val va_req_Gcm_blocks_decrypt_stdcall
      (va_b0: va_code)
      (va_s0: va_state)
      (alg: algorithm)
      (auth_b: buffer128)
      (auth_bytes auth_num: nat64)
      (keys_b iv_b: buffer128)
      (iv: supported_iv_BE)
      (hkeys_b abytes_b in128_b out128_b: buffer128)
      (len128_num: nat64)
      (inout_b: buffer128)
      (cipher_num: nat64)
      (gcm_struct_b: buffer64)
      (tag_b: buffer128)
      (key: (seq nat32))
    : prop
let va_req_Gcm_blocks_decrypt_stdcall (va_b0:va_code) (va_s0:va_state) (alg:algorithm)
  (auth_b:buffer128) (auth_bytes:nat64) (auth_num:nat64) (keys_b:buffer128) (iv_b:buffer128)
  (iv:supported_iv_BE) (hkeys_b:buffer128) (abytes_b:buffer128) (in128_b:buffer128)
  (out128_b:buffer128) (len128_num:nat64) (inout_b:buffer128) (cipher_num:nat64)
  (gcm_struct_b:buffer64) (tag_b:buffer128) (key:(seq nat32)) : prop =
  (va_require_total va_b0 (va_code_Gcm_blocks_decrypt_stdcall alg) va_s0 /\ va_get_ok va_s0 /\ (let
    (abytes_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 0
    (va_get_mem_heaplet 3 va_s0) in let (in128_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1 (va_get_mem_heaplet 3 va_s0) in let
    (out128_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2
    (va_get_mem_heaplet 3 va_s0) in let (len128:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3 (va_get_mem_heaplet 3 va_s0) in let
    (inout_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4
    (va_get_mem_heaplet 3 va_s0) in let (cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 5 (va_get_mem_heaplet 3 va_s0) in let
    (auth_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6
    (va_get_mem_heaplet 3 va_s0) in let (auth_len:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7 (va_get_mem_heaplet 3 va_s0) in let
    (auth_num_bytes:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8
    (va_get_mem_heaplet 3 va_s0) in let (iv_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9 (va_get_mem_heaplet 3 va_s0) in let
    (keys_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10
    (va_get_mem_heaplet 3 va_s0) in let (h_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11 (va_get_mem_heaplet 3 va_s0) in let
    (tag_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12
    (va_get_mem_heaplet 3 va_s0) in va_get_reg 1 va_s0 == Vale.PPC64LE.Stack_i.init_r1
    (va_get_stack va_s0) /\ Vale.PPC64LE.Memory.is_initial_heap (va_get_mem_layout va_s0)
    (va_get_mem va_s0) /\ auth_len == auth_num /\ auth_num_bytes == auth_bytes /\ len128 ==
    len128_num /\ cipher_num_bytes == cipher_num /\ Vale.PPC64LE.Decls.validSrcAddrs64 (va_get_mem
    va_s0) (va_get_reg 3 va_s0) gcm_struct_b 13 (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) auth_ptr auth_b auth_len
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
    abytes_ptr abytes_b 1 (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validDstAddrs128
    (va_get_mem va_s0) iv_ptr iv_b 1 (va_get_mem_layout va_s0) Public /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) in128_ptr in128_b len128
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0)
    out128_ptr out128_b len128 (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0) inout_ptr inout_b 1 (va_get_mem_layout
