77   } R20, R21, R22, R23, R24, S21, S22, S23, S24;  member
128   p->R21.d[1] = (uint32_t)(r1);  in CRYPTO_poly1305_init()
129   p->R21.d[3] = (uint32_t)(r1 >> 32);  in CRYPTO_poly1305_init()
168   r1 = ((uint64_t)p->R21.d[3] << 32) | (uint64_t)p->R21.d[1];  in poly1305_first_block()
199     p->R21.v = _mm_shuffle_epi32(  in poly1305_first_block()
210     p->S21.v = _mm_mul_epu32(p->R21.v, FIVE);  in poly1305_first_block()
221   p->R21.d[1] = (uint32_t)(r1);  in poly1305_first_block()
222   p->R21.d[3] = (uint32_t)(r1 >> 32);  in poly1305_first_block()
265     T1 = _mm_mul_epu32(H0, p->R21.v);  in poly1305_blocks()
285     T5 = _mm_mul_epu32(H1, p->R21.v);  in poly1305_blocks()
290     T6 = _mm_mul_epu32(H2, p->R21.v);  in poly1305_blocks()
305     T5 = _mm_mul_epu32(H3, p->R21.v);  in poly1305_blocks()
324     T6 = _mm_mul_epu32(M0, p->R21.v);  in poly1305_blocks()
347     T5 = _mm_mul_epu32(M1, p->R21.v);  in poly1305_blocks()
352     T6 = _mm_mul_epu32(M2, p->R21.v);  in poly1305_blocks()
369     T5 = _mm_mul_epu32(M3, p->R21.v);  in poly1305_blocks()
462     T1 = _mm_mul_epu32(H0, p->R21.v);  in poly1305_combine()
482     T5 = _mm_mul_epu32(H1, p->R21.v);  in poly1305_combine()
487     T6 = _mm_mul_epu32(H2, p->R21.v);  in poly1305_combine()
502     T5 = _mm_mul_epu32(H3, p->R21.v);  in poly1305_combine()
560   r1 = ((uint64_t)p->R21.d[3] << 32) | (uint64_t)p->R21.d[1];  in poly1305_combine()
564   p->R21.d[2] = (uint32_t)((r0 >> 26) | (r1 << 18)) & 0x3ffffff;  in poly1305_combine()
568   p->S21.d[2] = p->R21.d[2] * 5;  in poly1305_combine()
575   T1 = _mm_mul_epu32(H0, p->R21.v);  in poly1305_combine()
595   T5 = _mm_mul_epu32(H1, p->R21.v);  in poly1305_combine()
600   T6 = _mm_mul_epu32(H2, p->R21.v);  in poly1305_combine()
615   T5 = _mm_mul_epu32(H3, p->R21.v);  in poly1305_combine()
759   r1 = ((uint64_t)p->R21.d[3] << 32) | (uint64_t)p->R21.d[1];  in CRYPTO_poly1305_finish()