val va_wp_Gcm_blocks_decrypt_stdcall
      (alg: algorithm)
      (auth_b: buffer128)
      (auth_bytes auth_num: nat64)
      (keys_b iv_b: buffer128)
      (iv: supported_iv_BE)
      (hkeys_b abytes_b in128_b out128_b: buffer128)
      (len128_num: nat64)
      (inout_b: buffer128)
      (cipher_num: nat64)
      (gcm_struct_b: buffer64)
      (tag_b: buffer128)
      (key: (seq nat32))
      (va_s0: va_state)
      (va_k: (va_state -> unit -> Type0))
    : Type0
let va_wp_Gcm_blocks_decrypt_stdcall (alg:algorithm) (auth_b:buffer128) (auth_bytes:nat64)
  (auth_num:nat64) (keys_b:buffer128) (iv_b:buffer128) (iv:supported_iv_BE) (hkeys_b:buffer128)
  (abytes_b:buffer128) (in128_b:buffer128) (out128_b:buffer128) (len128_num:nat64)
  (inout_b:buffer128) (cipher_num:nat64) (gcm_struct_b:buffer64) (tag_b:buffer128) (key:(seq
  nat32)) (va_s0:va_state) (va_k:(va_state -> unit -> Type0)) : Type0 =
  (va_get_ok va_s0 /\ (let (abytes_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 0 (va_get_mem_heaplet 3 va_s0) in let
    (in128_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1
    (va_get_mem_heaplet 3 va_s0) in let (out128_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2 (va_get_mem_heaplet 3 va_s0) in let
    (len128:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3
    (va_get_mem_heaplet 3 va_s0) in let (inout_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4 (va_get_mem_heaplet 3 va_s0) in let
    (cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b
    5 (va_get_mem_heaplet 3 va_s0) in let (auth_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6 (va_get_mem_heaplet 3 va_s0) in let
    (auth_len:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7
    (va_get_mem_heaplet 3 va_s0) in let (auth_num_bytes:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8 (va_get_mem_heaplet 3 va_s0) in let
    (iv_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9
    (va_get_mem_heaplet 3 va_s0) in let (keys_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10 (va_get_mem_heaplet 3 va_s0) in let
    (h_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11
    (va_get_mem_heaplet 3 va_s0) in let (tag_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12 (va_get_mem_heaplet 3 va_s0) in va_get_reg 1
    va_s0 == Vale.PPC64LE.Stack_i.init_r1 (va_get_stack va_s0) /\
    Vale.PPC64LE.Memory.is_initial_heap (va_get_mem_layout va_s0) (va_get_mem va_s0) /\ auth_len ==
    auth_num /\ auth_num_bytes == auth_bytes /\ len128 == len128_num /\ cipher_num_bytes ==
    cipher_num /\ Vale.PPC64LE.Decls.validSrcAddrs64 (va_get_mem va_s0) (va_get_reg 3 va_s0)
    gcm_struct_b 13 (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128
    (va_get_mem va_s0) auth_ptr auth_b auth_len (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) abytes_ptr abytes_b 1 (va_get_mem_layout
    va_s0) Secret /\ Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0) iv_ptr iv_b 1
    (va_get_mem_layout va_s0) Public /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
    in128_ptr in128_b len128 (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0) out128_ptr out128_b len128
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0)
    inout_ptr inout_b 1 (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128
    (va_get_mem va_s0) h_ptr hkeys_b 3 (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) tag_ptr tag_b 1 (va_get_mem_layout
    va_s0) Secret /\ Vale.PPC64LE.Decls.buffer_disjoints64_128 gcm_struct_b ([keys_b; auth_b;
    abytes_b; iv_b; in128_b; out128_b; inout_b; hkeys_b; tag_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 tag_b ([keys_b; auth_b; abytes_b; iv_b; in128_b;
    out128_b; inout_b; hkeys_b]) /\ Vale.PPC64LE.Decls.buffer_disjoints128 iv_b ([keys_b; auth_b;
    abytes_b; in128_b; out128_b; inout_b; hkeys_b]) /\ Vale.PPC64LE.Decls.buffer_disjoints128
    inout_b ([keys_b; auth_b; abytes_b; in128_b; out128_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 auth_b ([keys_b; abytes_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 abytes_b ([keys_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 out128_b ([keys_b; auth_b; abytes_b; hkeys_b; inout_b])
    /\ Vale.PPC64LE.Decls.buffer_disjoints128 in128_b ([keys_b; auth_b; abytes_b; hkeys_b;
    inout_b]) /\ (Vale.PPC64LE.Decls.buffers_disjoint128 in128_b out128_b \/ in128_b == out128_b)
    /\ auth_ptr + 16 `op_Multiply` auth_len < pow2_64 /\ in128_ptr + 16 `op_Multiply` len128 <
    pow2_64 /\ out128_ptr + 16 `op_Multiply` len128 < pow2_64 /\ inout_ptr + 16 < pow2_64 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 auth_b == auth_len /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 abytes_b == 1 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b ==
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 out128_b /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b == len128 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 inout_b == 1 /\ cipher_num_bytes
    < pow2_32 /\ auth_num_bytes < pow2_32 /\ Vale.PPC64LE.Memory.buffer_addr
    #Vale.PPC64LE.Memory.vuint128 keys_b (va_get_mem va_s0) + 128 < pow2_64 /\ (va_mul_nat len128
    (128 `op_Division` 8) <= cipher_num_bytes /\ cipher_num_bytes < va_mul_nat len128 (128
    `op_Division` 8) + 128 `op_Division` 8) /\ (va_mul_nat auth_len (128 `op_Division` 8) <=
    auth_num_bytes /\ auth_num_bytes < va_mul_nat auth_len (128 `op_Division` 8) + 128
    `op_Division` 8) /\ aes_reqs alg key (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.buffer128_as_seq (va_get_mem va_s0) keys_b)) keys_b keys_ptr (va_get_mem
    va_s0) (va_get_mem_layout va_s0) /\ Vale.AES.OptPublic_BE.hkeys_reqs_pub
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) hkeys_b))
    (Vale.AES.AES_BE_s.aes_encrypt_word alg key (Vale.Def.Words_s.Mkfour #Vale.Def.Types_s.nat32 0
    0 0 0)) /\ (let h_BE = Vale.AES.AES_BE_s.aes_encrypt_word alg key (Vale.Def.Words_s.Mkfour
    #Vale.Def.Types_s.nat32 0 0 0 0) in let iv_BE = Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read iv_b 0 (va_get_mem va_s0)) in iv_BE ==
    Vale.AES.GCM_BE_s.compute_iv_BE h_BE iv)) /\ (forall (va_x_mem:vale_heap) (va_x_r1:nat64)
    (va_x_r3:nat64) (va_x_r4:nat64) (va_x_r5:nat64) (va_x_r6:nat64) (va_x_r7:nat64) (va_x_r8:nat64)
    (va_x_r9:nat64) (va_x_r10:nat64) (va_x_r25:nat64) (va_x_r26:nat64) (va_x_r27:nat64)
    (va_x_r28:nat64) (va_x_r29:nat64) (va_x_r30:nat64) (va_x_r31:nat64) (va_x_v0:quad32)
    (va_x_v1:quad32) (va_x_v2:quad32) (va_x_v3:quad32) (va_x_v4:quad32) (va_x_v5:quad32)
    (va_x_v6:quad32) (va_x_v7:quad32) (va_x_v8:quad32) (va_x_v9:quad32) (va_x_v10:quad32)
    (va_x_v11:quad32) (va_x_v12:quad32) (va_x_v13:quad32) (va_x_v14:quad32) (va_x_v15:quad32)
    (va_x_v16:quad32) (va_x_v17:quad32) (va_x_v18:quad32) (va_x_v19:quad32) (va_x_v20:quad32)
    (va_x_v21:quad32) (va_x_cr0:cr0_t) (va_x_xer:xer_t) (va_x_heap1:vale_heap)
    (va_x_heap2:vale_heap) (va_x_heap4:vale_heap) (va_x_heap5:vale_heap)
    (va_x_memLayout:vale_heap_layout) (va_x_stack:vale_stack) (va_x_stackTaint:memtaint) . let
    va_sM = va_upd_stackTaint va_x_stackTaint (va_upd_stack va_x_stack (va_upd_mem_layout
    va_x_memLayout (va_upd_mem_heaplet 5 va_x_heap5 (va_upd_mem_heaplet 4 va_x_heap4
    (va_upd_mem_heaplet 2 va_x_heap2 (va_upd_mem_heaplet 1 va_x_heap1 (va_upd_xer va_x_xer
    (va_upd_cr0 va_x_cr0 (va_upd_vec 21 va_x_v21 (va_upd_vec 20 va_x_v20 (va_upd_vec 19 va_x_v19
    (va_upd_vec 18 va_x_v18 (va_upd_vec 17 va_x_v17 (va_upd_vec 16 va_x_v16 (va_upd_vec 15 va_x_v15
    (va_upd_vec 14 va_x_v14 (va_upd_vec 13 va_x_v13 (va_upd_vec 12 va_x_v12 (va_upd_vec 11 va_x_v11
    (va_upd_vec 10 va_x_v10 (va_upd_vec 9 va_x_v9 (va_upd_vec 8 va_x_v8 (va_upd_vec 7 va_x_v7
    (va_upd_vec 6 va_x_v6 (va_upd_vec 5 va_x_v5 (va_upd_vec 4 va_x_v4 (va_upd_vec 3 va_x_v3
    (va_upd_vec 2 va_x_v2 (va_upd_vec 1 va_x_v1 (va_upd_vec 0 va_x_v0 (va_upd_reg 31 va_x_r31
    (va_upd_reg 30 va_x_r30 (va_upd_reg 29 va_x_r29 (va_upd_reg 28 va_x_r28 (va_upd_reg 27 va_x_r27
    (va_upd_reg 26 va_x_r26 (va_upd_reg 25 va_x_r25 (va_upd_reg 10 va_x_r10 (va_upd_reg 9 va_x_r9
    (va_upd_reg 8 va_x_r8 (va_upd_reg 7 va_x_r7 (va_upd_reg 6 va_x_r6 (va_upd_reg 5 va_x_r5
    (va_upd_reg 4 va_x_r4 (va_upd_reg 3 va_x_r3 (va_upd_reg 1 va_x_r1 (va_upd_mem va_x_mem
    va_s0))))))))))))))))))))))))))))))))))))))))))))))) in va_get_ok va_sM /\ (let
    (abytes_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 0
    (va_get_mem_heaplet 3 va_s0) in let (in128_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1 (va_get_mem_heaplet 3 va_s0) in let
    (out128_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2
    (va_get_mem_heaplet 3 va_s0) in let (len128:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3 (va_get_mem_heaplet 3 va_s0) in let
    (inout_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4
    (va_get_mem_heaplet 3 va_s0) in let (cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 5 (va_get_mem_heaplet 3 va_s0) in let
    (auth_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6
    (va_get_mem_heaplet 3 va_s0) in let (auth_len:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7 (va_get_mem_heaplet 3 va_s0) in let
    (auth_num_bytes:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8
    (va_get_mem_heaplet 3 va_s0) in let (iv_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9 (va_get_mem_heaplet 3 va_s0) in let
    (keys_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10
    (va_get_mem_heaplet 3 va_s0) in let (h_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11 (va_get_mem_heaplet 3 va_s0) in let
    (tag_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12
    (va_get_mem_heaplet 3 va_s0) in Vale.PPC64LE.Decls.modifies_mem (Vale.PPC64LE.Decls.loc_union
    (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128 iv_b)
    (Vale.PPC64LE.Decls.loc_union (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128
    out128_b) (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128 inout_b))) (va_get_mem
    va_s0) (va_get_mem va_sM) /\ cipher_num_bytes < pow2_32 /\ auth_num_bytes < pow2_32 /\ (let
    iv_BE = Vale.Def.Types_s.reverse_bytes_quad32 (Vale.PPC64LE.Decls.buffer128_read iv_b 0
    (va_get_mem va_s0)) in let auth_raw_quads = FStar.Seq.Base.append #Vale.Def.Types_s.quad32
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) auth_b))
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0)
    abytes_b)) in let auth_bytes = FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
    #Vale.Def.Words_s.nat32 auth_raw_quads)) 0 auth_num_bytes in let cipher_raw_quads =
    FStar.Seq.Base.append #Vale.Def.Types_s.quad32 (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) in128_b)) (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) inout_b)) in let cipher_bytes =
    FStar.Seq.Base.slice #Vale.Def.Words_s.nat8 (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE
    (Vale.Def.Words.Seq_s.seq_four_to_seq_BE #Vale.Def.Words_s.nat32 cipher_raw_quads)) 0
    cipher_num_bytes in let plain_raw_quads = FStar.Seq.Base.append #Vale.Def.Types_s.quad32
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_sM)
    out128_b)) (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem
    va_sM) inout_b)) in let plain_bytes = FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
    #Vale.Def.Words_s.nat32 plain_raw_quads)) 0 cipher_num_bytes in let expected_tag =
    Vale.Arch.Types.be_quad32_to_bytes (Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read tag_b 0 (va_get_mem va_s0))) in l_and (l_and (l_and (l_and
    (FStar.Seq.Base.length #Vale.Def.Words_s.nat8 auth_bytes < pow2_32) (FStar.Seq.Base.length
    #Vale.Def.Words_s.nat8 plain_bytes < pow2_32)) (Vale.AES.AES_common_s.is_aes_key alg
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key))) (plain_bytes ==
    __proj__Mktuple2__item___1 #(FStar.Seq.Base.seq Vale.Def.Types_s.nat8) #bool
    (Vale.AES.GCM_BE_s.gcm_decrypt_BE alg (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key) iv
    cipher_bytes auth_bytes expected_tag))) (va_get_reg 3 va_sM = 0 == __proj__Mktuple2__item___2
    #(FStar.Seq.Base.seq Vale.Def.Types_s.nat8) #bool (Vale.AES.GCM_BE_s.gcm_decrypt_BE alg
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key) iv cipher_bytes auth_bytes expected_tag))
    /\ va_get_reg 1 va_sM == va_get_reg 1 va_s0 /\ l_and (l_and (l_and (l_and (l_and (l_and (l_and
    (l_and (va_get_reg 25 va_sM == va_get_reg 25 va_s0) (va_get_reg 26 va_sM == va_get_reg 26
    va_s0)) (va_get_reg 27 va_sM == va_get_reg 27 va_s0)) (va_get_reg 28 va_sM == va_get_reg 28
    va_s0)) (va_get_reg 29 va_sM == va_get_reg 29 va_s0)) (va_get_reg 30 va_sM == va_get_reg 30
    va_s0)) (va_get_reg 31 va_sM == va_get_reg 31 va_s0)) (va_get_vec 20 va_sM == va_get_vec 20
    va_s0)) (va_get_vec 21 va_sM == va_get_vec 21 va_s0))) ==> va_k va_sM (())))
val va_wp_Gcm_blocks_decrypt_stdcall
      (alg: algorithm)
      (auth_b: buffer128)