    va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) h_ptr hkeys_b 3
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
    tag_ptr tag_b 1 (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.buffer_disjoints64_128
    gcm_struct_b ([keys_b; auth_b; abytes_b; iv_b; in128_b; out128_b; inout_b; hkeys_b; tag_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 tag_b ([keys_b; auth_b; abytes_b; iv_b; in128_b;
    out128_b; inout_b; hkeys_b]) /\ Vale.PPC64LE.Decls.buffer_disjoints128 iv_b ([keys_b; auth_b;
    abytes_b; in128_b; out128_b; inout_b; hkeys_b]) /\ Vale.PPC64LE.Decls.buffer_disjoints128
    inout_b ([keys_b; auth_b; abytes_b; in128_b; out128_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 auth_b ([keys_b; abytes_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 abytes_b ([keys_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 out128_b ([keys_b; auth_b; abytes_b; hkeys_b; inout_b])
    /\ Vale.PPC64LE.Decls.buffer_disjoints128 in128_b ([keys_b; auth_b; abytes_b; hkeys_b;
    inout_b]) /\ (Vale.PPC64LE.Decls.buffers_disjoint128 in128_b out128_b \/ in128_b == out128_b)
    /\ auth_ptr + 16 `op_Multiply` auth_len < pow2_64 /\ in128_ptr + 16 `op_Multiply` len128 <
    pow2_64 /\ out128_ptr + 16 `op_Multiply` len128 < pow2_64 /\ inout_ptr + 16 < pow2_64 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 auth_b == auth_len /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 abytes_b == 1 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b ==
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 out128_b /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b == len128 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 inout_b == 1 /\ cipher_num_bytes
    < pow2_32 /\ auth_num_bytes < pow2_32 /\ Vale.PPC64LE.Memory.buffer_addr
    #Vale.PPC64LE.Memory.vuint128 keys_b (va_get_mem va_s0) + 128 < pow2_64 /\ (va_mul_nat len128
    (128 `op_Division` 8) <= cipher_num_bytes /\ cipher_num_bytes < va_mul_nat len128 (128
    `op_Division` 8) + 128 `op_Division` 8) /\ (va_mul_nat auth_len (128 `op_Division` 8) <=
    auth_num_bytes /\ auth_num_bytes < va_mul_nat auth_len (128 `op_Division` 8) + 128
    `op_Division` 8) /\ aes_reqs alg key (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.buffer128_as_seq (va_get_mem va_s0) keys_b)) keys_b keys_ptr (va_get_mem
    va_s0) (va_get_mem_layout va_s0) /\ Vale.AES.OptPublic_BE.hkeys_reqs_pub
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) hkeys_b))
    (Vale.AES.AES_BE_s.aes_encrypt_word alg key (Vale.Def.Words_s.Mkfour #Vale.Def.Types_s.nat32 0
    0 0 0)) /\ (let h_BE = Vale.AES.AES_BE_s.aes_encrypt_word alg key (Vale.Def.Words_s.Mkfour
    #Vale.Def.Types_s.nat32 0 0 0 0) in let iv_BE = Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read iv_b 0 (va_get_mem va_s0)) in iv_BE ==
    Vale.AES.GCM_BE_s.compute_iv_BE h_BE iv)))
val va_req_Gcm_blocks_decrypt_stdcall
      (va_b0: va_code)
      (va_s0: va_state)
      (alg: algorithm)
      (auth_b: buffer128)
      (auth_bytes auth_num: nat64)
      (keys_b iv_b: buffer128)
      (iv: supported_iv_BE)
      (hkeys_b abytes_b in128_b out128_b: buffer128)
