Integrate Vector Permutation AES into build system.
[openssl.git] / crypto / aes / asm / aes-ia64.S
1 // ====================================================================
2 // Written by Andy Polyakov <appro@fy.chalmers.se> for the OpenSSL
3 // project. Rights for redistribution and usage in source and binary
4 // forms are granted according to the OpenSSL license.
5 // ====================================================================
6 //
7 // What's wrong with compiler generated code? Compiler never uses
8 // variable 'shr' which is pairable with 'extr'/'dep' instructions.
9 // Then it uses 'zxt' which is an I-type, but can be replaced with
10 // 'and' which in turn can be assigned to M-port [there're double as
11 // much M-ports as there're I-ports on Itanium 2]. By sacrificing few
12 // registers for small constants (255, 24 and 16) to be used with
13 // 'shr' and 'and' instructions I can achieve better ILP, Intruction
14 // Level Parallelism, and performance. This code outperforms GCC 3.3
15 // generated code by over factor of 2 (two), GCC 3.4 - by 70% and
16 // HP C - by 40%. Measured best-case scenario, i.e. aligned
17 // big-endian input, ECB timing on Itanium 2 is (18 + 13*rounds)
18 // ticks per block, or 9.25 CPU cycles per byte for 128 bit key.
19
20 // Version 1.2 mitigates the hazard of cache-timing attacks by
21 // a) compressing S-boxes from 8KB to 2KB+256B, b) scheduling
22 // references to S-boxes for L2 cache latency, c) prefetching T[ed]4
23 // prior last round. As result performance dropped to (26 + 15*rounds)
24 // ticks per block or 11 cycles per byte processed with 128-bit key.
25 // This is ~16% deterioration. For reference Itanium 2 L1 cache has
26 // 64 bytes line size and L2 - 128 bytes...
27
28 .ident  "aes-ia64.S, version 1.2"
29 .ident  "IA-64 ISA artwork by Andy Polyakov <appro@fy.chalmers.se>"
30 .explicit
31 .text
32
33 rk0=r8;     rk1=r9;
34
35 pfssave=r2;
36 lcsave=r10;
37 prsave=r3;
38 maskff=r11;
39 twenty4=r14;
40 sixteen=r15;
41
42 te00=r16;   te11=r17;   te22=r18;   te33=r19;
43 te01=r20;   te12=r21;   te23=r22;   te30=r23;
44 te02=r24;   te13=r25;   te20=r26;   te31=r27;
45 te03=r28;   te10=r29;   te21=r30;   te32=r31;
46
47 // these are rotating...
48 t0=r32;     s0=r33;
49 t1=r34;     s1=r35;
50 t2=r36;     s2=r37;
51 t3=r38;     s3=r39;
52
53 te0=r40;    te1=r41;    te2=r42;    te3=r43;
54
55 #if defined(_HPUX_SOURCE) && !defined(_LP64)
56 # define ADDP   addp4
57 #else
58 # define ADDP   add
59 #endif
60
61 // Offsets from Te0
62 #define TE0     0
63 #define TE2     2
64 #if defined(_HPUX_SOURCE) || defined(B_ENDIAN)
65 #define TE1     3
66 #define TE3     1
67 #else
68 #define TE1     1
69 #define TE3     3
70 #endif
71
72 // This implies that AES_KEY comprises 32-bit key schedule elements
73 // even on LP64 platforms.
74 #ifndef KSZ
75 # define KSZ    4
76 # define LDKEY  ld4
77 #endif
78
79 .proc   _ia64_AES_encrypt#
80 // Input:       rk0-rk1
81 //              te0
82 //              te3     as AES_KEY->rounds!!!
83 //              s0-s3
84 //              maskff,twenty4,sixteen
85 // Output:      r16,r20,r24,r28 as s0-s3
86 // Clobber:     r16-r31,rk0-rk1,r32-r43
87 .align  32
88 _ia64_AES_encrypt:
89         .prologue
90         .altrp  b6
91         .body
92 { .mmi; alloc   r16=ar.pfs,12,0,0,8
93         LDKEY   t0=[rk0],2*KSZ
94         mov     pr.rot=1<<16    }
95 { .mmi; LDKEY   t1=[rk1],2*KSZ
96         add     te1=TE1,te0
97         add     te3=-3,te3      };;
98 { .mib; LDKEY   t2=[rk0],2*KSZ
99         mov     ar.ec=2         }
100 { .mib; LDKEY   t3=[rk1],2*KSZ
101         add     te2=TE2,te0
102         brp.loop.imp    .Le_top,.Le_end-16      };;
103
104 { .mmi; xor     s0=s0,t0
105         xor     s1=s1,t1
106         mov     ar.lc=te3       }
107 { .mmi; xor     s2=s2,t2
108         xor     s3=s3,t3
109         add     te3=TE3,te0     };;
110 \f
111 .align  32
112 .Le_top:
113 { .mmi; (p0)    LDKEY   t0=[rk0],2*KSZ          // 0/0:rk[0]
114         (p0)    and     te33=s3,maskff          // 0/0:s3&0xff
115         (p0)    extr.u  te22=s2,8,8     }       // 0/0:s2>>8&0xff
116 { .mmi; (p0)    LDKEY   t1=[rk1],2*KSZ          // 0/1:rk[1]
117         (p0)    and     te30=s0,maskff          // 0/1:s0&0xff
118         (p0)    shr.u   te00=s0,twenty4 };;     // 0/0:s0>>24
119 { .mmi; (p0)    LDKEY   t2=[rk0],2*KSZ          // 1/2:rk[2]
120         (p0)    shladd  te33=te33,3,te3         // 1/0:te0+s0>>24
121         (p0)    extr.u  te23=s3,8,8     }       // 1/1:s3>>8&0xff
122 { .mmi; (p0)    LDKEY   t3=[rk1],2*KSZ          // 1/3:rk[3]
123         (p0)    shladd  te30=te30,3,te3         // 1/1:te3+s0
124         (p0)    shr.u   te01=s1,twenty4 };;     // 1/1:s1>>24
125 { .mmi; (p0)    ld4     te33=[te33]             // 2/0:te3[s3&0xff]
126         (p0)    shladd  te22=te22,3,te2         // 2/0:te2+s2>>8&0xff
127         (p0)    extr.u  te20=s0,8,8     }       // 2/2:s0>>8&0xff
128 { .mmi; (p0)    ld4     te30=[te30]             // 2/1:te3[s0]
129         (p0)    shladd  te23=te23,3,te2         // 2/1:te2+s3>>8
130         (p0)    shr.u   te02=s2,twenty4 };;     // 2/2:s2>>24
131 { .mmi; (p0)    ld4     te22=[te22]             // 3/0:te2[s2>>8]
132         (p0)    shladd  te20=te20,3,te2         // 3/2:te2+s0>>8
133         (p0)    extr.u  te21=s1,8,8     }       // 3/3:s1>>8&0xff
134 { .mmi; (p0)    ld4     te23=[te23]             // 3/1:te2[s3>>8]
135         (p0)    shladd  te00=te00,3,te0         // 3/0:te0+s0>>24
136         (p0)    shr.u   te03=s3,twenty4 };;     // 3/3:s3>>24
137 { .mmi; (p0)    ld4     te20=[te20]             // 4/2:te2[s0>>8]
138         (p0)    shladd  te21=te21,3,te2         // 4/3:te3+s2
139         (p0)    extr.u  te11=s1,16,8    }       // 4/0:s1>>16&0xff
140 { .mmi; (p0)    ld4     te00=[te00]             // 4/0:te0[s0>>24]
141         (p0)    shladd  te01=te01,3,te0         // 4/1:te0+s1>>24
142         (p0)    shr.u   te13=s3,sixteen };;     // 4/2:s3>>16
143 { .mmi; (p0)    ld4     te21=[te21]             // 5/3:te2[s1>>8]
144         (p0)    shladd  te11=te11,3,te1         // 5/0:te1+s1>>16
145         (p0)    extr.u  te12=s2,16,8    }       // 5/1:s2>>16&0xff
146 { .mmi; (p0)    ld4     te01=[te01]             // 5/1:te0[s1>>24]
147         (p0)    shladd  te02=te02,3,te0         // 5/2:te0+s2>>24
148         (p0)    and     te31=s1,maskff  };;     // 5/2:s1&0xff
149 { .mmi; (p0)    ld4     te11=[te11]             // 6/0:te1[s1>>16]
150         (p0)    shladd  te12=te12,3,te1         // 6/1:te1+s2>>16
151         (p0)    extr.u  te10=s0,16,8    }       // 6/3:s0>>16&0xff
152 { .mmi; (p0)    ld4     te02=[te02]             // 6/2:te0[s2>>24]
153         (p0)    shladd  te03=te03,3,te0         // 6/3:te1+s0>>16
154         (p0)    and     te32=s2,maskff  };;     // 6/3:s2&0xff
155
156 { .mmi; (p0)    ld4     te12=[te12]             // 7/1:te1[s2>>16]
157         (p0)    shladd  te31=te31,3,te3         // 7/2:te3+s1&0xff
158         (p0)    and     te13=te13,maskff}       // 7/2:s3>>16&0xff
159 { .mmi; (p0)    ld4     te03=[te03]             // 7/3:te0[s3>>24]
160         (p0)    shladd  te32=te32,3,te3         // 7/3:te3+s2
161         (p0)    xor     t0=t0,te33      };;     // 7/0:
162 { .mmi; (p0)    ld4     te31=[te31]             // 8/2:te3[s1]
163         (p0)    shladd  te13=te13,3,te1         // 8/2:te1+s3>>16
164         (p0)    xor     t0=t0,te22      }       // 8/0:
165 { .mmi; (p0)    ld4     te32=[te32]             // 8/3:te3[s2]
166         (p0)    shladd  te10=te10,3,te1         // 8/3:te1+s0>>16
167         (p0)    xor     t1=t1,te30      };;     // 8/1:
168 { .mmi; (p0)    ld4     te13=[te13]             // 9/2:te1[s3>>16]
169         (p0)    ld4     te10=[te10]             // 9/3:te1[s0>>16]
170         (p0)    xor     t0=t0,te00      };;     // 9/0:         !L2 scheduling
171 { .mmi; (p0)    xor     t1=t1,te23              // 10[9]/1:     
172         (p0)    xor     t2=t2,te20              // 10[9]/2:
173         (p0)    xor     t3=t3,te21      };;     // 10[9]/3:
174 { .mmi; (p0)    xor     t0=t0,te11              // 11[10]/0:done!
