19 typedef struct fe { u32 v[10]; } fe;
24 typedef struct fe_loose { u32 v[10]; } fe_loose;
26 static __always_inline void fe_frombytes_impl(u32 h[10], const u8 *s)  in fe_frombytes_impl()
29 	u32 a0 = get_unaligned_le32(s);  in fe_frombytes_impl()
30 	u32 a1 = get_unaligned_le32(s+4);  in fe_frombytes_impl()
31 	u32 a2 = get_unaligned_le32(s+8);  in fe_frombytes_impl()
32 	u32 a3 = get_unaligned_le32(s+12);  in fe_frombytes_impl()
33 	u32 a4 = get_unaligned_le32(s+16);  in fe_frombytes_impl()
34 	u32 a5 = get_unaligned_le32(s+20);  in fe_frombytes_impl()
35 	u32 a6 = get_unaligned_le32(s+24);  in fe_frombytes_impl()
36 	u32 a7 = get_unaligned_le32(s+28);  in fe_frombytes_impl()
55 addcarryx_u25(u8 /*bool*/ c, u32 a, u32 b, u32 *low)  in addcarryx_u25()
60 	u32 x = a + b + c;  in addcarryx_u25()
66 addcarryx_u26(u8 /*bool*/ c, u32 a, u32 b, u32 *low)  in addcarryx_u26()
71 	u32 x = a + b + c;  in addcarryx_u26()
77 subborrow_u25(u8 /*bool*/ c, u32 a, u32 b, u32 *low)  in subborrow_u25()
82 	u32 x = a - b - c;  in subborrow_u25()
88 subborrow_u26(u8 /*bool*/ c, u32 a, u32 b, u32 *low)  in subborrow_u26()
93 	u32 x = a - b - c;  in subborrow_u26()
98 static __always_inline u32 cmovznz32(u32 t, u32 z, u32 nz)  in cmovznz32()
104 static __always_inline void fe_freeze(u32 out[10], const u32 in1[10])  in fe_freeze()
106 	{ const u32 x17 = in1[9];  in fe_freeze()
107 	{ const u32 x18 = in1[8];  in fe_freeze()
108 	{ const u32 x16 = in1[7];  in fe_freeze()
109 	{ const u32 x14 = in1[6];  in fe_freeze()
110 	{ const u32 x12 = in1[5];  in fe_freeze()
111 	{ const u32 x10 = in1[4];  in fe_freeze()
112 	{ const u32 x8 = in1[3];  in fe_freeze()
113 	{ const u32 x6 = in1[2];  in fe_freeze()
114 	{ const u32 x4 = in1[1];  in fe_freeze()
115 	{ const u32 x2 = in1[0];  in fe_freeze()
116 	{ u32 x20; u8/*bool*/ x21 = subborrow_u26(0x0, x2, 0x3ffffed, &x20);  in fe_freeze()
117 	{ u32 x23; u8/*bool*/ x24 = subborrow_u25(x21, x4, 0x1ffffff, &x23);  in fe_freeze()
118 	{ u32 x26; u8/*bool*/ x27 = subborrow_u26(x24, x6, 0x3ffffff, &x26);  in fe_freeze()
119 	{ u32 x29; u8/*bool*/ x30 = subborrow_u25(x27, x8, 0x1ffffff, &x29);  in fe_freeze()
120 	{ u32 x32; u8/*bool*/ x33 = subborrow_u26(x30, x10, 0x3ffffff, &x32);  in fe_freeze()
121 	{ u32 x35; u8/*bool*/ x36 = subborrow_u25(x33, x12, 0x1ffffff, &x35);  in fe_freeze()
122 	{ u32 x38; u8/*bool*/ x39 = subborrow_u26(x36, x14, 0x3ffffff, &x38);  in fe_freeze()
123 	{ u32 x41; u8/*bool*/ x42 = subborrow_u25(x39, x16, 0x1ffffff, &x41);  in fe_freeze()
124 	{ u32 x44; u8/*bool*/ x45 = subborrow_u26(x42, x18, 0x3ffffff, &x44);  in fe_freeze()
125 	{ u32 x47; u8/*bool*/ x48 = subborrow_u25(x45, x17, 0x1ffffff, &x47);  in fe_freeze()
126 	{ u32 x49 = cmovznz32(x48, 0x0, 0xffffffff);  in fe_freeze()
127 	{ u32 x50 = (x49 & 0x3ffffed);  in fe_freeze()
128 	{ u32 x52; u8/*bool*/ x53 = addcarryx_u26(0x0, x20, x50, &x52);  in fe_freeze()
129 	{ u32 x54 = (x49 & 0x1ffffff);  in fe_freeze()
130 	{ u32 x56; u8/*bool*/ x57 = addcarryx_u25(x53, x23, x54, &x56);  in fe_freeze()
