GCM_ghash
GCM_ghash(ctx->gcm.Xi.u, ctx->gcm.Htable, aad, i);
void GCM_ghash(uint64_t Xi[2], const __uint128_t Htable[16], const void *in,
void GCM_ghash(uint64_t Xi[2], const __uint128_t Htable[16], const void *in,