val va_wpProof_ShiftLeft128_1 : a:poly -> va_s0:va_state -> va_k:(va_state -> unit -> Type0)
  -> Ghost (va_state & va_fuel & unit)
  (requires (va_t_require va_s0 /\ va_wp_ShiftLeft128_1 a va_s0 va_k))
  (ensures (fun (va_sM, va_f0, va_g) -> va_t_ensure (va_code_ShiftLeft128_1 ()) ([va_Mod_xmm 2;
    va_Mod_xmm 1; va_Mod_flags]) va_s0 va_k ((va_sM, va_f0, va_g))))
let va_wpProof_ShiftLeft128_1 a va_s0 va_k =
  let (va_sM, va_f0) = va_lemma_ShiftLeft128_1 (va_code_ShiftLeft128_1 ()) va_s0 a in
  va_lemma_upd_update va_sM;
  assert (va_state_eq va_sM (va_update_xmm 2 va_sM (va_update_xmm 1 va_sM (va_update_flags va_sM
    (va_update_ok va_sM va_s0)))));
  va_lemma_norm_mods ([va_Mod_xmm 2; va_Mod_xmm 1; va_Mod_flags]) va_sM va_s0;
  let va_g = () in
  (va_sM, va_f0, va_g)
val va_wpProof_ShiftLeft128_1 : a:poly -> va_s0:va_state -> va_k:(va_state -> unit -> Type0)
  -> Ghost (va_state & va_fuel & unit)
  (requires (va_t_require va_s0 /\ va_wp_ShiftLeft128_1 a va_s0 va_k))
  (ensures (fun (va_sM, va_f0, va_g) -> va_t_ensure (va_code_ShiftLeft128_1 ()) ([va_Mod_xmm 2;
    va_Mod_xmm 1; va_Mod_flags]) va_s0 va_k ((va_sM, va_f0, va_g))))
let va_wpProof_ShiftLeft128_1 a va_s0 va_k =
let va_sM, va_f0 = va_lemma_ShiftLeft128_1 (va_code_ShiftLeft128_1 ()) va_s0 a in
va_lemma_upd_update va_sM;
assert (va_state_eq va_sM
      (va_update_xmm 2
          va_sM
          (va_update_xmm 1 va_sM (va_update_flags va_sM (va_update_ok va_sM va_s0)))));
va_lemma_norm_mods ([va_Mod_xmm 2; va_Mod_xmm 1; va_Mod_flags]) va_sM va_s0;
let va_g = () in
(va_sM, va_f0, va_g)
Vale.AES.X64.GF128_Mul.fst.checked
Vale.X64.State.fsti.checked Vale.X64.QuickCodes.fsti.checked Vale.X64.QuickCode.fst.checked Vale.X64.Machine_s.fst.checked Vale.X64.InsVector.fsti.checked Vale.X64.InsMem.fsti.checked Vale.X64.InsBasic.fsti.checked Vale.X64.InsAes.fsti.checked Vale.X64.Flags.fsti.checked Vale.X64.Decls.fsti.checked Vale.X64.CPU_Features_s.fst.checked Vale.Math.Poly2_s.fsti.checked Vale.Math.Poly2.Words.fsti.checked Vale.Math.Poly2.Lemmas.fsti.checked Vale.Math.Poly2.Bits_s.fsti.checked Vale.Math.Poly2.Bits.fsti.checked Vale.Math.Poly2.fsti.checked Vale.Def.Types_s.fst.checked Vale.Arch.Types.fsti.checked Vale.AES.GF128_s.fsti.checked Vale.AES.GF128.fsti.checked prims.fst.checked FStar.Pervasives.Native.fst.checked FStar.Pervasives.fsti.checked
Vale.AES.X64.GF128_Mul.fst
Vale.Math.Poly2_s.poly Vale.X64.Decls.va_state Prims.unit Vale.X64.Decls.va_fuel FStar.Pervasives.Native.Mktuple3 Vale.X64.QuickCode.va_lemma_norm_mods Prims.Cons Vale.X64.QuickCode.mod_t Vale.X64.QuickCode.va_Mod_xmm Vale.X64.QuickCode.va_Mod_flags Prims.Nil Prims._assert Vale.X64.Decls.va_state_eq Vale.X64.Decls.va_update_xmm Vale.X64.Decls.va_update_flags Vale.X64.Decls.va_update_ok Vale.X64.Decls.va_lemma_upd_update FStar.Pervasives.Native.tuple3 FStar.Pervasives.Native.tuple2 Vale.X64.State.vale_state Vale.AES.X64.GF128_Mul.va_lemma_ShiftLeft128_1 Vale.AES.X64.GF128_Mul.va_code_ShiftLeft128_1
module Vale.AES.X64.GF128_Mul
open Vale.Def.Types_s
open Vale.Arch.Types
open Vale.Math.Poly2_s
open Vale.Math.Poly2
open Vale.Math.Poly2.Bits_s
open Vale.Math.Poly2.Bits
open Vale.Math.Poly2.Lemmas
open Vale.AES.GF128_s
open Vale.AES.GF128
open Vale.X64.Machine_s
open Vale.X64.State
open Vale.X64.Decls
open Vale.X64.InsBasic
open Vale.X64.InsMem
open Vale.X64.InsVector
open Vale.X64.InsAes
open Vale.X64.QuickCode
open Vale.X64.QuickCodes
open Vale.X64.CPU_Features_s
//-- ShiftLeft128_1

