high x[i+1]*y ADDC R17, R14 ADDZE R15 ADDC R9, R14 ADDZE R15, R9 MULLD R5, R18, R16 // low x[i+2]*y MULHDU R5, R18, R17 // high x[i+2]*y ADDC R19, R16 ADDZE R17 ADDC R9, R16 ADDZE R17, R9 MULLD R5, R20, R18 // low x[i+3]*y MULHDU R5, R20, R19 // high x[i+3]*y ADDC R21, R18 ADDZE R19 ADDC R9, R18 ADDZE R19, R9 MOVD R10, 0(R3) // z[i] MOVD R14, 8(R3) // z[i+1] MOVD R16, 16(R3) // z[i+2] MOVD R18, 24(R3) // z[i+3] ADD $32, R3 ADD $32, R4 BDNZ loop done: MOVD R9, c+24(FP) RET golang.org/fips140@v1.0.0/...

	ANDB (R11), R11                         // 45221b
	ANDNL (BX), R9, DX                      // c4e230f213
	ANDNL (R11), R9, DX                     // c4c230f213
	ANDNL DX, R9, DX                        // c4e230f2d2
	ANDNL R11, R9, DX                       // c4c230f2d3
	ANDNL (BX), R9, R11                     // c46230f21b
	ANDNL (R11), R9, R11                    // c44230f21b
	ANDNL DX, R9, R11                       // c46230f2da