#define NULL ((void *)0)
typedef unsigned long size_t; // Customize by platform.
typedef long intptr_t;
typedef unsigned long uintptr_t;
typedef long scalar_t__; // Either arithmetic or pointer type.
/* By default, we understand bool (as a convenience). */
typedef int bool;
#define false 0
#define true 1

/* Forward declarations */

/* Type definitions */

/* Variables and functions */
int /*<<< orphan*/ argon2i_general();
int /*<<< orphan*/ blake2b_general();
int /*<<< orphan*/ chacha20();
int /*<<< orphan*/ curve_to_hidden();
int /*<<< orphan*/ from_eddsa_private();
int /*<<< orphan*/ from_eddsa_public();
int /*<<< orphan*/ h_chacha20();
int /*<<< orphan*/ hidden_key_pair();
int /*<<< orphan*/ hidden_to_curve();
int /*<<< orphan*/ ietf_chacha20();
int /*<<< orphan*/ key_exchange();
int /*<<< orphan*/ lock_aead();
int /*<<< orphan*/ poly1305();
int /*<<< orphan*/ printf(char *, ...);
int /*<<< orphan*/ sign();
int /*<<< orphan*/ sign_public_key();
int /*<<< orphan*/ unlock_aead();
int /*<<< orphan*/ verify16();
int /*<<< orphan*/ verify32();
int /*<<< orphan*/ verify64();
int /*<<< orphan*/ wipe();
int /*<<< orphan*/ x25519_dirty_fast();
int /*<<< orphan*/ x25519_dirty_small();
int /*<<< orphan*/ x25519_inverse();
int /*<<< orphan*/ xchacha20();
int main() {
  printf("%s: crypto_"
         "verify16"
         "\n",
         "constant time");
  verify16();
  printf("%s: crypto_"
         "verify32"
         "\n",
         "constant time");
  verify32();
  printf("%s: crypto_"
         "verify64"
         "\n",
         "constant time");
  verify64();
  printf("%s: crypto_"
         "wipe"
         "\n",
         "constant time");
  wipe();
  printf("%s: crypto_"
         "lock_aead"
         "\n",
         "constant time");
  lock_aead();
  printf("%s: crypto_"
         "unlock_aead"
         "\n",
         "1 conditional");
  unlock_aead();
  printf("%s: crypto_"
         "blake2b_general"
         "\n",
         "constant time");
  blake2b_general();
  printf("%s: crypto_"
         "argon2i_general"
         "\n",
         "constant time");
  argon2i_general();
  printf("%s: crypto_"
         "key_exchange"
         "\n",
         "constant time");
  key_exchange();
  printf("%s: crypto_"
         "sign_public_key"
         "\n",
         "constant time");
  sign_public_key();
  printf("%s: crypto_"
         "sign"
         "\n",
         "constant time");
  sign();
  printf("skipped      : crypto_check.\n");
  printf("%s: crypto_"
         "from_eddsa_private"
         "\n",
         "constant time");
  from_eddsa_private();
  printf("%s: crypto_"
         "from_eddsa_public"
         "\n",
         "constant time");
  from_eddsa_public();
  printf("%s: crypto_"
         "hidden_to_curve"
         "\n",
         "constant time");
  hidden_to_curve();
  printf("%s: crypto_"
         "curve_to_hidden"
         "\n",
         "1 conditional");
  curve_to_hidden();
  printf("%s: crypto_"
         "hidden_key_pair"
         "\n",
         "1 conditional");
  hidden_key_pair();
  printf("%s: crypto_"
         "h_chacha20"
         "\n",
         "constant time");
  h_chacha20();
  printf("%s: crypto_"
         "chacha20"
         "\n",
         "constant time");
  chacha20();
  printf("%s: crypto_"
         "xchacha20"
         "\n",
         "constant time");
  xchacha20();
  printf("%s: crypto_"
         "ietf_chacha20"
         "\n",
         "constant time");
  ietf_chacha20();
  printf("%s: crypto_"
         "poly1305"
         "\n",
         "constant time");
  poly1305();
  printf("%s: crypto_"
         "x25519_dirty_small"
         "\n",
         "constant time");
  x25519_dirty_small();
  printf("%s: crypto_"
         "x25519_dirty_fast"
         "\n",
         "constant time");
  x25519_dirty_fast();
  printf("%s: crypto_"
         "x25519_inverse"
         "\n",
         "constant time");
  x25519_inverse();
  return 0;
}


x86 assembly (clang, -O0):
<main>:
push   %rbp
mov    %rsp,%rbp
sub    $0x10,%rsp
movl   $0x0,-0x4(%rbp)
lea    0xd5a(%rip),%rdi
lea    0xd68(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   10e0 <verify16@plt>
lea    0xd61(%rip),%rdi
lea    0xd4c(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1130 <verify32@plt>
lea    0xd5a(%rip),%rdi
