]> git.proxmox.com Git - rustc.git/blame - vendor/fiat-crypto/src/p384_scalar_64.rs
New upstream version 1.76.0+dfsg1
[rustc.git] / vendor / fiat-crypto / src / p384_scalar_64.rs
CommitLineData
0a29b90c
FG
1//! Autogenerated: 'src/ExtractionOCaml/word_by_word_montgomery' --lang Rust --inline p384_scalar 64 '2^384 - 1388124618062372383947042015309946732620727252194336364173' mul square add sub opp from_montgomery to_montgomery nonzero selectznz to_bytes from_bytes one msat divstep divstep_precomp
2//! curve description: p384_scalar
3//! machine_wordsize = 64 (from "64")
4//! requested operations: mul, square, add, sub, opp, from_montgomery, to_montgomery, nonzero, selectznz, to_bytes, from_bytes, one, msat, divstep, divstep_precomp
5//! m = 0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973 (from "2^384 - 1388124618062372383947042015309946732620727252194336364173")
6//!
7//! NOTE: In addition to the bounds specified above each function, all
8//! functions synthesized for this Montgomery arithmetic require the
9//! input to be strictly less than the prime modulus (m), and also
10//! require the input to be in the unique saturated representation.
11//! All functions also ensure that these two properties are true of
12//! return values.
13//!
14//! Computed values:
15//! eval z = z[0] + (z[1] << 64) + (z[2] << 128) + (z[3] << 192) + (z[4] << 256) + (z[5] << 0x140)
16//! bytes_eval z = z[0] + (z[1] << 8) + (z[2] << 16) + (z[3] << 24) + (z[4] << 32) + (z[5] << 40) + (z[6] << 48) + (z[7] << 56) + (z[8] << 64) + (z[9] << 72) + (z[10] << 80) + (z[11] << 88) + (z[12] << 96) + (z[13] << 104) + (z[14] << 112) + (z[15] << 120) + (z[16] << 128) + (z[17] << 136) + (z[18] << 144) + (z[19] << 152) + (z[20] << 160) + (z[21] << 168) + (z[22] << 176) + (z[23] << 184) + (z[24] << 192) + (z[25] << 200) + (z[26] << 208) + (z[27] << 216) + (z[28] << 224) + (z[29] << 232) + (z[30] << 240) + (z[31] << 248) + (z[32] << 256) + (z[33] << 0x108) + (z[34] << 0x110) + (z[35] << 0x118) + (z[36] << 0x120) + (z[37] << 0x128) + (z[38] << 0x130) + (z[39] << 0x138) + (z[40] << 0x140) + (z[41] << 0x148) + (z[42] << 0x150) + (z[43] << 0x158) + (z[44] << 0x160) + (z[45] << 0x168) + (z[46] << 0x170) + (z[47] << 0x178)
17//! twos_complement_eval z = let x1 := z[0] + (z[1] << 64) + (z[2] << 128) + (z[3] << 192) + (z[4] << 256) + (z[5] << 0x140) in
18//! if x1 & (2^384-1) < 2^383 then x1 & (2^384-1) else (x1 & (2^384-1)) - 2^384
19
20#![allow(unused_parens)]
21#![allow(non_camel_case_types)]
22
4b012472 23/** fiat_p384_scalar_u1 represents values of 1 bits, stored in one byte. */
0a29b90c 24pub type fiat_p384_scalar_u1 = u8;
4b012472 25/** fiat_p384_scalar_i1 represents values of 1 bits, stored in one byte. */
0a29b90c 26pub type fiat_p384_scalar_i1 = i8;
4b012472 27/** fiat_p384_scalar_u2 represents values of 2 bits, stored in one byte. */
0a29b90c 28pub type fiat_p384_scalar_u2 = u8;
4b012472 29/** fiat_p384_scalar_i2 represents values of 2 bits, stored in one byte. */
0a29b90c
FG
30pub type fiat_p384_scalar_i2 = i8;
31
4b012472
FG
32/** The type fiat_p384_scalar_montgomery_domain_field_element is a field element in the Montgomery domain. */
33/** Bounds: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]] */
34#[derive(Clone, Copy)]
35pub struct fiat_p384_scalar_montgomery_domain_field_element(pub [u64; 6]);
0a29b90c 36
4b012472
FG
37impl core::ops::Index<usize> for fiat_p384_scalar_montgomery_domain_field_element {
38 type Output = u64;
39 #[inline]
40 fn index(&self, index: usize) -> &Self::Output {
41 &self.0[index]
42 }
43}
44
45impl core::ops::IndexMut<usize> for fiat_p384_scalar_montgomery_domain_field_element {
46 #[inline]
47 fn index_mut(&mut self, index: usize) -> &mut Self::Output {
48 &mut self.0[index]
49 }
50}
51
52/** The type fiat_p384_scalar_non_montgomery_domain_field_element is a field element NOT in the Montgomery domain. */
53/** Bounds: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]] */
54#[derive(Clone, Copy)]
55pub struct fiat_p384_scalar_non_montgomery_domain_field_element(pub [u64; 6]);
56
57impl core::ops::Index<usize> for fiat_p384_scalar_non_montgomery_domain_field_element {
58 type Output = u64;
59 #[inline]
60 fn index(&self, index: usize) -> &Self::Output {
61 &self.0[index]
62 }
63}
64
65impl core::ops::IndexMut<usize> for fiat_p384_scalar_non_montgomery_domain_field_element {
66 #[inline]
67 fn index_mut(&mut self, index: usize) -> &mut Self::Output {
68 &mut self.0[index]
69 }
70}
0a29b90c
FG
71
72
73/// The function fiat_p384_scalar_addcarryx_u64 is an addition with carry.
74///
75/// Postconditions:
76/// out1 = (arg1 + arg2 + arg3) mod 2^64
77/// out2 = ⌊(arg1 + arg2 + arg3) / 2^64⌋
78///
79/// Input Bounds:
80/// arg1: [0x0 ~> 0x1]
81/// arg2: [0x0 ~> 0xffffffffffffffff]
82/// arg3: [0x0 ~> 0xffffffffffffffff]
83/// Output Bounds:
84/// out1: [0x0 ~> 0xffffffffffffffff]
85/// out2: [0x0 ~> 0x1]
86#[inline]
4b012472 87pub fn fiat_p384_scalar_addcarryx_u64(out1: &mut u64, out2: &mut fiat_p384_scalar_u1, arg1: fiat_p384_scalar_u1, arg2: u64, arg3: u64) {
0a29b90c
FG
88 let x1: u128 = (((arg1 as u128) + (arg2 as u128)) + (arg3 as u128));
89 let x2: u64 = ((x1 & (0xffffffffffffffff as u128)) as u64);
90 let x3: fiat_p384_scalar_u1 = ((x1 >> 64) as fiat_p384_scalar_u1);
91 *out1 = x2;
92 *out2 = x3;
93}
94
95/// The function fiat_p384_scalar_subborrowx_u64 is a subtraction with borrow.
96///
97/// Postconditions:
98/// out1 = (-arg1 + arg2 + -arg3) mod 2^64
99/// out2 = -⌊(-arg1 + arg2 + -arg3) / 2^64⌋
100///
101/// Input Bounds:
102/// arg1: [0x0 ~> 0x1]
103/// arg2: [0x0 ~> 0xffffffffffffffff]
104/// arg3: [0x0 ~> 0xffffffffffffffff]
105/// Output Bounds:
106/// out1: [0x0 ~> 0xffffffffffffffff]
107/// out2: [0x0 ~> 0x1]
108#[inline]
4b012472 109pub fn fiat_p384_scalar_subborrowx_u64(out1: &mut u64, out2: &mut fiat_p384_scalar_u1, arg1: fiat_p384_scalar_u1, arg2: u64, arg3: u64) {
0a29b90c
FG
110 let x1: i128 = (((arg2 as i128) - (arg1 as i128)) - (arg3 as i128));
111 let x2: fiat_p384_scalar_i1 = ((x1 >> 64) as fiat_p384_scalar_i1);
112 let x3: u64 = ((x1 & (0xffffffffffffffff as i128)) as u64);
113 *out1 = x3;
114 *out2 = (((0x0 as fiat_p384_scalar_i2) - (x2 as fiat_p384_scalar_i2)) as fiat_p384_scalar_u1);
115}
116
117/// The function fiat_p384_scalar_mulx_u64 is a multiplication, returning the full double-width result.
118///
119/// Postconditions:
120/// out1 = (arg1 * arg2) mod 2^64
121/// out2 = ⌊arg1 * arg2 / 2^64⌋
122///
123/// Input Bounds:
124/// arg1: [0x0 ~> 0xffffffffffffffff]
125/// arg2: [0x0 ~> 0xffffffffffffffff]
126/// Output Bounds:
127/// out1: [0x0 ~> 0xffffffffffffffff]
128/// out2: [0x0 ~> 0xffffffffffffffff]
129#[inline]
4b012472 130pub fn fiat_p384_scalar_mulx_u64(out1: &mut u64, out2: &mut u64, arg1: u64, arg2: u64) {
0a29b90c
FG
131 let x1: u128 = ((arg1 as u128) * (arg2 as u128));
132 let x2: u64 = ((x1 & (0xffffffffffffffff as u128)) as u64);
133 let x3: u64 = ((x1 >> 64) as u64);
134 *out1 = x2;
135 *out2 = x3;
136}
137
138/// The function fiat_p384_scalar_cmovznz_u64 is a single-word conditional move.
139///
140/// Postconditions:
141/// out1 = (if arg1 = 0 then arg2 else arg3)
142///
143/// Input Bounds:
144/// arg1: [0x0 ~> 0x1]
145/// arg2: [0x0 ~> 0xffffffffffffffff]
146/// arg3: [0x0 ~> 0xffffffffffffffff]
147/// Output Bounds:
148/// out1: [0x0 ~> 0xffffffffffffffff]
149#[inline]
4b012472 150pub fn fiat_p384_scalar_cmovznz_u64(out1: &mut u64, arg1: fiat_p384_scalar_u1, arg2: u64, arg3: u64) {
0a29b90c
FG
151 let x1: fiat_p384_scalar_u1 = (!(!arg1));
152 let x2: u64 = ((((((0x0 as fiat_p384_scalar_i2) - (x1 as fiat_p384_scalar_i2)) as fiat_p384_scalar_i1) as i128) & (0xffffffffffffffff as i128)) as u64);
153 let x3: u64 = ((x2 & arg3) | ((!x2) & arg2));
154 *out1 = x3;
155}
156
157/// The function fiat_p384_scalar_mul multiplies two field elements in the Montgomery domain.
158///
159/// Preconditions:
160/// 0 ≤ eval arg1 < m
161/// 0 ≤ eval arg2 < m
162/// Postconditions:
163/// eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) * eval (from_montgomery arg2)) mod m
164/// 0 ≤ eval out1 < m
165///
166#[inline]
4b012472 167pub fn fiat_p384_scalar_mul(out1: &mut fiat_p384_scalar_montgomery_domain_field_element, arg1: &fiat_p384_scalar_montgomery_domain_field_element, arg2: &fiat_p384_scalar_montgomery_domain_field_element) {
0a29b90c
FG
168 let x1: u64 = (arg1[1]);
169 let x2: u64 = (arg1[2]);
170 let x3: u64 = (arg1[3]);
171 let x4: u64 = (arg1[4]);
172 let x5: u64 = (arg1[5]);
173 let x6: u64 = (arg1[0]);
174 let mut x7: u64 = 0;
175 let mut x8: u64 = 0;
176 fiat_p384_scalar_mulx_u64(&mut x7, &mut x8, x6, (arg2[5]));
177 let mut x9: u64 = 0;
178 let mut x10: u64 = 0;
179 fiat_p384_scalar_mulx_u64(&mut x9, &mut x10, x6, (arg2[4]));
180 let mut x11: u64 = 0;
181 let mut x12: u64 = 0;
182 fiat_p384_scalar_mulx_u64(&mut x11, &mut x12, x6, (arg2[3]));
183 let mut x13: u64 = 0;
184 let mut x14: u64 = 0;
185 fiat_p384_scalar_mulx_u64(&mut x13, &mut x14, x6, (arg2[2]));
186 let mut x15: u64 = 0;
187 let mut x16: u64 = 0;
188 fiat_p384_scalar_mulx_u64(&mut x15, &mut x16, x6, (arg2[1]));
189 let mut x17: u64 = 0;
190 let mut x18: u64 = 0;
191 fiat_p384_scalar_mulx_u64(&mut x17, &mut x18, x6, (arg2[0]));
192 let mut x19: u64 = 0;
193 let mut x20: fiat_p384_scalar_u1 = 0;
194 fiat_p384_scalar_addcarryx_u64(&mut x19, &mut x20, 0x0, x18, x15);
195 let mut x21: u64 = 0;
196 let mut x22: fiat_p384_scalar_u1 = 0;
197 fiat_p384_scalar_addcarryx_u64(&mut x21, &mut x22, x20, x16, x13);
198 let mut x23: u64 = 0;
199 let mut x24: fiat_p384_scalar_u1 = 0;
200 fiat_p384_scalar_addcarryx_u64(&mut x23, &mut x24, x22, x14, x11);
201 let mut x25: u64 = 0;
202 let mut x26: fiat_p384_scalar_u1 = 0;
203 fiat_p384_scalar_addcarryx_u64(&mut x25, &mut x26, x24, x12, x9);
204 let mut x27: u64 = 0;
205 let mut x28: fiat_p384_scalar_u1 = 0;
206 fiat_p384_scalar_addcarryx_u64(&mut x27, &mut x28, x26, x10, x7);
207 let x29: u64 = ((x28 as u64) + x8);
208 let mut x30: u64 = 0;
209 let mut x31: u64 = 0;
210 fiat_p384_scalar_mulx_u64(&mut x30, &mut x31, x17, 0x6ed46089e88fdc45);
211 let mut x32: u64 = 0;
212 let mut x33: u64 = 0;
213 fiat_p384_scalar_mulx_u64(&mut x32, &mut x33, x30, 0xffffffffffffffff);
214 let mut x34: u64 = 0;
215 let mut x35: u64 = 0;
216 fiat_p384_scalar_mulx_u64(&mut x34, &mut x35, x30, 0xffffffffffffffff);
217 let mut x36: u64 = 0;
218 let mut x37: u64 = 0;
219 fiat_p384_scalar_mulx_u64(&mut x36, &mut x37, x30, 0xffffffffffffffff);
220 let mut x38: u64 = 0;
221 let mut x39: u64 = 0;
222 fiat_p384_scalar_mulx_u64(&mut x38, &mut x39, x30, 0xc7634d81f4372ddf);
223 let mut x40: u64 = 0;
224 let mut x41: u64 = 0;
225 fiat_p384_scalar_mulx_u64(&mut x40, &mut x41, x30, 0x581a0db248b0a77a);
226 let mut x42: u64 = 0;
227 let mut x43: u64 = 0;
228 fiat_p384_scalar_mulx_u64(&mut x42, &mut x43, x30, 0xecec196accc52973);
229 let mut x44: u64 = 0;
230 let mut x45: fiat_p384_scalar_u1 = 0;
231 fiat_p384_scalar_addcarryx_u64(&mut x44, &mut x45, 0x0, x43, x40);
232 let mut x46: u64 = 0;
233 let mut x47: fiat_p384_scalar_u1 = 0;
234 fiat_p384_scalar_addcarryx_u64(&mut x46, &mut x47, x45, x41, x38);
235 let mut x48: u64 = 0;
236 let mut x49: fiat_p384_scalar_u1 = 0;
237 fiat_p384_scalar_addcarryx_u64(&mut x48, &mut x49, x47, x39, x36);
238 let mut x50: u64 = 0;
239 let mut x51: fiat_p384_scalar_u1 = 0;
240 fiat_p384_scalar_addcarryx_u64(&mut x50, &mut x51, x49, x37, x34);
241 let mut x52: u64 = 0;
242 let mut x53: fiat_p384_scalar_u1 = 0;
243 fiat_p384_scalar_addcarryx_u64(&mut x52, &mut x53, x51, x35, x32);
244 let x54: u64 = ((x53 as u64) + x33);
245 let mut x55: u64 = 0;
246 let mut x56: fiat_p384_scalar_u1 = 0;
247 fiat_p384_scalar_addcarryx_u64(&mut x55, &mut x56, 0x0, x17, x42);
248 let mut x57: u64 = 0;
249 let mut x58: fiat_p384_scalar_u1 = 0;
250 fiat_p384_scalar_addcarryx_u64(&mut x57, &mut x58, x56, x19, x44);
251 let mut x59: u64 = 0;
252 let mut x60: fiat_p384_scalar_u1 = 0;
253 fiat_p384_scalar_addcarryx_u64(&mut x59, &mut x60, x58, x21, x46);
254 let mut x61: u64 = 0;
255 let mut x62: fiat_p384_scalar_u1 = 0;
256 fiat_p384_scalar_addcarryx_u64(&mut x61, &mut x62, x60, x23, x48);
257 let mut x63: u64 = 0;
258 let mut x64: fiat_p384_scalar_u1 = 0;
259 fiat_p384_scalar_addcarryx_u64(&mut x63, &mut x64, x62, x25, x50);
260 let mut x65: u64 = 0;
261 let mut x66: fiat_p384_scalar_u1 = 0;
262 fiat_p384_scalar_addcarryx_u64(&mut x65, &mut x66, x64, x27, x52);
263 let mut x67: u64 = 0;
264 let mut x68: fiat_p384_scalar_u1 = 0;
265 fiat_p384_scalar_addcarryx_u64(&mut x67, &mut x68, x66, x29, x54);
266 let mut x69: u64 = 0;
267 let mut x70: u64 = 0;
268 fiat_p384_scalar_mulx_u64(&mut x69, &mut x70, x1, (arg2[5]));
269 let mut x71: u64 = 0;
270 let mut x72: u64 = 0;
271 fiat_p384_scalar_mulx_u64(&mut x71, &mut x72, x1, (arg2[4]));
272 let mut x73: u64 = 0;
273 let mut x74: u64 = 0;
274 fiat_p384_scalar_mulx_u64(&mut x73, &mut x74, x1, (arg2[3]));
275 let mut x75: u64 = 0;
276 let mut x76: u64 = 0;
277 fiat_p384_scalar_mulx_u64(&mut x75, &mut x76, x1, (arg2[2]));
278 let mut x77: u64 = 0;
279 let mut x78: u64 = 0;
280 fiat_p384_scalar_mulx_u64(&mut x77, &mut x78, x1, (arg2[1]));
281 let mut x79: u64 = 0;
282 let mut x80: u64 = 0;
283 fiat_p384_scalar_mulx_u64(&mut x79, &mut x80, x1, (arg2[0]));
284 let mut x81: u64 = 0;
285 let mut x82: fiat_p384_scalar_u1 = 0;
286 fiat_p384_scalar_addcarryx_u64(&mut x81, &mut x82, 0x0, x80, x77);
287 let mut x83: u64 = 0;
288 let mut x84: fiat_p384_scalar_u1 = 0;
289 fiat_p384_scalar_addcarryx_u64(&mut x83, &mut x84, x82, x78, x75);
290 let mut x85: u64 = 0;
291 let mut x86: fiat_p384_scalar_u1 = 0;
292 fiat_p384_scalar_addcarryx_u64(&mut x85, &mut x86, x84, x76, x73);
293 let mut x87: u64 = 0;
294 let mut x88: fiat_p384_scalar_u1 = 0;
295 fiat_p384_scalar_addcarryx_u64(&mut x87, &mut x88, x86, x74, x71);
296 let mut x89: u64 = 0;
297 let mut x90: fiat_p384_scalar_u1 = 0;
298 fiat_p384_scalar_addcarryx_u64(&mut x89, &mut x90, x88, x72, x69);
299 let x91: u64 = ((x90 as u64) + x70);
300 let mut x92: u64 = 0;
301 let mut x93: fiat_p384_scalar_u1 = 0;
302 fiat_p384_scalar_addcarryx_u64(&mut x92, &mut x93, 0x0, x57, x79);
303 let mut x94: u64 = 0;
304 let mut x95: fiat_p384_scalar_u1 = 0;
305 fiat_p384_scalar_addcarryx_u64(&mut x94, &mut x95, x93, x59, x81);
306 let mut x96: u64 = 0;
307 let mut x97: fiat_p384_scalar_u1 = 0;
308 fiat_p384_scalar_addcarryx_u64(&mut x96, &mut x97, x95, x61, x83);
309 let mut x98: u64 = 0;
310 let mut x99: fiat_p384_scalar_u1 = 0;
311 fiat_p384_scalar_addcarryx_u64(&mut x98, &mut x99, x97, x63, x85);
312 let mut x100: u64 = 0;
313 let mut x101: fiat_p384_scalar_u1 = 0;
314 fiat_p384_scalar_addcarryx_u64(&mut x100, &mut x101, x99, x65, x87);
315 let mut x102: u64 = 0;
316 let mut x103: fiat_p384_scalar_u1 = 0;
317 fiat_p384_scalar_addcarryx_u64(&mut x102, &mut x103, x101, x67, x89);
318 let mut x104: u64 = 0;
319 let mut x105: fiat_p384_scalar_u1 = 0;
320 fiat_p384_scalar_addcarryx_u64(&mut x104, &mut x105, x103, (x68 as u64), x91);
321 let mut x106: u64 = 0;
322 let mut x107: u64 = 0;
323 fiat_p384_scalar_mulx_u64(&mut x106, &mut x107, x92, 0x6ed46089e88fdc45);
324 let mut x108: u64 = 0;
325 let mut x109: u64 = 0;
326 fiat_p384_scalar_mulx_u64(&mut x108, &mut x109, x106, 0xffffffffffffffff);
327 let mut x110: u64 = 0;
328 let mut x111: u64 = 0;
329 fiat_p384_scalar_mulx_u64(&mut x110, &mut x111, x106, 0xffffffffffffffff);
330 let mut x112: u64 = 0;
331 let mut x113: u64 = 0;
332 fiat_p384_scalar_mulx_u64(&mut x112, &mut x113, x106, 0xffffffffffffffff);
333 let mut x114: u64 = 0;
334 let mut x115: u64 = 0;
335 fiat_p384_scalar_mulx_u64(&mut x114, &mut x115, x106, 0xc7634d81f4372ddf);
336 let mut x116: u64 = 0;
337 let mut x117: u64 = 0;
338 fiat_p384_scalar_mulx_u64(&mut x116, &mut x117, x106, 0x581a0db248b0a77a);
339 let mut x118: u64 = 0;
340 let mut x119: u64 = 0;
341 fiat_p384_scalar_mulx_u64(&mut x118, &mut x119, x106, 0xecec196accc52973);
342 let mut x120: u64 = 0;
343 let mut x121: fiat_p384_scalar_u1 = 0;
344 fiat_p384_scalar_addcarryx_u64(&mut x120, &mut x121, 0x0, x119, x116);
345 let mut x122: u64 = 0;
346 let mut x123: fiat_p384_scalar_u1 = 0;
347 fiat_p384_scalar_addcarryx_u64(&mut x122, &mut x123, x121, x117, x114);
348 let mut x124: u64 = 0;
349 let mut x125: fiat_p384_scalar_u1 = 0;
350 fiat_p384_scalar_addcarryx_u64(&mut x124, &mut x125, x123, x115, x112);
351 let mut x126: u64 = 0;
352 let mut x127: fiat_p384_scalar_u1 = 0;
353 fiat_p384_scalar_addcarryx_u64(&mut x126, &mut x127, x125, x113, x110);
354 let mut x128: u64 = 0;
355 let mut x129: fiat_p384_scalar_u1 = 0;
356 fiat_p384_scalar_addcarryx_u64(&mut x128, &mut x129, x127, x111, x108);
357 let x130: u64 = ((x129 as u64) + x109);
358 let mut x131: u64 = 0;
359 let mut x132: fiat_p384_scalar_u1 = 0;
360 fiat_p384_scalar_addcarryx_u64(&mut x131, &mut x132, 0x0, x92, x118);
361 let mut x133: u64 = 0;
362 let mut x134: fiat_p384_scalar_u1 = 0;
363 fiat_p384_scalar_addcarryx_u64(&mut x133, &mut x134, x132, x94, x120);
364 let mut x135: u64 = 0;
365 let mut x136: fiat_p384_scalar_u1 = 0;
366 fiat_p384_scalar_addcarryx_u64(&mut x135, &mut x136, x134, x96, x122);
367 let mut x137: u64 = 0;
368 let mut x138: fiat_p384_scalar_u1 = 0;
369 fiat_p384_scalar_addcarryx_u64(&mut x137, &mut x138, x136, x98, x124);
370 let mut x139: u64 = 0;
371 let mut x140: fiat_p384_scalar_u1 = 0;
372 fiat_p384_scalar_addcarryx_u64(&mut x139, &mut x140, x138, x100, x126);
373 let mut x141: u64 = 0;
374 let mut x142: fiat_p384_scalar_u1 = 0;
375 fiat_p384_scalar_addcarryx_u64(&mut x141, &mut x142, x140, x102, x128);
376 let mut x143: u64 = 0;
377 let mut x144: fiat_p384_scalar_u1 = 0;
378 fiat_p384_scalar_addcarryx_u64(&mut x143, &mut x144, x142, x104, x130);
379 let x145: u64 = ((x144 as u64) + (x105 as u64));
380 let mut x146: u64 = 0;
381 let mut x147: u64 = 0;
382 fiat_p384_scalar_mulx_u64(&mut x146, &mut x147, x2, (arg2[5]));
383 let mut x148: u64 = 0;
384 let mut x149: u64 = 0;
385 fiat_p384_scalar_mulx_u64(&mut x148, &mut x149, x2, (arg2[4]));
386 let mut x150: u64 = 0;
387 let mut x151: u64 = 0;
388 fiat_p384_scalar_mulx_u64(&mut x150, &mut x151, x2, (arg2[3]));
389 let mut x152: u64 = 0;
390 let mut x153: u64 = 0;
391 fiat_p384_scalar_mulx_u64(&mut x152, &mut x153, x2, (arg2[2]));
392 let mut x154: u64 = 0;
393 let mut x155: u64 = 0;
394 fiat_p384_scalar_mulx_u64(&mut x154, &mut x155, x2, (arg2[1]));
395 let mut x156: u64 = 0;
396 let mut x157: u64 = 0;
397 fiat_p384_scalar_mulx_u64(&mut x156, &mut x157, x2, (arg2[0]));
398 let mut x158: u64 = 0;
399 let mut x159: fiat_p384_scalar_u1 = 0;
400 fiat_p384_scalar_addcarryx_u64(&mut x158, &mut x159, 0x0, x157, x154);
401 let mut x160: u64 = 0;
402 let mut x161: fiat_p384_scalar_u1 = 0;
403 fiat_p384_scalar_addcarryx_u64(&mut x160, &mut x161, x159, x155, x152);
404 let mut x162: u64 = 0;
405 let mut x163: fiat_p384_scalar_u1 = 0;
406 fiat_p384_scalar_addcarryx_u64(&mut x162, &mut x163, x161, x153, x150);
407 let mut x164: u64 = 0;
408 let mut x165: fiat_p384_scalar_u1 = 0;
409 fiat_p384_scalar_addcarryx_u64(&mut x164, &mut x165, x163, x151, x148);
410 let mut x166: u64 = 0;
411 let mut x167: fiat_p384_scalar_u1 = 0;
412 fiat_p384_scalar_addcarryx_u64(&mut x166, &mut x167, x165, x149, x146);
413 let x168: u64 = ((x167 as u64) + x147);
414 let mut x169: u64 = 0;
415 let mut x170: fiat_p384_scalar_u1 = 0;
416 fiat_p384_scalar_addcarryx_u64(&mut x169, &mut x170, 0x0, x133, x156);
417 let mut x171: u64 = 0;
418 let mut x172: fiat_p384_scalar_u1 = 0;
419 fiat_p384_scalar_addcarryx_u64(&mut x171, &mut x172, x170, x135, x158);
420 let mut x173: u64 = 0;
421 let mut x174: fiat_p384_scalar_u1 = 0;
422 fiat_p384_scalar_addcarryx_u64(&mut x173, &mut x174, x172, x137, x160);
423 let mut x175: u64 = 0;
424 let mut x176: fiat_p384_scalar_u1 = 0;
425 fiat_p384_scalar_addcarryx_u64(&mut x175, &mut x176, x174, x139, x162);
426 let mut x177: u64 = 0;
427 let mut x178: fiat_p384_scalar_u1 = 0;
428 fiat_p384_scalar_addcarryx_u64(&mut x177, &mut x178, x176, x141, x164);
429 let mut x179: u64 = 0;
430 let mut x180: fiat_p384_scalar_u1 = 0;
431 fiat_p384_scalar_addcarryx_u64(&mut x179, &mut x180, x178, x143, x166);
432 let mut x181: u64 = 0;
433 let mut x182: fiat_p384_scalar_u1 = 0;
434 fiat_p384_scalar_addcarryx_u64(&mut x181, &mut x182, x180, x145, x168);
435 let mut x183: u64 = 0;
436 let mut x184: u64 = 0;
437 fiat_p384_scalar_mulx_u64(&mut x183, &mut x184, x169, 0x6ed46089e88fdc45);