      (auth_bytes auth_num: nat64)
      (keys_b iv_b: buffer128)
      (iv: supported_iv_BE)
      (hkeys_b abytes_b in128_b out128_b: buffer128)
      (len128_num: nat64)
      (inout_b: buffer128)
      (cipher_num: nat64)
      (gcm_struct_b: buffer64)
      (tag_b: buffer128)
      (key: (seq nat32))
      (va_s0: va_state)
      (va_k: (va_state -> unit -> Type0))
    : Type0
let va_wp_Gcm_blocks_decrypt_stdcall
      (alg: algorithm)
      (auth_b: buffer128)
      (auth_bytes auth_num: nat64)
      (keys_b iv_b: buffer128)
      (iv: supported_iv_BE)
      (hkeys_b abytes_b in128_b out128_b: buffer128)
      (len128_num: nat64)
      (inout_b: buffer128)
      (cipher_num: nat64)
      (gcm_struct_b: buffer64)
      (tag_b: buffer128)
      (key: (seq nat32))
      (va_s0: va_state)
      (va_k: (va_state -> unit -> Type0))
    : Type0 =
(va_get_ok va_s0 /\
  (let abytes_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 0 (va_get_mem_heaplet 3 va_s0)
    in
    let in128_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1 (va_get_mem_heaplet 3 va_s0)
    in
    let out128_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2 (va_get_mem_heaplet 3 va_s0)
    in
    let len128:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3 (va_get_mem_heaplet 3 va_s0)
    in
    let inout_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4 (va_get_mem_heaplet 3 va_s0)
    in
    let cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 5 (va_get_mem_heaplet 3 va_s0)
    in
    let auth_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6 (va_get_mem_heaplet 3 va_s0)
    in
    let auth_len:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7 (va_get_mem_heaplet 3 va_s0)
    in
    let auth_num_bytes:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8 (va_get_mem_heaplet 3 va_s0)
    in
    let iv_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9 (va_get_mem_heaplet 3 va_s0)
    in
    let keys_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10 (va_get_mem_heaplet 3 va_s0)
    in
    let h_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11 (va_get_mem_heaplet 3 va_s0)
    in
    let tag_ptr:Vale.PPC64LE.Machine_s.nat64 =
      Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12 (va_get_mem_heaplet 3 va_s0)
    in
    va_get_reg 1 va_s0 == Vale.PPC64LE.Stack_i.init_r1 (va_get_stack va_s0) /\
    Vale.PPC64LE.Memory.is_initial_heap (va_get_mem_layout va_s0) (va_get_mem va_s0) /\
    auth_len == auth_num /\ auth_num_bytes == auth_bytes /\ len128 == len128_num /\
    cipher_num_bytes == cipher_num /\
    Vale.PPC64LE.Decls.validSrcAddrs64 (va_get_mem va_s0)
      (va_get_reg 3 va_s0)
      gcm_struct_b
      13
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
      auth_ptr
      auth_b
      auth_len
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
      abytes_ptr
      abytes_b
      1
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0)
      iv_ptr
      iv_b
      1
      (va_get_mem_layout va_s0)
      Public /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
      in128_ptr
      in128_b
      len128
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0)
      out128_ptr
      out128_b
      len128
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0)
      inout_ptr
      inout_b
      1
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
      h_ptr
      hkeys_b
      3
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
      tag_ptr
      tag_b
      1
      (va_get_mem_layout va_s0)
      Secret /\
    Vale.PPC64LE.Decls.buffer_disjoints64_128 gcm_struct_b
      ([keys_b; auth_b; abytes_b; iv_b; in128_b; out128_b; inout_b; hkeys_b; tag_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 tag_b
      ([keys_b; auth_b; abytes_b; iv_b; in128_b; out128_b; inout_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 iv_b
      ([keys_b; auth_b; abytes_b; in128_b; out128_b; inout_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 inout_b
      ([keys_b; auth_b; abytes_b; in128_b; out128_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 auth_b ([keys_b; abytes_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 abytes_b ([keys_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 out128_b ([keys_b; auth_b; abytes_b; hkeys_b; inout_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 in128_b ([keys_b; auth_b; abytes_b; hkeys_b; inout_b]) /\
    (Vale.PPC64LE.Decls.buffers_disjoint128 in128_b out128_b \/ in128_b == out128_b) /\
    auth_ptr + 16 `op_Multiply` auth_len < pow2_64 /\ in128_ptr + 16 `op_Multiply` len128 < pow2_64 /\
    out128_ptr + 16 `op_Multiply` len128 < pow2_64 /\ inout_ptr + 16 < pow2_64 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 auth_b == auth_len /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 abytes_b == 1 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b ==
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 out128_b /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b == len128 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 inout_b == 1 /\
    cipher_num_bytes < pow2_32 /\ auth_num_bytes < pow2_32 /\
    Vale.PPC64LE.Memory.buffer_addr #Vale.PPC64LE.Memory.vuint128 keys_b (va_get_mem va_s0) + 128 <
    pow2_64 /\
    (va_mul_nat len128 (128 `op_Division` 8) <= cipher_num_bytes /\
      cipher_num_bytes < va_mul_nat len128 (128 `op_Division` 8) + 128 `op_Division` 8) /\
    (va_mul_nat auth_len (128 `op_Division` 8) <= auth_num_bytes /\
      auth_num_bytes < va_mul_nat auth_len (128 `op_Division` 8) + 128 `op_Division` 8) /\
    aes_reqs alg
      key
      (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.buffer128_as_seq (va_get_mem va_s0
                )
              keys_b))
      keys_b
      keys_ptr
      (va_get_mem va_s0)
      (va_get_mem_layout va_s0) /\
    Vale.AES.OptPublic_BE.hkeys_reqs_pub (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128
              (va_get_mem va_s0)
              hkeys_b))
      (Vale.AES.AES_BE_s.aes_encrypt_word alg
          key
          (Vale.Def.Words_s.Mkfour #Vale.Def.Types_s.nat32 0 0 0 0)) /\
    (let h_BE =
        Vale.AES.AES_BE_s.aes_encrypt_word alg
          key
          (Vale.Def.Words_s.Mkfour #Vale.Def.Types_s.nat32 0 0 0 0)
      in
      let iv_BE =
        Vale.Def.Types_s.reverse_bytes_quad32 (Vale.PPC64LE.Decls.buffer128_read iv_b
              0
              (va_get_mem va_s0))
      in
      iv_BE == Vale.AES.GCM_BE_s.compute_iv_BE h_BE iv)) /\
  (forall (va_x_mem: vale_heap) (va_x_r1: nat64) (va_x_r3: nat64) (va_x_r4: nat64) (va_x_r5: nat64)
      (va_x_r6: nat64) (va_x_r7: nat64) (va_x_r8: nat64) (va_x_r9: nat64) (va_x_r10: nat64)
      (va_x_r25: nat64) (va_x_r26: nat64) (va_x_r27: nat64) (va_x_r28: nat64) (va_x_r29: nat64)
      (va_x_r30: nat64) (va_x_r31: nat64) (va_x_v0: quad32) (va_x_v1: quad32) (va_x_v2: quad32)
      (va_x_v3: quad32) (va_x_v4: quad32) (va_x_v5: quad32) (va_x_v6: quad32) (va_x_v7: quad32)
      (va_x_v8: quad32) (va_x_v9: quad32) (va_x_v10: quad32) (va_x_v11: quad32) (va_x_v12: quad32)
      (va_x_v13: quad32) (va_x_v14: quad32) (va_x_v15: quad32) (va_x_v16: quad32) (va_x_v17: quad32)
      (va_x_v18: quad32) (va_x_v19: quad32) (va_x_v20: quad32) (va_x_v21: quad32) (va_x_cr0: cr0_t)
      (va_x_xer: xer_t) (va_x_heap1: vale_heap) (va_x_heap2: vale_heap) (va_x_heap4: vale_heap)
      (va_x_heap5: vale_heap) (va_x_memLayout: vale_heap_layout) (va_x_stack: vale_stack)
      (va_x_stackTaint: memtaint).
      let va_sM =
        va_upd_stackTaint va_x_stackTaint
          (va_upd_stack va_x_stack
              (va_upd_mem_layout va_x_memLayout
                  (va_upd_mem_heaplet 5
                      va_x_heap5
                      (va_upd_mem_heaplet 4
                          va_x_heap4
                          (va_upd_mem_heaplet 2
                              va_x_heap2
                              (va_upd_mem_heaplet 1
                                  va_x_heap1
                                  (va_upd_xer va_x_xer
                                      (va_upd_cr0 va_x_cr0
                                          (va_upd_vec 21
                                              va_x_v21
                                              (va_upd_vec 20
                                                  va_x_v20
                                                  (va_upd_vec 19
                                                      va_x_v19
                                                      (va_upd_vec 18
                                                          va_x_v18
                                                          (va_upd_vec 17
                                                              va_x_v17
                                                              (va_upd_vec 16
                                                                  va_x_v16
                                                                  (va_upd_vec 15
                                                                      va_x_v15
                                                                      (va_upd_vec 14
                                                                          va_x_v14
                                                                          (va_upd_vec 13
                                                                              va_x_v13
                                                                              (va_upd_vec 12
                                                                                  va_x_v12
                                                                                  (va_upd_vec 11
                                                                                      va_x_v11
                                                                                      (va_upd_vec 10
                                                                                          va_x_v10
                                                                                          (va_upd_vec
                                                                                              9
                                                                                              va_x_v9
                                                                                              (va_upd_vec
                                                                                                  8
                                                                                                  va_x_v8
                                                                                                  (va_upd_vec
                                                                                                      7
                                                                                                      va_x_v7
                                                                                                      (
                                                                                                        va_upd_vec
                                                                                                          6
                                                                                                          va_x_v6
                                                                                                          (
                                                                                                            va_upd_vec
                                                                                                              5
                                                                                                              va_x_v5
                                                                                                              (
                                                                                                                va_upd_vec
                                                                                                                  4
                                                                                                                  va_x_v4
                                                                                                                  (
                                                                                                                    va_upd_vec
                                                                                                                      3
                                                                                                                      va_x_v3
                                                                                                                      (
                                                                                                                        va_upd_vec
