50 	u32 a, b, c, d, e, f, g, h, t1, t2;  in sha256_transform()  local
63 	a = state[0];  b = state[1];  c = state[2];  d = state[3];  in sha256_transform()
68 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1 + t2;  in sha256_transform()
70 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1 + t2;  in sha256_transform()
72 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
73 	t1 = e + e1(b) + Ch(b, c, d) + 0xe9b5dba5 + W[3];  in sha256_transform()
75 	t1 = d + e1(a) + Ch(a, b, c) + 0x3956c25b + W[4];  in sha256_transform()
77 	t1 = c + e1(h) + Ch(h, a, b) + 0x59f111f1 + W[5];  in sha256_transform()
79 	t1 = b + e1(g) + Ch(g, h, a) + 0x923f82a4 + W[6];  in sha256_transform()
80 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1 + t2;  in sha256_transform()
82 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1 + t2;  in sha256_transform()
85 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1 + t2;  in sha256_transform()
87 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1 + t2;  in sha256_transform()
89 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1 + t2;  in sha256_transform()
90 	t1 = e + e1(b) + Ch(b, c, d) + 0x550c7dc3 + W[11];  in sha256_transform()
92 	t1 = d + e1(a) + Ch(a, b, c) + 0x72be5d74 + W[12];  in sha256_transform()
94 	t1 = c + e1(h) + Ch(h, a, b) + 0x80deb1fe + W[13];  in sha256_transform()
96 	t1 = b + e1(g) + Ch(g, h, a) + 0x9bdc06a7 + W[14];  in sha256_transform()
97 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1 + t2;  in sha256_transform()
99 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1+t2;  in sha256_transform()
102 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1+t2;  in sha256_transform()
104 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1+t2;  in sha256_transform()
106 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1+t2;  in sha256_transform()
107 	t1 = e + e1(b) + Ch(b, c, d) + 0x240ca1cc + W[19];  in sha256_transform()
109 	t1 = d + e1(a) + Ch(a, b, c) + 0x2de92c6f + W[20];  in sha256_transform()
111 	t1 = c + e1(h) + Ch(h, a, b) + 0x4a7484aa + W[21];  in sha256_transform()
113 	t1 = b + e1(g) + Ch(g, h, a) + 0x5cb0a9dc + W[22];  in sha256_transform()
114 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1+t2;  in sha256_transform()
116 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1+t2;  in sha256_transform()
119 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1+t2;  in sha256_transform()
121 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1+t2;  in sha256_transform()
123 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1+t2;  in sha256_transform()
124 	t1 = e + e1(b) + Ch(b, c, d) + 0xbf597fc7 + W[27];  in sha256_transform()
126 	t1 = d + e1(a) + Ch(a, b, c) + 0xc6e00bf3 + W[28];  in sha256_transform()
128 	t1 = c + e1(h) + Ch(h, a, b) + 0xd5a79147 + W[29];  in sha256_transform()
130 	t1 = b + e1(g) + Ch(g, h, a) + 0x06ca6351 + W[30];  in sha256_transform()
131 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1+t2;  in sha256_transform()
133 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1+t2;  in sha256_transform()
136 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1+t2;  in sha256_transform()
138 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1+t2;  in sha256_transform()
140 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1+t2;  in sha256_transform()
141 	t1 = e + e1(b) + Ch(b, c, d) + 0x53380d13 + W[35];  in sha256_transform()
143 	t1 = d + e1(a) + Ch(a, b, c) + 0x650a7354 + W[36];  in sha256_transform()
145 	t1 = c + e1(h) + Ch(h, a, b) + 0x766a0abb + W[37];  in sha256_transform()
147 	t1 = b + e1(g) + Ch(g, h, a) + 0x81c2c92e + W[38];  in sha256_transform()
148 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1+t2;  in sha256_transform()
150 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1+t2;  in sha256_transform()
153 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1+t2;  in sha256_transform()
155 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1+t2;  in sha256_transform()
157 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1+t2;  in sha256_transform()
158 	t1 = e + e1(b) + Ch(b, c, d) + 0xc76c51a3 + W[43];  in sha256_transform()
160 	t1 = d + e1(a) + Ch(a, b, c) + 0xd192e819 + W[44];  in sha256_transform()
162 	t1 = c + e1(h) + Ch(h, a, b) + 0xd6990624 + W[45];  in sha256_transform()
164 	t1 = b + e1(g) + Ch(g, h, a) + 0xf40e3585 + W[46];  in sha256_transform()
165 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1+t2;  in sha256_transform()
167 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1+t2;  in sha256_transform()
170 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1+t2;  in sha256_transform()
172 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1+t2;  in sha256_transform()
174 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1+t2;  in sha256_transform()
175 	t1 = e + e1(b) + Ch(b, c, d) + 0x34b0bcb5 + W[51];  in sha256_transform()
177 	t1 = d + e1(a) + Ch(a, b, c) + 0x391c0cb3 + W[52];  in sha256_transform()
179 	t1 = c + e1(h) + Ch(h, a, b) + 0x4ed8aa4a + W[53];  in sha256_transform()
181 	t1 = b + e1(g) + Ch(g, h, a) + 0x5b9cca4f + W[54];  in sha256_transform()
182 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1+t2;  in sha256_transform()
184 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1+t2;  in sha256_transform()
187 	t2 = e0(a) + Maj(a, b, c);    d += t1;    h = t1+t2;  in sha256_transform()
189 	t2 = e0(h) + Maj(h, a, b);    c += t1;    g = t1+t2;  in sha256_transform()
191 	t2 = e0(g) + Maj(g, h, a);    b += t1;    f = t1+t2;  in sha256_transform()
192 	t1 = e + e1(b) + Ch(b, c, d) + 0x8cc70208 + W[59];  in sha256_transform()
194 	t1 = d + e1(a) + Ch(a, b, c) + 0x90befffa + W[60];  in sha256_transform()
196 	t1 = c + e1(h) + Ch(h, a, b) + 0xa4506ceb + W[61];  in sha256_transform()
198 	t1 = b + e1(g) + Ch(g, h, a) + 0xbef9a3f7 + W[62];  in sha256_transform()
199 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1+t2;  in sha256_transform()
201 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1+t2;  in sha256_transform()
203 	state[0] += a; state[1] += b; state[2] += c; state[3] += d;  in sha256_transform()
207 	a = b = c = d = e = f = g = h = t1 = t2 = 0;  in sha256_transform()