	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	4, 0x90                         ## -- Begin function input_kex_c25519_reply
_input_kex_c25519_reply:                ## @input_kex_c25519_reply
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$168, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%rdx, %r15
	movq	%rsp, -64(%rbp)                 ## 8-byte Spill
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	movq	8(%rdx), %rbx
	movq	$0, -104(%rbp)
	movq	$0, -96(%rbp)
	movq	$0, -88(%rbp)
	movq	$0, -112(%rbp)
	movq	_SSH_DIGEST_MAX_LENGTH@GOTPCREL(%rip), %rax
	movl	(%rax), %r13d
	leaq	(,%r13,4), %r14
	movq	%r14, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, %rdi
	cmpq	$0, (%rbx)
	je	LBB0_1
## %bb.2:
	movq	%rdi, -56(%rbp)                 ## 8-byte Spill
	leaq	-88(%rbp), %rsi
	leaq	-152(%rbp), %rdx
	movq	%r15, %rdi
	callq	_sshpkt_get_string
	testl	%eax, %eax
	jne	LBB0_3
## %bb.5:
	movq	-88(%rbp), %rdi
	movq	-152(%rbp), %rsi
	leaq	-104(%rbp), %rdx
	callq	_sshkey_from_blob
	testl	%eax, %eax
	je	LBB0_6
LBB0_3:
	movl	%eax, %r12d
	movq	%rbx, %r14
LBB0_4:
	xorl	%r15d, %r15d
	movq	-64(%rbp), %rbx                 ## 8-byte Reload
	movq	-56(%rbp), %rdi                 ## 8-byte Reload
	jmp	LBB0_32
LBB0_1:
	movq	%rbx, %r14
	movq	_SSH_ERR_INVALID_ARGUMENT@GOTPCREL(%rip), %rax
	movl	(%rax), %r12d
	xorl	%r15d, %r15d
	movq	-64(%rbp), %rbx                 ## 8-byte Reload
LBB0_32:
	shll	$2, %r13d
	movl	%r13d, %esi
	callq	_explicit_bzero
	movq	32(%r14), %rdi
	movl	$8, %esi
	callq	_explicit_bzero
	movq	-88(%rbp), %rdi
	callq	_free
	movq	-96(%rbp), %rdi
	callq	_free
	movq	-112(%rbp), %rdi
	callq	_free
	movq	-104(%rbp), %rdi
	callq	_sshkey_free
	movq	%r15, %rdi
	callq	_sshbuf_free
	movq	%rbx, %rsp
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	cmpq	-48(%rbp), %rax
	jne	LBB0_34
## %bb.33:
	movl	%r12d, %eax
	leaq	-40(%rbp), %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_6:
	movq	-104(%rbp), %rdi
	movq	(%rdi), %rax
	cmpq	8(%rbx), %rax
	jne	LBB0_9
## %bb.7:
	movq	_KEY_ECDSA@GOTPCREL(%rip), %rcx
	cmpq	(%rcx), %rax
	jne	LBB0_11
## %bb.8:
	movq	8(%rdi), %rax
	cmpq	16(%rbx), %rax
	jne	LBB0_9
LBB0_11:
	movq	%r15, %rsi
	callq	*(%rbx)
	cmpl	$-1, %eax
	je	LBB0_12
## %bb.13:
	leaq	-96(%rbp), %rsi
	leaq	-192(%rbp), %rdx
	movq	%r15, %rdi
	callq	_sshpkt_get_string
	testl	%eax, %eax
	jne	LBB0_3
## %bb.14:
	leaq	-112(%rbp), %rsi
	leaq	-200(%rbp), %rdx
	movq	%r15, %rdi
	callq	_sshpkt_get_string
	testl	%eax, %eax
	jne	LBB0_3
## %bb.15:
	movq	%r15, %rdi
	callq	_sshpkt_get_end
	testl	%eax, %eax
	jne	LBB0_3
## %bb.16:
	movq	-192(%rbp), %rax
	movq	_CURVE25519_SIZE@GOTPCREL(%rip), %rcx
	cmpq	(%rcx), %rax
	jne	LBB0_12
## %bb.17:
	xorl	%eax, %eax
	callq	_sshbuf_new
	testq	%rax, %rax
	je	LBB0_18
## %bb.19:
	movq	32(%rbx), %rdi
	movq	-96(%rbp), %rsi
