1// Autogenerated: 'src/ExtractionOCaml/word_by_word_montgomery' --lang Zig --internal-static --public-function-case camelCase --private-function-case camelCase --public-type-case UpperCamelCase --private-type-case UpperCamelCase --no-prefix-fiat --package-name p384_scalar '' 64 '2^384 - 1388124618062372383947042015309946732620727252194336364173' mul square add sub opp from_montgomery to_montgomery nonzero selectznz to_bytes from_bytes one msat divstep divstep_precomp
2// curve description (via package name): p384_scalar
3// machine_wordsize = 64 (from "64")
4// requested operations: mul, square, add, sub, opp, from_montgomery, to_montgomery, nonzero, selectznz, to_bytes, from_bytes, one, msat, divstep, divstep_precomp
5// m = 0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973 (from "2^384 - 1388124618062372383947042015309946732620727252194336364173")
6//
7// NOTE: In addition to the bounds specified above each function, all
8// functions synthesized for this Montgomery arithmetic require the
9// input to be strictly less than the prime modulus (m), and also
10// require the input to be in the unique saturated representation.
11// All functions also ensure that these two properties are true of
12// return values.
13//
14// Computed values:
15// eval z = z[0] + (z[1] << 64) + (z[2] << 128) + (z[3] << 192) + (z[4] << 256) + (z[5] << 0x140)
16// bytes_eval z = z[0] + (z[1] << 8) + (z[2] << 16) + (z[3] << 24) + (z[4] << 32) + (z[5] << 40) + (z[6] << 48) + (z[7] << 56) + (z[8] << 64) + (z[9] << 72) + (z[10] << 80) + (z[11] << 88) + (z[12] << 96) + (z[13] << 104) + (z[14] << 112) + (z[15] << 120) + (z[16] << 128) + (z[17] << 136) + (z[18] << 144) + (z[19] << 152) + (z[20] << 160) + (z[21] << 168) + (z[22] << 176) + (z[23] << 184) + (z[24] << 192) + (z[25] << 200) + (z[26] << 208) + (z[27] << 216) + (z[28] << 224) + (z[29] << 232) + (z[30] << 240) + (z[31] << 248) + (z[32] << 256) + (z[33] << 0x108) + (z[34] << 0x110) + (z[35] << 0x118) + (z[36] << 0x120) + (z[37] << 0x128) + (z[38] << 0x130) + (z[39] << 0x138) + (z[40] << 0x140) + (z[41] << 0x148) + (z[42] << 0x150) + (z[43] << 0x158) + (z[44] << 0x160) + (z[45] << 0x168) + (z[46] << 0x170) + (z[47] << 0x178)
17// twos_complement_eval z = let x1 := z[0] + (z[1] << 64) + (z[2] << 128) + (z[3] << 192) + (z[4] << 256) + (z[5] << 0x140) in
18// if x1 & (2^384-1) < 2^383 then x1 & (2^384-1) else (x1 & (2^384-1)) - 2^384
19
20const std = @import("std");
21const mode = @import("builtin").mode; // Checked arithmetic is disabled in non-debug modes to avoid side channels
22
23// The type MontgomeryDomainFieldElement is a field element in the Montgomery domain.
24// Bounds: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
25pub const MontgomeryDomainFieldElement = [6]u64;
26
27// The type NonMontgomeryDomainFieldElement is a field element NOT in the Montgomery domain.
28// Bounds: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
29pub const NonMontgomeryDomainFieldElement = [6]u64;
30
31/// The function addcarryxU64 is an addition with carry.
32///
33/// Postconditions:
34/// out1 = (arg1 + arg2 + arg3) mod 2^64
35/// out2 = ⌊(arg1 + arg2 + arg3) / 2^64⌋
36///
37/// Input Bounds:
38/// arg1: [0x0 ~> 0x1]
39/// arg2: [0x0 ~> 0xffffffffffffffff]
40/// arg3: [0x0 ~> 0xffffffffffffffff]
41/// Output Bounds:
42/// out1: [0x0 ~> 0xffffffffffffffff]
43/// out2: [0x0 ~> 0x1]
44fn addcarryxU64(out1: *u64, out2: *u1, arg1: u1, arg2: u64, arg3: u64) void {
45 const x = @as(u128, arg2) +% arg3 +% arg1;
46 out1.* = @truncate(x);
47 out2.* = @truncate(x >> 64);
48}
49
50/// The function subborrowxU64 is a subtraction with borrow.
51///
52/// Postconditions:
53/// out1 = (-arg1 + arg2 + -arg3) mod 2^64
54/// out2 = -⌊(-arg1 + arg2 + -arg3) / 2^64⌋
55///
56/// Input Bounds:
57/// arg1: [0x0 ~> 0x1]
58/// arg2: [0x0 ~> 0xffffffffffffffff]
59/// arg3: [0x0 ~> 0xffffffffffffffff]
60/// Output Bounds:
61/// out1: [0x0 ~> 0xffffffffffffffff]
62/// out2: [0x0 ~> 0x1]
63fn subborrowxU64(out1: *u64, out2: *u1, arg1: u1, arg2: u64, arg3: u64) void {
64 const x = @as(u128, arg2) -% arg3 -% arg1;
65 out1.* = @truncate(x);
66 out2.* = @truncate(x >> 64);
67}
68
69/// The function mulxU64 is a multiplication, returning the full double-width result.
70///
71/// Postconditions:
72/// out1 = (arg1 * arg2) mod 2^64
73/// out2 = ⌊arg1 * arg2 / 2^64⌋
74///
75/// Input Bounds:
76/// arg1: [0x0 ~> 0xffffffffffffffff]
77/// arg2: [0x0 ~> 0xffffffffffffffff]
78/// Output Bounds:
79/// out1: [0x0 ~> 0xffffffffffffffff]
80/// out2: [0x0 ~> 0xffffffffffffffff]
81fn mulxU64(out1: *u64, out2: *u64, arg1: u64, arg2: u64) void {
82 @setRuntimeSafety(mode == .debug);
83
84 const x = @as(u128, arg1) * @as(u128, arg2);
85 out1.* = @as(u64, @truncate(x));
86 out2.* = @as(u64, @truncate(x >> 64));
87}
88
89/// The function cmovznzU64 is a single-word conditional move.
90///
91/// Postconditions:
92/// out1 = (if arg1 = 0 then arg2 else arg3)
93///
94/// Input Bounds:
95/// arg1: [0x0 ~> 0x1]
96/// arg2: [0x0 ~> 0xffffffffffffffff]
97/// arg3: [0x0 ~> 0xffffffffffffffff]
98/// Output Bounds:
99/// out1: [0x0 ~> 0xffffffffffffffff]
100fn cmovznzU64(out1: *u64, arg1: u1, arg2: u64, arg3: u64) void {
101 @setRuntimeSafety(mode == .debug);
102
103 const mask = 0 -% @as(u64, arg1);
104 out1.* = (mask & arg3) | ((~mask) & arg2);
105}
106
107/// The function mul multiplies two field elements in the Montgomery domain.
108///
109/// Preconditions:
110/// 0 ≤ eval arg1 < m
111/// 0 ≤ eval arg2 < m
112/// Postconditions:
113/// eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) * eval (from_montgomery arg2)) mod m
114/// 0 ≤ eval out1 < m
115///
116pub fn mul(out1: *MontgomeryDomainFieldElement, arg1: MontgomeryDomainFieldElement, arg2: MontgomeryDomainFieldElement) void {
117 @setRuntimeSafety(mode == .debug);
118
119 const x1 = (arg1[1]);
120 const x2 = (arg1[2]);
121 const x3 = (arg1[3]);
122 const x4 = (arg1[4]);
123 const x5 = (arg1[5]);
124 const x6 = (arg1[0]);
125 var x7: u64 = undefined;
126 var x8: u64 = undefined;
127 mulxU64(&x7, &x8, x6, (arg2[5]));
128 var x9: u64 = undefined;
129 var x10: u64 = undefined;
130 mulxU64(&x9, &x10, x6, (arg2[4]));
131 var x11: u64 = undefined;
132 var x12: u64 = undefined;
133 mulxU64(&x11, &x12, x6, (arg2[3]));
134 var x13: u64 = undefined;
135 var x14: u64 = undefined;
136 mulxU64(&x13, &x14, x6, (arg2[2]));
137 var x15: u64 = undefined;
138 var x16: u64 = undefined;
139 mulxU64(&x15, &x16, x6, (arg2[1]));
140 var x17: u64 = undefined;
141 var x18: u64 = undefined;
142 mulxU64(&x17, &x18, x6, (arg2[0]));
143 var x19: u64 = undefined;
144 var x20: u1 = undefined;
145 addcarryxU64(&x19, &x20, 0x0, x18, x15);
146 var x21: u64 = undefined;
147 var x22: u1 = undefined;
148 addcarryxU64(&x21, &x22, x20, x16, x13);
149 var x23: u64 = undefined;
150 var x24: u1 = undefined;
151 addcarryxU64(&x23, &x24, x22, x14, x11);
152 var x25: u64 = undefined;
153 var x26: u1 = undefined;
154 addcarryxU64(&x25, &x26, x24, x12, x9);
155 var x27: u64 = undefined;
156 var x28: u1 = undefined;
157 addcarryxU64(&x27, &x28, x26, x10, x7);
158 const x29 = (@as(u64, x28) + x8);
159 var x30: u64 = undefined;
160 var x31: u64 = undefined;
161 mulxU64(&x30, &x31, x17, 0x6ed46089e88fdc45);
162 var x32: u64 = undefined;
163 var x33: u64 = undefined;
164 mulxU64(&x32, &x33, x30, 0xffffffffffffffff);
165 var x34: u64 = undefined;
166 var x35: u64 = undefined;
167 mulxU64(&x34, &x35, x30, 0xffffffffffffffff);
168 var x36: u64 = undefined;
169 var x37: u64 = undefined;
170 mulxU64(&x36, &x37, x30, 0xffffffffffffffff);
171 var x38: u64 = undefined;
172 var x39: u64 = undefined;
173 mulxU64(&x38, &x39, x30, 0xc7634d81f4372ddf);
174 var x40: u64 = undefined;
175 var x41: u64 = undefined;
176 mulxU64(&x40, &x41, x30, 0x581a0db248b0a77a);
177 var x42: u64 = undefined;
178 var x43: u64 = undefined;
179 mulxU64(&x42, &x43, x30, 0xecec196accc52973);
180 var x44: u64 = undefined;
181 var x45: u1 = undefined;
182 addcarryxU64(&x44, &x45, 0x0, x43, x40);
183 var x46: u64 = undefined;
184 var x47: u1 = undefined;
185 addcarryxU64(&x46, &x47, x45, x41, x38);
186 var x48: u64 = undefined;
187 var x49: u1 = undefined;
188 addcarryxU64(&x48, &x49, x47, x39, x36);
189 var x50: u64 = undefined;
190 var x51: u1 = undefined;
191 addcarryxU64(&x50, &x51, x49, x37, x34);
192 var x52: u64 = undefined;
193 var x53: u1 = undefined;
194 addcarryxU64(&x52, &x53, x51, x35, x32);
195 const x54 = (@as(u64, x53) + x33);
196 var x55: u64 = undefined;
197 var x56: u1 = undefined;
198 addcarryxU64(&x55, &x56, 0x0, x17, x42);
199 var x57: u64 = undefined;
200 var x58: u1 = undefined;
201 addcarryxU64(&x57, &x58, x56, x19, x44);
202 var x59: u64 = undefined;
203 var x60: u1 = undefined;
204 addcarryxU64(&x59, &x60, x58, x21, x46);
205 var x61: u64 = undefined;
206 var x62: u1 = undefined;
207 addcarryxU64(&x61, &x62, x60, x23, x48);
208 var x63: u64 = undefined;
209 var x64: u1 = undefined;
210 addcarryxU64(&x63, &x64, x62, x25, x50);
211 var x65: u64 = undefined;
212 var x66: u1 = undefined;
213 addcarryxU64(&x65, &x66, x64, x27, x52);
214 var x67: u64 = undefined;
215 var x68: u1 = undefined;
216 addcarryxU64(&x67, &x68, x66, x29, x54);
217 var x69: u64 = undefined;
218 var x70: u64 = undefined;
219 mulxU64(&x69, &x70, x1, (arg2[5]));
220 var x71: u64 = undefined;
221 var x72: u64 = undefined;
222 mulxU64(&x71, &x72, x1, (arg2[4]));
223 var x73: u64 = undefined;
224 var x74: u64 = undefined;
225 mulxU64(&x73, &x74, x1, (arg2[3]));
226 var x75: u64 = undefined;
227 var x76: u64 = undefined;
228 mulxU64(&x75, &x76, x1, (arg2[2]));
229 var x77: u64 = undefined;
230 var x78: u64 = undefined;
231 mulxU64(&x77, &x78, x1, (arg2[1]));
232 var x79: u64 = undefined;
233 var x80: u64 = undefined;
234 mulxU64(&x79, &x80, x1, (arg2[0]));
235 var x81: u64 = undefined;
236 var x82: u1 = undefined;
237 addcarryxU64(&x81, &x82, 0x0, x80, x77);
238 var x83: u64 = undefined;
239 var x84: u1 = undefined;
240 addcarryxU64(&x83, &x84, x82, x78, x75);
241 var x85: u64 = undefined;
242 var x86: u1 = undefined;
243 addcarryxU64(&x85, &x86, x84, x76, x73);
244 var x87: u64 = undefined;
245 var x88: u1 = undefined;
246 addcarryxU64(&x87, &x88, x86, x74, x71);
247 var x89: u64 = undefined;
248 var x90: u1 = undefined;
249 addcarryxU64(&x89, &x90, x88, x72, x69);
250 const x91 = (@as(u64, x90) + x70);
251 var x92: u64 = undefined;
252 var x93: u1 = undefined;
253 addcarryxU64(&x92, &x93, 0x0, x57, x79);
254 var x94: u64 = undefined;
255 var x95: u1 = undefined;
256 addcarryxU64(&x94, &x95, x93, x59, x81);
257 var x96: u64 = undefined;
258 var x97: u1 = undefined;
259 addcarryxU64(&x96, &x97, x95, x61, x83);
260 var x98: u64 = undefined;
261 var x99: u1 = undefined;
262 addcarryxU64(&x98, &x99, x97, x63, x85);
263 var x100: u64 = undefined;
264 var x101: u1 = undefined;
265 addcarryxU64(&x100, &x101, x99, x65, x87);
266 var x102: u64 = undefined;
267 var x103: u1 = undefined;
268 addcarryxU64(&x102, &x103, x101, x67, x89);
269 var x104: u64 = undefined;
270 var x105: u1 = undefined;
271 addcarryxU64(&x104, &x105, x103, @as(u64, x68), x91);
272 var x106: u64 = undefined;
273 var x107: u64 = undefined;
274 mulxU64(&x106, &x107, x92, 0x6ed46089e88fdc45);
275 var x108: u64 = undefined;
276 var x109: u64 = undefined;
277 mulxU64(&x108, &x109, x106, 0xffffffffffffffff);
278 var x110: u64 = undefined;
279 var x111: u64 = undefined;
280 mulxU64(&x110, &x111, x106, 0xffffffffffffffff);
281 var x112: u64 = undefined;
282 var x113: u64 = undefined;
283 mulxU64(&x112, &x113, x106, 0xffffffffffffffff);
284 var x114: u64 = undefined;
285 var x115: u64 = undefined;
286 mulxU64(&x114, &x115, x106, 0xc7634d81f4372ddf);
287 var x116: u64 = undefined;
288 var x117: u64 = undefined;
289 mulxU64(&x116, &x117, x106, 0x581a0db248b0a77a);
290 var x118: u64 = undefined;
291 var x119: u64 = undefined;
292 mulxU64(&x118, &x119, x106, 0xecec196accc52973);
293 var x120: u64 = undefined;
294 var x121: u1 = undefined;
295 addcarryxU64(&x120, &x121, 0x0, x119, x116);
296 var x122: u64 = undefined;
297 var x123: u1 = undefined;
298 addcarryxU64(&x122, &x123, x121, x117, x114);
299 var x124: u64 = undefined;
300 var x125: u1 = undefined;
301 addcarryxU64(&x124, &x125, x123, x115, x112);
302 var x126: u64 = undefined;
303 var x127: u1 = undefined;
304 addcarryxU64(&x126, &x127, x125, x113, x110);
305 var x128: u64 = undefined;
306 var x129: u1 = undefined;
307 addcarryxU64(&x128, &x129, x127, x111, x108);
308 const x130 = (@as(u64, x129) + x109);
309 var x131: u64 = undefined;
310 var x132: u1 = undefined;
311 addcarryxU64(&x131, &x132, 0x0, x92, x118);
312 var x133: u64 = undefined;
313 var x134: u1 = undefined;
314 addcarryxU64(&x133, &x134, x132, x94, x120);
315 var x135: u64 = undefined;
316 var x136: u1 = undefined;
317 addcarryxU64(&x135, &x136, x134, x96, x122);
318 var x137: u64 = undefined;
319 var x138: u1 = undefined;
320 addcarryxU64(&x137, &x138, x136, x98, x124);
321 var x139: u64 = undefined;
322 var x140: u1 = undefined;
323 addcarryxU64(&x139, &x140, x138, x100, x126);
324 var x141: u64 = undefined;
325 var x142: u1 = undefined;
326 addcarryxU64(&x141, &x142, x140, x102, x128);
327 var x143: u64 = undefined;
328 var x144: u1 = undefined;
329 addcarryxU64(&x143, &x144, x142, x104, x130);
330 const x145 = (@as(u64, x144) + @as(u64, x105));
331 var x146: u64 = undefined;
332 var x147: u64 = undefined;
333 mulxU64(&x146, &x147, x2, (arg2[5]));
334 var x148: u64 = undefined;
335 var x149: u64 = undefined;
336 mulxU64(&x148, &x149, x2, (arg2[4]));
337 var x150: u64 = undefined;
338 var x151: u64 = undefined;
339 mulxU64(&x150, &x151, x2, (arg2[3]));
340 var x152: u64 = undefined;
341 var x153: u64 = undefined;
342 mulxU64(&x152, &x153, x2, (arg2[2]));
343 var x154: u64 = undefined;
344 var x155: u64 = undefined;
345 mulxU64(&x154, &x155, x2, (arg2[1]));
346 var x156: u64 = undefined;
347 var x157: u64 = undefined;
348 mulxU64(&x156, &x157, x2, (arg2[0]));
349 var x158: u64 = undefined;
350 var x159: u1 = undefined;
351 addcarryxU64(&x158, &x159, 0x0, x157, x154);
352 var x160: u64 = undefined;
353 var x161: u1 = undefined;
354 addcarryxU64(&x160, &x161, x159, x155, x152);
355 var x162: u64 = undefined;
356 var x163: u1 = undefined;
357 addcarryxU64(&x162, &x163, x161, x153, x150);
358 var x164: u64 = undefined;
359 var x165: u1 = undefined;
360 addcarryxU64(&x164, &x165, x163, x151, x148);
361 var x166: u64 = undefined;
362 var x167: u1 = undefined;
363 addcarryxU64(&x166, &x167, x165, x149, x146);
364 const x168 = (@as(u64, x167) + x147);
365 var x169: u64 = undefined;
366 var x170: u1 = undefined;
367 addcarryxU64(&x169, &x170, 0x0, x133, x156);
368 var x171: u64 = undefined;
369 var x172: u1 = undefined;
370 addcarryxU64(&x171, &x172, x170, x135, x158);
371 var x173: u64 = undefined;
372 var x174: u1 = undefined;
373 addcarryxU64(&x173, &x174, x172, x137, x160);
374 var x175: u64 = undefined;
375 var x176: u1 = undefined;
376 addcarryxU64(&x175, &x176, x174, x139, x162);
377 var x177: u64 = undefined;
378 var x178: u1 = undefined;
379 addcarryxU64(&x177, &x178, x176, x141, x164);
380 var x179: u64 = undefined;
381 var x180: u1 = undefined;
382 addcarryxU64(&x179, &x180, x178, x143, x166);
383 var x181: u64 = undefined;
384 var x182: u1 = undefined;
385 addcarryxU64(&x181, &x182, x180, x145, x168);
386 var x183: u64 = undefined;
387 var x184: u64 = undefined;
388 mulxU64(&x183, &x184, x169, 0x6ed46089e88fdc45);
389 var x185: u64 = undefined;
390 var x186: u64 = undefined;
391 mulxU64(&x185, &x186, x183, 0xffffffffffffffff);
392 var x187: u64 = undefined;
393 var x188: u64 = undefined;
394 mulxU64(&x187, &x188, x183, 0xffffffffffffffff);
395 var x189: u64 = undefined;
396 var x190: u64 = undefined;
397 mulxU64(&x189, &x190, x183, 0xffffffffffffffff);
398 var x191: u64 = undefined;
399 var x192: u64 = undefined;
400 mulxU64(&x191, &x192, x183, 0xc7634d81f4372ddf);
