78       uint64_t T = UINT64_C(0xe100000000000000) & (0 - (V.lo & 1)); \
79       V.lo = (V.hi << 63) | (V.lo >> 1);                               \
82       uint32_t T = 0xe1000000U & (0 - (uint32_t)(V.lo & 1));           \
83       V.lo = (V.hi << 63) | (V.lo >> 1);                               \
96   Htable[0].lo = 0;  in gcm_init_4bit()
98   V.lo = H[1];  in gcm_init_4bit()
107   Htable[3].hi = V.hi ^ Htable[2].hi, Htable[3].lo = V.lo ^ Htable[2].lo;  in gcm_init_4bit()
109   Htable[5].hi = V.hi ^ Htable[1].hi, Htable[5].lo = V.lo ^ Htable[1].lo;  in gcm_init_4bit()
110   Htable[6].hi = V.hi ^ Htable[2].hi, Htable[6].lo = V.lo ^ Htable[2].lo;  in gcm_init_4bit()
111   Htable[7].hi = V.hi ^ Htable[3].hi, Htable[7].lo = V.lo ^ Htable[3].lo;  in gcm_init_4bit()
113   Htable[9].hi = V.hi ^ Htable[1].hi, Htable[9].lo = V.lo ^ Htable[1].lo;  in gcm_init_4bit()
114   Htable[10].hi = V.hi ^ Htable[2].hi, Htable[10].lo = V.lo ^ Htable[2].lo;  in gcm_init_4bit()
115   Htable[11].hi = V.hi ^ Htable[3].hi, Htable[11].lo = V.lo ^ Htable[3].lo;  in gcm_init_4bit()
116   Htable[12].hi = V.hi ^ Htable[4].hi, Htable[12].lo = V.lo ^ Htable[4].lo;  in gcm_init_4bit()
117   Htable[13].hi = V.hi ^ Htable[5].hi, Htable[13].lo = V.lo ^ Htable[5].lo;  in gcm_init_4bit()
118   Htable[14].hi = V.hi ^ Htable[6].hi, Htable[14].lo = V.lo ^ Htable[6].lo;  in gcm_init_4bit()
119   Htable[15].hi = V.hi ^ Htable[7].hi, Htable[15].lo = V.lo ^ Htable[7].lo;  in gcm_init_4bit()
133         Htable[j].hi = V.lo;  in gcm_init_4bit()
134         Htable[j].lo = V.hi;  in gcm_init_4bit()
139         Htable[j].hi = V.lo << 32 | V.lo >> 32;  in gcm_init_4bit()
140         Htable[j].lo = V.hi << 32 | V.hi >> 32;  in gcm_init_4bit()
168   Z.lo = Htable[nlo].lo;  in gcm_gmult_4bit()
171     rem = (size_t)Z.lo & 0xf;  in gcm_gmult_4bit()
172     Z.lo = (Z.hi << 60) | (Z.lo >> 4);  in gcm_gmult_4bit()
181     Z.lo ^= Htable[nhi].lo;  in gcm_gmult_4bit()
191     rem = (size_t)Z.lo & 0xf;  in gcm_gmult_4bit()
192     Z.lo = (Z.hi << 60) | (Z.lo >> 4);  in gcm_gmult_4bit()
201     Z.lo ^= Htable[nlo].lo;  in gcm_gmult_4bit()
207     Xi[1] = BSWAP8(Z.lo);  in gcm_gmult_4bit()
215     v = (uint32_t)(Z.lo >> 32);  in gcm_gmult_4bit()
217     v = (uint32_t)(Z.lo);  in gcm_gmult_4bit()
222     Xi[1] = Z.lo;  in gcm_gmult_4bit()
249     Z.lo = Htable[nlo].lo;  in gcm_ghash_4bit()
252       rem = (size_t)Z.lo & 0xf;  in gcm_ghash_4bit()
253       Z.lo = (Z.hi << 60) | (Z.lo >> 4);  in gcm_ghash_4bit()
262       Z.lo ^= Htable[nhi].lo;  in gcm_ghash_4bit()
273       rem = (size_t)Z.lo & 0xf;  in gcm_ghash_4bit()
274       Z.lo = (Z.hi << 60) | (Z.lo >> 4);  in gcm_ghash_4bit()
283       Z.lo ^= Htable[nlo].lo;  in gcm_ghash_4bit()
289       Xi[1] = BSWAP8(Z.lo);  in gcm_ghash_4bit()
297       v = (uint32_t)(Z.lo >> 32);  in gcm_ghash_4bit()
299       v = (uint32_t)(Z.lo);  in gcm_ghash_4bit()
304       Xi[1] = Z.lo;  in gcm_ghash_4bit()
438     uint64_t hi, lo;  in CRYPTO_gcm128_init()
440     lo = (uint64_t)GETU32(p + 8) << 32 | GETU32(p + 12);  in CRYPTO_gcm128_init()
442     ctx->H.u[1] = lo;  in CRYPTO_gcm128_init()