// File: /workspace/github_c_makefile_star2_O3/mjosaarinen[P]brutus/crypto_aead/elmd1001v2/ref/encrypt.c
// Function: crypto_aead_decrypt
int crypto_aead_decrypt(
unsigned char *m,unsigned long long *mlen,
unsigned char *nsec,
const unsigned char *c, unsigned long long clen,
const unsigned char *ad, unsigned long long adlen,
const unsigned char *npub,
const unsigned char *k
)
{
	u8 param[]={0x0a,0,0,0x01,0x80,0,0,0}; 
	
	block L, W, Delta_0, Delta_1, Delta_2, blk, result, CS;
	int i; u8 zeroes[16], ozs[16], blen = 16, Is_final = 0, Is_complete =1;
	unsigned long long tlen, blk_ctr=0, blk_ctr1=0;	
	for(i=0; i<16; i++)	{zeroes[i]=0x00;}   		// all zero.
	for(i=1; i<16; i++)	{ozs[i]=0x00;} ozs[0] = 0x80; 	//useful for padding.
	
	if(clen < 24)
		return -1;

	*mlen = clen - 24; 
	
	key_schedule(k);
	
	/* =========== Generate the Masks ========== */
	AES(10, ENCRYPT, L, zeroes, &aes_key1);

	mult_3(Delta_0, L); 
	mult_inv2(Delta_0, Delta_0); 

	mult_inv2(Delta_1, L); 

	mult_3(Delta_2, L); 
	mult_3(Delta_2, Delta_2); 
	mult_inv2(Delta_2, Delta_2);

	/* =============  Process Associated Data  ================ */
	for(i=0; i<16; i++)
		W[i]=0x00;
	process_AD(W, Delta_0, npub, param, ad, adlen); 

	
	 load_block(CS, zeroes, zeroes, 16, 0);

	 /* ================ Process Ciphertext Blocks ============ */
	 load_block(blk, c, zeroes, 16, 0);  

	 /* =================== Process 1st Block =================== */
	 if(clen<32){
	 	process_block(Delta_2, Delta_1, result, blk, W, 0, DECRYPT, Is_final, CIPHERTEXT); 
		store_bytes(m, result, 8, 8+(clen-25)); 
	 }
	 else {
		process_block(Delta_2, Delta_1, result, blk, W, 1, DECRYPT, Is_final, CIPHERTEXT);
		store_bytes(m, result, 8, 15);  m +=8;
	 }
	 xor_block(CS, CS, result); store_bytes(nsec, result, 0, 7); 
	 clen -= 16; c+=16;

	 if(clen < 16){ 
		if(result[clen] != 0x80) return -1; 
		for(i=clen+1; i<16; i++) {if(result[i]!=0) return -1;} 
	 }

	/* ============= Process Successive Ciphertext Blocks ============== */
	while(clen > 16){
	   
	   load_block(blk, c, zeroes, 16, 0);  
	   if(clen < 32){ 
	   	process_block(Delta_2, Delta_1, result, blk, W, 0, DECRYPT, Is_final, CIPHERTEXT); 
		xor_block(result, result, CS);
	   	store_bytes(m, result, 0, clen - 17);  
	   }
	   else{ 
	        process_block(Delta_2, Delta_1, result, blk, W, 1, DECRYPT, Is_final, CIPHERTEXT); 
		if(clen == 32) {xor_block(result, result, CS);}
		store_bytes(m, result, 0, 15); 
	   } 

	   xor_block(CS, CS, result);
	   clen -= 16; c+=16;

	   
	   if(clen < 16){ 
		if(result[clen] != 0x80) return -1; 
		for(i=clen+1; i<16; i++) {if(result[i]!=0) return -1;} 
	   }
	   else
		   m +=16; 
	}

