	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.globl	_CRYPTO_ccm128_aad              ## -- Begin function CRYPTO_ccm128_aad
	.p2align	4, 0x90
_CRYPTO_ccm128_aad:                     ## @CRYPTO_ccm128_aad
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	pushq	%rax
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	testq	%rdx, %rdx
	je	LBB0_25
## %bb.1:
	movq	%rdx, %r15
	movq	%rsi, %r13
	movq	%rdi, %r14
	movq	24(%rdi), %r12
	movq	16(%rdi), %rdi
	orl	$64, (%rdi)
	movq	8(%r14), %rsi
	movl	4(%r14), %edx
	callq	*%r12
	incl	(%r14)
	cmpq	$65279, %r15                    ## imm = 0xFEFF
	ja	LBB0_3
## %bb.2:
	movq	%r15, %rax
	shrq	$8, %rax
	movq	8(%r14), %rcx
	xorl	%eax, (%rcx)
	addq	$4, %rcx
	movl	$2, %eax
	jmp	LBB0_6
LBB0_3:
	movq	8(%r14), %rcx
	xorl	$255, (%rcx)
	movq	%r15, %rdx
	shrq	$32, %rdx
	movl	4(%rcx), %eax
	testq	%rdx, %rdx
	je	LBB0_5
## %bb.4:
	xorl	$255, %eax
	movl	%eax, 4(%rcx)
	movq	%r15, %xmm0
	pshufd	$68, %xmm0, %xmm1               ## xmm1 = xmm0[0,1,0,1]
	movdqa	%xmm0, %xmm2
	psrlq	$40, %xmm2
	movdqa	%xmm1, %xmm3
	psrlq	$32, %xmm3
	pblendw	$15, %xmm2, %xmm3               ## xmm3 = xmm2[0,1,2,3],xmm3[4,5,6,7]
	psrlq	$56, %xmm0
	psrlq	$48, %xmm1
	pblendw	$15, %xmm0, %xmm1               ## xmm1 = xmm0[0,1,2,3],xmm1[4,5,6,7]
	shufps	$136, %xmm3, %xmm1              ## xmm1 = xmm1[0,2],xmm3[0,2]
	movups	8(%rcx), %xmm0
	xorps	%xmm1, %xmm0
	movups	%xmm0, 8(%rcx)
	movq	%r15, %rax
	shrq	$24, %rax
	xorl	%eax, 24(%rcx)
	movq	%r15, %rax
	shrq	$16, %rax
	xorl	%eax, 28(%rcx)
	movq	%r15, %rax
	shrq	$8, %rax
	xorl	%eax, 32(%rcx)
	addq	$36, %rcx
	movl	$10, %eax
	jmp	LBB0_6
LBB0_5:
	xorl	$254, %eax
	movl	%eax, 4(%rcx)
	movq	%r15, %rax
	shrq	$24, %rax
	xorl	%eax, 8(%rcx)
	movq	%r15, %rax
	shrq	$16, %rax
	xorl	%eax, 12(%rcx)
	movq	%r15, %rax
	shrq	$8, %rax
	xorl	%eax, 16(%rcx)
	addq	$20, %rcx
	movl	$6, %eax
LBB0_6:
	xorl	%r15d, (%rcx)
	jmp	LBB0_7
	.p2align	4, 0x90
LBB0_8:                                 ##   in Loop: Header=BB0_7 Depth=1
	xorl	%r15d, %r15d
	xorl	%ebx, %ebx
LBB0_24:                                ##   in Loop: Header=BB0_7 Depth=1
	movl	4(%r14), %edx
	movq	%rdi, %rsi
	callq	*%r12
	incl	(%r14)
	movl	$0, %eax
	testb	%bl, %bl
	je	LBB0_25
LBB0_7:                                 ## =>This Loop Header: Depth=1
                                        ##     Child Loop BB0_15 Depth 2
                                        ##     Child Loop BB0_22 Depth 2
	movq	8(%r14), %rdi
	testq	%r15, %r15
	je	LBB0_8
## %bb.9:                               ##   in Loop: Header=BB0_7 Depth=1
	movl	$15, %edx
	subq	%rax, %rdx
	leaq	-1(%r15), %rsi
	cmpq	%rdx, %rsi
	movq	%rdx, %rcx
	cmovbq	%rsi, %rcx
	cmpq	$3, %rcx
	jb	LBB0_21
## %bb.10:                              ##   in Loop: Header=BB0_7 Depth=1
	leaq	(%rdi,%rax,4), %rbx
