polyval_mul_arm64
polyval_mul_arm64(acc, &key->h);
polyval_mul_arm64(acc, &key->h_powers[NUM_H_POWERS - 1]);