	movq	%rax, -72(%rbp)                 ## 8-byte Spill
	movq	%rax, %rdx
	callq	_kexc25519_shared_key
	testl	%eax, %eax
	js	LBB0_20
## %bb.21:
	movq	%r14, -80(%rbp)
	movl	80(%rbx), %eax
	movl	%eax, -136(%rbp)                ## 4-byte Spill
	movl	76(%rbx), %eax
	movl	%eax, -132(%rbp)                ## 4-byte Spill
	movl	72(%rbx), %eax
	movl	%eax, -128(%rbp)                ## 4-byte Spill
	movq	64(%rbx), %rdi
	callq	_sshbuf_ptr
	movl	%eax, -124(%rbp)                ## 4-byte Spill
	movq	64(%rbx), %rdi
	callq	_sshbuf_len
	movl	%eax, -120(%rbp)                ## 4-byte Spill
	movq	56(%rbx), %rdi
	callq	_sshbuf_ptr
	movl	%eax, -116(%rbp)                ## 4-byte Spill
	movq	56(%rbx), %rdi
	callq	_sshbuf_len
                                        ## kill: def $eax killed $eax def $rax
	movq	%rax, -184(%rbp)                ## 8-byte Spill
	movq	-88(%rbp), %rax
	movq	%rax, -176(%rbp)                ## 8-byte Spill
	movq	-152(%rbp), %rax
	movq	%rax, -168(%rbp)                ## 8-byte Spill
	movl	52(%rbx), %eax
	movq	%rax, -160(%rbp)                ## 8-byte Spill
	movq	-96(%rbp), %r14
	movq	-72(%rbp), %r12                 ## 8-byte Reload
	movq	%r12, %rdi
	callq	_sshbuf_ptr
	movq	%rbx, -144(%rbp)                ## 8-byte Spill
	movl	%eax, %ebx
	movq	%r12, %rdi
	callq	_sshbuf_len
                                        ## kill: def $eax killed $eax def $rax
	subq	$8, %rsp
	leaq	-80(%rbp), %r10
	movl	-136(%rbp), %edi                ## 4-byte Reload
	movl	-132(%rbp), %esi                ## 4-byte Reload
	movl	-128(%rbp), %edx                ## 4-byte Reload
	movl	-124(%rbp), %ecx                ## 4-byte Reload
	movl	-120(%rbp), %r8d                ## 4-byte Reload
	movl	-116(%rbp), %r9d                ## 4-byte Reload
	pushq	%r10
	pushq	-56(%rbp)                       ## 8-byte Folded Reload
	pushq	%rax
	pushq	%rbx
	pushq	%r14
	pushq	-160(%rbp)                      ## 8-byte Folded Reload
	pushq	-168(%rbp)                      ## 8-byte Folded Reload
	pushq	-176(%rbp)                      ## 8-byte Folded Reload
	pushq	-184(%rbp)                      ## 8-byte Folded Reload
	callq	_kex_c25519_hash
	addq	$80, %rsp
	testl	%eax, %eax
	js	LBB0_22
## %bb.23:
	movq	-104(%rbp), %rdi
	movq	-112(%rbp), %rsi
	movq	-200(%rbp), %rdx
	movq	-80(%rbp), %r8
	movq	-144(%rbp), %rax                ## 8-byte Reload
	movq	%rax, %r14
	movl	48(%rax), %r9d
	movl	(%r15), %eax
	subq	$8, %rsp
	movq	-56(%rbp), %rcx                 ## 8-byte Reload
	pushq	%rax
	callq	_sshkey_verify
	addq	$16, %rsp
	testl	%eax, %eax
	jne	LBB0_30
## %bb.24:
	cmpq	$0, 40(%r14)
	jne	LBB0_28
## %bb.25:
	movq	-80(%rbp), %r12
	movq	%r14, %rbx
	movq	%r12, 24(%r14)
	movq	%r12, %rdi
	callq	_malloc
	movq	%rax, 40(%r14)
	testq	%rax, %rax
	je	LBB0_26
## %bb.27:
	movq	%rax, %rdi
	movq	-56(%rbp), %rsi                 ## 8-byte Reload
