67   } R20, R21, R22, R23, R24, S21, S22, S23, S24;  member
165   p->R21.d[1] = (uint32_t)(r1);  in CRYPTO_poly1305_init()
166   p->R21.d[3] = (uint32_t)(r1 >> 32);  in CRYPTO_poly1305_init()
205   r1 = ((uint64_t)p->R21.d[3] << 32) | (uint64_t)p->R21.d[1];  in poly1305_first_block()
236     p->R21.v = _mm_shuffle_epi32(  in poly1305_first_block()
247     p->S21.v = _mm_mul_epu32(p->R21.v, FIVE);  in poly1305_first_block()
258   p->R21.d[1] = (uint32_t)(r1);  in poly1305_first_block()
259   p->R21.d[3] = (uint32_t)(r1 >> 32);  in poly1305_first_block()
302     T1 = _mm_mul_epu32(H0, p->R21.v);  in poly1305_blocks()
322     T5 = _mm_mul_epu32(H1, p->R21.v);  in poly1305_blocks()
327     T6 = _mm_mul_epu32(H2, p->R21.v);  in poly1305_blocks()
342     T5 = _mm_mul_epu32(H3, p->R21.v);  in poly1305_blocks()
361     T6 = _mm_mul_epu32(M0, p->R21.v);  in poly1305_blocks()
384     T5 = _mm_mul_epu32(M1, p->R21.v);  in poly1305_blocks()
389     T6 = _mm_mul_epu32(M2, p->R21.v);  in poly1305_blocks()
406     T5 = _mm_mul_epu32(M3, p->R21.v);  in poly1305_blocks()
499     T1 = _mm_mul_epu32(H0, p->R21.v);  in poly1305_combine()
519     T5 = _mm_mul_epu32(H1, p->R21.v);  in poly1305_combine()
524     T6 = _mm_mul_epu32(H2, p->R21.v);  in poly1305_combine()
539     T5 = _mm_mul_epu32(H3, p->R21.v);  in poly1305_combine()
597   r1 = ((uint64_t)p->R21.d[3] << 32) | (uint64_t)p->R21.d[1];  in poly1305_combine()
601   p->R21.d[2] = (uint32_t)((r0 >> 26) | (r1 << 18)) & 0x3ffffff;  in poly1305_combine()
605   p->S21.d[2] = p->R21.d[2] * 5;  in poly1305_combine()
612   T1 = _mm_mul_epu32(H0, p->R21.v);  in poly1305_combine()
632   T5 = _mm_mul_epu32(H1, p->R21.v);  in poly1305_combine()
637   T6 = _mm_mul_epu32(H2, p->R21.v);  in poly1305_combine()
652   T5 = _mm_mul_epu32(H3, p->R21.v);  in poly1305_combine()
791   r1 = ((uint64_t)p->R21.d[3] << 32) | (uint64_t)p->R21.d[1];  in CRYPTO_poly1305_finish()