	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_mbedtls_gcm_starts             ## -- Begin function mbedtls_gcm_starts
	.p2align	4, 0x90
_mbedtls_gcm_starts:                    ## @mbedtls_gcm_starts
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$40, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	movq	$0, -80(%rbp)
	testq	%rcx, %rcx
	je	LBB0_1
## %bb.2:
	movq	%r9, %r14
	movq	%r8, %r15
	movq	%rcx, %r13
	movq	%rdx, %rbx
	movq	%rdi, %r12
	movq	(%rdi), %rdi
	movl	%esi, -72(%rbp)                 ## 4-byte Spill
	xorl	%esi, %esi
	movl	$8, %edx
	callq	_memset
	movq	8(%r12), %rdi
	xorl	%esi, %esi
	movl	$8, %edx
	callq	_memset
	movl	-72(%rbp), %eax                 ## 4-byte Reload
	movl	%eax, 16(%r12)
	movq	$0, 40(%r12)
	movq	$0, 24(%r12)
	cmpq	$12, %r13
	jne	LBB0_4
## %bb.3:
	movq	(%r12), %rdi
	movl	$12, %edx
	movq	%rbx, %rsi
	callq	_memcpy
	movq	(%r12), %rax
	movb	$1, 15(%rax)
	jmp	LBB0_13
LBB0_1:
	movq	_MBEDTLS_ERR_GCM_BAD_INPUT@GOTPCREL(%rip), %rax
	movl	(%rax), %eax
	jmp	LBB0_23
LBB0_4:
	movq	%r14, -72(%rbp)                 ## 8-byte Spill
	leaq	-64(%rbp), %r14
	movq	%r14, %rdi
	xorl	%esi, %esi
	movl	$16, %edx
	callq	_memset
	leaq	(,%r13,8), %rdi
	movq	%r14, %rsi
	movl	$12, %edx
	callq	_PUT_UINT32_BE
	jmp	LBB0_5
	.p2align	4, 0x90
LBB0_11:                                ##   in Loop: Header=BB0_5 Depth=1
	movq	(%r12), %rdx
	movq	%r12, %rdi
	movq	%rdx, %rsi
	callq	_gcm_mult
	addq	%r14, %rbx
	subq	%r14, %r13
	je	LBB0_12
LBB0_5:                                 ## =>This Loop Header: Depth=1
                                        ##     Child Loop BB0_8 Depth 2
	cmpq	$16, %r13
	movl	$16, %r14d
	cmovbq	%r13, %r14
	cmpq	$1, %r14
	jne	LBB0_7
## %bb.6:                               ##   in Loop: Header=BB0_5 Depth=1
	xorl	%eax, %eax
	jmp	LBB0_9
	.p2align	4, 0x90
LBB0_7:                                 ##   in Loop: Header=BB0_5 Depth=1
	movl	%r14d, %ecx
	andl	$30, %ecx
	xorl	%eax, %eax
	.p2align	4, 0x90
LBB0_8:                                 ##   Parent Loop BB0_5 Depth=1
                                        ## =>  This Inner Loop Header: Depth=2
	movzbl	(%rbx,%rax), %edx
	movq	(%r12), %rsi
	xorb	%dl, (%rsi,%rax)
	movzbl	1(%rbx,%rax), %edx
	movq	(%r12), %rsi
	xorb	%dl, 1(%rsi,%rax)
	addq	$2, %rax
	cmpq	%rax, %rcx
	jne	LBB0_8
LBB0_9:                                 ##   in Loop: Header=BB0_5 Depth=1
	testb	$1, %r14b
	je	LBB0_11
## %bb.10:                              ##   in Loop: Header=BB0_5 Depth=1
	movb	(%rbx,%rax), %cl
	movq	(%r12), %rdx
	xorb	%cl, (%rdx,%rax)
	jmp	LBB0_11
LBB0_12:
	movb	-64(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, (%rcx)
	movb	-63(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 1(%rcx)
	movb	-62(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 2(%rcx)
