1#![allow(unused_parens)]
21#![allow(non_camel_case_types)]
22
23struct IndexConst<T: ?Sized>(T);
27
28impl<'a, T, const N: usize> IndexConst<&'a [T; N]> {
29 #[inline(always)]
30 #[allow(unused)]
31 const fn index(self, i: usize) -> &'a T {
32 &self.0[i]
33 }
34}
35impl<'a, 'b, T, const N: usize> IndexConst<&'a mut &'b mut [T; N]> {
36 #[inline(always)]
37 #[allow(unused)]
38 const fn index_mut(self, i: usize) -> &'a mut T {
39 &mut self.0[i]
40 }
41}
42
43pub type fiat_p224_u1 = u8;
45pub type fiat_p224_i1 = i8;
47pub type fiat_p224_u2 = u8;
49pub type fiat_p224_i2 = i8;
51
52#[derive(Clone, Copy)]
55pub struct fiat_p224_montgomery_domain_field_element(pub [u64; 4]);
56
57impl core::ops::Index<usize> for fiat_p224_montgomery_domain_field_element {
58 type Output = u64;
59 #[inline]
60 fn index(&self, index: usize) -> &Self::Output {
61 &self.0[index]
62 }
63}
64
65impl core::ops::IndexMut<usize> for fiat_p224_montgomery_domain_field_element {
66 #[inline]
67 fn index_mut(&mut self, index: usize) -> &mut Self::Output {
68 &mut self.0[index]
69 }
70}
71
72impl<'a> IndexConst<&'a fiat_p224_montgomery_domain_field_element> {
73 #[allow(unused)]
74 #[inline(always)]
75 const fn index(self, i: usize) -> &'a u64 {
76 &self.0.0[i]
77 }
78}
79
80impl<'a, 'b> IndexConst<&'a mut &'b mut fiat_p224_montgomery_domain_field_element> {
81 #[allow(unused)]
82 #[inline(always)]
83 const fn index_mut(self, i: usize) -> &'a mut u64 {
84 &mut self.0.0[i]
85 }
86}
87
88#[derive(Clone, Copy)]
91pub struct fiat_p224_non_montgomery_domain_field_element(pub [u64; 4]);
92
93impl core::ops::Index<usize> for fiat_p224_non_montgomery_domain_field_element {
94 type Output = u64;
95 #[inline]
96 fn index(&self, index: usize) -> &Self::Output {
97 &self.0[index]
98 }
99}
100
101impl core::ops::IndexMut<usize> for fiat_p224_non_montgomery_domain_field_element {
102 #[inline]
103 fn index_mut(&mut self, index: usize) -> &mut Self::Output {
104 &mut self.0[index]
105 }
106}
107
108impl<'a> IndexConst<&'a fiat_p224_non_montgomery_domain_field_element> {
109 #[allow(unused)]
110 #[inline(always)]
111 const fn index(self, i: usize) -> &'a u64 {
112 &self.0.0[i]
113 }
114}
115
116impl<'a, 'b> IndexConst<&'a mut &'b mut fiat_p224_non_montgomery_domain_field_element> {
117 #[allow(unused)]
118 #[inline(always)]
119 const fn index_mut(self, i: usize) -> &'a mut u64 {
120 &mut self.0.0[i]
121 }
122}
123
124
125#[inline]
139pub const fn fiat_p224_addcarryx_u64(out1: &mut u64, out2: &mut fiat_p224_u1, arg1: fiat_p224_u1, arg2: u64, arg3: u64) {
140 let x1: u128 = (((arg1 as u128) + (arg2 as u128)) + (arg3 as u128));
141 let x2: u64 = ((x1 & (0xffffffffffffffff as u128)) as u64);
142 let x3: fiat_p224_u1 = ((x1 >> 64) as fiat_p224_u1);
143 *out1 = x2;
144 *out2 = x3;
145}
146
147#[inline]
161pub const fn fiat_p224_subborrowx_u64(out1: &mut u64, out2: &mut fiat_p224_u1, arg1: fiat_p224_u1, arg2: u64, arg3: u64) {
162 let x1: i128 = (((arg2 as i128) - (arg1 as i128)) - (arg3 as i128));
163 let x2: fiat_p224_i1 = ((x1 >> 64) as fiat_p224_i1);
164 let x3: u64 = ((x1 & (0xffffffffffffffff as i128)) as u64);
165 *out1 = x3;
166 *out2 = (((0x0 as fiat_p224_i2) - (x2 as fiat_p224_i2)) as fiat_p224_u1);
167}
168
169#[inline]
182pub const fn fiat_p224_mulx_u64(out1: &mut u64, out2: &mut u64, arg1: u64, arg2: u64) {
183 let x1: u128 = ((arg1 as u128) * (arg2 as u128));
184 let x2: u64 = ((x1 & (0xffffffffffffffff as u128)) as u64);
185 let x3: u64 = ((x1 >> 64) as u64);
186 *out1 = x2;
187 *out2 = x3;
188}
189
190#[inline]
202pub const fn fiat_p224_cmovznz_u64(out1: &mut u64, arg1: fiat_p224_u1, arg2: u64, arg3: u64) {
203 let x1: fiat_p224_u1 = (!(!arg1));
204 let x2: u64 = ((((((0x0 as fiat_p224_i2) - (x1 as fiat_p224_i2)) as fiat_p224_i1) as i128) & (0xffffffffffffffff as i128)) as u64);
205 let x3: u64 = ((x2 & arg3) | ((!x2) & arg2));
206 *out1 = x3;
207}
208
209#[inline]
219pub const fn fiat_p224_mul(mut out1: &mut fiat_p224_montgomery_domain_field_element, arg1: &fiat_p224_montgomery_domain_field_element, arg2: &fiat_p224_montgomery_domain_field_element) {
220 let x1: u64 = (*IndexConst(arg1).index(1));
221 let x2: u64 = (*IndexConst(arg1).index(2));
222 let x3: u64 = (*IndexConst(arg1).index(3));
223 let x4: u64 = (*IndexConst(arg1).index(0));
224 let mut x5: u64 = 0;
225 let mut x6: u64 = 0;
226 fiat_p224_mulx_u64(&mut x5, &mut x6, x4, (*IndexConst(arg2).index(3)));
227 let mut x7: u64 = 0;
228 let mut x8: u64 = 0;
229 fiat_p224_mulx_u64(&mut x7, &mut x8, x4, (*IndexConst(arg2).index(2)));
230 let mut x9: u64 = 0;
231 let mut x10: u64 = 0;
232 fiat_p224_mulx_u64(&mut x9, &mut x10, x4, (*IndexConst(arg2).index(1)));
233 let mut x11: u64 = 0;
234 let mut x12: u64 = 0;
235 fiat_p224_mulx_u64(&mut x11, &mut x12, x4, (*IndexConst(arg2).index(0)));
236 let mut x13: u64 = 0;
237 let mut x14: fiat_p224_u1 = 0;
238 fiat_p224_addcarryx_u64(&mut x13, &mut x14, 0x0, x12, x9);
239 let mut x15: u64 = 0;
240 let mut x16: fiat_p224_u1 = 0;
241 fiat_p224_addcarryx_u64(&mut x15, &mut x16, x14, x10, x7);
242 let mut x17: u64 = 0;
243 let mut x18: fiat_p224_u1 = 0;
244 fiat_p224_addcarryx_u64(&mut x17, &mut x18, x16, x8, x5);
245 let x19: u64 = ((x18 as u64) + x6);
246 let mut x20: u64 = 0;
247 let mut x21: u64 = 0;
248 fiat_p224_mulx_u64(&mut x20, &mut x21, x11, 0xffffffffffffffff);
249 let mut x22: u64 = 0;
250 let mut x23: u64 = 0;
251 fiat_p224_mulx_u64(&mut x22, &mut x23, x20, 0xffffffff);
252 let mut x24: u64 = 0;
253 let mut x25: u64 = 0;
254 fiat_p224_mulx_u64(&mut x24, &mut x25, x20, 0xffffffffffffffff);
255 let mut x26: u64 = 0;
256 let mut x27: u64 = 0;
257 fiat_p224_mulx_u64(&mut x26, &mut x27, x20, 0xffffffff00000000);
258 let mut x28: u64 = 0;
259 let mut x29: fiat_p224_u1 = 0;
260 fiat_p224_addcarryx_u64(&mut x28, &mut x29, 0x0, x27, x24);
261 let mut x30: u64 = 0;
262 let mut x31: fiat_p224_u1 = 0;
263 fiat_p224_addcarryx_u64(&mut x30, &mut x31, x29, x25, x22);
264 let x32: u64 = ((x31 as u64) + x23);
265 let mut x33: u64 = 0;
266 let mut x34: fiat_p224_u1 = 0;
267 fiat_p224_addcarryx_u64(&mut x33, &mut x34, 0x0, x11, x20);
268 let mut x35: u64 = 0;
269 let mut x36: fiat_p224_u1 = 0;
270 fiat_p224_addcarryx_u64(&mut x35, &mut x36, x34, x13, x26);
271 let mut x37: u64 = 0;
272 let mut x38: fiat_p224_u1 = 0;
273 fiat_p224_addcarryx_u64(&mut x37, &mut x38, x36, x15, x28);
274 let mut x39: u64 = 0;
275 let mut x40: fiat_p224_u1 = 0;
276 fiat_p224_addcarryx_u64(&mut x39, &mut x40, x38, x17, x30);
277 let mut x41: u64 = 0;
278 let mut x42: fiat_p224_u1 = 0;
279 fiat_p224_addcarryx_u64(&mut x41, &mut x42, x40, x19, x32);
280 let mut x43: u64 = 0;
281 let mut x44: u64 = 0;
282 fiat_p224_mulx_u64(&mut x43, &mut x44, x1, (*IndexConst(arg2).index(3)));
283 let mut x45: u64 = 0;
284 let mut x46: u64 = 0;
285 fiat_p224_mulx_u64(&mut x45, &mut x46, x1, (*IndexConst(arg2).index(2)));
286 let mut x47: u64 = 0;
287 let mut x48: u64 = 0;
288 fiat_p224_mulx_u64(&mut x47, &mut x48, x1, (*IndexConst(arg2).index(1)));
289 let mut x49: u64 = 0;
290 let mut x50: u64 = 0;
291 fiat_p224_mulx_u64(&mut x49, &mut x50, x1, (*IndexConst(arg2).index(0)));
292 let mut x51: u64 = 0;
293 let mut x52: fiat_p224_u1 = 0;
294 fiat_p224_addcarryx_u64(&mut x51, &mut x52, 0x0, x50, x47);
295 let mut x53: u64 = 0;
296 let mut x54: fiat_p224_u1 = 0;
297 fiat_p224_addcarryx_u64(&mut x53, &mut x54, x52, x48, x45);
298 let mut x55: u64 = 0;
299 let mut x56: fiat_p224_u1 = 0;
300 fiat_p224_addcarryx_u64(&mut x55, &mut x56, x54, x46, x43);
301 let x57: u64 = ((x56 as u64) + x44);
302 let mut x58: u64 = 0;
303 let mut x59: fiat_p224_u1 = 0;
304 fiat_p224_addcarryx_u64(&mut x58, &mut x59, 0x0, x35, x49);
305 let mut x60: u64 = 0;
306 let mut x61: fiat_p224_u1 = 0;
307 fiat_p224_addcarryx_u64(&mut x60, &mut x61, x59, x37, x51);
308 let mut x62: u64 = 0;
309 let mut x63: fiat_p224_u1 = 0;
310 fiat_p224_addcarryx_u64(&mut x62, &mut x63, x61, x39, x53);
311 let mut x64: u64 = 0;
312 let mut x65: fiat_p224_u1 = 0;
313 fiat_p224_addcarryx_u64(&mut x64, &mut x65, x63, x41, x55);
314 let mut x66: u64 = 0;
315 let mut x67: fiat_p224_u1 = 0;
316 fiat_p224_addcarryx_u64(&mut x66, &mut x67, x65, (x42 as u64), x57);
317 let mut x68: u64 = 0;
318 let mut x69: u64 = 0;
319 fiat_p224_mulx_u64(&mut x68, &mut x69, x58, 0xffffffffffffffff);
320 let mut x70: u64 = 0;
321 let mut x71: u64 = 0;
322 fiat_p224_mulx_u64(&mut x70, &mut x71, x68, 0xffffffff);
323 let mut x72: u64 = 0;
324 let mut x73: u64 = 0;
325 fiat_p224_mulx_u64(&mut x72, &mut x73, x68, 0xffffffffffffffff);
326 let mut x74: u64 = 0;
327 let mut x75: u64 = 0;
328 fiat_p224_mulx_u64(&mut x74, &mut x75, x68, 0xffffffff00000000);
329 let mut x76: u64 = 0;
330 let mut x77: fiat_p224_u1 = 0;
331 fiat_p224_addcarryx_u64(&mut x76, &mut x77, 0x0, x75, x72);
332 let mut x78: u64 = 0;
333 let mut x79: fiat_p224_u1 = 0;
334 fiat_p224_addcarryx_u64(&mut x78, &mut x79, x77, x73, x70);
335 let x80: u64 = ((x79 as u64) + x71);
336 let mut x81: u64 = 0;
337 let mut x82: fiat_p224_u1 = 0;
338 fiat_p224_addcarryx_u64(&mut x81, &mut x82, 0x0, x58, x68);
339 let mut x83: u64 = 0;
340 let mut x84: fiat_p224_u1 = 0;
341 fiat_p224_addcarryx_u64(&mut x83, &mut x84, x82, x60, x74);
342 let mut x85: u64 = 0;
343 let mut x86: fiat_p224_u1 = 0;
344 fiat_p224_addcarryx_u64(&mut x85, &mut x86, x84, x62, x76);
345 let mut x87: u64 = 0;
346 let mut x88: fiat_p224_u1 = 0;
347 fiat_p224_addcarryx_u64(&mut x87, &mut x88, x86, x64, x78);
348 let mut x89: u64 = 0;
349 let mut x90: fiat_p224_u1 = 0;
