val va_wp_Fast_multiply
      (offset: nat)
      (dst_b inA_b inB_b: buffer64)
      (va_s0: va_state)
      (va_k: (va_state -> unit -> Type0))
    : Type0
val va_wp_Fast_multiply
      (offset: nat)
      (dst_b inA_b inB_b: buffer64)
      (va_s0: va_state)
      (va_k: (va_state -> unit -> Type0))
    : Type0
let va_wp_Fast_multiply (offset:nat) (dst_b:buffer64) (inA_b:buffer64) (inB_b:buffer64)
  (va_s0:va_state) (va_k:(va_state -> unit -> Type0)) : Type0 =
  (va_get_ok va_s0 /\ (let (a0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (0 +
    offset) (va_get_mem_heaplet 0 va_s0) in let (a1:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (1 + offset) (va_get_mem_heaplet 0 va_s0) in let
    (a2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (2 + offset)
    (va_get_mem_heaplet 0 va_s0) in let (a3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read
    inA_b (3 + offset) (va_get_mem_heaplet 0 va_s0) in let (b0:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inB_b (0 + offset) (va_get_mem_heaplet 0 va_s0) in let
    (b1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b (1 + offset)
    (va_get_mem_heaplet 0 va_s0) in let (b2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read
    inB_b (2 + offset) (va_get_mem_heaplet 0 va_s0) in let (b3:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inB_b (3 + offset) (va_get_mem_heaplet 0 va_s0) in let
    (a:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_four a0 a1 a2 a3 in let (b:Prims.nat) =
    Vale.Curve25519.Fast_defs.pow2_four b0 b1 b2 b3 in adx_enabled /\ bmi2_enabled /\ (offset == 0
    \/ offset == 4) /\ Vale.X64.Decls.buffers_disjoint dst_b inA_b /\
    Vale.X64.Decls.buffers_disjoint dst_b inB_b /\ Vale.X64.Decls.validDstAddrs64
    (va_get_mem_heaplet 0 va_s0) (va_get_reg64 rRdi va_s0) dst_b (8 + offset `op_Multiply` 2)
    (va_get_mem_layout va_s0) Secret /\ Vale.X64.Decls.validSrcAddrs64 (va_get_mem_heaplet 0 va_s0)
    (va_get_reg64 rRsi va_s0) inA_b (4 + offset) (va_get_mem_layout va_s0) Secret /\
    Vale.X64.Decls.validSrcAddrs64 (va_get_mem_heaplet 0 va_s0) (va_get_reg64 rRcx va_s0) inB_b (4
    + offset) (va_get_mem_layout va_s0) Secret) /\ (forall (va_x_mem:vale_heap) (va_x_rax:nat64)
    (va_x_rdx:nat64) (va_x_r8:nat64) (va_x_r9:nat64) (va_x_r10:nat64) (va_x_r11:nat64)
    (va_x_rbx:nat64) (va_x_r13:nat64) (va_x_r14:nat64) (va_x_heap0:vale_heap)
    (va_x_efl:Vale.X64.Flags.t) . let va_sM = va_upd_flags va_x_efl (va_upd_mem_heaplet 0
    va_x_heap0 (va_upd_reg64 rR14 va_x_r14 (va_upd_reg64 rR13 va_x_r13 (va_upd_reg64 rRbx va_x_rbx
    (va_upd_reg64 rR11 va_x_r11 (va_upd_reg64 rR10 va_x_r10 (va_upd_reg64 rR9 va_x_r9 (va_upd_reg64
    rR8 va_x_r8 (va_upd_reg64 rRdx va_x_rdx (va_upd_reg64 rRax va_x_rax (va_upd_mem va_x_mem
    va_s0))))))))))) in va_get_ok va_sM /\ (let (a0:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (0 + offset) (va_get_mem_heaplet 0 va_s0) in let
    (a1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (1 + offset)