lea    0xd30(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   10b0 <verify64@plt>
lea    0xd53(%rip),%rdi
lea    0xd14(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1100 <wipe@plt>
lea    0xd48(%rip),%rdi
lea    0xcf8(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   10a0 <lock_aead@plt>
lea    0xd42(%rip),%rdi
lea    0xd53(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1070 <unlock_aead@plt>
lea    0xd4c(%rip),%rdi
lea    0xcc0(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   10d0 <blake2b_general@plt>
lea    0xd4c(%rip),%rdi
lea    0xca4(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1060 <argon2i_general@plt>
lea    0xd4c(%rip),%rdi
lea    0xc88(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1190 <key_exchange@plt>
lea    0xd49(%rip),%rdi
lea    0xc6c(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1110 <sign_public_key@plt>
lea    0xd49(%rip),%rdi
lea    0xc50(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1150 <sign@plt>
lea    0xd3e(%rip),%rdi
mov    $0x0,%al
call   1080 <printf@plt>
lea    0xd4e(%rip),%rdi
lea    0xc26(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1140 <from_eddsa_private@plt>
lea    0xd51(%rip),%rdi
lea    0xc0a(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1040 <from_eddsa_public@plt>
lea    0xd53(%rip),%rdi
lea    0xbee(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   11a0 <hidden_to_curve@plt>
lea    0xd53(%rip),%rdi
lea    0xc49(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1050 <curve_to_hidden@plt>
lea    0xd53(%rip),%rdi
lea    0xc2d(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1180 <hidden_key_pair@plt>
lea    0xd53(%rip),%rdi
lea    0xb9a(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   11b0 <h_chacha20@plt>
lea    0xd4e(%rip),%rdi
lea    0xb7e(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1160 <chacha20@plt>
lea    0xd47(%rip),%rdi
lea    0xb62(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1170 <xchacha20@plt>
lea    0xd41(%rip),%rdi
lea    0xb46(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1030 <ietf_chacha20@plt>
lea    0xd3f(%rip),%rdi
lea    0xb2a(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1090 <poly1305@plt>
lea    0xd38(%rip),%rdi
lea    0xb0e(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   1120 <x25519_dirty_small@plt>
lea    0xd3b(%rip),%rdi
lea    0xaf2(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   10c0 <x25519_dirty_fast@plt>
lea    0xd3d(%rip),%rdi
lea    0xad6(%rip),%rsi
mov    $0x0,%al
call   1080 <printf@plt>
mov    $0x0,%al
call   10f0 <x25519_inverse@plt>
xor    %eax,%eax
add    $0x10,%rsp
pop    %rbp
ret

x86 assembly (clang, -O2):
<main>:
push   %r14
push   %rbx
push   %rax
lea    0xd55(%rip),%rdi
lea    0xd63(%rip),%rbx
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   10f0 <verify16@plt>
lea    0xd59(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1140 <verify32@plt>
lea    0xd56(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   10c0 <verify64@plt>
lea    0xd53(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1110 <wipe@plt>
lea    0xd4c(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   10b0 <lock_aead@plt>
lea    0xd4a(%rip),%rdi
lea    0xd5b(%rip),%r14
mov    %r14,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1080 <unlock_aead@plt>
lea    0xd51(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   10e0 <blake2b_general@plt>
lea    0xd55(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1070 <argon2i_general@plt>
lea    0xd59(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   11a0 <key_exchange@plt>
lea    0xd5a(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1120 <sign_public_key@plt>
lea    0xd5e(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1160 <sign@plt>
lea    0xeb1(%rip),%rdi
call   1060 <puts@plt>
lea    0xd4b(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1150 <from_eddsa_private@plt>
lea    0xd52(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1040 <from_eddsa_public@plt>
lea    0xd58(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   11b0 <hidden_to_curve@plt>
lea    0xd5c(%rip),%rdi
mov    %r14,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1050 <curve_to_hidden@plt>
lea    0xd60(%rip),%rdi
mov    %r14,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1190 <hidden_key_pair@plt>
