ARMv8.2 has rotate-and-xor and xor-and-rotate so that the (extremely cheap) xor can be saved.