//! The `PMULL` backend, which lives under the `aes` target feature.
use vmull_p64;
/// The carryless product of two 64-bit polynomials over `GF(2)`.
///
/// `PMULL` accumulates `b << i` for every set bit `i` of `a`, so bit `j` of the result is the
/// coefficient of `x^j` exactly as the rest of this module assumes.
pub