unsafe fn reduce_rf(r: __m128i, f: __m128i) -> __m128i
Reduction using Lemma 3: Result = R ⊕ F1 ⊕ (x^64×F0) ⊕ (P1×F0)
Uses 1 CLMUL for reduction