mirror of
https://github.com/luxfi/kms.git
synced 2026-10-30 16:23:36 +00:00
zeekay
cc986c328d
Squashes all pre-rewrite history into a single root commit. Previous tree: - 14506 commits including upstream Infisical fork history - Multiple merge chains carrying pre-purge content Force-rewrite per disk-space reclamation discipline. GHCR images (1.9.9, 1.9.11) remain immutable; their git lineage is no longer materialized.
835 lines
24 KiB
Go
835 lines
24 KiB
Go
// Code generated by gen.go using fiat-crypto.
|
|
//
|
|
// Autogenerated: './word_by_word_montgomery' --output scMont255.go --lang Go --package-name ff --doc-prepend-header 'Code generated by gen.go using fiat-crypto.' --package-case lowerCamelCase --public-function-case lowerCamelCase --public-type-case lowerCamelCase --doc-newline-before-package-declaration --no-primitives --widen-carry --no-field-element-typedefs --relax-primitive-carry-to-bitwidth 64 ScMont 64 0x73eda753299d7d483339d80809a1d80553bda402fffe5bfeffffffff00000001 add sub mul square
|
|
//
|
|
// curve description: ScMont
|
|
//
|
|
// machine_wordsize = 64 (from "64")
|
|
//
|
|
// requested operations: add, sub, mul, square
|
|
//
|
|
// m = 0x73eda753299d7d483339d80809a1d80553bda402fffe5bfeffffffff00000001 (from "0x73eda753299d7d483339d80809a1d80553bda402fffe5bfeffffffff00000001")
|
|
//
|
|
//
|
|
//
|
|
// NOTE: In addition to the bounds specified above each function, all
|
|
//
|
|
// functions synthesized for this Montgomery arithmetic require the
|
|
//
|
|
// input to be strictly less than the prime modulus (m), and also
|
|
//
|
|
// require the input to be in the unique saturated representation.
|
|
//
|
|
// All functions also ensure that these two properties are true of
|
|
//
|
|
// return values.
|
|
//
|
|
//
|
|
//
|
|
// Computed values:
|
|
//
|
|
// eval z = z[0] + (z[1] << 64) + (z[2] << 128) + (z[3] << 192)
|
|
//
|
|
// bytes_eval z = z[0] + (z[1] << 8) + (z[2] << 16) + (z[3] << 24) + (z[4] << 32) + (z[5] << 40) + (z[6] << 48) + (z[7] << 56) + (z[8] << 64) + (z[9] << 72) + (z[10] << 80) + (z[11] << 88) + (z[12] << 96) + (z[13] << 104) + (z[14] << 112) + (z[15] << 120) + (z[16] << 128) + (z[17] << 136) + (z[18] << 144) + (z[19] << 152) + (z[20] << 160) + (z[21] << 168) + (z[22] << 176) + (z[23] << 184) + (z[24] << 192) + (z[25] << 200) + (z[26] << 208) + (z[27] << 216) + (z[28] << 224) + (z[29] << 232) + (z[30] << 240) + (z[31] << 248)
|
|
//
|
|
// twos_complement_eval z = let x1 := z[0] + (z[1] << 64) + (z[2] << 128) + (z[3] << 192) in
|
|
//
|
|
// if x1 & (2^256-1) < 2^255 then x1 & (2^256-1) else (x1 & (2^256-1)) - 2^256
|
|
|
|
package ff
|
|
|
|
import "math/bits"
|
|
|
|
// The function fiatScMontAdd adds two field elements in the Montgomery domain.
|
|
//
|
|
// Preconditions:
|
|
//
|
|
// 0 ≤ eval arg1 < m
|
|
// 0 ≤ eval arg2 < m
|
|
//
|
|
// Postconditions:
|
|
//
|
|
// eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) + eval (from_montgomery arg2)) mod m
|
|
// 0 ≤ eval out1 < m
|
|
//
|
|
// Input Bounds:
|
|
//
|
|
// arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
|
|
// arg2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
|
|
//
|
|
// Output Bounds:
|
|
//
|
|
// out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
|
|
func fiatScMontAdd(out1 *[4]uint64, arg1 *[4]uint64, arg2 *[4]uint64) {
|
|
var x1 uint64
|
|
var x2 uint64
|
|
x1, x2 = bits.Add64(arg1[0], arg2[0], uint64(0x0))
|
|
var x3 uint64
|
|
var x4 uint64
|
|
x3, x4 = bits.Add64(arg1[1], arg2[1], uint64(x2))
|
|
var x5 uint64
|
|
var x6 uint64
|
|
x5, x6 = bits.Add64(arg1[2], arg2[2], uint64(x4))
|
|
var x7 uint64
|
|
var x8 uint64
|
|
x7, x8 = bits.Add64(arg1[3], arg2[3], uint64(x6))
|
|
var x9 uint64
|
|
var x10 uint64
|
|
x9, x10 = bits.Sub64(x1, 0xffffffff00000001, uint64(uint64(0x0)))
|
|
var x11 uint64
|
|
var x12 uint64
|
|
x11, x12 = bits.Sub64(x3, 0x53bda402fffe5bfe, uint64(x10))
|
|
var x13 uint64
|
|
var x14 uint64
|
|
x13, x14 = bits.Sub64(x5, 0x3339d80809a1d805, uint64(x12))
|
|
var x15 uint64
|
|
var x16 uint64
|
|
x15, x16 = bits.Sub64(x7, 0x73eda753299d7d48, uint64(x14))
|
|
var x18 uint64
|
|
_, x18 = bits.Sub64(x8, uint64(0x0), uint64(x16))
|
|
var x19 uint64
|
|
fiatScMontCmovznzU64(&x19, x18, x9, x1)
|
|
var x20 uint64
|
|
fiatScMontCmovznzU64(&x20, x18, x11, x3)
|
|
var x21 uint64
|
|
fiatScMontCmovznzU64(&x21, x18, x13, x5)
|
|
var x22 uint64
|
|
fiatScMontCmovznzU64(&x22, x18, x15, x7)
|
|
out1[0] = x19
|
|
out1[1] = x20
|
|
out1[2] = x21
|
|
out1[3] = x22
|
|
}
|
|
|
|
// The function fiatScMontSub subtracts two field elements in the Montgomery domain.
