7 #ifndef SECP256K1_FIELD_REPR_IMPL_H 8 #define SECP256K1_FIELD_REPR_IMPL_H 27 int m =
a->normalized ? 1 : 2 *
a->magnitude, r = 1;
28 r &= (d[0] <= 0x3FFFFFFUL * m);
29 r &= (d[1] <= 0x3FFFFFFUL * m);
30 r &= (d[2] <= 0x3FFFFFFUL * m);
31 r &= (d[3] <= 0x3FFFFFFUL * m);
32 r &= (d[4] <= 0x3FFFFFFUL * m);
33 r &= (d[5] <= 0x3FFFFFFUL * m);
34 r &= (d[6] <= 0x3FFFFFFUL * m);
35 r &= (d[7] <= 0x3FFFFFFUL * m);
36 r &= (d[8] <= 0x3FFFFFFUL * m);
37 r &= (d[9] <= 0x03FFFFFUL * m);
38 r &= (
a->magnitude >= 0);
39 r &= (
a->magnitude <= 32);
41 r &= (
a->magnitude <= 1);
42 if (r && (d[9] == 0x03FFFFFUL)) {
43 uint32_t mid = d[8] & d[7] & d[6] & d[5] & d[4] & d[3] & d[2];
44 if (mid == 0x3FFFFFFUL) {
45 r &= ((d[1] + 0x40UL + ((d[0] + 0x3D1UL) >> 26)) <= 0x3FFFFFFUL);
53 static void secp256k1_fe_get_bounds(
secp256k1_fe *r,
int m) {
56 r->
n[0] = 0x3FFFFFFUL * 2 * m;
57 r->
n[1] = 0x3FFFFFFUL * 2 * m;
58 r->
n[2] = 0x3FFFFFFUL * 2 * m;
59 r->
n[3] = 0x3FFFFFFUL * 2 * m;
60 r->
n[4] = 0x3FFFFFFUL * 2 * m;
61 r->
n[5] = 0x3FFFFFFUL * 2 * m;
62 r->
n[6] = 0x3FFFFFFUL * 2 * m;
63 r->
n[7] = 0x3FFFFFFUL * 2 * m;
64 r->
n[8] = 0x3FFFFFFUL * 2 * m;
65 r->
n[9] = 0x03FFFFFUL * 2 * m;
68 r->normalized = (m == 0);
69 secp256k1_fe_verify(r);
75 t5 = r->
n[5], t6 = r->
n[6], t7 = r->
n[7], t8 = r->
n[8], t9 = r->
n[9];
79 uint32_t x = t9 >> 22; t9 &= 0x03FFFFFUL;
82 t0 += x * 0x3D1UL;
t1 += (x << 6);
83 t1 += (
t0 >> 26);
t0 &= 0x3FFFFFFUL;
84 t2 += (
t1 >> 26);
t1 &= 0x3FFFFFFUL;
85 t3 += (
t2 >> 26);
t2 &= 0x3FFFFFFUL; m =
t2;
86 t4 += (
t3 >> 26);
t3 &= 0x3FFFFFFUL; m &=
t3;
87 t5 += (t4 >> 26); t4 &= 0x3FFFFFFUL; m &= t4;
88 t6 += (t5 >> 26); t5 &= 0x3FFFFFFUL; m &= t5;
89 t7 += (t6 >> 26); t6 &= 0x3FFFFFFUL; m &= t6;
90 t8 += (t7 >> 26); t7 &= 0x3FFFFFFUL; m &= t7;
91 t9 += (t8 >> 26); t8 &= 0x3FFFFFFUL; m &= t8;
97 x = (t9 >> 22) | ((t9 == 0x03FFFFFUL) & (m == 0x3FFFFFFUL)
98 & ((
t1 + 0x40UL + ((
t0 + 0x3D1UL) >> 26)) > 0x3FFFFFFUL));
101 t0 += x * 0x3D1UL;
t1 += (x << 6);
102 t1 += (
t0 >> 26);
t0 &= 0x3FFFFFFUL;
103 t2 += (
t1 >> 26);
t1 &= 0x3FFFFFFUL;
