; LLVM IR from openssl/openssl :: crypto/ec (curve25519)

; Unoptimized IR (clang -disable-llvm-passes):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.ge_p3 = type { [10 x i32], [10 x i32], [10 x i32], [10 x i32] }

@.str = external hidden unnamed_addr constant [7 x i8], align 1

; Function Attrs: nounwind uwtable
define dso_local i32 @ossl_ed25519_sign(ptr noundef %0, ptr noundef %1, i64 noundef %2, ptr noundef %3, ptr noundef %4, i8 noundef zeroext %5, i8 noundef zeroext %6, i8 noundef zeroext %7, ptr noundef %8, i64 noundef %9, ptr noundef %10, ptr noundef %11) #0 {
  %13 = alloca ptr, align 8
  %14 = alloca ptr, align 8
  %15 = alloca i64, align 8
  %16 = alloca ptr, align 8
  %17 = alloca ptr, align 8
  %18 = alloca i8, align 1
  %19 = alloca i8, align 1
  %20 = alloca i8, align 1
  %21 = alloca ptr, align 8
  %22 = alloca i64, align 8
  %23 = alloca ptr, align 8
  %24 = alloca ptr, align 8
  %25 = alloca [64 x i8], align 16
  %26 = alloca [64 x i8], align 16
  %27 = alloca %struct.ge_p3, align 4
  %28 = alloca [64 x i8], align 16
  %29 = alloca ptr, align 8
  %30 = alloca ptr, align 8
  %31 = alloca i32, align 4
  %32 = alloca i32, align 4
  store ptr %0, ptr %13, align 8, !tbaa !5
  store ptr %1, ptr %14, align 8, !tbaa !5
  store i64 %2, ptr %15, align 8, !tbaa !9
  store ptr %3, ptr %16, align 8, !tbaa !5
  store ptr %4, ptr %17, align 8, !tbaa !5
  store i8 %5, ptr %18, align 1, !tbaa !11
  store i8 %6, ptr %19, align 1, !tbaa !11
  store i8 %7, ptr %20, align 1, !tbaa !11
  store ptr %8, ptr %21, align 8, !tbaa !5
  store i64 %9, ptr %22, align 8, !tbaa !9
  store ptr %10, ptr %23, align 8, !tbaa !5
  store ptr %11, ptr %24, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 64, ptr %25) #3
  call void @llvm.lifetime.start.p0(i64 64, ptr %26) #3
  call void @llvm.lifetime.start.p0(i64 160, ptr %27) #3
  call void @llvm.lifetime.start.p0(i64 64, ptr %28) #3
  call void @llvm.lifetime.start.p0(i64 8, ptr %29) #3
  %33 = load ptr, ptr %23, align 8, !tbaa !5
  %34 = load ptr, ptr %24, align 8, !tbaa !5
  %35 = call ptr @EVP_MD_fetch(ptr noundef %33, ptr noundef @.str, ptr noundef %34)
  store ptr %35, ptr %29, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 8, ptr %30) #3
  %36 = call ptr @EVP_MD_CTX_new()
  store ptr %36, ptr %30, align 8, !tbaa !5
  call void @llvm.lifetime.start.p0(i64 4, ptr %31) #3
  call void @llvm.lifetime.start.p0(i64 4, ptr %32) #3
  store i32 0, ptr %32, align 4, !tbaa !12
  %37 = load ptr, ptr %21, align 8, !tbaa !5
  %38 = icmp eq ptr %37, null
  br i1 %38, label %39, label %40

39:                                               ; preds = %12
  store i64 0, ptr %22, align 8, !tbaa !9
  br label %40

40:                                               ; preds = %39, %12
  %41 = load i8, ptr %20, align 1, !tbaa !11
  %42 = zext i8 %41 to i32
  %43 = icmp ne i32 %42, 0
  br i1 %43, label %44, label %48

44:                                               ; preds = %40
  %45 = load i64, ptr %22, align 8, !tbaa !9
  %46 = icmp eq i64 %45, 0
  br i1 %46, label %47, label %48