	movb	-61(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 3(%rcx)
	movb	-60(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 4(%rcx)
	movb	-59(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 5(%rcx)
	movb	-58(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 6(%rcx)
	movb	-57(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 7(%rcx)
	movb	-56(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 8(%rcx)
	movb	-55(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 9(%rcx)
	movb	-54(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 10(%rcx)
	movb	-53(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 11(%rcx)
	movb	-52(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 12(%rcx)
	movb	-51(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 13(%rcx)
	movb	-50(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 14(%rcx)
	movb	-49(%rbp), %al
	movq	(%r12), %rcx
	xorb	%al, 15(%rcx)
	movq	(%r12), %rdx
	movq	%r12, %rdi
	movq	%rdx, %rsi
	callq	_gcm_mult
	movq	-72(%rbp), %r14                 ## 8-byte Reload
LBB0_13:
	leaq	36(%r12), %rdi
	movq	(%r12), %rsi
	movl	32(%r12), %ecx
	leaq	-80(%rbp), %r8
	movl	$16, %edx
	callq	_mbedtls_cipher_update
	testl	%eax, %eax
	jne	LBB0_23
## %bb.14:
	movq	%r14, 24(%r12)
	testq	%r14, %r14
	jne	LBB0_15
LBB0_22:
	xorl	%eax, %eax
LBB0_23:
	movq	___stack_chk_guard@GOTPCREL(%rip), %rcx
	movq	(%rcx), %rcx
	cmpq	-48(%rbp), %rcx
	jne	LBB0_25
## %bb.24:
	addq	$40, %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
	.p2align	4, 0x90
LBB0_21:                                ##   in Loop: Header=BB0_15 Depth=1
	movq	8(%r12), %rdx
	movq	%r12, %rdi
	movq	%rdx, %rsi
	callq	_gcm_mult
	addq	%rbx, %r15
	subq	%rbx, %r14
	je	LBB0_22
LBB0_15:                                ## =>This Loop Header: Depth=1
                                        ##     Child Loop BB0_18 Depth 2
	cmpq	$16, %r14
	movl	$16, %ebx
	cmovbq	%r14, %rbx
	cmpq	$1, %rbx
	jne	LBB0_17
## %bb.16:                              ##   in Loop: Header=BB0_15 Depth=1
	xorl	%eax, %eax
	jmp	LBB0_19
	.p2align	4, 0x90
LBB0_17:                                ##   in Loop: Header=BB0_15 Depth=1
	movl	%ebx, %ecx
	andl	$30, %ecx
	xorl	%eax, %eax
	.p2align	4, 0x90
LBB0_18:                                ##   Parent Loop BB0_15 Depth=1
                                        ## =>  This Inner Loop Header: Depth=2
	movzbl	(%r15,%rax), %edx
	movq	8(%r12), %rsi
	xorb	%dl, (%rsi,%rax)
	movzbl	1(%r15,%rax), %edx
	movq	8(%r12), %rsi
	xorb	%dl, 1(%rsi,%rax)
	addq	$2, %rax
	cmpq	%rax, %rcx
	jne	LBB0_18
LBB0_19:                                ##   in Loop: Header=BB0_15 Depth=1
	testb	$1, %bl
	je	LBB0_21
## %bb.20:                              ##   in Loop: Header=BB0_15 Depth=1
	movb	(%r15,%rax), %cl