104 t3 += (
t2 >> 26);
t2 &= 0x3FFFFFFUL;
105 t4 += (
t3 >> 26);
t3 &= 0x3FFFFFFUL;
106 t5 += (t4 >> 26); t4 &= 0x3FFFFFFUL;
107 t6 += (t5 >> 26); t5 &= 0x3FFFFFFUL;
108 t7 += (t6 >> 26); t6 &= 0x3FFFFFFUL;
109 t8 += (t7 >> 26); t7 &= 0x3FFFFFFUL;
110 t9 += (t8 >> 26); t8 &= 0x3FFFFFFUL;
118 r->
n[0] =
t0; r->
n[1] =
t1; r->
n[2] =
t2; r->
n[3] =
t3; r->
n[4] = t4;
119 r->
n[5] = t5; r->
n[6] = t6; r->
n[7] = t7; r->
n[8] = t8; r->
n[9] = t9;
124 secp256k1_fe_verify(r);
128 static void secp256k1_fe_normalize_weak(
secp256k1_fe *r) {
130 t5 = r->
n[5], t6 = r->
n[6], t7 = r->
n[7], t8 = r->
n[8], t9 = r->
n[9];
133 uint32_t x = t9 >> 22; t9 &= 0x03FFFFFUL;
136 t0 += x * 0x3D1UL;
t1 += (x << 6);
137 t1 += (
t0 >> 26);
t0 &= 0x3FFFFFFUL;
138 t2 += (
t1 >> 26);
t1 &= 0x3FFFFFFUL;
139 t3 += (
t2 >> 26);
t2 &= 0x3FFFFFFUL;
140 t4 += (
t3 >> 26);
t3 &= 0x3FFFFFFUL;
141 t5 += (t4 >> 26); t4 &= 0x3FFFFFFUL;
142 t6 += (t5 >> 26); t5 &= 0x3FFFFFFUL;
143 t7 += (t6 >> 26); t6 &= 0x3FFFFFFUL;
144 t8 += (t7 >> 26); t7 &= 0x3FFFFFFUL;
145 t9 += (t8 >> 26); t8 &= 0x3FFFFFFUL;
150 r->
n[0] =
t0; r->
n[1] =
t1; r->
n[2] =
t2; r->
n[3] =
t3; r->
n[4] = t4;
151 r->
n[5] = t5; r->
n[6] = t6; r->
n[7] = t7; r->
n[8] = t8; r->
n[9] = t9;
155 secp256k1_fe_verify(r);
159 static void secp256k1_fe_normalize_var(
secp256k1_fe *r) {
161 t5 = r->
n[5], t6 = r->
n[6], t7 = r->
n[7], t8 = r->
n[8], t9 = r->
n[9];
165 uint32_t x = t9 >> 22; t9 &= 0x03FFFFFUL;
168 t0 += x * 0x3D1UL;
t1 += (x << 6);
169 t1 += (
t0 >> 26);
t0 &= 0x3FFFFFFUL;
170 t2 += (
t1 >> 26);
t1 &= 0x3FFFFFFUL;
171 t3 += (
t2 >> 26);
t2 &= 0x3FFFFFFUL; m =
t2;
172 t4 += (
t3 >> 26);
t3 &= 0x3FFFFFFUL; m &=
t3;
173 t5 += (t4 >> 26); t4 &= 0x3FFFFFFUL; m &= t4;
174 t6 += (t5 >> 26); t5 &= 0x3FFFFFFUL; m &= t5;
175 t7 += (t6 >> 26); t6 &= 0x3FFFFFFUL; m &= t6;
176 t8 += (t7 >> 26); t7 &= 0x3FFFFFFUL; m &= t7;
177 t9 += (t8 >> 26); t8 &= 0x3FFFFFFUL; m &= t8;
183 x = (t9 >> 22) | ((t9 == 0x03FFFFFUL) & (m == 0x3FFFFFFUL)
184 & ((
t1 + 0x40UL + ((
t0 + 0x3D1UL) >> 26)) > 0x3FFFFFFUL));
187 t0 += 0x3D1UL;
