Lines Matching refs:v4
253 fmov v4.d[1], x7 //AES block 0 - mov high
268 eor v4.16b, v4.16b, v0.16b //AES block 0 - result
285 st1 { v4.16b}, [x2], #16 //AES block 0 - store result
313 rev64 v4.16b, v4.16b //GHASH block 4k (only t0 is free)
338 eor v4.16b, v4.16b, v11.16b //PRE 1
356 mov d8, v4.d[1] //GHASH block 4k - mid
359 pmull2 v9.1q, v4.2d, v15.2d //GHASH block 4k - high
366 pmull v11.1q, v4.1d, v15.1d //GHASH block 4k - low
367 eor v8.8b, v8.8b, v4.8b //GHASH block 4k - mid
404 pmull2 v4.1q, v7.2d, v12.2d //GHASH block 4k+3 - high
427 eor v9.16b, v9.16b, v4.16b //GHASH block 4k+3 - high
469 fmov v4.d[1], x7 //AES block 4k+4 - mov high
516 eor v4.16b, v4.16b, v0.16b //AES block 4k+4 - result
539 st1 { v4.16b}, [x2], #16 //AES block 4k+4 - store result
563 rev64 v4.16b, v4.16b //GHASH block 4k (only t0 is free)
578 eor v4.16b, v4.16b, v11.16b //PRE 1
586 pmull v11.1q, v4.1d, v15.1d //GHASH block 4k - low
587 mov d8, v4.d[1] //GHASH block 4k - mid
596 eor v8.8b, v8.8b, v4.8b //GHASH block 4k - mid
598 pmull2 v9.1q, v4.2d, v15.2d //GHASH block 4k - high
628 pmull2 v4.1q, v7.2d, v12.2d //GHASH block 4k+3 - high
657 eor v9.16b, v9.16b, v4.16b //GHASH block 4k+3 - high
767 fmov v4.d[1], x7 //AES block 4k+4 - mov high
769 eor v5.16b, v4.16b, v0.16b //AES block 4k+4 - result
800 rev64 v4.16b, v5.16b //GHASH final-3 block
802 eor v4.16b, v4.16b, v8.16b //feed in partial tag
811 pmull v11.1q, v4.1d, v15.1d //GHASH final-3 block - low
812 mov d22, v4.d[1] //GHASH final-3 block - mid
814 pmull2 v9.1q, v4.2d, v15.2d //GHASH final-3 block - high
819 eor v22.8b, v22.8b, v4.8b //GHASH final-3 block - mid
826 rev64 v4.16b, v5.16b //GHASH final-2 block
832 eor v4.16b, v4.16b, v8.16b //feed in partial tag
839 pmull2 v20.1q, v4.2d, v14.2d //GHASH final-2 block - high
842 mov d22, v4.d[1] //GHASH final-2 block - mid
844 pmull v21.1q, v4.1d, v14.1d //GHASH final-2 block - low
848 eor v22.8b, v22.8b, v4.8b //GHASH final-2 block - mid
863 rev64 v4.16b, v5.16b //GHASH final-1 block
869 eor v4.16b, v4.16b, v8.16b //feed in partial tag
876 pmull2 v20.1q, v4.2d, v13.2d //GHASH final-1 block - high
879 mov d22, v4.d[1] //GHASH final-1 block - mid
881 pmull v21.1q, v4.1d, v13.1d //GHASH final-1 block - low
883 eor v22.8b, v22.8b, v4.8b //GHASH final-1 block - mid
921 rev64 v4.16b, v5.16b //GHASH final block
923 eor v4.16b, v4.16b, v8.16b //feed in partial tag
925 mov d8, v4.d[1] //GHASH final block - mid
927 pmull v21.1q, v4.1d, v12.1d //GHASH final block - low
930 eor v8.8b, v8.8b, v4.8b //GHASH final block - mid
936 pmull2 v20.1q, v4.2d, v12.2d //GHASH final block - high
1204 ld1 {v4.16b, v5.16b}, [x0], #32 //AES block 0 - load ciphertext; AES block 1 - load ciphertext
1209 eor v0.16b, v4.16b, v0.16b //AES block 0 - result
1210 rev64 v4.16b, v4.16b //GHASH block 0
1281 eor v4.16b, v4.16b, v11.16b //PRE 1
1292 pmull v11.1q, v4.1d, v15.1d //GHASH block 4k - low
