57 	u32 a, b, c, d, e, f, g, h, t1, t2;  in sha256_transform()  local
71 	e=state[4];  f=state[5];  g=state[6];  h=state[7];  in sha256_transform()
74 	t1 = h + e1(e) + Ch(e,f,g) + 0x428a2f98 + W[ 0];  in sha256_transform()
76 	t1 = g + e1(d) + Ch(d,e,f) + 0x71374491 + W[ 1];  in sha256_transform()
78 	t1 = f + e1(c) + Ch(c,d,e) + 0xb5c0fbcf + W[ 2];  in sha256_transform()
79 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
81 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
83 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
85 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
87 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
88 	t1 = a + e1(f) + Ch(f,g,h) + 0xab1c5ed5 + W[ 7];  in sha256_transform()
91 	t1 = h + e1(e) + Ch(e,f,g) + 0xd807aa98 + W[ 8];  in sha256_transform()
93 	t1 = g + e1(d) + Ch(d,e,f) + 0x12835b01 + W[ 9];  in sha256_transform()
95 	t1 = f + e1(c) + Ch(c,d,e) + 0x243185be + W[10];  in sha256_transform()
96 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
98 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
100 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
102 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
104 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
105 	t1 = a + e1(f) + Ch(f,g,h) + 0xc19bf174 + W[15];  in sha256_transform()
108 	t1 = h + e1(e) + Ch(e,f,g) + 0xe49b69c1 + W[16];  in sha256_transform()
110 	t1 = g + e1(d) + Ch(d,e,f) + 0xefbe4786 + W[17];  in sha256_transform()
112 	t1 = f + e1(c) + Ch(c,d,e) + 0x0fc19dc6 + W[18];  in sha256_transform()
113 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
115 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
117 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
119 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
121 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
122 	t1 = a + e1(f) + Ch(f,g,h) + 0x76f988da + W[23];  in sha256_transform()
125 	t1 = h + e1(e) + Ch(e,f,g) + 0x983e5152 + W[24];  in sha256_transform()
127 	t1 = g + e1(d) + Ch(d,e,f) + 0xa831c66d + W[25];  in sha256_transform()
129 	t1 = f + e1(c) + Ch(c,d,e) + 0xb00327c8 + W[26];  in sha256_transform()
130 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
132 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
134 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
136 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
138 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
139 	t1 = a + e1(f) + Ch(f,g,h) + 0x14292967 + W[31];  in sha256_transform()
142 	t1 = h + e1(e) + Ch(e,f,g) + 0x27b70a85 + W[32];  in sha256_transform()
144 	t1 = g + e1(d) + Ch(d,e,f) + 0x2e1b2138 + W[33];  in sha256_transform()
146 	t1 = f + e1(c) + Ch(c,d,e) + 0x4d2c6dfc + W[34];  in sha256_transform()
147 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
149 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
151 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
153 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
155 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
156 	t1 = a + e1(f) + Ch(f,g,h) + 0x92722c85 + W[39];  in sha256_transform()
159 	t1 = h + e1(e) + Ch(e,f,g) + 0xa2bfe8a1 + W[40];  in sha256_transform()
161 	t1 = g + e1(d) + Ch(d,e,f) + 0xa81a664b + W[41];  in sha256_transform()
163 	t1 = f + e1(c) + Ch(c,d,e) + 0xc24b8b70 + W[42];  in sha256_transform()
164 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
166 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
168 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
170 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
172 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
173 	t1 = a + e1(f) + Ch(f,g,h) + 0x106aa070 + W[47];  in sha256_transform()
176 	t1 = h + e1(e) + Ch(e,f,g) + 0x19a4c116 + W[48];  in sha256_transform()
178 	t1 = g + e1(d) + Ch(d,e,f) + 0x1e376c08 + W[49];  in sha256_transform()
180 	t1 = f + e1(c) + Ch(c,d,e) + 0x2748774c + W[50];  in sha256_transform()
181 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
183 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
185 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
187 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
189 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
190 	t1 = a + e1(f) + Ch(f,g,h) + 0x682e6ff3 + W[55];  in sha256_transform()
193 	t1 = h + e1(e) + Ch(e,f,g) + 0x748f82ee + W[56];  in sha256_transform()
195 	t1 = g + e1(d) + Ch(d,e,f) + 0x78a5636f + W[57];  in sha256_transform()
197 	t1 = f + e1(c) + Ch(c,d,e) + 0x84c87814 + W[58];  in sha256_transform()
198 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
200 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
202 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
204 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
206 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
207 	t1 = a + e1(f) + Ch(f,g,h) + 0xc67178f2 + W[63];  in sha256_transform()
211 	state[4] += e; state[5] += f; state[6] += g; state[7] += h;  in sha256_transform()
214 	a = b = c = d = e = f = g = h = t1 = t2 = 0;  in sha256_transform()