t1 += (x << 6);
188 t1 += (
t0 >> 26);
t0 &= 0x3FFFFFFUL;
189 t2 += (
t1 >> 26);
t1 &= 0x3FFFFFFUL;
190 t3 += (
t2 >> 26);
t2 &= 0x3FFFFFFUL;
191 t4 += (
t3 >> 26);
t3 &= 0x3FFFFFFUL;
192 t5 += (t4 >> 26); t4 &= 0x3FFFFFFUL;
193 t6 += (t5 >> 26); t5 &= 0x3FFFFFFUL;
194 t7 += (t6 >> 26); t6 &= 0x3FFFFFFUL;
195 t8 += (t7 >> 26); t7 &= 0x3FFFFFFUL;
196 t9 += (t8 >> 26); t8 &= 0x3FFFFFFUL;
205 r->
n[0] =
t0; r->
n[1] =
t1; r->
n[2] =
t2; r->
n[3] =
t3; r->
n[4] = t4;
206 r->
n[5] = t5; r->
n[6] = t6; r->
n[7] = t7; r->
n[8] = t8; r->
n[9] = t9;
211 secp256k1_fe_verify(r);
215 static int secp256k1_fe_normalizes_to_zero(
const secp256k1_fe *r) {
217 t5 = r->
n[5], t6 = r->
n[6], t7 = r->
n[7], t8 = r->
n[8], t9 = r->
n[9];
223 uint32_t x = t9 >> 22; t9 &= 0x03FFFFFUL;
226 t0 += x * 0x3D1UL;
t1 += (x << 6);
227 t1 += (
t0 >> 26);
t0 &= 0x3FFFFFFUL; z0 =
t0; z1 =
t0 ^ 0x3D0UL;
228 t2 += (
t1 >> 26);
t1 &= 0x3FFFFFFUL; z0 |=
t1; z1 &=
t1 ^ 0x40UL;
229 t3 += (
t2 >> 26);
t2 &= 0x3FFFFFFUL; z0 |=
t2; z1 &=
t2;
230 t4 += (
t3 >> 26);
t3 &= 0x3FFFFFFUL; z0 |=
t3; z1 &=
t3;
231 t5 += (t4 >> 26); t4 &= 0x3FFFFFFUL; z0 |= t4; z1 &= t4;
232 t6 += (t5 >> 26); t5 &= 0x3FFFFFFUL; z0 |= t5; z1 &= t5;
233 t7 += (t6 >> 26); t6 &= 0x3FFFFFFUL; z0 |= t6; z1 &= t6;
234 t8 += (t7 >> 26); t7 &= 0x3FFFFFFUL; z0 |= t7; z1 &= t7;
235 t9 += (t8 >> 26); t8 &= 0x3FFFFFFUL; z0 |= t8; z1 &= t8;
236 z0 |= t9; z1 &= t9 ^ 0x3C00000UL;
241 return (z0 == 0) | (z1 == 0x3FFFFFFUL);
244 static int secp256k1_fe_normalizes_to_zero_var(
const secp256k1_fe *r) {
259 z0 =
t0 & 0x3FFFFFFUL;
263 if ((z0 != 0UL) & (z1 != 0x3FFFFFFUL)) {
280 t2 += (
t1 >> 26);
t1 &= 0x3FFFFFFUL; z0 |=
t1; z1 &=
t1 ^ 0x40UL;
281 t3 += (
t2 >> 26);
t2 &= 0x3FFFFFFUL; z0 |=
t2; z1 &=
t2;
282 t4 += (
t3 >> 26);
t3 &= 0x3FFFFFFUL; z0 |=
t3; z1 &=
t3;
283 t5 += (t4 >> 26); t4 &= 0x3FFFFFFUL; z0 |= t4; z1 &= t4;
284 t6 += (t5 >> 26); t5 &= 0x3FFFFFFUL; z0 |= t5; z1 &= t5;
285 t7 += (t6 >> 26); t6 &= 0x3FFFFFFUL; z0 |= t6; z1 &= t6;
286 t8 += (t7 >> 26); t7 &= 0x3FFFFFFUL; z0 |= t7; z1 &= t7;