350 fiat_p224_addcarryx_u64(&mut x89, &mut x90, x88, x66, x80);
351 let x91: u64 = ((x90 as u64) + (x67 as u64));
352 let mut x92: u64 = 0;
353 let mut x93: u64 = 0;
354 fiat_p224_mulx_u64(&mut x92, &mut x93, x2, (*IndexConst(arg2).index(3)));
355 let mut x94: u64 = 0;
356 let mut x95: u64 = 0;
357 fiat_p224_mulx_u64(&mut x94, &mut x95, x2, (*IndexConst(arg2).index(2)));
358 let mut x96: u64 = 0;
359 let mut x97: u64 = 0;
360 fiat_p224_mulx_u64(&mut x96, &mut x97, x2, (*IndexConst(arg2).index(1)));
361 let mut x98: u64 = 0;
362 let mut x99: u64 = 0;
363 fiat_p224_mulx_u64(&mut x98, &mut x99, x2, (*IndexConst(arg2).index(0)));
364 let mut x100: u64 = 0;
365 let mut x101: fiat_p224_u1 = 0;
366 fiat_p224_addcarryx_u64(&mut x100, &mut x101, 0x0, x99, x96);
367 let mut x102: u64 = 0;
368 let mut x103: fiat_p224_u1 = 0;
369 fiat_p224_addcarryx_u64(&mut x102, &mut x103, x101, x97, x94);
370 let mut x104: u64 = 0;
371 let mut x105: fiat_p224_u1 = 0;
372 fiat_p224_addcarryx_u64(&mut x104, &mut x105, x103, x95, x92);
373 let x106: u64 = ((x105 as u64) + x93);
374 let mut x107: u64 = 0;
375 let mut x108: fiat_p224_u1 = 0;
376 fiat_p224_addcarryx_u64(&mut x107, &mut x108, 0x0, x83, x98);
377 let mut x109: u64 = 0;
378 let mut x110: fiat_p224_u1 = 0;
379 fiat_p224_addcarryx_u64(&mut x109, &mut x110, x108, x85, x100);
380 let mut x111: u64 = 0;
381 let mut x112: fiat_p224_u1 = 0;
382 fiat_p224_addcarryx_u64(&mut x111, &mut x112, x110, x87, x102);
383 let mut x113: u64 = 0;
384 let mut x114: fiat_p224_u1 = 0;
385 fiat_p224_addcarryx_u64(&mut x113, &mut x114, x112, x89, x104);
386 let mut x115: u64 = 0;
387 let mut x116: fiat_p224_u1 = 0;
388 fiat_p224_addcarryx_u64(&mut x115, &mut x116, x114, x91, x106);
389 let mut x117: u64 = 0;
390 let mut x118: u64 = 0;
391 fiat_p224_mulx_u64(&mut x117, &mut x118, x107, 0xffffffffffffffff);
392 let mut x119: u64 = 0;
393 let mut x120: u64 = 0;
394 fiat_p224_mulx_u64(&mut x119, &mut x120, x117, 0xffffffff);
395 let mut x121: u64 = 0;
396 let mut x122: u64 = 0;
397 fiat_p224_mulx_u64(&mut x121, &mut x122, x117, 0xffffffffffffffff);
398 let mut x123: u64 = 0;
399 let mut x124: u64 = 0;
400 fiat_p224_mulx_u64(&mut x123, &mut x124, x117, 0xffffffff00000000);
401 let mut x125: u64 = 0;
402 let mut x126: fiat_p224_u1 = 0;
403 fiat_p224_addcarryx_u64(&mut x125, &mut x126, 0x0, x124, x121);
404 let mut x127: u64 = 0;
405 let mut x128: fiat_p224_u1 = 0;
406 fiat_p224_addcarryx_u64(&mut x127, &mut x128, x126, x122, x119);
407 let x129: u64 = ((x128 as u64) + x120);
408 let mut x130: u64 = 0;
409 let mut x131: fiat_p224_u1 = 0;
410 fiat_p224_addcarryx_u64(&mut x130, &mut x131, 0x0, x107, x117);
411 let mut x132: u64 = 0;
412 let mut x133: fiat_p224_u1 = 0;
413 fiat_p224_addcarryx_u64(&mut x132, &mut x133, x131, x109, x123);
414 let mut x134: u64 = 0;
415 let mut x135: fiat_p224_u1 = 0;
416 fiat_p224_addcarryx_u64(&mut x134, &mut x135, x133, x111, x125);
417 let mut x136: u64 = 0;
418 let mut x137: fiat_p224_u1 = 0;
419 fiat_p224_addcarryx_u64(&mut x136, &mut x137, x135, x113, x127);
420 let mut x138: u64 = 0;
421 let mut x139: fiat_p224_u1 = 0;
422 fiat_p224_addcarryx_u64(&mut x138, &mut x139, x137, x115, x129);
423 let x140: u64 = ((x139 as u64) + (x116 as u64));
424 let mut x141: u64 = 0;
425 let mut x142: u64 = 0;
426 fiat_p224_mulx_u64(&mut x141, &mut x142, x3, (*IndexConst(arg2).index(3)));
427 let mut x143: u64 = 0;
428 let mut x144: u64 = 0;
429 fiat_p224_mulx_u64(&mut x143, &mut x144, x3, (*IndexConst(arg2).index(2)));
430 let mut x145: u64 = 0;
431 let mut x146: u64 = 0;
432 fiat_p224_mulx_u64(&mut x145, &mut x146, x3, (*IndexConst(arg2).index(1)));
433 let mut x147: u64 = 0;
434 let mut x148: u64 = 0;
435 fiat_p224_mulx_u64(&mut x147, &mut x148, x3, (*IndexConst(arg2).index(0)));
436 let mut x149: u64 = 0;
437 let mut x150: fiat_p224_u1 = 0;
438 fiat_p224_addcarryx_u64(&mut x149, &mut x150, 0x0, x148, x145);
439 let mut x151: u64 = 0;
440 let mut x152: fiat_p224_u1 = 0;
441 fiat_p224_addcarryx_u64(&mut x151, &mut x152, x150, x146, x143);
442 let mut x153: u64 = 0;
443 let mut x154: fiat_p224_u1 = 0;
444 fiat_p224_addcarryx_u64(&mut x153, &mut x154, x152, x144, x141);
445 let x155: u64 = ((x154 as u64) + x142);
446 let mut x156: u64 = 0;
447 let mut x157: fiat_p224_u1 = 0;
448 fiat_p224_addcarryx_u64(&mut x156, &mut x157, 0x0, x132, x147);
449 let mut x158: u64 = 0;
450 let mut x159: fiat_p224_u1 = 0;
451 fiat_p224_addcarryx_u64(&mut x158, &mut x159, x157, x134, x149);
452 let mut x160: u64 = 0;
453 let mut x161: fiat_p224_u1 = 0;
454 fiat_p224_addcarryx_u64(&mut x160, &mut x161, x159, x136, x151);
455 let mut x162: u64 = 0;
456 let mut x163: fiat_p224_u1 = 0;
457 fiat_p224_addcarryx_u64(&mut x162, &mut x163, x161, x138, x153);
458 let mut x164: u64 = 0;
459 let mut x165: fiat_p224_u1 = 0;
460 fiat_p224_addcarryx_u64(&mut x164, &mut x165, x163, x140, x155);
461 let mut x166: u64 = 0;
462 let mut x167: u64 = 0;
463 fiat_p224_mulx_u64(&mut x166, &mut x167, x156, 0xffffffffffffffff);
464 let mut x168: u64 = 0;
465 let mut x169: u64 = 0;
466 fiat_p224_mulx_u64(&mut x168, &mut x169, x166, 0xffffffff);
467 let mut x170: u64 = 0;
468 let mut x171: u64 = 0;
469 fiat_p224_mulx_u64(&mut x170, &mut x171, x166, 0xffffffffffffffff);
470 let mut x172: u64 = 0;
471 let mut x173: u64 = 0;
472 fiat_p224_mulx_u64(&mut x172, &mut x173, x166, 0xffffffff00000000);
473 let mut x174: u64 = 0;
474 let mut x175: fiat_p224_u1 = 0;
475 fiat_p224_addcarryx_u64(&mut x174, &mut x175, 0x0, x173, x170);
476 let mut x176: u64 = 0;
477 let mut x177: fiat_p224_u1 = 0;
478 fiat_p224_addcarryx_u64(&mut x176, &mut x177, x175, x171, x168);
479 let x178: u64 = ((x177 as u64) + x169);
480 let mut x179: u64 = 0;
481 let mut x180: fiat_p224_u1 = 0;
482 fiat_p224_addcarryx_u64(&mut x179, &mut x180, 0x0, x156, x166);
483 let mut x181: u64 = 0;
484 let mut x182: fiat_p224_u1 = 0;
485 fiat_p224_addcarryx_u64(&mut x181, &mut x182, x180, x158, x172);
486 let mut x183: u64 = 0;
487 let mut x184: fiat_p224_u1 = 0;
488 fiat_p224_addcarryx_u64(&mut x183, &mut x184, x182, x160, x174);
489 let mut x185: u64 = 0;
490 let mut x186: fiat_p224_u1 = 0;
491 fiat_p224_addcarryx_u64(&mut x185, &mut x186, x184, x162, x176);
492 let mut x187: u64 = 0;
493 let mut x188: fiat_p224_u1 = 0;
494 fiat_p224_addcarryx_u64(&mut x187, &mut x188, x186, x164, x178);
495 let x189: u64 = ((x188 as u64) + (x165 as u64));
496 let mut x190: u64 = 0;
497 let mut x191: fiat_p224_u1 = 0;
498 fiat_p224_subborrowx_u64(&mut x190, &mut x191, 0x0, x181, (0x1 as u64));
499 let mut x192: u64 = 0;
500 let mut x193: fiat_p224_u1 = 0;
501 fiat_p224_subborrowx_u64(&mut x192, &mut x193, x191, x183, 0xffffffff00000000);
502 let mut x194: u64 = 0;
503 let mut x195: fiat_p224_u1 = 0;
504 fiat_p224_subborrowx_u64(&mut x194, &mut x195, x193, x185, 0xffffffffffffffff);
505 let mut x196: u64 = 0;
506 let mut x197: fiat_p224_u1 = 0;
507 fiat_p224_subborrowx_u64(&mut x196, &mut x197, x195, x187, 0xffffffff);
508 let mut x198: u64 = 0;
509 let mut x199: fiat_p224_u1 = 0;
510 fiat_p224_subborrowx_u64(&mut x198, &mut x199, x197, x189, (0x0 as u64));
511 let mut x200: u64 = 0;
512 fiat_p224_cmovznz_u64(&mut x200, x199, x190, x181);
513 let mut x201: u64 = 0;
514 fiat_p224_cmovznz_u64(&mut x201, x199, x192, x183);
515 let mut x202: u64 = 0;
516 fiat_p224_cmovznz_u64(&mut x202, x199, x194, x185);
517 let mut x203: u64 = 0;
518 fiat_p224_cmovznz_u64(&mut x203, x199, x196, x187);
519 *IndexConst(&mut out1).index_mut(0) = x200;
520 *IndexConst(&mut out1).index_mut(1) = x201;
521 *IndexConst(&mut out1).index_mut(2) = x202;
522 *IndexConst(&mut out1).index_mut(3) = x203;
523}
524
525#[inline]
534pub const fn fiat_p224_square(mut out1: &mut fiat_p224_montgomery_domain_field_element, arg1: &fiat_p224_montgomery_domain_field_element) {
535 let x1: u64 = (*IndexConst(arg1).index(1));
536 let x2: u64 = (*IndexConst(arg1).index(2));
537 let x3: u64 = (*IndexConst(arg1).index(3));
538 let x4: u64 = (*IndexConst(arg1).index(0));
539 let mut x5: u64 = 0;
540 let mut x6: u64 = 0;
541 fiat_p224_mulx_u64(&mut x5, &mut x6, x4, (*IndexConst(arg1).index(3)));
542 let mut x7: u64 = 0;
543 let mut x8: u64 = 0;
544 fiat_p224_mulx_u64(&mut x7, &mut x8, x4, (*IndexConst(arg1).index(2)));
545 let mut x9: u64 = 0;
546 let mut x10: u64 = 0;
547 fiat_p224_mulx_u64(&mut x9, &mut x10, x4, (*IndexConst(arg1).index(1)));
548 let mut x11: u64 = 0;
549 let mut x12: u64 = 0;
550 fiat_p224_mulx_u64(&mut x11, &mut x12, x4, (*IndexConst(arg1).index(0)));
551 let mut x13: u64 = 0;
552 let mut x14: fiat_p224_u1 = 0;
553 fiat_p224_addcarryx_u64(&mut x13, &mut x14, 0x0, x12, x9);
554 let mut x15: u64 = 0;
555 let mut x16: fiat_p224_u1 = 0;
556 fiat_p224_addcarryx_u64(&mut x15, &mut x16, x14, x10, x7);
557 let mut x17: u64 = 0;
558 let mut x18: fiat_p224_u1 = 0;
559 fiat_p224_addcarryx_u64(&mut x17, &mut x18, x16, x8, x5);
560 let x19: u64 = ((x18 as u64) + x6);
561 let mut x20: u64 = 0;
562 let mut x21: u64 = 0;
563 fiat_p224_mulx_u64(&mut x20, &mut x21, x11, 0xffffffffffffffff);
564 let mut x22: u64 = 0;
565 let mut x23: u64 = 0;
566 fiat_p224_mulx_u64(&mut x22, &mut x23, x20, 0xffffffff);
567 let mut x24: u64 = 0;
568 let mut x25: u64 = 0;
569 fiat_p224_mulx_u64(&mut x24, &mut x25, x20, 0xffffffffffffffff);
570 let mut x26: u64 = 0;
571 let mut x27: u64 = 0;
572 fiat_p224_mulx_u64(&mut x26, &mut x27, x20, 0xffffffff00000000);
573 let mut x28: u64 = 0;
574 let mut x29: fiat_p224_u1 = 0;
