	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	4, 0x90                         ## -- Begin function mgf_mask
_mgf_mask:                              ## @mgf_mask
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$56, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%r8, %r12
	movq	%rcx, -96(%rbp)                 ## 8-byte Spill
	movq	%rdx, -88(%rbp)                 ## 8-byte Spill
	movq	%rsi, %r13
	movq	%rdi, %rbx
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	movq	_MBEDTLS_MD_MAX_SIZE@GOTPCREL(%rip), %rax
	movl	(%rax), %r15d
	movq	%r15, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, %r14
	movq	%r14, %rdi
	xorl	%esi, %esi
	movq	%r15, -64(%rbp)                 ## 8-byte Spill
	movl	%r15d, %edx
	callq	_memset
	leaq	-52(%rbp), %rdi
	xorl	%esi, %esi
	movl	$4, %edx
	callq	_memset
	movl	(%r12), %edi
	callq	_mbedtls_md_get_size
	testq	%r13, %r13
	je	LBB0_22
## %bb.1:
	movl	%eax, %eax
	movq	%rax, -80(%rbp)                 ## 8-byte Spill
	leaq	3(%r14), %rax
	movq	%rax, -72(%rbp)                 ## 8-byte Spill
	jmp	LBB0_3
	.p2align	4, 0x90
LBB0_2:                                 ##   in Loop: Header=BB0_3 Depth=1
	incb	-49(%rbp)
	subq	%r15, %r13
	je	LBB0_22
LBB0_3:                                 ## =>This Loop Header: Depth=1
                                        ##     Child Loop BB0_11 Depth 2
                                        ##     Child Loop BB0_16 Depth 2
                                        ##     Child Loop BB0_19 Depth 2
	movq	-80(%rbp), %r15                 ## 8-byte Reload
	cmpq	%r15, %r13
	cmovbq	%r13, %r15
	movq	%r12, %rdi
	callq	_mbedtls_md_starts
	movq	%r12, %rdi
	movq	-88(%rbp), %rsi                 ## 8-byte Reload
	movq	-96(%rbp), %rdx                 ## 8-byte Reload
                                        ## kill: def $edx killed $edx killed $rdx
	callq	_mbedtls_md_update
	movq	%r12, %rdi
	leaq	-52(%rbp), %rsi
	movl	$4, %edx
	callq	_mbedtls_md_update
	movq	%r12, %rdi
	movq	%r14, %rsi
	callq	_mbedtls_md_finish
	testq	%r15, %r15
	je	LBB0_2
## %bb.4:                               ##   in Loop: Header=BB0_3 Depth=1
	cmpq	$32, %r15
	jb	LBB0_5
## %bb.6:                               ##   in Loop: Header=BB0_3 Depth=1
	leaq	(%r14,%r15), %rax
	cmpq	%rax, %rbx
	jae	LBB0_9
## %bb.7:                               ##   in Loop: Header=BB0_3 Depth=1
	leaq	(%rbx,%r15), %rax
	cmpq	%rax, %r14
	jae	LBB0_9
LBB0_5:                                 ##   in Loop: Header=BB0_3 Depth=1
	xorl	%eax, %eax
LBB0_15:                                ##   in Loop: Header=BB0_3 Depth=1
	movq	%rax, %rsi
	notq	%rsi
	addq	%r15, %rsi
	movq	%r15, %rdx
	andq	$3, %rdx
	je	LBB0_17
	.p2align	4, 0x90
LBB0_16:                                ##   Parent Loop BB0_3 Depth=1
                                        ## =>  This Inner Loop Header: Depth=2
	movzbl	(%r14,%rax), %ecx
	xorb	%cl, (%rbx)
	incq	%rbx
	incq	%rax
	decq	%rdx
	jne	LBB0_16
LBB0_17:                                ##   in Loop: Header=BB0_3 Depth=1
	cmpq	$3, %rsi
	jb	LBB0_2
## %bb.18:                              ##   in Loop: Header=BB0_3 Depth=1
	movq	%r15, %rsi
	subq	%rax, %rsi
	addq	-72(%rbp), %rax                 ## 8-byte Folded Reload
	xorl	%edx, %edx
	.p2align	4, 0x90
LBB0_19:                                ##   Parent Loop BB0_3 Depth=1
                                        ## =>  This Inner Loop Header: Depth=2
	movzbl	-3(%rax,%rdx), %ecx
	xorb	%cl, (%rbx,%rdx)
	movzbl	-2(%rax,%rdx), %ecx
