_ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EED2Ev:
   64|  1.22k|      ~AlignmentBuffer() { secure_zeroize_buffer(m_buffer.data(), sizeof(T) * m_buffer.size()); }
_ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EEC2Ev:
   62|  1.22k|      AlignmentBuffer() = default;
_ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE5clearEv:
   71|  6.14k|      void clear() {
   72|  6.14k|         zeroize_buffer(m_buffer.data(), m_buffer.size());
   73|  6.14k|         m_position = 0;
   74|  6.14k|      }
_ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE21handle_unaligned_dataERNS_12BufferSlicerE:
  166|  8.93k|      [[nodiscard]] std::optional<std::span<const T>> handle_unaligned_data(BufferSlicer& slicer) {
  167|       |         // When the final block is to be deferred, we would need to store and
  168|       |         // hold a buffer that contains exactly one block until more data is
  169|       |         // passed or it is explicitly consumed.
  170|  8.93k|         const size_t defer = (defers_final_block()) ? 1 : 0;
  ------------------
  |  Branch (170:31): [True: 0, False: 8.93k]
  ------------------
  171|       |
  172|  8.93k|         if(in_alignment() && slicer.remaining() >= m_buffer.size() + defer) {
  ------------------
  |  Branch (172:13): [True: 8.93k, False: 0]
  |  Branch (172:31): [True: 4.02k, False: 4.91k]
  ------------------
  173|       |            // We are currently in alignment and the passed-in data source
  174|       |            // contains enough data to benefit from aligned processing.
  175|       |            // Therefore, we don't copy anything into the intermittent buffer.
  176|  4.02k|            return std::nullopt;
  177|  4.02k|         }
  178|       |
  179|       |         // Fill the buffer with as much input data as needed to reach alignment
  180|       |         // or until the input source is depleted.
  181|  4.91k|         const auto elements_to_consume = std::min(m_buffer.size() - m_position, slicer.remaining());
  182|  4.91k|         append(slicer.take(elements_to_consume));
  183|       |
  184|       |         // If we collected enough data, we push out one full block. When
  185|       |         // deferring the final block is enabled, we additionally check that
  186|       |         // more input data is available to continue processing a consecutive
  187|       |         // block.
  188|  4.91k|         if(ready_to_consume() && (!defers_final_block() || !slicer.empty())) {
  ------------------
  |  Branch (188:13): [True: 0, False: 4.91k]
  |  Branch (188:36): [True: 0, False: 0]
  |  Branch (188:61): [True: 0, False: 0]
  ------------------
  189|      0|            return consume();
  190|  4.91k|         } else {
  191|  4.91k|            return std::nullopt;
  192|  4.91k|         }
  193|  4.91k|      }
_ZNK5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE18defers_final_blockEv:
  233|  12.9k|      constexpr bool defers_final_block() const {
  234|  12.9k|         return FINAL_BLOCK_STRATEGY == AlignmentBufferFinalBlock::must_be_deferred;
  235|  12.9k|      }
_ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE6appendENSt3__14spanIKhLm18446744073709551615EEE:
   90|  9.82k|      void append(std::span<const T> elements) {
   91|  9.82k|         BOTAN_ASSERT_NOMSG(elements.size() <= elements_until_alignment());
  ------------------
  |  |   77|  9.82k|   do {                                                                     \
  |  |   78|  9.82k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  9.82k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 9.82k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  9.82k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 9.82k]
  |  |  ------------------
  ------------------
   92|  9.82k|         std::copy(elements.begin(), elements.end(), m_buffer.begin() + m_position);
   93|  9.82k|         m_position += elements.size();
   94|  9.82k|      }
_ZNK5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE24elements_until_alignmentEv:
  221|  25.2k|      size_t elements_until_alignment() const { return m_buffer.size() - m_position; }
_ZNK5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE16ready_to_consumeEv:
  231|  20.9k|      bool ready_to_consume() const { return m_position == m_buffer.size(); }
_ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE7consumeEv:
  200|  5.57k|      [[nodiscard]] std::span<const T> consume() {
  201|  5.57k|         BOTAN_ASSERT_NOMSG(ready_to_consume());
  ------------------
  |  |   77|  5.57k|   do {                                                                     \
  |  |   78|  5.57k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  5.57k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 5.57k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  5.57k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 5.57k]
  |  |  ------------------
  ------------------
  202|  5.57k|         m_position = 0;
  203|  5.57k|         return m_buffer;
  204|  5.57k|      }
_ZNK5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE12in_alignmentEv:
  226|  21.8k|      bool in_alignment() const { return m_position == 0; }
_ZNK5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE23aligned_data_to_processERNS_12BufferSlicerE:
  126|  4.02k|      [[nodiscard]] std::tuple<std::span<const uint8_t>, size_t> aligned_data_to_process(BufferSlicer& slicer) const {
  127|  4.02k|         BOTAN_ASSERT_NOMSG(in_alignment());
  ------------------
  |  |   77|  4.02k|   do {                                                                     \
  |  |   78|  4.02k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  4.02k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 4.02k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  4.02k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 4.02k]
  |  |  ------------------
  ------------------
  128|       |
  129|       |         // When the final block is to be deferred, the last block must not be
  130|       |         // selected for processing if there is no (unaligned) extra input data.
  131|  4.02k|         const size_t defer = (defers_final_block()) ? 1 : 0;
  ------------------
  |  Branch (131:31): [True: 0, False: 4.02k]
  ------------------
  132|  4.02k|         const size_t full_blocks_to_process = (slicer.remaining() - defer) / m_buffer.size();
  133|  4.02k|         return {slicer.take(full_blocks_to_process * m_buffer.size()), full_blocks_to_process};
  134|  4.02k|      }
_ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE18fill_up_with_zerosEv:
   79|  5.57k|      void fill_up_with_zeros() {
   80|  5.57k|         if(!ready_to_consume()) {
  ------------------
  |  Branch (80:13): [True: 5.57k, False: 0]
  ------------------
   81|  5.57k|            zeroize_buffer(&m_buffer[m_position], elements_until_alignment());
   82|  5.57k|            m_position = m_buffer.size();
   83|  5.57k|         }
   84|  5.57k|      }
_ZN5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE20directly_modify_lastEm:
  113|  4.91k|      std::span<T> directly_modify_last(size_t elements) {
  114|  4.91k|         BOTAN_ASSERT_NOMSG(size() >= elements);
  ------------------
  |  |   77|  4.91k|   do {                                                                     \
  |  |   78|  4.91k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  4.91k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 4.91k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  4.91k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 4.91k]
  |  |  ------------------
  ------------------
  115|  4.91k|         return std::span(m_buffer).last(elements);
  116|  4.91k|      }
_ZNK5Botan15AlignmentBufferIhLm64ELNS_25AlignmentBufferFinalBlockE0EE4sizeEv:
  217|  4.91k|      constexpr size_t size() const { return m_buffer.size(); }

_ZN5Botan8high_bitITkNSt3__117unsigned_integralEjEEmT_:
   73|  1.05k|BOTAN_FORCE_INLINE constexpr size_t high_bit(T n) {
   74|  1.05k|   size_t hb = 0;
   75|       |
   76|  6.30k|   for(size_t s = 8 * sizeof(T) / 2; s > 0; s /= 2) {
  ------------------
  |  Branch (76:38): [True: 5.25k, False: 1.05k]
  ------------------
   77|       |      // Equivalent to: ((n >> s) == 0) ? 0 : s;
   78|  5.25k|      const size_t z = s - ct_if_is_zero_ret<T>(n >> s, s);
   79|  5.25k|      hb += z;
   80|  5.25k|      n >>= z;
   81|  5.25k|   }
   82|       |
   83|  1.05k|   hb += n;
   84|       |
   85|  1.05k|   return hb;
   86|  1.05k|}
_ZN5Botan17ct_if_is_zero_retITkNSt3__117unsigned_integralEjEEmT_m:
   45|  5.25k|BOTAN_FORCE_INLINE constexpr size_t ct_if_is_zero_ret(T x, size_t s) {
   46|       |   /*
   47|       |   Similar to `return ct_is_zero(x) & s` but has to account for possibility that
   48|       |   sizeof(T) is smaller than sizeof(size_t) which would lead to incomplete masking
   49|       |   */
   50|  5.25k|   const T a = ~x & (x - 1);
   51|  5.25k|   const size_t a_top = static_cast<size_t>(CT::value_barrier<T>(a >> (sizeof(T) * 8 - 1)));
   52|  5.25k|   const size_t mask = static_cast<size_t>(0) - a_top;
   53|  5.25k|   return mask & s;
   54|  5.25k|}
_ZN5Botan17significant_bytesITkNSt3__117unsigned_integralEmEEmT_:
   94|  3.78k|BOTAN_FORCE_INLINE constexpr size_t significant_bytes(T n) {
   95|  3.78k|   size_t b = 0;
   96|       |
   97|  15.1k|   for(size_t s = 8 * sizeof(T) / 2; s >= 8; s /= 2) {
  ------------------
  |  Branch (97:38): [True: 11.3k, False: 3.78k]
  ------------------
   98|       |      // Equivalent to: ((n >> s) == 0) ? 0 : s;
   99|  11.3k|      const size_t z = s - ct_if_is_zero_ret<T>(n >> s, s);
  100|  11.3k|      b += z / 8;
  101|  11.3k|      n >>= z;
  102|  11.3k|   }
  103|       |
  104|  3.78k|   b += (n != 0);
  105|       |
  106|  3.78k|   return b;
  107|  3.78k|}
_ZN5Botan17ct_if_is_zero_retITkNSt3__117unsigned_integralEmEEmT_m:
   45|   109k|BOTAN_FORCE_INLINE constexpr size_t ct_if_is_zero_ret(T x, size_t s) {
   46|       |   /*
   47|       |   Similar to `return ct_is_zero(x) & s` but has to account for possibility that
   48|       |   sizeof(T) is smaller than sizeof(size_t) which would lead to incomplete masking
   49|       |   */
   50|   109k|   const T a = ~x & (x - 1);
   51|   109k|   const size_t a_top = static_cast<size_t>(CT::value_barrier<T>(a >> (sizeof(T) * 8 - 1)));
   52|   109k|   const size_t mask = static_cast<size_t>(0) - a_top;
   53|   109k|   return mask & s;
   54|   109k|}
_ZN5Botan6chooseITkNSt3__117unsigned_integralEjEET_S2_S2_S2_:
  216|  3.55M|BOTAN_FORCE_INLINE constexpr T choose(T mask, T a, T b) {
  217|       |   //return (mask & a) | (~mask & b);
  218|  3.55M|   return (b ^ (mask & (a ^ b)));
  219|  3.55M|}
_ZN5Botan8majorityITkNSt3__117unsigned_integralEjEET_S2_S2_S2_:
  222|  1.77M|BOTAN_FORCE_INLINE constexpr T majority(T a, T b, T c) {
  223|       |   /*
  224|       |   Considering each bit of a, b, c individually
  225|       |
  226|       |   If a xor b is set, then c is the deciding vote.
  227|       |
  228|       |   If a xor b is not set then either a and b are both set or both unset.
  229|       |   In either case the value of c doesn't matter, and examining b (or a)
  230|       |   allows us to determine which case we are in.
  231|       |   */
  232|  1.77M|   return choose(a ^ b, c, b);
  233|  1.77M|}
_ZN5Botan17ct_expand_top_bitITkNSt3__117unsigned_integralEmEET_S2_:
   28|   109k|BOTAN_FORCE_INLINE constexpr T ct_expand_top_bit(T a) {
   29|   109k|   const T top = CT::value_barrier<T>(a >> (sizeof(T) * 8 - 1));
   30|   109k|   return static_cast<T>(0) - top;
   31|   109k|}
_ZN5Botan10ct_is_zeroITkNSt3__117unsigned_integralEmEET_S2_:
   37|   109k|BOTAN_FORCE_INLINE constexpr T ct_is_zero(T x) {
   38|   109k|   return ct_expand_top_bit<T>(~x & (x - 1));
   39|   109k|}
_ZN5Botan8high_bitITkNSt3__117unsigned_integralEmEEmT_:
   73|  16.3k|BOTAN_FORCE_INLINE constexpr size_t high_bit(T n) {
   74|  16.3k|   size_t hb = 0;
   75|       |
   76|   114k|   for(size_t s = 8 * sizeof(T) / 2; s > 0; s /= 2) {
  ------------------
  |  Branch (76:38): [True: 98.3k, False: 16.3k]
  ------------------
   77|       |      // Equivalent to: ((n >> s) == 0) ? 0 : s;
   78|  98.3k|      const size_t z = s - ct_if_is_zero_ret<T>(n >> s, s);
   79|  98.3k|      hb += z;
   80|  98.3k|      n >>= z;
   81|  98.3k|   }
   82|       |
   83|  16.3k|   hb += n;
   84|       |
   85|  16.3k|   return hb;
   86|  16.3k|}

_ZN5Botan13reverse_bytesITkNSt3__117unsigned_integralEtQooooooeqstT_Li1EeqstS2_Li2EeqstS2_Li4EeqstS2_Li8EEES2_S2_:
   27|  4.14k|inline constexpr T reverse_bytes(T x) {
   28|       |   if constexpr(sizeof(T) == 1) {
   29|       |      return x;
   30|  4.14k|   } else if constexpr(sizeof(T) == 2) {
   31|  4.14k|#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap16)
   32|  4.14k|      return static_cast<T>(__builtin_bswap16(x));
   33|       |#else
   34|       |      return static_cast<T>((x << 8) | (x >> 8));
   35|       |#endif
   36|       |   } else if constexpr(sizeof(T) == 4) {
   37|       |#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap32)
   38|       |      return static_cast<T>(__builtin_bswap32(x));
   39|       |#else
   40|       |      // MSVC at least recognizes this as a bswap
   41|       |      return static_cast<T>(((x & 0x000000FF) << 24) | ((x & 0x0000FF00) << 8) | ((x & 0x00FF0000) >> 8) |
   42|       |                            ((x & 0xFF000000) >> 24));
   43|       |#endif
   44|       |   } else if constexpr(sizeof(T) == 8) {
   45|       |#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap64)
   46|       |      return static_cast<T>(__builtin_bswap64(x));
   47|       |#else
   48|       |      uint32_t hi = static_cast<uint32_t>(x >> 32);
   49|       |      uint32_t lo = static_cast<uint32_t>(x);
   50|       |
   51|       |      hi = reverse_bytes(hi);
   52|       |      lo = reverse_bytes(lo);
   53|       |
   54|       |      return (static_cast<T>(lo) << 32) | hi;
   55|       |#endif
   56|       |   }
   57|  4.14k|}
_ZN5Botan13reverse_bytesITkNSt3__117unsigned_integralEjQooooooeqstT_Li1EeqstS2_Li2EeqstS2_Li4EeqstS2_Li8EEES2_S2_:
   27|  32.2k|inline constexpr T reverse_bytes(T x) {
   28|       |   if constexpr(sizeof(T) == 1) {
   29|       |      return x;
   30|       |   } else if constexpr(sizeof(T) == 2) {
   31|       |#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap16)
   32|       |      return static_cast<T>(__builtin_bswap16(x));
   33|       |#else
   34|       |      return static_cast<T>((x << 8) | (x >> 8));
   35|       |#endif
   36|  32.2k|   } else if constexpr(sizeof(T) == 4) {
   37|  32.2k|#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap32)
   38|  32.2k|      return static_cast<T>(__builtin_bswap32(x));
   39|       |#else
   40|       |      // MSVC at least recognizes this as a bswap
   41|       |      return static_cast<T>(((x & 0x000000FF) << 24) | ((x & 0x0000FF00) << 8) | ((x & 0x00FF0000) >> 8) |
   42|       |                            ((x & 0xFF000000) >> 24));
   43|       |#endif
   44|       |   } else if constexpr(sizeof(T) == 8) {
   45|       |#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap64)
   46|       |      return static_cast<T>(__builtin_bswap64(x));
   47|       |#else
   48|       |      uint32_t hi = static_cast<uint32_t>(x >> 32);
   49|       |      uint32_t lo = static_cast<uint32_t>(x);
   50|       |
   51|       |      hi = reverse_bytes(hi);
   52|       |      lo = reverse_bytes(lo);
   53|       |
   54|       |      return (static_cast<T>(lo) << 32) | hi;
   55|       |#endif
   56|       |   }
   57|  32.2k|}
_ZN5Botan13reverse_bytesITkNSt3__117unsigned_integralEmQooooooeqstT_Li1EeqstS2_Li2EeqstS2_Li4EeqstS2_Li8EEES2_S2_:
   27|  29.9k|inline constexpr T reverse_bytes(T x) {
   28|       |   if constexpr(sizeof(T) == 1) {
   29|       |      return x;
   30|       |   } else if constexpr(sizeof(T) == 2) {
   31|       |#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap16)
   32|       |      return static_cast<T>(__builtin_bswap16(x));
   33|       |#else
   34|       |      return static_cast<T>((x << 8) | (x >> 8));
   35|       |#endif
   36|       |   } else if constexpr(sizeof(T) == 4) {
   37|       |#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap32)
   38|       |      return static_cast<T>(__builtin_bswap32(x));
   39|       |#else
   40|       |      // MSVC at least recognizes this as a bswap
   41|       |      return static_cast<T>(((x & 0x000000FF) << 24) | ((x & 0x0000FF00) << 8) | ((x & 0x00FF0000) >> 8) |
   42|       |                            ((x & 0xFF000000) >> 24));
   43|       |#endif
   44|  29.9k|   } else if constexpr(sizeof(T) == 8) {
   45|  29.9k|#if BOTAN_COMPILER_HAS_BUILTIN(__builtin_bswap64)
   46|  29.9k|      return static_cast<T>(__builtin_bswap64(x));
   47|       |#else
   48|       |      uint32_t hi = static_cast<uint32_t>(x >> 32);
   49|       |      uint32_t lo = static_cast<uint32_t>(x);
   50|       |
   51|       |      hi = reverse_bytes(hi);
   52|       |      lo = reverse_bytes(lo);
   53|       |
   54|       |      return (static_cast<T>(lo) << 32) | hi;
   55|       |#endif
   56|  29.9k|   }
   57|  29.9k|}

_ZN5Botan12BufferSlicerC2ENSt3__14spanIKhLm18446744073709551615EEE:
   25|  60.4k|      explicit BufferSlicer(std::span<const uint8_t> buffer) : m_remaining(buffer) {}
_ZNK5Botan12BufferSlicer5emptyEv:
   68|   675k|      bool empty() const { return m_remaining.empty(); }
_ZN5Botan12BufferSlicer9take_byteEv:
   57|   329k|      uint8_t take_byte() { return take(1)[0]; }
_ZN5Botan12BufferSlicer4takeEm:
   37|   351k|      std::span<const uint8_t> take(const size_t count) {
   38|   351k|         BOTAN_STATE_CHECK(remaining() >= count);
  ------------------
  |  |   51|   351k|   do {                                                         \
  |  |   52|   351k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */             \
  |  |   53|   351k|      if(!(expr)) {                                             \
  |  |  ------------------
  |  |  |  Branch (53:10): [True: 0, False: 351k]
  |  |  ------------------
  |  |   54|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */    \
  |  |   55|      0|         Botan::throw_invalid_state(#expr, __func__, __FILE__); \
  |  |   56|      0|      }                                                         \
  |  |   57|   351k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (57:12): [Folded, False: 351k]
  |  |  ------------------
  ------------------
   39|   351k|         auto result = m_remaining.first(count);
   40|   351k|         m_remaining = m_remaining.subspan(count);
   41|   351k|         return result;
   42|   351k|      }
_ZNK5Botan12BufferSlicer9remainingEv:
   66|   368k|      size_t remaining() const { return m_remaining.size(); }

_ZNK5Botan22CharacterValidityTableclEc:
   90|  34.6k|      constexpr bool operator()(char c) const {
   91|  34.6k|         const uint8_t uc = static_cast<uint8_t>(c);
   92|  34.6k|         return ((m_tbl[uc / 32] >> (uc % 32)) & 1) != 0;
   93|  34.6k|      }

base64.cpp:_ZN5Botan11base_decodeINS_12_GLOBAL__N_16Base64EEEmRKT_PhPKcmRmbb:
  124|    163|                   bool ignore_ws = true) {
  125|       |   // TODO(Botan4) Check if we can use just base. or Base:: here instead
  126|    163|   constexpr size_t decoding_bytes_in = std::remove_reference_t<Base>::decoding_bytes_in();
  127|    163|   constexpr size_t decoding_bytes_out = std::remove_reference_t<Base>::decoding_bytes_out();
  128|       |
  129|    163|   uint8_t* out_ptr = output;
  130|    163|   std::array<uint8_t, decoding_bytes_in> decode_buf{};
  131|    163|   size_t decode_buf_pos = 0;
  132|    163|   size_t final_truncate = 0;
  133|       |
  134|    163|   clear_mem(output, base.decode_max_output(input_length));
  135|       |
  136|  39.6k|   for(size_t i = 0; i != input_length; ++i) {
  ------------------
  |  Branch (136:22): [True: 39.4k, False: 163]
  ------------------
  137|  39.4k|      const uint8_t bin = base.lookup_binary_value(input[i]);
  138|       |
  139|       |      // This call might throw Invalid_Argument
  140|  39.4k|      if(base.check_bad_char(bin, input[i], ignore_ws)) {
  ------------------
  |  Branch (140:10): [True: 16.0k, False: 23.3k]
  ------------------
  141|  16.0k|         decode_buf[decode_buf_pos] = bin;
  142|  16.0k|         ++decode_buf_pos;
  143|  16.0k|      }
  144|       |
  145|       |      /*
  146|       |      * If we're at the end of the input, pad with 0s and truncate
  147|       |      */
  148|  39.4k|      if(final_inputs && (i == input_length - 1)) {
  ------------------
  |  Branch (148:10): [True: 39.4k, False: 41]
  |  Branch (148:26): [True: 90, False: 39.3k]
  ------------------
  149|     90|         if(decode_buf_pos) {
  ------------------
  |  Branch (149:13): [True: 45, False: 45]
  ------------------
  150|    133|            for(size_t j = decode_buf_pos; j < decoding_bytes_in; ++j) {
  ------------------
  |  Branch (150:44): [True: 88, False: 45]
  ------------------
  151|     88|               decode_buf[j] = 0;
  152|     88|            }
  153|       |
  154|     45|            final_truncate = decoding_bytes_in - decode_buf_pos;
  155|     45|            decode_buf_pos = decoding_bytes_in;
  156|     45|         }
  157|     90|      }
  158|       |
  159|  39.4k|      if(decode_buf_pos == decoding_bytes_in) {
  ------------------
  |  Branch (159:10): [True: 4.04k, False: 35.4k]
  ------------------
  160|  4.04k|         base.decode(out_ptr, decode_buf.data());
  161|       |
  162|  4.04k|         out_ptr += decoding_bytes_out;
  163|  4.04k|         decode_buf_pos = 0;
  164|  4.04k|         input_consumed = i + 1;
  165|  4.04k|      }
  166|  39.4k|   }
  167|       |
  168|  11.6k|   while(input_consumed < input_length && base.lookup_binary_value(input[input_consumed]) == 0x80) {
  ------------------
  |  Branch (168:10): [True: 11.5k, False: 141]
  |  Branch (168:43): [True: 11.4k, False: 22]
  ------------------
  169|  11.4k|      ++input_consumed;
  170|  11.4k|   }
  171|       |
  172|    163|   const size_t written = (out_ptr - output) - base.bytes_to_remove(final_truncate);
  173|       |
  174|    163|   return written;
  175|    163|}
base64.cpp:_ZN5Botan16base_decode_fullINS_12_GLOBAL__N_16Base64EEEmRKT_PhPKcmb:
  178|    163|size_t base_decode_full(const Base& base, uint8_t output[], const char input[], size_t input_length, bool ignore_ws) {
  179|    163|   size_t consumed = 0;
  180|    163|   const size_t written = base_decode(base, output, input, input_length, consumed, true, ignore_ws);
  181|       |
  182|    163|   if(consumed != input_length) {
  ------------------
  |  Branch (182:7): [True: 22, False: 141]
  ------------------
  183|     22|      throw Invalid_Argument(base.name() + " decoding failed, input did not have full bytes");
  184|     22|   }
  185|       |
  186|    141|   return written;
  187|    163|}
base64.cpp:_ZN5Botan18base_decode_to_vecINSt3__16vectorIhNS_16secure_allocatorIhEEEENS_12_GLOBAL__N_16Base64EEET_RKT0_PKcmb:
  190|    163|Vector base_decode_to_vec(const Base& base, const char input[], size_t input_length, bool ignore_ws) {
  191|    163|   const size_t output_length = base.decode_max_output(input_length);
  192|    163|   Vector bin(output_length);
  193|       |
  194|    163|   const size_t written = base_decode_full(base, bin.data(), input, input_length, ignore_ws);
  195|       |
  196|    163|   bin.resize(written);
  197|    163|   return bin;
  198|    163|}

_ZN5Botan5CPUID3hasENS_10CPUFeatureE:
   94|  9.59k|      static bool has(CPUID::Feature feat) { return state().has_bit(feat.as_u32()); }
_ZN5Botan5CPUID5stateEv:
  156|  19.1k|      static CPUID_Data& state() {
  157|  19.1k|         static CPUID::CPUID_Data g_cpuid;
  158|  19.1k|         return g_cpuid;
  159|  19.1k|      }
_ZNK5Botan5CPUID10CPUID_Data7has_bitEj:
  144|  19.1k|            bool has_bit(uint32_t bit) const { return (m_processor_features & bit) == bit; }
_ZN5Botan5CPUID3hasENS_10CPUFeatureES1_:
   99|  9.59k|      static bool has(CPUID::Feature feat1, CPUID::Feature feat2) {
  100|  9.59k|         return state().has_bit(feat1.as_u32() | feat2.as_u32());
  101|  9.59k|      }
_ZN5Botan5CPUID6is_setEjNS_10CPUFeatureE:
  127|      4|      static inline bool is_set(uint32_t allowed, CPUID::Feature bit) {
  128|      4|         const uint32_t feat_bit = bit.as_u32();
  129|      4|         return ((allowed & feat_bit) == feat_bit);
  130|      4|      }
cpuid_x86.cpp:_ZN5Botan5CPUID6if_setIZNS0_10CPUID_Data19detect_cpu_featuresEjE16x86_CPUID_1_bitsEEjmT_NS_10CPUFeatureEj:
  117|      6|      static inline uint32_t if_set(uint64_t cpuid, T flag, CPUID::Feature bit, uint32_t allowed) {
  118|      6|         const uint64_t flag64 = static_cast<uint64_t>(flag);
  119|      6|         if((cpuid & flag64) == flag64) {
  ------------------
  |  Branch (119:13): [True: 6, False: 0]
  ------------------
  120|      6|            return (bit.as_u32() & allowed);
  121|      6|         } else {
  122|      0|            return 0;
  123|      0|         }
  124|      6|      }
cpuid_x86.cpp:_ZN5Botan5CPUID6if_setIZNS0_10CPUID_Data19detect_cpu_featuresEjE16x86_CPUID_7_bitsEEjmT_NS_10CPUFeatureEj:
  117|      8|      static inline uint32_t if_set(uint64_t cpuid, T flag, CPUID::Feature bit, uint32_t allowed) {
  118|      8|         const uint64_t flag64 = static_cast<uint64_t>(flag);
  119|      8|         if((cpuid & flag64) == flag64) {
  ------------------
  |  Branch (119:13): [True: 4, False: 4]
  ------------------
  120|      4|            return (bit.as_u32() & allowed);
  121|      4|         } else {
  122|      4|            return 0;
  123|      4|         }
  124|      8|      }
cpuid_x86.cpp:_ZN5Botan5CPUID6if_setIZNS0_10CPUID_Data19detect_cpu_featuresEjE18x86_CPUID_7_1_bitsEEjmT_NS_10CPUFeatureEj:
  117|      3|      static inline uint32_t if_set(uint64_t cpuid, T flag, CPUID::Feature bit, uint32_t allowed) {
  118|      3|         const uint64_t flag64 = static_cast<uint64_t>(flag);
  119|      3|         if((cpuid & flag64) == flag64) {
  ------------------
  |  Branch (119:13): [True: 0, False: 3]
  ------------------
  120|      0|            return (bit.as_u32() & allowed);
  121|      3|         } else {
  122|      3|            return 0;
  123|      3|         }
  124|      3|      }

_ZNK5Botan10CPUFeature6as_u32Ev:
   53|  28.7k|      uint32_t as_u32() const { return static_cast<uint32_t>(m_bit); }
_ZN5Botan10CPUFeatureC2ENS0_3BitE:
   51|  28.7k|      CPUFeature(Bit b) : m_bit(b) {}  // NOLINT(*-explicit-conversions)

_ZN5Botan2CT8unpoisonITkNSt3__18integralEmEEvRKT_:
  112|  29.8k|constexpr void unpoison(const T& p) {
  113|  29.8k|   unpoison(&p, 1);
  114|  29.8k|}
_ZN5Botan2CT8unpoisonImEEvPKT_m:
   67|  43.9k|constexpr inline void unpoison(const T* p, size_t n) {
   68|       |#if defined(BOTAN_HAS_VALGRIND)
   69|       |   if(!std::is_constant_evaluated()) {
   70|       |      VALGRIND_MAKE_MEM_DEFINED(p, n * sizeof(T));
   71|       |   }
   72|       |#endif
   73|       |
   74|  43.9k|   BOTAN_UNUSED(p, n);
  ------------------
  |  |  144|  43.9k|#define BOTAN_UNUSED Botan::ignore_params
  ------------------
   75|  43.9k|}

_ZN5Botan3fmtIJNSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEEEENS1_12basic_stringIcS4_NS1_9allocatorIcEEEES5_DpRKT_:
   53|  10.1k|std::string fmt(std::string_view format, const T&... args) {
   54|  10.1k|   std::ostringstream oss;
   55|  10.1k|   oss.imbue(std::locale::classic());
   56|  10.1k|   fmt_detail::do_fmt(oss, format, args...);
   57|  10.1k|   return oss.str();
   58|  10.1k|}
_ZN5Botan10fmt_detail6do_fmtINSt3__117basic_string_viewIcNS2_11char_traitsIcEEEEJEEEvRNS2_19basic_ostringstreamIcS5_NS2_9allocatorIcEEEES6_RKT_DpRKT0_:
   25|  10.1k|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) {
   26|  10.1k|   size_t i = 0;
   27|       |
   28|  91.8k|   while(i < format.size()) {
  ------------------
  |  Branch (28:10): [True: 91.8k, False: 0]
  ------------------
   29|  91.8k|      if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') {
  ------------------
  |  Branch (29:10): [True: 10.1k, False: 81.6k]
  |  Branch (29:30): [True: 10.1k, False: 0]
  |  Branch (29:59): [True: 10.1k, False: 0]
  ------------------
   30|  10.1k|         oss << val;
   31|  10.1k|         return do_fmt(oss, format.substr(i + 2), rest...);
   32|  81.6k|      } else {
   33|  81.6k|         oss << format[i];
   34|  81.6k|      }
   35|       |
   36|  81.6k|      i += 1;
   37|  81.6k|   }
   38|  10.1k|}
_ZN5Botan10fmt_detail6do_fmtERNSt3__119basic_ostringstreamIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EE:
   20|  16.8k|inline void do_fmt(std::ostringstream& oss, std::string_view format) {
   21|  16.8k|   oss << format;
   22|  16.8k|}
_ZN5Botan3fmtIJNSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEPKcEEENS1_12basic_stringIcS4_NS1_9allocatorIcEEEES5_DpRKT_:
   53|  4.69k|std::string fmt(std::string_view format, const T&... args) {
   54|  4.69k|   std::ostringstream oss;
   55|  4.69k|   oss.imbue(std::locale::classic());
   56|  4.69k|   fmt_detail::do_fmt(oss, format, args...);
   57|  4.69k|   return oss.str();
   58|  4.69k|}
_ZN5Botan10fmt_detail6do_fmtINSt3__117basic_string_viewIcNS2_11char_traitsIcEEEEJPKcEEEvRNS2_19basic_ostringstreamIcS5_NS2_9allocatorIcEEEES6_RKT_DpRKT0_:
   25|  4.69k|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) {
   26|  4.69k|   size_t i = 0;
   27|       |
   28|  4.69k|   while(i < format.size()) {
  ------------------
  |  Branch (28:10): [True: 4.69k, False: 0]
  ------------------
   29|  4.69k|      if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') {
  ------------------
  |  Branch (29:10): [True: 4.69k, False: 0]
  |  Branch (29:30): [True: 4.69k, False: 0]
  |  Branch (29:59): [True: 4.69k, False: 0]
  ------------------
   30|  4.69k|         oss << val;
   31|  4.69k|         return do_fmt(oss, format.substr(i + 2), rest...);
   32|  4.69k|      } else {
   33|      0|         oss << format[i];
   34|      0|      }
   35|       |
   36|      0|      i += 1;
   37|      0|   }
   38|  4.69k|}
_ZN5Botan10fmt_detail6do_fmtIPKcJEEEvRNSt3__119basic_ostringstreamIcNS4_11char_traitsIcEENS4_9allocatorIcEEEENS4_17basic_string_viewIcS7_EERKT_DpRKT0_:
   25|  4.82k|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) {
   26|  4.82k|   size_t i = 0;
   27|       |
   28|  68.6k|   while(i < format.size()) {
  ------------------
  |  Branch (28:10): [True: 68.6k, False: 0]
  ------------------
   29|  68.6k|      if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') {
  ------------------
  |  Branch (29:10): [True: 4.82k, False: 63.8k]
  |  Branch (29:30): [True: 4.82k, False: 0]
  |  Branch (29:59): [True: 4.82k, False: 0]
  ------------------
   30|  4.82k|         oss << val;
   31|  4.82k|         return do_fmt(oss, format.substr(i + 2), rest...);
   32|  63.8k|      } else {
   33|  63.8k|         oss << format[i];
   34|  63.8k|      }
   35|       |
   36|  63.8k|      i += 1;
   37|  63.8k|   }
   38|  4.82k|}
_ZN5Botan10fmt_detail6do_fmtImJEEEvRNSt3__119basic_ostringstreamIcNS2_11char_traitsIcEENS2_9allocatorIcEEEENS2_17basic_string_viewIcS5_EERKT_DpRKT0_:
   25|     36|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) {
   26|     36|   size_t i = 0;
   27|       |
   28|  1.73k|   while(i < format.size()) {
  ------------------
  |  Branch (28:10): [True: 1.73k, False: 0]
  ------------------
   29|  1.73k|      if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') {
  ------------------
  |  Branch (29:10): [True: 36, False: 1.69k]
  |  Branch (29:30): [True: 36, False: 0]
  |  Branch (29:59): [True: 36, False: 0]
  ------------------
   30|     36|         oss << val;
   31|     36|         return do_fmt(oss, format.substr(i + 2), rest...);
   32|  1.69k|      } else {
   33|  1.69k|         oss << format[i];
   34|  1.69k|      }
   35|       |
   36|  1.69k|      i += 1;
   37|  1.69k|   }
   38|     36|}
_ZN5Botan3fmtIJNSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEjEEENS1_12basic_stringIcS4_NS1_9allocatorIcEEEES5_DpRKT_:
   53|    164|std::string fmt(std::string_view format, const T&... args) {
   54|    164|   std::ostringstream oss;
   55|    164|   oss.imbue(std::locale::classic());
   56|    164|   fmt_detail::do_fmt(oss, format, args...);
   57|    164|   return oss.str();
   58|    164|}
_ZN5Botan10fmt_detail6do_fmtINSt3__117basic_string_viewIcNS2_11char_traitsIcEEEEJjEEEvRNS2_19basic_ostringstreamIcS5_NS2_9allocatorIcEEEES6_RKT_DpRKT0_:
   25|    164|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) {
   26|    164|   size_t i = 0;
   27|       |
   28|    164|   while(i < format.size()) {
  ------------------
  |  Branch (28:10): [True: 164, False: 0]
  ------------------
   29|    164|      if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') {
  ------------------
  |  Branch (29:10): [True: 164, False: 0]
  |  Branch (29:30): [True: 164, False: 0]
  |  Branch (29:59): [True: 164, False: 0]
  ------------------
   30|    164|         oss << val;
   31|    164|         return do_fmt(oss, format.substr(i + 2), rest...);
   32|    164|      } else {
   33|      0|         oss << format[i];
   34|      0|      }
   35|       |
   36|      0|      i += 1;
   37|      0|   }
   38|    164|}
_ZN5Botan10fmt_detail6do_fmtIjJEEEvRNSt3__119basic_ostringstreamIcNS2_11char_traitsIcEENS2_9allocatorIcEEEENS2_17basic_string_viewIcS5_EERKT_DpRKT0_:
   25|  1.31k|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) {
   26|  1.31k|   size_t i = 0;
   27|       |
   28|  26.0k|   while(i < format.size()) {
  ------------------
  |  Branch (28:10): [True: 26.0k, False: 0]
  ------------------
   29|  26.0k|      if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') {
  ------------------
  |  Branch (29:10): [True: 1.31k, False: 24.7k]
  |  Branch (29:30): [True: 1.31k, False: 0]
  |  Branch (29:59): [True: 1.31k, False: 0]
  ------------------
   30|  1.31k|         oss << val;
   31|  1.31k|         return do_fmt(oss, format.substr(i + 2), rest...);
   32|  24.7k|      } else {
   33|  24.7k|         oss << format[i];
   34|  24.7k|      }
   35|       |
   36|  24.7k|      i += 1;
   37|  24.7k|   }
   38|  1.31k|}
_ZN5Botan3fmtIJNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEEEES7_NS1_17basic_string_viewIcS4_EEDpRKT_:
   53|    552|std::string fmt(std::string_view format, const T&... args) {
   54|    552|   std::ostringstream oss;
   55|    552|   oss.imbue(std::locale::classic());
   56|    552|   fmt_detail::do_fmt(oss, format, args...);
   57|    552|   return oss.str();
   58|    552|}
_ZN5Botan10fmt_detail6do_fmtINSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEJEEEvRNS2_19basic_ostringstreamIcS5_S7_EENS2_17basic_string_viewIcS5_EERKT_DpRKT0_:
   25|    563|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) {
   26|    563|   size_t i = 0;
   27|       |
   28|  9.94k|   while(i < format.size()) {
  ------------------
  |  Branch (28:10): [True: 9.94k, False: 0]
  ------------------
   29|  9.94k|      if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') {
  ------------------
  |  Branch (29:10): [True: 563, False: 9.37k]
  |  Branch (29:30): [True: 563, False: 0]
  |  Branch (29:59): [True: 563, False: 0]
  ------------------
   30|    563|         oss << val;
   31|    563|         return do_fmt(oss, format.substr(i + 2), rest...);
   32|  9.37k|      } else {
   33|  9.37k|         oss << format[i];
   34|  9.37k|      }
   35|       |
   36|  9.37k|      i += 1;
   37|  9.37k|   }
   38|    563|}
_ZN5Botan3fmtIJjjEEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EEDpRKT_:
   53|    544|std::string fmt(std::string_view format, const T&... args) {
   54|    544|   std::ostringstream oss;
   55|    544|   oss.imbue(std::locale::classic());
   56|    544|   fmt_detail::do_fmt(oss, format, args...);
   57|    544|   return oss.str();
   58|    544|}
_ZN5Botan10fmt_detail6do_fmtIjJjEEEvRNSt3__119basic_ostringstreamIcNS2_11char_traitsIcEENS2_9allocatorIcEEEENS2_17basic_string_viewIcS5_EERKT_DpRKT0_:
   25|    544|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) {
   26|    544|   size_t i = 0;
   27|       |
   28|  14.6k|   while(i < format.size()) {
  ------------------
  |  Branch (28:10): [True: 14.6k, False: 0]
  ------------------
   29|  14.6k|      if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') {
  ------------------
  |  Branch (29:10): [True: 544, False: 14.1k]
  |  Branch (29:30): [True: 544, False: 0]
  |  Branch (29:59): [True: 544, False: 0]
  ------------------
   30|    544|         oss << val;
   31|    544|         return do_fmt(oss, format.substr(i + 2), rest...);
   32|  14.1k|      } else {
   33|  14.1k|         oss << format[i];
   34|  14.1k|      }
   35|       |
   36|  14.1k|      i += 1;
   37|  14.1k|   }
   38|    544|}
_ZN5Botan3fmtIJPKcEEENSt3__112basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEENS3_17basic_string_viewIcS6_EEDpRKT_:
   53|    100|std::string fmt(std::string_view format, const T&... args) {
   54|    100|   std::ostringstream oss;
   55|    100|   oss.imbue(std::locale::classic());
   56|    100|   fmt_detail::do_fmt(oss, format, args...);
   57|    100|   return oss.str();
   58|    100|}
_ZN5Botan3fmtIJmEEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EEDpRKT_:
   53|     28|std::string fmt(std::string_view format, const T&... args) {
   54|     28|   std::ostringstream oss;
   55|     28|   oss.imbue(std::locale::classic());
   56|     28|   fmt_detail::do_fmt(oss, format, args...);
   57|     28|   return oss.str();
   58|     28|}
_ZN5Botan3fmtIJPKcS2_S2_EEENSt3__112basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEENS3_17basic_string_viewIcS6_EEDpRKT_:
   53|     31|std::string fmt(std::string_view format, const T&... args) {
   54|     31|   std::ostringstream oss;
   55|     31|   oss.imbue(std::locale::classic());
   56|     31|   fmt_detail::do_fmt(oss, format, args...);
   57|     31|   return oss.str();
   58|     31|}
_ZN5Botan10fmt_detail6do_fmtIPKcJS3_S3_EEEvRNSt3__119basic_ostringstreamIcNS4_11char_traitsIcEENS4_9allocatorIcEEEENS4_17basic_string_viewIcS7_EERKT_DpRKT0_:
   25|     31|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) {
   26|     31|   size_t i = 0;
   27|       |
   28|     31|   while(i < format.size()) {
  ------------------
  |  Branch (28:10): [True: 31, False: 0]
  ------------------
   29|     31|      if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') {
  ------------------
  |  Branch (29:10): [True: 31, False: 0]
  |  Branch (29:30): [True: 31, False: 0]
  |  Branch (29:59): [True: 31, False: 0]
  ------------------
   30|     31|         oss << val;
   31|     31|         return do_fmt(oss, format.substr(i + 2), rest...);
   32|     31|      } else {
   33|      0|         oss << format[i];
   34|      0|      }
   35|       |
   36|      0|      i += 1;
   37|      0|   }
   38|     31|}
_ZN5Botan10fmt_detail6do_fmtIPKcJS3_EEEvRNSt3__119basic_ostringstreamIcNS4_11char_traitsIcEENS4_9allocatorIcEEEENS4_17basic_string_viewIcS7_EERKT_DpRKT0_:
   25|     31|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) {
   26|     31|   size_t i = 0;
   27|       |
   28|    155|   while(i < format.size()) {
  ------------------
  |  Branch (28:10): [True: 155, False: 0]
  ------------------
   29|    155|      if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') {
  ------------------
  |  Branch (29:10): [True: 31, False: 124]
  |  Branch (29:30): [True: 31, False: 0]
  |  Branch (29:59): [True: 31, False: 0]
  ------------------
   30|     31|         oss << val;
   31|     31|         return do_fmt(oss, format.substr(i + 2), rest...);
   32|    124|      } else {
   33|    124|         oss << format[i];
   34|    124|      }
   35|       |
   36|    124|      i += 1;
   37|    124|   }
   38|     31|}
_ZN5Botan3fmtIJNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES7_EEES7_NS1_17basic_string_viewIcS4_EEDpRKT_:
   53|     11|std::string fmt(std::string_view format, const T&... args) {
   54|     11|   std::ostringstream oss;
   55|     11|   oss.imbue(std::locale::classic());
   56|     11|   fmt_detail::do_fmt(oss, format, args...);
   57|     11|   return oss.str();
   58|     11|}
_ZN5Botan10fmt_detail6do_fmtINSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEJS8_EEEvRNS2_19basic_ostringstreamIcS5_S7_EENS2_17basic_string_viewIcS5_EERKT_DpRKT0_:
   25|     11|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) {
   26|     11|   size_t i = 0;
   27|       |
   28|     11|   while(i < format.size()) {
  ------------------
  |  Branch (28:10): [True: 11, False: 0]
  ------------------
   29|     11|      if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') {
  ------------------
  |  Branch (29:10): [True: 11, False: 0]
  |  Branch (29:30): [True: 11, False: 0]
  |  Branch (29:59): [True: 11, False: 0]
  ------------------
   30|     11|         oss << val;
   31|     11|         return do_fmt(oss, format.substr(i + 2), rest...);
   32|     11|      } else {
   33|      0|         oss << format[i];
   34|      0|      }
   35|       |
   36|      0|      i += 1;
   37|      0|   }
   38|     11|}
_ZN5Botan3fmtIJmmEEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EEDpRKT_:
   53|      8|std::string fmt(std::string_view format, const T&... args) {
   54|      8|   std::ostringstream oss;
   55|      8|   oss.imbue(std::locale::classic());
   56|      8|   fmt_detail::do_fmt(oss, format, args...);
   57|      8|   return oss.str();
   58|      8|}
_ZN5Botan10fmt_detail6do_fmtImJmEEEvRNSt3__119basic_ostringstreamIcNS2_11char_traitsIcEENS2_9allocatorIcEEEENS2_17basic_string_viewIcS5_EERKT_DpRKT0_:
   25|      8|void do_fmt(std::ostringstream& oss, std::string_view format, const T& val, const Ts&... rest) {
   26|      8|   size_t i = 0;
   27|       |
   28|    360|   while(i < format.size()) {
  ------------------
  |  Branch (28:10): [True: 360, False: 0]
  ------------------
   29|    360|      if(format[i] == '{' && (format.size() > (i + 1)) && format.at(i + 1) == '}') {
  ------------------
  |  Branch (29:10): [True: 8, False: 352]
  |  Branch (29:30): [True: 8, False: 0]
  |  Branch (29:59): [True: 8, False: 0]
  ------------------
   30|      8|         oss << val;
   31|      8|         return do_fmt(oss, format.substr(i + 2), rest...);
   32|    352|      } else {
   33|    352|         oss << format[i];
   34|    352|      }
   35|       |
   36|    352|      i += 1;
   37|    352|   }
   38|      8|}
_ZN5Botan3fmtIJjEEENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EEDpRKT_:
   53|    605|std::string fmt(std::string_view format, const T&... args) {
   54|    605|   std::ostringstream oss;
   55|    605|   oss.imbue(std::locale::classic());
   56|    605|   fmt_detail::do_fmt(oss, format, args...);
   57|    605|   return oss.str();
   58|    605|}

_ZN5Botan11checked_mulITkNSt3__117unsigned_integralEmEENS1_8optionalIT_EES3_S3_:
   46|  80.0k|constexpr inline std::optional<T> checked_mul(T a, T b) {
   47|       |   // Multiplication by 1U is a hack to work around C's insane
   48|       |   // integer promotion rules.
   49|       |   // https://stackoverflow.com/questions/24795651
   50|  80.0k|   const T r = (1U * a) * b;
   51|       |   // If a == 0 then the multiply certainly did not overflow
   52|       |   // Otherwise r / a == b unless overflow occurred
   53|  80.0k|   if(a != 0 && r / a != b) {
  ------------------
  |  Branch (53:7): [True: 80.0k, False: 0]
  |  Branch (53:17): [True: 0, False: 80.0k]
  ------------------
   54|      0|      return {};
   55|      0|   }
   56|  80.0k|   return r;
   57|  80.0k|}
_ZN5Botan11checked_addITkNSt3__117unsigned_integralEjEENS1_8optionalIT_EES3_S3_:
   19|    614|constexpr inline std::optional<T> checked_add(T a, T b) {
   20|    614|   const T r = a + b;
   21|    614|   if(r < a || r < b) {
  ------------------
  |  Branch (21:7): [True: 0, False: 614]
  |  Branch (21:16): [True: 0, False: 614]
  ------------------
   22|      0|      return {};
   23|      0|   }
   24|    614|   return r;
   25|    614|}
_ZN5Botan11checked_addITkNSt3__117unsigned_integralEmTpTkNS1_17unsigned_integralEJmmEQ10all_same_vIT_DpT0_EEENS1_8optionalIS2_EES2_S2_S4_:
   37|    186|constexpr inline std::optional<T> checked_add(T a, T b, Ts... rest) {
   38|    186|   if(auto r = checked_add(a, b)) {
  ------------------
  |  Branch (38:12): [True: 186, False: 0]
  ------------------
   39|    186|      return checked_add(r.value(), rest...);
   40|    186|   } else {
   41|      0|      return {};
   42|      0|   }
   43|    186|}
_ZN5Botan11checked_addITkNSt3__117unsigned_integralEmEENS1_8optionalIT_EES3_S3_:
   19|  1.30k|constexpr inline std::optional<T> checked_add(T a, T b) {
   20|  1.30k|   const T r = a + b;
   21|  1.30k|   if(r < a || r < b) {
  ------------------
  |  Branch (21:7): [True: 0, False: 1.30k]
  |  Branch (21:16): [True: 0, False: 1.30k]
  ------------------
   22|      0|      return {};
   23|      0|   }
   24|  1.30k|   return r;
   25|  1.30k|}
_ZN5Botan11checked_addITkNSt3__117unsigned_integralEmTpTkNS1_17unsigned_integralEJmEQ10all_same_vIT_DpT0_EEENS1_8optionalIS2_EES2_S2_S4_:
   37|    186|constexpr inline std::optional<T> checked_add(T a, T b, Ts... rest) {
   38|    186|   if(auto r = checked_add(a, b)) {
  ------------------
  |  Branch (38:12): [True: 186, False: 0]
  ------------------
   39|    186|      return checked_add(r.value(), rest...);
   40|    186|   } else {
   41|      0|      return {};
   42|      0|   }
   43|    186|}
_ZN5Botan7swar_ltITkNSt3__117unsigned_integralEtEET_S2_S2_:
   91|  31.9k|constexpr T swar_lt(T a, T b) {
   92|       |   // The constant 0x808080... as a T
   93|  31.9k|   constexpr T hi1 = (static_cast<T>(-1) / 255) << 7;
   94|       |   // The constant 0x7F7F7F... as a T
   95|  31.9k|   constexpr T lo7 = static_cast<T>(~hi1);
   96|  31.9k|   T r = (lo7 - a + b) & hi1;
   97|       |   // Currently the mask is 80 if lt, otherwise 00. Convert to FF/00
   98|  31.9k|   return (r << 1) - (r >> 7);
   99|  31.9k|}
_ZN5Botan13swar_in_rangeITkNSt3__117unsigned_integralEmEET_S2_S2_S2_:
  114|  50.9k|constexpr T swar_in_range(T v, T lower, T upper) {
  115|       |   // The constant 0x808080... as a T
  116|  50.9k|   constexpr T hi1 = (static_cast<T>(-1) / 255) << 7;
  117|       |   // The constant 0x7F7F7F... as a T
  118|  50.9k|   constexpr T lo7 = ~hi1;
  119|       |
  120|  50.9k|   const T sub = ((v | hi1) - (lower & lo7)) ^ ((v ^ (~lower)) & hi1);
  121|  50.9k|   const T a_lo = sub & lo7;
  122|  50.9k|   const T a_hi = sub & hi1;
  123|  50.9k|   return (lo7 - a_lo + upper) & hi1 & ~a_hi;
  124|  50.9k|}
_ZN5Botan11checked_addITkNSt3__117unsigned_integralEmTpTkNS1_17unsigned_integralEJmmmmmmEQ10all_same_vIT_DpT0_EEENS1_8optionalIS2_EES2_S2_S4_:
   37|    186|constexpr inline std::optional<T> checked_add(T a, T b, Ts... rest) {
   38|    186|   if(auto r = checked_add(a, b)) {
  ------------------
  |  Branch (38:12): [True: 186, False: 0]
  ------------------
   39|    186|      return checked_add(r.value(), rest...);
   40|    186|   } else {
   41|      0|      return {};
   42|      0|   }
   43|    186|}
_ZN5Botan11checked_addITkNSt3__117unsigned_integralEmTpTkNS1_17unsigned_integralEJmmmmmEQ10all_same_vIT_DpT0_EEENS1_8optionalIS2_EES2_S2_S4_:
   37|    186|constexpr inline std::optional<T> checked_add(T a, T b, Ts... rest) {
   38|    186|   if(auto r = checked_add(a, b)) {
  ------------------
  |  Branch (38:12): [True: 186, False: 0]
  ------------------
   39|    186|      return checked_add(r.value(), rest...);
   40|    186|   } else {
   41|      0|      return {};
   42|      0|   }
   43|    186|}
_ZN5Botan11checked_addITkNSt3__117unsigned_integralEmTpTkNS1_17unsigned_integralEJmmmmEQ10all_same_vIT_DpT0_EEENS1_8optionalIS2_EES2_S2_S4_:
   37|    186|constexpr inline std::optional<T> checked_add(T a, T b, Ts... rest) {
   38|    186|   if(auto r = checked_add(a, b)) {
  ------------------
  |  Branch (38:12): [True: 186, False: 0]
  ------------------
   39|    186|      return checked_add(r.value(), rest...);
   40|    186|   } else {
   41|      0|      return {};
   42|      0|   }
   43|    186|}
_ZN5Botan11checked_addITkNSt3__117unsigned_integralEmTpTkNS1_17unsigned_integralEJmmmEQ10all_same_vIT_DpT0_EEENS1_8optionalIS2_EES2_S2_S4_:
   37|    186|constexpr inline std::optional<T> checked_add(T a, T b, Ts... rest) {
   38|    186|   if(auto r = checked_add(a, b)) {
  ------------------
  |  Branch (38:12): [True: 186, False: 0]
  ------------------
   39|    186|      return checked_add(r.value(), rest...);
   40|    186|   } else {
   41|      0|      return {};
   42|      0|   }
   43|    186|}
_ZN5Botan15checked_cast_toIjmQaasr3stdE8integralINS_6detail19wrapped_type_helperIu14__remove_cvrefIT_EE4typeEEsr3stdE8integralINS2_Iu14__remove_cvrefIT0_EE4typeEEEES3_S7_:
   74|  5.33k|constexpr RT checked_cast_to(AT i) {
   75|  5.33k|   return checked_cast_to_or_throw<RT, Internal_Error>(i, "Error during integer conversion");
   76|  5.33k|}
_ZN5Botan24checked_cast_to_or_throwIjNS_14Internal_ErrorEmQaasr3stdE8integralINS_6detail19wrapped_type_helperIu14__remove_cvrefIT_EE4typeEEsr3stdE8integralINS3_Iu14__remove_cvrefIT1_EE4typeEEEES4_S8_NSt3__117basic_string_viewIcNSC_11char_traitsIcEEEE:
   61|  5.33k|constexpr RT checked_cast_to_or_throw(AT i, std::string_view error_msg_on_fail) {
   62|  5.33k|   const auto unwrapped_input = unwrap_strong_type(i);
   63|       |
   64|  5.33k|   const auto unwrapped_result = static_cast<strong_type_wrapped_type<RT>>(unwrapped_input);
   65|  5.33k|   if(unwrapped_input != static_cast<strong_type_wrapped_type<AT>>(unwrapped_result)) [[unlikely]] {
  ------------------
  |  Branch (65:7): [True: 0, False: 5.33k]
  ------------------
   66|      0|      throw ExceptionType(error_msg_on_fail);
   67|      0|   }
   68|       |
   69|  5.33k|   return wrap_strong_type<RT>(unwrapped_result);
   70|  5.33k|}

_ZN5Botan11make_uint16Ehh:
   92|    838|inline constexpr uint16_t make_uint16(uint8_t i0, uint8_t i1) {
   93|    838|   return static_cast<uint16_t>((static_cast<uint16_t>(i0) << 8) | i1);
   94|    838|}
_ZN5Botan12get_byte_varImEEhmT_:
   69|  47.2k|inline constexpr uint8_t get_byte_var(size_t byte_num, T input) {
   70|  47.2k|   return static_cast<uint8_t>(input >> (((~byte_num) & (sizeof(T) - 1)) << 3));
   71|  47.2k|}
_ZN5Botan6detail9store_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEjTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm4EEEQnt15custom_storableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEEvS9_OT1_:
  525|  31.9k|inline constexpr void store_any(WrappedInT wrapped_in, OutR&& out_range) {
  526|  31.9k|   const auto in = detail::unwrap_strong_type_or_enum(wrapped_in);
  527|  31.9k|   using InT = decltype(in);
  528|  31.9k|   ranges::assert_exact_byte_length<sizeof(in)>(out_range);
  529|  31.9k|   const std::span out{out_range};
  530|       |
  531|       |   // At compile time we cannot use `typecast_copy` as it uses `std::memcpy`
  532|       |   // internally to copy ranges on a byte-by-byte basis, which is not allowed
  533|       |   // in a `constexpr` context.
  534|  31.9k|   if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ {
  ------------------
  |  Branch (534:7): [Folded, False: 31.9k]
  ------------------
  535|      0|      return fallback_store_any<endianness, InT>(in, std::forward<OutR>(out_range));
  536|  31.9k|   } else {
  537|       |      if constexpr(sizeof(InT) == 1) {
  538|       |         out[0] = static_cast<uint8_t>(in);
  539|       |      } else if constexpr(endianness == std::endian::native) {
  540|       |         typecast_copy(out, in);
  541|  31.9k|      } else {
  542|  31.9k|         static_assert(opposite(endianness) == std::endian::native);
  543|  31.9k|         typecast_copy(out, reverse_bytes(in));
  544|  31.9k|      }
  545|  31.9k|   }
  546|  31.9k|}
_ZN5Botan6detail26unwrap_strong_type_or_enumITkNS0_20unsigned_integralishEjEEDaT_:
  190|  31.9k|constexpr auto unwrap_strong_type_or_enum(InT t) {
  191|       |   if constexpr(std::is_enum_v<InT>) {
  192|       |      // TODO: C++23: use std::to_underlying(in) instead
  193|       |      return static_cast<std::underlying_type_t<InT>>(t);
  194|  31.9k|   } else {
  195|  31.9k|      return Botan::unwrap_strong_type(t);
  196|  31.9k|   }
  197|  31.9k|}
_ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS0_20unsigned_integralishEmQoosr3stdE7same_asIS4_T0_Esr3stdE7same_asIT1_S5_EEEvS6_Ph:
  711|  10.2k|inline constexpr void store_any(T in, uint8_t out[]) {
  712|       |   // asserts that *out points to enough bytes to write into
  713|  10.2k|   store_any<endianness, InT>(in, std::span<uint8_t, sizeof(T)>(out, sizeof(T)));
  714|  10.2k|}
_ZN5Botan6detail9store_anyILNSt3__16endianE64206ENS0_10AutoDetectETkNS0_20unsigned_integralishEmTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm8EEEQsr3stdE7same_asIS4_T0_EEEvT1_OT2_:
  646|  10.2k|inline constexpr void store_any(T in, OutR&& out_range) {
  647|  10.2k|   store_any<endianness, T>(in, std::forward<OutR>(out_range));
  648|  10.2k|}
_ZN5Botan6detail9store_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEmTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm8EEEQnt15custom_storableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEEvS9_OT1_:
  525|  10.2k|inline constexpr void store_any(WrappedInT wrapped_in, OutR&& out_range) {
  526|  10.2k|   const auto in = detail::unwrap_strong_type_or_enum(wrapped_in);
  527|  10.2k|   using InT = decltype(in);
  528|  10.2k|   ranges::assert_exact_byte_length<sizeof(in)>(out_range);
  529|  10.2k|   const std::span out{out_range};
  530|       |
  531|       |   // At compile time we cannot use `typecast_copy` as it uses `std::memcpy`
  532|       |   // internally to copy ranges on a byte-by-byte basis, which is not allowed
  533|       |   // in a `constexpr` context.
  534|  10.2k|   if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ {
  ------------------
  |  Branch (534:7): [Folded, False: 10.2k]
  ------------------
  535|      0|      return fallback_store_any<endianness, InT>(in, std::forward<OutR>(out_range));
  536|  10.2k|   } else {
  537|       |      if constexpr(sizeof(InT) == 1) {
  538|       |         out[0] = static_cast<uint8_t>(in);
  539|       |      } else if constexpr(endianness == std::endian::native) {
  540|       |         typecast_copy(out, in);
  541|  10.2k|      } else {
  542|  10.2k|         static_assert(opposite(endianness) == std::endian::native);
  543|  10.2k|         typecast_copy(out, reverse_bytes(in));
  544|  10.2k|      }
  545|  10.2k|   }
  546|  10.2k|}
_ZN5Botan6detail26unwrap_strong_type_or_enumITkNS0_20unsigned_integralishEmEEDaT_:
  190|  10.2k|constexpr auto unwrap_strong_type_or_enum(InT t) {
  191|       |   if constexpr(std::is_enum_v<InT>) {
  192|       |      // TODO: C++23: use std::to_underlying(in) instead
  193|       |      return static_cast<std::underlying_type_t<InT>>(t);
  194|  10.2k|   } else {
  195|  10.2k|      return Botan::unwrap_strong_type(t);
  196|  10.2k|   }
  197|  10.2k|}
_ZN5Botan8get_byteILm1EtEEhT0_QltT_stS1_:
   81|  31.9k|{
   82|  31.9k|   const size_t shift = ((~B) & (sizeof(T) - 1)) << 3;
   83|  31.9k|   return static_cast<uint8_t>((input >> shift) & 0xFF);
   84|  31.9k|}
_ZN5Botan8get_byteILm0EtEEhT0_QltT_stS1_:
   81|  31.9k|{
   82|  31.9k|   const size_t shift = ((~B) & (sizeof(T) - 1)) << 3;
   83|  31.9k|   return static_cast<uint8_t>((input >> shift) & 0xFF);
   84|  31.9k|}
_ZN5Botan6detail24wrap_strong_type_or_enumITkNS0_20unsigned_integralishEjTkNSt3__117unsigned_integralEjEEDaT0_:
  200|    369|constexpr auto wrap_strong_type_or_enum(T t) {
  201|       |   if constexpr(std::is_enum_v<OutT>) {
  202|       |      return static_cast<OutT>(t);
  203|    369|   } else {
  204|    369|      return Botan::wrap_strong_type<OutT>(t);
  205|    369|   }
  206|    369|}
_ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEjTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm4EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_:
  278|    369|inline constexpr WrappedOutT load_any(InR&& in_range) {
  279|    369|   using OutT = detail::wrapped_type<WrappedOutT>;
  280|    369|   ranges::assert_exact_byte_length<sizeof(OutT)>(in_range);
  281|       |
  282|    369|   return detail::wrap_strong_type_or_enum<WrappedOutT>([&]() -> OutT {
  283|       |      // At compile time we cannot use `typecast_copy` as it uses `std::memcpy`
  284|       |      // internally to copy ranges on a byte-by-byte basis, which is not allowed
  285|       |      // in a `constexpr` context.
  286|    369|      if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ {
  287|    369|         return fallback_load_any<endianness, OutT>(std::forward<InR>(in_range));
  288|    369|      } else {
  289|    369|         const std::span in{in_range};
  290|    369|         if constexpr(sizeof(OutT) == 1) {
  291|    369|            return static_cast<OutT>(in[0]);
  292|    369|         } else if constexpr(endianness == std::endian::native) {
  293|    369|            return typecast_copy<OutT>(in);
  294|    369|         } else {
  295|    369|            static_assert(opposite(endianness) == std::endian::native);
  296|    369|            return reverse_bytes(typecast_copy<OutT>(in));
  297|    369|         }
  298|    369|      }
  299|    369|   }());
  300|    369|}
_ZZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEjTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm4EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_ENKUlvE_clEv:
  282|    369|   return detail::wrap_strong_type_or_enum<WrappedOutT>([&]() -> OutT {
  283|       |      // At compile time we cannot use `typecast_copy` as it uses `std::memcpy`
  284|       |      // internally to copy ranges on a byte-by-byte basis, which is not allowed
  285|       |      // in a `constexpr` context.
  286|    369|      if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ {
  ------------------
  |  Branch (286:10): [Folded, False: 369]
  ------------------
  287|      0|         return fallback_load_any<endianness, OutT>(std::forward<InR>(in_range));
  288|    369|      } else {
  289|    369|         const std::span in{in_range};
  290|       |         if constexpr(sizeof(OutT) == 1) {
  291|       |            return static_cast<OutT>(in[0]);
  292|       |         } else if constexpr(endianness == std::endian::native) {
  293|       |            return typecast_copy<OutT>(in);
  294|    369|         } else {
  295|    369|            static_assert(opposite(endianness) == std::endian::native);
  296|    369|            return reverse_bytes(typecast_copy<OutT>(in));
  297|    369|         }
  298|    369|      }
  299|    369|   }());
_ZN5Botan8store_beINS_6detail10AutoDetectEJRKmPhEEEDaDpOT0_:
  745|  10.2k|inline constexpr auto store_be(ParamTs&&... params) {
  746|  10.2k|   return detail::store_any<std::endian::big, ModifierT>(std::forward<ParamTs>(params)...);
  747|  10.2k|}
_ZN5Botan11copy_out_beITkNS_6ranges14spanable_rangeENSt3__16vectorIjNS_16secure_allocatorIjEEEEEEvNS2_4spanIhLm18446744073709551615EEERKT_:
  773|  4.91k|inline void copy_out_be(std::span<uint8_t> out, const InR& in) {
  774|  4.91k|   using T = std::ranges::range_value_t<InR>;
  775|  4.91k|   std::span<const T> in_s{in};
  776|  4.91k|   const auto remaining_bytes = detail::copy_out_any_word_aligned_portion<std::endian::big>(out, in_s);
  777|       |
  778|       |   // copy remaining bytes as a partial word
  779|  4.91k|   for(size_t i = 0; i < remaining_bytes; ++i) {
  ------------------
  |  Branch (779:22): [True: 0, False: 4.91k]
  ------------------
  780|      0|      out[i] = get_byte_var(i, in_s.front());
  781|      0|   }
  782|  4.91k|}
_ZN5Botan6detail33copy_out_any_word_aligned_portionILNSt3__16endianE64206ETkNS0_20unsigned_integralishEjEEmRNS2_4spanIhLm18446744073709551615EEERNS4_IKT0_Lm18446744073709551615EEE:
  752|  4.91k|inline size_t copy_out_any_word_aligned_portion(std::span<uint8_t>& out, std::span<const T>& in) {
  753|  4.91k|   const size_t full_words = out.size() / sizeof(T);
  754|  4.91k|   const size_t full_word_bytes = full_words * sizeof(T);
  755|  4.91k|   const size_t remaining_bytes = out.size() - full_word_bytes;
  756|  4.91k|   BOTAN_ASSERT_NOMSG(in.size_bytes() >= full_word_bytes + remaining_bytes);
  ------------------
  |  |   77|  4.91k|   do {                                                                     \
  |  |   78|  4.91k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  4.91k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 4.91k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  4.91k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 4.91k]
  |  |  ------------------
  ------------------
  757|       |
  758|       |   // copy full words
  759|  4.91k|   store_any<endianness, T>(out.first(full_word_bytes), in.first(full_words));
  760|  4.91k|   out = out.subspan(full_word_bytes);
  761|  4.91k|   in = in.subspan(full_words);
  762|       |
  763|  4.91k|   return remaining_bytes;
  764|  4.91k|}
_ZN5Botan6detail9store_anyILNSt3__16endianE64206EjTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm18446744073709551615EEETkNS4_14spanable_rangeENS6_IKjLm18446744073709551615EEEQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISB_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEEEvOT1_RKSG_:
  603|  4.91k|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) {
  604|  4.91k|   ranges::assert_equal_byte_lengths(out, in);
  605|  4.91k|   using element_type = std::ranges::range_value_t<InR>;
  606|       |
  607|  4.91k|   auto store_elementwise = [&] {
  608|  4.91k|      constexpr size_t bytes_per_element = sizeof(element_type);
  609|  4.91k|      std::span<uint8_t> out_s(out);
  610|  4.91k|      for(auto in_elem : in) {
  611|  4.91k|         store_any<endianness, element_type>(out_s.template first<bytes_per_element>(), in_elem);
  612|  4.91k|         out_s = out_s.subspan(bytes_per_element);
  613|  4.91k|      }
  614|  4.91k|   };
  615|       |
  616|       |   // At compile time we cannot use `typecast_copy` as it uses `std::memcpy`
  617|       |   // internally to copy ranges on a byte-by-byte basis, which is not allowed
  618|       |   // in a `constexpr` context.
  619|  4.91k|   if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ {
  ------------------
  |  Branch (619:7): [Folded, False: 4.91k]
  ------------------
  620|      0|      store_elementwise();
  621|  4.91k|   } else {
  622|       |      if constexpr(endianness == std::endian::native && !custom_storable<element_type>) {
  623|       |         typecast_copy(out, in);
  624|  4.91k|      } else {
  625|  4.91k|         store_elementwise();
  626|  4.91k|      }
  627|  4.91k|   }
  628|  4.91k|}
_ZZN5Botan6detail9store_anyILNSt3__16endianE64206EjTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm18446744073709551615EEETkNS4_14spanable_rangeENS6_IKjLm18446744073709551615EEEQoosr3stdE7same_asINS0_10AutoDetectET0_Esr3stdE7same_asISB_NS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT2_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISJ_EESK_E4type10value_typeEEEEvOT1_RKSG_ENKUlvE_clEv:
  607|  4.91k|   auto store_elementwise = [&] {
  608|  4.91k|      constexpr size_t bytes_per_element = sizeof(element_type);
  609|  4.91k|      std::span<uint8_t> out_s(out);
  610|  31.9k|      for(auto in_elem : in) {
  ------------------
  |  Branch (610:24): [True: 31.9k, False: 4.91k]
  ------------------
  611|  31.9k|         store_any<endianness, element_type>(out_s.template first<bytes_per_element>(), in_elem);
  612|  31.9k|         out_s = out_s.subspan(bytes_per_element);
  613|  31.9k|      }
  614|  4.91k|   };
_ZN5Botan6detail9store_anyILNSt3__16endianE64206EjTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm4EEETpTkNS0_20unsigned_integralishEJjEQaagtsZT2_Li0Eooaasr3stdE7same_asINS0_10AutoDetectET0_E10all_same_vIDpT2_Eaa20unsigned_integralishIS9_E10all_same_vIS9_SB_EEEvOT1_SB_:
  582|  31.9k|inline constexpr void store_any(OutR&& out /* NOLINT(*-std-forward) */, Ts... ins) {
  583|  31.9k|   ranges::assert_exact_byte_length<(sizeof(Ts) + ...)>(out);
  584|  31.9k|   auto store_one = [off = 0]<typename T>(auto o, T i) mutable {
  585|  31.9k|      store_any<endianness, T>(i, o.subspan(off).template first<sizeof(T)>());
  586|  31.9k|      off += sizeof(T);
  587|  31.9k|   };
  588|       |
  589|  31.9k|   (store_one(std::span{out}, ins), ...);
  590|  31.9k|}
_ZZN5Botan6detail9store_anyILNSt3__16endianE64206EjTkNS_6ranges23contiguous_output_rangeIhEENS2_4spanIhLm4EEETpTkNS0_20unsigned_integralishEJjEQaagtsZT2_Li0Eooaasr3stdE7same_asINS0_10AutoDetectET0_E10all_same_vIDpT2_Eaa20unsigned_integralishIS9_E10all_same_vIS9_SB_EEEvOT1_SB_ENUlTyS9_T_E_clIjS7_EEDaS9_SE_:
  584|  31.9k|   auto store_one = [off = 0]<typename T>(auto o, T i) mutable {
  585|  31.9k|      store_any<endianness, T>(i, o.subspan(off).template first<sizeof(T)>());
  586|  31.9k|      off += sizeof(T);
  587|  31.9k|   };
_ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEmTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm8EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_:
  278|  7.99k|inline constexpr WrappedOutT load_any(InR&& in_range) {
  279|  7.99k|   using OutT = detail::wrapped_type<WrappedOutT>;
  280|  7.99k|   ranges::assert_exact_byte_length<sizeof(OutT)>(in_range);
  281|       |
  282|  7.99k|   return detail::wrap_strong_type_or_enum<WrappedOutT>([&]() -> OutT {
  283|       |      // At compile time we cannot use `typecast_copy` as it uses `std::memcpy`
  284|       |      // internally to copy ranges on a byte-by-byte basis, which is not allowed
  285|       |      // in a `constexpr` context.
  286|  7.99k|      if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ {
  287|  7.99k|         return fallback_load_any<endianness, OutT>(std::forward<InR>(in_range));
  288|  7.99k|      } else {
  289|  7.99k|         const std::span in{in_range};
  290|  7.99k|         if constexpr(sizeof(OutT) == 1) {
  291|  7.99k|            return static_cast<OutT>(in[0]);
  292|  7.99k|         } else if constexpr(endianness == std::endian::native) {
  293|  7.99k|            return typecast_copy<OutT>(in);
  294|  7.99k|         } else {
  295|  7.99k|            static_assert(opposite(endianness) == std::endian::native);
  296|  7.99k|            return reverse_bytes(typecast_copy<OutT>(in));
  297|  7.99k|         }
  298|  7.99k|      }
  299|  7.99k|   }());
  300|  7.99k|}
_ZN5Botan6detail24wrap_strong_type_or_enumITkNS0_20unsigned_integralishEmTkNSt3__117unsigned_integralEmEEDaT0_:
  200|  19.7k|constexpr auto wrap_strong_type_or_enum(T t) {
  201|       |   if constexpr(std::is_enum_v<OutT>) {
  202|       |      return static_cast<OutT>(t);
  203|  19.7k|   } else {
  204|  19.7k|      return Botan::wrap_strong_type<OutT>(t);
  205|  19.7k|   }
  206|  19.7k|}
_ZZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEmTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm8EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_ENKUlvE_clEv:
  282|  7.99k|   return detail::wrap_strong_type_or_enum<WrappedOutT>([&]() -> OutT {
  283|       |      // At compile time we cannot use `typecast_copy` as it uses `std::memcpy`
  284|       |      // internally to copy ranges on a byte-by-byte basis, which is not allowed
  285|       |      // in a `constexpr` context.
  286|  7.99k|      if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ {
  ------------------
  |  Branch (286:10): [Folded, False: 7.99k]
  ------------------
  287|      0|         return fallback_load_any<endianness, OutT>(std::forward<InR>(in_range));
  288|  7.99k|      } else {
  289|  7.99k|         const std::span in{in_range};
  290|       |         if constexpr(sizeof(OutT) == 1) {
  291|       |            return static_cast<OutT>(in[0]);
  292|       |         } else if constexpr(endianness == std::endian::native) {
  293|       |            return typecast_copy<OutT>(in);
  294|  7.99k|         } else {
  295|  7.99k|            static_assert(opposite(endianness) == std::endian::native);
  296|  7.99k|            return reverse_bytes(typecast_copy<OutT>(in));
  297|  7.99k|         }
  298|  7.99k|      }
  299|  7.99k|   }());
_ZN5Botan7load_beImJNSt3__14spanIKhLm8EEEEEEDaDpOT0_:
  504|  7.99k|inline constexpr auto load_be(ParamTs&&... params) {
  505|  7.99k|   return detail::load_any<std::endian::big, OutT>(std::forward<ParamTs>(params)...);
  506|  7.99k|}
_ZN5Botan7load_beImJRNSt3__15arrayIhLm8EEEEEEDaDpOT0_:
  504|  11.7k|inline constexpr auto load_be(ParamTs&&... params) {
  505|  11.7k|   return detail::load_any<std::endian::big, OutT>(std::forward<ParamTs>(params)...);
  506|  11.7k|}
_ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEmTkNS_6ranges16contiguous_rangeIhEERNS2_5arrayIhLm8EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_:
  278|  11.7k|inline constexpr WrappedOutT load_any(InR&& in_range) {
  279|  11.7k|   using OutT = detail::wrapped_type<WrappedOutT>;
  280|  11.7k|   ranges::assert_exact_byte_length<sizeof(OutT)>(in_range);
  281|       |
  282|  11.7k|   return detail::wrap_strong_type_or_enum<WrappedOutT>([&]() -> OutT {
  283|       |      // At compile time we cannot use `typecast_copy` as it uses `std::memcpy`
  284|       |      // internally to copy ranges on a byte-by-byte basis, which is not allowed
  285|       |      // in a `constexpr` context.
  286|  11.7k|      if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ {
  287|  11.7k|         return fallback_load_any<endianness, OutT>(std::forward<InR>(in_range));
  288|  11.7k|      } else {
  289|  11.7k|         const std::span in{in_range};
  290|  11.7k|         if constexpr(sizeof(OutT) == 1) {
  291|  11.7k|            return static_cast<OutT>(in[0]);
  292|  11.7k|         } else if constexpr(endianness == std::endian::native) {
  293|  11.7k|            return typecast_copy<OutT>(in);
  294|  11.7k|         } else {
  295|  11.7k|            static_assert(opposite(endianness) == std::endian::native);
  296|  11.7k|            return reverse_bytes(typecast_copy<OutT>(in));
  297|  11.7k|         }
  298|  11.7k|      }
  299|  11.7k|   }());
  300|  11.7k|}
_ZZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEmTkNS_6ranges16contiguous_rangeIhEERNS2_5arrayIhLm8EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_ENKUlvE_clEv:
  282|  11.7k|   return detail::wrap_strong_type_or_enum<WrappedOutT>([&]() -> OutT {
  283|       |      // At compile time we cannot use `typecast_copy` as it uses `std::memcpy`
  284|       |      // internally to copy ranges on a byte-by-byte basis, which is not allowed
  285|       |      // in a `constexpr` context.
  286|  11.7k|      if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ {
  ------------------
  |  Branch (286:10): [Folded, False: 11.7k]
  ------------------
  287|      0|         return fallback_load_any<endianness, OutT>(std::forward<InR>(in_range));
  288|  11.7k|      } else {
  289|  11.7k|         const std::span in{in_range};
  290|       |         if constexpr(sizeof(OutT) == 1) {
  291|       |            return static_cast<OutT>(in[0]);
  292|       |         } else if constexpr(endianness == std::endian::native) {
  293|       |            return typecast_copy<OutT>(in);
  294|  11.7k|         } else {
  295|  11.7k|            static_assert(opposite(endianness) == std::endian::native);
  296|  11.7k|            return reverse_bytes(typecast_copy<OutT>(in));
  297|  11.7k|         }
  298|  11.7k|      }
  299|  11.7k|   }());
_ZN5Botan7load_beItJPKhRmEEEDaDpOT0_:
  504|  4.14k|inline constexpr auto load_be(ParamTs&&... params) {
  505|  4.14k|   return detail::load_any<std::endian::big, OutT>(std::forward<ParamTs>(params)...);
  506|  4.14k|}
_ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEtEET0_PKhm:
  454|  4.14k|inline constexpr OutT load_any(const uint8_t in[], size_t off) {
  455|       |   // asserts that *in points to enough bytes to read at offset off
  456|  4.14k|   constexpr size_t out_size = sizeof(OutT);
  457|  4.14k|   return load_any<endianness, OutT>(std::span<const uint8_t, out_size>(in + off * out_size, out_size));
  458|  4.14k|}
_ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEtTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm2EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_:
  278|  4.14k|inline constexpr WrappedOutT load_any(InR&& in_range) {
  279|  4.14k|   using OutT = detail::wrapped_type<WrappedOutT>;
  280|  4.14k|   ranges::assert_exact_byte_length<sizeof(OutT)>(in_range);
  281|       |
  282|  4.14k|   return detail::wrap_strong_type_or_enum<WrappedOutT>([&]() -> OutT {
  283|       |      // At compile time we cannot use `typecast_copy` as it uses `std::memcpy`
  284|       |      // internally to copy ranges on a byte-by-byte basis, which is not allowed
  285|       |      // in a `constexpr` context.
  286|  4.14k|      if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ {
  287|  4.14k|         return fallback_load_any<endianness, OutT>(std::forward<InR>(in_range));
  288|  4.14k|      } else {
  289|  4.14k|         const std::span in{in_range};
  290|  4.14k|         if constexpr(sizeof(OutT) == 1) {
  291|  4.14k|            return static_cast<OutT>(in[0]);
  292|  4.14k|         } else if constexpr(endianness == std::endian::native) {
  293|  4.14k|            return typecast_copy<OutT>(in);
  294|  4.14k|         } else {
  295|  4.14k|            static_assert(opposite(endianness) == std::endian::native);
  296|  4.14k|            return reverse_bytes(typecast_copy<OutT>(in));
  297|  4.14k|         }
  298|  4.14k|      }
  299|  4.14k|   }());
  300|  4.14k|}
_ZN5Botan6detail24wrap_strong_type_or_enumITkNS0_20unsigned_integralishEtTkNSt3__117unsigned_integralEtEEDaT0_:
  200|  4.14k|constexpr auto wrap_strong_type_or_enum(T t) {
  201|       |   if constexpr(std::is_enum_v<OutT>) {
  202|       |      return static_cast<OutT>(t);
  203|  4.14k|   } else {
  204|  4.14k|      return Botan::wrap_strong_type<OutT>(t);
  205|  4.14k|   }
  206|  4.14k|}
_ZZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEtTkNS_6ranges16contiguous_rangeIhEENS2_4spanIKhLm2EEEQnt15custom_loadableINS0_19wrapped_type_helperIu14__remove_cvrefIT0_EE4typeEEEESA_OT1_ENKUlvE_clEv:
  282|  4.14k|   return detail::wrap_strong_type_or_enum<WrappedOutT>([&]() -> OutT {
  283|       |      // At compile time we cannot use `typecast_copy` as it uses `std::memcpy`
  284|       |      // internally to copy ranges on a byte-by-byte basis, which is not allowed
  285|       |      // in a `constexpr` context.
  286|  4.14k|      if(std::is_constant_evaluated()) /* TODO: C++23: if consteval {} */ {
  ------------------
  |  Branch (286:10): [Folded, False: 4.14k]
  ------------------
  287|      0|         return fallback_load_any<endianness, OutT>(std::forward<InR>(in_range));
  288|  4.14k|      } else {
  289|  4.14k|         const std::span in{in_range};
  290|       |         if constexpr(sizeof(OutT) == 1) {
  291|       |            return static_cast<OutT>(in[0]);
  292|       |         } else if constexpr(endianness == std::endian::native) {
  293|       |            return typecast_copy<OutT>(in);
  294|  4.14k|         } else {
  295|  4.14k|            static_assert(opposite(endianness) == std::endian::native);
  296|  4.14k|            return reverse_bytes(typecast_copy<OutT>(in));
  297|  4.14k|         }
  298|  4.14k|      }
  299|  4.14k|   }());
_ZN5Botan7load_beIjJPKhRmEEEDaDpOT0_:
  504|    103|inline constexpr auto load_be(ParamTs&&... params) {
  505|    103|   return detail::load_any<std::endian::big, OutT>(std::forward<ParamTs>(params)...);
  506|    103|}
_ZN5Botan6detail8load_anyILNSt3__16endianE64206ETkNS0_20unsigned_integralishEjEET0_PKhm:
  454|    369|inline constexpr OutT load_any(const uint8_t in[], size_t off) {
  455|       |   // asserts that *in points to enough bytes to read at offset off
  456|    369|   constexpr size_t out_size = sizeof(OutT);
  457|    369|   return load_any<endianness, OutT>(std::span<const uint8_t, out_size>(in + off * out_size, out_size));
  458|    369|}
_ZN5Botan7load_beIjJPKhiEEEDaDpOT0_:
  504|    266|inline constexpr auto load_be(ParamTs&&... params) {
  505|    266|   return detail::load_any<std::endian::big, OutT>(std::forward<ParamTs>(params)...);
  506|    266|}

_ZN5Botan18MerkleDamgard_HashINS_5SHA_1EEC2Ev:
   42|    614|      MerkleDamgard_Hash() { clear(); }
_ZN5Botan18MerkleDamgard_HashINS_5SHA_1EE5clearEv:
   70|  3.07k|      void clear() {
   71|  3.07k|         MD::init(m_digest);
   72|  3.07k|         m_buffer.clear();
   73|  3.07k|         m_count = 0;
   74|  3.07k|      }
_ZN5Botan18MerkleDamgard_HashINS_7SHA_256EEC2Ev:
   42|    614|      MerkleDamgard_Hash() { clear(); }
_ZN5Botan18MerkleDamgard_HashINS_7SHA_256EE5clearEv:
   70|  3.07k|      void clear() {
   71|  3.07k|         MD::init(m_digest);
   72|  3.07k|         m_buffer.clear();
   73|  3.07k|         m_count = 0;
   74|  3.07k|      }
_ZN5Botan18MerkleDamgard_HashINS_5SHA_1EE6updateENSt3__14spanIKhLm18446744073709551615EEE:
   44|  2.45k|      void update(std::span<const uint8_t> input) {
   45|  2.45k|         BufferSlicer in(input);
   46|       |
   47|  6.92k|         while(!in.empty()) {
  ------------------
  |  Branch (47:16): [True: 4.46k, False: 2.45k]
  ------------------
   48|  4.46k|            if(const auto one_block = m_buffer.handle_unaligned_data(in)) {
  ------------------
  |  Branch (48:27): [True: 0, False: 4.46k]
  ------------------
   49|      0|               MD::compress_n(m_digest, one_block.value(), 1);
   50|      0|            }
   51|       |
   52|  4.46k|            if(m_buffer.in_alignment()) {
  ------------------
  |  Branch (52:16): [True: 2.01k, False: 2.45k]
  ------------------
   53|  2.01k|               const auto [aligned_data, full_blocks] = m_buffer.aligned_data_to_process(in);
   54|  2.01k|               if(full_blocks > 0) {
  ------------------
  |  Branch (54:19): [True: 2.01k, False: 0]
  ------------------
   55|  2.01k|                  MD::compress_n(m_digest, aligned_data, full_blocks);
   56|  2.01k|               }
   57|  2.01k|            }
   58|  4.46k|         }
   59|       |
   60|  2.45k|         m_count += input.size();
   61|  2.45k|      }
_ZN5Botan18MerkleDamgard_HashINS_5SHA_1EE5finalENSt3__14spanIhLm18446744073709551615EEE:
   63|  2.45k|      void final(std::span<uint8_t> output) {
   64|  2.45k|         append_padding_bit();
   65|  2.45k|         append_counter_and_finalize();
   66|  2.45k|         copy_output(output);
   67|  2.45k|         clear();
   68|  2.45k|      }
_ZN5Botan18MerkleDamgard_HashINS_5SHA_1EE18append_padding_bitEv:
   77|  2.45k|      void append_padding_bit() {
   78|  2.45k|         BOTAN_ASSERT_NOMSG(!m_buffer.ready_to_consume());
  ------------------
  |  |   77|  2.45k|   do {                                                                     \
  |  |   78|  2.45k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  2.45k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 2.45k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  2.45k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 2.45k]
  |  |  ------------------
  ------------------
   79|  2.45k|         if constexpr(MD::bit_endianness == MD_Endian::Big) {
   80|  2.45k|            const uint8_t final_byte = 0x80;
   81|  2.45k|            m_buffer.append({&final_byte, 1});
   82|       |         } else {
   83|       |            const uint8_t final_byte = 0x01;
   84|       |            m_buffer.append({&final_byte, 1});
   85|       |         }
   86|  2.45k|      }
_ZN5Botan18MerkleDamgard_HashINS_5SHA_1EE27append_counter_and_finalizeEv:
   88|  2.45k|      void append_counter_and_finalize() {
   89|       |         // Compress the remaining data if the final data block does not provide
   90|       |         // enough space for the counter bytes.
   91|  2.45k|         if(m_buffer.elements_until_alignment() < MD::ctr_bytes) {
  ------------------
  |  Branch (91:13): [True: 329, False: 2.12k]
  ------------------
   92|    329|            m_buffer.fill_up_with_zeros();
   93|    329|            MD::compress_n(m_digest, m_buffer.consume(), 1);
   94|    329|         }
   95|       |
   96|       |         // Make sure that any remaining bytes in the very last block are zero.
   97|  2.45k|         BOTAN_ASSERT_NOMSG(m_buffer.elements_until_alignment() >= MD::ctr_bytes);
  ------------------
  |  |   77|  2.45k|   do {                                                                     \
  |  |   78|  2.45k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  2.45k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 2.45k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  2.45k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 2.45k]
  |  |  ------------------
  ------------------
   98|  2.45k|         m_buffer.fill_up_with_zeros();
   99|       |
  100|       |         // Replace a bunch of the right-most zero-padding with the counter bytes.
  101|  2.45k|         const uint64_t bit_count = m_count * 8;
  102|  2.45k|         auto last_bytes = m_buffer.directly_modify_last(sizeof(bit_count));
  103|  2.45k|         if constexpr(MD::byte_endianness == MD_Endian::Big) {
  104|  2.45k|            store_be(bit_count, last_bytes.data());
  105|       |         } else {
  106|       |            store_le(bit_count, last_bytes.data());
  107|       |         }
  108|       |
  109|       |         // Compress the very last block.
  110|  2.45k|         MD::compress_n(m_digest, m_buffer.consume(), 1);
  111|  2.45k|      }
_ZN5Botan18MerkleDamgard_HashINS_5SHA_1EE11copy_outputENSt3__14spanIhLm18446744073709551615EEE:
  113|  2.45k|      void copy_output(std::span<uint8_t> output) {
  114|  2.45k|         BOTAN_ASSERT_NOMSG(output.size() >= MD::output_bytes);
  ------------------
  |  |   77|  2.45k|   do {                                                                     \
  |  |   78|  2.45k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  2.45k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 2.45k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  2.45k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 2.45k]
  |  |  ------------------
  ------------------
  115|       |
  116|  2.45k|         if constexpr(MD::byte_endianness == MD_Endian::Big) {
  117|  2.45k|            copy_out_be(output.first(MD::output_bytes), m_digest);
  118|       |         } else {
  119|       |            copy_out_le(output.first(MD::output_bytes), m_digest);
  120|       |         }
  121|  2.45k|      }
_ZN5Botan18MerkleDamgard_HashINS_7SHA_256EE6updateENSt3__14spanIKhLm18446744073709551615EEE:
   44|  2.45k|      void update(std::span<const uint8_t> input) {
   45|  2.45k|         BufferSlicer in(input);
   46|       |
   47|  6.92k|         while(!in.empty()) {
  ------------------
  |  Branch (47:16): [True: 4.46k, False: 2.45k]
  ------------------
   48|  4.46k|            if(const auto one_block = m_buffer.handle_unaligned_data(in)) {
  ------------------
  |  Branch (48:27): [True: 0, False: 4.46k]
  ------------------
   49|      0|               MD::compress_n(m_digest, one_block.value(), 1);
   50|      0|            }
   51|       |
   52|  4.46k|            if(m_buffer.in_alignment()) {
  ------------------
  |  Branch (52:16): [True: 2.01k, False: 2.45k]
  ------------------
   53|  2.01k|               const auto [aligned_data, full_blocks] = m_buffer.aligned_data_to_process(in);
   54|  2.01k|               if(full_blocks > 0) {
  ------------------
  |  Branch (54:19): [True: 2.01k, False: 0]
  ------------------
   55|  2.01k|                  MD::compress_n(m_digest, aligned_data, full_blocks);
   56|  2.01k|               }
   57|  2.01k|            }
   58|  4.46k|         }
   59|       |
   60|  2.45k|         m_count += input.size();
   61|  2.45k|      }
_ZN5Botan18MerkleDamgard_HashINS_7SHA_256EE5finalENSt3__14spanIhLm18446744073709551615EEE:
   63|  2.45k|      void final(std::span<uint8_t> output) {
   64|  2.45k|         append_padding_bit();
   65|  2.45k|         append_counter_and_finalize();
   66|  2.45k|         copy_output(output);
   67|  2.45k|         clear();
   68|  2.45k|      }
_ZN5Botan18MerkleDamgard_HashINS_7SHA_256EE18append_padding_bitEv:
   77|  2.45k|      void append_padding_bit() {
   78|  2.45k|         BOTAN_ASSERT_NOMSG(!m_buffer.ready_to_consume());
  ------------------
  |  |   77|  2.45k|   do {                                                                     \
  |  |   78|  2.45k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  2.45k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 2.45k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  2.45k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 2.45k]
  |  |  ------------------
  ------------------
   79|  2.45k|         if constexpr(MD::bit_endianness == MD_Endian::Big) {
   80|  2.45k|            const uint8_t final_byte = 0x80;
   81|  2.45k|            m_buffer.append({&final_byte, 1});
   82|       |         } else {
   83|       |            const uint8_t final_byte = 0x01;
   84|       |            m_buffer.append({&final_byte, 1});
   85|       |         }
   86|  2.45k|      }
_ZN5Botan18MerkleDamgard_HashINS_7SHA_256EE27append_counter_and_finalizeEv:
   88|  2.45k|      void append_counter_and_finalize() {
   89|       |         // Compress the remaining data if the final data block does not provide
   90|       |         // enough space for the counter bytes.
   91|  2.45k|         if(m_buffer.elements_until_alignment() < MD::ctr_bytes) {
  ------------------
  |  Branch (91:13): [True: 329, False: 2.12k]
  ------------------
   92|    329|            m_buffer.fill_up_with_zeros();
   93|    329|            MD::compress_n(m_digest, m_buffer.consume(), 1);
   94|    329|         }
   95|       |
   96|       |         // Make sure that any remaining bytes in the very last block are zero.
   97|  2.45k|         BOTAN_ASSERT_NOMSG(m_buffer.elements_until_alignment() >= MD::ctr_bytes);
  ------------------
  |  |   77|  2.45k|   do {                                                                     \
  |  |   78|  2.45k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  2.45k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 2.45k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  2.45k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 2.45k]
  |  |  ------------------
  ------------------
   98|  2.45k|         m_buffer.fill_up_with_zeros();
   99|       |
  100|       |         // Replace a bunch of the right-most zero-padding with the counter bytes.
  101|  2.45k|         const uint64_t bit_count = m_count * 8;
  102|  2.45k|         auto last_bytes = m_buffer.directly_modify_last(sizeof(bit_count));
  103|  2.45k|         if constexpr(MD::byte_endianness == MD_Endian::Big) {
  104|  2.45k|            store_be(bit_count, last_bytes.data());
  105|       |         } else {
  106|       |            store_le(bit_count, last_bytes.data());
  107|       |         }
  108|       |
  109|       |         // Compress the very last block.
  110|  2.45k|         MD::compress_n(m_digest, m_buffer.consume(), 1);
  111|  2.45k|      }
_ZN5Botan18MerkleDamgard_HashINS_7SHA_256EE11copy_outputENSt3__14spanIhLm18446744073709551615EEE:
  113|  2.45k|      void copy_output(std::span<uint8_t> output) {
  114|  2.45k|         BOTAN_ASSERT_NOMSG(output.size() >= MD::output_bytes);
  ------------------
  |  |   77|  2.45k|   do {                                                                     \
  |  |   78|  2.45k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  2.45k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 2.45k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  2.45k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 2.45k]
  |  |  ------------------
  ------------------
  115|       |
  116|  2.45k|         if constexpr(MD::byte_endianness == MD_Endian::Big) {
  117|  2.45k|            copy_out_be(output.first(MD::output_bytes), m_digest);
  118|       |         } else {
  119|       |            copy_out_le(output.first(MD::output_bytes), m_digest);
  120|       |         }
  121|  2.45k|      }

_ZN5Botan15bytes_to_stringENSt3__14spanIKhLm18446744073709551615EEE:
   76|  36.8k|inline std::string bytes_to_string(std::span<const uint8_t> bytes) {
   77|  36.8k|   return std::string(reinterpret_cast<const char*>(bytes.data()), bytes.size());
   78|  36.8k|}
_ZN5Botan14zeroize_bufferITkNSt3__117unsigned_integralEhEEvPT_m:
   37|  11.7k|inline void zeroize_buffer(T buf[], size_t n) {
   38|  11.7k|   if(n > 0) {
  ------------------
  |  Branch (38:7): [True: 11.7k, False: 0]
  ------------------
   39|  11.7k|      std::memset(buf, 0, sizeof(T) * n);
   40|  11.7k|   }
   41|  11.7k|}

_ZN5Botan4rotlILm5ETkNSt3__117unsigned_integralEjEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_:
   25|  1.69M|{
   26|  1.69M|   return static_cast<T>((input << ROT) | (input >> (8 * sizeof(T) - ROT)));
   27|  1.69M|}
_ZN5Botan4rotlILm30ETkNSt3__117unsigned_integralEjEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_:
   25|  1.69M|{
   26|  1.69M|   return static_cast<T>((input << ROT) | (input >> (8 * sizeof(T) - ROT)));
   27|  1.69M|}
_ZN5Botan3rhoILm6ELm11ELm25ETkNSt3__117unsigned_integralEjEET2_S2_:
   53|  1.35M|BOTAN_FORCE_INLINE constexpr T rho(T x) {
   54|  1.35M|   return rotr<R1>(x) ^ rotr<R2>(x) ^ rotr<R3>(x);
   55|  1.35M|}
_ZN5Botan4rotrILm6ETkNSt3__117unsigned_integralEjEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_:
   37|  1.35M|{
   38|  1.35M|   return static_cast<T>((input >> ROT) | (input << (8 * sizeof(T) - ROT)));
   39|  1.35M|}
_ZN5Botan4rotrILm11ETkNSt3__117unsigned_integralEjEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_:
   37|  1.35M|{
   38|  1.35M|   return static_cast<T>((input >> ROT) | (input << (8 * sizeof(T) - ROT)));
   39|  1.35M|}
_ZN5Botan4rotrILm25ETkNSt3__117unsigned_integralEjEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_:
   37|  1.35M|{
   38|  1.35M|   return static_cast<T>((input >> ROT) | (input << (8 * sizeof(T) - ROT)));
   39|  1.35M|}
_ZN5Botan3rhoILm2ELm13ELm22ETkNSt3__117unsigned_integralEjEET2_S2_:
   53|  1.35M|BOTAN_FORCE_INLINE constexpr T rho(T x) {
   54|  1.35M|   return rotr<R1>(x) ^ rotr<R2>(x) ^ rotr<R3>(x);
   55|  1.35M|}
_ZN5Botan4rotrILm2ETkNSt3__117unsigned_integralEjEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_:
   37|  1.35M|{
   38|  1.35M|   return static_cast<T>((input >> ROT) | (input << (8 * sizeof(T) - ROT)));
   39|  1.35M|}
_ZN5Botan4rotrILm13ETkNSt3__117unsigned_integralEjEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_:
   37|  1.35M|{
   38|  1.35M|   return static_cast<T>((input >> ROT) | (input << (8 * sizeof(T) - ROT)));
   39|  1.35M|}
_ZN5Botan4rotrILm22ETkNSt3__117unsigned_integralEjEET0_S2_QaagtT_Li0EltT_mlLi8EstS2_:
   37|  1.35M|{
   38|  1.35M|   return static_cast<T>((input >> ROT) | (input << (8 * sizeof(T) - ROT)));
   39|  1.35M|}

_ZN5Botan8round_upEmm:
   26|  21.4k|constexpr inline size_t round_up(size_t n, size_t align_to) {
   27|       |   // Arguably returning n in this case would also be sensible
   28|  21.4k|   BOTAN_ARG_CHECK(align_to != 0, "align_to must not be 0");
  ------------------
  |  |   35|  21.4k|   do {                                                          \
  |  |   36|  21.4k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */              \
  |  |   37|  21.4k|      if(!(expr)) {                                              \
  |  |  ------------------
  |  |  |  Branch (37:10): [True: 0, False: 21.4k]
  |  |  ------------------
  |  |   38|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */     \
  |  |   39|      0|         Botan::throw_invalid_argument(msg, __func__, __FILE__); \
  |  |   40|      0|      }                                                          \
  |  |   41|  21.4k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (41:12): [Folded, False: 21.4k]
  |  |  ------------------
  ------------------
   29|       |
   30|  21.4k|   if(n % align_to > 0) {
  ------------------
  |  Branch (30:7): [True: 20.6k, False: 791]
  ------------------
   31|  20.6k|      const size_t adj = align_to - (n % align_to);
   32|  20.6k|      BOTAN_ARG_CHECK(n + adj >= n, "Integer overflow during rounding");
  ------------------
  |  |   35|  20.6k|   do {                                                          \
  |  |   36|  20.6k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */              \
  |  |   37|  20.6k|      if(!(expr)) {                                              \
  |  |  ------------------
  |  |  |  Branch (37:10): [True: 0, False: 20.6k]
  |  |  ------------------
  |  |   38|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */     \
  |  |   39|      0|         Botan::throw_invalid_argument(msg, __func__, __FILE__); \
  |  |   40|      0|      }                                                          \
  |  |   41|  20.6k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (41:12): [Folded, False: 20.6k]
  |  |  ------------------
  ------------------
   33|  20.6k|      n += adj;
   34|  20.6k|   }
   35|  21.4k|   return n;
   36|  21.4k|}