    (va_get_mem_heaplet 0 va_s0) in let (a2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read
    inA_b (2 + offset) (va_get_mem_heaplet 0 va_s0) in let (a3:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (3 + offset) (va_get_mem_heaplet 0 va_s0) in let
    (b0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b (0 + offset)
    (va_get_mem_heaplet 0 va_s0) in let (b1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read
    inB_b (1 + offset) (va_get_mem_heaplet 0 va_s0) in let (b2:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inB_b (2 + offset) (va_get_mem_heaplet 0 va_s0) in let
    (b3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b (3 + offset)
    (va_get_mem_heaplet 0 va_s0) in let (a:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_four a0 a1
    a2 a3 in let (b:Prims.nat) = Vale.Curve25519.Fast_defs.pow2_four b0 b1 b2 b3 in let d0 =
    Vale.X64.Decls.buffer64_read dst_b (0 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_sM) in
    let d1 = Vale.X64.Decls.buffer64_read dst_b (1 + offset `op_Multiply` 2) (va_get_mem_heaplet 0
    va_sM) in let d2 = Vale.X64.Decls.buffer64_read dst_b (2 + offset `op_Multiply` 2)
    (va_get_mem_heaplet 0 va_sM) in let d3 = Vale.X64.Decls.buffer64_read dst_b (3 + offset
    `op_Multiply` 2) (va_get_mem_heaplet 0 va_sM) in let d4 = Vale.X64.Decls.buffer64_read dst_b (4
    + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_sM) in let d5 = Vale.X64.Decls.buffer64_read
    dst_b (5 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_sM) in let d6 =
    Vale.X64.Decls.buffer64_read dst_b (6 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_sM) in
    let d7 = Vale.X64.Decls.buffer64_read dst_b (7 + offset `op_Multiply` 2) (va_get_mem_heaplet 0
    va_sM) in let d = Vale.Curve25519.Fast_defs.pow2_eight d0 d1 d2 d3 d4 d5 d6 d7 in d ==
    va_mul_nat a b /\ Vale.X64.Decls.validSrcAddrs64 (va_get_mem_heaplet 0 va_sM) (va_get_reg64
    rRdi va_sM) dst_b (8 + offset `op_Multiply` 2) (va_get_mem_layout va_sM) Secret /\
    Vale.X64.Decls.modifies_buffer_specific dst_b (va_get_mem_heaplet 0 va_s0) (va_get_mem_heaplet
    0 va_sM) (0 + offset `op_Multiply` 2) (8 + offset `op_Multiply` 2 - 1)) ==> va_k va_sM (())))
module Vale.Curve25519.X64.FastMul
open Vale.Def.Types_s
open Vale.Arch.Types
open Vale.X64.Machine_s
open Vale.X64.Memory
open Vale.X64.Stack_i
open Vale.X64.State
open Vale.X64.Decls
open Vale.X64.InsBasic
open Vale.X64.InsMem
open Vale.X64.InsStack
open Vale.X64.QuickCode
open Vale.X64.QuickCodes
open Vale.Curve25519.Fast_defs
open Vale.X64.CPU_Features_s
//-- Fast_multiply

val va_code_Fast_multiply : offset:nat -> Tot va_code

val va_codegen_success_Fast_multiply : offset:nat -> Tot va_pbool

val va_lemma_Fast_multiply : va_b0:va_code -> va_s0:va_state -> offset:nat -> dst_b:buffer64 ->
  inA_b:buffer64 -> inB_b:buffer64
  -> Ghost (va_state & va_fuel)
  (requires (va_require_total va_b0 (va_code_Fast_multiply offset) va_s0 /\ va_get_ok va_s0 /\ (let