131 	{ u32 x58 = (x49 & 0x3ffffff);  in fe_freeze()
132 	{ u32 x60; u8/*bool*/ x61 = addcarryx_u26(x57, x26, x58, &x60);  in fe_freeze()
133 	{ u32 x62 = (x49 & 0x1ffffff);  in fe_freeze()
134 	{ u32 x64; u8/*bool*/ x65 = addcarryx_u25(x61, x29, x62, &x64);  in fe_freeze()
135 	{ u32 x66 = (x49 & 0x3ffffff);  in fe_freeze()
136 	{ u32 x68; u8/*bool*/ x69 = addcarryx_u26(x65, x32, x66, &x68);  in fe_freeze()
137 	{ u32 x70 = (x49 & 0x1ffffff);  in fe_freeze()
138 	{ u32 x72; u8/*bool*/ x73 = addcarryx_u25(x69, x35, x70, &x72);  in fe_freeze()
139 	{ u32 x74 = (x49 & 0x3ffffff);  in fe_freeze()
140 	{ u32 x76; u8/*bool*/ x77 = addcarryx_u26(x73, x38, x74, &x76);  in fe_freeze()
141 	{ u32 x78 = (x49 & 0x1ffffff);  in fe_freeze()
142 	{ u32 x80; u8/*bool*/ x81 = addcarryx_u25(x77, x41, x78, &x80);  in fe_freeze()
143 	{ u32 x82 = (x49 & 0x3ffffff);  in fe_freeze()
144 	{ u32 x84; u8/*bool*/ x85 = addcarryx_u26(x81, x44, x82, &x84);  in fe_freeze()
145 	{ u32 x86 = (x49 & 0x1ffffff);  in fe_freeze()
146 	{ u32 x88; addcarryx_u25(x85, x47, x86, &x88);  in fe_freeze()
162 	u32 h[10];  in fe_tobytes()
201 	memmove(h, f, sizeof(u32) * 10);  in fe_copy()
206 	memmove(h, f, sizeof(u32) * 10);  in fe_copy_lt()
212 	memset(h, 0, sizeof(u32) * 10);  in fe_0()
218 	memset(h, 0, sizeof(u32) * 10);  in fe_1()
222 static void fe_add_impl(u32 out[10], const u32 in1[10], const u32 in2[10])  in fe_add_impl()
224 	{ const u32 x20 = in1[9];  in fe_add_impl()
225 	{ const u32 x21 = in1[8];  in fe_add_impl()
226 	{ const u32 x19 = in1[7];  in fe_add_impl()
227 	{ const u32 x17 = in1[6];  in fe_add_impl()
228 	{ const u32 x15 = in1[5];  in fe_add_impl()
229 	{ const u32 x13 = in1[4];  in fe_add_impl()
230 	{ const u32 x11 = in1[3];  in fe_add_impl()
231 	{ const u32 x9 = in1[2];  in fe_add_impl()
232 	{ const u32 x7 = in1[1];  in fe_add_impl()
233 	{ const u32 x5 = in1[0];  in fe_add_impl()
234 	{ const u32 x38 = in2[9];  in fe_add_impl()
235 	{ const u32 x39 = in2[8];  in fe_add_impl()
236 	{ const u32 x37 = in2[7];  in fe_add_impl()
237 	{ const u32 x35 = in2[6];  in fe_add_impl()
238 	{ const u32 x33 = in2[5];  in fe_add_impl()
239 	{ const u32 x31 = in2[4];  in fe_add_impl()
240 	{ const u32 x29 = in2[3];  in fe_add_impl()
241 	{ const u32 x27 = in2[2];  in fe_add_impl()
242 	{ const u32 x25 = in2[1];  in fe_add_impl()
243 	{ const u32 x23 = in2[0];  in fe_add_impl()
265 static void fe_sub_impl(u32 out[10], const u32 in1[10], const u32 in2[10])  in fe_sub_impl()
267 	{ const u32 x20 = in1[9];  in fe_sub_impl()
268 	{ const u32 x21 = in1[8];  in fe_sub_impl()
269 	{ const u32 x19 = in1[7];  in fe_sub_impl()
270 	{ const u32 x17 = in1[6];  in fe_sub_impl()
271 	{ const u32 x15 = in1[5];  in fe_sub_impl()
272 	{ const u32 x13 = in1[4];  in fe_sub_impl()
273 	{ const u32 x11 = in1[3];  in fe_sub_impl()
274 	{ const u32 x9 = in1[2];  in fe_sub_impl()
275 	{ const u32 x7 = in1[1];  in fe_sub_impl()
276 	{ const u32 x5 = in1[0];  in fe_sub_impl()
277 	{ const u32 x38 = in2[9];  in fe_sub_impl()