	/* ==========  Process checksum block  ============= */
	Is_final = 1;
	process_block(Delta_1, Delta_2, result, CS, W, 1, ENCRYPT, Is_final, MESSAGE); /* 2nd result was CS */
	for(i=0; i<clen; i++) {if(result[i]!=c[i]) return -1;} 

	return 0;
}

// Assembly:
pushq %rbp
pushq %r15
pushq %r14
pushq %r13
pushq %r12
pushq %rbx
subq $0xc8, %rsp
movabsq $0x800100000a, %rax     # imm = 0x800100000A
movq %rax, 0x88(%rsp)
vxorps %xmm0, %xmm0, %xmm0
vmovaps %xmm0, 0x90(%rsp)
movl $0xffffffff, %eax       # imm = 0xFFFFFFFF
cmpq $0x18, %r8
jb 0x2dcf
movq %r8, %r12
movq %rcx, %r14
movq %rdi, %r15
movq %rdx, 0x18(%rsp)
movq 0x110(%rsp), %rbx
leaq -0x18(%r8), %rax
movq %rax, (%rsi)
movq 0x55ad(%rip), %r13      # 0x7fd0
movq %rbx, %rdi
movl $0x80, %esi
movq %r13, %rdx
movq %r9, 0x38(%rsp)
callq 0x1090
movq 0x55a1(%rip), %rdx      # 0x7fe0
movq %rbx, %rdi
movl $0x80, %esi
callq 0x1040
leaq 0x90(%rsp), %rdi
leaq 0xb0(%rsp), %rbx
movq %rbx, %rsi
movq %r13, %rdx
callq 0x1060
leaq 0xa0(%rsp), %r13
movq %r13, %rdi
movq %rbx, %rsi
callq 0x2583
movq %r13, %rdi
movq %r13, %rsi
callq 0x25f1
leaq 0x60(%rsp), %rdi
movq %rbx, %rsi
callq 0x25f1
leaq 0x50(%rsp), %rbp
movq %rbp, %rdi
movq %rbx, %rsi
callq 0x2583
movq %rbp, %rdi
movq %rbp, %rsi
callq 0x2583
movq %rbp, %rdi
movq %rbp, %rsi
callq 0x25f1
leaq 0x70(%rsp), %rdi
vxorps %xmm0, %xmm0, %xmm0
vmovaps %xmm0, (%rdi)
leaq 0x88(%rsp), %rcx
movq %r13, %rsi
movq 0x108(%rsp), %rdx
movq 0x38(%rsp), %r8
movq 0x100(%rsp), %r9
callq 0x266b
leaq 0x90(%rsp), %rax
vmovaps (%rax), %xmm0
vmovaps %xmm0, 0x20(%rsp)
vmovups (%r14), %xmm0
vmovaps %xmm0, 0x40(%rsp)
subq $0x8, %rsp
cmpq $0x1f, %r12
ja 0x2b56
xorl %eax, %eax
leaq 0x58(%rsp), %rdi
leaq 0x68(%rsp), %rsi
leaq 0x8(%rsp), %rdx
leaq 0x48(%rsp), %rcx
leaq 0x78(%rsp), %r8
xorl %r9d, %r9d
pushq $0x2
pushq %rax
pushq %rax
callq 0x2811
addq $0x20, %rsp
cmpq $0x18, %r12
je 0x2b92
leaq 0x8(%rsp), %rsi
leal -0x18(%r12), %edx
movq %r15, %rdi
callq 0x1080
jmp 0x2b92
xorl %eax, %eax
leaq 0x58(%rsp), %rdi
leaq 0x68(%rsp), %rsi
leaq 0x8(%rsp), %rbx
leaq 0x48(%rsp), %rcx
leaq 0x78(%rsp), %r8
movq %rbx, %rdx
movl $0x1, %r9d
pushq $0x2
pushq %rax
pushq %rax
callq 0x2811
addq $0x20, %rsp
movq 0x8(%rbx), %rax
movq %rax, (%r15)
addq $0x8, %r15
movq 0x18(%rsp), %rcx
vmovaps (%rsp), %xmm0
vxorps 0x20(%rsp), %xmm0, %xmm0
vmovaps %xmm0, 0x20(%rsp)
movq (%rsp), %rax
movq %rax, (%rcx)
leaq -0x10(%r12), %rbx
cmpq $0xf, %rbx
ja 0x2bfa
xorl %eax, %eax
cmpb (%rsp,%rbx), %al
jno 0x2dca
cmpq $0x1e, %r12
