val va_ens_KeyExpansionStdcall
      (va_b0: va_code)
      (va_s0: va_state)
      (win: bool)
      (alg: algorithm)
      (input_key_b output_key_expansion_b: buffer128)
      (va_sM: va_state)
      (va_fM: va_fuel)
    : prop
val va_ens_KeyExpansionStdcall
      (va_b0: va_code)
      (va_s0: va_state)
      (win: bool)
      (alg: algorithm)
      (input_key_b output_key_expansion_b: buffer128)
      (va_sM: va_state)
      (va_fM: va_fuel)
    : prop
let va_ens_KeyExpansionStdcall (va_b0:va_code) (va_s0:va_state) (win:bool) (alg:algorithm)
  (input_key_b:buffer128) (output_key_expansion_b:buffer128) (va_sM:va_state) (va_fM:va_fuel) :
  prop =
  (va_req_KeyExpansionStdcall va_b0 va_s0 win alg input_key_b output_key_expansion_b /\
    va_ensure_total va_b0 va_s0 va_sM va_fM /\ va_get_ok va_sM /\ (let (key_ptr:(va_int_range 0
    18446744073709551615)) = (if win then va_get_reg64 rRcx va_s0 else va_get_reg64 rRdi va_s0) in
    let (key_expansion_ptr:(va_int_range 0 18446744073709551615)) = (if win then va_get_reg64 rRdx
    va_s0 else va_get_reg64 rRsi va_s0) in let (key:(FStar.Seq.Base.seq Vale.Def.Types_s.nat32)) =
    (if (alg = AES_128) then Vale.Arch.Types.quad32_to_seq (Vale.X64.Decls.buffer128_read
    input_key_b 0 (va_get_mem va_s0)) else Vale.AES.AES256_helpers.make_AES256_key
    (Vale.X64.Decls.buffer128_read input_key_b 0 (va_get_mem va_s0)) (Vale.X64.Decls.buffer128_read
    input_key_b 1 (va_get_mem va_s0))) in Vale.X64.Decls.modifies_buffer128 output_key_expansion_b
    (va_get_mem va_s0) (va_get_mem va_sM) /\ (forall j . 0 <= j /\ j <= Vale.AES.AES_common_s.nr
    alg ==> Vale.X64.Decls.buffer128_read output_key_expansion_b j (va_get_mem va_sM) ==
    FStar.Seq.Base.index #Vale.Def.Types_s.quad32 (Vale.AES.AES_s.key_to_round_keys_LE alg key) j))
    /\ va_state_eq va_sM (va_update_flags va_sM (va_update_xmm 4 va_sM (va_update_xmm 3 va_sM
    (va_update_xmm 2 va_sM (va_update_xmm 1 va_sM (va_update_mem_layout va_sM
    (va_update_mem_heaplet 1 va_sM (va_update_reg64 rRdx va_sM (va_update_ok va_sM (va_update_mem
    va_sM va_s0)))))))))))
module Vale.AES.X64.AES
open Vale.Def.Types_s
open FStar.Seq
open Vale.Arch.HeapImpl
open Vale.AES.AES_s
open Vale.X64.Machine_s
open Vale.X64.Memory
open Vale.X64.State
open Vale.X64.Decls
open Vale.X64.InsBasic
open Vale.X64.InsMem
open Vale.X64.InsVector
//open Vale.X64.InsAes
open Vale.X64.QuickCode
open Vale.X64.QuickCodes
open Vale.Arch.Types
//open Vale.AES.AES_helpers
open Vale.AES.AES256_helpers
open Vale.Def.Opaque_s
open Vale.AES.X64.AES128
open Vale.AES.X64.AES256
open Vale.AES.GCTR
open Vale.X64.CPU_Features_s
open Vale.X64.Stack
#reset-options "--z3rlimit 20"
//-- KeyExpansionStdcall

val va_code_KeyExpansionStdcall : win:bool -> alg:algorithm -> Tot va_code

val va_codegen_success_KeyExpansionStdcall : win:bool -> alg:algorithm -> Tot va_pbool
let va_req_KeyExpansionStdcall (va_b0:va_code) (va_s0:va_state) (win:bool) (alg:algorithm)
