	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_chachapoly_crypt               ## -- Begin function chachapoly_crypt
	.p2align	4, 0x90
_chachapoly_crypt:                      ## @chachapoly_crypt
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$136, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movl	%r9d, %r13d
                                        ## kill: def $r8d killed $r8d def $r8
	movq	%r8, -144(%rbp)                 ## 8-byte Spill
	movq	%rcx, -136(%rbp)                ## 8-byte Spill
	movq	%rdx, -152(%rbp)                ## 8-byte Spill
	movl	%esi, -116(%rbp)                ## 4-byte Spill
	movq	%rdi, %r14
	movq	%rsp, -176(%rbp)                ## 8-byte Spill
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	movaps	l___const.chachapoly_crypt.one+16(%rip), %xmm0
	movaps	%xmm0, -96(%rbp)
	movaps	l___const.chachapoly_crypt.one(%rip), %xmm0
	movaps	%xmm0, -112(%rbp)
	movq	_POLY1305_TAGLEN@GOTPCREL(%rip), %rax
	movl	(%rax), %eax
	movq	%rax, -168(%rbp)                ## 8-byte Spill
	shlq	$2, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, -160(%rbp)                ## 8-byte Spill
	movq	_POLY1305_KEYLEN@GOTPCREL(%rip), %rax
	movl	(%rax), %ebx
	movq	%rbx, %rax
	shlq	$2, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, %r15
	leal	(,%rbx,4), %r12d
	movq	%r15, %rdi
	xorl	%esi, %esi
	movl	%r12d, %edx
	callq	_memset
	leaq	-80(%rbp), %rbx
	movq	%rbx, %rdi
	movl	-116(%rbp), %esi                ## 4-byte Reload
	callq	_POKE_U64
	movq	%r14, %rdi
	movq	%rbx, %rsi
	movq	%r14, %rbx
	xorl	%edx, %edx
	callq	_chacha_ivsetup
	movq	%r14, %rdi
	movq	%r15, %rsi
	movq	%r15, %rdx
	movl	%r12d, -116(%rbp)               ## 4-byte Spill
	movl	%r12d, %ecx
	callq	_chacha_encrypt_bytes
	movslq	%r13d, %r14
	cmpl	$0, 24(%rbp)
	je	LBB0_1
LBB0_3:
	testl	%r13d, %r13d
	movq	-152(%rbp), %r12                ## 8-byte Reload
	je	LBB0_5
## %bb.4:
	movq	%rbx, %r12
	addq	$4, %rbx
	leaq	-80(%rbp), %rsi
	movq	%rbx, %rdi
	xorl	%edx, %edx
	callq	_chacha_ivsetup
	movq	%rbx, %rdi
	movq	%r12, %rbx
	movq	-152(%rbp), %r12                ## 8-byte Reload
	movq	-136(%rbp), %rsi                ## 8-byte Reload
	movq	%r12, %rdx
	movl	%r13d, %ecx
	callq	_chacha_encrypt_bytes
LBB0_5:
	movq	%r13, -128(%rbp)                ## 8-byte Spill
	leaq	-80(%rbp), %rsi
	leaq	-112(%rbp), %rdx
	movq	%rbx, %rdi
	callq	_chacha_ivsetup
	movq	-136(%rbp), %rax                ## 8-byte Reload
	leaq	(%rax,%r14,4), %rsi
	leaq	(%r12,%r14,4), %r14
	movq	%rbx, %rdi
	movq	%r14, %rdx
	movq	-144(%rbp), %rbx                ## 8-byte Reload
	movl	%ebx, %ecx
	callq	_chacha_encrypt_bytes
	xorl	%r13d, %r13d
	cmpl	$0, 24(%rbp)
	je	LBB0_7
## %bb.6:
	movslq	%ebx, %rax
	leaq	(%r14,%rax,4), %rdi
	movq	-128(%rbp), %rdx                ## 8-byte Reload
	addl	%ebx, %edx
	movq	%r12, %rsi
                                        ## kill: def $edx killed $edx killed $rdx
	movq	%r15, %rcx
	callq	_poly1305_auth
	jmp	LBB0_7
LBB0_1:
	movq	-136(%rbp), %rsi                ## 8-byte Reload
	leaq	(%rsi,%r14,4), %rax
	movq	-144(%rbp), %rdx                ## 8-byte Reload
	movslq	%edx, %rcx
	leaq	(%rax,%rcx,4), %rax
	movq	%rax, -128(%rbp)                ## 8-byte Spill
	addl	%r13d, %edx
	movq	%rbx, %r12
	movq	-160(%rbp), %rbx                ## 8-byte Reload
	movq	%rbx, %rdi
	movq	%r15, %rcx
	callq	_poly1305_auth
	movq	_POLY1305_TAGLEN@GOTPCREL(%rip), %rax
