Implement ghash aggregated reduction

Performance increases from ~400 MiB/s to 450 MiB/s at the expense of
extra code. Thus, aggregation is disabled on ReleaseSmall.

Since the multiplication cost is significant compared to the reduction,
aggregating more than 2 blocks is probably not worth it.
8161de7fa4Frank Denis committed on 10/1/2020, 12:05:07 AMparentf1ad944
1 file changedLine totals unavailable