[colanderman]

What version of GCC are you using? The non-constant case compiles to "roll" as far back as GCC 4.4.

[praptak]

It was a really long time ago - around the time of the NIST contest for the AES, so around 2001. And thanks for the "roll" update :)