Function p256_sub 

pub fn p256_sub(a: &[u64; 4], b: &[u64; 4]) -> [u64; 4]

P-256 field subtraction a - b mod p for a and b below p, in constant time (see p256_add): the borrow becomes a mask that selects p to add back.