                                                                                                                          2
                                                                                                                          va_x_v2
                                                                                                                          (
                                                                                                                            va_upd_vec
                                                                                                                              1
                                                                                                                              va_x_v1
                                                                                                                              (
                                                                                                                                va_upd_vec
                                                                                                                                  0
                                                                                                                                  va_x_v0
                                                                                                                                  (
                                                                                                                                    va_upd_reg
                                                                                                                                      31
                                                                                                                                      va_x_r31
                                                                                                                                      (
                                                                                                                                        va_upd_reg
                                                                                                                                          30
                                                                                                                                          va_x_r30
                                                                                                                                          (
                                                                                                                                            va_upd_reg
                                                                                                                                              29
                                                                                                                                              va_x_r29
                                                                                                                                              (
                                                                                                                                                va_upd_reg
                                                                                                                                                  28
                                                                                                                                                  va_x_r28
                                                                                                                                                  (
                                                                                                                                                    va_upd_reg
                                                                                                                                                      27
                                                                                                                                                      va_x_r27
                                                                                                                                                      (
                                                                                                                                                        va_upd_reg
                                                                                                                                                          26
                                                                                                                                                          va_x_r26
                                                                                                                                                          (
                                                                                                                                                            va_upd_reg
                                                                                                                                                              25
                                                                                                                                                              va_x_r25
                                                                                                                                                              (
                                                                                                                                                                va_upd_reg
                                                                                                                                                                  10
                                                                                                                                                                  va_x_r10
                                                                                                                                                                  (
                                                                                                                                                                    va_upd_reg
                                                                                                                                                                      9
                                                                                                                                                                      va_x_r9
                                                                                                                                                                      (
                                                                                                                                                                        va_upd_reg
                                                                                                                                                                          8
                                                                                                                                                                          va_x_r8
                                                                                                                                                                          (
                                                                                                                                                                            va_upd_reg
                                                                                                                                                                              7
                                                                                                                                                                              va_x_r7
                                                                                                                                                                              (
                                                                                                                                                                                va_upd_reg
                                                                                                                                                                                  6
                                                                                                                                                                                  va_x_r6
                                                                                                                                                                                  (
                                                                                                                                                                                    va_upd_reg
                                                                                                                                                                                      5
                                                                                                                                                                                      va_x_r5
                                                                                                                                                                                      (
                                                                                                                                                                                        va_upd_reg
                                                                                                                                                                                          4
                                                                                                                                                                                          va_x_r4
                                                                                                                                                                                          (
                                                                                                                                                                                            va_upd_reg
                                                                                                                                                                                              3
                                                                                                                                                                                              va_x_r3
                                                                                                                                                                                              (
                                                                                                                                                                                                va_upd_reg
                                                                                                                                                                                                  1
                                                                                                                                                                                                  va_x_r1
                                                                                                                                                                                                  (
                                                                                                                                                                                                    va_upd_mem
                                                                                                                                                                                                      va_x_mem
                                                                                                                                                                                                      va_s0