|
|
//
|
|
// Preconditions:
|
|
//
|
|
// 0 ≤ eval arg1 < m
|
|
// 0 ≤ eval arg2 < m
|
|
//
|
|
// Postconditions:
|
|
//
|
|
// eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) - eval (from_montgomery arg2)) mod m
|
|
// 0 ≤ eval out1 < m
|
|
//
|
|
// Input Bounds:
|
|
//
|
|
// arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
|
|
// arg2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
|
|
//
|
|
// Output Bounds:
|
|
//
|
|
// out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
|
|
func fiatScMontSub(out1 *[4]uint64, arg1 *[4]uint64, arg2 *[4]uint64) {
|
|
var x1 uint64
|
|
var x2 uint64
|
|
x1, x2 = bits.Sub64(arg1[0], arg2[0], uint64(0x0))
|
|
var x3 uint64
|
|
var x4 uint64
|
|
x3, x4 = bits.Sub64(arg1[1], arg2[1], uint64(x2))
|
|
var x5 uint64
|
|
var x6 uint64
|
|
x5, x6 = bits.Sub64(arg1[2], arg2[2], uint64(x4))
|
|
var x7 uint64
|
|
var x8 uint64
|
|
x7, x8 = bits.Sub64(arg1[3], arg2[3], uint64(x6))
|
|
var x9 uint64
|
|
fiatScMontCmovznzU64(&x9, x8, uint64(0x0), 0xffffffffffffffff)
|
|
var x10 uint64
|
|
var x11 uint64
|
|
x10, x11 = bits.Add64(x1, (x9 & 0xffffffff00000001), uint64(0x0))
|
|
var x12 uint64
|
|
var x13 uint64
|
|
x12, x13 = bits.Add64(x3, (x9 & 0x53bda402fffe5bfe), uint64(x11))
|
|
var x14 uint64
|
|
var x15 uint64
|
|
x14, x15 = bits.Add64(x5, (x9 & 0x3339d80809a1d805), uint64(x13))
|
|
var x16 uint64
|
|
x16, _ = bits.Add64(x7, (x9 & 0x73eda753299d7d48), uint64(x15))
|
|
out1[0] = x10
|
|
out1[1] = x12
|
|
out1[2] = x14
|
|
out1[3] = x16
|
|
}
|
|
|
|
// The function fiatScMontMul multiplies two field elements in the Montgomery domain.