_ZNK5Botan5SHA_113output_lengthEv:
   34|  2.45k|      size_t output_length() const override { return 20; }

_ZN5Botan6SHA1_F2F1EjRjjjS1_j:
   21|   423k|inline void F1(uint32_t A, uint32_t& B, uint32_t C, uint32_t D, uint32_t& E, uint32_t M) {
   22|   423k|   E += choose(B, C, D) + M + rotl<5>(A);
   23|   423k|   B = rotl<30>(B);
   24|   423k|}
_ZN5Botan6SHA1_F2F2EjRjjjS1_j:
   26|   423k|inline void F2(uint32_t A, uint32_t& B, uint32_t C, uint32_t D, uint32_t& E, uint32_t M) {
   27|   423k|   E += (B ^ C ^ D) + M + rotl<5>(A);
   28|   423k|   B = rotl<30>(B);
   29|   423k|}
_ZN5Botan6SHA1_F2F3EjRjjjS1_j:
   31|   423k|inline void F3(uint32_t A, uint32_t& B, uint32_t C, uint32_t D, uint32_t& E, uint32_t M) {
   32|   423k|   E += majority(B, C, D) + M + rotl<5>(A);
   33|   423k|   B = rotl<30>(B);
   34|   423k|}
_ZN5Botan6SHA1_F2F4EjRjjjS1_j:
   37|   423k|inline void F4(uint32_t A, uint32_t& B, uint32_t C, uint32_t D, uint32_t& E, uint32_t M) {
   38|   423k|   E += (B ^ C ^ D) + M + rotl<5>(A);
   39|   423k|   B = rotl<30>(B);
   40|   423k|}

_ZNK5Botan7SHA_25613output_lengthEv:
   75|  2.45k|      size_t output_length() const override { return output_bytes; }

_ZN5Botan9SHA2_32_FEjjjRjjjjS0_j:
   42|  1.35M|   uint32_t A, uint32_t B, uint32_t C, uint32_t& D, uint32_t E, uint32_t F, uint32_t G, uint32_t& H, uint32_t M) {
   43|  1.35M|   H += rho<6, 11, 25>(E) + choose(E, F, G) + M;
   44|  1.35M|   D += H;
   45|  1.35M|   H += rho<2, 13, 22>(A) + majority(A, B, C);
   46|  1.35M|}

_ZN5Botan9SIMD_4x32C2EDv2_x:
  944|   885k|      explicit BOTAN_FN_ISA_SIMD_4X32 SIMD_4x32(native_simd_type x) noexcept : m_simd(x) {}
_ZN5Botan9SIMD_4x327load_beEPKv:
  189|  15.5k|      static SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 load_be(const void* in) noexcept {
  190|  15.5k|#if defined(BOTAN_SIMD_USE_SSSE3) || defined(BOTAN_SIMD_USE_LSX) || defined(BOTAN_SIMD_USE_SIMD128)
  191|  15.5k|         return load_le(in).bswap();
  192|       |
  193|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
  194|       |         uint32_t R0 = Botan::load_be<uint32_t>(reinterpret_cast<const uint8_t*>(in), 0);
  195|       |         uint32_t R1 = Botan::load_be<uint32_t>(reinterpret_cast<const uint8_t*>(in), 1);
  196|       |         uint32_t R2 = Botan::load_be<uint32_t>(reinterpret_cast<const uint8_t*>(in), 2);
  197|       |         uint32_t R3 = Botan::load_be<uint32_t>(reinterpret_cast<const uint8_t*>(in), 3);
  198|       |         __vector unsigned int val = {R0, R1, R2, R3};
  199|       |         return SIMD_4x32(val);
  200|       |
  201|       |#elif defined(BOTAN_SIMD_USE_NEON)
  202|       |         SIMD_4x32 l(vld1q_u32(static_cast<const uint32_t*>(in)));
  203|       |         if constexpr(std::endian::native == std::endian::little) {
  204|       |            return l.bswap();
  205|       |         } else {
  206|       |            return l;
  207|       |         }
  208|       |#endif
  209|  15.5k|      }
_ZN5Botan9SIMD_4x327load_leEPKv:
  162|  77.6k|      static SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 load_le(const void* in) noexcept {
  163|  77.6k|#if defined(BOTAN_SIMD_USE_SSSE3)
  164|  77.6k|         return SIMD_4x32(_mm_loadu_si128(reinterpret_cast<const __m128i*>(in)));
  165|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
  166|       |         uint32_t R0 = Botan::load_le<uint32_t>(reinterpret_cast<const uint8_t*>(in), 0);
  167|       |         uint32_t R1 = Botan::load_le<uint32_t>(reinterpret_cast<const uint8_t*>(in), 1);
  168|       |         uint32_t R2 = Botan::load_le<uint32_t>(reinterpret_cast<const uint8_t*>(in), 2);
  169|       |         uint32_t R3 = Botan::load_le<uint32_t>(reinterpret_cast<const uint8_t*>(in), 3);
  170|       |         __vector unsigned int val = {R0, R1, R2, R3};
  171|       |         return SIMD_4x32(val);
  172|       |#elif defined(BOTAN_SIMD_USE_NEON)
  173|       |         SIMD_4x32 l(vld1q_u32(static_cast<const uint32_t*>(in)));
  174|       |         if constexpr(std::endian::native == std::endian::big) {
  175|       |            return l.bswap();
  176|       |         } else {
  177|       |            return l;
  178|       |         }
  179|       |#elif defined(BOTAN_SIMD_USE_LSX)
  180|       |         return SIMD_4x32(__lsx_vld(in, 0));
  181|       |#elif defined(BOTAN_SIMD_USE_SIMD128)
  182|       |         return SIMD_4x32(wasm_v128_load(in));
  183|       |#endif
  184|  77.6k|      }
_ZNK5Botan9SIMD_4x325bswapEv:
  576|  15.5k|      BOTAN_FN_ISA_SIMD_4X32 SIMD_4x32 bswap() const noexcept {
  577|  15.5k|#if defined(BOTAN_SIMD_USE_SSSE3)
  578|  15.5k|         const auto idx = _mm_set_epi8(12, 13, 14, 15, 8, 9, 10, 11, 4, 5, 6, 7, 0, 1, 2, 3);
  579|       |
  580|  15.5k|         return SIMD_4x32(_mm_shuffle_epi8(raw(), idx));
  581|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
  582|       |   #ifdef BOTAN_SIMD_USE_VSX
  583|       |         return SIMD_4x32(vec_revb(m_simd));
  584|       |   #else
  585|       |         const __vector unsigned char rev[1] = {
  586|       |            {3, 2, 1, 0, 7, 6, 5, 4, 11, 10, 9, 8, 15, 14, 13, 12},
  587|       |         };
  588|       |
  589|       |         return SIMD_4x32(vec_perm(m_simd, m_simd, rev[0]));
  590|       |   #endif
  591|       |
  592|       |#elif defined(BOTAN_SIMD_USE_NEON)
  593|       |         return SIMD_4x32(vreinterpretq_u32_u8(vrev32q_u8(vreinterpretq_u8_u32(m_simd))));
  594|       |#elif defined(BOTAN_SIMD_USE_LSX)
  595|       |         return SIMD_4x32(__lsx_vshuf4i_b(m_simd, 0b00011011));
  596|       |#elif defined(BOTAN_SIMD_USE_SIMD128)
  597|       |         return SIMD_4x32(wasm_i8x16_shuffle(m_simd, m_simd, 3, 2, 1, 0, 7, 6, 5, 4, 11, 10, 9, 8, 15, 14, 13, 12));
  598|       |#endif
  599|  15.5k|      }
_ZNK5Botan9SIMD_4x323rawEv:
  942|   730k|      native_simd_type BOTAN_FN_ISA_SIMD_4X32 raw() const noexcept { return m_simd; }
_ZNK5Botan9SIMD_4x32plERKS0_:
  385|  62.1k|      SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 operator+(const SIMD_4x32& other) const noexcept {
  386|  62.1k|         SIMD_4x32 retval(*this);
  387|  62.1k|         retval += other;
  388|  62.1k|         return retval;
  389|  62.1k|      }
_ZN5Botan9SIMD_4x32pLERKS0_:
  427|   248k|      void BOTAN_FN_ISA_SIMD_4X32 operator+=(const SIMD_4x32& other) noexcept {
  428|   248k|#if defined(BOTAN_SIMD_USE_SSSE3)
  429|   248k|         m_simd = _mm_add_epi32(m_simd, other.m_simd);
  430|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
  431|       |         m_simd = vec_add(m_simd, other.m_simd);
  432|       |#elif defined(BOTAN_SIMD_USE_NEON)
  433|       |         m_simd = vaddq_u32(m_simd, other.m_simd);
  434|       |#elif defined(BOTAN_SIMD_USE_LSX)
  435|       |         m_simd = __lsx_vadd_w(m_simd, other.m_simd);
  436|       |#elif defined(BOTAN_SIMD_USE_SIMD128)
  437|       |         m_simd = wasm_i32x4_add(m_simd, other.m_simd);
  438|       |#endif
  439|   248k|      }
_ZNK5Botan9SIMD_4x328store_leEPj:
  219|  62.1k|      void BOTAN_FN_ISA_SIMD_4X32 store_le(uint32_t out[4]) const noexcept {
  220|  62.1k|         this->store_le(reinterpret_cast<uint8_t*>(out));
  221|  62.1k|      }
_ZNK5Botan9SIMD_4x328store_leEPh:
  234|  62.1k|      void BOTAN_FN_ISA_SIMD_4X32 store_le(uint8_t out[]) const noexcept {
  235|  62.1k|#if defined(BOTAN_SIMD_USE_SSSE3)
  236|       |
  237|  62.1k|         _mm_storeu_si128(reinterpret_cast<__m128i*>(out), raw());
  238|       |
  239|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
  240|       |
  241|       |         union {
  242|       |               __vector unsigned int V;
  243|       |               uint32_t R[4];
  244|       |         } vec{};
  245|       |
  246|       |         // NOLINTNEXTLINE(*-union-access)
  247|       |         vec.V = raw();
  248|       |         // NOLINTNEXTLINE(*-union-access)
  249|       |         Botan::store_le(out, vec.R[0], vec.R[1], vec.R[2], vec.R[3]);
  250|       |
  251|       |#elif defined(BOTAN_SIMD_USE_NEON)
  252|       |         if constexpr(std::endian::native == std::endian::little) {
  253|       |            vst1q_u8(out, vreinterpretq_u8_u32(m_simd));
  254|       |         } else {
  255|       |            vst1q_u8(out, vreinterpretq_u8_u32(bswap().m_simd));
  256|       |         }
  257|       |#elif defined(BOTAN_SIMD_USE_LSX)
  258|       |         __lsx_vst(raw(), out, 0);
  259|       |#elif defined(BOTAN_SIMD_USE_SIMD128)
  260|       |         wasm_v128_store(out, m_simd);
  261|       |#endif
  262|  62.1k|      }
_ZN5Botan9SIMD_4x32eOERKS0_:
  455|   372k|      void BOTAN_FN_ISA_SIMD_4X32 operator^=(const SIMD_4x32& other) noexcept {
  456|   372k|#if defined(BOTAN_SIMD_USE_SSSE3)
  457|   372k|         m_simd = _mm_xor_si128(m_simd, other.m_simd);
  458|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
  459|       |         m_simd = vec_xor(m_simd, other.m_simd);
  460|       |#elif defined(BOTAN_SIMD_USE_NEON)
  461|       |         m_simd = veorq_u32(m_simd, other.m_simd);
  462|       |#elif defined(BOTAN_SIMD_USE_LSX)
  463|       |         m_simd = __lsx_vxor_v(m_simd, other.m_simd);
  464|       |#elif defined(BOTAN_SIMD_USE_SIMD128)
  465|       |         m_simd = wasm_v128_xor(m_simd, other.m_simd);
  466|       |#endif
  467|   372k|      }
_ZN5Botan9SIMD_4x32C2Ev:
   86|  15.5k|      BOTAN_FN_ISA_SIMD_4X32 SIMD_4x32() noexcept {
   87|  15.5k|#if defined(BOTAN_SIMD_USE_SSSE3)
   88|  15.5k|         m_simd = _mm_setzero_si128();
   89|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
   90|       |         m_simd = vec_splat_u32(0);
   91|       |#elif defined(BOTAN_SIMD_USE_NEON)
   92|       |         m_simd = vdupq_n_u32(0);
   93|       |#elif defined(BOTAN_SIMD_USE_LSX)
   94|       |         m_simd = __lsx_vldi(0);
   95|       |#elif defined(BOTAN_SIMD_USE_SIMD128)
   96|       |         m_simd = wasm_u32x4_const_splat(0);
   97|       |#endif
   98|  15.5k|      }
_ZN5Botan9SIMD_4x32C2Ejjjj:
  103|  93.2k|      BOTAN_FN_ISA_SIMD_4X32 SIMD_4x32(uint32_t B0, uint32_t B1, uint32_t B2, uint32_t B3) noexcept {
  104|  93.2k|#if defined(BOTAN_SIMD_USE_SSSE3)
  105|  93.2k|         m_simd = _mm_set_epi32(B3, B2, B1, B0);
  106|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
  107|       |         __vector unsigned int val = {B0, B1, B2, B3};
  108|       |         m_simd = val;
  109|       |#elif defined(BOTAN_SIMD_USE_NEON)
  110|       |         // Better way to do this?
  111|       |         const uint32_t B[4] = {B0, B1, B2, B3};
  112|       |         m_simd = vld1q_u32(B);
  113|       |#elif defined(BOTAN_SIMD_USE_LSX)
  114|       |         // Better way to do this?
  115|       |         const uint32_t B[4] = {B0, B1, B2, B3};
  116|       |         m_simd = __lsx_vld(B, 0);
  117|       |#elif defined(BOTAN_SIMD_USE_SIMD128)
  118|       |         m_simd = wasm_u32x4_make(B0, B1, B2, B3);
  119|       |#endif
  120|  93.2k|      }
_ZNK5Botan9SIMD_4x32eoERKS0_:
  403|   233k|      SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 operator^(const SIMD_4x32& other) const noexcept {
  404|   233k|         SIMD_4x32 retval(*this);
  405|   233k|         retval ^= other;
  406|   233k|         return retval;
  407|   233k|      }
_ZN5Botan9SIMD_4x3212byte_shuffleERKS0_S2_:
  803|  93.2k|      static inline SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 byte_shuffle(const SIMD_4x32& tbl, const SIMD_4x32& idx) {
  804|  93.2k|#if defined(BOTAN_SIMD_USE_SSSE3)
  805|  93.2k|         return SIMD_4x32(_mm_shuffle_epi8(tbl.raw(), idx.raw()));
  806|       |#elif defined(BOTAN_SIMD_USE_NEON)
  807|       |         const uint8x16_t tbl8 = vreinterpretq_u8_u32(tbl.raw());
  808|       |         const uint8x16_t idx8 = vreinterpretq_u8_u32(idx.raw());
  809|       |
  810|       |   #if defined(BOTAN_TARGET_ARCH_IS_ARM32)
  811|       |         const uint8x8x2_t tbl2 = {vget_low_u8(tbl8), vget_high_u8(tbl8)};
  812|       |
  813|       |         return SIMD_4x32(
  814|       |            vreinterpretq_u32_u8(vcombine_u8(vtbl2_u8(tbl2, vget_low_u8(idx8)), vtbl2_u8(tbl2, vget_high_u8(idx8)))));
  815|       |   #else
  816|       |         return SIMD_4x32(vreinterpretq_u32_u8(vqtbl1q_u8(tbl8, idx8)));
  817|       |   #endif
  818|       |
  819|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
  820|       |         const auto r = vec_perm(reinterpret_cast<__vector signed char>(tbl.raw()),
  821|       |                                 reinterpret_cast<__vector signed char>(tbl.raw()),
  822|       |                                 reinterpret_cast<__vector unsigned char>(idx.raw()));
  823|       |         return SIMD_4x32(reinterpret_cast<__vector unsigned int>(r));
  824|       |#elif defined(BOTAN_SIMD_USE_LSX)
  825|       |         return SIMD_4x32(__lsx_vshuf_b(tbl.raw(), tbl.raw(), idx.raw()));
  826|       |#elif defined(BOTAN_SIMD_USE_SIMD128)
  827|       |         return SIMD_4x32(wasm_i8x16_swizzle(tbl.raw(), idx.raw()));
  828|       |#endif
  829|  93.2k|      }
_ZNK5Botan9SIMD_4x323shlILi14EEES0_vQaagtT_Li0EltT_Li32E:
  502|  46.6k|      {
  503|  46.6k|#if defined(BOTAN_SIMD_USE_SSSE3)
  504|  46.6k|         return SIMD_4x32(_mm_slli_epi32(m_simd, SHIFT));
  505|       |
  506|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
  507|       |         const unsigned int s = static_cast<unsigned int>(SHIFT);
  508|       |         const __vector unsigned int shifts = {s, s, s, s};
  509|       |         return SIMD_4x32(vec_sl(m_simd, shifts));
  510|       |#elif defined(BOTAN_SIMD_USE_NEON)
  511|       |         return SIMD_4x32(vshlq_n_u32(m_simd, SHIFT));
  512|       |#elif defined(BOTAN_SIMD_USE_LSX)
  513|       |         return SIMD_4x32(__lsx_vslli_w(m_simd, SHIFT));
  514|       |#elif defined(BOTAN_SIMD_USE_SIMD128)
  515|       |         return SIMD_4x32(wasm_i32x4_shl(m_simd, SHIFT));
  516|       |#endif
  517|  46.6k|      }
_ZNK5Botan9SIMD_4x323shrILi7EEES0_v:
  520|  46.6k|      SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 shr() const noexcept {
  521|  46.6k|#if defined(BOTAN_SIMD_USE_SSSE3)
  522|  46.6k|         return SIMD_4x32(_mm_srli_epi32(m_simd, SHIFT));
  523|       |
  524|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
  525|       |         const unsigned int s = static_cast<unsigned int>(SHIFT);
  526|       |         const __vector unsigned int shifts = {s, s, s, s};
  527|       |         return SIMD_4x32(vec_sr(m_simd, shifts));
  528|       |#elif defined(BOTAN_SIMD_USE_NEON)
  529|       |         return SIMD_4x32(vshrq_n_u32(m_simd, SHIFT));
  530|       |#elif defined(BOTAN_SIMD_USE_LSX)
  531|       |         return SIMD_4x32(__lsx_vsrli_w(m_simd, SHIFT));
  532|       |#elif defined(BOTAN_SIMD_USE_SIMD128)
  533|       |         return SIMD_4x32(wasm_u32x4_shr(m_simd, SHIFT));
  534|       |#endif
  535|  46.6k|      }
_ZNK5Botan9SIMD_4x323shrILi3EEES0_v:
  520|  46.6k|      SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 shr() const noexcept {
  521|  46.6k|#if defined(BOTAN_SIMD_USE_SSSE3)
  522|  46.6k|         return SIMD_4x32(_mm_srli_epi32(m_simd, SHIFT));
  523|       |
  524|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
  525|       |         const unsigned int s = static_cast<unsigned int>(SHIFT);
  526|       |         const __vector unsigned int shifts = {s, s, s, s};
  527|       |         return SIMD_4x32(vec_sr(m_simd, shifts));
  528|       |#elif defined(BOTAN_SIMD_USE_NEON)
  529|       |         return SIMD_4x32(vshrq_n_u32(m_simd, SHIFT));
  530|       |#elif defined(BOTAN_SIMD_USE_LSX)
  531|       |         return SIMD_4x32(__lsx_vsrli_w(m_simd, SHIFT));
  532|       |#elif defined(BOTAN_SIMD_USE_SIMD128)
  533|       |         return SIMD_4x32(wasm_u32x4_shr(m_simd, SHIFT));
  534|       |#endif
  535|  46.6k|      }
_ZNK5Botan9SIMD_4x323shrILi11EEES0_v:
  520|  46.6k|      SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 shr() const noexcept {
  521|  46.6k|#if defined(BOTAN_SIMD_USE_SSSE3)
  522|  46.6k|         return SIMD_4x32(_mm_srli_epi32(m_simd, SHIFT));
  523|       |
  524|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
  525|       |         const unsigned int s = static_cast<unsigned int>(SHIFT);
  526|       |         const __vector unsigned int shifts = {s, s, s, s};
  527|       |         return SIMD_4x32(vec_sr(m_simd, shifts));
  528|       |#elif defined(BOTAN_SIMD_USE_NEON)
  529|       |         return SIMD_4x32(vshrq_n_u32(m_simd, SHIFT));
  530|       |#elif defined(BOTAN_SIMD_USE_LSX)
  531|       |         return SIMD_4x32(__lsx_vsrli_w(m_simd, SHIFT));
  532|       |#elif defined(BOTAN_SIMD_USE_SIMD128)
  533|       |         return SIMD_4x32(wasm_u32x4_shr(m_simd, SHIFT));
  534|       |#endif
  535|  46.6k|      }
_ZNK5Botan9SIMD_4x323shlILi11EEES0_vQaagtT_Li0EltT_Li32E:
  502|  46.6k|      {
  503|  46.6k|#if defined(BOTAN_SIMD_USE_SSSE3)
  504|  46.6k|         return SIMD_4x32(_mm_slli_epi32(m_simd, SHIFT));
  505|       |
  506|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
  507|       |         const unsigned int s = static_cast<unsigned int>(SHIFT);
  508|       |         const __vector unsigned int shifts = {s, s, s, s};
  509|       |         return SIMD_4x32(vec_sl(m_simd, shifts));
  510|       |#elif defined(BOTAN_SIMD_USE_NEON)
  511|       |         return SIMD_4x32(vshlq_n_u32(m_simd, SHIFT));
  512|       |#elif defined(BOTAN_SIMD_USE_LSX)
  513|       |         return SIMD_4x32(__lsx_vslli_w(m_simd, SHIFT));
  514|       |#elif defined(BOTAN_SIMD_USE_SIMD128)
  515|       |         return SIMD_4x32(wasm_i32x4_shl(m_simd, SHIFT));
  516|       |#endif
  517|  46.6k|      }
_ZNK5Botan9SIMD_4x323shrILi10EEES0_v:
  520|  93.2k|      SIMD_4x32 BOTAN_FN_ISA_SIMD_4X32 shr() const noexcept {
  521|  93.2k|#if defined(BOTAN_SIMD_USE_SSSE3)
  522|  93.2k|         return SIMD_4x32(_mm_srli_epi32(m_simd, SHIFT));
  523|       |
  524|       |#elif defined(BOTAN_SIMD_USE_ALTIVEC)
  525|       |         const unsigned int s = static_cast<unsigned int>(SHIFT);
  526|       |         const __vector unsigned int shifts = {s, s, s, s};
  527|       |         return SIMD_4x32(vec_sr(m_simd, shifts));
  528|       |#elif defined(BOTAN_SIMD_USE_NEON)
  529|       |         return SIMD_4x32(vshrq_n_u32(m_simd, SHIFT));
  530|       |#elif defined(BOTAN_SIMD_USE_LSX)
  531|       |         return SIMD_4x32(__lsx_vsrli_w(m_simd, SHIFT));
  532|       |#elif defined(BOTAN_SIMD_USE_SIMD128)
  533|       |         return SIMD_4x32(wasm_u32x4_shr(m_simd, SHIFT));
  534|       |#endif
  535|  93.2k|      }

_ZN5Botan9SIMD_8x325splatEj:
   58|   191k|      static SIMD_8x32 splat(uint32_t B) noexcept { return SIMD_8x32(_mm256_set1_epi32(B)); }
_ZN5Botan9SIMD_8x32C2EDv4_x:
  343|  3.15M|      explicit SIMD_8x32(__m256i x) noexcept : m_avx2(x) {}
_ZN5Botan9SIMD_8x32C2Ejjjjjjjj:
   46|  9.59k|                         uint32_t B7) noexcept {
   47|       |         // NOLINTNEXTLINE(*-prefer-member-initializer)
   48|  9.59k|         m_avx2 = _mm256_set_epi32(B7, B6, B5, B4, B3, B2, B1, B0);
   49|  9.59k|      }
_ZN5Botan9SIMD_8x3210load_be128EPKhS2_:
  101|  69.0k|      static SIMD_8x32 load_be128(const uint8_t in1[], const uint8_t in2[]) noexcept {
  102|  69.0k|         return SIMD_8x32(
  103|  69.0k|                   _mm256_loadu2_m128i(reinterpret_cast<const __m128i*>(in2), reinterpret_cast<const __m128i*>(in1)))
  104|  69.0k|            .bswap();
  105|  69.0k|      }
_ZNK5Botan9SIMD_8x325bswapEv:
  238|  76.8k|      SIMD_8x32 bswap() const noexcept {
  239|  76.8k|         alignas(32) const uint8_t BSWAP_TBL[32] = {3,  2,  1,  0,  7,  6,  5,  4,  11, 10, 9,  8,  15, 14, 13, 12,
  240|  76.8k|                                                    19, 18, 17, 16, 23, 22, 21, 20, 27, 26, 25, 24, 31, 30, 29, 28};
  241|       |
  242|  76.8k|         const __m256i bswap = _mm256_load_si256(reinterpret_cast<const __m256i*>(BSWAP_TBL));
  243|       |
  244|  76.8k|         const __m256i output = _mm256_shuffle_epi8(m_avx2, bswap);
  245|       |
  246|  76.8k|         return SIMD_8x32(output);
  247|  76.8k|      }
_ZNK5Botan9SIMD_8x32plERKS0_:
  164|   349k|      SIMD_8x32 operator+(const SIMD_8x32& other) const noexcept {
  165|   349k|         SIMD_8x32 retval(*this);
  166|   349k|         retval += other;
  167|   349k|         return retval;
  168|   349k|      }
_ZN5Botan9SIMD_8x32pLERKS0_:
  199|   764k|      void operator+=(const SIMD_8x32& other) { m_avx2 = _mm256_add_epi32(m_avx2, other.m_avx2); }
_ZNK5Botan9SIMD_8x3211store_le128EPjS1_:
  108|   310k|      void store_le128(uint32_t out1[], uint32_t out2[]) const noexcept {
  109|   310k|         _mm256_storeu2_m128i(reinterpret_cast<__m128i*>(out2), reinterpret_cast<__m128i*>(out1), raw());
  110|   310k|      }
_ZNK5Botan9SIMD_8x323rawEv:
  340|  2.43M|      __m256i BOTAN_FN_ISA_AVX2 raw() const noexcept { return m_avx2; }
_ZN5Botan9SIMD_8x32eOERKS0_:
  205|  1.53M|      void operator^=(const SIMD_8x32& other) { m_avx2 = _mm256_xor_si256(m_avx2, other.m_avx2); }
_ZNK5Botan9SIMD_8x324rotlILm1EEES0_vQaagtT_Li0EltT_Li32E:
  118|   200k|      {
  119|       |#if defined(__AVX512VL__)
  120|       |         return SIMD_8x32(_mm256_rol_epi32(m_avx2, ROT));
  121|       |#else
  122|       |         if constexpr(ROT == 8) {
  123|       |            const __m256i shuf_rotl_8 =
  124|       |               _mm256_set_epi64x(0x0e0d0c0f'0a09080b, 0x06050407'02010003, 0x0e0d0c0f'0a09080b, 0x06050407'02010003);
  125|       |
  126|       |            return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_8));
  127|       |         } else if constexpr(ROT == 16) {
  128|       |            const __m256i shuf_rotl_16 =
  129|       |               _mm256_set_epi64x(0x0d0c0f0e'09080b0a, 0x05040706'01000302, 0x0d0c0f0e'09080b0a, 0x05040706'01000302);
  130|       |
  131|       |            return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_16));
  132|       |         } else if constexpr(ROT == 24) {
  133|       |            const __m256i shuf_rotl_24 =
  134|       |               _mm256_set_epi64x(0x0c0f0e0d'080b0a09, 0x04070605'00030201, 0x0c0f0e0d'080b0a09, 0x04070605'00030201);
  135|       |
  136|       |            return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_24));
  137|   200k|         } else {
  138|   200k|            return SIMD_8x32(_mm256_xor_si256(_mm256_slli_epi32(m_avx2, static_cast<int>(ROT)),
  139|   200k|                                              _mm256_srli_epi32(m_avx2, static_cast<int>(32 - ROT))));
  140|   200k|         }
  141|   200k|#endif
  142|   200k|      }
_ZNK5Botan9SIMD_8x324rotlILm2EEES0_vQaagtT_Li0EltT_Li32E:
  118|   169k|      {
  119|       |#if defined(__AVX512VL__)
  120|       |         return SIMD_8x32(_mm256_rol_epi32(m_avx2, ROT));
  121|       |#else
  122|       |         if constexpr(ROT == 8) {
  123|       |            const __m256i shuf_rotl_8 =
  124|       |               _mm256_set_epi64x(0x0e0d0c0f'0a09080b, 0x06050407'02010003, 0x0e0d0c0f'0a09080b, 0x06050407'02010003);
  125|       |
  126|       |            return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_8));
  127|       |         } else if constexpr(ROT == 16) {
  128|       |            const __m256i shuf_rotl_16 =
  129|       |               _mm256_set_epi64x(0x0d0c0f0e'09080b0a, 0x05040706'01000302, 0x0d0c0f0e'09080b0a, 0x05040706'01000302);
  130|       |
  131|       |            return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_16));
  132|       |         } else if constexpr(ROT == 24) {
  133|       |            const __m256i shuf_rotl_24 =
  134|       |               _mm256_set_epi64x(0x0c0f0e0d'080b0a09, 0x04070605'00030201, 0x0c0f0e0d'080b0a09, 0x04070605'00030201);
  135|       |
  136|       |            return SIMD_8x32(_mm256_shuffle_epi8(m_avx2, shuf_rotl_24));
  137|   169k|         } else {
  138|   169k|            return SIMD_8x32(_mm256_xor_si256(_mm256_slli_epi32(m_avx2, static_cast<int>(ROT)),
  139|   169k|                                              _mm256_srli_epi32(m_avx2, static_cast<int>(32 - ROT))));
  140|   169k|         }
  141|   169k|#endif
  142|   169k|      }
_ZN5Botan9SIMD_8x327load_beEPKh:
   81|  7.76k|      static SIMD_8x32 load_be(const uint8_t* in) noexcept { return load_le(in).bswap(); }
_ZN5Botan9SIMD_8x327load_leEPKh:
   61|  7.76k|      static SIMD_8x32 load_le(const uint8_t* in) noexcept {
   62|  7.76k|         return SIMD_8x32(_mm256_loadu_si256(reinterpret_cast<const __m256i*>(in)));
   63|  7.76k|      }
_ZNK5Botan9SIMD_8x328store_leEPj:
   87|  38.8k|      void store_le(uint32_t out[]) const noexcept { _mm256_storeu_si256(reinterpret_cast<__m256i*>(out), m_avx2); }
_ZNK5Botan9SIMD_8x32eoERKS0_:
  178|   549k|      SIMD_8x32 operator^(const SIMD_8x32& other) const noexcept {
  179|   549k|         SIMD_8x32 retval(*this);
  180|   549k|         retval ^= other;
  181|   549k|         return retval;
  182|   549k|      }
_ZN5Botan9SIMD_8x32C2Ev:
   30|  34.5k|      BOTAN_FORCE_INLINE SIMD_8x32() noexcept : m_avx2(_mm256_setzero_si256()) {}
_ZN5Botan9SIMD_8x32C2Ejjjj:
   52|   207k|      explicit SIMD_8x32(uint32_t B0, uint32_t B1, uint32_t B2, uint32_t B3) noexcept {
   53|       |         // NOLINTNEXTLINE(*-prefer-member-initializer)
   54|   207k|         m_avx2 = _mm256_set_epi32(B3, B2, B1, B0, B3, B2, B1, B0);
   55|   207k|      }
_ZN5Botan9SIMD_8x3210load_le128EPKj:
   76|   138k|      static SIMD_8x32 load_le128(const uint32_t* in) noexcept {
   77|   138k|         return SIMD_8x32(_mm256_broadcastsi128_si256(_mm_loadu_si128(reinterpret_cast<const __m128i*>(in))));
   78|   138k|      }
_ZN5Botan9SIMD_8x3212byte_shuffleERKS0_S2_:
  330|   207k|      static inline SIMD_8x32 BOTAN_FN_ISA_AVX2 byte_shuffle(const SIMD_8x32& tbl, const SIMD_8x32& idx) {
  331|   207k|         return SIMD_8x32(_mm256_shuffle_epi8(tbl.raw(), idx.raw()));
  332|   207k|      }
_ZNK5Botan9SIMD_8x323shlILi14EEES0_v:
  217|   103k|      BOTAN_FN_ISA_AVX2 SIMD_8x32 shl() const noexcept {
  218|   103k|         return SIMD_8x32(_mm256_slli_epi32(m_avx2, SHIFT));
  219|   103k|      }
_ZNK5Botan9SIMD_8x323shrILi7EEES0_v:
  222|   103k|      BOTAN_FN_ISA_AVX2 SIMD_8x32 shr() const noexcept {
  223|   103k|         return SIMD_8x32(_mm256_srli_epi32(m_avx2, SHIFT));
  224|   103k|      }
_ZNK5Botan9SIMD_8x323shrILi3EEES0_v:
  222|   103k|      BOTAN_FN_ISA_AVX2 SIMD_8x32 shr() const noexcept {
  223|   103k|         return SIMD_8x32(_mm256_srli_epi32(m_avx2, SHIFT));
  224|   103k|      }
_ZNK5Botan9SIMD_8x323shrILi11EEES0_v:
  222|   103k|      BOTAN_FN_ISA_AVX2 SIMD_8x32 shr() const noexcept {
  223|   103k|         return SIMD_8x32(_mm256_srli_epi32(m_avx2, SHIFT));
  224|   103k|      }
_ZNK5Botan9SIMD_8x323shlILi11EEES0_v:
  217|   103k|      BOTAN_FN_ISA_AVX2 SIMD_8x32 shl() const noexcept {
  218|   103k|         return SIMD_8x32(_mm256_slli_epi32(m_avx2, SHIFT));
  219|   103k|      }
_ZNK5Botan9SIMD_8x323shrILi10EEES0_v:
  222|   207k|      BOTAN_FN_ISA_AVX2 SIMD_8x32 shr() const noexcept {
  223|   207k|         return SIMD_8x32(_mm256_srli_epi32(m_avx2, SHIFT));
  224|   207k|      }

_ZN5Botan2CT13value_barrierITkNSt3__117unsigned_integralEjQntsr3stdE7same_asIbT_EEES3_S3_:
   43|  5.25k|constexpr inline T value_barrier(T x) {
   44|  5.25k|   if(std::is_constant_evaluated()) {
  ------------------
  |  Branch (44:7): [Folded, False: 5.25k]
  ------------------
   45|      0|      return x;
   46|  5.25k|   } else {
   47|  5.25k|#if defined(BOTAN_CT_VALUE_BARRIER_USE_ASM)
   48|       |      /*
   49|       |      * We may want a "stronger" statement such as
   50|       |      *     asm volatile("" : "+r,m"(x) : : "memory);
   51|       |      * (see https://theunixzoo.co.uk/blog/2021-10-14-preventing-optimisations.html)
   52|       |      * however the current approach seems sufficient with current compilers,
   53|       |      * and is minimally damaging with regards to degrading code generation.
   54|       |      */
   55|  5.25k|      asm("" : "+r"(x) : /* no input */);  // NOLINT(*-no-assembler)
   56|  5.25k|      return x;
   57|       |#elif defined(BOTAN_CT_VALUE_BARRIER_USE_VOLATILE)
   58|       |      volatile T vx = x;
   59|       |      return vx;
   60|       |#else
   61|       |      return x;
   62|       |#endif
   63|  5.25k|   }
   64|  5.25k|}
_ZN5Botan2CT13value_barrierITkNSt3__117unsigned_integralEmQntsr3stdE7same_asIbT_EEES3_S3_:
   43|   235k|constexpr inline T value_barrier(T x) {
   44|   235k|   if(std::is_constant_evaluated()) {
  ------------------
  |  Branch (44:7): [Folded, False: 235k]
  ------------------
   45|      0|      return x;
   46|   235k|   } else {
   47|   235k|#if defined(BOTAN_CT_VALUE_BARRIER_USE_ASM)
   48|       |      /*
   49|       |      * We may want a "stronger" statement such as
   50|       |      *     asm volatile("" : "+r,m"(x) : : "memory);
   51|       |      * (see https://theunixzoo.co.uk/blog/2021-10-14-preventing-optimisations.html)
   52|       |      * however the current approach seems sufficient with current compilers,
   53|       |      * and is minimally damaging with regards to degrading code generation.
   54|       |      */
   55|   235k|      asm("" : "+r"(x) : /* no input */);  // NOLINT(*-no-assembler)
   56|   235k|      return x;
   57|       |#elif defined(BOTAN_CT_VALUE_BARRIER_USE_VOLATILE)
   58|       |      volatile T vx = x;
   59|       |      return vx;
   60|       |#else
   61|       |      return x;
   62|       |#endif
   63|   235k|   }
   64|   235k|}

_ZN5Botan17is_sub_element_ofERKNS_3OIDESt16initializer_listIjE:
   20|  25.9k|inline std::optional<uint32_t> is_sub_element_of(const OID& oid, std::initializer_list<uint32_t> prefix) {
   21|  25.9k|   const auto& c = oid.get_components();
   22|       |
   23|  25.9k|   if(c.size() != prefix.size() + 1) {
  ------------------
  |  Branch (23:7): [True: 11.2k, False: 14.6k]
  ------------------
   24|  11.2k|      return {};
   25|  11.2k|   }
   26|       |
   27|  14.6k|   if(!std::equal(c.begin(), c.end() - 1, prefix.begin(), prefix.end())) {
  ------------------
  |  Branch (27:7): [True: 3.01k, False: 11.6k]
  ------------------
   28|  3.01k|      return {};
   29|  3.01k|   }
   30|       |
   31|  11.6k|   return c[c.size() - 1];
   32|  14.6k|}

_ZNK5Botan10BER_Object6is_setEv:
  138|   738k|      bool is_set() const { return m_type_tag != ASN1_Type::NoObject; }
_ZNK5Botan10BER_Object7taggingEv:
  140|   314k|      uint32_t tagging() const { return type_tag() | class_tag(); }
_ZNK5Botan10BER_Object8type_tagEv:
  142|   330k|      ASN1_Type type_tag() const { return m_type_tag; }
_ZNK5Botan10BER_Object9class_tagEv:
  144|   345k|      ASN1_Class class_tag() const { return m_class_tag; }
_ZNK5Botan10BER_Object4typeEv:
  146|  51.6k|      ASN1_Type type() const { return m_type_tag; }
_ZNK5Botan10BER_Object9get_classEv:
  148|  26.1k|      ASN1_Class get_class() const { return m_class_tag; }
_ZNK5Botan10BER_Object4bitsEv:
  150|  5.27M|      const uint8_t* bits() const { return m_value.data(); }
_ZNK5Botan10BER_Object6lengthEv:
  152|  11.0M|      size_t length() const { return m_value.size(); }
_ZNK5Botan10BER_Object4dataEv:
  154|   110k|      std::span<const uint8_t> data() const { return std::span{m_value}; }
_ZN5Botan10BER_Object12mutable_bitsEm:
  171|   263k|      uint8_t* mutable_bits(size_t length) {
  172|   263k|         m_value.resize(length);
  173|   263k|         return m_value.data();
  174|   263k|      }
_ZNK5Botan3OID5emptyEv:
  265|  2.07k|      bool empty() const { return m_id.empty(); }
_ZNK5Botan3OID9has_valueEv:
  271|  2.07k|      bool has_value() const { return !empty(); }
_ZNK5Botan3OIDeqERKS0_:
  301|  13.3k|      bool operator==(const OID& other) const { return m_id == other.m_id; }
_ZNK5Botan3OID14get_componentsEv:
  321|   185k|      const std::vector<uint32_t>& get_components() const {
  322|   185k|         return m_id;
  323|   185k|      }
_ZNK5Botan11ASN1_String5valueEv:
  365|  1.76k|      const std::string& value() const { return m_utf8_str; }
_ZNK5Botan11ASN1_String4sizeEv:
  367|     79|      size_t size() const { return value().size(); }
_ZNK5Botan11ASN1_String5emptyEv:
  369|     87|      bool empty() const { return m_utf8_str.empty(); }
_ZN5BotanltERKNS_11ASN1_StringES2_:
  378|     11|      friend bool operator<(const ASN1_String& a, const ASN1_String& b) { return a.value() < b.value(); }
_ZNK5Botan19AlgorithmIdentifier3oidEv:
  407|  7.99k|      const OID& oid() const { return m_oid; }
_ZNK5Botan19AlgorithmIdentifier10parametersEv:
  409|    742|      const std::vector<uint8_t>& parameters() const { return m_parameters; }
_ZNK5Botan19AlgorithmIdentifier20parameters_are_emptyEv:
  419|  7.27k|      bool parameters_are_empty() const { return m_parameters.empty(); }
_ZNK5Botan19AlgorithmIdentifier28parameters_are_null_or_emptyEv:
  421|  7.27k|      bool parameters_are_null_or_empty() const { return parameters_are_empty() || parameters_are_null(); }
  ------------------
  |  Branch (421:58): [True: 880, False: 6.39k]
  |  Branch (421:84): [True: 6.33k, False: 64]
  ------------------
_ZN5BotanorENS_10ASN1_ClassES0_:
   78|   141k|inline ASN1_Class operator|(ASN1_Class x, ASN1_Class y) {
   79|   141k|   return static_cast<ASN1_Class>(static_cast<uint32_t>(x) | static_cast<uint32_t>(y));
   80|   141k|}
_ZN5BotanorENS_9ASN1_TypeENS_10ASN1_ClassE:
   82|   314k|inline uint32_t operator|(ASN1_Type x, ASN1_Class y) {
   83|   314k|   return static_cast<uint32_t>(x) | static_cast<uint32_t>(y);
   84|   314k|}
_ZN5BotanorENS_10ASN1_ClassENS_9ASN1_TypeE:
   86|  50.8k|inline uint32_t operator|(ASN1_Class x, ASN1_Type y) {
   87|  50.8k|   return static_cast<uint32_t>(x) | static_cast<uint32_t>(y);
   88|  50.8k|}
_ZN5BotanneERKNS_3OIDES2_:
  342|  3.94k|inline bool operator!=(const OID& a, const OID& b) {
  343|  3.94k|   return !(a == b);
  344|  3.94k|}
_ZNKSt3__14hashIN5Botan3OIDEEclERKS2_:
  441|      4|      size_t operator()(const Botan::OID& oid) const noexcept { return static_cast<size_t>(oid.hash_code()); }
_ZN5Botan11ASN1_ObjectD2Ev:
  122|   294k|      virtual ~ASN1_Object() = default;
_ZN5Botan11ASN1_ObjectC2Ev:
  117|   159k|      ASN1_Object() = default;
_ZN5Botan19AlgorithmIdentifierC2Ev:
  399|  13.7k|      AlgorithmIdentifier() = default;
_ZN5Botan3OIDC2Ev:
  220|  53.5k|      explicit OID() = default;
_ZN5Botan10BER_ObjectC2Ev:
  130|   466k|      BER_Object() = default;
_ZN5Botan10BER_ObjectaSEOS0_:
  135|   132k|      BER_Object& operator=(BER_Object&& other) = default;
_ZN5Botan11ASN1_ObjectC2ERKS0_:
  118|  63.5k|      ASN1_Object(const ASN1_Object&) = default;
_ZN5Botan11ASN1_ObjectaSERKS0_:
  119|    414|      ASN1_Object& operator=(const ASN1_Object&) = default;
_ZN5Botan11ASN1_ObjectC2EOS0_:
  120|  84.3k|      ASN1_Object(ASN1_Object&&) = default;
_ZN5Botan10BER_ObjectC2EOS0_:
  133|   146k|      BER_Object(BER_Object&& other) = default;
_ZN5Botan10BER_ObjectC2ERKS0_:
  132|  1.20k|      BER_Object(const BER_Object& other) = default;
_ZN5Botan11ASN1_ObjectaSEOS0_:
  121|  11.2k|      ASN1_Object& operator=(ASN1_Object&&) = default;

_ZN5Botan9ASN1_TimeC2Ev:
   39|  8.71k|      ASN1_Time() = default;

_ZN5Botan13ignore_paramsIJPKmmEEEvDpRKT_:
  142|  43.9k|constexpr void ignore_params([[maybe_unused]] const T&... args) {}
_ZN5Botan13ignore_paramsIJjEEEvDpRKT_:
  142|  85.1k|constexpr void ignore_params([[maybe_unused]] const T&... args) {}

_ZN5Botan11BER_Decoder6Limits3DEREv:
   35|  26.7k|            static Limits DER() { return Limits(false, 0); }
_ZN5Botan11BER_Decoder6LimitsC2Ebm:
   54|  26.7k|                  m_allow_ber(allow_ber), m_max_nested_indef(max_nested_indef) {}
_ZN5Botan11BER_Decoder15decode_optionalImEERS0_RT_NS_9ASN1_TypeENS_10ASN1_ClassERKS3_:
  285|  4.96k|      BER_Decoder& decode_optional(T& out, ASN1_Type type_tag, ASN1_Class class_tag, const T& default_value = T()) {
  286|  4.96k|         std::optional<T> optval;
  287|  4.96k|         this->decode_optional(optval, type_tag, class_tag);
  288|  4.96k|         out = optval ? *optval : default_value;
  ------------------
  |  Branch (288:16): [True: 4.13k, False: 827]
  ------------------
  289|  4.96k|         return (*this);
  290|  4.96k|      }
_ZN5Botan11BER_Decoder15decode_optionalImEERS0_RNSt3__18optionalIT_EENS_9ASN1_TypeENS_10ASN1_ClassE:
  394|  5.93k|BER_Decoder& BER_Decoder::decode_optional(std::optional<T>& optval, ASN1_Type type_tag, ASN1_Class class_tag) {
  395|  5.93k|   BER_Object obj = get_next_object();
  396|       |
  397|  5.93k|   if(obj.is_a(type_tag, class_tag)) {
  ------------------
  |  Branch (397:7): [True: 4.27k, False: 1.66k]
  ------------------
  398|  4.27k|      T out{};
  399|  4.27k|      if(class_tag == ASN1_Class::ExplicitContextSpecific) {
  ------------------
  |  Branch (399:10): [True: 4.16k, False: 111]
  ------------------
  400|  4.16k|         BER_Decoder(obj, m_limits).decode(out).verify_end();
  401|  4.16k|      } else {
  402|    111|         this->push_back(std::move(obj));
  403|    111|         this->decode(out, type_tag, class_tag);
  404|    111|      }
  405|  4.27k|      optval = std::move(out);
  406|  4.27k|   } else {
  407|  1.66k|      this->push_back(std::move(obj));
  408|  1.66k|      optval = std::nullopt;
  409|  1.66k|   }
  410|       |
  411|  5.93k|   return (*this);
  412|  5.93k|}
_ZN5Botan11BER_Decoder6decodeERm:
  225|  9.63k|      BER_Decoder& decode(size_t& out) { return decode(out, ASN1_Type::Integer, ASN1_Class::Universal); }
_ZN5Botan11BER_Decoder6decodeERNS_6BigIntE:
  230|  4.32k|      BER_Decoder& decode(BigInt& out) { return decode(out, ASN1_Type::Integer, ASN1_Class::Universal); }
_ZN5Botan11BER_Decoder14start_sequenceEv:
  160|  84.2k|      BER_Decoder start_sequence() { return start_cons(ASN1_Type::Sequence, ASN1_Class::Universal); }
_ZN5Botan11BER_Decoder8get_nextERNS_10BER_ObjectE:
  106|  7.42k|      BER_Decoder& get_next(BER_Object& ber) {
  107|  7.42k|         ber = get_next_object();
  108|  7.42k|         return (*this);
  109|  7.42k|      }
_ZN5Botan11BER_Decoder22decode_optional_stringINSt3__19allocatorIhEEEERS0_RNS2_6vectorIhT_EENS_9ASN1_TypeEjNS_10ASN1_ClassE:
  345|  7.97k|                                          ASN1_Class class_tag = ASN1_Class::ContextSpecific) {
  346|  7.97k|         BER_Object obj = get_next_object();
  347|       |
  348|  7.97k|         const ASN1_Type type_tag = static_cast<ASN1_Type>(expected_tag);
  349|       |
  350|  7.97k|         if(obj.is_a(type_tag, class_tag)) {
  ------------------
  |  Branch (350:13): [True: 343, False: 7.63k]
  ------------------
  351|    343|            if(class_tag == ASN1_Class::ExplicitContextSpecific) {
  ------------------
  |  Branch (351:16): [True: 0, False: 343]
  ------------------
  352|      0|               BER_Decoder(obj, m_limits).decode(out, real_type).verify_end();
  353|    343|            } else {
  354|    343|               push_back(std::move(obj));
  355|    343|               decode(out, real_type, type_tag, class_tag);
  356|    343|            }
  357|  7.63k|         } else {
  358|  7.63k|            out.clear();
  359|  7.63k|            push_back(std::move(obj));
  360|  7.63k|         }
  361|       |
  362|  7.97k|         return (*this);
  363|  7.97k|      }
_ZN5Botan11BER_Decoder6decodeINSt3__19allocatorIhEEEERS0_RNS2_6vectorIhT_EENS_9ASN1_TypeE:
  242|  26.2k|      BER_Decoder& decode(std::vector<uint8_t, Alloc>& out, ASN1_Type real_type) {
  243|  26.2k|         return decode(out, real_type, real_type, ASN1_Class::Universal);
  244|  26.2k|      }
_ZN5Botan11BER_DecoderC2ERKNS_10BER_ObjectENS0_6LimitsE:
   81|  10.2k|            BER_Decoder(obj.data(), limits) {}
_ZNK5Botan11BER_Decoder6Limits18allow_ber_encodingEv:
   44|   578k|            bool allow_ber_encoding() const { return m_allow_ber; }
_ZNK5Botan11BER_Decoder6Limits20require_der_encodingEv:
   46|   312k|            bool require_der_encoding() const { return !allow_ber_encoding(); }
_ZNK5Botan11BER_Decoder6limitsEv:
   98|   116k|      Limits limits() const { return m_limits; }
_ZN5Botan11BER_Decoder9start_setEv:
  162|  17.4k|      BER_Decoder start_set() { return start_cons(ASN1_Type::Set, ASN1_Class::Universal); }
_ZN5Botan11BER_Decoder22start_context_specificEj:
  164|  1.27k|      BER_Decoder start_context_specific(uint32_t tag) {
  165|  1.27k|         return start_cons(ASN1_Type(tag), ASN1_Class::ContextSpecific);
  166|  1.27k|      }
_ZN5Botan11BER_Decoder9raw_bytesINSt3__19allocatorIhEEEERS0_RNS2_6vectorIhT_EE:
  203|  24.7k|      BER_Decoder& raw_bytes(std::vector<uint8_t, Alloc>& out) {
  204|  24.7k|         out.clear();
  205|  4.50M|         for(;;) {
  206|  4.50M|            if(auto next = this->read_next_byte()) {
  ------------------
  |  Branch (206:21): [True: 4.47M, False: 24.7k]
  ------------------
  207|  4.47M|               out.push_back(*next);
  208|  4.47M|            } else {
  209|  24.7k|               break;
  210|  24.7k|            }
  211|  4.50M|         }
  212|  24.7k|         return (*this);
  213|  24.7k|      }
_ZN5Botan11BER_Decoder15decode_implicitINS_3OIDEEERS0_NS_10BER_ObjectERT_NS_9ASN1_TypeENS_10ASN1_ClassE:
  310|  1.20k|      BER_Decoder& decode_implicit(BER_Object obj, T& out, ASN1_Type real_type, ASN1_Class real_class) {
  311|  1.20k|         obj.set_tagging(real_type, real_class);
  312|  1.20k|         push_back(std::move(obj));
  313|  1.20k|         return decode(out, real_type, real_class);
  314|  1.20k|      }
_ZN5Botan11BER_Decoder15decode_optionalIbEERS0_RT_NS_9ASN1_TypeENS_10ASN1_ClassERKS3_:
  285|  17.0k|      BER_Decoder& decode_optional(T& out, ASN1_Type type_tag, ASN1_Class class_tag, const T& default_value = T()) {
  286|  17.0k|         std::optional<T> optval;
  287|  17.0k|         this->decode_optional(optval, type_tag, class_tag);
  288|  17.0k|         out = optval ? *optval : default_value;
  ------------------
  |  Branch (288:16): [True: 2.14k, False: 14.9k]
  ------------------
  289|  17.0k|         return (*this);
  290|  17.0k|      }
_ZN5Botan11BER_Decoder15decode_optionalIbEERS0_RNSt3__18optionalIT_EENS_9ASN1_TypeENS_10ASN1_ClassE:
  394|  17.0k|BER_Decoder& BER_Decoder::decode_optional(std::optional<T>& optval, ASN1_Type type_tag, ASN1_Class class_tag) {
  395|  17.0k|   BER_Object obj = get_next_object();
  396|       |
  397|  17.0k|   if(obj.is_a(type_tag, class_tag)) {
  ------------------
  |  Branch (397:7): [True: 2.18k, False: 14.8k]
  ------------------
  398|  2.18k|      T out{};
  399|  2.18k|      if(class_tag == ASN1_Class::ExplicitContextSpecific) {
  ------------------
  |  Branch (399:10): [True: 0, False: 2.18k]
  ------------------
  400|      0|         BER_Decoder(obj, m_limits).decode(out).verify_end();
  401|  2.18k|      } else {
  402|  2.18k|         this->push_back(std::move(obj));
  403|  2.18k|         this->decode(out, type_tag, class_tag);
  404|  2.18k|      }
  405|  2.18k|      optval = std::move(out);
  406|  14.8k|   } else {
  407|  14.8k|      this->push_back(std::move(obj));
  408|  14.8k|      optval = std::nullopt;
  409|  14.8k|   }
  410|       |
  411|  17.0k|   return (*this);
  412|  17.0k|}
_ZN5Botan11BER_Decoder11decode_listINS_3OIDEEERS0_RNSt3__16vectorIT_NS4_9allocatorIS6_EEEENS_9ASN1_TypeENS_10ASN1_ClassE:
  443|    474|BER_Decoder& BER_Decoder::decode_list(std::vector<T>& vec, ASN1_Type type_tag, ASN1_Class class_tag) {
  444|    474|   BER_Decoder list = start_cons(type_tag, class_tag);
  445|       |
  446|  2.06k|   while(list.more_items()) {
  ------------------
  |  Branch (446:10): [True: 1.59k, False: 474]
  ------------------
  447|  1.59k|      T value;
  448|  1.59k|      list.decode(value);
  449|  1.59k|      vec.push_back(std::move(value));
  450|  1.59k|   }
  451|       |
  452|    474|   list.end_cons();
  453|       |
  454|    474|   return (*this);
  455|    474|}
_ZN5Botan11BER_Decoder20decode_optional_listINS_14GeneralSubtreeEEEbRNSt3__16vectorIT_NS3_9allocatorIS5_EEEENS_9ASN1_TypeENS_10ASN1_ClassE:
  461|    509|bool BER_Decoder::decode_optional_list(std::vector<T>& vec, ASN1_Type type_tag, ASN1_Class class_tag) {
  462|    509|   if(peek_next_object().is_a(type_tag, class_tag)) {
  ------------------
  |  Branch (462:7): [True: 294, False: 215]
  ------------------
  463|    294|      decode_list(vec, type_tag, class_tag);
  464|    294|      return true;
  465|    294|   }
  466|       |
  467|    215|   return false;
  468|    509|}
_ZN5Botan11BER_Decoder11decode_listINS_14GeneralSubtreeEEERS0_RNSt3__16vectorIT_NS4_9allocatorIS6_EEEENS_9ASN1_TypeENS_10ASN1_ClassE:
  443|    294|BER_Decoder& BER_Decoder::decode_list(std::vector<T>& vec, ASN1_Type type_tag, ASN1_Class class_tag) {
  444|    294|   BER_Decoder list = start_cons(type_tag, class_tag);
  445|       |
  446|  1.06k|   while(list.more_items()) {
  ------------------
  |  Branch (446:10): [True: 772, False: 294]
  ------------------
  447|    772|      T value;
  448|    772|      list.decode(value);
  449|    772|      vec.push_back(std::move(value));
  450|    772|   }
  451|       |
  452|    294|   list.end_cons();
  453|       |
  454|    294|   return (*this);
  455|    294|}
x509_ext.cpp:_ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension12_GLOBAL__N_118Policy_InformationEEERS0_RNSt3__16vectorIT_NS6_9allocatorIS8_EEEENS_9ASN1_TypeENS_10ASN1_ClassE:
  443|    345|BER_Decoder& BER_Decoder::decode_list(std::vector<T>& vec, ASN1_Type type_tag, ASN1_Class class_tag) {
  444|    345|   BER_Decoder list = start_cons(type_tag, class_tag);
  445|       |
  446|    745|   while(list.more_items()) {
  ------------------
  |  Branch (446:10): [True: 400, False: 345]
  ------------------
  447|    400|      T value;
  448|    400|      list.decode(value);
  449|    400|      vec.push_back(std::move(value));
  450|    400|   }
  451|       |
  452|    345|   list.end_cons();
  453|       |
  454|    345|   return (*this);
  455|    345|}
_ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension23CRL_Distribution_Points18Distribution_PointEEERS0_RNSt3__16vectorIT_NS6_9allocatorIS8_EEEENS_9ASN1_TypeENS_10ASN1_ClassE:
  443|  1.28k|BER_Decoder& BER_Decoder::decode_list(std::vector<T>& vec, ASN1_Type type_tag, ASN1_Class class_tag) {
  444|  1.28k|   BER_Decoder list = start_cons(type_tag, class_tag);
  445|       |
  446|  2.60k|   while(list.more_items()) {
  ------------------
  |  Branch (446:10): [True: 1.31k, False: 1.28k]
  ------------------
  447|  1.31k|      T value;
  448|  1.31k|      list.decode(value);
  449|  1.31k|      vec.push_back(std::move(value));
  450|  1.31k|   }
  451|       |
  452|  1.28k|   list.end_cons();
  453|       |
  454|  1.28k|   return (*this);
  455|  1.28k|}
_ZN5Botan11BER_Decoder24decode_optional_implicitINS_15AlternativeNameEEERS0_RT_NS_9ASN1_TypeENS_10ASN1_ClassES6_S7_RKS4_:
  423|  1.20k|                                                   const T& default_value) {
  424|  1.20k|   BER_Object obj = get_next_object();
  425|       |
  426|  1.20k|   if(obj.is_a(type_tag, class_tag)) {
  ------------------
  |  Branch (426:7): [True: 1.09k, False: 107]
  ------------------
  427|  1.09k|      obj.set_tagging(real_type, real_class);
  428|  1.09k|      push_back(std::move(obj));
  429|  1.09k|      decode(out, real_type, real_class);
  430|  1.09k|   } else {
  431|       |      // Not what we wanted, push it back on the stream
  432|    107|      out = default_value;
  433|    107|      push_back(std::move(obj));
  434|    107|   }
  435|       |
  436|  1.20k|   return (*this);
  437|  1.20k|}
_ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension10TNAuthList5EntryEEERS0_RNSt3__16vectorIT_NS6_9allocatorIS8_EEEENS_9ASN1_TypeENS_10ASN1_ClassE:
  443|    157|BER_Decoder& BER_Decoder::decode_list(std::vector<T>& vec, ASN1_Type type_tag, ASN1_Class class_tag) {
  444|    157|   BER_Decoder list = start_cons(type_tag, class_tag);
  445|       |
  446|    415|   while(list.more_items()) {
  ------------------
  |  Branch (446:10): [True: 258, False: 157]
  ------------------
  447|    258|      T value;
  448|    258|      list.decode(value);
  449|    258|      vec.push_back(std::move(value));
  450|    258|   }
  451|       |
  452|    157|   list.end_cons();
  453|       |
  454|    157|   return (*this);
  455|    157|}
_ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension15IPAddressBlocks15IPAddressFamilyEEERS0_RNSt3__16vectorIT_NS6_9allocatorIS8_EEEENS_9ASN1_TypeENS_10ASN1_ClassE:
  443|  1.02k|BER_Decoder& BER_Decoder::decode_list(std::vector<T>& vec, ASN1_Type type_tag, ASN1_Class class_tag) {
  444|  1.02k|   BER_Decoder list = start_cons(type_tag, class_tag);
  445|       |
  446|  2.14k|   while(list.more_items()) {
  ------------------
  |  Branch (446:10): [True: 1.11k, False: 1.02k]
  ------------------
  447|  1.11k|      T value;
  448|  1.11k|      list.decode(value);
  449|  1.11k|      vec.push_back(std::move(value));
  450|  1.11k|   }
  451|       |
  452|  1.02k|   list.end_cons();
  453|       |
  454|  1.02k|   return (*this);
  455|  1.02k|}
_ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS3_7VersionE4EEEEERS0_RNSt3__16vectorIT_NS8_9allocatorISA_EEEENS_9ASN1_TypeENS_10ASN1_ClassE:
  443|    386|BER_Decoder& BER_Decoder::decode_list(std::vector<T>& vec, ASN1_Type type_tag, ASN1_Class class_tag) {
  444|    386|   BER_Decoder list = start_cons(type_tag, class_tag);
  445|       |
  446|  1.74k|   while(list.more_items()) {
  ------------------
  |  Branch (446:10): [True: 1.36k, False: 386]
  ------------------
  447|  1.36k|      T value;
  448|  1.36k|      list.decode(value);
  449|  1.36k|      vec.push_back(std::move(value));
  450|  1.36k|   }
  451|       |
  452|    386|   list.end_cons();
  453|       |
  454|    386|   return (*this);
  455|    386|}
_ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS3_7VersionE16EEEEERS0_RNSt3__16vectorIT_NS8_9allocatorISA_EEEENS_9ASN1_TypeENS_10ASN1_ClassE:
  443|    424|BER_Decoder& BER_Decoder::decode_list(std::vector<T>& vec, ASN1_Type type_tag, ASN1_Class class_tag) {
  444|    424|   BER_Decoder list = start_cons(type_tag, class_tag);
  445|       |
  446|  1.98k|   while(list.more_items()) {
  ------------------
  |  Branch (446:10): [True: 1.55k, False: 424]
  ------------------
  447|  1.55k|      T value;
  448|  1.55k|      list.decode(value);
  449|  1.55k|      vec.push_back(std::move(value));
  450|  1.55k|   }
  451|       |
  452|    424|   list.end_cons();
  453|       |
  454|    424|   return (*this);
  455|    424|}
_ZN5Botan11BER_Decoder11decode_listINS_14Cert_Extension8ASBlocks11ASIdOrRangeEEERS0_RNSt3__16vectorIT_NS6_9allocatorIS8_EEEENS_9ASN1_TypeENS_10ASN1_ClassE:
  443|  1.35k|BER_Decoder& BER_Decoder::decode_list(std::vector<T>& vec, ASN1_Type type_tag, ASN1_Class class_tag) {
  444|  1.35k|   BER_Decoder list = start_cons(type_tag, class_tag);
  445|       |
  446|  6.83k|   while(list.more_items()) {
  ------------------
  |  Branch (446:10): [True: 5.47k, False: 1.35k]
  ------------------
  447|  5.47k|      T value;
  448|  5.47k|      list.decode(value);
  449|  5.47k|      vec.push_back(std::move(value));
  450|  5.47k|   }
  451|       |
  452|  1.35k|   list.end_cons();
  453|       |
  454|  1.35k|   return (*this);
  455|  1.35k|}

_ZN5Botan6BigIntC2Ev:
   45|  14.1k|      BigInt() = default;
_ZNK5Botan6BigInt9serializeINSt3__16vectorIhNS2_9allocatorIhEEEEEET_v:
  760|  3.59k|      T serialize() const {
  761|  3.59k|         return serialize<T>(this->bytes());
  762|  3.59k|      }
_ZNK5Botan6BigInt9serializeINSt3__16vectorIhNS2_9allocatorIhEEEEEET_m:
  747|  3.59k|      T serialize(size_t len) const {
  748|       |         // TODO this supports std::vector and secure_vector
  749|       |         // it would be nice if this also could work with std::array as in
  750|       |         //   bn.serialize_to<std::array<uint8_t, 32>>(32);
  751|  3.59k|         T out(len);
  752|  3.59k|         this->serialize_to(out);
  753|  3.59k|         return out;
  754|  3.59k|      }
_ZNK5Botan6BigInt6signumEv:
  467|  13.2k|      int signum() const {
  468|  13.2k|         if(sig_words() == 0) {
  ------------------
  |  Branch (468:13): [True: 382, False: 12.9k]
  ------------------
  469|    382|            return 0;
  470|    382|         }
  471|  12.9k|         return (sign() == Negative) ? -1 : 1;
  ------------------
  |  Branch (471:17): [True: 1.71k, False: 11.1k]
  ------------------
  472|  13.2k|      }
_ZNK5Botan6BigInt9sig_wordsEv:
  648|  48.3k|      size_t sig_words() const { return m_data.sig_words(); }
_ZNK5Botan6BigInt4Data9sig_wordsEv:
 1102|  48.3k|            size_t sig_words() const {
 1103|  48.3k|               if(m_sig_words == sig_words_npos) {
  ------------------
  |  Branch (1103:19): [True: 13.4k, False: 34.9k]
  ------------------
 1104|  13.4k|                  m_sig_words = calc_sig_words();
 1105|  13.4k|               }
 1106|  48.3k|               return m_sig_words;
 1107|  48.3k|            }
_ZNK5Botan6BigInt4signEv:
  604|  14.7k|      Sign sign() const { return (m_signedness); }
_ZN5Botan6BigIntD2Ev:
  185|  14.1k|      ~BigInt() { _const_time_unpoison(); }
_ZN5Botan6BigInt5clearEv:
  415|  13.9k|      void clear() {
  416|  13.9k|         m_data.set_to_zero();
  417|  13.9k|         m_signedness = Positive;
  418|  13.9k|      }
_ZNK5Botan6BigInt7is_zeroEv:
  484|  1.84k|      bool is_zero() const { return sig_words() == 0; }
_ZNK5Botan6BigInt7word_atEm:
  574|  61.4k|      word word_at(size_t n) const { return m_data.get_word_at(n); }
_ZNK5Botan6BigInt12reverse_signEv:
  609|  1.84k|      Sign reverse_sign() const {
  610|  1.84k|         if(sign() == Positive) {
  ------------------
  |  Branch (610:13): [True: 1.84k, False: 0]
  ------------------
  611|  1.84k|            return Negative;
  612|  1.84k|         }
  613|      0|         return Positive;
  614|  1.84k|      }
_ZN5Botan6BigInt9flip_signEv:
  619|  1.84k|      BOTAN_DEPRECATED("Deprecated no replacement") void flip_sign() { set_sign(reverse_sign()); }
_ZN5Botan6BigInt8set_signENS0_4SignE:
  625|  1.84k|      void set_sign(Sign sign) {
  626|  1.84k|         if(sign == Negative && is_zero()) {
  ------------------
  |  Branch (626:13): [True: 1.84k, False: 0]
  |  Branch (626:33): [True: 0, False: 1.84k]
  ------------------
  627|      0|            sign = Positive;
  628|      0|         }
  629|       |
  630|  1.84k|         m_signedness = sign;
  631|  1.84k|      }
_ZN5Botan6BigInt18_assign_from_bytesENSt3__14spanIKhLm18446744073709551615EEE:
  983|  13.9k|      void _assign_from_bytes(std::span<const uint8_t> bytes) { assign_from_bytes(bytes); }
_ZNK5Botan6BigInt4Data10const_dataEv:
 1027|  14.1k|            const word* const_data() const { return m_reg.data(); }
_ZNK5Botan6BigInt4Data11get_word_atEm:
 1038|  61.4k|            word get_word_at(size_t n) const {
 1039|  61.4k|               if(n < m_reg.size()) {
  ------------------
  |  Branch (1039:19): [True: 61.4k, False: 0]
  ------------------
 1040|  61.4k|                  return m_reg[n];
 1041|  61.4k|               }
 1042|      0|               return 0;
 1043|  61.4k|            }
_ZNK5Botan6BigInt4Data4sizeEv:
 1075|  14.1k|            size_t size() const { return m_reg.size(); }
_ZN5Botan6BigInt4Data4swapERNSt3__16vectorImNS_16secure_allocatorImEEEE:
 1095|  13.9k|            void swap(secure_vector<word>& reg) noexcept {
 1096|  13.9k|               m_reg.swap(reg);
 1097|  13.9k|               invalidate_sig_words();
 1098|  13.9k|            }
_ZNK5Botan6BigInt4Data20invalidate_sig_wordsEv:
 1100|  13.9k|            void invalidate_sig_words() const noexcept { m_sig_words = sig_words_npos; }

_ZN5Botan20Buffered_Computation6updateENSt3__14spanIKhLm18446744073709551615EEE:
   40|  4.91k|      void update(std::span<const uint8_t> in) { add_data(in); }
_ZN5Botan20Buffered_Computation12final_stdvecEv:
   83|  1.84k|      std::vector<uint8_t> final_stdvec() { return final<std::vector<uint8_t>>(); }
_ZN5Botan20Buffered_Computation5finalITkNS_8concepts21resizable_byte_bufferENSt3__16vectorIhNS3_9allocatorIhEEEEEET_v:
   77|  1.84k|      T final() {
   78|  1.84k|         T output(output_length());
   79|  1.84k|         final_result(output);
   80|  1.84k|         return output;
   81|  1.84k|      }
_ZN5Botan20Buffered_ComputationD2Ev:
  130|  1.22k|      virtual ~Buffered_Computation() = default;

_ZN5Botan17DataSource_MemoryC2ENSt3__14spanIKhLm18446744073709551615EEE:
  141|  41.9k|      explicit DataSource_Memory(std::span<const uint8_t> in) : m_source(in.begin(), in.end()), m_offset(0) {}
_ZN5Botan10DataSourceC2Ev:
  100|   147k|      DataSource() = default;
_ZN5Botan10DataSourceD2Ev:
  101|   147k|      virtual ~DataSource() = default;
_ZN5Botan17DataSource_MemoryC2ENSt3__16vectorIhNS_16secure_allocatorIhEEEE:
  135|    100|      explicit DataSource_Memory(secure_vector<uint8_t> in) : m_source(std::move(in)), m_offset(0) {}

_ZN5Botan11DER_Encoder14start_sequenceEv:
   67|  12.6k|      DER_Encoder& start_sequence() { return start_cons(ASN1_Type::Sequence, ASN1_Class::Universal); }
_ZN5Botan11DER_Encoder9raw_bytesENSt3__14spanIKhLm18446744073709551615EEE:
   89|  1.22k|      DER_Encoder& raw_bytes(std::span<const uint8_t> val) { return raw_bytes(val.data(), val.size()); }
_ZN5Botan11DER_Encoder10add_objectENS_9ASN1_TypeENS_10ASN1_ClassENSt3__14spanIKhLm18446744073709551615EEE:
  185|  1.61k|      DER_Encoder& add_object(ASN1_Type type_tag, ASN1_Class class_tag, std::span<const uint8_t> rep) {
  186|  1.61k|         return add_object(type_tag, class_tag, rep.data(), rep.size());
  187|  1.61k|      }
_ZN5Botan11DER_Encoder10add_objectENS_9ASN1_TypeENS_10ASN1_ClassERKNSt3__16vectorIhNS3_9allocatorIhEEEE:
  189|    614|      DER_Encoder& add_object(ASN1_Type type_tag, ASN1_Class class_tag, const std::vector<uint8_t>& rep) {
  190|    614|         return add_object(type_tag, class_tag, std::span{rep});
  191|    614|      }
_ZN5Botan11DER_Encoder10add_objectENS_9ASN1_TypeENS_10ASN1_ClassERKNSt3__16vectorIhNS_16secure_allocatorIhEEEE:
  193|    614|      DER_Encoder& add_object(ASN1_Type type_tag, ASN1_Class class_tag, const secure_vector<uint8_t>& rep) {
  194|    614|         return add_object(type_tag, class_tag, std::span{rep});
  195|    614|      }
_ZN5Botan11DER_Encoder12DER_SequenceC2EOS1_:
  229|  25.8k|                  m_type_tag(seq.m_type_tag),
  230|  25.8k|                  m_class_tag(seq.m_class_tag),
  231|  25.8k|                  m_contents(std::move(seq.m_contents)),
  232|  25.8k|                  m_set_contents(std::move(seq.m_set_contents)) {}
_ZN5Botan11DER_Encoder12DER_SequenceD2Ev:
  244|  38.5k|            ~DER_Sequence() = default;
_ZN5Botan11DER_Encoder6encodeINSt3__19allocatorIhEEEERS0_RKNS2_6vectorIhT_EENS_9ASN1_TypeE:
   98|    614|      DER_Encoder& encode(const std::vector<uint8_t, Alloc>& vec, ASN1_Type real_type) {
   99|    614|         return encode(vec.data(), vec.size(), real_type);
  100|    614|      }

_ZNK5Botan7DNSName9to_stringEv:
   44|    239|      const std::string& to_string() const { return m_name; }
_ZN5Botan7DNSNameC2ENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEE:
   78|  14.4k|      explicit DNSName(std::string canonical) : m_name(std::move(canonical)) {}
_ZNK5Botan7DNSNamessERKS0_:
   66|   167k|      auto operator<=>(const DNSName&) const = default;

_ZN5Botan12EmailAddressC2ENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS_7DNSNameE:
   49|    204|            m_local_part(std::move(local_part)), m_domain(std::move(domain)) {}
_ZNK5Botan12EmailAddressssERKS0_:
   44|    100|      auto operator<=>(const EmailAddress&) const = default;

_ZNK5Botan9Exception4whatEv:
   94|  4.79k|      const char* what() const noexcept override { return m_msg.c_str(); }

_ZN5Botan10hex_encodeENSt3__14spanIKhLm18446744073709551615EEEb:
   43|  1.22k|inline std::string hex_encode(std::span<const uint8_t> input, bool uppercase = true) {
   44|  1.22k|   return hex_encode(input.data(), input.size(), uppercase);
   45|  1.22k|}

_ZNK5Botan11IPv4AddressssERKS0_:
   39|    462|      auto operator<=>(const IPv4Address&) const = default;
_ZN5Botan11IPv4AddressC2Ej:
   25|    284|      explicit IPv4Address(uint32_t ip) : m_ip(ip) {}
_ZNK5Botan11IPv4AddressanERKS0_:
   37|      8|      IPv4Address operator&(const IPv4Address& other) const { return IPv4Address(m_ip & other.m_ip); }

_ZNK5Botan11IPv6AddressssERKS0_:
   52|  2.97k|      auto operator<=>(const IPv6Address&) const = default;
_ZN5Botan11IPv6AddressC2ENSt3__15arrayIhLm16EEE:
   29|     40|      explicit IPv6Address(std::array<uint8_t, 16> ip) : m_ip(ip) {}

_ZN5Botan11clear_bytesEPvm:
  101|  14.1k|inline constexpr void clear_bytes(void* ptr, size_t bytes) {
  102|  14.1k|   if(bytes > 0) {
  ------------------
  |  Branch (102:7): [True: 137, False: 13.9k]
  ------------------
  103|    137|      std::memset(ptr, 0, bytes);
  104|    137|   }
  105|  14.1k|}
_ZN5Botan8copy_memIhQsr3stdE12is_trivial_vIu7__decayIT_EEEEvPS1_PKS1_m:
  144|  5.51M|inline constexpr void copy_mem(T* out, const T* in, size_t n) {
  145|  5.51M|   BOTAN_ASSERT_IMPLICATION(n > 0, in != nullptr && out != nullptr, "If n > 0 then args are not null");
  ------------------
  |  |  103|  5.51M|   do {                                                                                          \
  |  |  104|  5.51M|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                                              \
  |  |  105|  10.9M|      if((expr1) && !(expr2)) {                                                                  \
  |  |  ------------------
  |  |  |  Branch (105:10): [True: 5.48M, False: 30.6k]
  |  |  |  Branch (105:23): [True: 5.48M, False: 0]
  |  |  |  Branch (105:23): [True: 5.48M, False: 0]
  |  |  ------------------
  |  |  106|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                                     \
  |  |  107|      0|         Botan::assertion_failure(#expr1 " implies " #expr2, msg, __func__, __FILE__, __LINE__); \
  |  |  108|      0|      }                                                                                          \
  |  |  109|  5.51M|   } while(0)
  |  |  ------------------
  |  |  |  Branch (109:12): [Folded, False: 5.51M]
  |  |  ------------------
  ------------------
  146|       |
  147|  5.51M|   if(in != nullptr && out != nullptr && n > 0) {
  ------------------
  |  Branch (147:7): [True: 5.51M, False: 1.23k]
  |  Branch (147:24): [True: 5.51M, False: 2.04k]
  |  Branch (147:42): [True: 5.48M, False: 27.3k]
  ------------------
  148|  5.48M|      std::memmove(out, in, sizeof(T) * n);
  149|  5.48M|   }
  150|  5.51M|}
_ZN5Botan19secure_scrub_memoryITkNS_6ranges23contiguous_output_rangeERNSt3__16vectorIhNS2_9allocatorIhEEEEEEvOT_:
   59|   613k|void secure_scrub_memory(ranges::contiguous_output_range auto&& data) {
   60|   613k|   secure_scrub_memory(std::ranges::data(data), ranges::size_bytes(data));
   61|   613k|}
_ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERKNSt3__14spanIhLm4EEEjQaaaasr3stdE23is_trivially_copyable_vIT0_Entsr3std6rangesE5rangeIS7_Esr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISF_EESG_E4type10value_typeEEEEvOSC_RKS7_:
  199|  31.9k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromT& in) {
  200|  31.9k|   typecast_copy(out, std::span<const FromT, 1>(&in, 1));
  201|  31.9k|}
_ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERKNSt3__14spanIhLm4EEETkNS1_16contiguous_rangeENS3_IKjLm1EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISG_EESH_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS9_IXsr21__is_primary_templateINSA_Iu14__remove_cvrefIDTclL_ZNSC_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSI_ISQ_EESR_E4type10value_typeEEEEvOSN_RKSD_:
  176|  31.9k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) {
  177|  31.9k|   ranges::assert_equal_byte_lengths(out, in);
  178|  31.9k|   std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out));
  179|  31.9k|}
_ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERKNSt3__14spanIhLm8EEEmQaaaasr3stdE23is_trivially_copyable_vIT0_Entsr3std6rangesE5rangeIS7_Esr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISF_EESG_E4type10value_typeEEEEvOSC_RKS7_:
  199|  10.2k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromT& in) {
  200|  10.2k|   typecast_copy(out, std::span<const FromT, 1>(&in, 1));
  201|  10.2k|}
_ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeERKNSt3__14spanIhLm8EEETkNS1_16contiguous_rangeENS3_IKmLm1EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISG_EESH_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS9_IXsr21__is_primary_templateINSA_Iu14__remove_cvrefIDTclL_ZNSC_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSI_ISQ_EESR_E4type10value_typeEEEEvOSN_RKSD_:
  176|  10.2k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) {
  177|  10.2k|   ranges::assert_equal_byte_lengths(out, in);
  178|  10.2k|   std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out));
  179|  10.2k|}
_ZN5Botan9clear_memIhEEvPT_m:
  118|    163|inline constexpr void clear_mem(T* ptr, size_t n) {
  119|    163|   clear_bytes(ptr, sizeof(T) * n);
  120|    163|}
_ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeENSt3__14spanIjLm1EEETkNS1_16contiguous_rangeENS3_IKhLm4EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEEEvOSL_RKSB_:
  176|    369|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) {
  177|    369|   ranges::assert_equal_byte_lengths(out, in);
  178|    369|   std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out));
  179|    369|}
_ZN5Botan13typecast_copyIjTkNS_6ranges16contiguous_rangeENSt3__14spanIKhLm4EEEQaaaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIT_Entsr3std6rangesE5rangeISK_EEEvRSK_RKSA_:
  188|    369|inline constexpr void typecast_copy(ToT& out, const FromR& in) {
  189|    369|   typecast_copy(std::span<ToT, 1>(&out, 1), in);
  190|    369|}
_ZN5Botan13typecast_copyIjTkNS_6ranges16contiguous_rangeENSt3__14spanIKhLm4EEEQaaaasr3stdE26is_default_constructible_vIT_Esr3stdE23is_trivially_copyable_vIS6_Esr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEEES6_RKSB_:
  210|    369|inline constexpr ToT typecast_copy(const FromR& src) {
  211|    369|   ToT dst;  // NOLINT(*-member-init)
  212|    369|   typecast_copy(dst, src);
  213|    369|   return dst;
  214|    369|}
_ZN5Botan13typecast_copyImTkNS_6ranges16contiguous_rangeENSt3__14spanIKhLm8EEEQaaaasr3stdE26is_default_constructible_vIT_Esr3stdE23is_trivially_copyable_vIS6_Esr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEEES6_RKSB_:
  210|  7.99k|inline constexpr ToT typecast_copy(const FromR& src) {
  211|  7.99k|   ToT dst;  // NOLINT(*-member-init)
  212|  7.99k|   typecast_copy(dst, src);
  213|  7.99k|   return dst;
  214|  7.99k|}
_ZN5Botan13typecast_copyImTkNS_6ranges16contiguous_rangeENSt3__14spanIKhLm8EEEQaaaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIT_Entsr3std6rangesE5rangeISK_EEEvRSK_RKSA_:
  188|  7.99k|inline constexpr void typecast_copy(ToT& out, const FromR& in) {
  189|  7.99k|   typecast_copy(std::span<ToT, 1>(&out, 1), in);
  190|  7.99k|}
_ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeENSt3__14spanImLm1EEETkNS1_16contiguous_rangeENS3_IKhLm8EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEEEvOSL_RKSB_:
  176|  7.99k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) {
  177|  7.99k|   ranges::assert_equal_byte_lengths(out, in);
  178|  7.99k|   std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out));
  179|  7.99k|}
_ZN5Botan9clear_memImEEvPT_m:
  118|  13.9k|inline constexpr void clear_mem(T* ptr, size_t n) {
  119|  13.9k|   clear_bytes(ptr, sizeof(T) * n);
  120|  13.9k|}
_ZN5Botan8copy_memITkNS_6ranges23contiguous_output_rangeENSt3__14spanIhLm18446744073709551615EEETkNS1_16contiguous_rangeENS3_IKhLm18446744073709551615EEEQaasr3stdE9is_same_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeENS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIST_EEEvOSB_RKSL_:
  160|  11.7k|inline constexpr void copy_mem(OutR&& out /* NOLINT(*-std-forward) */, const InR& in) {
  161|  11.7k|   ranges::assert_equal_byte_lengths(out, in);
  162|  11.7k|   if(std::is_constant_evaluated()) {
  ------------------
  |  Branch (162:7): [Folded, False: 11.7k]
  ------------------
  163|      0|      std::copy(std::ranges::begin(in), std::ranges::end(in), std::ranges::begin(out));
  164|  11.7k|   } else if(ranges::size_bytes(out) > 0) {
  ------------------
  |  Branch (164:14): [True: 11.7k, False: 0]
  ------------------
  165|  11.7k|      std::memmove(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out));
  166|  11.7k|   }
  167|  11.7k|}
_ZN5Botan13typecast_copyImTkNS_6ranges16contiguous_rangeENSt3__14spanIhLm8EEEQaaaasr3stdE26is_default_constructible_vIT_Esr3stdE23is_trivially_copyable_vIS5_Esr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEEES5_RKSA_:
  210|  11.7k|inline constexpr ToT typecast_copy(const FromR& src) {
  211|  11.7k|   ToT dst;  // NOLINT(*-member-init)
  212|  11.7k|   typecast_copy(dst, src);
  213|  11.7k|   return dst;
  214|  11.7k|}
_ZN5Botan13typecast_copyImTkNS_6ranges16contiguous_rangeENSt3__14spanIhLm8EEEQaaaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISC_EESD_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIT_Entsr3std6rangesE5rangeISJ_EEEvRSJ_RKS9_:
  188|  11.7k|inline constexpr void typecast_copy(ToT& out, const FromR& in) {
  189|  11.7k|   typecast_copy(std::span<ToT, 1>(&out, 1), in);
  190|  11.7k|}
_ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeENSt3__14spanImLm1EEETkNS1_16contiguous_rangeENS3_IhLm8EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS6_IXsr21__is_primary_templateINS7_Iu14__remove_cvrefIDTclL_ZNS9_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSF_ISN_EESO_E4type10value_typeEEEEvOSK_RKSA_:
  176|  11.7k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) {
  177|  11.7k|   ranges::assert_equal_byte_lengths(out, in);
  178|  11.7k|   std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out));
  179|  11.7k|}
_ZN5Botan13typecast_copyItTkNS_6ranges16contiguous_rangeENSt3__14spanIKhLm2EEEQaaaasr3stdE26is_default_constructible_vIT_Esr3stdE23is_trivially_copyable_vIS6_Esr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEEES6_RKSB_:
  210|  4.14k|inline constexpr ToT typecast_copy(const FromR& src) {
  211|  4.14k|   ToT dst;  // NOLINT(*-member-init)
  212|  4.14k|   typecast_copy(dst, src);
  213|  4.14k|   return dst;
  214|  4.14k|}
_ZN5Botan13typecast_copyItTkNS_6ranges16contiguous_rangeENSt3__14spanIKhLm2EEEQaaaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISD_EESE_E4type10value_typeEEsr3stdE23is_trivially_copyable_vIT_Entsr3std6rangesE5rangeISK_EEEvRSK_RKSA_:
  188|  4.14k|inline constexpr void typecast_copy(ToT& out, const FromR& in) {
  189|  4.14k|   typecast_copy(std::span<ToT, 1>(&out, 1), in);
  190|  4.14k|}
_ZN5Botan13typecast_copyITkNS_6ranges23contiguous_output_rangeENSt3__14spanItLm1EEETkNS1_16contiguous_rangeENS3_IKhLm2EEEQaasr3stdE23is_trivially_copyable_vINS2_11conditionalIXsr21__is_primary_templateINS2_15iterator_traitsIu14__remove_cvrefIDTclL_ZNS2_6ranges5__cpo5beginEEclsr3stdE7declvalIRT0_EEEEEEEEE5valueENS2_26indirectly_readable_traitsISE_EESF_E4type10value_typeEEsr3stdE23is_trivially_copyable_vINS7_IXsr21__is_primary_templateINS8_Iu14__remove_cvrefIDTclL_ZNSA_5beginEEclsr3stdE7declvalIRT_EEEEEEEEE5valueENSG_ISO_EESP_E4type10value_typeEEEEvOSL_RKSB_:
  176|  4.14k|inline constexpr void typecast_copy(ToR&& out /* NOLINT(*-std-forward) */, const FromR& in) {
  177|  4.14k|   ranges::assert_equal_byte_lengths(out, in);
  178|  4.14k|   std::memcpy(std::ranges::data(out), std::ranges::data(in), ranges::size_bytes(out));
  179|  4.14k|}
_ZN5Botan9clear_memIjEEvPT_m:
  118|      6|inline constexpr void clear_mem(T* ptr, size_t n) {
  119|      6|   clear_bytes(ptr, sizeof(T) * n);
  120|      6|}

_ZN5Botan15Key_ConstraintsC2ENS0_4BitsE:
  160|  1.17k|      Key_Constraints(Key_Constraints::Bits bits) : m_value(bits) {}
_ZN5Botan15Key_ConstraintsC2Ej:
  162|    836|      explicit Key_Constraints(uint32_t bits) : m_value(bits) {}
_ZN5Botan15Key_ConstraintsC2Ev:
  164|  4.35k|      Key_Constraints() : m_value(0) {}
_ZNK5Botan15Key_Constraints8includesENS0_4BitsE:
  184|    101|      bool includes(Key_Constraints::Bits other) const { return (m_value & other) == other; }
_ZNK5Botan15Key_Constraints5emptyEv:
  191|    343|      bool empty() const { return m_value == 0; }

_ZN5Botan7X509_DNC2Ev:
   48|  8.79k|      X509_DN() = default;
_ZN5Botan10ExtensionsC2Ev:
  861|  4.35k|      Extensions() = default;
_ZN5Botan15AlternativeNameC2Ev:
  201|  12.6k|      AlternativeName() = default;
_ZN5Botan15NameConstraintsC2Ev:
  608|  4.69k|      NameConstraints() = default;
_ZN5Botan10ExtensionsD2Ev:
  869|  4.35k|      ~Extensions() override = default;
_ZNK5Botan7X509_DN8get_bitsEv:
   87|  7.19k|      const std::vector<uint8_t>& get_bits() const { return m_dn_bits; }
_ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension9Key_UsageEEEPKT_RKNS_3OIDE:
  727|    614|      const T* get_extension_object_as(const OID& oid = T::static_oid()) const {
  728|    614|         if(const Certificate_Extension* extn = get_extension_object(oid)) {
  ------------------
  |  Branch (728:42): [True: 425, False: 189]
  ------------------
  729|       |            // Unknown_Extension oid_name is empty
  730|    425|            if(extn->oid_name().empty()) {
  ------------------
  |  Branch (730:16): [True: 133, False: 292]
  ------------------
  731|    133|               return nullptr;
  732|    292|            } else if(const T* extn_as_T = dynamic_cast<const T*>(extn)) {
  ------------------
  |  Branch (732:32): [True: 292, False: 0]
  ------------------
  733|    292|               return extn_as_T;
  734|    292|            } else {
  735|      0|               throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed");
  736|      0|            }
  737|    425|         }
  738|       |
  739|    189|         return nullptr;
  740|    614|      }
_ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension14Subject_Key_IDEEEPKT_RKNS_3OIDE:
  727|    614|      const T* get_extension_object_as(const OID& oid = T::static_oid()) const {
  728|    614|         if(const Certificate_Extension* extn = get_extension_object(oid)) {
  ------------------
  |  Branch (728:42): [True: 188, False: 426]
  ------------------
  729|       |            // Unknown_Extension oid_name is empty
  730|    188|            if(extn->oid_name().empty()) {
  ------------------
  |  Branch (730:16): [True: 47, False: 141]
  ------------------
  731|     47|               return nullptr;
  732|    141|            } else if(const T* extn_as_T = dynamic_cast<const T*>(extn)) {
  ------------------
  |  Branch (732:32): [True: 141, False: 0]
  ------------------
  733|    141|               return extn_as_T;
  734|    141|            } else {
  735|      0|               throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed");
  736|      0|            }
  737|    188|         }
  738|       |
  739|    426|         return nullptr;
  740|    614|      }
_ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension16Authority_Key_IDEEEPKT_RKNS_3OIDE:
  727|    614|      const T* get_extension_object_as(const OID& oid = T::static_oid()) const {
  728|    614|         if(const Certificate_Extension* extn = get_extension_object(oid)) {
  ------------------
  |  Branch (728:42): [True: 292, False: 322]
  ------------------
  729|       |            // Unknown_Extension oid_name is empty
  730|    292|            if(extn->oid_name().empty()) {
  ------------------
  |  Branch (730:16): [True: 114, False: 178]
  ------------------
  731|    114|               return nullptr;
  732|    178|            } else if(const T* extn_as_T = dynamic_cast<const T*>(extn)) {
  ------------------
  |  Branch (732:32): [True: 178, False: 0]
  ------------------
  733|    178|               return extn_as_T;
  734|    178|            } else {
  735|      0|               throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed");
  736|      0|            }
  737|    292|         }
  738|       |
  739|    322|         return nullptr;
  740|    614|      }
_ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension16Name_ConstraintsEEEPKT_RKNS_3OIDE:
  727|    614|      const T* get_extension_object_as(const OID& oid = T::static_oid()) const {
  728|    614|         if(const Certificate_Extension* extn = get_extension_object(oid)) {
  ------------------
  |  Branch (728:42): [True: 107, False: 507]
  ------------------
  729|       |            // Unknown_Extension oid_name is empty
  730|    107|            if(extn->oid_name().empty()) {
  ------------------
  |  Branch (730:16): [True: 91, False: 16]
  ------------------
  731|     91|               return nullptr;
  732|     91|            } else if(const T* extn_as_T = dynamic_cast<const T*>(extn)) {
  ------------------
  |  Branch (732:32): [True: 16, False: 0]
  ------------------
  733|     16|               return extn_as_T;
  734|     16|            } else {
  735|      0|               throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed");
  736|      0|            }
  737|    107|         }
  738|       |
  739|    507|         return nullptr;
  740|    614|      }
_ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension18Extended_Key_UsageEEEPKT_RKNS_3OIDE:
  727|    614|      const T* get_extension_object_as(const OID& oid = T::static_oid()) const {
  728|    614|         if(const Certificate_Extension* extn = get_extension_object(oid)) {
  ------------------
  |  Branch (728:42): [True: 219, False: 395]
  ------------------
  729|       |            // Unknown_Extension oid_name is empty
  730|    219|            if(extn->oid_name().empty()) {
  ------------------
  |  Branch (730:16): [True: 54, False: 165]
  ------------------
  731|     54|               return nullptr;
  732|    165|            } else if(const T* extn_as_T = dynamic_cast<const T*>(extn)) {
  ------------------
  |  Branch (732:32): [True: 165, False: 0]
  ------------------
  733|    165|               return extn_as_T;
  734|    165|            } else {
  735|      0|               throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed");
  736|      0|            }
  737|    219|         }
  738|       |
  739|    395|         return nullptr;
  740|    614|      }
_ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension17Basic_ConstraintsEEEPKT_RKNS_3OIDE:
  727|    614|      const T* get_extension_object_as(const OID& oid = T::static_oid()) const {
  728|    614|         if(const Certificate_Extension* extn = get_extension_object(oid)) {
  ------------------
  |  Branch (728:42): [True: 265, False: 349]
  ------------------
  729|       |            // Unknown_Extension oid_name is empty
  730|    265|            if(extn->oid_name().empty()) {
  ------------------
  |  Branch (730:16): [True: 83, False: 182]
  ------------------
  731|     83|               return nullptr;
  732|    182|            } else if(const T* extn_as_T = dynamic_cast<const T*>(extn)) {
  ------------------
  |  Branch (732:32): [True: 182, False: 0]
  ------------------
  733|    182|               return extn_as_T;
  734|    182|            } else {
  735|      0|               throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed");
  736|      0|            }
  737|    265|         }
  738|       |
  739|    349|         return nullptr;
  740|    614|      }
_ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension23Issuer_Alternative_NameEEEPKT_RKNS_3OIDE:
  727|    614|      const T* get_extension_object_as(const OID& oid = T::static_oid()) const {
  728|    614|         if(const Certificate_Extension* extn = get_extension_object(oid)) {
  ------------------
  |  Branch (728:42): [True: 180, False: 434]
  ------------------
  729|       |            // Unknown_Extension oid_name is empty
  730|    180|            if(extn->oid_name().empty()) {
  ------------------
  |  Branch (730:16): [True: 133, False: 47]
  ------------------
  731|    133|               return nullptr;
  732|    133|            } else if(const T* extn_as_T = dynamic_cast<const T*>(extn)) {
  ------------------
  |  Branch (732:32): [True: 47, False: 0]
  ------------------
  733|     47|               return extn_as_T;
  734|     47|            } else {
  735|      0|               throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed");
  736|      0|            }
  737|    180|         }
  738|       |
  739|    434|         return nullptr;
  740|    614|      }
_ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension24Subject_Alternative_NameEEEPKT_RKNS_3OIDE:
  727|    614|      const T* get_extension_object_as(const OID& oid = T::static_oid()) const {
  728|    614|         if(const Certificate_Extension* extn = get_extension_object(oid)) {
  ------------------
  |  Branch (728:42): [True: 154, False: 460]
  ------------------
  729|       |            // Unknown_Extension oid_name is empty
  730|    154|            if(extn->oid_name().empty()) {
  ------------------
  |  Branch (730:16): [True: 95, False: 59]
  ------------------
  731|     95|               return nullptr;
  732|     95|            } else if(const T* extn_as_T = dynamic_cast<const T*>(extn)) {
  ------------------
  |  Branch (732:32): [True: 59, False: 0]
  ------------------
  733|     59|               return extn_as_T;
  734|     59|            } else {
  735|      0|               throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed");
  736|      0|            }
  737|    154|         }
  738|       |
  739|    460|         return nullptr;
  740|    614|      }
_ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension20Certificate_PoliciesEEEPKT_RKNS_3OIDE:
  727|    614|      const T* get_extension_object_as(const OID& oid = T::static_oid()) const {
  728|    614|         if(const Certificate_Extension* extn = get_extension_object(oid)) {
  ------------------
  |  Branch (728:42): [True: 70, False: 544]
  ------------------
  729|       |            // Unknown_Extension oid_name is empty
  730|     70|            if(extn->oid_name().empty()) {
  ------------------
  |  Branch (730:16): [True: 31, False: 39]
  ------------------
  731|     31|               return nullptr;
  732|     39|            } else if(const T* extn_as_T = dynamic_cast<const T*>(extn)) {
  ------------------
  |  Branch (732:32): [True: 39, False: 0]
  ------------------
  733|     39|               return extn_as_T;
  734|     39|            } else {
  735|      0|               throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed");
  736|      0|            }
  737|     70|         }
  738|       |
  739|    544|         return nullptr;
  740|    614|      }
_ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension28Authority_Information_AccessEEEPKT_RKNS_3OIDE:
  727|    614|      const T* get_extension_object_as(const OID& oid = T::static_oid()) const {
  728|    614|         if(const Certificate_Extension* extn = get_extension_object(oid)) {
  ------------------
  |  Branch (728:42): [True: 247, False: 367]
  ------------------
  729|       |            // Unknown_Extension oid_name is empty
  730|    247|            if(extn->oid_name().empty()) {
  ------------------
  |  Branch (730:16): [True: 155, False: 92]
  ------------------
  731|    155|               return nullptr;
  732|    155|            } else if(const T* extn_as_T = dynamic_cast<const T*>(extn)) {
  ------------------
  |  Branch (732:32): [True: 92, False: 0]
  ------------------
  733|     92|               return extn_as_T;
  734|     92|            } else {
  735|      0|               throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed");
  736|      0|            }
  737|    247|         }
  738|       |
  739|    367|         return nullptr;
  740|    614|      }
_ZNK5Botan10Extensions23get_extension_object_asINS_14Cert_Extension23CRL_Distribution_PointsEEEPKT_RKNS_3OIDE:
  727|    614|      const T* get_extension_object_as(const OID& oid = T::static_oid()) const {
  728|    614|         if(const Certificate_Extension* extn = get_extension_object(oid)) {
  ------------------
  |  Branch (728:42): [True: 320, False: 294]
  ------------------
  729|       |            // Unknown_Extension oid_name is empty
  730|    320|            if(extn->oid_name().empty()) {
  ------------------
  |  Branch (730:16): [True: 301, False: 19]
  ------------------
  731|    301|               return nullptr;
  732|    301|            } else if(const T* extn_as_T = dynamic_cast<const T*>(extn)) {
  ------------------
  |  Branch (732:32): [True: 19, False: 0]
  ------------------
  733|     19|               return extn_as_T;
  734|     19|            } else {
  735|      0|               throw Decoding_Error("Exception::get_extension_object_as dynamic_cast failed");
  736|      0|            }
  737|    320|         }
  738|       |
  739|    294|         return nullptr;
  740|    614|      }
_ZNK5Botan15AlternativeName9uri_namesEv:
  254|     98|      const std::set<URI>& uri_names() const { return m_uri; }
_ZNK5Botan14GeneralSubtree4baseEv:
  590|    115|      const GeneralName& base() const { return m_base; }
_ZNK5Botan7X509_DN4rdnsEv:
  107|  1.22k|      const std::vector<std::vector<std::pair<OID, ASN1_String>>>& rdns() const { return m_rdn; }
_ZNK5Botan15AlternativeName14OtherNameValue3oidEv:
  174|    942|            const OID& oid() const { return m_oid; }
_ZNK5Botan15AlternativeName14OtherNameValueltERKS1_:
  178|    248|            bool operator<(const OtherNameValue& other) const {
  179|    248|               if(oid() != other.oid()) {
  ------------------
  |  Branch (179:19): [True: 223, False: 25]
  ------------------
  180|    223|                  return oid() < other.oid();
  181|    223|               }
  182|     25|               return m_value < other.m_value;
  183|    248|            }
_ZN5Botan15AlternativeName14OtherNameValueC2ERKNS_3OIDENSt3__16vectorIhNS5_9allocatorIhEEEE:
  188|    383|            OtherNameValue(const OID& oid, std::vector<uint8_t> value) : m_oid(oid), m_value(std::move(value)) {}
_ZN5Botan15AlternativeName16add_ipv4_addressEj:
  237|    198|      BOTAN_DEPRECATED("Use variant taking IPv4Address") void add_ipv4_address(uint32_t ipv4) {
  238|    198|         this->add_ipv4_address(IPv4Address(ipv4));
  239|    198|      }
_ZNK5Botan11GeneralName9type_codeEv:
  454|    115|      NameType type_code() const { return m_type; }
_ZN5Botan11GeneralName15EmailConstraintC2ENSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE:
  505|     60|            explicit EmailConstraint(std::string value) : m_value(std::move(value)) {}
_ZN5Botan11GeneralName13DNSConstraintC2ENSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE:
  523|     64|            explicit DNSConstraint(std::string value) : m_value(std::move(value)) {}
_ZN5Botan11GeneralName13URIConstraintC2ENSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE:
  541|     53|            explicit URIConstraint(std::string value) : m_value(std::move(value)) {}
_ZN5Botan10Extensions15Extensions_InfoC2EbRKNSt3__16vectorIhNS2_9allocatorIhEEEENS2_10unique_ptrINS_21Certificate_ExtensionENS2_14default_deleteISA_EEEE:
  885|  16.4k|                  m_obj(std::move(ext)), m_bits(encoding), m_critical(critical) {}
_ZN5Botan11GeneralNameC2Ev:
  421|    772|      BOTAN_DEPRECATED("Deprecated use NameConstraints") GeneralName() = default;
_ZN5Botan11GeneralName15EmailConstraintC2Ev:
  496|    772|            EmailConstraint() = default;
_ZN5Botan21Certificate_ExtensionD2Ev:
  701|  24.1k|      virtual ~Certificate_Extension() = default;

_ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm18446744073709551615EEETpTkNS0_14spanable_rangeEJNS3_IKhLm18446744073709551615EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E:
  100|  11.7k|{
  101|  11.7k|   const std::span s0{r0};
  102|       |
  103|       |   if constexpr(statically_spanable_range<R0>) {
  104|       |      constexpr size_t expected_size = s0.size_bytes();
  105|       |      (assert_exact_byte_length<expected_size>(rs), ...);
  106|  11.7k|   } else {
  107|  11.7k|      const size_t expected_size = s0.size_bytes();
  108|  11.7k|      const bool correct_size =
  109|  11.7k|         ((std::span<const std::ranges::range_value_t<Rs>>{rs}.size_bytes() == expected_size) && ...);
  110|       |
  111|  11.7k|      if(!correct_size) {
  ------------------
  |  Branch (111:10): [True: 0, False: 11.7k]
  ------------------
  112|      0|         memory_region_size_violation();
  113|      0|      }
  114|  11.7k|   }
  115|  11.7k|}
_ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__16vectorIhNS2_9allocatorIhEEEEEEmRKT_:
   59|   613k|inline constexpr size_t size_bytes(const spanable_range auto& r) {
   60|   613k|   return std::span{r}.size_bytes();
   61|   613k|}
_ZN5Botan6ranges24assert_exact_byte_lengthILm4ETkNS0_14spanable_rangeENSt3__14spanIhLm4EEEEEvRKT0_:
   77|  63.8k|inline constexpr void assert_exact_byte_length(const R& r) {
   78|  63.8k|   const std::span s{r};
   79|  63.8k|   if constexpr(statically_spanable_range<R>) {
   80|  63.8k|      static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths");
   81|       |   } else {
   82|       |      if(s.size_bytes() != expected) {
   83|       |         memory_region_size_violation();
   84|       |      }
   85|       |   }
   86|  63.8k|}
_ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm4EEETpTkNS0_14spanable_rangeEJNS3_IKjLm1EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E:
  100|  31.9k|{
  101|  31.9k|   const std::span s0{r0};
  102|       |
  103|  31.9k|   if constexpr(statically_spanable_range<R0>) {
  104|  31.9k|      constexpr size_t expected_size = s0.size_bytes();
  105|  31.9k|      (assert_exact_byte_length<expected_size>(rs), ...);
  106|       |   } else {
  107|       |      const size_t expected_size = s0.size_bytes();
  108|       |      const bool correct_size =
  109|       |         ((std::span<const std::ranges::range_value_t<Rs>>{rs}.size_bytes() == expected_size) && ...);
  110|       |
  111|       |      if(!correct_size) {
  112|       |         memory_region_size_violation();
  113|       |      }
  114|       |   }
  115|  31.9k|}
_ZN5Botan6ranges24assert_exact_byte_lengthILm4ETkNS0_14spanable_rangeENSt3__14spanIKjLm1EEEEEvRKT0_:
   77|  31.9k|inline constexpr void assert_exact_byte_length(const R& r) {
   78|  31.9k|   const std::span s{r};
   79|  31.9k|   if constexpr(statically_spanable_range<R>) {
   80|  31.9k|      static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths");
   81|       |   } else {
   82|       |      if(s.size_bytes() != expected) {
   83|       |         memory_region_size_violation();
   84|       |      }
   85|       |   }
   86|  31.9k|}
_ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIhLm4EEEEEmRKT_:
   59|  31.9k|inline constexpr size_t size_bytes(const spanable_range auto& r) {
   60|  31.9k|   return std::span{r}.size_bytes();
   61|  31.9k|}
_ZN5Botan6ranges24assert_exact_byte_lengthILm8ETkNS0_14spanable_rangeENSt3__14spanIhLm8EEEEEvRKT0_:
   77|  21.9k|inline constexpr void assert_exact_byte_length(const R& r) {
   78|  21.9k|   const std::span s{r};
   79|  21.9k|   if constexpr(statically_spanable_range<R>) {
   80|  21.9k|      static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths");
   81|       |   } else {
   82|       |      if(s.size_bytes() != expected) {
   83|       |         memory_region_size_violation();
   84|       |      }
   85|       |   }
   86|  21.9k|}
_ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm8EEETpTkNS0_14spanable_rangeEJNS3_IKmLm1EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E:
  100|  10.2k|{
  101|  10.2k|   const std::span s0{r0};
  102|       |
  103|  10.2k|   if constexpr(statically_spanable_range<R0>) {
  104|  10.2k|      constexpr size_t expected_size = s0.size_bytes();
  105|  10.2k|      (assert_exact_byte_length<expected_size>(rs), ...);
  106|       |   } else {
  107|       |      const size_t expected_size = s0.size_bytes();
  108|       |      const bool correct_size =
  109|       |         ((std::span<const std::ranges::range_value_t<Rs>>{rs}.size_bytes() == expected_size) && ...);
  110|       |
  111|       |      if(!correct_size) {
  112|       |         memory_region_size_violation();
  113|       |      }
  114|       |   }
  115|  10.2k|}
_ZN5Botan6ranges24assert_exact_byte_lengthILm8ETkNS0_14spanable_rangeENSt3__14spanIKmLm1EEEEEvRKT0_:
   77|  10.2k|inline constexpr void assert_exact_byte_length(const R& r) {
   78|  10.2k|   const std::span s{r};
   79|  10.2k|   if constexpr(statically_spanable_range<R>) {
   80|  10.2k|      static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths");
   81|       |   } else {
   82|       |      if(s.size_bytes() != expected) {
   83|       |         memory_region_size_violation();
   84|       |      }
   85|       |   }
   86|  10.2k|}
_ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIhLm8EEEEEmRKT_:
   59|  10.2k|inline constexpr size_t size_bytes(const spanable_range auto& r) {
   60|  10.2k|   return std::span{r}.size_bytes();
   61|  10.2k|}
_ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIhLm18446744073709551615EEETpTkNS0_14spanable_rangeEJNS3_IKjLm18446744073709551615EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E:
  100|  4.91k|{
  101|  4.91k|   const std::span s0{r0};
  102|       |
  103|       |   if constexpr(statically_spanable_range<R0>) {
  104|       |      constexpr size_t expected_size = s0.size_bytes();
  105|       |      (assert_exact_byte_length<expected_size>(rs), ...);
  106|  4.91k|   } else {
  107|  4.91k|      const size_t expected_size = s0.size_bytes();
  108|  4.91k|      const bool correct_size =
  109|  4.91k|         ((std::span<const std::ranges::range_value_t<Rs>>{rs}.size_bytes() == expected_size) && ...);
  110|       |
  111|  4.91k|      if(!correct_size) {
  ------------------
  |  Branch (111:10): [True: 0, False: 4.91k]
  ------------------
  112|      0|         memory_region_size_violation();
  113|      0|      }
  114|  4.91k|   }
  115|  4.91k|}
_ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIhLm18446744073709551615EEEEEmRKT_:
   59|  23.4k|inline constexpr size_t size_bytes(const spanable_range auto& r) {
   60|  23.4k|   return std::span{r}.size_bytes();
   61|  23.4k|}
_ZN5Botan6ranges24assert_exact_byte_lengthILm4ETkNS0_14spanable_rangeENSt3__14spanIKhLm4EEEEEvRKT0_:
   77|    738|inline constexpr void assert_exact_byte_length(const R& r) {
   78|    738|   const std::span s{r};
   79|    738|   if constexpr(statically_spanable_range<R>) {
   80|    738|      static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths");
   81|       |   } else {
   82|       |      if(s.size_bytes() != expected) {
   83|       |         memory_region_size_violation();
   84|       |      }
   85|       |   }
   86|    738|}
_ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanIjLm1EEETpTkNS0_14spanable_rangeEJNS3_IKhLm4EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E:
  100|    369|{
  101|    369|   const std::span s0{r0};
  102|       |
  103|    369|   if constexpr(statically_spanable_range<R0>) {
  104|    369|      constexpr size_t expected_size = s0.size_bytes();
  105|    369|      (assert_exact_byte_length<expected_size>(rs), ...);
  106|       |   } else {
  107|       |      const size_t expected_size = s0.size_bytes();
  108|       |      const bool correct_size =
  109|       |         ((std::span<const std::ranges::range_value_t<Rs>>{rs}.size_bytes() == expected_size) && ...);
  110|       |
  111|       |      if(!correct_size) {
  112|       |         memory_region_size_violation();
  113|       |      }
  114|       |   }
  115|    369|}
_ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanIjLm1EEEEEmRKT_:
   59|    369|inline constexpr size_t size_bytes(const spanable_range auto& r) {
   60|    369|   return std::span{r}.size_bytes();
   61|    369|}
_ZN5Botan6ranges24assert_exact_byte_lengthILm8ETkNS0_14spanable_rangeENSt3__14spanIKhLm8EEEEEvRKT0_:
   77|  15.9k|inline constexpr void assert_exact_byte_length(const R& r) {
   78|  15.9k|   const std::span s{r};
   79|  15.9k|   if constexpr(statically_spanable_range<R>) {
   80|  15.9k|      static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths");
   81|       |   } else {
   82|       |      if(s.size_bytes() != expected) {
   83|       |         memory_region_size_violation();
   84|       |      }
   85|       |   }
   86|  15.9k|}
_ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanImLm1EEETpTkNS0_14spanable_rangeEJNS3_IKhLm8EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E:
  100|  7.99k|{
  101|  7.99k|   const std::span s0{r0};
  102|       |
  103|  7.99k|   if constexpr(statically_spanable_range<R0>) {
  104|  7.99k|      constexpr size_t expected_size = s0.size_bytes();
  105|  7.99k|      (assert_exact_byte_length<expected_size>(rs), ...);
  106|       |   } else {
  107|       |      const size_t expected_size = s0.size_bytes();
  108|       |      const bool correct_size =
  109|       |         ((std::span<const std::ranges::range_value_t<Rs>>{rs}.size_bytes() == expected_size) && ...);
  110|       |
  111|       |      if(!correct_size) {
  112|       |         memory_region_size_violation();
  113|       |      }
  114|       |   }
  115|  7.99k|}
_ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanImLm1EEEEEmRKT_:
   59|  19.7k|inline constexpr size_t size_bytes(const spanable_range auto& r) {
   60|  19.7k|   return std::span{r}.size_bytes();
   61|  19.7k|}
_ZN5Botan6ranges24assert_exact_byte_lengthILm8ETkNS0_14spanable_rangeENSt3__15arrayIhLm8EEEEEvRKT0_:
   77|  11.7k|inline constexpr void assert_exact_byte_length(const R& r) {
   78|  11.7k|   const std::span s{r};
   79|  11.7k|   if constexpr(statically_spanable_range<R>) {
   80|  11.7k|      static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths");
   81|       |   } else {
   82|       |      if(s.size_bytes() != expected) {
   83|       |         memory_region_size_violation();
   84|       |      }
   85|       |   }
   86|  11.7k|}
_ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanImLm1EEETpTkNS0_14spanable_rangeEJNS3_IhLm8EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E:
  100|  11.7k|{
  101|  11.7k|   const std::span s0{r0};
  102|       |
  103|  11.7k|   if constexpr(statically_spanable_range<R0>) {
  104|  11.7k|      constexpr size_t expected_size = s0.size_bytes();
  105|  11.7k|      (assert_exact_byte_length<expected_size>(rs), ...);
  106|       |   } else {
  107|       |      const size_t expected_size = s0.size_bytes();
  108|       |      const bool correct_size =
  109|       |         ((std::span<const std::ranges::range_value_t<Rs>>{rs}.size_bytes() == expected_size) && ...);
  110|       |
  111|       |      if(!correct_size) {
  112|       |         memory_region_size_violation();
  113|       |      }
  114|       |   }
  115|  11.7k|}
_ZN5Botan6ranges24assert_exact_byte_lengthILm2ETkNS0_14spanable_rangeENSt3__14spanIKhLm2EEEEEvRKT0_:
   77|  8.29k|inline constexpr void assert_exact_byte_length(const R& r) {
   78|  8.29k|   const std::span s{r};
   79|  8.29k|   if constexpr(statically_spanable_range<R>) {
   80|  8.29k|      static_assert(s.size_bytes() == expected, "memory region does not have expected byte lengths");
   81|       |   } else {
   82|       |      if(s.size_bytes() != expected) {
   83|       |         memory_region_size_violation();
   84|       |      }
   85|       |   }
   86|  8.29k|}
_ZN5Botan6ranges25assert_equal_byte_lengthsITkNS0_14spanable_rangeENSt3__14spanItLm1EEETpTkNS0_14spanable_rangeEJNS3_IKhLm2EEEEEEvRKT_DpRKT0_QgtsZT0_Li0E:
  100|  4.14k|{
  101|  4.14k|   const std::span s0{r0};
  102|       |
  103|  4.14k|   if constexpr(statically_spanable_range<R0>) {
  104|  4.14k|      constexpr size_t expected_size = s0.size_bytes();
  105|  4.14k|      (assert_exact_byte_length<expected_size>(rs), ...);
  106|       |   } else {
  107|       |      const size_t expected_size = s0.size_bytes();
  108|       |      const bool correct_size =
  109|       |         ((std::span<const std::ranges::range_value_t<Rs>>{rs}.size_bytes() == expected_size) && ...);
  110|       |
  111|       |      if(!correct_size) {
  112|       |         memory_region_size_violation();
  113|       |      }
  114|       |   }
  115|  4.14k|}
_ZN5Botan6ranges10size_bytesITkNS0_14spanable_rangeENSt3__14spanItLm1EEEEEmRKT_:
   59|  4.14k|inline constexpr size_t size_bytes(const spanable_range auto& r) {
   60|  4.14k|   return std::span{r}.size_bytes();
   61|  4.14k|}

_ZN5Botan16secure_allocatorIhE8allocateEm:
   52|  64.8k|      T* allocate(std::size_t n) { return static_cast<T*>(allocate_memory(n, sizeof(T))); }
_ZN5Botan16secure_allocatorIhE10deallocateEPhm:
   54|  64.8k|      void deallocate(T* p, std::size_t n) { deallocate_memory(p, n, sizeof(T)); }
_ZN5Botan16secure_allocatorImE10deallocateEPmm:
   54|  13.9k|      void deallocate(T* p, std::size_t n) { deallocate_memory(p, n, sizeof(T)); }
_ZN5Botan16secure_allocatorImE8allocateEm:
   52|  13.9k|      T* allocate(std::size_t n) { return static_cast<T*>(allocate_memory(n, sizeof(T))); }
_ZN5BotanpLIhNS_16secure_allocatorIhEEmEERNSt3__16vectorIT_T0_EES8_RKNS3_4pairIPKS5_T1_EE:
  110|  17.5k|std::vector<T, Alloc>& operator+=(std::vector<T, Alloc>& out, const std::pair<const T*, L>& in) {
  111|  17.5k|   out.insert(out.end(), in.first, in.first + in.second);
  112|  17.5k|   return out;
  113|  17.5k|}
_ZN5Botan16secure_allocatorIjE10deallocateEPjm:
   54|  1.22k|      void deallocate(T* p, std::size_t n) { deallocate_memory(p, n, sizeof(T)); }
_ZN5Botan16secure_allocatorIjE8allocateEm:
   52|  1.22k|      T* allocate(std::size_t n) { return static_cast<T*>(allocate_memory(n, sizeof(T))); }

_ZN5Botan18unwrap_strong_typeIRjEEDcOT_:
  243|  31.9k|[[nodiscard]] constexpr decltype(auto) unwrap_strong_type(T&& t) {
  244|  31.9k|   if constexpr(!concepts::strong_type<std::remove_cvref_t<T>>) {
  245|       |      // If the parameter type isn't a strong type, return it as is.
  246|  31.9k|      return std::forward<T>(t);
  247|       |   } else {
  248|       |      // Unwrap the strong type and return the underlying value.
  249|       |      return std::forward<T>(t).get();
  250|       |   }
  251|  31.9k|}
_ZN5Botan18unwrap_strong_typeIRmEEDcOT_:
  243|  15.5k|[[nodiscard]] constexpr decltype(auto) unwrap_strong_type(T&& t) {
  244|  15.5k|   if constexpr(!concepts::strong_type<std::remove_cvref_t<T>>) {
  245|       |      // If the parameter type isn't a strong type, return it as is.
  246|  15.5k|      return std::forward<T>(t);
  247|       |   } else {
  248|       |      // Unwrap the strong type and return the underlying value.
  249|       |      return std::forward<T>(t).get();
  250|       |   }
  251|  15.5k|}
_ZN5Botan16wrap_strong_typeIjRjQoosr3stdE18constructible_fromIT_T0_Eaasr8conceptsE11strong_typeIS2_Esr3stdE18constructible_fromINS2_12wrapped_typeES3_EEEDcOS3_:
  268|    369|[[nodiscard]] constexpr decltype(auto) wrap_strong_type(ParamT&& t) {
  269|    369|   if constexpr(std::same_as<std::remove_cvref_t<ParamT>, T>) {
  270|       |      // Noop, if the parameter type already is the desired return type.
  271|    369|      return std::forward<ParamT>(t);
  272|       |   } else if constexpr(std::constructible_from<T, ParamT>) {
  273|       |      // Implicit conversion from the parameter type to the return type.
  274|       |      return T{std::forward<ParamT>(t)};
  275|       |   } else {
  276|       |      // Explicitly calling the wrapped type's constructor to support
  277|       |      // implicit conversions on types that mark their constructors as explicit.
  278|       |      static_assert(concepts::strong_type<T> && std::constructible_from<typename T::wrapped_type, ParamT>);
  279|       |      return T{typename T::wrapped_type{std::forward<ParamT>(t)}};
  280|       |   }
  281|    369|}
_ZN5Botan16wrap_strong_typeImRmQoosr3stdE18constructible_fromIT_T0_Eaasr8conceptsE11strong_typeIS2_Esr3stdE18constructible_fromINS2_12wrapped_typeES3_EEEDcOS3_:
  268|  19.7k|[[nodiscard]] constexpr decltype(auto) wrap_strong_type(ParamT&& t) {
  269|  19.7k|   if constexpr(std::same_as<std::remove_cvref_t<ParamT>, T>) {
  270|       |      // Noop, if the parameter type already is the desired return type.
  271|  19.7k|      return std::forward<ParamT>(t);
  272|       |   } else if constexpr(std::constructible_from<T, ParamT>) {
  273|       |      // Implicit conversion from the parameter type to the return type.
  274|       |      return T{std::forward<ParamT>(t)};
  275|       |   } else {
  276|       |      // Explicitly calling the wrapped type's constructor to support
  277|       |      // implicit conversions on types that mark their constructors as explicit.
  278|       |      static_assert(concepts::strong_type<T> && std::constructible_from<typename T::wrapped_type, ParamT>);
  279|       |      return T{typename T::wrapped_type{std::forward<ParamT>(t)}};
  280|       |   }
  281|  19.7k|}
_ZN5Botan16wrap_strong_typeItRtQoosr3stdE18constructible_fromIT_T0_Eaasr8conceptsE11strong_typeIS2_Esr3stdE18constructible_fromINS2_12wrapped_typeES3_EEEDcOS3_:
  268|  4.14k|[[nodiscard]] constexpr decltype(auto) wrap_strong_type(ParamT&& t) {
  269|  4.14k|   if constexpr(std::same_as<std::remove_cvref_t<ParamT>, T>) {
  270|       |      // Noop, if the parameter type already is the desired return type.
  271|  4.14k|      return std::forward<ParamT>(t);
  272|       |   } else if constexpr(std::constructible_from<T, ParamT>) {
  273|       |      // Implicit conversion from the parameter type to the return type.
  274|       |      return T{std::forward<ParamT>(t)};
  275|       |   } else {
  276|       |      // Explicitly calling the wrapped type's constructor to support
  277|       |      // implicit conversions on types that mark their constructors as explicit.
  278|       |      static_assert(concepts::strong_type<T> && std::constructible_from<typename T::wrapped_type, ParamT>);
  279|       |      return T{typename T::wrapped_type{std::forward<ParamT>(t)}};
  280|       |   }
  281|  4.14k|}
_ZN5Botan16wrap_strong_typeIjRKjQoosr3stdE18constructible_fromIT_T0_Eaasr8conceptsE11strong_typeIS3_Esr3stdE18constructible_fromINS3_12wrapped_typeES4_EEEDcOS4_:
  268|  5.33k|[[nodiscard]] constexpr decltype(auto) wrap_strong_type(ParamT&& t) {
  269|  5.33k|   if constexpr(std::same_as<std::remove_cvref_t<ParamT>, T>) {
  270|       |      // Noop, if the parameter type already is the desired return type.
  271|  5.33k|      return std::forward<ParamT>(t);
  272|       |   } else if constexpr(std::constructible_from<T, ParamT>) {
  273|       |      // Implicit conversion from the parameter type to the return type.
  274|       |      return T{std::forward<ParamT>(t)};
  275|       |   } else {
  276|       |      // Explicitly calling the wrapped type's constructor to support
  277|       |      // implicit conversions on types that mark their constructors as explicit.
  278|       |      static_assert(concepts::strong_type<T> && std::constructible_from<typename T::wrapped_type, ParamT>);
  279|       |      return T{typename T::wrapped_type{std::forward<ParamT>(t)}};
  280|       |   }
  281|  5.33k|}

_ZN5Botan3URI9AuthorityC2ENSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEENS2_8optionalIS8_EENS2_7variantIJNS_7DNSNameENS_11IPv4AddressENS_11IPv6AddressEEEENS9_ItEE:
   94|    944|                  m_raw(std::move(raw)), m_userinfo(std::move(userinfo)), m_host(std::move(host)), m_port(port) {}
_ZN5Botan3URIC2ENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES7_NS0_9AuthorityES7_NS1_8optionalIS7_EESA_:
  182|    857|            m_raw(std::move(raw)),
  183|    857|            m_scheme(std::move(scheme)),
  184|    857|            m_authority(std::move(authority)),
  185|    857|            m_path(std::move(path)),
  186|    857|            m_query(std::move(query)),
  187|    857|            m_fragment(std::move(fragment)) {}

_ZN5Botan14Cert_Extension9Key_Usage10static_oidEv:
   86|    614|      static OID static_oid() { return OID({2, 5, 29, 15}); }
_ZNK5Botan14Cert_Extension9Key_Usage15get_constraintsEv:
   84|    292|      Key_Constraints get_constraints() const { return m_constraints; }
_ZN5Botan14Cert_Extension14Subject_Key_ID10static_oidEv:
  120|    614|      static OID static_oid() { return OID({2, 5, 29, 14}); }
_ZNK5Botan14Cert_Extension14Subject_Key_ID10get_key_idEv:
  118|    141|      const std::vector<uint8_t>& get_key_id() const { return m_key_id; }
_ZN5Botan14Cert_Extension16Authority_Key_ID10static_oidEv:
  152|    614|      static OID static_oid() { return OID({2, 5, 29, 35}); }
_ZNK5Botan14Cert_Extension16Authority_Key_ID10get_key_idEv:
  150|    178|      const std::vector<uint8_t>& get_key_id() const { return m_key_id; }
_ZN5Botan14Cert_Extension16Name_Constraints10static_oidEv:
  282|    614|      static OID static_oid() { return OID({2, 5, 29, 30}); }
_ZNK5Botan14Cert_Extension16Name_Constraints20get_name_constraintsEv:
  280|     16|      const NameConstraints& get_name_constraints() const { return m_name_constraints; }
_ZN5Botan14Cert_Extension18Extended_Key_Usage10static_oidEv:
  244|    614|      static OID static_oid() { return OID({2, 5, 29, 37}); }
_ZNK5Botan14Cert_Extension18Extended_Key_Usage18object_identifiersEv:
  242|    165|      const std::vector<OID>& object_identifiers() const { return m_oids; }
_ZN5Botan14Cert_Extension17Basic_Constraints10static_oidEv:
   55|    614|      static OID static_oid() { return OID({2, 5, 29, 19}); }
_ZNK5Botan14Cert_Extension17Basic_Constraints5is_caEv:
   51|    182|      bool is_ca() const { return m_is_ca; }
_ZNK5Botan14Cert_Extension17Basic_Constraints22path_length_constraintEv:
   53|     54|      std::optional<size_t> path_length_constraint() const { return m_path_length_constraint; }
_ZN5Botan14Cert_Extension23Issuer_Alternative_Name10static_oidEv:
  206|    614|      static OID static_oid() { return OID({2, 5, 29, 18}); }
_ZNK5Botan14Cert_Extension23Issuer_Alternative_Name12get_alt_nameEv:
  204|     47|      const AlternativeName& get_alt_name() const { return m_alt_name; }
_ZN5Botan14Cert_Extension24Subject_Alternative_Name10static_oidEv:
  176|    614|      static OID static_oid() { return OID({2, 5, 29, 17}); }
_ZNK5Botan14Cert_Extension24Subject_Alternative_Name12get_alt_nameEv:
  174|     59|      const AlternativeName& get_alt_name() const { return m_alt_name; }
_ZN5Botan14Cert_Extension20Certificate_Policies10static_oidEv:
  314|    614|      static OID static_oid() { return OID({2, 5, 29, 32}); }
_ZNK5Botan14Cert_Extension20Certificate_Policies15get_policy_oidsEv:
  312|     39|      const std::vector<OID>& get_policy_oids() const { return m_oids; }
_ZN5Botan14Cert_Extension28Authority_Information_Access10static_oidEv:
  371|    614|      static OID static_oid() { return OID({1, 3, 6, 1, 5, 5, 7, 1, 1}); }
_ZNK5Botan14Cert_Extension28Authority_Information_Access19ocsp_responder_urisEv:
  369|     92|      const std::vector<URI>& ocsp_responder_uris() const { return m_ocsp_responders; }
_ZNK5Botan14Cert_Extension28Authority_Information_Access14ca_issuer_urisEv:
  377|     92|      const std::vector<URI>& ca_issuer_uris() const { return m_ca_issuers; }
_ZN5Botan14Cert_Extension23CRL_Distribution_Points10static_oidEv:
  487|    614|      static OID static_oid() { return OID({2, 5, 29, 31}); }
_ZNK5Botan14Cert_Extension23CRL_Distribution_Points27crl_distribution_point_urisEv:
  485|     19|      const std::vector<URI>& crl_distribution_point_uris() const { return m_crl_distribution_urls; }
_ZNK5Botan14Cert_Extension17Basic_Constraints8oid_nameEv:
   60|    432|      std::string oid_name() const override { return "X509v3.BasicConstraints"; }
_ZN5Botan14Cert_Extension9Key_UsageC2Ev:
   82|  1.17k|      explicit Key_Usage() : m_constraints(Key_Constraints::None) {}
_ZNK5Botan14Cert_Extension9Key_Usage8oid_nameEv:
   91|    599|      std::string oid_name() const override { return "X509v3.KeyUsage"; }
_ZNK5Botan14Cert_Extension14Subject_Key_ID8oid_nameEv:
  125|    142|      std::string oid_name() const override { return "X509v3.SubjectKeyIdentifier"; }
_ZNK5Botan14Cert_Extension16Authority_Key_ID8oid_nameEv:
  157|    179|      std::string oid_name() const override { return "X509v3.AuthorityKeyIdentifier"; }
_ZN5Botan14Cert_Extension24Subject_Alternative_NameC2ERKNS_15AlternativeNameE:
  184|    879|      explicit Subject_Alternative_Name(const AlternativeName& name = AlternativeName()) : m_alt_name(name) {}
_ZNK5Botan14Cert_Extension24Subject_Alternative_Name8oid_nameEv:
  187|     59|      std::string oid_name() const override { return "X509v3.SubjectAlternativeName"; }
_ZN5Botan14Cert_Extension23Issuer_Alternative_NameC2ERKNS_15AlternativeNameE:
  214|    485|      explicit Issuer_Alternative_Name(const AlternativeName& name = AlternativeName()) : m_alt_name(name) {}
_ZNK5Botan14Cert_Extension23Issuer_Alternative_Name8oid_nameEv:
  217|     48|      std::string oid_name() const override { return "X509v3.IssuerAlternativeName"; }
_ZNK5Botan14Cert_Extension18Extended_Key_Usage8oid_nameEv:
  249|    196|      std::string oid_name() const override { return "X509v3.ExtendedKeyUsage"; }
_ZNK5Botan14Cert_Extension16Name_Constraints8oid_nameEv:
  287|     16|      std::string oid_name() const override { return "X509v3.NameConstraints"; }
_ZNK5Botan14Cert_Extension20Certificate_Policies8oid_nameEv:
  325|     39|      std::string oid_name() const override { return "X509v3.CertificatePolicies"; }
_ZNK5Botan14Cert_Extension28Authority_Information_Access8oid_nameEv:
  380|     92|      std::string oid_name() const override { return "PKIX.AuthorityInformationAccess"; }
_ZN5Botan14Cert_Extension10CRL_NumberC2Ev:
  400|      3|      CRL_Number() : m_has_value(false), m_crl_number(0) {}
_ZNK5Botan14Cert_Extension10CRL_Number8oid_nameEv:
  411|      3|      std::string oid_name() const override { return "X509v3.CRLNumber"; }
_ZN5Botan14Cert_Extension14CRL_ReasonCodeC2ENS_8CRL_CodeE:
  433|      6|      explicit CRL_ReasonCode(CRL_Code r = CRL_Code::Unspecified) : m_reason(r) {}
_ZNK5Botan14Cert_Extension14CRL_ReasonCode8oid_nameEv:
  442|      6|      std::string oid_name() const override { return "X509v3.ReasonCode"; }
_ZN5Botan14Cert_Extension23CRL_Distribution_Points18Distribution_PointC2ERKNS_15AlternativeNameE:
  465|  1.32k|            explicit Distribution_Point(const AlternativeName& name = AlternativeName()) : m_point(name) {}
_ZNK5Botan14Cert_Extension23CRL_Distribution_Points18Distribution_Point5pointEv:
  467|     98|            const AlternativeName& point() const { return m_point; }
_ZNK5Botan14Cert_Extension23CRL_Distribution_Points8oid_nameEv:
  492|     19|      std::string oid_name() const override { return "X509v3.CRLDistributionPoints"; }
_ZNK5Botan14Cert_Extension30CRL_Issuing_Distribution_Point8oid_nameEv:
  527|      6|      std::string oid_name() const override { return "X509v3.CRLIssuingDistributionPoint"; }
_ZN5Botan14Cert_Extension12OCSP_NoCheck10static_oidEv:
  556|  6.10k|      static OID static_oid() { return OID({1, 3, 6, 1, 5, 5, 7, 48, 1, 5}); }
_ZNK5Botan14Cert_Extension8ASBlocks11ASIdOrRange3minEv:
  905|  20.2k|            asnum_t min() const { return m_min; }
_ZNK5Botan14Cert_Extension8ASBlocks11ASIdOrRange3maxEv:
  907|  7.34k|            asnum_t max() const { return m_max; }
_ZN5Botan14Cert_Extension8ASBlocks11ASIdOrRangeC2Ejj:
  913|    298|            ASIdOrRange(asnum_t min, asnum_t max) : m_min(min), m_max(max) {
  914|    298|               if(max < min) {
  ------------------
  |  Branch (914:19): [True: 0, False: 298]
  ------------------
  915|      0|                  throw Decoding_Error("AS range numbers must be sorted");
  916|      0|               }
  917|    298|            }
_ZN5Botan14Cert_Extension17Unknown_ExtensionC2ERKNS_3OIDEbb:
 1038|  13.7k|            m_oid(oid), m_critical(critical), m_failed_to_decode(failed_to_decode) {}
_ZNK5Botan14Cert_Extension17Unknown_Extension8oid_nameEv:
 1080|  2.57k|      std::string oid_name() const override { return ""; }
_ZNK5Botan14Cert_Extension15IPAddressBlocks9IPAddressILNS1_7VersionE4EE5valueEv:
  705|  19.3k|            std::array<uint8_t, Length> value() const { return m_value; }
_ZN5Botan14Cert_Extension15IPAddressBlocks9IPAddressILNS1_7VersionE4EE4nextEv:
  711|    475|            void next() {
  712|  1.03k|               for(auto it = m_value.rbegin(); it != m_value.rend(); it++) {
  ------------------
  |  Branch (712:48): [True: 1.03k, False: 0]
  ------------------
  713|       |                  // we increment the current octet
  714|  1.03k|                  (*it)++;
  715|       |                  // if it did not wrap around we are done, else look at the next octet
  716|  1.03k|                  if(*it != 0) {
  ------------------
  |  Branch (716:22): [True: 475, False: 556]
  ------------------
  717|    475|                     break;
  718|    475|                  }
  719|  1.03k|               }
  720|    475|            }
_ZNK5Botan14Cert_Extension15IPAddressBlocks9IPAddressILNS1_7VersionE16EE5valueEv:
  705|  30.6k|            std::array<uint8_t, Length> value() const { return m_value; }
_ZN5Botan14Cert_Extension15IPAddressBlocks9IPAddressILNS1_7VersionE16EE4nextEv:
  711|    473|            void next() {
  712|  6.21k|               for(auto it = m_value.rbegin(); it != m_value.rend(); it++) {
  ------------------
  |  Branch (712:48): [True: 6.21k, False: 0]
  ------------------
  713|       |                  // we increment the current octet
  714|  6.21k|                  (*it)++;
  715|       |                  // if it did not wrap around we are done, else look at the next octet
  716|  6.21k|                  if(*it != 0) {
  ------------------
  |  Branch (716:22): [True: 473, False: 5.73k]
  ------------------
  717|    473|                     break;
  718|    473|                  }
  719|  6.21k|               }
  720|    473|            }
_ZN5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE4EEC2ERKNS1_9IPAddressILS3_4EEES8_:
  758|    308|            IPAddressOrRange(const IPAddress<V>& min, const IPAddress<V>& max) : m_min(min), m_max(max) {
  759|    308|               if(max < min) {
  ------------------
  |  Branch (759:19): [True: 0, False: 308]
  ------------------
  760|      0|                  throw Decoding_Error("IP address ranges must be sorted");
  761|      0|               }
  762|    308|            }
_ZNK5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE4EE3minEv:
  764|  4.46k|            IPAddress<V> min() const { return m_min; }
_ZNK5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE4EE3maxEv:
  766|  1.86k|            IPAddress<V> max() const { return m_max; }
_ZN5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE16EEC2ERKNS1_9IPAddressILS3_16EEES8_:
  758|    413|            IPAddressOrRange(const IPAddress<V>& min, const IPAddress<V>& max) : m_min(min), m_max(max) {
  759|    413|               if(max < min) {
  ------------------
  |  Branch (759:19): [True: 0, False: 413]
  ------------------
  760|      0|                  throw Decoding_Error("IP address ranges must be sorted");
  761|      0|               }
  762|    413|            }
_ZNK5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE16EE3minEv:
  764|  5.00k|            IPAddress<V> min() const { return m_min; }
_ZNK5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE16EE3maxEv:
  766|  2.17k|            IPAddress<V> max() const { return m_max; }
_ZN5Botan14Cert_Extension14Subject_Key_IDC2Ev:
  108|    632|      Subject_Key_ID() = default;
_ZN5Botan14Cert_Extension30CRL_Issuing_Distribution_PointC2Ev:
  511|      6|      CRL_Issuing_Distribution_Point() = default;
_ZN5Botan14Cert_Extension16Name_ConstraintsC2Ev:
  270|    343|      Name_Constraints() = default;
_ZN5Botan14Cert_Extension23CRL_Distribution_PointsC2Ev:
  477|  1.28k|      CRL_Distribution_Points() = default;
_ZN5Botan14Cert_Extension20Certificate_PoliciesC2Ev:
  308|    345|      Certificate_Policies() = default;
_ZN5Botan14Cert_Extension16Authority_Key_IDC2Ev:
  146|    803|      Authority_Key_ID() = default;
_ZN5Botan14Cert_Extension18Extended_Key_UsageC2Ev:
  238|    474|      Extended_Key_Usage() = default;
_ZN5Botan14Cert_Extension21NoRevocationAvailableC2Ev:
  595|      9|      NoRevocationAvailable() = default;
_ZN5Botan14Cert_Extension28Authority_Information_AccessC2Ev:
  346|    513|      Authority_Information_Access() = default;
_ZN5Botan14Cert_Extension15IPAddressBlocksC2Ev:
  821|  1.02k|      IPAddressBlocks() = default;
_ZN5Botan14Cert_Extension8ASBlocksC2Ev:
  964|  1.65k|      ASBlocks() = default;
_ZN5Botan14Cert_Extension8ASBlocks13ASIdentifiersC2Ev:
  958|  1.65k|            ASIdentifiers() = default;
_ZN5Botan14Cert_Extension10TNAuthListC2Ev:
  662|    157|      TNAuthList() = default;
_ZN5Botan14Cert_Extension15IPAddressBlocks15IPAddressChoiceILNS1_7VersionE4EEC2Ev:
  783|  1.54k|            IPAddressChoice() = default;
_ZN5Botan14Cert_Extension15IPAddressBlocks15IPAddressChoiceILNS1_7VersionE16EEC2Ev:
  783|    474|            IPAddressChoice() = default;
_ZN5Botan14Cert_Extension8ASBlocks18ASIdentifierChoiceC2Ev:
  929|  1.47k|            ASIdentifierChoice() = default;
_ZN5Botan14Cert_Extension15IPAddressBlocks15IPAddressFamilyC2Ev:
  798|  1.11k|            IPAddressFamily() = default;
_ZN5Botan14Cert_ExtensionssENS0_15IPAddressBlocks9IPAddressILNS1_7VersionE4EEERKS4_:
  730|  2.93k|            friend std::strong_ordering operator<=>(const IPAddress<V> lhs, const IPAddress<V>& rhs) {
  731|  5.39k|               for(size_t i = 0; i < Length; i++) {
  ------------------
  |  Branch (731:34): [True: 5.22k, False: 166]
  ------------------
  732|  5.22k|                  if(lhs.value()[i] < rhs.value()[i]) {
  ------------------
  |  Branch (732:22): [True: 1.27k, False: 3.94k]
  ------------------
  733|  1.27k|                     return std::strong_ordering::less;
  734|  3.94k|                  } else if(lhs.value()[i] > rhs.value()[i]) {
  ------------------
  |  Branch (734:29): [True: 1.49k, False: 2.45k]
  ------------------
  735|  1.49k|                     return std::strong_ordering::greater;
  736|  1.49k|                  }
  737|  5.22k|               }
  738|    166|               return std::strong_ordering::equal;
  739|  2.93k|            }
_ZN5Botan14Cert_ExtensionssENS0_15IPAddressBlocks9IPAddressILNS1_7VersionE16EEERKS4_:
  730|  3.44k|            friend std::strong_ordering operator<=>(const IPAddress<V> lhs, const IPAddress<V>& rhs) {
  731|  8.35k|               for(size_t i = 0; i < Length; i++) {
  ------------------
  |  Branch (731:34): [True: 8.16k, False: 186]
  ------------------
  732|  8.16k|                  if(lhs.value()[i] < rhs.value()[i]) {
  ------------------
  |  Branch (732:22): [True: 1.49k, False: 6.66k]
  ------------------
  733|  1.49k|                     return std::strong_ordering::less;
  734|  6.66k|                  } else if(lhs.value()[i] > rhs.value()[i]) {
  ------------------
  |  Branch (734:29): [True: 1.76k, False: 4.90k]
  ------------------
  735|  1.76k|                     return std::strong_ordering::greater;
  736|  1.76k|                  }
  737|  8.16k|               }
  738|    186|               return std::strong_ordering::equal;
  739|  3.44k|            }
_ZN5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE4EEC2Ev:
  754|  1.36k|            IPAddressOrRange() = default;
_ZN5Botan14Cert_ExtensioneqERKNS0_15IPAddressBlocks9IPAddressILNS1_7VersionE4EEES6_:
  741|    475|            friend bool operator==(const IPAddress<V>& lhs, const IPAddress<V>& rhs) {
  742|    475|               return lhs.value() == rhs.value();
  743|    475|            }
_ZN5Botan14Cert_ExtensionplENS0_15IPAddressBlocks9IPAddressILNS1_7VersionE4EEEm:
  722|    475|            friend IPAddress<V> operator+(IPAddress<V> lhs, size_t rhs) {
  723|       |               // we only really need to be able to compute +1, so this is fine
  724|    950|               for(size_t i = 0; i < rhs; i++) {
  ------------------
  |  Branch (724:34): [True: 475, False: 475]
  ------------------
  725|    475|                  lhs.next();
  726|    475|               }
  727|    475|               return IPAddress<V>(lhs);
  728|    475|            }
_ZN5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE16EEC2Ev:
  754|  1.55k|            IPAddressOrRange() = default;
_ZN5Botan14Cert_ExtensioneqERKNS0_15IPAddressBlocks9IPAddressILNS1_7VersionE16EEES6_:
  741|    473|            friend bool operator==(const IPAddress<V>& lhs, const IPAddress<V>& rhs) {
  742|    473|               return lhs.value() == rhs.value();
  743|    473|            }
_ZN5Botan14Cert_ExtensionplENS0_15IPAddressBlocks9IPAddressILNS1_7VersionE16EEEm:
  722|    473|            friend IPAddress<V> operator+(IPAddress<V> lhs, size_t rhs) {
  723|       |               // we only really need to be able to compute +1, so this is fine
  724|    946|               for(size_t i = 0; i < rhs; i++) {
  ------------------
  |  Branch (724:34): [True: 473, False: 473]
  ------------------
  725|    473|                  lhs.next();
  726|    473|               }
  727|    473|               return IPAddress<V>(lhs);
  728|    473|            }
_ZN5Botan14Cert_Extension8ASBlocks11ASIdOrRangeC2Ev:
  909|  5.47k|            ASIdOrRange() = default;

_ZN5Botan11X509_ObjectC2Ev:
  120|  5.37k|      X509_Object() = default;

_Z4fuzzNSt3__14spanIKhLm18446744073709551615EEE:
   12|  5.37k|void fuzz(std::span<const uint8_t> in) {
   13|  5.37k|   if(in.size() > max_fuzzer_input_size) {
  ------------------
  |  Branch (13:7): [True: 0, False: 5.37k]
  ------------------
   14|      0|      return;
   15|      0|   }
   16|       |
   17|  5.37k|   try {
   18|  5.37k|      Botan::DataSource_Memory input(in);
   19|  5.37k|      const Botan::X509_Certificate cert(input);
   20|  5.37k|   } catch(const Botan::Exception& e) {}
   21|  5.37k|}

LLVMFuzzerInitialize:
   28|      2|extern "C" int LLVMFuzzerInitialize(int* /*argc*/, char*** /*argv*/) {
   29|       |   /*
   30|       |   * This disables the mlock pool, as overwrites within the pool are
   31|       |   * opaque to ASan or other instrumentation.
   32|       |   */
   33|      2|   ::setenv("BOTAN_MLOCK_POOL_SIZE", "0", 1);
   34|      2|   return 0;
   35|      2|}
LLVMFuzzerTestOneInput:
   39|  5.37k|extern "C" int LLVMFuzzerTestOneInput(const uint8_t in[], size_t len) {
   40|  5.37k|   if(len <= max_fuzzer_input_size) {
  ------------------
  |  Branch (40:7): [True: 5.37k, False: 7]
  ------------------
   41|  5.37k|      try {
   42|  5.37k|         fuzz(std::span<const uint8_t>(in, len));
   43|  5.37k|      } catch(const std::exception& e) {
   44|      0|         std::cerr << "Uncaught exception from fuzzer driver " << e.what() << "\n";
   45|      0|         abort();
   46|      0|      } catch(...) {
   47|      0|         std::cerr << "Uncaught exception from fuzzer driver (unknown type)\n";
   48|      0|         abort();
   49|      0|      }
   50|  5.37k|   }
   51|  5.37k|   return 0;
   52|  5.37k|}

_ZNK5Botan19AlgorithmIdentifier19parameters_are_nullEv:
   49|  6.39k|bool AlgorithmIdentifier::parameters_are_null() const {
   50|  6.39k|   return (m_parameters.size() == 2 && (m_parameters[0] == 0x05) && (m_parameters[1] == 0x00));
  ------------------
  |  Branch (50:12): [True: 6.37k, False: 20]
  |  Branch (50:40): [True: 6.36k, False: 18]
  |  Branch (50:69): [True: 6.33k, False: 26]
  ------------------
   51|  6.39k|}
_ZN5BotaneqERKNS_19AlgorithmIdentifierES2_:
   53|  3.69k|bool operator==(const AlgorithmIdentifier& a1, const AlgorithmIdentifier& a2) {
   54|  3.69k|   if(a1.oid() != a2.oid()) {
  ------------------
  |  Branch (54:7): [True: 35, False: 3.65k]
  ------------------
   55|     35|      return false;
   56|     35|   }
   57|       |
   58|       |   /*
   59|       |   * Treat NULL and empty as equivalent
   60|       |   */
   61|  3.65k|   if(a1.parameters_are_null_or_empty() && a2.parameters_are_null_or_empty()) {
  ------------------
  |  Branch (61:7): [True: 3.62k, False: 36]
  |  Branch (61:44): [True: 3.59k, False: 28]
  ------------------
   62|  3.59k|      return true;
   63|  3.59k|   }
   64|       |
   65|     64|   return (a1.parameters() == a2.parameters());
   66|  3.65k|}
_ZN5BotanneERKNS_19AlgorithmIdentifierES2_:
   68|  3.69k|bool operator!=(const AlgorithmIdentifier& a1, const AlgorithmIdentifier& a2) {
   69|  3.69k|   return !(a1 == a2);
   70|  3.69k|}
_ZNK5Botan19AlgorithmIdentifier11encode_intoERNS_11DER_EncoderE:
   75|    614|void AlgorithmIdentifier::encode_into(DER_Encoder& codec) const {
   76|    614|   codec.start_sequence().encode(oid()).raw_bytes(parameters()).end_cons();
   77|    614|}
_ZN5Botan19AlgorithmIdentifier11decode_fromERNS_11BER_DecoderE:
   82|  12.4k|void AlgorithmIdentifier::decode_from(BER_Decoder& codec) {
   83|  12.4k|   codec.start_sequence().decode(m_oid).raw_bytes(m_parameters).end_cons();
   84|  12.4k|}

_ZNK5Botan11ASN1_Object10BER_encodeEv:
   20|    614|std::vector<uint8_t> ASN1_Object::BER_encode() const {
   21|    614|   std::vector<uint8_t> output;
   22|    614|   DER_Encoder der(output);
   23|    614|   this->encode_into(der);
   24|    614|   return output;
   25|    614|}
_ZN5Botan10BER_ObjectD2Ev:
   27|   613k|BER_Object::~BER_Object() {
   28|   613k|   secure_scrub_memory(m_value);
   29|   613k|}
_ZNK5Botan10BER_Object11assert_is_aENS_9ASN1_TypeENS_10ASN1_ClassENSt3__117basic_string_viewIcNS3_11char_traitsIcEEEE:
   34|   157k|void BER_Object::assert_is_a(ASN1_Type expected_type_tag, ASN1_Class expected_class_tag, std::string_view descr) const {
   35|   157k|   if(!this->is_a(expected_type_tag, expected_class_tag)) {
  ------------------
  |  Branch (35:7): [True: 1.74k, False: 155k]
  ------------------
   36|  1.74k|      std::stringstream msg;
   37|       |
   38|  1.74k|      msg << "Tag mismatch when decoding " << descr << " got ";
   39|       |
   40|  1.74k|      if(m_class_tag == ASN1_Class::NoObject && m_type_tag == ASN1_Type::NoObject) {
  ------------------
  |  Branch (40:10): [True: 57, False: 1.69k]
  |  Branch (40:49): [True: 57, False: 0]
  ------------------
   41|     57|         msg << "EOF";
   42|  1.69k|      } else {
   43|  1.69k|         if(m_class_tag == ASN1_Class::Universal || m_class_tag == ASN1_Class::Constructed) {
  ------------------
  |  Branch (43:13): [True: 340, False: 1.35k]
  |  Branch (43:53): [True: 962, False: 390]
  ------------------
   44|  1.30k|            msg << asn1_tag_to_string(m_type_tag);
   45|  1.30k|         } else {
   46|    390|            msg << std::to_string(static_cast<uint32_t>(m_type_tag));
   47|    390|         }
   48|       |
   49|  1.69k|         msg << "/" << asn1_class_to_string(m_class_tag);
   50|  1.69k|      }
   51|       |
   52|  1.74k|      msg << " expected ";
   53|       |
   54|  1.74k|      if(expected_class_tag == ASN1_Class::Universal || expected_class_tag == ASN1_Class::Constructed) {
  ------------------
  |  Branch (54:10): [True: 370, False: 1.37k]
  |  Branch (54:57): [True: 1.36k, False: 19]
  ------------------
   55|  1.73k|         msg << asn1_tag_to_string(expected_type_tag);
   56|  1.73k|      } else {
   57|     19|         msg << std::to_string(static_cast<uint32_t>(expected_type_tag));
   58|     19|      }
   59|       |
   60|  1.74k|      msg << "/" << asn1_class_to_string(expected_class_tag);
   61|       |
   62|  1.74k|      throw BER_Decoding_Error(msg.str());
   63|  1.74k|   }
   64|   157k|}
_ZNK5Botan10BER_Object4is_aENS_9ASN1_TypeENS_10ASN1_ClassE:
   66|   269k|bool BER_Object::is_a(ASN1_Type expected_type_tag, ASN1_Class expected_class_tag) const {
   67|   269k|   return (m_type_tag == expected_type_tag && m_class_tag == expected_class_tag);
  ------------------
  |  Branch (67:12): [True: 186k, False: 82.9k]
  |  Branch (67:47): [True: 186k, False: 406]
  ------------------
   68|   269k|}
_ZNK5Botan10BER_Object4is_aEiNS_10ASN1_ClassE:
   70|  79.6k|bool BER_Object::is_a(int expected_type_tag, ASN1_Class expected_class_tag) const {
   71|  79.6k|   return is_a(ASN1_Type(expected_type_tag), expected_class_tag);
   72|  79.6k|}
_ZN5Botan10BER_Object11set_taggingENS_9ASN1_TypeENS_10ASN1_ClassE:
   74|   270k|void BER_Object::set_tagging(ASN1_Type type_tag, ASN1_Class class_tag) {
   75|   270k|   m_type_tag = type_tag;
   76|   270k|   m_class_tag = class_tag;
   77|   270k|}
_ZN5Botan20asn1_class_to_stringENS_10ASN1_ClassE:
   79|  3.44k|std::string asn1_class_to_string(ASN1_Class type) {
   80|  3.44k|   switch(type) {
   81|    710|      case ASN1_Class::Universal:
  ------------------
  |  Branch (81:7): [True: 710, False: 2.73k]
  ------------------
   82|    710|         return "UNIVERSAL";
   83|  2.32k|      case ASN1_Class::Constructed:
  ------------------
  |  Branch (83:7): [True: 2.32k, False: 1.11k]
  ------------------
   84|  2.32k|         return "CONSTRUCTED";
   85|     54|      case ASN1_Class::ContextSpecific:
  ------------------
  |  Branch (85:7): [True: 54, False: 3.38k]
  ------------------
   86|     54|         return "CONTEXT_SPECIFIC";
   87|     45|      case ASN1_Class::Application:
  ------------------
  |  Branch (87:7): [True: 45, False: 3.39k]
  ------------------
   88|     45|         return "APPLICATION";
   89|     45|      case ASN1_Class::Private:
  ------------------
  |  Branch (89:7): [True: 45, False: 3.39k]
  ------------------
   90|     45|         return "PRIVATE";
   91|      0|      case ASN1_Class::NoObject:
  ------------------
  |  Branch (91:7): [True: 0, False: 3.44k]
  ------------------
   92|      0|         return "NO_OBJECT";
   93|    265|      default:
  ------------------
  |  Branch (93:7): [True: 265, False: 3.17k]
  ------------------
   94|    265|         return "CLASS(" + std::to_string(static_cast<size_t>(type)) + ")";
   95|  3.44k|   }
   96|  3.44k|}
_ZN5Botan18asn1_tag_to_stringENS_9ASN1_TypeE:
   98|  3.26k|std::string asn1_tag_to_string(ASN1_Type type) {
   99|  3.26k|   switch(type) {
  100|  1.37k|      case ASN1_Type::Sequence:
  ------------------
  |  Branch (100:7): [True: 1.37k, False: 1.89k]
  ------------------
  101|  1.37k|         return "SEQUENCE";
  102|       |
  103|    374|      case ASN1_Type::Set:
  ------------------
  |  Branch (103:7): [True: 374, False: 2.89k]
  ------------------
  104|    374|         return "SET";
  105|       |
  106|     30|      case ASN1_Type::PrintableString:
  ------------------
  |  Branch (106:7): [True: 30, False: 3.23k]
  ------------------
  107|     30|         return "PRINTABLE STRING";
  108|       |
  109|     84|      case ASN1_Type::NumericString:
  ------------------
  |  Branch (109:7): [True: 84, False: 3.18k]
  ------------------
  110|     84|         return "NUMERIC STRING";
  111|       |
  112|     51|      case ASN1_Type::Ia5String:
  ------------------
  |  Branch (112:7): [True: 51, False: 3.21k]
  ------------------
  113|     51|         return "IA5 STRING";
  114|       |
  115|     10|      case ASN1_Type::TeletexString:
  ------------------
  |  Branch (115:7): [True: 10, False: 3.25k]
  ------------------
  116|     10|         return "T61 STRING";
  117|       |
  118|    193|      case ASN1_Type::Utf8String:
  ------------------
  |  Branch (118:7): [True: 193, False: 3.07k]
  ------------------
  119|    193|         return "UTF8 STRING";
  120|       |
  121|     16|      case ASN1_Type::VisibleString:
  ------------------
  |  Branch (121:7): [True: 16, False: 3.25k]
  ------------------
  122|     16|         return "VISIBLE STRING";
  123|       |
  124|     16|      case ASN1_Type::BmpString:
  ------------------
  |  Branch (124:7): [True: 16, False: 3.25k]
  ------------------
  125|     16|         return "BMP STRING";
  126|       |
  127|      3|      case ASN1_Type::UniversalString:
  ------------------
  |  Branch (127:7): [True: 3, False: 3.26k]
  ------------------
  128|      3|         return "UNIVERSAL STRING";
  129|       |
  130|     12|      case ASN1_Type::UtcTime:
  ------------------
  |  Branch (130:7): [True: 12, False: 3.25k]
  ------------------
  131|     12|         return "UTC TIME";
  132|       |
  133|     21|      case ASN1_Type::GeneralizedTime:
  ------------------
  |  Branch (133:7): [True: 21, False: 3.24k]
  ------------------
  134|     21|         return "GENERALIZED TIME";
  135|       |
  136|    191|      case ASN1_Type::OctetString:
  ------------------
  |  Branch (136:7): [True: 191, False: 3.07k]
  ------------------
  137|    191|         return "OCTET STRING";
  138|       |
  139|    166|      case ASN1_Type::BitString:
  ------------------
  |  Branch (139:7): [True: 166, False: 3.10k]
  ------------------
  140|    166|         return "BIT STRING";
  141|       |
  142|     14|      case ASN1_Type::Enumerated:
  ------------------
  |  Branch (142:7): [True: 14, False: 3.25k]
  ------------------
  143|     14|         return "ENUMERATED";
  144|       |
  145|    121|      case ASN1_Type::Integer:
  ------------------
  |  Branch (145:7): [True: 121, False: 3.14k]
  ------------------
  146|    121|         return "INTEGER";
  147|       |
  148|     34|      case ASN1_Type::Null:
  ------------------
  |  Branch (148:7): [True: 34, False: 3.23k]
  ------------------
  149|     34|         return "NULL";
  150|       |
  151|     37|      case ASN1_Type::ObjectId:
  ------------------
  |  Branch (151:7): [True: 37, False: 3.23k]
  ------------------
  152|     37|         return "OBJECT";
  153|       |
  154|     50|      case ASN1_Type::Boolean:
  ------------------
  |  Branch (154:7): [True: 50, False: 3.21k]
  ------------------
  155|     50|         return "BOOLEAN";
  156|       |
  157|      0|      case ASN1_Type::NoObject:
  ------------------
  |  Branch (157:7): [True: 0, False: 3.26k]
  ------------------
  158|      0|         return "NO_OBJECT";
  159|       |
  160|    467|      default:
  ------------------
  |  Branch (160:7): [True: 467, False: 2.80k]
  ------------------
  161|    467|         return "TAG(" + std::to_string(static_cast<uint32_t>(type)) + ")";
  162|  3.26k|   }
  163|  3.26k|}
_ZN5Botan18BER_Decoding_ErrorC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
  168|  5.04k|BER_Decoding_Error::BER_Decoding_Error(std::string_view err) : Decoding_Error(fmt("BER: {}", err)) {}
_ZN5Botan11BER_Bad_TagC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEj:
  170|    164|BER_Bad_Tag::BER_Bad_Tag(std::string_view str, uint32_t tagging) : BER_Decoding_Error(fmt("{}: {}", str, tagging)) {}
_ZN5Botan4ASN115put_in_sequenceERKNSt3__16vectorIhNS1_9allocatorIhEEEE:
  177|  10.7k|std::vector<uint8_t> put_in_sequence(const std::vector<uint8_t>& contents) {
  178|  10.7k|   return ASN1::put_in_sequence(contents.data(), contents.size());
  179|  10.7k|}
_ZN5Botan4ASN115put_in_sequenceEPKhm:
  181|  10.7k|std::vector<uint8_t> put_in_sequence(const uint8_t bits[], size_t len) {
  182|  10.7k|   std::vector<uint8_t> output;
  183|  10.7k|   DER_Encoder(output).start_sequence().raw_bytes(bits, len).end_cons();
  184|  10.7k|   return output;
  185|  10.7k|}
_ZN5Botan4ASN19to_stringERKNS_10BER_ObjectE:
  190|  36.8k|std::string to_string(const BER_Object& obj) {
  191|  36.8k|   return bytes_to_string(obj.data());
  192|  36.8k|}
_ZN5Botan4ASN19maybe_BERERNS_10DataSourceE:
  197|  5.37k|bool maybe_BER(DataSource& source) {
  198|  5.37k|   uint8_t first_u8 = 0;
  199|  5.37k|   if(source.peek_byte(first_u8) == 0) {
  ------------------
  |  Branch (199:7): [True: 0, False: 5.37k]
  ------------------
  200|      0|      BOTAN_ASSERT_EQUAL(source.read_byte(first_u8), 0, "Expected EOF");
  ------------------
  |  |   90|      0|   do {                                                                                                \
  |  |   91|      0|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                                                    \
  |  |   92|      0|      if((expr1) != (expr2)) {                                                                         \
  |  |  ------------------
  |  |  |  Branch (92:10): [True: 0, False: 0]
  |  |  ------------------
  |  |   93|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                                           \
  |  |   94|      0|         Botan::assertion_failure(#expr1 " == " #expr2, assertion_made, __func__, __FILE__, __LINE__); \
  |  |   95|      0|      }                                                                                                \
  |  |   96|      0|   } while(0)
  |  |  ------------------
  |  |  |  Branch (96:12): [Folded, False: 0]
  |  |  ------------------
  ------------------
  201|      0|      throw Stream_IO_Error("ASN1::maybe_BER: Source was empty");
  202|      0|   }
  203|       |
  204|  5.37k|   const auto cons_seq = static_cast<uint8_t>(ASN1_Class::Constructed) | static_cast<uint8_t>(ASN1_Type::Sequence);
  205|  5.37k|   return first_u8 == cons_seq;
  206|  5.37k|}

_ZN5Botan3OID9from_nameENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   72|    116|std::optional<OID> OID::from_name(std::string_view name) {
   73|    116|   if(name.empty()) {
  ------------------
  |  Branch (73:7): [True: 0, False: 116]
  ------------------
   74|      0|      throw Invalid_Argument("OID::from_name argument must be non-empty");
   75|      0|   }
   76|       |
   77|    116|   OID o = OID_Map::global_registry().str2oid(name);
   78|    116|   if(o.has_value()) {
  ------------------
  |  Branch (78:7): [True: 116, False: 0]
  ------------------
   79|    116|      return std::optional(o);
   80|    116|   }
   81|       |
   82|      0|   return std::nullopt;
   83|    116|}
_ZN5Botan3OID11from_stringENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   86|  1.96k|OID OID::from_string(std::string_view str) {
   87|  1.96k|   if(str.empty()) {
  ------------------
  |  Branch (87:7): [True: 0, False: 1.96k]
  ------------------
   88|      0|      throw Invalid_Argument("OID::from_string argument must be non-empty");
   89|      0|   }
   90|       |
   91|  1.96k|   OID o = OID_Map::global_registry().str2oid(str);
   92|  1.96k|   if(o.has_value()) {
  ------------------
  |  Branch (92:7): [True: 1.96k, False: 0]
  ------------------
   93|  1.96k|      return o;
   94|  1.96k|   }
   95|       |
   96|       |   // Try to parse as a dotted decimal
   97|      0|   try {
   98|      0|      return OID(str);
   99|      0|   } catch(...) {}
  100|       |
  101|      0|   throw Lookup_Error(fmt("No OID associated with name '{}'", str));
  102|      0|}
_ZN5Botan3OIDC2ESt16initializer_listIjE:
  104|  14.9k|OID::OID(std::initializer_list<uint32_t> init) : m_id(init) {
  105|  14.9k|   oid_valid_check(m_id);
  106|  14.9k|}
_ZNK5Botan3OID9hash_codeEv:
  160|      4|uint64_t OID::hash_code() const {
  161|       |   // If this is changed also update gen_oids.py to match
  162|      4|   uint64_t hash = 0x621F302327D9A49A;
  163|     32|   for(auto id : m_id) {
  ------------------
  |  Branch (163:16): [True: 32, False: 4]
  ------------------
  164|     32|      hash *= 193;
  165|     32|      hash += id;
  166|     32|   }
  167|      4|   return hash;
  168|      4|}
_ZN5BotanltERKNS_3OIDES2_:
  173|  79.7k|bool operator<(const OID& a, const OID& b) {
  174|  79.7k|   const std::vector<uint32_t>& oid1 = a.get_components();
  175|  79.7k|   const std::vector<uint32_t>& oid2 = b.get_components();
  176|       |
  177|  79.7k|   return std::lexicographical_compare(oid1.begin(), oid1.end(), oid2.begin(), oid2.end());
  178|  79.7k|}
_ZNK5Botan3OID11encode_intoERNS_11DER_EncoderE:
  183|    614|void OID::encode_into(DER_Encoder& der) const {
  184|    614|   if(m_id.size() < 2) {
  ------------------
  |  Branch (184:7): [True: 0, False: 614]
  ------------------
  185|      0|      throw Invalid_Argument("OID::encode_into: OID is invalid");
  186|      0|   }
  187|       |
  188|    614|   auto append = [](std::vector<uint8_t>& encoding, uint32_t z) {
  189|    614|      if(z <= 0x7F) {
  190|    614|         encoding.push_back(static_cast<uint8_t>(z));
  191|    614|      } else {
  192|    614|         const size_t z7 = (high_bit(z) + 7 - 1) / 7;
  193|       |
  194|    614|         for(size_t j = 0; j != z7; ++j) {
  195|    614|            uint8_t zp = static_cast<uint8_t>(z >> (7 * (z7 - j - 1)) & 0x7F);
  196|       |
  197|    614|            if(j != z7 - 1) {
  198|    614|               zp |= 0x80;
  199|    614|            }
  200|       |
  201|    614|            encoding.push_back(zp);
  202|    614|         }
  203|    614|      }
  204|    614|   };
  205|       |
  206|    614|   std::vector<uint8_t> encoding;
  207|       |
  208|       |   // We know 40 * root can't overflow because root is between 0 and 2
  209|    614|   auto first = checked_add(40 * m_id[0], m_id[1]);
  210|    614|   BOTAN_ASSERT_NOMSG(first.has_value());
  ------------------
  |  |   77|    614|   do {                                                                     \
  |  |   78|    614|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|    614|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 614]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|    614|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 614]
  |  |  ------------------
  ------------------
  211|       |
  212|    614|   append(encoding, *first);
  213|       |
  214|  3.70k|   for(size_t i = 2; i != m_id.size(); ++i) {
  ------------------
  |  Branch (214:22): [True: 3.09k, False: 614]
  ------------------
  215|  3.09k|      append(encoding, m_id[i]);
  216|  3.09k|   }
  217|    614|   der.add_object(ASN1_Type::ObjectId, ASN1_Class::Universal, encoding);
  218|    614|}
_ZN5Botan3OID11decode_fromERNS_11BER_DecoderE:
  223|  51.0k|void OID::decode_from(BER_Decoder& decoder) {
  224|  51.0k|   const BER_Object obj = decoder.get_next_object();
  225|  51.0k|   if(obj.tagging() != (ASN1_Class::Universal | ASN1_Type::ObjectId)) {
  ------------------
  |  Branch (225:7): [True: 117, False: 50.9k]
  ------------------
  226|    117|      throw BER_Bad_Tag("Error decoding OID, unknown tag", obj.tagging());
  227|    117|   }
  228|       |
  229|  50.9k|   if(obj.length() == 0) {
  ------------------
  |  Branch (229:7): [True: 3, False: 50.9k]
  ------------------
  230|      3|      throw BER_Decoding_Error("OID encoding is too short");
  231|      3|   }
  232|       |
  233|  50.9k|   auto consume = [](BufferSlicer& data) -> uint32_t {
  234|  50.9k|      BOTAN_ASSERT_NOMSG(!data.empty());
  235|  50.9k|      uint32_t b = data.take_byte();
  236|       |
  237|  50.9k|      if(b > 0x7F) {
  238|  50.9k|         b &= 0x7F;
  239|       |
  240|       |         // Even BER requires that the OID have minimal length, ie that
  241|       |         // the first byte of a multibyte encoding cannot be zero
  242|       |         // See X.690 section 8.19.2
  243|  50.9k|         if(b == 0) {
  244|  50.9k|            throw Decoding_Error("Leading zero byte in multibyte OID encoding");
  245|  50.9k|         }
  246|       |
  247|  50.9k|         while(true) {
  248|  50.9k|            if(data.empty()) {
  249|  50.9k|               throw Decoding_Error("Truncated OID value");
  250|  50.9k|            }
  251|       |
  252|  50.9k|            const uint8_t next = data.take_byte();
  253|  50.9k|            const bool more = (next & 0x80) == 0x80;
  254|  50.9k|            const uint8_t value = next & 0x7F;
  255|       |
  256|  50.9k|            if((b >> (32 - 7)) != 0) {
  257|  50.9k|               throw Decoding_Error("OID component overflow");
  258|  50.9k|            }
  259|       |
  260|  50.9k|            b = (b << 7) | value;
  261|       |
  262|  50.9k|            if(!more) {
  263|  50.9k|               break;
  264|  50.9k|            }
  265|  50.9k|         }
  266|  50.9k|      }
  267|       |
  268|  50.9k|      return b;
  269|  50.9k|   };
  270|       |
  271|  50.9k|   BufferSlicer data(obj.data());
  272|  50.9k|   std::vector<uint32_t> parts;
  273|   332k|   while(!data.empty()) {
  ------------------
  |  Branch (273:10): [True: 281k, False: 50.9k]
  ------------------
  274|   281k|      const uint32_t comp = consume(data);
  275|       |
  276|   281k|      if(parts.empty()) {
  ------------------
  |  Branch (276:10): [True: 50.7k, False: 230k]
  ------------------
  277|       |         // divide into root and second arc
  278|       |
  279|  50.7k|         const uint32_t root_arc = [](uint32_t b0) -> uint32_t {
  280|  50.7k|            if(b0 < 40) {
  281|  50.7k|               return 0;
  282|  50.7k|            } else if(b0 < 80) {
  283|  50.7k|               return 1;
  284|  50.7k|            } else {
  285|  50.7k|               return 2;
  286|  50.7k|            }
  287|  50.7k|         }(comp);
  288|       |
  289|  50.7k|         parts.push_back(root_arc);
  290|  50.7k|         BOTAN_ASSERT_NOMSG(comp >= 40 * root_arc);
  ------------------
  |  |   77|  50.7k|   do {                                                                     \
  |  |   78|  50.7k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  50.7k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 50.7k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  50.7k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 50.7k]
  |  |  ------------------
  ------------------
  291|  50.7k|         parts.push_back(comp - 40 * root_arc);
  292|   230k|      } else {
  293|   230k|         parts.push_back(comp);
  294|   230k|      }
  295|   281k|   }
  296|       |
  297|  50.9k|   m_id = parts;
  298|  50.9k|}
asn1_oid.cpp:_ZN5Botan12_GLOBAL__N_115oid_valid_checkENSt3__14spanIKjLm18446744073709551615EEE:
   26|  14.9k|void oid_valid_check(std::span<const uint32_t> oid) {
   27|  14.9k|   BOTAN_ARG_CHECK(oid.size() >= 2, "OID too short to be valid");
  ------------------
  |  |   35|  14.9k|   do {                                                          \
  |  |   36|  14.9k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */              \
  |  |   37|  14.9k|      if(!(expr)) {                                              \
  |  |  ------------------
  |  |  |  Branch (37:10): [True: 0, False: 14.9k]
  |  |  ------------------
  |  |   38|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */     \
  |  |   39|      0|         Botan::throw_invalid_argument(msg, __func__, __FILE__); \
  |  |   40|      0|      }                                                          \
  |  |   41|  14.9k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (41:12): [Folded, False: 14.9k]
  |  |  ------------------
  ------------------
   28|  14.9k|   BOTAN_ARG_CHECK(oid[0] <= 2, "OID root out of range");
  ------------------
  |  |   35|  14.9k|   do {                                                          \
  |  |   36|  14.9k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */              \
  |  |   37|  14.9k|      if(!(expr)) {                                              \
  |  |  ------------------
  |  |  |  Branch (37:10): [True: 0, False: 14.9k]
  |  |  ------------------
  |  |   38|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */     \
  |  |   39|      0|         Botan::throw_invalid_argument(msg, __func__, __FILE__); \
  |  |   40|      0|      }                                                          \
  |  |   41|  14.9k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (41:12): [Folded, False: 14.9k]
  |  |  ------------------
  ------------------
   29|  14.9k|   BOTAN_ARG_CHECK(oid[1] <= 39 || oid[0] == 2, "OID second arc too large");
  ------------------
  |  |   35|  14.9k|   do {                                                          \
  |  |   36|  14.9k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */              \
  |  |   37|  14.9k|      if(!(expr)) {                                              \
  |  |  ------------------
  |  |  |  Branch (37:12): [True: 14.9k, False: 0]
  |  |  |  Branch (37:12): [True: 0, False: 0]
  |  |  ------------------
  |  |   38|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */     \
  |  |   39|      0|         Botan::throw_invalid_argument(msg, __func__, __FILE__); \
  |  |   40|      0|      }                                                          \
  |  |   41|  14.9k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (41:12): [Folded, False: 14.9k]
  |  |  ------------------
  ------------------
   30|       |   // This last is a limitation of using 32 bit integers when decoding
   31|       |   // not a limitation of ASN.1 object identifiers in general
   32|  14.9k|   BOTAN_ARG_CHECK(oid[1] <= 0xFFFFFFAF, "OID second arc too large");
  ------------------
  |  |   35|  14.9k|   do {                                                          \
  |  |   36|  14.9k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */              \
  |  |   37|  14.9k|      if(!(expr)) {                                              \
  |  |  ------------------
  |  |  |  Branch (37:10): [True: 0, False: 14.9k]
  |  |  ------------------
  |  |   38|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */     \
  |  |   39|      0|         Botan::throw_invalid_argument(msg, __func__, __FILE__); \
  |  |   40|      0|      }                                                          \
  |  |   41|  14.9k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (41:12): [Folded, False: 14.9k]
  |  |  ------------------
  ------------------
   33|  14.9k|}
asn1_oid.cpp:_ZZNK5Botan3OID11encode_intoERNS_11DER_EncoderEENK3$_0clERNSt3__16vectorIhNS4_9allocatorIhEEEEj:
  188|  3.70k|   auto append = [](std::vector<uint8_t>& encoding, uint32_t z) {
  189|  3.70k|      if(z <= 0x7F) {
  ------------------
  |  Branch (189:10): [True: 2.65k, False: 1.04k]
  ------------------
  190|  2.65k|         encoding.push_back(static_cast<uint8_t>(z));
  191|  2.65k|      } else {
  192|  1.04k|         const size_t z7 = (high_bit(z) + 7 - 1) / 7;
  193|       |
  194|  3.50k|         for(size_t j = 0; j != z7; ++j) {
  ------------------
  |  Branch (194:28): [True: 2.45k, False: 1.04k]
  ------------------
  195|  2.45k|            uint8_t zp = static_cast<uint8_t>(z >> (7 * (z7 - j - 1)) & 0x7F);
  196|       |
  197|  2.45k|            if(j != z7 - 1) {
  ------------------
  |  Branch (197:16): [True: 1.40k, False: 1.04k]
  ------------------
  198|  1.40k|               zp |= 0x80;
  199|  1.40k|            }
  200|       |
  201|  2.45k|            encoding.push_back(zp);
  202|  2.45k|         }
  203|  1.04k|      }
  204|  3.70k|   };
asn1_oid.cpp:_ZZN5Botan3OID11decode_fromERNS_11BER_DecoderEENK3$_0clERNS_12BufferSlicerE:
  233|   281k|   auto consume = [](BufferSlicer& data) -> uint32_t {
  234|   281k|      BOTAN_ASSERT_NOMSG(!data.empty());
  ------------------
  |  |   77|   281k|   do {                                                                     \
  |  |   78|   281k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|   281k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 281k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|   281k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 281k]
  |  |  ------------------
  ------------------
  235|   281k|      uint32_t b = data.take_byte();
  236|       |
  237|   281k|      if(b > 0x7F) {
  ------------------
  |  Branch (237:10): [True: 34.7k, False: 246k]
  ------------------
  238|  34.7k|         b &= 0x7F;
  239|       |
  240|       |         // Even BER requires that the OID have minimal length, ie that
  241|       |         // the first byte of a multibyte encoding cannot be zero
  242|       |         // See X.690 section 8.19.2
  243|  34.7k|         if(b == 0) {
  ------------------
  |  Branch (243:13): [True: 39, False: 34.6k]
  ------------------
  244|     39|            throw Decoding_Error("Leading zero byte in multibyte OID encoding");
  245|     39|         }
  246|       |
  247|  47.9k|         while(true) {
  ------------------
  |  Branch (247:16): [True: 47.9k, Folded]
  ------------------
  248|  47.9k|            if(data.empty()) {
  ------------------
  |  Branch (248:16): [True: 52, False: 47.9k]
  ------------------
  249|     52|               throw Decoding_Error("Truncated OID value");
  250|     52|            }
  251|       |
  252|  47.9k|            const uint8_t next = data.take_byte();
  253|  47.9k|            const bool more = (next & 0x80) == 0x80;
  254|  47.9k|            const uint8_t value = next & 0x7F;
  255|       |
  256|  47.9k|            if((b >> (32 - 7)) != 0) {
  ------------------
  |  Branch (256:16): [True: 106, False: 47.8k]
  ------------------
  257|    106|               throw Decoding_Error("OID component overflow");
  258|    106|            }
  259|       |
  260|  47.8k|            b = (b << 7) | value;
  261|       |
  262|  47.8k|            if(!more) {
  ------------------
  |  Branch (262:16): [True: 34.5k, False: 13.3k]
  ------------------
  263|  34.5k|               break;
  264|  34.5k|            }
  265|  47.8k|         }
  266|  34.6k|      }
  267|       |
  268|   281k|      return b;
  269|   281k|   };
asn1_oid.cpp:_ZZN5Botan3OID11decode_fromERNS_11BER_DecoderEENK3$_1clEj:
  279|  50.7k|         const uint32_t root_arc = [](uint32_t b0) -> uint32_t {
  280|  50.7k|            if(b0 < 40) {
  ------------------
  |  Branch (280:16): [True: 3.01k, False: 47.7k]
  ------------------
  281|  3.01k|               return 0;
  282|  47.7k|            } else if(b0 < 80) {
  ------------------
  |  Branch (282:23): [True: 21.3k, False: 26.3k]
  ------------------
  283|  21.3k|               return 1;
  284|  26.3k|            } else {
  285|  26.3k|               return 2;
  286|  26.3k|            }
  287|  50.7k|         }(comp);

_ZN5Botan11ASN1_String14is_string_typeENS_9ASN1_TypeE:
  131|    383|bool ASN1_String::is_string_type(ASN1_Type tag) {
  132|    383|   return is_asn1_string_type(tag);
  133|    383|}
_ZN5Botan11ASN1_StringC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEENS_9ASN1_TypeE:
  135|  18.1k|ASN1_String::ASN1_String(std::string_view str, ASN1_Type t) : m_utf8_str(str), m_tag(t) {
  136|  18.1k|   if(!is_utf8_subset_string_type(m_tag)) {
  ------------------
  |  Branch (136:7): [True: 15, False: 18.1k]
  ------------------
  137|     15|      throw Invalid_Argument("ASN1_String only supports encoding to UTF-8 or a UTF-8 subset");
  138|     15|   }
  139|       |
  140|  18.1k|   if(!is_valid_asn1_string_content(m_utf8_str, m_tag)) {
  ------------------
  |  Branch (140:7): [True: 165, False: 17.9k]
  ------------------
  141|    165|      throw Invalid_Argument(fmt("ASN1_String: Invalid {} encoding", asn1_tag_to_string(m_tag)));
  142|    165|   }
  143|  18.1k|}
_ZN5Botan11ASN1_StringC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
  145|  17.9k|ASN1_String::ASN1_String(std::string_view str) : ASN1_String(str, choose_encoding(str)) {}
_ZN5Botan11ASN1_String11decode_fromERNS_11BER_DecoderE:
  162|  17.6k|void ASN1_String::decode_from(BER_Decoder& source) {
  163|  17.6k|   const BER_Object obj = source.get_next_object();
  164|       |
  165|  17.6k|   if(obj.get_class() != ASN1_Class::Universal || !is_asn1_string_type(obj.type())) {
  ------------------
  |  Branch (165:7): [True: 53, False: 17.5k]
  |  Branch (165:51): [True: 79, False: 17.4k]
  ------------------
  166|    106|      auto typ = static_cast<uint32_t>(obj.type());
  167|    106|      auto cls = static_cast<uint32_t>(obj.get_class());
  168|    106|      throw Decoding_Error(fmt("ASN1_String: Unknown string type {}/{}", typ, cls));
  169|    106|   }
  170|       |
  171|  17.5k|   m_tag = obj.type();
  172|  17.5k|   m_data.assign(obj.bits(), obj.bits() + obj.length());
  173|       |
  174|  17.5k|   if(m_tag == ASN1_Type::BmpString) {
  ------------------
  |  Branch (174:7): [True: 3.48k, False: 14.0k]
  ------------------
  175|  3.48k|      m_utf8_str = ucs2_to_utf8(m_data);
  176|  14.0k|   } else if(m_tag == ASN1_Type::UniversalString) {
  ------------------
  |  Branch (176:14): [True: 89, False: 13.9k]
  ------------------
  177|     89|      m_utf8_str = ucs4_to_utf8(m_data);
  178|  13.9k|   } else if(m_tag == ASN1_Type::TeletexString) {
  ------------------
  |  Branch (178:14): [True: 578, False: 13.3k]
  ------------------
  179|       |      /*
  180|       |      TeletexString is nominally ITU T.61 not ISO-8859-1 but it seems
  181|       |      the majority of implementations actually used that charset here.
  182|       |      */
  183|    578|      m_utf8_str = latin1_to_utf8(m_data);
  184|  13.3k|   } else {
  185|       |      // All other supported string types are UTF-8 or some subset thereof
  186|  13.3k|      m_utf8_str = ASN1::to_string(obj);
  187|       |
  188|  13.3k|      if(!is_valid_asn1_string_content(m_utf8_str, m_tag)) {
  ------------------
  |  Branch (188:10): [True: 70, False: 13.3k]
  ------------------
  189|     70|         throw Decoding_Error(fmt("ASN1_String: Invalid {} encoding", asn1_tag_to_string(m_tag)));
  190|     70|      }
  191|  13.3k|   }
  192|  17.5k|}
asn1_str.cpp:_ZN5Botan12_GLOBAL__N_119is_asn1_string_typeENS_9ASN1_TypeE:
   99|  17.9k|bool is_asn1_string_type(ASN1_Type tag) {
  100|  17.9k|   return (is_utf8_subset_string_type(tag) || tag == ASN1_Type::TeletexString || tag == ASN1_Type::BmpString ||
  ------------------
  |  Branch (100:12): [True: 13.6k, False: 4.33k]
  |  Branch (100:47): [True: 584, False: 3.75k]
  |  Branch (100:82): [True: 3.48k, False: 266]
  ------------------
  101|    266|           tag == ASN1_Type::UniversalString);
  ------------------
  |  Branch (101:12): [True: 101, False: 165]
  ------------------
  102|  17.9k|}
asn1_str.cpp:_ZN5Botan12_GLOBAL__N_126is_utf8_subset_string_typeENS_9ASN1_TypeE:
   94|  67.6k|bool is_utf8_subset_string_type(ASN1_Type tag) {
   95|  67.6k|   return (tag == ASN1_Type::NumericString || tag == ASN1_Type::PrintableString || tag == ASN1_Type::VisibleString ||
  ------------------
  |  Branch (95:12): [True: 2.09k, False: 65.5k]
  |  Branch (95:47): [True: 46.2k, False: 19.2k]
  |  Branch (95:84): [True: 121, False: 19.1k]
  ------------------
   96|  19.1k|           tag == ASN1_Type::Ia5String || tag == ASN1_Type::Utf8String);
  ------------------
  |  Branch (96:12): [True: 2.47k, False: 16.6k]
  |  Branch (96:43): [True: 12.3k, False: 4.35k]
  ------------------
   97|  67.6k|}
asn1_str.cpp:_ZN5Botan12_GLOBAL__N_128is_valid_asn1_string_contentERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS_9ASN1_TypeE:
  104|  31.4k|bool is_valid_asn1_string_content(const std::string& str, ASN1_Type tag) {
  105|  31.4k|   BOTAN_ASSERT_NOMSG(is_utf8_subset_string_type(tag));
  ------------------
  |  |   77|  31.4k|   do {                                                                     \
  |  |   78|  31.4k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  31.4k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 31.4k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  31.4k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 31.4k]
  |  |  ------------------
  ------------------
  106|       |
  107|  31.4k|   switch(tag) {
  108|  6.08k|      case ASN1_Type::Utf8String:
  ------------------
  |  Branch (108:7): [True: 6.08k, False: 25.4k]
  ------------------
  109|  6.08k|         return is_valid_utf8(str);
  110|  1.04k|      case ASN1_Type::NumericString:
  ------------------
  |  Branch (110:7): [True: 1.04k, False: 30.4k]
  ------------------
  111|  24.1k|      case ASN1_Type::PrintableString:
  ------------------
  |  Branch (111:7): [True: 23.0k, False: 8.39k]
  ------------------
  112|  25.3k|      case ASN1_Type::Ia5String:
  ------------------
  |  Branch (112:7): [True: 1.21k, False: 30.2k]
  ------------------
  113|  25.4k|      case ASN1_Type::VisibleString:
  ------------------
  |  Branch (113:7): [True: 54, False: 31.4k]
  ------------------
  114|  25.4k|         return g_char_validator.valid_encoding(str, tag);
  115|      0|      default:
  ------------------
  |  Branch (115:7): [True: 0, False: 31.4k]
  ------------------
  116|      0|         return false;
  117|  31.4k|   }
  118|  31.4k|}
asn1_str.cpp:_ZNK5Botan12_GLOBAL__N_131ASN1_String_Codepoint_Validator14valid_encodingENSt3__117basic_string_viewIcNS2_11char_traitsIcEEEENS_9ASN1_TypeE:
   25|  43.3k|      constexpr bool valid_encoding(std::string_view str, ASN1_Type tag) const {
   26|  43.3k|         const uint8_t mask = mask_for(tag);
   27|  73.0k|         for(const char c : str) {
  ------------------
  |  Branch (27:27): [True: 73.0k, False: 43.2k]
  ------------------
   28|  73.0k|            const uint8_t codepoint = static_cast<uint8_t>(c);
   29|  73.0k|            const bool is_valid = (m_table[codepoint] & mask) != 0;
   30|       |
   31|  73.0k|            if(!is_valid) {
  ------------------
  |  Branch (31:16): [True: 71, False: 72.9k]
  ------------------
   32|     71|               return false;
   33|     71|            }
   34|  73.0k|         }
   35|       |
   36|  43.2k|         return true;
   37|  43.3k|      }
asn1_str.cpp:_ZN5Botan12_GLOBAL__N_131ASN1_String_Codepoint_Validator8mask_forENS_9ASN1_TypeE:
   45|  43.3k|      static constexpr uint8_t mask_for(ASN1_Type tag) {
   46|  43.3k|         switch(tag) {
   47|  1.04k|            case ASN1_Type::NumericString:
  ------------------
  |  Branch (47:13): [True: 1.04k, False: 42.2k]
  ------------------
   48|  1.04k|               return Numeric_String;
   49|  41.0k|            case ASN1_Type::PrintableString:
  ------------------
  |  Branch (49:13): [True: 41.0k, False: 2.31k]
  ------------------
   50|  41.0k|               return Printable_String;
   51|  1.21k|            case ASN1_Type::Ia5String:
  ------------------
  |  Branch (51:13): [True: 1.21k, False: 42.1k]
  ------------------
   52|  1.21k|               return IA5_String;
   53|     54|            case ASN1_Type::VisibleString:
  ------------------
  |  Branch (53:13): [True: 54, False: 43.2k]
  ------------------
   54|     54|               return Visible_String;
   55|      0|            default:
  ------------------
  |  Branch (55:13): [True: 0, False: 43.3k]
  ------------------
   56|      0|               return 0;
   57|  43.3k|         }
   58|  43.3k|      }
asn1_str.cpp:_ZN5Botan12_GLOBAL__N_115choose_encodingENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
  120|  17.9k|ASN1_Type choose_encoding(std::string_view str) {
  121|  17.9k|   if(g_char_validator.valid_encoding(str, ASN1_Type::PrintableString)) {
  ------------------
  |  Branch (121:7): [True: 17.9k, False: 0]
  ------------------
  122|  17.9k|      return ASN1_Type::PrintableString;
  123|  17.9k|   } else {
  124|      0|      return ASN1_Type::Utf8String;
  125|      0|   }
  126|  17.9k|}

_ZN5Botan9ASN1_Time11decode_fromERNS_11BER_DecoderE:
   59|  7.83k|void ASN1_Time::decode_from(BER_Decoder& source) {
   60|  7.83k|   const BER_Object ber_time = source.get_next_object();
   61|       |
   62|  7.83k|   if(ber_time.get_class() != ASN1_Class::Universal ||
  ------------------
  |  Branch (62:7): [True: 8, False: 7.83k]
  ------------------
   63|  7.83k|      (ber_time.type() != ASN1_Type::UtcTime && ber_time.type() != ASN1_Type::GeneralizedTime)) {
  ------------------
  |  Branch (63:8): [True: 216, False: 7.61k]
  |  Branch (63:49): [True: 44, False: 172]
  ------------------
   64|     51|      throw Decoding_Error(fmt("ASN1_Time: Unexpected tag {}/{}",
   65|     51|                               static_cast<uint32_t>(ber_time.type()),
   66|     51|                               static_cast<uint32_t>(ber_time.get_class())));
   67|     51|   }
   68|       |
   69|  7.78k|   try {
   70|  7.78k|      set_to(ASN1::to_string(ber_time), ber_time.type());
   71|  7.78k|   } catch(Invalid_Argument& e) {
   72|    100|      throw Decoding_Error(fmt("Invalid ASN1_Time encoding: {}", e.what()));
   73|    100|   }
   74|  7.78k|}
_ZN5Botan9ASN1_Time6set_toENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEENS_9ASN1_TypeE:
  176|  7.78k|void ASN1_Time::set_to(std::string_view t_spec, ASN1_Type spec_tag) {
  177|  7.78k|   BOTAN_ARG_CHECK(spec_tag == ASN1_Type::UtcTime || spec_tag == ASN1_Type::GeneralizedTime,
  ------------------
  |  |   35|  7.78k|   do {                                                          \
  |  |   36|  7.78k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */              \
  |  |   37|  7.95k|      if(!(expr)) {                                              \
  |  |  ------------------
  |  |  |  Branch (37:12): [True: 7.61k, False: 172]
  |  |  |  Branch (37:12): [True: 172, False: 0]
  |  |  ------------------
  |  |   38|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */     \
  |  |   39|      0|         Botan::throw_invalid_argument(msg, __func__, __FILE__); \
  |  |   40|      0|      }                                                          \
  |  |   41|  7.78k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (41:12): [Folded, False: 7.78k]
  |  |  ------------------
  ------------------
  178|  7.78k|                   "Invalid tag for ASN1_Time");
  179|       |
  180|  7.78k|   if(spec_tag == ASN1_Type::GeneralizedTime) {
  ------------------
  |  Branch (180:7): [True: 172, False: 7.61k]
  ------------------
  181|    172|      BOTAN_ARG_CHECK(t_spec.size() == 15, "Invalid GeneralizedTime input string");
  ------------------
  |  |   35|    172|   do {                                                          \
  |  |   36|    172|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */              \
  |  |   37|    172|      if(!(expr)) {                                              \
  |  |  ------------------
  |  |  |  Branch (37:10): [True: 10, False: 162]
  |  |  ------------------
  |  |   38|     10|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */     \
  |  |   39|     10|         Botan::throw_invalid_argument(msg, __func__, __FILE__); \
  |  |   40|     10|      }                                                          \
  |  |   41|    172|   } while(0)
  |  |  ------------------
  |  |  |  Branch (41:12): [Folded, False: 172]
  |  |  ------------------
  ------------------
  182|  7.61k|   } else if(spec_tag == ASN1_Type::UtcTime) {
  ------------------
  |  Branch (182:14): [True: 7.61k, False: 0]
  ------------------
  183|  7.61k|      BOTAN_ARG_CHECK(t_spec.size() == 13, "Invalid UTCTime input string");
  ------------------
  |  |   35|  7.61k|   do {                                                          \
  |  |   36|  7.61k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */              \
  |  |   37|  7.61k|      if(!(expr)) {                                              \
  |  |  ------------------
  |  |  |  Branch (37:10): [True: 8, False: 7.60k]
  |  |  ------------------
  |  |   38|      8|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */     \
  |  |   39|      8|         Botan::throw_invalid_argument(msg, __func__, __FILE__); \
  |  |   40|      8|      }                                                          \
  |  |   41|  7.61k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (41:12): [Folded, False: 7.61k]
  |  |  ------------------
  ------------------
  184|  7.61k|   }
  185|       |
  186|  7.78k|   BOTAN_ARG_CHECK(t_spec.back() == 'Z', "Botan does not support ASN1 times with timezones other than Z");
  ------------------
  |  |   35|  7.78k|   do {                                                          \
  |  |   36|  7.78k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */              \
  |  |   37|  7.78k|      if(!(expr)) {                                              \
  |  |  ------------------
  |  |  |  Branch (37:10): [True: 13, False: 7.77k]
  |  |  ------------------
  |  |   38|     13|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */     \
  |  |   39|     13|         Botan::throw_invalid_argument(msg, __func__, __FILE__); \
  |  |   40|     13|      }                                                          \
  |  |   41|  7.78k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (41:12): [Folded, False: 7.78k]
  |  |  ------------------
  ------------------
  187|       |
  188|  7.78k|   const size_t field_len = 2;
  189|       |
  190|  7.78k|   const size_t year_start = 0;
  191|  7.78k|   const size_t year_len = (spec_tag == ASN1_Type::UtcTime) ? 2 : 4;
  ------------------
  |  Branch (191:28): [True: 7.59k, False: 192]
  ------------------
  192|  7.78k|   const size_t month_start = year_start + year_len;
  193|  7.78k|   const size_t day_start = month_start + field_len;
  194|  7.78k|   const size_t hour_start = day_start + field_len;
  195|  7.78k|   const size_t min_start = hour_start + field_len;
  196|  7.78k|   const size_t sec_start = min_start + field_len;
  197|       |
  198|  7.78k|   m_year = to_u32bit(t_spec.substr(year_start, year_len));
  199|  7.78k|   m_month = to_u32bit(t_spec.substr(month_start, field_len));
  200|  7.78k|   m_day = to_u32bit(t_spec.substr(day_start, field_len));
  201|  7.78k|   m_hour = to_u32bit(t_spec.substr(hour_start, field_len));
  202|  7.78k|   m_minute = to_u32bit(t_spec.substr(min_start, field_len));
  203|  7.78k|   m_second = to_u32bit(t_spec.substr(sec_start, field_len));
  204|  7.78k|   m_tag = spec_tag;
  205|       |
  206|  7.78k|   if(spec_tag == ASN1_Type::UtcTime) {
  ------------------
  |  Branch (206:7): [True: 7.58k, False: 206]
  ------------------
  207|  7.58k|      if(m_year >= 50) {
  ------------------
  |  Branch (207:10): [True: 80, False: 7.50k]
  ------------------
  208|     80|         m_year += 1900;
  209|  7.50k|      } else {
  210|  7.50k|         m_year += 2000;
  211|  7.50k|      }
  212|  7.58k|   }
  213|       |
  214|  7.78k|   if(!passes_sanity_check()) {
  ------------------
  |  Branch (214:7): [True: 50, False: 7.73k]
  ------------------
  215|     50|      throw Invalid_Argument(fmt("ASN1_Time string '{}' does not seem to be valid", t_spec));
  216|     50|   }
  217|  7.78k|}
_ZNK5Botan9ASN1_Time19passes_sanity_checkEv:
  222|  7.73k|bool ASN1_Time::passes_sanity_check() const {
  223|       |   // AppVeyor's trust store includes a cert with expiration date in 3016 ...
  224|  7.73k|   if(m_year < 1950 || m_year > 3100) {
  ------------------
  |  Branch (224:7): [True: 10, False: 7.72k]
  |  Branch (224:24): [True: 4, False: 7.72k]
  ------------------
  225|     14|      return false;
  226|     14|   }
  227|  7.72k|   if(m_month == 0 || m_month > 12) {
  ------------------
  |  Branch (227:7): [True: 1, False: 7.72k]
  |  Branch (227:23): [True: 11, False: 7.71k]
  ------------------
  228|     12|      return false;
  229|     12|   }
  230|       |
  231|  7.71k|   const uint32_t days_in_month[12] = {31, 28 + 1, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31};
  232|       |
  233|  7.71k|   if(m_day == 0 || m_day > days_in_month[m_month - 1]) {
  ------------------
  |  Branch (233:7): [True: 2, False: 7.70k]
  |  Branch (233:21): [True: 10, False: 7.69k]
  ------------------
  234|     12|      return false;
  235|     12|   }
  236|       |
  237|  7.69k|   if(m_month == 2 && m_day == 29) {
  ------------------
  |  Branch (237:7): [True: 237, False: 7.46k]
  |  Branch (237:23): [True: 5, False: 232]
  ------------------
  238|      5|      if(m_year % 4 != 0) {
  ------------------
  |  Branch (238:10): [True: 1, False: 4]
  ------------------
  239|      1|         return false;  // not a leap year
  240|      1|      }
  241|       |
  242|      4|      if(m_year % 100 == 0 && m_year % 400 != 0) {
  ------------------
  |  Branch (242:10): [True: 2, False: 2]
  |  Branch (242:31): [True: 1, False: 1]
  ------------------
  243|      1|         return false;
  244|      1|      }
  245|      4|   }
  246|       |
  247|  7.69k|   if(m_hour >= 24 || m_minute >= 60 || m_second > 60) {
  ------------------
  |  Branch (247:7): [True: 5, False: 7.69k]
  |  Branch (247:23): [True: 2, False: 7.69k]
  |  Branch (247:41): [True: 2, False: 7.68k]
  ------------------
  248|      9|      return false;
  249|      9|   }
  250|       |
  251|  7.68k|   if(m_tag == ASN1_Type::UtcTime) {
  ------------------
  |  Branch (251:7): [True: 7.56k, False: 126]
  ------------------
  252|       |      /*
  253|       |      UTCTime limits the value of components such that leap seconds
  254|       |      are not covered. See "UNIVERSAL 23" in "Information technology
  255|       |      Abstract Syntax Notation One (ASN.1): Specification of basic notation"
  256|       |
  257|       |      http://www.itu.int/ITU-T/studygroups/com17/languages/
  258|       |      */
  259|  7.56k|      if(m_second > 59) {
  ------------------
  |  Branch (259:10): [True: 1, False: 7.56k]
  ------------------
  260|      1|         return false;
  261|      1|      }
  262|  7.56k|   }
  263|       |
  264|  7.68k|   return true;
  265|  7.68k|}