	cmpq	%rdx, %rsi
	cmovbq	%rsi, %rdx
	leaq	(%rdx,%r13), %rsi
	incq	%rsi
	cmpq	%rbx, %rsi
	jbe	LBB0_12
## %bb.11:                              ##   in Loop: Header=BB0_7 Depth=1
	addq	%rax, %rdx
	leaq	(%rdi,%rdx,4), %rdx
	addq	$4, %rdx
	cmpq	%rdx, %r13
	jb	LBB0_21
LBB0_12:                                ##   in Loop: Header=BB0_7 Depth=1
	incq	%rcx
	movq	%rcx, %r9
	andq	$-4, %r9
	leaq	-3(%r15), %r8
	leaq	-4(%r9), %rdx
	movq	%rdx, %r10
	shrq	$2, %r10
	incq	%r10
	testq	%rdx, %rdx
	je	LBB0_13
## %bb.14:                              ##   in Loop: Header=BB0_7 Depth=1
	movq	%r10, %rsi
	andq	$-2, %rsi
	leaq	(%rdi,%rax,4), %rbx
	addq	$16, %rbx
	xorl	%edx, %edx
	.p2align	4, 0x90
LBB0_15:                                ##   Parent Loop BB0_7 Depth=1
                                        ## =>  This Inner Loop Header: Depth=2
	pmovzxbd	(%r13,%rdx), %xmm0              ## xmm0 = mem[0],zero,zero,zero,mem[1],zero,zero,zero,mem[2],zero,zero,zero,mem[3],zero,zero,zero
	movdqu	-16(%rbx,%rdx,4), %xmm1
	pxor	%xmm0, %xmm1
	movdqu	(%rbx,%rdx,4), %xmm0
	movdqu	%xmm1, -16(%rbx,%rdx,4)
	pmovzxbd	4(%r13,%rdx), %xmm1             ## xmm1 = mem[0],zero,zero,zero,mem[1],zero,zero,zero,mem[2],zero,zero,zero,mem[3],zero,zero,zero
	pxor	%xmm0, %xmm1
	movdqu	%xmm1, (%rbx,%rdx,4)
	addq	$8, %rdx
	addq	$-2, %rsi
	jne	LBB0_15
## %bb.16:                              ##   in Loop: Header=BB0_7 Depth=1
	movq	%r15, %rbx
	subq	%rdx, %rbx
	incq	%rbx
	subq	%rdx, %r8
	testb	$1, %r10b
	je	LBB0_19
LBB0_18:                                ##   in Loop: Header=BB0_7 Depth=1
	pmovzxbd	(%r13,%rdx), %xmm0              ## xmm0 = mem[0],zero,zero,zero,mem[1],zero,zero,zero,mem[2],zero,zero,zero,mem[3],zero,zero,zero
	addq	%rax, %rdx
	movdqu	(%rdi,%rdx,4), %xmm1
	pxor	%xmm0, %xmm1
	movdqu	%xmm1, (%rdi,%rdx,4)
	movq	%r8, %rbx
LBB0_19:                                ##   in Loop: Header=BB0_7 Depth=1
	addq	%r9, %r13
	subq	%r9, %r15
	cmpq	$1, %rbx
	setne	%bl
	cmpq	%r9, %rcx
	je	LBB0_24
## %bb.20:                              ##   in Loop: Header=BB0_7 Depth=1
	addq	%r9, %rax
	.p2align	4, 0x90
LBB0_21:                                ##   in Loop: Header=BB0_7 Depth=1
	movq	%r15, %rcx
	.p2align	4, 0x90
LBB0_22:                                ##   Parent Loop BB0_7 Depth=1
                                        ## =>  This Inner Loop Header: Depth=2
	movzbl	(%r13), %edx
	xorl	%edx, (%rdi,%rax,4)
	incq	%r13
	leaq	-1(%rcx), %r15
	cmpq	$1, %rcx
	setne	%bl
	cmpq	$14, %rax
	ja	LBB0_24
## %bb.23:                              ##   in Loop: Header=BB0_22 Depth=2
	incq	%rax
	cmpq	$1, %rcx
	movq	%r15, %rcx
	jne	LBB0_22
	jmp	LBB0_24
LBB0_13:                                ##   in Loop: Header=BB0_7 Depth=1
                                        ## implicit-def: $rbx