1304 pmull2 v9.1q, v4.2d, v15.2d //GHASH block 4k - high
1311 mov d8, v4.d[1] //GHASH block 4k - mid
1321 eor v8.8b, v8.8b, v4.8b //GHASH block 4k - mid
1359 pmull2 v4.1q, v7.2d, v12.2d //GHASH block 4k+3 - high
1404 eor v9.16b, v9.16b, v4.16b //GHASH block 4k+3 - high
1405 ld1 {v4.16b}, [x0], #16 //AES block 4k+3 - load ciphertext
1446 eor v0.16b, v4.16b, v0.16b //AES block 4k+4 - result
1503 rev64 v4.16b, v4.16b //GHASH block 4k+4
1538 eor v4.16b, v4.16b, v11.16b //PRE 1
1550 pmull v11.1q, v4.1d, v15.1d //GHASH block 4k - low
1563 mov d8, v4.d[1] //GHASH block 4k - mid
1577 eor v8.8b, v8.8b, v4.8b //GHASH block 4k - mid
1579 pmull2 v9.1q, v4.2d, v15.2d //GHASH block 4k - high
1597 pmull2 v4.1q, v7.2d, v12.2d //GHASH block 4k+3 - high
1619 eor v9.16b, v9.16b, v4.16b //GHASH block 4k+3 - high
1780 rev64 v4.16b, v5.16b //GHASH final-3 block
1783 eor v4.16b, v4.16b, v8.16b //feed in partial tag
1789 mov d22, v4.d[1] //GHASH final-3 block - mid
1792 pmull v11.1q, v4.1d, v15.1d //GHASH final-3 block - low
1795 pmull2 v9.1q, v4.2d, v15.2d //GHASH final-3 block - high
1797 eor v22.8b, v22.8b, v4.8b //GHASH final-3 block - mid
1811 rev64 v4.16b, v5.16b //GHASH final-2 block
1814 eor v4.16b, v4.16b, v8.16b //feed in partial tag
1819 mov d22, v4.d[1] //GHASH final-2 block - mid
1821 pmull v21.1q, v4.1d, v14.1d //GHASH final-2 block - low
1823 pmull2 v20.1q, v4.2d, v14.2d //GHASH final-2 block - high
1827 eor v22.8b, v22.8b, v4.8b //GHASH final-2 block - mid
1848 rev64 v4.16b, v5.16b //GHASH final-1 block
1851 eor v4.16b, v4.16b, v8.16b //feed in partial tag
1853 mov d22, v4.d[1] //GHASH final-1 block - mid
1857 eor v22.8b, v22.8b, v4.8b //GHASH final-1 block - mid
1865 pmull v21.1q, v4.1d, v13.1d //GHASH final-1 block - low
1867 pmull2 v20.1q, v4.2d, v13.2d //GHASH final-1 block - high
1908 rev64 v4.16b, v5.16b //GHASH final block
1910 eor v4.16b, v4.16b, v8.16b //feed in partial tag
1916 pmull2 v20.1q, v4.2d, v12.2d //GHASH final block - high
1917 mov d8, v4.d[1] //GHASH final block - mid
1919 eor v8.8b, v8.8b, v4.8b //GHASH final block - mid
1924 pmull v21.1q, v4.1d, v12.1d //GHASH final block - low
2259 fmov v4.d[1], x7 //AES block 0 - mov high
2273 eor v4.16b, v4.16b, v0.16b //AES block 0 - result
2283 st1 { v4.16b}, [x2], #16 //AES block 0 - store result
2326 rev64 v4.16b, v4.16b //GHASH block 4k (only t0 is free)
2347 eor v4.16b, v4.16b, v11.16b //PRE 1
2360 pmull v11.1q, v4.1d, v15.1d //GHASH block 4k - low
2361 mov d8, v4.d[1] //GHASH block 4k - mid
2370 eor v8.8b, v8.8b, v4.8b //GHASH block 4k - mid
2381 pmull2 v9.1q, v4.2d, v15.2d //GHASH block 4k - high
2401 eor v4.8b, v4.8b, v5.8b //GHASH block 4k+1 - mid
2418 pmull v4.1q, v4.1d, v17.1d //GHASH block 4k+1 - mid
2456 eor v10.16b, v10.16b, v4.16b //GHASH block 4k+1 - mid
2492 fmov v4.d[1], x7 //AES block 4k+4 - mov high
2545 eor v4.16b, v4.16b, v0.16b //AES block 4k+4 - result