|
|
//
|
|
// Preconditions:
|
|
//
|
|
// 0 ≤ eval arg1 < m
|
|
// 0 ≤ eval arg2 < m
|
|
//
|
|
// Postconditions:
|
|
//
|
|
// eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) * eval (from_montgomery arg2)) mod m
|
|
// 0 ≤ eval out1 < m
|
|
//
|
|
// Input Bounds:
|
|
//
|
|
// arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
|
|
// arg2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
|
|
//
|
|
// Output Bounds:
|
|
//
|
|
// out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
|
|
func fiatScMontMul(out1 *[4]uint64, arg1 *[4]uint64, arg2 *[4]uint64) {
|
|
x1 := arg1[1]
|
|
x2 := arg1[2]
|
|
x3 := arg1[3]
|
|
x4 := arg1[0]
|
|
var x5 uint64
|
|
var x6 uint64
|
|
x6, x5 = bits.Mul64(x4, arg2[3])
|
|
var x7 uint64
|
|
var x8 uint64
|
|
x8, x7 = bits.Mul64(x4, arg2[2])
|
|
var x9 uint64
|
|
var x10 uint64
|
|
x10, x9 = bits.Mul64(x4, arg2[1])
|
|
var x11 uint64
|
|
var x12 uint64
|
|
x12, x11 = bits.Mul64(x4, arg2[0])
|
|
var x13 uint64
|
|
var x14 uint64
|
|
x13, x14 = bits.Add64(x12, x9, uint64(0x0))
|
|
var x15 uint64
|
|
var x16 uint64
|
|
x15, x16 = bits.Add64(x10, x7, uint64(x14))
|
|
var x17 uint64
|
|
var x18 uint64
|
|
x17, x18 = bits.Add64(x8, x5, uint64(x16))
|
|
x19 := (x18 + x6)
|
|
var x20 uint64
|
|
_, x20 = bits.Mul64(x11, 0xfffffffeffffffff)
|
|
var x22 uint64
|
|
var x23 uint64
|
|
x23, x22 = bits.Mul64(x20, 0x73eda753299d7d48)
|
|
var x24 uint64
|
|
var x25 uint64
|
|
x25, x24 = bits.Mul64(x20, 0x3339d80809a1d805)
|
|
var x26 uint64
|
|
var x27 uint64
|
|
x27, x26 = bits.Mul64(x20, 0x53bda402fffe5bfe)
|
|
var x28 uint64
|
|
var x29 uint64
|
|
x29, x28 = bits.Mul64(x20, 0xffffffff00000001)
|
|
var x30 uint64
|
|
var x31 uint64
|
|
x30, x31 = bits.Add64(x29, x26, uint64(0x0))
|
|
var x32 uint64
|
|
var x33 uint64
|
|
x32, x33 = bits.Add64(x27, x24, uint64(x31))
|
|
var x34 uint64
|
|
var x35 uint64
|
|
x34, x35 = bits.Add64(x25, x22, uint64(x33))
|
|
x36 := (x35 + x23)
|
|
var x38 uint64
|
|
_, x38 = bits.Add64(x11, x28, uint64(0x0))
|
|
var x39 uint64
|
|
var x40 uint64
|
|
x39, x40 = bits.Add64(x13, x30, uint64(x38))
|
|
var x41 uint64
|
|
var x42 uint64
|
|
x41, x42 = bits.Add64(x15, x32, uint64(x40))
|
|
var x43 uint64
|
|
var x44 uint64
|
|
x43, x44 = bits.Add64(x17, x34, uint64(x42))
|
|
var x45 uint64
|
|
var x46 uint64
|
|
x45, x46 = bits.Add64(x19, x36, uint64(x44))
|
|
var x47 uint64
|
|
var x48 uint64
|
|
x48, x47 = bits.Mul64(x1, arg2[3])
|
|
var x49 uint64
|
|
var x50 uint64
|
|
x50, x49 = bits.Mul64(x1, arg2[2])
|
|
var x51 uint64
|
|
var x52 uint64
|
|
x52, x51 = bits.Mul64(x1, arg2[1])
|
|
var x53 uint64
|
|
var x54 uint64
|
|
x54, x53 = bits.Mul64(x1, arg2[0])
|
|
var x55 uint64
|
|
var x56 uint64
|
|
x55, x56 = bits.Add64(x54, x51, uint64(0x0))
|
|
var x57 uint64
|
|
var x58 uint64
|
|
x57, x58 = bits.Add64(x52, x49, uint64(x56))
|
|
var x59 uint64
|
|
var x60 uint64
|
|
x59, x60 = bits.Add64(x50, x47, uint64(x58))
|
|
x61 := (x60 + x48)
|
|
var x62 uint64
|
|
var x63 uint64
|
|
x62, x63 = bits.Add64(x39, x53, uint64(0x0))
|
|
var x64 uint64
|
|
var x65 uint64
|
|
x64, x65 = bits.Add64(x41, x55, uint64(x63))
|
|
var x66 uint64
|
|
var x67 uint64
|
|
x66, x67 = bits.Add64(x43, x57, uint64(x65))
|
|
var x68 uint64
|
|
var x69 uint64
|
|
x68, x69 = bits.Add64(x45, x59, uint64(x67))
|
|
var x70 uint64
|
|
var x71 uint64
|
|
x70, x71 = bits.Add64(x46, x61, uint64(x69))
