storeblock
storeblock(iv, cv);
storeblock(out + nbytes, cv ^ b);
storeblock(out + nbytes - 16, cv ^ b2.val[1]);
storeblock(out + nbytes, cv ^ b2.val[0]);
out: storeblock(out, b ^ iv0);
storeblock(t, aes_neon_xts_update(loadblock(cases[i].in)));
storeblock(out, t ^ b);
storeblock(out, b2.val[0] ^ t);
storeblock(out + 16, b2.val[1] ^ t1);
storeblock(tweak, t);
storeblock(out, t ^ b);
storeblock(out, b2.val[0] ^ t);
storeblock(out + 16, b2.val[1] ^ t1);
storeblock(tweak, t);
storeblock(auth0, auth);
storeblock(out, ptxt ^ b2.val[1]);
storeblock(authctr, auth);
storeblock(authctr + 16, ctr_be);
storeblock(out, ptxt);
storeblock(authctr, auth);
storeblock(authctr + 16, ctr_be);
storeblock(out, block);
storeblock(out, block);
storeblock(out, cv);
storeblock(iv, cv);
storeblock(iv, cv);
storeblock(out + nbytes, b ^ cv);
storeblock(out, b ^ iv0);
storeblock(t, aes_ssse3_xts_update(loadblock(t)));
storeblock(out, t ^ b);
storeblock(tweak, t);
storeblock(out, t ^ b);
storeblock(tweak, t);
storeblock(auth0, auth);
storeblock(out, ptxt ^ aes_ssse3_enc1(enc, ctr_be, nrounds));
storeblock(authctr, auth);
storeblock(authctr + 16, ctr_be);
storeblock(out, ptxt);
storeblock(authctr, auth);
storeblock(authctr + 16, ctr_be);
storeblock(out, block);
storeblock(out, block);
storeblock(out, cv);
storeblock(iv, cv);