X-Git-Url: https://git.distorted.org.uk/~mdw/catacomb/blobdiff_plain/981a9e5d5e3af6c06ad8b3f821928852068227e4..HEAD:/symm/gcm-arm64-pmull.S

diff --git a/symm/gcm-arm64-pmull.S b/symm/gcm-arm64-pmull.S
index 0e4bd798..4935e46d 100644
--- a/symm/gcm-arm64-pmull.S
+++ b/symm/gcm-arm64-pmull.S
@@ -272,7 +272,7 @@
 	vshr128	v23, v20, 64		// (0; d_1)
 	eor	v16.16b, v16.16b, v21.16b // (x_1; x_0)
 	eor	v17.16b, v17.16b, v22.16b // (x_3; x_2)
-	eor	v18.16b, v18.16b, v23.16b // (x_3; x_2)
+	eor	v18.16b, v18.16b, v23.16b // (x_5; x_4)
 
 	// Next, the reduction.  Our polynomial this time is p(x) = t^192 +
 	// t^7 + t^2 + t + 1.  Yes, the magic numbers are the same as the