From 31d31d23fbb6c9b3b7f01bd270cf72328f754594 Mon Sep 17 00:00:00 2001 From: Jason Gross Date: Sun, 31 Mar 2019 14:35:38 -0400 Subject: Rebuild .c files It seems some commutativity has changed --- curve25519_32.c | 20 +- curve25519_64.c | 10 +- p224_32.c | 1034 +++++++++--------- p224_64.c | 376 +++---- p256_32.c | 1254 ++++++++++----------- p256_64.c | 344 +++--- p384_32.c | 3108 ++++++++++++++++++++++++++--------------------------- p384_64.c | 888 +++++++-------- p434_64.c | 1168 ++++++++++---------- p448_solinas_64.c | 16 +- p521_32.c | 34 +- p521_64.c | 18 +- secp256k1_32.c | 1540 +++++++++++++------------- secp256k1_64.c | 412 +++---- 14 files changed, 5111 insertions(+), 5111 deletions(-) diff --git a/curve25519_32.c b/curve25519_32.c index 4d4565689..7daf46a51 100644 --- a/curve25519_32.c +++ b/curve25519_32.c @@ -741,34 +741,34 @@ static void fiat_25519_to_bytes(uint8_t out1[32], const uint32_t arg1[10]) { fiat_25519_cmovznz_u32(&x21, x20, 0x0, UINT32_C(0xffffffff)); uint32_t x22; fiat_25519_uint1 x23; - fiat_25519_addcarryx_u26(&x22, &x23, 0x0, (x21 & UINT32_C(0x3ffffed)), x1); + fiat_25519_addcarryx_u26(&x22, &x23, 0x0, x1, (x21 & UINT32_C(0x3ffffed))); uint32_t x24; fiat_25519_uint1 x25; - fiat_25519_addcarryx_u25(&x24, &x25, x23, (x21 & UINT32_C(0x1ffffff)), x3); + fiat_25519_addcarryx_u25(&x24, &x25, x23, x3, (x21 & UINT32_C(0x1ffffff))); uint32_t x26; fiat_25519_uint1 x27; - fiat_25519_addcarryx_u26(&x26, &x27, x25, (x21 & UINT32_C(0x3ffffff)), x5); + fiat_25519_addcarryx_u26(&x26, &x27, x25, x5, (x21 & UINT32_C(0x3ffffff))); uint32_t x28; fiat_25519_uint1 x29; - fiat_25519_addcarryx_u25(&x28, &x29, x27, (x21 & UINT32_C(0x1ffffff)), x7); + fiat_25519_addcarryx_u25(&x28, &x29, x27, x7, (x21 & UINT32_C(0x1ffffff))); uint32_t x30; fiat_25519_uint1 x31; - fiat_25519_addcarryx_u26(&x30, &x31, x29, (x21 & UINT32_C(0x3ffffff)), x9); + fiat_25519_addcarryx_u26(&x30, &x31, x29, x9, (x21 & UINT32_C(0x3ffffff))); uint32_t x32; fiat_25519_uint1 x33; - fiat_25519_addcarryx_u25(&x32, &x33, x31, (x21 & UINT32_C(0x1ffffff)), x11); + fiat_25519_addcarryx_u25(&x32, &x33, x31, x11, (x21 & UINT32_C(0x1ffffff))); uint32_t x34; fiat_25519_uint1 x35; - fiat_25519_addcarryx_u26(&x34, &x35, x33, (x21 & UINT32_C(0x3ffffff)), x13); + fiat_25519_addcarryx_u26(&x34, &x35, x33, x13, (x21 & UINT32_C(0x3ffffff))); uint32_t x36; fiat_25519_uint1 x37; - fiat_25519_addcarryx_u25(&x36, &x37, x35, (x21 & UINT32_C(0x1ffffff)), x15); + fiat_25519_addcarryx_u25(&x36, &x37, x35, x15, (x21 & UINT32_C(0x1ffffff))); uint32_t x38; fiat_25519_uint1 x39; - fiat_25519_addcarryx_u26(&x38, &x39, x37, (x21 & UINT32_C(0x3ffffff)), x17); + fiat_25519_addcarryx_u26(&x38, &x39, x37, x17, (x21 & UINT32_C(0x3ffffff))); uint32_t x40; fiat_25519_uint1 x41; - fiat_25519_addcarryx_u25(&x40, &x41, x39, (x21 & UINT32_C(0x1ffffff)), x19); + fiat_25519_addcarryx_u25(&x40, &x41, x39, x19, (x21 & UINT32_C(0x1ffffff))); uint32_t x42 = (x40 << 6); uint32_t x43 = (x38 << 4); uint32_t x44 = (x36 << 3); diff --git a/curve25519_64.c b/curve25519_64.c index 5341181f6..37aae3b84 100644 --- a/curve25519_64.c +++ b/curve25519_64.c @@ -424,19 +424,19 @@ static void fiat_25519_to_bytes(uint8_t out1[32], const uint64_t arg1[5]) { fiat_25519_cmovznz_u64(&x11, x10, 0x0, UINT64_C(0xffffffffffffffff)); uint64_t x12; fiat_25519_uint1 x13; - fiat_25519_addcarryx_u51(&x12, &x13, 0x0, (x11 & UINT64_C(0x7ffffffffffed)), x1); + fiat_25519_addcarryx_u51(&x12, &x13, 0x0, x1, (x11 & UINT64_C(0x7ffffffffffed))); uint64_t x14; fiat_25519_uint1 x15; - fiat_25519_addcarryx_u51(&x14, &x15, x13, (x11 & UINT64_C(0x7ffffffffffff)), x3); + fiat_25519_addcarryx_u51(&x14, &x15, x13, x3, (x11 & UINT64_C(0x7ffffffffffff))); uint64_t x16; fiat_25519_uint1 x17; - fiat_25519_addcarryx_u51(&x16, &x17, x15, (x11 & UINT64_C(0x7ffffffffffff)), x5); + fiat_25519_addcarryx_u51(&x16, &x17, x15, x5, (x11 & UINT64_C(0x7ffffffffffff))); uint64_t x18; fiat_25519_uint1 x19; - fiat_25519_addcarryx_u51(&x18, &x19, x17, (x11 & UINT64_C(0x7ffffffffffff)), x7); + fiat_25519_addcarryx_u51(&x18, &x19, x17, x7, (x11 & UINT64_C(0x7ffffffffffff))); uint64_t x20; fiat_25519_uint1 x21; - fiat_25519_addcarryx_u51(&x20, &x21, x19, (x11 & UINT64_C(0x7ffffffffffff)), x9); + fiat_25519_addcarryx_u51(&x20, &x21, x19, x9, (x11 & UINT64_C(0x7ffffffffffff))); uint64_t x22 = (x20 << 4); uint64_t x23 = (x18 * (uint64_t)0x2); uint64_t x24 = (x16 << 6); diff --git a/p224_32.c b/p224_32.c index 1341276cb..0e0b6ad67 100644 --- a/p224_32.c +++ b/p224_32.c @@ -146,25 +146,25 @@ static void fiat_p224_mul(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_mulx_u32(&x20, &x21, x7, (arg2[0])); uint32_t x22; fiat_p224_uint1 x23; - fiat_p224_addcarryx_u32(&x22, &x23, 0x0, x18, x21); + fiat_p224_addcarryx_u32(&x22, &x23, 0x0, x21, x18); uint32_t x24; fiat_p224_uint1 x25; - fiat_p224_addcarryx_u32(&x24, &x25, x23, x16, x19); + fiat_p224_addcarryx_u32(&x24, &x25, x23, x19, x16); uint32_t x26; fiat_p224_uint1 x27; - fiat_p224_addcarryx_u32(&x26, &x27, x25, x14, x17); + fiat_p224_addcarryx_u32(&x26, &x27, x25, x17, x14); uint32_t x28; fiat_p224_uint1 x29; - fiat_p224_addcarryx_u32(&x28, &x29, x27, x12, x15); + fiat_p224_addcarryx_u32(&x28, &x29, x27, x15, x12); uint32_t x30; fiat_p224_uint1 x31; - fiat_p224_addcarryx_u32(&x30, &x31, x29, x10, x13); + fiat_p224_addcarryx_u32(&x30, &x31, x29, x13, x10); uint32_t x32; fiat_p224_uint1 x33; - fiat_p224_addcarryx_u32(&x32, &x33, x31, x8, x11); + fiat_p224_addcarryx_u32(&x32, &x33, x31, x11, x8); uint32_t x34; fiat_p224_uint1 x35; - fiat_p224_addcarryx_u32(&x34, &x35, x33, 0x0, x9); + fiat_p224_addcarryx_u32(&x34, &x35, x33, x9, 0x0); uint32_t x36; uint32_t x37; fiat_p224_mulx_u32(&x36, &x37, x20, UINT32_C(0xffffffff)); @@ -182,40 +182,40 @@ static void fiat_p224_mul(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_mulx_u32(&x44, &x45, x36, UINT32_C(0xffffffff)); uint32_t x46; fiat_p224_uint1 x47; - fiat_p224_addcarryx_u32(&x46, &x47, 0x0, x42, x45); + fiat_p224_addcarryx_u32(&x46, &x47, 0x0, x45, x42); uint32_t x48; fiat_p224_uint1 x49; - fiat_p224_addcarryx_u32(&x48, &x49, x47, x40, x43); + fiat_p224_addcarryx_u32(&x48, &x49, x47, x43, x40); uint32_t x50; fiat_p224_uint1 x51; - fiat_p224_addcarryx_u32(&x50, &x51, x49, x38, x41); + fiat_p224_addcarryx_u32(&x50, &x51, x49, x41, x38); uint32_t x52; fiat_p224_uint1 x53; - fiat_p224_addcarryx_u32(&x52, &x53, x51, 0x0, x39); + fiat_p224_addcarryx_u32(&x52, &x53, x51, x39, 0x0); uint32_t x54; fiat_p224_uint1 x55; - fiat_p224_addcarryx_u32(&x54, &x55, 0x0, x36, x20); + fiat_p224_addcarryx_u32(&x54, &x55, 0x0, x20, x36); uint32_t x56; fiat_p224_uint1 x57; - fiat_p224_addcarryx_u32(&x56, &x57, x55, 0x0, x22); + fiat_p224_addcarryx_u32(&x56, &x57, x55, x22, 0x0); uint32_t x58; fiat_p224_uint1 x59; - fiat_p224_addcarryx_u32(&x58, &x59, x57, 0x0, x24); + fiat_p224_addcarryx_u32(&x58, &x59, x57, x24, 0x0); uint32_t x60; fiat_p224_uint1 x61; - fiat_p224_addcarryx_u32(&x60, &x61, x59, x44, x26); + fiat_p224_addcarryx_u32(&x60, &x61, x59, x26, x44); uint32_t x62; fiat_p224_uint1 x63; - fiat_p224_addcarryx_u32(&x62, &x63, x61, x46, x28); + fiat_p224_addcarryx_u32(&x62, &x63, x61, x28, x46); uint32_t x64; fiat_p224_uint1 x65; - fiat_p224_addcarryx_u32(&x64, &x65, x63, x48, x30); + fiat_p224_addcarryx_u32(&x64, &x65, x63, x30, x48); uint32_t x66; fiat_p224_uint1 x67; - fiat_p224_addcarryx_u32(&x66, &x67, x65, x50, x32); + fiat_p224_addcarryx_u32(&x66, &x67, x65, x32, x50); uint32_t x68; fiat_p224_uint1 x69; - fiat_p224_addcarryx_u32(&x68, &x69, x67, x52, x34); + fiat_p224_addcarryx_u32(&x68, &x69, x67, x34, x52); uint32_t x70; fiat_p224_uint1 x71; fiat_p224_addcarryx_u32(&x70, &x71, x69, 0x0, 0x0); @@ -242,49 +242,49 @@ static void fiat_p224_mul(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_mulx_u32(&x84, &x85, x1, (arg2[0])); uint32_t x86; fiat_p224_uint1 x87; - fiat_p224_addcarryx_u32(&x86, &x87, 0x0, x82, x85); + fiat_p224_addcarryx_u32(&x86, &x87, 0x0, x85, x82); uint32_t x88; fiat_p224_uint1 x89; - fiat_p224_addcarryx_u32(&x88, &x89, x87, x80, x83); + fiat_p224_addcarryx_u32(&x88, &x89, x87, x83, x80); uint32_t x90; fiat_p224_uint1 x91; - fiat_p224_addcarryx_u32(&x90, &x91, x89, x78, x81); + fiat_p224_addcarryx_u32(&x90, &x91, x89, x81, x78); uint32_t x92; fiat_p224_uint1 x93; - fiat_p224_addcarryx_u32(&x92, &x93, x91, x76, x79); + fiat_p224_addcarryx_u32(&x92, &x93, x91, x79, x76); uint32_t x94; fiat_p224_uint1 x95; - fiat_p224_addcarryx_u32(&x94, &x95, x93, x74, x77); + fiat_p224_addcarryx_u32(&x94, &x95, x93, x77, x74); uint32_t x96; fiat_p224_uint1 x97; - fiat_p224_addcarryx_u32(&x96, &x97, x95, x72, x75); + fiat_p224_addcarryx_u32(&x96, &x97, x95, x75, x72); uint32_t x98; fiat_p224_uint1 x99; - fiat_p224_addcarryx_u32(&x98, &x99, x97, 0x0, x73); + fiat_p224_addcarryx_u32(&x98, &x99, x97, x73, 0x0); uint32_t x100; fiat_p224_uint1 x101; - fiat_p224_addcarryx_u32(&x100, &x101, 0x0, x84, x56); + fiat_p224_addcarryx_u32(&x100, &x101, 0x0, x56, x84); uint32_t x102; fiat_p224_uint1 x103; - fiat_p224_addcarryx_u32(&x102, &x103, x101, x86, x58); + fiat_p224_addcarryx_u32(&x102, &x103, x101, x58, x86); uint32_t x104; fiat_p224_uint1 x105; - fiat_p224_addcarryx_u32(&x104, &x105, x103, x88, x60); + fiat_p224_addcarryx_u32(&x104, &x105, x103, x60, x88); uint32_t x106; fiat_p224_uint1 x107; - fiat_p224_addcarryx_u32(&x106, &x107, x105, x90, x62); + fiat_p224_addcarryx_u32(&x106, &x107, x105, x62, x90); uint32_t x108; fiat_p224_uint1 x109; - fiat_p224_addcarryx_u32(&x108, &x109, x107, x92, x64); + fiat_p224_addcarryx_u32(&x108, &x109, x107, x64, x92); uint32_t x110; fiat_p224_uint1 x111; - fiat_p224_addcarryx_u32(&x110, &x111, x109, x94, x66); + fiat_p224_addcarryx_u32(&x110, &x111, x109, x66, x94); uint32_t x112; fiat_p224_uint1 x113; - fiat_p224_addcarryx_u32(&x112, &x113, x111, x96, x68); + fiat_p224_addcarryx_u32(&x112, &x113, x111, x68, x96); uint32_t x114; fiat_p224_uint1 x115; - fiat_p224_addcarryx_u32(&x114, &x115, x113, x98, (fiat_p224_uint1)x70); + fiat_p224_addcarryx_u32(&x114, &x115, x113, (fiat_p224_uint1)x70, x98); uint32_t x116; uint32_t x117; fiat_p224_mulx_u32(&x116, &x117, x100, UINT32_C(0xffffffff)); @@ -302,43 +302,43 @@ static void fiat_p224_mul(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_mulx_u32(&x124, &x125, x116, UINT32_C(0xffffffff)); uint32_t x126; fiat_p224_uint1 x127; - fiat_p224_addcarryx_u32(&x126, &x127, 0x0, x122, x125); + fiat_p224_addcarryx_u32(&x126, &x127, 0x0, x125, x122); uint32_t x128; fiat_p224_uint1 x129; - fiat_p224_addcarryx_u32(&x128, &x129, x127, x120, x123); + fiat_p224_addcarryx_u32(&x128, &x129, x127, x123, x120); uint32_t x130; fiat_p224_uint1 x131; - fiat_p224_addcarryx_u32(&x130, &x131, x129, x118, x121); + fiat_p224_addcarryx_u32(&x130, &x131, x129, x121, x118); uint32_t x132; fiat_p224_uint1 x133; - fiat_p224_addcarryx_u32(&x132, &x133, x131, 0x0, x119); + fiat_p224_addcarryx_u32(&x132, &x133, x131, x119, 0x0); uint32_t x134; fiat_p224_uint1 x135; - fiat_p224_addcarryx_u32(&x134, &x135, 0x0, x116, x100); + fiat_p224_addcarryx_u32(&x134, &x135, 0x0, x100, x116); uint32_t x136; fiat_p224_uint1 x137; - fiat_p224_addcarryx_u32(&x136, &x137, x135, 0x0, x102); + fiat_p224_addcarryx_u32(&x136, &x137, x135, x102, 0x0); uint32_t x138; fiat_p224_uint1 x139; - fiat_p224_addcarryx_u32(&x138, &x139, x137, 0x0, x104); + fiat_p224_addcarryx_u32(&x138, &x139, x137, x104, 0x0); uint32_t x140; fiat_p224_uint1 x141; - fiat_p224_addcarryx_u32(&x140, &x141, x139, x124, x106); + fiat_p224_addcarryx_u32(&x140, &x141, x139, x106, x124); uint32_t x142; fiat_p224_uint1 x143; - fiat_p224_addcarryx_u32(&x142, &x143, x141, x126, x108); + fiat_p224_addcarryx_u32(&x142, &x143, x141, x108, x126); uint32_t x144; fiat_p224_uint1 x145; - fiat_p224_addcarryx_u32(&x144, &x145, x143, x128, x110); + fiat_p224_addcarryx_u32(&x144, &x145, x143, x110, x128); uint32_t x146; fiat_p224_uint1 x147; - fiat_p224_addcarryx_u32(&x146, &x147, x145, x130, x112); + fiat_p224_addcarryx_u32(&x146, &x147, x145, x112, x130); uint32_t x148; fiat_p224_uint1 x149; - fiat_p224_addcarryx_u32(&x148, &x149, x147, x132, x114); + fiat_p224_addcarryx_u32(&x148, &x149, x147, x114, x132); uint32_t x150; fiat_p224_uint1 x151; - fiat_p224_addcarryx_u32(&x150, &x151, x149, 0x0, x115); + fiat_p224_addcarryx_u32(&x150, &x151, x149, x115, 0x0); uint32_t x152; uint32_t x153; fiat_p224_mulx_u32(&x152, &x153, x2, (arg2[6])); @@ -362,49 +362,49 @@ static void fiat_p224_mul(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_mulx_u32(&x164, &x165, x2, (arg2[0])); uint32_t x166; fiat_p224_uint1 x167; - fiat_p224_addcarryx_u32(&x166, &x167, 0x0, x162, x165); + fiat_p224_addcarryx_u32(&x166, &x167, 0x0, x165, x162); uint32_t x168; fiat_p224_uint1 x169; - fiat_p224_addcarryx_u32(&x168, &x169, x167, x160, x163); + fiat_p224_addcarryx_u32(&x168, &x169, x167, x163, x160); uint32_t x170; fiat_p224_uint1 x171; - fiat_p224_addcarryx_u32(&x170, &x171, x169, x158, x161); + fiat_p224_addcarryx_u32(&x170, &x171, x169, x161, x158); uint32_t x172; fiat_p224_uint1 x173; - fiat_p224_addcarryx_u32(&x172, &x173, x171, x156, x159); + fiat_p224_addcarryx_u32(&x172, &x173, x171, x159, x156); uint32_t x174; fiat_p224_uint1 x175; - fiat_p224_addcarryx_u32(&x174, &x175, x173, x154, x157); + fiat_p224_addcarryx_u32(&x174, &x175, x173, x157, x154); uint32_t x176; fiat_p224_uint1 x177; - fiat_p224_addcarryx_u32(&x176, &x177, x175, x152, x155); + fiat_p224_addcarryx_u32(&x176, &x177, x175, x155, x152); uint32_t x178; fiat_p224_uint1 x179; - fiat_p224_addcarryx_u32(&x178, &x179, x177, 0x0, x153); + fiat_p224_addcarryx_u32(&x178, &x179, x177, x153, 0x0); uint32_t x180; fiat_p224_uint1 x181; - fiat_p224_addcarryx_u32(&x180, &x181, 0x0, x164, x136); + fiat_p224_addcarryx_u32(&x180, &x181, 0x0, x136, x164); uint32_t x182; fiat_p224_uint1 x183; - fiat_p224_addcarryx_u32(&x182, &x183, x181, x166, x138); + fiat_p224_addcarryx_u32(&x182, &x183, x181, x138, x166); uint32_t x184; fiat_p224_uint1 x185; - fiat_p224_addcarryx_u32(&x184, &x185, x183, x168, x140); + fiat_p224_addcarryx_u32(&x184, &x185, x183, x140, x168); uint32_t x186; fiat_p224_uint1 x187; - fiat_p224_addcarryx_u32(&x186, &x187, x185, x170, x142); + fiat_p224_addcarryx_u32(&x186, &x187, x185, x142, x170); uint32_t x188; fiat_p224_uint1 x189; - fiat_p224_addcarryx_u32(&x188, &x189, x187, x172, x144); + fiat_p224_addcarryx_u32(&x188, &x189, x187, x144, x172); uint32_t x190; fiat_p224_uint1 x191; - fiat_p224_addcarryx_u32(&x190, &x191, x189, x174, x146); + fiat_p224_addcarryx_u32(&x190, &x191, x189, x146, x174); uint32_t x192; fiat_p224_uint1 x193; - fiat_p224_addcarryx_u32(&x192, &x193, x191, x176, x148); + fiat_p224_addcarryx_u32(&x192, &x193, x191, x148, x176); uint32_t x194; fiat_p224_uint1 x195; - fiat_p224_addcarryx_u32(&x194, &x195, x193, x178, x150); + fiat_p224_addcarryx_u32(&x194, &x195, x193, x150, x178); uint32_t x196; uint32_t x197; fiat_p224_mulx_u32(&x196, &x197, x180, UINT32_C(0xffffffff)); @@ -422,43 +422,43 @@ static void fiat_p224_mul(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_mulx_u32(&x204, &x205, x196, UINT32_C(0xffffffff)); uint32_t x206; fiat_p224_uint1 x207; - fiat_p224_addcarryx_u32(&x206, &x207, 0x0, x202, x205); + fiat_p224_addcarryx_u32(&x206, &x207, 0x0, x205, x202); uint32_t x208; fiat_p224_uint1 x209; - fiat_p224_addcarryx_u32(&x208, &x209, x207, x200, x203); + fiat_p224_addcarryx_u32(&x208, &x209, x207, x203, x200); uint32_t x210; fiat_p224_uint1 x211; - fiat_p224_addcarryx_u32(&x210, &x211, x209, x198, x201); + fiat_p224_addcarryx_u32(&x210, &x211, x209, x201, x198); uint32_t x212; fiat_p224_uint1 x213; - fiat_p224_addcarryx_u32(&x212, &x213, x211, 0x0, x199); + fiat_p224_addcarryx_u32(&x212, &x213, x211, x199, 0x0); uint32_t x214; fiat_p224_uint1 x215; - fiat_p224_addcarryx_u32(&x214, &x215, 0x0, x196, x180); + fiat_p224_addcarryx_u32(&x214, &x215, 0x0, x180, x196); uint32_t x216; fiat_p224_uint1 x217; - fiat_p224_addcarryx_u32(&x216, &x217, x215, 0x0, x182); + fiat_p224_addcarryx_u32(&x216, &x217, x215, x182, 0x0); uint32_t x218; fiat_p224_uint1 x219; - fiat_p224_addcarryx_u32(&x218, &x219, x217, 0x0, x184); + fiat_p224_addcarryx_u32(&x218, &x219, x217, x184, 0x0); uint32_t x220; fiat_p224_uint1 x221; - fiat_p224_addcarryx_u32(&x220, &x221, x219, x204, x186); + fiat_p224_addcarryx_u32(&x220, &x221, x219, x186, x204); uint32_t x222; fiat_p224_uint1 x223; - fiat_p224_addcarryx_u32(&x222, &x223, x221, x206, x188); + fiat_p224_addcarryx_u32(&x222, &x223, x221, x188, x206); uint32_t x224; fiat_p224_uint1 x225; - fiat_p224_addcarryx_u32(&x224, &x225, x223, x208, x190); + fiat_p224_addcarryx_u32(&x224, &x225, x223, x190, x208); uint32_t x226; fiat_p224_uint1 x227; - fiat_p224_addcarryx_u32(&x226, &x227, x225, x210, x192); + fiat_p224_addcarryx_u32(&x226, &x227, x225, x192, x210); uint32_t x228; fiat_p224_uint1 x229; - fiat_p224_addcarryx_u32(&x228, &x229, x227, x212, x194); + fiat_p224_addcarryx_u32(&x228, &x229, x227, x194, x212); uint32_t x230; fiat_p224_uint1 x231; - fiat_p224_addcarryx_u32(&x230, &x231, x229, 0x0, x195); + fiat_p224_addcarryx_u32(&x230, &x231, x229, x195, 0x0); uint32_t x232; uint32_t x233; fiat_p224_mulx_u32(&x232, &x233, x3, (arg2[6])); @@ -482,49 +482,49 @@ static void fiat_p224_mul(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_mulx_u32(&x244, &x245, x3, (arg2[0])); uint32_t x246; fiat_p224_uint1 x247; - fiat_p224_addcarryx_u32(&x246, &x247, 0x0, x242, x245); + fiat_p224_addcarryx_u32(&x246, &x247, 0x0, x245, x242); uint32_t x248; fiat_p224_uint1 x249; - fiat_p224_addcarryx_u32(&x248, &x249, x247, x240, x243); + fiat_p224_addcarryx_u32(&x248, &x249, x247, x243, x240); uint32_t x250; fiat_p224_uint1 x251; - fiat_p224_addcarryx_u32(&x250, &x251, x249, x238, x241); + fiat_p224_addcarryx_u32(&x250, &x251, x249, x241, x238); uint32_t x252; fiat_p224_uint1 x253; - fiat_p224_addcarryx_u32(&x252, &x253, x251, x236, x239); + fiat_p224_addcarryx_u32(&x252, &x253, x251, x239, x236); uint32_t x254; fiat_p224_uint1 x255; - fiat_p224_addcarryx_u32(&x254, &x255, x253, x234, x237); + fiat_p224_addcarryx_u32(&x254, &x255, x253, x237, x234); uint32_t x256; fiat_p224_uint1 x257; - fiat_p224_addcarryx_u32(&x256, &x257, x255, x232, x235); + fiat_p224_addcarryx_u32(&x256, &x257, x255, x235, x232); uint32_t x258; fiat_p224_uint1 x259; - fiat_p224_addcarryx_u32(&x258, &x259, x257, 0x0, x233); + fiat_p224_addcarryx_u32(&x258, &x259, x257, x233, 0x0); uint32_t x260; fiat_p224_uint1 x261; - fiat_p224_addcarryx_u32(&x260, &x261, 0x0, x244, x216); + fiat_p224_addcarryx_u32(&x260, &x261, 0x0, x216, x244); uint32_t x262; fiat_p224_uint1 x263; - fiat_p224_addcarryx_u32(&x262, &x263, x261, x246, x218); + fiat_p224_addcarryx_u32(&x262, &x263, x261, x218, x246); uint32_t x264; fiat_p224_uint1 x265; - fiat_p224_addcarryx_u32(&x264, &x265, x263, x248, x220); + fiat_p224_addcarryx_u32(&x264, &x265, x263, x220, x248); uint32_t x266; fiat_p224_uint1 x267; - fiat_p224_addcarryx_u32(&x266, &x267, x265, x250, x222); + fiat_p224_addcarryx_u32(&x266, &x267, x265, x222, x250); uint32_t x268; fiat_p224_uint1 x269; - fiat_p224_addcarryx_u32(&x268, &x269, x267, x252, x224); + fiat_p224_addcarryx_u32(&x268, &x269, x267, x224, x252); uint32_t x270; fiat_p224_uint1 x271; - fiat_p224_addcarryx_u32(&x270, &x271, x269, x254, x226); + fiat_p224_addcarryx_u32(&x270, &x271, x269, x226, x254); uint32_t x272; fiat_p224_uint1 x273; - fiat_p224_addcarryx_u32(&x272, &x273, x271, x256, x228); + fiat_p224_addcarryx_u32(&x272, &x273, x271, x228, x256); uint32_t x274; fiat_p224_uint1 x275; - fiat_p224_addcarryx_u32(&x274, &x275, x273, x258, x230); + fiat_p224_addcarryx_u32(&x274, &x275, x273, x230, x258); uint32_t x276; uint32_t x277; fiat_p224_mulx_u32(&x276, &x277, x260, UINT32_C(0xffffffff)); @@ -542,43 +542,43 @@ static void fiat_p224_mul(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_mulx_u32(&x284, &x285, x276, UINT32_C(0xffffffff)); uint32_t x286; fiat_p224_uint1 x287; - fiat_p224_addcarryx_u32(&x286, &x287, 0x0, x282, x285); + fiat_p224_addcarryx_u32(&x286, &x287, 0x0, x285, x282); uint32_t x288; fiat_p224_uint1 x289; - fiat_p224_addcarryx_u32(&x288, &x289, x287, x280, x283); + fiat_p224_addcarryx_u32(&x288, &x289, x287, x283, x280); uint32_t x290; fiat_p224_uint1 x291; - fiat_p224_addcarryx_u32(&x290, &x291, x289, x278, x281); + fiat_p224_addcarryx_u32(&x290, &x291, x289, x281, x278); uint32_t x292; fiat_p224_uint1 x293; - fiat_p224_addcarryx_u32(&x292, &x293, x291, 0x0, x279); + fiat_p224_addcarryx_u32(&x292, &x293, x291, x279, 0x0); uint32_t x294; fiat_p224_uint1 x295; - fiat_p224_addcarryx_u32(&x294, &x295, 0x0, x276, x260); + fiat_p224_addcarryx_u32(&x294, &x295, 0x0, x260, x276); uint32_t x296; fiat_p224_uint1 x297; - fiat_p224_addcarryx_u32(&x296, &x297, x295, 0x0, x262); + fiat_p224_addcarryx_u32(&x296, &x297, x295, x262, 0x0); uint32_t x298; fiat_p224_uint1 x299; - fiat_p224_addcarryx_u32(&x298, &x299, x297, 0x0, x264); + fiat_p224_addcarryx_u32(&x298, &x299, x297, x264, 0x0); uint32_t x300; fiat_p224_uint1 x301; - fiat_p224_addcarryx_u32(&x300, &x301, x299, x284, x266); + fiat_p224_addcarryx_u32(&x300, &x301, x299, x266, x284); uint32_t x302; fiat_p224_uint1 x303; - fiat_p224_addcarryx_u32(&x302, &x303, x301, x286, x268); + fiat_p224_addcarryx_u32(&x302, &x303, x301, x268, x286); uint32_t x304; fiat_p224_uint1 x305; - fiat_p224_addcarryx_u32(&x304, &x305, x303, x288, x270); + fiat_p224_addcarryx_u32(&x304, &x305, x303, x270, x288); uint32_t x306; fiat_p224_uint1 x307; - fiat_p224_addcarryx_u32(&x306, &x307, x305, x290, x272); + fiat_p224_addcarryx_u32(&x306, &x307, x305, x272, x290); uint32_t x308; fiat_p224_uint1 x309; - fiat_p224_addcarryx_u32(&x308, &x309, x307, x292, x274); + fiat_p224_addcarryx_u32(&x308, &x309, x307, x274, x292); uint32_t x310; fiat_p224_uint1 x311; - fiat_p224_addcarryx_u32(&x310, &x311, x309, 0x0, x275); + fiat_p224_addcarryx_u32(&x310, &x311, x309, x275, 0x0); uint32_t x312; uint32_t x313; fiat_p224_mulx_u32(&x312, &x313, x4, (arg2[6])); @@ -602,49 +602,49 @@ static void fiat_p224_mul(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_mulx_u32(&x324, &x325, x4, (arg2[0])); uint32_t x326; fiat_p224_uint1 x327; - fiat_p224_addcarryx_u32(&x326, &x327, 0x0, x322, x325); + fiat_p224_addcarryx_u32(&x326, &x327, 0x0, x325, x322); uint32_t x328; fiat_p224_uint1 x329; - fiat_p224_addcarryx_u32(&x328, &x329, x327, x320, x323); + fiat_p224_addcarryx_u32(&x328, &x329, x327, x323, x320); uint32_t x330; fiat_p224_uint1 x331; - fiat_p224_addcarryx_u32(&x330, &x331, x329, x318, x321); + fiat_p224_addcarryx_u32(&x330, &x331, x329, x321, x318); uint32_t x332; fiat_p224_uint1 x333; - fiat_p224_addcarryx_u32(&x332, &x333, x331, x316, x319); + fiat_p224_addcarryx_u32(&x332, &x333, x331, x319, x316); uint32_t x334; fiat_p224_uint1 x335; - fiat_p224_addcarryx_u32(&x334, &x335, x333, x314, x317); + fiat_p224_addcarryx_u32(&x334, &x335, x333, x317, x314); uint32_t x336; fiat_p224_uint1 x337; - fiat_p224_addcarryx_u32(&x336, &x337, x335, x312, x315); + fiat_p224_addcarryx_u32(&x336, &x337, x335, x315, x312); uint32_t x338; fiat_p224_uint1 x339; - fiat_p224_addcarryx_u32(&x338, &x339, x337, 0x0, x313); + fiat_p224_addcarryx_u32(&x338, &x339, x337, x313, 0x0); uint32_t x340; fiat_p224_uint1 x341; - fiat_p224_addcarryx_u32(&x340, &x341, 0x0, x324, x296); + fiat_p224_addcarryx_u32(&x340, &x341, 0x0, x296, x324); uint32_t x342; fiat_p224_uint1 x343; - fiat_p224_addcarryx_u32(&x342, &x343, x341, x326, x298); + fiat_p224_addcarryx_u32(&x342, &x343, x341, x298, x326); uint32_t x344; fiat_p224_uint1 x345; - fiat_p224_addcarryx_u32(&x344, &x345, x343, x328, x300); + fiat_p224_addcarryx_u32(&x344, &x345, x343, x300, x328); uint32_t x346; fiat_p224_uint1 x347; - fiat_p224_addcarryx_u32(&x346, &x347, x345, x330, x302); + fiat_p224_addcarryx_u32(&x346, &x347, x345, x302, x330); uint32_t x348; fiat_p224_uint1 x349; - fiat_p224_addcarryx_u32(&x348, &x349, x347, x332, x304); + fiat_p224_addcarryx_u32(&x348, &x349, x347, x304, x332); uint32_t x350; fiat_p224_uint1 x351; - fiat_p224_addcarryx_u32(&x350, &x351, x349, x334, x306); + fiat_p224_addcarryx_u32(&x350, &x351, x349, x306, x334); uint32_t x352; fiat_p224_uint1 x353; - fiat_p224_addcarryx_u32(&x352, &x353, x351, x336, x308); + fiat_p224_addcarryx_u32(&x352, &x353, x351, x308, x336); uint32_t x354; fiat_p224_uint1 x355; - fiat_p224_addcarryx_u32(&x354, &x355, x353, x338, x310); + fiat_p224_addcarryx_u32(&x354, &x355, x353, x310, x338); uint32_t x356; uint32_t x357; fiat_p224_mulx_u32(&x356, &x357, x340, UINT32_C(0xffffffff)); @@ -662,43 +662,43 @@ static void fiat_p224_mul(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_mulx_u32(&x364, &x365, x356, UINT32_C(0xffffffff)); uint32_t x366; fiat_p224_uint1 x367; - fiat_p224_addcarryx_u32(&x366, &x367, 0x0, x362, x365); + fiat_p224_addcarryx_u32(&x366, &x367, 0x0, x365, x362); uint32_t x368; fiat_p224_uint1 x369; - fiat_p224_addcarryx_u32(&x368, &x369, x367, x360, x363); + fiat_p224_addcarryx_u32(&x368, &x369, x367, x363, x360); uint32_t x370; fiat_p224_uint1 x371; - fiat_p224_addcarryx_u32(&x370, &x371, x369, x358, x361); + fiat_p224_addcarryx_u32(&x370, &x371, x369, x361, x358); uint32_t x372; fiat_p224_uint1 x373; - fiat_p224_addcarryx_u32(&x372, &x373, x371, 0x0, x359); + fiat_p224_addcarryx_u32(&x372, &x373, x371, x359, 0x0); uint32_t x374; fiat_p224_uint1 x375; - fiat_p224_addcarryx_u32(&x374, &x375, 0x0, x356, x340); + fiat_p224_addcarryx_u32(&x374, &x375, 0x0, x340, x356); uint32_t x376; fiat_p224_uint1 x377; - fiat_p224_addcarryx_u32(&x376, &x377, x375, 0x0, x342); + fiat_p224_addcarryx_u32(&x376, &x377, x375, x342, 0x0); uint32_t x378; fiat_p224_uint1 x379; - fiat_p224_addcarryx_u32(&x378, &x379, x377, 0x0, x344); + fiat_p224_addcarryx_u32(&x378, &x379, x377, x344, 0x0); uint32_t x380; fiat_p224_uint1 x381; - fiat_p224_addcarryx_u32(&x380, &x381, x379, x364, x346); + fiat_p224_addcarryx_u32(&x380, &x381, x379, x346, x364); uint32_t x382; fiat_p224_uint1 x383; - fiat_p224_addcarryx_u32(&x382, &x383, x381, x366, x348); + fiat_p224_addcarryx_u32(&x382, &x383, x381, x348, x366); uint32_t x384; fiat_p224_uint1 x385; - fiat_p224_addcarryx_u32(&x384, &x385, x383, x368, x350); + fiat_p224_addcarryx_u32(&x384, &x385, x383, x350, x368); uint32_t x386; fiat_p224_uint1 x387; - fiat_p224_addcarryx_u32(&x386, &x387, x385, x370, x352); + fiat_p224_addcarryx_u32(&x386, &x387, x385, x352, x370); uint32_t x388; fiat_p224_uint1 x389; - fiat_p224_addcarryx_u32(&x388, &x389, x387, x372, x354); + fiat_p224_addcarryx_u32(&x388, &x389, x387, x354, x372); uint32_t x390; fiat_p224_uint1 x391; - fiat_p224_addcarryx_u32(&x390, &x391, x389, 0x0, x355); + fiat_p224_addcarryx_u32(&x390, &x391, x389, x355, 0x0); uint32_t x392; uint32_t x393; fiat_p224_mulx_u32(&x392, &x393, x5, (arg2[6])); @@ -722,49 +722,49 @@ static void fiat_p224_mul(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_mulx_u32(&x404, &x405, x5, (arg2[0])); uint32_t x406; fiat_p224_uint1 x407; - fiat_p224_addcarryx_u32(&x406, &x407, 0x0, x402, x405); + fiat_p224_addcarryx_u32(&x406, &x407, 0x0, x405, x402); uint32_t x408; fiat_p224_uint1 x409; - fiat_p224_addcarryx_u32(&x408, &x409, x407, x400, x403); + fiat_p224_addcarryx_u32(&x408, &x409, x407, x403, x400); uint32_t x410; fiat_p224_uint1 x411; - fiat_p224_addcarryx_u32(&x410, &x411, x409, x398, x401); + fiat_p224_addcarryx_u32(&x410, &x411, x409, x401, x398); uint32_t x412; fiat_p224_uint1 x413; - fiat_p224_addcarryx_u32(&x412, &x413, x411, x396, x399); + fiat_p224_addcarryx_u32(&x412, &x413, x411, x399, x396); uint32_t x414; fiat_p224_uint1 x415; - fiat_p224_addcarryx_u32(&x414, &x415, x413, x394, x397); + fiat_p224_addcarryx_u32(&x414, &x415, x413, x397, x394); uint32_t x416; fiat_p224_uint1 x417; - fiat_p224_addcarryx_u32(&x416, &x417, x415, x392, x395); + fiat_p224_addcarryx_u32(&x416, &x417, x415, x395, x392); uint32_t x418; fiat_p224_uint1 x419; - fiat_p224_addcarryx_u32(&x418, &x419, x417, 0x0, x393); + fiat_p224_addcarryx_u32(&x418, &x419, x417, x393, 0x0); uint32_t x420; fiat_p224_uint1 x421; - fiat_p224_addcarryx_u32(&x420, &x421, 0x0, x404, x376); + fiat_p224_addcarryx_u32(&x420, &x421, 0x0, x376, x404); uint32_t x422; fiat_p224_uint1 x423; - fiat_p224_addcarryx_u32(&x422, &x423, x421, x406, x378); + fiat_p224_addcarryx_u32(&x422, &x423, x421, x378, x406); uint32_t x424; fiat_p224_uint1 x425; - fiat_p224_addcarryx_u32(&x424, &x425, x423, x408, x380); + fiat_p224_addcarryx_u32(&x424, &x425, x423, x380, x408); uint32_t x426; fiat_p224_uint1 x427; - fiat_p224_addcarryx_u32(&x426, &x427, x425, x410, x382); + fiat_p224_addcarryx_u32(&x426, &x427, x425, x382, x410); uint32_t x428; fiat_p224_uint1 x429; - fiat_p224_addcarryx_u32(&x428, &x429, x427, x412, x384); + fiat_p224_addcarryx_u32(&x428, &x429, x427, x384, x412); uint32_t x430; fiat_p224_uint1 x431; - fiat_p224_addcarryx_u32(&x430, &x431, x429, x414, x386); + fiat_p224_addcarryx_u32(&x430, &x431, x429, x386, x414); uint32_t x432; fiat_p224_uint1 x433; - fiat_p224_addcarryx_u32(&x432, &x433, x431, x416, x388); + fiat_p224_addcarryx_u32(&x432, &x433, x431, x388, x416); uint32_t x434; fiat_p224_uint1 x435; - fiat_p224_addcarryx_u32(&x434, &x435, x433, x418, x390); + fiat_p224_addcarryx_u32(&x434, &x435, x433, x390, x418); uint32_t x436; uint32_t x437; fiat_p224_mulx_u32(&x436, &x437, x420, UINT32_C(0xffffffff)); @@ -782,43 +782,43 @@ static void fiat_p224_mul(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_mulx_u32(&x444, &x445, x436, UINT32_C(0xffffffff)); uint32_t x446; fiat_p224_uint1 x447; - fiat_p224_addcarryx_u32(&x446, &x447, 0x0, x442, x445); + fiat_p224_addcarryx_u32(&x446, &x447, 0x0, x445, x442); uint32_t x448; fiat_p224_uint1 x449; - fiat_p224_addcarryx_u32(&x448, &x449, x447, x440, x443); + fiat_p224_addcarryx_u32(&x448, &x449, x447, x443, x440); uint32_t x450; fiat_p224_uint1 x451; - fiat_p224_addcarryx_u32(&x450, &x451, x449, x438, x441); + fiat_p224_addcarryx_u32(&x450, &x451, x449, x441, x438); uint32_t x452; fiat_p224_uint1 x453; - fiat_p224_addcarryx_u32(&x452, &x453, x451, 0x0, x439); + fiat_p224_addcarryx_u32(&x452, &x453, x451, x439, 0x0); uint32_t x454; fiat_p224_uint1 x455; - fiat_p224_addcarryx_u32(&x454, &x455, 0x0, x436, x420); + fiat_p224_addcarryx_u32(&x454, &x455, 0x0, x420, x436); uint32_t x456; fiat_p224_uint1 x457; - fiat_p224_addcarryx_u32(&x456, &x457, x455, 0x0, x422); + fiat_p224_addcarryx_u32(&x456, &x457, x455, x422, 0x0); uint32_t x458; fiat_p224_uint1 x459; - fiat_p224_addcarryx_u32(&x458, &x459, x457, 0x0, x424); + fiat_p224_addcarryx_u32(&x458, &x459, x457, x424, 0x0); uint32_t x460; fiat_p224_uint1 x461; - fiat_p224_addcarryx_u32(&x460, &x461, x459, x444, x426); + fiat_p224_addcarryx_u32(&x460, &x461, x459, x426, x444); uint32_t x462; fiat_p224_uint1 x463; - fiat_p224_addcarryx_u32(&x462, &x463, x461, x446, x428); + fiat_p224_addcarryx_u32(&x462, &x463, x461, x428, x446); uint32_t x464; fiat_p224_uint1 x465; - fiat_p224_addcarryx_u32(&x464, &x465, x463, x448, x430); + fiat_p224_addcarryx_u32(&x464, &x465, x463, x430, x448); uint32_t x466; fiat_p224_uint1 x467; - fiat_p224_addcarryx_u32(&x466, &x467, x465, x450, x432); + fiat_p224_addcarryx_u32(&x466, &x467, x465, x432, x450); uint32_t x468; fiat_p224_uint1 x469; - fiat_p224_addcarryx_u32(&x468, &x469, x467, x452, x434); + fiat_p224_addcarryx_u32(&x468, &x469, x467, x434, x452); uint32_t x470; fiat_p224_uint1 x471; - fiat_p224_addcarryx_u32(&x470, &x471, x469, 0x0, x435); + fiat_p224_addcarryx_u32(&x470, &x471, x469, x435, 0x0); uint32_t x472; uint32_t x473; fiat_p224_mulx_u32(&x472, &x473, x6, (arg2[6])); @@ -842,49 +842,49 @@ static void fiat_p224_mul(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_mulx_u32(&x484, &x485, x6, (arg2[0])); uint32_t x486; fiat_p224_uint1 x487; - fiat_p224_addcarryx_u32(&x486, &x487, 0x0, x482, x485); + fiat_p224_addcarryx_u32(&x486, &x487, 0x0, x485, x482); uint32_t x488; fiat_p224_uint1 x489; - fiat_p224_addcarryx_u32(&x488, &x489, x487, x480, x483); + fiat_p224_addcarryx_u32(&x488, &x489, x487, x483, x480); uint32_t x490; fiat_p224_uint1 x491; - fiat_p224_addcarryx_u32(&x490, &x491, x489, x478, x481); + fiat_p224_addcarryx_u32(&x490, &x491, x489, x481, x478); uint32_t x492; fiat_p224_uint1 x493; - fiat_p224_addcarryx_u32(&x492, &x493, x491, x476, x479); + fiat_p224_addcarryx_u32(&x492, &x493, x491, x479, x476); uint32_t x494; fiat_p224_uint1 x495; - fiat_p224_addcarryx_u32(&x494, &x495, x493, x474, x477); + fiat_p224_addcarryx_u32(&x494, &x495, x493, x477, x474); uint32_t x496; fiat_p224_uint1 x497; - fiat_p224_addcarryx_u32(&x496, &x497, x495, x472, x475); + fiat_p224_addcarryx_u32(&x496, &x497, x495, x475, x472); uint32_t x498; fiat_p224_uint1 x499; - fiat_p224_addcarryx_u32(&x498, &x499, x497, 0x0, x473); + fiat_p224_addcarryx_u32(&x498, &x499, x497, x473, 0x0); uint32_t x500; fiat_p224_uint1 x501; - fiat_p224_addcarryx_u32(&x500, &x501, 0x0, x484, x456); + fiat_p224_addcarryx_u32(&x500, &x501, 0x0, x456, x484); uint32_t x502; fiat_p224_uint1 x503; - fiat_p224_addcarryx_u32(&x502, &x503, x501, x486, x458); + fiat_p224_addcarryx_u32(&x502, &x503, x501, x458, x486); uint32_t x504; fiat_p224_uint1 x505; - fiat_p224_addcarryx_u32(&x504, &x505, x503, x488, x460); + fiat_p224_addcarryx_u32(&x504, &x505, x503, x460, x488); uint32_t x506; fiat_p224_uint1 x507; - fiat_p224_addcarryx_u32(&x506, &x507, x505, x490, x462); + fiat_p224_addcarryx_u32(&x506, &x507, x505, x462, x490); uint32_t x508; fiat_p224_uint1 x509; - fiat_p224_addcarryx_u32(&x508, &x509, x507, x492, x464); + fiat_p224_addcarryx_u32(&x508, &x509, x507, x464, x492); uint32_t x510; fiat_p224_uint1 x511; - fiat_p224_addcarryx_u32(&x510, &x511, x509, x494, x466); + fiat_p224_addcarryx_u32(&x510, &x511, x509, x466, x494); uint32_t x512; fiat_p224_uint1 x513; - fiat_p224_addcarryx_u32(&x512, &x513, x511, x496, x468); + fiat_p224_addcarryx_u32(&x512, &x513, x511, x468, x496); uint32_t x514; fiat_p224_uint1 x515; - fiat_p224_addcarryx_u32(&x514, &x515, x513, x498, x470); + fiat_p224_addcarryx_u32(&x514, &x515, x513, x470, x498); uint32_t x516; uint32_t x517; fiat_p224_mulx_u32(&x516, &x517, x500, UINT32_C(0xffffffff)); @@ -902,43 +902,43 @@ static void fiat_p224_mul(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_mulx_u32(&x524, &x525, x516, UINT32_C(0xffffffff)); uint32_t x526; fiat_p224_uint1 x527; - fiat_p224_addcarryx_u32(&x526, &x527, 0x0, x522, x525); + fiat_p224_addcarryx_u32(&x526, &x527, 0x0, x525, x522); uint32_t x528; fiat_p224_uint1 x529; - fiat_p224_addcarryx_u32(&x528, &x529, x527, x520, x523); + fiat_p224_addcarryx_u32(&x528, &x529, x527, x523, x520); uint32_t x530; fiat_p224_uint1 x531; - fiat_p224_addcarryx_u32(&x530, &x531, x529, x518, x521); + fiat_p224_addcarryx_u32(&x530, &x531, x529, x521, x518); uint32_t x532; fiat_p224_uint1 x533; - fiat_p224_addcarryx_u32(&x532, &x533, x531, 0x0, x519); + fiat_p224_addcarryx_u32(&x532, &x533, x531, x519, 0x0); uint32_t x534; fiat_p224_uint1 x535; - fiat_p224_addcarryx_u32(&x534, &x535, 0x0, x516, x500); + fiat_p224_addcarryx_u32(&x534, &x535, 0x0, x500, x516); uint32_t x536; fiat_p224_uint1 x537; - fiat_p224_addcarryx_u32(&x536, &x537, x535, 0x0, x502); + fiat_p224_addcarryx_u32(&x536, &x537, x535, x502, 0x0); uint32_t x538; fiat_p224_uint1 x539; - fiat_p224_addcarryx_u32(&x538, &x539, x537, 0x0, x504); + fiat_p224_addcarryx_u32(&x538, &x539, x537, x504, 0x0); uint32_t x540; fiat_p224_uint1 x541; - fiat_p224_addcarryx_u32(&x540, &x541, x539, x524, x506); + fiat_p224_addcarryx_u32(&x540, &x541, x539, x506, x524); uint32_t x542; fiat_p224_uint1 x543; - fiat_p224_addcarryx_u32(&x542, &x543, x541, x526, x508); + fiat_p224_addcarryx_u32(&x542, &x543, x541, x508, x526); uint32_t x544; fiat_p224_uint1 x545; - fiat_p224_addcarryx_u32(&x544, &x545, x543, x528, x510); + fiat_p224_addcarryx_u32(&x544, &x545, x543, x510, x528); uint32_t x546; fiat_p224_uint1 x547; - fiat_p224_addcarryx_u32(&x546, &x547, x545, x530, x512); + fiat_p224_addcarryx_u32(&x546, &x547, x545, x512, x530); uint32_t x548; fiat_p224_uint1 x549; - fiat_p224_addcarryx_u32(&x548, &x549, x547, x532, x514); + fiat_p224_addcarryx_u32(&x548, &x549, x547, x514, x532); uint32_t x550; fiat_p224_uint1 x551; - fiat_p224_addcarryx_u32(&x550, &x551, x549, 0x0, x515); + fiat_p224_addcarryx_u32(&x550, &x551, x549, x515, 0x0); uint32_t x552; fiat_p224_uint1 x553; fiat_p224_subborrowx_u32(&x552, &x553, 0x0, x536, 0x1); @@ -1030,25 +1030,25 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_mulx_u32(&x20, &x21, x7, (arg1[0])); uint32_t x22; fiat_p224_uint1 x23; - fiat_p224_addcarryx_u32(&x22, &x23, 0x0, x18, x21); + fiat_p224_addcarryx_u32(&x22, &x23, 0x0, x21, x18); uint32_t x24; fiat_p224_uint1 x25; - fiat_p224_addcarryx_u32(&x24, &x25, x23, x16, x19); + fiat_p224_addcarryx_u32(&x24, &x25, x23, x19, x16); uint32_t x26; fiat_p224_uint1 x27; - fiat_p224_addcarryx_u32(&x26, &x27, x25, x14, x17); + fiat_p224_addcarryx_u32(&x26, &x27, x25, x17, x14); uint32_t x28; fiat_p224_uint1 x29; - fiat_p224_addcarryx_u32(&x28, &x29, x27, x12, x15); + fiat_p224_addcarryx_u32(&x28, &x29, x27, x15, x12); uint32_t x30; fiat_p224_uint1 x31; - fiat_p224_addcarryx_u32(&x30, &x31, x29, x10, x13); + fiat_p224_addcarryx_u32(&x30, &x31, x29, x13, x10); uint32_t x32; fiat_p224_uint1 x33; - fiat_p224_addcarryx_u32(&x32, &x33, x31, x8, x11); + fiat_p224_addcarryx_u32(&x32, &x33, x31, x11, x8); uint32_t x34; fiat_p224_uint1 x35; - fiat_p224_addcarryx_u32(&x34, &x35, x33, 0x0, x9); + fiat_p224_addcarryx_u32(&x34, &x35, x33, x9, 0x0); uint32_t x36; uint32_t x37; fiat_p224_mulx_u32(&x36, &x37, x20, UINT32_C(0xffffffff)); @@ -1066,40 +1066,40 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_mulx_u32(&x44, &x45, x36, UINT32_C(0xffffffff)); uint32_t x46; fiat_p224_uint1 x47; - fiat_p224_addcarryx_u32(&x46, &x47, 0x0, x42, x45); + fiat_p224_addcarryx_u32(&x46, &x47, 0x0, x45, x42); uint32_t x48; fiat_p224_uint1 x49; - fiat_p224_addcarryx_u32(&x48, &x49, x47, x40, x43); + fiat_p224_addcarryx_u32(&x48, &x49, x47, x43, x40); uint32_t x50; fiat_p224_uint1 x51; - fiat_p224_addcarryx_u32(&x50, &x51, x49, x38, x41); + fiat_p224_addcarryx_u32(&x50, &x51, x49, x41, x38); uint32_t x52; fiat_p224_uint1 x53; - fiat_p224_addcarryx_u32(&x52, &x53, x51, 0x0, x39); + fiat_p224_addcarryx_u32(&x52, &x53, x51, x39, 0x0); uint32_t x54; fiat_p224_uint1 x55; - fiat_p224_addcarryx_u32(&x54, &x55, 0x0, x36, x20); + fiat_p224_addcarryx_u32(&x54, &x55, 0x0, x20, x36); uint32_t x56; fiat_p224_uint1 x57; - fiat_p224_addcarryx_u32(&x56, &x57, x55, 0x0, x22); + fiat_p224_addcarryx_u32(&x56, &x57, x55, x22, 0x0); uint32_t x58; fiat_p224_uint1 x59; - fiat_p224_addcarryx_u32(&x58, &x59, x57, 0x0, x24); + fiat_p224_addcarryx_u32(&x58, &x59, x57, x24, 0x0); uint32_t x60; fiat_p224_uint1 x61; - fiat_p224_addcarryx_u32(&x60, &x61, x59, x44, x26); + fiat_p224_addcarryx_u32(&x60, &x61, x59, x26, x44); uint32_t x62; fiat_p224_uint1 x63; - fiat_p224_addcarryx_u32(&x62, &x63, x61, x46, x28); + fiat_p224_addcarryx_u32(&x62, &x63, x61, x28, x46); uint32_t x64; fiat_p224_uint1 x65; - fiat_p224_addcarryx_u32(&x64, &x65, x63, x48, x30); + fiat_p224_addcarryx_u32(&x64, &x65, x63, x30, x48); uint32_t x66; fiat_p224_uint1 x67; - fiat_p224_addcarryx_u32(&x66, &x67, x65, x50, x32); + fiat_p224_addcarryx_u32(&x66, &x67, x65, x32, x50); uint32_t x68; fiat_p224_uint1 x69; - fiat_p224_addcarryx_u32(&x68, &x69, x67, x52, x34); + fiat_p224_addcarryx_u32(&x68, &x69, x67, x34, x52); uint32_t x70; fiat_p224_uint1 x71; fiat_p224_addcarryx_u32(&x70, &x71, x69, 0x0, 0x0); @@ -1126,49 +1126,49 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_mulx_u32(&x84, &x85, x1, (arg1[0])); uint32_t x86; fiat_p224_uint1 x87; - fiat_p224_addcarryx_u32(&x86, &x87, 0x0, x82, x85); + fiat_p224_addcarryx_u32(&x86, &x87, 0x0, x85, x82); uint32_t x88; fiat_p224_uint1 x89; - fiat_p224_addcarryx_u32(&x88, &x89, x87, x80, x83); + fiat_p224_addcarryx_u32(&x88, &x89, x87, x83, x80); uint32_t x90; fiat_p224_uint1 x91; - fiat_p224_addcarryx_u32(&x90, &x91, x89, x78, x81); + fiat_p224_addcarryx_u32(&x90, &x91, x89, x81, x78); uint32_t x92; fiat_p224_uint1 x93; - fiat_p224_addcarryx_u32(&x92, &x93, x91, x76, x79); + fiat_p224_addcarryx_u32(&x92, &x93, x91, x79, x76); uint32_t x94; fiat_p224_uint1 x95; - fiat_p224_addcarryx_u32(&x94, &x95, x93, x74, x77); + fiat_p224_addcarryx_u32(&x94, &x95, x93, x77, x74); uint32_t x96; fiat_p224_uint1 x97; - fiat_p224_addcarryx_u32(&x96, &x97, x95, x72, x75); + fiat_p224_addcarryx_u32(&x96, &x97, x95, x75, x72); uint32_t x98; fiat_p224_uint1 x99; - fiat_p224_addcarryx_u32(&x98, &x99, x97, 0x0, x73); + fiat_p224_addcarryx_u32(&x98, &x99, x97, x73, 0x0); uint32_t x100; fiat_p224_uint1 x101; - fiat_p224_addcarryx_u32(&x100, &x101, 0x0, x84, x56); + fiat_p224_addcarryx_u32(&x100, &x101, 0x0, x56, x84); uint32_t x102; fiat_p224_uint1 x103; - fiat_p224_addcarryx_u32(&x102, &x103, x101, x86, x58); + fiat_p224_addcarryx_u32(&x102, &x103, x101, x58, x86); uint32_t x104; fiat_p224_uint1 x105; - fiat_p224_addcarryx_u32(&x104, &x105, x103, x88, x60); + fiat_p224_addcarryx_u32(&x104, &x105, x103, x60, x88); uint32_t x106; fiat_p224_uint1 x107; - fiat_p224_addcarryx_u32(&x106, &x107, x105, x90, x62); + fiat_p224_addcarryx_u32(&x106, &x107, x105, x62, x90); uint32_t x108; fiat_p224_uint1 x109; - fiat_p224_addcarryx_u32(&x108, &x109, x107, x92, x64); + fiat_p224_addcarryx_u32(&x108, &x109, x107, x64, x92); uint32_t x110; fiat_p224_uint1 x111; - fiat_p224_addcarryx_u32(&x110, &x111, x109, x94, x66); + fiat_p224_addcarryx_u32(&x110, &x111, x109, x66, x94); uint32_t x112; fiat_p224_uint1 x113; - fiat_p224_addcarryx_u32(&x112, &x113, x111, x96, x68); + fiat_p224_addcarryx_u32(&x112, &x113, x111, x68, x96); uint32_t x114; fiat_p224_uint1 x115; - fiat_p224_addcarryx_u32(&x114, &x115, x113, x98, (fiat_p224_uint1)x70); + fiat_p224_addcarryx_u32(&x114, &x115, x113, (fiat_p224_uint1)x70, x98); uint32_t x116; uint32_t x117; fiat_p224_mulx_u32(&x116, &x117, x100, UINT32_C(0xffffffff)); @@ -1186,43 +1186,43 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_mulx_u32(&x124, &x125, x116, UINT32_C(0xffffffff)); uint32_t x126; fiat_p224_uint1 x127; - fiat_p224_addcarryx_u32(&x126, &x127, 0x0, x122, x125); + fiat_p224_addcarryx_u32(&x126, &x127, 0x0, x125, x122); uint32_t x128; fiat_p224_uint1 x129; - fiat_p224_addcarryx_u32(&x128, &x129, x127, x120, x123); + fiat_p224_addcarryx_u32(&x128, &x129, x127, x123, x120); uint32_t x130; fiat_p224_uint1 x131; - fiat_p224_addcarryx_u32(&x130, &x131, x129, x118, x121); + fiat_p224_addcarryx_u32(&x130, &x131, x129, x121, x118); uint32_t x132; fiat_p224_uint1 x133; - fiat_p224_addcarryx_u32(&x132, &x133, x131, 0x0, x119); + fiat_p224_addcarryx_u32(&x132, &x133, x131, x119, 0x0); uint32_t x134; fiat_p224_uint1 x135; - fiat_p224_addcarryx_u32(&x134, &x135, 0x0, x116, x100); + fiat_p224_addcarryx_u32(&x134, &x135, 0x0, x100, x116); uint32_t x136; fiat_p224_uint1 x137; - fiat_p224_addcarryx_u32(&x136, &x137, x135, 0x0, x102); + fiat_p224_addcarryx_u32(&x136, &x137, x135, x102, 0x0); uint32_t x138; fiat_p224_uint1 x139; - fiat_p224_addcarryx_u32(&x138, &x139, x137, 0x0, x104); + fiat_p224_addcarryx_u32(&x138, &x139, x137, x104, 0x0); uint32_t x140; fiat_p224_uint1 x141; - fiat_p224_addcarryx_u32(&x140, &x141, x139, x124, x106); + fiat_p224_addcarryx_u32(&x140, &x141, x139, x106, x124); uint32_t x142; fiat_p224_uint1 x143; - fiat_p224_addcarryx_u32(&x142, &x143, x141, x126, x108); + fiat_p224_addcarryx_u32(&x142, &x143, x141, x108, x126); uint32_t x144; fiat_p224_uint1 x145; - fiat_p224_addcarryx_u32(&x144, &x145, x143, x128, x110); + fiat_p224_addcarryx_u32(&x144, &x145, x143, x110, x128); uint32_t x146; fiat_p224_uint1 x147; - fiat_p224_addcarryx_u32(&x146, &x147, x145, x130, x112); + fiat_p224_addcarryx_u32(&x146, &x147, x145, x112, x130); uint32_t x148; fiat_p224_uint1 x149; - fiat_p224_addcarryx_u32(&x148, &x149, x147, x132, x114); + fiat_p224_addcarryx_u32(&x148, &x149, x147, x114, x132); uint32_t x150; fiat_p224_uint1 x151; - fiat_p224_addcarryx_u32(&x150, &x151, x149, 0x0, x115); + fiat_p224_addcarryx_u32(&x150, &x151, x149, x115, 0x0); uint32_t x152; uint32_t x153; fiat_p224_mulx_u32(&x152, &x153, x2, (arg1[6])); @@ -1246,49 +1246,49 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_mulx_u32(&x164, &x165, x2, (arg1[0])); uint32_t x166; fiat_p224_uint1 x167; - fiat_p224_addcarryx_u32(&x166, &x167, 0x0, x162, x165); + fiat_p224_addcarryx_u32(&x166, &x167, 0x0, x165, x162); uint32_t x168; fiat_p224_uint1 x169; - fiat_p224_addcarryx_u32(&x168, &x169, x167, x160, x163); + fiat_p224_addcarryx_u32(&x168, &x169, x167, x163, x160); uint32_t x170; fiat_p224_uint1 x171; - fiat_p224_addcarryx_u32(&x170, &x171, x169, x158, x161); + fiat_p224_addcarryx_u32(&x170, &x171, x169, x161, x158); uint32_t x172; fiat_p224_uint1 x173; - fiat_p224_addcarryx_u32(&x172, &x173, x171, x156, x159); + fiat_p224_addcarryx_u32(&x172, &x173, x171, x159, x156); uint32_t x174; fiat_p224_uint1 x175; - fiat_p224_addcarryx_u32(&x174, &x175, x173, x154, x157); + fiat_p224_addcarryx_u32(&x174, &x175, x173, x157, x154); uint32_t x176; fiat_p224_uint1 x177; - fiat_p224_addcarryx_u32(&x176, &x177, x175, x152, x155); + fiat_p224_addcarryx_u32(&x176, &x177, x175, x155, x152); uint32_t x178; fiat_p224_uint1 x179; - fiat_p224_addcarryx_u32(&x178, &x179, x177, 0x0, x153); + fiat_p224_addcarryx_u32(&x178, &x179, x177, x153, 0x0); uint32_t x180; fiat_p224_uint1 x181; - fiat_p224_addcarryx_u32(&x180, &x181, 0x0, x164, x136); + fiat_p224_addcarryx_u32(&x180, &x181, 0x0, x136, x164); uint32_t x182; fiat_p224_uint1 x183; - fiat_p224_addcarryx_u32(&x182, &x183, x181, x166, x138); + fiat_p224_addcarryx_u32(&x182, &x183, x181, x138, x166); uint32_t x184; fiat_p224_uint1 x185; - fiat_p224_addcarryx_u32(&x184, &x185, x183, x168, x140); + fiat_p224_addcarryx_u32(&x184, &x185, x183, x140, x168); uint32_t