	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_br_rsa_pss_sig_pad             ## -- Begin function br_rsa_pss_sig_pad
	.p2align	4, 0x90
_br_rsa_pss_sig_pad:                    ## @br_rsa_pss_sig_pad
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$72, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movl	%r9d, %r12d
	movq	%r8, %r15
	movq	%rcx, -104(%rbp)                ## 8-byte Spill
	movq	%rdx, -112(%rbp)                ## 8-byte Spill
	movq	%rsi, %r13
	movq	%rdi, -96(%rbp)                 ## 8-byte Spill
	movq	16(%rbp), %rbx
	movq	%rsi, %rdi
	callq	_br_digest_size
	movq	%rax, %rsi
	leal	-1(%r12), %edx
	testb	$7, %dl
	jne	LBB0_2
## %bb.1:
	movb	$0, (%rbx)
	incq	%rbx
LBB0_2:
	movq	%rbx, -56(%rbp)                 ## 8-byte Spill
	addl	$6, %r12d
	movl	%r12d, %eax
	sarl	$3, %eax
	movslq	%eax, %r14
	xorl	%eax, %eax
	cmpq	%r15, %r14
	jb	LBB0_8
## %bb.3:
	cmpq	%r14, %rsi
	ja	LBB0_8
## %bb.4:
	leaq	(%rsi,%r15), %rcx
	addq	$2, %rcx
	cmpq	%r14, %rcx
	ja	LBB0_8
## %bb.5:
	movl	%edx, -60(%rbp)                 ## 4-byte Spill
	leaq	(%rsi,%r15), %rax
	movq	%rax, -88(%rbp)                 ## 8-byte Spill
	movq	-56(%rbp), %rax                 ## 8-byte Reload
	addq	%r14, %rax
	movq	%rsi, -80(%rbp)                 ## 8-byte Spill
	subq	%rsi, %rax
	movq	%r15, %rcx
	notq	%rcx
	movq	%rax, %rbx
	addq	%rax, %rcx
	movq	%rcx, -72(%rbp)                 ## 8-byte Spill
	testq	%r15, %r15
	je	LBB0_7
## %bb.6:
	movq	-96(%rbp), %rdi                 ## 8-byte Reload
	movq	(%rdi), %rax
	movq	-72(%rbp), %rsi                 ## 8-byte Reload
	movq	%r15, %rdx
	callq	*(%rax)
LBB0_7:
	decq	%rbx
	leaq	-48(%rbp), %rdi
	callq	*16(%r13)
	movl	$8, %edx
	movq	%rbx, %rdi
	xorl	%esi, %esi
	callq	_memset
	movl	$8, %edx
	leaq	-48(%rbp), %rdi
	movq	%rbx, %rsi
	callq	*8(%r13)
	leaq	-48(%rbp), %rdi
	movq	-104(%rbp), %rsi                ## 8-byte Reload
	movq	-80(%rbp), %rdx                 ## 8-byte Reload
	callq	*8(%r13)
	leaq	-48(%rbp), %rdi
	movq	-72(%rbp), %rsi                 ## 8-byte Reload
	movq	%r15, %rdx
	callq	*8(%r13)
	leaq	-48(%rbp), %rdi
	movq	%rbx, %rsi
	callq	*(%r13)
	movq	%r14, %r15
	subq	-88(%rbp), %r15                 ## 8-byte Folded Reload
	leaq	-2(%r15), %rdx
	movq	-56(%rbp), %r13                 ## 8-byte Reload
	movq	%r13, %rdi
	xorl	%esi, %esi
	callq	_memset
	movb	$1, -2(%r13,%r15)
	movq	-80(%rbp), %r8                  ## 8-byte Reload
	movq	%r8, %rsi
	notq	%rsi
	addq	%r14, %rsi
	movq	%r13, %rdi
	movq	-112(%rbp), %rdx                ## 8-byte Reload
	movq	%rbx, %rcx
	callq	_br_mgf1_xor
	andl	$248, %r12d
	subl	-60(%rbp), %r12d                ## 4-byte Folded Reload
	movl	$255, %eax
	movl	%r12d, %ecx
	shrl	%cl, %eax
	andb	%al, (%r13)
	movb	$-68, -1(%r14,%r13)
	movl	$1, %eax
LBB0_8:
	addq	$72, %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
	.cfi_endproc
                                        ## -- End function