2554 st1 { v4.16b}, [x2], #16 //AES block 4k+4 - store result
2593 rev64 v4.16b, v4.16b //GHASH block 4k (only t0 is free)
2607 eor v4.16b, v4.16b, v11.16b //PRE 1
2616 pmull v11.1q, v4.1d, v15.1d //GHASH block 4k - low
2617 mov d8, v4.d[1] //GHASH block 4k - mid
2622 pmull2 v9.1q, v4.2d, v15.2d //GHASH block 4k - high
2624 eor v8.8b, v8.8b, v4.8b //GHASH block 4k - mid
2636 eor v4.8b, v4.8b, v5.8b //GHASH block 4k+1 - mid
2667 pmull v4.1q, v4.1d, v17.1d //GHASH block 4k+1 - mid
2676 eor v10.16b, v10.16b, v4.16b //GHASH block 4k+1 - mid
2815 fmov v4.d[1], x7 //AES block 4k+4 - mov high
2818 eor v5.16b, v4.16b, v0.16b //AES block 4k+4 - result
2850 rev64 v4.16b, v5.16b //GHASH final-3 block
2853 eor v4.16b, v4.16b, v8.16b //feed in partial tag
2860 mov d22, v4.d[1] //GHASH final-3 block - mid
2862 pmull v11.1q, v4.1d, v15.1d //GHASH final-3 block - low
2866 eor v22.8b, v22.8b, v4.8b //GHASH final-3 block - mid
2870 pmull2 v9.1q, v4.2d, v15.2d //GHASH final-3 block - high
2878 rev64 v4.16b, v5.16b //GHASH final-2 block
2884 eor v4.16b, v4.16b, v8.16b //feed in partial tag
2888 pmull2 v20.1q, v4.2d, v14.2d //GHASH final-2 block - high
2889 mov d22, v4.d[1] //GHASH final-2 block - mid
2891 pmull v21.1q, v4.1d, v14.1d //GHASH final-2 block - low
2898 eor v22.8b, v22.8b, v4.8b //GHASH final-2 block - mid
2918 rev64 v4.16b, v5.16b //GHASH final-1 block
2921 eor v4.16b, v4.16b, v8.16b //feed in partial tag
2924 mov d22, v4.d[1] //GHASH final-1 block - mid
2926 eor v22.8b, v22.8b, v4.8b //GHASH final-1 block - mid
2930 pmull2 v20.1q, v4.2d, v13.2d //GHASH final-1 block - high
2937 pmull v21.1q, v4.1d, v13.1d //GHASH final-1 block - low
2976 rev64 v4.16b, v5.16b //GHASH final block
2978 eor v4.16b, v4.16b, v8.16b //feed in partial tag
2980 mov d8, v4.d[1] //GHASH final block - mid
2982 pmull v21.1q, v4.1d, v12.1d //GHASH final block - low
2984 pmull2 v20.1q, v4.2d, v12.2d //GHASH final block - high
2986 eor v8.8b, v8.8b, v4.8b //GHASH final block - mid
3280 ld1 {v4.16b, v5.16b}, [x0], #32 //AES block 0,1 - load ciphertext
3284 eor v0.16b, v4.16b, v0.16b //AES block 0 - result
3297 rev64 v4.16b, v4.16b //GHASH block 0
3354 eor v4.16b, v4.16b, v11.16b //PRE 1
3367 pmull2 v9.1q, v4.2d, v15.2d //GHASH block 4k - high
3369 mov d8, v4.d[1] //GHASH block 4k - mid
3371 pmull v11.1q, v4.1d, v15.1d //GHASH block 4k - low
3380 eor v8.8b, v8.8b, v4.8b //GHASH block 4k - mid
3394 eor v4.8b, v4.8b, v5.8b //GHASH block 4k+1 - mid
3405 pmull v4.1q, v4.1d, v17.1d //GHASH block 4k+1 - mid
3417 eor v10.16b, v10.16b, v4.16b //GHASH block 4k+1 - mid
3512 ld1 {v4.16b}, [x0], #16 //AES block 4k+4 - load ciphertext
3553 eor v0.16b, v4.16b, v0.16b //AES block 4k+4 - result
3616 rev64 v4.16b, v4.16b //GHASH block 4k+4
3636 eor v4.16b, v4.16b, v11.16b //PRE 1
3647 pmull v11.1q, v4.1d, v15.1d //GHASH block 4k - low
3648 mov d8, v4.d[1] //GHASH block 4k - mid
3655 pmull2 v9.1q, v4.2d, v15.2d //GHASH block 4k - high