438 let mut x185: u64 = 0;
439 let mut x186: u64 = 0;
440 fiat_p384_scalar_mulx_u64(&mut x185, &mut x186, x183, 0xffffffffffffffff);
441 let mut x187: u64 = 0;
442 let mut x188: u64 = 0;
443 fiat_p384_scalar_mulx_u64(&mut x187, &mut x188, x183, 0xffffffffffffffff);
444 let mut x189: u64 = 0;
445 let mut x190: u64 = 0;
446 fiat_p384_scalar_mulx_u64(&mut x189, &mut x190, x183, 0xffffffffffffffff);
447 let mut x191: u64 = 0;
448 let mut x192: u64 = 0;
449 fiat_p384_scalar_mulx_u64(&mut x191, &mut x192, x183, 0xc7634d81f4372ddf);
450 let mut x193: u64 = 0;
451 let mut x194: u64 = 0;
452 fiat_p384_scalar_mulx_u64(&mut x193, &mut x194, x183, 0x581a0db248b0a77a);
453 let mut x195: u64 = 0;
454 let mut x196: u64 = 0;
455 fiat_p384_scalar_mulx_u64(&mut x195, &mut x196, x183, 0xecec196accc52973);
456 let mut x197: u64 = 0;
457 let mut x198: fiat_p384_scalar_u1 = 0;
458 fiat_p384_scalar_addcarryx_u64(&mut x197, &mut x198, 0x0, x196, x193);
459 let mut x199: u64 = 0;
460 let mut x200: fiat_p384_scalar_u1 = 0;
461 fiat_p384_scalar_addcarryx_u64(&mut x199, &mut x200, x198, x194, x191);
462 let mut x201: u64 = 0;
463 let mut x202: fiat_p384_scalar_u1 = 0;
464 fiat_p384_scalar_addcarryx_u64(&mut x201, &mut x202, x200, x192, x189);
465 let mut x203: u64 = 0;
466 let mut x204: fiat_p384_scalar_u1 = 0;
467 fiat_p384_scalar_addcarryx_u64(&mut x203, &mut x204, x202, x190, x187);
468 let mut x205: u64 = 0;
469 let mut x206: fiat_p384_scalar_u1 = 0;
470 fiat_p384_scalar_addcarryx_u64(&mut x205, &mut x206, x204, x188, x185);
471 let x207: u64 = ((x206 as u64) + x186);
472 let mut x208: u64 = 0;
473 let mut x209: fiat_p384_scalar_u1 = 0;
474 fiat_p384_scalar_addcarryx_u64(&mut x208, &mut x209, 0x0, x169, x195);
475 let mut x210: u64 = 0;
476 let mut x211: fiat_p384_scalar_u1 = 0;
477 fiat_p384_scalar_addcarryx_u64(&mut x210, &mut x211, x209, x171, x197);
478 let mut x212: u64 = 0;
479 let mut x213: fiat_p384_scalar_u1 = 0;
480 fiat_p384_scalar_addcarryx_u64(&mut x212, &mut x213, x211, x173, x199);
481 let mut x214: u64 = 0;
482 let mut x215: fiat_p384_scalar_u1 = 0;
483 fiat_p384_scalar_addcarryx_u64(&mut x214, &mut x215, x213, x175, x201);
484 let mut x216: u64 = 0;
485 let mut x217: fiat_p384_scalar_u1 = 0;
486 fiat_p384_scalar_addcarryx_u64(&mut x216, &mut x217, x215, x177, x203);
487 let mut x218: u64 = 0;
488 let mut x219: fiat_p384_scalar_u1 = 0;
489 fiat_p384_scalar_addcarryx_u64(&mut x218, &mut x219, x217, x179, x205);
490 let mut x220: u64 = 0;
491 let mut x221: fiat_p384_scalar_u1 = 0;
492 fiat_p384_scalar_addcarryx_u64(&mut x220, &mut x221, x219, x181, x207);
493 let x222: u64 = ((x221 as u64) + (x182 as u64));
494 let mut x223: u64 = 0;
495 let mut x224: u64 = 0;
496 fiat_p384_scalar_mulx_u64(&mut x223, &mut x224, x3, (arg2[5]));
497 let mut x225: u64 = 0;
498 let mut x226: u64 = 0;
499 fiat_p384_scalar_mulx_u64(&mut x225, &mut x226, x3, (arg2[4]));
500 let mut x227: u64 = 0;
501 let mut x228: u64 = 0;
502 fiat_p384_scalar_mulx_u64(&mut x227, &mut x228, x3, (arg2[3]));
503 let mut x229: u64 = 0;
504 let mut x230: u64 = 0;
505 fiat_p384_scalar_mulx_u64(&mut x229, &mut x230, x3, (arg2[2]));
506 let mut x231: u64 = 0;
507 let mut x232: u64 = 0;
508 fiat_p384_scalar_mulx_u64(&mut x231, &mut x232, x3, (arg2[1]));
509 let mut x233: u64 = 0;
510 let mut x234: u64 = 0;
511 fiat_p384_scalar_mulx_u64(&mut x233, &mut x234, x3, (arg2[0]));
512 let mut x235: u64 = 0;
513 let mut x236: fiat_p384_scalar_u1 = 0;
514 fiat_p384_scalar_addcarryx_u64(&mut x235, &mut x236, 0x0, x234, x231);
515 let mut x237: u64 = 0;
516 let mut x238: fiat_p384_scalar_u1 = 0;
517 fiat_p384_scalar_addcarryx_u64(&mut x237, &mut x238, x236, x232, x229);
518 let mut x239: u64 = 0;
519 let mut x240: fiat_p384_scalar_u1 = 0;
520 fiat_p384_scalar_addcarryx_u64(&mut x239, &mut x240, x238, x230, x227);
521 let mut x241: u64 = 0;
522 let mut x242: fiat_p384_scalar_u1 = 0;
523 fiat_p384_scalar_addcarryx_u64(&mut x241, &mut x242, x240, x228, x225);
524 let mut x243: u64 = 0;
525 let mut x244: fiat_p384_scalar_u1 = 0;
526 fiat_p384_scalar_addcarryx_u64(&mut x243, &mut x244, x242, x226, x223);
527 let x245: u64 = ((x244 as u64) + x224);
528 let mut x246: u64 = 0;
529 let mut x247: fiat_p384_scalar_u1 = 0;
530 fiat_p384_scalar_addcarryx_u64(&mut x246, &mut x247, 0x0, x210, x233);
531 let mut x248: u64 = 0;
532 let mut x249: fiat_p384_scalar_u1 = 0;
533 fiat_p384_scalar_addcarryx_u64(&mut x248, &mut x249, x247, x212, x235);
534 let mut x250: u64 = 0;
535 let mut x251: fiat_p384_scalar_u1 = 0;
536 fiat_p384_scalar_addcarryx_u64(&mut x250, &mut x251, x249, x214, x237);
537 let mut x252: u64 = 0;
538 let mut x253: fiat_p384_scalar_u1 = 0;
539 fiat_p384_scalar_addcarryx_u64(&mut x252, &mut x253, x251, x216, x239);
540 let mut x254: u64 = 0;
541 let mut x255: fiat_p384_scalar_u1 = 0;
542 fiat_p384_scalar_addcarryx_u64(&mut x254, &mut x255, x253, x218, x241);
543 let mut x256: u64 = 0;
544 let mut x257: fiat_p384_scalar_u1 = 0;
545 fiat_p384_scalar_addcarryx_u64(&mut x256, &mut x257, x255, x220, x243);
546 let mut x258: u64 = 0;
547 let mut x259: fiat_p384_scalar_u1 = 0;
548 fiat_p384_scalar_addcarryx_u64(&mut x258, &mut x259, x257, x222, x245);
549 let mut x260: u64 = 0;
550 let mut x261: u64 = 0;
551 fiat_p384_scalar_mulx_u64(&mut x260, &mut x261, x246, 0x6ed46089e88fdc45);
552 let mut x262: u64 = 0;
553 let mut x263: u64 = 0;
554 fiat_p384_scalar_mulx_u64(&mut x262, &mut x263, x260, 0xffffffffffffffff);
555 let mut x264: u64 = 0;
556 let mut x265: u64 = 0;
557 fiat_p384_scalar_mulx_u64(&mut x264, &mut x265, x260, 0xffffffffffffffff);
558 let mut x266: u64 = 0;
559 let mut x267: u64 = 0;
560 fiat_p384_scalar_mulx_u64(&mut x266, &mut x267, x260, 0xffffffffffffffff);
561 let mut x268: u64 = 0;
562 let mut x269: u64 = 0;
563 fiat_p384_scalar_mulx_u64(&mut x268, &mut x269, x260, 0xc7634d81f4372ddf);
564 let mut x270: u64 = 0;
565 let mut x271: u64 = 0;
566 fiat_p384_scalar_mulx_u64(&mut x270, &mut x271, x260, 0x581a0db248b0a77a);
567 let mut x272: u64 = 0;
568 let mut x273: u64 = 0;
569 fiat_p384_scalar_mulx_u64(&mut x272, &mut x273, x260, 0xecec196accc52973);
570 let mut x274: u64 = 0;
571 let mut x275: fiat_p384_scalar_u1 = 0;
572 fiat_p384_scalar_addcarryx_u64(&mut x274, &mut x275, 0x0, x273, x270);
573 let mut x276: u64 = 0;
574 let mut x277: fiat_p384_scalar_u1 = 0;
575 fiat_p384_scalar_addcarryx_u64(&mut x276, &mut x277, x275, x271, x268);
576 let mut x278: u64 = 0;
577 let mut x279: fiat_p384_scalar_u1 = 0;
578 fiat_p384_scalar_addcarryx_u64(&mut x278, &mut x279, x277, x269, x266);
579 let mut x280: u64 = 0;
580 let mut x281: fiat_p384_scalar_u1 = 0;
581 fiat_p384_scalar_addcarryx_u64(&mut x280, &mut x281, x279, x267, x264);
582 let mut x282: u64 = 0;
583 let mut x283: fiat_p384_scalar_u1 = 0;
584 fiat_p384_scalar_addcarryx_u64(&mut x282, &mut x283, x281, x265, x262);
585 let x284: u64 = ((x283 as u64) + x263);
586 let mut x285: u64 = 0;
587 let mut x286: fiat_p384_scalar_u1 = 0;
588 fiat_p384_scalar_addcarryx_u64(&mut x285, &mut x286, 0x0, x246, x272);
589 let mut x287: u64 = 0;
590 let mut x288: fiat_p384_scalar_u1 = 0;
591 fiat_p384_scalar_addcarryx_u64(&mut x287, &mut x288, x286, x248, x274);
592 let mut x289: u64 = 0;
593 let mut x290: fiat_p384_scalar_u1 = 0;
594 fiat_p384_scalar_addcarryx_u64(&mut x289, &mut x290, x288, x250, x276);
595 let mut x291: u64 = 0;
596 let mut x292: fiat_p384_scalar_u1 = 0;
597 fiat_p384_scalar_addcarryx_u64(&mut x291, &mut x292, x290, x252, x278);
598 let mut x293: u64 = 0;
599 let mut x294: fiat_p384_scalar_u1 = 0;
600 fiat_p384_scalar_addcarryx_u64(&mut x293, &mut x294, x292, x254, x280);
601 let mut x295: u64 = 0;
602 let mut x296: fiat_p384_scalar_u1 = 0;
603 fiat_p384_scalar_addcarryx_u64(&mut x295, &mut x296, x294, x256, x282);
604 let mut x297: u64 = 0;
605 let mut x298: fiat_p384_scalar_u1 = 0;
606 fiat_p384_scalar_addcarryx_u64(&mut x297, &mut x298, x296, x258, x284);
607 let x299: u64 = ((x298 as u64) + (x259 as u64));
608 let mut x300: u64 = 0;
609 let mut x301: u64 = 0;
610 fiat_p384_scalar_mulx_u64(&mut x300, &mut x301, x4, (arg2[5]));
611 let mut x302: u64 = 0;
612 let mut x303: u64 = 0;
613 fiat_p384_scalar_mulx_u64(&mut x302, &mut x303, x4, (arg2[4]));
614 let mut x304: u64 = 0;
615 let mut x305: u64 = 0;
616 fiat_p384_scalar_mulx_u64(&mut x304, &mut x305, x4, (arg2[3]));
617 let mut x306: u64 = 0;
618 let mut x307: u64 = 0;
619 fiat_p384_scalar_mulx_u64(&mut x306, &mut x307, x4, (arg2[2]));
620 let mut x308: u64 = 0;
621 let mut x309: u64 = 0;
622 fiat_p384_scalar_mulx_u64(&mut x308, &mut x309, x4, (arg2[1]));
623 let mut x310: u64 = 0;
624 let mut x311: u64 = 0;
625 fiat_p384_scalar_mulx_u64(&mut x310, &mut x311, x4, (arg2[0]));
626 let mut x312: u64 = 0;
627 let mut x313: fiat_p384_scalar_u1 = 0;
628 fiat_p384_scalar_addcarryx_u64(&mut x312, &mut x313, 0x0, x311, x308);
629 let mut x314: u64 = 0;
630 let mut x315: fiat_p384_scalar_u1 = 0;
631 fiat_p384_scalar_addcarryx_u64(&mut x314, &mut x315, x313, x309, x306);
632 let mut x316: u64 = 0;
633 let mut x317: fiat_p384_scalar_u1 = 0;
634 fiat_p384_scalar_addcarryx_u64(&mut x316, &mut x317, x315, x307, x304);
635 let mut x318: u64 = 0;
636 let mut x319: fiat_p384_scalar_u1 = 0;
637 fiat_p384_scalar_addcarryx_u64(&mut x318, &mut x319, x317, x305, x302);
638 let mut x320: u64 = 0;
639 let mut x321: fiat_p384_scalar_u1 = 0;
640 fiat_p384_scalar_addcarryx_u64(&mut x320, &mut x321, x319, x303, x300);
641 let x322: u64 = ((x321 as u64) + x301);
642 let mut x323: u64 = 0;
643 let mut x324: fiat_p384_scalar_u1 = 0;
644 fiat_p384_scalar_addcarryx_u64(&mut x323, &mut x324, 0x0, x287, x310);
645 let mut x325: u64 = 0;
646 let mut x326: fiat_p384_scalar_u1 = 0;
647 fiat_p384_scalar_addcarryx_u64(&mut x325, &mut x326, x324, x289, x312);
648 let mut x327: u64 = 0;
649 let mut x328: fiat_p384_scalar_u1 = 0;
650 fiat_p384_scalar_addcarryx_u64(&mut x327, &mut x328, x326, x291, x314);
651 let mut x329: u64 = 0;
652 let mut x330: fiat_p384_scalar_u1 = 0;
653 fiat_p384_scalar_addcarryx_u64(&mut x329, &mut x330, x328, x293, x316);
654 let mut x331: u64 = 0;
655 let mut x332: fiat_p384_scalar_u1 = 0;
656 fiat_p384_scalar_addcarryx_u64(&mut x331, &mut x332, x330, x295, x318);
657 let mut x333: u64 = 0;
658 let mut x334: fiat_p384_scalar_u1 = 0;
659 fiat_p384_scalar_addcarryx_u64(&mut x333, &mut x334, x332, x297, x320);
660 let mut x335: u64 = 0;
661 let mut x336: fiat_p384_scalar_u1 = 0;
662 fiat_p384_scalar_addcarryx_u64(&mut x335, &mut x336, x334, x299, x322);
663 let mut x337: u64 = 0;
664 let mut x338: u64 = 0;
665 fiat_p384_scalar_mulx_u64(&mut x337, &mut x338, x323, 0x6ed46089e88fdc45);
666 let mut x339: u64 = 0;
667 let mut x340: u64 = 0;
668 fiat_p384_scalar_mulx_u64(&mut x339, &mut x340, x337, 0xffffffffffffffff);
669 let mut x341: u64 = 0;
670 let mut x342: u64 = 0;
671 fiat_p384_scalar_mulx_u64(&mut x341, &mut x342, x337, 0xffffffffffffffff);
672 let mut x343: u64 = 0;
673 let mut x344: u64 = 0;
674 fiat_p384_scalar_mulx_u64(&mut x343, &mut x344, x337, 0xffffffffffffffff);
675 let mut x345: u64 = 0;
676 let mut x346: u64 = 0;
677 fiat_p384_scalar_mulx_u64(&mut x345, &mut x346, x337, 0xc7634d81f4372ddf);
678 let mut x347: u64 = 0;
679 let mut x348: u64 = 0;
680 fiat_p384_scalar_mulx_u64(&mut x347, &mut x348, x337, 0x581a0db248b0a77a);
681 let mut x349: u64 = 0;
682 let mut x350: u64 = 0;
683 fiat_p384_scalar_mulx_u64(&mut x349, &mut x350, x337, 0xecec196accc52973);
684 let mut x351: u64 = 0;
685 let mut x352: fiat_p384_scalar_u1 = 0;
686 fiat_p384_scalar_addcarryx_u64(&mut x351, &mut x352, 0x0, x350, x347);
687 let mut x353: u64 = 0;
688 let mut x354: fiat_p384_scalar_u1 = 0;
689 fiat_p384_scalar_addcarryx_u64(&mut x353, &mut x354, x352, x348, x345);
690 let mut x355: u64 = 0;
691 let mut x356: fiat_p384_scalar_u1 = 0;
692 fiat_p384_scalar_addcarryx_u64(&mut x355, &mut x356, x354, x346, x343);
693 let mut x357: u64 = 0;
694 let mut x358: fiat_p384_scalar_u1 = 0;
695 fiat_p384_scalar_addcarryx_u64(&mut x357, &mut x358, x356, x344, x341);
696 let mut x359: u64 = 0;
697 let mut x360: fiat_p384_scalar_u1 = 0;
698 fiat_p384_scalar_addcarryx_u64(&mut x359, &mut x360, x358, x342, x339);
699 let x361: u64 = ((x360 as u64) + x340);
700 let mut x362: u64 = 0;
701 let mut x363: fiat_p384_scalar_u1 = 0;
702 fiat_p384_scalar_addcarryx_u64(&mut x362, &mut x363, 0x0, x323, x349);
703 let mut x364: u64 = 0;
704 let mut x365: fiat_p384_scalar_u1 = 0;
705 fiat_p384_scalar_addcarryx_u64(&mut x364, &mut x365, x363, x325, x351);
706 let mut x366: u64 = 0;
707 let mut x367: fiat_p384_scalar_u1 = 0;
708 fiat_p384_scalar_addcarryx_u64(&mut x366, &mut x367, x365, x327, x353);
709 let mut x368: u64 = 0;
710 let mut x369: fiat_p384_scalar_u1 = 0;
711 fiat_p384_scalar_addcarryx_u64(&mut x368, &mut x369, x367, x329, x355);
712 let mut x370: u64 = 0;
713 let mut x371: fiat_p384_scalar_u1 = 0;
714 fiat_p384_scalar_addcarryx_u64(&mut x370, &mut x371, x369, x331, x357);
715 let mut x372: u64 = 0;
716 let mut x373: fiat_p384_scalar_u1 = 0;
717 fiat_p384_scalar_addcarryx_u64(&mut x372, &mut x373, x371, x333, x359);
718 let mut x374: u64 = 0;
719 let mut x375: fiat_p384_scalar_u1 = 0;
720 fiat_p384_scalar_addcarryx_u64(&mut x374, &mut x375, x373, x335, x361);
721 let x376: u64 = ((x375 as u64) + (x336 as u64));
722 let mut x377: u64 = 0;
723 let mut x378: u64 = 0;
724 fiat_p384_scalar_mulx_u64(&mut x377, &mut x378, x5, (arg2[5]));
725 let mut x379: u64 = 0;
726 let mut x380: u64 = 0;
727 fiat_p384_scalar_mulx_u64(&mut x379, &mut x380, x5, (arg2[4]));
728 let mut x381: u64 = 0;
729 let mut x382: u64 = 0;
730 fiat_p384_scalar_mulx_u64(&mut x381, &mut x382, x5, (arg2[3]));
731 let mut x383: u64 = 0;
732 let mut x384: u64 = 0;
733 fiat_p384_scalar_mulx_u64(&mut x383, &mut x384, x5, (arg2[2]));
734 let mut x385: u64 = 0;
735 let mut x386: u64 = 0;
736 fiat_p384_scalar_mulx_u64(&mut x385, &mut x386, x5, (arg2[1]));
737 let mut x387: u64 = 0;
738 let mut x388: u64 = 0;
739 fiat_p384_scalar_mulx_u64(&mut x387, &mut x388, x5, (arg2[0]));
740 let mut x389: u64 = 0;
741 let mut x390: fiat_p384_scalar_u1 = 0;
742 fiat_p384_scalar_addcarryx_u64(&mut x389, &mut x390, 0x0, x388, x385);
743 let mut x391: u64 = 0;
744 let mut x392: fiat_p384_scalar_u1 = 0;
745 fiat_p384_scalar_addcarryx_u64(&mut x391, &mut x392, x390, x386, x383);
746 let mut x393: u64 = 0;
747 let mut x394: fiat_p384_scalar_u1 = 0;
748 fiat_p384_scalar_addcarryx_u64(&mut x393, &mut x394, x392, x384, x381);
749 let mut x395: u64 = 0;
750 let mut x396: fiat_p384_scalar_u1 = 0;
751 fiat_p384_scalar_addcarryx_u64(&mut x395, &mut x396, x394, x382, x379);
752 let mut x397: u64 = 0;
753 let mut x398: fiat_p384_scalar_u1 = 0;
754 fiat_p384_scalar_addcarryx_u64(&mut x397, &mut x398, x396, x380, x377);
755 let x399: u64 = ((x398 as u64) + x378);
756 let mut x400: u64 = 0;
757 let mut x401: fiat_p384_scalar_u1 = 0;
758 fiat_p384_scalar_addcarryx_u64(&mut x400, &mut x401, 0x0, x364, x387);
759 let mut x402: u64 = 0;
760 let mut x403: fiat_p384_scalar_u1 = 0;
761 fiat_p384_scalar_addcarryx_u64(&mut x402, &mut x403, x401, x366, x389);
762 let mut x404: u64 = 0;
763 let mut x405: fiat_p384_scalar_u1 = 0;
764 fiat_p384_scalar_addcarryx_u64(&mut x404, &mut x405, x403, x368, x391);
765 let mut x406: u64 = 0;
766 let mut x407: fiat_p384_scalar_u1 = 0;
767 fiat_p384_scalar_addcarryx_u64(&mut x406, &mut x407, x405, x370, x393);
768 let mut x408: u64 = 0;
769 let mut x409: fiat_p384_scalar_u1 = 0;
770 fiat_p384_scalar_addcarryx_u64(&mut x408, &mut x409, x407, x372, x395);
771 let mut x410: u64 = 0;
772 let mut x411: fiat_p384_scalar_u1 = 0;
773 fiat_p384_scalar_addcarryx_u64(&mut x410, &mut x411, x409, x374, x397);
774 let mut x412: u64 = 0;
775 let mut x413: fiat_p384_scalar_u1 = 0;
776 fiat_p384_scalar_addcarryx_u64(&mut x412, &mut x413, x411, x376, x399);
777 let mut x414: u64 = 0;
778 let mut x415: u64 = 0;
779 fiat_p384_scalar_mulx_u64(&mut x414, &mut x415, x400, 0x6ed46089e88fdc45);
780 let mut x416: u64 = 0;
781 let mut x417: u64 = 0;
782 fiat_p384_scalar_mulx_u64(&mut x416, &mut x417, x414, 0xffffffffffffffff);
783 let mut x418: u64 = 0;
784 let mut x419: u64 = 0;
785 fiat_p384_scalar_mulx_u64(&mut x418, &mut x419, x414, 0xffffffffffffffff);
786 let mut x420: u64 = 0;
787 let mut x421: u64 = 0;
788 fiat_p384_scalar_mulx_u64(&mut x420, &mut x421, x414, 0xffffffffffffffff);
789 let mut x422: u64 = 0;
790 let mut x423: u64 = 0;
791 fiat_p384_scalar_mulx_u64(&mut x422, &mut x423, x414, 0xc7634d81f4372ddf);
792 let mut x424: u64 = 0;
793 let mut x425: u64 = 0;
794 fiat_p384_scalar_mulx_u64(&mut x424, &mut x425, x414, 0x581a0db248b0a77a);
795 let mut x426: u64 = 0;
796 let mut x427: u64 = 0;
797 fiat_p384_scalar_mulx_u64(&mut x426, &mut x427, x414, 0xecec196accc52973);
798 let mut x428: u64 = 0;
799 let mut x429: fiat_p384_scalar_u1 = 0;
800 fiat_p384_scalar_addcarryx_u64(&mut x428, &mut x429, 0x0, x427, x424);
801 let mut x430: u64 = 0;
802 let mut x431: fiat_p384_scalar_u1 = 0;
803 fiat_p384_scalar_addcarryx_u64(&mut x430, &mut x431, x429, x425, x422);
804 let mut x432: u64 = 0;
805 let mut x433: fiat_p384_scalar_u1 = 0;
806 fiat_p384_scalar_addcarryx_u64(&mut x432, &mut x433, x431, x423, x420);
807 let mut x434: u64 = 0;
808 let mut x435: fiat_p384_scalar_u1 = 0;
809 fiat_p384_scalar_addcarryx_u64(&mut x434, &mut x435, x433, x421, x418);
810 let mut x436: u64 = 0;
811 let mut x437: fiat_p384_scalar_u1 = 0;
812 fiat_p384_scalar_addcarryx_u64(&mut x436, &mut x437, x435, x419, x416);
813 let x438: u64 = ((x437 as u64) + x417);
814 let mut x439: u64 = 0;
815 let mut x440: fiat_p384_scalar_u1 = 0;
816 fiat_p384_scalar_addcarryx_u64(&mut x439, &mut x440, 0x0, x400, x426);
817 let mut x441: u64 = 0;
818 let mut x442: fiat_p384_scalar_u1 = 0;
819 fiat_p384_scalar_addcarryx_u64(&mut x441, &mut x442, x440, x402, x428);
820 let mut x443: u64 = 0;
821 let mut x444: fiat_p384_scalar_u1 = 0;
822 fiat_p384_scalar_addcarryx_u64(&mut x443, &mut x444, x442, x404, x430);
823 let mut x445: u64 = 0;
824 let mut x446: fiat_p384_scalar_u1 = 0;
825 fiat_p384_scalar_addcarryx_u64(&mut x445, &mut x446, x444, x406, x432);
826 let mut x447: u64 = 0;
827 let mut x448: fiat_p384_scalar_u1 = 0;
828 fiat_p384_scalar_addcarryx_u64(&mut x447, &mut x448, x446, x408, x434);
829 let mut x449: u64 = 0;
830 let mut x450: fiat_p384_scalar_u1 = 0;
831 fiat_p384_scalar_addcarryx_u64(&mut x449, &mut x450, x448, x410, x436);
832 let mut x451: u64 = 0;
833 let mut x452: fiat_p384_scalar_u1 = 0;
834 fiat_p384_scalar_addcarryx_u64(&mut x451, &mut x452, x450, x412, x438);
835 let x453: u64 = ((x452 as u64) + (x413 as u64));
836 let mut x454: u64 = 0;
837 let mut x455: fiat_p384_scalar_u1 = 0;
838 fiat_p384_scalar_subborrowx_u64(&mut x454, &mut x455, 0x0, x441, 0xecec196accc52973);
839 let mut x456: u64 = 0;
840 let mut x457: fiat_p384_scalar_u1 = 0;
841 fiat_p384_scalar_subborrowx_u64(&mut x456, &mut x457, x455, x443, 0x581a0db248b0a77a);
842 let mut x458: u64 = 0;
843 let mut x459: fiat_p384_scalar_u1 = 0;
844 fiat_p384_scalar_subborrowx_u64(&mut x458, &mut x459, x457, x445, 0xc7634d81f4372ddf);
845 let mut x460: u64 = 0;
846 let mut x461: fiat_p384_scalar_u1 = 0;
847 fiat_p384_scalar_subborrowx_u64(&mut x460, &mut x461, x459, x447, 0xffffffffffffffff);
848 let mut x462: u64 = 0;
849 let mut x463: fiat_p384_scalar_u1 = 0;
850 fiat_p384_scalar_subborrowx_u64(&mut x462, &mut x463, x461, x449, 0xffffffffffffffff);
851 let mut x464: u64 = 0;
852 let mut x465: fiat_p384_scalar_u1 = 0;
853 fiat_p384_scalar_subborrowx_u64(&mut x464, &mut x465, x463, x451, 0xffffffffffffffff);
854 let mut x466: u64 = 0;
855 let mut x467: fiat_p384_scalar_u1 = 0;
856 fiat_p384_scalar_subborrowx_u64(&mut x466, &mut x467, x465, x453, (0x0 as u64));
857 let mut x468: u64 = 0;
858 fiat_p384_scalar_cmovznz_u64(&mut x468, x467, x454, x441);
859 let mut x469: u64 = 0;
860 fiat_p384_scalar_cmovznz_u64(&mut x469, x467, x456, x443);
861 let mut x470: u64 = 0;
862 fiat_p384_scalar_cmovznz_u64(&mut x470, x467, x458, x445);
863 let mut x471: u64 = 0;
864 fiat_p384_scalar_cmovznz_u64(&mut x471, x467, x460, x447);
865 let mut x472: u64 = 0;
866 fiat_p384_scalar_cmovznz_u64(&mut x472, x467, x462, x449);
867 let mut x473: u64 = 0;
868 fiat_p384_scalar_cmovznz_u64(&mut x473, x467, x464, x451);
869 out1[0] = x468;
870 out1[1] = x469;
871 out1[2] = x470;
872 out1[3] = x471;
873 out1[4] = x472;
874 out1[5] = x473;
875}
876
877/// The function fiat_p384_scalar_square squares a field element in the Montgomery domain.