175         (p0)    xor     t1=t1,te01              // 11[10]/1:
176         (p0)    xor     t2=t2,te02      };;     // 11[10]/2:    !L2 scheduling
177 { .mmi; (p0)    xor     t3=t3,te03              // 12[10]/3:
178         (p16)   cmp.eq  p0,p17=r0,r0    };;     // 12[10]/clear (p17)
179 { .mmi; (p0)    xor     t1=t1,te12              // 13[11]/1:done!
180         (p0)    xor     t2=t2,te31              // 13[11]/2:
181         (p0)    xor     t3=t3,te32      }       // 13[11]/3:
182 { .mmi; (p17)   add     te0=2048,te0            // 13[11]/
183         (p17)   add     te1=2048+64-TE1,te1};;  // 13[11]/
184 { .mib; (p0)    xor     t2=t2,te13              // 14[12]/2:done!
185         (p17)   add     te2=2048+128-TE2,te2}   // 14[12]/
186 { .mib; (p0)    xor     t3=t3,te10              // 14[12]/3:done!
187         (p17)   add     te3=2048+192-TE3,te3    // 14[12]/
188         br.ctop.sptk    .Le_top         };;
189 .Le_end:
190 \f
191
192 { .mmi; ld8     te12=[te0]              // prefetch Te4
193         ld8     te31=[te1]      }
194 { .mmi; ld8     te10=[te2]
195         ld8     te32=[te3]      }
196
197 { .mmi; LDKEY   t0=[rk0],2*KSZ          // 0/0:rk[0]
198         and     te33=s3,maskff          // 0/0:s3&0xff
199         extr.u  te22=s2,8,8     }       // 0/0:s2>>8&0xff
200 { .mmi; LDKEY   t1=[rk1],2*KSZ          // 0/1:rk[1]
201         and     te30=s0,maskff          // 0/1:s0&0xff
202         shr.u   te00=s0,twenty4 };;     // 0/0:s0>>24
203 { .mmi; LDKEY   t2=[rk0],2*KSZ          // 1/2:rk[2]
204         add     te33=te33,te0           // 1/0:te0+s0>>24
205         extr.u  te23=s3,8,8     }       // 1/1:s3>>8&0xff
206 { .mmi; LDKEY   t3=[rk1],2*KSZ          // 1/3:rk[3]
207         add     te30=te30,te0           // 1/1:te0+s0
208         shr.u   te01=s1,twenty4 };;     // 1/1:s1>>24
209 { .mmi; ld1     te33=[te33]             // 2/0:te0[s3&0xff]
210         add     te22=te22,te0           // 2/0:te0+s2>>8&0xff
211         extr.u  te20=s0,8,8     }       // 2/2:s0>>8&0xff
212 { .mmi; ld1     te30=[te30]             // 2/1:te0[s0]
213         add     te23=te23,te0           // 2/1:te0+s3>>8
214         shr.u   te02=s2,twenty4 };;     // 2/2:s2>>24
215 { .mmi; ld1     te22=[te22]             // 3/0:te0[s2>>8]
216         add     te20=te20,te0           // 3/2:te0+s0>>8
217         extr.u  te21=s1,8,8     }       // 3/3:s1>>8&0xff
218 { .mmi; ld1     te23=[te23]             // 3/1:te0[s3>>8]
219         add     te00=te00,te0           // 3/0:te0+s0>>24
220         shr.u   te03=s3,twenty4 };;     // 3/3:s3>>24
221 { .mmi; ld1     te20=[te20]             // 4/2:te0[s0>>8]
222         add     te21=te21,te0           // 4/3:te0+s2
223         extr.u  te11=s1,16,8    }       // 4/0:s1>>16&0xff
224 { .mmi; ld1     te00=[te00]             // 4/0:te0[s0>>24]
225         add     te01=te01,te0           // 4/1:te0+s1>>24
226         shr.u   te13=s3,sixteen };;     // 4/2:s3>>16
227 { .mmi; ld1     te21=[te21]             // 5/3:te0[s1>>8]
228         add     te11=te11,te0           // 5/0:te0+s1>>16
229         extr.u  te12=s2,16,8    }       // 5/1:s2>>16&0xff
230 { .mmi; ld1     te01=[te01]             // 5/1:te0[s1>>24]
231         add     te02=te02,te0           // 5/2:te0+s2>>24
232         and     te31=s1,maskff  };;     // 5/2:s1&0xff
233 { .mmi; ld1     te11=[te11]             // 6/0:te0[s1>>16]
234         add     te12=te12,te0           // 6/1:te0+s2>>16
235         extr.u  te10=s0,16,8    }       // 6/3:s0>>16&0xff
236 { .mmi; ld1     te02=[te02]             // 6/2:te0[s2>>24]
237         add     te03=te03,te0           // 6/3:te0+s0>>16
238         and     te32=s2,maskff  };;     // 6/3:s2&0xff
239
240 { .mmi; ld1     te12=[te12]             // 7/1:te0[s2>>16]
241         add     te31=te31,te0           // 7/2:te0+s1&0xff
242         dep     te33=te22,te33,8,8}     // 7/0:
243 { .mmi; ld1     te03=[te03]             // 7/3:te0[s3>>24]
244         add     te32=te32,te0           // 7/3:te0+s2
245         and     te13=te13,maskff};;     // 7/2:s3>>16&0xff
246 { .mmi; ld1     te31=[te31]             // 8/2:te0[s1]
247         add     te13=te13,te0           // 8/2:te0+s3>>16
248         dep     te30=te23,te30,8,8}     // 8/1:
249 { .mmi; ld1     te32=[te32]             // 8/3:te0[s2]
250         add     te10=te10,te0           // 8/3:te0+s0>>16
251         shl     te00=te00,twenty4};;    // 8/0:
252 { .mii; ld1     te13=[te13]             // 9/2:te0[s3>>16]
253         dep     te33=te11,te33,16,8     // 9/0:
254         shl     te01=te01,twenty4};;    // 9/1:
255 { .mii; ld1     te10=[te10]             // 10/3:te0[s0>>16]
256         dep     te31=te20,te31,8,8      // 10/2:
257         shl     te02=te02,twenty4};;    // 10/2:
258 { .mii; xor     t0=t0,te33              // 11/0:
259         dep     te32=te21,te32,8,8      // 11/3:
260         shl     te12=te12,sixteen};;    // 11/1:
261 { .mii; xor     r16=t0,te00             // 12/0:done!
262         dep     te31=te13,te31,16,8     // 12/2:
263         shl     te03=te03,twenty4};;    // 12/3:
264 { .mmi; xor     t1=t1,te01              // 13/1:
265         xor     t2=t2,te02              // 13/2:
266         dep     te32=te10,te32,16,8};;  // 13/3:
267 { .mmi; xor     t1=t1,te30              // 14/1:
268         xor     r24=t2,te31             // 14/2:done!
269         xor     t3=t3,te32      };;     // 14/3:
270 { .mib; xor     r20=t1,te12             // 15/1:done!
271         xor     r28=t3,te03             // 15/3:done!
272         br.ret.sptk     b6      };;
273 .endp   _ia64_AES_encrypt#
274
275 // void AES_encrypt (const void *in,void *out,const AES_KEY *key);
276 .global AES_encrypt#
277 .proc   AES_encrypt#
278 .align  32
279 AES_encrypt:
280         .prologue
281         .save   ar.pfs,pfssave
282 { .mmi; alloc   pfssave=ar.pfs,3,1,12,0
283         and     out0=3,in0
284         mov     r3=ip                   }
285 { .mmi; ADDP    in0=0,in0
286         mov     loc0=psr.um
287         ADDP    out11=KSZ*60,in2        };;     // &AES_KEY->rounds
288
289 { .mmi; ld4     out11=[out11]                   // AES_KEY->rounds
290         add     out8=(AES_Te#-AES_encrypt#),r3  // Te0
291         .save   pr,prsave
292         mov     prsave=pr               }
293 { .mmi; rum     1<<3                            // clear um.ac
294         .save   ar.lc,lcsave
295         mov     lcsave=ar.lc            };;
296
297         .body
298 #if defined(_HPUX_SOURCE)       // HPUX is big-endian, cut 15+15 cycles...
