20 	.byte 15, 14, 13, 12, 11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1, 0
24 	.byte 0x87, 0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0
55 #define S0_1(x0, x1, x2, x3, x4)      \  argument
58 	vpxor		x2,   x3, x4; \
59 	vpxor		RNOT, x4, x4; \
62 	vpxor		x4,   x1, x1; \
64 #define S0_2(x0, x1, x2, x3, x4)      \  argument
66 	vpor		x0,   x4, x4; \
71 	vpxor		x4,   x2, x2; \
74 #define S1_1(x0, x1, x2, x3, x4)      \  argument
78 	vpand		tp,   x1, x4; \
83 #define S1_2(x0, x1, x2, x3, x4)      \  argument
84 	vpxor		x4,   x3, x3; \
85 	vpor		x4,   x1, x1; \
86 	vpxor		x2,   x4, x4; \
92 	vpxor		x1,   x4, x4;
94 #define S2_1(x0, x1, x2, x3, x4)      \  argument
103 #define S2_2(x0, x1, x2, x3, x4)      \  argument
109 	vpxor		tp,   x0, x4; \
113 #define S3_1(x0, x1, x2, x3, x4)      \  argument
116 	vpand		x0,   x1, x4; \
121 	vpor		x4,   x0, x0; \
122 	vpxor		x3,   x4, x4;
123 #define S3_2(x0, x1, x2, x3, x4)      \  argument
126 	vpand		x4,   x3, x3; \
128 	vpor		x1,   x4, x4; \
130 	vpxor		x3,   x4, x4; \
134 #define S4_1(x0, x1, x2, x3, x4)      \  argument
140 	vpxor		tp,   x3, x4; \
143 #define S4_2(x0, x1, x2, x3, x4)      \  argument
145 	vpxor		x4,   x1, x1; \
146 	vpand		x2,   x4, x4; \
148 	vpxor		x0,   x4, x4; \
153 #define S5_1(x0, x1, x2, x3, x4)      \  argument
157 	vpxor		x0,   x1, x4; \
159 	vpand		x4,   tp, x1; \
160 	vpor		x3,   x4, x4; \
161 	vpxor		x0,   x4, x4;
162 #define S5_2(x0, x1, x2, x3, x4)      \  argument
167 	vpand		x4,   x2, x2; \
172 #define S6_1(x0, x1, x2, x3, x4)      \  argument
178 	vpxor		RNOT, x1, x4; \
181 #define S6_2(x0, x1, x2, x3, x4)      \  argument
182 	vpxor		x4,   x3, x3; \
183 	vpxor		x0,   x4, x4; \
185 	vpxor		x1,   x4, x4; \
191 #define S7_1(x0, x1, x2, x3, x4)      \  argument
197 	vpxor		x2,   tp, x4; \
201 #define S7_2(x0, x1, x2, x3, x4)      \  argument
203 	vpxor		x4,   x0, x0; \
204 	vpxor		x3,   x4, x4; \
206 	vpxor		x1,   x4, x4; \
207 	vpxor		x4,   x2, x2; \
209 	vpor		x0,   x4, x4; \
210 	vpxor		x1,   x4, x4;
212 #define SI0_1(x0, x1, x2, x3, x4)     \  argument
215 	vpxor		x1,   x3, x4; \
221 #define SI0_2(x0, x1, x2, x3, x4)     \  argument
223 	vpxor		x4,   x3, x3; \
229 	vpxor		x3,   x4, x4;
231 #define SI1_1(x0, x1, x2, x3, x4)     \  argument
235 	vpor		x1,   x0, x4; \
236 	vpxor		x3,   x4, x4; \
239 	vpand		x4,   x2, x2;
240 #define SI1_2(x0, x1, x2, x3, x4)     \  argument
241 	vpxor		x1,   x4, x4; \
245 	vpor		x4,   tp, x0; \
246 	vpxor		x4,   x2, x2; \
248 	vpxor		x1,   x4, x4;
250 #define SI2_1(x0, x1, x2, x3, x4)     \  argument
