138 static void gcm_clmul(const __m128i aa, const __m128i bb,  in gcm_clmul()  argument
145     *cc = _mm_clmulepi64_si128(aa, bb, 0x00); // a0*b0 = c1:c0  in gcm_clmul()
146     *dd = _mm_clmulepi64_si128(aa, bb, 0x11); // a1*b1 = d1:d0  in gcm_clmul()
147     __m128i ee = _mm_clmulepi64_si128(aa, bb, 0x10); // a0*b1 = e1:e0  in gcm_clmul()
148     __m128i ff = _mm_clmulepi64_si128(aa, bb, 0x01); // a1*b0 = f1:f0  in gcm_clmul()
180     __m128i bb = _mm_slli_epi64(xx, 62);          // x1<<62:x0<<62 = stuff:b  in gcm_reduce()  local
182     __m128i dd = _mm_slli_si128(_mm_xor_si128(_mm_xor_si128(aa, bb), cc), 8); // a+b+c:0  in gcm_reduce()
207     __m128i aa = { 0 }, bb = { 0 }, cc, dd;  in mbedtls_aesni_gcm_mult()  local
212         ((uint8_t *) &bb)[i] = b[15 - i];  in mbedtls_aesni_gcm_mult()
215     gcm_clmul(aa, bb, &cc, &dd);  in mbedtls_aesni_gcm_mult()
517     unsigned char aa[16], bb[16], cc[16];  in mbedtls_aesni_gcm_mult()  local
523         bb[i] = b[15 - i];  in mbedtls_aesni_gcm_mult()
610          : "r" (aa), "r" (bb), "r" (cc)  in mbedtls_aesni_gcm_mult()