1#![doc = " fiat-crypto output postprocessed by fiat-constify: https://github.com/rustcrypto/utils"]
2#![doc = " Autogenerated: './word_by_word_montgomery' --lang Rust --inline p384_scalar"]
3#![doc = " 64 39402006196394479212279040100143613805079739270465446667946905279627659399113263569398956308152294913554433653942643"]
4#![doc = " curve description: p384_scalar"]
5#![doc = " machine_wordsize = 64 (from \"64\")"]
6#![doc = " requested operations: (all)"]
7#![doc = " m = 0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973 (from \"39402006196394479212279040100143613805079739270465446667946905279627659399113263569398956308152294913554433653942643\")"]
8#![doc = ""]
9#![doc = " NOTE: In addition to the bounds specified above each function, all"]
10#![doc = " functions synthesized for this Montgomery arithmetic require the"]
11#![doc = " input to be strictly less than the prime modulus (m), and also"]
12#![doc = " require the input to be in the unique saturated representation."]
13#![doc = " All functions also ensure that these two properties are true of"]
14#![doc = " return values."]
15#![doc = ""]
16#![doc = " Computed values:"]
17#![doc = " eval z = z[0] + (z[1] << 64) + (z[2] << 128) + (z[3] << 192) + (z[4] <<"]
18#![doc = " 256) + (z[5] << 0x140) bytes_eval z = z[0] + (z[1] << 8) + (z[2] << 16) +"]
19#![doc = " (z[3] << 24) + (z[4] << 32) + (z[5] << 40) + (z[6] << 48) + (z[7] << 56) +"]
20#![doc = " (z[8] << 64) + (z[9] << 72) + (z[10] << 80) + (z[11] << 88) + (z[12] << 96)"]
21#![doc = " + (z[13] << 104) + (z[14] << 112) + (z[15] << 120) + (z[16] << 128) + (z[17]"]
22#![doc = " << 136) + (z[18] << 144) + (z[19] << 152) + (z[20] << 160) + (z[21] << 168)"]
23#![doc = " + (z[22] << 176) + (z[23] << 184) + (z[24] << 192) + (z[25] << 200) + (z[26]"]
24#![doc = " << 208) + (z[27] << 216) + (z[28] << 224) + (z[29] << 232) + (z[30] << 240)"]
25#![doc = " + (z[31] << 248) + (z[32] << 256) + (z[33] << 0x108) + (z[34] << 0x110) +"]
26#![doc = " (z[35] << 0x118) + (z[36] << 0x120) + (z[37] << 0x128) + (z[38] << 0x130) +"]
27#![doc = " (z[39] << 0x138) + (z[40] << 0x140) + (z[41] << 0x148) + (z[42] << 0x150) +"]
28#![doc = " (z[43] << 0x158) + (z[44] << 0x160) + (z[45] << 0x168) + (z[46] << 0x170) +"]
29#![doc = " (z[47] << 0x178) twos_complement_eval z = let x1 := z[0] + (z[1] << 64) +"]
30#![doc = " (z[2] << 128) + (z[3] << 192) + (z[4] << 256) + (z[5] << 0x140) in"]
31#![doc = " if x1 & (2^384-1) < 2^383 then x1 & (2^384-1)"]
32#![doc = " else (x1 & (2^384-1)) - 2^384"]
33#![allow(unused_parens)]
34#![allow(non_camel_case_types)]
35#![allow(
36 dead_code,
37 rustdoc::bare_urls,
38 rustdoc::broken_intra_doc_links,
39 unused_assignments,
40 unused_mut,
41 unused_variables
42)]
43pub type fiat_p384_scalar_u1 = u8;
44pub type fiat_p384_scalar_i1 = i8;
45pub type fiat_p384_scalar_i2 = i8;
46pub type fiat_p384_scalar_montgomery_domain_field_element = [u64; 6];
47pub type fiat_p384_scalar_non_montgomery_domain_field_element = [u64; 6];
48#[doc = " The function fiat_p384_scalar_addcarryx_u64 is an addition with carry."]
49#[doc = ""]
50#[doc = " Postconditions:"]
51#[doc = " out1 = (arg1 + arg2 + arg3) mod 2^64"]
52#[doc = " out2 = ⌊(arg1 + arg2 + arg3) / 2^64⌋"]
53#[doc = ""]
54#[doc = " Input Bounds:"]
55#[doc = " arg1: [0x0 ~> 0x1]"]
56#[doc = " arg2: [0x0 ~> 0xffffffffffffffff]"]
57#[doc = " arg3: [0x0 ~> 0xffffffffffffffff]"]
58#[doc = " Output Bounds:"]
59#[doc = " out1: [0x0 ~> 0xffffffffffffffff]"]
60#[doc = " out2: [0x0 ~> 0x1]"]
61#[inline]
62pub const fn fiat_p384_scalar_addcarryx_u64(
63 arg1: fiat_p384_scalar_u1,
64 arg2: u64,
65 arg3: u64,
66) -> (u64, fiat_p384_scalar_u1) {
67 let mut out1: u64 = 0;
68 let mut out2: fiat_p384_scalar_u1 = 0;
69 let x1: u128 = (((arg1 as u128) + (arg2 as u128)) + (arg3 as u128));
70 let x2: u64 = ((x1 & 0xffffffffffffffff_u128) as u64);
71 let x3: fiat_p384_scalar_u1 = ((x1 >> 64) as fiat_p384_scalar_u1);
72 out1 = x2;
73 out2 = x3;
74 (out1, out2)
75}
76#[doc = " The function fiat_p384_scalar_subborrowx_u64 is a subtraction with borrow."]
77#[doc = ""]
78#[doc = " Postconditions:"]
79#[doc = " out1 = (-arg1 + arg2 + -arg3) mod 2^64"]
80#[doc = " out2 = -⌊(-arg1 + arg2 + -arg3) / 2^64⌋"]
81#[doc = ""]
82#[doc = " Input Bounds:"]
83#[doc = " arg1: [0x0 ~> 0x1]"]
84#[doc = " arg2: [0x0 ~> 0xffffffffffffffff]"]
85#[doc = " arg3: [0x0 ~> 0xffffffffffffffff]"]
86#[doc = " Output Bounds:"]
87#[doc = " out1: [0x0 ~> 0xffffffffffffffff]"]
88#[doc = " out2: [0x0 ~> 0x1]"]
89#[inline]
90pub const fn fiat_p384_scalar_subborrowx_u64(
91 arg1: fiat_p384_scalar_u1,
92 arg2: u64,
93 arg3: u64,
94) -> (u64, fiat_p384_scalar_u1) {
95 let mut out1: u64 = 0;
96 let mut out2: fiat_p384_scalar_u1 = 0;
97 let x1: i128 = (((arg2 as i128) - (arg1 as i128)) - (arg3 as i128));
98 let x2: fiat_p384_scalar_i1 = ((x1 >> 64) as fiat_p384_scalar_i1);
99 let x3: u64 = ((x1 & 0xffffffffffffffff_i128) as u64);
100 out1 = x3;
101 out2 = (((0x0 as fiat_p384_scalar_i2) - (x2 as fiat_p384_scalar_i2)) as fiat_p384_scalar_u1);
102 (out1, out2)
103}
104#[doc = " The function fiat_p384_scalar_mulx_u64 is a multiplication, returning the"]
105#[doc = " full double-width result."]
106#[doc = ""]
107#[doc = " Postconditions:"]
108#[doc = " out1 = (arg1 * arg2) mod 2^64"]
109#[doc = " out2 = ⌊arg1 * arg2 / 2^64⌋"]
110#[doc = ""]
111#[doc = " Input Bounds:"]
112#[doc = " arg1: [0x0 ~> 0xffffffffffffffff]"]
113#[doc = " arg2: [0x0 ~> 0xffffffffffffffff]"]
114#[doc = " Output Bounds:"]
115#[doc = " out1: [0x0 ~> 0xffffffffffffffff]"]
116#[doc = " out2: [0x0 ~> 0xffffffffffffffff]"]
117#[inline]
118pub const fn fiat_p384_scalar_mulx_u64(arg1: u64, arg2: u64) -> (u64, u64) {
119 let mut out1: u64 = 0;
120 let mut out2: u64 = 0;
121 let x1: u128 = ((arg1 as u128) * (arg2 as u128));
122 let x2: u64 = ((x1 & 0xffffffffffffffff_u128) as u64);
123 let x3: u64 = ((x1 >> 64) as u64);
124 out1 = x2;
125 out2 = x3;
126 (out1, out2)
127}
128#[doc = " The function fiat_p384_scalar_cmovznz_u64 is a single-word conditional move."]
129#[doc = ""]
130#[doc = " Postconditions:"]
131#[doc = " out1 = (if arg1 = 0 then arg2 else arg3)"]
132#[doc = ""]
133#[doc = " Input Bounds:"]
134#[doc = " arg1: [0x0 ~> 0x1]"]
135#[doc = " arg2: [0x0 ~> 0xffffffffffffffff]"]
136#[doc = " arg3: [0x0 ~> 0xffffffffffffffff]"]
137#[doc = " Output Bounds:"]
138#[doc = " out1: [0x0 ~> 0xffffffffffffffff]"]
139#[inline]
140pub const fn fiat_p384_scalar_cmovznz_u64(arg1: fiat_p384_scalar_u1, arg2: u64, arg3: u64) -> u64 {
141 let mut out1: u64 = 0;
142 let x1: fiat_p384_scalar_u1 = (!(!arg1));
143 let x2: u64 = ((((((0x0 as fiat_p384_scalar_i2) - (x1 as fiat_p384_scalar_i2))
144 as fiat_p384_scalar_i1) as i128)
145 & 0xffffffffffffffff_i128) as u64);
146 let x3: u64 = ((x2 & arg3) | ((!x2) & arg2));
147 out1 = x3;
148 out1
149}
150#[doc = " The function fiat_p384_scalar_mul multiplies two field elements in the"]
151#[doc = " Montgomery domain."]
152#[doc = ""]
153#[doc = " Preconditions:"]
154#[doc = " 0 ≤ eval arg1 < m"]
155#[doc = " 0 ≤ eval arg2 < m"]
156#[doc = " Postconditions:"]
157#[doc = " eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) * eval"]
158#[doc = " (from_montgomery arg2)) mod m 0 ≤ eval out1 < m"]
159#[inline]
160pub const fn fiat_p384_scalar_mul(
161 arg1: &fiat_p384_scalar_montgomery_domain_field_element,
162 arg2: &fiat_p384_scalar_montgomery_domain_field_element,
163) -> fiat_p384_scalar_montgomery_domain_field_element {
164 let mut out1: fiat_p384_scalar_montgomery_domain_field_element = [0; 6];
165 let x1: u64 = (arg1[1]);
166 let x2: u64 = (arg1[2]);
167 let x3: u64 = (arg1[3]);
168 let x4: u64 = (arg1[4]);
169 let x5: u64 = (arg1[5]);
170 let x6: u64 = (arg1[0]);
171 let (x7, x8) = fiat_p384_scalar_mulx_u64(x6, (arg2[5]));
172 let (x9, x10) = fiat_p384_scalar_mulx_u64(x6, (arg2[4]));
173 let (x11, x12) = fiat_p384_scalar_mulx_u64(x6, (arg2[3]));
174 let (x13, x14) = fiat_p384_scalar_mulx_u64(x6, (arg2[2]));
175 let (x15, x16) = fiat_p384_scalar_mulx_u64(x6, (arg2[1]));
176 let (x17, x18) = fiat_p384_scalar_mulx_u64(x6, (arg2[0]));
177 let (x19, x20) = fiat_p384_scalar_addcarryx_u64(0x0, x18, x15);
178 let (x21, x22) = fiat_p384_scalar_addcarryx_u64(x20, x16, x13);
179 let (x23, x24) = fiat_p384_scalar_addcarryx_u64(x22, x14, x11);
180 let (x25, x26) = fiat_p384_scalar_addcarryx_u64(x24, x12, x9);
181 let (x27, x28) = fiat_p384_scalar_addcarryx_u64(x26, x10, x7);
182 let x29: u64 = ((x28 as u64) + x8);
183 let (x30, x31) = fiat_p384_scalar_mulx_u64(x17, 0x6ed46089e88fdc45);
184 let (x32, x33) = fiat_p384_scalar_mulx_u64(x30, 0xffffffffffffffff);
185 let (x34, x35) = fiat_p384_scalar_mulx_u64(x30, 0xffffffffffffffff);
186 let (x36, x37) = fiat_p384_scalar_mulx_u64(x30, 0xffffffffffffffff);
187 let (x38, x39) = fiat_p384_scalar_mulx_u64(x30, 0xc7634d81f4372ddf);
188 let (x40, x41) = fiat_p384_scalar_mulx_u64(x30, 0x581a0db248b0a77a);
189 let (x42, x43) = fiat_p384_scalar_mulx_u64(x30, 0xecec196accc52973);
190 let (x44, x45) = fiat_p384_scalar_addcarryx_u64(0x0, x43, x40);
191 let (x46, x47) = fiat_p384_scalar_addcarryx_u64(x45, x41, x38);
192 let (x48, x49) = fiat_p384_scalar_addcarryx_u64(x47, x39, x36);
193 let (x50, x51) = fiat_p384_scalar_addcarryx_u64(x49, x37, x34);
194 let (x52, x53) = fiat_p384_scalar_addcarryx_u64(x51, x35, x32);
195 let x54: u64 = ((x53 as u64) + x33);
196 let (x55, x56) = fiat_p384_scalar_addcarryx_u64(0x0, x17, x42);
197 let (x57, x58) = fiat_p384_scalar_addcarryx_u64(x56, x19, x44);
198 let (x59, x60) = fiat_p384_scalar_addcarryx_u64(x58, x21, x46);
199 let (x61, x62) = fiat_p384_scalar_addcarryx_u64(x60, x23, x48);
200 let (x63, x64) = fiat_p384_scalar_addcarryx_u64(x62, x25, x50);
201 let (x65, x66) = fiat_p384_scalar_addcarryx_u64(x64, x27, x52);
202 let (x67, x68) = fiat_p384_scalar_addcarryx_u64(x66, x29, x54);
203 let (x69, x70) = fiat_p384_scalar_mulx_u64(x1, (arg2[5]));
204 let (x71, x72) = fiat_p384_scalar_mulx_u64(x1, (arg2[4]));
205 let (x73, x74) = fiat_p384_scalar_mulx_u64(x1, (arg2[3]));
206 let (x75, x76) = fiat_p384_scalar_mulx_u64(x1, (arg2[2]));
207 let (x77, x78) = fiat_p384_scalar_mulx_u64(x1, (arg2[1]));
208 let (x79, x80) = fiat_p384_scalar_mulx_u64(x1, (arg2[0]));
209 let (x81, x82) = fiat_p384_scalar_addcarryx_u64(0x0, x80, x77);
210 let (x83, x84) = fiat_p384_scalar_addcarryx_u64(x82, x78, x75);
211 let (x85, x86) = fiat_p384_scalar_addcarryx_u64(x84, x76, x73);
212 let (x87, x88) = fiat_p384_scalar_addcarryx_u64(x86, x74, x71);
213 let (x89, x90) = fiat_p384_scalar_addcarryx_u64(x88, x72, x69);
214 let x91: u64 = ((x90 as u64) + x70);
215 let (x92, x93) = fiat_p384_scalar_addcarryx_u64(0x0, x57, x79);
216 let (x94, x95) = fiat_p384_scalar_addcarryx_u64(x93, x59, x81);
217 let (x96, x97) = fiat_p384_scalar_addcarryx_u64(x95, x61, x83);
218 let (x98, x99) = fiat_p384_scalar_addcarryx_u64(x97, x63, x85);
219 let (x100, x101) = fiat_p384_scalar_addcarryx_u64(x99, x65, x87);
220 let (x102, x103) = fiat_p384_scalar_addcarryx_u64(x101, x67, x89);
221 let (x104, x105) = fiat_p384_scalar_addcarryx_u64(x103, (x68 as u64), x91);
222 let (x106, x107) = fiat_p384_scalar_mulx_u64(x92, 0x6ed46089e88fdc45);
223 let (x108, x109) = fiat_p384_scalar_mulx_u64(x106, 0xffffffffffffffff);
224 let (x110, x111) = fiat_p384_scalar_mulx_u64(x106, 0xffffffffffffffff);
225 let (x112, x113) = fiat_p384_scalar_mulx_u64(x106, 0xffffffffffffffff);
226 let (x114, x115) = fiat_p384_scalar_mulx_u64(x106, 0xc7634d81f4372ddf);
227 let (x116, x117) = fiat_p384_scalar_mulx_u64(x106, 0x581a0db248b0a77a);
228 let (x118, x119) = fiat_p384_scalar_mulx_u64(x106, 0xecec196accc52973);
229 let (x120, x121) = fiat_p384_scalar_addcarryx_u64(0x0, x119, x116);
230 let (x122, x123) = fiat_p384_scalar_addcarryx_u64(x121, x117, x114);
231 let (x124, x125) = fiat_p384_scalar_addcarryx_u64(x123, x115, x112);
232 let (x126, x127) = fiat_p384_scalar_addcarryx_u64(x125, x113, x110);
233 let (x128, x129) = fiat_p384_scalar_addcarryx_u64(x127, x111, x108);
234 let x130: u64 = ((x129 as u64) + x109);
235 let (x131, x132) = fiat_p384_scalar_addcarryx_u64(0x0, x92, x118);
236 let (x133, x134) = fiat_p384_scalar_addcarryx_u64(x132, x94, x120);
237 let (x135, x136) = fiat_p384_scalar_addcarryx_u64(x134, x96, x122);
238 let (x137, x138) = fiat_p384_scalar_addcarryx_u64(x136, x98, x124);
239 let (x139, x140) = fiat_p384_scalar_addcarryx_u64(x138, x100, x126);
240 let (x141, x142) = fiat_p384_scalar_addcarryx_u64(x140, x102, x128);
241 let (x143, x144) = fiat_p384_scalar_addcarryx_u64(x142, x104, x130);