255 	vpxor		x0,   x3, x4; \
259 #define SI2_2(x0, x1, x2, x3, x4)     \  argument
260 	vpxor		x4,   x1, x1; \
261 	vpor		x3,   x4, x4; \
263 	vpxor		x2,   x4, x4; \
266 	vpxor		x4,   x3, x3; \
267 	vpxor		x0,   x4, x4;
269 #define SI3_1(x0, x1, x2, x3, x4)     \  argument
274 	vpxor		x3,   x1, x4; \
278 #define SI3_2(x0, x1, x2, x3, x4)     \  argument
285 	vpxor		x3,   x4, x4; \
289 #define SI4_1(x0, x1, x2, x3, x4)     \  argument
294 	vpxor		RNOT, x0, x4; \
297 	vpand		x4,   x2, x2;
298 #define SI4_2(x0, x1, x2, x3, x4)     \  argument
300 	vpor		x4,   x0, x0; \
303 	vpxor		x3,   x4, x4; \
306 	vpxor		x1,   x4, x4; \
309 #define SI5_1(x0, x1, x2, x3, x4)     \  argument
319 #define SI5_2(x0, x1, x2, x3, x4)     \  argument
320 	vpxor		tp,   x1, x4; \
321 	vpxor		x4,   x2, x2; \
322 	vpand		x0,   x4, x4; \
328 	vpxor		x4,   x2, x2; \
329 	vpxor		x3,   x4, x4;
331 #define SI6_1(x0, x1, x2, x3, x4)     \  argument
340 #define SI6_2(x0, x1, x2, x3, x4)     \  argument
344 	vpxor		tp,   x0, x4; \
345 	vpxor		x4,   x3, x3; \
346 	vpxor		x2,   x4, x4; \
350 #define SI7_1(x0, x1, x2, x3, x4)     \  argument
354 	vpxor		x1,   x3, x4; \
357 	vpxor		x0,   x4, x4; \
360 #define SI7_2(x0, x1, x2, x3, x4)     \  argument
363 	vpxor		x3,   x4, x4; \
366 	vpxor		x4,   x1, x1; \
367 	vpxor		x4,   x3, x3; \
368 	vpand		x0,   x4, x4; \
369 	vpxor		x2,   x4, x4;
374 #define K2(x0, x1, x2, x3, x4, i) \  argument
375 	get_key(i, 0, RK0); \
388 #define LK2(x0, x1, x2, x3, x4, i) \  argument
389 	vpslld $13,		x0 ## 1, x4 ## 1;          \
391 	vpor			x4 ## 1, x0 ## 1, x0 ## 1; \
393 	vpslld $3,		x2 ## 1, x4 ## 1;          \
395 	vpor			x4 ## 1, x2 ## 1, x2 ## 1; \
397 		vpslld $13,		x0 ## 2, x4 ## 2;          \
399 		vpor			x4 ## 2, x0 ## 2, x0 ## 2; \
401 		vpslld $3,		x2 ## 2, x4 ## 2;          \
403 		vpor			x4 ## 2, x2 ## 2, x2 ## 2; \
405 	vpslld $1,		x1 ## 1, x4 ## 1;          \
407 	vpor			x4 ## 1, x1 ## 1, x1 ## 1; \
408 	vpslld $3,		x0 ## 1, x4 ## 1;          \
410 	vpxor			x4 ## 1, x3 ## 1, x3 ## 1; \
412 		vpslld $1,		x1 ## 2, x4 ## 2;          \
414 		vpor			x4 ## 2, x1 ## 2, x1 ## 2; \
415 		vpslld $3,		x0 ## 2, x4 ## 2;          \
417 		vpxor			x4 ## 2, x3 ## 2, x3 ## 2; \
419 	vpslld $7,		x3 ## 1, x4 ## 1;          \
421 	vpor			x4 ## 1, x3 ## 1, x3 ## 1; \
422 	vpslld $7,		x1 ## 1, x4 ## 1;          \
426 	vpxor			x4 ## 1, x2 ## 1, x2 ## 1; \
427 	get_key(i, 0, RK0); \
428 		vpslld $7,		x3 ## 2, x4 ## 2;          \
430 		vpor			x4 ## 2, x3 ## 2, x3 ## 2; \
431 		vpslld $7,		x1 ## 2, x4 ## 2;          \
435 		vpxor			x4 ## 2, x2 ## 2, x2 ## 2; \
