14 //AES final block - round 14 high
5124 eor v22.8b, v22.8b, v4.8b //GHASH final-1 block - mid
5126 eor v9.16b, v9.16b, v20.16b //GHASH final-1 block - high
5128 ins v22.d[1], v22.d[0] //GHASH final-1 block - mid
5129 fmov d5, x6 //AES final block - mov low
5131 fmov v5.d[1], x7 //AES final block - mov high
5133 pmull2 v22.1q, v22.2d, v16.2d //GHASH final-1 block - mid
5135 pmull v21.1q, v4.1d, v13.1d //GHASH final-1 block - low
5137 eor v5.16b, v5.16b, v3.16b //AES final block - result
5138 eor v10.16b, v10.16b, v22.16b //GHASH final-1 block - mid
5140 eor v11.16b, v11.16b, v21.16b //GHASH final-1 block - low
5166 rev64 v4.16b, v5.16b //GHASH final block
5172 pmull2 v20.1q, v4.2d, v12.2d //GHASH final block - high
5173 mov d8, v4.d[1] //GHASH final block - mid
5180 pmull v21.1q, v4.1d, v12.1d //GHASH final block - low
5182 eor v9.16b, v9.16b, v20.16b //GHASH final block - high
5183 eor v8.8b, v8.8b, v4.8b //GHASH final block - mid
5185 pmull v8.1q, v8.1d, v16.1d //GHASH final block - mid
5187 eor v11.16b, v11.16b, v21.16b //GHASH final block - low
5189 eor v10.16b, v10.16b, v8.16b //GHASH final block - mid
6144 ext v8.16b, v11.16b, v11.16b, #8 //prepare final partial tag
6179 rev64 v4.16b, v5.16b //GHASH final-3 block
6180 ld1 { v5.16b}, [x0], #16 //AES final-2 block - load ciphertext
6182 stp x6, x7, [x2], #16 //AES final-3 block - store result
6184 mov d10, v17.d[1] //GHASH final-3 block - mid
6188 eor v0.16b, v5.16b, v1.16b //AES final-2 block - result
6190 mov d22, v4.d[1] //GHASH final-3 block - mid
6192 mov x6, v0.d[0] //AES final-2 block - mov low
6194 mov x7, v0.d[1] //AES final-2 block - mov high
6196 eor v22.8b, v22.8b, v4.8b //GHASH final-3 block - mid
6200 pmull2 v9.1q, v4.2d, v15.2d //GHASH final-3 block - high
6202 pmull v10.1q, v22.1d, v10.1d //GHASH final-3 block - mid
6203 eor x6, x6, x13 //AES final-2 block - round 14 low
6208 pmull v11.1q, v4.1d, v15.1d //GHASH final-3 block - low
6209 eor x7, x7, x14 //AES final-2 block - round 14 high
6215 rev64 v4.16b, v5.16b //GHASH final-2 block
6216 ld1 { v5.16b}, [x0], #16 //AES final-1 block - load ciphertext
6219 stp x6, x7, [x2], #16 //AES final-2 block - store result
6221 eor v0.16b, v5.16b, v2.16b //AES final-1 block - result
6223 mov d22, v4.d[1] //GHASH final-2 block - mid
6225 pmull v21.1q, v4.1d, v14.1d //GHASH final-2 block - low
6227 pmull2 v20.1q, v4.2d, v14.2d //GHASH final-2 block - high
6229 eor v22.8b, v22.8b, v4.8b //GHASH final-2 block - mid
6230 mov x6, v0.d[0] //AES final-1 block - mov low
6232 mov x7, v0.d[1] //AES final-1 block - mov high
6233 eor v11.16b, v11.16b, v21.16b //GHASH final-2 block - low
6236 pmull v22.1q, v22.1d, v17.1d //GHASH final-2 block - mid
6238 eor v9.16b, v9.16b, v20.16b //GHASH final-2 block - high
6239 eor x6, x6, x13 //AES final-1 block - round 14 low
6244 eor v10.16b, v10.16b, v22.16b //GHASH final-2 block - mid
6245 eor x7, x7, x14 //AES final-1 block - round 14 high
6251 stp x6, x7, [x2], #16 //AES final-1 block - store result
6252 rev64 v4.16b, v5.16b //GHASH final-1 block
6254 ld1 { v5.16b}, [x0], #16 //AES final block - load ciphertext
6259 mov d22, v4.d[1] //GHASH final-1 block - mid
6261 eor v0.16b, v5.16b, v3.16b //AES final block - result
6263 pmull2 v20.1q, v4.2d, v13.2d //GHASH final-1 block - high
6265 eor v22.8b, v22.8b, v4.8b //GHASH final-1 block - mid
6267 pmull v21.1q, v4.1d, v13.1d //GHASH final-1 block - low
6268 mov x6, v0.d[0] //AES final block - mov low
6270 ins v22.d[1], v22.d[0] //GHASH final-1 block - mid
6272 mov x7, v0.d[1] //AES final block - mov high
6274 pmull2 v22.1q, v22.2d, v16.2d //GHASH final-1 block - mid
6275 eor x6, x6, x13 //AES final block - round 14 low
6279 eor v11.16b, v11.16b, v21.16b //GHASH final-1 block - low
6281 eor v9.16b, v9.16b, v20.16b //GHASH final-1 block - high
6283 eor v10.16b, v10.16b, v22.16b //GHASH final-1 block - mid
6284 eor x7, x7, x14 //AES final block - round 14 high
6329 rev64 v4.16b, v5.16b //GHASH final block
6333 pmull v21.1q, v4.1d, v12.1d //GHASH final block - low
6335 mov d8, v4.d[1] //GHASH final block - mid
6337 eor v8.8b, v8.8b, v4.8b //GHASH final block - mid
6339 pmull2 v20.1q, v4.2d, v12.2d //GHASH final block - high
6341 pmull v8.1q, v8.1d, v16.1d //GHASH final block - mid
6343 eor v9.16b, v9.16b, v20.16b //GHASH final block - high
6345 eor v11.16b, v11.16b, v21.16b //GHASH final block - low
6347 eor v10.16b, v10.16b, v8.16b //GHASH final block - mid