287 t9 += (t8 >> 26); t8 &= 0x3FFFFFFUL; z0 |= t8; z1 &= t8;
288 z0 |= t9; z1 &= t9 ^ 0x3C00000UL;
293 return (z0 == 0) | (z1 == 0x3FFFFFFUL);
299 r->
n[1] = r->
n[2] = r->
n[3] = r->
n[4] = r->
n[5] = r->
n[6] = r->
n[7] = r->
n[8] = r->
n[9] = 0;
301 r->magnitude = (
a != 0);
303 secp256k1_fe_verify(r);
311 secp256k1_fe_verify(
a);
313 return (t[0] | t[1] | t[2] | t[3] | t[4] | t[5] | t[6] | t[7] | t[8] | t[9]) == 0;
319 secp256k1_fe_verify(
a);
330 for (i=0; i<10; i++) {
340 secp256k1_fe_verify(
a);
341 secp256k1_fe_verify(b);
343 for (i = 9; i >= 0; i--) {
344 if (
a->n[i] > b->
n[i]) {
347 if (
a->n[i] < b->
n[i]) {
354 static int secp256k1_fe_set_b32(
secp256k1_fe *r,
const unsigned char *
a) {
367 ret = !((r->
n[9] == 0x3FFFFFUL) & ((r->
n[8] & r->
n[7] & r->
n[6] & r->
n[5] & r->
n[4] & r->
n[3] & r->
n[2]) == 0x3FFFFFFUL) & ((r->
n[1] + 0x40UL + ((r->
n[0] + 0x3D1UL) >> 26)) > 0x3FFFFFFUL));
372 secp256k1_fe_verify(r);
381 static void secp256k1_fe_get_b32(
unsigned char *r,
const secp256k1_fe *
a) {
384 secp256k1_fe_verify(
a);
386 r[0] = (
a->n[9] >> 14) & 0xff;
387 r[1] = (
a->n[9] >> 6) & 0xff;
388 r[2] = ((
a->n[9] & 0x3F) << 2) | ((
a->n[8] >> 24) & 0x3);
389 r[3] = (
a->n[8] >> 16) & 0xff;
390 r[4] = (
a->n[8] >> 8) & 0xff;
391 r[5] =
a->n[8] & 0xff;
392 r[6] = (
a->n[7] >> 18) & 0xff;
393 r[7] = (
a->n[7] >> 10) & 0xff;
394 r[8] = (
a->n[7] >> 2) & 0xff;
395 r[9] = ((
a->n[7] & 0x3) << 6) | ((
a->n[6] >> 20) & 0x3f);
396 r[10] = (
a->n[6] >> 12) & 0xff;
397 r[11] = (
a->n[6] >> 4) & 0xff;
398 r[12] = ((
a->n[6] & 0xf) << 4) | ((
a->n[5] >> 22) & 0xf);
399 r[13] = (
a->n[5] >> 14) & 0xff;
400 r[14] = (
a->n[5] >> 6) & 0xff;
401 r[15] = ((
a->n[5] & 0x3f) << 2) | ((
a->n[4] >> 24) & 0x3);
402 r[16] = (
a->n[4] >> 16) & 0xff;
403 r[17] = (
a->n[4] >> 8) & 0xff;
404 r[18] =
a->n[4] & 0xff;
405 r[19] = (
a->n[3] >> 18) & 0xff;
406 r[20] = (
a->n[3] >> 10) & 0xff;
407 r[21] = (
a->n[3] >> 2) & 0xff;
408 r[22] = ((
a->n[3] & 0x3) << 6) | ((
a->n[2] >> 20) & 0x3f);
409 r[23] = (
a->n[2] >> 12) & 0xff;
410 r[24] = (
a->n[2] >> 4) & 0xff;
411 r[25] = ((