lea    0xd64(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   11c0 <h_chacha20@plt>
lea    0xd63(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1170 <chacha20@plt>
lea    0xd60(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1180 <xchacha20@plt>
lea    0xd5e(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1030 <ietf_chacha20@plt>
lea    0xd60(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   10a0 <poly1305@plt>
lea    0xd5d(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1130 <x25519_dirty_small@plt>
lea    0xd64(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   10d0 <x25519_dirty_fast@plt>
lea    0xd6a(%rip),%rdi
mov    %rbx,%rsi
xor    %eax,%eax
call   1090 <printf@plt>
xor    %eax,%eax
call   1100 <x25519_inverse@plt>
xor    %eax,%eax
add    $0x8,%rsp
pop    %rbx
pop    %r14
ret

LLVM IR (-O0):
@.str = [21 x i8] c"%s: crypto_verify16\0A\00"
@.str.1 = [14 x i8] c"constant time\00"
@.str.2 = [21 x i8] c"%s: crypto_verify32\0A\00"
@.str.3 = [21 x i8] c"%s: crypto_verify64\0A\00"
@.str.4 = [17 x i8] c"%s: crypto_wipe\0A\00"
@.str.5 = [22 x i8] c"%s: crypto_lock_aead\0A\00"
@.str.6 = [24 x i8] c"%s: crypto_unlock_aead\0A\00"
@.str.7 = [14 x i8] c"1 conditional\00"
@.str.8 = [28 x i8] c"%s: crypto_blake2b_general\0A\00"
@.str.9 = [28 x i8] c"%s: crypto_argon2i_general\0A\00"
@.str.10 = [25 x i8] c"%s: crypto_key_exchange\0A\00"
@.str.11 = [28 x i8] c"%s: crypto_sign_public_key\0A\00"
@.str.12 = [17 x i8] c"%s: crypto_sign\0A\00"
@.str.13 = [30 x i8] c"skipped : crypto_check.\0A\00"
@.str.14 = [31 x i8] c"%s: crypto_from_eddsa_private\0A\00"
@.str.15 = [30 x i8] c"%s: crypto_from_eddsa_public\0A\00"
@.str.16 = [28 x i8] c"%s: crypto_hidden_to_curve\0A\00"
@.str.17 = [28 x i8] c"%s: crypto_curve_to_hidden\0A\00"
@.str.18 = [28 x i8] c"%s: crypto_hidden_key_pair\0A\00"
@.str.19 = [23 x i8] c"%s: crypto_h_chacha20\0A\00"
@.str.20 = [21 x i8] c"%s: crypto_chacha20\0A\00"
@.str.21 = [22 x i8] c"%s: crypto_xchacha20\0A\00"
@.str.22 = [26 x i8] c"%s: crypto_ietf_chacha20\0A\00"
@.str.23 = [21 x i8] c"%s: crypto_poly1305\0A\00"
@.str.24 = [31 x i8] c"%s: crypto_x25519_dirty_small\0A\00"
@.str.25 = [30 x i8] c"%s: crypto_x25519_dirty_fast\0A\00"
@.str.26 = [27 x i8] c"%s: crypto_x25519_inverse\0A\00"
define i32 @main() {
%1 = alloca i32
store i32 0, i32* %1
%2 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([21 x i8], [21 x i8]* @.str, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%3 = call i32 (...) @verify16()
%4 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([21 x i8], [21 x i8]* @.str.2, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%5 = call i32 (...) @verify32()
%6 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([21 x i8], [21 x i8]* @.str.3, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%7 = call i32 (...) @verify64()
%8 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([17 x i8], [17 x i8]* @.str.4, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%9 = call i32 (...) @wipe()
%10 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([22 x i8], [22 x i8]* @.str.5, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%11 = call i32 (...) @lock_aead()
%12 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([24 x i8], [24 x i8]* @.str.6, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.7, i64 0, i64 0))
%13 = call i32 (...) @unlock_aead()
%14 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([28 x i8], [28 x i8]* @.str.8, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%15 = call i32 (...) @blake2b_general()
%16 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([28 x i8], [28 x i8]* @.str.9, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%17 = call i32 (...) @argon2i_general()
%18 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([25 x i8], [25 x i8]* @.str.10, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%19 = call i32 (...) @key_exchange()
%20 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([28 x i8], [28 x i8]* @.str.11, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%21 = call i32 (...) @sign_public_key()
%22 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([17 x i8], [17 x i8]* @.str.12, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%23 = call i32 (...) @sign()