|
|
var x72 uint64
|
|
_, x72 = bits.Mul64(x62, 0xfffffffeffffffff)
|
|
var x74 uint64
|
|
var x75 uint64
|
|
x75, x74 = bits.Mul64(x72, 0x73eda753299d7d48)
|
|
var x76 uint64
|
|
var x77 uint64
|
|
x77, x76 = bits.Mul64(x72, 0x3339d80809a1d805)
|
|
var x78 uint64
|
|
var x79 uint64
|
|
x79, x78 = bits.Mul64(x72, 0x53bda402fffe5bfe)
|
|
var x80 uint64
|
|
var x81 uint64
|
|
x81, x80 = bits.Mul64(x72, 0xffffffff00000001)
|
|
var x82 uint64
|
|
var x83 uint64
|
|
x82, x83 = bits.Add64(x81, x78, uint64(0x0))
|
|
var x84 uint64
|
|
var x85 uint64
|
|
x84, x85 = bits.Add64(x79, x76, uint64(x83))
|
|
var x86 uint64
|
|
var x87 uint64
|
|
x86, x87 = bits.Add64(x77, x74, uint64(x85))
|
|
x88 := (x87 + x75)
|
|
var x90 uint64
|
|
_, x90 = bits.Add64(x62, x80, uint64(0x0))
|
|
var x91 uint64
|
|
var x92 uint64
|
|
x91, x92 = bits.Add64(x64, x82, uint64(x90))
|
|
var x93 uint64
|
|
var x94 uint64
|
|
x93, x94 = bits.Add64(x66, x84, uint64(x92))
|
|
var x95 uint64
|
|
var x96 uint64
|
|
x95, x96 = bits.Add64(x68, x86, uint64(x94))
|
|
var x97 uint64
|
|
var x98 uint64
|
|
x97, x98 = bits.Add64(x70, x88, uint64(x96))
|
|
x99 := (x98 + x71)
|
|
var x100 uint64
|
|
var x101 uint64
|
|
x101, x100 = bits.Mul64(x2, arg2[3])
|
|
var x102 uint64
|
|
var x103 uint64
|
|
x103, x102 = bits.Mul64(x2, arg2[2])
|
|
var x104 uint64
|
|
var x105 uint64
|
|
x105, x104 = bits.Mul64(x2, arg2[1])
|
|
var x106 uint64
|
|
var x107 uint64
|
|
x107, x106 = bits.Mul64(x2, arg2[0])
|
|
var x108 uint64
|
|
var x109 uint64
|
|
x108, x109 = bits.Add64(x107, x104, uint64(0x0))
|
|
var x110 uint64
|
|
var x111 uint64
|
|
x110, x111 = bits.Add64(x105, x102, uint64(x109))
|
|
var x112 uint64
|
|
var x113 uint64
|
|
x112, x113 = bits.Add64(x103, x100, uint64(x111))
|
|
x114 := (x113 + x101)
|
|
var x115 uint64
|
|
var x116 uint64
|
|
x115, x116 = bits.Add64(x91, x106, uint64(0x0))
|
|
var x117 uint64
|
|
var x118 uint64
|
|
x117, x118 = bits.Add64(x93, x108, uint64(x116))
|
|
var x119 uint64
|
|
var x120 uint64
|
|
x119, x120 = bits.Add64(x95, x110, uint64(x118))
|
|
var x121 uint64
|
|
var x122 uint64
|
|
x121, x122 = bits.Add64(x97, x112, uint64(x120))
|
|
var x123 uint64
|
|
var x124 uint64
|
|
x123, x124 = bits.Add64(x99, x114, uint64(x122))
|
|
var x125 uint64
|
|
_, x125 = bits.Mul64(x115, 0xfffffffeffffffff)
|
|
var x127 uint64
|
|
var x128 uint64
|
|
x128, x127 = bits.Mul64(x125, 0x73eda753299d7d48)
|
|
var x129 uint64
|
|
var x130 uint64
|
|
x130, x129 = bits.Mul64(x125, 0x3339d80809a1d805)
|
|
var x131 uint64
|
|
var x132 uint64
|
|
x132, x131 = bits.Mul64(x125, 0x53bda402fffe5bfe)
|
|
var x133 uint64
|
|
var x134 uint64
|
|
x134, x133 = bits.Mul64(x125, 0xffffffff00000001)
|
|
var x135 uint64
|
|
var x136 uint64
|
|
x135, x136 = bits.Add64(x134, x131, uint64(0x0))
|
|
var x137 uint64
|
|
var x138 uint64
|
|
x137, x138 = bits.Add64(x132, x129, uint64(x136))
|
|
var x139 uint64
|
|
var x140 uint64
|
|
x139, x140 = bits.Add64(x130, x127, uint64(x138))
|
|
x141 := (x140 + x128)
|
|
var x143 uint64
|
|
_, x143 = bits.Add64(x115, x133, uint64(0x0))
|
|
var x144 uint64
|
|
var x145 uint64
|
|
x144, x145 = bits.Add64(x117, x135, uint64(x143))
|
|
var x146 uint64
|
|
var x147 uint64
|
|
x146, x147 = bits.Add64(x119, x137, uint64(x145))
|
|
var x148 uint64
|
|
var x149 uint64
|
|
x148, x149 = bits.Add64(x121, x139, uint64(x147))
|
|
var x150 uint64
|
|
var x151 uint64