      (len128_num: nat64)
      (inout_b: buffer128)
      (cipher_num: nat64)
      (gcm_struct_b: buffer64)
      (tag_b: buffer128)
      (key: (seq nat32))
    : prop
let va_req_Gcm_blocks_decrypt_stdcall
      (va_b0: va_code)
      (va_s0: va_state)
      (alg: algorithm)
      (auth_b: buffer128)
      (auth_bytes auth_num: nat64)
      (keys_b iv_b: buffer128)
      (iv: supported_iv_BE)
      (hkeys_b abytes_b in128_b out128_b: buffer128)
      (len128_num: nat64)
      (inout_b: buffer128)
      (cipher_num: nat64)
      (gcm_struct_b: buffer64)
      (tag_b: buffer128)
      (key: (seq nat32))
    : prop =
(va_require_total va_b0 (va_code_Gcm_blocks_decrypt_stdcall alg) va_s0 /\ va_get_ok va_s0 /\
  (let abytes_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 0 (va_get_mem_heaplet 3 va_s0)
    in
    let in128_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1 (va_get_mem_heaplet 3 va_s0)
    in
    let out128_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2 (va_get_mem_heaplet 3 va_s0)
    in
    let len128:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3 (va_get_mem_heaplet 3 va_s0)
    in
    let inout_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4 (va_get_mem_heaplet 3 va_s0)
    in
    let cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 5 (va_get_mem_heaplet 3 va_s0)
    in
    let auth_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6 (va_get_mem_heaplet 3 va_s0)
    in
    let auth_len:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7 (va_get_mem_heaplet 3 va_s0)
    in
    let auth_num_bytes:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8 (va_get_mem_heaplet 3 va_s0)
    in
    let iv_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9 (va_get_mem_heaplet 3 va_s0)
    in
    let keys_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10 (va_get_mem_heaplet 3 va_s0)
    in
    let h_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11 (va_get_mem_heaplet 3 va_s0)
    in
    let tag_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12 (va_get_mem_heaplet 3 va_s0)
    in
    va_get_reg 1 va_s0 == Vale.PPC64LE.Stack_i.init_r1 (va_get_stack va_s0) /\
    Vale.PPC64LE.Memory.is_initial_heap (va_get_mem_layout va_s0) (va_get_mem va_s0) /\
    auth_len == auth_num /\ auth_num_bytes == auth_bytes /\ len128 == len128_num /\
    cipher_num_bytes == cipher_num /\
    Vale.PPC64LE.Decls.validSrcAddrs64 (va_get_mem va_s0)
      (va_get_reg 3 va_s0)
      gcm_struct_b
      13
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
      auth_ptr
      auth_b
      auth_len
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
      abytes_ptr
      abytes_b
      1
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0)
      iv_ptr
      iv_b
      1
      (va_get_mem_layout va_s0)
      Public /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
      in128_ptr
      in128_b
      len128
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0)
      out128_ptr
      out128_b
      len128
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0)
      inout_ptr
      inout_b
      1
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
      h_ptr
