val va_quick_Gcm_blocks_decrypt_stdcall
      (alg: algorithm)
      (auth_b: buffer128)
      (auth_bytes auth_num: nat64)
      (keys_b iv_b: buffer128)
      (iv: supported_iv_BE)
      (hkeys_b abytes_b in128_b out128_b: buffer128)
      (len128_num: nat64)
      (inout_b: buffer128)
      (cipher_num: nat64)
      (gcm_struct_b: buffer64)
      (tag_b: buffer128)
      (key: (seq nat32))
    : (va_quickCode unit (va_code_Gcm_blocks_decrypt_stdcall alg))
let va_quick_Gcm_blocks_decrypt_stdcall (alg:algorithm) (auth_b:buffer128) (auth_bytes:nat64)
  (auth_num:nat64) (keys_b:buffer128) (iv_b:buffer128) (iv:supported_iv_BE) (hkeys_b:buffer128)
  (abytes_b:buffer128) (in128_b:buffer128) (out128_b:buffer128) (len128_num:nat64)
  (inout_b:buffer128) (cipher_num:nat64) (gcm_struct_b:buffer64) (tag_b:buffer128) (key:(seq
  nat32)) : (va_quickCode unit (va_code_Gcm_blocks_decrypt_stdcall alg)) =
  (va_QProc (va_code_Gcm_blocks_decrypt_stdcall alg) ([va_Mod_stackTaint; va_Mod_stack;
    va_Mod_mem_layout; va_Mod_mem_heaplet 5; va_Mod_mem_heaplet 4; va_Mod_mem_heaplet 2;
    va_Mod_mem_heaplet 1; va_Mod_xer; va_Mod_cr0; va_Mod_vec 21; va_Mod_vec 20; va_Mod_vec 19;
    va_Mod_vec 18; va_Mod_vec 17; va_Mod_vec 16; va_Mod_vec 15; va_Mod_vec 14; va_Mod_vec 13;
    va_Mod_vec 12; va_Mod_vec 11; va_Mod_vec 10; va_Mod_vec 9; va_Mod_vec 8; va_Mod_vec 7;
    va_Mod_vec 6; va_Mod_vec 5; va_Mod_vec 4; va_Mod_vec 3; va_Mod_vec 2; va_Mod_vec 1; va_Mod_vec
    0; va_Mod_reg 31; va_Mod_reg 30; va_Mod_reg 29; va_Mod_reg 28; va_Mod_reg 27; va_Mod_reg 26;
    va_Mod_reg 25; va_Mod_reg 10; va_Mod_reg 9; va_Mod_reg 8; va_Mod_reg 7; va_Mod_reg 6;
    va_Mod_reg 5; va_Mod_reg 4; va_Mod_reg 3; va_Mod_reg 1; va_Mod_mem])
    (va_wp_Gcm_blocks_decrypt_stdcall alg auth_b auth_bytes auth_num keys_b iv_b iv hkeys_b
    abytes_b in128_b out128_b len128_num inout_b cipher_num gcm_struct_b tag_b key)
    (va_wpProof_Gcm_blocks_decrypt_stdcall alg auth_b auth_bytes auth_num keys_b iv_b iv hkeys_b
    abytes_b in128_b out128_b len128_num inout_b cipher_num gcm_struct_b tag_b key))
val va_quick_Gcm_blocks_decrypt_stdcall
      (alg: algorithm)
      (auth_b: buffer128)
      (auth_bytes auth_num: nat64)
      (keys_b iv_b: buffer128)
      (iv: supported_iv_BE)
      (hkeys_b abytes_b in128_b out128_b: buffer128)
      (len128_num: nat64)
      (inout_b: buffer128)
      (cipher_num: nat64)
      (gcm_struct_b: buffer64)
      (tag_b: buffer128)
      (key: (seq nat32))
    : (va_quickCode unit (va_code_Gcm_blocks_decrypt_stdcall alg))
let va_quick_Gcm_blocks_decrypt_stdcall
      (alg: algorithm)
      (auth_b: buffer128)
      (auth_bytes auth_num: nat64)
      (keys_b iv_b: buffer128)
      (iv: supported_iv_BE)
      (hkeys_b abytes_b in128_b out128_b: buffer128)
      (len128_num: nat64)
      (inout_b: buffer128)
      (cipher_num: nat64)
      (gcm_struct_b: buffer64)
      (tag_b: buffer128)
      (key: (seq nat32))
    : (va_quickCode unit (va_code_Gcm_blocks_decrypt_stdcall alg)) =
(va_QProc (va_code_Gcm_blocks_decrypt_stdcall alg)
    ([
        va_Mod_stackTaint; va_Mod_stack; va_Mod_mem_layout; va_Mod_mem_heaplet 5;
        va_Mod_mem_heaplet 4; va_Mod_mem_heaplet 2; va_Mod_mem_heaplet 1; va_Mod_xer; va_Mod_cr0;
        va_Mod_vec 21; va_Mod_vec 20; va_Mod_vec 19; va_Mod_vec 18; va_Mod_vec 17; va_Mod_vec 16;
        va_Mod_vec 15; va_Mod_vec 14; va_Mod_vec 13; va_Mod_vec 12; va_Mod_vec 11; va_Mod_vec 10;
        va_Mod_vec 9; va_Mod_vec 8; va_Mod_vec 7; va_Mod_vec 6; va_Mod_vec 5; va_Mod_vec 4;
        va_Mod_vec 3; va_Mod_vec 2; va_Mod_vec 1; va_Mod_vec 0; va_Mod_reg 31; va_Mod_reg 30;
        va_Mod_reg 29; va_Mod_reg 28; va_Mod_reg 27; va_Mod_reg 26; va_Mod_reg 25; va_Mod_reg 10;
        va_Mod_reg 9; va_Mod_reg 8; va_Mod_reg 7; va_Mod_reg 6; va_Mod_reg 5; va_Mod_reg 4;
        va_Mod_reg 3; va_Mod_reg 1; va_Mod_mem
      ])
    (va_wp_Gcm_blocks_decrypt_stdcall alg auth_b auth_bytes auth_num keys_b iv_b iv hkeys_b abytes_b
        in128_b out128_b len128_num inout_b cipher_num gcm_struct_b tag_b key)
    (va_wpProof_Gcm_blocks_decrypt_stdcall alg auth_b auth_bytes auth_num keys_b iv_b iv hkeys_b
        abytes_b in128_b out128_b len128_num inout_b cipher_num gcm_struct_b tag_b key))
Vale.AES.PPC64LE.GCMdecrypt.fsti.checked
Vale.PPC64LE.State.fsti.checked Vale.PPC64LE.Stack_i.fsti.checked Vale.PPC64LE.QuickCodes.fsti.checked Vale.PPC64LE.QuickCode.fst.checked Vale.PPC64LE.Memory.fsti.checked Vale.PPC64LE.Machine_s.fst.checked Vale.PPC64LE.InsVector.fsti.checked Vale.PPC64LE.InsStack.fsti.checked Vale.PPC64LE.InsMem.fsti.checked Vale.PPC64LE.InsBasic.fsti.checked Vale.PPC64LE.Decls.fsti.checked Vale.Poly1305.Math.fsti.checked Vale.Math.Poly2.Bits_s.fsti.checked Vale.Lib.Meta.fsti.checked Vale.Def.Words_s.fsti.checked Vale.Def.Words.Seq_s.fsti.checked Vale.Def.Types_s.fst.checked Vale.Def.Prop_s.fst.checked Vale.Def.Opaque_s.fsti.checked Vale.Arch.Types.fsti.checked Vale.Arch.HeapImpl.fsti.checked Vale.AES.PPC64LE.GHash.fsti.checked Vale.AES.PPC64LE.GF128_Mul.fsti.checked Vale.AES.PPC64LE.GCTR.fsti.checked Vale.AES.PPC64LE.GCMencrypt.fsti.checked Vale.AES.PPC64LE.AES.fsti.checked Vale.AES.OptPublic_BE.fsti.checked Vale.AES.GHash_BE_s.fst.checked Vale.AES.GHash_BE.fsti.checked Vale.AES.GF128_s.fsti.checked Vale.AES.GF128.fsti.checked Vale.AES.GCTR_BE_s.fst.checked Vale.AES.GCTR_BE.fsti.checked Vale.AES.GCM_helpers_BE.fsti.checked Vale.AES.GCM_BE_s.fst.checked Vale.AES.GCM_BE.fsti.checked Vale.AES.AES_common_s.fst.checked Vale.AES.AES_BE_s.fst.checked prims.fst.checked FStar.Seq.Base.fsti.checked FStar.Seq.fst.checked FStar.Pervasives.Native.fst.checked FStar.Pervasives.fsti.checked
Vale.AES.PPC64LE.GCMdecrypt.fsti