_ZN5Botan11BER_DecoderD2Ev:
  366|   147k|BER_Decoder::~BER_Decoder() = default;
_ZNK5Botan11BER_Decoder10more_itemsEv:
  371|   113k|bool BER_Decoder::more_items() const {
  372|   113k|   if(m_source->end_of_data() && !m_pushed.is_set()) {
  ------------------
  |  Branch (372:7): [True: 28.3k, False: 85.6k]
  |  Branch (372:34): [True: 28.3k, False: 0]
  ------------------
  373|  28.3k|      return false;
  374|  28.3k|   }
  375|  85.6k|   return true;
  376|   113k|}
_ZN5Botan11BER_Decoder10verify_endEv:
  381|  13.9k|BER_Decoder& BER_Decoder::verify_end() {
  382|  13.9k|   return verify_end("BER_Decoder::verify_end called, but data remains");
  383|  13.9k|}
_ZN5Botan11BER_Decoder10verify_endENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
  388|  17.6k|BER_Decoder& BER_Decoder::verify_end(std::string_view err) {
  389|  17.6k|   if(!m_source->end_of_data() || m_pushed.is_set()) {
  ------------------
  |  Branch (389:7): [True: 1.34k, False: 16.3k]
  |  Branch (389:35): [True: 0, False: 16.3k]
  ------------------
  390|  1.34k|      throw Decoding_Error(err);
  391|  1.34k|   }
  392|  16.3k|   return (*this);
  393|  17.6k|}
_ZN5Botan11BER_Decoder17discard_remainingEv:
  398|    827|BER_Decoder& BER_Decoder::discard_remaining() {
  399|    827|   m_pushed = BER_Object();
  400|    827|   uint8_t buf = 0;
  401|  59.0k|   while(m_source->read_byte(buf) != 0) {}
  ------------------
  |  Branch (401:10): [True: 58.2k, False: 827]
  ------------------
  402|    827|   return (*this);
  403|    827|}
_ZN5Botan11BER_Decoder14read_next_byteEv:
  405|  4.50M|std::optional<uint8_t> BER_Decoder::read_next_byte() {
  406|  4.50M|   BOTAN_ASSERT_NOMSG(m_source != nullptr);
  ------------------
  |  |   77|  4.50M|   do {                                                                     \
  |  |   78|  4.50M|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  4.50M|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 4.50M]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  4.50M|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 4.50M]
  |  |  ------------------
  ------------------
  407|  4.50M|   uint8_t b = 0;
  408|  4.50M|   if(m_source->read_byte(b) != 0) {
  ------------------
  |  Branch (408:7): [True: 4.47M, False: 24.7k]
  ------------------
  409|  4.47M|      return b;
  410|  4.47M|   } else {
  411|  24.7k|      return {};
  412|  24.7k|   }
  413|  4.50M|}
_ZN5Botan11BER_Decoder16peek_next_objectEv:
  415|  14.6k|const BER_Object& BER_Decoder::peek_next_object() {
  416|  14.6k|   if(!m_pushed.is_set()) {
  ------------------
  |  Branch (416:7): [True: 14.5k, False: 109]
  ------------------
  417|  14.5k|      m_pushed = get_next_object();
  418|  14.5k|   }
  419|       |
  420|  14.6k|   return m_pushed;
  421|  14.6k|}
_ZN5Botan11BER_Decoder15get_next_objectEv:
  426|   309k|BER_Object BER_Decoder::get_next_object() {
  427|   309k|   BER_Object next;
  428|       |
  429|   309k|   if(m_pushed.is_set()) {
  ------------------
  |  Branch (429:7): [True: 40.3k, False: 268k]
  ------------------
  430|  40.3k|      std::swap(next, m_pushed);
  431|  40.3k|      return next;
  432|  40.3k|   }
  433|       |
  434|   268k|   for(;;) {
  435|   268k|      ASN1_Type type_tag = ASN1_Type::NoObject;
  436|   268k|      ASN1_Class class_tag = ASN1_Class::NoObject;
  437|   268k|      decode_tag(m_source, type_tag, class_tag);
  438|   268k|      next.set_tagging(type_tag, class_tag);
  439|   268k|      if(next.is_set() == false) {  // no more objects
  ------------------
  |  Branch (439:10): [True: 2.60k, False: 266k]
  ------------------
  440|  2.60k|         return next;
  441|  2.60k|      }
  442|       |
  443|   266k|      const size_t allow_indef = m_limits.allow_ber_encoding() ? m_limits.max_nested_indefinite_length() : 0;
  ------------------
  |  Branch (443:34): [True: 0, False: 266k]
  ------------------
  444|   266k|      const bool der_mode = m_limits.require_der_encoding();
  445|   266k|      const auto dl = decode_length(m_source, allow_indef, der_mode, is_constructed(class_tag));
  446|       |
  447|       |      // Per X.690 8.1.5 the only valid EOC encoding is the two-octet
  448|       |      // sequence 0x00 0x00. Reject any other length encoding on a tag of
  449|       |      // (Eoc, Universal) before we consume the "content" bytes.
  450|   266k|      if(type_tag == ASN1_Type::Eoc && class_tag == ASN1_Class::Universal &&
  ------------------
  |  Branch (450:10): [True: 9.35k, False: 256k]
  |  Branch (450:40): [True: 286, False: 9.06k]
  ------------------
  451|    286|         (dl.content_length() != 0 || dl.indefinite_length())) {
  ------------------
  |  Branch (451:11): [True: 130, False: 156]
  |  Branch (451:39): [True: 0, False: 156]
  ------------------
  452|    130|         throw BER_Decoding_Error("EOC marker with non-zero length");
  453|    130|      }
  454|       |
  455|   265k|      if(!m_source->check_available(dl.total_length())) {
  ------------------
  |  Branch (455:10): [True: 1.40k, False: 264k]
  ------------------
  456|  1.40k|         throw BER_Decoding_Error("Value truncated");
  457|  1.40k|      }
  458|       |
  459|   264k|      uint8_t* out = next.mutable_bits(dl.content_length());
  460|   264k|      if(m_source->read(out, dl.content_length()) != dl.content_length()) {
  ------------------
  |  Branch (460:10): [True: 0, False: 264k]
  ------------------
  461|      0|         throw BER_Decoding_Error("Value truncated");
  462|      0|      }
  463|       |
  464|   264k|      if(dl.indefinite_length()) {
  ------------------
  |  Branch (464:10): [True: 0, False: 264k]
  ------------------
  465|       |         // After reading the data consume the 2-byte EOC
  466|      0|         uint8_t eoc[2] = {0xFF, 0xFF};
  467|      0|         if(m_source->read(eoc, 2) != 2 || eoc[0] != 0x00 || eoc[1] != 0x00) {
  ------------------
  |  Branch (467:13): [True: 0, False: 0]
  |  Branch (467:44): [True: 0, False: 0]
  |  Branch (467:62): [True: 0, False: 0]
  ------------------
  468|      0|            throw BER_Decoding_Error("Missing or malformed EOC marker");
  469|      0|         }
  470|      0|      }
  471|       |
  472|   264k|      if(next.tagging() == static_cast<uint32_t>(ASN1_Type::Eoc)) {
  ------------------
  |  Branch (472:10): [True: 156, False: 264k]
  ------------------
  473|    156|         if(m_limits.require_der_encoding()) {
  ------------------
  |  Branch (473:13): [True: 156, False: 0]
  ------------------
  474|    156|            throw BER_Decoding_Error("Detected EOC marker in DER structure");
  475|    156|         }
  476|      0|         continue;
  477|   264k|      } else {
  478|   264k|         break;
  479|   264k|      }
  480|   264k|   }
  481|       |
  482|   264k|   return next;
  483|   268k|}
_ZN5Botan11BER_Decoder9push_backEONS_10BER_ObjectE:
  507|  29.1k|void BER_Decoder::push_back(BER_Object&& obj) {
  508|  29.1k|   if(m_pushed.is_set()) {
  ------------------
  |  Branch (508:7): [True: 0, False: 29.1k]
  ------------------
  509|      0|      throw Invalid_State("BER_Decoder: Only one push back is allowed");
  510|      0|   }
  511|  29.1k|   m_pushed = std::move(obj);
  512|  29.1k|}
_ZN5Botan11BER_Decoder10start_consENS_9ASN1_TypeENS_10ASN1_ClassE:
  514|   108k|BER_Decoder BER_Decoder::start_cons(ASN1_Type type_tag, ASN1_Class class_tag) {
  515|   108k|   BER_Object obj = get_next_object();
  516|   108k|   obj.assert_is_a(type_tag, class_tag | ASN1_Class::Constructed);
  517|   108k|   BER_Decoder child(std::move(obj), this);
  518|   108k|   return child;
  519|   108k|}
_ZN5Botan11BER_Decoder8end_consEv:
  524|  73.3k|BER_Decoder& BER_Decoder::end_cons() {
  525|  73.3k|   if(m_parent == nullptr) {
  ------------------
  |  Branch (525:7): [True: 0, False: 73.3k]
  ------------------
  526|      0|      throw Invalid_State("BER_Decoder::end_cons called with null parent");
  527|      0|   }
  528|  73.3k|   if(!m_source->end_of_data() || m_pushed.is_set()) {
  ------------------
  |  Branch (528:7): [True: 601, False: 72.7k]
  |  Branch (528:35): [True: 105, False: 72.6k]
  ------------------
  529|    706|      throw Decoding_Error("BER_Decoder::end_cons called with data left");
  530|    706|   }
  531|  72.6k|   return (*m_parent);
  532|  73.3k|}
_ZN5Botan11BER_DecoderC2EONS_10BER_ObjectEPS0_:
  535|   105k|      m_limits(parent != nullptr ? parent->limits() : BER_Decoder::Limits::BER()), m_parent(parent) {
  ------------------
  |  Branch (535:16): [True: 105k, False: 0]
  ------------------
  536|   105k|   m_data_src = std::make_unique<DataSource_BERObject>(std::move(obj));
  537|   105k|   m_source = m_data_src.get();
  538|   105k|}
_ZN5Botan11BER_DecoderC2ERNS_10DataSourceENS0_6LimitsE:
  543|  5.05k|BER_Decoder::BER_Decoder(DataSource& src, Limits limits) : m_limits(limits), m_source(&src) {}
_ZN5Botan11BER_DecoderC2ENSt3__14spanIKhLm18446744073709551615EEENS0_6LimitsE:
  548|  36.5k|BER_Decoder::BER_Decoder(std::span<const uint8_t> buf, Limits limits) : m_limits(limits) {
  549|  36.5k|   m_data_src = std::make_unique<DataSource_Memory>(buf);
  550|  36.5k|   m_source = m_data_src.get();
  551|  36.5k|}
_ZN5Botan11BER_Decoder6decodeERNS_11ASN1_ObjectENS_9ASN1_TypeENS_10ASN1_ClassE:
  560|   116k|BER_Decoder& BER_Decoder::decode(ASN1_Object& obj, ASN1_Type /*unused*/, ASN1_Class /*unused*/) {
  561|   116k|   obj.decode_from(*this);
  562|   116k|   return (*this);
  563|   116k|}
_ZN5Botan11BER_Decoder11decode_nullEv:
  568|     44|BER_Decoder& BER_Decoder::decode_null() {
  569|     44|   const BER_Object obj = get_next_object();
  570|     44|   obj.assert_is_a(ASN1_Type::Null, ASN1_Class::Universal);
  571|     44|   if(obj.length() > 0) {
  ------------------
  |  Branch (571:7): [True: 5, False: 39]
  ------------------
  572|      5|      throw BER_Decoding_Error("NULL object had nonzero size");
  573|      5|   }
  574|     39|   return (*this);
  575|     44|}
_ZN5Botan11BER_Decoder6decodeERbNS_9ASN1_TypeENS_10ASN1_ClassE:
  587|  2.18k|BER_Decoder& BER_Decoder::decode(bool& out, ASN1_Type type_tag, ASN1_Class class_tag) {
  588|  2.18k|   const BER_Object obj = get_next_object();
  589|  2.18k|   obj.assert_is_a(type_tag, class_tag);
  590|       |
  591|  2.18k|   if(obj.length() != 1) {
  ------------------
  |  Branch (591:7): [True: 11, False: 2.17k]
  ------------------
  592|     11|      throw BER_Decoding_Error("BER boolean value had invalid size");
  593|     11|   }
  594|       |
  595|  2.17k|   const uint8_t val = obj.bits()[0];
  596|       |
  597|       |   // DER requires boolean values to be exactly 0x00 or 0xFF
  598|  2.17k|   if(m_limits.require_der_encoding() && val != 0x00 && val != 0xFF) {
  ------------------
  |  Branch (598:7): [True: 2.17k, False: 0]
  |  Branch (598:42): [True: 2.15k, False: 17]
  |  Branch (598:57): [True: 22, False: 2.13k]
  ------------------
  599|     22|      throw BER_Decoding_Error("Detected non-canonical boolean encoding in DER structure");
  600|     22|   }
  601|       |
  602|  2.14k|   out = (val != 0) ? true : false;
  ------------------
  |  Branch (602:10): [True: 2.13k, False: 17]
  ------------------
  603|       |
  604|  2.14k|   return (*this);
  605|  2.17k|}
_ZN5Botan11BER_Decoder6decodeERmNS_9ASN1_TypeENS_10ASN1_ClassE:
  610|  9.75k|BER_Decoder& BER_Decoder::decode(size_t& out, ASN1_Type type_tag, ASN1_Class class_tag) {
  611|  9.75k|   BigInt integer;
  612|  9.75k|   decode(integer, type_tag, class_tag);
  613|       |
  614|  9.75k|   if(integer.signum() < 0) {
  ------------------
  |  Branch (614:7): [True: 33, False: 9.71k]
  ------------------
  615|     33|      throw BER_Decoding_Error("Decoded small integer value was negative");
  616|     33|   }
  617|       |
  618|  9.71k|   if(integer.bits() > 32) {
  ------------------
  |  Branch (618:7): [True: 34, False: 9.68k]
  ------------------
  619|     34|      throw BER_Decoding_Error("Decoded integer value larger than expected");
  620|     34|   }
  621|       |
  622|  9.68k|   out = 0;
  623|  48.2k|   for(size_t i = 0; i != 4; ++i) {
  ------------------
  |  Branch (623:22): [True: 38.5k, False: 9.68k]
  ------------------
  624|  38.5k|      out = (out << 8) | integer.byte_at(3 - i);
  625|  38.5k|   }
  626|       |
  627|  9.68k|   return (*this);
  628|  9.71k|}
_ZN5Botan11BER_Decoder6decodeERNS_6BigIntENS_9ASN1_TypeENS_10ASN1_ClassE:
  660|  14.0k|BER_Decoder& BER_Decoder::decode(BigInt& out, ASN1_Type type_tag, ASN1_Class class_tag) {
  661|  14.0k|   const BER_Object obj = get_next_object();
  662|  14.0k|   obj.assert_is_a(type_tag, class_tag);
  663|       |
  664|       |   // DER requires minimal INTEGER encoding (X.690 section 8.3.2)
  665|  14.0k|   if(m_limits.require_der_encoding()) {
  ------------------
  |  Branch (665:7): [True: 13.9k, False: 89]
  ------------------
  666|  13.9k|      if(obj.length() == 0) {
  ------------------
  |  Branch (666:10): [True: 15, False: 13.9k]
  ------------------
  667|     15|         throw BER_Decoding_Error("Detected empty INTEGER encoding in DER structure");
  668|     15|      }
  669|  13.9k|      if(obj.length() > 1) {
  ------------------
  |  Branch (669:10): [True: 8.17k, False: 5.80k]
  ------------------
  670|  8.17k|         if(obj.bits()[0] == 0x00 && (obj.bits()[1] & 0x80) == 0) {
  ------------------
  |  Branch (670:13): [True: 408, False: 7.76k]
  |  Branch (670:38): [True: 8, False: 400]
  ------------------
  671|      8|            throw BER_Decoding_Error("Detected non-minimal INTEGER encoding in DER structure");
  672|      8|         }
  673|  8.16k|         if(obj.bits()[0] == 0xFF && (obj.bits()[1] & 0x80) != 0) {
  ------------------
  |  Branch (673:13): [True: 80, False: 8.08k]
  |  Branch (673:38): [True: 11, False: 69]
  ------------------
  674|     11|            throw BER_Decoding_Error("Detected non-minimal INTEGER encoding in DER structure");
  675|     11|         }
  676|  8.16k|      }
  677|  13.9k|   }
  678|       |
  679|  14.0k|   if(obj.length() == 0) {
  ------------------
  |  Branch (679:7): [True: 0, False: 14.0k]
  ------------------
  680|      0|      out.clear();
  681|  14.0k|   } else {
  682|  14.0k|      const uint8_t first = obj.bits()[0];
  683|  14.0k|      const bool negative = (first & 0x80) == 0x80;
  684|       |
  685|  14.0k|      if(negative) {
  ------------------
  |  Branch (685:10): [True: 1.84k, False: 12.2k]
  ------------------
  686|  1.84k|         secure_vector<uint8_t> vec(obj.bits(), obj.bits() + obj.length());
  687|  4.30k|         for(size_t i = obj.length(); i > 0; --i) {
  ------------------
  |  Branch (687:39): [True: 4.30k, False: 0]
  ------------------
  688|  4.30k|            const bool gt0 = (vec[i - 1] > 0);
  689|  4.30k|            vec[i - 1] -= 1;
  690|  4.30k|            if(gt0) {
  ------------------
  |  Branch (690:16): [True: 1.84k, False: 2.46k]
  ------------------
  691|  1.84k|               break;
  692|  1.84k|            }
  693|  4.30k|         }
  694|  45.7k|         for(size_t i = 0; i != obj.length(); ++i) {
  ------------------
  |  Branch (694:28): [True: 43.9k, False: 1.84k]
  ------------------
  695|  43.9k|            vec[i] = ~vec[i];
  696|  43.9k|         }
  697|  1.84k|         out._assign_from_bytes(vec);
  698|  1.84k|         out.flip_sign();
  699|  12.2k|      } else {
  700|  12.2k|         out._assign_from_bytes(obj.data());
  701|  12.2k|      }
  702|  14.0k|   }
  703|       |
  704|  14.0k|   return (*this);
  705|  14.0k|}
_ZN5Botan11BER_Decoder6decodeERNSt3__16vectorIhNS1_9allocatorIhEEEENS_9ASN1_TypeES7_NS_10ASN1_ClassE:
  782|  30.7k|                                 ASN1_Class class_tag) {
  783|  30.7k|   if(real_type != ASN1_Type::OctetString && real_type != ASN1_Type::BitString) {
  ------------------
  |  Branch (783:7): [True: 9.22k, False: 21.5k]
  |  Branch (783:46): [True: 0, False: 9.22k]
  ------------------
  784|      0|      throw BER_Bad_Tag("Bad tag for {BIT,OCTET} STRING", static_cast<uint32_t>(real_type));
  785|      0|   }
  786|       |
  787|  30.7k|   asn1_decode_binary_string(
  788|  30.7k|      buffer, get_next_object(), real_type, type_tag, class_tag, m_limits.require_der_encoding());
  789|  30.7k|   return (*this);
  790|  30.7k|}
ber_dec.cpp:_ZN5Botan12_GLOBAL__N_110decode_tagEPNS_10DataSourceERNS_9ASN1_TypeERNS_10ASN1_ClassE:
   27|   268k|size_t decode_tag(DataSource* ber, ASN1_Type& type_tag, ASN1_Class& class_tag) {
   28|   268k|   auto b = ber->read_byte();
   29|       |
   30|   268k|   if(!b) {
  ------------------
  |  Branch (30:7): [True: 2.60k, False: 266k]
  ------------------
   31|  2.60k|      type_tag = ASN1_Type::NoObject;
   32|  2.60k|      class_tag = ASN1_Class::NoObject;
   33|  2.60k|      return 0;
   34|  2.60k|   }
   35|       |
   36|   266k|   if((*b & 0x1F) != 0x1F) {
  ------------------
  |  Branch (36:7): [True: 265k, False: 1.04k]
  ------------------
   37|   265k|      type_tag = ASN1_Type(*b & 0x1F);
   38|   265k|      class_tag = ASN1_Class(*b & 0xE0);
   39|   265k|      return 1;
   40|   265k|   }
   41|       |
   42|  1.04k|   size_t tag_bytes = 1;
   43|  1.04k|   class_tag = ASN1_Class(*b & 0xE0);
   44|       |
   45|  1.04k|   uint32_t tag_buf = 0;
   46|  3.60k|   while(true) {
  ------------------
  |  Branch (46:10): [True: 3.60k, Folded]
  ------------------
   47|  3.60k|      b = ber->read_byte();
   48|  3.60k|      if(!b) {
  ------------------
  |  Branch (48:10): [True: 23, False: 3.58k]
  ------------------
   49|     23|         throw BER_Decoding_Error("Long-form tag truncated");
   50|     23|      }
   51|  3.58k|      if((tag_buf >> 24) != 0) {
  ------------------
  |  Branch (51:10): [True: 92, False: 3.48k]
  ------------------
   52|     92|         throw BER_Decoding_Error("Long-form tag overflowed 32 bits");
   53|     92|      }
   54|       |      // This is required even by BER (see X.690 section 8.1.2.4.2 sentence c).
   55|       |      // Bits 7-1 of the first subsequent octet must not be all zero; this rules
   56|       |      // out both 0x80 (continuation with no data) and 0x00 (a long-form encoding
   57|       |      // of tag value 0, which collides with the EOC marker).
   58|  3.48k|      if(tag_bytes == 1 && (*b & 0x7F) == 0) {
  ------------------
  |  Branch (58:10): [True: 1.03k, False: 2.45k]
  |  Branch (58:28): [True: 16, False: 1.01k]
  ------------------
   59|     16|         throw BER_Decoding_Error("Long form tag with leading zero");
   60|     16|      }
   61|  3.47k|      ++tag_bytes;
   62|  3.47k|      tag_buf = (tag_buf << 7) | (*b & 0x7F);
   63|  3.47k|      if((*b & 0x80) == 0) {
  ------------------
  |  Branch (63:10): [True: 910, False: 2.56k]
  ------------------
   64|    910|         break;
   65|    910|      }
   66|  3.47k|   }
   67|       |   // Per X.690 8.1.2.2, tag values 0-30 shall be encoded in the short form.
   68|       |   // Long-form encoding is reserved for tag values >= 31 (X.690 8.1.2.3).
   69|       |   // This is unconditional and applies to BER as well as DER.
   70|    910|   if(tag_buf <= 30) {
  ------------------
  |  Branch (70:7): [True: 23, False: 887]
  ------------------
   71|     23|      throw BER_Decoding_Error("Long-form tag encoding used for small tag value");
   72|     23|   }
   73|       |
   74|    887|   if(tag_buf == static_cast<uint32_t>(ASN1_Type::NoObject)) {
  ------------------
  |  Branch (74:7): [True: 1, False: 886]
  ------------------
   75|      1|      throw BER_Decoding_Error("Tag value collides with internal sentinel");
   76|      1|   }
   77|       |
   78|       |   // NOLINTNEXTLINE(clang-analyzer-optin.core.EnumCastOutOfRange)
   79|    886|   type_tag = ASN1_Type(tag_buf);
   80|    886|   return tag_bytes;
   81|    887|}
ber_dec.cpp:_ZN5Botan12_GLOBAL__N_113decode_lengthEPNS_10DataSourceEmbb:
  126|   265k|BerDecodedLength decode_length(DataSource* ber, size_t allow_indef, bool der_mode, bool constructed) {
  127|   265k|   uint8_t b = 0;
  128|   265k|   if(ber->read_byte(b) == 0) {
  ------------------
  |  Branch (128:7): [True: 201, False: 265k]
  ------------------
  129|    201|      throw BER_Decoding_Error("Length field not found");
  130|    201|   }
  131|   265k|   if((b & 0x80) == 0) {
  ------------------
  |  Branch (131:7): [True: 237k, False: 28.5k]
  ------------------
  132|   237k|      return BerDecodedLength(b, 1);
  133|   237k|   }
  134|       |
  135|  28.5k|   const size_t num_length_bytes = (b & 0x7F);
  136|  28.5k|   if(num_length_bytes > 4) {
  ------------------
  |  Branch (136:7): [True: 629, False: 27.9k]
  ------------------
  137|    629|      throw BER_Decoding_Error("Length field is too large");
  138|    629|   }
  139|       |
  140|  27.9k|   const size_t field_size = 1 + num_length_bytes;
  141|       |
  142|  27.9k|   if(num_length_bytes == 0) {
  ------------------
  |  Branch (142:7): [True: 21, False: 27.9k]
  ------------------
  143|     21|      if(der_mode) {
  ------------------
  |  Branch (143:10): [True: 21, False: 0]
  ------------------
  144|     21|         throw BER_Decoding_Error("Detected indefinite-length encoding in DER structure");
  145|     21|      } else if(!constructed) {
  ------------------
  |  Branch (145:17): [True: 0, False: 0]
  ------------------
  146|       |         // Indefinite length is only valid for constructed types (X.690 8.1.3.2)
  147|      0|         throw BER_Decoding_Error("Indefinite-length encoding used with non-constructed type");
  148|      0|      } else if(allow_indef == 0) {
  ------------------
  |  Branch (148:17): [True: 0, False: 0]
  ------------------
  149|      0|         throw BER_Decoding_Error("Nested EOC markers too deep, rejecting to avoid stack exhaustion");
  150|      0|      } else {
  151|       |         // find_eoc returns bytes up to and including the EOC marker.
  152|       |         // Return the content length; the caller consumes the EOC separately.
  153|      0|         const size_t eoc_len = find_eoc(ber, /*base_offset=*/0, allow_indef - 1);
  154|      0|         if(eoc_len < 2) {
  ------------------
  |  Branch (154:13): [True: 0, False: 0]
  ------------------
  155|      0|            throw BER_Decoding_Error("Invalid EOC encoding");
  156|      0|         }
  157|      0|         return BerDecodedLength::indefinite(eoc_len - 2, field_size);
  158|      0|      }
  159|     21|   }
  160|       |
  161|  27.9k|   size_t length = 0;
  162|       |
  163|  76.9k|   for(size_t i = 0; i != num_length_bytes; ++i) {
  ------------------
  |  Branch (163:22): [True: 48.9k, False: 27.9k]
  ------------------
  164|  48.9k|      if(ber->read_byte(b) == 0) {
  ------------------
  |  Branch (164:10): [True: 8, False: 48.9k]
  ------------------
  165|      8|         throw BER_Decoding_Error("Corrupted length field");
  166|      8|      }
  167|       |      // Can't overflow since we already checked that num_length_bytes <= 4
  168|  48.9k|      length = (length << 8) | b;
  169|  48.9k|   }
  170|       |
  171|       |   // DER requires shortest possible length encoding
  172|  27.9k|   if(der_mode) {
  ------------------
  |  Branch (172:7): [True: 27.9k, False: 0]
  ------------------
  173|  27.9k|      if(length < 128) {
  ------------------
  |  Branch (173:10): [True: 20, False: 27.9k]
  ------------------
  174|     20|         throw BER_Decoding_Error("Detected non-canonical length encoding in DER structure");
  175|     20|      }
  176|  27.9k|      if(num_length_bytes > 1 && length < (size_t(1) << ((num_length_bytes - 1) * 8))) {
  ------------------
  |  Branch (176:10): [True: 20.8k, False: 7.01k]
  |  Branch (176:34): [True: 3, False: 20.8k]
  ------------------
  177|      3|         throw BER_Decoding_Error("Detected non-canonical length encoding in DER structure");
  178|      3|      }
  179|  27.9k|   }
  180|       |
  181|  27.9k|   return BerDecodedLength(length, field_size);
  182|  27.9k|}
ber_dec.cpp:_ZN5Botan12_GLOBAL__N_116BerDecodedLengthC2Emm:
   99|   265k|            BerDecodedLength(content_length, field_length, false) {}
ber_dec.cpp:_ZN5Botan12_GLOBAL__N_116BerDecodedLengthC2Emmb:
  116|   265k|            m_content_length(content_length), m_field_length(field_length), m_indefinite(indefinite) {}
ber_dec.cpp:_ZN5Botan12_GLOBAL__N_114is_constructedENS_10ASN1_ClassE:
   20|   296k|bool is_constructed(ASN1_Class class_tag) {
   21|   296k|   return (static_cast<uint32_t>(class_tag) & static_cast<uint32_t>(ASN1_Class::Constructed)) != 0;
   22|   296k|}
ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_116BerDecodedLength14content_lengthEv:
  105|   790k|      size_t content_length() const { return m_content_length; }
ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_116BerDecodedLength17indefinite_lengthEv:
  112|   263k|      bool indefinite_length() const { return m_indefinite; }
ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_116BerDecodedLength12total_lengthEv:
  108|   264k|      size_t total_length() const { return m_indefinite ? m_content_length + 2 : m_content_length; }
  ------------------
  |  Branch (108:44): [True: 0, False: 264k]
  ------------------
ber_dec.cpp:_ZN5Botan12_GLOBAL__N_120DataSource_BERObjectC2EONS_10BER_ObjectE:
  357|   105k|      explicit DataSource_BERObject(BER_Object&& obj) : m_obj(std::move(obj)) {}
ber_dec.cpp:_ZN5Botan12_GLOBAL__N_120DataSource_BERObject4readEPhm:
  327|  5.13M|      size_t read(uint8_t out[], size_t length) override {
  328|  5.13M|         BOTAN_ASSERT_NOMSG(m_offset <= m_obj.length());
  ------------------
  |  |   77|  5.13M|   do {                                                                     \
  |  |   78|  5.13M|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  5.13M|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 5.13M]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  5.13M|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 5.13M]
  |  |  ------------------
  ------------------
  329|  5.13M|         const size_t got = std::min<size_t>(m_obj.length() - m_offset, length);
  330|  5.13M|         copy_mem(out, m_obj.bits() + m_offset, got);
  331|  5.13M|         m_offset += got;
  332|  5.13M|         return got;
  333|  5.13M|      }
ber_dec.cpp:_ZN5Botan12_GLOBAL__N_120DataSource_BERObject15check_availableEm:
  348|   182k|      bool check_available(size_t n) override {
  349|   182k|         BOTAN_ASSERT_NOMSG(m_offset <= m_obj.length());
  ------------------
  |  |   77|   182k|   do {                                                                     \
  |  |   78|   182k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|   182k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 182k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|   182k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 182k]
  |  |  ------------------
  ------------------
  350|   182k|         return (n <= (m_obj.length() - m_offset));
  351|   182k|      }
ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_120DataSource_BERObject11end_of_dataEv:
  353|   162k|      bool end_of_data() const override { return get_bytes_read() == m_obj.length(); }
ber_dec.cpp:_ZNK5Botan12_GLOBAL__N_120DataSource_BERObject14get_bytes_readEv:
  355|   162k|      size_t get_bytes_read() const override { return m_offset; }
ber_dec.cpp:_ZN5Botan12_GLOBAL__N_114is_constructedERKNS_10BER_ObjectE:
  709|  30.1k|bool is_constructed(const BER_Object& obj) {
  710|  30.1k|   return is_constructed(obj.class_tag());
  711|  30.1k|}
ber_dec.cpp:_ZN5Botan12_GLOBAL__N_125asn1_decode_binary_stringINSt3__19allocatorIhEEEEvRNS2_6vectorIhT_EERKNS_10BER_ObjectENS_9ASN1_TypeESC_NS_10ASN1_ClassEb:
  719|  30.4k|                               bool require_der) {
  720|  30.4k|   obj.assert_is_a(type_tag, class_tag);
  721|       |
  722|       |   // DER requires BIT STRING and OCTET STRING to use primitive encoding
  723|  30.4k|   if(require_der && is_constructed(obj)) {
  ------------------
  |  Branch (723:7): [True: 30.1k, False: 275]
  |  Branch (723:22): [True: 0, False: 30.1k]
  ------------------
  724|      0|      throw BER_Decoding_Error("Detected constructed string encoding in DER structure");
  725|      0|   }
  726|       |
  727|  30.4k|   if(real_type == ASN1_Type::OctetString) {
  ------------------
  |  Branch (727:7): [True: 21.0k, False: 9.32k]
  ------------------
  728|  21.0k|      buffer.assign(obj.bits(), obj.bits() + obj.length());
  729|  21.0k|   } else {
  730|  9.32k|      if(obj.length() == 0) {
  ------------------
  |  Branch (730:10): [True: 7, False: 9.32k]
  ------------------
  731|      7|         throw BER_Decoding_Error("Invalid BIT STRING");
  732|      7|      }
  733|       |
  734|  9.32k|      const uint8_t unused_bits = obj.bits()[0];
  735|       |
  736|  9.32k|      if(unused_bits >= 8) {
  ------------------
  |  Branch (736:10): [True: 15, False: 9.30k]
  ------------------
  737|     15|         throw BER_Decoding_Error("Bad number of unused bits in BIT STRING");
  738|     15|      }
  739|       |
  740|       |      // Empty BIT STRING with unused bits > 0 ...
  741|  9.30k|      if(unused_bits > 0 && obj.length() < 2) {
  ------------------
  |  Branch (741:10): [True: 1.36k, False: 7.94k]
  |  Branch (741:29): [True: 3, False: 1.35k]
  ------------------
  742|      3|         throw BER_Decoding_Error("Invalid BIT STRING");
  743|      3|      }
  744|       |
  745|       |      // DER requires unused bits in BIT STRING to be zero (X.690 section 11.2.2)
  746|  9.30k|      if(require_der && unused_bits > 0) {
  ------------------
  |  Branch (746:10): [True: 9.02k, False: 275]
  |  Branch (746:25): [True: 1.35k, False: 7.67k]
  ------------------
  747|  1.35k|         const uint8_t last_byte = obj.bits()[obj.length() - 1];
  748|  1.35k|         if((last_byte & ((1 << unused_bits) - 1)) != 0) {
  ------------------
  |  Branch (748:13): [True: 239, False: 1.12k]
  ------------------
  749|    239|            throw BER_Decoding_Error("Detected non-zero padding bits in BIT STRING in DER structure");
  750|    239|         }
  751|  1.35k|      }
  752|       |
  753|  9.06k|      buffer.resize(obj.length() - 1);
  754|       |
  755|  9.06k|      if(obj.length() > 1) {
  ------------------
  |  Branch (755:10): [True: 8.41k, False: 649]
  ------------------
  756|  8.41k|         copy_mem(buffer.data(), obj.bits() + 1, obj.length() - 1);
  757|  8.41k|      }
  758|  9.06k|   }
  759|  30.4k|}

_ZN5Botan11DER_EncoderC2ERNSt3__16vectorIhNS1_9allocatorIhEEEE:
   72|  11.7k|DER_Encoder::DER_Encoder(std::vector<uint8_t>& vec) {
   73|  11.7k|   m_append_output = [&vec](const uint8_t b[], size_t l) { vec.insert(vec.end(), b, b + l); };
   74|  11.7k|}
_ZN5Botan11DER_Encoder12DER_Sequence13push_contentsERS0_:
   79|  12.6k|void DER_Encoder::DER_Sequence::push_contents(DER_Encoder& der) {
   80|  12.6k|   const auto real_class_tag = m_class_tag | ASN1_Class::Constructed;
   81|       |
   82|  12.6k|   if(m_type_tag == ASN1_Type::Set && m_class_tag == ASN1_Class::Universal) {
  ------------------
  |  Branch (82:7): [True: 0, False: 12.6k]
  |  Branch (82:39): [True: 0, False: 0]
  ------------------
   83|      0|      std::sort(m_set_contents.begin(), m_set_contents.end());
   84|      0|      for(const auto& set_elem : m_set_contents) {
  ------------------
  |  Branch (84:32): [True: 0, False: 0]
  ------------------
   85|      0|         m_contents += set_elem;
   86|      0|      }
   87|      0|      m_set_contents.clear();
   88|      0|   }
   89|       |
   90|  12.6k|   der.add_object(m_type_tag, real_class_tag, m_contents.data(), m_contents.size());
   91|  12.6k|   m_contents.clear();
   92|  12.6k|}
_ZN5Botan11DER_Encoder12DER_Sequence9add_bytesEPKhm:
   97|  12.0k|void DER_Encoder::DER_Sequence::add_bytes(const uint8_t data[], size_t length) {
   98|  12.0k|   if(m_type_tag == ASN1_Type::Set && m_class_tag == ASN1_Class::Universal) {
  ------------------
  |  Branch (98:7): [True: 0, False: 12.0k]
  |  Branch (98:39): [True: 0, False: 0]
  ------------------
   99|      0|      m_set_contents.push_back(secure_vector<uint8_t>(data, data + length));
  100|  12.0k|   } else {
  101|  12.0k|      m_contents += std::make_pair(data, length);
  102|  12.0k|   }
  103|  12.0k|}
_ZN5Botan11DER_Encoder12DER_Sequence9add_bytesEPKhmS3_m:
  105|  2.45k|void DER_Encoder::DER_Sequence::add_bytes(const uint8_t hdr[], size_t hdr_len, const uint8_t val[], size_t val_len) {
  106|  2.45k|   if(m_type_tag == ASN1_Type::Set && m_class_tag == ASN1_Class::Universal) {
  ------------------
  |  Branch (106:7): [True: 0, False: 2.45k]
  |  Branch (106:39): [True: 0, False: 0]
  ------------------
  107|      0|      secure_vector<uint8_t> m;
  108|      0|      m.reserve(hdr_len + val_len);
  109|      0|      m += std::make_pair(hdr, hdr_len);
  110|      0|      m += std::make_pair(val, val_len);
  111|      0|      m_set_contents.push_back(std::move(m));
  112|  2.45k|   } else {
  113|  2.45k|      m_contents += std::make_pair(hdr, hdr_len);
  114|  2.45k|      m_contents += std::make_pair(val, val_len);
  115|  2.45k|   }
  116|  2.45k|}
_ZN5Botan11DER_Encoder12DER_SequenceC2ENS_9ASN1_TypeENS_10ASN1_ClassE:
  129|  12.6k|      m_type_tag(type_tag), m_class_tag(class_tag) {}
_ZN5Botan11DER_Encoder10start_consENS_9ASN1_TypeENS_10ASN1_ClassE:
  165|  12.6k|DER_Encoder& DER_Encoder::start_cons(ASN1_Type type_tag, ASN1_Class class_tag) {
  166|  12.6k|   m_subsequences.push_back(DER_Sequence(type_tag, class_tag));
  167|  12.6k|   return (*this);
  168|  12.6k|}
_ZN5Botan11DER_Encoder8end_consEv:
  173|  12.6k|DER_Encoder& DER_Encoder::end_cons() {
  174|  12.6k|   if(m_subsequences.empty()) {
  ------------------
  |  Branch (174:7): [True: 0, False: 12.6k]
  ------------------
  175|      0|      throw Invalid_State("DER_Encoder::end_cons: No such sequence");
  176|      0|   }
  177|       |
  178|  12.6k|   DER_Sequence last_seq = std::move(m_subsequences[m_subsequences.size() - 1]);
  179|  12.6k|   m_subsequences.pop_back();
  180|  12.6k|   last_seq.push_contents(*this);
  181|       |
  182|  12.6k|   return (*this);
  183|  12.6k|}
_ZN5Botan11DER_Encoder9raw_bytesEPKhm:
  202|  12.0k|DER_Encoder& DER_Encoder::raw_bytes(const uint8_t bytes[], size_t length) {
  203|  12.0k|   if(!m_subsequences.empty()) {
  ------------------
  |  Branch (203:7): [True: 12.0k, False: 0]
  ------------------
  204|  12.0k|      m_subsequences[m_subsequences.size() - 1].add_bytes(bytes, length);
  205|  12.0k|   } else if(m_append_output) {
  ------------------
  |  Branch (205:14): [True: 0, False: 0]
  ------------------
  206|      0|      m_append_output(bytes, length);
  207|      0|   } else {
  208|      0|      m_default_outbuf += std::make_pair(bytes, length);
  209|      0|   }
  210|       |
  211|  12.0k|   return (*this);
  212|  12.0k|}
_ZN5Botan11DER_Encoder10add_objectENS_9ASN1_TypeENS_10ASN1_ClassEPKhm:
  244|  14.2k|DER_Encoder& DER_Encoder::add_object(ASN1_Type type_tag, ASN1_Class class_tag, const uint8_t rep[], size_t length) {
  245|  14.2k|   std::vector<uint8_t> hdr;
  246|  14.2k|   encode_tag(hdr, type_tag, class_tag);
  247|  14.2k|   encode_length(hdr, length);
  248|       |
  249|  14.2k|   if(!m_subsequences.empty()) {
  ------------------
  |  Branch (249:7): [True: 2.45k, False: 11.7k]
  ------------------
  250|  2.45k|      m_subsequences[m_subsequences.size() - 1].add_bytes(hdr.data(), hdr.size(), rep, length);
  251|  11.7k|   } else if(m_append_output) {
  ------------------
  |  Branch (251:14): [True: 11.7k, False: 0]
  ------------------
  252|  11.7k|      m_append_output(hdr.data(), hdr.size());
  253|  11.7k|      m_append_output(rep, length);
  254|  11.7k|   } else {
  255|      0|      m_default_outbuf += hdr;
  256|      0|      m_default_outbuf += std::make_pair(rep, length);
  257|      0|   }
  258|       |
  259|  14.2k|   return (*this);
  260|  14.2k|}
_ZN5Botan11DER_Encoder6encodeEPKhmNS_9ASN1_TypeE:
  293|    614|DER_Encoder& DER_Encoder::encode(const uint8_t bytes[], size_t length, ASN1_Type real_type) {
  294|    614|   return encode(bytes, length, real_type, real_type, ASN1_Class::Universal);
  295|    614|}
_ZN5Botan11DER_Encoder6encodeEPKhmNS_9ASN1_TypeES3_NS_10ASN1_ClassE:
  350|    614|   const uint8_t bytes[], size_t length, ASN1_Type real_type, ASN1_Type type_tag, ASN1_Class class_tag) {
  351|    614|   if(real_type != ASN1_Type::OctetString && real_type != ASN1_Type::BitString) {
  ------------------
  |  Branch (351:7): [True: 614, False: 0]
  |  Branch (351:46): [True: 0, False: 614]
  ------------------
  352|      0|      throw Invalid_Argument("DER_Encoder: Invalid tag for byte/bit string");
  353|      0|   }
  354|       |
  355|    614|   if(real_type == ASN1_Type::BitString) {
  ------------------
  |  Branch (355:7): [True: 614, False: 0]
  ------------------
  356|    614|      secure_vector<uint8_t> encoded;
  357|    614|      encoded.push_back(0);
  358|    614|      encoded += std::make_pair(bytes, length);
  359|    614|      return add_object(type_tag, class_tag, encoded);
  360|    614|   } else {
  361|      0|      return add_object(type_tag, class_tag, bytes, length);
  362|      0|   }
  363|    614|}
_ZN5Botan11DER_Encoder6encodeERKNS_11ASN1_ObjectE:
  365|  1.22k|DER_Encoder& DER_Encoder::encode(const ASN1_Object& obj) {
  366|  1.22k|   obj.encode_into(*this);
  367|  1.22k|   return (*this);
  368|  1.22k|}
der_enc.cpp:_ZN5Botan12_GLOBAL__N_110encode_tagERNSt3__16vectorIhNS1_9allocatorIhEEEENS_9ASN1_TypeENS_10ASN1_ClassE:
   25|  14.2k|void encode_tag(std::vector<uint8_t>& encoded_tag, ASN1_Type type_tag_e, ASN1_Class class_tag_e) {
   26|  14.2k|   const uint32_t type_tag = static_cast<uint32_t>(type_tag_e);
   27|  14.2k|   const uint32_t class_tag = static_cast<uint32_t>(class_tag_e);
   28|       |
   29|  14.2k|   if((class_tag | 0xE0) != 0xE0) {
  ------------------
  |  Branch (29:7): [True: 0, False: 14.2k]
  ------------------
   30|      0|      throw Encoding_Error(fmt("DER_Encoder: Invalid class tag {}", std::to_string(class_tag)));
   31|      0|   }
   32|       |
   33|  14.2k|   if(type_tag <= 30) {
  ------------------
  |  Branch (33:7): [True: 14.2k, False: 1]
  ------------------
   34|  14.2k|      encoded_tag.push_back(static_cast<uint8_t>(type_tag | class_tag));
   35|  14.2k|   } else {
   36|      1|      size_t blocks = high_bit(static_cast<uint32_t>(type_tag)) + 6;
   37|      1|      blocks = (blocks - (blocks % 7)) / 7;
   38|       |
   39|      1|      BOTAN_ASSERT_NOMSG(blocks > 0);
  ------------------
  |  |   77|      1|   do {                                                                     \
  |  |   78|      1|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|      1|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 1]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|      1|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 1]
  |  |  ------------------
  ------------------
   40|       |
   41|      1|      encoded_tag.push_back(static_cast<uint8_t>(class_tag | 0x1F));
   42|      1|      for(size_t i = 0; i != blocks - 1; ++i) {
  ------------------
  |  Branch (42:25): [True: 0, False: 1]
  ------------------
   43|      0|         encoded_tag.push_back(0x80 | ((type_tag >> 7 * (blocks - i - 1)) & 0x7F));
   44|      0|      }
   45|      1|      encoded_tag.push_back(type_tag & 0x7F);
   46|      1|   }
   47|  14.2k|}
der_enc.cpp:_ZN5Botan12_GLOBAL__N_113encode_lengthERNSt3__16vectorIhNS1_9allocatorIhEEEEm:
   52|  14.2k|void encode_length(std::vector<uint8_t>& encoded_length, size_t length) {
   53|  14.2k|   if(length <= 127) {
  ------------------
  |  Branch (53:7): [True: 10.4k, False: 3.78k]
  ------------------
   54|  10.4k|      encoded_length.push_back(static_cast<uint8_t>(length));
   55|  10.4k|   } else {
   56|  3.78k|      const size_t bytes_needed = significant_bytes(length);
   57|       |
   58|  3.78k|      encoded_length.push_back(static_cast<uint8_t>(0x80 | bytes_needed));
   59|       |
   60|  10.4k|      for(size_t i = sizeof(length) - bytes_needed; i < sizeof(length); ++i) {
  ------------------
  |  Branch (60:53): [True: 6.63k, False: 3.78k]
  ------------------
   61|  6.63k|         encoded_length.push_back(get_byte_var(i, length));
   62|  6.63k|      }
   63|  3.78k|   }
   64|  14.2k|}
der_enc.cpp:_ZZN5Botan11DER_EncoderC1ERNSt3__16vectorIhNS1_9allocatorIhEEEEENK3$_0clEPKhm:
   73|  23.5k|   m_append_output = [&vec](const uint8_t b[], size_t l) { vec.insert(vec.end(), b, b + l); };

_ZN5Botan7OID_MapC2Ev:
   11|      1|OID_Map::OID_Map() {
   12|      1|   m_str2oid = OID_Map::load_str2oid_map();
   13|      1|   m_oid2str = OID_Map::load_oid2str_map();
   14|      1|}
_ZN5Botan7OID_Map15global_registryEv:
   16|  2.07k|OID_Map& OID_Map::global_registry() {
   17|  2.07k|   static OID_Map g_map;
   18|  2.07k|   return g_map;
   19|  2.07k|}
_ZN5Botan7OID_Map7str2oidENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   84|  2.07k|OID OID_Map::str2oid(std::string_view str) {
   85|  2.07k|   if(auto oid = lookup_static_oid_name(str)) {
  ------------------
  |  Branch (85:12): [True: 2.07k, False: 0]
  ------------------
   86|  2.07k|      return std::move(*oid);
   87|  2.07k|   }
   88|       |
   89|      0|   const lock_guard_type<mutex_type> lock(m_mutex);
   90|      0|   auto i = m_str2oid.find(std::string(str));
   91|      0|   if(i != m_str2oid.end()) {
  ------------------
  |  Branch (91:7): [True: 0, False: 0]
  ------------------
   92|      0|      return i->second;
   93|      0|   }
   94|       |
   95|      0|   return OID();
   96|      0|}

_ZN5Botan7OID_Map22lookup_static_oid_nameENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
  742|  2.07k|std::optional<OID> OID_Map::lookup_static_oid_name(std::string_view req) {
  743|  2.07k|   const uint32_t hc = hash_oid_name(req);
  744|       |
  745|  2.07k|   switch(hc) {
  746|      0|      case 0x00545:
  ------------------
  |  Branch (746:7): [True: 0, False: 2.07k]
  ------------------
  747|      0|         return if_match(req, "Twofish/GCM", {1, 3, 6, 1, 4, 1, 25258, 3, 102});
  748|      0|      case 0x00CF3:
  ------------------
  |  Branch (748:7): [True: 0, False: 2.07k]
  ------------------
  749|      0|         return if_match(req, "SphincsPlus-sha2-192f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 4});
  750|      0|      case 0x015FE:
  ------------------
  |  Branch (750:7): [True: 0, False: 2.07k]
  ------------------
  751|      0|         return if_match(req, "FrodoKEM-640-SHAKE", {1, 3, 6, 1, 4, 1, 25258, 1, 14, 1});
  752|      0|      case 0x01F9E:
  ------------------
  |  Branch (752:7): [True: 0, False: 2.07k]
  ------------------
  753|      0|         return if_match(req, "MD5", {1, 2, 840, 113549, 2, 5});
  754|      0|      case 0x02293:
  ------------------
  |  Branch (754:7): [True: 0, False: 2.07k]
  ------------------
  755|      0|         return if_match(req, "SphincsPlus-shake-192f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 4});
  756|      0|      case 0x02B93:
  ------------------
  |  Branch (756:7): [True: 0, False: 2.07k]
  ------------------
  757|      0|         return if_match(req, "Microsoft SmartcardLogon", {1, 3, 6, 1, 4, 1, 311, 20, 2, 2});
  758|      0|      case 0x041D5:
  ------------------
  |  Branch (758:7): [True: 0, False: 2.07k]
  ------------------
  759|      0|         return if_match(req, "secp160k1", {1, 3, 132, 0, 9});
  760|      0|      case 0x044B3:
  ------------------
  |  Branch (760:7): [True: 0, False: 2.07k]
  ------------------
  761|      0|         return if_match(req, "Camellia-256/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 8});
  762|      0|      case 0x048B2:
  ------------------
  |  Branch (762:7): [True: 0, False: 2.07k]
  ------------------
  763|      0|         return if_match(req, "secp160r1", {1, 3, 132, 0, 8});
  764|      0|      case 0x048B3:
  ------------------
  |  Branch (764:7): [True: 0, False: 2.07k]
  ------------------
  765|      0|         return if_match(req, "secp160r2", {1, 3, 132, 0, 30});
  766|      0|      case 0x05CDA:
  ------------------
  |  Branch (766:7): [True: 0, False: 2.07k]
  ------------------
  767|      0|         return if_match(req, "X520.Country", {2, 5, 4, 6});
  768|     29|      case 0x07783:
  ------------------
  |  Branch (768:7): [True: 29, False: 2.04k]
  ------------------
  769|     29|         return if_match(req, "PKIX.ServerAuth", {1, 3, 6, 1, 5, 5, 7, 3, 1});
  770|      0|      case 0x086C7:
  ------------------
  |  Branch (770:7): [True: 0, False: 2.07k]
  ------------------
  771|      0|         return if_match(req, "numsp384d1", {1, 3, 6, 1, 4, 1, 25258, 4, 2});
  772|      0|      case 0x08A92:
  ------------------
  |  Branch (772:7): [True: 0, False: 2.07k]
  ------------------
  773|      0|         return if_match(req, "RSA/PKCS1v15(SHA-1)", {1, 2, 840, 113549, 1, 1, 5});
  774|      0|      case 0x09EA0:
  ------------------
  |  Branch (774:7): [True: 0, False: 2.07k]
  ------------------
  775|      0|         return if_match(req, "DES/CBC", {1, 3, 14, 3, 2, 7});
  776|      0|      case 0x0B2D6:
  ------------------
  |  Branch (776:7): [True: 0, False: 2.07k]
  ------------------
  777|      0|         return if_match(req, "ECDSA/SHA-3(512)", {2, 16, 840, 1, 101, 3, 4, 3, 12});
  778|      0|      case 0x0BA72:
  ------------------
  |  Branch (778:7): [True: 0, False: 2.07k]
  ------------------
  779|      0|         return if_match(req, "SphincsPlus-sha2-128s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 1});
  780|      0|      case 0x0BE23:
  ------------------
  |  Branch (780:7): [True: 0, False: 2.07k]
  ------------------
  781|      0|         return if_match(req, "ECGDSA", {1, 3, 36, 3, 3, 2, 5, 2, 1});
  782|      0|      case 0x0C109:
  ------------------
  |  Branch (782:7): [True: 0, False: 2.07k]
  ------------------
  783|      0|         return if_match(req, "PKCS9.FriendlyName", {1, 2, 840, 113549, 1, 9, 20});
  784|      0|      case 0x0D012:
  ------------------
  |  Branch (784:7): [True: 0, False: 2.07k]
  ------------------
  785|      0|         return if_match(req, "SphincsPlus-shake-128s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 1});
  786|      0|      case 0x0DCE9:
  ------------------
  |  Branch (786:7): [True: 0, False: 2.07k]
  ------------------
  787|      0|         return if_match(req, "ClassicMcEliece_8192128f", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 10});
  788|      0|      case 0x0E52A:
  ------------------
  |  Branch (788:7): [True: 0, False: 2.07k]
  ------------------
  789|      0|         return if_match(req, "numsp512d1", {1, 3, 6, 1, 4, 1, 25258, 4, 3});
  790|      0|      case 0x0F9CC:
  ------------------
  |  Branch (790:7): [True: 0, False: 2.07k]
  ------------------
  791|      0|         return if_match(req, "PKCS9.UnstructuredName", {1, 2, 840, 113549, 1, 9, 2});
  792|      0|      case 0x0FF45:
  ------------------
  |  Branch (792:7): [True: 0, False: 2.07k]
  ------------------
  793|      0|         return if_match(req, "Camellia-256/GCM", {0, 3, 4401, 5, 3, 1, 9, 46});
  794|      0|      case 0x1033D:
  ------------------
  |  Branch (794:7): [True: 0, False: 2.07k]
  ------------------
  795|      0|         return if_match(req, "DSA/SHA-3(384)", {2, 16, 840, 1, 101, 3, 4, 3, 7});
  796|      0|      case 0x1139D:
  ------------------
  |  Branch (796:7): [True: 0, False: 2.07k]
  ------------------
  797|      0|         return if_match(req, "secp192k1", {1, 3, 132, 0, 31});
  798|      0|      case 0x113D6:
  ------------------
  |  Branch (798:7): [True: 0, False: 2.07k]
  ------------------
  799|      0|         return if_match(req, "X520.DNQualifier", {2, 5, 4, 46});
  800|      0|      case 0x11A7A:
  ------------------
  |  Branch (800:7): [True: 0, False: 2.07k]
  ------------------
  801|      0|         return if_match(req, "secp192r1", {1, 2, 840, 10045, 3, 1, 1});
  802|      0|      case 0x12096:
  ------------------
  |  Branch (802:7): [True: 0, False: 2.07k]
  ------------------
  803|      0|         return if_match(req, "SM2_Kex", {1, 2, 156, 10197, 1, 301, 2});
  804|      0|      case 0x13FC1:
  ------------------
  |  Branch (804:7): [True: 0, False: 2.07k]
  ------------------
  805|      0|         return if_match(req, "X520.GenerationalQualifier", {2, 5, 4, 44});
  806|      0|      case 0x1445B:
  ------------------
  |  Branch (806:7): [True: 0, False: 2.07k]
  ------------------
  807|      0|         return if_match(req, "PKCS5.PBKDF2", {1, 2, 840, 113549, 1, 5, 12});
  808|      0|      case 0x1495D:
  ------------------
  |  Branch (808:7): [True: 0, False: 2.07k]
  ------------------
  809|      0|         return if_match(req, "eFrodoKEM-1344-AES", {1, 3, 6, 1, 4, 1, 25258, 1, 17, 3});
  810|      0|      case 0x14E30:
  ------------------
  |  Branch (810:7): [True: 0, False: 2.07k]
  ------------------
  811|      0|         return if_match(req, "ClassicMcEliece_460896", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 3});
  812|      0|      case 0x14FB1:
  ------------------
  |  Branch (812:7): [True: 0, False: 2.07k]
  ------------------
  813|      0|         return if_match(req, "XMSS-draft12", {1, 3, 6, 1, 4, 1, 25258, 1, 8});
  814|      0|      case 0x156E3:
  ------------------
  |  Branch (814:7): [True: 0, False: 2.07k]
  ------------------
  815|      0|         return if_match(req, "Compression.Zlib", {1, 2, 840, 113549, 1, 9, 16, 3, 8});
  816|      0|      case 0x1579E:
  ------------------
  |  Branch (816:7): [True: 0, False: 2.07k]
  ------------------
  817|      0|         return if_match(req, "Streebog-512", {1, 2, 643, 7, 1, 1, 2, 3});
  818|     29|      case 0x1701A:
  ------------------
  |  Branch (818:7): [True: 29, False: 2.04k]
  ------------------
  819|     29|         return if_match(req, "X509v3.AnyExtendedKeyUsage", {2, 5, 29, 37, 0});
  820|      0|      case 0x175EF:
  ------------------
  |  Branch (820:7): [True: 0, False: 2.07k]
  ------------------
  821|      0|         return if_match(req, "Kyber-1024-90s-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 11, 3});
  822|      0|      case 0x17709:
  ------------------
  |  Branch (822:7): [True: 0, False: 2.07k]
  ------------------
  823|      0|         return if_match(req, "X520.GivenName", {2, 5, 4, 42});
  824|      0|      case 0x17AD9:
  ------------------
  |  Branch (824:7): [True: 0, False: 2.07k]
  ------------------
  825|      0|         return if_match(req, "RSA/PKCS1v15(SM3)", {1, 2, 156, 10197, 1, 504});
  826|      0|      case 0x17CE2:
  ------------------
  |  Branch (826:7): [True: 0, False: 2.07k]
  ------------------
  827|      0|         return if_match(req, "SLH-DSA-SHA2-256f", {2, 16, 840, 1, 101, 3, 4, 3, 25});
  828|      0|      case 0x17CEF:
  ------------------
  |  Branch (828:7): [True: 0, False: 2.07k]
  ------------------
  829|      0|         return if_match(req, "SLH-DSA-SHA2-256s", {2, 16, 840, 1, 101, 3, 4, 3, 24});
  830|      0|      case 0x18618:
  ------------------
  |  Branch (830:7): [True: 0, False: 2.07k]
  ------------------
  831|      0|         return if_match(req, "FrodoKEM-976-AES", {1, 3, 6, 1, 4, 1, 25258, 1, 15, 2});
  832|      0|      case 0x19480:
  ------------------
  |  Branch (832:7): [True: 0, False: 2.07k]
  ------------------
  833|      0|         return if_match(req, "eFrodoKEM-1344-SHAKE", {1, 3, 6, 1, 4, 1, 25258, 1, 16, 3});
  834|      0|      case 0x1958A:
  ------------------
  |  Branch (834:7): [True: 0, False: 2.07k]
  ------------------
  835|      0|         return if_match(req, "X509v3.InvalidityDate", {2, 5, 29, 24});
  836|      0|      case 0x19851:
  ------------------
  |  Branch (836:7): [True: 0, False: 2.07k]
  ------------------
  837|      0|         return if_match(req, "DSA/SHA-1", {1, 2, 840, 10040, 4, 3});
  838|      0|      case 0x1B2E7:
  ------------------
  |  Branch (838:7): [True: 0, False: 2.07k]
  ------------------
  839|      0|         return if_match(req, "KeyWrap.AES-128", {2, 16, 840, 1, 101, 3, 4, 1, 5});
  840|      0|      case 0x1B9BE:
  ------------------
  |  Branch (840:7): [True: 0, False: 2.07k]
  ------------------
  841|      0|         return if_match(req, "KeyWrap.AES-192", {2, 16, 840, 1, 101, 3, 4, 1, 25});
  842|      0|      case 0x1D439:
  ------------------
  |  Branch (842:7): [True: 0, False: 2.07k]
  ------------------
  843|      0|         return if_match(req, "SphincsPlus-haraka-192f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 4});
  844|      0|      case 0x2065B:
  ------------------
  |  Branch (844:7): [True: 0, False: 2.07k]
  ------------------
  845|      0|         return if_match(req, "KeyWrap.CAST-128", {1, 2, 840, 113533, 7, 66, 15});
  846|      0|      case 0x216A0:
  ------------------
  |  Branch (846:7): [True: 0, False: 2.07k]
  ------------------
  847|      0|         return if_match(req, "ML-KEM-512", {2, 16, 840, 1, 101, 3, 4, 4, 1});
  848|      0|      case 0x2216B:
  ------------------
  |  Branch (848:7): [True: 0, False: 2.07k]
  ------------------
  849|      0|         return if_match(req, "GOST-34.10-2012-512", {1, 2, 643, 7, 1, 1, 1, 2});
  850|      0|      case 0x22C2C:
  ------------------
  |  Branch (850:7): [True: 0, False: 2.07k]
  ------------------
  851|      0|         return if_match(req, "ElGamal", {1, 3, 6, 1, 4, 1, 3029, 1, 2, 1});
  852|      0|      case 0x2559A:
  ------------------
  |  Branch (852:7): [True: 0, False: 2.07k]
  ------------------
  853|      0|         return if_match(req, "X520.Initials", {2, 5, 4, 43});
  854|      0|      case 0x271AC:
  ------------------
  |  Branch (854:7): [True: 0, False: 2.07k]
  ------------------
  855|      0|         return if_match(req, "PKIX.AutonomousSysIds", {1, 3, 6, 1, 5, 5, 7, 1, 8});
  856|      0|      case 0x2808B:
  ------------------
  |  Branch (856:7): [True: 0, False: 2.07k]
  ------------------
  857|      0|         return if_match(req, "PKCS7.Data", {1, 2, 840, 113549, 1, 7, 1});
  858|      0|      case 0x281B8:
  ------------------
  |  Branch (858:7): [True: 0, False: 2.07k]
  ------------------
  859|      0|         return if_match(req, "SphincsPlus-haraka-128s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 1});
  860|      0|      case 0x29999:
  ------------------
  |  Branch (860:7): [True: 0, False: 2.07k]
  ------------------
  861|      0|         return if_match(req, "DSA/SHA-3(256)", {2, 16, 840, 1, 101, 3, 4, 3, 6});
  862|      0|      case 0x2A83D:
  ------------------
  |  Branch (862:7): [True: 0, False: 2.07k]
  ------------------
  863|      0|         return if_match(req, "SHA-224", {2, 16, 840, 1, 101, 3, 4, 2, 4});
  864|      0|      case 0x2AB30:
  ------------------
  |  Branch (864:7): [True: 0, False: 2.07k]
  ------------------
  865|      0|         return if_match(req, "SHA-256", {2, 16, 840, 1, 101, 3, 4, 2, 1});
  866|      0|      case 0x2ABEF:
  ------------------
  |  Branch (866:7): [True: 0, False: 2.07k]
  ------------------
  867|      0|         return if_match(req, "KeyWrap.AES-256", {2, 16, 840, 1, 101, 3, 4, 1, 45});
  868|      0|      case 0x2BAEF:
  ------------------
  |  Branch (868:7): [True: 0, False: 2.07k]
  ------------------
  869|      0|         return if_match(req, "SM2_Sig/SM3", {1, 2, 156, 10197, 1, 501});
  870|      0|      case 0x2C39A:
  ------------------
  |  Branch (870:7): [True: 0, False: 2.07k]
  ------------------
  871|      0|         return if_match(req, "ECGDSA/RIPEMD-160", {1, 3, 36, 3, 3, 2, 5, 4, 1});
  872|      0|      case 0x2C54F:
  ------------------
  |  Branch (872:7): [True: 0, False: 2.07k]
  ------------------
  873|      0|         return if_match(req, "ECDSA/SHA-3(224)", {2, 16, 840, 1, 101, 3, 4, 3, 9});
  874|      0|      case 0x2EEA6:
  ------------------
  |  Branch (874:7): [True: 0, False: 2.07k]
  ------------------
  875|      0|         return if_match(req, "RSA/PKCS1v15(RIPEMD-160)", {1, 3, 36, 3, 3, 1, 2});
  876|      0|      case 0x2EFBA:
  ------------------
  |  Branch (876:7): [True: 0, False: 2.07k]
  ------------------
  877|      0|         return if_match(req, "Kyber-512-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 7, 1});
  878|      0|      case 0x2F0AD:
  ------------------
  |  Branch (878:7): [True: 0, False: 2.07k]
  ------------------
  879|      0|         return if_match(req, "PKCS7.EncryptedData", {1, 2, 840, 113549, 1, 7, 6});
  880|      0|      case 0x2F219:
  ------------------
  |  Branch (880:7): [True: 0, False: 2.07k]
  ------------------
  881|      0|         return if_match(req, "PBE-SHA1-2DES", {1, 2, 840, 113549, 1, 12, 1, 4});
  882|      0|      case 0x3133E:
  ------------------
  |  Branch (882:7): [True: 0, False: 2.07k]
  ------------------
  883|      0|         return if_match(req, "SLH-DSA-SHA2-128f", {2, 16, 840, 1, 101, 3, 4, 3, 21});
  884|      0|      case 0x3134B:
  ------------------
  |  Branch (884:7): [True: 0, False: 2.07k]
  ------------------
  885|      0|         return if_match(req, "SLH-DSA-SHA2-128s", {2, 16, 840, 1, 101, 3, 4, 3, 20});
  886|      0|      case 0x3160D:
  ------------------
  |  Branch (886:7): [True: 0, False: 2.07k]
  ------------------
  887|      0|         return if_match(req, "RSA/PKCS1v15(SHA-3(224))", {2, 16, 840, 1, 101, 3, 4, 3, 13});
  888|      0|      case 0x319E0:
  ------------------
  |  Branch (888:7): [True: 0, False: 2.07k]
  ------------------
  889|      0|         return if_match(req, "GOST-34.10-2012-256/Streebog-256", {1, 2, 643, 7, 1, 1, 3, 2});
  890|      0|      case 0x31B3D:
  ------------------
  |  Branch (890:7): [True: 0, False: 2.07k]
  ------------------
  891|      0|         return if_match(req, "HMAC(SHA-512)", {1, 2, 840, 113549, 2, 11});
  892|      0|      case 0x31C6D:
  ------------------
  |  Branch (892:7): [True: 0, False: 2.07k]
  ------------------
  893|      0|         return if_match(req, "secp384r1", {1, 3, 132, 0, 34});
  894|      0|      case 0x32899:
  ------------------
  |  Branch (894:7): [True: 0, False: 2.07k]
  ------------------
  895|      0|         return if_match(req, "TripleDES/CBC", {1, 2, 840, 113549, 3, 7});
  896|    383|      case 0x33C9C:
  ------------------
  |  Branch (896:7): [True: 383, False: 1.69k]
  ------------------
  897|    383|         return if_match(req, "PKIX.SmtpUTF8Mailbox", {1, 3, 6, 1, 5, 5, 7, 8, 9});
  898|      0|      case 0x33D04:
  ------------------
  |  Branch (898:7): [True: 0, False: 2.07k]
  ------------------
  899|      0|         return if_match(req, "PKCS12.SecretBag", {1, 2, 840, 113549, 1, 12, 10, 1, 5});
  900|      0|      case 0x3615D:
  ------------------
  |  Branch (900:7): [True: 0, False: 2.07k]
  ------------------
  901|      0|         return if_match(req, "FrodoKEM-976-SHAKE", {1, 3, 6, 1, 4, 1, 25258, 1, 14, 2});
  902|      0|      case 0x361B8:
  ------------------
  |  Branch (902:7): [True: 0, False: 2.07k]
  ------------------
  903|      0|         return if_match(req, "Ed25519", {1, 3, 101, 112});
  904|      0|      case 0x3649D:
  ------------------
  |  Branch (904:7): [True: 0, False: 2.07k]
  ------------------
  905|      0|         return if_match(req, "SHAKE-128", {2, 16, 840, 1, 101, 3, 4, 2, 11});
  906|      0|      case 0x36693:
  ------------------
  |  Branch (906:7): [True: 0, False: 2.07k]
  ------------------
  907|      0|         return if_match(req, "ClassicMcEliece_348864", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 1});
  908|      0|      case 0x373C7:
  ------------------
  |  Branch (908:7): [True: 0, False: 2.07k]
  ------------------
  909|      0|         return if_match(req, "ML-DSA-4x4", {2, 16, 840, 1, 101, 3, 4, 3, 17});
  910|      0|      case 0x3750B:
  ------------------
  |  Branch (910:7): [True: 0, False: 2.07k]
  ------------------
  911|      0|         return if_match(req, "ClassicMcEliece_8192128", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 9});
  912|      0|      case 0x39890:
  ------------------
  |  Branch (912:7): [True: 0, False: 2.07k]
  ------------------
  913|      0|         return if_match(req, "Ed448", {1, 3, 101, 113});
  914|      0|      case 0x3A438:
  ------------------
  |  Branch (914:7): [True: 0, False: 2.07k]
  ------------------
  915|      0|         return if_match(req, "SHA-384", {2, 16, 840, 1, 101, 3, 4, 2, 2});
  916|      0|      case 0x3A963:
  ------------------
  |  Branch (916:7): [True: 0, False: 2.07k]
  ------------------
  917|      0|         return if_match(req, "DH", {1, 2, 840, 10046, 2, 1});
  918|      0|      case 0x3AC83:
  ------------------
  |  Branch (918:7): [True: 0, False: 2.07k]
  ------------------
  919|      0|         return if_match(req, "MGF1", {1, 2, 840, 113549, 1, 1, 8});
  920|      0|      case 0x3ACBA:
  ------------------
  |  Branch (920:7): [True: 0, False: 2.07k]
  ------------------
  921|      0|         return if_match(req, "X509v3.IssuerAlternativeName", {2, 5, 29, 18});
  922|      0|      case 0x3B273:
  ------------------
  |  Branch (922:7): [True: 0, False: 2.07k]
  ------------------
  923|      0|         return if_match(req, "KeyWrap.TripleDES", {1, 2, 840, 113549, 1, 9, 16, 3, 6});
  924|      0|      case 0x3B91E:
  ------------------
  |  Branch (924:7): [True: 0, False: 2.07k]
  ------------------
  925|      0|         return if_match(req, "X509v3.PrivateKeyUsagePeriod", {2, 5, 29, 16});
  926|      0|      case 0x3BC8A:
  ------------------
  |  Branch (926:7): [True: 0, False: 2.07k]
  ------------------
  927|      0|         return if_match(req, "SLH-DSA-SHAKE-192f", {2, 16, 840, 1, 101, 3, 4, 3, 29});
  928|      0|      case 0x3BC97:
  ------------------
  |  Branch (928:7): [True: 0, False: 2.07k]
  ------------------
  929|      0|         return if_match(req, "SLH-DSA-SHAKE-192s", {2, 16, 840, 1, 101, 3, 4, 3, 28});
  930|      0|      case 0x3D127:
  ------------------
  |  Branch (930:7): [True: 0, False: 2.07k]
  ------------------
  931|      0|         return if_match(req, "DSA", {1, 2, 840, 10040, 4, 1});
  932|      0|      case 0x3E249:
  ------------------
  |  Branch (932:7): [True: 0, False: 2.07k]
  ------------------
  933|      0|         return if_match(req, "HSS-LMS", {1, 2, 840, 113549, 1, 9, 16, 3, 17});
  934|      0|      case 0x3E7D5:
  ------------------
  |  Branch (934:7): [True: 0, False: 2.07k]
  ------------------
  935|      0|         return if_match(req, "RSA/PKCS1v15(SHA-3(256))", {2, 16, 840, 1, 101, 3, 4, 3, 14});
  936|      0|      case 0x3F748:
  ------------------
  |  Branch (936:7): [True: 0, False: 2.07k]
  ------------------
  937|      0|         return if_match(req, "GOST.OGRN", {1, 2, 643, 100, 1});
  938|      0|      case 0x3F99F:
  ------------------
  |  Branch (938:7): [True: 0, False: 2.07k]
  ------------------
  939|      0|         return if_match(req, "X509v3.BasicConstraints", {2, 5, 29, 19});
  940|      0|      case 0x40726:
  ------------------
  |  Branch (940:7): [True: 0, False: 2.07k]
  ------------------
  941|      0|         return if_match(req, "SHA-3(512)", {2, 16, 840, 1, 101, 3, 4, 2, 10});
  942|      0|      case 0x407BF:
  ------------------
  |  Branch (942:7): [True: 0, False: 2.07k]
  ------------------
  943|      0|         return if_match(req, "ML-KEM-768", {2, 16, 840, 1, 101, 3, 4, 4, 2});
  944|      0|      case 0x41334:
  ------------------
  |  Branch (944:7): [True: 0, False: 2.07k]
  ------------------
  945|      0|         return if_match(req, "ECDSA/SHA-3(384)", {2, 16, 840, 1, 101, 3, 4, 3, 11});
  946|      0|      case 0x42DF3:
  ------------------
  |  Branch (946:7): [True: 0, False: 2.07k]
  ------------------
  947|      0|         return if_match(req, "X509v3.CRLDistributionPoints", {2, 5, 29, 31});
  948|      0|      case 0x437FB:
  ------------------
  |  Branch (948:7): [True: 0, False: 2.07k]
  ------------------
  949|      0|         return if_match(req, "brainpool160r1", {1, 3, 36, 3, 3, 2, 8, 1, 1, 1});
  950|      0|      case 0x441F5:
  ------------------
  |  Branch (950:7): [True: 0, False: 2.07k]
  ------------------
  951|      0|         return if_match(req, "gost_256A", {1, 2, 643, 7, 1, 2, 1, 1, 1});
  952|      0|      case 0x441F6:
  ------------------
  |  Branch (952:7): [True: 0, False: 2.07k]
  ------------------
  953|      0|         return if_match(req, "gost_256B", {1, 2, 643, 7, 1, 2, 1, 1, 2});
  954|      0|      case 0x44221:
  ------------------
  |  Branch (954:7): [True: 0, False: 2.07k]
  ------------------
  955|      0|         return if_match(req, "GOST-34.10-2012-512/Streebog-512", {1, 2, 643, 7, 1, 1, 3, 3});
  956|      0|      case 0x44322:
  ------------------
  |  Branch (956:7): [True: 0, False: 2.07k]
  ------------------
  957|      0|         return if_match(req, "ClassicMcEliece_6960119pc", {1, 3, 6, 1, 4, 1, 25258, 1, 18, 3});
  958|      0|      case 0x44973:
  ------------------
  |  Branch (958:7): [True: 0, False: 2.07k]
  ------------------
  959|      0|         return if_match(req, "Kyber-512-90s-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 11, 1});
  960|      0|      case 0x45C27:
  ------------------
  |  Branch (960:7): [True: 0, False: 2.07k]
  ------------------
  961|      0|         return if_match(req, "RSA/PKCS1v15(SHA-512-256)", {1, 2, 840, 113549, 1, 1, 16});
  962|      0|      case 0x45C85:
  ------------------
  |  Branch (962:7): [True: 0, False: 2.07k]
  ------------------
  963|      0|         return if_match(req, "X509v3.ReasonCode", {2, 5, 29, 21});
  964|      0|      case 0x45DA5:
  ------------------
  |  Branch (964:7): [True: 0, False: 2.07k]
  ------------------
  965|      0|         return if_match(req, "SHAKE-256", {2, 16, 840, 1, 101, 3, 4, 2, 12});
  966|      0|      case 0x4663C:
  ------------------
  |  Branch (966:7): [True: 0, False: 2.07k]
  ------------------
  967|      0|         return if_match(req, "X509v3.PolicyConstraints", {2, 5, 29, 36});
  968|      0|      case 0x480F7:
  ------------------
  |  Branch (968:7): [True: 0, False: 2.07k]
  ------------------
  969|      0|         return if_match(req, "Serpent/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 4});
  970|      0|      case 0x48627:
  ------------------
  |  Branch (970:7): [True: 0, False: 2.07k]
  ------------------
  971|      0|         return if_match(req, "Dilithium-4x4-AES-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 10, 1});
  972|      0|      case 0x48861:
  ------------------
  |  Branch (972:7): [True: 0, False: 2.07k]
  ------------------
  973|      0|         return if_match(req, "ChaCha20Poly1305", {1, 2, 840, 113549, 1, 9, 16, 3, 18});
  974|      0|      case 0x4A292:
  ------------------
  |  Branch (974:7): [True: 0, False: 2.07k]
  ------------------
  975|      0|         return if_match(req, "frp256v1", {1, 2, 250, 1, 223, 101, 256, 1});
  976|      0|      case 0x4A9EE:
  ------------------
  |  Branch (976:7): [True: 0, False: 2.07k]
  ------------------
  977|      0|         return if_match(req, "ClassicMcEliece_6960119f", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 8});
  978|      0|      case 0x4BF87:
  ------------------
  |  Branch (978:7): [True: 0, False: 2.07k]
  ------------------
  979|      0|         return if_match(req, "PKIX.TNAuthList", {1, 3, 6, 1, 5, 5, 7, 1, 26});
  980|      0|      case 0x4C088:
  ------------------
  |  Branch (980:7): [True: 0, False: 2.07k]
  ------------------
  981|      0|         return if_match(req, "eFrodoKEM-976-AES", {1, 3, 6, 1, 4, 1, 25258, 1, 17, 2});
  982|      0|      case 0x4C513:
  ------------------
  |  Branch (982:7): [True: 0, False: 2.07k]
  ------------------
  983|      0|         return if_match(req, "DSA/SHA-224", {2, 16, 840, 1, 101, 3, 4, 3, 1});
  984|      0|      case 0x4C806:
  ------------------
  |  Branch (984:7): [True: 0, False: 2.07k]
  ------------------
  985|      0|         return if_match(req, "DSA/SHA-256", {2, 16, 840, 1, 101, 3, 4, 3, 2});
  986|      0|      case 0x4D740:
  ------------------
  |  Branch (986:7): [True: 0, False: 2.07k]
  ------------------
  987|      0|         return if_match(req, "X509v3.AnyPolicy", {2, 5, 29, 32, 0});
  988|      0|      case 0x4DE49:
  ------------------
  |  Branch (988:7): [True: 0, False: 2.07k]
  ------------------
  989|      0|         return if_match(req, "RSA/PKCS1v15(SHA-512)", {1, 2, 840, 113549, 1, 1, 13});
  990|      0|      case 0x4ED5D:
  ------------------
  |  Branch (990:7): [True: 0, False: 2.07k]
  ------------------
  991|      0|         return if_match(req, "CAST-128/CBC", {1, 2, 840, 113533, 7, 66, 10});
  992|      0|      case 0x4FCDC:
  ------------------
  |  Branch (992:7): [True: 0, False: 2.07k]
  ------------------
  993|      0|         return if_match(req, "RSA", {1, 2, 840, 113549, 1, 1, 1});
  994|      0|      case 0x501CB:
  ------------------
  |  Branch (994:7): [True: 0, False: 2.07k]
  ------------------
  995|      0|         return if_match(req, "ECDSA/SHA-224", {1, 2, 840, 10045, 4, 3, 1});
  996|      0|      case 0x50395:
  ------------------
  |  Branch (996:7): [True: 0, False: 2.07k]
  ------------------
  997|      0|         return if_match(req, "GOST-34.10/GOST-R-34.11-94", {1, 2, 643, 2, 2, 3});
  998|      0|      case 0x504BE:
  ------------------
  |  Branch (998:7): [True: 0, False: 2.07k]
  ------------------
  999|      0|         return if_match(req, "ECDSA/SHA-256", {1, 2, 840, 10045, 4, 3, 2});
 1000|      0|      case 0x509C3:
  ------------------
  |  Branch (1000:7): [True: 0, False: 2.07k]
  ------------------
 1001|      0|         return if_match(req, "brainpool192r1", {1, 3, 36, 3, 3, 2, 8, 1, 1, 3});
 1002|      0|      case 0x509F9:
  ------------------
  |  Branch (1002:7): [True: 0, False: 2.07k]
  ------------------
 1003|      0|         return if_match(req, "PKCS9.ContentType", {1, 2, 840, 113549, 1, 9, 3});
 1004|      0|      case 0x50B26:
  ------------------
  |  Branch (1004:7): [True: 0, False: 2.07k]
  ------------------
 1005|      0|         return if_match(req, "FrodoKEM-640-AES", {1, 3, 6, 1, 4, 1, 25258, 1, 15, 1});
 1006|      0|      case 0x50D78:
  ------------------
  |  Branch (1006:7): [True: 0, False: 2.07k]
  ------------------
 1007|      0|         return if_match(req, "x962_p192v2", {1, 2, 840, 10045, 3, 1, 2});
 1008|      0|      case 0x50D79:
  ------------------
  |  Branch (1008:7): [True: 0, False: 2.07k]
  ------------------
 1009|      0|         return if_match(req, "x962_p192v3", {1, 2, 840, 10045, 3, 1, 3});
 1010|      0|      case 0x51DC6:
  ------------------
  |  Branch (1010:7): [True: 0, False: 2.07k]
  ------------------
 1011|      0|         return if_match(req, "AES-128/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 1});
 1012|      0|      case 0x52DB6:
  ------------------
  |  Branch (1012:7): [True: 0, False: 2.07k]
  ------------------
 1013|      0|         return if_match(req, "HMAC(SHA-224)", {1, 2, 840, 113549, 2, 8});
 1014|      0|      case 0x53E11:
  ------------------
  |  Branch (1014:7): [True: 0, False: 2.07k]
  ------------------
 1015|      0|         return if_match(req, "FrodoKEM-1344-SHAKE", {1, 3, 6, 1, 4, 1, 25258, 1, 14, 3});
 1016|      0|      case 0x54012:
  ------------------
  |  Branch (1016:7): [True: 0, False: 2.07k]
  ------------------
 1017|      0|         return if_match(req, "PKIX.TimeStamping", {1, 3, 6, 1, 5, 5, 7, 3, 8});
 1018|      0|      case 0x5407A:
  ------------------
  |  Branch (1018:7): [True: 0, False: 2.07k]
  ------------------
 1019|      0|         return if_match(req, "Serpent/CBC", {1, 3, 6, 1, 4, 1, 25258, 3, 1});
 1020|      0|      case 0x5576D:
  ------------------
  |  Branch (1020:7): [True: 0, False: 2.07k]
  ------------------
 1021|      0|         return if_match(req, "SphincsPlus-sha2-128f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 2});
 1022|      0|      case 0x55EF6:
  ------------------
  |  Branch (1022:7): [True: 0, False: 2.07k]
  ------------------
 1023|      0|         return if_match(req, "AES-192/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 2});
 1024|      0|      case 0x55FFA:
  ------------------
  |  Branch (1024:7): [True: 0, False: 2.07k]
  ------------------
 1025|      0|         return if_match(req, "ML-DSA-6x5", {2, 16, 840, 1, 101, 3, 4, 3, 18});
 1026|      0|      case 0x56826:
  ------------------
  |  Branch (1026:7): [True: 0, False: 2.07k]
  ------------------
 1027|      0|         return if_match(req, "brainpool320r1", {1, 3, 36, 3, 3, 2, 8, 1, 1, 9});
 1028|      0|      case 0x56D0D:
  ------------------
  |  Branch (1028:7): [True: 0, False: 2.07k]
  ------------------
 1029|      0|         return if_match(req, "SphincsPlus-shake-128f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 2});
 1030|      0|      case 0x57077:
  ------------------
  |  Branch (1030:7): [True: 0, False: 2.07k]
  ------------------
 1031|      0|         return if_match(req, "XMSS-draft6", {1, 3, 6, 1, 4, 1, 25258, 1, 5});
 1032|      0|      case 0x5818B:
  ------------------
  |  Branch (1032:7): [True: 0, False: 2.07k]
  ------------------
 1033|      0|         return if_match(req, "ECGDSA/SHA-224", {1, 3, 36, 3, 3, 2, 5, 4, 3});
 1034|      0|      case 0x5847E:
  ------------------
  |  Branch (1034:7): [True: 0, False: 2.07k]
  ------------------
 1035|      0|         return if_match(req, "ECGDSA/SHA-256", {1, 3, 36, 3, 3, 2, 5, 4, 4});
 1036|      0|      case 0x5898B:
  ------------------
  |  Branch (1036:7): [True: 0, False: 2.07k]
  ------------------
 1037|      0|         return if_match(req, "SHA-512", {2, 16, 840, 1, 101, 3, 4, 2, 3});
 1038|      0|      case 0x58991:
  ------------------
  |  Branch (1038:7): [True: 0, False: 2.07k]
  ------------------
 1039|      0|         return if_match(req, "PKIX.OCSP.NoCheck", {1, 3, 6, 1, 5, 5, 7, 48, 1, 5});
 1040|      0|      case 0x59717:
  ------------------
  |  Branch (1040:7): [True: 0, False: 2.07k]
  ------------------
 1041|      0|         return if_match(req, "X509v3.SubjectKeyIdentifier", {2, 5, 29, 14});
 1042|      0|      case 0x5A1E1:
  ------------------
  |  Branch (1042:7): [True: 0, False: 2.07k]
  ------------------
 1043|      0|         return if_match(req, "PKCS12.KeyBag", {1, 2, 840, 113549, 1, 12, 10, 1, 1});
 1044|      0|      case 0x5A570:
  ------------------
  |  Branch (1044:7): [True: 0, False: 2.07k]
  ------------------
 1045|      0|         return if_match(req, "X520.CommonName", {2, 5, 4, 3});
 1046|      0|      case 0x5A990:
  ------------------
  |  Branch (1046:7): [True: 0, False: 2.07k]
  ------------------
 1047|      0|         return if_match(req, "ECDSA/SHA-3(256)", {2, 16, 840, 1, 101, 3, 4, 3, 10});
 1048|      0|      case 0x5AB0E:
  ------------------
  |  Branch (1048:7): [True: 0, False: 2.07k]
  ------------------
 1049|      0|         return if_match(req, "SphincsPlus-sha2-256s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 5});
 1050|      0|      case 0x5AC4A:
  ------------------
  |  Branch (1050:7): [True: 0, False: 2.07k]
  ------------------
 1051|      0|         return if_match(req, "X520.Surname", {2, 5, 4, 4});
 1052|      0|      case 0x5AF2C:
  ------------------
  |  Branch (1052:7): [True: 0, False: 2.07k]
  ------------------
 1053|      0|         return if_match(req, "ClassicMcEliece_8192128pc", {1, 3, 6, 1, 4, 1, 25258, 1, 18, 5});
 1054|      0|      case 0x5BC39:
  ------------------
  |  Branch (1054:7): [True: 0, False: 2.07k]
  ------------------
 1055|      0|         return if_match(req, "X509v3.KeyUsage", {2, 5, 29, 15});
 1056|      0|      case 0x5BDDB:
  ------------------
  |  Branch (1056:7): [True: 0, False: 2.07k]
  ------------------
 1057|      0|         return if_match(req, "numsp256d1", {1, 3, 6, 1, 4, 1, 25258, 4, 1});
 1058|      0|      case 0x5C0AE:
  ------------------
  |  Branch (1058:7): [True: 0, False: 2.07k]
  ------------------
 1059|      0|         return if_match(req, "SphincsPlus-shake-256s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 5});
 1060|      0|      case 0x5C10E:
  ------------------
  |  Branch (1060:7): [True: 0, False: 2.07k]
  ------------------
 1061|      0|         return if_match(req, "DSA/SHA-384", {2, 16, 840, 1, 101, 3, 4, 3, 3});
 1062|      0|      case 0x5CFE5:
  ------------------
  |  Branch (1062:7): [True: 0, False: 2.07k]
  ------------------
 1063|      0|         return if_match(req, "PKCS9.X509Certificate", {1, 2, 840, 113549, 1, 9, 22, 1});
 1064|      0|      case 0x5D1CF:
  ------------------
  |  Branch (1064:7): [True: 0, False: 2.07k]
  ------------------
 1065|      0|         return if_match(req, "X520.SerialNumber", {2, 5, 4, 5});
 1066|      0|      case 0x5D375:
  ------------------
  |  Branch (1066:7): [True: 0, False: 2.07k]
  ------------------
 1067|      0|         return if_match(req, "SM4/OCB", {1, 2, 156, 10197, 1, 104, 100});
 1068|      0|      case 0x5DD49:
  ------------------
  |  Branch (1068:7): [True: 0, False: 2.07k]
  ------------------
 1069|      0|         return if_match(req, "AES-128/CBC", {2, 16, 840, 1, 101, 3, 4, 1, 2});
 1070|      0|      case 0x5DE4E:
  ------------------
  |  Branch (1070:7): [True: 0, False: 2.07k]
  ------------------
 1071|      0|         return if_match(req, "AES-128/CCM", {2, 16, 840, 1, 101, 3, 4, 1, 7});
 1072|      0|      case 0x5DF23:
  ------------------
  |  Branch (1072:7): [True: 0, False: 2.07k]
  ------------------
 1073|      0|         return if_match(req, "HMAC(SHA-512-256)", {1, 2, 840, 113549, 2, 13});
 1074|      0|      case 0x5ED04:
  ------------------
  |  Branch (1074:7): [True: 0, False: 2.07k]
  ------------------
 1075|      0|         return if_match(req, "SM2", {1, 2, 156, 10197, 1, 301, 1});
 1076|      0|      case 0x5ED05:
  ------------------
  |  Branch (1076:7): [True: 0, False: 2.07k]
  ------------------
 1077|      0|         return if_match(req, "SM3", {1, 2, 156, 10197, 1, 401});
 1078|      0|      case 0x5FDC6:
  ------------------
  |  Branch (1078:7): [True: 0, False: 2.07k]
  ------------------
 1079|      0|         return if_match(req, "ECDSA/SHA-384", {1, 2, 840, 10045, 4, 3, 3});
 1080|      0|      case 0x6199F:
  ------------------
  |  Branch (1080:7): [True: 0, False: 2.07k]
  ------------------
 1081|      0|         return if_match(req, "SHA-3(224)", {2, 16, 840, 1, 101, 3, 4, 2, 7});
 1082|      0|      case 0x61E79:
  ------------------
  |  Branch (1082:7): [True: 0, False: 2.07k]
  ------------------
 1083|      0|         return if_match(req, "AES-192/CBC", {2, 16, 840, 1, 101, 3, 4, 1, 22});
 1084|      0|      case 0x61F7E:
  ------------------
  |  Branch (1084:7): [True: 0, False: 2.07k]
  ------------------
 1085|      0|         return if_match(req, "AES-192/CCM", {2, 16, 840, 1, 101, 3, 4, 1, 27});
 1086|      0|      case 0x64947:
  ------------------
  |  Branch (1086:7): [True: 0, False: 2.07k]
  ------------------
 1087|      0|         return if_match(req, "OpenPGP.Ed25519", {1, 3, 6, 1, 4, 1, 11591, 15, 1});
 1088|      0|      case 0x652E7:
  ------------------
  |  Branch (1088:7): [True: 0, False: 2.07k]
  ------------------
 1089|      0|         return if_match(req, "sm2p256v1", {1, 2, 156, 10197, 1, 301});
 1090|      0|      case 0x6697B:
  ------------------
  |  Branch (1090:7): [True: 0, False: 2.07k]
  ------------------
 1091|      0|         return if_match(req, "FrodoKEM-1344-AES", {1, 3, 6, 1, 4, 1, 25258, 1, 15, 3});
 1092|      0|      case 0x67B2C:
  ------------------
  |  Branch (1092:7): [True: 0, False: 2.07k]
  ------------------
 1093|      0|         return if_match(req, "X520.State", {2, 5, 4, 8});
 1094|      0|      case 0x67B9B:
  ------------------
  |  Branch (1094:7): [True: 0, False: 2.07k]
  ------------------
 1095|      0|         return if_match(req, "HMAC(SHA-384)", {1, 2, 840, 113549, 2, 10});
 1096|      0|      case 0x67D86:
  ------------------
  |  Branch (1096:7): [True: 0, False: 2.07k]
  ------------------
 1097|      0|         return if_match(req, "ECGDSA/SHA-384", {1, 3, 36, 3, 3, 2, 5, 4, 5});
 1098|      0|      case 0x68A0B:
  ------------------
  |  Branch (1098:7): [True: 0, False: 2.07k]
  ------------------
 1099|      0|         return if_match(req, "Camellia-128/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 6});
 1100|      0|      case 0x68E33:
  ------------------
  |  Branch (1100:7): [True: 0, False: 2.07k]
  ------------------
 1101|      0|         return if_match(req, "PKCS9.ExtensionRequest", {1, 2, 840, 113549, 1, 9, 14});
 1102|    614|      case 0x69126:
  ------------------
  |  Branch (1102:7): [True: 614, False: 1.46k]
  ------------------
 1103|    614|         return if_match(req, "X509v3.SubjectAlternativeName", {2, 5, 29, 17});
 1104|      0|      case 0x692F8:
  ------------------
  |  Branch (1104:7): [True: 0, False: 2.07k]
  ------------------
 1105|      0|         return if_match(req, "SM4/CBC", {1, 2, 156, 10197, 1, 104, 2});
 1106|      0|      case 0x695E1:
  ------------------
  |  Branch (1106:7): [True: 0, False: 2.07k]
  ------------------
 1107|      0|         return if_match(req, "Dilithium-4x4-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 9, 1});
 1108|      0|      case 0x696DC:
  ------------------
  |  Branch (1108:7): [True: 0, False: 2.07k]
  ------------------
 1109|      0|         return if_match(req, "PKIX.IpAddrBlocks", {1, 3, 6, 1, 5, 5, 7, 1, 7});
 1110|      0|      case 0x6A7CA:
  ------------------
  |  Branch (1110:7): [True: 0, False: 2.07k]
  ------------------
 1111|      0|         return if_match(req, "ECDSA", {1, 2, 840, 10045, 2, 1});
 1112|      0|      case 0x6BD26:
  ------------------
  |  Branch (1112:7): [True: 0, False: 2.07k]
  ------------------
 1113|      0|         return if_match(req, "GOST.INN", {1, 2, 643, 3, 131, 1, 1});
 1114|      0|      case 0x6CB3B:
  ------------------
  |  Branch (1114:7): [True: 0, False: 2.07k]
  ------------------
 1115|      0|         return if_match(req, "Camellia-192/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 7});
 1116|      0|      case 0x6E602:
  ------------------
  |  Branch (1116:7): [True: 0, False: 2.07k]
  ------------------
 1117|      0|         return if_match(req, "Dilithium-8x7-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 9, 3});
 1118|      0|      case 0x6F0C2:
  ------------------
  |  Branch (1118:7): [True: 0, False: 2.07k]
  ------------------
 1119|      0|         return if_match(req, "RSA/PKCS1v15(SHA-224)", {1, 2, 840, 113549, 1, 1, 14});
 1120|      0|      case 0x6F9F8:
  ------------------
  |  Branch (1120:7): [True: 0, False: 2.07k]
  ------------------
 1121|      0|         return if_match(req, "PKCS12.SafeContentsBag", {1, 2, 840, 113549, 1, 12, 10, 1, 6});
 1122|      0|      case 0x6FB26:
  ------------------
  |  Branch (1122:7): [True: 0, False: 2.07k]
  ------------------
 1123|      0|         return if_match(req, "PKIX.AuthorityInformationAccess", {1, 3, 6, 1, 5, 5, 7, 1, 1});
 1124|      0|      case 0x70BB6:
  ------------------
  |  Branch (1124:7): [True: 0, False: 2.07k]
  ------------------
 1125|      0|         return if_match(req, "brainpool384r1", {1, 3, 36, 3, 3, 2, 8, 1, 1, 11});
 1126|      0|      case 0x70EA6:
  ------------------
  |  Branch (1126:7): [True: 0, False: 2.07k]
  ------------------
 1127|      0|         return if_match(req, "PKCS12.PKCS8ShroudedKeyBag", {1, 2, 840, 113549, 1, 12, 10, 1, 2});
 1128|      0|      case 0x71EB3:
  ------------------
  |  Branch (1128:7): [True: 0, False: 2.07k]
  ------------------
 1129|      0|         return if_match(req, "SphincsPlus-haraka-128f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 2});
 1130|      0|      case 0x7382C:
  ------------------
  |  Branch (1130:7): [True: 0, False: 2.07k]
  ------------------
 1131|      0|         return if_match(req, "ML-KEM-1024", {2, 16, 840, 1, 101, 3, 4, 4, 3});
 1132|      0|      case 0x743BD:
  ------------------
  |  Branch (1132:7): [True: 0, False: 2.07k]
  ------------------
 1133|      0|         return if_match(req, "AES-256/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 3});
 1134|      0|      case 0x7498E:
  ------------------
  |  Branch (1134:7): [True: 0, False: 2.07k]
  ------------------
 1135|      0|         return if_match(req, "Camellia-128/CBC", {1, 2, 392, 200011, 61, 1, 1, 1, 2});
 1136|      0|      case 0x74C2E:
  ------------------
  |  Branch (1136:7): [True: 0, False: 2.07k]
  ------------------
 1137|      0|         return if_match(req, "ML-DSA-8x7", {2, 16, 840, 1, 101, 3, 4, 3, 19});
 1138|      0|      case 0x7505F:
  ------------------
  |  Branch (1138:7): [True: 0, False: 2.07k]
  ------------------
 1139|      0|         return if_match(req, "PKIX.XMPPAddr", {1, 3, 6, 1, 5, 5, 7, 8, 5});
 1140|      0|      case 0x7517A:
  ------------------
  |  Branch (1140:7): [True: 0, False: 2.07k]
  ------------------
 1141|      0|         return if_match(req, "RSA/PKCS1v15(MD2)", {1, 2, 840, 113549, 1, 1, 2});
 1142|      0|      case 0x7546B:
  ------------------
  |  Branch (1142:7): [True: 0, False: 2.07k]
  ------------------
 1143|      0|         return if_match(req, "RSA/PKCS1v15(MD5)", {1, 2, 840, 113549, 1, 1, 4});
 1144|      0|      case 0x75921:
  ------------------
  |  Branch (1144:7): [True: 0, False: 2.07k]
  ------------------
 1145|      0|         return if_match(req, "ClassicMcEliece_348864f", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 2});
 1146|      0|      case 0x76784:
  ------------------
  |  Branch (1146:7): [True: 0, False: 2.07k]
  ------------------
 1147|      0|         return if_match(req, "SHA-3(384)", {2, 16, 840, 1, 101, 3, 4, 2, 9});
 1148|      0|      case 0x768FD:
  ------------------
  |  Branch (1148:7): [True: 0, False: 2.07k]
  ------------------
 1149|      0|         return if_match(req, "PKCS9.LocalKeyId", {1, 2, 840, 113549, 1, 9, 21});
 1150|      0|      case 0x76A19:
  ------------------
  |  Branch (1150:7): [True: 0, False: 2.07k]
  ------------------
 1151|      0|         return if_match(req, "brainpool512r1", {1, 3, 36, 3, 3, 2, 8, 1, 1, 13});
 1152|      0|      case 0x77254:
  ------------------
  |  Branch (1152:7): [True: 0, False: 2.07k]
  ------------------
 1153|      0|         return if_match(req, "SphincsPlus-haraka-256s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 5});
 1154|      0|      case 0x77ADC:
  ------------------
  |  Branch (1154:7): [True: 0, False: 2.07k]
  ------------------
 1155|      0|         return if_match(req, "secp224k1", {1, 3, 132, 0, 32});
 1156|      0|      case 0x781B9:
  ------------------
  |  Branch (1156:7): [True: 0, False: 2.07k]
  ------------------
 1157|      0|         return if_match(req, "secp224r1", {1, 3, 132, 0, 33});
 1158|      0|      case 0x78ABE:
  ------------------
  |  Branch (1158:7): [True: 0, False: 2.07k]
  ------------------
 1159|      0|         return if_match(req, "Camellia-192/CBC", {1, 2, 392, 200011, 61, 1, 1, 1, 3});
 1160|      0|      case 0x792F2:
  ------------------
  |  Branch (1160:7): [True: 0, False: 2.07k]
  ------------------
 1161|      0|         return if_match(req, "ClassicMcEliece_6688128pc", {1, 3, 6, 1, 4, 1, 25258, 1, 18, 1});
 1162|      0|      case 0x7A661:
  ------------------
  |  Branch (1162:7): [True: 0, False: 2.07k]
  ------------------
 1163|      0|         return if_match(req, "DSA/SHA-512", {2, 16, 840, 1, 101, 3, 4, 3, 4});
 1164|      0|      case 0x7A977:
  ------------------
  |  Branch (1164:7): [True: 0, False: 2.07k]
  ------------------
 1165|      0|         return if_match(req, "X509v3.ExtendedKeyUsage", {2, 5, 29, 37});
 1166|      0|      case 0x7AE67:
  ------------------
  |  Branch (1166:7): [True: 0, False: 2.07k]
  ------------------
 1167|      0|         return if_match(req, "SM2_Enc", {1, 2, 156, 10197, 1, 301, 3});
 1168|      0|      case 0x7B602:
  ------------------
  |  Branch (1168:7): [True: 0, False: 2.07k]
  ------------------
 1169|      0|         return if_match(req, "Twofish/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 5});
 1170|      0|      case 0x7B9A1:
  ------------------
  |  Branch (1170:7): [True: 0, False: 2.07k]
  ------------------
 1171|      0|         return if_match(req, "SphincsPlus-sha2-192s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 3});
 1172|      0|      case 0x7BB0A:
  ------------------
  |  Branch (1172:7): [True: 0, False: 2.07k]
  ------------------
 1173|      0|         return if_match(req, "SLH-DSA-SHAKE-256f", {2, 16, 840, 1, 101, 3, 4, 3, 31});
 1174|      0|      case 0x7BB17:
  ------------------
  |  Branch (1174:7): [True: 0, False: 2.07k]
  ------------------
 1175|      0|         return if_match(req, "SLH-DSA-SHAKE-256s", {2, 16, 840, 1, 101, 3, 4, 3, 30});
 1176|      0|      case 0x7BCF3:
  ------------------
  |  Branch (1176:7): [True: 0, False: 2.07k]
  ------------------
 1177|      0|         return if_match(req, "PKIX.EmailProtection", {1, 3, 6, 1, 5, 5, 7, 3, 4});
 1178|      0|      case 0x7CC2C:
  ------------------
  |  Branch (1178:7): [True: 0, False: 2.07k]
  ------------------
 1179|      0|         return if_match(req, "SHA-512-256", {2, 16, 840, 1, 101, 3, 4, 2, 6});
 1180|      0|      case 0x7CF41:
  ------------------
  |  Branch (1180:7): [True: 0, False: 2.07k]
  ------------------
 1181|      0|         return if_match(req, "SphincsPlus-shake-192s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 3});
 1182|      0|      case 0x7DB91:
  ------------------
  |  Branch (1182:7): [True: 0, False: 2.07k]
  ------------------
 1183|      0|         return if_match(req, "GOST-34.10", {1, 2, 643, 2, 2, 19});
 1184|      0|      case 0x7E319:
  ------------------
  |  Branch (1184:7): [True: 0, False: 2.07k]
  ------------------
 1185|      0|         return if_match(req, "ECDSA/SHA-512", {1, 2, 840, 10045, 4, 3, 4});
 1186|      0|      case 0x7E874:
  ------------------
  |  Branch (1186:7): [True: 0, False: 2.07k]
  ------------------
 1187|      0|         return if_match(req, "ClassicMcEliece_6688128f", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 6});
 1188|      0|      case 0x7EAAF:
  ------------------
  |  Branch (1188:7): [True: 0, False: 2.07k]
  ------------------
 1189|      0|         return if_match(req, "eFrodoKEM-640-SHAKE", {1, 3, 6, 1, 4, 1, 25258, 1, 16, 1});
 1190|      0|      case 0x7F51F:
  ------------------
  |  Branch (1190:7): [True: 0, False: 2.07k]
  ------------------
 1191|      0|         return if_match(req, "PKIX.IPsecTunnel", {1, 3, 6, 1, 5, 5, 7, 3, 6});
 1192|      0|      case 0x80272:
  ------------------
  |  Branch (1192:7): [True: 0, False: 2.07k]
  ------------------
 1193|      0|         return if_match(req, "X520.Organization", {2, 5, 4, 10});
 1194|      0|      case 0x80340:
  ------------------
  |  Branch (1194:7): [True: 0, False: 2.07k]
  ------------------
 1195|      0|         return if_match(req, "AES-256/CBC", {2, 16, 840, 1, 101, 3, 4, 1, 42});
 1196|      0|      case 0x80445:
  ------------------
  |  Branch (1196:7): [True: 0, False: 2.07k]
  ------------------
 1197|      0|         return if_match(req, "AES-256/CCM", {2, 16, 840, 1, 101, 3, 4, 1, 47});
 1198|      0|      case 0x811F7:
  ------------------
  |  Branch (1198:7): [True: 0, False: 2.07k]
  ------------------
 1199|      0|         return if_match(req, "HMAC(SHA-256)", {1, 2, 840, 113549, 2, 9});
 1200|      0|      case 0x82434:
  ------------------
  |  Branch (1200:7): [True: 0, False: 2.07k]
  ------------------
 1201|      0|         return if_match(req, "PKCS9.X509CRL", {1, 2, 840, 113549, 1, 9, 23, 1});
 1202|      0|      case 0x82B47:
  ------------------
  |  Branch (1202:7): [True: 0, False: 2.07k]
  ------------------
 1203|      0|         return if_match(req, "Threefish-512/CBC", {1, 3, 6, 1, 4, 1, 25258, 3, 2});
 1204|      0|      case 0x83EA7:
  ------------------
  |  Branch (1204:7): [True: 0, False: 2.07k]
  ------------------
 1205|      0|         return if_match(req, "RSA/PKCS1v15(SHA-384)", {1, 2, 840, 113549, 1, 1, 12});
 1206|      0|      case 0x84596:
  ------------------
  |  Branch (1206:7): [True: 0, False: 2.07k]
  ------------------
 1207|      0|         return if_match(req, "eFrodoKEM-640-AES", {1, 3, 6, 1, 4, 1, 25258, 1, 17, 1});
 1208|      0|      case 0x8469F:
  ------------------
  |  Branch (1208:7): [True: 0, False: 2.07k]
  ------------------
 1209|      0|         return if_match(req, "ClassicMcEliece_6960119pcf", {1, 3, 6, 1, 4, 1, 25258, 1, 18, 4});
 1210|      0|      case 0x84CA4:
  ------------------
  |  Branch (1210:7): [True: 0, False: 2.07k]
  ------------------
 1211|      0|         return if_match(req, "secp256k1", {1, 3, 132, 0, 10});
 1212|      0|      case 0x85381:
  ------------------
  |  Branch (1212:7): [True: 0, False: 2.07k]
  ------------------
 1213|      0|         return if_match(req, "secp256r1", {1, 2, 840, 10045, 3, 1, 7});
 1214|      0|      case 0x854FC:
  ------------------
  |  Branch (1214:7): [True: 0, False: 2.07k]
  ------------------
 1215|      0|         return if_match(req, "PKIX.IPsecUser", {1, 3, 6, 1, 5, 5, 7, 3, 7});
 1216|      0|      case 0x85F51:
  ------------------
  |  Branch (1216:7): [True: 0, False: 2.07k]
  ------------------
 1217|      0|         return if_match(req, "Serpent/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 4});
 1218|      0|      case 0x862D9:
  ------------------
  |  Branch (1218:7): [True: 0, False: 2.07k]
  ------------------
 1219|      0|         return if_match(req, "ECGDSA/SHA-512", {1, 3, 36, 3, 3, 2, 5, 4, 6});
 1220|      0|      case 0x87585:
  ------------------
  |  Branch (1220:7): [True: 0, False: 2.07k]
  ------------------
 1221|      0|         return if_match(req, "Twofish/CBC", {1, 3, 6, 1, 4, 1, 25258, 3, 3});
 1222|      0|      case 0x877D1:
  ------------------
  |  Branch (1222:7): [True: 0, False: 2.07k]
  ------------------
 1223|      0|         return if_match(req, "PKCS9.EmailAddress", {1, 2, 840, 113549, 1, 9, 1});
 1224|    482|      case 0x87D27:
  ------------------
  |  Branch (1224:7): [True: 482, False: 1.59k]
  ------------------
 1225|    482|         return if_match(req, "PKIX.CertificateAuthorityIssuers", {1, 3, 6, 1, 5, 5, 7, 48, 2});
 1226|      0|      case 0x87E42:
  ------------------
  |  Branch (1226:7): [True: 0, False: 2.07k]
  ------------------
 1227|      0|         return if_match(req, "X509v3.AuthorityKeyIdentifier", {2, 5, 29, 35});
 1228|      0|      case 0x889B1:
  ------------------
  |  Branch (1228:7): [True: 0, False: 2.07k]
  ------------------
 1229|      0|         return if_match(req, "ECDSA/SHA-1", {1, 2, 840, 10045, 4, 1});
 1230|      0|      case 0x89658:
  ------------------
  |  Branch (1230:7): [True: 0, False: 2.07k]
  ------------------
 1231|      0|         return if_match(req, "PBE-PKCS5v20", {1, 2, 840, 113549, 1, 5, 13});
 1232|      0|      case 0x8976D:
  ------------------
  |  Branch (1232:7): [True: 0, False: 2.07k]
  ------------------
 1233|      0|         return if_match(req, "PKCS9.MessageDigest", {1, 2, 840, 113549, 1, 9, 4});
 1234|      0|      case 0x8B002:
  ------------------
  |  Branch (1234:7): [True: 0, False: 2.07k]
  ------------------
 1235|      0|         return if_match(req, "Camellia-256/OCB", {1, 3, 6, 1, 4, 1, 25258, 3, 2, 8});
 1236|      0|      case 0x8B935:
  ------------------
  |  Branch (1236:7): [True: 0, False: 2.07k]
  ------------------
 1237|      0|         return if_match(req, "ClassicMcEliece_6688128", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 5});
 1238|      0|      case 0x8BB11:
  ------------------
  |  Branch (1238:7): [True: 0, False: 2.07k]
  ------------------
 1239|      0|         return if_match(req, "X509v3.NoRevocationAvailable", {2, 5, 29, 56});
 1240|      0|      case 0x8CE3D:
  ------------------
  |  Branch (1240:7): [True: 0, False: 2.07k]
  ------------------
 1241|      0|         return if_match(req, "PKCS9.ChallengePassword", {1, 2, 840, 113549, 1, 9, 7});
 1242|      0|      case 0x8D45C:
  ------------------
  |  Branch (1242:7): [True: 0, False: 2.07k]
  ------------------
 1243|      0|         return if_match(req, "ECKCDSA", {1, 0, 14888, 3, 0, 5});
 1244|      0|      case 0x8E0C1:
  ------------------
  |  Branch (1244:7): [True: 0, False: 2.07k]
  ------------------
 1245|      0|         return if_match(req, "X509v3.CertificatePolicies", {2, 5, 29, 32});
 1246|      0|      case 0x8E39A:
  ------------------
  |  Branch (1246:7): [True: 0, False: 2.07k]
  ------------------
 1247|      0|         return if_match(req, "HSS-LMS-Private-Key", {1, 3, 6, 1, 4, 1, 25258, 1, 13});
 1248|      0|      case 0x8EC51:
  ------------------
  |  Branch (1248:7): [True: 0, False: 2.07k]
  ------------------
 1249|      0|         return if_match(req, "Kyber-768-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 7, 2});
 1250|      0|      case 0x8F94A:
  ------------------
  |  Branch (1250:7): [True: 0, False: 2.07k]
  ------------------
 1251|      0|         return if_match(req, "Dilithium-6x5-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 9, 2});
 1252|      0|      case 0x8FC20:
  ------------------
  |  Branch (1252:7): [True: 0, False: 2.07k]
  ------------------
 1253|      0|         return if_match(req, "AES-128/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 1});
 1254|      0|      case 0x8FDE0:
  ------------------
  |  Branch (1254:7): [True: 0, False: 2.07k]
  ------------------
 1255|      0|         return if_match(req, "SHA-3(256)", {2, 16, 840, 1, 101, 3, 4, 2, 8});
 1256|      0|      case 0x919E3:
  ------------------
  |  Branch (1256:7): [True: 0, False: 2.07k]
  ------------------
 1257|      0|         return if_match(req, "Serpent/GCM", {1, 3, 6, 1, 4, 1, 25258, 3, 101});
 1258|      0|      case 0x91C1A:
  ------------------
  |  Branch (1258:7): [True: 0, False: 2.07k]
  ------------------
 1259|      0|         return if_match(req, "X25519", {1, 3, 101, 110});
 1260|      0|      case 0x91DC4:
  ------------------
  |  Branch (1260:7): [True: 0, False: 2.07k]
  ------------------
 1261|      0|         return if_match(req, "McEliece", {1, 3, 6, 1, 4, 1, 25258, 1, 3});
 1262|      0|      case 0x93467:
  ------------------
  |  Branch (1262:7): [True: 0, False: 2.07k]
  ------------------
 1263|      0|         return if_match(req, "Dilithium-6x5-AES-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 10, 2});
 1264|      0|      case 0x93D50:
  ------------------
  |  Branch (1264:7): [True: 0, False: 2.07k]
  ------------------
 1265|      0|         return if_match(req, "AES-192/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 2});
 1266|      0|      case 0x95166:
  ------------------
  |  Branch (1266:7): [True: 0, False: 2.07k]
  ------------------
 1267|      0|         return if_match(req, "SLH-DSA-SHAKE-128f", {2, 16, 840, 1, 101, 3, 4, 3, 27});
 1268|      0|      case 0x95173:
  ------------------
  |  Branch (1268:7): [True: 0, False: 2.07k]
  ------------------
 1269|      0|         return if_match(req, "SLH-DSA-SHAKE-128s", {2, 16, 840, 1, 101, 3, 4, 3, 26});
 1270|    482|      case 0x952D6:
  ------------------
  |  Branch (1270:7): [True: 482, False: 1.59k]
  ------------------
 1271|    482|         return if_match(req, "PKIX.OCSP", {1, 3, 6, 1, 5, 5, 7, 48, 1});
 1272|      0|      case 0x959B9:
  ------------------
  |  Branch (1272:7): [True: 0, False: 2.07k]
  ------------------
 1273|      0|         return if_match(req, "PKIX.IPsecEndSystem", {1, 3, 6, 1, 5, 5, 7, 3, 5});
 1274|      0|      case 0x96F85:
  ------------------
  |  Branch (1274:7): [True: 0, False: 2.07k]
  ------------------
 1275|      0|         return if_match(req, "Camellia-256/CBC", {1, 2, 392, 200011, 61, 1, 1, 1, 4});
 1276|      0|      case 0x97D5E:
  ------------------
  |  Branch (1276:7): [True: 0, False: 2.07k]
  ------------------
 1277|      0|         return if_match(req, "HMAC(SHA-1)", {1, 2, 840, 113549, 2, 7});
 1278|      0|      case 0x9805C:
  ------------------
  |  Branch (1278:7): [True: 0, False: 2.07k]
  ------------------
 1279|      0|         return if_match(req, "SEED/CBC", {1, 2, 410, 200004, 1, 4});
 1280|      0|      case 0x980E7:
  ------------------
  |  Branch (1280:7): [True: 0, False: 2.07k]
  ------------------
 1281|      0|         return if_match(req, "SphincsPlus-haraka-192s-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 3});
 1282|      0|      case 0x980F5:
  ------------------
  |  Branch (1282:7): [True: 0, False: 2.07k]
  ------------------
 1283|      0|         return if_match(req, "GOST.SubjectSigningTool", {1, 2, 643, 100, 111});
 1284|      0|      case 0x98B03:
  ------------------
  |  Branch (1284:7): [True: 0, False: 2.07k]
  ------------------
 1285|      0|         return if_match(req, "XMSS", {0, 4, 0, 127, 0, 15, 1, 1, 13, 0});
 1286|      0|      case 0x9A6B2:
  ------------------
  |  Branch (1286:7): [True: 0, False: 2.07k]
  ------------------
 1287|      0|         return if_match(req, "ECKCDSA/SHA-1", {1, 2, 410, 200004, 1, 100, 4, 3});
 1288|      0|      case 0x9B1CF:
  ------------------
  |  Branch (1288:7): [True: 0, False: 2.07k]
  ------------------
 1289|      0|         return if_match(req, "SM4/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 9});
 1290|      0|      case 0x9B6B2:
  ------------------
  |  Branch (1290:7): [True: 0, False: 2.07k]
  ------------------
 1291|      0|         return if_match(req, "AES-128/GCM", {2, 16, 840, 1, 101, 3, 4, 1, 6});
 1292|      0|      case 0x9B6BB:
  ------------------
  |  Branch (1292:7): [True: 0, False: 2.07k]
  ------------------
 1293|      0|         return if_match(req, "X520.OrganizationalUnit", {2, 5, 4, 11});
 1294|      0|      case 0x9B851:
  ------------------
  |  Branch (1294:7): [True: 0, False: 2.07k]
  ------------------
 1295|      0|         return if_match(req, "OpenPGP.Curve25519", {1, 3, 6, 1, 4, 1, 3029, 1, 5, 1});
 1296|      0|      case 0x9C80B:
  ------------------
  |  Branch (1296:7): [True: 0, False: 2.07k]
  ------------------
 1297|      0|         return if_match(req, "SLH-DSA-SHA2-192f", {2, 16, 840, 1, 101, 3, 4, 3, 23});
 1298|      0|      case 0x9C818:
  ------------------
  |  Branch (1298:7): [True: 0, False: 2.07k]
  ------------------
 1299|      0|         return if_match(req, "SLH-DSA-SHA2-192s", {2, 16, 840, 1, 101, 3, 4, 3, 22});
 1300|      0|      case 0x9CD2B:
  ------------------
  |  Branch (1300:7): [True: 0, False: 2.07k]
  ------------------
 1301|      0|         return if_match(req, "Scrypt", {1, 3, 6, 1, 4, 1, 11591, 4, 11});
 1302|      0|      case 0x9CDE1:
  ------------------
  |  Branch (1302:7): [True: 0, False: 2.07k]
  ------------------
 1303|      0|         return if_match(req, "GOST-34.10-2012-256/SHA-256", {1, 3, 6, 1, 4, 1, 25258, 1, 6, 1});
 1304|      0|      case 0x9CF73:
  ------------------
  |  Branch (1304:7): [True: 0, False: 2.07k]
  ------------------
 1305|      0|         return if_match(req, "ClassicMcEliece_460896f", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 4});
 1306|      0|      case 0x9D354:
  ------------------
  |  Branch (1306:7): [True: 0, False: 2.07k]
  ------------------
 1307|      0|         return if_match(req, "RIPEMD-160", {1, 3, 36, 3, 2, 1});
 1308|      0|      case 0x9D503:
  ------------------
  |  Branch (1308:7): [True: 0, False: 2.07k]
  ------------------
 1309|      0|         return if_match(req, "RSA/PKCS1v15(SHA-256)", {1, 2, 840, 113549, 1, 1, 11});
 1310|      0|      case 0x9EC88:
  ------------------
  |  Branch (1310:7): [True: 0, False: 2.07k]
  ------------------
 1311|      0|         return if_match(req, "DSA/SHA-3(512)", {2, 16, 840, 1, 101, 3, 4, 3, 8});
 1312|      0|      case 0x9EF36:
  ------------------
  |  Branch (1312:7): [True: 0, False: 2.07k]
  ------------------
 1313|      0|         return if_match(req, "ClassicMcEliece_6960119", {1, 3, 6, 1, 4, 1, 22554, 5, 1, 7});
 1314|      0|      case 0x9F764:
  ------------------
  |  Branch (1314:7): [True: 0, False: 2.07k]
  ------------------
 1315|      0|         return if_match(req, "X448", {1, 3, 101, 111});
 1316|      0|      case 0x9F7E2:
  ------------------
  |  Branch (1316:7): [True: 0, False: 2.07k]
  ------------------
 1317|      0|         return if_match(req, "AES-192/GCM", {2, 16, 840, 1, 101, 3, 4, 1, 26});
 1318|      0|      case 0x9F9C5:
  ------------------
  |  Branch (1318:7): [True: 0, False: 2.07k]
  ------------------
 1319|      0|         return if_match(req, "ClassicMcEliece_6688128pcf", {1, 3, 6, 1, 4, 1, 25258, 1, 18, 2});
 1320|      0|      case 0xA0805:
  ------------------
  |  Branch (1320:7): [True: 0, False: 2.07k]
  ------------------
 1321|      0|         return if_match(req, "PKCS9.SDSICertificate", {1, 2, 840, 113549, 1, 9, 22, 2});
 1322|      0|      case 0xA2B5B:
  ------------------
  |  Branch (1322:7): [True: 0, False: 2.07k]
  ------------------
 1323|      0|         return if_match(req, "X509v3.CRLNumber", {2, 5, 29, 20});
 1324|      0|      case 0xA3005:
  ------------------
  |  Branch (1324:7): [True: 0, False: 2.07k]
  ------------------
 1325|      0|         return if_match(req, "X520.Title", {2, 5, 4, 12});
 1326|      0|      case 0xA323F:
  ------------------
  |  Branch (1326:7): [True: 0, False: 2.07k]
  ------------------
 1327|      0|         return if_match(req, "X509v3.NameConstraints", {2, 5, 29, 30});
 1328|      0|      case 0xA3C55:
  ------------------
  |  Branch (1328:7): [True: 0, False: 2.07k]
  ------------------
 1329|      0|         return if_match(req, "X520.Pseudonym", {2, 5, 4, 65});
 1330|      0|      case 0xA4809:
  ------------------
  |  Branch (1330:7): [True: 0, False: 2.07k]
  ------------------
 1331|      0|         return if_match(req, "SphincsPlus-sha2-256f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 2, 6});
 1332|      0|      case 0xA57AF:
  ------------------
  |  Branch (1332:7): [True: 0, False: 2.07k]
  ------------------
 1333|      0|         return if_match(req, "secp521r1", {1, 3, 132, 0, 35});
 1334|      0|      case 0xA5DA9:
  ------------------
  |  Branch (1334:7): [True: 0, False: 2.07k]
  ------------------
 1335|      0|         return if_match(req, "SphincsPlus-shake-256f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 1, 6});
 1336|      0|      case 0xA6865:
  ------------------
  |  Branch (1336:7): [True: 0, False: 2.07k]
  ------------------
 1337|      0|         return if_match(req, "Camellia-128/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 6});
 1338|      0|      case 0xA6C61:
  ------------------
  |  Branch (1338:7): [True: 0, False: 2.07k]
  ------------------
 1339|      0|         return if_match(req, "SM4/GCM", {1, 2, 156, 10197, 1, 104, 8});
 1340|      0|      case 0xA8439:
  ------------------
  |  Branch (1340:7): [True: 0, False: 2.07k]
  ------------------
 1341|      0|         return if_match(req, "PKCS12.CertBag", {1, 2, 840, 113549, 1, 12, 10, 1, 3});
 1342|      0|      case 0xA9061:
  ------------------
  |  Branch (1342:7): [True: 0, False: 2.07k]
  ------------------
 1343|      0|         return if_match(req, "Kyber-768-90s-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 11, 2});
 1344|      0|      case 0xAA995:
  ------------------
  |  Branch (1344:7): [True: 0, False: 2.07k]
  ------------------
 1345|      0|         return if_match(req, "Camellia-192/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 7});
 1346|      0|      case 0xAAE2B:
  ------------------
  |  Branch (1346:7): [True: 0, False: 2.07k]
  ------------------
 1347|      0|         return if_match(req, "Dilithium-8x7-AES-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 10, 3});
 1348|      0|      case 0xABCED:
  ------------------
  |  Branch (1348:7): [True: 0, False: 2.07k]
  ------------------
 1349|      0|         return if_match(req, "GOST.IssuerSigningTool", {1, 2, 643, 100, 112});
 1350|      0|      case 0xABD24:
  ------------------
  |  Branch (1350:7): [True: 0, False: 2.07k]
  ------------------
 1351|      0|         return if_match(req, "RSA/OAEP", {1, 2, 840, 113549, 1, 1, 7});
 1352|      0|      case 0xAC2EC:
  ------------------
  |  Branch (1352:7): [True: 0, False: 2.07k]
  ------------------
 1353|      0|         return if_match(req, "Streebog-256", {1, 2, 643, 7, 1, 1, 2, 2});
 1354|      0|      case 0xAC3DD:
  ------------------
  |  Branch (1354:7): [True: 0, False: 2.07k]
  ------------------
 1355|      0|         return if_match(req, "Certificate Comment", {2, 16, 840, 1, 113730, 1, 13});
 1356|      0|      case 0xAC511:
  ------------------
  |  Branch (1356:7): [True: 0, False: 2.07k]
  ------------------
 1357|      0|         return if_match(req, "PBE-SHA1-3DES", {1, 2, 840, 113549, 1, 12, 1, 3});
 1358|     29|      case 0xAE6FE:
  ------------------
  |  Branch (1358:7): [True: 29, False: 2.04k]
  ------------------
 1359|     29|         return if_match(req, "PKIX.ClientAuth", {1, 3, 6, 1, 5, 5, 7, 3, 2});
 1360|      0|      case 0xAE8D3:
  ------------------
  |  Branch (1360:7): [True: 0, False: 2.07k]
  ------------------
 1361|      0|         return if_match(req, "ClassicMcEliece_8192128pcf", {1, 3, 6, 1, 4, 1, 25258, 1, 18, 6});
 1362|      0|      case 0xAF476:
  ------------------
  |  Branch (1362:7): [True: 0, False: 2.07k]
  ------------------
 1363|      0|         return if_match(req, "ECDH", {1, 3, 132, 1, 12});
 1364|      0|      case 0xAFA6A:
  ------------------
  |  Branch (1364:7): [True: 0, False: 2.07k]
  ------------------
 1365|      0|         return if_match(req, "RSA/PKCS1v15(SHA-3(384))", {2, 16, 840, 1, 101, 3, 4, 3, 15});
 1366|      0|      case 0xB2217:
  ------------------
  |  Branch (1366:7): [True: 0, False: 2.07k]
  ------------------
 1367|      0|         return if_match(req, "AES-256/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 3});
 1368|      0|      case 0xB22F7:
  ------------------
  |  Branch (1368:7): [True: 0, False: 2.07k]
  ------------------
 1369|      0|         return if_match(req, "Camellia-128/GCM", {0, 3, 4401, 5, 3, 1, 9, 6});
 1370|      0|      case 0xB23DE:
  ------------------
  |  Branch (1370:7): [True: 0, False: 2.07k]
  ------------------
 1371|      0|         return if_match(req, "X520.Locality", {2, 5, 4, 7});
 1372|      0|      case 0xB2FBD:
  ------------------
  |  Branch (1372:7): [True: 0, False: 2.07k]
  ------------------
 1373|      0|         return if_match(req, "ECKCDSA/SHA-224", {1, 2, 410, 200004, 1, 100, 4, 4});
 1374|      0|      case 0xB32B0:
  ------------------
  |  Branch (1374:7): [True: 0, False: 2.07k]
  ------------------
 1375|      0|         return if_match(req, "ECKCDSA/SHA-256", {1, 2, 410, 200004, 1, 100, 4, 5});
 1376|      0|      case 0xB360E:
  ------------------
  |  Branch (1376:7): [True: 0, False: 2.07k]
  ------------------
 1377|      0|         return if_match(req, "eFrodoKEM-976-SHAKE", {1, 3, 6, 1, 4, 1, 25258, 1, 16, 2});
 1378|      0|      case 0xB4368:
  ------------------
  |  Branch (1378:7): [True: 0, False: 2.07k]
  ------------------
 1379|      0|         return if_match(req, "ECGDSA/SHA-1", {1, 3, 36, 3, 3, 2, 5, 4, 2});
 1380|      0|      case 0xB58CD:
  ------------------
  |  Branch (1380:7): [True: 0, False: 2.07k]
  ------------------
 1381|      0|         return if_match(req, "RSA/PKCS1v15(SHA-3(512))", {2, 16, 840, 1, 101, 3, 4, 3, 16});
 1382|      0|      case 0xB6427:
  ------------------
  |  Branch (1382:7): [True: 0, False: 2.07k]
  ------------------
 1383|      0|         return if_match(req, "Camellia-192/GCM", {0, 3, 4401, 5, 3, 1, 9, 26});
 1384|      0|      case 0xB7102:
  ------------------
  |  Branch (1384:7): [True: 0, False: 2.07k]
  ------------------
 1385|      0|         return if_match(req, "brainpool224r1", {1, 3, 36, 3, 3, 2, 8, 1, 1, 5});
 1386|      0|      case 0xB710D:
  ------------------
  |  Branch (1386:7): [True: 0, False: 2.07k]
  ------------------
 1387|      0|         return if_match(req, "X509v3.CRLIssuingDistributionPoint", {2, 5, 29, 28});
 1388|      0|      case 0xB72D4:
  ------------------
  |  Branch (1388:7): [True: 0, False: 2.07k]
  ------------------
 1389|      0|         return if_match(req, "Microsoft UPN", {1, 3, 6, 1, 4, 1, 311, 20, 2, 3});
 1390|      0|      case 0xB73A5:
  ------------------
  |  Branch (1390:7): [True: 0, False: 2.07k]
  ------------------
 1391|      0|         return if_match(req, "RSA/PSS", {1, 2, 840, 113549, 1, 1, 10});
 1392|      0|      case 0xB84B3:
  ------------------
  |  Branch (1392:7): [True: 0, False: 2.07k]
  ------------------
 1393|      0|         return if_match(req, "PKIX.CodeSigning", {1, 3, 6, 1, 5, 5, 7, 3, 3});
 1394|      0|      case 0xB8CB9:
  ------------------
  |  Branch (1394:7): [True: 0, False: 2.07k]
  ------------------
 1395|      0|         return if_match(req, "GOST-34.10-2012-256", {1, 2, 643, 7, 1, 1, 1, 1});
 1396|      0|      case 0xB945C:
  ------------------
  |  Branch (1396:7): [True: 0, False: 2.07k]
  ------------------
 1397|      0|         return if_match(req, "Twofish/SIV", {1, 3, 6, 1, 4, 1, 25258, 3, 4, 5});
 1398|      0|      case 0xB94E4:
  ------------------
  |  Branch (1398:7): [True: 0, False: 2.07k]
  ------------------
 1399|      0|         return if_match(req, "gost_512A", {1, 2, 643, 7, 1, 2, 1, 2, 1});
 1400|      0|      case 0xB94E5:
  ------------------
  |  Branch (1400:7): [True: 0, False: 2.07k]
  ------------------
 1401|      0|         return if_match(req, "gost_512B", {1, 2, 643, 7, 1, 2, 1, 2, 2});
 1402|      0|      case 0xBA1D8:
  ------------------
  |  Branch (1402:7): [True: 0, False: 2.07k]
  ------------------
 1403|      0|         return if_match(req, "X520.StreetAddress", {2, 5, 4, 9});
 1404|      0|      case 0xBCB45:
  ------------------
  |  Branch (1404:7): [True: 0, False: 2.07k]
  ------------------
 1405|      0|         return if_match(req, "PKCS12.CRLBag", {1, 2, 840, 113549, 1, 12, 10, 1, 4});
 1406|      0|      case 0xBCC82:
  ------------------
  |  Branch (1406:7): [True: 0, False: 2.07k]
  ------------------
 1407|      0|         return if_match(req, "x962_p239v1", {1, 2, 840, 10045, 3, 1, 4});
 1408|      0|      case 0xBCC83:
  ------------------
  |  Branch (1408:7): [True: 0, False: 2.07k]
  ------------------
 1409|      0|         return if_match(req, "x962_p239v2", {1, 2, 840, 10045, 3, 1, 5});
 1410|      0|      case 0xBCC84:
  ------------------
  |  Branch (1410:7): [True: 0, False: 2.07k]
  ------------------
 1411|      0|         return if_match(req, "x962_p239v3", {1, 2, 840, 10045, 3, 1, 6});
 1412|      0|      case 0xBD92B:
  ------------------
  |  Branch (1412:7): [True: 0, False: 2.07k]
  ------------------
 1413|      0|         return if_match(req, "X509v3.HoldInstructionCode", {2, 5, 29, 23});
 1414|      0|      case 0xBDCA9:
  ------------------
  |  Branch (1414:7): [True: 0, False: 2.07k]
  ------------------
 1415|      0|         return if_match(req, "AES-256/GCM", {2, 16, 840, 1, 101, 3, 4, 1, 46});
 1416|      0|      case 0xBE48D:
  ------------------
  |  Branch (1416:7): [True: 0, False: 2.07k]
  ------------------
 1417|      0|         return if_match(req, "PKIX.OCSP.BasicResponse", {1, 3, 6, 1, 5, 5, 7, 48, 1, 1});
 1418|      0|      case 0xBF71E:
  ------------------
  |  Branch (1418:7): [True: 0, False: 2.07k]
  ------------------
 1419|      0|         return if_match(req, "Kyber-1024-r3", {1, 3, 6, 1, 4, 1, 25258, 1, 7, 3});
 1420|      0|      case 0xBFF01:
  ------------------
  |  Branch (1420:7): [True: 0, False: 2.07k]
  ------------------
 1421|      0|         return if_match(req, "DSA/SHA-3(224)", {2, 16, 840, 1, 101, 3, 4, 3, 5});
 1422|      0|      case 0xC0F4F:
  ------------------
  |  Branch (1422:7): [True: 0, False: 2.07k]
  ------------------
 1423|      0|         return if_match(req, "SphincsPlus-haraka-256f-r3.1", {1, 3, 6, 1, 4, 1, 25258, 1, 12, 3, 6});
 1424|      0|      case 0xC1875:
  ------------------
  |  Branch (1424:7): [True: 0, False: 2.07k]
  ------------------
 1425|      0|         return if_match(req, "SHA-1", {1, 3, 14, 3, 2, 26});
 1426|     29|      case 0xC28D1:
  ------------------
  |  Branch (1426:7): [True: 29, False: 2.04k]
  ------------------
 1427|     29|         return if_match(req, "PKIX.OCSPSigning", {1, 3, 6, 1, 5, 5, 7, 3, 9});
 1428|      0|      case 0xC42CA:
  ------------------
  |  Branch (1428:7): [True: 0, False: 2.07k]
  ------------------
 1429|      0|         return if_match(req, "brainpool256r1", {1, 3, 36, 3, 3, 2, 8, 1, 1, 7});
 1430|      0|      default:
  ------------------
  |  Branch (1430:7): [True: 0, False: 2.07k]
  ------------------
 1431|      0|         return {};
 1432|  2.07k|   }
 1433|  2.07k|}
_ZN5Botan7OID_Map16load_oid2str_mapEv:
 1435|      1|std::unordered_map<OID, std::string> OID_Map::load_oid2str_map() {
 1436|      1|   return {
 1437|      1|      {OID{2, 5, 8, 1, 1}, "RSA"},
 1438|      1|      {OID{1, 3, 6, 1, 4, 1, 8301, 3, 1, 2, 9, 0, 38}, "secp521r1"},
 1439|      1|      {OID{1, 2, 643, 2, 2, 35, 1}, "gost_256A"},
 1440|      1|      {OID{1, 2, 643, 2, 2, 36, 0}, "gost_256A"},
 1441|      1|   };
 1442|      1|}
_ZN5Botan7OID_Map16load_str2oid_mapEv:
 1444|      1|std::unordered_map<std::string, OID> OID_Map::load_str2oid_map() {
 1445|      1|   return {
 1446|      1|      {"Curve25519", OID{1, 3, 101, 110}},
 1447|      1|      {"SM2_Sig", OID{1, 2, 156, 10197, 1, 301, 1}},
 1448|      1|      {"RSA/EMSA3(MD2)", OID{1, 2, 840, 113549, 1, 1, 2}},
 1449|      1|      {"RSA/EMSA3(MD5)", OID{1, 2, 840, 113549, 1, 1, 4}},
 1450|      1|      {"RSA/EMSA3(SHA-1)", OID{1, 2, 840, 113549, 1, 1, 5}},
 1451|      1|      {"RSA/EMSA3(SHA-256)", OID{1, 2, 840, 113549, 1, 1, 11}},
 1452|      1|      {"RSA/EMSA3(SHA-384)", OID{1, 2, 840, 113549, 1, 1, 12}},
 1453|      1|      {"RSA/EMSA3(SHA-512)", OID{1, 2, 840, 113549, 1, 1, 13}},
 1454|      1|      {"RSA/EMSA3(SHA-224)", OID{1, 2, 840, 113549, 1, 1, 14}},
 1455|      1|      {"RSA/EMSA3(SHA-512-256)", OID{1, 2, 840, 113549, 1, 1, 16}},
 1456|      1|      {"RSA/EMSA3(SHA-3(224))", OID{2, 16, 840, 1, 101, 3, 4, 3, 13}},
 1457|      1|      {"RSA/EMSA3(SHA-3(256))", OID{2, 16, 840, 1, 101, 3, 4, 3, 14}},
 1458|      1|      {"RSA/EMSA3(SHA-3(384))", OID{2, 16, 840, 1, 101, 3, 4, 3, 15}},
 1459|      1|      {"RSA/EMSA3(SHA-3(512))", OID{2, 16, 840, 1, 101, 3, 4, 3, 16}},
 1460|      1|      {"RSA/EMSA3(SM3)", OID{1, 2, 156, 10197, 1, 504}},
 1461|      1|      {"RSA/EMSA3(RIPEMD-160)", OID{1, 3, 36, 3, 3, 1, 2}},
 1462|      1|      {"RSA/EMSA4", OID{1, 2, 840, 113549, 1, 1, 10}},
 1463|      1|      {"PBES2", OID{1, 2, 840, 113549, 1, 5, 13}},
 1464|      1|   };
 1465|      1|}
static_oids.cpp:_ZN5Botan12_GLOBAL__N_113hash_oid_nameENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   34|  2.07k|uint32_t hash_oid_name(std::string_view s) {
   35|  2.07k|   uint64_t hash = 0x8188B31879A4879A;
   36|       |
   37|  47.3k|   for(const char c : s) {
  ------------------
  |  Branch (37:21): [True: 47.3k, False: 2.07k]
  ------------------
   38|  47.3k|      hash *= 251;
   39|  47.3k|      hash += c;
   40|  47.3k|   }
   41|       |
   42|  2.07k|   return static_cast<uint32_t>(hash % 805289);
   43|  2.07k|}
static_oids.cpp:_ZN5Botan12_GLOBAL__N_18if_matchENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_St16initializer_listIjE:
   26|  2.07k|std::optional<OID> if_match(std::string_view req, std::string_view actual, std::initializer_list<uint32_t> oid) {
   27|  2.07k|   if(req == actual) {
  ------------------
  |  Branch (27:7): [True: 2.07k, False: 0]
  ------------------
   28|  2.07k|      return OID(oid);
   29|  2.07k|   } else {
   30|      0|      return {};
   31|      0|   }
   32|  2.07k|}

