	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	4, 0x90                         ## -- Begin function sae_derive_keys
_sae_derive_keys:                       ## @sae_derive_keys
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$88, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%rsi, -104(%rbp)                ## 8-byte Spill
	movq	%rdi, -80(%rbp)                 ## 8-byte Spill
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	movq	_SAE_KEYSEED_KEY_LEN@GOTPCREL(%rip), %rax
	movl	(%rax), %r12d
	leaq	(,%r12,4), %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, %r13
	movq	_SAE_MAX_PRIME_LEN@GOTPCREL(%rip), %rax
	movl	(%rax), %eax
	movq	%rax, -112(%rbp)                ## 8-byte Spill
	leaq	(,%rax,4), %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, -72(%rbp)                 ## 8-byte Spill
	movq	_SHA256_MAC_LEN@GOTPCREL(%rip), %rax
	movl	(%rax), %eax
	movq	%rax, -96(%rbp)                 ## 8-byte Spill
	leaq	(,%rax,4), %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, %r15
	movq	_SAE_KCK_LEN@GOTPCREL(%rip), %rcx
	movq	_SAE_PMK_LEN@GOTPCREL(%rip), %rax
	movl	(%rax), %ebx
	addl	(%rcx), %ebx
	leaq	(,%rbx,4), %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, -64(%rbp)                 ## 8-byte Spill
	xorl	%eax, %eax
	callq	_crypto_bignum_init
	testq	%rax, %rax
	movq	%rax, -120(%rbp)                ## 8-byte Spill
	je	LBB0_1
## %bb.2:
	movq	%rax, %r14
	shll	$2, %r12d
	movq	%r13, %rdi
	xorl	%esi, %esi
	movl	%r12d, %edx
	callq	_os_memset
	movq	%r15, -56(%rbp)                 ## 8-byte Spill
	movq	%rbx, -88(%rbp)                 ## 8-byte Spill
	movq	-80(%rbp), %r15                 ## 8-byte Reload
	movq	8(%r15), %rax
	movl	20(%rax), %ecx
	movq	%r13, %rdi
	movl	%r12d, %esi
	movq	-104(%rbp), %rdx                ## 8-byte Reload
	movq	-56(%rbp), %r8                  ## 8-byte Reload
	callq	_hmac_sha256
	movq	_MSG_DEBUG@GOTPCREL(%rip), %rbx
	movl	(%rbx), %edi
	movq	-96(%rbp), %r13                 ## 8-byte Reload
	shll	$2, %r13d
	leaq	L_.str(%rip), %rsi
	movq	-56(%rbp), %rdx                 ## 8-byte Reload
	movl	%r13d, %ecx
	callq	_wpa_hexdump_key
	movq	8(%r15), %rax
	movl	16(%rax), %edi
	movl	24(%r15), %esi
	movq	%r14, %rdx
	callq	_crypto_bignum_add
	movq	8(%r15), %rax
	movl	12(%rax), %esi
	movq	%r14, %rdi
	movq	%r14, %rdx
	callq	_crypto_bignum_mod
	movq	-112(%rbp), %rdx                ## 8-byte Reload
	shll	$2, %edx
	movq	8(%r15), %rax
	movl	8(%rax), %ecx
	movq	%r14, %rdi
	movq	-72(%rbp), %r12                 ## 8-byte Reload
	movq	%r12, %rsi