Vale.AES.AES_common_s.algorithm Vale.PPC64LE.Memory.buffer128 Vale.PPC64LE.Memory.nat64 Vale.AES.GCM_BE_s.supported_iv_BE Vale.PPC64LE.Memory.buffer64 FStar.Seq.Base.seq Vale.PPC64LE.Memory.nat32 Vale.PPC64LE.QuickCode.va_QProc Prims.unit Vale.AES.PPC64LE.GCMdecrypt.va_code_Gcm_blocks_decrypt_stdcall Prims.Cons Vale.PPC64LE.QuickCode.mod_t Vale.PPC64LE.QuickCode.va_Mod_stackTaint Vale.PPC64LE.QuickCode.va_Mod_stack Vale.PPC64LE.QuickCode.va_Mod_mem_layout Vale.PPC64LE.QuickCode.va_Mod_mem_heaplet Vale.PPC64LE.QuickCode.va_Mod_xer Vale.PPC64LE.QuickCode.va_Mod_cr0 Vale.PPC64LE.QuickCode.va_Mod_vec Vale.PPC64LE.QuickCode.va_Mod_reg Vale.PPC64LE.QuickCode.va_Mod_mem Prims.Nil Vale.AES.PPC64LE.GCMdecrypt.va_wp_Gcm_blocks_decrypt_stdcall Vale.AES.PPC64LE.GCMdecrypt.va_wpProof_Gcm_blocks_decrypt_stdcall Vale.PPC64LE.QuickCode.va_quickCode
module Vale.AES.PPC64LE.GCMdecrypt
open Vale.Def.Prop_s
open Vale.Def.Opaque_s
open FStar.Seq
open Vale.Def.Words_s
open Vale.Def.Words.Seq_s
open Vale.Def.Types_s
open Vale.Arch.Types
open Vale.Arch.HeapImpl
open Vale.AES.AES_BE_s
open Vale.AES.GCTR_BE_s
open Vale.AES.GCTR_BE
open Vale.AES.GCM_BE
open Vale.AES.GHash_BE_s
open Vale.AES.GHash_BE
open Vale.AES.GCM_BE_s
open Vale.AES.PPC64LE.AES
open Vale.AES.GF128_s
open Vale.AES.GF128
open Vale.Poly1305.Math
open Vale.AES.GCM_helpers_BE
open Vale.AES.PPC64LE.GHash
open Vale.AES.PPC64LE.GCTR
open Vale.PPC64LE.Machine_s
open Vale.PPC64LE.Memory
open Vale.PPC64LE.Stack_i
open Vale.PPC64LE.State
open Vale.PPC64LE.Decls
open Vale.PPC64LE.InsBasic
open Vale.PPC64LE.InsMem
open Vale.PPC64LE.InsVector
open Vale.PPC64LE.InsStack
open Vale.PPC64LE.QuickCode
open Vale.PPC64LE.QuickCodes
open Vale.AES.PPC64LE.GF128_Mul
open Vale.Math.Poly2.Bits_s
open Vale.Lib.Meta
open Vale.AES.PPC64LE.GCMencrypt
let aes_reqs
  (alg:algorithm) (key:seq nat32) (round_keys:seq quad32) (keys_b:buffer128)
  (key_ptr:int) (heap0:vale_heap) (layout:vale_heap_layout) : prop0
  =
  (alg = AES_128 \/ alg = AES_256) /\
  is_aes_key_word alg key /\
  length(round_keys) == nr(alg) + 1 /\
  round_keys == key_to_round_keys_word alg key /\
  validSrcAddrs128 heap0 key_ptr keys_b (nr alg + 1) layout Secret /\
  reverse_bytes_quad32_seq (s128 heap0 keys_b) == round_keys
#reset-options "--z3rlimit 100 --max_ifuel 0"
//-- Gcm_blocks_decrypt_stdcall

val va_code_Gcm_blocks_decrypt_stdcall : alg:algorithm -> Tot va_code

val va_codegen_success_Gcm_blocks_decrypt_stdcall : alg:algorithm -> Tot va_pbool
let va_req_Gcm_blocks_decrypt_stdcall (va_b0:va_code) (va_s0:va_state) (alg:algorithm)
  (auth_b:buffer128) (auth_bytes:nat64) (auth_num:nat64) (keys_b:buffer128) (iv_b:buffer128)
  (iv:supported_iv_BE) (hkeys_b:buffer128) (abytes_b:buffer128) (in128_b:buffer128)
  (out128_b:buffer128) (len128_num:nat64) (inout_b:buffer128) (cipher_num:nat64)
  (gcm_struct_b:buffer64) (tag_b:buffer128) (key:(seq nat32)) : prop =
  (va_require_total va_b0 (va_code_Gcm_blocks_decrypt_stdcall alg) va_s0 /\ va_get_ok va_s0 /\ (let
    (abytes_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 0
    (va_get_mem_heaplet 3 va_s0) in let (in128_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1 (va_get_mem_heaplet 3 va_s0) in let
    (out128_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2
    (va_get_mem_heaplet 3 va_s0) in let (len128:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3 (va_get_mem_heaplet 3 va_s0) in let
    (inout_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4
    (va_get_mem_heaplet 3 va_s0) in let (cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 5 (va_get_mem_heaplet 3 va_s0) in let
    (auth_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6
    (va_get_mem_heaplet 3 va_s0) in let (auth_len:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7 (va_get_mem_heaplet 3 va_s0) in let
    (auth_num_bytes:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8
    (va_get_mem_heaplet 3 va_s0) in let (iv_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9 (va_get_mem_heaplet 3 va_s0) in let
    (keys_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10
    (va_get_mem_heaplet 3 va_s0) in let (h_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11 (va_get_mem_heaplet 3 va_s0) in let
    (tag_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12
    (va_get_mem_heaplet 3 va_s0) in va_get_reg 1 va_s0 == Vale.PPC64LE.Stack_i.init_r1
    (va_get_stack va_s0) /\ Vale.PPC64LE.Memory.is_initial_heap (va_get_mem_layout va_s0)
    (va_get_mem va_s0) /\ auth_len == auth_num /\ auth_num_bytes == auth_bytes /\ len128 ==
    len128_num /\ cipher_num_bytes == cipher_num /\ Vale.PPC64LE.Decls.validSrcAddrs64 (va_get_mem
    va_s0) (va_get_reg 3 va_s0) gcm_struct_b 13 (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) auth_ptr auth_b auth_len
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
    abytes_ptr abytes_b 1 (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validDstAddrs128
    (va_get_mem va_s0) iv_ptr iv_b 1 (va_get_mem_layout va_s0) Public /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) in128_ptr in128_b len128
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0)
    out128_ptr out128_b len128 (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0) inout_ptr inout_b 1 (va_get_mem_layout
    va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) h_ptr hkeys_b 3
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
    tag_ptr tag_b 1 (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.buffer_disjoints64_128
    gcm_struct_b ([keys_b; auth_b; abytes_b; iv_b; in128_b; out128_b; inout_b; hkeys_b; tag_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 tag_b ([keys_b; auth_b; abytes_b; iv_b; in128_b;
    out128_b; inout_b; hkeys_b]) /\ Vale.PPC64LE.Decls.buffer_disjoints128 iv_b ([keys_b; auth_b;
    abytes_b; in128_b; out128_b; inout_b; hkeys_b]) /\ Vale.PPC64LE.Decls.buffer_disjoints128
    inout_b ([keys_b; auth_b; abytes_b; in128_b; out128_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 auth_b ([keys_b; abytes_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 abytes_b ([keys_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 out128_b ([keys_b; auth_b; abytes_b; hkeys_b; inout_b])
    /\ Vale.PPC64LE.Decls.buffer_disjoints128 in128_b ([keys_b; auth_b; abytes_b; hkeys_b;
