# Copyright (c) 2011-2016, Andy Polyakov <appro@openssl.org>

# All rights reserved.

#

# Redistribution and use in source and binary forms, with or without

# modification, are permitted provided that the following conditions

# are met:

# 

#     * Redistributions of source code must retain copyright notices,

#      this list of conditions and the following disclaimer.

#

#     * Redistributions in binary form must reproduce the above

#      copyright notice, this list of conditions and the following

#      disclaimer in the documentation and/or other materials

#      provided with the distribution.

#

#     * Neither the name of the Andy Polyakov nor the names of its

#      copyright holder and contributors may be used to endorse or

#      promote products derived from this software without specific

#      prior written permission.

#

# ALTERNATIVELY, provided that this notice is retained in full, this

# product may be distributed under the terms of the GNU General Public

# License (GPL), in which case the provisions of the GPL apply INSTEAD OF

# those given above.

#

# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDER AND CONTRIBUTORS

# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT

# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR

# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT

# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,

# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY

# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT

# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE

# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

#

# *** This file is auto-generated ***

#

.text

.globl	_aesni_encrypt

.def	_aesni_encrypt;	.scl	2;	.type	32;	.endef

.align	16

_aesni_encrypt:

.L_aesni_encrypt_begin:

.byte	243,15,30,251

	movl	4(%esp),%eax

	movl	12(%esp),%edx

	movups	(%eax),%xmm2

	movl	240(%edx),%ecx

	movl	8(%esp),%eax

	movups	(%edx),%xmm0

	movups	16(%edx),%xmm1

	leal	32(%edx),%edx

	xorps	%xmm0,%xmm2

.L000enc1_loop_1:

.byte	102,15,56,220,209

	decl	%ecx

	movups	(%edx),%xmm1

	leal	16(%edx),%edx

	jnz	.L000enc1_loop_1

.byte	102,15,56,221,209

	pxor	%xmm0,%xmm0

	pxor	%xmm1,%xmm1

	movups	%xmm2,(%eax)

	pxor	%xmm2,%xmm2

	ret

.globl	_aesni_decrypt

.def	_aesni_decrypt;	.scl	2;	.type	32;	.endef

.align	16

_aesni_decrypt:

.L_aesni_decrypt_begin:

.byte	243,15,30,251

	movl	4(%esp),%eax

	movl	12(%esp),%edx

	movups	(%eax),%xmm2

	movl	240(%edx),%ecx

	movl	8(%esp),%eax

	movups	(%edx),%xmm0

	movups	16(%edx),%xmm1

	leal	32(%edx),%edx

	xorps	%xmm0,%xmm2

.L001dec1_loop_2:

.byte	102,15,56,222,209

	decl	%ecx

	movups	(%edx),%xmm1

	leal	16(%edx),%edx

	jnz	.L001dec1_loop_2

.byte	102,15,56,223,209

	pxor	%xmm0,%xmm0

	pxor	%xmm1,%xmm1

	movups	%xmm2,(%eax)

	pxor	%xmm2,%xmm2

	ret

.def	__aesni_encrypt2;	.scl	3;	.type	32;	.endef

.align	16

__aesni_encrypt2:

.byte	243,15,30,251

	movups	(%edx),%xmm0

	shll	$4,%ecx

	movups	16(%edx),%xmm1

	xorps	%xmm0,%xmm2

	pxor	%xmm0,%xmm3

	movups	32(%edx),%xmm0

	leal	32(%edx,%ecx,1),%edx

	negl	%ecx

	addl	$16,%ecx

.L002enc2_loop:

.byte	102,15,56,220,209

.byte	102,15,56,220,217

	movups	(%edx,%ecx,1),%xmm1

	addl	$32,%ecx

.byte	102,15,56,220,208

.byte	102,15,56,220,216

	movups	-16(%edx,%ecx,1),%xmm0

	jnz	.L002enc2_loop

.byte	102,15,56,220,209

.byte	102,15,56,220,217

.byte	102,15,56,221,208

.byte	102,15,56,221,216

	ret

.def	__aesni_decrypt2;	.scl	3;	.type	32;	.endef

.align	16

__aesni_decrypt2:

.byte	243,15,30,251

	movups	(%edx),%xmm0

	shll	$4,%ecx

	movups	16(%edx),%xmm1

	xorps	%xmm0,%xmm2

	pxor	%xmm0,%xmm3

	movups	32(%edx),%xmm0

	leal	32(%edx,%ecx,1),%edx

	negl	%ecx

	addl	$16,%ecx

.L003dec2_loop:

.byte	102,15,56,222,209

.byte	102,15,56,222,217

	movups	(%edx,%ecx,1),%xmm1

	addl	$32,%ecx

.byte	102,15,56,222,208

.byte	102,15,56,222,216

	movups	-16(%edx,%ecx,1),%xmm0

	jnz	.L003dec2_loop

.byte	102,15,56,222,209

.byte	102,15,56,222,217

.byte	102,15,56,223,208

.byte	102,15,56,223,216

	ret

.def	__aesni_encrypt3;	.scl	3;	.type	32;	.endef

.align	16

__aesni_encrypt3:

.byte	243,15,30,251

	movups	(%edx),%xmm0

	shll	$4,%ecx

	movups	16(%edx),%xmm1

	xorps	%xmm0,%xmm2

	pxor	%xmm0,%xmm3

	pxor	%xmm0,%xmm4

	movups	32(%edx),%xmm0

	leal	32(%edx,%ecx,1),%edx

	negl	%ecx

	addl	$16,%ecx

.L004enc3_loop:

.byte	102,15,56,220,209

.byte	102,15,56,220,217

.byte	102,15,56,220,225

	movups	(%edx,%ecx,1),%xmm1

	addl	$32,%ecx

.byte	102,15,56,220,208

.byte	102,15,56,220,216

.byte	102,15,56,220,224

	movups	-16(%edx,%ecx,1),%xmm0

	jnz	.L004enc3_loop

.byte	102,15,56,220,209

.byte	102,15,56,220,217

.byte	102,15,56,220,225

.byte	102,15,56,221,208

.byte	102,15,56,221,216

.byte	102,15,56,221,224

	ret

.def	__aesni_decrypt3;	.scl	3;	.type	32;	.endef

.align	16

__aesni_decrypt3:

.byte	243,15,30,251

	movups	(%edx),%xmm0

	shll	$4,%ecx

	movups	16(%edx),%xmm1

	xorps	%xmm0,%xmm2

	pxor	%xmm0,%xmm3

	pxor	%xmm0,%xmm4

	movups	32(%edx),%xmm0

	leal	32(%edx,%ecx,1),%edx

	negl	%ecx

	addl	$16,%ecx

.L005dec3_loop:

.byte	102,15,56,222,209

.byte	102,15,56,222,217

.byte	102,15,56,222,225

	movups	(%edx,%ecx,1),%xmm1

	addl	$32,%ecx

.byte	102,15,56,222,208

.byte	102,15,56,222,216

.byte	102,15,56,222,224

	movups	-16(%edx,%ecx,1),%xmm0

	jnz	.L005dec3_loop

.byte	102,15,56,222,209

.byte	102,15,56,222,217

.byte	102,15,56,222,225

.byte	102,15,56,223,208

.byte	102,15,56,223,216

.byte	102,15,56,223,224

	ret

.def	__aesni_encrypt4;	.scl	3;	.type	32;	.endef

.align	16

__aesni_encrypt4:

.byte	243,15,30,251

	movups	(%edx),%xmm0

	movups	16(%edx),%xmm1

	shll	$4,%ecx

	xorps	%xmm0,%xmm2

	pxor	%xmm0,%xmm3

	pxor	%xmm0,%xmm4

	pxor	%xmm0,%xmm5

	movups	32(%edx),%xmm0

	leal	32(%edx,%ecx,1),%edx

	negl	%ecx

.byte	15,31,64,0

	addl	$16,%ecx

.L006enc4_loop:

.byte	102,15,56,220,209

.byte	102,15,56,220,217

.byte	102,15,56,220,225

.byte	102,15,56,220,233

	movups	(%edx,%ecx,1),%xmm1

	addl	$32,%ecx

.byte	102,15,56,220,208

.byte	102,15,56,220,216

.byte	102,15,56,220,224

.byte	102,15,56,220,232

	movups	-16(%edx,%ecx,1),%xmm0

	jnz	.L006enc4_loop

.byte	102,15,56,220,209

.byte	102,15,56,220,217

.byte	102,15,56,220,225

.byte	102,15,56,220,233

.byte	102,15,56,221,208

.byte	102,15,56,221,216

.byte	102,15,56,221,224

.byte	102,15,56,221,232

	ret

.def	__aesni_decrypt4;	.scl	3;	.type	32;	.endef

.align	16

__aesni_decrypt4:

.byte	243,15,30,251

	movups	(%edx),%xmm0

	movups	16(%edx),%xmm1

	shll	$4,%ecx

	xorps	%xmm0,%xmm2

	pxor	%xmm0,%xmm3

	pxor	%xmm0,%xmm4

	pxor	%xmm0,%xmm5

	movups	32(%edx),%xmm0

	leal	32(%edx,%ecx,1),%edx

	negl	%ecx

.byte	15,31,64,0

	addl	$16,%ecx

.L007dec4_loop:

.byte	102,15,56,222,209

.byte	102,15,56,222,217

.byte	102,15,56,222,225

.byte	102,15,56,222,233

	movups	(%edx,%ecx,1),%xmm1

	addl	$32,%ecx

.byte	102,15,56,222,208

.byte	102,15,56,222,216

.byte	102,15,56,222,224

.byte	102,15,56,222,232

	movups	-16(%edx,%ecx,1),%xmm0

	jnz	.L007dec4_loop

.byte	102,15,56,222,209

.byte	102,15,56,222,217

.byte	102,15,56,222,225

.byte	102,15,56,222,233

.byte	102,15,56,223,208

.byte	102,15,56,223,216

.byte	102,15,56,223,224

.byte	102,15,56,223,232

	ret

.def	__aesni_encrypt6;	.scl	3;	.type	32;	.endef

.align	16

__aesni_encrypt6:

.byte	243,15,30,251

	movups	(%edx),%xmm0

	shll	$4,%ecx

	movups	16(%edx),%xmm1

	xorps	%xmm0,%xmm2

	pxor	%xmm0,%xmm3

	pxor	%xmm0,%xmm4

.byte	102,15,56,220,209

	pxor	%xmm0,%xmm5

	pxor	%xmm0,%xmm6

.byte	102,15,56,220,217

	leal	32(%edx,%ecx,1),%edx

	negl	%ecx

.byte	102,15,56,220,225

	pxor	%xmm0,%xmm7

	movups	(%edx,%ecx,1),%xmm0

	addl	$16,%ecx

	jmp	.L008_aesni_encrypt6_inner

.align	16

.L009enc6_loop:

.byte	102,15,56,220,209

.byte	102,15,56,220,217

.byte	102,15,56,220,225

.L008_aesni_encrypt6_inner:

.byte	102,15,56,220,233

.byte	102,15,56,220,241

.byte	102,15,56,220,249

.L_aesni_encrypt6_enter:

	movups	(%edx,%ecx,1),%xmm1

	addl	$32,%ecx

.byte	102,15,56,220,208

.byte	102,15,56,220,216

.byte	102,15,56,220,224

.byte	102,15,56,220,232

.byte	102,15,56,220,240

.byte	102,15,56,220,248

	movups	-16(%edx,%ecx,1),%xmm0

	jnz	.L009enc6_loop

.byte	102,15,56,220,209

.byte	102,15,56,220,217

.byte	102,15,56,220,225

.byte	102,15,56,220,233

.byte	102,15,56,220,241

.byte	102,15,56,220,249

.byte	102,15,56,221,208

.byte	102,15,56,221,216

.byte	102,15,56,221,224

.byte	102,15,56,221,232

.byte	102,15,56,221,240

.byte	102,15,56,221,248

	ret

.def	__aesni_decrypt6;	.scl	3;	.type	32;	.endef

.align	16

__aesni_decrypt6:

.byte	243,15,30,251

	movups	(%edx),%xmm0

	shll	$4,%ecx

	movups	16(%edx),%xmm1

	xorps	%xmm0,%xmm2

	pxor	%xmm0,%xmm3

	pxor	%xmm0,%xmm4

.byte	102,15,56,222,209

	pxor	%xmm0,%xmm5

	pxor	%xmm0,%xmm6

.byte	102,15,56,222,217

	leal	32(%edx,%ecx,1),%edx

	negl	%ecx

.byte	102,15,56,222,225

	pxor	%xmm0,%xmm7

	movups	(%edx,%ecx,1),%xmm0

	addl	$16,%ecx

	jmp	.L010_aesni_decrypt6_inner

.align	16

.L011dec6_loop:

.byte	102,15,56,222,209

.byte	102,15,56,222,217

.byte	102,15,56,222,225

.L010_aesni_decrypt6_inner:

.byte	102,15,56,222,233

.byte	102,15,56,222,241

.byte	102,15,56,222,249

.L_aesni_decrypt6_enter:

	movups	(%edx,%ecx,1),%xmm1

	addl	$32,%ecx

.byte	102,15,56,222,208

.byte	102,15,56,222,216

.byte	102,15,56,222,224

.byte	102,15,56,222,232

.byte	102,15,56,222,240

.byte	102,15,56,222,248

	movups	-16(%edx,%ecx,1),%xmm0

	jnz	.L011dec6_loop

.byte	102,15,56,222,209

.byte	102,15,56,222,217

.byte	102,15,56,222,225

.byte	102,15,56,222,233

.byte	102,15,56,222,241

.byte	102,15,56,222,249

.byte	102,15,56,223,208

.byte	102,15,56,223,216

.byte	102,15,56,223,224

.byte	102,15,56,223,232

.byte	102,15,56,223,240

.byte	102,15,56,223,248

	ret

.globl	_aesni_ecb_encrypt

.def	_aesni_ecb_encrypt;	.scl	2;	.type	32;	.endef

.align	16

_aesni_ecb_encrypt:

.L_aesni_ecb_encrypt_begin:

.byte	243,15,30,251

	pushl	%ebp

	pushl	%ebx

	pushl	%esi

	pushl	%edi

	movl	20(%esp),%esi

	movl	24(%esp),%edi

	movl	28(%esp),%eax

	movl	32(%esp),%edx

	movl	36(%esp),%ebx

	andl	$-16,%eax

	jz	.L012ecb_ret

	movl	240(%edx),%ecx

	testl	%ebx,%ebx

	jz	.L013ecb_decrypt

	movl	%edx,%ebp

	movl	%ecx,%ebx

	cmpl	$96,%eax

	jb	.L014ecb_enc_tail

	movdqu	(%esi),%xmm2

	movdqu	16(%esi),%xmm3

	movdqu	32(%esi),%xmm4

	movdqu	48(%esi),%xmm5

	movdqu	64(%esi),%xmm6

	movdqu	80(%esi),%xmm7

	leal	96(%esi),%esi

	subl	$96,%eax

	jmp	.L015ecb_enc_loop6_enter

.align	16

.L016ecb_enc_loop6:

	movups	%xmm2,(%edi)

	movdqu	(%esi),%xmm2

	movups	%xmm3,16(%edi)

	movdqu	16(%esi),%xmm3

	movups	%xmm4,32(%edi)

	movdqu	32(%esi),%xmm4

	movups	%xmm5,48(%edi)

	movdqu	48(%esi),%xmm5

	movups	%xmm6,64(%edi)

	movdqu	64(%esi),%xmm6

	movups	%xmm7,80(%edi)

	leal	96(%edi),%edi

	movdqu	80(%esi),%xmm7

	leal	96(%esi),%esi

.L015ecb_enc_loop6_enter:

	call	__aesni_encrypt6

	movl	%ebp,%edx

	movl	%ebx,%ecx

	subl	$96,%eax

	jnc	.L016ecb_enc_loop6

	movups	%xmm2,(%edi)

	movups	%xmm3,16(%edi)

	movups	%xmm4,32(%edi)

	movups	%xmm5,48(%edi)

	movups	%xmm6,64(%edi)

	movups	%xmm7,80(%edi)

	leal	96(%edi),%edi

	addl	$96,%eax

	jz	.L012ecb_ret

.L014ecb_enc_tail:

	movups	(%esi),%xmm2

	cmpl	$32,%eax

	jb	.L017ecb_enc_one

	movups	16(%esi),%xmm3

	je	.L018ecb_enc_two

	movups	32(%esi),%xmm4

	cmpl	$64,%eax

	jb	.L019ecb_enc_three

	movups	48(%esi),%xmm5

	je	.L020ecb_enc_four

	movups	64(%esi),%xmm6

	xorps	%xmm7,%xmm7

	call	__aesni_encrypt6

	movups	%xmm2,(%edi)

	movups	%xmm3,16(%edi)

	movups	%xmm4,32(%edi)

	movups	%xmm5,48(%edi)

	movups	%xmm6,64(%edi)

	jmp	.L012ecb_ret

.align	16

.L017ecb_enc_one:

	movups	(%edx),%xmm0

	movups	16(%edx),%xmm1

	leal	32(%edx),%edx

	xorps	%xmm0,%xmm2

.L021enc1_loop_3:

.byte	102,15,56,220,209

	decl	%ecx

	movups	(%edx),%xmm1

	leal	16(%edx),%edx

	jnz	.L021enc1_loop_3

.byte	102,15,56,221,209

	movups	%xmm2,(%edi)

	jmp	.L012ecb_ret

.align	16

.L018ecb_enc_two:

	call	__aesni_encrypt2

	movups	%xmm2,(%edi)

	movups	%xmm3,16(%edi)

	jmp	.L012ecb_ret

.align	16

.L019ecb_enc_three:

	call	__aesni_encrypt3

	movups	%xmm2,(%edi)

	movups	%xmm3,16(%edi)

	movups	%xmm4,32(%edi)

	jmp	.L012ecb_ret

.align	16

.L020ecb_enc_four:

	call	__aesni_encrypt4

	movups	%xmm2,(%edi)

	movups	%xmm3,16(%edi)

	movups	%xmm4,32(%edi)

	movups	%xmm5,48(%edi)

	jmp	.L012ecb_ret

.align	16

.L013ecb_decrypt:

	movl	%edx,%ebp

	movl	%ecx,%ebx

	cmpl	$96,%eax

	jb	.L022ecb_dec_tail

	movdqu	(%esi),%xmm2

	movdqu	16(%esi),%xmm3

	movdqu	32(%esi),%xmm4

	movdqu	48(%esi),%xmm5

	movdqu	64(%esi),%xmm6

	movdqu	80(%esi),%xmm7

	leal	96(%esi),%esi

	subl	$96,%eax

	jmp	.L023ecb_dec_loop6_enter

.align	16

.L024ecb_dec_loop6:

	movups	%xmm2,(%edi)

	movdqu	(%esi),%xmm2

	movups	%xmm3,16(%edi)

	movdqu	16(%esi),%xmm3

	movups	%xmm4,32(%edi)

	movdqu	32(%esi),%xmm4

	movups	%xmm5,48(%edi)

	movdqu	48(%esi),%xmm5

	movups	%xmm6,64(%edi)

	movdqu	64(%esi),%xmm6

	movups	%xmm7,80(%edi)

	leal	96(%edi),%edi

	movdqu	80(%esi),%xmm7

	leal	96(%esi),%esi

.L023ecb_dec_loop6_enter:

	call	__aesni_decrypt6

	movl	%ebp,%edx

	movl	%ebx,%ecx

	subl	$96,%eax

	jnc	.L024ecb_dec_loop6

	movups	%xmm2,(%edi)

	movups	%xmm3,16(%edi)

