val va_qcode_AESEncryptBlock
      (va_mods: va_mods_t)
      (alg: algorithm)
      (input: quad32)
      (key: (seq nat32))
      (round_keys: (seq quad32))
      (keys_buffer: buffer128)
    : (va_quickCode unit (va_code_AESEncryptBlock alg))
let va_qcode_AESEncryptBlock (va_mods:va_mods_t) (alg:algorithm) (input:quad32) (key:(seq nat32))
  (round_keys:(seq quad32)) (keys_buffer:buffer128) : (va_quickCode unit (va_code_AESEncryptBlock
  alg)) =
  (qblock va_mods (fun (va_s:va_state) -> let (va_old_s:va_state) = va_s in va_QBind va_range1
    "***** PRECONDITION NOT MET AT line 113 column 15 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/ppc64le/Vale.AES.PPC64LE.AES.vaf *****"
    (va_qInlineIf va_mods (alg = AES_128) (qblock va_mods (fun (va_s:va_state) -> va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 114 column 27 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/ppc64le/Vale.AES.PPC64LE.AES.vaf *****"
    (va_quick_AES128EncryptBlock input key round_keys keys_buffer) (va_QEmpty (())))) (qblock
    va_mods (fun (va_s:va_state) -> va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 116 column 27 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/ppc64le/Vale.AES.PPC64LE.AES.vaf *****"
    (va_quick_AES256EncryptBlock input key round_keys keys_buffer) (va_QEmpty (()))))) (fun
    (va_s:va_state) va_g -> va_QEmpty (()))))
val va_qcode_AESEncryptBlock
      (va_mods: va_mods_t)
      (alg: algorithm)
      (input: quad32)
      (key: (seq nat32))
      (round_keys: (seq quad32))
      (keys_buffer: buffer128)
    : (va_quickCode unit (va_code_AESEncryptBlock alg))
let va_qcode_AESEncryptBlock
      (va_mods: va_mods_t)
      (alg: algorithm)
      (input: quad32)
      (key: (seq nat32))
      (round_keys: (seq quad32))
      (keys_buffer: buffer128)
    : (va_quickCode unit (va_code_AESEncryptBlock alg)) =
(qblock va_mods
    (fun (va_s: va_state) ->
        let va_old_s:va_state = va_s in
        va_QBind va_range1
          "***** PRECONDITION NOT MET AT line 113 column 15 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/ppc64le/Vale.AES.PPC64LE.AES.vaf *****"
          (va_qInlineIf va_mods
              (alg = AES_128)
              (qblock va_mods
                  (fun (va_s: va_state) ->
                      va_QSeq va_range1
                        "***** PRECONDITION NOT MET AT line 114 column 27 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/ppc64le/Vale.AES.PPC64LE.AES.vaf *****"
                        (va_quick_AES128EncryptBlock input key round_keys keys_buffer)
                        (va_QEmpty (()))))
              (qblock va_mods
                  (fun (va_s: va_state) ->