299 { .mib; cmp.ne  p6,p0=out0,r0
300         add     out0=4,in0
301 (p6)    br.dpnt.many    .Le_i_unaligned };;
302
303 { .mmi; ld4     out1=[in0],8            // s0
304         and     out9=3,in1
305         mov     twenty4=24              }
306 { .mmi; ld4     out3=[out0],8           // s1
307         ADDP    rk0=0,in2
308         mov     sixteen=16              };;
309 { .mmi; ld4     out5=[in0]              // s2
310         cmp.ne  p6,p0=out9,r0
311         mov     maskff=0xff             }
312 { .mmb; ld4     out7=[out0]             // s3
313         ADDP    rk1=KSZ,in2
314         br.call.sptk.many       b6=_ia64_AES_encrypt    };;
315
316 { .mib; ADDP    in0=4,in1
317         ADDP    in1=0,in1
318 (p6)    br.spnt .Le_o_unaligned         };;
319
320 { .mii; mov     psr.um=loc0
321         mov     ar.pfs=pfssave
322         mov     ar.lc=lcsave            };;
323 { .mmi; st4     [in1]=r16,8             // s0
324         st4     [in0]=r20,8             // s1
325         mov     pr=prsave,0x1ffff       };;
326 { .mmb; st4     [in1]=r24               // s2
327         st4     [in0]=r28               // s3
328         br.ret.sptk.many        b0      };;
329 #endif
330
331 .align  32
332 .Le_i_unaligned:
333 { .mmi; add     out0=1,in0
334         add     out2=2,in0
335         add     out4=3,in0      };;
336 { .mmi; ld1     r16=[in0],4
337         ld1     r17=[out0],4    }//;;
338 { .mmi; ld1     r18=[out2],4
339         ld1     out1=[out4],4   };;     // s0
340 { .mmi; ld1     r20=[in0],4
341         ld1     r21=[out0],4    }//;;
342 { .mmi; ld1     r22=[out2],4
343         ld1     out3=[out4],4   };;     // s1
344 { .mmi; ld1     r24=[in0],4
345         ld1     r25=[out0],4    }//;;
346 { .mmi; ld1     r26=[out2],4
347         ld1     out5=[out4],4   };;     // s2
348 { .mmi; ld1     r28=[in0]
349         ld1     r29=[out0]      }//;;
350 { .mmi; ld1     r30=[out2]
351         ld1     out7=[out4]     };;     // s3
352
353 { .mii;
354         dep     out1=r16,out1,24,8      //;;
355         dep     out3=r20,out3,24,8      }//;;
356 { .mii; ADDP    rk0=0,in2
357         dep     out5=r24,out5,24,8      //;;
358         dep     out7=r28,out7,24,8      };;
359 { .mii; ADDP    rk1=KSZ,in2
360         dep     out1=r17,out1,16,8      //;;
361         dep     out3=r21,out3,16,8      }//;;
362 { .mii; mov     twenty4=24
363         dep     out5=r25,out5,16,8      //;;
364         dep     out7=r29,out7,16,8      };;
365 { .mii; mov     sixteen=16
366         dep     out1=r18,out1,8,8       //;;
367         dep     out3=r22,out3,8,8       }//;;
368 { .mii; mov     maskff=0xff
369         dep     out5=r26,out5,8,8       //;;
370         dep     out7=r30,out7,8,8       };;
371
372 { .mib; br.call.sptk.many       b6=_ia64_AES_encrypt    };;
373
374 .Le_o_unaligned:
375 { .mii; ADDP    out0=0,in1
376         extr.u  r17=r16,8,8                     // s0
377         shr.u   r19=r16,twenty4         }//;;
378 { .mii; ADDP    out1=1,in1
379         extr.u  r18=r16,16,8
380         shr.u   r23=r20,twenty4         }//;;   // s1
381 { .mii; ADDP    out2=2,in1
382         extr.u  r21=r20,8,8
383         shr.u   r22=r20,sixteen         }//;;
384 { .mii; ADDP    out3=3,in1
385         extr.u  r25=r24,8,8                     // s2
386         shr.u   r27=r24,twenty4         };;
387 { .mii; st1     [out3]=r16,4
388         extr.u  r26=r24,16,8
389         shr.u   r31=r28,twenty4         }//;;   // s3
390 { .mii; st1     [out2]=r17,4
391         extr.u  r29=r28,8,8
392         shr.u   r30=r28,sixteen         }//;;
393
394 { .mmi; st1     [out1]=r18,4
395         st1     [out0]=r19,4            };;
396 { .mmi; st1     [out3]=r20,4
397         st1     [out2]=r21,4            }//;;
398 { .mmi; st1     [out1]=r22,4
399         st1     [out0]=r23,4            };;
400 { .mmi; st1     [out3]=r24,4
401         st1     [out2]=r25,4
402         mov     pr=prsave,0x1ffff       }//;;
403 { .mmi; st1     [out1]=r26,4
404         st1     [out0]=r27,4
405         mov     ar.pfs=pfssave          };;
406 { .mmi; st1     [out3]=r28
407         st1     [out2]=r29
408         mov     ar.lc=lcsave            }//;;
409 { .mmi; st1     [out1]=r30
410         st1     [out0]=r31              }
411 { .mfb; mov     psr.um=loc0                     // restore user mask
412         br.ret.sptk.many        b0      };;
413 .endp   AES_encrypt#
414
415 // *AES_decrypt are autogenerated by the following script:
416 #if 0
417 #!/usr/bin/env perl
418 print "// *AES_decrypt are autogenerated by the following script:\n#if 0\n";
419 open(PROG,'<'.$0); while(<PROG>) { print; } close(PROG);
420 print "#endif\n";
421 while(<>) {
422         $process=1      if (/\.proc\s+_ia64_AES_encrypt/);
423         next            if (!$process);
424
425         #s/te00=s0/td00=s0/;    s/te00/td00/g;
426         s/te11=s1/td13=s3/;     s/te11/td13/g;
427         #s/te22=s2/td22=s2/;    s/te22/td22/g;
428         s/te33=s3/td31=s1/;     s/te33/td31/g;
429
430         #s/te01=s1/td01=s1/;    s/te01/td01/g;
431         s/te12=s2/td10=s0/;     s/te12/td10/g;
432         #s/te23=s3/td23=s3/;    s/te23/td23/g;
433         s/te30=s0/td32=s2/;     s/te30/td32/g;
434
435         #s/te02=s2/td02=s2/;    s/te02/td02/g;
436         s/te13=s3/td11=s1/;     s/te13/td11/g;
437         #s/te20=s0/td20=s0/;    s/te20/td20/g;
438         s/te31=s1/td33=s3/;     s/te31/td33/g;
439
440         #s/te03=s3/td03=s3/;    s/te03/td03/g;
441         s/te10=s0/td12=s2/;     s/te10/td12/g;
442         #s/te21=s1/td21=s1/;    s/te21/td21/g;
443         s/te32=s2/td30=s0/;     s/te32/td30/g;
444
445         s/td/te/g;
446
447         s/AES_encrypt/AES_decrypt/g;
448         s/\.Le_/.Ld_/g;
449         s/AES_Te#/AES_Td#/g;
450
451         print;
452
453         exit            if (/\.endp\s+AES_decrypt/);
454 }
455 #endif
456 .proc   _ia64_AES_decrypt#
457 // Input:       rk0-rk1
458 //              te0
459 //              te3     as AES_KEY->rounds!!!