	movups	%xmm4,32(%edi)

	movups	%xmm5,48(%edi)

	movups	%xmm6,64(%edi)

	movups	%xmm7,80(%edi)

	leal	96(%edi),%edi

	addl	$96,%eax

	jz	.L012ecb_ret

.L022ecb_dec_tail:

	movups	(%esi),%xmm2

	cmpl	$32,%eax

	jb	.L025ecb_dec_one

	movups	16(%esi),%xmm3

	je	.L026ecb_dec_two

	movups	32(%esi),%xmm4

	cmpl	$64,%eax

	jb	.L027ecb_dec_three

	movups	48(%esi),%xmm5

	je	.L028ecb_dec_four

	movups	64(%esi),%xmm6

	xorps	%xmm7,%xmm7

	call	__aesni_decrypt6

	movups	%xmm2,(%edi)

	movups	%xmm3,16(%edi)

	movups	%xmm4,32(%edi)

	movups	%xmm5,48(%edi)

	movups	%xmm6,64(%edi)

	jmp	.L012ecb_ret

.align	16

.L025ecb_dec_one:

	movups	(%edx),%xmm0

	movups	16(%edx),%xmm1

	leal	32(%edx),%edx

	xorps	%xmm0,%xmm2

.L029dec1_loop_4:

.byte	102,15,56,222,209

	decl	%ecx

	movups	(%edx),%xmm1

	leal	16(%edx),%edx

	jnz	.L029dec1_loop_4

.byte	102,15,56,223,209

	movups	%xmm2,(%edi)

	jmp	.L012ecb_ret

.align	16

.L026ecb_dec_two:

	call	__aesni_decrypt2

	movups	%xmm2,(%edi)

	movups	%xmm3,16(%edi)

	jmp	.L012ecb_ret

.align	16

.L027ecb_dec_three:

	call	__aesni_decrypt3

	movups	%xmm2,(%edi)

	movups	%xmm3,16(%edi)

	movups	%xmm4,32(%edi)

	jmp	.L012ecb_ret

.align	16

.L028ecb_dec_four:

	call	__aesni_decrypt4

	movups	%xmm2,(%edi)

	movups	%xmm3,16(%edi)

	movups	%xmm4,32(%edi)

	movups	%xmm5,48(%edi)

.L012ecb_ret:

	pxor	%xmm0,%xmm0

	pxor	%xmm1,%xmm1

	pxor	%xmm2,%xmm2

	pxor	%xmm3,%xmm3

	pxor	%xmm4,%xmm4

	pxor	%xmm5,%xmm5

	pxor	%xmm6,%xmm6

	pxor	%xmm7,%xmm7

	popl	%edi

	popl	%esi

	popl	%ebx

	popl	%ebp

	ret

.globl	_aesni_ccm64_encrypt_blocks

.def	_aesni_ccm64_encrypt_blocks;	.scl	2;	.type	32;	.endef

.align	16

_aesni_ccm64_encrypt_blocks:

.L_aesni_ccm64_encrypt_blocks_begin:

.byte	243,15,30,251

	pushl	%ebp

	pushl	%ebx

	pushl	%esi

	pushl	%edi

	movl	20(%esp),%esi

	movl	24(%esp),%edi

	movl	28(%esp),%eax

	movl	32(%esp),%edx

	movl	36(%esp),%ebx

	movl	40(%esp),%ecx

	movl	%esp,%ebp

	subl	$60,%esp

	andl	$-16,%esp

	movl	%ebp,48(%esp)

	movdqu	(%ebx),%xmm7

	movdqu	(%ecx),%xmm3

	movl	240(%edx),%ecx

	movl	$202182159,(%esp)

	movl	$134810123,4(%esp)

	movl	$67438087,8(%esp)

	movl	$66051,12(%esp)

	movl	$1,%ebx

	xorl	%ebp,%ebp

	movl	%ebx,16(%esp)

	movl	%ebp,20(%esp)

	movl	%ebp,24(%esp)

	movl	%ebp,28(%esp)