    inout_b]) /\ (Vale.PPC64LE.Decls.buffers_disjoint128 in128_b out128_b \/ in128_b == out128_b)
    /\ auth_ptr + 16 `op_Multiply` auth_len < pow2_64 /\ in128_ptr + 16 `op_Multiply` len128 <
    pow2_64 /\ out128_ptr + 16 `op_Multiply` len128 < pow2_64 /\ inout_ptr + 16 < pow2_64 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 auth_b == auth_len /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 abytes_b == 1 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b ==
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 out128_b /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b == len128 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 inout_b == 1 /\ cipher_num_bytes
    < pow2_32 /\ auth_num_bytes < pow2_32 /\ Vale.PPC64LE.Memory.buffer_addr
    #Vale.PPC64LE.Memory.vuint128 keys_b (va_get_mem va_s0) + 128 < pow2_64 /\ (va_mul_nat len128
    (128 `op_Division` 8) <= cipher_num_bytes /\ cipher_num_bytes < va_mul_nat len128 (128
    `op_Division` 8) + 128 `op_Division` 8) /\ (va_mul_nat auth_len (128 `op_Division` 8) <=
    auth_num_bytes /\ auth_num_bytes < va_mul_nat auth_len (128 `op_Division` 8) + 128
    `op_Division` 8) /\ aes_reqs alg key (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.buffer128_as_seq (va_get_mem va_s0) keys_b)) keys_b keys_ptr (va_get_mem
    va_s0) (va_get_mem_layout va_s0) /\ Vale.AES.OptPublic_BE.hkeys_reqs_pub
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) hkeys_b))
    (Vale.AES.AES_BE_s.aes_encrypt_word alg key (Vale.Def.Words_s.Mkfour #Vale.Def.Types_s.nat32 0
    0 0 0)) /\ (let h_BE = Vale.AES.AES_BE_s.aes_encrypt_word alg key (Vale.Def.Words_s.Mkfour
    #Vale.Def.Types_s.nat32 0 0 0 0) in let iv_BE = Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read iv_b 0 (va_get_mem va_s0)) in iv_BE ==
    Vale.AES.GCM_BE_s.compute_iv_BE h_BE iv)))
let va_ens_Gcm_blocks_decrypt_stdcall (va_b0:va_code) (va_s0:va_state) (alg:algorithm)
  (auth_b:buffer128) (auth_bytes:nat64) (auth_num:nat64) (keys_b:buffer128) (iv_b:buffer128)
  (iv:supported_iv_BE) (hkeys_b:buffer128) (abytes_b:buffer128) (in128_b:buffer128)
  (out128_b:buffer128) (len128_num:nat64) (inout_b:buffer128) (cipher_num:nat64)
  (gcm_struct_b:buffer64) (tag_b:buffer128) (key:(seq nat32)) (va_sM:va_state) (va_fM:va_fuel) :
  prop =
  (va_req_Gcm_blocks_decrypt_stdcall va_b0 va_s0 alg auth_b auth_bytes auth_num keys_b iv_b iv
    hkeys_b abytes_b in128_b out128_b len128_num inout_b cipher_num gcm_struct_b tag_b key /\
    va_ensure_total va_b0 va_s0 va_sM va_fM /\ va_get_ok va_sM /\ (let
    (abytes_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 0
    (va_get_mem_heaplet 3 va_s0) in let (in128_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1 (va_get_mem_heaplet 3 va_s0) in let
    (out128_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2
    (va_get_mem_heaplet 3 va_s0) in let (len128:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3 (va_get_mem_heaplet 3 va_s0) in let
    (inout_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4
    (va_get_mem_heaplet 3 va_s0) in let (cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 5 (va_get_mem_heaplet 3 va_s0) in let
    (auth_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6
    (va_get_mem_heaplet 3 va_s0) in let (auth_len:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7 (va_get_mem_heaplet 3 va_s0) in let
    (auth_num_bytes:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8
    (va_get_mem_heaplet 3 va_s0) in let (iv_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9 (va_get_mem_heaplet 3 va_s0) in let
    (keys_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10
    (va_get_mem_heaplet 3 va_s0) in let (h_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11 (va_get_mem_heaplet 3 va_s0) in let
    (tag_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12
    (va_get_mem_heaplet 3 va_s0) in Vale.PPC64LE.Decls.modifies_mem (Vale.PPC64LE.Decls.loc_union
    (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128 iv_b)
    (Vale.PPC64LE.Decls.loc_union (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128
    out128_b) (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128 inout_b))) (va_get_mem
    va_s0) (va_get_mem va_sM) /\ cipher_num_bytes < pow2_32 /\ auth_num_bytes < pow2_32 /\ (let
    iv_BE = Vale.Def.Types_s.reverse_bytes_quad32 (Vale.PPC64LE.Decls.buffer128_read iv_b 0
    (va_get_mem va_s0)) in let auth_raw_quads = FStar.Seq.Base.append #Vale.Def.Types_s.quad32
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) auth_b))
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0)
    abytes_b)) in let auth_bytes = FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
    #Vale.Def.Words_s.nat32 auth_raw_quads)) 0 auth_num_bytes in let cipher_raw_quads =
    FStar.Seq.Base.append #Vale.Def.Types_s.quad32 (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) in128_b)) (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) inout_b)) in let cipher_bytes =
    FStar.Seq.Base.slice #Vale.Def.Words_s.nat8 (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE
    (Vale.Def.Words.Seq_s.seq_four_to_seq_BE #Vale.Def.Words_s.nat32 cipher_raw_quads)) 0
    cipher_num_bytes in let plain_raw_quads = FStar.Seq.Base.append #Vale.Def.Types_s.quad32
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_sM)
    out128_b)) (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem
    va_sM) inout_b)) in let plain_bytes = FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
    #Vale.Def.Words_s.nat32 plain_raw_quads)) 0 cipher_num_bytes in let expected_tag =
    Vale.Arch.Types.be_quad32_to_bytes (Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read tag_b 0 (va_get_mem va_s0))) in l_and (l_and (l_and (l_and
    (FStar.Seq.Base.length #Vale.Def.Words_s.nat8 auth_bytes < pow2_32) (FStar.Seq.Base.length
    #Vale.Def.Words_s.nat8 plain_bytes < pow2_32)) (Vale.AES.AES_common_s.is_aes_key alg
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key))) (plain_bytes ==
