anchor.diff:                   (inst mov (ea y2) r2)
                    (inst mov (ea y3) r3))))
         ;; copy state to the output buffer
  -      (inst movdqa x0 (nth-xmm-mem state 0))
  -      (inst movdqa x1 (nth-xmm-mem state 1))
  -      (inst movdqa x2 (nth-xmm-mem state 2))
  -      (inst movdqa x3 (nth-xmm-mem state 3))
  -      (inst movdqa (nth-xmm-mem buffer 0) x0)
  -      (inst movdqa (nth-xmm-mem buffer 1) x1)
  -      (inst movdqa (nth-xmm-mem buffer 2) x2)
  -      (inst movdqa (nth-xmm-mem buffer 3) x3)
  +      (inst movdqu x0 (nth-xmm-mem state 0))
  +      (inst movdqu x1 (nth-xmm-mem state 1))
  +      (inst movdqu x2 (nth-xmm-mem state 2))
  +      (inst movdqu x3 (nth-xmm-mem state 3))
  +      (inst movdqu (nth-xmm-mem buffer 0) x0)
  +      (inst movdqu (nth-xmm-mem buffer 1) x1)
  +      (inst movdqu (nth-xmm-mem buffer 2) x2)
  +      (inst movdqu (nth-xmm-mem buffer 3) x3)
   
         (let ((repeat (gen-label)))
           (inst mov count n-rounds)
  
positive.code:                                    other-pointer-lowtag)
                                  (* 16 i)))))
         (let ((last-round (gen-label)))
           (inst movdqa x0 (buffer-mem plaintext plaintext-start))
           (inst movdqa x1 (round-key 0))
           (inst pxor x0 x1)
           (inst movdqa x1 (round-key 1))
           (inst aesenc x0 x1)
           (inst movdqa x1 (round-key 2))
           (inst aesenc x0 x1)
           (inst movdqa x1 (round-key 3))
           (inst aesenc x0 x1)
           (inst movdqa x1 (round-key 4))
           (inst aesenc x0 x1)
           (inst movdqa x1 (round-key 5))
           (inst aesenc x0 x1)
           (inst movdqa x1 (round-key 6))
           (inst aesenc x0 x1)
           (inst movdqa x1 (round-key 7))
           (inst aesenc x0 x1)
           (inst movdqa x1 (round-key 8))
           (inst aesenc x0 x1)
           (inst movdqa x1 (round-key 9))
           (inst aesenc x0 x1)
           (inst movdqa x1 (round-key 10))
           (inst cmp n-rounds 10)
           (inst jmp :z last-round)
           (inst aesenc x0 x1)
           (inst movdqa x1 (round-key 11))
           (inst aesenc x0 x1)
           (inst movdqa x1 (round-key 12))
           (inst cmp n-rounds 12)
           (inst jmp :z last-round)
           (inst aesenc x0 x1)
           (inst movdqa x1 (round-key 13))
           (inst aesenc x0 x1)
           (inst movdqa x1 (round-key 14))
           (emit-label last-round)
           (inst aesenclast x0 x1)
           (inst movdqa (buffer-mem ciphertext ciphertext-start) x0)))))
  
  #+x86-64
  (define-vop (aes-ni-decrypt)
  
negative.code:                                    other-pointer-lowtag)
                                  (* 16 i)))))
         (let ((last-round (gen-label)))
           (inst movdqu x0 (buffer-mem ciphertext ciphertext-start))
           (inst movdqu x1 (round-key 0))
           (inst pxor x0 x1)
           (inst movdqu x1 (round-key 1))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 2))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 3))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 4))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 5))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 6))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 7))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 8))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 9))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 10))
           (inst cmp n-rounds 10)
           (inst jmp :z last-round)
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 11))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 12))
           (inst cmp n-rounds 12)
           (inst jmp :z last-round)
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 13))
           (inst aesdec x0 x1)
           (inst movdqu x1 (round-key 14))
           (emit-label last-round)
           (inst aesdeclast x0 x1)
           (inst movdqu (buffer-mem plaintext plaintext-start) x0)))))
  
  #+x86-64
  (define-vop (fast-blake2s-mixing)
  