                      va_QSeq va_range1
                        "***** PRECONDITION NOT MET AT line 116 column 27 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/ppc64le/Vale.AES.PPC64LE.AES.vaf *****"
                        (va_quick_AES256EncryptBlock input key round_keys keys_buffer)
                        (va_QEmpty (())))))
          (fun (va_s: va_state) va_g -> va_QEmpty (()))))
Vale.AES.PPC64LE.AES.fst.checked
Vale.PPC64LE.State.fsti.checked Vale.PPC64LE.QuickCodes.fsti.checked Vale.PPC64LE.QuickCode.fst.checked Vale.PPC64LE.Memory.fsti.checked Vale.PPC64LE.Machine_s.fst.checked Vale.PPC64LE.InsVector.fsti.checked Vale.PPC64LE.InsMem.fsti.checked Vale.PPC64LE.InsBasic.fsti.checked Vale.PPC64LE.Decls.fsti.checked Vale.Def.Types_s.fst.checked Vale.Def.Opaque_s.fsti.checked Vale.Arch.Types.fsti.checked Vale.Arch.HeapImpl.fsti.checked Vale.AES.PPC64LE.AES256.fsti.checked Vale.AES.PPC64LE.AES128.fsti.checked Vale.AES.AES_common_s.fst.checked Vale.AES.AES_BE_s.fst.checked Vale.AES.AES256_helpers_BE.fsti.checked prims.fst.checked FStar.Seq.Base.fsti.checked FStar.Seq.fst.checked FStar.Pervasives.Native.fst.checked FStar.Pervasives.fsti.checked
Vale.AES.PPC64LE.AES.fst
Vale.PPC64LE.QuickCode.va_mods_t Vale.AES.AES_common_s.algorithm Vale.PPC64LE.Memory.quad32 FStar.Seq.Base.seq Vale.PPC64LE.Memory.nat32 Vale.PPC64LE.Memory.buffer128 Vale.PPC64LE.QuickCodes.qblock Prims.unit Prims.Cons Vale.PPC64LE.Decls.va_code Vale.PPC64LE.QuickCodes.if_code Prims.op_Equality Vale.AES.AES_common_s.AES_128 Vale.PPC64LE.QuickCodes.block Vale.AES.PPC64LE.AES128.va_code_AES128EncryptBlock Prims.Nil Vale.PPC64LE.Machine_s.precode Vale.PPC64LE.Decls.ins Vale.PPC64LE.Decls.ocmp Vale.AES.PPC64LE.AES256.va_code_AES256EncryptBlock Vale.PPC64LE.Decls.va_state Vale.PPC64LE.QuickCodes.va_QBind Vale.PPC64LE.QuickCodes.va_range1 Vale.PPC64LE.QuickCodes.va_qInlineIf Vale.PPC64LE.QuickCodes.va_QSeq Vale.AES.PPC64LE.AES128.va_quick_AES128EncryptBlock Vale.PPC64LE.QuickCodes.va_QEmpty Vale.PPC64LE.QuickCodes.quickCodes Vale.AES.PPC64LE.AES256.va_quick_AES256EncryptBlock Vale.PPC64LE.Machine_s.state Vale.PPC64LE.QuickCode.va_quickCode Vale.AES.PPC64LE.AES.va_code_AESEncryptBlock
module Vale.AES.PPC64LE.AES
open Vale.Def.Types_s
open FStar.Seq
open Vale.Arch.HeapImpl
open Vale.AES.AES_BE_s
open Vale.PPC64LE.Machine_s
open Vale.PPC64LE.Memory
open Vale.PPC64LE.State
open Vale.PPC64LE.Decls
open Vale.PPC64LE.InsBasic
open Vale.PPC64LE.InsMem
open Vale.PPC64LE.InsVector
open Vale.PPC64LE.QuickCode
open Vale.PPC64LE.QuickCodes
open Vale.Arch.Types
open Vale.Def.Opaque_s
open Vale.AES.PPC64LE.AES128
open Vale.AES.PPC64LE.AES256
#reset-options "--z3rlimit 20"
//-- KeyExpansionStdcall