47:                                               ; preds = %44
  br label %161

48:                                               ; preds = %44, %40
  %49 = load i8, ptr %18, align 1, !tbaa !11
  %50 = icmp ne i8 %49, 0
  br i1 %50, label %55, label %51

51:                                               ; preds = %48
  %52 = load i64, ptr %22, align 8, !tbaa !9
  %53 = icmp ugt i64 %52, 0
  br i1 %53, label %54, label %55

54:                                               ; preds = %51
  br label %161

55:                                               ; preds = %51, %48
  %56 = load ptr, ptr %29, align 8, !tbaa !5
  %57 = icmp eq ptr %56, null
  br i1 %57, label %61, label %58

58:                                               ; preds = %55
  %59 = load ptr, ptr %30, align 8, !tbaa !5
  %60 = icmp eq ptr %59, null
  br i1 %60, label %61, label %62

61:                                               ; preds = %58, %55
  br label %161

62:                                               ; preds = %58
  %63 = load ptr, ptr %30, align 8, !tbaa !5
  %64 = load ptr, ptr %29, align 8, !tbaa !5
  %65 = call i32 @EVP_DigestInit_ex(ptr noundef %63, ptr noundef %64, ptr noundef null)
  %66 = icmp ne i32 %65, 0
  br i1 %66, label %67, label %77

67:                                               ; preds = %62
  %68 = load ptr, ptr %30, align 8, !tbaa !5
  %69 = load ptr, ptr %17, align 8, !tbaa !5
  %70 = call i32 @EVP_DigestUpdate(ptr noundef %68, ptr noundef %69, i64 noundef 32)
  %71 = icmp ne i32 %70, 0
  br i1 %71, label %72, label %77

72:                                               ; preds = %67
  %73 = load ptr, ptr %30, align 8, !tbaa !5
  %74 = getelementptr inbounds [64 x i8], ptr %25, i64 0, i64 0
  %75 = call i32 @EVP_DigestFinal_ex(ptr noundef %73, ptr noundef %74, ptr noundef %31)
  %76 = icmp ne i32 %75, 0
  br i1 %76, label %78, label %77

77:                                               ; preds = %72, %67, %62
  br label %161

78:                                               ; preds = %72
  %79 = getelementptr inbounds [64 x i8], ptr %25, i64 0, i64 0
  %80 = load i8, ptr %79, align 16, !tbaa !11
  %81 = zext i8 %80 to i32
  %82 = and i32 %81, 248
  %83 = trunc i32 %82 to i8
  store i8 %83, ptr %79, align 16, !tbaa !11
  %84 = getelementptr inbounds [64 x i8], ptr %25, i64 0, i64 31
  %85 = load i8, ptr %84, align 1, !tbaa !11
  %86 = zext i8 %85 to i32
  %87 = and i32 %86, 63
  %88 = trunc i32 %87 to i8
  store i8 %88, ptr %84, align 1, !tbaa !11
  %89 = getelementptr inbounds [64 x i8], ptr %25, i64 0, i64 31
  %90 = load i8, ptr %89, align 1, !tbaa !11
  %91 = zext i8 %90 to i32
  %92 = or i32 %91, 64
  %93 = trunc i32 %92 to i8
  store i8 %93, ptr %89, align 1, !tbaa !11
  %94 = load ptr, ptr %30, align 8, !tbaa !5
  %95 = load ptr, ptr %29, align 8, !tbaa !5
  %96 = load i8, ptr %18, align 1, !tbaa !11
  %97 = load i8, ptr %19, align 1, !tbaa !11
  %98 = load ptr, ptr %21, align 8, !tbaa !5
  %99 = load i64, ptr %22, align 8, !tbaa !9
  %100 = call i32 @hash_init_with_dom(ptr noundef %94, ptr noundef %95, i8 noundef zeroext %96, i8 noundef zeroext %97, ptr noundef %98, i64 noundef %99)
  %101 = icmp ne i32 %100, 0
  br i1 %101, label %102, label %119