	movq	%r12, %rdx
	callq	_memcpy
LBB0_28:
	movq	-80(%rbp), %rdx
	movq	%r15, %rdi
	movq	-56(%rbp), %rsi                 ## 8-byte Reload
	movq	-72(%rbp), %rcx                 ## 8-byte Reload
	callq	_kex_derive_keys
	testl	%eax, %eax
	jne	LBB0_30
## %bb.29:
	movq	%r15, %rdi
	callq	_kex_send_newkeys
LBB0_30:
	movl	%eax, %r12d
	jmp	LBB0_31
LBB0_9:
	movq	%rbx, %r14
	movq	_SSH_ERR_KEY_TYPE_MISMATCH@GOTPCREL(%rip), %rax
	movl	(%rax), %r12d
	jmp	LBB0_4
LBB0_12:
	movq	%rbx, %r14
	movq	_SSH_ERR_SIGNATURE_INVALID@GOTPCREL(%rip), %rax
	movl	(%rax), %r12d
	jmp	LBB0_4
LBB0_18:
	movq	%rbx, %r14
	movq	_SSH_ERR_ALLOC_FAIL@GOTPCREL(%rip), %rax
	movl	(%rax), %r12d
	jmp	LBB0_4
LBB0_20:
	movl	%eax, %r12d
	movq	%rbx, %r14
	jmp	LBB0_31
LBB0_22:
	movl	%eax, %r12d
	movq	-144(%rbp), %r14                ## 8-byte Reload
LBB0_31:
	movq	-64(%rbp), %rbx                 ## 8-byte Reload
	movq	-56(%rbp), %rdi                 ## 8-byte Reload
	movq	-72(%rbp), %r15                 ## 8-byte Reload
	jmp	LBB0_32
LBB0_26:
	movq	_SSH_ERR_ALLOC_FAIL@GOTPCREL(%rip), %rax
	movl	(%rax), %r12d
	jmp	LBB0_31
LBB0_34:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.comm	_SSH_DIGEST_MAX_LENGTH,4,2      ## @SSH_DIGEST_MAX_LENGTH
	.comm	_SSH_ERR_INVALID_ARGUMENT,4,2   ## @SSH_ERR_INVALID_ARGUMENT
	.comm	_KEY_ECDSA,8,3                  ## @KEY_ECDSA
	.comm	_SSH_ERR_KEY_TYPE_MISMATCH,4,2  ## @SSH_ERR_KEY_TYPE_MISMATCH
	.comm	_SSH_ERR_SIGNATURE_INVALID,4,2  ## @SSH_ERR_SIGNATURE_INVALID
	.comm	_CURVE25519_SIZE,8,3            ## @CURVE25519_SIZE
	.comm	_SSH_ERR_ALLOC_FAIL,4,2         ## @SSH_ERR_ALLOC_FAIL
	.no_dead_strip	_input_kex_c25519_reply
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	2                               ; -- Begin function input_kex_c25519_reply
_input_kex_c25519_reply:                ; @input_kex_c25519_reply
	.cfi_startproc
; %bb.0:
	stp	x28, x27, [sp, #-96]!           ; 16-byte Folded Spill
	.cfi_def_cfa_offset 96
	stp	x26, x25, [sp, #16]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #32]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #48]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #64]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #80]             ; 16-byte Folded Spill
	add	x29, sp, #80
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	sub	sp, sp, #112
	mov	x21, x2
	mov	x24, sp
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-88]
	ldr	x25, [x2, #8]
	stp	xzr, xzr, [x29, #-104]
	stp	xzr, xzr, [x29, #-120]
Lloh3:
	adrp	x8, _SSH_DIGEST_MAX_LENGTH@GOTPAGE
Lloh4:
	ldr	x8, [x8, _SSH_DIGEST_MAX_LENGTH@GOTPAGEOFF]
Lloh5:
	ldr	w26, [x8]
	lsl	x23, x26, #2
	mov	x9, x23
Lloh6:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh7:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x8, sp
	add	x9, x23, #15
	and	x9, x9, #0x7fffffff0