	xorb	%cl, 1(%rbx,%rdx)
	movzbl	-1(%rax,%rdx), %ecx
	xorb	%cl, 2(%rbx,%rdx)
	movzbl	(%rax,%rdx), %ecx
	xorb	%cl, 3(%rbx,%rdx)
	addq	$4, %rdx
	cmpq	%rdx, %rsi
	jne	LBB0_19
## %bb.20:                              ##   in Loop: Header=BB0_3 Depth=1
	addq	%rdx, %rbx
	jmp	LBB0_2
LBB0_9:                                 ##   in Loop: Header=BB0_3 Depth=1
	movl	%r15d, %eax
	andl	$-32, %eax
	leaq	-32(%rax), %rdx
	movq	%rdx, %rcx
	shrq	$5, %rcx
	incq	%rcx
	testq	%rdx, %rdx
	je	LBB0_21
## %bb.10:                              ##   in Loop: Header=BB0_3 Depth=1
	movq	%rcx, %rsi
	andq	$-2, %rsi
	xorl	%edx, %edx
	.p2align	4, 0x90
LBB0_11:                                ##   Parent Loop BB0_3 Depth=1
                                        ## =>  This Inner Loop Header: Depth=2
	movups	(%rbx,%rdx), %xmm0
	movups	16(%rbx,%rdx), %xmm1
	movups	32(%rbx,%rdx), %xmm2
	movups	48(%rbx,%rdx), %xmm3
	xorps	(%r14,%rdx), %xmm0
	xorps	16(%r14,%rdx), %xmm1
	movups	%xmm0, (%rbx,%rdx)
	movups	%xmm1, 16(%rbx,%rdx)
	xorps	32(%r14,%rdx), %xmm2
	xorps	48(%r14,%rdx), %xmm3
	movups	%xmm2, 32(%rbx,%rdx)
	movups	%xmm3, 48(%rbx,%rdx)
	addq	$64, %rdx
	addq	$-2, %rsi
	jne	LBB0_11
## %bb.12:                              ##   in Loop: Header=BB0_3 Depth=1
	testb	$1, %cl
	je	LBB0_14
LBB0_13:                                ##   in Loop: Header=BB0_3 Depth=1
	movups	(%rbx,%rdx), %xmm0
	movups	16(%rbx,%rdx), %xmm1
	xorps	(%r14,%rdx), %xmm0
	xorps	16(%r14,%rdx), %xmm1
	movups	%xmm0, (%rbx,%rdx)
	movups	%xmm1, 16(%rbx,%rdx)
LBB0_14:                                ##   in Loop: Header=BB0_3 Depth=1
	addq	%rax, %rbx
	cmpq	%rax, %r15
	je	LBB0_2
	jmp	LBB0_15
LBB0_21:                                ##   in Loop: Header=BB0_3 Depth=1
	xorl	%edx, %edx
	testb	$1, %cl
	jne	LBB0_13
	jmp	LBB0_14
LBB0_22:
	movq	%r14, %rdi
	movq	-64(%rbp), %rsi                 ## 8-byte Reload
                                        ## kill: def $esi killed $esi killed $rsi
	callq	_mbedtls_zeroize
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	cmpq	-48(%rbp), %rax
	jne	LBB0_24
## %bb.23:
	leaq	-40(%rbp), %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_24:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.comm	_MBEDTLS_MD_MAX_SIZE,4,2        ## @MBEDTLS_MD_MAX_SIZE
	.no_dead_strip	_mgf_mask
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	2                               ; -- Begin function mgf_mask
_mgf_mask:                              ; @mgf_mask
	.cfi_startproc
; %bb.0:
	stp	x28, x27, [sp, #-96]!           ; 16-byte Folded Spill
	.cfi_def_cfa_offset 96
	stp	x26, x25, [sp, #16]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #32]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #48]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #64]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #80]             ; 16-byte Folded Spill
	add	x29, sp, #80
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	sub	sp, sp, #16
	mov	x19, x4
	mov	x20, x3
	mov	x21, x2
	mov	x22, x1
	mov	x25, x0
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-88]
Lloh3:
	adrp	x8, _MBEDTLS_MD_MAX_SIZE@GOTPAGE
Lloh4:
	ldr	x8, [x8, _MBEDTLS_MD_MAX_SIZE@GOTPAGEOFF]
Lloh5:
	ldr	w23, [x8]
	mov	x9, x23
Lloh6:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh7:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x8, sp
	add	x9, x23, #15
	and	x9, x9, #0x1fffffff0
	sub	x24, x8, x9
	mov	sp, x24
	mov	x0, x24
	mov	w1, #0
	mov	x2, x23