_ZN5Botan20Buffered_Computation5finalENSt3__14spanIhLm18446744073709551615EEE:
   54|  3.07k|void Buffered_Computation::final(std::span<uint8_t> out) {
   55|  3.07k|   BOTAN_ARG_CHECK(out.size() >= output_length(), "provided output buffer has insufficient capacity");
  ------------------
  |  |   35|  3.07k|   do {                                                          \
  |  |   36|  3.07k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */              \
  |  |   37|  3.07k|      if(!(expr)) {                                              \
  |  |  ------------------
  |  |  |  Branch (37:10): [True: 0, False: 3.07k]
  |  |  ------------------
  |  |   38|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */     \
  |  |   39|      0|         Botan::throw_invalid_argument(msg, __func__, __FILE__); \
  |  |   40|      0|      }                                                          \
  |  |   41|  3.07k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (41:12): [Folded, False: 3.07k]
  |  |  ------------------
  ------------------
   56|  3.07k|   final_result(out);
   57|  3.07k|}

_ZN5Botan13base64_decodeEPKcmb:
  187|    163|secure_vector<uint8_t> base64_decode(const char input[], size_t input_length, bool ignore_ws) {
  188|    163|   return base_decode_to_vec<secure_vector<uint8_t>>(Base64(), input, input_length, ignore_ws);
  189|    163|}
base64.cpp:_ZN5Botan12_GLOBAL__N_16Base6417decode_max_outputEm:
   42|    326|      static constexpr size_t decode_max_output(size_t input_length) {
   43|    326|         return (round_up(input_length, m_encoding_bytes_out) * m_encoding_bytes_in) / m_encoding_bytes_out;
   44|    326|      }
base64.cpp:_ZN5Botan12_GLOBAL__N_16Base6419lookup_binary_valueEc:
  110|  50.9k|uint8_t Base64::lookup_binary_value(char input) noexcept {
  111|  50.9k|   auto has_zero_byte = [](uint64_t v) { return ((v - 0x0101010101010101) & ~(v) & 0x8080808080808080); };
  112|       |
  113|       |   // Assumes each byte is either 0x00 or 0x80
  114|  50.9k|   auto index_of_first_set_byte = [](uint64_t v) {
  115|  50.9k|      return ((((v - 1) & 0x0101010101010101) * 0x0101010101010101) >> 56) - 1;
  116|  50.9k|   };
  117|       |
  118|  50.9k|   constexpr uint64_t lo = 0x0101010101010101;
  119|       |
  120|  50.9k|   const uint8_t x = static_cast<uint8_t>(input);
  121|       |
  122|  50.9k|   const uint64_t x8 = x * lo;
  123|       |
  124|       |   // Defines the valid ASCII ranges of base64, except the special chars (below)
  125|  50.9k|   constexpr uint64_t val_l = make_uint64(0, 0, 0, 0, 0, 'A', 'a', '0');
  126|  50.9k|   constexpr uint64_t val_u = make_uint64(0, 0, 0, 0, 0, 26, 26, 10);
  127|       |
  128|       |   // If x is in one of the ranges return a mask. Otherwise we xor in at the
  129|       |   // high word which will be our invalid marker
  130|  50.9k|   auto v_mask = swar_in_range<uint64_t>(x8, val_l, val_u) ^ 0x80000000;
  131|       |
  132|       |   // This is the offset added to x to get the value
  133|  50.9k|   const uint64_t val_v = 0xbfb904 ^ (0xFF000000 - (x << 24));
  134|       |
  135|  50.9k|   const uint8_t z = x + static_cast<uint8_t>(val_v >> (8 * index_of_first_set_byte(v_mask)));
  136|       |
  137|       |   // Valid base64 special characters, and some whitespace chars
  138|  50.9k|   constexpr uint64_t specials_i = make_uint64(0, '+', '/', '=', ' ', '\n', '\t', '\r');
  139|       |
  140|  50.9k|   const uint64_t specials_v = 0x3e3f8180808080 ^ (static_cast<uint64_t>(z) << 56);
  141|       |
  142|  50.9k|   const uint64_t smask = has_zero_byte(x8 ^ specials_i) ^ 0x8000000000000000;
  143|       |
  144|  50.9k|   return static_cast<uint8_t>(specials_v >> (8 * index_of_first_set_byte(smask)));
  145|  50.9k|}
base64.cpp:_ZZN5Botan12_GLOBAL__N_16Base6419lookup_binary_valueEcENK3$_0clEm:
  114|   101k|   auto index_of_first_set_byte = [](uint64_t v) {
  115|   101k|      return ((((v - 1) & 0x0101010101010101) * 0x0101010101010101) >> 56) - 1;
  116|   101k|   };
base64.cpp:_ZZN5Botan12_GLOBAL__N_16Base6419lookup_binary_valueEcENK3$_1clEm:
  111|  50.9k|   auto has_zero_byte = [](uint64_t v) { return ((v - 0x0101010101010101) & ~(v) & 0x8080808080808080); };
base64.cpp:_ZN5Botan12_GLOBAL__N_16Base6414check_bad_charEhcb:
  148|  39.4k|bool Base64::check_bad_char(uint8_t bin, char input, bool ignore_ws) {
  149|  39.4k|   if(bin <= 0x3F) {
  ------------------
  |  Branch (149:7): [True: 16.0k, False: 23.3k]
  ------------------
  150|  16.0k|      return true;
  151|  23.3k|   } else if(!(bin == 0x81 || (bin == 0x80 && ignore_ws))) {
  ------------------
  |  Branch (151:16): [True: 1.60k, False: 21.7k]
  |  Branch (151:32): [True: 21.7k, False: 41]
  |  Branch (151:47): [True: 21.7k, False: 0]
  ------------------
  152|     41|      throw Invalid_Argument(fmt("base64_decode: invalid character '{}'", format_char_for_display(input)));
  153|     41|   }
  154|  23.3k|   return false;
  155|  39.4k|}
base64.cpp:_ZN5Botan12_GLOBAL__N_16Base646decodeEPhPKh:
   52|  4.04k|      static void decode(uint8_t* out_ptr, const uint8_t decode_buf[4]) {
   53|  4.04k|         out_ptr[0] = (decode_buf[0] << 2) | (decode_buf[1] >> 4);
   54|  4.04k|         out_ptr[1] = (decode_buf[1] << 4) | (decode_buf[2] >> 2);
   55|  4.04k|         out_ptr[2] = (decode_buf[2] << 6) | decode_buf[3];
   56|  4.04k|      }
base64.cpp:_ZN5Botan12_GLOBAL__N_16Base6415bytes_to_removeEm:
   58|    122|      static size_t bytes_to_remove(size_t final_truncate) { return final_truncate; }
base64.cpp:_ZN5Botan12_GLOBAL__N_16Base644nameEv:
   24|     22|      static std::string name() noexcept { return "base64"; }

_ZN5Botan10hex_encodeEPcPKhmb:
   34|  1.22k|void hex_encode(char output[], const uint8_t input[], size_t input_length, bool uppercase) {
   35|  33.1k|   for(size_t i = 0; i != input_length; ++i) {
  ------------------
  |  Branch (35:22): [True: 31.9k, False: 1.22k]
  ------------------
   36|  31.9k|      const uint16_t h = hex_encode_2nibble(input[i], uppercase);
   37|  31.9k|      output[2 * i] = get_byte<0>(h);
   38|  31.9k|      output[2 * i + 1] = get_byte<1>(h);
   39|  31.9k|   }
   40|  1.22k|}
_ZN5Botan10hex_encodeEPKhmb:
   42|  1.22k|std::string hex_encode(const uint8_t input[], size_t input_length, bool uppercase) {
   43|  1.22k|   std::string output(2 * input_length, 0);
   44|       |
   45|  1.22k|   if(input_length > 0) {
  ------------------
  |  Branch (45:7): [True: 1.22k, False: 0]
  ------------------
   46|  1.22k|      hex_encode(&output.front(), input, input_length, uppercase);
   47|  1.22k|   }
   48|       |
   49|  1.22k|   return output;
   50|  1.22k|}
hex.cpp:_ZN5Botan12_GLOBAL__N_118hex_encode_2nibbleEhb:
   21|  31.9k|uint16_t hex_encode_2nibble(uint8_t n8, bool uppercase) {
   22|       |   // Offset for upper or lower case 'a' resp
   23|  31.9k|   const uint16_t a_mask = uppercase ? 0x0707 : 0x2727;
  ------------------
  |  Branch (23:28): [True: 31.9k, False: 0]
  ------------------
   24|       |
   25|  31.9k|   const uint16_t n = (static_cast<uint16_t>(n8 & 0xF0) << 4) | (n8 & 0x0F);
   26|       |   // n >= 10? If so add offset
   27|  31.9k|   const uint16_t diff = swar_lt<uint16_t>(0x0909, n) & a_mask;
   28|       |   // Can't overflow between bytes, so don't need explicit SWAR addition:
   29|  31.9k|   return n + 0x3030 + diff;
   30|  31.9k|}

_ZN5Botan12HashFunction6createENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_:
  111|  1.22k|std::unique_ptr<HashFunction> HashFunction::create(std::string_view algo_spec, std::string_view provider) {
  112|       |#if defined(BOTAN_HAS_COMMONCRYPTO)
  113|       |   if(provider.empty() || provider == "commoncrypto") {
  114|       |      if(auto hash = make_commoncrypto_hash(algo_spec))
  115|       |         return hash;
  116|       |
  117|       |      if(!provider.empty())
  118|       |         return nullptr;
  119|       |   }
  120|       |#endif
  121|       |
  122|  1.22k|   if(provider.empty() == false && provider != "base") {
  ------------------
  |  Branch (122:7): [True: 0, False: 1.22k]
  |  Branch (122:36): [True: 0, False: 0]
  ------------------
  123|      0|      return nullptr;  // unknown provider
  124|      0|   }
  125|       |
  126|  1.22k|#if defined(BOTAN_HAS_SHA1)
  127|  1.22k|   if(algo_spec == "SHA-1") {
  ------------------
  |  Branch (127:7): [True: 614, False: 614]
  ------------------
  128|    614|      return std::make_unique<SHA_1>();
  129|    614|   }
  130|    614|#endif
  131|       |
  132|    614|#if defined(BOTAN_HAS_SHA2_32)
  133|    614|   if(algo_spec == "SHA-224") {
  ------------------
  |  Branch (133:7): [True: 0, False: 614]
  ------------------
  134|      0|      return std::make_unique<SHA_224>();
  135|      0|   }
  136|       |
  137|    614|   if(algo_spec == "SHA-256") {
  ------------------
  |  Branch (137:7): [True: 614, False: 0]
  ------------------
  138|    614|      return std::make_unique<SHA_256>();
  139|    614|   }
  140|      0|#endif
  141|       |
  142|      0|#if defined(BOTAN_HAS_SHA2_64)
  143|      0|   if(algo_spec == "SHA-384") {
  ------------------
  |  Branch (143:7): [True: 0, False: 0]
  ------------------
  144|      0|      return std::make_unique<SHA_384>();
  145|      0|   }
  146|       |
  147|      0|   if(algo_spec == "SHA-512") {
  ------------------
  |  Branch (147:7): [True: 0, False: 0]
  ------------------
  148|      0|      return std::make_unique<SHA_512>();
  149|      0|   }
  150|       |
  151|      0|   if(algo_spec == "SHA-512-256") {
  ------------------
  |  Branch (151:7): [True: 0, False: 0]
  ------------------
  152|      0|      return std::make_unique<SHA_512_256>();
  153|      0|   }
  154|      0|#endif
  155|       |
  156|      0|#if defined(BOTAN_HAS_RIPEMD_160)
  157|      0|   if(algo_spec == "RIPEMD-160") {
  ------------------
  |  Branch (157:7): [True: 0, False: 0]
  ------------------
  158|      0|      return std::make_unique<RIPEMD_160>();
  159|      0|   }
  160|      0|#endif
  161|       |
  162|      0|#if defined(BOTAN_HAS_WHIRLPOOL)
  163|      0|   if(algo_spec == "Whirlpool") {
  ------------------
  |  Branch (163:7): [True: 0, False: 0]
  ------------------
  164|      0|      return std::make_unique<Whirlpool>();
  165|      0|   }
  166|      0|#endif
  167|       |
  168|      0|#if defined(BOTAN_HAS_MD5)
  169|      0|   if(algo_spec == "MD5") {
  ------------------
  |  Branch (169:7): [True: 0, False: 0]
  ------------------
  170|      0|      return std::make_unique<MD5>();
  171|      0|   }
  172|      0|#endif
  173|       |
  174|      0|#if defined(BOTAN_HAS_MD4)
  175|      0|   if(algo_spec == "MD4") {
  ------------------
  |  Branch (175:7): [True: 0, False: 0]
  ------------------
  176|      0|      return std::make_unique<MD4>();
  177|      0|   }
  178|      0|#endif
  179|       |
  180|      0|#if defined(BOTAN_HAS_GOST_34_11)
  181|      0|   if(algo_spec == "GOST-R-34.11-94" || algo_spec == "GOST-34.11") {
  ------------------
  |  Branch (181:7): [True: 0, False: 0]
  |  Branch (181:41): [True: 0, False: 0]
  ------------------
  182|      0|      return std::make_unique<GOST_34_11>();
  183|      0|   }
  184|      0|#endif
  185|       |
  186|      0|#if defined(BOTAN_HAS_ADLER32)
  187|      0|   if(algo_spec == "Adler32") {
  ------------------
  |  Branch (187:7): [True: 0, False: 0]
  ------------------
  188|      0|      return std::make_unique<Adler32>();
  189|      0|   }
  190|      0|#endif
  191|       |
  192|      0|#if defined(BOTAN_HAS_ASCON_HASH256)
  193|      0|   if(algo_spec == "Ascon-Hash256") {
  ------------------
  |  Branch (193:7): [True: 0, False: 0]
  ------------------
  194|      0|      return std::make_unique<Ascon_Hash256>();
  195|      0|   }
  196|      0|#endif
  197|       |
  198|      0|#if defined(BOTAN_HAS_CRC24)
  199|      0|   if(algo_spec == "CRC24") {
  ------------------
  |  Branch (199:7): [True: 0, False: 0]
  ------------------
  200|      0|      return std::make_unique<CRC24>();
  201|      0|   }
  202|      0|#endif
  203|       |
  204|      0|#if defined(BOTAN_HAS_CRC32)
  205|      0|   if(algo_spec == "CRC32") {
  ------------------
  |  Branch (205:7): [True: 0, False: 0]
  ------------------
  206|      0|      return std::make_unique<CRC32>();
  207|      0|   }
  208|      0|#endif
  209|       |
  210|      0|#if defined(BOTAN_HAS_STREEBOG)
  211|      0|   if(algo_spec == "Streebog-256") {
  ------------------
  |  Branch (211:7): [True: 0, False: 0]
  ------------------
  212|      0|      return std::make_unique<Streebog>(256);
  213|      0|   }
  214|      0|   if(algo_spec == "Streebog-512") {
  ------------------
  |  Branch (214:7): [True: 0, False: 0]
  ------------------
  215|      0|      return std::make_unique<Streebog>(512);
  216|      0|   }
  217|      0|#endif
  218|       |
  219|      0|#if defined(BOTAN_HAS_SM3)
  220|      0|   if(algo_spec == "SM3") {
  ------------------
  |  Branch (220:7): [True: 0, False: 0]
  ------------------
  221|      0|      return std::make_unique<SM3>();
  222|      0|   }
  223|      0|#endif
  224|       |
  225|      0|   const SCAN_Name req(algo_spec);
  226|       |
  227|      0|#if defined(BOTAN_HAS_SKEIN_512)
  228|      0|   if(req.algo_name() == "Skein-512") {
  ------------------
  |  Branch (228:7): [True: 0, False: 0]
  ------------------
  229|      0|      return std::make_unique<Skein_512>(req.arg_as_integer(0, 512), req.arg(1, ""));
  230|      0|   }
  231|      0|#endif
  232|       |
  233|      0|#if defined(BOTAN_HAS_BLAKE2B)
  234|      0|   if(req.algo_name() == "Blake2b" || req.algo_name() == "BLAKE2b") {
  ------------------
  |  Branch (234:7): [True: 0, False: 0]
  |  Branch (234:39): [True: 0, False: 0]
  ------------------
  235|      0|      return std::make_unique<BLAKE2b>(req.arg_as_integer(0, 512));
  236|      0|   }
  237|      0|#endif
  238|       |
  239|      0|#if defined(BOTAN_HAS_BLAKE2S)
  240|      0|   if(req.algo_name() == "Blake2s" || req.algo_name() == "BLAKE2s") {
  ------------------
  |  Branch (240:7): [True: 0, False: 0]
  |  Branch (240:39): [True: 0, False: 0]
  ------------------
  241|      0|      return std::make_unique<BLAKE2s>(req.arg_as_integer(0, 256));
  242|      0|   }
  243|      0|#endif
  244|       |
  245|      0|#if defined(BOTAN_HAS_KECCAK)
  246|      0|   if(req.algo_name() == "Keccak-1600") {
  ------------------
  |  Branch (246:7): [True: 0, False: 0]
  ------------------
  247|      0|      return std::make_unique<Keccak_1600>(req.arg_as_integer(0, 512));
  248|      0|   }
  249|      0|#endif
  250|       |
  251|      0|#if defined(BOTAN_HAS_SHA3)
  252|      0|   if(req.algo_name() == "SHA-3") {
  ------------------
  |  Branch (252:7): [True: 0, False: 0]
  ------------------
  253|      0|      return std::make_unique<SHA_3>(req.arg_as_integer(0, 512));
  254|      0|   }
  255|      0|#endif
  256|       |
  257|      0|#if defined(BOTAN_HAS_SHAKE)
  258|      0|   if(req.algo_name() == "SHAKE-128" && req.arg_count() == 1) {
  ------------------
  |  Branch (258:7): [True: 0, False: 0]
  |  Branch (258:41): [True: 0, False: 0]
  ------------------
  259|      0|      return std::make_unique<SHAKE_128>(req.arg_as_integer(0));
  260|      0|   }
  261|      0|   if(req.algo_name() == "SHAKE-256" && req.arg_count() == 1) {
  ------------------
  |  Branch (261:7): [True: 0, False: 0]
  |  Branch (261:41): [True: 0, False: 0]
  ------------------
  262|      0|      return std::make_unique<SHAKE_256>(req.arg_as_integer(0));
  263|      0|   }
  264|      0|#endif
  265|       |
  266|      0|#if defined(BOTAN_HAS_PARALLEL_HASH)
  267|      0|   if(req.algo_name() == "Parallel") {
  ------------------
  |  Branch (267:7): [True: 0, False: 0]
  ------------------
  268|      0|      std::vector<std::unique_ptr<HashFunction>> hashes;
  269|       |
  270|      0|      for(size_t i = 0; i != req.arg_count(); ++i) {
  ------------------
  |  Branch (270:25): [True: 0, False: 0]
  ------------------
  271|      0|         auto h = HashFunction::create(req.arg(i));
  272|      0|         if(!h) {
  ------------------
  |  Branch (272:13): [True: 0, False: 0]
  ------------------
  273|      0|            return nullptr;
  274|      0|         }
  275|      0|         hashes.push_back(std::move(h));
  276|      0|      }
  277|       |
  278|      0|      return std::make_unique<Parallel>(hashes);
  279|      0|   }
  280|      0|#endif
  281|       |
  282|      0|#if defined(BOTAN_HAS_TRUNCATED_HASH)
  283|      0|   if(req.algo_name() == "Truncated" && req.arg_count() == 2) {
  ------------------
  |  Branch (283:7): [True: 0, False: 0]
  |  Branch (283:41): [True: 0, False: 0]
  ------------------
  284|      0|      auto hash = HashFunction::create(req.arg(0));
  285|      0|      if(!hash) {
  ------------------
  |  Branch (285:10): [True: 0, False: 0]
  ------------------
  286|      0|         return nullptr;
  287|      0|      }
  288|       |
  289|      0|      return std::make_unique<Truncated_Hash>(std::move(hash), req.arg_as_integer(1));
  290|      0|   }
  291|      0|#endif
  292|       |
  293|      0|#if defined(BOTAN_HAS_COMB4P)
  294|      0|   if(req.algo_name() == "Comb4P" && req.arg_count() == 2) {
  ------------------
  |  Branch (294:7): [True: 0, False: 0]
  |  Branch (294:38): [True: 0, False: 0]
  ------------------
  295|      0|      auto h1 = HashFunction::create(req.arg(0));
  296|      0|      auto h2 = HashFunction::create(req.arg(1));
  297|       |
  298|      0|      if(h1 && h2) {
  ------------------
  |  Branch (298:10): [True: 0, False: 0]
  |  Branch (298:16): [True: 0, False: 0]
  ------------------
  299|      0|         return std::make_unique<Comb4P>(std::move(h1), std::move(h2));
  300|      0|      }
  301|      0|   }
  302|      0|#endif
  303|       |
  304|      0|   return nullptr;
  305|      0|}
_ZN5Botan12HashFunction15create_or_throwENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEES5_:
  308|    614|std::unique_ptr<HashFunction> HashFunction::create_or_throw(std::string_view algo, std::string_view provider) {
  309|    614|   if(auto hash = HashFunction::create(algo, provider)) {
  ------------------
  |  Branch (309:12): [True: 614, False: 0]
  ------------------
  310|    614|      return hash;
  311|    614|   }
  312|      0|   throw Lookup_Error("Hash", algo, provider);
  313|    614|}

_ZN5Botan5SHA_110compress_nERNSt3__16vectorIjNS_16secure_allocatorIjEEEENS1_4spanIKhLm18446744073709551615EEEm:
   24|  4.79k|void SHA_1::compress_n(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
   25|  4.79k|   using namespace SHA1_F;
   26|       |
   27|  4.79k|#if defined(BOTAN_HAS_SHA1_X86_SHA_NI)
   28|  4.79k|   if(CPUID::has(CPUID::Feature::SHA)) {
  ------------------
  |  Branch (28:7): [True: 0, False: 4.79k]
  ------------------
   29|      0|      return sha1_compress_x86(digest, input, blocks);
   30|      0|   }
   31|  4.79k|#endif
   32|       |
   33|       |#if defined(BOTAN_HAS_SHA1_ARMV8)
   34|       |   if(CPUID::has(CPUID::Feature::SHA1)) {
   35|       |      return sha1_armv8_compress_n(digest, input, blocks);
   36|       |   }
   37|       |#endif
   38|       |
   39|  4.79k|#if defined(BOTAN_HAS_SHA1_AVX2)
   40|  4.79k|   if(CPUID::has(CPUID::Feature::AVX2, CPUID::Feature::BMI)) {
  ------------------
  |  Branch (40:7): [True: 4.79k, False: 0]
  ------------------
   41|  4.79k|      return avx2_compress_n(digest, input, blocks);
   42|  4.79k|   }
   43|      0|#endif
   44|       |
   45|      0|#if defined(BOTAN_HAS_SHA1_SIMD_4X32)
   46|      0|   if(CPUID::has(CPUID::Feature::SIMD_4X32)) {
  ------------------
  |  Branch (46:7): [True: 0, False: 0]
  ------------------
   47|      0|      return simd_compress_n(digest, input, blocks);
   48|      0|   }
   49|      0|#endif
   50|       |
   51|      0|   uint32_t A = digest[0];
   52|      0|   uint32_t B = digest[1];
   53|      0|   uint32_t C = digest[2];
   54|      0|   uint32_t D = digest[3];
   55|      0|   uint32_t E = digest[4];
   56|      0|   std::array<uint32_t, 80> W{};
   57|      0|   auto W_in = std::span{W}.first<block_bytes / sizeof(uint32_t)>();
   58|       |
   59|      0|   BufferSlicer in(input);
   60|       |
   61|      0|   for(size_t i = 0; i != blocks; ++i) {
  ------------------
  |  Branch (61:22): [True: 0, False: 0]
  ------------------
   62|      0|      load_be(W_in, in.take<block_bytes>());
   63|       |
   64|       |      // clang-format off
   65|       |
   66|      0|      for(size_t j = 16; j != 80; j += 8) {
  ------------------
  |  Branch (66:26): [True: 0, False: 0]
  ------------------
   67|      0|         W[j + 0] = rotl<1>(W[j - 3] ^ W[j - 8] ^ W[j - 14] ^ W[j - 16]);
   68|      0|         W[j + 1] = rotl<1>(W[j - 2] ^ W[j - 7] ^ W[j - 13] ^ W[j - 15]);
   69|      0|         W[j + 2] = rotl<1>(W[j - 1] ^ W[j - 6] ^ W[j - 12] ^ W[j - 14]);
   70|      0|         W[j + 3] = rotl<1>(W[j    ] ^ W[j - 5] ^ W[j - 11] ^ W[j - 13]);
   71|      0|         W[j + 4] = rotl<1>(W[j + 1] ^ W[j - 4] ^ W[j - 10] ^ W[j - 12]);
   72|      0|         W[j + 5] = rotl<1>(W[j + 2] ^ W[j - 3] ^ W[j -  9] ^ W[j - 11]);
   73|      0|         W[j + 6] = rotl<1>(W[j + 3] ^ W[j - 2] ^ W[j -  8] ^ W[j - 10]);
   74|      0|         W[j + 7] = rotl<1>(W[j + 4] ^ W[j - 1] ^ W[j -  7] ^ W[j -  9]);
   75|      0|      }
   76|       |
   77|       |      // clang-format on
   78|       |
   79|      0|      F1(A, B, C, D, E, W[0] + K1);
   80|      0|      F1(E, A, B, C, D, W[1] + K1);
   81|      0|      F1(D, E, A, B, C, W[2] + K1);
   82|      0|      F1(C, D, E, A, B, W[3] + K1);
   83|      0|      F1(B, C, D, E, A, W[4] + K1);
   84|      0|      F1(A, B, C, D, E, W[5] + K1);
   85|      0|      F1(E, A, B, C, D, W[6] + K1);
   86|      0|      F1(D, E, A, B, C, W[7] + K1);
   87|      0|      F1(C, D, E, A, B, W[8] + K1);
   88|      0|      F1(B, C, D, E, A, W[9] + K1);
   89|      0|      F1(A, B, C, D, E, W[10] + K1);
   90|      0|      F1(E, A, B, C, D, W[11] + K1);
   91|      0|      F1(D, E, A, B, C, W[12] + K1);
   92|      0|      F1(C, D, E, A, B, W[13] + K1);
   93|      0|      F1(B, C, D, E, A, W[14] + K1);
   94|      0|      F1(A, B, C, D, E, W[15] + K1);
   95|      0|      F1(E, A, B, C, D, W[16] + K1);
   96|      0|      F1(D, E, A, B, C, W[17] + K1);
   97|      0|      F1(C, D, E, A, B, W[18] + K1);
   98|      0|      F1(B, C, D, E, A, W[19] + K1);
   99|       |
  100|      0|      F2(A, B, C, D, E, W[20] + K2);
  101|      0|      F2(E, A, B, C, D, W[21] + K2);
  102|      0|      F2(D, E, A, B, C, W[22] + K2);
  103|      0|      F2(C, D, E, A, B, W[23] + K2);
  104|      0|      F2(B, C, D, E, A, W[24] + K2);
  105|      0|      F2(A, B, C, D, E, W[25] + K2);
  106|      0|      F2(E, A, B, C, D, W[26] + K2);
  107|      0|      F2(D, E, A, B, C, W[27] + K2);
  108|      0|      F2(C, D, E, A, B, W[28] + K2);
  109|      0|      F2(B, C, D, E, A, W[29] + K2);
  110|      0|      F2(A, B, C, D, E, W[30] + K2);
  111|      0|      F2(E, A, B, C, D, W[31] + K2);
  112|      0|      F2(D, E, A, B, C, W[32] + K2);
  113|      0|      F2(C, D, E, A, B, W[33] + K2);
  114|      0|      F2(B, C, D, E, A, W[34] + K2);
  115|      0|      F2(A, B, C, D, E, W[35] + K2);
  116|      0|      F2(E, A, B, C, D, W[36] + K2);
  117|      0|      F2(D, E, A, B, C, W[37] + K2);
  118|      0|      F2(C, D, E, A, B, W[38] + K2);
  119|      0|      F2(B, C, D, E, A, W[39] + K2);
  120|       |
  121|      0|      F3(A, B, C, D, E, W[40] + K3);
  122|      0|      F3(E, A, B, C, D, W[41] + K3);
  123|      0|      F3(D, E, A, B, C, W[42] + K3);
  124|      0|      F3(C, D, E, A, B, W[43] + K3);
  125|      0|      F3(B, C, D, E, A, W[44] + K3);
  126|      0|      F3(A, B, C, D, E, W[45] + K3);
  127|      0|      F3(E, A, B, C, D, W[46] + K3);
  128|      0|      F3(D, E, A, B, C, W[47] + K3);
  129|      0|      F3(C, D, E, A, B, W[48] + K3);
  130|      0|      F3(B, C, D, E, A, W[49] + K3);
  131|      0|      F3(A, B, C, D, E, W[50] + K3);
  132|      0|      F3(E, A, B, C, D, W[51] + K3);
  133|      0|      F3(D, E, A, B, C, W[52] + K3);
  134|      0|      F3(C, D, E, A, B, W[53] + K3);
  135|      0|      F3(B, C, D, E, A, W[54] + K3);
  136|      0|      F3(A, B, C, D, E, W[55] + K3);
  137|      0|      F3(E, A, B, C, D, W[56] + K3);
  138|      0|      F3(D, E, A, B, C, W[57] + K3);
  139|      0|      F3(C, D, E, A, B, W[58] + K3);
  140|      0|      F3(B, C, D, E, A, W[59] + K3);
  141|       |
  142|      0|      F4(A, B, C, D, E, W[60] + K4);
  143|      0|      F4(E, A, B, C, D, W[61] + K4);
  144|      0|      F4(D, E, A, B, C, W[62] + K4);
  145|      0|      F4(C, D, E, A, B, W[63] + K4);
  146|      0|      F4(B, C, D, E, A, W[64] + K4);
  147|      0|      F4(A, B, C, D, E, W[65] + K4);
  148|      0|      F4(E, A, B, C, D, W[66] + K4);
  149|      0|      F4(D, E, A, B, C, W[67] + K4);
  150|      0|      F4(C, D, E, A, B, W[68] + K4);
  151|      0|      F4(B, C, D, E, A, W[69] + K4);
  152|      0|      F4(A, B, C, D, E, W[70] + K4);
  153|      0|      F4(E, A, B, C, D, W[71] + K4);
  154|      0|      F4(D, E, A, B, C, W[72] + K4);
  155|      0|      F4(C, D, E, A, B, W[73] + K4);
  156|      0|      F4(B, C, D, E, A, W[74] + K4);
  157|      0|      F4(A, B, C, D, E, W[75] + K4);
  158|      0|      F4(E, A, B, C, D, W[76] + K4);
  159|      0|      F4(D, E, A, B, C, W[77] + K4);
  160|      0|      F4(C, D, E, A, B, W[78] + K4);
  161|      0|      F4(B, C, D, E, A, W[79] + K4);
  162|       |
  163|      0|      A = (digest[0] += A);
  164|      0|      B = (digest[1] += B);
  165|      0|      C = (digest[2] += C);
  166|      0|      D = (digest[3] += D);
  167|      0|      E = (digest[4] += E);
  168|      0|   }
  169|      0|}
_ZN5Botan5SHA_14initERNSt3__16vectorIjNS_16secure_allocatorIjEEEE:
  174|  3.07k|void SHA_1::init(digest_type& digest) {
  175|  3.07k|   digest.assign({0x67452301, 0xEFCDAB89, 0x98BADCFE, 0x10325476, 0xC3D2E1F0});
  176|  3.07k|}
_ZN5Botan5SHA_18add_dataENSt3__14spanIKhLm18446744073709551615EEE:
  214|  2.45k|void SHA_1::add_data(std::span<const uint8_t> input) {
  215|  2.45k|   m_md.update(input);
  216|  2.45k|}
_ZN5Botan5SHA_112final_resultENSt3__14spanIhLm18446744073709551615EEE:
  218|  2.45k|void SHA_1::final_result(std::span<uint8_t> output) {
  219|  2.45k|   m_md.final(output);
  220|  2.45k|}

_ZN5Botan5SHA_115avx2_compress_nERNSt3__16vectorIjNS_16secure_allocatorIjEEEENS1_4spanIKhLm18446744073709551615EEEm:
  144|  4.79k|void BOTAN_FN_ISA_AVX2_BMI2 SHA_1::avx2_compress_n(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
  145|  4.79k|   using namespace SHA1_F;
  146|       |
  147|  4.79k|   const SIMD_8x32 K11 = SIMD_8x32::splat(K1);
  148|  4.79k|   const SIMD_8x32 K22 = SIMD_8x32::splat(K2);
  149|  4.79k|   const SIMD_8x32 K33 = SIMD_8x32::splat(K3);
  150|  4.79k|   const SIMD_8x32 K44 = SIMD_8x32::splat(K4);
  151|       |
  152|  4.79k|   const SIMD_8x32 K12(K1, K1, K1, K1, K2, K2, K2, K2);
  153|  4.79k|   const SIMD_8x32 K34(K3, K3, K3, K3, K4, K4, K4, K4);
  154|       |
  155|  4.79k|   uint32_t A = digest[0];
  156|  4.79k|   uint32_t B = digest[1];
  157|  4.79k|   uint32_t C = digest[2];
  158|  4.79k|   uint32_t D = digest[3];
  159|  4.79k|   uint32_t E = digest[4];
  160|       |
  161|  4.79k|   BufferSlicer in(input);
  162|       |
  163|  13.4k|   while(blocks >= 2) {
  ------------------
  |  Branch (163:10): [True: 8.63k, False: 4.79k]
  ------------------
  164|  8.63k|      const auto block = in.take(2 * block_bytes);
  165|  8.63k|      blocks -= 2;
  166|       |
  167|  8.63k|      uint32_t W2[80] = {0};
  168|       |
  169|  8.63k|      uint32_t PT[4];
  170|       |
  171|       |      // NOLINTNEXTLINE(*-container-data-pointer)
  172|  8.63k|      SIMD_8x32 XW0 = SIMD_8x32::load_be128(&block[0], &block[64]);
  173|  8.63k|      SIMD_8x32 XW1 = SIMD_8x32::load_be128(&block[16], &block[80]);
  174|  8.63k|      SIMD_8x32 XW2 = SIMD_8x32::load_be128(&block[32], &block[96]);
  175|  8.63k|      SIMD_8x32 XW3 = SIMD_8x32::load_be128(&block[48], &block[112]);
  176|       |
  177|  8.63k|      SIMD_8x32 P0 = XW0 + SIMD_8x32::splat(K1);
  178|  8.63k|      SIMD_8x32 P1 = XW1 + SIMD_8x32::splat(K1);
  179|  8.63k|      SIMD_8x32 P2 = XW2 + SIMD_8x32::splat(K1);
  180|  8.63k|      SIMD_8x32 P3 = XW3 + SIMD_8x32::splat(K1);
  181|       |
  182|       |      // NOLINTBEGIN(readability-suspicious-call-argument) XW rotation
  183|       |
  184|  8.63k|      P0.store_le128(PT, &W2[0]);
  185|  8.63k|      P0 = sha1_avx2_next_w(XW0, XW1, XW2, XW3) + SIMD_8x32::splat(K1);
  186|  8.63k|      F1(A, B, C, D, E, PT[0]);
  187|  8.63k|      F1(E, A, B, C, D, PT[1]);
  188|  8.63k|      F1(D, E, A, B, C, PT[2]);
  189|  8.63k|      F1(C, D, E, A, B, PT[3]);
  190|       |
  191|  8.63k|      P1.store_le128(PT, &W2[4]);
  192|  8.63k|      P1 = sha1_avx2_next_w(XW1, XW2, XW3, XW0) + SIMD_8x32::splat(K2);
  193|  8.63k|      F1(B, C, D, E, A, PT[0]);
  194|  8.63k|      F1(A, B, C, D, E, PT[1]);
  195|  8.63k|      F1(E, A, B, C, D, PT[2]);
  196|  8.63k|      F1(D, E, A, B, C, PT[3]);
  197|       |
  198|  8.63k|      P2.store_le128(PT, &W2[8]);
  199|  8.63k|      P2 = sha1_avx2_next_w(XW2, XW3, XW0, XW1) + SIMD_8x32::splat(K2);
  200|  8.63k|      F1(C, D, E, A, B, PT[0]);
  201|  8.63k|      F1(B, C, D, E, A, PT[1]);
  202|  8.63k|      F1(A, B, C, D, E, PT[2]);
  203|  8.63k|      F1(E, A, B, C, D, PT[3]);
  204|       |
  205|  8.63k|      P3.store_le128(PT, &W2[12]);
  206|  8.63k|      P3 = sha1_avx2_next_w(XW3, XW0, XW1, XW2) + SIMD_8x32::splat(K2);
  207|  8.63k|      F1(D, E, A, B, C, PT[0]);
  208|  8.63k|      F1(C, D, E, A, B, PT[1]);
  209|  8.63k|      F1(B, C, D, E, A, PT[2]);
  210|  8.63k|      F1(A, B, C, D, E, PT[3]);
  211|       |
  212|  8.63k|      P0.store_le128(PT, &W2[16]);
  213|  8.63k|      P0 = sha1_avx2_next_w(XW0, XW1, XW2, XW3) + SIMD_8x32::splat(K2);
  214|  8.63k|      F1(E, A, B, C, D, PT[0]);
  215|  8.63k|      F1(D, E, A, B, C, PT[1]);
  216|  8.63k|      F1(C, D, E, A, B, PT[2]);
  217|  8.63k|      F1(B, C, D, E, A, PT[3]);
  218|       |
  219|  8.63k|      P1.store_le128(PT, &W2[20]);
  220|  8.63k|      P1 = sha1_avx2_next_w(XW1, XW2, XW3, XW0) + SIMD_8x32::splat(K2);
  221|  8.63k|      F2(A, B, C, D, E, PT[0]);
  222|  8.63k|      F2(E, A, B, C, D, PT[1]);
  223|  8.63k|      F2(D, E, A, B, C, PT[2]);
  224|  8.63k|      F2(C, D, E, A, B, PT[3]);
  225|       |
  226|  8.63k|      P2.store_le128(PT, &W2[24]);
  227|  8.63k|      P2 = sha1_avx2_next_w(XW2, XW3, XW0, XW1) + SIMD_8x32::splat(K3);
  228|  8.63k|      F2(B, C, D, E, A, PT[0]);
  229|  8.63k|      F2(A, B, C, D, E, PT[1]);
  230|  8.63k|      F2(E, A, B, C, D, PT[2]);
  231|  8.63k|      F2(D, E, A, B, C, PT[3]);
  232|       |
  233|  8.63k|      P3.store_le128(PT, &W2[28]);
  234|  8.63k|      P3 = sha1_avx2_next_w(XW3, XW0, XW1, XW2) + SIMD_8x32::splat(K3);
  235|  8.63k|      F2(C, D, E, A, B, PT[0]);
  236|  8.63k|      F2(B, C, D, E, A, PT[1]);
  237|  8.63k|      F2(A, B, C, D, E, PT[2]);
  238|  8.63k|      F2(E, A, B, C, D, PT[3]);
  239|       |
  240|  8.63k|      P0.store_le128(PT, &W2[32]);
  241|  8.63k|      P0 = sha1_avx2_next_w(XW0, XW1, XW2, XW3) + SIMD_8x32::splat(K3);
  242|  8.63k|      F2(D, E, A, B, C, PT[0]);
  243|  8.63k|      F2(C, D, E, A, B, PT[1]);
  244|  8.63k|      F2(B, C, D, E, A, PT[2]);
  245|  8.63k|      F2(A, B, C, D, E, PT[3]);
  246|       |
  247|  8.63k|      P1.store_le128(PT, &W2[36]);
  248|  8.63k|      P1 = sha1_avx2_next_w(XW1, XW2, XW3, XW0) + SIMD_8x32::splat(K3);
  249|  8.63k|      F2(E, A, B, C, D, PT[0]);
  250|  8.63k|      F2(D, E, A, B, C, PT[1]);
  251|  8.63k|      F2(C, D, E, A, B, PT[2]);
  252|  8.63k|      F2(B, C, D, E, A, PT[3]);
  253|       |
  254|  8.63k|      P2.store_le128(PT, &W2[40]);
  255|  8.63k|      P2 = sha1_avx2_next_w(XW2, XW3, XW0, XW1) + SIMD_8x32::splat(K3);
  256|  8.63k|      F3(A, B, C, D, E, PT[0]);
  257|  8.63k|      F3(E, A, B, C, D, PT[1]);
  258|  8.63k|      F3(D, E, A, B, C, PT[2]);
  259|  8.63k|      F3(C, D, E, A, B, PT[3]);
  260|       |
  261|  8.63k|      P3.store_le128(PT, &W2[44]);
  262|  8.63k|      P3 = sha1_avx2_next_w(XW3, XW0, XW1, XW2) + SIMD_8x32::splat(K4);
  263|  8.63k|      F3(B, C, D, E, A, PT[0]);
  264|  8.63k|      F3(A, B, C, D, E, PT[1]);
  265|  8.63k|      F3(E, A, B, C, D, PT[2]);
  266|  8.63k|      F3(D, E, A, B, C, PT[3]);
  267|       |
  268|  8.63k|      P0.store_le128(PT, &W2[48]);
  269|  8.63k|      P0 = sha1_avx2_next_w(XW0, XW1, XW2, XW3) + SIMD_8x32::splat(K4);
  270|  8.63k|      F3(C, D, E, A, B, PT[0]);
  271|  8.63k|      F3(B, C, D, E, A, PT[1]);
  272|  8.63k|      F3(A, B, C, D, E, PT[2]);
  273|  8.63k|      F3(E, A, B, C, D, PT[3]);
  274|       |
  275|  8.63k|      P1.store_le128(PT, &W2[52]);
  276|  8.63k|      P1 = sha1_avx2_next_w(XW1, XW2, XW3, XW0) + SIMD_8x32::splat(K4);
  277|  8.63k|      F3(D, E, A, B, C, PT[0]);
  278|  8.63k|      F3(C, D, E, A, B, PT[1]);
  279|  8.63k|      F3(B, C, D, E, A, PT[2]);
  280|  8.63k|      F3(A, B, C, D, E, PT[3]);
  281|       |
  282|  8.63k|      P2.store_le128(PT, &W2[56]);
  283|  8.63k|      P2 = sha1_avx2_next_w(XW2, XW3, XW0, XW1) + SIMD_8x32::splat(K4);
  284|  8.63k|      F3(E, A, B, C, D, PT[0]);
  285|  8.63k|      F3(D, E, A, B, C, PT[1]);
  286|  8.63k|      F3(C, D, E, A, B, PT[2]);
  287|  8.63k|      F3(B, C, D, E, A, PT[3]);
  288|       |
  289|  8.63k|      P3.store_le128(PT, &W2[60]);
  290|  8.63k|      P3 = sha1_avx2_next_w(XW3, XW0, XW1, XW2) + SIMD_8x32::splat(K4);
  291|  8.63k|      F4(A, B, C, D, E, PT[0]);
  292|  8.63k|      F4(E, A, B, C, D, PT[1]);
  293|  8.63k|      F4(D, E, A, B, C, PT[2]);
  294|  8.63k|      F4(C, D, E, A, B, PT[3]);
  295|       |
  296|  8.63k|      P0.store_le128(PT, &W2[64]);
  297|  8.63k|      F4(B, C, D, E, A, PT[0]);
  298|  8.63k|      F4(A, B, C, D, E, PT[1]);
  299|  8.63k|      F4(E, A, B, C, D, PT[2]);
  300|  8.63k|      F4(D, E, A, B, C, PT[3]);
  301|       |
  302|  8.63k|      P1.store_le128(PT, &W2[68]);
  303|  8.63k|      F4(C, D, E, A, B, PT[0]);
  304|  8.63k|      F4(B, C, D, E, A, PT[1]);
  305|  8.63k|      F4(A, B, C, D, E, PT[2]);
  306|  8.63k|      F4(E, A, B, C, D, PT[3]);
  307|       |
  308|  8.63k|      P2.store_le128(PT, &W2[72]);
  309|  8.63k|      F4(D, E, A, B, C, PT[0]);
  310|  8.63k|      F4(C, D, E, A, B, PT[1]);
  311|  8.63k|      F4(B, C, D, E, A, PT[2]);
  312|  8.63k|      F4(A, B, C, D, E, PT[3]);
  313|       |
  314|  8.63k|      P3.store_le128(PT, &W2[76]);
  315|  8.63k|      F4(E, A, B, C, D, PT[0]);
  316|  8.63k|      F4(D, E, A, B, C, PT[1]);
  317|  8.63k|      F4(C, D, E, A, B, PT[2]);
  318|  8.63k|      F4(B, C, D, E, A, PT[3]);
  319|       |
  320|       |      // NOLINTEND(readability-suspicious-call-argument)
  321|       |
  322|  8.63k|      A = (digest[0] += A);
  323|  8.63k|      B = (digest[1] += B);
  324|  8.63k|      C = (digest[2] += C);
  325|  8.63k|      D = (digest[3] += D);
  326|  8.63k|      E = (digest[4] += E);
  327|       |
  328|       |      // Second block with pre-expanded message
  329|  8.63k|      F1(A, B, C, D, E, W2[0]);
  330|  8.63k|      F1(E, A, B, C, D, W2[1]);
  331|  8.63k|      F1(D, E, A, B, C, W2[2]);
  332|  8.63k|      F1(C, D, E, A, B, W2[3]);
  333|  8.63k|      F1(B, C, D, E, A, W2[4]);
  334|  8.63k|      F1(A, B, C, D, E, W2[5]);
  335|  8.63k|      F1(E, A, B, C, D, W2[6]);
  336|  8.63k|      F1(D, E, A, B, C, W2[7]);
  337|  8.63k|      F1(C, D, E, A, B, W2[8]);
  338|  8.63k|      F1(B, C, D, E, A, W2[9]);
  339|  8.63k|      F1(A, B, C, D, E, W2[10]);
  340|  8.63k|      F1(E, A, B, C, D, W2[11]);
  341|  8.63k|      F1(D, E, A, B, C, W2[12]);
  342|  8.63k|      F1(C, D, E, A, B, W2[13]);
  343|  8.63k|      F1(B, C, D, E, A, W2[14]);
  344|  8.63k|      F1(A, B, C, D, E, W2[15]);
  345|  8.63k|      F1(E, A, B, C, D, W2[16]);
  346|  8.63k|      F1(D, E, A, B, C, W2[17]);
  347|  8.63k|      F1(C, D, E, A, B, W2[18]);
  348|  8.63k|      F1(B, C, D, E, A, W2[19]);
  349|  8.63k|      F2(A, B, C, D, E, W2[20]);
  350|  8.63k|      F2(E, A, B, C, D, W2[21]);
  351|  8.63k|      F2(D, E, A, B, C, W2[22]);
  352|  8.63k|      F2(C, D, E, A, B, W2[23]);
  353|  8.63k|      F2(B, C, D, E, A, W2[24]);
  354|  8.63k|      F2(A, B, C, D, E, W2[25]);
  355|  8.63k|      F2(E, A, B, C, D, W2[26]);
  356|  8.63k|      F2(D, E, A, B, C, W2[27]);
  357|  8.63k|      F2(C, D, E, A, B, W2[28]);
  358|  8.63k|      F2(B, C, D, E, A, W2[29]);
  359|  8.63k|      F2(A, B, C, D, E, W2[30]);
  360|  8.63k|      F2(E, A, B, C, D, W2[31]);
  361|  8.63k|      F2(D, E, A, B, C, W2[32]);
  362|  8.63k|      F2(C, D, E, A, B, W2[33]);
  363|  8.63k|      F2(B, C, D, E, A, W2[34]);
  364|  8.63k|      F2(A, B, C, D, E, W2[35]);
  365|  8.63k|      F2(E, A, B, C, D, W2[36]);
  366|  8.63k|      F2(D, E, A, B, C, W2[37]);
  367|  8.63k|      F2(C, D, E, A, B, W2[38]);
  368|  8.63k|      F2(B, C, D, E, A, W2[39]);
  369|  8.63k|      F3(A, B, C, D, E, W2[40]);
  370|  8.63k|      F3(E, A, B, C, D, W2[41]);
  371|  8.63k|      F3(D, E, A, B, C, W2[42]);
  372|  8.63k|      F3(C, D, E, A, B, W2[43]);
  373|  8.63k|      F3(B, C, D, E, A, W2[44]);
  374|  8.63k|      F3(A, B, C, D, E, W2[45]);
  375|  8.63k|      F3(E, A, B, C, D, W2[46]);
  376|  8.63k|      F3(D, E, A, B, C, W2[47]);
  377|  8.63k|      F3(C, D, E, A, B, W2[48]);
  378|  8.63k|      F3(B, C, D, E, A, W2[49]);
  379|  8.63k|      F3(A, B, C, D, E, W2[50]);
  380|  8.63k|      F3(E, A, B, C, D, W2[51]);
  381|  8.63k|      F3(D, E, A, B, C, W2[52]);
  382|  8.63k|      F3(C, D, E, A, B, W2[53]);
  383|  8.63k|      F3(B, C, D, E, A, W2[54]);
  384|  8.63k|      F3(A, B, C, D, E, W2[55]);
  385|  8.63k|      F3(E, A, B, C, D, W2[56]);
  386|  8.63k|      F3(D, E, A, B, C, W2[57]);
  387|  8.63k|      F3(C, D, E, A, B, W2[58]);
  388|  8.63k|      F3(B, C, D, E, A, W2[59]);
  389|  8.63k|      F4(A, B, C, D, E, W2[60]);
  390|  8.63k|      F4(E, A, B, C, D, W2[61]);
  391|  8.63k|      F4(D, E, A, B, C, W2[62]);
  392|  8.63k|      F4(C, D, E, A, B, W2[63]);
  393|  8.63k|      F4(B, C, D, E, A, W2[64]);
  394|  8.63k|      F4(A, B, C, D, E, W2[65]);
  395|  8.63k|      F4(E, A, B, C, D, W2[66]);
  396|  8.63k|      F4(D, E, A, B, C, W2[67]);
  397|  8.63k|      F4(C, D, E, A, B, W2[68]);
  398|  8.63k|      F4(B, C, D, E, A, W2[69]);
  399|  8.63k|      F4(A, B, C, D, E, W2[70]);
  400|  8.63k|      F4(E, A, B, C, D, W2[71]);
  401|  8.63k|      F4(D, E, A, B, C, W2[72]);
  402|  8.63k|      F4(C, D, E, A, B, W2[73]);
  403|  8.63k|      F4(B, C, D, E, A, W2[74]);
  404|  8.63k|      F4(A, B, C, D, E, W2[75]);
  405|  8.63k|      F4(E, A, B, C, D, W2[76]);
  406|  8.63k|      F4(D, E, A, B, C, W2[77]);
  407|  8.63k|      F4(C, D, E, A, B, W2[78]);
  408|  8.63k|      F4(B, C, D, E, A, W2[79]);
  409|       |
  410|  8.63k|      A = (digest[0] += A);
  411|  8.63k|      B = (digest[1] += B);
  412|  8.63k|      C = (digest[2] += C);
  413|  8.63k|      D = (digest[3] += D);
  414|  8.63k|      E = (digest[4] += E);
  415|  8.63k|   }
  416|       |
  417|  8.68k|   for(size_t i = 0; i != blocks; ++i) {
  ------------------
  |  Branch (417:22): [True: 3.88k, False: 4.79k]
  ------------------
  418|  3.88k|      uint32_t PT[8];
  419|       |
  420|  3.88k|      const auto block = in.take(block_bytes);
  421|       |
  422|  3.88k|      SIMD_8x32 W0 = SIMD_8x32::load_be(&block[0]);  // NOLINT(*-container-data-pointer)
  423|  3.88k|      SIMD_8x32 W2 = SIMD_8x32::load_be(&block[32]);
  424|       |
  425|  3.88k|      SIMD_8x32 P0 = W0 + K11;
  426|  3.88k|      SIMD_8x32 P2 = W2 + K11;
  427|       |
  428|  3.88k|      P0.store_le(PT);
  429|  3.88k|      P0 = sha1_avx2_next_w2(W0, W2) + K12;
  430|       |
  431|  3.88k|      F1(A, B, C, D, E, PT[0]);
  432|  3.88k|      F1(E, A, B, C, D, PT[1]);
  433|  3.88k|      F1(D, E, A, B, C, PT[2]);
  434|  3.88k|      F1(C, D, E, A, B, PT[3]);
  435|  3.88k|      F1(B, C, D, E, A, PT[4]);
  436|  3.88k|      F1(A, B, C, D, E, PT[5]);
  437|  3.88k|      F1(E, A, B, C, D, PT[6]);
  438|  3.88k|      F1(D, E, A, B, C, PT[7]);
  439|       |
  440|  3.88k|      P2.store_le(PT);
  441|  3.88k|      P2 = sha1_avx2_next_w2(W2, W0) + K22;
  442|       |
  443|  3.88k|      F1(C, D, E, A, B, PT[0]);
  444|  3.88k|      F1(B, C, D, E, A, PT[1]);
  445|  3.88k|      F1(A, B, C, D, E, PT[2]);
  446|  3.88k|      F1(E, A, B, C, D, PT[3]);
  447|  3.88k|      F1(D, E, A, B, C, PT[4]);
  448|  3.88k|      F1(C, D, E, A, B, PT[5]);
  449|  3.88k|      F1(B, C, D, E, A, PT[6]);
  450|  3.88k|      F1(A, B, C, D, E, PT[7]);
  451|       |
  452|  3.88k|      P0.store_le(PT);
  453|  3.88k|      P0 = sha1_avx2_next_w2(W0, W2) + K22;
  454|       |
  455|  3.88k|      F1(E, A, B, C, D, PT[0]);
  456|  3.88k|      F1(D, E, A, B, C, PT[1]);
  457|  3.88k|      F1(C, D, E, A, B, PT[2]);
  458|  3.88k|      F1(B, C, D, E, A, PT[3]);
  459|  3.88k|      F2(A, B, C, D, E, PT[4]);
  460|  3.88k|      F2(E, A, B, C, D, PT[5]);
  461|  3.88k|      F2(D, E, A, B, C, PT[6]);
  462|  3.88k|      F2(C, D, E, A, B, PT[7]);
  463|       |
  464|  3.88k|      P2.store_le(PT);
  465|  3.88k|      P2 = sha1_avx2_next_w2(W2, W0) + K33;
  466|       |
  467|  3.88k|      F2(B, C, D, E, A, PT[0]);
  468|  3.88k|      F2(A, B, C, D, E, PT[1]);
  469|  3.88k|      F2(E, A, B, C, D, PT[2]);
  470|  3.88k|      F2(D, E, A, B, C, PT[3]);
  471|  3.88k|      F2(C, D, E, A, B, PT[4]);
  472|  3.88k|      F2(B, C, D, E, A, PT[5]);
  473|  3.88k|      F2(A, B, C, D, E, PT[6]);
  474|  3.88k|      F2(E, A, B, C, D, PT[7]);
  475|       |
  476|  3.88k|      P0.store_le(PT);
  477|  3.88k|      P0 = sha1_avx2_next_w2(W0, W2) + K33;
  478|       |
  479|  3.88k|      F2(D, E, A, B, C, PT[0]);
  480|  3.88k|      F2(C, D, E, A, B, PT[1]);
  481|  3.88k|      F2(B, C, D, E, A, PT[2]);
  482|  3.88k|      F2(A, B, C, D, E, PT[3]);
  483|  3.88k|      F2(E, A, B, C, D, PT[4]);
  484|  3.88k|      F2(D, E, A, B, C, PT[5]);
  485|  3.88k|      F2(C, D, E, A, B, PT[6]);
  486|  3.88k|      F2(B, C, D, E, A, PT[7]);
  487|       |
  488|  3.88k|      P2.store_le(PT);
  489|  3.88k|      P2 = sha1_avx2_next_w2(W2, W0) + K34;
  490|       |
  491|  3.88k|      F3(A, B, C, D, E, PT[0]);
  492|  3.88k|      F3(E, A, B, C, D, PT[1]);
  493|  3.88k|      F3(D, E, A, B, C, PT[2]);
  494|  3.88k|      F3(C, D, E, A, B, PT[3]);
  495|  3.88k|      F3(B, C, D, E, A, PT[4]);
  496|  3.88k|      F3(A, B, C, D, E, PT[5]);
  497|  3.88k|      F3(E, A, B, C, D, PT[6]);
  498|  3.88k|      F3(D, E, A, B, C, PT[7]);
  499|       |
  500|  3.88k|      P0.store_le(PT);
  501|  3.88k|      P0 = sha1_avx2_next_w2(W0, W2) + K44;
  502|       |
  503|  3.88k|      F3(C, D, E, A, B, PT[0]);
  504|  3.88k|      F3(B, C, D, E, A, PT[1]);
  505|  3.88k|      F3(A, B, C, D, E, PT[2]);
  506|  3.88k|      F3(E, A, B, C, D, PT[3]);
  507|  3.88k|      F3(D, E, A, B, C, PT[4]);
  508|  3.88k|      F3(C, D, E, A, B, PT[5]);
  509|  3.88k|      F3(B, C, D, E, A, PT[6]);
  510|  3.88k|      F3(A, B, C, D, E, PT[7]);
  511|       |
  512|  3.88k|      P2.store_le(PT);
  513|  3.88k|      P2 = sha1_avx2_next_w2(W2, W0) + K44;
  514|       |
  515|  3.88k|      F3(E, A, B, C, D, PT[0]);
  516|  3.88k|      F3(D, E, A, B, C, PT[1]);
  517|  3.88k|      F3(C, D, E, A, B, PT[2]);
  518|  3.88k|      F3(B, C, D, E, A, PT[3]);
  519|  3.88k|      F4(A, B, C, D, E, PT[4]);
  520|  3.88k|      F4(E, A, B, C, D, PT[5]);
  521|  3.88k|      F4(D, E, A, B, C, PT[6]);
  522|  3.88k|      F4(C, D, E, A, B, PT[7]);
  523|       |
  524|  3.88k|      P0.store_le(PT);
  525|       |
  526|  3.88k|      F4(B, C, D, E, A, PT[0]);
  527|  3.88k|      F4(A, B, C, D, E, PT[1]);
  528|  3.88k|      F4(E, A, B, C, D, PT[2]);
  529|  3.88k|      F4(D, E, A, B, C, PT[3]);
  530|  3.88k|      F4(C, D, E, A, B, PT[4]);
  531|  3.88k|      F4(B, C, D, E, A, PT[5]);
  532|  3.88k|      F4(A, B, C, D, E, PT[6]);
  533|  3.88k|      F4(E, A, B, C, D, PT[7]);
  534|       |
  535|  3.88k|      P2.store_le(PT);
  536|       |
  537|  3.88k|      F4(D, E, A, B, C, PT[0]);
  538|  3.88k|      F4(C, D, E, A, B, PT[1]);
  539|  3.88k|      F4(B, C, D, E, A, PT[2]);
  540|  3.88k|      F4(A, B, C, D, E, PT[3]);
  541|  3.88k|      F4(E, A, B, C, D, PT[4]);
  542|  3.88k|      F4(D, E, A, B, C, PT[5]);
  543|  3.88k|      F4(C, D, E, A, B, PT[6]);
  544|  3.88k|      F4(B, C, D, E, A, PT[7]);
  545|       |
  546|  3.88k|      A = (digest[0] += A);
  547|  3.88k|      B = (digest[1] += B);
  548|  3.88k|      C = (digest[2] += C);
  549|  3.88k|      D = (digest[3] += D);
  550|  3.88k|      E = (digest[4] += E);
  551|  3.88k|   }
  552|  4.79k|}
sha1_avx2.cpp:_ZN5Botan12_GLOBAL__N_116sha1_avx2_next_wERNS_9SIMD_8x32ES1_S1_S1_:
   27|   138k|                                                                     SIMD_8x32 XW3) {
   28|   138k|   SIMD_8x32 T0 = XW0;  // W[t-16..t-13]
   29|   138k|   T0 ^= SIMD_8x32(_mm256_alignr_epi8(XW1.raw(), XW0.raw(), 8));
   30|   138k|   T0 ^= XW2;                                         // W[t-8..t-5]
   31|   138k|   T0 ^= SIMD_8x32(_mm256_srli_si256(XW3.raw(), 4));  // W[t-3..t-1] || 0
   32|       |
   33|       |   /* unrotated W[t]..W[t+2] in T0 ... still need W[t+3] */
   34|       |
   35|       |   // Extract w[t+0] into T2
   36|   138k|   auto T2 = SIMD_8x32(_mm256_slli_si256(T0.raw(), 3 * 4));
   37|       |
   38|       |   // Main rotation
   39|   138k|   T0 = T0.rotl<1>();
   40|       |
   41|       |   // Rotation of W[t+3] has rot by 2 to account for us working on non-rotated words
   42|   138k|   T2 = T2.rotl<2>();
   43|       |
   44|       |   // Merge rol(W[t+0], 1) into W[t+3]
   45|   138k|   T0 ^= T2;
   46|       |
   47|   138k|   XW0 = T0;
   48|   138k|   return T0;
   49|   138k|}
sha1_avx2.cpp:_ZN5Botan12_GLOBAL__N_117sha1_avx2_next_w2ERNS_9SIMD_8x32ES1_:
  115|  31.0k|BOTAN_FN_ISA_AVX2_BMI2 BOTAN_FORCE_INLINE SIMD_8x32 sha1_avx2_next_w2(SIMD_8x32& W0, SIMD_8x32 W2) {
  116|       |   // W[j-16..j-9] ^ W[j-8...j-1]
  117|  31.0k|   auto WN = W0 ^ W2;
  118|       |
  119|       |   // XOR in W[j-3..j-1] || 0 || 0 || 0 || W[j-8...j-7]
  120|  31.0k|   WN ^= permute_words<5, 6, 7, -1, -1, -1, 0, 1>(W2);
  121|       |
  122|       |   // XOR in W[j-14...j-9] || 0 || 0
  123|  31.0k|   WN ^= permute_words<2, 3, 4, 5, 6, 7, -1, -1>(W0);
  124|       |
  125|       |   // Extract W[j...j+2], rotate, and XOR into W[j+3...j+5]
  126|  31.0k|   auto T0 = permute_words<-1, -1, -1, 0, 1, 2, -1, -1>(WN).rotl<2>();
  127|  31.0k|   WN = WN.rotl<1>();  // main block rotation
  128|       |
  129|  31.0k|   WN ^= T0;
  130|       |
  131|       |   // Extract W[j+3...j+4], rotate, and XOR into W[j+6...j+7]
  132|  31.0k|   WN ^= permute_words<-1, -1, -1, -1, -1, -1, 3, 4>(WN).rotl<1>();
  133|       |
  134|  31.0k|   W0 = WN;
  135|  31.0k|   return WN;
  136|  31.0k|}
sha1_avx2.cpp:_ZN5Botan12_GLOBAL__N_113permute_wordsILi5ELi6ELi7ELin1ELin1ELin1ELi0ELi1EEENS_9SIMD_8x32ES2_:
   58|  31.0k|BOTAN_FN_ISA_AVX2_BMI2 BOTAN_FORCE_INLINE SIMD_8x32 permute_words(SIMD_8x32 v) {
   59|  31.0k|   const __m256i tbl = _mm256_setr_epi32(I0, I1, I2, I3, I4, I5, I6, I7);
   60|  31.0k|   const __m256i mask = _mm256_setr_epi32(I0 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (60:43): [True: 31.0k, Folded]
  ------------------
   61|  31.0k|                                          I1 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (61:43): [True: 31.0k, Folded]
  ------------------
   62|  31.0k|                                          I2 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (62:43): [True: 31.0k, Folded]
  ------------------
   63|  31.0k|                                          I3 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (63:43): [Folded, False: 31.0k]
  ------------------
   64|  31.0k|                                          I4 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (64:43): [Folded, False: 31.0k]
  ------------------
   65|  31.0k|                                          I5 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (65:43): [Folded, False: 31.0k]
  ------------------
   66|  31.0k|                                          I6 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (66:43): [True: 31.0k, Folded]
  ------------------
   67|  31.0k|                                          I7 >= 0 ? 0xFFFFFFFF : 0);
  ------------------
  |  Branch (67:43): [True: 31.0k, Folded]
  ------------------
   68|       |
   69|  31.0k|   return SIMD_8x32(_mm256_and_si256(mask, _mm256_permutevar8x32_epi32(v.raw(), tbl)));
   70|  31.0k|}
sha1_avx2.cpp:_ZN5Botan12_GLOBAL__N_113permute_wordsILi2ELi3ELi4ELi5ELi6ELi7ELin1ELin1EEENS_9SIMD_8x32ES2_:
   58|  31.0k|BOTAN_FN_ISA_AVX2_BMI2 BOTAN_FORCE_INLINE SIMD_8x32 permute_words(SIMD_8x32 v) {
   59|  31.0k|   const __m256i tbl = _mm256_setr_epi32(I0, I1, I2, I3, I4, I5, I6, I7);
   60|  31.0k|   const __m256i mask = _mm256_setr_epi32(I0 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (60:43): [True: 31.0k, Folded]
  ------------------
   61|  31.0k|                                          I1 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (61:43): [True: 31.0k, Folded]
  ------------------
   62|  31.0k|                                          I2 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (62:43): [True: 31.0k, Folded]
  ------------------
   63|  31.0k|                                          I3 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (63:43): [True: 31.0k, Folded]
  ------------------
   64|  31.0k|                                          I4 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (64:43): [True: 31.0k, Folded]
  ------------------
   65|  31.0k|                                          I5 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (65:43): [True: 31.0k, Folded]
  ------------------
   66|  31.0k|                                          I6 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (66:43): [Folded, False: 31.0k]
  ------------------
   67|  31.0k|                                          I7 >= 0 ? 0xFFFFFFFF : 0);
  ------------------
  |  Branch (67:43): [Folded, False: 31.0k]
  ------------------
   68|       |
   69|  31.0k|   return SIMD_8x32(_mm256_and_si256(mask, _mm256_permutevar8x32_epi32(v.raw(), tbl)));
   70|  31.0k|}
sha1_avx2.cpp:_ZN5Botan12_GLOBAL__N_113permute_wordsILin1ELin1ELin1ELi0ELi1ELi2ELin1ELin1EEENS_9SIMD_8x32ES2_:
   58|  31.0k|BOTAN_FN_ISA_AVX2_BMI2 BOTAN_FORCE_INLINE SIMD_8x32 permute_words(SIMD_8x32 v) {
   59|  31.0k|   const __m256i tbl = _mm256_setr_epi32(I0, I1, I2, I3, I4, I5, I6, I7);
   60|  31.0k|   const __m256i mask = _mm256_setr_epi32(I0 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (60:43): [Folded, False: 31.0k]
  ------------------
   61|  31.0k|                                          I1 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (61:43): [Folded, False: 31.0k]
  ------------------
   62|  31.0k|                                          I2 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (62:43): [Folded, False: 31.0k]
  ------------------
   63|  31.0k|                                          I3 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (63:43): [True: 31.0k, Folded]
  ------------------
   64|  31.0k|                                          I4 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (64:43): [True: 31.0k, Folded]
  ------------------
   65|  31.0k|                                          I5 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (65:43): [True: 31.0k, Folded]
  ------------------
   66|  31.0k|                                          I6 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (66:43): [Folded, False: 31.0k]
  ------------------
   67|  31.0k|                                          I7 >= 0 ? 0xFFFFFFFF : 0);
  ------------------
  |  Branch (67:43): [Folded, False: 31.0k]
  ------------------
   68|       |
   69|  31.0k|   return SIMD_8x32(_mm256_and_si256(mask, _mm256_permutevar8x32_epi32(v.raw(), tbl)));
   70|  31.0k|}
sha1_avx2.cpp:_ZN5Botan12_GLOBAL__N_113permute_wordsILin1ELin1ELin1ELin1ELin1ELin1ELi3ELi4EEENS_9SIMD_8x32ES2_:
   58|  31.0k|BOTAN_FN_ISA_AVX2_BMI2 BOTAN_FORCE_INLINE SIMD_8x32 permute_words(SIMD_8x32 v) {
   59|  31.0k|   const __m256i tbl = _mm256_setr_epi32(I0, I1, I2, I3, I4, I5, I6, I7);
   60|  31.0k|   const __m256i mask = _mm256_setr_epi32(I0 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (60:43): [Folded, False: 31.0k]
  ------------------
   61|  31.0k|                                          I1 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (61:43): [Folded, False: 31.0k]
  ------------------
   62|  31.0k|                                          I2 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (62:43): [Folded, False: 31.0k]
  ------------------
   63|  31.0k|                                          I3 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (63:43): [Folded, False: 31.0k]
  ------------------
   64|  31.0k|                                          I4 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (64:43): [Folded, False: 31.0k]
  ------------------
   65|  31.0k|                                          I5 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (65:43): [Folded, False: 31.0k]
  ------------------
   66|  31.0k|                                          I6 >= 0 ? 0xFFFFFFFF : 0,
  ------------------
  |  Branch (66:43): [True: 31.0k, Folded]
  ------------------
   67|  31.0k|                                          I7 >= 0 ? 0xFFFFFFFF : 0);
  ------------------
  |  Branch (67:43): [True: 31.0k, Folded]
  ------------------
   68|       |
   69|  31.0k|   return SIMD_8x32(_mm256_and_si256(mask, _mm256_permutevar8x32_epi32(v.raw(), tbl)));
   70|  31.0k|}

