81   } R20, R21, R22, R23, R24, S21, S22, S23, S24;  member
132   p->R21.d[1] = (uint32_t)(r1);  in GFp_poly1305_init()
133   p->R21.d[3] = (uint32_t)(r1 >> 32);  in GFp_poly1305_init()
172   r1 = ((uint64_t)p->R21.d[3] << 32) | (uint64_t)p->R21.d[1];  in poly1305_first_block()
203     p->R21.v = _mm_shuffle_epi32(  in poly1305_first_block()
214     p->S21.v = _mm_mul_epu32(p->R21.v, FIVE);  in poly1305_first_block()
225   p->R21.d[1] = (uint32_t)(r1);  in poly1305_first_block()
226   p->R21.d[3] = (uint32_t)(r1 >> 32);  in poly1305_first_block()
269     T1 = _mm_mul_epu32(H0, p->R21.v);  in poly1305_blocks()
289     T5 = _mm_mul_epu32(H1, p->R21.v);  in poly1305_blocks()
294     T6 = _mm_mul_epu32(H2, p->R21.v);  in poly1305_blocks()
309     T5 = _mm_mul_epu32(H3, p->R21.v);  in poly1305_blocks()
328     T6 = _mm_mul_epu32(M0, p->R21.v);  in poly1305_blocks()
351     T5 = _mm_mul_epu32(M1, p->R21.v);  in poly1305_blocks()
356     T6 = _mm_mul_epu32(M2, p->R21.v);  in poly1305_blocks()
373     T5 = _mm_mul_epu32(M3, p->R21.v);  in poly1305_blocks()
466     T1 = _mm_mul_epu32(H0, p->R21.v);  in poly1305_combine()
486     T5 = _mm_mul_epu32(H1, p->R21.v);  in poly1305_combine()
491     T6 = _mm_mul_epu32(H2, p->R21.v);  in poly1305_combine()
506     T5 = _mm_mul_epu32(H3, p->R21.v);  in poly1305_combine()
564   r1 = ((uint64_t)p->R21.d[3] << 32) | (uint64_t)p->R21.d[1];  in poly1305_combine()
568   p->R21.d[2] = (uint32_t)((r0 >> 26) | (r1 << 18)) & 0x3ffffff;  in poly1305_combine()
572   p->S21.d[2] = p->R21.d[2] * 5;  in poly1305_combine()
579   T1 = _mm_mul_epu32(H0, p->R21.v);  in poly1305_combine()
599   T5 = _mm_mul_epu32(H1, p->R21.v);  in poly1305_combine()
604   T6 = _mm_mul_epu32(H2, p->R21.v);  in poly1305_combine()
619   T5 = _mm_mul_epu32(H3, p->R21.v);  in poly1305_combine()
763   r1 = ((uint64_t)p->R21.d[3] << 32) | (uint64_t)p->R21.d[1];  in GFp_poly1305_finish()