878///
879/// Preconditions:
880/// 0 ≤ eval arg1 < m
881/// Postconditions:
882/// eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) * eval (from_montgomery arg1)) mod m
883/// 0 ≤ eval out1 < m
884///
885#[inline]
4b012472 886pub fn fiat_p384_scalar_square(out1: &mut fiat_p384_scalar_montgomery_domain_field_element, arg1: &fiat_p384_scalar_montgomery_domain_field_element) {
0a29b90c
FG
887 let x1: u64 = (arg1[1]);
888 let x2: u64 = (arg1[2]);
889 let x3: u64 = (arg1[3]);
890 let x4: u64 = (arg1[4]);
891 let x5: u64 = (arg1[5]);
892 let x6: u64 = (arg1[0]);
893 let mut x7: u64 = 0;
894 let mut x8: u64 = 0;
895 fiat_p384_scalar_mulx_u64(&mut x7, &mut x8, x6, (arg1[5]));
896 let mut x9: u64 = 0;
897 let mut x10: u64 = 0;
898 fiat_p384_scalar_mulx_u64(&mut x9, &mut x10, x6, (arg1[4]));
899 let mut x11: u64 = 0;
900 let mut x12: u64 = 0;
901 fiat_p384_scalar_mulx_u64(&mut x11, &mut x12, x6, (arg1[3]));
902 let mut x13: u64 = 0;
903 let mut x14: u64 = 0;
904 fiat_p384_scalar_mulx_u64(&mut x13, &mut x14, x6, (arg1[2]));
905 let mut x15: u64 = 0;
906 let mut x16: u64 = 0;
907 fiat_p384_scalar_mulx_u64(&mut x15, &mut x16, x6, (arg1[1]));
908 let mut x17: u64 = 0;
909 let mut x18: u64 = 0;
910 fiat_p384_scalar_mulx_u64(&mut x17, &mut x18, x6, (arg1[0]));
911 let mut x19: u64 = 0;
912 let mut x20: fiat_p384_scalar_u1 = 0;
913 fiat_p384_scalar_addcarryx_u64(&mut x19, &mut x20, 0x0, x18, x15);
914 let mut x21: u64 = 0;
915 let mut x22: fiat_p384_scalar_u1 = 0;
916 fiat_p384_scalar_addcarryx_u64(&mut x21, &mut x22, x20, x16, x13);
917 let mut x23: u64 = 0;
918 let mut x24: fiat_p384_scalar_u1 = 0;
919 fiat_p384_scalar_addcarryx_u64(&mut x23, &mut x24, x22, x14, x11);
920 let mut x25: u64 = 0;
921 let mut x26: fiat_p384_scalar_u1 = 0;
922 fiat_p384_scalar_addcarryx_u64(&mut x25, &mut x26, x24, x12, x9);
923 let mut x27: u64 = 0;
924 let mut x28: fiat_p384_scalar_u1 = 0;
925 fiat_p384_scalar_addcarryx_u64(&mut x27, &mut x28, x26, x10, x7);
926 let x29: u64 = ((x28 as u64) + x8);
927 let mut x30: u64 = 0;
928 let mut x31: u64 = 0;
929 fiat_p384_scalar_mulx_u64(&mut x30, &mut x31, x17, 0x6ed46089e88fdc45);
930 let mut x32: u64 = 0;
931 let mut x33: u64 = 0;
932 fiat_p384_scalar_mulx_u64(&mut x32, &mut x33, x30, 0xffffffffffffffff);
933 let mut x34: u64 = 0;
934 let mut x35: u64 = 0;
935 fiat_p384_scalar_mulx_u64(&mut x34, &mut x35, x30, 0xffffffffffffffff);
936 let mut x36: u64 = 0;
937 let mut x37: u64 = 0;
938 fiat_p384_scalar_mulx_u64(&mut x36, &mut x37, x30, 0xffffffffffffffff);
939 let mut x38: u64 = 0;
940 let mut x39: u64 = 0;
941 fiat_p384_scalar_mulx_u64(&mut x38, &mut x39, x30, 0xc7634d81f4372ddf);
942 let mut x40: u64 = 0;
943 let mut x41: u64 = 0;
944 fiat_p384_scalar_mulx_u64(&mut x40, &mut x41, x30, 0x581a0db248b0a77a);
945 let mut x42: u64 = 0;
946 let mut x43: u64 = 0;
947 fiat_p384_scalar_mulx_u64(&mut x42, &mut x43, x30, 0xecec196accc52973);
948 let mut x44: u64 = 0;
949 let mut x45: fiat_p384_scalar_u1 = 0;
950 fiat_p384_scalar_addcarryx_u64(&mut x44, &mut x45, 0x0, x43, x40);
951 let mut x46: u64 = 0;
952 let mut x47: fiat_p384_scalar_u1 = 0;
953 fiat_p384_scalar_addcarryx_u64(&mut x46, &mut x47, x45, x41, x38);
954 let mut x48: u64 = 0;
955 let mut x49: fiat_p384_scalar_u1 = 0;
956 fiat_p384_scalar_addcarryx_u64(&mut x48, &mut x49, x47, x39, x36);
957 let mut x50: u64 = 0;
958 let mut x51: fiat_p384_scalar_u1 = 0;
959 fiat_p384_scalar_addcarryx_u64(&mut x50, &mut x51, x49, x37, x34);
960 let mut x52: u64 = 0;
961 let mut x53: fiat_p384_scalar_u1 = 0;
962 fiat_p384_scalar_addcarryx_u64(&mut x52, &mut x53, x51, x35, x32);
963 let x54: u64 = ((x53 as u64) + x33);
964 let mut x55: u64 = 0;
965 let mut x56: fiat_p384_scalar_u1 = 0;
966 fiat_p384_scalar_addcarryx_u64(&mut x55, &mut x56, 0x0, x17, x42);
967 let mut x57: u64 = 0;
968 let mut x58: fiat_p384_scalar_u1 = 0;
969 fiat_p384_scalar_addcarryx_u64(&mut x57, &mut x58, x56, x19, x44);
970 let mut x59: u64 = 0;
971 let mut x60: fiat_p384_scalar_u1 = 0;
972 fiat_p384_scalar_addcarryx_u64(&mut x59, &mut x60, x58, x21, x46);
973 let mut x61: u64 = 0;
974 let mut x62: fiat_p384_scalar_u1 = 0;
975 fiat_p384_scalar_addcarryx_u64(&mut x61, &mut x62, x60, x23, x48);
976 let mut x63: u64 = 0;
977 let mut x64: fiat_p384_scalar_u1 = 0;
978 fiat_p384_scalar_addcarryx_u64(&mut x63, &mut x64, x62, x25, x50);
979 let mut x65: u64 = 0;
980 let mut x66: fiat_p384_scalar_u1 = 0;
981 fiat_p384_scalar_addcarryx_u64(&mut x65, &mut x66, x64, x27, x52);
982 let mut x67: u64 = 0;
983 let mut x68: fiat_p384_scalar_u1 = 0;
984 fiat_p384_scalar_addcarryx_u64(&mut x67, &mut x68, x66, x29, x54);
985 let mut x69: u64 = 0;
986 let mut x70: u64 = 0;
987 fiat_p384_scalar_mulx_u64(&mut x69, &mut x70, x1, (arg1[5]));
988 let mut x71: u64 = 0;
989 let mut x72: u64 = 0;
990 fiat_p384_scalar_mulx_u64(&mut x71, &mut x72, x1, (arg1[4]));
991 let mut x73: u64 = 0;
992 let mut x74: u64 = 0;
993 fiat_p384_scalar_mulx_u64(&mut x73, &mut x74, x1, (arg1[3]));
994 let mut x75: u64 = 0;
995 let mut x76: u64 = 0;
996 fiat_p384_scalar_mulx_u64(&mut x75, &mut x76, x1, (arg1[2]));
997 let mut x77: u64 = 0;
998 let mut x78: u64 = 0;
999 fiat_p384_scalar_mulx_u64(&mut x77, &mut x78, x1, (arg1[1]));
1000 let mut x79: u64 = 0;
1001 let mut x80: u64 = 0;
1002 fiat_p384_scalar_mulx_u64(&mut x79, &mut x80, x1, (arg1[0]));
1003 let mut x81: u64 = 0;
1004 let mut x82: fiat_p384_scalar_u1 = 0;
1005 fiat_p384_scalar_addcarryx_u64(&mut x81, &mut x82, 0x0, x80, x77);
1006 let mut x83: u64 = 0;
1007 let mut x84: fiat_p384_scalar_u1 = 0;
1008 fiat_p384_scalar_addcarryx_u64(&mut x83, &mut x84, x82, x78, x75);
1009 let mut x85: u64 = 0;
1010 let mut x86: fiat_p384_scalar_u1 = 0;
1011 fiat_p384_scalar_addcarryx_u64(&mut x85, &mut x86, x84, x76, x73);
1012 let mut x87: u64 = 0;
1013 let mut x88: fiat_p384_scalar_u1 = 0;
1014 fiat_p384_scalar_addcarryx_u64(&mut x87, &mut x88, x86, x74, x71);
1015 let mut x89: u64 = 0;
1016 let mut x90: fiat_p384_scalar_u1 = 0;
1017 fiat_p384_scalar_addcarryx_u64(&mut x89, &mut x90, x88, x72, x69);
1018 let x91: u64 = ((x90 as u64) + x70);
1019 let mut x92: u64 = 0;
1020 let mut x93: fiat_p384_scalar_u1 = 0;
1021 fiat_p384_scalar_addcarryx_u64(&mut x92, &mut x93, 0x0, x57, x79);
1022 let mut x94: u64 = 0;
1023 let mut x95: fiat_p384_scalar_u1 = 0;
1024 fiat_p384_scalar_addcarryx_u64(&mut x94, &mut x95, x93, x59, x81);
1025 let mut x96: u64 = 0;
1026 let mut x97: fiat_p384_scalar_u1 = 0;
1027 fiat_p384_scalar_addcarryx_u64(&mut x96, &mut x97, x95, x61, x83);
1028 let mut x98: u64 = 0;
1029 let mut x99: fiat_p384_scalar_u1 = 0;
1030 fiat_p384_scalar_addcarryx_u64(&mut x98, &mut x99, x97, x63, x85);
1031 let mut x100: u64 = 0;
1032 let mut x101: fiat_p384_scalar_u1 = 0;
1033 fiat_p384_scalar_addcarryx_u64(&mut x100, &mut x101, x99, x65, x87);
1034 let mut x102: u64 = 0;
1035 let mut x103: fiat_p384_scalar_u1 = 0;
1036 fiat_p384_scalar_addcarryx_u64(&mut x102, &mut x103, x101, x67, x89);
1037 let mut x104: u64 = 0;
1038 let mut x105: fiat_p384_scalar_u1 = 0;
1039 fiat_p384_scalar_addcarryx_u64(&mut x104, &mut x105, x103, (x68 as u64), x91);
1040 let mut x106: u64 = 0;
1041 let mut x107: u64 = 0;
1042 fiat_p384_scalar_mulx_u64(&mut x106, &mut x107, x92, 0x6ed46089e88fdc45);
1043 let mut x108: u64 = 0;
1044 let mut x109: u64 = 0;
1045 fiat_p384_scalar_mulx_u64(&mut x108, &mut x109, x106, 0xffffffffffffffff);
1046 let mut x110: u64 = 0;
1047 let mut x111: u64 = 0;
1048 fiat_p384_scalar_mulx_u64(&mut x110, &mut x111, x106, 0xffffffffffffffff);
1049 let mut x112: u64 = 0;
1050 let mut x113: u64 = 0;
1051 fiat_p384_scalar_mulx_u64(&mut x112, &mut x113, x106, 0xffffffffffffffff);
1052 let mut x114: u64 = 0;
1053 let mut x115: u64 = 0;
1054 fiat_p384_scalar_mulx_u64(&mut x114, &mut x115, x106, 0xc7634d81f4372ddf);
1055 let mut x116: u64 = 0;
1056 let mut x117: u64 = 0;
1057 fiat_p384_scalar_mulx_u64(&mut x116, &mut x117, x106, 0x581a0db248b0a77a);
1058 let mut x118: u64 = 0;
1059 let mut x119: u64 = 0;
1060 fiat_p384_scalar_mulx_u64(&mut x118, &mut x119, x106, 0xecec196accc52973);
1061 let mut x120: u64 = 0;
1062 let mut x121: fiat_p384_scalar_u1 = 0;
1063 fiat_p384_scalar_addcarryx_u64(&mut x120, &mut x121, 0x0, x119, x116);
1064 let mut x122: u64 = 0;
1065 let mut x123: fiat_p384_scalar_u1 = 0;
1066 fiat_p384_scalar_addcarryx_u64(&mut x122, &mut x123, x121, x117, x114);
1067 let mut x124: u64 = 0;
1068 let mut x125: fiat_p384_scalar_u1 = 0;
1069 fiat_p384_scalar_addcarryx_u64(&mut x124, &mut x125, x123, x115, x112);
1070 let mut x126: u64 = 0;
1071 let mut x127: fiat_p384_scalar_u1 = 0;
1072 fiat_p384_scalar_addcarryx_u64(&mut x126, &mut x127, x125, x113, x110);
1073 let mut x128: u64 = 0;
1074 let mut x129: fiat_p384_scalar_u1 = 0;
1075 fiat_p384_scalar_addcarryx_u64(&mut x128, &mut x129, x127, x111, x108);
1076 let x130: u64 = ((x129 as u64) + x109);
1077 let mut x131: u64 = 0;
1078 let mut x132: fiat_p384_scalar_u1 = 0;
1079 fiat_p384_scalar_addcarryx_u64(&mut x131, &mut x132, 0x0, x92, x118);
1080 let mut x133: u64 = 0;
1081 let mut x134: fiat_p384_scalar_u1 = 0;
1082 fiat_p384_scalar_addcarryx_u64(&mut x133, &mut x134, x132, x94, x120);
1083 let mut x135: u64 = 0;
1084 let mut x136: fiat_p384_scalar_u1 = 0;
1085 fiat_p384_scalar_addcarryx_u64(&mut x135, &mut x136, x134, x96, x122);
1086 let mut x137: u64 = 0;
1087 let mut x138: fiat_p384_scalar_u1 = 0;
1088 fiat_p384_scalar_addcarryx_u64(&mut x137, &mut x138, x136, x98, x124);
1089 let mut x139: u64 = 0;
1090 let mut x140: fiat_p384_scalar_u1 = 0;
1091 fiat_p384_scalar_addcarryx_u64(&mut x139, &mut x140, x138, x100, x126);
1092 let mut x141: u64 = 0;
1093 let mut x142: fiat_p384_scalar_u1 = 0;
1094 fiat_p384_scalar_addcarryx_u64(&mut x141, &mut x142, x140, x102, x128);
1095 let mut x143: u64 = 0;
1096 let mut x144: fiat_p384_scalar_u1 = 0;
1097 fiat_p384_scalar_addcarryx_u64(&mut x143, &mut x144, x142, x104, x130);
1098 let x145: u64 = ((x144 as u64) + (x105 as u64));
1099 let mut x146: u64 = 0;
1100 let mut x147: u64 = 0;
1101 fiat_p384_scalar_mulx_u64(&mut x146, &mut x147, x2, (arg1[5]));
1102 let mut x148: u64 = 0;
1103 let mut x149: u64 = 0;
1104 fiat_p384_scalar_mulx_u64(&mut x148, &mut x149, x2, (arg1[4]));
1105 let mut x150: u64 = 0;
1106 let mut x151: u64 = 0;
1107 fiat_p384_scalar_mulx_u64(&mut x150, &mut x151, x2, (arg1[3]));
1108 let mut x152: u64 = 0;
1109 let mut x153: u64 = 0;
1110 fiat_p384_scalar_mulx_u64(&mut x152, &mut x153, x2, (arg1[2]));
1111 let mut x154: u64 = 0;
1112 let mut x155: u64 = 0;
1113 fiat_p384_scalar_mulx_u64(&mut x154, &mut x155, x2, (arg1[1]));
1114 let mut x156: u64 = 0;
1115 let mut x157: u64 = 0;
1116 fiat_p384_scalar_mulx_u64(&mut x156, &mut x157, x2, (arg1[0]));
1117 let mut x158: u64 = 0;
1118 let mut x159: fiat_p384_scalar_u1 = 0;
1119 fiat_p384_scalar_addcarryx_u64(&mut x158, &mut x159, 0x0, x157, x154);
1120 let mut x160: u64 = 0;
1121 let mut x161: fiat_p384_scalar_u1 = 0;
1122 fiat_p384_scalar_addcarryx_u64(&mut x160, &mut x161, x159, x155, x152);
1123 let mut x162: u64 = 0;
1124 let mut x163: fiat_p384_scalar_u1 = 0;
1125 fiat_p384_scalar_addcarryx_u64(&mut x162, &mut x163, x161, x153, x150);
1126 let mut x164: u64 = 0;
1127 let mut x165: fiat_p384_scalar_u1 = 0;
1128 fiat_p384_scalar_addcarryx_u64(&mut x164, &mut x165, x163, x151, x148);
1129 let mut x166: u64 = 0;
1130 let mut x167: fiat_p384_scalar_u1 = 0;
1131 fiat_p384_scalar_addcarryx_u64(&mut x166, &mut x167, x165, x149, x146);
1132 let x168: u64 = ((x167 as u64) + x147);
1133 let mut x169: u64 = 0;
1134 let mut x170: fiat_p384_scalar_u1 = 0;
1135 fiat_p384_scalar_addcarryx_u64(&mut x169, &mut x170, 0x0, x133, x156);
1136 let mut x171: u64 = 0;
1137 let mut x172: fiat_p384_scalar_u1 = 0;
1138 fiat_p384_scalar_addcarryx_u64(&mut x171, &mut x172, x170, x135, x158);
1139 let mut x173: u64 = 0;
1140 let mut x174: fiat_p384_scalar_u1 = 0;
1141 fiat_p384_scalar_addcarryx_u64(&mut x173, &mut x174, x172, x137, x160);
1142 let mut x175: u64 = 0;
1143 let mut x176: fiat_p384_scalar_u1 = 0;
1144 fiat_p384_scalar_addcarryx_u64(&mut x175, &mut x176, x174, x139, x162);
1145 let mut x177: u64 = 0;
1146 let mut x178: fiat_p384_scalar_u1 = 0;
1147 fiat_p384_scalar_addcarryx_u64(&mut x177, &mut x178, x176, x141, x164);
1148 let mut x179: u64 = 0;
1149 let mut x180: fiat_p384_scalar_u1 = 0;
1150 fiat_p384_scalar_addcarryx_u64(&mut x179, &mut x180, x178, x143, x166);
1151 let mut x181: u64 = 0;
1152 let mut x182: fiat_p384_scalar_u1 = 0;
1153 fiat_p384_scalar_addcarryx_u64(&mut x181, &mut x182, x180, x145, x168);
1154 let mut x183: u64 = 0;
1155 let mut x184: u64 = 0;
1156 fiat_p384_scalar_mulx_u64(&mut x183, &mut x184, x169, 0x6ed46089e88fdc45);
1157 let mut x185: u64 = 0;
1158 let mut x186: u64 = 0;
1159 fiat_p384_scalar_mulx_u64(&mut x185, &mut x186, x183, 0xffffffffffffffff);
1160 let mut x187: u64 = 0;
1161 let mut x188: u64 = 0;
1162 fiat_p384_scalar_mulx_u64(&mut x187, &mut x188, x183, 0xffffffffffffffff);
1163 let mut x189: u64 = 0;
1164 let mut x190: u64 = 0;
1165 fiat_p384_scalar_mulx_u64(&mut x189, &mut x190, x183, 0xffffffffffffffff);
1166 let mut x191: u64 = 0;
1167 let mut x192: u64 = 0;
1168 fiat_p384_scalar_mulx_u64(&mut x191, &mut x192, x183, 0xc7634d81f4372ddf);
1169 let mut x193: u64 = 0;
1170 let mut x194: u64 = 0;
1171 fiat_p384_scalar_mulx_u64(&mut x193, &mut x194, x183, 0x581a0db248b0a77a);
1172 let mut x195: u64 = 0;
1173 let mut x196: u64 = 0;
1174 fiat_p384_scalar_mulx_u64(&mut x195, &mut x196, x183, 0xecec196accc52973);
1175 let mut x197: u64 = 0;
1176 let mut x198: fiat_p384_scalar_u1 = 0;
1177 fiat_p384_scalar_addcarryx_u64(&mut x197, &mut x198, 0x0, x196, x193);
1178 let mut x199: u64 = 0;
1179 let mut x200: fiat_p384_scalar_u1 = 0;
1180 fiat_p384_scalar_addcarryx_u64(&mut x199, &mut x200, x198, x194, x191);
1181 let mut x201: u64 = 0;
1182 let mut x202: fiat_p384_scalar_u1 = 0;
1183 fiat_p384_scalar_addcarryx_u64(&mut x201, &mut x202, x200, x192, x189);
1184 let mut x203: u64 = 0;
1185 let mut x204: fiat_p384_scalar_u1 = 0;
1186 fiat_p384_scalar_addcarryx_u64(&mut x203, &mut x204, x202, x190, x187);
1187 let mut x205: u64 = 0;
1188 let mut x206: fiat_p384_scalar_u1 = 0;
1189 fiat_p384_scalar_addcarryx_u64(&mut x205, &mut x206, x204, x188, x185);
1190 let x207: u64 = ((x206 as u64) + x186);
1191 let mut x208: u64 = 0;
1192 let mut x209: fiat_p384_scalar_u1 = 0;
1193 fiat_p384_scalar_addcarryx_u64(&mut x208, &mut x209, 0x0, x169, x195);
1194 let mut x210: u64 = 0;
1195 let mut x211: fiat_p384_scalar_u1 = 0;
1196 fiat_p384_scalar_addcarryx_u64(&mut x210, &mut x211, x209, x171, x197);
1197 let mut x212: u64 = 0;
1198 let mut x213: fiat_p384_scalar_u1 = 0;
1199 fiat_p384_scalar_addcarryx_u64(&mut x212, &mut x213, x211, x173, x199);
1200 let mut x214: u64 = 0;
1201 let mut x215: fiat_p384_scalar_u1 = 0;
1202 fiat_p384_scalar_addcarryx_u64(&mut x214, &mut x215, x213, x175, x201);
1203 let mut x216: u64 = 0;
1204 let mut x217: fiat_p384_scalar_u1 = 0;
1205 fiat_p384_scalar_addcarryx_u64(&mut x216, &mut x217, x215, x177, x203);
1206 let mut x218: u64 = 0;
1207 let mut x219: fiat_p384_scalar_u1 = 0;
1208 fiat_p384_scalar_addcarryx_u64(&mut x218, &mut x219, x217, x179, x205);
1209 let mut x220: u64 = 0;
1210 let mut x221: fiat_p384_scalar_u1 = 0;
1211 fiat_p384_scalar_addcarryx_u64(&mut x220, &mut x221, x219, x181, x207);
1212 let x222: u64 = ((x221 as u64) + (x182 as u64));
1213 let mut x223: u64 = 0;
1214 let mut x224: u64 = 0;
1215 fiat_p384_scalar_mulx_u64(&mut x223, &mut x224, x3, (arg1[5]));
1216 let mut x225: u64 = 0;
1217 let mut x226: u64 = 0;
1218 fiat_p384_scalar_mulx_u64(&mut x225, &mut x226, x3, (arg1[4]));
1219 let mut x227: u64 = 0;
1220 let mut x228: u64 = 0;
1221 fiat_p384_scalar_mulx_u64(&mut x227, &mut x228, x3, (arg1[3]));
1222 let mut x229: u64 = 0;
1223 let mut x230: u64 = 0;
1224 fiat_p384_scalar_mulx_u64(&mut x229, &mut x230, x3, (arg1[2]));
1225 let mut x231: u64 = 0;
1226 let mut x232: u64 = 0;
1227 fiat_p384_scalar_mulx_u64(&mut x231, &mut x232, x3, (arg1[1]));
1228 let mut x233: u64 = 0;
1229 let mut x234: u64 = 0;
1230 fiat_p384_scalar_mulx_u64(&mut x233, &mut x234, x3, (arg1[0]));
1231 let mut x235: u64 = 0;
1232 let mut x236: fiat_p384_scalar_u1 = 0;
1233 fiat_p384_scalar_addcarryx_u64(&mut x235, &mut x236, 0x0, x234, x231);
1234 let mut x237: u64 = 0;
1235 let mut x238: fiat_p384_scalar_u1 = 0;
1236 fiat_p384_scalar_addcarryx_u64(&mut x237, &mut x238, x236, x232, x229);
1237 let mut x239: u64 = 0;
1238 let mut x240: fiat_p384_scalar_u1 = 0;
1239 fiat_p384_scalar_addcarryx_u64(&mut x239, &mut x240, x238, x230, x227);
1240 let mut x241: u64 = 0;
1241 let mut x242: fiat_p384_scalar_u1 = 0;
1242 fiat_p384_scalar_addcarryx_u64(&mut x241, &mut x242, x240, x228, x225);
1243 let mut x243: u64 = 0;
1244 let mut x244: fiat_p384_scalar_u1 = 0;
1245 fiat_p384_scalar_addcarryx_u64(&mut x243, &mut x244, x242, x226, x223);
1246 let x245: u64 = ((x244 as u64) + x224);
1247 let mut x246: u64 = 0;
1248 let mut x247: fiat_p384_scalar_u1 = 0;
1249 fiat_p384_scalar_addcarryx_u64(&mut x246, &mut x247, 0x0, x210, x233);
1250 let mut x248: u64 = 0;
1251 let mut x249: fiat_p384_scalar_u1 = 0;
1252 fiat_p384_scalar_addcarryx_u64(&mut x248, &mut x249, x247, x212, x235);
1253 let mut x250: u64 = 0;
1254 let mut x251: fiat_p384_scalar_u1 = 0;
1255 fiat_p384_scalar_addcarryx_u64(&mut x250, &mut x251, x249, x214, x237);
1256 let mut x252: u64 = 0;
1257 let mut x253: fiat_p384_scalar_u1 = 0;
1258 fiat_p384_scalar_addcarryx_u64(&mut x252, &mut x253, x251, x216, x239);
1259 let mut x254: u64 = 0;
1260 let mut x255: fiat_p384_scalar_u1 = 0;
1261 fiat_p384_scalar_addcarryx_u64(&mut x254, &mut x255, x253, x218, x241);
1262 let mut x256: u64 = 0;
1263 let mut x257: fiat_p384_scalar_u1 = 0;
1264 fiat_p384_scalar_addcarryx_u64(&mut x256, &mut x257, x255, x220, x243);
1265 let mut x258: u64 = 0;
1266 let mut x259: fiat_p384_scalar_u1 = 0;
1267 fiat_p384_scalar_addcarryx_u64(&mut x258, &mut x259, x257, x222, x245);
1268 let mut x260: u64 = 0;
1269 let mut x261: u64 = 0;
1270 fiat_p384_scalar_mulx_u64(&mut x260, &mut x261, x246, 0x6ed46089e88fdc45);
1271 let mut x262: u64 = 0;
1272 let mut x263: u64 = 0;
1273 fiat_p384_scalar_mulx_u64(&mut x262, &mut x263, x260, 0xffffffffffffffff);
1274 let mut x264: u64 = 0;
1275 let mut x265: u64 = 0;
1276 fiat_p384_scalar_mulx_u64(&mut x264, &mut x265, x260, 0xffffffffffffffff);
1277 let mut x266: u64 = 0;
1278 let mut x267: u64 = 0;
1279 fiat_p384_scalar_mulx_u64(&mut x266, &mut x267, x260, 0xffffffffffffffff);
1280 let mut x268: u64 = 0;
1281 let mut x269: u64 = 0;
1282 fiat_p384_scalar_mulx_u64(&mut x268, &mut x269, x260, 0xc7634d81f4372ddf);
1283 let mut x270: u64 = 0;
1284 let mut x271: u64 = 0;
1285 fiat_p384_scalar_mulx_u64(&mut x270, &mut x271, x260, 0x581a0db248b0a77a);
1286 let mut x272: u64 = 0;
1287 let mut x273: u64 = 0;
1288 fiat_p384_scalar_mulx_u64(&mut x272, &mut x273, x260, 0xecec196accc52973);
1289 let mut x274: u64 = 0;
1290 let mut x275: fiat_p384_scalar_u1 = 0;
1291 fiat_p384_scalar_addcarryx_u64(&mut x274, &mut x275, 0x0, x273, x270);
1292 let mut x276: u64 = 0;
1293 let mut x277: fiat_p384_scalar_u1 = 0;
1294 fiat_p384_scalar_addcarryx_u64(&mut x276, &mut x277, x275, x271, x268);
1295 let mut x278: u64 = 0;
1296 let mut x279: fiat_p384_scalar_u1 = 0;
1297 fiat_p384_scalar_addcarryx_u64(&mut x278, &mut x279, x277, x269, x266);
1298 let mut x280: u64 = 0;
1299 let mut x281: fiat_p384_scalar_u1 = 0;
1300 fiat_p384_scalar_addcarryx_u64(&mut x280, &mut x281, x279, x267, x264);
1301 let mut x282: u64 = 0;
1302 let mut x283: fiat_p384_scalar_u1 = 0;
1303 fiat_p384_scalar_addcarryx_u64(&mut x282, &mut x283, x281, x265, x262);
1304 let x284: u64 = ((x283 as u64) + x263);
1305 let mut x285: u64 = 0;
1306 let mut x286: fiat_p384_scalar_u1 = 0;
1307 fiat_p384_scalar_addcarryx_u64(&mut x285, &mut x286, 0x0, x246, x272);
1308 let mut x287: u64 = 0;
1309 let mut x288: fiat_p384_scalar_u1 = 0;
1310 fiat_p384_scalar_addcarryx_u64(&mut x287, &mut x288, x286, x248, x274);
1311 let mut x289: u64 = 0;
1312 let mut x290: fiat_p384_scalar_u1 = 0;
1313 fiat_p384_scalar_addcarryx_u64(&mut x289, &mut x290, x288, x250, x276);
1314 let mut x291: u64 = 0;
1315 let mut x292: fiat_p384_scalar_u1 = 0;
1316 fiat_p384_scalar_addcarryx_u64(&mut x291, &mut x292, x290, x252, x278);
1317 let mut x293: u64 = 0;
1318 let mut x294: fiat_p384_scalar_u1 = 0;
1319 fiat_p384_scalar_addcarryx_u64(&mut x293, &mut x294, x292, x254, x280);
1320 let mut x295: u64 = 0;
1321 let mut x296: fiat_p384_scalar_u1 = 0;
1322 fiat_p384_scalar_addcarryx_u64(&mut x295, &mut x296, x294, x256, x282);
1323 let mut x297: u64 = 0;
1324 let mut x298: fiat_p384_scalar_u1 = 0;
1325 fiat_p384_scalar_addcarryx_u64(&mut x297, &mut x298, x296, x258, x284);
1326 let x299: u64 = ((x298 as u64) + (x259 as u64));
1327 let mut x300: u64 = 0;
1328 let mut x301: u64 = 0;
1329 fiat_p384_scalar_mulx_u64(&mut x300, &mut x301, x4, (arg1[5]));
1330 let mut x302: u64 = 0;
1331 let mut x303: u64 = 0;
1332 fiat_p384_scalar_mulx_u64(&mut x302, &mut x303, x4, (arg1[4]));