      hkeys_b
      3
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
      tag_ptr
      tag_b
      1
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.buffer_disjoints64_128 gcm_struct_b
      ([keys_b; auth_b; abytes_b; iv_b; in128_b; out128_b; inout_b; hkeys_b; tag_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 tag_b
      ([keys_b; auth_b; abytes_b; iv_b; in128_b; out128_b; inout_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 iv_b
      ([keys_b; auth_b; abytes_b; in128_b; out128_b; inout_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 inout_b
      ([keys_b; auth_b; abytes_b; in128_b; out128_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 auth_b ([keys_b; abytes_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 abytes_b ([keys_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 out128_b ([keys_b; auth_b; abytes_b; hkeys_b; inout_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 in128_b ([keys_b; auth_b; abytes_b; hkeys_b; inout_b]) /\
    (Vale.PPC64LE.Decls.buffers_disjoint128 in128_b out128_b \/ in128_b == out128_b) /\
    auth_ptr + 16 `op_Multiply` auth_len < pow2_64 /\ in128_ptr + 16 `op_Multiply` len128 < pow2_64 /\
    out128_ptr + 16 `op_Multiply` len128 < pow2_64 /\ inout_ptr + 16 < pow2_64 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 auth_b == auth_len /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 abytes_b == 1 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b ==
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 out128_b /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b == len128 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 inout_b == 1 /\
    cipher_num_bytes < pow2_32 /\ auth_num_bytes < pow2_32 /\
    Vale.PPC64LE.Memory.buffer_addr #Vale.PPC64LE.Memory.vuint128 keys_b (va_get_mem va_s0) + 128 <
    pow2_64 /\
    (va_mul_nat len128 (128 `op_Division` 8) <= cipher_num_bytes /\
      cipher_num_bytes < va_mul_nat len128 (128 `op_Division` 8) + 128 `op_Division` 8) /\
    (va_mul_nat auth_len (128 `op_Division` 8) <= auth_num_bytes /\
      auth_num_bytes < va_mul_nat auth_len (128 `op_Division` 8) + 128 `op_Division` 8) /\
    aes_reqs alg
      key
      (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.buffer128_as_seq (va_get_mem va_s0
                )
              keys_b))
      keys_b
      keys_ptr
      (va_get_mem va_s0)
      (va_get_mem_layout va_s0) /\
    Vale.AES.OptPublic_BE.hkeys_reqs_pub (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128
              (va_get_mem va_s0)
              hkeys_b))
      (Vale.AES.AES_BE_s.aes_encrypt_word alg
          key
          (Vale.Def.Words_s.Mkfour #Vale.Def.Types_s.nat32 0 0 0 0)) /\
    (let h_BE =
        Vale.AES.AES_BE_s.aes_encrypt_word alg
          key
          (Vale.Def.Words_s.Mkfour #Vale.Def.Types_s.nat32 0 0 0 0)
      in
      let iv_BE =
        Vale.Def.Types_s.reverse_bytes_quad32 (Vale.PPC64LE.Decls.buffer128_read iv_b
              0
              (va_get_mem va_s0))
      in
      iv_BE == Vale.AES.GCM_BE_s.compute_iv_BE h_BE iv)))
Vale.AES.PPC64LE.GCMdecrypt.fsti.checked