    (a0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (0 + offset)
    (va_get_mem_heaplet 0 va_s0) in let (a1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read
    inA_b (1 + offset) (va_get_mem_heaplet 0 va_s0) in let (a2:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (2 + offset) (va_get_mem_heaplet 0 va_s0) in let
    (a3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (3 + offset)
    (va_get_mem_heaplet 0 va_s0) in let (b0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read
    inB_b (0 + offset) (va_get_mem_heaplet 0 va_s0) in let (b1:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inB_b (1 + offset) (va_get_mem_heaplet 0 va_s0) in let
    (b2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b (2 + offset)
    (va_get_mem_heaplet 0 va_s0) in let (b3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read
    inB_b (3 + offset) (va_get_mem_heaplet 0 va_s0) in let (a:Prims.nat) =
    Vale.Curve25519.Fast_defs.pow2_four a0 a1 a2 a3 in let (b:Prims.nat) =
    Vale.Curve25519.Fast_defs.pow2_four b0 b1 b2 b3 in adx_enabled /\ bmi2_enabled /\ (offset == 0
    \/ offset == 4) /\ Vale.X64.Decls.buffers_disjoint dst_b inA_b /\
    Vale.X64.Decls.buffers_disjoint dst_b inB_b /\ Vale.X64.Decls.validDstAddrs64
    (va_get_mem_heaplet 0 va_s0) (va_get_reg64 rRdi va_s0) dst_b (8 + offset `op_Multiply` 2)
    (va_get_mem_layout va_s0) Secret /\ Vale.X64.Decls.validSrcAddrs64 (va_get_mem_heaplet 0 va_s0)
    (va_get_reg64 rRsi va_s0) inA_b (4 + offset) (va_get_mem_layout va_s0) Secret /\
    Vale.X64.Decls.validSrcAddrs64 (va_get_mem_heaplet 0 va_s0) (va_get_reg64 rRcx va_s0) inB_b (4
    + offset) (va_get_mem_layout va_s0) Secret)))
  (ensures (fun (va_sM, va_fM) -> va_ensure_total va_b0 va_s0 va_sM va_fM /\ va_get_ok va_sM /\
    (let (a0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (0 + offset)
    (va_get_mem_heaplet 0 va_s0) in let (a1:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read
    inA_b (1 + offset) (va_get_mem_heaplet 0 va_s0) in let (a2:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inA_b (2 + offset) (va_get_mem_heaplet 0 va_s0) in let
    (a3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inA_b (3 + offset)
    (va_get_mem_heaplet 0 va_s0) in let (b0:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read
    inB_b (0 + offset) (va_get_mem_heaplet 0 va_s0) in let (b1:Vale.Def.Types_s.nat64) =
    Vale.X64.Decls.buffer64_read inB_b (1 + offset) (va_get_mem_heaplet 0 va_s0) in let
    (b2:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read inB_b (2 + offset)
    (va_get_mem_heaplet 0 va_s0) in let (b3:Vale.Def.Types_s.nat64) = Vale.X64.Decls.buffer64_read
    inB_b (3 + offset) (va_get_mem_heaplet 0 va_s0) in let (a:Prims.nat) =
    Vale.Curve25519.Fast_defs.pow2_four a0 a1 a2 a3 in let (b:Prims.nat) =
    Vale.Curve25519.Fast_defs.pow2_four b0 b1 b2 b3 in let d0 = Vale.X64.Decls.buffer64_read dst_b
    (0 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_sM) in let d1 =