    __proj__Mktuple2__item___1 #(FStar.Seq.Base.seq Vale.Def.Types_s.nat8) #bool
    (Vale.AES.GCM_BE_s.gcm_decrypt_BE alg (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key) iv
    cipher_bytes auth_bytes expected_tag))) (va_get_reg 3 va_sM = 0 == __proj__Mktuple2__item___2
    #(FStar.Seq.Base.seq Vale.Def.Types_s.nat8) #bool (Vale.AES.GCM_BE_s.gcm_decrypt_BE alg
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key) iv cipher_bytes auth_bytes expected_tag))
    /\ va_get_reg 1 va_sM == va_get_reg 1 va_s0 /\ l_and (l_and (l_and (l_and (l_and (l_and (l_and
    (l_and (va_get_reg 25 va_sM == va_get_reg 25 va_s0) (va_get_reg 26 va_sM == va_get_reg 26
    va_s0)) (va_get_reg 27 va_sM == va_get_reg 27 va_s0)) (va_get_reg 28 va_sM == va_get_reg 28
    va_s0)) (va_get_reg 29 va_sM == va_get_reg 29 va_s0)) (va_get_reg 30 va_sM == va_get_reg 30
    va_s0)) (va_get_reg 31 va_sM == va_get_reg 31 va_s0)) (va_get_vec 20 va_sM == va_get_vec 20
    va_s0)) (va_get_vec 21 va_sM == va_get_vec 21 va_s0))) /\ va_state_eq va_sM
    (va_update_stackTaint va_sM (va_update_stack va_sM (va_update_mem_layout va_sM
    (va_update_mem_heaplet 5 va_sM (va_update_mem_heaplet 4 va_sM (va_update_mem_heaplet 2 va_sM
    (va_update_mem_heaplet 1 va_sM (va_update_xer va_sM (va_update_cr0 va_sM (va_update_vec 21
    va_sM (va_update_vec 20 va_sM (va_update_vec 19 va_sM (va_update_vec 18 va_sM (va_update_vec 17
    va_sM (va_update_vec 16 va_sM (va_update_vec 15 va_sM (va_update_vec 14 va_sM (va_update_vec 13
    va_sM (va_update_vec 12 va_sM (va_update_vec 11 va_sM (va_update_vec 10 va_sM (va_update_vec 9
    va_sM (va_update_vec 8 va_sM (va_update_vec 7 va_sM (va_update_vec 6 va_sM (va_update_vec 5
    va_sM (va_update_vec 4 va_sM (va_update_vec 3 va_sM (va_update_vec 2 va_sM (va_update_vec 1
    va_sM (va_update_vec 0 va_sM (va_update_reg 31 va_sM (va_update_reg 30 va_sM (va_update_reg 29
    va_sM (va_update_reg 28 va_sM (va_update_reg 27 va_sM (va_update_reg 26 va_sM (va_update_reg 25
    va_sM (va_update_reg 10 va_sM (va_update_reg 9 va_sM (va_update_reg 8 va_sM (va_update_reg 7
    va_sM (va_update_reg 6 va_sM (va_update_reg 5 va_sM (va_update_reg 4 va_sM (va_update_reg 3
    va_sM (va_update_reg 1 va_sM (va_update_ok va_sM (va_update_mem va_sM
    va_s0))))))))))))))))))))))))))))))))))))))))))))))))))

val va_lemma_Gcm_blocks_decrypt_stdcall : va_b0:va_code -> va_s0:va_state -> alg:algorithm ->
  auth_b:buffer128 -> auth_bytes:nat64 -> auth_num:nat64 -> keys_b:buffer128 -> iv_b:buffer128 ->
  iv:supported_iv_BE -> hkeys_b:buffer128 -> abytes_b:buffer128 -> in128_b:buffer128 ->
  out128_b:buffer128 -> len128_num:nat64 -> inout_b:buffer128 -> cipher_num:nat64 ->
  gcm_struct_b:buffer64 -> tag_b:buffer128 -> key:(seq nat32)
  -> Ghost (va_state & va_fuel)
  (requires (va_require_total va_b0 (va_code_Gcm_blocks_decrypt_stdcall alg) va_s0 /\ va_get_ok
    va_s0 /\ (let (abytes_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read
    gcm_struct_b 0 (va_get_mem_heaplet 3 va_s0) in let (in128_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1 (va_get_mem_heaplet 3 va_s0) in let
    (out128_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2
    (va_get_mem_heaplet 3 va_s0) in let (len128:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3 (va_get_mem_heaplet 3 va_s0) in let
    (inout_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4
    (va_get_mem_heaplet 3 va_s0) in let (cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 5 (va_get_mem_heaplet 3 va_s0) in let
    (auth_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6
    (va_get_mem_heaplet 3 va_s0) in let (auth_len:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7 (va_get_mem_heaplet 3 va_s0) in let
    (auth_num_bytes:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8
    (va_get_mem_heaplet 3 va_s0) in let (iv_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9 (va_get_mem_heaplet 3 va_s0) in let
    (keys_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10
    (va_get_mem_heaplet 3 va_s0) in let (h_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11 (va_get_mem_heaplet 3 va_s0) in let
    (tag_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12
    (va_get_mem_heaplet 3 va_s0) in va_get_reg 1 va_s0 == Vale.PPC64LE.Stack_i.init_r1
    (va_get_stack va_s0) /\ Vale.PPC64LE.Memory.is_initial_heap (va_get_mem_layout va_s0)
    (va_get_mem va_s0) /\ auth_len == auth_num /\ auth_num_bytes == auth_bytes /\ len128 ==
    len128_num /\ cipher_num_bytes == cipher_num /\ Vale.PPC64LE.Decls.validSrcAddrs64 (va_get_mem
    va_s0) (va_get_reg 3 va_s0) gcm_struct_b 13 (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) auth_ptr auth_b auth_len
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
    abytes_ptr abytes_b 1 (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validDstAddrs128
    (va_get_mem va_s0) iv_ptr iv_b 1 (va_get_mem_layout va_s0) Public /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) in128_ptr in128_b len128
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0)
    out128_ptr out128_b len128 (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0) inout_ptr inout_b 1 (va_get_mem_layout
    va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) h_ptr hkeys_b 3
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
    tag_ptr tag_b 1 (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.buffer_disjoints64_128
    gcm_struct_b ([keys_b; auth_b; abytes_b; iv_b; in128_b; out128_b; inout_b; hkeys_b; tag_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 tag_b ([keys_b; auth_b; abytes_b; iv_b; in128_b;
    out128_b; inout_b; hkeys_b]) /\ Vale.PPC64LE.Decls.buffer_disjoints128 iv_b ([keys_b; auth_b;
    abytes_b; in128_b; out128_b; inout_b; hkeys_b]) /\ Vale.PPC64LE.Decls.buffer_disjoints128
    inout_b ([keys_b; auth_b; abytes_b; in128_b; out128_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 auth_b ([keys_b; abytes_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 abytes_b ([keys_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 out128_b ([keys_b; auth_b; abytes_b; hkeys_b; inout_b])
