148 	uint32_t u[45], v[45], w[90];  in mul20()  local
214 	memcpy(v, b, 20 * sizeof *b);  in mul20()
215 	ZADD(v, 4, b, 0, b, 1);  in mul20()
216 	ZADD(v, 5, b, 2, b, 3);  in mul20()
217 	ZADD(v, 6, b, 0, b, 2);  in mul20()
218 	ZADD(v, 7, b, 1, b, 3);  in mul20()
219 	ZADD(v, 8, v, 6, v, 7);  in mul20()
227 		w[(i << 1) + 0] = MUL15(u[i + 0], v[i + 0]);  in mul20()
228 		w[(i << 1) + 1] = MUL15(u[i + 0], v[i + 1])  in mul20()
229 			+ MUL15(u[i + 1], v[i + 0]);  in mul20()
230 		w[(i << 1) + 2] = MUL15(u[i + 0], v[i + 2])  in mul20()
231 			+ MUL15(u[i + 1], v[i + 1])  in mul20()
232 			+ MUL15(u[i + 2], v[i + 0]);  in mul20()
233 		w[(i << 1) + 3] = MUL15(u[i + 0], v[i + 3])  in mul20()
234 			+ MUL15(u[i + 1], v[i + 2])  in mul20()
235 			+ MUL15(u[i + 2], v[i + 1])  in mul20()
236 			+ MUL15(u[i + 3], v[i + 0]);  in mul20()
237 		w[(i << 1) + 4] = MUL15(u[i + 0], v[i + 4])  in mul20()
238 			+ MUL15(u[i + 1], v[i + 3])  in mul20()
239 			+ MUL15(u[i + 2], v[i + 2])  in mul20()
240 			+ MUL15(u[i + 3], v[i + 1])  in mul20()
241 			+ MUL15(u[i + 4], v[i + 0]);  in mul20()
242 		w[(i << 1) + 5] = MUL15(u[i + 1], v[i + 4])  in mul20()
243 			+ MUL15(u[i + 2], v[i + 3])  in mul20()
244 			+ MUL15(u[i + 3], v[i + 2])  in mul20()
245 			+ MUL15(u[i + 4], v[i + 1]);  in mul20()
246 		w[(i << 1) + 6] = MUL15(u[i + 2], v[i + 4])  in mul20()
247 			+ MUL15(u[i + 3], v[i + 3])  in mul20()
248 			+ MUL15(u[i + 4], v[i + 2]);  in mul20()
249 		w[(i << 1) + 7] = MUL15(u[i + 3], v[i + 4])  in mul20()
250 			+ MUL15(u[i + 4], v[i + 3]);  in mul20()
251 		w[(i << 1) + 8] = MUL15(u[i + 4], v[i + 4]);  in mul20()
267 	w[80 + 0] = MUL15(u[40 + 0], v[40 + 0]);  in mul20()
268 	w[80 + 1] = MUL15(u[40 + 0], v[40 + 1])  in mul20()
269 		+ MUL15(u[40 + 1], v[40 + 0]);  in mul20()
270 	w[80 + 2] = MUL15(u[40 + 0], v[40 + 2])  in mul20()
271 		+ MUL15(u[40 + 1], v[40 + 1])  in mul20()
272 		+ MUL15(u[40 + 2], v[40 + 0]);  in mul20()
273 	w[80 + 3] = MUL15(u[40 + 0], v[40 + 3])  in mul20()
274 		+ MUL15(u[40 + 1], v[40 + 2])  in mul20()
275 		+ MUL15(u[40 + 2], v[40 + 1])  in mul20()
276 		+ MUL15(u[40 + 3], v[40 + 0]);  in mul20()
277 	w[80 + 4] = MUL15(u[40 + 0], v[40 + 4])  in mul20()
278 		+ MUL15(u[40 + 1], v[40 + 3])  in mul20()
279 		+ MUL15(u[40 + 2], v[40 + 2])  in mul20()
280 		+ MUL15(u[40 + 3], v[40 + 1]);  in mul20()
281 		/* + MUL15(u[40 + 4], v[40 + 0]) */  in mul20()
282 	w[80 + 5] = MUL15(u[40 + 1], v[40 + 4])  in mul20()
283 		+ MUL15(u[40 + 2], v[40 + 3])  in mul20()
284 		+ MUL15(u[40 + 3], v[40 + 2])  in mul20()
285 		+ MUL15(u[40 + 4], v[40 + 1]);  in mul20()
286 	w[80 + 6] = MUL15(u[40 + 2], v[40 + 4])  in mul20()
287 		+ MUL15(u[40 + 3], v[40 + 3])  in mul20()
288 		+ MUL15(u[40 + 4], v[40 + 2]);  in mul20()
