crypto_load_be64toh
W[0] = crypto_load_be64toh(&in[0 * 8]);
W[1] = crypto_load_be64toh(&in[1 * 8]);
W[2] = crypto_load_be64toh(&in[2 * 8]);
W[3] = crypto_load_be64toh(&in[3 * 8]);
W[4] = crypto_load_be64toh(&in[4 * 8]);
W[5] = crypto_load_be64toh(&in[5 * 8]);
W[6] = crypto_load_be64toh(&in[6 * 8]);
W[7] = crypto_load_be64toh(&in[7 * 8]);
W[8] = crypto_load_be64toh(&in[8 * 8]);
W[9] = crypto_load_be64toh(&in[9 * 8]);
W[10] = crypto_load_be64toh(&in[10 * 8]);
W[11] = crypto_load_be64toh(&in[11 * 8]);
W[12] = crypto_load_be64toh(&in[12 * 8]);
W[13] = crypto_load_be64toh(&in[13 * 8]);
W[14] = crypto_load_be64toh(&in[14 * 8]);
W[15] = crypto_load_be64toh(&in[15 * 8]);
W[i] = crypto_load_be64toh(&in[i * 8]);
ctr = crypto_load_be64toh(&iv[8]);
X[0] = crypto_load_be64toh(&in[0 * 8]);
X[1] = crypto_load_be64toh(&in[1 * 8]);
X[2] = crypto_load_be64toh(&in[2 * 8]);
X[3] = crypto_load_be64toh(&in[3 * 8]);
X[4] = crypto_load_be64toh(&in[4 * 8]);
X[5] = crypto_load_be64toh(&in[5 * 8]);
X[6] = crypto_load_be64toh(&in[6 * 8]);
X[7] = crypto_load_be64toh(&in[7 * 8]);
X[8] = crypto_load_be64toh(&in[8 * 8]);
X[9] = crypto_load_be64toh(&in[9 * 8]);
X[10] = crypto_load_be64toh(&in[10 * 8]);
X[11] = crypto_load_be64toh(&in[11 * 8]);
X[12] = crypto_load_be64toh(&in[12 * 8]);
X[13] = crypto_load_be64toh(&in[13 * 8]);
X[14] = crypto_load_be64toh(&in[14 * 8]);
X[15] = crypto_load_be64toh(&in[15 * 8]);