	movl	(%rax), %edx
	movq	%rbx, %rdi
	movq	%r12, %rbx
	movq	-128(%rbp), %rsi                ## 8-byte Reload
	callq	_timingsafe_bcmp
	testq	%rax, %rax
	je	LBB0_3
## %bb.2:
	movq	_SSH_ERR_MAC_INVALID@GOTPCREL(%rip), %rax
	movl	(%rax), %r13d
LBB0_7:
	movq	-168(%rbp), %rax                ## 8-byte Reload
	leal	(,%rax,4), %esi
	movq	-160(%rbp), %rdi                ## 8-byte Reload
	callq	_explicit_bzero
	leaq	-80(%rbp), %rdi
	movl	$32, %esi
	callq	_explicit_bzero
	movq	%r15, %rdi
	movl	-116(%rbp), %esi                ## 4-byte Reload
	callq	_explicit_bzero
	movq	-176(%rbp), %rsp                ## 8-byte Reload
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	cmpq	-48(%rbp), %rax
	jne	LBB0_9
## %bb.8:
	movl	%r13d, %eax
	leaq	-40(%rbp), %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_9:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.section	__TEXT,__const
	.p2align	4                               ## @__const.chachapoly_crypt.one
l___const.chachapoly_crypt.one:
	.long	1                               ## 0x1
	.long	0                               ## 0x0
	.long	0                               ## 0x0
	.long	0                               ## 0x0
	.long	0                               ## 0x0
	.long	0                               ## 0x0
	.long	0                               ## 0x0
	.long	0                               ## 0x0

	.comm	_POLY1305_TAGLEN,4,2            ## @POLY1305_TAGLEN
	.comm	_POLY1305_KEYLEN,4,2            ## @POLY1305_KEYLEN
	.comm	_SSH_ERR_INTERNAL_ERROR,4,2     ## @SSH_ERR_INTERNAL_ERROR
	.comm	_SSH_ERR_MAC_INVALID,4,2        ## @SSH_ERR_MAC_INVALID
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_chachapoly_crypt               ; -- Begin function chachapoly_crypt
	.p2align	2
_chachapoly_crypt:                      ; @chachapoly_crypt
	.cfi_startproc
; %bb.0:
	stp	x28, x27, [sp, #-96]!           ; 16-byte Folded Spill
	.cfi_def_cfa_offset 96
	stp	x26, x25, [sp, #16]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #32]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #48]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #64]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #80]             ; 16-byte Folded Spill
	add	x29, sp, #80
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	sub	sp, sp, #96
	mov	x23, x7
	mov	x21, x5
	mov	x22, x4
	mov	x27, x3
	mov	x20, x2
	mov	x28, x1
	mov	x26, x0
	mov	x8, sp
	stur	x8, [x29, #-168]                ; 8-byte Folded Spill
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-88]
Lloh3:
	adrp	x8, l___const.chachapoly_crypt.one@PAGE
Lloh4:
	add	x8, x8, l___const.chachapoly_crypt.one@PAGEOFF
	ldp	q0, q1, [x8]
	stp	q0, q1, [x29, #-160]
Lloh5:
	adrp	x8, _POLY1305_TAGLEN@GOTPAGE
Lloh6:
	ldr	x8, [x8, _POLY1305_TAGLEN@GOTPAGEOFF]
Lloh7:
	ldr	w8, [x8]
	stur	x8, [x29, #-176]                ; 8-byte Folded Spill
	lsl	x8, x8, #2
	mov	x9, x8
Lloh8:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh9:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x19, x9, x8
	mov	sp, x19
Lloh10:
	adrp	x8, _POLY1305_KEYLEN@GOTPAGE
Lloh11:
	ldr	x8, [x8, _POLY1305_KEYLEN@GOTPAGEOFF]
Lloh12:
	ldr	w12, [x8]
	lsl	x8, x12, #2
	mov	x9, x8
Lloh13:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh14:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x24, x9, x8
	mov	sp, x24
	lsl	w25, w12, #2
	mov	x0, x24