	movq	8(%r12), %rdx
	xorb	%cl, (%rdx,%rax)
	jmp	LBB0_21
LBB0_25:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.comm	_MBEDTLS_ERR_GCM_BAD_INPUT,4,2  ## @MBEDTLS_ERR_GCM_BAD_INPUT
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_mbedtls_gcm_starts             ; -- Begin function mbedtls_gcm_starts
	.p2align	2
_mbedtls_gcm_starts:                    ; @mbedtls_gcm_starts
	.cfi_startproc
; %bb.0:
	sub	sp, sp, #112
	.cfi_def_cfa_offset 112
	stp	x26, x25, [sp, #32]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #48]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #64]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #80]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #96]             ; 16-byte Folded Spill
	add	x29, sp, #96
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	str	x8, [sp, #24]
	str	xzr, [sp]
	cbz	x3, LBB0_3
; %bb.1:
	mov	x19, x5
	mov	x20, x4
	mov	x23, x3
	mov	x22, x2
	mov	x24, x1
	mov	x21, x0
	ldr	x0, [x0]
	mov	w1, #0
	mov	w2, #8
	bl	_memset
	ldr	x0, [x21, #8]
	mov	w1, #0
	mov	w2, #8
	bl	_memset
	str	w24, [x21, #16]
	str	xzr, [x21, #40]
	str	xzr, [x21, #24]
	cmp	x23, #12
	b.ne	LBB0_4
; %bb.2:
	ldr	x0, [x21]
	mov	x1, x22
	mov	w2, #12
	bl	_memcpy
	ldr	x8, [x21]
	mov	w9, #1
	strb	w9, [x8, #15]
	b	LBB0_9
LBB0_3:
Lloh3:
	adrp	x8, _MBEDTLS_ERR_GCM_BAD_INPUT@GOTPAGE
Lloh4:
	ldr	x8, [x8, _MBEDTLS_ERR_GCM_BAD_INPUT@GOTPAGEOFF]
Lloh5:
	ldr	w0, [x8]
	b	LBB0_16
LBB0_4:
	mov	w24, #16
	add	x0, sp, #8
	mov	w1, #0
	mov	w2, #16
	bl	_memset
	lsl	x0, x23, #3
	add	x1, sp, #8
	mov	w2, #12
	bl	_PUT_UINT32_BE
LBB0_5:                                 ; =>This Loop Header: Depth=1
                                        ;     Child Loop BB0_6 Depth 2
	mov	x8, #0
	cmp	x23, #16
	csel	x25, x23, x24, lo
LBB0_6:                                 ;   Parent Loop BB0_5 Depth=1
                                        ; =>  This Inner Loop Header: Depth=2
	ldrb	w9, [x22, x8]
	ldr	x10, [x21]
	ldrb	w11, [x10, x8]
	eor	w9, w11, w9
	strb	w9, [x10, x8]
	add	x8, x8, #1
	cmp	x25, x8
	b.ne	LBB0_6
; %bb.7:                                ;   in Loop: Header=BB0_5 Depth=1
	ldr	x1, [x21]
	mov	x0, x21
	mov	x2, x1
	bl	_gcm_mult
	add	x22, x22, x25
	subs	x23, x23, x25
	b.ne	LBB0_5
; %bb.8:
	ldrb	w8, [sp, #8]
	ldr	x9, [x21]
	ldrb	w10, [x9]
	eor	w8, w10, w8
	strb	w8, [x9]
	ldrb	w8, [sp, #9]
	ldr	x9, [x21]
	ldrb	w10, [x9, #1]
	eor	w8, w10, w8
	strb	w8, [x9, #1]
	ldrb	w8, [sp, #10]
	ldr	x9, [x21]
	ldrb	w10, [x9, #2]
	eor	w8, w10, w8
	strb	w8, [x9, #2]
	ldrb	w8, [sp, #11]
	ldr	x9, [x21]
	ldrb	w10, [x9, #3]
	eor	w8, w10, w8
	strb	w8, [x9, #3]
	ldrb	w8, [sp, #12]
	ldr	x9, [x21]
	ldrb	w10, [x9, #4]
	eor	w8, w10, w8
	strb	w8, [x9, #4]
	ldrb	w8, [sp, #13]
	ldr	x9, [x21]
	ldrb	w10, [x9, #5]