1333 let mut x304: u64 = 0;
1334 let mut x305: u64 = 0;
1335 fiat_p384_scalar_mulx_u64(&mut x304, &mut x305, x4, (arg1[3]));
1336 let mut x306: u64 = 0;
1337 let mut x307: u64 = 0;
1338 fiat_p384_scalar_mulx_u64(&mut x306, &mut x307, x4, (arg1[2]));
1339 let mut x308: u64 = 0;
1340 let mut x309: u64 = 0;
1341 fiat_p384_scalar_mulx_u64(&mut x308, &mut x309, x4, (arg1[1]));
1342 let mut x310: u64 = 0;
1343 let mut x311: u64 = 0;
1344 fiat_p384_scalar_mulx_u64(&mut x310, &mut x311, x4, (arg1[0]));
1345 let mut x312: u64 = 0;
1346 let mut x313: fiat_p384_scalar_u1 = 0;
1347 fiat_p384_scalar_addcarryx_u64(&mut x312, &mut x313, 0x0, x311, x308);
1348 let mut x314: u64 = 0;
1349 let mut x315: fiat_p384_scalar_u1 = 0;
1350 fiat_p384_scalar_addcarryx_u64(&mut x314, &mut x315, x313, x309, x306);
1351 let mut x316: u64 = 0;
1352 let mut x317: fiat_p384_scalar_u1 = 0;
1353 fiat_p384_scalar_addcarryx_u64(&mut x316, &mut x317, x315, x307, x304);
1354 let mut x318: u64 = 0;
1355 let mut x319: fiat_p384_scalar_u1 = 0;
1356 fiat_p384_scalar_addcarryx_u64(&mut x318, &mut x319, x317, x305, x302);
1357 let mut x320: u64 = 0;
1358 let mut x321: fiat_p384_scalar_u1 = 0;
1359 fiat_p384_scalar_addcarryx_u64(&mut x320, &mut x321, x319, x303, x300);
1360 let x322: u64 = ((x321 as u64) + x301);
1361 let mut x323: u64 = 0;
1362 let mut x324: fiat_p384_scalar_u1 = 0;
1363 fiat_p384_scalar_addcarryx_u64(&mut x323, &mut x324, 0x0, x287, x310);
1364 let mut x325: u64 = 0;
1365 let mut x326: fiat_p384_scalar_u1 = 0;
1366 fiat_p384_scalar_addcarryx_u64(&mut x325, &mut x326, x324, x289, x312);
1367 let mut x327: u64 = 0;
1368 let mut x328: fiat_p384_scalar_u1 = 0;
1369 fiat_p384_scalar_addcarryx_u64(&mut x327, &mut x328, x326, x291, x314);
1370 let mut x329: u64 = 0;
1371 let mut x330: fiat_p384_scalar_u1 = 0;
1372 fiat_p384_scalar_addcarryx_u64(&mut x329, &mut x330, x328, x293, x316);
1373 let mut x331: u64 = 0;
1374 let mut x332: fiat_p384_scalar_u1 = 0;
1375 fiat_p384_scalar_addcarryx_u64(&mut x331, &mut x332, x330, x295, x318);
1376 let mut x333: u64 = 0;
1377 let mut x334: fiat_p384_scalar_u1 = 0;
1378 fiat_p384_scalar_addcarryx_u64(&mut x333, &mut x334, x332, x297, x320);
1379 let mut x335: u64 = 0;
1380 let mut x336: fiat_p384_scalar_u1 = 0;
1381 fiat_p384_scalar_addcarryx_u64(&mut x335, &mut x336, x334, x299, x322);
1382 let mut x337: u64 = 0;
1383 let mut x338: u64 = 0;
1384 fiat_p384_scalar_mulx_u64(&mut x337, &mut x338, x323, 0x6ed46089e88fdc45);
1385 let mut x339: u64 = 0;
1386 let mut x340: u64 = 0;
1387 fiat_p384_scalar_mulx_u64(&mut x339, &mut x340, x337, 0xffffffffffffffff);
1388 let mut x341: u64 = 0;
1389 let mut x342: u64 = 0;
1390 fiat_p384_scalar_mulx_u64(&mut x341, &mut x342, x337, 0xffffffffffffffff);
1391 let mut x343: u64 = 0;
1392 let mut x344: u64 = 0;
1393 fiat_p384_scalar_mulx_u64(&mut x343, &mut x344, x337, 0xffffffffffffffff);
1394 let mut x345: u64 = 0;
1395 let mut x346: u64 = 0;
1396 fiat_p384_scalar_mulx_u64(&mut x345, &mut x346, x337, 0xc7634d81f4372ddf);
1397 let mut x347: u64 = 0;
1398 let mut x348: u64 = 0;
1399 fiat_p384_scalar_mulx_u64(&mut x347, &mut x348, x337, 0x581a0db248b0a77a);
1400 let mut x349: u64 = 0;
1401 let mut x350: u64 = 0;
1402 fiat_p384_scalar_mulx_u64(&mut x349, &mut x350, x337, 0xecec196accc52973);
1403 let mut x351: u64 = 0;
1404 let mut x352: fiat_p384_scalar_u1 = 0;
1405 fiat_p384_scalar_addcarryx_u64(&mut x351, &mut x352, 0x0, x350, x347);
1406 let mut x353: u64 = 0;
1407 let mut x354: fiat_p384_scalar_u1 = 0;
1408 fiat_p384_scalar_addcarryx_u64(&mut x353, &mut x354, x352, x348, x345);
1409 let mut x355: u64 = 0;
1410 let mut x356: fiat_p384_scalar_u1 = 0;
1411 fiat_p384_scalar_addcarryx_u64(&mut x355, &mut x356, x354, x346, x343);
1412 let mut x357: u64 = 0;
1413 let mut x358: fiat_p384_scalar_u1 = 0;
1414 fiat_p384_scalar_addcarryx_u64(&mut x357, &mut x358, x356, x344, x341);
1415 let mut x359: u64 = 0;
1416 let mut x360: fiat_p384_scalar_u1 = 0;
1417 fiat_p384_scalar_addcarryx_u64(&mut x359, &mut x360, x358, x342, x339);
1418 let x361: u64 = ((x360 as u64) + x340);
1419 let mut x362: u64 = 0;
1420 let mut x363: fiat_p384_scalar_u1 = 0;
1421 fiat_p384_scalar_addcarryx_u64(&mut x362, &mut x363, 0x0, x323, x349);
1422 let mut x364: u64 = 0;
1423 let mut x365: fiat_p384_scalar_u1 = 0;
1424 fiat_p384_scalar_addcarryx_u64(&mut x364, &mut x365, x363, x325, x351);
1425 let mut x366: u64 = 0;
1426 let mut x367: fiat_p384_scalar_u1 = 0;
1427 fiat_p384_scalar_addcarryx_u64(&mut x366, &mut x367, x365, x327, x353);
1428 let mut x368: u64 = 0;
1429 let mut x369: fiat_p384_scalar_u1 = 0;
1430 fiat_p384_scalar_addcarryx_u64(&mut x368, &mut x369, x367, x329, x355);
1431 let mut x370: u64 = 0;
1432 let mut x371: fiat_p384_scalar_u1 = 0;
1433 fiat_p384_scalar_addcarryx_u64(&mut x370, &mut x371, x369, x331, x357);
1434 let mut x372: u64 = 0;
1435 let mut x373: fiat_p384_scalar_u1 = 0;
1436 fiat_p384_scalar_addcarryx_u64(&mut x372, &mut x373, x371, x333, x359);
1437 let mut x374: u64 = 0;
1438 let mut x375: fiat_p384_scalar_u1 = 0;
1439 fiat_p384_scalar_addcarryx_u64(&mut x374, &mut x375, x373, x335, x361);
1440 let x376: u64 = ((x375 as u64) + (x336 as u64));
1441 let mut x377: u64 = 0;
1442 let mut x378: u64 = 0;
1443 fiat_p384_scalar_mulx_u64(&mut x377, &mut x378, x5, (arg1[5]));
1444 let mut x379: u64 = 0;
1445 let mut x380: u64 = 0;
1446 fiat_p384_scalar_mulx_u64(&mut x379, &mut x380, x5, (arg1[4]));
1447 let mut x381: u64 = 0;
1448 let mut x382: u64 = 0;
1449 fiat_p384_scalar_mulx_u64(&mut x381, &mut x382, x5, (arg1[3]));
1450 let mut x383: u64 = 0;
1451 let mut x384: u64 = 0;
1452 fiat_p384_scalar_mulx_u64(&mut x383, &mut x384, x5, (arg1[2]));
1453 let mut x385: u64 = 0;
1454 let mut x386: u64 = 0;
1455 fiat_p384_scalar_mulx_u64(&mut x385, &mut x386, x5, (arg1[1]));
1456 let mut x387: u64 = 0;
1457 let mut x388: u64 = 0;
1458 fiat_p384_scalar_mulx_u64(&mut x387, &mut x388, x5, (arg1[0]));
1459 let mut x389: u64 = 0;
1460 let mut x390: fiat_p384_scalar_u1 = 0;
1461 fiat_p384_scalar_addcarryx_u64(&mut x389, &mut x390, 0x0, x388, x385);
1462 let mut x391: u64 = 0;
1463 let mut x392: fiat_p384_scalar_u1 = 0;
1464 fiat_p384_scalar_addcarryx_u64(&mut x391, &mut x392, x390, x386, x383);
1465 let mut x393: u64 = 0;
1466 let mut x394: fiat_p384_scalar_u1 = 0;
1467 fiat_p384_scalar_addcarryx_u64(&mut x393, &mut x394, x392, x384, x381);
1468 let mut x395: u64 = 0;
1469 let mut x396: fiat_p384_scalar_u1 = 0;
1470 fiat_p384_scalar_addcarryx_u64(&mut x395, &mut x396, x394, x382, x379);
1471 let mut x397: u64 = 0;
1472 let mut x398: fiat_p384_scalar_u1 = 0;
1473 fiat_p384_scalar_addcarryx_u64(&mut x397, &mut x398, x396, x380, x377);
1474 let x399: u64 = ((x398 as u64) + x378);
1475 let mut x400: u64 = 0;
1476 let mut x401: fiat_p384_scalar_u1 = 0;
1477 fiat_p384_scalar_addcarryx_u64(&mut x400, &mut x401, 0x0, x364, x387);
1478 let mut x402: u64 = 0;
1479 let mut x403: fiat_p384_scalar_u1 = 0;
1480 fiat_p384_scalar_addcarryx_u64(&mut x402, &mut x403, x401, x366, x389);
1481 let mut x404: u64 = 0;
1482 let mut x405: fiat_p384_scalar_u1 = 0;
1483 fiat_p384_scalar_addcarryx_u64(&mut x404, &mut x405, x403, x368, x391);
1484 let mut x406: u64 = 0;
1485 let mut x407: fiat_p384_scalar_u1 = 0;
1486 fiat_p384_scalar_addcarryx_u64(&mut x406, &mut x407, x405, x370, x393);
1487 let mut x408: u64 = 0;
1488 let mut x409: fiat_p384_scalar_u1 = 0;
1489 fiat_p384_scalar_addcarryx_u64(&mut x408, &mut x409, x407, x372, x395);
1490 let mut x410: u64 = 0;
1491 let mut x411: fiat_p384_scalar_u1 = 0;
1492 fiat_p384_scalar_addcarryx_u64(&mut x410, &mut x411, x409, x374, x397);
1493 let mut x412: u64 = 0;
1494 let mut x413: fiat_p384_scalar_u1 = 0;
1495 fiat_p384_scalar_addcarryx_u64(&mut x412, &mut x413, x411, x376, x399);
1496 let mut x414: u64 = 0;
1497 let mut x415: u64 = 0;
1498 fiat_p384_scalar_mulx_u64(&mut x414, &mut x415, x400, 0x6ed46089e88fdc45);
1499 let mut x416: u64 = 0;
1500 let mut x417: u64 = 0;
1501 fiat_p384_scalar_mulx_u64(&mut x416, &mut x417, x414, 0xffffffffffffffff);
1502 let mut x418: u64 = 0;
1503 let mut x419: u64 = 0;
1504 fiat_p384_scalar_mulx_u64(&mut x418, &mut x419, x414, 0xffffffffffffffff);
1505 let mut x420: u64 = 0;
1506 let mut x421: u64 = 0;
1507 fiat_p384_scalar_mulx_u64(&mut x420, &mut x421, x414, 0xffffffffffffffff);
1508 let mut x422: u64 = 0;
1509 let mut x423: u64 = 0;
1510 fiat_p384_scalar_mulx_u64(&mut x422, &mut x423, x414, 0xc7634d81f4372ddf);
1511 let mut x424: u64 = 0;
1512 let mut x425: u64 = 0;
1513 fiat_p384_scalar_mulx_u64(&mut x424, &mut x425, x414, 0x581a0db248b0a77a);
1514 let mut x426: u64 = 0;
1515 let mut x427: u64 = 0;
1516 fiat_p384_scalar_mulx_u64(&mut x426, &mut x427, x414, 0xecec196accc52973);
1517 let mut x428: u64 = 0;
1518 let mut x429: fiat_p384_scalar_u1 = 0;
1519 fiat_p384_scalar_addcarryx_u64(&mut x428, &mut x429, 0x0, x427, x424);
1520 let mut x430: u64 = 0;
1521 let mut x431: fiat_p384_scalar_u1 = 0;
1522 fiat_p384_scalar_addcarryx_u64(&mut x430, &mut x431, x429, x425, x422);
1523 let mut x432: u64 = 0;
1524 let mut x433: fiat_p384_scalar_u1 = 0;
1525 fiat_p384_scalar_addcarryx_u64(&mut x432, &mut x433, x431, x423, x420);
1526 let mut x434: u64 = 0;
1527 let mut x435: fiat_p384_scalar_u1 = 0;
1528 fiat_p384_scalar_addcarryx_u64(&mut x434, &mut x435, x433, x421, x418);
1529 let mut x436: u64 = 0;
1530 let mut x437: fiat_p384_scalar_u1 = 0;
1531 fiat_p384_scalar_addcarryx_u64(&mut x436, &mut x437, x435, x419, x416);
1532 let x438: u64 = ((x437 as u64) + x417);
1533 let mut x439: u64 = 0;
1534 let mut x440: fiat_p384_scalar_u1 = 0;
1535 fiat_p384_scalar_addcarryx_u64(&mut x439, &mut x440, 0x0, x400, x426);
1536 let mut x441: u64 = 0;
1537 let mut x442: fiat_p384_scalar_u1 = 0;
1538 fiat_p384_scalar_addcarryx_u64(&mut x441, &mut x442, x440, x402, x428);
1539 let mut x443: u64 = 0;
1540 let mut x444: fiat_p384_scalar_u1 = 0;
1541 fiat_p384_scalar_addcarryx_u64(&mut x443, &mut x444, x442, x404, x430);
1542 let mut x445: u64 = 0;
1543 let mut x446: fiat_p384_scalar_u1 = 0;
1544 fiat_p384_scalar_addcarryx_u64(&mut x445, &mut x446, x444, x406, x432);
1545 let mut x447: u64 = 0;
1546 let mut x448: fiat_p384_scalar_u1 = 0;
1547 fiat_p384_scalar_addcarryx_u64(&mut x447, &mut x448, x446, x408, x434);
1548 let mut x449: u64 = 0;
1549 let mut x450: fiat_p384_scalar_u1 = 0;
1550 fiat_p384_scalar_addcarryx_u64(&mut x449, &mut x450, x448, x410, x436);
1551 let mut x451: u64 = 0;
1552 let mut x452: fiat_p384_scalar_u1 = 0;
1553 fiat_p384_scalar_addcarryx_u64(&mut x451, &mut x452, x450, x412, x438);
1554 let x453: u64 = ((x452 as u64) + (x413 as u64));
1555 let mut x454: u64 = 0;
1556 let mut x455: fiat_p384_scalar_u1 = 0;
1557 fiat_p384_scalar_subborrowx_u64(&mut x454, &mut x455, 0x0, x441, 0xecec196accc52973);
1558 let mut x456: u64 = 0;
1559 let mut x457: fiat_p384_scalar_u1 = 0;
1560 fiat_p384_scalar_subborrowx_u64(&mut x456, &mut x457, x455, x443, 0x581a0db248b0a77a);
1561 let mut x458: u64 = 0;
1562 let mut x459: fiat_p384_scalar_u1 = 0;
1563 fiat_p384_scalar_subborrowx_u64(&mut x458, &mut x459, x457, x445, 0xc7634d81f4372ddf);
1564 let mut x460: u64 = 0;
1565 let mut x461: fiat_p384_scalar_u1 = 0;
1566 fiat_p384_scalar_subborrowx_u64(&mut x460, &mut x461, x459, x447, 0xffffffffffffffff);
1567 let mut x462: u64 = 0;
1568 let mut x463: fiat_p384_scalar_u1 = 0;
1569 fiat_p384_scalar_subborrowx_u64(&mut x462, &mut x463, x461, x449, 0xffffffffffffffff);
1570 let mut x464: u64 = 0;
1571 let mut x465: fiat_p384_scalar_u1 = 0;
1572 fiat_p384_scalar_subborrowx_u64(&mut x464, &mut x465, x463, x451, 0xffffffffffffffff);
1573 let mut x466: u64 = 0;
1574 let mut x467: fiat_p384_scalar_u1 = 0;
1575 fiat_p384_scalar_subborrowx_u64(&mut x466, &mut x467, x465, x453, (0x0 as u64));
1576 let mut x468: u64 = 0;
1577 fiat_p384_scalar_cmovznz_u64(&mut x468, x467, x454, x441);
1578 let mut x469: u64 = 0;
1579 fiat_p384_scalar_cmovznz_u64(&mut x469, x467, x456, x443);
1580 let mut x470: u64 = 0;
1581 fiat_p384_scalar_cmovznz_u64(&mut x470, x467, x458, x445);
1582 let mut x471: u64 = 0;
1583 fiat_p384_scalar_cmovznz_u64(&mut x471, x467, x460, x447);
1584 let mut x472: u64 = 0;
1585 fiat_p384_scalar_cmovznz_u64(&mut x472, x467, x462, x449);
1586 let mut x473: u64 = 0;
1587 fiat_p384_scalar_cmovznz_u64(&mut x473, x467, x464, x451);
1588 out1[0] = x468;
1589 out1[1] = x469;
1590 out1[2] = x470;
1591 out1[3] = x471;
1592 out1[4] = x472;
1593 out1[5] = x473;
1594}
1595
1596/// The function fiat_p384_scalar_add adds two field elements in the Montgomery domain.
1597///
1598/// Preconditions:
1599/// 0 ≤ eval arg1 < m
1600/// 0 ≤ eval arg2 < m
1601/// Postconditions:
1602/// eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) + eval (from_montgomery arg2)) mod m
1603/// 0 ≤ eval out1 < m
1604///
1605#[inline]
4b012472 1606pub fn fiat_p384_scalar_add(out1: &mut fiat_p384_scalar_montgomery_domain_field_element, arg1: &fiat_p384_scalar_montgomery_domain_field_element, arg2: &fiat_p384_scalar_montgomery_domain_field_element) {
0a29b90c
FG
1607 let mut x1: u64 = 0;
1608 let mut x2: fiat_p384_scalar_u1 = 0;
1609 fiat_p384_scalar_addcarryx_u64(&mut x1, &mut x2, 0x0, (arg1[0]), (arg2[0]));
1610 let mut x3: u64 = 0;
1611 let mut x4: fiat_p384_scalar_u1 = 0;
1612 fiat_p384_scalar_addcarryx_u64(&mut x3, &mut x4, x2, (arg1[1]), (arg2[1]));
1613 let mut x5: u64 = 0;
1614 let mut x6: fiat_p384_scalar_u1 = 0;
1615 fiat_p384_scalar_addcarryx_u64(&mut x5, &mut x6, x4, (arg1[2]), (arg2[2]));
1616 let mut x7: u64 = 0;
1617 let mut x8: fiat_p384_scalar_u1 = 0;
1618 fiat_p384_scalar_addcarryx_u64(&mut x7, &mut x8, x6, (arg1[3]), (arg2[3]));
1619 let mut x9: u64 = 0;
1620 let mut x10: fiat_p384_scalar_u1 = 0;
1621 fiat_p384_scalar_addcarryx_u64(&mut x9, &mut x10, x8, (arg1[4]), (arg2[4]));
1622 let mut x11: u64 = 0;
1623 let mut x12: fiat_p384_scalar_u1 = 0;
1624 fiat_p384_scalar_addcarryx_u64(&mut x11, &mut x12, x10, (arg1[5]), (arg2[5]));
1625 let mut x13: u64 = 0;
1626 let mut x14: fiat_p384_scalar_u1 = 0;
1627 fiat_p384_scalar_subborrowx_u64(&mut x13, &mut x14, 0x0, x1, 0xecec196accc52973);
1628 let mut x15: u64 = 0;
1629 let mut x16: fiat_p384_scalar_u1 = 0;
1630 fiat_p384_scalar_subborrowx_u64(&mut x15, &mut x16, x14, x3, 0x581a0db248b0a77a);
1631 let mut x17: u64 = 0;
1632 let mut x18: fiat_p384_scalar_u1 = 0;
1633 fiat_p384_scalar_subborrowx_u64(&mut x17, &mut x18, x16, x5, 0xc7634d81f4372ddf);
1634 let mut x19: u64 = 0;
1635 let mut x20: fiat_p384_scalar_u1 = 0;
1636 fiat_p384_scalar_subborrowx_u64(&mut x19, &mut x20, x18, x7, 0xffffffffffffffff);
1637 let mut x21: u64 = 0;
1638 let mut x22: fiat_p384_scalar_u1 = 0;
1639 fiat_p384_scalar_subborrowx_u64(&mut x21, &mut x22, x20, x9, 0xffffffffffffffff);
1640 let mut x23: u64 = 0;
1641 let mut x24: fiat_p384_scalar_u1 = 0;
1642 fiat_p384_scalar_subborrowx_u64(&mut x23, &mut x24, x22, x11, 0xffffffffffffffff);
1643 let mut x25: u64 = 0;
1644 let mut x26: fiat_p384_scalar_u1 = 0;
1645 fiat_p384_scalar_subborrowx_u64(&mut x25, &mut x26, x24, (x12 as u64), (0x0 as u64));
1646 let mut x27: u64 = 0;
1647 fiat_p384_scalar_cmovznz_u64(&mut x27, x26, x13, x1);
1648 let mut x28: u64 = 0;
1649 fiat_p384_scalar_cmovznz_u64(&mut x28, x26, x15, x3);
1650 let mut x29: u64 = 0;
1651 fiat_p384_scalar_cmovznz_u64(&mut x29, x26, x17, x5);
1652 let mut x30: u64 = 0;
1653 fiat_p384_scalar_cmovznz_u64(&mut x30, x26, x19, x7);
1654 let mut x31: u64 = 0;
1655 fiat_p384_scalar_cmovznz_u64(&mut x31, x26, x21, x9);
1656 let mut x32: u64 = 0;
1657 fiat_p384_scalar_cmovznz_u64(&mut x32, x26, x23, x11);
1658 out1[0] = x27;
1659 out1[1] = x28;
1660 out1[2] = x29;
1661 out1[3] = x30;
1662 out1[4] = x31;
1663 out1[5] = x32;
1664}
1665
1666/// The function fiat_p384_scalar_sub subtracts two field elements in the Montgomery domain.
1667///
1668/// Preconditions:
1669/// 0 ≤ eval arg1 < m
1670/// 0 ≤ eval arg2 < m
1671/// Postconditions:
1672/// eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) - eval (from_montgomery arg2)) mod m
1673/// 0 ≤ eval out1 < m
1674///
1675#[inline]
4b012472 1676pub fn fiat_p384_scalar_sub(out1: &mut fiat_p384_scalar_montgomery_domain_field_element, arg1: &fiat_p384_scalar_montgomery_domain_field_element, arg2: &fiat_p384_scalar_montgomery_domain_field_element) {
0a29b90c
FG
1677 let mut x1: u64 = 0;
1678 let mut x2: fiat_p384_scalar_u1 = 0;
1679 fiat_p384_scalar_subborrowx_u64(&mut x1, &mut x2, 0x0, (arg1[0]), (arg2[0]));
1680 let mut x3: u64 = 0;
1681 let mut x4: fiat_p384_scalar_u1 = 0;
1682 fiat_p384_scalar_subborrowx_u64(&mut x3, &mut x4, x2, (arg1[1]), (arg2[1]));
1683 let mut x5: u64 = 0;
1684 let mut x6: fiat_p384_scalar_u1 = 0;
1685 fiat_p384_scalar_subborrowx_u64(&mut x5, &mut x6, x4, (arg1[2]), (arg2[2]));
1686 let mut x7: u64 = 0;
1687 let mut x8: fiat_p384_scalar_u1 = 0;
1688 fiat_p384_scalar_subborrowx_u64(&mut x7, &mut x8, x6, (arg1[3]), (arg2[3]));
1689 let mut x9: u64 = 0;
1690 let mut x10: fiat_p384_scalar_u1 = 0;
1691 fiat_p384_scalar_subborrowx_u64(&mut x9, &mut x10, x8, (arg1[4]), (arg2[4]));
1692 let mut x11: u64 = 0;
1693 let mut x12: fiat_p384_scalar_u1 = 0;
1694 fiat_p384_scalar_subborrowx_u64(&mut x11, &mut x12, x10, (arg1[5]), (arg2[5]));
1695 let mut x13: u64 = 0;
1696 fiat_p384_scalar_cmovznz_u64(&mut x13, x12, (0x0 as u64), 0xffffffffffffffff);
1697 let mut x14: u64 = 0;
1698 let mut x15: fiat_p384_scalar_u1 = 0;
1699 fiat_p384_scalar_addcarryx_u64(&mut x14, &mut x15, 0x0, x1, (x13 & 0xecec196accc52973));
1700 let mut x16: u64 = 0;
1701 let mut x17: fiat_p384_scalar_u1 = 0;
1702 fiat_p384_scalar_addcarryx_u64(&mut x16, &mut x17, x15, x3, (x13 & 0x581a0db248b0a77a));
1703 let mut x18: u64 = 0;
1704 let mut x19: fiat_p384_scalar_u1 = 0;
1705 fiat_p384_scalar_addcarryx_u64(&mut x18, &mut x19, x17, x5, (x13 & 0xc7634d81f4372ddf));
1706 let mut x20: u64 = 0;
1707 let mut x21: fiat_p384_scalar_u1 = 0;
1708 fiat_p384_scalar_addcarryx_u64(&mut x20, &mut x21, x19, x7, x13);
1709 let mut x22: u64 = 0;
1710 let mut x23: fiat_p384_scalar_u1 = 0;
1711 fiat_p384_scalar_addcarryx_u64(&mut x22, &mut x23, x21, x9, x13);
1712 let mut x24: u64 = 0;
1713 let mut x25: fiat_p384_scalar_u1 = 0;
1714 fiat_p384_scalar_addcarryx_u64(&mut x24, &mut x25, x23, x11, x13);
1715 out1[0] = x14;
1716 out1[1] = x16;
1717 out1[2] = x18;
1718 out1[3] = x20;
1719 out1[4] = x22;
1720 out1[5] = x24;
1721}
1722
1723/// The function fiat_p384_scalar_opp negates a field element in the Montgomery domain.
1724///
1725/// Preconditions:
1726/// 0 ≤ eval arg1 < m
1727/// Postconditions:
1728/// eval (from_montgomery out1) mod m = -eval (from_montgomery arg1) mod m
1729/// 0 ≤ eval out1 < m
1730///
1731#[inline]
4b012472 1732pub fn fiat_p384_scalar_opp(out1: &mut fiat_p384_scalar_montgomery_domain_field_element, arg1: &fiat_p384_scalar_montgomery_domain_field_element) {
0a29b90c
FG
1733 let mut x1: u64 = 0;
1734 let mut x2: fiat_p384_scalar_u1 = 0;
1735 fiat_p384_scalar_subborrowx_u64(&mut x1, &mut x2, 0x0, (0x0 as u64), (arg1[0]));
1736 let mut x3: u64 = 0;
1737 let mut x4: fiat_p384_scalar_u1 = 0;
1738 fiat_p384_scalar_subborrowx_u64(&mut x3, &mut x4, x2, (0x0 as u64), (arg1[1]));
1739 let mut x5: u64 = 0;
1740 let mut x6: fiat_p384_scalar_u1 = 0;
1741 fiat_p384_scalar_subborrowx_u64(&mut x5, &mut x6, x4, (0x0 as u64), (arg1[2]));
1742 let mut x7: u64 = 0;
1743 let mut x8: fiat_p384_scalar_u1 = 0;
1744 fiat_p384_scalar_subborrowx_u64(&mut x7, &mut x8, x6, (0x0 as u64), (arg1[3]));
1745 let mut x9: u64 = 0;
1746 let mut x10: fiat_p384_scalar_u1 = 0;
1747 fiat_p384_scalar_subborrowx_u64(&mut x9, &mut x10, x8, (0x0 as u64), (arg1[4]));
1748 let mut x11: u64 = 0;
1749 let mut x12: fiat_p384_scalar_u1 = 0;
1750 fiat_p384_scalar_subborrowx_u64(&mut x11, &mut x12, x10, (0x0 as u64), (arg1[5]));
1751 let mut x13: u64 = 0;
1752 fiat_p384_scalar_cmovznz_u64(&mut x13, x12, (0x0 as u64), 0xffffffffffffffff);
1753 let mut x14: u64 = 0;
1754 let mut x15: fiat_p384_scalar_u1 = 0;
1755 fiat_p384_scalar_addcarryx_u64(&mut x14, &mut x15, 0x0, x1, (x13 & 0xecec196accc52973));
1756 let mut x16: u64 = 0;
1757 let mut x17: fiat_p384_scalar_u1 = 0;
1758 fiat_p384_scalar_addcarryx_u64(&mut x16, &mut x17, x15, x3, (x13 & 0x581a0db248b0a77a));
1759 let mut x18: u64 = 0;
1760 let mut x19: fiat_p384_scalar_u1 = 0;
1761 fiat_p384_scalar_addcarryx_u64(&mut x18, &mut x19, x17, x5, (x13 & 0xc7634d81f4372ddf));
1762 let mut x20: u64 = 0;
1763 let mut x21: fiat_p384_scalar_u1 = 0;
1764 fiat_p384_scalar_addcarryx_u64(&mut x20, &mut x21, x19, x7, x13);
1765 let mut x22: u64 = 0;
1766 let mut x23: fiat_p384_scalar_u1 = 0;
1767 fiat_p384_scalar_addcarryx_u64(&mut x22, &mut x23, x21, x9, x13);
1768 let mut x24: u64 = 0;
1769 let mut x25: fiat_p384_scalar_u1 = 0;
1770 fiat_p384_scalar_addcarryx_u64(&mut x24, &mut x25, x23, x11, x13);
1771 out1[0] = x14;
1772 out1[1] = x16;
1773 out1[2] = x18;
1774 out1[3] = x20;
1775 out1[4] = x22;
1776 out1[5] = x24;
1777}
1778
1779/// The function fiat_p384_scalar_from_montgomery translates a field element out of the Montgomery domain.