a->n[2] & 0xf) << 4) | ((
a->n[1] >> 22) & 0xf);
412 r[26] = (
a->n[1] >> 14) & 0xff;
413 r[27] = (
a->n[1] >> 6) & 0xff;
414 r[28] = ((
a->n[1] & 0x3f) << 2) | ((
a->n[0] >> 24) & 0x3);
415 r[29] = (
a->n[0] >> 16) & 0xff;
416 r[30] = (
a->n[0] >> 8) & 0xff;
417 r[31] =
a->n[0] & 0xff;
423 secp256k1_fe_verify(
a);
424 VERIFY_CHECK(0x3FFFC2FUL * 2 * (m + 1) >= 0x3FFFFFFUL * 2 * m);
425 VERIFY_CHECK(0x3FFFFBFUL * 2 * (m + 1) >= 0x3FFFFFFUL * 2 * m);
426 VERIFY_CHECK(0x3FFFFFFUL * 2 * (m + 1) >= 0x3FFFFFFUL * 2 * m);
427 VERIFY_CHECK(0x03FFFFFUL * 2 * (m + 1) >= 0x03FFFFFUL * 2 * m);
429 r->
n[0] = 0x3FFFC2FUL * 2 * (m + 1) -
a->n[0];
430 r->
n[1] = 0x3FFFFBFUL * 2 * (m + 1) -
a->n[1];
431 r->
n[2] = 0x3FFFFFFUL * 2 * (m + 1) -
a->n[2];
432 r->
n[3] = 0x3FFFFFFUL * 2 * (m + 1) -
a->n[3];
433 r->
n[4] = 0x3FFFFFFUL * 2 * (m + 1) -
a->n[4];
434 r->
n[5] = 0x3FFFFFFUL * 2 * (m + 1) -
a->n[5];
435 r->
n[6] = 0x3FFFFFFUL * 2 * (m + 1) -
a->n[6];
436 r->
n[7] = 0x3FFFFFFUL * 2 * (m + 1) -
a->n[7];
437 r->
n[8] = 0x3FFFFFFUL * 2 * (m + 1) -
a->n[8];
438 r->
n[9] = 0x03FFFFFUL * 2 * (m + 1) -
a->n[9];
440 r->magnitude = m + 1;
442 secp256k1_fe_verify(r);
460 secp256k1_fe_verify(r);
466 secp256k1_fe_verify(
a);
479 r->magnitude +=
a->magnitude;
481 secp256k1_fe_verify(r);
485 #if defined(USE_EXTERNAL_ASM) 494 #define VERIFY_BITS(x, n) VERIFY_CHECK(((x) >> (n)) == 0) 496 #define VERIFY_BITS(x, n) do { } while(0) 503 const uint32_t M = 0x3FFFFFFUL, R0 = 0x3D10UL, R1 = 0x400UL;
544 t9 = d & M; d >>= 26;
563 u0 = d & M; d >>= 26; c += u0 * R0;
568 t0 = c & M; c >>= 26; c += u0 * R1;
588 u1 = d & M; d >>= 26; c += u1 * R0;
593 t1 = c & M; c >>= 26; c += u1 * R1;
613 u2 = d & M; d >>= 26; c += u2 * R0;
618 t2 = c & M; c >>= 26; c += u2 * R1;
638 u3 = d & M; d >>= 26; c += u3 * R0;
643 t3 = c & M; c >>= 26; c += u3 * R1;
663 u4 = d & M; d >>= 26; c += u4 * R0;
668 t4 = c & M; c >>= 26; c += u4 * R1;
688 u5 = d & M; d >>= 26; c += u5 * R0;
693 t5 = c & M; c >>= 26; c += u5 * R1;
713 u6 = d & M; d >>= 26; c += u6 * R0;
718 t6 = c & M; c >>= 26; c += u6 * R1;