x186; fiat_p224_uint1 x187; - fiat_p224_addcarryx_u32(&x186, &x187, x185, x170, x142); + fiat_p224_addcarryx_u32(&x186, &x187, x185, x142, x170); uint32_t x188; fiat_p224_uint1 x189; - fiat_p224_addcarryx_u32(&x188, &x189, x187, x172, x144); + fiat_p224_addcarryx_u32(&x188, &x189, x187, x144, x172); uint32_t x190; fiat_p224_uint1 x191; - fiat_p224_addcarryx_u32(&x190, &x191, x189, x174, x146); + fiat_p224_addcarryx_u32(&x190, &x191, x189, x146, x174); uint32_t x192; fiat_p224_uint1 x193; - fiat_p224_addcarryx_u32(&x192, &x193, x191, x176, x148); + fiat_p224_addcarryx_u32(&x192, &x193, x191, x148, x176); uint32_t x194; fiat_p224_uint1 x195; - fiat_p224_addcarryx_u32(&x194, &x195, x193, x178, x150); + fiat_p224_addcarryx_u32(&x194, &x195, x193, x150, x178); uint32_t x196; uint32_t x197; fiat_p224_mulx_u32(&x196, &x197, x180, UINT32_C(0xffffffff)); @@ -1306,43 +1306,43 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_mulx_u32(&x204, &x205, x196, UINT32_C(0xffffffff)); uint32_t x206; fiat_p224_uint1 x207; - fiat_p224_addcarryx_u32(&x206, &x207, 0x0, x202, x205); + fiat_p224_addcarryx_u32(&x206, &x207, 0x0, x205, x202); uint32_t x208; fiat_p224_uint1 x209; - fiat_p224_addcarryx_u32(&x208, &x209, x207, x200, x203); + fiat_p224_addcarryx_u32(&x208, &x209, x207, x203, x200); uint32_t x210; fiat_p224_uint1 x211; - fiat_p224_addcarryx_u32(&x210, &x211, x209, x198, x201); + fiat_p224_addcarryx_u32(&x210, &x211, x209, x201, x198); uint32_t x212; fiat_p224_uint1 x213; - fiat_p224_addcarryx_u32(&x212, &x213, x211, 0x0, x199); + fiat_p224_addcarryx_u32(&x212, &x213, x211, x199, 0x0); uint32_t x214; fiat_p224_uint1 x215; - fiat_p224_addcarryx_u32(&x214, &x215, 0x0, x196, x180); + fiat_p224_addcarryx_u32(&x214, &x215, 0x0, x180, x196); uint32_t x216; fiat_p224_uint1 x217; - fiat_p224_addcarryx_u32(&x216, &x217, x215, 0x0, x182); + fiat_p224_addcarryx_u32(&x216, &x217, x215, x182, 0x0); uint32_t x218; fiat_p224_uint1 x219; - fiat_p224_addcarryx_u32(&x218, &x219, x217, 0x0, x184); + fiat_p224_addcarryx_u32(&x218, &x219, x217, x184, 0x0); uint32_t x220; fiat_p224_uint1 x221; - fiat_p224_addcarryx_u32(&x220, &x221, x219, x204, x186); + fiat_p224_addcarryx_u32(&x220, &x221, x219, x186, x204); uint32_t x222; fiat_p224_uint1 x223; - fiat_p224_addcarryx_u32(&x222, &x223, x221, x206, x188); + fiat_p224_addcarryx_u32(&x222, &x223, x221, x188, x206); uint32_t x224; fiat_p224_uint1 x225; - fiat_p224_addcarryx_u32(&x224, &x225, x223, x208, x190); + fiat_p224_addcarryx_u32(&x224, &x225, x223, x190, x208); uint32_t x226; fiat_p224_uint1 x227; - fiat_p224_addcarryx_u32(&x226, &x227, x225, x210, x192); + fiat_p224_addcarryx_u32(&x226, &x227, x225, x192, x210); uint32_t x228; fiat_p224_uint1 x229; - fiat_p224_addcarryx_u32(&x228, &x229, x227, x212, x194); + fiat_p224_addcarryx_u32(&x228, &x229, x227, x194, x212); uint32_t x230; fiat_p224_uint1 x231; - fiat_p224_addcarryx_u32(&x230, &x231, x229, 0x0, x195); + fiat_p224_addcarryx_u32(&x230, &x231, x229, x195, 0x0); uint32_t x232; uint32_t x233; fiat_p224_mulx_u32(&x232, &x233, x3, (arg1[6])); @@ -1366,49 +1366,49 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_mulx_u32(&x244, &x245, x3, (arg1[0])); uint32_t x246; fiat_p224_uint1 x247; - fiat_p224_addcarryx_u32(&x246, &x247, 0x0, x242, x245); + fiat_p224_addcarryx_u32(&x246, &x247, 0x0, x245, x242); uint32_t x248; fiat_p224_uint1 x249; - fiat_p224_addcarryx_u32(&x248, &x249, x247, x240, x243); + fiat_p224_addcarryx_u32(&x248, &x249, x247, x243, x240); uint32_t x250; fiat_p224_uint1 x251; - fiat_p224_addcarryx_u32(&x250, &x251, x249, x238, x241); + fiat_p224_addcarryx_u32(&x250, &x251, x249, x241, x238); uint32_t x252; fiat_p224_uint1 x253; - fiat_p224_addcarryx_u32(&x252, &x253, x251, x236, x239); + fiat_p224_addcarryx_u32(&x252, &x253, x251, x239, x236); uint32_t x254; fiat_p224_uint1 x255; - fiat_p224_addcarryx_u32(&x254, &x255, x253, x234, x237); + fiat_p224_addcarryx_u32(&x254, &x255, x253, x237, x234); uint32_t x256; fiat_p224_uint1 x257; - fiat_p224_addcarryx_u32(&x256, &x257, x255, x232, x235); + fiat_p224_addcarryx_u32(&x256, &x257, x255, x235, x232); uint32_t x258; fiat_p224_uint1 x259; - fiat_p224_addcarryx_u32(&x258, &x259, x257, 0x0, x233); + fiat_p224_addcarryx_u32(&x258, &x259, x257, x233, 0x0); uint32_t x260; fiat_p224_uint1 x261; - fiat_p224_addcarryx_u32(&x260, &x261, 0x0, x244, x216); + fiat_p224_addcarryx_u32(&x260, &x261, 0x0, x216, x244); uint32_t x262; fiat_p224_uint1 x263; - fiat_p224_addcarryx_u32(&x262, &x263, x261, x246, x218); + fiat_p224_addcarryx_u32(&x262, &x263, x261, x218, x246); uint32_t x264; fiat_p224_uint1 x265; - fiat_p224_addcarryx_u32(&x264, &x265, x263, x248, x220); + fiat_p224_addcarryx_u32(&x264, &x265, x263, x220, x248); uint32_t x266; fiat_p224_uint1 x267; - fiat_p224_addcarryx_u32(&x266, &x267, x265, x250, x222); + fiat_p224_addcarryx_u32(&x266, &x267, x265, x222, x250); uint32_t x268; fiat_p224_uint1 x269; - fiat_p224_addcarryx_u32(&x268, &x269, x267, x252, x224); + fiat_p224_addcarryx_u32(&x268, &x269, x267, x224, x252); uint32_t x270; fiat_p224_uint1 x271; - fiat_p224_addcarryx_u32(&x270, &x271, x269, x254, x226); + fiat_p224_addcarryx_u32(&x270, &x271, x269, x226, x254); uint32_t x272; fiat_p224_uint1 x273; - fiat_p224_addcarryx_u32(&x272, &x273, x271, x256, x228); + fiat_p224_addcarryx_u32(&x272, &x273, x271, x228, x256); uint32_t x274; fiat_p224_uint1 x275; - fiat_p224_addcarryx_u32(&x274, &x275, x273, x258, x230); + fiat_p224_addcarryx_u32(&x274, &x275, x273, x230, x258); uint32_t x276; uint32_t x277; fiat_p224_mulx_u32(&x276, &x277, x260, UINT32_C(0xffffffff)); @@ -1426,43 +1426,43 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_mulx_u32(&x284, &x285, x276, UINT32_C(0xffffffff)); uint32_t x286; fiat_p224_uint1 x287; - fiat_p224_addcarryx_u32(&x286, &x287, 0x0, x282, x285); + fiat_p224_addcarryx_u32(&x286, &x287, 0x0, x285, x282); uint32_t x288; fiat_p224_uint1 x289; - fiat_p224_addcarryx_u32(&x288, &x289, x287, x280, x283); + fiat_p224_addcarryx_u32(&x288, &x289, x287, x283, x280); uint32_t x290; fiat_p224_uint1 x291; - fiat_p224_addcarryx_u32(&x290, &x291, x289, x278, x281); + fiat_p224_addcarryx_u32(&x290, &x291, x289, x281, x278); uint32_t x292; fiat_p224_uint1 x293; - fiat_p224_addcarryx_u32(&x292, &x293, x291, 0x0, x279); + fiat_p224_addcarryx_u32(&x292, &x293, x291, x279, 0x0); uint32_t x294; fiat_p224_uint1 x295; - fiat_p224_addcarryx_u32(&x294, &x295, 0x0, x276, x260); + fiat_p224_addcarryx_u32(&x294, &x295, 0x0, x260, x276); uint32_t x296; fiat_p224_uint1 x297; - fiat_p224_addcarryx_u32(&x296, &x297, x295, 0x0, x262); + fiat_p224_addcarryx_u32(&x296, &x297, x295, x262, 0x0); uint32_t x298; fiat_p224_uint1 x299; - fiat_p224_addcarryx_u32(&x298, &x299, x297, 0x0, x264); + fiat_p224_addcarryx_u32(&x298, &x299, x297, x264, 0x0); uint32_t x300; fiat_p224_uint1 x301; - fiat_p224_addcarryx_u32(&x300, &x301, x299, x284, x266); + fiat_p224_addcarryx_u32(&x300, &x301, x299, x266, x284); uint32_t x302; fiat_p224_uint1 x303; - fiat_p224_addcarryx_u32(&x302, &x303, x301, x286, x268); + fiat_p224_addcarryx_u32(&x302, &x303, x301, x268, x286); uint32_t x304; fiat_p224_uint1 x305; - fiat_p224_addcarryx_u32(&x304, &x305, x303, x288, x270); + fiat_p224_addcarryx_u32(&x304, &x305, x303, x270, x288); uint32_t x306; fiat_p224_uint1 x307; - fiat_p224_addcarryx_u32(&x306, &x307, x305, x290, x272); + fiat_p224_addcarryx_u32(&x306, &x307, x305, x272, x290); uint32_t x308; fiat_p224_uint1 x309; - fiat_p224_addcarryx_u32(&x308, &x309, x307, x292, x274); + fiat_p224_addcarryx_u32(&x308, &x309, x307, x274, x292); uint32_t x310; fiat_p224_uint1 x311; - fiat_p224_addcarryx_u32(&x310, &x311, x309, 0x0, x275); + fiat_p224_addcarryx_u32(&x310, &x311, x309, x275, 0x0); uint32_t x312; uint32_t x313; fiat_p224_mulx_u32(&x312, &x313, x4, (arg1[6])); @@ -1486,49 +1486,49 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_mulx_u32(&x324, &x325, x4, (arg1[0])); uint32_t x326; fiat_p224_uint1 x327; - fiat_p224_addcarryx_u32(&x326, &x327, 0x0, x322, x325); + fiat_p224_addcarryx_u32(&x326, &x327, 0x0, x325, x322); uint32_t x328; fiat_p224_uint1 x329; - fiat_p224_addcarryx_u32(&x328, &x329, x327, x320, x323); + fiat_p224_addcarryx_u32(&x328, &x329, x327, x323, x320); uint32_t x330; fiat_p224_uint1 x331; - fiat_p224_addcarryx_u32(&x330, &x331, x329, x318, x321); + fiat_p224_addcarryx_u32(&x330, &x331, x329, x321, x318); uint32_t x332; fiat_p224_uint1 x333; - fiat_p224_addcarryx_u32(&x332, &x333, x331, x316, x319); + fiat_p224_addcarryx_u32(&x332, &x333, x331, x319, x316); uint32_t x334; fiat_p224_uint1 x335; - fiat_p224_addcarryx_u32(&x334, &x335, x333, x314, x317); + fiat_p224_addcarryx_u32(&x334, &x335, x333, x317, x314); uint32_t x336; fiat_p224_uint1 x337; - fiat_p224_addcarryx_u32(&x336, &x337, x335, x312, x315); + fiat_p224_addcarryx_u32(&x336, &x337, x335, x315, x312); uint32_t x338; fiat_p224_uint1 x339; - fiat_p224_addcarryx_u32(&x338, &x339, x337, 0x0, x313); + fiat_p224_addcarryx_u32(&x338, &x339, x337, x313, 0x0); uint32_t x340; fiat_p224_uint1 x341; - fiat_p224_addcarryx_u32(&x340, &x341, 0x0, x324, x296); + fiat_p224_addcarryx_u32(&x340, &x341, 0x0, x296, x324); uint32_t x342; fiat_p224_uint1 x343; - fiat_p224_addcarryx_u32(&x342, &x343, x341, x326, x298); + fiat_p224_addcarryx_u32(&x342, &x343, x341, x298, x326); uint32_t x344; fiat_p224_uint1 x345; - fiat_p224_addcarryx_u32(&x344, &x345, x343, x328, x300); + fiat_p224_addcarryx_u32(&x344, &x345, x343, x300, x328); uint32_t x346; fiat_p224_uint1 x347; - fiat_p224_addcarryx_u32(&x346, &x347, x345, x330, x302); + fiat_p224_addcarryx_u32(&x346, &x347, x345, x302, x330); uint32_t x348; fiat_p224_uint1 x349; - fiat_p224_addcarryx_u32(&x348, &x349, x347, x332, x304); + fiat_p224_addcarryx_u32(&x348, &x349, x347, x304, x332); uint32_t x350; fiat_p224_uint1 x351; - fiat_p224_addcarryx_u32(&x350, &x351, x349, x334, x306); + fiat_p224_addcarryx_u32(&x350, &x351, x349, x306, x334); uint32_t x352; fiat_p224_uint1 x353; - fiat_p224_addcarryx_u32(&x352, &x353, x351, x336, x308); + fiat_p224_addcarryx_u32(&x352, &x353, x351, x308, x336); uint32_t x354; fiat_p224_uint1 x355; - fiat_p224_addcarryx_u32(&x354, &x355, x353, x338, x310); + fiat_p224_addcarryx_u32(&x354, &x355, x353, x310, x338); uint32_t x356; uint32_t x357; fiat_p224_mulx_u32(&x356, &x357, x340, UINT32_C(0xffffffff)); @@ -1546,43 +1546,43 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_mulx_u32(&x364, &x365, x356, UINT32_C(0xffffffff)); uint32_t x366; fiat_p224_uint1 x367; - fiat_p224_addcarryx_u32(&x366, &x367, 0x0, x362, x365); + fiat_p224_addcarryx_u32(&x366, &x367, 0x0, x365, x362); uint32_t x368; fiat_p224_uint1 x369; - fiat_p224_addcarryx_u32(&x368, &x369, x367, x360, x363); + fiat_p224_addcarryx_u32(&x368, &x369, x367, x363, x360); uint32_t x370; fiat_p224_uint1 x371; - fiat_p224_addcarryx_u32(&x370, &x371, x369, x358, x361); + fiat_p224_addcarryx_u32(&x370, &x371, x369, x361, x358); uint32_t x372; fiat_p224_uint1 x373; - fiat_p224_addcarryx_u32(&x372, &x373, x371, 0x0, x359); + fiat_p224_addcarryx_u32(&x372, &x373, x371, x359, 0x0); uint32_t x374; fiat_p224_uint1 x375; - fiat_p224_addcarryx_u32(&x374, &x375, 0x0, x356, x340); + fiat_p224_addcarryx_u32(&x374, &x375, 0x0, x340, x356); uint32_t x376; fiat_p224_uint1 x377; - fiat_p224_addcarryx_u32(&x376, &x377, x375, 0x0, x342); + fiat_p224_addcarryx_u32(&x376, &x377, x375, x342, 0x0); uint32_t x378; fiat_p224_uint1 x379; - fiat_p224_addcarryx_u32(&x378, &x379, x377, 0x0, x344); + fiat_p224_addcarryx_u32(&x378, &x379, x377, x344, 0x0); uint32_t x380; fiat_p224_uint1 x381; - fiat_p224_addcarryx_u32(&x380, &x381, x379, x364, x346); + fiat_p224_addcarryx_u32(&x380, &x381, x379, x346, x364); uint32_t x382; fiat_p224_uint1 x383; - fiat_p224_addcarryx_u32(&x382, &x383, x381, x366, x348); + fiat_p224_addcarryx_u32(&x382, &x383, x381, x348, x366); uint32_t x384; fiat_p224_uint1 x385; - fiat_p224_addcarryx_u32(&x384, &x385, x383, x368, x350); + fiat_p224_addcarryx_u32(&x384, &x385, x383, x350, x368); uint32_t x386; fiat_p224_uint1 x387; - fiat_p224_addcarryx_u32(&x386, &x387, x385, x370, x352); + fiat_p224_addcarryx_u32(&x386, &x387, x385, x352, x370); uint32_t x388; fiat_p224_uint1 x389; - fiat_p224_addcarryx_u32(&x388, &x389, x387, x372, x354); + fiat_p224_addcarryx_u32(&x388, &x389, x387, x354, x372); uint32_t x390; fiat_p224_uint1 x391; - fiat_p224_addcarryx_u32(&x390, &x391, x389, 0x0, x355); + fiat_p224_addcarryx_u32(&x390, &x391, x389, x355, 0x0); uint32_t x392; uint32_t x393; fiat_p224_mulx_u32(&x392, &x393, x5, (arg1[6])); @@ -1606,49 +1606,49 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_mulx_u32(&x404, &x405, x5, (arg1[0])); uint32_t x406; fiat_p224_uint1 x407; - fiat_p224_addcarryx_u32(&x406, &x407, 0x0, x402, x405); + fiat_p224_addcarryx_u32(&x406, &x407, 0x0, x405, x402); uint32_t x408; fiat_p224_uint1 x409; - fiat_p224_addcarryx_u32(&x408, &x409, x407, x400, x403); + fiat_p224_addcarryx_u32(&x408, &x409, x407, x403, x400); uint32_t x410; fiat_p224_uint1 x411; - fiat_p224_addcarryx_u32(&x410, &x411, x409, x398, x401); + fiat_p224_addcarryx_u32(&x410, &x411, x409, x401, x398); uint32_t x412; fiat_p224_uint1 x413; - fiat_p224_addcarryx_u32(&x412, &x413, x411, x396, x399); + fiat_p224_addcarryx_u32(&x412, &x413, x411, x399, x396); uint32_t x414; fiat_p224_uint1 x415; - fiat_p224_addcarryx_u32(&x414, &x415, x413, x394, x397); + fiat_p224_addcarryx_u32(&x414, &x415, x413, x397, x394); uint32_t x416; fiat_p224_uint1 x417; - fiat_p224_addcarryx_u32(&x416, &x417, x415, x392, x395); + fiat_p224_addcarryx_u32(&x416, &x417, x415, x395, x392); uint32_t x418; fiat_p224_uint1 x419; - fiat_p224_addcarryx_u32(&x418, &x419, x417, 0x0, x393); + fiat_p224_addcarryx_u32(&x418, &x419, x417, x393, 0x0); uint32_t x420; fiat_p224_uint1 x421; - fiat_p224_addcarryx_u32(&x420, &x421, 0x0, x404, x376); + fiat_p224_addcarryx_u32(&x420, &x421, 0x0, x376, x404); uint32_t x422; fiat_p224_uint1 x423; - fiat_p224_addcarryx_u32(&x422, &x423, x421, x406, x378); + fiat_p224_addcarryx_u32(&x422, &x423, x421, x378, x406); uint32_t x424; fiat_p224_uint1 x425; - fiat_p224_addcarryx_u32(&x424, &x425, x423, x408, x380); + fiat_p224_addcarryx_u32(&x424, &x425, x423, x380, x408); uint32_t x426; fiat_p224_uint1 x427; - fiat_p224_addcarryx_u32(&x426, &x427, x425, x410, x382); + fiat_p224_addcarryx_u32(&x426, &x427, x425, x382, x410); uint32_t x428; fiat_p224_uint1 x429; - fiat_p224_addcarryx_u32(&x428, &x429, x427, x412, x384); + fiat_p224_addcarryx_u32(&x428, &x429, x427, x384, x412); uint32_t x430; fiat_p224_uint1 x431; - fiat_p224_addcarryx_u32(&x430, &x431, x429, x414, x386); + fiat_p224_addcarryx_u32(&x430, &x431, x429, x386, x414); uint32_t x432; fiat_p224_uint1 x433; - fiat_p224_addcarryx_u32(&x432, &x433, x431, x416, x388); + fiat_p224_addcarryx_u32(&x432, &x433, x431, x388, x416); uint32_t x434; fiat_p224_uint1 x435; - fiat_p224_addcarryx_u32(&x434, &x435, x433, x418, x390); + fiat_p224_addcarryx_u32(&x434, &x435, x433, x390, x418); uint32_t x436; uint32_t x437; fiat_p224_mulx_u32(&x436, &x437, x420, UINT32_C(0xffffffff)); @@ -1666,43 +1666,43 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_mulx_u32(&x444, &x445, x436, UINT32_C(0xffffffff)); uint32_t x446; fiat_p224_uint1 x447; - fiat_p224_addcarryx_u32(&x446, &x447, 0x0, x442, x445); + fiat_p224_addcarryx_u32(&x446, &x447, 0x0, x445, x442); uint32_t x448; fiat_p224_uint1 x449; - fiat_p224_addcarryx_u32(&x448, &x449, x447, x440, x443); + fiat_p224_addcarryx_u32(&x448, &x449, x447, x443, x440); uint32_t x450; fiat_p224_uint1 x451; - fiat_p224_addcarryx_u32(&x450, &x451, x449, x438, x441); + fiat_p224_addcarryx_u32(&x450, &x451, x449, x441, x438); uint32_t x452; fiat_p224_uint1 x453; - fiat_p224_addcarryx_u32(&x452, &x453, x451, 0x0, x439); + fiat_p224_addcarryx_u32(&x452, &x453, x451, x439, 0x0); uint32_t x454; fiat_p224_uint1 x455; - fiat_p224_addcarryx_u32(&x454, &x455, 0x0, x436, x420); + fiat_p224_addcarryx_u32(&x454, &x455, 0x0, x420, x436); uint32_t x456; fiat_p224_uint1 x457; - fiat_p224_addcarryx_u32(&x456, &x457, x455, 0x0, x422); + fiat_p224_addcarryx_u32(&x456, &x457, x455, x422, 0x0); uint32_t x458; fiat_p224_uint1 x459; - fiat_p224_addcarryx_u32(&x458, &x459, x457, 0x0, x424); + fiat_p224_addcarryx_u32(&x458, &x459, x457, x424, 0x0); uint32_t x460; fiat_p224_uint1 x461; - fiat_p224_addcarryx_u32(&x460, &x461, x459, x444, x426); + fiat_p224_addcarryx_u32(&x460, &x461, x459, x426, x444); uint32_t x462; fiat_p224_uint1 x463; - fiat_p224_addcarryx_u32(&x462, &x463, x461, x446, x428); + fiat_p224_addcarryx_u32(&x462, &x463, x461, x428, x446); uint32_t x464; fiat_p224_uint1 x465; - fiat_p224_addcarryx_u32(&x464, &x465, x463, x448, x430); + fiat_p224_addcarryx_u32(&x464, &x465, x463, x430, x448); uint32_t x466; fiat_p224_uint1 x467; - fiat_p224_addcarryx_u32(&x466, &x467, x465, x450, x432); + fiat_p224_addcarryx_u32(&x466, &x467, x465, x432, x450); uint32_t x468; fiat_p224_uint1 x469; - fiat_p224_addcarryx_u32(&x468, &x469, x467, x452, x434); + fiat_p224_addcarryx_u32(&x468, &x469, x467, x434, x452); uint32_t x470; fiat_p224_uint1 x471; - fiat_p224_addcarryx_u32(&x470, &x471, x469, 0x0, x435); + fiat_p224_addcarryx_u32(&x470, &x471, x469, x435, 0x0); uint32_t x472; uint32_t x473; fiat_p224_mulx_u32(&x472, &x473, x6, (arg1[6])); @@ -1726,49 +1726,49 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_mulx_u32(&x484, &x485, x6, (arg1[0])); uint32_t x486; fiat_p224_uint1 x487; - fiat_p224_addcarryx_u32(&x486, &x487, 0x0, x482, x485); + fiat_p224_addcarryx_u32(&x486, &x487, 0x0, x485, x482); uint32_t x488; fiat_p224_uint1 x489; - fiat_p224_addcarryx_u32(&x488, &x489, x487, x480, x483); + fiat_p224_addcarryx_u32(&x488, &x489, x487, x483, x480); uint32_t x490; fiat_p224_uint1 x491; - fiat_p224_addcarryx_u32(&x490, &x491, x489, x478, x481); + fiat_p224_addcarryx_u32(&x490, &x491, x489, x481, x478); uint32_t x492; fiat_p224_uint1 x493; - fiat_p224_addcarryx_u32(&x492, &x493, x491, x476, x479); + fiat_p224_addcarryx_u32(&x492, &x493, x491, x479, x476); uint32_t x494; fiat_p224_uint1 x495; - fiat_p224_addcarryx_u32(&x494, &x495, x493, x474, x477); + fiat_p224_addcarryx_u32(&x494, &x495, x493, x477, x474); uint32_t x496; fiat_p224_uint1 x497; - fiat_p224_addcarryx_u32(&x496, &x497, x495, x472, x475); + fiat_p224_addcarryx_u32(&x496, &x497, x495, x475, x472); uint32_t x498; fiat_p224_uint1 x499; - fiat_p224_addcarryx_u32(&x498, &x499, x497, 0x0, x473); + fiat_p224_addcarryx_u32(&x498, &x499, x497, x473, 0x0); uint32_t x500; fiat_p224_uint1 x501; - fiat_p224_addcarryx_u32(&x500, &x501, 0x0, x484, x456); + fiat_p224_addcarryx_u32(&x500, &x501, 0x0, x456, x484); uint32_t x502; fiat_p224_uint1 x503; - fiat_p224_addcarryx_u32(&x502, &x503, x501, x486, x458); + fiat_p224_addcarryx_u32(&x502, &x503, x501, x458, x486); uint32_t x504; fiat_p224_uint1 x505; - fiat_p224_addcarryx_u32(&x504, &x505, x503, x488, x460); + fiat_p224_addcarryx_u32(&x504, &x505, x503, x460, x488); uint32_t x506; fiat_p224_uint1 x507; - fiat_p224_addcarryx_u32(&x506, &x507, x505, x490, x462); + fiat_p224_addcarryx_u32(&x506, &x507, x505, x462, x490); uint32_t x508; fiat_p224_uint1 x509; - fiat_p224_addcarryx_u32(&x508, &x509, x507, x492, x464); + fiat_p224_addcarryx_u32(&x508, &x509, x507, x464, x492); uint32_t x510; fiat_p224_uint1 x511; - fiat_p224_addcarryx_u32(&x510, &x511, x509, x494, x466); + fiat_p224_addcarryx_u32(&x510, &x511, x509, x466, x494); uint32_t x512; fiat_p224_uint1 x513; - fiat_p224_addcarryx_u32(&x512, &x513, x511, x496, x468); + fiat_p224_addcarryx_u32(&x512, &x513, x511, x468, x496); uint32_t x514; fiat_p224_uint1 x515; - fiat_p224_addcarryx_u32(&x514, &x515, x513, x498, x470); + fiat_p224_addcarryx_u32(&x514, &x515, x513, x470, x498); uint32_t x516; uint32_t x517; fiat_p224_mulx_u32(&x516, &x517, x500, UINT32_C(0xffffffff)); @@ -1786,43 +1786,43 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_mulx_u32(&x524, &x525, x516, UINT32_C(0xffffffff)); uint32_t x526; fiat_p224_uint1 x527; - fiat_p224_addcarryx_u32(&x526, &x527, 0x0, x522, x525); + fiat_p224_addcarryx_u32(&x526, &x527, 0x0, x525, x522); uint32_t x528; fiat_p224_uint1 x529; - fiat_p224_addcarryx_u32(&x528, &x529, x527, x520, x523); + fiat_p224_addcarryx_u32(&x528, &x529, x527, x523, x520); uint32_t x530; fiat_p224_uint1 x531; - fiat_p224_addcarryx_u32(&x530, &x531, x529, x518, x521); + fiat_p224_addcarryx_u32(&x530, &x531, x529, x521, x518); uint32_t x532; fiat_p224_uint1 x533; - fiat_p224_addcarryx_u32(&x532, &x533, x531, 0x0, x519); + fiat_p224_addcarryx_u32(&x532, &x533, x531, x519, 0x0); uint32_t x534; fiat_p224_uint1 x535; - fiat_p224_addcarryx_u32(&x534, &x535, 0x0, x516, x500); + fiat_p224_addcarryx_u32(&x534, &x535, 0x0, x500, x516); uint32_t x536; fiat_p224_uint1 x537; - fiat_p224_addcarryx_u32(&x536, &x537, x535, 0x0, x502); + fiat_p224_addcarryx_u32(&x536, &x537, x535, x502, 0x0); uint32_t x538; fiat_p224_uint1 x539; - fiat_p224_addcarryx_u32(&x538, &x539, x537, 0x0, x504); + fiat_p224_addcarryx_u32(&x538, &x539, x537, x504, 0x0); uint32_t x540; fiat_p224_uint1 x541; - fiat_p224_addcarryx_u32(&x540, &x541, x539, x524, x506); + fiat_p224_addcarryx_u32(&x540, &x541, x539, x506, x524); uint32_t x542; fiat_p224_uint1 x543; - fiat_p224_addcarryx_u32(&x542, &x543, x541, x526, x508); + fiat_p224_addcarryx_u32(&x542, &x543, x541, x508, x526); uint32_t x544; fiat_p224_uint1 x545; - fiat_p224_addcarryx_u32(&x544, &x545, x543, x528, x510); + fiat_p224_addcarryx_u32(&x544, &x545, x543, x510, x528); uint32_t x546; fiat_p224_uint1 x547; - fiat_p224_addcarryx_u32(&x546, &x547, x545, x530, x512); + fiat_p224_addcarryx_u32(&x546, &x547, x545, x512, x530); uint32_t x548; fiat_p224_uint1 x549; - fiat_p224_addcarryx_u32(&x548, &x549, x547, x532, x514); + fiat_p224_addcarryx_u32(&x548, &x549, x547, x514, x532); uint32_t x550; fiat_p224_uint1 x551; - fiat_p224_addcarryx_u32(&x550, &x551, x549, 0x0, x515); + fiat_p224_addcarryx_u32(&x550, &x551, x549, x515, 0x0); uint32_t x552; fiat_p224_uint1 x553; fiat_p224_subborrowx_u32(&x552, &x553, 0x0, x536, 0x1); @@ -1888,25 +1888,25 @@ static void fiat_p224_square(uint32_t out1[7], const uint32_t arg1[7]) { static void fiat_p224_add(uint32_t out1[7], const uint32_t arg1[7], const uint32_t arg2[7]) { uint32_t x1; fiat_p224_uint1 x2; - fiat_p224_addcarryx_u32(&x1, &x2, 0x0, (arg2[0]), (arg1[0])); + fiat_p224_addcarryx_u32(&x1, &x2, 0x0, (arg1[0]), (arg2[0])); uint32_t x3; fiat_p224_uint1 x4; - fiat_p224_addcarryx_u32(&x3, &x4, x2, (arg2[1]), (arg1[1])); + fiat_p224_addcarryx_u32(&x3, &x4, x2, (arg1[1]), (arg2[1])); uint32_t x5; fiat_p224_uint1 x6; - fiat_p224_addcarryx_u32(&x5, &x6, x4, (arg2[2]), (arg1[2])); + fiat_p224_addcarryx_u32(&x5, &x6, x4, (arg1[2]), (arg2[2])); uint32_t x7; fiat_p224_uint1 x8; - fiat_p224_addcarryx_u32(&x7, &x8, x6, (arg2[3]), (arg1[3])); + fiat_p224_addcarryx_u32(&x7, &x8, x6, (arg1[3]), (arg2[3])); uint32_t x9; fiat_p224_uint1 x10; - fiat_p224_addcarryx_u32(&x9, &x10, x8, (arg2[4]), (arg1[4])); + fiat_p224_addcarryx_u32(&x9, &x10, x8, (arg1[4]), (arg2[4])); uint32_t x11; fiat_p224_uint1 x12; - fiat_p224_addcarryx_u32(&x11, &x12, x10, (arg2[5]), (arg1[5])); + fiat_p224_addcarryx_u32(&x11, &x12, x10, (arg1[5]), (arg2[5])); uint32_t x13; fiat_p224_uint1 x14; - fiat_p224_addcarryx_u32(&x13, &x14, x12, (arg2[6]), (arg1[6])); + fiat_p224_addcarryx_u32(&x13, &x14, x12, (arg1[6]), (arg2[6])); uint32_t x15; fiat_p224_uint1 x16; fiat_p224_subborrowx_u32(&x15, &x16, 0x0, x1, 0x1); @@ -1995,25 +1995,25 @@ static void fiat_p224_sub(uint32_t out1[7], const uint32_t arg1[7], const uint32 fiat_p224_cmovznz_u32(&x15, x14, 0x0, UINT32_C(0xffffffff)); uint32_t x16; fiat_p224_uint1 x17; - fiat_p224_addcarryx_u32(&x16, &x17, 0x0, (fiat_p224_uint1)(x15 & 0x1), x1); + fiat_p224_addcarryx_u32(&x16, &x17, 0x0, x1, (fiat_p224_uint1)(x15 & 0x1)); uint32_t x18; fiat_p224_uint1 x19; - fiat_p224_addcarryx_u32(&x18, &x19, x17, 0x0, x3); + fiat_p224_addcarryx_u32(&x18, &x19, x17, x3, 0x0); uint32_t x20; fiat_p224_uint1 x21; - fiat_p224_addcarryx_u32(&x20, &x21, x19, 0x0, x5); + fiat_p224_addcarryx_u32(&x20, &x21, x19, x5, 0x0); uint32_t x22; fiat_p224_uint1 x23; - fiat_p224_addcarryx_u32(&x22, &x23, x21, (x15 & UINT32_C(0xffffffff)), x7); + fiat_p224_addcarryx_u32(&x22, &x23, x21, x7, (x15 & UINT32_C(0xffffffff))); uint32_t x24; fiat_p224_uint1 x25; - fiat_p224_addcarryx_u32(&x24, &x25, x23, (x15 & UINT32_C(0xffffffff)), x9); + fiat_p224_addcarryx_u32(&x24, &x25, x23, x9, (x15 & UINT32_C(0xffffffff))); uint32_t x26; fiat_p224_uint1 x27; - fiat_p224_addcarryx_u32(&x26, &x27, x25, (x15 & UINT32_C(0xffffffff)), x11); + fiat_p224_addcarryx_u32(&x26, &x27, x25, x11, (x15 & UINT32_C(0xffffffff))); uint32_t x28; fiat_p224_uint1 x29; - fiat_p224_addcarryx_u32(&x28, &x29, x27, (x15 & UINT32_C(0xffffffff)), x13); + fiat_p224_addcarryx_u32(&x28, &x29, x27, x13, (x15 & UINT32_C(0xffffffff))); out1[0] = x16; out1[1] = x18; out1[2] = x20; @@ -2062,25 +2062,25 @@ static void fiat_p224_opp(uint32_t out1[7], const uint32_t arg1[7]) { fiat_p224_cmovznz_u32(&x15, x14, 0x0, UINT32_C(0xffffffff)); uint32_t x16; fiat_p224_uint1 x17; - fiat_p224_addcarryx_u32(&x16, &x17, 0x0, (fiat_p224_uint1)(x15 & 0x1), x1); + fiat_p224_addcarryx_u32(&x16, &x17, 0x0, x1, (fiat_p224_uint1)(x15 & 0x1)); uint32_t x18; fiat_p224_uint1 x19; - fiat_p224_addcarryx_u32(&x18, &x19, x17, 0x0, x3); + fiat_p224_addcarryx_u32(&x18, &x19, x17, x3, 0x0); uint32_t x20; fiat_p224_uint1 x21; - fiat_p224_addcarryx_u32(&x20, &x21, x19, 0x0, x5); + fiat_p224_addcarryx_u32(&x20, &x21, x19, x5, 0x0); uint32_t x22; fiat_p224_uint1 x23; - fiat_p224_addcarryx_u32(&x22, &x23, x21, (x15 & UINT32_C(0xffffffff)), x7); + fiat_p224_addcarryx_u32(&x22, &x23, x21, x7, (x15 & UINT32_C(0xffffffff))); uint32_t x24; fiat_p224_uint1 x25; - fiat_p224_addcarryx_u32(&x24, &x25, x23, (x15 & UINT32_C(0xffffffff)), x9); + fiat_p224_addcarryx_u32(&x24, &x25, x23, x9, (x15 & UINT32_C(0xffffffff))); uint32_t x26; fiat_p224_uint1 x27; - fiat_p224_addcarryx_u32(&x26, &x27, x25, (x15 & UINT32_C(0xffffffff)), x11); + fiat_p224_addcarryx_u32(&x26, &x27, x25, x11, (x15 & UINT32_C(0xffffffff))); uint32_t x28; fiat_p224_uint1 x29; - fiat_p224_addcarryx_u32(&x28, &x29, x27, (x15 & UINT32_C(0xffffffff)), x13); + fiat_p224_addcarryx_u32(&x28, &x29, x27, x13, (x15 & UINT32_C(0xffffffff))); out1[0] = x16; out1[1] = x18; out1[2] = x20; @@ -2122,22 +2122,22 @@ static void fiat_p224_from_montgomery(uint32_t out1[7], const uint32_t arg1[7]) fiat_p224_mulx_u32(&x10, &x11, x2, UINT32_C(0xffffffff)); uint32_t x12; fiat_p224_uint1 x13; - fiat_p224_addcarryx_u32(&x12, &x13, 0x0, x8, x11); + fiat_p224_addcarryx_u32(&x12, &x13, 0x0, x11, x8); uint32_t x14; fiat_p224_uint1 x15; - fiat_p224_addcarryx_u32(&x14, &x15, x13, x6, x9); + fiat_p224_addcarryx_u32(&x14, &x15, x13, x9, x6); uint32_t x16; fiat_p224_uint1 x17; - fiat_p224_addcarryx_u32(&x16, &x17, x15, x4, x7); + fiat_p224_addcarryx_u32(&x16, &x17, x15, x7, x4); uint32_t x18; fiat_p224_uint1 x19; - fiat_p224_addcarryx_u32(&x18, &x19, 0x0, x2, x1); + fiat_p224_addcarryx_u32(&x18, &x19, 0x0, x1, x2); uint32_t x20; fiat_p224_uint1 x21; fiat_p224_addcarryx_u32(&x20, &x21, x19, 0x0, 0x0); uint32_t x22; fiat_p224_uint1 x23; - fiat_p224_addcarryx_u32(&x22, &x23, 0x0, (arg1[1]), (fiat_p224_uint1)x20); + fiat_p224_addcarryx_u32(&x22, &x23, 0x0, (fiat_p224_uint1)x20, (arg1[1])); uint32_t x24; uint32_t x25; fiat_p224_mulx_u32(&x24, &x25, x22, UINT32_C(0xffffffff)); @@ -2155,64 +2155,64 @@ static void fiat_p224_from_montgomery(uint32_t out1[7], const uint32_t arg1[7]) fiat_p224_mulx_u32(&x32, &x33, x24, UINT32_C(0xffffffff)); uint32_t x34; fiat_p224_uint1 x35; - fiat_p224_addcarryx_u32(&x34, &x35, 0x0, x30, x33); + fiat_p224_addcarryx_u32(&x34, &x35, 0x0, x33, x30); uint32_t x36; fiat_p224_uint1 x37; - fiat_p224_addcarryx_u32(&x36, &x37, x35, x28, x31); + fiat_p224_addcarryx_u32(&x36, &x37, x35, x31, x28); uint32_t x38; fiat_p224_uint1 x39; - fiat_p224_addcarryx_u32(&x38, &x39, x37, x26, x29); + fiat_p224_addcarryx_u32(&x38, &x39, x37, x29, x26); uint32_t x40; fiat_p224_uint1 x41; - fiat_p224_addcarryx_u32(&x40, &x41, 0x0, x32, x12); + fiat_p224_addcarryx_u32(&x40, &x41, 0x0, x12, x32); uint32_t x42; fiat_p224_uint1 x43; - fiat_p224_addcarryx_u32(&x42, &x43, x41, x34, x14); + fiat_p224_addcarryx_u32(&x42, &x43, x41, x14, x34); uint32_t x44; fiat_p224_uint1 x45; - fiat_p224_addcarryx_u32(&x44, &x45, x43, x36, x16); + fiat_p224_addcarryx_u32(&x44, &x45, x43, x16, x36); uint32_t x46; fiat_p224_uint1 x47; - fiat_p224_addcarryx_u32(&x46, &x47, x17, 0x0, x5); + fiat_p224_addcarryx_u32(&x46, &x47, x17, x5, 0x0); uint32_t x48; fiat_p224_uint1 x49; - fiat_p224_addcarryx_u32(&x48, &x49, x45, x38, x46); + fiat_p224_addcarryx_u32(&x48, &x49, x45, x46, x38); uint32_t x50; fiat_p224_uint1 x51; - fiat_p224_addcarryx_u32(&x50, &x51, x39, 0x0, x27); + fiat_p224_addcarryx_u32(&x50, &x51, x39, x27, 0x0); uint32_t x52; fiat_p224_uint1 x53; - fiat_p224_addcarryx_u32(&x52, &x53, x49, x50, 0x0); + fiat_p224_addcarryx_u32(&x52, &x53, x49, 0x0, x50); uint32_t x54; fiat_p224_uint1 x55; fiat_p224_addcarryx_u32(&x54, &x55, x23, 0x0, 0x0); uint32_t x56; fiat_p224_uint1 x57; - fiat_p224_addcarryx_u32(&x56, &x57, 0x0, x24, x22); + fiat_p224_addcarryx_u32(&x56, &x57, 0x0, x22, x24); uint32_t x58; fiat_p224_uint1 x59; - fiat_p224_addcarryx_u32(&x58, &x59, x57, 0x0, (fiat_p224_uint1)x54); + fiat_p224_addcarryx_u32(&x58, &x59, x57, (fiat_p224_uint1)x54, 0x0); uint32_t x60; fiat_p224_uint1 x61; - fiat_p224_addcarryx_u32(&x60, &x61, 0x0, (arg1[2]), x58); + fiat_p224_addcarryx_u32(&x60, &x61, 0x0, x58, (arg1[2])); uint32_t x62; fiat_p224_uint1 x63; - fiat_p224_addcarryx_u32(&x62, &x63, x61, 0x0, x10); + fiat_p224_addcarryx_u32(&x62, &x63, x61, x10, 0x0); uint32_t x64; fiat_p224_uint1 x65; - fiat_p224_addcarryx_u32(&x64, &x65, x63, 0x0, x40); + fiat_p224_addcarryx_u32(&x64, &x65, x63, x40, 0x0); uint32_t x66; fiat_p224_uint1 x67; - fiat_p224_addcarryx_u32(&x66, &x67, x65, 0x0, x42); + fiat_p224_addcarryx_u32(&x66, &x67, x65, x42, 0x0); uint32_t x68; fiat_p224_uint1 x69; - fiat_p224_addcarryx_u32(&x68, &x69, x67, 0x0, x44); + fiat_p224_addcarryx_u32(&x68, &x69, x67, x44, 0x0); uint32_t x70; fiat_p224_uint1 x71; - fiat_p224_addcarryx_u32(&x70, &x71, x69, 0x0, x48); + fiat_p224_addcarryx_u32(&x70, &x71, x69, x48, 0x0); uint32_t x72; fiat_p224_uint1 x73; - fiat_p224_addcarryx_u32(&x72, &x73, x71, 0x0, x52); + fiat_p224_addcarryx_u32(&x72, &x73, x71, x52, 0x0); uint32_t x74; uint32_t x75; fiat_p224_mulx_u32(&x74, &x75, x60, UINT32_C(0xffffffff)); @@ -2230,67 +2230,67 @@ static void fiat_p224_from_montgomery(uint32_t out1[7], const uint32_t arg1[7]) fiat_p224_mulx_u32(&x82, &x83, x74, UINT32_C(0xffffffff)); uint32_t x84; fiat_p224_uint1 x85; - fiat_p224_addcarryx_u32(&x84, &x85, 0x0, x80, x83); + fiat_p224_addcarryx_u32(&x84, &x85, 0x0, x83, x80); uint32_t x86; fiat_p224_uint1 x87; - fiat_p224_addcarryx_u32(&x86, &x87, x85, x78, x81); + fiat_p224_addcarryx_u32(&x86, &x87, x85, x81, x78); uint32_t x88; fiat_p224_uint1 x89; - fiat_p224_addcarryx_u32(&x88, &x89, x87, x76, x79); + fiat_p224_addcarryx_u32(&x88, &x89, x87, x79, x76); uint32_t x90; fiat_p224_uint1 x91; - fiat_p224_addcarryx_u32(&x90, &x91, 0x0, x74, x60); + fiat_p224_addcarryx_u32(&x90, &x91, 0x0, x60, x74); uint32_t x92; fiat_p224_uint1 x93; - fiat_p224_addcarryx_u32(&x92, &x93, x91, 0x0, x62); + fiat_p224_addcarryx_u32(&x92, &x93, x91, x62, 0x0); uint32_t x94; fiat_p224_uint1 x95; - fiat_p224_addcarryx_u32(&x94, &x95, x93, 0x0, x64); + fiat_p224_addcarryx_u32(&x94, &x95, x93, x64, 0x0); uint32_t x96; fiat_p224_uint1 x97; - fiat_p224_addcarryx_u32(&x96, &x97, x95, x82, x66); + fiat_p224_addcarryx_u32(&x96, &x97, x95, x66, x82); uint32_t x98; fiat_p224_uint1 x99; - fiat_p224_addcarryx_u32(&x98, &x99, x97, x84, x68); + fiat_p224_addcarryx_u32(&x98, &x99, x97, x68, x84); uint32_t x100; fiat_p224_uint1 x101; - fiat_p224_addcarryx_u32(&x100, &x101, x99, x86, x70); + fiat_p224_addcarryx_u32(&x100, &x101, x99, x70, x86); uint32_t x102; fiat_p224_uint1 x103; - fiat_p224_addcarryx_u32(&x102, &x103, x101, x88, x72); + fiat_p224_addcarryx_u32(&x102, &x103, x101, x72, x88); uint32_t x104; fiat_p224_uint1 x105; - fiat_p224_addcarryx_u32(&x104, &x105, x53, 0x0, 0x0); + fiat_p224_addcarryx_u32(&x104, &x105, x89, x77, 0x0); uint32_t x106; fiat_p224_uint1 x107; - fiat_p224_addcarryx_u32(&x106, &x107, x73, 0x0, (fiat_p224_uint1)x104); + fiat_p224_addcarryx_u32(&x106, &x107, x53, 0x0, 0x0); uint32_t x108; fiat_p224_uint1 x109; - fiat_p224_addcarryx_u32(&x108, &x109, x89, 0x0, x77); + fiat_p224_addcarryx_u32(&x108, &x109, x73, (fiat_p224_uint1)x106, 0x0); uint32_t x110; fiat_p224_uint1 x111; - fiat_p224_addcarryx_u32(&x110, &x111, x103, x108, x106); + fiat_p224_addcarryx_u32(&x110, &x111, x103, x108, x104); uint32_t x112; fiat_p224_uint1 x113; - fiat_p224_addcarryx_u32(&x112, &x113, 0x0, (arg1[3]), x92); + fiat_p224_addcarryx_u32(&x112, &x113, 0x0, x92, (arg1[3])); uint32_t x114; fiat_p224_uint1 x115; - fiat_p224_addcarryx_u32(&x114, &x115, x113, 0x0, x94); + fiat_p224_addcarryx_u32(&x114, &x115, x113, x94, 0x0); uint32_t x116; fiat_p224_uint1 x117; - fiat_p224_addcarryx_u32(&x116, &x117, x115, 0x0, x96); + fiat_p224_addcarryx_u32(&x116, &x117, x115, x96, 0x0); uint32_t x118; fiat_p224_uint1 x119; - fiat_p224_addcarryx_u32(&x118, &x119, x117, 0x0, x98); + fiat_p224_addcarryx_u32(&x118, &x119, x117, x98, 0x0); uint32_t x120; fiat_p224_uint1 x121; - fiat_p224_addcarryx_u32(&x120, &x121, x119, 0x0, x100); + fiat_p224_addcarryx_u32(&x120, &x121, x119, x100, 0x0); uint32_t x122; fiat_p224_uint1 x123; - fiat_p224_addcarryx_u32(&x122, &x123, x121, 0x0, x102); + fiat_p224_addcarryx_u32(&x122, &x123, x121, x102, 0x0); uint32_t x124; fiat_p224_uint1 x125; - fiat_p224_addcarryx_u32(&x124, &x125, x123, 0x0, x110); + fiat_p224_addcarryx_u32(&x124, &x125, x123, x110, 0x0); uint32_t x126; uint32_t x127; fiat_p224_mulx_u32(&x126, &x127, x112, UINT32_C(0xffffffff)); @@ -2308,67 +2308,67 @@ static void fiat_p224_from_montgomery(uint32_t out1[7], const uint32_t arg1[7]) fiat_p224_mulx_u32(&x134, &x135, x126, UINT32_C(0xffffffff)); uint32_t x136; fiat_p224_uint1 x137; - fiat_p224_addcarryx_u32(&x136, &x137, 0x0, x132, x135); + fiat_p224_addcarryx_u32(&x136, &x137, 0x0, x135, x132); uint32_t x138; fiat_p224_uint1 x139; - fiat_p224_addcarryx_u32(&x138, &x139, x137, x130, x133); + fiat_p224_addcarryx_u32(&x138, &x139, x137, x133, x130); uint32_t x140; fiat_p224_uint1 x141; - fiat_p224_addcarryx_u32(&x140, &x141, x139, x128, x131); + fiat_p224_addcarryx_u32(&x140, &x141, x139, x131, x128); uint32_t x142; fiat_p224_uint1 x143; - fiat_p224_addcarryx_u32(&x142, &x143, 0x0, x126, x112); + fiat_p224_addcarryx_u32(&x142, &x143, 0x0, x112, x126); uint32_t x144; fiat_p224_uint1 x145; - fiat_p224_addcarryx_u32(&x144, &x145, x143, 0x0, x114); + fiat_p224_addcarryx_u32(&x144, &x145, x143, x114, 0x0); uint32_t x146; fiat_p224_uint1 x147; - fiat_p224_addcarryx_u32(&x146, &x147, x145, 0x0, x116); + fiat_p224_addcarryx_u32(&x146, &x147, x145, x116, 0x0); uint32_t x148; fiat_p224_uint1 x149; - fiat_p224_addcarryx_u32(&x148, &x149, x147, x134, x118); + fiat_p224_addcarryx_u32(&x148, &x149, x147, x118, x134); uint32_t x150; fiat_p224_uint1 x151; - fiat_p224_addcarryx_u32(&x150, &x151, x149, x136, x120); + fiat_p224_addcarryx_u32(&x150, &x151, x149, x120, x136); uint32_t x152; fiat_p224_uint1 x153; - fiat_p224_addcarryx_u32(&x152, &x153, x151, x138, x122); + fiat_p224_addcarryx_u32(&x152, &x153, x151, x122, x138); uint32_t x154; fiat_p224_uint1 x155; - fiat_p224_addcarryx_u32(&x154, &x155, x153, x140, x124); + fiat_p224_addcarryx_u32(&x154, &x155, x153, x124, x140); uint32_t x156; fiat_p224_uint1 x157; - fiat_p224_addcarryx_u32(&x156, &x157, x111, 0x0, 0x0); + fiat_p224_addcarryx_u32(&x156, &x157, x141, x129, 0x0); uint32_t x158; fiat_p224_uint1 x159; - fiat_p224_addcarryx_u32(&x158, &x159, x125, 0x0, (fiat_p224_uint1)x156); + fiat_p224_addcarryx_u32(&x158, &x159, x111, 0x0, 0x0); uint32_t x160; fiat_p224_uint1 x161; - fiat_p224_addcarryx_u32(&x160, &x161, x141, 0x0, x129); + fiat_p224_addcarryx_u32(&x160, &x161, x125, (fiat_p224_uint1)x158, 0x0); uint32_t x162; fiat_p224_uint1 x163; - fiat_p224_addcarryx_u32(&x162, &x163, x155, x160, x158); + fiat_p224_addcarryx_u32(&x162, &x163, x155, x160, x156); uint32_t x164; fiat_p224_uint1 x165; - fiat_p224_addcarryx_u32(&x164, &x165, 0x0, (arg1[4]), x144); + fiat_p224_addcarryx_u32(&x164, &x165, 0x0, x144, (arg1[4])); uint32_t x166; fiat_p224_uint1 x167; - fiat_p224_addcarryx_u32(&x166, &x167, x165, 0x0, x146); + fiat_p224_addcarryx_u32(&x166, &x167, x165, x146, 0x0); uint32_t x168; fiat_p224_uint1 x169; - fiat_p224_addcarryx_u32(&x168, &x169, x167, 0x0, x148); + fiat_p224_addcarryx_u32(&x168, &x169, x167, x148, 0x0); uint32_t x170; fiat_p224_uint1 x171; - fiat_p224_addcarryx_u32(&x170, &x171, x169, 0x0, x150); + fiat_p224_addcarryx_u32(&x170, &x171, x169, x150, 0x0); uint32_t x172; fiat_p224_uint1 x173; - fiat_p224_addcarryx_u32(&x172, &x173, x171, 0x0, x152); + fiat_p224_addcarryx_u32(&x172, &x173, x171, x152, 0x0); uint32_t x174; fiat_p224_uint1 x175; - fiat_p224_addcarryx_u32(&x174, &x175, x173, 0x0, x154); + fiat_p224_addcarryx_u32(&x174, &x175, x173, x154, 0x0); uint32_t x176; fiat_p224_uint1 x177; - fiat_p224_addcarryx_u32(&x176, &x177, x175, 0x0, x162); + fiat_p224_addcarryx_u32(&x176, &x177, x175, x162, 0x0); uint32_t x178; uint32_t x179; fiat_p224_mulx_u32(&x178, &x179, x164, UINT32_C(0xffffffff)); @@ -2386,67 +2386,67 @@ static void fiat_p224_from_montgomery(uint32_t out1[7], const uint32_t arg1[7]) fiat_p224_mulx_u32(&x186, &x187, x178, UINT32_C(0xffffffff)); uint32_t x188; fiat_p224_uint1 x189; - fiat_p224_addcarryx_u32(&x188, &x189, 0x0, x184, x187); + fiat_p224_addcarryx_u32(&x188, &x189, 0x0, x187, x184); uint32_t x190; fiat_p224_uint1 x191; - fiat_p224_addcarryx_u32(&x190, &x191, x189, x182, x185); + fiat_p224_addcarryx_u32(&x190, &x191, x189, x185, x182); uint32_t x192; fiat_p224_uint1 x193; - fiat_p224_addcarryx_u32(&x192, &x193, x191, x180, x183); + fiat_p224_addcarryx_u32(&x192, &x193, x191, x183, x180); uint32_t x194; fiat_p224_uint1 x195; - fiat_p224_addcarryx_u32(&x194, &x195, 0x0, x178, x164); + fiat_p224_addcarryx_u32(&x194, &x195, 0x0, x164, x178); uint32_t x196; fiat_p224_uint1 x197; - fiat_p224_addcarryx_u32(&x196, &x197, x195, 0x0, x166); + fiat_p224_addcarryx_u32(&x196, &x197, x195, x166, 0x0); uint32_t x198; fiat_p224_uint1 x199; - fiat_p224_addcarryx_u32(&x198, &x199, x197, 0x0, x168); + fiat_p224_addcarryx_u32(&x198, &x199, x197, x168, 0x0); uint32_t x200; fiat_p224_uint1 x201; - fiat_p224_addcarryx_u32(&x200, &x201, x199, x186, x170); + fiat_p224_addcarryx_u32(&x200, &x201, x199, x170, x186); uint32_t x202; fiat_p224_uint1 x203; - fiat_p224_addcarryx_u32(&x202, &x203, x201, x188, x172); + fiat_p224_addcarryx_u32(&x202, &x203, x201, x172, x188); uint32_t x204; fiat_p224_uint1 x205; - fiat_p224_addcarryx_u32(&x204, &x205, x203, x190, x174); + fiat_p224_addcarryx_u32(&x204, &x205, x203, x174, x190); uint32_t x206; fiat_p224_uint1 x207; - fiat_p224_addcarryx_u32(&x206, &x207, x205, x192, x176); + fiat_p224_addcarryx_u32(&x206, &x207, x205, x176, x192); uint32_t x208; fiat_p224_uint1 x209; - fiat_p224_addcarryx_u32(&x208, &x209, x163, 0x0, 0x0); + fiat_p224_addcarryx_u32(&x208, &x209, x193, x181, 0x0); uint32_t x210; fiat_p224_uint1 x211; - fiat_p224_addcarryx_u32(&x210, &x211, x177, 0x0, (fiat_p224_uint1)x208); + fiat_p224_addcarryx_u32(&x210, &x211, x163, 0x0, 0x0); uint32_t x212; fiat_p224_uint1 x213; - fiat_p224_addcarryx_u32(&x212, &x213, x193, 0x0, x181); + fiat_p224_addcarryx_u32(&x212, &x213, x177, (fiat_p224_uint1)x210, 0x0); uint32_t x214; fiat_p224_uint1 x215; - fiat_p224_addcarryx_u32(&x214, &x215, x207, x212, x210); + fiat_p224_addcarryx_u32(&x214, &x215, x207, x212, x208); uint32_t x216; fiat_p224_uint1 x217; - fiat_p224_addcarryx_u32(&x216, &x217, 0x0, (arg1[5]), x196); + fiat_p224_addcarryx_u32(&x216, &x217, 0x0, x196, (arg1[5])); uint32_t x218; fiat_p224_uint1 x219; - fiat_p224_addcarryx_u32(&x218, &x219, x217, 0x0, x198); + fiat_p224_addcarryx_u32(&x218, &x219, x217, x198, 0x0); uint32_t x220; fiat_p224_uint1 x221; - fiat_p224_addcarryx_u32(&x220, &x221, x219, 0x0, x200); + fiat_p224_addcarryx_u32(&x220, &x221, x219, x200, 0x0); uint32_t x222; fiat_p224_uint1 x223; - fiat_p224_addcarryx_u32(&x222, &x223, x221, 0x0, x202); + fiat_p224_addcarryx_u32(&x222, &x223, x221, x202, 0x0); uint32_t x224; fiat_p224_uint1 x225; - fiat_p224_addcarryx_u32(&x224, &x225, x223, 0x0, x204); + fiat_p224_addcarryx_u32(&x224, &x225, x223, x204, 0x0); uint32_t x226; fiat_p224_uint1 x227; - fiat_p224_addcarryx_u32(&x226, &x227, x225, 0x0, x206); + fiat_p224_addcarryx_u32(&x226, &x227, x225, x206, 0x0); uint32_t x228; fiat_p224_uint1 x229; - fiat_p224_addcarryx_u32(&x228, &x229, x227, 0x0, x214); + fiat_p224_addcarryx_u32(&x228, &x229, x227, x214, 0x0); uint32_t x230; uint32_t x231; fiat_p224_mulx_u32(&x230, &x231, x216, UINT32_C(0xffffffff)); @@ -2464,67 +2464,67 @@ static void fiat_p224_from_montgomery(uint32_t out1[7], const uint32_t arg1[7]) fiat_p224_mulx_u32(&x238, &x239, x230, UINT32_C(0xffffffff)); uint32_t x240; fiat_p224_uint1 x241; - fiat_p224_addcarryx_u32(&x240, &x241, 0x0, x236, x239); + fiat_p224_addcarryx_u32(&x240, &x241, 0x0, x239, x236); uint32_t x242; fiat_p224_uint1 x243; - fiat_p224_addcarryx_u32(&x242, &x243, x241, x234, x237); + fiat_p224_addcarryx_u32(&x242, &x243, x241, x237, x234); uint32_t x244; fiat_p224_uint1 x245; - fiat_p224_addcarryx_u32(&x244, &x245, x243, x232, x235); + fiat_p224_addcarryx_u32(&x244, &x245, x243, x235, x232); uint32_t x246; fiat_p224_uint1 x247; - fiat_p224_addcarryx_u32(&x246, &x247, 0x0, x230, x216); + fiat_p224_addcarryx_u32(&x246, &x247, 0x0, x216, x230); uint32_t x248; fiat_p224_uint1 x249; - fiat_p224_addcarryx_u32(&x248, &x249, x247, 0x0, x218); + fiat_p224_addcarryx_u32(&x248, &x249, x247, x218, 0x0); uint32_t x250; fiat_p224_uint1 x251; - fiat_p224_addcarryx_u32(&x250, &x251, x249, 0x0, x220); + fiat_p224_addcarryx_u32(&x250, &x251, x249, x220, 0x0); uint32_t x252; fiat_p224_uint1 x253; - fiat_p224_addcarryx_u32(&x252, &x253, x251, x238, x222); + fiat_p224_addcarryx_u32(&x252, &x253, x251, x222, x238); uint32_t x254; fiat_p224_uint1 x255; - fiat_p224_addcarryx_u32(&x254, &x255, x253, x240, x224); + fiat_p224_addcarryx_u32(&x254, &x255, x253, x224, x240); uint32_t x256; fiat_p224_uint1 x257; - fiat_p224_addcarryx_u32(&x256, &x257, x255, x242, x226); + fiat_p224_addcarryx_u32(&x256, &x257, x255, x226, x242); uint32_t x258; fiat_p224_uint1 x259; - fiat_p224_addcarryx_u32(&x258, &x259, x257, x244, x228); + fiat_p224_addcarryx_u32(&x258, &x259, x257, x228, x244); uint32_t x260; fiat_p224_uint1 x261; - fiat_p224_addcarryx_u32(&x260, &x261, x215, 0x0, 0x0); + fiat_p224_addcarryx_u32(&x260, &x261, x245, x233, 0x0); uint32_t x262; fiat_p224_uint1 x263; - fiat_p224_addcarryx_u32(&x262, &x263, x229, 0x0, (fiat_p224_uint1)x260); + fiat_p224_addcarryx_u32(&x262, &x263, x215, 0x0, 0x0); uint32_t x264; fiat_p224_uint1 x265; - fiat_p224_addcarryx_u32(&x264, &x265, x245, 0x0, x233); + fiat_p224_addcarryx_u32(&x264, &x265, x229, (fiat_p224_uint1)x262, 0x0); uint32_t x266; fiat_p224_uint1 x267; - fiat_p224_addcarryx_u32(&x266, &x267, x259, x264, x262); + fiat_p224_addcarryx_u32(&x266, &x267, x259, x264, x260); uint32_t x268; fiat_p224_uint1 x269; - fiat_p224_addcarryx_u32(&x268, &x269, 0x0, (arg1[6]), x248); + fiat_p224_addcarryx_u32(&x268, &x269, 0x0, x248, (arg1[6])); uint32_t x270; fiat_p224_uint1 x271; - fiat_p224_addcarryx_u32(&x270, &x271, x269, 0x0, x250); + fiat_p224_addcarryx_u32(&x270, &x271, x269, x250, 0x0); uint32_t x272; fiat_p224_uint1 x273; - fiat_p224_addcarryx_u32(&x272, &x273, x271, 0x0, x252); + fiat_p224_addcarryx_u32(&x272, &x273, x271, x252, 0x0); uint32_t x274; fiat_p224_uint1 x275; - fiat_p224_addcarryx_u32(&x274, &x275, x273, 0x0, x254); + fiat_p224_addcarryx_u32(&x274, &x275, x273, x254, 0x0); uint32_t x276; fiat_p224_uint1 x277; - fiat_p224_addcarryx_u32(&x276, &x277, x275, 0x0, x256); + fiat_p224_addcarryx_u32(&x276, &x277, x275, x256, 0x0); uint32_t x278; fiat_p224_uint1 x279; - fiat_p224_addcarryx_u32(&x278, &x279, x277, 0x0, x258); + fiat_p224_addcarryx_u32(&x278, &x279, x277, x258, 0x0); uint32_t x280; fiat_p224_uint1 x281; - fiat_p224_addcarryx_u32(&x280, &x281, x279, 0x0, x266); + fiat_p224_addcarryx_u32(&x280, &x281, x279, x266, 0x0); uint32_t x282; uint32_t x283; fiat_p224_mulx_u32(&x282, &x283, x268, UINT32_C(0xffffffff)); @@ -2542,46 +2542,46 @@ static void fiat_p224_from_montgomery(uint32_t out1[7], const uint32_t arg1[7]) fiat_p224_mulx_u32(&x290, &x291, x282, UINT32_C(0xffffffff)); uint32_t x292; fiat_p224_uint1 x293; - fiat_p224_addcarryx_u32(&x292, &x293, 0x0, x288, x291); + fiat_p224_addcarryx_u32(&x292, &x293, 0x0, x291, x288); uint32_t x294; fiat_p224_uint1 x295; - fiat_p224_addcarryx_u32(&x294, &x295, x293, x286, x289); + fiat_p224_addcarryx_u32(&x294, &x295, x293, x289, x286); uint32_t x296; fiat_p224_uint1 x297; - fiat_p224_addcarryx_u32(&x296, &x297, x295, x284, x287); + fiat_p224_addcarryx_u32(&x296, &x297, x295, x287, x284); uint32_t x298; fiat_p224_uint1 x299; - fiat_p224_addcarryx_u32(&x298, &x299, 0x0, x282, x268); + fiat_p224_addcarryx_u32(&x298, &x299, 0x0, x268, x282); uint32_t x300; fiat_p224_uint1 x301; - fiat_p224_addcarryx_u32(&x300, &x301, x299, 0x0, x270); + fiat_p224_addcarryx_u32(&x300, &x301, x299, x270, 0x0); uint32_t x302; fiat_p224_uint1 x303; - fiat_p224_addcarryx_u32(&x302, &x303, x301, 0x0, x272); + fiat_p224_addcarryx_u32(&x302, &x303, x301, x272, 0x0); uint32_t x304; fiat_p224_uint1 