401 var x193: u64 = undefined;
402 var x194: u64 = undefined;
403 mulxU64(&x193, &x194, x183, 0x581a0db248b0a77a);
404 var x195: u64 = undefined;
405 var x196: u64 = undefined;
406 mulxU64(&x195, &x196, x183, 0xecec196accc52973);
407 var x197: u64 = undefined;
408 var x198: u1 = undefined;
409 addcarryxU64(&x197, &x198, 0x0, x196, x193);
410 var x199: u64 = undefined;
411 var x200: u1 = undefined;
412 addcarryxU64(&x199, &x200, x198, x194, x191);
413 var x201: u64 = undefined;
414 var x202: u1 = undefined;
415 addcarryxU64(&x201, &x202, x200, x192, x189);
416 var x203: u64 = undefined;
417 var x204: u1 = undefined;
418 addcarryxU64(&x203, &x204, x202, x190, x187);
419 var x205: u64 = undefined;
420 var x206: u1 = undefined;
421 addcarryxU64(&x205, &x206, x204, x188, x185);
422 const x207 = (@as(u64, x206) + x186);
423 var x208: u64 = undefined;
424 var x209: u1 = undefined;
425 addcarryxU64(&x208, &x209, 0x0, x169, x195);
426 var x210: u64 = undefined;
427 var x211: u1 = undefined;
428 addcarryxU64(&x210, &x211, x209, x171, x197);
429 var x212: u64 = undefined;
430 var x213: u1 = undefined;
431 addcarryxU64(&x212, &x213, x211, x173, x199);
432 var x214: u64 = undefined;
433 var x215: u1 = undefined;
434 addcarryxU64(&x214, &x215, x213, x175, x201);
435 var x216: u64 = undefined;
436 var x217: u1 = undefined;
437 addcarryxU64(&x216, &x217, x215, x177, x203);
438 var x218: u64 = undefined;
439 var x219: u1 = undefined;
440 addcarryxU64(&x218, &x219, x217, x179, x205);
441 var x220: u64 = undefined;
442 var x221: u1 = undefined;
443 addcarryxU64(&x220, &x221, x219, x181, x207);
444 const x222 = (@as(u64, x221) + @as(u64, x182));
445 var x223: u64 = undefined;
446 var x224: u64 = undefined;
447 mulxU64(&x223, &x224, x3, (arg2[5]));
448 var x225: u64 = undefined;
449 var x226: u64 = undefined;
450 mulxU64(&x225, &x226, x3, (arg2[4]));
451 var x227: u64 = undefined;
452 var x228: u64 = undefined;
453 mulxU64(&x227, &x228, x3, (arg2[3]));
454 var x229: u64 = undefined;
455 var x230: u64 = undefined;
456 mulxU64(&x229, &x230, x3, (arg2[2]));
457 var x231: u64 = undefined;
458 var x232: u64 = undefined;
459 mulxU64(&x231, &x232, x3, (arg2[1]));
460 var x233: u64 = undefined;
461 var x234: u64 = undefined;
462 mulxU64(&x233, &x234, x3, (arg2[0]));
463 var x235: u64 = undefined;
464 var x236: u1 = undefined;
465 addcarryxU64(&x235, &x236, 0x0, x234, x231);
466 var x237: u64 = undefined;
467 var x238: u1 = undefined;
468 addcarryxU64(&x237, &x238, x236, x232, x229);
469 var x239: u64 = undefined;
470 var x240: u1 = undefined;
471 addcarryxU64(&x239, &x240, x238, x230, x227);
472 var x241: u64 = undefined;
473 var x242: u1 = undefined;
474 addcarryxU64(&x241, &x242, x240, x228, x225);
475 var x243: u64 = undefined;
476 var x244: u1 = undefined;
477 addcarryxU64(&x243, &x244, x242, x226, x223);
478 const x245 = (@as(u64, x244) + x224);
479 var x246: u64 = undefined;
480 var x247: u1 = undefined;
481 addcarryxU64(&x246, &x247, 0x0, x210, x233);
482 var x248: u64 = undefined;
483 var x249: u1 = undefined;
484 addcarryxU64(&x248, &x249, x247, x212, x235);
485 var x250: u64 = undefined;
486 var x251: u1 = undefined;
487 addcarryxU64(&x250, &x251, x249, x214, x237);
488 var x252: u64 = undefined;
489 var x253: u1 = undefined;
490 addcarryxU64(&x252, &x253, x251, x216, x239);
491 var x254: u64 = undefined;
492 var x255: u1 = undefined;
493 addcarryxU64(&x254, &x255, x253, x218, x241);
494 var x256: u64 = undefined;
495 var x257: u1 = undefined;
496 addcarryxU64(&x256, &x257, x255, x220, x243);
497 var x258: u64 = undefined;
498 var x259: u1 = undefined;
499 addcarryxU64(&x258, &x259, x257, x222, x245);
500 var x260: u64 = undefined;
501 var x261: u64 = undefined;
502 mulxU64(&x260, &x261, x246, 0x6ed46089e88fdc45);
503 var x262: u64 = undefined;
504 var x263: u64 = undefined;
505 mulxU64(&x262, &x263, x260, 0xffffffffffffffff);
506 var x264: u64 = undefined;
507 var x265: u64 = undefined;
508 mulxU64(&x264, &x265, x260, 0xffffffffffffffff);
509 var x266: u64 = undefined;
510 var x267: u64 = undefined;
511 mulxU64(&x266, &x267, x260, 0xffffffffffffffff);
512 var x268: u64 = undefined;
513 var x269: u64 = undefined;
514 mulxU64(&x268, &x269, x260, 0xc7634d81f4372ddf);
515 var x270: u64 = undefined;
516 var x271: u64 = undefined;
517 mulxU64(&x270, &x271, x260, 0x581a0db248b0a77a);
518 var x272: u64 = undefined;
519 var x273: u64 = undefined;
520 mulxU64(&x272, &x273, x260, 0xecec196accc52973);
521 var x274: u64 = undefined;
522 var x275: u1 = undefined;
523 addcarryxU64(&x274, &x275, 0x0, x273, x270);
524 var x276: u64 = undefined;
525 var x277: u1 = undefined;
526 addcarryxU64(&x276, &x277, x275, x271, x268);
527 var x278: u64 = undefined;
528 var x279: u1 = undefined;
529 addcarryxU64(&x278, &x279, x277, x269, x266);
530 var x280: u64 = undefined;
531 var x281: u1 = undefined;
532 addcarryxU64(&x280, &x281, x279, x267, x264);
533 var x282: u64 = undefined;
534 var x283: u1 = undefined;
535 addcarryxU64(&x282, &x283, x281, x265, x262);
536 const x284 = (@as(u64, x283) + x263);
537 var x285: u64 = undefined;
538 var x286: u1 = undefined;
539 addcarryxU64(&x285, &x286, 0x0, x246, x272);
540 var x287: u64 = undefined;
541 var x288: u1 = undefined;
542 addcarryxU64(&x287, &x288, x286, x248, x274);
543 var x289: u64 = undefined;
544 var x290: u1 = undefined;
545 addcarryxU64(&x289, &x290, x288, x250, x276);
546 var x291: u64 = undefined;
547 var x292: u1 = undefined;
548 addcarryxU64(&x291, &x292, x290, x252, x278);
549 var x293: u64 = undefined;
550 var x294: u1 = undefined;
551 addcarryxU64(&x293, &x294, x292, x254, x280);
552 var x295: u64 = undefined;
553 var x296: u1 = undefined;
554 addcarryxU64(&x295, &x296, x294, x256, x282);
555 var x297: u64 = undefined;
556 var x298: u1 = undefined;
557 addcarryxU64(&x297, &x298, x296, x258, x284);
558 const x299 = (@as(u64, x298) + @as(u64, x259));
559 var x300: u64 = undefined;
560 var x301: u64 = undefined;
561 mulxU64(&x300, &x301, x4, (arg2[5]));
562 var x302: u64 = undefined;
563 var x303: u64 = undefined;
564 mulxU64(&x302, &x303, x4, (arg2[4]));
565 var x304: u64 = undefined;
566 var x305: u64 = undefined;
567 mulxU64(&x304, &x305, x4, (arg2[3]));
568 var x306: u64 = undefined;
569 var x307: u64 = undefined;
570 mulxU64(&x306, &x307, x4, (arg2[2]));
571 var x308: u64 = undefined;
572 var x309: u64 = undefined;
573 mulxU64(&x308, &x309, x4, (arg2[1]));
574 var x310: u64 = undefined;
575 var x311: u64 = undefined;
576 mulxU64(&x310, &x311, x4, (arg2[0]));
577 var x312: u64 = undefined;
578 var x313: u1 = undefined;
579 addcarryxU64(&x312, &x313, 0x0, x311, x308);
580 var x314: u64 = undefined;
581 var x315: u1 = undefined;
582 addcarryxU64(&x314, &x315, x313, x309, x306);
583 var x316: u64 = undefined;
584 var x317: u1 = undefined;
585 addcarryxU64(&x316, &x317, x315, x307, x304);
586 var x318: u64 = undefined;
587 var x319: u1 = undefined;
588 addcarryxU64(&x318, &x319, x317, x305, x302);
589 var x320: u64 = undefined;
590 var x321: u1 = undefined;
591 addcarryxU64(&x320, &x321, x319, x303, x300);
592 const x322 = (@as(u64, x321) + x301);
593 var x323: u64 = undefined;
594 var x324: u1 = undefined;
595 addcarryxU64(&x323, &x324, 0x0, x287, x310);
596 var x325: u64 = undefined;
597 var x326: u1 = undefined;
598 addcarryxU64(&x325, &x326, x324, x289, x312);
599 var x327: u64 = undefined;
600 var x328: u1 = undefined;
601 addcarryxU64(&x327, &x328, x326, x291, x314);
602 var x329: u64 = undefined;
603 var x330: u1 = undefined;
604 addcarryxU64(&x329, &x330, x328, x293, x316);
605 var x331: u64 = undefined;
606 var x332: u1 = undefined;
607 addcarryxU64(&x331, &x332, x330, x295, x318);
608 var x333: u64 = undefined;
609 var x334: u1 = undefined;
610 addcarryxU64(&x333, &x334, x332, x297, x320);
611 var x335: u64 = undefined;
612 var x336: u1 = undefined;
613 addcarryxU64(&x335, &x336, x334, x299, x322);
614 var x337: u64 = undefined;
615 var x338: u64 = undefined;
616 mulxU64(&x337, &x338, x323, 0x6ed46089e88fdc45);
617 var x339: u64 = undefined;
618 var x340: u64 = undefined;
619 mulxU64(&x339, &x340, x337, 0xffffffffffffffff);
620 var x341: u64 = undefined;
621 var x342: u64 = undefined;
622 mulxU64(&x341, &x342, x337, 0xffffffffffffffff);
623 var x343: u64 = undefined;
624 var x344: u64 = undefined;
625 mulxU64(&x343, &x344, x337, 0xffffffffffffffff);
626 var x345: u64 = undefined;
627 var x346: u64 = undefined;
628 mulxU64(&x345, &x346, x337, 0xc7634d81f4372ddf);
629 var x347: u64 = undefined;
630 var x348: u64 = undefined;
631 mulxU64(&x347, &x348, x337, 0x581a0db248b0a77a);
632 var x349: u64 = undefined;
633 var x350: u64 = undefined;
634 mulxU64(&x349, &x350, x337, 0xecec196accc52973);
635 var x351: u64 = undefined;
636 var x352: u1 = undefined;
637 addcarryxU64(&x351, &x352, 0x0, x350, x347);
638 var x353: u64 = undefined;
639 var x354: u1 = undefined;
640 addcarryxU64(&x353, &x354, x352, x348, x345);
641 var x355: u64 = undefined;
642 var x356: u1 = undefined;
643 addcarryxU64(&x355, &x356, x354, x346, x343);
644 var x357: u64 = undefined;
645 var x358: u1 = undefined;
646 addcarryxU64(&x357, &x358, x356, x344, x341);
647 var x359: u64 = undefined;
648 var x360: u1 = undefined;
649 addcarryxU64(&x359, &x360, x358, x342, x339);
650 const x361 = (@as(u64, x360) + x340);
651 var x362: u64 = undefined;
652 var x363: u1 = undefined;
653 addcarryxU64(&x362, &x363, 0x0, x323, x349);
654 var x364: u64 = undefined;
655 var x365: u1 = undefined;
656 addcarryxU64(&x364, &x365, x363, x325, x351);
657 var x366: u64 = undefined;
658 var x367: u1 = undefined;
659 addcarryxU64(&x366, &x367, x365, x327, x353);
660 var x368: u64 = undefined;
661 var x369: u1 = undefined;
662 addcarryxU64(&x368, &x369, x367, x329, x355);
663 var x370: u64 = undefined;
664 var x371: u1 = undefined;
665 addcarryxU64(&x370, &x371, x369, x331, x357);
666 var x372: u64 = undefined;
667 var x373: u1 = undefined;
668 addcarryxU64(&x372, &x373, x371, x333, x359);
669 var x374: u64 = undefined;
670 var x375: u1 = undefined;
671 addcarryxU64(&x374, &x375, x373, x335, x361);
672 const x376 = (@as(u64, x375) + @as(u64, x336));
673 var x377: u64 = undefined;
674 var x378: u64 = undefined;
675 mulxU64(&x377, &x378, x5, (arg2[5]));
676 var x379: u64 = undefined;
677 var x380: u64 = undefined;
678 mulxU64(&x379, &x380, x5, (arg2[4]));
679 var x381: u64 = undefined;
680 var x382: u64 = undefined;
681 mulxU64(&x381, &x382, x5, (arg2[3]));
682 var x383: u64 = undefined;
683 var x384: u64 = undefined;
684 mulxU64(&x383, &x384, x5, (arg2[2]));
685 var x385: u64 = undefined;
686 var x386: u64 = undefined;
687 mulxU64(&x385, &x386, x5, (arg2[1]));
688 var x387: u64 = undefined;
689 var x388: u64 = undefined;
690 mulxU64(&x387, &x388, x5, (arg2[0]));
691 var x389: u64 = undefined;
692 var x390: u1 = undefined;
693 addcarryxU64(&x389, &x390, 0x0, x388, x385);
694 var x391: u64 = undefined;
695 var x392: u1 = undefined;
696 addcarryxU64(&x391, &x392, x390, x386, x383);
697 var x393: u64 = undefined;
698 var x394: u1 = undefined;
699 addcarryxU64(&x393, &x394, x392, x384, x381);
700 var x395: u64 = undefined;
701 var x396: u1 = undefined;
702 addcarryxU64(&x395, &x396, x394, x382, x379);
703 var x397: u64 = undefined;
704 var x398: u1 = undefined;
705 addcarryxU64(&x397, &x398, x396, x380, x377);
706 const x399 = (@as(u64, x398) + x378);
707 var x400: u64 = undefined;
708 var x401: u1 = undefined;
709 addcarryxU64(&x400, &x401, 0x0, x364, x387);
710 var x402: u64 = undefined;
711 var x403: u1 = undefined;
712 addcarryxU64(&x402, &x403, x401, x366, x389);
713 var x404: u64 = undefined;
714 var x405: u1 = undefined;
715 addcarryxU64(&x404, &x405, x403, x368, x391);
716 var x406: u64 = undefined;
717 var x407: u1 = undefined;
718 addcarryxU64(&x406, &x407, x405, x370, x393);
719 var x408: u64 = undefined;
720 var x409: u1 = undefined;
721 addcarryxU64(&x408, &x409, x407, x372, x395);
722 var x410: u64 = undefined;
723 var x411: u1 = undefined;
724 addcarryxU64(&x410, &x411, x409, x374, x397);
725 var x412: u64 = undefined;
726 var x413: u1 = undefined;
727 addcarryxU64(&x412, &x413, x411, x376, x399);
728 var x414: u64 = undefined;
729 var x415: u64 = undefined;
730 mulxU64(&x414, &x415, x400, 0x6ed46089e88fdc45);
731 var x416: u64 = undefined;
732 var x417: u64 = undefined;
733 mulxU64(&x416, &x417, x414, 0xffffffffffffffff);
734 var x418: u64 = undefined;
735 var x419: u64 = undefined;
736 mulxU64(&x418, &x419, x414, 0xffffffffffffffff);
737 var x420: u64 = undefined;
738 var x421: u64 = undefined;
739 mulxU64(&x420, &x421, x414, 0xffffffffffffffff);
740 var x422: u64 = undefined;
741 var x423: u64 = undefined;
742 mulxU64(&x422, &x423, x414, 0xc7634d81f4372ddf);
743 var x424: u64 = undefined;
744 var x425: u64 = undefined;
745 mulxU64(&x424, &x425, x414, 0x581a0db248b0a77a);
746 var x426: u64 = undefined;
747 var x427: u64 = undefined;
748 mulxU64(&x426, &x427, x414, 0xecec196accc52973);
749 var x428: u64 = undefined;
750 var x429: u1 = undefined;
751 addcarryxU64(&x428, &x429, 0x0, x427, x424);
752 var x430: u64 = undefined;
753 var x431: u1 = undefined;
754 addcarryxU64(&x430, &x431, x429, x425, x422);
755 var x432: u64 = undefined;
756 var x433: u1 = undefined;
757 addcarryxU64(&x432, &x433, x431, x423, x420);
758 var x434: u64 = undefined;
759 var x435: u1 = undefined;
760 addcarryxU64(&x434, &x435, x433, x421, x418);
761 var x436: u64 = undefined;
762 var x437: u1 = undefined;
763 addcarryxU64(&x436, &x437, x435, x419, x416);
764 const x438 = (@as(u64, x437) + x417);
765 var x439: u64 = undefined;
766 var x440: u1 = undefined;
767 addcarryxU64(&x439, &x440, 0x0, x400, x426);
768 var x441: u64 = undefined;
769 var x442: u1 = undefined;
770 addcarryxU64(&x441, &x442, x440, x402, x428);
771 var x443: u64 = undefined;
772 var x444: u1 = undefined;
773 addcarryxU64(&x443, &x444, x442, x404, x430);
774 var x445: u64 = undefined;
775 var x446: u1 = undefined;
776 addcarryxU64(&x445, &x446, x444, x406, x432);
777 var x447: u64 = undefined;
778 var x448: u1 = undefined;
779 addcarryxU64(&x447, &x448, x446, x408, x434);
780 var x449: u64 = undefined;
781 var x450: u1 = undefined;
782 addcarryxU64(&x449, &x450, x448, x410, x436);
783 var x451: u64 = undefined;
784 var x452: u1 = undefined;
785 addcarryxU64(&x451, &x452, x450, x412, x438);
786 const x453 = (@as(u64, x452) + @as(u64, x413));
787 var x454: u64 = undefined;
788 var x455: u1 = undefined;
789 subborrowxU64(&x454, &x455, 0x0, x441, 0xecec196accc52973);
790 var x456: u64 = undefined;
791 var x457: u1 = undefined;
792 subborrowxU64(&x456, &x457, x455, x443, 0x581a0db248b0a77a);
793 var x458: u64 = undefined;
794 var x459: u1 = undefined;
795 subborrowxU64(&x458, &x459, x457, x445, 0xc7634d81f4372ddf);
796 var x460: u64 = undefined;
797 var x461: u1 = undefined;
798 subborrowxU64(&x460, &x461, x459, x447, 0xffffffffffffffff);
799 var x462: u64 = undefined;
800 var x463: u1 = undefined;
801 subborrowxU64(&x462, &x463, x461, x449, 0xffffffffffffffff);
802 var x464: u64 = undefined;
803 var x465: u1 = undefined;
804 subborrowxU64(&x464, &x465, x463, x451, 0xffffffffffffffff);
805 var x466: u64 = undefined;
806 var x467: u1 = undefined;
807 subborrowxU64(&x466, &x467, x465, x453, 0x0);
808 var x468: u64 = undefined;
809 cmovznzU64(&x468, x467, x454, x441);
810 var x469: u64 = undefined;
811 cmovznzU64(&x469, x467, x456, x443);
812 var x470: u64 = undefined;
813 cmovznzU64(&x470, x467, x458, x445);
814 var x471: u64 = undefined;
815 cmovznzU64(&x471, x467, x460, x447);
816 var x472: u64 = undefined;
817 cmovznzU64(&x472, x467, x462, x449);
818 var x473: u64 = undefined;
819 cmovznzU64(&x473, x467, x464, x451);
820 out1[0] = x468;
821 out1[1] = x469;
822 out1[2] = x470;
823 out1[3] = x471;
824 out1[4] = x472;
825 out1[5] = x473;
826}
827
828/// The function square squares a field element in the Montgomery domain.
