high x[i+1]*y ADDC R17, R14 ADDZE R15 ADDC R9, R14 ADDZE R15, R9 MULLD R5, R18, R16 // low x[i+2]*y MULHDU R5, R18, R17 // high x[i+2]*y ADDC R19, R16 ADDZE R17 ADDC R9, R16 ADDZE R17, R9 MULLD R5, R20, R18 // low x[i+3]*y MULHDU R5, R20, R19 // high x[i+3]*y ADDC R21, R18 ADDZE R19 ADDC R9, R18 ADDZE R19, R9 MOVD R10, 0(R3) // z[i] MOVD R14, 8(R3) // z[i+1] MOVD R16, 16(R3) // z[i+2] MOVD R18, 24(R3) // z[i+3] ADD $32, R3 ADD $32, R4 BDNZ loop done: MOVD R9, c+24(FP) RET golang.org/fips140@v1.1.0-...