	.file	"extr_secretbox_xsalsa20poly1305.c_crypto_secretbox_xsalsa20poly1305_open.c"
	.intel_syntax noprefix
	.text
	.p2align 4
	.globl	crypto_secretbox_xsalsa20poly1305_open
	.type	crypto_secretbox_xsalsa20poly1305_open, @function
crypto_secretbox_xsalsa20poly1305_open:
.LFB0:
	.cfi_startproc
	endbr64
	push	r15
	.cfi_def_cfa_offset 16
	.cfi_offset 15, -16
	push	r14
	.cfi_def_cfa_offset 24
	.cfi_offset 14, -24
	push	r13
	.cfi_def_cfa_offset 32
	.cfi_offset 13, -32
	push	r12
	.cfi_def_cfa_offset 40
	.cfi_offset 12, -40
	push	rbp
	.cfi_def_cfa_offset 48
	.cfi_offset 6, -48
	push	rbx
	.cfi_def_cfa_offset 56
	.cfi_offset 3, -56
	sub	rsp, 56
	.cfi_def_cfa_offset 112
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR 40[rsp], rax
	xor	eax, eax
	cmp	rdx, 31
	jbe	.L2
	mov	r13, rcx
	mov	r14, rsp
	mov	r15, rsi
	mov	r12, rdx
	mov	rcx, r8
	mov	rdx, r13
	mov	esi, 32
	mov	rbx, rdi
	mov	rdi, r14
	mov	rbp, r8
	call	crypto_stream_xsalsa20@PLT
	lea	rsi, 32[r15]
	lea	rdi, 16[r15]
	mov	rcx, r14
	lea	rdx, -32[r12]
	call	crypto_onetimeauth_poly1305_verify@PLT
	test	rax, rax
	jne	.L2
	mov	rdi, rbx
	mov	r8, rbp
	mov	rcx, r13
	mov	rdx, r12
	mov	rsi, r15
	call	crypto_stream_xsalsa20_xor@PLT
	mov	rdi, rbx
	lea	rax, 32[rbx]
	.p2align 4,,10
	.p2align 3
.L3:
	mov	BYTE PTR [rdi], 0
	add	rdi, 1
	cmp	rdi, rax
	jne	.L3
	xor	eax, eax
.L1:
	mov	rbx, QWORD PTR 40[rsp]
	xor	rbx, QWORD PTR fs:40
	jne	.L9
	add	rsp, 56
	.cfi_remember_state
	.cfi_def_cfa_offset 56
	pop	rbx
	.cfi_def_cfa_offset 48
	pop	rbp
	.cfi_def_cfa_offset 40
	pop	r12
	.cfi_def_cfa_offset 32
	pop	r13
	.cfi_def_cfa_offset 24
	pop	r14
	.cfi_def_cfa_offset 16
	pop	r15
	.cfi_def_cfa_offset 8
	ret
.L2:
	.cfi_restore_state
	mov	eax, -1
	jmp	.L1
.L9:
	call	__stack_chk_fail@PLT
	.cfi_endproc
.LFE0:
	.size	crypto_secretbox_xsalsa20poly1305_open, .-crypto_secretbox_xsalsa20poly1305_open
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 2
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"extr_secretbox_xsalsa20poly1305.c_crypto_secretbox_xsalsa20poly1305_open.c"
	.text
	.section	.rodata.cst4,"aM",%progbits,4
	.align	2
.LC0:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	crypto_secretbox_xsalsa20poly1305_open
	.syntax unified
	.arm
	.fpu softvfp
	.type	crypto_secretbox_xsalsa20poly1305_open, %function
crypto_secretbox_xsalsa20poly1305_open:
	@ args = 8, pretend = 0, frame = 40
	@ frame_needed = 0, uses_anonymous_args = 0
	push	{r4, r5, r6, r7, r8, r9, r10, lr}
	subs	r7, r3, #0
	ldr	r3, .L10
	sub	sp, sp, #48
	cmpeq	r2, #31
	ldr	r3, [r3]
	str	r3, [sp, #44]
	mov	r3,#0
	ldr	r9, [sp, #80]
	ldr	r10, [sp, #84]
	bls	.L2
	mov	r6, r2
	mov	r5, r1
	add	r8, sp, #12
	mov	r3, r10
	mov	r2, r9
	mov	r1, #32
	mov	r4, r0
	mov	r0, r8
	bl	crypto_stream_xsalsa20
	subs	r2, r6, #32
	str	r8, [sp]
	sbc	r3, r7, #0
	add	r1, r5, #32
	add	r0, r5, #16
	bl	crypto_onetimeauth_poly1305_verify
	subs	r8, r0, #0
	bne	.L2
	mov	r2, r6
	mov	r3, r7
	mov	r1, r5
	mov	r0, r4
	stm	sp, {r9, r10}
	bl	crypto_stream_xsalsa20_xor
	mov	r1, r8
	sub	r3, r4, #1
	add	r2, r4, #31
.L3:
	strb	r1, [r3, #1]!
	cmp	r3, r2
	bne	.L3
.L1:
	ldr	r3, .L10
	ldr	r2, [r3]
	ldr	r3, [sp, #44]
	eors	r2, r3, r2
	mov	r3, #0
	bne	.L9
	mov	r0, r8
	add	sp, sp, #48
	@ sp needed
	pop	{r4, r5, r6, r7, r8, r9, r10, pc}
.L2:
	mvn	r8, #0
	b	.L1
.L9:
	bl	__stack_chk_fail
.L11:
	.align	2
.L10:
	.word	.LC0
	.size	crypto_secretbox_xsalsa20poly1305_open, .-crypto_secretbox_xsalsa20poly1305_open
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