|
|
x150, x151 = bits.Add64(x123, x141, uint64(x149))
|
|
x152 := (x151 + x124)
|
|
var x153 uint64
|
|
var x154 uint64
|
|
x154, x153 = bits.Mul64(x3, arg2[3])
|
|
var x155 uint64
|
|
var x156 uint64
|
|
x156, x155 = bits.Mul64(x3, arg2[2])
|
|
var x157 uint64
|
|
var x158 uint64
|
|
x158, x157 = bits.Mul64(x3, arg2[1])
|
|
var x159 uint64
|
|
var x160 uint64
|
|
x160, x159 = bits.Mul64(x3, arg2[0])
|
|
var x161 uint64
|
|
var x162 uint64
|
|
x161, x162 = bits.Add64(x160, x157, uint64(0x0))
|
|
var x163 uint64
|
|
var x164 uint64
|
|
x163, x164 = bits.Add64(x158, x155, uint64(x162))
|
|
var x165 uint64
|
|
var x166 uint64
|
|
x165, x166 = bits.Add64(x156, x153, uint64(x164))
|
|
x167 := (x166 + x154)
|
|
var x168 uint64
|
|
var x169 uint64
|
|
x168, x169 = bits.Add64(x144, x159, uint64(0x0))
|
|
var x170 uint64
|
|
var x171 uint64
|
|
x170, x171 = bits.Add64(x146, x161, uint64(x169))
|
|
var x172 uint64
|
|
var x173 uint64
|
|
x172, x173 = bits.Add64(x148, x163, uint64(x171))
|
|
var x174 uint64
|
|
var x175 uint64
|
|
x174, x175 = bits.Add64(x150, x165, uint64(x173))
|
|
var x176 uint64
|
|
var x177 uint64
|
|
x176, x177 = bits.Add64(x152, x167, uint64(x175))
|
|
var x178 uint64
|
|
_, x178 = bits.Mul64(x168, 0xfffffffeffffffff)
|
|
var x180 uint64
|
|
var x181 uint64
|
|
x181, x180 = bits.Mul64(x178, 0x73eda753299d7d48)
|
|
var x182 uint64
|
|
var x183 uint64
|
|
x183, x182 = bits.Mul64(x178, 0x3339d80809a1d805)
|
|
var x184 uint64
|
|
var x185 uint64
|
|
x185, x184 = bits.Mul64(x178, 0x53bda402fffe5bfe)
|
|
var x186 uint64
|
|
var x187 uint64
|
|
x187, x186 = bits.Mul64(x178, 0xffffffff00000001)
|
|
var x188 uint64
|
|
var x189 uint64
|
|
x188, x189 = bits.Add64(x187, x184, uint64(0x0))
|
|
var x190 uint64
|
|
var x191 uint64
|
|
x190, x191 = bits.Add64(x185, x182, uint64(x189))
|
|
var x192 uint64
|
|
var x193 uint64
|
|
x192, x193 = bits.Add64(x183, x180, uint64(x191))
|
|
x194 := (x193 + x181)
|
|
var x196 uint64
|
|
_, x196 = bits.Add64(x168, x186, uint64(0x0))
|
|
var x197 uint64
|
|
var x198 uint64
|
|
x197, x198 = bits.Add64(x170, x188, uint64(x196))
|
|
var x199 uint64
|
|
var x200 uint64
|
|
x199, x200 = bits.Add64(x172, x190, uint64(x198))
|
|
var x201 uint64
|
|
var x202 uint64
|
|
x201, x202 = bits.Add64(x174, x192, uint64(x200))
|
|
var x203 uint64
|
|
var x204 uint64
|
|
x203, x204 = bits.Add64(x176, x194, uint64(x202))
|
|
x205 := (x204 + x177)
|
|
var x206 uint64
|
|
var x207 uint64
|
|
x206, x207 = bits.Sub64(x197, 0xffffffff00000001, uint64(uint64(0x0)))
|
|
var x208 uint64
|
|
var x209 uint64
|
|
x208, x209 = bits.Sub64(x199, 0x53bda402fffe5bfe, uint64(x207))
|
|
var x210 uint64
|
|
var x211 uint64
|
|
x210, x211 = bits.Sub64(x201, 0x3339d80809a1d805, uint64(x209))
|
|
var x212 uint64
|
|
var x213 uint64
|
|
x212, x213 = bits.Sub64(x203, 0x73eda753299d7d48, uint64(x211))
|
|
var x215 uint64
|
|
_, x215 = bits.Sub64(x205, uint64(0x0), uint64(x213))
|
|
var x216 uint64
|
|
fiatScMontCmovznzU64(&x216, x215, x206, x197)
|
|
var x217 uint64
|
|
fiatScMontCmovznzU64(&x217, x215, x208, x199)
|
|
var x218 uint64
|
|
fiatScMontCmovznzU64(&x218, x215, x210, x201)
|
|
var x219 uint64
|
|
fiatScMontCmovznzU64(&x219, x215, x212, x203)
|
|
out1[0] = x216
|
|
out1[1] = x217
|
|
out1[2] = x218
|
|
out1[3] = x219
|
|
}
|
|
|
|
// The function fiatScMontSquare squares a field element in the Montgomery domain.