                                        ## kill: def $edx killed $edx killed $rdx
	callq	_crypto_bignum_to_bin
	movl	(%rbx), %edi
	movq	_SAE_PMKID_LEN@GOTPCREL(%rip), %rax
	movl	(%rax), %ecx
	leaq	L_.str.1(%rip), %rsi
	movq	%r12, %rdx
	callq	_wpa_hexdump
	movq	8(%r15), %rax
	movq	-88(%rbp), %r15                 ## 8-byte Reload
	movq	-56(%rbp), %r14                 ## 8-byte Reload
	movl	8(%rax), %r8d
	shll	$2, %r15d
	subq	$8, %rsp
	leaq	L_.str.2(%rip), %rdx
	movq	%r14, %rdi
	movl	%r13d, %esi
	movq	%r12, %rcx
	movq	-64(%rbp), %r9                  ## 8-byte Reload
	pushq	%r15
	callq	_sha256_prf
	addq	$16, %rsp
	testq	%rax, %rax
	movl	$-1, %ebx
	js	LBB0_4
## %bb.3:
	movq	%r14, %rdi
	xorl	%esi, %esi
	movl	%r13d, %edx
	callq	_os_memset
	movq	%r15, %rbx
	movq	-80(%rbp), %r15                 ## 8-byte Reload
	movq	8(%r15), %rax
	movq	(%rax), %rdi
	movq	_SAE_KCK_LEN@GOTPCREL(%rip), %r12
	movl	(%r12), %edx
	movq	-64(%rbp), %r14                 ## 8-byte Reload
	movq	%r14, %rsi
	callq	_os_memcpy
	movq	(%r15), %rdi
	movslq	(%r12), %rax
	leaq	(%r14,%rax,4), %rsi
	movq	_SAE_PMK_LEN@GOTPCREL(%rip), %r13
	movl	(%r13), %edx
	callq	_os_memcpy
	movq	16(%r15), %rdi
	movq	_SAE_PMKID_LEN@GOTPCREL(%rip), %rax
	movl	(%rax), %edx
	movq	-72(%rbp), %rsi                 ## 8-byte Reload
	callq	_os_memcpy
	movq	%r14, %rdi
	xorl	%esi, %esi
	movl	%ebx, %edx
	callq	_os_memset
	movq	_MSG_DEBUG@GOTPCREL(%rip), %rbx
	movl	(%rbx), %edi
	movq	8(%r15), %rax
	movq	(%rax), %rdx
	movl	(%r12), %ecx
	leaq	L_.str.3(%rip), %rsi
	callq	_wpa_hexdump_key
	movl	(%rbx), %edi
	movq	(%r15), %rdx
	movl	(%r13), %ecx
	leaq	L_.str.4(%rip), %rsi
	callq	_wpa_hexdump_key
	xorl	%ebx, %ebx
	jmp	LBB0_4
LBB0_1:
	movl	$-1, %ebx
LBB0_4:
	movq	-120(%rbp), %rdi                ## 8-byte Reload
	xorl	%esi, %esi
	callq	_crypto_bignum_deinit
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	cmpq	-48(%rbp), %rax
	jne	LBB0_6
## %bb.5:
	movl	%ebx, %eax
	leaq	-40(%rbp), %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_6:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.comm	_SAE_KEYSEED_KEY_LEN,4,2        ## @SAE_KEYSEED_KEY_LEN
	.comm	_SAE_MAX_PRIME_LEN,4,2          ## @SAE_MAX_PRIME_LEN
	.comm	_SHA256_MAC_LEN,4,2             ## @SHA256_MAC_LEN
	.comm	_SAE_KCK_LEN,4,2                ## @SAE_KCK_LEN
	.comm	_SAE_PMK_LEN,4,2                ## @SAE_PMK_LEN
	.comm	_MSG_DEBUG,4,2                  ## @MSG_DEBUG
	.section	__TEXT,__cstring,cstring_literals
L_.str:                                 ## @.str
	.asciz	"SAE: keyseed"