    Vale.X64.Decls.buffer64_read dst_b (1 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_sM) in
    let d2 = Vale.X64.Decls.buffer64_read dst_b (2 + offset `op_Multiply` 2) (va_get_mem_heaplet 0
    va_sM) in let d3 = Vale.X64.Decls.buffer64_read dst_b (3 + offset `op_Multiply` 2)
    (va_get_mem_heaplet 0 va_sM) in let d4 = Vale.X64.Decls.buffer64_read dst_b (4 + offset
    `op_Multiply` 2) (va_get_mem_heaplet 0 va_sM) in let d5 = Vale.X64.Decls.buffer64_read dst_b (5
    + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_sM) in let d6 = Vale.X64.Decls.buffer64_read
    dst_b (6 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_sM) in let d7 =
    Vale.X64.Decls.buffer64_read dst_b (7 + offset `op_Multiply` 2) (va_get_mem_heaplet 0 va_sM) in
    let d = Vale.Curve25519.Fast_defs.pow2_eight d0 d1 d2 d3 d4 d5 d6 d7 in d == va_mul_nat a b /\
    Vale.X64.Decls.validSrcAddrs64 (va_get_mem_heaplet 0 va_sM) (va_get_reg64 rRdi va_sM) dst_b (8
    + offset `op_Multiply` 2) (va_get_mem_layout va_sM) Secret /\
    Vale.X64.Decls.modifies_buffer_specific dst_b (va_get_mem_heaplet 0 va_s0) (va_get_mem_heaplet
    0 va_sM) (0 + offset `op_Multiply` 2) (8 + offset `op_Multiply` 2 - 1)) /\ va_state_eq va_sM
    (va_update_flags va_sM (va_update_mem_heaplet 0 va_sM (va_update_reg64 rR14 va_sM
    (va_update_reg64 rR13 va_sM (va_update_reg64 rRbx va_sM (va_update_reg64 rR11 va_sM
    (va_update_reg64 rR10 va_sM (va_update_reg64 rR9 va_sM (va_update_reg64 rR8 va_sM
    (va_update_reg64 rRdx va_sM (va_update_reg64 rRax va_sM (va_update_ok va_sM (va_update_mem
    va_sM va_s0)))))))))))))))
/
Vale.X64.State.fsti.checked Vale.X64.Stack_i.fsti.checked Vale.X64.QuickCodes.fsti.checked Vale.X64.QuickCode.fst.checked Vale.X64.Memory.fsti.checked Vale.X64.Machine_s.fst.checked Vale.X64.InsStack.fsti.checked Vale.X64.InsMem.fsti.checked Vale.X64.InsBasic.fsti.checked Vale.X64.Flags.fsti.checked Vale.X64.Decls.fsti.checked Vale.X64.CPU_Features_s.fst.checked Vale.Def.Types_s.fst.checked Vale.Curve25519.Fast_defs.fst.checked Vale.Arch.Types.fsti.checked prims.fst.checked FStar.Pervasives.Native.fst.checked FStar.Pervasives.fsti.checked
Vale.Curve25519.X64.FastMul.fsti

    offset: Prims.nat ->
    dst_b: Vale.X64.Memory.buffer64 ->
    inA_b: Vale.X64.Memory.buffer64 ->
    inB_b: Vale.X64.Memory.buffer64 ->
    va_s0: Vale.X64.Decls.va_state ->
    va_k: (_: Vale.X64.Decls.va_state -> _: Prims.unit -> Type0)
  -> Type0
Prims.nat Vale.X64.Memory.buffer64 Vale.X64.Decls.va_state Prims.unit Prims.l_and Prims.b2t Vale.X64.Decls.va_get_ok Vale.X64.CPU_Features_s.adx_enabled Vale.X64.CPU_Features_s.bmi2_enabled Prims.l_or Prims.eq2 Prims.int Vale.X64.Decls.buffers_disjoint Vale.X64.Decls.validDstAddrs64 Vale.X64.Decls.va_get_mem_heaplet Vale.X64.Decls.va_get_reg64 Vale.X64.Machine_s.rRdi Prims.op_Addition Prims.op_Multiply Vale.X64.Decls.va_get_mem_layout Vale.Arch.HeapTypes_s.Secret Vale.X64.Decls.validSrcAddrs64 Vale.X64.Machine_s.rRsi