|
|
//
|
|
// Preconditions:
|
|
//
|
|
// 0 ≤ eval arg1 < m
|
|
//
|
|
// Postconditions:
|
|
//
|
|
// eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) * eval (from_montgomery arg1)) mod m
|
|
// 0 ≤ eval out1 < m
|
|
//
|
|
// Input Bounds:
|
|
//
|
|
// arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
|
|
//
|
|
// Output Bounds:
|
|
//
|
|
// out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
|
|
func fiatScMontSquare(out1 *[4]uint64, arg1 *[4]uint64) {
|
|
x1 := arg1[1]
|
|
x2 := arg1[2]
|
|
x3 := arg1[3]
|
|
x4 := arg1[0]
|
|
var x5 uint64
|
|
var x6 uint64
|
|
x6, x5 = bits.Mul64(x4, arg1[3])
|
|
var x7 uint64
|
|
var x8 uint64
|
|
x8, x7 = bits.Mul64(x4, arg1[2])
|
|
var x9 uint64
|
|
var x10 uint64
|
|
x10, x9 = bits.Mul64(x4, arg1[1])
|
|
var x11 uint64
|
|
var x12 uint64
|
|
x12, x11 = bits.Mul64(x4, arg1[0])
|
|
var x13 uint64
|
|
var x14 uint64
|
|
x13, x14 = bits.Add64(x12, x9, uint64(0x0))
|
|
var x15 uint64
|
|
var x16 uint64
|
|
x15, x16 = bits.Add64(x10, x7, uint64(x14))
|
|
var x17 uint64
|
|
var x18 uint64
|
|
x17, x18 = bits.Add64(x8, x5, uint64(x16))
|
|
x19 := (x18 + x6)
|
|
var x20 uint64
|
|
_, x20 = bits.Mul64(x11, 0xfffffffeffffffff)
|
|
var x22 uint64
|
|
var x23 uint64
|
|
x23, x22 = bits.Mul64(x20, 0x73eda753299d7d48)
|
|
var x24 uint64
|
|
var x25 uint64
|
|
x25, x24 = bits.Mul64(x20, 0x3339d80809a1d805)
|
|
var x26 uint64
|
|
var x27 uint64
|
|
x27, x26 = bits.Mul64(x20, 0x53bda402fffe5bfe)
|
|
var x28 uint64
|
|
var x29 uint64
|
|
x29, x28 = bits.Mul64(x20, 0xffffffff00000001)
|
|
var x30 uint64
|
|
var x31 uint64
|
|
x30, x31 = bits.Add64(x29, x26, uint64(0x0))
|
|
var x32 uint64
|
|
var x33 uint64
|
|
x32, x33 = bits.Add64(x27, x24, uint64(x31))
|
|
var x34 uint64
|
|
var x35 uint64
|
|
x34, x35 = bits.Add64(x25, x22, uint64(x33))
|
|
x36 := (x35 + x23)
|
|
var x38 uint64
|
|
_, x38 = bits.Add64(x11, x28, uint64(0x0))
|
|
var x39 uint64
|
|
var x40 uint64
|
|
x39, x40 = bits.Add64(x13, x30, uint64(x38))
|
|
var x41 uint64
|
|
var x42 uint64
|
|
x41, x42 = bits.Add64(x15, x32, uint64(x40))
|
|
var x43 uint64
|
|
var x44 uint64
|
|
x43, x44 = bits.Add64(x17, x34, uint64(x42))
|
|
var x45 uint64
|
|
var x46 uint64
|
|
x45, x46 = bits.Add64(x19, x36, uint64(x44))
|
|
var x47 uint64
|
|
var x48 uint64
|
|
x48, x47 = bits.Mul64(x1, arg1[3])
|
|
var x49 uint64
|
|
var x50 uint64
|
|
x50, x49 = bits.Mul64(x1, arg1[2])
|
|
var x51 uint64
|
|
var x52 uint64
|
|
x52, x51 = bits.Mul64(x1, arg1[1])
|
|
var x53 uint64
|
|
var x54 uint64
|
|
x54, x53 = bits.Mul64(x1, arg1[0])
|
|
var x55 uint64
|
|
var x56 uint64
|
|
x55, x56 = bits.Add64(x54, x51, uint64(0x0))
|
|
var x57 uint64
|
|
var x58 uint64
|
|
x57, x58 = bits.Add64(x52, x49, uint64(x56))
|
|
var x59 uint64
|
|
var x60 uint64
|
|
x59, x60 = bits.Add64(x50, x47, uint64(x58))
|
|
x61 := (x60 + x48)
|
|
var x62 uint64
|
|
var x63 uint64
|
|
x62, x63 = bits.Add64(x39, x53, uint64(0x0))
|
|
var x64 uint64
|
|
var x65 uint64
|
|
x64, x65 = bits.Add64(x41, x55, uint64(x63))
|
|
var x66 uint64
|
|
var x67 uint64
|
|
x66, x67 = bits.Add64(x43, x57, uint64(x65))
|
|
var x68 uint64
|
|
var x69 uint64
|
|
x68, x69 = bits.Add64(x45, x59, uint64(x67))
|
|
var x70 uint64
|
|
var x71 uint64
|
|
x70, x71 = bits.Add64(x46, x61, uint64(x69))
|
|
var x72 uint64
|
|
