loadblock
iv0 = loadblock(iv);
cv = loadblock(in + nbytes - 16);
cv = loadblock(in + nbytes - 16);
b2.val[0] = cv = loadblock(in + nbytes - 32);
cv = loadblock(in + nbytes - 16);
storeblock(t, aes_neon_xts_update(loadblock(cases[i].in)));
t = loadblock(tweak);
b = t ^ loadblock(in);
b2.val[0] = t ^ loadblock(in);
b2.val[1] = t1 ^ loadblock(in + 16);
t = loadblock(tweak);
b = t ^ loadblock(in);
b2.val[0] = t ^ loadblock(in);
b2.val[1] = t1 ^ loadblock(in + 16);
auth = loadblock(auth0);
auth = aes_neon_enc1(enc, auth ^ loadblock(in), nrounds);
auth = loadblock(authctr);
ctr_be = loadblock(authctr + 16);
ptxt = loadblock(in);
ctr_be = loadblock(authctr + 16);
auth = loadblock(authctr);
ptxt = loadblock(in) ^ pad;
block = loadblock(in);
block = loadblock(in);
cv = loadblock(iv);
cv ^= loadblock(in);
iv0 = loadblock(iv);
cv = loadblock(in + nbytes - 16);
cv = loadblock(in + nbytes - 16);
storeblock(t, aes_ssse3_xts_update(loadblock(t)));
t = loadblock(tweak);
b = t ^ loadblock(in);
t = loadblock(tweak);
b = t ^ loadblock(in);
auth = loadblock(auth0);
auth = aes_ssse3_enc1(enc, auth ^ loadblock(in), nrounds);
auth = loadblock(authctr);
ctr_be = loadblock(authctr + 16);
ptxt = loadblock(in);
auth = loadblock(authctr);
ctr_be = loadblock(authctr + 16);
ptxt = loadblock(in) ^ aes_ssse3_enc1(enc, ctr_be, nrounds);
block = loadblock(in);
block = loadblock(in);
cv = loadblock(iv);
cv ^= loadblock(in);