anchor.diff:          (inst paddd x1 y1)
           (inst paddd x2 y2)
           (inst paddd x3 y3)
  -        (inst movdqa (nth-xmm-mem buffer 0) x0)
  -        (inst movdqa (nth-xmm-mem buffer 1) x1)
  -        (inst movdqa (nth-xmm-mem buffer 2) x2)
  -        (inst movdqa (nth-xmm-mem buffer 3) x3)))))
  +        (inst movdqu (nth-xmm-mem buffer 0) x0)
  +        (inst movdqu (nth-xmm-mem buffer 1) x1)
  +        (inst movdqu (nth-xmm-mem buffer 2) x2)
  +        (inst movdqu (nth-xmm-mem buffer 3) x3)))))
   
   #+x86-64
   (define-vop (pclmulqdq-support-p)
  
positive.code:               (key-128 (gen-label))
                (end (gen-label)))
            (inst pxor x2 x2)
            (inst movdqa x0 (ea key 0))
            (inst cmp key-length 24)
            (inst jmp :b key-128)
            (inst jmp :z key-192)
  
            (inst movdqa x3 (ea key 1))
            (inst movdqa (ea encryption-keys 0) x0)
            (inst movdqa (ea decryption-keys 14) x0)
            (inst movdqa (ea encryption-keys 1) x3)
            (inst aesimc x6 x3)
            (inst movdqa (ea decryption-keys 13) x6)
            (inst aeskeygenassist x1 x3 1)
            (expand-key-256a)
            (inst movdqa (ea encryption-keys 2) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 12) x6)
            (inst aeskeygenassist x1 x0 1)
            (expand-key-256b)
            (inst movdqa (ea encryption-keys 3) x3)
            (inst aesimc x6 x3)
            (inst movdqa (ea decryption-keys 11) x6)
            (inst aeskeygenassist x1 x3 2)
            (expand-key-256a)
            (inst movdqa (ea encryption-keys 4) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 10) x6)
            (inst aeskeygenassist x1 x0 2)
            (expand-key-256b)
            (inst movdqa (ea encryption-keys 5) x3)
            (inst aesimc x6 x3)
            (inst movdqa (ea decryption-keys 9) x6)
            (inst aeskeygenassist x1 x3 4)
            (expand-key-256a)
            (inst movdqa (ea encryption-keys 6) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 8) x6)
            (inst aeskeygenassist x1 x0 4)
            (expand-key-256b)
            (inst movdqa (ea encryption-keys 7) x3)
            (inst aesimc x6 x3)
            (inst movdqa (ea decryption-keys 7) x6)
            (inst aeskeygenassist x1 x3 8)
            (expand-key-256a)
            (inst movdqa (ea encryption-keys 8) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 6) x6)
            (inst aeskeygenassist x1 x0 8)
            (expand-key-256b)
            (inst movdqa (ea encryption-keys 9) x3)
            (inst aesimc x6 x3)
            (inst movdqa (ea decryption-keys 5) x6)
            (inst aeskeygenassist x1 x3 16)
            (expand-key-256a)
            (inst movdqa (ea encryption-keys 10) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 4) x6)
            (inst aeskeygenassist x1 x0 16)
            (expand-key-256b)
            (inst movdqa (ea encryption-keys 11) x3)
            (inst aesimc x6 x3)
            (inst movdqa (ea decryption-keys 3) x6)
            (inst aeskeygenassist x1 x3 32)
            (expand-key-256a)
            (inst movdqa (ea encryption-keys 12) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 2) x6)
            (inst aeskeygenassist x1 x0 32)
            (expand-key-256b)
            (inst movdqa (ea encryption-keys 13) x3)
            (inst aesimc x6 x3)
            (inst movdqa (ea decryption-keys 1) x6)
            (inst aeskeygenassist x1 x3 64)
            (expand-key-256a)
            (inst movdqa (ea encryption-keys 14) x0)
            (inst movdqa (ea decryption-keys 0) x0)
            (inst jmp end)
  