    /\ Vale.PPC64LE.Decls.buffer_disjoints128 in128_b ([keys_b; auth_b; abytes_b; hkeys_b;
    inout_b]) /\ (Vale.PPC64LE.Decls.buffers_disjoint128 in128_b out128_b \/ in128_b == out128_b)
    /\ auth_ptr + 16 `op_Multiply` auth_len < pow2_64 /\ in128_ptr + 16 `op_Multiply` len128 <
    pow2_64 /\ out128_ptr + 16 `op_Multiply` len128 < pow2_64 /\ inout_ptr + 16 < pow2_64 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 auth_b == auth_len /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 abytes_b == 1 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b ==
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 out128_b /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b == len128 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 inout_b == 1 /\ cipher_num_bytes
    < pow2_32 /\ auth_num_bytes < pow2_32 /\ Vale.PPC64LE.Memory.buffer_addr
    #Vale.PPC64LE.Memory.vuint128 keys_b (va_get_mem va_s0) + 128 < pow2_64 /\ (va_mul_nat len128
    (128 `op_Division` 8) <= cipher_num_bytes /\ cipher_num_bytes < va_mul_nat len128 (128
    `op_Division` 8) + 128 `op_Division` 8) /\ (va_mul_nat auth_len (128 `op_Division` 8) <=
    auth_num_bytes /\ auth_num_bytes < va_mul_nat auth_len (128 `op_Division` 8) + 128
    `op_Division` 8) /\ aes_reqs alg key (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.buffer128_as_seq (va_get_mem va_s0) keys_b)) keys_b keys_ptr (va_get_mem
    va_s0) (va_get_mem_layout va_s0) /\ Vale.AES.OptPublic_BE.hkeys_reqs_pub
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) hkeys_b))
    (Vale.AES.AES_BE_s.aes_encrypt_word alg key (Vale.Def.Words_s.Mkfour #Vale.Def.Types_s.nat32 0
    0 0 0)) /\ (let h_BE = Vale.AES.AES_BE_s.aes_encrypt_word alg key (Vale.Def.Words_s.Mkfour
    #Vale.Def.Types_s.nat32 0 0 0 0) in let iv_BE = Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read iv_b 0 (va_get_mem va_s0)) in iv_BE ==
    Vale.AES.GCM_BE_s.compute_iv_BE h_BE iv))))
  (ensures (fun (va_sM, va_fM) -> va_ensure_total va_b0 va_s0 va_sM va_fM /\ va_get_ok va_sM /\
    (let (abytes_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b
    0 (va_get_mem_heaplet 3 va_s0) in let (in128_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1 (va_get_mem_heaplet 3 va_s0) in let
    (out128_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2
    (va_get_mem_heaplet 3 va_s0) in let (len128:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3 (va_get_mem_heaplet 3 va_s0) in let
    (inout_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4
    (va_get_mem_heaplet 3 va_s0) in let (cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 5 (va_get_mem_heaplet 3 va_s0) in let
    (auth_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6
    (va_get_mem_heaplet 3 va_s0) in let (auth_len:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7 (va_get_mem_heaplet 3 va_s0) in let
    (auth_num_bytes:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8
    (va_get_mem_heaplet 3 va_s0) in let (iv_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9 (va_get_mem_heaplet 3 va_s0) in let
    (keys_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10
    (va_get_mem_heaplet 3 va_s0) in let (h_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11 (va_get_mem_heaplet 3 va_s0) in let
    (tag_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12
    (va_get_mem_heaplet 3 va_s0) in Vale.PPC64LE.Decls.modifies_mem (Vale.PPC64LE.Decls.loc_union
    (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128 iv_b)
    (Vale.PPC64LE.Decls.loc_union (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128
    out128_b) (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128 inout_b))) (va_get_mem
    va_s0) (va_get_mem va_sM) /\ cipher_num_bytes < pow2_32 /\ auth_num_bytes < pow2_32 /\ (let
    iv_BE = Vale.Def.Types_s.reverse_bytes_quad32 (Vale.PPC64LE.Decls.buffer128_read iv_b 0
    (va_get_mem va_s0)) in let auth_raw_quads = FStar.Seq.Base.append #Vale.Def.Types_s.quad32
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) auth_b))
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0)
    abytes_b)) in let auth_bytes = FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
    #Vale.Def.Words_s.nat32 auth_raw_quads)) 0 auth_num_bytes in let cipher_raw_quads =
    FStar.Seq.Base.append #Vale.Def.Types_s.quad32 (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) in128_b)) (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) inout_b)) in let cipher_bytes =
    FStar.Seq.Base.slice #Vale.Def.Words_s.nat8 (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE
    (Vale.Def.Words.Seq_s.seq_four_to_seq_BE #Vale.Def.Words_s.nat32 cipher_raw_quads)) 0
    cipher_num_bytes in let plain_raw_quads = FStar.Seq.Base.append #Vale.Def.Types_s.quad32
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_sM)
    out128_b)) (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem
    va_sM) inout_b)) in let plain_bytes = FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
    #Vale.Def.Words_s.nat32 plain_raw_quads)) 0 cipher_num_bytes in let expected_tag =
    Vale.Arch.Types.be_quad32_to_bytes (Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read tag_b 0 (va_get_mem va_s0))) in l_and (l_and (l_and (l_and
    (FStar.Seq.Base.length #Vale.Def.Words_s.nat8 auth_bytes < pow2_32) (FStar.Seq.Base.length
    #Vale.Def.Words_s.nat8 plain_bytes < pow2_32)) (Vale.AES.AES_common_s.is_aes_key alg
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key))) (plain_bytes ==
    __proj__Mktuple2__item___1 #(FStar.Seq.Base.seq Vale.Def.Types_s.nat8) #bool
    (Vale.AES.GCM_BE_s.gcm_decrypt_BE alg (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key) iv
    cipher_bytes auth_bytes expected_tag))) (va_get_reg 3 va_sM = 0 == __proj__Mktuple2__item___2
    #(FStar.Seq.Base.seq Vale.Def.Types_s.nat8) #bool (Vale.AES.GCM_BE_s.gcm_decrypt_BE alg
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key) iv cipher_bytes auth_bytes expected_tag))
