	.file	"extr_atmel-aes.c_atmel_aes_gcm_start.c"
	.intel_syntax noprefix
	.text
	.p2align 4
	.type	atmel_aes_gcm_start, @function
atmel_aes_gcm_start:
.LFB0:
	.cfi_startproc
	endbr64
	push	r15
	.cfi_def_cfa_offset 16
	.cfi_offset 15, -16
	push	r14
	.cfi_def_cfa_offset 24
	.cfi_offset 14, -24
	push	r13
	.cfi_def_cfa_offset 32
	.cfi_offset 13, -32
	push	r12
	.cfi_def_cfa_offset 40
	.cfi_offset 12, -40
	push	rbp
	.cfi_def_cfa_offset 48
	.cfi_offset 6, -48
	mov	rbp, rdi
	push	rbx
	.cfi_def_cfa_offset 56
	.cfi_offset 3, -56
	sub	rsp, 24
	.cfi_def_cfa_offset 80
	mov	edi, DWORD PTR 20[rdi]
	call	atmel_aes_gcm_ctx_cast@PLT
	mov	edi, DWORD PTR 16[rbp]
	mov	r13, rax
	call	aead_request_cast@PLT
	mov	rdi, rax
	mov	rbx, rax
	call	crypto_aead_reqtfm@PLT
	mov	rdi, rbx
	mov	r12, rax
	call	aead_request_ctx@PLT
	mov	rdi, r12
	mov	QWORD PTR 8[rsp], rax
	call	crypto_aead_ivsize@PLT
	mov	rsi, QWORD PTR 8[rsp]
	mov	rdi, rbp
	mov	r15, QWORD PTR [rbx]
	mov	r14, QWORD PTR 8[rbp]
	mov	r12, rax
	call	atmel_aes_set_mode@PLT
	mov	rdi, rbp
	call	atmel_aes_hw_init@PLT
	mov	esi, eax
	test	eax, eax
	jne	.L6
	xor	edi, edi
	cmp	QWORD PTR GCM_AES_IV_SIZE[rip], r12
	sete	dil
	call	likely@PLT
	test	rax, rax
	jne	.L8
	mov	rsi, QWORD PTR AES_BLOCK_SIZE[rip]
	mov	rdi, r12
	call	atmel_aes_padlen@PLT
	mov	r10, QWORD PTR AES_BLOCK_SIZE[rip]
	mov	rbx, rax
	add	r10, r12
	add	r10, rax
	cmp	QWORD PTR 0[rbp], r10
	jb	.L9
	mov	rdx, r12
	mov	rsi, r15
	mov	rdi, r14
	mov	QWORD PTR 8[rsp], r10
	call	memcpy@PLT
	lea	rdx, 4[rbx]
	lea	rdi, [r14+r12*4]
	xor	esi, esi
	call	memset@PLT
	mov	r10, QWORD PTR 8[rsp]
	lea	rdi, 0[0+r12*8]
	lea	rbx, [r14+r10*4]
	call	cpu_to_be64@PLT
	mov	r10, QWORD PTR 8[rsp]
	mov	r8, QWORD PTR 0[r13]
	xor	ecx, ecx
	mov	DWORD PTR -4[rbx], eax
	mov	r9, QWORD PTR atmel_aes_gcm_process@GOTPCREL[rip]
	mov	rsi, r14
	mov	rdi, rbp
	add	rsp, 24
	.cfi_remember_state
	.cfi_def_cfa_offset 56
	mov	rdx, r10
	pop	rbx
	.cfi_def_cfa_offset 48
	pop	rbp
	.cfi_def_cfa_offset 40
	pop	r12
	.cfi_def_cfa_offset 32
	pop	r13
	.cfi_def_cfa_offset 24
	pop	r14
	.cfi_def_cfa_offset 16
	pop	r15
	.cfi_def_cfa_offset 8
	jmp	atmel_aes_gcm_ghash@PLT
	.p2align 4,,10
	.p2align 3
.L8:
	.cfi_restore_state
	mov	rdi, QWORD PTR 0[r13]
	mov	rdx, r12
	mov	rsi, r15
	call	memcpy@PLT
	mov	rbx, QWORD PTR 0[r13]
	mov	edi, 1
	call	cpu_to_be32@PLT
	mov	rdi, rbp
	mov	DWORD PTR 12[rbx], eax
	add	rsp, 24
	.cfi_remember_state
	.cfi_def_cfa_offset 56
	pop	rbx
	.cfi_def_cfa_offset 48
	pop	rbp
	.cfi_def_cfa_offset 40
	pop	r12
	.cfi_def_cfa_offset 32
	pop	r13
	.cfi_def_cfa_offset 24
	pop	r14
	.cfi_def_cfa_offset 16
	pop	r15
	.cfi_def_cfa_offset 8
	jmp	atmel_aes_gcm_process@PLT
	.p2align 4,,10
