w4i @ u_w3 @ u_w2 @ w1i @ w0i} : bits(256) = get_velem(vs2, 128, i); B = rk4 ^ ck(4 * rnd); S = sm4_subword(B); rk6 = ROUND_KEY(rk2, S); B = A1; let A2 :