102:                                              ; preds = %78
  %103 = load ptr, ptr %30, align 8, !tbaa !5
  %104 = getelementptr inbounds [64 x i8], ptr %25, i64 0, i64 0
  %105 = getelementptr inbounds i8, ptr %104, i64 32
  %106 = call i32 @EVP_DigestUpdate(ptr noundef %103, ptr noundef %105, i64 noundef 32)
  %107 = icmp ne i32 %106, 0
  br i1 %107, label %108, label %119

108:                                              ; preds = %102
  %109 = load ptr, ptr %30, align 8, !tbaa !5
  %110 = load ptr, ptr %14, align 8, !tbaa !5
  %111 = load i64, ptr %15, align 8, !tbaa !9
  %112 = call i32 @EVP_DigestUpdate(ptr noundef %109, ptr noundef %110, i64 noundef %111)
  %113 = icmp ne i32 %112, 0
  br i1 %113, label %114, label %119

114:                                              ; preds = %108
  %115 = load ptr, ptr %30, align 8, !tbaa !5
  %116 = getelementptr inbounds [64 x i8], ptr %26, i64 0, i64 0
  %117 = call i32 @EVP_DigestFinal_ex(ptr noundef %115, ptr noundef %116, ptr noundef %31)
  %118 = icmp ne i32 %117, 0
  br i1 %118, label %120, label %119

119:                                              ; preds = %114, %108, %102, %78
  br label %161

120:                                              ; preds = %114
  %121 = getelementptr inbounds [64 x i8], ptr %26, i64 0, i64 0
  call void @x25519_sc_reduce(ptr noundef %121)
  %122 = getelementptr inbounds [64 x i8], ptr %26, i64 0, i64 0
  call void @ge_scalarmult_base(ptr noundef %27, ptr noundef %122)
  %123 = load ptr, ptr %13, align 8, !tbaa !5
  call void @ge_p3_tobytes(ptr noundef %123, ptr noundef %27)
  %124 = load ptr, ptr %30, align 8, !tbaa !5
  %125 = load ptr, ptr %29, align 8, !tbaa !5
  %126 = load i8, ptr %18, align 1, !tbaa !11
  %127 = load i8, ptr %19, align 1, !tbaa !11
  %128 = load ptr, ptr %21, align 8, !tbaa !5
  %129 = load i64, ptr %22, align 8, !tbaa !9
  %130 = call i32 @hash_init_with_dom(ptr noundef %124, ptr noundef %125, i8 noundef zeroext %126, i8 noundef zeroext %127, ptr noundef %128, i64 noundef %129)
  %131 = icmp ne i32 %130, 0
  br i1 %131, label %132, label %153

132:                                              ; preds = %120
  %133 = load ptr, ptr %30, align 8, !tbaa !5
  %134 = load ptr, ptr %13, align 8, !tbaa !5
  %135 = call i32 @EVP_DigestUpdate(ptr noundef %133, ptr noundef %134, i64 noundef 32)
  %136 = icmp ne i32 %135, 0
  br i1 %136, label %137, label %153

137:                                              ; preds = %132
  %138 = load ptr, ptr %30, align 8, !tbaa !5
  %139 = load ptr, ptr %16, align 8, !tbaa !5
  %140 = call i32 @EVP_DigestUpdate(ptr noundef %138, ptr noundef %139, i64 noundef 32)
  %141 = icmp ne i32 %140, 0
  br i1 %141, label %142, label %153

142:                                              ; preds = %137
  %143 = load ptr, ptr %30, align 8, !tbaa !5
  %144 = load ptr, ptr %14, align 8, !tbaa !5
  %145 = load i64, ptr %15, align 8, !tbaa !9
  %146 = call i32 @EVP_DigestUpdate(ptr noundef %143, ptr noundef %144, i64 noundef %145)
  %147 = icmp ne i32 %146, 0
  br i1 %147, label %148, label %153

