counterCryptASM(int(g.cipher.l)/4-1, out, in, counter, &g.cipher.enc[0])

}

// increments the rightmost 32-bits of the count value by 1.
func gcmInc32(counterBlock *[16]byte) {
	c := counterBlock[len(counterBlock)-4:]
	x := byteorder.BeUint32(c) + 1
	byteorder.BePutUint32(c, x)
}

// paddedGHASH pads data with zeroes until its length is a multiple of