65   } R20, R21, R22, R23, R24, S21, S22, S23, S24;  member
114   p->R22.d[1] = (uint32_t)(r2);  in CRYPTO_poly1305_init()
115   p->R22.d[3] = (uint32_t)(r2 >> 32);  in CRYPTO_poly1305_init()
153   r2 = ((uint64_t)p->R22.d[3] << 32) | (uint64_t)p->R22.d[1];  in poly1305_first_block()
186     p->R22.v =  in poly1305_first_block()
195     p->S22.v = _mm_mul_epu32(p->R22.v, FIVE);  in poly1305_first_block()
207   p->R22.d[1] = (uint32_t)(r2);  in poly1305_first_block()
208   p->R22.d[3] = (uint32_t)(r2 >> 32);  in poly1305_first_block()
250     T2 = _mm_mul_epu32(H0, p->R22.v);  in poly1305_blocks()
270     T6 = _mm_mul_epu32(H1, p->R22.v);  in poly1305_blocks()
287     T5 = _mm_mul_epu32(H2, p->R22.v);  in poly1305_blocks()
327     T5 = _mm_mul_epu32(M0, p->R22.v);  in poly1305_blocks()
332     T6 = _mm_mul_epu32(M1, p->R22.v);  in poly1305_blocks()
351     T5 = _mm_mul_epu32(M2, p->R22.v);  in poly1305_blocks()
447     T2 = _mm_mul_epu32(H0, p->R22.v);  in poly1305_combine()
467     T6 = _mm_mul_epu32(H1, p->R22.v);  in poly1305_combine()
484     T5 = _mm_mul_epu32(H2, p->R22.v);  in poly1305_combine()
545   r2 = ((uint64_t)p->R22.d[3] << 32) | (uint64_t)p->R22.d[1];  in poly1305_combine()
549   p->R22.d[2] = (uint32_t)((r1 >> 8)) & 0x3ffffff;  in poly1305_combine()
553   p->S22.d[2] = p->R22.d[2] * 5;  in poly1305_combine()
560   T2 = _mm_mul_epu32(H0, p->R22.v);  in poly1305_combine()
580   T6 = _mm_mul_epu32(H1, p->R22.v);  in poly1305_combine()
597   T5 = _mm_mul_epu32(H2, p->R22.v);  in poly1305_combine()
739   r2 = ((uint64_t)p->R22.d[3] << 32) | (uint64_t)p->R22.d[1];  in CRYPTO_poly1305_finish()