1780///
1781/// Preconditions:
1782/// 0 ≤ eval arg1 < m
1783/// Postconditions:
1784/// eval out1 mod m = (eval arg1 * ((2^64)⁻¹ mod m)^6) mod m
1785/// 0 ≤ eval out1 < m
1786///
1787#[inline]
4b012472 1788pub fn fiat_p384_scalar_from_montgomery(out1: &mut fiat_p384_scalar_non_montgomery_domain_field_element, arg1: &fiat_p384_scalar_montgomery_domain_field_element) {
0a29b90c
FG
1789 let x1: u64 = (arg1[0]);
1790 let mut x2: u64 = 0;
1791 let mut x3: u64 = 0;
1792 fiat_p384_scalar_mulx_u64(&mut x2, &mut x3, x1, 0x6ed46089e88fdc45);
1793 let mut x4: u64 = 0;
1794 let mut x5: u64 = 0;
1795 fiat_p384_scalar_mulx_u64(&mut x4, &mut x5, x2, 0xffffffffffffffff);
1796 let mut x6: u64 = 0;
1797 let mut x7: u64 = 0;
1798 fiat_p384_scalar_mulx_u64(&mut x6, &mut x7, x2, 0xffffffffffffffff);
1799 let mut x8: u64 = 0;
1800 let mut x9: u64 = 0;
1801 fiat_p384_scalar_mulx_u64(&mut x8, &mut x9, x2, 0xffffffffffffffff);
1802 let mut x10: u64 = 0;
1803 let mut x11: u64 = 0;
1804 fiat_p384_scalar_mulx_u64(&mut x10, &mut x11, x2, 0xc7634d81f4372ddf);
1805 let mut x12: u64 = 0;
1806 let mut x13: u64 = 0;
1807 fiat_p384_scalar_mulx_u64(&mut x12, &mut x13, x2, 0x581a0db248b0a77a);
1808 let mut x14: u64 = 0;
1809 let mut x15: u64 = 0;
1810 fiat_p384_scalar_mulx_u64(&mut x14, &mut x15, x2, 0xecec196accc52973);
1811 let mut x16: u64 = 0;
1812 let mut x17: fiat_p384_scalar_u1 = 0;
1813 fiat_p384_scalar_addcarryx_u64(&mut x16, &mut x17, 0x0, x15, x12);
1814 let mut x18: u64 = 0;
1815 let mut x19: fiat_p384_scalar_u1 = 0;
1816 fiat_p384_scalar_addcarryx_u64(&mut x18, &mut x19, x17, x13, x10);
1817 let mut x20: u64 = 0;
1818 let mut x21: fiat_p384_scalar_u1 = 0;
1819 fiat_p384_scalar_addcarryx_u64(&mut x20, &mut x21, x19, x11, x8);
1820 let mut x22: u64 = 0;
1821 let mut x23: fiat_p384_scalar_u1 = 0;
1822 fiat_p384_scalar_addcarryx_u64(&mut x22, &mut x23, x21, x9, x6);
1823 let mut x24: u64 = 0;
1824 let mut x25: fiat_p384_scalar_u1 = 0;
1825 fiat_p384_scalar_addcarryx_u64(&mut x24, &mut x25, x23, x7, x4);
1826 let mut x26: u64 = 0;
1827 let mut x27: fiat_p384_scalar_u1 = 0;
1828 fiat_p384_scalar_addcarryx_u64(&mut x26, &mut x27, 0x0, x1, x14);
1829 let mut x28: u64 = 0;
1830 let mut x29: fiat_p384_scalar_u1 = 0;
1831 fiat_p384_scalar_addcarryx_u64(&mut x28, &mut x29, x27, (0x0 as u64), x16);
1832 let mut x30: u64 = 0;
1833 let mut x31: fiat_p384_scalar_u1 = 0;
1834 fiat_p384_scalar_addcarryx_u64(&mut x30, &mut x31, x29, (0x0 as u64), x18);
1835 let mut x32: u64 = 0;
1836 let mut x33: fiat_p384_scalar_u1 = 0;
1837 fiat_p384_scalar_addcarryx_u64(&mut x32, &mut x33, x31, (0x0 as u64), x20);
1838 let mut x34: u64 = 0;
1839 let mut x35: fiat_p384_scalar_u1 = 0;
1840 fiat_p384_scalar_addcarryx_u64(&mut x34, &mut x35, x33, (0x0 as u64), x22);
1841 let mut x36: u64 = 0;
1842 let mut x37: fiat_p384_scalar_u1 = 0;
1843 fiat_p384_scalar_addcarryx_u64(&mut x36, &mut x37, x35, (0x0 as u64), x24);
1844 let mut x38: u64 = 0;
1845 let mut x39: fiat_p384_scalar_u1 = 0;
1846 fiat_p384_scalar_addcarryx_u64(&mut x38, &mut x39, x37, (0x0 as u64), ((x25 as u64) + x5));
1847 let mut x40: u64 = 0;
1848 let mut x41: fiat_p384_scalar_u1 = 0;
1849 fiat_p384_scalar_addcarryx_u64(&mut x40, &mut x41, 0x0, x28, (arg1[1]));
1850 let mut x42: u64 = 0;
1851 let mut x43: fiat_p384_scalar_u1 = 0;
1852 fiat_p384_scalar_addcarryx_u64(&mut x42, &mut x43, x41, x30, (0x0 as u64));
1853 let mut x44: u64 = 0;
1854 let mut x45: fiat_p384_scalar_u1 = 0;
1855 fiat_p384_scalar_addcarryx_u64(&mut x44, &mut x45, x43, x32, (0x0 as u64));
1856 let mut x46: u64 = 0;
1857 let mut x47: fiat_p384_scalar_u1 = 0;
1858 fiat_p384_scalar_addcarryx_u64(&mut x46, &mut x47, x45, x34, (0x0 as u64));
1859 let mut x48: u64 = 0;
1860 let mut x49: fiat_p384_scalar_u1 = 0;
1861 fiat_p384_scalar_addcarryx_u64(&mut x48, &mut x49, x47, x36, (0x0 as u64));
1862 let mut x50: u64 = 0;
1863 let mut x51: fiat_p384_scalar_u1 = 0;
1864 fiat_p384_scalar_addcarryx_u64(&mut x50, &mut x51, x49, x38, (0x0 as u64));
1865 let mut x52: u64 = 0;
1866 let mut x53: u64 = 0;
1867 fiat_p384_scalar_mulx_u64(&mut x52, &mut x53, x40, 0x6ed46089e88fdc45);
1868 let mut x54: u64 = 0;
1869 let mut x55: u64 = 0;
1870 fiat_p384_scalar_mulx_u64(&mut x54, &mut x55, x52, 0xffffffffffffffff);
1871 let mut x56: u64 = 0;
1872 let mut x57: u64 = 0;
1873 fiat_p384_scalar_mulx_u64(&mut x56, &mut x57, x52, 0xffffffffffffffff);
1874 let mut x58: u64 = 0;
1875 let mut x59: u64 = 0;
1876 fiat_p384_scalar_mulx_u64(&mut x58, &mut x59, x52, 0xffffffffffffffff);
1877 let mut x60: u64 = 0;
1878 let mut x61: u64 = 0;
1879 fiat_p384_scalar_mulx_u64(&mut x60, &mut x61, x52, 0xc7634d81f4372ddf);
1880 let mut x62: u64 = 0;
1881 let mut x63: u64 = 0;
1882 fiat_p384_scalar_mulx_u64(&mut x62, &mut x63, x52, 0x581a0db248b0a77a);
1883 let mut x64: u64 = 0;
1884 let mut x65: u64 = 0;
1885 fiat_p384_scalar_mulx_u64(&mut x64, &mut x65, x52, 0xecec196accc52973);
1886 let mut x66: u64 = 0;
1887 let mut x67: fiat_p384_scalar_u1 = 0;
1888 fiat_p384_scalar_addcarryx_u64(&mut x66, &mut x67, 0x0, x65, x62);
1889 let mut x68: u64 = 0;
1890 let mut x69: fiat_p384_scalar_u1 = 0;
1891 fiat_p384_scalar_addcarryx_u64(&mut x68, &mut x69, x67, x63, x60);
1892 let mut x70: u64 = 0;
1893 let mut x71: fiat_p384_scalar_u1 = 0;
1894 fiat_p384_scalar_addcarryx_u64(&mut x70, &mut x71, x69, x61, x58);
1895 let mut x72: u64 = 0;
1896 let mut x73: fiat_p384_scalar_u1 = 0;
1897 fiat_p384_scalar_addcarryx_u64(&mut x72, &mut x73, x71, x59, x56);
1898 let mut x74: u64 = 0;
1899 let mut x75: fiat_p384_scalar_u1 = 0;
1900 fiat_p384_scalar_addcarryx_u64(&mut x74, &mut x75, x73, x57, x54);
1901 let mut x76: u64 = 0;
1902 let mut x77: fiat_p384_scalar_u1 = 0;
1903 fiat_p384_scalar_addcarryx_u64(&mut x76, &mut x77, 0x0, x40, x64);
1904 let mut x78: u64 = 0;
1905 let mut x79: fiat_p384_scalar_u1 = 0;
1906 fiat_p384_scalar_addcarryx_u64(&mut x78, &mut x79, x77, x42, x66);
1907 let mut x80: u64 = 0;
1908 let mut x81: fiat_p384_scalar_u1 = 0;
1909 fiat_p384_scalar_addcarryx_u64(&mut x80, &mut x81, x79, x44, x68);
1910 let mut x82: u64 = 0;
1911 let mut x83: fiat_p384_scalar_u1 = 0;
1912 fiat_p384_scalar_addcarryx_u64(&mut x82, &mut x83, x81, x46, x70);
1913 let mut x84: u64 = 0;
1914 let mut x85: fiat_p384_scalar_u1 = 0;
1915 fiat_p384_scalar_addcarryx_u64(&mut x84, &mut x85, x83, x48, x72);
1916 let mut x86: u64 = 0;
1917 let mut x87: fiat_p384_scalar_u1 = 0;
1918 fiat_p384_scalar_addcarryx_u64(&mut x86, &mut x87, x85, x50, x74);
1919 let mut x88: u64 = 0;
1920 let mut x89: fiat_p384_scalar_u1 = 0;
1921 fiat_p384_scalar_addcarryx_u64(&mut x88, &mut x89, x87, ((x51 as u64) + (x39 as u64)), ((x75 as u64) + x55));
1922 let mut x90: u64 = 0;
1923 let mut x91: fiat_p384_scalar_u1 = 0;
1924 fiat_p384_scalar_addcarryx_u64(&mut x90, &mut x91, 0x0, x78, (arg1[2]));
1925 let mut x92: u64 = 0;
1926 let mut x93: fiat_p384_scalar_u1 = 0;
1927 fiat_p384_scalar_addcarryx_u64(&mut x92, &mut x93, x91, x80, (0x0 as u64));
1928 let mut x94: u64 = 0;
1929 let mut x95: fiat_p384_scalar_u1 = 0;
1930 fiat_p384_scalar_addcarryx_u64(&mut x94, &mut x95, x93, x82, (0x0 as u64));
1931 let mut x96: u64 = 0;
1932 let mut x97: fiat_p384_scalar_u1 = 0;
1933 fiat_p384_scalar_addcarryx_u64(&mut x96, &mut x97, x95, x84, (0x0 as u64));
1934 let mut x98: u64 = 0;
1935 let mut x99: fiat_p384_scalar_u1 = 0;
1936 fiat_p384_scalar_addcarryx_u64(&mut x98, &mut x99, x97, x86, (0x0 as u64));
1937 let mut x100: u64 = 0;
1938 let mut x101: fiat_p384_scalar_u1 = 0;
1939 fiat_p384_scalar_addcarryx_u64(&mut x100, &mut x101, x99, x88, (0x0 as u64));
1940 let mut x102: u64 = 0;
1941 let mut x103: u64 = 0;
1942 fiat_p384_scalar_mulx_u64(&mut x102, &mut x103, x90, 0x6ed46089e88fdc45);
1943 let mut x104: u64 = 0;
1944 let mut x105: u64 = 0;
1945 fiat_p384_scalar_mulx_u64(&mut x104, &mut x105, x102, 0xffffffffffffffff);
1946 let mut x106: u64 = 0;
1947 let mut x107: u64 = 0;
1948 fiat_p384_scalar_mulx_u64(&mut x106, &mut x107, x102, 0xffffffffffffffff);
1949 let mut x108: u64 = 0;
1950 let mut x109: u64 = 0;
1951 fiat_p384_scalar_mulx_u64(&mut x108, &mut x109, x102, 0xffffffffffffffff);
1952 let mut x110: u64 = 0;
1953 let mut x111: u64 = 0;
1954 fiat_p384_scalar_mulx_u64(&mut x110, &mut x111, x102, 0xc7634d81f4372ddf);
1955 let mut x112: u64 = 0;
1956 let mut x113: u64 = 0;
1957 fiat_p384_scalar_mulx_u64(&mut x112, &mut x113, x102, 0x581a0db248b0a77a);
1958 let mut x114: u64 = 0;
1959 let mut x115: u64 = 0;
1960 fiat_p384_scalar_mulx_u64(&mut x114, &mut x115, x102, 0xecec196accc52973);
1961 let mut x116: u64 = 0;
1962 let mut x117: fiat_p384_scalar_u1 = 0;
1963 fiat_p384_scalar_addcarryx_u64(&mut x116, &mut x117, 0x0, x115, x112);
1964 let mut x118: u64 = 0;
1965 let mut x119: fiat_p384_scalar_u1 = 0;
1966 fiat_p384_scalar_addcarryx_u64(&mut x118, &mut x119, x117, x113, x110);
1967 let mut x120: u64 = 0;
1968 let mut x121: fiat_p384_scalar_u1 = 0;
1969 fiat_p384_scalar_addcarryx_u64(&mut x120, &mut x121, x119, x111, x108);
1970 let mut x122: u64 = 0;
1971 let mut x123: fiat_p384_scalar_u1 = 0;
1972 fiat_p384_scalar_addcarryx_u64(&mut x122, &mut x123, x121, x109, x106);
1973 let mut x124: u64 = 0;
1974 let mut x125: fiat_p384_scalar_u1 = 0;
1975 fiat_p384_scalar_addcarryx_u64(&mut x124, &mut x125, x123, x107, x104);
1976 let mut x126: u64 = 0;
1977 let mut x127: fiat_p384_scalar_u1 = 0;
1978 fiat_p384_scalar_addcarryx_u64(&mut x126, &mut x127, 0x0, x90, x114);
1979 let mut x128: u64 = 0;
1980 let mut x129: fiat_p384_scalar_u1 = 0;
1981 fiat_p384_scalar_addcarryx_u64(&mut x128, &mut x129, x127, x92, x116);
1982 let mut x130: u64 = 0;
1983 let mut x131: fiat_p384_scalar_u1 = 0;
1984 fiat_p384_scalar_addcarryx_u64(&mut x130, &mut x131, x129, x94, x118);
1985 let mut x132: u64 = 0;
1986 let mut x133: fiat_p384_scalar_u1 = 0;
1987 fiat_p384_scalar_addcarryx_u64(&mut x132, &mut x133, x131, x96, x120);
1988 let mut x134: u64 = 0;
1989 let mut x135: fiat_p384_scalar_u1 = 0;
1990 fiat_p384_scalar_addcarryx_u64(&mut x134, &mut x135, x133, x98, x122);
1991 let mut x136: u64 = 0;
1992 let mut x137: fiat_p384_scalar_u1 = 0;
1993 fiat_p384_scalar_addcarryx_u64(&mut x136, &mut x137, x135, x100, x124);
1994 let mut x138: u64 = 0;
1995 let mut x139: fiat_p384_scalar_u1 = 0;
1996 fiat_p384_scalar_addcarryx_u64(&mut x138, &mut x139, x137, ((x101 as u64) + (x89 as u64)), ((x125 as u64) + x105));
1997 let mut x140: u64 = 0;
1998 let mut x141: fiat_p384_scalar_u1 = 0;
1999 fiat_p384_scalar_addcarryx_u64(&mut x140, &mut x141, 0x0, x128, (arg1[3]));
2000 let mut x142: u64 = 0;
2001 let mut x143: fiat_p384_scalar_u1 = 0;
2002 fiat_p384_scalar_addcarryx_u64(&mut x142, &mut x143, x141, x130, (0x0 as u64));
2003 let mut x144: u64 = 0;
2004 let mut x145: fiat_p384_scalar_u1 = 0;
2005 fiat_p384_scalar_addcarryx_u64(&mut x144, &mut x145, x143, x132, (0x0 as u64));
2006 let mut x146: u64 = 0;
2007 let mut x147: fiat_p384_scalar_u1 = 0;
2008 fiat_p384_scalar_addcarryx_u64(&mut x146, &mut x147, x145, x134, (0x0 as u64));
2009 let mut x148: u64 = 0;
2010 let mut x149: fiat_p384_scalar_u1 = 0;
2011 fiat_p384_scalar_addcarryx_u64(&mut x148, &mut x149, x147, x136, (0x0 as u64));
2012 let mut x150: u64 = 0;
2013 let mut x151: fiat_p384_scalar_u1 = 0;
2014 fiat_p384_scalar_addcarryx_u64(&mut x150, &mut x151, x149, x138, (0x0 as u64));
2015 let mut x152: u64 = 0;
2016 let mut x153: u64 = 0;
2017 fiat_p384_scalar_mulx_u64(&mut x152, &mut x153, x140, 0x6ed46089e88fdc45);
2018 let mut x154: u64 = 0;
2019 let mut x155: u64 = 0;
2020 fiat_p384_scalar_mulx_u64(&mut x154, &mut x155, x152, 0xffffffffffffffff);
2021 let mut x156: u64 = 0;
2022 let mut x157: u64 = 0;
2023 fiat_p384_scalar_mulx_u64(&mut x156, &mut x157, x152, 0xffffffffffffffff);
2024 let mut x158: u64 = 0;
2025 let mut x159: u64 = 0;
2026 fiat_p384_scalar_mulx_u64(&mut x158, &mut x159, x152, 0xffffffffffffffff);
2027 let mut x160: u64 = 0;
2028 let mut x161: u64 = 0;
2029 fiat_p384_scalar_mulx_u64(&mut x160, &mut x161, x152, 0xc7634d81f4372ddf);
2030 let mut x162: u64 = 0;
2031 let mut x163: u64 = 0;
2032 fiat_p384_scalar_mulx_u64(&mut x162, &mut x163, x152, 0x581a0db248b0a77a);
2033 let mut x164: u64 = 0;
2034 let mut x165: u64 = 0;
2035 fiat_p384_scalar_mulx_u64(&mut x164, &mut x165, x152, 0xecec196accc52973);
2036 let mut x166: u64 = 0;
2037 let mut x167: fiat_p384_scalar_u1 = 0;
2038 fiat_p384_scalar_addcarryx_u64(&mut x166, &mut x167, 0x0, x165, x162);
2039 let mut x168: u64 = 0;
2040 let mut x169: fiat_p384_scalar_u1 = 0;
2041 fiat_p384_scalar_addcarryx_u64(&mut x168, &mut x169, x167, x163, x160);
2042 let mut x170: u64 = 0;
2043 let mut x171: fiat_p384_scalar_u1 = 0;
2044 fiat_p384_scalar_addcarryx_u64(&mut x170, &mut x171, x169, x161, x158);
2045 let mut x172: u64 = 0;
2046 let mut x173: fiat_p384_scalar_u1 = 0;
2047 fiat_p384_scalar_addcarryx_u64(&mut x172, &mut x173, x171, x159, x156);
2048 let mut x174: u64 = 0;
2049 let mut x175: fiat_p384_scalar_u1 = 0;
2050 fiat_p384_scalar_addcarryx_u64(&mut x174, &mut x175, x173, x157, x154);
2051 let mut x176: u64 = 0;
2052 let mut x177: fiat_p384_scalar_u1 = 0;
2053 fiat_p384_scalar_addcarryx_u64(&mut x176, &mut x177, 0x0, x140, x164);
2054 let mut x178: u64 = 0;
2055 let mut x179: fiat_p384_scalar_u1 = 0;
2056 fiat_p384_scalar_addcarryx_u64(&mut x178, &mut x179, x177, x142, x166);
2057 let mut x180: u64 = 0;
2058 let mut x181: fiat_p384_scalar_u1 = 0;
2059 fiat_p384_scalar_addcarryx_u64(&mut x180, &mut x181, x179, x144, x168);
2060 let mut x182: u64 = 0;
2061 let mut x183: fiat_p384_scalar_u1 = 0;
2062 fiat_p384_scalar_addcarryx_u64(&mut x182, &mut x183, x181, x146, x170);
2063 let mut x184: u64 = 0;
2064 let mut x185: fiat_p384_scalar_u1 = 0;
2065 fiat_p384_scalar_addcarryx_u64(&mut x184, &mut x185, x183, x148, x172);
2066 let mut x186: u64 = 0;
2067 let mut x187: fiat_p384_scalar_u1 = 0;
2068 fiat_p384_scalar_addcarryx_u64(&mut x186, &mut x187, x185, x150, x174);
2069 let mut x188: u64 = 0;
2070 let mut x189: fiat_p384_scalar_u1 = 0;
2071 fiat_p384_scalar_addcarryx_u64(&mut x188, &mut x189, x187, ((x151 as u64) + (x139 as u64)), ((x175 as u64) + x155));
2072 let mut x190: u64 = 0;
2073 let mut x191: fiat_p384_scalar_u1 = 0;
2074 fiat_p384_scalar_addcarryx_u64(&mut x190, &mut x191, 0x0, x178, (arg1[4]));
2075 let mut x192: u64 = 0;
2076 let mut x193: fiat_p384_scalar_u1 = 0;
2077 fiat_p384_scalar_addcarryx_u64(&mut x192, &mut x193, x191, x180, (0x0 as u64));
2078 let mut x194: u64 = 0;
2079 let mut x195: fiat_p384_scalar_u1 = 0;
2080 fiat_p384_scalar_addcarryx_u64(&mut x194, &mut x195, x193, x182, (0x0 as u64));
2081 let mut x196: u64 = 0;
2082 let mut x197: fiat_p384_scalar_u1 = 0;
2083 fiat_p384_scalar_addcarryx_u64(&mut x196, &mut x197, x195, x184, (0x0 as u64));
2084 let mut x198: u64 = 0;
2085 let mut x199: fiat_p384_scalar_u1 = 0;
2086 fiat_p384_scalar_addcarryx_u64(&mut x198, &mut x199, x197, x186, (0x0 as u64));
2087 let mut x200: u64 = 0;
2088 let mut x201: fiat_p384_scalar_u1 = 0;
2089 fiat_p384_scalar_addcarryx_u64(&mut x200, &mut x201, x199, x188, (0x0 as u64));
2090 let mut x202: u64 = 0;
2091 let mut x203: u64 = 0;
2092 fiat_p384_scalar_mulx_u64(&mut x202, &mut x203, x190, 0x6ed46089e88fdc45);
2093 let mut x204: u64 = 0;
2094 let mut x205: u64 = 0;
2095 fiat_p384_scalar_mulx_u64(&mut x204, &mut x205, x202, 0xffffffffffffffff);
2096 let mut x206: u64 = 0;
2097 let mut x207: u64 = 0;
2098 fiat_p384_scalar_mulx_u64(&mut x206, &mut x207, x202, 0xffffffffffffffff);
2099 let mut x208: u64 = 0;
2100 let mut x209: u64 = 0;
2101 fiat_p384_scalar_mulx_u64(&mut x208, &mut x209, x202, 0xffffffffffffffff);
2102 let mut x210: u64 = 0;
2103 let mut x211: u64 = 0;
2104 fiat_p384_scalar_mulx_u64(&mut x210, &mut x211, x202, 0xc7634d81f4372ddf);
2105 let mut x212: u64 = 0;
2106 let mut x213: u64 = 0;
2107 fiat_p384_scalar_mulx_u64(&mut x212, &mut x213, x202, 0x581a0db248b0a77a);
2108 let mut x214: u64 = 0;
2109 let mut x215: u64 = 0;
2110 fiat_p384_scalar_mulx_u64(&mut x214, &mut x215, x202, 0xecec196accc52973);
2111 let mut x216: u64 = 0;
2112 let mut x217: fiat_p384_scalar_u1 = 0;
2113 fiat_p384_scalar_addcarryx_u64(&mut x216, &mut x217, 0x0, x215, x212);
2114 let mut x218: u64 = 0;
2115 let mut x219: fiat_p384_scalar_u1 = 0;
2116 fiat_p384_scalar_addcarryx_u64(&mut x218, &mut x219, x217, x213, x210);
2117 let mut x220: u64 = 0;
2118 let mut x221: fiat_p384_scalar_u1 = 0;
2119 fiat_p384_scalar_addcarryx_u64(&mut x220, &mut x221, x219, x211, x208);
2120 let mut x222: u64 = 0;
2121 let mut x223: fiat_p384_scalar_u1 = 0;
2122 fiat_p384_scalar_addcarryx_u64(&mut x222, &mut x223, x221, x209, x206);
2123 let mut x224: u64 = 0;
2124 let mut x225: fiat_p384_scalar_u1 = 0;
2125 fiat_p384_scalar_addcarryx_u64(&mut x224, &mut x225, x223, x207, x204);
2126 let mut x226: u64 = 0;
2127 let mut x227: fiat_p384_scalar_u1 = 0;
2128 fiat_p384_scalar_addcarryx_u64(&mut x226, &mut x227, 0x0, x190, x214);
2129 let mut x228: u64 = 0;
2130 let mut x229: fiat_p384_scalar_u1 = 0;
2131 fiat_p384_scalar_addcarryx_u64(&mut x228, &mut x229, x227, x192, x216);
2132 let mut x230: u64 = 0;
2133 let mut x231: fiat_p384_scalar_u1 = 0;
2134 fiat_p384_scalar_addcarryx_u64(&mut x230, &mut x231, x229, x194, x218);
2135 let mut x232: u64 = 0;
2136 let mut x233: fiat_p384_scalar_u1 = 0;
2137 fiat_p384_scalar_addcarryx_u64(&mut x232, &mut x233, x231, x196, x220);
2138 let mut x234: u64 = 0;
2139 let mut x235: fiat_p384_scalar_u1 = 0;
2140 fiat_p384_scalar_addcarryx_u64(&mut x234, &mut x235, x233, x198, x222);
2141 let mut x236: u64 = 0;
2142 let mut x237: fiat_p384_scalar_u1 = 0;
2143 fiat_p384_scalar_addcarryx_u64(&mut x236, &mut x237, x235, x200, x224);
2144 let mut x238: u64 = 0;
2145 let mut x239: fiat_p384_scalar_u1 = 0;
2146 fiat_p384_scalar_addcarryx_u64(&mut x238, &mut x239, x237, ((x201 as u64) + (x189 as u64)), ((x225 as u64) + x205));
2147 let mut x240: u64 = 0;
2148 let mut x241: fiat_p384_scalar_u1 = 0;
2149 fiat_p384_scalar_addcarryx_u64(&mut x240, &mut x241, 0x0, x228, (arg1[5]));
2150 let mut x242: u64 = 0;
2151 let mut x243: fiat_p384_scalar_u1 = 0;
2152 fiat_p384_scalar_addcarryx_u64(&mut x242, &mut x243, x241, x230, (0x0 as u64));
2153 let mut x244: u64 = 0;
2154 let mut x245: fiat_p384_scalar_u1 = 0;
2155 fiat_p384_scalar_addcarryx_u64(&mut x244, &mut x245, x243, x232, (0x0 as u64));
2156 let mut x246: u64 = 0;
2157 let mut x247: fiat_p384_scalar_u1 = 0;
2158 fiat_p384_scalar_addcarryx_u64(&mut x246, &mut x247, x245, x234, (0x0 as u64));
2159 let mut x248: u64 = 0;
2160 let mut x249: fiat_p384_scalar_u1 = 0;
2161 fiat_p384_scalar_addcarryx_u64(&mut x248, &mut x249, x247, x236, (0x0 as u64));
2162 let mut x250: u64 = 0;
2163 let mut x251: fiat_p384_scalar_u1 = 0;
2164 fiat_p384_scalar_addcarryx_u64(&mut x250, &mut x251, x249, x238, (0x0 as u64));
2165 let mut x252: u64 = 0;
2166 let mut x253: u64 = 0;
2167 fiat_p384_scalar_mulx_u64(&mut x252, &mut x253, x240, 0x6ed46089e88fdc45);
2168 let mut x254: u64 = 0;
2169 let mut x255: u64 = 0;
2170 fiat_p384_scalar_mulx_u64(&mut x254, &mut x255, x252, 0xffffffffffffffff);
2171 let mut x256: u64 = 0;
2172 let mut x257: u64 = 0;
2173 fiat_p384_scalar_mulx_u64(&mut x256, &mut x257, x252, 0xffffffffffffffff);
2174 let mut x258: u64 = 0;
2175 let mut x259: u64 = 0;
2176 fiat_p384_scalar_mulx_u64(&mut x258, &mut x259, x252, 0xffffffffffffffff);
2177 let mut x260: u64 = 0;
2178 let mut x261: u64 = 0;
2179 fiat_p384_scalar_mulx_u64(&mut x260, &mut x261, x252, 0xc7634d81f4372ddf);
2180 let mut x262: u64 = 0;
2181 let mut x263: u64 = 0;
2182 fiat_p384_scalar_mulx_u64(&mut x262, &mut x263, x252, 0x581a0db248b0a77a);
2183 let mut x264: u64 = 0;
2184 let mut x265: u64 = 0;
2185 fiat_p384_scalar_mulx_u64(&mut x264, &mut x265, x252, 0xecec196accc52973);
2186 let mut x266: u64 = 0;
2187 let mut x267: fiat_p384_scalar_u1 = 0;
2188 fiat_p384_scalar_addcarryx_u64(&mut x266, &mut x267, 0x0, x265, x262);
2189 let mut x268: u64 = 0;
2190 let mut x269: fiat_p384_scalar_u1 = 0;
2191 fiat_p384_scalar_addcarryx_u64(&mut x268, &mut x269, x267, x263, x260);
2192 let mut x270: u64 = 0;
2193 let mut x271: fiat_p384_scalar_u1 = 0;
2194 fiat_p384_scalar_addcarryx_u64(&mut x270, &mut x271, x269, x261, x258);
2195 let mut x272: u64 = 0;
2196 let mut x273: fiat_p384_scalar_u1 = 0;
2197 fiat_p384_scalar_addcarryx_u64(&mut x272, &mut x273, x271, x259, x256);
2198 let mut x274: u64 = 0;
2199 let mut x275: fiat_p384_scalar_u1 = 0;
2200 fiat_p384_scalar_addcarryx_u64(&mut x274, &mut x275, x273, x257, x254);
2201 let mut x276: u64 = 0;
2202 let mut x277: fiat_p384_scalar_u1 = 0;
2203 fiat_p384_scalar_addcarryx_u64(&mut x276, &mut x277, 0x0, x240, x264);
2204 let mut x278: u64 = 0;
2205 let mut x279: fiat_p384_scalar_u1 = 0;
2206 fiat_p384_scalar_addcarryx_u64(&mut x278, &mut x279, x277, x242, x266);
2207 let mut x280: u64 = 0;
2208 let mut x281: fiat_p384_scalar_u1 = 0;
2209 fiat_p384_scalar_addcarryx_u64(&mut x280, &mut x281, x279, x244, x268);
2210 let mut x282: u64 = 0;
2211 let mut x283: fiat_p384_scalar_u1 = 0;
2212 fiat_p384_scalar_addcarryx_u64(&mut x282, &mut x283, x281, x246, x270);
2213 let mut x284: u64 = 0;
2214 let mut x285: fiat_p384_scalar_u1 = 0;
2215 fiat_p384_scalar_addcarryx_u64(&mut x284, &mut x285, x283, x248, x272);
2216 let mut x286: u64 = 0;
2217 let mut x287: fiat_p384_scalar_u1 = 0;
2218 fiat_p384_scalar_addcarryx_u64(&mut x286, &mut x287, x285, x250, x274);
2219 let mut x288: u64 = 0;
2220 let mut x289: fiat_p384_scalar_u1 = 0;
2221 fiat_p384_scalar_addcarryx_u64(&mut x288, &mut x289, x287, ((x251 as u64) + (x239 as u64)), ((x275 as u64) + x255));
2222 let mut x290: u64 = 0;
2223 let mut x291: fiat_p384_scalar_u1 = 0;
2224 fiat_p384_scalar_subborrowx_u64(&mut x290, &mut x291, 0x0, x278, 0xecec196accc52973);
2225 let mut x292: u64 = 0;
2226 let mut x293: fiat_p384_scalar_u1 = 0;
2227 fiat_p384_scalar_subborrowx_u64(&mut x292, &mut x293, x291, x280, 0x581a0db248b0a77a);
2228 let mut x294: u64 = 0;
2229 let mut x295: fiat_p384_scalar_u1 = 0;
2230 fiat_p384_scalar_subborrowx_u64(&mut x294, &mut x295, x293, x282, 0xc7634d81f4372ddf);
2231 let mut x296: u64 = 0;
2232 let mut x297: fiat_p384_scalar_u1 = 0;
2233 fiat_p384_scalar_subborrowx_u64(&mut x296, &mut x297, x295, x284, 0xffffffffffffffff);
2234 let mut x298: u64 = 0;
2235 let mut x299: fiat_p384_scalar_u1 = 0;
2236 fiat_p384_scalar_subborrowx_u64(&mut x298, &mut x299, x297, x286, 0xffffffffffffffff);
2237 let mut x300: u64 = 0;
2238 let mut x301: fiat_p384_scalar_u1 = 0;
2239 fiat_p384_scalar_subborrowx_u64(&mut x300, &mut x301, x299, x288, 0xffffffffffffffff);
2240 let mut x302: u64 = 0;
2241 let mut x303: fiat_p384_scalar_u1 = 0;
2242 fiat_p384_scalar_subborrowx_u64(&mut x302, &mut x303, x301, (x289 as u64), (0x0 as u64));
2243 let mut x304: u64 = 0;
2244 fiat_p384_scalar_cmovznz_u64(&mut x304, x303, x290, x278);
2245 let mut x305: u64 = 0;
2246 fiat_p384_scalar_cmovznz_u64(&mut x305, x303, x292, x280);
2247 let mut x306: u64 = 0;
2248 fiat_p384_scalar_cmovznz_u64(&mut x306, x303, x294, x282);
2249 let mut x307: u64 = 0;
2250 fiat_p384_scalar_cmovznz_u64(&mut x307, x303, x296, x284);
2251 let mut x308: u64 = 0;
2252 fiat_p384_scalar_cmovznz_u64(&mut x308, x303, x298, x286);
2253 let mut x309: u64 = 0;
2254 fiat_p384_scalar_cmovznz_u64(&mut x309, x303, x300, x288);
2255 out1[0] = x304;
2256 out1[1] = x305;
2257 out1[2] = x306;
2258 out1[3] = x307;
2259 out1[4] = x308;
2260 out1[5] = x309;
2261}
2262
2263/// The function fiat_p384_scalar_to_montgomery translates a field element into the Montgomery domain.