3660 eor v8.8b, v8.8b, v4.8b //GHASH block 4k - mid
3681 eor v4.8b, v4.8b, v5.8b //GHASH block 4k+1 - mid
3697 pmull v4.1q, v4.1d, v17.1d //GHASH block 4k+1 - mid
3706 eor v10.16b, v10.16b, v4.16b //GHASH block 4k+1 - mid
3906 rev64 v4.16b, v5.16b //GHASH final-3 block
3911 eor v4.16b, v4.16b, v8.16b //feed in partial tag
3915 pmull v11.1q, v4.1d, v15.1d //GHASH final-3 block - low
3917 mov d22, v4.d[1] //GHASH final-3 block - mid
3922 eor v22.8b, v22.8b, v4.8b //GHASH final-3 block - mid
3924 pmull2 v9.1q, v4.2d, v15.2d //GHASH final-3 block - high
3939 rev64 v4.16b, v5.16b //GHASH final-2 block
3942 eor v4.16b, v4.16b, v8.16b //feed in partial tag
3948 mov d22, v4.d[1] //GHASH final-2 block - mid
3950 pmull v21.1q, v4.1d, v14.1d //GHASH final-2 block - low
3954 eor v22.8b, v22.8b, v4.8b //GHASH final-2 block - mid
3960 pmull2 v20.1q, v4.2d, v14.2d //GHASH final-2 block - high
3976 rev64 v4.16b, v5.16b //GHASH final-1 block
3978 eor v4.16b, v4.16b, v8.16b //feed in partial tag
3981 mov d22, v4.d[1] //GHASH final-1 block - mid
3983 pmull2 v20.1q, v4.2d, v13.2d //GHASH final-1 block - high
3988 eor v22.8b, v22.8b, v4.8b //GHASH final-1 block - mid
3992 pmull v21.1q, v4.1d, v13.1d //GHASH final-1 block - low
4045 rev64 v4.16b, v5.16b //GHASH final block
4047 eor v4.16b, v4.16b, v8.16b //feed in partial tag
4052 pmull2 v20.1q, v4.2d, v12.2d //GHASH final block - high
4053 mov d8, v4.d[1] //GHASH final block - mid
4055 pmull v21.1q, v4.1d, v12.1d //GHASH final block - low
4057 eor v8.8b, v8.8b, v4.8b //GHASH final block - mid
4407 fmov v4.d[1], x7 //AES block 0 - mov high
4422 eor v4.16b, v4.16b, v0.16b //AES block 0 - result
4435 st1 { v4.16b}, [x2], #16 //AES block 0 - store result
4459 rev64 v4.16b, v4.16b //GHASH block 4k (only t0 is free)
4489 eor v4.16b, v4.16b, v11.16b //PRE 1
4502 pmull2 v9.1q, v4.2d, v15.2d //GHASH block 4k - high
4504 mov d8, v4.d[1] //GHASH block 4k - mid
4513 pmull v11.1q, v4.1d, v15.1d //GHASH block 4k - low
4514 eor v8.8b, v8.8b, v4.8b //GHASH block 4k - mid
4523 pmull2 v4.1q, v5.2d, v14.2d //GHASH block 4k+1 - high
4530 eor v9.16b, v9.16b, v4.16b //GHASH block 4k+1 - high
4549 eor v4.8b, v4.8b, v5.8b //GHASH block 4k+1 - mid
4561 pmull v4.1q, v4.1d, v17.1d //GHASH block 4k+1 - mid
4581 eor v10.16b, v10.16b, v4.16b //GHASH block 4k+1 - mid
4583 pmull2 v4.1q, v6.2d, v13.2d //GHASH block 4k+2 - high
4591 eor v9.16b, v9.16b, v4.16b //GHASH block 4k+2 - high
4611 eor v4.8b, v4.8b, v7.8b //GHASH block 4k+3 - mid
4629 pmull v4.1q, v4.1d, v16.1d //GHASH block 4k+3 - mid
4653 eor v10.16b, v10.16b, v4.16b //GHASH block 4k+3 - mid
4661 eor v4.16b, v11.16b, v9.16b //MODULO - karatsuba tidy up
4677 eor v10.16b, v10.16b, v4.16b //MODULO - karatsuba tidy up
4700 fmov v4.d[1], x7 //AES block 4k+4 - mov high
4716 eor v4.16b, v4.16b, v0.16b //AES block 4k+4 - result
4733 st1 { v4.16b}, [x2], #16 //AES block 4k+4 - store result
