65   } R20, R21, R22, R23, R24, S21, S22, S23, S24;  member
112   p->R21.d[1] = (uint32_t)(r1);  in CRYPTO_poly1305_init()
113   p->R21.d[3] = (uint32_t)(r1 >> 32);  in CRYPTO_poly1305_init()
152   r1 = ((uint64_t)p->R21.d[3] << 32) | (uint64_t)p->R21.d[1];  in poly1305_first_block()
183     p->R21.v = _mm_shuffle_epi32(  in poly1305_first_block()
194     p->S21.v = _mm_mul_epu32(p->R21.v, FIVE);  in poly1305_first_block()
205   p->R21.d[1] = (uint32_t)(r1);  in poly1305_first_block()
206   p->R21.d[3] = (uint32_t)(r1 >> 32);  in poly1305_first_block()
249     T1 = _mm_mul_epu32(H0, p->R21.v);  in poly1305_blocks()
269     T5 = _mm_mul_epu32(H1, p->R21.v);  in poly1305_blocks()
274     T6 = _mm_mul_epu32(H2, p->R21.v);  in poly1305_blocks()
289     T5 = _mm_mul_epu32(H3, p->R21.v);  in poly1305_blocks()
308     T6 = _mm_mul_epu32(M0, p->R21.v);  in poly1305_blocks()
331     T5 = _mm_mul_epu32(M1, p->R21.v);  in poly1305_blocks()
336     T6 = _mm_mul_epu32(M2, p->R21.v);  in poly1305_blocks()
353     T5 = _mm_mul_epu32(M3, p->R21.v);  in poly1305_blocks()
446     T1 = _mm_mul_epu32(H0, p->R21.v);  in poly1305_combine()
466     T5 = _mm_mul_epu32(H1, p->R21.v);  in poly1305_combine()
471     T6 = _mm_mul_epu32(H2, p->R21.v);  in poly1305_combine()
486     T5 = _mm_mul_epu32(H3, p->R21.v);  in poly1305_combine()
544   r1 = ((uint64_t)p->R21.d[3] << 32) | (uint64_t)p->R21.d[1];  in poly1305_combine()
548   p->R21.d[2] = (uint32_t)((r0 >> 26) | (r1 << 18)) & 0x3ffffff;  in poly1305_combine()
552   p->S21.d[2] = p->R21.d[2] * 5;  in poly1305_combine()
559   T1 = _mm_mul_epu32(H0, p->R21.v);  in poly1305_combine()
579   T5 = _mm_mul_epu32(H1, p->R21.v);  in poly1305_combine()
584   T6 = _mm_mul_epu32(H2, p->R21.v);  in poly1305_combine()
599   T5 = _mm_mul_epu32(H3, p->R21.v);  in poly1305_combine()
738   r1 = ((uint64_t)p->R21.d[3] << 32) | (uint64_t)p->R21.d[1];  in CRYPTO_poly1305_finish()