[@ "opaque_to_smt" va_qattr]
let va_code_KeyExpansionStdcall alg =
  (va_Block (va_CCons (va_code_CreateHeaplets ()) (va_CCons (if (alg = AES_128) then va_Block
    (va_CCons (va_code_KeyExpansion128Stdcall ()) (va_CNil ())) else va_Block (va_CCons
    (va_code_KeyExpansion256Stdcall ()) (va_CNil ()))) (va_CCons (va_code_DestroyHeaplets ())
    (va_CNil ())))))

[@ "opaque_to_smt" va_qattr]
let va_codegen_success_KeyExpansionStdcall alg =
  (va_pbool_and (va_codegen_success_CreateHeaplets ()) (va_pbool_and (if (alg = AES_128) then
    va_pbool_and (va_codegen_success_KeyExpansion128Stdcall ()) (va_ttrue ()) else va_pbool_and
    (va_codegen_success_KeyExpansion256Stdcall ()) (va_ttrue ())) (va_pbool_and
    (va_codegen_success_DestroyHeaplets ()) (va_ttrue ()))))

[@ "opaque_to_smt" va_qattr]
let va_qcode_KeyExpansionStdcall (va_mods:va_mods_t) (alg:algorithm) (input_key_b:buffer128)
  (output_key_expansion_b:buffer128) : (va_quickCode unit (va_code_KeyExpansionStdcall alg)) =
  (qblock va_mods (fun (va_s:va_state) -> let (va_old_s:va_state) = va_s in let
    (in_key1:Vale.Def.Types_s.quad32) = Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read input_key_b 0 (va_get_mem va_s)) in let
    (in_key2:Vale.Def.Types_s.quad32) = Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read input_key_b 1 (va_get_mem va_s)) in let
    (key:(FStar.Seq.Base.seq Vale.Def.Types_s.nat32)) = va_if (alg = AES_128) (fun _ ->
    Vale.AES.AES256_helpers_BE.be_quad32_to_seq in_key1) (fun _ ->
    Vale.AES.AES256_helpers_BE.make_AES256_key in_key1 in_key2) in va_QBind va_range1
    "***** PRECONDITION NOT MET AT line 72 column 19 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/ppc64le/Vale.AES.PPC64LE.AES.vaf *****"
    (va_quick_CreateHeaplets ([declare_buffer128 input_key_b 0 Secret Immutable; declare_buffer128
    output_key_expansion_b 1 Secret Mutable])) (fun (va_s:va_state) _ -> va_QBind va_range1
    "***** PRECONDITION NOT MET AT line 76 column 15 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/ppc64le/Vale.AES.PPC64LE.AES.vaf *****"
    (va_qInlineIf va_mods (alg = AES_128) (qblock va_mods (fun (va_s:va_state) -> va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 77 column 31 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/ppc64le/Vale.AES.PPC64LE.AES.vaf *****"
    (va_quick_KeyExpansion128Stdcall input_key_b output_key_expansion_b) (va_QEmpty (())))) (qblock
    va_mods (fun (va_s:va_state) -> va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 79 column 31 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/ppc64le/Vale.AES.PPC64LE.AES.vaf *****"
    (va_quick_KeyExpansion256Stdcall input_key_b output_key_expansion_b) (va_QEmpty (()))))) (fun
    (va_s:va_state) va_g -> va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 82 column 20 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/ppc64le/Vale.AES.PPC64LE.AES.vaf *****"
    (va_quick_DestroyHeaplets ()) (va_QEmpty (()))))))



[@"opaque_to_smt"]
let va_lemma_KeyExpansionStdcall va_b0 va_s0 alg input_key_b output_key_expansion_b =
  let (va_mods:va_mods_t) = [va_Mod_vec 5; va_Mod_vec 4; va_Mod_vec 3; va_Mod_vec 2; va_Mod_vec 1;
    va_Mod_vec 0; va_Mod_reg 10; va_Mod_mem_layout; va_Mod_mem_heaplet 1; va_Mod_ok; va_Mod_mem] in
  let va_qc = va_qcode_KeyExpansionStdcall va_mods alg input_key_b output_key_expansion_b in
  let (va_sM, va_fM, va_g) = va_wp_sound_code_norm (va_code_KeyExpansionStdcall alg) va_qc va_s0
    (fun va_s0 va_sM va_g -> let () = va_g in label va_range1
    "***** POSTCONDITION NOT MET AT line 44 column 1 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/ppc64le/Vale.AES.PPC64LE.AES.vaf *****"
    (va_get_ok va_sM) /\ (let (in_key1:Vale.Def.Types_s.quad32) =
    Vale.Def.Types_s.reverse_bytes_quad32 (Vale.PPC64LE.Decls.buffer128_read input_key_b 0
    (va_get_mem va_s0)) in let (in_key2:Vale.Def.Types_s.quad32) =
    Vale.Def.Types_s.reverse_bytes_quad32 (Vale.PPC64LE.Decls.buffer128_read input_key_b 1
    (va_get_mem va_s0)) in let (key:(FStar.Seq.Base.seq Vale.Def.Types_s.nat32)) = va_if (alg =
    AES_128) (fun _ -> Vale.AES.AES256_helpers_BE.be_quad32_to_seq in_key1) (fun _ ->
    Vale.AES.AES256_helpers_BE.make_AES256_key in_key1 in_key2) in label va_range1
    "***** POSTCONDITION NOT MET AT line 68 column 66 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/ppc64le/Vale.AES.PPC64LE.AES.vaf *****"
    (Vale.PPC64LE.Decls.modifies_buffer128 output_key_expansion_b (va_get_mem va_s0) (va_get_mem
    va_sM)) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 70 column 127 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/ppc64le/Vale.AES.PPC64LE.AES.vaf *****"
    (forall j . 0 <= j /\ j <= Vale.AES.AES_common_s.nr alg ==>
    Vale.Def.Types_s.reverse_bytes_quad32 (Vale.PPC64LE.Decls.buffer128_read output_key_expansion_b
    j (va_get_mem va_sM)) == FStar.Seq.Base.index #Vale.Def.Types_s.quad32
    (Vale.AES.AES_BE_s.key_to_round_keys_word alg key) j))) in
  assert_norm (va_qc.mods == va_mods);
  va_lemma_norm_mods ([va_Mod_vec 5; va_Mod_vec 4; va_Mod_vec 3; va_Mod_vec 2; va_Mod_vec 1;
    va_Mod_vec 0; va_Mod_reg 10; va_Mod_mem_layout; va_Mod_mem_heaplet 1; va_Mod_ok; va_Mod_mem])
    va_sM va_s0;
  (va_sM, va_fM)