439 	vpslld $5,		x0 ## 1, x4 ## 1;          \
441 	vpor			x4 ## 1, x0 ## 1, x0 ## 1; \
442 	vpslld $22,		x2 ## 1, x4 ## 1;          \
444 	vpor			x4 ## 1, x2 ## 1, x2 ## 1; \
449 		vpslld $5,		x0 ## 2, x4 ## 2;          \
451 		vpor			x4 ## 2, x0 ## 2, x0 ## 2; \
452 		vpslld $22,		x2 ## 2, x4 ## 2;          \
454 		vpor			x4 ## 2, x2 ## 2, x2 ## 2; \
458 #define KL2(x0, x1, x2, x3, x4, i) \  argument
461 	vpsrld $5,		x0 ## 1, x4 ## 1;          \
463 	vpor			x4 ## 1, x0 ## 1, x0 ## 1; \
466 	vpsrld $22,		x2 ## 1, x4 ## 1;          \
468 	vpor			x4 ## 1, x2 ## 1, x2 ## 1; \
472 		vpsrld $5,		x0 ## 2, x4 ## 2;          \
474 		vpor			x4 ## 2, x0 ## 2, x0 ## 2; \
477 		vpsrld $22,		x2 ## 2, x4 ## 2;          \
479 		vpor			x4 ## 2, x2 ## 2, x2 ## 2; \
482 	vpslld $7,		x1 ## 1, x4 ## 1;          \
484 	vpxor			x4 ## 1, x2 ## 1, x2 ## 1; \
485 	vpsrld $1,		x1 ## 1, x4 ## 1;          \
487 	vpor			x4 ## 1, x1 ## 1, x1 ## 1; \
489 		vpslld $7,		x1 ## 2, x4 ## 2;          \
491 		vpxor			x4 ## 2, x2 ## 2, x2 ## 2; \
492 		vpsrld $1,		x1 ## 2, x4 ## 2;          \
494 		vpor			x4 ## 2, x1 ## 2, x1 ## 2; \
495 	vpsrld $7,		x3 ## 1, x4 ## 1;          \
497 	vpor			x4 ## 1, x3 ## 1, x3 ## 1; \
499 	vpslld $3,		x0 ## 1, x4 ## 1;          \
500 	vpxor			x4 ## 1, x3 ## 1, x3 ## 1; \
501 		vpsrld $7,		x3 ## 2, x4 ## 2;          \
503 		vpor			x4 ## 2, x3 ## 2, x3 ## 2; \
505 		vpslld $3,		x0 ## 2, x4 ## 2;          \
506 		vpxor			x4 ## 2, x3 ## 2, x3 ## 2; \
507 	vpsrld $13,		x0 ## 1, x4 ## 1;          \
509 	vpor			x4 ## 1, x0 ## 1, x0 ## 1; \
512 	vpsrld $3,		x2 ## 1, x4 ## 1;          \
514 	vpor			x4 ## 1, x2 ## 1, x2 ## 1; \
515 		vpsrld $13,		x0 ## 2, x4 ## 2;          \
517 		vpor			x4 ## 2, x0 ## 2, x0 ## 2; \
520 		vpsrld $3,		x2 ## 2, x4 ## 2;          \
522 		vpor			x4 ## 2, x2 ## 2, x2 ## 2;
524 #define S(SBOX, x0, x1, x2, x3, x4) \  argument
525 	SBOX ## _1(x0 ## 1, x1 ## 1, x2 ## 1, x3 ## 1, x4 ## 1); \
526 	SBOX ## _2(x0 ## 1, x1 ## 1, x2 ## 1, x3 ## 1, x4 ## 1); \
527 	SBOX ## _1(x0 ## 2, x1 ## 2, x2 ## 2, x3 ## 2, x4 ## 2); \
528 	SBOX ## _2(x0 ## 2, x1 ## 2, x2 ## 2, x3 ## 2, x4 ## 2);
530 #define SP(SBOX, x0, x1, x2, x3, x4, i) \  argument
531 	get_key(i, 0, RK0); \
532 	SBOX ## _1(x0 ## 1, x1 ## 1, x2 ## 1, x3 ## 1, x4 ## 1); \
534 	SBOX ## _2(x0 ## 1, x1 ## 1, x2 ## 1, x3 ## 1, x4 ## 1); \
536 	SBOX ## _1(x0 ## 2, x1 ## 2, x2 ## 2, x3 ## 2, x4 ## 2); \
538 	SBOX ## _2(x0 ## 2, x1 ## 2, x2 ## 2, x3 ## 2, x4 ## 2); \
571 						 K2(RA, RB, RC, RD, RE, 0);
657 	S(SI0, RE, RB, RC, RA, RD);		 K2(RC, RD, RB, RE, RA, 0);