20 	.byte 15, 14, 13, 12, 11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1, 0
24 	.byte 0x87, 0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0
55 #define S0_1(x0, x1, x2, x3, x4)      \  argument
56 	vpor		x0,   x3, tp; \
57 	vpxor		x3,   x0, x0; \
58 	vpxor		x2,   x3, x4; \
60 	vpxor		x1,   tp, x3; \
64 #define S0_2(x0, x1, x2, x3, x4)      \  argument
65 	vpxor		x3,   x0, x0; \
69 	vpxor		x2,   x3, x3; \
74 #define S1_1(x0, x1, x2, x3, x4)      \  argument
76 	vpxor		x3,   x0, x0; \
77 	vpxor		RNOT, x3, x3; \
80 	vpxor		x2,   x3, x3; \
81 	vpxor		x3,   x0, x0; \
82 	vpxor		x3,   tp, x1;
83 #define S1_2(x0, x1, x2, x3, x4)      \  argument
84 	vpxor		x4,   x3, x3; \
94 #define S2_1(x0, x1, x2, x3, x4)      \  argument
95 	vpxor		RNOT, x3, x3; \
98 	vpxor		x3,   tp, tp; \
99 	vpor		x0,   x3, x3; \
101 	vpxor		x1,   x3, x3; \
103 #define S2_2(x0, x1, x2, x3, x4)      \  argument
105 	vpand		x3,   x2, x2; \
106 	vpor		x1,   x3, x3; \
108 	vpxor		tp,   x3, x3; \
113 #define S3_1(x0, x1, x2, x3, x4)      \  argument
114 	vpxor		x3,   x1, tp; \
115 	vpor		x0,   x3, x3; \
119 	vpand		x3,   tp, x1; \
120 	vpxor		x3,   x2, x2; \
122 	vpxor		x3,   x4, x4;
123 #define S3_2(x0, x1, x2, x3, x4)      \  argument
125 	vpand		x3,   x0, x0; \
126 	vpand		x4,   x3, x3; \
127 	vpxor		x2,   x3, x3; \
130 	vpxor		x3,   x4, x4; \
131 	vpxor		x3,   x0, x0; \
132 	vpxor		x2,   x3, x3;
134 #define S4_1(x0, x1, x2, x3, x4)      \  argument
135 	vpand		x0,   x3, tp; \
136 	vpxor		x3,   x0, x0; \
138 	vpor		x3,   x2, x2; \
140 	vpxor		tp,   x3, x4; \
143 #define S4_2(x0, x1, x2, x3, x4)      \  argument
149 	vpor		x1,   tp, x3; \
151 	vpxor		x0,   x3, x3;
153 #define S5_1(x0, x1, x2, x3, x4)      \  argument
156 	vpxor		RNOT, x3, x3; \
160 	vpor		x3,   x4, x4; \
162 #define S5_2(x0, x1, x2, x3, x4)      \  argument
163 	vpand		x3,   x0, x0; \
164 	vpxor		x3,   x1, x1; \
165 	vpxor		x2,   x3, x3; \
170 	vpxor		x2,   x3, x3;
172 #define S6_1(x0, x1, x2, x3, x4)      \  argument
173 	vpxor		x0,   x3, x3; \
176 	vpand		x3,   x0, x0; \
177 	vpor		x3,   tp, tp; \
181 #define S6_2(x0, x1, x2, x3, x4)      \  argument
182 	vpxor		x4,   x3, x3; \
186 	vpxor		x3,   x2, x2; \
187 	vpand		x1,   x3, x3; \
188 	vpxor		x0,   x3, x3; \
191 #define S7_1(x0, x1, x2, x3, x4)      \  argument
195 	vpxor		x3,   x1, x1; \
196 	vpor		tp,   x3, x3; \
198 	vpxor		x3,   x2, x2; \
199 	vpxor		x0,   x3, x3; \
201 #define S7_2(x0, x1, x2, x3, x4)      \  argument
204 	vpxor		x3,   x4, x4; \
205 	vpand		x0,   x3, x3; \
208 	vpxor		x1,   x3, x3; \
212 #define SI0_1(x0, x1, x2, x3, x4)     \  argument
214 	vpor		x1,   x3, tp; \