575 fiat_p224_addcarryx_u64(&mut x28, &mut x29, 0x0, x27, x24);
576 let mut x30: u64 = 0;
577 let mut x31: fiat_p224_u1 = 0;
578 fiat_p224_addcarryx_u64(&mut x30, &mut x31, x29, x25, x22);
579 let x32: u64 = ((x31 as u64) + x23);
580 let mut x33: u64 = 0;
581 let mut x34: fiat_p224_u1 = 0;
582 fiat_p224_addcarryx_u64(&mut x33, &mut x34, 0x0, x11, x20);
583 let mut x35: u64 = 0;
584 let mut x36: fiat_p224_u1 = 0;
585 fiat_p224_addcarryx_u64(&mut x35, &mut x36, x34, x13, x26);
586 let mut x37: u64 = 0;
587 let mut x38: fiat_p224_u1 = 0;
588 fiat_p224_addcarryx_u64(&mut x37, &mut x38, x36, x15, x28);
589 let mut x39: u64 = 0;
590 let mut x40: fiat_p224_u1 = 0;
591 fiat_p224_addcarryx_u64(&mut x39, &mut x40, x38, x17, x30);
592 let mut x41: u64 = 0;
593 let mut x42: fiat_p224_u1 = 0;
594 fiat_p224_addcarryx_u64(&mut x41, &mut x42, x40, x19, x32);
595 let mut x43: u64 = 0;
596 let mut x44: u64 = 0;
597 fiat_p224_mulx_u64(&mut x43, &mut x44, x1, (*IndexConst(arg1).index(3)));
598 let mut x45: u64 = 0;
599 let mut x46: u64 = 0;
600 fiat_p224_mulx_u64(&mut x45, &mut x46, x1, (*IndexConst(arg1).index(2)));
601 let mut x47: u64 = 0;
602 let mut x48: u64 = 0;
603 fiat_p224_mulx_u64(&mut x47, &mut x48, x1, (*IndexConst(arg1).index(1)));
604 let mut x49: u64 = 0;
605 let mut x50: u64 = 0;
606 fiat_p224_mulx_u64(&mut x49, &mut x50, x1, (*IndexConst(arg1).index(0)));
607 let mut x51: u64 = 0;
608 let mut x52: fiat_p224_u1 = 0;
609 fiat_p224_addcarryx_u64(&mut x51, &mut x52, 0x0, x50, x47);
610 let mut x53: u64 = 0;
611 let mut x54: fiat_p224_u1 = 0;
612 fiat_p224_addcarryx_u64(&mut x53, &mut x54, x52, x48, x45);
613 let mut x55: u64 = 0;
614 let mut x56: fiat_p224_u1 = 0;
615 fiat_p224_addcarryx_u64(&mut x55, &mut x56, x54, x46, x43);
616 let x57: u64 = ((x56 as u64) + x44);
617 let mut x58: u64 = 0;
618 let mut x59: fiat_p224_u1 = 0;
619 fiat_p224_addcarryx_u64(&mut x58, &mut x59, 0x0, x35, x49);
620 let mut x60: u64 = 0;
621 let mut x61: fiat_p224_u1 = 0;
622 fiat_p224_addcarryx_u64(&mut x60, &mut x61, x59, x37, x51);
623 let mut x62: u64 = 0;
624 let mut x63: fiat_p224_u1 = 0;
625 fiat_p224_addcarryx_u64(&mut x62, &mut x63, x61, x39, x53);
626 let mut x64: u64 = 0;
627 let mut x65: fiat_p224_u1 = 0;
628 fiat_p224_addcarryx_u64(&mut x64, &mut x65, x63, x41, x55);
629 let mut x66: u64 = 0;
630 let mut x67: fiat_p224_u1 = 0;
631 fiat_p224_addcarryx_u64(&mut x66, &mut x67, x65, (x42 as u64), x57);
632 let mut x68: u64 = 0;
633 let mut x69: u64 = 0;
634 fiat_p224_mulx_u64(&mut x68, &mut x69, x58, 0xffffffffffffffff);
635 let mut x70: u64 = 0;
636 let mut x71: u64 = 0;
637 fiat_p224_mulx_u64(&mut x70, &mut x71, x68, 0xffffffff);
638 let mut x72: u64 = 0;
639 let mut x73: u64 = 0;
640 fiat_p224_mulx_u64(&mut x72, &mut x73, x68, 0xffffffffffffffff);
641 let mut x74: u64 = 0;
642 let mut x75: u64 = 0;
643 fiat_p224_mulx_u64(&mut x74, &mut x75, x68, 0xffffffff00000000);
644 let mut x76: u64 = 0;
645 let mut x77: fiat_p224_u1 = 0;
646 fiat_p224_addcarryx_u64(&mut x76, &mut x77, 0x0, x75, x72);
647 let mut x78: u64 = 0;
648 let mut x79: fiat_p224_u1 = 0;
649 fiat_p224_addcarryx_u64(&mut x78, &mut x79, x77, x73, x70);
650 let x80: u64 = ((x79 as u64) + x71);
651 let mut x81: u64 = 0;
652 let mut x82: fiat_p224_u1 = 0;
653 fiat_p224_addcarryx_u64(&mut x81, &mut x82, 0x0, x58, x68);
654 let mut x83: u64 = 0;
655 let mut x84: fiat_p224_u1 = 0;
656 fiat_p224_addcarryx_u64(&mut x83, &mut x84, x82, x60, x74);
657 let mut x85: u64 = 0;
658 let mut x86: fiat_p224_u1 = 0;
659 fiat_p224_addcarryx_u64(&mut x85, &mut x86, x84, x62, x76);
660 let mut x87: u64 = 0;
661 let mut x88: fiat_p224_u1 = 0;
662 fiat_p224_addcarryx_u64(&mut x87, &mut x88, x86, x64, x78);
663 let mut x89: u64 = 0;
664 let mut x90: fiat_p224_u1 = 0;
665 fiat_p224_addcarryx_u64(&mut x89, &mut x90, x88, x66, x80);
666 let x91: u64 = ((x90 as u64) + (x67 as u64));
667 let mut x92: u64 = 0;
668 let mut x93: u64 = 0;
669 fiat_p224_mulx_u64(&mut x92, &mut x93, x2, (*IndexConst(arg1).index(3)));
670 let mut x94: u64 = 0;
671 let mut x95: u64 = 0;
672 fiat_p224_mulx_u64(&mut x94, &mut x95, x2, (*IndexConst(arg1).index(2)));
673 let mut x96: u64 = 0;
674 let mut x97: u64 = 0;
675 fiat_p224_mulx_u64(&mut x96, &mut x97, x2, (*IndexConst(arg1).index(1)));
676 let mut x98: u64 = 0;
677 let mut x99: u64 = 0;
678 fiat_p224_mulx_u64(&mut x98, &mut x99, x2, (*IndexConst(arg1).index(0)));
679 let mut x100: u64 = 0;
680 let mut x101: fiat_p224_u1 = 0;
681 fiat_p224_addcarryx_u64(&mut x100, &mut x101, 0x0, x99, x96);
682 let mut x102: u64 = 0;
683 let mut x103: fiat_p224_u1 = 0;
684 fiat_p224_addcarryx_u64(&mut x102, &mut x103, x101, x97, x94);
685 let mut x104: u64 = 0;
686 let mut x105: fiat_p224_u1 = 0;
687 fiat_p224_addcarryx_u64(&mut x104, &mut x105, x103, x95, x92);
688 let x106: u64 = ((x105 as u64) + x93);
689 let mut x107: u64 = 0;
690 let mut x108: fiat_p224_u1 = 0;
691 fiat_p224_addcarryx_u64(&mut x107, &mut x108, 0x0, x83, x98);
692 let mut x109: u64 = 0;
693 let mut x110: fiat_p224_u1 = 0;
694 fiat_p224_addcarryx_u64(&mut x109, &mut x110, x108, x85, x100);
695 let mut x111: u64 = 0;
696 let mut x112: fiat_p224_u1 = 0;
697 fiat_p224_addcarryx_u64(&mut x111, &mut x112, x110, x87, x102);
698 let mut x113: u64 = 0;
699 let mut x114: fiat_p224_u1 = 0;
700 fiat_p224_addcarryx_u64(&mut x113, &mut x114, x112, x89, x104);
701 let mut x115: u64 = 0;
702 let mut x116: fiat_p224_u1 = 0;
703 fiat_p224_addcarryx_u64(&mut x115, &mut x116, x114, x91, x106);
704 let mut x117: u64 = 0;
705 let mut x118: u64 = 0;
706 fiat_p224_mulx_u64(&mut x117, &mut x118, x107, 0xffffffffffffffff);
707 let mut x119: u64 = 0;
708 let mut x120: u64 = 0;
709 fiat_p224_mulx_u64(&mut x119, &mut x120, x117, 0xffffffff);
710 let mut x121: u64 = 0;
711 let mut x122: u64 = 0;
712 fiat_p224_mulx_u64(&mut x121, &mut x122, x117, 0xffffffffffffffff);
713 let mut x123: u64 = 0;
714 let mut x124: u64 = 0;
715 fiat_p224_mulx_u64(&mut x123, &mut x124, x117, 0xffffffff00000000);
716 let mut x125: u64 = 0;
717 let mut x126: fiat_p224_u1 = 0;
718 fiat_p224_addcarryx_u64(&mut x125, &mut x126, 0x0, x124, x121);
719 let mut x127: u64 = 0;
720 let mut x128: fiat_p224_u1 = 0;
721 fiat_p224_addcarryx_u64(&mut x127, &mut x128, x126, x122, x119);
722 let x129: u64 = ((x128 as u64) + x120);
723 let mut x130: u64 = 0;
724 let mut x131: fiat_p224_u1 = 0;
725 fiat_p224_addcarryx_u64(&mut x130, &mut x131, 0x0, x107, x117);
726 let mut x132: u64 = 0;
727 let mut x133: fiat_p224_u1 = 0;
728 fiat_p224_addcarryx_u64(&mut x132, &mut x133, x131, x109, x123);
729 let mut x134: u64 = 0;
730 let mut x135: fiat_p224_u1 = 0;
731 fiat_p224_addcarryx_u64(&mut x134, &mut x135, x133, x111, x125);
732 let mut x136: u64 = 0;
733 let mut x137: fiat_p224_u1 = 0;
734 fiat_p224_addcarryx_u64(&mut x136, &mut x137, x135, x113, x127);
735 let mut x138: u64 = 0;
736 let mut x139: fiat_p224_u1 = 0;
737 fiat_p224_addcarryx_u64(&mut x138, &mut x139, x137, x115, x129);
738 let x140: u64 = ((x139 as u64) + (x116 as u64));
739 let mut x141: u64 = 0;
740 let mut x142: u64 = 0;
741 fiat_p224_mulx_u64(&mut x141, &mut x142, x3, (*IndexConst(arg1).index(3)));
742 let mut x143: u64 = 0;
743 let mut x144: u64 = 0;
744 fiat_p224_mulx_u64(&mut x143, &mut x144, x3, (*IndexConst(arg1).index(2)));
745 let mut x145: u64 = 0;
746 let mut x146: u64 = 0;
747 fiat_p224_mulx_u64(&mut x145, &mut x146, x3, (*IndexConst(arg1).index(1)));
748 let mut x147: u64 = 0;
749 let mut x148: u64 = 0;
750 fiat_p224_mulx_u64(&mut x147, &mut x148, x3, (*IndexConst(arg1).index(0)));
751 let mut x149: u64 = 0;
752 let mut x150: fiat_p224_u1 = 0;
753 fiat_p224_addcarryx_u64(&mut x149, &mut x150, 0x0, x148, x145);
754 let mut x151: u64 = 0;
755 let mut x152: fiat_p224_u1 = 0;
756 fiat_p224_addcarryx_u64(&mut x151, &mut x152, x150, x146, x143);
757 let mut x153: u64 = 0;
758 let mut x154: fiat_p224_u1 = 0;
759 fiat_p224_addcarryx_u64(&mut x153, &mut x154, x152, x144, x141);
760 let x155: u64 = ((x154 as u64) + x142);
761 let mut x156: u64 = 0;
762 let mut x157: fiat_p224_u1 = 0;
763 fiat_p224_addcarryx_u64(&mut x156, &mut x157, 0x0, x132, x147);
764 let mut x158: u64 = 0;
765 let mut x159: fiat_p224_u1 = 0;
766 fiat_p224_addcarryx_u64(&mut x158, &mut x159, x157, x134, x149);
767 let mut x160: u64 = 0;
768 let mut x161: fiat_p224_u1 = 0;
769 fiat_p224_addcarryx_u64(&mut x160, &mut x161, x159, x136, x151);
770 let mut x162: u64 = 0;
771 let mut x163: fiat_p224_u1 = 0;
772 fiat_p224_addcarryx_u64(&mut x162, &mut x163, x161, x138, x153);
773 let mut x164: u64 = 0;
774 let mut x165: fiat_p224_u1 = 0;
775 fiat_p224_addcarryx_u64(&mut x164, &mut x165, x163, x140, x155);
776 let mut x166: u64 = 0;
777 let mut x167: u64 = 0;
778 fiat_p224_mulx_u64(&mut x166, &mut x167, x156, 0xffffffffffffffff);
779 let mut x168: u64 = 0;
780 let mut x169: u64 = 0;
781 fiat_p224_mulx_u64(&mut x168, &mut x169, x166, 0xffffffff);
782 let mut x170: u64 = 0;
783 let mut x171: u64 = 0;
784 fiat_p224_mulx_u64(&mut x170, &mut x171, x166, 0xffffffffffffffff);
785 let mut x172: u64 = 0;
786 let mut x173: u64 = 0;
787 fiat_p224_mulx_u64(&mut x172, &mut x173, x166, 0xffffffff00000000);
788 let mut x174: u64 = 0;
789 let mut x175: fiat_p224_u1 = 0;
790 fiat_p224_addcarryx_u64(&mut x174, &mut x175, 0x0, x173, x170);
791 let mut x176: u64 = 0;
792 let mut x177: fiat_p224_u1 = 0;
793 fiat_p224_addcarryx_u64(&mut x176, &mut x177, x175, x171, x168);
794 let x178: u64 = ((x177 as u64) + x169);
795 let mut x179: u64 = 0;
796 let mut x180: fiat_p224_u1 = 0;