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_br_rsa_pss_sig_pad             ; -- Begin function br_rsa_pss_sig_pad
	.p2align	2
_br_rsa_pss_sig_pad:                    ; @br_rsa_pss_sig_pad
	.cfi_startproc
; %bb.0:
	sub	sp, sp, #128
	.cfi_def_cfa_offset 128
	stp	x28, x27, [sp, #32]             ; 16-byte Folded Spill
	stp	x26, x25, [sp, #48]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #64]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #80]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #96]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #112]            ; 16-byte Folded Spill
	add	x29, sp, #112
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	mov	x19, x6
	mov	x27, x5
	mov	x23, x4
	str	x3, [sp, #16]                   ; 8-byte Folded Spill
	mov	x24, x2
	mov	x22, x1
	mov	x25, x0
	mov	x0, x1
	bl	_br_digest_size
	mov	x21, x0
	sub	w28, w27, #1
	tst	w28, #0x7
	b.ne	LBB0_2
; %bb.1:
	strb	wzr, [x19], #1
LBB0_2:
	mov	w26, #0
	add	w20, w27, #6
	sbfx	x27, x20, #3, #29
	cmp	x27, x23
	b.lo	LBB0_9
; %bb.3:
	cmp	x21, x27
	b.hi	LBB0_9
; %bb.4:
	add	x26, x21, x23
	add	x8, x26, #2
	cmp	x8, x27
	b.ls	LBB0_6
; %bb.5:
	mov	w26, #0
	b	LBB0_9
LBB0_6:
	str	x24, [sp]                       ; 8-byte Folded Spill
	add	x8, x19, x27
	sub	x24, x8, x21
	mvn	x8, x23
	add	x8, x8, x24
	str	x8, [sp, #8]                    ; 8-byte Folded Spill
	cbz	x23, LBB0_8
; %bb.7:
	ldr	x8, [x25]
	ldr	x8, [x8]
	mov	x0, x25
	ldr	x1, [sp, #8]                    ; 8-byte Folded Reload
	mov	x2, x23
	blr	x8
LBB0_8:
	sub	x25, x24, #1
	ldr	x8, [x22, #16]
	add	x0, sp, #24
	blr	x8
	mov	x0, x25
	mov	w1, #0
	mov	w2, #8
	bl	_memset
	ldr	x8, [x22, #8]
	add	x0, sp, #24
	mov	x1, x25
	mov	w2, #8
	blr	x8
	ldr	x8, [x22, #8]
	add	x0, sp, #24
	ldr	x1, [sp, #16]                   ; 8-byte Folded Reload
	mov	x2, x21
	blr	x8
	ldr	x8, [x22, #8]
	add	x0, sp, #24
	ldr	x1, [sp, #8]                    ; 8-byte Folded Reload
	mov	x2, x23
	blr	x8
	ldr	x8, [x22]
	add	x0, sp, #24
	mov	x1, x25
	blr	x8
	sub	x8, x27, x26
	sub	x22, x8, #2
	mov	x0, x19
	mov	w1, #0
	mov	x2, x22
	bl	_memset
	mov	w26, #1
	strb	w26, [x19, x22]
	mvn	x8, x21
	add	x1, x8, x27
	mov	x0, x19
	ldr	x2, [sp]                        ; 8-byte Folded Reload
	mov	x3, x25
	mov	x4, x21
	bl	_br_mgf1_xor
	and	w8, w20, #0xfffffff8
	sub	w8, w8, w28
	mov	w9, #255
	lsr	w8, w9, w8
	ldrb	w9, [x19]
	and	w8, w9, w8
	strb	w8, [x19]
	add	x8, x27, x19
	mov	w9, #188
	sturb	w9, [x8, #-1]
LBB0_9:
	mov	x0, x26
	ldp	x29, x30, [sp, #112]            ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #96]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #80]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #64]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #48]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp, #32]             ; 16-byte Folded Reload
	add	sp, sp, #128
	ret
	.cfi_endproc
                                        ; -- End function
.subsections_via_symbols