Vale.PPC64LE.State.fsti.checked Vale.PPC64LE.Stack_i.fsti.checked Vale.PPC64LE.QuickCodes.fsti.checked Vale.PPC64LE.QuickCode.fst.checked Vale.PPC64LE.Memory.fsti.checked Vale.PPC64LE.Machine_s.fst.checked Vale.PPC64LE.InsVector.fsti.checked Vale.PPC64LE.InsStack.fsti.checked Vale.PPC64LE.InsMem.fsti.checked Vale.PPC64LE.InsBasic.fsti.checked Vale.PPC64LE.Decls.fsti.checked Vale.Poly1305.Math.fsti.checked Vale.Math.Poly2.Bits_s.fsti.checked Vale.Lib.Meta.fsti.checked Vale.Def.Words_s.fsti.checked Vale.Def.Words.Seq_s.fsti.checked Vale.Def.Types_s.fst.checked Vale.Def.Prop_s.fst.checked Vale.Def.Opaque_s.fsti.checked Vale.Arch.Types.fsti.checked Vale.Arch.HeapImpl.fsti.checked Vale.AES.PPC64LE.GHash.fsti.checked Vale.AES.PPC64LE.GF128_Mul.fsti.checked Vale.AES.PPC64LE.GCTR.fsti.checked Vale.AES.PPC64LE.GCMencrypt.fsti.checked Vale.AES.PPC64LE.AES.fsti.checked Vale.AES.OptPublic_BE.fsti.checked Vale.AES.GHash_BE_s.fst.checked Vale.AES.GHash_BE.fsti.checked Vale.AES.GF128_s.fsti.checked Vale.AES.GF128.fsti.checked Vale.AES.GCTR_BE_s.fst.checked Vale.AES.GCTR_BE.fsti.checked Vale.AES.GCM_helpers_BE.fsti.checked Vale.AES.GCM_BE_s.fst.checked Vale.AES.GCM_BE.fsti.checked Vale.AES.AES_common_s.fst.checked Vale.AES.AES_BE_s.fst.checked prims.fst.checked FStar.Seq.Base.fsti.checked FStar.Seq.fst.checked FStar.Pervasives.Native.fst.checked FStar.Pervasives.fsti.checked
Vale.AES.PPC64LE.GCMdecrypt.fsti
Vale.PPC64LE.Decls.va_code Vale.PPC64LE.Decls.va_state Vale.AES.AES_common_s.algorithm Vale.PPC64LE.Memory.buffer128 Vale.PPC64LE.Memory.nat64 Vale.AES.GCM_BE_s.supported_iv_BE Vale.PPC64LE.Memory.buffer64 FStar.Seq.Base.seq Vale.PPC64LE.Memory.nat32 Prims.l_and Vale.PPC64LE.Decls.va_require_total Vale.AES.PPC64LE.GCMdecrypt.va_code_Gcm_blocks_decrypt_stdcall Prims.b2t Vale.PPC64LE.Decls.va_get_ok Prims.eq2 Vale.Def.Words_s.nat64 Vale.PPC64LE.Decls.va_get_reg Vale.PPC64LE.Stack_i.init_r1 Vale.PPC64LE.Decls.va_get_stack Vale.PPC64LE.Memory.is_initial_heap Vale.PPC64LE.Decls.va_get_mem_layout Vale.PPC64LE.Decls.va_get_mem Vale.PPC64LE.Decls.validSrcAddrs64 Vale.Arch.HeapTypes_s.Secret Vale.PPC64LE.Decls.validSrcAddrs128 Vale.PPC64LE.Decls.validDstAddrs128 Vale.Arch.HeapTypes_s.Public Vale.PPC64LE.Decls.buffer_disjoints64_128 Prims.Cons Prims.Nil Vale.PPC64LE.Decls.buffer_disjoints128 Prims.l_or Vale.PPC64LE.Decls.buffers_disjoint128 Prims.op_LessThan Prims.op_Addition Prims.op_Multiply Vale.PPC64LE.Machine_s.pow2_64 Prims.nat Vale.PPC64LE.Decls.buffer_length Vale.PPC64LE.Memory.vuint128 Prims.int Vale.PPC64LE.Machine_s.pow2_32 Vale.PPC64LE.Memory.buffer_addr Prims.op_LessThanOrEqual Vale.PPC64LE.Decls.va_mul_nat Prims.op_Division Vale.AES.PPC64LE.GCMdecrypt.aes_reqs Vale.Arch.Types.reverse_bytes_quad32_seq Vale.PPC64LE.Decls.buffer128_as_seq Vale.AES.OptPublic_BE.hkeys_reqs_pub Vale.PPC64LE.Decls.s128 Vale.AES.AES_BE_s.aes_encrypt_word Vale.Def.Words_s.Mkfour Vale.Def.Types_s.nat32 Vale.Def.Types_s.quad32 Vale.AES.GCM_BE_s.compute_iv_BE Vale.Def.Types_s.reverse_bytes_quad32 Vale.PPC64LE.Decls.buffer128_read Vale.PPC64LE.Decls.buffer64_read Vale.PPC64LE.Decls.va_get_mem_heaplet Prims.prop
module Vale.AES.PPC64LE.GCMdecrypt
open Vale.Def.Prop_s
open Vale.Def.Opaque_s
open FStar.Seq
open Vale.Def.Words_s