242 let x145: u64 = ((x144 as u64) + (x105 as u64));
243 let (x146, x147) = fiat_p384_scalar_mulx_u64(x2, (arg2[5]));
244 let (x148, x149) = fiat_p384_scalar_mulx_u64(x2, (arg2[4]));
245 let (x150, x151) = fiat_p384_scalar_mulx_u64(x2, (arg2[3]));
246 let (x152, x153) = fiat_p384_scalar_mulx_u64(x2, (arg2[2]));
247 let (x154, x155) = fiat_p384_scalar_mulx_u64(x2, (arg2[1]));
248 let (x156, x157) = fiat_p384_scalar_mulx_u64(x2, (arg2[0]));
249 let (x158, x159) = fiat_p384_scalar_addcarryx_u64(0x0, x157, x154);
250 let (x160, x161) = fiat_p384_scalar_addcarryx_u64(x159, x155, x152);
251 let (x162, x163) = fiat_p384_scalar_addcarryx_u64(x161, x153, x150);
252 let (x164, x165) = fiat_p384_scalar_addcarryx_u64(x163, x151, x148);
253 let (x166, x167) = fiat_p384_scalar_addcarryx_u64(x165, x149, x146);
254 let x168: u64 = ((x167 as u64) + x147);
255 let (x169, x170) = fiat_p384_scalar_addcarryx_u64(0x0, x133, x156);
256 let (x171, x172) = fiat_p384_scalar_addcarryx_u64(x170, x135, x158);
257 let (x173, x174) = fiat_p384_scalar_addcarryx_u64(x172, x137, x160);
258 let (x175, x176) = fiat_p384_scalar_addcarryx_u64(x174, x139, x162);
259 let (x177, x178) = fiat_p384_scalar_addcarryx_u64(x176, x141, x164);
260 let (x179, x180) = fiat_p384_scalar_addcarryx_u64(x178, x143, x166);
261 let (x181, x182) = fiat_p384_scalar_addcarryx_u64(x180, x145, x168);
262 let (x183, x184) = fiat_p384_scalar_mulx_u64(x169, 0x6ed46089e88fdc45);
263 let (x185, x186) = fiat_p384_scalar_mulx_u64(x183, 0xffffffffffffffff);
264 let (x187, x188) = fiat_p384_scalar_mulx_u64(x183, 0xffffffffffffffff);
265 let (x189, x190) = fiat_p384_scalar_mulx_u64(x183, 0xffffffffffffffff);
266 let (x191, x192) = fiat_p384_scalar_mulx_u64(x183, 0xc7634d81f4372ddf);
267 let (x193, x194) = fiat_p384_scalar_mulx_u64(x183, 0x581a0db248b0a77a);
268 let (x195, x196) = fiat_p384_scalar_mulx_u64(x183, 0xecec196accc52973);
269 let (x197, x198) = fiat_p384_scalar_addcarryx_u64(0x0, x196, x193);
270 let (x199, x200) = fiat_p384_scalar_addcarryx_u64(x198, x194, x191);
271 let (x201, x202) = fiat_p384_scalar_addcarryx_u64(x200, x192, x189);
272 let (x203, x204) = fiat_p384_scalar_addcarryx_u64(x202, x190, x187);
273 let (x205, x206) = fiat_p384_scalar_addcarryx_u64(x204, x188, x185);
274 let x207: u64 = ((x206 as u64) + x186);
275 let (x208, x209) = fiat_p384_scalar_addcarryx_u64(0x0, x169, x195);
276 let (x210, x211) = fiat_p384_scalar_addcarryx_u64(x209, x171, x197);
277 let (x212, x213) = fiat_p384_scalar_addcarryx_u64(x211, x173, x199);
278 let (x214, x215) = fiat_p384_scalar_addcarryx_u64(x213, x175, x201);
279 let (x216, x217) = fiat_p384_scalar_addcarryx_u64(x215, x177, x203);
280 let (x218, x219) = fiat_p384_scalar_addcarryx_u64(x217, x179, x205);
281 let (x220, x221) = fiat_p384_scalar_addcarryx_u64(x219, x181, x207);
282 let x222: u64 = ((x221 as u64) + (x182 as u64));
283 let (x223, x224) = fiat_p384_scalar_mulx_u64(x3, (arg2[5]));
284 let (x225, x226) = fiat_p384_scalar_mulx_u64(x3, (arg2[4]));
285 let (x227, x228) = fiat_p384_scalar_mulx_u64(x3, (arg2[3]));
286 let (x229, x230) = fiat_p384_scalar_mulx_u64(x3, (arg2[2]));
287 let (x231, x232) = fiat_p384_scalar_mulx_u64(x3, (arg2[1]));
288 let (x233, x234) = fiat_p384_scalar_mulx_u64(x3, (arg2[0]));
289 let (x235, x236) = fiat_p384_scalar_addcarryx_u64(0x0, x234, x231);
290 let (x237, x238) = fiat_p384_scalar_addcarryx_u64(x236, x232, x229);
291 let (x239, x240) = fiat_p384_scalar_addcarryx_u64(x238, x230, x227);
292 let (x241, x242) = fiat_p384_scalar_addcarryx_u64(x240, x228, x225);
293 let (x243, x244) = fiat_p384_scalar_addcarryx_u64(x242, x226, x223);
294 let x245: u64 = ((x244 as u64) + x224);
295 let (x246, x247) = fiat_p384_scalar_addcarryx_u64(0x0, x210, x233);
296 let (x248, x249) = fiat_p384_scalar_addcarryx_u64(x247, x212, x235);
297 let (x250, x251) = fiat_p384_scalar_addcarryx_u64(x249, x214, x237);
298 let (x252, x253) = fiat_p384_scalar_addcarryx_u64(x251, x216, x239);
299 let (x254, x255) = fiat_p384_scalar_addcarryx_u64(x253, x218, x241);
300 let (x256, x257) = fiat_p384_scalar_addcarryx_u64(x255, x220, x243);
301 let (x258, x259) = fiat_p384_scalar_addcarryx_u64(x257, x222, x245);
302 let (x260, x261) = fiat_p384_scalar_mulx_u64(x246, 0x6ed46089e88fdc45);
303 let (x262, x263) = fiat_p384_scalar_mulx_u64(x260, 0xffffffffffffffff);
304 let (x264, x265) = fiat_p384_scalar_mulx_u64(x260, 0xffffffffffffffff);
305 let (x266, x267) = fiat_p384_scalar_mulx_u64(x260, 0xffffffffffffffff);
306 let (x268, x269) = fiat_p384_scalar_mulx_u64(x260, 0xc7634d81f4372ddf);
307 let (x270, x271) = fiat_p384_scalar_mulx_u64(x260, 0x581a0db248b0a77a);
308 let (x272, x273) = fiat_p384_scalar_mulx_u64(x260, 0xecec196accc52973);
309 let (x274, x275) = fiat_p384_scalar_addcarryx_u64(0x0, x273, x270);
310 let (x276, x277) = fiat_p384_scalar_addcarryx_u64(x275, x271, x268);
311 let (x278, x279) = fiat_p384_scalar_addcarryx_u64(x277, x269, x266);
312 let (x280, x281) = fiat_p384_scalar_addcarryx_u64(x279, x267, x264);
313 let (x282, x283) = fiat_p384_scalar_addcarryx_u64(x281, x265, x262);
314 let x284: u64 = ((x283 as u64) + x263);
315 let (x285, x286) = fiat_p384_scalar_addcarryx_u64(0x0, x246, x272);
316 let (x287, x288) = fiat_p384_scalar_addcarryx_u64(x286, x248, x274);
317 let (x289, x290) = fiat_p384_scalar_addcarryx_u64(x288, x250, x276);
318 let (x291, x292) = fiat_p384_scalar_addcarryx_u64(x290, x252, x278);
319 let (x293, x294) = fiat_p384_scalar_addcarryx_u64(x292, x254, x280);
320 let (x295, x296) = fiat_p384_scalar_addcarryx_u64(x294, x256, x282);
321 let (x297, x298) = fiat_p384_scalar_addcarryx_u64(x296, x258, x284);
322 let x299: u64 = ((x298 as u64) + (x259 as u64));
323 let (x300, x301) = fiat_p384_scalar_mulx_u64(x4, (arg2[5]));
324 let (x302, x303) = fiat_p384_scalar_mulx_u64(x4, (arg2[4]));
325 let (x304, x305) = fiat_p384_scalar_mulx_u64(x4, (arg2[3]));
326 let (x306, x307) = fiat_p384_scalar_mulx_u64(x4, (arg2[2]));
327 let (x308, x309) = fiat_p384_scalar_mulx_u64(x4, (arg2[1]));
328 let (x310, x311) = fiat_p384_scalar_mulx_u64(x4, (arg2[0]));
329 let (x312, x313) = fiat_p384_scalar_addcarryx_u64(0x0, x311, x308);
330 let (x314, x315) = fiat_p384_scalar_addcarryx_u64(x313, x309, x306);
331 let (x316, x317) = fiat_p384_scalar_addcarryx_u64(x315, x307, x304);
332 let (x318, x319) = fiat_p384_scalar_addcarryx_u64(x317, x305, x302);
333 let (x320, x321) = fiat_p384_scalar_addcarryx_u64(x319, x303, x300);
334 let x322: u64 = ((x321 as u64) + x301);
335 let (x323, x324) = fiat_p384_scalar_addcarryx_u64(0x0, x287, x310);
336 let (x325, x326) = fiat_p384_scalar_addcarryx_u64(x324, x289, x312);
337 let (x327, x328) = fiat_p384_scalar_addcarryx_u64(x326, x291, x314);
338 let (x329, x330) = fiat_p384_scalar_addcarryx_u64(x328, x293, x316);
339 let (x331, x332) = fiat_p384_scalar_addcarryx_u64(x330, x295, x318);
340 let (x333, x334) = fiat_p384_scalar_addcarryx_u64(x332, x297, x320);
341 let (x335, x336) = fiat_p384_scalar_addcarryx_u64(x334, x299, x322);
342 let (x337, x338) = fiat_p384_scalar_mulx_u64(x323, 0x6ed46089e88fdc45);
343 let (x339, x340) = fiat_p384_scalar_mulx_u64(x337, 0xffffffffffffffff);
344 let (x341, x342) = fiat_p384_scalar_mulx_u64(x337, 0xffffffffffffffff);
345 let (x343, x344) = fiat_p384_scalar_mulx_u64(x337, 0xffffffffffffffff);
346 let (x345, x346) = fiat_p384_scalar_mulx_u64(x337, 0xc7634d81f4372ddf);
347 let (x347, x348) = fiat_p384_scalar_mulx_u64(x337, 0x581a0db248b0a77a);
348 let (x349, x350) = fiat_p384_scalar_mulx_u64(x337, 0xecec196accc52973);
349 let (x351, x352) = fiat_p384_scalar_addcarryx_u64(0x0, x350, x347);
350 let (x353, x354) = fiat_p384_scalar_addcarryx_u64(x352, x348, x345);
351 let (x355, x356) = fiat_p384_scalar_addcarryx_u64(x354, x346, x343);
352 let (x357, x358) = fiat_p384_scalar_addcarryx_u64(x356, x344, x341);
353 let (x359, x360) = fiat_p384_scalar_addcarryx_u64(x358, x342, x339);
354 let x361: u64 = ((x360 as u64) + x340);
355 let (x362, x363) = fiat_p384_scalar_addcarryx_u64(0x0, x323, x349);
356 let (x364, x365) = fiat_p384_scalar_addcarryx_u64(x363, x325, x351);
357 let (x366, x367) = fiat_p384_scalar_addcarryx_u64(x365, x327, x353);
358 let (x368, x369) = fiat_p384_scalar_addcarryx_u64(x367, x329, x355);
359 let (x370, x371) = fiat_p384_scalar_addcarryx_u64(x369, x331, x357);
360 let (x372, x373) = fiat_p384_scalar_addcarryx_u64(x371, x333, x359);
361 let (x374, x375) = fiat_p384_scalar_addcarryx_u64(x373, x335, x361);
362 let x376: u64 = ((x375 as u64) + (x336 as u64));
363 let (x377, x378) = fiat_p384_scalar_mulx_u64(x5, (arg2[5]));
364 let (x379, x380) = fiat_p384_scalar_mulx_u64(x5, (arg2[4]));
365 let (x381, x382) = fiat_p384_scalar_mulx_u64(x5, (arg2[3]));
366 let (x383, x384) = fiat_p384_scalar_mulx_u64(x5, (arg2[2]));
367 let (x385, x386) = fiat_p384_scalar_mulx_u64(x5, (arg2[1]));
368 let (x387, x388) = fiat_p384_scalar_mulx_u64(x5, (arg2[0]));
369 let (x389, x390) = fiat_p384_scalar_addcarryx_u64(0x0, x388, x385);
370 let (x391, x392) = fiat_p384_scalar_addcarryx_u64(x390, x386, x383);
371 let (x393, x394) = fiat_p384_scalar_addcarryx_u64(x392, x384, x381);
372 let (x395, x396) = fiat_p384_scalar_addcarryx_u64(x394, x382, x379);
373 let (x397, x398) = fiat_p384_scalar_addcarryx_u64(x396, x380, x377);
374 let x399: u64 = ((x398 as u64) + x378);
375 let (x400, x401) = fiat_p384_scalar_addcarryx_u64(0x0, x364, x387);
376 let (x402, x403) = fiat_p384_scalar_addcarryx_u64(x401, x366, x389);
377 let (x404, x405) = fiat_p384_scalar_addcarryx_u64(x403, x368, x391);
378 let (x406, x407) = fiat_p384_scalar_addcarryx_u64(x405, x370, x393);
379 let (x408, x409) = fiat_p384_scalar_addcarryx_u64(x407, x372, x395);
380 let (x410, x411) = fiat_p384_scalar_addcarryx_u64(x409, x374, x397);
381 let (x412, x413) = fiat_p384_scalar_addcarryx_u64(x411, x376, x399);
382 let (x414, x415) = fiat_p384_scalar_mulx_u64(x400, 0x6ed46089e88fdc45);
383 let (x416, x417) = fiat_p384_scalar_mulx_u64(x414, 0xffffffffffffffff);
384 let (x418, x419) = fiat_p384_scalar_mulx_u64(x414, 0xffffffffffffffff);
385 let (x420, x421) = fiat_p384_scalar_mulx_u64(x414, 0xffffffffffffffff);
386 let (x422, x423) = fiat_p384_scalar_mulx_u64(x414, 0xc7634d81f4372ddf);
387 let (x424, x425) = fiat_p384_scalar_mulx_u64(x414, 0x581a0db248b0a77a);
388 let (x426, x427) = fiat_p384_scalar_mulx_u64(x414, 0xecec196accc52973);
389 let (x428, x429) = fiat_p384_scalar_addcarryx_u64(0x0, x427, x424);
390 let (x430, x431) = fiat_p384_scalar_addcarryx_u64(x429, x425, x422);
391 let (x432, x433) = fiat_p384_scalar_addcarryx_u64(x431, x423, x420);
392 let (x434, x435) = fiat_p384_scalar_addcarryx_u64(x433, x421, x418);
393 let (x436, x437) = fiat_p384_scalar_addcarryx_u64(x435, x419, x416);
394 let x438: u64 = ((x437 as u64) + x417);
395 let (x439, x440) = fiat_p384_scalar_addcarryx_u64(0x0, x400, x426);
396 let (x441, x442) = fiat_p384_scalar_addcarryx_u64(x440, x402, x428);
397 let (x443, x444) = fiat_p384_scalar_addcarryx_u64(x442, x404, x430);
398 let (x445, x446) = fiat_p384_scalar_addcarryx_u64(x444, x406, x432);
399 let (x447, x448) = fiat_p384_scalar_addcarryx_u64(x446, x408, x434);
400 let (x449, x450) = fiat_p384_scalar_addcarryx_u64(x448, x410, x436);
401 let (x451, x452) = fiat_p384_scalar_addcarryx_u64(x450, x412, x438);
402 let x453: u64 = ((x452 as u64) + (x413 as u64));
403 let (x454, x455) = fiat_p384_scalar_subborrowx_u64(0x0, x441, 0xecec196accc52973);
404 let (x456, x457) = fiat_p384_scalar_subborrowx_u64(x455, x443, 0x581a0db248b0a77a);
405 let (x458, x459) = fiat_p384_scalar_subborrowx_u64(x457, x445, 0xc7634d81f4372ddf);
406 let (x460, x461) = fiat_p384_scalar_subborrowx_u64(x459, x447, 0xffffffffffffffff);
407 let (x462, x463) = fiat_p384_scalar_subborrowx_u64(x461, x449, 0xffffffffffffffff);
408 let (x464, x465) = fiat_p384_scalar_subborrowx_u64(x463, x451, 0xffffffffffffffff);
409 let (x466, x467) = fiat_p384_scalar_subborrowx_u64(x465, x453, 0x0_u64);
410 let (x468) = fiat_p384_scalar_cmovznz_u64(x467, x454, x441);
411 let (x469) = fiat_p384_scalar_cmovznz_u64(x467, x456, x443);
412 let (x470) = fiat_p384_scalar_cmovznz_u64(x467, x458, x445);
413 let (x471) = fiat_p384_scalar_cmovznz_u64(x467, x460, x447);
414 let (x472) = fiat_p384_scalar_cmovznz_u64(x467, x462, x449);
415 let (x473) = fiat_p384_scalar_cmovznz_u64(x467, x464, x451);
416 out1[0] = x468;
417 out1[1] = x469;
418 out1[2] = x470;
419 out1[3] = x471;
420 out1[4] = x472;
421 out1[5] = x473;
422 out1
423}
424#[doc = " The function fiat_p384_scalar_square squares a field element in the"]
425#[doc = " Montgomery domain."]
