203          "psllq $63, %%xmm3                 \n\t" // x1<<63:x0<<63 = stuff:a  in mbedtls_aesni_gcm_mult()
204          "psllq $62, %%xmm4                 \n\t" // x1<<62:x0<<62 = stuff:b  in mbedtls_aesni_gcm_mult()
205          "psllq $57, %%xmm5                 \n\t" // x1<<57:x0<<57 = stuff:c  in mbedtls_aesni_gcm_mult()
208          "pxor %%xmm4, %%xmm3               \n\t" // stuff:a+b  in mbedtls_aesni_gcm_mult()
209          "pxor %%xmm5, %%xmm3               \n\t" // stuff:a+b+c  in mbedtls_aesni_gcm_mult()
227          "psllq $63, %%xmm3                 \n\t" // d<<63:stuff  in mbedtls_aesni_gcm_mult()
228          "psllq $62, %%xmm4                 \n\t" // d<<62:stuff  in mbedtls_aesni_gcm_mult()
229          "psllq $57, %%xmm5                 \n\t" // d<<57:stuff  in mbedtls_aesni_gcm_mult()
230          "pxor %%xmm4, %%xmm3               \n\t" // d<<63+d<<62:stuff  in mbedtls_aesni_gcm_mult()
231          "pxor %%xmm5, %%xmm3               \n\t" // missing bits of d:stuff  in mbedtls_aesni_gcm_mult()
284           * On entry xmm0 is r3:r2:r1:r0 and xmm1 is X:stuff:stuff:stuff  in aesni_setkey_enc_128()
338           * On entry xmm0 is r3:r2:r1:r0, xmm1 is stuff:stuff:r5:r4  in aesni_setkey_enc_192()
339           * and xmm2 is stuff:stuff:X:stuff with X = rot( sub( r3 ) ) ^ RCON.  in aesni_setkey_enc_192()
341           * On exit, xmm0 is r9:r8:r7:r6 and xmm1 is stuff:stuff:r11:r10  in aesni_setkey_enc_192()
356          "pxor %%xmm1, %%xmm2           \n\t" // stuff:stuff:r9+r5:r10  in aesni_setkey_enc_192()
358          "pxor %%xmm2, %%xmm1           \n\t" // xmm1 = stuff:stuff:r11:r10  in aesni_setkey_enc_192()
395           * xmm2 is X:stuff:stuff:stuff with X = rot( sub( r7 )) ^ RCON  in aesni_setkey_enc_256()
412          /* Set xmm2 to stuff:Y:stuff:stuff with Y = subword( r11 )  in aesni_setkey_enc_256()