new autogenerated files

15 files changed, 150 insertions, 0 deletions

diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/CurveParameters.v b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/CurveParameters.v
new file mode 100644
index 000000000..41d60e98f
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/CurveParameters.v
@@ -0,0 +1,39 @@
+Require Import Crypto.Specific.Framework.RawCurveParameters.
+Require Import Crypto.Util.LetIn.
+
+(***
+Modulus : 2^256 - 2^224 + 2^192 + 2^96 - 1
+Base: 23 + 3/11
+***)
+
+Definition curve : CurveParameters :=
+  {|
+    sz := 11%nat;
+    base := 23 + 3/11;
+    bitwidth := 32;
+    s := 2^256;
+    c := [(1, 1); (2^96, -1); (2^192, -1); (2^224, 1)];
+    carry_chains := Some [[8; 7; 3; 10]; [9; 8; 4; 0; 10; 5; 1; 6; 2; 7; 3]; [9; 8; 4; 0]]%nat;
+
+    a24 := None;
+    coef_div_modulus := Some 2%nat;
+
+    goldilocks := None;
+    karatsuba := None;
+    montgomery := false;
+    freeze := Some true;
+    ladderstep := false;
+
+    mul_code := None;
+
+    square_code := None;
+
+    upper_bound_of_exponent_loose := None;
+    upper_bound_of_exponent_tight := None;
+    allowable_bit_widths := None;
+    freeze_extra_allowable_bit_widths := None;
+    modinv_fuel := None
+  |}.
+
+Ltac extra_prove_mul_eq _ := idtac.
+Ltac extra_prove_square_eq _ := idtac.
diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/Synthesis.v b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/Synthesis.v
new file mode 100644
index 000000000..011d05cf7
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/Synthesis.v
@@ -0,0 +1,9 @@
+Require Import Crypto.Specific.Framework.SynthesisFramework.
+Require Import Crypto.Specific.solinas32_2e256m2e224p2e192p2e96m1_11limbs.CurveParameters.
+
+Module P <: PrePackage.
+  Definition package : Tag.Context.
+  Proof. make_Synthesis_package curve extra_prove_mul_eq extra_prove_square_eq. Defined.
+End P.
+
+Module Export S := PackageSynthesis P.
diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/compiler.sh b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/compiler.sh
new file mode 100755
index 000000000..ac2659a97
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/compiler.sh
@@ -0,0 +1,4 @@
+#!/bin/sh
+set -eu
+
+clang -fbracket-depth=999999 -march=native -mtune=native -std=gnu11 -O3 -flto -fuse-ld=lld -fomit-frame-pointer -fwrapv -Wno-attributes -fno-strict-aliasing -Da24_hex='0x3039' -Da24_val='12345' -Da_minus_two_over_four_array='{0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x30,0x39}' -Dbitwidth='32' -Dlimb_weight_gaps_array='{24,23,23,24,23,23,23,24,23,23,23}' -Dmodulus_array='{0xff,0xff,0xff,0xff,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff}' -Dmodulus_bytes_val='32' -Dmodulus_limbs='11' -Dq_mpz='(1_mpz<<256) - (1_mpz<<224) + (1_mpz<<192) + (1_mpz<<96) - 1' "$@"
diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/compilerxx.sh b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/compilerxx.sh
new file mode 100755
index 000000000..8acbb2ef4
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/compilerxx.sh
@@ -0,0 +1,4 @@
+#!/bin/sh
+set -eu
+
+clang++ -fbracket-depth=999999 -march=native -mtune=native -std=gnu++11 -O3 -flto -fuse-ld=lld -fomit-frame-pointer -fwrapv -Wno-attributes -fno-strict-aliasing -Da24_hex='0x3039' -Da24_val='12345' -Da_minus_two_over_four_array='{0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x30,0x39}' -Dbitwidth='32' -Dlimb_weight_gaps_array='{24,23,23,24,23,23,23,24,23,23,23}' -Dmodulus_array='{0xff,0xff,0xff,0xff,0x00,0x00,0x00,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff}' -Dmodulus_bytes_val='32' -Dmodulus_limbs='11' -Dq_mpz='(1_mpz<<256) - (1_mpz<<224) + (1_mpz<<192) + (1_mpz<<96) - 1' "$@"
diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/feadd.v b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/feadd.v
new file mode 100644
index 000000000..48155d778
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/feadd.v
@@ -0,0 +1,14 @@
+Require Import Crypto.Arithmetic.PrimeFieldTheorems.
+Require Import Crypto.Specific.solinas32_2e256m2e224p2e192p2e96m1_11limbs.Synthesis.
+
+(* TODO : change this to field once field isomorphism happens *)
+Definition add :
+  { add : feBW_tight -> feBW_tight -> feBW_loose
+  | forall a b, phiBW_loose (add a b) = F.add (phiBW_tight a) (phiBW_tight b) }.
+Proof.
+  Set Ltac Profiling.
+  Time synthesize_add ().
+  Show Ltac Profile.
+Time Defined.
+
+Print Assumptions add.
diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/feaddDisplay.v b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/feaddDisplay.v
new file mode 100644
index 000000000..a0d9c6efb
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/feaddDisplay.v
@@ -0,0 +1,4 @@
+Require Import Crypto.Specific.solinas32_2e256m2e224p2e192p2e96m1_11limbs.feadd.
+Require Import Crypto.Specific.Framework.IntegrationTestDisplayCommon.