	xorl	%edx, %edx
	testb	$1, %r10b
	jne	LBB0_18
	jmp	LBB0_19
LBB0_25:
	addq	$8, %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
	.cfi_endproc
                                        ## -- End function
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.section	__TEXT,__literal16,16byte_literals
	.p2align	4                               ; -- Begin function CRYPTO_ccm128_aad
lCPI0_0:
	.quad	-24                             ; 0xffffffffffffffe8
	.quad	-16                             ; 0xfffffffffffffff0
lCPI0_1:
	.quad	-40                             ; 0xffffffffffffffd8
	.quad	-32                             ; 0xffffffffffffffe0
lCPI0_2:
	.quad	-56                             ; 0xffffffffffffffc8
	.quad	-48                             ; 0xffffffffffffffd0
lCPI0_3:
	.byte	8                               ; 0x8
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	9                               ; 0x9
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	10                              ; 0xa
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	11                              ; 0xb
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
lCPI0_4:
	.byte	12                              ; 0xc
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	13                              ; 0xd
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	14                              ; 0xe
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	15                              ; 0xf
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
lCPI0_5:
	.byte	0                               ; 0x0
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	1                               ; 0x1
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	2                               ; 0x2
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	3                               ; 0x3
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
lCPI0_6:
	.byte	4                               ; 0x4
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	5                               ; 0x5
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	6                               ; 0x6
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	7                               ; 0x7
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.byte	255                             ; 0xff
	.section	__TEXT,__text,regular,pure_instructions
	.globl	_CRYPTO_ccm128_aad
	.p2align	2
_CRYPTO_ccm128_aad:                     ; @CRYPTO_ccm128_aad
	.cfi_startproc
; %bb.0:
	sub	sp, sp, #144
	.cfi_def_cfa_offset 144
	stp	x26, x25, [sp, #64]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #80]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #96]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #112]            ; 16-byte Folded Spill
