79       V.lo = (V.hi << 63) | (V.lo >> 1);                               \
80       V.hi = (V.hi >> 1) ^ T;                                          \
83       V.lo = (V.hi << 63) | (V.lo >> 1);                               \
84       V.hi = (V.hi >> 1) ^ ((uint64_t)T << 32);                        \
95   Htable[0].hi = 0;  in gcm_init_4bit()
97   V.hi = H[0];  in gcm_init_4bit()
107   Htable[3].hi = V.hi ^ Htable[2].hi, Htable[3].lo = V.lo ^ Htable[2].lo;  in gcm_init_4bit()
109   Htable[5].hi = V.hi ^ Htable[1].hi, Htable[5].lo = V.lo ^ Htable[1].lo;  in gcm_init_4bit()
110   Htable[6].hi = V.hi ^ Htable[2].hi, Htable[6].lo = V.lo ^ Htable[2].lo;  in gcm_init_4bit()
111   Htable[7].hi = V.hi ^ Htable[3].hi, Htable[7].lo = V.lo ^ Htable[3].lo;  in gcm_init_4bit()
113   Htable[9].hi = V.hi ^ Htable[1].hi, Htable[9].lo = V.lo ^ Htable[1].lo;  in gcm_init_4bit()
114   Htable[10].hi = V.hi ^ Htable[2].hi, Htable[10].lo = V.lo ^ Htable[2].lo;  in gcm_init_4bit()
115   Htable[11].hi = V.hi ^ Htable[3].hi, Htable[11].lo = V.lo ^ Htable[3].lo;  in gcm_init_4bit()
116   Htable[12].hi = V.hi ^ Htable[4].hi, Htable[12].lo = V.lo ^ Htable[4].lo;  in gcm_init_4bit()
117   Htable[13].hi = V.hi ^ Htable[5].hi, Htable[13].lo = V.lo ^ Htable[5].lo;  in gcm_init_4bit()
118   Htable[14].hi = V.hi ^ Htable[6].hi, Htable[14].lo = V.lo ^ Htable[6].lo;  in gcm_init_4bit()
119   Htable[15].hi = V.hi ^ Htable[7].hi, Htable[15].lo = V.lo ^ Htable[7].lo;  in gcm_init_4bit()
133         Htable[j].hi = V.lo;  in gcm_init_4bit()
134         Htable[j].lo = V.hi;  in gcm_init_4bit()
139         Htable[j].hi = V.lo << 32 | V.lo >> 32;  in gcm_init_4bit()
140         Htable[j].lo = V.hi << 32 | V.hi >> 32;  in gcm_init_4bit()
167   Z.hi = Htable[nlo].hi;  in gcm_gmult_4bit()
172     Z.lo = (Z.hi << 60) | (Z.lo >> 4);  in gcm_gmult_4bit()
173     Z.hi = (Z.hi >> 4);  in gcm_gmult_4bit()
175       Z.hi ^= rem_4bit[rem];  in gcm_gmult_4bit()
177       Z.hi ^= (uint64_t)rem_4bit[rem] << 32;  in gcm_gmult_4bit()
180     Z.hi ^= Htable[nhi].hi;  in gcm_gmult_4bit()
192     Z.lo = (Z.hi << 60) | (Z.lo >> 4);  in gcm_gmult_4bit()
193     Z.hi = (Z.hi >> 4);  in gcm_gmult_4bit()
195       Z.hi ^= rem_4bit[rem];  in gcm_gmult_4bit()
197       Z.hi ^= (uint64_t)rem_4bit[rem] << 32;  in gcm_gmult_4bit()
200     Z.hi ^= Htable[nlo].hi;  in gcm_gmult_4bit()
206     Xi[0] = BSWAP8(Z.hi);  in gcm_gmult_4bit()
211     v = (uint32_t)(Z.hi >> 32);  in gcm_gmult_4bit()
213     v = (uint32_t)(Z.hi);  in gcm_gmult_4bit()
221     Xi[0] = Z.hi;  in gcm_gmult_4bit()
248     Z.hi = Htable[nlo].hi;  in gcm_ghash_4bit()
253       Z.lo = (Z.hi << 60) | (Z.lo >> 4);  in gcm_ghash_4bit()
254       Z.hi = (Z.hi >> 4);  in gcm_ghash_4bit()
256         Z.hi ^= rem_4bit[rem];  in gcm_ghash_4bit()
258         Z.hi ^= (uint64_t)rem_4bit[rem] << 32;  in gcm_ghash_4bit()
261       Z.hi ^= Htable[nhi].hi;  in gcm_ghash_4bit()
274       Z.lo = (Z.hi << 60) | (Z.lo >> 4);  in gcm_ghash_4bit()
275       Z.hi = (Z.hi >> 4);  in gcm_ghash_4bit()
277         Z.hi ^= rem_4bit[rem];  in gcm_ghash_4bit()
279         Z.hi ^= (uint64_t)rem_4bit[rem] << 32;  in gcm_ghash_4bit()
282       Z.hi ^= Htable[nlo].hi;  in gcm_ghash_4bit()
288       Xi[0] = BSWAP8(Z.hi);  in gcm_ghash_4bit()
293       v = (uint32_t)(Z.hi >> 32);  in gcm_ghash_4bit()
295       v = (uint32_t)(Z.hi);  in gcm_ghash_4bit()
303       Xi[0] = Z.hi;  in gcm_ghash_4bit()
438     uint64_t hi, lo;  in CRYPTO_gcm128_init()
439     hi = (uint64_t)GETU32(p) << 32 | GETU32(p + 4);  in CRYPTO_gcm128_init()
441     ctx->H.u[0] = hi;  in CRYPTO_gcm128_init()