2264///
2265/// Preconditions:
2266/// 0 ≤ eval arg1 < m
2267/// Postconditions:
2268/// eval (from_montgomery out1) mod m = eval arg1 mod m
2269/// 0 ≤ eval out1 < m
2270///
2271#[inline]
4b012472 2272pub fn fiat_p384_scalar_to_montgomery(out1: &mut fiat_p384_scalar_montgomery_domain_field_element, arg1: &fiat_p384_scalar_non_montgomery_domain_field_element) {
0a29b90c
FG
2273 let x1: u64 = (arg1[1]);
2274 let x2: u64 = (arg1[2]);
2275 let x3: u64 = (arg1[3]);
2276 let x4: u64 = (arg1[4]);
2277 let x5: u64 = (arg1[5]);
2278 let x6: u64 = (arg1[0]);
2279 let mut x7: u64 = 0;
2280 let mut x8: u64 = 0;
2281 fiat_p384_scalar_mulx_u64(&mut x7, &mut x8, x6, 0xc84ee012b39bf21);
2282 let mut x9: u64 = 0;
2283 let mut x10: u64 = 0;
2284 fiat_p384_scalar_mulx_u64(&mut x9, &mut x10, x6, 0x3fb05b7a28266895);
2285 let mut x11: u64 = 0;
2286 let mut x12: u64 = 0;
2287 fiat_p384_scalar_mulx_u64(&mut x11, &mut x12, x6, 0xd40d49174aab1cc5);
2288 let mut x13: u64 = 0;
2289 let mut x14: u64 = 0;
2290 fiat_p384_scalar_mulx_u64(&mut x13, &mut x14, x6, 0xbc3e483afcb82947);
2291 let mut x15: u64 = 0;
2292 let mut x16: u64 = 0;
2293 fiat_p384_scalar_mulx_u64(&mut x15, &mut x16, x6, 0xff3d81e5df1aa419);
2294 let mut x17: u64 = 0;
2295 let mut x18: u64 = 0;
2296 fiat_p384_scalar_mulx_u64(&mut x17, &mut x18, x6, 0x2d319b2419b409a9);
2297 let mut x19: u64 = 0;
2298 let mut x20: fiat_p384_scalar_u1 = 0;
2299 fiat_p384_scalar_addcarryx_u64(&mut x19, &mut x20, 0x0, x18, x15);
2300 let mut x21: u64 = 0;
2301 let mut x22: fiat_p384_scalar_u1 = 0;
2302 fiat_p384_scalar_addcarryx_u64(&mut x21, &mut x22, x20, x16, x13);
2303 let mut x23: u64 = 0;
2304 let mut x24: fiat_p384_scalar_u1 = 0;
2305 fiat_p384_scalar_addcarryx_u64(&mut x23, &mut x24, x22, x14, x11);
2306 let mut x25: u64 = 0;
2307 let mut x26: fiat_p384_scalar_u1 = 0;
2308 fiat_p384_scalar_addcarryx_u64(&mut x25, &mut x26, x24, x12, x9);
2309 let mut x27: u64 = 0;
2310 let mut x28: fiat_p384_scalar_u1 = 0;
2311 fiat_p384_scalar_addcarryx_u64(&mut x27, &mut x28, x26, x10, x7);
2312 let mut x29: u64 = 0;
2313 let mut x30: u64 = 0;
2314 fiat_p384_scalar_mulx_u64(&mut x29, &mut x30, x17, 0x6ed46089e88fdc45);
2315 let mut x31: u64 = 0;
2316 let mut x32: u64 = 0;
2317 fiat_p384_scalar_mulx_u64(&mut x31, &mut x32, x29, 0xffffffffffffffff);
2318 let mut x33: u64 = 0;
2319 let mut x34: u64 = 0;
2320 fiat_p384_scalar_mulx_u64(&mut x33, &mut x34, x29, 0xffffffffffffffff);
2321 let mut x35: u64 = 0;
2322 let mut x36: u64 = 0;
2323 fiat_p384_scalar_mulx_u64(&mut x35, &mut x36, x29, 0xffffffffffffffff);
2324 let mut x37: u64 = 0;
2325 let mut x38: u64 = 0;
2326 fiat_p384_scalar_mulx_u64(&mut x37, &mut x38, x29, 0xc7634d81f4372ddf);
2327 let mut x39: u64 = 0;
2328 let mut x40: u64 = 0;
2329 fiat_p384_scalar_mulx_u64(&mut x39, &mut x40, x29, 0x581a0db248b0a77a);
2330 let mut x41: u64 = 0;
2331 let mut x42: u64 = 0;
2332 fiat_p384_scalar_mulx_u64(&mut x41, &mut x42, x29, 0xecec196accc52973);
2333 let mut x43: u64 = 0;
2334 let mut x44: fiat_p384_scalar_u1 = 0;
2335 fiat_p384_scalar_addcarryx_u64(&mut x43, &mut x44, 0x0, x42, x39);
2336 let mut x45: u64 = 0;
2337 let mut x46: fiat_p384_scalar_u1 = 0;
2338 fiat_p384_scalar_addcarryx_u64(&mut x45, &mut x46, x44, x40, x37);
2339 let mut x47: u64 = 0;
2340 let mut x48: fiat_p384_scalar_u1 = 0;
2341 fiat_p384_scalar_addcarryx_u64(&mut x47, &mut x48, x46, x38, x35);
2342 let mut x49: u64 = 0;
2343 let mut x50: fiat_p384_scalar_u1 = 0;
2344 fiat_p384_scalar_addcarryx_u64(&mut x49, &mut x50, x48, x36, x33);
2345 let mut x51: u64 = 0;
2346 let mut x52: fiat_p384_scalar_u1 = 0;
2347 fiat_p384_scalar_addcarryx_u64(&mut x51, &mut x52, x50, x34, x31);
2348 let mut x53: u64 = 0;
2349 let mut x54: fiat_p384_scalar_u1 = 0;
2350 fiat_p384_scalar_addcarryx_u64(&mut x53, &mut x54, 0x0, x17, x41);
2351 let mut x55: u64 = 0;
2352 let mut x56: fiat_p384_scalar_u1 = 0;
2353 fiat_p384_scalar_addcarryx_u64(&mut x55, &mut x56, x54, x19, x43);
2354 let mut x57: u64 = 0;
2355 let mut x58: fiat_p384_scalar_u1 = 0;
2356 fiat_p384_scalar_addcarryx_u64(&mut x57, &mut x58, x56, x21, x45);
2357 let mut x59: u64 = 0;
2358 let mut x60: fiat_p384_scalar_u1 = 0;
2359 fiat_p384_scalar_addcarryx_u64(&mut x59, &mut x60, x58, x23, x47);
2360 let mut x61: u64 = 0;
2361 let mut x62: fiat_p384_scalar_u1 = 0;
2362 fiat_p384_scalar_addcarryx_u64(&mut x61, &mut x62, x60, x25, x49);
2363 let mut x63: u64 = 0;
2364 let mut x64: fiat_p384_scalar_u1 = 0;
2365 fiat_p384_scalar_addcarryx_u64(&mut x63, &mut x64, x62, x27, x51);
2366 let mut x65: u64 = 0;
2367 let mut x66: fiat_p384_scalar_u1 = 0;
2368 fiat_p384_scalar_addcarryx_u64(&mut x65, &mut x66, x64, ((x28 as u64) + x8), ((x52 as u64) + x32));
2369 let mut x67: u64 = 0;
2370 let mut x68: u64 = 0;
2371 fiat_p384_scalar_mulx_u64(&mut x67, &mut x68, x1, 0xc84ee012b39bf21);
2372 let mut x69: u64 = 0;
2373 let mut x70: u64 = 0;
2374 fiat_p384_scalar_mulx_u64(&mut x69, &mut x70, x1, 0x3fb05b7a28266895);
2375 let mut x71: u64 = 0;
2376 let mut x72: u64 = 0;
2377 fiat_p384_scalar_mulx_u64(&mut x71, &mut x72, x1, 0xd40d49174aab1cc5);
2378 let mut x73: u64 = 0;
2379 let mut x74: u64 = 0;
2380 fiat_p384_scalar_mulx_u64(&mut x73, &mut x74, x1, 0xbc3e483afcb82947);
2381 let mut x75: u64 = 0;
2382 let mut x76: u64 = 0;
2383 fiat_p384_scalar_mulx_u64(&mut x75, &mut x76, x1, 0xff3d81e5df1aa419);
2384 let mut x77: u64 = 0;
2385 let mut x78: u64 = 0;
2386 fiat_p384_scalar_mulx_u64(&mut x77, &mut x78, x1, 0x2d319b2419b409a9);
2387 let mut x79: u64 = 0;
2388 let mut x80: fiat_p384_scalar_u1 = 0;
2389 fiat_p384_scalar_addcarryx_u64(&mut x79, &mut x80, 0x0, x78, x75);
2390 let mut x81: u64 = 0;
2391 let mut x82: fiat_p384_scalar_u1 = 0;
2392 fiat_p384_scalar_addcarryx_u64(&mut x81, &mut x82, x80, x76, x73);
2393 let mut x83: u64 = 0;
2394 let mut x84: fiat_p384_scalar_u1 = 0;
2395 fiat_p384_scalar_addcarryx_u64(&mut x83, &mut x84, x82, x74, x71);
2396 let mut x85: u64 = 0;
2397 let mut x86: fiat_p384_scalar_u1 = 0;
2398 fiat_p384_scalar_addcarryx_u64(&mut x85, &mut x86, x84, x72, x69);
2399 let mut x87: u64 = 0;
2400 let mut x88: fiat_p384_scalar_u1 = 0;
2401 fiat_p384_scalar_addcarryx_u64(&mut x87, &mut x88, x86, x70, x67);
2402 let mut x89: u64 = 0;
2403 let mut x90: fiat_p384_scalar_u1 = 0;
2404 fiat_p384_scalar_addcarryx_u64(&mut x89, &mut x90, 0x0, x55, x77);
2405 let mut x91: u64 = 0;
2406 let mut x92: fiat_p384_scalar_u1 = 0;
2407 fiat_p384_scalar_addcarryx_u64(&mut x91, &mut x92, x90, x57, x79);
2408 let mut x93: u64 = 0;
2409 let mut x94: fiat_p384_scalar_u1 = 0;
2410 fiat_p384_scalar_addcarryx_u64(&mut x93, &mut x94, x92, x59, x81);
2411 let mut x95: u64 = 0;
2412 let mut x96: fiat_p384_scalar_u1 = 0;
2413 fiat_p384_scalar_addcarryx_u64(&mut x95, &mut x96, x94, x61, x83);
2414 let mut x97: u64 = 0;
2415 let mut x98: fiat_p384_scalar_u1 = 0;
2416 fiat_p384_scalar_addcarryx_u64(&mut x97, &mut x98, x96, x63, x85);
2417 let mut x99: u64 = 0;
2418 let mut x100: fiat_p384_scalar_u1 = 0;
2419 fiat_p384_scalar_addcarryx_u64(&mut x99, &mut x100, x98, x65, x87);
2420 let mut x101: u64 = 0;
2421 let mut x102: u64 = 0;
2422 fiat_p384_scalar_mulx_u64(&mut x101, &mut x102, x89, 0x6ed46089e88fdc45);
2423 let mut x103: u64 = 0;
2424 let mut x104: u64 = 0;
2425 fiat_p384_scalar_mulx_u64(&mut x103, &mut x104, x101, 0xffffffffffffffff);
2426 let mut x105: u64 = 0;
2427 let mut x106: u64 = 0;
2428 fiat_p384_scalar_mulx_u64(&mut x105, &mut x106, x101, 0xffffffffffffffff);
2429 let mut x107: u64 = 0;
2430 let mut x108: u64 = 0;
2431 fiat_p384_scalar_mulx_u64(&mut x107, &mut x108, x101, 0xffffffffffffffff);
2432 let mut x109: u64 = 0;
2433 let mut x110: u64 = 0;
2434 fiat_p384_scalar_mulx_u64(&mut x109, &mut x110, x101, 0xc7634d81f4372ddf);
2435 let mut x111: u64 = 0;
2436 let mut x112: u64 = 0;
2437 fiat_p384_scalar_mulx_u64(&mut x111, &mut x112, x101, 0x581a0db248b0a77a);
2438 let mut x113: u64 = 0;
2439 let mut x114: u64 = 0;
2440 fiat_p384_scalar_mulx_u64(&mut x113, &mut x114, x101, 0xecec196accc52973);
2441 let mut x115: u64 = 0;
2442 let mut x116: fiat_p384_scalar_u1 = 0;
2443 fiat_p384_scalar_addcarryx_u64(&mut x115, &mut x116, 0x0, x114, x111);
2444 let mut x117: u64 = 0;
2445 let mut x118: fiat_p384_scalar_u1 = 0;
2446 fiat_p384_scalar_addcarryx_u64(&mut x117, &mut x118, x116, x112, x109);
2447 let mut x119: u64 = 0;
2448 let mut x120: fiat_p384_scalar_u1 = 0;
2449 fiat_p384_scalar_addcarryx_u64(&mut x119, &mut x120, x118, x110, x107);
2450 let mut x121: u64 = 0;
2451 let mut x122: fiat_p384_scalar_u1 = 0;
2452 fiat_p384_scalar_addcarryx_u64(&mut x121, &mut x122, x120, x108, x105);
2453 let mut x123: u64 = 0;
2454 let mut x124: fiat_p384_scalar_u1 = 0;
2455 fiat_p384_scalar_addcarryx_u64(&mut x123, &mut x124, x122, x106, x103);
2456 let mut x125: u64 = 0;
2457 let mut x126: fiat_p384_scalar_u1 = 0;
2458 fiat_p384_scalar_addcarryx_u64(&mut x125, &mut x126, 0x0, x89, x113);
2459 let mut x127: u64 = 0;
2460 let mut x128: fiat_p384_scalar_u1 = 0;
2461 fiat_p384_scalar_addcarryx_u64(&mut x127, &mut x128, x126, x91, x115);
2462 let mut x129: u64 = 0;
2463 let mut x130: fiat_p384_scalar_u1 = 0;
2464 fiat_p384_scalar_addcarryx_u64(&mut x129, &mut x130, x128, x93, x117);
2465 let mut x131: u64 = 0;
2466 let mut x132: fiat_p384_scalar_u1 = 0;
2467 fiat_p384_scalar_addcarryx_u64(&mut x131, &mut x132, x130, x95, x119);
2468 let mut x133: u64 = 0;
2469 let mut x134: fiat_p384_scalar_u1 = 0;
2470 fiat_p384_scalar_addcarryx_u64(&mut x133, &mut x134, x132, x97, x121);
2471 let mut x135: u64 = 0;
2472 let mut x136: fiat_p384_scalar_u1 = 0;
2473 fiat_p384_scalar_addcarryx_u64(&mut x135, &mut x136, x134, x99, x123);
2474 let mut x137: u64 = 0;
2475 let mut x138: fiat_p384_scalar_u1 = 0;
2476 fiat_p384_scalar_addcarryx_u64(&mut x137, &mut x138, x136, (((x100 as u64) + (x66 as u64)) + ((x88 as u64) + x68)), ((x124 as u64) + x104));
2477 let mut x139: u64 = 0;
2478 let mut x140: u64 = 0;
2479 fiat_p384_scalar_mulx_u64(&mut x139, &mut x140, x2, 0xc84ee012b39bf21);
2480 let mut x141: u64 = 0;
2481 let mut x142: u64 = 0;
2482 fiat_p384_scalar_mulx_u64(&mut x141, &mut x142, x2, 0x3fb05b7a28266895);
2483 let mut x143: u64 = 0;
2484 let mut x144: u64 = 0;
2485 fiat_p384_scalar_mulx_u64(&mut x143, &mut x144, x2, 0xd40d49174aab1cc5);
2486 let mut x145: u64 = 0;
2487 let mut x146: u64 = 0;
2488 fiat_p384_scalar_mulx_u64(&mut x145, &mut x146, x2, 0xbc3e483afcb82947);
2489 let mut x147: u64 = 0;
2490 let mut x148: u64 = 0;
2491 fiat_p384_scalar_mulx_u64(&mut x147, &mut x148, x2, 0xff3d81e5df1aa419);
2492 let mut x149: u64 = 0;
2493 let mut x150: u64 = 0;
2494 fiat_p384_scalar_mulx_u64(&mut x149, &mut x150, x2, 0x2d319b2419b409a9);
2495 let mut x151: u64 = 0;
2496 let mut x152: fiat_p384_scalar_u1 = 0;
2497 fiat_p384_scalar_addcarryx_u64(&mut x151, &mut x152, 0x0, x150, x147);
2498 let mut x153: u64 = 0;
2499 let mut x154: fiat_p384_scalar_u1 = 0;
2500 fiat_p384_scalar_addcarryx_u64(&mut x153, &mut x154, x152, x148, x145);
2501 let mut x155: u64 = 0;
2502 let mut x156: fiat_p384_scalar_u1 = 0;
2503 fiat_p384_scalar_addcarryx_u64(&mut x155, &mut x156, x154, x146, x143);
2504 let mut x157: u64 = 0;
2505 let mut x158: fiat_p384_scalar_u1 = 0;
2506 fiat_p384_scalar_addcarryx_u64(&mut x157, &mut x158, x156, x144, x141);
2507 let mut x159: u64 = 0;
2508 let mut x160: fiat_p384_scalar_u1 = 0;
2509 fiat_p384_scalar_addcarryx_u64(&mut x159, &mut x160, x158, x142, x139);
2510 let mut x161: u64 = 0;
2511 let mut x162: fiat_p384_scalar_u1 = 0;
2512 fiat_p384_scalar_addcarryx_u64(&mut x161, &mut x162, 0x0, x127, x149);
2513 let mut x163: u64 = 0;
2514 let mut x164: fiat_p384_scalar_u1 = 0;
2515 fiat_p384_scalar_addcarryx_u64(&mut x163, &mut x164, x162, x129, x151);
2516 let mut x165: u64 = 0;
2517 let mut x166: fiat_p384_scalar_u1 = 0;
2518 fiat_p384_scalar_addcarryx_u64(&mut x165, &mut x166, x164, x131, x153);
2519 let mut x167: u64 = 0;
2520 let mut x168: fiat_p384_scalar_u1 = 0;
2521 fiat_p384_scalar_addcarryx_u64(&mut x167, &mut x168, x166, x133, x155);
2522 let mut x169: u64 = 0;
2523 let mut x170: fiat_p384_scalar_u1 = 0;
2524 fiat_p384_scalar_addcarryx_u64(&mut x169, &mut x170, x168, x135, x157);
2525 let mut x171: u64 = 0;
2526 let mut x172: fiat_p384_scalar_u1 = 0;
2527 fiat_p384_scalar_addcarryx_u64(&mut x171, &mut x172, x170, x137, x159);
2528 let mut x173: u64 = 0;
2529 let mut x174: u64 = 0;
2530 fiat_p384_scalar_mulx_u64(&mut x173, &mut x174, x161, 0x6ed46089e88fdc45);
2531 let mut x175: u64 = 0;
2532 let mut x176: u64 = 0;
2533 fiat_p384_scalar_mulx_u64(&mut x175, &mut x176, x173, 0xffffffffffffffff);
2534 let mut x177: u64 = 0;
2535 let mut x178: u64 = 0;
2536 fiat_p384_scalar_mulx_u64(&mut x177, &mut x178, x173, 0xffffffffffffffff);
2537 let mut x179: u64 = 0;
2538 let mut x180: u64 = 0;
2539 fiat_p384_scalar_mulx_u64(&mut x179, &mut x180, x173, 0xffffffffffffffff);
2540 let mut x181: u64 = 0;
2541 let mut x182: u64 = 0;
2542 fiat_p384_scalar_mulx_u64(&mut x181, &mut x182, x173, 0xc7634d81f4372ddf);
2543 let mut x183: u64 = 0;
2544 let mut x184: u64 = 0;
2545 fiat_p384_scalar_mulx_u64(&mut x183, &mut x184, x173, 0x581a0db248b0a77a);
2546 let mut x185: u64 = 0;
2547 let mut x186: u64 = 0;
2548 fiat_p384_scalar_mulx_u64(&mut x185, &mut x186, x173, 0xecec196accc52973);
2549 let mut x187: u64 = 0;
2550 let mut x188: fiat_p384_scalar_u1 = 0;
2551 fiat_p384_scalar_addcarryx_u64(&mut x187, &mut x188, 0x0, x186, x183);
2552 let mut x189: u64 = 0;
2553 let mut x190: fiat_p384_scalar_u1 = 0;
2554 fiat_p384_scalar_addcarryx_u64(&mut x189, &mut x190, x188, x184, x181);
2555 let mut x191: u64 = 0;
2556 let mut x192: fiat_p384_scalar_u1 = 0;
2557 fiat_p384_scalar_addcarryx_u64(&mut x191, &mut x192, x190, x182, x179);
2558 let mut x193: u64 = 0;
2559 let mut x194: fiat_p384_scalar_u1 = 0;
2560 fiat_p384_scalar_addcarryx_u64(&mut x193, &mut x194, x192, x180, x177);
2561 let mut x195: u64 = 0;
2562 let mut x196: fiat_p384_scalar_u1 = 0;
2563 fiat_p384_scalar_addcarryx_u64(&mut x195, &mut x196, x194, x178, x175);
2564 let mut x197: u64 = 0;
2565 let mut x198: fiat_p384_scalar_u1 = 0;
2566 fiat_p384_scalar_addcarryx_u64(&mut x197, &mut x198, 0x0, x161, x185);
2567 let mut x199: u64 = 0;
2568 let mut x200: fiat_p384_scalar_u1 = 0;
2569 fiat_p384_scalar_addcarryx_u64(&mut x199, &mut x200, x198, x163, x187);
2570 let mut x201: u64 = 0;
2571 let mut x202: fiat_p384_scalar_u1 = 0;
2572 fiat_p384_scalar_addcarryx_u64(&mut x201, &mut x202, x200, x165, x189);
2573 let mut x203: u64 = 0;
2574 let mut x204: fiat_p384_scalar_u1 = 0;
2575 fiat_p384_scalar_addcarryx_u64(&mut x203, &mut x204, x202, x167, x191);
2576 let mut x205: u64 = 0;
2577 let mut x206: fiat_p384_scalar_u1 = 0;
2578 fiat_p384_scalar_addcarryx_u64(&mut x205, &mut x206, x204, x169, x193);
2579 let mut x207: u64 = 0;
2580 let mut x208: fiat_p384_scalar_u1 = 0;
2581 fiat_p384_scalar_addcarryx_u64(&mut x207, &mut x208, x206, x171, x195);
2582 let mut x209: u64 = 0;
2583 let mut x210: fiat_p384_scalar_u1 = 0;
2584 fiat_p384_scalar_addcarryx_u64(&mut x209, &mut x210, x208, (((x172 as u64) + (x138 as u64)) + ((x160 as u64) + x140)), ((x196 as u64) + x176));
2585 let mut x211: u64 = 0;
2586 let mut x212: u64 = 0;
2587 fiat_p384_scalar_mulx_u64(&mut x211, &mut x212, x3, 0xc84ee012b39bf21);
2588 let mut x213: u64 = 0;
2589 let mut x214: u64 = 0;
2590 fiat_p384_scalar_mulx_u64(&mut x213, &mut x214, x3, 0x3fb05b7a28266895);
2591 let mut x215: u64 = 0;
2592 let mut x216: u64 = 0;
2593 fiat_p384_scalar_mulx_u64(&mut x215, &mut x216, x3, 0xd40d49174aab1cc5);
2594 let mut x217: u64 = 0;
2595 let mut x218: u64 = 0;
2596 fiat_p384_scalar_mulx_u64(&mut x217, &mut x218, x3, 0xbc3e483afcb82947);
2597 let mut x219: u64 = 0;
2598 let mut x220: u64 = 0;
2599 fiat_p384_scalar_mulx_u64(&mut x219, &mut x220, x3, 0xff3d81e5df1aa419);
2600 let mut x221: u64 = 0;
2601 let mut x222: u64 = 0;
2602 fiat_p384_scalar_mulx_u64(&mut x221, &mut x222, x3, 0x2d319b2419b409a9);
2603 let mut x223: u64 = 0;
2604 let mut x224: fiat_p384_scalar_u1 = 0;
2605 fiat_p384_scalar_addcarryx_u64(&mut x223, &mut x224, 0x0, x222, x219);
2606 let mut x225: u64 = 0;
2607 let mut x226: fiat_p384_scalar_u1 = 0;
2608 fiat_p384_scalar_addcarryx_u64(&mut x225, &mut x226, x224, x220, x217);
2609 let mut x227: u64 = 0;
2610 let mut x228: fiat_p384_scalar_u1 = 0;
2611 fiat_p384_scalar_addcarryx_u64(&mut x227, &mut x228, x226, x218, x215);
2612 let mut x229: u64 = 0;
2613 let mut x230: fiat_p384_scalar_u1 = 0;
2614 fiat_p384_scalar_addcarryx_u64(&mut x229, &mut x230, x228, x216, x213);
2615 let mut x231: u64 = 0;
2616 let mut x232: fiat_p384_scalar_u1 = 0;
2617 fiat_p384_scalar_addcarryx_u64(&mut x231, &mut x232, x230, x214, x211);
2618 let mut x233: u64 = 0;
2619 let mut x234: fiat_p384_scalar_u1 = 0;
2620 fiat_p384_scalar_addcarryx_u64(&mut x233, &mut x234, 0x0, x199, x221);
2621 let mut x235: u64 = 0;
2622 let mut x236: fiat_p384_scalar_u1 = 0;
2623 fiat_p384_scalar_addcarryx_u64(&mut x235, &mut x236, x234, x201, x223);
2624 let mut x237: u64 = 0;
2625 let mut x238: fiat_p384_scalar_u1 = 0;
2626 fiat_p384_scalar_addcarryx_u64(&mut x237, &mut x238, x236, x203, x225);
2627 let mut x239: u64 = 0;
2628 let mut x240: fiat_p384_scalar_u1 = 0;
2629 fiat_p384_scalar_addcarryx_u64(&mut x239, &mut x240, x238, x205, x227);
2630 let mut x241: u64 = 0;
2631 let mut x242: fiat_p384_scalar_u1 = 0;
2632 fiat_p384_scalar_addcarryx_u64(&mut x241, &mut x242, x240, x207, x229);
2633 let mut x243: u64 = 0;
2634 let mut x244: fiat_p384_scalar_u1 = 0;
2635 fiat_p384_scalar_addcarryx_u64(&mut x243, &mut x244, x242, x209, x231);
2636 let mut x245: u64 = 0;
2637 let mut x246: u64 = 0;
2638 fiat_p384_scalar_mulx_u64(&mut x245, &mut x246, x233, 0x6ed46089e88fdc45);
2639 let mut x247: u64 = 0;
2640 let mut x248: u64 = 0;
2641 fiat_p384_scalar_mulx_u64(&mut x247, &mut x248, x245, 0xffffffffffffffff);
2642 let mut x249: u64 = 0;
2643 let mut x250: u64 = 0;
2644 fiat_p384_scalar_mulx_u64(&mut x249, &mut x250, x245, 0xffffffffffffffff);
2645 let mut x251: u64 = 0;
2646 let mut x252: u64 = 0;
2647 fiat_p384_scalar_mulx_u64(&mut x251, &mut x252, x245, 0xffffffffffffffff);
2648 let mut x253: u64 = 0;
2649 let mut x254: u64 = 0;
2650 fiat_p384_scalar_mulx_u64(&mut x253, &mut x254, x245, 0xc7634d81f4372ddf);
2651 let mut x255: u64 = 0;
2652 let mut x256: u64 = 0;
2653 fiat_p384_scalar_mulx_u64(&mut x255, &mut x256, x245, 0x581a0db248b0a77a);
2654 let mut x257: u64 = 0;
2655 let mut x258: u64 = 0;
2656 fiat_p384_scalar_mulx_u64(&mut x257, &mut x258, x245, 0xecec196accc52973);
2657 let mut x259: u64 = 0;
2658 let mut x260: fiat_p384_scalar_u1 = 0;
2659 fiat_p384_scalar_addcarryx_u64(&mut x259, &mut x260, 0x0, x258, x255);
2660 let mut x261: u64 = 0;
2661 let mut x262: fiat_p384_scalar_u1 = 0;
2662 fiat_p384_scalar_addcarryx_u64(&mut x261, &mut x262, x260, x256, x253);
2663 let mut x263: u64 = 0;
2664 let mut x264: fiat_p384_scalar_u1 = 0;
2665 fiat_p384_scalar_addcarryx_u64(&mut x263, &mut x264, x262, x254, x251);
2666 let mut x265: u64 = 0;
2667 let mut x266: fiat_p384_scalar_u1 = 0;
2668 fiat_p384_scalar_addcarryx_u64(&mut x265, &mut x266, x264, x252, x249);
2669 let mut x267: u64 = 0;
2670 let mut x268: fiat_p384_scalar_u1 = 0;
2671 fiat_p384_scalar_addcarryx_u64(&mut x267, &mut x268, x266, x250, x247);
2672 let mut x269: u64 = 0;
2673 let mut x270: fiat_p384_scalar_u1 = 0;
2674 fiat_p384_scalar_addcarryx_u64(&mut x269, &mut x270, 0x0, x233, x257);
2675 let mut x271: u64 = 0;
2676 let mut x272: fiat_p384_scalar_u1 = 0;
2677 fiat_p384_scalar_addcarryx_u64(&mut x271, &mut x272, x270, x235, x259);
2678 let mut x273: u64 = 0;
2679 let mut x274: fiat_p384_scalar_u1 = 0;
2680 fiat_p384_scalar_addcarryx_u64(&mut x273, &mut x274, x272, x237, x261);
2681 let mut x275: u64 = 0;
2682 let mut x276: fiat_p384_scalar_u1 = 0;
2683 fiat_p384_scalar_addcarryx_u64(&mut x275, &mut x276, x274, x239, x263);
2684 let mut x277: u64 = 0;
2685 let mut x278: fiat_p384_scalar_u1 = 0;
2686 fiat_p384_scalar_addcarryx_u64(&mut x277, &mut x278, x276, x241, x265);
2687 let mut x279: u64 = 0;
2688 let mut x280: fiat_p384_scalar_u1 = 0;