739 u7 = d & M; d >>= 26; c += u7 * R0;
745 t7 = c & M; c >>= 26; c += u7 * R1;
766 u8 = d & M; d >>= 26; c +=
u8 * R0;
789 r[8] = c & M; c >>= 26; c +=
u8 * R1;
797 r[9] = c & (M >> 4); c >>= 22; c += d * (R1 << 4);
804 d = c * (R0 >> 4) +
t0;
807 r[0] = d & M; d >>= 26;
811 d += c * (R1 >> 4) +
t1;
816 r[1] = d & M; d >>= 26;
833 const uint32_t M = 0x3FFFFFFUL, R0 = 0x3D10UL, R1 = 0x400UL;
858 t9 = d & M; d >>= 26;
873 u0 = d & M; d >>= 26; c += u0 * R0;
878 t0 = c & M; c >>= 26; c += u0 * R1;
893 u1 = d & M; d >>= 26; c += u1 * R0;
898 t1 = c & M; c >>= 26; c += u1 * R1;
914 u2 = d & M; d >>= 26; c += u2 * R0;
919 t2 = c & M; c >>= 26; c += u2 * R1;
934 u3 = d & M; d >>= 26; c += u3 * R0;
939 t3 = c & M; c >>= 26; c += u3 * R1;
955 u4 = d & M; d >>= 26; c += u4 * R0;
960 t4 = c & M; c >>= 26; c += u4 * R1;
975 u5 = d & M; d >>= 26; c += u5 * R0;
980 t5 = c & M; c >>= 26; c += u5 * R1;
996 u6 = d & M; d >>= 26; c += u6 * R0;
1001 t6 = c & M; c >>= 26; c += u6 * R1;
1017 u7 = d & M; d >>= 26; c += u7 * R0;
1023 t7 = c & M; c >>= 26; c += u7 * R1;
1040 u8 = d & M; d >>= 26; c +=
u8 * R0;
1063 r[8] = c & M; c >>= 26; c +=
u8 * R1;
1071 r[9] = c & (M >> 4); c >>= 22; c += d * (R1 << 4);
1078 d = c * (R0 >> 4) +
t0;
1081 r[0] = d & M; d >>= 26;
1085 d += c * (R1 >> 4) +
t1;
1090 r[1] = d & M; d >>= 26;
1108 secp256k1_fe_verify(
a);
1109 secp256k1_fe_verify(b);
1113 secp256k1_fe_mul_inner(r->
n,
a->n, b->n);
1117 secp256k1_fe_verify(r);
1124 secp256k1_fe_verify(
a);
1126 secp256k1_fe_sqr_inner(r->
n,
a->n);
1130 secp256k1_fe_verify(r);
1139 r->
n[0] = (r->
n[0] & mask0) | (
a->n[0] & mask1);
1140 r->
n[1] = (r->
n[1] & mask0) | (
a->n[1] & mask1);
1141 r->
n[2] = (r->
n[2] & mask0) | (
a->n[2] & mask1);
1142 r->
n[3] = (r->
n[3] & mask0) | (
a->n[3] & mask1);
1143 r->
n[4] = (r->
n[4] & mask0) | (
a->n[4] & mask1);
1144 r->
n[5] = (r->
n[5] & mask0) | (
a->n[5] & mask1);
1145 r->
n[6] = (r->
n[6] & mask0) | (
a->n[6] & mask1);
1146 r->
n[7] = (r->
n[7] & mask0) | (
a->n[7] & mask1);
1147 r->
n[8] = (r->
n[8] & mask0) | (
a->n[8] & mask1);
1148 r->