797 fiat_p224_addcarryx_u64(&mut x179, &mut x180, 0x0, x156, x166);
798 let mut x181: u64 = 0;
799 let mut x182: fiat_p224_u1 = 0;
800 fiat_p224_addcarryx_u64(&mut x181, &mut x182, x180, x158, x172);
801 let mut x183: u64 = 0;
802 let mut x184: fiat_p224_u1 = 0;
803 fiat_p224_addcarryx_u64(&mut x183, &mut x184, x182, x160, x174);
804 let mut x185: u64 = 0;
805 let mut x186: fiat_p224_u1 = 0;
806 fiat_p224_addcarryx_u64(&mut x185, &mut x186, x184, x162, x176);
807 let mut x187: u64 = 0;
808 let mut x188: fiat_p224_u1 = 0;
809 fiat_p224_addcarryx_u64(&mut x187, &mut x188, x186, x164, x178);
810 let x189: u64 = ((x188 as u64) + (x165 as u64));
811 let mut x190: u64 = 0;
812 let mut x191: fiat_p224_u1 = 0;
813 fiat_p224_subborrowx_u64(&mut x190, &mut x191, 0x0, x181, (0x1 as u64));
814 let mut x192: u64 = 0;
815 let mut x193: fiat_p224_u1 = 0;
816 fiat_p224_subborrowx_u64(&mut x192, &mut x193, x191, x183, 0xffffffff00000000);
817 let mut x194: u64 = 0;
818 let mut x195: fiat_p224_u1 = 0;
819 fiat_p224_subborrowx_u64(&mut x194, &mut x195, x193, x185, 0xffffffffffffffff);
820 let mut x196: u64 = 0;
821 let mut x197: fiat_p224_u1 = 0;
822 fiat_p224_subborrowx_u64(&mut x196, &mut x197, x195, x187, 0xffffffff);
823 let mut x198: u64 = 0;
824 let mut x199: fiat_p224_u1 = 0;
825 fiat_p224_subborrowx_u64(&mut x198, &mut x199, x197, x189, (0x0 as u64));
826 let mut x200: u64 = 0;
827 fiat_p224_cmovznz_u64(&mut x200, x199, x190, x181);
828 let mut x201: u64 = 0;
829 fiat_p224_cmovznz_u64(&mut x201, x199, x192, x183);
830 let mut x202: u64 = 0;
831 fiat_p224_cmovznz_u64(&mut x202, x199, x194, x185);
832 let mut x203: u64 = 0;
833 fiat_p224_cmovznz_u64(&mut x203, x199, x196, x187);
834 *IndexConst(&mut out1).index_mut(0) = x200;
835 *IndexConst(&mut out1).index_mut(1) = x201;
836 *IndexConst(&mut out1).index_mut(2) = x202;
837 *IndexConst(&mut out1).index_mut(3) = x203;
838}
839
840#[inline]
850pub const fn fiat_p224_add(mut out1: &mut fiat_p224_montgomery_domain_field_element, arg1: &fiat_p224_montgomery_domain_field_element, arg2: &fiat_p224_montgomery_domain_field_element) {
851 let mut x1: u64 = 0;
852 let mut x2: fiat_p224_u1 = 0;
853 fiat_p224_addcarryx_u64(&mut x1, &mut x2, 0x0, (*IndexConst(arg1).index(0)), (*IndexConst(arg2).index(0)));
854 let mut x3: u64 = 0;
855 let mut x4: fiat_p224_u1 = 0;
856 fiat_p224_addcarryx_u64(&mut x3, &mut x4, x2, (*IndexConst(arg1).index(1)), (*IndexConst(arg2).index(1)));
857 let mut x5: u64 = 0;
858 let mut x6: fiat_p224_u1 = 0;
859 fiat_p224_addcarryx_u64(&mut x5, &mut x6, x4, (*IndexConst(arg1).index(2)), (*IndexConst(arg2).index(2)));
860 let mut x7: u64 = 0;
861 let mut x8: fiat_p224_u1 = 0;
862 fiat_p224_addcarryx_u64(&mut x7, &mut x8, x6, (*IndexConst(arg1).index(3)), (*IndexConst(arg2).index(3)));
863 let mut x9: u64 = 0;
864 let mut x10: fiat_p224_u1 = 0;
865 fiat_p224_subborrowx_u64(&mut x9, &mut x10, 0x0, x1, (0x1 as u64));
866 let mut x11: u64 = 0;
867 let mut x12: fiat_p224_u1 = 0;
868 fiat_p224_subborrowx_u64(&mut x11, &mut x12, x10, x3, 0xffffffff00000000);
869 let mut x13: u64 = 0;
870 let mut x14: fiat_p224_u1 = 0;
871 fiat_p224_subborrowx_u64(&mut x13, &mut x14, x12, x5, 0xffffffffffffffff);
872 let mut x15: u64 = 0;
873 let mut x16: fiat_p224_u1 = 0;
874 fiat_p224_subborrowx_u64(&mut x15, &mut x16, x14, x7, 0xffffffff);
875 let mut x17: u64 = 0;
876 let mut x18: fiat_p224_u1 = 0;
877 fiat_p224_subborrowx_u64(&mut x17, &mut x18, x16, (x8 as u64), (0x0 as u64));
878 let mut x19: u64 = 0;
879 fiat_p224_cmovznz_u64(&mut x19, x18, x9, x1);
880 let mut x20: u64 = 0;
881 fiat_p224_cmovznz_u64(&mut x20, x18, x11, x3);
882 let mut x21: u64 = 0;
883 fiat_p224_cmovznz_u64(&mut x21, x18, x13, x5);
884 let mut x22: u64 = 0;
885 fiat_p224_cmovznz_u64(&mut x22, x18, x15, x7);
886 *IndexConst(&mut out1).index_mut(0) = x19;
887 *IndexConst(&mut out1).index_mut(1) = x20;
888 *IndexConst(&mut out1).index_mut(2) = x21;
889 *IndexConst(&mut out1).index_mut(3) = x22;
890}
891
892#[inline]
902pub const fn fiat_p224_sub(mut out1: &mut fiat_p224_montgomery_domain_field_element, arg1: &fiat_p224_montgomery_domain_field_element, arg2: &fiat_p224_montgomery_domain_field_element) {
903 let mut x1: u64 = 0;
904 let mut x2: fiat_p224_u1 = 0;
905 fiat_p224_subborrowx_u64(&mut x1, &mut x2, 0x0, (*IndexConst(arg1).index(0)), (*IndexConst(arg2).index(0)));
906 let mut x3: u64 = 0;
907 let mut x4: fiat_p224_u1 = 0;
908 fiat_p224_subborrowx_u64(&mut x3, &mut x4, x2, (*IndexConst(arg1).index(1)), (*IndexConst(arg2).index(1)));
909 let mut x5: u64 = 0;
910 let mut x6: fiat_p224_u1 = 0;
911 fiat_p224_subborrowx_u64(&mut x5, &mut x6, x4, (*IndexConst(arg1).index(2)), (*IndexConst(arg2).index(2)));
912 let mut x7: u64 = 0;
913 let mut x8: fiat_p224_u1 = 0;
914 fiat_p224_subborrowx_u64(&mut x7, &mut x8, x6, (*IndexConst(arg1).index(3)), (*IndexConst(arg2).index(3)));
915 let mut x9: u64 = 0;
916 fiat_p224_cmovznz_u64(&mut x9, x8, (0x0 as u64), 0xffffffffffffffff);
917 let mut x10: u64 = 0;
918 let mut x11: fiat_p224_u1 = 0;
919 fiat_p224_addcarryx_u64(&mut x10, &mut x11, 0x0, x1, (((x9 & (0x1 as u64)) as fiat_p224_u1) as u64));
920 let mut x12: u64 = 0;
921 let mut x13: fiat_p224_u1 = 0;
922 fiat_p224_addcarryx_u64(&mut x12, &mut x13, x11, x3, (x9 & 0xffffffff00000000));
923 let mut x14: u64 = 0;
924 let mut x15: fiat_p224_u1 = 0;
925 fiat_p224_addcarryx_u64(&mut x14, &mut x15, x13, x5, x9);
926 let mut x16: u64 = 0;
927 let mut x17: fiat_p224_u1 = 0;
928 fiat_p224_addcarryx_u64(&mut x16, &mut x17, x15, x7, (x9 & 0xffffffff));
929 *IndexConst(&mut out1).index_mut(0) = x10;
930 *IndexConst(&mut out1).index_mut(1) = x12;
931 *IndexConst(&mut out1).index_mut(2) = x14;
932 *IndexConst(&mut out1).index_mut(3) = x16;
933}
934
935#[inline]
944pub const fn fiat_p224_opp(mut out1: &mut fiat_p224_montgomery_domain_field_element, arg1: &fiat_p224_montgomery_domain_field_element) {
945 let mut x1: u64 = 0;
946 let mut x2: fiat_p224_u1 = 0;
947 fiat_p224_subborrowx_u64(&mut x1, &mut x2, 0x0, (0x0 as u64), (*IndexConst(arg1).index(0)));
948 let mut x3: u64 = 0;
949 let mut x4: fiat_p224_u1 = 0;
950 fiat_p224_subborrowx_u64(&mut x3, &mut x4, x2, (0x0 as u64), (*IndexConst(arg1).index(1)));
951 let mut x5: u64 = 0;
952 let mut x6: fiat_p224_u1 = 0;
953 fiat_p224_subborrowx_u64(&mut x5, &mut x6, x4, (0x0 as u64), (*IndexConst(arg1).index(2)));
954 let mut x7: u64 = 0;
955 let mut x8: fiat_p224_u1 = 0;
956 fiat_p224_subborrowx_u64(&mut x7, &mut x8, x6, (0x0 as u64), (*IndexConst(arg1).index(3)));
957 let mut x9: u64 = 0;
958 fiat_p224_cmovznz_u64(&mut x9, x8, (0x0 as u64), 0xffffffffffffffff);
959 let mut x10: u64 = 0;
960 let mut x11: fiat_p224_u1 = 0;
961 fiat_p224_addcarryx_u64(&mut x10, &mut x11, 0x0, x1, (((x9 & (0x1 as u64)) as fiat_p224_u1) as u64));
962 let mut x12: u64 = 0;
963 let mut x13: fiat_p224_u1 = 0;
964 fiat_p224_addcarryx_u64(&mut x12, &mut x13, x11, x3, (x9 & 0xffffffff00000000));
965 let mut x14: u64 = 0;
966 let mut x15: fiat_p224_u1 = 0;
967 fiat_p224_addcarryx_u64(&mut x14, &mut x15, x13, x5, x9);
968 let mut x16: u64 = 0;
969 let mut x17: fiat_p224_u1 = 0;
970 fiat_p224_addcarryx_u64(&mut x16, &mut x17, x15, x7, (x9 & 0xffffffff));
971 *IndexConst(&mut out1).index_mut(0) = x10;
972 *IndexConst(&mut out1).index_mut(1) = x12;
973 *IndexConst(&mut out1).index_mut(2) = x14;
974 *IndexConst(&mut out1).index_mut(3) = x16;
975}
976
977#[inline]
986pub const fn fiat_p224_from_montgomery(mut out1: &mut fiat_p224_non_montgomery_domain_field_element, arg1: &fiat_p224_montgomery_domain_field_element) {
987 let x1: u64 = (*IndexConst(arg1).index(0));
988 let mut x2: u64 = 0;
989 let mut x3: u64 = 0;
990 fiat_p224_mulx_u64(&mut x2, &mut x3, x1, 0xffffffffffffffff);
991 let mut x4: u64 = 0;
992 let mut x5: u64 = 0;
993 fiat_p224_mulx_u64(&mut x4, &mut x5, x2, 0xffffffff);
994 let mut x6: u64 = 0;
995 let mut x7: u64 = 0;
996 fiat_p224_mulx_u64(&mut x6, &mut x7, x2, 0xffffffffffffffff);
997 let mut x8: u64 = 0;
998 let mut x9: u64 = 0;
999 fiat_p224_mulx_u64(&mut x8, &mut x9, x2, 0xffffffff00000000);
1000 let mut x10: u64 = 0;
1001 let mut x11: fiat_p224_u1 = 0;
1002 fiat_p224_addcarryx_u64(&mut x10, &mut x11, 0x0, x9, x6);
1003 let mut x12: u64 = 0;
1004 let mut x13: fiat_p224_u1 = 0;
1005 fiat_p224_addcarryx_u64(&mut x12, &mut x13, x11, x7, x4);
1006 let mut x14: u64 = 0;
1007 let mut x15: fiat_p224_u1 = 0;
1008 fiat_p224_addcarryx_u64(&mut x14, &mut x15, 0x0, x1, x2);
1009 let mut x16: u64 = 0;
1010 let mut x17: fiat_p224_u1 = 0;
1011 fiat_p224_addcarryx_u64(&mut x16, &mut x17, x15, (0x0 as u64), x8);
1012 let mut x18: u64 = 0;
1013 let mut x19: fiat_p224_u1 = 0;
1014 fiat_p224_addcarryx_u64(&mut x18, &mut x19, x17, (0x0 as u64), x10);
1015 let mut x20: u64 = 0;
1016 let mut x21: fiat_p224_u1 = 0;
1017 fiat_p224_addcarryx_u64(&mut x20, &mut x21, x19, (0x0 as u64), x12);
1018 let mut x22: u64 = 0;
1019 let mut x23: fiat_p224_u1 = 0;
1020 fiat_p224_addcarryx_u64(&mut x22, &mut x23, 0x0, x16, (*IndexConst(arg1).index(1)));
1021 let mut x24: u64 = 0;
1022 let mut x25: fiat_p224_u1 = 0;
1023 fiat_p224_addcarryx_u64(&mut x24, &mut x25, x23, x18, (0x0 as u64));
1024 let mut x26: u64 = 0;
1025 let mut x27: fiat_p224_u1 = 0;
1026 fiat_p224_addcarryx_u64(&mut x26, &mut x27, x25, x20, (0x0 as u64));
1027 let mut x28: u64 = 0;
1028 let mut x29: u64 = 0;
1029 fiat_p224_mulx_u64(&mut x28, &mut x29, x22, 0xffffffffffffffff);
1030 let mut x30: u64 = 0;
1031 let mut x31: u64 = 0;
1032 fiat_p224_mulx_u64(&mut x30, &mut x31, x28, 0xffffffff);
