277 	__m128i H, H2, H3, H4, Y, T;  in AES_GCM_encrypt()  local
291 		Y = _mm_loadu_si128((const __m128i *)ivec);  in AES_GCM_encrypt()
292 		Y = _mm_insert_epi32(Y, 0x1000000, 3);  in AES_GCM_encrypt()
295 		tmp2 = _mm_xor_si128(Y, KEY[0]);  in AES_GCM_encrypt()
317 		Y = _mm_setzero_si128();  in AES_GCM_encrypt()
322 			Y = _mm_xor_si128(Y, tmp1);  in AES_GCM_encrypt()
323 			gfmul(Y, H, &Y);  in AES_GCM_encrypt()
330 			Y = _mm_xor_si128(Y, tmp1);  in AES_GCM_encrypt()
331 			gfmul(Y, H, &Y);  in AES_GCM_encrypt()
336 		Y = _mm_xor_si128(Y, tmp1);  in AES_GCM_encrypt()
337 		gfmul(Y, H, &Y);  in AES_GCM_encrypt()
338 		Y = _mm_shuffle_epi8(Y, BSWAP_MASK); /*Compute E(K, Y0)*/  in AES_GCM_encrypt()
339 		tmp1 = _mm_xor_si128(Y, KEY[0]);  in AES_GCM_encrypt()
379 	ctr1 = _mm_shuffle_epi8(Y, BSWAP_EPI64);  in AES_GCM_encrypt()
538 	__m128i H, H2, H3, H4, Y, T;  in AES_GCM_decrypt()  local
552 		Y = _mm_loadu_si128((const __m128i *)ivec);  in AES_GCM_decrypt()
553 		Y = _mm_insert_epi32(Y, 0x1000000, 3);  in AES_GCM_decrypt()
556 		tmp2 = _mm_xor_si128(Y, KEY[0]);  in AES_GCM_decrypt()
578 		Y = _mm_setzero_si128();  in AES_GCM_decrypt()
583 			Y = _mm_xor_si128(Y, tmp1);  in AES_GCM_decrypt()
584 			gfmul(Y, H, &Y);  in AES_GCM_decrypt()
591 			Y = _mm_xor_si128(Y, tmp1);  in AES_GCM_decrypt()
592 			gfmul(Y, H, &Y);  in AES_GCM_decrypt()
597 		Y = _mm_xor_si128(Y, tmp1);  in AES_GCM_decrypt()
598 		gfmul(Y, H, &Y);  in AES_GCM_decrypt()
599 		Y = _mm_shuffle_epi8(Y, BSWAP_MASK); /*Compute E(K, Y0)*/  in AES_GCM_decrypt()
600 		tmp1 = _mm_xor_si128(Y, KEY[0]);  in AES_GCM_decrypt()
684 	ctr1 = _mm_shuffle_epi8(Y, BSWAP_EPI64);  in AES_GCM_decrypt()