	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_kexc25519_shared_key           ## -- Begin function kexc25519_shared_key
	.p2align	4, 0x90
_kexc25519_shared_key:                  ## @kexc25519_shared_key
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$24, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%rdx, %r14
	movq	%rsi, %r15
	movq	%rdi, -56(%rbp)                 ## 8-byte Spill
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	movq	%rax, -48(%rbp)
	movq	_CURVE25519_SIZE@GOTPCREL(%rip), %r12
	movl	(%r12), %ebx
	movq	%rbx, %rax
	shlq	$2, %rax
	callq	____chkstk_darwin
	addq	$15, %rax
	andq	$-16, %rax
	subq	%rax, %rsp
	movq	%rsp, %r13
	movq	%r13, %rdi
	movl	%ebx, %esi
	callq	_explicit_bzero
	movl	(%r12), %edx
	movq	%r15, %rdi
	movq	%r13, %rsi
	callq	_timingsafe_bcmp
	testq	%rax, %rax
	je	LBB0_1
## %bb.2:
	movq	%r13, %rdi
	movq	-56(%rbp), %rsi                 ## 8-byte Reload
	movq	%r15, %rdx
	callq	_crypto_scalarmult_curve25519
	movq	%r14, %rdi
	callq	_sshbuf_reset
	movl	(%r12), %edx
	movq	%r14, %rdi
	movq	%r13, %rsi
	callq	_sshbuf_put_bignum2_bytes
	movl	%eax, %r14d
	movl	(%r12), %esi
	movq	%r13, %rdi
	callq	_explicit_bzero
	jmp	LBB0_3
LBB0_1:
	movq	_SSH_ERR_KEY_INVALID_EC_VALUE@GOTPCREL(%rip), %rax
	movl	(%rax), %r14d
LBB0_3:
	movq	___stack_chk_guard@GOTPCREL(%rip), %rax
	movq	(%rax), %rax
	cmpq	-48(%rbp), %rax
	jne	LBB0_5
## %bb.4:
	movl	%r14d, %eax
	leaq	-40(%rbp), %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
LBB0_5:
	callq	___stack_chk_fail
	.cfi_endproc
                                        ## -- End function
	.comm	_CURVE25519_SIZE,4,2            ## @CURVE25519_SIZE
	.comm	_SSH_ERR_KEY_INVALID_EC_VALUE,4,2 ## @SSH_ERR_KEY_INVALID_EC_VALUE
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_kexc25519_shared_key           ; -- Begin function kexc25519_shared_key
	.p2align	2
_kexc25519_shared_key:                  ; @kexc25519_shared_key
	.cfi_startproc
; %bb.0:
	stp	x24, x23, [sp, #-64]!           ; 16-byte Folded Spill
	.cfi_def_cfa_offset 64
	stp	x22, x21, [sp, #16]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #32]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #48]             ; 16-byte Folded Spill
	add	x29, sp, #48
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	sub	sp, sp, #16
	mov	x19, x2
	mov	x21, x1
	mov	x22, x0
Lloh0:
	adrp	x8, ___stack_chk_guard@GOTPAGE
Lloh1:
	ldr	x8, [x8, ___stack_chk_guard@GOTPAGEOFF]
Lloh2:
	ldr	x8, [x8]
	stur	x8, [x29, #-56]
Lloh3:
	adrp	x23, _CURVE25519_SIZE@GOTPAGE
Lloh4:
	ldr	x23, [x23, _CURVE25519_SIZE@GOTPAGEOFF]
	ldr	w1, [x23]
	lsl	x8, x1, #2
	mov	x9, x8
Lloh5:
	adrp	x16, ___chkstk_darwin@GOTPAGE
Lloh6:
	ldr	x16, [x16, ___chkstk_darwin@GOTPAGEOFF]
	blr	x16
	mov	x9, sp
	add	x8, x8, #15
	and	x8, x8, #0x7fffffff0
	sub	x20, x9, x8
	mov	sp, x20
	mov	x0, x20
                                        ; kill: def $w1 killed $w1 killed $x1
	bl	_explicit_bzero
	ldr	w2, [x23]
	mov	x0, x21
	mov	x1, x20
	bl	_timingsafe_bcmp
	cbz	x0, LBB0_2
; %bb.1:
	mov	x0, x20
	mov	x1, x22
	mov	x2, x21
	bl	_crypto_scalarmult_curve25519
	mov	x0, x19
	bl	_sshbuf_reset
	ldr	w2, [x23]
	mov	x0, x19
	mov	x1, x20
	bl	_sshbuf_put_bignum2_bytes
	mov	x19, x0
	ldr	w1, [x23]
	mov	x0, x20
	bl	_explicit_bzero
	b	LBB0_3
LBB0_2:
Lloh7:
	adrp	x8, _SSH_ERR_KEY_INVALID_EC_VALUE@GOTPAGE
Lloh8:
	ldr	x8, [x8, _SSH_ERR_KEY_INVALID_EC_VALUE@GOTPAGEOFF]
Lloh9:
	ldr	w19, [x8]
LBB0_3:
	ldur	x8, [x29, #-56]
Lloh10:
	adrp	x9, ___stack_chk_guard@GOTPAGE
Lloh11:
	ldr	x9, [x9, ___stack_chk_guard@GOTPAGEOFF]
Lloh12:
	ldr	x9, [x9]
	cmp	x9, x8
	b.ne	LBB0_5
; %bb.4:
	mov	x0, x19
	sub	sp, x29, #48
	ldp	x29, x30, [sp, #48]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #32]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #16]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp], #64             ; 16-byte Folded Reload
	ret
LBB0_5:
	bl	___stack_chk_fail
	.loh AdrpLdrGot	Lloh5, Lloh6
	.loh AdrpLdrGot	Lloh3, Lloh4
	.loh AdrpLdrGotLdr	Lloh0, Lloh1, Lloh2
	.loh AdrpLdrGotLdr	Lloh7, Lloh8, Lloh9
	.loh AdrpLdrGotLdr	Lloh10, Lloh11, Lloh12
	.cfi_endproc
                                        ; -- End function
	.comm	_CURVE25519_SIZE,4,2            ; @CURVE25519_SIZE
	.comm	_SSH_ERR_KEY_INVALID_EC_VALUE,4,2 ; @SSH_ERR_KEY_INVALID_EC_VALUE
.subsections_via_symbols
