in %eax--%edx only.
* x86_64/aes-decrypt-internal.asm: Likewise.

Rev: nettle/x86_64/aes-decrypt-internal.asm:1.3
Rev: nettle/x86_64/aes-encrypt-internal.asm:1.10

Put SA--SD in %eax--%edx, so the second byte can be accessed as
%ah-%dh. TD is not needed, SD can be reused. Use the register that
is saved for the outer loop counter, getting it off the stack.
* x86_64/aes-encrypt-internal.asm: Likewise.

* x86_64/aes.m4 (HREG, MOVE_HREG): New macros.
(XREG): Fixed bug in handling of %r8 and %r9.
(AES_ROUND): Use MOVE_HREG.

Rev: nettle/x86_64/aes-decrypt-internal.asm:1.2
Rev: nettle/x86_64/aes-encrypt-internal.asm:1.9
Rev: nettle/x86_64/aes.m4:1.6

Rev: nettle/x86_64/aes-decrypt-internal.asm:1.1

Rev: nettle/x86_64/aes-encrypt-internal.asm:1.8

Rev: nettle/x86_64/aes-encrypt-internal.asm:1.7

Rev: nettle/x86_64/aes-encrypt-internal.asm:1.6

Rev: nettle/x86_64/aes-encrypt-internal.asm:1.5

Rev: nettle/x86_64/aes-encrypt-internal.asm:1.4
Rev: nettle/x86_64/aes.m4:1.3

* x86/aes-encrypt-internal.asm: Updated for AES_FINAL_ROUND. Only
three times through the substitution loop.
* x86/aes-decrypt-internal.asm: Likewise.
* x86_64/aes-encrypt-internal.asm: Likewise.

Rev: nettle/x86_64/aes-encrypt-internal.asm:1.3
Rev: nettle/x86_64/aes.m4:1.1

Rev: nettle/x86_64/aes-encrypt-internal.asm:1.2

Rev: nettle/x86_64/aes-encrypt-internal.asm:1.1