Vale.X64.Machine_s.rRcx Vale.Curve25519.Fast_defs.pow2_four Vale.Def.Words_s.nat64 Vale.X64.Decls.buffer64_read Prims.l_Forall Vale.X64.InsBasic.vale_heap Vale.X64.Memory.nat64 Vale.X64.Flags.t Prims.l_imp Vale.X64.Decls.va_mul_nat Vale.X64.Decls.modifies_buffer_specific Prims.op_Subtraction Vale.Curve25519.Fast_defs.pow2_eight Vale.X64.State.vale_state Vale.X64.Decls.va_upd_flags Vale.X64.Decls.va_upd_mem_heaplet Vale.X64.Decls.va_upd_reg64 Vale.X64.Machine_s.rR14 Vale.X64.Machine_s.rR13 Vale.X64.Machine_s.rRbx Vale.X64.Machine_s.rR11 Vale.X64.Machine_s.rR10 Vale.X64.Machine_s.rR9 Vale.X64.Machine_s.rR8 Vale.X64.Machine_s.rRdx Vale.X64.Machine_s.rRax Vale.X64.Decls.va_upd_mem
let va_wp_Fast_multiply
      (offset: nat)
      (dst_b inA_b inB_b: buffer64)
      (va_s0: va_state)
      (va_k: (va_state -> unit -> Type0))
    : Type0 =
  
(va_get_ok va_s0 /\
  (let a0:Vale.Def.Types_s.nat64 =
      Vale.X64.Decls.buffer64_read inA_b (0 + offset) (va_get_mem_heaplet 0 va_s0)
    in
    let a1:Vale.Def.Types_s.nat64 =
      Vale.X64.Decls.buffer64_read inA_b (1 + offset) (va_get_mem_heaplet 0 va_s0)
    in
    let a2:Vale.Def.Types_s.nat64 =
      Vale.X64.Decls.buffer64_read inA_b (2 + offset) (va_get_mem_heaplet 0 va_s0)
    in
    let a3:Vale.Def.Types_s.nat64 =
      Vale.X64.Decls.buffer64_read inA_b (3 + offset) (va_get_mem_heaplet 0 va_s0)
    in
    let b0:Vale.Def.Types_s.nat64 =
      Vale.X64.Decls.buffer64_read inB_b (0 + offset) (va_get_mem_heaplet 0 va_s0)
    in
    let b1:Vale.Def.Types_s.nat64 =
      Vale.X64.Decls.buffer64_read inB_b (1 + offset) (va_get_mem_heaplet 0 va_s0)
    in
    let b2:Vale.Def.Types_s.nat64 =
      Vale.X64.Decls.buffer64_read inB_b (2 + offset) (va_get_mem_heaplet 0 va_s0)
    in
    let b3:Vale.Def.Types_s.nat64 =
      Vale.X64.Decls.buffer64_read inB_b (3 + offset) (va_get_mem_heaplet 0 va_s0)
    in
    let a:Prims.nat = Vale.Curve25519.Fast_defs.pow2_four a0 a1 a2 a3 in
    let b:Prims.nat = Vale.Curve25519.Fast_defs.pow2_four b0 b1 b2 b3 in
    adx_enabled /\ bmi2_enabled /\ (offset == 0 \/ offset == 4) /\
    Vale.X64.Decls.buffers_disjoint dst_b inA_b /\ Vale.X64.Decls.buffers_disjoint dst_b inB_b /\
    Vale.X64.Decls.validDstAddrs64 (va_get_mem_heaplet 0 va_s0)
      (va_get_reg64 rRdi va_s0)
      dst_b
      (8 + offset `op_Multiply` 2)
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.X64.Decls.validSrcAddrs64 (va_get_mem_heaplet 0 va_s0)
      (va_get_reg64 rRsi va_s0)
      inA_b
      (4 + offset)
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.X64.Decls.validSrcAddrs64 (va_get_mem_heaplet 0 va_s0)
      (va_get_reg64 rRcx va_s0)
      inB_b
      (4 + offset)
      (va_get_mem_layout va_s0)
      Secret) /\
  (forall (va_x_mem: vale_heap) (va_x_rax: nat64) (va_x_rdx: nat64) (va_x_r8: nat64)
      (va_x_r9: nat64) (va_x_r10: nat64) (va_x_r11: nat64) (va_x_rbx: nat64) (va_x_r13: nat64)
      (va_x_r14: nat64) (va_x_heap0: vale_heap) (va_x_efl: Vale.X64.Flags.t).
