[jdk17u] RFR: 8271567: AArch64: AES Galois CounterMode (GCM) interleaved implementation using vector instructions

[Andrew Haley]

This is a backport of the big AES/GCM patch from JDK head. It's a
major change and it's had very little time (almost a day) to mature in
head, so perhaps it shouldn't be backported for some time, However, there is a good reason for a
backport: OpenJDK on x86 has a major advantage. AES/GCM is an
important cipher, the current AArch64 implementation is much slower
than x86, and some workloads are severely impacted.

I'm open to all arguments about why this should or shouldn't be pushed,
and I'm quite happy to wait for another release cycle or two if people
think that's the best course of action.

-------------

Commit messages:
 - Backport 4f3b626a36319cbbbbdcb1c02a84486a3d4eddb6
 - Backport 4f3b626a36319cbbbbdcb1c02a84486a3d4eddb6

Changes: https://git.openjdk.java.net/jdk17u/pull/87/files
 Webrev: https://webrevs.openjdk.java.net/?repo=jdk17u&pr=87&range=00
  Issue: https://bugs.openjdk.java.net/browse/JDK-8271567
  Stats: 1371 lines in 6 files changed: 1150 ins; 208 del; 13 mod
  Patch: https://git.openjdk.java.net/jdk17u/pull/87.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk17u pull/87/head:pull/87

PR: https://git.openjdk.java.net/jdk17u/pull/87