open Vale.Def.Words.Seq_s
open Vale.Def.Types_s
open Vale.Arch.Types
open Vale.Arch.HeapImpl
open Vale.AES.AES_BE_s
open Vale.AES.GCTR_BE_s
open Vale.AES.GCTR_BE
open Vale.AES.GCM_BE
open Vale.AES.GHash_BE_s
open Vale.AES.GHash_BE
open Vale.AES.GCM_BE_s
open Vale.AES.PPC64LE.AES
open Vale.AES.GF128_s
open Vale.AES.GF128
open Vale.Poly1305.Math
open Vale.AES.GCM_helpers_BE
open Vale.AES.PPC64LE.GHash
open Vale.AES.PPC64LE.GCTR
open Vale.PPC64LE.Machine_s
open Vale.PPC64LE.Memory
open Vale.PPC64LE.Stack_i
open Vale.PPC64LE.State
open Vale.PPC64LE.Decls
open Vale.PPC64LE.InsBasic
open Vale.PPC64LE.InsMem
open Vale.PPC64LE.InsVector
open Vale.PPC64LE.InsStack
open Vale.PPC64LE.QuickCode
open Vale.PPC64LE.QuickCodes
open Vale.AES.PPC64LE.GF128_Mul
open Vale.Math.Poly2.Bits_s
open Vale.Lib.Meta
open Vale.AES.PPC64LE.GCMencrypt
let aes_reqs
  (alg:algorithm) (key:seq nat32) (round_keys:seq quad32) (keys_b:buffer128)
  (key_ptr:int) (heap0:vale_heap) (layout:vale_heap_layout) : prop0
  =
  (alg = AES_128 \/ alg = AES_256) /\
  is_aes_key_word alg key /\
  length(round_keys) == nr(alg) + 1 /\
  round_keys == key_to_round_keys_word alg key /\
  validSrcAddrs128 heap0 key_ptr keys_b (nr alg + 1) layout Secret /\
  reverse_bytes_quad32_seq (s128 heap0 keys_b) == round_keys
#reset-options "--z3rlimit 100 --max_ifuel 0"
//-- Gcm_blocks_decrypt_stdcall

val va_code_Gcm_blocks_decrypt_stdcall : alg:algorithm -> Tot va_code

val va_codegen_success_Gcm_blocks_decrypt_stdcall : alg:algorithm -> Tot va_pbool
let va_req_Gcm_blocks_decrypt_stdcall (va_b0:va_code) (va_s0:va_state) (alg:algorithm)
  (auth_b:buffer128) (auth_bytes:nat64) (auth_num:nat64) (keys_b:buffer128) (iv_b:buffer128)
  (iv:supported_iv_BE) (hkeys_b:buffer128) (abytes_b:buffer128) (in128_b:buffer128)
  (out128_b:buffer128) (len128_num:nat64) (inout_b:buffer128) (cipher_num:nat64)
val va_req_Gcm_blocks_decrypt_stdcall
      (va_b0: va_code)
      (va_s0: va_state)
      (alg: algorithm)
      (auth_b: buffer128)
      (auth_bytes auth_num: nat64)
      (keys_b iv_b: buffer128)
      (iv: supported_iv_BE)
      (hkeys_b abytes_b in128_b out128_b: buffer128)
      (len128_num: nat64)
      (inout_b: buffer128)
      (cipher_num: nat64)
      (gcm_struct_b: buffer64)
      (tag_b: buffer128)
      (key: (seq nat32))
    : prop

    va_b0: Vale.PPC64LE.Decls.va_code ->
    va_s0: Vale.PPC64LE.Decls.va_state ->
    alg: Vale.AES.AES_common_s.algorithm ->
    auth_b: Vale.PPC64LE.Memory.buffer128 ->
    auth_bytes: Vale.PPC64LE.Memory.nat64 ->
    auth_num: Vale.PPC64LE.Memory.nat64 ->
    keys_b: Vale.PPC64LE.Memory.buffer128 ->
    iv_b: Vale.PPC64LE.Memory.buffer128 ->
    iv: Vale.AES.GCM_BE_s.supported_iv_BE ->
    hkeys_b: Vale.PPC64LE.Memory.buffer128 ->
    abytes_b: Vale.PPC64LE.Memory.buffer128 ->
    in128_b: Vale.PPC64LE.Memory.buffer128 ->
    out128_b: Vale.PPC64LE.Memory.buffer128 ->
    len128_num: Vale.PPC64LE.Memory.nat64 ->
    inout_b: Vale.PPC64LE.Memory.buffer128 ->
    cipher_num: Vale.PPC64LE.Memory.nat64 ->
    gcm_struct_b: Vale.PPC64LE.Memory.buffer64 ->
    tag_b: Vale.PPC64LE.Memory.buffer128 ->
    key: FStar.Seq.Base.seq Vale.PPC64LE.Memory.nat32
  -> Prims.prop