49 #define roundsm16(x0, x1, x2, x3, x4, x5, x6, x7, t0, t1, t2, t3, t4, t5, t6, \  argument
61 	vpshufb t4, x7, x7; \
73 	filter_8bit(x7, t0, t1, t7, t6); \
88 	vaesenclast t4, x7, x7; \
100 	filter_8bit(x7, t0, t1, t7, t6); \
135 	vpxor x7, x2, x2; \
141 	vpxor x1, x7, x7; \
143 	vpxor x7, x0, x0; \
151 	vpxor x2, x7, x7; /* note: high and low parts swapped */ \
170 	vpxor t0, x7, x7; \
171 	vpxor 3 * 16(mem_cd), x7, x7; \
211 #define two_roundsm16(x0, x1, x2, x3, x4, x5, x6, x7, y0, y1, y2, y3, y4, y5, \  argument
219 	vmovdqu x7, 3 * 16(mem_cd); \
228 	store_ab(x0, x1, x2, x3, x4, x5, x6, x7, mem_ab);
230 #define dummy_store(x0, x1, x2, x3, x4, x5, x6, x7, mem_ab) /* do nothing */  argument
232 #define store_ab_state(x0, x1, x2, x3, x4, x5, x6, x7, mem_ab) \  argument
241 	vmovdqu x7, 7 * 16(mem_ab);
243 #define enc_rounds16(x0, x1, x2, x3, x4, x5, x6, x7, y0, y1, y2, y3, y4, y5, \  argument
245 	two_roundsm16(x0, x1, x2, x3, x4, x5, x6, x7, y0, y1, y2, y3, y4, y5, \
247 	two_roundsm16(x0, x1, x2, x3, x4, x5, x6, x7, y0, y1, y2, y3, y4, y5, \
249 	two_roundsm16(x0, x1, x2, x3, x4, x5, x6, x7, y0, y1, y2, y3, y4, y5, \
252 #define dec_rounds16(x0, x1, x2, x3, x4, x5, x6, x7, y0, y1, y2, y3, y4, y5, \  argument
254 	two_roundsm16(x0, x1, x2, x3, x4, x5, x6, x7, y0, y1, y2, y3, y4, y5, \
256 	two_roundsm16(x0, x1, x2, x3, x4, x5, x6, x7, y0, y1, y2, y3, y4, y5, \
258 	two_roundsm16(x0, x1, x2, x3, x4, x5, x6, x7, y0, y1, y2, y3, y4, y5, \
481 #define inpack16_pre(x0, x1, x2, x3, x4, x5, x6, x7, y0, y1, y2, y3, y4, y5, \  argument
494 	vpxor 8 * 16(rio), x0, x7; \
504 #define inpack16_post(x0, x1, x2, x3, x4, x5, x6, x7, y0, y1, y2, y3, y4, y5, \  argument
506 	byteslice_16x16b(x0, x1, x2, x3, x4, x5, x6, x7, y0, y1, y2, y3, y4, \
516 	vmovdqu x7, 7 * 16(mem_ab); \
527 #define outunpack16(x0, x1, x2, x3, x4, x5, x6, x7, y0, y1, y2, y3, y4, \  argument
530 			 y7, x3, x7, stack_tmp0, stack_tmp1); \
545 	vpxor x0, x7, x7; \
554 #define write_output(x0, x1, x2, x3, x4, x5, x6, x7, y0, y1, y2, y3, y4, y5, \  argument
563 	vmovdqu x7, 7 * 16(rio); \