x305; - fiat_p224_addcarryx_u32(&x304, &x305, x303, x290, x274); + fiat_p224_addcarryx_u32(&x304, &x305, x303, x274, x290); uint32_t x306; fiat_p224_uint1 x307; - fiat_p224_addcarryx_u32(&x306, &x307, x305, x292, x276); + fiat_p224_addcarryx_u32(&x306, &x307, x305, x276, x292); uint32_t x308; fiat_p224_uint1 x309; - fiat_p224_addcarryx_u32(&x308, &x309, x307, x294, x278); + fiat_p224_addcarryx_u32(&x308, &x309, x307, x278, x294); uint32_t x310; fiat_p224_uint1 x311; - fiat_p224_addcarryx_u32(&x310, &x311, x309, x296, x280); + fiat_p224_addcarryx_u32(&x310, &x311, x309, x280, x296); uint32_t x312; fiat_p224_uint1 x313; - fiat_p224_addcarryx_u32(&x312, &x313, x267, 0x0, 0x0); + fiat_p224_addcarryx_u32(&x312, &x313, x297, x285, 0x0); uint32_t x314; fiat_p224_uint1 x315; - fiat_p224_addcarryx_u32(&x314, &x315, x281, 0x0, (fiat_p224_uint1)x312); + fiat_p224_addcarryx_u32(&x314, &x315, x267, 0x0, 0x0); uint32_t x316; fiat_p224_uint1 x317; - fiat_p224_addcarryx_u32(&x316, &x317, x297, 0x0, x285); + fiat_p224_addcarryx_u32(&x316, &x317, x281, (fiat_p224_uint1)x314, 0x0); uint32_t x318; fiat_p224_uint1 x319; - fiat_p224_addcarryx_u32(&x318, &x319, x311, x316, x314); + fiat_p224_addcarryx_u32(&x318, &x319, x311, x316, x312); uint32_t x320; fiat_p224_uint1 x321; fiat_p224_subborrowx_u32(&x320, &x321, 0x0, x300, 0x1); diff --git a/p224_64.c b/p224_64.c index 0dd8edb1c..d862e5802 100644 --- a/p224_64.c +++ b/p224_64.c @@ -136,16 +136,16 @@ static void fiat_p224_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p224_mulx_u64(&x11, &x12, x4, (arg2[0])); uint64_t x13; fiat_p224_uint1 x14; - fiat_p224_addcarryx_u64(&x13, &x14, 0x0, x9, x12); + fiat_p224_addcarryx_u64(&x13, &x14, 0x0, x12, x9); uint64_t x15; fiat_p224_uint1 x16; - fiat_p224_addcarryx_u64(&x15, &x16, x14, x7, x10); + fiat_p224_addcarryx_u64(&x15, &x16, x14, x10, x7); uint64_t x17; fiat_p224_uint1 x18; - fiat_p224_addcarryx_u64(&x17, &x18, x16, x5, x8); + fiat_p224_addcarryx_u64(&x17, &x18, x16, x8, x5); uint64_t x19; fiat_p224_uint1 x20; - fiat_p224_addcarryx_u64(&x19, &x20, x18, 0x0, x6); + fiat_p224_addcarryx_u64(&x19, &x20, x18, x6, 0x0); uint64_t x21; uint64_t x22; fiat_p224_mulx_u64(&x21, &x22, x11, UINT64_C(0xffffffffffffffff)); @@ -160,28 +160,28 @@ static void fiat_p224_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p224_mulx_u64(&x27, &x28, x21, UINT64_C(0xffffffff00000000)); uint64_t x29; fiat_p224_uint1 x30; - fiat_p224_addcarryx_u64(&x29, &x30, 0x0, x25, x28); + fiat_p224_addcarryx_u64(&x29, &x30, 0x0, x28, x25); uint64_t x31; fiat_p224_uint1 x32; - fiat_p224_addcarryx_u64(&x31, &x32, x30, x23, x26); + fiat_p224_addcarryx_u64(&x31, &x32, x30, x26, x23); uint64_t x33; fiat_p224_uint1 x34; - fiat_p224_addcarryx_u64(&x33, &x34, x32, 0x0, x24); + fiat_p224_addcarryx_u64(&x33, &x34, x32, x24, 0x0); uint64_t x35; fiat_p224_uint1 x36; - fiat_p224_addcarryx_u64(&x35, &x36, 0x0, x21, x11); + fiat_p224_addcarryx_u64(&x35, &x36, 0x0, x11, x21); uint64_t x37; fiat_p224_uint1 x38; - fiat_p224_addcarryx_u64(&x37, &x38, x36, x27, x13); + fiat_p224_addcarryx_u64(&x37, &x38, x36, x13, x27); uint64_t x39; fiat_p224_uint1 x40; - fiat_p224_addcarryx_u64(&x39, &x40, x38, x29, x15); + fiat_p224_addcarryx_u64(&x39, &x40, x38, x15, x29); uint64_t x41; fiat_p224_uint1 x42; - fiat_p224_addcarryx_u64(&x41, &x42, x40, x31, x17); + fiat_p224_addcarryx_u64(&x41, &x42, x40, x17, x31); uint64_t x43; fiat_p224_uint1 x44; - fiat_p224_addcarryx_u64(&x43, &x44, x42, x33, x19); + fiat_p224_addcarryx_u64(&x43, &x44, x42, x19, x33); uint64_t x45; fiat_p224_uint1 x46; fiat_p224_addcarryx_u64(&x45, &x46, x44, 0x0, 0x0); @@ -199,31 +199,31 @@ static void fiat_p224_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p224_mulx_u64(&x53, &x54, x1, (arg2[0])); uint64_t x55; fiat_p224_uint1 x56; - fiat_p224_addcarryx_u64(&x55, &x56, 0x0, x51, x54); + fiat_p224_addcarryx_u64(&x55, &x56, 0x0, x54, x51); uint64_t x57; fiat_p224_uint1 x58; - fiat_p224_addcarryx_u64(&x57, &x58, x56, x49, x52); + fiat_p224_addcarryx_u64(&x57, &x58, x56, x52, x49); uint64_t x59; fiat_p224_uint1 x60; - fiat_p224_addcarryx_u64(&x59, &x60, x58, x47, x50); + fiat_p224_addcarryx_u64(&x59, &x60, x58, x50, x47); uint64_t x61; fiat_p224_uint1 x62; - fiat_p224_addcarryx_u64(&x61, &x62, x60, 0x0, x48); + fiat_p224_addcarryx_u64(&x61, &x62, x60, x48, 0x0); uint64_t x63; fiat_p224_uint1 x64; - fiat_p224_addcarryx_u64(&x63, &x64, 0x0, x53, x37); + fiat_p224_addcarryx_u64(&x63, &x64, 0x0, x37, x53); uint64_t x65; fiat_p224_uint1 x66; - fiat_p224_addcarryx_u64(&x65, &x66, x64, x55, x39); + fiat_p224_addcarryx_u64(&x65, &x66, x64, x39, x55); uint64_t x67; fiat_p224_uint1 x68; - fiat_p224_addcarryx_u64(&x67, &x68, x66, x57, x41); + fiat_p224_addcarryx_u64(&x67, &x68, x66, x41, x57); uint64_t x69; fiat_p224_uint1 x70; - fiat_p224_addcarryx_u64(&x69, &x70, x68, x59, x43); + fiat_p224_addcarryx_u64(&x69, &x70, x68, x43, x59); uint64_t x71; fiat_p224_uint1 x72; - fiat_p224_addcarryx_u64(&x71, &x72, x70, x61, (fiat_p224_uint1)x45); + fiat_p224_addcarryx_u64(&x71, &x72, x70, (fiat_p224_uint1)x45, x61); uint64_t x73; uint64_t x74; fiat_p224_mulx_u64(&x73, &x74, x63, UINT64_C(0xffffffffffffffff)); @@ -238,31 +238,31 @@ static void fiat_p224_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p224_mulx_u64(&x79, &x80, x73, UINT64_C(0xffffffff00000000)); uint64_t x81; fiat_p224_uint1 x82; - fiat_p224_addcarryx_u64(&x81, &x82, 0x0, x77, x80); + fiat_p224_addcarryx_u64(&x81, &x82, 0x0, x80, x77); uint64_t x83; fiat_p224_uint1 x84; - fiat_p224_addcarryx_u64(&x83, &x84, x82, x75, x78); + fiat_p224_addcarryx_u64(&x83, &x84, x82, x78, x75); uint64_t x85; fiat_p224_uint1 x86; - fiat_p224_addcarryx_u64(&x85, &x86, x84, 0x0, x76); + fiat_p224_addcarryx_u64(&x85, &x86, x84, x76, 0x0); uint64_t x87; fiat_p224_uint1 x88; - fiat_p224_addcarryx_u64(&x87, &x88, 0x0, x73, x63); + fiat_p224_addcarryx_u64(&x87, &x88, 0x0, x63, x73); uint64_t x89; fiat_p224_uint1 x90; - fiat_p224_addcarryx_u64(&x89, &x90, x88, x79, x65); + fiat_p224_addcarryx_u64(&x89, &x90, x88, x65, x79); uint64_t x91; fiat_p224_uint1 x92; - fiat_p224_addcarryx_u64(&x91, &x92, x90, x81, x67); + fiat_p224_addcarryx_u64(&x91, &x92, x90, x67, x81); uint64_t x93; fiat_p224_uint1 x94; - fiat_p224_addcarryx_u64(&x93, &x94, x92, x83, x69); + fiat_p224_addcarryx_u64(&x93, &x94, x92, x69, x83); uint64_t x95; fiat_p224_uint1 x96; - fiat_p224_addcarryx_u64(&x95, &x96, x94, x85, x71); + fiat_p224_addcarryx_u64(&x95, &x96, x94, x71, x85); uint64_t x97; fiat_p224_uint1 x98; - fiat_p224_addcarryx_u64(&x97, &x98, x96, 0x0, x72); + fiat_p224_addcarryx_u64(&x97, &x98, x96, x72, 0x0); uint64_t x99; uint64_t x100; fiat_p224_mulx_u64(&x99, &x100, x2, (arg2[3])); @@ -277,31 +277,31 @@ static void fiat_p224_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p224_mulx_u64(&x105, &x106, x2, (arg2[0])); uint64_t x107; fiat_p224_uint1 x108; - fiat_p224_addcarryx_u64(&x107, &x108, 0x0, x103, x106); + fiat_p224_addcarryx_u64(&x107, &x108, 0x0, x106, x103); uint64_t x109; fiat_p224_uint1 x110; - fiat_p224_addcarryx_u64(&x109, &x110, x108, x101, x104); + fiat_p224_addcarryx_u64(&x109, &x110, x108, x104, x101); uint64_t x111; fiat_p224_uint1 x112; - fiat_p224_addcarryx_u64(&x111, &x112, x110, x99, x102); + fiat_p224_addcarryx_u64(&x111, &x112, x110, x102, x99); uint64_t x113; fiat_p224_uint1 x114; - fiat_p224_addcarryx_u64(&x113, &x114, x112, 0x0, x100); + fiat_p224_addcarryx_u64(&x113, &x114, x112, x100, 0x0); uint64_t x115; fiat_p224_uint1 x116; - fiat_p224_addcarryx_u64(&x115, &x116, 0x0, x105, x89); + fiat_p224_addcarryx_u64(&x115, &x116, 0x0, x89, x105); uint64_t x117; fiat_p224_uint1 x118; - fiat_p224_addcarryx_u64(&x117, &x118, x116, x107, x91); + fiat_p224_addcarryx_u64(&x117, &x118, x116, x91, x107); uint64_t x119; fiat_p224_uint1 x120; - fiat_p224_addcarryx_u64(&x119, &x120, x118, x109, x93); + fiat_p224_addcarryx_u64(&x119, &x120, x118, x93, x109); uint64_t x121; fiat_p224_uint1 x122; - fiat_p224_addcarryx_u64(&x121, &x122, x120, x111, x95); + fiat_p224_addcarryx_u64(&x121, &x122, x120, x95, x111); uint64_t x123; fiat_p224_uint1 x124; - fiat_p224_addcarryx_u64(&x123, &x124, x122, x113, x97); + fiat_p224_addcarryx_u64(&x123, &x124, x122, x97, x113); uint64_t x125; uint64_t x126; fiat_p224_mulx_u64(&x125, &x126, x115, UINT64_C(0xffffffffffffffff)); @@ -316,31 +316,31 @@ static void fiat_p224_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p224_mulx_u64(&x131, &x132, x125, UINT64_C(0xffffffff00000000)); uint64_t x133; fiat_p224_uint1 x134; - fiat_p224_addcarryx_u64(&x133, &x134, 0x0, x129, x132); + fiat_p224_addcarryx_u64(&x133, &x134, 0x0, x132, x129); uint64_t x135; fiat_p224_uint1 x136; - fiat_p224_addcarryx_u64(&x135, &x136, x134, x127, x130); + fiat_p224_addcarryx_u64(&x135, &x136, x134, x130, x127); uint64_t x137; fiat_p224_uint1 x138; - fiat_p224_addcarryx_u64(&x137, &x138, x136, 0x0, x128); + fiat_p224_addcarryx_u64(&x137, &x138, x136, x128, 0x0); uint64_t x139; fiat_p224_uint1 x140; - fiat_p224_addcarryx_u64(&x139, &x140, 0x0, x125, x115); + fiat_p224_addcarryx_u64(&x139, &x140, 0x0, x115, x125); uint64_t x141; fiat_p224_uint1 x142; - fiat_p224_addcarryx_u64(&x141, &x142, x140, x131, x117); + fiat_p224_addcarryx_u64(&x141, &x142, x140, x117, x131); uint64_t x143; fiat_p224_uint1 x144; - fiat_p224_addcarryx_u64(&x143, &x144, x142, x133, x119); + fiat_p224_addcarryx_u64(&x143, &x144, x142, x119, x133); uint64_t x145; fiat_p224_uint1 x146; - fiat_p224_addcarryx_u64(&x145, &x146, x144, x135, x121); + fiat_p224_addcarryx_u64(&x145, &x146, x144, x121, x135); uint64_t x147; fiat_p224_uint1 x148; - fiat_p224_addcarryx_u64(&x147, &x148, x146, x137, x123); + fiat_p224_addcarryx_u64(&x147, &x148, x146, x123, x137); uint64_t x149; fiat_p224_uint1 x150; - fiat_p224_addcarryx_u64(&x149, &x150, x148, 0x0, x124); + fiat_p224_addcarryx_u64(&x149, &x150, x148, x124, 0x0); uint64_t x151; uint64_t x152; fiat_p224_mulx_u64(&x151, &x152, x3, (arg2[3])); @@ -355,31 +355,31 @@ static void fiat_p224_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p224_mulx_u64(&x157, &x158, x3, (arg2[0])); uint64_t x159; fiat_p224_uint1 x160; - fiat_p224_addcarryx_u64(&x159, &x160, 0x0, x155, x158); + fiat_p224_addcarryx_u64(&x159, &x160, 0x0, x158, x155); uint64_t x161; fiat_p224_uint1 x162; - fiat_p224_addcarryx_u64(&x161, &x162, x160, x153, x156); + fiat_p224_addcarryx_u64(&x161, &x162, x160, x156, x153); uint64_t x163; fiat_p224_uint1 x164; - fiat_p224_addcarryx_u64(&x163, &x164, x162, x151, x154); + fiat_p224_addcarryx_u64(&x163, &x164, x162, x154, x151); uint64_t x165; fiat_p224_uint1 x166; - fiat_p224_addcarryx_u64(&x165, &x166, x164, 0x0, x152); + fiat_p224_addcarryx_u64(&x165, &x166, x164, x152, 0x0); uint64_t x167; fiat_p224_uint1 x168; - fiat_p224_addcarryx_u64(&x167, &x168, 0x0, x157, x141); + fiat_p224_addcarryx_u64(&x167, &x168, 0x0, x141, x157); uint64_t x169; fiat_p224_uint1 x170; - fiat_p224_addcarryx_u64(&x169, &x170, x168, x159, x143); + fiat_p224_addcarryx_u64(&x169, &x170, x168, x143, x159); uint64_t x171; fiat_p224_uint1 x172; - fiat_p224_addcarryx_u64(&x171, &x172, x170, x161, x145); + fiat_p224_addcarryx_u64(&x171, &x172, x170, x145, x161); uint64_t x173; fiat_p224_uint1 x174; - fiat_p224_addcarryx_u64(&x173, &x174, x172, x163, x147); + fiat_p224_addcarryx_u64(&x173, &x174, x172, x147, x163); uint64_t x175; fiat_p224_uint1 x176; - fiat_p224_addcarryx_u64(&x175, &x176, x174, x165, x149); + fiat_p224_addcarryx_u64(&x175, &x176, x174, x149, x165); uint64_t x177; uint64_t x178; fiat_p224_mulx_u64(&x177, &x178, x167, UINT64_C(0xffffffffffffffff)); @@ -394,31 +394,31 @@ static void fiat_p224_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p224_mulx_u64(&x183, &x184, x177, UINT64_C(0xffffffff00000000)); uint64_t x185; fiat_p224_uint1 x186; - fiat_p224_addcarryx_u64(&x185, &x186, 0x0, x181, x184); + fiat_p224_addcarryx_u64(&x185, &x186, 0x0, x184, x181); uint64_t x187; fiat_p224_uint1 x188; - fiat_p224_addcarryx_u64(&x187, &x188, x186, x179, x182); + fiat_p224_addcarryx_u64(&x187, &x188, x186, x182, x179); uint64_t x189; fiat_p224_uint1 x190; - fiat_p224_addcarryx_u64(&x189, &x190, x188, 0x0, x180); + fiat_p224_addcarryx_u64(&x189, &x190, x188, x180, 0x0); uint64_t x191; fiat_p224_uint1 x192; - fiat_p224_addcarryx_u64(&x191, &x192, 0x0, x177, x167); + fiat_p224_addcarryx_u64(&x191, &x192, 0x0, x167, x177); uint64_t x193; fiat_p224_uint1 x194; - fiat_p224_addcarryx_u64(&x193, &x194, x192, x183, x169); + fiat_p224_addcarryx_u64(&x193, &x194, x192, x169, x183); uint64_t x195; fiat_p224_uint1 x196; - fiat_p224_addcarryx_u64(&x195, &x196, x194, x185, x171); + fiat_p224_addcarryx_u64(&x195, &x196, x194, x171, x185); uint64_t x197; fiat_p224_uint1 x198; - fiat_p224_addcarryx_u64(&x197, &x198, x196, x187, x173); + fiat_p224_addcarryx_u64(&x197, &x198, x196, x173, x187); uint64_t x199; fiat_p224_uint1 x200; - fiat_p224_addcarryx_u64(&x199, &x200, x198, x189, x175); + fiat_p224_addcarryx_u64(&x199, &x200, x198, x175, x189); uint64_t x201; fiat_p224_uint1 x202; - fiat_p224_addcarryx_u64(&x201, &x202, x200, 0x0, x176); + fiat_p224_addcarryx_u64(&x201, &x202, x200, x176, 0x0); uint64_t x203; fiat_p224_uint1 x204; fiat_p224_subborrowx_u64(&x203, &x204, 0x0, x193, 0x1); @@ -480,16 +480,16 @@ static void fiat_p224_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p224_mulx_u64(&x11, &x12, x4, (arg1[0])); uint64_t x13; fiat_p224_uint1 x14; - fiat_p224_addcarryx_u64(&x13, &x14, 0x0, x9, x12); + fiat_p224_addcarryx_u64(&x13, &x14, 0x0, x12, x9); uint64_t x15; fiat_p224_uint1 x16; - fiat_p224_addcarryx_u64(&x15, &x16, x14, x7, x10); + fiat_p224_addcarryx_u64(&x15, &x16, x14, x10, x7); uint64_t x17; fiat_p224_uint1 x18; - fiat_p224_addcarryx_u64(&x17, &x18, x16, x5, x8); + fiat_p224_addcarryx_u64(&x17, &x18, x16, x8, x5); uint64_t x19; fiat_p224_uint1 x20; - fiat_p224_addcarryx_u64(&x19, &x20, x18, 0x0, x6); + fiat_p224_addcarryx_u64(&x19, &x20, x18, x6, 0x0); uint64_t x21; uint64_t x22; fiat_p224_mulx_u64(&x21, &x22, x11, UINT64_C(0xffffffffffffffff)); @@ -504,28 +504,28 @@ static void fiat_p224_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p224_mulx_u64(&x27, &x28, x21, UINT64_C(0xffffffff00000000)); uint64_t x29; fiat_p224_uint1 x30; - fiat_p224_addcarryx_u64(&x29, &x30, 0x0, x25, x28); + fiat_p224_addcarryx_u64(&x29, &x30, 0x0, x28, x25); uint64_t x31; fiat_p224_uint1 x32; - fiat_p224_addcarryx_u64(&x31, &x32, x30, x23, x26); + fiat_p224_addcarryx_u64(&x31, &x32, x30, x26, x23); uint64_t x33; fiat_p224_uint1 x34; - fiat_p224_addcarryx_u64(&x33, &x34, x32, 0x0, x24); + fiat_p224_addcarryx_u64(&x33, &x34, x32, x24, 0x0); uint64_t x35; fiat_p224_uint1 x36; - fiat_p224_addcarryx_u64(&x35, &x36, 0x0, x21, x11); + fiat_p224_addcarryx_u64(&x35, &x36, 0x0, x11, x21); uint64_t x37; fiat_p224_uint1 x38; - fiat_p224_addcarryx_u64(&x37, &x38, x36, x27, x13); + fiat_p224_addcarryx_u64(&x37, &x38, x36, x13, x27); uint64_t x39; fiat_p224_uint1 x40; - fiat_p224_addcarryx_u64(&x39, &x40, x38, x29, x15); + fiat_p224_addcarryx_u64(&x39, &x40, x38, x15, x29); uint64_t x41; fiat_p224_uint1 x42; - fiat_p224_addcarryx_u64(&x41, &x42, x40, x31, x17); + fiat_p224_addcarryx_u64(&x41, &x42, x40, x17, x31); uint64_t x43; fiat_p224_uint1 x44; - fiat_p224_addcarryx_u64(&x43, &x44, x42, x33, x19); + fiat_p224_addcarryx_u64(&x43, &x44, x42, x19, x33); uint64_t x45; fiat_p224_uint1 x46; fiat_p224_addcarryx_u64(&x45, &x46, x44, 0x0, 0x0); @@ -543,31 +543,31 @@ static void fiat_p224_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p224_mulx_u64(&x53, &x54, x1, (arg1[0])); uint64_t x55; fiat_p224_uint1 x56; - fiat_p224_addcarryx_u64(&x55, &x56, 0x0, x51, x54); + fiat_p224_addcarryx_u64(&x55, &x56, 0x0, x54, x51); uint64_t x57; fiat_p224_uint1 x58; - fiat_p224_addcarryx_u64(&x57, &x58, x56, x49, x52); + fiat_p224_addcarryx_u64(&x57, &x58, x56, x52, x49); uint64_t x59; fiat_p224_uint1 x60; - fiat_p224_addcarryx_u64(&x59, &x60, x58, x47, x50); + fiat_p224_addcarryx_u64(&x59, &x60, x58, x50, x47); uint64_t x61; fiat_p224_uint1 x62; - fiat_p224_addcarryx_u64(&x61, &x62, x60, 0x0, x48); + fiat_p224_addcarryx_u64(&x61, &x62, x60, x48, 0x0); uint64_t x63; fiat_p224_uint1 x64; - fiat_p224_addcarryx_u64(&x63, &x64, 0x0, x53, x37); + fiat_p224_addcarryx_u64(&x63, &x64, 0x0, x37, x53); uint64_t x65; fiat_p224_uint1 x66; - fiat_p224_addcarryx_u64(&x65, &x66, x64, x55, x39); + fiat_p224_addcarryx_u64(&x65, &x66, x64, x39, x55); uint64_t x67; fiat_p224_uint1 x68; - fiat_p224_addcarryx_u64(&x67, &x68, x66, x57, x41); + fiat_p224_addcarryx_u64(&x67, &x68, x66, x41, x57); uint64_t x69; fiat_p224_uint1 x70; - fiat_p224_addcarryx_u64(&x69, &x70, x68, x59, x43); + fiat_p224_addcarryx_u64(&x69, &x70, x68, x43, x59); uint64_t x71; fiat_p224_uint1 x72; - fiat_p224_addcarryx_u64(&x71, &x72, x70, x61, (fiat_p224_uint1)x45); + fiat_p224_addcarryx_u64(&x71, &x72, x70, (fiat_p224_uint1)x45, x61); uint64_t x73; uint64_t x74; fiat_p224_mulx_u64(&x73, &x74, x63, UINT64_C(0xffffffffffffffff)); @@ -582,31 +582,31 @@ static void fiat_p224_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p224_mulx_u64(&x79, &x80, x73, UINT64_C(0xffffffff00000000)); uint64_t x81; fiat_p224_uint1 x82; - fiat_p224_addcarryx_u64(&x81, &x82, 0x0, x77, x80); + fiat_p224_addcarryx_u64(&x81, &x82, 0x0, x80, x77); uint64_t x83; fiat_p224_uint1 x84; - fiat_p224_addcarryx_u64(&x83, &x84, x82, x75, x78); + fiat_p224_addcarryx_u64(&x83, &x84, x82, x78, x75); uint64_t x85; fiat_p224_uint1 x86; - fiat_p224_addcarryx_u64(&x85, &x86, x84, 0x0, x76); + fiat_p224_addcarryx_u64(&x85, &x86, x84, x76, 0x0); uint64_t x87; fiat_p224_uint1 x88; - fiat_p224_addcarryx_u64(&x87, &x88, 0x0, x73, x63); + fiat_p224_addcarryx_u64(&x87, &x88, 0x0, x63, x73); uint64_t x89; fiat_p224_uint1 x90; - fiat_p224_addcarryx_u64(&x89, &x90, x88, x79, x65); + fiat_p224_addcarryx_u64(&x89, &x90, x88, x65, x79); uint64_t x91; fiat_p224_uint1 x92; - fiat_p224_addcarryx_u64(&x91, &x92, x90, x81, x67); + fiat_p224_addcarryx_u64(&x91, &x92, x90, x67, x81); uint64_t x93; fiat_p224_uint1 x94; - fiat_p224_addcarryx_u64(&x93, &x94, x92, x83, x69); + fiat_p224_addcarryx_u64(&x93, &x94, x92, x69, x83); uint64_t x95; fiat_p224_uint1 x96; - fiat_p224_addcarryx_u64(&x95, &x96, x94, x85, x71); + fiat_p224_addcarryx_u64(&x95, &x96, x94, x71, x85); uint64_t x97; fiat_p224_uint1 x98; - fiat_p224_addcarryx_u64(&x97, &x98, x96, 0x0, x72); + fiat_p224_addcarryx_u64(&x97, &x98, x96, x72, 0x0); uint64_t x99; uint64_t x100; fiat_p224_mulx_u64(&x99, &x100, x2, (arg1[3])); @@ -621,31 +621,31 @@ static void fiat_p224_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p224_mulx_u64(&x105, &x106, x2, (arg1[0])); uint64_t x107; fiat_p224_uint1 x108; - fiat_p224_addcarryx_u64(&x107, &x108, 0x0, x103, x106); + fiat_p224_addcarryx_u64(&x107, &x108, 0x0, x106, x103); uint64_t x109; fiat_p224_uint1 x110; - fiat_p224_addcarryx_u64(&x109, &x110, x108, x101, x104); + fiat_p224_addcarryx_u64(&x109, &x110, x108, x104, x101); uint64_t x111; fiat_p224_uint1 x112; - fiat_p224_addcarryx_u64(&x111, &x112, x110, x99, x102); + fiat_p224_addcarryx_u64(&x111, &x112, x110, x102, x99); uint64_t x113; fiat_p224_uint1 x114; - fiat_p224_addcarryx_u64(&x113, &x114, x112, 0x0, x100); + fiat_p224_addcarryx_u64(&x113, &x114, x112, x100, 0x0); uint64_t x115; fiat_p224_uint1 x116; - fiat_p224_addcarryx_u64(&x115, &x116, 0x0, x105, x89); + fiat_p224_addcarryx_u64(&x115, &x116, 0x0, x89, x105); uint64_t x117; fiat_p224_uint1 x118; - fiat_p224_addcarryx_u64(&x117, &x118, x116, x107, x91); + fiat_p224_addcarryx_u64(&x117, &x118, x116, x91, x107); uint64_t x119; fiat_p224_uint1 x120; - fiat_p224_addcarryx_u64(&x119, &x120, x118, x109, x93); + fiat_p224_addcarryx_u64(&x119, &x120, x118, x93, x109); uint64_t x121; fiat_p224_uint1 x122; - fiat_p224_addcarryx_u64(&x121, &x122, x120, x111, x95); + fiat_p224_addcarryx_u64(&x121, &x122, x120, x95, x111); uint64_t x123; fiat_p224_uint1 x124; - fiat_p224_addcarryx_u64(&x123, &x124, x122, x113, x97); + fiat_p224_addcarryx_u64(&x123, &x124, x122, x97, x113); uint64_t x125; uint64_t x126; fiat_p224_mulx_u64(&x125, &x126, x115, UINT64_C(0xffffffffffffffff)); @@ -660,31 +660,31 @@ static void fiat_p224_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p224_mulx_u64(&x131, &x132, x125, UINT64_C(0xffffffff00000000)); uint64_t x133; fiat_p224_uint1 x134; - fiat_p224_addcarryx_u64(&x133, &x134, 0x0, x129, x132); + fiat_p224_addcarryx_u64(&x133, &x134, 0x0, x132, x129); uint64_t x135; fiat_p224_uint1 x136; - fiat_p224_addcarryx_u64(&x135, &x136, x134, x127, x130); + fiat_p224_addcarryx_u64(&x135, &x136, x134, x130, x127); uint64_t x137; fiat_p224_uint1 x138; - fiat_p224_addcarryx_u64(&x137, &x138, x136, 0x0, x128); + fiat_p224_addcarryx_u64(&x137, &x138, x136, x128, 0x0); uint64_t x139; fiat_p224_uint1 x140; - fiat_p224_addcarryx_u64(&x139, &x140, 0x0, x125, x115); + fiat_p224_addcarryx_u64(&x139, &x140, 0x0, x115, x125); uint64_t x141; fiat_p224_uint1 x142; - fiat_p224_addcarryx_u64(&x141, &x142, x140, x131, x117); + fiat_p224_addcarryx_u64(&x141, &x142, x140, x117, x131); uint64_t x143; fiat_p224_uint1 x144; - fiat_p224_addcarryx_u64(&x143, &x144, x142, x133, x119); + fiat_p224_addcarryx_u64(&x143, &x144, x142, x119, x133); uint64_t x145; fiat_p224_uint1 x146; - fiat_p224_addcarryx_u64(&x145, &x146, x144, x135, x121); + fiat_p224_addcarryx_u64(&x145, &x146, x144, x121, x135); uint64_t x147; fiat_p224_uint1 x148; - fiat_p224_addcarryx_u64(&x147, &x148, x146, x137, x123); + fiat_p224_addcarryx_u64(&x147, &x148, x146, x123, x137); uint64_t x149; fiat_p224_uint1 x150; - fiat_p224_addcarryx_u64(&x149, &x150, x148, 0x0, x124); + fiat_p224_addcarryx_u64(&x149, &x150, x148, x124, 0x0); uint64_t x151; uint64_t x152; fiat_p224_mulx_u64(&x151, &x152, x3, (arg1[3])); @@ -699,31 +699,31 @@ static void fiat_p224_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p224_mulx_u64(&x157, &x158, x3, (arg1[0])); uint64_t x159; fiat_p224_uint1 x160; - fiat_p224_addcarryx_u64(&x159, &x160, 0x0, x155, x158); + fiat_p224_addcarryx_u64(&x159, &x160, 0x0, x158, x155); uint64_t x161; fiat_p224_uint1 x162; - fiat_p224_addcarryx_u64(&x161, &x162, x160, x153, x156); + fiat_p224_addcarryx_u64(&x161, &x162, x160, x156, x153); uint64_t x163; fiat_p224_uint1 x164; - fiat_p224_addcarryx_u64(&x163, &x164, x162, x151, x154); + fiat_p224_addcarryx_u64(&x163, &x164, x162, x154, x151); uint64_t x165; fiat_p224_uint1 x166; - fiat_p224_addcarryx_u64(&x165, &x166, x164, 0x0, x152); + fiat_p224_addcarryx_u64(&x165, &x166, x164, x152, 0x0); uint64_t x167; fiat_p224_uint1 x168; - fiat_p224_addcarryx_u64(&x167, &x168, 0x0, x157, x141); + fiat_p224_addcarryx_u64(&x167, &x168, 0x0, x141, x157); uint64_t x169; fiat_p224_uint1 x170; - fiat_p224_addcarryx_u64(&x169, &x170, x168, x159, x143); + fiat_p224_addcarryx_u64(&x169, &x170, x168, x143, x159); uint64_t x171; fiat_p224_uint1 x172; - fiat_p224_addcarryx_u64(&x171, &x172, x170, x161, x145); + fiat_p224_addcarryx_u64(&x171, &x172, x170, x145, x161); uint64_t x173; fiat_p224_uint1 x174; - fiat_p224_addcarryx_u64(&x173, &x174, x172, x163, x147); + fiat_p224_addcarryx_u64(&x173, &x174, x172, x147, x163); uint64_t x175; fiat_p224_uint1 x176; - fiat_p224_addcarryx_u64(&x175, &x176, x174, x165, x149); + fiat_p224_addcarryx_u64(&x175, &x176, x174, x149, x165); uint64_t x177; uint64_t x178; fiat_p224_mulx_u64(&x177, &x178, x167, UINT64_C(0xffffffffffffffff)); @@ -738,31 +738,31 @@ static void fiat_p224_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p224_mulx_u64(&x183, &x184, x177, UINT64_C(0xffffffff00000000)); uint64_t x185; fiat_p224_uint1 x186; - fiat_p224_addcarryx_u64(&x185, &x186, 0x0, x181, x184); + fiat_p224_addcarryx_u64(&x185, &x186, 0x0, x184, x181); uint64_t x187; fiat_p224_uint1 x188; - fiat_p224_addcarryx_u64(&x187, &x188, x186, x179, x182); + fiat_p224_addcarryx_u64(&x187, &x188, x186, x182, x179); uint64_t x189; fiat_p224_uint1 x190; - fiat_p224_addcarryx_u64(&x189, &x190, x188, 0x0, x180); + fiat_p224_addcarryx_u64(&x189, &x190, x188, x180, 0x0); uint64_t x191; fiat_p224_uint1 x192; - fiat_p224_addcarryx_u64(&x191, &x192, 0x0, x177, x167); + fiat_p224_addcarryx_u64(&x191, &x192, 0x0, x167, x177); uint64_t x193; fiat_p224_uint1 x194; - fiat_p224_addcarryx_u64(&x193, &x194, x192, x183, x169); + fiat_p224_addcarryx_u64(&x193, &x194, x192, x169, x183); uint64_t x195; fiat_p224_uint1 x196; - fiat_p224_addcarryx_u64(&x195, &x196, x194, x185, x171); + fiat_p224_addcarryx_u64(&x195, &x196, x194, x171, x185); uint64_t x197; fiat_p224_uint1 x198; - fiat_p224_addcarryx_u64(&x197, &x198, x196, x187, x173); + fiat_p224_addcarryx_u64(&x197, &x198, x196, x173, x187); uint64_t x199; fiat_p224_uint1 x200; - fiat_p224_addcarryx_u64(&x199, &x200, x198, x189, x175); + fiat_p224_addcarryx_u64(&x199, &x200, x198, x175, x189); uint64_t x201; fiat_p224_uint1 x202; - fiat_p224_addcarryx_u64(&x201, &x202, x200, 0x0, x176); + fiat_p224_addcarryx_u64(&x201, &x202, x200, x176, 0x0); uint64_t x203; fiat_p224_uint1 x204; fiat_p224_subborrowx_u64(&x203, &x204, 0x0, x193, 0x1); @@ -810,16 +810,16 @@ static void fiat_p224_square(uint64_t out1[4], const uint64_t arg1[4]) { static void fiat_p224_add(uint64_t out1[4], const uint64_t arg1[4], const uint64_t arg2[4]) { uint64_t x1; fiat_p224_uint1 x2; - fiat_p224_addcarryx_u64(&x1, &x2, 0x0, (arg2[0]), (arg1[0])); + fiat_p224_addcarryx_u64(&x1, &x2, 0x0, (arg1[0]), (arg2[0])); uint64_t x3; fiat_p224_uint1 x4; - fiat_p224_addcarryx_u64(&x3, &x4, x2, (arg2[1]), (arg1[1])); + fiat_p224_addcarryx_u64(&x3, &x4, x2, (arg1[1]), (arg2[1])); uint64_t x5; fiat_p224_uint1 x6; - fiat_p224_addcarryx_u64(&x5, &x6, x4, (arg2[2]), (arg1[2])); + fiat_p224_addcarryx_u64(&x5, &x6, x4, (arg1[2]), (arg2[2])); uint64_t x7; fiat_p224_uint1 x8; - fiat_p224_addcarryx_u64(&x7, &x8, x6, (arg2[3]), (arg1[3])); + fiat_p224_addcarryx_u64(&x7, &x8, x6, (arg1[3]), (arg2[3])); uint64_t x9; fiat_p224_uint1 x10; fiat_p224_subborrowx_u64(&x9, &x10, 0x0, x1, 0x1); @@ -881,16 +881,16 @@ static void fiat_p224_sub(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p224_cmovznz_u64(&x9, x8, 0x0, UINT64_C(0xffffffffffffffff)); uint64_t x10; fiat_p224_uint1 x11; - fiat_p224_addcarryx_u64(&x10, &x11, 0x0, (fiat_p224_uint1)(x9 & 0x1), x1); + fiat_p224_addcarryx_u64(&x10, &x11, 0x0, x1, (fiat_p224_uint1)(x9 & 0x1)); uint64_t x12; fiat_p224_uint1 x13; - fiat_p224_addcarryx_u64(&x12, &x13, x11, (x9 & UINT64_C(0xffffffff00000000)), x3); + fiat_p224_addcarryx_u64(&x12, &x13, x11, x3, (x9 & UINT64_C(0xffffffff00000000))); uint64_t x14; fiat_p224_uint1 x15; - fiat_p224_addcarryx_u64(&x14, &x15, x13, (x9 & UINT64_C(0xffffffffffffffff)), x5); + fiat_p224_addcarryx_u64(&x14, &x15, x13, x5, (x9 & UINT64_C(0xffffffffffffffff))); uint64_t x16; fiat_p224_uint1 x17; - fiat_p224_addcarryx_u64(&x16, &x17, x15, (x9 & UINT32_C(0xffffffff)), x7); + fiat_p224_addcarryx_u64(&x16, &x17, x15, x7, (x9 & UINT32_C(0xffffffff))); out1[0] = x10; out1[1] = x12; out1[2] = x14; @@ -927,16 +927,16 @@ static void fiat_p224_opp(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p224_cmovznz_u64(&x9, x8, 0x0, UINT64_C(0xffffffffffffffff)); uint64_t x10; fiat_p224_uint1 x11; - fiat_p224_addcarryx_u64(&x10, &x11, 0x0, (fiat_p224_uint1)(x9 & 0x1), x1); + fiat_p224_addcarryx_u64(&x10, &x11, 0x0, x1, (fiat_p224_uint1)(x9 & 0x1)); uint64_t x12; fiat_p224_uint1 x13; - fiat_p224_addcarryx_u64(&x12, &x13, x11, (x9 & UINT64_C(0xffffffff00000000)), x3); + fiat_p224_addcarryx_u64(&x12, &x13, x11, x3, (x9 & UINT64_C(0xffffffff00000000))); uint64_t x14; fiat_p224_uint1 x15; - fiat_p224_addcarryx_u64(&x14, &x15, x13, (x9 & UINT64_C(0xffffffffffffffff)), x5); + fiat_p224_addcarryx_u64(&x14, &x15, x13, x5, (x9 & UINT64_C(0xffffffffffffffff))); uint64_t x16; fiat_p224_uint1 x17; - fiat_p224_addcarryx_u64(&x16, &x17, x15, (x9 & UINT32_C(0xffffffff)), x7); + fiat_p224_addcarryx_u64(&x16, &x17, x15, x7, (x9 & UINT32_C(0xffffffff))); out1[0] = x10; out1[1] = x12; out1[2] = x14; @@ -972,31 +972,31 @@ static void fiat_p224_from_montgomery(uint64_t out1[4], const uint64_t arg1[4]) fiat_p224_mulx_u64(&x8, &x9, x2, UINT64_C(0xffffffff00000000)); uint64_t x10; fiat_p224_uint1 x11; - fiat_p224_addcarryx_u64(&x10, &x11, 0x0, x6, x9); + fiat_p224_addcarryx_u64(&x10, &x11, 0x0, x9, x6); uint64_t x12; fiat_p224_uint1 x13; - fiat_p224_addcarryx_u64(&x12, &x13, x11, x4, x7); + fiat_p224_addcarryx_u64(&x12, &x13, x11, x7, x4); uint64_t x14; fiat_p224_uint1 x15; - fiat_p224_addcarryx_u64(&x14, &x15, 0x0, x2, x1); + fiat_p224_addcarryx_u64(&x14, &x15, 0x0, x1, x2); uint64_t x16; fiat_p224_uint1 x17; - fiat_p224_addcarryx_u64(&x16, &x17, x15, x8, 0x0); + fiat_p224_addcarryx_u64(&x16, &x17, x15, 0x0, x8); uint64_t x18; fiat_p224_uint1 x19; - fiat_p224_addcarryx_u64(&x18, &x19, x17, x10, 0x0); + fiat_p224_addcarryx_u64(&x18, &x19, x17, 0x0, x10); uint64_t x20; fiat_p224_uint1 x21; - fiat_p224_addcarryx_u64(&x20, &x21, x19, x12, 0x0); + fiat_p224_addcarryx_u64(&x20, &x21, x19, 0x0, x12); uint64_t x22; fiat_p224_uint1 x23; - fiat_p224_addcarryx_u64(&x22, &x23, 0x0, (arg1[1]), x16); + fiat_p224_addcarryx_u64(&x22, &x23, 0x0, x16, (arg1[1])); uint64_t x24; fiat_p224_uint1 x25; - fiat_p224_addcarryx_u64(&x24, &x25, x23, 0x0, x18); + fiat_p224_addcarryx_u64(&x24, &x25, x23, x18, 0x0); uint64_t x26; fiat_p224_uint1 x27; - fiat_p224_addcarryx_u64(&x26, &x27, x25, 0x0, x20); + fiat_p224_addcarryx_u64(&x26, &x27, x25, x20, 0x0); uint64_t x28; uint64_t x29; fiat_p224_mulx_u64(&x28, &x29, x22, UINT64_C(0xffffffffffffffff)); @@ -1011,40 +1011,40 @@ static void fiat_p224_from_montgomery(uint64_t out1[4], const uint64_t arg1[4]) fiat_p224_mulx_u64(&x34, &x35, x28, UINT64_C(0xffffffff00000000)); uint64_t x36; fiat_p224_uint1 x37; - fiat_p224_addcarryx_u64(&x36, &x37, 0x0, x32, x35); + fiat_p224_addcarryx_u64(&x36, &x37, 0x0, x35, x32); uint64_t x38; fiat_p224_uint1 x39; - fiat_p224_addcarryx_u64(&x38, &x39, x37, x30, x33); + fiat_p224_addcarryx_u64(&x38, &x39, x37, x33, x30); uint64_t x40; fiat_p224_uint1 x41; - fiat_p224_addcarryx_u64(&x40, &x41, 0x0, x28, x22); + fiat_p224_addcarryx_u64(&x40, &x41, 0x0, x22, x28); uint64_t x42; fiat_p224_uint1 x43; - fiat_p224_addcarryx_u64(&x42, &x43, x41, x34, x24); + fiat_p224_addcarryx_u64(&x42, &x43, x41, x24, x34); uint64_t x44; fiat_p224_uint1 x45; - fiat_p224_addcarryx_u64(&x44, &x45, x43, x36, x26); + fiat_p224_addcarryx_u64(&x44, &x45, x43, x26, x36); uint64_t x46; fiat_p224_uint1 x47; - fiat_p224_addcarryx_u64(&x46, &x47, x13, 0x0, x5); + fiat_p224_addcarryx_u64(&x46, &x47, x13, x5, 0x0); uint64_t x48; fiat_p224_uint1 x49; - fiat_p224_addcarryx_u64(&x48, &x49, x21, x46, 0x0); + fiat_p224_addcarryx_u64(&x48, &x49, x21, 0x0, x46); uint64_t x50; fiat_p224_uint1 x51; - fiat_p224_addcarryx_u64(&x50, &x51, x27, 0x0, x48); + fiat_p224_addcarryx_u64(&x50, &x51, x27, x48, 0x0); uint64_t x52; fiat_p224_uint1 x53; - fiat_p224_addcarryx_u64(&x52, &x53, x45, x38, x50); + fiat_p224_addcarryx_u64(&x52, &x53, x45, x50, x38); uint64_t x54; fiat_p224_uint1 x55; - fiat_p224_addcarryx_u64(&x54, &x55, 0x0, (arg1[2]), x42); + fiat_p224_addcarryx_u64(&x54, &x55, 0x0, x42, (arg1[2])); uint64_t x56; fiat_p224_uint1 x57; - fiat_p224_addcarryx_u64(&x56, &x57, x55, 0x0, x44); + fiat_p224_addcarryx_u64(&x56, &x57, x55, x44, 0x0); uint64_t x58; fiat_p224_uint1 x59; - fiat_p224_addcarryx_u64(&x58, &x59, x57, 0x0, x52); + fiat_p224_addcarryx_u64(&x58, &x59, x57, x52, 0x0); uint64_t x60; uint64_t x61; fiat_p224_mulx_u64(&x60, &x61, x54, UINT64_C(0xffffffffffffffff)); @@ -1059,40 +1059,40 @@ static void fiat_p224_from_montgomery(uint64_t out1[4], const uint64_t arg1[4]) fiat_p224_mulx_u64(&x66, &x67, x60, UINT64_C(0xffffffff00000000)); uint64_t x68; fiat_p224_uint1 x69; - fiat_p224_addcarryx_u64(&x68, &x69, 0x0, x64, x67); + fiat_p224_addcarryx_u64(&x68, &x69, 0x0, x67, x64); uint64_t x70; fiat_p224_uint1 x71; - fiat_p224_addcarryx_u64(&x70, &x71, x69, x62, x65); + fiat_p224_addcarryx_u64(&x70, &x71, x69, x65, x62); uint64_t x72; fiat_p224_uint1 x73; - fiat_p224_addcarryx_u64(&x72, &x73, 0x0, x60, x54); + fiat_p224_addcarryx_u64(&x72, &x73, 0x0, x54, x60); uint64_t x74; fiat_p224_uint1 x75; - fiat_p224_addcarryx_u64(&x74, &x75, x73, x66, x56); + fiat_p224_addcarryx_u64(&x74, &x75, x73, x56, x66); uint64_t x76; fiat_p224_uint1 x77; - fiat_p224_addcarryx_u64(&x76, &x77, x75, x68, x58); + fiat_p224_addcarryx_u64(&x76, &x77, x75, x58, x68); uint64_t x78; fiat_p224_uint1 x79; - fiat_p224_addcarryx_u64(&x78, &x79, x39, 0x0, x31); + fiat_p224_addcarryx_u64(&x78, &x79, x39, x31, 0x0); uint64_t x80; fiat_p224_uint1 x81; - fiat_p224_addcarryx_u64(&x80, &x81, x53, x78, 0x0); + fiat_p224_addcarryx_u64(&x80, &x81, x53, 0x0, x78); uint64_t x82; fiat_p224_uint1 x83; - fiat_p224_addcarryx_u64(&x82, &x83, x59, 0x0, x80); + fiat_p224_addcarryx_u64(&x82, &x83, x59, x80, 0x0); uint64_t x84; fiat_p224_uint1 x85; - fiat_p224_addcarryx_u64(&x84, &x85, x77, x70, x82); + fiat_p224_addcarryx_u64(&x84, &x85, x77, x82, x70); uint64_t x86; fiat_p224_uint1 x87; - fiat_p224_addcarryx_u64(&x86, &x87, 0x0, (arg1[3]), x74); + fiat_p224_addcarryx_u64(&x86, &x87, 0x0, x74, (arg1[3])); uint64_t x88; fiat_p224_uint1 x89; - fiat_p224_addcarryx_u64(&x88, &x89, x87, 0x0, x76); + fiat_p224_addcarryx_u64(&x88, &x89, x87, x76, 0x0); uint64_t x90; fiat_p224_uint1 x91; - fiat_p224_addcarryx_u64(&x90, &x91, x89, 0x0, x84); + fiat_p224_addcarryx_u64(&x90, &x91, x89, x84, 0x0); uint64_t x92; uint64_t x93; fiat_p224_mulx_u64(&x92, &x93, x86, UINT64_C(0xffffffffffffffff)); @@ -1107,37 +1107,37 @@ static void fiat_p224_from_montgomery(uint64_t out1[4], const uint64_t arg1[4]) fiat_p224_mulx_u64(&x98, &x99, x92, UINT64_C(0xffffffff00000000)); uint64_t x100; fiat_p224_uint1 x101; - fiat_p224_addcarryx_u64(&x100, &x101, 0x0, x96, x99); + fiat_p224_addcarryx_u64(&x100, &x101, 0x0, x99, x96); uint64_t x102; fiat_p224_uint1 x103; - fiat_p224_addcarryx_u64(&x102, &x103, x101, x94, x97); + fiat_p224_addcarryx_u64(&x102, &x103, x101, x97, x94); uint64_t x104; fiat_p224_uint1 x105; - fiat_p224_addcarryx_u64(&x104, &x105, 0x0, x92, x86); + fiat_p224_addcarryx_u64(&x104, &x105, 0x0, x86, x92); uint64_t x106; fiat_p224_uint1 x107; - fiat_p224_addcarryx_u64(&x106, &x107, x105, x98, x88); + fiat_p224_addcarryx_u64(&x106, &x107, x105, x88, x98); uint64_t x108; fiat_p224_uint1 x109; - fiat_p224_addcarryx_u64(&x108, &x109, x107, x100, x90); + fiat_p224_addcarryx_u64(&x108, &x109, x107, x90, x100); uint64_t x110; fiat_p224_uint1 x111; - fiat_p224_addcarryx_u64(&x110, &x111, x71, 0x0, x63); + fiat_p224_addcarryx_u64(&x110, &x111, x71, x63, 0x0); uint64_t x112; fiat_p224_uint1 x113; - fiat_p224_addcarryx_u64(&x112, &x113, x85, x110, 0x0); + fiat_p224_addcarryx_u64(&x112, &x113, x85, 0x0, x110); uint64_t x114; fiat_p224_uint1 x115; - fiat_p224_addcarryx_u64(&x114, &x115, x91, 0x0, x112); + fiat_p224_addcarryx_u64(&x114, &x115, x91, x112, 0x0); uint64_t x116; fiat_p224_uint1 x117; - fiat_p224_addcarryx_u64(&x116, &x117, x109, x102, x114); + fiat_p224_addcarryx_u64(&x116, &x117, x109, x114, x102); uint64_t x118; fiat_p224_uint1 x119; - fiat_p224_addcarryx_u64(&x118, &x119, x103, 0x0, x95); + fiat_p224_addcarryx_u64(&x118, &x119, x103, x95, 0x0); uint64_t x120; fiat_p224_uint1 x121; - fiat_p224_addcarryx_u64(&x120, &x121, x117, x118, 0x0); + fiat_p224_addcarryx_u64(&x120, &x121, x117, 0x0, x118); uint64_t x122; fiat_p224_uint1 x123; fiat_p224_subborrowx_u64(&x122, &x123, 0x0, x106, 0x1); diff --git a/p256_32.c b/p256_32.c index 010d78a14..2bb3097c9 100644 --- a/p256_32.c +++ b/p256_32.c @@ -150,28 +150,28 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x23, &x24, x8, (arg2[0])); uint32_t x25; fiat_p256_uint1 x26; - fiat_p256_addcarryx_u32(&x25, &x26, 0x0, x21, x24); + fiat_p256_addcarryx_u32(&x25, &x26, 0x0, x24, x21); uint32_t x27; fiat_p256_uint1 x28; - fiat_p256_addcarryx_u32(&x27, &x28, x26, x19, x22); + fiat_p256_addcarryx_u32(&x27, &x28, x26, x22, x19); uint32_t x29; fiat_p256_uint1 x30; - fiat_p256_addcarryx_u32(&x29, &x30, x28, x17, x20); + fiat_p256_addcarryx_u32(&x29, &x30, x28, x20, x17); uint32_t x31; fiat_p256_uint1 x32; - fiat_p256_addcarryx_u32(&x31, &x32, x30, x15, x18); + fiat_p256_addcarryx_u32(&x31, &x32, x30, x18, x15); uint32_t x33; fiat_p256_uint1 x34; - fiat_p256_addcarryx_u32(&x33, &x34, x32, x13, x16); + fiat_p256_addcarryx_u32(&x33, &x34, x32, x16, x13); uint32_t x35; fiat_p256_uint1 x36; - fiat_p256_addcarryx_u32(&x35, &x36, x34, x11, x14); + fiat_p256_addcarryx_u32(&x35, &x36, x34, x14, x11); uint32_t x37; fiat_p256_uint1 x38; - fiat_p256_addcarryx_u32(&x37, &x38, x36, x9, x12); + fiat_p256_addcarryx_u32(&x37, &x38, x36, x12, x9); uint32_t x39; fiat_p256_uint1 x40; - fiat_p256_addcarryx_u32(&x39, &x40, x38, 0x0, x10); + fiat_p256_addcarryx_u32(&x39, &x40, x38, x10, 0x0); uint32_t x41; uint32_t x42; fiat_p256_mulx_u32(&x41, &x42, x23, UINT32_C(0xffffffff)); @@ -186,40 +186,40 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x47, &x48, x23, UINT32_C(0xffffffff)); uint32_t x49; fiat_p256_uint1 x50; - fiat_p256_addcarryx_u32(&x49, &x50, 0x0, x45, x48); + fiat_p256_addcarryx_u32(&x49, &x50, 0x0, x48, x45); uint32_t x51; fiat_p256_uint1 x52; - fiat_p256_addcarryx_u32(&x51, &x52, x50, x43, x46); + fiat_p256_addcarryx_u32(&x51, &x52, x50, x46, x43); uint32_t x53; fiat_p256_uint1 x54; - fiat_p256_addcarryx_u32(&x53, &x54, x52, 0x0, x44); + fiat_p256_addcarryx_u32(&x53, &x54, x52, x44, 0x0); uint32_t x55; fiat_p256_uint1 x56; - fiat_p256_addcarryx_u32(&x55, &x56, 0x0, x47, x23); + fiat_p256_addcarryx_u32(&x55, &x56, 0x0, x23, x47); uint32_t x57; fiat_p256_uint1 x58; - fiat_p256_addcarryx_u32(&x57, &x58, x56, x49, x25); + fiat_p256_addcarryx_u32(&x57, &x58, x56, x25, x49); uint32_t x59; fiat_p256_uint1 x60; - fiat_p256_addcarryx_u32(&x59, &x60, x58, x51, x27); + fiat_p256_addcarryx_u32(&x59, &x60, x58, x27, x51); uint32_t x61; fiat_p256_uint1 x62; - fiat_p256_addcarryx_u32(&x61, &x62, x60, x53, x29); + fiat_p256_addcarryx_u32(&x61, &x62, x60, x29, x53); uint32_t x63; fiat_p256_uint1 x64; - fiat_p256_addcarryx_u32(&x63, &x64, x62, 0x0, x31); + fiat_p256_addcarryx_u32(&x63, &x64, x62, x31, 0x0); uint32_t x65; fiat_p256_uint1 x66; - fiat_p256_addcarryx_u32(&x65, &x66, x64, 0x0, x33); + fiat_p256_addcarryx_u32(&x65, &x66, x64, x33, 0x0); uint32_t x67; fiat_p256_uint1 x68; - fiat_p256_addcarryx_u32(&x67, &x68, x66, x23, x35); + fiat_p256_addcarryx_u32(&x67, &x68, x66, x35, x23); uint32_t x69; fiat_p256_uint1 x70; - fiat_p256_addcarryx_u32(&x69, &x70, x68, x41, x37); + fiat_p256_addcarryx_u32(&x69, &x70, x68, x37, x41); uint32_t x71; fiat_p256_uint1 x72; - fiat_p256_addcarryx_u32(&x71, &x72, x70, x42, x39); + fiat_p256_addcarryx_u32(&x71, &x72, x70, x39, x42); uint32_t x73; fiat_p256_uint1 x74; fiat_p256_addcarryx_u32(&x73, &x74, x72, 0x0, 0x0); @@ -249,55 +249,55 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x89, &x90, x1, (arg2[0])); uint32_t x91; fiat_p256_uint1 x92; - fiat_p256_addcarryx_u32(&x91, &x92, 0x0, x87, x90); + fiat_p256_addcarryx_u32(&x91, &x92, 0x0, x90, x87); uint32_t x93; fiat_p256_uint1 x94; - fiat_p256_addcarryx_u32(&x93, &x94, x92, x85, x88); + fiat_p256_addcarryx_u32(&x93, &x94, x92, x88, x85); uint32_t x95; fiat_p256_uint1 x96; - fiat_p256_addcarryx_u32(&x95, &x96, x94, x83, x86); + fiat_p256_addcarryx_u32(&x95, &x96, x94, x86, x83); uint32_t x97; fiat_p256_uint1 x98; - fiat_p256_addcarryx_u32(&x97, &x98, x96, x81, x84); + fiat_p256_addcarryx_u32(&x97, &x98, x96, x84, x81); uint32_t x99; fiat_p256_uint1 x100; - fiat_p256_addcarryx_u32(&x99, &x100, x98, x79, x82); + fiat_p256_addcarryx_u32(&x99, &x100, x98, x82, x79); uint32_t x101; fiat_p256_uint1 x102; - fiat_p256_addcarryx_u32(&x101, &x102, x100, x77, x80); + fiat_p256_addcarryx_u32(&x101, &x102, x100, x80, x77); uint32_t x103; fiat_p256_uint1 x104; - fiat_p256_addcarryx_u32(&x103, &x104, x102, x75, x78); + fiat_p256_addcarryx_u32(&x103, &x104, x102, x78, x75); uint32_t x105; fiat_p256_uint1 x106; - fiat_p256_addcarryx_u32(&x105, &x106, x104, 0x0, x76); + fiat_p256_addcarryx_u32(&x105, &x106, x104, x76, 0x0); uint32_t x107; fiat_p256_uint1 x108; - fiat_p256_addcarryx_u32(&x107, &x108, 0x0, x89, x57); + fiat_p256_addcarryx_u32(&x107, &x108, 0x0, x57, x89); uint32_t x109; fiat_p256_uint1 x110; - fiat_p256_addcarryx_u32(&x109, &x110, x108, x91, x59); + fiat_p256_addcarryx_u32(&x109, &x110, x108, x59, x91); uint32_t x111; fiat_p256_uint1 x112; - fiat_p256_addcarryx_u32(&x111, &x112, x110, x93, x61); + fiat_p256_addcarryx_u32(&x111, &x112, x110, x61, x93); uint32_t x113; fiat_p256_uint1 x114; - fiat_p256_addcarryx_u32(&x113, &x114, x112, x95, x63); + fiat_p256_addcarryx_u32(&x113, &x114, x112, x63, x95); uint32_t x115; fiat_p256_uint1 x116; - fiat_p256_addcarryx_u32(&x115, &x116, x114, x97, x65); + fiat_p256_addcarryx_u32(&x115, &x116, x114, x65, x97); uint32_t x117; fiat_p256_uint1 x118; - fiat_p256_addcarryx_u32(&x117, &x118, x116, x99, x67); + fiat_p256_addcarryx_u32(&x117, &x118, x116, x67, x99); uint32_t x119; fiat_p256_uint1 x120; - fiat_p256_addcarryx_u32(&x119, &x120, x118, x101, x69); + fiat_p256_addcarryx_u32(&x119, &x120, x118, x69, x101); uint32_t x121; fiat_p256_uint1 x122; - fiat_p256_addcarryx_u32(&x121, &x122, x120, x103, x71); + fiat_p256_addcarryx_u32(&x121, &x122, x120, x71, x103); uint32_t x123; fiat_p256_uint1 x124; - fiat_p256_addcarryx_u32(&x123, &x124, x122, x105, (fiat_p256_uint1)x73); + fiat_p256_addcarryx_u32(&x123, &x124, x122, (fiat_p256_uint1)x73, x105); uint32_t x125; uint32_t x126; fiat_p256_mulx_u32(&x125, &x126, x107, UINT32_C(0xffffffff)); @@ -312,43 +312,43 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x131, &x132, x107, UINT32_C(0xffffffff)); uint32_t x133; fiat_p256_uint1 x134; - fiat_p256_addcarryx_u32(&x133, &x134, 0x0, x129, x132); + fiat_p256_addcarryx_u32(&x133, &x134, 0x0, x132, x129); uint32_t x135; fiat_p256_uint1 x136; - fiat_p256_addcarryx_u32(&x135, &x136, x134, x127, x130); + fiat_p256_addcarryx_u32(&x135, &x136, x134, x130, x127); uint32_t x137; fiat_p256_uint1 x138; - fiat_p256_addcarryx_u32(&x137, &x138, x136, 0x0, x128); + fiat_p256_addcarryx_u32(&x137, &x138, x136, x128, 0x0); uint32_t x139; fiat_p256_uint1 x140; - fiat_p256_addcarryx_u32(&x139, &x140, 0x0, x131, x107); + fiat_p256_addcarryx_u32(&x139, &x140, 0x0, x107, x131); uint32_t x141; fiat_p256_uint1 x142; - fiat_p256_addcarryx_u32(&x141, &x142, x140, x133, x109); + fiat_p256_addcarryx_u32(&x141, &x142, x140, x109, x133); uint32_t x143; fiat_p256_uint1 x144; - fiat_p256_addcarryx_u32(&x143, &x144, x142, x135, x111); + fiat_p256_addcarryx_u32(&x143, &x144, x142, x111, x135); uint32_t x145; fiat_p256_uint1 x146; - fiat_p256_addcarryx_u32(&x145, &x146, x144, x137, x113); + fiat_p256_addcarryx_u32(&x145, &x146, x144, x113, x137); uint32_t x147; fiat_p256_uint1 x148; - fiat_p256_addcarryx_u32(&x147, &x148, x146, 0x0, x115); + fiat_p256_addcarryx_u32(&x147, &x148, x146, x115, 0x0); uint32_t x149; fiat_p256_uint1 x150; - fiat_p256_addcarryx_u32(&x149, &x150, x148, 0x0, x117); + fiat_p256_addcarryx_u32(&x149, &x150, x148, x117, 0x0); uint32_t x151; fiat_p256_uint1 x152; - fiat_p256_addcarryx_u32(&x151, &x152, x150, x107, x119); + fiat_p256_addcarryx_u32(&x151, &x152, x150, x119, x107); uint32_t x153; fiat_p256_uint1 x154; - fiat_p256_addcarryx_u32(&x153, &x154, x152, x125, x121); + fiat_p256_addcarryx_u32(&x153, &x154, x152, x121, x125); uint32_t x155; fiat_p256_uint1 x156; - fiat_p256_addcarryx_u32(&x155, &x156, x154, x126, x123); + fiat_p256_addcarryx_u32(&x155, &x156, x154, x123, x126); uint32_t x157; fiat_p256_uint1 x158; - fiat_p256_addcarryx_u32(&x157, &x158, x156, 0x0, x124); + fiat_p256_addcarryx_u32(&x157, &x158, x156, x124, 0x0); uint32_t x159; uint32_t x160; fiat_p256_mulx_u32(&x159, &x160, x2, (arg2[7])); @@ -375,55 +375,55 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x173, &x174, x2, (arg2[0])); uint32_t x175; fiat_p256_uint1 x176; - fiat_p256_addcarryx_u32(&x175, &x176, 0x0, x171, x174); + fiat_p256_addcarryx_u32(&x175, &x176, 0x0, x174, x171); uint32_t x177; fiat_p256_uint1 x178; - fiat_p256_addcarryx_u32(&x177, &x178, x176, x169, x172); + fiat_p256_addcarryx_u32(&x177, &x178, x176, x172, x169); uint32_t x179; fiat_p256_uint1 x180; - fiat_p256_addcarryx_u32(&x179, &x180, x178, x167, x170); + fiat_p256_addcarryx_u32(&x179, &x180, x178, x170, x167); uint32_t x181; fiat_p256_uint1 x182; - fiat_p256_addcarryx_u32(&x181, &x182, x180, x165, x168); + fiat_p256_addcarryx_u32(&x181, &x182, x180, x168, x165); uint32_t x183; fiat_p256_uint1 x184; - fiat_p256_addcarryx_u32(&x183, &x184, x182, x163, x166); + fiat_p256_addcarryx_u32(&x183, &x184, x182, x166, x163); uint32_t x185; fiat_p256_uint1 x186; - fiat_p256_addcarryx_u32(&x185, &x186, x184, x161, x164); + fiat_p256_addcarryx_u32(&x185, &x186, x184, x164, x161); uint32_t x187; fiat_p256_uint1 x188; - fiat_p256_addcarryx_u32(&x187, &x188, x186, x159, x162); + fiat_p256_addcarryx_u32(&x187, &x188, x186, x162, x159); uint32_t x189; fiat_p256_uint1 x190; - fiat_p256_addcarryx_u32(&x189, &x190, x188, 0x0, x160); + fiat_p256_addcarryx_u32(&x189, &x190, x188, x160, 0x0); uint32_t x191; fiat_p256_uint1 x192; - fiat_p256_addcarryx_u32(&x191, &x192, 0x0, x173, x141); + fiat_p256_addcarryx_u32(&x191, &x192, 0x0, x141, x173); uint32_t x193; fiat_p256_uint1 x194; - fiat_p256_addcarryx_u32(&x193, &x194, x192, x175, x143); + fiat_p256_addcarryx_u32(&x193, &x194, x192, x143, x175); uint32_t x195; fiat_p256_uint1 x196; - fiat_p256_addcarryx_u32(&x195, &x196, x194, x177, x145); + fiat_p256_addcarryx_u32(&x195, &x196, x194, x145, x177); uint32_t x197; fiat_p256_uint1 x198; - fiat_p256_addcarryx_u32(&x197, &x198, x196, x179, x147); + fiat_p256_addcarryx_u32(&x197, &x198, x196, x147, x179); uint32_t x199; fiat_p256_uint1 x200; - fiat_p256_addcarryx_u32(&x199, &x200, x198, x181, x149); + fiat_p256_addcarryx_u32(&x199, &x200, x198, x149, x181); uint32_t