426#[doc = ""]
427#[doc = " Preconditions:"]
428#[doc = " 0 ≤ eval arg1 < m"]
429#[doc = " Postconditions:"]
430#[doc = " eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) * eval"]
431#[doc = " (from_montgomery arg1)) mod m 0 ≤ eval out1 < m"]
432#[inline]
433pub const fn fiat_p384_scalar_square(
434 arg1: &fiat_p384_scalar_montgomery_domain_field_element,
435) -> fiat_p384_scalar_montgomery_domain_field_element {
436 let mut out1: fiat_p384_scalar_montgomery_domain_field_element = [0; 6];
437 let x1: u64 = (arg1[1]);
438 let x2: u64 = (arg1[2]);
439 let x3: u64 = (arg1[3]);
440 let x4: u64 = (arg1[4]);
441 let x5: u64 = (arg1[5]);
442 let x6: u64 = (arg1[0]);
443 let (x7, x8) = fiat_p384_scalar_mulx_u64(x6, (arg1[5]));
444 let (x9, x10) = fiat_p384_scalar_mulx_u64(x6, (arg1[4]));
445 let (x11, x12) = fiat_p384_scalar_mulx_u64(x6, (arg1[3]));
446 let (x13, x14) = fiat_p384_scalar_mulx_u64(x6, (arg1[2]));
447 let (x15, x16) = fiat_p384_scalar_mulx_u64(x6, (arg1[1]));
448 let (x17, x18) = fiat_p384_scalar_mulx_u64(x6, (arg1[0]));
449 let (x19, x20) = fiat_p384_scalar_addcarryx_u64(0x0, x18, x15);
450 let (x21, x22) = fiat_p384_scalar_addcarryx_u64(x20, x16, x13);
451 let (x23, x24) = fiat_p384_scalar_addcarryx_u64(x22, x14, x11);
452 let (x25, x26) = fiat_p384_scalar_addcarryx_u64(x24, x12, x9);
453 let (x27, x28) = fiat_p384_scalar_addcarryx_u64(x26, x10, x7);
454 let x29: u64 = ((x28 as u64) + x8);
455 let (x30, x31) = fiat_p384_scalar_mulx_u64(x17, 0x6ed46089e88fdc45);
456 let (x32, x33) = fiat_p384_scalar_mulx_u64(x30, 0xffffffffffffffff);
457 let (x34, x35) = fiat_p384_scalar_mulx_u64(x30, 0xffffffffffffffff);
458 let (x36, x37) = fiat_p384_scalar_mulx_u64(x30, 0xffffffffffffffff);
459 let (x38, x39) = fiat_p384_scalar_mulx_u64(x30, 0xc7634d81f4372ddf);
460 let (x40, x41) = fiat_p384_scalar_mulx_u64(x30, 0x581a0db248b0a77a);
461 let (x42, x43) = fiat_p384_scalar_mulx_u64(x30, 0xecec196accc52973);
462 let (x44, x45) = fiat_p384_scalar_addcarryx_u64(0x0, x43, x40);
463 let (x46, x47) = fiat_p384_scalar_addcarryx_u64(x45, x41, x38);
464 let (x48, x49) = fiat_p384_scalar_addcarryx_u64(x47, x39, x36);
465 let (x50, x51) = fiat_p384_scalar_addcarryx_u64(x49, x37, x34);
466 let (x52, x53) = fiat_p384_scalar_addcarryx_u64(x51, x35, x32);
467 let x54: u64 = ((x53 as u64) + x33);
468 let (x55, x56) = fiat_p384_scalar_addcarryx_u64(0x0, x17, x42);
469 let (x57, x58) = fiat_p384_scalar_addcarryx_u64(x56, x19, x44);
470 let (x59, x60) = fiat_p384_scalar_addcarryx_u64(x58, x21, x46);
471 let (x61, x62) = fiat_p384_scalar_addcarryx_u64(x60, x23, x48);
472 let (x63, x64) = fiat_p384_scalar_addcarryx_u64(x62, x25, x50);
473 let (x65, x66) = fiat_p384_scalar_addcarryx_u64(x64, x27, x52);
474 let (x67, x68) = fiat_p384_scalar_addcarryx_u64(x66, x29, x54);
475 let (x69, x70) = fiat_p384_scalar_mulx_u64(x1, (arg1[5]));
476 let (x71, x72) = fiat_p384_scalar_mulx_u64(x1, (arg1[4]));
477 let (x73, x74) = fiat_p384_scalar_mulx_u64(x1, (arg1[3]));
478 let (x75, x76) = fiat_p384_scalar_mulx_u64(x1, (arg1[2]));
479 let (x77, x78) = fiat_p384_scalar_mulx_u64(x1, (arg1[1]));
480 let (x79, x80) = fiat_p384_scalar_mulx_u64(x1, (arg1[0]));
481 let (x81, x82) = fiat_p384_scalar_addcarryx_u64(0x0, x80, x77);
482 let (x83, x84) = fiat_p384_scalar_addcarryx_u64(x82, x78, x75);
483 let (x85, x86) = fiat_p384_scalar_addcarryx_u64(x84, x76, x73);
484 let (x87, x88) = fiat_p384_scalar_addcarryx_u64(x86, x74, x71);
485 let (x89, x90) = fiat_p384_scalar_addcarryx_u64(x88, x72, x69);
486 let x91: u64 = ((x90 as u64) + x70);
487 let (x92, x93) = fiat_p384_scalar_addcarryx_u64(0x0, x57, x79);
488 let (x94, x95) = fiat_p384_scalar_addcarryx_u64(x93, x59, x81);
489 let (x96, x97) = fiat_p384_scalar_addcarryx_u64(x95, x61, x83);
490 let (x98, x99) = fiat_p384_scalar_addcarryx_u64(x97, x63, x85);
491 let (x100, x101) = fiat_p384_scalar_addcarryx_u64(x99, x65, x87);
492 let (x102, x103) = fiat_p384_scalar_addcarryx_u64(x101, x67, x89);
493 let (x104, x105) = fiat_p384_scalar_addcarryx_u64(x103, (x68 as u64), x91);
494 let (x106, x107) = fiat_p384_scalar_mulx_u64(x92, 0x6ed46089e88fdc45);
495 let (x108, x109) = fiat_p384_scalar_mulx_u64(x106, 0xffffffffffffffff);
496 let (x110, x111) = fiat_p384_scalar_mulx_u64(x106, 0xffffffffffffffff);
497 let (x112, x113) = fiat_p384_scalar_mulx_u64(x106, 0xffffffffffffffff);
498 let (x114, x115) = fiat_p384_scalar_mulx_u64(x106, 0xc7634d81f4372ddf);
499 let (x116, x117) = fiat_p384_scalar_mulx_u64(x106, 0x581a0db248b0a77a);
500 let (x118, x119) = fiat_p384_scalar_mulx_u64(x106, 0xecec196accc52973);
501 let (x120, x121) = fiat_p384_scalar_addcarryx_u64(0x0, x119, x116);
502 let (x122, x123) = fiat_p384_scalar_addcarryx_u64(x121, x117, x114);
503 let (x124, x125) = fiat_p384_scalar_addcarryx_u64(x123, x115, x112);
504 let (x126, x127) = fiat_p384_scalar_addcarryx_u64(x125, x113, x110);
505 let (x128, x129) = fiat_p384_scalar_addcarryx_u64(x127, x111, x108);
506 let x130: u64 = ((x129 as u64) + x109);
507 let (x131, x132) = fiat_p384_scalar_addcarryx_u64(0x0, x92, x118);
508 let (x133, x134) = fiat_p384_scalar_addcarryx_u64(x132, x94, x120);
509 let (x135, x136) = fiat_p384_scalar_addcarryx_u64(x134, x96, x122);
510 let (x137, x138) = fiat_p384_scalar_addcarryx_u64(x136, x98, x124);
511 let (x139, x140) = fiat_p384_scalar_addcarryx_u64(x138, x100, x126);
512 let (x141, x142) = fiat_p384_scalar_addcarryx_u64(x140, x102, x128);
513 let (x143, x144) = fiat_p384_scalar_addcarryx_u64(x142, x104, x130);
514 let x145: u64 = ((x144 as u64) + (x105 as u64));
515 let (x146, x147) = fiat_p384_scalar_mulx_u64(x2, (arg1[5]));
516 let (x148, x149) = fiat_p384_scalar_mulx_u64(x2, (arg1[4]));
517 let (x150, x151) = fiat_p384_scalar_mulx_u64(x2, (arg1[3]));
518 let (x152, x153) = fiat_p384_scalar_mulx_u64(x2, (arg1[2]));
519 let (x154, x155) = fiat_p384_scalar_mulx_u64(x2, (arg1[1]));
520 let (x156, x157) = fiat_p384_scalar_mulx_u64(x2, (arg1[0]));
521 let (x158, x159) = fiat_p384_scalar_addcarryx_u64(0x0, x157, x154);
522 let (x160, x161) = fiat_p384_scalar_addcarryx_u64(x159, x155, x152);
523 let (x162, x163) = fiat_p384_scalar_addcarryx_u64(x161, x153, x150);
524 let (x164, x165) = fiat_p384_scalar_addcarryx_u64(x163, x151, x148);
525 let (x166, x167) = fiat_p384_scalar_addcarryx_u64(x165, x149, x146);
526 let x168: u64 = ((x167 as u64) + x147);
527 let (x169, x170) = fiat_p384_scalar_addcarryx_u64(0x0, x133, x156);
528 let (x171, x172) = fiat_p384_scalar_addcarryx_u64(x170, x135, x158);
529 let (x173, x174) = fiat_p384_scalar_addcarryx_u64(x172, x137, x160);
530 let (x175, x176) = fiat_p384_scalar_addcarryx_u64(x174, x139, x162);
531 let (x177, x178) = fiat_p384_scalar_addcarryx_u64(x176, x141, x164);
532 let (x179, x180) = fiat_p384_scalar_addcarryx_u64(x178, x143, x166);
533 let (x181, x182) = fiat_p384_scalar_addcarryx_u64(x180, x145, x168);
534 let (x183, x184) = fiat_p384_scalar_mulx_u64(x169, 0x6ed46089e88fdc45);
535 let (x185, x186) = fiat_p384_scalar_mulx_u64(x183, 0xffffffffffffffff);
536 let (x187, x188) = fiat_p384_scalar_mulx_u64(x183, 0xffffffffffffffff);
537 let (x189, x190) = fiat_p384_scalar_mulx_u64(x183, 0xffffffffffffffff);
538 let (x191, x192) = fiat_p384_scalar_mulx_u64(x183, 0xc7634d81f4372ddf);
539 let (x193, x194) = fiat_p384_scalar_mulx_u64(x183, 0x581a0db248b0a77a);
540 let (x195, x196) = fiat_p384_scalar_mulx_u64(x183, 0xecec196accc52973);
541 let (x197, x198) = fiat_p384_scalar_addcarryx_u64(0x0, x196, x193);
542 let (x199, x200) = fiat_p384_scalar_addcarryx_u64(x198, x194, x191);
543 let (x201, x202) = fiat_p384_scalar_addcarryx_u64(x200, x192, x189);
544 let (x203, x204) = fiat_p384_scalar_addcarryx_u64(x202, x190, x187);
545 let (x205, x206) = fiat_p384_scalar_addcarryx_u64(x204, x188, x185);
546 let x207: u64 = ((x206 as u64) + x186);
547 let (x208, x209) = fiat_p384_scalar_addcarryx_u64(0x0, x169, x195);
548 let (x210, x211) = fiat_p384_scalar_addcarryx_u64(x209, x171, x197);
549 let (x212, x213) = fiat_p384_scalar_addcarryx_u64(x211, x173, x199);
550 let (x214, x215) = fiat_p384_scalar_addcarryx_u64(x213, x175, x201);
551 let (x216, x217) = fiat_p384_scalar_addcarryx_u64(x215, x177, x203);
552 let (x218, x219) = fiat_p384_scalar_addcarryx_u64(x217, x179, x205);
553 let (x220, x221) = fiat_p384_scalar_addcarryx_u64(x219, x181, x207);
554 let x222: u64 = ((x221 as u64) + (x182 as u64));
555 let (x223, x224) = fiat_p384_scalar_mulx_u64(x3, (arg1[5]));
556 let (x225, x226) = fiat_p384_scalar_mulx_u64(x3, (arg1[4]));
557 let (x227, x228) = fiat_p384_scalar_mulx_u64(x3, (arg1[3]));
558 let (x229, x230) = fiat_p384_scalar_mulx_u64(x3, (arg1[2]));
559 let (x231, x232) = fiat_p384_scalar_mulx_u64(x3, (arg1[1]));
560 let (x233, x234) = fiat_p384_scalar_mulx_u64(x3, (arg1[0]));
561 let (x235, x236) = fiat_p384_scalar_addcarryx_u64(0x0, x234, x231);
562 let (x237, x238) = fiat_p384_scalar_addcarryx_u64(x236, x232, x229);
563 let (x239, x240) = fiat_p384_scalar_addcarryx_u64(x238, x230, x227);
564 let (x241, x242) = fiat_p384_scalar_addcarryx_u64(x240, x228, x225);
565 let (x243, x244) = fiat_p384_scalar_addcarryx_u64(x242, x226, x223);
566 let x245: u64 = ((x244 as u64) + x224);
567 let (x246, x247) = fiat_p384_scalar_addcarryx_u64(0x0, x210, x233);
568 let (x248, x249) = fiat_p384_scalar_addcarryx_u64(x247, x212, x235);
569 let (x250, x251) = fiat_p384_scalar_addcarryx_u64(x249, x214, x237);
570 let (x252, x253) = fiat_p384_scalar_addcarryx_u64(x251, x216, x239);
571 let (x254, x255) = fiat_p384_scalar_addcarryx_u64(x253, x218, x241);
572 let (x256, x257) = fiat_p384_scalar_addcarryx_u64(x255, x220, x243);
573 let (x258, x259) = fiat_p384_scalar_addcarryx_u64(x257, x222, x245);
574 let (x260, x261) = fiat_p384_scalar_mulx_u64(x246, 0x6ed46089e88fdc45);
575 let (x262, x263) = fiat_p384_scalar_mulx_u64(x260, 0xffffffffffffffff);
576 let (x264, x265) = fiat_p384_scalar_mulx_u64(x260, 0xffffffffffffffff);
577 let (x266, x267) = fiat_p384_scalar_mulx_u64(x260, 0xffffffffffffffff);
578 let (x268, x269) = fiat_p384_scalar_mulx_u64(x260, 0xc7634d81f4372ddf);
579 let (x270, x271) = fiat_p384_scalar_mulx_u64(x260, 0x581a0db248b0a77a);
580 let (x272, x273) = fiat_p384_scalar_mulx_u64(x260, 0xecec196accc52973);
581 let (x274, x275) = fiat_p384_scalar_addcarryx_u64(0x0, x273, x270);
582 let (x276, x277) = fiat_p384_scalar_addcarryx_u64(x275, x271, x268);
583 let (x278, x279) = fiat_p384_scalar_addcarryx_u64(x277, x269, x266);
584 let (x280, x281) = fiat_p384_scalar_addcarryx_u64(x279, x267, x264);
585 let (x282, x283) = fiat_p384_scalar_addcarryx_u64(x281, x265, x262);
586 let x284: u64 = ((x283 as u64) + x263);
587 let (x285, x286) = fiat_p384_scalar_addcarryx_u64(0x0, x246, x272);
588 let (x287, x288) = fiat_p384_scalar_addcarryx_u64(x286, x248, x274);
589 let (x289, x290) = fiat_p384_scalar_addcarryx_u64(x288, x250, x276);
590 let (x291, x292) = fiat_p384_scalar_addcarryx_u64(x290, x252, x278);
591 let (x293, x294) = fiat_p384_scalar_addcarryx_u64(x292, x254, x280);
592 let (x295, x296) = fiat_p384_scalar_addcarryx_u64(x294, x256, x282);
593 let (x297, x298) = fiat_p384_scalar_addcarryx_u64(x296, x258, x284);
594 let x299: u64 = ((x298 as u64) + (x259 as u64));
595 let (x300, x301) = fiat_p384_scalar_mulx_u64(x4, (arg1[5]));
596 let (x302, x303) = fiat_p384_scalar_mulx_u64(x4, (arg1[4]));
597 let (x304, x305) = fiat_p384_scalar_mulx_u64(x4, (arg1[3]));
598 let (x306, x307) = fiat_p384_scalar_mulx_u64(x4, (arg1[2]));
599 let (x308, x309) = fiat_p384_scalar_mulx_u64(x4, (arg1[1]));
600 let (x310, x311) = fiat_p384_scalar_mulx_u64(x4, (arg1[0]));
601 let (x312, x313) = fiat_p384_scalar_addcarryx_u64(0x0, x311, x308);
602 let (x314, x315) = fiat_p384_scalar_addcarryx_u64(x313, x309, x306);
603 let (x316, x317) = fiat_p384_scalar_addcarryx_u64(x315, x307, x304);
604 let (x318, x319) = fiat_p384_scalar_addcarryx_u64(x317, x305, x302);
605 let (x320, x321) = fiat_p384_scalar_addcarryx_u64(x319, x303, x300);
606 let x322: u64 = ((x321 as u64) + x301);
607 let (x323, x324) = fiat_p384_scalar_addcarryx_u64(0x0, x287, x310);
608 let (x325, x326) = fiat_p384_scalar_addcarryx_u64(x324, x289, x312);
609 let (x327, x328) = fiat_p384_scalar_addcarryx_u64(x326, x291, x314);
610 let (x329, x330) = fiat_p384_scalar_addcarryx_u64(x328, x293, x316);
611 let (x331, x332) = fiat_p384_scalar_addcarryx_u64(x330, x295, x318);
612 let (x333, x334) = fiat_p384_scalar_addcarryx_u64(x332, x297, x320);
613 let (x335, x336) = fiat_p384_scalar_addcarryx_u64(x334, x299, x322);
614 let (x337, x338) = fiat_p384_scalar_mulx_u64(x323, 0x6ed46089e88fdc45);
615 let (x339, x340) = fiat_p384_scalar_mulx_u64(x337, 0xffffffffffffffff);
616 let (x341, x342) = fiat_p384_scalar_mulx_u64(x337, 0xffffffffffffffff);
617 let (x343, x344) = fiat_p384_scalar_mulx_u64(x337, 0xffffffffffffffff);
618 let (x345, x346) = fiat_p384_scalar_mulx_u64(x337, 0xc7634d81f4372ddf);
619 let (x347, x348) = fiat_p384_scalar_mulx_u64(x337, 0x581a0db248b0a77a);
620 let (x349, x350) = fiat_p384_scalar_mulx_u64(x337, 0xecec196accc52973);
621 let (x351, x352) = fiat_p384_scalar_addcarryx_u64(0x0, x350, x347);
622 let (x353, x354) = fiat_p384_scalar_addcarryx_u64(x352, x348, x345);
623 let (x355, x356) = fiat_p384_scalar_addcarryx_u64(x354, x346, x343);
624 let (x357, x358) = fiat_p384_scalar_addcarryx_u64(x356, x344, x341);
625 let (x359, x360) = fiat_p384_scalar_addcarryx_u64(x358, x342, x339);
626 let x361: u64 = ((x360 as u64) + x340);
627 let (x362, x363) = fiat_p384_scalar_addcarryx_u64(0x0, x323, x349);
628 let (x364, x365) = fiat_p384_scalar_addcarryx_u64(x363, x325, x351);
629 let (x366, x367) = fiat_p384_scalar_addcarryx_u64(x365, x327, x353);
630 let (x368, x369) = fiat_p384_scalar_addcarryx_u64(x367, x329, x355);
631 let (x370, x371) = fiat_p384_scalar_addcarryx_u64(x369, x331, x357);
632 let (x372, x373) = fiat_p384_scalar_addcarryx_u64(x371, x333, x359);
633 let (x374, x375) = fiat_p384_scalar_addcarryx_u64(x373, x335, x361);
634 let x376: u64 = ((x375 as u64) + (x336 as u64));
635 let (x377, x378) = fiat_p384_scalar_mulx_u64(x5, (arg1[5]));
636 let (x379, x380) = fiat_p384_scalar_mulx_u64(x5, (arg1[4]));
637 let (x381, x382) = fiat_p384_scalar_mulx_u64(x5, (arg1[3]));
638 let (x383, x384) = fiat_p384_scalar_mulx_u64(x5, (arg1[2]));
639 let (x385, x386) = fiat_p384_scalar_mulx_u64(x5, (arg1[1]));
640 let (x387, x388) = fiat_p384_scalar_mulx_u64(x5, (arg1[0]));
641 let (x389, x390) = fiat_p384_scalar_addcarryx_u64(0x0, x388, x385);
642 let (x391, x392) = fiat_p384_scalar_addcarryx_u64(x390, x386, x383);
643 let (x393, x394) = fiat_p384_scalar_addcarryx_u64(x392, x384, x381);
644 let (x395, x396) = fiat_p384_scalar_addcarryx_u64(x394, x382, x379);
645 let (x397, x398) = fiat_p384_scalar_addcarryx_u64(x396, x380, x377);
646 let x399: u64 = ((x398 as u64) + x378);
647 let (x400, x401) = fiat_p384_scalar_addcarryx_u64(0x0, x364, x387);
648 let (x402, x403) = fiat_p384_scalar_addcarryx_u64(x401, x366, x389);
649 let (x404, x405) = fiat_p384_scalar_addcarryx_u64(x403, x368, x391);
650 let (x406, x407) = fiat_p384_scalar_addcarryx_u64(x405, x370, x393);
651 let (x408, x409) = fiat_p384_scalar_addcarryx_u64(x407, x372, x395);
652 let (x410, x411) = fiat_p384_scalar_addcarryx_u64(x409, x374, x397);
653 let (x412, x413) = fiat_p384_scalar_addcarryx_u64(x411, x376, x399);
654 let (x414, x415) = fiat_p384_scalar_mulx_u64(x400, 0x6ed46089e88fdc45);
655 let (x416, x417) = fiat_p384_scalar_mulx_u64(x414, 0xffffffffffffffff);
656 let (x418, x419) = fiat_p384_scalar_mulx_u64(x414, 0xffffffffffffffff);
657 let (x420, x421) = fiat_p384_scalar_mulx_u64(x414, 0xffffffffffffffff);
658 let (x422, x423) = fiat_p384_scalar_mulx_u64(x414, 0xc7634d81f4372ddf);
659 let (x424, x425) = fiat_p384_scalar_mulx_u64(x414, 0x581a0db248b0a77a);
660 let (x426, x427) = fiat_p384_scalar_mulx_u64(x414, 0xecec196accc52973);
661 let (x428, x429) = fiat_p384_scalar_addcarryx_u64(0x0, x427, x424);
662 let (x430, x431) = fiat_p384_scalar_addcarryx_u64(x429, x425, x422);
663 let (x432, x433) = fiat_p384_scalar_addcarryx_u64(x431, x423, x420);
664 let (x434, x435) = fiat_p384_scalar_addcarryx_u64(x433, x421, x418);
665 let (x436, x437) = fiat_p384_scalar_addcarryx_u64(x435, x419, x416);
666 let x438: u64 = ((x437 as u64) + x417);
667 let (x439, x440) = fiat_p384_scalar_addcarryx_u64(0x0, x400, x426);
668 let (x441, x442) = fiat_p384_scalar_addcarryx_u64(x440, x402, x428);
669 let (x443, x444) = fiat_p384_scalar_addcarryx_u64(x442, x404, x430);
670 let (x445, x446) = fiat_p384_scalar_addcarryx_u64(x444, x406, x432);
671 let (x447, x448) = fiat_p384_scalar_addcarryx_u64(x446, x408, x434);
672 let (x449, x450) = fiat_p384_scalar_addcarryx_u64(x448, x410, x436);
673 let (x451, x452) = fiat_p384_scalar_addcarryx_u64(x450, x412, x438);
674 let x453: u64 = ((x452 as u64) + (x413 as u64));
675 let (x454, x455) = fiat_p384_scalar_subborrowx_u64(0x0, x441, 0xecec196accc52973);
676 let (x456, x457) = fiat_p384_scalar_subborrowx_u64(x455, x443, 0x581a0db248b0a77a);
677 let (x458, x459) = fiat_p384_scalar_subborrowx_u64(x457, x445, 0xc7634d81f4372ddf);
678 let (x460, x461) = fiat_p384_scalar_subborrowx_u64(x459, x447, 0xffffffffffffffff);
679 let (x462, x463) = fiat_p384_scalar_subborrowx_u64(x461, x449, 0xffffffffffffffff);
680 let (x464, x465) = fiat_p384_scalar_subborrowx_u64(x463, x451, 0xffffffffffffffff);
681 let (x466, x467) = fiat_p384_scalar_subborrowx_u64(x465, x453, 0x0_u64);
682 let (x468) = fiat_p384_scalar_cmovznz_u64(x467, x454, x441);
683 let (x469) = fiat_p384_scalar_cmovznz_u64(x467, x456, x443);
684 let (x470) = fiat_p384_scalar_cmovznz_u64(x467, x458, x445);
685 let (x471) = fiat_p384_scalar_cmovznz_u64(x467, x460, x447);
686 let (x472) = fiat_p384_scalar_cmovznz_u64(x467, x462, x449);
687 let (x473) = fiat_p384_scalar_cmovznz_u64(x467, x464, x451);
688 out1[0] = x468;
689 out1[1] = x469;
690 out1[2] = x470;
691 out1[3] = x471;
692 out1[4] = x472;
693 out1[5] = x473;
694 out1
695}
696#[doc = " The function fiat_p384_scalar_add adds two field elements in the Montgomery"]
697#[doc = " domain."]
