vshr128 v23, v20, 64 // (0; d_1)
eor v16.16b, v16.16b, v21.16b // (x_1; x_0)
eor v17.16b, v17.16b, v22.16b // (x_3; x_2)
- eor v18.16b, v18.16b, v23.16b // (x_3; x_2)
+ eor v18.16b, v18.16b, v23.16b // (x_5; x_4)
// Next, the reduction. Our polynomial this time is p(x) = t^192 +
// t^7 + t^2 + t + 1. Yes, the magic numbers are the same as the