            (emit-label key-192)
            (inst movdqa x3 (ea key 1))
            (inst movdqa (ea encryption-keys 0) x0)
            (inst movdqa (ea decryption-keys 12) x0)
            (inst aeskeygenassist x1 x3 1)
            (expand-key-192a)
            (inst movdqa (ea encryption-keys 1) x5)
            (inst aesimc x6 x5)
            (inst movdqa (ea decryption-keys 11) x6)
            (inst movdqa (ea encryption-keys 2) x1)
            (inst aesimc x6 x1)
            (inst movdqa (ea decryption-keys 10) x6)
            (inst aeskeygenassist x1 x3 2)
            (expand-key-192b)
            (inst movdqa (ea encryption-keys 3) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 9) x6)
            (inst aeskeygenassist x1 x3 4)
            (expand-key-192a)
            (inst movdqa (ea encryption-keys 4) x5)
            (inst aesimc x6 x5)
            (inst movdqa (ea decryption-keys 8) x6)
            (inst movdqa (ea encryption-keys 5) x1)
            (inst aesimc x6 x1)
            (inst movdqa (ea decryption-keys 7) x6)
            (inst aeskeygenassist x1 x3 8)
            (expand-key-192b)
            (inst movdqa (ea encryption-keys 6) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 6) x6)
            (inst aeskeygenassist x1 x3 16)
            (expand-key-192a)
            (inst movdqa (ea encryption-keys 7) x5)
            (inst aesimc x6 x5)
            (inst movdqa (ea decryption-keys 5) x6)
            (inst movdqa (ea encryption-keys 8) x1)
            (inst aesimc x6 x1)
            (inst movdqa (ea decryption-keys 4) x6)
            (inst aeskeygenassist x1 x3 32)
            (expand-key-192b)
            (inst movdqa (ea encryption-keys 9) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 3) x6)
            (inst aeskeygenassist x1 x3 64)
            (expand-key-192a)
            (inst movdqa (ea encryption-keys 10) x5)
            (inst aesimc x6 x5)
            (inst movdqa (ea decryption-keys 2) x6)
            (inst movdqa (ea encryption-keys 11) x1)
            (inst aesimc x6 x1)
            (inst movdqa (ea decryption-keys 1) x6)
            (inst aeskeygenassist x1 x3 128)
            (expand-key-192b)
            (inst movdqa (ea encryption-keys 12) x0)
            (inst movdqa (ea decryption-keys 0) x0)
            (inst jmp end)
  
            (emit-label key-128)
            (inst movdqa (ea encryption-keys 0) x0)
            (inst movdqa (ea decryption-keys 10) x0)
            (inst aeskeygenassist x1 x0 1)
            (expand-key-128)
            (inst movdqa (ea encryption-keys 1) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 9) x6)
            (inst aeskeygenassist x1 x0 2)
            (expand-key-128)
            (inst movdqa (ea encryption-keys 2) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 8) x6)
            (inst aeskeygenassist x1 x0 4)
            (expand-key-128)
            (inst movdqa (ea encryption-keys 3) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 7) x6)
            (inst aeskeygenassist x1 x0 8)
            (expand-key-128)
            (inst movdqa (ea encryption-keys 4) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 6) x6)
            (inst aeskeygenassist x1 x0 16)
            (expand-key-128)
            (inst movdqa (ea encryption-keys 5) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 5) x6)
            (inst aeskeygenassist x1 x0 32)
            (expand-key-128)
            (inst movdqa (ea encryption-keys 6) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 4) x6)
            (inst aeskeygenassist x1 x0 64)
            (expand-key-128)
            (inst movdqa (ea encryption-keys 7) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 3) x6)
            (inst aeskeygenassist x1 x0 128)
            (expand-key-128)
            (inst movdqa (ea encryption-keys 8) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 2) x6)
            (inst aeskeygenassist x1 x0 27)
            (expand-key-128)
            (inst movdqa (ea encryption-keys 9) x0)
            (inst aesimc x6 x0)
            (inst movdqa (ea decryption-keys 1) x6)
            (inst aeskeygenassist x1 x0 54)
            (expand-key-128)
            (inst movdqa (ea encryption-keys 10) x0)
            (inst movdqa (ea decryption-keys 0) x0)
            (emit-label end))))))
  
  #+x86-64
  
negative.code:                                    other-pointer-lowtag)
                                  (* 16 i)))))
         (let ((last-round (gen-label)))
           (inst movdqu x0 (buffer-mem ciphertext ciphertext-start))
           (inst movdqu x1 (round-key 0))
           (inst pxor x0 x1)
           (inst movdqu x1 (round-key 1))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 2))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 3))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 4))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 5))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 6))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 7))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 8))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 9))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 10))
           (inst cmp n-rounds 10)
           (inst jmp :z last-round)
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 11))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 12))
           (inst cmp n-rounds 12)
           (inst jmp :z last-round)
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 13))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 14))
           (emit-label last-round)
           (inst aesdeclast x0 x1)
           (inst movdqu (buffer-mem plaintext plaintext-start) x0)))))
  
  #+x86-64
  (define-vop (fast-blake2s-mixing)
  