148:                                              ; preds = %142
  %149 = load ptr, ptr %30, align 8, !tbaa !5
  %150 = getelementptr inbounds [64 x i8], ptr %28, i64 0, i64 0
  %151 = call i32 @EVP_DigestFinal_ex(ptr noundef %149, ptr noundef %150, ptr noundef %31)
  %152 = icmp ne i32 %151, 0
  br i1 %152, label %154, label %153

153:                                              ; preds = %148, %142, %137, %132, %120
  br label %161

154:                                              ; preds = %148
  %155 = getelementptr inbounds [64 x i8], ptr %28, i64 0, i64 0
  call void @x25519_sc_reduce(ptr noundef %155)
  %156 = load ptr, ptr %13, align 8, !tbaa !5
  %157 = getelementptr inbounds i8, ptr %156, i64 32
  %158 = getelementptr inbounds [64 x i8], ptr %28, i64 0, i64 0
  %159 = getelementptr inbounds [64 x i8], ptr %25, i64 0, i64 0
  %160 = getelementptr inbounds [64 x i8], ptr %26, i64 0, i64 0
  call void @sc_muladd(ptr noundef %157, ptr noundef %158, ptr noundef %159, ptr noundef %160)
  store i32 1, ptr %32, align 4, !tbaa !12
  br label %161

161:                                              ; preds = %154, %153, %119, %77, %61, %54, %47
  %162 = getelementptr inbounds [64 x i8], ptr %26, i64 0, i64 0
  call void @OPENSSL_cleanse(ptr noundef %162, i64 noundef 64)
  %163 = getelementptr inbounds [64 x i8], ptr %25, i64 0, i64 0
  call void @OPENSSL_cleanse(ptr noundef %163, i64 noundef 64)
  %164 = load ptr, ptr %29, align 8, !tbaa !5
  call void @EVP_MD_free(ptr noundef %164)
  %165 = load ptr, ptr %30, align 8, !tbaa !5
  call void @EVP_MD_CTX_free(ptr noundef %165)
  %166 = load i32, ptr %32, align 4, !tbaa !12
  call void @llvm.lifetime.end.p0(i64 4, ptr %32) #3
  call void @llvm.lifetime.end.p0(i64 4, ptr %31) #3
  call void @llvm.lifetime.end.p0(i64 8, ptr %30) #3
  call void @llvm.lifetime.end.p0(i64 8, ptr %29) #3
  call void @llvm.lifetime.end.p0(i64 64, ptr %28) #3
  call void @llvm.lifetime.end.p0(i64 160, ptr %27) #3
  call void @llvm.lifetime.end.p0(i64 64, ptr %26) #3
  call void @llvm.lifetime.end.p0(i64 64, ptr %25) #3
  ret i32 %166
}

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #1

declare ptr @EVP_MD_fetch(ptr noundef, ptr noundef, ptr noundef) #2

declare ptr @EVP_MD_CTX_new() #2

declare i32 @EVP_DigestInit_ex(ptr noundef, ptr noundef, ptr noundef) #2

declare i32 @EVP_DigestUpdate(ptr noundef, ptr noundef, i64 noundef) #2

declare i32 @EVP_DigestFinal_ex(ptr noundef, ptr noundef, ptr noundef) #2

; Function Attrs: nounwind uwtable
declare hidden i32 @hash_init_with_dom(ptr noundef, ptr noundef, i8 noundef zeroext, i8 noundef zeroext, ptr noundef, i64 noundef) #0

; Function Attrs: nounwind uwtable
declare hidden void @x25519_sc_reduce(ptr noundef) #0

; Function Attrs: nounwind uwtable
declare hidden void @ge_scalarmult_base(ptr noundef, ptr noundef) #0

; Function Attrs: nounwind uwtable
declare hidden void @ge_p3_tobytes(ptr noundef, ptr noundef) #0