460 //              s0-s3
461 //              maskff,twenty4,sixteen
462 // Output:      r16,r20,r24,r28 as s0-s3
463 // Clobber:     r16-r31,rk0-rk1,r32-r43
464 .align  32
465 _ia64_AES_decrypt:
466         .prologue
467         .altrp  b6
468         .body
469 { .mmi; alloc   r16=ar.pfs,12,0,0,8
470         LDKEY   t0=[rk0],2*KSZ
471         mov     pr.rot=1<<16    }
472 { .mmi; LDKEY   t1=[rk1],2*KSZ
473         add     te1=TE1,te0
474         add     te3=-3,te3      };;
475 { .mib; LDKEY   t2=[rk0],2*KSZ
476         mov     ar.ec=2         }
477 { .mib; LDKEY   t3=[rk1],2*KSZ
478         add     te2=TE2,te0
479         brp.loop.imp    .Ld_top,.Ld_end-16      };;
480
481 { .mmi; xor     s0=s0,t0
482         xor     s1=s1,t1
483         mov     ar.lc=te3       }
484 { .mmi; xor     s2=s2,t2
485         xor     s3=s3,t3
486         add     te3=TE3,te0     };;
487 \f
488 .align  32
489 .Ld_top:
490 { .mmi; (p0)    LDKEY   t0=[rk0],2*KSZ          // 0/0:rk[0]
491         (p0)    and     te31=s1,maskff          // 0/0:s3&0xff
492         (p0)    extr.u  te22=s2,8,8     }       // 0/0:s2>>8&0xff
493 { .mmi; (p0)    LDKEY   t1=[rk1],2*KSZ          // 0/1:rk[1]
494         (p0)    and     te32=s2,maskff          // 0/1:s0&0xff
495         (p0)    shr.u   te00=s0,twenty4 };;     // 0/0:s0>>24
496 { .mmi; (p0)    LDKEY   t2=[rk0],2*KSZ          // 1/2:rk[2]
497         (p0)    shladd  te31=te31,3,te3         // 1/0:te0+s0>>24
498         (p0)    extr.u  te23=s3,8,8     }       // 1/1:s3>>8&0xff
499 { .mmi; (p0)    LDKEY   t3=[rk1],2*KSZ          // 1/3:rk[3]
500         (p0)    shladd  te32=te32,3,te3         // 1/1:te3+s0
501         (p0)    shr.u   te01=s1,twenty4 };;     // 1/1:s1>>24
502 { .mmi; (p0)    ld4     te31=[te31]             // 2/0:te3[s3&0xff]
503         (p0)    shladd  te22=te22,3,te2         // 2/0:te2+s2>>8&0xff
504         (p0)    extr.u  te20=s0,8,8     }       // 2/2:s0>>8&0xff
505 { .mmi; (p0)    ld4     te32=[te32]             // 2/1:te3[s0]
506         (p0)    shladd  te23=te23,3,te2         // 2/1:te2+s3>>8
507         (p0)    shr.u   te02=s2,twenty4 };;     // 2/2:s2>>24
508 { .mmi; (p0)    ld4     te22=[te22]             // 3/0:te2[s2>>8]
509         (p0)    shladd  te20=te20,3,te2         // 3/2:te2+s0>>8
510         (p0)    extr.u  te21=s1,8,8     }       // 3/3:s1>>8&0xff
511 { .mmi; (p0)    ld4     te23=[te23]             // 3/1:te2[s3>>8]
512         (p0)    shladd  te00=te00,3,te0         // 3/0:te0+s0>>24
513         (p0)    shr.u   te03=s3,twenty4 };;     // 3/3:s3>>24
514 { .mmi; (p0)    ld4     te20=[te20]             // 4/2:te2[s0>>8]
515         (p0)    shladd  te21=te21,3,te2         // 4/3:te3+s2
516         (p0)    extr.u  te13=s3,16,8    }       // 4/0:s1>>16&0xff
517 { .mmi; (p0)    ld4     te00=[te00]             // 4/0:te0[s0>>24]
518         (p0)    shladd  te01=te01,3,te0         // 4/1:te0+s1>>24
519         (p0)    shr.u   te11=s1,sixteen };;     // 4/2:s3>>16
520 { .mmi; (p0)    ld4     te21=[te21]             // 5/3:te2[s1>>8]
521         (p0)    shladd  te13=te13,3,te1         // 5/0:te1+s1>>16
522         (p0)    extr.u  te10=s0,16,8    }       // 5/1:s2>>16&0xff
523 { .mmi; (p0)    ld4     te01=[te01]             // 5/1:te0[s1>>24]
524         (p0)    shladd  te02=te02,3,te0         // 5/2:te0+s2>>24
525         (p0)    and     te33=s3,maskff  };;     // 5/2:s1&0xff
526 { .mmi; (p0)    ld4     te13=[te13]             // 6/0:te1[s1>>16]
527         (p0)    shladd  te10=te10,3,te1         // 6/1:te1+s2>>16
528         (p0)    extr.u  te12=s2,16,8    }       // 6/3:s0>>16&0xff
529 { .mmi; (p0)    ld4     te02=[te02]             // 6/2:te0[s2>>24]
530         (p0)    shladd  te03=te03,3,te0         // 6/3:te1+s0>>16
531         (p0)    and     te30=s0,maskff  };;     // 6/3:s2&0xff
532
533 { .mmi; (p0)    ld4     te10=[te10]             // 7/1:te1[s2>>16]
534         (p0)    shladd  te33=te33,3,te3         // 7/2:te3+s1&0xff
535         (p0)    and     te11=te11,maskff}       // 7/2:s3>>16&0xff
536 { .mmi; (p0)    ld4     te03=[te03]             // 7/3:te0[s3>>24]
537         (p0)    shladd  te30=te30,3,te3         // 7/3:te3+s2
538         (p0)    xor     t0=t0,te31      };;     // 7/0:
539 { .mmi; (p0)    ld4     te33=[te33]             // 8/2:te3[s1]
540         (p0)    shladd  te11=te11,3,te1         // 8/2:te1+s3>>16
541         (p0)    xor     t0=t0,te22      }       // 8/0:
542 { .mmi; (p0)    ld4     te30=[te30]             // 8/3:te3[s2]
543         (p0)    shladd  te12=te12,3,te1         // 8/3:te1+s0>>16
544         (p0)    xor     t1=t1,te32      };;     // 8/1:
545 { .mmi; (p0)    ld4     te11=[te11]             // 9/2:te1[s3>>16]
546         (p0)    ld4     te12=[te12]             // 9/3:te1[s0>>16]
547         (p0)    xor     t0=t0,te00      };;     // 9/0:         !L2 scheduling
548 { .mmi; (p0)    xor     t1=t1,te23              // 10[9]/1:     
549         (p0)    xor     t2=t2,te20              // 10[9]/2:
550         (p0)    xor     t3=t3,te21      };;     // 10[9]/3:
551 { .mmi; (p0)    xor     t0=t0,te13              // 11[10]/0:done!
552         (p0)    xor     t1=t1,te01              // 11[10]/1:
553         (p0)    xor     t2=t2,te02      };;     // 11[10]/2:    !L2 scheduling
554 { .mmi; (p0)    xor     t3=t3,te03              // 12[10]/3:
555         (p16)   cmp.eq  p0,p17=r0,r0    };;     // 12[10]/clear (p17)
556 { .mmi; (p0)    xor     t1=t1,te10              // 13[11]/1:done!
557         (p0)    xor     t2=t2,te33              // 13[11]/2:
558         (p0)    xor     t3=t3,te30      }       // 13[11]/3:
559 { .mmi; (p17)   add     te0=2048,te0            // 13[11]/
560         (p17)   add     te1=2048+64-TE1,te1};;  // 13[11]/
561 { .mib; (p0)    xor     t2=t2,te11              // 14[12]/2:done!
562         (p17)   add     te2=2048+128-TE2,te2}   // 14[12]/
563 { .mib; (p0)    xor     t3=t3,te12              // 14[12]/3:done!
564         (p17)   add     te3=2048+192-TE3,te3    // 14[12]/
565         br.ctop.sptk    .Ld_top         };;
566 .Ld_end:
567 \f
568
569 { .mmi; ld8     te10=[te0]              // prefetch Td4
570         ld8     te33=[te1]      }
571 { .mmi; ld8     te12=[te2]
572         ld8     te30=[te3]      }
573
574 { .mmi; LDKEY   t0=[rk0],2*KSZ          // 0/0:rk[0]
575         and     te31=s1,maskff          // 0/0:s3&0xff
576         extr.u  te22=s2,8,8     }       // 0/0:s2>>8&0xff
577 { .mmi; LDKEY   t1=[rk1],2*KSZ          // 0/1:rk[1]
578         and     te32=s2,maskff          // 0/1:s0&0xff
579         shr.u   te00=s0,twenty4 };;     // 0/0:s0>>24
580 { .mmi; LDKEY   t2=[rk0],2*KSZ          // 1/2:rk[2]
581         add     te31=te31,te0           // 1/0:te0+s0>>24
582         extr.u  te23=s3,8,8     }       // 1/1:s3>>8&0xff
583 { .mmi; LDKEY   t3=[rk1],2*KSZ          // 1/3:rk[3]
584         add     te32=te32,te0           // 1/1:te0+s0
585         shr.u   te01=s1,twenty4 };;     // 1/1:s1>>24
586 { .mmi; ld1     te31=[te31]             // 2/0:te0[s3&0xff]
587         add     te22=te22,te0           // 2/0:te0+s2>>8&0xff
588         extr.u  te20=s0,8,8     }       // 2/2:s0>>8&0xff
589 { .mmi; ld1     te32=[te32]             // 2/1:te0[s0]
590         add     te23=te23,te0           // 2/1:te0+s3>>8
591         shr.u   te02=s2,twenty4 };;     // 2/2:s2>>24
592 { .mmi; ld1     te22=[te22]             // 3/0:te0[s2>>8]
593         add     te20=te20,te0           // 3/2:te0+s0>>8
594         extr.u  te21=s1,8,8     }       // 3/3:s1>>8&0xff
595 { .mmi; ld1     te23=[te23]             // 3/1:te0[s3>>8]
596         add     te00=te00,te0           // 3/0:te0+s0>>24
597         shr.u   te03=s3,twenty4 };;     // 3/3:s3>>24
598 { .mmi; ld1     te20=[te20]             // 4/2:te0[s0>>8]
599         add     te21=te21,te0           // 4/3:te0+s2
600         extr.u  te13=s3,16,8    }       // 4/0:s1>>16&0xff
601 { .mmi; ld1     te00=[te00]             // 4/0:te0[s0>>24]
602         add     te01=te01,te0           // 4/1:te0+s1>>24
603         shr.u   te11=s1,sixteen };;     // 4/2:s3>>16
604 { .mmi; ld1     te21=[te21]             // 5/3:te0[s1>>8]
605         add     te13=te13,te0           // 5/0:te0+s1>>16
606         extr.u  te10=s0,16,8    }       // 5/1:s2>>16&0xff
607 { .mmi; ld1     te01=[te01]             // 5/1:te0[s1>>24]
608         add     te02=te02,te0           // 5/2:te0+s2>>24
609         and     te33=s3,maskff  };;     // 5/2:s1&0xff
610 { .mmi; ld1     te13=[te13]             // 6/0:te0[s1>>16]
611         add     te10=te10,te0           // 6/1:te0+s2>>16
612         extr.u  te12=s2,16,8    }       // 6/3:s0>>16&0xff
613 { .mmi; ld1     te02=[te02]             // 6/2:te0[s2>>24]
614         add     te03=te03,te0           // 6/3:te0+s0>>16
615         and     te30=s0,maskff  };;     // 6/3:s2&0xff
616
617 { .mmi; ld1     te10=[te10]             // 7/1:te0[s2>>16]
618         add     te33=te33,te0           // 7/2:te0+s1&0xff
619         dep     te31=te22,te31,8,8}     // 7/0:
620 { .mmi; ld1     te03=[te03]             // 7/3:te0[s3>>24]
621         add     te30=te30,te0           // 7/3:te0+s2
622         and     te11=te11,maskff};;     // 7/2:s3>>16&0xff
623 { .mmi; ld1     te33=[te33]             // 8/2:te0[s1]
624         add     te11=te11,te0           // 8/2:te0+s3>>16
625         dep     te32=te23,te32,8,8}     // 8/1:
626 { .mmi; ld1     te30=[te30]             // 8/3:te0[s2]
627         add     te12=te12,te0           // 8/3:te0+s0>>16
628         shl     te00=te00,twenty4};;    // 8/0:
629 { .mii; ld1     te11=[te11]             // 9/2:te0[s3>>16]
630         dep     te31=te13,te31,16,8     // 9/0:
631         shl     te01=te01,twenty4};;    // 9/1:
632 { .mii; ld1     te12=[te12]             // 10/3:te0[s0>>16]
633         dep     te33=te20,te33,8,8      // 10/2:
634         shl     te02=te02,twenty4};;    // 10/2:
635 { .mii; xor     t0=t0,te31              // 11/0:
636         dep     te30=te21,te30,8,8      // 11/3:
637         shl     te10=te10,sixteen};;    // 11/1:
638 { .mii; xor     r16=t0,te00             // 12/0:done!