[@ "opaque_to_smt" va_qattr]
let va_code_ShiftLeft128_1 () =
  (va_Block (va_CCons (va_code_Mov128 (va_op_xmm_xmm 2) (va_op_xmm_xmm 1)) (va_CCons (va_code_Psrld
    (va_op_xmm_xmm 2) 31) (va_CCons (va_code_Pslld (va_op_xmm_xmm 1) 1) (va_CCons (va_code_VPslldq4
    (va_op_xmm_xmm 2) (va_op_xmm_xmm 2)) (va_CCons (va_code_Pxor (va_op_xmm_xmm 1) (va_op_xmm_xmm
    2)) (va_CNil ())))))))

[@ "opaque_to_smt" va_qattr]
let va_codegen_success_ShiftLeft128_1 () =
  (va_pbool_and (va_codegen_success_Mov128 (va_op_xmm_xmm 2) (va_op_xmm_xmm 1)) (va_pbool_and
    (va_codegen_success_Psrld (va_op_xmm_xmm 2) 31) (va_pbool_and (va_codegen_success_Pslld
    (va_op_xmm_xmm 1) 1) (va_pbool_and (va_codegen_success_VPslldq4 (va_op_xmm_xmm 2)
    (va_op_xmm_xmm 2)) (va_pbool_and (va_codegen_success_Pxor (va_op_xmm_xmm 1) (va_op_xmm_xmm 2))
    (va_ttrue ()))))))

[@ "opaque_to_smt" va_qattr]
let va_qcode_ShiftLeft128_1 (va_mods:va_mods_t) (a:poly) : (va_quickCode unit
  (va_code_ShiftLeft128_1 ())) =
  (qblock va_mods (fun (va_s:va_state) -> let (va_old_s:va_state) = va_s in va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 59 column 11 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/x64/Vale.AES.X64.GF128_Mul.vaf *****"
    (va_quick_Mov128 (va_op_xmm_xmm 2) (va_op_xmm_xmm 1)) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 60 column 10 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/x64/Vale.AES.X64.GF128_Mul.vaf *****"
    (va_quick_Psrld (va_op_xmm_xmm 2) 31) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 61 column 10 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/x64/Vale.AES.X64.GF128_Mul.vaf *****"
    (va_quick_Pslld (va_op_xmm_xmm 1) 1) (va_QSeq va_range1
    "***** PRECONDITION NOT MET AT line 62 column 13 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/x64/Vale.AES.X64.GF128_Mul.vaf *****"
    (va_quick_VPslldq4 (va_op_xmm_xmm 2) (va_op_xmm_xmm 2)) (va_QBind va_range1
    "***** PRECONDITION NOT MET AT line 63 column 9 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/x64/Vale.AES.X64.GF128_Mul.vaf *****"
    (va_quick_Pxor (va_op_xmm_xmm 1) (va_op_xmm_xmm 2)) (fun (va_s:va_state) _ -> let
    (va_arg8:Vale.Math.Poly2_s.poly) = a in va_qPURE va_range1
    "***** PRECONDITION NOT MET AT line 65 column 23 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/x64/Vale.AES.X64.GF128_Mul.vaf *****"
    (fun (_:unit) -> Vale.AES.GF128.lemma_shift_left_1 va_arg8) (va_QEmpty (())))))))))

[@"opaque_to_smt"]
let va_lemma_ShiftLeft128_1 va_b0 va_s0 a =
  let (va_mods:va_mods_t) = [va_Mod_xmm 2; va_Mod_xmm 1; va_Mod_flags; va_Mod_ok] in
  let va_qc = va_qcode_ShiftLeft128_1 va_mods a in
  let (va_sM, va_fM, va_g) = va_wp_sound_code_norm (va_code_ShiftLeft128_1 ()) va_qc va_s0 (fun
    va_s0 va_sM va_g -> let () = va_g in label va_range1
    "***** POSTCONDITION NOT MET AT line 45 column 1 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/x64/Vale.AES.X64.GF128_Mul.vaf *****"
    (va_get_ok va_sM) /\ label va_range1
    "***** POSTCONDITION NOT MET AT line 57 column 39 of file /home/gebner/everest/hacl-star/vale/code/crypto/aes/x64/Vale.AES.X64.GF128_Mul.vaf *****"
    (va_get_xmm 1 va_sM == Vale.Math.Poly2.Bits_s.to_quad32 (Vale.Math.Poly2_s.shift a 1))) in
  assert_norm (va_qc.mods == va_mods);
  va_lemma_norm_mods ([va_Mod_xmm 2; va_Mod_xmm 1; va_Mod_flags; va_Mod_ok]) va_sM va_s0;
  (va_sM, va_fM)
val va_wpProof_ShiftLeft128_1 : a:poly -> va_s0:va_state -> va_k:(va_state -> unit -> Type0)
  -> Ghost (va_state & va_fuel & unit)
  (requires (va_t_require va_s0 /\ va_wp_ShiftLeft128_1 a va_s0 va_k))
  (ensures (fun (va_sM, va_f0, va_g) -> va_t_ensure (va_code_ShiftLeft128_1 ()) ([va_Mod_xmm 2;
    va_Mod_xmm 1; va_Mod_flags]) va_s0 va_k ((va_sM, va_f0, va_g))))

    a: Vale.Math.Poly2_s.poly ->
    va_s0: Vale.X64.Decls.va_state ->
    va_k: (_: Vale.X64.Decls.va_state -> _: Prims.unit -> Type0)
  -> Prims.Ghost ((Vale.X64.Decls.va_state * Vale.X64.Decls.va_fuel) * Prims.unit)