; Function Attrs: nounwind uwtable
declare hidden void @sc_muladd(ptr noundef, ptr noundef, ptr noundef, ptr noundef) #0

declare void @OPENSSL_cleanse(ptr noundef, i64 noundef) #2

declare void @EVP_MD_free(ptr noundef) #2

declare void @EVP_MD_CTX_free(ptr noundef) #2

; Function Attrs: nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #1

attributes #0 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #1 = { nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #2 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #3 = { nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"any pointer", !7, i64 0}
!7 = !{!"omnipotent char", !8, i64 0}
!8 = !{!"Simple C/C++ TBAA"}
!9 = !{!10, !10, i64 0}
!10 = !{!"long", !7, i64 0}
!11 = !{!7, !7, i64 0}
!12 = !{!13, !13, i64 0}
!13 = !{!"int", !7, i64 0}


; Optimized IR (opt -passes='default<O3>'):
target datalayout = "e-m:e-p270:32:32-p271:32:32-p272:64:64-i64:64-i128:128-f80:128-n8:16:32:64-S128"
target triple = "x86_64-unknown-linux-gnu"

%struct.ge_p3 = type { [10 x i32], [10 x i32], [10 x i32], [10 x i32] }

@.str = external hidden unnamed_addr constant [7 x i8], align 1

; Function Attrs: nounwind uwtable
define dso_local range(i32 0, 2) i32 @ossl_ed25519_sign(ptr noundef %0, ptr noundef %1, i64 noundef %2, ptr noundef %3, ptr noundef %4, i8 noundef zeroext %5, i8 noundef zeroext %6, i8 noundef zeroext %7, ptr noundef %8, i64 noundef %9, ptr noundef %10, ptr noundef %11) local_unnamed_addr #0 {
  %13 = alloca [64 x i8], align 16
  %14 = alloca [64 x i8], align 16
  %15 = alloca %struct.ge_p3, align 4
  %16 = alloca [64 x i8], align 16
  %17 = alloca i32, align 4
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %13) #3
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %14) #3
  call void @llvm.lifetime.start.p0(i64 160, ptr nonnull %15) #3
  call void @llvm.lifetime.start.p0(i64 64, ptr nonnull %16) #3
  %18 = tail call ptr @EVP_MD_fetch(ptr noundef %10, ptr noundef nonnull @.str, ptr noundef %11) #3
  %19 = tail call ptr @EVP_MD_CTX_new() #3
  call void @llvm.lifetime.start.p0(i64 4, ptr nonnull %17) #3
  %20 = icmp eq ptr %8, null
  %spec.select = select i1 %20, i64 0, i64 %9
  %21 = icmp ne i8 %7, 0
  %22 = icmp eq i64 %spec.select, 0
  %or.cond = and i1 %21, %22
  br i1 %or.cond, label %62, label %23

23:                                               ; preds = %12
  %24 = icmp eq i8 %5, 0
  %25 = icmp ne i64 %spec.select, 0
  %or.cond3 = and i1 %24, %25
  br i1 %or.cond3, label %62, label %26

26:                                               ; preds = %23
  %27 = icmp eq ptr %18, null
  %28 = icmp eq ptr %19, null
  %or.cond5 = select i1 %27, i1 true, i1 %28
  br i1 %or.cond5, label %62, label %29

29:                                               ; preds = %26
  %30 = tail call i32 @EVP_DigestInit_ex(ptr noundef nonnull %19, ptr noundef nonnull %18, ptr noundef null) #3
  %.not = icmp eq i32 %30, 0
  br i1 %.not, label %62, label %31

31:                                               ; preds = %29
  %32 = tail call i32 @EVP_DigestUpdate(ptr noundef nonnull %19, ptr noundef %4, i64 noundef 32) #3
  %.not51 = icmp eq i32 %32, 0
  br i1 %.not51, label %62, label %33

33:                                               ; preds = %31
  %34 = call i32 @EVP_DigestFinal_ex(ptr noundef nonnull %19, ptr noundef nonnull %13, ptr noundef nonnull %17) #3
  %.not52 = icmp eq i32 %34, 0
  br i1 %.not52, label %62, label %35

