	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	4, 0x90                         ## -- Begin function sae_test_pwd_seed_ecc
_sae_test_pwd_seed_ecc:                 ## @sae_test_pwd_seed_ecc
	.cfi_startproc
## %bb.0:
	pushq	%rbp
	.cfi_def_cfa_offset 16
	.cfi_offset %rbp, -16
	movq	%rsp, %rbp
	.cfi_def_cfa_register %rbp
	pushq	%r15
	pushq	%r14
	pushq	%r13
	pushq	%r12
	pushq	%rbx
	subq	$24, %rsp
	.cfi_offset %rbx, -56
	.cfi_offset %r12, -48
	.cfi_offset %r13, -40
	.cfi_offset %r14, -32
	.cfi_offset %r15, -24
	movq	%r9, %r13
	movq	%r8, -56(%rbp)                  ## 8-byte Spill
	movq	%rcx, -48(%rbp)                 ## 8-byte Spill
	movq	%rdx, %r14
	movq	%rsi, %rbx
	movq	%rdi, %r12
	movq	_MSG_DEBUG@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	movq	_SHA256_MAC_LEN@GOTPCREL(%rip), %rax
	movl	(%rax), %ecx
	leaq	L_.str(%rip), %rsi
	movq	%rbx, %rdx
	callq	_wpa_hexdump_key
	movq	(%r12), %rax
	movl	(%rax), %edi
	callq	_crypto_ec_prime_len_bits
	movq	%rax, %r15
	movq	_SHA256_MAC_LEN@GOTPCREL(%rip), %rax
	movl	(%rax), %esi
	movq	(%r12), %rax
	movl	4(%rax), %r8d
	movq	%r15, (%rsp)
	leaq	L_.str.1(%rip), %rdx
	movq	%rbx, %rdi
	movq	%r14, %rcx
	movq	%r13, %r9
	callq	_sha256_prf_bits
	movl	$-1, %ebx
	testq	%rax, %rax
	js	LBB0_7
## %bb.1:
	andq	$7, %r15
	je	LBB0_3
## %bb.2:
	movq	(%r12), %rax
	movl	4(%rax), %esi
	movl	$8, %edx
	subl	%r15d, %edx
	movq	%r13, %rdi
	callq	_buf_shift_right
LBB0_3:
	movq	_MSG_DEBUG@GOTPCREL(%rip), %rax
	movl	(%rax), %edi
	movq	(%r12), %rax
	movl	4(%rax), %ecx
	leaq	L_.str.2(%rip), %rsi
	movq	%r13, %rdx
	callq	_wpa_hexdump_key
	movq	(%r12), %rax
	movl	4(%rax), %edx
	movq	%r13, %rdi
	movq	%r14, %rsi
	callq	_const_time_memcmp
	movl	%eax, %edi
	callq	_const_time_fill_msb
	movl	%eax, %r14d
	movq	(%r12), %rax
	movl	4(%rax), %esi
	movq	%r13, %rdi
	callq	_crypto_bignum_init_set
	testq	%rax, %rax
	je	LBB0_4
## %bb.5:
	movq	%rax, %rbx
	movq	(%r12), %rax
	movl	(%rax), %edi
	movq	%rbx, %rsi
	callq	_crypto_ec_point_compute_y_sqr
	movq	%rax, %r15
	movq	%rbx, %rdi
	movl	$1, %esi
	callq	_crypto_bignum_deinit
	testq	%r15, %r15
	movl	$-1, %ebx
	je	LBB0_7
## %bb.6:
	movq	(%r12), %rax
	movl	(%rax), %edi
	movq	-48(%rbp), %rsi                 ## 8-byte Reload
	movq	-56(%rbp), %rdx                 ## 8-byte Reload
	movq	%r15, %rcx
	callq	_dragonfly_is_quadratic_residue_blind
	movl	%eax, %ebx
	movq	%r15, %rdi
	movl	$1, %esi
	callq	_crypto_bignum_deinit
	testl	%ebx, %ebx
	js	LBB0_7
## %bb.8:
	movl	%r14d, %edi
	movl	%ebx, %esi
	xorl	%edx, %edx
	addq	$24, %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	jmp	_const_time_select_int          ## TAILCALL
LBB0_4:
	movl	$-1, %ebx
LBB0_7:
	movl	%ebx, %eax
	addq	$24, %rsp
	popq	%rbx
	popq	%r12
	popq	%r13
	popq	%r14
	popq	%r15
	popq	%rbp
	retq
	.cfi_endproc
                                        ## -- End function
	.comm	_MSG_DEBUG,4,2                  ## @MSG_DEBUG
	.section	__TEXT,__cstring,cstring_literals
L_.str:                                 ## @.str
	.asciz	"SAE: pwd-seed"

	.comm	_SHA256_MAC_LEN,4,2             ## @SHA256_MAC_LEN
L_.str.1:                               ## @.str.1
	.asciz	"SAE Hunting and Pecking"

L_.str.2:                               ## @.str.2
	.asciz	"SAE: pwd-value"

