Stitched AES-GCM for aarch64

[brian-pane]

No description provided.

[codspeed-hq]

Merging this PR will not alter performance

✅ 155 untouched benchmarks

---

_{Comparing brian-pane:aarch64-aes-gcm (84ea616) with main (3ccdb28)}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.76%. Comparing base (9685008) to head (84ea616).
⚠️ Report is 6 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #165   +/-   ##
=======================================
  Coverage   99.76%   99.76%           
=======================================
  Files         184      184           
  Lines       50832    50885   +53     
=======================================
+ Hits        50714    50767   +53     
  Misses        118      118           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[brian-pane]

I made this as an attempt to speed up AES-GCM for larger input sizes on Arm (context: issue #163).

In my testing with cargo bench on a Mac M4 system, it helps a little bit:

aes128-gcm/aws-lc-rs/32B time:     [53.615 ns 53.731 ns 53.852 ns]
aes128-gcm/graviola/32B (main):    [90.274 ns 90.482 ns 90.703 ns]
aes128-gcm/graviola/32B (this PR): [90.605 ns 90.960 ns 91.409 ns]

aes128-gcm/aws-lc-rs/2KB time:     [242.13 ns 242.96 ns 243.86 ns]
aes128-gcm/graviola/2KB (main):    [299.82 ns 300.59 ns 301.45 ns]
aes128-gcm/graviola/2KB (this PR): [288.97 ns 289.53 ns 290.12 ns]

aes128-gcm/aws-lc-rs/8KB time:     [799.89 ns 803.41 ns 809.65 ns]
aes128-gcm/graviola/8KB (main):    [983.82 ns 990.83 ns 1.0001 µs]
aes128-gcm/graviola/8KB (this PR): [925.98 ns 928.91 ns 933.72 ns]

aes128-gcm/aws-lc-rs/16KB time:     [1.5428 µs 1.5448 µs 1.5466 µs]
aes128-gcm/graviola/16KB (main):    [1.8859 µs 1.8889 µs 1.8921 µs]
aes128-gcm/graviola/16KB (this PR): [1.7605 µs 1.7626 µs 1.7645 µs]

[brian-pane]

This patch assumes that the aarch64 target system is little-endian. Does Graviola support ARM running in big-endian mode?