	.p2align 3
.L9:
	.cfi_restore_state
	mov	esi, DWORD PTR EINVAL[rip]
	neg	esi
.L6:
	add	rsp, 24
	.cfi_def_cfa_offset 56
	mov	rdi, rbp
	pop	rbx
	.cfi_def_cfa_offset 48
	pop	rbp
	.cfi_def_cfa_offset 40
	pop	r12
	.cfi_def_cfa_offset 32
	pop	r13
	.cfi_def_cfa_offset 24
	pop	r14
	.cfi_def_cfa_offset 16
	pop	r15
	.cfi_def_cfa_offset 8
	jmp	atmel_aes_complete@PLT
	.cfi_endproc
.LFE0:
	.size	atmel_aes_gcm_start, .-atmel_aes_gcm_start
	.comm	GCM_AES_IV_SIZE,8,8
	.comm	EINVAL,4,4
	.comm	AES_BLOCK_SIZE,8,8
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 2
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"extr_atmel-aes.c_atmel_aes_gcm_start.c"
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	atmel_aes_gcm_start, %function
atmel_aes_gcm_start:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 0, uses_anonymous_args = 0
	push	{r4, r5, r6, r7, r8, r9, r10, fp, lr}
	mov	r4, r0
	sub	sp, sp, #12
	ldr	r0, [r0, #12]
	bl	atmel_aes_gcm_ctx_cast
	mov	r8, r0
	ldr	r0, [r4, #8]
	bl	aead_request_cast
	mov	r6, r0
	bl	crypto_aead_reqtfm
	mov	r5, r0
	mov	r0, r6
	bl	aead_request_ctx
	mov	r7, r0
	mov	r0, r5
	bl	crypto_aead_ivsize
	mov	r1, r7
	mov	r5, r0
	mov	r0, r4
	ldr	r9, [r6]
	ldr	r7, [r4, #4]
	bl	atmel_aes_set_mode
	mov	r0, r4
	bl	atmel_aes_hw_init
	subs	r1, r0, #0
	movne	r0, r4
	bne	.L6
	ldr	r3, .L10
	ldr	r0, [r3]
	sub	r0, r0, r5
	clz	r0, r0
	lsr	r0, r0, #5
	bl	likely
	subs	r10, r0, #0
	bne	.L8
	ldr	r6, .L10+4
	mov	r0, r5
	ldr	r1, [r6]
	bl	atmel_aes_padlen
	ldr	r6, [r6]
	ldr	r3, [r4]
	add	r6, r5, r6
	add	r6, r6, r0
	cmp	r3, r6
	mov	fp, r0
	bcc	.L9
	mov	r1, r9
	mov	r2, r5
	mov	r0, r7
	bl	memcpy
	mov	r1, r10
	add	r2, fp, #4
	add	r0, r7, r5, lsl #2
	bl	memset
	lsl	r0, r5, #3
	bl	cpu_to_be64
	ldr	r3, .L10+8
	add	r2, r7, r6, lsl #2
	str	r0, [r2, #-4]
	str	r3, [sp, #4]
	ldr	ip, [r8]
	mov	r3, r10
	mov	r0, r4
	mov	r2, r6
	mov	r1, r7
	str	ip, [sp]
	bl	atmel_aes_gcm_ghash
	add	sp, sp, #12
	@ sp needed
	pop	{r4, r5, r6, r7, r8, r9, r10, fp, pc}
.L8:
	mov	r2, r5
	mov	r1, r9
	ldr	r0, [r8]
	bl	memcpy
	mov	r0, #1
	ldr	r5, [r8]
	bl	cpu_to_be32
	mov	r3, r0
	mov	r0, r4
	str	r3, [r5, #12]
	add	sp, sp, #12
	@ sp needed
	pop	{r4, r5, r6, r7, r8, r9, r10, fp, lr}
	b	atmel_aes_gcm_process
.L9:
	mov	r0, r4
	ldr	r3, .L10+12
	ldr	r1, [r3]
	rsb	r1, r1, #0
.L6:
	add	sp, sp, #12
	@ sp needed
	pop	{r4, r5, r6, r7, r8, r9, r10, fp, lr}
	b	atmel_aes_complete
.L11:
	.align	2
.L10:
	.word	GCM_AES_IV_SIZE
	.word	AES_BLOCK_SIZE
	.word	atmel_aes_gcm_process
	.word	EINVAL
	.size	atmel_aes_gcm_start, .-atmel_aes_gcm_start
	.comm	GCM_AES_IV_SIZE,4,4
	.comm	EINVAL,4,4
	.comm	AES_BLOCK_SIZE,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