278 	{ const u32 x39 = in2[8];  in fe_sub_impl()
279 	{ const u32 x37 = in2[7];  in fe_sub_impl()
280 	{ const u32 x35 = in2[6];  in fe_sub_impl()
281 	{ const u32 x33 = in2[5];  in fe_sub_impl()
282 	{ const u32 x31 = in2[4];  in fe_sub_impl()
283 	{ const u32 x29 = in2[3];  in fe_sub_impl()
284 	{ const u32 x27 = in2[2];  in fe_sub_impl()
285 	{ const u32 x25 = in2[1];  in fe_sub_impl()
286 	{ const u32 x23 = in2[0];  in fe_sub_impl()
308 static void fe_mul_impl(u32 out[10], const u32 in1[10], const u32 in2[10])  in fe_mul_impl()
310 	{ const u32 x20 = in1[9];  in fe_mul_impl()
311 	{ const u32 x21 = in1[8];  in fe_mul_impl()
312 	{ const u32 x19 = in1[7];  in fe_mul_impl()
313 	{ const u32 x17 = in1[6];  in fe_mul_impl()
314 	{ const u32 x15 = in1[5];  in fe_mul_impl()
315 	{ const u32 x13 = in1[4];  in fe_mul_impl()
316 	{ const u32 x11 = in1[3];  in fe_mul_impl()
317 	{ const u32 x9 = in1[2];  in fe_mul_impl()
318 	{ const u32 x7 = in1[1];  in fe_mul_impl()
319 	{ const u32 x5 = in1[0];  in fe_mul_impl()
320 	{ const u32 x38 = in2[9];  in fe_mul_impl()
321 	{ const u32 x39 = in2[8];  in fe_mul_impl()
322 	{ const u32 x37 = in2[7];  in fe_mul_impl()
323 	{ const u32 x35 = in2[6];  in fe_mul_impl()
324 	{ const u32 x33 = in2[5];  in fe_mul_impl()
325 	{ const u32 x31 = in2[4];  in fe_mul_impl()
326 	{ const u32 x29 = in2[3];  in fe_mul_impl()
327 	{ const u32 x27 = in2[2];  in fe_mul_impl()
328 	{ const u32 x25 = in2[1];  in fe_mul_impl()
329 	{ const u32 x23 = in2[0];  in fe_mul_impl()
377 	{ u32 x87 = ((u32)x85 & 0x3ffffff);  in fe_mul_impl()
380 	{ u32 x90 = ((u32)x88 & 0x1ffffff);  in fe_mul_impl()
383 	{ u32 x93 = ((u32)x91 & 0x3ffffff);  in fe_mul_impl()
386 	{ u32 x96 = ((u32)x94 & 0x1ffffff);  in fe_mul_impl()
389 	{ u32 x99 = ((u32)x97 & 0x3ffffff);  in fe_mul_impl()
392 	{ u32 x102 = ((u32)x100 & 0x1ffffff);  in fe_mul_impl()
395 	{ u32 x105 = ((u32)x103 & 0x3ffffff);  in fe_mul_impl()
398 	{ u32 x108 = ((u32)x106 & 0x1ffffff);  in fe_mul_impl()
401 	{ u32 x111 = ((u32)x109 & 0x3ffffff);  in fe_mul_impl()
404 	{ u32 x114 = ((u32)x112 & 0x1ffffff);  in fe_mul_impl()
406 	{ u32 x116 = (u32) (x115 >> 0x1a);  in fe_mul_impl()
407 	{ u32 x117 = ((u32)x115 & 0x3ffffff);  in fe_mul_impl()
408 	{ u32 x118 = (x116 + x90);  in fe_mul_impl()
409 	{ u32 x119 = (x118 >> 0x19);  in fe_mul_impl()
410 	{ u32 x120 = (x118 & 0x1ffffff);  in fe_mul_impl()
440 static void fe_sqr_impl(u32 out[10], const u32 in1[10])  in fe_sqr_impl()
442 	{ const u32 x17 = in1[9];  in fe_sqr_impl()
443 	{ const u32 x18 = in1[8];  in fe_sqr_impl()
444 	{ const u32 x16 = in1[7];  in fe_sqr_impl()
445 	{ const u32 x14 = in1[6];  in fe_sqr_impl()
446 	{ const u32 x12 = in1[5];  in fe_sqr_impl()
447 	{ const u32 x10 = in1[4];  in fe_sqr_impl()
448 	{ const u32 x8 = in1[3];  in fe_sqr_impl()
449 	{ const u32 x6 = in1[2];  in fe_sqr_impl()
450 	{ const u32 x4 = in1[1];  in fe_sqr_impl()
451 	{ const u32 x2 = in1[0];  in fe_sqr_impl()
499 	{ u32 x66 = ((u32)x64 & 0x3ffffff);  in fe_sqr_impl()