x201; fiat_p256_uint1 x202; - fiat_p256_addcarryx_u32(&x201, &x202, x200, x183, x151); + fiat_p256_addcarryx_u32(&x201, &x202, x200, x151, x183); uint32_t x203; fiat_p256_uint1 x204; - fiat_p256_addcarryx_u32(&x203, &x204, x202, x185, x153); + fiat_p256_addcarryx_u32(&x203, &x204, x202, x153, x185); uint32_t x205; fiat_p256_uint1 x206; - fiat_p256_addcarryx_u32(&x205, &x206, x204, x187, x155); + fiat_p256_addcarryx_u32(&x205, &x206, x204, x155, x187); uint32_t x207; fiat_p256_uint1 x208; - fiat_p256_addcarryx_u32(&x207, &x208, x206, x189, x157); + fiat_p256_addcarryx_u32(&x207, &x208, x206, x157, x189); uint32_t x209; uint32_t x210; fiat_p256_mulx_u32(&x209, &x210, x191, UINT32_C(0xffffffff)); @@ -438,43 +438,43 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x215, &x216, x191, UINT32_C(0xffffffff)); uint32_t x217; fiat_p256_uint1 x218; - fiat_p256_addcarryx_u32(&x217, &x218, 0x0, x213, x216); + fiat_p256_addcarryx_u32(&x217, &x218, 0x0, x216, x213); uint32_t x219; fiat_p256_uint1 x220; - fiat_p256_addcarryx_u32(&x219, &x220, x218, x211, x214); + fiat_p256_addcarryx_u32(&x219, &x220, x218, x214, x211); uint32_t x221; fiat_p256_uint1 x222; - fiat_p256_addcarryx_u32(&x221, &x222, x220, 0x0, x212); + fiat_p256_addcarryx_u32(&x221, &x222, x220, x212, 0x0); uint32_t x223; fiat_p256_uint1 x224; - fiat_p256_addcarryx_u32(&x223, &x224, 0x0, x215, x191); + fiat_p256_addcarryx_u32(&x223, &x224, 0x0, x191, x215); uint32_t x225; fiat_p256_uint1 x226; - fiat_p256_addcarryx_u32(&x225, &x226, x224, x217, x193); + fiat_p256_addcarryx_u32(&x225, &x226, x224, x193, x217); uint32_t x227; fiat_p256_uint1 x228; - fiat_p256_addcarryx_u32(&x227, &x228, x226, x219, x195); + fiat_p256_addcarryx_u32(&x227, &x228, x226, x195, x219); uint32_t x229; fiat_p256_uint1 x230; - fiat_p256_addcarryx_u32(&x229, &x230, x228, x221, x197); + fiat_p256_addcarryx_u32(&x229, &x230, x228, x197, x221); uint32_t x231; fiat_p256_uint1 x232; - fiat_p256_addcarryx_u32(&x231, &x232, x230, 0x0, x199); + fiat_p256_addcarryx_u32(&x231, &x232, x230, x199, 0x0); uint32_t x233; fiat_p256_uint1 x234; - fiat_p256_addcarryx_u32(&x233, &x234, x232, 0x0, x201); + fiat_p256_addcarryx_u32(&x233, &x234, x232, x201, 0x0); uint32_t x235; fiat_p256_uint1 x236; - fiat_p256_addcarryx_u32(&x235, &x236, x234, x191, x203); + fiat_p256_addcarryx_u32(&x235, &x236, x234, x203, x191); uint32_t x237; fiat_p256_uint1 x238; - fiat_p256_addcarryx_u32(&x237, &x238, x236, x209, x205); + fiat_p256_addcarryx_u32(&x237, &x238, x236, x205, x209); uint32_t x239; fiat_p256_uint1 x240; - fiat_p256_addcarryx_u32(&x239, &x240, x238, x210, x207); + fiat_p256_addcarryx_u32(&x239, &x240, x238, x207, x210); uint32_t x241; fiat_p256_uint1 x242; - fiat_p256_addcarryx_u32(&x241, &x242, x240, 0x0, x208); + fiat_p256_addcarryx_u32(&x241, &x242, x240, x208, 0x0); uint32_t x243; uint32_t x244; fiat_p256_mulx_u32(&x243, &x244, x3, (arg2[7])); @@ -501,55 +501,55 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x257, &x258, x3, (arg2[0])); uint32_t x259; fiat_p256_uint1 x260; - fiat_p256_addcarryx_u32(&x259, &x260, 0x0, x255, x258); + fiat_p256_addcarryx_u32(&x259, &x260, 0x0, x258, x255); uint32_t x261; fiat_p256_uint1 x262; - fiat_p256_addcarryx_u32(&x261, &x262, x260, x253, x256); + fiat_p256_addcarryx_u32(&x261, &x262, x260, x256, x253); uint32_t x263; fiat_p256_uint1 x264; - fiat_p256_addcarryx_u32(&x263, &x264, x262, x251, x254); + fiat_p256_addcarryx_u32(&x263, &x264, x262, x254, x251); uint32_t x265; fiat_p256_uint1 x266; - fiat_p256_addcarryx_u32(&x265, &x266, x264, x249, x252); + fiat_p256_addcarryx_u32(&x265, &x266, x264, x252, x249); uint32_t x267; fiat_p256_uint1 x268; - fiat_p256_addcarryx_u32(&x267, &x268, x266, x247, x250); + fiat_p256_addcarryx_u32(&x267, &x268, x266, x250, x247); uint32_t x269; fiat_p256_uint1 x270; - fiat_p256_addcarryx_u32(&x269, &x270, x268, x245, x248); + fiat_p256_addcarryx_u32(&x269, &x270, x268, x248, x245); uint32_t x271; fiat_p256_uint1 x272; - fiat_p256_addcarryx_u32(&x271, &x272, x270, x243, x246); + fiat_p256_addcarryx_u32(&x271, &x272, x270, x246, x243); uint32_t x273; fiat_p256_uint1 x274; - fiat_p256_addcarryx_u32(&x273, &x274, x272, 0x0, x244); + fiat_p256_addcarryx_u32(&x273, &x274, x272, x244, 0x0); uint32_t x275; fiat_p256_uint1 x276; - fiat_p256_addcarryx_u32(&x275, &x276, 0x0, x257, x225); + fiat_p256_addcarryx_u32(&x275, &x276, 0x0, x225, x257); uint32_t x277; fiat_p256_uint1 x278; - fiat_p256_addcarryx_u32(&x277, &x278, x276, x259, x227); + fiat_p256_addcarryx_u32(&x277, &x278, x276, x227, x259); uint32_t x279; fiat_p256_uint1 x280; - fiat_p256_addcarryx_u32(&x279, &x280, x278, x261, x229); + fiat_p256_addcarryx_u32(&x279, &x280, x278, x229, x261); uint32_t x281; fiat_p256_uint1 x282; - fiat_p256_addcarryx_u32(&x281, &x282, x280, x263, x231); + fiat_p256_addcarryx_u32(&x281, &x282, x280, x231, x263); uint32_t x283; fiat_p256_uint1 x284; - fiat_p256_addcarryx_u32(&x283, &x284, x282, x265, x233); + fiat_p256_addcarryx_u32(&x283, &x284, x282, x233, x265); uint32_t x285; fiat_p256_uint1 x286; - fiat_p256_addcarryx_u32(&x285, &x286, x284, x267, x235); + fiat_p256_addcarryx_u32(&x285, &x286, x284, x235, x267); uint32_t x287; fiat_p256_uint1 x288; - fiat_p256_addcarryx_u32(&x287, &x288, x286, x269, x237); + fiat_p256_addcarryx_u32(&x287, &x288, x286, x237, x269); uint32_t x289; fiat_p256_uint1 x290; - fiat_p256_addcarryx_u32(&x289, &x290, x288, x271, x239); + fiat_p256_addcarryx_u32(&x289, &x290, x288, x239, x271); uint32_t x291; fiat_p256_uint1 x292; - fiat_p256_addcarryx_u32(&x291, &x292, x290, x273, x241); + fiat_p256_addcarryx_u32(&x291, &x292, x290, x241, x273); uint32_t x293; uint32_t x294; fiat_p256_mulx_u32(&x293, &x294, x275, UINT32_C(0xffffffff)); @@ -564,43 +564,43 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x299, &x300, x275, UINT32_C(0xffffffff)); uint32_t x301; fiat_p256_uint1 x302; - fiat_p256_addcarryx_u32(&x301, &x302, 0x0, x297, x300); + fiat_p256_addcarryx_u32(&x301, &x302, 0x0, x300, x297); uint32_t x303; fiat_p256_uint1 x304; - fiat_p256_addcarryx_u32(&x303, &x304, x302, x295, x298); + fiat_p256_addcarryx_u32(&x303, &x304, x302, x298, x295); uint32_t x305; fiat_p256_uint1 x306; - fiat_p256_addcarryx_u32(&x305, &x306, x304, 0x0, x296); + fiat_p256_addcarryx_u32(&x305, &x306, x304, x296, 0x0); uint32_t x307; fiat_p256_uint1 x308; - fiat_p256_addcarryx_u32(&x307, &x308, 0x0, x299, x275); + fiat_p256_addcarryx_u32(&x307, &x308, 0x0, x275, x299); uint32_t x309; fiat_p256_uint1 x310; - fiat_p256_addcarryx_u32(&x309, &x310, x308, x301, x277); + fiat_p256_addcarryx_u32(&x309, &x310, x308, x277, x301); uint32_t x311; fiat_p256_uint1 x312; - fiat_p256_addcarryx_u32(&x311, &x312, x310, x303, x279); + fiat_p256_addcarryx_u32(&x311, &x312, x310, x279, x303); uint32_t x313; fiat_p256_uint1 x314; - fiat_p256_addcarryx_u32(&x313, &x314, x312, x305, x281); + fiat_p256_addcarryx_u32(&x313, &x314, x312, x281, x305); uint32_t x315; fiat_p256_uint1 x316; - fiat_p256_addcarryx_u32(&x315, &x316, x314, 0x0, x283); + fiat_p256_addcarryx_u32(&x315, &x316, x314, x283, 0x0); uint32_t x317; fiat_p256_uint1 x318; - fiat_p256_addcarryx_u32(&x317, &x318, x316, 0x0, x285); + fiat_p256_addcarryx_u32(&x317, &x318, x316, x285, 0x0); uint32_t x319; fiat_p256_uint1 x320; - fiat_p256_addcarryx_u32(&x319, &x320, x318, x275, x287); + fiat_p256_addcarryx_u32(&x319, &x320, x318, x287, x275); uint32_t x321; fiat_p256_uint1 x322; - fiat_p256_addcarryx_u32(&x321, &x322, x320, x293, x289); + fiat_p256_addcarryx_u32(&x321, &x322, x320, x289, x293); uint32_t x323; fiat_p256_uint1 x324; - fiat_p256_addcarryx_u32(&x323, &x324, x322, x294, x291); + fiat_p256_addcarryx_u32(&x323, &x324, x322, x291, x294); uint32_t x325; fiat_p256_uint1 x326; - fiat_p256_addcarryx_u32(&x325, &x326, x324, 0x0, x292); + fiat_p256_addcarryx_u32(&x325, &x326, x324, x292, 0x0); uint32_t x327; uint32_t x328; fiat_p256_mulx_u32(&x327, &x328, x4, (arg2[7])); @@ -627,55 +627,55 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x341, &x342, x4, (arg2[0])); uint32_t x343; fiat_p256_uint1 x344; - fiat_p256_addcarryx_u32(&x343, &x344, 0x0, x339, x342); + fiat_p256_addcarryx_u32(&x343, &x344, 0x0, x342, x339); uint32_t x345; fiat_p256_uint1 x346; - fiat_p256_addcarryx_u32(&x345, &x346, x344, x337, x340); + fiat_p256_addcarryx_u32(&x345, &x346, x344, x340, x337); uint32_t x347; fiat_p256_uint1 x348; - fiat_p256_addcarryx_u32(&x347, &x348, x346, x335, x338); + fiat_p256_addcarryx_u32(&x347, &x348, x346, x338, x335); uint32_t x349; fiat_p256_uint1 x350; - fiat_p256_addcarryx_u32(&x349, &x350, x348, x333, x336); + fiat_p256_addcarryx_u32(&x349, &x350, x348, x336, x333); uint32_t x351; fiat_p256_uint1 x352; - fiat_p256_addcarryx_u32(&x351, &x352, x350, x331, x334); + fiat_p256_addcarryx_u32(&x351, &x352, x350, x334, x331); uint32_t x353; fiat_p256_uint1 x354; - fiat_p256_addcarryx_u32(&x353, &x354, x352, x329, x332); + fiat_p256_addcarryx_u32(&x353, &x354, x352, x332, x329); uint32_t x355; fiat_p256_uint1 x356; - fiat_p256_addcarryx_u32(&x355, &x356, x354, x327, x330); + fiat_p256_addcarryx_u32(&x355, &x356, x354, x330, x327); uint32_t x357; fiat_p256_uint1 x358; - fiat_p256_addcarryx_u32(&x357, &x358, x356, 0x0, x328); + fiat_p256_addcarryx_u32(&x357, &x358, x356, x328, 0x0); uint32_t x359; fiat_p256_uint1 x360; - fiat_p256_addcarryx_u32(&x359, &x360, 0x0, x341, x309); + fiat_p256_addcarryx_u32(&x359, &x360, 0x0, x309, x341); uint32_t x361; fiat_p256_uint1 x362; - fiat_p256_addcarryx_u32(&x361, &x362, x360, x343, x311); + fiat_p256_addcarryx_u32(&x361, &x362, x360, x311, x343); uint32_t x363; fiat_p256_uint1 x364; - fiat_p256_addcarryx_u32(&x363, &x364, x362, x345, x313); + fiat_p256_addcarryx_u32(&x363, &x364, x362, x313, x345); uint32_t x365; fiat_p256_uint1 x366; - fiat_p256_addcarryx_u32(&x365, &x366, x364, x347, x315); + fiat_p256_addcarryx_u32(&x365, &x366, x364, x315, x347); uint32_t x367; fiat_p256_uint1 x368; - fiat_p256_addcarryx_u32(&x367, &x368, x366, x349, x317); + fiat_p256_addcarryx_u32(&x367, &x368, x366, x317, x349); uint32_t x369; fiat_p256_uint1 x370; - fiat_p256_addcarryx_u32(&x369, &x370, x368, x351, x319); + fiat_p256_addcarryx_u32(&x369, &x370, x368, x319, x351); uint32_t x371; fiat_p256_uint1 x372; - fiat_p256_addcarryx_u32(&x371, &x372, x370, x353, x321); + fiat_p256_addcarryx_u32(&x371, &x372, x370, x321, x353); uint32_t x373; fiat_p256_uint1 x374; - fiat_p256_addcarryx_u32(&x373, &x374, x372, x355, x323); + fiat_p256_addcarryx_u32(&x373, &x374, x372, x323, x355); uint32_t x375; fiat_p256_uint1 x376; - fiat_p256_addcarryx_u32(&x375, &x376, x374, x357, x325); + fiat_p256_addcarryx_u32(&x375, &x376, x374, x325, x357); uint32_t x377; uint32_t x378; fiat_p256_mulx_u32(&x377, &x378, x359, UINT32_C(0xffffffff)); @@ -690,43 +690,43 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x383, &x384, x359, UINT32_C(0xffffffff)); uint32_t x385; fiat_p256_uint1 x386; - fiat_p256_addcarryx_u32(&x385, &x386, 0x0, x381, x384); + fiat_p256_addcarryx_u32(&x385, &x386, 0x0, x384, x381); uint32_t x387; fiat_p256_uint1 x388; - fiat_p256_addcarryx_u32(&x387, &x388, x386, x379, x382); + fiat_p256_addcarryx_u32(&x387, &x388, x386, x382, x379); uint32_t x389; fiat_p256_uint1 x390; - fiat_p256_addcarryx_u32(&x389, &x390, x388, 0x0, x380); + fiat_p256_addcarryx_u32(&x389, &x390, x388, x380, 0x0); uint32_t x391; fiat_p256_uint1 x392; - fiat_p256_addcarryx_u32(&x391, &x392, 0x0, x383, x359); + fiat_p256_addcarryx_u32(&x391, &x392, 0x0, x359, x383); uint32_t x393; fiat_p256_uint1 x394; - fiat_p256_addcarryx_u32(&x393, &x394, x392, x385, x361); + fiat_p256_addcarryx_u32(&x393, &x394, x392, x361, x385); uint32_t x395; fiat_p256_uint1 x396; - fiat_p256_addcarryx_u32(&x395, &x396, x394, x387, x363); + fiat_p256_addcarryx_u32(&x395, &x396, x394, x363, x387); uint32_t x397; fiat_p256_uint1 x398; - fiat_p256_addcarryx_u32(&x397, &x398, x396, x389, x365); + fiat_p256_addcarryx_u32(&x397, &x398, x396, x365, x389); uint32_t x399; fiat_p256_uint1 x400; - fiat_p256_addcarryx_u32(&x399, &x400, x398, 0x0, x367); + fiat_p256_addcarryx_u32(&x399, &x400, x398, x367, 0x0); uint32_t x401; fiat_p256_uint1 x402; - fiat_p256_addcarryx_u32(&x401, &x402, x400, 0x0, x369); + fiat_p256_addcarryx_u32(&x401, &x402, x400, x369, 0x0); uint32_t x403; fiat_p256_uint1 x404; - fiat_p256_addcarryx_u32(&x403, &x404, x402, x359, x371); + fiat_p256_addcarryx_u32(&x403, &x404, x402, x371, x359); uint32_t x405; fiat_p256_uint1 x406; - fiat_p256_addcarryx_u32(&x405, &x406, x404, x377, x373); + fiat_p256_addcarryx_u32(&x405, &x406, x404, x373, x377); uint32_t x407; fiat_p256_uint1 x408; - fiat_p256_addcarryx_u32(&x407, &x408, x406, x378, x375); + fiat_p256_addcarryx_u32(&x407, &x408, x406, x375, x378); uint32_t x409; fiat_p256_uint1 x410; - fiat_p256_addcarryx_u32(&x409, &x410, x408, 0x0, x376); + fiat_p256_addcarryx_u32(&x409, &x410, x408, x376, 0x0); uint32_t x411; uint32_t x412; fiat_p256_mulx_u32(&x411, &x412, x5, (arg2[7])); @@ -753,55 +753,55 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x425, &x426, x5, (arg2[0])); uint32_t x427; fiat_p256_uint1 x428; - fiat_p256_addcarryx_u32(&x427, &x428, 0x0, x423, x426); + fiat_p256_addcarryx_u32(&x427, &x428, 0x0, x426, x423); uint32_t x429; fiat_p256_uint1 x430; - fiat_p256_addcarryx_u32(&x429, &x430, x428, x421, x424); + fiat_p256_addcarryx_u32(&x429, &x430, x428, x424, x421); uint32_t x431; fiat_p256_uint1 x432; - fiat_p256_addcarryx_u32(&x431, &x432, x430, x419, x422); + fiat_p256_addcarryx_u32(&x431, &x432, x430, x422, x419); uint32_t x433; fiat_p256_uint1 x434; - fiat_p256_addcarryx_u32(&x433, &x434, x432, x417, x420); + fiat_p256_addcarryx_u32(&x433, &x434, x432, x420, x417); uint32_t x435; fiat_p256_uint1 x436; - fiat_p256_addcarryx_u32(&x435, &x436, x434, x415, x418); + fiat_p256_addcarryx_u32(&x435, &x436, x434, x418, x415); uint32_t x437; fiat_p256_uint1 x438; - fiat_p256_addcarryx_u32(&x437, &x438, x436, x413, x416); + fiat_p256_addcarryx_u32(&x437, &x438, x436, x416, x413); uint32_t x439; fiat_p256_uint1 x440; - fiat_p256_addcarryx_u32(&x439, &x440, x438, x411, x414); + fiat_p256_addcarryx_u32(&x439, &x440, x438, x414, x411); uint32_t x441; fiat_p256_uint1 x442; - fiat_p256_addcarryx_u32(&x441, &x442, x440, 0x0, x412); + fiat_p256_addcarryx_u32(&x441, &x442, x440, x412, 0x0); uint32_t x443; fiat_p256_uint1 x444; - fiat_p256_addcarryx_u32(&x443, &x444, 0x0, x425, x393); + fiat_p256_addcarryx_u32(&x443, &x444, 0x0, x393, x425); uint32_t x445; fiat_p256_uint1 x446; - fiat_p256_addcarryx_u32(&x445, &x446, x444, x427, x395); + fiat_p256_addcarryx_u32(&x445, &x446, x444, x395, x427); uint32_t x447; fiat_p256_uint1 x448; - fiat_p256_addcarryx_u32(&x447, &x448, x446, x429, x397); + fiat_p256_addcarryx_u32(&x447, &x448, x446, x397, x429); uint32_t x449; fiat_p256_uint1 x450; - fiat_p256_addcarryx_u32(&x449, &x450, x448, x431, x399); + fiat_p256_addcarryx_u32(&x449, &x450, x448, x399, x431); uint32_t x451; fiat_p256_uint1 x452; - fiat_p256_addcarryx_u32(&x451, &x452, x450, x433, x401); + fiat_p256_addcarryx_u32(&x451, &x452, x450, x401, x433); uint32_t x453; fiat_p256_uint1 x454; - fiat_p256_addcarryx_u32(&x453, &x454, x452, x435, x403); + fiat_p256_addcarryx_u32(&x453, &x454, x452, x403, x435); uint32_t x455; fiat_p256_uint1 x456; - fiat_p256_addcarryx_u32(&x455, &x456, x454, x437, x405); + fiat_p256_addcarryx_u32(&x455, &x456, x454, x405, x437); uint32_t x457; fiat_p256_uint1 x458; - fiat_p256_addcarryx_u32(&x457, &x458, x456, x439, x407); + fiat_p256_addcarryx_u32(&x457, &x458, x456, x407, x439); uint32_t x459; fiat_p256_uint1 x460; - fiat_p256_addcarryx_u32(&x459, &x460, x458, x441, x409); + fiat_p256_addcarryx_u32(&x459, &x460, x458, x409, x441); uint32_t x461; uint32_t x462; fiat_p256_mulx_u32(&x461, &x462, x443, UINT32_C(0xffffffff)); @@ -816,43 +816,43 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x467, &x468, x443, UINT32_C(0xffffffff)); uint32_t x469; fiat_p256_uint1 x470; - fiat_p256_addcarryx_u32(&x469, &x470, 0x0, x465, x468); + fiat_p256_addcarryx_u32(&x469, &x470, 0x0, x468, x465); uint32_t x471; fiat_p256_uint1 x472; - fiat_p256_addcarryx_u32(&x471, &x472, x470, x463, x466); + fiat_p256_addcarryx_u32(&x471, &x472, x470, x466, x463); uint32_t x473; fiat_p256_uint1 x474; - fiat_p256_addcarryx_u32(&x473, &x474, x472, 0x0, x464); + fiat_p256_addcarryx_u32(&x473, &x474, x472, x464, 0x0); uint32_t x475; fiat_p256_uint1 x476; - fiat_p256_addcarryx_u32(&x475, &x476, 0x0, x467, x443); + fiat_p256_addcarryx_u32(&x475, &x476, 0x0, x443, x467); uint32_t x477; fiat_p256_uint1 x478; - fiat_p256_addcarryx_u32(&x477, &x478, x476, x469, x445); + fiat_p256_addcarryx_u32(&x477, &x478, x476, x445, x469); uint32_t x479; fiat_p256_uint1 x480; - fiat_p256_addcarryx_u32(&x479, &x480, x478, x471, x447); + fiat_p256_addcarryx_u32(&x479, &x480, x478, x447, x471); uint32_t x481; fiat_p256_uint1 x482; - fiat_p256_addcarryx_u32(&x481, &x482, x480, x473, x449); + fiat_p256_addcarryx_u32(&x481, &x482, x480, x449, x473); uint32_t x483; fiat_p256_uint1 x484; - fiat_p256_addcarryx_u32(&x483, &x484, x482, 0x0, x451); + fiat_p256_addcarryx_u32(&x483, &x484, x482, x451, 0x0); uint32_t x485; fiat_p256_uint1 x486; - fiat_p256_addcarryx_u32(&x485, &x486, x484, 0x0, x453); + fiat_p256_addcarryx_u32(&x485, &x486, x484, x453, 0x0); uint32_t x487; fiat_p256_uint1 x488; - fiat_p256_addcarryx_u32(&x487, &x488, x486, x443, x455); + fiat_p256_addcarryx_u32(&x487, &x488, x486, x455, x443); uint32_t x489; fiat_p256_uint1 x490; - fiat_p256_addcarryx_u32(&x489, &x490, x488, x461, x457); + fiat_p256_addcarryx_u32(&x489, &x490, x488, x457, x461); uint32_t x491; fiat_p256_uint1 x492; - fiat_p256_addcarryx_u32(&x491, &x492, x490, x462, x459); + fiat_p256_addcarryx_u32(&x491, &x492, x490, x459, x462); uint32_t x493; fiat_p256_uint1 x494; - fiat_p256_addcarryx_u32(&x493, &x494, x492, 0x0, x460); + fiat_p256_addcarryx_u32(&x493, &x494, x492, x460, 0x0); uint32_t x495; uint32_t x496; fiat_p256_mulx_u32(&x495, &x496, x6, (arg2[7])); @@ -879,55 +879,55 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x509, &x510, x6, (arg2[0])); uint32_t x511; fiat_p256_uint1 x512; - fiat_p256_addcarryx_u32(&x511, &x512, 0x0, x507, x510); + fiat_p256_addcarryx_u32(&x511, &x512, 0x0, x510, x507); uint32_t x513; fiat_p256_uint1 x514; - fiat_p256_addcarryx_u32(&x513, &x514, x512, x505, x508); + fiat_p256_addcarryx_u32(&x513, &x514, x512, x508, x505); uint32_t x515; fiat_p256_uint1 x516; - fiat_p256_addcarryx_u32(&x515, &x516, x514, x503, x506); + fiat_p256_addcarryx_u32(&x515, &x516, x514, x506, x503); uint32_t x517; fiat_p256_uint1 x518; - fiat_p256_addcarryx_u32(&x517, &x518, x516, x501, x504); + fiat_p256_addcarryx_u32(&x517, &x518, x516, x504, x501); uint32_t x519; fiat_p256_uint1 x520; - fiat_p256_addcarryx_u32(&x519, &x520, x518, x499, x502); + fiat_p256_addcarryx_u32(&x519, &x520, x518, x502, x499); uint32_t x521; fiat_p256_uint1 x522; - fiat_p256_addcarryx_u32(&x521, &x522, x520, x497, x500); + fiat_p256_addcarryx_u32(&x521, &x522, x520, x500, x497); uint32_t x523; fiat_p256_uint1 x524; - fiat_p256_addcarryx_u32(&x523, &x524, x522, x495, x498); + fiat_p256_addcarryx_u32(&x523, &x524, x522, x498, x495); uint32_t x525; fiat_p256_uint1 x526; - fiat_p256_addcarryx_u32(&x525, &x526, x524, 0x0, x496); + fiat_p256_addcarryx_u32(&x525, &x526, x524, x496, 0x0); uint32_t x527; fiat_p256_uint1 x528; - fiat_p256_addcarryx_u32(&x527, &x528, 0x0, x509, x477); + fiat_p256_addcarryx_u32(&x527, &x528, 0x0, x477, x509); uint32_t x529; fiat_p256_uint1 x530; - fiat_p256_addcarryx_u32(&x529, &x530, x528, x511, x479); + fiat_p256_addcarryx_u32(&x529, &x530, x528, x479, x511); uint32_t x531; fiat_p256_uint1 x532; - fiat_p256_addcarryx_u32(&x531, &x532, x530, x513, x481); + fiat_p256_addcarryx_u32(&x531, &x532, x530, x481, x513); uint32_t x533; fiat_p256_uint1 x534; - fiat_p256_addcarryx_u32(&x533, &x534, x532, x515, x483); + fiat_p256_addcarryx_u32(&x533, &x534, x532, x483, x515); uint32_t x535; fiat_p256_uint1 x536; - fiat_p256_addcarryx_u32(&x535, &x536, x534, x517, x485); + fiat_p256_addcarryx_u32(&x535, &x536, x534, x485, x517); uint32_t x537; fiat_p256_uint1 x538; - fiat_p256_addcarryx_u32(&x537, &x538, x536, x519, x487); + fiat_p256_addcarryx_u32(&x537, &x538, x536, x487, x519); uint32_t x539; fiat_p256_uint1 x540; - fiat_p256_addcarryx_u32(&x539, &x540, x538, x521, x489); + fiat_p256_addcarryx_u32(&x539, &x540, x538, x489, x521); uint32_t x541; fiat_p256_uint1 x542; - fiat_p256_addcarryx_u32(&x541, &x542, x540, x523, x491); + fiat_p256_addcarryx_u32(&x541, &x542, x540, x491, x523); uint32_t x543; fiat_p256_uint1 x544; - fiat_p256_addcarryx_u32(&x543, &x544, x542, x525, x493); + fiat_p256_addcarryx_u32(&x543, &x544, x542, x493, x525); uint32_t x545; uint32_t x546; fiat_p256_mulx_u32(&x545, &x546, x527, UINT32_C(0xffffffff)); @@ -942,43 +942,43 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x551, &x552, x527, UINT32_C(0xffffffff)); uint32_t x553; fiat_p256_uint1 x554; - fiat_p256_addcarryx_u32(&x553, &x554, 0x0, x549, x552); + fiat_p256_addcarryx_u32(&x553, &x554, 0x0, x552, x549); uint32_t x555; fiat_p256_uint1 x556; - fiat_p256_addcarryx_u32(&x555, &x556, x554, x547, x550); + fiat_p256_addcarryx_u32(&x555, &x556, x554, x550, x547); uint32_t x557; fiat_p256_uint1 x558; - fiat_p256_addcarryx_u32(&x557, &x558, x556, 0x0, x548); + fiat_p256_addcarryx_u32(&x557, &x558, x556, x548, 0x0); uint32_t x559; fiat_p256_uint1 x560; - fiat_p256_addcarryx_u32(&x559, &x560, 0x0, x551, x527); + fiat_p256_addcarryx_u32(&x559, &x560, 0x0, x527, x551); uint32_t x561; fiat_p256_uint1 x562; - fiat_p256_addcarryx_u32(&x561, &x562, x560, x553, x529); + fiat_p256_addcarryx_u32(&x561, &x562, x560, x529, x553); uint32_t x563; fiat_p256_uint1 x564; - fiat_p256_addcarryx_u32(&x563, &x564, x562, x555, x531); + fiat_p256_addcarryx_u32(&x563, &x564, x562, x531, x555); uint32_t x565; fiat_p256_uint1 x566; - fiat_p256_addcarryx_u32(&x565, &x566, x564, x557, x533); + fiat_p256_addcarryx_u32(&x565, &x566, x564, x533, x557); uint32_t x567; fiat_p256_uint1 x568; - fiat_p256_addcarryx_u32(&x567, &x568, x566, 0x0, x535); + fiat_p256_addcarryx_u32(&x567, &x568, x566, x535, 0x0); uint32_t x569; fiat_p256_uint1 x570; - fiat_p256_addcarryx_u32(&x569, &x570, x568, 0x0, x537); + fiat_p256_addcarryx_u32(&x569, &x570, x568, x537, 0x0); uint32_t x571; fiat_p256_uint1 x572; - fiat_p256_addcarryx_u32(&x571, &x572, x570, x527, x539); + fiat_p256_addcarryx_u32(&x571, &x572, x570, x539, x527); uint32_t x573; fiat_p256_uint1 x574; - fiat_p256_addcarryx_u32(&x573, &x574, x572, x545, x541); + fiat_p256_addcarryx_u32(&x573, &x574, x572, x541, x545); uint32_t x575; fiat_p256_uint1 x576; - fiat_p256_addcarryx_u32(&x575, &x576, x574, x546, x543); + fiat_p256_addcarryx_u32(&x575, &x576, x574, x543, x546); uint32_t x577; fiat_p256_uint1 x578; - fiat_p256_addcarryx_u32(&x577, &x578, x576, 0x0, x544); + fiat_p256_addcarryx_u32(&x577, &x578, x576, x544, 0x0); uint32_t x579; uint32_t x580; fiat_p256_mulx_u32(&x579, &x580, x7, (arg2[7])); @@ -1005,55 +1005,55 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x593, &x594, x7, (arg2[0])); uint32_t x595; fiat_p256_uint1 x596; - fiat_p256_addcarryx_u32(&x595, &x596, 0x0, x591, x594); + fiat_p256_addcarryx_u32(&x595, &x596, 0x0, x594, x591); uint32_t x597; fiat_p256_uint1 x598; - fiat_p256_addcarryx_u32(&x597, &x598, x596, x589, x592); + fiat_p256_addcarryx_u32(&x597, &x598, x596, x592, x589); uint32_t x599; fiat_p256_uint1 x600; - fiat_p256_addcarryx_u32(&x599, &x600, x598, x587, x590); + fiat_p256_addcarryx_u32(&x599, &x600, x598, x590, x587); uint32_t x601; fiat_p256_uint1 x602; - fiat_p256_addcarryx_u32(&x601, &x602, x600, x585, x588); + fiat_p256_addcarryx_u32(&x601, &x602, x600, x588, x585); uint32_t x603; fiat_p256_uint1 x604; - fiat_p256_addcarryx_u32(&x603, &x604, x602, x583, x586); + fiat_p256_addcarryx_u32(&x603, &x604, x602, x586, x583); uint32_t x605; fiat_p256_uint1 x606; - fiat_p256_addcarryx_u32(&x605, &x606, x604, x581, x584); + fiat_p256_addcarryx_u32(&x605, &x606, x604, x584, x581); uint32_t x607; fiat_p256_uint1 x608; - fiat_p256_addcarryx_u32(&x607, &x608, x606, x579, x582); + fiat_p256_addcarryx_u32(&x607, &x608, x606, x582, x579); uint32_t x609; fiat_p256_uint1 x610; - fiat_p256_addcarryx_u32(&x609, &x610, x608, 0x0, x580); + fiat_p256_addcarryx_u32(&x609, &x610, x608, x580, 0x0); uint32_t x611; fiat_p256_uint1 x612; - fiat_p256_addcarryx_u32(&x611, &x612, 0x0, x593, x561); + fiat_p256_addcarryx_u32(&x611, &x612, 0x0, x561, x593); uint32_t x613; fiat_p256_uint1 x614; - fiat_p256_addcarryx_u32(&x613, &x614, x612, x595, x563); + fiat_p256_addcarryx_u32(&x613, &x614, x612, x563, x595); uint32_t x615; fiat_p256_uint1 x616; - fiat_p256_addcarryx_u32(&x615, &x616, x614, x597, x565); + fiat_p256_addcarryx_u32(&x615, &x616, x614, x565, x597); uint32_t x617; fiat_p256_uint1 x618; - fiat_p256_addcarryx_u32(&x617, &x618, x616, x599, x567); + fiat_p256_addcarryx_u32(&x617, &x618, x616, x567, x599); uint32_t x619; fiat_p256_uint1 x620; - fiat_p256_addcarryx_u32(&x619, &x620, x618, x601, x569); + fiat_p256_addcarryx_u32(&x619, &x620, x618, x569, x601); uint32_t x621; fiat_p256_uint1 x622; - fiat_p256_addcarryx_u32(&x621, &x622, x620, x603, x571); + fiat_p256_addcarryx_u32(&x621, &x622, x620, x571, x603); uint32_t x623; fiat_p256_uint1 x624; - fiat_p256_addcarryx_u32(&x623, &x624, x622, x605, x573); + fiat_p256_addcarryx_u32(&x623, &x624, x622, x573, x605); uint32_t x625; fiat_p256_uint1 x626; - fiat_p256_addcarryx_u32(&x625, &x626, x624, x607, x575); + fiat_p256_addcarryx_u32(&x625, &x626, x624, x575, x607); uint32_t x627; fiat_p256_uint1 x628; - fiat_p256_addcarryx_u32(&x627, &x628, x626, x609, x577); + fiat_p256_addcarryx_u32(&x627, &x628, x626, x577, x609); uint32_t x629; uint32_t x630; fiat_p256_mulx_u32(&x629, &x630, x611, UINT32_C(0xffffffff)); @@ -1068,43 +1068,43 @@ static void fiat_p256_mul(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_mulx_u32(&x635, &x636, x611, UINT32_C(0xffffffff)); uint32_t x637; fiat_p256_uint1 x638; - fiat_p256_addcarryx_u32(&x637, &x638, 0x0, x633, x636); + fiat_p256_addcarryx_u32(&x637, &x638, 0x0, x636, x633); uint32_t x639; fiat_p256_uint1 x640; - fiat_p256_addcarryx_u32(&x639, &x640, x638, x631, x634); + fiat_p256_addcarryx_u32(&x639, &x640, x638, x634, x631); uint32_t x641; fiat_p256_uint1 x642; - fiat_p256_addcarryx_u32(&x641, &x642, x640, 0x0, x632); + fiat_p256_addcarryx_u32(&x641, &x642, x640, x632, 0x0); uint32_t x643; fiat_p256_uint1 x644; - fiat_p256_addcarryx_u32(&x643, &x644, 0x0, x635, x611); + fiat_p256_addcarryx_u32(&x643, &x644, 0x0, x611, x635); uint32_t x645; fiat_p256_uint1 x646; - fiat_p256_addcarryx_u32(&x645, &x646, x644, x637, x613); + fiat_p256_addcarryx_u32(&x645, &x646, x644, x613, x637); uint32_t x647; fiat_p256_uint1 x648; - fiat_p256_addcarryx_u32(&x647, &x648, x646, x639, x615); + fiat_p256_addcarryx_u32(&x647, &x648, x646, x615, x639); uint32_t x649; fiat_p256_uint1 x650; - fiat_p256_addcarryx_u32(&x649, &x650, x648, x641, x617); + fiat_p256_addcarryx_u32(&x649, &x650, x648, x617, x641); uint32_t x651; fiat_p256_uint1 x652; - fiat_p256_addcarryx_u32(&x651, &x652, x650, 0x0, x619); + fiat_p256_addcarryx_u32(&x651, &x652, x650, x619, 0x0); uint32_t x653; fiat_p256_uint1 x654; - fiat_p256_addcarryx_u32(&x653, &x654, x652, 0x0, x621); + fiat_p256_addcarryx_u32(&x653, &x654, x652, x621, 0x0); uint32_t x655; fiat_p256_uint1 x656; - fiat_p256_addcarryx_u32(&x655, &x656, x654, x611, x623); + fiat_p256_addcarryx_u32(&x655, &x656, x654, x623, x611); uint32_t x657; fiat_p256_uint1 x658; - fiat_p256_addcarryx_u32(&x657, &x658, x656, x629, x625); + fiat_p256_addcarryx_u32(&x657, &x658, x656, x625, x629); uint32_t x659; fiat_p256_uint1 x660; - fiat_p256_addcarryx_u32(&x659, &x660, x658, x630, x627); + fiat_p256_addcarryx_u32(&x659, &x660, x658, x627, x630); uint32_t x661; fiat_p256_uint1 x662; - fiat_p256_addcarryx_u32(&x661, &x662, x660, 0x0, x628); + fiat_p256_addcarryx_u32(&x661, &x662, x660, x628, 0x0); uint32_t x663; fiat_p256_uint1 x664; fiat_p256_subborrowx_u32(&x663, &x664, 0x0, x645, UINT32_C(0xffffffff)); @@ -1206,28 +1206,28 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x23, &x24, x8, (arg1[0])); uint32_t x25; fiat_p256_uint1 x26; - fiat_p256_addcarryx_u32(&x25, &x26, 0x0, x21, x24); + fiat_p256_addcarryx_u32(&x25, &x26, 0x0, x24, x21); uint32_t x27; fiat_p256_uint1 x28; - fiat_p256_addcarryx_u32(&x27, &x28, x26, x19, x22); + fiat_p256_addcarryx_u32(&x27, &x28, x26, x22, x19); uint32_t x29; fiat_p256_uint1 x30; - fiat_p256_addcarryx_u32(&x29, &x30, x28, x17, x20); + fiat_p256_addcarryx_u32(&x29, &x30, x28, x20, x17); uint32_t x31; fiat_p256_uint1 x32; - fiat_p256_addcarryx_u32(&x31, &x32, x30, x15, x18); + fiat_p256_addcarryx_u32(&x31, &x32, x30, x18, x15); uint32_t x33; fiat_p256_uint1 x34; - fiat_p256_addcarryx_u32(&x33, &x34, x32, x13, x16); + fiat_p256_addcarryx_u32(&x33, &x34, x32, x16, x13); uint32_t x35; fiat_p256_uint1 x36; - fiat_p256_addcarryx_u32(&x35, &x36, x34, x11, x14); + fiat_p256_addcarryx_u32(&x35, &x36, x34, x14, x11); uint32_t x37; fiat_p256_uint1 x38; - fiat_p256_addcarryx_u32(&x37, &x38, x36, x9, x12); + fiat_p256_addcarryx_u32(&x37, &x38, x36, x12, x9); uint32_t x39; fiat_p256_uint1 x40; - fiat_p256_addcarryx_u32(&x39, &x40, x38, 0x0, x10); + fiat_p256_addcarryx_u32(&x39, &x40, x38, x10, 0x0); uint32_t x41; uint32_t x42; fiat_p256_mulx_u32(&x41, &x42, x23, UINT32_C(0xffffffff)); @@ -1242,40 +1242,40 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x47, &x48, x23, UINT32_C(0xffffffff)); uint32_t x49; fiat_p256_uint1 x50; - fiat_p256_addcarryx_u32(&x49, &x50, 0x0, x45, x48); + fiat_p256_addcarryx_u32(&x49, &x50, 0x0, x48, x45); uint32_t x51; fiat_p256_uint1 x52; - fiat_p256_addcarryx_u32(&x51, &x52, x50, x43, x46); + fiat_p256_addcarryx_u32(&x51, &x52, x50, x46, x43); uint32_t x53; fiat_p256_uint1 x54; - fiat_p256_addcarryx_u32(&x53, &x54, x52, 0x0, x44); + fiat_p256_addcarryx_u32(&x53, &x54, x52, x44, 0x0); uint32_t x55; fiat_p256_uint1 x56; - fiat_p256_addcarryx_u32(&x55, &x56, 0x0, x47, x23); + fiat_p256_addcarryx_u32(&x55, &x56, 0x0, x23, x47); uint32_t x57; fiat_p256_uint1 x58; - fiat_p256_addcarryx_u32(&x57, &x58, x56, x49, x25); + fiat_p256_addcarryx_u32(&x57, &x58, x56, x25, x49); uint32_t x59; fiat_p256_uint1 x60; - fiat_p256_addcarryx_u32(&x59, &x60, x58, x51, x27); + fiat_p256_addcarryx_u32(&x59, &x60, x58, x27, x51); uint32_t x61; fiat_p256_uint1 x62; - fiat_p256_addcarryx_u32(&x61, &x62, x60, x53, x29); + fiat_p256_addcarryx_u32(&x61, &x62, x60, x29, x53); uint32_t x63; fiat_p256_uint1 x64; - fiat_p256_addcarryx_u32(&x63, &x64, x62, 0x0, x31); + fiat_p256_addcarryx_u32(&x63, &x64, x62, x31, 0x0); uint32_t x65; fiat_p256_uint1 x66; - fiat_p256_addcarryx_u32(&x65, &x66, x64, 0x0, x33); + fiat_p256_addcarryx_u32(&x65, &x66, x64, x33, 0x0); uint32_t x67; fiat_p256_uint1 x68; - fiat_p256_addcarryx_u32(&x67, &x68, x66, x23, x35); + fiat_p256_addcarryx_u32(&x67, &x68, x66, x35, x23); uint32_t x69; fiat_p256_uint1 x70; - fiat_p256_addcarryx_u32(&x69, &x70, x68, x41, x37); + fiat_p256_addcarryx_u32(&x69, &x70, x68, x37, x41); uint32_t x71; fiat_p256_uint1 x72; - fiat_p256_addcarryx_u32(&x71, &x72, x70, x42, x39); + fiat_p256_addcarryx_u32(&x71, &x72, x70, x39, x42); uint32_t x73; fiat_p256_uint1 x74; fiat_p256_addcarryx_u32(&x73, &x74, x72, 0x0, 0x0); @@ -1305,55 +1305,55 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x89, &x90, x1, (arg1[0])); uint32_t x91; fiat_p256_uint1 x92; - fiat_p256_addcarryx_u32(&x91, &x92, 0x0, x87, x90); + fiat_p256_addcarryx_u32(&x91, &x92, 0x0, x90, x87); uint32_t x93; fiat_p256_uint1 x94; - fiat_p256_addcarryx_u32(&x93, &x94, x92, x85, x88); + fiat_p256_addcarryx_u32(&x93, &x94, x92, x88, x85); uint32_t x95; fiat_p256_uint1 x96; - fiat_p256_addcarryx_u32(&x95, &x96, x94, x83, x86); + fiat_p256_addcarryx_u32(&x95, &x96, x94, x86, x83); uint32_t x97; fiat_p256_uint1 x98; - fiat_p256_addcarryx_u32(&x97, &x98, x96, x81, x84); + fiat_p256_addcarryx_u32(&x97, &x98, x96, x84, x81); uint32_t x99; fiat_p256_uint1 x100; - fiat_p256_addcarryx_u32(&x99, &x100, x98, x79, x82); + fiat_p256_addcarryx_u32(&x99, &x100, x98, x82, x79); uint32_t x101; fiat_p256_uint1 x102; - fiat_p256_addcarryx_u32(&x101, &x102, x100, x77, x80); + fiat_p256_addcarryx_u32(&x101, &x102, x100, x80, x77); uint32_t x103; fiat_p256_uint1 x104; - fiat_p256_addcarryx_u32(&x103, &x104, x102, x75, x78); + fiat_p256_addcarryx_u32(&x103, &x104, x102, x78, x75); uint32_t x105; fiat_p256_uint1 x106; - fiat_p256_addcarryx_u32(&x105, &x106, x104, 0x0, x76); + fiat_p256_addcarryx_u32(&x105, &x106, x104, x76, 0x0); uint32_t x107; fiat_p256_uint1 x108; - fiat_p256_addcarryx_u32(&x107, &x108, 0x0, x89, x57); + fiat_p256_addcarryx_u32(&x107, &x108, 0x0, x57, x89); uint32_t x109; fiat_p256_uint1 x110; - fiat_p256_addcarryx_u32(&x109, &x110, x108, x91, x59); + fiat_p256_addcarryx_u32(&x109, &x110, x108, x59, x91); uint32_t x111; fiat_p256_uint1 x112; - fiat_p256_addcarryx_u32(&x111, &x112, x110, x93, x61); + fiat_p256_addcarryx_u32(&x111, &x112, x110, x61, x93); uint32_t x113; fiat_p256_uint1 x114; - fiat_p256_addcarryx_u32(&x113, &x114, x112, x95, x63); + fiat_p256_addcarryx_u32(&x113, &x114, x112, x63, x95); uint32_t x115; fiat_p256_uint1 x116; - fiat_p256_addcarryx_u32(&x115, &x116, x114, x97, x65); + fiat_p256_addcarryx_u32(&x115, &x116, x114, x65, x97); uint32_t x117; fiat_p256_uint1 x118; - fiat_p256_addcarryx_u32(&x117, &x118, x116, x99, x67); + fiat_p256_addcarryx_u32(&x117, &x118, x116, x67, x99); uint32_t x119; fiat_p256_uint1 x120; - fiat_p256_addcarryx_u32(&x119, &x120, x118, x101, x69); + fiat_p256_addcarryx_u32(&x119, &x120, x118, x69, x101); uint32_t x121; fiat_p256_uint1 x122; - fiat_p256_addcarryx_u32(&x121, &x122, x120, x103, x71); + fiat_p256_addcarryx_u32(&x121, &x122, x120, x71, x103); uint32_t x123; fiat_p256_uint1 x124; - fiat_p256_addcarryx_u32(&x123, &x124, x122, x105, (fiat_p256_uint1)x73); + fiat_p256_addcarryx_u32(&x123, &x124, x122, (fiat_p256_uint1)x73, x105); uint32_t x125; uint32_t x126; fiat_p256_mulx_u32(&x125, &x126, x107, UINT32_C(0xffffffff)); @@ -1368,43 +1368,43 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x131, &x132, x107, UINT32_C(0xffffffff)); uint32_t x133; fiat_p256_uint1 x134; - fiat_p256_addcarryx_u32(&x133, &x134, 0x0, x129, x132); + fiat_p256_addcarryx_u32(&x133, &x134, 0x0, x132, x129); uint32_t x135; fiat_p256_uint1 x136; - fiat_p256_addcarryx_u32(&x135, &x136, x134, x127, x130); + fiat_p256_addcarryx_u32(&x135, &x136, x134, x130, x127); uint32_t x137; fiat_p256_uint1 x138; - fiat_p256_addcarryx_u32(&x137, &x138, x136, 0x0, x128); + fiat_p256_addcarryx_u32(&x137, &x138, x136, x128, 0x0); uint32_t x139; fiat_p256_uint1 x140; - fiat_p256_addcarryx_u32(&x139, &x140, 0x0, x131, x107); + fiat_p256_addcarryx_u32(&x139, &x140, 0x0, x107, x131); uint32_t x141; fiat_p256_uint1 x142; - fiat_p256_addcarryx_u32(&x141, &x142, x140, x133, x109); + fiat_p256_addcarryx_u32(&x141, &x142, x140, x109, x133); uint32_t x143; fiat_p256_uint1 x144; - fiat_p256_addcarryx_u32(&x143, &x144, x142, x135, x111); + fiat_p256_addcarryx_u32(&x143, &x144, x142, x111, x135); uint32_t x145; fiat_p256_uint1 x146; - fiat_p256_addcarryx_u32(&x145, &x146, x144, x137, x113); + fiat_p256_addcarryx_u32(&x145, &x146, x144, x113, x137); uint32_t x147; fiat_p256_uint1 x148; - fiat_p256_addcarryx_u32(&x147, &x148, x146, 0x0, x115); + fiat_p256_addcarryx_u32(&x147, &x148, x146, x115, 0x0); uint32_t x149; fiat_p256_uint1 x150; - fiat_p256_addcarryx_u32(&x149, &x150, x148, 0x0, x117); + fiat_p256_addcarryx_u32(&x149, &x150, x148, x117, 0x0); uint32_t x151; fiat_p256_uint1 x152; - fiat_p256_addcarryx_u32(&x151, &x152, x150, x107, x119); + fiat_p256_addcarryx_u32(&x151, &x152, x150, x119, x107); uint32_t x153; fiat_p256_uint1 x154; - fiat_p256_addcarryx_u32(&x153, &x154, x152, x125, x121); + fiat_p256_addcarryx_u32(&x153, &x154, x152, x121, x125); uint32_t x155; fiat_p256_uint1 x156; - fiat_p256_addcarryx_u32(&x155, &x156, x154, x126, x123); + fiat_p256_addcarryx_u32(&x155, &x156, x154, x123, x126); uint32_t x157; fiat_p256_uint1 x158; - fiat_p256_addcarryx_u32(&x157, &x158, x156, 0x0, x124); + fiat_p256_addcarryx_u32(&x157, &x158, x156, x124, 0x0); uint32_t x159; uint32_t x160; fiat_p256_mulx_u32(&x159, &x160, x2, (arg1[7])); @@ -1431,55 +1431,55 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x173, &x174, x2, (arg1[0])); uint32_t x175; fiat_p256_uint1 x176; - fiat_p256_addcarryx_u32(&x175, &x176, 0x0, x171, x174); + fiat_p256_addcarryx_u32(&x175, &x176, 0x0, x174, x171); uint32_t x177; fiat_p256_uint1 x178; - fiat_p256_addcarryx_u32(&x177, &x178, x176, x169, x172); + fiat_p256_addcarryx_u32(&x177, &x178, x176, x172, x169); uint32_t x179; fiat_p256_uint1 x180; - fiat_p256_addcarryx_u32(&x179, &x180, x178, x167, x170); + fiat_p256_addcarryx_u32(&x179, &x180, x178, x170, x167); uint32_t x181; fiat_p256_uint1 x182; - fiat_p256_addcarryx_u32(&x181, &x182, x180, x165, x168); + fiat_p256_addcarryx_u32(&x181, &x182, x180, x168, x165); uint32_t x183; fiat_p256_uint1 x184; - fiat_p256_addcarryx_u32(&x183, &x184, x182, x163, x166); + fiat_p256_addcarryx_u32(&x183, &x184, x182, x166, x163); uint32_t x185; fiat_p256_uint1 x186; - fiat_p256_addcarryx_u32(&x185, &x186, x184, x161, x164); + fiat_p256_addcarryx_u32(&x185, &x186, x184, x164, x161); uint32_t x187; fiat_p256_uint1 x188; - fiat_p256_addcarryx_u32(&x187, &x188, x186, x159, x162); + fiat_p256_addcarryx_u32(&x187, &x188, x186, x162, x159); uint32_t x189; fiat_p256_uint1 x190; - fiat_p256_addcarryx_u32(&x189, &x190, x188, 0x0, x160); + fiat_p256_addcarryx_u32(&x189, &x190, x188, x160, 0x0); uint32_t x191; fiat_p256_uint1 x192; - fiat_p256_addcarryx_u32(&x191, &x192, 0x0, x173, x141); + fiat_p256_addcarryx_u32(&x191, &x192, 0x0, x141, x173); uint32_t x193; fiat_p256_uint1 x194; - fiat_p256_addcarryx_u32(&x193, &x194, x192, x175, x143); + fiat_p256_addcarryx_u32(&x193, &x194, x192, x143, x175); uint32_t x195; fiat_p256_uint1 x196; - fiat_p256_addcarryx_u32(&x195, &x196, x194, x177, x145); + fiat_p256_addcarryx_u32(&x195, &x196, x194, x145, x177); uint32_t x197; fiat_p256_uint1 x198; - fiat_p256_addcarryx_u32(&x197, &x198, x196, x179, x147); + fiat_p256_addcarryx_u32(&x197, &x198, x196, x147, x179); uint32_t x199; fiat_p256_uint1 x200; - fiat_p256_addcarryx_u32(&x199, &x200, x198, x181, x149); + fiat_p256_addcarryx_u32(&x199, &x200, x198, x149, x181); uint32_t x201; fiat_p256_uint1 x202; - fiat_p256_addcarryx_u32(&x201, &x202, x200, x183, x151); + fiat_p256_addcarryx_u32(&x201, &x202, x200, x151, x183); uint32_t x203; fiat_p256_uint1 x204; - fiat_p256_addcarryx_u32(&x203, &x204, x202, x185, x153); + fiat_p256_addcarryx_u32(&x203, &x204, x202, x153, x185); uint32_t x205; fiat_p256_uint1 x206; - fiat_p256_addcarryx_u32(&x205, &x206, x204, x187, x155); + fiat_p256_addcarryx_u32(&x205, &x206, x204, x155, x187); uint32_t x207; fiat_p256_uint1 x208; - fiat_p256_addcarryx_u32(&x207, &x208, x206, x189, x157); + fiat_p256_addcarryx_u32(&x207, &x208, x206, x157, x189); uint32_t x209; uint32_t x210; fiat_p256_mulx_u32(&x209, &x210, x191, UINT32_C(0xffffffff)); @@ -1494,43 +1494,43 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x215, &x216, x191, UINT32_C(0xffffffff)); uint32_t x217; fiat_p256_uint1 x218; - fiat_p256_addcarryx_u32(&x217, &x218, 0x0, x213, x216); + fiat_p256_addcarryx_u32(&x217, &x218, 0x0, x216, x213); uint32_t x219; fiat_p256_uint1 x220; - fiat_p256_addcarryx_u32(&x219, &x220, x218, x211, x214); + fiat_p256_addcarryx_u32(&x219, &x220, x218, x214, x211); uint32_t x221; fiat_p256_uint1 x222; - fiat_p256_addcarryx_u32(&x221, &x222, x220, 0x0, x212); + fiat_p256_addcarryx_u32(&x221, &x222, x220, x212, 0x0); uint32_t x223; fiat_p256_uint1 x224; - fiat_p256_addcarryx_u32(&x223, &x224, 0x0, x215, x191); + fiat_p256_addcarryx_u32(&x223, &x224, 0x0, x191, x215); uint32_t x225; fiat_p256_uint1 x226; - fiat_p256_addcarryx_u32(&x225, &x226, x224, x217, x193); + fiat_p256_addcarryx_u32(&x225, &x226, x224, x193, x217); uint32_t x227; fiat_p256_uint1 x228; - fiat_p256_addcarryx_u32(&x227, &x228, x226, x219, x195); + fiat_p256_addcarryx_u32(&x227, &x228, x226, x195, x219); uint32_t x229; fiat_p256_uint1 x230; - fiat_p256_addcarryx_u32(&x229, &x230, x228, x221, x197); + fiat_p256_addcarryx_u32(&x229, &x230, x228, x197, x221); uint32_t x231; fiat_p256_uint1 x232; - fiat_p256_addcarryx_u32(&x231, &x232, x230, 0x0, x199); + fiat_p256_addcarryx_u32(&x231, &x232, x230, x199, 0x0); uint32_t x233; fiat_p256_uint1 x234; - fiat_p256_addcarryx_u32(&x233, &x234, x232, 0x0, x201); + fiat_p256_addcarryx_u32(&x233, &x234, x232, x201, 0x0); uint32_t x235; fiat_p256_uint1 x236; - fiat_p256_addcarryx_u32(&x235, &x236, x234, x191, x203); + fiat_p256_addcarryx_u32(&x235, &x236, x234, x203, x191); uint32_t x237; fiat_p256_uint1 x238; - fiat_p256_addcarryx_u32(&x237, &x238, x236, x209, x205); + fiat_p256_addcarryx_u32(&x237, &x238, x236, x205, x209); uint32_t x239; fiat_p256_uint1 x240; - fiat_p256_addcarryx_u32(&x239, &x240, x238, x210, x207); + fiat_p256_addcarryx_u32(&x239, &x240, x238, x207, x210); uint32_t x241; fiat_p256_uint1 x242; - fiat_p256_addcarryx_u32(&x241, &x242, x240, 0x0, x208); + fiat_p256_addcarryx_u32(&x241, &x242, x240, x208, 0x0); uint32_t x243; uint32_t x244; fiat_p256_mulx_u32(&x243, &x244, x3, (arg1[7])); @@ -1557,55 +1557,55 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x257, &x258, x3, (arg1[0])); uint32_t x259; fiat_p256_uint1 x260; - fiat_p256_addcarryx_u32(&x259, &x260, 0x0, x255, x258); + fiat_p256_addcarryx_u32(&x259, &x260, 0x0, x258, x255); uint32_t x261; fiat_p256_uint1 x262; - fiat_p256_addcarryx_u32(&x261, &x262, x260, x253, x256); + fiat_p256_addcarryx_u32(&x261, &x262, x260, x256, x253); uint32_t x263; fiat_p256_uint1 x264; - fiat_p256_addcarryx_u32(&x263, &x264, x262, x251, x254); + fiat_p256_addcarryx_u32(&x263, &x264, x262, x254, x251); uint32_t x265; fiat_p256_uint1 x266; - fiat_p256_addcarryx_u32(&x265, &x266, x264, x249, x252); + fiat_p256_addcarryx_u32(&x265, &x266, x264, x252, x249); uint32_t x267; fiat_p256_uint1 x268; - fiat_p256_addcarryx_u32(&x267, &x268, x266, x247, x250); + fiat_p256_addcarryx_u32(&x267, &x268, x266, x250, x247); uint32_t x269; fiat_p256_uint1 x270; - fiat_p256_addcarryx_u32(&x269, &x270, x268, x245, x248); + fiat_p256_addcarryx_u32(&x269, &x270, x268, x248, x245); uint32_t x271; fiat_p256_uint1 x272; - fiat_p256_addcarryx_u32(&x271, &x272, x270, x243, x246); + fiat_p256_addcarryx_u32(&x271, &x272, x270, x246, x243); uint32_t x273; fiat_p256_uint1 x274; - fiat_p256_addcarryx_u32(&x273, &x274, x272, 0x0, x244); + fiat_p256_addcarryx_u32(&x273, &x274, x272, x244, 0x0); uint32_t x275; fiat_p256_uint1 x276; - fiat_p256_addcarryx_u32(&x275, &x276, 0x0, x257, x225); + fiat_p256_addcarryx_u32(&x275, &x276, 0x0, x225, x257); uint32_t x277; fiat_p256_uint1 x278; - fiat_p256_addcarryx_u32(&x277, &x278, x276, x259, x227); + fiat_p256_addcarryx_u32(&x277, &x278, x276, x227, x259); uint32_t x279; fiat_p256_uint1 x280; - fiat_p256_addcarryx_u32(&x279, &x280, x278, x261, x229); + fiat_p256_addcarryx_u32(&x279, &x280, x278, x229, x261); uint32_t x281; fiat_p256_uint1 x282; - fiat_p256_addcarryx_u32(&x281, &x282, x280, x263, x231); + fiat_p256_addcarryx_u32(&x281, &x282, x280, x231, x263); uint32_t x283; fiat_p256_uint1 x284; - fiat_p256_addcarryx_u32(&x283, &x284, x282, x265, x233); + fiat_p256_addcarryx_u32(&x283, &x284, x282, x233, x265); uint32_t x285; fiat_p256_uint1 x286; - fiat_p256_addcarryx_u32(&x285, &x286, x284, x267, x235); + fiat_p256_addcarryx_u32(&x285, &x286, x284, x235, x267); uint32_t x287; fiat_p256_uint1 x288; - fiat_p256_addcarryx_u32(&x287, &x288, x286, x269, x237); + fiat_p256_addcarryx_u32(&x287, &x288, x286, x237, x269); uint32_t x289; fiat_p256_uint1 x290; - fiat_p256_addcarryx_u32(&x289, &x290, x288, x271, x239); + fiat_p256_addcarryx_u32(&x289, &x290, x288, x239, x271); uint32_t x291; fiat_p256_uint1 x292; - fiat_p256_addcarryx_u32(&x291, &x292, x290, x273, x241); + fiat_p256_addcarryx_u32(&x291, &x292, x290, x241, x273); uint32_t x293; uint32_t x294; fiat_p256_mulx_u32(&x293, &x294, x275, UINT32_C(0xffffffff)); @@ -1620,43 +1620,43 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x299, &x300, x275, UINT32_C(0xffffffff)); uint32_t x301; fiat_p256_uint1 x302; - fiat_p256_addcarryx_u32(&x301, &x302, 0x0, x297, x300); + fiat_p256_addcarryx_u32(&x301, &x302, 0x0, x300, x297); uint32_t x303; fiat_p256_uint1 x304; - fiat_p256_addcarryx_u32(&x303, &x304, x302, x295, x298); + fiat_p256_addcarryx_u32(&x303, &x304, x302, x298, x295); uint32_t x305; fiat_p256_uint1 x306; - fiat_p256_addcarryx_u32(&x305, &x306, x304, 0x0, x296); + fiat_p256_addcarryx_u32(&x305, &x306, x304, x296, 0x0); uint32_t x307; fiat_p256_uint1 x308; - fiat_p256_addcarryx_u32(&x307, &x308, 0x0, x299, x275); + fiat_p256_addcarryx_u32(&x307, &x308, 0x0, x275, x299); uint32_t x309; fiat_p256_uint1 x310; - fiat_p256_addcarryx_u32(&x309, &x310, x308, x301, x277); + fiat_p256_addcarryx_u32(&x309, &x310, x308, x277, x301); uint32_t x311; fiat_p256_uint1 x312; - fiat_p256_addcarryx_u32(&x311, &x312, x310, x303, x279); + fiat_p256_addcarryx_u32(&x311, &x312, x310, x279, x303); uint32_t x313; fiat_p256_uint1 x314; - fiat_p256_addcarryx_u32(&x313, &x314, x312, x305, x281); + fiat_p256_addcarryx_u32(&x313, &x314, x312, x281, x305); uint32_t x315; fiat_p256_uint1 x316; - fiat_p256_addcarryx_u32(&x315, &x316, x314, 0x0, x283); + fiat_p256_addcarryx_u32(&x315, &x316, x314, x283, 0x0); uint32_t x317; fiat_p256_uint1 x318; - fiat_p256_addcarryx_u32(&x317, &x318, x316, 0x0, x285); + fiat_p256_addcarryx_u32(&x317, &x318, x316, x285, 0x0); uint32_t x319; fiat_p256_uint1 x320; - fiat_p256_addcarryx_u32(&x319, &x320, x318, x275, x287); + fiat_p256_addcarryx_u32(&x319, &x320, x318, x287, x275); uint32_t