_ZN5Botan7SHA_25615compress_digestERNSt3__16vectorIjNS_16secure_allocatorIjEEEENS1_4spanIKhLm18446744073709551615EEEm:
   59|  4.79k|                                                             size_t blocks) {
   60|  4.79k|#if defined(BOTAN_HAS_SHA2_32_X86)
   61|  4.79k|   if(CPUID::has(CPUID::Feature::SHA)) {
  ------------------
  |  Branch (61:7): [True: 0, False: 4.79k]
  ------------------
   62|      0|      return SHA_256::compress_digest_x86(digest, input, blocks);
   63|      0|   }
   64|  4.79k|#endif
   65|       |
   66|       |#if defined(BOTAN_HAS_SHA2_32_ARMV8)
   67|       |   if(CPUID::has(CPUID::Feature::SHA2)) {
   68|       |      return SHA_256::compress_digest_armv8(digest, input, blocks);
   69|       |   }
   70|       |#endif
   71|       |
   72|  4.79k|#if defined(BOTAN_HAS_SHA2_32_X86_AVX2)
   73|  4.79k|   if(CPUID::has(CPUID::Feature::AVX2, CPUID::Feature::BMI)) {
  ------------------
  |  Branch (73:7): [True: 4.79k, False: 0]
  ------------------
   74|  4.79k|      return SHA_256::compress_digest_x86_avx2(digest, input, blocks);
   75|  4.79k|   }
   76|      0|#endif
   77|       |
   78|      0|#if defined(BOTAN_HAS_SHA2_32_SIMD)
   79|      0|   if(CPUID::has(CPUID::Feature::SIMD_4X32)) {
  ------------------
  |  Branch (79:7): [True: 0, False: 0]
  ------------------
   80|      0|      return SHA_256::compress_digest_x86_simd(digest, input, blocks);
   81|      0|   }
   82|      0|#endif
   83|       |
   84|      0|   uint32_t A = digest[0];
   85|      0|   uint32_t B = digest[1];
   86|      0|   uint32_t C = digest[2];
   87|      0|   uint32_t D = digest[3];
   88|      0|   uint32_t E = digest[4];
   89|      0|   uint32_t F = digest[5];
   90|      0|   uint32_t G = digest[6];
   91|      0|   uint32_t H = digest[7];
   92|       |
   93|      0|   std::array<uint32_t, 16> W{};
   94|       |
   95|      0|   BufferSlicer in(input);
   96|       |
   97|      0|   for(size_t i = 0; i != blocks; ++i) {
  ------------------
  |  Branch (97:22): [True: 0, False: 0]
  ------------------
   98|      0|      load_be(W, in.take<block_bytes>());
   99|       |
  100|       |      // clang-format off
  101|       |
  102|      0|      SHA2_32_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], 0x428A2F98);
  103|      0|      SHA2_32_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], 0x71374491);
  104|      0|      SHA2_32_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], 0xB5C0FBCF);
  105|      0|      SHA2_32_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], 0xE9B5DBA5);
  106|      0|      SHA2_32_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], 0x3956C25B);
  107|      0|      SHA2_32_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], 0x59F111F1);
  108|      0|      SHA2_32_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], 0x923F82A4);
  109|      0|      SHA2_32_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], 0xAB1C5ED5);
  110|      0|      SHA2_32_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], 0xD807AA98);
  111|      0|      SHA2_32_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], 0x12835B01);
  112|      0|      SHA2_32_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], 0x243185BE);
  113|      0|      SHA2_32_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], 0x550C7DC3);
  114|      0|      SHA2_32_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], 0x72BE5D74);
  115|      0|      SHA2_32_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], 0x80DEB1FE);
  116|      0|      SHA2_32_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], 0x9BDC06A7);
  117|      0|      SHA2_32_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], 0xC19BF174);
  118|       |
  119|      0|      SHA2_32_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], 0xE49B69C1);
  120|      0|      SHA2_32_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], 0xEFBE4786);
  121|      0|      SHA2_32_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], 0x0FC19DC6);
  122|      0|      SHA2_32_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], 0x240CA1CC);
  123|      0|      SHA2_32_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], 0x2DE92C6F);
  124|      0|      SHA2_32_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], 0x4A7484AA);
  125|      0|      SHA2_32_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], 0x5CB0A9DC);
  126|      0|      SHA2_32_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], 0x76F988DA);
  127|      0|      SHA2_32_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], 0x983E5152);
  128|      0|      SHA2_32_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], 0xA831C66D);
  129|      0|      SHA2_32_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], 0xB00327C8);
  130|      0|      SHA2_32_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], 0xBF597FC7);
  131|      0|      SHA2_32_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], 0xC6E00BF3);
  132|      0|      SHA2_32_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], 0xD5A79147);
  133|      0|      SHA2_32_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], 0x06CA6351);
  134|      0|      SHA2_32_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], 0x14292967);
  135|       |
  136|      0|      SHA2_32_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], 0x27B70A85);
  137|      0|      SHA2_32_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], 0x2E1B2138);
  138|      0|      SHA2_32_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], 0x4D2C6DFC);
  139|      0|      SHA2_32_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], 0x53380D13);
  140|      0|      SHA2_32_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], 0x650A7354);
  141|      0|      SHA2_32_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], 0x766A0ABB);
  142|      0|      SHA2_32_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], 0x81C2C92E);
  143|      0|      SHA2_32_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], 0x92722C85);
  144|      0|      SHA2_32_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], 0xA2BFE8A1);
  145|      0|      SHA2_32_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], 0xA81A664B);
  146|      0|      SHA2_32_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], 0xC24B8B70);
  147|      0|      SHA2_32_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], 0xC76C51A3);
  148|      0|      SHA2_32_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], 0xD192E819);
  149|      0|      SHA2_32_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], 0xD6990624);
  150|      0|      SHA2_32_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], 0xF40E3585);
  151|      0|      SHA2_32_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], 0x106AA070);
  152|       |
  153|      0|      SHA2_32_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], 0x19A4C116);
  154|      0|      SHA2_32_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], 0x1E376C08);
  155|      0|      SHA2_32_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], 0x2748774C);
  156|      0|      SHA2_32_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], 0x34B0BCB5);
  157|      0|      SHA2_32_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], 0x391C0CB3);
  158|      0|      SHA2_32_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], 0x4ED8AA4A);
  159|      0|      SHA2_32_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], 0x5B9CCA4F);
  160|      0|      SHA2_32_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], 0x682E6FF3);
  161|      0|      SHA2_32_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], 0x748F82EE);
  162|      0|      SHA2_32_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], 0x78A5636F);
  163|      0|      SHA2_32_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], 0x84C87814);
  164|      0|      SHA2_32_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], 0x8CC70208);
  165|      0|      SHA2_32_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], 0x90BEFFFA);
  166|      0|      SHA2_32_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], 0xA4506CEB);
  167|      0|      SHA2_32_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], 0xBEF9A3F7);
  168|      0|      SHA2_32_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], 0xC67178F2);
  169|       |
  170|       |      // clang-format on
  171|       |
  172|      0|      A = (digest[0] += A);
  173|      0|      B = (digest[1] += B);
  174|      0|      C = (digest[2] += C);
  175|      0|      D = (digest[3] += D);
  176|      0|      E = (digest[4] += E);
  177|      0|      F = (digest[5] += F);
  178|      0|      G = (digest[6] += G);
  179|      0|      H = (digest[7] += H);
  180|      0|   }
  181|      0|}
_ZN5Botan7SHA_25610compress_nERNSt3__16vectorIjNS_16secure_allocatorIjEEEENS1_4spanIKhLm18446744073709551615EEEm:
  215|  4.79k|void SHA_256::compress_n(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
  216|  4.79k|   SHA_256::compress_digest(digest, input, blocks);
  217|  4.79k|}
_ZN5Botan7SHA_2564initERNSt3__16vectorIjNS_16secure_allocatorIjEEEE:
  219|  3.07k|void SHA_256::init(digest_type& digest) {
  220|  3.07k|   digest.assign({0x6A09E667, 0xBB67AE85, 0x3C6EF372, 0xA54FF53A, 0x510E527F, 0x9B05688C, 0x1F83D9AB, 0x5BE0CD19});
  221|  3.07k|}
_ZN5Botan7SHA_2568add_dataENSt3__14spanIKhLm18446744073709551615EEE:
  231|  2.45k|void SHA_256::add_data(std::span<const uint8_t> input) {
  232|  2.45k|   m_md.update(input);
  233|  2.45k|}
_ZN5Botan7SHA_25612final_resultENSt3__14spanIhLm18446744073709551615EEE:
  235|  2.45k|void SHA_256::final_result(std::span<uint8_t> output) {
  236|  2.45k|   m_md.final(output);
  237|  2.45k|}

_ZN5Botan7SHA_25624compress_digest_x86_avx2ERNSt3__16vectorIjNS_16secure_allocatorIjEEEENS1_4spanIKhLm18446744073709551615EEEm:
  100|  4.79k|   digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
  101|       |   // clang-format off
  102|       |
  103|  4.79k|   alignas(64) const uint32_t K[64] = {
  104|  4.79k|      0x428A2F98, 0x71374491, 0xB5C0FBCF, 0xE9B5DBA5, 0x3956C25B, 0x59F111F1, 0x923F82A4, 0xAB1C5ED5,
  105|  4.79k|      0xD807AA98, 0x12835B01, 0x243185BE, 0x550C7DC3, 0x72BE5D74, 0x80DEB1FE, 0x9BDC06A7, 0xC19BF174,
  106|  4.79k|      0xE49B69C1, 0xEFBE4786, 0x0FC19DC6, 0x240CA1CC, 0x2DE92C6F, 0x4A7484AA, 0x5CB0A9DC, 0x76F988DA,
  107|  4.79k|      0x983E5152, 0xA831C66D, 0xB00327C8, 0xBF597FC7, 0xC6E00BF3, 0xD5A79147, 0x06CA6351, 0x14292967,
  108|  4.79k|      0x27B70A85, 0x2E1B2138, 0x4D2C6DFC, 0x53380D13, 0x650A7354, 0x766A0ABB, 0x81C2C92E, 0x92722C85,
  109|  4.79k|      0xA2BFE8A1, 0xA81A664B, 0xC24B8B70, 0xC76C51A3, 0xD192E819, 0xD6990624, 0xF40E3585, 0x106AA070,
  110|  4.79k|      0x19A4C116, 0x1E376C08, 0x2748774C, 0x34B0BCB5, 0x391C0CB3, 0x4ED8AA4A, 0x5B9CCA4F, 0x682E6FF3,
  111|  4.79k|      0x748F82EE, 0x78A5636F, 0x84C87814, 0x8CC70208, 0x90BEFFFA, 0xA4506CEB, 0xBEF9A3F7, 0xC67178F2};
  112|       |
  113|       |   // clang-format on
  114|       |
  115|  4.79k|   alignas(64) uint32_t W[16];
  116|  4.79k|   alignas(64) uint32_t W2[64];
  117|       |
  118|  4.79k|   uint32_t A = digest[0];
  119|  4.79k|   uint32_t B = digest[1];
  120|  4.79k|   uint32_t C = digest[2];
  121|  4.79k|   uint32_t D = digest[3];
  122|  4.79k|   uint32_t E = digest[4];
  123|  4.79k|   uint32_t F = digest[5];
  124|  4.79k|   uint32_t G = digest[6];
  125|  4.79k|   uint32_t H = digest[7];
  126|       |
  127|  4.79k|   const uint8_t* data = input.data();
  128|       |
  129|  13.4k|   while(blocks >= 2) {
  ------------------
  |  Branch (129:10): [True: 8.63k, False: 4.79k]
  ------------------
  130|  8.63k|      SIMD_8x32 WS[4];
  131|       |
  132|  43.1k|      for(size_t i = 0; i < 4; i++) {
  ------------------
  |  Branch (132:25): [True: 34.5k, False: 8.63k]
  ------------------
  133|  34.5k|         WS[i] = SIMD_8x32::load_be128(&data[16 * i], &data[64 + 16 * i]);
  134|  34.5k|         auto WK = WS[i] + SIMD_8x32::load_le128(&K[4 * i]);
  135|  34.5k|         WK.store_le128(&W[4 * i], &W2[4 * i]);
  136|  34.5k|      }
  137|       |
  138|  8.63k|      data += 2 * 64;
  139|  8.63k|      blocks -= 2;
  140|       |
  141|  34.5k|      for(size_t r = 0; r != 48; r += 16) {
  ------------------
  |  Branch (141:25): [True: 25.8k, False: 8.63k]
  ------------------
  142|  25.8k|         auto w = next_w(WS) + SIMD_8x32::load_le128(&K[r + 16]);
  143|       |
  144|  25.8k|         SHA2_32_F(A, B, C, D, E, F, G, H, W[0]);
  145|  25.8k|         SHA2_32_F(H, A, B, C, D, E, F, G, W[1]);
  146|  25.8k|         SHA2_32_F(G, H, A, B, C, D, E, F, W[2]);
  147|  25.8k|         SHA2_32_F(F, G, H, A, B, C, D, E, W[3]);
  148|       |
  149|  25.8k|         w.store_le128(&W[0], &W2[r + 16]);
  150|       |
  151|  25.8k|         w = next_w(WS) + SIMD_8x32::load_le128(&K[r + 20]);
  152|       |
  153|  25.8k|         SHA2_32_F(E, F, G, H, A, B, C, D, W[4]);
  154|  25.8k|         SHA2_32_F(D, E, F, G, H, A, B, C, W[5]);
  155|  25.8k|         SHA2_32_F(C, D, E, F, G, H, A, B, W[6]);
  156|  25.8k|         SHA2_32_F(B, C, D, E, F, G, H, A, W[7]);
  157|       |
  158|  25.8k|         w.store_le128(&W[4], &W2[r + 20]);
  159|       |
  160|  25.8k|         w = next_w(WS) + SIMD_8x32::load_le128(&K[r + 24]);
  161|       |
  162|  25.8k|         SHA2_32_F(A, B, C, D, E, F, G, H, W[8]);
  163|  25.8k|         SHA2_32_F(H, A, B, C, D, E, F, G, W[9]);
  164|  25.8k|         SHA2_32_F(G, H, A, B, C, D, E, F, W[10]);
  165|  25.8k|         SHA2_32_F(F, G, H, A, B, C, D, E, W[11]);
  166|       |
  167|  25.8k|         w.store_le128(&W[8], &W2[r + 24]);
  168|       |
  169|  25.8k|         w = next_w(WS) + SIMD_8x32::load_le128(&K[r + 28]);
  170|       |
  171|  25.8k|         SHA2_32_F(E, F, G, H, A, B, C, D, W[12]);
  172|  25.8k|         SHA2_32_F(D, E, F, G, H, A, B, C, W[13]);
  173|  25.8k|         SHA2_32_F(C, D, E, F, G, H, A, B, W[14]);
  174|  25.8k|         SHA2_32_F(B, C, D, E, F, G, H, A, W[15]);
  175|       |
  176|  25.8k|         w.store_le128(&W[12], &W2[r + 28]);
  177|  25.8k|      }
  178|       |
  179|  8.63k|      SHA2_32_F(A, B, C, D, E, F, G, H, W[0]);
  180|  8.63k|      SHA2_32_F(H, A, B, C, D, E, F, G, W[1]);
  181|  8.63k|      SHA2_32_F(G, H, A, B, C, D, E, F, W[2]);
  182|  8.63k|      SHA2_32_F(F, G, H, A, B, C, D, E, W[3]);
  183|  8.63k|      SHA2_32_F(E, F, G, H, A, B, C, D, W[4]);
  184|  8.63k|      SHA2_32_F(D, E, F, G, H, A, B, C, W[5]);
  185|  8.63k|      SHA2_32_F(C, D, E, F, G, H, A, B, W[6]);
  186|  8.63k|      SHA2_32_F(B, C, D, E, F, G, H, A, W[7]);
  187|  8.63k|      SHA2_32_F(A, B, C, D, E, F, G, H, W[8]);
  188|  8.63k|      SHA2_32_F(H, A, B, C, D, E, F, G, W[9]);
  189|  8.63k|      SHA2_32_F(G, H, A, B, C, D, E, F, W[10]);
  190|  8.63k|      SHA2_32_F(F, G, H, A, B, C, D, E, W[11]);
  191|  8.63k|      SHA2_32_F(E, F, G, H, A, B, C, D, W[12]);
  192|  8.63k|      SHA2_32_F(D, E, F, G, H, A, B, C, W[13]);
  193|  8.63k|      SHA2_32_F(C, D, E, F, G, H, A, B, W[14]);
  194|  8.63k|      SHA2_32_F(B, C, D, E, F, G, H, A, W[15]);
  195|       |
  196|  8.63k|      A = (digest[0] += A);
  197|  8.63k|      B = (digest[1] += B);
  198|  8.63k|      C = (digest[2] += C);
  199|  8.63k|      D = (digest[3] += D);
  200|  8.63k|      E = (digest[4] += E);
  201|  8.63k|      F = (digest[5] += F);
  202|  8.63k|      G = (digest[6] += G);
  203|  8.63k|      H = (digest[7] += H);
  204|       |
  205|       |      // Now the second block, with already expanded message
  206|  8.63k|      SHA2_32_F(A, B, C, D, E, F, G, H, W2[0]);
  207|  8.63k|      SHA2_32_F(H, A, B, C, D, E, F, G, W2[1]);
  208|  8.63k|      SHA2_32_F(G, H, A, B, C, D, E, F, W2[2]);
  209|  8.63k|      SHA2_32_F(F, G, H, A, B, C, D, E, W2[3]);
  210|  8.63k|      SHA2_32_F(E, F, G, H, A, B, C, D, W2[4]);
  211|  8.63k|      SHA2_32_F(D, E, F, G, H, A, B, C, W2[5]);
  212|  8.63k|      SHA2_32_F(C, D, E, F, G, H, A, B, W2[6]);
  213|  8.63k|      SHA2_32_F(B, C, D, E, F, G, H, A, W2[7]);
  214|  8.63k|      SHA2_32_F(A, B, C, D, E, F, G, H, W2[8]);
  215|  8.63k|      SHA2_32_F(H, A, B, C, D, E, F, G, W2[9]);
  216|  8.63k|      SHA2_32_F(G, H, A, B, C, D, E, F, W2[10]);
  217|  8.63k|      SHA2_32_F(F, G, H, A, B, C, D, E, W2[11]);
  218|  8.63k|      SHA2_32_F(E, F, G, H, A, B, C, D, W2[12]);
  219|  8.63k|      SHA2_32_F(D, E, F, G, H, A, B, C, W2[13]);
  220|  8.63k|      SHA2_32_F(C, D, E, F, G, H, A, B, W2[14]);
  221|  8.63k|      SHA2_32_F(B, C, D, E, F, G, H, A, W2[15]);
  222|       |
  223|  8.63k|      SHA2_32_F(A, B, C, D, E, F, G, H, W2[16]);
  224|  8.63k|      SHA2_32_F(H, A, B, C, D, E, F, G, W2[17]);
  225|  8.63k|      SHA2_32_F(G, H, A, B, C, D, E, F, W2[18]);
  226|  8.63k|      SHA2_32_F(F, G, H, A, B, C, D, E, W2[19]);
  227|  8.63k|      SHA2_32_F(E, F, G, H, A, B, C, D, W2[20]);
  228|  8.63k|      SHA2_32_F(D, E, F, G, H, A, B, C, W2[21]);
  229|  8.63k|      SHA2_32_F(C, D, E, F, G, H, A, B, W2[22]);
  230|  8.63k|      SHA2_32_F(B, C, D, E, F, G, H, A, W2[23]);
  231|  8.63k|      SHA2_32_F(A, B, C, D, E, F, G, H, W2[24]);
  232|  8.63k|      SHA2_32_F(H, A, B, C, D, E, F, G, W2[25]);
  233|  8.63k|      SHA2_32_F(G, H, A, B, C, D, E, F, W2[26]);
  234|  8.63k|      SHA2_32_F(F, G, H, A, B, C, D, E, W2[27]);
  235|  8.63k|      SHA2_32_F(E, F, G, H, A, B, C, D, W2[28]);
  236|  8.63k|      SHA2_32_F(D, E, F, G, H, A, B, C, W2[29]);
  237|  8.63k|      SHA2_32_F(C, D, E, F, G, H, A, B, W2[30]);
  238|  8.63k|      SHA2_32_F(B, C, D, E, F, G, H, A, W2[31]);
  239|       |
  240|  8.63k|      SHA2_32_F(A, B, C, D, E, F, G, H, W2[32]);
  241|  8.63k|      SHA2_32_F(H, A, B, C, D, E, F, G, W2[33]);
  242|  8.63k|      SHA2_32_F(G, H, A, B, C, D, E, F, W2[34]);
  243|  8.63k|      SHA2_32_F(F, G, H, A, B, C, D, E, W2[35]);
  244|  8.63k|      SHA2_32_F(E, F, G, H, A, B, C, D, W2[36]);
  245|  8.63k|      SHA2_32_F(D, E, F, G, H, A, B, C, W2[37]);
  246|  8.63k|      SHA2_32_F(C, D, E, F, G, H, A, B, W2[38]);
  247|  8.63k|      SHA2_32_F(B, C, D, E, F, G, H, A, W2[39]);
  248|  8.63k|      SHA2_32_F(A, B, C, D, E, F, G, H, W2[40]);
  249|  8.63k|      SHA2_32_F(H, A, B, C, D, E, F, G, W2[41]);
  250|  8.63k|      SHA2_32_F(G, H, A, B, C, D, E, F, W2[42]);
  251|  8.63k|      SHA2_32_F(F, G, H, A, B, C, D, E, W2[43]);
  252|  8.63k|      SHA2_32_F(E, F, G, H, A, B, C, D, W2[44]);
  253|  8.63k|      SHA2_32_F(D, E, F, G, H, A, B, C, W2[45]);
  254|  8.63k|      SHA2_32_F(C, D, E, F, G, H, A, B, W2[46]);
  255|  8.63k|      SHA2_32_F(B, C, D, E, F, G, H, A, W2[47]);
  256|       |
  257|  8.63k|      SHA2_32_F(A, B, C, D, E, F, G, H, W2[48]);
  258|  8.63k|      SHA2_32_F(H, A, B, C, D, E, F, G, W2[49]);
  259|  8.63k|      SHA2_32_F(G, H, A, B, C, D, E, F, W2[50]);
  260|  8.63k|      SHA2_32_F(F, G, H, A, B, C, D, E, W2[51]);
  261|  8.63k|      SHA2_32_F(E, F, G, H, A, B, C, D, W2[52]);
  262|  8.63k|      SHA2_32_F(D, E, F, G, H, A, B, C, W2[53]);
  263|  8.63k|      SHA2_32_F(C, D, E, F, G, H, A, B, W2[54]);
  264|  8.63k|      SHA2_32_F(B, C, D, E, F, G, H, A, W2[55]);
  265|  8.63k|      SHA2_32_F(A, B, C, D, E, F, G, H, W2[56]);
  266|  8.63k|      SHA2_32_F(H, A, B, C, D, E, F, G, W2[57]);
  267|  8.63k|      SHA2_32_F(G, H, A, B, C, D, E, F, W2[58]);
  268|  8.63k|      SHA2_32_F(F, G, H, A, B, C, D, E, W2[59]);
  269|  8.63k|      SHA2_32_F(E, F, G, H, A, B, C, D, W2[60]);
  270|  8.63k|      SHA2_32_F(D, E, F, G, H, A, B, C, W2[61]);
  271|  8.63k|      SHA2_32_F(C, D, E, F, G, H, A, B, W2[62]);
  272|  8.63k|      SHA2_32_F(B, C, D, E, F, G, H, A, W2[63]);
  273|       |
  274|  8.63k|      A = (digest[0] += A);
  275|  8.63k|      B = (digest[1] += B);
  276|  8.63k|      C = (digest[2] += C);
  277|  8.63k|      D = (digest[3] += D);
  278|  8.63k|      E = (digest[4] += E);
  279|  8.63k|      F = (digest[5] += F);
  280|  8.63k|      G = (digest[6] += G);
  281|  8.63k|      H = (digest[7] += H);
  282|  8.63k|   }
  283|       |
  284|  8.68k|   while(blocks > 0) {
  ------------------
  |  Branch (284:10): [True: 3.88k, False: 4.79k]
  ------------------
  285|  3.88k|      SIMD_4x32 WS[4];
  286|       |
  287|  19.4k|      for(size_t i = 0; i < 4; i++) {
  ------------------
  |  Branch (287:25): [True: 15.5k, False: 3.88k]
  ------------------
  288|  15.5k|         WS[i] = SIMD_4x32::load_be(&data[16 * i]);
  289|  15.5k|         auto WK = WS[i] + SIMD_4x32::load_le(&K[4 * i]);
  290|  15.5k|         WK.store_le(&W[4 * i]);
  291|  15.5k|      }
  292|       |
  293|  3.88k|      data += 64;
  294|  3.88k|      blocks -= 1;
  295|       |
  296|  15.5k|      for(size_t r = 0; r != 48; r += 16) {
  ------------------
  |  Branch (296:25): [True: 11.6k, False: 3.88k]
  ------------------
  297|  11.6k|         auto w = next_w(WS) + SIMD_4x32::load_le(&K[r + 16]);
  298|       |
  299|  11.6k|         SHA2_32_F(A, B, C, D, E, F, G, H, W[0]);
  300|  11.6k|         SHA2_32_F(H, A, B, C, D, E, F, G, W[1]);
  301|  11.6k|         SHA2_32_F(G, H, A, B, C, D, E, F, W[2]);
  302|  11.6k|         SHA2_32_F(F, G, H, A, B, C, D, E, W[3]);
  303|       |
  304|  11.6k|         w.store_le(&W[0]);
  305|       |
  306|  11.6k|         w = next_w(WS) + SIMD_4x32::load_le(&K[r + 20]);
  307|       |
  308|  11.6k|         SHA2_32_F(E, F, G, H, A, B, C, D, W[4]);
  309|  11.6k|         SHA2_32_F(D, E, F, G, H, A, B, C, W[5]);
  310|  11.6k|         SHA2_32_F(C, D, E, F, G, H, A, B, W[6]);
  311|  11.6k|         SHA2_32_F(B, C, D, E, F, G, H, A, W[7]);
  312|       |
  313|  11.6k|         w.store_le(&W[4]);
  314|       |
  315|  11.6k|         w = next_w(WS) + SIMD_4x32::load_le(&K[r + 24]);
  316|       |
  317|  11.6k|         SHA2_32_F(A, B, C, D, E, F, G, H, W[8]);
  318|  11.6k|         SHA2_32_F(H, A, B, C, D, E, F, G, W[9]);
  319|  11.6k|         SHA2_32_F(G, H, A, B, C, D, E, F, W[10]);
  320|  11.6k|         SHA2_32_F(F, G, H, A, B, C, D, E, W[11]);
  321|       |
  322|  11.6k|         w.store_le(&W[8]);
  323|       |
  324|  11.6k|         w = next_w(WS) + SIMD_4x32::load_le(&K[r + 28]);
  325|       |
  326|  11.6k|         SHA2_32_F(E, F, G, H, A, B, C, D, W[12]);
  327|  11.6k|         SHA2_32_F(D, E, F, G, H, A, B, C, W[13]);
  328|  11.6k|         SHA2_32_F(C, D, E, F, G, H, A, B, W[14]);
  329|  11.6k|         SHA2_32_F(B, C, D, E, F, G, H, A, W[15]);
  330|       |
  331|  11.6k|         w.store_le(&W[12]);
  332|  11.6k|      }
  333|       |
  334|  3.88k|      SHA2_32_F(A, B, C, D, E, F, G, H, W[0]);
  335|  3.88k|      SHA2_32_F(H, A, B, C, D, E, F, G, W[1]);
  336|  3.88k|      SHA2_32_F(G, H, A, B, C, D, E, F, W[2]);
  337|  3.88k|      SHA2_32_F(F, G, H, A, B, C, D, E, W[3]);
  338|  3.88k|      SHA2_32_F(E, F, G, H, A, B, C, D, W[4]);
  339|  3.88k|      SHA2_32_F(D, E, F, G, H, A, B, C, W[5]);
  340|  3.88k|      SHA2_32_F(C, D, E, F, G, H, A, B, W[6]);
  341|  3.88k|      SHA2_32_F(B, C, D, E, F, G, H, A, W[7]);
  342|  3.88k|      SHA2_32_F(A, B, C, D, E, F, G, H, W[8]);
  343|  3.88k|      SHA2_32_F(H, A, B, C, D, E, F, G, W[9]);
  344|  3.88k|      SHA2_32_F(G, H, A, B, C, D, E, F, W[10]);
  345|  3.88k|      SHA2_32_F(F, G, H, A, B, C, D, E, W[11]);
  346|  3.88k|      SHA2_32_F(E, F, G, H, A, B, C, D, W[12]);
  347|  3.88k|      SHA2_32_F(D, E, F, G, H, A, B, C, W[13]);
  348|  3.88k|      SHA2_32_F(C, D, E, F, G, H, A, B, W[14]);
  349|  3.88k|      SHA2_32_F(B, C, D, E, F, G, H, A, W[15]);
  350|       |
  351|  3.88k|      A = (digest[0] += A);
  352|  3.88k|      B = (digest[1] += B);
  353|  3.88k|      C = (digest[2] += C);
  354|  3.88k|      D = (digest[3] += D);
  355|  3.88k|      E = (digest[4] += E);
  356|  3.88k|      F = (digest[5] += F);
  357|  3.88k|      G = (digest[6] += G);
  358|  3.88k|      H = (digest[7] += H);
  359|  3.88k|   }
  360|  4.79k|}
sha2_32_avx2.cpp:_ZN5Botan12_GLOBAL__N_16next_wINS_9SIMD_8x32EEET_PS3_:
   50|   103k|BOTAN_FN_ISA_AVX2_BMI2 BOTAN_FORCE_INLINE SIMD_T next_w(SIMD_T x[4]) {
   51|   103k|   constexpr size_t sigma0_0 = 7;
   52|   103k|   constexpr size_t sigma0_1 = 18;
   53|   103k|   constexpr size_t sigma0_2 = 3;
   54|   103k|   constexpr size_t sigma1_0 = 17;
   55|   103k|   constexpr size_t sigma1_1 = 19;
   56|   103k|   constexpr size_t sigma1_2 = 10;
   57|       |
   58|   103k|   const SIMD_T lo_mask = SIMD_T(0x03020100, 0x0b0a0908, 0x80808080, 0x80808080);
   59|   103k|   const SIMD_T hi_mask = SIMD_T(0x80808080, 0x80808080, 0x03020100, 0x0b0a0908);
   60|       |
   61|   103k|   auto t0 = alignr4(x[1], x[0]);
   62|   103k|   x[0] += alignr4(x[3], x[2]);
   63|       |
   64|   103k|   auto t1 = t0.template shl<32 - sigma0_1>();
   65|   103k|   auto t2 = t0.template shr<sigma0_0>();
   66|   103k|   auto t3 = t0.template shr<sigma0_2>();
   67|   103k|   t0 = t3 ^ t2;
   68|       |
   69|   103k|   t3 = shuffle_32<0b11111010>(x[3]);
   70|   103k|   t2 = t2.template shr<sigma0_1 - sigma0_0>();
   71|   103k|   t0 ^= t1 ^ t2;
   72|   103k|   t1 = t1.template shl<sigma0_1 - sigma0_0>();
   73|   103k|   t2 = t3.template shr<sigma1_2>();
   74|   103k|   t3 = shr64<sigma1_0>(t3);
   75|   103k|   x[0] += t0 ^ t1;
   76|       |
   77|   103k|   t2 ^= t3;
   78|   103k|   t3 = shr64<sigma1_1 - sigma1_0>(t3);
   79|   103k|   x[0] += SIMD_T::byte_shuffle(t2 ^ t3, lo_mask);
   80|       |
   81|   103k|   t3 = shuffle_32<0b01010000>(x[0]);
   82|   103k|   t2 = t3.template shr<sigma1_2>();
   83|   103k|   t3 = shr64<sigma1_0>(t3);
   84|   103k|   t2 ^= t3;
   85|   103k|   t3 = shr64<sigma1_1 - sigma1_0>(t3);
   86|   103k|   x[0] += SIMD_T::byte_shuffle(t2 ^ t3, hi_mask);
   87|       |
   88|   103k|   const auto tmp = x[0];
   89|   103k|   x[0] = x[1];
   90|   103k|   x[1] = x[2];
   91|   103k|   x[2] = x[3];
   92|   103k|   x[3] = tmp;
   93|       |
   94|   103k|   return x[3];
   95|   103k|}
sha2_32_avx2.cpp:_ZN5Botan12_GLOBAL__N_17alignr4ERKNS_9SIMD_8x32ES3_:
   35|   207k|BOTAN_FN_ISA_AVX2_BMI2 inline SIMD_8x32 alignr4(const SIMD_8x32& a, const SIMD_8x32& b) {
   36|       |   return SIMD_8x32(_mm256_alignr_epi8(a.raw(), b.raw(), 4));
   37|   207k|}
sha2_32_avx2.cpp:_ZN5Botan12_GLOBAL__N_110shuffle_32ILh250EEENS_9SIMD_8x32ERKS2_:
   45|   103k|BOTAN_FN_ISA_AVX2_BMI2 inline SIMD_8x32 shuffle_32(const SIMD_8x32& a) {
   46|       |   return SIMD_8x32(_mm256_shuffle_epi32(a.raw(), S));
   47|   103k|}
sha2_32_avx2.cpp:_ZN5Botan12_GLOBAL__N_15shr64ILm17EEENS_9SIMD_8x32ERKS2_:
   40|   207k|BOTAN_FN_ISA_AVX2_BMI2 inline SIMD_8x32 shr64(const SIMD_8x32& a) {
   41|   207k|   return SIMD_8x32(_mm256_srli_epi64(a.raw(), S));
   42|   207k|}
sha2_32_avx2.cpp:_ZN5Botan12_GLOBAL__N_15shr64ILm2EEENS_9SIMD_8x32ERKS2_:
   40|   207k|BOTAN_FN_ISA_AVX2_BMI2 inline SIMD_8x32 shr64(const SIMD_8x32& a) {
   41|   207k|   return SIMD_8x32(_mm256_srli_epi64(a.raw(), S));
   42|   207k|}
sha2_32_avx2.cpp:_ZN5Botan12_GLOBAL__N_110shuffle_32ILh80EEENS_9SIMD_8x32ERKS2_:
   45|   103k|BOTAN_FN_ISA_AVX2_BMI2 inline SIMD_8x32 shuffle_32(const SIMD_8x32& a) {
   46|       |   return SIMD_8x32(_mm256_shuffle_epi32(a.raw(), S));
   47|   103k|}
sha2_32_avx2.cpp:_ZN5Botan12_GLOBAL__N_16next_wINS_9SIMD_4x32EEET_PS3_:
   50|  46.6k|BOTAN_FN_ISA_AVX2_BMI2 BOTAN_FORCE_INLINE SIMD_T next_w(SIMD_T x[4]) {
   51|  46.6k|   constexpr size_t sigma0_0 = 7;
   52|  46.6k|   constexpr size_t sigma0_1 = 18;
   53|  46.6k|   constexpr size_t sigma0_2 = 3;
   54|  46.6k|   constexpr size_t sigma1_0 = 17;
   55|  46.6k|   constexpr size_t sigma1_1 = 19;
   56|  46.6k|   constexpr size_t sigma1_2 = 10;
   57|       |
   58|  46.6k|   const SIMD_T lo_mask = SIMD_T(0x03020100, 0x0b0a0908, 0x80808080, 0x80808080);
   59|  46.6k|   const SIMD_T hi_mask = SIMD_T(0x80808080, 0x80808080, 0x03020100, 0x0b0a0908);
   60|       |
   61|  46.6k|   auto t0 = alignr4(x[1], x[0]);
   62|  46.6k|   x[0] += alignr4(x[3], x[2]);
   63|       |
   64|  46.6k|   auto t1 = t0.template shl<32 - sigma0_1>();
   65|  46.6k|   auto t2 = t0.template shr<sigma0_0>();
   66|  46.6k|   auto t3 = t0.template shr<sigma0_2>();
   67|  46.6k|   t0 = t3 ^ t2;
   68|       |
   69|  46.6k|   t3 = shuffle_32<0b11111010>(x[3]);
   70|  46.6k|   t2 = t2.template shr<sigma0_1 - sigma0_0>();
   71|  46.6k|   t0 ^= t1 ^ t2;
   72|  46.6k|   t1 = t1.template shl<sigma0_1 - sigma0_0>();
   73|  46.6k|   t2 = t3.template shr<sigma1_2>();
   74|  46.6k|   t3 = shr64<sigma1_0>(t3);
   75|  46.6k|   x[0] += t0 ^ t1;
   76|       |
   77|  46.6k|   t2 ^= t3;
   78|  46.6k|   t3 = shr64<sigma1_1 - sigma1_0>(t3);
   79|  46.6k|   x[0] += SIMD_T::byte_shuffle(t2 ^ t3, lo_mask);
   80|       |
   81|  46.6k|   t3 = shuffle_32<0b01010000>(x[0]);
   82|  46.6k|   t2 = t3.template shr<sigma1_2>();
   83|  46.6k|   t3 = shr64<sigma1_0>(t3);
   84|  46.6k|   t2 ^= t3;
   85|  46.6k|   t3 = shr64<sigma1_1 - sigma1_0>(t3);
   86|  46.6k|   x[0] += SIMD_T::byte_shuffle(t2 ^ t3, hi_mask);
   87|       |
   88|  46.6k|   const auto tmp = x[0];
   89|  46.6k|   x[0] = x[1];
   90|  46.6k|   x[1] = x[2];
   91|  46.6k|   x[2] = x[3];
   92|  46.6k|   x[3] = tmp;
   93|       |
   94|  46.6k|   return x[3];
   95|  46.6k|}
sha2_32_avx2.cpp:_ZN5Botan12_GLOBAL__N_17alignr4ERKNS_9SIMD_4x32ES3_:
   21|  93.2k|BOTAN_FN_ISA_AVX2_BMI2 inline SIMD_4x32 alignr4(const SIMD_4x32& a, const SIMD_4x32& b) {
   22|       |   return SIMD_4x32(_mm_alignr_epi8(a.raw(), b.raw(), 4));
   23|  93.2k|}
sha2_32_avx2.cpp:_ZN5Botan12_GLOBAL__N_110shuffle_32ILh250EEENS_9SIMD_4x32ERKS2_:
   31|  46.6k|BOTAN_FN_ISA_AVX2_BMI2 inline SIMD_4x32 shuffle_32(const SIMD_4x32& a) {
   32|       |   return SIMD_4x32(_mm_shuffle_epi32(a.raw(), S));
   33|  46.6k|}
sha2_32_avx2.cpp:_ZN5Botan12_GLOBAL__N_15shr64ILm17EEENS_9SIMD_4x32ERKS2_:
   26|  93.2k|BOTAN_FN_ISA_AVX2_BMI2 inline SIMD_4x32 shr64(const SIMD_4x32& a) {
   27|  93.2k|   return SIMD_4x32(_mm_srli_epi64(a.raw(), S));
   28|  93.2k|}
sha2_32_avx2.cpp:_ZN5Botan12_GLOBAL__N_15shr64ILm2EEENS_9SIMD_4x32ERKS2_:
   26|  93.2k|BOTAN_FN_ISA_AVX2_BMI2 inline SIMD_4x32 shr64(const SIMD_4x32& a) {
   27|  93.2k|   return SIMD_4x32(_mm_srli_epi64(a.raw(), S));
   28|  93.2k|}
sha2_32_avx2.cpp:_ZN5Botan12_GLOBAL__N_110shuffle_32ILh80EEENS_9SIMD_4x32ERKS2_:
   31|  46.6k|BOTAN_FN_ISA_AVX2_BMI2 inline SIMD_4x32 shuffle_32(const SIMD_4x32& a) {
   32|       |   return SIMD_4x32(_mm_shuffle_epi32(a.raw(), S));
   33|  46.6k|}

_ZNK5Botan6BigInt7byte_atEm:
  118|  38.5k|uint8_t BigInt::byte_at(size_t n) const {
  119|  38.5k|   return get_byte_var(sizeof(word) - (n % sizeof(word)) - 1, word_at(n / sizeof(word)));
  120|  38.5k|}
_ZN5Botan6BigInt4Data11set_to_zeroEv:
  191|  13.9k|void BigInt::Data::set_to_zero() {
  192|  13.9k|   m_reg.resize(m_reg.capacity());
  193|  13.9k|   clear_mem(m_reg.data(), m_reg.size());
  194|  13.9k|   m_sig_words = 0;
  195|  13.9k|}
_ZNK5Botan6BigInt4Data14calc_sig_wordsEv:
  215|  13.4k|size_t BigInt::Data::calc_sig_words() const {
  216|  13.4k|   const size_t sz = m_reg.size();
  217|  13.4k|   size_t sig = sz;
  218|       |
  219|  13.4k|   word sub = 1;
  220|       |
  221|   122k|   for(size_t i = 0; i != sz; ++i) {
  ------------------
  |  Branch (221:22): [True: 109k, False: 13.4k]
  ------------------
  222|   109k|      const word w = m_reg[sz - i - 1];
  223|   109k|      sub &= ct_is_zero(w);
  224|   109k|      sig -= sub;
  225|   109k|   }
  226|       |
  227|       |   /*
  228|       |   * This depends on the data so is poisoned, but unpoison it here as
  229|       |   * later conditionals are made on the size.
  230|       |   */
  231|  13.4k|   CT::unpoison(sig);
  232|       |
  233|  13.4k|   return sig;
  234|  13.4k|}
_ZNK5Botan6BigInt5bytesEv:
  294|  7.19k|size_t BigInt::bytes() const {
  295|  7.19k|   return round_up(bits(), 8) / 8;
  296|  7.19k|}
_ZNK5Botan6BigInt13top_bits_freeEv:
  298|  16.3k|size_t BigInt::top_bits_free() const {
  299|  16.3k|   const size_t words = sig_words();
  300|       |
  301|  16.3k|   const word top_word = word_at(words - 1);
  302|  16.3k|   const size_t bits_used = high_bit(CT::value_barrier(top_word));
  303|  16.3k|   CT::unpoison(bits_used);
  304|  16.3k|   return WordInfo<word>::bits - bits_used;
  305|  16.3k|}
_ZNK5Botan6BigInt4bitsEv:
  307|  16.8k|size_t BigInt::bits() const {
  308|  16.8k|   const size_t words = sig_words();
  309|       |
  310|  16.8k|   if(words == 0) {
  ------------------
  |  Branch (310:7): [True: 465, False: 16.3k]
  ------------------
  311|    465|      return 0;
  312|    465|   }
  313|       |
  314|  16.3k|   const size_t full_words = (words - 1) * WordInfo<word>::bits;
  315|  16.3k|   const size_t top_bits = WordInfo<word>::bits - top_bits_free();
  316|       |
  317|  16.3k|   return full_words + top_bits;
  318|  16.8k|}
_ZNK5Botan6BigInt12serialize_toENSt3__14spanIhLm18446744073709551615EEE:
  395|  3.59k|void BigInt::serialize_to(std::span<uint8_t> output) const {
  396|  3.59k|   BOTAN_ARG_CHECK(this->bytes() <= output.size(), "Insufficient output space");
  ------------------
  |  |   35|  3.59k|   do {                                                          \
  |  |   36|  3.59k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */              \
  |  |   37|  3.59k|      if(!(expr)) {                                              \
  |  |  ------------------
  |  |  |  Branch (37:10): [True: 0, False: 3.59k]
  |  |  ------------------
  |  |   38|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */     \
  |  |   39|      0|         Botan::throw_invalid_argument(msg, __func__, __FILE__); \
  |  |   40|      0|      }                                                          \
  |  |   41|  3.59k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (41:12): [Folded, False: 3.59k]
  |  |  ------------------
  ------------------
  397|       |
  398|  3.59k|   this->binary_encode(output.data(), output.size());
  399|  3.59k|}
_ZNK5Botan6BigInt13binary_encodeEPhm:
  404|  3.59k|void BigInt::binary_encode(uint8_t output[], size_t len) const {
  405|  3.59k|   const size_t full_words = len / sizeof(word);
  406|  3.59k|   const size_t extra_bytes = len % sizeof(word);
  407|       |
  408|  8.88k|   for(size_t i = 0; i != full_words; ++i) {
  ------------------
  |  Branch (408:22): [True: 5.29k, False: 3.59k]
  ------------------
  409|  5.29k|      const word w = word_at(i);
  410|  5.29k|      store_be(w, output + (len - (i + 1) * sizeof(word)));
  411|  5.29k|   }
  412|       |
  413|  3.59k|   if(extra_bytes > 0) {
  ------------------
  |  Branch (413:7): [True: 1.20k, False: 2.39k]
  ------------------
  414|  1.20k|      const word w = word_at(full_words);
  415|       |
  416|  3.24k|      for(size_t i = 0; i != extra_bytes; ++i) {
  ------------------
  |  Branch (416:25): [True: 2.03k, False: 1.20k]
  ------------------
  417|  2.03k|         output[extra_bytes - i - 1] = get_byte_var(sizeof(word) - i - 1, w);
  418|  2.03k|      }
  419|  1.20k|   }
  420|  3.59k|}
_ZN5Botan6BigInt17assign_from_bytesENSt3__14spanIKhLm18446744073709551615EEE:
  425|  13.9k|void BigInt::assign_from_bytes(std::span<const uint8_t> bytes) {
  426|  13.9k|   clear();
  427|       |
  428|  13.9k|   const size_t length = bytes.size();
  429|  13.9k|   const size_t full_words = length / sizeof(word);
  430|  13.9k|   const size_t extra_bytes = length % sizeof(word);
  431|       |
  432|  13.9k|   secure_vector<word> reg((round_up(full_words + (extra_bytes > 0 ? 1 : 0), 8)));
  ------------------
  |  Branch (432:52): [True: 11.7k, False: 2.25k]
  ------------------
  433|       |
  434|  21.9k|   for(size_t i = 0; i != full_words; ++i) {
  ------------------
  |  Branch (434:22): [True: 7.99k, False: 13.9k]
  ------------------
  435|  7.99k|      reg[i] = load_be<word>(bytes.last<sizeof(word)>());
  436|  7.99k|      bytes = bytes.first(bytes.size() - sizeof(word));
  437|  7.99k|   }
  438|       |
  439|  13.9k|   if(!bytes.empty()) {
  ------------------
  |  Branch (439:7): [True: 11.7k, False: 2.25k]
  ------------------
  440|  11.7k|      BOTAN_ASSERT_NOMSG(extra_bytes == bytes.size());
  ------------------
  |  |   77|  11.7k|   do {                                                                     \
  |  |   78|  11.7k|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|  11.7k|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 11.7k]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|  11.7k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 11.7k]
  |  |  ------------------
  ------------------
  441|  11.7k|      std::array<uint8_t, sizeof(word)> last_partial_word = {0};
  442|  11.7k|      copy_mem(std::span{last_partial_word}.last(extra_bytes), bytes);
  443|  11.7k|      reg[full_words] = load_be<word>(last_partial_word);
  444|  11.7k|   }
  445|       |
  446|  13.9k|   m_data.swap(reg);
  447|  13.9k|}
_ZNK5Botan6BigInt20_const_time_unpoisonEv:
  559|  14.1k|void BigInt::_const_time_unpoison() const {
  560|  14.1k|   CT::unpoison(m_data.const_data(), m_data.size());
  561|  14.1k|}

_ZN5Botan8PEM_Code6decodeERNS_10DataSourceERNSt3__112basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEE:
   62|    330|secure_vector<uint8_t> decode(DataSource& source, std::string& label) {
   63|    330|   const size_t RANDOM_CHAR_LIMIT = 8;
   64|       |
   65|    330|   label.clear();
   66|       |
   67|    330|   const std::string PEM_HEADER1 = "-----BEGIN ";
   68|    330|   const std::string PEM_HEADER2 = "-----";
   69|    330|   size_t position = 0;
   70|       |
   71|  14.0k|   while(position != PEM_HEADER1.length()) {
  ------------------
  |  Branch (71:10): [True: 13.7k, False: 286]
  ------------------
   72|  13.7k|      auto b = source.read_byte();
   73|       |
   74|  13.7k|      if(!b) {
  ------------------
  |  Branch (74:10): [True: 43, False: 13.7k]
  ------------------
   75|     43|         throw Decoding_Error("PEM: No PEM header found");
   76|     43|      }
   77|  13.7k|      if(static_cast<char>(*b) == PEM_HEADER1[position]) {
  ------------------
  |  Branch (77:10): [True: 3.60k, False: 10.0k]
  ------------------
   78|  3.60k|         ++position;
   79|  10.0k|      } else if(position >= RANDOM_CHAR_LIMIT) {
  ------------------
  |  Branch (79:17): [True: 1, False: 10.0k]
  ------------------
   80|      1|         throw Decoding_Error("PEM: Malformed PEM header");
   81|  10.0k|      } else {
   82|  10.0k|         position = 0;
   83|  10.0k|      }
   84|  13.7k|   }
   85|    286|   position = 0;
   86|  4.80k|   while(position != PEM_HEADER2.length()) {
  ------------------
  |  Branch (86:10): [True: 4.56k, False: 239]
  ------------------
   87|  4.56k|      auto b = source.read_byte();
   88|       |
   89|  4.56k|      if(!b) {
  ------------------
  |  Branch (89:10): [True: 41, False: 4.52k]
  ------------------
   90|     41|         throw Decoding_Error("PEM: No PEM header found");
   91|     41|      }
   92|  4.52k|      if(static_cast<char>(*b) == PEM_HEADER2[position]) {
  ------------------
  |  Branch (92:10): [True: 1.21k, False: 3.31k]
  ------------------
   93|  1.21k|         ++position;
   94|  3.31k|      } else if(position > 0) {
  ------------------
  |  Branch (94:17): [True: 3, False: 3.30k]
  ------------------
   95|      3|         throw Decoding_Error("PEM: Malformed PEM header");
   96|      3|      }
   97|       |
   98|  4.52k|      if(position == 0) {
  ------------------
  |  Branch (98:10): [True: 3.30k, False: 1.21k]
  ------------------
   99|  3.30k|         if(label.size() >= 128) {
  ------------------
  |  Branch (99:13): [True: 3, False: 3.30k]
  ------------------
  100|      3|            throw Decoding_Error("PEM: Label too long");
  101|      3|         }
  102|  3.30k|         label += static_cast<char>(*b);
  103|  3.30k|      }
  104|  4.52k|   }
  105|       |
  106|    239|   std::vector<char> b64;
  107|       |
  108|    239|   const std::string PEM_TRAILER = fmt("-----END {}-----", label);
  109|    239|   position = 0;
  110|  69.0k|   while(position != PEM_TRAILER.length()) {
  ------------------
  |  Branch (110:10): [True: 68.8k, False: 163]
  ------------------
  111|  68.8k|      auto b = source.read_byte();
  112|       |
  113|  68.8k|      if(!b) {
  ------------------
  |  Branch (113:10): [True: 67, False: 68.8k]
  ------------------
  114|     67|         throw Decoding_Error("PEM: No PEM trailer found");
  115|     67|      }
  116|  68.8k|      if(static_cast<char>(*b) == PEM_TRAILER[position]) {
  ------------------
  |  Branch (116:10): [True: 3.41k, False: 65.4k]
  ------------------
  117|  3.41k|         ++position;
  118|  65.4k|      } else if(position > 0) {
  ------------------
  |  Branch (118:17): [True: 9, False: 65.3k]
  ------------------
  119|      9|         throw Decoding_Error("PEM: Malformed PEM trailer");
  120|      9|      }
  121|       |
  122|  68.8k|      if(position == 0) {
  ------------------
  |  Branch (122:10): [True: 65.3k, False: 3.41k]
  ------------------
  123|  65.3k|         b64.push_back(*b);
  124|  65.3k|      }
  125|  68.8k|   }
  126|       |
  127|    163|   return base64_decode(b64.data(), b64.size());
  128|    239|}
_ZN5Botan8PEM_Code7matchesERNS_10DataSourceENSt3__117basic_string_viewIcNS3_11char_traitsIcEEEEm:
  143|  5.05k|bool matches(DataSource& source, std::string_view extra, size_t search_range) {
  144|  5.05k|   const std::string PEM_HEADER = fmt("-----BEGIN {}", extra);
  145|       |
  146|  5.05k|   secure_vector<uint8_t> search_buf(search_range);
  147|  5.05k|   const size_t got = source.peek(search_buf.data(), search_buf.size(), 0);
  148|       |
  149|  5.05k|   if(got < PEM_HEADER.length()) {
  ------------------
  |  Branch (149:7): [True: 405, False: 4.64k]
  ------------------
  150|    405|      return false;
  151|    405|   }
  152|       |
  153|  4.64k|   size_t index = 0;
  154|       |
  155|  4.75M|   for(size_t j = 0; j != got; ++j) {
  ------------------
  |  Branch (155:22): [True: 4.74M, False: 4.63k]
  ------------------
  156|  4.74M|      if(static_cast<char>(search_buf[j]) == PEM_HEADER[index]) {
  ------------------
  |  Branch (156:10): [True: 54.1k, False: 4.69M]
  ------------------
  157|  54.1k|         ++index;
  158|  4.69M|      } else {
  159|  4.69M|         index = 0;
  160|  4.69M|      }
  161|       |
  162|  4.74M|      if(index == PEM_HEADER.size()) {
  ------------------
  |  Branch (162:10): [True: 11, False: 4.74M]
  ------------------
  163|     11|         return true;
  164|     11|      }
  165|  4.74M|   }
  166|       |
  167|  4.63k|   return false;
  168|  4.64k|}

_ZN5Botan22format_hex_fingerprintENSt3__14spanIKhLm18446744073709551615EEE:
   45|  1.22k|std::string format_hex_fingerprint(std::span<const uint8_t> bits) {
   46|  1.22k|   const std::string hex = hex_encode(bits);
   47|       |
   48|  1.22k|   std::string fprint;
   49|  1.22k|   fprint.reserve(3 * bits.size());
   50|       |
   51|  33.1k|   for(size_t i = 0; i != hex.size(); i += 2) {
  ------------------
  |  Branch (51:22): [True: 31.9k, False: 1.22k]
  ------------------
   52|  31.9k|      if(i != 0) {
  ------------------
  |  Branch (52:10): [True: 30.7k, False: 1.22k]
  ------------------
   53|  30.7k|         fprint.push_back(':');
   54|  30.7k|      }
   55|       |
   56|  31.9k|      fprint.push_back(hex[i]);
   57|  31.9k|      fprint.push_back(hex[i + 1]);
   58|  31.9k|   }
   59|       |
   60|  1.22k|   return fprint;
   61|  1.22k|}

_ZN5Botan15allocate_memoryEmm:
   21|  80.0k|BOTAN_MALLOC_FN void* allocate_memory(size_t elems, size_t elem_size) {
   22|  80.0k|   if(elems == 0 || elem_size == 0) {
  ------------------
  |  Branch (22:7): [True: 0, False: 80.0k]
  |  Branch (22:21): [True: 0, False: 80.0k]
  ------------------
   23|      0|      return nullptr;
   24|      0|   }
   25|       |
   26|       |   // Some calloc implementations do not check for overflow (?!?)
   27|  80.0k|   if(!checked_mul(elems, elem_size).has_value()) {
  ------------------
  |  Branch (27:7): [True: 0, False: 80.0k]
  ------------------
   28|      0|      throw std::bad_alloc();
   29|      0|   }
   30|       |
   31|       |#if defined(BOTAN_HAS_LOCKING_ALLOCATOR)
   32|       |   // NOLINTNEXTLINE(*-const-correctness) bug in clang-tidy
   33|       |   if(void* p = mlock_allocator::instance().allocate(elems, elem_size)) {
   34|       |      return p;
   35|       |   }
   36|       |#endif
   37|       |
   38|       |#if defined(BOTAN_TARGET_OS_HAS_ALLOC_CONCEAL)
   39|       |   void* ptr = ::calloc_conceal(elems, elem_size);
   40|       |#else
   41|       |   // NOLINTNEXTLINE(*-const-correctness) bug in clang-tidy
   42|  80.0k|   void* ptr = std::calloc(elems, elem_size);  // NOLINT(*-no-malloc,*-owning-memory)
   43|  80.0k|#endif
   44|  80.0k|   if(ptr == nullptr) {
  ------------------
  |  Branch (44:7): [True: 0, False: 80.0k]
  ------------------
   45|      0|      [[unlikely]] throw std::bad_alloc();
   46|      0|   }
   47|  80.0k|   return ptr;
   48|  80.0k|}
_ZN5Botan17deallocate_memoryEPvmm:
   50|  80.0k|void deallocate_memory(void* p, size_t elems, size_t elem_size) {
   51|  80.0k|   if(p == nullptr) {
  ------------------
  |  Branch (51:7): [True: 0, False: 80.0k]
  ------------------
   52|      0|      [[unlikely]] return;
   53|      0|   }
   54|       |
   55|  80.0k|   secure_scrub_memory(p, elems * elem_size);
   56|       |
   57|       |#if defined(BOTAN_HAS_LOCKING_ALLOCATOR)
   58|       |   if(mlock_allocator::instance().deallocate(p, elems, elem_size)) {
   59|       |      return;
   60|       |   }
   61|       |#endif
   62|       |
   63|  80.0k|   std::free(p);  // NOLINT(*-no-malloc,*-owning-memory)
   64|  80.0k|}

_ZN5Botan22throw_invalid_argumentEPKcS1_S1_:
   23|     31|void throw_invalid_argument(const char* message, const char* func, const char* file) {
   24|     31|   throw Invalid_Argument(fmt("{} in {}:{}", message, func, file));
   25|     31|}

_ZN5Botan13is_valid_utf8ENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEE:
  106|  6.53k|bool is_valid_utf8(std::string_view utf8) {
  107|  6.53k|   try {
  108|  6.53k|      size_t pos = 0;
  109|  92.0k|      while(pos < utf8.size()) {
  ------------------
  |  Branch (109:13): [True: 85.4k, False: 6.53k]
  ------------------
  110|  85.4k|         const uint32_t c = next_utf8_codepoint(utf8, pos);
  111|  85.4k|         BOTAN_UNUSED(c);
  ------------------
  |  |  144|  85.4k|#define BOTAN_UNUSED Botan::ignore_params
  ------------------
  112|  85.4k|      }
  113|  6.53k|   } catch(Decoding_Error&) {
  114|    298|      return false;
  115|    298|   }
  116|  6.23k|   return true;
  117|  6.53k|}
_ZN5Botan12ucs2_to_utf8ENSt3__14spanIKhLm18446744073709551615EEE:
  119|  3.48k|std::string ucs2_to_utf8(std::span<const uint8_t> ucs2) {
  120|  3.48k|   if(ucs2.size() % 2 != 0) {
  ------------------
  |  Branch (120:7): [True: 3, False: 3.48k]
  ------------------
  121|      3|      throw Decoding_Error("Invalid length for UCS-2 string");
  122|      3|   }
  123|       |
  124|  3.48k|   const size_t chars = ucs2.size() / 2;
  125|       |
  126|  3.48k|   std::string s;
  127|  7.62k|   for(size_t i = 0; i != chars; ++i) {
  ------------------
  |  Branch (127:22): [True: 4.14k, False: 3.48k]
  ------------------
  128|  4.14k|      const uint32_t c = load_be<uint16_t>(ucs2.data(), i);
  129|  4.14k|      append_utf8_for(s, c);
  130|  4.14k|   }
  131|       |
  132|  3.48k|   return s;
  133|  3.48k|}
_ZN5Botan12ucs4_to_utf8ENSt3__14spanIKhLm18446744073709551615EEE:
  153|     89|std::string ucs4_to_utf8(std::span<const uint8_t> ucs4) {
  154|     89|   if(ucs4.size() % 4 != 0) {
  ------------------
  |  Branch (154:7): [True: 2, False: 87]
  ------------------
  155|      2|      throw Decoding_Error("Invalid length for UCS-4 string");
  156|      2|   }
  157|       |
  158|     87|   const size_t chars = ucs4.size() / 4;
  159|       |
  160|     87|   std::string s;
  161|    190|   for(size_t i = 0; i != chars; ++i) {
  ------------------
  |  Branch (161:22): [True: 103, False: 87]
  ------------------
  162|    103|      const uint32_t c = load_be<uint32_t>(ucs4.data(), i);
  163|    103|      append_utf8_for(s, c);
  164|    103|   }
  165|       |
  166|     87|   return s;
  167|     89|}
_ZN5Botan14latin1_to_utf8ENSt3__14spanIKhLm18446744073709551615EEE:
  188|    578|std::string latin1_to_utf8(std::span<const uint8_t> chars) {
  189|    578|   std::string s;
  190|  6.24k|   for(const uint8_t b : chars) {
  ------------------
  |  Branch (190:24): [True: 6.24k, False: 578]
  ------------------
  191|  6.24k|      append_utf8_for(s, static_cast<uint32_t>(b));
  192|  6.24k|   }
  193|    578|   return s;
  194|    578|}
_ZN5Botan23format_char_for_displayEc:
  196|     41|std::string format_char_for_display(char c) {
  197|     41|   std::ostringstream oss;
  198|       |
  199|     41|   oss << "'";
  200|       |
  201|     41|   if(c == '\t') {
  ------------------
  |  Branch (201:7): [True: 0, False: 41]
  ------------------
  202|      0|      oss << "\\t";
  203|     41|   } else if(c == '\n') {
  ------------------
  |  Branch (203:14): [True: 0, False: 41]
  ------------------
  204|      0|      oss << "\\n";
  205|     41|   } else if(c == '\r') {
  ------------------
  |  Branch (205:14): [True: 0, False: 41]
  ------------------
  206|      0|      oss << "\\r";
  207|     41|   } else if(static_cast<unsigned char>(c) >= 128) {
  ------------------
  |  Branch (207:14): [True: 16, False: 25]
  ------------------
  208|     16|      const unsigned char z = static_cast<unsigned char>(c);
  209|     16|      oss << "\\x" << std::hex << std::uppercase << static_cast<int>(z);
  210|     25|   } else {
  211|     25|      oss << c;
  212|     25|   }
  213|       |
  214|     41|   oss << "'";
  215|       |
  216|     41|   return oss.str();
  217|     41|}
charset.cpp:_ZN5Botan12_GLOBAL__N_119next_utf8_codepointENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEERm:
   52|  85.4k|uint32_t next_utf8_codepoint(std::string_view utf8, size_t& pos) {
   53|  85.4k|   auto read_continuation = [&]() -> uint32_t {
   54|  85.4k|      if(pos >= utf8.size()) {
   55|  85.4k|         throw Decoding_Error("Invalid UTF-8 sequence");
   56|  85.4k|      }
   57|  85.4k|      const uint8_t b = static_cast<uint8_t>(utf8[pos++]);
   58|  85.4k|      if((b & 0xC0) != 0x80) {
   59|  85.4k|         throw Decoding_Error("Invalid UTF-8 sequence");
   60|  85.4k|      }
   61|  85.4k|      return b & 0x3F;
   62|  85.4k|   };
   63|       |
   64|  85.4k|   const uint8_t lead = static_cast<uint8_t>(utf8[pos++]);
   65|  85.4k|   uint32_t c = 0;
   66|       |
   67|  85.4k|   if(lead <= 0x7F) {
  ------------------
  |  Branch (67:7): [True: 68.3k, False: 17.1k]
  ------------------
   68|  68.3k|      c = lead;
   69|  68.3k|   } else if((lead & 0xE0) == 0xC0) {
  ------------------
  |  Branch (69:14): [True: 16.8k, False: 295]
  ------------------
   70|  16.8k|      c = (lead & 0x1F) << 6;
   71|  16.8k|      c |= read_continuation();
   72|  16.8k|      if(c < 0x80) {
  ------------------
  |  Branch (72:10): [True: 4, False: 16.8k]
  ------------------
   73|      4|         throw Decoding_Error("Overlong UTF-8 sequence");
   74|      4|      }
   75|  16.8k|   } else if((lead & 0xF0) == 0xE0) {
  ------------------
  |  Branch (75:14): [True: 55, False: 240]
  ------------------
   76|     55|      c = (lead & 0x0F) << 12;
   77|     55|      c |= read_continuation() << 6;
   78|     55|      c |= read_continuation();
   79|     55|      if(c < 0x800) {
  ------------------
  |  Branch (79:10): [True: 4, False: 51]
  ------------------
   80|      4|         throw Decoding_Error("Overlong UTF-8 sequence");
   81|      4|      }
   82|    240|   } else if((lead & 0xF8) == 0xF0) {
  ------------------
  |  Branch (82:14): [True: 57, False: 183]
  ------------------
   83|     57|      c = (lead & 0x07) << 18;
   84|     57|      c |= read_continuation() << 12;
   85|     57|      c |= read_continuation() << 6;
   86|     57|      c |= read_continuation();
   87|     57|      if(c < 0x10000) {
  ------------------
  |  Branch (87:10): [True: 4, False: 53]
  ------------------
   88|      4|         throw Decoding_Error("Overlong UTF-8 sequence");
   89|      4|      }
   90|    183|   } else {
   91|    183|      throw Decoding_Error("Invalid UTF-8 sequence");
   92|    183|   }
   93|       |
   94|  85.2k|   if(c > 0x10FFFF) {
  ------------------
  |  Branch (94:7): [True: 1, False: 85.2k]
  ------------------
   95|      1|      throw Decoding_Error("UTF-8 sequence encodes value outside Unicode range");
   96|      1|   }
   97|  85.2k|   if(c >= 0xD800 && c < 0xE000) {
  ------------------
  |  Branch (97:7): [True: 58, False: 85.2k]
  |  Branch (97:22): [True: 7, False: 51]
  ------------------
   98|      7|      throw Decoding_Error("UTF-8 sequence encodes surrogate code point");
   99|      7|   }
  100|       |
  101|  85.2k|   return c;
  102|  85.2k|}
charset.cpp:_ZZN5Botan12_GLOBAL__N_119next_utf8_codepointENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEERmENK3$_0clEv:
   53|  17.0k|   auto read_continuation = [&]() -> uint32_t {
   54|  17.0k|      if(pos >= utf8.size()) {
  ------------------
  |  Branch (54:10): [True: 5, False: 17.0k]
  ------------------
   55|      5|         throw Decoding_Error("Invalid UTF-8 sequence");
   56|      5|      }
   57|  17.0k|      const uint8_t b = static_cast<uint8_t>(utf8[pos++]);
   58|  17.0k|      if((b & 0xC0) != 0x80) {
  ------------------
  |  Branch (58:10): [True: 90, False: 16.9k]
  ------------------
   59|     90|         throw Decoding_Error("Invalid UTF-8 sequence");
   60|     90|      }
   61|  16.9k|      return b & 0x3F;
   62|  17.0k|   };
charset.cpp:_ZN5Botan12_GLOBAL__N_115append_utf8_forERNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEj:
   18|  10.4k|void append_utf8_for(std::string& s, uint32_t c) {
   19|  10.4k|   if(c >= 0xD800 && c < 0xE000) {
  ------------------
  |  Branch (19:7): [True: 2.27k, False: 8.22k]
  |  Branch (19:22): [True: 14, False: 2.25k]
  ------------------
   20|     14|      throw Decoding_Error("Invalid Unicode character");
   21|     14|   }
   22|       |
   23|  10.4k|   if(c <= 0x7F) {
  ------------------
  |  Branch (23:7): [True: 4.39k, False: 6.08k]
  ------------------
   24|  4.39k|      const uint8_t b0 = static_cast<uint8_t>(c);
   25|  4.39k|      s.push_back(static_cast<char>(b0));
   26|  6.08k|   } else if(c <= 0x7FF) {
  ------------------
  |  Branch (26:14): [True: 2.93k, False: 3.14k]
  ------------------
   27|  2.93k|      const uint8_t b0 = 0xC0 | static_cast<uint8_t>(c >> 6);
   28|  2.93k|      const uint8_t b1 = 0x80 | static_cast<uint8_t>(c & 0x3F);
   29|  2.93k|      s.push_back(static_cast<char>(b0));
   30|  2.93k|      s.push_back(static_cast<char>(b1));
   31|  3.14k|   } else if(c <= 0xFFFF) {
  ------------------
  |  Branch (31:14): [True: 3.06k, False: 89]
  ------------------
   32|  3.06k|      const uint8_t b0 = 0xE0 | static_cast<uint8_t>(c >> 12);
   33|  3.06k|      const uint8_t b1 = 0x80 | static_cast<uint8_t>((c >> 6) & 0x3F);
   34|  3.06k|      const uint8_t b2 = 0x80 | static_cast<uint8_t>(c & 0x3F);
   35|  3.06k|      s.push_back(static_cast<char>(b0));
   36|  3.06k|      s.push_back(static_cast<char>(b1));
   37|  3.06k|      s.push_back(static_cast<char>(b2));
   38|  3.06k|   } else if(c <= 0x10FFFF) {
  ------------------
  |  Branch (38:14): [True: 27, False: 62]
  ------------------
   39|     27|      const uint8_t b0 = 0xF0 | static_cast<uint8_t>(c >> 18);
   40|     27|      const uint8_t b1 = 0x80 | static_cast<uint8_t>((c >> 12) & 0x3F);
   41|     27|      const uint8_t b2 = 0x80 | static_cast<uint8_t>((c >> 6) & 0x3F);
   42|     27|      const uint8_t b3 = 0x80 | static_cast<uint8_t>(c & 0x3F);
   43|     27|      s.push_back(static_cast<char>(b0));
   44|     27|      s.push_back(static_cast<char>(b1));
   45|     27|      s.push_back(static_cast<char>(b2));
   46|     27|      s.push_back(static_cast<char>(b3));
   47|     62|   } else {
   48|     62|      throw Decoding_Error("Invalid Unicode character");
   49|     62|   }
   50|  10.4k|}

_ZN5Botan5CPUID10CPUID_DataC2Ev:
   80|      1|CPUID::CPUID_Data::CPUID_Data() {
   81|       |   // NOLINTBEGIN(*-prefer-member-initializer)
   82|      1|#if defined(BOTAN_HAS_CPUID_DETECTION)
   83|      1|   m_processor_features = detect_cpu_features(~cleared_cpuid_bits());
   84|       |#else
   85|       |   m_processor_features = 0;
   86|       |#endif
   87|       |   // NOLINTEND(*-prefer-member-initializer)
   88|      1|}
cpuid.cpp:_ZN5Botan12_GLOBAL__N_118cleared_cpuid_bitsEv:
   59|      1|uint32_t cleared_cpuid_bits() {
   60|      1|   uint32_t cleared = 0;
   61|       |
   62|      1|   #if defined(BOTAN_HAS_OS_UTILS)
   63|      1|   std::string clear_cpuid_env;
   64|      1|   if(OS::read_env_variable(clear_cpuid_env, "BOTAN_CLEAR_CPUID")) {
  ------------------
  |  Branch (64:7): [True: 0, False: 1]
  ------------------
   65|      0|      for(const auto& cpuid : split_on(clear_cpuid_env, ',')) {
  ------------------
  |  Branch (65:29): [True: 0, False: 0]
  ------------------
   66|      0|         if(auto bit = CPUID::bit_from_string(cpuid)) {
  ------------------
  |  Branch (66:18): [True: 0, False: 0]
  ------------------
   67|      0|            cleared |= bit->as_u32();
   68|      0|         }
   69|      0|      }
   70|      0|   }
   71|      1|   #endif
   72|       |
   73|      1|   return cleared;
   74|      1|}

_ZN5Botan5CPUID10CPUID_Data19detect_cpu_featuresEj:
   62|      1|uint32_t CPUID::CPUID_Data::detect_cpu_features(uint32_t allowed) {
   63|      1|   enum class x86_CPUID_1_bits : uint64_t {
   64|      1|      RDTSC = (1ULL << 4),
   65|      1|      SSE2 = (1ULL << 26),
   66|      1|      CLMUL = (1ULL << 33),
   67|      1|      SSSE3 = (1ULL << 41),
   68|      1|      SSE41 = (1ULL << 51),
   69|      1|      AESNI = (1ULL << 57),
   70|       |      // AVX + OSXSAVE
   71|      1|      OSXSAVE = (1ULL << 59) | (1ULL << 60),
   72|      1|      RDRAND = (1ULL << 62)
   73|      1|   };
   74|       |
   75|      1|   enum class x86_CPUID_7_bits : uint64_t {
   76|      1|      BMI1 = (1ULL << 3),
   77|      1|      AVX2 = (1ULL << 5),
   78|      1|      BMI2 = (1ULL << 8),
   79|      1|      BMI_1_AND_2 = BMI1 | BMI2,
   80|      1|      AVX512_F = (1ULL << 16),
   81|      1|      AVX512_DQ = (1ULL << 17),
   82|      1|      RDSEED = (1ULL << 18),
   83|      1|      ADX = (1ULL << 19),
   84|      1|      AVX512_IFMA = (1ULL << 21),
   85|      1|      SHA = (1ULL << 29),
   86|      1|      AVX512_BW = (1ULL << 30),
   87|      1|      AVX512_VL = (1ULL << 31),
   88|      1|      AVX512_VBMI = (1ULL << 33),
   89|      1|      AVX512_VBMI2 = (1ULL << 38),
   90|      1|      GFNI = (1ULL << 40),
   91|      1|      AVX512_VAES = (1ULL << 41),
   92|      1|      AVX512_VCLMUL = (1ULL << 42),
   93|      1|      AVX512_VBITALG = (1ULL << 44),
   94|       |
   95|       |      /*
   96|       |      We only enable AVX512 support if all of the below flags are available
   97|       |
   98|       |      This is more than we strictly need for most uses, however it also has
   99|       |      the effect of preventing execution of AVX512 codepaths on cores that
  100|       |      have serious downclocking problems when AVX512 code executes,
  101|       |      especially Intel Skylake.
  102|       |
  103|       |      VBMI2/VBITALG are the key flags here as they restrict us to Intel Ice
  104|       |      Lake/Rocket Lake, or AMD Zen4, all of which do not have penalties for
  105|       |      executing AVX512.
  106|       |
  107|       |      There is nothing stopping some future processor from supporting the
  108|       |      above flags and having AVX512 penalties, but maybe you should not have
  109|       |      bought such a processor.
  110|       |      */
  111|      1|      AVX512_PROFILE =
  112|      1|         AVX512_F | AVX512_DQ | AVX512_IFMA | AVX512_BW | AVX512_VL | AVX512_VBMI | AVX512_VBMI2 | AVX512_VBITALG,
  113|      1|   };
  114|       |
  115|       |   // NOLINTNEXTLINE(performance-enum-size)
  116|      1|   enum class x86_CPUID_7_1_bits : uint64_t {
  117|      1|      SHA512 = (1 << 0),
  118|      1|      SM3 = (1 << 1),
  119|      1|      SM4 = (1 << 2),
  120|      1|   };
  121|       |
  122|      1|   uint32_t feat = 0;
  123|      1|   uint32_t cpuid[4] = {0};
  124|      1|   bool has_os_ymm_support = false;
  125|      1|   bool has_os_zmm_support = false;
  126|       |
  127|       |   // CPUID 0: vendor identification, max sublevel
  128|      1|   invoke_cpuid(0, cpuid);
  129|       |
  130|      1|   const uint32_t max_supported_sublevel = cpuid[0];
  131|       |
  132|      1|   if(max_supported_sublevel >= 1) {
  ------------------
  |  Branch (132:7): [True: 1, False: 0]
  ------------------
  133|       |      // CPUID 1: feature bits
  134|      1|      invoke_cpuid(1, cpuid);
  135|      1|      const uint64_t flags0 = (static_cast<uint64_t>(cpuid[2]) << 32) | cpuid[3];
  136|       |
  137|      1|      feat |= if_set(flags0, x86_CPUID_1_bits::RDTSC, CPUFeature::Bit::RDTSC, allowed);
  138|       |
  139|      1|      feat |= if_set(flags0, x86_CPUID_1_bits::RDRAND, CPUFeature::Bit::RDRAND, allowed);
  140|       |
  141|      1|      feat |= if_set(flags0, x86_CPUID_1_bits::SSE2, CPUFeature::Bit::SSE2, allowed);
  142|       |
  143|      1|      if(is_set(feat, CPUFeature::Bit::SSE2)) {
  ------------------
  |  Branch (143:10): [True: 1, False: 0]
  ------------------
  144|      1|         feat |= if_set(flags0, x86_CPUID_1_bits::SSSE3, CPUFeature::Bit::SSSE3, allowed);
  145|       |
  146|      1|         if(is_set(feat, CPUFeature::Bit::SSSE3)) {
  ------------------
  |  Branch (146:13): [True: 1, False: 0]
  ------------------
  147|      1|            feat |= if_set(flags0, x86_CPUID_1_bits::CLMUL, CPUFeature::Bit::CLMUL, allowed);
  148|      1|            feat |= if_set(flags0, x86_CPUID_1_bits::AESNI, CPUFeature::Bit::AESNI, allowed);
  149|      1|         }
  150|       |
  151|      1|         const uint64_t osxsave64 = static_cast<uint64_t>(x86_CPUID_1_bits::OSXSAVE);
  152|      1|         if((flags0 & osxsave64) == osxsave64) {
  ------------------
  |  Branch (152:13): [True: 1, False: 0]
  ------------------
  153|      1|            const uint64_t xcr_flags = xgetbv();
  154|      1|            if((xcr_flags & 0x6) == 0x6) {
  ------------------
  |  Branch (154:16): [True: 1, False: 0]
  ------------------
  155|      1|               has_os_ymm_support = true;
  156|      1|               has_os_zmm_support = (xcr_flags & 0xE0) == 0xE0;
  157|      1|            }
  158|      1|         }
  159|      1|      }
  160|      1|   }
  161|       |
  162|      1|   if(max_supported_sublevel >= 7) {
  ------------------
  |  Branch (162:7): [True: 1, False: 0]
  ------------------
  163|      1|      clear_mem(cpuid, 4);
  164|      1|      invoke_cpuid_sublevel(7, 0, cpuid);
  165|       |
  166|      1|      const uint64_t flags7 = (static_cast<uint64_t>(cpuid[2]) << 32) | cpuid[1];
  167|       |
  168|      1|      clear_mem(cpuid, 4);
  169|      1|      invoke_cpuid_sublevel(7, 1, cpuid);
  170|      1|      const uint32_t flags7_1 = cpuid[0];
  171|       |
  172|      1|      feat |= if_set(flags7, x86_CPUID_7_bits::RDSEED, CPUFeature::Bit::RDSEED, allowed);
  173|      1|      feat |= if_set(flags7, x86_CPUID_7_bits::ADX, CPUFeature::Bit::ADX, allowed);
  174|       |
  175|       |      /*
  176|       |      We only set the BMI bit if both BMI1 and BMI2 are supported, since
  177|       |      typically we want to use both extensions in the same code.
  178|       |      */
  179|      1|      feat |= if_set(flags7, x86_CPUID_7_bits::BMI_1_AND_2, CPUFeature::Bit::BMI, allowed);
  180|       |
  181|      1|      if(is_set(feat, CPUFeature::Bit::SSSE3)) {
  ------------------
  |  Branch (181:10): [True: 1, False: 0]
  ------------------
  182|      1|         feat |= if_set(flags7, x86_CPUID_7_bits::SHA, CPUFeature::Bit::SHA, allowed);
  183|      1|         feat |= if_set(flags7_1, x86_CPUID_7_1_bits::SM3, CPUFeature::Bit::SM3, allowed);
  184|       |
  185|       |         // We only consider AVX2 if SSSE3 is supported
  186|      1|         if(has_os_ymm_support) {
  ------------------
  |  Branch (186:13): [True: 1, False: 0]
  ------------------
  187|      1|            feat |= if_set(flags7, x86_CPUID_7_bits::AVX2, CPUFeature::Bit::AVX2, allowed);
  188|       |
  189|      1|            if(is_set(feat, CPUFeature::Bit::AVX2)) {
  ------------------
  |  Branch (189:16): [True: 1, False: 0]
  ------------------
  190|      1|               feat |= if_set(flags7, x86_CPUID_7_bits::GFNI, CPUFeature::Bit::GFNI, allowed);
  191|      1|               feat |= if_set(flags7, x86_CPUID_7_bits::AVX512_VAES, CPUFeature::Bit::AVX2_AES, allowed);
  192|      1|               feat |= if_set(flags7, x86_CPUID_7_bits::AVX512_VCLMUL, CPUFeature::Bit::AVX2_CLMUL, allowed);
  193|      1|               feat |= if_set(flags7_1, x86_CPUID_7_1_bits::SHA512, CPUFeature::Bit::SHA512, allowed);
  194|      1|               feat |= if_set(flags7_1, x86_CPUID_7_1_bits::SM4, CPUFeature::Bit::SM4, allowed);
  195|       |
  196|       |               // Likewise we only consider AVX-512 if AVX2 is supported
  197|      1|               if(has_os_zmm_support) {
  ------------------
  |  Branch (197:19): [True: 0, False: 1]
  ------------------
  198|      0|                  feat |= if_set(flags7, x86_CPUID_7_bits::AVX512_PROFILE, CPUFeature::Bit::AVX512, allowed);
  199|       |
  200|      0|                  if(is_set(feat, CPUFeature::Bit::AVX512)) {
  ------------------
  |  Branch (200:22): [True: 0, False: 0]
  ------------------
  201|      0|                     feat |= if_set(flags7, x86_CPUID_7_bits::AVX512_VAES, CPUFeature::Bit::AVX512_AES, allowed);
  202|      0|                     feat |= if_set(flags7, x86_CPUID_7_bits::AVX512_VCLMUL, CPUFeature::Bit::AVX512_CLMUL, allowed);
  203|      0|                  }
  204|      0|               }
  205|      1|            }
  206|      1|         }
  207|      1|      }
  208|      1|   }
  209|       |
  210|       |/*
  211|       |   * If we don't have access to CPUID, we can still safely assume that
  212|       |   * any x86-64 processor has SSE2 and RDTSC
  213|       |   */
  214|      1|#if defined(BOTAN_TARGET_ARCH_IS_X86_64)
  215|      1|   if(feat == 0) {
  ------------------
  |  Branch (215:7): [True: 0, False: 1]
  ------------------
  216|      0|      feat |= CPUFeature::Bit::SSE2 & allowed;
  217|      0|      feat |= CPUFeature::Bit::RDTSC & allowed;
  218|      0|   }
  219|      1|#endif
  220|       |
  221|      1|   return feat;
  222|      1|}
cpuid_x86.cpp:_ZN5Botan12_GLOBAL__N_112invoke_cpuidEjPj:
   24|      2|void invoke_cpuid(uint32_t type, uint32_t out[4]) {
   25|      2|   clear_mem(out, 4);
   26|       |
   27|      2|#if defined(BOTAN_USE_GCC_INLINE_ASM)
   28|       |   // NOLINTNEXTLINE(*-no-assembler)
   29|      2|   asm volatile("cpuid\n\t" : "=a"(out[0]), "=b"(out[1]), "=c"(out[2]), "=d"(out[3]) : "0"(type));
   30|       |
   31|       |#elif defined(BOTAN_BUILD_COMPILER_IS_MSVC)
   32|       |   __cpuid((int*)out, type);
   33|       |
   34|       |#else
   35|       |   BOTAN_UNUSED(type);
   36|       |   #warning "No way of calling x86 cpuid instruction for this compiler"
   37|       |#endif
   38|      2|}
cpuid_x86.cpp:_ZN5Botan12_GLOBAL__N_16xgetbvEv:
   56|      1|BOTAN_FUNC_ISA("xsave") uint64_t xgetbv() {
   57|       |   return _xgetbv(0);
   58|      1|}
cpuid_x86.cpp:_ZN5Botan12_GLOBAL__N_121invoke_cpuid_sublevelEjjPj:
   40|      2|void invoke_cpuid_sublevel(uint32_t type, uint32_t level, uint32_t out[4]) {
   41|      2|   clear_mem(out, 4);
   42|       |
   43|      2|#if defined(BOTAN_USE_GCC_INLINE_ASM)
   44|       |   // NOLINTNEXTLINE(*-no-assembler)
   45|      2|   asm volatile("cpuid\n\t" : "=a"(out[0]), "=b"(out[1]), "=c"(out[2]), "=d"(out[3]) : "0"(type), "2"(level));
   46|       |
   47|       |#elif defined(BOTAN_BUILD_COMPILER_IS_MSVC)
   48|       |   __cpuidex((int*)out, type, level);
   49|       |
   50|       |#else
   51|       |   BOTAN_UNUSED(type, level);
   52|       |   #warning "No way of calling x86 cpuid instruction for this compiler"
   53|       |#endif
   54|      2|}

_ZN5Botan10DataSource9read_byteERh:
   27|  4.87M|size_t DataSource::read_byte(uint8_t& out) {
   28|  4.87M|   return read(&out, 1);
   29|  4.87M|}
_ZN5Botan10DataSource9read_byteEv:
   34|   359k|std::optional<uint8_t> DataSource::read_byte() {
   35|   359k|   uint8_t b = 0;
   36|   359k|   if(this->read(&b, 1) == 1) {
  ------------------
  |  Branch (36:7): [True: 356k, False: 2.77k]
  ------------------
   37|   356k|      return b;
   38|   356k|   } else {
   39|  2.77k|      return {};
   40|  2.77k|   }
   41|   359k|}
_ZNK5Botan10DataSource9peek_byteERh:
   46|  5.37k|size_t DataSource::peek_byte(uint8_t& out) const {
   47|  5.37k|   return peek(&out, 1, 0);
   48|  5.37k|}
_ZN5Botan17DataSource_Memory4readEPhm:
   73|   361k|size_t DataSource_Memory::read(uint8_t out[], size_t length) {
   74|   361k|   const size_t got = std::min<size_t>(m_source.size() - m_offset, length);
   75|   361k|   copy_mem(out, m_source.data() + m_offset, got);
   76|   361k|   m_offset += got;
   77|   361k|   return got;
   78|   361k|}
_ZN5Botan17DataSource_Memory15check_availableEm:
   80|  82.2k|bool DataSource_Memory::check_available(size_t n) {
   81|  82.2k|   return (n <= (m_source.size() - m_offset));
   82|  82.2k|}
_ZNK5Botan17DataSource_Memory4peekEPhmm:
   87|  10.4k|size_t DataSource_Memory::peek(uint8_t out[], size_t length, size_t peek_offset) const {
   88|  10.4k|   const size_t bytes_left = m_source.size() - m_offset;
   89|  10.4k|   if(peek_offset >= bytes_left) {
  ------------------
  |  Branch (89:7): [True: 0, False: 10.4k]
  ------------------
   90|      0|      return 0;
   91|      0|   }
   92|       |
   93|  10.4k|   const size_t got = std::min(bytes_left - peek_offset, length);
   94|  10.4k|   copy_mem(out, &m_source[m_offset + peek_offset], got);
   95|  10.4k|   return got;
   96|  10.4k|}
_ZNK5Botan17DataSource_Memory11end_of_dataEv:
  101|  42.2k|bool DataSource_Memory::end_of_data() const {
  102|  42.2k|   return (m_offset == m_source.size());
  103|  42.2k|}

_ZN5Botan7DNSName11from_stringENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
  118|  1.59k|std::optional<DNSName> DNSName::from_string(std::string_view name) {
  119|  1.59k|   if(auto canon = check_and_canonicalize_dns_name(name)) {
  ------------------
  |  Branch (119:12): [True: 1.38k, False: 203]
  ------------------
  120|       |      // TODO(C++23) std::string::contains
  121|  1.38k|      if(canon->find('*') != std::string::npos) {
  ------------------
  |  Branch (121:10): [True: 15, False: 1.37k]
  ------------------
  122|     15|         return {};
  123|     15|      }
  124|  1.37k|      return DNSName(std::move(*canon));
  125|  1.38k|   } else {
  126|    203|      return {};
  127|    203|   }
  128|  1.59k|}
_ZN5Botan7DNSName15from_san_stringENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
  131|  13.1k|std::optional<DNSName> DNSName::from_san_string(std::string_view name) {
  132|  13.1k|   if(auto canon = check_and_canonicalize_dns_name(name)) {
  ------------------
  |  Branch (132:12): [True: 13.0k, False: 102]
  ------------------
  133|       |      /*
  134|       |      Validate the wildcard shape: at most one "*", and if present it must be in
  135|       |      the leftmost label (no "." before it). This matches the RFC 6125 6.4.3
  136|       |      form that host_wildcard_match accepts and rejects eg "*.*.example.com" or
  137|       |      "foo.*.example.com"
  138|       |      */
  139|  13.0k|      const auto first_star = canon->find('*');
  140|  13.0k|      if(first_star != std::string::npos) {
  ------------------
  |  Branch (140:10): [True: 262, False: 12.7k]
  ------------------
  141|    262|         if(canon->find('*', first_star + 1) != std::string::npos) {
  ------------------
  |  Branch (141:13): [True: 4, False: 258]
  ------------------
  142|      4|            return std::nullopt;
  143|      4|         }
  144|    258|         const auto first_dot = canon->find('.');
  145|    258|         if(first_dot != std::string::npos && first_dot < first_star) {
  ------------------
  |  Branch (145:13): [True: 188, False: 70]
  |  Branch (145:47): [True: 5, False: 183]
  ------------------
  146|      5|            return std::nullopt;
  147|      5|         }
  148|    258|      }
  149|  13.0k|      return DNSName(std::move(*canon));
  150|  13.0k|   } else {
  151|    102|      return {};
  152|    102|   }
  153|  13.1k|}
dns_name.cpp:_ZN5Botan12_GLOBAL__N_131check_and_canonicalize_dns_nameENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   22|  14.7k|std::optional<std::string> check_and_canonicalize_dns_name(std::string_view name) {
   23|       |   // Purported name is longer than what DNS allows
   24|  14.7k|   if(name.size() > 255) {
  ------------------
  |  Branch (24:7): [True: 3, False: 14.7k]
  ------------------
   25|      3|      return {};
   26|      3|   }
   27|       |
   28|       |   // DNS names are not empty
   29|  14.7k|   if(name.empty()) {
  ------------------
  |  Branch (29:7): [True: 1, False: 14.7k]
  ------------------
   30|      1|      return {};
   31|      1|   }
   32|       |
   33|       |   // DNS names do not start with or end with a dot
   34|  14.7k|   if(name.starts_with(".") || name.ends_with(".")) {
  ------------------
  |  Branch (34:7): [True: 9, False: 14.7k]
  |  Branch (34:32): [True: 9, False: 14.7k]
  ------------------
   35|     18|      return {};
   36|     18|   }
   37|       |
   38|       |   /*
   39|       |   * Table mapping uppercase to lowercase and only including values valid for
   40|       |   * DNS names: A-Z, a-z, 0-9, '-', '.', plus '*' for wildcarding (RFC 1035)
   41|       |   */
   42|       |   // clang-format off
   43|  14.7k|   constexpr uint8_t DNS_CHAR_MAPPING[128] = {
   44|  14.7k|      '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0',
   45|  14.7k|      '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0', '\0',
   46|  14.7k|      '\0', '\0', '\0', '\0',  '*', '\0', '\0',  '-',  '.', '\0',  '0',  '1',  '2',  '3',  '4',  '5',  '6',  '7',  '8',
   47|  14.7k|       '9', '\0', '\0', '\0', '\0', '\0', '\0', '\0',  'a',  'b',  'c',  'd',  'e',  'f',  'g',  'h',  'i',  'j',  'k',
   48|  14.7k|       'l',  'm',  'n',  'o',  'p',  'q',  'r',  's',  't',  'u',  'v',  'w',  'x',  'y',  'z', '\0', '\0', '\0', '\0',
   49|  14.7k|       '\0', '\0',  'a',  'b',  'c',  'd',  'e',  'f',  'g',  'h',  'i',  'j',  'k',  'l',  'm',  'n',  'o',  'p',  'q',
   50|  14.7k|       'r',  's',  't',  'u',  'v',  'w',  'x',  'y',  'z', '\0', '\0', '\0', '\0', '\0',
   51|  14.7k|   };
   52|       |   // clang-format on
   53|       |
   54|  14.7k|   std::string canon;
   55|  14.7k|   canon.reserve(name.size());
   56|       |
   57|       |   // RFC 1035: DNS labels must not exceed 63 characters
   58|  14.7k|   size_t current_label_length = 0;
   59|       |
   60|   268k|   for(size_t i = 0; i != name.size(); ++i) {
  ------------------
  |  Branch (60:22): [True: 253k, False: 14.4k]
  ------------------
   61|   253k|      const char c = name[i];
   62|       |
   63|   253k|      if(c == '.') {
  ------------------
  |  Branch (63:10): [True: 20.7k, False: 233k]
  ------------------
   64|       |         // Sequential dot (.) characters are not allowed
   65|  20.7k|         if(i > 0 && name[i - 1] == '.') {
  ------------------
  |  Branch (65:13): [True: 20.7k, False: 0]
  |  Branch (65:22): [True: 4, False: 20.7k]
  ------------------
   66|      4|            return {};
   67|      4|         }
   68|       |
   69|       |         // Empty labels are not allowed
   70|  20.7k|         if(current_label_length == 0) {
  ------------------
  |  Branch (70:13): [True: 0, False: 20.7k]
  ------------------
   71|      0|            return {};
   72|      0|         }
   73|  20.7k|         current_label_length = 0;  // Reset for next label
   74|   233k|      } else {
   75|   233k|         current_label_length++;
   76|       |
   77|       |         // Labels cannot exceed maximum DNS label length
   78|   233k|         if(current_label_length > 63) {
  ------------------
  |  Branch (78:13): [True: 1, False: 233k]
  ------------------
   79|      1|            return {};
   80|      1|         }
   81|   233k|      }
   82|       |
   83|   253k|      const uint8_t cu = static_cast<uint8_t>(c);
   84|       |      // DNS names are not allowed to include any high-bit set characters
   85|   253k|      if(cu >= 128) {
  ------------------
  |  Branch (85:10): [True: 102, False: 253k]
  ------------------
   86|    102|         return {};
   87|    102|      }
   88|   253k|      const uint8_t mapped = DNS_CHAR_MAPPING[cu];
   89|       |      // DNS names are from a restricted character set
   90|   253k|      if(mapped == 0) {
  ------------------
  |  Branch (90:10): [True: 157, False: 253k]
  ------------------
   91|    157|         return {};
   92|    157|      }
   93|       |
   94|   253k|      if(mapped == '-') {
  ------------------
  |  Branch (94:10): [True: 9.13k, False: 244k]
  ------------------
   95|       |         // DNS labels are not allowed to include a leading or trailing hyphen
   96|  9.13k|         if(i == 0 || (i > 0 && name[i - 1] == '.')) {
  ------------------
  |  Branch (96:13): [True: 3, False: 9.13k]
  |  Branch (96:24): [True: 9.13k, False: 0]
  |  Branch (96:33): [True: 1, False: 9.12k]
  ------------------
   97|      4|            return {};  // leading hyphen
   98|      4|         }
   99|       |
  100|  9.12k|         if(i == name.size() - 1 || (i < name.size() - 1 && name[i + 1] == '.')) {
  ------------------
  |  Branch (100:13): [True: 8, False: 9.12k]
  |  Branch (100:38): [True: 9.12k, False: 0]
  |  Branch (100:61): [True: 7, False: 9.11k]
  ------------------
  101|     15|            return {};  // trailing hyphen
  102|     15|         }
  103|  9.12k|      }
  104|   253k|      canon.push_back(static_cast<char>(mapped));
  105|   253k|   }
  106|       |
  107|       |   // This should never be hit, due to earlier validation steps
  108|  14.4k|   if(current_label_length == 0) {
  ------------------
  |  Branch (108:7): [True: 0, False: 14.4k]
  ------------------
  109|      0|      return {};
  110|      0|   }
  111|       |
  112|  14.4k|   return canon;
  113|  14.4k|}