698#[doc = ""]
699#[doc = " Preconditions:"]
700#[doc = " 0 ≤ eval arg1 < m"]
701#[doc = " 0 ≤ eval arg2 < m"]
702#[doc = " Postconditions:"]
703#[doc = " eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) + eval"]
704#[doc = " (from_montgomery arg2)) mod m 0 ≤ eval out1 < m"]
705#[inline]
706pub const fn fiat_p384_scalar_add(
707 arg1: &fiat_p384_scalar_montgomery_domain_field_element,
708 arg2: &fiat_p384_scalar_montgomery_domain_field_element,
709) -> fiat_p384_scalar_montgomery_domain_field_element {
710 let mut out1: fiat_p384_scalar_montgomery_domain_field_element = [0; 6];
711 let (x1, x2) = fiat_p384_scalar_addcarryx_u64(0x0, (arg1[0]), (arg2[0]));
712 let (x3, x4) = fiat_p384_scalar_addcarryx_u64(x2, (arg1[1]), (arg2[1]));
713 let (x5, x6) = fiat_p384_scalar_addcarryx_u64(x4, (arg1[2]), (arg2[2]));
714 let (x7, x8) = fiat_p384_scalar_addcarryx_u64(x6, (arg1[3]), (arg2[3]));
715 let (x9, x10) = fiat_p384_scalar_addcarryx_u64(x8, (arg1[4]), (arg2[4]));
716 let (x11, x12) = fiat_p384_scalar_addcarryx_u64(x10, (arg1[5]), (arg2[5]));
717 let (x13, x14) = fiat_p384_scalar_subborrowx_u64(0x0, x1, 0xecec196accc52973);
718 let (x15, x16) = fiat_p384_scalar_subborrowx_u64(x14, x3, 0x581a0db248b0a77a);
719 let (x17, x18) = fiat_p384_scalar_subborrowx_u64(x16, x5, 0xc7634d81f4372ddf);
720 let (x19, x20) = fiat_p384_scalar_subborrowx_u64(x18, x7, 0xffffffffffffffff);
721 let (x21, x22) = fiat_p384_scalar_subborrowx_u64(x20, x9, 0xffffffffffffffff);
722 let (x23, x24) = fiat_p384_scalar_subborrowx_u64(x22, x11, 0xffffffffffffffff);
723 let (x25, x26) = fiat_p384_scalar_subborrowx_u64(x24, (x12 as u64), 0x0_u64);
724 let (x27) = fiat_p384_scalar_cmovznz_u64(x26, x13, x1);
725 let (x28) = fiat_p384_scalar_cmovznz_u64(x26, x15, x3);
726 let (x29) = fiat_p384_scalar_cmovznz_u64(x26, x17, x5);
727 let (x30) = fiat_p384_scalar_cmovznz_u64(x26, x19, x7);
728 let (x31) = fiat_p384_scalar_cmovznz_u64(x26, x21, x9);
729 let (x32) = fiat_p384_scalar_cmovznz_u64(x26, x23, x11);
730 out1[0] = x27;
731 out1[1] = x28;
732 out1[2] = x29;
733 out1[3] = x30;
734 out1[4] = x31;
735 out1[5] = x32;
736 out1
737}
738#[doc = " The function fiat_p384_scalar_sub subtracts two field elements in the"]
739#[doc = " Montgomery domain."]
740#[doc = ""]
741#[doc = " Preconditions:"]
742#[doc = " 0 ≤ eval arg1 < m"]
743#[doc = " 0 ≤ eval arg2 < m"]
744#[doc = " Postconditions:"]
745#[doc = " eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) - eval"]
746#[doc = " (from_montgomery arg2)) mod m 0 ≤ eval out1 < m"]
747#[inline]
748pub const fn fiat_p384_scalar_sub(
749 arg1: &fiat_p384_scalar_montgomery_domain_field_element,
750 arg2: &fiat_p384_scalar_montgomery_domain_field_element,
751) -> fiat_p384_scalar_montgomery_domain_field_element {
752 let mut out1: fiat_p384_scalar_montgomery_domain_field_element = [0; 6];
753 let (x1, x2) = fiat_p384_scalar_subborrowx_u64(0x0, (arg1[0]), (arg2[0]));
754 let (x3, x4) = fiat_p384_scalar_subborrowx_u64(x2, (arg1[1]), (arg2[1]));
755 let (x5, x6) = fiat_p384_scalar_subborrowx_u64(x4, (arg1[2]), (arg2[2]));
756 let (x7, x8) = fiat_p384_scalar_subborrowx_u64(x6, (arg1[3]), (arg2[3]));
757 let (x9, x10) = fiat_p384_scalar_subborrowx_u64(x8, (arg1[4]), (arg2[4]));
758 let (x11, x12) = fiat_p384_scalar_subborrowx_u64(x10, (arg1[5]), (arg2[5]));
759 let (x13) = fiat_p384_scalar_cmovznz_u64(x12, 0x0_u64, 0xffffffffffffffff);
760 let (x14, x15) = fiat_p384_scalar_addcarryx_u64(0x0, x1, (x13 & 0xecec196accc52973));
761 let (x16, x17) = fiat_p384_scalar_addcarryx_u64(x15, x3, (x13 & 0x581a0db248b0a77a));
762 let (x18, x19) = fiat_p384_scalar_addcarryx_u64(x17, x5, (x13 & 0xc7634d81f4372ddf));
763 let (x20, x21) = fiat_p384_scalar_addcarryx_u64(x19, x7, x13);
764 let (x22, x23) = fiat_p384_scalar_addcarryx_u64(x21, x9, x13);
765 let (x24, x25) = fiat_p384_scalar_addcarryx_u64(x23, x11, x13);
766 out1[0] = x14;
767 out1[1] = x16;
768 out1[2] = x18;
769 out1[3] = x20;
770 out1[4] = x22;
771 out1[5] = x24;
772 out1
773}
774#[doc = " The function fiat_p384_scalar_opp negates a field element in the Montgomery"]
775#[doc = " domain."]
776#[doc = ""]
777#[doc = " Preconditions:"]
778#[doc = " 0 ≤ eval arg1 < m"]
779#[doc = " Postconditions:"]
780#[doc = " eval (from_montgomery out1) mod m = -eval (from_montgomery arg1) mod m"]
781#[doc = " 0 ≤ eval out1 < m"]
782#[inline]
783pub const fn fiat_p384_scalar_opp(
784 arg1: &fiat_p384_scalar_montgomery_domain_field_element,
785) -> fiat_p384_scalar_montgomery_domain_field_element {
786 let mut out1: fiat_p384_scalar_montgomery_domain_field_element = [0; 6];
787 let (x1, x2) = fiat_p384_scalar_subborrowx_u64(0x0, 0x0_u64, (arg1[0]));
788 let (x3, x4) = fiat_p384_scalar_subborrowx_u64(x2, 0x0_u64, (arg1[1]));
789 let (x5, x6) = fiat_p384_scalar_subborrowx_u64(x4, 0x0_u64, (arg1[2]));
790 let (x7, x8) = fiat_p384_scalar_subborrowx_u64(x6, 0x0_u64, (arg1[3]));
791 let (x9, x10) = fiat_p384_scalar_subborrowx_u64(x8, 0x0_u64, (arg1[4]));
792 let (x11, x12) = fiat_p384_scalar_subborrowx_u64(x10, 0x0_u64, (arg1[5]));
793 let (x13) = fiat_p384_scalar_cmovznz_u64(x12, 0x0_u64, 0xffffffffffffffff);
794 let (x14, x15) = fiat_p384_scalar_addcarryx_u64(0x0, x1, (x13 & 0xecec196accc52973));
795 let (x16, x17) = fiat_p384_scalar_addcarryx_u64(x15, x3, (x13 & 0x581a0db248b0a77a));
796 let (x18, x19) = fiat_p384_scalar_addcarryx_u64(x17, x5, (x13 & 0xc7634d81f4372ddf));
797 let (x20, x21) = fiat_p384_scalar_addcarryx_u64(x19, x7, x13);
798 let (x22, x23) = fiat_p384_scalar_addcarryx_u64(x21, x9, x13);
799 let (x24, x25) = fiat_p384_scalar_addcarryx_u64(x23, x11, x13);
800 out1[0] = x14;
801 out1[1] = x16;
802 out1[2] = x18;
803 out1[3] = x20;
804 out1[4] = x22;
805 out1[5] = x24;
806 out1
807}
808#[doc = " The function fiat_p384_scalar_from_montgomery translates a field element out"]
809#[doc = " of the Montgomery domain."]
810#[doc = ""]
811#[doc = " Preconditions:"]
812#[doc = " 0 ≤ eval arg1 < m"]
813#[doc = " Postconditions:"]
814#[doc = " eval out1 mod m = (eval arg1 * ((2^64)⁻¹ mod m)^6) mod m"]
815#[doc = " 0 ≤ eval out1 < m"]
816#[inline]
817pub const fn fiat_p384_scalar_from_montgomery(
818 arg1: &fiat_p384_scalar_montgomery_domain_field_element,
819) -> fiat_p384_scalar_non_montgomery_domain_field_element {
820 let mut out1: fiat_p384_scalar_non_montgomery_domain_field_element = [0; 6];
821 let x1: u64 = (arg1[0]);
822 let (x2, x3) = fiat_p384_scalar_mulx_u64(x1, 0x6ed46089e88fdc45);
823 let (x4, x5) = fiat_p384_scalar_mulx_u64(x2, 0xffffffffffffffff);
824 let (x6, x7) = fiat_p384_scalar_mulx_u64(x2, 0xffffffffffffffff);
825 let (x8, x9) = fiat_p384_scalar_mulx_u64(x2, 0xffffffffffffffff);
826 let (x10, x11) = fiat_p384_scalar_mulx_u64(x2, 0xc7634d81f4372ddf);
827 let (x12, x13) = fiat_p384_scalar_mulx_u64(x2, 0x581a0db248b0a77a);
828 let (x14, x15) = fiat_p384_scalar_mulx_u64(x2, 0xecec196accc52973);
829 let (x16, x17) = fiat_p384_scalar_addcarryx_u64(0x0, x15, x12);
830 let (x18, x19) = fiat_p384_scalar_addcarryx_u64(x17, x13, x10);
831 let (x20, x21) = fiat_p384_scalar_addcarryx_u64(x19, x11, x8);
832 let (x22, x23) = fiat_p384_scalar_addcarryx_u64(x21, x9, x6);
833 let (x24, x25) = fiat_p384_scalar_addcarryx_u64(x23, x7, x4);
834 let (x26, x27) = fiat_p384_scalar_addcarryx_u64(0x0, x1, x14);
835 let (x28, x29) = fiat_p384_scalar_addcarryx_u64(x27, 0x0_u64, x16);
836 let (x30, x31) = fiat_p384_scalar_addcarryx_u64(x29, 0x0_u64, x18);
837 let (x32, x33) = fiat_p384_scalar_addcarryx_u64(x31, 0x0_u64, x20);
838 let (x34, x35) = fiat_p384_scalar_addcarryx_u64(x33, 0x0_u64, x22);
839 let (x36, x37) = fiat_p384_scalar_addcarryx_u64(x35, 0x0_u64, x24);
840 let (x38, x39) = fiat_p384_scalar_addcarryx_u64(x37, 0x0_u64, ((x25 as u64) + x5));
841 let (x40, x41) = fiat_p384_scalar_addcarryx_u64(0x0, x28, (arg1[1]));
842 let (x42, x43) = fiat_p384_scalar_addcarryx_u64(x41, x30, 0x0_u64);
843 let (x44, x45) = fiat_p384_scalar_addcarryx_u64(x43, x32, 0x0_u64);
844 let (x46, x47) = fiat_p384_scalar_addcarryx_u64(x45, x34, 0x0_u64);
845 let (x48, x49) = fiat_p384_scalar_addcarryx_u64(x47, x36, 0x0_u64);
846 let (x50, x51) = fiat_p384_scalar_addcarryx_u64(x49, x38, 0x0_u64);
847 let (x52, x53) = fiat_p384_scalar_mulx_u64(x40, 0x6ed46089e88fdc45);
848 let (x54, x55) = fiat_p384_scalar_mulx_u64(x52, 0xffffffffffffffff);
849 let (x56, x57) = fiat_p384_scalar_mulx_u64(x52, 0xffffffffffffffff);
850 let (x58, x59) = fiat_p384_scalar_mulx_u64(x52, 0xffffffffffffffff);
851 let (x60, x61) = fiat_p384_scalar_mulx_u64(x52, 0xc7634d81f4372ddf);
852 let (x62, x63) = fiat_p384_scalar_mulx_u64(x52, 0x581a0db248b0a77a);
853 let (x64, x65) = fiat_p384_scalar_mulx_u64(x52, 0xecec196accc52973);
854 let (x66, x67) = fiat_p384_scalar_addcarryx_u64(0x0, x65, x62);
855 let (x68, x69) = fiat_p384_scalar_addcarryx_u64(x67, x63, x60);
856 let (x70, x71) = fiat_p384_scalar_addcarryx_u64(x69, x61, x58);
857 let (x72, x73) = fiat_p384_scalar_addcarryx_u64(x71, x59, x56);
858 let (x74, x75) = fiat_p384_scalar_addcarryx_u64(x73, x57, x54);
859 let (x76, x77) = fiat_p384_scalar_addcarryx_u64(0x0, x40, x64);
860 let (x78, x79) = fiat_p384_scalar_addcarryx_u64(x77, x42, x66);
861 let (x80, x81) = fiat_p384_scalar_addcarryx_u64(x79, x44, x68);
862 let (x82, x83) = fiat_p384_scalar_addcarryx_u64(x81, x46, x70);
863 let (x84, x85) = fiat_p384_scalar_addcarryx_u64(x83, x48, x72);
864 let (x86, x87) = fiat_p384_scalar_addcarryx_u64(x85, x50, x74);
865 let (x88, x89) =
866 fiat_p384_scalar_addcarryx_u64(x87, ((x51 as u64) + (x39 as u64)), ((x75 as u64) + x55));
867 let (x90, x91) = fiat_p384_scalar_addcarryx_u64(0x0, x78, (arg1[2]));
868 let (x92, x93) = fiat_p384_scalar_addcarryx_u64(x91, x80, 0x0_u64);
869 let (x94, x95) = fiat_p384_scalar_addcarryx_u64(x93, x82, 0x0_u64);
870 let (x96, x97) = fiat_p384_scalar_addcarryx_u64(x95, x84, 0x0_u64);
871 let (x98, x99) = fiat_p384_scalar_addcarryx_u64(x97, x86, 0x0_u64);
872 let (x100, x101) = fiat_p384_scalar_addcarryx_u64(x99, x88, 0x0_u64);
873 let (x102, x103) = fiat_p384_scalar_mulx_u64(x90, 0x6ed46089e88fdc45);
874 let (x104, x105) = fiat_p384_scalar_mulx_u64(x102, 0xffffffffffffffff);
875 let (x106, x107) = fiat_p384_scalar_mulx_u64(x102, 0xffffffffffffffff);
876 let (x108, x109) = fiat_p384_scalar_mulx_u64(x102, 0xffffffffffffffff);
877 let (x110, x111) = fiat_p384_scalar_mulx_u64(x102, 0xc7634d81f4372ddf);
878 let (x112, x113) = fiat_p384_scalar_mulx_u64(x102, 0x581a0db248b0a77a);
879 let (x114, x115) = fiat_p384_scalar_mulx_u64(x102, 0xecec196accc52973);
880 let (x116, x117) = fiat_p384_scalar_addcarryx_u64(0x0, x115, x112);
881 let (x118, x119) = fiat_p384_scalar_addcarryx_u64(x117, x113, x110);
882 let (x120, x121) = fiat_p384_scalar_addcarryx_u64(x119, x111, x108);
883 let (x122, x123) = fiat_p384_scalar_addcarryx_u64(x121, x109, x106);
884 let (x124, x125) = fiat_p384_scalar_addcarryx_u64(x123, x107, x104);
885 let (x126, x127) = fiat_p384_scalar_addcarryx_u64(0x0, x90, x114);
886 let (x128, x129) = fiat_p384_scalar_addcarryx_u64(x127, x92, x116);
887 let (x130, x131) = fiat_p384_scalar_addcarryx_u64(x129, x94, x118);
888 let (x132, x133) = fiat_p384_scalar_addcarryx_u64(x131, x96, x120);
889 let (x134, x135) = fiat_p384_scalar_addcarryx_u64(x133, x98, x122);
890 let (x136, x137) = fiat_p384_scalar_addcarryx_u64(x135, x100, x124);
891 let (x138, x139) = fiat_p384_scalar_addcarryx_u64(
892 x137,
893 ((x101 as u64) + (x89 as u64)),
894 ((x125 as u64) + x105),
895 );
896 let (x140, x141) = fiat_p384_scalar_addcarryx_u64(0x0, x128, (arg1[3]));
897 let (x142, x143) = fiat_p384_scalar_addcarryx_u64(x141, x130, 0x0_u64);
898 let (x144, x145) = fiat_p384_scalar_addcarryx_u64(x143, x132, 0x0_u64);
899 let (x146, x147) = fiat_p384_scalar_addcarryx_u64(x145, x134, 0x0_u64);
900 let (x148, x149) = fiat_p384_scalar_addcarryx_u64(x147, x136, 0x0_u64);
901 let (x150, x151) = fiat_p384_scalar_addcarryx_u64(x149, x138, 0x0_u64);
902 let (x152, x153) = fiat_p384_scalar_mulx_u64(x140, 0x6ed46089e88fdc45);
903 let (x154, x155) = fiat_p384_scalar_mulx_u64(x152, 0xffffffffffffffff);
904 let (x156, x157) = fiat_p384_scalar_mulx_u64(x152, 0xffffffffffffffff);
