def xts.shift
import bend-osdev-cipher-modes@0.1.0.0/xts.bend as Xtsimport Base
21# each byte of w shifted left, with the carries between w's own bytes
22def xts.shift(+w: U32) -> U32:
23 U32.or(U32.and(4278124286, U32.shl(w)), U32.and(65793, U32.shrn(w, 15n)))