^ gfmul(s3, 0xB); let b3 : bits (8) = x[31..24]; let b0 : bits (8) = x[31..24]; let b0 : bits (8) = gfmul(s0, 0xD) ^ gfmul(s2, 0x9) ^ gfmul(s3, 0xB); let b3 : bits (8) = x[15.. 8]; let s2 : bits (8) = x[31..24]; let b0 : bits (8) = x[23..16]; let s3 : bits (8) = xt3(s0) ^ (s1) ^ xt2(s2) ^ xt3(s3); let b3 : bits
shocked