n[9] = (r->
n[9] & mask0) | (
a->n[9] & mask1);
1151 r->magnitude =
a->magnitude;
1152 r->normalized =
a->normalized;
1159 t5 = r->
n[5], t6 = r->
n[6], t7 = r->
n[7], t8 = r->
n[8], t9 = r->
n[9];
1164 secp256k1_fe_verify(r);
1178 t0 += 0x3FFFC2FUL & mask;
1179 t1 += 0x3FFFFBFUL & mask;
1198 r->
n[0] = (
t0 >> 1) + ((
t1 & one) << 25);
1199 r->
n[1] = (
t1 >> 1) + ((
t2 & one) << 25);
1200 r->
n[2] = (
t2 >> 1) + ((
t3 & one) << 25);
1201 r->
n[3] = (
t3 >> 1) + ((t4 & one) << 25);
1202 r->
n[4] = (t4 >> 1) + ((t5 & one) << 25);
1203 r->
n[5] = (t5 >> 1) + ((t6 & one) << 25);
1204 r->
n[6] = (t6 >> 1) + ((t7 & one) << 25);
1205 r->
n[7] = (t7 >> 1) + ((t8 & one) << 25);
1206 r->
n[8] = (t8 >> 1) + ((t9 & one) << 25);
1207 r->
n[9] = (t9 >> 1);
1227 r->magnitude = (r->magnitude >> 1) + 1;
1229 secp256k1_fe_verify(r);
1238 r->
n[0] = (r->
n[0] & mask0) | (
a->n[0] & mask1);
1239 r->
n[1] = (r->
n[1] & mask0) | (
a->n[1] & mask1);
1240 r->
n[2] = (r->
n[2] & mask0) | (
a->n[2] & mask1);
1241 r->
n[3] = (r->
n[3] & mask0) | (
a->n[3] & mask1);
1242 r->
n[4] = (r->
n[4] & mask0) | (
a->n[4] & mask1);
1243 r->
n[5] = (r->
n[5] & mask0) | (
a->n[5] & mask1);
1244 r->
n[6] = (r->
n[6] & mask0) | (
a->n[6] & mask1);
1245 r->
n[7] = (r->
n[7] & mask0) | (
a->n[7] & mask1);
1252 r->
n[0] =
a->n[0] |
a->n[1] << 26;
1253 r->
n[1] =
a->n[1] >> 6 |
a->n[2] << 20;
1254 r->
n[2] =
a->n[2] >> 12 |
a->n[3] << 14;
1255 r->
n[3] =
a->n[3] >> 18 |
a->n[4] << 8;
1256 r->
n[4] =
a->n[4] >> 24 |
a->n[5] << 2 |
a->n[6] << 28;
1257 r->
n[5] =
a->n[6] >> 4 |
a->n[7] << 22;
1258 r->
n[6] =
a->n[7] >> 10 |
a->n[8] << 16;
1259 r->
n[7] =
a->n[8] >> 16 |
a->n[9] << 10;
1263 r->
n[0] =
a->n[0] & 0x3FFFFFFUL;
1264 r->
n[1] =
a->n[0] >> 26 | ((
a->n[1] << 6) & 0x3FFFFFFUL);
1265 r->
n[2] =
a->n[1] >> 20 | ((
a->n[2] << 12) & 0x3FFFFFFUL);
1266 r->
n[3] =
a->n[2] >> 14 | ((
a->n[3] << 18) & 0x3FFFFFFUL);
1267 r->
n[4] =
a->n[3] >> 8 | ((
a->n[4] << 24) & 0x3FFFFFFUL);
1268 r->
n[5] = (
a->n[4] >> 2) & 0x3FFFFFFUL;
1269 r->
n[6] =
a->n[4] >> 28 | ((
a->n[5] << 4) & 0x3FFFFFFUL);