_ZNK5Botan12EmailAddress9to_stringEv:
   73|     11|std::string EmailAddress::to_string() const {
   74|     11|   return fmt("{}@{}", m_local_part, m_domain.to_string());
   75|     11|}
_ZN5Botan12EmailAddress11from_stringENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   78|    454|std::optional<EmailAddress> EmailAddress::from_string(std::string_view addr) {
   79|    454|   auto parsed = parse_email_address(addr);
   80|       |
   81|    454|   if(parsed) {
  ------------------
  |  Branch (81:7): [True: 212, False: 242]
  ------------------
   82|       |      // Verify the local-part is all ASCII
   83|  1.64k|      for(const char c : parsed->first) {
  ------------------
  |  Branch (83:24): [True: 1.64k, False: 204]
  ------------------
   84|  1.64k|         if(static_cast<uint8_t>(c) >= 0x80) {
  ------------------
  |  Branch (84:13): [True: 8, False: 1.63k]
  ------------------
   85|      8|            return {};
   86|      8|         }
   87|  1.64k|      }
   88|    204|      return EmailAddress(std::move(parsed->first), std::move(parsed->second));
   89|    242|   } else {
   90|    242|      return {};
   91|    242|   }
   92|    454|}
email.cpp:_ZN5Botan12_GLOBAL__N_119parse_email_addressENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   16|    454|std::optional<std::pair<std::string, DNSName>> parse_email_address(std::string_view addr) {
   17|       |   /*
   18|       |   * RFC 5322 atext: ALPHA / DIGIT plus "!#$%&'*+-/=?^_`{|}~" (plus ".")
   19|       |   *
   20|       |   * Anything outside this set in the local part requires quoting,
   21|       |   * which we deliberately don't accept.
   22|       |   */
   23|    454|   constexpr auto is_atext_or_dot = CharacterValidityTable::alpha_numeric_plus(".!#$%&'*+-/=?^_`{|}~");
   24|       |
   25|    454|   if(addr.empty() || !is_valid_utf8(addr)) {
  ------------------
  |  Branch (25:7): [True: 0, False: 454]
  |  Branch (25:23): [True: 134, False: 320]
  ------------------
   26|    134|      return {};
   27|    134|   }
   28|       |
   29|    320|   const auto at = addr.find('@');
   30|       |
   31|       |   // Must be one (and only one) @ sign
   32|    320|   if(at == std::string_view::npos || addr.find('@', at + 1) != std::string_view::npos) {
  ------------------
  |  Branch (32:7): [True: 21, False: 299]
  |  Branch (32:39): [True: 10, False: 289]
  ------------------
   33|     31|      return {};
   34|     31|   }
   35|       |
   36|       |   // Split at the @ sign and verify both halves are non-empty
   37|    289|   const std::string_view local = addr.substr(0, at);
   38|    289|   const std::string_view domain = addr.substr(at + 1);
   39|       |
   40|    289|   if(local.empty() || domain.empty()) {
  ------------------
  |  Branch (40:7): [True: 3, False: 286]
  |  Branch (40:24): [True: 2, False: 284]
  ------------------
   41|      5|      return {};
   42|      5|   }
   43|       |
   44|       |   // RFC 3696 section 3:
   45|       |   //
   46|       |   //  period (".") may also appear [in an email address local-part],
   47|       |   //  but may not be used to start or end the local part, nor may two
   48|       |   //  or more consecutive periods appear.
   49|       |
   50|       |   // TODO(C++23): use std::string::contains
   51|    284|   if(local.starts_with('.') || local.ends_with('.') || local.find("..") != std::string_view::npos) {
  ------------------
  |  Branch (51:7): [True: 1, False: 283]
  |  Branch (51:33): [True: 3, False: 280]
  |  Branch (51:57): [True: 5, False: 275]
  ------------------
   52|      9|      return {};
   53|      9|   }
   54|       |
   55|       |   // RFC 5322 dot-atom. This intentionally omits support for quoting
   56|  2.26k|   for(const char c : local) {
  ------------------
  |  Branch (56:21): [True: 2.26k, False: 249]
  ------------------
   57|       |      // Here we accept high bit for UTF-8 for SmtpUtf8Mailbox
   58|  2.26k|      if(!is_atext_or_dot(c) && static_cast<uint8_t>(c) < 0x80) {
  ------------------
  |  Branch (58:10): [True: 58, False: 2.20k]
  |  Branch (58:33): [True: 26, False: 32]
  ------------------
   59|     26|         return {};
   60|     26|      }
   61|  2.26k|   }
   62|       |
   63|    249|   auto parsed_domain = DNSName::from_string(domain);
   64|    249|   if(!parsed_domain.has_value()) {
  ------------------
  |  Branch (64:7): [True: 37, False: 212]
  ------------------
   65|     37|      return {};
   66|     37|   }
   67|       |
   68|    212|   return std::make_pair(std::string(local), parsed_domain.value());
   69|    249|}

_ZN5Botan9ExceptionC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   71|  12.9k|Exception::Exception(std::string_view msg) : m_msg(msg) {}
_ZN5Botan9ExceptionC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEERKSt9exception:
   73|  4.69k|Exception::Exception(std::string_view msg, const std::exception& e) : m_msg(fmt("{} failed with {}", msg, e.what())) {}
_ZN5Botan16Invalid_ArgumentC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   77|    343|Invalid_Argument::Invalid_Argument(std::string_view msg) : Exception(msg) {}
_ZN5Botan14Decoding_ErrorC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
  125|  12.6k|Decoding_Error::Decoding_Error(std::string_view name) : Exception(name) {}
_ZN5Botan14Decoding_ErrorC2ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEERKSt9exception:
  130|  4.69k|Decoding_Error::Decoding_Error(std::string_view msg, const std::exception& e) : Exception(msg, e) {}

_ZN5Botan11IPv4Address11from_stringENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   90|  1.10k|std::optional<IPv4Address> IPv4Address::from_string(std::string_view str) {
   91|  1.10k|   if(auto ipv4 = string_to_ipv4(str)) {
  ------------------
  |  Branch (91:12): [True: 2, False: 1.10k]
  ------------------
   92|      2|      return IPv4Address(*ipv4);
   93|  1.10k|   } else {
   94|  1.10k|      return {};
   95|  1.10k|   }
   96|  1.10k|}
_ZN5Botan11IPv4Address7netmaskEm:
   99|      8|IPv4Address IPv4Address::netmask(size_t bits) {
  100|      8|   BOTAN_ARG_CHECK(bits <= 32, "IPv4 netmask prefix length must be at most 32");
  ------------------
  |  |   35|      8|   do {                                                          \
  |  |   36|      8|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */              \
  |  |   37|      8|      if(!(expr)) {                                              \
  |  |  ------------------
  |  |  |  Branch (37:10): [True: 0, False: 8]
  |  |  ------------------
  |  |   38|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */     \
  |  |   39|      0|         Botan::throw_invalid_argument(msg, __func__, __FILE__); \
  |  |   40|      0|      }                                                          \
  |  |   41|      8|   } while(0)
  |  |  ------------------
  |  |  |  Branch (41:12): [Folded, False: 8]
  |  |  ------------------
  ------------------
  101|      8|   if(bits == 0) {
  ------------------
  |  Branch (101:7): [True: 1, False: 7]
  ------------------
  102|      1|      return IPv4Address(0);
  103|      1|   }
  104|      7|   return IPv4Address(0xFFFFFFFF << (32 - bits));
  105|      8|}
_ZNK5Botan11IPv4Address13prefix_lengthEv:
  129|     34|std::optional<size_t> IPv4Address::prefix_length() const {
  130|       |   // A 32-bit mask m is a CIDR prefix iff (~m) + 1 is a power of two or zero,
  131|       |   // i.e. (~m) & (~m + 1) == 0. If so, the prefix length is the leading-one count.
  132|     34|   const uint32_t inv = ~m_ip;
  133|     34|   if((inv & (inv + 1)) != 0) {
  ------------------
  |  Branch (133:7): [True: 26, False: 8]
  ------------------
  134|     26|      return std::nullopt;
  135|     26|   }
  136|      8|   return std::countl_one(m_ip);
  137|     34|}
_ZN5Botan10IPv4SubnetC2ENS_11IPv4AddressEm:
  140|      8|      m_address(address & IPv4Address::netmask(prefix_length)), m_prefix_length(static_cast<uint8_t>(prefix_length)) {
  141|       |   // IPv4Address::netmask validates prefix_length <= 32, so by this point
  142|       |   // the static_cast is in range.
  143|      8|}
_ZN5Botan10IPv4Subnet21from_address_and_maskENSt3__14spanIKhLm8EEE:
  154|     34|std::optional<IPv4Subnet> IPv4Subnet::from_address_and_mask(std::span<const uint8_t, 8> addr_and_mask) {
  155|     34|   const IPv4Address addr(load_be<uint32_t>(addr_and_mask.data(), 0));
  156|     34|   const IPv4Address mask(load_be<uint32_t>(addr_and_mask.data(), 1));
  157|       |
  158|     34|   if(const auto plen = mask.prefix_length()) {
  ------------------
  |  Branch (158:18): [True: 8, False: 26]
  ------------------
  159|      8|      return IPv4Subnet(addr, *plen);
  160|     26|   } else {
  161|     26|      return {};
  162|     26|   }
  163|     34|}
ipv4_address.cpp:_ZN5Botan12_GLOBAL__N_114string_to_ipv4ENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   21|  1.10k|std::optional<uint32_t> string_to_ipv4(std::string_view str) {
   22|       |   // At least 3 dots + 4 1-digit integers
   23|       |   // At most 3 dots + 4 3-digit integers
   24|  1.10k|   if(str.size() < 3 + 4 * 1 || str.size() > 3 + 4 * 3) {
  ------------------
  |  Branch (24:7): [True: 318, False: 791]
  |  Branch (24:33): [True: 399, False: 392]
  ------------------
   25|    717|      return {};
   26|    717|   }
   27|       |
   28|       |   // the final result
   29|    392|   uint32_t ip = 0;
   30|       |   // the number of '.' seen so far
   31|    392|   size_t dots = 0;
   32|       |   // accumulates one quad (range 0-255)
   33|    392|   uint32_t accum = 0;
   34|       |   // # of digits pushed to accum since last dot
   35|    392|   size_t cur_digits = 0;
   36|       |
   37|    483|   for(const char c : str) {
  ------------------
  |  Branch (37:21): [True: 483, False: 3]
  ------------------
   38|    483|      if(c == '.') {
  ------------------
  |  Branch (38:10): [True: 24, False: 459]
  ------------------
   39|       |         // . without preceding digit is invalid
   40|     24|         if(cur_digits == 0) {
  ------------------
  |  Branch (40:13): [True: 7, False: 17]
  ------------------
   41|      7|            return {};
   42|      7|         }
   43|     17|         dots += 1;
   44|       |         // too many dots
   45|     17|         if(dots > 3) {
  ------------------
  |  Branch (45:13): [True: 0, False: 17]
  ------------------
   46|      0|            return {};
   47|      0|         }
   48|       |
   49|     17|         cur_digits = 0;
   50|     17|         ip = (ip << 8) | accum;
   51|     17|         accum = 0;
   52|    459|      } else if(c >= '0' && c <= '9') {
  ------------------
  |  Branch (52:17): [True: 448, False: 11]
  |  Branch (52:29): [True: 87, False: 361]
  ------------------
   53|     87|         const auto d = static_cast<uint8_t>(c - '0');
   54|       |
   55|       |         // prohibit leading zero in quad (used for octal)
   56|     87|         if(cur_digits > 0 && accum == 0) {
  ------------------
  |  Branch (56:13): [True: 47, False: 40]
  |  Branch (56:31): [True: 3, False: 44]
  ------------------
   57|      3|            return {};
   58|      3|         }
   59|     84|         accum = (accum * 10) + d;
   60|       |
   61|     84|         if(accum > 255) {
  ------------------
  |  Branch (61:13): [True: 7, False: 77]
  ------------------
   62|      7|            return {};
   63|      7|         }
   64|       |
   65|     77|         cur_digits++;
   66|     77|         BOTAN_ASSERT_NOMSG(cur_digits <= 3);
  ------------------
  |  |   77|     77|   do {                                                                     \
  |  |   78|     77|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|     77|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 77]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|     77|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 77]
  |  |  ------------------
  ------------------
   67|    372|      } else {
   68|    372|         return {};
   69|    372|      }
   70|    483|   }
   71|       |
   72|       |   // no trailing digits?
   73|      3|   if(cur_digits == 0) {
  ------------------
  |  Branch (73:7): [True: 0, False: 3]
  ------------------
   74|      0|      return {};
   75|      0|   }
   76|       |
   77|       |   // insufficient # of dots
   78|      3|   if(dots != 3) {
  ------------------
  |  Branch (78:7): [True: 1, False: 2]
  ------------------
   79|      1|      return {};
   80|      1|   }
   81|       |
   82|      2|   ip = (ip << 8) | accum;
   83|       |
   84|      2|   return ip;
   85|      3|}

_ZN5Botan11IPv6AddressC2ENSt3__14spanIKhLm16EEE:
   16|    614|IPv6Address::IPv6Address(std::span<const uint8_t, 16> ip) : m_ip{} {
   17|  10.4k|   for(size_t i = 0; i != 16; ++i) {
  ------------------
  |  Branch (17:22): [True: 9.82k, False: 614]
  ------------------
   18|  9.82k|      m_ip[i] = ip[i];
   19|  9.82k|   }
   20|    614|}
_ZN5Botan11IPv6Address11from_stringENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   23|     34|std::optional<IPv6Address> IPv6Address::from_string(std::string_view str) {
   24|     34|   if(str.empty()) {
  ------------------
  |  Branch (24:7): [True: 0, False: 34]
  ------------------
   25|      0|      return {};
   26|      0|   }
   27|       |
   28|       |   // Parsed hex groups, split by whether they appeared before or after a "::".
   29|       |   // If no "::" appears, only `pre` is populated and must reach exactly 8 groups.
   30|     34|   std::array<uint16_t, 8> pre{};
   31|     34|   std::array<uint16_t, 8> post{};
   32|     34|   size_t pre_count = 0;
   33|     34|   size_t post_count = 0;
   34|     34|   bool seen_double_colon = false;
   35|       |
   36|     34|   auto hex_value = [](char c) -> std::optional<uint8_t> {
   37|     34|      if(c >= '0' && c <= '9') {
   38|     34|         return c - '0';
   39|     34|      } else if(c >= 'a' && c <= 'f') {
   40|     34|         return 10 + (c - 'a');
   41|     34|      } else if(c >= 'A' && c <= 'F') {
   42|     34|         return 10 + (c - 'A');
   43|     34|      } else {
   44|     34|         return {};
   45|     34|      }
   46|     34|   };
   47|       |
   48|     34|   size_t idx = 0;
   49|     34|   bool expect_group = true;  // set after any separator, cleared after a group
   50|       |
   51|     82|   while(idx < str.size()) {
  ------------------
  |  Branch (51:10): [True: 82, False: 0]
  ------------------
   52|     82|      if(str[idx] == ':') {
  ------------------
  |  Branch (52:10): [True: 17, False: 65]
  ------------------
   53|     17|         if(idx + 1 < str.size() && str[idx + 1] == ':') {
  ------------------
  |  Branch (53:13): [True: 17, False: 0]
  |  Branch (53:37): [True: 3, False: 14]
  ------------------
   54|      3|            if(seen_double_colon) {
  ------------------
  |  Branch (54:16): [True: 1, False: 2]
  ------------------
   55|      1|               return {};  // at most one "::"
   56|      1|            }
   57|      2|            seen_double_colon = true;
   58|      2|            idx += 2;
   59|      2|            expect_group = (idx < str.size());
   60|      2|            continue;
   61|      3|         }
   62|       |         // single ':' separator between groups, only valid after a group
   63|     14|         if(expect_group) {
  ------------------
  |  Branch (63:13): [True: 1, False: 13]
  ------------------
   64|      1|            return {};
   65|      1|         }
   66|     13|         expect_group = true;
   67|     13|         idx += 1;
   68|     13|         continue;
   69|     14|      }
   70|       |
   71|       |      // Parse a hex group of 1..4 digits
   72|     65|      uint32_t group = 0;
   73|     65|      size_t hex_chars = 0;
   74|    198|      while(idx < str.size() && hex_chars < 4) {
  ------------------
  |  Branch (74:13): [True: 198, False: 0]
  |  Branch (74:33): [True: 180, False: 18]
  ------------------
   75|    180|         const auto digit = hex_value(str[idx]);
   76|    180|         if(digit.has_value() == false) {
  ------------------
  |  Branch (76:13): [True: 47, False: 133]
  ------------------
   77|     47|            break;
   78|     47|         }
   79|    133|         group = (group << 4) | static_cast<uint32_t>(digit.value());
   80|    133|         idx += 1;
   81|    133|         hex_chars += 1;
   82|    133|      }
   83|     65|      if(hex_chars == 0) {
  ------------------
  |  Branch (83:10): [True: 22, False: 43]
  ------------------
   84|     22|         return {};
   85|     22|      }
   86|       |      // If a 5th hex digit follows, the group is oversized.
   87|     43|      if(hex_chars == 4 && idx < str.size() && hex_value(str[idx]).has_value()) {
  ------------------
  |  Branch (87:10): [True: 18, False: 25]
  |  Branch (87:10): [True: 10, False: 33]
  |  Branch (87:28): [True: 18, False: 0]
  |  Branch (87:48): [True: 10, False: 8]
  ------------------
   88|     10|         return {};
   89|     10|      }
   90|       |
   91|     33|      if(seen_double_colon) {
  ------------------
  |  Branch (91:10): [True: 1, False: 32]
  ------------------
   92|      1|         if(post_count >= 8) {
  ------------------
  |  Branch (92:13): [True: 0, False: 1]
  ------------------
   93|      0|            return {};
   94|      0|         }
   95|      1|         post[post_count++] = static_cast<uint16_t>(group);
   96|     32|      } else {
   97|     32|         if(pre_count >= 8) {
  ------------------
  |  Branch (97:13): [True: 0, False: 32]
  ------------------
   98|      0|            return {};
   99|      0|         }
  100|     32|         pre[pre_count++] = static_cast<uint16_t>(group);
  101|     32|      }
  102|     33|      expect_group = false;
  103|     33|   }
  104|       |
  105|       |   // Trailing single ':' is invalid
  106|      0|   if(expect_group) {
  ------------------
  |  Branch (106:7): [True: 0, False: 0]
  ------------------
  107|      0|      return {};
  108|      0|   }
  109|       |
  110|      0|   const size_t total_groups = pre_count + post_count;
  111|      0|   if(seen_double_colon) {
  ------------------
  |  Branch (111:7): [True: 0, False: 0]
  ------------------
  112|       |      // "::" has to cover at least one zero group
  113|      0|      if(total_groups > 7) {
  ------------------
  |  Branch (113:10): [True: 0, False: 0]
  ------------------
  114|      0|         return {};
  115|      0|      }
  116|      0|   } else {
  117|      0|      if(total_groups != 8) {
  ------------------
  |  Branch (117:10): [True: 0, False: 0]
  ------------------
  118|      0|         return {};
  119|      0|      }
  120|      0|   }
  121|       |
  122|      0|   std::array<uint8_t, 16> out{};
  123|      0|   for(size_t i = 0; i != pre_count; ++i) {
  ------------------
  |  Branch (123:22): [True: 0, False: 0]
  ------------------
  124|      0|      out[2 * i] = get_byte<0>(pre[i]);
  125|      0|      out[2 * i + 1] = get_byte<1>(pre[i]);
  126|      0|   }
  127|      0|   const size_t gap = 8 - total_groups;
  128|      0|   for(size_t i = 0; i != post_count; ++i) {
  ------------------
  |  Branch (128:22): [True: 0, False: 0]
  ------------------
  129|      0|      const size_t target = pre_count + gap + i;
  130|      0|      out[2 * target] = get_byte<0>(post[i]);
  131|      0|      out[2 * target + 1] = get_byte<1>(post[i]);
  132|      0|   }
  133|      0|   return IPv6Address(out);
  134|      0|}
_ZN5Botan11IPv6Address7netmaskEm:
  137|     29|IPv6Address IPv6Address::netmask(size_t bits) {
  138|     29|   BOTAN_ARG_CHECK(bits <= 128, "IPv6 netmask prefix length must be at most 128");
  ------------------
  |  |   35|     29|   do {                                                          \
  |  |   36|     29|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */              \
  |  |   37|     29|      if(!(expr)) {                                              \
  |  |  ------------------
  |  |  |  Branch (37:10): [True: 0, False: 29]
  |  |  ------------------
  |  |   38|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */     \
  |  |   39|      0|         Botan::throw_invalid_argument(msg, __func__, __FILE__); \
  |  |   40|      0|      }                                                          \
  |  |   41|     29|   } while(0)
  |  |  ------------------
  |  |  |  Branch (41:12): [Folded, False: 29]
  |  |  ------------------
  ------------------
  139|       |
  140|     29|   const size_t full_bytes = bits / 8;
  141|     29|   const size_t leftover = bits % 8;
  142|       |
  143|     29|   std::array<uint8_t, 16> m{};
  144|    138|   for(size_t i = 0; i != full_bytes; ++i) {
  ------------------
  |  Branch (144:22): [True: 109, False: 29]
  ------------------
  145|    109|      m[i] = 0xFF;
  146|    109|   }
  147|       |
  148|     29|   if(leftover > 0) {
  ------------------
  |  Branch (148:7): [True: 11, False: 18]
  ------------------
  149|     11|      m[full_bytes] = static_cast<uint8_t>(0xFF << (8 - leftover));
  150|     11|   }
  151|       |
  152|     29|   return IPv6Address(m);
  153|     29|}
_ZNK5Botan11IPv6AddressanERKS0_:
  179|     11|IPv6Address IPv6Address::operator&(const IPv6Address& other) const {
  180|     11|   std::array<uint8_t, 16> masked{};
  181|    187|   for(size_t i = 0; i != 16; ++i) {
  ------------------
  |  Branch (181:22): [True: 176, False: 11]
  ------------------
  182|    176|      masked[i] = m_ip[i] & other.m_ip[i];
  183|    176|   }
  184|     11|   return IPv6Address(masked);
  185|     11|}
_ZNK5Botan11IPv6Address13prefix_lengthEv:
  187|     18|std::optional<size_t> IPv6Address::prefix_length() const {
  188|       |   // Count leading one bits, stopping at the first byte that isn't fully set.
  189|     18|   size_t leading = 0;
  190|     83|   for(size_t i = 0; i != 16; ++i) {
  ------------------
  |  Branch (190:22): [True: 82, False: 1]
  ------------------
  191|     82|      const size_t hw = (m_ip[i] == 0xFF) ? 8 : std::countl_one(m_ip[i]);
  ------------------
  |  Branch (191:25): [True: 65, False: 17]
  ------------------
  192|     82|      leading += hw;
  193|     82|      if(hw != 8) {
  ------------------
  |  Branch (193:10): [True: 17, False: 65]
  ------------------
  194|     17|         break;
  195|     17|      }
  196|     82|   }
  197|       |
  198|       |   // Verify this is exactly equal to a netmask of that size
  199|     18|   if(*this != netmask(leading)) {
  ------------------
  |  Branch (199:7): [True: 7, False: 11]
  ------------------
  200|      7|      return std::nullopt;
  201|      7|   }
  202|     11|   return leading;
  203|     18|}
_ZN5Botan10IPv6SubnetC2ENS_11IPv6AddressEm:
  219|     11|      m_address(address & IPv6Address::netmask(prefix_length)), m_prefix_length(static_cast<uint8_t>(prefix_length)) {
  220|       |   // IPv6Address::netmask validates prefix_length <= 128, so by this point
  221|       |   // the static_cast is in range.
  222|     11|}
_ZN5Botan10IPv6Subnet21from_address_and_maskENSt3__14spanIKhLm32EEE:
  225|     18|std::optional<IPv6Subnet> IPv6Subnet::from_address_and_mask(std::span<const uint8_t, 32> addr_and_mask) {
  226|     18|   const auto addr = IPv6Address(addr_and_mask.first<16>());
  227|     18|   const auto mask = IPv6Address(addr_and_mask.last<16>());
  228|       |
  229|     18|   if(const auto plen = mask.prefix_length()) {
  ------------------
  |  Branch (229:18): [True: 11, False: 7]
  ------------------
  230|     11|      return IPv6Subnet(addr, *plen);
  231|     11|   } else {
  232|      7|      return {};
  233|      7|   }
  234|     18|}
ipv6_address.cpp:_ZZN5Botan11IPv6Address11from_stringENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEENK3$_0clEc:
   36|    198|   auto hex_value = [](char c) -> std::optional<uint8_t> {
   37|    198|      if(c >= '0' && c <= '9') {
  ------------------
  |  Branch (37:10): [True: 184, False: 14]
  |  Branch (37:22): [True: 49, False: 135]
  ------------------
   38|     49|         return c - '0';
   39|    149|      } else if(c >= 'a' && c <= 'f') {
  ------------------
  |  Branch (39:17): [True: 89, False: 60]
  |  Branch (39:29): [True: 72, False: 17]
  ------------------
   40|     72|         return 10 + (c - 'a');
   41|     77|      } else if(c >= 'A' && c <= 'F') {
  ------------------
  |  Branch (41:17): [True: 42, False: 35]
  |  Branch (41:29): [True: 22, False: 20]
  ------------------
   42|     22|         return 10 + (c - 'A');
   43|     55|      } else {
   44|     55|         return {};
   45|     55|      }
   46|    198|   };

_ZN5Botan19secure_scrub_memoryEPvm:
   25|   693k|void secure_scrub_memory(void* ptr, size_t n) {
   26|   693k|   return secure_zeroize_buffer(ptr, n);
   27|   693k|}
_ZN5Botan21secure_zeroize_bufferEPvm:
   29|   694k|void secure_zeroize_buffer(void* ptr, size_t n) {
   30|   694k|   if(n == 0) {
  ------------------
  |  Branch (30:7): [True: 350k, False: 343k]
  ------------------
   31|   350k|      return;
   32|   350k|   }
   33|       |
   34|       |#if defined(BOTAN_TARGET_OS_HAS_RTLSECUREZEROMEMORY)
   35|       |   ::RtlSecureZeroMemory(ptr, n);
   36|       |
   37|       |#elif defined(BOTAN_TARGET_OS_HAS_EXPLICIT_BZERO)
   38|   343k|   ::explicit_bzero(ptr, n);
   39|       |
   40|       |#elif defined(BOTAN_TARGET_OS_HAS_EXPLICIT_MEMSET)
   41|       |   (void)::explicit_memset(ptr, 0, n);
   42|       |
   43|       |#else
   44|       |   /*
   45|       |   * Call memset through a static volatile pointer, which the compiler should
   46|       |   * not elide. This construct should be safe in conforming compilers, but who
   47|       |   * knows. This has been checked to generate the expected code, which saves the
   48|       |   * memset address in the data segment and unconditionally loads and jumps to
   49|       |   * that address, with the following targets:
   50|       |   *
   51|       |   * x86-64: Clang 19, GCC 6, 11, 13, 14
   52|       |   * riscv64: GCC 14
   53|       |   * aarch64: GCC 14
   54|       |   * armv7: GCC 14
   55|       |   *
   56|       |   * Actually all of them generated the expected jump even without marking the
   57|       |   * function pointer as volatile. However this seems worth including as an
   58|       |   * additional precaution.
   59|       |   */
   60|       |   static void* (*const volatile memset_ptr)(void*, int, size_t) = std::memset;
   61|       |   (memset_ptr)(ptr, 0, n);
   62|       |#endif
   63|   343k|}

_ZN5Botan2OS17read_env_variableERNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS1_17basic_string_viewIcS4_EE:
  448|      1|bool OS::read_env_variable(std::string& value_out, std::string_view name_view) {
  449|      1|   value_out = "";
  450|       |
  451|      1|   if(running_in_privileged_state()) {
  ------------------
  |  Branch (451:7): [True: 0, False: 1]
  ------------------
  452|      0|      return false;
  453|      0|   }
  454|       |
  455|       |#if defined(BOTAN_TARGET_OS_HAS_WIN32) && \
  456|       |   (defined(BOTAN_BUILD_COMPILER_IS_MSVC) || defined(BOTAN_BUILD_COMPILER_IS_CLANGCL))
  457|       |   const std::string name(name_view);
  458|       |   char val[128] = {0};
  459|       |   size_t req_size = 0;
  460|       |   if(getenv_s(&req_size, val, sizeof(val), name.c_str()) == 0) {
  461|       |      // Microsoft's implementation always writes a terminating \0,
  462|       |      // and includes it in the reported length of the environment variable
  463|       |      // if a value exists.
  464|       |      if(req_size > 0 && val[req_size - 1] == '\0') {
  465|       |         value_out = std::string(val);
  466|       |      } else {
  467|       |         value_out = std::string(val, req_size);
  468|       |      }
  469|       |      return true;
  470|       |   }
  471|       |#else
  472|      1|   const std::string name(name_view);
  473|      1|   if(const char* val = std::getenv(name.c_str())) {
  ------------------
  |  Branch (473:19): [True: 0, False: 1]
  ------------------
  474|      0|      value_out = val;
  475|      0|      return true;
  476|      0|   }
  477|      1|#endif
  478|       |
  479|      1|   return false;
  480|      1|}
os_utils.cpp:_ZN5Botan12_GLOBAL__N_110get_auxvalENSt3__18optionalImEE:
  118|      1|std::optional<unsigned long> get_auxval(std::optional<unsigned long> id) {
  119|      1|   if(id) {
  ------------------
  |  Branch (119:7): [True: 1, False: 0]
  ------------------
  120|      1|#if defined(BOTAN_TARGET_OS_HAS_GETAUXVAL)
  121|      1|      return ::getauxval(*id);
  122|       |#elif defined(BOTAN_TARGET_OS_HAS_ELF_AUX_INFO)
  123|       |      unsigned long auxinfo = 0;
  124|       |      if(::elf_aux_info(static_cast<int>(*id), &auxinfo, sizeof(auxinfo)) == 0) {
  125|       |         return auxinfo;
  126|       |      }
  127|       |#endif
  128|      1|   }
  129|       |
  130|      0|   return {};
  131|      1|}
os_utils.cpp:_ZN5Botan12_GLOBAL__N_127running_in_privileged_stateEv:
  152|      1|bool running_in_privileged_state() {
  153|      1|#if defined(AT_SECURE)
  154|      1|   if(auto at_secure = get_auxval(AT_SECURE)) {
  ------------------
  |  Branch (154:12): [True: 1, False: 0]
  ------------------
  155|      1|      return at_secure != 0;
  156|      1|   }
  157|      0|#endif
  158|       |
  159|      0|#if defined(BOTAN_TARGET_OS_HAS_POSIX1)
  160|      0|   return (::getuid() != ::geteuid()) || (::getgid() != ::getegid());
  ------------------
  |  Branch (160:11): [True: 0, False: 0]
  |  Branch (160:42): [True: 0, False: 0]
  ------------------
  161|       |#else
  162|       |   return false;
  163|       |#endif
  164|      1|}

_ZN5Botan9to_u32bitENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEE:
   30|  46.4k|uint32_t to_u32bit(std::string_view str_view) {
   31|  46.4k|   const std::string str(str_view);
   32|       |
   33|       |   // std::stoul is not strict enough. Ensure that str is digit only [0-9]*
   34|  93.2k|   for(const char chr : str) {
  ------------------
  |  Branch (34:23): [True: 93.2k, False: 46.4k]
  ------------------
   35|  93.2k|      if(chr < '0' || chr > '9') {
  ------------------
  |  Branch (35:10): [True: 13, False: 93.2k]
  |  Branch (35:23): [True: 6, False: 93.1k]
  ------------------
   36|     19|         throw Invalid_Argument("to_u32bit invalid decimal string '" + str + "'");
   37|     19|      }
   38|  93.2k|   }
   39|       |
   40|  46.4k|   const unsigned long int x = std::stoul(str);
   41|       |
   42|  46.4k|   if constexpr(sizeof(unsigned long int) > 4) {
   43|       |      // x might be uint64
   44|  46.4k|      if(x > std::numeric_limits<uint32_t>::max()) {
  ------------------
  |  Branch (44:10): [True: 0, False: 46.4k]
  ------------------
   45|      0|         throw Invalid_Argument("Integer value of " + str + " exceeds 32 bit range");
   46|      0|      }
   47|  46.4k|   }
   48|       |
   49|  46.4k|   return static_cast<uint32_t>(x);
   50|  46.4k|}
_ZN5Botan14tolower_stringENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEE:
  151|  1.32k|std::string tolower_string(std::string_view str) {
  152|       |   // Locale-independent ASCII fold; the only callers (DNS name canonicalization
  153|       |   // for SAN/name-constraints) work on ASCII strings per RFC 1035.
  154|  1.32k|   std::string lower(str);
  155|  5.74k|   for(char& c : lower) {
  ------------------
  |  Branch (155:16): [True: 5.74k, False: 1.32k]
  ------------------
  156|  5.74k|      if(c >= 'A' && c <= 'Z') {
  ------------------
  |  Branch (156:10): [True: 5.61k, False: 130]
  |  Branch (156:22): [True: 137, False: 5.48k]
  ------------------
  157|    137|         c = static_cast<char>(c + ('a' - 'A'));
  158|    137|      }
  159|  5.74k|   }
  160|  1.32k|   return lower;
  161|  1.32k|}

_ZNK5Botan3URIssERKS0_:
  135|    543|std::strong_ordering URI::operator<=>(const URI& other) const {
  136|    543|   return std::tie(m_scheme, m_authority, m_path, m_query, m_fragment) <=>
  137|    543|          std::tie(other.m_scheme, other.m_authority, other.m_path, other.m_query, other.m_fragment);
  138|    543|}
_ZNK5Botan3URI9AuthorityssERKS1_:
  145|    466|std::strong_ordering URI::Authority::operator<=>(const URI::Authority& other) const {
  146|       |   /*
  147|       |   Userinfo is compared without normalization; RFC 3986 6.2.2.1:
  148|       |      When a URI uses components of the generic syntax, the component
  149|       |      syntax equivalence rules always apply; namely, that the scheme
  150|       |      and host are case-insensitive and therefore should be normalized
  151|       |      to lowercase. ... The other generic syntax components are assumed
  152|       |      to be case-sensitive unless specifically defined otherwise by the
  153|       |      scheme.
  154|       |   */
  155|    466|   return std::tie(m_userinfo, m_host, m_port) <=> std::tie(other.m_userinfo, other.m_host, other.m_port);
  156|    466|}
_ZN5Botan3URI5parseENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
  163|  1.62k|std::optional<URI> URI::parse(std::string_view raw) {
  164|       |   // Empty string is not a valid URI
  165|  1.62k|   if(raw.empty()) {
  ------------------
  |  Branch (165:7): [True: 0, False: 1.62k]
  ------------------
  166|      0|      return {};
  167|      0|   }
  168|       |
  169|       |   // RFC 3986:
  170|       |   // scheme = ALPHA *( ALPHA / DIGIT / "+" / "-" / "." )
  171|  1.62k|   constexpr auto is_scheme_cont_char = CharacterValidityTable::alpha_numeric_plus("+-.");
  172|       |
  173|  1.62k|   const auto is_ascii_alpha = [](char c) -> bool { return (c >= 'a' && c <= 'z') || (c >= 'A' && c <= 'Z'); };
  174|       |
  175|       |   // Check the first scheme character
  176|  1.62k|   if(!is_ascii_alpha(raw.front())) {
  ------------------
  |  Branch (176:7): [True: 137, False: 1.49k]
  ------------------
  177|    137|      return {};
  178|    137|   }
  179|       |
  180|       |   // Scan the rest of the scheme
  181|  1.49k|   size_t i = 1;
  182|  6.35k|   while(i < raw.size() && is_scheme_cont_char(raw[i])) {
  ------------------
  |  Branch (182:10): [True: 6.35k, False: 7]
  |  Branch (182:28): [True: 4.86k, False: 1.48k]
  ------------------
  183|  4.86k|      ++i;
  184|  4.86k|   }
  185|       |   // Scheme wasn't followed by ':' -> invalid
  186|  1.49k|   if(i >= raw.size() || raw[i] != ':') {
  ------------------
  |  Branch (186:7): [True: 7, False: 1.48k]
  |  Branch (186:26): [True: 156, False: 1.32k]
  ------------------
  187|    163|      return {};
  188|    163|   }
  189|       |
  190|       |   // Canonicalize the scheme
  191|  1.32k|   const std::string scheme = tolower_string(raw.substr(0, i));
  192|       |
  193|       |   // The scheme must be followed by "//" introducing an authority. RFC 5280
  194|       |   // does allow including URIs without an authority ("urn:of:cat:ashes",
  195|       |   // "mailto:root@attacker.com") but they seem like an potential footgun (for
  196|       |   // example a rfc822 name constraint will not apply to a mailto: URL) and
  197|       |   // without any obvious justification to support here.
  198|       |
  199|  1.32k|   auto rest = raw.substr(i + 1);
  200|  1.32k|   if(rest.size() < 2 || rest[0] != '/' || rest[1] != '/') {
  ------------------
  |  Branch (200:7): [True: 3, False: 1.32k]
  |  Branch (200:26): [True: 38, False: 1.28k]
  |  Branch (200:44): [True: 13, False: 1.27k]
  ------------------
  201|     54|      return {};
  202|     54|   }
  203|  1.27k|   rest.remove_prefix(2);  // Strip off the '//'
  204|       |
  205|       |   // Authority runs to the first '/', '?' or '#'. The remaining is `path ? query # fragment`,
  206|       |   // which is validated against the RFC 3986 character set.
  207|  1.27k|   const auto end = rest.find_first_of("/?#");
  208|  1.27k|   const auto authority = (end == std::string_view::npos) ? rest : rest.substr(0, end);
  ------------------
  |  Branch (208:27): [True: 216, False: 1.05k]
  ------------------
  209|  1.27k|   const auto path_query_fragment = (end == std::string_view::npos) ? std::string_view{} : rest.substr(end);
  ------------------
  |  Branch (209:37): [True: 216, False: 1.05k]
  ------------------
  210|       |
  211|       |   // Parse and validate the authority string (hostname, IPv4, or IPv6 address)
  212|  1.27k|   auto parsed_authority = Authority::parse(authority);
  213|  1.27k|   if(!parsed_authority.has_value()) {
  ------------------
  |  Branch (213:7): [True: 331, False: 944]
  ------------------
  214|    331|      return {};
  215|    331|   }
  216|       |
  217|       |   // Validate any `path ? query # fragment` portions of the URL
  218|    944|   if(!validate_path_query_fragment(path_query_fragment)) {
  ------------------
  |  Branch (218:7): [True: 87, False: 857]
  ------------------
  219|     87|      return {};
  220|     87|   }
  221|       |
  222|       |   // Split into path / query / fragment. Validation above guarantees at most
  223|       |   // one '#', so the first '#' is the fragment delimiter, and within the
  224|       |   // pre-fragment portion the first '?' (if any) is the query delimiter.
  225|    857|   const auto hash = path_query_fragment.find('#');
  226|    857|   const auto pre_fragment =
  227|    857|      (hash == std::string_view::npos) ? path_query_fragment : path_query_fragment.substr(0, hash);
  ------------------
  |  Branch (227:7): [True: 627, False: 230]
  ------------------
  228|    857|   std::optional<std::string> fragment;
  229|    857|   if(hash != std::string_view::npos) {
  ------------------
  |  Branch (229:7): [True: 230, False: 627]
  ------------------
  230|    230|      fragment = std::string(path_query_fragment.substr(hash + 1));
  231|    230|   }
  232|       |
  233|    857|   const auto qmark = pre_fragment.find('?');
  234|    857|   const auto path = (qmark == std::string_view::npos) ? pre_fragment : pre_fragment.substr(0, qmark);
  ------------------
  |  Branch (234:22): [True: 620, False: 237]
  ------------------
  235|    857|   std::optional<std::string> query;
  236|    857|   if(qmark != std::string_view::npos) {
  ------------------
  |  Branch (236:7): [True: 237, False: 620]
  ------------------
  237|    237|      query = std::string(pre_fragment.substr(qmark + 1));
  238|    237|   }
  239|       |
  240|       |   // Accept
  241|    857|   return URI(
  242|    857|      std::string(raw), scheme, std::move(*parsed_authority), std::string(path), std::move(query), std::move(fragment));
  243|    944|}
_ZN5Botan3URI9Authority5parseENSt3__117basic_string_viewIcNS2_11char_traitsIcEEEE:
  246|  1.27k|std::optional<URI::Authority> URI::Authority::parse(std::string_view raw) {
  247|  1.27k|   if(raw.empty()) {
  ------------------
  |  Branch (247:7): [True: 10, False: 1.26k]
  ------------------
  248|     10|      return {};
  249|     10|   }
  250|       |
  251|       |   /*
  252|       |   RFC 3986
  253|       |     userinfo = *( unreserved / pct-encoded / sub-delims / ":" )
  254|       |
  255|       |   Thus a unencoded '@' is not allowed inside userinfo, and the single '@' splits the
  256|       |   username from the authority. The @ being present at all is significant; an empty
  257|       |   userinfo ("https://@example.com/") is distinct from no userinfo at all.
  258|       |   */
  259|  1.26k|   std::optional<std::string> userinfo;
  260|  1.26k|   const auto first_at = raw.find('@');
  261|  1.26k|   if(first_at != std::string_view::npos) {
  ------------------
  |  Branch (261:7): [True: 346, False: 919]
  ------------------
  262|    346|      if(raw.find('@', first_at + 1) != std::string_view::npos) {
  ------------------
  |  Branch (262:10): [True: 8, False: 338]
  ------------------
  263|      8|         return {};
  264|      8|      }
  265|    338|      const auto userinfo_view = raw.substr(0, first_at);
  266|    338|      if(!validate_userinfo(userinfo_view)) {
  ------------------
  |  Branch (266:10): [True: 77, False: 261]
  ------------------
  267|     77|         return {};
  268|     77|      }
  269|    261|      userinfo = std::string(userinfo_view);
  270|    261|      raw.remove_prefix(first_at + 1);
  271|    261|   }
  272|       |
  273|  1.18k|   std::string_view host_view;
  274|  1.18k|   std::string_view port_str;
  275|  1.18k|   std::optional<Host> host;
  276|       |
  277|  1.18k|   if(!raw.empty() && raw.front() == '[') {
  ------------------
  |  Branch (277:7): [True: 1.16k, False: 16]
  |  Branch (277:23): [True: 43, False: 1.12k]
  ------------------
  278|       |      // Bracketed IPv6 literal.
  279|     43|      const auto close = raw.find(']');
  280|     43|      if(close == std::string_view::npos) {
  ------------------
  |  Branch (280:10): [True: 1, False: 42]
  ------------------
  281|      1|         return {};
  282|      1|      }
  283|     42|      host_view = raw.substr(1, close - 1);
  284|     42|      if(host_view.empty()) {
  ------------------
  |  Branch (284:10): [True: 1, False: 41]
  ------------------
  285|      1|         return {};
  286|      1|      }
  287|     41|      const auto after = raw.substr(close + 1);
  288|     41|      if(!after.empty()) {
  ------------------
  |  Branch (288:10): [True: 9, False: 32]
  ------------------
  289|      9|         if(after.front() != ':') {
  ------------------
  |  Branch (289:13): [True: 7, False: 2]
  ------------------
  290|      7|            return {};
  291|      7|         }
  292|      2|         port_str = after.substr(1);
  293|      2|      }
  294|     34|      auto ipv6 = IPv6Address::from_string(host_view);
  295|     34|      if(!ipv6.has_value()) {
  ------------------
  |  Branch (295:10): [True: 34, False: 0]
  ------------------
  296|     34|         return {};
  297|     34|      }
  298|      0|      host = *ipv6;
  299|  1.13k|   } else {
  300|       |      // host[:port] with no brackets. Only one ':' is allowed (port).
  301|  1.13k|      const auto colon = raw.find(':');
  302|  1.13k|      if(colon == std::string_view::npos) {
  ------------------
  |  Branch (302:10): [True: 949, False: 188]
  ------------------
  303|    949|         host_view = raw;
  304|    949|      } else {
  305|    188|         host_view = raw.substr(0, colon);
  306|    188|         port_str = raw.substr(colon + 1);
  307|       |
  308|       |         // Verify the `:` char is the only one that appears
  309|    188|         if(port_str.find(':') != std::string::npos) {
  ------------------
  |  Branch (309:13): [True: 8, False: 180]
  ------------------
  310|      8|            return {};
  311|      8|         }
  312|    188|      }
  313|       |
  314|  1.12k|      if(host_view.empty()) {
  ------------------
  |  Branch (314:10): [True: 16, False: 1.11k]
  ------------------
  315|     16|         return {};
  316|     16|      }
  317|       |
  318|       |      // Technically valid per RFC 3986 but likely not something we want to support
  319|  1.11k|      if(host_view.ends_with('.')) {
  ------------------
  |  Branch (319:10): [True: 4, False: 1.10k]
  ------------------
  320|      4|         return {};
  321|      4|      }
  322|       |
  323|  1.10k|      if(auto ipv4 = IPv4Address::from_string(host_view)) {
  ------------------
  |  Branch (323:15): [True: 2, False: 1.10k]
  ------------------
  324|      2|         host = *ipv4;
  325|  1.10k|      } else if(auto dns = DNSName::from_string(host_view)) {
  ------------------
  |  Branch (325:22): [True: 987, False: 120]
  ------------------
  326|    987|         host = std::move(*dns);
  327|    987|      } else {
  328|    120|         return {};
  329|    120|      }
  330|  1.10k|   }
  331|       |
  332|    989|   std::optional<uint16_t> port;
  333|       |
  334|    989|   if(!port_str.empty()) {
  ------------------
  |  Branch (334:7): [True: 120, False: 869]
  ------------------
  335|    120|      port = parse_port(port_str);
  336|    120|      if(!port.has_value()) {
  ------------------
  |  Branch (336:10): [True: 45, False: 75]
  ------------------
  337|     45|         return {};
  338|     45|      }
  339|    120|   }
  340|       |
  341|    944|   return Authority(std::string(raw), std::move(userinfo), std::move(*host), port);
  342|    989|}
uri.cpp:_ZZN5Botan3URI5parseENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEENK3$_0clEc:
  173|  1.62k|   const auto is_ascii_alpha = [](char c) -> bool { return (c >= 'a' && c <= 'z') || (c >= 'A' && c <= 'Z'); };
  ------------------
  |  Branch (173:61): [True: 1.48k, False: 144]
  |  Branch (173:73): [True: 1.47k, False: 13]
  |  Branch (173:87): [True: 37, False: 120]
  |  Branch (173:99): [True: 20, False: 17]
  ------------------
uri.cpp:_ZN5Botan12_GLOBAL__N_128validate_path_query_fragmentENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   66|    944|bool validate_path_query_fragment(std::string_view tail) {
   67|       |   /*
   68|       |   * RFC 3986 syntax for the path/query/fragment of a URI:
   69|       |   *
   70|       |   *   URI           = scheme ":" hier-part [ "?" query ] [ "#" fragment ]
   71|       |   *   pchar         = unreserved / pct-encoded / sub-delims / ":" / "@"
   72|       |   *   segment       = *pchar
   73|       |   *   path-abempty  = *( "/" segment )
   74|       |   *   query         = *( pchar / "/" / "?" )
   75|       |   *   fragment     =  *( pchar / "/" / "?" )
   76|       |   */
   77|       |
   78|    944|   constexpr auto is_pchar_or_slash = CharacterValidityTable::alpha_numeric_plus("-._~!$&'()*+,;=:@/");
   79|       |
   80|    944|   enum class State : uint8_t { Path, Query, Fragment };
   81|    944|   State state = State::Path;
   82|       |
   83|  23.4k|   for(size_t i = 0; i < tail.size(); ++i) {
  ------------------
  |  Branch (83:22): [True: 22.6k, False: 857]
  ------------------
   84|  22.6k|      const char c = tail[i];
   85|  22.6k|      if(c == '%') {
  ------------------
  |  Branch (85:10): [True: 90, False: 22.5k]
  ------------------
   86|     90|         if(i + 2 >= tail.size() || !is_valid_percent_escape(tail[i + 1], tail[i + 2])) {
  ------------------
  |  Branch (86:13): [True: 1, False: 89]
  |  Branch (86:37): [True: 34, False: 55]
  ------------------
   87|     35|            return false;
   88|     35|         }
   89|     55|         i += 2;
   90|     55|         continue;
   91|     90|      }
   92|  22.5k|      if(c == '?') {
  ------------------
  |  Branch (92:10): [True: 355, False: 22.1k]
  ------------------
   93|       |         // First '?' transitions from path to query, any further '?' are literal
   94|    355|         if(state == State::Path) {
  ------------------
  |  Branch (94:13): [True: 256, False: 99]
  ------------------
   95|    256|            state = State::Query;
   96|    256|         }
   97|    355|         continue;
   98|    355|      }
   99|  22.1k|      if(c == '#') {
  ------------------
  |  Branch (99:10): [True: 263, False: 21.9k]
  ------------------
  100|       |         // There is only one '#' fragment delimiter, second '#' is invalid
  101|    263|         if(state == State::Fragment) {
  ------------------
  |  Branch (101:13): [True: 7, False: 256]
  ------------------
  102|      7|            return false;
  103|      7|         }
  104|    256|         state = State::Fragment;
  105|    256|         continue;
  106|    263|      }
  107|  21.9k|      if(!is_pchar_or_slash(c)) {
  ------------------
  |  Branch (107:10): [True: 45, False: 21.8k]
  ------------------
  108|     45|         return false;
  109|     45|      }
  110|  21.9k|   }
  111|    857|   return true;
  112|    944|}
uri.cpp:_ZN5Botan12_GLOBAL__N_123is_valid_percent_escapeEcc:
   49|    177|bool is_valid_percent_escape(char c1, char c2) {
   50|    177|   auto is_hex_digit = [](char c) {
   51|    177|      return (c >= '0' && c <= '9') || (c >= 'a' && c <= 'f') || (c >= 'A' && c <= 'F');
   52|    177|   };
   53|       |
   54|    177|   if(!is_hex_digit(c1) || !is_hex_digit(c2)) {
  ------------------
  |  Branch (54:7): [True: 56, False: 121]
  |  Branch (54:28): [True: 29, False: 92]
  ------------------
   55|     85|      return false;
   56|     85|   }
   57|       |
   58|       |   // Proactively reject embedded null (%00)
   59|     92|   if(c1 == '0' && c2 == '0') {
  ------------------
  |  Branch (59:7): [True: 15, False: 77]
  |  Branch (59:20): [True: 3, False: 12]
  ------------------
   60|      3|      return false;
   61|      3|   }
   62|       |
   63|     89|   return true;
   64|     92|}
uri.cpp:_ZZN5Botan12_GLOBAL__N_123is_valid_percent_escapeEccENK3$_0clEc:
   50|    298|   auto is_hex_digit = [](char c) {
   51|    298|      return (c >= '0' && c <= '9') || (c >= 'a' && c <= 'f') || (c >= 'A' && c <= 'F');
  ------------------
  |  Branch (51:15): [True: 255, False: 43]
  |  Branch (51:27): [True: 79, False: 176]
  |  Branch (51:41): [True: 105, False: 114]
  |  Branch (51:53): [True: 77, False: 28]
  |  Branch (51:67): [True: 95, False: 47]
  |  Branch (51:79): [True: 57, False: 38]
  ------------------
   52|    298|   };
uri.cpp:_ZN5Botan12_GLOBAL__N_117validate_userinfoENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
  114|    338|bool validate_userinfo(std::string_view userinfo) {
  115|    338|   constexpr auto is_valid_userinfo_char = CharacterValidityTable::alpha_numeric_plus("-._~!$&'()*+,;=:");
  116|       |
  117|  4.44k|   for(size_t i = 0; i < userinfo.size(); ++i) {
  ------------------
  |  Branch (117:22): [True: 4.18k, False: 261]
  ------------------
  118|  4.18k|      const char c = userinfo[i];
  119|  4.18k|      if(c == '%') {
  ------------------
  |  Branch (119:10): [True: 94, False: 4.09k]
  ------------------
  120|     94|         if(i + 2 >= userinfo.size() || !is_valid_percent_escape(userinfo[i + 1], userinfo[i + 2])) {
  ------------------
  |  Branch (120:13): [True: 6, False: 88]
  |  Branch (120:41): [True: 54, False: 34]
  ------------------
  121|     60|            return false;
  122|     60|         }
  123|     34|         i += 2;
  124|     34|         continue;
  125|     94|      }
  126|  4.09k|      if(!is_valid_userinfo_char(c)) {
  ------------------
  |  Branch (126:10): [True: 17, False: 4.07k]
  ------------------
  127|     17|         return false;
  128|     17|      }
  129|  4.09k|   }
  130|    261|   return true;
  131|    338|}
uri.cpp:_ZN5Botan12_GLOBAL__N_110parse_portENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   18|    120|std::optional<uint16_t> parse_port(std::string_view s) {
   19|    120|   const auto digit_from_ascii = [](char c) -> std::optional<uint32_t> {
   20|    120|      if(c >= '0' && c <= '9') {
   21|    120|         return c - '0';
   22|    120|      } else {
   23|    120|         return {};
   24|    120|      }
   25|    120|   };
   26|       |
   27|    120|   if(s.empty() || s.size() > 5) {
  ------------------
  |  Branch (27:7): [True: 0, False: 120]
  |  Branch (27:20): [True: 22, False: 98]
  ------------------
   28|     22|      return {};
   29|     22|   }
   30|       |
   31|     98|   uint32_t port = 0;
   32|       |
   33|    409|   for(const char c : s) {
  ------------------
  |  Branch (33:21): [True: 409, False: 79]
  ------------------
   34|    409|      if(auto digit = digit_from_ascii(c)) {
  ------------------
  |  Branch (34:15): [True: 390, False: 19]
  ------------------
   35|       |         // Integer overflow impossible here since we checked max length of s earlier
   36|    390|         port = port * 10 + *digit;
   37|    390|      } else {
   38|     19|         return {};
   39|     19|      }
   40|    409|   }
   41|       |
   42|     79|   if(port == 0 || port >= 65536) {
  ------------------
  |  Branch (42:7): [True: 1, False: 78]
  |  Branch (42:20): [True: 3, False: 75]
  ------------------
   43|      4|      return {};
   44|      4|   }
   45|       |
   46|     75|   return static_cast<uint16_t>(port);
   47|     79|}
uri.cpp:_ZZN5Botan12_GLOBAL__N_110parse_portENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEENK3$_0clEc:
   19|    409|   const auto digit_from_ascii = [](char c) -> std::optional<uint32_t> {
   20|    409|      if(c >= '0' && c <= '9') {
  ------------------
  |  Branch (20:10): [True: 400, False: 9]
  |  Branch (20:22): [True: 390, False: 10]
  ------------------
   21|    390|         return c - '0';
   22|    390|      } else {
   23|     19|         return {};
   24|     19|      }
   25|    409|   };

_ZN5Botan15AlternativeName7add_uriENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   17|  1.24k|void AlternativeName::add_uri(std::string_view uri) {
   18|  1.24k|   if(uri.empty()) {
  ------------------
  |  Branch (18:7): [True: 3, False: 1.24k]
  ------------------
   19|      3|      return;
   20|      3|   }
   21|  1.24k|   if(auto parsed = URI::parse(uri)) {
  ------------------
  |  Branch (21:12): [True: 632, False: 613]
  ------------------
   22|    632|      add_uri(std::move(*parsed));
   23|    632|   } else {
   24|    613|      throw Decoding_Error("Invalid URI in SubjectAlternativeName");
   25|    613|   }
   26|  1.24k|}
_ZN5Botan15AlternativeName7add_uriENS_3URIE:
   28|    632|void AlternativeName::add_uri(URI uri) {
   29|    632|   m_uri.insert(std::move(uri));
   30|    632|}
_ZN5Botan15AlternativeName9add_emailENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   40|    447|void AlternativeName::add_email(std::string_view addr) {
   41|    447|   if(addr.empty()) {
  ------------------
  |  Branch (41:7): [True: 7, False: 440]
  ------------------
   42|      7|      return;
   43|      7|   }
   44|    440|   if(auto parsed = EmailAddress::from_string(addr)) {
  ------------------
  |  Branch (44:12): [True: 193, False: 247]
  ------------------
   45|    193|      add_email(std::move(*parsed));
   46|    247|   } else {
   47|    247|      throw Decoding_Error("Invalid email address in SubjectAlternativeName");
   48|    247|   }
   49|    440|}
_ZN5Botan15AlternativeName9add_emailENS_12EmailAddressE:
   51|    193|void AlternativeName::add_email(EmailAddress addr) {
   52|    193|   m_email.insert(std::move(addr));
   53|    193|}
_ZN5Botan15AlternativeName7add_dnsENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEE:
   63|  13.1k|void AlternativeName::add_dns(std::string_view dns) {
   64|  13.1k|   if(dns.empty()) {
  ------------------
  |  Branch (64:7): [True: 5, False: 13.1k]
  ------------------
   65|      5|      return;
   66|      5|   }
   67|  13.1k|   if(auto parsed = DNSName::from_san_string(dns)) {
  ------------------
  |  Branch (67:12): [True: 13.0k, False: 111]
  ------------------
   68|  13.0k|      add_dns(std::move(*parsed));
   69|  13.0k|   } else {
   70|    111|      throw Decoding_Error("Invalid DNS name in SubjectAlternativeName");
   71|    111|   }
   72|  13.1k|}
_ZN5Botan15AlternativeName7add_dnsENS_7DNSNameE:
   74|  13.0k|void AlternativeName::add_dns(DNSName dns) {
   75|  13.0k|   m_dns.insert(std::move(dns));
   76|  13.0k|}
_ZN5Botan15AlternativeName17add_registered_idERKNS_3OIDE:
   97|  1.19k|void AlternativeName::add_registered_id(const OID& oid) {
   98|  1.19k|   m_registered_ids.insert(oid);
   99|  1.19k|}
_ZN5Botan15AlternativeName6add_dnERKNS_7X509_DNE:
  101|     22|void AlternativeName::add_dn(const X509_DN& dn) {
  102|     22|   m_dn_names.insert(dn);
  103|     22|}
_ZN5Botan15AlternativeName16add_ipv4_addressERKNS_11IPv4AddressE:
  105|    198|void AlternativeName::add_ipv4_address(const IPv4Address& ip) {
  106|    198|   m_ipv4_addrs.insert(ip);
  107|    198|}
_ZN5Botan15AlternativeName16add_ipv6_addressERKNS_11IPv6AddressE:
  109|    578|void AlternativeName::add_ipv6_address(const IPv6Address& ip) {
  110|    578|   m_ipv6_addrs.insert(ip);
  111|    578|}
_ZNK5Botan15AlternativeName5countEv:
  113|    186|size_t AlternativeName::count() const {
  114|    186|   const auto sum = checked_add(m_dns.size(),
  115|    186|                                m_uri.size(),
  116|    186|                                m_email.size(),
  117|    186|                                m_ipv4_addrs.size(),
  118|    186|                                m_ipv6_addrs.size(),
  119|    186|                                m_dn_names.size(),
  120|    186|                                m_other_name_values.size(),
  121|    186|                                m_registered_ids.size());
  122|       |
  123|    186|   BOTAN_ASSERT_NOMSG(sum.has_value());
  ------------------
  |  |   77|    186|   do {                                                                     \
  |  |   78|    186|      /* NOLINTNEXTLINE(*-simplify-boolean-expr) */                         \
  |  |   79|    186|      if(!(expr)) {                                                         \
  |  |  ------------------
  |  |  |  Branch (79:10): [True: 0, False: 186]
  |  |  ------------------
  |  |   80|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                \
  |  |   81|      0|         Botan::assertion_failure(#expr, "", __func__, __FILE__, __LINE__); \
  |  |   82|      0|      }                                                                     \
  |  |   83|    186|   } while(0)
  |  |  ------------------
  |  |  |  Branch (83:12): [Folded, False: 186]
  |  |  ------------------
  ------------------
  124|    186|   return sum.value();
  125|    186|}
_ZNK5Botan15AlternativeName9has_itemsEv:
  127|    186|bool AlternativeName::has_items() const {
  128|    186|   return this->count() > 0;
  129|    186|}
_ZN5Botan15AlternativeName11decode_fromERNS_11BER_DecoderE:
  198|  2.46k|void AlternativeName::decode_from(BER_Decoder& source) {
  199|  2.46k|   BER_Decoder names = source.start_sequence();
  200|       |
  201|  19.9k|   while(names.more_items()) {
  ------------------
  |  Branch (201:10): [True: 18.1k, False: 1.80k]
  ------------------
  202|  18.1k|      const BER_Object obj = names.get_next_object();
  203|       |
  204|  18.1k|      if(obj.is_a(0, ASN1_Class::ExplicitContextSpecific)) {
  ------------------
  |  Branch (204:10): [True: 460, False: 17.6k]
  ------------------
  205|    460|         BER_Decoder othername(obj, names.limits());
  206|       |
  207|    460|         OID oid;
  208|    460|         othername.decode(oid);
  209|    460|         const BER_Object othername_value_outer = othername.get_next_object();
  210|    460|         othername.verify_end();
  211|       |
  212|    460|         if(!othername_value_outer.is_a(0, ASN1_Class::ExplicitContextSpecific)) {
  ------------------
  |  Branch (212:13): [True: 16, False: 444]
  ------------------
  213|     16|            throw Decoding_Error("Invalid tags on otherName value");
  214|     16|         }
  215|       |
  216|    444|         BER_Decoder othername_value_inner(othername_value_outer, names.limits());
  217|       |
  218|    444|         const BER_Object value = othername_value_inner.get_next_object();
  219|    444|         othername_value_inner.verify_end();
  220|       |
  221|       |         // Capture the inner ANY value verbatim so applications can retrieve
  222|       |         // it regardless of its ASN.1 form.
  223|    444|         std::vector<uint8_t> raw_value;
  224|    444|         DER_Encoder(raw_value).add_object(value.type_tag(), value.class_tag(), value.data());
  225|    444|         m_other_name_values.insert(OtherNameValue{oid, std::move(raw_value)});
  226|       |
  227|       |         // Populate old string view for compatibility
  228|    444|         if(ASN1_String::is_string_type(value.type()) && value.get_class() == ASN1_Class::Universal) {
  ------------------
  |  Branch (228:13): [True: 297, False: 147]
  |  Branch (228:58): [True: 246, False: 51]
  ------------------
  229|    246|            try {
  230|    246|               m_othernames.insert(std::make_pair(oid, ASN1_String(ASN1::to_string(value), value.type())));
  231|    246|            } catch(const Invalid_Argument&) {  // NOLINT(*-empty-catch)
  232|    180|            }
  233|    246|         }
  234|       |
  235|    444|         if(oid == OID::from_string("PKIX.SmtpUTF8Mailbox")) {
  ------------------
  |  Branch (235:13): [True: 0, False: 444]
  ------------------
  236|      0|            if(!value.is_a(ASN1_Type::Utf8String, ASN1_Class::Universal)) {
  ------------------
  |  Branch (236:16): [True: 0, False: 0]
  ------------------
  237|      0|               throw Decoding_Error("SmtpUTF8Mailbox otherName must contain a UTF8String");
  238|      0|            }
  239|      0|            auto parsed_mailbox = SmtpUtf8Mailbox::from_string(ASN1::to_string(value));
  240|      0|            if(!parsed_mailbox.has_value()) {
  ------------------
  |  Branch (240:16): [True: 0, False: 0]
  ------------------
  241|      0|               throw Decoding_Error("Invalid SmtpUTF8Mailbox encoding");
  242|      0|            }
  243|      0|            m_smtp_utf8_mailboxes.insert(std::move(*parsed_mailbox));
  244|      0|         }
  245|  17.6k|      } else if(obj.is_a(1, ASN1_Class::ContextSpecific)) {
  ------------------
  |  Branch (245:17): [True: 447, False: 17.2k]
  ------------------
  246|    447|         add_email(ASN1::to_string(obj));
  247|  17.2k|      } else if(obj.is_a(2, ASN1_Class::ContextSpecific)) {
  ------------------
  |  Branch (247:17): [True: 13.1k, False: 4.04k]
  ------------------
  248|  13.1k|         add_dns(ASN1::to_string(obj));
  249|  13.1k|      } else if(obj.is_a(3, ASN1_Class::ContextSpecific | ASN1_Class::Constructed)) {
  ------------------
  |  Branch (249:17): [True: 15, False: 4.02k]
  ------------------
  250|       |         // x400Address not supported but it is a SEQUENCE so we know it cannot be empty
  251|     15|         if(obj.length() == 0) {
  ------------------
  |  Branch (251:13): [True: 1, False: 14]
  ------------------
  252|      1|            throw Decoding_Error("Invalid x400Address field");
  253|      1|         }
  254|  4.02k|      } else if(obj.is_a(4, ASN1_Class::ContextSpecific | ASN1_Class::Constructed)) {
  ------------------
  |  Branch (254:17): [True: 76, False: 3.95k]
  ------------------
  255|     76|         BER_Decoder dec(obj, names.limits());
  256|     76|         X509_DN dn;
  257|     76|         dec.decode(dn).verify_end();
  258|     76|         this->add_dn(dn);
  259|  3.95k|      } else if(obj.is_a(5, ASN1_Class::ContextSpecific | ASN1_Class::Constructed)) {
  ------------------
  |  Branch (259:17): [True: 86, False: 3.86k]
  ------------------
  260|       |         // ediPartyName not supported but it is a SEQUENCE so we know it cannot be empty
  261|     86|         if(obj.length() == 0) {
  ------------------
  |  Branch (261:13): [True: 1, False: 85]
  ------------------
  262|      1|            throw Decoding_Error("Invalid ediPartyName field");
  263|      1|         }
  264|  3.86k|      } else if(obj.is_a(6, ASN1_Class::ContextSpecific)) {
  ------------------
  |  Branch (264:17): [True: 1.24k, False: 2.61k]
  ------------------
  265|  1.24k|         this->add_uri(ASN1::to_string(obj));
  266|  2.61k|      } else if(obj.is_a(7, ASN1_Class::ContextSpecific)) {
  ------------------
  |  Branch (266:17): [True: 814, False: 1.80k]
  ------------------
  267|    814|         if(obj.length() == 4) {
  ------------------
  |  Branch (267:13): [True: 198, False: 616]
  ------------------
  268|    198|            const uint32_t ip = load_be<uint32_t>(obj.bits(), 0);
  269|    198|            this->add_ipv4_address(ip);
  270|    616|         } else if(obj.length() == 16) {
  ------------------
  |  Branch (270:20): [True: 578, False: 38]
  ------------------
  271|    578|            const IPv6Address ip(std::span<const uint8_t, 16>{obj.bits(), 16});
  272|    578|            this->add_ipv6_address(ip);
  273|    578|         } else {
  274|     38|            throw Decoding_Error("Invalid IP constraint neither IPv4 or IPv6");
  275|     38|         }
  276|  1.80k|      } else if(obj.is_a(8, ASN1_Class::ContextSpecific)) {
  ------------------
  |  Branch (276:17): [True: 1.20k, False: 598]
  ------------------
  277|       |         // [8] registeredID is IMPLICIT OBJECT IDENTIFIER.
  278|  1.20k|         OID oid;
  279|  1.20k|         names.decode_implicit(obj, oid, ASN1_Type::ObjectId, ASN1_Class::Universal);
  280|  1.20k|         this->add_registered_id(oid);
  281|  1.20k|      } else {
  282|    598|         throw Decoding_Error(fmt("Unknown GeneralName tag {}/class {}",
  283|    598|                                  static_cast<uint32_t>(obj.type_tag()),
  284|    598|                                  static_cast<uint32_t>(obj.class_tag())));
  285|    598|      }
  286|  18.1k|   }
  287|  2.46k|}

_ZN5Botan11GeneralName13DNSConstraint11from_stringENSt3__117basic_string_viewIcNS2_11char_traitsIcEEEE:
   60|     87|std::optional<GeneralName::DNSConstraint> GeneralName::DNSConstraint::from_string(std::string_view input) {
   61|       |   // TODO(C++23): validate_subtree_constraint_host(input, RequireFQDN::No)
   62|       |   //                        .transform([](std::string s) { return DNSConstraint(std::move(s)); });
   63|     87|   if(auto canonical = validate_subtree_constraint_host(input, RequireFQDN::No)) {
  ------------------
  |  Branch (63:12): [True: 64, False: 23]
  ------------------
   64|     64|      return DNSConstraint(std::move(*canonical));
   65|     64|   } else {
   66|     23|      return std::nullopt;
   67|     23|   }
   68|     87|}
_ZN5Botan11GeneralName13URIConstraint11from_stringENSt3__117basic_string_viewIcNS2_11char_traitsIcEEEE:
   78|     80|std::optional<GeneralName::URIConstraint> GeneralName::URIConstraint::from_string(std::string_view input) {
   79|       |   /*
   80|       |   RFC 5280 4.2.1.10:
   81|       |      The constraint MUST be specified as a fully qualified domain
   82|       |      name and MAY specify a host or a domain.  Examples would be
   83|       |      "host.example.com" and ".example.com".
   84|       |   */
   85|     80|   if(auto canonical = validate_subtree_constraint_host(input, RequireFQDN::Yes)) {
  ------------------
  |  Branch (85:12): [True: 53, False: 27]
  ------------------
   86|     53|      return URIConstraint(std::move(*canonical));
   87|     53|   } else {
   88|     27|      return std::nullopt;
   89|     27|   }
   90|     80|}
_ZN5Botan11GeneralName15EmailConstraint11from_stringENSt3__117basic_string_viewIcNS2_11char_traitsIcEEEE:
  100|     86|std::optional<GeneralName::EmailConstraint> GeneralName::EmailConstraint::from_string(std::string_view input) {
  101|     86|   if(input.empty()) {
  ------------------
  |  Branch (101:7): [True: 2, False: 84]
  ------------------
  102|      2|      return std::nullopt;
  103|      2|   }
  104|     84|   if(input.find('@') != std::string_view::npos) {
  ------------------
  |  Branch (104:7): [True: 14, False: 70]
  ------------------
  105|       |      // Mailbox form:
  106|     14|      auto email = EmailAddress::from_string(input);
  107|     14|      if(!email.has_value()) {
  ------------------
  |  Branch (107:10): [True: 3, False: 11]
  ------------------
  108|      3|         return std::nullopt;
  109|      3|      }
  110|     11|      return EmailConstraint(email->to_string());
  111|     14|   }
  112|     70|   if(auto canonical = validate_subtree_constraint_host(input, RequireFQDN::No)) {
  ------------------
  |  Branch (112:12): [True: 49, False: 21]
  ------------------
  113|       |      // Host form
  114|     49|      return EmailConstraint(std::move(*canonical));
  115|     49|   }
  116|     21|   return std::nullopt;
  117|     70|}
_ZN5Botan11GeneralName11decode_fromERNS_11BER_DecoderE:
  415|    736|void GeneralName::decode_from(BER_Decoder& ber) {
  416|    736|   const BER_Object obj = ber.get_next_object();
  417|       |
  418|    736|   if(obj.is_a(0, ASN1_Class::ExplicitContextSpecific)) {
  ------------------
  |  Branch (418:7): [True: 40, False: 696]
  ------------------
  419|     40|      m_type = NameType::Other;
  420|    696|   } else if(obj.is_a(1, ASN1_Class::ContextSpecific)) {
  ------------------
  |  Branch (420:14): [True: 86, False: 610]
  ------------------
  421|       |      /*
  422|       |      RFC 5280 4.2.1.10:
  423|       |         A name constraint for Internet mail addresses MAY specify a
  424|       |         particular mailbox, all addresses at a particular host, or all
  425|       |         mailboxes in a domain.
  426|       |      EmailConstraint::from_string validates and canonicalizes per the
  427|       |      Section 7.5 matching rules.
  428|       |      */
  429|     86|      auto constraint = EmailConstraint::from_string(ASN1::to_string(obj));
  430|     86|      if(!constraint.has_value()) {
  ------------------
  |  Branch (430:10): [True: 26, False: 60]
  ------------------
  431|     26|         throw Decoding_Error("Malformed RFC822 name in GeneralName");
  432|     26|      }
  433|     60|      m_type = NameType::RFC822;
  434|     60|      m_name = std::move(*constraint);
  435|    610|   } else if(obj.is_a(2, ASN1_Class::ContextSpecific)) {
  ------------------
  |  Branch (435:14): [True: 87, False: 523]
  ------------------
  436|     87|      auto constraint = DNSConstraint::from_string(ASN1::to_string(obj));
  437|     87|      if(!constraint.has_value()) {
  ------------------
  |  Branch (437:10): [True: 23, False: 64]
  ------------------
  438|     23|         throw Decoding_Error("Malformed DNS name in GeneralName");
  439|     23|      }
  440|     64|      m_type = NameType::DNS;
  441|     64|      m_name = std::move(*constraint);
  442|    523|   } else if(obj.is_a(6, ASN1_Class::ContextSpecific)) {
  ------------------
  |  Branch (442:14): [True: 80, False: 443]
  ------------------
  443|       |      /*
  444|       |      RFC 5280 4.2.1.10:
  445|       |         For URIs, the constraint applies to the host part of the name.
  446|       |         The constraint MUST be specified as a fully qualified domain
  447|       |         name and MAY specify a host or a domain.  Examples would be
  448|       |         "host.example.com" and ".example.com".
  449|       |      */
  450|     80|      auto constraint = URIConstraint::from_string(ASN1::to_string(obj));
  451|     80|      if(!constraint.has_value()) {
  ------------------
  |  Branch (451:10): [True: 27, False: 53]
  ------------------
  452|     27|         throw Decoding_Error("Malformed URI name in GeneralName");
  453|     27|      }
  454|     53|      m_type = NameType::URI;
  455|     53|      m_name = std::move(*constraint);
  456|    443|   } else if(obj.is_a(4, ASN1_Class::ContextSpecific | ASN1_Class::Constructed)) {
  ------------------
  |  Branch (456:14): [True: 8, False: 435]
  ------------------
  457|      8|      X509_DN dn;
  458|      8|      BER_Decoder dec(obj, ber.limits());
  459|      8|      dn.decode_from(dec);
  460|      8|      dec.verify_end();
  461|      8|      m_type = NameType::DN;
  462|      8|      m_name.emplace<X509_DN>(dn);
  463|    435|   } else if(obj.is_a(7, ASN1_Class::ContextSpecific)) {
  ------------------
  |  Branch (463:14): [True: 60, False: 375]
  ------------------
  464|     60|      if(obj.length() == 8) {
  ------------------
  |  Branch (464:10): [True: 34, False: 26]
  ------------------
  465|     34|         const auto addr_and_mask = std::span<const uint8_t, 8>{obj.bits(), 8};
  466|     34|         auto subnet = IPv4Subnet::from_address_and_mask(addr_and_mask);
  467|     34|         if(!subnet.has_value()) {
  ------------------
  |  Branch (467:13): [True: 26, False: 8]
  ------------------
  468|     26|            throw Decoding_Error("IPv4 name constraint mask is not a contiguous CIDR prefix");
  469|     26|         }
  470|       |
  471|      8|         m_type = NameType::IPv4;
  472|      8|         m_name.emplace<IPv4Subnet>(*subnet);
  473|     26|      } else if(obj.length() == 32) {
  ------------------
  |  Branch (473:17): [True: 18, False: 8]
  ------------------
  474|     18|         const auto addr_and_mask = std::span<const uint8_t, 32>{obj.bits(), 32};
  475|     18|         auto subnet = IPv6Subnet::from_address_and_mask(addr_and_mask);
  476|     18|         if(!subnet.has_value()) {
  ------------------
  |  Branch (476:13): [True: 7, False: 11]
  ------------------
  477|      7|            throw Decoding_Error("IPv6 name constraint mask is not a contiguous CIDR prefix");
  478|      7|         }
  479|       |
  480|     11|         m_type = NameType::IPv6;
  481|     11|         m_name.emplace<IPv6Subnet>(*subnet);
  482|     11|      } else {
  483|      8|         throw Decoding_Error("Invalid IP name constraint size " + std::to_string(obj.length()));
  484|      8|      }
  485|    375|   } else {
  486|    375|      m_type = NameType::Unknown;
  487|    375|   }
  488|    736|}
_ZN5Botan14GeneralSubtreeC2Ev:
  750|    772|GeneralSubtree::GeneralSubtree() = default;
_ZN5Botan14GeneralSubtree11decode_fromERNS_11BER_DecoderE:
  756|    772|void GeneralSubtree::decode_from(BER_Decoder& ber) {
  757|       |   /*
  758|       |   * RFC 5280 Section 4.2.1.10:
  759|       |   *    Within this profile, the minimum and maximum fields are not used with any
  760|       |   *    name forms, thus, the minimum MUST be zero, and maximum MUST be absent.
  761|       |   */
  762|    772|   size_t minimum = 0;
  763|    772|   std::optional<size_t> maximum;
  764|       |
  765|    772|   ber.start_sequence()
  766|    772|      .decode(m_base)
  767|    772|      .decode_optional(minimum, ASN1_Type(0), ASN1_Class::ContextSpecific, size_t(0))
  768|    772|      .decode_optional(maximum, ASN1_Type(1), ASN1_Class::ContextSpecific)
  769|    772|      .end_cons();
  770|       |
  771|    772|   if(minimum != 0) {
  ------------------
  |  Branch (771:7): [True: 1, False: 771]
  ------------------
  772|      1|      throw Decoding_Error("GeneralSubtree minimum must be 0");
  773|      1|   }
  774|    771|   if(maximum.has_value()) {
  ------------------
  |  Branch (774:7): [True: 1, False: 770]
  ------------------
  775|      1|      throw Decoding_Error("GeneralSubtree maximum must be absent");
  776|      1|   }
  777|    771|}
_ZN5Botan15NameConstraintsC2EONSt3__16vectorINS_14GeneralSubtreeENS1_9allocatorIS3_EEEES7_:
  786|     23|      m_permitted_subtrees(std::move(permitted_subtrees)), m_excluded_subtrees(std::move(excluded_subtrees)) {
  787|     69|   for(const auto& c : m_permitted_subtrees) {
  ------------------
  |  Branch (787:22): [True: 69, False: 23]
  ------------------
  788|     69|      m_permitted_name_types.insert(c.base().type_code());
  789|     69|   }
  790|     46|   for(const auto& c : m_excluded_subtrees) {
  ------------------
  |  Branch (790:22): [True: 46, False: 23]
  ------------------
  791|     46|      m_excluded_name_types.insert(c.base().type_code());
  792|     46|   }
  793|     23|}
name_constraint.cpp:_ZN5Botan12_GLOBAL__N_132validate_subtree_constraint_hostENSt3__117basic_string_viewIcNS1_11char_traitsIcEEEENS0_11RequireFQDNE:
   37|    237|std::optional<std::string> validate_subtree_constraint_host(std::string_view input, RequireFQDN require_fqdn) {
   38|    237|   if(input.empty()) {
  ------------------
  |  Branch (38:7): [True: 1, False: 236]
  ------------------
   39|      1|      return std::nullopt;
   40|      1|   }
   41|    236|   const bool subtree = input.starts_with('.');
   42|    236|   const std::string_view body = subtree ? input.substr(1) : input;
  ------------------
  |  Branch (42:34): [True: 61, False: 175]
  ------------------
   43|    236|   auto dns = DNSName::from_string(body);
   44|    236|   if(!dns.has_value()) {
  ------------------
  |  Branch (44:7): [True: 61, False: 175]
  ------------------
   45|     61|      return std::nullopt;
   46|     61|   }
   47|    175|   if(require_fqdn == RequireFQDN::Yes && dns->to_string().find('.') == std::string::npos) {
  ------------------
  |  Branch (47:7): [True: 62, False: 113]
  |  Branch (47:43): [True: 9, False: 53]
  ------------------
   48|      9|      return std::nullopt;
   49|      9|   }
   50|       |
   51|    166|   if(subtree) {
  ------------------
  |  Branch (51:7): [True: 56, False: 110]
  ------------------
   52|     56|      return std::string(".") + dns->to_string();
   53|    110|   } else {
   54|    110|      return dns->to_string();
   55|    110|   }
   56|    166|}

_ZN5Botan13x500_name_cmpENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEES4_:
   87|    785|bool x500_name_cmp(std::string_view name1, std::string_view name2) {
   88|    785|   X500_Char_Iterator it1(name1);
   89|    785|   X500_Char_Iterator it2(name2);
   90|       |
   91|  6.94k|   while(true) {
  ------------------
  |  Branch (91:10): [True: 6.94k, Folded]
  ------------------
   92|  6.94k|      const auto c1 = it1.next();
   93|  6.94k|      const auto c2 = it2.next();
   94|       |
   95|  6.94k|      if(c1 != c2) {
  ------------------
  |  Branch (95:10): [True: 239, False: 6.71k]
  ------------------
   96|    239|         return false;
   97|    239|      }
   98|  6.71k|      if(!c1.has_value() && !c2.has_value()) {
  ------------------
  |  Branch (98:10): [True: 546, False: 6.16k]
  |  Branch (98:29): [True: 546, False: 0]
  ------------------
   99|    546|         return true;
  100|    546|      }
  101|  6.71k|   }
  102|    785|}
_ZN5Botan12rdn_equalityERKNSt3__16vectorINS0_4pairINS_3OIDENS_11ASN1_StringEEENS0_9allocatorIS5_EEEESA_:
  280|    937|                  const std::vector<std::pair<OID, ASN1_String>>& b) {
  281|    937|   if(a.size() != b.size()) {
  ------------------
  |  Branch (281:7): [True: 0, False: 937]
  ------------------
  282|      0|      return false;
  283|      0|   }
  284|       |
  285|       |   // Single-AVA RDN is the overwhelmingly common case.
  286|    937|   if(a.size() == 1) {
  ------------------
  |  Branch (286:7): [True: 937, False: 0]
  ------------------
  287|    937|      return a[0].first == b[0].first && x500_name_cmp(a[0].second.value(), b[0].second.value());
  ------------------
  |  Branch (287:14): [True: 785, False: 152]
  |  Branch (287:42): [True: 546, False: 239]
  ------------------
  288|    937|   }
  289|       |
  290|      0|   return canonicalize_rdn(a) == canonicalize_rdn(b);
  291|    937|}
_ZN5BotaneqERKNS_7X509_DNES2_:
  296|    614|bool operator==(const X509_DN& dn1, const X509_DN& dn2) {
  297|    614|   const auto& r1 = dn1.rdns();
  298|    614|   const auto& r2 = dn2.rdns();
  299|       |
  300|    614|   if(r1.size() != r2.size()) {
  ------------------
  |  Branch (300:7): [True: 165, False: 449]
  ------------------
  301|    165|      return false;
  302|    165|   }
  303|       |
  304|    995|   for(size_t i = 0; i < r1.size(); ++i) {
  ------------------
  |  Branch (304:22): [True: 937, False: 58]
  ------------------
  305|    937|      if(!rdn_equality(r1[i], r2[i])) {
  ------------------
  |  Branch (305:10): [True: 391, False: 546]
  ------------------
  306|    391|         return false;
  307|    391|      }
  308|    937|   }
  309|       |
  310|     58|   return true;
  311|    449|}
_ZN5Botan7X509_DN11decode_fromERNS_11BER_DecoderE:
  395|  8.03k|void X509_DN::decode_from(BER_Decoder& source) {
  396|  8.03k|   std::vector<uint8_t> bits;
  397|       |
  398|  8.03k|   source.start_sequence().raw_bytes(bits).end_cons();
  399|       |
  400|  8.03k|   BER_Decoder sequence(bits, source.limits());
  401|       |
  402|  8.03k|   m_rdn.clear();
  403|       |
  404|       |   // Cap AVAs per RDN to bound work for downstream set-based matching.
  405|       |   // No legitimate cert has anywhere near this many AVAs in a single RDN.
  406|  8.03k|   constexpr size_t MAX_AVAS_PER_RDN = 32;
  407|       |
  408|  25.4k|   while(sequence.more_items()) {
  ------------------
  |  Branch (408:10): [True: 17.4k, False: 8.03k]
  ------------------
  409|  17.4k|      BER_Decoder rdn_decoder = sequence.start_set();
  410|       |
  411|  17.4k|      std::vector<std::pair<OID, ASN1_String>> rdn;
  412|  34.8k|      while(rdn_decoder.more_items()) {
  ------------------
  |  Branch (412:13): [True: 17.3k, False: 17.4k]
  ------------------
  413|  17.3k|         OID oid;
  414|  17.3k|         ASN1_String str;
  415|       |
  416|  17.3k|         rdn_decoder.start_sequence()
  417|  17.3k|            .decode(oid)
  418|  17.3k|            .decode(str)  // TODO support Any
  419|  17.3k|            .end_cons();
  420|       |
  421|  17.3k|         rdn.emplace_back(std::move(oid), std::move(str));
  422|       |
  423|  17.3k|         if(rdn.size() > MAX_AVAS_PER_RDN) {
  ------------------
  |  Branch (423:13): [True: 0, False: 17.3k]
  ------------------
  424|      0|            throw Decoding_Error("X.500 RDN has too many attribute-value assertions");
  425|      0|         }
  426|  17.3k|      }
  427|       |
  428|       |      /*
  429|       |      RFC 5280 4.1.2.4:
  430|       |         RelativeDistinguishedName ::=
  431|       |           SET SIZE (1..MAX) OF AttributeTypeAndValue
  432|       |      */
  433|  17.4k|      if(rdn.empty()) {
  ------------------
  |  Branch (433:10): [True: 1, False: 17.4k]
  ------------------
  434|      1|         throw Decoding_Error("X.500 RDN must contain at least one attribute-value assertion");
  435|      1|      }
  436|  17.4k|      m_rdn.push_back(std::move(rdn));
  437|  17.4k|   }
  438|       |
  439|  8.03k|   m_dn_bits = bits;
  440|  8.03k|}
x509_dn.cpp:_ZN5Botan12_GLOBAL__N_118X500_Char_IteratorC2ENSt3__117basic_string_viewIcNS2_11char_traitsIcEEEE:
   31|  1.57k|      explicit X500_Char_Iterator(std::string_view s) : m_str(s), m_pos(0) {
   32|       |         // Skip leading whitespace
   33|  2.00k|         while(m_pos < m_str.size() && is_space(m_str[m_pos])) {
  ------------------
  |  Branch (33:16): [True: 1.99k, False: 2]
  |  Branch (33:40): [True: 430, False: 1.56k]
  ------------------
   34|    430|            ++m_pos;
   35|    430|         }
   36|  1.57k|      }
x509_dn.cpp:_ZN5Botan12_GLOBAL__N_118X500_Char_Iterator4nextEv:
   39|  13.8k|      std::optional<char> next() {
   40|  13.8k|         if(m_pos >= m_str.size()) {
  ------------------
  |  Branch (40:13): [True: 1.08k, False: 12.8k]
  ------------------
   41|  1.08k|            return std::nullopt;
   42|  1.08k|         }
   43|       |
   44|  12.8k|         if(is_space(m_str[m_pos])) {
  ------------------
  |  Branch (44:13): [True: 514, False: 12.2k]
  ------------------
   45|       |            // Skip the entire whitespace run
   46|  1.40k|            while(m_pos < m_str.size() && is_space(m_str[m_pos])) {
  ------------------
  |  Branch (46:19): [True: 1.39k, False: 10]
  |  Branch (46:43): [True: 886, False: 504]
  ------------------
   47|    886|               ++m_pos;
   48|    886|            }
   49|       |            // Emit a single space only if more content follows (strip trailing ws)
   50|    514|            if(m_pos < m_str.size()) {
  ------------------
  |  Branch (50:16): [True: 504, False: 10]
  ------------------
   51|    504|               return ' ';
   52|    504|            }
   53|     10|            return std::nullopt;
   54|    514|         }
   55|       |
   56|  12.2k|         const char c = m_str[m_pos++];
   57|       |         // Locale-independent ASCII fold; RFC 5280 DN matching does not depend on libc locale
   58|  12.2k|         if(c >= 'A' && c <= 'Z') {
  ------------------
  |  Branch (58:13): [True: 8.29k, False: 4.00k]
  |  Branch (58:25): [True: 2.11k, False: 6.17k]
  ------------------
   59|  2.11k|            return static_cast<char>(c + ('a' - 'A'));
   60|  2.11k|         }
   61|  10.1k|         return c;
   62|  12.2k|      }
x509_dn.cpp:_ZN5Botan12_GLOBAL__N_18is_spaceEc:
   22|  16.1k|bool is_space(char c) {
   23|  16.1k|   return c == ' ' || c == '\t';
  ------------------
  |  Branch (23:11): [True: 1.45k, False: 14.7k]
  |  Branch (23:23): [True: 376, False: 14.3k]
  ------------------
   24|  16.1k|}