639         dep     te33=te11,te33,16,8     // 12/2:
640         shl     te03=te03,twenty4};;    // 12/3:
641 { .mmi; xor     t1=t1,te01              // 13/1:
642         xor     t2=t2,te02              // 13/2:
643         dep     te30=te12,te30,16,8};;  // 13/3:
644 { .mmi; xor     t1=t1,te32              // 14/1:
645         xor     r24=t2,te33             // 14/2:done!
646         xor     t3=t3,te30      };;     // 14/3:
647 { .mib; xor     r20=t1,te10             // 15/1:done!
648         xor     r28=t3,te03             // 15/3:done!
649         br.ret.sptk     b6      };;
650 .endp   _ia64_AES_decrypt#
651
652 // void AES_decrypt (const void *in,void *out,const AES_KEY *key);
653 .global AES_decrypt#
654 .proc   AES_decrypt#
655 .align  32
656 AES_decrypt:
657         .prologue
658         .save   ar.pfs,pfssave
659 { .mmi; alloc   pfssave=ar.pfs,3,1,12,0
660         and     out0=3,in0
661         mov     r3=ip                   }
662 { .mmi; ADDP    in0=0,in0
663         mov     loc0=psr.um
664         ADDP    out11=KSZ*60,in2        };;     // &AES_KEY->rounds
665
666 { .mmi; ld4     out11=[out11]                   // AES_KEY->rounds
667         add     out8=(AES_Td#-AES_decrypt#),r3  // Te0
668         .save   pr,prsave
669         mov     prsave=pr               }
670 { .mmi; rum     1<<3                            // clear um.ac
671         .save   ar.lc,lcsave
672         mov     lcsave=ar.lc            };;
673
674         .body
675 #if defined(_HPUX_SOURCE)       // HPUX is big-endian, cut 15+15 cycles...
676 { .mib; cmp.ne  p6,p0=out0,r0
677         add     out0=4,in0
678 (p6)    br.dpnt.many    .Ld_i_unaligned };;
679
680 { .mmi; ld4     out1=[in0],8            // s0
681         and     out9=3,in1
682         mov     twenty4=24              }
683 { .mmi; ld4     out3=[out0],8           // s1
684         ADDP    rk0=0,in2
685         mov     sixteen=16              };;
686 { .mmi; ld4     out5=[in0]              // s2
687         cmp.ne  p6,p0=out9,r0
688         mov     maskff=0xff             }
689 { .mmb; ld4     out7=[out0]             // s3
690         ADDP    rk1=KSZ,in2
691         br.call.sptk.many       b6=_ia64_AES_decrypt    };;
692
693 { .mib; ADDP    in0=4,in1
694         ADDP    in1=0,in1
695 (p6)    br.spnt .Ld_o_unaligned         };;
696
697 { .mii; mov     psr.um=loc0
698         mov     ar.pfs=pfssave
699         mov     ar.lc=lcsave            };;
700 { .mmi; st4     [in1]=r16,8             // s0
701         st4     [in0]=r20,8             // s1
702         mov     pr=prsave,0x1ffff       };;
703 { .mmb; st4     [in1]=r24               // s2
704         st4     [in0]=r28               // s3
705         br.ret.sptk.many        b0      };;
706 #endif
707
708 .align  32
709 .Ld_i_unaligned:
710 { .mmi; add     out0=1,in0
711         add     out2=2,in0
712         add     out4=3,in0      };;
713 { .mmi; ld1     r16=[in0],4
714         ld1     r17=[out0],4    }//;;
715 { .mmi; ld1     r18=[out2],4
716         ld1     out1=[out4],4   };;     // s0
717 { .mmi; ld1     r20=[in0],4
718         ld1     r21=[out0],4    }//;;
719 { .mmi; ld1     r22=[out2],4
720         ld1     out3=[out4],4   };;     // s1
721 { .mmi; ld1     r24=[in0],4
722         ld1     r25=[out0],4    }//;;
723 { .mmi; ld1     r26=[out2],4
724         ld1     out5=[out4],4   };;     // s2
725 { .mmi; ld1     r28=[in0]
726         ld1     r29=[out0]      }//;;
727 { .mmi; ld1     r30=[out2]
728         ld1     out7=[out4]     };;     // s3
729
730 { .mii;
731         dep     out1=r16,out1,24,8      //;;
732         dep     out3=r20,out3,24,8      }//;;
733 { .mii; ADDP    rk0=0,in2
734         dep     out5=r24,out5,24,8      //;;
735         dep     out7=r28,out7,24,8      };;
736 { .mii; ADDP    rk1=KSZ,in2
737         dep     out1=r17,out1,16,8      //;;
738         dep     out3=r21,out3,16,8      }//;;
739 { .mii; mov     twenty4=24
740         dep     out5=r25,out5,16,8      //;;
741         dep     out7=r29,out7,16,8      };;
742 { .mii; mov     sixteen=16
743         dep     out1=r18,out1,8,8       //;;
744         dep     out3=r22,out3,8,8       }//;;
745 { .mii; mov     maskff=0xff
746         dep     out5=r26,out5,8,8       //;;
747         dep     out7=r30,out7,8,8       };;
748
749 { .mib; br.call.sptk.many       b6=_ia64_AES_decrypt    };;
750
751 .Ld_o_unaligned:
752 { .mii; ADDP    out0=0,in1
753         extr.u  r17=r16,8,8                     // s0
754         shr.u   r19=r16,twenty4         }//;;
755 { .mii; ADDP    out1=1,in1
756         extr.u  r18=r16,16,8
757         shr.u   r23=r20,twenty4         }//;;   // s1
758 { .mii; ADDP    out2=2,in1
759         extr.u  r21=r20,8,8
760         shr.u   r22=r20,sixteen         }//;;
761 { .mii; ADDP    out3=3,in1
762         extr.u  r25=r24,8,8                     // s2
763         shr.u   r27=r24,twenty4         };;
764 { .mii; st1     [out3]=r16,4
765         extr.u  r26=r24,16,8
766         shr.u   r31=r28,twenty4         }//;;   // s3
767 { .mii; st1     [out2]=r17,4
768         extr.u  r29=r28,8,8
769         shr.u   r30=r28,sixteen         }//;;
770
771 { .mmi; st1     [out1]=r18,4
772         st1     [out0]=r19,4            };;
773 { .mmi; st1     [out3]=r20,4
774         st1     [out2]=r21,4            }//;;
775 { .mmi; st1     [out1]=r22,4
776         st1     [out0]=r23,4            };;
777 { .mmi; st1     [out3]=r24,4
778         st1     [out2]=r25,4
779         mov     pr=prsave,0x1ffff       }//;;
780 { .mmi; st1     [out1]=r26,4
781         st1     [out0]=r27,4
782         mov     ar.pfs=pfssave          };;
783 { .mmi; st1     [out3]=r28
784         st1     [out2]=r29
785         mov     ar.lc=lcsave            }//;;
786 { .mmi; st1     [out1]=r30
787         st1     [out0]=r31              }
788 { .mfb; mov     psr.um=loc0                     // restore user mask
789         br.ret.sptk.many        b0      };;
790 .endp   AES_decrypt#
791
792 // leave it in .text segment...