	stp	x29, x30, [sp, #128]            ; 16-byte Folded Spill
	add	x29, sp, #128
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	cbz	x2, LBB0_19
; %bb.1:
	mov	x21, x2
	mov	x20, x1
	mov	x19, x0
	ldp	x0, x22, [x0, #16]
	ldr	x1, [x19, #8]
	ldr	w8, [x0]
	orr	w8, w8, #0x40
	str	w8, [x0]
	ldr	w2, [x19, #4]
	blr	x22
	ldr	w8, [x19]
	add	w8, w8, #1
	str	w8, [x19]
	lsr	x8, x21, #8
	cmp	x8, #254
	b.hi	LBB0_3
; %bb.2:
	ldr	x9, [x19, #8]
	ldr	w10, [x9]
	eor	w8, w10, w8
	str	w8, [x9], #4
	mov	w8, #2
	b	LBB0_6
LBB0_3:
	ldr	x9, [x19, #8]
	ldp	w11, w10, [x9]
	eor	w11, w11, #0xff
	str	w11, [x9]
	lsr	x11, x21, #32
	cbz	x11, LBB0_5
; %bb.4:
	eor	w10, w10, #0xff
	str	w10, [x9, #4]
Lloh0:
	adrp	x10, lCPI0_1@PAGE
Lloh1:
	ldr	q0, [x10, lCPI0_1@PAGEOFF]
	dup.2d	v1, x21
	ushl.2d	v0, v1, v0
Lloh2:
	adrp	x10, lCPI0_2@PAGE
Lloh3:
	ldr	q2, [x10, lCPI0_2@PAGEOFF]
	ushl.2d	v2, v1, v2
	uzp1.4s	v0, v2, v0
	ldur	q2, [x9, #8]
	eor.16b	v0, v2, v0
	stur	q0, [x9, #8]
Lloh4:
	adrp	x10, lCPI0_0@PAGE
Lloh5:
	ldr	q0, [x10, lCPI0_0@PAGEOFF]
	ushl.2d	v0, v1, v0
	xtn.2s	v0, v0
	ldr	d1, [x9, #24]
	eor.8b	v0, v1, v0
	str	d0, [x9, #24]
	ldr	w10, [x9, #32]
	eor	w8, w10, w8
	str	w8, [x9, #32]
	add	x9, x9, #36
	mov	w8, #10
	b	LBB0_6
LBB0_5:
	eor	w10, w10, #0xfe
	str	w10, [x9, #4]
	dup.2d	v0, x21
Lloh6:
	adrp	x10, lCPI0_0@PAGE
Lloh7:
	ldr	q1, [x10, lCPI0_0@PAGEOFF]
	ushl.2d	v0, v0, v1
	xtn.2s	v0, v0
	ldr	d1, [x9, #8]
	eor.8b	v0, v1, v0
	str	d0, [x9, #8]
	ldr	w10, [x9, #16]
	eor	w8, w10, w8
	str	w8, [x9, #16]
	add	x9, x9, #20
	mov	w8, #6
LBB0_6:
	ldr	w10, [x9]
	eor	w10, w10, w21
	str	w10, [x9]
	mov	w23, #15
Lloh8:
	adrp	x9, lCPI0_3@PAGE
Lloh9:
	ldr	q16, [x9, lCPI0_3@PAGEOFF]
Lloh10:
	adrp	x9, lCPI0_4@PAGE
Lloh11:
	ldr	q17, [x9, lCPI0_4@PAGEOFF]
Lloh12:
	adrp	x9, lCPI0_5@PAGE
Lloh13:
	ldr	q18, [x9, lCPI0_5@PAGEOFF]
Lloh14:
	adrp	x9, lCPI0_6@PAGE
Lloh15:
	ldr	q19, [x9, lCPI0_6@PAGEOFF]
	stp	q17, q16, [sp, #32]             ; 32-byte Folded Spill
	stp	q19, q18, [sp]                  ; 32-byte Folded Spill
	b	LBB0_9
LBB0_7:                                 ;   in Loop: Header=BB0_9 Depth=1
	mov	x24, #0
	mov	w25, #0
LBB0_8:                                 ;   in Loop: Header=BB0_9 Depth=1
	ldr	w2, [x19, #4]
	mov	x1, x0
	blr	x22
	mov	x8, #0
	ldr	w9, [x19]
	add	w9, w9, #1
	str	w9, [x19]
	mov	x21, x24
	ldp	q17, q16, [sp, #32]             ; 32-byte Folded Reload
	ldp	q19, q18, [sp]                  ; 32-byte Folded Reload
	tbz	w25, #0, LBB0_19
LBB0_9:                                 ; =>This Loop Header: Depth=1
                                        ;     Child Loop BB0_14 Depth 2
                                        ;     Child Loop BB0_17 Depth 2
	ldr	x0, [x19, #8]
