Unroll and modify final loop of bit-by-bit gcm_mul()
Unroll and modify final loop of bit-by-bit gcm_mul()

This avoids a final unnecessary call to uint128_struct_mul2().

cmcqueen/aes-min,cmcqueen/aes-min,cmcqueen/aes-min