829///
830/// Preconditions:
831/// 0 ≤ eval arg1 < m
832/// Postconditions:
833/// eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) * eval (from_montgomery arg1)) mod m
834/// 0 ≤ eval out1 < m
835///
836pub fn square(out1: *MontgomeryDomainFieldElement, arg1: MontgomeryDomainFieldElement) void {
837 @setRuntimeSafety(mode == .debug);
838
839 const x1 = (arg1[1]);
840 const x2 = (arg1[2]);
841 const x3 = (arg1[3]);
842 const x4 = (arg1[4]);
843 const x5 = (arg1[5]);
844 const x6 = (arg1[0]);
845 var x7: u64 = undefined;
846 var x8: u64 = undefined;
847 mulxU64(&x7, &x8, x6, (arg1[5]));
848 var x9: u64 = undefined;
849 var x10: u64 = undefined;
850 mulxU64(&x9, &x10, x6, (arg1[4]));
851 var x11: u64 = undefined;
852 var x12: u64 = undefined;
853 mulxU64(&x11, &x12, x6, (arg1[3]));
854 var x13: u64 = undefined;
855 var x14: u64 = undefined;
856 mulxU64(&x13, &x14, x6, (arg1[2]));
857 var x15: u64 = undefined;
858 var x16: u64 = undefined;
859 mulxU64(&x15, &x16, x6, (arg1[1]));
860 var x17: u64 = undefined;
861 var x18: u64 = undefined;
862 mulxU64(&x17, &x18, x6, (arg1[0]));
863 var x19: u64 = undefined;
864 var x20: u1 = undefined;
865 addcarryxU64(&x19, &x20, 0x0, x18, x15);
866 var x21: u64 = undefined;
867 var x22: u1 = undefined;
868 addcarryxU64(&x21, &x22, x20, x16, x13);
869 var x23: u64 = undefined;
870 var x24: u1 = undefined;
871 addcarryxU64(&x23, &x24, x22, x14, x11);
872 var x25: u64 = undefined;
873 var x26: u1 = undefined;
874 addcarryxU64(&x25, &x26, x24, x12, x9);
875 var x27: u64 = undefined;
876 var x28: u1 = undefined;
877 addcarryxU64(&x27, &x28, x26, x10, x7);
878 const x29 = (@as(u64, x28) + x8);
879 var x30: u64 = undefined;
880 var x31: u64 = undefined;
881 mulxU64(&x30, &x31, x17, 0x6ed46089e88fdc45);
882 var x32: u64 = undefined;
883 var x33: u64 = undefined;
884 mulxU64(&x32, &x33, x30, 0xffffffffffffffff);
885 var x34: u64 = undefined;
886 var x35: u64 = undefined;
887 mulxU64(&x34, &x35, x30, 0xffffffffffffffff);
888 var x36: u64 = undefined;
889 var x37: u64 = undefined;
890 mulxU64(&x36, &x37, x30, 0xffffffffffffffff);
891 var x38: u64 = undefined;
892 var x39: u64 = undefined;
893 mulxU64(&x38, &x39, x30, 0xc7634d81f4372ddf);
894 var x40: u64 = undefined;
895 var x41: u64 = undefined;
896 mulxU64(&x40, &x41, x30, 0x581a0db248b0a77a);
897 var x42: u64 = undefined;
898 var x43: u64 = undefined;
899 mulxU64(&x42, &x43, x30, 0xecec196accc52973);
900 var x44: u64 = undefined;
901 var x45: u1 = undefined;
902 addcarryxU64(&x44, &x45, 0x0, x43, x40);
903 var x46: u64 = undefined;
904 var x47: u1 = undefined;
905 addcarryxU64(&x46, &x47, x45, x41, x38);
906 var x48: u64 = undefined;
907 var x49: u1 = undefined;
908 addcarryxU64(&x48, &x49, x47, x39, x36);
909 var x50: u64 = undefined;
910 var x51: u1 = undefined;
911 addcarryxU64(&x50, &x51, x49, x37, x34);
912 var x52: u64 = undefined;
913 var x53: u1 = undefined;
914 addcarryxU64(&x52, &x53, x51, x35, x32);
915 const x54 = (@as(u64, x53) + x33);
916 var x55: u64 = undefined;
917 var x56: u1 = undefined;
918 addcarryxU64(&x55, &x56, 0x0, x17, x42);
919 var x57: u64 = undefined;
920 var x58: u1 = undefined;
921 addcarryxU64(&x57, &x58, x56, x19, x44);
922 var x59: u64 = undefined;
923 var x60: u1 = undefined;
924 addcarryxU64(&x59, &x60, x58, x21, x46);
925 var x61: u64 = undefined;
926 var x62: u1 = undefined;
927 addcarryxU64(&x61, &x62, x60, x23, x48);
928 var x63: u64 = undefined;
929 var x64: u1 = undefined;
930 addcarryxU64(&x63, &x64, x62, x25, x50);
931 var x65: u64 = undefined;
932 var x66: u1 = undefined;
933 addcarryxU64(&x65, &x66, x64, x27, x52);
934 var x67: u64 = undefined;
935 var x68: u1 = undefined;
936 addcarryxU64(&x67, &x68, x66, x29, x54);
937 var x69: u64 = undefined;
938 var x70: u64 = undefined;
939 mulxU64(&x69, &x70, x1, (arg1[5]));
940 var x71: u64 = undefined;
941 var x72: u64 = undefined;
942 mulxU64(&x71, &x72, x1, (arg1[4]));
943 var x73: u64 = undefined;
944 var x74: u64 = undefined;
945 mulxU64(&x73, &x74, x1, (arg1[3]));
946 var x75: u64 = undefined;
947 var x76: u64 = undefined;
948 mulxU64(&x75, &x76, x1, (arg1[2]));
949 var x77: u64 = undefined;
950 var x78: u64 = undefined;
951 mulxU64(&x77, &x78, x1, (arg1[1]));
952 var x79: u64 = undefined;
953 var x80: u64 = undefined;
954 mulxU64(&x79, &x80, x1, (arg1[0]));
955 var x81: u64 = undefined;
956 var x82: u1 = undefined;
957 addcarryxU64(&x81, &x82, 0x0, x80, x77);
958 var x83: u64 = undefined;
959 var x84: u1 = undefined;
960 addcarryxU64(&x83, &x84, x82, x78, x75);
961 var x85: u64 = undefined;
962 var x86: u1 = undefined;
963 addcarryxU64(&x85, &x86, x84, x76, x73);
964 var x87: u64 = undefined;
965 var x88: u1 = undefined;
966 addcarryxU64(&x87, &x88, x86, x74, x71);
967 var x89: u64 = undefined;
968 var x90: u1 = undefined;
969 addcarryxU64(&x89, &x90, x88, x72, x69);
970 const x91 = (@as(u64, x90) + x70);
971 var x92: u64 = undefined;
972 var x93: u1 = undefined;
973 addcarryxU64(&x92, &x93, 0x0, x57, x79);
974 var x94: u64 = undefined;
975 var x95: u1 = undefined;
976 addcarryxU64(&x94, &x95, x93, x59, x81);
977 var x96: u64 = undefined;
978 var x97: u1 = undefined;
979 addcarryxU64(&x96, &x97, x95, x61, x83);
980 var x98: u64 = undefined;
981 var x99: u1 = undefined;
982 addcarryxU64(&x98, &x99, x97, x63, x85);
983 var x100: u64 = undefined;
984 var x101: u1 = undefined;
985 addcarryxU64(&x100, &x101, x99, x65, x87);
986 var x102: u64 = undefined;
987 var x103: u1 = undefined;
988 addcarryxU64(&x102, &x103, x101, x67, x89);
989 var x104: u64 = undefined;
990 var x105: u1 = undefined;
991 addcarryxU64(&x104, &x105, x103, @as(u64, x68), x91);
992 var x106: u64 = undefined;
993 var x107: u64 = undefined;
994 mulxU64(&x106, &x107, x92, 0x6ed46089e88fdc45);
995 var x108: u64 = undefined;
996 var x109: u64 = undefined;
997 mulxU64(&x108, &x109, x106, 0xffffffffffffffff);
998 var x110: u64 = undefined;
999 var x111: u64 = undefined;
1000 mulxU64(&x110, &x111, x106, 0xffffffffffffffff);
1001 var x112: u64 = undefined;
1002 var x113: u64 = undefined;
1003 mulxU64(&x112, &x113, x106, 0xffffffffffffffff);
1004 var x114: u64 = undefined;
1005 var x115: u64 = undefined;
1006 mulxU64(&x114, &x115, x106, 0xc7634d81f4372ddf);
1007 var x116: u64 = undefined;
1008 var x117: u64 = undefined;
1009 mulxU64(&x116, &x117, x106, 0x581a0db248b0a77a);
1010 var x118: u64 = undefined;
1011 var x119: u64 = undefined;
1012 mulxU64(&x118, &x119, x106, 0xecec196accc52973);
1013 var x120: u64 = undefined;
1014 var x121: u1 = undefined;
1015 addcarryxU64(&x120, &x121, 0x0, x119, x116);
1016 var x122: u64 = undefined;
1017 var x123: u1 = undefined;
1018 addcarryxU64(&x122, &x123, x121, x117, x114);
1019 var x124: u64 = undefined;
1020 var x125: u1 = undefined;
1021 addcarryxU64(&x124, &x125, x123, x115, x112);
1022 var x126: u64 = undefined;
1023 var x127: u1 = undefined;
1024 addcarryxU64(&x126, &x127, x125, x113, x110);
1025 var x128: u64 = undefined;
1026 var x129: u1 = undefined;
1027 addcarryxU64(&x128, &x129, x127, x111, x108);
1028 const x130 = (@as(u64, x129) + x109);
1029 var x131: u64 = undefined;
1030 var x132: u1 = undefined;
1031 addcarryxU64(&x131, &x132, 0x0, x92, x118);
1032 var x133: u64 = undefined;
1033 var x134: u1 = undefined;
1034 addcarryxU64(&x133, &x134, x132, x94, x120);
1035 var x135: u64 = undefined;
1036 var x136: u1 = undefined;
1037 addcarryxU64(&x135, &x136, x134, x96, x122);
1038 var x137: u64 = undefined;
1039 var x138: u1 = undefined;
1040 addcarryxU64(&x137, &x138, x136, x98, x124);
1041 var x139: u64 = undefined;
1042 var x140: u1 = undefined;
1043 addcarryxU64(&x139, &x140, x138, x100, x126);
1044 var x141: u64 = undefined;
1045 var x142: u1 = undefined;
1046 addcarryxU64(&x141, &x142, x140, x102, x128);
1047 var x143: u64 = undefined;
1048 var x144: u1 = undefined;
1049 addcarryxU64(&x143, &x144, x142, x104, x130);
1050 const x145 = (@as(u64, x144) + @as(u64, x105));
1051 var x146: u64 = undefined;
1052 var x147: u64 = undefined;
1053 mulxU64(&x146, &x147, x2, (arg1[5]));
1054 var x148: u64 = undefined;
1055 var x149: u64 = undefined;
1056 mulxU64(&x148, &x149, x2, (arg1[4]));
1057 var x150: u64 = undefined;
1058 var x151: u64 = undefined;
1059 mulxU64(&x150, &x151, x2, (arg1[3]));
1060 var x152: u64 = undefined;
1061 var x153: u64 = undefined;
1062 mulxU64(&x152, &x153, x2, (arg1[2]));
1063 var x154: u64 = undefined;
1064 var x155: u64 = undefined;
1065 mulxU64(&x154, &x155, x2, (arg1[1]));
1066 var x156: u64 = undefined;
1067 var x157: u64 = undefined;
1068 mulxU64(&x156, &x157, x2, (arg1[0]));
1069 var x158: u64 = undefined;
1070 var x159: u1 = undefined;
1071 addcarryxU64(&x158, &x159, 0x0, x157, x154);
1072 var x160: u64 = undefined;
1073 var x161: u1 = undefined;
1074 addcarryxU64(&x160, &x161, x159, x155, x152);
1075 var x162: u64 = undefined;
1076 var x163: u1 = undefined;
1077 addcarryxU64(&x162, &x163, x161, x153, x150);
1078 var x164: u64 = undefined;
1079 var x165: u1 = undefined;
1080 addcarryxU64(&x164, &x165, x163, x151, x148);
1081 var x166: u64 = undefined;
1082 var x167: u1 = undefined;
1083 addcarryxU64(&x166, &x167, x165, x149, x146);
1084 const x168 = (@as(u64, x167) + x147);
1085 var x169: u64 = undefined;
1086 var x170: u1 = undefined;
1087 addcarryxU64(&x169, &x170, 0x0, x133, x156);
1088 var x171: u64 = undefined;
1089 var x172: u1 = undefined;
1090 addcarryxU64(&x171, &x172, x170, x135, x158);
1091 var x173: u64 = undefined;
1092 var x174: u1 = undefined;
1093 addcarryxU64(&x173, &x174, x172, x137, x160);
1094 var x175: u64 = undefined;
1095 var x176: u1 = undefined;
1096 addcarryxU64(&x175, &x176, x174, x139, x162);
1097 var x177: u64 = undefined;
1098 var x178: u1 = undefined;
1099 addcarryxU64(&x177, &x178, x176, x141, x164);
1100 var x179: u64 = undefined;
1101 var x180: u1 = undefined;
1102 addcarryxU64(&x179, &x180, x178, x143, x166);
1103 var x181: u64 = undefined;
1104 var x182: u1 = undefined;
1105 addcarryxU64(&x181, &x182, x180, x145, x168);
1106 var x183: u64 = undefined;
1107 var x184: u64 = undefined;
1108 mulxU64(&x183, &x184, x169, 0x6ed46089e88fdc45);
1109 var x185: u64 = undefined;
1110 var x186: u64 = undefined;
1111 mulxU64(&x185, &x186, x183, 0xffffffffffffffff);
1112 var x187: u64 = undefined;
1113 var x188: u64 = undefined;
1114 mulxU64(&x187, &x188, x183, 0xffffffffffffffff);
1115 var x189: u64 = undefined;
1116 var x190: u64 = undefined;
1117 mulxU64(&x189, &x190, x183, 0xffffffffffffffff);
1118 var x191: u64 = undefined;
1119 var x192: u64 = undefined;
1120 mulxU64(&x191, &x192, x183, 0xc7634d81f4372ddf);
1121 var x193: u64 = undefined;
1122 var x194: u64 = undefined;
1123 mulxU64(&x193, &x194, x183, 0x581a0db248b0a77a);
1124 var x195: u64 = undefined;
1125 var x196: u64 = undefined;
1126 mulxU64(&x195, &x196, x183, 0xecec196accc52973);
1127 var x197: u64 = undefined;
1128 var x198: u1 = undefined;
1129 addcarryxU64(&x197, &x198, 0x0, x196, x193);
1130 var x199: u64 = undefined;
1131 var x200: u1 = undefined;
1132 addcarryxU64(&x199, &x200, x198, x194, x191);
1133 var x201: u64 = undefined;
1134 var x202: u1 = undefined;
1135 addcarryxU64(&x201, &x202, x200, x192, x189);
1136 var x203: u64 = undefined;
1137 var x204: u1 = undefined;
1138 addcarryxU64(&x203, &x204, x202, x190, x187);
1139 var x205: u64 = undefined;
1140 var x206: u1 = undefined;
1141 addcarryxU64(&x205, &x206, x204, x188, x185);
1142 const x207 = (@as(u64, x206) + x186);
1143 var x208: u64 = undefined;
1144 var x209: u1 = undefined;
1145 addcarryxU64(&x208, &x209, 0x0, x169, x195);
1146 var x210: u64 = undefined;
1147 var x211: u1 = undefined;
1148 addcarryxU64(&x210, &x211, x209, x171, x197);
1149 var x212: u64 = undefined;
1150 var x213: u1 = undefined;
1151 addcarryxU64(&x212, &x213, x211, x173, x199);
1152 var x214: u64 = undefined;
1153 var x215: u1 = undefined;
1154 addcarryxU64(&x214, &x215, x213, x175, x201);
1155 var x216: u64 = undefined;
1156 var x217: u1 = undefined;
1157 addcarryxU64(&x216, &x217, x215, x177, x203);
1158 var x218: u64 = undefined;
1159 var x219: u1 = undefined;
1160 addcarryxU64(&x218, &x219, x217, x179, x205);
1161 var x220: u64 = undefined;
1162 var x221: u1 = undefined;
1163 addcarryxU64(&x220, &x221, x219, x181, x207);
1164 const x222 = (@as(u64, x221) + @as(u64, x182));
1165 var x223: u64 = undefined;
1166 var x224: u64 = undefined;
1167 mulxU64(&x223, &x224, x3, (arg1[5]));
1168 var x225: u64 = undefined;
1169 var x226: u64 = undefined;
1170 mulxU64(&x225, &x226, x3, (arg1[4]));
1171 var x227: u64 = undefined;
1172 var x228: u64 = undefined;
1173 mulxU64(&x227, &x228, x3, (arg1[3]));
1174 var x229: u64 = undefined;
1175 var x230: u64 = undefined;
1176 mulxU64(&x229, &x230, x3, (arg1[2]));
1177 var x231: u64 = undefined;
1178 var x232: u64 = undefined;
1179 mulxU64(&x231, &x232, x3, (arg1[1]));
1180 var x233: u64 = undefined;
1181 var x234: u64 = undefined;
1182 mulxU64(&x233, &x234, x3, (arg1[0]));
1183 var x235: u64 = undefined;
1184 var x236: u1 = undefined;
1185 addcarryxU64(&x235, &x236, 0x0, x234, x231);
1186 var x237: u64 = undefined;
1187 var x238: u1 = undefined;
1188 addcarryxU64(&x237, &x238, x236, x232, x229);
1189 var x239: u64 = undefined;
1190 var x240: u1 = undefined;
1191 addcarryxU64(&x239, &x240, x238, x230, x227);
1192 var x241: u64 = undefined;
1193 var x242: u1 = undefined;
1194 addcarryxU64(&x241, &x242, x240, x228, x225);
1195 var x243: u64 = undefined;
1196 var x244: u1 = undefined;
1197 addcarryxU64(&x243, &x244, x242, x226, x223);
1198 const x245 = (@as(u64, x244) + x224);
1199 var x246: u64 = undefined;
1200 var x247: u1 = undefined;
1201 addcarryxU64(&x246, &x247, 0x0, x210, x233);
1202 var x248: u64 = undefined;
1203 var x249: u1 = undefined;
1204 addcarryxU64(&x248, &x249, x247, x212, x235);
1205 var x250: u64 = undefined;
1206 var x251: u1 = undefined;
1207 addcarryxU64(&x250, &x251, x249, x214, x237);
1208 var x252: u64 = undefined;
1209 var x253: u1 = undefined;
1210 addcarryxU64(&x252, &x253, x251, x216, x239);
1211 var x254: u64 = undefined;
1212 var x255: u1 = undefined;
1213 addcarryxU64(&x254, &x255, x253, x218, x241);
1214 var x256: u64 = undefined;
1215 var x257: u1 = undefined;
1216 addcarryxU64(&x256, &x257, x255, x220, x243);
1217 var x258: u64 = undefined;
1218 var x259: u1 = undefined;
1219 addcarryxU64(&x258, &x259, x257, x222, x245);
1220 var x260: u64 = undefined;
1221 var x261: u64 = undefined;
1222 mulxU64(&x260, &x261, x246, 0x6ed46089e88fdc45);
1223 var x262: u64 = undefined;
1224 var x263: u64 = undefined;
1225 mulxU64(&x262, &x263, x260, 0xffffffffffffffff);
1226 var x264: u64 = undefined;
1227 var x265: u64 = undefined;
1228 mulxU64(&x264, &x265, x260, 0xffffffffffffffff);
1229 var x266: u64 = undefined;
1230 var x267: u64 = undefined;
1231 mulxU64(&x266, &x267, x260, 0xffffffffffffffff);
1232 var x268: u64 = undefined;
1233 var x269: u64 = undefined;
1234 mulxU64(&x268, &x269, x260, 0xc7634d81f4372ddf);
1235 var x270: u64 = undefined;
1236 var x271: u64 = undefined;
1237 mulxU64(&x270, &x271, x260, 0x581a0db248b0a77a);
1238 var x272: u64 = undefined;
1239 var x273: u64 = undefined;
1240 mulxU64(&x272, &x273, x260, 0xecec196accc52973);
1241 var x274: u64 = undefined;
1242 var x275: u1 = undefined;
1243 addcarryxU64(&x274, &x275, 0x0, x273, x270);
1244 var x276: u64 = undefined;
1245 var x277: u1 = undefined;
1246 addcarryxU64(&x276, &x277, x275, x271, x268);
1247 var x278: u64 = undefined;
1248 var x279: u1 = undefined;
1249 addcarryxU64(&x278, &x279, x277, x269, x266);
1250 var x280: u64 = undefined;
1251 var x281: u1 = undefined;
1252 addcarryxU64(&x280, &x281, x279, x267, x264);
1253 var x282: u64 = undefined;
1254 var x283: u1 = undefined;
1255 addcarryxU64(&x282, &x283, x281, x265, x262);
1256 const x284 = (@as(u64, x283) + x263);
1257 var x285: u64 = undefined;
1258 var x286: u1 = undefined;
1259 addcarryxU64(&x285, &x286, 0x0, x246, x272);
1260 var x287: u64 = undefined;
1261 var x288: u1 = undefined;
1262 addcarryxU64(&x287, &x288, x286, x248, x274);
1263 var x289: u64 = undefined;
1264 var x290: u1 = undefined;
1265 addcarryxU64(&x289, &x290, x288, x250, x276);
1266 var x291: u64 = undefined;
1267 var x292: u1 = undefined;
1268 addcarryxU64(&x291, &x292, x290, x252, x278);
1269 var x293: u64 = undefined;
1270 var x294: u1 = undefined;
1271 addcarryxU64(&x293, &x294, x292, x254, x280);
1272 var x295: u64 = undefined;
1273 var x296: u1 = undefined;
1274 addcarryxU64(&x295, &x296, x294, x256, x282);
1275 var x297: u64 = undefined;
1276 var x298: u1 = undefined;
1277 addcarryxU64(&x297, &x298, x296, x258, x284);
1278 const x299 = (@as(u64, x298) + @as(u64, x259));
1279 var x300: u64 = undefined;
1280 var x301: u64 = undefined;
1281 mulxU64(&x300, &x301, x4, (arg1[5]));
1282 var x302: u64 = undefined;
1283 var x303: u64 = undefined;
