There is some implicit R0 == $0 here which may not be desired. "CMP $0, Rx" translates to "cmpd r0, rX" which is less preferred than "cmpdi r0, 0". Likewise, "ADDE $0, Rx" also turns into "adde R0, Rx, Rx" which can be simplified to a similar instruction which adds to zero with carry, "ADDZE Rx, Rx". Change-Id: I5de17ff5b02c7c9d57daf014c7fe9420bfbeeeab Reviewed-on: https://go-review.googlesource.com/c/crypto/+/311372 Reviewed-by: Carlos Eduardo Seo <carlos.seo@linaro.org> Trust: Carlos Eduardo Seo <carlos.seo@linaro.org> Trust: Lynn Boger <laboger@linux.vnet.ibm.com>