905 let (x158, x159) = fiat_p384_scalar_mulx_u64(x152, 0xffffffffffffffff);
906 let (x160, x161) = fiat_p384_scalar_mulx_u64(x152, 0xc7634d81f4372ddf);
907 let (x162, x163) = fiat_p384_scalar_mulx_u64(x152, 0x581a0db248b0a77a);
908 let (x164, x165) = fiat_p384_scalar_mulx_u64(x152, 0xecec196accc52973);
909 let (x166, x167) = fiat_p384_scalar_addcarryx_u64(0x0, x165, x162);
910 let (x168, x169) = fiat_p384_scalar_addcarryx_u64(x167, x163, x160);
911 let (x170, x171) = fiat_p384_scalar_addcarryx_u64(x169, x161, x158);
912 let (x172, x173) = fiat_p384_scalar_addcarryx_u64(x171, x159, x156);
913 let (x174, x175) = fiat_p384_scalar_addcarryx_u64(x173, x157, x154);
914 let (x176, x177) = fiat_p384_scalar_addcarryx_u64(0x0, x140, x164);
915 let (x178, x179) = fiat_p384_scalar_addcarryx_u64(x177, x142, x166);
916 let (x180, x181) = fiat_p384_scalar_addcarryx_u64(x179, x144, x168);
917 let (x182, x183) = fiat_p384_scalar_addcarryx_u64(x181, x146, x170);
918 let (x184, x185) = fiat_p384_scalar_addcarryx_u64(x183, x148, x172);
919 let (x186, x187) = fiat_p384_scalar_addcarryx_u64(x185, x150, x174);
920 let (x188, x189) = fiat_p384_scalar_addcarryx_u64(
921 x187,
922 ((x151 as u64) + (x139 as u64)),
923 ((x175 as u64) + x155),
924 );
925 let (x190, x191) = fiat_p384_scalar_addcarryx_u64(0x0, x178, (arg1[4]));
926 let (x192, x193) = fiat_p384_scalar_addcarryx_u64(x191, x180, 0x0_u64);
927 let (x194, x195) = fiat_p384_scalar_addcarryx_u64(x193, x182, 0x0_u64);
928 let (x196, x197) = fiat_p384_scalar_addcarryx_u64(x195, x184, 0x0_u64);
929 let (x198, x199) = fiat_p384_scalar_addcarryx_u64(x197, x186, 0x0_u64);
930 let (x200, x201) = fiat_p384_scalar_addcarryx_u64(x199, x188, 0x0_u64);
931 let (x202, x203) = fiat_p384_scalar_mulx_u64(x190, 0x6ed46089e88fdc45);
932 let (x204, x205) = fiat_p384_scalar_mulx_u64(x202, 0xffffffffffffffff);
933 let (x206, x207) = fiat_p384_scalar_mulx_u64(x202, 0xffffffffffffffff);
934 let (x208, x209) = fiat_p384_scalar_mulx_u64(x202, 0xffffffffffffffff);
935 let (x210, x211) = fiat_p384_scalar_mulx_u64(x202, 0xc7634d81f4372ddf);
936 let (x212, x213) = fiat_p384_scalar_mulx_u64(x202, 0x581a0db248b0a77a);
937 let (x214, x215) = fiat_p384_scalar_mulx_u64(x202, 0xecec196accc52973);
938 let (x216, x217) = fiat_p384_scalar_addcarryx_u64(0x0, x215, x212);
939 let (x218, x219) = fiat_p384_scalar_addcarryx_u64(x217, x213, x210);
940 let (x220, x221) = fiat_p384_scalar_addcarryx_u64(x219, x211, x208);
941 let (x222, x223) = fiat_p384_scalar_addcarryx_u64(x221, x209, x206);
942 let (x224, x225) = fiat_p384_scalar_addcarryx_u64(x223, x207, x204);
943 let (x226, x227) = fiat_p384_scalar_addcarryx_u64(0x0, x190, x214);
944 let (x228, x229) = fiat_p384_scalar_addcarryx_u64(x227, x192, x216);
945 let (x230, x231) = fiat_p384_scalar_addcarryx_u64(x229, x194, x218);
946 let (x232, x233) = fiat_p384_scalar_addcarryx_u64(x231, x196, x220);
947 let (x234, x235) = fiat_p384_scalar_addcarryx_u64(x233, x198, x222);
948 let (x236, x237) = fiat_p384_scalar_addcarryx_u64(x235, x200, x224);
949 let (x238, x239) = fiat_p384_scalar_addcarryx_u64(
950 x237,
951 ((x201 as u64) + (x189 as u64)),
952 ((x225 as u64) + x205),
953 );
954 let (x240, x241) = fiat_p384_scalar_addcarryx_u64(0x0, x228, (arg1[5]));
955 let (x242, x243) = fiat_p384_scalar_addcarryx_u64(x241, x230, 0x0_u64);
956 let (x244, x245) = fiat_p384_scalar_addcarryx_u64(x243, x232, 0x0_u64);
957 let (x246, x247) = fiat_p384_scalar_addcarryx_u64(x245, x234, 0x0_u64);
958 let (x248, x249) = fiat_p384_scalar_addcarryx_u64(x247, x236, 0x0_u64);
959 let (x250, x251) = fiat_p384_scalar_addcarryx_u64(x249, x238, 0x0_u64);
960 let (x252, x253) = fiat_p384_scalar_mulx_u64(x240, 0x6ed46089e88fdc45);
961 let (x254, x255) = fiat_p384_scalar_mulx_u64(x252, 0xffffffffffffffff);
962 let (x256, x257) = fiat_p384_scalar_mulx_u64(x252, 0xffffffffffffffff);
963 let (x258, x259) = fiat_p384_scalar_mulx_u64(x252, 0xffffffffffffffff);
964 let (x260, x261) = fiat_p384_scalar_mulx_u64(x252, 0xc7634d81f4372ddf);
965 let (x262, x263) = fiat_p384_scalar_mulx_u64(x252, 0x581a0db248b0a77a);
966 let (x264, x265) = fiat_p384_scalar_mulx_u64(x252, 0xecec196accc52973);
967 let (x266, x267) = fiat_p384_scalar_addcarryx_u64(0x0, x265, x262);
968 let (x268, x269) = fiat_p384_scalar_addcarryx_u64(x267, x263, x260);
969 let (x270, x271) = fiat_p384_scalar_addcarryx_u64(x269, x261, x258);
970 let (x272, x273) = fiat_p384_scalar_addcarryx_u64(x271, x259, x256);
971 let (x274, x275) = fiat_p384_scalar_addcarryx_u64(x273, x257, x254);
972 let (x276, x277) = fiat_p384_scalar_addcarryx_u64(0x0, x240, x264);
973 let (x278, x279) = fiat_p384_scalar_addcarryx_u64(x277, x242, x266);
974 let (x280, x281) = fiat_p384_scalar_addcarryx_u64(x279, x244, x268);
975 let (x282, x283) = fiat_p384_scalar_addcarryx_u64(x281, x246, x270);
976 let (x284, x285) = fiat_p384_scalar_addcarryx_u64(x283, x248, x272);
977 let (x286, x287) = fiat_p384_scalar_addcarryx_u64(x285, x250, x274);
978 let (x288, x289) = fiat_p384_scalar_addcarryx_u64(
979 x287,
980 ((x251 as u64) + (x239 as u64)),
981 ((x275 as u64) + x255),
982 );
983 let (x290, x291) = fiat_p384_scalar_subborrowx_u64(0x0, x278, 0xecec196accc52973);
984 let (x292, x293) = fiat_p384_scalar_subborrowx_u64(x291, x280, 0x581a0db248b0a77a);
985 let (x294, x295) = fiat_p384_scalar_subborrowx_u64(x293, x282, 0xc7634d81f4372ddf);
986 let (x296, x297) = fiat_p384_scalar_subborrowx_u64(x295, x284, 0xffffffffffffffff);
987 let (x298, x299) = fiat_p384_scalar_subborrowx_u64(x297, x286, 0xffffffffffffffff);
988 let (x300, x301) = fiat_p384_scalar_subborrowx_u64(x299, x288, 0xffffffffffffffff);
989 let (x302, x303) = fiat_p384_scalar_subborrowx_u64(x301, (x289 as u64), 0x0_u64);
990 let (x304) = fiat_p384_scalar_cmovznz_u64(x303, x290, x278);
991 let (x305) = fiat_p384_scalar_cmovznz_u64(x303, x292, x280);
992 let (x306) = fiat_p384_scalar_cmovznz_u64(x303, x294, x282);
993 let (x307) = fiat_p384_scalar_cmovznz_u64(x303, x296, x284);
994 let (x308) = fiat_p384_scalar_cmovznz_u64(x303, x298, x286);
995 let (x309) = fiat_p384_scalar_cmovznz_u64(x303, x300, x288);
996 out1[0] = x304;
997 out1[1] = x305;
998 out1[2] = x306;
999 out1[3] = x307;
1000 out1[4] = x308;
1001 out1[5] = x309;
1002 out1
1003}
1004#[doc = " The function fiat_p384_scalar_to_montgomery translates a field element into"]
1005#[doc = " the Montgomery domain."]
1006#[doc = ""]
1007#[doc = " Preconditions:"]
1008#[doc = " 0 ≤ eval arg1 < m"]
1009#[doc = " Postconditions:"]
1010#[doc = " eval (from_montgomery out1) mod m = eval arg1 mod m"]
1011#[doc = " 0 ≤ eval out1 < m"]
1012#[inline]
1013pub const fn fiat_p384_scalar_to_montgomery(
1014 arg1: &fiat_p384_scalar_non_montgomery_domain_field_element,
1015) -> fiat_p384_scalar_montgomery_domain_field_element {
1016 let mut out1: fiat_p384_scalar_montgomery_domain_field_element = [0; 6];
1017 let x1: u64 = (arg1[1]);
1018 let x2: u64 = (arg1[2]);
1019 let x3: u64 = (arg1[3]);
1020 let x4: u64 = (arg1[4]);
1021 let x5: u64 = (arg1[5]);
1022 let x6: u64 = (arg1[0]);
1023 let (x7, x8) = fiat_p384_scalar_mulx_u64(x6, 0xc84ee012b39bf21);
1024 let (x9, x10) = fiat_p384_scalar_mulx_u64(x6, 0x3fb05b7a28266895);
1025 let (x11, x12) = fiat_p384_scalar_mulx_u64(x6, 0xd40d49174aab1cc5);
1026 let (x13, x14) = fiat_p384_scalar_mulx_u64(x6, 0xbc3e483afcb82947);
1027 let (x15, x16) = fiat_p384_scalar_mulx_u64(x6, 0xff3d81e5df1aa419);
1028 let (x17, x18) = fiat_p384_scalar_mulx_u64(x6, 0x2d319b2419b409a9);
1029 let (x19, x20) = fiat_p384_scalar_addcarryx_u64(0x0, x18, x15);
1030 let (x21, x22) = fiat_p384_scalar_addcarryx_u64(x20, x16, x13);
1031 let (x23, x24) = fiat_p384_scalar_addcarryx_u64(x22, x14, x11);
1032 let (x25, x26) = fiat_p384_scalar_addcarryx_u64(x24, x12, x9);
1033 let (x27, x28) = fiat_p384_scalar_addcarryx_u64(x26, x10, x7);
1034 let (x29, x30) = fiat_p384_scalar_mulx_u64(x17, 0x6ed46089e88fdc45);
1035 let (x31, x32) = fiat_p384_scalar_mulx_u64(x29, 0xffffffffffffffff);
1036 let (x33, x34) = fiat_p384_scalar_mulx_u64(x29, 0xffffffffffffffff);
1037 let (x35, x36) = fiat_p384_scalar_mulx_u64(x29, 0xffffffffffffffff);
1038 let (x37, x38) = fiat_p384_scalar_mulx_u64(x29, 0xc7634d81f4372ddf);
1039 let (x39, x40) = fiat_p384_scalar_mulx_u64(x29, 0x581a0db248b0a77a);
1040 let (x41, x42) = fiat_p384_scalar_mulx_u64(x29, 0xecec196accc52973);
1041 let (x43, x44) = fiat_p384_scalar_addcarryx_u64(0x0, x42, x39);
1042 let (x45, x46) = fiat_p384_scalar_addcarryx_u64(x44, x40, x37);
1043 let (x47, x48) = fiat_p384_scalar_addcarryx_u64(x46, x38, x35);
1044 let (x49, x50) = fiat_p384_scalar_addcarryx_u64(x48, x36, x33);
1045 let (x51, x52) = fiat_p384_scalar_addcarryx_u64(x50, x34, x31);
1046 let (x53, x54) = fiat_p384_scalar_addcarryx_u64(0x0, x17, x41);
1047 let (x55, x56) = fiat_p384_scalar_addcarryx_u64(x54, x19, x43);
1048 let (x57, x58) = fiat_p384_scalar_addcarryx_u64(x56, x21, x45);
1049 let (x59, x60) = fiat_p384_scalar_addcarryx_u64(x58, x23, x47);
1050 let (x61, x62) = fiat_p384_scalar_addcarryx_u64(x60, x25, x49);
1051 let (x63, x64) = fiat_p384_scalar_addcarryx_u64(x62, x27, x51);
1052 let (x65, x66) = fiat_p384_scalar_addcarryx_u64(x64, ((x28 as u64) + x8), ((x52 as u64) + x32));
1053 let (x67, x68) = fiat_p384_scalar_mulx_u64(x1, 0xc84ee012b39bf21);
1054 let (x69, x70) = fiat_p384_scalar_mulx_u64(x1, 0x3fb05b7a28266895);
1055 let (x71, x72) = fiat_p384_scalar_mulx_u64(x1, 0xd40d49174aab1cc5);
1056 let (x73, x74) = fiat_p384_scalar_mulx_u64(x1, 0xbc3e483afcb82947);
1057 let (x75, x76) = fiat_p384_scalar_mulx_u64(x1, 0xff3d81e5df1aa419);
1058 let (x77, x78) = fiat_p384_scalar_mulx_u64(x1, 0x2d319b2419b409a9);
1059 let (x79, x80) = fiat_p384_scalar_addcarryx_u64(0x0, x78, x75);
1060 let (x81, x82) = fiat_p384_scalar_addcarryx_u64(x80, x76, x73);
1061 let (x83, x84) = fiat_p384_scalar_addcarryx_u64(x82, x74, x71);
1062 let (x85, x86) = fiat_p384_scalar_addcarryx_u64(x84, x72, x69);
1063 let (x87, x88) = fiat_p384_scalar_addcarryx_u64(x86, x70, x67);
1064 let (x89, x90) = fiat_p384_scalar_addcarryx_u64(0x0, x55, x77);
1065 let (x91, x92) = fiat_p384_scalar_addcarryx_u64(x90, x57, x79);
1066 let (x93, x94) = fiat_p384_scalar_addcarryx_u64(x92, x59, x81);
1067 let (x95, x96) = fiat_p384_scalar_addcarryx_u64(x94, x61, x83);
1068 let (x97, x98) = fiat_p384_scalar_addcarryx_u64(x96, x63, x85);
1069 let (x99, x100) = fiat_p384_scalar_addcarryx_u64(x98, x65, x87);
1070 let (x101, x102) = fiat_p384_scalar_mulx_u64(x89, 0x6ed46089e88fdc45);
1071 let (x103, x104) = fiat_p384_scalar_mulx_u64(x101, 0xffffffffffffffff);
1072 let (x105, x106) = fiat_p384_scalar_mulx_u64(x101, 0xffffffffffffffff);
1073 let (x107, x108) = fiat_p384_scalar_mulx_u64(x101, 0xffffffffffffffff);
1074 let (x109, x110) = fiat_p384_scalar_mulx_u64(x101, 0xc7634d81f4372ddf);
1075 let (x111, x112) = fiat_p384_scalar_mulx_u64(x101, 0x581a0db248b0a77a);
1076 let (x113, x114) = fiat_p384_scalar_mulx_u64(x101, 0xecec196accc52973);
1077 let (x115, x116) = fiat_p384_scalar_addcarryx_u64(0x0, x114, x111);
1078 let (x117, x118) = fiat_p384_scalar_addcarryx_u64(x116, x112, x109);
1079 let (x119, x120) = fiat_p384_scalar_addcarryx_u64(x118, x110, x107);
1080 let (x121, x122) = fiat_p384_scalar_addcarryx_u64(x120, x108, x105);
1081 let (x123, x124) = fiat_p384_scalar_addcarryx_u64(x122, x106, x103);
1082 let (x125, x126) = fiat_p384_scalar_addcarryx_u64(0x0, x89, x113);
1083 let (x127, x128) = fiat_p384_scalar_addcarryx_u64(x126, x91, x115);
1084 let (x129, x130) = fiat_p384_scalar_addcarryx_u64(x128, x93, x117);
1085 let (x131, x132) = fiat_p384_scalar_addcarryx_u64(x130, x95, x119);
1086 let (x133, x134) = fiat_p384_scalar_addcarryx_u64(x132, x97, x121);
1087 let (x135, x136) = fiat_p384_scalar_addcarryx_u64(x134, x99, x123);
1088 let (x137, x138) = fiat_p384_scalar_addcarryx_u64(
1089 x136,
1090 (((x100 as u64) + (x66 as u64)) + ((x88 as u64) + x68)),
1091 ((x124 as u64) + x104),
1092 );
1093 let (x139, x140) = fiat_p384_scalar_mulx_u64(x2, 0xc84ee012b39bf21);
1094 let (x141, x142) = fiat_p384_scalar_mulx_u64(x2, 0x3fb05b7a28266895);
1095 let (x143, x144) = fiat_p384_scalar_mulx_u64(x2, 0xd40d49174aab1cc5);
