crypto-native: inverse Hi so it naturally fits into 512-bit register