def gf128.gcm.bit
import bend-osdev-gf@0.1.1.0/gf128.bend as Gf128import Base
124def gf128.gcm.bit(+x: U32, zv: Gf128 & Gf128) -> Gf128 & Gf128:
125 (z, +v) = zv
126 (Gf128.xor(z, Gf128.and_mask(v, gf128.mask(U32.shrn(x, 31n)))), Gf128.mul_x_gcm(v))