1096 let (x145, x146) = fiat_p384_scalar_mulx_u64(x2, 0xbc3e483afcb82947);
1097 let (x147, x148) = fiat_p384_scalar_mulx_u64(x2, 0xff3d81e5df1aa419);
1098 let (x149, x150) = fiat_p384_scalar_mulx_u64(x2, 0x2d319b2419b409a9);
1099 let (x151, x152) = fiat_p384_scalar_addcarryx_u64(0x0, x150, x147);
1100 let (x153, x154) = fiat_p384_scalar_addcarryx_u64(x152, x148, x145);
1101 let (x155, x156) = fiat_p384_scalar_addcarryx_u64(x154, x146, x143);
1102 let (x157, x158) = fiat_p384_scalar_addcarryx_u64(x156, x144, x141);
1103 let (x159, x160) = fiat_p384_scalar_addcarryx_u64(x158, x142, x139);
1104 let (x161, x162) = fiat_p384_scalar_addcarryx_u64(0x0, x127, x149);
1105 let (x163, x164) = fiat_p384_scalar_addcarryx_u64(x162, x129, x151);
1106 let (x165, x166) = fiat_p384_scalar_addcarryx_u64(x164, x131, x153);
1107 let (x167, x168) = fiat_p384_scalar_addcarryx_u64(x166, x133, x155);
1108 let (x169, x170) = fiat_p384_scalar_addcarryx_u64(x168, x135, x157);
1109 let (x171, x172) = fiat_p384_scalar_addcarryx_u64(x170, x137, x159);
1110 let (x173, x174) = fiat_p384_scalar_mulx_u64(x161, 0x6ed46089e88fdc45);
1111 let (x175, x176) = fiat_p384_scalar_mulx_u64(x173, 0xffffffffffffffff);
1112 let (x177, x178) = fiat_p384_scalar_mulx_u64(x173, 0xffffffffffffffff);
1113 let (x179, x180) = fiat_p384_scalar_mulx_u64(x173, 0xffffffffffffffff);
1114 let (x181, x182) = fiat_p384_scalar_mulx_u64(x173, 0xc7634d81f4372ddf);
1115 let (x183, x184) = fiat_p384_scalar_mulx_u64(x173, 0x581a0db248b0a77a);
1116 let (x185, x186) = fiat_p384_scalar_mulx_u64(x173, 0xecec196accc52973);
1117 let (x187, x188) = fiat_p384_scalar_addcarryx_u64(0x0, x186, x183);
1118 let (x189, x190) = fiat_p384_scalar_addcarryx_u64(x188, x184, x181);
1119 let (x191, x192) = fiat_p384_scalar_addcarryx_u64(x190, x182, x179);
1120 let (x193, x194) = fiat_p384_scalar_addcarryx_u64(x192, x180, x177);
1121 let (x195, x196) = fiat_p384_scalar_addcarryx_u64(x194, x178, x175);
1122 let (x197, x198) = fiat_p384_scalar_addcarryx_u64(0x0, x161, x185);
1123 let (x199, x200) = fiat_p384_scalar_addcarryx_u64(x198, x163, x187);
1124 let (x201, x202) = fiat_p384_scalar_addcarryx_u64(x200, x165, x189);
1125 let (x203, x204) = fiat_p384_scalar_addcarryx_u64(x202, x167, x191);
1126 let (x205, x206) = fiat_p384_scalar_addcarryx_u64(x204, x169, x193);
1127 let (x207, x208) = fiat_p384_scalar_addcarryx_u64(x206, x171, x195);
1128 let (x209, x210) = fiat_p384_scalar_addcarryx_u64(
1129 x208,
1130 (((x172 as u64) + (x138 as u64)) + ((x160 as u64) + x140)),
1131 ((x196 as u64) + x176),
1132 );
1133 let (x211, x212) = fiat_p384_scalar_mulx_u64(x3, 0xc84ee012b39bf21);
1134 let (x213, x214) = fiat_p384_scalar_mulx_u64(x3, 0x3fb05b7a28266895);
1135 let (x215, x216) = fiat_p384_scalar_mulx_u64(x3, 0xd40d49174aab1cc5);
1136 let (x217, x218) = fiat_p384_scalar_mulx_u64(x3, 0xbc3e483afcb82947);
1137 let (x219, x220) = fiat_p384_scalar_mulx_u64(x3, 0xff3d81e5df1aa419);
1138 let (x221, x222) = fiat_p384_scalar_mulx_u64(x3, 0x2d319b2419b409a9);
1139 let (x223, x224) = fiat_p384_scalar_addcarryx_u64(0x0, x222, x219);
1140 let (x225, x226) = fiat_p384_scalar_addcarryx_u64(x224, x220, x217);
1141 let (x227, x228) = fiat_p384_scalar_addcarryx_u64(x226, x218, x215);
1142 let (x229, x230) = fiat_p384_scalar_addcarryx_u64(x228, x216, x213);
1143 let (x231, x232) = fiat_p384_scalar_addcarryx_u64(x230, x214, x211);
1144 let (x233, x234) = fiat_p384_scalar_addcarryx_u64(0x0, x199, x221);
1145 let (x235, x236) = fiat_p384_scalar_addcarryx_u64(x234, x201, x223);
1146 let (x237, x238) = fiat_p384_scalar_addcarryx_u64(x236, x203, x225);
1147 let (x239, x240) = fiat_p384_scalar_addcarryx_u64(x238, x205, x227);
1148 let (x241, x242) = fiat_p384_scalar_addcarryx_u64(x240, x207, x229);
1149 let (x243, x244) = fiat_p384_scalar_addcarryx_u64(x242, x209, x231);
1150 let (x245, x246) = fiat_p384_scalar_mulx_u64(x233, 0x6ed46089e88fdc45);
1151 let (x247, x248) = fiat_p384_scalar_mulx_u64(x245, 0xffffffffffffffff);
1152 let (x249, x250) = fiat_p384_scalar_mulx_u64(x245, 0xffffffffffffffff);
1153 let (x251, x252) = fiat_p384_scalar_mulx_u64(x245, 0xffffffffffffffff);
1154 let (x253, x254) = fiat_p384_scalar_mulx_u64(x245, 0xc7634d81f4372ddf);
1155 let (x255, x256) = fiat_p384_scalar_mulx_u64(x245, 0x581a0db248b0a77a);
1156 let (x257, x258) = fiat_p384_scalar_mulx_u64(x245, 0xecec196accc52973);
1157 let (x259, x260) = fiat_p384_scalar_addcarryx_u64(0x0, x258, x255);
1158 let (x261, x262) = fiat_p384_scalar_addcarryx_u64(x260, x256, x253);
1159 let (x263, x264) = fiat_p384_scalar_addcarryx_u64(x262, x254, x251);
1160 let (x265, x266) = fiat_p384_scalar_addcarryx_u64(x264, x252, x249);
1161 let (x267, x268) = fiat_p384_scalar_addcarryx_u64(x266, x250, x247);
1162 let (x269, x270) = fiat_p384_scalar_addcarryx_u64(0x0, x233, x257);
1163 let (x271, x272) = fiat_p384_scalar_addcarryx_u64(x270, x235, x259);
1164 let (x273, x274) = fiat_p384_scalar_addcarryx_u64(x272, x237, x261);
1165 let (x275, x276) = fiat_p384_scalar_addcarryx_u64(x274, x239, x263);
1166 let (x277, x278) = fiat_p384_scalar_addcarryx_u64(x276, x241, x265);
1167 let (x279, x280) = fiat_p384_scalar_addcarryx_u64(x278, x243, x267);
1168 let (x281, x282) = fiat_p384_scalar_addcarryx_u64(
1169 x280,
1170 (((x244 as u64) + (x210 as u64)) + ((x232 as u64) + x212)),
1171 ((x268 as u64) + x248),
1172 );
1173 let (x283, x284) = fiat_p384_scalar_mulx_u64(x4, 0xc84ee012b39bf21);
1174 let (x285, x286) = fiat_p384_scalar_mulx_u64(x4, 0x3fb05b7a28266895);
1175 let (x287, x288) = fiat_p384_scalar_mulx_u64(x4, 0xd40d49174aab1cc5);
1176 let (x289, x290) = fiat_p384_scalar_mulx_u64(x4, 0xbc3e483afcb82947);
1177 let (x291, x292) = fiat_p384_scalar_mulx_u64(x4, 0xff3d81e5df1aa419);
1178 let (x293, x294) = fiat_p384_scalar_mulx_u64(x4, 0x2d319b2419b409a9);
1179 let (x295, x296) = fiat_p384_scalar_addcarryx_u64(0x0, x294, x291);
1180 let (x297, x298) = fiat_p384_scalar_addcarryx_u64(x296, x292, x289);
1181 let (x299, x300) = fiat_p384_scalar_addcarryx_u64(x298, x290, x287);
1182 let (x301, x302) = fiat_p384_scalar_addcarryx_u64(x300, x288, x285);
1183 let (x303, x304) = fiat_p384_scalar_addcarryx_u64(x302, x286, x283);
1184 let (x305, x306) = fiat_p384_scalar_addcarryx_u64(0x0, x271, x293);
1185 let (x307, x308) = fiat_p384_scalar_addcarryx_u64(x306, x273, x295);
1186 let (x309, x310) = fiat_p384_scalar_addcarryx_u64(x308, x275, x297);
1187 let (x311, x312) = fiat_p384_scalar_addcarryx_u64(x310, x277, x299);
1188 let (x313, x314) = fiat_p384_scalar_addcarryx_u64(x312, x279, x301);
1189 let (x315, x316) = fiat_p384_scalar_addcarryx_u64(x314, x281, x303);
1190 let (x317, x318) = fiat_p384_scalar_mulx_u64(x305, 0x6ed46089e88fdc45);
1191 let (x319, x320) = fiat_p384_scalar_mulx_u64(x317, 0xffffffffffffffff);
1192 let (x321, x322) = fiat_p384_scalar_mulx_u64(x317, 0xffffffffffffffff);
1193 let (x323, x324) = fiat_p384_scalar_mulx_u64(x317, 0xffffffffffffffff);
1194 let (x325, x326) = fiat_p384_scalar_mulx_u64(x317, 0xc7634d81f4372ddf);
1195 let (x327, x328) = fiat_p384_scalar_mulx_u64(x317, 0x581a0db248b0a77a);
1196 let (x329, x330) = fiat_p384_scalar_mulx_u64(x317, 0xecec196accc52973);
1197 let (x331, x332) = fiat_p384_scalar_addcarryx_u64(0x0, x330, x327);
1198 let (x333, x334) = fiat_p384_scalar_addcarryx_u64(x332, x328, x325);
1199 let (x335, x336) = fiat_p384_scalar_addcarryx_u64(x334, x326, x323);
1200 let (x337, x338) = fiat_p384_scalar_addcarryx_u64(x336, x324, x321);
1201 let (x339, x340) = fiat_p384_scalar_addcarryx_u64(x338, x322, x319);
1202 let (x341, x342) = fiat_p384_scalar_addcarryx_u64(0x0, x305, x329);
1203 let (x343, x344) = fiat_p384_scalar_addcarryx_u64(x342, x307, x331);
1204 let (x345, x346) = fiat_p384_scalar_addcarryx_u64(x344, x309, x333);
1205 let (x347, x348) = fiat_p384_scalar_addcarryx_u64(x346, x311, x335);
1206 let (x349, x350) = fiat_p384_scalar_addcarryx_u64(x348, x313, x337);
1207 let (x351, x352) = fiat_p384_scalar_addcarryx_u64(x350, x315, x339);
1208 let (x353, x354) = fiat_p384_scalar_addcarryx_u64(
1209 x352,
1210 (((x316 as u64) + (x282 as u64)) + ((x304 as u64) + x284)),
1211 ((x340 as u64) + x320),
1212 );
1213 let (x355, x356) = fiat_p384_scalar_mulx_u64(x5, 0xc84ee012b39bf21);
1214 let (x357, x358) = fiat_p384_scalar_mulx_u64(x5, 0x3fb05b7a28266895);
1215 let (x359, x360) = fiat_p384_scalar_mulx_u64(x5, 0xd40d49174aab1cc5);
1216 let (x361, x362) = fiat_p384_scalar_mulx_u64(x5, 0xbc3e483afcb82947);
1217 let (x363, x364) = fiat_p384_scalar_mulx_u64(x5, 0xff3d81e5df1aa419);
1218 let (x365, x366) = fiat_p384_scalar_mulx_u64(x5, 0x2d319b2419b409a9);
1219 let (x367, x368) = fiat_p384_scalar_addcarryx_u64(0x0, x366, x363);
1220 let (x369, x370) = fiat_p384_scalar_addcarryx_u64(x368, x364, x361);
1221 let (x371, x372) = fiat_p384_scalar_addcarryx_u64(x370, x362, x359);
1222 let (x373, x374) = fiat_p384_scalar_addcarryx_u64(x372, x360, x357);
1223 let (x375, x376) = fiat_p384_scalar_addcarryx_u64(x374, x358, x355);
1224 let (x377, x378) = fiat_p384_scalar_addcarryx_u64(0x0, x343, x365);
1225 let (x379, x380) = fiat_p384_scalar_addcarryx_u64(x378, x345, x367);
1226 let (x381, x382) = fiat_p384_scalar_addcarryx_u64(x380, x347, x369);
1227 let (x383, x384) = fiat_p384_scalar_addcarryx_u64(x382, x349, x371);
1228 let (x385, x386) = fiat_p384_scalar_addcarryx_u64(x384, x351, x373);
1229 let (x387, x388) = fiat_p384_scalar_addcarryx_u64(x386, x353, x375);
1230 let (x389, x390) = fiat_p384_scalar_mulx_u64(x377, 0x6ed46089e88fdc45);
1231 let (x391, x392) = fiat_p384_scalar_mulx_u64(x389, 0xffffffffffffffff);
1232 let (x393, x394) = fiat_p384_scalar_mulx_u64(x389, 0xffffffffffffffff);
1233 let (x395, x396) = fiat_p384_scalar_mulx_u64(x389, 0xffffffffffffffff);
1234 let (x397, x398) = fiat_p384_scalar_mulx_u64(x389, 0xc7634d81f4372ddf);
1235 let (x399, x400) = fiat_p384_scalar_mulx_u64(x389, 0x581a0db248b0a77a);
1236 let (x401, x402) = fiat_p384_scalar_mulx_u64(x389, 0xecec196accc52973);
1237 let (x403, x404) = fiat_p384_scalar_addcarryx_u64(0x0, x402, x399);
1238 let (x405, x406) = fiat_p384_scalar_addcarryx_u64(x404, x400, x397);
1239 let (x407, x408) = fiat_p384_scalar_addcarryx_u64(x406, x398, x395);
1240 let (x409, x410) = fiat_p384_scalar_addcarryx_u64(x408, x396, x393);
1241 let (x411, x412) = fiat_p384_scalar_addcarryx_u64(x410, x394, x391);
1242 let (x413, x414) = fiat_p384_scalar_addcarryx_u64(0x0, x377, x401);
1243 let (x415, x416) = fiat_p384_scalar_addcarryx_u64(x414, x379, x403);
1244 let (x417, x418) = fiat_p384_scalar_addcarryx_u64(x416, x381, x405);
1245 let (x419, x420) = fiat_p384_scalar_addcarryx_u64(x418, x383, x407);
1246 let (x421, x422) = fiat_p384_scalar_addcarryx_u64(x420, x385, x409);
1247 let (x423, x424) = fiat_p384_scalar_addcarryx_u64(x422, x387, x411);
1248 let (x425, x426) = fiat_p384_scalar_addcarryx_u64(
1249 x424,
1250 (((x388 as u64) + (x354 as u64)) + ((x376 as u64) + x356)),
1251 ((x412 as u64) + x392),
1252 );
1253 let (x427, x428) = fiat_p384_scalar_subborrowx_u64(0x0, x415, 0xecec196accc52973);
1254 let (x429, x430) = fiat_p384_scalar_subborrowx_u64(x428, x417, 0x581a0db248b0a77a);
1255 let (x431, x432) = fiat_p384_scalar_subborrowx_u64(x430, x419, 0xc7634d81f4372ddf);
1256 let (x433, x434) = fiat_p384_scalar_subborrowx_u64(x432, x421, 0xffffffffffffffff);
1257 let (x435, x436) = fiat_p384_scalar_subborrowx_u64(x434, x423, 0xffffffffffffffff);
1258 let (x437, x438) = fiat_p384_scalar_subborrowx_u64(x436, x425, 0xffffffffffffffff);
1259 let (x439, x440) = fiat_p384_scalar_subborrowx_u64(x438, (x426 as u64), 0x0_u64);
1260 let (x441) = fiat_p384_scalar_cmovznz_u64(x440, x427, x415);
1261 let (x442) = fiat_p384_scalar_cmovznz_u64(x440, x429, x417);
1262 let (x443) = fiat_p384_scalar_cmovznz_u64(x440, x431, x419);
1263 let (x444) = fiat_p384_scalar_cmovznz_u64(x440, x433, x421);
1264 let (x445) = fiat_p384_scalar_cmovznz_u64(x440, x435, x423);
1265 let (x446) = fiat_p384_scalar_cmovznz_u64(x440, x437, x425);
1266 out1[0] = x441;
1267 out1[1] = x442;
1268 out1[2] = x443;
1269 out1[3] = x444;
1270 out1[4] = x445;
1271 out1[5] = x446;
1272 out1
1273}
1274#[doc = " The function fiat_p384_scalar_selectznz is a multi-limb conditional select."]