1284 mulxU64(&x302, &x303, x4, (arg1[4]));
1285 var x304: u64 = undefined;
1286 var x305: u64 = undefined;
1287 mulxU64(&x304, &x305, x4, (arg1[3]));
1288 var x306: u64 = undefined;
1289 var x307: u64 = undefined;
1290 mulxU64(&x306, &x307, x4, (arg1[2]));
1291 var x308: u64 = undefined;
1292 var x309: u64 = undefined;
1293 mulxU64(&x308, &x309, x4, (arg1[1]));
1294 var x310: u64 = undefined;
1295 var x311: u64 = undefined;
1296 mulxU64(&x310, &x311, x4, (arg1[0]));
1297 var x312: u64 = undefined;
1298 var x313: u1 = undefined;
1299 addcarryxU64(&x312, &x313, 0x0, x311, x308);
1300 var x314: u64 = undefined;
1301 var x315: u1 = undefined;
1302 addcarryxU64(&x314, &x315, x313, x309, x306);
1303 var x316: u64 = undefined;
1304 var x317: u1 = undefined;
1305 addcarryxU64(&x316, &x317, x315, x307, x304);
1306 var x318: u64 = undefined;
1307 var x319: u1 = undefined;
1308 addcarryxU64(&x318, &x319, x317, x305, x302);
1309 var x320: u64 = undefined;
1310 var x321: u1 = undefined;
1311 addcarryxU64(&x320, &x321, x319, x303, x300);
1312 const x322 = (@as(u64, x321) + x301);
1313 var x323: u64 = undefined;
1314 var x324: u1 = undefined;
1315 addcarryxU64(&x323, &x324, 0x0, x287, x310);
1316 var x325: u64 = undefined;
1317 var x326: u1 = undefined;
1318 addcarryxU64(&x325, &x326, x324, x289, x312);
1319 var x327: u64 = undefined;
1320 var x328: u1 = undefined;
1321 addcarryxU64(&x327, &x328, x326, x291, x314);
1322 var x329: u64 = undefined;
1323 var x330: u1 = undefined;
1324 addcarryxU64(&x329, &x330, x328, x293, x316);
1325 var x331: u64 = undefined;
1326 var x332: u1 = undefined;
1327 addcarryxU64(&x331, &x332, x330, x295, x318);
1328 var x333: u64 = undefined;
1329 var x334: u1 = undefined;
1330 addcarryxU64(&x333, &x334, x332, x297, x320);
1331 var x335: u64 = undefined;
1332 var x336: u1 = undefined;
1333 addcarryxU64(&x335, &x336, x334, x299, x322);
1334 var x337: u64 = undefined;
1335 var x338: u64 = undefined;
1336 mulxU64(&x337, &x338, x323, 0x6ed46089e88fdc45);
1337 var x339: u64 = undefined;
1338 var x340: u64 = undefined;
1339 mulxU64(&x339, &x340, x337, 0xffffffffffffffff);
1340 var x341: u64 = undefined;
1341 var x342: u64 = undefined;
1342 mulxU64(&x341, &x342, x337, 0xffffffffffffffff);
1343 var x343: u64 = undefined;
1344 var x344: u64 = undefined;
1345 mulxU64(&x343, &x344, x337, 0xffffffffffffffff);
1346 var x345: u64 = undefined;
1347 var x346: u64 = undefined;
1348 mulxU64(&x345, &x346, x337, 0xc7634d81f4372ddf);
1349 var x347: u64 = undefined;
1350 var x348: u64 = undefined;
1351 mulxU64(&x347, &x348, x337, 0x581a0db248b0a77a);
1352 var x349: u64 = undefined;
1353 var x350: u64 = undefined;
1354 mulxU64(&x349, &x350, x337, 0xecec196accc52973);
1355 var x351: u64 = undefined;
1356 var x352: u1 = undefined;
1357 addcarryxU64(&x351, &x352, 0x0, x350, x347);
1358 var x353: u64 = undefined;
1359 var x354: u1 = undefined;
1360 addcarryxU64(&x353, &x354, x352, x348, x345);
1361 var x355: u64 = undefined;
1362 var x356: u1 = undefined;
1363 addcarryxU64(&x355, &x356, x354, x346, x343);
1364 var x357: u64 = undefined;
1365 var x358: u1 = undefined;
1366 addcarryxU64(&x357, &x358, x356, x344, x341);
1367 var x359: u64 = undefined;
1368 var x360: u1 = undefined;
1369 addcarryxU64(&x359, &x360, x358, x342, x339);
1370 const x361 = (@as(u64, x360) + x340);
1371 var x362: u64 = undefined;
1372 var x363: u1 = undefined;
1373 addcarryxU64(&x362, &x363, 0x0, x323, x349);
1374 var x364: u64 = undefined;
1375 var x365: u1 = undefined;
1376 addcarryxU64(&x364, &x365, x363, x325, x351);
1377 var x366: u64 = undefined;
1378 var x367: u1 = undefined;
1379 addcarryxU64(&x366, &x367, x365, x327, x353);
1380 var x368: u64 = undefined;
1381 var x369: u1 = undefined;
1382 addcarryxU64(&x368, &x369, x367, x329, x355);
1383 var x370: u64 = undefined;
1384 var x371: u1 = undefined;
1385 addcarryxU64(&x370, &x371, x369, x331, x357);
1386 var x372: u64 = undefined;
1387 var x373: u1 = undefined;
1388 addcarryxU64(&x372, &x373, x371, x333, x359);
1389 var x374: u64 = undefined;
1390 var x375: u1 = undefined;
1391 addcarryxU64(&x374, &x375, x373, x335, x361);
1392 const x376 = (@as(u64, x375) + @as(u64, x336));
1393 var x377: u64 = undefined;
1394 var x378: u64 = undefined;
1395 mulxU64(&x377, &x378, x5, (arg1[5]));
1396 var x379: u64 = undefined;
1397 var x380: u64 = undefined;
1398 mulxU64(&x379, &x380, x5, (arg1[4]));
1399 var x381: u64 = undefined;
1400 var x382: u64 = undefined;
1401 mulxU64(&x381, &x382, x5, (arg1[3]));
1402 var x383: u64 = undefined;
1403 var x384: u64 = undefined;
1404 mulxU64(&x383, &x384, x5, (arg1[2]));
1405 var x385: u64 = undefined;
1406 var x386: u64 = undefined;
1407 mulxU64(&x385, &x386, x5, (arg1[1]));
1408 var x387: u64 = undefined;
1409 var x388: u64 = undefined;
1410 mulxU64(&x387, &x388, x5, (arg1[0]));
1411 var x389: u64 = undefined;
1412 var x390: u1 = undefined;
1413 addcarryxU64(&x389, &x390, 0x0, x388, x385);
1414 var x391: u64 = undefined;
1415 var x392: u1 = undefined;
1416 addcarryxU64(&x391, &x392, x390, x386, x383);
1417 var x393: u64 = undefined;
1418 var x394: u1 = undefined;
1419 addcarryxU64(&x393, &x394, x392, x384, x381);
1420 var x395: u64 = undefined;
1421 var x396: u1 = undefined;
1422 addcarryxU64(&x395, &x396, x394, x382, x379);
1423 var x397: u64 = undefined;
1424 var x398: u1 = undefined;
1425 addcarryxU64(&x397, &x398, x396, x380, x377);
1426 const x399 = (@as(u64, x398) + x378);
1427 var x400: u64 = undefined;
1428 var x401: u1 = undefined;
1429 addcarryxU64(&x400, &x401, 0x0, x364, x387);
1430 var x402: u64 = undefined;
1431 var x403: u1 = undefined;
1432 addcarryxU64(&x402, &x403, x401, x366, x389);
1433 var x404: u64 = undefined;
1434 var x405: u1 = undefined;
1435 addcarryxU64(&x404, &x405, x403, x368, x391);
1436 var x406: u64 = undefined;
1437 var x407: u1 = undefined;
1438 addcarryxU64(&x406, &x407, x405, x370, x393);
1439 var x408: u64 = undefined;
1440 var x409: u1 = undefined;
1441 addcarryxU64(&x408, &x409, x407, x372, x395);
1442 var x410: u64 = undefined;
1443 var x411: u1 = undefined;
1444 addcarryxU64(&x410, &x411, x409, x374, x397);
1445 var x412: u64 = undefined;
1446 var x413: u1 = undefined;
1447 addcarryxU64(&x412, &x413, x411, x376, x399);
1448 var x414: u64 = undefined;
1449 var x415: u64 = undefined;
1450 mulxU64(&x414, &x415, x400, 0x6ed46089e88fdc45);
1451 var x416: u64 = undefined;
1452 var x417: u64 = undefined;
1453 mulxU64(&x416, &x417, x414, 0xffffffffffffffff);
1454 var x418: u64 = undefined;
1455 var x419: u64 = undefined;
1456 mulxU64(&x418, &x419, x414, 0xffffffffffffffff);
1457 var x420: u64 = undefined;
1458 var x421: u64 = undefined;
1459 mulxU64(&x420, &x421, x414, 0xffffffffffffffff);
1460 var x422: u64 = undefined;
1461 var x423: u64 = undefined;
1462 mulxU64(&x422, &x423, x414, 0xc7634d81f4372ddf);
1463 var x424: u64 = undefined;
1464 var x425: u64 = undefined;
1465 mulxU64(&x424, &x425, x414, 0x581a0db248b0a77a);
1466 var x426: u64 = undefined;
1467 var x427: u64 = undefined;
1468 mulxU64(&x426, &x427, x414, 0xecec196accc52973);
1469 var x428: u64 = undefined;
1470 var x429: u1 = undefined;
1471 addcarryxU64(&x428, &x429, 0x0, x427, x424);
1472 var x430: u64 = undefined;
1473 var x431: u1 = undefined;
1474 addcarryxU64(&x430, &x431, x429, x425, x422);
1475 var x432: u64 = undefined;
1476 var x433: u1 = undefined;
1477 addcarryxU64(&x432, &x433, x431, x423, x420);
1478 var x434: u64 = undefined;
1479 var x435: u1 = undefined;
1480 addcarryxU64(&x434, &x435, x433, x421, x418);
1481 var x436: u64 = undefined;
1482 var x437: u1 = undefined;
1483 addcarryxU64(&x436, &x437, x435, x419, x416);
1484 const x438 = (@as(u64, x437) + x417);
1485 var x439: u64 = undefined;
1486 var x440: u1 = undefined;
1487 addcarryxU64(&x439, &x440, 0x0, x400, x426);
1488 var x441: u64 = undefined;
1489 var x442: u1 = undefined;
1490 addcarryxU64(&x441, &x442, x440, x402, x428);
1491 var x443: u64 = undefined;
1492 var x444: u1 = undefined;
1493 addcarryxU64(&x443, &x444, x442, x404, x430);
1494 var x445: u64 = undefined;
1495 var x446: u1 = undefined;
1496 addcarryxU64(&x445, &x446, x444, x406, x432);
1497 var x447: u64 = undefined;
1498 var x448: u1 = undefined;
1499 addcarryxU64(&x447, &x448, x446, x408, x434);
1500 var x449: u64 = undefined;
1501 var x450: u1 = undefined;
1502 addcarryxU64(&x449, &x450, x448, x410, x436);
1503 var x451: u64 = undefined;
1504 var x452: u1 = undefined;
1505 addcarryxU64(&x451, &x452, x450, x412, x438);
1506 const x453 = (@as(u64, x452) + @as(u64, x413));
1507 var x454: u64 = undefined;
1508 var x455: u1 = undefined;
1509 subborrowxU64(&x454, &x455, 0x0, x441, 0xecec196accc52973);
1510 var x456: u64 = undefined;
1511 var x457: u1 = undefined;
1512 subborrowxU64(&x456, &x457, x455, x443, 0x581a0db248b0a77a);
1513 var x458: u64 = undefined;
1514 var x459: u1 = undefined;
1515 subborrowxU64(&x458, &x459, x457, x445, 0xc7634d81f4372ddf);
1516 var x460: u64 = undefined;
1517 var x461: u1 = undefined;
1518 subborrowxU64(&x460, &x461, x459, x447, 0xffffffffffffffff);
1519 var x462: u64 = undefined;
1520 var x463: u1 = undefined;
1521 subborrowxU64(&x462, &x463, x461, x449, 0xffffffffffffffff);
1522 var x464: u64 = undefined;
1523 var x465: u1 = undefined;
1524 subborrowxU64(&x464, &x465, x463, x451, 0xffffffffffffffff);
1525 var x466: u64 = undefined;
1526 var x467: u1 = undefined;
1527 subborrowxU64(&x466, &x467, x465, x453, 0x0);
1528 var x468: u64 = undefined;
1529 cmovznzU64(&x468, x467, x454, x441);
1530 var x469: u64 = undefined;
1531 cmovznzU64(&x469, x467, x456, x443);
1532 var x470: u64 = undefined;
1533 cmovznzU64(&x470, x467, x458, x445);
1534 var x471: u64 = undefined;
1535 cmovznzU64(&x471, x467, x460, x447);
1536 var x472: u64 = undefined;
1537 cmovznzU64(&x472, x467, x462, x449);
1538 var x473: u64 = undefined;
1539 cmovznzU64(&x473, x467, x464, x451);
1540 out1[0] = x468;
1541 out1[1] = x469;
1542 out1[2] = x470;
1543 out1[3] = x471;
1544 out1[4] = x472;
1545 out1[5] = x473;
1546}
1547
1548/// The function add adds two field elements in the Montgomery domain.
1549///
1550/// Preconditions:
1551/// 0 ≤ eval arg1 < m
1552/// 0 ≤ eval arg2 < m
1553/// Postconditions:
1554/// eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) + eval (from_montgomery arg2)) mod m
1555/// 0 ≤ eval out1 < m
1556///
1557pub fn add(out1: *MontgomeryDomainFieldElement, arg1: MontgomeryDomainFieldElement, arg2: MontgomeryDomainFieldElement) void {
1558 @setRuntimeSafety(mode == .debug);
1559
1560 var x1: u64 = undefined;
1561 var x2: u1 = undefined;
1562 addcarryxU64(&x1, &x2, 0x0, (arg1[0]), (arg2[0]));
1563 var x3: u64 = undefined;
1564 var x4: u1 = undefined;
1565 addcarryxU64(&x3, &x4, x2, (arg1[1]), (arg2[1]));
1566 var x5: u64 = undefined;
1567 var x6: u1 = undefined;
1568 addcarryxU64(&x5, &x6, x4, (arg1[2]), (arg2[2]));
1569 var x7: u64 = undefined;
1570 var x8: u1 = undefined;
1571 addcarryxU64(&x7, &x8, x6, (arg1[3]), (arg2[3]));
1572 var x9: u64 = undefined;
1573 var x10: u1 = undefined;
1574 addcarryxU64(&x9, &x10, x8, (arg1[4]), (arg2[4]));
1575 var x11: u64 = undefined;
1576 var x12: u1 = undefined;
1577 addcarryxU64(&x11, &x12, x10, (arg1[5]), (arg2[5]));
1578 var x13: u64 = undefined;
1579 var x14: u1 = undefined;
1580 subborrowxU64(&x13, &x14, 0x0, x1, 0xecec196accc52973);
1581 var x15: u64 = undefined;
1582 var x16: u1 = undefined;
1583 subborrowxU64(&x15, &x16, x14, x3, 0x581a0db248b0a77a);
1584 var x17: u64 = undefined;
1585 var x18: u1 = undefined;
1586 subborrowxU64(&x17, &x18, x16, x5, 0xc7634d81f4372ddf);
1587 var x19: u64 = undefined;
1588 var x20: u1 = undefined;
1589 subborrowxU64(&x19, &x20, x18, x7, 0xffffffffffffffff);
1590 var x21: u64 = undefined;
1591 var x22: u1 = undefined;
1592 subborrowxU64(&x21, &x22, x20, x9, 0xffffffffffffffff);
1593 var x23: u64 = undefined;
1594 var x24: u1 = undefined;
1595 subborrowxU64(&x23, &x24, x22, x11, 0xffffffffffffffff);
1596 var x25: u64 = undefined;
1597 var x26: u1 = undefined;
1598 subborrowxU64(&x25, &x26, x24, @as(u64, x12), 0x0);
1599 var x27: u64 = undefined;
1600 cmovznzU64(&x27, x26, x13, x1);
1601 var x28: u64 = undefined;
1602 cmovznzU64(&x28, x26, x15, x3);
1603 var x29: u64 = undefined;
1604 cmovznzU64(&x29, x26, x17, x5);
1605 var x30: u64 = undefined;
1606 cmovznzU64(&x30, x26, x19, x7);
1607 var x31: u64 = undefined;
1608 cmovznzU64(&x31, x26, x21, x9);
1609 var x32: u64 = undefined;
1610 cmovznzU64(&x32, x26, x23, x11);
1611 out1[0] = x27;
1612 out1[1] = x28;
1613 out1[2] = x29;
1614 out1[3] = x30;
1615 out1[4] = x31;
1616 out1[5] = x32;
1617}
1618
1619/// The function sub subtracts two field elements in the Montgomery domain.
1620///
1621/// Preconditions:
1622/// 0 ≤ eval arg1 < m
1623/// 0 ≤ eval arg2 < m
1624/// Postconditions:
1625/// eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) - eval (from_montgomery arg2)) mod m
1626/// 0 ≤ eval out1 < m
1627///
1628pub fn sub(out1: *MontgomeryDomainFieldElement, arg1: MontgomeryDomainFieldElement, arg2: MontgomeryDomainFieldElement) void {
1629 @setRuntimeSafety(mode == .debug);
1630
1631 var x1: u64 = undefined;
1632 var x2: u1 = undefined;
1633 subborrowxU64(&x1, &x2, 0x0, (arg1[0]), (arg2[0]));
1634 var x3: u64 = undefined;
1635 var x4: u1 = undefined;
1636 subborrowxU64(&x3, &x4, x2, (arg1[1]), (arg2[1]));
1637 var x5: u64 = undefined;
1638 var x6: u1 = undefined;
1639 subborrowxU64(&x5, &x6, x4, (arg1[2]), (arg2[2]));
1640 var x7: u64 = undefined;
1641 var x8: u1 = undefined;
1642 subborrowxU64(&x7, &x8, x6, (arg1[3]), (arg2[3]));
1643 var x9: u64 = undefined;
1644 var x10: u1 = undefined;
1645 subborrowxU64(&x9, &x10, x8, (arg1[4]), (arg2[4]));
1646 var x11: u64 = undefined;
1647 var x12: u1 = undefined;
1648 subborrowxU64(&x11, &x12, x10, (arg1[5]), (arg2[5]));
1649 var x13: u64 = undefined;
1650 cmovznzU64(&x13, x12, 0x0, 0xffffffffffffffff);
1651 var x14: u64 = undefined;
1652 var x15: u1 = undefined;
1653 addcarryxU64(&x14, &x15, 0x0, x1, (x13 & 0xecec196accc52973));
1654 var x16: u64 = undefined;
1655 var x17: u1 = undefined;
1656 addcarryxU64(&x16, &x17, x15, x3, (x13 & 0x581a0db248b0a77a));
1657 var x18: u64 = undefined;
1658 var x19: u1 = undefined;
1659 addcarryxU64(&x18, &x19, x17, x5, (x13 & 0xc7634d81f4372ddf));
1660 var x20: u64 = undefined;
1661 var x21: u1 = undefined;
1662 addcarryxU64(&x20, &x21, x19, x7, x13);
1663 var x22: u64 = undefined;
1664 var x23: u1 = undefined;
1665 addcarryxU64(&x22, &x23, x21, x9, x13);
1666 var x24: u64 = undefined;
1667 var x25: u1 = undefined;
1668 addcarryxU64(&x24, &x25, x23, x11, x13);
1669 out1[0] = x14;
1670 out1[1] = x16;
1671 out1[2] = x18;
1672 out1[3] = x20;
1673 out1[4] = x22;
1674 out1[5] = x24;
1675}
1676
1677/// The function opp negates a field element in the Montgomery domain.
1678///
1679/// Preconditions:
1680/// 0 ≤ eval arg1 < m
1681/// Postconditions:
1682/// eval (from_montgomery out1) mod m = -eval (from_montgomery arg1) mod m
1683/// 0 ≤ eval out1 < m
1684///
1685pub fn opp(out1: *MontgomeryDomainFieldElement, arg1: MontgomeryDomainFieldElement) void {
1686 @setRuntimeSafety(mode == .debug);
1687
1688 var x1: u64 = undefined;
1689 var x2: u1 = undefined;
1690 subborrowxU64(&x1, &x2, 0x0, 0x0, (arg1[0]));
1691 var x3: u64 = undefined;
1692 var x4: u1 = undefined;
1693 subborrowxU64(&x3, &x4, x2, 0x0, (arg1[1]));
1694 var x5: u64 = undefined;
1695 var x6: u1 = undefined;
1696 subborrowxU64(&x5, &x6, x4, 0x0, (arg1[2]));
1697 var x7: u64 = undefined;
1698 var x8: u1 = undefined;
1699 subborrowxU64(&x7, &x8, x6, 0x0, (arg1[3]));
1700 var x9: u64 = undefined;
1701 var x10: u1 = undefined;
1702 subborrowxU64(&x9, &x10, x8, 0x0, (arg1[4]));
1703 var x11: u64 = undefined;
1704 var x12: u1 = undefined;
1705 subborrowxU64(&x11, &x12, x10, 0x0, (arg1[5]));
1706 var x13: u64 = undefined;
1707 cmovznzU64(&x13, x12, 0x0, 0xffffffffffffffff);
1708 var x14: u64 = undefined;
1709 var x15: u1 = undefined;
1710 addcarryxU64(&x14, &x15, 0x0, x1, (x13 & 0xecec196accc52973));
1711 var x16: u64 = undefined;
1712 var x17: u1 = undefined;
1713 addcarryxU64(&x16, &x17, x15, x3, (x13 & 0x581a0db248b0a77a));
1714 var x18: u64 = undefined;
1715 var x19: u1 = undefined;
1716 addcarryxU64(&x18, &x19, x17, x5, (x13 & 0xc7634d81f4372ddf));
1717 var x20: u64 = undefined;
1718 var x21: u1 = undefined;
1719 addcarryxU64(&x20, &x21, x19, x7, x13);
1720 var x22: u64 = undefined;
1721 var x23: u1 = undefined;
1722 addcarryxU64(&x22, &x23, x21, x9, x13);
1723 var x24: u64 = undefined;
1724 var x25: u1 = undefined;
1725 addcarryxU64(&x24, &x25, x23, x11, x13);
1726 out1[0] = x14;
1727 out1[1] = x16;
1728 out1[2] = x18;
1729 out1[3] = x20;
1730 out1[4] = x22;
1731 out1[5] = x24;
1732}
1733
1734/// The function fromMontgomery translates a field element out of the Montgomery domain.