215 	vpxor		x1,   x3, x4; \
218 	vpxor		x0,   tp, x3; \
221 #define SI0_2(x0, x1, x2, x3, x4)     \  argument
222 	vpand		x3,   x2, x2; \
223 	vpxor		x4,   x3, x3; \
224 	vpxor		x3,   x2, x2; \
225 	vpxor		x3,   x1, x1; \
226 	vpand		x0,   x3, x3; \
229 	vpxor		x3,   x4, x4;
231 #define SI1_1(x0, x1, x2, x3, x4)     \  argument
232 	vpxor		x3,   x1, x1; \
236 	vpxor		x3,   x4, x4; \
237 	vpand		x1,   x3, x3; \
240 #define SI1_2(x0, x1, x2, x3, x4)     \  argument
242 	vpor		x3,   x1, x1; \
243 	vpxor		tp,   x3, x3; \
250 #define SI2_1(x0, x1, x2, x3, x4)     \  argument
252 	vpxor		RNOT, x3, tp; \
254 	vpxor		x3,   x2, x2; \
255 	vpxor		x0,   x3, x4; \
256 	vpxor		x1,   tp, x3; \
259 #define SI2_2(x0, x1, x2, x3, x4)     \  argument
261 	vpor		x3,   x4, x4; \
262 	vpxor		x3,   x2, x2; \
265 	vpxor		x3,   x2, x2; \
266 	vpxor		x4,   x3, x3; \
269 #define SI3_1(x0, x1, x2, x3, x4)     \  argument
274 	vpxor		x3,   x1, x4; \
275 	vpxor		x3,   x0, x0; \
276 	vpor		tp,   x3, x3; \
278 #define SI3_2(x0, x1, x2, x3, x4)     \  argument
279 	vpxor		x3,   x1, x1; \
281 	vpxor		x3,   x2, x2; \
282 	vpand		x1,   x3, x3; \
285 	vpxor		x3,   x4, x4; \
286 	vpxor		x0,   x3, x3; \
289 #define SI4_1(x0, x1, x2, x3, x4)     \  argument
290 	vpxor		x3,   x2, x2; \
293 	vpor		x3,   x2, x2; \
298 #define SI4_2(x0, x1, x2, x3, x4)     \  argument
301 	vpxor		x3,   x0, x0; \
302 	vpand		x2,   x3, x3; \
303 	vpxor		x3,   x4, x4; \
304 	vpxor		x1,   x3, x3; \
307 	vpxor		x3,   x0, x0;
309 #define SI5_1(x0, x1, x2, x3, x4)     \  argument
312 	vpxor		x3,   tp, tp; \
313 	vpand		x1,   x3, x3; \
314 	vpxor		x3,   x2, x2; \
315 	vpor		x0,   x3, x3; \
317 	vpxor		x2,   x3, x3; \
319 #define SI5_2(x0, x1, x2, x3, x4)     \  argument
324 	vpxor		x3,   tp, x1; \
326 	vpxor		x3,   x2, x2; \
329 	vpxor		x3,   x4, x4;
331 #define SI6_1(x0, x1, x2, x3, x4)     \  argument
333 	vpand		x3,   x0, tp; \
334 	vpxor		x3,   x2, x2; \
336 	vpxor		x1,   x3, x3; \
338 	vpxor		x3,   x2, x2; \
339 	vpand		tp,   x3, x3;
340 #define SI6_2(x0, x1, x2, x3, x4)     \  argument
342 	vpxor		x1,   x3, x3; \
345 	vpxor		x4,   x3, x3; \
350 #define SI7_1(x0, x1, x2, x3, x4)     \  argument
351 	vpand		x0,   x3, tp; \
353 	vpor		x3,   x2, x2; \
354 	vpxor		x1,   x3, x4; \
360 #define SI7_2(x0, x1, x2, x3, x4)     \  argument
362 	vpxor		x2,   tp, x3; \
363 	vpxor		x3,   x4, x4; \
364 	vpand		x3,   x2, x2; \
365 	vpor		x0,   x3, x3; \
367 	vpxor		x4,   x3, x3; \
374 #define K2(x0, x1, x2, x3, x4, i) \  argument
375 	get_key(i, 0, RK0); \
382 	vpxor RK3,	x3 ## 1, x3 ## 1; \
386 		vpxor RK3,	x3 ## 2, x3 ## 2;
388 #define LK2(x0, x1, x2, x3, x4, i) \  argument
