50 	u32 a, b, c, d, e, f, g, h, t1, t2;  in sha256_transform()  local
64 	e = state[4];  f = state[5];  g = state[6];  h = state[7];  in sha256_transform()
67 	t1 = h + e1(e) + Ch(e, f, g) + 0x428a2f98 + W[0];  in sha256_transform()
69 	t1 = g + e1(d) + Ch(d, e, f) + 0x71374491 + W[1];  in sha256_transform()
71 	t1 = f + e1(c) + Ch(c, d, e) + 0xb5c0fbcf + W[2];  in sha256_transform()
73 	t1 = e + e1(b) + Ch(b, c, d) + 0xe9b5dba5 + W[3];  in sha256_transform()
74 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
76 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
78 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
80 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1 + t2;  in sha256_transform()
82 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1 + t2;  in sha256_transform()
84 	t1 = h + e1(e) + Ch(e, f, g) + 0xd807aa98 + W[8];  in sha256_transform()
86 	t1 = g + e1(d) + Ch(d, e, f) + 0x12835b01 + W[9];  in sha256_transform()
88 	t1 = f + e1(c) + Ch(c, d, e) + 0x243185be + W[10];  in sha256_transform()
90 	t1 = e + e1(b) + Ch(b, c, d) + 0x550c7dc3 + W[11];  in sha256_transform()
91 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1 + t2;  in sha256_transform()
93 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1 + t2;  in sha256_transform()
95 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1 + t2;  in sha256_transform()
97 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1 + t2;  in sha256_transform()
99 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1+t2;  in sha256_transform()
101 	t1 = h + e1(e) + Ch(e, f, g) + 0xe49b69c1 + W[16];  in sha256_transform()
103 	t1 = g + e1(d) + Ch(d, e, f) + 0xefbe4786 + W[17];  in sha256_transform()
105 	t1 = f + e1(c) + Ch(c, d, e) + 0x0fc19dc6 + W[18];  in sha256_transform()
107 	t1 = e + e1(b) + Ch(b, c, d) + 0x240ca1cc + W[19];  in sha256_transform()
108 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1+t2;  in sha256_transform()
110 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1+t2;  in sha256_transform()
112 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1+t2;  in sha256_transform()
114 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1+t2;  in sha256_transform()
116 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1+t2;  in sha256_transform()
118 	t1 = h + e1(e) + Ch(e, f, g) + 0x983e5152 + W[24];  in sha256_transform()
120 	t1 = g + e1(d) + Ch(d, e, f) + 0xa831c66d + W[25];  in sha256_transform()
122 	t1 = f + e1(c) + Ch(c, d, e) + 0xb00327c8 + W[26];  in sha256_transform()
124 	t1 = e + e1(b) + Ch(b, c, d) + 0xbf597fc7 + W[27];  in sha256_transform()
125 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1+t2;  in sha256_transform()
127 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1+t2;  in sha256_transform()
129 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1+t2;  in sha256_transform()
131 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1+t2;  in sha256_transform()
133 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1+t2;  in sha256_transform()
135 	t1 = h + e1(e) + Ch(e, f, g) + 0x27b70a85 + W[32];  in sha256_transform()
137 	t1 = g + e1(d) + Ch(d, e, f) + 0x2e1b2138 + W[33];  in sha256_transform()
139 	t1 = f + e1(c) + Ch(c, d, e) + 0x4d2c6dfc + W[34];  in sha256_transform()
141 	t1 = e + e1(b) + Ch(b, c, d) + 0x53380d13 + W[35];  in sha256_transform()
142 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1+t2;  in sha256_transform()
144 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1+t2;  in sha256_transform()
146 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1+t2;  in sha256_transform()
148 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1+t2;  in sha256_transform()
150 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1+t2;  in sha256_transform()
152 	t1 = h + e1(e) + Ch(e, f, g) + 0xa2bfe8a1 + W[40];  in sha256_transform()
154 	t1 = g + e1(d) + Ch(d, e, f) + 0xa81a664b + W[41];  in sha256_transform()
156 	t1 = f + e1(c) + Ch(c, d, e) + 0xc24b8b70 + W[42];  in sha256_transform()
158 	t1 = e + e1(b) + Ch(b, c, d) + 0xc76c51a3 + W[43];  in sha256_transform()
159 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1+t2;  in sha256_transform()
161 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1+t2;  in sha256_transform()
163 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1+t2;  in sha256_transform()
165 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1+t2;  in sha256_transform()
167 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1+t2;  in sha256_transform()
169 	t1 = h + e1(e) + Ch(e, f, g) + 0x19a4c116 + W[48];  in sha256_transform()
171 	t1 = g + e1(d) + Ch(d, e, f) + 0x1e376c08 + W[49];  in sha256_transform()
173 	t1 = f + e1(c) + Ch(c, d, e) + 0x2748774c + W[50];  in sha256_transform()
175 	t1 = e + e1(b) + Ch(b, c, d) + 0x34b0bcb5 + W[51];  in sha256_transform()
176 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1+t2;  in sha256_transform()
178 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1+t2;  in sha256_transform()
180 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1+t2;  in sha256_transform()
182 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1+t2;  in sha256_transform()
184 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1+t2;  in sha256_transform()
186 	t1 = h + e1(e) + Ch(e, f, g) + 0x748f82ee + W[56];  in sha256_transform()
188 	t1 = g + e1(d) + Ch(d, e, f) + 0x78a5636f + W[57];  in sha256_transform()
190 	t1 = f + e1(c) + Ch(c, d, e) + 0x84c87814 + W[58];  in sha256_transform()
192 	t1 = e + e1(b) + Ch(b, c, d) + 0x8cc70208 + W[59];  in sha256_transform()
193 	t2 = e0(f) + Maj(f, g, h);    a += t1;    e = t1+t2;  in sha256_transform()
195 	t2 = e0(e) + Maj(e, f, g);    h += t1;    d = t1+t2;  in sha256_transform()
197 	t2 = e0(d) + Maj(d, e, f);    g += t1;    c = t1+t2;  in sha256_transform()
199 	t2 = e0(c) + Maj(c, d, e);    f += t1;    b = t1+t2;  in sha256_transform()
201 	t2 = e0(b) + Maj(b, c, d);    e += t1;    a = t1+t2;  in sha256_transform()
204 	state[4] += e; state[5] += f; state[6] += g; state[7] += h;  in sha256_transform()
207 	a = b = c = d = e = f = g = h = t1 = t2 = 0;  in sha256_transform()