1735///
1736/// Preconditions:
1737/// 0 ≤ eval arg1 < m
1738/// Postconditions:
1739/// eval out1 mod m = (eval arg1 * ((2^64)⁻¹ mod m)^6) mod m
1740/// 0 ≤ eval out1 < m
1741///
1742pub fn fromMontgomery(out1: *NonMontgomeryDomainFieldElement, arg1: MontgomeryDomainFieldElement) void {
1743 @setRuntimeSafety(mode == .debug);
1744
1745 const x1 = (arg1[0]);
1746 var x2: u64 = undefined;
1747 var x3: u64 = undefined;
1748 mulxU64(&x2, &x3, x1, 0x6ed46089e88fdc45);
1749 var x4: u64 = undefined;
1750 var x5: u64 = undefined;
1751 mulxU64(&x4, &x5, x2, 0xffffffffffffffff);
1752 var x6: u64 = undefined;
1753 var x7: u64 = undefined;
1754 mulxU64(&x6, &x7, x2, 0xffffffffffffffff);
1755 var x8: u64 = undefined;
1756 var x9: u64 = undefined;
1757 mulxU64(&x8, &x9, x2, 0xffffffffffffffff);
1758 var x10: u64 = undefined;
1759 var x11: u64 = undefined;
1760 mulxU64(&x10, &x11, x2, 0xc7634d81f4372ddf);
1761 var x12: u64 = undefined;
1762 var x13: u64 = undefined;
1763 mulxU64(&x12, &x13, x2, 0x581a0db248b0a77a);
1764 var x14: u64 = undefined;
1765 var x15: u64 = undefined;
1766 mulxU64(&x14, &x15, x2, 0xecec196accc52973);
1767 var x16: u64 = undefined;
1768 var x17: u1 = undefined;
1769 addcarryxU64(&x16, &x17, 0x0, x15, x12);
1770 var x18: u64 = undefined;
1771 var x19: u1 = undefined;
1772 addcarryxU64(&x18, &x19, x17, x13, x10);
1773 var x20: u64 = undefined;
1774 var x21: u1 = undefined;
1775 addcarryxU64(&x20, &x21, x19, x11, x8);
1776 var x22: u64 = undefined;
1777 var x23: u1 = undefined;
1778 addcarryxU64(&x22, &x23, x21, x9, x6);
1779 var x24: u64 = undefined;
1780 var x25: u1 = undefined;
1781 addcarryxU64(&x24, &x25, x23, x7, x4);
1782 var x26: u64 = undefined;
1783 var x27: u1 = undefined;
1784 addcarryxU64(&x26, &x27, 0x0, x1, x14);
1785 var x28: u64 = undefined;
1786 var x29: u1 = undefined;
1787 addcarryxU64(&x28, &x29, x27, 0x0, x16);
1788 var x30: u64 = undefined;
1789 var x31: u1 = undefined;
1790 addcarryxU64(&x30, &x31, x29, 0x0, x18);
1791 var x32: u64 = undefined;
1792 var x33: u1 = undefined;
1793 addcarryxU64(&x32, &x33, x31, 0x0, x20);
1794 var x34: u64 = undefined;
1795 var x35: u1 = undefined;
1796 addcarryxU64(&x34, &x35, x33, 0x0, x22);
1797 var x36: u64 = undefined;
1798 var x37: u1 = undefined;
1799 addcarryxU64(&x36, &x37, x35, 0x0, x24);
1800 var x38: u64 = undefined;
1801 var x39: u1 = undefined;
1802 addcarryxU64(&x38, &x39, x37, 0x0, (@as(u64, x25) + x5));
1803 var x40: u64 = undefined;
1804 var x41: u1 = undefined;
1805 addcarryxU64(&x40, &x41, 0x0, x28, (arg1[1]));
1806 var x42: u64 = undefined;
1807 var x43: u1 = undefined;
1808 addcarryxU64(&x42, &x43, x41, x30, 0x0);
1809 var x44: u64 = undefined;
1810 var x45: u1 = undefined;
1811 addcarryxU64(&x44, &x45, x43, x32, 0x0);
1812 var x46: u64 = undefined;
1813 var x47: u1 = undefined;
1814 addcarryxU64(&x46, &x47, x45, x34, 0x0);
1815 var x48: u64 = undefined;
1816 var x49: u1 = undefined;
1817 addcarryxU64(&x48, &x49, x47, x36, 0x0);
1818 var x50: u64 = undefined;
1819 var x51: u1 = undefined;
1820 addcarryxU64(&x50, &x51, x49, x38, 0x0);
1821 var x52: u64 = undefined;
1822 var x53: u64 = undefined;
1823 mulxU64(&x52, &x53, x40, 0x6ed46089e88fdc45);
1824 var x54: u64 = undefined;
1825 var x55: u64 = undefined;
1826 mulxU64(&x54, &x55, x52, 0xffffffffffffffff);
1827 var x56: u64 = undefined;
1828 var x57: u64 = undefined;
1829 mulxU64(&x56, &x57, x52, 0xffffffffffffffff);
1830 var x58: u64 = undefined;
1831 var x59: u64 = undefined;
1832 mulxU64(&x58, &x59, x52, 0xffffffffffffffff);
1833 var x60: u64 = undefined;
1834 var x61: u64 = undefined;
1835 mulxU64(&x60, &x61, x52, 0xc7634d81f4372ddf);
1836 var x62: u64 = undefined;
1837 var x63: u64 = undefined;
1838 mulxU64(&x62, &x63, x52, 0x581a0db248b0a77a);
1839 var x64: u64 = undefined;
1840 var x65: u64 = undefined;
1841 mulxU64(&x64, &x65, x52, 0xecec196accc52973);
1842 var x66: u64 = undefined;
1843 var x67: u1 = undefined;
1844 addcarryxU64(&x66, &x67, 0x0, x65, x62);
1845 var x68: u64 = undefined;
1846 var x69: u1 = undefined;
1847 addcarryxU64(&x68, &x69, x67, x63, x60);
1848 var x70: u64 = undefined;
1849 var x71: u1 = undefined;
1850 addcarryxU64(&x70, &x71, x69, x61, x58);
1851 var x72: u64 = undefined;
1852 var x73: u1 = undefined;
1853 addcarryxU64(&x72, &x73, x71, x59, x56);
1854 var x74: u64 = undefined;
1855 var x75: u1 = undefined;
1856 addcarryxU64(&x74, &x75, x73, x57, x54);
1857 var x76: u64 = undefined;
1858 var x77: u1 = undefined;
1859 addcarryxU64(&x76, &x77, 0x0, x40, x64);
1860 var x78: u64 = undefined;
1861 var x79: u1 = undefined;
1862 addcarryxU64(&x78, &x79, x77, x42, x66);
1863 var x80: u64 = undefined;
1864 var x81: u1 = undefined;
1865 addcarryxU64(&x80, &x81, x79, x44, x68);
1866 var x82: u64 = undefined;
1867 var x83: u1 = undefined;
1868 addcarryxU64(&x82, &x83, x81, x46, x70);
1869 var x84: u64 = undefined;
1870 var x85: u1 = undefined;
1871 addcarryxU64(&x84, &x85, x83, x48, x72);
1872 var x86: u64 = undefined;
1873 var x87: u1 = undefined;
1874 addcarryxU64(&x86, &x87, x85, x50, x74);
1875 var x88: u64 = undefined;
1876 var x89: u1 = undefined;
1877 addcarryxU64(&x88, &x89, x87, (@as(u64, x51) + @as(u64, x39)), (@as(u64, x75) + x55));
1878 var x90: u64 = undefined;
1879 var x91: u1 = undefined;
1880 addcarryxU64(&x90, &x91, 0x0, x78, (arg1[2]));
1881 var x92: u64 = undefined;
1882 var x93: u1 = undefined;
1883 addcarryxU64(&x92, &x93, x91, x80, 0x0);
1884 var x94: u64 = undefined;
1885 var x95: u1 = undefined;
1886 addcarryxU64(&x94, &x95, x93, x82, 0x0);
1887 var x96: u64 = undefined;
1888 var x97: u1 = undefined;
1889 addcarryxU64(&x96, &x97, x95, x84, 0x0);
1890 var x98: u64 = undefined;
1891 var x99: u1 = undefined;
1892 addcarryxU64(&x98, &x99, x97, x86, 0x0);
1893 var x100: u64 = undefined;
1894 var x101: u1 = undefined;
1895 addcarryxU64(&x100, &x101, x99, x88, 0x0);
1896 var x102: u64 = undefined;
1897 var x103: u64 = undefined;
1898 mulxU64(&x102, &x103, x90, 0x6ed46089e88fdc45);
1899 var x104: u64 = undefined;
1900 var x105: u64 = undefined;
1901 mulxU64(&x104, &x105, x102, 0xffffffffffffffff);
1902 var x106: u64 = undefined;
1903 var x107: u64 = undefined;
1904 mulxU64(&x106, &x107, x102, 0xffffffffffffffff);
1905 var x108: u64 = undefined;
1906 var x109: u64 = undefined;
1907 mulxU64(&x108, &x109, x102, 0xffffffffffffffff);
1908 var x110: u64 = undefined;
1909 var x111: u64 = undefined;
1910 mulxU64(&x110, &x111, x102, 0xc7634d81f4372ddf);
1911 var x112: u64 = undefined;
1912 var x113: u64 = undefined;
1913 mulxU64(&x112, &x113, x102, 0x581a0db248b0a77a);
1914 var x114: u64 = undefined;
1915 var x115: u64 = undefined;
1916 mulxU64(&x114, &x115, x102, 0xecec196accc52973);
1917 var x116: u64 = undefined;
1918 var x117: u1 = undefined;
1919 addcarryxU64(&x116, &x117, 0x0, x115, x112);
1920 var x118: u64 = undefined;
1921 var x119: u1 = undefined;
1922 addcarryxU64(&x118, &x119, x117, x113, x110);
1923 var x120: u64 = undefined;
1924 var x121: u1 = undefined;
1925 addcarryxU64(&x120, &x121, x119, x111, x108);
1926 var x122: u64 = undefined;
1927 var x123: u1 = undefined;
1928 addcarryxU64(&x122, &x123, x121, x109, x106);
1929 var x124: u64 = undefined;
1930 var x125: u1 = undefined;
1931 addcarryxU64(&x124, &x125, x123, x107, x104);
1932 var x126: u64 = undefined;
1933 var x127: u1 = undefined;
1934 addcarryxU64(&x126, &x127, 0x0, x90, x114);
1935 var x128: u64 = undefined;
1936 var x129: u1 = undefined;
1937 addcarryxU64(&x128, &x129, x127, x92, x116);
1938 var x130: u64 = undefined;
1939 var x131: u1 = undefined;
1940 addcarryxU64(&x130, &x131, x129, x94, x118);
1941 var x132: u64 = undefined;
1942 var x133: u1 = undefined;
1943 addcarryxU64(&x132, &x133, x131, x96, x120);
1944 var x134: u64 = undefined;
1945 var x135: u1 = undefined;
1946 addcarryxU64(&x134, &x135, x133, x98, x122);
1947 var x136: u64 = undefined;
1948 var x137: u1 = undefined;
1949 addcarryxU64(&x136, &x137, x135, x100, x124);
1950 var x138: u64 = undefined;
1951 var x139: u1 = undefined;
1952 addcarryxU64(&x138, &x139, x137, (@as(u64, x101) + @as(u64, x89)), (@as(u64, x125) + x105));
1953 var x140: u64 = undefined;
1954 var x141: u1 = undefined;
1955 addcarryxU64(&x140, &x141, 0x0, x128, (arg1[3]));
1956 var x142: u64 = undefined;
1957 var x143: u1 = undefined;
1958 addcarryxU64(&x142, &x143, x141, x130, 0x0);
1959 var x144: u64 = undefined;
1960 var x145: u1 = undefined;
1961 addcarryxU64(&x144, &x145, x143, x132, 0x0);
1962 var x146: u64 = undefined;
1963 var x147: u1 = undefined;
1964 addcarryxU64(&x146, &x147, x145, x134, 0x0);
1965 var x148: u64 = undefined;
1966 var x149: u1 = undefined;
1967 addcarryxU64(&x148, &x149, x147, x136, 0x0);
1968 var x150: u64 = undefined;
1969 var x151: u1 = undefined;
1970 addcarryxU64(&x150, &x151, x149, x138, 0x0);
1971 var x152: u64 = undefined;
1972 var x153: u64 = undefined;
1973 mulxU64(&x152, &x153, x140, 0x6ed46089e88fdc45);
1974 var x154: u64 = undefined;
1975 var x155: u64 = undefined;
1976 mulxU64(&x154, &x155, x152, 0xffffffffffffffff);
1977 var x156: u64 = undefined;
1978 var x157: u64 = undefined;
1979 mulxU64(&x156, &x157, x152, 0xffffffffffffffff);
1980 var x158: u64 = undefined;
1981 var x159: u64 = undefined;
1982 mulxU64(&x158, &x159, x152, 0xffffffffffffffff);
1983 var x160: u64 = undefined;
1984 var x161: u64 = undefined;
1985 mulxU64(&x160, &x161, x152, 0xc7634d81f4372ddf);
1986 var x162: u64 = undefined;
1987 var x163: u64 = undefined;
1988 mulxU64(&x162, &x163, x152, 0x581a0db248b0a77a);
1989 var x164: u64 = undefined;
1990 var x165: u64 = undefined;
1991 mulxU64(&x164, &x165, x152, 0xecec196accc52973);
1992 var x166: u64 = undefined;
1993 var x167: u1 = undefined;
1994 addcarryxU64(&x166, &x167, 0x0, x165, x162);
1995 var x168: u64 = undefined;
1996 var x169: u1 = undefined;
1997 addcarryxU64(&x168, &x169, x167, x163, x160);
1998 var x170: u64 = undefined;
1999 var x171: u1 = undefined;
2000 addcarryxU64(&x170, &x171, x169, x161, x158);
2001 var x172: u64 = undefined;
2002 var x173: u1 = undefined;
2003 addcarryxU64(&x172, &x173, x171, x159, x156);
2004 var x174: u64 = undefined;
2005 var x175: u1 = undefined;
2006 addcarryxU64(&x174, &x175, x173, x157, x154);
2007 var x176: u64 = undefined;
2008 var x177: u1 = undefined;
2009 addcarryxU64(&x176, &x177, 0x0, x140, x164);
2010 var x178: u64 = undefined;
2011 var x179: u1 = undefined;
2012 addcarryxU64(&x178, &x179, x177, x142, x166);
2013 var x180: u64 = undefined;
2014 var x181: u1 = undefined;
2015 addcarryxU64(&x180, &x181, x179, x144, x168);
2016 var x182: u64 = undefined;
2017 var x183: u1 = undefined;
2018 addcarryxU64(&x182, &x183, x181, x146, x170);
2019 var x184: u64 = undefined;
2020 var x185: u1 = undefined;
2021 addcarryxU64(&x184, &x185, x183, x148, x172);
2022 var x186: u64 = undefined;
2023 var x187: u1 = undefined;
2024 addcarryxU64(&x186, &x187, x185, x150, x174);
2025 var x188: u64 = undefined;
2026 var x189: u1 = undefined;
2027 addcarryxU64(&x188, &x189, x187, (@as(u64, x151) + @as(u64, x139)), (@as(u64, x175) + x155));
2028 var x190: u64 = undefined;
2029 var x191: u1 = undefined;
2030 addcarryxU64(&x190, &x191, 0x0, x178, (arg1[4]));
2031 var x192: u64 = undefined;
2032 var x193: u1 = undefined;
2033 addcarryxU64(&x192, &x193, x191, x180, 0x0);
2034 var x194: u64 = undefined;
2035 var x195: u1 = undefined;
2036 addcarryxU64(&x194, &x195, x193, x182, 0x0);
2037 var x196: u64 = undefined;
2038 var x197: u1 = undefined;
2039 addcarryxU64(&x196, &x197, x195, x184, 0x0);
2040 var x198: u64 = undefined;
2041 var x199: u1 = undefined;
2042 addcarryxU64(&x198, &x199, x197, x186, 0x0);
2043 var x200: u64 = undefined;
2044 var x201: u1 = undefined;
2045 addcarryxU64(&x200, &x201, x199, x188, 0x0);
2046 var x202: u64 = undefined;
2047 var x203: u64 = undefined;
2048 mulxU64(&x202, &x203, x190, 0x6ed46089e88fdc45);
2049 var x204: u64 = undefined;
2050 var x205: u64 = undefined;
2051 mulxU64(&x204, &x205, x202, 0xffffffffffffffff);
2052 var x206: u64 = undefined;
2053 var x207: u64 = undefined;
2054 mulxU64(&x206, &x207, x202, 0xffffffffffffffff);
2055 var x208: u64 = undefined;
2056 var x209: u64 = undefined;
2057 mulxU64(&x208, &x209, x202, 0xffffffffffffffff);
2058 var x210: u64 = undefined;
2059 var x211: u64 = undefined;
2060 mulxU64(&x210, &x211, x202, 0xc7634d81f4372ddf);
2061 var x212: u64 = undefined;
2062 var x213: u64 = undefined;
2063 mulxU64(&x212, &x213, x202, 0x581a0db248b0a77a);
2064 var x214: u64 = undefined;
2065 var x215: u64 = undefined;
2066 mulxU64(&x214, &x215, x202, 0xecec196accc52973);
2067 var x216: u64 = undefined;
2068 var x217: u1 = undefined;
2069 addcarryxU64(&x216, &x217, 0x0, x215, x212);
2070 var x218: u64 = undefined;
2071 var x219: u1 = undefined;
2072 addcarryxU64(&x218, &x219, x217, x213, x210);
2073 var x220: u64 = undefined;
2074 var x221: u1 = undefined;
2075 addcarryxU64(&x220, &x221, x219, x211, x208);
2076 var x222: u64 = undefined;
2077 var x223: u1 = undefined;
2078 addcarryxU64(&x222, &x223, x221, x209, x206);
2079 var x224: u64 = undefined;
2080 var x225: u1 = undefined;
2081 addcarryxU64(&x224, &x225, x223, x207, x204);
2082 var x226: u64 = undefined;
2083 var x227: u1 = undefined;
2084 addcarryxU64(&x226, &x227, 0x0, x190, x214);
2085 var x228: u64 = undefined;
2086 var x229: u1 = undefined;
2087 addcarryxU64(&x228, &x229, x227, x192, x216);
2088 var x230: u64 = undefined;
2089 var x231: u1 = undefined;
2090 addcarryxU64(&x230, &x231, x229, x194, x218);
2091 var x232: u64 = undefined;
2092 var x233: u1 = undefined;
2093 addcarryxU64(&x232, &x233, x231, x196, x220);
2094 var x234: u64 = undefined;
2095 var x235: u1 = undefined;
2096 addcarryxU64(&x234, &x235, x233, x198, x222);
2097 var x236: u64 = undefined;
2098 var x237: u1 = undefined;
2099 addcarryxU64(&x236, &x237, x235, x200, x224);
2100 var x238: u64 = undefined;
2101 var x239: u1 = undefined;
2102 addcarryxU64(&x238, &x239, x237, (@as(u64, x201) + @as(u64, x189)), (@as(u64, x225) + x205));
2103 var x240: u64 = undefined;
2104 var x241: u1 = undefined;
2105 addcarryxU64(&x240, &x241, 0x0, x228, (arg1[5]));
2106 var x242: u64 = undefined;
2107 var x243: u1 = undefined;
2108 addcarryxU64(&x242, &x243, x241, x230, 0x0);
2109 var x244: u64 = undefined;
2110 var x245: u1 = undefined;
2111 addcarryxU64(&x244, &x245, x243, x232, 0x0);
2112 var x246: u64 = undefined;
2113 var x247: u1 = undefined;
2114 addcarryxU64(&x246, &x247, x245, x234, 0x0);
2115 var x248: u64 = undefined;
2116 var x249: u1 = undefined;
2117 addcarryxU64(&x248, &x249, x247, x236, 0x0);
2118 var x250: u64 = undefined;
2119 var x251: u1 = undefined;
2120 addcarryxU64(&x250, &x251, x249, x238, 0x0);
2121 var x252: u64 = undefined;
2122 var x253: u64 = undefined;
2123 mulxU64(&x252, &x253, x240, 0x6ed46089e88fdc45);
2124 var x254: u64 = undefined;
2125 var x255: u64 = undefined;
2126 mulxU64(&x254, &x255, x252, 0xffffffffffffffff);
2127 var x256: u64 = undefined;
2128 var x257: u64 = undefined;
2129 mulxU64(&x256, &x257, x252, 0xffffffffffffffff);
2130 var x258: u64 = undefined;
2131 var x259: u64 = undefined;
2132 mulxU64(&x258, &x259, x252, 0xffffffffffffffff);
2133 var x260: u64 = undefined;
2134 var x261: u64 = undefined;
2135 mulxU64(&x260, &x261, x252, 0xc7634d81f4372ddf);
2136 var x262: u64 = undefined;
2137 var x263: u64 = undefined;
2138 mulxU64(&x262, &x263, x252, 0x581a0db248b0a77a);
2139 var x264: u64 = undefined;
2140 var x265: u64 = undefined;
2141 mulxU64(&x264, &x265, x252, 0xecec196accc52973);
2142 var x266: u64 = undefined;
2143 var x267: u1 = undefined;
2144 addcarryxU64(&x266, &x267, 0x0, x265, x262);
2145 var x268: u64 = undefined;
2146 var x269: u1 = undefined;
2147 addcarryxU64(&x268, &x269, x267, x263, x260);
2148 var x270: u64 = undefined;
2149 var x271: u1 = undefined;
2150 addcarryxU64(&x270, &x271, x269, x261, x258);
2151 var x272: u64 = undefined;
2152 var x273: u1 = undefined;
2153 addcarryxU64(&x272, &x273, x271, x259, x256);
2154 var x274: u64 = undefined;
2155 var x275: u1 = undefined;
2156 addcarryxU64(&x274, &x275, x273, x257, x254);
2157 var x276: u64 = undefined;
2158 var x277: u1 = undefined;
2159 addcarryxU64(&x276, &x277, 0x0, x240, x264);
2160 var x278: u64 = undefined;
2161 var x279: u1 = undefined;
2162 addcarryxU64(&x278, &x279, x277, x242, x266);
2163 var x280: u64 = undefined;
2164 var x281: u1 = undefined;
2165 addcarryxU64(&x280, &x281, x279, x244, x268);
2166 var x282: u64 = undefined;
2167 var x283: u1 = undefined;
2168 addcarryxU64(&x282, &x283, x281, x246, x270);
2169 var x284: u64 = undefined;
2170 var x285: u1 = undefined;
2171 addcarryxU64(&x284, &x285, x283, x248, x272);
2172 var x286: u64 = undefined;
2173 var x287: u1 = undefined;
2174 addcarryxU64(&x286, &x287, x285, x250, x274);
2175 var x288: u64 = undefined;
2176 var x289: u1 = undefined;
2177 addcarryxU64(&x288, &x289, x287, (@as(u64, x251) + @as(u64, x239)), (@as(u64, x275) + x255));
2178 var x290: u64 = undefined;
2179 var x291: u1 = undefined;
2180 subborrowxU64(&x290, &x291, 0x0, x278, 0xecec196accc52973);
2181 var x292: u64 = undefined;
2182 var x293: u1 = undefined;
2183 subborrowxU64(&x292, &x293, x291, x280, 0x581a0db248b0a77a);
2184 var x294: u64 = undefined;
2185 var x295: u1 = undefined;
2186 subborrowxU64(&x294, &x295, x293, x282, 0xc7634d81f4372ddf);
2187 var x296: u64 = undefined;
2188 var x297: u1 = undefined;
2189 subborrowxU64(&x296, &x297, x295, x284, 0xffffffffffffffff);
2190 var x298: u64 = undefined;
2191 var x299: u1 = undefined;
2192 subborrowxU64(&x298, &x299, x297, x286, 0xffffffffffffffff);
2193 var x300: u64 = undefined;
2194 var x301: u1 = undefined;
2195 subborrowxU64(&x300, &x301, x299, x288, 0xffffffffffffffff);
2196 var x302: u64 = undefined;
2197 var x303: u1 = undefined;
2198 subborrowxU64(&x302, &x303, x301, @as(u64, x289), 0x0);
2199 var x304: u64 = undefined;
2200 cmovznzU64(&x304, x303, x290, x278);
2201 var x305: u64 = undefined;
2202 cmovznzU64(&x305, x303, x292, x280);
2203 var x306: u64 = undefined;
2204 cmovznzU64(&x306, x303, x294, x282);
2205 var x307: u64 = undefined;
2206 cmovznzU64(&x307, x303, x296, x284);
2207 var x308: u64 = undefined;
2208 cmovznzU64(&x308, x303, x298, x286);
2209 var x309: u64 = undefined;
2210 cmovznzU64(&x309, x303, x300, x288);
2211 out1[0] = x304;
2212 out1[1] = x305;
2213 out1[2] = x306;
2214 out1[3] = x307;
2215 out1[4] = x308;
2216 out1[5] = x309;
2217}
2218
2219/// The function toMontgomery translates a field element into the Montgomery domain.
