49 	u32 a, b, c, d, e, f, g, h, t1, t2;  in sha256_transform()  local
63 	e = state[4];  f = state[5];  g = state[6];  h = state[7];  in sha256_transform()
66 	t1 = h + e1(e) + Ch(e, f, g) + 0x428a2f98 + W[0];  in sha256_transform()
68 	t1 = g + e1(d) + Ch(d, e, f) + 0x71374491 + W[1];  in sha256_transform()
70 	t1 = f + e1(c) + Ch(c, d, e) + 0xb5c0fbcf + W[2];  in sha256_transform()
71 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
73 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
75 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
77 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
79 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1 + t2;  in sha256_transform()
80 	t1 = a + e1(f) + Ch(f, g, h) + 0xab1c5ed5 + W[7];  in sha256_transform()
83 	t1 = h + e1(e) + Ch(e, f, g) + 0xd807aa98 + W[8];  in sha256_transform()
85 	t1 = g + e1(d) + Ch(d, e, f) + 0x12835b01 + W[9];  in sha256_transform()
87 	t1 = f + e1(c) + Ch(c, d, e) + 0x243185be + W[10];  in sha256_transform()
88 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
90 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
92 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
94 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
96 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1 + t2;  in sha256_transform()
97 	t1 = a + e1(f) + Ch(f, g, h) + 0xc19bf174 + W[15];  in sha256_transform()
100 	t1 = h + e1(e) + Ch(e, f, g) + 0xe49b69c1 + W[16];  in sha256_transform()
102 	t1 = g + e1(d) + Ch(d, e, f) + 0xefbe4786 + W[17];  in sha256_transform()
104 	t1 = f + e1(c) + Ch(c, d, e) + 0x0fc19dc6 + W[18];  in sha256_transform()
105 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
107 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
109 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
111 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
113 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1 + t2;  in sha256_transform()
114 	t1 = a + e1(f) + Ch(f, g, h) + 0x76f988da + W[23];  in sha256_transform()
117 	t1 = h + e1(e) + Ch(e, f, g) + 0x983e5152 + W[24];  in sha256_transform()
119 	t1 = g + e1(d) + Ch(d, e, f) + 0xa831c66d + W[25];  in sha256_transform()
121 	t1 = f + e1(c) + Ch(c, d, e) + 0xb00327c8 + W[26];  in sha256_transform()
122 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
124 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
126 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
128 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
130 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1 + t2;  in sha256_transform()
131 	t1 = a + e1(f) + Ch(f, g, h) + 0x14292967 + W[31];  in sha256_transform()
134 	t1 = h + e1(e) + Ch(e, f, g) + 0x27b70a85 + W[32];  in sha256_transform()
136 	t1 = g + e1(d) + Ch(d, e, f) + 0x2e1b2138 + W[33];  in sha256_transform()
138 	t1 = f + e1(c) + Ch(c, d, e) + 0x4d2c6dfc + W[34];  in sha256_transform()
139 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
141 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
143 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
145 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
147 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1 + t2;  in sha256_transform()
148 	t1 = a + e1(f) + Ch(f, g, h) + 0x92722c85 + W[39];  in sha256_transform()
151 	t1 = h + e1(e) + Ch(e, f, g) + 0xa2bfe8a1 + W[40];  in sha256_transform()
153 	t1 = g + e1(d) + Ch(d, e, f) + 0xa81a664b + W[41];  in sha256_transform()
155 	t1 = f + e1(c) + Ch(c, d, e) + 0xc24b8b70 + W[42];  in sha256_transform()
156 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
158 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
160 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
162 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
164 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1 + t2;  in sha256_transform()
165 	t1 = a + e1(f) + Ch(f, g, h) + 0x106aa070 + W[47];  in sha256_transform()
168 	t1 = h + e1(e) + Ch(e, f, g) + 0x19a4c116 + W[48];  in sha256_transform()
170 	t1 = g + e1(d) + Ch(d, e, f) + 0x1e376c08 + W[49];  in sha256_transform()
172 	t1 = f + e1(c) + Ch(c, d, e) + 0x2748774c + W[50];  in sha256_transform()
173 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
175 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
177 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
179 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
181 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1 + t2;  in sha256_transform()
182 	t1 = a + e1(f) + Ch(f, g, h) + 0x682e6ff3 + W[55];  in sha256_transform()
185 	t1 = h + e1(e) + Ch(e, f, g) + 0x748f82ee + W[56];  in sha256_transform()
187 	t1 = g + e1(d) + Ch(d, e, f) + 0x78a5636f + W[57];  in sha256_transform()
189 	t1 = f + e1(c) + Ch(c, d, e) + 0x84c87814 + W[58];  in sha256_transform()
190 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
192 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
194 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
196 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
198 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1 + t2;  in sha256_transform()
199 	t1 = a + e1(f) + Ch(f, g, h) + 0xc67178f2 + W[63];  in sha256_transform()
203 	state[4] += e; state[5] += f; state[6] += g; state[7] += h;  in sha256_transform()
206 	a = b = c = d = e = f = g = h = t1 = t2 = 0;  in sha256_transform()