    /\ va_get_reg 1 va_sM == va_get_reg 1 va_s0 /\ l_and (l_and (l_and (l_and (l_and (l_and (l_and
    (l_and (va_get_reg 25 va_sM == va_get_reg 25 va_s0) (va_get_reg 26 va_sM == va_get_reg 26
    va_s0)) (va_get_reg 27 va_sM == va_get_reg 27 va_s0)) (va_get_reg 28 va_sM == va_get_reg 28
    va_s0)) (va_get_reg 29 va_sM == va_get_reg 29 va_s0)) (va_get_reg 30 va_sM == va_get_reg 30
    va_s0)) (va_get_reg 31 va_sM == va_get_reg 31 va_s0)) (va_get_vec 20 va_sM == va_get_vec 20
    va_s0)) (va_get_vec 21 va_sM == va_get_vec 21 va_s0))) /\ va_state_eq va_sM
    (va_update_stackTaint va_sM (va_update_stack va_sM (va_update_mem_layout va_sM
    (va_update_mem_heaplet 5 va_sM (va_update_mem_heaplet 4 va_sM (va_update_mem_heaplet 2 va_sM
    (va_update_mem_heaplet 1 va_sM (va_update_xer va_sM (va_update_cr0 va_sM (va_update_vec 21
    va_sM (va_update_vec 20 va_sM (va_update_vec 19 va_sM (va_update_vec 18 va_sM (va_update_vec 17
    va_sM (va_update_vec 16 va_sM (va_update_vec 15 va_sM (va_update_vec 14 va_sM (va_update_vec 13
    va_sM (va_update_vec 12 va_sM (va_update_vec 11 va_sM (va_update_vec 10 va_sM (va_update_vec 9
    va_sM (va_update_vec 8 va_sM (va_update_vec 7 va_sM (va_update_vec 6 va_sM (va_update_vec 5
    va_sM (va_update_vec 4 va_sM (va_update_vec 3 va_sM (va_update_vec 2 va_sM (va_update_vec 1
    va_sM (va_update_vec 0 va_sM (va_update_reg 31 va_sM (va_update_reg 30 va_sM (va_update_reg 29
    va_sM (va_update_reg 28 va_sM (va_update_reg 27 va_sM (va_update_reg 26 va_sM (va_update_reg 25
    va_sM (va_update_reg 10 va_sM (va_update_reg 9 va_sM (va_update_reg 8 va_sM (va_update_reg 7
    va_sM (va_update_reg 6 va_sM (va_update_reg 5 va_sM (va_update_reg 4 va_sM (va_update_reg 3
    va_sM (va_update_reg 1 va_sM (va_update_ok va_sM (va_update_mem va_sM
    va_s0)))))))))))))))))))))))))))))))))))))))))))))))))))
[@ va_qattr]
let va_wp_Gcm_blocks_decrypt_stdcall (alg:algorithm) (auth_b:buffer128) (auth_bytes:nat64)
  (auth_num:nat64) (keys_b:buffer128) (iv_b:buffer128) (iv:supported_iv_BE) (hkeys_b:buffer128)
  (abytes_b:buffer128) (in128_b:buffer128) (out128_b:buffer128) (len128_num:nat64)
  (inout_b:buffer128) (cipher_num:nat64) (gcm_struct_b:buffer64) (tag_b:buffer128) (key:(seq
  nat32)) (va_s0:va_state) (va_k:(va_state -> unit -> Type0)) : Type0 =
  (va_get_ok va_s0 /\ (let (abytes_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 0 (va_get_mem_heaplet 3 va_s0) in let
    (in128_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1
    (va_get_mem_heaplet 3 va_s0) in let (out128_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2 (va_get_mem_heaplet 3 va_s0) in let
    (len128:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3
    (va_get_mem_heaplet 3 va_s0) in let (inout_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4 (va_get_mem_heaplet 3 va_s0) in let
    (cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b
    5 (va_get_mem_heaplet 3 va_s0) in let (auth_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6 (va_get_mem_heaplet 3 va_s0) in let
    (auth_len:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7
    (va_get_mem_heaplet 3 va_s0) in let (auth_num_bytes:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8 (va_get_mem_heaplet 3 va_s0) in let
    (iv_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9
    (va_get_mem_heaplet 3 va_s0) in let (keys_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10 (va_get_mem_heaplet 3 va_s0) in let
    (h_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11
    (va_get_mem_heaplet 3 va_s0) in let (tag_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12 (va_get_mem_heaplet 3 va_s0) in va_get_reg 1
    va_s0 == Vale.PPC64LE.Stack_i.init_r1 (va_get_stack va_s0) /\
    Vale.PPC64LE.Memory.is_initial_heap (va_get_mem_layout va_s0) (va_get_mem va_s0) /\ auth_len ==
    auth_num /\ auth_num_bytes == auth_bytes /\ len128 == len128_num /\ cipher_num_bytes ==
    cipher_num /\ Vale.PPC64LE.Decls.validSrcAddrs64 (va_get_mem va_s0) (va_get_reg 3 va_s0)
    gcm_struct_b 13 (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128
    (va_get_mem va_s0) auth_ptr auth_b auth_len (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) abytes_ptr abytes_b 1 (va_get_mem_layout
    va_s0) Secret /\ Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0) iv_ptr iv_b 1
    (va_get_mem_layout va_s0) Public /\ Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0)
    in128_ptr in128_b len128 (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0) out128_ptr out128_b len128
    (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validDstAddrs128 (va_get_mem va_s0)
    inout_ptr inout_b 1 (va_get_mem_layout va_s0) Secret /\ Vale.PPC64LE.Decls.validSrcAddrs128
    (va_get_mem va_s0) h_ptr hkeys_b 3 (va_get_mem_layout va_s0) Secret /\
    Vale.PPC64LE.Decls.validSrcAddrs128 (va_get_mem va_s0) tag_ptr tag_b 1 (va_get_mem_layout
    va_s0) Secret /\ Vale.PPC64LE.Decls.buffer_disjoints64_128 gcm_struct_b ([keys_b; auth_b;
    abytes_b; iv_b; in128_b; out128_b; inout_b; hkeys_b; tag_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 tag_b ([keys_b; auth_b; abytes_b; iv_b; in128_b;
    out128_b; inout_b; hkeys_b]) /\ Vale.PPC64LE.Decls.buffer_disjoints128 iv_b ([keys_b; auth_b;
    abytes_b; in128_b; out128_b; inout_b; hkeys_b]) /\ Vale.PPC64LE.Decls.buffer_disjoints128
    inout_b ([keys_b; auth_b; abytes_b; in128_b; out128_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 auth_b ([keys_b; abytes_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 abytes_b ([keys_b; hkeys_b]) /\
    Vale.PPC64LE.Decls.buffer_disjoints128 out128_b ([keys_b; auth_b; abytes_b; hkeys_b; inout_b])
    /\ Vale.PPC64LE.Decls.buffer_disjoints128 in128_b ([keys_b; auth_b; abytes_b; hkeys_b;
    inout_b]) /\ (Vale.PPC64LE.Decls.buffers_disjoint128 in128_b out128_b \/ in128_b == out128_b)
    /\ auth_ptr + 16 `op_Multiply` auth_len < pow2_64 /\ in128_ptr + 16 `op_Multiply` len128 <