                                                                                                                                                                                                  )

                                                                                                                                                                                              )

                                                                                                                                                                                          )

                                                                                                                                                                                      )

                                                                                                                                                                                  )

                                                                                                                                                                              )

                                                                                                                                                                          )

                                                                                                                                                                      )

                                                                                                                                                                  )

                                                                                                                                                              )

                                                                                                                                                          )

                                                                                                                                                      )

                                                                                                                                                  )

                                                                                                                                              )

                                                                                                                                          )

                                                                                                                                      )

                                                                                                                                  )

                                                                                                                              )

                                                                                                                          )

                                                                                                                      )

                                                                                                                  )

                                                                                                              )

                                                                                                          )

                                                                                                      )

                                                                                                  ))
                                                                                          ))))))))))
                                                  )))))))))))
      in
      va_get_ok va_sM /\
      (let abytes_ptr:Vale.PPC64LE.Machine_s.nat64 =
          Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 0 (va_get_mem_heaplet 3 va_s0)
        in
        let in128_ptr:Vale.PPC64LE.Machine_s.nat64 =
          Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1 (va_get_mem_heaplet 3 va_s0)
        in
        let out128_ptr:Vale.PPC64LE.Machine_s.nat64 =
          Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2 (va_get_mem_heaplet 3 va_s0)
        in
        let len128:Vale.PPC64LE.Machine_s.nat64 =
          Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3 (va_get_mem_heaplet 3 va_s0)
        in
        let inout_ptr:Vale.PPC64LE.Machine_s.nat64 =
          Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4 (va_get_mem_heaplet 3 va_s0)
        in
        let cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64 =
          Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 5 (va_get_mem_heaplet 3 va_s0)
        in
        let auth_ptr:Vale.PPC64LE.Machine_s.nat64 =
          Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6 (va_get_mem_heaplet 3 va_s0)
        in
        let auth_len:Vale.PPC64LE.Machine_s.nat64 =
          Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7 (va_get_mem_heaplet 3 va_s0)
        in
        let auth_num_bytes:Vale.PPC64LE.Machine_s.nat64 =
          Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8 (va_get_mem_heaplet 3 va_s0)
        in
        let iv_ptr:Vale.PPC64LE.Machine_s.nat64 =
          Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9 (va_get_mem_heaplet 3 va_s0)
        in
        let keys_ptr:Vale.PPC64LE.Machine_s.nat64 =
          Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10 (va_get_mem_heaplet 3 va_s0)
        in
        let h_ptr:Vale.PPC64LE.Machine_s.nat64 =
          Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11 (va_get_mem_heaplet 3 va_s0)
        in
        let tag_ptr:Vale.PPC64LE.Machine_s.nat64 =
          Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12 (va_get_mem_heaplet 3 va_s0)
        in
        Vale.PPC64LE.Decls.modifies_mem (Vale.PPC64LE.Decls.loc_union (Vale.PPC64LE.Decls.loc_buffer
                  #Vale.PPC64LE.Memory.vuint128
                  iv_b)
              (Vale.PPC64LE.Decls.loc_union (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128
                      out128_b)
                  (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128 inout_b)))
          (va_get_mem va_s0)
          (va_get_mem va_sM) /\ cipher_num_bytes < pow2_32 /\ auth_num_bytes < pow2_32 /\
        (let iv_BE =
            Vale.Def.Types_s.reverse_bytes_quad32 (Vale.PPC64LE.Decls.buffer128_read iv_b
                  0
                  (va_get_mem va_s0))
          in
          let auth_raw_quads =
            FStar.Seq.Base.append #Vale.Def.Types_s.quad32
              (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0)
                      auth_b))
              (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0)
                      abytes_b))
          in
          let auth_bytes =
            FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
              (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
                      #Vale.Def.Words_s.nat32
                      auth_raw_quads))
              0
              auth_num_bytes
          in
          let cipher_raw_quads =
            FStar.Seq.Base.append #Vale.Def.Types_s.quad32
              (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0)
                      in128_b))
              (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0)
                      inout_b))
          in
          let cipher_bytes =
            FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
              (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
                      #Vale.Def.Words_s.nat32
                      cipher_raw_quads))
              0
              cipher_num_bytes
          in
          let plain_raw_quads =
            FStar.Seq.Base.append #Vale.Def.Types_s.quad32
              (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_sM)
                      out128_b))
              (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_sM)
                      inout_b))
          in
          let plain_bytes =
            FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
              (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
                      #Vale.Def.Words_s.nat32
                      plain_raw_quads))
              0
              cipher_num_bytes
          in
          let expected_tag =
            Vale.Arch.Types.be_quad32_to_bytes (Vale.Def.Types_s.reverse_bytes_quad32 (Vale.PPC64LE.Decls.buffer128_read
                      tag_b
                      0
                      (va_get_mem va_s0)))
          in
          l_and (l_and (l_and (l_and (FStar.Seq.Base.length #Vale.Def.Words_s.nat8 auth_bytes <
                          pow2_32)
                        (FStar.Seq.Base.length #Vale.Def.Words_s.nat8 plain_bytes < pow2_32))
                    (Vale.AES.AES_common_s.is_aes_key alg
                        (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key)))
                (plain_bytes ==
                  __proj__Mktuple2__item___1 #(FStar.Seq.Base.seq Vale.Def.Types_s.nat8)
                    #bool
                    (Vale.AES.GCM_BE_s.gcm_decrypt_BE alg
                        (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key)
                        iv
                        cipher_bytes
                        auth_bytes
                        expected_tag)))
            (va_get_reg 3 va_sM = 0 ==
              __proj__Mktuple2__item___2 #(FStar.Seq.Base.seq Vale.Def.Types_s.nat8)
                #bool
                (Vale.AES.GCM_BE_s.gcm_decrypt_BE alg
                    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key)
                    iv
                    cipher_bytes
                    auth_bytes
                    expected_tag)) /\ va_get_reg 1 va_sM == va_get_reg 1 va_s0 /\
          l_and (l_and (l_and (l_and (l_and (l_and (l_and (l_and (va_get_reg 25 va_sM ==
                                          va_get_reg 25 va_s0)
                                        (va_get_reg 26 va_sM == va_get_reg 26 va_s0))
                                    (va_get_reg 27 va_sM == va_get_reg 27 va_s0))
                                (va_get_reg 28 va_sM == va_get_reg 28 va_s0))
                            (va_get_reg 29 va_sM == va_get_reg 29 va_s0))
                        (va_get_reg 30 va_sM == va_get_reg 30 va_s0))
                    (va_get_reg 31 va_sM == va_get_reg 31 va_s0))
                (va_get_vec 20 va_sM == va_get_vec 20 va_s0))
            (va_get_vec 21 va_sM == va_get_vec 21 va_s0))) ==>
      va_k va_sM (())))
Vale.AES.PPC64LE.GCMdecrypt.fsti.checked
Vale.PPC64LE.State.fsti.checked Vale.PPC64LE.Stack_i.fsti.checked Vale.PPC64LE.QuickCodes.fsti.checked Vale.PPC64LE.QuickCode.fst.checked Vale.PPC64LE.Memory.fsti.checked Vale.PPC64LE.Machine_s.fst.checked Vale.PPC64LE.InsVector.fsti.checked Vale.PPC64LE.InsStack.fsti.checked Vale.PPC64LE.InsMem.fsti.checked Vale.PPC64LE.InsBasic.fsti.checked Vale.PPC64LE.Decls.fsti.checked Vale.Poly1305.Math.fsti.checked Vale.Math.Poly2.Bits_s.fsti.checked Vale.Lib.Meta.fsti.checked Vale.Def.Words_s.fsti.checked Vale.Def.Words.Seq_s.fsti.checked Vale.Def.Types_s.fst.checked Vale.Def.Prop_s.fst.checked Vale.Def.Opaque_s.fsti.checked Vale.Arch.Types.fsti.checked Vale.Arch.HeapImpl.fsti.checked Vale.AES.PPC64LE.GHash.fsti.checked Vale.AES.PPC64LE.GF128_Mul.fsti.checked Vale.AES.PPC64LE.GCTR.fsti.checked Vale.AES.PPC64LE.GCMencrypt.fsti.checked Vale.AES.PPC64LE.AES.fsti.checked Vale.AES.OptPublic_BE.fsti.checked Vale.AES.GHash_BE_s.fst.checked Vale.AES.GHash_BE.fsti.checked Vale.AES.GF128_s.fsti.checked Vale.AES.GF128.fsti.checked Vale.AES.GCTR_BE_s.fst.checked Vale.AES.GCTR_BE.fsti.checked Vale.AES.GCM_helpers_BE.fsti.checked Vale.AES.GCM_BE_s.fst.checked Vale.AES.GCM_BE.fsti.checked Vale.AES.AES_common_s.fst.checked Vale.AES.AES_BE_s.fst.checked prims.fst.checked FStar.Seq.Base.fsti.checked FStar.Seq.fst.checked FStar.Pervasives.Native.fst.checked FStar.Pervasives.fsti.checked
Vale.AES.PPC64LE.GCMdecrypt.fsti
Vale.AES.AES_common_s.algorithm Vale.PPC64LE.Memory.buffer128 Vale.PPC64LE.Memory.nat64 Vale.AES.GCM_BE_s.supported_iv_BE Vale.PPC64LE.Memory.buffer64 FStar.Seq.Base.seq Vale.PPC64LE.Memory.nat32 Vale.PPC64LE.Decls.va_state Prims.unit Prims.l_and Prims.b2t Vale.PPC64LE.Decls.va_get_ok Prims.eq2 Vale.Def.Words_s.nat64 Vale.PPC64LE.Decls.va_get_reg Vale.PPC64LE.Stack_i.init_r1 Vale.PPC64LE.Decls.va_get_stack Vale.PPC64LE.Memory.is_initial_heap Vale.PPC64LE.Decls.va_get_mem_layout Vale.PPC64LE.Decls.va_get_mem Vale.PPC64LE.Decls.validSrcAddrs64 Vale.Arch.HeapTypes_s.Secret Vale.PPC64LE.Decls.validSrcAddrs128 Vale.PPC64LE.Decls.validDstAddrs128 Vale.Arch.HeapTypes_s.Public Vale.PPC64LE.Decls.buffer_disjoints64_128 Prims.Cons Prims.Nil Vale.PPC64LE.Decls.buffer_disjoints128 Prims.l_or Vale.PPC64LE.Decls.buffers_disjoint128 Prims.op_LessThan Prims.op_Addition Prims.op_Multiply Vale.PPC64LE.Machine_s.pow2_64 Prims.nat Vale.PPC64LE.Decls.buffer_length Vale.PPC64LE.Memory.vuint128 Prims.int Vale.PPC64LE.Machine_s.pow2_32 Vale.PPC64LE.Memory.buffer_addr Prims.op_LessThanOrEqual Vale.PPC64LE.Decls.va_mul_nat Prims.op_Division Vale.AES.PPC64LE.GCMdecrypt.aes_reqs Vale.Arch.Types.reverse_bytes_quad32_seq Vale.PPC64LE.Decls.buffer128_as_seq Vale.AES.OptPublic_BE.hkeys_reqs_pub Vale.PPC64LE.Decls.s128 Vale.AES.AES_BE_s.aes_encrypt_word Vale.Def.Words_s.Mkfour Vale.Def.Types_s.nat32 Vale.Def.Types_s.quad32 Vale.AES.GCM_BE_s.compute_iv_BE Vale.Def.Types_s.reverse_bytes_quad32 Vale.PPC64LE.Decls.buffer128_read Vale.PPC64LE.Decls.buffer64_read Vale.PPC64LE.Decls.va_get_mem_heaplet Prims.l_Forall Vale.PPC64LE.InsBasic.vale_heap Vale.PPC64LE.Memory.quad32 Vale.PPC64LE.Machine_s.cr0_t Vale.PPC64LE.Machine_s.xer_t Vale.Arch.HeapImpl.vale_heap_layout Vale.PPC64LE.InsBasic.vale_stack Vale.PPC64LE.Memory.memtaint Prims.l_imp Vale.PPC64LE.Decls.modifies_mem Vale.PPC64LE.Decls.loc_union Vale.PPC64LE.Decls.loc_buffer FStar.Seq.Base.length Vale.Def.Words_s.nat8 Vale.AES.AES_common_s.is_aes_key Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE FStar.Pervasives.Native.__proj__Mktuple2__item___1 Vale.Def.Types_s.nat8 Prims.bool Vale.AES.GCM_BE_s.gcm_decrypt_BE Prims.op_Equality FStar.Pervasives.Native.__proj__Mktuple2__item___2 Vale.PPC64LE.Machine_s.nat64 Vale.PPC64LE.Machine_s.quad32 Vale.PPC64LE.Decls.va_get_vec Vale.Def.Words.Seq_s.seq16 Vale.Arch.Types.be_quad32_to_bytes FStar.Seq.Base.slice Vale.Def.Words.Seq_s.seq_four_to_seq_BE Vale.Def.Words_s.nat32 FStar.Seq.Base.append Vale.PPC64LE.Machine_s.state Vale.PPC64LE.Decls.va_upd_stackTaint Vale.PPC64LE.Decls.va_upd_stack Vale.PPC64LE.Decls.va_upd_mem_layout Vale.PPC64LE.Decls.va_upd_mem_heaplet Vale.PPC64LE.Decls.va_upd_xer Vale.PPC64LE.Decls.va_upd_cr0 Vale.PPC64LE.Decls.va_upd_vec Vale.PPC64LE.Decls.va_upd_reg Vale.PPC64LE.Decls.va_upd_mem
module Vale.AES.PPC64LE.GCMdecrypt
open Vale.Def.Prop_s
open Vale.Def.Opaque_s
open FStar.Seq
open Vale.Def.Words_s
open Vale.Def.Words.Seq_s
open Vale.Def.Types_s
open Vale.Arch.Types
open Vale.Arch.HeapImpl
open Vale.AES.AES_BE_s
open Vale.AES.GCTR_BE_s
open Vale.AES.GCTR_BE
open Vale.AES.GCM_BE
open Vale.AES.GHash_BE_s
open Vale.AES.GHash_BE
open Vale.AES.GCM_BE_s
open Vale.AES.PPC64LE.AES
open Vale.AES.GF128_s
open Vale.AES.GF128
open Vale.Poly1305.Math
open Vale.AES.GCM_helpers_BE
open Vale.AES.PPC64LE.GHash
open Vale.AES.PPC64LE.GCTR
open Vale.PPC64LE.Machine_s
open Vale.PPC64LE.Memory
open Vale.PPC64LE.Stack_i
open Vale.PPC64LE.State
open Vale.PPC64LE.Decls
open Vale.PPC64LE.InsBasic
open Vale.PPC64LE.InsMem
open Vale.PPC64LE.InsVector
open Vale.PPC64LE.InsStack
open Vale.PPC64LE.QuickCode
open Vale.PPC64LE.QuickCodes
open Vale.AES.PPC64LE.GF128_Mul
open Vale.Math.Poly2.Bits_s
open Vale.Lib.Meta
open Vale.AES.PPC64LE.GCMencrypt
let aes_reqs
  (alg:algorithm) (key:seq nat32) (round_keys:seq quad32) (keys_b:buffer128)
  (key_ptr:int) (heap0:vale_heap) (layout:vale_heap_layout) : prop0
  =
  (alg = AES_128 \/ alg = AES_256) /\
  is_aes_key_word alg key /\
  length(round_keys) == nr(alg) + 1 /\
  round_keys == key_to_round_keys_word alg key /\
  validSrcAddrs128 heap0 key_ptr keys_b (nr alg + 1) layout Secret /\
  reverse_bytes_quad32_seq (s128 heap0 keys_b) == round_keys
#reset-options "--z3rlimit 100 --max_ifuel 0"
//-- Gcm_blocks_decrypt_stdcall