	shll	$4,%ecx

	movl	$16,%ebx

	leal	(%edx),%ebp

	movdqa	(%esp),%xmm5

	movdqa	%xmm7,%xmm2

	leal	32(%edx,%ecx,1),%edx

	subl	%ecx,%ebx

.byte	102,15,56,0,253

.L030ccm64_enc_outer:

	movups	(%ebp),%xmm0

	movl	%ebx,%ecx

	movups	(%esi),%xmm6

	xorps	%xmm0,%xmm2

	movups	16(%ebp),%xmm1

	xorps	%xmm6,%xmm0

	xorps	%xmm0,%xmm3

	movups	32(%ebp),%xmm0

.L031ccm64_enc2_loop:

.byte	102,15,56,220,209

.byte	102,15,56,220,217

	movups	(%edx,%ecx,1),%xmm1

	addl	$32,%ecx

.byte	102,15,56,220,208

.byte	102,15,56,220,216

	movups	-16(%edx,%ecx,1),%xmm0

	jnz	.L031ccm64_enc2_loop

.byte	102,15,56,220,209

.byte	102,15,56,220,217

	paddq	16(%esp),%xmm7

	decl	%eax

.byte	102,15,56,221,208

.byte	102,15,56,221,216

	leal	16(%esi),%esi

	xorps	%xmm2,%xmm6

	movdqa	%xmm7,%xmm2

	movups	%xmm6,(%edi)

.byte	102,15,56,0,213

	leal	16(%edi),%edi

	jnz	.L030ccm64_enc_outer

	movl	48(%esp),%esp

	movl	40(%esp),%edi

	movups	%xmm3,(%edi)

	pxor	%xmm0,%xmm0

	pxor	%xmm1,%xmm1

	pxor	%xmm2,%xmm2

	pxor	%xmm3,%xmm3

	pxor	%xmm4,%xmm4

	pxor	%xmm5,%xmm5

	pxor	%xmm6,%xmm6

	pxor	%xmm7,%xmm7

	popl	%edi

	popl	%esi

	popl	%ebx

	popl	%ebp

	ret

.globl	_aesni_ccm64_decrypt_blocks

.def	_aesni_ccm64_decrypt_blocks;	.scl	2;	.type	32;	.endef

.align	16

_aesni_ccm64_decrypt_blocks:

.L_aesni_ccm64_decrypt_blocks_begin:

.byte	243,15,30,251

	pushl	%ebp

	pushl	%ebx

	pushl	%esi

	pushl	%edi

	movl	20(%esp),%esi

	movl	24(%esp),%edi

	movl	28(%esp),%eax

	movl	32(%esp),%edx

	movl	36(%esp),%ebx

	movl	40(%esp),%ecx

	movl	%esp,%ebp

	subl	$60,%esp

	andl	$-16,%esp

	movl	%ebp,48(%esp)

	movdqu	(%ebx),%xmm7

	movdqu	(%ecx),%xmm3

	movl	240(%edx),%ecx

	movl	$202182159,(%esp)

	movl	$134810123,4(%esp)

	movl	$67438087,8(%esp)

	movl	$66051,12(%esp)

	movl	$1,%ebx

	xorl	%ebp,%ebp

	movl	%ebx,16(%esp)

	movl	%ebp,20(%esp)

	movl	%ebp,24(%esp)

	movl	%ebp,28(%esp)

	movdqa	(%esp),%xmm5

	movdqa	%xmm7,%xmm2

	movl	%edx,%ebp

	movl	%ecx,%ebx

.byte	102,15,56,0,253

	movups	(%edx),%xmm0

	movups	16(%edx),%xmm1

	leal	32(%edx),%edx

	xorps	%xmm0,%xmm2

.L032enc1_loop_5:

.byte	102,15,56,220,209

	decl	%ecx

	movups	(%edx),%xmm1

	leal	16(%edx),%edx

	jnz	.L032enc1_loop_5

.byte	102,15,56,221,209

	shll	$4,%ebx

	movl	$16,%ecx

	movups	(%esi),%xmm6

	paddq	16(%esp),%xmm7

	leal	16(%esi),%esi

	subl	%ebx,%ecx

	leal	32(%ebp,%ebx,1),%edx

	movl	%ecx,%ebx

	jmp	.L033ccm64_dec_outer

.align	16

.L033ccm64_dec_outer:

	xorps	%xmm2,%xmm6

	movdqa	%xmm7,%xmm2

	movups	%xmm6,(%edi)

	leal	16(%edi),%edi

.byte	102,15,56,0,213

	subl	$1,%eax

	jz	.L034ccm64_dec_break

	movups	(%ebp),%xmm0

	movl	%ebx,%ecx

	movups	16(%ebp),%xmm1

	xorps	%xmm0,%xmm6

	xorps	%xmm0,%xmm2

	xorps	%xmm6,%xmm3

	movups	32(%ebp),%xmm0

.L035ccm64_dec2_loop:

.byte	102,15,56,220,209

.byte	102,15,56,220,217

	movups	(%edx,%ecx,1),%xmm1

	addl	$32,%ecx

.byte	102,15,56,220,208

.byte	102,15,56,220,216

	movups	-16(%edx,%ecx,1),%xmm0

	jnz	.L035ccm64_dec2_loop

	movups	(%esi),%xmm6

	paddq	16(%esp),%xmm7

.byte	102,15,56,220,209

.byte	102,15,56,220,217

.byte	102,15,56,221,208

.byte	102,15,56,221,216

	leal	16(%esi),%esi

	jmp	.L033ccm64_dec_outer

.align	16

.L034ccm64_dec_break:

	movl	240(%ebp),%ecx

	movl	%ebp,%edx

	movups	(%edx),%xmm0

	movups	16(%edx),%xmm1

	xorps	%xmm0,%xmm6

	leal	32(%edx),%edx

	xorps	%xmm6,%xmm3

.L036enc1_loop_6:

.byte	102,15,56,220,217

	decl	%ecx

	movups	(%edx),%xmm1

	leal	16(%edx),%edx

	jnz	.L036enc1_loop_6

.byte	102,15,56,221,217

	movl	48(%esp),%esp

	movl	40(%esp),%edi

	movups	%xmm3,(%edi)

	pxor	%xmm0,%xmm0

	pxor	%xmm1,%xmm1

	pxor	%xmm2,%xmm2

	pxor	%xmm3,%xmm3

	pxor	%xmm4,%xmm4

	pxor	%xmm5,%xmm5

	pxor	%xmm6,%xmm6

	pxor	%xmm7,%xmm7

	popl	%edi

	popl	%esi

	popl	%ebx

	popl	%ebp

	ret

.globl	_aesni_ctr32_encrypt_blocks

.def	_aesni_ctr32_encrypt_blocks;	.scl	2;	.type	32;	.endef

.align	16

_aesni_ctr32_encrypt_blocks:

.L_aesni_ctr32_encrypt_blocks_begin:

.byte	243,15,30,251

	pushl	%ebp

	pushl	%ebx

	pushl	%esi

	pushl	%edi

	movl	20(%esp),%esi

	movl	24(%esp),%edi

	movl	28(%esp),%eax

	movl	32(%esp),%edx

	movl	36(%esp),%ebx

	movl	%esp,%ebp

	subl	$88,%esp

	andl	$-16,%esp

	movl	%ebp,80(%esp)

	cmpl	$1,%eax

	je	.L037ctr32_one_shortcut

	movdqu	(%ebx),%xmm7

	movl	$202182159,(%esp)

	movl	$134810123,4(%esp)

	movl	$67438087,8(%esp)

	movl	$66051,12(%esp)

	movl	$6,%ecx

	xorl	%ebp,%ebp

	movl	%ecx,16(%esp)

	movl	%ecx,20(%esp)

	movl	%ecx,24(%esp)

	movl	%ebp,28(%esp)

.byte	102,15,58,22,251,3

.byte	102,15,58,34,253,3

	movl	240(%edx),%ecx

	bswap	%ebx

	pxor	%xmm0,%xmm0