x321; fiat_p256_uint1 x322; - fiat_p256_addcarryx_u32(&x321, &x322, x320, x293, x289); + fiat_p256_addcarryx_u32(&x321, &x322, x320, x289, x293); uint32_t x323; fiat_p256_uint1 x324; - fiat_p256_addcarryx_u32(&x323, &x324, x322, x294, x291); + fiat_p256_addcarryx_u32(&x323, &x324, x322, x291, x294); uint32_t x325; fiat_p256_uint1 x326; - fiat_p256_addcarryx_u32(&x325, &x326, x324, 0x0, x292); + fiat_p256_addcarryx_u32(&x325, &x326, x324, x292, 0x0); uint32_t x327; uint32_t x328; fiat_p256_mulx_u32(&x327, &x328, x4, (arg1[7])); @@ -1683,55 +1683,55 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x341, &x342, x4, (arg1[0])); uint32_t x343; fiat_p256_uint1 x344; - fiat_p256_addcarryx_u32(&x343, &x344, 0x0, x339, x342); + fiat_p256_addcarryx_u32(&x343, &x344, 0x0, x342, x339); uint32_t x345; fiat_p256_uint1 x346; - fiat_p256_addcarryx_u32(&x345, &x346, x344, x337, x340); + fiat_p256_addcarryx_u32(&x345, &x346, x344, x340, x337); uint32_t x347; fiat_p256_uint1 x348; - fiat_p256_addcarryx_u32(&x347, &x348, x346, x335, x338); + fiat_p256_addcarryx_u32(&x347, &x348, x346, x338, x335); uint32_t x349; fiat_p256_uint1 x350; - fiat_p256_addcarryx_u32(&x349, &x350, x348, x333, x336); + fiat_p256_addcarryx_u32(&x349, &x350, x348, x336, x333); uint32_t x351; fiat_p256_uint1 x352; - fiat_p256_addcarryx_u32(&x351, &x352, x350, x331, x334); + fiat_p256_addcarryx_u32(&x351, &x352, x350, x334, x331); uint32_t x353; fiat_p256_uint1 x354; - fiat_p256_addcarryx_u32(&x353, &x354, x352, x329, x332); + fiat_p256_addcarryx_u32(&x353, &x354, x352, x332, x329); uint32_t x355; fiat_p256_uint1 x356; - fiat_p256_addcarryx_u32(&x355, &x356, x354, x327, x330); + fiat_p256_addcarryx_u32(&x355, &x356, x354, x330, x327); uint32_t x357; fiat_p256_uint1 x358; - fiat_p256_addcarryx_u32(&x357, &x358, x356, 0x0, x328); + fiat_p256_addcarryx_u32(&x357, &x358, x356, x328, 0x0); uint32_t x359; fiat_p256_uint1 x360; - fiat_p256_addcarryx_u32(&x359, &x360, 0x0, x341, x309); + fiat_p256_addcarryx_u32(&x359, &x360, 0x0, x309, x341); uint32_t x361; fiat_p256_uint1 x362; - fiat_p256_addcarryx_u32(&x361, &x362, x360, x343, x311); + fiat_p256_addcarryx_u32(&x361, &x362, x360, x311, x343); uint32_t x363; fiat_p256_uint1 x364; - fiat_p256_addcarryx_u32(&x363, &x364, x362, x345, x313); + fiat_p256_addcarryx_u32(&x363, &x364, x362, x313, x345); uint32_t x365; fiat_p256_uint1 x366; - fiat_p256_addcarryx_u32(&x365, &x366, x364, x347, x315); + fiat_p256_addcarryx_u32(&x365, &x366, x364, x315, x347); uint32_t x367; fiat_p256_uint1 x368; - fiat_p256_addcarryx_u32(&x367, &x368, x366, x349, x317); + fiat_p256_addcarryx_u32(&x367, &x368, x366, x317, x349); uint32_t x369; fiat_p256_uint1 x370; - fiat_p256_addcarryx_u32(&x369, &x370, x368, x351, x319); + fiat_p256_addcarryx_u32(&x369, &x370, x368, x319, x351); uint32_t x371; fiat_p256_uint1 x372; - fiat_p256_addcarryx_u32(&x371, &x372, x370, x353, x321); + fiat_p256_addcarryx_u32(&x371, &x372, x370, x321, x353); uint32_t x373; fiat_p256_uint1 x374; - fiat_p256_addcarryx_u32(&x373, &x374, x372, x355, x323); + fiat_p256_addcarryx_u32(&x373, &x374, x372, x323, x355); uint32_t x375; fiat_p256_uint1 x376; - fiat_p256_addcarryx_u32(&x375, &x376, x374, x357, x325); + fiat_p256_addcarryx_u32(&x375, &x376, x374, x325, x357); uint32_t x377; uint32_t x378; fiat_p256_mulx_u32(&x377, &x378, x359, UINT32_C(0xffffffff)); @@ -1746,43 +1746,43 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x383, &x384, x359, UINT32_C(0xffffffff)); uint32_t x385; fiat_p256_uint1 x386; - fiat_p256_addcarryx_u32(&x385, &x386, 0x0, x381, x384); + fiat_p256_addcarryx_u32(&x385, &x386, 0x0, x384, x381); uint32_t x387; fiat_p256_uint1 x388; - fiat_p256_addcarryx_u32(&x387, &x388, x386, x379, x382); + fiat_p256_addcarryx_u32(&x387, &x388, x386, x382, x379); uint32_t x389; fiat_p256_uint1 x390; - fiat_p256_addcarryx_u32(&x389, &x390, x388, 0x0, x380); + fiat_p256_addcarryx_u32(&x389, &x390, x388, x380, 0x0); uint32_t x391; fiat_p256_uint1 x392; - fiat_p256_addcarryx_u32(&x391, &x392, 0x0, x383, x359); + fiat_p256_addcarryx_u32(&x391, &x392, 0x0, x359, x383); uint32_t x393; fiat_p256_uint1 x394; - fiat_p256_addcarryx_u32(&x393, &x394, x392, x385, x361); + fiat_p256_addcarryx_u32(&x393, &x394, x392, x361, x385); uint32_t x395; fiat_p256_uint1 x396; - fiat_p256_addcarryx_u32(&x395, &x396, x394, x387, x363); + fiat_p256_addcarryx_u32(&x395, &x396, x394, x363, x387); uint32_t x397; fiat_p256_uint1 x398; - fiat_p256_addcarryx_u32(&x397, &x398, x396, x389, x365); + fiat_p256_addcarryx_u32(&x397, &x398, x396, x365, x389); uint32_t x399; fiat_p256_uint1 x400; - fiat_p256_addcarryx_u32(&x399, &x400, x398, 0x0, x367); + fiat_p256_addcarryx_u32(&x399, &x400, x398, x367, 0x0); uint32_t x401; fiat_p256_uint1 x402; - fiat_p256_addcarryx_u32(&x401, &x402, x400, 0x0, x369); + fiat_p256_addcarryx_u32(&x401, &x402, x400, x369, 0x0); uint32_t x403; fiat_p256_uint1 x404; - fiat_p256_addcarryx_u32(&x403, &x404, x402, x359, x371); + fiat_p256_addcarryx_u32(&x403, &x404, x402, x371, x359); uint32_t x405; fiat_p256_uint1 x406; - fiat_p256_addcarryx_u32(&x405, &x406, x404, x377, x373); + fiat_p256_addcarryx_u32(&x405, &x406, x404, x373, x377); uint32_t x407; fiat_p256_uint1 x408; - fiat_p256_addcarryx_u32(&x407, &x408, x406, x378, x375); + fiat_p256_addcarryx_u32(&x407, &x408, x406, x375, x378); uint32_t x409; fiat_p256_uint1 x410; - fiat_p256_addcarryx_u32(&x409, &x410, x408, 0x0, x376); + fiat_p256_addcarryx_u32(&x409, &x410, x408, x376, 0x0); uint32_t x411; uint32_t x412; fiat_p256_mulx_u32(&x411, &x412, x5, (arg1[7])); @@ -1809,55 +1809,55 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x425, &x426, x5, (arg1[0])); uint32_t x427; fiat_p256_uint1 x428; - fiat_p256_addcarryx_u32(&x427, &x428, 0x0, x423, x426); + fiat_p256_addcarryx_u32(&x427, &x428, 0x0, x426, x423); uint32_t x429; fiat_p256_uint1 x430; - fiat_p256_addcarryx_u32(&x429, &x430, x428, x421, x424); + fiat_p256_addcarryx_u32(&x429, &x430, x428, x424, x421); uint32_t x431; fiat_p256_uint1 x432; - fiat_p256_addcarryx_u32(&x431, &x432, x430, x419, x422); + fiat_p256_addcarryx_u32(&x431, &x432, x430, x422, x419); uint32_t x433; fiat_p256_uint1 x434; - fiat_p256_addcarryx_u32(&x433, &x434, x432, x417, x420); + fiat_p256_addcarryx_u32(&x433, &x434, x432, x420, x417); uint32_t x435; fiat_p256_uint1 x436; - fiat_p256_addcarryx_u32(&x435, &x436, x434, x415, x418); + fiat_p256_addcarryx_u32(&x435, &x436, x434, x418, x415); uint32_t x437; fiat_p256_uint1 x438; - fiat_p256_addcarryx_u32(&x437, &x438, x436, x413, x416); + fiat_p256_addcarryx_u32(&x437, &x438, x436, x416, x413); uint32_t x439; fiat_p256_uint1 x440; - fiat_p256_addcarryx_u32(&x439, &x440, x438, x411, x414); + fiat_p256_addcarryx_u32(&x439, &x440, x438, x414, x411); uint32_t x441; fiat_p256_uint1 x442; - fiat_p256_addcarryx_u32(&x441, &x442, x440, 0x0, x412); + fiat_p256_addcarryx_u32(&x441, &x442, x440, x412, 0x0); uint32_t x443; fiat_p256_uint1 x444; - fiat_p256_addcarryx_u32(&x443, &x444, 0x0, x425, x393); + fiat_p256_addcarryx_u32(&x443, &x444, 0x0, x393, x425); uint32_t x445; fiat_p256_uint1 x446; - fiat_p256_addcarryx_u32(&x445, &x446, x444, x427, x395); + fiat_p256_addcarryx_u32(&x445, &x446, x444, x395, x427); uint32_t x447; fiat_p256_uint1 x448; - fiat_p256_addcarryx_u32(&x447, &x448, x446, x429, x397); + fiat_p256_addcarryx_u32(&x447, &x448, x446, x397, x429); uint32_t x449; fiat_p256_uint1 x450; - fiat_p256_addcarryx_u32(&x449, &x450, x448, x431, x399); + fiat_p256_addcarryx_u32(&x449, &x450, x448, x399, x431); uint32_t x451; fiat_p256_uint1 x452; - fiat_p256_addcarryx_u32(&x451, &x452, x450, x433, x401); + fiat_p256_addcarryx_u32(&x451, &x452, x450, x401, x433); uint32_t x453; fiat_p256_uint1 x454; - fiat_p256_addcarryx_u32(&x453, &x454, x452, x435, x403); + fiat_p256_addcarryx_u32(&x453, &x454, x452, x403, x435); uint32_t x455; fiat_p256_uint1 x456; - fiat_p256_addcarryx_u32(&x455, &x456, x454, x437, x405); + fiat_p256_addcarryx_u32(&x455, &x456, x454, x405, x437); uint32_t x457; fiat_p256_uint1 x458; - fiat_p256_addcarryx_u32(&x457, &x458, x456, x439, x407); + fiat_p256_addcarryx_u32(&x457, &x458, x456, x407, x439); uint32_t x459; fiat_p256_uint1 x460; - fiat_p256_addcarryx_u32(&x459, &x460, x458, x441, x409); + fiat_p256_addcarryx_u32(&x459, &x460, x458, x409, x441); uint32_t x461; uint32_t x462; fiat_p256_mulx_u32(&x461, &x462, x443, UINT32_C(0xffffffff)); @@ -1872,43 +1872,43 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x467, &x468, x443, UINT32_C(0xffffffff)); uint32_t x469; fiat_p256_uint1 x470; - fiat_p256_addcarryx_u32(&x469, &x470, 0x0, x465, x468); + fiat_p256_addcarryx_u32(&x469, &x470, 0x0, x468, x465); uint32_t x471; fiat_p256_uint1 x472; - fiat_p256_addcarryx_u32(&x471, &x472, x470, x463, x466); + fiat_p256_addcarryx_u32(&x471, &x472, x470, x466, x463); uint32_t x473; fiat_p256_uint1 x474; - fiat_p256_addcarryx_u32(&x473, &x474, x472, 0x0, x464); + fiat_p256_addcarryx_u32(&x473, &x474, x472, x464, 0x0); uint32_t x475; fiat_p256_uint1 x476; - fiat_p256_addcarryx_u32(&x475, &x476, 0x0, x467, x443); + fiat_p256_addcarryx_u32(&x475, &x476, 0x0, x443, x467); uint32_t x477; fiat_p256_uint1 x478; - fiat_p256_addcarryx_u32(&x477, &x478, x476, x469, x445); + fiat_p256_addcarryx_u32(&x477, &x478, x476, x445, x469); uint32_t x479; fiat_p256_uint1 x480; - fiat_p256_addcarryx_u32(&x479, &x480, x478, x471, x447); + fiat_p256_addcarryx_u32(&x479, &x480, x478, x447, x471); uint32_t x481; fiat_p256_uint1 x482; - fiat_p256_addcarryx_u32(&x481, &x482, x480, x473, x449); + fiat_p256_addcarryx_u32(&x481, &x482, x480, x449, x473); uint32_t x483; fiat_p256_uint1 x484; - fiat_p256_addcarryx_u32(&x483, &x484, x482, 0x0, x451); + fiat_p256_addcarryx_u32(&x483, &x484, x482, x451, 0x0); uint32_t x485; fiat_p256_uint1 x486; - fiat_p256_addcarryx_u32(&x485, &x486, x484, 0x0, x453); + fiat_p256_addcarryx_u32(&x485, &x486, x484, x453, 0x0); uint32_t x487; fiat_p256_uint1 x488; - fiat_p256_addcarryx_u32(&x487, &x488, x486, x443, x455); + fiat_p256_addcarryx_u32(&x487, &x488, x486, x455, x443); uint32_t x489; fiat_p256_uint1 x490; - fiat_p256_addcarryx_u32(&x489, &x490, x488, x461, x457); + fiat_p256_addcarryx_u32(&x489, &x490, x488, x457, x461); uint32_t x491; fiat_p256_uint1 x492; - fiat_p256_addcarryx_u32(&x491, &x492, x490, x462, x459); + fiat_p256_addcarryx_u32(&x491, &x492, x490, x459, x462); uint32_t x493; fiat_p256_uint1 x494; - fiat_p256_addcarryx_u32(&x493, &x494, x492, 0x0, x460); + fiat_p256_addcarryx_u32(&x493, &x494, x492, x460, 0x0); uint32_t x495; uint32_t x496; fiat_p256_mulx_u32(&x495, &x496, x6, (arg1[7])); @@ -1935,55 +1935,55 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x509, &x510, x6, (arg1[0])); uint32_t x511; fiat_p256_uint1 x512; - fiat_p256_addcarryx_u32(&x511, &x512, 0x0, x507, x510); + fiat_p256_addcarryx_u32(&x511, &x512, 0x0, x510, x507); uint32_t x513; fiat_p256_uint1 x514; - fiat_p256_addcarryx_u32(&x513, &x514, x512, x505, x508); + fiat_p256_addcarryx_u32(&x513, &x514, x512, x508, x505); uint32_t x515; fiat_p256_uint1 x516; - fiat_p256_addcarryx_u32(&x515, &x516, x514, x503, x506); + fiat_p256_addcarryx_u32(&x515, &x516, x514, x506, x503); uint32_t x517; fiat_p256_uint1 x518; - fiat_p256_addcarryx_u32(&x517, &x518, x516, x501, x504); + fiat_p256_addcarryx_u32(&x517, &x518, x516, x504, x501); uint32_t x519; fiat_p256_uint1 x520; - fiat_p256_addcarryx_u32(&x519, &x520, x518, x499, x502); + fiat_p256_addcarryx_u32(&x519, &x520, x518, x502, x499); uint32_t x521; fiat_p256_uint1 x522; - fiat_p256_addcarryx_u32(&x521, &x522, x520, x497, x500); + fiat_p256_addcarryx_u32(&x521, &x522, x520, x500, x497); uint32_t x523; fiat_p256_uint1 x524; - fiat_p256_addcarryx_u32(&x523, &x524, x522, x495, x498); + fiat_p256_addcarryx_u32(&x523, &x524, x522, x498, x495); uint32_t x525; fiat_p256_uint1 x526; - fiat_p256_addcarryx_u32(&x525, &x526, x524, 0x0, x496); + fiat_p256_addcarryx_u32(&x525, &x526, x524, x496, 0x0); uint32_t x527; fiat_p256_uint1 x528; - fiat_p256_addcarryx_u32(&x527, &x528, 0x0, x509, x477); + fiat_p256_addcarryx_u32(&x527, &x528, 0x0, x477, x509); uint32_t x529; fiat_p256_uint1 x530; - fiat_p256_addcarryx_u32(&x529, &x530, x528, x511, x479); + fiat_p256_addcarryx_u32(&x529, &x530, x528, x479, x511); uint32_t x531; fiat_p256_uint1 x532; - fiat_p256_addcarryx_u32(&x531, &x532, x530, x513, x481); + fiat_p256_addcarryx_u32(&x531, &x532, x530, x481, x513); uint32_t x533; fiat_p256_uint1 x534; - fiat_p256_addcarryx_u32(&x533, &x534, x532, x515, x483); + fiat_p256_addcarryx_u32(&x533, &x534, x532, x483, x515); uint32_t x535; fiat_p256_uint1 x536; - fiat_p256_addcarryx_u32(&x535, &x536, x534, x517, x485); + fiat_p256_addcarryx_u32(&x535, &x536, x534, x485, x517); uint32_t x537; fiat_p256_uint1 x538; - fiat_p256_addcarryx_u32(&x537, &x538, x536, x519, x487); + fiat_p256_addcarryx_u32(&x537, &x538, x536, x487, x519); uint32_t x539; fiat_p256_uint1 x540; - fiat_p256_addcarryx_u32(&x539, &x540, x538, x521, x489); + fiat_p256_addcarryx_u32(&x539, &x540, x538, x489, x521); uint32_t x541; fiat_p256_uint1 x542; - fiat_p256_addcarryx_u32(&x541, &x542, x540, x523, x491); + fiat_p256_addcarryx_u32(&x541, &x542, x540, x491, x523); uint32_t x543; fiat_p256_uint1 x544; - fiat_p256_addcarryx_u32(&x543, &x544, x542, x525, x493); + fiat_p256_addcarryx_u32(&x543, &x544, x542, x493, x525); uint32_t x545; uint32_t x546; fiat_p256_mulx_u32(&x545, &x546, x527, UINT32_C(0xffffffff)); @@ -1998,43 +1998,43 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x551, &x552, x527, UINT32_C(0xffffffff)); uint32_t x553; fiat_p256_uint1 x554; - fiat_p256_addcarryx_u32(&x553, &x554, 0x0, x549, x552); + fiat_p256_addcarryx_u32(&x553, &x554, 0x0, x552, x549); uint32_t x555; fiat_p256_uint1 x556; - fiat_p256_addcarryx_u32(&x555, &x556, x554, x547, x550); + fiat_p256_addcarryx_u32(&x555, &x556, x554, x550, x547); uint32_t x557; fiat_p256_uint1 x558; - fiat_p256_addcarryx_u32(&x557, &x558, x556, 0x0, x548); + fiat_p256_addcarryx_u32(&x557, &x558, x556, x548, 0x0); uint32_t x559; fiat_p256_uint1 x560; - fiat_p256_addcarryx_u32(&x559, &x560, 0x0, x551, x527); + fiat_p256_addcarryx_u32(&x559, &x560, 0x0, x527, x551); uint32_t x561; fiat_p256_uint1 x562; - fiat_p256_addcarryx_u32(&x561, &x562, x560, x553, x529); + fiat_p256_addcarryx_u32(&x561, &x562, x560, x529, x553); uint32_t x563; fiat_p256_uint1 x564; - fiat_p256_addcarryx_u32(&x563, &x564, x562, x555, x531); + fiat_p256_addcarryx_u32(&x563, &x564, x562, x531, x555); uint32_t x565; fiat_p256_uint1 x566; - fiat_p256_addcarryx_u32(&x565, &x566, x564, x557, x533); + fiat_p256_addcarryx_u32(&x565, &x566, x564, x533, x557); uint32_t x567; fiat_p256_uint1 x568; - fiat_p256_addcarryx_u32(&x567, &x568, x566, 0x0, x535); + fiat_p256_addcarryx_u32(&x567, &x568, x566, x535, 0x0); uint32_t x569; fiat_p256_uint1 x570; - fiat_p256_addcarryx_u32(&x569, &x570, x568, 0x0, x537); + fiat_p256_addcarryx_u32(&x569, &x570, x568, x537, 0x0); uint32_t x571; fiat_p256_uint1 x572; - fiat_p256_addcarryx_u32(&x571, &x572, x570, x527, x539); + fiat_p256_addcarryx_u32(&x571, &x572, x570, x539, x527); uint32_t x573; fiat_p256_uint1 x574; - fiat_p256_addcarryx_u32(&x573, &x574, x572, x545, x541); + fiat_p256_addcarryx_u32(&x573, &x574, x572, x541, x545); uint32_t x575; fiat_p256_uint1 x576; - fiat_p256_addcarryx_u32(&x575, &x576, x574, x546, x543); + fiat_p256_addcarryx_u32(&x575, &x576, x574, x543, x546); uint32_t x577; fiat_p256_uint1 x578; - fiat_p256_addcarryx_u32(&x577, &x578, x576, 0x0, x544); + fiat_p256_addcarryx_u32(&x577, &x578, x576, x544, 0x0); uint32_t x579; uint32_t x580; fiat_p256_mulx_u32(&x579, &x580, x7, (arg1[7])); @@ -2061,55 +2061,55 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x593, &x594, x7, (arg1[0])); uint32_t x595; fiat_p256_uint1 x596; - fiat_p256_addcarryx_u32(&x595, &x596, 0x0, x591, x594); + fiat_p256_addcarryx_u32(&x595, &x596, 0x0, x594, x591); uint32_t x597; fiat_p256_uint1 x598; - fiat_p256_addcarryx_u32(&x597, &x598, x596, x589, x592); + fiat_p256_addcarryx_u32(&x597, &x598, x596, x592, x589); uint32_t x599; fiat_p256_uint1 x600; - fiat_p256_addcarryx_u32(&x599, &x600, x598, x587, x590); + fiat_p256_addcarryx_u32(&x599, &x600, x598, x590, x587); uint32_t x601; fiat_p256_uint1 x602; - fiat_p256_addcarryx_u32(&x601, &x602, x600, x585, x588); + fiat_p256_addcarryx_u32(&x601, &x602, x600, x588, x585); uint32_t x603; fiat_p256_uint1 x604; - fiat_p256_addcarryx_u32(&x603, &x604, x602, x583, x586); + fiat_p256_addcarryx_u32(&x603, &x604, x602, x586, x583); uint32_t x605; fiat_p256_uint1 x606; - fiat_p256_addcarryx_u32(&x605, &x606, x604, x581, x584); + fiat_p256_addcarryx_u32(&x605, &x606, x604, x584, x581); uint32_t x607; fiat_p256_uint1 x608; - fiat_p256_addcarryx_u32(&x607, &x608, x606, x579, x582); + fiat_p256_addcarryx_u32(&x607, &x608, x606, x582, x579); uint32_t x609; fiat_p256_uint1 x610; - fiat_p256_addcarryx_u32(&x609, &x610, x608, 0x0, x580); + fiat_p256_addcarryx_u32(&x609, &x610, x608, x580, 0x0); uint32_t x611; fiat_p256_uint1 x612; - fiat_p256_addcarryx_u32(&x611, &x612, 0x0, x593, x561); + fiat_p256_addcarryx_u32(&x611, &x612, 0x0, x561, x593); uint32_t x613; fiat_p256_uint1 x614; - fiat_p256_addcarryx_u32(&x613, &x614, x612, x595, x563); + fiat_p256_addcarryx_u32(&x613, &x614, x612, x563, x595); uint32_t x615; fiat_p256_uint1 x616; - fiat_p256_addcarryx_u32(&x615, &x616, x614, x597, x565); + fiat_p256_addcarryx_u32(&x615, &x616, x614, x565, x597); uint32_t x617; fiat_p256_uint1 x618; - fiat_p256_addcarryx_u32(&x617, &x618, x616, x599, x567); + fiat_p256_addcarryx_u32(&x617, &x618, x616, x567, x599); uint32_t x619; fiat_p256_uint1 x620; - fiat_p256_addcarryx_u32(&x619, &x620, x618, x601, x569); + fiat_p256_addcarryx_u32(&x619, &x620, x618, x569, x601); uint32_t x621; fiat_p256_uint1 x622; - fiat_p256_addcarryx_u32(&x621, &x622, x620, x603, x571); + fiat_p256_addcarryx_u32(&x621, &x622, x620, x571, x603); uint32_t x623; fiat_p256_uint1 x624; - fiat_p256_addcarryx_u32(&x623, &x624, x622, x605, x573); + fiat_p256_addcarryx_u32(&x623, &x624, x622, x573, x605); uint32_t x625; fiat_p256_uint1 x626; - fiat_p256_addcarryx_u32(&x625, &x626, x624, x607, x575); + fiat_p256_addcarryx_u32(&x625, &x626, x624, x575, x607); uint32_t x627; fiat_p256_uint1 x628; - fiat_p256_addcarryx_u32(&x627, &x628, x626, x609, x577); + fiat_p256_addcarryx_u32(&x627, &x628, x626, x577, x609); uint32_t x629; uint32_t x630; fiat_p256_mulx_u32(&x629, &x630, x611, UINT32_C(0xffffffff)); @@ -2124,43 +2124,43 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_mulx_u32(&x635, &x636, x611, UINT32_C(0xffffffff)); uint32_t x637; fiat_p256_uint1 x638; - fiat_p256_addcarryx_u32(&x637, &x638, 0x0, x633, x636); + fiat_p256_addcarryx_u32(&x637, &x638, 0x0, x636, x633); uint32_t x639; fiat_p256_uint1 x640; - fiat_p256_addcarryx_u32(&x639, &x640, x638, x631, x634); + fiat_p256_addcarryx_u32(&x639, &x640, x638, x634, x631); uint32_t x641; fiat_p256_uint1 x642; - fiat_p256_addcarryx_u32(&x641, &x642, x640, 0x0, x632); + fiat_p256_addcarryx_u32(&x641, &x642, x640, x632, 0x0); uint32_t x643; fiat_p256_uint1 x644; - fiat_p256_addcarryx_u32(&x643, &x644, 0x0, x635, x611); + fiat_p256_addcarryx_u32(&x643, &x644, 0x0, x611, x635); uint32_t x645; fiat_p256_uint1 x646; - fiat_p256_addcarryx_u32(&x645, &x646, x644, x637, x613); + fiat_p256_addcarryx_u32(&x645, &x646, x644, x613, x637); uint32_t x647; fiat_p256_uint1 x648; - fiat_p256_addcarryx_u32(&x647, &x648, x646, x639, x615); + fiat_p256_addcarryx_u32(&x647, &x648, x646, x615, x639); uint32_t x649; fiat_p256_uint1 x650; - fiat_p256_addcarryx_u32(&x649, &x650, x648, x641, x617); + fiat_p256_addcarryx_u32(&x649, &x650, x648, x617, x641); uint32_t x651; fiat_p256_uint1 x652; - fiat_p256_addcarryx_u32(&x651, &x652, x650, 0x0, x619); + fiat_p256_addcarryx_u32(&x651, &x652, x650, x619, 0x0); uint32_t x653; fiat_p256_uint1 x654; - fiat_p256_addcarryx_u32(&x653, &x654, x652, 0x0, x621); + fiat_p256_addcarryx_u32(&x653, &x654, x652, x621, 0x0); uint32_t x655; fiat_p256_uint1 x656; - fiat_p256_addcarryx_u32(&x655, &x656, x654, x611, x623); + fiat_p256_addcarryx_u32(&x655, &x656, x654, x623, x611); uint32_t x657; fiat_p256_uint1 x658; - fiat_p256_addcarryx_u32(&x657, &x658, x656, x629, x625); + fiat_p256_addcarryx_u32(&x657, &x658, x656, x625, x629); uint32_t x659; fiat_p256_uint1 x660; - fiat_p256_addcarryx_u32(&x659, &x660, x658, x630, x627); + fiat_p256_addcarryx_u32(&x659, &x660, x658, x627, x630); uint32_t x661; fiat_p256_uint1 x662; - fiat_p256_addcarryx_u32(&x661, &x662, x660, 0x0, x628); + fiat_p256_addcarryx_u32(&x661, &x662, x660, x628, 0x0); uint32_t x663; fiat_p256_uint1 x664; fiat_p256_subborrowx_u32(&x663, &x664, 0x0, x645, UINT32_C(0xffffffff)); @@ -2232,28 +2232,28 @@ static void fiat_p256_square(uint32_t out1[8], const uint32_t arg1[8]) { static void fiat_p256_add(uint32_t out1[8], const uint32_t arg1[8], const uint32_t arg2[8]) { uint32_t x1; fiat_p256_uint1 x2; - fiat_p256_addcarryx_u32(&x1, &x2, 0x0, (arg2[0]), (arg1[0])); + fiat_p256_addcarryx_u32(&x1, &x2, 0x0, (arg1[0]), (arg2[0])); uint32_t x3; fiat_p256_uint1 x4; - fiat_p256_addcarryx_u32(&x3, &x4, x2, (arg2[1]), (arg1[1])); + fiat_p256_addcarryx_u32(&x3, &x4, x2, (arg1[1]), (arg2[1])); uint32_t x5; fiat_p256_uint1 x6; - fiat_p256_addcarryx_u32(&x5, &x6, x4, (arg2[2]), (arg1[2])); + fiat_p256_addcarryx_u32(&x5, &x6, x4, (arg1[2]), (arg2[2])); uint32_t x7; fiat_p256_uint1 x8; - fiat_p256_addcarryx_u32(&x7, &x8, x6, (arg2[3]), (arg1[3])); + fiat_p256_addcarryx_u32(&x7, &x8, x6, (arg1[3]), (arg2[3])); uint32_t x9; fiat_p256_uint1 x10; - fiat_p256_addcarryx_u32(&x9, &x10, x8, (arg2[4]), (arg1[4])); + fiat_p256_addcarryx_u32(&x9, &x10, x8, (arg1[4]), (arg2[4])); uint32_t x11; fiat_p256_uint1 x12; - fiat_p256_addcarryx_u32(&x11, &x12, x10, (arg2[5]), (arg1[5])); + fiat_p256_addcarryx_u32(&x11, &x12, x10, (arg1[5]), (arg2[5])); uint32_t x13; fiat_p256_uint1 x14; - fiat_p256_addcarryx_u32(&x13, &x14, x12, (arg2[6]), (arg1[6])); + fiat_p256_addcarryx_u32(&x13, &x14, x12, (arg1[6]), (arg2[6])); uint32_t x15; fiat_p256_uint1 x16; - fiat_p256_addcarryx_u32(&x15, &x16, x14, (arg2[7]), (arg1[7])); + fiat_p256_addcarryx_u32(&x15, &x16, x14, (arg1[7]), (arg2[7])); uint32_t x17; fiat_p256_uint1 x18; fiat_p256_subborrowx_u32(&x17, &x18, 0x0, x1, UINT32_C(0xffffffff)); @@ -2351,28 +2351,28 @@ static void fiat_p256_sub(uint32_t out1[8], const uint32_t arg1[8], const uint32 fiat_p256_cmovznz_u32(&x17, x16, 0x0, UINT32_C(0xffffffff)); uint32_t x18; fiat_p256_uint1 x19; - fiat_p256_addcarryx_u32(&x18, &x19, 0x0, (x17 & UINT32_C(0xffffffff)), x1); + fiat_p256_addcarryx_u32(&x18, &x19, 0x0, x1, (x17 & UINT32_C(0xffffffff))); uint32_t x20; fiat_p256_uint1 x21; - fiat_p256_addcarryx_u32(&x20, &x21, x19, (x17 & UINT32_C(0xffffffff)), x3); + fiat_p256_addcarryx_u32(&x20, &x21, x19, x3, (x17 & UINT32_C(0xffffffff))); uint32_t x22; fiat_p256_uint1 x23; - fiat_p256_addcarryx_u32(&x22, &x23, x21, (x17 & UINT32_C(0xffffffff)), x5); + fiat_p256_addcarryx_u32(&x22, &x23, x21, x5, (x17 & UINT32_C(0xffffffff))); uint32_t x24; fiat_p256_uint1 x25; - fiat_p256_addcarryx_u32(&x24, &x25, x23, 0x0, x7); + fiat_p256_addcarryx_u32(&x24, &x25, x23, x7, 0x0); uint32_t x26; fiat_p256_uint1 x27; - fiat_p256_addcarryx_u32(&x26, &x27, x25, 0x0, x9); + fiat_p256_addcarryx_u32(&x26, &x27, x25, x9, 0x0); uint32_t x28; fiat_p256_uint1 x29; - fiat_p256_addcarryx_u32(&x28, &x29, x27, 0x0, x11); + fiat_p256_addcarryx_u32(&x28, &x29, x27, x11, 0x0); uint32_t x30; fiat_p256_uint1 x31; - fiat_p256_addcarryx_u32(&x30, &x31, x29, (fiat_p256_uint1)(x17 & 0x1), x13); + fiat_p256_addcarryx_u32(&x30, &x31, x29, x13, (fiat_p256_uint1)(x17 & 0x1)); uint32_t x32; fiat_p256_uint1 x33; - fiat_p256_addcarryx_u32(&x32, &x33, x31, (x17 & UINT32_C(0xffffffff)), x15); + fiat_p256_addcarryx_u32(&x32, &x33, x31, x15, (x17 & UINT32_C(0xffffffff))); out1[0] = x18; out1[1] = x20; out1[2] = x22; @@ -2425,28 +2425,28 @@ static void fiat_p256_opp(uint32_t out1[8], const uint32_t arg1[8]) { fiat_p256_cmovznz_u32(&x17, x16, 0x0, UINT32_C(0xffffffff)); uint32_t x18; fiat_p256_uint1 x19; - fiat_p256_addcarryx_u32(&x18, &x19, 0x0, (x17 & UINT32_C(0xffffffff)), x1); + fiat_p256_addcarryx_u32(&x18, &x19, 0x0, x1, (x17 & UINT32_C(0xffffffff))); uint32_t x20; fiat_p256_uint1 x21; - fiat_p256_addcarryx_u32(&x20, &x21, x19, (x17 & UINT32_C(0xffffffff)), x3); + fiat_p256_addcarryx_u32(&x20, &x21, x19, x3, (x17 & UINT32_C(0xffffffff))); uint32_t x22; fiat_p256_uint1 x23; - fiat_p256_addcarryx_u32(&x22, &x23, x21, (x17 & UINT32_C(0xffffffff)), x5); + fiat_p256_addcarryx_u32(&x22, &x23, x21, x5, (x17 & UINT32_C(0xffffffff))); uint32_t x24; fiat_p256_uint1 x25; - fiat_p256_addcarryx_u32(&x24, &x25, x23, 0x0, x7); + fiat_p256_addcarryx_u32(&x24, &x25, x23, x7, 0x0); uint32_t x26; fiat_p256_uint1 x27; - fiat_p256_addcarryx_u32(&x26, &x27, x25, 0x0, x9); + fiat_p256_addcarryx_u32(&x26, &x27, x25, x9, 0x0); uint32_t x28; fiat_p256_uint1 x29; - fiat_p256_addcarryx_u32(&x28, &x29, x27, 0x0, x11); + fiat_p256_addcarryx_u32(&x28, &x29, x27, x11, 0x0); uint32_t x30; fiat_p256_uint1 x31; - fiat_p256_addcarryx_u32(&x30, &x31, x29, (fiat_p256_uint1)(x17 & 0x1), x13); + fiat_p256_addcarryx_u32(&x30, &x31, x29, x13, (fiat_p256_uint1)(x17 & 0x1)); uint32_t x32; fiat_p256_uint1 x33; - fiat_p256_addcarryx_u32(&x32, &x33, x31, (x17 & UINT32_C(0xffffffff)), x15); + fiat_p256_addcarryx_u32(&x32, &x33, x31, x15, (x17 & UINT32_C(0xffffffff))); out1[0] = x18; out1[1] = x20; out1[2] = x22; @@ -2486,34 +2486,34 @@ static void fiat_p256_from_montgomery(uint32_t out1[8], const uint32_t arg1[8]) fiat_p256_mulx_u32(&x8, &x9, x1, UINT32_C(0xffffffff)); uint32_t x10; fiat_p256_uint1 x11; - fiat_p256_addcarryx_u32(&x10, &x11, 0x0, x6, x9); + fiat_p256_addcarryx_u32(&x10, &x11, 0x0, x9, x6); uint32_t x12; fiat_p256_uint1 x13; - fiat_p256_addcarryx_u32(&x12, &x13, x11, x4, x7); + fiat_p256_addcarryx_u32(&x12, &x13, x11, x7, x4); uint32_t x14; fiat_p256_uint1 x15; - fiat_p256_addcarryx_u32(&x14, &x15, 0x0, x8, x1); + fiat_p256_addcarryx_u32(&x14, &x15, 0x0, x1, x8); uint32_t x16; fiat_p256_uint1 x17; - fiat_p256_addcarryx_u32(&x16, &x17, x15, x10, 0x0); + fiat_p256_addcarryx_u32(&x16, &x17, x15, 0x0, x10); uint32_t x18; fiat_p256_uint1 x19; - fiat_p256_addcarryx_u32(&x18, &x19, x17, x12, 0x0); + fiat_p256_addcarryx_u32(&x18, &x19, x17, 0x0, x12); uint32_t x20; fiat_p256_uint1 x21; - fiat_p256_addcarryx_u32(&x20, &x21, x13, 0x0, x5); + fiat_p256_addcarryx_u32(&x20, &x21, x13, x5, 0x0); uint32_t x22; fiat_p256_uint1 x23; - fiat_p256_addcarryx_u32(&x22, &x23, x19, x20, 0x0); + fiat_p256_addcarryx_u32(&x22, &x23, x19, 0x0, x20); uint32_t x24; fiat_p256_uint1 x25; - fiat_p256_addcarryx_u32(&x24, &x25, 0x0, (arg1[1]), x16); + fiat_p256_addcarryx_u32(&x24, &x25, 0x0, x16, (arg1[1])); uint32_t x26; fiat_p256_uint1 x27; - fiat_p256_addcarryx_u32(&x26, &x27, x25, 0x0, x18); + fiat_p256_addcarryx_u32(&x26, &x27, x25, x18, 0x0); uint32_t x28; fiat_p256_uint1 x29; - fiat_p256_addcarryx_u32(&x28, &x29, x27, 0x0, x22); + fiat_p256_addcarryx_u32(&x28, &x29, x27, x22, 0x0); uint32_t x30; uint32_t x31; fiat_p256_mulx_u32(&x30, &x31, x24, UINT32_C(0xffffffff)); @@ -2528,46 +2528,46 @@ static void fiat_p256_from_montgomery(uint32_t out1[8], const uint32_t arg1[8]) fiat_p256_mulx_u32(&x36, &x37, x24, UINT32_C(0xffffffff)); uint32_t x38; fiat_p256_uint1 x39; - fiat_p256_addcarryx_u32(&x38, &x39, 0x0, x34, x37); + fiat_p256_addcarryx_u32(&x38, &x39, 0x0, x37, x34); uint32_t x40; fiat_p256_uint1 x41; - fiat_p256_addcarryx_u32(&x40, &x41, x39, x32, x35); + fiat_p256_addcarryx_u32(&x40, &x41, x39, x35, x32); uint32_t x42; fiat_p256_uint1 x43; - fiat_p256_addcarryx_u32(&x42, &x43, 0x0, x36, x24); + fiat_p256_addcarryx_u32(&x42, &x43, 0x0, x24, x36); uint32_t x44; fiat_p256_uint1 x45; - fiat_p256_addcarryx_u32(&x44, &x45, x43, x38, x26); + fiat_p256_addcarryx_u32(&x44, &x45, x43, x26, x38); uint32_t x46; fiat_p256_uint1 x47; - fiat_p256_addcarryx_u32(&x46, &x47, x45, x40, x28); + fiat_p256_addcarryx_u32(&x46, &x47, x45, x28, x40); uint32_t x48; fiat_p256_uint1 x49; - fiat_p256_addcarryx_u32(&x48, &x49, x23, 0x0, 0x0); + fiat_p256_addcarryx_u32(&x48, &x49, x41, x33, 0x0); uint32_t x50; fiat_p256_uint1 x51; - fiat_p256_addcarryx_u32(&x50, &x51, x29, 0x0, (fiat_p256_uint1)x48); + fiat_p256_addcarryx_u32(&x50, &x51, x23, 0x0, 0x0); uint32_t x52; fiat_p256_uint1 x53; - fiat_p256_addcarryx_u32(&x52, &x53, x41, 0x0, x33); + fiat_p256_addcarryx_u32(&x52, &x53, x29, (fiat_p256_uint1)x50, 0x0); uint32_t x54; fiat_p256_uint1 x55; - fiat_p256_addcarryx_u32(&x54, &x55, x47, x52, x50); + fiat_p256_addcarryx_u32(&x54, &x55, x47, x52, x48); uint32_t x56; fiat_p256_uint1 x57; - fiat_p256_addcarryx_u32(&x56, &x57, 0x0, x24, x2); + fiat_p256_addcarryx_u32(&x56, &x57, 0x0, x2, x24); uint32_t x58; fiat_p256_uint1 x59; - fiat_p256_addcarryx_u32(&x58, &x59, x57, x30, x3); + fiat_p256_addcarryx_u32(&x58, &x59, x57, x3, x30); uint32_t x60; fiat_p256_uint1 x61; - fiat_p256_addcarryx_u32(&x60, &x61, 0x0, (arg1[2]), x44); + fiat_p256_addcarryx_u32(&x60, &x61, 0x0, x44, (arg1[2])); uint32_t x62; fiat_p256_uint1 x63; - fiat_p256_addcarryx_u32(&x62, &x63, x61, 0x0, x46); + fiat_p256_addcarryx_u32(&x62, &x63, x61, x46, 0x0); uint32_t x64; fiat_p256_uint1 x65; - fiat_p256_addcarryx_u32(&x64, &x65, x63, 0x0, x54); + fiat_p256_addcarryx_u32(&x64, &x65, x63, x54, 0x0); uint32_t x66; uint32_t x67; fiat_p256_mulx_u32(&x66, &x67, x60, UINT32_C(0xffffffff)); @@ -2582,73 +2582,73 @@ static void fiat_p256_from_montgomery(uint32_t out1[8], const uint32_t arg1[8]) fiat_p256_mulx_u32(&x72, &x73, x60, UINT32_C(0xffffffff)); uint32_t x74; fiat_p256_uint1 x75; - fiat_p256_addcarryx_u32(&x74, &x75, 0x0, x70, x73); + fiat_p256_addcarryx_u32(&x74, &x75, 0x0, x73, x70); uint32_t x76; fiat_p256_uint1 x77; - fiat_p256_addcarryx_u32(&x76, &x77, x75, x68, x71); + fiat_p256_addcarryx_u32(&x76, &x77, x75, x71, x68); uint32_t x78; fiat_p256_uint1 x79; - fiat_p256_addcarryx_u32(&x78, &x79, 0x0, x72, x60); + fiat_p256_addcarryx_u32(&x78, &x79, 0x0, x60, x72); uint32_t x80; fiat_p256_uint1 x81; - fiat_p256_addcarryx_u32(&x80, &x81, x79, x74, x62); + fiat_p256_addcarryx_u32(&x80, &x81, x79, x62, x74); uint32_t x82; fiat_p256_uint1 x83; - fiat_p256_addcarryx_u32(&x82, &x83, x81, x76, x64); + fiat_p256_addcarryx_u32(&x82, &x83, x81, x64, x76); uint32_t x84; fiat_p256_uint1 x85; - fiat_p256_addcarryx_u32(&x84, &x85, x55, 0x0, 0x0); + fiat_p256_addcarryx_u32(&x84, &x85, x77, x69, 0x0); uint32_t x86; fiat_p256_uint1 x87; - fiat_p256_addcarryx_u32(&x86, &x87, x65, 0x0, (fiat_p256_uint1)x84); + fiat_p256_addcarryx_u32(&x86, &x87, x55, 0x0, 0x0); uint32_t x88; fiat_p256_uint1 x89; - fiat_p256_addcarryx_u32(&x88, &x89, x77, 0x0, x69); + fiat_p256_addcarryx_u32(&x88, &x89, x65, (fiat_p256_uint1)x86, 0x0); uint32_t x90; fiat_p256_uint1 x91; - fiat_p256_addcarryx_u32(&x90, &x91, x83, x88, x86); + fiat_p256_addcarryx_u32(&x90, &x91, x83, x88, x84); uint32_t x92; fiat_p256_uint1 x93; - fiat_p256_addcarryx_u32(&x92, &x93, x91, 0x0, x1); + fiat_p256_addcarryx_u32(&x92, &x93, x91, x1, 0x0); uint32_t x94; fiat_p256_uint1 x95; - fiat_p256_addcarryx_u32(&x94, &x95, x93, 0x0, x56); + fiat_p256_addcarryx_u32(&x94, &x95, x93, x56, 0x0); uint32_t x96; fiat_p256_uint1 x97; - fiat_p256_addcarryx_u32(&x96, &x97, x95, x60, x58); + fiat_p256_addcarryx_u32(&x96, &x97, x95, x58, x60); uint32_t x98; fiat_p256_uint1 x99; - fiat_p256_addcarryx_u32(&x98, &x99, x59, x31, 0x0); + fiat_p256_addcarryx_u32(&x98, &x99, x59, 0x0, x31); uint32_t x100; fiat_p256_uint1 x101; - fiat_p256_addcarryx_u32(&x100, &x101, x97, x66, x98); + fiat_p256_addcarryx_u32(&x100, &x101, x97, x98, x66); uint32_t x102; fiat_p256_uint1 x103; - fiat_p256_addcarryx_u32(&x102, &x103, 0x0, (arg1[3]), x80); + fiat_p256_addcarryx_u32(&x102, &x103, 0x0, x80, (arg1[3])); uint32_t x104; fiat_p256_uint1 x105; - fiat_p256_addcarryx_u32(&x104, &x105, x103, 0x0, x82); + fiat_p256_addcarryx_u32(&x104, &x105, x103, x82, 0x0); uint32_t x106; fiat_p256_uint1 x107; - fiat_p256_addcarryx_u32(&x106, &x107, x105, 0x0, x90); + fiat_p256_addcarryx_u32(&x106, &x107, x105, x90, 0x0); uint32_t x108; fiat_p256_uint1 x109; - fiat_p256_addcarryx_u32(&x108, &x109, x107, 0x0, x92); + fiat_p256_addcarryx_u32(&x108, &x109, x107, x92, 0x0); uint32_t x110; fiat_p256_uint1 x111; - fiat_p256_addcarryx_u32(&x110, &x111, x109, 0x0, x94); + fiat_p256_addcarryx_u32(&x110, &x111, x109, x94, 0x0); uint32_t x112; fiat_p256_uint1 x113; - fiat_p256_addcarryx_u32(&x112, &x113, x111, 0x0, x96); + fiat_p256_addcarryx_u32(&x112, &x113, x111, x96, 0x0); uint32_t x114; fiat_p256_uint1 x115; - fiat_p256_addcarryx_u32(&x114, &x115, x113, 0x0, x100); + fiat_p256_addcarryx_u32(&x114, &x115, x113, x100, 0x0); uint32_t x116; fiat_p256_uint1 x117; - fiat_p256_addcarryx_u32(&x116, &x117, x101, x67, 0x0); + fiat_p256_addcarryx_u32(&x116, &x117, x101, 0x0, x67); uint32_t x118; fiat_p256_uint1 x119; - fiat_p256_addcarryx_u32(&x118, &x119, x115, 0x0, x116); + fiat_p256_addcarryx_u32(&x118, &x119, x115, x116, 0x0); uint32_t x120; uint32_t x121; fiat_p256_mulx_u32(&x120, &x121, x102, UINT32_C(0xffffffff)); @@ -2663,67 +2663,67 @@ static void fiat_p256_from_montgomery(uint32_t out1[8], const uint32_t arg1[8]) fiat_p256_mulx_u32(&x126, &x127, x102, UINT32_C(0xffffffff)); uint32_t x128; fiat_p256_uint1 x129; - fiat_p256_addcarryx_u32(&x128, &x129, 0x0, x124, x127); + fiat_p256_addcarryx_u32(&x128, &x129, 0x0, x127, x124); uint32_t x130; fiat_p256_uint1 x131; - fiat_p256_addcarryx_u32(&x130, &x131, x129, x122, x125); + fiat_p256_addcarryx_u32(&x130, &x131, x129, x125, x122); uint32_t x132; fiat_p256_uint1 x133; - fiat_p256_addcarryx_u32(&x132, &x133, 0x0, x126, x102); + fiat_p256_addcarryx_u32(&x132, &x133, 0x0, x102, x126); uint32_t x134; fiat_p256_uint1 x135; - fiat_p256_addcarryx_u32(&x134, &x135, x133, x128, x104); + fiat_p256_addcarryx_u32(&x134, &x135, x133, x104, x128); uint32_t x136; fiat_p256_uint1 x137; - fiat_p256_addcarryx_u32(&x136, &x137, x135, x130, x106); + fiat_p256_addcarryx_u32(&x136, &x137, x135, x106, x130); uint32_t x138; fiat_p256_uint1 x139; - fiat_p256_addcarryx_u32(&x138, &x139, x131, 0x0, x123); + fiat_p256_addcarryx_u32(&x138, &x139, x131, x123, 0x0); uint32_t x140; fiat_p256_uint1 x141; - fiat_p256_addcarryx_u32(&x140, &x141, x137, x138, x108); + fiat_p256_addcarryx_u32(&x140, &x141, x137, x108, x138); uint32_t x142; fiat_p256_uint1 x143; - fiat_p256_addcarryx_u32(&x142, &x143, x141, 0x0, x110); + fiat_p256_addcarryx_u32(&x142, &x143, x141, x110, 0x0); uint32_t x144; fiat_p256_uint1 x145; - fiat_p256_addcarryx_u32(&x144, &x145, x143, 0x0, x112); + fiat_p256_addcarryx_u32(&x144, &x145, x143, x112, 0x0); uint32_t x146; fiat_p256_uint1 x147; - fiat_p256_addcarryx_u32(&x146, &x147, x145, x102, x114); + fiat_p256_addcarryx_u32(&x146, &x147, x145, x114, x102); uint32_t x148; fiat_p256_uint1 x149; - fiat_p256_addcarryx_u32(&x148, &x149, x147, x120, x118); + fiat_p256_addcarryx_u32(&x148, &x149, x147, x118, x120); uint32_t x150; fiat_p256_uint1 x151; fiat_p256_addcarryx_u32(&x150, &x151, x119, 0x0, 0x0); uint32_t x152; fiat_p256_uint1 x153; - fiat_p256_addcarryx_u32(&x152, &x153, x149, x121, (fiat_p256_uint1)x150); + fiat_p256_addcarryx_u32(&x152, &x153, x149, (fiat_p256_uint1)x150, x121); uint32_t x154; fiat_p256_uint1 x155; - fiat_p256_addcarryx_u32(&x154, &x155, 0x0, (arg1[4]), x134); + fiat_p256_addcarryx_u32(&x154, &x155, 0x0, x134, (arg1[4])); uint32_t x156; fiat_p256_uint1 x157; - fiat_p256_addcarryx_u32(&x156, &x157, x155, 0x0, x136); + fiat_p256_addcarryx_u32(&x156, &x157, x155, x136, 0x0); uint32_t x158; fiat_p256_uint1 x159; - fiat_p256_addcarryx_u32(&x158, &x159, x157, 0x0, x140); + fiat_p256_addcarryx_u32(&x158, &x159, x157, x140, 0x0); uint32_t x160; fiat_p256_uint1 x161; - fiat_p256_addcarryx_u32(&x160, &x161, x159, 0x0, x142); + fiat_p256_addcarryx_u32(&x160, &x161, x159, x142, 0x0); uint32_t x162; fiat_p256_uint1 x163; - fiat_p256_addcarryx_u32(&x162, &x163, x161, 0x0, x144); + fiat_p256_addcarryx_u32(&x162, &x163, x161, x144, 0x0); uint32_t x164; fiat_p256_uint1 x165; - fiat_p256_addcarryx_u32(&x164, &x165, x163, 0x0, x146); + fiat_p256_addcarryx_u32(&x164, &x165, x163, x146, 0x0); uint32_t x166; fiat_p256_uint1 x167; - fiat_p256_addcarryx_u32(&x166, &x167, x165, 0x0, x148); + fiat_p256_addcarryx_u32(&x166, &x167, x165, x148, 0x0); uint32_t x168; fiat_p256_uint1 x169; - fiat_p256_addcarryx_u32(&x168, &x169, x167, 0x0, x152); + fiat_p256_addcarryx_u32(&x168, &x169, x167, x152, 0x0); uint32_t x170; uint32_t x171; fiat_p256_mulx_u32(&x170, &x171, x154, UINT32_C(0xffffffff)); @@ -2738,70 +2738,70 @@ static void fiat_p256_from_montgomery(uint32_t out1[8], const uint32_t arg1[8]) fiat_p256_mulx_u32(&x176, &x177, x154, UINT32_C(0xffffffff)); uint32_t x178; fiat_p256_uint1 x179; - fiat_p256_addcarryx_u32(&x178, &x179, 0x0, x174, x177); + fiat_p256_addcarryx_u32(&x178, &x179, 0x0, x177, x174); uint32_t x180; fiat_p256_uint1 x181; - fiat_p256_addcarryx_u32(&x180, &x181, x179, x172, x175); + fiat_p256_addcarryx_u32(&x180, &x181, x179, x175, x172); uint32_t x182; fiat_p256_uint1 x183; - fiat_p256_addcarryx_u32(&x182, &x183, 0x0, x176, x154); + fiat_p256_addcarryx_u32(&x182, &x183, 0x0, x154, x176); uint32_t x184; fiat_p256_uint1 x185; - fiat_p256_addcarryx_u32(&x184, &x185, x183, x178, x156); + fiat_p256_addcarryx_u32(&x184, &x185, x183, x156, x178); uint32_t x186; fiat_p256_uint1 x187; - fiat_p256_addcarryx_u32(&x186, &x187, x185, x180, x158); + fiat_p256_addcarryx_u32(&x186, &x187, x185, x158, x180); uint32_t x188; fiat_p256_uint1 x189; - fiat_p256_addcarryx_u32(&x188, &x189, x181, 0x0, x173); + fiat_p256_addcarryx_u32(&x188, &x189, x181, x173, 0x0); uint32_t x190; fiat_p256_uint1 x191; - fiat_p256_addcarryx_u32(&x190, &x191, x187, x188, x160); + fiat_p256_addcarryx_u32(&x190, &x191, x187, x160, x188); uint32_t x192; fiat_p256_uint1 x193; - fiat_p256_addcarryx_u32(&x192, &x193, x191, 0x0, x162); + fiat_p256_addcarryx_u32(&x192, &x193, x191, x162, 0x0); uint32_t x194; fiat_p256_uint1 x195; - fiat_p256_addcarryx_u32(&x194, &x195, x193, 0x0, x164); + fiat_p256_addcarryx_u32(&x194, &x195, x193, x164, 0x0); uint32_t x196; fiat_p256_uint1 x197; - fiat_p256_addcarryx_u32(&x196, &x197, x195, x154, x166); + fiat_p256_addcarryx_u32(&x196, &x197, x195, x166, x154); uint32_t x198; fiat_p256_uint1 x199; - fiat_p256_addcarryx_u32(&x198, &x199, x197, x170, x168); + fiat_p256_addcarryx_u32(&x198, &x199, x197, x168, x170); uint32_t x200; fiat_p256_uint1 x201; fiat_p256_addcarryx_u32(&x200, &x201, x153, 0x0, 0x0); uint32_t x202; fiat_p256_uint1 x203; - fiat_p256_addcarryx_u32(&x202, &x203, x169, 0x0, (fiat_p256_uint1)x200); + fiat_p256_addcarryx_u32(&x202, &x203, x169, (fiat_p256_uint1)x200, 0x0); uint32_t x204; fiat_p256_uint1 x205; - fiat_p256_addcarryx_u32(&x204, &x205, x199, x171, x202); + fiat_p256_addcarryx_u32(&x204, &x205, x199, x202, x171); uint32_t x206; fiat_p256_uint1 x207; - fiat_p256_addcarryx_u32(&x206, &x207, 0x0, (arg1[5]), x184); + fiat_p256_addcarryx_u32(&x206, &x207, 0x0, x184, (arg1[5])); uint32_t x208; fiat_p256_uint1 x209; - fiat_p256_addcarryx_u32(&x208, &x209, x207, 0x0, x186); + fiat_p256_addcarryx_u32(&x208, &x209, x207, x186, 0x0); uint32_t x210; fiat_p256_uint1 x211; - fiat_p256_addcarryx_u32(&x210, &x211, x209, 0x0, x190); + fiat_p256_addcarryx_u32(&x210, &x211, x209, x190, 0x0); uint32_t x212; fiat_p256_uint1 x213; - fiat_p256_addcarryx_u32(&x212, &x213, x211, 0x0, x192); + fiat_p256_addcarryx_u32(&x212, &x213, x211, x192, 0x0); uint32_t x214; fiat_p256_uint1 x215; - fiat_p256_addcarryx_u32(&x214, &x215, x213, 0x0, x194); + fiat_p256_addcarryx_u32(&x214, &x215, x213, x194, 0x0); uint32_t x216; fiat_p256_uint1 x217; - fiat_p256_addcarryx_u32(&x216, &x217, x215, 0x0, x196); + fiat_p256_addcarryx_u32(&x216, &x217, x215, x196, 0x0); uint32_t x218; fiat_p256_uint1 x219; - fiat_p256_addcarryx_u32(&x218, &x219, x217, 0x0, x198); + fiat_p256_addcarryx_u32(&x218, &x219, x217, x198, 0x0); uint32_t x220; fiat_p256_uint1 x221; - fiat_p256_addcarryx_u32(&x220, &x221, x219, 0x0, x204); + fiat_p256_addcarryx_u32(&x220, &x221, x219, x204, 0x0); uint32_t x222; uint32_t x223; fiat_p256_mulx_u32(&x222, &x223, x206, UINT32_C(0xffffffff)); @@ -2816,70 +2816,70 @@ static void fiat_p256_from_montgomery(uint32_t out1[8], const uint32_t arg1[8]) fiat_p256_mulx_u32(&x228, &x229, x206, UINT32_C(0xffffffff)); uint32_t x230; fiat_p256_uint1 x231; - fiat_p256_addcarryx_u32(&x230, &x231, 0x0, x226, x229); + fiat_p256_addcarryx_u32(&x230, &x231, 0x0, x229, x226); uint32_t x232; fiat_p256_uint1 x233; - fiat_p256_addcarryx_u32(&x232, &x233, x231, x224, x227); + fiat_p256_addcarryx_u32(&x232, &x233, x231, x227, x224); uint32_t x234; fiat_p256_uint1 x235; - fiat_p256_addcarryx_u32(&x234, &x235, 0x0, x228, x206); + fiat_p256_addcarryx_u32(&x234, &x235, 0x0, x206, x228); uint32_t x236; fiat_p256_uint1 x237; - fiat_p256_addcarryx_u32(&x236, &x237, x235, x230, x208); + fiat_p256_addcarryx_u32(&x236, &x237, x235, x208, x230); uint32_t x238; fiat_p256_uint1 x239; - fiat_p256_addcarryx_u32(&x238, &x239, x237, x232, x210); + fiat_p256_addcarryx_u32(&x238, &x239, x237, x210, x232); uint32_t x240; fiat_p256_uint1 x241; - fiat_p256_addcarryx_u32(&x240, &x241, x233, 0x0, x225); + fiat_p256_addcarryx_u32(&x240, &x241, x233, x225, 0x0); uint32_t x242; fiat_p256_uint1 x243; - fiat_p256_addcarryx_u32(&x242, &x243, x239, x240, x212); + fiat_p256_addcarryx_u32(&x242, &x243, x239, x212, x240); uint32_t x244; fiat_p256_uint1 x245; - fiat_p256_addcarryx_u32(&x244, &x245, x243, 0x0, x214); + fiat_p256_addcarryx_u32(&x244, &x245, x243, x214, 0x0); uint32_t x246; fiat_p256_uint1 x247; - fiat_p256_addcarryx_u32(&x246, &x247, x245, 0x0, x216); + fiat_p256_addcarryx_u32(&x246, &x247, x245, x216, 0x0); uint32_t x248; fiat_p256_uint1 x249; - fiat_p256_addcarryx_u32(&x248, &x249, x247, x206, x218); + fiat_p256_addcarryx_u32(&x248, &x249, x247, x218, x206); uint32_t x250; fiat_p256_uint1 x251; - fiat_p256_addcarryx_u32(&x250, &x251, x249, x222, x220); + fiat_p256_addcarryx_u32(&x250, &x251, x249, x220, x222); uint32_t x252; fiat_p256_uint1 x253; fiat_p256_addcarryx_u32(&x252, &x253, x205, 0x0, 0x0); uint32_t x254; fiat_p256_uint1 x255; - fiat_p256_addcarryx_u32(&x254, &x255, x221, 0x0, (fiat_p256_uint1)x252); + fiat_p256_addcarryx_u32(&x254, &x255, x221, (fiat_p256_uint1)x252, 0x0); uint32_t x256; fiat_p256_uint1 x257; - fiat_p256_addcarryx_u32(&x256, &x257, x251, x223, x254); + fiat_p256_addcarryx_u32(&x256, &x257, x251, x254, x223); uint32_t x258; fiat_p256_uint1 x259; - fiat_p256_addcarryx_u32(&x258, &x259, 0x0, (arg1[6]), x236); + fiat_p256_addcarryx_u32(&x258, &x259, 0x0, x236, (arg1[6])); uint32_t x260; fiat_p256_uint1 x261; - fiat_p256_addcarryx_u32(&x260, &x261, x259, 0x0, x238); + fiat_p256_addcarryx_u32(&x260, &x261, x259, x238, 0x0); uint32_t x262; fiat_p256_uint1 x263; - fiat_p256_addcarryx_u32(&x262, &x263, x261, 0x0, x242); + fiat_p256_addcarryx_u32(&x262, &x263, x261, x242, 0x0); uint32_t x264; fiat_p256_uint1 x265; - fiat_p256_addcarryx_u32(&x264, &x265, x263, 0x0, x244); + fiat_p256_addcarryx_u32(&x264, &x265, x263, x244, 0x0); uint32_t x266; fiat_p256_uint1 x267; - fiat_p256_addcarryx_u32(&x266, &x267, x265, 0x0, x246); + fiat_p256_addcarryx_u32(&x266, &x267, x265, x246, 0x0); uint32_t x268; fiat_p256_uint1 x269; - fiat_p256_addcarryx_u32(&x268, &x269, x267, 0x0, x248); + fiat_p256_addcarryx_u32(&x268, &x269, x267, x248, 0x0); uint32_t x270; fiat_p256_uint1 x271; - fiat_p256_addcarryx_u32(&x270, &x271, x269, 0x0, x250); + fiat_p256_addcarryx_u32(&x270, &x271, x269, x250, 0x0); uint32_t x272; fiat_p256_uint1 x273; - fiat_p256_addcarryx_u32(&x272, &x273, x271, 0x0, x256); + fiat_p256_addcarryx_u32(&x272, &x273, x271, x256, 0x0); uint32_t x274; uint32_t x275; fiat_p256_mulx_u32(&x274, &x275, x258, UINT32_C(0xffffffff)); @@ -2894,70 +2894,70 @@ static void fiat_p256_from_montgomery(uint32_t out1[8], const uint32_t arg1[8]) fiat_p256_mulx_u32(&x280, &x281, x258, UINT32_C(0xffffffff)); uint32_t x282; fiat_p256_uint1 x283; - fiat_p256_addcarryx_u32(&x282, &x283, 0x0, x278, x281); + fiat_p256_addcarryx_u32(&x282, &x283, 0x0, x281, x278); uint32_t x284; fiat_p256_uint1 x285; - fiat_p256_addcarryx_u32(&x284, &x285, x283, x276, x279); + fiat_p256_addcarryx_u32(&x284, &x285, x283, x279, x276); uint32_t x286; fiat_p256_uint1 x287; - fiat_p256_addcarryx_u32(&x286, &x287, 0x0, x280, x258); + fiat_p256_addcarryx_u32(&x286, &x287, 0x0, x258, x280); uint32_t x288; fiat_p256_uint1 x289; - fiat_p256_addcarryx_u32(&x288, &x289, x287, x282, x260); + fiat_p256_addcarryx_u32(&x288, &x289, x287, x260, x282); uint32_t x290; fiat_p256_uint1 x291; - fiat_p256_addcarryx_u32(&x290, &x291, x289, x284, x262); + fiat_p256_addcarryx_u32(&x290, &x291, x289, x262, x284); uint32_t x292; fiat_p256_uint1 x293; - fiat_p256_addcarryx_u32(&x292, &x293, x285, 0x0, x277); + fiat_p256_addcarryx_u32(&x292, &x293, x285, x277, 0x0); uint32_t x294; fiat_p256_uint1 x295; - fiat_p256_addcarryx_u32(&x294, &x295, x291, x292, x264); + fiat_p256_addcarryx_u32(&x294, &x295, x291, x264, x292); uint32_t x296; fiat_p256_uint1 x297; - fiat_p256_addcarryx_u32(&x296, &x297, x295, 0x0, x266); + fiat_p256_addcarryx_u32(&x296, &x297, x295, x266, 0x0); uint32_t x298; fiat_p256_uint1 x299; - fiat_p256_addcarryx_u32(&x298, &x299, x297, 0x0, x268); + fiat_p256_addcarryx_u32(&x298, &x299, x297, x268, 0x0); uint32_t x300; fiat_p256_uint1 x301; - fiat_p256_addcarryx_u32(&x300, &x301, x299, x258, x270); + fiat_p256_addcarryx_u32(&x300, &x301, x299, x270, x258); uint32_t x302; fiat_p256_uint1 x303; - fiat_p256_addcarryx_u32(&x302, &x303, x301, x274, x272); + fiat_p256_addcarryx_u32(&x302, &x303, x301, x272, x274); uint32_t x304; fiat_p256_uint1 