	cbz	x21, LBB0_7
; %bb.10:                               ;   in Loop: Header=BB0_9 Depth=1
	sub	x11, x21, #1
	sub	x9, x23, x8
	cmp	x11, x9
	csel	x10, x11, x9, lo
	cmp	x10, #15
	b.lo	LBB0_17
; %bb.11:                               ;   in Loop: Header=BB0_9 Depth=1
	add	x9, x0, x8, lsl #2
	sub	x12, x23, x8
	cmp	x11, x12
	csel	x11, x11, x12, lo
	add	x12, x20, x11
	add	x12, x12, #1
	cmp	x12, x9
	b.ls	LBB0_13
; %bb.12:                               ;   in Loop: Header=BB0_9 Depth=1
	add	x11, x8, x11
	add	x11, x0, x11, lsl #2
	add	x11, x11, #4
	cmp	x20, x11
	b.lo	LBB0_17
LBB0_13:                                ;   in Loop: Header=BB0_9 Depth=1
	add	x11, x10, #1
	and	x12, x11, #0xfffffffffffffff0
	add	x8, x8, x12
	add	x10, x20, x12
	sub	x24, x21, x12
	mov	x13, x12
LBB0_14:                                ;   Parent Loop BB0_9 Depth=1
                                        ; =>  This Inner Loop Header: Depth=2
	ldr	q0, [x20], #16
	tbl.16b	v1, { v0 }, v16
	tbl.16b	v2, { v0 }, v17
	tbl.16b	v3, { v0 }, v18
	tbl.16b	v0, { v0 }, v19
	ldp	q4, q5, [x9, #32]
	ldp	q6, q7, [x9]
	eor.16b	v0, v7, v0
	eor.16b	v3, v6, v3
	eor.16b	v2, v5, v2
	eor.16b	v1, v4, v1
	stp	q1, q2, [x9, #32]
	stp	q3, q0, [x9], #64
	sub	x21, x21, #16
	sub	x13, x13, #16
	cbnz	x13, LBB0_14
; %bb.15:                               ;   in Loop: Header=BB0_9 Depth=1
	cmp	x21, #0
	cset	w25, ne
	mov	x20, x10
	cmp	x11, x12
	b.eq	LBB0_8
; %bb.16:                               ;   in Loop: Header=BB0_9 Depth=1
	mov	x21, x24
LBB0_17:                                ;   Parent Loop BB0_9 Depth=1
                                        ; =>  This Inner Loop Header: Depth=2
	ldrb	w9, [x20], #1
	lsl	x10, x8, #2
	ldr	w11, [x0, x10]
	eor	w9, w11, w9
	str	w9, [x0, x10]
	subs	x24, x21, #1
	cset	w25, ne
	cmp	x8, #14
	b.hi	LBB0_8
; %bb.18:                               ;   in Loop: Header=BB0_17 Depth=2
	add	x8, x8, #1
	cmp	x21, #1
	mov	x21, x24
	b.ne	LBB0_17
	b	LBB0_8
LBB0_19:
	ldp	x29, x30, [sp, #128]            ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #112]            ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #96]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #80]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #64]             ; 16-byte Folded Reload
	add	sp, sp, #144
	ret
	.loh AdrpLdr	Lloh4, Lloh5
	.loh AdrpAdrp	Lloh2, Lloh4
	.loh AdrpLdr	Lloh2, Lloh3
	.loh AdrpAdrp	Lloh0, Lloh2
	.loh AdrpLdr	Lloh0, Lloh1
	.loh AdrpLdr	Lloh6, Lloh7
	.loh AdrpLdr	Lloh14, Lloh15
	.loh AdrpAdrp	Lloh12, Lloh14
	.loh AdrpLdr	Lloh12, Lloh13
	.loh AdrpAdrp	Lloh10, Lloh12
	.loh AdrpLdr	Lloh10, Lloh11
	.loh AdrpAdrp	Lloh8, Lloh10
	.loh AdrpLdr	Lloh8, Lloh9
	.cfi_endproc
                                        ; -- End function
.subsections_via_symbols