2220///
2221/// Preconditions:
2222/// 0 ≤ eval arg1 < m
2223/// Postconditions:
2224/// eval (from_montgomery out1) mod m = eval arg1 mod m
2225/// 0 ≤ eval out1 < m
2226///
2227pub fn toMontgomery(out1: *MontgomeryDomainFieldElement, arg1: NonMontgomeryDomainFieldElement) void {
2228 @setRuntimeSafety(mode == .debug);
2229
2230 const x1 = (arg1[1]);
2231 const x2 = (arg1[2]);
2232 const x3 = (arg1[3]);
2233 const x4 = (arg1[4]);
2234 const x5 = (arg1[5]);
2235 const x6 = (arg1[0]);
2236 var x7: u64 = undefined;
2237 var x8: u64 = undefined;
2238 mulxU64(&x7, &x8, x6, 0xc84ee012b39bf21);
2239 var x9: u64 = undefined;
2240 var x10: u64 = undefined;
2241 mulxU64(&x9, &x10, x6, 0x3fb05b7a28266895);
2242 var x11: u64 = undefined;
2243 var x12: u64 = undefined;
2244 mulxU64(&x11, &x12, x6, 0xd40d49174aab1cc5);
2245 var x13: u64 = undefined;
2246 var x14: u64 = undefined;
2247 mulxU64(&x13, &x14, x6, 0xbc3e483afcb82947);
2248 var x15: u64 = undefined;
2249 var x16: u64 = undefined;
2250 mulxU64(&x15, &x16, x6, 0xff3d81e5df1aa419);
2251 var x17: u64 = undefined;
2252 var x18: u64 = undefined;
2253 mulxU64(&x17, &x18, x6, 0x2d319b2419b409a9);
2254 var x19: u64 = undefined;
2255 var x20: u1 = undefined;
2256 addcarryxU64(&x19, &x20, 0x0, x18, x15);
2257 var x21: u64 = undefined;
2258 var x22: u1 = undefined;
2259 addcarryxU64(&x21, &x22, x20, x16, x13);
2260 var x23: u64 = undefined;
2261 var x24: u1 = undefined;
2262 addcarryxU64(&x23, &x24, x22, x14, x11);
2263 var x25: u64 = undefined;
2264 var x26: u1 = undefined;
2265 addcarryxU64(&x25, &x26, x24, x12, x9);
2266 var x27: u64 = undefined;
2267 var x28: u1 = undefined;
2268 addcarryxU64(&x27, &x28, x26, x10, x7);
2269 var x29: u64 = undefined;
2270 var x30: u64 = undefined;
2271 mulxU64(&x29, &x30, x17, 0x6ed46089e88fdc45);
2272 var x31: u64 = undefined;
2273 var x32: u64 = undefined;
2274 mulxU64(&x31, &x32, x29, 0xffffffffffffffff);
2275 var x33: u64 = undefined;
2276 var x34: u64 = undefined;
2277 mulxU64(&x33, &x34, x29, 0xffffffffffffffff);
2278 var x35: u64 = undefined;
2279 var x36: u64 = undefined;
2280 mulxU64(&x35, &x36, x29, 0xffffffffffffffff);
2281 var x37: u64 = undefined;
2282 var x38: u64 = undefined;
2283 mulxU64(&x37, &x38, x29, 0xc7634d81f4372ddf);
2284 var x39: u64 = undefined;
2285 var x40: u64 = undefined;
2286 mulxU64(&x39, &x40, x29, 0x581a0db248b0a77a);
2287 var x41: u64 = undefined;
2288 var x42: u64 = undefined;
2289 mulxU64(&x41, &x42, x29, 0xecec196accc52973);
2290 var x43: u64 = undefined;
2291 var x44: u1 = undefined;
2292 addcarryxU64(&x43, &x44, 0x0, x42, x39);
2293 var x45: u64 = undefined;
2294 var x46: u1 = undefined;
2295 addcarryxU64(&x45, &x46, x44, x40, x37);
2296 var x47: u64 = undefined;
2297 var x48: u1 = undefined;
2298 addcarryxU64(&x47, &x48, x46, x38, x35);
2299 var x49: u64 = undefined;
2300 var x50: u1 = undefined;
2301 addcarryxU64(&x49, &x50, x48, x36, x33);
2302 var x51: u64 = undefined;
2303 var x52: u1 = undefined;
2304 addcarryxU64(&x51, &x52, x50, x34, x31);
2305 var x53: u64 = undefined;
2306 var x54: u1 = undefined;
2307 addcarryxU64(&x53, &x54, 0x0, x17, x41);
2308 var x55: u64 = undefined;
2309 var x56: u1 = undefined;
2310 addcarryxU64(&x55, &x56, x54, x19, x43);
2311 var x57: u64 = undefined;
2312 var x58: u1 = undefined;
2313 addcarryxU64(&x57, &x58, x56, x21, x45);
2314 var x59: u64 = undefined;
2315 var x60: u1 = undefined;
2316 addcarryxU64(&x59, &x60, x58, x23, x47);
2317 var x61: u64 = undefined;
2318 var x62: u1 = undefined;
2319 addcarryxU64(&x61, &x62, x60, x25, x49);
2320 var x63: u64 = undefined;
2321 var x64: u1 = undefined;
2322 addcarryxU64(&x63, &x64, x62, x27, x51);
2323 var x65: u64 = undefined;
2324 var x66: u1 = undefined;
2325 addcarryxU64(&x65, &x66, x64, (@as(u64, x28) + x8), (@as(u64, x52) + x32));
2326 var x67: u64 = undefined;
2327 var x68: u64 = undefined;
2328 mulxU64(&x67, &x68, x1, 0xc84ee012b39bf21);
2329 var x69: u64 = undefined;
2330 var x70: u64 = undefined;
2331 mulxU64(&x69, &x70, x1, 0x3fb05b7a28266895);
2332 var x71: u64 = undefined;
2333 var x72: u64 = undefined;
2334 mulxU64(&x71, &x72, x1, 0xd40d49174aab1cc5);
2335 var x73: u64 = undefined;
2336 var x74: u64 = undefined;
2337 mulxU64(&x73, &x74, x1, 0xbc3e483afcb82947);
2338 var x75: u64 = undefined;
2339 var x76: u64 = undefined;
2340 mulxU64(&x75, &x76, x1, 0xff3d81e5df1aa419);
2341 var x77: u64 = undefined;
2342 var x78: u64 = undefined;
2343 mulxU64(&x77, &x78, x1, 0x2d319b2419b409a9);
2344 var x79: u64 = undefined;
2345 var x80: u1 = undefined;
2346 addcarryxU64(&x79, &x80, 0x0, x78, x75);
2347 var x81: u64 = undefined;
2348 var x82: u1 = undefined;
2349 addcarryxU64(&x81, &x82, x80, x76, x73);
2350 var x83: u64 = undefined;
2351 var x84: u1 = undefined;
2352 addcarryxU64(&x83, &x84, x82, x74, x71);
2353 var x85: u64 = undefined;
2354 var x86: u1 = undefined;
2355 addcarryxU64(&x85, &x86, x84, x72, x69);
2356 var x87: u64 = undefined;
2357 var x88: u1 = undefined;
2358 addcarryxU64(&x87, &x88, x86, x70, x67);
2359 var x89: u64 = undefined;
2360 var x90: u1 = undefined;
2361 addcarryxU64(&x89, &x90, 0x0, x55, x77);
2362 var x91: u64 = undefined;
2363 var x92: u1 = undefined;
2364 addcarryxU64(&x91, &x92, x90, x57, x79);
2365 var x93: u64 = undefined;
2366 var x94: u1 = undefined;
2367 addcarryxU64(&x93, &x94, x92, x59, x81);
2368 var x95: u64 = undefined;
2369 var x96: u1 = undefined;
2370 addcarryxU64(&x95, &x96, x94, x61, x83);
2371 var x97: u64 = undefined;
2372 var x98: u1 = undefined;
2373 addcarryxU64(&x97, &x98, x96, x63, x85);
2374 var x99: u64 = undefined;
2375 var x100: u1 = undefined;
2376 addcarryxU64(&x99, &x100, x98, x65, x87);
2377 var x101: u64 = undefined;
2378 var x102: u64 = undefined;
2379 mulxU64(&x101, &x102, x89, 0x6ed46089e88fdc45);
2380 var x103: u64 = undefined;
2381 var x104: u64 = undefined;
2382 mulxU64(&x103, &x104, x101, 0xffffffffffffffff);
2383 var x105: u64 = undefined;
2384 var x106: u64 = undefined;
2385 mulxU64(&x105, &x106, x101, 0xffffffffffffffff);
2386 var x107: u64 = undefined;
2387 var x108: u64 = undefined;
2388 mulxU64(&x107, &x108, x101, 0xffffffffffffffff);
2389 var x109: u64 = undefined;
2390 var x110: u64 = undefined;
2391 mulxU64(&x109, &x110, x101, 0xc7634d81f4372ddf);
2392 var x111: u64 = undefined;
2393 var x112: u64 = undefined;
2394 mulxU64(&x111, &x112, x101, 0x581a0db248b0a77a);
2395 var x113: u64 = undefined;
2396 var x114: u64 = undefined;
2397 mulxU64(&x113, &x114, x101, 0xecec196accc52973);
2398 var x115: u64 = undefined;
2399 var x116: u1 = undefined;
2400 addcarryxU64(&x115, &x116, 0x0, x114, x111);
2401 var x117: u64 = undefined;
2402 var x118: u1 = undefined;
2403 addcarryxU64(&x117, &x118, x116, x112, x109);
2404 var x119: u64 = undefined;
2405 var x120: u1 = undefined;
2406 addcarryxU64(&x119, &x120, x118, x110, x107);
2407 var x121: u64 = undefined;
2408 var x122: u1 = undefined;
2409 addcarryxU64(&x121, &x122, x120, x108, x105);
2410 var x123: u64 = undefined;
2411 var x124: u1 = undefined;
2412 addcarryxU64(&x123, &x124, x122, x106, x103);
2413 var x125: u64 = undefined;
2414 var x126: u1 = undefined;
2415 addcarryxU64(&x125, &x126, 0x0, x89, x113);
2416 var x127: u64 = undefined;
2417 var x128: u1 = undefined;
2418 addcarryxU64(&x127, &x128, x126, x91, x115);
2419 var x129: u64 = undefined;
2420 var x130: u1 = undefined;
2421 addcarryxU64(&x129, &x130, x128, x93, x117);
2422 var x131: u64 = undefined;
2423 var x132: u1 = undefined;
2424 addcarryxU64(&x131, &x132, x130, x95, x119);
2425 var x133: u64 = undefined;
2426 var x134: u1 = undefined;
2427 addcarryxU64(&x133, &x134, x132, x97, x121);
2428 var x135: u64 = undefined;
2429 var x136: u1 = undefined;
2430 addcarryxU64(&x135, &x136, x134, x99, x123);
2431 var x137: u64 = undefined;
2432 var x138: u1 = undefined;
2433 addcarryxU64(&x137, &x138, x136, ((@as(u64, x100) + @as(u64, x66)) + (@as(u64, x88) + x68)), (@as(u64, x124) + x104));
2434 var x139: u64 = undefined;
2435 var x140: u64 = undefined;
2436 mulxU64(&x139, &x140, x2, 0xc84ee012b39bf21);
2437 var x141: u64 = undefined;
2438 var x142: u64 = undefined;
2439 mulxU64(&x141, &x142, x2, 0x3fb05b7a28266895);
2440 var x143: u64 = undefined;
2441 var x144: u64 = undefined;
2442 mulxU64(&x143, &x144, x2, 0xd40d49174aab1cc5);
2443 var x145: u64 = undefined;
2444 var x146: u64 = undefined;
2445 mulxU64(&x145, &x146, x2, 0xbc3e483afcb82947);
2446 var x147: u64 = undefined;
2447 var x148: u64 = undefined;
2448 mulxU64(&x147, &x148, x2, 0xff3d81e5df1aa419);
2449 var x149: u64 = undefined;
2450 var x150: u64 = undefined;
2451 mulxU64(&x149, &x150, x2, 0x2d319b2419b409a9);
2452 var x151: u64 = undefined;
2453 var x152: u1 = undefined;
2454 addcarryxU64(&x151, &x152, 0x0, x150, x147);
2455 var x153: u64 = undefined;
2456 var x154: u1 = undefined;
2457 addcarryxU64(&x153, &x154, x152, x148, x145);
2458 var x155: u64 = undefined;
2459 var x156: u1 = undefined;
2460 addcarryxU64(&x155, &x156, x154, x146, x143);
2461 var x157: u64 = undefined;
2462 var x158: u1 = undefined;
2463 addcarryxU64(&x157, &x158, x156, x144, x141);
2464 var x159: u64 = undefined;
2465 var x160: u1 = undefined;
2466 addcarryxU64(&x159, &x160, x158, x142, x139);
2467 var x161: u64 = undefined;
2468 var x162: u1 = undefined;
2469 addcarryxU64(&x161, &x162, 0x0, x127, x149);
2470 var x163: u64 = undefined;
2471 var x164: u1 = undefined;
2472 addcarryxU64(&x163, &x164, x162, x129, x151);
2473 var x165: u64 = undefined;
2474 var x166: u1 = undefined;
2475 addcarryxU64(&x165, &x166, x164, x131, x153);
2476 var x167: u64 = undefined;
2477 var x168: u1 = undefined;
2478 addcarryxU64(&x167, &x168, x166, x133, x155);
2479 var x169: u64 = undefined;
2480 var x170: u1 = undefined;
2481 addcarryxU64(&x169, &x170, x168, x135, x157);
2482 var x171: u64 = undefined;
2483 var x172: u1 = undefined;
2484 addcarryxU64(&x171, &x172, x170, x137, x159);
2485 var x173: u64 = undefined;
2486 var x174: u64 = undefined;
2487 mulxU64(&x173, &x174, x161, 0x6ed46089e88fdc45);
2488 var x175: u64 = undefined;
2489 var x176: u64 = undefined;
2490 mulxU64(&x175, &x176, x173, 0xffffffffffffffff);
2491 var x177: u64 = undefined;
2492 var x178: u64 = undefined;
2493 mulxU64(&x177, &x178, x173, 0xffffffffffffffff);
2494 var x179: u64 = undefined;
2495 var x180: u64 = undefined;
2496 mulxU64(&x179, &x180, x173, 0xffffffffffffffff);
2497 var x181: u64 = undefined;
2498 var x182: u64 = undefined;
2499 mulxU64(&x181, &x182, x173, 0xc7634d81f4372ddf);
2500 var x183: u64 = undefined;
2501 var x184: u64 = undefined;
2502 mulxU64(&x183, &x184, x173, 0x581a0db248b0a77a);
2503 var x185: u64 = undefined;
2504 var x186: u64 = undefined;
2505 mulxU64(&x185, &x186, x173, 0xecec196accc52973);
2506 var x187: u64 = undefined;
2507 var x188: u1 = undefined;
2508 addcarryxU64(&x187, &x188, 0x0, x186, x183);
2509 var x189: u64 = undefined;
2510 var x190: u1 = undefined;
2511 addcarryxU64(&x189, &x190, x188, x184, x181);
2512 var x191: u64 = undefined;
2513 var x192: u1 = undefined;
2514 addcarryxU64(&x191, &x192, x190, x182, x179);
2515 var x193: u64 = undefined;
2516 var x194: u1 = undefined;
2517 addcarryxU64(&x193, &x194, x192, x180, x177);
2518 var x195: u64 = undefined;
2519 var x196: u1 = undefined;
2520 addcarryxU64(&x195, &x196, x194, x178, x175);
2521 var x197: u64 = undefined;
2522 var x198: u1 = undefined;
2523 addcarryxU64(&x197, &x198, 0x0, x161, x185);
2524 var x199: u64 = undefined;
2525 var x200: u1 = undefined;
2526 addcarryxU64(&x199, &x200, x198, x163, x187);
2527 var x201: u64 = undefined;
2528 var x202: u1 = undefined;
2529 addcarryxU64(&x201, &x202, x200, x165, x189);
2530 var x203: u64 = undefined;
2531 var x204: u1 = undefined;
2532 addcarryxU64(&x203, &x204, x202, x167, x191);
2533 var x205: u64 = undefined;
2534 var x206: u1 = undefined;
2535 addcarryxU64(&x205, &x206, x204, x169, x193);
2536 var x207: u64 = undefined;
2537 var x208: u1 = undefined;
2538 addcarryxU64(&x207, &x208, x206, x171, x195);
2539 var x209: u64 = undefined;
2540 var x210: u1 = undefined;
2541 addcarryxU64(&x209, &x210, x208, ((@as(u64, x172) + @as(u64, x138)) + (@as(u64, x160) + x140)), (@as(u64, x196) + x176));
2542 var x211: u64 = undefined;
2543 var x212: u64 = undefined;
2544 mulxU64(&x211, &x212, x3, 0xc84ee012b39bf21);
2545 var x213: u64 = undefined;
2546 var x214: u64 = undefined;
2547 mulxU64(&x213, &x214, x3, 0x3fb05b7a28266895);
2548 var x215: u64 = undefined;
2549 var x216: u64 = undefined;
2550 mulxU64(&x215, &x216, x3, 0xd40d49174aab1cc5);
2551 var x217: u64 = undefined;
2552 var x218: u64 = undefined;
2553 mulxU64(&x217, &x218, x3, 0xbc3e483afcb82947);
2554 var x219: u64 = undefined;
2555 var x220: u64 = undefined;
2556 mulxU64(&x219, &x220, x3, 0xff3d81e5df1aa419);
2557 var x221: u64 = undefined;
2558 var x222: u64 = undefined;
2559 mulxU64(&x221, &x222, x3, 0x2d319b2419b409a9);
2560 var x223: u64 = undefined;
2561 var x224: u1 = undefined;
2562 addcarryxU64(&x223, &x224, 0x0, x222, x219);
2563 var x225: u64 = undefined;
2564 var x226: u1 = undefined;
2565 addcarryxU64(&x225, &x226, x224, x220, x217);
2566 var x227: u64 = undefined;
2567 var x228: u1 = undefined;
2568 addcarryxU64(&x227, &x228, x226, x218, x215);
2569 var x229: u64 = undefined;
2570 var x230: u1 = undefined;
2571 addcarryxU64(&x229, &x230, x228, x216, x213);
2572 var x231: u64 = undefined;
2573 var x232: u1 = undefined;
2574 addcarryxU64(&x231, &x232, x230, x214, x211);
2575 var x233: u64 = undefined;
2576 var x234: u1 = undefined;
2577 addcarryxU64(&x233, &x234, 0x0, x199, x221);
2578 var x235: u64 = undefined;
2579 var x236: u1 = undefined;
2580 addcarryxU64(&x235, &x236, x234, x201, x223);
2581 var x237: u64 = undefined;
2582 var x238: u1 = undefined;
2583 addcarryxU64(&x237, &x238, x236, x203, x225);
2584 var x239: u64 = undefined;
2585 var x240: u1 = undefined;
2586 addcarryxU64(&x239, &x240, x238, x205, x227);
2587 var x241: u64 = undefined;
2588 var x242: u1 = undefined;
2589 addcarryxU64(&x241, &x242, x240, x207, x229);
2590 var x243: u64 = undefined;
2591 var x244: u1 = undefined;
2592 addcarryxU64(&x243, &x244, x242, x209, x231);
2593 var x245: u64 = undefined;
2594 var x246: u64 = undefined;
2595 mulxU64(&x245, &x246, x233, 0x6ed46089e88fdc45);
2596 var x247: u64 = undefined;
2597 var x248: u64 = undefined;
2598 mulxU64(&x247, &x248, x245, 0xffffffffffffffff);
2599 var x249: u64 = undefined;
2600 var x250: u64 = undefined;
2601 mulxU64(&x249, &x250, x245, 0xffffffffffffffff);
2602 var x251: u64 = undefined;
2603 var x252: u64 = undefined;
2604 mulxU64(&x251, &x252, x245, 0xffffffffffffffff);
2605 var x253: u64 = undefined;
2606 var x254: u64 = undefined;
2607 mulxU64(&x253, &x254, x245, 0xc7634d81f4372ddf);
2608 var x255: u64 = undefined;
2609 var x256: u64 = undefined;
2610 mulxU64(&x255, &x256, x245, 0x581a0db248b0a77a);
2611 var x257: u64 = undefined;
2612 var x258: u64 = undefined;
2613 mulxU64(&x257, &x258, x245, 0xecec196accc52973);
2614 var x259: u64 = undefined;
2615 var x260: u1 = undefined;
2616 addcarryxU64(&x259, &x260, 0x0, x258, x255);
2617 var x261: u64 = undefined;
2618 var x262: u1 = undefined;
2619 addcarryxU64(&x261, &x262, x260, x256, x253);
2620 var x263: u64 = undefined;
2621 var x264: u1 = undefined;
2622 addcarryxU64(&x263, &x264, x262, x254, x251);
2623 var x265: u64 = undefined;
2624 var x266: u1 = undefined;
2625 addcarryxU64(&x265, &x266, x264, x252, x249);
2626 var x267: u64 = undefined;
2627 var x268: u1 = undefined;
2628 addcarryxU64(&x267, &x268, x266, x250, x247);
2629 var x269: u64 = undefined;
2630 var x270: u1 = undefined;
2631 addcarryxU64(&x269, &x270, 0x0, x233, x257);
2632 var x271: u64 = undefined;
2633 var x272: u1 = undefined;
2634 addcarryxU64(&x271, &x272, x270, x235, x259);
2635 var x273: u64 = undefined;
2636 var x274: u1 = undefined;
2637 addcarryxU64(&x273, &x274, x272, x237, x261);
2638 var x275: u64 = undefined;
2639 var x276: u1 = undefined;
2640 addcarryxU64(&x275, &x276, x274, x239, x263);
2641 var x277: u64 = undefined;
2642 var x278: u1 = undefined;
2643 addcarryxU64(&x277, &x278, x276, x241, x265);
2644 var x279: u64 = undefined;
2645 var x280: u1 = undefined;
2646 addcarryxU64(&x279, &x280, x278, x243, x267);
2647 var x281: u64 = undefined;
2648 var x282: u1 = undefined;
2649 addcarryxU64(&x281, &x282, x280, ((@as(u64, x244) + @as(u64, x210)) + (@as(u64, x232) + x212)), (@as(u64, x268) + x248));
2650 var x283: u64 = undefined;
2651 var x284: u64 = undefined;
2652 mulxU64(&x283, &x284, x4, 0xc84ee012b39bf21);
2653 var x285: u64 = undefined;
2654 var x286: u64 = undefined;
2655 mulxU64(&x285, &x286, x4, 0x3fb05b7a28266895);
2656 var x287: u64 = undefined;
2657 var x288: u64 = undefined;
2658 mulxU64(&x287, &x288, x4, 0xd40d49174aab1cc5);
2659 var x289: u64 = undefined;
2660 var x290: u64 = undefined;
2661 mulxU64(&x289, &x290, x4, 0xbc3e483afcb82947);
2662 var x291: u64 = undefined;
2663 var x292: u64 = undefined;
2664 mulxU64(&x291, &x292, x4, 0xff3d81e5df1aa419);
2665 var x293: u64 = undefined;
2666 var x294: u64 = undefined;
2667 mulxU64(&x293, &x294, x4, 0x2d319b2419b409a9);
2668 var x295: u64 = undefined;
2669 var x296: u1 = undefined;
2670 addcarryxU64(&x295, &x296, 0x0, x294, x291);
2671 var x297: u64 = undefined;
2672 var x298: u1 = undefined;
2673 addcarryxU64(&x297, &x298, x296, x292, x289);
2674 var x299: u64 = undefined;
2675 var x300: u1 = undefined;
2676 addcarryxU64(&x299, &x300, x298, x290, x287);
2677 var x301: u64 = undefined;
2678 var x302: u1 = undefined;
2679 addcarryxU64(&x301, &x302, x300, x288, x285);
2680 var x303: u64 = undefined;
2681 var x304: u1 = undefined;
2682 addcarryxU64(&x303, &x304, x302, x286, x283);
2683 var x305: u64 = undefined;
2684 var x306: u1 = undefined;
2685 addcarryxU64(&x305, &x306, 0x0, x271, x293);
2686 var x307: u64 = undefined;
2687 var x308: u1 = undefined;
2688 addcarryxU64(&x307, &x308, x306, x273, x295);
2689 var x309: u64 = undefined;
2690 var x310: u1 = undefined;
2691 addcarryxU64(&x309, &x310, x308, x275, x297);
2692 var x311: u64 = undefined;
2693 var x312: u1 = undefined;
2694 addcarryxU64(&x311, &x312, x310, x277, x299);
2695 var x313: u64 = undefined;
2696 var x314: u1 = undefined;
2697 addcarryxU64(&x313, &x314, x312, x279, x301);
2698 var x315: u64 = undefined;
2699 var x316: u1 = undefined;
2700 addcarryxU64(&x315, &x316, x314, x281, x303);
2701 var x317: u64 = undefined;
2702 var x318: u64 = undefined;
2703 mulxU64(&x317, &x318, x305, 0x6ed46089e88fdc45);
2704 var x319: u64 = undefined;
2705 var x320: u64 = undefined;
2706 mulxU64(&x319, &x320, x317, 0xffffffffffffffff);
2707 var x321: u64 = undefined;
2708 var x322: u64 = undefined;
2709 mulxU64(&x321, &x322, x317, 0xffffffffffffffff);
2710 var x323: u64 = undefined;
2711 var x324: u64 = undefined;
2712 mulxU64(&x323, &x324, x317, 0xffffffffffffffff);