ja 0x2d79
leal 0x11(%r12), %ecx
andl $0x1f, %ecx
leal 0x11(%r12), %eax
movzbl %al, %eax
andl $0x1f, %eax
decl %eax
addq %rsp, %rcx
cmpb $0x0, (%rcx)
jne 0x2dca
incl %eax
incq %rcx
cmpl $0xe, %eax
jle 0x2be7
cmpq $0x11, %rbx
jb 0x2d79
leal -0x1f(%r12), %ebp
movq %r12, %rax
addq $-0x21, %rax
shrq $0x4, %rax
movq %rax, 0x80(%rsp)
leaq 0x10(%r14), %rax
movq %rax, 0x38(%rsp)
addl $-0x20, %r12d
xorl %r13d, %r13d
movq %r14, 0x18(%rsp)
movq %rbx, %r14
movq %r13, %rax
shlq $0x4, %rax
movq 0x38(%rsp), %rcx
vmovups (%rcx,%rax), %xmm0
vmovaps %xmm0, 0x40(%rsp)
subq $0x8, %rsp
cmpq $0x1f, %rbx
ja 0x2cac
leaq 0x58(%rsp), %rdi
leaq 0x68(%rsp), %rsi
leaq 0x8(%rsp), %rdx
leaq 0x48(%rsp), %rcx
leaq 0x78(%rsp), %r8
xorl %r9d, %r9d
pushq $0x2
xorl %eax, %eax
pushq %rax
pushq %rax
callq 0x2811
addq $0x20, %rsp
vmovaps 0x20(%rsp), %xmm0
vxorps (%rsp), %xmm0, %xmm0
vmovaps %xmm0, (%rsp)
cmpl $0x11, %r14d
jl 0x2d02
movl %r12d, %eax
xorl %ecx, %ecx
movb (%rsp,%rcx), %dl
movb %dl, (%r15,%rcx)
incq %rcx
cmpq %rcx, %rax
jne 0x2c9b
jmp 0x2d02
leaq 0x58(%rsp), %rdi
leaq 0x68(%rsp), %rsi
leaq 0x8(%rsp), %rdx
leaq 0x48(%rsp), %rcx
leaq 0x78(%rsp), %r8
movl $0x1, %r9d
pushq $0x2
xorl %eax, %eax
pushq %rax
pushq %rax
callq 0x2811
addq $0x20, %rsp
cmpq $0x20, %r14
jne 0x2cf0
vmovaps 0x20(%rsp), %xmm0
vxorps (%rsp), %xmm0, %xmm0
vmovaps %xmm0, (%rsp)
xorl %eax, %eax
movb (%rsp,%rax), %cl
movb %cl, (%r15,%rax)
incq %rax
cmpq $0x10, %rax
jne 0x2cf2
vmovaps (%rsp), %xmm0
vxorps 0x20(%rsp), %xmm0, %xmm0
vmovaps %xmm0, 0x20(%rsp)
leaq -0x10(%r14), %rbx
cmpq $0xf, %rbx
ja 0x2d50
xorl %eax, %eax
cmpb (%rsp,%rbx), %al
jno 0x2dca
cmpq $0x1e, %r14
ja 0x2d54
movl %ebp, %eax
addq %rsp, %rax
movl %r12d, %ecx
movq 0x18(%rsp), %r14
cmpb $0x0, (%rax)
jne 0x2dca
incl %ecx
incq %rax
cmpl $0xe, %ecx
jle 0x2d3b
jmp 0x2d59
addq $0x10, %r15
movq 0x18(%rsp), %r14
addq $0x10, %r14
leaq 0x1(%r13), %rax
addl $-0x10, %ebp
addl $-0x10, %r12d
cmpq 0x80(%rsp), %r13
movq %rax, %r13
jne 0x2c2c
subq $0x8, %rsp
movl $0x1, %eax
leaq 0x68(%rsp), %rdi
leaq 0x58(%rsp), %rsi
leaq 0x8(%rsp), %rdx
leaq 0x28(%rsp), %rcx
leaq 0x78(%rsp), %r8
movl $0x1, %r9d
pushq %rax
pushq %rax
pushq %rax
callq 0x2811
addq $0x20, %rsp
testq %rbx, %rbx
je 0x2dc6
xorl %eax, %eax
movb (%rsp,%rax), %cl
cmpb 0x10(%r14,%rax), %cl
jne 0x2dca
incq %rax
cmpq %rax, %rbx
jne 0x2db4
xorl %eax, %eax
jmp 0x2dcf
movl $0xffffffff, %eax       # imm = 0xFFFFFFFF
addq $0xc8, %rsp
popq %rbx
popq %r12
popq %r13
popq %r14
popq %r15
popq %rbp
retq