793 .align  64
794 .global AES_Te#
795 .type   AES_Te#,@object
796 AES_Te: data4   0xc66363a5,0xc66363a5, 0xf87c7c84,0xf87c7c84
797         data4   0xee777799,0xee777799, 0xf67b7b8d,0xf67b7b8d
798         data4   0xfff2f20d,0xfff2f20d, 0xd66b6bbd,0xd66b6bbd
799         data4   0xde6f6fb1,0xde6f6fb1, 0x91c5c554,0x91c5c554
800         data4   0x60303050,0x60303050, 0x02010103,0x02010103
801         data4   0xce6767a9,0xce6767a9, 0x562b2b7d,0x562b2b7d
802         data4   0xe7fefe19,0xe7fefe19, 0xb5d7d762,0xb5d7d762
803         data4   0x4dababe6,0x4dababe6, 0xec76769a,0xec76769a
804         data4   0x8fcaca45,0x8fcaca45, 0x1f82829d,0x1f82829d
805         data4   0x89c9c940,0x89c9c940, 0xfa7d7d87,0xfa7d7d87
806         data4   0xeffafa15,0xeffafa15, 0xb25959eb,0xb25959eb
807         data4   0x8e4747c9,0x8e4747c9, 0xfbf0f00b,0xfbf0f00b
808         data4   0x41adadec,0x41adadec, 0xb3d4d467,0xb3d4d467
809         data4   0x5fa2a2fd,0x5fa2a2fd, 0x45afafea,0x45afafea
810         data4   0x239c9cbf,0x239c9cbf, 0x53a4a4f7,0x53a4a4f7
811         data4   0xe4727296,0xe4727296, 0x9bc0c05b,0x9bc0c05b
812         data4   0x75b7b7c2,0x75b7b7c2, 0xe1fdfd1c,0xe1fdfd1c
813         data4   0x3d9393ae,0x3d9393ae, 0x4c26266a,0x4c26266a
814         data4   0x6c36365a,0x6c36365a, 0x7e3f3f41,0x7e3f3f41
815         data4   0xf5f7f702,0xf5f7f702, 0x83cccc4f,0x83cccc4f
816         data4   0x6834345c,0x6834345c, 0x51a5a5f4,0x51a5a5f4
817         data4   0xd1e5e534,0xd1e5e534, 0xf9f1f108,0xf9f1f108
818         data4   0xe2717193,0xe2717193, 0xabd8d873,0xabd8d873
819         data4   0x62313153,0x62313153, 0x2a15153f,0x2a15153f
820         data4   0x0804040c,0x0804040c, 0x95c7c752,0x95c7c752
821         data4   0x46232365,0x46232365, 0x9dc3c35e,0x9dc3c35e
822         data4   0x30181828,0x30181828, 0x379696a1,0x379696a1
823         data4   0x0a05050f,0x0a05050f, 0x2f9a9ab5,0x2f9a9ab5
824         data4   0x0e070709,0x0e070709, 0x24121236,0x24121236
825         data4   0x1b80809b,0x1b80809b, 0xdfe2e23d,0xdfe2e23d
826         data4   0xcdebeb26,0xcdebeb26, 0x4e272769,0x4e272769
827         data4   0x7fb2b2cd,0x7fb2b2cd, 0xea75759f,0xea75759f
828         data4   0x1209091b,0x1209091b, 0x1d83839e,0x1d83839e
829         data4   0x582c2c74,0x582c2c74, 0x341a1a2e,0x341a1a2e
830         data4   0x361b1b2d,0x361b1b2d, 0xdc6e6eb2,0xdc6e6eb2
831         data4   0xb45a5aee,0xb45a5aee, 0x5ba0a0fb,0x5ba0a0fb
832         data4   0xa45252f6,0xa45252f6, 0x763b3b4d,0x763b3b4d
833         data4   0xb7d6d661,0xb7d6d661, 0x7db3b3ce,0x7db3b3ce
834         data4   0x5229297b,0x5229297b, 0xdde3e33e,0xdde3e33e
835         data4   0x5e2f2f71,0x5e2f2f71, 0x13848497,0x13848497
836         data4   0xa65353f5,0xa65353f5, 0xb9d1d168,0xb9d1d168
837         data4   0x00000000,0x00000000, 0xc1eded2c,0xc1eded2c
838         data4   0x40202060,0x40202060, 0xe3fcfc1f,0xe3fcfc1f
839         data4   0x79b1b1c8,0x79b1b1c8, 0xb65b5bed,0xb65b5bed
840         data4   0xd46a6abe,0xd46a6abe, 0x8dcbcb46,0x8dcbcb46
841         data4   0x67bebed9,0x67bebed9, 0x7239394b,0x7239394b
842         data4   0x944a4ade,0x944a4ade, 0x984c4cd4,0x984c4cd4
843         data4   0xb05858e8,0xb05858e8, 0x85cfcf4a,0x85cfcf4a
844         data4   0xbbd0d06b,0xbbd0d06b, 0xc5efef2a,0xc5efef2a
845         data4   0x4faaaae5,0x4faaaae5, 0xedfbfb16,0xedfbfb16
846         data4   0x864343c5,0x864343c5, 0x9a4d4dd7,0x9a4d4dd7
847         data4   0x66333355,0x66333355, 0x11858594,0x11858594
848         data4   0x8a4545cf,0x8a4545cf, 0xe9f9f910,0xe9f9f910
849         data4   0x04020206,0x04020206, 0xfe7f7f81,0xfe7f7f81
850         data4   0xa05050f0,0xa05050f0, 0x783c3c44,0x783c3c44
851         data4   0x259f9fba,0x259f9fba, 0x4ba8a8e3,0x4ba8a8e3
852         data4   0xa25151f3,0xa25151f3, 0x5da3a3fe,0x5da3a3fe
853         data4   0x804040c0,0x804040c0, 0x058f8f8a,0x058f8f8a
854         data4   0x3f9292ad,0x3f9292ad, 0x219d9dbc,0x219d9dbc
855         data4   0x70383848,0x70383848, 0xf1f5f504,0xf1f5f504
856         data4   0x63bcbcdf,0x63bcbcdf, 0x77b6b6c1,0x77b6b6c1
857         data4   0xafdada75,0xafdada75, 0x42212163,0x42212163
858         data4   0x20101030,0x20101030, 0xe5ffff1a,0xe5ffff1a
859         data4   0xfdf3f30e,0xfdf3f30e, 0xbfd2d26d,0xbfd2d26d
860         data4   0x81cdcd4c,0x81cdcd4c, 0x180c0c14,0x180c0c14
861         data4   0x26131335,0x26131335, 0xc3ecec2f,0xc3ecec2f
862         data4   0xbe5f5fe1,0xbe5f5fe1, 0x359797a2,0x359797a2
863         data4   0x884444cc,0x884444cc, 0x2e171739,0x2e171739
864         data4   0x93c4c457,0x93c4c457, 0x55a7a7f2,0x55a7a7f2
865         data4   0xfc7e7e82,0xfc7e7e82, 0x7a3d3d47,0x7a3d3d47
866         data4   0xc86464ac,0xc86464ac, 0xba5d5de7,0xba5d5de7
867         data4   0x3219192b,0x3219192b, 0xe6737395,0xe6737395
868         data4   0xc06060a0,0xc06060a0, 0x19818198,0x19818198
869         data4   0x9e4f4fd1,0x9e4f4fd1, 0xa3dcdc7f,0xa3dcdc7f
870         data4   0x44222266,0x44222266, 0x542a2a7e,0x542a2a7e
871         data4   0x3b9090ab,0x3b9090ab, 0x0b888883,0x0b888883
872         data4   0x8c4646ca,0x8c4646ca, 0xc7eeee29,0xc7eeee29
873         data4   0x6bb8b8d3,0x6bb8b8d3, 0x2814143c,0x2814143c
874         data4   0xa7dede79,0xa7dede79, 0xbc5e5ee2,0xbc5e5ee2
875         data4   0x160b0b1d,0x160b0b1d, 0xaddbdb76,0xaddbdb76
876         data4   0xdbe0e03b,0xdbe0e03b, 0x64323256,0x64323256
877         data4   0x743a3a4e,0x743a3a4e, 0x140a0a1e,0x140a0a1e
878         data4   0x924949db,0x924949db, 0x0c06060a,0x0c06060a
879         data4   0x4824246c,0x4824246c, 0xb85c5ce4,0xb85c5ce4
880         data4   0x9fc2c25d,0x9fc2c25d, 0xbdd3d36e,0xbdd3d36e
881         data4   0x43acacef,0x43acacef, 0xc46262a6,0xc46262a6
882         data4   0x399191a8,0x399191a8, 0x319595a4,0x319595a4
883         data4   0xd3e4e437,0xd3e4e437, 0xf279798b,0xf279798b
884         data4   0xd5e7e732,0xd5e7e732, 0x8bc8c843,0x8bc8c843
885         data4   0x6e373759,0x6e373759, 0xda6d6db7,0xda6d6db7
886         data4   0x018d8d8c,0x018d8d8c, 0xb1d5d564,0xb1d5d564
887         data4   0x9c4e4ed2,0x9c4e4ed2, 0x49a9a9e0,0x49a9a9e0
888         data4   0xd86c6cb4,0xd86c6cb4, 0xac5656fa,0xac5656fa
889         data4   0xf3f4f407,0xf3f4f407, 0xcfeaea25,0xcfeaea25
890         data4   0xca6565af,0xca6565af, 0xf47a7a8e,0xf47a7a8e
891         data4   0x47aeaee9,0x47aeaee9, 0x10080818,0x10080818
892         data4   0x6fbabad5,0x6fbabad5, 0xf0787888,0xf0787888
893         data4   0x4a25256f,0x4a25256f, 0x5c2e2e72,0x5c2e2e72
894         data4   0x381c1c24,0x381c1c24, 0x57a6a6f1,0x57a6a6f1
895         data4   0x73b4b4c7,0x73b4b4c7, 0x97c6c651,0x97c6c651
896         data4   0xcbe8e823,0xcbe8e823, 0xa1dddd7c,0xa1dddd7c
897         data4   0xe874749c,0xe874749c, 0x3e1f1f21,0x3e1f1f21
898         data4   0x964b4bdd,0x964b4bdd, 0x61bdbddc,0x61bdbddc
899         data4   0x0d8b8b86,0x0d8b8b86, 0x0f8a8a85,0x0f8a8a85
900         data4   0xe0707090,0xe0707090, 0x7c3e3e42,0x7c3e3e42
901         data4   0x71b5b5c4,0x71b5b5c4, 0xcc6666aa,0xcc6666aa
902         data4   0x904848d8,0x904848d8, 0x06030305,0x06030305
903         data4   0xf7f6f601,0xf7f6f601, 0x1c0e0e12,0x1c0e0e12
904         data4   0xc26161a3,0xc26161a3, 0x6a35355f,0x6a35355f
905         data4   0xae5757f9,0xae5757f9, 0x69b9b9d0,0x69b9b9d0
906         data4   0x17868691,0x17868691, 0x99c1c158,0x99c1c158
907         data4   0x3a1d1d27,0x3a1d1d27, 0x279e9eb9,0x279e9eb9