L_.str.1:                               ## @.str.1
	.asciz	"SAE: PMKID"

	.comm	_SAE_PMKID_LEN,4,2              ## @SAE_PMKID_LEN
L_.str.2:                               ## @.str.2
	.asciz	"SAE KCK and PMK"

L_.str.3:                               ## @.str.3
	.asciz	"SAE: KCK"

L_.str.4:                               ## @.str.4
	.asciz	"SAE: PMK"

	.no_dead_strip	_sae_derive_keys
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	2                               ; -- Begin function sae_derive_keys
_sae_derive_keys:                       ; @sae_derive_keys
	.cfi_startproc
; %bb.0:
	stp	x28, x27, [sp, #-96]!           ; 16-byte Folded Spill
	.cfi_def_cfa_offset 96
	stp	x26, x25, [sp, #16]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #32]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #48]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #64]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #80]             ; 16-byte Folded Spill
	add	x29, sp, #80
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	sub	sp, sp, #16
	stur	x1, [x29, #-96]                 ; 8-byte Folded Spill
	mov	x19, x0
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-88]
Lloh3:
	adrp	x8, _SAE_KEYSEED_KEY_LEN@GOTPAGE
Lloh4:
	ldr	x8, [x8, _SAE_KEYSEED_KEY_LEN@GOTPAGEOFF]
Lloh5:
	ldr	w26, [x8]
	lsl	x8, x26, #2
	mov	x9, x8
Lloh6:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh7:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x25, x9, x8
	mov	sp, x25
Lloh8:
	adrp	x8, _SAE_MAX_PRIME_LEN@GOTPAGE
Lloh9:
	ldr	x8, [x8, _SAE_MAX_PRIME_LEN@GOTPAGEOFF]
Lloh10:
	ldr	w27, [x8]
	lsl	x8, x27, #2
	mov	x9, x8
Lloh11:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh12:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x21, x9, x8
	mov	sp, x21
Lloh13:
	adrp	x8, _SHA256_MAC_LEN@GOTPAGE
Lloh14:
	ldr	x8, [x8, _SHA256_MAC_LEN@GOTPAGEOFF]
Lloh15:
	ldr	w24, [x8]
	lsl	x8, x24, #2
	mov	x9, x8
Lloh16:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh17:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x23, x9, x8
	mov	sp, x23
Lloh18:
	adrp	x8, _SAE_KCK_LEN@GOTPAGE
Lloh19:
	ldr	x8, [x8, _SAE_KCK_LEN@GOTPAGEOFF]
Lloh20:
	adrp	x9, _SAE_PMK_LEN@GOTPAGE
Lloh21:
	ldr	x9, [x9, _SAE_PMK_LEN@GOTPAGEOFF]
Lloh22:
	ldr	w8, [x8]
Lloh23:
	ldr	w9, [x9]
	add	w28, w9, w8
	lsl	x9, x28, #2
	add	x8, x9, #15
	and	x8, x8, #0x7fffffff0
Lloh24:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh25:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	sub	x22, x9, x8
	mov	sp, x22
	bl	_crypto_bignum_init
	mov	x20, x0
	cbz	x0, LBB0_3
; %bb.1:
	lsl	w26, w26, #2
	mov	x0, x25
	mov	w1, #0
	mov	x2, x26
	bl	_os_memset
	ldr	x8, [x19, #8]
	ldr	w3, [x8, #20]
	mov	x0, x25
	mov	x1, x26
	ldur	x2, [x29, #-96]                 ; 8-byte Folded Reload
	mov	x4, x23
	bl	_hmac_sha256
Lloh26:
	adrp	x26, _MSG_DEBUG@GOTPAGE
Lloh27:
	ldr	x26, [x26, _MSG_DEBUG@GOTPAGEOFF]
	ldr	w0, [x26]
	lsl	w24, w24, #2
Lloh28:
	adrp	x1, l_.str@PAGE
Lloh29:
	add	x1, x1, l_.str@PAGEOFF
	mov	x2, x23
	mov	x3, x24
	bl	_wpa_hexdump_key
	ldr	x8, [x19, #8]
	ldr	w0, [x8, #16]
	ldr	w1, [x19, #24]
	mov	x2, x20
	bl	_crypto_bignum_add
	ldr	x8, [x19, #8]
	ldr	w1, [x8, #12]
	mov	x0, x20
	mov	x2, x20
	bl	_crypto_bignum_mod
	lsl	w2, w27, #2
	ldr	x8, [x19, #8]
	ldr	w3, [x8, #8]
	mov	x0, x20
	mov	x1, x21
	bl	_crypto_bignum_to_bin
	ldr	w0, [x26]
Lloh30:
	adrp	x27, _SAE_PMKID_LEN@GOTPAGE
Lloh31:
	ldr	x27, [x27, _SAE_PMKID_LEN@GOTPAGEOFF]
	ldr	w3, [x27]
Lloh32:
	adrp	x1, l_.str.1@PAGE
Lloh33:
	add	x1, x1, l_.str.1@PAGEOFF
	mov	x2, x21
	bl	_wpa_hexdump
	ldr	x8, [x19, #8]
	ldr	w4, [x8, #8]
	lsl	w25, w28, #2
Lloh34:
	adrp	x2, l_.str.2@PAGE
Lloh35:
	add	x2, x2, l_.str.2@PAGEOFF
	mov	x0, x23
	mov	x1, x24
	mov	x3, x21
	mov	x5, x22
	mov	x6, x25
	bl	_sha256_prf
	tbnz	x0, #63, LBB0_3
; %bb.2:
	mov	x0, x23
	mov	w1, #0
	mov	x2, x24
	bl	_os_memset
	ldr	x8, [x19, #8]
	ldr	x0, [x8]
Lloh36:
	adrp	x24, _SAE_KCK_LEN@GOTPAGE
Lloh37:
	ldr	x24, [x24, _SAE_KCK_LEN@GOTPAGEOFF]
	ldr	w2, [x24]
	mov	x1, x22
	bl	_os_memcpy
	ldr	x0, [x19]
	ldrsw	x8, [x24]
	add	x1, x22, x8, lsl #2
Lloh38:
	adrp	x23, _SAE_PMK_LEN@GOTPAGE
Lloh39:
	ldr	x23, [x23, _SAE_PMK_LEN@GOTPAGEOFF]
	ldr	w2, [x23]
	bl	_os_memcpy
	ldr	x0, [x19, #16]
	ldr	w2, [x27]
	mov	x1, x21
	bl	_os_memcpy
	mov	x0, x22
	mov	w1, #0
	mov	x2, x25
	bl	_os_memset
	ldr	w0, [x26]
	ldr	x8, [x19, #8]
	ldr	x2, [x8]
	ldr	w3, [x24]
Lloh40:
	adrp	x1, l_.str.3@PAGE
Lloh41:
	add	x1, x1, l_.str.3@PAGEOFF
	bl	_wpa_hexdump_key
	ldr	w0, [x26]
	ldr	x2, [x19]
	ldr	w3, [x23]
Lloh42:
	adrp	x1, l_.str.4@PAGE
Lloh43:
	add	x1, x1, l_.str.4@PAGEOFF
	bl	_wpa_hexdump_key
	mov	w19, #0
	b	LBB0_4
LBB0_3:
	mov	w19, #-1
LBB0_4:
	mov	x0, x20
	mov	w1, #0
	bl	_crypto_bignum_deinit
	ldur	x8, [x29, #-88]
Lloh44:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh45:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh46:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_6
; %bb.5:
	mov	x0, x19
	sub	sp, x29, #80
	ldp	x29, x30, [sp, #80]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #64]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #48]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #32]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #16]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp], #96             ; 16-byte Folded Reload
	ret
LBB0_6:
	bl	___stack_chk_fail
	.loh AdrpLdrGot	Lloh24, Lloh25
	.loh AdrpLdrGotLdr	Lloh20, Lloh21, Lloh23
	.loh AdrpLdrGotLdr	Lloh18, Lloh19, Lloh22
	.loh AdrpLdrGot	Lloh16, Lloh17
	.loh AdrpLdrGotLdr	Lloh13, Lloh14, Lloh15
	.loh AdrpLdrGot	Lloh11, Lloh12
	.loh AdrpLdrGotLdr	Lloh8, Lloh9, Lloh10
	.loh AdrpLdrGot	Lloh6, Lloh7
	.loh AdrpLdrGotLdr	Lloh3, Lloh4, Lloh5
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpAdd	Lloh34, Lloh35
	.loh AdrpAdd	Lloh32, Lloh33
	.loh AdrpLdrGot	Lloh30, Lloh31
	.loh AdrpAdd	Lloh28, Lloh29
	.loh AdrpLdrGot	Lloh26, Lloh27
	.loh AdrpAdd	Lloh42, Lloh43
	.loh AdrpAdd	Lloh40, Lloh41
	.loh AdrpLdrGot	Lloh38, Lloh39
	.loh AdrpLdrGot	Lloh36, Lloh37
	.loh AdrpLdrGotLdr	Lloh44, Lloh45, Lloh46
	.cfi_endproc
                                        ; -- End function
	.comm	_SAE_KEYSEED_KEY_LEN,4,2        ; @SAE_KEYSEED_KEY_LEN
	.comm	_SAE_MAX_PRIME_LEN,4,2          ; @SAE_MAX_PRIME_LEN
	.comm	_SHA256_MAC_LEN,4,2             ; @SHA256_MAC_LEN
	.comm	_SAE_KCK_LEN,4,2                ; @SAE_KCK_LEN
	.comm	_SAE_PMK_LEN,4,2                ; @SAE_PMK_LEN
	.comm	_MSG_DEBUG,4,2                  ; @MSG_DEBUG
	.section	__TEXT,__cstring,cstring_literals
l_.str:                                 ; @.str
	.asciz	"SAE: keyseed"

l_.str.1:                               ; @.str.1
	.asciz	"SAE: PMKID"

	.comm	_SAE_PMKID_LEN,4,2              ; @SAE_PMKID_LEN
l_.str.2:                               ; @.str.2
	.asciz	"SAE KCK and PMK"

l_.str.3:                               ; @.str.3
	.asciz	"SAE: KCK"

l_.str.4:                               ; @.str.4
	.asciz	"SAE: PMK"

	.no_dead_strip	_sae_derive_keys
.subsections_via_symbols