4769 rev64 v4.16b, v4.16b //GHASH block 4k (only t0 is free)
4780 eor v4.16b, v4.16b, v11.16b //PRE 1
4793 pmull v11.1q, v4.1d, v15.1d //GHASH block 4k - low
4794 mov d8, v4.d[1] //GHASH block 4k - mid
4796 pmull2 v9.1q, v4.2d, v15.2d //GHASH block 4k - high
4803 eor v8.8b, v8.8b, v4.8b //GHASH block 4k - mid
4816 pmull2 v4.1q, v5.2d, v14.2d //GHASH block 4k+1 - high
4823 eor v9.16b, v9.16b, v4.16b //GHASH block 4k+1 - high
4833 eor v4.8b, v4.8b, v5.8b //GHASH block 4k+1 - mid
4843 pmull v4.1q, v4.1d, v17.1d //GHASH block 4k+1 - mid
4854 eor v10.16b, v10.16b, v4.16b //GHASH block 4k+1 - mid
4856 pmull2 v4.1q, v6.2d, v13.2d //GHASH block 4k+2 - high
4864 eor v9.16b, v9.16b, v4.16b //GHASH block 4k+2 - high
4872 eor v4.8b, v4.8b, v7.8b //GHASH block 4k+3 - mid
4879 pmull v4.1q, v4.1d, v16.1d //GHASH block 4k+3 - mid
4911 eor v10.16b, v10.16b, v4.16b //GHASH block 4k+3 - mid
4930 pmull v4.1q, v9.1d, v8.1d
4951 eor v10.16b, v10.16b, v4.16b
4975 pmull v4.1q, v10.1d, v8.1d
4985 eor v11.16b, v11.16b, v4.16b
5011 fmov v4.d[1], x7 //AES block 4k+4 - mov high
5013 eor v5.16b, v4.16b, v0.16b //AES block 4k+4 - result
5043 rev64 v4.16b, v5.16b //GHASH final-3 block
5046 eor v4.16b, v4.16b, v8.16b //feed in partial tag
5050 mov d22, v4.d[1] //GHASH final-3 block - mid
5055 eor v22.8b, v22.8b, v4.8b //GHASH final-3 block - mid
5060 pmull v11.1q, v4.1d, v15.1d //GHASH final-3 block - low
5062 pmull2 v9.1q, v4.2d, v15.2d //GHASH final-3 block - high
5075 rev64 v4.16b, v5.16b //GHASH final-2 block
5078 eor v4.16b, v4.16b, v8.16b //feed in partial tag
5087 pmull2 v20.1q, v4.2d, v14.2d //GHASH final-2 block - high
5088 mov d22, v4.d[1] //GHASH final-2 block - mid
5090 pmull v21.1q, v4.1d, v14.1d //GHASH final-2 block - low
5092 eor v22.8b, v22.8b, v4.8b //GHASH final-2 block - mid
5107 rev64 v4.16b, v5.16b //GHASH final-1 block
5114 eor v4.16b, v4.16b, v8.16b //feed in partial tag
5119 mov d22, v4.d[1] //GHASH final-1 block - mid
5121 pmull2 v20.1q, v4.2d, v13.2d //GHASH final-1 block - high
5124 eor v22.8b, v22.8b, v4.8b //GHASH final-1 block - mid
5135 pmull v21.1q, v4.1d, v13.1d //GHASH final-1 block - low
5166 rev64 v4.16b, v5.16b //GHASH final block
5168 eor v4.16b, v4.16b, v8.16b //feed in partial tag
5172 pmull2 v20.1q, v4.2d, v12.2d //GHASH final block - high
5173 mov d8, v4.d[1] //GHASH final block - mid
5180 pmull v21.1q, v4.1d, v12.1d //GHASH final block - low
5183 eor v8.8b, v8.8b, v4.8b //GHASH final block - mid
5192 eor v4.16b, v11.16b, v9.16b //MODULO - karatsuba tidy up
5196 eor v10.16b, v10.16b, v4.16b //MODULO - karatsuba tidy up
5509 ld1 {v4.16b, v5.16b}, [x0], #32 //AES block 0,1 - load ciphertext
5513 eor v0.16b, v4.16b, v0.16b //AES block 0 - result
5522 rev64 v4.16b, v4.16b //GHASH block 0
5583 eor v4.16b, v4.16b, v11.16b //PRE 1
5594 pmull2 v9.1q, v4.2d, v15.2d //GHASH block 4k - high
5595 mov d8, v4.d[1] //GHASH block 4k - mid