val va_code_Gcm_blocks_decrypt_stdcall : alg:algorithm -> Tot va_code

val va_codegen_success_Gcm_blocks_decrypt_stdcall : alg:algorithm -> Tot va_pbool
let va_req_Gcm_blocks_decrypt_stdcall (va_b0:va_code) (va_s0:va_state) (alg:algorithm)
  (auth_b:buffer128) (auth_bytes:nat64) (auth_num:nat64) (keys_b:buffer128) (iv_b:buffer128)
  (iv:supported_iv_BE) (hkeys_b:buffer128) (abytes_b:buffer128) (in128_b:buffer128)
  (out128_b:buffer128) (len128_num:nat64) (inout_b:buffer128) (cipher_num:nat64)
  (gcm_struct_b:buffer64) (tag_b:buffer128) (key:(seq nat32)) : prop =
  (va_require_total va_b0 (va_code_Gcm_blocks_decrypt_stdcall alg) va_s0 /\ va_get_ok va_s0 /\ (let
    (abytes_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 0
    (va_get_mem_heaplet 3 va_s0) in let (in128_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1 (va_get_mem_heaplet 3 va_s0) in let
    (out128_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2
    (va_get_mem_heaplet 3 va_s0) in let (len128:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3 (va_get_mem_heaplet 3 va_s0) in let
    (inout_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4
    (va_get_mem_heaplet 3 va_s0) in let (cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 5 (va_get_mem_heaplet 3 va_s0) in let
    (auth_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6
    (va_get_mem_heaplet 3 va_s0) in let (auth_len:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7 (va_get_mem_heaplet 3 va_s0) in let
    (auth_num_bytes:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8
    (va_get_mem_heaplet 3 va_s0) in let (iv_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9 (va_get_mem_heaplet 3 va_s0) in let
    (keys_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10
    (va_get_mem_heaplet 3 va_s0) in let (h_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11 (va_get_mem_heaplet 3 va_s0) in let
    (tag_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12
    (va_get_mem_heaplet 3 va_s0) in va_get_reg 1 va_s0 == Vale.PPC64LE.Stack_i.init_r1
    (va_get_stack va_s0) /\ Vale.PPC64LE.Memory.is_initial_heap (va_get_mem_layout va_s0)
    (va_get_mem va_s0) /\ auth_len == auth_num /\ auth_num_bytes == auth_bytes /\ len128 ==
    len128_num /\ cipher_num_bytes == cipher_num /\ Vale.PPC64LE.Decls.validSrcAddrs64 (va_get_mem
    va_s0) (va_get_reg 3 va_s0) gcm_struct_b 13 (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) auth_ptr auth_b auth_len
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
    abytes_ptr abytes_b 1 (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validDstAddrs128
    (va_get_mem va_s0) iv_ptr iv_b 1 (va_get_mem_layout va_s0) Public /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) in128_ptr in128_b len128
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0)
    out128_ptr out128_b len128 (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0) inout_ptr inout_b 1 (va_get_mem_layout
    va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) h_ptr hkeys_b 3
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
    tag_ptr tag_b 1 (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.buffer_disjoints64_128
    gcm_struct_b ([keys_b; auth_b; abytes_b; iv_b; in128_b; out128_b; inout_b; hkeys_b; tag_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 tag_b ([keys_b; auth_b; abytes_b; iv_b; in128_b;
    out128_b; inout_b; hkeys_b]) /\ Vale.PPC64LE.Decls.buffer_disjoints128 iv_b ([keys_b; auth_b;
    abytes_b; in128_b; out128_b; inout_b; hkeys_b]) /\ Vale.PPC64LE.Decls.buffer_disjoints128
    inout_b ([keys_b; auth_b; abytes_b; in128_b; out128_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 auth_b ([keys_b; abytes_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 abytes_b ([keys_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 out128_b ([keys_b; auth_b; abytes_b; hkeys_b; inout_b])
    /\ Vale.PPC64LE.Decls.buffer_disjoints128 in128_b ([keys_b; auth_b; abytes_b; hkeys_b;
    inout_b]) /\ (Vale.PPC64LE.Decls.buffers_disjoint128 in128_b out128_b \/ in128_b == out128_b)
    /\ auth_ptr + 16 `op_Multiply` auth_len < pow2_64 /\ in128_ptr + 16 `op_Multiply` len128 <
    pow2_64 /\ out128_ptr + 16 `op_Multiply` len128 < pow2_64 /\ inout_ptr + 16 < pow2_64 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 auth_b == auth_len /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 abytes_b == 1 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b ==
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 out128_b /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b == len128 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 inout_b == 1 /\ cipher_num_bytes
    < pow2_32 /\ auth_num_bytes < pow2_32 /\ Vale.PPC64LE.Memory.buffer_addr
    #Vale.PPC64LE.Memory.vuint128 keys_b (va_get_mem va_s0) + 128 < pow2_64 /\ (va_mul_nat len128
    (128 `op_Division` 8) <= cipher_num_bytes /\ cipher_num_bytes < va_mul_nat len128 (128
    `op_Division` 8) + 128 `op_Division` 8) /\ (va_mul_nat auth_len (128 `op_Division` 8) <=
    auth_num_bytes /\ auth_num_bytes < va_mul_nat auth_len (128 `op_Division` 8) + 128
    `op_Division` 8) /\ aes_reqs alg key (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.buffer128_as_seq (va_get_mem va_s0) keys_b)) keys_b keys_ptr (va_get_mem
    va_s0) (va_get_mem_layout va_s0) /\ Vale.AES.OptPublic_BE.hkeys_reqs_pub
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) hkeys_b))
    (Vale.AES.AES_BE_s.aes_encrypt_word alg key (Vale.Def.Words_s.Mkfour #Vale.Def.Types_s.nat32 0
    0 0 0)) /\ (let h_BE = Vale.AES.AES_BE_s.aes_encrypt_word alg key (Vale.Def.Words_s.Mkfour
    #Vale.Def.Types_s.nat32 0 0 0 0) in let iv_BE = Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read iv_b 0 (va_get_mem va_s0)) in iv_BE ==
    Vale.AES.GCM_BE_s.compute_iv_BE h_BE iv)))
let va_ens_Gcm_blocks_decrypt_stdcall (va_b0:va_code) (va_s0:va_state) (alg:algorithm)
  (auth_b:buffer128) (auth_bytes:nat64) (auth_num:nat64) (keys_b:buffer128) (iv_b:buffer128)
  (iv:supported_iv_BE) (hkeys_b:buffer128) (abytes_b:buffer128) (in128_b:buffer128)
  (out128_b:buffer128) (len128_num:nat64) (inout_b:buffer128) (cipher_num:nat64)
  (gcm_struct_b:buffer64) (tag_b:buffer128) (key:(seq nat32)) (va_sM:va_state) (va_fM:va_fuel) :
  prop =
  (va_req_Gcm_blocks_decrypt_stdcall va_b0 va_s0 alg auth_b auth_bytes auth_num keys_b iv_b iv
    hkeys_b abytes_b in128_b out128_b len128_num inout_b cipher_num gcm_struct_b tag_b key /\
    va_ensure_total va_b0 va_s0 va_sM va_fM /\ va_get_ok va_sM /\ (let
    (abytes_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 0
    (va_get_mem_heaplet 3 va_s0) in let (in128_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1 (va_get_mem_heaplet 3 va_s0) in let
    (out128_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2
    (va_get_mem_heaplet 3 va_s0) in let (len128:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3 (va_get_mem_heaplet 3 va_s0) in let
    (inout_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4
    (va_get_mem_heaplet 3 va_s0) in let (cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 5 (va_get_mem_heaplet 3 va_s0) in let
    (auth_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6
    (va_get_mem_heaplet 3 va_s0) in let (auth_len:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7 (va_get_mem_heaplet 3 va_s0) in let
    (auth_num_bytes:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8
    (va_get_mem_heaplet 3 va_s0) in let (iv_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9 (va_get_mem_heaplet 3 va_s0) in let
    (keys_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10
    (va_get_mem_heaplet 3 va_s0) in let (h_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11 (va_get_mem_heaplet 3 va_s0) in let
    (tag_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12
    (va_get_mem_heaplet 3 va_s0) in Vale.PPC64LE.Decls.modifies_mem (Vale.PPC64LE.Decls.loc_union
    (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128 iv_b)
    (Vale.PPC64LE.Decls.loc_union (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128
    out128_b) (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128 inout_b))) (va_get_mem
    va_s0) (va_get_mem va_sM) /\ cipher_num_bytes < pow2_32 /\ auth_num_bytes < pow2_32 /\ (let
    iv_BE = Vale.Def.Types_s.reverse_bytes_quad32 (Vale.PPC64LE.Decls.buffer128_read iv_b 0
    (va_get_mem va_s0)) in let auth_raw_quads = FStar.Seq.Base.append #Vale.Def.Types_s.quad32
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) auth_b))
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0)
    abytes_b)) in let auth_bytes = FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
    #Vale.Def.Words_s.nat32 auth_raw_quads)) 0 auth_num_bytes in let cipher_raw_quads =
    FStar.Seq.Base.append #Vale.Def.Types_s.quad32 (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) in128_b)) (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) inout_b)) in let cipher_bytes =
    FStar.Seq.Base.slice #Vale.Def.Words_s.nat8 (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE
    (Vale.Def.Words.Seq_s.seq_four_to_seq_BE #Vale.Def.Words_s.nat32 cipher_raw_quads)) 0
    cipher_num_bytes in let plain_raw_quads = FStar.Seq.Base.append #Vale.Def.Types_s.quad32
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_sM)
    out128_b)) (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem
    va_sM) inout_b)) in let plain_bytes = FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
    #Vale.Def.Words_s.nat32 plain_raw_quads)) 0 cipher_num_bytes in let expected_tag =
    Vale.Arch.Types.be_quad32_to_bytes (Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read tag_b 0 (va_get_mem va_s0))) in l_and (l_and (l_and (l_and
    (FStar.Seq.Base.length #Vale.Def.Words_s.nat8 auth_bytes < pow2_32) (FStar.Seq.Base.length
    #Vale.Def.Words_s.nat8 plain_bytes < pow2_32)) (Vale.AES.AES_common_s.is_aes_key alg
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key))) (plain_bytes ==
    __proj__Mktuple2__item___1 #(FStar.Seq.Base.seq Vale.Def.Types_s.nat8) #bool
    (Vale.AES.GCM_BE_s.gcm_decrypt_BE alg (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key) iv
    cipher_bytes auth_bytes expected_tag))) (va_get_reg 3 va_sM = 0 == __proj__Mktuple2__item___2
    #(FStar.Seq.Base.seq Vale.Def.Types_s.nat8) #bool (Vale.AES.GCM_BE_s.gcm_decrypt_BE alg
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key) iv cipher_bytes auth_bytes expected_tag))
    /\ va_get_reg 1 va_sM == va_get_reg 1 va_s0 /\ l_and (l_and (l_and (l_and (l_and (l_and (l_and
    (l_and (va_get_reg 25 va_sM == va_get_reg 25 va_s0) (va_get_reg 26 va_sM == va_get_reg 26
    va_s0)) (va_get_reg 27 va_sM == va_get_reg 27 va_s0)) (va_get_reg 28 va_sM == va_get_reg 28
    va_s0)) (va_get_reg 29 va_sM == va_get_reg 29 va_s0)) (va_get_reg 30 va_sM == va_get_reg 30
    va_s0)) (va_get_reg 31 va_sM == va_get_reg 31 va_s0)) (va_get_vec 20 va_sM == va_get_vec 20
    va_s0)) (va_get_vec 21 va_sM == va_get_vec 21 va_s0))) /\ va_state_eq va_sM
    (va_update_stackTaint va_sM (va_update_stack va_sM (va_update_mem_layout va_sM
    (va_update_mem_heaplet 5 va_sM (va_update_mem_heaplet 4 va_sM (va_update_mem_heaplet 2 va_sM
    (va_update_mem_heaplet 1 va_sM (va_update_xer va_sM (va_update_cr0 va_sM (va_update_vec 21
    va_sM (va_update_vec 20 va_sM (va_update_vec 19 va_sM (va_update_vec 18 va_sM (va_update_vec 17
    va_sM (va_update_vec 16 va_sM (va_update_vec 15 va_sM (va_update_vec 14 va_sM (va_update_vec 13
    va_sM (va_update_vec 12 va_sM (va_update_vec 11 va_sM (va_update_vec 10 va_sM (va_update_vec 9
    va_sM (va_update_vec 8 va_sM (va_update_vec 7 va_sM (va_update_vec 6 va_sM (va_update_vec 5
    va_sM (va_update_vec 4 va_sM (va_update_vec 3 va_sM (va_update_vec 2 va_sM (va_update_vec 1
    va_sM (va_update_vec 0 va_sM (va_update_reg 31 va_sM (va_update_reg 30 va_sM (va_update_reg 29
    va_sM (va_update_reg 28 va_sM (va_update_reg 27 va_sM (va_update_reg 26 va_sM (va_update_reg 25
    va_sM (va_update_reg 10 va_sM (va_update_reg 9 va_sM (va_update_reg 8 va_sM (va_update_reg 7
    va_sM (va_update_reg 6 va_sM (va_update_reg 5 va_sM (va_update_reg 4 va_sM (va_update_reg 3
    va_sM (va_update_reg 1 va_sM (va_update_ok va_sM (va_update_mem va_sM
    va_s0))))))))))))))))))))))))))))))))))))))))))))))))))