2713 var x325: u64 = undefined;
2714 var x326: u64 = undefined;
2715 mulxU64(&x325, &x326, x317, 0xc7634d81f4372ddf);
2716 var x327: u64 = undefined;
2717 var x328: u64 = undefined;
2718 mulxU64(&x327, &x328, x317, 0x581a0db248b0a77a);
2719 var x329: u64 = undefined;
2720 var x330: u64 = undefined;
2721 mulxU64(&x329, &x330, x317, 0xecec196accc52973);
2722 var x331: u64 = undefined;
2723 var x332: u1 = undefined;
2724 addcarryxU64(&x331, &x332, 0x0, x330, x327);
2725 var x333: u64 = undefined;
2726 var x334: u1 = undefined;
2727 addcarryxU64(&x333, &x334, x332, x328, x325);
2728 var x335: u64 = undefined;
2729 var x336: u1 = undefined;
2730 addcarryxU64(&x335, &x336, x334, x326, x323);
2731 var x337: u64 = undefined;
2732 var x338: u1 = undefined;
2733 addcarryxU64(&x337, &x338, x336, x324, x321);
2734 var x339: u64 = undefined;
2735 var x340: u1 = undefined;
2736 addcarryxU64(&x339, &x340, x338, x322, x319);
2737 var x341: u64 = undefined;
2738 var x342: u1 = undefined;
2739 addcarryxU64(&x341, &x342, 0x0, x305, x329);
2740 var x343: u64 = undefined;
2741 var x344: u1 = undefined;
2742 addcarryxU64(&x343, &x344, x342, x307, x331);
2743 var x345: u64 = undefined;
2744 var x346: u1 = undefined;
2745 addcarryxU64(&x345, &x346, x344, x309, x333);
2746 var x347: u64 = undefined;
2747 var x348: u1 = undefined;
2748 addcarryxU64(&x347, &x348, x346, x311, x335);
2749 var x349: u64 = undefined;
2750 var x350: u1 = undefined;
2751 addcarryxU64(&x349, &x350, x348, x313, x337);
2752 var x351: u64 = undefined;
2753 var x352: u1 = undefined;
2754 addcarryxU64(&x351, &x352, x350, x315, x339);
2755 var x353: u64 = undefined;
2756 var x354: u1 = undefined;
2757 addcarryxU64(&x353, &x354, x352, ((@as(u64, x316) + @as(u64, x282)) + (@as(u64, x304) + x284)), (@as(u64, x340) + x320));
2758 var x355: u64 = undefined;
2759 var x356: u64 = undefined;
2760 mulxU64(&x355, &x356, x5, 0xc84ee012b39bf21);
2761 var x357: u64 = undefined;
2762 var x358: u64 = undefined;
2763 mulxU64(&x357, &x358, x5, 0x3fb05b7a28266895);
2764 var x359: u64 = undefined;
2765 var x360: u64 = undefined;
2766 mulxU64(&x359, &x360, x5, 0xd40d49174aab1cc5);
2767 var x361: u64 = undefined;
2768 var x362: u64 = undefined;
2769 mulxU64(&x361, &x362, x5, 0xbc3e483afcb82947);
2770 var x363: u64 = undefined;
2771 var x364: u64 = undefined;
2772 mulxU64(&x363, &x364, x5, 0xff3d81e5df1aa419);
2773 var x365: u64 = undefined;
2774 var x366: u64 = undefined;
2775 mulxU64(&x365, &x366, x5, 0x2d319b2419b409a9);
2776 var x367: u64 = undefined;
2777 var x368: u1 = undefined;
2778 addcarryxU64(&x367, &x368, 0x0, x366, x363);
2779 var x369: u64 = undefined;
2780 var x370: u1 = undefined;
2781 addcarryxU64(&x369, &x370, x368, x364, x361);
2782 var x371: u64 = undefined;
2783 var x372: u1 = undefined;
2784 addcarryxU64(&x371, &x372, x370, x362, x359);
2785 var x373: u64 = undefined;
2786 var x374: u1 = undefined;
2787 addcarryxU64(&x373, &x374, x372, x360, x357);
2788 var x375: u64 = undefined;
2789 var x376: u1 = undefined;
2790 addcarryxU64(&x375, &x376, x374, x358, x355);
2791 var x377: u64 = undefined;
2792 var x378: u1 = undefined;
2793 addcarryxU64(&x377, &x378, 0x0, x343, x365);
2794 var x379: u64 = undefined;
2795 var x380: u1 = undefined;
2796 addcarryxU64(&x379, &x380, x378, x345, x367);
2797 var x381: u64 = undefined;
2798 var x382: u1 = undefined;
2799 addcarryxU64(&x381, &x382, x380, x347, x369);
2800 var x383: u64 = undefined;
2801 var x384: u1 = undefined;
2802 addcarryxU64(&x383, &x384, x382, x349, x371);
2803 var x385: u64 = undefined;
2804 var x386: u1 = undefined;
2805 addcarryxU64(&x385, &x386, x384, x351, x373);
2806 var x387: u64 = undefined;
2807 var x388: u1 = undefined;
2808 addcarryxU64(&x387, &x388, x386, x353, x375);
2809 var x389: u64 = undefined;
2810 var x390: u64 = undefined;
2811 mulxU64(&x389, &x390, x377, 0x6ed46089e88fdc45);
2812 var x391: u64 = undefined;
2813 var x392: u64 = undefined;
2814 mulxU64(&x391, &x392, x389, 0xffffffffffffffff);
2815 var x393: u64 = undefined;
2816 var x394: u64 = undefined;
2817 mulxU64(&x393, &x394, x389, 0xffffffffffffffff);
2818 var x395: u64 = undefined;
2819 var x396: u64 = undefined;
2820 mulxU64(&x395, &x396, x389, 0xffffffffffffffff);
2821 var x397: u64 = undefined;
2822 var x398: u64 = undefined;
2823 mulxU64(&x397, &x398, x389, 0xc7634d81f4372ddf);
2824 var x399: u64 = undefined;
2825 var x400: u64 = undefined;
2826 mulxU64(&x399, &x400, x389, 0x581a0db248b0a77a);
2827 var x401: u64 = undefined;
2828 var x402: u64 = undefined;
2829 mulxU64(&x401, &x402, x389, 0xecec196accc52973);
2830 var x403: u64 = undefined;
2831 var x404: u1 = undefined;
2832 addcarryxU64(&x403, &x404, 0x0, x402, x399);
2833 var x405: u64 = undefined;
2834 var x406: u1 = undefined;
2835 addcarryxU64(&x405, &x406, x404, x400, x397);
2836 var x407: u64 = undefined;
2837 var x408: u1 = undefined;
2838 addcarryxU64(&x407, &x408, x406, x398, x395);
2839 var x409: u64 = undefined;
2840 var x410: u1 = undefined;
2841 addcarryxU64(&x409, &x410, x408, x396, x393);
2842 var x411: u64 = undefined;
2843 var x412: u1 = undefined;
2844 addcarryxU64(&x411, &x412, x410, x394, x391);
2845 var x413: u64 = undefined;
2846 var x414: u1 = undefined;
2847 addcarryxU64(&x413, &x414, 0x0, x377, x401);
2848 var x415: u64 = undefined;
2849 var x416: u1 = undefined;
2850 addcarryxU64(&x415, &x416, x414, x379, x403);
2851 var x417: u64 = undefined;
2852 var x418: u1 = undefined;
2853 addcarryxU64(&x417, &x418, x416, x381, x405);
2854 var x419: u64 = undefined;
2855 var x420: u1 = undefined;
2856 addcarryxU64(&x419, &x420, x418, x383, x407);
2857 var x421: u64 = undefined;
2858 var x422: u1 = undefined;
2859 addcarryxU64(&x421, &x422, x420, x385, x409);
2860 var x423: u64 = undefined;
2861 var x424: u1 = undefined;
2862 addcarryxU64(&x423, &x424, x422, x387, x411);
2863 var x425: u64 = undefined;
2864 var x426: u1 = undefined;
2865 addcarryxU64(&x425, &x426, x424, ((@as(u64, x388) + @as(u64, x354)) + (@as(u64, x376) + x356)), (@as(u64, x412) + x392));
2866 var x427: u64 = undefined;
2867 var x428: u1 = undefined;
2868 subborrowxU64(&x427, &x428, 0x0, x415, 0xecec196accc52973);
2869 var x429: u64 = undefined;
2870 var x430: u1 = undefined;
2871 subborrowxU64(&x429, &x430, x428, x417, 0x581a0db248b0a77a);
2872 var x431: u64 = undefined;
2873 var x432: u1 = undefined;
2874 subborrowxU64(&x431, &x432, x430, x419, 0xc7634d81f4372ddf);
2875 var x433: u64 = undefined;
2876 var x434: u1 = undefined;
2877 subborrowxU64(&x433, &x434, x432, x421, 0xffffffffffffffff);
2878 var x435: u64 = undefined;
2879 var x436: u1 = undefined;
2880 subborrowxU64(&x435, &x436, x434, x423, 0xffffffffffffffff);
2881 var x437: u64 = undefined;
2882 var x438: u1 = undefined;
2883 subborrowxU64(&x437, &x438, x436, x425, 0xffffffffffffffff);
2884 var x439: u64 = undefined;
2885 var x440: u1 = undefined;
2886 subborrowxU64(&x439, &x440, x438, @as(u64, x426), 0x0);
2887 var x441: u64 = undefined;
2888 cmovznzU64(&x441, x440, x427, x415);
2889 var x442: u64 = undefined;
2890 cmovznzU64(&x442, x440, x429, x417);
2891 var x443: u64 = undefined;
2892 cmovznzU64(&x443, x440, x431, x419);
2893 var x444: u64 = undefined;
2894 cmovznzU64(&x444, x440, x433, x421);
2895 var x445: u64 = undefined;
2896 cmovznzU64(&x445, x440, x435, x423);
2897 var x446: u64 = undefined;
2898 cmovznzU64(&x446, x440, x437, x425);
2899 out1[0] = x441;
2900 out1[1] = x442;
2901 out1[2] = x443;
2902 out1[3] = x444;
2903 out1[4] = x445;
2904 out1[5] = x446;
2905}
2906
2907/// The function nonzero outputs a single non-zero word if the input is non-zero and zero otherwise.
2908///
2909/// Preconditions:
2910/// 0 ≤ eval arg1 < m
2911/// Postconditions:
2912/// out1 = 0 ↔ eval (from_montgomery arg1) mod m = 0
2913///
2914/// Input Bounds:
2915/// arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
2916/// Output Bounds:
2917/// out1: [0x0 ~> 0xffffffffffffffff]
2918pub fn nonzero(out1: *u64, arg1: [6]u64) void {
2919 @setRuntimeSafety(mode == .debug);
2920
2921 const x1 = ((arg1[0]) | ((arg1[1]) | ((arg1[2]) | ((arg1[3]) | ((arg1[4]) | (arg1[5]))))));
2922 out1.* = x1;
2923}
2924
2925/// The function selectznz is a multi-limb conditional select.
2926///
2927/// Postconditions:
2928/// out1 = (if arg1 = 0 then arg2 else arg3)
2929///
2930/// Input Bounds:
2931/// arg1: [0x0 ~> 0x1]
2932/// arg2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
2933/// arg3: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
2934/// Output Bounds:
2935/// out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
2936pub fn selectznz(out1: *[6]u64, arg1: u1, arg2: [6]u64, arg3: [6]u64) void {
2937 @setRuntimeSafety(mode == .debug);
2938
2939 var x1: u64 = undefined;
2940 cmovznzU64(&x1, arg1, (arg2[0]), (arg3[0]));
2941 var x2: u64 = undefined;
2942 cmovznzU64(&x2, arg1, (arg2[1]), (arg3[1]));
2943 var x3: u64 = undefined;
2944 cmovznzU64(&x3, arg1, (arg2[2]), (arg3[2]));
2945 var x4: u64 = undefined;
2946 cmovznzU64(&x4, arg1, (arg2[3]), (arg3[3]));
2947 var x5: u64 = undefined;
2948 cmovznzU64(&x5, arg1, (arg2[4]), (arg3[4]));
2949 var x6: u64 = undefined;
2950 cmovznzU64(&x6, arg1, (arg2[5]), (arg3[5]));
2951 out1[0] = x1;
2952 out1[1] = x2;
2953 out1[2] = x3;
2954 out1[3] = x4;
2955 out1[4] = x5;
2956 out1[5] = x6;
2957}
2958
2959/// The function toBytes serializes a field element NOT in the Montgomery domain to bytes in little-endian order.
2960///
2961/// Preconditions:
2962/// 0 ≤ eval arg1 < m
2963/// Postconditions:
2964/// out1 = map (λ x, ⌊((eval arg1 mod m) mod 2^(8 * (x + 1))) / 2^(8 * x)⌋) [0..47]
2965///
2966/// Input Bounds:
2967/// arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
2968/// Output Bounds:
2969/// out1: [[0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff]]
2970pub fn toBytes(out1: *[48]u8, arg1: [6]u64) void {
2971 @setRuntimeSafety(mode == .debug);
2972
2973 const x1 = (arg1[5]);
2974 const x2 = (arg1[4]);
2975 const x3 = (arg1[3]);
2976 const x4 = (arg1[2]);
2977 const x5 = (arg1[1]);
2978 const x6 = (arg1[0]);
2979 const x7 = @as(u8, @truncate((x6 & 0xff)));
2980 const x8 = (x6 >> 8);
2981 const x9 = @as(u8, @truncate((x8 & 0xff)));
2982 const x10 = (x8 >> 8);
2983 const x11 = @as(u8, @truncate((x10 & 0xff)));
2984 const x12 = (x10 >> 8);
2985 const x13 = @as(u8, @truncate((x12 & 0xff)));
2986 const x14 = (x12 >> 8);
2987 const x15 = @as(u8, @truncate((x14 & 0xff)));
2988 const x16 = (x14 >> 8);
2989 const x17 = @as(u8, @truncate((x16 & 0xff)));
2990 const x18 = (x16 >> 8);
2991 const x19 = @as(u8, @truncate((x18 & 0xff)));
2992 const x20 = @as(u8, @truncate((x18 >> 8)));
2993 const x21 = @as(u8, @truncate((x5 & 0xff)));
2994 const x22 = (x5 >> 8);
2995 const x23 = @as(u8, @truncate((x22 & 0xff)));
2996 const x24 = (x22 >> 8);
2997 const x25 = @as(u8, @truncate((x24 & 0xff)));
2998 const x26 = (x24 >> 8);
2999 const x27 = @as(u8, @truncate((x26 & 0xff)));
3000 const x28 = (x26 >> 8);
3001 const x29 = @as(u8, @truncate((x28 & 0xff)));
3002 const x30 = (x28 >> 8);
3003 const x31 = @as(u8, @truncate((x30 & 0xff)));
3004 const x32 = (x30 >> 8);
3005 const x33 = @as(u8, @truncate((x32 & 0xff)));
3006 const x34 = @as(u8, @truncate((x32 >> 8)));
3007 const x35 = @as(u8, @truncate((x4 & 0xff)));
3008 const x36 = (x4 >> 8);
3009 const x37 = @as(u8, @truncate((x36 & 0xff)));
3010 const x38 = (x36 >> 8);
3011 const x39 = @as(u8, @truncate((x38 & 0xff)));
3012 const x40 = (x38 >> 8);
3013 const x41 = @as(u8, @truncate((x40 & 0xff)));
3014 const x42 = (x40 >> 8);
3015 const x43 = @as(u8, @truncate((x42 & 0xff)));
3016 const x44 = (x42 >> 8);
3017 const x45 = @as(u8, @truncate((x44 & 0xff)));
3018 const x46 = (x44 >> 8);
3019 const x47 = @as(u8, @truncate((x46 & 0xff)));
3020 const x48 = @as(u8, @truncate((x46 >> 8)));
3021 const x49 = @as(u8, @truncate((x3 & 0xff)));
3022 const x50 = (x3 >> 8);
3023 const x51 = @as(u8, @truncate((x50 & 0xff)));
3024 const x52 = (x50 >> 8);
3025 const x53 = @as(u8, @truncate((x52 & 0xff)));
3026 const x54 = (x52 >> 8);
3027 const x55 = @as(u8, @truncate((x54 & 0xff)));
3028 const x56 = (x54 >> 8);
3029 const x57 = @as(u8, @truncate((x56 & 0xff)));
3030 const x58 = (x56 >> 8);
3031 const x59 = @as(u8, @truncate((x58 & 0xff)));
3032 const x60 = (x58 >> 8);
3033 const x61 = @as(u8, @truncate((x60 & 0xff)));
3034 const x62 = @as(u8, @truncate((x60 >> 8)));
3035 const x63 = @as(u8, @truncate((x2 & 0xff)));
3036 const x64 = (x2 >> 8);
3037 const x65 = @as(u8, @truncate((x64 & 0xff)));
3038 const x66 = (x64 >> 8);
3039 const x67 = @as(u8, @truncate((x66 & 0xff)));
3040 const x68 = (x66 >> 8);
3041 const x69 = @as(u8, @truncate((x68 & 0xff)));
3042 const x70 = (x68 >> 8);
3043 const x71 = @as(u8, @truncate((x70 & 0xff)));
3044 const x72 = (x70 >> 8);
3045 const x73 = @as(u8, @truncate((x72 & 0xff)));
3046 const x74 = (x72 >> 8);
3047 const x75 = @as(u8, @truncate((x74 & 0xff)));
3048 const x76 = @as(u8, @truncate((x74 >> 8)));
3049 const x77 = @as(u8, @truncate((x1 & 0xff)));
3050 const x78 = (x1 >> 8);
3051 const x79 = @as(u8, @truncate((x78 & 0xff)));
3052 const x80 = (x78 >> 8);
3053 const x81 = @as(u8, @truncate((x80 & 0xff)));
3054 const x82 = (x80 >> 8);
3055 const x83 = @as(u8, @truncate((x82 & 0xff)));
3056 const x84 = (x82 >> 8);
3057 const x85 = @as(u8, @truncate((x84 & 0xff)));
3058 const x86 = (x84 >> 8);
3059 const x87 = @as(u8, @truncate((x86 & 0xff)));
3060 const x88 = (x86 >> 8);
3061 const x89 = @as(u8, @truncate((x88 & 0xff)));
3062 const x90 = @as(u8, @truncate((x88 >> 8)));
3063 out1[0] = x7;
3064 out1[1] = x9;
3065 out1[2] = x11;
3066 out1[3] = x13;
3067 out1[4] = x15;
3068 out1[5] = x17;
3069 out1[6] = x19;
3070 out1[7] = x20;
3071 out1[8] = x21;
3072 out1[9] = x23;
3073 out1[10] = x25;
3074 out1[11] = x27;
3075 out1[12] = x29;
3076 out1[13] = x31;
3077 out1[14] = x33;
3078 out1[15] = x34;
3079 out1[16] = x35;
3080 out1[17] = x37;
3081 out1[18] = x39;
3082 out1[19] = x41;
3083 out1[20] = x43;
3084 out1[21] = x45;
3085 out1[22] = x47;
3086 out1[23] = x48;
3087 out1[24] = x49;
3088 out1[25] = x51;
3089 out1[26] = x53;
3090 out1[27] = x55;
3091 out1[28] = x57;
3092 out1[29] = x59;
3093 out1[30] = x61;
3094 out1[31] = x62;
3095 out1[32] = x63;
3096 out1[33] = x65;
3097 out1[34] = x67;
3098 out1[35] = x69;
3099 out1[36] = x71;
3100 out1[37] = x73;
3101 out1[38] = x75;
3102 out1[39] = x76;
3103 out1[40] = x77;
3104 out1[41] = x79;
3105 out1[42] = x81;
3106 out1[43] = x83;
3107 out1[44] = x85;
3108 out1[45] = x87;
3109 out1[46] = x89;
3110 out1[47] = x90;
3111}
3112
3113/// The function fromBytes deserializes a field element NOT in the Montgomery domain from bytes in little-endian order.
3114///
3115/// Preconditions:
3116/// 0 ≤ bytes_eval arg1 < m
3117/// Postconditions:
3118/// eval out1 mod m = bytes_eval arg1 mod m
3119/// 0 ≤ eval out1 < m
3120///
3121/// Input Bounds:
3122/// arg1: [[0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff]]
3123/// Output Bounds:
3124/// out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3125pub fn fromBytes(out1: *[6]u64, arg1: [48]u8) void {
3126 @setRuntimeSafety(mode == .debug);
3127
3128 const x1 = (@as(u64, (arg1[47])) << 56);
3129 const x2 = (@as(u64, (arg1[46])) << 48);
3130 const x3 = (@as(u64, (arg1[45])) << 40);
3131 const x4 = (@as(u64, (arg1[44])) << 32);
3132 const x5 = (@as(u64, (arg1[43])) << 24);
3133 const x6 = (@as(u64, (arg1[42])) << 16);
3134 const x7 = (@as(u64, (arg1[41])) << 8);
3135 const x8 = (arg1[40]);
3136 const x9 = (@as(u64, (arg1[39])) << 56);
3137 const x10 = (@as(u64, (arg1[38])) << 48);
3138 const x11 = (@as(u64, (arg1[37])) << 40);
3139 const x12 = (@as(u64, (arg1[36])) << 32);
3140 const x13 = (@as(u64, (arg1[35])) << 24);
3141 const x14 = (@as(u64, (arg1[34])) << 16);
3142 const x15 = (@as(u64, (arg1[33])) << 8);
3143 const x16 = (arg1[32]);
3144 const x17 = (@as(u64, (arg1[31])) << 56);
3145 const x18 = (@as(u64, (arg1[30])) << 48);
3146 const x19 = (@as(u64, (arg1[29])) << 40);
3147 const x20 = (@as(u64, (arg1[28])) << 32);
3148 const x21 = (@as(u64, (arg1[27])) << 24);
3149 const x22 = (@as(u64, (arg1[26])) << 16);
3150 const x23 = (@as(u64, (arg1[25])) << 8);
3151 const x24 = (arg1[24]);
3152 const x25 = (@as(u64, (arg1[23])) << 56);
3153 const x26 = (@as(u64, (arg1[22])) << 48);
3154 const x27 = (@as(u64, (arg1[21])) << 40);
3155 const x28 = (@as(u64, (arg1[20])) << 32);
3156 const x29 = (@as(u64, (arg1[19])) << 24);
3157 const x30 = (@as(u64, (arg1[18])) << 16);
3158 const x31 = (@as(u64, (arg1[17])) << 8);
3159 const x32 = (arg1[16]);
3160 const x33 = (@as(u64, (arg1[15])) << 56);
3161 const x34 = (@as(u64, (arg1[14])) << 48);
3162 const x35 = (@as(u64, (arg1[13])) << 40);
3163 const x36 = (@as(u64, (arg1[12])) << 32);
3164 const x37 = (@as(u64, (arg1[11])) << 24);
3165 const x38 = (@as(u64, (arg1[10])) << 16);
3166 const x39 = (@as(u64, (arg1[9])) << 8);
3167 const x40 = (arg1[8]);
3168 const x41 = (@as(u64, (arg1[7])) << 56);
3169 const x42 = (@as(u64, (arg1[6])) << 48);
3170 const x43 = (@as(u64, (arg1[5])) << 40);
3171 const x44 = (@as(u64, (arg1[4])) << 32);
3172 const x45 = (@as(u64, (arg1[3])) << 24);
3173 const x46 = (@as(u64, (arg1[2])) << 16);
3174 const x47 = (@as(u64, (arg1[1])) << 8);
3175 const x48 = (arg1[0]);
3176 const x49 = (x47 + @as(u64, x48));
3177 const x50 = (x46 + x49);
3178 const x51 = (x45 + x50);
3179 const x52 = (x44 + x51);
3180 const x53 = (x43 + x52);
3181 const x54 = (x42 + x53);
3182 const x55 = (x41 + x54);
3183 const x56 = (x39 + @as(u64, x40));
3184 const x57 = (x38 + x56);
3185 const x58 = (x37 + x57);
3186 const x59 = (x36 + x58);
3187 const x60 = (x35 + x59);
3188 const x61 = (x34 + x60);
3189 const x62 = (x33 + x61);
3190 const x63 = (x31 + @as(u64, x32));
3191 const x64 = (x30 + x63);
3192 const x65 = (x29 + x64);
3193 const x66 = (x28 + x65);
3194 const x67 = (x27 + x66);
3195 const x68 = (x26 + x67);
3196 const x69 = (x25 + x68);
3197 const x70 = (x23 + @as(u64, x24));
3198 const x71 = (x22 + x70);
3199 const x72 = (x21 + x71);
3200 const x73 = (x20 + x72);
3201 const x74 = (x19 + x73);
3202 const x75 = (x18 + x74);
3203 const x76 = (x17 + x75);
3204 const x77 = (x15 + @as(u64, x16));
3205 const x78 = (x14 + x77);
3206 const x79 = (x13 + x78);
3207 const x80 = (x12 + x79);
3208 const x81 = (x11 + x80);
3209 const x82 = (x10 + x81);
3210 const x83 = (x9 + x82);
3211 const x84 = (x7 + @as(u64, x8));
3212 const x85 = (x6 + x84);
3213 const x86 = (x5 + x85);
3214 const x87 = (x4 + x86);
3215 const x88 = (x3 + x87);
3216 const x89 = (x2 + x88);
3217 const x90 = (x1 + x89);
3218 out1[0] = x55;
3219 out1[1] = x62;
3220 out1[2] = x69;
3221 out1[3] = x76;
3222 out1[4] = x83;
3223 out1[5] = x90;
3224}
3225
3226/// The function setOne returns the field element one in the Montgomery domain.