1033 let mut x32: u64 = 0;
1034 let mut x33: u64 = 0;
1035 fiat_p224_mulx_u64(&mut x32, &mut x33, x28, 0xffffffffffffffff);
1036 let mut x34: u64 = 0;
1037 let mut x35: u64 = 0;
1038 fiat_p224_mulx_u64(&mut x34, &mut x35, x28, 0xffffffff00000000);
1039 let mut x36: u64 = 0;
1040 let mut x37: fiat_p224_u1 = 0;
1041 fiat_p224_addcarryx_u64(&mut x36, &mut x37, 0x0, x35, x32);
1042 let mut x38: u64 = 0;
1043 let mut x39: fiat_p224_u1 = 0;
1044 fiat_p224_addcarryx_u64(&mut x38, &mut x39, x37, x33, x30);
1045 let mut x40: u64 = 0;
1046 let mut x41: fiat_p224_u1 = 0;
1047 fiat_p224_addcarryx_u64(&mut x40, &mut x41, 0x0, x22, x28);
1048 let mut x42: u64 = 0;
1049 let mut x43: fiat_p224_u1 = 0;
1050 fiat_p224_addcarryx_u64(&mut x42, &mut x43, x41, x24, x34);
1051 let mut x44: u64 = 0;
1052 let mut x45: fiat_p224_u1 = 0;
1053 fiat_p224_addcarryx_u64(&mut x44, &mut x45, x43, x26, x36);
1054 let mut x46: u64 = 0;
1055 let mut x47: fiat_p224_u1 = 0;
1056 fiat_p224_addcarryx_u64(&mut x46, &mut x47, x45, ((x27 as u64) + ((x21 as u64) + ((x13 as u64) + x5))), x38);
1057 let mut x48: u64 = 0;
1058 let mut x49: fiat_p224_u1 = 0;
1059 fiat_p224_addcarryx_u64(&mut x48, &mut x49, 0x0, x42, (*IndexConst(arg1).index(2)));
1060 let mut x50: u64 = 0;
1061 let mut x51: fiat_p224_u1 = 0;
1062 fiat_p224_addcarryx_u64(&mut x50, &mut x51, x49, x44, (0x0 as u64));
1063 let mut x52: u64 = 0;
1064 let mut x53: fiat_p224_u1 = 0;
1065 fiat_p224_addcarryx_u64(&mut x52, &mut x53, x51, x46, (0x0 as u64));
1066 let mut x54: u64 = 0;
1067 let mut x55: u64 = 0;
1068 fiat_p224_mulx_u64(&mut x54, &mut x55, x48, 0xffffffffffffffff);
1069 let mut x56: u64 = 0;
1070 let mut x57: u64 = 0;
1071 fiat_p224_mulx_u64(&mut x56, &mut x57, x54, 0xffffffff);
1072 let mut x58: u64 = 0;
1073 let mut x59: u64 = 0;
1074 fiat_p224_mulx_u64(&mut x58, &mut x59, x54, 0xffffffffffffffff);
1075 let mut x60: u64 = 0;
1076 let mut x61: u64 = 0;
1077 fiat_p224_mulx_u64(&mut x60, &mut x61, x54, 0xffffffff00000000);
1078 let mut x62: u64 = 0;
1079 let mut x63: fiat_p224_u1 = 0;
1080 fiat_p224_addcarryx_u64(&mut x62, &mut x63, 0x0, x61, x58);
1081 let mut x64: u64 = 0;
1082 let mut x65: fiat_p224_u1 = 0;
1083 fiat_p224_addcarryx_u64(&mut x64, &mut x65, x63, x59, x56);
1084 let mut x66: u64 = 0;
1085 let mut x67: fiat_p224_u1 = 0;
1086 fiat_p224_addcarryx_u64(&mut x66, &mut x67, 0x0, x48, x54);
1087 let mut x68: u64 = 0;
1088 let mut x69: fiat_p224_u1 = 0;
1089 fiat_p224_addcarryx_u64(&mut x68, &mut x69, x67, x50, x60);
1090 let mut x70: u64 = 0;
1091 let mut x71: fiat_p224_u1 = 0;
1092 fiat_p224_addcarryx_u64(&mut x70, &mut x71, x69, x52, x62);
1093 let mut x72: u64 = 0;
1094 let mut x73: fiat_p224_u1 = 0;
1095 fiat_p224_addcarryx_u64(&mut x72, &mut x73, x71, ((x53 as u64) + ((x47 as u64) + ((x39 as u64) + x31))), x64);
1096 let mut x74: u64 = 0;
1097 let mut x75: fiat_p224_u1 = 0;
1098 fiat_p224_addcarryx_u64(&mut x74, &mut x75, 0x0, x68, (*IndexConst(arg1).index(3)));
1099 let mut x76: u64 = 0;
1100 let mut x77: fiat_p224_u1 = 0;
1101 fiat_p224_addcarryx_u64(&mut x76, &mut x77, x75, x70, (0x0 as u64));
1102 let mut x78: u64 = 0;
1103 let mut x79: fiat_p224_u1 = 0;
1104 fiat_p224_addcarryx_u64(&mut x78, &mut x79, x77, x72, (0x0 as u64));
1105 let mut x80: u64 = 0;
1106 let mut x81: u64 = 0;
1107 fiat_p224_mulx_u64(&mut x80, &mut x81, x74, 0xffffffffffffffff);
1108 let mut x82: u64 = 0;
1109 let mut x83: u64 = 0;
1110 fiat_p224_mulx_u64(&mut x82, &mut x83, x80, 0xffffffff);
1111 let mut x84: u64 = 0;
1112 let mut x85: u64 = 0;
1113 fiat_p224_mulx_u64(&mut x84, &mut x85, x80, 0xffffffffffffffff);
1114 let mut x86: u64 = 0;
1115 let mut x87: u64 = 0;
1116 fiat_p224_mulx_u64(&mut x86, &mut x87, x80, 0xffffffff00000000);
1117 let mut x88: u64 = 0;
1118 let mut x89: fiat_p224_u1 = 0;
1119 fiat_p224_addcarryx_u64(&mut x88, &mut x89, 0x0, x87, x84);
1120 let mut x90: u64 = 0;
1121 let mut x91: fiat_p224_u1 = 0;
1122 fiat_p224_addcarryx_u64(&mut x90, &mut x91, x89, x85, x82);
1123 let mut x92: u64 = 0;
1124 let mut x93: fiat_p224_u1 = 0;
1125 fiat_p224_addcarryx_u64(&mut x92, &mut x93, 0x0, x74, x80);
1126 let mut x94: u64 = 0;
1127 let mut x95: fiat_p224_u1 = 0;
1128 fiat_p224_addcarryx_u64(&mut x94, &mut x95, x93, x76, x86);
1129 let mut x96: u64 = 0;
1130 let mut x97: fiat_p224_u1 = 0;
1131 fiat_p224_addcarryx_u64(&mut x96, &mut x97, x95, x78, x88);
1132 let mut x98: u64 = 0;
1133 let mut x99: fiat_p224_u1 = 0;
1134 fiat_p224_addcarryx_u64(&mut x98, &mut x99, x97, ((x79 as u64) + ((x73 as u64) + ((x65 as u64) + x57))), x90);
1135 let x100: u64 = ((x99 as u64) + ((x91 as u64) + x83));
1136 let mut x101: u64 = 0;
1137 let mut x102: fiat_p224_u1 = 0;
1138 fiat_p224_subborrowx_u64(&mut x101, &mut x102, 0x0, x94, (0x1 as u64));
1139 let mut x103: u64 = 0;
1140 let mut x104: fiat_p224_u1 = 0;
1141 fiat_p224_subborrowx_u64(&mut x103, &mut x104, x102, x96, 0xffffffff00000000);
1142 let mut x105: u64 = 0;
1143 let mut x106: fiat_p224_u1 = 0;
1144 fiat_p224_subborrowx_u64(&mut x105, &mut x106, x104, x98, 0xffffffffffffffff);
1145 let mut x107: u64 = 0;
1146 let mut x108: fiat_p224_u1 = 0;
1147 fiat_p224_subborrowx_u64(&mut x107, &mut x108, x106, x100, 0xffffffff);
1148 let mut x109: u64 = 0;
1149 let mut x110: fiat_p224_u1 = 0;
1150 fiat_p224_subborrowx_u64(&mut x109, &mut x110, x108, (0x0 as u64), (0x0 as u64));
1151 let mut x111: u64 = 0;
1152 fiat_p224_cmovznz_u64(&mut x111, x110, x101, x94);
1153 let mut x112: u64 = 0;
1154 fiat_p224_cmovznz_u64(&mut x112, x110, x103, x96);
1155 let mut x113: u64 = 0;
1156 fiat_p224_cmovznz_u64(&mut x113, x110, x105, x98);
1157 let mut x114: u64 = 0;
1158 fiat_p224_cmovznz_u64(&mut x114, x110, x107, x100);
1159 *IndexConst(&mut out1).index_mut(0) = x111;
1160 *IndexConst(&mut out1).index_mut(1) = x112;
1161 *IndexConst(&mut out1).index_mut(2) = x113;
1162 *IndexConst(&mut out1).index_mut(3) = x114;
1163}
1164
1165#[inline]
1174pub const fn fiat_p224_to_montgomery(mut out1: &mut fiat_p224_montgomery_domain_field_element, arg1: &fiat_p224_non_montgomery_domain_field_element) {
1175 let x1: u64 = (*IndexConst(arg1).index(1));
1176 let x2: u64 = (*IndexConst(arg1).index(2));
1177 let x3: u64 = (*IndexConst(arg1).index(3));
1178 let x4: u64 = (*IndexConst(arg1).index(0));
1179 let mut x5: u64 = 0;
1180 let mut x6: u64 = 0;
1181 fiat_p224_mulx_u64(&mut x5, &mut x6, x4, 0xffffffff);
1182 let mut x7: u64 = 0;
1183 let mut x8: u64 = 0;
1184 fiat_p224_mulx_u64(&mut x7, &mut x8, x4, 0xfffffffe00000000);
1185 let mut x9: u64 = 0;
1186 let mut x10: u64 = 0;
1187 fiat_p224_mulx_u64(&mut x9, &mut x10, x4, 0xffffffff00000000);
1188 let mut x11: u64 = 0;
1189 let mut x12: u64 = 0;
1190 fiat_p224_mulx_u64(&mut x11, &mut x12, x4, 0xffffffff00000001);
1191 let mut x13: u64 = 0;
1192 let mut x14: fiat_p224_u1 = 0;
1193 fiat_p224_addcarryx_u64(&mut x13, &mut x14, 0x0, x12, x9);
1194 let mut x15: u64 = 0;
1195 let mut x16: fiat_p224_u1 = 0;
1196 fiat_p224_addcarryx_u64(&mut x15, &mut x16, x14, x10, x7);
1197 let mut x17: u64 = 0;
1198 let mut x18: fiat_p224_u1 = 0;
1199 fiat_p224_addcarryx_u64(&mut x17, &mut x18, x16, x8, x5);
1200 let mut x19: u64 = 0;
1201 let mut x20: u64 = 0;
1202 fiat_p224_mulx_u64(&mut x19, &mut x20, x11, 0xffffffffffffffff);
1203 let mut x21: u64 = 0;
1204 let mut x22: u64 = 0;
1205 fiat_p224_mulx_u64(&mut x21, &mut x22, x19, 0xffffffff);
1206 let mut x23: u64 = 0;
1207 let mut x24: u64 = 0;
1208 fiat_p224_mulx_u64(&mut x23, &mut x24, x19, 0xffffffffffffffff);
1209 let mut x25: u64 = 0;
1210 let mut x26: u64 = 0;
1211 fiat_p224_mulx_u64(&mut x25, &mut x26, x19, 0xffffffff00000000);
1212 let mut x27: u64 = 0;
1213 let mut x28: fiat_p224_u1 = 0;
1214 fiat_p224_addcarryx_u64(&mut x27, &mut x28, 0x0, x26, x23);
1215 let mut x29: u64 = 0;
1216 let mut x30: fiat_p224_u1 = 0;
1217 fiat_p224_addcarryx_u64(&mut x29, &mut x30, x28, x24, x21);
1218 let mut x31: u64 = 0;
1219 let mut x32: fiat_p224_u1 = 0;
1220 fiat_p224_addcarryx_u64(&mut x31, &mut x32, 0x0, x11, x19);
1221 let mut x33: u64 = 0;
1222 let mut x34: fiat_p224_u1 = 0;
1223 fiat_p224_addcarryx_u64(&mut x33, &mut x34, x32, x13, x25);
1224 let mut x35: u64 = 0;
1225 let mut x36: fiat_p224_u1 = 0;
1226 fiat_p224_addcarryx_u64(&mut x35, &mut x36, x34, x15, x27);
1227 let mut x37: u64 = 0;
1228 let mut x38: fiat_p224_u1 = 0;
1229 fiat_p224_addcarryx_u64(&mut x37, &mut x38, x36, x17, x29);
1230 let mut x39: u64 = 0;
1231 let mut x40: u64 = 0;
1232 fiat_p224_mulx_u64(&mut x39, &mut x40, x1, 0xffffffff);
1233 let mut x41: u64 = 0;
1234 let mut x42: u64 = 0;
1235 fiat_p224_mulx_u64(&mut x41, &mut x42, x1, 0xfffffffe00000000);
1236 let mut x43: u64 = 0;
1237 let mut x44: u64 = 0;
1238 fiat_p224_mulx_u64(&mut x43, &mut x44, x1, 0xffffffff00000000);
1239 let mut x45: u64 = 0;
1240 let mut x46: u64 = 0;
1241 fiat_p224_mulx_u64(&mut x45, &mut x46, x1, 0xffffffff00000001);
1242 let mut x47: u64 = 0;
1243 let mut x48: fiat_p224_u1 = 0;
1244 fiat_p224_addcarryx_u64(&mut x47, &mut x48, 0x0, x46, x43);
1245 let mut x49: u64 = 0;
1246 let mut x50: fiat_p224_u1 = 0;
1247 fiat_p224_addcarryx_u64(&mut x49, &mut x50, x48, x44, x41);
1248 let mut x51: u64 = 0;
1249 let mut x52: fiat_p224_u1 = 0;
1250 fiat_p224_addcarryx_u64(&mut x51, &mut x52, x50, x42, x39);
1251 let mut x53: u64 = 0;
1252 let mut x54: fiat_p224_u1 = 0;
1253 fiat_p224_addcarryx_u64(&mut x53, &mut x54, 0x0, x33, x45);
1254 let mut x55: u64 = 0;
1255 let mut x56: fiat_p224_u1 = 0;
1256 fiat_p224_addcarryx_u64(&mut x55, &mut x56, x54, x35, x47);