_ZN5Botan14Cert_Extension15IPAddressBlocks9IPAddressILNS1_7VersionE4EEC2ENSt3__14spanIKhLm18446744073709551615EEE:
 1708|  2.42k|IPAddressBlocks::IPAddress<V>::IPAddress(std::span<const uint8_t> v) {
 1709|  2.42k|   if(v.size() != Length) {
  ------------------
  |  Branch (1709:7): [True: 0, False: 2.42k]
  ------------------
 1710|      0|      throw Decoding_Error("number of bytes does not match IP version used");
 1711|      0|   }
 1712|       |
 1713|  12.1k|   for(size_t i = 0; i < Length; i++) {
  ------------------
  |  Branch (1713:22): [True: 9.70k, False: 2.42k]
  ------------------
 1714|  9.70k|      m_value[i] = v[i];
 1715|  9.70k|   }
 1716|  2.42k|}
_ZN5Botan14Cert_Extension15IPAddressBlocks9IPAddressILNS1_7VersionE16EEC2ENSt3__14spanIKhLm18446744073709551615EEE:
 1708|  2.78k|IPAddressBlocks::IPAddress<V>::IPAddress(std::span<const uint8_t> v) {
 1709|  2.78k|   if(v.size() != Length) {
  ------------------
  |  Branch (1709:7): [True: 0, False: 2.78k]
  ------------------
 1710|      0|      throw Decoding_Error("number of bytes does not match IP version used");
 1711|      0|   }
 1712|       |
 1713|  47.3k|   for(size_t i = 0; i < Length; i++) {
  ------------------
  |  Branch (1713:22): [True: 44.5k, False: 2.78k]
  ------------------
 1714|  44.5k|      m_value[i] = v[i];
 1715|  44.5k|   }
 1716|  2.78k|}
_ZN5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE4EE11decode_fromERNS_11BER_DecoderE:
 1623|  1.36k|void IPAddressBlocks::IPAddressOrRange<V>::decode_from(Botan::BER_Decoder& from) {
 1624|  1.36k|   const ASN1_Type next_tag = from.peek_next_object().type_tag();
 1625|       |
 1626|       |   // this can either be a prefix or a single address
 1627|  1.36k|   if(next_tag == ASN1_Type::BitString) {
  ------------------
  |  Branch (1627:7): [True: 1.16k, False: 200]
  ------------------
 1628|       |      // construct a min and a max address from the prefix
 1629|       |
 1630|  1.16k|      std::vector<uint8_t> prefix_min;
 1631|  1.16k|      from.decode(prefix_min, ASN1_Type::OctetString, ASN1_Type::BitString, ASN1_Class::Universal);
 1632|       |
 1633|       |      // copy because we modify the address in `decode_single_address`, but we need it twice for min and max
 1634|  1.16k|      std::vector<uint8_t> prefix_max(prefix_min);
 1635|       |
 1636|       |      // min address gets filled with 0's
 1637|  1.16k|      m_min = decode_single_address(std::move(prefix_min), true);
 1638|       |      // max address with 1's
 1639|  1.16k|      m_max = decode_single_address(std::move(prefix_max), false);
 1640|  1.16k|   } else if(next_tag == ASN1_Type::Sequence) {
  ------------------
  |  Branch (1640:14): [True: 124, False: 76]
  ------------------
 1641|       |      // this is a range
 1642|       |
 1643|    124|      std::vector<uint8_t> addr_min;
 1644|    124|      std::vector<uint8_t> addr_max;
 1645|       |
 1646|    124|      from.start_sequence()
 1647|    124|         .decode(addr_min, ASN1_Type::OctetString, ASN1_Type::BitString, ASN1_Class::Universal)
 1648|    124|         .decode(addr_max, ASN1_Type::OctetString, ASN1_Type::BitString, ASN1_Class::Universal)
 1649|    124|         .end_cons();
 1650|       |
 1651|    124|      m_min = decode_single_address(std::move(addr_min), true);
 1652|    124|      m_max = decode_single_address(std::move(addr_max), false);
 1653|       |
 1654|    124|      if(m_min > m_max) {
  ------------------
  |  Branch (1654:10): [True: 17, False: 107]
  ------------------
 1655|     17|         throw Decoding_Error("IP address ranges must be sorted.");
 1656|     17|      }
 1657|    124|   } else {
 1658|     76|      throw Decoding_Error(fmt("Unexpected type for IPAddressOrRange {}", static_cast<uint32_t>(next_tag)));
 1659|     76|   }
 1660|  1.36k|}
_ZN5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE4EE21decode_single_addressENSt3__16vectorIhNS5_9allocatorIhEEEEb:
 1664|  2.48k|                                                                                          bool min) {
 1665|  2.48k|   const size_t version_octets = static_cast<size_t>(V);
 1666|       |
 1667|       |   // decode a single address according to https://datatracker.ietf.org/doc/html/rfc3779#section-2.1.1 and following
 1668|       |
 1669|       |   // we have to account for the octet at the beginning that specifies how many bits are unused in the last octet
 1670|  2.48k|   if(decoded.empty() || decoded.size() > version_octets + 1) {
  ------------------
  |  Branch (1670:7): [True: 5, False: 2.47k]
  |  Branch (1670:26): [True: 5, False: 2.47k]
  ------------------
 1671|     10|      throw Decoding_Error(fmt("IP address range entries must have a length between 1 and {} bytes.", version_octets));
 1672|     10|   }
 1673|       |
 1674|  2.47k|   const uint8_t unused = decoded.front();
 1675|  2.47k|   const uint8_t discarded_octets = version_octets - (static_cast<uint8_t>(decoded.size()) - 1);
 1676|       |
 1677|  2.47k|   decoded.erase(decoded.begin());
 1678|       |
 1679|  2.47k|   if(decoded.empty() && unused != 0) {
  ------------------
  |  Branch (1679:7): [True: 41, False: 2.43k]
  |  Branch (1679:26): [True: 15, False: 26]
  ------------------
 1680|     15|      throw Decoding_Error("IP address range entry specified unused bits, but did not provide any octets.");
 1681|     15|   }
 1682|       |
 1683|       |   // if they were 8, the entire octet should have been discarded
 1684|  2.45k|   if(unused > 7) {
  ------------------
  |  Branch (1684:7): [True: 32, False: 2.42k]
  ------------------
 1685|     32|      throw Decoding_Error("IP address range entry specified invalid number of unused bits.");
 1686|     32|   }
 1687|       |
 1688|       |   // pad to version length with 0's for min addresses, 255's (0xff) for max addresses
 1689|  2.42k|   const uint8_t fill_discarded = min ? 0 : 0xff;
  ------------------
  |  Branch (1689:35): [True: 1.21k, False: 1.21k]
  ------------------
 1690|  4.88k|   for(size_t i = 0; i < discarded_octets; i++) {
  ------------------
  |  Branch (1690:22): [True: 2.46k, False: 2.42k]
  ------------------
 1691|  2.46k|      decoded.push_back(fill_discarded);
 1692|  2.46k|   }
 1693|       |
 1694|       |   // for min addresses they should already be 0, but we set them to zero regardless
 1695|       |   // for max addresses this turns the unused bits to 1
 1696|  7.97k|   for(size_t i = 0; i < unused; i++) {
  ------------------
  |  Branch (1696:22): [True: 5.54k, False: 2.42k]
  ------------------
 1697|  5.54k|      if(min) {
  ------------------
  |  Branch (1697:10): [True: 2.81k, False: 2.73k]
  ------------------
 1698|  2.81k|         decoded[version_octets - 1 - discarded_octets] &= ~(1 << i);
 1699|  2.81k|      } else {
 1700|  2.73k|         decoded[version_octets - 1 - discarded_octets] |= (1 << i);
 1701|  2.73k|      }
 1702|  5.54k|   }
 1703|       |
 1704|  2.42k|   return IPAddressBlocks::IPAddress<V>(decoded);
 1705|  2.45k|}
_ZN5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE16EE11decode_fromERNS_11BER_DecoderE:
 1623|  1.55k|void IPAddressBlocks::IPAddressOrRange<V>::decode_from(Botan::BER_Decoder& from) {
 1624|  1.55k|   const ASN1_Type next_tag = from.peek_next_object().type_tag();
 1625|       |
 1626|       |   // this can either be a prefix or a single address
 1627|  1.55k|   if(next_tag == ASN1_Type::BitString) {
  ------------------
  |  Branch (1627:7): [True: 1.30k, False: 249]
  ------------------
 1628|       |      // construct a min and a max address from the prefix
 1629|       |
 1630|  1.30k|      std::vector<uint8_t> prefix_min;
 1631|  1.30k|      from.decode(prefix_min, ASN1_Type::OctetString, ASN1_Type::BitString, ASN1_Class::Universal);
 1632|       |
 1633|       |      // copy because we modify the address in `decode_single_address`, but we need it twice for min and max
 1634|  1.30k|      std::vector<uint8_t> prefix_max(prefix_min);
 1635|       |
 1636|       |      // min address gets filled with 0's
 1637|  1.30k|      m_min = decode_single_address(std::move(prefix_min), true);
 1638|       |      // max address with 1's
 1639|  1.30k|      m_max = decode_single_address(std::move(prefix_max), false);
 1640|  1.30k|   } else if(next_tag == ASN1_Type::Sequence) {
  ------------------
  |  Branch (1640:14): [True: 151, False: 98]
  ------------------
 1641|       |      // this is a range
 1642|       |
 1643|    151|      std::vector<uint8_t> addr_min;
 1644|    151|      std::vector<uint8_t> addr_max;
 1645|       |
 1646|    151|      from.start_sequence()
 1647|    151|         .decode(addr_min, ASN1_Type::OctetString, ASN1_Type::BitString, ASN1_Class::Universal)
 1648|    151|         .decode(addr_max, ASN1_Type::OctetString, ASN1_Type::BitString, ASN1_Class::Universal)
 1649|    151|         .end_cons();
 1650|       |
 1651|    151|      m_min = decode_single_address(std::move(addr_min), true);
 1652|    151|      m_max = decode_single_address(std::move(addr_max), false);
 1653|       |
 1654|    151|      if(m_min > m_max) {
  ------------------
  |  Branch (1654:10): [True: 14, False: 137]
  ------------------
 1655|     14|         throw Decoding_Error("IP address ranges must be sorted.");
 1656|     14|      }
 1657|    151|   } else {
 1658|     98|      throw Decoding_Error(fmt("Unexpected type for IPAddressOrRange {}", static_cast<uint32_t>(next_tag)));
 1659|     98|   }
 1660|  1.55k|}
_ZN5Botan14Cert_Extension15IPAddressBlocks16IPAddressOrRangeILNS1_7VersionE16EE21decode_single_addressENSt3__16vectorIhNS5_9allocatorIhEEEEb:
 1664|  2.83k|                                                                                          bool min) {
 1665|  2.83k|   const size_t version_octets = static_cast<size_t>(V);
 1666|       |
 1667|       |   // decode a single address according to https://datatracker.ietf.org/doc/html/rfc3779#section-2.1.1 and following
 1668|       |
 1669|       |   // we have to account for the octet at the beginning that specifies how many bits are unused in the last octet
 1670|  2.83k|   if(decoded.empty() || decoded.size() > version_octets + 1) {
  ------------------
  |  Branch (1670:7): [True: 11, False: 2.82k]
  |  Branch (1670:26): [True: 4, False: 2.81k]
  ------------------
 1671|     15|      throw Decoding_Error(fmt("IP address range entries must have a length between 1 and {} bytes.", version_octets));
 1672|     15|   }
 1673|       |
 1674|  2.81k|   const uint8_t unused = decoded.front();
 1675|  2.81k|   const uint8_t discarded_octets = version_octets - (static_cast<uint8_t>(decoded.size()) - 1);
 1676|       |
 1677|  2.81k|   decoded.erase(decoded.begin());
 1678|       |
 1679|  2.81k|   if(decoded.empty() && unused != 0) {
  ------------------
  |  Branch (1679:7): [True: 23, False: 2.79k]
  |  Branch (1679:26): [True: 15, False: 8]
  ------------------
 1680|     15|      throw Decoding_Error("IP address range entry specified unused bits, but did not provide any octets.");
 1681|     15|   }
 1682|       |
 1683|       |   // if they were 8, the entire octet should have been discarded
 1684|  2.80k|   if(unused > 7) {
  ------------------
  |  Branch (1684:7): [True: 16, False: 2.78k]
  ------------------
 1685|     16|      throw Decoding_Error("IP address range entry specified invalid number of unused bits.");
 1686|     16|   }
 1687|       |
 1688|       |   // pad to version length with 0's for min addresses, 255's (0xff) for max addresses
 1689|  2.78k|   const uint8_t fill_discarded = min ? 0 : 0xff;
  ------------------
  |  Branch (1689:35): [True: 1.39k, False: 1.39k]
  ------------------
 1690|  36.4k|   for(size_t i = 0; i < discarded_octets; i++) {
  ------------------
  |  Branch (1690:22): [True: 33.6k, False: 2.78k]
  ------------------
 1691|  33.6k|      decoded.push_back(fill_discarded);
 1692|  33.6k|   }
 1693|       |
 1694|       |   // for min addresses they should already be 0, but we set them to zero regardless
 1695|       |   // for max addresses this turns the unused bits to 1
 1696|  8.19k|   for(size_t i = 0; i < unused; i++) {
  ------------------
  |  Branch (1696:22): [True: 5.41k, False: 2.78k]
  ------------------
 1697|  5.41k|      if(min) {
  ------------------
  |  Branch (1697:10): [True: 2.73k, False: 2.67k]
  ------------------
 1698|  2.73k|         decoded[version_octets - 1 - discarded_octets] &= ~(1 << i);
 1699|  2.73k|      } else {
 1700|  2.67k|         decoded[version_octets - 1 - discarded_octets] |= (1 << i);
 1701|  2.67k|      }
 1702|  5.41k|   }
 1703|       |
 1704|  2.78k|   return IPAddressBlocks::IPAddress<V>(decoded);
 1705|  2.80k|}
_ZN5Botan14Cert_Extension15IPAddressBlocks15IPAddressChoiceILNS1_7VersionE4EE11decode_fromERNS_11BER_DecoderE:
 1487|    429|void IPAddressBlocks::IPAddressChoice<V>::decode_from(Botan::BER_Decoder& from) {
 1488|    429|   const ASN1_Type next_tag = from.peek_next_object().type_tag();
 1489|       |
 1490|    429|   if(next_tag == ASN1_Type::Null) {
  ------------------
  |  Branch (1490:7): [True: 9, False: 420]
  ------------------
 1491|      9|      from.decode_null();
 1492|      9|      m_ip_addr_ranges = std::nullopt;
 1493|    420|   } else if(next_tag == ASN1_Type::Sequence) {
  ------------------
  |  Branch (1493:14): [True: 386, False: 34]
  ------------------
 1494|    386|      std::vector<IPAddressOrRange<V>> ip_ranges;
 1495|    386|      from.decode_list(ip_ranges);
 1496|    386|      m_ip_addr_ranges = sort_and_merge_ranges<IPAddressOrRange<V>>(ip_ranges);
 1497|    386|   } else {
 1498|     34|      throw Decoding_Error(fmt("Unexpected type for IPAddressChoice {}", static_cast<uint32_t>(next_tag)));
 1499|     34|   }
 1500|    429|}
_ZN5Botan14Cert_Extension15IPAddressBlocks15IPAddressChoiceILNS1_7VersionE16EE11decode_fromERNS_11BER_DecoderE:
 1487|    474|void IPAddressBlocks::IPAddressChoice<V>::decode_from(Botan::BER_Decoder& from) {
 1488|    474|   const ASN1_Type next_tag = from.peek_next_object().type_tag();
 1489|       |
 1490|    474|   if(next_tag == ASN1_Type::Null) {
  ------------------
  |  Branch (1490:7): [True: 9, False: 465]
  ------------------
 1491|      9|      from.decode_null();
 1492|      9|      m_ip_addr_ranges = std::nullopt;
 1493|    465|   } else if(next_tag == ASN1_Type::Sequence) {
  ------------------
  |  Branch (1493:14): [True: 424, False: 41]
  ------------------
 1494|    424|      std::vector<IPAddressOrRange<V>> ip_ranges;
 1495|    424|      from.decode_list(ip_ranges);
 1496|    424|      m_ip_addr_ranges = sort_and_merge_ranges<IPAddressOrRange<V>>(ip_ranges);
 1497|    424|   } else {
 1498|     41|      throw Decoding_Error(fmt("Unexpected type for IPAddressChoice {}", static_cast<uint32_t>(next_tag)));
 1499|     41|   }
 1500|    474|}
_ZN5Botan10Extensions15create_extn_objERKNS_3OIDEbRKNSt3__16vectorIhNS4_9allocatorIhEEEENS4_8optionalINS_17Extension_ContextEEE:
  131|  16.4k|                                                                   std::optional<Extension_Context> context) {
  132|  16.4k|   auto extn = extension_from_oid(oid);
  133|       |
  134|  16.4k|   if(!extn) {
  ------------------
  |  Branch (134:7): [True: 6.10k, False: 10.3k]
  ------------------
  135|       |      // some other unknown extension type
  136|  6.10k|      extn = std::make_unique<Cert_Extension::Unknown_Extension>(oid, critical);
  137|  10.3k|   } else {
  138|  10.3k|      if(context.has_value() && !extn->is_appropriate_context(*context)) {
  ------------------
  |  Branch (138:10): [True: 10.3k, False: 0]
  |  Branch (138:33): [True: 15, False: 10.3k]
  ------------------
  139|     15|         throw Decoding_Error(fmt("Extension {} is not allowed in this context", extn->oid_name()));
  140|     15|      }
  141|       |
  142|  10.3k|      try {
  143|  10.3k|         extn->decode_inner(body);
  144|  10.3k|         return extn;
  145|  10.3k|      } catch(const Exception&) {
  146|       |         // OID was recognized but contents failed to decode
  147|  7.64k|         extn = std::make_unique<Cert_Extension::Unknown_Extension>(oid, critical, /*failed_to_decode=*/true);
  148|  7.64k|      }
  149|  10.3k|   }
  150|       |
  151|       |   // This is always Unknown_Extension:
  152|  13.7k|   extn->decode_inner(body);
  153|  13.7k|   return extn;
  154|  16.4k|}
_ZNK5Botan10Extensions15Extensions_Info3objEv:
  156|  2.46k|const Certificate_Extension& Extensions::Extensions_Info::obj() const {
  157|  2.46k|   BOTAN_ASSERT_NONNULL(m_obj.get());
  ------------------
  |  |  116|  2.46k|   do {                                                                                   \
  |  |  117|  2.46k|      if((ptr) == nullptr) {                                                              \
  |  |  ------------------
  |  |  |  Branch (117:10): [True: 0, False: 2.46k]
  |  |  ------------------
  |  |  118|      0|         /* NOLINTNEXTLINE(bugprone-lambda-function-name) */                              \
  |  |  119|      0|         Botan::assertion_failure(#ptr " is not null", "", __func__, __FILE__, __LINE__); \
  |  |  120|      0|      }                                                                                   \
  |  |  121|  2.46k|   } while(0)
  |  |  ------------------
  |  |  |  Branch (121:12): [Folded, False: 2.46k]
  |  |  ------------------
  ------------------
  158|  2.46k|   return *m_obj;
  159|  2.46k|}
_ZNK5Botan10Extensions13extension_setERKNS_3OIDE:
  218|    614|bool Extensions::extension_set(const OID& oid) const {
  219|    614|   return m_extension_info.contains(oid);
  220|    614|}
_ZNK5Botan10Extensions20get_extension_objectERKNS_3OIDE:
  239|  6.75k|const Certificate_Extension* Extensions::get_extension_object(const OID& oid) const {
  240|  6.75k|   auto extn = m_extension_info.find(oid);
  241|  6.75k|   if(extn == m_extension_info.end()) {
  ------------------
  |  Branch (241:7): [True: 4.28k, False: 2.46k]
  ------------------
  242|  4.28k|      return nullptr;
  243|  4.28k|   }
  244|       |
  245|  2.46k|   return &extn->second.obj();
  246|  6.75k|}
_ZN5Botan10Extensions11decode_fromERNS_11BER_DecoderENSt3__18optionalINS_17Extension_ContextEEE:
  299|  3.43k|void Extensions::decode_from(BER_Decoder& from_source, std::optional<Extension_Context> context) {
  300|  3.43k|   m_extension_oids.clear();
  301|  3.43k|   m_extension_info.clear();
  302|  3.43k|   m_has_unknown_critical_extension = false;
  303|       |
  304|  3.43k|   BER_Decoder sequence = from_source.start_sequence();
  305|       |
  306|  19.4k|   while(sequence.more_items()) {
  ------------------
  |  Branch (306:10): [True: 17.6k, False: 1.75k]
  ------------------
  307|  17.6k|      OID oid;
  308|  17.6k|      bool critical = false;
  309|  17.6k|      std::vector<uint8_t> bits;
  310|       |
  311|  17.6k|      sequence.start_sequence()
  312|  17.6k|         .decode(oid)
  313|  17.6k|         .decode_optional(critical, ASN1_Type::Boolean, ASN1_Class::Universal, false)
  314|  17.6k|         .decode(bits, ASN1_Type::OctetString)
  315|  17.6k|         .end_cons();
  316|       |
  317|  17.6k|      auto obj = create_extn_obj(oid, critical, bits, context);
  318|       |      // Unknown_Extension is the only Certificate_Extension with an empty oid_name
  319|  17.6k|      if(critical && obj->oid_name().empty()) {
  ------------------
  |  Branch (319:10): [True: 1.92k, False: 15.7k]
  |  Branch (319:10): [True: 1.33k, False: 16.3k]
  |  Branch (319:22): [True: 1.33k, False: 591]
  ------------------
  320|  1.33k|         m_has_unknown_critical_extension = true;
  321|  1.33k|      }
  322|  17.6k|      Extensions_Info info(critical, bits, std::move(obj));
  323|       |
  324|       |      // RFC 5280 4.2: "A certificate MUST NOT include more than one
  325|       |      // instance of a particular extension."
  326|  17.6k|      if(!m_extension_info.emplace(oid, info).second) {
  ------------------
  |  Branch (326:10): [True: 1.67k, False: 15.9k]
  ------------------
  327|  1.67k|         throw Decoding_Error("Duplicate certificate extension encountered");
  328|  1.67k|      }
  329|  15.9k|      m_extension_oids.push_back(oid);
  330|  15.9k|   }
  331|  1.75k|   sequence.verify_end();
  332|  1.75k|}
_ZNK5Botan14Cert_Extension17Basic_Constraints22is_appropriate_contextENS_17Extension_ContextE:
  336|    568|bool Basic_Constraints::is_appropriate_context(Extension_Context context) const {
  337|    568|   return context == Extension_Context::Certificate;
  338|    568|}
_ZNK5Botan14Cert_Extension9Key_Usage22is_appropriate_contextENS_17Extension_ContextE:
  340|  1.17k|bool Key_Usage::is_appropriate_context(Extension_Context context) const {
  341|  1.17k|   return context == Extension_Context::Certificate;
  342|  1.17k|}
_ZNK5Botan14Cert_Extension14Subject_Key_ID22is_appropriate_contextENS_17Extension_ContextE:
  344|    632|bool Subject_Key_ID::is_appropriate_context(Extension_Context context) const {
  345|    632|   return context == Extension_Context::Certificate;
  346|    632|}
_ZNK5Botan14Cert_Extension16Authority_Key_ID22is_appropriate_contextENS_17Extension_ContextE:
  348|    803|bool Authority_Key_ID::is_appropriate_context(Extension_Context context) const {
  349|    803|   return context == Extension_Context::Certificate || context == Extension_Context::CRL;
  ------------------
  |  Branch (349:11): [True: 803, False: 0]
  |  Branch (349:56): [True: 0, False: 0]
  ------------------
  350|    803|}
_ZNK5Botan14Cert_Extension24Subject_Alternative_Name22is_appropriate_contextENS_17Extension_ContextE:
  352|    879|bool Subject_Alternative_Name::is_appropriate_context(Extension_Context context) const {
  353|    879|   return context == Extension_Context::Certificate;
  354|    879|}
_ZNK5Botan14Cert_Extension23Issuer_Alternative_Name22is_appropriate_contextENS_17Extension_ContextE:
  356|    485|bool Issuer_Alternative_Name::is_appropriate_context(Extension_Context context) const {
  357|    485|   return context == Extension_Context::Certificate || context == Extension_Context::CRL;
  ------------------
  |  Branch (357:11): [True: 485, False: 0]
  |  Branch (357:56): [True: 0, False: 0]
  ------------------
  358|    485|}
_ZNK5Botan14Cert_Extension18Extended_Key_Usage22is_appropriate_contextENS_17Extension_ContextE:
  360|    474|bool Extended_Key_Usage::is_appropriate_context(Extension_Context context) const {
  361|    474|   return context == Extension_Context::Certificate;
  362|    474|}
_ZNK5Botan14Cert_Extension16Name_Constraints22is_appropriate_contextENS_17Extension_ContextE:
  364|    343|bool Name_Constraints::is_appropriate_context(Extension_Context context) const {
  365|    343|   return context == Extension_Context::Certificate;
  366|    343|}
_ZNK5Botan14Cert_Extension20Certificate_Policies22is_appropriate_contextENS_17Extension_ContextE:
  368|    345|bool Certificate_Policies::is_appropriate_context(Extension_Context context) const {
  369|    345|   return context == Extension_Context::Certificate;
  370|    345|}
_ZNK5Botan14Cert_Extension28Authority_Information_Access22is_appropriate_contextENS_17Extension_ContextE:
  372|    513|bool Authority_Information_Access::is_appropriate_context(Extension_Context context) const {
  373|    513|   return context == Extension_Context::Certificate || context == Extension_Context::CRL;
  ------------------
  |  Branch (373:11): [True: 513, False: 0]
  |  Branch (373:56): [True: 0, False: 0]
  ------------------
  374|    513|}
_ZNK5Botan14Cert_Extension10CRL_Number22is_appropriate_contextENS_17Extension_ContextE:
  376|      3|bool CRL_Number::is_appropriate_context(Extension_Context context) const {
  377|      3|   return context == Extension_Context::CRL;
  378|      3|}
_ZNK5Botan14Cert_Extension14CRL_ReasonCode22is_appropriate_contextENS_17Extension_ContextE:
  380|      6|bool CRL_ReasonCode::is_appropriate_context(Extension_Context context) const {
  381|       |   // RFC 6960 4.4.5: "All the extensions specified as CRL entry extensions
  382|       |   // -- in Section 5.3 of [RFC5280] -- are also supported as singleExtensions."
  383|      6|   return context == Extension_Context::CRL_Entry || context == Extension_Context::OCSP_Response;
  ------------------
  |  Branch (383:11): [True: 0, False: 6]
  |  Branch (383:54): [True: 0, False: 6]
  ------------------
  384|      6|}
_ZNK5Botan14Cert_Extension23CRL_Distribution_Points22is_appropriate_contextENS_17Extension_ContextE:
  386|  1.28k|bool CRL_Distribution_Points::is_appropriate_context(Extension_Context context) const {
  387|  1.28k|   return context == Extension_Context::Certificate;
  388|  1.28k|}
_ZNK5Botan14Cert_Extension30CRL_Issuing_Distribution_Point22is_appropriate_contextENS_17Extension_ContextE:
  390|      6|bool CRL_Issuing_Distribution_Point::is_appropriate_context(Extension_Context context) const {
  391|      6|   return context == Extension_Context::CRL;
  392|      6|}
_ZNK5Botan14Cert_Extension21NoRevocationAvailable22is_appropriate_contextENS_17Extension_ContextE:
  398|      9|bool NoRevocationAvailable::is_appropriate_context(Extension_Context context) const {
  399|      9|   return context == Extension_Context::Certificate;
  400|      9|}
_ZNK5Botan14Cert_Extension10TNAuthList22is_appropriate_contextENS_17Extension_ContextE:
  402|    157|bool TNAuthList::is_appropriate_context(Extension_Context context) const {
  403|    157|   return context == Extension_Context::Certificate;
  404|    157|}
_ZNK5Botan14Cert_Extension15IPAddressBlocks22is_appropriate_contextENS_17Extension_ContextE:
  406|  1.02k|bool IPAddressBlocks::is_appropriate_context(Extension_Context context) const {
  407|  1.02k|   return context == Extension_Context::Certificate;
  408|  1.02k|}
_ZNK5Botan14Cert_Extension8ASBlocks22is_appropriate_contextENS_17Extension_ContextE:
  410|  1.65k|bool ASBlocks::is_appropriate_context(Extension_Context context) const {
  411|  1.65k|   return context == Extension_Context::Certificate;
  412|  1.65k|}
_ZN5Botan14Cert_Extension17Basic_ConstraintsC2Ebm:
  419|    568|      Basic_Constraints(is_ca, is_ca ? std::optional<size_t>(path_length_constraint) : std::nullopt) {}
  ------------------
  |  Branch (419:32): [True: 0, False: 568]
  ------------------
_ZN5Botan14Cert_Extension17Basic_ConstraintsC2EbNSt3__18optionalImEE:
  422|    568|      m_is_ca(is_ca), m_path_length_constraint(path_length_constraint) {
  423|    568|   if(!m_is_ca && m_path_length_constraint.has_value()) {
  ------------------
  |  Branch (423:7): [True: 568, False: 0]
  |  Branch (423:19): [True: 0, False: 568]
  ------------------
  424|       |      // RFC 5280 Sec 4.2.1.9 "CAs MUST NOT include the pathLenConstraint field unless the cA boolean is asserted"
  425|      0|      throw Invalid_Argument(
  426|      0|         "Basic_Constraints nonsensical to set a path length constraint for a non-CA basicConstraints");
  427|      0|   }
  428|    568|}
_ZN5Botan14Cert_Extension17Basic_Constraints12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
  459|    568|void Basic_Constraints::decode_inner(const std::vector<uint8_t>& in) {
  460|       |   /*
  461|       |   * RFC 5280 Section 4.2.1.9
  462|       |   *
  463|       |   * BasicConstraints ::= SEQUENCE {
  464|       |   *    cA                      BOOLEAN DEFAULT FALSE,
  465|       |   *    pathLenConstraint       INTEGER (0..MAX) OPTIONAL }
  466|       |   */
  467|    568|   BER_Decoder(in, BER_Decoder::Limits::DER())
  468|    568|      .start_sequence()
  469|    568|      .decode_optional(m_is_ca, ASN1_Type::Boolean, ASN1_Class::Universal, false)
  470|    568|      .decode_optional(m_path_length_constraint, ASN1_Type::Integer, ASN1_Class::Universal)
  471|    568|      .end_cons()
  472|    568|      .verify_end();
  473|       |
  474|       |   /* RFC 5280 Section 4.2.1.9:
  475|       |   *  "CAs MUST NOT include the pathLenConstraint field unless the cA boolean
  476|       |   *  is asserted and the key usage extension asserts the keyCertSign bit" */
  477|    568|   if(!m_is_ca && m_path_length_constraint.has_value()) {
  ------------------
  |  Branch (477:7): [True: 174, False: 394]
  |  Branch (477:19): [True: 4, False: 170]
  ------------------
  478|      4|      throw Decoding_Error("BasicConstraints pathLenConstraint must not be present when cA is FALSE");
  479|      4|   }
  480|    568|}
_ZN5Botan14Cert_Extension9Key_Usage12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
  508|  1.17k|void Key_Usage::decode_inner(const std::vector<uint8_t>& in) {
  509|       |   /* RFC 5280 Section 4.2.1.3 - KeyUsage ::= BIT STRING */
  510|  1.17k|   std::vector<uint8_t> bits;
  511|  1.17k|   BER_Decoder(in, BER_Decoder::Limits::DER())
  512|  1.17k|      .decode(bits, ASN1_Type::BitString, ASN1_Type::BitString, ASN1_Class::Universal)
  513|  1.17k|      .verify_end();
  514|       |
  515|  1.17k|   const uint16_t usage = [&bits]() -> uint16_t {
  516|  1.17k|      switch(bits.size()) {
  517|  1.17k|         case 0:
  518|  1.17k|            return 0;
  519|  1.17k|         case 1:
  520|  1.17k|            return make_uint16(bits[0], 0);
  521|  1.17k|         case 2:
  522|  1.17k|            return make_uint16(bits[0], bits[1]);
  523|  1.17k|         default:
  524|  1.17k|            throw Decoding_Error("Invalid KeyUsage bitstring encoding");
  525|  1.17k|      }
  526|  1.17k|   }();
  527|       |
  528|       |   /* RFC 5280 Section 4.2.1.3:
  529|       |   *  "When the keyUsage extension appears in a certificate, at least one of
  530|       |   *  the bits MUST be set to 1." */
  531|  1.17k|   if(usage == 0) {
  ------------------
  |  Branch (531:7): [True: 2, False: 1.17k]
  ------------------
  532|      2|      throw Decoding_Error("KeyUsage extension must have at least one bit set");
  533|      2|   }
  534|       |
  535|  1.17k|   m_constraints = Key_Constraints(usage);
  536|  1.17k|}
_ZN5Botan14Cert_Extension14Subject_Key_ID12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
  550|    632|void Subject_Key_ID::decode_inner(const std::vector<uint8_t>& in) {
  551|       |   /* RFC 5280 Section 4.2.1.2 - SubjectKeyIdentifier ::= KeyIdentifier */
  552|    632|   BER_Decoder(in, BER_Decoder::Limits::DER()).decode(m_key_id, ASN1_Type::OctetString).verify_end();
  553|       |
  554|    632|   if(m_key_id.empty()) {
  ------------------
  |  Branch (554:7): [True: 0, False: 632]
  ------------------
  555|      0|      throw Decoding_Error("SubjectKeyIdentifier must not be empty");
  556|      0|   }
  557|    632|   if(m_key_id.size() > MaximumKeyIdentifierLength) {
  ------------------
  |  Branch (557:7): [True: 0, False: 632]
  ------------------
  558|      0|      throw Decoding_Error(
  559|      0|         fmt("SubjectKeyIdentifier length {} exceeds limit of {} bytes", m_key_id.size(), MaximumKeyIdentifierLength));
  560|      0|   }
  561|    632|}
_ZN5Botan14Cert_Extension16Authority_Key_ID12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
  596|    803|void Authority_Key_ID::decode_inner(const std::vector<uint8_t>& in) {
  597|       |   /*
  598|       |   * RFC 5280 Section 4.2.1.1
  599|       |   *
  600|       |   * AuthorityKeyIdentifier ::= SEQUENCE {
  601|       |   *    keyIdentifier             [0] KeyIdentifier           OPTIONAL,
  602|       |   *    authorityCertIssuer       [1] GeneralNames            OPTIONAL,
  603|       |   *    authorityCertSerialNumber [2] CertificateSerialNumber OPTIONAL }
  604|       |   */
  605|    803|   BER_Decoder ber(in, BER_Decoder::Limits::DER());
  606|    803|   BER_Decoder seq = ber.start_sequence();
  607|       |
  608|    803|   const bool key_id_present = seq.peek_next_object().is_a(0, ASN1_Class::ContextSpecific);
  609|       |
  610|    803|   seq.decode_optional_string(m_key_id, ASN1_Type::OctetString, 0).discard_remaining().end_cons();
  611|    803|   ber.verify_end();
  612|       |
  613|    803|   if(key_id_present) {
  ------------------
  |  Branch (613:7): [True: 328, False: 475]
  ------------------
  614|    328|      if(m_key_id.empty()) {
  ------------------
  |  Branch (614:10): [True: 4, False: 324]
  ------------------
  615|      4|         throw Decoding_Error("AuthorityKeyIdentifier keyIdentifier must not be empty");
  616|      4|      }
  617|    324|      if(m_key_id.size() > MaximumKeyIdentifierLength) {
  ------------------
  |  Branch (617:10): [True: 8, False: 316]
  ------------------
  618|      8|         throw Decoding_Error(fmt("AuthorityKeyIdentifier keyIdentifier length {} exceeds limit of {} bytes",
  619|      8|                                  m_key_id.size(),
  620|      8|                                  MaximumKeyIdentifierLength));
  621|      8|      }
  622|    324|   }
  623|    803|}
_ZN5Botan14Cert_Extension24Subject_Alternative_Name12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
  646|    879|void Subject_Alternative_Name::decode_inner(const std::vector<uint8_t>& in) {
  647|       |   /* RFC 5280 Section 4.2.1.6 - SubjectAltName ::= GeneralNames
  648|       |   *  GeneralNames ::= SEQUENCE SIZE (1..MAX) OF GeneralName */
  649|    879|   BER_Decoder(in, BER_Decoder::Limits::DER()).decode(m_alt_name).verify_end();
  650|    879|   if(!m_alt_name.has_items()) {
  ------------------
  |  Branch (650:7): [True: 1, False: 878]
  ------------------
  651|      1|      throw Decoding_Error("SubjectAlternativeName extension must contain at least one GeneralName");
  652|      1|   }
  653|    879|}
_ZN5Botan14Cert_Extension23Issuer_Alternative_Name12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
  658|    485|void Issuer_Alternative_Name::decode_inner(const std::vector<uint8_t>& in) {
  659|       |   /* RFC 5280 Section 4.2.1.7 - IssuerAltName ::= GeneralNames
  660|       |   *  GeneralNames ::= SEQUENCE SIZE (1..MAX) OF GeneralName */
  661|    485|   BER_Decoder(in, BER_Decoder::Limits::DER()).decode(m_alt_name).verify_end();
  662|    485|   if(!m_alt_name.has_items()) {
  ------------------
  |  Branch (662:7): [True: 3, False: 482]
  ------------------
  663|      3|      throw Decoding_Error("IssuerAlternativeName extension must contain at least one GeneralName");
  664|      3|   }
  665|    485|}
_ZN5Botan14Cert_Extension18Extended_Key_Usage12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
  679|    474|void Extended_Key_Usage::decode_inner(const std::vector<uint8_t>& in) {
  680|       |   /* RFC 5280 Section 4.2.1.12 - ExtKeyUsageSyntax ::= SEQUENCE SIZE (1..MAX) OF KeyPurposeId */
  681|    474|   BER_Decoder(in, BER_Decoder::Limits::DER()).decode_list(m_oids).verify_end();
  682|    474|   if(m_oids.empty()) {
  ------------------
  |  Branch (682:7): [True: 4, False: 470]
  ------------------
  683|      4|      throw Decoding_Error("ExtendedKeyUsage extension must contain at least one KeyPurposeId");
  684|      4|   }
  685|    474|}
_ZN5Botan14Cert_Extension16Name_Constraints12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
  697|    343|void Name_Constraints::decode_inner(const std::vector<uint8_t>& in) {
  698|       |   /*
  699|       |   * RFC 5280 Section 4.2.1.10
  700|       |   *
  701|       |   * NameConstraints ::= SEQUENCE {
  702|       |   *    permittedSubtrees       [0] GeneralSubtrees OPTIONAL,
  703|       |   *    excludedSubtrees        [1] GeneralSubtrees OPTIONAL }
  704|       |   */
  705|    343|   BER_Decoder ber(in, BER_Decoder::Limits::DER());
  706|    343|   BER_Decoder inner = ber.start_sequence();
  707|       |
  708|    343|   std::vector<GeneralSubtree> permitted;
  709|    343|   if(inner.decode_optional_list(permitted, ASN1_Type(0), ASN1_Class::ExplicitContextSpecific)) {
  ------------------
  |  Branch (709:7): [True: 77, False: 266]
  ------------------
  710|     77|      if(permitted.empty()) {
  ------------------
  |  Branch (710:10): [True: 3, False: 74]
  ------------------
  711|      3|         throw Decoding_Error("Empty NameConstraint permitted list");
  712|      3|      }
  713|     77|   }
  714|       |
  715|    340|   std::vector<GeneralSubtree> excluded;
  716|    340|   if(inner.decode_optional_list(excluded, ASN1_Type(1), ASN1_Class::ExplicitContextSpecific)) {
  ------------------
  |  Branch (716:7): [True: 33, False: 307]
  ------------------
  717|     33|      if(excluded.empty()) {
  ------------------
  |  Branch (717:10): [True: 9, False: 24]
  ------------------
  718|      9|         throw Decoding_Error("Empty NameConstraint excluded list");
  719|      9|      }
  720|     33|   }
  721|       |
  722|    331|   inner.end_cons();
  723|    331|   ber.verify_end();
  724|       |
  725|    331|   if(permitted.empty() && excluded.empty()) {
  ------------------
  |  Branch (725:7): [True: 3, False: 328]
  |  Branch (725:28): [True: 3, False: 0]
  ------------------
  726|      3|      throw Decoding_Error("Empty NameConstraint extension");
  727|      3|   }
  728|       |
  729|    328|   m_name_constraints = NameConstraints(std::move(permitted), std::move(excluded));
  730|    328|}
_ZN5Botan14Cert_Extension20Certificate_Policies12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
  812|    345|void Certificate_Policies::decode_inner(const std::vector<uint8_t>& in) {
  813|       |   /* RFC 5280 Section 4.2.1.4 - CertificatePolicies ::= SEQUENCE SIZE (1..MAX) OF PolicyInformation */
  814|    345|   std::vector<Policy_Information> policies;
  815|       |
  816|    345|   BER_Decoder(in, BER_Decoder::Limits::DER()).decode_list(policies).verify_end();
  817|    345|   if(policies.empty()) {
  ------------------
  |  Branch (817:7): [True: 2, False: 343]
  ------------------
  818|      2|      throw Decoding_Error("CertificatePolicies extension must contain at least one PolicyInformation");
  819|      2|   }
  820|    343|   m_oids.clear();
  821|    343|   for(const auto& policy : policies) {
  ------------------
  |  Branch (821:27): [True: 167, False: 343]
  ------------------
  822|    167|      m_oids.push_back(policy.oid());
  823|    167|   }
  824|    343|}
_ZN5Botan14Cert_Extension28Authority_Information_Access12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
  916|    513|void Authority_Information_Access::decode_inner(const std::vector<uint8_t>& in) {
  917|       |   /*
  918|       |   * RFC 5280 Section 4.2.2.1
  919|       |   *
  920|       |   * AuthorityInfoAccessSyntax ::= SEQUENCE SIZE (1..MAX) OF AccessDescription
  921|       |   * AccessDescription ::= SEQUENCE {
  922|       |   *    accessMethod          OBJECT IDENTIFIER,
  923|       |   *    accessLocation        GeneralName }
  924|       |   */
  925|    513|   BER_Decoder outer(in, BER_Decoder::Limits::DER());
  926|    513|   BER_Decoder ber = outer.start_sequence();
  927|       |
  928|    513|   const OID ocsp_responder = OID::from_string("PKIX.OCSP");
  929|    513|   const OID ca_issuer = OID::from_string("PKIX.CertificateAuthorityIssuers");
  930|       |
  931|    513|   size_t access_descriptions_seen = 0;
  932|  1.43k|   while(ber.more_items()) {
  ------------------
  |  Branch (932:10): [True: 1.07k, False: 354]
  ------------------
  933|  1.07k|      OID oid;
  934|       |
  935|  1.07k|      BER_Decoder info = ber.start_sequence();
  936|       |
  937|  1.07k|      info.decode(oid);
  938|  1.07k|      const BER_Object name = info.get_next_object();
  939|  1.07k|      info.end_cons();
  940|       |
  941|  1.07k|      access_descriptions_seen += 1;
  942|       |
  943|  1.07k|      if(oid == ocsp_responder && name.is_a(6, ASN1_Class::ContextSpecific)) {
  ------------------
  |  Branch (943:10): [True: 39, False: 1.03k]
  |  Branch (943:35): [True: 29, False: 10]
  ------------------
  944|     29|         if(auto parsed = URI::parse(ASN1::to_string(name))) {
  ------------------
  |  Branch (944:18): [True: 21, False: 8]
  ------------------
  945|     21|            m_ocsp_responders.push_back(std::move(*parsed));
  946|     21|         } else {
  947|      8|            throw Decoding_Error("Invalid URI in AuthorityInformationAccess OCSP responder");
  948|      8|         }
  949|  1.04k|      } else if(oid == ca_issuer && name.is_a(6, ASN1_Class::ContextSpecific)) {
  ------------------
  |  Branch (949:17): [True: 374, False: 673]
  |  Branch (949:37): [True: 355, False: 19]
  ------------------
  950|    355|         if(auto parsed = URI::parse(ASN1::to_string(name))) {
  ------------------
  |  Branch (950:18): [True: 204, False: 151]
  ------------------
  951|    204|            m_ca_issuers.push_back(std::move(*parsed));
  952|    204|         } else {
  953|    151|            throw Decoding_Error("Invalid URI in AuthorityInformationAccess CA issuers");
  954|    151|         }
  955|    355|      }
  956|  1.07k|   }
  957|       |
  958|    354|   ber.end_cons();
  959|    354|   outer.verify_end();
  960|       |
  961|    354|   if(access_descriptions_seen == 0) {
  ------------------
  |  Branch (961:7): [True: 0, False: 354]
  ------------------
  962|      0|      throw Decoding_Error("AuthorityInformationAccess extension must contain at least one AccessDescription");
  963|      0|   }
  964|    354|}
_ZN5Botan14Cert_Extension23CRL_Distribution_Points12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
 1051|  1.28k|void CRL_Distribution_Points::decode_inner(const std::vector<uint8_t>& buf) {
 1052|       |   /*
 1053|       |   * RFC 5280 Section 4.2.1.13
 1054|       |   *
 1055|       |   * CRLDistributionPoints ::= SEQUENCE SIZE (1..MAX) OF DistributionPoint
 1056|       |   */
 1057|  1.28k|   BER_Decoder(buf, BER_Decoder::Limits::DER()).decode_list(m_distribution_points).verify_end();
 1058|       |
 1059|  1.28k|   if(m_distribution_points.empty()) {
  ------------------
  |  Branch (1059:7): [True: 1, False: 1.28k]
  ------------------
 1060|      1|      throw Decoding_Error("CRLDistributionPoints extension must contain at least one DistributionPoint");
 1061|      1|   }
 1062|       |
 1063|  1.28k|   for(const auto& distribution_point : m_distribution_points) {
  ------------------
  |  Branch (1063:39): [True: 98, False: 1.28k]
  ------------------
 1064|     98|      for(const auto& uri : distribution_point.point().uri_names()) {
  ------------------
  |  Branch (1064:27): [True: 75, False: 98]
  ------------------
 1065|     75|         m_crl_distribution_urls.push_back(uri);
 1066|     75|      }
 1067|     98|   }
 1068|  1.28k|}
_ZN5Botan14Cert_Extension23CRL_Distribution_Points18Distribution_Point11decode_fromERNS_11BER_DecoderE:
 1097|  1.31k|void CRL_Distribution_Points::Distribution_Point::decode_from(BER_Decoder& ber) {
 1098|  1.31k|   ber.start_sequence()
 1099|  1.31k|      .start_context_specific(0)
 1100|  1.31k|      .decode_optional_implicit(m_point,
 1101|  1.31k|                                ASN1_Type(0),
 1102|  1.31k|                                ASN1_Class::ContextSpecific | ASN1_Class::Constructed,
 1103|  1.31k|                                ASN1_Type::Sequence,
 1104|  1.31k|                                ASN1_Class::Constructed)
 1105|  1.31k|      .end_cons()
 1106|  1.31k|      .end_cons();
 1107|  1.31k|}
_ZN5Botan14Cert_Extension10TNAuthList5Entry11decode_fromERNS_11BER_DecoderE:
 1122|    258|void TNAuthList::Entry::decode_from(class BER_Decoder& ber) {
 1123|    258|   const BER_Object obj = ber.get_next_object();
 1124|       |
 1125|    258|   if(obj.get_class() != (ASN1_Class::ContextSpecific | ASN1_Class::Constructed)) {
  ------------------
  |  Branch (1125:7): [True: 7, False: 251]
  ------------------
 1126|      7|      throw Decoding_Error(fmt("Unexpected TNEntry class tag {}", static_cast<uint32_t>(obj.get_class())));
 1127|      7|   }
 1128|       |
 1129|    251|   const uint32_t type_tag = static_cast<uint32_t>(obj.type_tag());
 1130|       |
 1131|    251|   if(type_tag == ServiceProviderCode) {
  ------------------
  |  Branch (1131:7): [True: 117, False: 134]
  ------------------
 1132|    117|      m_type = ServiceProviderCode;
 1133|    117|      ASN1_String spc_string;
 1134|    117|      BER_Decoder(obj, ber.limits()).decode(spc_string).verify_end();
 1135|    117|      m_data = std::move(spc_string);
 1136|    134|   } else if(type_tag == TelephoneNumberRange) {
  ------------------
  |  Branch (1136:14): [True: 98, False: 36]
  ------------------
 1137|     98|      m_type = TelephoneNumberRange;
 1138|     98|      m_data = RangeContainer();
 1139|     98|      auto& range_items = std::get<RangeContainer>(m_data);
 1140|     98|      BER_Decoder outer(obj, ber.limits());
 1141|     98|      BER_Decoder list = outer.start_sequence();
 1142|    208|      while(list.more_items()) {
  ------------------
  |  Branch (1142:13): [True: 132, False: 76]
  ------------------
 1143|    132|         TelephoneNumberRangeData entry;
 1144|       |
 1145|    132|         list.decode(entry.start);
 1146|    132|         if(!is_valid_telephone_number(entry.start)) {
  ------------------
  |  Branch (1146:13): [True: 19, False: 113]
  ------------------
 1147|     19|            throw Decoding_Error(fmt("Invalid TelephoneNumberRange start {}", entry.start.value()));
 1148|     19|         }
 1149|       |
 1150|    113|         list.decode(entry.count);
 1151|    113|         if(entry.count < 2) {
  ------------------
  |  Branch (1151:13): [True: 3, False: 110]
  ------------------
 1152|      3|            throw Decoding_Error(fmt("Invalid TelephoneNumberRange count {}", entry.count));
 1153|      3|         }
 1154|       |
 1155|    110|         range_items.emplace_back(std::move(entry));
 1156|    110|      }
 1157|     76|      list.end_cons();
 1158|     76|      outer.verify_end();
 1159|       |
 1160|     76|      if(range_items.empty()) {
  ------------------
  |  Branch (1160:10): [True: 3, False: 73]
  ------------------
 1161|      3|         throw Decoding_Error("TelephoneNumberRange is empty");
 1162|      3|      }
 1163|     76|   } else if(type_tag == TelephoneNumber) {
  ------------------
  |  Branch (1163:14): [True: 15, False: 21]
  ------------------
 1164|     15|      m_type = TelephoneNumber;
 1165|     15|      ASN1_String one_string;
 1166|     15|      BER_Decoder(obj, ber.limits()).decode(one_string).verify_end();
 1167|     15|      if(!is_valid_telephone_number(one_string)) {
  ------------------
  |  Branch (1167:10): [True: 3, False: 12]
  ------------------
 1168|      3|         throw Decoding_Error(fmt("Invalid TelephoneNumber {}", one_string.value()));
 1169|      3|      }
 1170|     12|      m_data = std::move(one_string);
 1171|     21|   } else {
 1172|     21|      throw Decoding_Error(fmt("Unexpected TNEntry type code {}", type_tag));
 1173|    202|   };
 1174|    202|}
_ZN5Botan14Cert_Extension10TNAuthList12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
 1180|    157|void TNAuthList::decode_inner(const std::vector<uint8_t>& in) {
 1181|       |   /* RFC 8226 Section 9 - TNAuthorizationList ::= SEQUENCE SIZE (1..MAX) OF TNEntry */
 1182|    157|   BER_Decoder(in, BER_Decoder::Limits::DER()).decode_list(m_tn_entries).verify_end();
 1183|    157|   if(m_tn_entries.empty()) {
  ------------------
  |  Branch (1183:7): [True: 0, False: 157]
  ------------------
 1184|      0|      throw Decoding_Error("TNAuthorizationList is empty");
 1185|      0|   }
 1186|    157|}
_ZN5Botan14Cert_Extension15IPAddressBlocks12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
 1209|  1.02k|void IPAddressBlocks::decode_inner(const std::vector<uint8_t>& in) {
 1210|       |   /* RFC 3779 Section 2.2.3.1 - IPAddrBlocks ::= SEQUENCE OF IPAddressFamily */
 1211|  1.02k|   BER_Decoder(in, BER_Decoder::Limits::DER()).decode_list(m_ip_addr_blocks).verify_end();
 1212|  1.02k|   sort_and_merge();
 1213|  1.02k|}
_ZN5Botan14Cert_Extension15IPAddressBlocks15IPAddressFamily11decode_fromERNS_11BER_DecoderE:
 1234|  1.11k|void IPAddressBlocks::IPAddressFamily::decode_from(Botan::BER_Decoder& from) {
 1235|  1.11k|   const ASN1_Type next_tag = from.peek_next_object().type_tag();
 1236|  1.11k|   if(next_tag != ASN1_Type::Sequence) {
  ------------------
  |  Branch (1236:7): [True: 63, False: 1.05k]
  ------------------
 1237|     63|      throw Decoding_Error(fmt("Unexpected type for IPAddressFamily {}", static_cast<uint32_t>(next_tag)));
 1238|     63|   }
 1239|       |
 1240|  1.05k|   BER_Decoder seq_dec = from.start_sequence();
 1241|       |
 1242|  1.05k|   std::vector<uint8_t> addr_family;
 1243|  1.05k|   seq_dec.decode(addr_family, ASN1_Type::OctetString);
 1244|  1.05k|   const size_t addr_family_length = addr_family.size();
 1245|       |
 1246|  1.05k|   if(addr_family_length != 2 && addr_family_length != 3) {
  ------------------
  |  Branch (1246:7): [True: 933, False: 122]
  |  Branch (1246:34): [True: 11, False: 922]
  ------------------
 1247|     11|      throw Decoding_Error("(S)AFI can only contain 2 or 3 bytes");
 1248|     11|   }
 1249|       |
 1250|  1.04k|   m_afi = (addr_family[0] << 8) | addr_family[1];
 1251|       |
 1252|  1.04k|   if(addr_family_length == 3) {
  ------------------
  |  Branch (1252:7): [True: 922, False: 122]
  ------------------
 1253|    922|      m_safi = addr_family[2];
 1254|    922|   }
 1255|       |
 1256|  1.04k|   if(m_afi == 1) {
  ------------------
  |  Branch (1256:7): [True: 429, False: 615]
  ------------------
 1257|    429|      IPAddressChoice<Version::IPv4> addr_choice;
 1258|    429|      seq_dec.decode(addr_choice);
 1259|    429|      m_ip_addr_choice = addr_choice;
 1260|    615|   } else if(m_afi == 2) {
  ------------------
  |  Branch (1260:14): [True: 474, False: 141]
  ------------------
 1261|    474|      IPAddressChoice<Version::IPv6> addr_choice;
 1262|    474|      seq_dec.decode(addr_choice);
 1263|    474|      m_ip_addr_choice = addr_choice;
 1264|    474|   } else {
 1265|    141|      throw Decoding_Error("Only AFI IPv4 and IPv6 are supported.");
 1266|    141|   }
 1267|       |
 1268|    903|   seq_dec.end_cons();
 1269|    903|}
_ZN5Botan14Cert_Extension8ASBlocks12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
 1813|  1.65k|void ASBlocks::decode_inner(const std::vector<uint8_t>& in) {
 1814|       |   /* RFC 3779 Section 3.2.3.1 - ASIdentifiers ::= SEQUENCE { ... } */
 1815|  1.65k|   BER_Decoder(in, BER_Decoder::Limits::DER()).decode(m_as_identifiers).verify_end();
 1816|  1.65k|}
_ZN5Botan14Cert_Extension8ASBlocks13ASIdentifiers11decode_fromERNS_11BER_DecoderE:
 1851|  1.65k|void ASBlocks::ASIdentifiers::decode_from(Botan::BER_Decoder& from) {
 1852|  1.65k|   const ASN1_Type next_tag = from.peek_next_object().type_tag();
 1853|  1.65k|   if(next_tag != ASN1_Type::Sequence) {
  ------------------
  |  Branch (1853:7): [True: 76, False: 1.57k]
  ------------------
 1854|     76|      throw Decoding_Error(fmt("Unexpected type for ASIdentifiers {}", static_cast<uint32_t>(next_tag)));
 1855|     76|   }
 1856|       |
 1857|  1.57k|   BER_Decoder seq_dec = from.start_sequence();
 1858|       |
 1859|  1.57k|   const BER_Object elem_obj = seq_dec.get_next_object();
 1860|  1.57k|   const uint32_t elem_type_tag = static_cast<uint32_t>(elem_obj.type_tag());
 1861|       |
 1862|       |   // asnum, potentially followed by an rdi
 1863|  1.57k|   if(elem_type_tag == 0) {
  ------------------
  |  Branch (1863:7): [True: 933, False: 643]
  ------------------
 1864|    933|      BER_Decoder as_obj_ber = BER_Decoder(elem_obj, seq_dec.limits());
 1865|    933|      ASIdentifierChoice asnum;
 1866|    933|      as_obj_ber.decode(asnum).verify_end();
 1867|    933|      m_asnum = asnum;
 1868|       |
 1869|    933|      const BER_Object rdi_obj = seq_dec.get_next_object();
 1870|    933|      const ASN1_Type rdi_type_tag = rdi_obj.type_tag();
 1871|    933|      if(static_cast<uint32_t>(rdi_type_tag) == 1) {
  ------------------
  |  Branch (1871:10): [True: 14, False: 919]
  ------------------
 1872|     14|         BER_Decoder rdi_obj_ber = BER_Decoder(rdi_obj, seq_dec.limits());
 1873|     14|         ASIdentifierChoice rdi;
 1874|     14|         rdi_obj_ber.decode(rdi).verify_end();
 1875|     14|         m_rdi = rdi;
 1876|    919|      } else if(rdi_type_tag != ASN1_Type::NoObject) {
  ------------------
  |  Branch (1876:17): [True: 79, False: 840]
  ------------------
 1877|     79|         throw Decoding_Error(fmt("Unexpected type for ASIdentifiers rdi: {}", static_cast<uint32_t>(rdi_type_tag)));
 1878|     79|      }
 1879|    933|   }
 1880|       |
 1881|       |   // just an rdi
 1882|  1.49k|   if(elem_type_tag == 1) {
  ------------------
  |  Branch (1882:7): [True: 532, False: 965]
  ------------------
 1883|    532|      BER_Decoder rdi_obj_ber = BER_Decoder(elem_obj, seq_dec.limits());
 1884|    532|      ASIdentifierChoice rdi;
 1885|    532|      rdi_obj_ber.decode(rdi).verify_end();
 1886|    532|      m_rdi = rdi;
 1887|    532|      const BER_Object end = seq_dec.get_next_object();
 1888|    532|      const ASN1_Type end_type_tag = end.type_tag();
 1889|    532|      if(end_type_tag != ASN1_Type::NoObject) {
  ------------------
  |  Branch (1889:10): [True: 26, False: 506]
  ------------------
 1890|     26|         throw Decoding_Error(
 1891|     26|            fmt("Unexpected element with type {} in ASIdentifiers", static_cast<uint32_t>(end_type_tag)));
 1892|     26|      }
 1893|    532|   }
 1894|       |
 1895|  1.47k|   seq_dec.end_cons();
 1896|       |
 1897|  1.47k|   if(!m_asnum.has_value() && !m_rdi.has_value()) {
  ------------------
  |  Branch (1897:7): [True: 21, False: 1.45k]
  |  Branch (1897:31): [True: 15, False: 6]
  ------------------
 1898|     15|      throw Decoding_Error("Invalid encoding for ASIdentifiers");
 1899|     15|   }
 1900|  1.47k|}
_ZN5Botan14Cert_Extension8ASBlocks18ASIdentifierChoice11decode_fromERNS_11BER_DecoderE:
 1914|  1.47k|void ASBlocks::ASIdentifierChoice::decode_from(Botan::BER_Decoder& from) {
 1915|  1.47k|   const ASN1_Type next_tag = from.peek_next_object().type_tag();
 1916|       |
 1917|  1.47k|   if(next_tag == ASN1_Type::Null) {
  ------------------
  |  Branch (1917:7): [True: 17, False: 1.46k]
  ------------------
 1918|     17|      from.decode_null();
 1919|     17|      m_as_ranges = std::nullopt;
 1920|  1.46k|   } else if(next_tag == ASN1_Type::Sequence) {
  ------------------
  |  Branch (1920:14): [True: 1.35k, False: 107]
  ------------------
 1921|  1.35k|      std::vector<ASIdOrRange> as_ranges;
 1922|  1.35k|      from.decode_list(as_ranges);
 1923|       |
 1924|  1.35k|      m_as_ranges = sort_and_merge_ranges<ASIdOrRange>(as_ranges);
 1925|  1.35k|   } else {
 1926|    107|      throw Decoding_Error(fmt("Unexpected type for ASIdentifierChoice {}", static_cast<uint32_t>(next_tag)));
 1927|    107|   }
 1928|  1.47k|}
_ZN5Botan14Cert_Extension8ASBlocks11ASIdOrRange11decode_fromERNS_11BER_DecoderE:
 1941|  5.47k|void ASBlocks::ASIdOrRange::decode_from(BER_Decoder& from) {
 1942|  5.47k|   const ASN1_Type next_tag = from.peek_next_object().type_tag();
 1943|       |
 1944|  5.47k|   size_t min = 0;
 1945|  5.47k|   size_t max = 0;
 1946|       |
 1947|  5.47k|   if(next_tag == ASN1_Type::Integer) {
  ------------------
  |  Branch (1947:7): [True: 5.15k, False: 316]
  ------------------
 1948|  5.15k|      from.decode(min);
 1949|  5.15k|      m_min = checked_cast_to<asnum_t>(min);
 1950|  5.15k|      m_max = m_min;
 1951|  5.15k|   } else if(next_tag == ASN1_Type::Sequence) {
  ------------------
  |  Branch (1951:14): [True: 134, False: 182]
  ------------------
 1952|    134|      from.start_sequence().decode(min).decode(max).end_cons();
 1953|    134|      m_min = checked_cast_to<asnum_t>(min);
 1954|    134|      m_max = checked_cast_to<asnum_t>(max);
 1955|    134|      if(m_min >= m_max) {
  ------------------
  |  Branch (1955:10): [True: 26, False: 108]
  ------------------
 1956|     26|         throw Decoding_Error("ASIdOrRange has min greater than max");
 1957|     26|      }
 1958|    182|   } else {
 1959|    182|      throw Decoding_Error(fmt("Unexpected type for ASIdOrRange {}", static_cast<uint32_t>(next_tag)));
 1960|    182|   }
 1961|  5.47k|}
_ZN5Botan14Cert_Extension21NoRevocationAvailable12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
 2063|      9|void NoRevocationAvailable::decode_inner(const std::vector<uint8_t>& buf) {
 2064|       |   // RFC 9608 Section 2, it's just a NULL
 2065|      9|   BER_Decoder(buf, BER_Decoder::Limits::DER()).decode_null().verify_end();
 2066|      9|}
_ZN5Botan14Cert_Extension17Unknown_Extension12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEE:
 2123|  13.7k|void Unknown_Extension::decode_inner(const std::vector<uint8_t>& bytes) {
 2124|       |   // Just treat as an opaque blob at this level
 2125|  13.7k|   m_bytes = bytes;
 2126|  13.7k|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_118extension_from_oidERKNS_3OIDE:
   38|  16.4k|std::unique_ptr<Certificate_Extension> extension_from_oid(const OID& oid) {
   39|  16.4k|   if(auto iso_ext = is_sub_element_of(oid, {2, 5, 29})) {
  ------------------
  |  Branch (39:12): [True: 8.23k, False: 8.23k]
  ------------------
   40|       |      // NOLINTNEXTLINE(*-switch-missing-default-case)
   41|  8.23k|      switch(*iso_ext) {
  ------------------
  |  Branch (41:14): [True: 7.01k, False: 1.22k]
  ------------------
   42|    632|         case 14:
  ------------------
  |  Branch (42:10): [True: 632, False: 7.60k]
  ------------------
   43|    632|            return make_extension<Cert_Extension::Subject_Key_ID>(oid);
   44|  1.17k|         case 15:
  ------------------
  |  Branch (44:10): [True: 1.17k, False: 7.06k]
  ------------------
   45|  1.17k|            return make_extension<Cert_Extension::Key_Usage>(oid);
   46|    879|         case 17:
  ------------------
  |  Branch (46:10): [True: 879, False: 7.35k]
  ------------------
   47|    879|            return make_extension<Cert_Extension::Subject_Alternative_Name>(oid);
   48|    485|         case 18:
  ------------------
  |  Branch (48:10): [True: 485, False: 7.75k]
  ------------------
   49|    485|            return make_extension<Cert_Extension::Issuer_Alternative_Name>(oid);
   50|    568|         case 19:
  ------------------
  |  Branch (50:10): [True: 568, False: 7.66k]
  ------------------
   51|    568|            return make_extension<Cert_Extension::Basic_Constraints>(oid);
   52|      3|         case 20:
  ------------------
  |  Branch (52:10): [True: 3, False: 8.23k]
  ------------------
   53|      3|            return make_extension<Cert_Extension::CRL_Number>(oid);
   54|      6|         case 21:
  ------------------
  |  Branch (54:10): [True: 6, False: 8.23k]
  ------------------
   55|      6|            return make_extension<Cert_Extension::CRL_ReasonCode>(oid);
   56|      6|         case 28:
  ------------------
  |  Branch (56:10): [True: 6, False: 8.23k]
  ------------------
   57|      6|            return make_extension<Cert_Extension::CRL_Issuing_Distribution_Point>(oid);
   58|    343|         case 30:
  ------------------
  |  Branch (58:10): [True: 343, False: 7.89k]
  ------------------
   59|    343|            return make_extension<Cert_Extension::Name_Constraints>(oid);
   60|  1.28k|         case 31:
  ------------------
  |  Branch (60:10): [True: 1.28k, False: 6.94k]
  ------------------
   61|  1.28k|            return make_extension<Cert_Extension::CRL_Distribution_Points>(oid);
   62|    345|         case 32:
  ------------------
  |  Branch (62:10): [True: 345, False: 7.89k]
  ------------------
   63|    345|            return make_extension<Cert_Extension::Certificate_Policies>(oid);
   64|    803|         case 35:
  ------------------
  |  Branch (64:10): [True: 803, False: 7.43k]
  ------------------
   65|    803|            return make_extension<Cert_Extension::Authority_Key_ID>(oid);
   66|    474|         case 37:
  ------------------
  |  Branch (66:10): [True: 474, False: 7.76k]
  ------------------
   67|    474|            return make_extension<Cert_Extension::Extended_Key_Usage>(oid);
   68|      9|         case 56:
  ------------------
  |  Branch (68:10): [True: 9, False: 8.22k]
  ------------------
   69|      9|            return make_extension<Cert_Extension::NoRevocationAvailable>(oid);
   70|  8.23k|      }
   71|  8.23k|   }
   72|       |
   73|  9.45k|   if(auto pkix_ext = is_sub_element_of(oid, {1, 3, 6, 1, 5, 5, 7, 1})) {
  ------------------
  |  Branch (73:12): [True: 3.40k, False: 6.05k]
  ------------------
   74|       |      // NOLINTNEXTLINE(*-switch-missing-default-case)
   75|  3.40k|      switch(*pkix_ext) {
  ------------------
  |  Branch (75:14): [True: 3.34k, False: 56]
  ------------------
   76|    513|         case 1:
  ------------------
  |  Branch (76:10): [True: 513, False: 2.89k]
  ------------------
   77|    513|            return make_extension<Cert_Extension::Authority_Information_Access>(oid);
   78|  1.02k|         case 7:
  ------------------
  |  Branch (78:10): [True: 1.02k, False: 2.37k]
  ------------------
   79|  1.02k|            return make_extension<Cert_Extension::IPAddressBlocks>(oid);
   80|  1.65k|         case 8:
  ------------------
  |  Branch (80:10): [True: 1.65k, False: 1.75k]
  ------------------
   81|  1.65k|            return make_extension<Cert_Extension::ASBlocks>(oid);
   82|    157|         case 26:
  ------------------
  |  Branch (82:10): [True: 157, False: 3.24k]
  ------------------
   83|    157|            return make_extension<Cert_Extension::TNAuthList>(oid);
   84|  3.40k|      }
   85|  3.40k|   }
   86|       |
   87|  6.10k|   if(oid == Cert_Extension::OCSP_NoCheck::static_oid()) {
  ------------------
  |  Branch (87:7): [True: 0, False: 6.10k]
  ------------------
   88|      0|      return make_extension<Cert_Extension::OCSP_NoCheck>(oid);
   89|      0|   }
   90|       |
   91|  6.10k|   return nullptr;  // unknown
   92|  6.10k|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension14Subject_Key_IDEEEDaRKNS_3OIDE:
   33|    632|auto make_extension([[maybe_unused]] const OID& oid) {
   34|    632|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|    632|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|    632|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 632]
  |  |  ------------------
  ------------------
   35|    632|   return std::make_unique<T>();
   36|    632|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension9Key_UsageEEEDaRKNS_3OIDE:
   33|  1.17k|auto make_extension([[maybe_unused]] const OID& oid) {
   34|  1.17k|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|  1.17k|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|  1.17k|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 1.17k]
  |  |  ------------------
  ------------------
   35|  1.17k|   return std::make_unique<T>();
   36|  1.17k|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension24Subject_Alternative_NameEEEDaRKNS_3OIDE:
   33|    879|auto make_extension([[maybe_unused]] const OID& oid) {
   34|    879|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|    879|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|    879|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 879]
  |  |  ------------------
  ------------------
   35|    879|   return std::make_unique<T>();
   36|    879|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension23Issuer_Alternative_NameEEEDaRKNS_3OIDE:
   33|    485|auto make_extension([[maybe_unused]] const OID& oid) {
   34|    485|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|    485|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|    485|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 485]
  |  |  ------------------
  ------------------
   35|    485|   return std::make_unique<T>();
   36|    485|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension17Basic_ConstraintsEEEDaRKNS_3OIDE:
   33|    568|auto make_extension([[maybe_unused]] const OID& oid) {
   34|    568|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|    568|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|    568|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 568]
  |  |  ------------------
  ------------------
   35|    568|   return std::make_unique<T>();
   36|    568|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension10CRL_NumberEEEDaRKNS_3OIDE:
   33|      3|auto make_extension([[maybe_unused]] const OID& oid) {
   34|      3|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|      3|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|      3|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 3]
  |  |  ------------------
  ------------------
   35|      3|   return std::make_unique<T>();
   36|      3|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension14CRL_ReasonCodeEEEDaRKNS_3OIDE:
   33|      6|auto make_extension([[maybe_unused]] const OID& oid) {
   34|      6|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|      6|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|      6|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 6]
  |  |  ------------------
  ------------------
   35|      6|   return std::make_unique<T>();
   36|      6|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension30CRL_Issuing_Distribution_PointEEEDaRKNS_3OIDE:
   33|      6|auto make_extension([[maybe_unused]] const OID& oid) {
   34|      6|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|      6|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|      6|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 6]
  |  |  ------------------
  ------------------
   35|      6|   return std::make_unique<T>();
   36|      6|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension16Name_ConstraintsEEEDaRKNS_3OIDE:
   33|    343|auto make_extension([[maybe_unused]] const OID& oid) {
   34|    343|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|    343|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|    343|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 343]
  |  |  ------------------
  ------------------
   35|    343|   return std::make_unique<T>();
   36|    343|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension23CRL_Distribution_PointsEEEDaRKNS_3OIDE:
   33|  1.28k|auto make_extension([[maybe_unused]] const OID& oid) {
   34|  1.28k|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|  1.28k|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|  1.28k|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 1.28k]
  |  |  ------------------
  ------------------
   35|  1.28k|   return std::make_unique<T>();
   36|  1.28k|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension20Certificate_PoliciesEEEDaRKNS_3OIDE:
   33|    345|auto make_extension([[maybe_unused]] const OID& oid) {
   34|    345|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|    345|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|    345|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 345]
  |  |  ------------------
  ------------------
   35|    345|   return std::make_unique<T>();
   36|    345|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension16Authority_Key_IDEEEDaRKNS_3OIDE:
   33|    803|auto make_extension([[maybe_unused]] const OID& oid) {
   34|    803|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|    803|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|    803|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 803]
  |  |  ------------------
  ------------------
   35|    803|   return std::make_unique<T>();
   36|    803|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension18Extended_Key_UsageEEEDaRKNS_3OIDE:
   33|    474|auto make_extension([[maybe_unused]] const OID& oid) {
   34|    474|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|    474|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|    474|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 474]
  |  |  ------------------
  ------------------
   35|    474|   return std::make_unique<T>();
   36|    474|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension21NoRevocationAvailableEEEDaRKNS_3OIDE:
   33|      9|auto make_extension([[maybe_unused]] const OID& oid) {
   34|      9|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|      9|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|      9|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 9]
  |  |  ------------------
  ------------------
   35|      9|   return std::make_unique<T>();
   36|      9|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension28Authority_Information_AccessEEEDaRKNS_3OIDE:
   33|    513|auto make_extension([[maybe_unused]] const OID& oid) {
   34|    513|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|    513|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|    513|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 513]
  |  |  ------------------
  ------------------
   35|    513|   return std::make_unique<T>();
   36|    513|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension15IPAddressBlocksEEEDaRKNS_3OIDE:
   33|  1.02k|auto make_extension([[maybe_unused]] const OID& oid) {
   34|  1.02k|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|  1.02k|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|  1.02k|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 1.02k]
  |  |  ------------------
  ------------------
   35|  1.02k|   return std::make_unique<T>();
   36|  1.02k|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension8ASBlocksEEEDaRKNS_3OIDE:
   33|  1.65k|auto make_extension([[maybe_unused]] const OID& oid) {
   34|  1.65k|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|  1.65k|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|  1.65k|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 1.65k]
  |  |  ------------------
  ------------------
   35|  1.65k|   return std::make_unique<T>();
   36|  1.65k|}
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_114make_extensionITkNSt3__112derived_fromINS_21Certificate_ExtensionEEENS_14Cert_Extension10TNAuthListEEEDaRKNS_3OIDE:
   33|    157|auto make_extension([[maybe_unused]] const OID& oid) {
   34|    157|   BOTAN_DEBUG_ASSERT(oid == T::static_oid());
  ------------------
  |  |  130|    157|      do { /* NOLINT(*-avoid-do-while) */ \
  |  |  131|    157|      } while(0)
  |  |  ------------------
  |  |  |  Branch (131:15): [Folded, False: 157]
  |  |  ------------------
  ------------------
   35|    157|   return std::make_unique<T>();
   36|    157|}
x509_ext.cpp:_ZZN5Botan14Cert_Extension9Key_Usage12decode_innerERKNSt3__16vectorIhNS2_9allocatorIhEEEEENK3$_0clEv:
  515|    838|   const uint16_t usage = [&bits]() -> uint16_t {
  516|    838|      switch(bits.size()) {
  517|      0|         case 0:
  ------------------
  |  Branch (517:10): [True: 0, False: 838]
  ------------------
  518|      0|            return 0;
  519|    802|         case 1:
  ------------------
  |  Branch (519:10): [True: 802, False: 36]
  ------------------
  520|    802|            return make_uint16(bits[0], 0);
  521|     36|         case 2:
  ------------------
  |  Branch (521:10): [True: 36, False: 802]
  ------------------
  522|     36|            return make_uint16(bits[0], bits[1]);
  523|      0|         default:
  ------------------
  |  Branch (523:10): [True: 0, False: 838]
  ------------------
  524|      0|            throw Decoding_Error("Invalid KeyUsage bitstring encoding");
  525|    838|      }
  526|    838|   }();
x509_ext.cpp:_ZN5Botan14Cert_Extension12_GLOBAL__N_118Policy_Information11decode_fromERNS_11BER_DecoderE:
  783|    400|      void decode_from(BER_Decoder& codec) override {
  784|    400|         codec.start_sequence().decode(m_oid).discard_remaining().end_cons();
  785|    400|      }
x509_ext.cpp:_ZNK5Botan14Cert_Extension12_GLOBAL__N_118Policy_Information3oidEv:
  779|    167|      const OID& oid() const { return m_oid; }
x509_ext.cpp:_ZN5Botan12_GLOBAL__N_125is_valid_telephone_numberERKNS_11ASN1_StringE:
   94|     87|bool is_valid_telephone_number(const ASN1_String& tn) {
   95|       |   //TelephoneNumber ::= IA5String (SIZE (1..15)) (FROM ("0123456789#*"))
   96|     87|   const std::string valid_tn_chars("0123456789#*");
   97|       |
   98|     87|   if(tn.empty() || (tn.size() > 15)) {
  ------------------
  |  Branch (98:7): [True: 8, False: 79]
  |  Branch (98:21): [True: 4, False: 75]
  ------------------
   99|     12|      return false;
  100|     12|   }
  101|       |
  102|     75|   if(tn.value().find_first_not_of(valid_tn_chars) != std::string::npos) {
  ------------------
  |  Branch (102:7): [True: 10, False: 65]
  ------------------
  103|     10|      return false;
  104|     10|   }
  105|       |
  106|     65|   return true;
  107|     75|}
x509_ext.cpp:_ZN5Botan14Cert_Extension12_GLOBAL__N_118Policy_InformationC2Ev:
  775|    400|      Policy_Information() = default;
x509_ext.cpp:_ZN5Botan14Cert_Extension12_GLOBAL__N_121sort_and_merge_rangesINS0_15IPAddressBlocks16IPAddressOrRangeILNS3_7VersionE4EEEEENSt3__18optionalINS7_6vectorIT_NS7_9allocatorISA_EEEEEENS8_INS7_4spanIKSA_Lm18446744073709551615EEEEE:
 1367|    217|std::optional<std::vector<T>> sort_and_merge_ranges(std::optional<std::span<const T>> ranges) {
 1368|       |   // Sort and merge overlapping/adjacent IPAddressOrRange or ASIdOrRange objects.
 1369|       |   // cf. https://www.rfc-editor.org/rfc/rfc3779.html#section-2.2.3.6 and https://www.rfc-editor.org/rfc/rfc3779.html#section-3.2.3.4
 1370|       |   // This implementation uses only min-max ranges internally, so sorting by the prefix length is not necessary / impossible here.
 1371|       |
 1372|    217|   if(!ranges.has_value()) {
  ------------------
  |  Branch (1372:7): [True: 0, False: 217]
  ------------------
 1373|      0|      return std::nullopt;
 1374|      0|   }
 1375|       |
 1376|    217|   std::vector<T> sorted(ranges.value().begin(), ranges.value().end());
 1377|       |
 1378|    217|   if(sorted.empty()) {
  ------------------
  |  Branch (1378:7): [True: 4, False: 213]
  ------------------
 1379|      4|      return sorted;
 1380|      4|   }
 1381|       |
 1382|       |   // sort by the min value
 1383|    213|   std::sort(sorted.begin(), sorted.end(), [](T& a, T& b) { return a.min() < b.min(); });
 1384|       |
 1385|       |   // Single-pass merge: extend the last merged range or start a new one
 1386|    213|   std::vector<T> merged;
 1387|    213|   merged.reserve(sorted.size());
 1388|    213|   merged.push_back(sorted[0]);
 1389|       |
 1390|    983|   for(size_t i = 1; i < sorted.size(); ++i) {
  ------------------
  |  Branch (1390:22): [True: 770, False: 213]
  ------------------
 1391|    770|      auto& back = merged.back();
 1392|       |      // they either overlap or are adjacent
 1393|    770|      if(sorted[i].min() <= back.max() || sorted[i].min() == (back.max() + 1)) {
  ------------------
  |  Branch (1393:10): [True: 295, False: 475]
  |  Branch (1393:10): [True: 308, False: 462]
  |  Branch (1393:43): [True: 13, False: 462]
  ------------------
 1394|    308|         back = T(back.min(), std::max(back.max(), sorted[i].max()));
 1395|    462|      } else {
 1396|    462|         merged.push_back(sorted[i]);
 1397|    462|      }
 1398|    770|   }
 1399|       |
 1400|    213|   return merged;
 1401|    217|}
x509_ext.cpp:_ZZN5Botan14Cert_Extension12_GLOBAL__N_121sort_and_merge_rangesINS0_15IPAddressBlocks16IPAddressOrRangeILNS3_7VersionE4EEEEENSt3__18optionalINS7_6vectorIT_NS7_9allocatorISA_EEEEEENS8_INS7_4spanIKSA_Lm18446744073709551615EEEEEENKUlRS6_SJ_E_clESJ_SJ_:
 1383|  1.45k|   std::sort(sorted.begin(), sorted.end(), [](T& a, T& b) { return a.min() < b.min(); });
x509_ext.cpp:_ZN5Botan14Cert_Extension12_GLOBAL__N_121sort_and_merge_rangesINS0_15IPAddressBlocks16IPAddressOrRangeILNS3_7VersionE16EEEEENSt3__18optionalINS7_6vectorIT_NS7_9allocatorISA_EEEEEENS8_INS7_4spanIKSA_Lm18446744073709551615EEEEE:
 1367|    244|std::optional<std::vector<T>> sort_and_merge_ranges(std::optional<std::span<const T>> ranges) {
 1368|       |   // Sort and merge overlapping/adjacent IPAddressOrRange or ASIdOrRange objects.
 1369|       |   // cf. https://www.rfc-editor.org/rfc/rfc3779.html#section-2.2.3.6 and https://www.rfc-editor.org/rfc/rfc3779.html#section-3.2.3.4
 1370|       |   // This implementation uses only min-max ranges internally, so sorting by the prefix length is not necessary / impossible here.
 1371|       |
 1372|    244|   if(!ranges.has_value()) {
  ------------------
  |  Branch (1372:7): [True: 0, False: 244]
  ------------------
 1373|      0|      return std::nullopt;
 1374|      0|   }
 1375|       |
 1376|    244|   std::vector<T> sorted(ranges.value().begin(), ranges.value().end());
 1377|       |
 1378|    244|   if(sorted.empty()) {
  ------------------
  |  Branch (1378:7): [True: 7, False: 237]
  ------------------
 1379|      7|      return sorted;
 1380|      7|   }
 1381|       |
 1382|       |   // sort by the min value
 1383|    237|   std::sort(sorted.begin(), sorted.end(), [](T& a, T& b) { return a.min() < b.min(); });
 1384|       |
 1385|       |   // Single-pass merge: extend the last merged range or start a new one
 1386|    237|   std::vector<T> merged;
 1387|    237|   merged.reserve(sorted.size());
 1388|    237|   merged.push_back(sorted[0]);
 1389|       |
 1390|  1.11k|   for(size_t i = 1; i < sorted.size(); ++i) {
  ------------------
  |  Branch (1390:22): [True: 880, False: 237]
  ------------------
 1391|    880|      auto& back = merged.back();
 1392|       |      // they either overlap or are adjacent
 1393|    880|      if(sorted[i].min() <= back.max() || sorted[i].min() == (back.max() + 1)) {
  ------------------
  |  Branch (1393:10): [True: 407, False: 473]
  |  Branch (1393:10): [True: 413, False: 467]
  |  Branch (1393:43): [True: 6, False: 467]
  ------------------
 1394|    413|         back = T(back.min(), std::max(back.max(), sorted[i].max()));
 1395|    467|      } else {
 1396|    467|         merged.push_back(sorted[i]);
 1397|    467|      }
 1398|    880|   }
 1399|       |
 1400|    237|   return merged;
 1401|    244|}
x509_ext.cpp:_ZZN5Botan14Cert_Extension12_GLOBAL__N_121sort_and_merge_rangesINS0_15IPAddressBlocks16IPAddressOrRangeILNS3_7VersionE16EEEEENSt3__18optionalINS7_6vectorIT_NS7_9allocatorISA_EEEEEENS8_INS7_4spanIKSA_Lm18446744073709551615EEEEEENKUlRS6_SJ_E_clESJ_SJ_:
 1383|  1.61k|   std::sort(sorted.begin(), sorted.end(), [](T& a, T& b) { return a.min() < b.min(); });
x509_ext.cpp:_ZN5Botan14Cert_Extension12_GLOBAL__N_121sort_and_merge_rangesINS0_8ASBlocks11ASIdOrRangeEEENSt3__18optionalINS5_6vectorIT_NS5_9allocatorIS8_EEEEEENS6_INS5_4spanIKS8_Lm18446744073709551615EEEEE:
 1367|  1.06k|std::optional<std::vector<T>> sort_and_merge_ranges(std::optional<std::span<const T>> ranges) {
 1368|       |   // Sort and merge overlapping/adjacent IPAddressOrRange or ASIdOrRange objects.
 1369|       |   // cf. https://www.rfc-editor.org/rfc/rfc3779.html#section-2.2.3.6 and https://www.rfc-editor.org/rfc/rfc3779.html#section-3.2.3.4
 1370|       |   // This implementation uses only min-max ranges internally, so sorting by the prefix length is not necessary / impossible here.
 1371|       |
 1372|  1.06k|   if(!ranges.has_value()) {
  ------------------
  |  Branch (1372:7): [True: 0, False: 1.06k]
  ------------------
 1373|      0|      return std::nullopt;
 1374|      0|   }
 1375|       |
 1376|  1.06k|   std::vector<T> sorted(ranges.value().begin(), ranges.value().end());
 1377|       |
 1378|  1.06k|   if(sorted.empty()) {
  ------------------
  |  Branch (1378:7): [True: 33, False: 1.03k]
  ------------------
 1379|     33|      return sorted;
 1380|     33|   }
 1381|       |
 1382|       |   // sort by the min value
 1383|  1.03k|   std::sort(sorted.begin(), sorted.end(), [](T& a, T& b) { return a.min() < b.min(); });
 1384|       |
 1385|       |   // Single-pass merge: extend the last merged range or start a new one
 1386|  1.03k|   std::vector<T> merged;
 1387|  1.03k|   merged.reserve(sorted.size());
 1388|  1.03k|   merged.push_back(sorted[0]);
 1389|       |
 1390|  4.52k|   for(size_t i = 1; i < sorted.size(); ++i) {
  ------------------
  |  Branch (1390:22): [True: 3.49k, False: 1.03k]
  ------------------
 1391|  3.49k|      auto& back = merged.back();
 1392|       |      // they either overlap or are adjacent
 1393|  3.49k|      if(sorted[i].min() <= back.max() || sorted[i].min() == (back.max() + 1)) {
  ------------------
  |  Branch (1393:10): [True: 240, False: 3.25k]
  |  Branch (1393:43): [True: 58, False: 3.19k]
  ------------------
 1394|    298|         back = T(back.min(), std::max(back.max(), sorted[i].max()));
 1395|  3.19k|      } else {
 1396|  3.19k|         merged.push_back(sorted[i]);
 1397|  3.19k|      }
 1398|  3.49k|   }
 1399|       |
 1400|  1.03k|   return merged;
 1401|  1.06k|}
x509_ext.cpp:_ZZN5Botan14Cert_Extension12_GLOBAL__N_121sort_and_merge_rangesINS0_8ASBlocks11ASIdOrRangeEEENSt3__18optionalINS5_6vectorIT_NS5_9allocatorIS8_EEEEEENS6_INS5_4spanIKS8_Lm18446744073709551615EEEEEENKUlRS4_SH_E_clESH_SH_:
 1383|  6.62k|   std::sort(sorted.begin(), sorted.end(), [](T& a, T& b) { return a.min() < b.min(); });

_ZN5Botan11X509_Object9load_dataERNS_10DataSourceE:
   24|  5.37k|void X509_Object::load_data(DataSource& in) {
   25|  5.37k|   try {
   26|  5.37k|      if(ASN1::maybe_BER(in) && !PEM_Code::matches(in)) {
  ------------------
  |  Branch (26:10): [True: 5.05k, False: 319]
  |  Branch (26:33): [True: 5.04k, False: 11]
  ------------------
   27|  5.04k|         BER_Decoder dec(in, BER_Decoder::Limits::DER());
   28|  5.04k|         decode_from(dec);
   29|       |         // Call to verify_end omitted here since we have to sometimes decode
   30|       |         // multiple certificates encoded sequentially in a DataSource
   31|  5.04k|      } else {
   32|    330|         std::string got_label;
   33|    330|         DataSource_Memory ber(PEM_Code::decode(in, got_label));
   34|       |
   35|    330|         if(got_label != PEM_label()) {
  ------------------
  |  Branch (35:13): [True: 89, False: 241]
  ------------------
   36|     89|            bool is_alternate = false;
   37|     89|            for(const std::string_view alt_label : alternate_PEM_labels()) {
  ------------------
  |  Branch (37:50): [True: 89, False: 89]
  ------------------
   38|     89|               if(got_label == alt_label) {
  ------------------
  |  Branch (38:19): [True: 0, False: 89]
  ------------------
   39|      0|                  is_alternate = true;
   40|      0|                  break;
   41|      0|               }
   42|     89|            }
   43|       |
   44|     89|            if(!is_alternate) {
  ------------------
  |  Branch (44:16): [True: 89, False: 0]
  ------------------
   45|     89|               throw Decoding_Error("Unexpected PEM label for " + PEM_label() + " of " + got_label);
   46|     89|            }
   47|     89|         }
   48|       |
   49|    241|         BER_Decoder dec(ber, BER_Decoder::Limits::DER());
   50|    241|         decode_from(dec);
   51|       |         // Call to verify_end omitted here since we have to sometimes decode
   52|       |         // multiple certificates encoded sequentially in a DataSource
   53|    241|      }
   54|  5.37k|   } catch(Decoding_Error& e) {
   55|  4.69k|      throw Decoding_Error(PEM_label() + " decoding", e);
   56|  4.69k|   }
   57|  5.37k|}
_ZNK5Botan11X509_Object9signatureEv:
   59|    614|const std::vector<uint8_t>& X509_Object::signature() const {
   60|    614|   if(!m_signed_data) {
  ------------------
  |  Branch (60:7): [True: 0, False: 614]
  ------------------
   61|      0|      throw Invalid_State("X509_Object uninitialized");
   62|      0|   }
   63|    614|   return m_signed_data->m_sig;
   64|    614|}
_ZNK5Botan11X509_Object11signed_bodyEv:
   66|  4.96k|const std::vector<uint8_t>& X509_Object::signed_body() const {
   67|  4.96k|   if(!m_signed_data) {
  ------------------
  |  Branch (67:7): [True: 0, False: 4.96k]
  ------------------
   68|      0|      throw Invalid_State("X509_Object uninitialized");
   69|      0|   }
   70|  4.96k|   return m_signed_data->m_tbs_bits;
   71|  4.96k|}
_ZNK5Botan11X509_Object19signature_algorithmEv:
   73|  4.30k|const AlgorithmIdentifier& X509_Object::signature_algorithm() const {
   74|  4.30k|   if(!m_signed_data) {
  ------------------
  |  Branch (74:7): [True: 0, False: 4.30k]
  ------------------
   75|      0|      throw Invalid_State("X509_Object uninitialized");
   76|      0|   }
   77|  4.30k|   return m_signed_data->m_sig_algo;
   78|  4.30k|}
_ZNK5Botan11X509_Object11encode_intoERNS_11DER_EncoderE:
   80|    614|void X509_Object::encode_into(DER_Encoder& to) const {
   81|    614|   to.start_sequence()
   82|    614|      .start_sequence()
   83|    614|      .raw_bytes(signed_body())
   84|    614|      .end_cons()
   85|    614|      .encode(signature_algorithm())
   86|    614|      .encode(signature(), ASN1_Type::BitString)
   87|    614|      .end_cons();
   88|    614|}
_ZN5Botan11X509_Object11decode_fromERNS_11BER_DecoderE:
   93|  5.05k|void X509_Object::decode_from(BER_Decoder& from) {
   94|  5.05k|   auto data = std::make_shared<Signed_Data>();
   95|       |
   96|  5.05k|   from.start_sequence()
   97|  5.05k|      .start_sequence()
   98|  5.05k|      .raw_bytes(data->m_tbs_bits)
   99|  5.05k|      .end_cons()
  100|  5.05k|      .decode(data->m_sig_algo)
  101|  5.05k|      .decode(data->m_sig, ASN1_Type::BitString)
  102|  5.05k|      .end_cons();
  103|       |
  104|  5.05k|   m_signed_data = std::move(data);
  105|  5.05k|   force_decode();
  106|  5.05k|}

_ZN5Botan16X509_CertificateD2Ev:
   83|    614|X509_Certificate::~X509_Certificate() = default;
_ZNK5Botan16X509_Certificate9PEM_labelEv:
   85|  4.88k|std::string X509_Certificate::PEM_label() const {
   86|  4.88k|   return "CERTIFICATE";
   87|  4.88k|}
_ZNK5Botan16X509_Certificate20alternate_PEM_labelsEv:
   89|     89|std::vector<std::string> X509_Certificate::alternate_PEM_labels() const {
   90|     89|   return {"X509 CERTIFICATE"};
   91|     89|}
_ZN5Botan16X509_CertificateC2ERNS_10DataSourceE:
   93|  5.37k|X509_Certificate::X509_Certificate(DataSource& src) {
   94|  5.37k|   load_data(src);
   95|  5.37k|}
_ZN5Botan16X509_Certificate12force_decodeEv:
  356|  4.35k|void X509_Certificate::force_decode() {
  357|  4.35k|   m_data.reset();
  358|  4.35k|   m_data = parse_x509_cert_body(*this);
  359|  4.35k|}
x509cert.cpp:_ZN5Botan12_GLOBAL__N_120parse_x509_cert_bodyERKNS_11X509_ObjectE:
  111|  4.35k|std::unique_ptr<X509_Certificate_Data> parse_x509_cert_body(const X509_Object& obj) {
  112|  4.35k|   auto data = std::make_unique<X509_Certificate_Data>();
  113|       |
  114|  4.35k|   BigInt serial_bn;
  115|  4.35k|   BER_Object public_key;
  116|  4.35k|   BER_Object v3_exts_data;
  117|       |
  118|  4.35k|   BER_Decoder(obj.signed_body(), BER_Decoder::Limits::DER())
  119|  4.35k|      .decode_optional(data->m_version, ASN1_Type(0), ASN1_Class::Constructed | ASN1_Class::ContextSpecific)
  120|  4.35k|      .decode(serial_bn)
  121|  4.35k|      .decode(data->m_sig_algo_inner)
  122|  4.35k|      .decode(data->m_issuer_dn)
  123|  4.35k|      .start_sequence()
  124|  4.35k|      .decode(data->m_not_before)
  125|  4.35k|      .decode(data->m_not_after)
  126|  4.35k|      .end_cons()
  127|  4.35k|      .decode(data->m_subject_dn)
  128|  4.35k|      .get_next(public_key)
  129|  4.35k|      .decode_optional_string(data->m_v2_issuer_key_id, ASN1_Type::BitString, 1)
  130|  4.35k|      .decode_optional_string(data->m_v2_subject_key_id, ASN1_Type::BitString, 2)
  131|  4.35k|      .get_next(v3_exts_data)
  132|  4.35k|      .verify_end("TBSCertificate has extra data after extensions block");
  133|       |
  134|  4.35k|   if(data->m_version > 2) {
  ------------------
  |  Branch (134:7): [True: 3, False: 4.35k]
  ------------------
  135|      3|      throw Decoding_Error("Unknown X.509 cert version " + std::to_string(data->m_version));
  136|      3|   }
  137|  4.35k|   if(obj.signature_algorithm() != data->m_sig_algo_inner) {
  ------------------
  |  Branch (137:7): [True: 92, False: 4.26k]
  ------------------
  138|     92|      throw Decoding_Error("X.509 Certificate had differing algorithm identifiers in inner and outer ID fields");
  139|     92|   }
  140|       |
  141|  4.26k|   public_key.assert_is_a(ASN1_Type::Sequence, ASN1_Class::Constructed, "X.509 certificate public key");
  142|       |
  143|       |   // for general sanity convert wire version (0 based) to standards version (v1 .. v3)
  144|  4.26k|   data->m_version += 1;
  145|       |
  146|  4.26k|   data->m_serial = serial_bn.serialize();
  147|       |   // crude method to save the serial's sign; will get lost during decoding, otherwise
  148|  4.26k|   data->m_serial_negative = serial_bn.signum() < 0;
  149|  4.26k|   data->m_subject_dn_bits = ASN1::put_in_sequence(data->m_subject_dn.get_bits());
  150|  4.26k|   data->m_issuer_dn_bits = ASN1::put_in_sequence(data->m_issuer_dn.get_bits());
  151|       |
  152|  4.26k|   data->m_subject_public_key_bits.assign(public_key.bits(), public_key.bits() + public_key.length());
  153|       |
  154|  4.26k|   data->m_subject_public_key_bits_seq = ASN1::put_in_sequence(data->m_subject_public_key_bits);
  155|       |
  156|  4.26k|   BER_Decoder(data->m_subject_public_key_bits, BER_Decoder::Limits::DER())
  157|  4.26k|      .decode(data->m_subject_public_key_algid)
  158|  4.26k|      .decode(data->m_subject_public_key_bitstring, ASN1_Type::BitString)
  159|  4.26k|      .verify_end();
  160|       |
  161|  4.26k|   if(v3_exts_data.is_a(3, ASN1_Class::Constructed | ASN1_Class::ContextSpecific)) {
  ------------------
  |  Branch (161:7): [True: 3.43k, False: 827]
  ------------------
  162|       |      // Path validation will reject a v1/v2 cert with v3 extensions
  163|  3.43k|      BER_Decoder cert_extensions(v3_exts_data, BER_Decoder::Limits::DER());
  164|  3.43k|      data->m_v3_extensions.decode_from(cert_extensions, Extension_Context::Certificate);
  165|  3.43k|      cert_extensions.verify_end();
  166|  3.43k|   } else if(v3_exts_data.is_set()) {
  ------------------
  |  Branch (166:14): [True: 47, False: 780]
  ------------------
  167|     47|      throw BER_Bad_Tag("Unknown tag in X.509 cert", v3_exts_data.tagging());
  168|     47|   }
  169|       |
  170|       |   // Now cache some fields from the extensions
  171|  4.21k|   if(const auto* ext = data->m_v3_extensions.get_extension_object_as<Cert_Extension::Key_Usage>()) {
  ------------------
  |  Branch (171:19): [True: 292, False: 3.92k]
  ------------------
  172|    292|      data->m_key_constraints = ext->get_constraints();
  173|       |      /*
  174|       |      RFC 5280: When the keyUsage extension appears in a certificate,
  175|       |      at least one of the bits MUST be set to 1.
  176|       |      */
  177|    292|      if(data->m_key_constraints.empty()) {
  ------------------
  |  Branch (177:10): [True: 0, False: 292]
  ------------------
  178|      0|         throw Decoding_Error("Certificate has invalid encoding for KeyUsage");
  179|      0|      }
  180|    292|   }
  181|       |
  182|  4.21k|   if(const auto* ext = data->m_v3_extensions.get_extension_object_as<Cert_Extension::Subject_Key_ID>()) {
  ------------------
  |  Branch (182:19): [True: 141, False: 4.07k]
  ------------------
  183|    141|      data->m_subject_key_id = ext->get_key_id();
  184|    141|   }
  185|       |
  186|  4.21k|   if(const auto* ext = data->m_v3_extensions.get_extension_object_as<Cert_Extension::Authority_Key_ID>()) {
  ------------------
  |  Branch (186:19): [True: 178, False: 4.03k]
  ------------------
  187|    178|      data->m_authority_key_id = ext->get_key_id();
  188|    178|   }
  189|       |
  190|  4.21k|   if(const auto* ext = data->m_v3_extensions.get_extension_object_as<Cert_Extension::Name_Constraints>()) {
  ------------------
  |  Branch (190:19): [True: 16, False: 4.19k]
  ------------------
  191|     16|      data->m_name_constraints = ext->get_name_constraints();
  192|     16|   }
  193|       |
  194|  4.21k|   if(const auto* ext = data->m_v3_extensions.get_extension_object_as<Cert_Extension::Extended_Key_Usage>()) {
  ------------------
  |  Branch (194:19): [True: 165, False: 4.04k]
  ------------------
  195|    165|      data->m_extended_key_usage = ext->object_identifiers();
  196|       |      /*
  197|       |      RFC 5280 section 4.2.1.12
  198|       |
  199|       |      "This extension indicates one or more purposes ..."
  200|       |
  201|       |      "If the extension is present, then the certificate MUST only be
  202|       |      used for one of the purposes indicated."
  203|       |
  204|       |      Thus we reject an EKU extension which is empty, since this indicates
  205|       |      the certificate cannot be used for any purpose.
  206|       |      */
  207|    165|      if(data->m_extended_key_usage.empty()) {
  ------------------
  |  Branch (207:10): [True: 0, False: 165]
  ------------------
  208|      0|         throw Decoding_Error("Certificate has invalid empty EKU extension");
  209|      0|      }
  210|    165|   }
  211|       |
  212|  4.21k|   if(const auto* ext = data->m_v3_extensions.get_extension_object_as<Cert_Extension::Basic_Constraints>()) {
  ------------------
  |  Branch (212:19): [True: 182, False: 4.03k]
  ------------------
  213|       |      /*
  214|       |      * RFC 5280 4.2.1.9 requires that conforming CAs "MUST mark the
  215|       |      * extension [basicConstraints] as critical in such certificates"
  216|       |      * but places no such requirement on validators.
  217|       |      */
  218|    182|      if(ext->is_ca() == true) {
  ------------------
  |  Branch (218:10): [True: 101, False: 81]
  ------------------
  219|       |         /*
  220|       |         * RFC 5280 section 4.2.1.3 requires that CAs include KeyUsage in all
  221|       |         * intermediate CA certificates they issue. Currently we accept it being
  222|       |         * missing, as do most other implementations. But it may be worth
  223|       |         * removing this entirely, or alternately adding a warning level
  224|       |         * validation failure for it.
  225|       |         */
  226|    101|         const bool allowed_by_ku =
  227|    101|            data->m_key_constraints.includes(Key_Constraints::KeyCertSign) || data->m_key_constraints.empty();
  ------------------
  |  Branch (227:13): [True: 50, False: 51]
  |  Branch (227:79): [True: 29, False: 22]
  ------------------
  228|       |
  229|       |         /*
  230|       |         * If the extended key usages are set then we must restrict the usage in
  231|       |         * accordance with it as well.
  232|       |         *
  233|       |         * RFC 5280 does not define any extended key usages compatible with certificate
  234|       |         * signing, but some CAs use serverAuth, clientAuth, OCSPSigning, or AnyExtendedKeyUsage
  235|       |         * for this purpose, even though clearly all of these (besides AEKU) are invalid.
  236|       |         * This check at least allows excluding a certificate which is set for only eg
  237|       |         * timestamping or code signing, and that seems about the best we can possibly enforce.
  238|       |         * OpenSSL, BoringSSL, and Go all completely ignore EKUs in determining ability to
  239|       |         * issue certs.
  240|       |         */
  241|    101|         const bool allowed_by_ext_ku = [](const std::vector<OID>& ext_ku) -> bool {
  242|    101|            if(ext_ku.empty()) {
  243|    101|               return true;
  244|    101|            }
  245|       |
  246|    101|            const auto server_auth = OID::from_name("PKIX.ServerAuth");
  247|    101|            const auto client_auth = OID::from_name("PKIX.ClientAuth");
  248|    101|            const auto ocsp_sign = OID::from_name("PKIX.OCSPSigning");
  249|    101|            const auto any_eku = OID::from_name("X509v3.AnyExtendedKeyUsage");
  250|       |
  251|    101|            for(const auto& oid : ext_ku) {
  252|    101|               if(oid == any_eku || oid == server_auth || oid == client_auth || oid == ocsp_sign) {
  253|    101|                  return true;
  254|    101|               }
  255|    101|            }
  256|       |
  257|    101|            return false;
  258|    101|         }(data->m_extended_key_usage);
  259|       |
  260|    101|         if(allowed_by_ku && allowed_by_ext_ku) {
  ------------------
  |  Branch (260:13): [True: 79, False: 22]
  |  Branch (260:30): [True: 54, False: 25]
  ------------------
  261|     54|            data->m_is_ca_certificate = true;
  262|     54|            data->m_path_len_constraint = ext->path_length_constraint();
  263|     54|         }
  264|    101|      }
  265|    182|   }
  266|       |
  267|  4.21k|   if(const auto* ext = data->m_v3_extensions.get_extension_object_as<Cert_Extension::Issuer_Alternative_Name>()) {
  ------------------
  |  Branch (267:19): [True: 47, False: 4.16k]
  ------------------
  268|     47|      data->m_issuer_alt_name = ext->get_alt_name();
  269|     47|   }
  270|       |
  271|  4.21k|   if(const auto* ext = data->m_v3_extensions.get_extension_object_as<Cert_Extension::Subject_Alternative_Name>()) {
  ------------------
  |  Branch (271:19): [True: 59, False: 4.15k]
  ------------------
  272|     59|      data->m_subject_alt_name = ext->get_alt_name();
  273|     59|   }
  274|       |
  275|       |   // This will be set even if SAN parsing failed entirely eg due to a decoding error
  276|       |   // or if the SAN is empty. This is used to guard against using the CN for domain
  277|       |   // name checking.
  278|  4.21k|   const auto san_oid = OID::from_string("X509v3.SubjectAlternativeName");
  279|  4.21k|   data->m_subject_alt_name_exists = data->m_v3_extensions.extension_set(san_oid);
  280|       |
  281|  4.21k|   if(const auto* ext = data->m_v3_extensions.get_extension_object_as<Cert_Extension::Certificate_Policies>()) {
  ------------------
  |  Branch (281:19): [True: 39, False: 4.17k]
  ------------------
  282|     39|      data->m_cert_policies = ext->get_policy_oids();
  283|     39|   }
  284|       |
  285|  4.21k|   if(const auto* ext = data->m_v3_extensions.get_extension_object_as<Cert_Extension::Authority_Information_Access>()) {
  ------------------
  |  Branch (285:19): [True: 92, False: 4.12k]
  ------------------
  286|     92|      data->m_ocsp_responders = ext->ocsp_responder_uris();
  287|     92|      data->m_ca_issuers = ext->ca_issuer_uris();
  288|     92|   }
  289|       |
  290|  4.21k|   if(const auto* ext = data->m_v3_extensions.get_extension_object_as<Cert_Extension::CRL_Distribution_Points>()) {
  ------------------
  |  Branch (290:19): [True: 19, False: 4.19k]
  ------------------
  291|     19|      data->m_crl_distribution_points = ext->crl_distribution_point_uris();
  292|     19|   }
  293|       |
  294|       |   /*
  295|       |   Determine if this certificate appears to be self-issued (subject == issuer).
  296|       |   This is only a heuristic used for path building so it's ok it is not precise.
  297|       |   The self-signature is verified during path validation.
  298|       |   */
  299|  4.21k|   if(data->m_subject_dn == data->m_issuer_dn) {
  ------------------
  |  Branch (299:7): [True: 58, False: 4.15k]
  ------------------
  300|     58|      if(!data->m_subject_key_id.empty() && !data->m_authority_key_id.empty()) {
  ------------------
  |  Branch (300:10): [True: 25, False: 33]
  |  Branch (300:45): [True: 23, False: 2]
  ------------------
  301|       |         /*
  302|       |         Both SKID and AKID are set so we can reliably determine self-signed vs
  303|       |         self-issued by comparing the two
  304|       |         */
  305|     23|         data->m_self_signed = (data->m_subject_key_id == data->m_authority_key_id);
  306|     35|      } else {
  307|       |         /*
  308|       |         Without both SKID and AKID we can't determine with certainty. Assume
  309|       |         self-signed since that's by far the common case.
  310|       |         */
  311|     35|         data->m_self_signed = true;
  312|     35|      }
  313|     58|   }
  314|       |
  315|  4.21k|   const std::vector<uint8_t> full_encoding = obj.BER_encode();
  316|       |
  317|  4.21k|   if(auto sha1 = HashFunction::create("SHA-1")) {
  ------------------
  |  Branch (317:12): [True: 614, False: 3.59k]
  ------------------
  318|    614|      sha1->update(data->m_subject_public_key_bitstring);
  319|    614|      data->m_subject_public_key_bitstring_sha1 = sha1->final_stdvec();
  320|       |      // otherwise left as empty, and we will throw if subject_public_key_bitstring_sha1 is called
  321|       |
  322|    614|      sha1->update(full_encoding);
  323|    614|      sha1->final(data->m_cert_data_sha1);
  324|    614|      data->m_fingerprint_sha1 = format_hex_fingerprint(data->m_cert_data_sha1);
  325|       |
  326|    614|      sha1->update(data->m_issuer_dn_bits);
  327|    614|      sha1->final(data->m_issuer_dn_bits_sha1);
  328|       |
  329|    614|      sha1->update(data->m_subject_dn_bits);
  330|    614|      sha1->final(data->m_subject_dn_bits_sha1);
  331|    614|   }
  332|       |
  333|       |   // SHA-256 is a hard dependency of this module
  334|  4.21k|   auto sha256 = HashFunction::create_or_throw("SHA-256");
  335|  4.21k|   sha256->update(data->m_issuer_dn_bits);
  336|  4.21k|   data->m_issuer_dn_bits_sha256 = sha256->final_stdvec();
  337|       |
  338|  4.21k|   sha256->update(data->m_subject_dn_bits);
  339|  4.21k|   data->m_subject_dn_bits_sha256 = sha256->final_stdvec();
  340|       |
  341|  4.21k|   sha256->update(full_encoding);
  342|  4.21k|   sha256->final(data->m_cert_data_sha256);
  343|  4.21k|   data->m_fingerprint_sha256 = format_hex_fingerprint(data->m_cert_data_sha256);
  344|       |
  345|  4.21k|   sha256->update(data->m_subject_public_key_bitstring);
  346|  4.21k|   sha256->final(data->m_subject_public_key_bitstring_sha256);
  347|       |
  348|  4.21k|   return data;
  349|  4.21k|}
x509cert.cpp:_ZZN5Botan12_GLOBAL__N_120parse_x509_cert_bodyERKNS_11X509_ObjectEENK3$_0clERKNSt3__16vectorINS_3OIDENS5_9allocatorIS7_EEEE:
  241|    101|         const bool allowed_by_ext_ku = [](const std::vector<OID>& ext_ku) -> bool {
  242|    101|            if(ext_ku.empty()) {
  ------------------
  |  Branch (242:16): [True: 72, False: 29]
  ------------------
  243|     72|               return true;
  244|     72|            }
  245|       |
  246|     29|            const auto server_auth = OID::from_name("PKIX.ServerAuth");
  247|     29|            const auto client_auth = OID::from_name("PKIX.ClientAuth");
  248|     29|            const auto ocsp_sign = OID::from_name("PKIX.OCSPSigning");
  249|     29|            const auto any_eku = OID::from_name("X509v3.AnyExtendedKeyUsage");
  250|       |
  251|     33|            for(const auto& oid : ext_ku) {
  ------------------
  |  Branch (251:33): [True: 33, False: 25]
  ------------------
  252|     33|               if(oid == any_eku || oid == server_auth || oid == client_auth || oid == ocsp_sign) {
  ------------------
  |  Branch (252:19): [True: 0, False: 33]
  |  Branch (252:37): [True: 2, False: 31]
  |  Branch (252:59): [True: 1, False: 30]
  |  Branch (252:81): [True: 1, False: 29]
  ------------------
  253|      4|                  return true;
  254|      4|               }
  255|     33|            }
  256|       |
  257|     25|            return false;
  258|     29|         }(data->m_extended_key_usage);