2689 fiat_p384_scalar_addcarryx_u64(&mut x279, &mut x280, x278, x243, x267);
2690 let mut x281: u64 = 0;
2691 let mut x282: fiat_p384_scalar_u1 = 0;
2692 fiat_p384_scalar_addcarryx_u64(&mut x281, &mut x282, x280, (((x244 as u64) + (x210 as u64)) + ((x232 as u64) + x212)), ((x268 as u64) + x248));
2693 let mut x283: u64 = 0;
2694 let mut x284: u64 = 0;
2695 fiat_p384_scalar_mulx_u64(&mut x283, &mut x284, x4, 0xc84ee012b39bf21);
2696 let mut x285: u64 = 0;
2697 let mut x286: u64 = 0;
2698 fiat_p384_scalar_mulx_u64(&mut x285, &mut x286, x4, 0x3fb05b7a28266895);
2699 let mut x287: u64 = 0;
2700 let mut x288: u64 = 0;
2701 fiat_p384_scalar_mulx_u64(&mut x287, &mut x288, x4, 0xd40d49174aab1cc5);
2702 let mut x289: u64 = 0;
2703 let mut x290: u64 = 0;
2704 fiat_p384_scalar_mulx_u64(&mut x289, &mut x290, x4, 0xbc3e483afcb82947);
2705 let mut x291: u64 = 0;
2706 let mut x292: u64 = 0;
2707 fiat_p384_scalar_mulx_u64(&mut x291, &mut x292, x4, 0xff3d81e5df1aa419);
2708 let mut x293: u64 = 0;
2709 let mut x294: u64 = 0;
2710 fiat_p384_scalar_mulx_u64(&mut x293, &mut x294, x4, 0x2d319b2419b409a9);
2711 let mut x295: u64 = 0;
2712 let mut x296: fiat_p384_scalar_u1 = 0;
2713 fiat_p384_scalar_addcarryx_u64(&mut x295, &mut x296, 0x0, x294, x291);
2714 let mut x297: u64 = 0;
2715 let mut x298: fiat_p384_scalar_u1 = 0;
2716 fiat_p384_scalar_addcarryx_u64(&mut x297, &mut x298, x296, x292, x289);
2717 let mut x299: u64 = 0;
2718 let mut x300: fiat_p384_scalar_u1 = 0;
2719 fiat_p384_scalar_addcarryx_u64(&mut x299, &mut x300, x298, x290, x287);
2720 let mut x301: u64 = 0;
2721 let mut x302: fiat_p384_scalar_u1 = 0;
2722 fiat_p384_scalar_addcarryx_u64(&mut x301, &mut x302, x300, x288, x285);
2723 let mut x303: u64 = 0;
2724 let mut x304: fiat_p384_scalar_u1 = 0;
2725 fiat_p384_scalar_addcarryx_u64(&mut x303, &mut x304, x302, x286, x283);
2726 let mut x305: u64 = 0;
2727 let mut x306: fiat_p384_scalar_u1 = 0;
2728 fiat_p384_scalar_addcarryx_u64(&mut x305, &mut x306, 0x0, x271, x293);
2729 let mut x307: u64 = 0;
2730 let mut x308: fiat_p384_scalar_u1 = 0;
2731 fiat_p384_scalar_addcarryx_u64(&mut x307, &mut x308, x306, x273, x295);
2732 let mut x309: u64 = 0;
2733 let mut x310: fiat_p384_scalar_u1 = 0;
2734 fiat_p384_scalar_addcarryx_u64(&mut x309, &mut x310, x308, x275, x297);
2735 let mut x311: u64 = 0;
2736 let mut x312: fiat_p384_scalar_u1 = 0;
2737 fiat_p384_scalar_addcarryx_u64(&mut x311, &mut x312, x310, x277, x299);
2738 let mut x313: u64 = 0;
2739 let mut x314: fiat_p384_scalar_u1 = 0;
2740 fiat_p384_scalar_addcarryx_u64(&mut x313, &mut x314, x312, x279, x301);
2741 let mut x315: u64 = 0;
2742 let mut x316: fiat_p384_scalar_u1 = 0;
2743 fiat_p384_scalar_addcarryx_u64(&mut x315, &mut x316, x314, x281, x303);
2744 let mut x317: u64 = 0;
2745 let mut x318: u64 = 0;
2746 fiat_p384_scalar_mulx_u64(&mut x317, &mut x318, x305, 0x6ed46089e88fdc45);
2747 let mut x319: u64 = 0;
2748 let mut x320: u64 = 0;
2749 fiat_p384_scalar_mulx_u64(&mut x319, &mut x320, x317, 0xffffffffffffffff);
2750 let mut x321: u64 = 0;
2751 let mut x322: u64 = 0;
2752 fiat_p384_scalar_mulx_u64(&mut x321, &mut x322, x317, 0xffffffffffffffff);
2753 let mut x323: u64 = 0;
2754 let mut x324: u64 = 0;
2755 fiat_p384_scalar_mulx_u64(&mut x323, &mut x324, x317, 0xffffffffffffffff);
2756 let mut x325: u64 = 0;
2757 let mut x326: u64 = 0;
2758 fiat_p384_scalar_mulx_u64(&mut x325, &mut x326, x317, 0xc7634d81f4372ddf);
2759 let mut x327: u64 = 0;
2760 let mut x328: u64 = 0;
2761 fiat_p384_scalar_mulx_u64(&mut x327, &mut x328, x317, 0x581a0db248b0a77a);
2762 let mut x329: u64 = 0;
2763 let mut x330: u64 = 0;
2764 fiat_p384_scalar_mulx_u64(&mut x329, &mut x330, x317, 0xecec196accc52973);
2765 let mut x331: u64 = 0;
2766 let mut x332: fiat_p384_scalar_u1 = 0;
2767 fiat_p384_scalar_addcarryx_u64(&mut x331, &mut x332, 0x0, x330, x327);
2768 let mut x333: u64 = 0;
2769 let mut x334: fiat_p384_scalar_u1 = 0;
2770 fiat_p384_scalar_addcarryx_u64(&mut x333, &mut x334, x332, x328, x325);
2771 let mut x335: u64 = 0;
2772 let mut x336: fiat_p384_scalar_u1 = 0;
2773 fiat_p384_scalar_addcarryx_u64(&mut x335, &mut x336, x334, x326, x323);
2774 let mut x337: u64 = 0;
2775 let mut x338: fiat_p384_scalar_u1 = 0;
2776 fiat_p384_scalar_addcarryx_u64(&mut x337, &mut x338, x336, x324, x321);
2777 let mut x339: u64 = 0;
2778 let mut x340: fiat_p384_scalar_u1 = 0;
2779 fiat_p384_scalar_addcarryx_u64(&mut x339, &mut x340, x338, x322, x319);
2780 let mut x341: u64 = 0;
2781 let mut x342: fiat_p384_scalar_u1 = 0;
2782 fiat_p384_scalar_addcarryx_u64(&mut x341, &mut x342, 0x0, x305, x329);
2783 let mut x343: u64 = 0;
2784 let mut x344: fiat_p384_scalar_u1 = 0;
2785 fiat_p384_scalar_addcarryx_u64(&mut x343, &mut x344, x342, x307, x331);
2786 let mut x345: u64 = 0;
2787 let mut x346: fiat_p384_scalar_u1 = 0;
2788 fiat_p384_scalar_addcarryx_u64(&mut x345, &mut x346, x344, x309, x333);
2789 let mut x347: u64 = 0;
2790 let mut x348: fiat_p384_scalar_u1 = 0;
2791 fiat_p384_scalar_addcarryx_u64(&mut x347, &mut x348, x346, x311, x335);
2792 let mut x349: u64 = 0;
2793 let mut x350: fiat_p384_scalar_u1 = 0;
2794 fiat_p384_scalar_addcarryx_u64(&mut x349, &mut x350, x348, x313, x337);
2795 let mut x351: u64 = 0;
2796 let mut x352: fiat_p384_scalar_u1 = 0;
2797 fiat_p384_scalar_addcarryx_u64(&mut x351, &mut x352, x350, x315, x339);
2798 let mut x353: u64 = 0;
2799 let mut x354: fiat_p384_scalar_u1 = 0;
2800 fiat_p384_scalar_addcarryx_u64(&mut x353, &mut x354, x352, (((x316 as u64) + (x282 as u64)) + ((x304 as u64) + x284)), ((x340 as u64) + x320));
2801 let mut x355: u64 = 0;
2802 let mut x356: u64 = 0;
2803 fiat_p384_scalar_mulx_u64(&mut x355, &mut x356, x5, 0xc84ee012b39bf21);
2804 let mut x357: u64 = 0;
2805 let mut x358: u64 = 0;
2806 fiat_p384_scalar_mulx_u64(&mut x357, &mut x358, x5, 0x3fb05b7a28266895);
2807 let mut x359: u64 = 0;
2808 let mut x360: u64 = 0;
2809 fiat_p384_scalar_mulx_u64(&mut x359, &mut x360, x5, 0xd40d49174aab1cc5);
2810 let mut x361: u64 = 0;
2811 let mut x362: u64 = 0;
2812 fiat_p384_scalar_mulx_u64(&mut x361, &mut x362, x5, 0xbc3e483afcb82947);
2813 let mut x363: u64 = 0;
2814 let mut x364: u64 = 0;
2815 fiat_p384_scalar_mulx_u64(&mut x363, &mut x364, x5, 0xff3d81e5df1aa419);
2816 let mut x365: u64 = 0;
2817 let mut x366: u64 = 0;
2818 fiat_p384_scalar_mulx_u64(&mut x365, &mut x366, x5, 0x2d319b2419b409a9);
2819 let mut x367: u64 = 0;
2820 let mut x368: fiat_p384_scalar_u1 = 0;
2821 fiat_p384_scalar_addcarryx_u64(&mut x367, &mut x368, 0x0, x366, x363);
2822 let mut x369: u64 = 0;
2823 let mut x370: fiat_p384_scalar_u1 = 0;
2824 fiat_p384_scalar_addcarryx_u64(&mut x369, &mut x370, x368, x364, x361);
2825 let mut x371: u64 = 0;
2826 let mut x372: fiat_p384_scalar_u1 = 0;
2827 fiat_p384_scalar_addcarryx_u64(&mut x371, &mut x372, x370, x362, x359);
2828 let mut x373: u64 = 0;
2829 let mut x374: fiat_p384_scalar_u1 = 0;
2830 fiat_p384_scalar_addcarryx_u64(&mut x373, &mut x374, x372, x360, x357);
2831 let mut x375: u64 = 0;
2832 let mut x376: fiat_p384_scalar_u1 = 0;
2833 fiat_p384_scalar_addcarryx_u64(&mut x375, &mut x376, x374, x358, x355);
2834 let mut x377: u64 = 0;
2835 let mut x378: fiat_p384_scalar_u1 = 0;
2836 fiat_p384_scalar_addcarryx_u64(&mut x377, &mut x378, 0x0, x343, x365);
2837 let mut x379: u64 = 0;
2838 let mut x380: fiat_p384_scalar_u1 = 0;
2839 fiat_p384_scalar_addcarryx_u64(&mut x379, &mut x380, x378, x345, x367);
2840 let mut x381: u64 = 0;
2841 let mut x382: fiat_p384_scalar_u1 = 0;
2842 fiat_p384_scalar_addcarryx_u64(&mut x381, &mut x382, x380, x347, x369);
2843 let mut x383: u64 = 0;
2844 let mut x384: fiat_p384_scalar_u1 = 0;
2845 fiat_p384_scalar_addcarryx_u64(&mut x383, &mut x384, x382, x349, x371);
2846 let mut x385: u64 = 0;
2847 let mut x386: fiat_p384_scalar_u1 = 0;
2848 fiat_p384_scalar_addcarryx_u64(&mut x385, &mut x386, x384, x351, x373);
2849 let mut x387: u64 = 0;
2850 let mut x388: fiat_p384_scalar_u1 = 0;
2851 fiat_p384_scalar_addcarryx_u64(&mut x387, &mut x388, x386, x353, x375);
2852 let mut x389: u64 = 0;
2853 let mut x390: u64 = 0;
2854 fiat_p384_scalar_mulx_u64(&mut x389, &mut x390, x377, 0x6ed46089e88fdc45);
2855 let mut x391: u64 = 0;
2856 let mut x392: u64 = 0;
2857 fiat_p384_scalar_mulx_u64(&mut x391, &mut x392, x389, 0xffffffffffffffff);
2858 let mut x393: u64 = 0;
2859 let mut x394: u64 = 0;
2860 fiat_p384_scalar_mulx_u64(&mut x393, &mut x394, x389, 0xffffffffffffffff);
2861 let mut x395: u64 = 0;
2862 let mut x396: u64 = 0;
2863 fiat_p384_scalar_mulx_u64(&mut x395, &mut x396, x389, 0xffffffffffffffff);
2864 let mut x397: u64 = 0;
2865 let mut x398: u64 = 0;
2866 fiat_p384_scalar_mulx_u64(&mut x397, &mut x398, x389, 0xc7634d81f4372ddf);
2867 let mut x399: u64 = 0;
2868 let mut x400: u64 = 0;
2869 fiat_p384_scalar_mulx_u64(&mut x399, &mut x400, x389, 0x581a0db248b0a77a);
2870 let mut x401: u64 = 0;
2871 let mut x402: u64 = 0;
2872 fiat_p384_scalar_mulx_u64(&mut x401, &mut x402, x389, 0xecec196accc52973);
2873 let mut x403: u64 = 0;
2874 let mut x404: fiat_p384_scalar_u1 = 0;
2875 fiat_p384_scalar_addcarryx_u64(&mut x403, &mut x404, 0x0, x402, x399);
2876 let mut x405: u64 = 0;
2877 let mut x406: fiat_p384_scalar_u1 = 0;
2878 fiat_p384_scalar_addcarryx_u64(&mut x405, &mut x406, x404, x400, x397);
2879 let mut x407: u64 = 0;
2880 let mut x408: fiat_p384_scalar_u1 = 0;
2881 fiat_p384_scalar_addcarryx_u64(&mut x407, &mut x408, x406, x398, x395);
2882 let mut x409: u64 = 0;
2883 let mut x410: fiat_p384_scalar_u1 = 0;
2884 fiat_p384_scalar_addcarryx_u64(&mut x409, &mut x410, x408, x396, x393);
2885 let mut x411: u64 = 0;
2886 let mut x412: fiat_p384_scalar_u1 = 0;
2887 fiat_p384_scalar_addcarryx_u64(&mut x411, &mut x412, x410, x394, x391);
2888 let mut x413: u64 = 0;
2889 let mut x414: fiat_p384_scalar_u1 = 0;
2890 fiat_p384_scalar_addcarryx_u64(&mut x413, &mut x414, 0x0, x377, x401);
2891 let mut x415: u64 = 0;
2892 let mut x416: fiat_p384_scalar_u1 = 0;
2893 fiat_p384_scalar_addcarryx_u64(&mut x415, &mut x416, x414, x379, x403);
2894 let mut x417: u64 = 0;
2895 let mut x418: fiat_p384_scalar_u1 = 0;
2896 fiat_p384_scalar_addcarryx_u64(&mut x417, &mut x418, x416, x381, x405);
2897 let mut x419: u64 = 0;
2898 let mut x420: fiat_p384_scalar_u1 = 0;
2899 fiat_p384_scalar_addcarryx_u64(&mut x419, &mut x420, x418, x383, x407);
2900 let mut x421: u64 = 0;
2901 let mut x422: fiat_p384_scalar_u1 = 0;
2902 fiat_p384_scalar_addcarryx_u64(&mut x421, &mut x422, x420, x385, x409);
2903 let mut x423: u64 = 0;
2904 let mut x424: fiat_p384_scalar_u1 = 0;
2905 fiat_p384_scalar_addcarryx_u64(&mut x423, &mut x424, x422, x387, x411);
2906 let mut x425: u64 = 0;
2907 let mut x426: fiat_p384_scalar_u1 = 0;
2908 fiat_p384_scalar_addcarryx_u64(&mut x425, &mut x426, x424, (((x388 as u64) + (x354 as u64)) + ((x376 as u64) + x356)), ((x412 as u64) + x392));
2909 let mut x427: u64 = 0;
2910 let mut x428: fiat_p384_scalar_u1 = 0;
2911 fiat_p384_scalar_subborrowx_u64(&mut x427, &mut x428, 0x0, x415, 0xecec196accc52973);
2912 let mut x429: u64 = 0;
2913 let mut x430: fiat_p384_scalar_u1 = 0;
2914 fiat_p384_scalar_subborrowx_u64(&mut x429, &mut x430, x428, x417, 0x581a0db248b0a77a);
2915 let mut x431: u64 = 0;
2916 let mut x432: fiat_p384_scalar_u1 = 0;
2917 fiat_p384_scalar_subborrowx_u64(&mut x431, &mut x432, x430, x419, 0xc7634d81f4372ddf);
2918 let mut x433: u64 = 0;
2919 let mut x434: fiat_p384_scalar_u1 = 0;
2920 fiat_p384_scalar_subborrowx_u64(&mut x433, &mut x434, x432, x421, 0xffffffffffffffff);
2921 let mut x435: u64 = 0;
2922 let mut x436: fiat_p384_scalar_u1 = 0;
2923 fiat_p384_scalar_subborrowx_u64(&mut x435, &mut x436, x434, x423, 0xffffffffffffffff);
2924 let mut x437: u64 = 0;
2925 let mut x438: fiat_p384_scalar_u1 = 0;
2926 fiat_p384_scalar_subborrowx_u64(&mut x437, &mut x438, x436, x425, 0xffffffffffffffff);
2927 let mut x439: u64 = 0;
2928 let mut x440: fiat_p384_scalar_u1 = 0;
2929 fiat_p384_scalar_subborrowx_u64(&mut x439, &mut x440, x438, (x426 as u64), (0x0 as u64));
2930 let mut x441: u64 = 0;
2931 fiat_p384_scalar_cmovznz_u64(&mut x441, x440, x427, x415);
2932 let mut x442: u64 = 0;
2933 fiat_p384_scalar_cmovznz_u64(&mut x442, x440, x429, x417);
2934 let mut x443: u64 = 0;
2935 fiat_p384_scalar_cmovznz_u64(&mut x443, x440, x431, x419);
2936 let mut x444: u64 = 0;
2937 fiat_p384_scalar_cmovznz_u64(&mut x444, x440, x433, x421);
2938 let mut x445: u64 = 0;
2939 fiat_p384_scalar_cmovznz_u64(&mut x445, x440, x435, x423);
2940 let mut x446: u64 = 0;
2941 fiat_p384_scalar_cmovznz_u64(&mut x446, x440, x437, x425);
2942 out1[0] = x441;
2943 out1[1] = x442;
2944 out1[2] = x443;
2945 out1[3] = x444;
2946 out1[4] = x445;
2947 out1[5] = x446;
2948}
2949
2950/// The function fiat_p384_scalar_nonzero outputs a single non-zero word if the input is non-zero and zero otherwise.
2951///
2952/// Preconditions:
2953/// 0 ≤ eval arg1 < m
2954/// Postconditions:
2955/// out1 = 0 ↔ eval (from_montgomery arg1) mod m = 0
2956///
2957/// Input Bounds:
2958/// arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
2959/// Output Bounds:
2960/// out1: [0x0 ~> 0xffffffffffffffff]
2961#[inline]
4b012472 2962pub fn fiat_p384_scalar_nonzero(out1: &mut u64, arg1: &[u64; 6]) {
0a29b90c
FG
2963 let x1: u64 = ((arg1[0]) | ((arg1[1]) | ((arg1[2]) | ((arg1[3]) | ((arg1[4]) | (arg1[5]))))));
2964 *out1 = x1;
2965}
2966
2967/// The function fiat_p384_scalar_selectznz is a multi-limb conditional select.
2968///
2969/// Postconditions:
2970/// out1 = (if arg1 = 0 then arg2 else arg3)
2971///
2972/// Input Bounds:
2973/// arg1: [0x0 ~> 0x1]
2974/// arg2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
2975/// arg3: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
2976/// Output Bounds:
2977/// out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
2978#[inline]
4b012472 2979pub fn fiat_p384_scalar_selectznz(out1: &mut [u64; 6], arg1: fiat_p384_scalar_u1, arg2: &[u64; 6], arg3: &[u64; 6]) {
0a29b90c
FG
2980 let mut x1: u64 = 0;
2981 fiat_p384_scalar_cmovznz_u64(&mut x1, arg1, (arg2[0]), (arg3[0]));
2982 let mut x2: u64 = 0;
2983 fiat_p384_scalar_cmovznz_u64(&mut x2, arg1, (arg2[1]), (arg3[1]));
2984 let mut x3: u64 = 0;
2985 fiat_p384_scalar_cmovznz_u64(&mut x3, arg1, (arg2[2]), (arg3[2]));
2986 let mut x4: u64 = 0;
2987 fiat_p384_scalar_cmovznz_u64(&mut x4, arg1, (arg2[3]), (arg3[3]));
2988 let mut x5: u64 = 0;
2989 fiat_p384_scalar_cmovznz_u64(&mut x5, arg1, (arg2[4]), (arg3[4]));
2990 let mut x6: u64 = 0;
2991 fiat_p384_scalar_cmovznz_u64(&mut x6, arg1, (arg2[5]), (arg3[5]));
2992 out1[0] = x1;
2993 out1[1] = x2;
2994 out1[2] = x3;
2995 out1[3] = x4;
2996 out1[4] = x5;
2997 out1[5] = x6;
2998}
2999
3000/// The function fiat_p384_scalar_to_bytes serializes a field element NOT in the Montgomery domain to bytes in little-endian order.
3001///
3002/// Preconditions:
3003/// 0 ≤ eval arg1 < m
3004/// Postconditions:
3005/// out1 = map (λ x, ⌊((eval arg1 mod m) mod 2^(8 * (x + 1))) / 2^(8 * x)⌋) [0..47]
3006///
3007/// Input Bounds:
3008/// arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3009/// Output Bounds:
3010/// out1: [[0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff]]
3011#[inline]
4b012472 3012pub fn fiat_p384_scalar_to_bytes(out1: &mut [u8; 48], arg1: &[u64; 6]) {
0a29b90c
FG
3013 let x1: u64 = (arg1[5]);
3014 let x2: u64 = (arg1[4]);
3015 let x3: u64 = (arg1[3]);
3016 let x4: u64 = (arg1[2]);
3017 let x5: u64 = (arg1[1]);
3018 let x6: u64 = (arg1[0]);
3019 let x7: u8 = ((x6 & (0xff as u64)) as u8);
3020 let x8: u64 = (x6 >> 8);
3021 let x9: u8 = ((x8 & (0xff as u64)) as u8);
3022 let x10: u64 = (x8 >> 8);
3023 let x11: u8 = ((x10 & (0xff as u64)) as u8);
3024 let x12: u64 = (x10 >> 8);
3025 let x13: u8 = ((x12 & (0xff as u64)) as u8);
3026 let x14: u64 = (x12 >> 8);
3027 let x15: u8 = ((x14 & (0xff as u64)) as u8);
3028 let x16: u64 = (x14 >> 8);
3029 let x17: u8 = ((x16 & (0xff as u64)) as u8);
3030 let x18: u64 = (x16 >> 8);
3031 let x19: u8 = ((x18 & (0xff as u64)) as u8);
3032 let x20: u8 = ((x18 >> 8) as u8);
3033 let x21: u8 = ((x5 & (0xff as u64)) as u8);
3034 let x22: u64 = (x5 >> 8);
3035 let x23: u8 = ((x22 & (0xff as u64)) as u8);
3036 let x24: u64 = (x22 >> 8);
3037 let x25: u8 = ((x24 & (0xff as u64)) as u8);
3038 let x26: u64 = (x24 >> 8);
3039 let x27: u8 = ((x26 & (0xff as u64)) as u8);
3040 let x28: u64 = (x26 >> 8);
3041 let x29: u8 = ((x28 & (0xff as u64)) as u8);
3042 let x30: u64 = (x28 >> 8);
3043 let x31: u8 = ((x30 & (0xff as u64)) as u8);
3044 let x32: u64 = (x30 >> 8);
3045 let x33: u8 = ((x32 & (0xff as u64)) as u8);
3046 let x34: u8 = ((x32 >> 8) as u8);
3047 let x35: u8 = ((x4 & (0xff as u64)) as u8);
3048 let x36: u64 = (x4 >> 8);
3049 let x37: u8 = ((x36 & (0xff as u64)) as u8);
3050 let x38: u64 = (x36 >> 8);
3051 let x39: u8 = ((x38 & (0xff as u64)) as u8);
3052 let x40: u64 = (x38 >> 8);
3053 let x41: u8 = ((x40 & (0xff as u64)) as u8);
3054 let x42: u64 = (x40 >> 8);
3055 let x43: u8 = ((x42 & (0xff as u64)) as u8);
3056 let x44: u64 = (x42 >> 8);
3057 let x45: u8 = ((x44 & (0xff as u64)) as u8);
3058 let x46: u64 = (x44 >> 8);
3059 let x47: u8 = ((x46 & (0xff as u64)) as u8);
3060 let x48: u8 = ((x46 >> 8) as u8);
3061 let x49: u8 = ((x3 & (0xff as u64)) as u8);
3062 let x50: u64 = (x3 >> 8);
3063 let x51: u8 = ((x50 & (0xff as u64)) as u8);
3064 let x52: u64 = (x50 >> 8);
3065 let x53: u8 = ((x52 & (0xff as u64)) as u8);
3066 let x54: u64 = (x52 >> 8);
3067 let x55: u8 = ((x54 & (0xff as u64)) as u8);
3068 let x56: u64 = (x54 >> 8);
3069 let x57: u8 = ((x56 & (0xff as u64)) as u8);
3070 let x58: u64 = (x56 >> 8);
3071 let x59: u8 = ((x58 & (0xff as u64)) as u8);
3072 let x60: u64 = (x58 >> 8);
3073 let x61: u8 = ((x60 & (0xff as u64)) as u8);
3074 let x62: u8 = ((x60 >> 8) as u8);
3075 let x63: u8 = ((x2 & (0xff as u64)) as u8);
3076 let x64: u64 = (x2 >> 8);
3077 let x65: u8 = ((x64 & (0xff as u64)) as u8);
3078 let x66: u64 = (x64 >> 8);
3079 let x67: u8 = ((x66 & (0xff as u64)) as u8);
3080 let x68: u64 = (x66 >> 8);
3081 let x69: u8 = ((x68 & (0xff as u64)) as u8);
3082 let x70: u64 = (x68 >> 8);
3083 let x71: u8 = ((x70 & (0xff as u64)) as u8);
3084 let x72: u64 = (x70 >> 8);
3085 let x73: u8 = ((x72 & (0xff as u64)) as u8);
3086 let x74: u64 = (x72 >> 8);
3087 let x75: u8 = ((x74 & (0xff as u64)) as u8);
3088 let x76: u8 = ((x74 >> 8) as u8);
3089 let x77: u8 = ((x1 & (0xff as u64)) as u8);
3090 let x78: u64 = (x1 >> 8);
3091 let x79: u8 = ((x78 & (0xff as u64)) as u8);
3092 let x80: u64 = (x78 >> 8);
3093 let x81: u8 = ((x80 & (0xff as u64)) as u8);
3094 let x82: u64 = (x80 >> 8);
3095 let x83: u8 = ((x82 & (0xff as u64)) as u8);
3096 let x84: u64 = (x82 >> 8);
3097 let x85: u8 = ((x84 & (0xff as u64)) as u8);
3098 let x86: u64 = (x84 >> 8);
3099 let x87: u8 = ((x86 & (0xff as u64)) as u8);
3100 let x88: u64 = (x86 >> 8);
3101 let x89: u8 = ((x88 & (0xff as u64)) as u8);
3102 let x90: u8 = ((x88 >> 8) as u8);
3103 out1[0] = x7;
3104 out1[1] = x9;
3105 out1[2] = x11;
3106 out1[3] = x13;
3107 out1[4] = x15;
3108 out1[5] = x17;
3109 out1[6] = x19;
3110 out1[7] = x20;
3111 out1[8] = x21;
3112 out1[9] = x23;
3113 out1[10] = x25;
3114 out1[11] = x27;
3115 out1[12] = x29;
3116 out1[13] = x31;
3117 out1[14] = x33;
3118 out1[15] = x34;
3119 out1[16] = x35;
3120 out1[17] = x37;
3121 out1[18] = x39;
3122 out1[19] = x41;
3123 out1[20] = x43;
3124 out1[21] = x45;
3125 out1[22] = x47;
3126 out1[23] = x48;
3127 out1[24] = x49;
3128 out1[25] = x51;
3129 out1[26] = x53;
3130 out1[27] = x55;
3131 out1[28] = x57;
3132 out1[29] = x59;
3133 out1[30] = x61;
3134 out1[31] = x62;
3135 out1[32] = x63;
3136 out1[33] = x65;
3137 out1[34] = x67;
3138 out1[35] = x69;
3139 out1[36] = x71;
3140 out1[37] = x73;
3141 out1[38] = x75;
3142 out1[39] = x76;
3143 out1[40] = x77;
3144 out1[41] = x79;
3145 out1[42] = x81;
3146 out1[43] = x83;
3147 out1[44] = x85;
3148 out1[45] = x87;
3149 out1[46] = x89;
3150 out1[47] = x90;
3151}
3152
3153/// The function fiat_p384_scalar_from_bytes deserializes a field element NOT in the Montgomery domain from bytes in little-endian order.