1257 let mut x57: u64 = 0;
1258 let mut x58: fiat_p224_u1 = 0;
1259 fiat_p224_addcarryx_u64(&mut x57, &mut x58, x56, x37, x49);
1260 let mut x59: u64 = 0;
1261 let mut x60: fiat_p224_u1 = 0;
1262 fiat_p224_addcarryx_u64(&mut x59, &mut x60, x58, (((x38 as u64) + ((x18 as u64) + x6)) + ((x30 as u64) + x22)), x51);
1263 let mut x61: u64 = 0;
1264 let mut x62: u64 = 0;
1265 fiat_p224_mulx_u64(&mut x61, &mut x62, x53, 0xffffffffffffffff);
1266 let mut x63: u64 = 0;
1267 let mut x64: u64 = 0;
1268 fiat_p224_mulx_u64(&mut x63, &mut x64, x61, 0xffffffff);
1269 let mut x65: u64 = 0;
1270 let mut x66: u64 = 0;
1271 fiat_p224_mulx_u64(&mut x65, &mut x66, x61, 0xffffffffffffffff);
1272 let mut x67: u64 = 0;
1273 let mut x68: u64 = 0;
1274 fiat_p224_mulx_u64(&mut x67, &mut x68, x61, 0xffffffff00000000);
1275 let mut x69: u64 = 0;
1276 let mut x70: fiat_p224_u1 = 0;
1277 fiat_p224_addcarryx_u64(&mut x69, &mut x70, 0x0, x68, x65);
1278 let mut x71: u64 = 0;
1279 let mut x72: fiat_p224_u1 = 0;
1280 fiat_p224_addcarryx_u64(&mut x71, &mut x72, x70, x66, x63);
1281 let mut x73: u64 = 0;
1282 let mut x74: fiat_p224_u1 = 0;
1283 fiat_p224_addcarryx_u64(&mut x73, &mut x74, 0x0, x53, x61);
1284 let mut x75: u64 = 0;
1285 let mut x76: fiat_p224_u1 = 0;
1286 fiat_p224_addcarryx_u64(&mut x75, &mut x76, x74, x55, x67);
1287 let mut x77: u64 = 0;
1288 let mut x78: fiat_p224_u1 = 0;
1289 fiat_p224_addcarryx_u64(&mut x77, &mut x78, x76, x57, x69);
1290 let mut x79: u64 = 0;
1291 let mut x80: fiat_p224_u1 = 0;
1292 fiat_p224_addcarryx_u64(&mut x79, &mut x80, x78, x59, x71);
1293 let mut x81: u64 = 0;
1294 let mut x82: u64 = 0;
1295 fiat_p224_mulx_u64(&mut x81, &mut x82, x2, 0xffffffff);
1296 let mut x83: u64 = 0;
1297 let mut x84: u64 = 0;
1298 fiat_p224_mulx_u64(&mut x83, &mut x84, x2, 0xfffffffe00000000);
1299 let mut x85: u64 = 0;
1300 let mut x86: u64 = 0;
1301 fiat_p224_mulx_u64(&mut x85, &mut x86, x2, 0xffffffff00000000);
1302 let mut x87: u64 = 0;
1303 let mut x88: u64 = 0;
1304 fiat_p224_mulx_u64(&mut x87, &mut x88, x2, 0xffffffff00000001);
1305 let mut x89: u64 = 0;
1306 let mut x90: fiat_p224_u1 = 0;
1307 fiat_p224_addcarryx_u64(&mut x89, &mut x90, 0x0, x88, x85);
1308 let mut x91: u64 = 0;
1309 let mut x92: fiat_p224_u1 = 0;
1310 fiat_p224_addcarryx_u64(&mut x91, &mut x92, x90, x86, x83);
1311 let mut x93: u64 = 0;
1312 let mut x94: fiat_p224_u1 = 0;
1313 fiat_p224_addcarryx_u64(&mut x93, &mut x94, x92, x84, x81);
1314 let mut x95: u64 = 0;
1315 let mut x96: fiat_p224_u1 = 0;
1316 fiat_p224_addcarryx_u64(&mut x95, &mut x96, 0x0, x75, x87);
1317 let mut x97: u64 = 0;
1318 let mut x98: fiat_p224_u1 = 0;
1319 fiat_p224_addcarryx_u64(&mut x97, &mut x98, x96, x77, x89);
1320 let mut x99: u64 = 0;
1321 let mut x100: fiat_p224_u1 = 0;
1322 fiat_p224_addcarryx_u64(&mut x99, &mut x100, x98, x79, x91);
1323 let mut x101: u64 = 0;
1324 let mut x102: fiat_p224_u1 = 0;
1325 fiat_p224_addcarryx_u64(&mut x101, &mut x102, x100, (((x80 as u64) + ((x60 as u64) + ((x52 as u64) + x40))) + ((x72 as u64) + x64)), x93);
1326 let mut x103: u64 = 0;
1327 let mut x104: u64 = 0;
1328 fiat_p224_mulx_u64(&mut x103, &mut x104, x95, 0xffffffffffffffff);
1329 let mut x105: u64 = 0;
1330 let mut x106: u64 = 0;
1331 fiat_p224_mulx_u64(&mut x105, &mut x106, x103, 0xffffffff);
1332 let mut x107: u64 = 0;
1333 let mut x108: u64 = 0;
1334 fiat_p224_mulx_u64(&mut x107, &mut x108, x103, 0xffffffffffffffff);
1335 let mut x109: u64 = 0;
1336 let mut x110: u64 = 0;
1337 fiat_p224_mulx_u64(&mut x109, &mut x110, x103, 0xffffffff00000000);
1338 let mut x111: u64 = 0;
1339 let mut x112: fiat_p224_u1 = 0;
1340 fiat_p224_addcarryx_u64(&mut x111, &mut x112, 0x0, x110, x107);
1341 let mut x113: u64 = 0;
1342 let mut x114: fiat_p224_u1 = 0;
1343 fiat_p224_addcarryx_u64(&mut x113, &mut x114, x112, x108, x105);
1344 let mut x115: u64 = 0;
1345 let mut x116: fiat_p224_u1 = 0;
1346 fiat_p224_addcarryx_u64(&mut x115, &mut x116, 0x0, x95, x103);
1347 let mut x117: u64 = 0;
1348 let mut x118: fiat_p224_u1 = 0;
1349 fiat_p224_addcarryx_u64(&mut x117, &mut x118, x116, x97, x109);
1350 let mut x119: u64 = 0;
1351 let mut x120: fiat_p224_u1 = 0;
1352 fiat_p224_addcarryx_u64(&mut x119, &mut x120, x118, x99, x111);
1353 let mut x121: u64 = 0;
1354 let mut x122: fiat_p224_u1 = 0;
1355 fiat_p224_addcarryx_u64(&mut x121, &mut x122, x120, x101, x113);
1356 let mut x123: u64 = 0;
1357 let mut x124: u64 = 0;
1358 fiat_p224_mulx_u64(&mut x123, &mut x124, x3, 0xffffffff);
1359 let mut x125: u64 = 0;
1360 let mut x126: u64 = 0;
1361 fiat_p224_mulx_u64(&mut x125, &mut x126, x3, 0xfffffffe00000000);
1362 let mut x127: u64 = 0;
1363 let mut x128: u64 = 0;
1364 fiat_p224_mulx_u64(&mut x127, &mut x128, x3, 0xffffffff00000000);
1365 let mut x129: u64 = 0;
1366 let mut x130: u64 = 0;
1367 fiat_p224_mulx_u64(&mut x129, &mut x130, x3, 0xffffffff00000001);
1368 let mut x131: u64 = 0;
1369 let mut x132: fiat_p224_u1 = 0;
1370 fiat_p224_addcarryx_u64(&mut x131, &mut x132, 0x0, x130, x127);
1371 let mut x133: u64 = 0;
1372 let mut x134: fiat_p224_u1 = 0;
1373 fiat_p224_addcarryx_u64(&mut x133, &mut x134, x132, x128, x125);
1374 let mut x135: u64 = 0;
1375 let mut x136: fiat_p224_u1 = 0;
1376 fiat_p224_addcarryx_u64(&mut x135, &mut x136, x134, x126, x123);
1377 let mut x137: u64 = 0;
1378 let mut x138: fiat_p224_u1 = 0;
1379 fiat_p224_addcarryx_u64(&mut x137, &mut x138, 0x0, x117, x129);
1380 let mut x139: u64 = 0;
1381 let mut x140: fiat_p224_u1 = 0;
1382 fiat_p224_addcarryx_u64(&mut x139, &mut x140, x138, x119, x131);
1383 let mut x141: u64 = 0;
1384 let mut x142: fiat_p224_u1 = 0;
1385 fiat_p224_addcarryx_u64(&mut x141, &mut x142, x140, x121, x133);
1386 let mut x143: u64 = 0;
1387 let mut x144: fiat_p224_u1 = 0;
1388 fiat_p224_addcarryx_u64(&mut x143, &mut x144, x142, (((x122 as u64) + ((x102 as u64) + ((x94 as u64) + x82))) + ((x114 as u64) + x106)), x135);
1389 let mut x145: u64 = 0;
1390 let mut x146: u64 = 0;
1391 fiat_p224_mulx_u64(&mut x145, &mut x146, x137, 0xffffffffffffffff);
1392 let mut x147: u64 = 0;
1393 let mut x148: u64 = 0;
1394 fiat_p224_mulx_u64(&mut x147, &mut x148, x145, 0xffffffff);
1395 let mut x149: u64 = 0;
1396 let mut x150: u64 = 0;
1397 fiat_p224_mulx_u64(&mut x149, &mut x150, x145, 0xffffffffffffffff);
1398 let mut x151: u64 = 0;
1399 let mut x152: u64 = 0;
1400 fiat_p224_mulx_u64(&mut x151, &mut x152, x145, 0xffffffff00000000);
1401 let mut x153: u64 = 0;
1402 let mut x154: fiat_p224_u1 = 0;
1403 fiat_p224_addcarryx_u64(&mut x153, &mut x154, 0x0, x152, x149);
1404 let mut x155: u64 = 0;
1405 let mut x156: fiat_p224_u1 = 0;
1406 fiat_p224_addcarryx_u64(&mut x155, &mut x156, x154, x150, x147);
1407 let mut x157: u64 = 0;
1408 let mut x158: fiat_p224_u1 = 0;
1409 fiat_p224_addcarryx_u64(&mut x157, &mut x158, 0x0, x137, x145);
1410 let mut x159: u64 = 0;
1411 let mut x160: fiat_p224_u1 = 0;
1412 fiat_p224_addcarryx_u64(&mut x159, &mut x160, x158, x139, x151);
1413 let mut x161: u64 = 0;
1414 let mut x162: fiat_p224_u1 = 0;
1415 fiat_p224_addcarryx_u64(&mut x161, &mut x162, x160, x141, x153);
1416 let mut x163: u64 = 0;
1417 let mut x164: fiat_p224_u1 = 0;
1418 fiat_p224_addcarryx_u64(&mut x163, &mut x164, x162, x143, x155);
1419 let x165: u64 = (((x164 as u64) + ((x144 as u64) + ((x136 as u64) + x124))) + ((x156 as u64) + x148));
1420 let mut x166: u64 = 0;
1421 let mut x167: fiat_p224_u1 = 0;
1422 fiat_p224_subborrowx_u64(&mut x166, &mut x167, 0x0, x159, (0x1 as u64));
1423 let mut x168: u64 = 0;
1424 let mut x169: fiat_p224_u1 = 0;
1425 fiat_p224_subborrowx_u64(&mut x168, &mut x169, x167, x161, 0xffffffff00000000);
1426 let mut x170: u64 = 0;
1427 let mut x171: fiat_p224_u1 = 0;
1428 fiat_p224_subborrowx_u64(&mut x170, &mut x171, x169, x163, 0xffffffffffffffff);
1429 let mut x172: u64 = 0;
1430 let mut x173: fiat_p224_u1 = 0;
1431 fiat_p224_subborrowx_u64(&mut x172, &mut x173, x171, x165, 0xffffffff);
1432 let mut x174: u64 = 0;
1433 let mut x175: fiat_p224_u1 = 0;
1434 fiat_p224_subborrowx_u64(&mut x174, &mut x175, x173, (0x0 as u64), (0x0 as u64));
1435 let mut x176: u64 = 0;
1436 fiat_p224_cmovznz_u64(&mut x176, x175, x166, x159);
1437 let mut x177: u64 = 0;
1438 fiat_p224_cmovznz_u64(&mut x177, x175, x168, x161);
1439 let mut x178: u64 = 0;
1440 fiat_p224_cmovznz_u64(&mut x178, x175, x170, x163);
1441 let mut x179: u64 = 0;
1442 fiat_p224_cmovznz_u64(&mut x179, x175, x172, x165);
1443 *IndexConst(&mut out1).index_mut(0) = x176;
1444 *IndexConst(&mut out1).index_mut(1) = x177;
1445 *IndexConst(&mut out1).index_mut(2) = x178;
1446 *IndexConst(&mut out1).index_mut(3) = x179;
1447}
1448
1449#[inline]
1461pub const fn fiat_p224_nonzero(out1: &mut u64, arg1: &[u64; 4]) {
1462 let x1: u64 = ((*IndexConst(arg1).index(0)) | ((*IndexConst(arg1).index(1)) | ((*IndexConst(arg1).index(2)) | (*IndexConst(arg1).index(3)))));
1463 *out1 = x1;
1464}
1465
1466#[inline]
1478pub const fn fiat_p224_selectznz(mut out1: &mut [u64; 4], arg1: fiat_p224_u1, arg2: &[u64; 4], arg3: &[u64; 4]) {
1479 let mut x1: u64 = 0;
1480 fiat_p224_cmovznz_u64(&mut x1, arg1, (*IndexConst(arg2).index(0)), (*IndexConst(arg3).index(0)));
1481 let mut x2: u64 = 0;
1482 fiat_p224_cmovznz_u64(&mut x2, arg1, (*IndexConst(arg2).index(1)), (*IndexConst(arg3).index(1)));
1483 let mut x3: u64 = 0;
1484 fiat_p224_cmovznz_u64(&mut x3, arg1, (*IndexConst(arg2).index(2)), (*IndexConst(arg3).index(2)));
1485 let mut x4: u64 = 0;
1486 fiat_p224_cmovznz_u64(&mut x4, arg1, (*IndexConst(arg2).index(3)), (*IndexConst(arg3).index(3)));