      let va_sM =
        va_upd_flags va_x_efl
          (va_upd_mem_heaplet 0
              va_x_heap0
              (va_upd_reg64 rR14
                  va_x_r14
                  (va_upd_reg64 rR13
                      va_x_r13
                      (va_upd_reg64 rRbx
                          va_x_rbx
                          (va_upd_reg64 rR11
                              va_x_r11
                              (va_upd_reg64 rR10
                                  va_x_r10
                                  (va_upd_reg64 rR9
                                      va_x_r9
                                      (va_upd_reg64 rR8
                                          va_x_r8
                                          (va_upd_reg64 rRdx
                                              va_x_rdx
                                              (va_upd_reg64 rRax
                                                  va_x_rax
                                                  (va_upd_mem va_x_mem va_s0)))))))))))
      in
      va_get_ok va_sM /\
      (let a0:Vale.Def.Types_s.nat64 =
          Vale.X64.Decls.buffer64_read inA_b (0 + offset) (va_get_mem_heaplet 0 va_s0)
        in
        let a1:Vale.Def.Types_s.nat64 =
          Vale.X64.Decls.buffer64_read inA_b (1 + offset) (va_get_mem_heaplet 0 va_s0)
        in
        let a2:Vale.Def.Types_s.nat64 =
          Vale.X64.Decls.buffer64_read inA_b (2 + offset) (va_get_mem_heaplet 0 va_s0)
        in
        let a3:Vale.Def.Types_s.nat64 =
          Vale.X64.Decls.buffer64_read inA_b (3 + offset) (va_get_mem_heaplet 0 va_s0)
        in
        let b0:Vale.Def.Types_s.nat64 =
          Vale.X64.Decls.buffer64_read inB_b (0 + offset) (va_get_mem_heaplet 0 va_s0)
        in
        let b1:Vale.Def.Types_s.nat64 =
          Vale.X64.Decls.buffer64_read inB_b (1 + offset) (va_get_mem_heaplet 0 va_s0)
        in
        let b2:Vale.Def.Types_s.nat64 =
          Vale.X64.Decls.buffer64_read inB_b (2 + offset) (va_get_mem_heaplet 0 va_s0)
        in
        let b3:Vale.Def.Types_s.nat64 =
          Vale.X64.Decls.buffer64_read inB_b (3 + offset) (va_get_mem_heaplet 0 va_s0)
        in
        let a:Prims.nat = Vale.Curve25519.Fast_defs.pow2_four a0 a1 a2 a3 in
        let b:Prims.nat = Vale.Curve25519.Fast_defs.pow2_four b0 b1 b2 b3 in
        let d0 =
          Vale.X64.Decls.buffer64_read dst_b
            (0 + offset `op_Multiply` 2)
            (va_get_mem_heaplet 0 va_sM)
        in
        let d1 =
          Vale.X64.Decls.buffer64_read dst_b
            (1 + offset `op_Multiply` 2)
            (va_get_mem_heaplet 0 va_sM)
        in
        let d2 =
          Vale.X64.Decls.buffer64_read dst_b
            (2 + offset `op_Multiply` 2)
            (va_get_mem_heaplet 0 va_sM)
        in
        let d3 =
          Vale.X64.Decls.buffer64_read dst_b
            (3 + offset `op_Multiply` 2)
            (va_get_mem_heaplet 0 va_sM)
        in
        let d4 =
          Vale.X64.Decls.buffer64_read dst_b
            (4 + offset `op_Multiply` 2)
            (va_get_mem_heaplet 0 va_sM)
        in
        let d5 =
          Vale.X64.Decls.buffer64_read dst_b
            (5 + offset `op_Multiply` 2)
            (va_get_mem_heaplet 0 va_sM)
        in
        let d6 =
          Vale.X64.Decls.buffer64_read dst_b
            (6 + offset `op_Multiply` 2)
            (va_get_mem_heaplet 0 va_sM)
        in
        let d7 =
          Vale.X64.Decls.buffer64_read dst_b
            (7 + offset `op_Multiply` 2)
            (va_get_mem_heaplet 0 va_sM)
        in
        let d = Vale.Curve25519.Fast_defs.pow2_eight d0 d1 d2 d3 d4 d5 d6 d7 in
        d == va_mul_nat a b /\
        Vale.X64.Decls.validSrcAddrs64 (va_get_mem_heaplet 0 va_sM)
          (va_get_reg64 rRdi va_sM)
          dst_b
          (8 + offset `op_Multiply` 2)
          (va_get_mem_layout va_sM)
          Secret /\
        Vale.X64.Decls.modifies_buffer_specific dst_b
          (va_get_mem_heaplet 0 va_s0)
          (va_get_mem_heaplet 0 va_sM)
          (0 + offset `op_Multiply` 2)
          (8 + offset `op_Multiply` 2 - 1)) ==>
      va_k va_sM (())))