502 	{ u32 x69 = ((u32)x67 & 0x1ffffff);  in fe_sqr_impl()
505 	{ u32 x72 = ((u32)x70 & 0x3ffffff);  in fe_sqr_impl()
508 	{ u32 x75 = ((u32)x73 & 0x1ffffff);  in fe_sqr_impl()
511 	{ u32 x78 = ((u32)x76 & 0x3ffffff);  in fe_sqr_impl()
514 	{ u32 x81 = ((u32)x79 & 0x1ffffff);  in fe_sqr_impl()
517 	{ u32 x84 = ((u32)x82 & 0x3ffffff);  in fe_sqr_impl()
520 	{ u32 x87 = ((u32)x85 & 0x1ffffff);  in fe_sqr_impl()
523 	{ u32 x90 = ((u32)x88 & 0x3ffffff);  in fe_sqr_impl()
526 	{ u32 x93 = ((u32)x91 & 0x1ffffff);  in fe_sqr_impl()
528 	{ u32 x95 = (u32) (x94 >> 0x1a);  in fe_sqr_impl()
529 	{ u32 x96 = ((u32)x94 & 0x3ffffff);  in fe_sqr_impl()
530 	{ u32 x97 = (x95 + x69);  in fe_sqr_impl()
531 	{ u32 x98 = (x97 >> 0x19);  in fe_sqr_impl()
532 	{ u32 x99 = (x97 & 0x1ffffff);  in fe_sqr_impl()
623 		u32 x = f->v[i] ^ g->v[i];  in fe_cswap()
631 static __always_inline void fe_mul_121666_impl(u32 out[10], const u32 in1[10])  in fe_mul_121666_impl()
633 	{ const u32 x20 = in1[9];  in fe_mul_121666_impl()
634 	{ const u32 x21 = in1[8];  in fe_mul_121666_impl()
635 	{ const u32 x19 = in1[7];  in fe_mul_121666_impl()
636 	{ const u32 x17 = in1[6];  in fe_mul_121666_impl()
637 	{ const u32 x15 = in1[5];  in fe_mul_121666_impl()
638 	{ const u32 x13 = in1[4];  in fe_mul_121666_impl()
639 	{ const u32 x11 = in1[3];  in fe_mul_121666_impl()
640 	{ const u32 x9 = in1[2];  in fe_mul_121666_impl()
641 	{ const u32 x7 = in1[1];  in fe_mul_121666_impl()
642 	{ const u32 x5 = in1[0];  in fe_mul_121666_impl()
643 	{ const u32 x38 = 0;  in fe_mul_121666_impl()
644 	{ const u32 x39 = 0;  in fe_mul_121666_impl()
645 	{ const u32 x37 = 0;  in fe_mul_121666_impl()
646 	{ const u32 x35 = 0;  in fe_mul_121666_impl()
647 	{ const u32 x33 = 0;  in fe_mul_121666_impl()
648 	{ const u32 x31 = 0;  in fe_mul_121666_impl()
649 	{ const u32 x29 = 0;  in fe_mul_121666_impl()
650 	{ const u32 x27 = 0;  in fe_mul_121666_impl()
651 	{ const u32 x25 = 0;  in fe_mul_121666_impl()
652 	{ const u32 x23 = 121666;  in fe_mul_121666_impl()
700 	{ u32 x87 = ((u32)x85 & 0x3ffffff);  in fe_mul_121666_impl()
703 	{ u32 x90 = ((u32)x88 & 0x1ffffff);  in fe_mul_121666_impl()
706 	{ u32 x93 = ((u32)x91 & 0x3ffffff);  in fe_mul_121666_impl()
709 	{ u32 x96 = ((u32)x94 & 0x1ffffff);  in fe_mul_121666_impl()
712 	{ u32 x99 = ((u32)x97 & 0x3ffffff);  in fe_mul_121666_impl()
715 	{ u32 x102 = ((u32)x100 & 0x1ffffff);  in fe_mul_121666_impl()
718 	{ u32 x105 = ((u32)x103 & 0x3ffffff);  in fe_mul_121666_impl()
721 	{ u32 x108 = ((u32)x106 & 0x1ffffff);  in fe_mul_121666_impl()
724 	{ u32 x111 = ((u32)x109 & 0x3ffffff);  in fe_mul_121666_impl()
727 	{ u32 x114 = ((u32)x112 & 0x1ffffff);  in fe_mul_121666_impl()
729 	{ u32 x116 = (u32) (x115 >> 0x1a);  in fe_mul_121666_impl()
730 	{ u32 x117 = ((u32)x115 & 0x3ffffff);  in fe_mul_121666_impl()
731 	{ u32 x118 = (x116 + x90);  in fe_mul_121666_impl()
732 	{ u32 x119 = (x118 >> 0x19);  in fe_mul_121666_impl()
733 	{ u32 x120 = (x118 & 0x1ffffff);  in fe_mul_121666_impl()