val va_lemma_Gcm_blocks_decrypt_stdcall : va_b0:va_code -> va_s0:va_state -> alg:algorithm ->
  auth_b:buffer128 -> auth_bytes:nat64 -> auth_num:nat64 -> keys_b:buffer128 -> iv_b:buffer128 ->
  iv:supported_iv_BE -> hkeys_b:buffer128 -> abytes_b:buffer128 -> in128_b:buffer128 ->
  out128_b:buffer128 -> len128_num:nat64 -> inout_b:buffer128 -> cipher_num:nat64 ->
  gcm_struct_b:buffer64 -> tag_b:buffer128 -> key:(seq nat32)
  -> Ghost (va_state & va_fuel)
  (requires (va_require_total va_b0 (va_code_Gcm_blocks_decrypt_stdcall alg) va_s0 /\ va_get_ok
    va_s0 /\ (let (abytes_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read
    gcm_struct_b 0 (va_get_mem_heaplet 3 va_s0) in let (in128_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1 (va_get_mem_heaplet 3 va_s0) in let
    (out128_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2
    (va_get_mem_heaplet 3 va_s0) in let (len128:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3 (va_get_mem_heaplet 3 va_s0) in let
    (inout_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4
    (va_get_mem_heaplet 3 va_s0) in let (cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 5 (va_get_mem_heaplet 3 va_s0) in let
    (auth_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6
    (va_get_mem_heaplet 3 va_s0) in let (auth_len:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7 (va_get_mem_heaplet 3 va_s0) in let
    (auth_num_bytes:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8
    (va_get_mem_heaplet 3 va_s0) in let (iv_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9 (va_get_mem_heaplet 3 va_s0) in let
    (keys_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10
    (va_get_mem_heaplet 3 va_s0) in let (h_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11 (va_get_mem_heaplet 3 va_s0) in let
    (tag_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12
    (va_get_mem_heaplet 3 va_s0) in va_get_reg 1 va_s0 == Vale.PPC64LE.Stack_i.init_r1
    (va_get_stack va_s0) /\ Vale.PPC64LE.Memory.is_initial_heap (va_get_mem_layout va_s0)
    (va_get_mem va_s0) /\ auth_len == auth_num /\ auth_num_bytes == auth_bytes /\ len128 ==
    len128_num /\ cipher_num_bytes == cipher_num /\ Vale.PPC64LE.Decls.validSrcAddrs64 (va_get_mem
    va_s0) (va_get_reg 3 va_s0) gcm_struct_b 13 (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) auth_ptr auth_b auth_len
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
    abytes_ptr abytes_b 1 (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validDstAddrs128
    (va_get_mem va_s0) iv_ptr iv_b 1 (va_get_mem_layout va_s0) Public /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) in128_ptr in128_b len128
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0)
    out128_ptr out128_b len128 (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0) inout_ptr inout_b 1 (va_get_mem_layout
    va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) h_ptr hkeys_b 3
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
    tag_ptr tag_b 1 (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.buffer_disjoints64_128
    gcm_struct_b ([keys_b; auth_b; abytes_b; iv_b; in128_b; out128_b; inout_b; hkeys_b; tag_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 tag_b ([keys_b; auth_b; abytes_b; iv_b; in128_b;
    out128_b; inout_b; hkeys_b]) /\ Vale.PPC64LE.Decls.buffer_disjoints128 iv_b ([keys_b; auth_b;
    abytes_b; in128_b; out128_b; inout_b; hkeys_b]) /\ Vale.PPC64LE.Decls.buffer_disjoints128
    inout_b ([keys_b; auth_b; abytes_b; in128_b; out128_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 auth_b ([keys_b; abytes_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 abytes_b ([keys_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 out128_b ([keys_b; auth_b; abytes_b; hkeys_b; inout_b])
    /\ Vale.PPC64LE.Decls.buffer_disjoints128 in128_b ([keys_b; auth_b; abytes_b; hkeys_b;
    inout_b]) /\ (Vale.PPC64LE.Decls.buffers_disjoint128 in128_b out128_b \/ in128_b == out128_b)
    /\ auth_ptr + 16 `op_Multiply` auth_len < pow2_64 /\ in128_ptr + 16 `op_Multiply` len128 <
    pow2_64 /\ out128_ptr + 16 `op_Multiply` len128 < pow2_64 /\ inout_ptr + 16 < pow2_64 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 auth_b == auth_len /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 abytes_b == 1 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b ==
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 out128_b /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b == len128 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 inout_b == 1 /\ cipher_num_bytes
    < pow2_32 /\ auth_num_bytes < pow2_32 /\ Vale.PPC64LE.Memory.buffer_addr
    #Vale.PPC64LE.Memory.vuint128 keys_b (va_get_mem va_s0) + 128 < pow2_64 /\ (va_mul_nat len128
    (128 `op_Division` 8) <= cipher_num_bytes /\ cipher_num_bytes < va_mul_nat len128 (128
    `op_Division` 8) + 128 `op_Division` 8) /\ (va_mul_nat auth_len (128 `op_Division` 8) <=
    auth_num_bytes /\ auth_num_bytes < va_mul_nat auth_len (128 `op_Division` 8) + 128
    `op_Division` 8) /\ aes_reqs alg key (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.buffer128_as_seq (va_get_mem va_s0) keys_b)) keys_b keys_ptr (va_get_mem
    va_s0) (va_get_mem_layout va_s0) /\ Vale.AES.OptPublic_BE.hkeys_reqs_pub
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) hkeys_b))
    (Vale.AES.AES_BE_s.aes_encrypt_word alg key (Vale.Def.Words_s.Mkfour #Vale.Def.Types_s.nat32 0
    0 0 0)) /\ (let h_BE = Vale.AES.AES_BE_s.aes_encrypt_word alg key (Vale.Def.Words_s.Mkfour
    #Vale.Def.Types_s.nat32 0 0 0 0) in let iv_BE = Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read iv_b 0 (va_get_mem va_s0)) in iv_BE ==
    Vale.AES.GCM_BE_s.compute_iv_BE h_BE iv))))
  (ensures (fun (va_sM, va_fM) -> va_ensure_total va_b0 va_s0 va_sM va_fM /\ va_get_ok va_sM /\
    (let (abytes_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b
    0 (va_get_mem_heaplet 3 va_s0) in let (in128_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1 (va_get_mem_heaplet 3 va_s0) in let
    (out128_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2
    (va_get_mem_heaplet 3 va_s0) in let (len128:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3 (va_get_mem_heaplet 3 va_s0) in let
    (inout_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4
    (va_get_mem_heaplet 3 va_s0) in let (cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 5 (va_get_mem_heaplet 3 va_s0) in let
    (auth_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6
    (va_get_mem_heaplet 3 va_s0) in let (auth_len:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7 (va_get_mem_heaplet 3 va_s0) in let
    (auth_num_bytes:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8
    (va_get_mem_heaplet 3 va_s0) in let (iv_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9 (va_get_mem_heaplet 3 va_s0) in let
    (keys_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10
    (va_get_mem_heaplet 3 va_s0) in let (h_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11 (va_get_mem_heaplet 3 va_s0) in let
    (tag_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12
    (va_get_mem_heaplet 3 va_s0) in Vale.PPC64LE.Decls.modifies_mem (Vale.PPC64LE.Decls.loc_union
    (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128 iv_b)
    (Vale.PPC64LE.Decls.loc_union (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128
    out128_b) (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128 inout_b))) (va_get_mem
    va_s0) (va_get_mem va_sM) /\ cipher_num_bytes < pow2_32 /\ auth_num_bytes < pow2_32 /\ (let
    iv_BE = Vale.Def.Types_s.reverse_bytes_quad32 (Vale.PPC64LE.Decls.buffer128_read iv_b 0
    (va_get_mem va_s0)) in let auth_raw_quads = FStar.Seq.Base.append #Vale.Def.Types_s.quad32
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) auth_b))
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0)
    abytes_b)) in let auth_bytes = FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
    #Vale.Def.Words_s.nat32 auth_raw_quads)) 0 auth_num_bytes in let cipher_raw_quads =
    FStar.Seq.Base.append #Vale.Def.Types_s.quad32 (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) in128_b)) (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) inout_b)) in let cipher_bytes =
    FStar.Seq.Base.slice #Vale.Def.Words_s.nat8 (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE
    (Vale.Def.Words.Seq_s.seq_four_to_seq_BE #Vale.Def.Words_s.nat32 cipher_raw_quads)) 0
    cipher_num_bytes in let plain_raw_quads = FStar.Seq.Base.append #Vale.Def.Types_s.quad32
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_sM)
    out128_b)) (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem
    va_sM) inout_b)) in let plain_bytes = FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
    #Vale.Def.Words_s.nat32 plain_raw_quads)) 0 cipher_num_bytes in let expected_tag =
    Vale.Arch.Types.be_quad32_to_bytes (Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read tag_b 0 (va_get_mem va_s0))) in l_and (l_and (l_and (l_and
    (FStar.Seq.Base.length #Vale.Def.Words_s.nat8 auth_bytes < pow2_32) (FStar.Seq.Base.length
    #Vale.Def.Words_s.nat8 plain_bytes < pow2_32)) (Vale.AES.AES_common_s.is_aes_key alg
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key))) (plain_bytes ==
    __proj__Mktuple2__item___1 #(FStar.Seq.Base.seq Vale.Def.Types_s.nat8) #bool
    (Vale.AES.GCM_BE_s.gcm_decrypt_BE alg (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key) iv
    cipher_bytes auth_bytes expected_tag))) (va_get_reg 3 va_sM = 0 == __proj__Mktuple2__item___2
    #(FStar.Seq.Base.seq Vale.Def.Types_s.nat8) #bool (Vale.AES.GCM_BE_s.gcm_decrypt_BE alg
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key) iv cipher_bytes auth_bytes expected_tag))
    /\ va_get_reg 1 va_sM == va_get_reg 1 va_s0 /\ l_and (l_and (l_and (l_and (l_and (l_and (l_and
    (l_and (va_get_reg 25 va_sM == va_get_reg 25 va_s0) (va_get_reg 26 va_sM == va_get_reg 26
    va_s0)) (va_get_reg 27 va_sM == va_get_reg 27 va_s0)) (va_get_reg 28 va_sM == va_get_reg 28
    va_s0)) (va_get_reg 29 va_sM == va_get_reg 29 va_s0)) (va_get_reg 30 va_sM == va_get_reg 30
    va_s0)) (va_get_reg 31 va_sM == va_get_reg 31 va_s0)) (va_get_vec 20 va_sM == va_get_vec 20
    va_s0)) (va_get_vec 21 va_sM == va_get_vec 21 va_s0))) /\ va_state_eq va_sM
    (va_update_stackTaint va_sM (va_update_stack va_sM (va_update_mem_layout va_sM
    (va_update_mem_heaplet 5 va_sM (va_update_mem_heaplet 4 va_sM (va_update_mem_heaplet 2 va_sM
    (va_update_mem_heaplet 1 va_sM (va_update_xer va_sM (va_update_cr0 va_sM (va_update_vec 21
    va_sM (va_update_vec 20 va_sM (va_update_vec 19 va_sM (va_update_vec 18 va_sM (va_update_vec 17
    va_sM (va_update_vec 16 va_sM (va_update_vec 15 va_sM (va_update_vec 14 va_sM (va_update_vec 13
    va_sM (va_update_vec 12 va_sM (va_update_vec 11 va_sM (va_update_vec 10 va_sM (va_update_vec 9
    va_sM (va_update_vec 8 va_sM (va_update_vec 7 va_sM (va_update_vec 6 va_sM (va_update_vec 5
    va_sM (va_update_vec 4 va_sM (va_update_vec 3 va_sM (va_update_vec 2 va_sM (va_update_vec 1
    va_sM (va_update_vec 0 va_sM (va_update_reg 31 va_sM (va_update_reg 30 va_sM (va_update_reg 29
    va_sM (va_update_reg 28 va_sM (va_update_reg 27 va_sM (va_update_reg 26 va_sM (va_update_reg 25
    va_sM (va_update_reg 10 va_sM (va_update_reg 9 va_sM (va_update_reg 8 va_sM (va_update_reg 7
    va_sM (va_update_reg 6 va_sM (va_update_reg 5 va_sM (va_update_reg 4 va_sM (va_update_reg 3
    va_sM (va_update_reg 1 va_sM (va_update_ok va_sM (va_update_mem va_sM
    va_s0)))))))))))))))))))))))))))))))))))))))))))))))))))
[@ va_qattr]
let va_wp_Gcm_blocks_decrypt_stdcall (alg:algorithm) (auth_b:buffer128) (auth_bytes:nat64)
  (auth_num:nat64) (keys_b:buffer128) (iv_b:buffer128) (iv:supported_iv_BE) (hkeys_b:buffer128)
  (abytes_b:buffer128) (in128_b:buffer128) (out128_b:buffer128) (len128_num:nat64)
  (inout_b:buffer128) (cipher_num:nat64) (gcm_struct_b:buffer64) (tag_b:buffer128) (key:(seq
val va_wp_Gcm_blocks_decrypt_stdcall
      (alg: algorithm)
      (auth_b: buffer128)
      (auth_bytes auth_num: nat64)
      (keys_b iv_b: buffer128)
      (iv: supported_iv_BE)
      (hkeys_b abytes_b in128_b out128_b: buffer128)
      (len128_num: nat64)
      (inout_b: buffer128)
      (cipher_num: nat64)
      (gcm_struct_b: buffer64)
      (tag_b: buffer128)
      (key: (seq nat32))
      (va_s0: va_state)
      (va_k: (va_state -> unit -> Type0))
    : Type0