1270 r->
n[7] =
a->n[5] >> 22 | ((
a->n[6] << 10) & 0x3FFFFFFUL);
1271 r->
n[8] =
a->n[6] >> 16 | ((
a->n[7] << 16) & 0x3FFFFFFUL);
1272 r->
n[9] =
a->n[7] >> 10;
1276 secp256k1_fe_verify(r);
1282 const uint32_t a0 =
a->v[0], a1 =
a->v[1], a2 =
a->v[2], a3 =
a->v[3], a4 =
a->v[4],
1283 a5 =
a->v[5], a6 =
a->v[6], a7 =
a->v[7], a8 =
a->v[8];
1299 r->
n[1] = (a0 >> 26 | a1 << 4) & M26;
1300 r->
n[2] = (a1 >> 22 | a2 << 8) & M26;
1301 r->
n[3] = (a2 >> 18 | a3 << 12) & M26;
1302 r->
n[4] = (a3 >> 14 | a4 << 16) & M26;
1303 r->
n[5] = (a4 >> 10 | a5 << 20) & M26;
1304 r->
n[6] = (a5 >> 6 | a6 << 24) & M26;
1305 r->
n[7] = (a6 >> 2 ) & M26;
1306 r->
n[8] = (a6 >> 28 | a7 << 2) & M26;
1307 r->
n[9] = (a7 >> 24 | a8 << 6);
1312 secp256k1_fe_verify(r);
1318 const uint64_t a0 =
a->n[0], a1 =
a->n[1], a2 =
a->n[2], a3 =
a->n[3], a4 =
a->n[4],
1319 a5 =
a->n[5], a6 =
a->n[6], a7 =
a->n[7], a8 =
a->n[8], a9 =
a->n[9];
1325 r->
v[0] = (a0 | a1 << 26) & M30;
1326 r->
v[1] = (a1 >> 4 | a2 << 22) & M30;
1327 r->
v[2] = (a2 >> 8 | a3 << 18) & M30;
1328 r->
v[3] = (a3 >> 12 | a4 << 14) & M30;
1329 r->
v[4] = (a4 >> 16 | a5 << 10) & M30;
1330 r->
v[5] = (a5 >> 20 | a6 << 6) & M30;
1331 r->
v[6] = (a6 >> 24 | a7 << 2
1333 r->
v[7] = (a8 >> 2 | a9 << 24) & M30;
1338 {{-0x3D1, -4, 0, 0, 0, 0, 0, 0, 65536}},
1347 secp256k1_fe_normalize(&tmp);
1348 secp256k1_fe_to_signed30(&s, &tmp);
1349 secp256k1_modinv32(&s, &secp256k1_const_modinfo_fe);
1350 secp256k1_fe_from_signed30(r, &s);
1352 VERIFY_CHECK(secp256k1_fe_normalizes_to_zero(r) == secp256k1_fe_normalizes_to_zero(&tmp));
1360 secp256k1_fe_normalize_var(&tmp);
1361 secp256k1_fe_to_signed30(&s, &tmp);
1362 secp256k1_modinv32_var(&s, &secp256k1_const_modinfo_fe);
1363 secp256k1_fe_from_signed30(r, &s);
1365 VERIFY_CHECK(secp256k1_fe_normalizes_to_zero(r) == secp256k1_fe_normalizes_to_zero(&tmp));
#define VERIFY_CHECK(cond)
unsigned __int64 uint64_t
const GenericPointer< typename T::ValueType > T2 T::AllocatorType & a
#define VERIFY_BITS(x, n)
#define SECP256K1_CHECKMEM_CHECK_VERIFY(p, len)
#define SECP256K1_RESTRICT