	.no_dead_strip	_sae_test_pwd_seed_ecc
.subsections_via_symbols

	.section	__TEXT,__text,regular,pure_instructions
	.build_version macos, 13, 0	sdk_version 13, 3
	.p2align	2                               ; -- Begin function sae_test_pwd_seed_ecc
_sae_test_pwd_seed_ecc:                 ; @sae_test_pwd_seed_ecc
	.cfi_startproc
; %bb.0:
	stp	x28, x27, [sp, #-96]!           ; 16-byte Folded Spill
	.cfi_def_cfa_offset 96
	stp	x26, x25, [sp, #16]             ; 16-byte Folded Spill
	stp	x24, x23, [sp, #32]             ; 16-byte Folded Spill
	stp	x22, x21, [sp, #48]             ; 16-byte Folded Spill
	stp	x20, x19, [sp, #64]             ; 16-byte Folded Spill
	stp	x29, x30, [sp, #80]             ; 16-byte Folded Spill
	add	x29, sp, #80
	.cfi_def_cfa w29, 16
	.cfi_offset w30, -8
	.cfi_offset w29, -16
	.cfi_offset w19, -24
	.cfi_offset w20, -32
	.cfi_offset w21, -40
	.cfi_offset w22, -48
	.cfi_offset w23, -56
	.cfi_offset w24, -64
	.cfi_offset w25, -72
	.cfi_offset w26, -80
	.cfi_offset w27, -88
	.cfi_offset w28, -96
	mov	x22, x5
	mov	x19, x4
	mov	x20, x3
	mov	x23, x2
	mov	x25, x1
	mov	x21, x0
Lloh0:
	adrp	x26, _MSG_DEBUG@GOTPAGE
Lloh1:
	ldr	x26, [x26, _MSG_DEBUG@GOTPAGEOFF]
	ldr	w0, [x26]
Lloh2:
	adrp	x27, _SHA256_MAC_LEN@GOTPAGE
Lloh3:
	ldr	x27, [x27, _SHA256_MAC_LEN@GOTPAGEOFF]
	ldr	w3, [x27]
Lloh4:
	adrp	x1, l_.str@PAGE
Lloh5:
	add	x1, x1, l_.str@PAGEOFF
	mov	x2, x25
	bl	_wpa_hexdump_key
	ldr	x8, [x21]
	ldr	w0, [x8]
	bl	_crypto_ec_prime_len_bits
	mov	x24, x0
	ldr	w1, [x27]
	ldr	x8, [x21]
	ldr	w4, [x8, #4]
Lloh6:
	adrp	x2, l_.str.1@PAGE
Lloh7:
	add	x2, x2, l_.str.1@PAGEOFF
	mov	x0, x25
	mov	x3, x23
	mov	x5, x22
	mov	x6, x24
	bl	_sha256_prf_bits
	tbnz	x0, #63, LBB0_7
; %bb.1:
	ands	x8, x24, #0x7
	b.eq	LBB0_3
; %bb.2:
	ldr	x9, [x21]
	ldr	w1, [x9, #4]
	mov	w9, #8
	sub	w2, w9, w8
	mov	x0, x22
	bl	_buf_shift_right
LBB0_3:
	ldr	w0, [x26]
	ldr	x8, [x21]
	ldr	w3, [x8, #4]
Lloh8:
	adrp	x1, l_.str.2@PAGE
Lloh9:
	add	x1, x1, l_.str.2@PAGEOFF
	mov	x2, x22
	bl	_wpa_hexdump_key
	ldr	x8, [x21]
	ldr	w2, [x8, #4]
	mov	x0, x22
	mov	x1, x23
	bl	_const_time_memcmp
	bl	_const_time_fill_msb
	mov	x23, x0
	ldr	x8, [x21]
	ldr	w1, [x8, #4]
	mov	x0, x22
	bl	_crypto_bignum_init_set
	cbz	x0, LBB0_7
; %bb.4:
	mov	x24, x0
	ldr	x8, [x21]
	ldr	w0, [x8]
	mov	x1, x24
	bl	_crypto_ec_point_compute_y_sqr
	mov	x22, x0
	mov	x0, x24
	mov	w1, #1
	bl	_crypto_bignum_deinit
	cbz	x22, LBB0_7
; %bb.5:
	ldr	x8, [x21]
	ldr	w0, [x8]
	mov	x1, x20
	mov	x2, x19
	mov	x3, x22
	bl	_dragonfly_is_quadratic_residue_blind
	mov	x19, x0
	mov	x0, x22
	mov	w1, #1
	bl	_crypto_bignum_deinit
	tbnz	w19, #31, LBB0_8
; %bb.6:
	mov	x0, x23
	mov	x1, x19
	mov	w2, #0
	ldp	x29, x30, [sp, #80]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #64]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #48]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #32]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #16]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp], #96             ; 16-byte Folded Reload
	b	_const_time_select_int
LBB0_7:
	mov	w19, #-1
LBB0_8:
	mov	x0, x19
	ldp	x29, x30, [sp, #80]             ; 16-byte Folded Reload
	ldp	x20, x19, [sp, #64]             ; 16-byte Folded Reload
	ldp	x22, x21, [sp, #48]             ; 16-byte Folded Reload
	ldp	x24, x23, [sp, #32]             ; 16-byte Folded Reload
	ldp	x26, x25, [sp, #16]             ; 16-byte Folded Reload
	ldp	x28, x27, [sp], #96             ; 16-byte Folded Reload
	ret
	.loh AdrpAdd	Lloh6, Lloh7
	.loh AdrpAdd	Lloh4, Lloh5
	.loh AdrpLdrGot	Lloh2, Lloh3
	.loh AdrpLdrGot	Lloh0, Lloh1
	.loh AdrpAdd	Lloh8, Lloh9
	.cfi_endproc
                                        ; -- End function
	.comm	_MSG_DEBUG,4,2                  ; @MSG_DEBUG
	.section	__TEXT,__cstring,cstring_literals
l_.str:                                 ; @.str
	.asciz	"SAE: pwd-seed"

	.comm	_SHA256_MAC_LEN,4,2             ; @SHA256_MAC_LEN
l_.str.1:                               ; @.str.1
	.asciz	"SAE Hunting and Pecking"

l_.str.2:                               ; @.str.2
	.asciz	"SAE: pwd-value"

	.no_dead_strip	_sae_test_pwd_seed_ecc
.subsections_via_symbols