1487 *IndexConst(&mut out1).index_mut(0) = x1;
1488 *IndexConst(&mut out1).index_mut(1) = x2;
1489 *IndexConst(&mut out1).index_mut(2) = x3;
1490 *IndexConst(&mut out1).index_mut(3) = x4;
1491}
1492
1493#[inline]
1505pub const fn fiat_p224_to_bytes(mut out1: &mut [u8; 28], arg1: &[u64; 4]) {
1506 let x1: u64 = (*IndexConst(arg1).index(3));
1507 let x2: u64 = (*IndexConst(arg1).index(2));
1508 let x3: u64 = (*IndexConst(arg1).index(1));
1509 let x4: u64 = (*IndexConst(arg1).index(0));
1510 let x5: u8 = ((x4 & (0xff as u64)) as u8);
1511 let x6: u64 = (x4 >> 8);
1512 let x7: u8 = ((x6 & (0xff as u64)) as u8);
1513 let x8: u64 = (x6 >> 8);
1514 let x9: u8 = ((x8 & (0xff as u64)) as u8);
1515 let x10: u64 = (x8 >> 8);
1516 let x11: u8 = ((x10 & (0xff as u64)) as u8);
1517 let x12: u64 = (x10 >> 8);
1518 let x13: u8 = ((x12 & (0xff as u64)) as u8);
1519 let x14: u64 = (x12 >> 8);
1520 let x15: u8 = ((x14 & (0xff as u64)) as u8);
1521 let x16: u64 = (x14 >> 8);
1522 let x17: u8 = ((x16 & (0xff as u64)) as u8);
1523 let x18: u8 = ((x16 >> 8) as u8);
1524 let x19: u8 = ((x3 & (0xff as u64)) as u8);
1525 let x20: u64 = (x3 >> 8);
1526 let x21: u8 = ((x20 & (0xff as u64)) as u8);
1527 let x22: u64 = (x20 >> 8);
1528 let x23: u8 = ((x22 & (0xff as u64)) as u8);
1529 let x24: u64 = (x22 >> 8);
1530 let x25: u8 = ((x24 & (0xff as u64)) as u8);
1531 let x26: u64 = (x24 >> 8);
1532 let x27: u8 = ((x26 & (0xff as u64)) as u8);
1533 let x28: u64 = (x26 >> 8);
1534 let x29: u8 = ((x28 & (0xff as u64)) as u8);
1535 let x30: u64 = (x28 >> 8);
1536 let x31: u8 = ((x30 & (0xff as u64)) as u8);
1537 let x32: u8 = ((x30 >> 8) as u8);
1538 let x33: u8 = ((x2 & (0xff as u64)) as u8);
1539 let x34: u64 = (x2 >> 8);
1540 let x35: u8 = ((x34 & (0xff as u64)) as u8);
1541 let x36: u64 = (x34 >> 8);
1542 let x37: u8 = ((x36 & (0xff as u64)) as u8);
1543 let x38: u64 = (x36 >> 8);
1544 let x39: u8 = ((x38 & (0xff as u64)) as u8);
1545 let x40: u64 = (x38 >> 8);
1546 let x41: u8 = ((x40 & (0xff as u64)) as u8);
1547 let x42: u64 = (x40 >> 8);
1548 let x43: u8 = ((x42 & (0xff as u64)) as u8);
1549 let x44: u64 = (x42 >> 8);
1550 let x45: u8 = ((x44 & (0xff as u64)) as u8);
1551 let x46: u8 = ((x44 >> 8) as u8);
1552 let x47: u8 = ((x1 & (0xff as u64)) as u8);
1553 let x48: u64 = (x1 >> 8);
1554 let x49: u8 = ((x48 & (0xff as u64)) as u8);
1555 let x50: u64 = (x48 >> 8);
1556 let x51: u8 = ((x50 & (0xff as u64)) as u8);
1557 let x52: u8 = ((x50 >> 8) as u8);
1558 *IndexConst(&mut out1).index_mut(0) = x5;
1559 *IndexConst(&mut out1).index_mut(1) = x7;
1560 *IndexConst(&mut out1).index_mut(2) = x9;
1561 *IndexConst(&mut out1).index_mut(3) = x11;
1562 *IndexConst(&mut out1).index_mut(4) = x13;
1563 *IndexConst(&mut out1).index_mut(5) = x15;
1564 *IndexConst(&mut out1).index_mut(6) = x17;
1565 *IndexConst(&mut out1).index_mut(7) = x18;
1566 *IndexConst(&mut out1).index_mut(8) = x19;
1567 *IndexConst(&mut out1).index_mut(9) = x21;
1568 *IndexConst(&mut out1).index_mut(10) = x23;
1569 *IndexConst(&mut out1).index_mut(11) = x25;
1570 *IndexConst(&mut out1).index_mut(12) = x27;
1571 *IndexConst(&mut out1).index_mut(13) = x29;
1572 *IndexConst(&mut out1).index_mut(14) = x31;
1573 *IndexConst(&mut out1).index_mut(15) = x32;
1574 *IndexConst(&mut out1).index_mut(16) = x33;
1575 *IndexConst(&mut out1).index_mut(17) = x35;
1576 *IndexConst(&mut out1).index_mut(18) = x37;
1577 *IndexConst(&mut out1).index_mut(19) = x39;
1578 *IndexConst(&mut out1).index_mut(20) = x41;
1579 *IndexConst(&mut out1).index_mut(21) = x43;
1580 *IndexConst(&mut out1).index_mut(22) = x45;
1581 *IndexConst(&mut out1).index_mut(23) = x46;
1582 *IndexConst(&mut out1).index_mut(24) = x47;
1583 *IndexConst(&mut out1).index_mut(25) = x49;
1584 *IndexConst(&mut out1).index_mut(26) = x51;
1585 *IndexConst(&mut out1).index_mut(27) = x52;
1586}
1587
1588#[inline]
1601pub const fn fiat_p224_from_bytes(mut out1: &mut [u64; 4], arg1: &[u8; 28]) {
1602 let x1: u64 = (((*IndexConst(arg1).index(27)) as u64) << 24);
1603 let x2: u64 = (((*IndexConst(arg1).index(26)) as u64) << 16);
1604 let x3: u64 = (((*IndexConst(arg1).index(25)) as u64) << 8);
1605 let x4: u8 = (*IndexConst(arg1).index(24));
1606 let x5: u64 = (((*IndexConst(arg1).index(23)) as u64) << 56);
1607 let x6: u64 = (((*IndexConst(arg1).index(22)) as u64) << 48);
1608 let x7: u64 = (((*IndexConst(arg1).index(21)) as u64) << 40);
1609 let x8: u64 = (((*IndexConst(arg1).index(20)) as u64) << 32);
1610 let x9: u64 = (((*IndexConst(arg1).index(19)) as u64) << 24);
1611 let x10: u64 = (((*IndexConst(arg1).index(18)) as u64) << 16);
1612 let x11: u64 = (((*IndexConst(arg1).index(17)) as u64) << 8);
1613 let x12: u8 = (*IndexConst(arg1).index(16));
1614 let x13: u64 = (((*IndexConst(arg1).index(15)) as u64) << 56);
1615 let x14: u64 = (((*IndexConst(arg1).index(14)) as u64) << 48);
1616 let x15: u64 = (((*IndexConst(arg1).index(13)) as u64) << 40);
1617 let x16: u64 = (((*IndexConst(arg1).index(12)) as u64) << 32);
1618 let x17: u64 = (((*IndexConst(arg1).index(11)) as u64) << 24);
1619 let x18: u64 = (((*IndexConst(arg1).index(10)) as u64) << 16);
1620 let x19: u64 = (((*IndexConst(arg1).index(9)) as u64) << 8);
1621 let x20: u8 = (*IndexConst(arg1).index(8));
1622 let x21: u64 = (((*IndexConst(arg1).index(7)) as u64) << 56);
1623 let x22: u64 = (((*IndexConst(arg1).index(6)) as u64) << 48);
1624 let x23: u64 = (((*IndexConst(arg1).index(5)) as u64) << 40);
1625 let x24: u64 = (((*IndexConst(arg1).index(4)) as u64) << 32);
1626 let x25: u64 = (((*IndexConst(arg1).index(3)) as u64) << 24);
1627 let x26: u64 = (((*IndexConst(arg1).index(2)) as u64) << 16);
1628 let x27: u64 = (((*IndexConst(arg1).index(1)) as u64) << 8);
1629 let x28: u8 = (*IndexConst(arg1).index(0));
1630 let x29: u64 = (x27 + (x28 as u64));
1631 let x30: u64 = (x26 + x29);
1632 let x31: u64 = (x25 + x30);
1633 let x32: u64 = (x24 + x31);
1634 let x33: u64 = (x23 + x32);
1635 let x34: u64 = (x22 + x33);
1636 let x35: u64 = (x21 + x34);
1637 let x36: u64 = (x19 + (x20 as u64));
1638 let x37: u64 = (x18 + x36);
1639 let x38: u64 = (x17 + x37);
1640 let x39: u64 = (x16 + x38);
1641 let x40: u64 = (x15 + x39);
1642 let x41: u64 = (x14 + x40);
1643 let x42: u64 = (x13 + x41);
1644 let x43: u64 = (x11 + (x12 as u64));
1645 let x44: u64 = (x10 + x43);
1646 let x45: u64 = (x9 + x44);
1647 let x46: u64 = (x8 + x45);
1648 let x47: u64 = (x7 + x46);
1649 let x48: u64 = (x6 + x47);
1650 let x49: u64 = (x5 + x48);
1651 let x50: u64 = (x3 + (x4 as u64));
1652 let x51: u64 = (x2 + x50);
1653 let x52: u64 = (x1 + x51);
1654 *IndexConst(&mut out1).index_mut(0) = x35;
1655 *IndexConst(&mut out1).index_mut(1) = x42;
1656 *IndexConst(&mut out1).index_mut(2) = x49;
1657 *IndexConst(&mut out1).index_mut(3) = x52;
1658}
1659
1660#[inline]
1667pub const fn fiat_p224_set_one(mut out1: &mut fiat_p224_montgomery_domain_field_element) {
1668 *IndexConst(&mut out1).index_mut(0) = 0xffffffff00000000;
1669 *IndexConst(&mut out1).index_mut(1) = 0xffffffffffffffff;
1670 *IndexConst(&mut out1).index_mut(2) = (0x0 as u64);
1671 *IndexConst(&mut out1).index_mut(3) = (0x0 as u64);
1672}
1673
1674#[inline]
1683pub const fn fiat_p224_msat(mut out1: &mut [u64; 5]) {
1684 *IndexConst(&mut out1).index_mut(0) = (0x1 as u64);
1685 *IndexConst(&mut out1).index_mut(1) = 0xffffffff00000000;
1686 *IndexConst(&mut out1).index_mut(2) = 0xffffffffffffffff;
1687 *IndexConst(&mut out1).index_mut(3) = 0xffffffff;
1688 *IndexConst(&mut out1).index_mut(4) = (0x0 as u64);
1689}
1690
1691#[inline]
1720pub const fn fiat_p224_divstep(out1: &mut u64, mut out2: &mut [u64; 5], mut out3: &mut [u64; 5], mut out4: &mut [u64; 4], mut out5: &mut [u64; 4], arg1: u64, arg2: &[u64; 5], arg3: &[u64; 5], arg4: &[u64; 4], arg5: &[u64; 4]) {
1721 let mut x1: u64 = 0;
1722 let mut x2: fiat_p224_u1 = 0;
1723 fiat_p224_addcarryx_u64(&mut x1, &mut x2, 0x0, (!arg1), (0x1 as u64));
1724 let x3: fiat_p224_u1 = (((x1 >> 63) as fiat_p224_u1) & (((*IndexConst(arg3).index(0)) & (0x1 as u64)) as fiat_p224_u1));
1725 let mut x4: u64 = 0;
1726 let mut x5: fiat_p224_u1 = 0;
1727 fiat_p224_addcarryx_u64(&mut x4, &mut x5, 0x0, (!arg1), (0x1 as u64));
1728 let mut x6: u64 = 0;
1729 fiat_p224_cmovznz_u64(&mut x6, x3, arg1, x4);
1730 let mut x7: u64 = 0;
1731 fiat_p224_cmovznz_u64(&mut x7, x3, (*IndexConst(arg2).index(0)), (*IndexConst(arg3).index(0)));
1732 let mut x8: u64 = 0;
1733 fiat_p224_cmovznz_u64(&mut x8, x3, (*IndexConst(arg2).index(1)), (*IndexConst(arg3).index(1)));
1734 let mut x9: u64 = 0;
1735 fiat_p224_cmovznz_u64(&mut x9, x3, (*IndexConst(arg2).index(2)), (*IndexConst(arg3).index(2)));
1736 let mut x10: u64 = 0;
1737 fiat_p224_cmovznz_u64(&mut x10, x3, (*IndexConst(arg2).index(3)), (*IndexConst(arg3).index(3)));
1738 let mut x11: u64 = 0;
1739 fiat_p224_cmovznz_u64(&mut x11, x3, (*IndexConst(arg2).index(4)), (*IndexConst(arg3).index(4)));
1740 let mut x12: u64 = 0;
1741 let mut x13: fiat_p224_u1 = 0;
1742 fiat_p224_addcarryx_u64(&mut x12, &mut x13, 0x0, (0x1 as u64), (!(*IndexConst(arg2).index(0))));
1743 let mut x14: u64 = 0;
1744 let mut x15: fiat_p224_u1 = 0;
1745 fiat_p224_addcarryx_u64(&mut x14, &mut x15, x13, (0x0 as u64), (!(*IndexConst(arg2).index(1))));
1746 let mut x16: u64 = 0;
1747 let mut x17: fiat_p224_u1 = 0;
1748 fiat_p224_addcarryx_u64(&mut x16, &mut x17, x15, (0x0 as u64), (!(*IndexConst(arg2).index(2))));
1749 let mut x18: u64 = 0;
1750 let mut x19: fiat_p224_u1 = 0;
1751 fiat_p224_addcarryx_u64(&mut x18, &mut x19, x17, (0x0 as u64), (!(*IndexConst(arg2).index(3))));