35:                                               ; preds = %33
  %36 = load i8, ptr %13, align 16, !tbaa !5
  %37 = and i8 %36, -8
  store i8 %37, ptr %13, align 16, !tbaa !5
  %38 = getelementptr inbounds i8, ptr %13, i64 31
  %39 = load i8, ptr %38, align 1, !tbaa !5
  %40 = and i8 %39, 63
  %41 = or disjoint i8 %40, 64
  store i8 %41, ptr %38, align 1, !tbaa !5
  %42 = call i32 @hash_init_with_dom(ptr noundef nonnull %19, ptr noundef nonnull %18, i8 noundef zeroext %5, i8 noundef zeroext %6, ptr noundef %8, i64 noundef %spec.select)
  %.not53 = icmp eq i32 %42, 0
  br i1 %.not53, label %62, label %43

43:                                               ; preds = %35
  %44 = getelementptr inbounds i8, ptr %13, i64 32
  %45 = call i32 @EVP_DigestUpdate(ptr noundef nonnull %19, ptr noundef nonnull %44, i64 noundef 32) #3
  %.not54 = icmp eq i32 %45, 0
  br i1 %.not54, label %62, label %46

46:                                               ; preds = %43
  %47 = call i32 @EVP_DigestUpdate(ptr noundef nonnull %19, ptr noundef %1, i64 noundef %2) #3
  %.not55 = icmp eq i32 %47, 0
  br i1 %.not55, label %62, label %48

48:                                               ; preds = %46
  %49 = call i32 @EVP_DigestFinal_ex(ptr noundef nonnull %19, ptr noundef nonnull %14, ptr noundef nonnull %17) #3
  %.not56 = icmp eq i32 %49, 0
  br i1 %.not56, label %62, label %50

50:                                               ; preds = %48
  call void @x25519_sc_reduce(ptr noundef nonnull %14)
  call void @ge_scalarmult_base(ptr noundef nonnull %15, ptr noundef nonnull %14)
  call void @ge_p3_tobytes(ptr noundef %0, ptr noundef nonnull %15)
  %51 = call i32 @hash_init_with_dom(ptr noundef nonnull %19, ptr noundef nonnull %18, i8 noundef zeroext %5, i8 noundef zeroext %6, ptr noundef %8, i64 noundef %spec.select)
  %.not57 = icmp eq i32 %51, 0
  br i1 %.not57, label %62, label %52

52:                                               ; preds = %50
  %53 = call i32 @EVP_DigestUpdate(ptr noundef nonnull %19, ptr noundef %0, i64 noundef 32) #3
  %.not58 = icmp eq i32 %53, 0
  br i1 %.not58, label %62, label %54

54:                                               ; preds = %52
  %55 = call i32 @EVP_DigestUpdate(ptr noundef nonnull %19, ptr noundef %3, i64 noundef 32) #3
  %.not59 = icmp eq i32 %55, 0
  br i1 %.not59, label %62, label %56

56:                                               ; preds = %54
  %57 = call i32 @EVP_DigestUpdate(ptr noundef nonnull %19, ptr noundef %1, i64 noundef %2) #3
  %.not60 = icmp eq i32 %57, 0
  br i1 %.not60, label %62, label %58

58:                                               ; preds = %56
  %59 = call i32 @EVP_DigestFinal_ex(ptr noundef nonnull %19, ptr noundef nonnull %16, ptr noundef nonnull %17) #3
  %.not61 = icmp eq i32 %59, 0
  br i1 %.not61, label %62, label %60

60:                                               ; preds = %58
  call void @x25519_sc_reduce(ptr noundef nonnull %16)
  %61 = getelementptr inbounds i8, ptr %0, i64 32
  call void @sc_muladd(ptr noundef nonnull %61, ptr noundef nonnull %16, ptr noundef nonnull %13, ptr noundef nonnull %14)
  br label %62