    pow2_64 /\ out128_ptr + 16 `op_Multiply` len128 < pow2_64 /\ inout_ptr + 16 < pow2_64 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 auth_b == auth_len /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 abytes_b == 1 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b ==
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 out128_b /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 in128_b == len128 /\
    Vale.PPC64LE.Decls.buffer_length #Vale.PPC64LE.Memory.vuint128 inout_b == 1 /\ cipher_num_bytes
    < pow2_32 /\ auth_num_bytes < pow2_32 /\ Vale.PPC64LE.Memory.buffer_addr
    #Vale.PPC64LE.Memory.vuint128 keys_b (va_get_mem va_s0) + 128 < pow2_64 /\ (va_mul_nat len128
    (128 `op_Division` 8) <= cipher_num_bytes /\ cipher_num_bytes < va_mul_nat len128 (128
    `op_Division` 8) + 128 `op_Division` 8) /\ (va_mul_nat auth_len (128 `op_Division` 8) <=
    auth_num_bytes /\ auth_num_bytes < va_mul_nat auth_len (128 `op_Division` 8) + 128
    `op_Division` 8) /\ aes_reqs alg key (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.buffer128_as_seq (va_get_mem va_s0) keys_b)) keys_b keys_ptr (va_get_mem
    va_s0) (va_get_mem_layout va_s0) /\ Vale.AES.OptPublic_BE.hkeys_reqs_pub
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) hkeys_b))
    (Vale.AES.AES_BE_s.aes_encrypt_word alg key (Vale.Def.Words_s.Mkfour #Vale.Def.Types_s.nat32 0
    0 0 0)) /\ (let h_BE = Vale.AES.AES_BE_s.aes_encrypt_word alg key (Vale.Def.Words_s.Mkfour
    #Vale.Def.Types_s.nat32 0 0 0 0) in let iv_BE = Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read iv_b 0 (va_get_mem va_s0)) in iv_BE ==
    Vale.AES.GCM_BE_s.compute_iv_BE h_BE iv)) /\ (forall (va_x_mem:vale_heap) (va_x_r1:nat64)
    (va_x_r3:nat64) (va_x_r4:nat64) (va_x_r5:nat64) (va_x_r6:nat64) (va_x_r7:nat64) (va_x_r8:nat64)
    (va_x_r9:nat64) (va_x_r10:nat64) (va_x_r25:nat64) (va_x_r26:nat64) (va_x_r27:nat64)
    (va_x_r28:nat64) (va_x_r29:nat64) (va_x_r30:nat64) (va_x_r31:nat64) (va_x_v0:quad32)
    (va_x_v1:quad32) (va_x_v2:quad32) (va_x_v3:quad32) (va_x_v4:quad32) (va_x_v5:quad32)
    (va_x_v6:quad32) (va_x_v7:quad32) (va_x_v8:quad32) (va_x_v9:quad32) (va_x_v10:quad32)
    (va_x_v11:quad32) (va_x_v12:quad32) (va_x_v13:quad32) (va_x_v14:quad32) (va_x_v15:quad32)
    (va_x_v16:quad32) (va_x_v17:quad32) (va_x_v18:quad32) (va_x_v19:quad32) (va_x_v20:quad32)
    (va_x_v21:quad32) (va_x_cr0:cr0_t) (va_x_xer:xer_t) (va_x_heap1:vale_heap)
    (va_x_heap2:vale_heap) (va_x_heap4:vale_heap) (va_x_heap5:vale_heap)
    (va_x_memLayout:vale_heap_layout) (va_x_stack:vale_stack) (va_x_stackTaint:memtaint) . let
    va_sM = va_upd_stackTaint va_x_stackTaint (va_upd_stack va_x_stack (va_upd_mem_layout
    va_x_memLayout (va_upd_mem_heaplet 5 va_x_heap5 (va_upd_mem_heaplet 4 va_x_heap4
    (va_upd_mem_heaplet 2 va_x_heap2 (va_upd_mem_heaplet 1 va_x_heap1 (va_upd_xer va_x_xer
    (va_upd_cr0 va_x_cr0 (va_upd_vec 21 va_x_v21 (va_upd_vec 20 va_x_v20 (va_upd_vec 19 va_x_v19
    (va_upd_vec 18 va_x_v18 (va_upd_vec 17 va_x_v17 (va_upd_vec 16 va_x_v16 (va_upd_vec 15 va_x_v15
    (va_upd_vec 14 va_x_v14 (va_upd_vec 13 va_x_v13 (va_upd_vec 12 va_x_v12 (va_upd_vec 11 va_x_v11
    (va_upd_vec 10 va_x_v10 (va_upd_vec 9 va_x_v9 (va_upd_vec 8 va_x_v8 (va_upd_vec 7 va_x_v7
    (va_upd_vec 6 va_x_v6 (va_upd_vec 5 va_x_v5 (va_upd_vec 4 va_x_v4 (va_upd_vec 3 va_x_v3
    (va_upd_vec 2 va_x_v2 (va_upd_vec 1 va_x_v1 (va_upd_vec 0 va_x_v0 (va_upd_reg 31 va_x_r31
    (va_upd_reg 30 va_x_r30 (va_upd_reg 29 va_x_r29 (va_upd_reg 28 va_x_r28 (va_upd_reg 27 va_x_r27
    (va_upd_reg 26 va_x_r26 (va_upd_reg 25 va_x_r25 (va_upd_reg 10 va_x_r10 (va_upd_reg 9 va_x_r9
    (va_upd_reg 8 va_x_r8 (va_upd_reg 7 va_x_r7 (va_upd_reg 6 va_x_r6 (va_upd_reg 5 va_x_r5
    (va_upd_reg 4 va_x_r4 (va_upd_reg 3 va_x_r3 (va_upd_reg 1 va_x_r1 (va_upd_mem va_x_mem
    va_s0))))))))))))))))))))))))))))))))))))))))))))))) in va_get_ok va_sM /\ (let
    (abytes_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 0
    (va_get_mem_heaplet 3 va_s0) in let (in128_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 1 (va_get_mem_heaplet 3 va_s0) in let
    (out128_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 2
    (va_get_mem_heaplet 3 va_s0) in let (len128:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 3 (va_get_mem_heaplet 3 va_s0) in let
    (inout_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 4
    (va_get_mem_heaplet 3 va_s0) in let (cipher_num_bytes:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 5 (va_get_mem_heaplet 3 va_s0) in let
    (auth_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 6
    (va_get_mem_heaplet 3 va_s0) in let (auth_len:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 7 (va_get_mem_heaplet 3 va_s0) in let
    (auth_num_bytes:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 8
    (va_get_mem_heaplet 3 va_s0) in let (iv_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 9 (va_get_mem_heaplet 3 va_s0) in let
    (keys_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 10
    (va_get_mem_heaplet 3 va_s0) in let (h_ptr:Vale.PPC64LE.Machine_s.nat64) =
    Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 11 (va_get_mem_heaplet 3 va_s0) in let
    (tag_ptr:Vale.PPC64LE.Machine_s.nat64) = Vale.PPC64LE.Decls.buffer64_read gcm_struct_b 12
    (va_get_mem_heaplet 3 va_s0) in Vale.PPC64LE.Decls.modifies_mem (Vale.PPC64LE.Decls.loc_union
    (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128 iv_b)
    (Vale.PPC64LE.Decls.loc_union (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128
    out128_b) (Vale.PPC64LE.Decls.loc_buffer #Vale.PPC64LE.Memory.vuint128 inout_b))) (va_get_mem
    va_s0) (va_get_mem va_sM) /\ cipher_num_bytes < pow2_32 /\ auth_num_bytes < pow2_32 /\ (let
    iv_BE = Vale.Def.Types_s.reverse_bytes_quad32 (Vale.PPC64LE.Decls.buffer128_read iv_b 0
    (va_get_mem va_s0)) in let auth_raw_quads = FStar.Seq.Base.append #Vale.Def.Types_s.quad32
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) auth_b))