409 	vpxor			x2 ## 1, x3 ## 1, x3 ## 1; \
410 	vpxor			x4 ## 1, x3 ## 1, x3 ## 1; \
416 		vpxor			x2 ## 2, x3 ## 2, x3 ## 2; \
417 		vpxor			x4 ## 2, x3 ## 2, x3 ## 2; \
419 	vpslld $7,		x3 ## 1, x4 ## 1;          \
420 	vpsrld $(32 - 7),	x3 ## 1, x3 ## 1;          \
421 	vpor			x4 ## 1, x3 ## 1, x3 ## 1; \
424 	vpxor			x3 ## 1, x0 ## 1, x0 ## 1; \
425 	vpxor			x3 ## 1, x2 ## 1, x2 ## 1; \
427 	get_key(i, 0, RK0); \
428 		vpslld $7,		x3 ## 2, x4 ## 2;          \
429 		vpsrld $(32 - 7),	x3 ## 2, x3 ## 2;          \
430 		vpor			x4 ## 2, x3 ## 2, x3 ## 2; \
433 		vpxor			x3 ## 2, x0 ## 2, x0 ## 2; \
434 		vpxor			x3 ## 2, x2 ## 2, x2 ## 2; \
438 	vpxor			RK3, x3 ## 1, x3 ## 1;     \
448 		vpxor			RK3, x3 ## 2, x3 ## 2;     \
458 #define KL2(x0, x1, x2, x3, x4, i) \  argument
464 	vpxor			RK3, x3 ## 1, x3 ## 1;     \
469 	vpxor			x3 ## 1, x2 ## 1, x2 ## 1; \
475 		vpxor			RK3, x3 ## 2, x3 ## 2;     \
480 		vpxor			x3 ## 2, x2 ## 2, x2 ## 2; \
481 	vpxor			x3 ## 1, x0 ## 1, x0 ## 1; \
488 		vpxor			x3 ## 2, x0 ## 2, x0 ## 2; \
495 	vpsrld $7,		x3 ## 1, x4 ## 1;          \
496 	vpslld $(32 - 7),	x3 ## 1, x3 ## 1;          \
497 	vpor			x4 ## 1, x3 ## 1, x3 ## 1; \
500 	vpxor			x4 ## 1, x3 ## 1, x3 ## 1; \
501 		vpsrld $7,		x3 ## 2, x4 ## 2;          \
502 		vpslld $(32 - 7),	x3 ## 2, x3 ## 2;          \
503 		vpor			x4 ## 2, x3 ## 2, x3 ## 2; \
506 		vpxor			x4 ## 2, x3 ## 2, x3 ## 2; \
511 	vpxor			x2 ## 1, x3 ## 1, x3 ## 1; \
519 		vpxor			x2 ## 2, x3 ## 2, x3 ## 2; \
524 #define S(SBOX, x0, x1, x2, x3, x4) \  argument
525 	SBOX ## _1(x0 ## 1, x1 ## 1, x2 ## 1, x3 ## 1, x4 ## 1); \
526 	SBOX ## _2(x0 ## 1, x1 ## 1, x2 ## 1, x3 ## 1, x4 ## 1); \
527 	SBOX ## _1(x0 ## 2, x1 ## 2, x2 ## 2, x3 ## 2, x4 ## 2); \
528 	SBOX ## _2(x0 ## 2, x1 ## 2, x2 ## 2, x3 ## 2, x4 ## 2);
530 #define SP(SBOX, x0, x1, x2, x3, x4, i) \  argument
531 	get_key(i, 0, RK0); \
532 	SBOX ## _1(x0 ## 1, x1 ## 1, x2 ## 1, x3 ## 1, x4 ## 1); \
534 	SBOX ## _2(x0 ## 1, x1 ## 1, x2 ## 1, x3 ## 1, x4 ## 1); \
536 	SBOX ## _1(x0 ## 2, x1 ## 2, x2 ## 2, x3 ## 2, x4 ## 2); \
538 	SBOX ## _2(x0 ## 2, x1 ## 2, x2 ## 2, x3 ## 2, x4 ## 2); \
540 #define transpose_4x4(x0, x1, x2, x3, t0, t1, t2) \  argument
543 	vpunpckldq		x3, x2, t1; \
544 	vpunpckhdq		x3, x2, x3; \
548 	vpunpcklqdq		x3, t2, x2; \
549 	vpunpckhqdq		x3, t2, x3;
551 #define read_blocks(x0, x1, x2, x3, t0, t1, t2) \  argument
552 	transpose_4x4(x0, x1, x2, x3, t0, t1, t2)
554 #define write_blocks(x0, x1, x2, x3, t0, t1, t2) \  argument
555 	transpose_4x4(x0, x1, x2, x3, t0, t1, t2)
571 						 K2(RA, RB, RC, RD, RE, 0);
657 	S(SI0, RE, RB, RC, RA, RD);		 K2(RC, RD, RB, RE, RA, 0);