908         data4   0xd9e1e138,0xd9e1e138, 0xebf8f813,0xebf8f813
909         data4   0x2b9898b3,0x2b9898b3, 0x22111133,0x22111133
910         data4   0xd26969bb,0xd26969bb, 0xa9d9d970,0xa9d9d970
911         data4   0x078e8e89,0x078e8e89, 0x339494a7,0x339494a7
912         data4   0x2d9b9bb6,0x2d9b9bb6, 0x3c1e1e22,0x3c1e1e22
913         data4   0x15878792,0x15878792, 0xc9e9e920,0xc9e9e920
914         data4   0x87cece49,0x87cece49, 0xaa5555ff,0xaa5555ff
915         data4   0x50282878,0x50282878, 0xa5dfdf7a,0xa5dfdf7a
916         data4   0x038c8c8f,0x038c8c8f, 0x59a1a1f8,0x59a1a1f8
917         data4   0x09898980,0x09898980, 0x1a0d0d17,0x1a0d0d17
918         data4   0x65bfbfda,0x65bfbfda, 0xd7e6e631,0xd7e6e631
919         data4   0x844242c6,0x844242c6, 0xd06868b8,0xd06868b8
920         data4   0x824141c3,0x824141c3, 0x299999b0,0x299999b0
921         data4   0x5a2d2d77,0x5a2d2d77, 0x1e0f0f11,0x1e0f0f11
922         data4   0x7bb0b0cb,0x7bb0b0cb, 0xa85454fc,0xa85454fc
923         data4   0x6dbbbbd6,0x6dbbbbd6, 0x2c16163a,0x2c16163a
924 // Te4:
925         data1   0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5
926         data1   0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76
927         data1   0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0
928         data1   0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0
929         data1   0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc
930         data1   0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15
931         data1   0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a
932         data1   0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75
933         data1   0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0
934         data1   0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84
935         data1   0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b
936         data1   0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf
937         data1   0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85
938         data1   0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8
939         data1   0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5
940         data1   0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2
941         data1   0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17
942         data1   0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73
943         data1   0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88
944         data1   0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb
945         data1   0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c
946         data1   0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79
947         data1   0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9
948         data1   0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08
949         data1   0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6
950         data1   0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a
951         data1   0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e
952         data1   0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e
953         data1   0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94
954         data1   0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf
955         data1   0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68
956         data1   0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
957 .size   AES_Te#,2048+256        // HP-UX assembler fails to ".-AES_Te#"
958
959 .align  64
960 .global AES_Td#
961 .type   AES_Td#,@object
962 AES_Td: data4   0x51f4a750,0x51f4a750, 0x7e416553,0x7e416553
963         data4   0x1a17a4c3,0x1a17a4c3, 0x3a275e96,0x3a275e96
964         data4   0x3bab6bcb,0x3bab6bcb, 0x1f9d45f1,0x1f9d45f1
965         data4   0xacfa58ab,0xacfa58ab, 0x4be30393,0x4be30393
966         data4   0x2030fa55,0x2030fa55, 0xad766df6,0xad766df6
967         data4   0x88cc7691,0x88cc7691, 0xf5024c25,0xf5024c25
968         data4   0x4fe5d7fc,0x4fe5d7fc, 0xc52acbd7,0xc52acbd7
969         data4   0x26354480,0x26354480, 0xb562a38f,0xb562a38f
970         data4   0xdeb15a49,0xdeb15a49, 0x25ba1b67,0x25ba1b67
971         data4   0x45ea0e98,0x45ea0e98, 0x5dfec0e1,0x5dfec0e1
972         data4   0xc32f7502,0xc32f7502, 0x814cf012,0x814cf012
973         data4   0x8d4697a3,0x8d4697a3, 0x6bd3f9c6,0x6bd3f9c6
974         data4   0x038f5fe7,0x038f5fe7, 0x15929c95,0x15929c95
975         data4   0xbf6d7aeb,0xbf6d7aeb, 0x955259da,0x955259da
976         data4   0xd4be832d,0xd4be832d, 0x587421d3,0x587421d3
977         data4   0x49e06929,0x49e06929, 0x8ec9c844,0x8ec9c844
978         data4   0x75c2896a,0x75c2896a, 0xf48e7978,0xf48e7978
979         data4   0x99583e6b,0x99583e6b, 0x27b971dd,0x27b971dd
980         data4   0xbee14fb6,0xbee14fb6, 0xf088ad17,0xf088ad17
981         data4   0xc920ac66,0xc920ac66, 0x7dce3ab4,0x7dce3ab4
982         data4   0x63df4a18,0x63df4a18, 0xe51a3182,0xe51a3182
983         data4   0x97513360,0x97513360, 0x62537f45,0x62537f45
984         data4   0xb16477e0,0xb16477e0, 0xbb6bae84,0xbb6bae84
985         data4   0xfe81a01c,0xfe81a01c, 0xf9082b94,0xf9082b94
986         data4   0x70486858,0x70486858, 0x8f45fd19,0x8f45fd19
987         data4   0x94de6c87,0x94de6c87, 0x527bf8b7,0x527bf8b7
988         data4   0xab73d323,0xab73d323, 0x724b02e2,0x724b02e2
989         data4   0xe31f8f57,0xe31f8f57, 0x6655ab2a,0x6655ab2a
990         data4   0xb2eb2807,0xb2eb2807, 0x2fb5c203,0x2fb5c203
991         data4   0x86c57b9a,0x86c57b9a, 0xd33708a5,0xd33708a5
992         data4   0x302887f2,0x302887f2, 0x23bfa5b2,0x23bfa5b2
993         data4   0x02036aba,0x02036aba, 0xed16825c,0xed16825c
994         data4   0x8acf1c2b,0x8acf1c2b, 0xa779b492,0xa779b492
995         data4   0xf307f2f0,0xf307f2f0, 0x4e69e2a1,0x4e69e2a1
996         data4   0x65daf4cd,0x65daf4cd, 0x0605bed5,0x0605bed5
997         data4   0xd134621f,0xd134621f, 0xc4a6fe8a,0xc4a6fe8a
998         data4   0x342e539d,0x342e539d, 0xa2f355a0,0xa2f355a0
999         data4   0x058ae132,0x058ae132, 0xa4f6eb75,0xa4f6eb75
1000         data4   0x0b83ec39,0x0b83ec39, 0x4060efaa,0x4060efaa
1001         data4   0x5e719f06,0x5e719f06, 0xbd6e1051,0xbd6e1051
1002         data4   0x3e218af9,0x3e218af9, 0x96dd063d,0x96dd063d
1003         data4   0xdd3e05ae,0xdd3e05ae, 0x4de6bd46,0x4de6bd46
1004         data4   0x91548db5,0x91548db5, 0x71c45d05,0x71c45d05
1005         data4   0x0406d46f,0x0406d46f, 0x605015ff,0x605015ff
1006         data4   0x1998fb24,0x1998fb24, 0xd6bde997,0xd6bde997
1007         data4   0x894043cc,0x894043cc, 0x67d99e77,0x67d99e77
1008         data4   0xb0e842bd,0xb0e842bd, 0x07898b88,0x07898b88
1009         data4   0xe7195b38,0xe7195b38, 0x79c8eedb,0x79c8eedb
1010         data4   0xa17c0a47,0xa17c0a47, 0x7c420fe9,0x7c420fe9
1011         data4   0xf8841ec9,0xf8841ec9, 0x00000000,0x00000000
1012         data4   0x09808683,0x09808683, 0x322bed48,0x322bed48
1013         data4   0x1e1170ac,0x1e1170ac, 0x6c5a724e,0x6c5a724e
1014         data4   0xfd0efffb,0xfd0efffb, 0x0f853856,0x0f853856
1015         data4   0x3daed51e,0x3daed51e, 0x362d3927,0x362d3927
1016         data4   0x0a0fd964,0x0a0fd964, 0x685ca621,0x685ca621
1017         data4   0x9b5b54d1,0x9b5b54d1, 0x24362e3a,0x24362e3a