x305; fiat_p256_addcarryx_u32(&x304, &x305, x257, 0x0, 0x0); uint32_t x306; fiat_p256_uint1 x307; - fiat_p256_addcarryx_u32(&x306, &x307, x273, 0x0, (fiat_p256_uint1)x304); + fiat_p256_addcarryx_u32(&x306, &x307, x273, (fiat_p256_uint1)x304, 0x0); uint32_t x308; fiat_p256_uint1 x309; - fiat_p256_addcarryx_u32(&x308, &x309, x303, x275, x306); + fiat_p256_addcarryx_u32(&x308, &x309, x303, x306, x275); uint32_t x310; fiat_p256_uint1 x311; - fiat_p256_addcarryx_u32(&x310, &x311, 0x0, (arg1[7]), x288); + fiat_p256_addcarryx_u32(&x310, &x311, 0x0, x288, (arg1[7])); uint32_t x312; fiat_p256_uint1 x313; - fiat_p256_addcarryx_u32(&x312, &x313, x311, 0x0, x290); + fiat_p256_addcarryx_u32(&x312, &x313, x311, x290, 0x0); uint32_t x314; fiat_p256_uint1 x315; - fiat_p256_addcarryx_u32(&x314, &x315, x313, 0x0, x294); + fiat_p256_addcarryx_u32(&x314, &x315, x313, x294, 0x0); uint32_t x316; fiat_p256_uint1 x317; - fiat_p256_addcarryx_u32(&x316, &x317, x315, 0x0, x296); + fiat_p256_addcarryx_u32(&x316, &x317, x315, x296, 0x0); uint32_t x318; fiat_p256_uint1 x319; - fiat_p256_addcarryx_u32(&x318, &x319, x317, 0x0, x298); + fiat_p256_addcarryx_u32(&x318, &x319, x317, x298, 0x0); uint32_t x320; fiat_p256_uint1 x321; - fiat_p256_addcarryx_u32(&x320, &x321, x319, 0x0, x300); + fiat_p256_addcarryx_u32(&x320, &x321, x319, x300, 0x0); uint32_t x322; fiat_p256_uint1 x323; - fiat_p256_addcarryx_u32(&x322, &x323, x321, 0x0, x302); + fiat_p256_addcarryx_u32(&x322, &x323, x321, x302, 0x0); uint32_t x324; fiat_p256_uint1 x325; - fiat_p256_addcarryx_u32(&x324, &x325, x323, 0x0, x308); + fiat_p256_addcarryx_u32(&x324, &x325, x323, x308, 0x0); uint32_t x326; uint32_t x327; fiat_p256_mulx_u32(&x326, &x327, x310, UINT32_C(0xffffffff)); @@ -2972,46 +2972,46 @@ static void fiat_p256_from_montgomery(uint32_t out1[8], const uint32_t arg1[8]) fiat_p256_mulx_u32(&x332, &x333, x310, UINT32_C(0xffffffff)); uint32_t x334; fiat_p256_uint1 x335; - fiat_p256_addcarryx_u32(&x334, &x335, 0x0, x330, x333); + fiat_p256_addcarryx_u32(&x334, &x335, 0x0, x333, x330); uint32_t x336; fiat_p256_uint1 x337; - fiat_p256_addcarryx_u32(&x336, &x337, x335, x328, x331); + fiat_p256_addcarryx_u32(&x336, &x337, x335, x331, x328); uint32_t x338; fiat_p256_uint1 x339; - fiat_p256_addcarryx_u32(&x338, &x339, 0x0, x332, x310); + fiat_p256_addcarryx_u32(&x338, &x339, 0x0, x310, x332); uint32_t x340; fiat_p256_uint1 x341; - fiat_p256_addcarryx_u32(&x340, &x341, x339, x334, x312); + fiat_p256_addcarryx_u32(&x340, &x341, x339, x312, x334); uint32_t x342; fiat_p256_uint1 x343; - fiat_p256_addcarryx_u32(&x342, &x343, x341, x336, x314); + fiat_p256_addcarryx_u32(&x342, &x343, x341, x314, x336); uint32_t x344; fiat_p256_uint1 x345; - fiat_p256_addcarryx_u32(&x344, &x345, x337, 0x0, x329); + fiat_p256_addcarryx_u32(&x344, &x345, x337, x329, 0x0); uint32_t x346; fiat_p256_uint1 x347; - fiat_p256_addcarryx_u32(&x346, &x347, x343, x344, x316); + fiat_p256_addcarryx_u32(&x346, &x347, x343, x316, x344); uint32_t x348; fiat_p256_uint1 x349; - fiat_p256_addcarryx_u32(&x348, &x349, x347, 0x0, x318); + fiat_p256_addcarryx_u32(&x348, &x349, x347, x318, 0x0); uint32_t x350; fiat_p256_uint1 x351; - fiat_p256_addcarryx_u32(&x350, &x351, x349, 0x0, x320); + fiat_p256_addcarryx_u32(&x350, &x351, x349, x320, 0x0); uint32_t x352; fiat_p256_uint1 x353; - fiat_p256_addcarryx_u32(&x352, &x353, x351, x310, x322); + fiat_p256_addcarryx_u32(&x352, &x353, x351, x322, x310); uint32_t x354; fiat_p256_uint1 x355; - fiat_p256_addcarryx_u32(&x354, &x355, x353, x326, x324); + fiat_p256_addcarryx_u32(&x354, &x355, x353, x324, x326); uint32_t x356; fiat_p256_uint1 x357; fiat_p256_addcarryx_u32(&x356, &x357, x309, 0x0, 0x0); uint32_t x358; fiat_p256_uint1 x359; - fiat_p256_addcarryx_u32(&x358, &x359, x325, 0x0, (fiat_p256_uint1)x356); + fiat_p256_addcarryx_u32(&x358, &x359, x325, (fiat_p256_uint1)x356, 0x0); uint32_t x360; fiat_p256_uint1 x361; - fiat_p256_addcarryx_u32(&x360, &x361, x355, x327, x358); + fiat_p256_addcarryx_u32(&x360, &x361, x355, x358, x327); uint32_t x362; fiat_p256_uint1 x363; fiat_p256_subborrowx_u32(&x362, &x363, 0x0, x340, UINT32_C(0xffffffff)); diff --git a/p256_64.c b/p256_64.c index a5ce6ec56..3279a82dc 100644 --- a/p256_64.c +++ b/p256_64.c @@ -136,16 +136,16 @@ static void fiat_p256_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p256_mulx_u64(&x11, &x12, x4, (arg2[0])); uint64_t x13; fiat_p256_uint1 x14; - fiat_p256_addcarryx_u64(&x13, &x14, 0x0, x9, x12); + fiat_p256_addcarryx_u64(&x13, &x14, 0x0, x12, x9); uint64_t x15; fiat_p256_uint1 x16; - fiat_p256_addcarryx_u64(&x15, &x16, x14, x7, x10); + fiat_p256_addcarryx_u64(&x15, &x16, x14, x10, x7); uint64_t x17; fiat_p256_uint1 x18; - fiat_p256_addcarryx_u64(&x17, &x18, x16, x5, x8); + fiat_p256_addcarryx_u64(&x17, &x18, x16, x8, x5); uint64_t x19; fiat_p256_uint1 x20; - fiat_p256_addcarryx_u64(&x19, &x20, x18, 0x0, x6); + fiat_p256_addcarryx_u64(&x19, &x20, x18, x6, 0x0); uint64_t x21; uint64_t x22; fiat_p256_mulx_u64(&x21, &x22, x11, UINT64_C(0xffffffff00000001)); @@ -157,25 +157,25 @@ static void fiat_p256_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p256_mulx_u64(&x25, &x26, x11, UINT64_C(0xffffffffffffffff)); uint64_t x27; fiat_p256_uint1 x28; - fiat_p256_addcarryx_u64(&x27, &x28, 0x0, x23, x26); + fiat_p256_addcarryx_u64(&x27, &x28, 0x0, x26, x23); uint64_t x29; fiat_p256_uint1 x30; - fiat_p256_addcarryx_u64(&x29, &x30, x28, 0x0, x24); + fiat_p256_addcarryx_u64(&x29, &x30, x28, x24, 0x0); uint64_t x31; fiat_p256_uint1 x32; - fiat_p256_addcarryx_u64(&x31, &x32, 0x0, x25, x11); + fiat_p256_addcarryx_u64(&x31, &x32, 0x0, x11, x25); uint64_t x33; fiat_p256_uint1 x34; - fiat_p256_addcarryx_u64(&x33, &x34, x32, x27, x13); + fiat_p256_addcarryx_u64(&x33, &x34, x32, x13, x27); uint64_t x35; fiat_p256_uint1 x36; - fiat_p256_addcarryx_u64(&x35, &x36, x34, x29, x15); + fiat_p256_addcarryx_u64(&x35, &x36, x34, x15, x29); uint64_t x37; fiat_p256_uint1 x38; - fiat_p256_addcarryx_u64(&x37, &x38, x36, x21, x17); + fiat_p256_addcarryx_u64(&x37, &x38, x36, x17, x21); uint64_t x39; fiat_p256_uint1 x40; - fiat_p256_addcarryx_u64(&x39, &x40, x38, x22, x19); + fiat_p256_addcarryx_u64(&x39, &x40, x38, x19, x22); uint64_t x41; fiat_p256_uint1 x42; fiat_p256_addcarryx_u64(&x41, &x42, x40, 0x0, 0x0); @@ -193,31 +193,31 @@ static void fiat_p256_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p256_mulx_u64(&x49, &x50, x1, (arg2[0])); uint64_t x51; fiat_p256_uint1 x52; - fiat_p256_addcarryx_u64(&x51, &x52, 0x0, x47, x50); + fiat_p256_addcarryx_u64(&x51, &x52, 0x0, x50, x47); uint64_t x53; fiat_p256_uint1 x54; - fiat_p256_addcarryx_u64(&x53, &x54, x52, x45, x48); + fiat_p256_addcarryx_u64(&x53, &x54, x52, x48, x45); uint64_t x55; fiat_p256_uint1 x56; - fiat_p256_addcarryx_u64(&x55, &x56, x54, x43, x46); + fiat_p256_addcarryx_u64(&x55, &x56, x54, x46, x43); uint64_t x57; fiat_p256_uint1 x58; - fiat_p256_addcarryx_u64(&x57, &x58, x56, 0x0, x44); + fiat_p256_addcarryx_u64(&x57, &x58, x56, x44, 0x0); uint64_t x59; fiat_p256_uint1 x60; - fiat_p256_addcarryx_u64(&x59, &x60, 0x0, x49, x33); + fiat_p256_addcarryx_u64(&x59, &x60, 0x0, x33, x49); uint64_t x61; fiat_p256_uint1 x62; - fiat_p256_addcarryx_u64(&x61, &x62, x60, x51, x35); + fiat_p256_addcarryx_u64(&x61, &x62, x60, x35, x51); uint64_t x63; fiat_p256_uint1 x64; - fiat_p256_addcarryx_u64(&x63, &x64, x62, x53, x37); + fiat_p256_addcarryx_u64(&x63, &x64, x62, x37, x53); uint64_t x65; fiat_p256_uint1 x66; - fiat_p256_addcarryx_u64(&x65, &x66, x64, x55, x39); + fiat_p256_addcarryx_u64(&x65, &x66, x64, x39, x55); uint64_t x67; fiat_p256_uint1 x68; - fiat_p256_addcarryx_u64(&x67, &x68, x66, x57, (fiat_p256_uint1)x41); + fiat_p256_addcarryx_u64(&x67, &x68, x66, (fiat_p256_uint1)x41, x57); uint64_t x69; uint64_t x70; fiat_p256_mulx_u64(&x69, &x70, x59, UINT64_C(0xffffffff00000001)); @@ -229,28 +229,28 @@ static void fiat_p256_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p256_mulx_u64(&x73, &x74, x59, UINT64_C(0xffffffffffffffff)); uint64_t x75; fiat_p256_uint1 x76; - fiat_p256_addcarryx_u64(&x75, &x76, 0x0, x71, x74); + fiat_p256_addcarryx_u64(&x75, &x76, 0x0, x74, x71); uint64_t x77; fiat_p256_uint1 x78; - fiat_p256_addcarryx_u64(&x77, &x78, x76, 0x0, x72); + fiat_p256_addcarryx_u64(&x77, &x78, x76, x72, 0x0); uint64_t x79; fiat_p256_uint1 x80; - fiat_p256_addcarryx_u64(&x79, &x80, 0x0, x73, x59); + fiat_p256_addcarryx_u64(&x79, &x80, 0x0, x59, x73); uint64_t x81; fiat_p256_uint1 x82; - fiat_p256_addcarryx_u64(&x81, &x82, x80, x75, x61); + fiat_p256_addcarryx_u64(&x81, &x82, x80, x61, x75); uint64_t x83; fiat_p256_uint1 x84; - fiat_p256_addcarryx_u64(&x83, &x84, x82, x77, x63); + fiat_p256_addcarryx_u64(&x83, &x84, x82, x63, x77); uint64_t x85; fiat_p256_uint1 x86; - fiat_p256_addcarryx_u64(&x85, &x86, x84, x69, x65); + fiat_p256_addcarryx_u64(&x85, &x86, x84, x65, x69); uint64_t x87; fiat_p256_uint1 x88; - fiat_p256_addcarryx_u64(&x87, &x88, x86, x70, x67); + fiat_p256_addcarryx_u64(&x87, &x88, x86, x67, x70); uint64_t x89; fiat_p256_uint1 x90; - fiat_p256_addcarryx_u64(&x89, &x90, x88, 0x0, x68); + fiat_p256_addcarryx_u64(&x89, &x90, x88, x68, 0x0); uint64_t x91; uint64_t x92; fiat_p256_mulx_u64(&x91, &x92, x2, (arg2[3])); @@ -265,31 +265,31 @@ static void fiat_p256_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p256_mulx_u64(&x97, &x98, x2, (arg2[0])); uint64_t x99; fiat_p256_uint1 x100; - fiat_p256_addcarryx_u64(&x99, &x100, 0x0, x95, x98); + fiat_p256_addcarryx_u64(&x99, &x100, 0x0, x98, x95); uint64_t x101; fiat_p256_uint1 x102; - fiat_p256_addcarryx_u64(&x101, &x102, x100, x93, x96); + fiat_p256_addcarryx_u64(&x101, &x102, x100, x96, x93); uint64_t x103; fiat_p256_uint1 x104; - fiat_p256_addcarryx_u64(&x103, &x104, x102, x91, x94); + fiat_p256_addcarryx_u64(&x103, &x104, x102, x94, x91); uint64_t x105; fiat_p256_uint1 x106; - fiat_p256_addcarryx_u64(&x105, &x106, x104, 0x0, x92); + fiat_p256_addcarryx_u64(&x105, &x106, x104, x92, 0x0); uint64_t x107; fiat_p256_uint1 x108; - fiat_p256_addcarryx_u64(&x107, &x108, 0x0, x97, x81); + fiat_p256_addcarryx_u64(&x107, &x108, 0x0, x81, x97); uint64_t x109; fiat_p256_uint1 x110; - fiat_p256_addcarryx_u64(&x109, &x110, x108, x99, x83); + fiat_p256_addcarryx_u64(&x109, &x110, x108, x83, x99); uint64_t x111; fiat_p256_uint1 x112; - fiat_p256_addcarryx_u64(&x111, &x112, x110, x101, x85); + fiat_p256_addcarryx_u64(&x111, &x112, x110, x85, x101); uint64_t x113; fiat_p256_uint1 x114; - fiat_p256_addcarryx_u64(&x113, &x114, x112, x103, x87); + fiat_p256_addcarryx_u64(&x113, &x114, x112, x87, x103); uint64_t x115; fiat_p256_uint1 x116; - fiat_p256_addcarryx_u64(&x115, &x116, x114, x105, x89); + fiat_p256_addcarryx_u64(&x115, &x116, x114, x89, x105); uint64_t x117; uint64_t x118; fiat_p256_mulx_u64(&x117, &x118, x107, UINT64_C(0xffffffff00000001)); @@ -301,28 +301,28 @@ static void fiat_p256_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p256_mulx_u64(&x121, &x122, x107, UINT64_C(0xffffffffffffffff)); uint64_t x123; fiat_p256_uint1 x124; - fiat_p256_addcarryx_u64(&x123, &x124, 0x0, x119, x122); + fiat_p256_addcarryx_u64(&x123, &x124, 0x0, x122, x119); uint64_t x125; fiat_p256_uint1 x126; - fiat_p256_addcarryx_u64(&x125, &x126, x124, 0x0, x120); + fiat_p256_addcarryx_u64(&x125, &x126, x124, x120, 0x0); uint64_t x127; fiat_p256_uint1 x128; - fiat_p256_addcarryx_u64(&x127, &x128, 0x0, x121, x107); + fiat_p256_addcarryx_u64(&x127, &x128, 0x0, x107, x121); uint64_t x129; fiat_p256_uint1 x130; - fiat_p256_addcarryx_u64(&x129, &x130, x128, x123, x109); + fiat_p256_addcarryx_u64(&x129, &x130, x128, x109, x123); uint64_t x131; fiat_p256_uint1 x132; - fiat_p256_addcarryx_u64(&x131, &x132, x130, x125, x111); + fiat_p256_addcarryx_u64(&x131, &x132, x130, x111, x125); uint64_t x133; fiat_p256_uint1 x134; - fiat_p256_addcarryx_u64(&x133, &x134, x132, x117, x113); + fiat_p256_addcarryx_u64(&x133, &x134, x132, x113, x117); uint64_t x135; fiat_p256_uint1 x136; - fiat_p256_addcarryx_u64(&x135, &x136, x134, x118, x115); + fiat_p256_addcarryx_u64(&x135, &x136, x134, x115, x118); uint64_t x137; fiat_p256_uint1 x138; - fiat_p256_addcarryx_u64(&x137, &x138, x136, 0x0, x116); + fiat_p256_addcarryx_u64(&x137, &x138, x136, x116, 0x0); uint64_t x139; uint64_t x140; fiat_p256_mulx_u64(&x139, &x140, x3, (arg2[3])); @@ -337,31 +337,31 @@ static void fiat_p256_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p256_mulx_u64(&x145, &x146, x3, (arg2[0])); uint64_t x147; fiat_p256_uint1 x148; - fiat_p256_addcarryx_u64(&x147, &x148, 0x0, x143, x146); + fiat_p256_addcarryx_u64(&x147, &x148, 0x0, x146, x143); uint64_t x149; fiat_p256_uint1 x150; - fiat_p256_addcarryx_u64(&x149, &x150, x148, x141, x144); + fiat_p256_addcarryx_u64(&x149, &x150, x148, x144, x141); uint64_t x151; fiat_p256_uint1 x152; - fiat_p256_addcarryx_u64(&x151, &x152, x150, x139, x142); + fiat_p256_addcarryx_u64(&x151, &x152, x150, x142, x139); uint64_t x153; fiat_p256_uint1 x154; - fiat_p256_addcarryx_u64(&x153, &x154, x152, 0x0, x140); + fiat_p256_addcarryx_u64(&x153, &x154, x152, x140, 0x0); uint64_t x155; fiat_p256_uint1 x156; - fiat_p256_addcarryx_u64(&x155, &x156, 0x0, x145, x129); + fiat_p256_addcarryx_u64(&x155, &x156, 0x0, x129, x145); uint64_t x157; fiat_p256_uint1 x158; - fiat_p256_addcarryx_u64(&x157, &x158, x156, x147, x131); + fiat_p256_addcarryx_u64(&x157, &x158, x156, x131, x147); uint64_t x159; fiat_p256_uint1 x160; - fiat_p256_addcarryx_u64(&x159, &x160, x158, x149, x133); + fiat_p256_addcarryx_u64(&x159, &x160, x158, x133, x149); uint64_t x161; fiat_p256_uint1 x162; - fiat_p256_addcarryx_u64(&x161, &x162, x160, x151, x135); + fiat_p256_addcarryx_u64(&x161, &x162, x160, x135, x151); uint64_t x163; fiat_p256_uint1 x164; - fiat_p256_addcarryx_u64(&x163, &x164, x162, x153, x137); + fiat_p256_addcarryx_u64(&x163, &x164, x162, x137, x153); uint64_t x165; uint64_t x166; fiat_p256_mulx_u64(&x165, &x166, x155, UINT64_C(0xffffffff00000001)); @@ -373,28 +373,28 @@ static void fiat_p256_mul(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p256_mulx_u64(&x169, &x170, x155, UINT64_C(0xffffffffffffffff)); uint64_t x171; fiat_p256_uint1 x172; - fiat_p256_addcarryx_u64(&x171, &x172, 0x0, x167, x170); + fiat_p256_addcarryx_u64(&x171, &x172, 0x0, x170, x167); uint64_t x173; fiat_p256_uint1 x174; - fiat_p256_addcarryx_u64(&x173, &x174, x172, 0x0, x168); + fiat_p256_addcarryx_u64(&x173, &x174, x172, x168, 0x0); uint64_t x175; fiat_p256_uint1 x176; - fiat_p256_addcarryx_u64(&x175, &x176, 0x0, x169, x155); + fiat_p256_addcarryx_u64(&x175, &x176, 0x0, x155, x169); uint64_t x177; fiat_p256_uint1 x178; - fiat_p256_addcarryx_u64(&x177, &x178, x176, x171, x157); + fiat_p256_addcarryx_u64(&x177, &x178, x176, x157, x171); uint64_t x179; fiat_p256_uint1 x180; - fiat_p256_addcarryx_u64(&x179, &x180, x178, x173, x159); + fiat_p256_addcarryx_u64(&x179, &x180, x178, x159, x173); uint64_t x181; fiat_p256_uint1 x182; - fiat_p256_addcarryx_u64(&x181, &x182, x180, x165, x161); + fiat_p256_addcarryx_u64(&x181, &x182, x180, x161, x165); uint64_t x183; fiat_p256_uint1 x184; - fiat_p256_addcarryx_u64(&x183, &x184, x182, x166, x163); + fiat_p256_addcarryx_u64(&x183, &x184, x182, x163, x166); uint64_t x185; fiat_p256_uint1 x186; - fiat_p256_addcarryx_u64(&x185, &x186, x184, 0x0, x164); + fiat_p256_addcarryx_u64(&x185, &x186, x184, x164, 0x0); uint64_t x187; fiat_p256_uint1 x188; fiat_p256_subborrowx_u64(&x187, &x188, 0x0, x177, UINT64_C(0xffffffffffffffff)); @@ -456,16 +456,16 @@ static void fiat_p256_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p256_mulx_u64(&x11, &x12, x4, (arg1[0])); uint64_t x13; fiat_p256_uint1 x14; - fiat_p256_addcarryx_u64(&x13, &x14, 0x0, x9, x12); + fiat_p256_addcarryx_u64(&x13, &x14, 0x0, x12, x9); uint64_t x15; fiat_p256_uint1 x16; - fiat_p256_addcarryx_u64(&x15, &x16, x14, x7, x10); + fiat_p256_addcarryx_u64(&x15, &x16, x14, x10, x7); uint64_t x17; fiat_p256_uint1 x18; - fiat_p256_addcarryx_u64(&x17, &x18, x16, x5, x8); + fiat_p256_addcarryx_u64(&x17, &x18, x16, x8, x5); uint64_t x19; fiat_p256_uint1 x20; - fiat_p256_addcarryx_u64(&x19, &x20, x18, 0x0, x6); + fiat_p256_addcarryx_u64(&x19, &x20, x18, x6, 0x0); uint64_t x21; uint64_t x22; fiat_p256_mulx_u64(&x21, &x22, x11, UINT64_C(0xffffffff00000001)); @@ -477,25 +477,25 @@ static void fiat_p256_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p256_mulx_u64(&x25, &x26, x11, UINT64_C(0xffffffffffffffff)); uint64_t x27; fiat_p256_uint1 x28; - fiat_p256_addcarryx_u64(&x27, &x28, 0x0, x23, x26); + fiat_p256_addcarryx_u64(&x27, &x28, 0x0, x26, x23); uint64_t x29; fiat_p256_uint1 x30; - fiat_p256_addcarryx_u64(&x29, &x30, x28, 0x0, x24); + fiat_p256_addcarryx_u64(&x29, &x30, x28, x24, 0x0); uint64_t x31; fiat_p256_uint1 x32; - fiat_p256_addcarryx_u64(&x31, &x32, 0x0, x25, x11); + fiat_p256_addcarryx_u64(&x31, &x32, 0x0, x11, x25); uint64_t x33; fiat_p256_uint1 x34; - fiat_p256_addcarryx_u64(&x33, &x34, x32, x27, x13); + fiat_p256_addcarryx_u64(&x33, &x34, x32, x13, x27); uint64_t x35; fiat_p256_uint1 x36; - fiat_p256_addcarryx_u64(&x35, &x36, x34, x29, x15); + fiat_p256_addcarryx_u64(&x35, &x36, x34, x15, x29); uint64_t x37; fiat_p256_uint1 x38; - fiat_p256_addcarryx_u64(&x37, &x38, x36, x21, x17); + fiat_p256_addcarryx_u64(&x37, &x38, x36, x17, x21); uint64_t x39; fiat_p256_uint1 x40; - fiat_p256_addcarryx_u64(&x39, &x40, x38, x22, x19); + fiat_p256_addcarryx_u64(&x39, &x40, x38, x19, x22); uint64_t x41; fiat_p256_uint1 x42; fiat_p256_addcarryx_u64(&x41, &x42, x40, 0x0, 0x0); @@ -513,31 +513,31 @@ static void fiat_p256_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p256_mulx_u64(&x49, &x50, x1, (arg1[0])); uint64_t x51; fiat_p256_uint1 x52; - fiat_p256_addcarryx_u64(&x51, &x52, 0x0, x47, x50); + fiat_p256_addcarryx_u64(&x51, &x52, 0x0, x50, x47); uint64_t x53; fiat_p256_uint1 x54; - fiat_p256_addcarryx_u64(&x53, &x54, x52, x45, x48); + fiat_p256_addcarryx_u64(&x53, &x54, x52, x48, x45); uint64_t x55; fiat_p256_uint1 x56; - fiat_p256_addcarryx_u64(&x55, &x56, x54, x43, x46); + fiat_p256_addcarryx_u64(&x55, &x56, x54, x46, x43); uint64_t x57; fiat_p256_uint1 x58; - fiat_p256_addcarryx_u64(&x57, &x58, x56, 0x0, x44); + fiat_p256_addcarryx_u64(&x57, &x58, x56, x44, 0x0); uint64_t x59; fiat_p256_uint1 x60; - fiat_p256_addcarryx_u64(&x59, &x60, 0x0, x49, x33); + fiat_p256_addcarryx_u64(&x59, &x60, 0x0, x33, x49); uint64_t x61; fiat_p256_uint1 x62; - fiat_p256_addcarryx_u64(&x61, &x62, x60, x51, x35); + fiat_p256_addcarryx_u64(&x61, &x62, x60, x35, x51); uint64_t x63; fiat_p256_uint1 x64; - fiat_p256_addcarryx_u64(&x63, &x64, x62, x53, x37); + fiat_p256_addcarryx_u64(&x63, &x64, x62, x37, x53); uint64_t x65; fiat_p256_uint1 x66; - fiat_p256_addcarryx_u64(&x65, &x66, x64, x55, x39); + fiat_p256_addcarryx_u64(&x65, &x66, x64, x39, x55); uint64_t x67; fiat_p256_uint1 x68; - fiat_p256_addcarryx_u64(&x67, &x68, x66, x57, (fiat_p256_uint1)x41); + fiat_p256_addcarryx_u64(&x67, &x68, x66, (fiat_p256_uint1)x41, x57); uint64_t x69; uint64_t x70; fiat_p256_mulx_u64(&x69, &x70, x59, UINT64_C(0xffffffff00000001)); @@ -549,28 +549,28 @@ static void fiat_p256_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p256_mulx_u64(&x73, &x74, x59, UINT64_C(0xffffffffffffffff)); uint64_t x75; fiat_p256_uint1 x76; - fiat_p256_addcarryx_u64(&x75, &x76, 0x0, x71, x74); + fiat_p256_addcarryx_u64(&x75, &x76, 0x0, x74, x71); uint64_t x77; fiat_p256_uint1 x78; - fiat_p256_addcarryx_u64(&x77, &x78, x76, 0x0, x72); + fiat_p256_addcarryx_u64(&x77, &x78, x76, x72, 0x0); uint64_t x79; fiat_p256_uint1 x80; - fiat_p256_addcarryx_u64(&x79, &x80, 0x0, x73, x59); + fiat_p256_addcarryx_u64(&x79, &x80, 0x0, x59, x73); uint64_t x81; fiat_p256_uint1 x82; - fiat_p256_addcarryx_u64(&x81, &x82, x80, x75, x61); + fiat_p256_addcarryx_u64(&x81, &x82, x80, x61, x75); uint64_t x83; fiat_p256_uint1 x84; - fiat_p256_addcarryx_u64(&x83, &x84, x82, x77, x63); + fiat_p256_addcarryx_u64(&x83, &x84, x82, x63, x77); uint64_t x85; fiat_p256_uint1 x86; - fiat_p256_addcarryx_u64(&x85, &x86, x84, x69, x65); + fiat_p256_addcarryx_u64(&x85, &x86, x84, x65, x69); uint64_t x87; fiat_p256_uint1 x88; - fiat_p256_addcarryx_u64(&x87, &x88, x86, x70, x67); + fiat_p256_addcarryx_u64(&x87, &x88, x86, x67, x70); uint64_t x89; fiat_p256_uint1 x90; - fiat_p256_addcarryx_u64(&x89, &x90, x88, 0x0, x68); + fiat_p256_addcarryx_u64(&x89, &x90, x88, x68, 0x0); uint64_t x91; uint64_t x92; fiat_p256_mulx_u64(&x91, &x92, x2, (arg1[3])); @@ -585,31 +585,31 @@ static void fiat_p256_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p256_mulx_u64(&x97, &x98, x2, (arg1[0])); uint64_t x99; fiat_p256_uint1 x100; - fiat_p256_addcarryx_u64(&x99, &x100, 0x0, x95, x98); + fiat_p256_addcarryx_u64(&x99, &x100, 0x0, x98, x95); uint64_t x101; fiat_p256_uint1 x102; - fiat_p256_addcarryx_u64(&x101, &x102, x100, x93, x96); + fiat_p256_addcarryx_u64(&x101, &x102, x100, x96, x93); uint64_t x103; fiat_p256_uint1 x104; - fiat_p256_addcarryx_u64(&x103, &x104, x102, x91, x94); + fiat_p256_addcarryx_u64(&x103, &x104, x102, x94, x91); uint64_t x105; fiat_p256_uint1 x106; - fiat_p256_addcarryx_u64(&x105, &x106, x104, 0x0, x92); + fiat_p256_addcarryx_u64(&x105, &x106, x104, x92, 0x0); uint64_t x107; fiat_p256_uint1 x108; - fiat_p256_addcarryx_u64(&x107, &x108, 0x0, x97, x81); + fiat_p256_addcarryx_u64(&x107, &x108, 0x0, x81, x97); uint64_t x109; fiat_p256_uint1 x110; - fiat_p256_addcarryx_u64(&x109, &x110, x108, x99, x83); + fiat_p256_addcarryx_u64(&x109, &x110, x108, x83, x99); uint64_t x111; fiat_p256_uint1 x112; - fiat_p256_addcarryx_u64(&x111, &x112, x110, x101, x85); + fiat_p256_addcarryx_u64(&x111, &x112, x110, x85, x101); uint64_t x113; fiat_p256_uint1 x114; - fiat_p256_addcarryx_u64(&x113, &x114, x112, x103, x87); + fiat_p256_addcarryx_u64(&x113, &x114, x112, x87, x103); uint64_t x115; fiat_p256_uint1 x116; - fiat_p256_addcarryx_u64(&x115, &x116, x114, x105, x89); + fiat_p256_addcarryx_u64(&x115, &x116, x114, x89, x105); uint64_t x117; uint64_t x118; fiat_p256_mulx_u64(&x117, &x118, x107, UINT64_C(0xffffffff00000001)); @@ -621,28 +621,28 @@ static void fiat_p256_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p256_mulx_u64(&x121, &x122, x107, UINT64_C(0xffffffffffffffff)); uint64_t x123; fiat_p256_uint1 x124; - fiat_p256_addcarryx_u64(&x123, &x124, 0x0, x119, x122); + fiat_p256_addcarryx_u64(&x123, &x124, 0x0, x122, x119); uint64_t x125; fiat_p256_uint1 x126; - fiat_p256_addcarryx_u64(&x125, &x126, x124, 0x0, x120); + fiat_p256_addcarryx_u64(&x125, &x126, x124, x120, 0x0); uint64_t x127; fiat_p256_uint1 x128; - fiat_p256_addcarryx_u64(&x127, &x128, 0x0, x121, x107); + fiat_p256_addcarryx_u64(&x127, &x128, 0x0, x107, x121); uint64_t x129; fiat_p256_uint1 x130; - fiat_p256_addcarryx_u64(&x129, &x130, x128, x123, x109); + fiat_p256_addcarryx_u64(&x129, &x130, x128, x109, x123); uint64_t x131; fiat_p256_uint1 x132; - fiat_p256_addcarryx_u64(&x131, &x132, x130, x125, x111); + fiat_p256_addcarryx_u64(&x131, &x132, x130, x111, x125); uint64_t x133; fiat_p256_uint1 x134; - fiat_p256_addcarryx_u64(&x133, &x134, x132, x117, x113); + fiat_p256_addcarryx_u64(&x133, &x134, x132, x113, x117); uint64_t x135; fiat_p256_uint1 x136; - fiat_p256_addcarryx_u64(&x135, &x136, x134, x118, x115); + fiat_p256_addcarryx_u64(&x135, &x136, x134, x115, x118); uint64_t x137; fiat_p256_uint1 x138; - fiat_p256_addcarryx_u64(&x137, &x138, x136, 0x0, x116); + fiat_p256_addcarryx_u64(&x137, &x138, x136, x116, 0x0); uint64_t x139; uint64_t x140; fiat_p256_mulx_u64(&x139, &x140, x3, (arg1[3])); @@ -657,31 +657,31 @@ static void fiat_p256_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p256_mulx_u64(&x145, &x146, x3, (arg1[0])); uint64_t x147; fiat_p256_uint1 x148; - fiat_p256_addcarryx_u64(&x147, &x148, 0x0, x143, x146); + fiat_p256_addcarryx_u64(&x147, &x148, 0x0, x146, x143); uint64_t x149; fiat_p256_uint1 x150; - fiat_p256_addcarryx_u64(&x149, &x150, x148, x141, x144); + fiat_p256_addcarryx_u64(&x149, &x150, x148, x144, x141); uint64_t x151; fiat_p256_uint1 x152; - fiat_p256_addcarryx_u64(&x151, &x152, x150, x139, x142); + fiat_p256_addcarryx_u64(&x151, &x152, x150, x142, x139); uint64_t x153; fiat_p256_uint1 x154; - fiat_p256_addcarryx_u64(&x153, &x154, x152, 0x0, x140); + fiat_p256_addcarryx_u64(&x153, &x154, x152, x140, 0x0); uint64_t x155; fiat_p256_uint1 x156; - fiat_p256_addcarryx_u64(&x155, &x156, 0x0, x145, x129); + fiat_p256_addcarryx_u64(&x155, &x156, 0x0, x129, x145); uint64_t x157; fiat_p256_uint1 x158; - fiat_p256_addcarryx_u64(&x157, &x158, x156, x147, x131); + fiat_p256_addcarryx_u64(&x157, &x158, x156, x131, x147); uint64_t x159; fiat_p256_uint1 x160; - fiat_p256_addcarryx_u64(&x159, &x160, x158, x149, x133); + fiat_p256_addcarryx_u64(&x159, &x160, x158, x133, x149); uint64_t x161; fiat_p256_uint1 x162; - fiat_p256_addcarryx_u64(&x161, &x162, x160, x151, x135); + fiat_p256_addcarryx_u64(&x161, &x162, x160, x135, x151); uint64_t x163; fiat_p256_uint1 x164; - fiat_p256_addcarryx_u64(&x163, &x164, x162, x153, x137); + fiat_p256_addcarryx_u64(&x163, &x164, x162, x137, x153); uint64_t x165; uint64_t x166; fiat_p256_mulx_u64(&x165, &x166, x155, UINT64_C(0xffffffff00000001)); @@ -693,28 +693,28 @@ static void fiat_p256_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p256_mulx_u64(&x169, &x170, x155, UINT64_C(0xffffffffffffffff)); uint64_t x171; fiat_p256_uint1 x172; - fiat_p256_addcarryx_u64(&x171, &x172, 0x0, x167, x170); + fiat_p256_addcarryx_u64(&x171, &x172, 0x0, x170, x167); uint64_t x173; fiat_p256_uint1 x174; - fiat_p256_addcarryx_u64(&x173, &x174, x172, 0x0, x168); + fiat_p256_addcarryx_u64(&x173, &x174, x172, x168, 0x0); uint64_t x175; fiat_p256_uint1 x176; - fiat_p256_addcarryx_u64(&x175, &x176, 0x0, x169, x155); + fiat_p256_addcarryx_u64(&x175, &x176, 0x0, x155, x169); uint64_t x177; fiat_p256_uint1 x178; - fiat_p256_addcarryx_u64(&x177, &x178, x176, x171, x157); + fiat_p256_addcarryx_u64(&x177, &x178, x176, x157, x171); uint64_t x179; fiat_p256_uint1 x180; - fiat_p256_addcarryx_u64(&x179, &x180, x178, x173, x159); + fiat_p256_addcarryx_u64(&x179, &x180, x178, x159, x173); uint64_t x181; fiat_p256_uint1 x182; - fiat_p256_addcarryx_u64(&x181, &x182, x180, x165, x161); + fiat_p256_addcarryx_u64(&x181, &x182, x180, x161, x165); uint64_t x183; fiat_p256_uint1 x184; - fiat_p256_addcarryx_u64(&x183, &x184, x182, x166, x163); + fiat_p256_addcarryx_u64(&x183, &x184, x182, x163, x166); uint64_t x185; fiat_p256_uint1 x186; - fiat_p256_addcarryx_u64(&x185, &x186, x184, 0x0, x164); + fiat_p256_addcarryx_u64(&x185, &x186, x184, x164, 0x0); uint64_t x187; fiat_p256_uint1 x188; fiat_p256_subborrowx_u64(&x187, &x188, 0x0, x177, UINT64_C(0xffffffffffffffff)); @@ -762,16 +762,16 @@ static void fiat_p256_square(uint64_t out1[4], const uint64_t arg1[4]) { static void fiat_p256_add(uint64_t out1[4], const uint64_t arg1[4], const uint64_t arg2[4]) { uint64_t x1; fiat_p256_uint1 x2; - fiat_p256_addcarryx_u64(&x1, &x2, 0x0, (arg2[0]), (arg1[0])); + fiat_p256_addcarryx_u64(&x1, &x2, 0x0, (arg1[0]), (arg2[0])); uint64_t x3; fiat_p256_uint1 x4; - fiat_p256_addcarryx_u64(&x3, &x4, x2, (arg2[1]), (arg1[1])); + fiat_p256_addcarryx_u64(&x3, &x4, x2, (arg1[1]), (arg2[1])); uint64_t x5; fiat_p256_uint1 x6; - fiat_p256_addcarryx_u64(&x5, &x6, x4, (arg2[2]), (arg1[2])); + fiat_p256_addcarryx_u64(&x5, &x6, x4, (arg1[2]), (arg2[2])); uint64_t x7; fiat_p256_uint1 x8; - fiat_p256_addcarryx_u64(&x7, &x8, x6, (arg2[3]), (arg1[3])); + fiat_p256_addcarryx_u64(&x7, &x8, x6, (arg1[3]), (arg2[3])); uint64_t x9; fiat_p256_uint1 x10; fiat_p256_subborrowx_u64(&x9, &x10, 0x0, x1, UINT64_C(0xffffffffffffffff)); @@ -833,16 +833,16 @@ static void fiat_p256_sub(uint64_t out1[4], const uint64_t arg1[4], const uint64 fiat_p256_cmovznz_u64(&x9, x8, 0x0, UINT64_C(0xffffffffffffffff)); uint64_t x10; fiat_p256_uint1 x11; - fiat_p256_addcarryx_u64(&x10, &x11, 0x0, (x9 & UINT64_C(0xffffffffffffffff)), x1); + fiat_p256_addcarryx_u64(&x10, &x11, 0x0, x1, (x9 & UINT64_C(0xffffffffffffffff))); uint64_t x12; fiat_p256_uint1 x13; - fiat_p256_addcarryx_u64(&x12, &x13, x11, (x9 & UINT32_C(0xffffffff)), x3); + fiat_p256_addcarryx_u64(&x12, &x13, x11, x3, (x9 & UINT32_C(0xffffffff))); uint64_t x14; fiat_p256_uint1 x15; - fiat_p256_addcarryx_u64(&x14, &x15, x13, 0x0, x5); + fiat_p256_addcarryx_u64(&x14, &x15, x13, x5, 0x0); uint64_t x16; fiat_p256_uint1 x17; - fiat_p256_addcarryx_u64(&x16, &x17, x15, (x9 & UINT64_C(0xffffffff00000001)), x7); + fiat_p256_addcarryx_u64(&x16, &x17, x15, x7, (x9 & UINT64_C(0xffffffff00000001))); out1[0] = x10; out1[1] = x12; out1[2] = x14; @@ -879,16 +879,16 @@ static void fiat_p256_opp(uint64_t out1[4], const uint64_t arg1[4]) { fiat_p256_cmovznz_u64(&x9, x8, 0x0, UINT64_C(0xffffffffffffffff)); uint64_t x10; fiat_p256_uint1 x11; - fiat_p256_addcarryx_u64(&x10, &x11, 0x0, (x9 & UINT64_C(0xffffffffffffffff)), x1); + fiat_p256_addcarryx_u64(&x10, &x11, 0x0, x1, (x9 & UINT64_C(0xffffffffffffffff))); uint64_t x12; fiat_p256_uint1 x13; - fiat_p256_addcarryx_u64(&x12, &x13, x11, (x9 & UINT32_C(0xffffffff)), x3); + fiat_p256_addcarryx_u64(&x12, &x13, x11, x3, (x9 & UINT32_C(0xffffffff))); uint64_t x14; fiat_p256_uint1 x15; - fiat_p256_addcarryx_u64(&x14, &x15, x13, 0x0, x5); + fiat_p256_addcarryx_u64(&x14, &x15, x13, x5, 0x0); uint64_t x16; fiat_p256_uint1 x17; - fiat_p256_addcarryx_u64(&x16, &x17, x15, (x9 & UINT64_C(0xffffffff00000001)), x7); + fiat_p256_addcarryx_u64(&x16, &x17, x15, x7, (x9 & UINT64_C(0xffffffff00000001))); out1[0] = x10; out1[1] = x12; out1[2] = x14; @@ -921,16 +921,16 @@ static void fiat_p256_from_montgomery(uint64_t out1[4], const uint64_t arg1[4]) fiat_p256_mulx_u64(&x6, &x7, x1, UINT64_C(0xffffffffffffffff)); uint64_t x8; fiat_p256_uint1 x9; - fiat_p256_addcarryx_u64(&x8, &x9, 0x0, x4, x7); + fiat_p256_addcarryx_u64(&x8, &x9, 0x0, x7, x4); uint64_t x10; fiat_p256_uint1 x11; - fiat_p256_addcarryx_u64(&x10, &x11, 0x0, x6, x1); + fiat_p256_addcarryx_u64(&x10, &x11, 0x0, x1, x6); uint64_t x12; fiat_p256_uint1 x13; - fiat_p256_addcarryx_u64(&x12, &x13, x11, x8, 0x0); + fiat_p256_addcarryx_u64(&x12, &x13, x11, 0x0, x8); uint64_t x14; fiat_p256_uint1 x15; - fiat_p256_addcarryx_u64(&x14, &x15, 0x0, (arg1[1]), x12); + fiat_p256_addcarryx_u64(&x14, &x15, 0x0, x12, (arg1[1])); uint64_t x16; uint64_t x17; fiat_p256_mulx_u64(&x16, &x17, x14, UINT64_C(0xffffffff00000001)); @@ -942,40 +942,40 @@ static void fiat_p256_from_montgomery(uint64_t out1[4], const uint64_t arg1[4]) fiat_p256_mulx_u64(&x20, &x21, x14, UINT64_C(0xffffffffffffffff)); uint64_t x22; fiat_p256_uint1 x23; - fiat_p256_addcarryx_u64(&x22, &x23, 0x0, x18, x21); + fiat_p256_addcarryx_u64(&x22, &x23, 0x0, x21, x18); uint64_t x24; fiat_p256_uint1 x25; - fiat_p256_addcarryx_u64(&x24, &x25, x9, 0x0, x5); + fiat_p256_addcarryx_u64(&x24, &x25, x9, x5, 0x0); uint64_t x26; fiat_p256_uint1 x27; - fiat_p256_addcarryx_u64(&x26, &x27, x13, x24, 0x0); + fiat_p256_addcarryx_u64(&x26, &x27, x13, 0x0, x24); uint64_t x28; fiat_p256_uint1 x29; - fiat_p256_addcarryx_u64(&x28, &x29, x15, 0x0, x26); + fiat_p256_addcarryx_u64(&x28, &x29, x15, x26, 0x0); uint64_t x30; fiat_p256_uint1 x31; - fiat_p256_addcarryx_u64(&x30, &x31, 0x0, x20, x14); + fiat_p256_addcarryx_u64(&x30, &x31, 0x0, x14, x20); uint64_t x32; fiat_p256_uint1 x33; - fiat_p256_addcarryx_u64(&x32, &x33, x31, x22, x28); + fiat_p256_addcarryx_u64(&x32, &x33, x31, x28, x22); uint64_t x34; fiat_p256_uint1 x35; - fiat_p256_addcarryx_u64(&x34, &x35, x23, 0x0, x19); + fiat_p256_addcarryx_u64(&x34, &x35, x23, x19, 0x0); uint64_t x36; fiat_p256_uint1 x37; - fiat_p256_addcarryx_u64(&x36, &x37, x33, x34, x2); + fiat_p256_addcarryx_u64(&x36, &x37, x33, x2, x34); uint64_t x38; fiat_p256_uint1 x39; - fiat_p256_addcarryx_u64(&x38, &x39, x37, x16, x3); + fiat_p256_addcarryx_u64(&x38, &x39, x37, x3, x16); uint64_t x40; fiat_p256_uint1 x41; - fiat_p256_addcarryx_u64(&x40, &x41, 0x0, (arg1[2]), x32); + fiat_p256_addcarryx_u64(&x40, &x41, 0x0, x32, (arg1[2])); uint64_t x42; fiat_p256_uint1 x43; - fiat_p256_addcarryx_u64(&x42, &x43, x41, 0x0, x36); + fiat_p256_addcarryx_u64(&x42, &x43, x41, x36, 0x0); uint64_t x44; fiat_p256_uint1 x45; - fiat_p256_addcarryx_u64(&x44, &x45, x43, 0x0, x38); + fiat_p256_addcarryx_u64(&x44, &x45, x43, x38, 0x0); uint64_t x46; uint64_t x47; fiat_p256_mulx_u64(&x46, &x47, x40, UINT64_C(0xffffffff00000001)); @@ -987,37 +987,37 @@ static void fiat_p256_from_montgomery(uint64_t out1[4], const uint64_t arg1[4]) fiat_p256_mulx_u64(&x50, &x51, x40, UINT64_C(0xffffffffffffffff)); uint64_t x52; fiat_p256_uint1 x53; - fiat_p256_addcarryx_u64(&x52, &x53, 0x0, x48, x51); + fiat_p256_addcarryx_u64(&x52, &x53, 0x0, x51, x48); uint64_t x54; fiat_p256_uint1 x55; - fiat_p256_addcarryx_u64(&x54, &x55, 0x0, x50, x40); + fiat_p256_addcarryx_u64(&x54, &x55, 0x0, x40, x50); uint64_t x56; fiat_p256_uint1 x57; - fiat_p256_addcarryx_u64(&x56, &x57, x55, x52, x42); + fiat_p256_addcarryx_u64(&x56, &x57, x55, x42, x52); uint64_t x58; fiat_p256_uint1 x59; - fiat_p256_addcarryx_u64(&x58, &x59, x53, 0x0, x49); + fiat_p256_addcarryx_u64(&x58, &x59, x53, x49, 0x0); uint64_t x60; fiat_p256_uint1 x61; - fiat_p256_addcarryx_u64(&x60, &x61, x57, x58, x44); + fiat_p256_addcarryx_u64(&x60, &x61, x57, x44, x58); uint64_t x62; fiat_p256_uint1 x63; - fiat_p256_addcarryx_u64(&x62, &x63, x39, x17, 0x0); + fiat_p256_addcarryx_u64(&x62, &x63, x39, 0x0, x17); uint64_t x64; fiat_p256_uint1 x65; - fiat_p256_addcarryx_u64(&x64, &x65, x45, 0x0, x62); + fiat_p256_addcarryx_u64(&x64, &x65, x45, x62, 0x0); uint64_t x66; fiat_p256_uint1 x67; - fiat_p256_addcarryx_u64(&x66, &x67, x61, x46, x64); + fiat_p256_addcarryx_u64(&x66, &x67, x61, x64, x46); uint64_t x68; fiat_p256_uint1 x69; - fiat_p256_addcarryx_u64(&x68, &x69, 0x0, (arg1[3]), x56); + fiat_p256_addcarryx_u64(&x68, &x69, 0x0, x56, (arg1[3])); uint64_t x70; fiat_p256_uint1 x71; - fiat_p256_addcarryx_u64(&x70, &x71, x69, 0x0, x60); + fiat_p256_addcarryx_u64(&x70, &x71, x69, x60, 0x0); uint64_t x72; fiat_p256_uint1 x73; - fiat_p256_addcarryx_u64(&x72, &x73, x71, 0x0, x66); + fiat_p256_addcarryx_u64(&x72, &x73, x71, x66, 0x0); uint64_t x74; uint64_t x75; fiat_p256_mulx_u64(&x74, &x75, x68, UINT64_C(0xffffffff00000001)); @@ -1029,31 +1029,31 @@ static void fiat_p256_from_montgomery(uint64_t out1[4], const uint64_t arg1[4]) fiat_p256_mulx_u64(&x78, &x79, x68, UINT64_C(0xffffffffffffffff)); uint64_t x80; fiat_p256_uint1 x81; - fiat_p256_addcarryx_u64(&x80, &x81, 0x0, x76, x79); + fiat_p256_addcarryx_u64(&x80, &x81, 0x0, x79, x76); uint64_t x82; fiat_p256_uint1 x83; - fiat_p256_addcarryx_u64(&x82, &x83, 0x0, x78, x68); + fiat_p256_addcarryx_u64(&x82, &x83, 0x0, x68, x78); uint64_t x84; fiat_p256_uint1 x85; - fiat_p256_addcarryx_u64(&x84, &x85, x83, x80, x70); + fiat_p256_addcarryx_u64(&x84, &x85, x83, x70, x80); uint64_t x86; fiat_p256_uint1 x87; - fiat_p256_addcarryx_u64(&x86, &x87, x81, 0x0, x77); + fiat_p256_addcarryx_u64(&x86, &x87, x81, x77, 0x0); uint64_t x88; fiat_p256_uint1 x89; - fiat_p256_addcarryx_u64(&x88, &x89, x85, x86, x72); + fiat_p256_addcarryx_u64(&x88, &x89, x85, x72, x86); uint64_t x90; fiat_p256_uint1 x91; - fiat_p256_addcarryx_u64(&x90, &x91, x67, x47, 0x0); + fiat_p256_addcarryx_u64(&x90, &x91, x67, 0x0, x47); uint64_t x92; fiat_p256_uint1 x93; - fiat_p256_addcarryx_u64(&x92, &x93, x73, 0x0, x90); + fiat_p256_addcarryx_u64(&x92, &x93, x73, x90, 0x0); uint64_t x94; fiat_p256_uint1 x95; - fiat_p256_addcarryx_u64(&x94, &x95, x89, x74, x92); + fiat_p256_addcarryx_u64(&x94, &x95, x89, x92, x74); uint64_t x96; fiat_p256_uint1 x97; - fiat_p256_addcarryx_u64(&x96, &x97, x95, x75, 0x0); + fiat_p256_addcarryx_u64(&x96, &x97, x95, 0x0, x75); uint64_t x98; fiat_p256_uint1 x99; fiat_p256_subborrowx_u64(&x98, &x99, 0x0, x84, UINT64_C(0xffffffffffffffff)); diff --git a/p384_32.c b/p384_32.c index c9591bdfc..b959e6389 100644 --- a/p384_32.c +++ b/p384_32.c @@ -166,40 +166,40 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x35, &x36, x12, (arg2[0])); uint32_t x37; fiat_p384_uint1 x38; - fiat_p384_addcarryx_u32(&x37, &x38, 0x0, x33, x36); + fiat_p384_addcarryx_u32(&x37, &x38, 0x0, x36, x33); uint32_t x39; fiat_p384_uint1 x40; - fiat_p384_addcarryx_u32(&x39, &x40, x38, x31, x34); + fiat_p384_addcarryx_u32(&x39, &x40, x38, x34, x31); uint32_t x41; fiat_p384_uint1 x42; - fiat_p384_addcarryx_u32(&x41, &x42, x40, x29, x32); + fiat_p384_addcarryx_u32(&x41, &x42, x40, x32, x29); uint32_t x43; fiat_p384_uint1 x44; - fiat_p384_addcarryx_u32(&x43, &x44, x42, x27, x30); + fiat_p384_addcarryx_u32(&x43, &x44, x42, x30, x27); uint32_t x45; fiat_p384_uint1 x46; - fiat_p384_addcarryx_u32(&x45, &x46, x44, x25, x28); + fiat_p384_addcarryx_u32(&x45, &x46, x44, x28, x25); uint32_t x47; fiat_p384_uint1 x48; - fiat_p384_addcarryx_u32(&x47, &x48, x46, x23, x26); + fiat_p384_addcarryx_u32(&x47, &x48, x46, x26, x23); uint32_t x49; fiat_p384_uint1 x50; - fiat_p384_addcarryx_u32(&x49, &x50, x48, x21, x24); + fiat_p384_addcarryx_u32(&x49, &x50, x48, x24, x21); uint32_t x51; fiat_p384_uint1 x52; - fiat_p384_addcarryx_u32(&x51, &x52, x50, x19, x22); + fiat_p384_addcarryx_u32(&x51, &x52, x50, x22, x19); uint32_t x53; fiat_p384_uint1 x54; - fiat_p384_addcarryx_u32(&x53, &x54, x52, x17, x20); + fiat_p384_addcarryx_u32(&x53, &x54, x52, x20, x17); uint32_t x55; fiat_p384_uint1 x56; - fiat_p384_addcarryx_u32(&x55, &x56, x54, x15, x18); + fiat_p384_addcarryx_u32(&x55, &x56, x54, x18, x15); uint32_t x57; fiat_p384_uint1 x58; - fiat_p384_addcarryx_u32(&x57, &x58, x56, x13, x16); + fiat_p384_addcarryx_u32(&x57, &x58, x56, x16, x13); uint32_t x59; fiat_p384_uint1 x60; - fiat_p384_addcarryx_u32(&x59, &x60, x58, 0x0, x14); + fiat_p384_addcarryx_u32(&x59, &x60, x58, x14, 0x0); uint32_t x61; uint32_t x62; fiat_p384_mulx_u32(&x61, &x62, x35, UINT32_C(0xffffffff)); @@ -232,70 +232,70 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x79, &x80, x35, UINT32_C(0xffffffff)); uint32_t x81; fiat_p384_uint1 x82; - fiat_p384_addcarryx_u32(&x81, &x82, 0x0, x75, x78); + fiat_p384_addcarryx_u32(&x81, &x82, 0x0, x78, x75); uint32_t x83; fiat_p384_uint1 x84; - fiat_p384_addcarryx_u32(&x83, &x84, x82, x73, x76); + fiat_p384_addcarryx_u32(&x83, &x84, x82, x76, x73); uint32_t x85; fiat_p384_uint1 x86; - fiat_p384_addcarryx_u32(&x85, &x86, x84, x71, x74); + fiat_p384_addcarryx_u32(&x85, &x86, x84, x74, x71); uint32_t x87; fiat_p384_uint1 x88; - fiat_p384_addcarryx_u32(&x87, &x88, x86, x69, x72); + fiat_p384_addcarryx_u32(&x87, &x88, x86, x72, x69); uint32_t x89; fiat_p384_uint1 x90; - fiat_p384_addcarryx_u32(&x89, &x90, x88, x67, x70); + fiat_p384_addcarryx_u32(&x89, &x90, x88, x70, x67); uint32_t x91; fiat_p384_uint1 x92; - fiat_p384_addcarryx_u32(&x91, &x92, x90, x65, x68); + fiat_p384_addcarryx_u32(&x91, &x92, x90, x68, x65); uint32_t x93; fiat_p384_uint1 x94; - fiat_p384_addcarryx_u32(&x93, &x94, x92, x63, x66); + fiat_p384_addcarryx_u32(&x93, &x94, x92, x66, x63); uint32_t x95; fiat_p384_uint1 x96; - fiat_p384_addcarryx_u32(&x95, &x96, x94, x61, x64); + fiat_p384_addcarryx_u32(&x95, &x96, x94, x64, x61); uint32_t x97; fiat_p384_uint1 x98; - fiat_p384_addcarryx_u32(&x97, &x98, x96, 0x0, x62); + fiat_p384_addcarryx_u32(&x97, &x98, x96, x62, 0x0); uint32_t x99; fiat_p384_uint1 x100; - fiat_p384_addcarryx_u32(&x99, &x100, 0x0, x79, x35); + fiat_p384_addcarryx_u32(&x99, &x100, 0x0, x35, x79); uint32_t x101; fiat_p384_uint1 x102; - fiat_p384_addcarryx_u32(&x101, &x102, x100, x80, x37); + fiat_p384_addcarryx_u32(&x101, &x102, x100, x37, x80); uint32_t x103; fiat_p384_uint1 x104; - fiat_p384_addcarryx_u32(&x103, &x104, x102, 0x0, x39); + fiat_p384_addcarryx_u32(&x103, &x104, x102, x39, 0x0); uint32_t x105; fiat_p384_uint1 x106; - fiat_p384_addcarryx_u32(&x105, &x106, x104, x77, x41); + fiat_p384_addcarryx_u32(&x105, &x106, x104, x41, x77); uint32_t x107; fiat_p384_uint1 x108; - fiat_p384_addcarryx_u32(&x107, &x108, x106, x81, x43); + fiat_p384_addcarryx_u32(&x107, &x108, x106, x43, x81); uint32_t x109; fiat_p384_uint1 x110; - fiat_p384_addcarryx_u32(&x109, &x110, x108, x83, x45); + fiat_p384_addcarryx_u32(&x109, &x110, x108, x45, x83); uint32_t x111; fiat_p384_uint1 x112; - fiat_p384_addcarryx_u32(&x111, &x112, x110, x85, x47); + fiat_p384_addcarryx_u32(&x111, &x112, x110, x47, x85); uint32_t x113; fiat_p384_uint1 x114; - fiat_p384_addcarryx_u32(&x113, &x114, x112, x87, x49); + fiat_p384_addcarryx_u32(&x113, &x114, x112, x49, x87); uint32_t x115; fiat_p384_uint1 x116; - fiat_p384_addcarryx_u32(&x115, &x116, x114, x89, x51); + fiat_p384_addcarryx_u32(&x115, &x116, x114, x51, x89); uint32_t x117; fiat_p384_uint1 x118; - fiat_p384_addcarryx_u32(&x117, &x118, x116, x91, x53); + fiat_p384_addcarryx_u32(&x117, &x118, x116, x53, x91); uint32_t x119; fiat_p384_uint1 x120; - fiat_p384_addcarryx_u32(&x119, &x120, x118, x93, x55); + fiat_p384_addcarryx_u32(&x119, &x120, x118, x55, x93); uint32_t x121; fiat_p384_uint1 x122; - fiat_p384_addcarryx_u32(&x121, &x122, x120, x95, x57); + fiat_p384_addcarryx_u32(&x121, &x122, x120, x57, x95); uint32_t x123; fiat_p384_uint1 x124; - fiat_p384_addcarryx_u32(&x123, &x124, x122, x97, x59); + fiat_p384_addcarryx_u32(&x123, &x124, x122, x59, x97); uint32_t x125; fiat_p384_uint1 x126; fiat_p384_addcarryx_u32(&x125, &x126, x124, 0x0, 0x0); @@ -337,79 +337,79 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x149, &x150, x1, (arg2[0])); uint32_t x151; fiat_p384_uint1 x152; - fiat_p384_addcarryx_u32(&x151, &x152, 0x0, x147, x150); + fiat_p384_addcarryx_u32(&x151, &x152, 0x0, x150, x147); uint32_t x153; fiat_p384_uint1 x154; - fiat_p384_addcarryx_u32(&x153, &x154, x152, x145, x148); + fiat_p384_addcarryx_u32(&x153, &x154, x152, x148, x145); uint32_t x155; fiat_p384_uint1 x156; - fiat_p384_addcarryx_u32(&x155, &x156, x154, x143, x146); + fiat_p384_addcarryx_u32(&x155, &x156, x154, x146, x143); uint32_t x157; fiat_p384_uint1 x158; - fiat_p384_addcarryx_u32(&x157, &x158, x156, x141, x144); + fiat_p384_addcarryx_u32(&x157, &x158, x156, x144, x141); uint32_t x159; fiat_p384_uint1 x160; - fiat_p384_addcarryx_u32(&x159, &x160, x158, x139, x142); + fiat_p384_addcarryx_u32(&x159, &x160, x158, x142, x139); uint32_t x161; fiat_p384_uint1 x162; - fiat_p384_addcarryx_u32(&x161, &x162, x160, x137, x140); + fiat_p384_addcarryx_u32(&x161, &x162, x160, x140, x137); uint32_t x163; fiat_p384_uint1 x164; - fiat_p384_addcarryx_u32(&x163, &x164, x162, x135, x138); + fiat_p384_addcarryx_u32(&x163, &x164, x162, x138, x135); uint32_t x165; fiat_p384_uint1 x166; - fiat_p384_addcarryx_u32(&x165, &x166, x164, x133, x136); + fiat_p384_addcarryx_u32(&x165, &x166, x164, x136, x133); uint32_t x167; fiat_p384_uint1 x168; - fiat_p384_addcarryx_u32(&x167, &x168, x166, x131, x134); + fiat_p384_addcarryx_u32(&x167, &x168, x166, x134, x131); uint32_t x169; fiat_p384_uint1 x170; - fiat_p384_addcarryx_u32(&x169, &x170, x168, x129, x132); + fiat_p384_addcarryx_u32(&x169, &x170, x168, x132, x129); uint32_t x171; fiat_p384_uint1 x172; - fiat_p384_addcarryx_u32(&x171, &x172, x170, x127, x130); + fiat_p384_addcarryx_u32(&x171, &x172, x170, x130, x127); uint32_t x173; fiat_p384_uint1 x174; - fiat_p384_addcarryx_u32(&x173, &x174, x172, 0x0, x128); + fiat_p384_addcarryx_u32(&x173, &x174, x172, x128, 0x0); uint32_t x175; fiat_p384_uint1 x176; - fiat_p384_addcarryx_u32(&x175, &x176, 0x0, x149, x101); + fiat_p384_addcarryx_u32(&x175, &x176, 0x0, x101, x149); uint32_t x177; fiat_p384_uint1 x178; - fiat_p384_addcarryx_u32(&x177, &x178, x176, x151, x103); + fiat_p384_addcarryx_u32(&x177, &x178, x176, x103, x151); uint32_t x179; fiat_p384_uint1 x180; - fiat_p384_addcarryx_u32(&x179, &x180, x178, x153, x105); + fiat_p384_addcarryx_u32(&x179, &x180, x178, x105, x153); uint32_t x181; fiat_p384_uint1 x182; - fiat_p384_addcarryx_u32(&x181, &x182, x180, x155, x107); + fiat_p384_addcarryx_u32(&x181, &x182, x180, x107, x155); uint32_t x183; fiat_p384_uint1 x184; - fiat_p384_addcarryx_u32(&x183, &x184, x182, x157, x109); + fiat_p384_addcarryx_u32(&x183, &x184, x182, x109, x157); uint32_t x185; fiat_p384_uint1 x186; - fiat_p384_addcarryx_u32(&x185, &x186, x184, x159, x111); + fiat_p384_addcarryx_u32(&x185, &x186, x184, x111, x159); uint32_t x187; fiat_p384_uint1 x188; - fiat_p384_addcarryx_u32(&x187, &x188, x186, x161, x113); + fiat_p384_addcarryx_u32(&x187, &x188, x186, x113, x161); uint32_t x189; fiat_p384_uint1 x190; - fiat_p384_addcarryx_u32(&x189, &x190, x188, x163, x115); + fiat_p384_addcarryx_u32(&x189, &x190, x188, x115, x163); uint32_t x191; fiat_p384_uint1 x192; - fiat_p384_addcarryx_u32(&x191, &x192, x190, x165, x117); + fiat_p384_addcarryx_u32(&x191, &x192, x190, x117, x165); uint32_t x193; fiat_p384_uint1 x194; - fiat_p384_addcarryx_u32(&x193, &x194, x192, x167, x119); + fiat_p384_addcarryx_u32(&x193, &x194, x192, x119, x167); uint32_t x195; fiat_p384_uint1 x196; - fiat_p384_addcarryx_u32(&x195, &x196, x194, x169, x121); + fiat_p384_addcarryx_u32(&x195, &x196, x194, x121, x169); uint32_t x197; fiat_p384_uint1 x198; - fiat_p384_addcarryx_u32(&x197, &x198, x196, x171, x123); + fiat_p384_addcarryx_u32(&x197, &x198, x196, x123, x171); uint32_t x199; fiat_p384_uint1 x200; - fiat_p384_addcarryx_u32(&x199, &x200, x198, x173, (fiat_p384_uint1)x125); + fiat_p384_addcarryx_u32(&x199, &x200, x198, (fiat_p384_uint1)x125, x173); uint32_t x201; uint32_t x202; fiat_p384_mulx_u32(&x201, &x202, x175, UINT32_C(0xffffffff)); @@ -442,73 +442,73 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x219, &x220, x175, UINT32_C(0xffffffff)); uint32_t x221; fiat_p384_uint1 x222; - fiat_p384_addcarryx_u32(&x221, &x222, 0x0, x215, x218); + fiat_p384_addcarryx_u32(&x221, &x222, 0x0, x218, x215); uint32_t x223; fiat_p384_uint1 x224; - fiat_p384_addcarryx_u32(&x223, &x224, x222, x213, x216); + fiat_p384_addcarryx_u32(&x223, &x224, x222, x216, x213); uint32_t x225; fiat_p384_uint1 