3154///
3155/// Preconditions:
3156/// 0 ≤ bytes_eval arg1 < m
3157/// Postconditions:
3158/// eval out1 mod m = bytes_eval arg1 mod m
3159/// 0 ≤ eval out1 < m
3160///
3161/// Input Bounds:
3162/// arg1: [[0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff]]
3163/// Output Bounds:
3164/// out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3165#[inline]
4b012472 3166pub fn fiat_p384_scalar_from_bytes(out1: &mut [u64; 6], arg1: &[u8; 48]) {
0a29b90c
FG
3167 let x1: u64 = (((arg1[47]) as u64) << 56);
3168 let x2: u64 = (((arg1[46]) as u64) << 48);
3169 let x3: u64 = (((arg1[45]) as u64) << 40);
3170 let x4: u64 = (((arg1[44]) as u64) << 32);
3171 let x5: u64 = (((arg1[43]) as u64) << 24);
3172 let x6: u64 = (((arg1[42]) as u64) << 16);
3173 let x7: u64 = (((arg1[41]) as u64) << 8);
3174 let x8: u8 = (arg1[40]);
3175 let x9: u64 = (((arg1[39]) as u64) << 56);
3176 let x10: u64 = (((arg1[38]) as u64) << 48);
3177 let x11: u64 = (((arg1[37]) as u64) << 40);
3178 let x12: u64 = (((arg1[36]) as u64) << 32);
3179 let x13: u64 = (((arg1[35]) as u64) << 24);
3180 let x14: u64 = (((arg1[34]) as u64) << 16);
3181 let x15: u64 = (((arg1[33]) as u64) << 8);
3182 let x16: u8 = (arg1[32]);
3183 let x17: u64 = (((arg1[31]) as u64) << 56);
3184 let x18: u64 = (((arg1[30]) as u64) << 48);
3185 let x19: u64 = (((arg1[29]) as u64) << 40);
3186 let x20: u64 = (((arg1[28]) as u64) << 32);
3187 let x21: u64 = (((arg1[27]) as u64) << 24);
3188 let x22: u64 = (((arg1[26]) as u64) << 16);
3189 let x23: u64 = (((arg1[25]) as u64) << 8);
3190 let x24: u8 = (arg1[24]);
3191 let x25: u64 = (((arg1[23]) as u64) << 56);
3192 let x26: u64 = (((arg1[22]) as u64) << 48);
3193 let x27: u64 = (((arg1[21]) as u64) << 40);
3194 let x28: u64 = (((arg1[20]) as u64) << 32);
3195 let x29: u64 = (((arg1[19]) as u64) << 24);
3196 let x30: u64 = (((arg1[18]) as u64) << 16);
3197 let x31: u64 = (((arg1[17]) as u64) << 8);
3198 let x32: u8 = (arg1[16]);
3199 let x33: u64 = (((arg1[15]) as u64) << 56);
3200 let x34: u64 = (((arg1[14]) as u64) << 48);
3201 let x35: u64 = (((arg1[13]) as u64) << 40);
3202 let x36: u64 = (((arg1[12]) as u64) << 32);
3203 let x37: u64 = (((arg1[11]) as u64) << 24);
3204 let x38: u64 = (((arg1[10]) as u64) << 16);
3205 let x39: u64 = (((arg1[9]) as u64) << 8);
3206 let x40: u8 = (arg1[8]);
3207 let x41: u64 = (((arg1[7]) as u64) << 56);
3208 let x42: u64 = (((arg1[6]) as u64) << 48);
3209 let x43: u64 = (((arg1[5]) as u64) << 40);
3210 let x44: u64 = (((arg1[4]) as u64) << 32);
3211 let x45: u64 = (((arg1[3]) as u64) << 24);
3212 let x46: u64 = (((arg1[2]) as u64) << 16);
3213 let x47: u64 = (((arg1[1]) as u64) << 8);
3214 let x48: u8 = (arg1[0]);
3215 let x49: u64 = (x47 + (x48 as u64));
3216 let x50: u64 = (x46 + x49);
3217 let x51: u64 = (x45 + x50);
3218 let x52: u64 = (x44 + x51);
3219 let x53: u64 = (x43 + x52);
3220 let x54: u64 = (x42 + x53);
3221 let x55: u64 = (x41 + x54);
3222 let x56: u64 = (x39 + (x40 as u64));
3223 let x57: u64 = (x38 + x56);
3224 let x58: u64 = (x37 + x57);
3225 let x59: u64 = (x36 + x58);
3226 let x60: u64 = (x35 + x59);
3227 let x61: u64 = (x34 + x60);
3228 let x62: u64 = (x33 + x61);
3229 let x63: u64 = (x31 + (x32 as u64));
3230 let x64: u64 = (x30 + x63);
3231 let x65: u64 = (x29 + x64);
3232 let x66: u64 = (x28 + x65);
3233 let x67: u64 = (x27 + x66);
3234 let x68: u64 = (x26 + x67);
3235 let x69: u64 = (x25 + x68);
3236 let x70: u64 = (x23 + (x24 as u64));
3237 let x71: u64 = (x22 + x70);
3238 let x72: u64 = (x21 + x71);
3239 let x73: u64 = (x20 + x72);
3240 let x74: u64 = (x19 + x73);
3241 let x75: u64 = (x18 + x74);
3242 let x76: u64 = (x17 + x75);
3243 let x77: u64 = (x15 + (x16 as u64));
3244 let x78: u64 = (x14 + x77);
3245 let x79: u64 = (x13 + x78);
3246 let x80: u64 = (x12 + x79);
3247 let x81: u64 = (x11 + x80);
3248 let x82: u64 = (x10 + x81);
3249 let x83: u64 = (x9 + x82);
3250 let x84: u64 = (x7 + (x8 as u64));
3251 let x85: u64 = (x6 + x84);
3252 let x86: u64 = (x5 + x85);
3253 let x87: u64 = (x4 + x86);
3254 let x88: u64 = (x3 + x87);
3255 let x89: u64 = (x2 + x88);
3256 let x90: u64 = (x1 + x89);
3257 out1[0] = x55;
3258 out1[1] = x62;
3259 out1[2] = x69;
3260 out1[3] = x76;
3261 out1[4] = x83;
3262 out1[5] = x90;
3263}
3264
3265/// The function fiat_p384_scalar_set_one returns the field element one in the Montgomery domain.
3266///
3267/// Postconditions:
3268/// eval (from_montgomery out1) mod m = 1 mod m
3269/// 0 ≤ eval out1 < m
3270///
3271#[inline]
4b012472 3272pub fn fiat_p384_scalar_set_one(out1: &mut fiat_p384_scalar_montgomery_domain_field_element) {
0a29b90c
FG
3273 out1[0] = 0x1313e695333ad68d;
3274 out1[1] = 0xa7e5f24db74f5885;
3275 out1[2] = 0x389cb27e0bc8d220;
3276 out1[3] = (0x0 as u64);
3277 out1[4] = (0x0 as u64);
3278 out1[5] = (0x0 as u64);
3279}
3280
3281/// The function fiat_p384_scalar_msat returns the saturated representation of the prime modulus.
3282///
3283/// Postconditions:
3284/// twos_complement_eval out1 = m
3285/// 0 ≤ eval out1 < m
3286///
3287/// Output Bounds:
3288/// out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3289#[inline]
4b012472 3290pub fn fiat_p384_scalar_msat(out1: &mut [u64; 7]) {
0a29b90c
FG
3291 out1[0] = 0xecec196accc52973;
3292 out1[1] = 0x581a0db248b0a77a;
3293 out1[2] = 0xc7634d81f4372ddf;
3294 out1[3] = 0xffffffffffffffff;
3295 out1[4] = 0xffffffffffffffff;
3296 out1[5] = 0xffffffffffffffff;
3297 out1[6] = (0x0 as u64);
3298}
3299
3300/// The function fiat_p384_scalar_divstep computes a divstep.
3301///
3302/// Preconditions:
3303/// 0 ≤ eval arg4 < m
3304/// 0 ≤ eval arg5 < m
3305/// Postconditions:
3306/// out1 = (if 0 < arg1 ∧ (twos_complement_eval arg3) is odd then 1 - arg1 else 1 + arg1)
3307/// twos_complement_eval out2 = (if 0 < arg1 ∧ (twos_complement_eval arg3) is odd then twos_complement_eval arg3 else twos_complement_eval arg2)
3308/// twos_complement_eval out3 = (if 0 < arg1 ∧ (twos_complement_eval arg3) is odd then ⌊(twos_complement_eval arg3 - twos_complement_eval arg2) / 2⌋ else ⌊(twos_complement_eval arg3 + (twos_complement_eval arg3 mod 2) * twos_complement_eval arg2) / 2⌋)
3309/// eval (from_montgomery out4) mod m = (if 0 < arg1 ∧ (twos_complement_eval arg3) is odd then (2 * eval (from_montgomery arg5)) mod m else (2 * eval (from_montgomery arg4)) mod m)
3310/// eval (from_montgomery out5) mod m = (if 0 < arg1 ∧ (twos_complement_eval arg3) is odd then (eval (from_montgomery arg4) - eval (from_montgomery arg4)) mod m else (eval (from_montgomery arg5) + (twos_complement_eval arg3 mod 2) * eval (from_montgomery arg4)) mod m)
3311/// 0 ≤ eval out5 < m
3312/// 0 ≤ eval out5 < m
3313/// 0 ≤ eval out2 < m
3314/// 0 ≤ eval out3 < m
3315///
3316/// Input Bounds:
3317/// arg1: [0x0 ~> 0xffffffffffffffff]
3318/// arg2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3319/// arg3: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3320/// arg4: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3321/// arg5: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3322/// Output Bounds:
3323/// out1: [0x0 ~> 0xffffffffffffffff]
3324/// out2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3325/// out3: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3326/// out4: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3327/// out5: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3328#[inline]
4b012472 3329pub fn fiat_p384_scalar_divstep(out1: &mut u64, out2: &mut [u64; 7], out3: &mut [u64; 7], out4: &mut [u64; 6], out5: &mut [u64; 6], arg1: u64, arg2: &[u64; 7], arg3: &[u64; 7], arg4: &[u64; 6], arg5: &[u64; 6]) {
0a29b90c
FG
3330 let mut x1: u64 = 0;
3331 let mut x2: fiat_p384_scalar_u1 = 0;
3332 fiat_p384_scalar_addcarryx_u64(&mut x1, &mut x2, 0x0, (!arg1), (0x1 as u64));
3333 let x3: fiat_p384_scalar_u1 = (((x1 >> 63) as fiat_p384_scalar_u1) & (((arg3[0]) & (0x1 as u64)) as fiat_p384_scalar_u1));
3334 let mut x4: u64 = 0;
3335 let mut x5: fiat_p384_scalar_u1 = 0;
3336 fiat_p384_scalar_addcarryx_u64(&mut x4, &mut x5, 0x0, (!arg1), (0x1 as u64));
3337 let mut x6: u64 = 0;
3338 fiat_p384_scalar_cmovznz_u64(&mut x6, x3, arg1, x4);
3339 let mut x7: u64 = 0;
3340 fiat_p384_scalar_cmovznz_u64(&mut x7, x3, (arg2[0]), (arg3[0]));
3341 let mut x8: u64 = 0;
3342 fiat_p384_scalar_cmovznz_u64(&mut x8, x3, (arg2[1]), (arg3[1]));
3343 let mut x9: u64 = 0;
3344 fiat_p384_scalar_cmovznz_u64(&mut x9, x3, (arg2[2]), (arg3[2]));
3345 let mut x10: u64 = 0;
3346 fiat_p384_scalar_cmovznz_u64(&mut x10, x3, (arg2[3]), (arg3[3]));
3347 let mut x11: u64 = 0;
3348 fiat_p384_scalar_cmovznz_u64(&mut x11, x3, (arg2[4]), (arg3[4]));
3349 let mut x12: u64 = 0;
3350 fiat_p384_scalar_cmovznz_u64(&mut x12, x3, (arg2[5]), (arg3[5]));
3351 let mut x13: u64 = 0;
3352 fiat_p384_scalar_cmovznz_u64(&mut x13, x3, (arg2[6]), (arg3[6]));
3353 let mut x14: u64 = 0;
3354 let mut x15: fiat_p384_scalar_u1 = 0;
3355 fiat_p384_scalar_addcarryx_u64(&mut x14, &mut x15, 0x0, (0x1 as u64), (!(arg2[0])));
3356 let mut x16: u64 = 0;
3357 let mut x17: fiat_p384_scalar_u1 = 0;
3358 fiat_p384_scalar_addcarryx_u64(&mut x16, &mut x17, x15, (0x0 as u64), (!(arg2[1])));
3359 let mut x18: u64 = 0;
3360 let mut x19: fiat_p384_scalar_u1 = 0;
3361 fiat_p384_scalar_addcarryx_u64(&mut x18, &mut x19, x17, (0x0 as u64), (!(arg2[2])));
3362 let mut x20: u64 = 0;
3363 let mut x21: fiat_p384_scalar_u1 = 0;
3364 fiat_p384_scalar_addcarryx_u64(&mut x20, &mut x21, x19, (0x0 as u64), (!(arg2[3])));
3365 let mut x22: u64 = 0;
3366 let mut x23: fiat_p384_scalar_u1 = 0;
3367 fiat_p384_scalar_addcarryx_u64(&mut x22, &mut x23, x21, (0x0 as u64), (!(arg2[4])));
3368 let mut x24: u64 = 0;
3369 let mut x25: fiat_p384_scalar_u1 = 0;
3370 fiat_p384_scalar_addcarryx_u64(&mut x24, &mut x25, x23, (0x0 as u64), (!(arg2[5])));
3371 let mut x26: u64 = 0;
3372 let mut x27: fiat_p384_scalar_u1 = 0;
3373 fiat_p384_scalar_addcarryx_u64(&mut x26, &mut x27, x25, (0x0 as u64), (!(arg2[6])));
3374 let mut x28: u64 = 0;
3375 fiat_p384_scalar_cmovznz_u64(&mut x28, x3, (arg3[0]), x14);
3376 let mut x29: u64 = 0;
3377 fiat_p384_scalar_cmovznz_u64(&mut x29, x3, (arg3[1]), x16);
3378 let mut x30: u64 = 0;
3379 fiat_p384_scalar_cmovznz_u64(&mut x30, x3, (arg3[2]), x18);
3380 let mut x31: u64 = 0;
3381 fiat_p384_scalar_cmovznz_u64(&mut x31, x3, (arg3[3]), x20);
3382 let mut x32: u64 = 0;
3383 fiat_p384_scalar_cmovznz_u64(&mut x32, x3, (arg3[4]), x22);
3384 let mut x33: u64 = 0;
3385 fiat_p384_scalar_cmovznz_u64(&mut x33, x3, (arg3[5]), x24);
3386 let mut x34: u64 = 0;
3387 fiat_p384_scalar_cmovznz_u64(&mut x34, x3, (arg3[6]), x26);
3388 let mut x35: u64 = 0;
3389 fiat_p384_scalar_cmovznz_u64(&mut x35, x3, (arg4[0]), (arg5[0]));
3390 let mut x36: u64 = 0;
3391 fiat_p384_scalar_cmovznz_u64(&mut x36, x3, (arg4[1]), (arg5[1]));
3392 let mut x37: u64 = 0;
3393 fiat_p384_scalar_cmovznz_u64(&mut x37, x3, (arg4[2]), (arg5[2]));
3394 let mut x38: u64 = 0;
3395 fiat_p384_scalar_cmovznz_u64(&mut x38, x3, (arg4[3]), (arg5[3]));
3396 let mut x39: u64 = 0;
3397 fiat_p384_scalar_cmovznz_u64(&mut x39, x3, (arg4[4]), (arg5[4]));
3398 let mut x40: u64 = 0;
3399 fiat_p384_scalar_cmovznz_u64(&mut x40, x3, (arg4[5]), (arg5[5]));
3400 let mut x41: u64 = 0;
3401 let mut x42: fiat_p384_scalar_u1 = 0;
3402 fiat_p384_scalar_addcarryx_u64(&mut x41, &mut x42, 0x0, x35, x35);
3403 let mut x43: u64 = 0;
3404 let mut x44: fiat_p384_scalar_u1 = 0;
3405 fiat_p384_scalar_addcarryx_u64(&mut x43, &mut x44, x42, x36, x36);
3406 let mut x45: u64 = 0;
3407 let mut x46: fiat_p384_scalar_u1 = 0;
3408 fiat_p384_scalar_addcarryx_u64(&mut x45, &mut x46, x44, x37, x37);
3409 let mut x47: u64 = 0;
3410 let mut x48: fiat_p384_scalar_u1 = 0;
3411 fiat_p384_scalar_addcarryx_u64(&mut x47, &mut x48, x46, x38, x38);
3412 let mut x49: u64 = 0;
3413 let mut x50: fiat_p384_scalar_u1 = 0;
3414 fiat_p384_scalar_addcarryx_u64(&mut x49, &mut x50, x48, x39, x39);
3415 let mut x51: u64 = 0;
3416 let mut x52: fiat_p384_scalar_u1 = 0;
3417 fiat_p384_scalar_addcarryx_u64(&mut x51, &mut x52, x50, x40, x40);
3418 let mut x53: u64 = 0;
3419 let mut x54: fiat_p384_scalar_u1 = 0;
3420 fiat_p384_scalar_subborrowx_u64(&mut x53, &mut x54, 0x0, x41, 0xecec196accc52973);
3421 let mut x55: u64 = 0;
3422 let mut x56: fiat_p384_scalar_u1 = 0;
3423 fiat_p384_scalar_subborrowx_u64(&mut x55, &mut x56, x54, x43, 0x581a0db248b0a77a);
3424 let mut x57: u64 = 0;
3425 let mut x58: fiat_p384_scalar_u1 = 0;
3426 fiat_p384_scalar_subborrowx_u64(&mut x57, &mut x58, x56, x45, 0xc7634d81f4372ddf);
3427 let mut x59: u64 = 0;
3428 let mut x60: fiat_p384_scalar_u1 = 0;
3429 fiat_p384_scalar_subborrowx_u64(&mut x59, &mut x60, x58, x47, 0xffffffffffffffff);
3430 let mut x61: u64 = 0;
3431 let mut x62: fiat_p384_scalar_u1 = 0;
3432 fiat_p384_scalar_subborrowx_u64(&mut x61, &mut x62, x60, x49, 0xffffffffffffffff);
3433 let mut x63: u64 = 0;
3434 let mut x64: fiat_p384_scalar_u1 = 0;
3435 fiat_p384_scalar_subborrowx_u64(&mut x63, &mut x64, x62, x51, 0xffffffffffffffff);
3436 let mut x65: u64 = 0;
3437 let mut x66: fiat_p384_scalar_u1 = 0;
3438 fiat_p384_scalar_subborrowx_u64(&mut x65, &mut x66, x64, (x52 as u64), (0x0 as u64));
3439 let x67: u64 = (arg4[5]);
3440 let x68: u64 = (arg4[4]);
3441 let x69: u64 = (arg4[3]);
3442 let x70: u64 = (arg4[2]);
3443 let x71: u64 = (arg4[1]);
3444 let x72: u64 = (arg4[0]);
3445 let mut x73: u64 = 0;
3446 let mut x74: fiat_p384_scalar_u1 = 0;
3447 fiat_p384_scalar_subborrowx_u64(&mut x73, &mut x74, 0x0, (0x0 as u64), x72);
3448 let mut x75: u64 = 0;
3449 let mut x76: fiat_p384_scalar_u1 = 0;
3450 fiat_p384_scalar_subborrowx_u64(&mut x75, &mut x76, x74, (0x0 as u64), x71);
3451 let mut x77: u64 = 0;
3452 let mut x78: fiat_p384_scalar_u1 = 0;
3453 fiat_p384_scalar_subborrowx_u64(&mut x77, &mut x78, x76, (0x0 as u64), x70);
3454 let mut x79: u64 = 0;
3455 let mut x80: fiat_p384_scalar_u1 = 0;
3456 fiat_p384_scalar_subborrowx_u64(&mut x79, &mut x80, x78, (0x0 as u64), x69);
3457 let mut x81: u64 = 0;
3458 let mut x82: fiat_p384_scalar_u1 = 0;
3459 fiat_p384_scalar_subborrowx_u64(&mut x81, &mut x82, x80, (0x0 as u64), x68);
3460 let mut x83: u64 = 0;
3461 let mut x84: fiat_p384_scalar_u1 = 0;
3462 fiat_p384_scalar_subborrowx_u64(&mut x83, &mut x84, x82, (0x0 as u64), x67);
3463 let mut x85: u64 = 0;
3464 fiat_p384_scalar_cmovznz_u64(&mut x85, x84, (0x0 as u64), 0xffffffffffffffff);
3465 let mut x86: u64 = 0;
3466 let mut x87: fiat_p384_scalar_u1 = 0;
3467 fiat_p384_scalar_addcarryx_u64(&mut x86, &mut x87, 0x0, x73, (x85 & 0xecec196accc52973));
3468 let mut x88: u64 = 0;
3469 let mut x89: fiat_p384_scalar_u1 = 0;
3470 fiat_p384_scalar_addcarryx_u64(&mut x88, &mut x89, x87, x75, (x85 & 0x581a0db248b0a77a));
3471 let mut x90: u64 = 0;
3472 let mut x91: fiat_p384_scalar_u1 = 0;
3473 fiat_p384_scalar_addcarryx_u64(&mut x90, &mut x91, x89, x77, (x85 & 0xc7634d81f4372ddf));
3474 let mut x92: u64 = 0;
3475 let mut x93: fiat_p384_scalar_u1 = 0;
3476 fiat_p384_scalar_addcarryx_u64(&mut x92, &mut x93, x91, x79, x85);
3477 let mut x94: u64 = 0;
3478 let mut x95: fiat_p384_scalar_u1 = 0;
3479 fiat_p384_scalar_addcarryx_u64(&mut x94, &mut x95, x93, x81, x85);
3480 let mut x96: u64 = 0;
3481 let mut x97: fiat_p384_scalar_u1 = 0;
3482 fiat_p384_scalar_addcarryx_u64(&mut x96, &mut x97, x95, x83, x85);
3483 let mut x98: u64 = 0;
3484 fiat_p384_scalar_cmovznz_u64(&mut x98, x3, (arg5[0]), x86);
3485 let mut x99: u64 = 0;
3486 fiat_p384_scalar_cmovznz_u64(&mut x99, x3, (arg5[1]), x88);
3487 let mut x100: u64 = 0;
3488 fiat_p384_scalar_cmovznz_u64(&mut x100, x3, (arg5[2]), x90);
3489 let mut x101: u64 = 0;
3490 fiat_p384_scalar_cmovznz_u64(&mut x101, x3, (arg5[3]), x92);
3491 let mut x102: u64 = 0;
3492 fiat_p384_scalar_cmovznz_u64(&mut x102, x3, (arg5[4]), x94);
3493 let mut x103: u64 = 0;
3494 fiat_p384_scalar_cmovznz_u64(&mut x103, x3, (arg5[5]), x96);
3495 let x104: fiat_p384_scalar_u1 = ((x28 & (0x1 as u64)) as fiat_p384_scalar_u1);
3496 let mut x105: u64 = 0;
3497 fiat_p384_scalar_cmovznz_u64(&mut x105, x104, (0x0 as u64), x7);
3498 let mut x106: u64 = 0;
3499 fiat_p384_scalar_cmovznz_u64(&mut x106, x104, (0x0 as u64), x8);
3500 let mut x107: u64 = 0;
3501 fiat_p384_scalar_cmovznz_u64(&mut x107, x104, (0x0 as u64), x9);
3502 let mut x108: u64 = 0;
3503 fiat_p384_scalar_cmovznz_u64(&mut x108, x104, (0x0 as u64), x10);
3504 let mut x109: u64 = 0;
3505 fiat_p384_scalar_cmovznz_u64(&mut x109, x104, (0x0 as u64), x11);
3506 let mut x110: u64 = 0;
3507 fiat_p384_scalar_cmovznz_u64(&mut x110, x104, (0x0 as u64), x12);
3508 let mut x111: u64 = 0;
3509 fiat_p384_scalar_cmovznz_u64(&mut x111, x104, (0x0 as u64), x13);
3510 let mut x112: u64 = 0;
3511 let mut x113: fiat_p384_scalar_u1 = 0;
3512 fiat_p384_scalar_addcarryx_u64(&mut x112, &mut x113, 0x0, x28, x105);
3513 let mut x114: u64 = 0;
3514 let mut x115: fiat_p384_scalar_u1 = 0;
3515 fiat_p384_scalar_addcarryx_u64(&mut x114, &mut x115, x113, x29, x106);
3516 let mut x116: u64 = 0;
3517 let mut x117: fiat_p384_scalar_u1 = 0;
3518 fiat_p384_scalar_addcarryx_u64(&mut x116, &mut x117, x115, x30, x107);
3519 let mut x118: u64 = 0;
3520 let mut x119: fiat_p384_scalar_u1 = 0;
3521 fiat_p384_scalar_addcarryx_u64(&mut x118, &mut x119, x117, x31, x108);
3522 let mut x120: u64 = 0;
3523 let mut x121: fiat_p384_scalar_u1 = 0;
3524 fiat_p384_scalar_addcarryx_u64(&mut x120, &mut x121, x119, x32, x109);
3525 let mut x122: u64 = 0;
3526 let mut x123: fiat_p384_scalar_u1 = 0;
3527 fiat_p384_scalar_addcarryx_u64(&mut x122, &mut x123, x121, x33, x110);
3528 let mut x124: u64 = 0;
3529 let mut x125: fiat_p384_scalar_u1 = 0;
3530 fiat_p384_scalar_addcarryx_u64(&mut x124, &mut x125, x123, x34, x111);
3531 let mut x126: u64 = 0;
3532 fiat_p384_scalar_cmovznz_u64(&mut x126, x104, (0x0 as u64), x35);
3533 let mut x127: u64 = 0;
3534 fiat_p384_scalar_cmovznz_u64(&mut x127, x104, (0x0 as u64), x36);
3535 let mut x128: u64 = 0;
3536 fiat_p384_scalar_cmovznz_u64(&mut x128, x104, (0x0 as u64), x37);
3537 let mut x129: u64 = 0;
3538 fiat_p384_scalar_cmovznz_u64(&mut x129, x104, (0x0 as u64), x38);
3539 let mut x130: u64 = 0;
3540 fiat_p384_scalar_cmovznz_u64(&mut x130, x104, (0x0 as u64), x39);
3541 let mut x131: u64 = 0;
3542 fiat_p384_scalar_cmovznz_u64(&mut x131, x104, (0x0 as u64), x40);
3543 let mut x132: u64 = 0;
3544 let mut x133: fiat_p384_scalar_u1 = 0;
3545 fiat_p384_scalar_addcarryx_u64(&mut x132, &mut x133, 0x0, x98, x126);
3546 let mut x134: u64 = 0;
3547 let mut x135: fiat_p384_scalar_u1 = 0;
3548 fiat_p384_scalar_addcarryx_u64(&mut x134, &mut x135, x133, x99, x127);
3549 let mut x136: u64 = 0;
3550 let mut x137: fiat_p384_scalar_u1 = 0;
3551 fiat_p384_scalar_addcarryx_u64(&mut x136, &mut x137, x135, x100, x128);
3552 let mut x138: u64 = 0;
3553 let mut x139: fiat_p384_scalar_u1 = 0;
3554 fiat_p384_scalar_addcarryx_u64(&mut x138, &mut x139, x137, x101, x129);
3555 let mut x140: u64 = 0;
3556 let mut x141: fiat_p384_scalar_u1 = 0;
3557 fiat_p384_scalar_addcarryx_u64(&mut x140, &mut x141, x139, x102, x130);
3558 let mut x142: u64 = 0;
3559 let mut x143: fiat_p384_scalar_u1 = 0;
3560 fiat_p384_scalar_addcarryx_u64(&mut x142, &mut x143, x141, x103, x131);
3561 let mut x144: u64 = 0;
3562 let mut x145: fiat_p384_scalar_u1 = 0;
3563 fiat_p384_scalar_subborrowx_u64(&mut x144, &mut x145, 0x0, x132, 0xecec196accc52973);
3564 let mut x146: u64 = 0;
3565 let mut x147: fiat_p384_scalar_u1 = 0;
3566 fiat_p384_scalar_subborrowx_u64(&mut x146, &mut x147, x145, x134, 0x581a0db248b0a77a);
3567 let mut x148: u64 = 0;
3568 let mut x149: fiat_p384_scalar_u1 = 0;
3569 fiat_p384_scalar_subborrowx_u64(&mut x148, &mut x149, x147, x136, 0xc7634d81f4372ddf);
3570 let mut x150: u64 = 0;
3571 let mut x151: fiat_p384_scalar_u1 = 0;
3572 fiat_p384_scalar_subborrowx_u64(&mut x150, &mut x151, x149, x138, 0xffffffffffffffff);
3573 let mut x152: u64 = 0;
3574 let mut x153: fiat_p384_scalar_u1 = 0;
3575 fiat_p384_scalar_subborrowx_u64(&mut x152, &mut x153, x151, x140, 0xffffffffffffffff);
3576 let mut x154: u64 = 0;
3577 let mut x155: fiat_p384_scalar_u1 = 0;
3578 fiat_p384_scalar_subborrowx_u64(&mut x154, &mut x155, x153, x142, 0xffffffffffffffff);
3579 let mut x156: u64 = 0;
3580 let mut x157: fiat_p384_scalar_u1 = 0;
3581 fiat_p384_scalar_subborrowx_u64(&mut x156, &mut x157, x155, (x143 as u64), (0x0 as u64));
3582 let mut x158: u64 = 0;
3583 let mut x159: fiat_p384_scalar_u1 = 0;
3584 fiat_p384_scalar_addcarryx_u64(&mut x158, &mut x159, 0x0, x6, (0x1 as u64));
3585 let x160: u64 = ((x112 >> 1) | ((x114 << 63) & 0xffffffffffffffff));
3586 let x161: u64 = ((x114 >> 1) | ((x116 << 63) & 0xffffffffffffffff));
3587 let x162: u64 = ((x116 >> 1) | ((x118 << 63) & 0xffffffffffffffff));
3588 let x163: u64 = ((x118 >> 1) | ((x120 << 63) & 0xffffffffffffffff));
3589 let x164: u64 = ((x120 >> 1) | ((x122 << 63) & 0xffffffffffffffff));
3590 let x165: u64 = ((x122 >> 1) | ((x124 << 63) & 0xffffffffffffffff));
3591 let x166: u64 = ((x124 & 0x8000000000000000) | (x124 >> 1));
3592 let mut x167: u64 = 0;
3593 fiat_p384_scalar_cmovznz_u64(&mut x167, x66, x53, x41);
3594 let mut x168: u64 = 0;
3595 fiat_p384_scalar_cmovznz_u64(&mut x168, x66, x55, x43);
3596 let mut x169: u64 = 0;
3597 fiat_p384_scalar_cmovznz_u64(&mut x169, x66, x57, x45);
3598 let mut x170: u64 = 0;
3599 fiat_p384_scalar_cmovznz_u64(&mut x170, x66, x59, x47);
3600 let mut x171: u64 = 0;
3601 fiat_p384_scalar_cmovznz_u64(&mut x171, x66, x61, x49);
3602 let mut x172: u64 = 0;
3603 fiat_p384_scalar_cmovznz_u64(&mut x172, x66, x63, x51);
3604 let mut x173: u64 = 0;
3605 fiat_p384_scalar_cmovznz_u64(&mut x173, x157, x144, x132);
3606 let mut x174: u64 = 0;
3607 fiat_p384_scalar_cmovznz_u64(&mut x174, x157, x146, x134);
3608 let mut x175: u64 = 0;
3609 fiat_p384_scalar_cmovznz_u64(&mut x175, x157, x148, x136);
3610 let mut x176: u64 = 0;
3611 fiat_p384_scalar_cmovznz_u64(&mut x176, x157, x150, x138);
3612 let mut x177: u64 = 0;
3613 fiat_p384_scalar_cmovznz_u64(&mut x177, x157, x152, x140);
3614 let mut x178: u64 = 0;
3615 fiat_p384_scalar_cmovznz_u64(&mut x178, x157, x154, x142);
3616 *out1 = x158;
3617 out2[0] = x7;
3618 out2[1] = x8;
3619 out2[2] = x9;
3620 out2[3] = x10;
3621 out2[4] = x11;
3622 out2[5] = x12;
3623 out2[6] = x13;
3624 out3[0] = x160;
3625 out3[1] = x161;
3626 out3[2] = x162;
3627 out3[3] = x163;
3628 out3[4] = x164;
3629 out3[5] = x165;
3630 out3[6] = x166;
3631 out4[0] = x167;
3632 out4[1] = x168;
3633 out4[2] = x169;
3634 out4[3] = x170;
3635 out4[4] = x171;
3636 out4[5] = x172;
3637 out5[0] = x173;
3638 out5[1] = x174;
3639 out5[2] = x175;
3640 out5[3] = x176;
3641 out5[4] = x177;
3642 out5[5] = x178;
3643}
3644
3645/// The function fiat_p384_scalar_divstep_precomp returns the precomputed value for Bernstein-Yang-inversion (in montgomery form).
3646///
3647/// Postconditions:
3648/// eval (from_montgomery out1) = ⌊(m - 1) / 2⌋^(if ⌊log2 m⌋ + 1 < 46 then ⌊(49 * (⌊log2 m⌋ + 1) + 80) / 17⌋ else ⌊(49 * (⌊log2 m⌋ + 1) + 57) / 17⌋)
3649/// 0 ≤ eval out1 < m
3650///
3651/// Output Bounds:
3652/// out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3653#[inline]
4b012472 3654pub fn fiat_p384_scalar_divstep_precomp(out1: &mut [u64; 6]) {
0a29b90c
FG
3655 out1[0] = 0x49589ae0e6045b6a;
3656 out1[1] = 0x3c9a5352870040ed;
3657 out1[2] = 0xdacb097e977dc242;
3658 out1[3] = 0xb5ab30a6d1ecbe36;
3659 out1[4] = 0x97d7a1081f959973;
3660 out1[5] = 0x2ba012f8d27192bc;
3661}