	sub	x19, x8, x9
	mov	sp, x19
	ldr	x8, [x25]
	cbz	x8, LBB0_4
; %bb.1:
	sub	x1, x29, #112
	sub	x2, x29, #144
	mov	x0, x21
	bl	_sshpkt_get_string
	cbnz	w0, LBB0_3
; %bb.2:
	ldur	x0, [x29, #-112]
	ldur	x1, [x29, #-144]
	sub	x2, x29, #96
	bl	_sshkey_from_blob
	cbz	w0, LBB0_8
LBB0_3:
	mov	x22, x0
	mov	x20, #0
	b	LBB0_6
LBB0_4:
	mov	x20, #0
Lloh8:
	adrp	x8, _SSH_ERR_INVALID_ARGUMENT@GOTPAGE
Lloh9:
	ldr	x8, [x8, _SSH_ERR_INVALID_ARGUMENT@GOTPAGEOFF]
LBB0_5:
	ldr	w22, [x8]
LBB0_6:
	lsl	w1, w26, #2
	mov	x0, x19
	bl	_explicit_bzero
	ldr	x0, [x25, #32]
	mov	w1, #8
	bl	_explicit_bzero
	ldur	x0, [x29, #-112]
	bl	_free
	ldur	x0, [x29, #-104]
	bl	_free
	ldur	x0, [x29, #-120]
	bl	_free
	ldur	x0, [x29, #-96]
	bl	_sshkey_free
	mov	x0, x20
	bl	_sshbuf_free
	mov	sp, x24
	ldur	x8, [x29, #-88]
Lloh10:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh11:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh12:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_29
; %bb.7:
	mov	x0, x22
	sub	sp, x29, #80
	ldp	x29, x30, [sp, #80]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #64]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #48]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #32]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #16]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp], #96             ; 16-byte Folded Reload
	ret
LBB0_8:
	ldur	x0, [x29, #-96]
	ldr	x8, [x0]
	ldr	x9, [x25, #8]
	cmp	x8, x9
	b.ne	LBB0_26
; %bb.9:
Lloh13:
	adrp	x9, _KEY_ECDSA@GOTPAGE
Lloh14:
	ldr	x9, [x9, _KEY_ECDSA@GOTPAGEOFF]
Lloh15:
	ldr	x9, [x9]
	cmp	x8, x9
	b.ne	LBB0_11
; %bb.10:
	ldr	x8, [x0, #8]
	ldr	x9, [x25, #16]
	cmp	x8, x9
	b.ne	LBB0_26
LBB0_11:
	ldr	x8, [x25]
	mov	x1, x21
	blr	x8
	cmn	w0, #1
	b.eq	LBB0_27
; %bb.12:
	sub	x1, x29, #104
	sub	x2, x29, #136
	mov	x0, x21
	bl	_sshpkt_get_string
	cbnz	w0, LBB0_3
; %bb.13:
	sub	x1, x29, #120
	sub	x2, x29, #128
	mov	x0, x21
	bl	_sshpkt_get_string
	cbnz	w0, LBB0_3
; %bb.14:
	mov	x0, x21
	bl	_sshpkt_get_end
	cbnz	w0, LBB0_3
; %bb.15:
	ldur	x8, [x29, #-136]
Lloh16:
	adrp	x9, _CURVE25519_SIZE@GOTPAGE
Lloh17:
	ldr	x9, [x9, _CURVE25519_SIZE@GOTPAGEOFF]
Lloh18:
	ldr	x9, [x9]
	cmp	x8, x9
	b.ne	LBB0_27
; %bb.16:
	bl	_sshbuf_new
	mov	x20, x0
	cbz	x0, LBB0_28
; %bb.17:
	ldr	x0, [x25, #32]
	ldur	x1, [x29, #-104]
	mov	x2, x20
	bl	_kexc25519_shared_key
	tbnz	w0, #31, LBB0_25
; %bb.18:
	stur	x23, [x29, #-152]
	ldr	w9, [x25, #80]
	ldr	w8, [x25, #76]
	stp	w8, w9, [x29, #-160]            ; 8-byte Folded Spill
	ldr	w8, [x25, #72]
	stur	w8, [x29, #-164]                ; 4-byte Folded Spill
	ldr	x0, [x25, #64]
	bl	_sshbuf_ptr
	stur	w0, [x29, #-168]                ; 4-byte Folded Spill
	ldr	x0, [x25, #64]
	bl	_sshbuf_len
	stur	w0, [x29, #-172]                ; 4-byte Folded Spill
	ldr	x0, [x25, #56]
	bl	_sshbuf_ptr
