symm/gcm-*.S (mul256): Label the partial-product terms correctly.

[catacomb] / symm / gcm-arm64-pmull.S

diff --git a/symm/gcm-arm64-pmull.S b/symm/gcm-arm64-pmull.S
index 97bb3bf..dcd8c45 100644 (file)
--- a/symm/gcm-arm64-pmull.S
+++ b/symm/gcm-arm64-pmull.S
@@ -338,7 +338,7 @@
        //
        //      q = r s = (u_0 + u_1) (v_0 + v_1)
        //        = (u_0 v_0) + (u1 v_1) + (u_0 v_1 + u_1 v_0)
-       //        = a + d + c
+       //        = a + c + b
        //
        // The first two terms we've already calculated; the last is the
        // remaining one we want.  We'll set B = t^128.  We know how to do