5608 eor v8.8b, v8.8b, v4.8b //GHASH block 4k - mid
5634 pmull v11.1q, v4.1d, v15.1d //GHASH block 4k - low
5636 pmull2 v4.1q, v5.2d, v14.2d //GHASH block 4k+1 - high
5652 eor v9.16b, v9.16b, v4.16b //GHASH block 4k+1 - high
5675 eor v4.8b, v4.8b, v5.8b //GHASH block 4k+1 - mid
5690 pmull v4.1q, v4.1d, v17.1d //GHASH block 4k+1 - mid
5706 eor v10.16b, v10.16b, v4.16b //GHASH block 4k+1 - mid
5711 pmull2 v4.1q, v6.2d, v13.2d //GHASH block 4k+2 - high
5721 eor v9.16b, v9.16b, v4.16b //GHASH block 4k+2 - high
5726 pmull v4.1q, v7.1d, v12.1d //GHASH block 4k+3 - low
5751 eor v11.16b, v11.16b, v4.16b //GHASH block 4k+3 - low
5772 ld1 {v4.16b}, [x0], #16 //AES block 4k+4 - load ciphertext
5787 eor v0.16b, v4.16b, v0.16b //AES block 4k+4 - result
5873 rev64 v4.16b, v4.16b //GHASH block 4k+4
5893 eor v4.16b, v4.16b, v11.16b //PRE 1
5903 pmull v11.1q, v4.1d, v15.1d //GHASH block 4k - low
5904 mov d8, v4.d[1] //GHASH block 4k - mid
5907 pmull2 v9.1q, v4.2d, v15.2d //GHASH block 4k - high
5916 eor v8.8b, v8.8b, v4.8b //GHASH block 4k - mid
5918 pmull2 v4.1q, v5.2d, v14.2d //GHASH block 4k+1 - high
5928 eor v9.16b, v9.16b, v4.16b //GHASH block 4k+1 - high
5952 eor v4.8b, v4.8b, v5.8b //GHASH block 4k+1 - mid
5963 pmull v4.1q, v4.1d, v17.1d //GHASH block 4k+1 - mid
5973 eor v10.16b, v10.16b, v4.16b //GHASH block 4k+1 - mid
5975 pmull2 v4.1q, v6.2d, v13.2d //GHASH block 4k+2 - high
5986 eor v9.16b, v9.16b, v4.16b //GHASH block 4k+2 - high
5988 pmull v4.1q, v7.1d, v12.1d //GHASH block 4k+3 - low
6019 eor v11.16b, v11.16b, v4.16b //GHASH block 4k+3 - low
6179 rev64 v4.16b, v5.16b //GHASH final-3 block
6186 eor v4.16b, v4.16b, v8.16b //feed in partial tag
6190 mov d22, v4.d[1] //GHASH final-3 block - mid
6196 eor v22.8b, v22.8b, v4.8b //GHASH final-3 block - mid
6200 pmull2 v9.1q, v4.2d, v15.2d //GHASH final-3 block - high
6208 pmull v11.1q, v4.1d, v15.1d //GHASH final-3 block - low
6215 rev64 v4.16b, v5.16b //GHASH final-2 block
6218 eor v4.16b, v4.16b, v8.16b //feed in partial tag
6223 mov d22, v4.d[1] //GHASH final-2 block - mid
6225 pmull v21.1q, v4.1d, v14.1d //GHASH final-2 block - low
6227 pmull2 v20.1q, v4.2d, v14.2d //GHASH final-2 block - high
6229 eor v22.8b, v22.8b, v4.8b //GHASH final-2 block - mid
6252 rev64 v4.16b, v5.16b //GHASH final-1 block
6256 eor v4.16b, v4.16b, v8.16b //feed in partial tag
6259 mov d22, v4.d[1] //GHASH final-1 block - mid
6263 pmull2 v20.1q, v4.2d, v13.2d //GHASH final-1 block - high
6265 eor v22.8b, v22.8b, v4.8b //GHASH final-1 block - mid
6267 pmull v21.1q, v4.1d, v13.1d //GHASH final-1 block - low
6329 rev64 v4.16b, v5.16b //GHASH final block
6331 eor v4.16b, v4.16b, v8.16b //feed in partial tag
6333 pmull v21.1q, v4.1d, v12.1d //GHASH final block - low
6335 mov d8, v4.d[1] //GHASH final block - mid
6337 eor v8.8b, v8.8b, v4.8b //GHASH final block - mid
6339 pmull2 v20.1q, v4.2d, v12.2d //GHASH final block - high