	stur	w0, [x29, #-176]                ; 4-byte Folded Spill
	ldr	x0, [x25, #56]
	bl	_sshbuf_len
	stur	w0, [x29, #-180]                ; 4-byte Folded Spill
	ldp	x8, x28, [x29, #-112]
	stur	x8, [x29, #-192]                ; 8-byte Folded Spill
	ldur	x27, [x29, #-144]
	ldr	w22, [x25, #52]
	mov	x0, x20
	bl	_sshbuf_ptr
	mov	x23, x0
	mov	x0, x20
	bl	_sshbuf_len
	sub	sp, sp, #48
	sub	x8, x29, #152
	stp	x19, x8, [sp, #32]
	stp	w23, w0, [sp, #24]
	str	x28, [sp, #16]
	str	w22, [sp, #8]
	str	x27, [sp]
	ldp	w1, w0, [x29, #-160]            ; 8-byte Folded Reload
	ldp	w3, w2, [x29, #-168]            ; 8-byte Folded Reload
	ldp	w5, w4, [x29, #-176]            ; 8-byte Folded Reload
	ldur	w6, [x29, #-180]                ; 4-byte Folded Reload
	ldur	x7, [x29, #-192]                ; 8-byte Folded Reload
	bl	_kex_c25519_hash
	add	sp, sp, #48
	tbnz	w0, #31, LBB0_25
; %bb.19:
	ldur	x0, [x29, #-96]
	ldp	x2, x1, [x29, #-128]
	ldur	x4, [x29, #-152]
	ldr	w5, [x25, #48]
	ldr	w6, [x21]
	mov	x3, x19
	bl	_sshkey_verify
	cbnz	w0, LBB0_25
; %bb.20:
	ldr	x8, [x25, #40]
	cbnz	x8, LBB0_23
; %bb.21:
	ldur	x22, [x29, #-152]
	str	x22, [x25, #24]
	mov	x0, x22
	bl	_malloc
	str	x0, [x25, #40]
	cbz	x0, LBB0_28
; %bb.22:
	mov	x1, x19
	mov	x2, x22
	bl	_memcpy
LBB0_23:
	ldur	x2, [x29, #-152]
	mov	x0, x21
	mov	x1, x19
	mov	x3, x20
	bl	_kex_derive_keys
	cbnz	w0, LBB0_25
; %bb.24:
	mov	x0, x21
	bl	_kex_send_newkeys
LBB0_25:
	mov	x22, x0
	b	LBB0_6
LBB0_26:
	mov	x20, #0
Lloh19:
	adrp	x8, _SSH_ERR_KEY_TYPE_MISMATCH@GOTPAGE
Lloh20:
	ldr	x8, [x8, _SSH_ERR_KEY_TYPE_MISMATCH@GOTPAGEOFF]
	b	LBB0_5
LBB0_27:
	mov	x20, #0
Lloh21:
	adrp	x8, _SSH_ERR_SIGNATURE_INVALID@GOTPAGE
Lloh22:
	ldr	x8, [x8, _SSH_ERR_SIGNATURE_INVALID@GOTPAGEOFF]
	b	LBB0_5
LBB0_28:
Lloh23:
	adrp	x8, _SSH_ERR_ALLOC_FAIL@GOTPAGE
Lloh24:
	ldr	x8, [x8, _SSH_ERR_ALLOC_FAIL@GOTPAGEOFF]
	b	LBB0_5
LBB0_29:
	bl	___stack_chk_fail
	.loh AdrpLdrGot	Lloh6, Lloh7
	.loh AdrpLdrGotLdr	Lloh3, Lloh4, Lloh5
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdrGot	Lloh8, Lloh9
	.loh AdrpLdrGotLdr	Lloh10, Lloh11, Lloh12
	.loh AdrpLdrGotLdr	Lloh13, Lloh14, Lloh15
	.loh AdrpLdrGotLdr	Lloh16, Lloh17, Lloh18
	.loh AdrpLdrGot	Lloh19, Lloh20
	.loh AdrpLdrGot	Lloh21, Lloh22
	.loh AdrpLdrGot	Lloh23, Lloh24
	.cfi_endproc
                                        ; -- End function
	.comm	_SSH_DIGEST_MAX_LENGTH,4,2      ; @SSH_DIGEST_MAX_LENGTH
	.comm	_SSH_ERR_INVALID_ARGUMENT,4,2   ; @SSH_ERR_INVALID_ARGUMENT
	.comm	_KEY_ECDSA,8,3                  ; @KEY_ECDSA
	.comm	_SSH_ERR_KEY_TYPE_MISMATCH,4,2  ; @SSH_ERR_KEY_TYPE_MISMATCH
	.comm	_SSH_ERR_SIGNATURE_INVALID,4,2  ; @SSH_ERR_SIGNATURE_INVALID
	.comm	_CURVE25519_SIZE,8,3            ; @CURVE25519_SIZE
	.comm	_SSH_ERR_ALLOC_FAIL,4,2         ; @SSH_ERR_ALLOC_FAIL
	.no_dead_strip	_input_kex_c25519_reply
.subsections_via_symbols
