84 	u32 a, b, c, d, e, f, g, h, t1, t2;  in sha256_transform()  local
98 	e=state[4];  f=state[5];  g=state[6];  h=state[7];  in sha256_transform()
101 	t1 = h + e1(e) + Ch(e,f,g) + 0x428a2f98 + W[ 0];  in sha256_transform()
103 	t1 = g + e1(d) + Ch(d,e,f) + 0x71374491 + W[ 1];  in sha256_transform()
105 	t1 = f + e1(c) + Ch(c,d,e) + 0xb5c0fbcf + W[ 2];  in sha256_transform()
106 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
108 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
110 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
112 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
114 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
115 	t1 = a + e1(f) + Ch(f,g,h) + 0xab1c5ed5 + W[ 7];  in sha256_transform()
118 	t1 = h + e1(e) + Ch(e,f,g) + 0xd807aa98 + W[ 8];  in sha256_transform()
120 	t1 = g + e1(d) + Ch(d,e,f) + 0x12835b01 + W[ 9];  in sha256_transform()
122 	t1 = f + e1(c) + Ch(c,d,e) + 0x243185be + W[10];  in sha256_transform()
123 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
125 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
127 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
129 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
131 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
132 	t1 = a + e1(f) + Ch(f,g,h) + 0xc19bf174 + W[15];  in sha256_transform()
135 	t1 = h + e1(e) + Ch(e,f,g) + 0xe49b69c1 + W[16];  in sha256_transform()
137 	t1 = g + e1(d) + Ch(d,e,f) + 0xefbe4786 + W[17];  in sha256_transform()
139 	t1 = f + e1(c) + Ch(c,d,e) + 0x0fc19dc6 + W[18];  in sha256_transform()
140 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
142 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
144 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
146 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
148 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
149 	t1 = a + e1(f) + Ch(f,g,h) + 0x76f988da + W[23];  in sha256_transform()
152 	t1 = h + e1(e) + Ch(e,f,g) + 0x983e5152 + W[24];  in sha256_transform()
154 	t1 = g + e1(d) + Ch(d,e,f) + 0xa831c66d + W[25];  in sha256_transform()
156 	t1 = f + e1(c) + Ch(c,d,e) + 0xb00327c8 + W[26];  in sha256_transform()
157 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
159 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
161 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
163 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
165 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
166 	t1 = a + e1(f) + Ch(f,g,h) + 0x14292967 + W[31];  in sha256_transform()
169 	t1 = h + e1(e) + Ch(e,f,g) + 0x27b70a85 + W[32];  in sha256_transform()
171 	t1 = g + e1(d) + Ch(d,e,f) + 0x2e1b2138 + W[33];  in sha256_transform()
173 	t1 = f + e1(c) + Ch(c,d,e) + 0x4d2c6dfc + W[34];  in sha256_transform()
174 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
176 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
178 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
180 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
182 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
183 	t1 = a + e1(f) + Ch(f,g,h) + 0x92722c85 + W[39];  in sha256_transform()
186 	t1 = h + e1(e) + Ch(e,f,g) + 0xa2bfe8a1 + W[40];  in sha256_transform()
188 	t1 = g + e1(d) + Ch(d,e,f) + 0xa81a664b + W[41];  in sha256_transform()
190 	t1 = f + e1(c) + Ch(c,d,e) + 0xc24b8b70 + W[42];  in sha256_transform()
191 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
193 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
195 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
197 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
199 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
200 	t1 = a + e1(f) + Ch(f,g,h) + 0x106aa070 + W[47];  in sha256_transform()
203 	t1 = h + e1(e) + Ch(e,f,g) + 0x19a4c116 + W[48];  in sha256_transform()
205 	t1 = g + e1(d) + Ch(d,e,f) + 0x1e376c08 + W[49];  in sha256_transform()
207 	t1 = f + e1(c) + Ch(c,d,e) + 0x2748774c + W[50];  in sha256_transform()
208 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
210 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
212 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
214 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
216 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
217 	t1 = a + e1(f) + Ch(f,g,h) + 0x682e6ff3 + W[55];  in sha256_transform()
220 	t1 = h + e1(e) + Ch(e,f,g) + 0x748f82ee + W[56];  in sha256_transform()
222 	t1 = g + e1(d) + Ch(d,e,f) + 0x78a5636f + W[57];  in sha256_transform()
224 	t1 = f + e1(c) + Ch(c,d,e) + 0x84c87814 + W[58];  in sha256_transform()
225 	t2 = e0(g) + Maj(g,h,a);    b+=t1;    f=t1+t2;  in sha256_transform()
227 	t2 = e0(f) + Maj(f,g,h);    a+=t1;    e=t1+t2;  in sha256_transform()
229 	t2 = e0(e) + Maj(e,f,g);    h+=t1;    d=t1+t2;  in sha256_transform()
231 	t2 = e0(d) + Maj(d,e,f);    g+=t1;    c=t1+t2;  in sha256_transform()
233 	t2 = e0(c) + Maj(c,d,e);    f+=t1;    b=t1+t2;  in sha256_transform()
234 	t1 = a + e1(f) + Ch(f,g,h) + 0xc67178f2 + W[63];  in sha256_transform()
238 	state[4] += e; state[5] += f; state[6] += g; state[7] += h;  in sha256_transform()
241 	a = b = c = d = e = f = g = h = t1 = t2 = 0;  in sha256_transform()