1752 let mut x20: u64 = 0;
1753 let mut x21: fiat_p224_u1 = 0;
1754 fiat_p224_addcarryx_u64(&mut x20, &mut x21, x19, (0x0 as u64), (!(*IndexConst(arg2).index(4))));
1755 let mut x22: u64 = 0;
1756 fiat_p224_cmovznz_u64(&mut x22, x3, (*IndexConst(arg3).index(0)), x12);
1757 let mut x23: u64 = 0;
1758 fiat_p224_cmovznz_u64(&mut x23, x3, (*IndexConst(arg3).index(1)), x14);
1759 let mut x24: u64 = 0;
1760 fiat_p224_cmovznz_u64(&mut x24, x3, (*IndexConst(arg3).index(2)), x16);
1761 let mut x25: u64 = 0;
1762 fiat_p224_cmovznz_u64(&mut x25, x3, (*IndexConst(arg3).index(3)), x18);
1763 let mut x26: u64 = 0;
1764 fiat_p224_cmovznz_u64(&mut x26, x3, (*IndexConst(arg3).index(4)), x20);
1765 let mut x27: u64 = 0;
1766 fiat_p224_cmovznz_u64(&mut x27, x3, (*IndexConst(arg4).index(0)), (*IndexConst(arg5).index(0)));
1767 let mut x28: u64 = 0;
1768 fiat_p224_cmovznz_u64(&mut x28, x3, (*IndexConst(arg4).index(1)), (*IndexConst(arg5).index(1)));
1769 let mut x29: u64 = 0;
1770 fiat_p224_cmovznz_u64(&mut x29, x3, (*IndexConst(arg4).index(2)), (*IndexConst(arg5).index(2)));
1771 let mut x30: u64 = 0;
1772 fiat_p224_cmovznz_u64(&mut x30, x3, (*IndexConst(arg4).index(3)), (*IndexConst(arg5).index(3)));
1773 let mut x31: u64 = 0;
1774 let mut x32: fiat_p224_u1 = 0;
1775 fiat_p224_addcarryx_u64(&mut x31, &mut x32, 0x0, x27, x27);
1776 let mut x33: u64 = 0;
1777 let mut x34: fiat_p224_u1 = 0;
1778 fiat_p224_addcarryx_u64(&mut x33, &mut x34, x32, x28, x28);
1779 let mut x35: u64 = 0;
1780 let mut x36: fiat_p224_u1 = 0;
1781 fiat_p224_addcarryx_u64(&mut x35, &mut x36, x34, x29, x29);
1782 let mut x37: u64 = 0;
1783 let mut x38: fiat_p224_u1 = 0;
1784 fiat_p224_addcarryx_u64(&mut x37, &mut x38, x36, x30, x30);
1785 let mut x39: u64 = 0;
1786 let mut x40: fiat_p224_u1 = 0;
1787 fiat_p224_subborrowx_u64(&mut x39, &mut x40, 0x0, x31, (0x1 as u64));
1788 let mut x41: u64 = 0;
1789 let mut x42: fiat_p224_u1 = 0;
1790 fiat_p224_subborrowx_u64(&mut x41, &mut x42, x40, x33, 0xffffffff00000000);
1791 let mut x43: u64 = 0;
1792 let mut x44: fiat_p224_u1 = 0;
1793 fiat_p224_subborrowx_u64(&mut x43, &mut x44, x42, x35, 0xffffffffffffffff);
1794 let mut x45: u64 = 0;
1795 let mut x46: fiat_p224_u1 = 0;
1796 fiat_p224_subborrowx_u64(&mut x45, &mut x46, x44, x37, 0xffffffff);
1797 let mut x47: u64 = 0;
1798 let mut x48: fiat_p224_u1 = 0;
1799 fiat_p224_subborrowx_u64(&mut x47, &mut x48, x46, (x38 as u64), (0x0 as u64));
1800 let x49: u64 = (*IndexConst(arg4).index(3));
1801 let x50: u64 = (*IndexConst(arg4).index(2));
1802 let x51: u64 = (*IndexConst(arg4).index(1));
1803 let x52: u64 = (*IndexConst(arg4).index(0));
1804 let mut x53: u64 = 0;
1805 let mut x54: fiat_p224_u1 = 0;
1806 fiat_p224_subborrowx_u64(&mut x53, &mut x54, 0x0, (0x0 as u64), x52);
1807 let mut x55: u64 = 0;
1808 let mut x56: fiat_p224_u1 = 0;
1809 fiat_p224_subborrowx_u64(&mut x55, &mut x56, x54, (0x0 as u64), x51);
1810 let mut x57: u64 = 0;
1811 let mut x58: fiat_p224_u1 = 0;
1812 fiat_p224_subborrowx_u64(&mut x57, &mut x58, x56, (0x0 as u64), x50);
1813 let mut x59: u64 = 0;
1814 let mut x60: fiat_p224_u1 = 0;
1815 fiat_p224_subborrowx_u64(&mut x59, &mut x60, x58, (0x0 as u64), x49);
1816 let mut x61: u64 = 0;
1817 fiat_p224_cmovznz_u64(&mut x61, x60, (0x0 as u64), 0xffffffffffffffff);
1818 let mut x62: u64 = 0;
1819 let mut x63: fiat_p224_u1 = 0;
1820 fiat_p224_addcarryx_u64(&mut x62, &mut x63, 0x0, x53, (((x61 & (0x1 as u64)) as fiat_p224_u1) as u64));
1821 let mut x64: u64 = 0;
1822 let mut x65: fiat_p224_u1 = 0;
1823 fiat_p224_addcarryx_u64(&mut x64, &mut x65, x63, x55, (x61 & 0xffffffff00000000));
1824 let mut x66: u64 = 0;
1825 let mut x67: fiat_p224_u1 = 0;
1826 fiat_p224_addcarryx_u64(&mut x66, &mut x67, x65, x57, x61);
1827 let mut x68: u64 = 0;
1828 let mut x69: fiat_p224_u1 = 0;
1829 fiat_p224_addcarryx_u64(&mut x68, &mut x69, x67, x59, (x61 & 0xffffffff));
1830 let mut x70: u64 = 0;
1831 fiat_p224_cmovznz_u64(&mut x70, x3, (*IndexConst(arg5).index(0)), x62);
1832 let mut x71: u64 = 0;
1833 fiat_p224_cmovznz_u64(&mut x71, x3, (*IndexConst(arg5).index(1)), x64);
1834 let mut x72: u64 = 0;
1835 fiat_p224_cmovznz_u64(&mut x72, x3, (*IndexConst(arg5).index(2)), x66);
1836 let mut x73: u64 = 0;
1837 fiat_p224_cmovznz_u64(&mut x73, x3, (*IndexConst(arg5).index(3)), x68);
1838 let x74: fiat_p224_u1 = ((x22 & (0x1 as u64)) as fiat_p224_u1);
1839 let mut x75: u64 = 0;
1840 fiat_p224_cmovznz_u64(&mut x75, x74, (0x0 as u64), x7);
1841 let mut x76: u64 = 0;
1842 fiat_p224_cmovznz_u64(&mut x76, x74, (0x0 as u64), x8);
1843 let mut x77: u64 = 0;
1844 fiat_p224_cmovznz_u64(&mut x77, x74, (0x0 as u64), x9);
1845 let mut x78: u64 = 0;
1846 fiat_p224_cmovznz_u64(&mut x78, x74, (0x0 as u64), x10);
1847 let mut x79: u64 = 0;
1848 fiat_p224_cmovznz_u64(&mut x79, x74, (0x0 as u64), x11);
1849 let mut x80: u64 = 0;
1850 let mut x81: fiat_p224_u1 = 0;
1851 fiat_p224_addcarryx_u64(&mut x80, &mut x81, 0x0, x22, x75);
1852 let mut x82: u64 = 0;
1853 let mut x83: fiat_p224_u1 = 0;
1854 fiat_p224_addcarryx_u64(&mut x82, &mut x83, x81, x23, x76);
1855 let mut x84: u64 = 0;
1856 let mut x85: fiat_p224_u1 = 0;
1857 fiat_p224_addcarryx_u64(&mut x84, &mut x85, x83, x24, x77);
1858 let mut x86: u64 = 0;
1859 let mut x87: fiat_p224_u1 = 0;
1860 fiat_p224_addcarryx_u64(&mut x86, &mut x87, x85, x25, x78);
1861 let mut x88: u64 = 0;
1862 let mut x89: fiat_p224_u1 = 0;
1863 fiat_p224_addcarryx_u64(&mut x88, &mut x89, x87, x26, x79);
1864 let mut x90: u64 = 0;
1865 fiat_p224_cmovznz_u64(&mut x90, x74, (0x0 as u64), x27);
1866 let mut x91: u64 = 0;
1867 fiat_p224_cmovznz_u64(&mut x91, x74, (0x0 as u64), x28);
1868 let mut x92: u64 = 0;
1869 fiat_p224_cmovznz_u64(&mut x92, x74, (0x0 as u64), x29);
1870 let mut x93: u64 = 0;
1871 fiat_p224_cmovznz_u64(&mut x93, x74, (0x0 as u64), x30);
1872 let mut x94: u64 = 0;
1873 let mut x95: fiat_p224_u1 = 0;
1874 fiat_p224_addcarryx_u64(&mut x94, &mut x95, 0x0, x70, x90);
1875 let mut x96: u64 = 0;
1876 let mut x97: fiat_p224_u1 = 0;
1877 fiat_p224_addcarryx_u64(&mut x96, &mut x97, x95, x71, x91);
1878 let mut x98: u64 = 0;
1879 let mut x99: fiat_p224_u1 = 0;
1880 fiat_p224_addcarryx_u64(&mut x98, &mut x99, x97, x72, x92);
1881 let mut x100: u64 = 0;
1882 let mut x101: fiat_p224_u1 = 0;
1883 fiat_p224_addcarryx_u64(&mut x100, &mut x101, x99, x73, x93);
1884 let mut x102: u64 = 0;
1885 let mut x103: fiat_p224_u1 = 0;
1886 fiat_p224_subborrowx_u64(&mut x102, &mut x103, 0x0, x94, (0x1 as u64));
1887 let mut x104: u64 = 0;
1888 let mut x105: fiat_p224_u1 = 0;
1889 fiat_p224_subborrowx_u64(&mut x104, &mut x105, x103, x96, 0xffffffff00000000);
1890 let mut x106: u64 = 0;
1891 let mut x107: fiat_p224_u1 = 0;
1892 fiat_p224_subborrowx_u64(&mut x106, &mut x107, x105, x98, 0xffffffffffffffff);
1893 let mut x108: u64 = 0;
1894 let mut x109: fiat_p224_u1 = 0;
1895 fiat_p224_subborrowx_u64(&mut x108, &mut x109, x107, x100, 0xffffffff);
1896 let mut x110: u64 = 0;
1897 let mut x111: fiat_p224_u1 = 0;
1898 fiat_p224_subborrowx_u64(&mut x110, &mut x111, x109, (x101 as u64), (0x0 as u64));
1899 let mut x112: u64 = 0;
1900 let mut x113: fiat_p224_u1 = 0;
1901 fiat_p224_addcarryx_u64(&mut x112, &mut x113, 0x0, x6, (0x1 as u64));
1902 let x114: u64 = ((x80 >> 1) | ((x82 << 63) & 0xffffffffffffffff));
1903 let x115: u64 = ((x82 >> 1) | ((x84 << 63) & 0xffffffffffffffff));
1904 let x116: u64 = ((x84 >> 1) | ((x86 << 63) & 0xffffffffffffffff));
1905 let x117: u64 = ((x86 >> 1) | ((x88 << 63) & 0xffffffffffffffff));
1906 let x118: u64 = ((x88 & 0x8000000000000000) | (x88 >> 1));
1907 let mut x119: u64 = 0;
1908 fiat_p224_cmovznz_u64(&mut x119, x48, x39, x31);
1909 let mut x120: u64 = 0;
1910 fiat_p224_cmovznz_u64(&mut x120, x48, x41, x33);
1911 let mut x121: u64 = 0;
1912 fiat_p224_cmovznz_u64(&mut x121, x48, x43, x35);
1913 let mut x122: u64 = 0;
1914 fiat_p224_cmovznz_u64(&mut x122, x48, x45, x37);
1915 let mut x123: u64 = 0;
1916 fiat_p224_cmovznz_u64(&mut x123, x111, x102, x94);
1917 let mut x124: u64 = 0;
1918 fiat_p224_cmovznz_u64(&mut x124, x111, x104, x96);
1919 let mut x125: u64 = 0;
1920 fiat_p224_cmovznz_u64(&mut x125, x111, x106, x98);
1921 let mut x126: u64 = 0;
1922 fiat_p224_cmovznz_u64(&mut x126, x111, x108, x100);
1923 *out1 = x112;
1924 *IndexConst(&mut out2).index_mut(0) = x7;
1925 *IndexConst(&mut out2).index_mut(1) = x8;
1926 *IndexConst(&mut out2).index_mut(2) = x9;
1927 *IndexConst(&mut out2).index_mut(3) = x10;
1928 *IndexConst(&mut out2).index_mut(4) = x11;
1929 *IndexConst(&mut out3).index_mut(0) = x114;
1930 *IndexConst(&mut out3).index_mut(1) = x115;
1931 *IndexConst(&mut out3).index_mut(2) = x116;
1932 *IndexConst(&mut out3).index_mut(3) = x117;
1933 *IndexConst(&mut out3).index_mut(4) = x118;
1934 *IndexConst(&mut out4).index_mut(0) = x119;
1935 *IndexConst(&mut out4).index_mut(1) = x120;
1936 *IndexConst(&mut out4).index_mut(2) = x121;
1937 *IndexConst(&mut out4).index_mut(3) = x122;
1938 *IndexConst(&mut out5).index_mut(0) = x123;
1939 *IndexConst(&mut out5).index_mut(1) = x124;
1940 *IndexConst(&mut out5).index_mut(2) = x125;
1941 *IndexConst(&mut out5).index_mut(3) = x126;
1942}
1943
1944#[inline]
1953pub const fn fiat_p224_divstep_precomp(mut out1: &mut [u64; 4]) {
1954 *IndexConst(&mut out1).index_mut(0) = 0x7ffffffe800001;
1955 *IndexConst(&mut out1).index_mut(1) = 0xff7fffff00800000;
1956 *IndexConst(&mut out1).index_mut(2) = 0xffffff;
1957 *IndexConst(&mut out1).index_mut(3) = 0xff800000;
1958}