_, x72 = bits.Mul64(x62, 0xfffffffeffffffff)
|
|
var x74 uint64
|
|
var x75 uint64
|
|
x75, x74 = bits.Mul64(x72, 0x73eda753299d7d48)
|
|
var x76 uint64
|
|
var x77 uint64
|
|
x77, x76 = bits.Mul64(x72, 0x3339d80809a1d805)
|
|
var x78 uint64
|
|
var x79 uint64
|
|
x79, x78 = bits.Mul64(x72, 0x53bda402fffe5bfe)
|
|
var x80 uint64
|
|
var x81 uint64
|
|
x81, x80 = bits.Mul64(x72, 0xffffffff00000001)
|
|
var x82 uint64
|
|
var x83 uint64
|
|
x82, x83 = bits.Add64(x81, x78, uint64(0x0))
|
|
var x84 uint64
|
|
var x85 uint64
|
|
x84, x85 = bits.Add64(x79, x76, uint64(x83))
|
|
var x86 uint64
|
|
var x87 uint64
|
|
x86, x87 = bits.Add64(x77, x74, uint64(x85))
|
|
x88 := (x87 + x75)
|
|
var x90 uint64
|
|
_, x90 = bits.Add64(x62, x80, uint64(0x0))
|
|
var x91 uint64
|
|
var x92 uint64
|
|
x91, x92 = bits.Add64(x64, x82, uint64(x90))
|
|
var x93 uint64
|
|
var x94 uint64
|
|
x93, x94 = bits.Add64(x66, x84, uint64(x92))
|
|
var x95 uint64
|
|
var x96 uint64
|
|
x95, x96 = bits.Add64(x68, x86, uint64(x94))
|
|
var x97 uint64
|
|
var x98 uint64
|
|
x97, x98 = bits.Add64(x70, x88, uint64(x96))
|
|
x99 := (x98 + x71)
|
|
var x100 uint64
|
|
var x101 uint64
|
|
x101, x100 = bits.Mul64(x2, arg1[3])
|
|
var x102 uint64
|
|
var x103 uint64
|
|
x103, x102 = bits.Mul64(x2, arg1[2])
|
|
var x104 uint64
|
|
var x105 uint64
|
|
x105, x104 = bits.Mul64(x2, arg1[1])
|
|
var x106 uint64
|
|
var x107 uint64
|
|
x107, x106 = bits.Mul64(x2, arg1[0])
|
|
var x108 uint64
|
|
var x109 uint64
|
|
x108, x109 = bits.Add64(x107, x104, uint64(0x0))
|
|
var x110 uint64
|
|
var x111 uint64
|
|
x110, x111 = bits.Add64(x105, x102, uint64(x109))
|
|
var x112 uint64
|
|
var x113 uint64
|
|
x112, x113 = bits.Add64(x103, x100, uint64(x111))
|
|
x114 := (x113 + x101)
|
|
var x115 uint64
|
|
var x116 uint64
|
|
x115, x116 = bits.Add64(x91, x106, uint64(0x0))
|
|
var x117 uint64
|
|
var x118 uint64
|
|
x117, x118 = bits.Add64(x93, x108, uint64(x116))
|
|
var x119 uint64
|
|
var x120 uint64
|
|
x119, x120 = bits.Add64(x95, x110, uint64(x118))
|
|
var x121 uint64
|
|
var x122 uint64
|
|
x121, x122 = bits.Add64(x97, x112, uint64(x120))
|
|
var x123 uint64
|
|
var x124 uint64
|
|
x123, x124 = bits.Add64(x99, x114, uint64(x122))
|
|
var x125 uint64
|
|
_, x125 = bits.Mul64(x115, 0xfffffffeffffffff)
|
|
var x127 uint64
|
|
var x128 uint64
|
|
x128, x127 = bits.Mul64(x125, 0x73eda753299d7d48)
|
|
var x129 uint64
|
|
var x130 uint64
|
|
x130, x129 = bits.Mul64(x125, 0x3339d80809a1d805)
|
|
var x131 uint64
|
|
var x132 uint64
|
|
x132, x131 = bits.Mul64(x125, 0x53bda402fffe5bfe)
|
|
var x133 uint64
|
|
var x134 uint64
|
|
x134, x133 = bits.Mul64(x125, 0xffffffff00000001)
|
|
var x135 uint64
|
|
var x136 uint64
|
|
x135, x136 = bits.Add64(x134, x131, uint64(0x0))
|
|
var x137 uint64
|
|
var x138 uint64
|
|
x137, x138 = bits.Add64(x132, x129, uint64(x136))
|
|
var x139 uint64
|
|
var x140 uint64
|
|
x139, x140 = bits.Add64(x130, x127, uint64(x138))
|
|
x141 := (x140 + x128)
|
|
var x143 uint64
|
|
_, x143 = bits.Add64(x115, x133, uint64(0x0))
|
|
var x144 uint64
|
|
var x145 uint64
|
|
x144, x145 = bits.Add64(x117, x135, uint64(x143))
|
|
var x146 uint64
|
|
var x147 uint64
|
|
x146, x147 = bits.Add64(x119, x137, uint64(x145))
|
|
var x148 uint64
|
|
var x149 uint64
|
|
x148, x149 = bits.Add64(x121, x139, uint64(x147))
|
|