+
+Check display add.
diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/femul.v b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/femul.v
new file mode 100644
index 000000000..4a49098f1
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/femul.v
@@ -0,0 +1,14 @@
+Require Import Crypto.Arithmetic.PrimeFieldTheorems.
+Require Import Crypto.Specific.solinas32_2e256m2e224p2e192p2e96m1_11limbs.Synthesis.
+
+(* TODO : change this to field once field isomorphism happens *)
+Definition mul :
+  { mul : feBW_loose -> feBW_loose -> feBW_tight
+  | forall a b, phiBW_tight (mul a b) = F.mul (phiBW_loose a) (phiBW_loose b) }.
+Proof.
+  Set Ltac Profiling.
+  Time synthesize_mul ().
+  Show Ltac Profile.
+Time Defined.
+
+Print Assumptions mul.
diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/femulDisplay.v b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/femulDisplay.v
new file mode 100644
index 000000000..3baa25f07
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/femulDisplay.v
@@ -0,0 +1,4 @@
+Require Import Crypto.Specific.solinas32_2e256m2e224p2e192p2e96m1_11limbs.femul.
+Require Import Crypto.Specific.Framework.IntegrationTestDisplayCommon.
+
+Check display mul.
diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/fesquare.v b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/fesquare.v
new file mode 100644
index 000000000..3ea7cc667
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/fesquare.v
@@ -0,0 +1,14 @@
+Require Import Crypto.Arithmetic.PrimeFieldTheorems.
+Require Import Crypto.Specific.solinas32_2e256m2e224p2e192p2e96m1_11limbs.Synthesis.
+
+(* TODO : change this to field once field isomorphism happens *)
+Definition square :
+  { square : feBW_loose -> feBW_tight
+  | forall a, phiBW_tight (square a) = F.mul (phiBW_loose a) (phiBW_loose a) }.
+Proof.
+  Set Ltac Profiling.
+  Time synthesize_square ().
+  Show Ltac Profile.
+Time Defined.
+
+Print Assumptions square.
diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/fesquareDisplay.v b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/fesquareDisplay.v
new file mode 100644
index 000000000..4d03964ad
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/fesquareDisplay.v
@@ -0,0 +1,4 @@
+Require Import Crypto.Specific.solinas32_2e256m2e224p2e192p2e96m1_11limbs.fesquare.
+Require Import Crypto.Specific.Framework.IntegrationTestDisplayCommon.
+
+Check display square.
diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/fesub.v b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/fesub.v
new file mode 100644
index 000000000..91a086752
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/fesub.v
@@ -0,0 +1,14 @@
+Require Import Crypto.Arithmetic.PrimeFieldTheorems.
+Require Import Crypto.Specific.solinas32_2e256m2e224p2e192p2e96m1_11limbs.Synthesis.
+
+(* TODO : change this to field once field isomorphism happens *)
+Definition sub :
+  { sub : feBW_tight -> feBW_tight -> feBW_loose
+  | forall a b, phiBW_loose (sub a b) = F.sub (phiBW_tight a) (phiBW_tight b) }.
+Proof.
+  Set Ltac Profiling.
+  Time synthesize_sub ().
+  Show Ltac Profile.
+Time Defined.
+
+Print Assumptions sub.
diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/fesubDisplay.v b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/fesubDisplay.v
new file mode 100644
index 000000000..bf6592d62
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/fesubDisplay.v
@@ -0,0 +1,4 @@
+Require Import Crypto.Specific.solinas32_2e256m2e224p2e192p2e96m1_11limbs.fesub.
+Require Import Crypto.Specific.Framework.IntegrationTestDisplayCommon.
+
+Check display sub.
diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/freeze.v b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/freeze.v
new file mode 100644
index 000000000..fa14a3fa9
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/freeze.v
@@ -0,0 +1,14 @@
+Require Import Crypto.Arithmetic.PrimeFieldTheorems.
+Require Import Crypto.Specific.solinas32_2e256m2e224p2e192p2e96m1_11limbs.Synthesis.
+
+(* TODO : change this to field once field isomorphism happens *)
+Definition freeze :
+  { freeze : feBW_tight -> feBW_limbwidths
+  | forall a, phiBW_limbwidths (freeze a) = phiBW_tight a }.
+Proof.
+  Set Ltac Profiling.
+  Time synthesize_freeze ().
+  Show Ltac Profile.
+Time Defined.
+
+Print Assumptions freeze.
diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/freezeDisplay.v b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/freezeDisplay.v
new file mode 100644
index 000000000..c4dc356d3
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/freezeDisplay.v
@@ -0,0 +1,4 @@
+Require Import Crypto.Specific.solinas32_2e256m2e224p2e192p2e96m1_11limbs.freeze.
+Require Import Crypto.Specific.Framework.IntegrationTestDisplayCommon.
+
+Check display freeze.
diff --git a/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/py_interpreter.sh b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/py_interpreter.sh
new file mode 100755
index 000000000..6dac33925
--- /dev/null
+++ b/src/Specific/solinas32_2e256m2e224p2e192p2e96m1_11limbs/py_interpreter.sh
@@ -0,0 +1,4 @@
+#!/bin/sh
+set -eu
+
+/usr/bin/env python3 "$@" -Dq='2**256 - 2**224 + 2**192 + 2**96 - 1' -Dmodulus_bytes='23 + 3/11' -Da24='121665'