X6 AND $7, X12, X7 BNE X5, X6, loop4_check BNE X5, X7, loop4_check BEQZ X5, loop64_check // Check one byte at a time until we reach 8 byte alignment. MOV $8, X8 SUB X5, X8 SUB X8, X13 align: MOVBU 0(X11), X16 MOVBU 0(X12), X17 XOR X16, X17 MOVB X17, 0(X10) ADD $1, X10 ADD $1, X11 ADD $1, X12 SUB $1, X8 BNEZ X8, align loop64_check: MOV $64, X15 BLT X13, X15, tail32_check PCALIGN $16 loop64: MOV 0(X11), X16 MOV 0(X12), X17 MOV 8(X11), X18 MOV 8(X12), X19 XOR X16, X17 XOR X18, X19 MOV X17, 0(X10) MOV...

// paddedGHASH pads data with zeroes until its length is a multiple of // 16-bytes. It then calculates a new value for hash using the GHASH algorithm. func paddedGHASH(hashKey *gcmHashKey, hash *[16]byte, data []byte) { siz := len(data) &^ 0xf // align size to 16-bytes if siz > 0 { ghashAsm(hashKey, hash, data[:siz]) data = data[siz:] } if len(data) > 0 { var s [16]byte copy(s[:], data) ghashAsm(hashKey, hash, s[:]) } } // cryptBlocksGCM encrypts src using AES in counter mode using the given // function...