x226; - fiat_p384_addcarryx_u32(&x225, &x226, x224, x211, x214); + fiat_p384_addcarryx_u32(&x225, &x226, x224, x214, x211); uint32_t x227; fiat_p384_uint1 x228; - fiat_p384_addcarryx_u32(&x227, &x228, x226, x209, x212); + fiat_p384_addcarryx_u32(&x227, &x228, x226, x212, x209); uint32_t x229; fiat_p384_uint1 x230; - fiat_p384_addcarryx_u32(&x229, &x230, x228, x207, x210); + fiat_p384_addcarryx_u32(&x229, &x230, x228, x210, x207); uint32_t x231; fiat_p384_uint1 x232; - fiat_p384_addcarryx_u32(&x231, &x232, x230, x205, x208); + fiat_p384_addcarryx_u32(&x231, &x232, x230, x208, x205); uint32_t x233; fiat_p384_uint1 x234; - fiat_p384_addcarryx_u32(&x233, &x234, x232, x203, x206); + fiat_p384_addcarryx_u32(&x233, &x234, x232, x206, x203); uint32_t x235; fiat_p384_uint1 x236; - fiat_p384_addcarryx_u32(&x235, &x236, x234, x201, x204); + fiat_p384_addcarryx_u32(&x235, &x236, x234, x204, x201); uint32_t x237; fiat_p384_uint1 x238; - fiat_p384_addcarryx_u32(&x237, &x238, x236, 0x0, x202); + fiat_p384_addcarryx_u32(&x237, &x238, x236, x202, 0x0); uint32_t x239; fiat_p384_uint1 x240; - fiat_p384_addcarryx_u32(&x239, &x240, 0x0, x219, x175); + fiat_p384_addcarryx_u32(&x239, &x240, 0x0, x175, x219); uint32_t x241; fiat_p384_uint1 x242; - fiat_p384_addcarryx_u32(&x241, &x242, x240, x220, x177); + fiat_p384_addcarryx_u32(&x241, &x242, x240, x177, x220); uint32_t x243; fiat_p384_uint1 x244; - fiat_p384_addcarryx_u32(&x243, &x244, x242, 0x0, x179); + fiat_p384_addcarryx_u32(&x243, &x244, x242, x179, 0x0); uint32_t x245; fiat_p384_uint1 x246; - fiat_p384_addcarryx_u32(&x245, &x246, x244, x217, x181); + fiat_p384_addcarryx_u32(&x245, &x246, x244, x181, x217); uint32_t x247; fiat_p384_uint1 x248; - fiat_p384_addcarryx_u32(&x247, &x248, x246, x221, x183); + fiat_p384_addcarryx_u32(&x247, &x248, x246, x183, x221); uint32_t x249; fiat_p384_uint1 x250; - fiat_p384_addcarryx_u32(&x249, &x250, x248, x223, x185); + fiat_p384_addcarryx_u32(&x249, &x250, x248, x185, x223); uint32_t x251; fiat_p384_uint1 x252; - fiat_p384_addcarryx_u32(&x251, &x252, x250, x225, x187); + fiat_p384_addcarryx_u32(&x251, &x252, x250, x187, x225); uint32_t x253; fiat_p384_uint1 x254; - fiat_p384_addcarryx_u32(&x253, &x254, x252, x227, x189); + fiat_p384_addcarryx_u32(&x253, &x254, x252, x189, x227); uint32_t x255; fiat_p384_uint1 x256; - fiat_p384_addcarryx_u32(&x255, &x256, x254, x229, x191); + fiat_p384_addcarryx_u32(&x255, &x256, x254, x191, x229); uint32_t x257; fiat_p384_uint1 x258; - fiat_p384_addcarryx_u32(&x257, &x258, x256, x231, x193); + fiat_p384_addcarryx_u32(&x257, &x258, x256, x193, x231); uint32_t x259; fiat_p384_uint1 x260; - fiat_p384_addcarryx_u32(&x259, &x260, x258, x233, x195); + fiat_p384_addcarryx_u32(&x259, &x260, x258, x195, x233); uint32_t x261; fiat_p384_uint1 x262; - fiat_p384_addcarryx_u32(&x261, &x262, x260, x235, x197); + fiat_p384_addcarryx_u32(&x261, &x262, x260, x197, x235); uint32_t x263; fiat_p384_uint1 x264; - fiat_p384_addcarryx_u32(&x263, &x264, x262, x237, x199); + fiat_p384_addcarryx_u32(&x263, &x264, x262, x199, x237); uint32_t x265; fiat_p384_uint1 x266; - fiat_p384_addcarryx_u32(&x265, &x266, x264, 0x0, x200); + fiat_p384_addcarryx_u32(&x265, &x266, x264, x200, 0x0); uint32_t x267; uint32_t x268; fiat_p384_mulx_u32(&x267, &x268, x2, (arg2[11])); @@ -547,79 +547,79 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x289, &x290, x2, (arg2[0])); uint32_t x291; fiat_p384_uint1 x292; - fiat_p384_addcarryx_u32(&x291, &x292, 0x0, x287, x290); + fiat_p384_addcarryx_u32(&x291, &x292, 0x0, x290, x287); uint32_t x293; fiat_p384_uint1 x294; - fiat_p384_addcarryx_u32(&x293, &x294, x292, x285, x288); + fiat_p384_addcarryx_u32(&x293, &x294, x292, x288, x285); uint32_t x295; fiat_p384_uint1 x296; - fiat_p384_addcarryx_u32(&x295, &x296, x294, x283, x286); + fiat_p384_addcarryx_u32(&x295, &x296, x294, x286, x283); uint32_t x297; fiat_p384_uint1 x298; - fiat_p384_addcarryx_u32(&x297, &x298, x296, x281, x284); + fiat_p384_addcarryx_u32(&x297, &x298, x296, x284, x281); uint32_t x299; fiat_p384_uint1 x300; - fiat_p384_addcarryx_u32(&x299, &x300, x298, x279, x282); + fiat_p384_addcarryx_u32(&x299, &x300, x298, x282, x279); uint32_t x301; fiat_p384_uint1 x302; - fiat_p384_addcarryx_u32(&x301, &x302, x300, x277, x280); + fiat_p384_addcarryx_u32(&x301, &x302, x300, x280, x277); uint32_t x303; fiat_p384_uint1 x304; - fiat_p384_addcarryx_u32(&x303, &x304, x302, x275, x278); + fiat_p384_addcarryx_u32(&x303, &x304, x302, x278, x275); uint32_t x305; fiat_p384_uint1 x306; - fiat_p384_addcarryx_u32(&x305, &x306, x304, x273, x276); + fiat_p384_addcarryx_u32(&x305, &x306, x304, x276, x273); uint32_t x307; fiat_p384_uint1 x308; - fiat_p384_addcarryx_u32(&x307, &x308, x306, x271, x274); + fiat_p384_addcarryx_u32(&x307, &x308, x306, x274, x271); uint32_t x309; fiat_p384_uint1 x310; - fiat_p384_addcarryx_u32(&x309, &x310, x308, x269, x272); + fiat_p384_addcarryx_u32(&x309, &x310, x308, x272, x269); uint32_t x311; fiat_p384_uint1 x312; - fiat_p384_addcarryx_u32(&x311, &x312, x310, x267, x270); + fiat_p384_addcarryx_u32(&x311, &x312, x310, x270, x267); uint32_t x313; fiat_p384_uint1 x314; - fiat_p384_addcarryx_u32(&x313, &x314, x312, 0x0, x268); + fiat_p384_addcarryx_u32(&x313, &x314, x312, x268, 0x0); uint32_t x315; fiat_p384_uint1 x316; - fiat_p384_addcarryx_u32(&x315, &x316, 0x0, x289, x241); + fiat_p384_addcarryx_u32(&x315, &x316, 0x0, x241, x289); uint32_t x317; fiat_p384_uint1 x318; - fiat_p384_addcarryx_u32(&x317, &x318, x316, x291, x243); + fiat_p384_addcarryx_u32(&x317, &x318, x316, x243, x291); uint32_t x319; fiat_p384_uint1 x320; - fiat_p384_addcarryx_u32(&x319, &x320, x318, x293, x245); + fiat_p384_addcarryx_u32(&x319, &x320, x318, x245, x293); uint32_t x321; fiat_p384_uint1 x322; - fiat_p384_addcarryx_u32(&x321, &x322, x320, x295, x247); + fiat_p384_addcarryx_u32(&x321, &x322, x320, x247, x295); uint32_t x323; fiat_p384_uint1 x324; - fiat_p384_addcarryx_u32(&x323, &x324, x322, x297, x249); + fiat_p384_addcarryx_u32(&x323, &x324, x322, x249, x297); uint32_t x325; fiat_p384_uint1 x326; - fiat_p384_addcarryx_u32(&x325, &x326, x324, x299, x251); + fiat_p384_addcarryx_u32(&x325, &x326, x324, x251, x299); uint32_t x327; fiat_p384_uint1 x328; - fiat_p384_addcarryx_u32(&x327, &x328, x326, x301, x253); + fiat_p384_addcarryx_u32(&x327, &x328, x326, x253, x301); uint32_t x329; fiat_p384_uint1 x330; - fiat_p384_addcarryx_u32(&x329, &x330, x328, x303, x255); + fiat_p384_addcarryx_u32(&x329, &x330, x328, x255, x303); uint32_t x331; fiat_p384_uint1 x332; - fiat_p384_addcarryx_u32(&x331, &x332, x330, x305, x257); + fiat_p384_addcarryx_u32(&x331, &x332, x330, x257, x305); uint32_t x333; fiat_p384_uint1 x334; - fiat_p384_addcarryx_u32(&x333, &x334, x332, x307, x259); + fiat_p384_addcarryx_u32(&x333, &x334, x332, x259, x307); uint32_t x335; fiat_p384_uint1 x336; - fiat_p384_addcarryx_u32(&x335, &x336, x334, x309, x261); + fiat_p384_addcarryx_u32(&x335, &x336, x334, x261, x309); uint32_t x337; fiat_p384_uint1 x338; - fiat_p384_addcarryx_u32(&x337, &x338, x336, x311, x263); + fiat_p384_addcarryx_u32(&x337, &x338, x336, x263, x311); uint32_t x339; fiat_p384_uint1 x340; - fiat_p384_addcarryx_u32(&x339, &x340, x338, x313, x265); + fiat_p384_addcarryx_u32(&x339, &x340, x338, x265, x313); uint32_t x341; uint32_t x342; fiat_p384_mulx_u32(&x341, &x342, x315, UINT32_C(0xffffffff)); @@ -652,73 +652,73 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x359, &x360, x315, UINT32_C(0xffffffff)); uint32_t x361; fiat_p384_uint1 x362; - fiat_p384_addcarryx_u32(&x361, &x362, 0x0, x355, x358); + fiat_p384_addcarryx_u32(&x361, &x362, 0x0, x358, x355); uint32_t x363; fiat_p384_uint1 x364; - fiat_p384_addcarryx_u32(&x363, &x364, x362, x353, x356); + fiat_p384_addcarryx_u32(&x363, &x364, x362, x356, x353); uint32_t x365; fiat_p384_uint1 x366; - fiat_p384_addcarryx_u32(&x365, &x366, x364, x351, x354); + fiat_p384_addcarryx_u32(&x365, &x366, x364, x354, x351); uint32_t x367; fiat_p384_uint1 x368; - fiat_p384_addcarryx_u32(&x367, &x368, x366, x349, x352); + fiat_p384_addcarryx_u32(&x367, &x368, x366, x352, x349); uint32_t x369; fiat_p384_uint1 x370; - fiat_p384_addcarryx_u32(&x369, &x370, x368, x347, x350); + fiat_p384_addcarryx_u32(&x369, &x370, x368, x350, x347); uint32_t x371; fiat_p384_uint1 x372; - fiat_p384_addcarryx_u32(&x371, &x372, x370, x345, x348); + fiat_p384_addcarryx_u32(&x371, &x372, x370, x348, x345); uint32_t x373; fiat_p384_uint1 x374; - fiat_p384_addcarryx_u32(&x373, &x374, x372, x343, x346); + fiat_p384_addcarryx_u32(&x373, &x374, x372, x346, x343); uint32_t x375; fiat_p384_uint1 x376; - fiat_p384_addcarryx_u32(&x375, &x376, x374, x341, x344); + fiat_p384_addcarryx_u32(&x375, &x376, x374, x344, x341); uint32_t x377; fiat_p384_uint1 x378; - fiat_p384_addcarryx_u32(&x377, &x378, x376, 0x0, x342); + fiat_p384_addcarryx_u32(&x377, &x378, x376, x342, 0x0); uint32_t x379; fiat_p384_uint1 x380; - fiat_p384_addcarryx_u32(&x379, &x380, 0x0, x359, x315); + fiat_p384_addcarryx_u32(&x379, &x380, 0x0, x315, x359); uint32_t x381; fiat_p384_uint1 x382; - fiat_p384_addcarryx_u32(&x381, &x382, x380, x360, x317); + fiat_p384_addcarryx_u32(&x381, &x382, x380, x317, x360); uint32_t x383; fiat_p384_uint1 x384; - fiat_p384_addcarryx_u32(&x383, &x384, x382, 0x0, x319); + fiat_p384_addcarryx_u32(&x383, &x384, x382, x319, 0x0); uint32_t x385; fiat_p384_uint1 x386; - fiat_p384_addcarryx_u32(&x385, &x386, x384, x357, x321); + fiat_p384_addcarryx_u32(&x385, &x386, x384, x321, x357); uint32_t x387; fiat_p384_uint1 x388; - fiat_p384_addcarryx_u32(&x387, &x388, x386, x361, x323); + fiat_p384_addcarryx_u32(&x387, &x388, x386, x323, x361); uint32_t x389; fiat_p384_uint1 x390; - fiat_p384_addcarryx_u32(&x389, &x390, x388, x363, x325); + fiat_p384_addcarryx_u32(&x389, &x390, x388, x325, x363); uint32_t x391; fiat_p384_uint1 x392; - fiat_p384_addcarryx_u32(&x391, &x392, x390, x365, x327); + fiat_p384_addcarryx_u32(&x391, &x392, x390, x327, x365); uint32_t x393; fiat_p384_uint1 x394; - fiat_p384_addcarryx_u32(&x393, &x394, x392, x367, x329); + fiat_p384_addcarryx_u32(&x393, &x394, x392, x329, x367); uint32_t x395; fiat_p384_uint1 x396; - fiat_p384_addcarryx_u32(&x395, &x396, x394, x369, x331); + fiat_p384_addcarryx_u32(&x395, &x396, x394, x331, x369); uint32_t x397; fiat_p384_uint1 x398; - fiat_p384_addcarryx_u32(&x397, &x398, x396, x371, x333); + fiat_p384_addcarryx_u32(&x397, &x398, x396, x333, x371); uint32_t x399; fiat_p384_uint1 x400; - fiat_p384_addcarryx_u32(&x399, &x400, x398, x373, x335); + fiat_p384_addcarryx_u32(&x399, &x400, x398, x335, x373); uint32_t x401; fiat_p384_uint1 x402; - fiat_p384_addcarryx_u32(&x401, &x402, x400, x375, x337); + fiat_p384_addcarryx_u32(&x401, &x402, x400, x337, x375); uint32_t x403; fiat_p384_uint1 x404; - fiat_p384_addcarryx_u32(&x403, &x404, x402, x377, x339); + fiat_p384_addcarryx_u32(&x403, &x404, x402, x339, x377); uint32_t x405; fiat_p384_uint1 x406; - fiat_p384_addcarryx_u32(&x405, &x406, x404, 0x0, x340); + fiat_p384_addcarryx_u32(&x405, &x406, x404, x340, 0x0); uint32_t x407; uint32_t x408; fiat_p384_mulx_u32(&x407, &x408, x3, (arg2[11])); @@ -757,79 +757,79 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x429, &x430, x3, (arg2[0])); uint32_t x431; fiat_p384_uint1 x432; - fiat_p384_addcarryx_u32(&x431, &x432, 0x0, x427, x430); + fiat_p384_addcarryx_u32(&x431, &x432, 0x0, x430, x427); uint32_t x433; fiat_p384_uint1 x434; - fiat_p384_addcarryx_u32(&x433, &x434, x432, x425, x428); + fiat_p384_addcarryx_u32(&x433, &x434, x432, x428, x425); uint32_t x435; fiat_p384_uint1 x436; - fiat_p384_addcarryx_u32(&x435, &x436, x434, x423, x426); + fiat_p384_addcarryx_u32(&x435, &x436, x434, x426, x423); uint32_t x437; fiat_p384_uint1 x438; - fiat_p384_addcarryx_u32(&x437, &x438, x436, x421, x424); + fiat_p384_addcarryx_u32(&x437, &x438, x436, x424, x421); uint32_t x439; fiat_p384_uint1 x440; - fiat_p384_addcarryx_u32(&x439, &x440, x438, x419, x422); + fiat_p384_addcarryx_u32(&x439, &x440, x438, x422, x419); uint32_t x441; fiat_p384_uint1 x442; - fiat_p384_addcarryx_u32(&x441, &x442, x440, x417, x420); + fiat_p384_addcarryx_u32(&x441, &x442, x440, x420, x417); uint32_t x443; fiat_p384_uint1 x444; - fiat_p384_addcarryx_u32(&x443, &x444, x442, x415, x418); + fiat_p384_addcarryx_u32(&x443, &x444, x442, x418, x415); uint32_t x445; fiat_p384_uint1 x446; - fiat_p384_addcarryx_u32(&x445, &x446, x444, x413, x416); + fiat_p384_addcarryx_u32(&x445, &x446, x444, x416, x413); uint32_t x447; fiat_p384_uint1 x448; - fiat_p384_addcarryx_u32(&x447, &x448, x446, x411, x414); + fiat_p384_addcarryx_u32(&x447, &x448, x446, x414, x411); uint32_t x449; fiat_p384_uint1 x450; - fiat_p384_addcarryx_u32(&x449, &x450, x448, x409, x412); + fiat_p384_addcarryx_u32(&x449, &x450, x448, x412, x409); uint32_t x451; fiat_p384_uint1 x452; - fiat_p384_addcarryx_u32(&x451, &x452, x450, x407, x410); + fiat_p384_addcarryx_u32(&x451, &x452, x450, x410, x407); uint32_t x453; fiat_p384_uint1 x454; - fiat_p384_addcarryx_u32(&x453, &x454, x452, 0x0, x408); + fiat_p384_addcarryx_u32(&x453, &x454, x452, x408, 0x0); uint32_t x455; fiat_p384_uint1 x456; - fiat_p384_addcarryx_u32(&x455, &x456, 0x0, x429, x381); + fiat_p384_addcarryx_u32(&x455, &x456, 0x0, x381, x429); uint32_t x457; fiat_p384_uint1 x458; - fiat_p384_addcarryx_u32(&x457, &x458, x456, x431, x383); + fiat_p384_addcarryx_u32(&x457, &x458, x456, x383, x431); uint32_t x459; fiat_p384_uint1 x460; - fiat_p384_addcarryx_u32(&x459, &x460, x458, x433, x385); + fiat_p384_addcarryx_u32(&x459, &x460, x458, x385, x433); uint32_t x461; fiat_p384_uint1 x462; - fiat_p384_addcarryx_u32(&x461, &x462, x460, x435, x387); + fiat_p384_addcarryx_u32(&x461, &x462, x460, x387, x435); uint32_t x463; fiat_p384_uint1 x464; - fiat_p384_addcarryx_u32(&x463, &x464, x462, x437, x389); + fiat_p384_addcarryx_u32(&x463, &x464, x462, x389, x437); uint32_t x465; fiat_p384_uint1 x466; - fiat_p384_addcarryx_u32(&x465, &x466, x464, x439, x391); + fiat_p384_addcarryx_u32(&x465, &x466, x464, x391, x439); uint32_t x467; fiat_p384_uint1 x468; - fiat_p384_addcarryx_u32(&x467, &x468, x466, x441, x393); + fiat_p384_addcarryx_u32(&x467, &x468, x466, x393, x441); uint32_t x469; fiat_p384_uint1 x470; - fiat_p384_addcarryx_u32(&x469, &x470, x468, x443, x395); + fiat_p384_addcarryx_u32(&x469, &x470, x468, x395, x443); uint32_t x471; fiat_p384_uint1 x472; - fiat_p384_addcarryx_u32(&x471, &x472, x470, x445, x397); + fiat_p384_addcarryx_u32(&x471, &x472, x470, x397, x445); uint32_t x473; fiat_p384_uint1 x474; - fiat_p384_addcarryx_u32(&x473, &x474, x472, x447, x399); + fiat_p384_addcarryx_u32(&x473, &x474, x472, x399, x447); uint32_t x475; fiat_p384_uint1 x476; - fiat_p384_addcarryx_u32(&x475, &x476, x474, x449, x401); + fiat_p384_addcarryx_u32(&x475, &x476, x474, x401, x449); uint32_t x477; fiat_p384_uint1 x478; - fiat_p384_addcarryx_u32(&x477, &x478, x476, x451, x403); + fiat_p384_addcarryx_u32(&x477, &x478, x476, x403, x451); uint32_t x479; fiat_p384_uint1 x480; - fiat_p384_addcarryx_u32(&x479, &x480, x478, x453, x405); + fiat_p384_addcarryx_u32(&x479, &x480, x478, x405, x453); uint32_t x481; uint32_t x482; fiat_p384_mulx_u32(&x481, &x482, x455, UINT32_C(0xffffffff)); @@ -862,73 +862,73 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x499, &x500, x455, UINT32_C(0xffffffff)); uint32_t x501; fiat_p384_uint1 x502; - fiat_p384_addcarryx_u32(&x501, &x502, 0x0, x495, x498); + fiat_p384_addcarryx_u32(&x501, &x502, 0x0, x498, x495); uint32_t x503; fiat_p384_uint1 x504; - fiat_p384_addcarryx_u32(&x503, &x504, x502, x493, x496); + fiat_p384_addcarryx_u32(&x503, &x504, x502, x496, x493); uint32_t x505; fiat_p384_uint1 x506; - fiat_p384_addcarryx_u32(&x505, &x506, x504, x491, x494); + fiat_p384_addcarryx_u32(&x505, &x506, x504, x494, x491); uint32_t x507; fiat_p384_uint1 x508; - fiat_p384_addcarryx_u32(&x507, &x508, x506, x489, x492); + fiat_p384_addcarryx_u32(&x507, &x508, x506, x492, x489); uint32_t x509; fiat_p384_uint1 x510; - fiat_p384_addcarryx_u32(&x509, &x510, x508, x487, x490); + fiat_p384_addcarryx_u32(&x509, &x510, x508, x490, x487); uint32_t x511; fiat_p384_uint1 x512; - fiat_p384_addcarryx_u32(&x511, &x512, x510, x485, x488); + fiat_p384_addcarryx_u32(&x511, &x512, x510, x488, x485); uint32_t x513; fiat_p384_uint1 x514; - fiat_p384_addcarryx_u32(&x513, &x514, x512, x483, x486); + fiat_p384_addcarryx_u32(&x513, &x514, x512, x486, x483); uint32_t x515; fiat_p384_uint1 x516; - fiat_p384_addcarryx_u32(&x515, &x516, x514, x481, x484); + fiat_p384_addcarryx_u32(&x515, &x516, x514, x484, x481); uint32_t x517; fiat_p384_uint1 x518; - fiat_p384_addcarryx_u32(&x517, &x518, x516, 0x0, x482); + fiat_p384_addcarryx_u32(&x517, &x518, x516, x482, 0x0); uint32_t x519; fiat_p384_uint1 x520; - fiat_p384_addcarryx_u32(&x519, &x520, 0x0, x499, x455); + fiat_p384_addcarryx_u32(&x519, &x520, 0x0, x455, x499); uint32_t x521; fiat_p384_uint1 x522; - fiat_p384_addcarryx_u32(&x521, &x522, x520, x500, x457); + fiat_p384_addcarryx_u32(&x521, &x522, x520, x457, x500); uint32_t x523; fiat_p384_uint1 x524; - fiat_p384_addcarryx_u32(&x523, &x524, x522, 0x0, x459); + fiat_p384_addcarryx_u32(&x523, &x524, x522, x459, 0x0); uint32_t x525; fiat_p384_uint1 x526; - fiat_p384_addcarryx_u32(&x525, &x526, x524, x497, x461); + fiat_p384_addcarryx_u32(&x525, &x526, x524, x461, x497); uint32_t x527; fiat_p384_uint1 x528; - fiat_p384_addcarryx_u32(&x527, &x528, x526, x501, x463); + fiat_p384_addcarryx_u32(&x527, &x528, x526, x463, x501); uint32_t x529; fiat_p384_uint1 x530; - fiat_p384_addcarryx_u32(&x529, &x530, x528, x503, x465); + fiat_p384_addcarryx_u32(&x529, &x530, x528, x465, x503); uint32_t x531; fiat_p384_uint1 x532; - fiat_p384_addcarryx_u32(&x531, &x532, x530, x505, x467); + fiat_p384_addcarryx_u32(&x531, &x532, x530, x467, x505); uint32_t x533; fiat_p384_uint1 x534; - fiat_p384_addcarryx_u32(&x533, &x534, x532, x507, x469); + fiat_p384_addcarryx_u32(&x533, &x534, x532, x469, x507); uint32_t x535; fiat_p384_uint1 x536; - fiat_p384_addcarryx_u32(&x535, &x536, x534, x509, x471); + fiat_p384_addcarryx_u32(&x535, &x536, x534, x471, x509); uint32_t x537; fiat_p384_uint1 x538; - fiat_p384_addcarryx_u32(&x537, &x538, x536, x511, x473); + fiat_p384_addcarryx_u32(&x537, &x538, x536, x473, x511); uint32_t x539; fiat_p384_uint1 x540; - fiat_p384_addcarryx_u32(&x539, &x540, x538, x513, x475); + fiat_p384_addcarryx_u32(&x539, &x540, x538, x475, x513); uint32_t x541; fiat_p384_uint1 x542; - fiat_p384_addcarryx_u32(&x541, &x542, x540, x515, x477); + fiat_p384_addcarryx_u32(&x541, &x542, x540, x477, x515); uint32_t x543; fiat_p384_uint1 x544; - fiat_p384_addcarryx_u32(&x543, &x544, x542, x517, x479); + fiat_p384_addcarryx_u32(&x543, &x544, x542, x479, x517); uint32_t x545; fiat_p384_uint1 x546; - fiat_p384_addcarryx_u32(&x545, &x546, x544, 0x0, x480); + fiat_p384_addcarryx_u32(&x545, &x546, x544, x480, 0x0); uint32_t x547; uint32_t x548; fiat_p384_mulx_u32(&x547, &x548, x4, (arg2[11])); @@ -967,79 +967,79 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x569, &x570, x4, (arg2[0])); uint32_t x571; fiat_p384_uint1 x572; - fiat_p384_addcarryx_u32(&x571, &x572, 0x0, x567, x570); + fiat_p384_addcarryx_u32(&x571, &x572, 0x0, x570, x567); uint32_t x573; fiat_p384_uint1 x574; - fiat_p384_addcarryx_u32(&x573, &x574, x572, x565, x568); + fiat_p384_addcarryx_u32(&x573, &x574, x572, x568, x565); uint32_t x575; fiat_p384_uint1 x576; - fiat_p384_addcarryx_u32(&x575, &x576, x574, x563, x566); + fiat_p384_addcarryx_u32(&x575, &x576, x574, x566, x563); uint32_t x577; fiat_p384_uint1 x578; - fiat_p384_addcarryx_u32(&x577, &x578, x576, x561, x564); + fiat_p384_addcarryx_u32(&x577, &x578, x576, x564, x561); uint32_t x579; fiat_p384_uint1 x580; - fiat_p384_addcarryx_u32(&x579, &x580, x578, x559, x562); + fiat_p384_addcarryx_u32(&x579, &x580, x578, x562, x559); uint32_t x581; fiat_p384_uint1 x582; - fiat_p384_addcarryx_u32(&x581, &x582, x580, x557, x560); + fiat_p384_addcarryx_u32(&x581, &x582, x580, x560, x557); uint32_t x583; fiat_p384_uint1 x584; - fiat_p384_addcarryx_u32(&x583, &x584, x582, x555, x558); + fiat_p384_addcarryx_u32(&x583, &x584, x582, x558, x555); uint32_t x585; fiat_p384_uint1 x586; - fiat_p384_addcarryx_u32(&x585, &x586, x584, x553, x556); + fiat_p384_addcarryx_u32(&x585, &x586, x584, x556, x553); uint32_t x587; fiat_p384_uint1 x588; - fiat_p384_addcarryx_u32(&x587, &x588, x586, x551, x554); + fiat_p384_addcarryx_u32(&x587, &x588, x586, x554, x551); uint32_t x589; fiat_p384_uint1 x590; - fiat_p384_addcarryx_u32(&x589, &x590, x588, x549, x552); + fiat_p384_addcarryx_u32(&x589, &x590, x588, x552, x549); uint32_t x591; fiat_p384_uint1 x592; - fiat_p384_addcarryx_u32(&x591, &x592, x590, x547, x550); + fiat_p384_addcarryx_u32(&x591, &x592, x590, x550, x547); uint32_t x593; fiat_p384_uint1 x594; - fiat_p384_addcarryx_u32(&x593, &x594, x592, 0x0, x548); + fiat_p384_addcarryx_u32(&x593, &x594, x592, x548, 0x0); uint32_t x595; fiat_p384_uint1 x596; - fiat_p384_addcarryx_u32(&x595, &x596, 0x0, x569, x521); + fiat_p384_addcarryx_u32(&x595, &x596, 0x0, x521, x569); uint32_t x597; fiat_p384_uint1 x598; - fiat_p384_addcarryx_u32(&x597, &x598, x596, x571, x523); + fiat_p384_addcarryx_u32(&x597, &x598, x596, x523, x571); uint32_t x599; fiat_p384_uint1 x600; - fiat_p384_addcarryx_u32(&x599, &x600, x598, x573, x525); + fiat_p384_addcarryx_u32(&x599, &x600, x598, x525, x573); uint32_t x601; fiat_p384_uint1 x602; - fiat_p384_addcarryx_u32(&x601, &x602, x600, x575, x527); + fiat_p384_addcarryx_u32(&x601, &x602, x600, x527, x575); uint32_t x603; fiat_p384_uint1 x604; - fiat_p384_addcarryx_u32(&x603, &x604, x602, x577, x529); + fiat_p384_addcarryx_u32(&x603, &x604, x602, x529, x577); uint32_t x605; fiat_p384_uint1 x606; - fiat_p384_addcarryx_u32(&x605, &x606, x604, x579, x531); + fiat_p384_addcarryx_u32(&x605, &x606, x604, x531, x579); uint32_t x607; fiat_p384_uint1 x608; - fiat_p384_addcarryx_u32(&x607, &x608, x606, x581, x533); + fiat_p384_addcarryx_u32(&x607, &x608, x606, x533, x581); uint32_t x609; fiat_p384_uint1 x610; - fiat_p384_addcarryx_u32(&x609, &x610, x608, x583, x535); + fiat_p384_addcarryx_u32(&x609, &x610, x608, x535, x583); uint32_t x611; fiat_p384_uint1 x612; - fiat_p384_addcarryx_u32(&x611, &x612, x610, x585, x537); + fiat_p384_addcarryx_u32(&x611, &x612, x610, x537, x585); uint32_t x613; fiat_p384_uint1 x614; - fiat_p384_addcarryx_u32(&x613, &x614, x612, x587, x539); + fiat_p384_addcarryx_u32(&x613, &x614, x612, x539, x587); uint32_t x615; fiat_p384_uint1 x616; - fiat_p384_addcarryx_u32(&x615, &x616, x614, x589, x541); + fiat_p384_addcarryx_u32(&x615, &x616, x614, x541, x589); uint32_t x617; fiat_p384_uint1 x618; - fiat_p384_addcarryx_u32(&x617, &x618, x616, x591, x543); + fiat_p384_addcarryx_u32(&x617, &x618, x616, x543, x591); uint32_t x619; fiat_p384_uint1 x620; - fiat_p384_addcarryx_u32(&x619, &x620, x618, x593, x545); + fiat_p384_addcarryx_u32(&x619, &x620, x618, x545, x593); uint32_t x621; uint32_t x622; fiat_p384_mulx_u32(&x621, &x622, x595, UINT32_C(0xffffffff)); @@ -1072,73 +1072,73 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x639, &x640, x595, UINT32_C(0xffffffff)); uint32_t x641; fiat_p384_uint1 x642; - fiat_p384_addcarryx_u32(&x641, &x642, 0x0, x635, x638); + fiat_p384_addcarryx_u32(&x641, &x642, 0x0, x638, x635); uint32_t x643; fiat_p384_uint1 x644; - fiat_p384_addcarryx_u32(&x643, &x644, x642, x633, x636); + fiat_p384_addcarryx_u32(&x643, &x644, x642, x636, x633); uint32_t x645; fiat_p384_uint1 x646; - fiat_p384_addcarryx_u32(&x645, &x646, x644, x631, x634); + fiat_p384_addcarryx_u32(&x645, &x646, x644, x634, x631); uint32_t x647; fiat_p384_uint1 x648; - fiat_p384_addcarryx_u32(&x647, &x648, x646, x629, x632); + fiat_p384_addcarryx_u32(&x647, &x648, x646, x632, x629); uint32_t x649; fiat_p384_uint1 x650; - fiat_p384_addcarryx_u32(&x649, &x650, x648, x627, x630); + fiat_p384_addcarryx_u32(&x649, &x650, x648, x630, x627); uint32_t x651; fiat_p384_uint1 x652; - fiat_p384_addcarryx_u32(&x651, &x652, x650, x625, x628); + fiat_p384_addcarryx_u32(&x651, &x652, x650, x628, x625); uint32_t x653; fiat_p384_uint1 x654; - fiat_p384_addcarryx_u32(&x653, &x654, x652, x623, x626); + fiat_p384_addcarryx_u32(&x653, &x654, x652, x626, x623); uint32_t x655; fiat_p384_uint1 x656; - fiat_p384_addcarryx_u32(&x655, &x656, x654, x621, x624); + fiat_p384_addcarryx_u32(&x655, &x656, x654, x624, x621); uint32_t x657; fiat_p384_uint1 x658; - fiat_p384_addcarryx_u32(&x657, &x658, x656, 0x0, x622); + fiat_p384_addcarryx_u32(&x657, &x658, x656, x622, 0x0); uint32_t x659; fiat_p384_uint1 x660; - fiat_p384_addcarryx_u32(&x659, &x660, 0x0, x639, x595); + fiat_p384_addcarryx_u32(&x659, &x660, 0x0, x595, x639); uint32_t x661; fiat_p384_uint1 x662; - fiat_p384_addcarryx_u32(&x661, &x662, x660, x640, x597); + fiat_p384_addcarryx_u32(&x661, &x662, x660, x597, x640); uint32_t x663; fiat_p384_uint1 x664; - fiat_p384_addcarryx_u32(&x663, &x664, x662, 0x0, x599); + fiat_p384_addcarryx_u32(&x663, &x664, x662, x599, 0x0); uint32_t x665; fiat_p384_uint1 x666; - fiat_p384_addcarryx_u32(&x665, &x666, x664, x637, x601); + fiat_p384_addcarryx_u32(&x665, &x666, x664, x601, x637); uint32_t x667; fiat_p384_uint1 x668; - fiat_p384_addcarryx_u32(&x667, &x668, x666, x641, x603); + fiat_p384_addcarryx_u32(&x667, &x668, x666, x603, x641); uint32_t x669; fiat_p384_uint1 x670; - fiat_p384_addcarryx_u32(&x669, &x670, x668, x643, x605); + fiat_p384_addcarryx_u32(&x669, &x670, x668, x605, x643); uint32_t x671; fiat_p384_uint1 x672; - fiat_p384_addcarryx_u32(&x671, &x672, x670, x645, x607); + fiat_p384_addcarryx_u32(&x671, &x672, x670, x607, x645); uint32_t x673; fiat_p384_uint1 x674; - fiat_p384_addcarryx_u32(&x673, &x674, x672, x647, x609); + fiat_p384_addcarryx_u32(&x673, &x674, x672, x609, x647); uint32_t x675; fiat_p384_uint1 x676; - fiat_p384_addcarryx_u32(&x675, &x676, x674, x649, x611); + fiat_p384_addcarryx_u32(&x675, &x676, x674, x611, x649); uint32_t x677; fiat_p384_uint1 x678; - fiat_p384_addcarryx_u32(&x677, &x678, x676, x651, x613); + fiat_p384_addcarryx_u32(&x677, &x678, x676, x613, x651); uint32_t x679; fiat_p384_uint1 x680; - fiat_p384_addcarryx_u32(&x679, &x680, x678, x653, x615); + fiat_p384_addcarryx_u32(&x679, &x680, x678, x615, x653); uint32_t x681; fiat_p384_uint1 x682; - fiat_p384_addcarryx_u32(&x681, &x682, x680, x655, x617); + fiat_p384_addcarryx_u32(&x681, &x682, x680, x617, x655); uint32_t x683; fiat_p384_uint1 x684; - fiat_p384_addcarryx_u32(&x683, &x684, x682, x657, x619); + fiat_p384_addcarryx_u32(&x683, &x684, x682, x619, x657); uint32_t x685; fiat_p384_uint1 x686; - fiat_p384_addcarryx_u32(&x685, &x686, x684, 0x0, x620); + fiat_p384_addcarryx_u32(&x685, &x686, x684, x620, 0x0); uint32_t x687; uint32_t x688; fiat_p384_mulx_u32(&x687, &x688, x5, (arg2[11])); @@ -1177,79 +1177,79 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x709, &x710, x5, (arg2[0])); uint32_t x711; fiat_p384_uint1 x712; - fiat_p384_addcarryx_u32(&x711, &x712, 0x0, x707, x710); + fiat_p384_addcarryx_u32(&x711, &x712, 0x0, x710, x707); uint32_t x713; fiat_p384_uint1 x714; - fiat_p384_addcarryx_u32(&x713, &x714, x712, x705, x708); + fiat_p384_addcarryx_u32(&x713, &x714, x712, x708, x705); uint32_t x715; fiat_p384_uint1 x716; - fiat_p384_addcarryx_u32(&x715, &x716, x714, x703, x706); + fiat_p384_addcarryx_u32(&x715, &x716, x714, x706, x703); uint32_t x717; fiat_p384_uint1 x718; - fiat_p384_addcarryx_u32(&x717, &x718, x716, x701, x704); + fiat_p384_addcarryx_u32(&x717, &x718, x716, x704, x701); uint32_t x719; fiat_p384_uint1 x720; - fiat_p384_addcarryx_u32(&x719, &x720, x718, x699, x702); + fiat_p384_addcarryx_u32(&x719, &x720, x718, x702, x699); uint32_t x721; fiat_p384_uint1 x722; - fiat_p384_addcarryx_u32(&x721, &x722, x720, x697, x700); + fiat_p384_addcarryx_u32(&x721, &x722, x720, x700, x697); uint32_t x723; fiat_p384_uint1 x724; - fiat_p384_addcarryx_u32(&x723, &x724, x722, x695, x698); + fiat_p384_addcarryx_u32(&x723, &x724, x722, x698, x695); uint32_t x725; fiat_p384_uint1 x726; - fiat_p384_addcarryx_u32(&x725, &x726, x724, x693, x696); + fiat_p384_addcarryx_u32(&x725, &x726, x724, x696, x693); uint32_t x727; fiat_p384_uint1 x728; - fiat_p384_addcarryx_u32(&x727, &x728, x726, x691, x694); + fiat_p384_addcarryx_u32(&x727, &x728, x726, x694, x691); uint32_t x729; fiat_p384_uint1 x730; - fiat_p384_addcarryx_u32(&x729, &x730, x728, x689, x692); + fiat_p384_addcarryx_u32(&x729, &x730, x728, x692, x689); uint32_t x731; fiat_p384_uint1 x732; - fiat_p384_addcarryx_u32(&x731, &x732, x730, x687, x690); + fiat_p384_addcarryx_u32(&x731, &x732, x730, x690, x687); uint32_t x733; fiat_p384_uint1 x734; - fiat_p384_addcarryx_u32(&x733, &x734, x732, 0x0, x688); + fiat_p384_addcarryx_u32(&x733, &x734, x732, x688, 0x0); uint32_t x735; fiat_p384_uint1 x736; - fiat_p384_addcarryx_u32(&x735, &x736, 0x0, x709, x661); + fiat_p384_addcarryx_u32(&x735, &x736, 0x0, x661, x709); uint32_t x737; fiat_p384_uint1 x738; - fiat_p384_addcarryx_u32(&x737, &x738, x736, x711, x663); + fiat_p384_addcarryx_u32(&x737, &x738, x736, x663, x711); uint32_t x739; fiat_p384_uint1 x740; - fiat_p384_addcarryx_u32(&x739, &x740, x738, x713, x665); + fiat_p384_addcarryx_u32(&x739, &x740, x738, x665, x713); uint32_t x741; fiat_p384_uint1 x742; - fiat_p384_addcarryx_u32(&x741, &x742, x740, x715, x667); + fiat_p384_addcarryx_u32(&x741, &x742, x740, x667, x715); uint32_t x743; fiat_p384_uint1 x744; - fiat_p384_addcarryx_u32(&x743, &x744, x742, x717, x669); + fiat_p384_addcarryx_u32(&x743, &x744, x742, x669, x717); uint32_t x745; fiat_p384_uint1 x746; - fiat_p384_addcarryx_u32(&x745, &x746, x744, x719, x671); + fiat_p384_addcarryx_u32(&x745, &x746, x744, x671, x719); uint32_t x747; fiat_p384_uint1 x748; - fiat_p384_addcarryx_u32(&x747, &x748, x746, x721, x673); + fiat_p384_addcarryx_u32(&x747, &x748, x746, x673, x721); uint32_t x749; fiat_p384_uint1 x750; - fiat_p384_addcarryx_u32(&x749, &x750, x748, x723, x675); + fiat_p384_addcarryx_u32(&x749, &x750, x748, x675, x723); uint32_t x751; fiat_p384_uint1 x752; - fiat_p384_addcarryx_u32(&x751, &x752, x750, x725, x677); + fiat_p384_addcarryx_u32(&x751, &x752, x750, x677, x725); uint32_t x753; fiat_p384_uint1 x754; - fiat_p384_addcarryx_u32(&x753, &x754, x752, x727, x679); + fiat_p384_addcarryx_u32(&x753, &x754, x752, x679, x727); uint32_t x755; fiat_p384_uint1 x756; - fiat_p384_addcarryx_u32(&x755, &x756, x754, x729, x681); + fiat_p384_addcarryx_u32(&x755, &x756, x754, x681, x729); uint32_t x757; fiat_p384_uint1 x758; - fiat_p384_addcarryx_u32(&x757, &x758, x756, x731, x683); + fiat_p384_addcarryx_u32(&x757, &x758, x756, x683, x731); uint32_t x759; fiat_p384_uint1 x760; - fiat_p384_addcarryx_u32(&x759, &x760, x758, x733, x685); + fiat_p384_addcarryx_u32(&x759, &x760, x758, x685, x733); uint32_t x761; uint32_t x762; fiat_p384_mulx_u32(&x761, &x762, x735, UINT32_C(0xffffffff)); @@ -1282,73 +1282,73 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x779, &x780, x735, UINT32_C(0xffffffff)); uint32_t x781; fiat_p384_uint1 x782; - fiat_p384_addcarryx_u32(&x781, &x782, 0x0, x775, x778); + fiat_p384_addcarryx_u32(&x781, &x782, 0x0, x778, x775); uint32_t x783; fiat_p384_uint1 x784; - fiat_p384_addcarryx_u32(&x783, &x784, x782, x773, x776); + fiat_p384_addcarryx_u32(&x783, &x784, x782, x776, x773); uint32_t x785; fiat_p384_uint1 x786; - fiat_p384_addcarryx_u32(&x785, &x786, x784, x771, x774); + fiat_p384_addcarryx_u32(&x785, &x786, x784, x774, x771); uint32_t x787; fiat_p384_uint1 x788; - fiat_p384_addcarryx_u32(&x787, &x788, x786, x769, x772); + fiat_p384_addcarryx_u32(&x787, &x788, x786, x772, x769); uint32_t x789; fiat_p384_uint1 x790; - fiat_p384_addcarryx_u32(&x789, &x790, x788, x767, x770); + fiat_p384_addcarryx_u32(&x789, &x790, x788, x770, x767); uint32_t x791; fiat_p384_uint1 x792; - fiat_p384_addcarryx_u32(&x791, &x792, x790, x765, x768); + fiat_p384_addcarryx_u32(&x791, &x792, x790, x768, x765); uint32_t x793; fiat_p384_uint1 x794; - fiat_p384_addcarryx_u32(&x793, &x794, x792, x763, x766); + fiat_p384_addcarryx_u32(&x793, &x794, x792, x766, x763); uint32_t x795; fiat_p384_uint1 x796; - fiat_p384_addcarryx_u32(&x795, &x796, x794, x761, x764); + fiat_p384_addcarryx_u32(&x795, &x796, x794, x764, x761); uint32_t x797; fiat_p384_uint1 x798; - fiat_p384_addcarryx_u32(&x797, &x798, x796, 0x0, x762); + fiat_p384_addcarryx_u32(&x797, &x798, x796, x762, 0x0); uint32_t x799; fiat_p384_uint1 x800; - fiat_p384_addcarryx_u32(&x799, &x800, 0x0, x779, x735); + fiat_p384_addcarryx_u32(&x799, &x800, 0x0, x735, x779); uint32_t x801; fiat_p384_uint1 x802; - fiat_p384_addcarryx_u32(&x801, &x802, x800, x780, x737); + fiat_p384_addcarryx_u32(&x801, &x802, x800, x737, x780); uint32_t x803; fiat_p384_uint1 x804; - fiat_p384_addcarryx_u32(&x803, &x804, x802, 0x0, x739); + fiat_p384_addcarryx_u32(&x803, &x804, x802, x739, 0x0); uint32_t x805; fiat_p384_uint1 x806; - fiat_p384_addcarryx_u32(&x805, &x806, x804, x777, x741); + fiat_p384_addcarryx_u32(&x805, &x806, x804, x741, x777); uint32_t x807; fiat_p384_uint1 x808; - fiat_p384_addcarryx_u32(&x807, &x808, x806, x781, x743); + fiat_p384_addcarryx_u32(&x807, &x808, x806, x743, x781); uint32_t x809; fiat_p384_uint1 x810; - fiat_p384_addcarryx_u32(&x809, &x810, x808, x783, x745); + fiat_p384_addcarryx_u32(&x809, &x810, x808, x745, x783); uint32_t x811; fiat_p384_uint1 x812; - fiat_p384_addcarryx_u32(&x811, &x812, x810, x785, x747); + fiat_p384_addcarryx_u32(&x811, &x812, x810, x747, x785); uint32_t x813; fiat_p384_uint1 x814; - fiat_p384_addcarryx_u32(&x813, &x814, x812, x787, x749); + fiat_p384_addcarryx_u32(&x813, &x814, x812, x749, x787); uint32_t x815; fiat_p384_uint1 x816; - fiat_p384_addcarryx_u32(&x815, &x816, x814, x789, x751); + fiat_p384_addcarryx_u32(&x815, &x816, x814, x751, x789); uint32_t x817; fiat_p384_uint1 x818; - fiat_p384_addcarryx_u32(&x817, &x818, x816, x791, x753); + fiat_p384_addcarryx_u32(&x817, &x818, x816, x753, x791); uint32_t x819; fiat_p384_uint1 x820; - fiat_p384_addcarryx_u32(&x819, &x820, x818, x793, x755); + fiat_p384_addcarryx_u32(&x819, &x820, x818, x755, x793); uint32_t x821; fiat_p384_uint1 x822; - fiat_p384_addcarryx_u32(&x821, &x822, x820, x795, x757); + fiat_p384_addcarryx_u32(&x821, &x822, x820, x757, x795); uint32_t x823; fiat_p384_uint1 x824; - fiat_p384_addcarryx_u32(&x823, &x824, x822, x797, x759); + fiat_p384_addcarryx_u32(&x823, &x824, x822, x759, x797); uint32_t x825; fiat_p384_uint1 x826; - fiat_p384_addcarryx_u32(&x825, &x826, x824, 0x0, x760); + fiat_p384_addcarryx_u32(&x825, &x826, x824, x760, 0x0); uint32_t x827; uint32_t x828; fiat_p384_mulx_u32(&x827, &x828, x6, (arg2[11])); @@ -1387,79 +1387,79 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x849, &x850, x6, (arg2[0])); uint32_t x851; fiat_p384_uint1 x852; - fiat_p384_addcarryx_u32(&x851, &x852, 0x0, x847, x850); + fiat_p384_addcarryx_u32(&x851, &x852, 0x0, x850, x847); uint32_t x853; fiat_p384_uint1 x854; - fiat_p384_addcarryx_u32(&x853, &x854, x852, x845, x848); + fiat_p384_addcarryx_u32(&x853, &x854, x852, x848, x845); uint32_t x855; fiat_p384_uint1 x856; - fiat_p384_addcarryx_u32(&x855, &x856, x854, x843, x846); + fiat_p384_addcarryx_u32(&x855, &x856, x854, x846, x843); uint32_t x857; fiat_p384_uint1 x858; - fiat_p384_addcarryx_u32(&x857, &x858, x856, x841, x844); + fiat_p384_addcarryx_u32(&x857, &x858, x856, x844, x841); uint32_t x859; fiat_p384_uint1 x860; - fiat_p384_addcarryx_u32(&x859, &x860, x858, x839, x842); + fiat_p384_addcarryx_u32(&x859, &x860, x858, x842, x839); uint32_t x861; fiat_p384_uint1 x862; - fiat_p384_addcarryx_u32(&x861, &x862, x860, x837, x840); + fiat_p384_addcarryx_u32(&x861, &x862, x860, x840, x837); uint32_t x863; fiat_p384_uint1 x864; - fiat_p384_addcarryx_u32(&x863, &x864, x862, x835, x838); + fiat_p384_addcarryx_u32(&x863, &x864, x862, x838, x835); uint32_t x865; fiat_p384_uint1 x866; - fiat_p384_addcarryx_u32(&x865, &x866, x864, x833, x836); + fiat_p384_addcarryx_u32(&x865, &x866, x864, x836, x833); uint32_t x867; fiat_p384_uint1 x868; - fiat_p384_addcarryx_u32(&x867, &x868, x866, x831, x834); + fiat_p384_addcarryx_u32(&x867, &x868, x866, x834, x831); uint32_t x869; fiat_p384_uint1 x870; - fiat_p384_addcarryx_u32(&x869, &x870, x868, x829, x832); + fiat_p384_addcarryx_u32(&x869, &x870, x868, x832, x829); uint32_t x871; fiat_p384_uint1 x872; - fiat_p384_addcarryx_u32(&x871, &x872, x870, x827, x830); + fiat_p384_addcarryx_u32(&x871, &x872, x870, x830, x827); uint32_t x873; fiat_p384_uint1 x874; - fiat_p384_addcarryx_u32(&x873, &x874, x872, 0x0, x828); + fiat_p384_addcarryx_u32(&x873, &x874, x872, x828, 0x0); uint32_t x875; fiat_p384_uint1 x876; - fiat_p384_addcarryx_u32(&x875, &x876, 0x0, x849, x801); + fiat_p384_addcarryx_u32(&x875, &x876, 0x0, x801, x849); uint32_t x877; fiat_p384_uint1 x878; - fiat_p384_addcarryx_u32(&x877, &x878, x876, x851, x803); + fiat_p384_addcarryx_u32(&x877, &x878, x876, x803, x851); uint32_t x879; fiat_p384_uint1 x880; - fiat_p384_addcarryx_u32(&x879, &x880, x878, x853, x805); + fiat_p384_addcarryx_u32(&x879, &x880, x878, x805, x853); uint32_t x881; fiat_p384_uint1 x882; - fiat_p384_addcarryx_u32(&x881, &x882, x880, x855, x807); + fiat_p384_addcarryx_u32(&x881, &x882, x880, x807, x855); uint32_t x883; fiat_p384_uint1 x884; - fiat_p384_addcarryx_u32(&x883, &x884, x882, x857, x809); + fiat_p384_addcarryx_u32(&x883, &x884, x882, x809, x857); uint32_t x885; fiat_p384_uint1 x886; - fiat_p384_addcarryx_u32(&x885, &x886, x884, x859, x811); + fiat_p384_addcarryx_u32(&x885, &x886, x884, x811, x859); uint32_t x887; fiat_p384_uint1 x888; - fiat_p384_addcarryx_u32(&x887, &x888, x886, x861, x813); + fiat_p384_addcarryx_u32(&x887, &x888, x886, x813, x861); uint32_t x889; fiat_p384_uint1 x890; - fiat_p384_addcarryx_u32(&x889, &x890, x888, x863, x815); + fiat_p384_addcarryx_u32(&x889, &x890, x888, x815, x863); uint32_t x891; fiat_p384_uint1 x892; - fiat_p384_addcarryx_u32(&x891, &x892, x890, x865, x817); + fiat_p384_addcarryx_u32(&x891, &x892, x890, x817, x865); uint32_t x893; fiat_p384_uint1 x894; - fiat_p384_addcarryx_u32(&x893, &x894, x892, x867, x819); + fiat_p384_addcarryx_u32(&x893, &x894, x892, x819, x867); uint32_t x895; fiat_p384_uint1 x896; - fiat_p384_addcarryx_u32(&x895, &x896, x894, x869, x821); + fiat_p384_addcarryx_u32(&x895, &x896, x894, x821, x869); uint32_t x897; fiat_p384_uint1 x898; - fiat_p384_addcarryx_u32(&x897, &x898, x896, x871, x823); + fiat_p384_addcarryx_u32(&x897, &x898, x896, x823, x871); uint32_t x899; fiat_p384_uint1 x900; - fiat_p384_addcarryx_u32(&x899, &x900, x898, x873, x825); + fiat_p384_addcarryx_u32(&x899, &x900, x898, x825, x873); uint32_t x901; uint32_t x902; fiat_p384_mulx_u32(&x901, &x902, x875, UINT32_C(0xffffffff)); @@ -1492,73 +1492,73 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x919, &x920, x875, UINT32_C(0xffffffff)); uint32_t x921; fiat_p384_uint1 x922; - fiat_p384_addcarryx_u32(&x921, &x922, 0x0, x915, x918); + fiat_p384_addcarryx_u32(&x921, &x922, 0x0, x918, x915); uint32_t x923; fiat_p384_uint1 x924; - fiat_p384_addcarryx_u32(&x923, &x924, x922, x913, x916); + fiat_p384_addcarryx_u32(&x923, &x924, x922, x916, x913); uint32_t x925; fiat_p384_uint1 x926; - fiat_p384_addcarryx_u32(&x925, &x926, x924, x911, x914); + fiat_p384_addcarryx_u32(&x925, &x926, x924, x914, x911); uint32_t x927; fiat_p384_uint1 x928; - fiat_p384_addcarryx_u32(&x927, &x928, x926, x909, x912); + fiat_p384_addcarryx_u32(&x927, &x928, x926, x912, x909); uint32_t x929; fiat_p384_uint1 x930; - fiat_p384_addcarryx_u32(&x929, &x930, x928, x907, x910); + fiat_p384_addcarryx_u32(&x929, &x930, x928, x910, x907); uint32_t x931; fiat_p384_uint1 x932; - fiat_p384_addcarryx_u32(&x931, &x932, x930, x905, x908); + fiat_p384_addcarryx_u32(&x931, &x932, x930, x908, x905); uint32_t x933; fiat_p384_uint1 x934; - fiat_p384_addcarryx_u32(&x933, &x934, x932, x903, x906); + fiat_p384_addcarryx_u32(&x933, &x934, x932, x906, x903); uint32_t x935; fiat_p384_uint1 x936; - fiat_p384_addcarryx_u32(&x935, &x936, x934, x901, x904); + fiat_p384_addcarryx_u32(&x935, &x936, x934, x904, x901); uint32_t x937; fiat_p384_uint1 x938; - fiat_p384_addcarryx_u32(&x937, &x938, x936, 0x0, x902); + fiat_p384_addcarryx_u32(&x937, &x938, x936, x902, 0x0); uint32_t x939; fiat_p384_uint1 x940; - fiat_p384_addcarryx_u32(&x939, &x940, 0x0, x919, x875); + fiat_p384_addcarryx_u32(&x939, &x940, 0x0, x875, x919); uint32_t x941; fiat_p384_uint1 x942; - fiat_p384_addcarryx_u32(&x941, &x942, x940, x920, x877); + fiat_p384_addcarryx_u32(&x941, &x942, x940, x877, x920); uint32_t x943; fiat_p384_uint1 x944; - fiat_p384_addcarryx_u32(&x943, &x944, x942, 0x0, x879); + fiat_p384_addcarryx_u32(&x943, &x944, x942, x879, 0x0); uint32_t x945; fiat_p384_uint1 x946; - fiat_p384_addcarryx_u32(&x945, &x946, x944, x917, x881); + fiat_p384_addcarryx_u32(&x945, &x946, x944, x881, x917); uint32_t x947; fiat_p384_uint1 x948; - fiat_p384_addcarryx_u32(&x947, &x948, x946, x921, x883); + fiat_p384_addcarryx_u32(&x947, &x948, x946, x883, x921); uint32_t x949; fiat_p384_uint1 x950; - fiat_p384_addcarryx_u32(&x949, &x950, x948, x923, x885); + fiat_p384_addcarryx_u32(&x949, &x950, x948, x885, x923); uint32_t x951; fiat_p384_uint1 x952; - fiat_p384_addcarryx_u32(&x951, &x952, x950, x925, x887); + fiat_p384_addcarryx_u32(&x951, &x952, x950, x887, x925); uint32_t x953; fiat_p384_uint1 x954; - fiat_p384_addcarryx_u32(&x953, &x954, x952, x927, x889); + fiat_p384_addcarryx_u32(&x953, &x954, x952, x889, x927); uint32_t x955; fiat_p384_uint1 x956; - fiat_p384_addcarryx_u32(&x955, &x956, x954, x929, x891); + fiat_p384_addcarryx_u32(&x955, &x956, x954, x891, x929); uint32_t x957; fiat_p384_uint1 x958; - fiat_p384_addcarryx_u32(&x957, &x958, x956, x931, x893); + fiat_p384_addcarryx_u32(&x957, &x958, x956, x893, x931); uint32_t x959; fiat_p384_uint1 x960; - fiat_p384_addcarryx_u32(&x959, &x960, x958, x933, x895); + fiat_p384_addcarryx_u32(&x959, &x960, x958, x895, x933); uint32_t x961; fiat_p384_uint1 x962; - fiat_p384_addcarryx_u32(&x961, &x962, x960, x935, x897); + fiat_p384_addcarryx_u32(&x961, &x962, x960, x897, x935); uint32_t x963; fiat_p384_uint1 x964; - fiat_p384_addcarryx_u32(&x963, &x964, x962, x937, x899); + fiat_p384_addcarryx_u32(&x963, &x964, x962, x899, x937); uint32_t x965; fiat_p384_uint1 x966; - fiat_p384_addcarryx_u32(&x965, &x966, x964, 0x0, x900); + fiat_p384_addcarryx_u32(&x965, &x966, x964, x900, 0x0); uint32_t x967; uint32_t x968; fiat_p384_mulx_u32(&x967, &x968, x7, (arg2[11])); @@ -1597,79 +1597,79 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x989, &x990, x7, (arg2[0])); uint32_t x991; fiat_p384_uint1 x992; - fiat_p384_addcarryx_u32(&x991, &x992, 0x0, x987, x990); + fiat_p384_addcarryx_u32(&x991, &x992, 0x0, x990, x987); uint32_t x993; fiat_p384_uint1 x994; - fiat_p384_addcarryx_u32(&x993, &x994, x992, x985, x988); + fiat_p384_addcarryx_u32(&x993, &x994, x992, x988, x985); uint32_t x995; fiat_p384_uint1 x996; - fiat_p384_addcarryx_u32(&x995, &x996, x994, x983, x986); + fiat_p384_addcarryx_u32(&x995, &x996, x994, x986, x983); uint32_t x997; fiat_p384_uint1 x998; - fiat_p384_addcarryx_u32(&x997, &x998, x996, x981, x984); + fiat_p384_addcarryx_u32(&x997, &x998, x996, x984, x981); uint32_t x999; fiat_p384_uint1 x1000; - fiat_p384_addcarryx_u32(&x999, &x1000, x998, x979, x982); + fiat_p384_addcarryx_u32(&x999, &x1000, x998, x982, x979); uint32_t x1001; fiat_p384_uint1 x1002; - fiat_p384_addcarryx_u32(&x1001, &x1002, x1000, x977, x980); + fiat_p384_addcarryx_u32(&x1001, &x1002, x1000, x980, x977); uint32_t x1003; fiat_p384_uint1 x1004; - fiat_p384_addcarryx_u32(&x1003, &x1004, x1002, x975, x978); + fiat_p384_addcarryx_u32(&x1003, &x1004, x1002, x978, x975); uint32_t x1005; fiat_p384_uint1 x1006; - fiat_p384_addcarryx_u32(&x1005, &x1006, x1004, x973, x976); + fiat_p384_addcarryx_u32(&x1005, &x1006, x1004, x976, x973); uint32_t x1007; fiat_p384_uint1 x1008; - fiat_p384_addcarryx_u32(&x1007, &x1008, x1006, x971, x974); + fiat_p384_addcarryx_u32(&x1007, &x1008, x1006, x974, x971); uint32_t x1009; fiat_p384_uint1 x1010; - fiat_p384_addcarryx_u32(&x1009, &x1010, x1008, x969, x972); + fiat_p384_addcarryx_u32(&x1009, &x1010, x1008, x972, x969); uint32_t x1011; fiat_p384_uint1 x1012; - fiat_p384_addcarryx_u32(&x1011, &x1012, x1010, x967, x970); + fiat_p384_addcarryx_u32(&x1011, &x1012, x1010, x970, x967); uint32_t x1013; fiat_p384_uint1 x1014; - fiat_p384_addcarryx_u32(&x1013, &x1014, x1012, 0x0, x968); + fiat_p384_addcarryx_u32(&x1013, &x1014, x1012, x968, 0x0); uint32_t x1015; fiat_p384_uint1 x1016; - fiat_p384_addcarryx_u32(&x1015, &x1016, 0x0, x989, x941); + fiat_p384_addcarryx_u32(&x1015, &x1016, 0x0, x941, x989); uint32_t x1017; fiat_p384_uint1 x1018; - fiat_p384_addcarryx_u32(&x1017, &x1018, x1016, x991, x943); + fiat_p384_addcarryx_u32(&x1017, &x1018, x1016, x943, x991); uint32_t x1019; fiat_p384_uint1 x1020; - fiat_p384_addcarryx_u32(&x1019, &x1020, x1018, x993, x945); + fiat_p384_addcarryx_u32(&x1019, &x1020, x1018, x945, x993); uint32_t x1021; fiat_p384_uint1 x1022; - fiat_p384_addcarryx_u32(&x1021, &x1022, x1020, x995, x947); + fiat_p384_addcarryx_u32(&x1021, &x1022, x1020, x947, x995); uint32_t x1023; fiat_p384_uint1 x1024; - fiat_p384_addcarryx_u32(&x1023, &x1024, x1022, x997, x949); + fiat_p384_addcarryx_u32(&x1023, &x1024, x1022, x949, x997); uint32_t x1025; fiat_p384_uint1 x1026; - fiat_p384_addcarryx_u32(&x1025, &x1026, x1024, x999, x951); + fiat_p384_addcarryx_u32(&x1025, &x1026, x1024, x951, x999); uint32_t x1027; fiat_p384_uint1 x1028; - fiat_p384_addcarryx_u32(&x1027, &x1028, x1026, x1001, x953); + fiat_p384_addcarryx_u32(&x1027, &x1028, x1026, x953, x1001); uint32_t x1029; fiat_p384_uint1 x1030; - fiat_p384_addcarryx_u32(&x1029, &x1030, x1028, x1003, x955); + fiat_p384_addcarryx_u32(&x1029, &x1030, x1028, x955, x1003); uint32_t x1031; fiat_p384_uint1 