    alg: Vale.AES.AES_common_s.algorithm ->
    auth_b: Vale.PPC64LE.Memory.buffer128 ->
    auth_bytes: Vale.PPC64LE.Memory.nat64 ->
    auth_num: Vale.PPC64LE.Memory.nat64 ->
    keys_b: Vale.PPC64LE.Memory.buffer128 ->
    iv_b: Vale.PPC64LE.Memory.buffer128 ->
    iv: Vale.AES.GCM_BE_s.supported_iv_BE ->
    hkeys_b: Vale.PPC64LE.Memory.buffer128 ->
    abytes_b: Vale.PPC64LE.Memory.buffer128 ->
    in128_b: Vale.PPC64LE.Memory.buffer128 ->
    out128_b: Vale.PPC64LE.Memory.buffer128 ->
    len128_num: Vale.PPC64LE.Memory.nat64 ->
    inout_b: Vale.PPC64LE.Memory.buffer128 ->
    cipher_num: Vale.PPC64LE.Memory.nat64 ->
    gcm_struct_b: Vale.PPC64LE.Memory.buffer64 ->
    tag_b: Vale.PPC64LE.Memory.buffer128 ->
    key: FStar.Seq.Base.seq Vale.PPC64LE.Memory.nat32 ->
    va_s0: Vale.PPC64LE.Decls.va_state ->
    va_k: (_: Vale.PPC64LE.Decls.va_state -> _: Prims.unit -> Type0)
  -> Type0