gf128mul_x_ble
gf128mul_x_ble(&twk, (le128 *)req->iv);
gf128mul_x_ble(&t, &t);
gf128mul_x_ble(&rctx->t, &t);
gf128mul_x_ble((le128 *)iv, (le128 *)iv);