	eor	w8, w10, w8
	strb	w8, [x9, #5]
	ldrb	w8, [sp, #14]
	ldr	x9, [x21]
	ldrb	w10, [x9, #6]
	eor	w8, w10, w8
	strb	w8, [x9, #6]
	ldrb	w8, [sp, #15]
	ldr	x9, [x21]
	ldrb	w10, [x9, #7]
	eor	w8, w10, w8
	strb	w8, [x9, #7]
	ldrb	w8, [sp, #16]
	ldr	x9, [x21]
	ldrb	w10, [x9, #8]
	eor	w8, w10, w8
	strb	w8, [x9, #8]
	ldrb	w8, [sp, #17]
	ldr	x9, [x21]
	ldrb	w10, [x9, #9]
	eor	w8, w10, w8
	strb	w8, [x9, #9]
	ldrb	w8, [sp, #18]
	ldr	x9, [x21]
	ldrb	w10, [x9, #10]
	eor	w8, w10, w8
	strb	w8, [x9, #10]
	ldrb	w8, [sp, #19]
	ldr	x9, [x21]
	ldrb	w10, [x9, #11]
	eor	w8, w10, w8
	strb	w8, [x9, #11]
	ldrb	w8, [sp, #20]
	ldr	x9, [x21]
	ldrb	w10, [x9, #12]
	eor	w8, w10, w8
	strb	w8, [x9, #12]
	ldrb	w8, [sp, #21]
	ldr	x9, [x21]
	ldrb	w10, [x9, #13]
	eor	w8, w10, w8
	strb	w8, [x9, #13]
	ldrb	w8, [sp, #22]
	ldr	x9, [x21]
	ldrb	w10, [x9, #14]
	eor	w8, w10, w8
	strb	w8, [x9, #14]
	ldrb	w8, [sp, #23]
	ldr	x9, [x21]
	ldrb	w10, [x9, #15]
	eor	w8, w10, w8
	strb	w8, [x9, #15]
	ldr	x1, [x21]
	mov	x0, x21
	mov	x2, x1
	bl	_gcm_mult
LBB0_9:
	add	x0, x21, #36
	ldr	x1, [x21]
	ldr	w3, [x21, #32]
	mov	x4, sp
	mov	w2, #16
	bl	_mbedtls_cipher_update
	cbnz	w0, LBB0_16
; %bb.10:
	str	x19, [x21, #24]
	cbz	x19, LBB0_15
; %bb.11:
	mov	w22, #16
LBB0_12:                                ; =>This Loop Header: Depth=1
                                        ;     Child Loop BB0_13 Depth 2
	mov	x8, #0
	cmp	x19, #16
	csel	x23, x19, x22, lo
LBB0_13:                                ;   Parent Loop BB0_12 Depth=1
                                        ; =>  This Inner Loop Header: Depth=2
	ldrb	w9, [x20, x8]
	ldr	x10, [x21, #8]
	ldrb	w11, [x10, x8]
	eor	w9, w11, w9
	strb	w9, [x10, x8]
	add	x8, x8, #1
	cmp	x23, x8
	b.ne	LBB0_13
; %bb.14:                               ;   in Loop: Header=BB0_12 Depth=1
	ldr	x1, [x21, #8]
	mov	x0, x21
	mov	x2, x1
	bl	_gcm_mult
	add	x20, x20, x23
	subs	x19, x19, x23
	b.ne	LBB0_12
LBB0_15:
	mov	w0, #0
LBB0_16:
	ldr	x8, [sp, #24]
Lloh6:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh7:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh8:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_18
; %bb.17:
	ldp	x29, x30, [sp, #96]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #80]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #64]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #48]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #32]             ; 16-byte Folded Reload
	add	sp, sp, #112
	ret
LBB0_18:
	bl	___stack_chk_fail
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdrGotLdr	Lloh3, Lloh4, Lloh5
	.loh AdrpLdrGotLdr	Lloh6, Lloh7, Lloh8
	.cfi_endproc
                                        ; -- End function
	.comm	_MBEDTLS_ERR_GCM_BAD_INPUT,4,2  ; @MBEDTLS_ERR_GCM_BAD_INPUT
.subsections_via_symbols