var x150 uint64
|
|
var x151 uint64
|
|
x150, x151 = bits.Add64(x123, x141, uint64(x149))
|
|
x152 := (x151 + x124)
|
|
var x153 uint64
|
|
var x154 uint64
|
|
x154, x153 = bits.Mul64(x3, arg1[3])
|
|
var x155 uint64
|
|
var x156 uint64
|
|
x156, x155 = bits.Mul64(x3, arg1[2])
|
|
var x157 uint64
|
|
var x158 uint64
|
|
x158, x157 = bits.Mul64(x3, arg1[1])
|
|
var x159 uint64
|
|
var x160 uint64
|
|
x160, x159 = bits.Mul64(x3, arg1[0])
|
|
var x161 uint64
|
|
var x162 uint64
|
|
x161, x162 = bits.Add64(x160, x157, uint64(0x0))
|
|
var x163 uint64
|
|
var x164 uint64
|
|
x163, x164 = bits.Add64(x158, x155, uint64(x162))
|
|
var x165 uint64
|
|
var x166 uint64
|
|
x165, x166 = bits.Add64(x156, x153, uint64(x164))
|
|
x167 := (x166 + x154)
|
|
var x168 uint64
|
|
var x169 uint64
|
|
x168, x169 = bits.Add64(x144, x159, uint64(0x0))
|
|
var x170 uint64
|
|
var x171 uint64
|
|
x170, x171 = bits.Add64(x146, x161, uint64(x169))
|
|
var x172 uint64
|
|
var x173 uint64
|
|
x172, x173 = bits.Add64(x148, x163, uint64(x171))
|
|
var x174 uint64
|
|
var x175 uint64
|
|
x174, x175 = bits.Add64(x150, x165, uint64(x173))
|
|
var x176 uint64
|
|
var x177 uint64
|
|
x176, x177 = bits.Add64(x152, x167, uint64(x175))
|
|
var x178 uint64
|
|
_, x178 = bits.Mul64(x168, 0xfffffffeffffffff)
|
|
var x180 uint64
|
|
var x181 uint64
|
|
x181, x180 = bits.Mul64(x178, 0x73eda753299d7d48)
|
|
var x182 uint64
|
|
var x183 uint64
|
|
x183, x182 = bits.Mul64(x178, 0x3339d80809a1d805)
|
|
var x184 uint64
|
|
var x185 uint64
|
|
x185, x184 = bits.Mul64(x178, 0x53bda402fffe5bfe)
|
|
var x186 uint64
|
|
var x187 uint64
|
|
x187, x186 = bits.Mul64(x178, 0xffffffff00000001)
|
|
var x188 uint64
|
|
var x189 uint64
|
|
x188, x189 = bits.Add64(x187, x184, uint64(0x0))
|
|
var x190 uint64
|
|
var x191 uint64
|
|
x190, x191 = bits.Add64(x185, x182, uint64(x189))
|
|
var x192 uint64
|
|
var x193 uint64
|
|
x192, x193 = bits.Add64(x183, x180, uint64(x191))
|
|
x194 := (x193 + x181)
|
|
var x196 uint64
|
|
_, x196 = bits.Add64(x168, x186, uint64(0x0))
|
|
var x197 uint64
|
|
var x198 uint64
|
|
x197, x198 = bits.Add64(x170, x188, uint64(x196))
|
|
var x199 uint64
|
|
var x200 uint64
|
|
x199, x200 = bits.Add64(x172, x190, uint64(x198))
|
|
var x201 uint64
|
|
var x202 uint64
|
|
x201, x202 = bits.Add64(x174, x192, uint64(x200))
|
|
var x203 uint64
|
|
var x204 uint64
|
|
x203, x204 = bits.Add64(x176, x194, uint64(x202))
|
|
x205 := (x204 + x177)
|
|
var x206 uint64
|
|
var x207 uint64
|
|
x206, x207 = bits.Sub64(x197, 0xffffffff00000001, uint64(uint64(0x0)))
|
|
var x208 uint64
|
|
var x209 uint64
|
|
x208, x209 = bits.Sub64(x199, 0x53bda402fffe5bfe, uint64(x207))
|
|
var x210 uint64
|
|
var x211 uint64
|
|
x210, x211 = bits.Sub64(x201, 0x3339d80809a1d805, uint64(x209))
|
|
var x212 uint64
|
|
var x213 uint64
|
|
x212, x213 = bits.Sub64(x203, 0x73eda753299d7d48, uint64(x211))
|
|
var x215 uint64
|
|
_, x215 = bits.Sub64(x205, uint64(0x0), uint64(x213))
|
|
var x216 uint64
|
|
fiatScMontCmovznzU64(&x216, x215, x206, x197)
|
|
var x217 uint64
|
|
fiatScMontCmovznzU64(&x217, x215, x208, x199)
|
|
var x218 uint64
|
|
fiatScMontCmovznzU64(&x218, x215, x210, x201)
|
|
var x219 uint64
|
|
fiatScMontCmovznzU64(&x219, x215, x212, x203)
|
|
out1[0] = x216
|
|
out1[1] = x217
|
|
out1[2] = x218
|
|
out1[3] = x219
|
|
}
|