ghash_gfmul
void ghash_gfmul(const GMAC_INT *, const GMAC_INT *, GMAC_INT *);
ghash_gfmul(ctx->H, ctx->S, ctx->S);