1018         data4   0x0c0a67b1,0x0c0a67b1, 0x9357e70f,0x9357e70f
1019         data4   0xb4ee96d2,0xb4ee96d2, 0x1b9b919e,0x1b9b919e
1020         data4   0x80c0c54f,0x80c0c54f, 0x61dc20a2,0x61dc20a2
1021         data4   0x5a774b69,0x5a774b69, 0x1c121a16,0x1c121a16
1022         data4   0xe293ba0a,0xe293ba0a, 0xc0a02ae5,0xc0a02ae5
1023         data4   0x3c22e043,0x3c22e043, 0x121b171d,0x121b171d
1024         data4   0x0e090d0b,0x0e090d0b, 0xf28bc7ad,0xf28bc7ad
1025         data4   0x2db6a8b9,0x2db6a8b9, 0x141ea9c8,0x141ea9c8
1026         data4   0x57f11985,0x57f11985, 0xaf75074c,0xaf75074c
1027         data4   0xee99ddbb,0xee99ddbb, 0xa37f60fd,0xa37f60fd
1028         data4   0xf701269f,0xf701269f, 0x5c72f5bc,0x5c72f5bc
1029         data4   0x44663bc5,0x44663bc5, 0x5bfb7e34,0x5bfb7e34
1030         data4   0x8b432976,0x8b432976, 0xcb23c6dc,0xcb23c6dc
1031         data4   0xb6edfc68,0xb6edfc68, 0xb8e4f163,0xb8e4f163
1032         data4   0xd731dcca,0xd731dcca, 0x42638510,0x42638510
1033         data4   0x13972240,0x13972240, 0x84c61120,0x84c61120
1034         data4   0x854a247d,0x854a247d, 0xd2bb3df8,0xd2bb3df8
1035         data4   0xaef93211,0xaef93211, 0xc729a16d,0xc729a16d
1036         data4   0x1d9e2f4b,0x1d9e2f4b, 0xdcb230f3,0xdcb230f3
1037         data4   0x0d8652ec,0x0d8652ec, 0x77c1e3d0,0x77c1e3d0
1038         data4   0x2bb3166c,0x2bb3166c, 0xa970b999,0xa970b999
1039         data4   0x119448fa,0x119448fa, 0x47e96422,0x47e96422
1040         data4   0xa8fc8cc4,0xa8fc8cc4, 0xa0f03f1a,0xa0f03f1a
1041         data4   0x567d2cd8,0x567d2cd8, 0x223390ef,0x223390ef
1042         data4   0x87494ec7,0x87494ec7, 0xd938d1c1,0xd938d1c1
1043         data4   0x8ccaa2fe,0x8ccaa2fe, 0x98d40b36,0x98d40b36
1044         data4   0xa6f581cf,0xa6f581cf, 0xa57ade28,0xa57ade28
1045         data4   0xdab78e26,0xdab78e26, 0x3fadbfa4,0x3fadbfa4
1046         data4   0x2c3a9de4,0x2c3a9de4, 0x5078920d,0x5078920d
1047         data4   0x6a5fcc9b,0x6a5fcc9b, 0x547e4662,0x547e4662
1048         data4   0xf68d13c2,0xf68d13c2, 0x90d8b8e8,0x90d8b8e8
1049         data4   0x2e39f75e,0x2e39f75e, 0x82c3aff5,0x82c3aff5
1050         data4   0x9f5d80be,0x9f5d80be, 0x69d0937c,0x69d0937c
1051         data4   0x6fd52da9,0x6fd52da9, 0xcf2512b3,0xcf2512b3
1052         data4   0xc8ac993b,0xc8ac993b, 0x10187da7,0x10187da7
1053         data4   0xe89c636e,0xe89c636e, 0xdb3bbb7b,0xdb3bbb7b
1054         data4   0xcd267809,0xcd267809, 0x6e5918f4,0x6e5918f4
1055         data4   0xec9ab701,0xec9ab701, 0x834f9aa8,0x834f9aa8
1056         data4   0xe6956e65,0xe6956e65, 0xaaffe67e,0xaaffe67e
1057         data4   0x21bccf08,0x21bccf08, 0xef15e8e6,0xef15e8e6
1058         data4   0xbae79bd9,0xbae79bd9, 0x4a6f36ce,0x4a6f36ce
1059         data4   0xea9f09d4,0xea9f09d4, 0x29b07cd6,0x29b07cd6
1060         data4   0x31a4b2af,0x31a4b2af, 0x2a3f2331,0x2a3f2331
1061         data4   0xc6a59430,0xc6a59430, 0x35a266c0,0x35a266c0
1062         data4   0x744ebc37,0x744ebc37, 0xfc82caa6,0xfc82caa6
1063         data4   0xe090d0b0,0xe090d0b0, 0x33a7d815,0x33a7d815
1064         data4   0xf104984a,0xf104984a, 0x41ecdaf7,0x41ecdaf7
1065         data4   0x7fcd500e,0x7fcd500e, 0x1791f62f,0x1791f62f
1066         data4   0x764dd68d,0x764dd68d, 0x43efb04d,0x43efb04d
1067         data4   0xccaa4d54,0xccaa4d54, 0xe49604df,0xe49604df
1068         data4   0x9ed1b5e3,0x9ed1b5e3, 0x4c6a881b,0x4c6a881b
1069         data4   0xc12c1fb8,0xc12c1fb8, 0x4665517f,0x4665517f
1070         data4   0x9d5eea04,0x9d5eea04, 0x018c355d,0x018c355d
1071         data4   0xfa877473,0xfa877473, 0xfb0b412e,0xfb0b412e
1072         data4   0xb3671d5a,0xb3671d5a, 0x92dbd252,0x92dbd252
1073         data4   0xe9105633,0xe9105633, 0x6dd64713,0x6dd64713
1074         data4   0x9ad7618c,0x9ad7618c, 0x37a10c7a,0x37a10c7a
1075         data4   0x59f8148e,0x59f8148e, 0xeb133c89,0xeb133c89
1076         data4   0xcea927ee,0xcea927ee, 0xb761c935,0xb761c935
1077         data4   0xe11ce5ed,0xe11ce5ed, 0x7a47b13c,0x7a47b13c
1078         data4   0x9cd2df59,0x9cd2df59, 0x55f2733f,0x55f2733f
1079         data4   0x1814ce79,0x1814ce79, 0x73c737bf,0x73c737bf
1080         data4   0x53f7cdea,0x53f7cdea, 0x5ffdaa5b,0x5ffdaa5b
1081         data4   0xdf3d6f14,0xdf3d6f14, 0x7844db86,0x7844db86
1082         data4   0xcaaff381,0xcaaff381, 0xb968c43e,0xb968c43e
1083         data4   0x3824342c,0x3824342c, 0xc2a3405f,0xc2a3405f
1084         data4   0x161dc372,0x161dc372, 0xbce2250c,0xbce2250c
1085         data4   0x283c498b,0x283c498b, 0xff0d9541,0xff0d9541
1086         data4   0x39a80171,0x39a80171, 0x080cb3de,0x080cb3de
1087         data4   0xd8b4e49c,0xd8b4e49c, 0x6456c190,0x6456c190
1088         data4   0x7bcb8461,0x7bcb8461, 0xd532b670,0xd532b670
1089         data4   0x486c5c74,0x486c5c74, 0xd0b85742,0xd0b85742
1090 // Td4:
1091         data1   0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38
1092         data1   0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb
1093         data1   0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87
1094         data1   0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb
1095         data1   0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d
1096         data1   0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e
1097         data1   0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2
1098         data1   0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25
1099         data1   0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16
1100         data1   0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92
1101         data1   0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda
1102         data1   0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84
1103         data1   0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a
1104         data1   0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06
1105         data1   0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02
1106         data1   0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b
1107         data1   0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea
1108         data1   0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73
1109         data1   0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85
1110         data1   0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e
1111         data1   0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89
1112         data1   0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b
1113         data1   0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20
1114         data1   0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4
1115         data1   0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31
1116         data1   0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f
1117         data1   0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d
1118         data1   0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef
1119         data1   0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0
1120         data1   0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61
1121         data1   0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26
1122         data1   0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d
1123 .size   AES_Td#,2048+256        // HP-UX assembler fails to ".-AES_Td#"