`clmul` produces the lower half of the 2*XLEN carry-less product
clmul xd, xs1, xs2
Type:
open clmul in rvcodecjs