62:                                               ; preds = %50, %52, %54, %56, %58, %35, %43, %46, %48, %29, %31, %33, %26, %23, %12, %60
  %.0 = phi i32 [ 0, %12 ], [ 0, %23 ], [ 0, %26 ], [ 1, %60 ], [ 0, %58 ], [ 0, %56 ], [ 0, %54 ], [ 0, %52 ], [ 0, %50 ], [ 0, %48 ], [ 0, %46 ], [ 0, %43 ], [ 0, %35 ], [ 0, %33 ], [ 0, %31 ], [ 0, %29 ]
  call void @OPENSSL_cleanse(ptr noundef nonnull %14, i64 noundef 64) #3
  call void @OPENSSL_cleanse(ptr noundef nonnull %13, i64 noundef 64) #3
  call void @EVP_MD_free(ptr noundef %18) #3
  call void @EVP_MD_CTX_free(ptr noundef %19) #3
  call void @llvm.lifetime.end.p0(i64 4, ptr nonnull %17) #3
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %16) #3
  call void @llvm.lifetime.end.p0(i64 160, ptr nonnull %15) #3
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %14) #3
  call void @llvm.lifetime.end.p0(i64 64, ptr nonnull %13) #3
  ret i32 %.0
}

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.start.p0(i64 immarg, ptr nocapture) #1

declare ptr @EVP_MD_fetch(ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #2

declare ptr @EVP_MD_CTX_new() local_unnamed_addr #2

declare i32 @EVP_DigestInit_ex(ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #2

declare i32 @EVP_DigestUpdate(ptr noundef, ptr noundef, i64 noundef) local_unnamed_addr #2

declare i32 @EVP_DigestFinal_ex(ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #2

; Function Attrs: nounwind uwtable
declare hidden i32 @hash_init_with_dom(ptr noundef, ptr noundef, i8 noundef zeroext, i8 noundef zeroext, ptr noundef, i64 noundef) local_unnamed_addr #0

; Function Attrs: nounwind uwtable
declare hidden void @x25519_sc_reduce(ptr noundef) local_unnamed_addr #0

; Function Attrs: nounwind uwtable
declare hidden void @ge_scalarmult_base(ptr noundef, ptr noundef) local_unnamed_addr #0

; Function Attrs: nounwind uwtable
declare hidden void @ge_p3_tobytes(ptr noundef, ptr noundef) local_unnamed_addr #0

; Function Attrs: nounwind uwtable
declare hidden void @sc_muladd(ptr noundef, ptr noundef, ptr noundef, ptr noundef) local_unnamed_addr #0

declare void @OPENSSL_cleanse(ptr noundef, i64 noundef) local_unnamed_addr #2

declare void @EVP_MD_free(ptr noundef) local_unnamed_addr #2

declare void @EVP_MD_CTX_free(ptr noundef) local_unnamed_addr #2

; Function Attrs: mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite)
declare void @llvm.lifetime.end.p0(i64 immarg, ptr nocapture) #1

attributes #0 = { nounwind uwtable "min-legal-vector-width"="0" "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #1 = { mustprogress nocallback nofree nosync nounwind willreturn memory(argmem: readwrite) }
attributes #2 = { "no-trapping-math"="true" "stack-protector-buffer-size"="8" "target-cpu"="x86-64" "target-features"="+cmov,+cx8,+fxsr,+mmx,+sse,+sse2,+x87" "tune-cpu"="generic" }
attributes #3 = { nounwind }

!llvm.module.flags = !{!0, !1, !2, !3}
!llvm.ident = !{!4}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 8, !"PIC Level", i32 2}
!2 = !{i32 7, !"PIE Level", i32 2}
!3 = !{i32 7, !"uwtable", i32 2}
!4 = !{!"clang version 19.1.0 (git@github.com:llvm/llvm-project.git a4bf6cd7cfb1a1421ba92bca9d017b49936c55e4)"}
!5 = !{!6, !6, i64 0}
!6 = !{!"omnipotent char", !7, i64 0}
!7 = !{!"Simple C/C++ TBAA"}


; Effective O3 passes: CorrelatedValuePropagationPass,EarlyCSEPass,GlobalOptPass,IPSCCPPass,InferFunctionAttrsPass,InstCombinePass,SROAPass,SimplifyCFGPass,TailCallElimPass