3227///
3228/// Postconditions:
3229/// eval (from_montgomery out1) mod m = 1 mod m
3230/// 0 ≤ eval out1 < m
3231///
3232pub fn setOne(out1: *MontgomeryDomainFieldElement) void {
3233 @setRuntimeSafety(mode == .debug);
3234
3235 out1[0] = 0x1313e695333ad68d;
3236 out1[1] = 0xa7e5f24db74f5885;
3237 out1[2] = 0x389cb27e0bc8d220;
3238 out1[3] = 0x0;
3239 out1[4] = 0x0;
3240 out1[5] = 0x0;
3241}
3242
3243/// The function msat returns the saturated representation of the prime modulus.
3244///
3245/// Postconditions:
3246/// twos_complement_eval out1 = m
3247/// 0 ≤ eval out1 < m
3248///
3249/// Output Bounds:
3250/// out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3251pub fn msat(out1: *[7]u64) void {
3252 @setRuntimeSafety(mode == .debug);
3253
3254 out1[0] = 0xecec196accc52973;
3255 out1[1] = 0x581a0db248b0a77a;
3256 out1[2] = 0xc7634d81f4372ddf;
3257 out1[3] = 0xffffffffffffffff;
3258 out1[4] = 0xffffffffffffffff;
3259 out1[5] = 0xffffffffffffffff;
3260 out1[6] = 0x0;
3261}
3262
3263/// The function divstep computes a divstep.
3264///
3265/// Preconditions:
3266/// 0 ≤ eval arg4 < m
3267/// 0 ≤ eval arg5 < m
3268/// Postconditions:
3269/// out1 = (if 0 < arg1 ∧ (twos_complement_eval arg3) is odd then 1 - arg1 else 1 + arg1)
3270/// twos_complement_eval out2 = (if 0 < arg1 ∧ (twos_complement_eval arg3) is odd then twos_complement_eval arg3 else twos_complement_eval arg2)
3271/// twos_complement_eval out3 = (if 0 < arg1 ∧ (twos_complement_eval arg3) is odd then ⌊(twos_complement_eval arg3 - twos_complement_eval arg2) / 2⌋ else ⌊(twos_complement_eval arg3 + (twos_complement_eval arg3 mod 2) * twos_complement_eval arg2) / 2⌋)
3272/// eval (from_montgomery out4) mod m = (if 0 < arg1 ∧ (twos_complement_eval arg3) is odd then (2 * eval (from_montgomery arg5)) mod m else (2 * eval (from_montgomery arg4)) mod m)
3273/// eval (from_montgomery out5) mod m = (if 0 < arg1 ∧ (twos_complement_eval arg3) is odd then (eval (from_montgomery arg4) - eval (from_montgomery arg4)) mod m else (eval (from_montgomery arg5) + (twos_complement_eval arg3 mod 2) * eval (from_montgomery arg4)) mod m)
3274/// 0 ≤ eval out5 < m
3275/// 0 ≤ eval out5 < m
3276/// 0 ≤ eval out2 < m
3277/// 0 ≤ eval out3 < m
3278///
3279/// Input Bounds:
3280/// arg1: [0x0 ~> 0xffffffffffffffff]
3281/// arg2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3282/// arg3: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3283/// arg4: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3284/// arg5: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3285/// Output Bounds:
3286/// out1: [0x0 ~> 0xffffffffffffffff]
3287/// out2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3288/// out3: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3289/// out4: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3290/// out5: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3291pub fn divstep(out1: *u64, out2: *[7]u64, out3: *[7]u64, out4: *[6]u64, out5: *[6]u64, arg1: u64, arg2: [7]u64, arg3: [7]u64, arg4: [6]u64, arg5: [6]u64) void {
3292 @setRuntimeSafety(mode == .debug);
3293
3294 var x1: u64 = undefined;
3295 var x2: u1 = undefined;
3296 addcarryxU64(&x1, &x2, 0x0, (~arg1), 0x1);
3297 const x3 = (@as(u1, @truncate((x1 >> 63))) & @as(u1, @truncate(((arg3[0]) & 0x1))));
3298 var x4: u64 = undefined;
3299 var x5: u1 = undefined;
3300 addcarryxU64(&x4, &x5, 0x0, (~arg1), 0x1);
3301 var x6: u64 = undefined;
3302 cmovznzU64(&x6, x3, arg1, x4);
3303 var x7: u64 = undefined;
3304 cmovznzU64(&x7, x3, (arg2[0]), (arg3[0]));
3305 var x8: u64 = undefined;
3306 cmovznzU64(&x8, x3, (arg2[1]), (arg3[1]));
3307 var x9: u64 = undefined;
3308 cmovznzU64(&x9, x3, (arg2[2]), (arg3[2]));
3309 var x10: u64 = undefined;
3310 cmovznzU64(&x10, x3, (arg2[3]), (arg3[3]));
3311 var x11: u64 = undefined;
3312 cmovznzU64(&x11, x3, (arg2[4]), (arg3[4]));
3313 var x12: u64 = undefined;
3314 cmovznzU64(&x12, x3, (arg2[5]), (arg3[5]));
3315 var x13: u64 = undefined;
3316 cmovznzU64(&x13, x3, (arg2[6]), (arg3[6]));
3317 var x14: u64 = undefined;
3318 var x15: u1 = undefined;
3319 addcarryxU64(&x14, &x15, 0x0, 0x1, (~(arg2[0])));
3320 var x16: u64 = undefined;
3321 var x17: u1 = undefined;
3322 addcarryxU64(&x16, &x17, x15, 0x0, (~(arg2[1])));
3323 var x18: u64 = undefined;
3324 var x19: u1 = undefined;
3325 addcarryxU64(&x18, &x19, x17, 0x0, (~(arg2[2])));
3326 var x20: u64 = undefined;
3327 var x21: u1 = undefined;
3328 addcarryxU64(&x20, &x21, x19, 0x0, (~(arg2[3])));
3329 var x22: u64 = undefined;
3330 var x23: u1 = undefined;
3331 addcarryxU64(&x22, &x23, x21, 0x0, (~(arg2[4])));
3332 var x24: u64 = undefined;
3333 var x25: u1 = undefined;
3334 addcarryxU64(&x24, &x25, x23, 0x0, (~(arg2[5])));
3335 var x26: u64 = undefined;
3336 var x27: u1 = undefined;
3337 addcarryxU64(&x26, &x27, x25, 0x0, (~(arg2[6])));
3338 var x28: u64 = undefined;
3339 cmovznzU64(&x28, x3, (arg3[0]), x14);
3340 var x29: u64 = undefined;
3341 cmovznzU64(&x29, x3, (arg3[1]), x16);
3342 var x30: u64 = undefined;
3343 cmovznzU64(&x30, x3, (arg3[2]), x18);
3344 var x31: u64 = undefined;
3345 cmovznzU64(&x31, x3, (arg3[3]), x20);
3346 var x32: u64 = undefined;
3347 cmovznzU64(&x32, x3, (arg3[4]), x22);
3348 var x33: u64 = undefined;
3349 cmovznzU64(&x33, x3, (arg3[5]), x24);
3350 var x34: u64 = undefined;
3351 cmovznzU64(&x34, x3, (arg3[6]), x26);
3352 var x35: u64 = undefined;
3353 cmovznzU64(&x35, x3, (arg4[0]), (arg5[0]));
3354 var x36: u64 = undefined;
3355 cmovznzU64(&x36, x3, (arg4[1]), (arg5[1]));
3356 var x37: u64 = undefined;
3357 cmovznzU64(&x37, x3, (arg4[2]), (arg5[2]));
3358 var x38: u64 = undefined;
3359 cmovznzU64(&x38, x3, (arg4[3]), (arg5[3]));
3360 var x39: u64 = undefined;
3361 cmovznzU64(&x39, x3, (arg4[4]), (arg5[4]));
3362 var x40: u64 = undefined;
3363 cmovznzU64(&x40, x3, (arg4[5]), (arg5[5]));
3364 var x41: u64 = undefined;
3365 var x42: u1 = undefined;
3366 addcarryxU64(&x41, &x42, 0x0, x35, x35);
3367 var x43: u64 = undefined;
3368 var x44: u1 = undefined;
3369 addcarryxU64(&x43, &x44, x42, x36, x36);
3370 var x45: u64 = undefined;
3371 var x46: u1 = undefined;
3372 addcarryxU64(&x45, &x46, x44, x37, x37);
3373 var x47: u64 = undefined;
3374 var x48: u1 = undefined;
3375 addcarryxU64(&x47, &x48, x46, x38, x38);
3376 var x49: u64 = undefined;
3377 var x50: u1 = undefined;
3378 addcarryxU64(&x49, &x50, x48, x39, x39);
3379 var x51: u64 = undefined;
3380 var x52: u1 = undefined;
3381 addcarryxU64(&x51, &x52, x50, x40, x40);
3382 var x53: u64 = undefined;
3383 var x54: u1 = undefined;
3384 subborrowxU64(&x53, &x54, 0x0, x41, 0xecec196accc52973);
3385 var x55: u64 = undefined;
3386 var x56: u1 = undefined;
3387 subborrowxU64(&x55, &x56, x54, x43, 0x581a0db248b0a77a);
3388 var x57: u64 = undefined;
3389 var x58: u1 = undefined;
3390 subborrowxU64(&x57, &x58, x56, x45, 0xc7634d81f4372ddf);
3391 var x59: u64 = undefined;
3392 var x60: u1 = undefined;
3393 subborrowxU64(&x59, &x60, x58, x47, 0xffffffffffffffff);
3394 var x61: u64 = undefined;
3395 var x62: u1 = undefined;
3396 subborrowxU64(&x61, &x62, x60, x49, 0xffffffffffffffff);
3397 var x63: u64 = undefined;
3398 var x64: u1 = undefined;
3399 subborrowxU64(&x63, &x64, x62, x51, 0xffffffffffffffff);
3400 var x65: u64 = undefined;
3401 var x66: u1 = undefined;
3402 subborrowxU64(&x65, &x66, x64, @as(u64, x52), 0x0);
3403 const x67 = (arg4[5]);
3404 const x68 = (arg4[4]);
3405 const x69 = (arg4[3]);
3406 const x70 = (arg4[2]);
3407 const x71 = (arg4[1]);
3408 const x72 = (arg4[0]);
3409 var x73: u64 = undefined;
3410 var x74: u1 = undefined;
3411 subborrowxU64(&x73, &x74, 0x0, 0x0, x72);
3412 var x75: u64 = undefined;
3413 var x76: u1 = undefined;
3414 subborrowxU64(&x75, &x76, x74, 0x0, x71);
3415 var x77: u64 = undefined;
3416 var x78: u1 = undefined;
3417 subborrowxU64(&x77, &x78, x76, 0x0, x70);
3418 var x79: u64 = undefined;
3419 var x80: u1 = undefined;
3420 subborrowxU64(&x79, &x80, x78, 0x0, x69);
3421 var x81: u64 = undefined;
3422 var x82: u1 = undefined;
3423 subborrowxU64(&x81, &x82, x80, 0x0, x68);
3424 var x83: u64 = undefined;
3425 var x84: u1 = undefined;
3426 subborrowxU64(&x83, &x84, x82, 0x0, x67);
3427 var x85: u64 = undefined;
3428 cmovznzU64(&x85, x84, 0x0, 0xffffffffffffffff);
3429 var x86: u64 = undefined;
3430 var x87: u1 = undefined;
3431 addcarryxU64(&x86, &x87, 0x0, x73, (x85 & 0xecec196accc52973));
3432 var x88: u64 = undefined;
3433 var x89: u1 = undefined;
3434 addcarryxU64(&x88, &x89, x87, x75, (x85 & 0x581a0db248b0a77a));
3435 var x90: u64 = undefined;
3436 var x91: u1 = undefined;
3437 addcarryxU64(&x90, &x91, x89, x77, (x85 & 0xc7634d81f4372ddf));
3438 var x92: u64 = undefined;
3439 var x93: u1 = undefined;
3440 addcarryxU64(&x92, &x93, x91, x79, x85);
3441 var x94: u64 = undefined;
3442 var x95: u1 = undefined;
3443 addcarryxU64(&x94, &x95, x93, x81, x85);
3444 var x96: u64 = undefined;
3445 var x97: u1 = undefined;
3446 addcarryxU64(&x96, &x97, x95, x83, x85);
3447 var x98: u64 = undefined;
3448 cmovznzU64(&x98, x3, (arg5[0]), x86);
3449 var x99: u64 = undefined;
3450 cmovznzU64(&x99, x3, (arg5[1]), x88);
3451 var x100: u64 = undefined;
3452 cmovznzU64(&x100, x3, (arg5[2]), x90);
3453 var x101: u64 = undefined;
3454 cmovznzU64(&x101, x3, (arg5[3]), x92);
3455 var x102: u64 = undefined;
3456 cmovznzU64(&x102, x3, (arg5[4]), x94);
3457 var x103: u64 = undefined;
3458 cmovznzU64(&x103, x3, (arg5[5]), x96);
3459 const x104 = @as(u1, @truncate((x28 & 0x1)));
3460 var x105: u64 = undefined;
3461 cmovznzU64(&x105, x104, 0x0, x7);
3462 var x106: u64 = undefined;
3463 cmovznzU64(&x106, x104, 0x0, x8);
3464 var x107: u64 = undefined;
3465 cmovznzU64(&x107, x104, 0x0, x9);
3466 var x108: u64 = undefined;
3467 cmovznzU64(&x108, x104, 0x0, x10);
3468 var x109: u64 = undefined;
3469 cmovznzU64(&x109, x104, 0x0, x11);
3470 var x110: u64 = undefined;
3471 cmovznzU64(&x110, x104, 0x0, x12);
3472 var x111: u64 = undefined;
3473 cmovznzU64(&x111, x104, 0x0, x13);
3474 var x112: u64 = undefined;
3475 var x113: u1 = undefined;
3476 addcarryxU64(&x112, &x113, 0x0, x28, x105);
3477 var x114: u64 = undefined;
3478 var x115: u1 = undefined;
3479 addcarryxU64(&x114, &x115, x113, x29, x106);
3480 var x116: u64 = undefined;
3481 var x117: u1 = undefined;
3482 addcarryxU64(&x116, &x117, x115, x30, x107);
3483 var x118: u64 = undefined;
3484 var x119: u1 = undefined;
3485 addcarryxU64(&x118, &x119, x117, x31, x108);
3486 var x120: u64 = undefined;
3487 var x121: u1 = undefined;
3488 addcarryxU64(&x120, &x121, x119, x32, x109);
3489 var x122: u64 = undefined;
3490 var x123: u1 = undefined;
3491 addcarryxU64(&x122, &x123, x121, x33, x110);
3492 var x124: u64 = undefined;
3493 var x125: u1 = undefined;
3494 addcarryxU64(&x124, &x125, x123, x34, x111);
3495 var x126: u64 = undefined;
3496 cmovznzU64(&x126, x104, 0x0, x35);
3497 var x127: u64 = undefined;
3498 cmovznzU64(&x127, x104, 0x0, x36);
3499 var x128: u64 = undefined;
3500 cmovznzU64(&x128, x104, 0x0, x37);
3501 var x129: u64 = undefined;
3502 cmovznzU64(&x129, x104, 0x0, x38);
3503 var x130: u64 = undefined;
3504 cmovznzU64(&x130, x104, 0x0, x39);
3505 var x131: u64 = undefined;
3506 cmovznzU64(&x131, x104, 0x0, x40);
3507 var x132: u64 = undefined;
3508 var x133: u1 = undefined;
3509 addcarryxU64(&x132, &x133, 0x0, x98, x126);
3510 var x134: u64 = undefined;
3511 var x135: u1 = undefined;
3512 addcarryxU64(&x134, &x135, x133, x99, x127);
3513 var x136: u64 = undefined;
3514 var x137: u1 = undefined;
3515 addcarryxU64(&x136, &x137, x135, x100, x128);
3516 var x138: u64 = undefined;
3517 var x139: u1 = undefined;
3518 addcarryxU64(&x138, &x139, x137, x101, x129);
3519 var x140: u64 = undefined;
3520 var x141: u1 = undefined;
3521 addcarryxU64(&x140, &x141, x139, x102, x130);
3522 var x142: u64 = undefined;
3523 var x143: u1 = undefined;
3524 addcarryxU64(&x142, &x143, x141, x103, x131);
3525 var x144: u64 = undefined;
3526 var x145: u1 = undefined;
3527 subborrowxU64(&x144, &x145, 0x0, x132, 0xecec196accc52973);
3528 var x146: u64 = undefined;
3529 var x147: u1 = undefined;
3530 subborrowxU64(&x146, &x147, x145, x134, 0x581a0db248b0a77a);
3531 var x148: u64 = undefined;
3532 var x149: u1 = undefined;
3533 subborrowxU64(&x148, &x149, x147, x136, 0xc7634d81f4372ddf);
3534 var x150: u64 = undefined;
3535 var x151: u1 = undefined;
3536 subborrowxU64(&x150, &x151, x149, x138, 0xffffffffffffffff);
3537 var x152: u64 = undefined;
3538 var x153: u1 = undefined;
3539 subborrowxU64(&x152, &x153, x151, x140, 0xffffffffffffffff);
3540 var x154: u64 = undefined;
3541 var x155: u1 = undefined;
3542 subborrowxU64(&x154, &x155, x153, x142, 0xffffffffffffffff);
3543 var x156: u64 = undefined;
3544 var x157: u1 = undefined;
3545 subborrowxU64(&x156, &x157, x155, @as(u64, x143), 0x0);
3546 var x158: u64 = undefined;
3547 var x159: u1 = undefined;
3548 addcarryxU64(&x158, &x159, 0x0, x6, 0x1);
3549 const x160 = ((x112 >> 1) | ((x114 << 63) & 0xffffffffffffffff));
3550 const x161 = ((x114 >> 1) | ((x116 << 63) & 0xffffffffffffffff));
3551 const x162 = ((x116 >> 1) | ((x118 << 63) & 0xffffffffffffffff));
3552 const x163 = ((x118 >> 1) | ((x120 << 63) & 0xffffffffffffffff));
3553 const x164 = ((x120 >> 1) | ((x122 << 63) & 0xffffffffffffffff));
3554 const x165 = ((x122 >> 1) | ((x124 << 63) & 0xffffffffffffffff));
3555 const x166 = ((x124 & 0x8000000000000000) | (x124 >> 1));
3556 var x167: u64 = undefined;
3557 cmovznzU64(&x167, x66, x53, x41);
3558 var x168: u64 = undefined;
3559 cmovznzU64(&x168, x66, x55, x43);
3560 var x169: u64 = undefined;
3561 cmovznzU64(&x169, x66, x57, x45);
3562 var x170: u64 = undefined;
3563 cmovznzU64(&x170, x66, x59, x47);
3564 var x171: u64 = undefined;
3565 cmovznzU64(&x171, x66, x61, x49);
3566 var x172: u64 = undefined;
3567 cmovznzU64(&x172, x66, x63, x51);
3568 var x173: u64 = undefined;
3569 cmovznzU64(&x173, x157, x144, x132);
3570 var x174: u64 = undefined;
3571 cmovznzU64(&x174, x157, x146, x134);
3572 var x175: u64 = undefined;
3573 cmovznzU64(&x175, x157, x148, x136);
3574 var x176: u64 = undefined;
3575 cmovznzU64(&x176, x157, x150, x138);
3576 var x177: u64 = undefined;
3577 cmovznzU64(&x177, x157, x152, x140);
3578 var x178: u64 = undefined;
3579 cmovznzU64(&x178, x157, x154, x142);
3580 out1.* = x158;
3581 out2[0] = x7;
3582 out2[1] = x8;
3583 out2[2] = x9;
3584 out2[3] = x10;
3585 out2[4] = x11;
3586 out2[5] = x12;
3587 out2[6] = x13;
3588 out3[0] = x160;
3589 out3[1] = x161;
3590 out3[2] = x162;
3591 out3[3] = x163;
3592 out3[4] = x164;
3593 out3[5] = x165;
3594 out3[6] = x166;
3595 out4[0] = x167;
3596 out4[1] = x168;
3597 out4[2] = x169;
3598 out4[3] = x170;
3599 out4[4] = x171;
3600 out4[5] = x172;
3601 out5[0] = x173;
3602 out5[1] = x174;
3603 out5[2] = x175;
3604 out5[3] = x176;
3605 out5[4] = x177;
3606 out5[5] = x178;
3607}
3608
3609/// The function divstepPrecomp returns the precomputed value for Bernstein-Yang-inversion (in montgomery form).
3610///
3611/// Postconditions:
3612/// eval (from_montgomery out1) = ⌊(m - 1) / 2⌋^(if ⌊log2 m⌋ + 1 < 46 then ⌊(49 * (⌊log2 m⌋ + 1) + 80) / 17⌋ else ⌊(49 * (⌊log2 m⌋ + 1) + 57) / 17⌋)
3613/// 0 ≤ eval out1 < m
3614///
3615/// Output Bounds:
3616/// out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3617pub fn divstepPrecomp(out1: *[6]u64) void {
3618 @setRuntimeSafety(mode == .debug);
3619
3620 out1[0] = 0x49589ae0e6045b6a;
3621 out1[1] = 0x3c9a5352870040ed;
3622 out1[2] = 0xdacb097e977dc242;
3623 out1[3] = 0xb5ab30a6d1ecbe36;
3624 out1[4] = 0x97d7a1081f959973;
3625 out1[5] = 0x2ba012f8d27192bc;
3626}