289 	w[80 + 7] = MUL15(u[40 + 3], v[40 + 4])  in mul20()
290 		+ MUL15(u[40 + 4], v[40 + 3]);  in mul20()
291 	w[80 + 8] = MUL15(u[40 + 4], v[40 + 4]);  in mul20()
295 	w[80 + 4] += MUL15(u[40 + 4], v[40 + 0]);  in mul20()
537 	t[18] = MUL15(a[ 0], b[18])  in mul20()
555 		+ MUL15(a[18], b[ 0]);  in mul20()
557 		+ MUL15(a[ 1], b[18])  in mul20()
574 		+ MUL15(a[18], b[ 1])  in mul20()
577 		+ MUL15(a[ 2], b[18])  in mul20()
593 		+ MUL15(a[18], b[ 2])  in mul20()
596 		+ MUL15(a[ 3], b[18])  in mul20()
611 		+ MUL15(a[18], b[ 3])  in mul20()
614 		+ MUL15(a[ 4], b[18])  in mul20()
628 		+ MUL15(a[18], b[ 4])  in mul20()
631 		+ MUL15(a[ 5], b[18])  in mul20()
644 		+ MUL15(a[18], b[ 5])  in mul20()
647 		+ MUL15(a[ 6], b[18])  in mul20()
659 		+ MUL15(a[18], b[ 6])  in mul20()
662 		+ MUL15(a[ 7], b[18])  in mul20()
673 		+ MUL15(a[18], b[ 7])  in mul20()
676 		+ MUL15(a[ 8], b[18])  in mul20()
686 		+ MUL15(a[18], b[ 8])  in mul20()
689 		+ MUL15(a[ 9], b[18])  in mul20()
698 		+ MUL15(a[18], b[ 9])  in mul20()
701 		+ MUL15(a[10], b[18])  in mul20()
709 		+ MUL15(a[18], b[10])  in mul20()
712 		+ MUL15(a[11], b[18])  in mul20()
719 		+ MUL15(a[18], b[11])  in mul20()
722 		+ MUL15(a[12], b[18])  in mul20()
728 		+ MUL15(a[18], b[12])  in mul20()
731 		+ MUL15(a[13], b[18])  in mul20()
736 		+ MUL15(a[18], b[13])  in mul20()
739 		+ MUL15(a[14], b[18])  in mul20()
743 		+ MUL15(a[18], b[14])  in mul20()
746 		+ MUL15(a[15], b[18])  in mul20()
749 		+ MUL15(a[18], b[15])  in mul20()
752 		+ MUL15(a[16], b[18])  in mul20()
754 		+ MUL15(a[18], b[16])  in mul20()
757 		+ MUL15(a[17], b[18])  in mul20()
758 		+ MUL15(a[18], b[17])  in mul20()
761 		+ MUL15(a[18], b[18])  in mul20()
763 	t[37] = MUL15(a[18], b[19])  in mul20()
764 		+ MUL15(a[19], b[18]);  in mul20()
864 	t[18] = MUL15(a[ 9], a[ 9])  in square20()
865 		+ ((MUL15(a[ 0], a[18])  in square20()
875 		+ MUL15(a[ 1], a[18])  in square20()
886 		+ MUL15(a[ 2], a[18])  in square20()
895 		+ MUL15(a[ 3], a[18])  in square20()
905 		+ MUL15(a[ 4], a[18])  in square20()
913 		+ MUL15(a[ 5], a[18])  in square20()
922 		+ MUL15(a[ 6], a[18])  in square20()
929 		+ MUL15(a[ 7], a[18])  in square20()
937 		+ MUL15(a[ 8], a[18])  in square20()
943 		+ MUL15(a[ 9], a[18])  in square20()
950 		+ MUL15(a[10], a[18])  in square20()
955 		+ MUL15(a[11], a[18])  in square20()
961 		+ MUL15(a[12], a[18])  in square20()
965 		+ MUL15(a[13], a[18])  in square20()
970 		+ MUL15(a[14], a[18])  in square20()
973 		+ MUL15(a[15], a[18])  in square20()
977 		+ MUL15(a[16], a[18])) << 1);  in square20()
979 		+ MUL15(a[17], a[18])) << 1);  in square20()
980 	t[36] = MUL15(a[18], a[18])  in square20()
982 	t[37] = ((MUL15(a[18], a[19])) << 1);  in square20()