%24 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([30 x i8], [30 x i8]* @.str.13, i64 0, i64 0))
%25 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([31 x i8], [31 x i8]* @.str.14, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%26 = call i32 (...) @from_eddsa_private()
%27 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([30 x i8], [30 x i8]* @.str.15, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%28 = call i32 (...) @from_eddsa_public()
%29 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([28 x i8], [28 x i8]* @.str.16, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%30 = call i32 (...) @hidden_to_curve()
%31 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([28 x i8], [28 x i8]* @.str.17, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.7, i64 0, i64 0))
%32 = call i32 (...) @curve_to_hidden()
%33 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([28 x i8], [28 x i8]* @.str.18, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.7, i64 0, i64 0))
%34 = call i32 (...) @hidden_key_pair()
%35 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([23 x i8], [23 x i8]* @.str.19, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%36 = call i32 (...) @h_chacha20()
%37 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([21 x i8], [21 x i8]* @.str.20, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%38 = call i32 (...) @chacha20()
%39 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([22 x i8], [22 x i8]* @.str.21, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%40 = call i32 (...) @xchacha20()
%41 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([26 x i8], [26 x i8]* @.str.22, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%42 = call i32 (...) @ietf_chacha20()
%43 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([21 x i8], [21 x i8]* @.str.23, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%44 = call i32 (...) @poly1305()
%45 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([31 x i8], [31 x i8]* @.str.24, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%46 = call i32 (...) @x25519_dirty_small()
%47 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([30 x i8], [30 x i8]* @.str.25, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%48 = call i32 (...) @x25519_dirty_fast()
%49 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([27 x i8], [27 x i8]* @.str.26, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%50 = call i32 (...) @x25519_inverse()
ret i32 0
}

LLVM IR (-O2):
@.str = [21 x i8] c"%s: crypto_verify16\0A\00"
@.str.1 = [14 x i8] c"constant time\00"
@.str.2 = [21 x i8] c"%s: crypto_verify32\0A\00"
@.str.3 = [21 x i8] c"%s: crypto_verify64\0A\00"
@.str.4 = [17 x i8] c"%s: crypto_wipe\0A\00"
@.str.5 = [22 x i8] c"%s: crypto_lock_aead\0A\00"
@.str.6 = [24 x i8] c"%s: crypto_unlock_aead\0A\00"
@.str.7 = [14 x i8] c"1 conditional\00"
@.str.8 = [28 x i8] c"%s: crypto_blake2b_general\0A\00"
@.str.9 = [28 x i8] c"%s: crypto_argon2i_general\0A\00"
@.str.10 = [25 x i8] c"%s: crypto_key_exchange\0A\00"
@.str.11 = [28 x i8] c"%s: crypto_sign_public_key\0A\00"
@.str.12 = [17 x i8] c"%s: crypto_sign\0A\00"
@.str.14 = [31 x i8] c"%s: crypto_from_eddsa_private\0A\00"
@.str.15 = [30 x i8] c"%s: crypto_from_eddsa_public\0A\00"
@.str.16 = [28 x i8] c"%s: crypto_hidden_to_curve\0A\00"
@.str.17 = [28 x i8] c"%s: crypto_curve_to_hidden\0A\00"
@.str.18 = [28 x i8] c"%s: crypto_hidden_key_pair\0A\00"
@.str.19 = [23 x i8] c"%s: crypto_h_chacha20\0A\00"
@.str.20 = [21 x i8] c"%s: crypto_chacha20\0A\00"
@.str.21 = [22 x i8] c"%s: crypto_xchacha20\0A\00"
@.str.22 = [26 x i8] c"%s: crypto_ietf_chacha20\0A\00"
@.str.23 = [21 x i8] c"%s: crypto_poly1305\0A\00"
@.str.24 = [31 x i8] c"%s: crypto_x25519_dirty_small\0A\00"
@.str.25 = [30 x i8] c"%s: crypto_x25519_dirty_fast\0A\00"
@.str.26 = [27 x i8] c"%s: crypto_x25519_inverse\0A\00"
@str = [29 x i8] c"skipped : crypto_check.\00"
define i32 @main() {
%1 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([21 x i8], [21 x i8]* @.str, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%2 = tail call i32 (...) @verify16()
%3 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([21 x i8], [21 x i8]* @.str.2, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%4 = tail call i32 (...) @verify32()
