x1  =   y1  ^   x0  ^   x2 ;  x3  =   y3  ^   x2  ^ (x0)<<3;  x1  = ((((x1))<<(1))| (((x1))>>>(32-(1)))) ;  x3  = ((((x3))<<(7))| (((x3))>>>(32-(7)))) ;  x0  =   x0  ^   x1  ^   x3 ;  x2  =   x2  ^   x3  ^ (x1 <<7);  x0  = ((((x0))<<(5))| (((x0))>>>(32-(5)))) ;  x2  = ((((x2))<<(22))| (((x2))>>>(32-(22))))  ;  x0 ^=  K[15*4+0];  x1 ^=  K[15*4+1];  x2 ^=  K[15*4+2];  x3 ^=  K[15*4+3] ;/* S7:   1 13 15  0 14  8  2 11  7  4 12 10  9  3  5  6 *//* depth = 10,7,10,4, Total gates=19 */	t01 = x0  & x2 ;	t02 =     ~ x3 ;	t03 = x0  & t02;	t04 = x1  | t01;	t05 = x0  & x1 ;	t06 = x2  ^ t04;	y3  = t03 ^ t06;	t08 = x2  | y3 ;	t09 = x3  | t05;	t10 = x0  ^ t08;	t11 = t04 & y3 ;	y1  = t09 ^ t10;	t13 = x1  ^ y1 ;	t14 = t01 ^ y1 ;	t15 = x2  ^ t05;	t16 = t11 | t13;	t17 = t02 | t14;	y0  = t15 ^ t17;	y2  = x0  ^ t16;  x0  = ((((y0))<<(13))| (((y0))>>>(32-(13)))) ;  x2  = ((((y2))<<(3))| (((y2))>>>(32-(3)))) ;  x1  =   y1  ^   x0  ^   x2 ;  x3  =   y3  ^   x2  ^ (x0)<<3;  x1  = ((((x1))<<(1))| (((x1))>>>(32-(1)))) ;  x3  = ((((x3))<<(7))| (((x3))>>>(32-(7)))) ;  x0  =   x0  ^   x1  ^   x3 ;  x2  =   x2  ^   x3  ^ (x1 <<7);  x0  = ((((x0))<<(5))| (((x0))>>>(32-(5)))) ;  x2  = ((((x2))<<(22))| (((x2))>>>(32-(22))))  ;  x0 ^=  K[16*4+0];  x1 ^=  K[16*4+1];  x2 ^=  K[16*4+2];  x3 ^=  K[16*4+3] ;/* S0:   3  8 15  1 10  6  5 11 14 13  4  2  7  0  9 12 *//* depth = 5,7,4,2, Total gates=18 */	t01 = x1  ^ x2 ;	t02 = x0  | x3 ;	t03 = x0  ^ x1 ;	y3  = t02 ^ t01;	t05 = x2  | y3 ;	t06 = x0  ^ x3 ;	t07 = x1  | x2 ;	t08 = x3  & t05;	t09 = t03 & t07;	y2  = t09 ^ t08;	t11 = t09 & y2 ;	t12 = x2  ^ x3 ;	t13 = t07 ^ t11;	t14 = x1  & t06;	t15 = t06 ^ t13;	y0  =     ~ t15;	t17 = y0  ^ t14;	y1  = t12 ^ t17;  x0  = ((((y0))<<(13))| (((y0))>>>(32-(13)))) ;  x2  = ((((y2))<<(3))| (((y2))>>>(32-(3)))) ;  x1  =   y1  ^   x0  ^   x2 ;  x3  =   y3  ^   x2  ^ (x0)<<3;  x1  = ((((x1))<<(1))| (((x1))>>>(32-(1)))) ;  x3  = ((((x3))<<(7))| (((x3))>>>(32-(7)))) ;  x0  =   x0  ^   x1  ^   x3 ;  x2  =   x2  ^   x3  ^ (x1 <<7);  x0  = ((((x0))<<(5))| (((x0))>>>(32-(5)))) ;  x2  = ((((x2))<<(22))| (((x2))>>>(32-(22))))  ;  x0 ^=  K[17*4+0];  x1 ^=  K[17*4+1];  x2 ^=  K[17*4+2];  x3 ^=  K[17*4+3] ;/* S1:  15 12  2  7  9  0  5 10  1 11 14  8  6 13  3  4 *//* depth = 10,7,3,5, Total gates=18 */	t01 = x0  | x3 ;	t02 = x2  ^ x3 ;	t03 =     ~ x1 ;	t04 = x0  ^ x2 ;	t05 = x0  | t03;	t06 = x3  & t04;	t07 = t01 & t02;	t08 = x1  | t06;	y2  = t02 ^ t05;	t10 = t07 ^ t08;	t11 = t01 ^ t10;	t12 = y2  ^ t11;	t13 = x1  & x3 ;	y3  =     ~ t10;	y1  = t13 ^ t12;	t16 = t10 | y1 ;	t17 = t05 & t16;	y0  = x2  ^ t17;  x0  = ((((y0))<<(13))| (((y0))>>>(32-(13)))) ;  x2  = ((((y2))<<(3))| (((y2))>>>(32-(3)))) ;  x1  =   y1  ^   x0  ^   x2 ;  x3  =   y3  ^   x2  ^ (x0)<<3;  x1  = ((((x1))<<(1))| (((x1))>>>(32-(1)))) ;  x3  = ((((x3))<<(7))| (((x3))>>>(32-(7)))) ;  x0  =   x0  ^   x1  ^   x3 ;  x2  =   x2  ^   x3  ^ (x1 <<7);  x0  = ((((x0))<<(5))| (((x0))>>>(32-(5)))) ;  x2  = ((((x2))<<(22))| (((x2))>>>(32-(22))))  ;  x0 ^=  K[18*4+0];  x1 ^=  K[18*4+1];  x2 ^=  K[18*4+2];  x3 ^=  K[18*4+3] ;/* S2:   8  6  7  9  3 12 10 15 13  1 14  4  0 11  5  2 *//* depth = 3,8,11,7, Total gates=16 */	t01 = x0  | x2 ;	t02 = x0  ^ x1 ;	t03 = x3  ^ t01;	y0  = t02 ^ t03;	t05 = x2  ^ y0 ;	t06 = x1  ^ t05;	t07 = x1  | t05;	t08 = t01 & t06;	t09 = t03 ^ t07;	t10 = t02 | t09;	y1  = t10 ^ t08;	t12 = x0  | x3 ;	t13 = t09 ^ y1 ;	t14 = x1  ^ t13;	y3  =     ~ t09;	y2  = t12 ^ t14;  x0  = ((((y0))<<(13))| (((y0))>>>(32-(13)))) ;  x2  = ((((y2))<<(3))| (((y2))>>>(32-(3)))) ;  x1  =   y1  ^   x0  ^   x2 ;  x3  =   y3  ^   x2  ^ (x0)<<3;  x1  = ((((x1))<<(1))| (((x1))>>>(32-(1)))) ;  x3  = ((((x3))<<(7))| (((x3))>>>(32-(7)))) ;  x0  =   x0  ^   x1  ^   x3 ;  x2  =   x2  ^   x3  ^ (x1 <<7);  x0  = ((((x0))<<(5))| (((x0))>>>(32-(5)))) ;  x2  = ((((x2))<<(22))| (((x2))>>>(32-(22))))  ;  x0 ^=  K[19*4+0];  x1 ^=  K[19*4+1];  x2 ^=  K[19*4+2];  x3 ^=  K[19*4+3] ;/* S3:   0 15 11  8 12  9  6  3 13  1  2  4 10  7  5 14 *//* depth = 8,3,5,5, Total gates=18 */	t01 = x0  ^ x2 ;	t02 = x0  | x3 ;	t03 = x0  & x3 ;	t04 = t01 & t02;	t05 = x1  | t03;	t06 = x0  & x1 ;	t07 = x3  ^ t04;	t08 = x2  | t06;	t09 = x1  ^ t07;	t10 = x3  & t05;	t11 = t02 ^ t10;	y3  = t08 ^ t09;	t13 = x3  | y3 ;	t14 = x0  | t07;	t15 = x1  & t13;	y2  = t08 ^ t11;	y0  = t14 ^ t15;	y1  = t05 ^ t04;  x0  = ((((y0))<<(13))| (((y0))>>>(32-(13)))) ;  x2  = ((((y2))<<(3))| (((y2))>>>(32-(3)))) ;  x1  =   y1  ^   x0  ^   x2 ;  x3  =   y3  ^   x2  ^ (x0)<<3;  x1  = ((((x1))<<(1))| (((x1))>>>(32-(1)))) ;  x3  = ((((x3))<<(7))| (((x3))>>>(32-(7)))) ;  x0  =   x0  ^   x1  ^   x3 ;  x2  =   x2  ^   x3  ^ (x1 <<7);  x0  = ((((x0))<<(5))| (((x0))>>>(32-(5)))) ;  x2  = ((((x2))<<(22))| (((x2))>>>(32-(22))))  ;  x0 ^=  K[20*4+0];  x1 ^=  K[20*4+1];  x2 ^=  K[20*4+2];  x3 ^=  K[20*4+3] ;/* S4:   1 15  8  3 12  0 11  6  2  5  4 10  9 14  7 13 *//* depth = 6,7,5,3, Total gates=19 */	t01 = x0  | x1 ;	t02 = x1  | x2 ;	t03 = x0  ^ t02;	t04 = x1  ^ x3 ;	t05 = x3  | t03;	t06 = x3  & t01;	y3  = t03 ^ t06;	t08 = y3  & t04;	t09 = t04 & t05;	t10 = x2  ^ t06;	t11 = x1  & x2 ;	t12 = t04 ^ t08;	t13 = t11 | t03;	t14 = t10 ^ t09;	t15 = x0  & t05;	t16 = t11 | t12;	y2  = t13 ^ t08;	y1  = t15 ^ t16;	y0  =     ~ t14;  x0  = ((((y0))<<(13))| (((y0))>>>(32-(13)))) ;  x2  = ((((y2))<<(3))| (((y2))>>>(32-(3)))) ;  x1  =   y1  ^   x0  ^   x2 ;  x3  =   y3  ^   x2  ^ (x0)<<3;  x1  = ((((x1))<<(1))| (((x1))>>>(32-(1)))) ;  x3  = ((((x3))<<(7))| (((x3))>>>(32-(7)))) ;  x0  =   x0  ^   x1  ^   x3 ;  x2  =   x2  ^   x3  ^ (x1 <<7);  x0  = ((((x0))<<(5))| (((x0))>>>(32-(5)))) ;  x2  = ((((x2))<<(22))| (((x2))>>>(32-(22))))  ;  x0 ^=  K[21*4+0];  x1 ^=  K[21*4+1];  x2 ^=  K[21*4+2];  x3 ^=  K[21*4+3] ;/* S5:  15  5  2 11  4 10  9 12  0  3 14  8 13  6  7  1 *//* depth = 4,6,8,6, Total gates=17 */	t01 = x1  ^ x3 ;	t02 = x1  | x3 ;	t03 = x0  & t01;	t04 = x2  ^ t02;	t05 = t03 ^ t04;	y0  =     ~ t05;	t07 = x0  ^ t01;	t08 = x3  | y0 ;	t09 = x1  | t05;	t10 = x3  ^ t08;	t11 = x1  | t07;	t12 = t03 | y0 ;	t13 = t07 | t10;	t14 = t01 ^ t11;	y2  = t09 ^ t13;	y1  = t07 ^ t08;	y3  = t12 ^ t14;  x0  = ((((y0))<<(13))| (((y0))>>>(32-(13)))) ;  x2  = ((((y2))<<(3))| (((y2))>>>(32-(3)))) ;  x1  =   y1  ^   x0  ^   x2 ;  x3  =   y3  ^   x2  ^ (x0)<<3;  x1  = ((((x1))<<(1))| (((x1))>>>(32-(1)))) ;  x3  = ((((x3))<<(7))| (((x3))>>>(32-(7)))) ;  x0  =   x0  ^   x1  ^   x3 ;  x2  =   x2  ^   x3  ^ (x1 <<7);  x0  = ((((x0))<<(5))| (((x0))>>>(32-(5)))) ;  x2  = ((((x2))<<(22))| (((x2))>>>(32-(22))))  ;  x0 ^=  K[22*4+0];  x1 ^=  K[22*4+1];  x2 ^=  K[22*4+2];  x3 ^=  K[22*4+3] ;/* S6:   7  2 12  5  8  4  6 11 14  9  1 15 13  3 10  0 *//* depth = 8,3,6,3, Total gates=19 */	t01 = x0  & x3 ;	t02 = x1  ^ x2 ;	t03 = x0  ^ x3 ;	t04 = t01 ^ t02;	t05 = x1  | x2 ;	y1  =     ~ t04;	t07 = t03 & t05;	t08 = x1  & y1 ;	t09 = x0  | x2 ;	t10 = t07 ^ t08;	t11 = x1  | x3 ;	t12 = x2  ^ t11;	t13 = t09 ^ t10;	y2  =     ~ t13;	t15 = y1  & t03;	y3  = t12 ^ t07;	t17 = x0  ^ x1 ;	t18 = y2  ^ t15;	y0  = t17 ^ t18;  x0  = ((((y0))<<(13))| (((y0))>>>(32-(13)))) ;  x2  = ((((y2))<<(3))| (((y2))>>>(32-(3)))) ;  x1  =   y1  ^   x0  ^   x2 ;  x3  =   y3  ^   x2  ^ (x0)<<3;  x1  = ((((x1))<<(1))| (((x1))>>>(32-(1)))) ;  x3  = ((((x3))<<(7))| (((x3))>>>(32-(7)))) ;  x0  =   x0  ^   x1  ^   x3 ;  x2  =   x2  ^   x3  ^ (x1 <<7);  x0  = ((((x0))<<(5))| (((x0))>>>(32-(5)))) ;  x2  = ((((x2))<<(22))| (((x2))>>>(32-(22))))  ;  x0 ^=  K[23*4+0];  x1 ^=  K[23*4+1];  x2 ^=  K[23*4+2];  x3 ^=  K[23*4+3] ;/* S7:   1 13 15  0 14  8  2 11  7  4 12 10  9  3  5  6 *//* depth = 10,7,10,4, Total gates=19 */	t01 = x0  & x2 ;	t02 =     ~ x3 ;	t03 = x0  & t02;	t04 = x1  | t01;	t05 = x0  & x1 ;	t06 = x2  ^ t04;	y3  = t03 ^ t06;	t08 = x2  | y3 ;	t09 = x3  | t05;	t10 = x0  ^ t08;	t11 = t04 & y3 ;	y1  = t09 ^ t10;	t13 = x1  ^ y1 ;	t14 = t01 ^ y1 ;	t15 = x2  ^ t05;	t16 = t11 | t13;	t17 = t02 | t14;	y0  = t15 ^ t17;	y2  = x0  ^ t16;  x0  = ((((y0))<<(13))| (((y0))>>>(32-(13)))) ;  x2  = ((((y2))<<(3))| (((y2))>>>(32-(3)))) ;  x1  =   y1  ^   x0  ^   x2 ;  x3  =   y3  ^   x2  ^ (x0)<<3;  x1  = ((((x1))<<(1))| (((x1))>>>(32-(1)))) ;  x3  = ((((x3))<<(7))| (((x3))>>>(32-(7)))) ;  x0  =   x0  ^   x1  ^   x3 ;  x2  =   x2  ^   x3  ^ (x1 <<7);  x0  = ((((x0))<<(5))| (((x0))>>>(32-(5)))) ;  x2  = ((((x2))<<(22))| (((x2))>>>(32-(22))))  ;  x0 ^=  K[24*4+0];  x1 ^=  K[24*4+1];  x2 ^=  K[24*4+2];  x3 ^=  K[24*4+3] ;/* S0:   3  8 15  1 10  6  5 11 14 13  4  2  7  0  9 12 *//* depth = 5,7,4,2, Total gates=18 */	t01 = x1  ^ x2 ;	t02 = x0  | x3 ;	t03 = x0  ^ x1 ;	y3  = t02 ^ t01;	t05 = x2  | y3 ;	t06 = x0  ^ x3 ;	t07 = x1  | x2 ;	t08 = x3  & t05;	t09 = t03 & t07;	y2  = t09 ^ t08;	t11 = t09 & y2 ;	t12 = x2  ^ x3 ;	t13 = t07 ^ t11;	t14 = x1  & t06;	t15 = t06 ^ t13;	y0  =     ~ t15;	t17 = y0  ^ t14;	y1  = t12 ^ t17;  x0  = ((((y0))<<(13))| (((y0))>>>(32-(13)))) ;  x2  = ((((y2))<<(3))| (((y2))>>>(32-(3)))) ;  x1  =   y1  ^   x0  ^   x2 ;  x3  =   y3  ^   x2  ^ (x0)<<3;  x1  = ((((x1))<<(1))| (((x1))>>>(32-(1)))) ;  x3  = ((((x3))<<(7))| (((x3))>>>(32-(7)))) ;  x0  =   x0  ^   x1  ^   x3 ;  x2  =   x2  ^   x3  ^ (x1 <<7);  x0  = ((((x0))<<(5))| (((x0))>>>(32-(5)))) ;  x2  = ((((x2))<<(22))| (((x2))>>>(32-(22))))  ;  x0 ^=  K[25*4+0];  x1 ^=  K[25*4+1];  x2 ^=  K[25*4+2];  x3 ^=  K[25*4+3] ;/* S1:  15 12  2  7  9  0  5 10  1 11 14  8  6 13  3  4 *//* depth = 10,7,3,5, Total gates=18 */	t01 = x0  | x3 ;	t02 = x2  ^ x3 ;	t03 =     ~ x1 ;	t04 = x0  ^ x2 ;	t05 = x0  | t03;	t06 = x3  & t04;	t07 = t01 & t02;	t08 = x1  | t06;	y2  = t02 ^ t05;	t10 = t07 ^ t08;	t11 = t01 ^ t10;	t12 = y2  ^ t11;	t13 = x1  & x3 ;	y3  =     ~ t10;	y1  = t13 ^ t12;	t16 = t10 | y1 ;	t17 = t05 & t16;	y0  = x2  ^ t17;  x0  = ((((y0))<<(13))| (((y0))>>>(32-(13)))) ;  x2  = ((((y2))<<(3))| (((y2))>>>(32-(3)))) ;  x1  =   y1  ^   x0  ^   x2 ;  x3  =   y3  ^   x2  ^ (x0)<<3;  x1  = ((((x1))<<(1))| (((x1))>>>(32-(1)))) ;  x3  = ((((x3))<<(7))| (((x3))>>>(32-(7)))) ;  x0  =   x0  ^   x1  ^   x3 ;