w[18] = ZVKSH_W(w2 @ w9 @ w16); let w[23] = ZVKSH_W(w7 @ w14 @ w20 @ w19 @ w9 @ w15 @ w5 @ w12); let w[19] = ZVKSH_W(w3 @ w10 @ w16 @ w6 @ w13); let w[20] = ZVKSH_W(w4 @ w11 @ w17 @ w7 @ w14); let w[21] = ZVKSH_W(w5 @ w12 @