	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	4, 0x90                         ## -- Begin function x25519_scalar_mult
_x25519_scalar_mult:                    ## @x25519_scalar_mult
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r12
	pushq	%rbx
	subq	$144, %rsp
	.cfi_offset %rbx, -48
	.cfi_offset %r12, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%rdx, %rbx
	movq	%rdi, %r14
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -40(%rbp)
	leaq	-176(%rbp), %rdi
	movl	$32, %edx
	callq	_memcpy
	andl	$248, -176(%rbp)
	movl	-52(%rbp), %eax
	andl	$63, %eax
	orl	$64, %eax
	movl	%eax, -52(%rbp)
	movq	%rbx, %rsi
	callq	_fe51_frombytes
	callq	_fe51_1
	callq	_fe51_0
	callq	_fe51_copy
	callq	_fe51_1
	xorl	%ebx, %ebx
	movl	$254, %r15d
	.p2align	4, 0x90
LBB0_1:                                 ## =>This Inner Loop Header: Depth=1
	movl	%r15d, %eax
	shrl	$3, %eax
	movl	-176(%rbp,%rax,4), %eax
	movl	%r15d, %ecx
	andb	$7, %cl
	movzbl	%cl, %ecx
	xorl	%r12d, %r12d
	btl	%ecx, %eax
	setb	%r12b
	xorl	%r12d, %ebx
	movl	%ebx, %edx
	callq	_fe51_cswap
	movl	%ebx, %edx
	callq	_fe51_cswap
	callq	_fe51_sub
	callq	_fe51_sub
	callq	_fe51_add
	callq	_fe51_add
	callq	_fe51_mul
	callq	_fe51_mul
	callq	_fe51_sq
	callq	_fe51_sq
	callq	_fe51_add
	callq	_fe51_sub
	callq	_fe51_mul
	callq	_fe51_sub
	callq	_fe51_sq
	callq	_fe51_mul121666
	callq	_fe51_sq
	callq	_fe51_add
	callq	_fe51_mul
	callq	_fe51_mul
	movl	%r12d, %ebx
	addl	$-1, %r15d
	jb	LBB0_1
## %bb.2:
	callq	_fe51_invert
	callq	_fe51_mul
	movq	%r14, %rdi
	callq	_fe51_tobytes
	leaq	-176(%rbp), %rdi
	movl	$128, %esi
	callq	_OPENSSL_cleanse
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	cmpq	-40(%rbp), %rax
	jne	LBB0_4
## %bb.3:
	addq	$144, %rsp
	popq	%rbx
	popq	%r12
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_4:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.no_dead_strip	_x25519_scalar_mult
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	2                               ; -- Begin function x25519_scalar_mult
_x25519_scalar_mult:                    ; @x25519_scalar_mult
	.cfi_startproc
; %bb.0:
	sub	sp, sp, #208
	.cfi_def_cfa_offset 208
	stp	x24, x23, [sp, #144]            ; 16-byte Folded Spill
	stp	x22, x21, [sp, #160]            ; 16-byte Folded Spill
	stp	x20, x19, [sp, #176]            ; 16-byte Folded Spill
	stp	x29, x30, [sp, #192]            ; 16-byte Folded Spill
	add	x29, sp, #192
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	mov	x20, x2
	mov	x19, x0
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-56]
	add	x21, sp, #8
	add	x0, sp, #8
	mov	w2, #32
	bl	_memcpy
	ldr	w8, [sp, #8]
	ldr	w9, [sp, #132]
	and	w8, w8, #0xf8
	mov	w10, #64
	bfxil	w10, w9, #0, #6
	str	w8, [sp, #8]
	str	w10, [sp, #132]
	mov	x1, x20
	bl	_fe51_frombytes
	bl	_fe51_1
	bl	_fe51_0
	bl	_fe51_copy
	bl	_fe51_1
	mov	w8, #0
	mov	w22, #254
LBB0_1:                                 ; =>This Inner Loop Header: Depth=1
	lsr	w9, w22, #3
	ldr	w9, [x21, w9, uxtw #2]
	and	w10, w22, #0x7
	lsr	w9, w9, w10
	and	w23, w9, #0x1
	eor	w20, w23, w8
	mov	x2, x20
	bl	_fe51_cswap
	mov	x2, x20
	bl	_fe51_cswap
	bl	_fe51_sub
	bl	_fe51_sub
	bl	_fe51_add
	bl	_fe51_add
	bl	_fe51_mul
	bl	_fe51_mul
	bl	_fe51_sq
	bl	_fe51_sq
	bl	_fe51_add
	bl	_fe51_sub
	bl	_fe51_mul
	bl	_fe51_sub
	bl	_fe51_sq
	bl	_fe51_mul121666
	bl	_fe51_sq
	bl	_fe51_add
	bl	_fe51_mul
	bl	_fe51_mul
	sub	w22, w22, #1
	mov	x8, x23
	cmn	w22, #1
	b.ne	LBB0_1
; %bb.2:
	bl	_fe51_invert
	bl	_fe51_mul
	mov	x0, x19
	bl	_fe51_tobytes
	add	x0, sp, #8
	mov	w1, #128
	bl	_OPENSSL_cleanse
	ldur	x8, [x29, #-56]
Lloh3:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh4:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh5:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_4
; %bb.3:
	ldp	x29, x30, [sp, #192]            ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #176]            ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #160]            ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #144]            ; 16-byte Folded Reload
	add	sp, sp, #208
	ret
LBB0_4:
	bl	___stack_chk_fail
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdrGotLdr	Lloh3, Lloh4, Lloh5
	.cfi_endproc
                                        ; -- End function
	.no_dead_strip	_x25519_scalar_mult
.subsections_via_symbols
