rev8(w4i); let w1 = : bits(32) C1 = ROL32(B, 9); B = rk3 ^ rk4 ^ rk5 ^ rk6 ^ ck(4 * rnd + 3); S = sm4_subword(B); rk7 =