34 		vld1q_u8(state),  in aegis128_load_state_neon()
35 		vld1q_u8(state + 16),  in aegis128_load_state_neon()
36 		vld1q_u8(state + 32),  in aegis128_load_state_neon()
37 		vld1q_u8(state + 48),  in aegis128_load_state_neon()
38 		vld1q_u8(state + 64)  in aegis128_load_state_neon()
69 		w = vqtbl1q_u8(w, vld1q_u8(shift_rows));  in aegis_aes_round()
90 		w ^= vqtbl1q_u8(v ^ w, vld1q_u8(ror32by8));  in aegis_aes_round()
145 	uint8x16_t k = vld1q_u8(key);  in crypto_aegis128_init_neon()
146 	uint8x16_t kiv = k ^ vld1q_u8(iv);  in crypto_aegis128_init_neon()
149 		vld1q_u8(const1),  in crypto_aegis128_init_neon()
150 		vld1q_u8(const0),  in crypto_aegis128_init_neon()
151 		k ^ vld1q_u8(const0),  in crypto_aegis128_init_neon()
152 		k ^ vld1q_u8(const1),  in crypto_aegis128_init_neon()
171 	st = aegis128_update_neon(st, vld1q_u8(msg));  in crypto_aegis128_update_neon()
187 		msg = vld1q_u8(src);  in crypto_aegis128_encrypt_chunk_neon()
201 		msg = vld1q_u8(buf);  in crypto_aegis128_encrypt_chunk_neon()
219 		msg = vld1q_u8(src) ^ st.v[1] ^ (st.v[2] & st.v[3]) ^ st.v[4];  in crypto_aegis128_decrypt_chunk_neon()
234 		msg = vld1q_u8(buf) ^ s;  in crypto_aegis128_decrypt_chunk_neon()
259 	v = vld1q_u8(tag_xor);  in crypto_aegis128_final_neon()