1275#[doc = ""]
1276#[doc = " Postconditions:"]
1277#[doc = " out1 = (if arg1 = 0 then arg2 else arg3)"]
1278#[doc = ""]
1279#[doc = " Input Bounds:"]
1280#[doc = " arg1: [0x0 ~> 0x1]"]
1281#[doc = " arg2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1282#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1283#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]] arg3: [[0x0 ~>"]
1284#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1285#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1286#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]] Output Bounds:"]
1287#[doc = " out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1288#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1289#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]"]
1290#[inline]
1291pub const fn fiat_p384_scalar_selectznz(
1292 arg1: fiat_p384_scalar_u1,
1293 arg2: &[u64; 6],
1294 arg3: &[u64; 6],
1295) -> [u64; 6] {
1296 let mut out1: [u64; 6] = [0; 6];
1297 let (x1) = fiat_p384_scalar_cmovznz_u64(arg1, (arg2[0]), (arg3[0]));
1298 let (x2) = fiat_p384_scalar_cmovznz_u64(arg1, (arg2[1]), (arg3[1]));
1299 let (x3) = fiat_p384_scalar_cmovznz_u64(arg1, (arg2[2]), (arg3[2]));
1300 let (x4) = fiat_p384_scalar_cmovznz_u64(arg1, (arg2[3]), (arg3[3]));
1301 let (x5) = fiat_p384_scalar_cmovznz_u64(arg1, (arg2[4]), (arg3[4]));
1302 let (x6) = fiat_p384_scalar_cmovznz_u64(arg1, (arg2[5]), (arg3[5]));
1303 out1[0] = x1;
1304 out1[1] = x2;
1305 out1[2] = x3;
1306 out1[3] = x4;
1307 out1[4] = x5;
1308 out1[5] = x6;
1309 out1
1310}
1311#[doc = " The function fiat_p384_scalar_to_bytes serializes a field element NOT in the"]
1312#[doc = " Montgomery domain to bytes in little-endian order."]
1313#[doc = ""]
1314#[doc = " Preconditions:"]
1315#[doc = " 0 ≤ eval arg1 < m"]
1316#[doc = " Postconditions:"]
1317#[doc = " out1 = map (λ x, ⌊((eval arg1 mod m) mod 2^(8 * (x + 1))) / 2^(8 * x)⌋)"]
1318#[doc = " [0..47]"]
1319#[doc = ""]
1320#[doc = " Input Bounds:"]
1321#[doc = " arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1322#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1323#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]] Output Bounds:"]
1324#[doc = " out1: [[0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1325#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1326#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1327#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1328#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1329#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1330#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1331#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1332#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1333#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff]]"]
1334#[inline]
1335pub const fn fiat_p384_scalar_to_bytes(arg1: &[u64; 6]) -> [u8; 48] {
1336 let mut out1: [u8; 48] = [0; 48];
1337 let x1: u64 = (arg1[5]);
1338 let x2: u64 = (arg1[4]);
1339 let x3: u64 = (arg1[3]);
1340 let x4: u64 = (arg1[2]);
1341 let x5: u64 = (arg1[1]);
1342 let x6: u64 = (arg1[0]);
1343 let x7: u8 = ((x6 & 0xff_u64) as u8);
1344 let x8: u64 = (x6 >> 8);
1345 let x9: u8 = ((x8 & 0xff_u64) as u8);
1346 let x10: u64 = (x8 >> 8);
1347 let x11: u8 = ((x10 & 0xff_u64) as u8);
1348 let x12: u64 = (x10 >> 8);
1349 let x13: u8 = ((x12 & 0xff_u64) as u8);
1350 let x14: u64 = (x12 >> 8);
1351 let x15: u8 = ((x14 & 0xff_u64) as u8);
1352 let x16: u64 = (x14 >> 8);
1353 let x17: u8 = ((x16 & 0xff_u64) as u8);
1354 let x18: u64 = (x16 >> 8);
1355 let x19: u8 = ((x18 & 0xff_u64) as u8);
1356 let x20: u8 = ((x18 >> 8) as u8);
1357 let x21: u8 = ((x5 & 0xff_u64) as u8);
1358 let x22: u64 = (x5 >> 8);
1359 let x23: u8 = ((x22 & 0xff_u64) as u8);
1360 let x24: u64 = (x22 >> 8);
1361 let x25: u8 = ((x24 & 0xff_u64) as u8);
1362 let x26: u64 = (x24 >> 8);
1363 let x27: u8 = ((x26 & 0xff_u64) as u8);
1364 let x28: u64 = (x26 >> 8);
1365 let x29: u8 = ((x28 & 0xff_u64) as u8);
1366 let x30: u64 = (x28 >> 8);
1367 let x31: u8 = ((x30 & 0xff_u64) as u8);
1368 let x32: u64 = (x30 >> 8);
1369 let x33: u8 = ((x32 & 0xff_u64) as u8);
1370 let x34: u8 = ((x32 >> 8) as u8);
1371 let x35: u8 = ((x4 & 0xff_u64) as u8);
1372 let x36: u64 = (x4 >> 8);
1373 let x37: u8 = ((x36 & 0xff_u64) as u8);
1374 let x38: u64 = (x36 >> 8);
1375 let x39: u8 = ((x38 & 0xff_u64) as u8);
1376 let x40: u64 = (x38 >> 8);
1377 let x41: u8 = ((x40 & 0xff_u64) as u8);
1378 let x42: u64 = (x40 >> 8);
1379 let x43: u8 = ((x42 & 0xff_u64) as u8);
1380 let x44: u64 = (x42 >> 8);
1381 let x45: u8 = ((x44 & 0xff_u64) as u8);
1382 let x46: u64 = (x44 >> 8);
1383 let x47: u8 = ((x46 & 0xff_u64) as u8);
1384 let x48: u8 = ((x46 >> 8) as u8);
1385 let x49: u8 = ((x3 & 0xff_u64) as u8);
1386 let x50: u64 = (x3 >> 8);
1387 let x51: u8 = ((x50 & 0xff_u64) as u8);
1388 let x52: u64 = (x50 >> 8);
1389 let x53: u8 = ((x52 & 0xff_u64) as u8);
1390 let x54: u64 = (x52 >> 8);
1391 let x55: u8 = ((x54 & 0xff_u64) as u8);
1392 let x56: u64 = (x54 >> 8);
1393 let x57: u8 = ((x56 & 0xff_u64) as u8);
1394 let x58: u64 = (x56 >> 8);
1395 let x59: u8 = ((x58 & 0xff_u64) as u8);
1396 let x60: u64 = (x58 >> 8);
1397 let x61: u8 = ((x60 & 0xff_u64) as u8);
1398 let x62: u8 = ((x60 >> 8) as u8);
1399 let x63: u8 = ((x2 & 0xff_u64) as u8);
1400 let x64: u64 = (x2 >> 8);
1401 let x65: u8 = ((x64 & 0xff_u64) as u8);
1402 let x66: u64 = (x64 >> 8);
1403 let x67: u8 = ((x66 & 0xff_u64) as u8);
1404 let x68: u64 = (x66 >> 8);
1405 let x69: u8 = ((x68 & 0xff_u64) as u8);
1406 let x70: u64 = (x68 >> 8);
1407 let x71: u8 = ((x70 & 0xff_u64) as u8);
1408 let x72: u64 = (x70 >> 8);
1409 let x73: u8 = ((x72 & 0xff_u64) as u8);
1410 let x74: u64 = (x72 >> 8);
1411 let x75: u8 = ((x74 & 0xff_u64) as u8);
1412 let x76: u8 = ((x74 >> 8) as u8);
1413 let x77: u8 = ((x1 & 0xff_u64) as u8);
1414 let x78: u64 = (x1 >> 8);
1415 let x79: u8 = ((x78 & 0xff_u64) as u8);
1416 let x80: u64 = (x78 >> 8);
1417 let x81: u8 = ((x80 & 0xff_u64) as u8);
1418 let x82: u64 = (x80 >> 8);
1419 let x83: u8 = ((x82 & 0xff_u64) as u8);
1420 let x84: u64 = (x82 >> 8);
1421 let x85: u8 = ((x84 & 0xff_u64) as u8);
1422 let x86: u64 = (x84 >> 8);
1423 let x87: u8 = ((x86 & 0xff_u64) as u8);
1424 let x88: u64 = (x86 >> 8);
1425 let x89: u8 = ((x88 & 0xff_u64) as u8);
1426 let x90: u8 = ((x88 >> 8) as u8);
1427 out1[0] = x7;
1428 out1[1] = x9;
1429 out1[2] = x11;
1430 out1[3] = x13;
1431 out1[4] = x15;
1432 out1[5] = x17;
1433 out1[6] = x19;
1434 out1[7] = x20;
1435 out1[8] = x21;
1436 out1[9] = x23;
1437 out1[10] = x25;
1438 out1[11] = x27;
1439 out1[12] = x29;
1440 out1[13] = x31;
1441 out1[14] = x33;
1442 out1[15] = x34;
1443 out1[16] = x35;
1444 out1[17] = x37;
1445 out1[18] = x39;
1446 out1[19] = x41;
1447 out1[20] = x43;
1448 out1[21] = x45;
1449 out1[22] = x47;
1450 out1[23] = x48;
1451 out1[24] = x49;
1452 out1[25] = x51;
1453 out1[26] = x53;
1454 out1[27] = x55;
1455 out1[28] = x57;
1456 out1[29] = x59;
1457 out1[30] = x61;
1458 out1[31] = x62;
1459 out1[32] = x63;
1460 out1[33] = x65;
1461 out1[34] = x67;
1462 out1[35] = x69;
1463 out1[36] = x71;
1464 out1[37] = x73;
1465 out1[38] = x75;
1466 out1[39] = x76;
1467 out1[40] = x77;
1468 out1[41] = x79;
1469 out1[42] = x81;
1470 out1[43] = x83;
1471 out1[44] = x85;
1472 out1[45] = x87;
1473 out1[46] = x89;
1474 out1[47] = x90;
1475 out1
1476}
1477#[doc = " The function fiat_p384_scalar_from_bytes deserializes a field element NOT in"]
1478#[doc = " the Montgomery domain from bytes in little-endian order."]
1479#[doc = ""]
1480#[doc = " Preconditions:"]
1481#[doc = " 0 ≤ bytes_eval arg1 < m"]
1482#[doc = " Postconditions:"]
1483#[doc = " eval out1 mod m = bytes_eval arg1 mod m"]
1484#[doc = " 0 ≤ eval out1 < m"]
1485#[doc = ""]
1486#[doc = " Input Bounds:"]
1487#[doc = " arg1: [[0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1488#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1489#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1490#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1491#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1492#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1493#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1494#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1495#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~>"]
1496#[doc = " 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff]] Output Bounds:"]
1497#[doc = " out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1498#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1499#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]"]
1500#[inline]
1501pub const fn fiat_p384_scalar_from_bytes(arg1: &[u8; 48]) -> [u64; 6] {
1502 let mut out1: [u64; 6] = [0; 6];
1503 let x1: u64 = (((arg1[47]) as u64) << 56);
1504 let x2: u64 = (((arg1[46]) as u64) << 48);
1505 let x3: u64 = (((arg1[45]) as u64) << 40);
1506 let x4: u64 = (((arg1[44]) as u64) << 32);
1507 let x5: u64 = (((arg1[43]) as u64) << 24);
1508 let x6: u64 = (((arg1[42]) as u64) << 16);
1509 let x7: u64 = (((arg1[41]) as u64) << 8);
1510 let x8: u8 = (arg1[40]);
1511 let x9: u64 = (((arg1[39]) as u64) << 56);
1512 let x10: u64 = (((arg1[38]) as u64) << 48);
1513 let x11: u64 = (((arg1[37]) as u64) << 40);
1514 let x12: u64 = (((arg1[36]) as u64) << 32);
1515 let x13: u64 = (((arg1[35]) as u64) << 24);
1516 let x14: u64 = (((arg1[34]) as u64) << 16);
1517 let x15: u64 = (((arg1[33]) as u64) << 8);
1518 let x16: u8 = (arg1[32]);
1519 let x17: u64 = (((arg1[31]) as u64) << 56);
1520 let x18: u64 = (((arg1[30]) as u64) << 48);
1521 let x19: u64 = (((arg1[29]) as u64) << 40);
1522 let x20: u64 = (((arg1[28]) as u64) << 32);
1523 let x21: u64 = (((arg1[27]) as u64) << 24);
1524 let x22: u64 = (((arg1[26]) as u64) << 16);
1525 let x23: u64 = (((arg1[25]) as u64) << 8);
1526 let x24: u8 = (arg1[24]);
1527 let x25: u64 = (((arg1[23]) as u64) << 56);
1528 let x26: u64 = (((arg1[22]) as u64) << 48);
1529 let x27: u64 = (((arg1[21]) as u64) << 40);
1530 let x28: u64 = (((arg1[20]) as u64) << 32);
1531 let x29: u64 = (((arg1[19]) as u64) << 24);
1532 let x30: u64 = (((arg1[18]) as u64) << 16);
1533 let x31: u64 = (((arg1[17]) as u64) << 8);
1534 let x32: u8 = (arg1[16]);
1535 let x33: u64 = (((arg1[15]) as u64) << 56);
1536 let x34: u64 = (((arg1[14]) as u64) << 48);
1537 let x35: u64 = (((arg1[13]) as u64) << 40);
1538 let x36: u64 = (((arg1[12]) as u64) << 32);
1539 let x37: u64 = (((arg1[11]) as u64) << 24);
1540 let x38: u64 = (((arg1[10]) as u64) << 16);
1541 let x39: u64 = (((arg1[9]) as u64) << 8);
1542 let x40: u8 = (arg1[8]);
1543 let x41: u64 = (((arg1[7]) as u64) << 56);
1544 let x42: u64 = (((arg1[6]) as u64) << 48);
1545 let x43: u64 = (((arg1[5]) as u64) << 40);
1546 let x44: u64 = (((arg1[4]) as u64) << 32);
1547 let x45: u64 = (((arg1[3]) as u64) << 24);
1548 let x46: u64 = (((arg1[2]) as u64) << 16);
1549 let x47: u64 = (((arg1[1]) as u64) << 8);
1550 let x48: u8 = (arg1[0]);
1551 let x49: u64 = (x47 + (x48 as u64));
1552 let x50: u64 = (x46 + x49);
1553 let x51: u64 = (x45 + x50);
1554 let x52: u64 = (x44 + x51);
1555 let x53: u64 = (x43 + x52);
1556 let x54: u64 = (x42 + x53);
1557 let x55: u64 = (x41 + x54);
1558 let x56: u64 = (x39 + (x40 as u64));
1559 let x57: u64 = (x38 + x56);
1560 let x58: u64 = (x37 + x57);
1561 let x59: u64 = (x36 + x58);
1562 let x60: u64 = (x35 + x59);
1563 let x61: u64 = (x34 + x60);
1564 let x62: u64 = (x33 + x61);
1565 let x63: u64 = (x31 + (x32 as u64));
1566 let x64: u64 = (x30 + x63);
1567 let x65: u64 = (x29 + x64);
1568 let x66: u64 = (x28 + x65);
1569 let x67: u64 = (x27 + x66);
1570 let x68: u64 = (x26 + x67);
1571 let x69: u64 = (x25 + x68);
1572 let x70: u64 = (x23 + (x24 as u64));
1573 let x71: u64 = (x22 + x70);
1574 let x72: u64 = (x21 + x71);
1575 let x73: u64 = (x20 + x72);
1576 let x74: u64 = (x19 + x73);
1577 let x75: u64 = (x18 + x74);
1578 let x76: u64 = (x17 + x75);
1579 let x77: u64 = (x15 + (x16 as u64));
1580 let x78: u64 = (x14 + x77);
1581 let x79: u64 = (x13 + x78);
1582 let x80: u64 = (x12 + x79);
1583 let x81: u64 = (x11 + x80);
1584 let x82: u64 = (x10 + x81);
1585 let x83: u64 = (x9 + x82);
1586 let x84: u64 = (x7 + (x8 as u64));
1587 let x85: u64 = (x6 + x84);
1588 let x86: u64 = (x5 + x85);
1589 let x87: u64 = (x4 + x86);
1590 let x88: u64 = (x3 + x87);
1591 let x89: u64 = (x2 + x88);
1592 let x90: u64 = (x1 + x89);
1593 out1[0] = x55;
1594 out1[1] = x62;
1595 out1[2] = x69;
1596 out1[3] = x76;
1597 out1[4] = x83;
1598 out1[5] = x90;
1599 out1
1600}
1601#[doc = " The function fiat_p384_scalar_set_one returns the field element one in the"]
1602#[doc = " Montgomery domain."]
1603#[doc = ""]
1604#[doc = " Postconditions:"]
1605#[doc = " eval (from_montgomery out1) mod m = 1 mod m"]
1606#[doc = " 0 ≤ eval out1 < m"]
1607#[inline]
1608pub const fn fiat_p384_scalar_set_one() -> fiat_p384_scalar_montgomery_domain_field_element {
1609 let mut out1: fiat_p384_scalar_montgomery_domain_field_element = [0; 6];
1610 out1[0] = 0x1313e695333ad68d;
1611 out1[1] = 0xa7e5f24db74f5885;
1612 out1[2] = 0x389cb27e0bc8d220;
1613 out1[3] = 0x0_u64;
1614 out1[4] = 0x0_u64;
1615 out1[5] = 0x0_u64;
1616 out1
1617}
1618#[doc = " The function fiat_p384_scalar_msat returns the saturated representation of"]
1619#[doc = " the prime modulus."]
1620#[doc = ""]
1621#[doc = " Postconditions:"]
1622#[doc = " twos_complement_eval out1 = m"]
1623#[doc = " 0 ≤ eval out1 < m"]
1624#[doc = ""]
1625#[doc = " Output Bounds:"]
1626#[doc = " out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1627#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1628#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1629#[doc = " 0xffffffffffffffff]]"]
1630#[inline]
1631pub const fn fiat_p384_scalar_msat() -> [u64; 7] {
1632 let mut out1: [u64; 7] = [0; 7];
1633 out1[0] = 0xecec196accc52973;
1634 out1[1] = 0x581a0db248b0a77a;
1635 out1[2] = 0xc7634d81f4372ddf;
1636 out1[3] = 0xffffffffffffffff;
1637 out1[4] = 0xffffffffffffffff;
1638 out1[5] = 0xffffffffffffffff;
1639 out1[6] = 0x0_u64;
1640 out1
1641}
1642#[doc = " The function fiat_p384_scalar_divstep_precomp returns the precomputed value"]
1643#[doc = " for Bernstein-Yang-inversion (in montgomery form)."]