	bl	_memset
	sub	x0, x29, #92
	mov	w1, #0
	mov	w2, #4
	bl	_memset
	ldr	w0, [x19]
	bl	_mbedtls_md_get_size
	cbz	x22, LBB0_14
; %bb.1:
	mov	w26, w0
	add	x27, x24, #32
	b	LBB0_4
LBB0_2:                                 ;   in Loop: Header=BB0_4 Depth=1
	mov	x8, x25
LBB0_3:                                 ;   in Loop: Header=BB0_4 Depth=1
	ldurb	w9, [x29, #-89]
	add	w9, w9, #1
	sturb	w9, [x29, #-89]
	mov	x25, x8
	subs	x22, x22, x28
	b.eq	LBB0_14
LBB0_4:                                 ; =>This Loop Header: Depth=1
                                        ;     Child Loop BB0_12 Depth 2
                                        ;     Child Loop BB0_10 Depth 2
	cmp	x22, x26
	csel	x28, x22, x26, lo
	mov	x0, x19
	bl	_mbedtls_md_starts
	mov	x0, x19
	mov	x1, x21
	mov	x2, x20
	bl	_mbedtls_md_update
	sub	x1, x29, #92
	mov	x0, x19
	mov	w2, #4
	bl	_mbedtls_md_update
	mov	x0, x19
	mov	x1, x24
	bl	_mbedtls_md_finish
	cbz	x28, LBB0_2
; %bb.5:                                ;   in Loop: Header=BB0_4 Depth=1
	cmp	x28, #64
	b.lo	LBB0_8
; %bb.6:                                ;   in Loop: Header=BB0_4 Depth=1
	add	x8, x24, x28
	cmp	x25, x8
	b.hs	LBB0_11
; %bb.7:                                ;   in Loop: Header=BB0_4 Depth=1
	add	x8, x25, x28
	cmp	x24, x8
	b.hs	LBB0_11
LBB0_8:                                 ;   in Loop: Header=BB0_4 Depth=1
	mov	x9, #0
	mov	x8, x25
LBB0_9:                                 ;   in Loop: Header=BB0_4 Depth=1
	sub	x10, x28, x9
	add	x9, x24, x9
LBB0_10:                                ;   Parent Loop BB0_4 Depth=1
                                        ; =>  This Inner Loop Header: Depth=2
	ldrb	w11, [x9], #1
	ldrb	w12, [x8]
	eor	w11, w12, w11
	strb	w11, [x8], #1
	subs	x10, x10, #1
	b.ne	LBB0_10
	b	LBB0_3
LBB0_11:                                ;   in Loop: Header=BB0_4 Depth=1
	and	x9, x28, #0xffffffc0
	add	x8, x25, x9
	add	x10, x25, #32
	mov	x11, x27
	mov	x12, x9
LBB0_12:                                ;   Parent Loop BB0_4 Depth=1
                                        ; =>  This Inner Loop Header: Depth=2
	ldp	q0, q1, [x11, #-32]
	ldp	q2, q3, [x11], #64
	ldp	q4, q5, [x10, #-32]
	ldp	q6, q7, [x10]
	eor.16b	v0, v4, v0
	eor.16b	v1, v5, v1
	eor.16b	v2, v6, v2
	eor.16b	v3, v7, v3
	stp	q0, q1, [x10, #-32]
	stp	q2, q3, [x10], #64
	subs	x12, x12, #64
	b.ne	LBB0_12
; %bb.13:                               ;   in Loop: Header=BB0_4 Depth=1
	cmp	x28, x9
	b.eq	LBB0_3
	b	LBB0_9
LBB0_14:
	mov	x0, x24
	mov	x1, x23
	bl	_mbedtls_zeroize
	ldur	x8, [x29, #-88]
Lloh8:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh9:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh10:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_16
; %bb.15:
	sub	sp, x29, #80
	ldp	x29, x30, [sp, #80]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #64]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #48]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #32]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #16]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp], #96             ; 16-byte Folded Reload
	ret
LBB0_16:
	bl	___stack_chk_fail
	.loh AdrpLdrGot	Lloh6, Lloh7
	.loh AdrpLdrGotLdr	Lloh3, Lloh4, Lloh5
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdrGotLdr	Lloh8, Lloh9, Lloh10
	.cfi_endproc
                                        ; -- End function
	.comm	_MBEDTLS_MD_MAX_SIZE,4,2        ; @MBEDTLS_MD_MAX_SIZE
	.no_dead_strip	_mgf_mask
.subsections_via_symbols
