- state->s[4*0+i] =
- gf256mul(0xe, tmp[4*0+i], 0x1b)
- ^ gf256mul(0xb, tmp[4*1+i], 0x1b)
- ^ gf256mul(0xd, tmp[4*2+i], 0x1b)
- ^ gf256mul(0x9, tmp[4*3+i], 0x1b);
- state->s[4*1+i] =
- gf256mul(0x9, tmp[4*0+i], 0x1b)
- ^ gf256mul(0xe, tmp[4*1+i], 0x1b)
- ^ gf256mul(0xb, tmp[4*2+i], 0x1b)
- ^ gf256mul(0xd, tmp[4*3+i], 0x1b);
- state->s[4*2+i] =
- gf256mul(0xd, tmp[4*0+i], 0x1b)
- ^ gf256mul(0x9, tmp[4*1+i], 0x1b)
- ^ gf256mul(0xe, tmp[4*2+i], 0x1b)
- ^ gf256mul(0xb, tmp[4*3+i], 0x1b);
- state->s[4*3+i] =
- gf256mul(0xb, tmp[4*0+i], 0x1b)
- ^ gf256mul(0xd, tmp[4*1+i], 0x1b)
- ^ gf256mul(0x9, tmp[4*2+i], 0x1b)
- ^ gf256mul(0xe, tmp[4*3+i], 0x1b);
+ state->s[4*i+0] =
+ gf256mul(0xe, tmp[4*i+0], 0x1b)
+ ^ gf256mul(0xb, tmp[4*i+1], 0x1b)
+ ^ gf256mul(0xd, tmp[4*i+2], 0x1b)
+ ^ gf256mul(0x9, tmp[4*i+3], 0x1b);
+ state->s[4*i+1] =
+ gf256mul(0x9, tmp[4*i+0], 0x1b)
+ ^ gf256mul(0xe, tmp[4*i+1], 0x1b)
+ ^ gf256mul(0xb, tmp[4*i+2], 0x1b)
+ ^ gf256mul(0xd, tmp[4*i+3], 0x1b);
+ state->s[4*i+2] =
+ gf256mul(0xd, tmp[4*i+0], 0x1b)
+ ^ gf256mul(0x9, tmp[4*i+1], 0x1b)
+ ^ gf256mul(0xe, tmp[4*i+2], 0x1b)
+ ^ gf256mul(0xb, tmp[4*i+3], 0x1b);
+ state->s[4*i+3] =
+ gf256mul(0xb, tmp[4*i+0], 0x1b)
+ ^ gf256mul(0xd, tmp[4*i+1], 0x1b)
+ ^ gf256mul(0x9, tmp[4*i+2], 0x1b)
+ ^ gf256mul(0xe, tmp[4*i+3], 0x1b);