  (input_key_b:buffer128) (output_key_expansion_b:buffer128) : prop =
  (va_require_total va_b0 (va_code_KeyExpansionStdcall win alg) va_s0 /\ va_get_ok va_s0 /\ (let
    (key_ptr:(va_int_range 0 18446744073709551615)) = (if win then va_get_reg64 rRcx va_s0 else
    va_get_reg64 rRdi va_s0) in let (key_expansion_ptr:(va_int_range 0 18446744073709551615)) = (if
    win then va_get_reg64 rRdx va_s0 else va_get_reg64 rRsi va_s0) in let (key:(FStar.Seq.Base.seq
    Vale.Def.Types_s.nat32)) = (if (alg = AES_128) then Vale.Arch.Types.quad32_to_seq
    (Vale.X64.Decls.buffer128_read input_key_b 0 (va_get_mem va_s0)) else
    Vale.AES.AES256_helpers.make_AES256_key (Vale.X64.Decls.buffer128_read input_key_b 0
    (va_get_mem va_s0)) (Vale.X64.Decls.buffer128_read input_key_b 1 (va_get_mem va_s0))) in
    Vale.X64.Memory.is_initial_heap (va_get_mem_layout va_s0) (va_get_mem va_s0) /\ (aesni_enabled
    /\ avx_enabled /\ sse_enabled) /\ (alg = AES_128 \/ alg = AES_256) /\
    Vale.X64.Decls.buffers_disjoint128 input_key_b output_key_expansion_b /\
    Vale.X64.Decls.validSrcAddrs128 (va_get_mem va_s0) key_ptr input_key_b (if (alg = AES_128) then
    1 else 2) (va_get_mem_layout va_s0) Secret /\ Vale.X64.Decls.validDstAddrs128 (va_get_mem
    va_s0) key_expansion_ptr output_key_expansion_b (Vale.AES.AES_common_s.nr alg + 1)
/
Vale.X64.State.fsti.checked Vale.X64.Stack.fsti.checked Vale.X64.QuickCodes.fsti.checked Vale.X64.QuickCode.fst.checked Vale.X64.Memory.fsti.checked Vale.X64.Machine_s.fst.checked Vale.X64.InsVector.fsti.checked Vale.X64.InsMem.fsti.checked Vale.X64.InsBasic.fsti.checked Vale.X64.Flags.fsti.checked Vale.X64.Decls.fsti.checked Vale.X64.CPU_Features_s.fst.checked Vale.Def.Types_s.fst.checked Vale.Def.Opaque_s.fsti.checked Vale.Arch.Types.fsti.checked Vale.Arch.HeapImpl.fsti.checked Vale.AES.X64.AES256.fsti.checked Vale.AES.X64.AES128.fsti.checked Vale.AES.GCTR.fsti.checked Vale.AES.AES_s.fst.checked Vale.AES.AES_common_s.fst.checked Vale.AES.AES256_helpers.fsti.checked prims.fst.checked FStar.Seq.Base.fsti.checked FStar.Seq.fst.checked FStar.Pervasives.Native.fst.checked FStar.Pervasives.fsti.checked
Vale.AES.X64.AES.fsti

    va_b0: Vale.X64.Decls.va_code ->
    va_s0: Vale.X64.Decls.va_state ->
    win: Prims.bool ->
    alg: Vale.AES.AES_common_s.algorithm ->
    input_key_b: Vale.X64.Memory.buffer128 ->
    output_key_expansion_b: Vale.X64.Memory.buffer128 ->
    va_sM: Vale.X64.Decls.va_state ->
    va_fM: Vale.X64.Decls.va_fuel
  -> Prims.prop