1644#[doc = ""]
1645#[doc = " Postconditions:"]
1646#[doc = " eval (from_montgomery out1) = ⌊(m - 1) / 2⌋^(if ⌊log2 m⌋ + 1 < 46 then"]
1647#[doc = " ⌊(49 * (⌊log2 m⌋ + 1) + 80) / 17⌋ else ⌊(49 * (⌊log2 m⌋ + 1) + 57) / 17⌋)"]
1648#[doc = " 0 ≤ eval out1 < m"]
1649#[doc = ""]
1650#[doc = " Output Bounds:"]
1651#[doc = " out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1652#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1653#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]"]
1654#[inline]
1655pub const fn fiat_p384_scalar_divstep_precomp() -> [u64; 6] {
1656 let mut out1: [u64; 6] = [0; 6];
1657 out1[0] = 0x49589ae0e6045b6a;
1658 out1[1] = 0x3c9a5352870040ed;
1659 out1[2] = 0xdacb097e977dc242;
1660 out1[3] = 0xb5ab30a6d1ecbe36;
1661 out1[4] = 0x97d7a1081f959973;
1662 out1[5] = 0x2ba012f8d27192bc;
1663 out1
1664}
1665#[doc = " The function fiat_p384_scalar_divstep computes a divstep."]
1666#[doc = ""]
1667#[doc = " Preconditions:"]
1668#[doc = " 0 ≤ eval arg4 < m"]
1669#[doc = " 0 ≤ eval arg5 < m"]
1670#[doc = " Postconditions:"]
1671#[doc = " out1 = (if 0 < arg1 ∧ (twos_complement_eval arg3) is odd then 1 - arg1"]
1672#[doc = " else 1 + arg1) twos_complement_eval out2 = (if 0 < arg1 ∧"]
1673#[doc = " (twos_complement_eval arg3) is odd then twos_complement_eval arg3 else"]
1674#[doc = " twos_complement_eval arg2) twos_complement_eval out3 = (if 0 < arg1 ∧"]
1675#[doc = " (twos_complement_eval arg3) is odd then ⌊(twos_complement_eval arg3 -"]
1676#[doc = " twos_complement_eval arg2) / 2⌋ else ⌊(twos_complement_eval arg3 +"]
1677#[doc = " (twos_complement_eval arg3 mod 2) * twos_complement_eval arg2) / 2⌋)"]
1678#[doc = " eval (from_montgomery out4) mod m = (if 0 < arg1 ∧ (twos_complement_eval"]
1679#[doc = " arg3) is odd then (2 * eval (from_montgomery arg5)) mod m else (2 * eval"]
1680#[doc = " (from_montgomery arg4)) mod m) eval (from_montgomery out5) mod m = (if 0 <"]
1681#[doc = " arg1 ∧ (twos_complement_eval arg3) is odd then (eval (from_montgomery arg4)"]
1682#[doc = " - eval (from_montgomery arg4)) mod m else (eval (from_montgomery arg5) +"]
1683#[doc = " (twos_complement_eval arg3 mod 2) * eval (from_montgomery arg4)) mod m)"]
1684#[doc = " 0 ≤ eval out5 < m"]
1685#[doc = " 0 ≤ eval out5 < m"]
1686#[doc = " 0 ≤ eval out2 < m"]
1687#[doc = " 0 ≤ eval out3 < m"]
1688#[doc = ""]
1689#[doc = " Input Bounds:"]
1690#[doc = " arg1: [0x0 ~> 0xffffffffffffffff]"]
1691#[doc = " arg2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1692#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1693#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1694#[doc = " 0xffffffffffffffff]] arg3: [[0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1695#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1696#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1697#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]] arg4: [[0x0 ~>"]
1698#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1699#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1700#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]] arg5: [[0x0 ~>"]
1701#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1702#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1703#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]] Output Bounds:"]
1704#[doc = " out1: [0x0 ~> 0xffffffffffffffff]"]
1705#[doc = " out2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1706#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1707#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1708#[doc = " 0xffffffffffffffff]] out3: [[0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1709#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1710#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1711#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]] out4: [[0x0 ~>"]
1712#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1713#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1714#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]] out5: [[0x0 ~>"]
1715#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1716#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~>"]
1717#[doc = " 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]"]
1718#[inline]
1719pub const fn fiat_p384_scalar_divstep(
1720 arg1: u64,
1721 arg2: &[u64; 7],
1722 arg3: &[u64; 7],
1723 arg4: &[u64; 6],
1724 arg5: &[u64; 6],
1725) -> (u64, [u64; 7], [u64; 7], [u64; 6], [u64; 6]) {
1726 let mut out1: u64 = 0;
1727 let mut out2: [u64; 7] = [0; 7];
1728 let mut out3: [u64; 7] = [0; 7];
1729 let mut out4: [u64; 6] = [0; 6];
1730 let mut out5: [u64; 6] = [0; 6];
1731 let (x1, x2) = fiat_p384_scalar_addcarryx_u64(0x0, (!arg1), 0x1_u64);
1732 let x3: fiat_p384_scalar_u1 =
1733 (((x1 >> 63) as fiat_p384_scalar_u1) & (((arg3[0]) & 0x1_u64) as fiat_p384_scalar_u1));
1734 let (x4, x5) = fiat_p384_scalar_addcarryx_u64(0x0, (!arg1), 0x1_u64);
1735 let (x6) = fiat_p384_scalar_cmovznz_u64(x3, arg1, x4);
1736 let (x7) = fiat_p384_scalar_cmovznz_u64(x3, (arg2[0]), (arg3[0]));
1737 let (x8) = fiat_p384_scalar_cmovznz_u64(x3, (arg2[1]), (arg3[1]));
1738 let (x9) = fiat_p384_scalar_cmovznz_u64(x3, (arg2[2]), (arg3[2]));
1739 let (x10) = fiat_p384_scalar_cmovznz_u64(x3, (arg2[3]), (arg3[3]));
1740 let (x11) = fiat_p384_scalar_cmovznz_u64(x3, (arg2[4]), (arg3[4]));
1741 let (x12) = fiat_p384_scalar_cmovznz_u64(x3, (arg2[5]), (arg3[5]));
1742 let (x13) = fiat_p384_scalar_cmovznz_u64(x3, (arg2[6]), (arg3[6]));
1743 let (x14, x15) = fiat_p384_scalar_addcarryx_u64(0x0, 0x1_u64, (!(arg2[0])));
1744 let (x16, x17) = fiat_p384_scalar_addcarryx_u64(x15, 0x0_u64, (!(arg2[1])));
1745 let (x18, x19) = fiat_p384_scalar_addcarryx_u64(x17, 0x0_u64, (!(arg2[2])));
1746 let (x20, x21) = fiat_p384_scalar_addcarryx_u64(x19, 0x0_u64, (!(arg2[3])));
1747 let (x22, x23) = fiat_p384_scalar_addcarryx_u64(x21, 0x0_u64, (!(arg2[4])));
1748 let (x24, x25) = fiat_p384_scalar_addcarryx_u64(x23, 0x0_u64, (!(arg2[5])));
1749 let (x26, x27) = fiat_p384_scalar_addcarryx_u64(x25, 0x0_u64, (!(arg2[6])));
1750 let (x28) = fiat_p384_scalar_cmovznz_u64(x3, (arg3[0]), x14);
1751 let (x29) = fiat_p384_scalar_cmovznz_u64(x3, (arg3[1]), x16);
1752 let (x30) = fiat_p384_scalar_cmovznz_u64(x3, (arg3[2]), x18);
1753 let (x31) = fiat_p384_scalar_cmovznz_u64(x3, (arg3[3]), x20);
1754 let (x32) = fiat_p384_scalar_cmovznz_u64(x3, (arg3[4]), x22);
1755 let (x33) = fiat_p384_scalar_cmovznz_u64(x3, (arg3[5]), x24);
1756 let (x34) = fiat_p384_scalar_cmovznz_u64(x3, (arg3[6]), x26);
1757 let (x35) = fiat_p384_scalar_cmovznz_u64(x3, (arg4[0]), (arg5[0]));
1758 let (x36) = fiat_p384_scalar_cmovznz_u64(x3, (arg4[1]), (arg5[1]));
1759 let (x37) = fiat_p384_scalar_cmovznz_u64(x3, (arg4[2]), (arg5[2]));
1760 let (x38) = fiat_p384_scalar_cmovznz_u64(x3, (arg4[3]), (arg5[3]));
1761 let (x39) = fiat_p384_scalar_cmovznz_u64(x3, (arg4[4]), (arg5[4]));
1762 let (x40) = fiat_p384_scalar_cmovznz_u64(x3, (arg4[5]), (arg5[5]));
1763 let (x41, x42) = fiat_p384_scalar_addcarryx_u64(0x0, x35, x35);
1764 let (x43, x44) = fiat_p384_scalar_addcarryx_u64(x42, x36, x36);
1765 let (x45, x46) = fiat_p384_scalar_addcarryx_u64(x44, x37, x37);
1766 let (x47, x48) = fiat_p384_scalar_addcarryx_u64(x46, x38, x38);
1767 let (x49, x50) = fiat_p384_scalar_addcarryx_u64(x48, x39, x39);
1768 let (x51, x52) = fiat_p384_scalar_addcarryx_u64(x50, x40, x40);
1769 let (x53, x54) = fiat_p384_scalar_subborrowx_u64(0x0, x41, 0xecec196accc52973);
1770 let (x55, x56) = fiat_p384_scalar_subborrowx_u64(x54, x43, 0x581a0db248b0a77a);
1771 let (x57, x58) = fiat_p384_scalar_subborrowx_u64(x56, x45, 0xc7634d81f4372ddf);
1772 let (x59, x60) = fiat_p384_scalar_subborrowx_u64(x58, x47, 0xffffffffffffffff);
1773 let (x61, x62) = fiat_p384_scalar_subborrowx_u64(x60, x49, 0xffffffffffffffff);
1774 let (x63, x64) = fiat_p384_scalar_subborrowx_u64(x62, x51, 0xffffffffffffffff);
1775 let (x65, x66) = fiat_p384_scalar_subborrowx_u64(x64, (x52 as u64), 0x0_u64);
1776 let x67: u64 = (arg4[5]);
1777 let x68: u64 = (arg4[4]);
1778 let x69: u64 = (arg4[3]);
1779 let x70: u64 = (arg4[2]);
1780 let x71: u64 = (arg4[1]);
1781 let x72: u64 = (arg4[0]);
1782 let (x73, x74) = fiat_p384_scalar_subborrowx_u64(0x0, 0x0_u64, x72);
1783 let (x75, x76) = fiat_p384_scalar_subborrowx_u64(x74, 0x0_u64, x71);
1784 let (x77, x78) = fiat_p384_scalar_subborrowx_u64(x76, 0x0_u64, x70);
1785 let (x79, x80) = fiat_p384_scalar_subborrowx_u64(x78, 0x0_u64, x69);
1786 let (x81, x82) = fiat_p384_scalar_subborrowx_u64(x80, 0x0_u64, x68);
1787 let (x83, x84) = fiat_p384_scalar_subborrowx_u64(x82, 0x0_u64, x67);
1788 let (x85) = fiat_p384_scalar_cmovznz_u64(x84, 0x0_u64, 0xffffffffffffffff);
1789 let (x86, x87) = fiat_p384_scalar_addcarryx_u64(0x0, x73, (x85 & 0xecec196accc52973));
1790 let (x88, x89) = fiat_p384_scalar_addcarryx_u64(x87, x75, (x85 & 0x581a0db248b0a77a));
1791 let (x90, x91) = fiat_p384_scalar_addcarryx_u64(x89, x77, (x85 & 0xc7634d81f4372ddf));
1792 let (x92, x93) = fiat_p384_scalar_addcarryx_u64(x91, x79, x85);
1793 let (x94, x95) = fiat_p384_scalar_addcarryx_u64(x93, x81, x85);
1794 let (x96, x97) = fiat_p384_scalar_addcarryx_u64(x95, x83, x85);
1795 let (x98) = fiat_p384_scalar_cmovznz_u64(x3, (arg5[0]), x86);
1796 let (x99) = fiat_p384_scalar_cmovznz_u64(x3, (arg5[1]), x88);
1797 let (x100) = fiat_p384_scalar_cmovznz_u64(x3, (arg5[2]), x90);
1798 let (x101) = fiat_p384_scalar_cmovznz_u64(x3, (arg5[3]), x92);
1799 let (x102) = fiat_p384_scalar_cmovznz_u64(x3, (arg5[4]), x94);
1800 let (x103) = fiat_p384_scalar_cmovznz_u64(x3, (arg5[5]), x96);
1801 let x104: fiat_p384_scalar_u1 = ((x28 & 0x1_u64) as fiat_p384_scalar_u1);
1802 let (x105) = fiat_p384_scalar_cmovznz_u64(x104, 0x0_u64, x7);
1803 let (x106) = fiat_p384_scalar_cmovznz_u64(x104, 0x0_u64, x8);
1804 let (x107) = fiat_p384_scalar_cmovznz_u64(x104, 0x0_u64, x9);
1805 let (x108) = fiat_p384_scalar_cmovznz_u64(x104, 0x0_u64, x10);
1806 let (x109) = fiat_p384_scalar_cmovznz_u64(x104, 0x0_u64, x11);
1807 let (x110) = fiat_p384_scalar_cmovznz_u64(x104, 0x0_u64, x12);
1808 let (x111) = fiat_p384_scalar_cmovznz_u64(x104, 0x0_u64, x13);
1809 let (x112, x113) = fiat_p384_scalar_addcarryx_u64(0x0, x28, x105);
1810 let (x114, x115) = fiat_p384_scalar_addcarryx_u64(x113, x29, x106);
1811 let (x116, x117) = fiat_p384_scalar_addcarryx_u64(x115, x30, x107);
1812 let (x118, x119) = fiat_p384_scalar_addcarryx_u64(x117, x31, x108);
1813 let (x120, x121) = fiat_p384_scalar_addcarryx_u64(x119, x32, x109);
1814 let (x122, x123) = fiat_p384_scalar_addcarryx_u64(x121, x33, x110);
1815 let (x124, x125) = fiat_p384_scalar_addcarryx_u64(x123, x34, x111);
1816 let (x126) = fiat_p384_scalar_cmovznz_u64(x104, 0x0_u64, x35);
1817 let (x127) = fiat_p384_scalar_cmovznz_u64(x104, 0x0_u64, x36);
1818 let (x128) = fiat_p384_scalar_cmovznz_u64(x104, 0x0_u64, x37);
1819 let (x129) = fiat_p384_scalar_cmovznz_u64(x104, 0x0_u64, x38);
1820 let (x130) = fiat_p384_scalar_cmovznz_u64(x104, 0x0_u64, x39);
1821 let (x131) = fiat_p384_scalar_cmovznz_u64(x104, 0x0_u64, x40);
1822 let (x132, x133) = fiat_p384_scalar_addcarryx_u64(0x0, x98, x126);
1823 let (x134, x135) = fiat_p384_scalar_addcarryx_u64(x133, x99, x127);
1824 let (x136, x137) = fiat_p384_scalar_addcarryx_u64(x135, x100, x128);
1825 let (x138, x139) = fiat_p384_scalar_addcarryx_u64(x137, x101, x129);
1826 let (x140, x141) = fiat_p384_scalar_addcarryx_u64(x139, x102, x130);
1827 let (x142, x143) = fiat_p384_scalar_addcarryx_u64(x141, x103, x131);
1828 let (x144, x145) = fiat_p384_scalar_subborrowx_u64(0x0, x132, 0xecec196accc52973);
1829 let (x146, x147) = fiat_p384_scalar_subborrowx_u64(x145, x134, 0x581a0db248b0a77a);
1830 let (x148, x149) = fiat_p384_scalar_subborrowx_u64(x147, x136, 0xc7634d81f4372ddf);
1831 let (x150, x151) = fiat_p384_scalar_subborrowx_u64(x149, x138, 0xffffffffffffffff);
1832 let (x152, x153) = fiat_p384_scalar_subborrowx_u64(x151, x140, 0xffffffffffffffff);
1833 let (x154, x155) = fiat_p384_scalar_subborrowx_u64(x153, x142, 0xffffffffffffffff);
1834 let (x156, x157) = fiat_p384_scalar_subborrowx_u64(x155, (x143 as u64), 0x0_u64);
1835 let (x158, x159) = fiat_p384_scalar_addcarryx_u64(0x0, x6, 0x1_u64);
1836 let x160: u64 = ((x112 >> 1) | ((x114 << 63) & 0xffffffffffffffff));
1837 let x161: u64 = ((x114 >> 1) | ((x116 << 63) & 0xffffffffffffffff));
1838 let x162: u64 = ((x116 >> 1) | ((x118 << 63) & 0xffffffffffffffff));
1839 let x163: u64 = ((x118 >> 1) | ((x120 << 63) & 0xffffffffffffffff));
1840 let x164: u64 = ((x120 >> 1) | ((x122 << 63) & 0xffffffffffffffff));
1841 let x165: u64 = ((x122 >> 1) | ((x124 << 63) & 0xffffffffffffffff));
1842 let x166: u64 = ((x124 & 0x8000000000000000) | (x124 >> 1));
1843 let (x167) = fiat_p384_scalar_cmovznz_u64(x66, x53, x41);
1844 let (x168) = fiat_p384_scalar_cmovznz_u64(x66, x55, x43);
1845 let (x169) = fiat_p384_scalar_cmovznz_u64(x66, x57, x45);
1846 let (x170) = fiat_p384_scalar_cmovznz_u64(x66, x59, x47);
1847 let (x171) = fiat_p384_scalar_cmovznz_u64(x66, x61, x49);
1848 let (x172) = fiat_p384_scalar_cmovznz_u64(x66, x63, x51);
1849 let (x173) = fiat_p384_scalar_cmovznz_u64(x157, x144, x132);
1850 let (x174) = fiat_p384_scalar_cmovznz_u64(x157, x146, x134);
1851 let (x175) = fiat_p384_scalar_cmovznz_u64(x157, x148, x136);
1852 let (x176) = fiat_p384_scalar_cmovznz_u64(x157, x150, x138);
1853 let (x177) = fiat_p384_scalar_cmovznz_u64(x157, x152, x140);
1854 let (x178) = fiat_p384_scalar_cmovznz_u64(x157, x154, x142);
1855 out1 = x158;
1856 out2[0] = x7;
1857 out2[1] = x8;
1858 out2[2] = x9;
1859 out2[3] = x10;
1860 out2[4] = x11;
1861 out2[5] = x12;
1862 out2[6] = x13;
1863 out3[0] = x160;
1864 out3[1] = x161;
1865 out3[2] = x162;
1866 out3[3] = x163;
1867 out3[4] = x164;
1868 out3[5] = x165;
1869 out3[6] = x166;
1870 out4[0] = x167;
1871 out4[1] = x168;
1872 out4[2] = x169;
1873 out4[3] = x170;
1874 out4[4] = x171;
1875 out4[5] = x172;
1876 out5[0] = x173;
1877 out5[1] = x174;
1878 out5[2] = x175;
1879 out5[3] = x176;
1880 out5[4] = x177;
1881 out5[5] = x178;
1882 (out1, out2, out3, out4, out5)
1883}