	mov	w1, #0
	mov	x2, x25
	bl	_memset
	sub	x0, x29, #120
	mov	x1, x28
	bl	_POKE_U64
	sub	x1, x29, #120
	mov	x0, x26
	mov	x2, #0
	bl	_chacha_ivsetup
	mov	x0, x26
	mov	x1, x24
	mov	x2, x24
	mov	x3, x25
	bl	_chacha_encrypt_bytes
	cbz	w23, LBB0_6
LBB0_1:
	cbz	w21, LBB0_3
; %bb.2:
	add	x28, x26, #4
	sub	x1, x29, #120
	mov	x0, x28
	mov	x2, #0
	bl	_chacha_ivsetup
	mov	x0, x28
	mov	x1, x27
	mov	x2, x20
	mov	x3, x21
	bl	_chacha_encrypt_bytes
LBB0_3:
	sub	x1, x29, #120
	sub	x2, x29, #160
	mov	x0, x26
	bl	_chacha_ivsetup
	sbfiz	x8, x21, #2, #32
	add	x1, x27, x8
	add	x27, x20, x8
	mov	x0, x26
	mov	x2, x27
	mov	x3, x22
	bl	_chacha_encrypt_bytes
	cbz	w23, LBB0_5
; %bb.4:
	add	x0, x27, w22, sxtw #2
	add	w2, w21, w22
	mov	x1, x20
	mov	x3, x24
	bl	_poly1305_auth
LBB0_5:
	mov	w20, #0
	b	LBB0_8
LBB0_6:
	add	x8, x27, w21, sxtw #2
	add	x28, x8, w22, sxtw #2
	add	w2, w21, w22
	mov	x0, x19
	mov	x1, x27
	mov	x3, x24
	bl	_poly1305_auth
Lloh15:
	adrp	x8, _POLY1305_TAGLEN@GOTPAGE
Lloh16:
	ldr	x8, [x8, _POLY1305_TAGLEN@GOTPAGEOFF]
Lloh17:
	ldr	w2, [x8]
	mov	x0, x19
	mov	x1, x28
	bl	_timingsafe_bcmp
	cbz	x0, LBB0_1
; %bb.7:
Lloh18:
	adrp	x8, _SSH_ERR_MAC_INVALID@GOTPAGE
Lloh19:
	ldr	x8, [x8, _SSH_ERR_MAC_INVALID@GOTPAGEOFF]
Lloh20:
	ldr	w20, [x8]
LBB0_8:
	ldur	x8, [x29, #-176]                ; 8-byte Folded Reload
	lsl	w1, w8, #2
	mov	x0, x19
	bl	_explicit_bzero
	sub	x0, x29, #120
	mov	w1, #32
	bl	_explicit_bzero
	mov	x0, x24
	mov	x1, x25
	bl	_explicit_bzero
	ldur	x8, [x29, #-168]                ; 8-byte Folded Reload
	mov	sp, x8
	ldur	x8, [x29, #-88]
Lloh21:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh22:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh23:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_10
; %bb.9:
	mov	x0, x20
	sub	sp, x29, #80
	ldp	x29, x30, [sp, #80]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #64]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #48]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #32]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #16]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp], #96             ; 16-byte Folded Reload
	ret
LBB0_10:
	bl	___stack_chk_fail
	.loh AdrpLdrGot	Lloh13, Lloh14
	.loh AdrpLdrGotLdr	Lloh10, Lloh11, Lloh12
	.loh AdrpLdrGot	Lloh8, Lloh9
	.loh AdrpLdrGotLdr	Lloh5, Lloh6, Lloh7
	.loh AdrpAdd	Lloh3, Lloh4
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdrGotLdr	Lloh15, Lloh16, Lloh17
	.loh AdrpLdrGotLdr	Lloh18, Lloh19, Lloh20
	.loh AdrpLdrGotLdr	Lloh21, Lloh22, Lloh23
	.cfi_endproc
                                        ; -- End function
	.section	__TEXT,__const
	.p2align	2                               ; @__const.chachapoly_crypt.one
l___const.chachapoly_crypt.one:
	.long	1                               ; 0x1
	.long	0                               ; 0x0
	.long	0                               ; 0x0
	.long	0                               ; 0x0
	.long	0                               ; 0x0
	.long	0                               ; 0x0
	.long	0                               ; 0x0
	.long	0                               ; 0x0

	.comm	_POLY1305_TAGLEN,4,2            ; @POLY1305_TAGLEN
	.comm	_POLY1305_KEYLEN,4,2            ; @POLY1305_KEYLEN
	.comm	_SSH_ERR_INTERNAL_ERROR,4,2     ; @SSH_ERR_INTERNAL_ERROR
	.comm	_SSH_ERR_MAC_INVALID,4,2        ; @SSH_ERR_MAC_INVALID
.subsections_via_symbols