Vale.X64.Decls.va_code Vale.X64.Decls.va_state Prims.bool Vale.AES.AES_common_s.algorithm Vale.X64.Memory.buffer128 Vale.X64.Decls.va_fuel Prims.l_and Vale.AES.X64.AES.va_req_KeyExpansionStdcall Vale.X64.Decls.va_ensure_total Prims.b2t Vale.X64.Decls.va_get_ok Vale.X64.Decls.modifies_buffer128 Vale.X64.Decls.va_get_mem Prims.l_Forall Prims.int Prims.op_GreaterThanOrEqual Prims.op_LessThan FStar.Seq.Base.length Vale.Def.Types_s.quad32 Vale.AES.AES_s.key_to_round_keys_LE Prims.l_imp Prims.op_LessThanOrEqual Vale.AES.AES_common_s.nr Prims.eq2 Vale.X64.Decls.buffer128_read FStar.Seq.Base.index FStar.Seq.Base.seq Vale.Def.Words_s.nat32 Prims.op_Equality Vale.AES.AES_common_s.AES_128 Vale.Arch.Types.quad32_to_seq Vale.AES.AES256_helpers.make_AES256_key Vale.X64.Decls.va_int_range Vale.X64.Decls.va_get_reg64 Vale.X64.Machine_s.rRdx Vale.X64.Machine_s.rRsi Vale.X64.Machine_s.rRcx Vale.X64.Machine_s.rRdi Vale.X64.Decls.va_state_eq Vale.X64.Decls.va_update_flags Vale.X64.Decls.va_update_xmm Vale.X64.Decls.va_update_mem_layout Vale.X64.Decls.va_update_mem_heaplet Vale.X64.Decls.va_update_reg64 Vale.X64.Decls.va_update_ok Vale.X64.Decls.va_update_mem Prims.prop
let va_ens_KeyExpansionStdcall
      (va_b0: va_code)
      (va_s0: va_state)
      (win: bool)
      (alg: algorithm)
      (input_key_b output_key_expansion_b: buffer128)
      (va_sM: va_state)
      (va_fM: va_fuel)
    : prop =
  
(va_req_KeyExpansionStdcall va_b0 va_s0 win alg input_key_b output_key_expansion_b /\
  va_ensure_total va_b0 va_s0 va_sM va_fM /\ va_get_ok va_sM /\
  (let key_ptr:(va_int_range 0 18446744073709551615) =
      (if win then va_get_reg64 rRcx va_s0 else va_get_reg64 rRdi va_s0)
    in
    let key_expansion_ptr:(va_int_range 0 18446744073709551615) =
      (if win then va_get_reg64 rRdx va_s0 else va_get_reg64 rRsi va_s0)
    in
    let key:(FStar.Seq.Base.seq Vale.Def.Types_s.nat32) =
      (if (alg = AES_128)
        then
          Vale.Arch.Types.quad32_to_seq (Vale.X64.Decls.buffer128_read input_key_b
                0
                (va_get_mem va_s0))
        else
          Vale.AES.AES256_helpers.make_AES256_key (Vale.X64.Decls.buffer128_read input_key_b
                0
                (va_get_mem va_s0))
            (Vale.X64.Decls.buffer128_read input_key_b 1 (va_get_mem va_s0)))
    in
    Vale.X64.Decls.modifies_buffer128 output_key_expansion_b (va_get_mem va_s0) (va_get_mem va_sM) /\
    (forall j.
        0 <= j /\ j <= Vale.AES.AES_common_s.nr alg ==>
        Vale.X64.Decls.buffer128_read output_key_expansion_b j (va_get_mem va_sM) ==
        FStar.Seq.Base.index #Vale.Def.Types_s.quad32
          (Vale.AES.AES_s.key_to_round_keys_LE alg key)
          j)) /\
  va_state_eq va_sM
    (va_update_flags va_sM
        (va_update_xmm 4
            va_sM
            (va_update_xmm 3
                va_sM
                (va_update_xmm 2
                    va_sM
                    (va_update_xmm 1
                        va_sM
                        (va_update_mem_layout va_sM
                            (va_update_mem_heaplet 1
                                va_sM
                                (va_update_reg64 rRdx
                                    va_sM
                                    (va_update_ok va_sM (va_update_mem va_sM va_s0)))))))))))