pmull64
v0 = pmull64(fold_consts, v0) ^ pmull64_high(fold_consts, v0);
uint64x2_t final = pmull64(bconsts, v0);