49 	u32 a, b, c, d, e, f, g, h, t1, t2;  in sha256_transform()  local
63 	e = state[4];  f = state[5];  g = state[6];  h = state[7];  in sha256_transform()
66 	t1 = h + e1(e) + Ch(e, f, g) + 0x428a2f98 + W[0];  in sha256_transform()
68 	t1 = g + e1(d) + Ch(d, e, f) + 0x71374491 + W[1];  in sha256_transform()
69 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1 + t2;  in sha256_transform()
71 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
73 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
75 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
77 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
78 	t1 = b + e1(g) + Ch(g, h, a) + 0x923f82a4 + W[6];  in sha256_transform()
80 	t1 = a + e1(f) + Ch(f, g, h) + 0xab1c5ed5 + W[7];  in sha256_transform()
83 	t1 = h + e1(e) + Ch(e, f, g) + 0xd807aa98 + W[8];  in sha256_transform()
85 	t1 = g + e1(d) + Ch(d, e, f) + 0x12835b01 + W[9];  in sha256_transform()
86 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1 + t2;  in sha256_transform()
88 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
90 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
92 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
94 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
95 	t1 = b + e1(g) + Ch(g, h, a) + 0x9bdc06a7 + W[14];  in sha256_transform()
97 	t1 = a + e1(f) + Ch(f, g, h) + 0xc19bf174 + W[15];  in sha256_transform()
100 	t1 = h + e1(e) + Ch(e, f, g) + 0xe49b69c1 + W[16];  in sha256_transform()
102 	t1 = g + e1(d) + Ch(d, e, f) + 0xefbe4786 + W[17];  in sha256_transform()
103 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1 + t2;  in sha256_transform()
105 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
107 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
109 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
111 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
112 	t1 = b + e1(g) + Ch(g, h, a) + 0x5cb0a9dc + W[22];  in sha256_transform()
114 	t1 = a + e1(f) + Ch(f, g, h) + 0x76f988da + W[23];  in sha256_transform()
117 	t1 = h + e1(e) + Ch(e, f, g) + 0x983e5152 + W[24];  in sha256_transform()
119 	t1 = g + e1(d) + Ch(d, e, f) + 0xa831c66d + W[25];  in sha256_transform()
120 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1 + t2;  in sha256_transform()
122 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
124 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
126 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
128 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
129 	t1 = b + e1(g) + Ch(g, h, a) + 0x06ca6351 + W[30];  in sha256_transform()
131 	t1 = a + e1(f) + Ch(f, g, h) + 0x14292967 + W[31];  in sha256_transform()
134 	t1 = h + e1(e) + Ch(e, f, g) + 0x27b70a85 + W[32];  in sha256_transform()
136 	t1 = g + e1(d) + Ch(d, e, f) + 0x2e1b2138 + W[33];  in sha256_transform()
137 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1 + t2;  in sha256_transform()
139 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
141 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
143 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
145 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
146 	t1 = b + e1(g) + Ch(g, h, a) + 0x81c2c92e + W[38];  in sha256_transform()
148 	t1 = a + e1(f) + Ch(f, g, h) + 0x92722c85 + W[39];  in sha256_transform()
151 	t1 = h + e1(e) + Ch(e, f, g) + 0xa2bfe8a1 + W[40];  in sha256_transform()
153 	t1 = g + e1(d) + Ch(d, e, f) + 0xa81a664b + W[41];  in sha256_transform()
154 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1 + t2;  in sha256_transform()
156 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
158 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
160 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
162 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
163 	t1 = b + e1(g) + Ch(g, h, a) + 0xf40e3585 + W[46];  in sha256_transform()
165 	t1 = a + e1(f) + Ch(f, g, h) + 0x106aa070 + W[47];  in sha256_transform()
168 	t1 = h + e1(e) + Ch(e, f, g) + 0x19a4c116 + W[48];  in sha256_transform()
170 	t1 = g + e1(d) + Ch(d, e, f) + 0x1e376c08 + W[49];  in sha256_transform()
171 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1 + t2;  in sha256_transform()
173 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
175 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
177 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
179 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
180 	t1 = b + e1(g) + Ch(g, h, a) + 0x5b9cca4f + W[54];  in sha256_transform()
182 	t1 = a + e1(f) + Ch(f, g, h) + 0x682e6ff3 + W[55];  in sha256_transform()
185 	t1 = h + e1(e) + Ch(e, f, g) + 0x748f82ee + W[56];  in sha256_transform()
187 	t1 = g + e1(d) + Ch(d, e, f) + 0x78a5636f + W[57];  in sha256_transform()
188 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1 + t2;  in sha256_transform()
190 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
192 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
194 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
196 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
197 	t1 = b + e1(g) + Ch(g, h, a) + 0xbef9a3f7 + W[62];  in sha256_transform()
199 	t1 = a + e1(f) + Ch(f, g, h) + 0xc67178f2 + W[63];  in sha256_transform()
203 	state[4] += e; state[5] += f; state[6] += g; state[7] += h;  in sha256_transform()
206 	a = b = c = d = e = f = g = h = t1 = t2 = 0;  in sha256_transform()