def Gf128.mul_gcm
import bend-osdev-gf@0.1.2.0/gf128.bend as Gf128import Base
140def Gf128.mul_gcm(x: Gf128, y: Gf128) -> Gf128:
141 match x:
142 case Gf128{w0, w1, w2, w3}:
143 gf128.fst(gf128.gcm.word(32n, w3, gf128.gcm.word(32n, w2, gf128.gcm.word(32n, w1, gf128.gcm.word(32n, w0, (Gf128.zero(), y))))))