[@"opaque_to_smt"]
let va_wpProof_KeyExpansionStdcall alg input_key_b output_key_expansion_b va_s0 va_k =
  let (va_sM, va_f0) = va_lemma_KeyExpansionStdcall (va_code_KeyExpansionStdcall alg) va_s0 alg
    input_key_b output_key_expansion_b in
  va_lemma_upd_update va_sM;
  assert (va_state_eq va_sM (va_update_vec 5 va_sM (va_update_vec 4 va_sM (va_update_vec 3 va_sM
    (va_update_vec 2 va_sM (va_update_vec 1 va_sM (va_update_vec 0 va_sM (va_update_reg 10 va_sM
    (va_update_mem_layout va_sM (va_update_mem_heaplet 1 va_sM (va_update_ok va_sM (va_update_mem
    va_sM va_s0))))))))))));
  va_lemma_norm_mods ([va_Mod_vec 5; va_Mod_vec 4; va_Mod_vec 3; va_Mod_vec 2; va_Mod_vec 1;
    va_Mod_vec 0; va_Mod_reg 10; va_Mod_mem_layout; va_Mod_mem_heaplet 1; va_Mod_mem]) va_sM va_s0;
  let va_g = () in
  (va_sM, va_f0, va_g)

//--
//-- AESEncryptBlock

[@ "opaque_to_smt" va_qattr]
let va_code_AESEncryptBlock alg =
  (va_Block (va_CCons (if (alg = AES_128) then va_Block (va_CCons (va_code_AES128EncryptBlock ())
    (va_CNil ())) else va_Block (va_CCons (va_code_AES256EncryptBlock ()) (va_CNil ()))) (va_CNil
    ())))

[@ "opaque_to_smt" va_qattr]
let va_codegen_success_AESEncryptBlock alg =
  (va_pbool_and (if (alg = AES_128) then va_pbool_and (va_codegen_success_AES128EncryptBlock ())
    (va_ttrue ()) else va_pbool_and (va_codegen_success_AES256EncryptBlock ()) (va_ttrue ()))
    (va_ttrue ()))

[@ "opaque_to_smt" va_qattr]
let va_qcode_AESEncryptBlock (va_mods:va_mods_t) (alg:algorithm) (input:quad32) (key:(seq nat32))
  (round_keys:(seq quad32)) (keys_buffer:buffer128) : (va_quickCode unit (va_code_AESEncryptBlock
val va_qcode_AESEncryptBlock
      (va_mods: va_mods_t)
      (alg: algorithm)
      (input: quad32)
      (key: (seq nat32))
      (round_keys: (seq quad32))
      (keys_buffer: buffer128)
    : (va_quickCode unit (va_code_AESEncryptBlock alg))

    va_mods: Vale.PPC64LE.QuickCode.va_mods_t ->
    alg: Vale.AES.AES_common_s.algorithm ->
    input: Vale.PPC64LE.Memory.quad32 ->
    key: FStar.Seq.Base.seq Vale.PPC64LE.Memory.nat32 ->
    round_keys: FStar.Seq.Base.seq Vale.PPC64LE.Memory.quad32 ->
    keys_buffer: Vale.PPC64LE.Memory.buffer128
  -> Vale.PPC64LE.QuickCode.va_quickCode Prims.unit
      (Vale.AES.PPC64LE.AES.va_code_AESEncryptBlock alg)