%5 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([21 x i8], [21 x i8]* @.str.3, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%6 = tail call i32 (...) @verify64()
%7 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([17 x i8], [17 x i8]* @.str.4, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%8 = tail call i32 (...) @wipe()
%9 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([22 x i8], [22 x i8]* @.str.5, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%10 = tail call i32 (...) @lock_aead()
%11 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([24 x i8], [24 x i8]* @.str.6, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.7, i64 0, i64 0))
%12 = tail call i32 (...) @unlock_aead()
%13 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([28 x i8], [28 x i8]* @.str.8, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%14 = tail call i32 (...) @blake2b_general()
%15 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([28 x i8], [28 x i8]* @.str.9, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%16 = tail call i32 (...) @argon2i_general()
%17 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([25 x i8], [25 x i8]* @.str.10, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%18 = tail call i32 (...) @key_exchange()
%19 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([28 x i8], [28 x i8]* @.str.11, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%20 = tail call i32 (...) @sign_public_key()
%21 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([17 x i8], [17 x i8]* @.str.12, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%22 = tail call i32 (...) @sign()
%23 = tail call i32 @puts(i8* dereferenceable(1) getelementptr inbounds ([29 x i8], [29 x i8]* @str, i64 0, i64 0))
%24 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([31 x i8], [31 x i8]* @.str.14, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%25 = tail call i32 (...) @from_eddsa_private()
%26 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([30 x i8], [30 x i8]* @.str.15, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%27 = tail call i32 (...) @from_eddsa_public()
%28 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([28 x i8], [28 x i8]* @.str.16, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%29 = tail call i32 (...) @hidden_to_curve()
%30 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([28 x i8], [28 x i8]* @.str.17, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.7, i64 0, i64 0))
%31 = tail call i32 (...) @curve_to_hidden()
%32 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([28 x i8], [28 x i8]* @.str.18, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.7, i64 0, i64 0))
%33 = tail call i32 (...) @hidden_key_pair()
%34 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([23 x i8], [23 x i8]* @.str.19, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%35 = tail call i32 (...) @h_chacha20()
%36 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([21 x i8], [21 x i8]* @.str.20, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%37 = tail call i32 (...) @chacha20()
%38 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([22 x i8], [22 x i8]* @.str.21, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%39 = tail call i32 (...) @xchacha20()
%40 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([26 x i8], [26 x i8]* @.str.22, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%41 = tail call i32 (...) @ietf_chacha20()
%42 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([21 x i8], [21 x i8]* @.str.23, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%43 = tail call i32 (...) @poly1305()
%44 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([31 x i8], [31 x i8]* @.str.24, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%45 = tail call i32 (...) @x25519_dirty_small()
%46 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([30 x i8], [30 x i8]* @.str.25, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%47 = tail call i32 (...) @x25519_dirty_fast()
%48 = tail call i32 (i8*, ...) @printf(i8* dereferenceable(1) getelementptr inbounds ([27 x i8], [27 x i8]* @.str.26, i64 0, i64 0), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @.str.1, i64 0, i64 0))
%49 = tail call i32 (...) @x25519_inverse()
ret i32 0
}