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0)
    abytes_b)) in let auth_bytes = FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
    #Vale.Def.Words_s.nat32 auth_raw_quads)) 0 auth_num_bytes in let cipher_raw_quads =
    FStar.Seq.Base.append #Vale.Def.Types_s.quad32 (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) in128_b)) (Vale.Arch.Types.reverse_bytes_quad32_seq
    (Vale.PPC64LE.Decls.s128 (va_get_mem va_s0) inout_b)) in let cipher_bytes =
    FStar.Seq.Base.slice #Vale.Def.Words_s.nat8 (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE
    (Vale.Def.Words.Seq_s.seq_four_to_seq_BE #Vale.Def.Words_s.nat32 cipher_raw_quads)) 0
    cipher_num_bytes in let plain_raw_quads = FStar.Seq.Base.append #Vale.Def.Types_s.quad32
    (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem va_sM)
    out128_b)) (Vale.Arch.Types.reverse_bytes_quad32_seq (Vale.PPC64LE.Decls.s128 (va_get_mem
    va_sM) inout_b)) in let plain_bytes = FStar.Seq.Base.slice #Vale.Def.Words_s.nat8
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE (Vale.Def.Words.Seq_s.seq_four_to_seq_BE
    #Vale.Def.Words_s.nat32 plain_raw_quads)) 0 cipher_num_bytes in let expected_tag =
    Vale.Arch.Types.be_quad32_to_bytes (Vale.Def.Types_s.reverse_bytes_quad32
    (Vale.PPC64LE.Decls.buffer128_read tag_b 0 (va_get_mem va_s0))) in l_and (l_and (l_and (l_and
    (FStar.Seq.Base.length #Vale.Def.Words_s.nat8 auth_bytes < pow2_32) (FStar.Seq.Base.length
    #Vale.Def.Words_s.nat8 plain_bytes < pow2_32)) (Vale.AES.AES_common_s.is_aes_key alg
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key))) (plain_bytes ==
    __proj__Mktuple2__item___1 #(FStar.Seq.Base.seq Vale.Def.Types_s.nat8) #bool
    (Vale.AES.GCM_BE_s.gcm_decrypt_BE alg (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key) iv
    cipher_bytes auth_bytes expected_tag))) (va_get_reg 3 va_sM = 0 == __proj__Mktuple2__item___2
    #(FStar.Seq.Base.seq Vale.Def.Types_s.nat8) #bool (Vale.AES.GCM_BE_s.gcm_decrypt_BE alg
    (Vale.Def.Words.Seq_s.seq_nat32_to_seq_nat8_BE key) iv cipher_bytes auth_bytes expected_tag))
    /\ va_get_reg 1 va_sM == va_get_reg 1 va_s0 /\ l_and (l_and (l_and (l_and (l_and (l_and (l_and
    (l_and (va_get_reg 25 va_sM == va_get_reg 25 va_s0) (va_get_reg 26 va_sM == va_get_reg 26
    va_s0)) (va_get_reg 27 va_sM == va_get_reg 27 va_s0)) (va_get_reg 28 va_sM == va_get_reg 28
    va_s0)) (va_get_reg 29 va_sM == va_get_reg 29 va_s0)) (va_get_reg 30 va_sM == va_get_reg 30
    va_s0)) (va_get_reg 31 va_sM == va_get_reg 31 va_s0)) (va_get_vec 20 va_sM == va_get_vec 20
    va_s0)) (va_get_vec 21 va_sM == va_get_vec 21 va_s0))) ==> va_k va_sM (())))

val va_wpProof_Gcm_blocks_decrypt_stdcall : alg:algorithm -> auth_b:buffer128 -> auth_bytes:nat64
  -> auth_num:nat64 -> keys_b:buffer128 -> iv_b:buffer128 -> iv:supported_iv_BE ->
  hkeys_b:buffer128 -> abytes_b:buffer128 -> in128_b:buffer128 -> out128_b:buffer128 ->
  len128_num:nat64 -> inout_b:buffer128 -> cipher_num:nat64 -> gcm_struct_b:buffer64 ->
  tag_b:buffer128 -> key:(seq nat32) -> va_s0:va_state -> va_k:(va_state -> unit -> Type0)
  -> Ghost (va_state & va_fuel & unit)
  (requires (va_t_require va_s0 /\ va_wp_Gcm_blocks_decrypt_stdcall alg auth_b auth_bytes auth_num
    keys_b iv_b iv hkeys_b abytes_b in128_b out128_b len128_num inout_b cipher_num gcm_struct_b
    tag_b key va_s0 va_k))
  (ensures (fun (va_sM, va_f0, va_g) -> va_t_ensure (va_code_Gcm_blocks_decrypt_stdcall alg)
    ([va_Mod_stackTaint; va_Mod_stack; va_Mod_mem_layout; va_Mod_mem_heaplet 5; va_Mod_mem_heaplet
    4; va_Mod_mem_heaplet 2; va_Mod_mem_heaplet 1; va_Mod_xer; va_Mod_cr0; va_Mod_vec 21;
    va_Mod_vec 20; va_Mod_vec 19; va_Mod_vec 18; va_Mod_vec 17; va_Mod_vec 16; va_Mod_vec 15;
    va_Mod_vec 14; va_Mod_vec 13; va_Mod_vec 12; va_Mod_vec 11; va_Mod_vec 10; va_Mod_vec 9;
    va_Mod_vec 8; va_Mod_vec 7; va_Mod_vec 6; va_Mod_vec 5; va_Mod_vec 4; va_Mod_vec 3; va_Mod_vec
    2; va_Mod_vec 1; va_Mod_vec 0; va_Mod_reg 31; va_Mod_reg 30; va_Mod_reg 29; va_Mod_reg 28;
    va_Mod_reg 27; va_Mod_reg 26; va_Mod_reg 25; va_Mod_reg 10; va_Mod_reg 9; va_Mod_reg 8;
    va_Mod_reg 7; va_Mod_reg 6; va_Mod_reg 5; va_Mod_reg 4; va_Mod_reg 3; va_Mod_reg 1;
    va_Mod_mem]) va_s0 va_k ((va_sM, va_f0, va_g))))
[@ "opaque_to_smt" va_qattr]
let va_quick_Gcm_blocks_decrypt_stdcall (alg:algorithm) (auth_b:buffer128) (auth_bytes:nat64)
  (auth_num:nat64) (keys_b:buffer128) (iv_b:buffer128) (iv:supported_iv_BE) (hkeys_b:buffer128)
  (abytes_b:buffer128) (in128_b:buffer128) (out128_b:buffer128) (len128_num:nat64)
  (inout_b:buffer128) (cipher_num:nat64) (gcm_struct_b:buffer64) (tag_b:buffer128) (key:(seq
val va_quick_Gcm_blocks_decrypt_stdcall
      (alg: algorithm)
      (auth_b: buffer128)
      (auth_bytes auth_num: nat64)
      (keys_b iv_b: buffer128)
      (iv: supported_iv_BE)
      (hkeys_b abytes_b in128_b out128_b: buffer128)
      (len128_num: nat64)
      (inout_b: buffer128)
      (cipher_num: nat64)
      (gcm_struct_b: buffer64)
      (tag_b: buffer128)
      (key: (seq nat32))
    : (va_quickCode unit (va_code_Gcm_blocks_decrypt_stdcall alg))

    alg: Vale.AES.AES_common_s.algorithm ->
    auth_b: Vale.PPC64LE.Memory.buffer128 ->
    auth_bytes: Vale.PPC64LE.Memory.nat64 ->
    auth_num: Vale.PPC64LE.Memory.nat64 ->
    keys_b: Vale.PPC64LE.Memory.buffer128 ->
    iv_b: Vale.PPC64LE.Memory.buffer128 ->
    iv: Vale.AES.GCM_BE_s.supported_iv_BE ->
    hkeys_b: Vale.PPC64LE.Memory.buffer128 ->
    abytes_b: Vale.PPC64LE.Memory.buffer128 ->
    in128_b: Vale.PPC64LE.Memory.buffer128 ->
    out128_b: Vale.PPC64LE.Memory.buffer128 ->
    len128_num: Vale.PPC64LE.Memory.nat64 ->
    inout_b: Vale.PPC64LE.Memory.buffer128 ->
    cipher_num: Vale.PPC64LE.Memory.nat64 ->
    gcm_struct_b: Vale.PPC64LE.Memory.buffer64 ->
    tag_b: Vale.PPC64LE.Memory.buffer128 ->
    key: FStar.Seq.Base.seq Vale.PPC64LE.Memory.nat32
  -> Vale.PPC64LE.QuickCode.va_quickCode Prims.unit
      (Vale.AES.PPC64LE.GCMdecrypt.va_code_Gcm_blocks_decrypt_stdcall alg)