x1032; - fiat_p384_addcarryx_u32(&x1031, &x1032, x1030, x1005, x957); + fiat_p384_addcarryx_u32(&x1031, &x1032, x1030, x957, x1005); uint32_t x1033; fiat_p384_uint1 x1034; - fiat_p384_addcarryx_u32(&x1033, &x1034, x1032, x1007, x959); + fiat_p384_addcarryx_u32(&x1033, &x1034, x1032, x959, x1007); uint32_t x1035; fiat_p384_uint1 x1036; - fiat_p384_addcarryx_u32(&x1035, &x1036, x1034, x1009, x961); + fiat_p384_addcarryx_u32(&x1035, &x1036, x1034, x961, x1009); uint32_t x1037; fiat_p384_uint1 x1038; - fiat_p384_addcarryx_u32(&x1037, &x1038, x1036, x1011, x963); + fiat_p384_addcarryx_u32(&x1037, &x1038, x1036, x963, x1011); uint32_t x1039; fiat_p384_uint1 x1040; - fiat_p384_addcarryx_u32(&x1039, &x1040, x1038, x1013, x965); + fiat_p384_addcarryx_u32(&x1039, &x1040, x1038, x965, x1013); uint32_t x1041; uint32_t x1042; fiat_p384_mulx_u32(&x1041, &x1042, x1015, UINT32_C(0xffffffff)); @@ -1702,73 +1702,73 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x1059, &x1060, x1015, UINT32_C(0xffffffff)); uint32_t x1061; fiat_p384_uint1 x1062; - fiat_p384_addcarryx_u32(&x1061, &x1062, 0x0, x1055, x1058); + fiat_p384_addcarryx_u32(&x1061, &x1062, 0x0, x1058, x1055); uint32_t x1063; fiat_p384_uint1 x1064; - fiat_p384_addcarryx_u32(&x1063, &x1064, x1062, x1053, x1056); + fiat_p384_addcarryx_u32(&x1063, &x1064, x1062, x1056, x1053); uint32_t x1065; fiat_p384_uint1 x1066; - fiat_p384_addcarryx_u32(&x1065, &x1066, x1064, x1051, x1054); + fiat_p384_addcarryx_u32(&x1065, &x1066, x1064, x1054, x1051); uint32_t x1067; fiat_p384_uint1 x1068; - fiat_p384_addcarryx_u32(&x1067, &x1068, x1066, x1049, x1052); + fiat_p384_addcarryx_u32(&x1067, &x1068, x1066, x1052, x1049); uint32_t x1069; fiat_p384_uint1 x1070; - fiat_p384_addcarryx_u32(&x1069, &x1070, x1068, x1047, x1050); + fiat_p384_addcarryx_u32(&x1069, &x1070, x1068, x1050, x1047); uint32_t x1071; fiat_p384_uint1 x1072; - fiat_p384_addcarryx_u32(&x1071, &x1072, x1070, x1045, x1048); + fiat_p384_addcarryx_u32(&x1071, &x1072, x1070, x1048, x1045); uint32_t x1073; fiat_p384_uint1 x1074; - fiat_p384_addcarryx_u32(&x1073, &x1074, x1072, x1043, x1046); + fiat_p384_addcarryx_u32(&x1073, &x1074, x1072, x1046, x1043); uint32_t x1075; fiat_p384_uint1 x1076; - fiat_p384_addcarryx_u32(&x1075, &x1076, x1074, x1041, x1044); + fiat_p384_addcarryx_u32(&x1075, &x1076, x1074, x1044, x1041); uint32_t x1077; fiat_p384_uint1 x1078; - fiat_p384_addcarryx_u32(&x1077, &x1078, x1076, 0x0, x1042); + fiat_p384_addcarryx_u32(&x1077, &x1078, x1076, x1042, 0x0); uint32_t x1079; fiat_p384_uint1 x1080; - fiat_p384_addcarryx_u32(&x1079, &x1080, 0x0, x1059, x1015); + fiat_p384_addcarryx_u32(&x1079, &x1080, 0x0, x1015, x1059); uint32_t x1081; fiat_p384_uint1 x1082; - fiat_p384_addcarryx_u32(&x1081, &x1082, x1080, x1060, x1017); + fiat_p384_addcarryx_u32(&x1081, &x1082, x1080, x1017, x1060); uint32_t x1083; fiat_p384_uint1 x1084; - fiat_p384_addcarryx_u32(&x1083, &x1084, x1082, 0x0, x1019); + fiat_p384_addcarryx_u32(&x1083, &x1084, x1082, x1019, 0x0); uint32_t x1085; fiat_p384_uint1 x1086; - fiat_p384_addcarryx_u32(&x1085, &x1086, x1084, x1057, x1021); + fiat_p384_addcarryx_u32(&x1085, &x1086, x1084, x1021, x1057); uint32_t x1087; fiat_p384_uint1 x1088; - fiat_p384_addcarryx_u32(&x1087, &x1088, x1086, x1061, x1023); + fiat_p384_addcarryx_u32(&x1087, &x1088, x1086, x1023, x1061); uint32_t x1089; fiat_p384_uint1 x1090; - fiat_p384_addcarryx_u32(&x1089, &x1090, x1088, x1063, x1025); + fiat_p384_addcarryx_u32(&x1089, &x1090, x1088, x1025, x1063); uint32_t x1091; fiat_p384_uint1 x1092; - fiat_p384_addcarryx_u32(&x1091, &x1092, x1090, x1065, x1027); + fiat_p384_addcarryx_u32(&x1091, &x1092, x1090, x1027, x1065); uint32_t x1093; fiat_p384_uint1 x1094; - fiat_p384_addcarryx_u32(&x1093, &x1094, x1092, x1067, x1029); + fiat_p384_addcarryx_u32(&x1093, &x1094, x1092, x1029, x1067); uint32_t x1095; fiat_p384_uint1 x1096; - fiat_p384_addcarryx_u32(&x1095, &x1096, x1094, x1069, x1031); + fiat_p384_addcarryx_u32(&x1095, &x1096, x1094, x1031, x1069); uint32_t x1097; fiat_p384_uint1 x1098; - fiat_p384_addcarryx_u32(&x1097, &x1098, x1096, x1071, x1033); + fiat_p384_addcarryx_u32(&x1097, &x1098, x1096, x1033, x1071); uint32_t x1099; fiat_p384_uint1 x1100; - fiat_p384_addcarryx_u32(&x1099, &x1100, x1098, x1073, x1035); + fiat_p384_addcarryx_u32(&x1099, &x1100, x1098, x1035, x1073); uint32_t x1101; fiat_p384_uint1 x1102; - fiat_p384_addcarryx_u32(&x1101, &x1102, x1100, x1075, x1037); + fiat_p384_addcarryx_u32(&x1101, &x1102, x1100, x1037, x1075); uint32_t x1103; fiat_p384_uint1 x1104; - fiat_p384_addcarryx_u32(&x1103, &x1104, x1102, x1077, x1039); + fiat_p384_addcarryx_u32(&x1103, &x1104, x1102, x1039, x1077); uint32_t x1105; fiat_p384_uint1 x1106; - fiat_p384_addcarryx_u32(&x1105, &x1106, x1104, 0x0, x1040); + fiat_p384_addcarryx_u32(&x1105, &x1106, x1104, x1040, 0x0); uint32_t x1107; uint32_t x1108; fiat_p384_mulx_u32(&x1107, &x1108, x8, (arg2[11])); @@ -1807,79 +1807,79 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x1129, &x1130, x8, (arg2[0])); uint32_t x1131; fiat_p384_uint1 x1132; - fiat_p384_addcarryx_u32(&x1131, &x1132, 0x0, x1127, x1130); + fiat_p384_addcarryx_u32(&x1131, &x1132, 0x0, x1130, x1127); uint32_t x1133; fiat_p384_uint1 x1134; - fiat_p384_addcarryx_u32(&x1133, &x1134, x1132, x1125, x1128); + fiat_p384_addcarryx_u32(&x1133, &x1134, x1132, x1128, x1125); uint32_t x1135; fiat_p384_uint1 x1136; - fiat_p384_addcarryx_u32(&x1135, &x1136, x1134, x1123, x1126); + fiat_p384_addcarryx_u32(&x1135, &x1136, x1134, x1126, x1123); uint32_t x1137; fiat_p384_uint1 x1138; - fiat_p384_addcarryx_u32(&x1137, &x1138, x1136, x1121, x1124); + fiat_p384_addcarryx_u32(&x1137, &x1138, x1136, x1124, x1121); uint32_t x1139; fiat_p384_uint1 x1140; - fiat_p384_addcarryx_u32(&x1139, &x1140, x1138, x1119, x1122); + fiat_p384_addcarryx_u32(&x1139, &x1140, x1138, x1122, x1119); uint32_t x1141; fiat_p384_uint1 x1142; - fiat_p384_addcarryx_u32(&x1141, &x1142, x1140, x1117, x1120); + fiat_p384_addcarryx_u32(&x1141, &x1142, x1140, x1120, x1117); uint32_t x1143; fiat_p384_uint1 x1144; - fiat_p384_addcarryx_u32(&x1143, &x1144, x1142, x1115, x1118); + fiat_p384_addcarryx_u32(&x1143, &x1144, x1142, x1118, x1115); uint32_t x1145; fiat_p384_uint1 x1146; - fiat_p384_addcarryx_u32(&x1145, &x1146, x1144, x1113, x1116); + fiat_p384_addcarryx_u32(&x1145, &x1146, x1144, x1116, x1113); uint32_t x1147; fiat_p384_uint1 x1148; - fiat_p384_addcarryx_u32(&x1147, &x1148, x1146, x1111, x1114); + fiat_p384_addcarryx_u32(&x1147, &x1148, x1146, x1114, x1111); uint32_t x1149; fiat_p384_uint1 x1150; - fiat_p384_addcarryx_u32(&x1149, &x1150, x1148, x1109, x1112); + fiat_p384_addcarryx_u32(&x1149, &x1150, x1148, x1112, x1109); uint32_t x1151; fiat_p384_uint1 x1152; - fiat_p384_addcarryx_u32(&x1151, &x1152, x1150, x1107, x1110); + fiat_p384_addcarryx_u32(&x1151, &x1152, x1150, x1110, x1107); uint32_t x1153; fiat_p384_uint1 x1154; - fiat_p384_addcarryx_u32(&x1153, &x1154, x1152, 0x0, x1108); + fiat_p384_addcarryx_u32(&x1153, &x1154, x1152, x1108, 0x0); uint32_t x1155; fiat_p384_uint1 x1156; - fiat_p384_addcarryx_u32(&x1155, &x1156, 0x0, x1129, x1081); + fiat_p384_addcarryx_u32(&x1155, &x1156, 0x0, x1081, x1129); uint32_t x1157; fiat_p384_uint1 x1158; - fiat_p384_addcarryx_u32(&x1157, &x1158, x1156, x1131, x1083); + fiat_p384_addcarryx_u32(&x1157, &x1158, x1156, x1083, x1131); uint32_t x1159; fiat_p384_uint1 x1160; - fiat_p384_addcarryx_u32(&x1159, &x1160, x1158, x1133, x1085); + fiat_p384_addcarryx_u32(&x1159, &x1160, x1158, x1085, x1133); uint32_t x1161; fiat_p384_uint1 x1162; - fiat_p384_addcarryx_u32(&x1161, &x1162, x1160, x1135, x1087); + fiat_p384_addcarryx_u32(&x1161, &x1162, x1160, x1087, x1135); uint32_t x1163; fiat_p384_uint1 x1164; - fiat_p384_addcarryx_u32(&x1163, &x1164, x1162, x1137, x1089); + fiat_p384_addcarryx_u32(&x1163, &x1164, x1162, x1089, x1137); uint32_t x1165; fiat_p384_uint1 x1166; - fiat_p384_addcarryx_u32(&x1165, &x1166, x1164, x1139, x1091); + fiat_p384_addcarryx_u32(&x1165, &x1166, x1164, x1091, x1139); uint32_t x1167; fiat_p384_uint1 x1168; - fiat_p384_addcarryx_u32(&x1167, &x1168, x1166, x1141, x1093); + fiat_p384_addcarryx_u32(&x1167, &x1168, x1166, x1093, x1141); uint32_t x1169; fiat_p384_uint1 x1170; - fiat_p384_addcarryx_u32(&x1169, &x1170, x1168, x1143, x1095); + fiat_p384_addcarryx_u32(&x1169, &x1170, x1168, x1095, x1143); uint32_t x1171; fiat_p384_uint1 x1172; - fiat_p384_addcarryx_u32(&x1171, &x1172, x1170, x1145, x1097); + fiat_p384_addcarryx_u32(&x1171, &x1172, x1170, x1097, x1145); uint32_t x1173; fiat_p384_uint1 x1174; - fiat_p384_addcarryx_u32(&x1173, &x1174, x1172, x1147, x1099); + fiat_p384_addcarryx_u32(&x1173, &x1174, x1172, x1099, x1147); uint32_t x1175; fiat_p384_uint1 x1176; - fiat_p384_addcarryx_u32(&x1175, &x1176, x1174, x1149, x1101); + fiat_p384_addcarryx_u32(&x1175, &x1176, x1174, x1101, x1149); uint32_t x1177; fiat_p384_uint1 x1178; - fiat_p384_addcarryx_u32(&x1177, &x1178, x1176, x1151, x1103); + fiat_p384_addcarryx_u32(&x1177, &x1178, x1176, x1103, x1151); uint32_t x1179; fiat_p384_uint1 x1180; - fiat_p384_addcarryx_u32(&x1179, &x1180, x1178, x1153, x1105); + fiat_p384_addcarryx_u32(&x1179, &x1180, x1178, x1105, x1153); uint32_t x1181; uint32_t x1182; fiat_p384_mulx_u32(&x1181, &x1182, x1155, UINT32_C(0xffffffff)); @@ -1912,73 +1912,73 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x1199, &x1200, x1155, UINT32_C(0xffffffff)); uint32_t x1201; fiat_p384_uint1 x1202; - fiat_p384_addcarryx_u32(&x1201, &x1202, 0x0, x1195, x1198); + fiat_p384_addcarryx_u32(&x1201, &x1202, 0x0, x1198, x1195); uint32_t x1203; fiat_p384_uint1 x1204; - fiat_p384_addcarryx_u32(&x1203, &x1204, x1202, x1193, x1196); + fiat_p384_addcarryx_u32(&x1203, &x1204, x1202, x1196, x1193); uint32_t x1205; fiat_p384_uint1 x1206; - fiat_p384_addcarryx_u32(&x1205, &x1206, x1204, x1191, x1194); + fiat_p384_addcarryx_u32(&x1205, &x1206, x1204, x1194, x1191); uint32_t x1207; fiat_p384_uint1 x1208; - fiat_p384_addcarryx_u32(&x1207, &x1208, x1206, x1189, x1192); + fiat_p384_addcarryx_u32(&x1207, &x1208, x1206, x1192, x1189); uint32_t x1209; fiat_p384_uint1 x1210; - fiat_p384_addcarryx_u32(&x1209, &x1210, x1208, x1187, x1190); + fiat_p384_addcarryx_u32(&x1209, &x1210, x1208, x1190, x1187); uint32_t x1211; fiat_p384_uint1 x1212; - fiat_p384_addcarryx_u32(&x1211, &x1212, x1210, x1185, x1188); + fiat_p384_addcarryx_u32(&x1211, &x1212, x1210, x1188, x1185); uint32_t x1213; fiat_p384_uint1 x1214; - fiat_p384_addcarryx_u32(&x1213, &x1214, x1212, x1183, x1186); + fiat_p384_addcarryx_u32(&x1213, &x1214, x1212, x1186, x1183); uint32_t x1215; fiat_p384_uint1 x1216; - fiat_p384_addcarryx_u32(&x1215, &x1216, x1214, x1181, x1184); + fiat_p384_addcarryx_u32(&x1215, &x1216, x1214, x1184, x1181); uint32_t x1217; fiat_p384_uint1 x1218; - fiat_p384_addcarryx_u32(&x1217, &x1218, x1216, 0x0, x1182); + fiat_p384_addcarryx_u32(&x1217, &x1218, x1216, x1182, 0x0); uint32_t x1219; fiat_p384_uint1 x1220; - fiat_p384_addcarryx_u32(&x1219, &x1220, 0x0, x1199, x1155); + fiat_p384_addcarryx_u32(&x1219, &x1220, 0x0, x1155, x1199); uint32_t x1221; fiat_p384_uint1 x1222; - fiat_p384_addcarryx_u32(&x1221, &x1222, x1220, x1200, x1157); + fiat_p384_addcarryx_u32(&x1221, &x1222, x1220, x1157, x1200); uint32_t x1223; fiat_p384_uint1 x1224; - fiat_p384_addcarryx_u32(&x1223, &x1224, x1222, 0x0, x1159); + fiat_p384_addcarryx_u32(&x1223, &x1224, x1222, x1159, 0x0); uint32_t x1225; fiat_p384_uint1 x1226; - fiat_p384_addcarryx_u32(&x1225, &x1226, x1224, x1197, x1161); + fiat_p384_addcarryx_u32(&x1225, &x1226, x1224, x1161, x1197); uint32_t x1227; fiat_p384_uint1 x1228; - fiat_p384_addcarryx_u32(&x1227, &x1228, x1226, x1201, x1163); + fiat_p384_addcarryx_u32(&x1227, &x1228, x1226, x1163, x1201); uint32_t x1229; fiat_p384_uint1 x1230; - fiat_p384_addcarryx_u32(&x1229, &x1230, x1228, x1203, x1165); + fiat_p384_addcarryx_u32(&x1229, &x1230, x1228, x1165, x1203); uint32_t x1231; fiat_p384_uint1 x1232; - fiat_p384_addcarryx_u32(&x1231, &x1232, x1230, x1205, x1167); + fiat_p384_addcarryx_u32(&x1231, &x1232, x1230, x1167, x1205); uint32_t x1233; fiat_p384_uint1 x1234; - fiat_p384_addcarryx_u32(&x1233, &x1234, x1232, x1207, x1169); + fiat_p384_addcarryx_u32(&x1233, &x1234, x1232, x1169, x1207); uint32_t x1235; fiat_p384_uint1 x1236; - fiat_p384_addcarryx_u32(&x1235, &x1236, x1234, x1209, x1171); + fiat_p384_addcarryx_u32(&x1235, &x1236, x1234, x1171, x1209); uint32_t x1237; fiat_p384_uint1 x1238; - fiat_p384_addcarryx_u32(&x1237, &x1238, x1236, x1211, x1173); + fiat_p384_addcarryx_u32(&x1237, &x1238, x1236, x1173, x1211); uint32_t x1239; fiat_p384_uint1 x1240; - fiat_p384_addcarryx_u32(&x1239, &x1240, x1238, x1213, x1175); + fiat_p384_addcarryx_u32(&x1239, &x1240, x1238, x1175, x1213); uint32_t x1241; fiat_p384_uint1 x1242; - fiat_p384_addcarryx_u32(&x1241, &x1242, x1240, x1215, x1177); + fiat_p384_addcarryx_u32(&x1241, &x1242, x1240, x1177, x1215); uint32_t x1243; fiat_p384_uint1 x1244; - fiat_p384_addcarryx_u32(&x1243, &x1244, x1242, x1217, x1179); + fiat_p384_addcarryx_u32(&x1243, &x1244, x1242, x1179, x1217); uint32_t x1245; fiat_p384_uint1 x1246; - fiat_p384_addcarryx_u32(&x1245, &x1246, x1244, 0x0, x1180); + fiat_p384_addcarryx_u32(&x1245, &x1246, x1244, x1180, 0x0); uint32_t x1247; uint32_t x1248; fiat_p384_mulx_u32(&x1247, &x1248, x9, (arg2[11])); @@ -2017,79 +2017,79 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x1269, &x1270, x9, (arg2[0])); uint32_t x1271; fiat_p384_uint1 x1272; - fiat_p384_addcarryx_u32(&x1271, &x1272, 0x0, x1267, x1270); + fiat_p384_addcarryx_u32(&x1271, &x1272, 0x0, x1270, x1267); uint32_t x1273; fiat_p384_uint1 x1274; - fiat_p384_addcarryx_u32(&x1273, &x1274, x1272, x1265, x1268); + fiat_p384_addcarryx_u32(&x1273, &x1274, x1272, x1268, x1265); uint32_t x1275; fiat_p384_uint1 x1276; - fiat_p384_addcarryx_u32(&x1275, &x1276, x1274, x1263, x1266); + fiat_p384_addcarryx_u32(&x1275, &x1276, x1274, x1266, x1263); uint32_t x1277; fiat_p384_uint1 x1278; - fiat_p384_addcarryx_u32(&x1277, &x1278, x1276, x1261, x1264); + fiat_p384_addcarryx_u32(&x1277, &x1278, x1276, x1264, x1261); uint32_t x1279; fiat_p384_uint1 x1280; - fiat_p384_addcarryx_u32(&x1279, &x1280, x1278, x1259, x1262); + fiat_p384_addcarryx_u32(&x1279, &x1280, x1278, x1262, x1259); uint32_t x1281; fiat_p384_uint1 x1282; - fiat_p384_addcarryx_u32(&x1281, &x1282, x1280, x1257, x1260); + fiat_p384_addcarryx_u32(&x1281, &x1282, x1280, x1260, x1257); uint32_t x1283; fiat_p384_uint1 x1284; - fiat_p384_addcarryx_u32(&x1283, &x1284, x1282, x1255, x1258); + fiat_p384_addcarryx_u32(&x1283, &x1284, x1282, x1258, x1255); uint32_t x1285; fiat_p384_uint1 x1286; - fiat_p384_addcarryx_u32(&x1285, &x1286, x1284, x1253, x1256); + fiat_p384_addcarryx_u32(&x1285, &x1286, x1284, x1256, x1253); uint32_t x1287; fiat_p384_uint1 x1288; - fiat_p384_addcarryx_u32(&x1287, &x1288, x1286, x1251, x1254); + fiat_p384_addcarryx_u32(&x1287, &x1288, x1286, x1254, x1251); uint32_t x1289; fiat_p384_uint1 x1290; - fiat_p384_addcarryx_u32(&x1289, &x1290, x1288, x1249, x1252); + fiat_p384_addcarryx_u32(&x1289, &x1290, x1288, x1252, x1249); uint32_t x1291; fiat_p384_uint1 x1292; - fiat_p384_addcarryx_u32(&x1291, &x1292, x1290, x1247, x1250); + fiat_p384_addcarryx_u32(&x1291, &x1292, x1290, x1250, x1247); uint32_t x1293; fiat_p384_uint1 x1294; - fiat_p384_addcarryx_u32(&x1293, &x1294, x1292, 0x0, x1248); + fiat_p384_addcarryx_u32(&x1293, &x1294, x1292, x1248, 0x0); uint32_t x1295; fiat_p384_uint1 x1296; - fiat_p384_addcarryx_u32(&x1295, &x1296, 0x0, x1269, x1221); + fiat_p384_addcarryx_u32(&x1295, &x1296, 0x0, x1221, x1269); uint32_t x1297; fiat_p384_uint1 x1298; - fiat_p384_addcarryx_u32(&x1297, &x1298, x1296, x1271, x1223); + fiat_p384_addcarryx_u32(&x1297, &x1298, x1296, x1223, x1271); uint32_t x1299; fiat_p384_uint1 x1300; - fiat_p384_addcarryx_u32(&x1299, &x1300, x1298, x1273, x1225); + fiat_p384_addcarryx_u32(&x1299, &x1300, x1298, x1225, x1273); uint32_t x1301; fiat_p384_uint1 x1302; - fiat_p384_addcarryx_u32(&x1301, &x1302, x1300, x1275, x1227); + fiat_p384_addcarryx_u32(&x1301, &x1302, x1300, x1227, x1275); uint32_t x1303; fiat_p384_uint1 x1304; - fiat_p384_addcarryx_u32(&x1303, &x1304, x1302, x1277, x1229); + fiat_p384_addcarryx_u32(&x1303, &x1304, x1302, x1229, x1277); uint32_t x1305; fiat_p384_uint1 x1306; - fiat_p384_addcarryx_u32(&x1305, &x1306, x1304, x1279, x1231); + fiat_p384_addcarryx_u32(&x1305, &x1306, x1304, x1231, x1279); uint32_t x1307; fiat_p384_uint1 x1308; - fiat_p384_addcarryx_u32(&x1307, &x1308, x1306, x1281, x1233); + fiat_p384_addcarryx_u32(&x1307, &x1308, x1306, x1233, x1281); uint32_t x1309; fiat_p384_uint1 x1310; - fiat_p384_addcarryx_u32(&x1309, &x1310, x1308, x1283, x1235); + fiat_p384_addcarryx_u32(&x1309, &x1310, x1308, x1235, x1283); uint32_t x1311; fiat_p384_uint1 x1312; - fiat_p384_addcarryx_u32(&x1311, &x1312, x1310, x1285, x1237); + fiat_p384_addcarryx_u32(&x1311, &x1312, x1310, x1237, x1285); uint32_t x1313; fiat_p384_uint1 x1314; - fiat_p384_addcarryx_u32(&x1313, &x1314, x1312, x1287, x1239); + fiat_p384_addcarryx_u32(&x1313, &x1314, x1312, x1239, x1287); uint32_t x1315; fiat_p384_uint1 x1316; - fiat_p384_addcarryx_u32(&x1315, &x1316, x1314, x1289, x1241); + fiat_p384_addcarryx_u32(&x1315, &x1316, x1314, x1241, x1289); uint32_t x1317; fiat_p384_uint1 x1318; - fiat_p384_addcarryx_u32(&x1317, &x1318, x1316, x1291, x1243); + fiat_p384_addcarryx_u32(&x1317, &x1318, x1316, x1243, x1291); uint32_t x1319; fiat_p384_uint1 x1320; - fiat_p384_addcarryx_u32(&x1319, &x1320, x1318, x1293, x1245); + fiat_p384_addcarryx_u32(&x1319, &x1320, x1318, x1245, x1293); uint32_t x1321; uint32_t x1322; fiat_p384_mulx_u32(&x1321, &x1322, x1295, UINT32_C(0xffffffff)); @@ -2122,73 +2122,73 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x1339, &x1340, x1295, UINT32_C(0xffffffff)); uint32_t x1341; fiat_p384_uint1 x1342; - fiat_p384_addcarryx_u32(&x1341, &x1342, 0x0, x1335, x1338); + fiat_p384_addcarryx_u32(&x1341, &x1342, 0x0, x1338, x1335); uint32_t x1343; fiat_p384_uint1 x1344; - fiat_p384_addcarryx_u32(&x1343, &x1344, x1342, x1333, x1336); + fiat_p384_addcarryx_u32(&x1343, &x1344, x1342, x1336, x1333); uint32_t x1345; fiat_p384_uint1 x1346; - fiat_p384_addcarryx_u32(&x1345, &x1346, x1344, x1331, x1334); + fiat_p384_addcarryx_u32(&x1345, &x1346, x1344, x1334, x1331); uint32_t x1347; fiat_p384_uint1 x1348; - fiat_p384_addcarryx_u32(&x1347, &x1348, x1346, x1329, x1332); + fiat_p384_addcarryx_u32(&x1347, &x1348, x1346, x1332, x1329); uint32_t x1349; fiat_p384_uint1 x1350; - fiat_p384_addcarryx_u32(&x1349, &x1350, x1348, x1327, x1330); + fiat_p384_addcarryx_u32(&x1349, &x1350, x1348, x1330, x1327); uint32_t x1351; fiat_p384_uint1 x1352; - fiat_p384_addcarryx_u32(&x1351, &x1352, x1350, x1325, x1328); + fiat_p384_addcarryx_u32(&x1351, &x1352, x1350, x1328, x1325); uint32_t x1353; fiat_p384_uint1 x1354; - fiat_p384_addcarryx_u32(&x1353, &x1354, x1352, x1323, x1326); + fiat_p384_addcarryx_u32(&x1353, &x1354, x1352, x1326, x1323); uint32_t x1355; fiat_p384_uint1 x1356; - fiat_p384_addcarryx_u32(&x1355, &x1356, x1354, x1321, x1324); + fiat_p384_addcarryx_u32(&x1355, &x1356, x1354, x1324, x1321); uint32_t x1357; fiat_p384_uint1 x1358; - fiat_p384_addcarryx_u32(&x1357, &x1358, x1356, 0x0, x1322); + fiat_p384_addcarryx_u32(&x1357, &x1358, x1356, x1322, 0x0); uint32_t x1359; fiat_p384_uint1 x1360; - fiat_p384_addcarryx_u32(&x1359, &x1360, 0x0, x1339, x1295); + fiat_p384_addcarryx_u32(&x1359, &x1360, 0x0, x1295, x1339); uint32_t x1361; fiat_p384_uint1 x1362; - fiat_p384_addcarryx_u32(&x1361, &x1362, x1360, x1340, x1297); + fiat_p384_addcarryx_u32(&x1361, &x1362, x1360, x1297, x1340); uint32_t x1363; fiat_p384_uint1 x1364; - fiat_p384_addcarryx_u32(&x1363, &x1364, x1362, 0x0, x1299); + fiat_p384_addcarryx_u32(&x1363, &x1364, x1362, x1299, 0x0); uint32_t x1365; fiat_p384_uint1 x1366; - fiat_p384_addcarryx_u32(&x1365, &x1366, x1364, x1337, x1301); + fiat_p384_addcarryx_u32(&x1365, &x1366, x1364, x1301, x1337); uint32_t x1367; fiat_p384_uint1 x1368; - fiat_p384_addcarryx_u32(&x1367, &x1368, x1366, x1341, x1303); + fiat_p384_addcarryx_u32(&x1367, &x1368, x1366, x1303, x1341); uint32_t x1369; fiat_p384_uint1 x1370; - fiat_p384_addcarryx_u32(&x1369, &x1370, x1368, x1343, x1305); + fiat_p384_addcarryx_u32(&x1369, &x1370, x1368, x1305, x1343); uint32_t x1371; fiat_p384_uint1 x1372; - fiat_p384_addcarryx_u32(&x1371, &x1372, x1370, x1345, x1307); + fiat_p384_addcarryx_u32(&x1371, &x1372, x1370, x1307, x1345); uint32_t x1373; fiat_p384_uint1 x1374; - fiat_p384_addcarryx_u32(&x1373, &x1374, x1372, x1347, x1309); + fiat_p384_addcarryx_u32(&x1373, &x1374, x1372, x1309, x1347); uint32_t x1375; fiat_p384_uint1 x1376; - fiat_p384_addcarryx_u32(&x1375, &x1376, x1374, x1349, x1311); + fiat_p384_addcarryx_u32(&x1375, &x1376, x1374, x1311, x1349); uint32_t x1377; fiat_p384_uint1 x1378; - fiat_p384_addcarryx_u32(&x1377, &x1378, x1376, x1351, x1313); + fiat_p384_addcarryx_u32(&x1377, &x1378, x1376, x1313, x1351); uint32_t x1379; fiat_p384_uint1 x1380; - fiat_p384_addcarryx_u32(&x1379, &x1380, x1378, x1353, x1315); + fiat_p384_addcarryx_u32(&x1379, &x1380, x1378, x1315, x1353); uint32_t x1381; fiat_p384_uint1 x1382; - fiat_p384_addcarryx_u32(&x1381, &x1382, x1380, x1355, x1317); + fiat_p384_addcarryx_u32(&x1381, &x1382, x1380, x1317, x1355); uint32_t x1383; fiat_p384_uint1 x1384; - fiat_p384_addcarryx_u32(&x1383, &x1384, x1382, x1357, x1319); + fiat_p384_addcarryx_u32(&x1383, &x1384, x1382, x1319, x1357); uint32_t x1385; fiat_p384_uint1 x1386; - fiat_p384_addcarryx_u32(&x1385, &x1386, x1384, 0x0, x1320); + fiat_p384_addcarryx_u32(&x1385, &x1386, x1384, x1320, 0x0); uint32_t x1387; uint32_t x1388; fiat_p384_mulx_u32(&x1387, &x1388, x10, (arg2[11])); @@ -2227,79 +2227,79 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x1409, &x1410, x10, (arg2[0])); uint32_t x1411; fiat_p384_uint1 x1412; - fiat_p384_addcarryx_u32(&x1411, &x1412, 0x0, x1407, x1410); + fiat_p384_addcarryx_u32(&x1411, &x1412, 0x0, x1410, x1407); uint32_t x1413; fiat_p384_uint1 x1414; - fiat_p384_addcarryx_u32(&x1413, &x1414, x1412, x1405, x1408); + fiat_p384_addcarryx_u32(&x1413, &x1414, x1412, x1408, x1405); uint32_t x1415; fiat_p384_uint1 x1416; - fiat_p384_addcarryx_u32(&x1415, &x1416, x1414, x1403, x1406); + fiat_p384_addcarryx_u32(&x1415, &x1416, x1414, x1406, x1403); uint32_t x1417; fiat_p384_uint1 x1418; - fiat_p384_addcarryx_u32(&x1417, &x1418, x1416, x1401, x1404); + fiat_p384_addcarryx_u32(&x1417, &x1418, x1416, x1404, x1401); uint32_t x1419; fiat_p384_uint1 x1420; - fiat_p384_addcarryx_u32(&x1419, &x1420, x1418, x1399, x1402); + fiat_p384_addcarryx_u32(&x1419, &x1420, x1418, x1402, x1399); uint32_t x1421; fiat_p384_uint1 x1422; - fiat_p384_addcarryx_u32(&x1421, &x1422, x1420, x1397, x1400); + fiat_p384_addcarryx_u32(&x1421, &x1422, x1420, x1400, x1397); uint32_t x1423; fiat_p384_uint1 x1424; - fiat_p384_addcarryx_u32(&x1423, &x1424, x1422, x1395, x1398); + fiat_p384_addcarryx_u32(&x1423, &x1424, x1422, x1398, x1395); uint32_t x1425; fiat_p384_uint1 x1426; - fiat_p384_addcarryx_u32(&x1425, &x1426, x1424, x1393, x1396); + fiat_p384_addcarryx_u32(&x1425, &x1426, x1424, x1396, x1393); uint32_t x1427; fiat_p384_uint1 x1428; - fiat_p384_addcarryx_u32(&x1427, &x1428, x1426, x1391, x1394); + fiat_p384_addcarryx_u32(&x1427, &x1428, x1426, x1394, x1391); uint32_t x1429; fiat_p384_uint1 x1430; - fiat_p384_addcarryx_u32(&x1429, &x1430, x1428, x1389, x1392); + fiat_p384_addcarryx_u32(&x1429, &x1430, x1428, x1392, x1389); uint32_t x1431; fiat_p384_uint1 x1432; - fiat_p384_addcarryx_u32(&x1431, &x1432, x1430, x1387, x1390); + fiat_p384_addcarryx_u32(&x1431, &x1432, x1430, x1390, x1387); uint32_t x1433; fiat_p384_uint1 x1434; - fiat_p384_addcarryx_u32(&x1433, &x1434, x1432, 0x0, x1388); + fiat_p384_addcarryx_u32(&x1433, &x1434, x1432, x1388, 0x0); uint32_t x1435; fiat_p384_uint1 x1436; - fiat_p384_addcarryx_u32(&x1435, &x1436, 0x0, x1409, x1361); + fiat_p384_addcarryx_u32(&x1435, &x1436, 0x0, x1361, x1409); uint32_t x1437; fiat_p384_uint1 x1438; - fiat_p384_addcarryx_u32(&x1437, &x1438, x1436, x1411, x1363); + fiat_p384_addcarryx_u32(&x1437, &x1438, x1436, x1363, x1411); uint32_t x1439; fiat_p384_uint1 x1440; - fiat_p384_addcarryx_u32(&x1439, &x1440, x1438, x1413, x1365); + fiat_p384_addcarryx_u32(&x1439, &x1440, x1438, x1365, x1413); uint32_t x1441; fiat_p384_uint1 x1442; - fiat_p384_addcarryx_u32(&x1441, &x1442, x1440, x1415, x1367); + fiat_p384_addcarryx_u32(&x1441, &x1442, x1440, x1367, x1415); uint32_t x1443; fiat_p384_uint1 x1444; - fiat_p384_addcarryx_u32(&x1443, &x1444, x1442, x1417, x1369); + fiat_p384_addcarryx_u32(&x1443, &x1444, x1442, x1369, x1417); uint32_t x1445; fiat_p384_uint1 x1446; - fiat_p384_addcarryx_u32(&x1445, &x1446, x1444, x1419, x1371); + fiat_p384_addcarryx_u32(&x1445, &x1446, x1444, x1371, x1419); uint32_t x1447; fiat_p384_uint1 x1448; - fiat_p384_addcarryx_u32(&x1447, &x1448, x1446, x1421, x1373); + fiat_p384_addcarryx_u32(&x1447, &x1448, x1446, x1373, x1421); uint32_t x1449; fiat_p384_uint1 x1450; - fiat_p384_addcarryx_u32(&x1449, &x1450, x1448, x1423, x1375); + fiat_p384_addcarryx_u32(&x1449, &x1450, x1448, x1375, x1423); uint32_t x1451; fiat_p384_uint1 x1452; - fiat_p384_addcarryx_u32(&x1451, &x1452, x1450, x1425, x1377); + fiat_p384_addcarryx_u32(&x1451, &x1452, x1450, x1377, x1425); uint32_t x1453; fiat_p384_uint1 x1454; - fiat_p384_addcarryx_u32(&x1453, &x1454, x1452, x1427, x1379); + fiat_p384_addcarryx_u32(&x1453, &x1454, x1452, x1379, x1427); uint32_t x1455; fiat_p384_uint1 x1456; - fiat_p384_addcarryx_u32(&x1455, &x1456, x1454, x1429, x1381); + fiat_p384_addcarryx_u32(&x1455, &x1456, x1454, x1381, x1429); uint32_t x1457; fiat_p384_uint1 x1458; - fiat_p384_addcarryx_u32(&x1457, &x1458, x1456, x1431, x1383); + fiat_p384_addcarryx_u32(&x1457, &x1458, x1456, x1383, x1431); uint32_t x1459; fiat_p384_uint1 x1460; - fiat_p384_addcarryx_u32(&x1459, &x1460, x1458, x1433, x1385); + fiat_p384_addcarryx_u32(&x1459, &x1460, x1458, x1385, x1433); uint32_t x1461; uint32_t x1462; fiat_p384_mulx_u32(&x1461, &x1462, x1435, UINT32_C(0xffffffff)); @@ -2332,73 +2332,73 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x1479, &x1480, x1435, UINT32_C(0xffffffff)); uint32_t x1481; fiat_p384_uint1 x1482; - fiat_p384_addcarryx_u32(&x1481, &x1482, 0x0, x1475, x1478); + fiat_p384_addcarryx_u32(&x1481, &x1482, 0x0, x1478, x1475); uint32_t x1483; fiat_p384_uint1 x1484; - fiat_p384_addcarryx_u32(&x1483, &x1484, x1482, x1473, x1476); + fiat_p384_addcarryx_u32(&x1483, &x1484, x1482, x1476, x1473); uint32_t x1485; fiat_p384_uint1 x1486; - fiat_p384_addcarryx_u32(&x1485, &x1486, x1484, x1471, x1474); + fiat_p384_addcarryx_u32(&x1485, &x1486, x1484, x1474, x1471); uint32_t x1487; fiat_p384_uint1 x1488; - fiat_p384_addcarryx_u32(&x1487, &x1488, x1486, x1469, x1472); + fiat_p384_addcarryx_u32(&x1487, &x1488, x1486, x1472, x1469); uint32_t x1489; fiat_p384_uint1 x1490; - fiat_p384_addcarryx_u32(&x1489, &x1490, x1488, x1467, x1470); + fiat_p384_addcarryx_u32(&x1489, &x1490, x1488, x1470, x1467); uint32_t x1491; fiat_p384_uint1 x1492; - fiat_p384_addcarryx_u32(&x1491, &x1492, x1490, x1465, x1468); + fiat_p384_addcarryx_u32(&x1491, &x1492, x1490, x1468, x1465); uint32_t x1493; fiat_p384_uint1 x1494; - fiat_p384_addcarryx_u32(&x1493, &x1494, x1492, x1463, x1466); + fiat_p384_addcarryx_u32(&x1493, &x1494, x1492, x1466, x1463); uint32_t x1495; fiat_p384_uint1 x1496; - fiat_p384_addcarryx_u32(&x1495, &x1496, x1494, x1461, x1464); + fiat_p384_addcarryx_u32(&x1495, &x1496, x1494, x1464, x1461); uint32_t x1497; fiat_p384_uint1 x1498; - fiat_p384_addcarryx_u32(&x1497, &x1498, x1496, 0x0, x1462); + fiat_p384_addcarryx_u32(&x1497, &x1498, x1496, x1462, 0x0); uint32_t x1499; fiat_p384_uint1 x1500; - fiat_p384_addcarryx_u32(&x1499, &x1500, 0x0, x1479, x1435); + fiat_p384_addcarryx_u32(&x1499, &x1500, 0x0, x1435, x1479); uint32_t x1501; fiat_p384_uint1 x1502; - fiat_p384_addcarryx_u32(&x1501, &x1502, x1500, x1480, x1437); + fiat_p384_addcarryx_u32(&x1501, &x1502, x1500, x1437, x1480); uint32_t x1503; fiat_p384_uint1 x1504; - fiat_p384_addcarryx_u32(&x1503, &x1504, x1502, 0x0, x1439); + fiat_p384_addcarryx_u32(&x1503, &x1504, x1502, x1439, 0x0); uint32_t x1505; fiat_p384_uint1 x1506; - fiat_p384_addcarryx_u32(&x1505, &x1506, x1504, x1477, x1441); + fiat_p384_addcarryx_u32(&x1505, &x1506, x1504, x1441, x1477); uint32_t x1507; fiat_p384_uint1 x1508; - fiat_p384_addcarryx_u32(&x1507, &x1508, x1506, x1481, x1443); + fiat_p384_addcarryx_u32(&x1507, &x1508, x1506, x1443, x1481); uint32_t x1509; fiat_p384_uint1 x1510; - fiat_p384_addcarryx_u32(&x1509, &x1510, x1508, x1483, x1445); + fiat_p384_addcarryx_u32(&x1509, &x1510, x1508, x1445, x1483); uint32_t x1511; fiat_p384_uint1 x1512; - fiat_p384_addcarryx_u32(&x1511, &x1512, x1510, x1485, x1447); + fiat_p384_addcarryx_u32(&x1511, &x1512, x1510, x1447, x1485); uint32_t x1513; fiat_p384_uint1 x1514; - fiat_p384_addcarryx_u32(&x1513, &x1514, x1512, x1487, x1449); + fiat_p384_addcarryx_u32(&x1513, &x1514, x1512, x1449, x1487); uint32_t x1515; fiat_p384_uint1 x1516; - fiat_p384_addcarryx_u32(&x1515, &x1516, x1514, x1489, x1451); + fiat_p384_addcarryx_u32(&x1515, &x1516, x1514, x1451, x1489); uint32_t x1517; fiat_p384_uint1 x1518; - fiat_p384_addcarryx_u32(&x1517, &x1518, x1516, x1491, x1453); + fiat_p384_addcarryx_u32(&x1517, &x1518, x1516, x1453, x1491); uint32_t x1519; fiat_p384_uint1 x1520; - fiat_p384_addcarryx_u32(&x1519, &x1520, x1518, x1493, x1455); + fiat_p384_addcarryx_u32(&x1519, &x1520, x1518, x1455, x1493); uint32_t x1521; fiat_p384_uint1 x1522; - fiat_p384_addcarryx_u32(&x1521, &x1522, x1520, x1495, x1457); + fiat_p384_addcarryx_u32(&x1521, &x1522, x1520, x1457, x1495); uint32_t x1523; fiat_p384_uint1 x1524; - fiat_p384_addcarryx_u32(&x1523, &x1524, x1522, x1497, x1459); + fiat_p384_addcarryx_u32(&x1523, &x1524, x1522, x1459, x1497); uint32_t x1525; fiat_p384_uint1 x1526; - fiat_p384_addcarryx_u32(&x1525, &x1526, x1524, 0x0, x1460); + fiat_p384_addcarryx_u32(&x1525, &x1526, x1524, x1460, 0x0); uint32_t x1527; uint32_t x1528; fiat_p384_mulx_u32(&x1527, &x1528, x11, (arg2[11])); @@ -2437,79 +2437,79 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x1549, &x1550, x11, (arg2[0])); uint32_t x1551; fiat_p384_uint1 x1552; - fiat_p384_addcarryx_u32(&x1551, &x1552, 0x0, x1547, x1550); + fiat_p384_addcarryx_u32(&x1551, &x1552, 0x0, x1550, x1547); uint32_t x1553; fiat_p384_uint1 x1554; - fiat_p384_addcarryx_u32(&x1553, &x1554, x1552, x1545, x1548); + fiat_p384_addcarryx_u32(&x1553, &x1554, x1552, x1548, x1545); uint32_t x1555; fiat_p384_uint1 x1556; - fiat_p384_addcarryx_u32(&x1555, &x1556, x1554, x1543, x1546); + fiat_p384_addcarryx_u32(&x1555, &x1556, x1554, x1546, x1543); uint32_t x1557; fiat_p384_uint1 x1558; - fiat_p384_addcarryx_u32(&x1557, &x1558, x1556, x1541, x1544); + fiat_p384_addcarryx_u32(&x1557, &x1558, x1556, x1544, x1541); uint32_t x1559; fiat_p384_uint1 x1560; - fiat_p384_addcarryx_u32(&x1559, &x1560, x1558, x1539, x1542); + fiat_p384_addcarryx_u32(&x1559, &x1560, x1558, x1542, x1539); uint32_t x1561; fiat_p384_uint1 x1562; - fiat_p384_addcarryx_u32(&x1561, &x1562, x1560, x1537, x1540); + fiat_p384_addcarryx_u32(&x1561, &x1562, x1560, x1540, x1537); uint32_t x1563; fiat_p384_uint1 x1564; - fiat_p384_addcarryx_u32(&x1563, &x1564, x1562, x1535, x1538); + fiat_p384_addcarryx_u32(&x1563, &x1564, x1562, x1538, x1535); uint32_t x1565; fiat_p384_uint1 x1566; - fiat_p384_addcarryx_u32(&x1565, &x1566, x1564, x1533, x1536); + fiat_p384_addcarryx_u32(&x1565, &x1566, x1564, x1536, x1533); uint32_t x1567; fiat_p384_uint1 x1568; - fiat_p384_addcarryx_u32(&x1567, &x1568, x1566, x1531, x1534); + fiat_p384_addcarryx_u32(&x1567, &x1568, x1566, x1534, x1531); uint32_t x1569; fiat_p384_uint1 x1570; - fiat_p384_addcarryx_u32(&x1569, &x1570, x1568, x1529, x1532); + fiat_p384_addcarryx_u32(&x1569, &x1570, x1568, x1532, x1529); uint32_t x1571; fiat_p384_uint1 x1572; - fiat_p384_addcarryx_u32(&x1571, &x1572, x1570, x1527, x1530); + fiat_p384_addcarryx_u32(&x1571, &x1572, x1570, x1530, x1527); uint32_t x1573; fiat_p384_uint1 x1574; - fiat_p384_addcarryx_u32(&x1573, &x1574, x1572, 0x0, x1528); + fiat_p384_addcarryx_u32(&x1573, &x1574, x1572, x1528, 0x0); uint32_t x1575; fiat_p384_uint1 x1576; - fiat_p384_addcarryx_u32(&x1575, &x1576, 0x0, x1549, x1501); + fiat_p384_addcarryx_u32(&x1575, &x1576, 0x0, x1501, x1549); uint32_t x1577; fiat_p384_uint1 x1578; - fiat_p384_addcarryx_u32(&x1577, &x1578, x1576, x1551, x1503); + fiat_p384_addcarryx_u32(&x1577, &x1578, x1576, x1503, x1551); uint32_t x1579; fiat_p384_uint1 x1580; - fiat_p384_addcarryx_u32(&x1579, &x1580, x1578, x1553, x1505); + fiat_p384_addcarryx_u32(&x1579, &x1580, x1578, x1505, x1553); uint32_t x1581; fiat_p384_uint1 x1582; - fiat_p384_addcarryx_u32(&x1581, &x1582, x1580, x1555, x1507); + fiat_p384_addcarryx_u32(&x1581, &x1582, x1580, x1507, x1555); uint32_t x1583; fiat_p384_uint1 x1584; - fiat_p384_addcarryx_u32(&x1583, &x1584, x1582, x1557, x1509); + fiat_p384_addcarryx_u32(&x1583, &x1584, x1582, x1509, x1557); uint32_t x1585; fiat_p384_uint1 x1586; - fiat_p384_addcarryx_u32(&x1585, &x1586, x1584, x1559, x1511); + fiat_p384_addcarryx_u32(&x1585, &x1586, x1584, x1511, x1559); uint32_t x1587; fiat_p384_uint1 x1588; - fiat_p384_addcarryx_u32(&x1587, &x1588, x1586, x1561, x1513); + fiat_p384_addcarryx_u32(&x1587, &x1588, x1586, x1513, x1561); uint32_t x1589; fiat_p384_uint1 x1590; - fiat_p384_addcarryx_u32(&x1589, &x1590, x1588, x1563, x1515); + fiat_p384_addcarryx_u32(&x1589, &x1590, x1588, x1515, x1563); uint32_t x1591; fiat_p384_uint1 x1592; - fiat_p384_addcarryx_u32(&x1591, &x1592, x1590, x1565, x1517); + fiat_p384_addcarryx_u32(&x1591, &x1592, x1590, x1517, x1565); uint32_t x1593; fiat_p384_uint1 x1594; - fiat_p384_addcarryx_u32(&x1593, &x1594, x1592, x1567, x1519); + fiat_p384_addcarryx_u32(&x1593, &x1594, x1592, x1519, x1567); uint32_t x1595; fiat_p384_uint1 x1596; - fiat_p384_addcarryx_u32(&x1595, &x1596, x1594, x1569, x1521); + fiat_p384_addcarryx_u32(&x1595, &x1596, x1594, x1521, x1569); uint32_t x1597; fiat_p384_uint1 x1598; - fiat_p384_addcarryx_u32(&x1597, &x1598, x1596, x1571, x1523); + fiat_p384_addcarryx_u32(&x1597, &x1598, x1596, x1523, x1571); uint32_t x1599; fiat_p384_uint1 x1600; - fiat_p384_addcarryx_u32(&x1599, &x1600, x1598, x1573, x1525); + fiat_p384_addcarryx_u32(&x1599, &x1600, x1598, x1525, x1573); uint32_t x1601; uint32_t x1602; fiat_p384_mulx_u32(&x1601, &x1602, x1575, UINT32_C(0xffffffff)); @@ -2542,73 +2542,73 @@ static void fiat_p384_mul(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_mulx_u32(&x1619, &x1620, x1575, UINT32_C(0xffffffff)); uint32_t x1621; fiat_p384_uint1 x1622; - fiat_p384_addcarryx_u32(&x1621, &x1622, 0x0, x1615, x1618); + fiat_p384_addcarryx_u32(&x1621, &x1622, 0x0, x1618, x1615); uint32_t x1623; fiat_p384_uint1 x1624; - fiat_p384_addcarryx_u32(&x1623, &x1624, x1622, x1613, x1616); + fiat_p384_addcarryx_u32(&x1623, &x1624, x1622, x1616, x1613); uint32_t x1625; fiat_p384_uint1 x1626; - fiat_p384_addcarryx_u32(&x1625, &x1626, x1624, x1611, x1614); + fiat_p384_addcarryx_u32(&x1625, &x1626, x1624, x1614, x1611); uint32_t x1627; fiat_p384_uint1 x1628; - fiat_p384_addcarryx_u32(&x1627, &x1628, x1626, x1609, x1612); + fiat_p384_addcarryx_u32(&x1627, &x1628, x1626, x1612, x1609); uint32_t x1629; fiat_p384_uint1 x1630; - fiat_p384_addcarryx_u32(&x1629, &x1630, x1628, x1607, x1610); + fiat_p384_addcarryx_u32(&x1629, &x1630, x1628, x1610, x1607); uint32_t x1631; fiat_p384_uint1 x1632; - fiat_p384_addcarryx_u32(&x1631, &x1632, x1630, x1605, x1608); + fiat_p384_addcarryx_u32(&x1631, &x1632, x1630, x1608, x1605); uint32_t x1633; fiat_p384_uint1 x1634; - fiat_p384_addcarryx_u32(&x1633, &x1634, x1632, x1603, x1606); + fiat_p384_addcarryx_u32(&x1633, &x1634, x1632, x1606, x1603); uint32_t x1635; fiat_p384_uint1 x1636; - fiat_p384_addcarryx_u32(&x1635, &x1636, x1634, x1601, x1604); + fiat_p384_addcarryx_u32(&x1635, &x1636, x1634, x1604, x1601); uint32_t x1637; fiat_p384_uint1 x1638; - fiat_p384_addcarryx_u32(&x1637, &x1638, x1636, 0x0, x1602); + fiat_p384_addcarryx_u32(&x1637, &x1638, x1636, x1602, 0x0); uint32_t x1639; fiat_p384_uint1 x1640; - fiat_p384_addcarryx_u32(&x1639, &x1640, 0x0, x1619, x1575); + fiat_p384_addcarryx_u32(&x1639, &x1640, 0x0, x1575, x1619); uint32_t x1641; fiat_p384_uint1 x1642; - fiat_p384_addcarryx_u32(&x1641, &x1642, x1640, x1620, x1577); + fiat_p384_addcarryx_u32(&x1641, &x1642, x1640, x1577, x1620); uint32_t x1643; fiat_p384_uint1 x1644; - fiat_p384_addcarryx_u32(&x1643, &x1644, x1642, 0x0, x1579); + fiat_p384_addcarryx_u32(&x1643, &x1644, x1642, x1579, 0x0); uint32_t x1645; fiat_p384_uint1 x1646; - fiat_p384_addcarryx_u32(&x1645, &x1646, x1644, x1617, x1581); + fiat_p384_addcarryx_u32(&x1645, &x1646, x1644, x1581, x1617); uint32_t x1647; fiat_p384_uint1 x1648; - fiat_p384_addcarryx_u32(&x1647, &x1648, x1646, x1621, x1583); + fiat_p384_addcarryx_u32(&x1647, &x1648, x1646, x1583, x1621); uint32_t x1649; fiat_p384_uint1 x1650; - fiat_p384_addcarryx_u32(&x1649, &x1650, x1648, x1623, x1585); + fiat_p384_addcarryx_u32(&x1649, &x1650, x1648, x1585, x1623); uint32_t x1651; fiat_p384_uint1 x1652; - fiat_p384_addcarryx_u32(&x1651, &x1652, x1650, x1625, x1587); + fiat_p384_addcarryx_u32(&x1651, &x1652, x1650, x1587, x1625); uint32_t x1653; fiat_p384_uint1 x1654; - fiat_p384_addcarryx_u32(&x1653, &x1654, x1652, x1627, x1589); + fiat_p384_addcarryx_u32(&x1653, &x1654, x1652, x1589, x1627); uint32_t x1655; fiat_p384_uint1 x1656; - fiat_p384_addcarryx_u32(&x1655, &x1656, x1654, x1629, x1591); + fiat_p384_addcarryx_u32(&x1655, &x1656, x1654, x1591, x1629); uint32_t x1657; fiat_p384_uint1 x1658; - fiat_p384_addcarryx_u32(&x1657, &x1658, x1656, x1631, x1593); + fiat_p384_addcarryx_u32(&x1657, &x1658, x1656, x1593, x1631); uint32_t x1659; fiat_p384_uint1 x1660; - fiat_p384_addcarryx_u32(&x1659, &x1660, x1658, x1633, x1595); + fiat_p384_addcarryx_u32(&x1659, &x1660, x1658, x1595, x1633); uint32_t x1661; fiat_p384_uint1 x1662; - fiat_p384_addcarryx_u32(&x1661, &x1662, x1660, x1635, x1597); + fiat_p384_addcarryx_u32(&x1661, &x1662, x1660, x1597, x1635); uint32_t x1663; fiat_p384_uint1 x1664; - fiat_p384_addcarryx_u32(&x1663, &x1664, x1662, x1637, x1599); + fiat_p384_addcarryx_u32(&x1663, &x1664, x1662, x1599, x1637); uint32_t x1665; fiat_p384_uint1 x1666; - fiat_p384_addcarryx_u32(&x1665, &x1666, x1664, 0x0, x1600); + fiat_p384_addcarryx_u32(&x1665, &x1666, x1664, x1600, 0x0); uint32_t x1667; fiat_p384_uint1 x1668; fiat_p384_subborrowx_u32(&x1667, &x1668, 0x0, x1641, UINT32_C(0xffffffff)); @@ -2750,40 +2750,40 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x35, &x36, x12, (arg1[0])); uint32_t x37; fiat_p384_uint1 x38; - fiat_p384_addcarryx_u32(&x37, &x38, 0x0, x33, x36); + fiat_p384_addcarryx_u32(&x37, &x38, 0x0, x36, x33); uint32_t x39; fiat_p384_uint1 x40; - fiat_p384_addcarryx_u32(&x39, &x40, x38, x31, x34); + fiat_p384_addcarryx_u32(&x39, &x40, x38, x34, x31); uint32_t x41; fiat_p384_uint1 x42; - fiat_p384_addcarryx_u32(&x41, &x42, x40, x29, x32); + fiat_p384_addcarryx_u32(&x41, &x42, x40, x32, x29); uint32_t x43; fiat_p384_uint1 x44; - fiat_p384_addcarryx_u32(&x43, &x44, x42, x27, x30); + fiat_p384_addcarryx_u32(&x43, &x44, x42, x30, x27); uint32_t x45; fiat_p384_uint1 x46; - fiat_p384_addcarryx_u32(&x45, &x46, x44, x25, x28); + fiat_p384_addcarryx_u32(&x45, &x46, x44, x28, x25); uint32_t x47; fiat_p384_uint1 x48; - fiat_p384_addcarryx_u32(&x47, &x48, x46, x23, x26); + fiat_p384_addcarryx_u32(&x47, &x48, x46, x26, x23); uint32_t x49; fiat_p384_uint1 x50; - fiat_p384_addcarryx_u32(&x49, &x50, x48, x21, x24); + fiat_p384_addcarryx_u32(&x49, &x50, x48, x24, x21); uint32_t x51; fiat_p384_uint1 x52; - fiat_p384_addcarryx_u32(&x51, &x52, x50, x19, x22); + fiat_p384_addcarryx_u32(&x51, &x52, x50, x22, x19); uint32_t x53; fiat_p384_uint1 x54; - fiat_p384_addcarryx_u32(&x53, &x54, x52, x17, x20); + fiat_p384_addcarryx_u32(&x53, &x54, x52, x20, x17); uint32_t x55; fiat_p384_uint1 x56; - fiat_p384_addcarryx_u32(&x55, &x56, x54, x15, x18); + fiat_p384_addcarryx_u32(&x55, &x56, x54, x18, x15); uint32_t x57; fiat_p384_uint1 x58; - fiat_p384_addcarryx_u32(&x57, &x58, x56, x13, x16); + fiat_p384_addcarryx_u32(&x57, &x58, x56, x16, x13); uint32_t x59; fiat_p384_uint1 x60; - fiat_p384_addcarryx_u32(&x59, &x60, x58, 0x0, x14); + fiat_p384_addcarryx_u32(&x59, &x60, x58, x14, 0x0); uint32_t x61; uint32_t x62; fiat_p384_mulx_u32(&x61, &x62, x35, UINT32_C(0xffffffff)); @@ -2816,70 +2816,70 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x79, &x80, x35, UINT32_C(0xffffffff)); uint32_t x81; fiat_p384_uint1 x82; - fiat_p384_addcarryx_u32(&x81, &x82, 0x0, x75, x78); + fiat_p384_addcarryx_u32(&x81, &x82, 0x0, x78, x75); uint32_t x83; fiat_p384_uint1 x84; - fiat_p384_addcarryx_u32(&x83, &x84, x82, x73, x76); + fiat_p384_addcarryx_u32(&x83, &x84, x82, x76, x73); uint32_t x85; fiat_p384_uint1 x86; - fiat_p384_addcarryx_u32(&x85, &x86, x84, x71, x74); + fiat_p384_addcarryx_u32(&x85, &x86, x84, x74, x71); uint32_t x87; fiat_p384_uint1 x88; - fiat_p384_addcarryx_u32(&x87, &x88, x86, x69, x72); + fiat_p384_addcarryx_u32(&x87, &x88, x86, x72, x69); uint32_t x89; fiat_p384_uint1 x90; - fiat_p384_addcarryx_u32(&x89, &x90, x88, x67, x70); + fiat_p384_addcarryx_u32(&x89, &x90, x88, x70, x67); uint32_t x91; fiat_p384_uint1 x92; - fiat_p384_addcarryx_u32(&x91, &x92, x90, x65, x68); + fiat_p384_addcarryx_u32(&x91, &x92, x90, x68, x65); uint32_t x93; fiat_p384_uint1 x94; - fiat_p384_addcarryx_u32(&x93, &x94, x92, x63, x66); + fiat_p384_addcarryx_u32(&x93, &x94, x92, x66, x63); uint32_t x95; fiat_p384_uint1 x96; - fiat_p384_addcarryx_u32(&x95, &x96, x94, x61, x64); + fiat_p384_addcarryx_u32(&x95, &x96, x94, x64, x61); uint32_t x97; fiat_p384_uint1 x98; - fiat_p384_addcarryx_u32(&x97, &x98, x96, 0x0, x62); + fiat_p384_addcarryx_u32(&x97, &x98, x96, x62, 0x0); uint32_t x99; fiat_p384_uint1 x100; - fiat_p384_addcarryx_u32(&x99, &x100, 0x0, x79, x35); + fiat_p384_addcarryx_u32(&x99, &x100, 0x0, x35, x79); uint32_t x101; fiat_p384_uint1 x102; - fiat_p384_addcarryx_u32(&x101, &x102, x100, x80, x37); + fiat_p384_addcarryx_u32(&x101, &x102, x100, x37, x80); uint32_t x103; fiat_p384_uint1 x104; - fiat_p384_addcarryx_u32(&x103, &x104, x102, 0x0, x39); + fiat_p384_addcarryx_u32(&x103, &x104, x102, x39, 0x0); uint32_t x105; fiat_p384_uint1 x106; - fiat_p384_addcarryx_u32(&x105, &x106, x104, x77, x41); + fiat_p384_addcarryx_u32(&x105, &x106, x104, x41, x77); uint32_t x107; fiat_p384_uint1 x108; - fiat_p384_addcarryx_u32(&x107, &x108, x106, x81, x43); + fiat_p384_addcarryx_u32(&x107, &x108, x106, x43, x81); uint32_t x109; fiat_p384_uint1 x110; - fiat_p384_addcarryx_u32(&x109, &x110, x108, x83, x45); + fiat_p384_addcarryx_u32(&x109, &x110, x108, x45, x83); uint32_t x111; fiat_p384_uint1 x112; - fiat_p384_addcarryx_u32(&x111, &x112, x110, x85, x47); + fiat_p384_addcarryx_u32(&x111, &x112, x110, x47, x85); uint32_t x113; fiat_p384_uint1 x114; - fiat_p384_addcarryx_u32(&x113, &x114, x112, x87, x49); + fiat_p384_addcarryx_u32(&x113, &x114, x112, x49, x87); uint32_t x115; fiat_p384_uint1 x116; - fiat_p384_addcarryx_u32(&x115, &x116, x114, x89, x51); + fiat_p384_addcarryx_u32(&x115, &x116, x114, x51, x89); uint32_t x117; fiat_p384_uint1 x118; - fiat_p384_addcarryx_u32(&x117, &x118, x116, x91, x53); + fiat_p384_addcarryx_u32(&x117, &x118, x116, x53, x91); uint32_t x119; fiat_p384_uint1 x120; - fiat_p384_addcarryx_u32(&x119, &x120, x118, x93, x55); + fiat_p384_addcarryx_u32(&x119, &x120, x118, x55, x93); uint32_t x121; fiat_p384_uint1 x122; - fiat_p384_addcarryx_u32(&x121, &x122, x120, x95, x57); + fiat_p384_addcarryx_u32(&x121, &x122, x120, x57, x95); uint32_t x123; fiat_p384_uint1 x124; - fiat_p384_addcarryx_u32(&x123, &x124, x122, x97, x59); + fiat_p384_addcarryx_u32(&x123, &x124, x122, x59, x97); uint32_t x125; fiat_p384_uint1 x126; fiat_p384_addcarryx_u32(&x125, &x126, x124, 0x0, 0x0); @@ -2921,79 +2921,79 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x149, &x150, x1, (arg1[0])); uint32_t x151; fiat_p384_uint1 x152; - fiat_p384_addcarryx_u32(&x151, &x152, 0x0, x147, x150); + fiat_p384_addcarryx_u32(&x151, &x152, 0x0, x150, x147); uint32_t x153; fiat_p384_uint1 x154; - fiat_p384_addcarryx_u32(&x153, &x154, x152, x145, x148); + fiat_p384_addcarryx_u32(&x153, &x154, x152, x148, x145); uint32_t x155; fiat_p384_uint1 x156; - fiat_p384_addcarryx_u32(&x155, &x156, x154, x143, x146); + fiat_p384_addcarryx_u32(&x155, &x156, x154, x146, x143); uint32_t x157; fiat_p384_uint1 x158; - fiat_p384_addcarryx_u32(&x157, &x158, x156, x141, x144); + fiat_p384_addcarryx_u32(&x157, &x158, x156, x144, x141); uint32_t x159; fiat_p384_uint1 x160; - fiat_p384_addcarryx_u32(&x159, &x160, x158, x139, x142); + fiat_p384_addcarryx_u32(&x159, &x160, x158, x142, x139); uint32_t x161; fiat_p384_uint1 x162; - fiat_p384_addcarryx_u32(&x161, &x162, x160, x137, x140); + fiat_p384_addcarryx_u32(&x161, &x162, x160, x140, x137); uint32_t x163; fiat_p384_uint1 x164; - fiat_p384_addcarryx_u32(&x163, &x164, x162, x135, x138); + fiat_p384_addcarryx_u32(&x163, &x164, x162, x138, x135); uint32_t x165; fiat_p384_uint1 x166; - fiat_p384_addcarryx_u32(&x165, &x166, x164, x133, x136); + fiat_p384_addcarryx_u32(&x165, &x166, x164, x136, x133); uint32_t x167; fiat_p384_uint1 x168; - fiat_p384_addcarryx_u32(&x167, &x168, x166, x131, x134); + fiat_p384_addcarryx_u32(&x167, &x168, x166, x134, x131); uint32_t x169; fiat_p384_uint1 x170; - fiat_p384_addcarryx_u32(&x169, &x170, x168, x129, x132); + fiat_p384_addcarryx_u32(&x169, &x170, x168, x132, x129); uint32_t x171; fiat_p384_uint1 x172; - fiat_p384_addcarryx_u32(&x171, &x172, x170, x127, x130); + fiat_p384_addcarryx_u32(&x171, &x172, x170, x130, x127); uint32_t x173; fiat_p384_uint1 x174; - fiat_p384_addcarryx_u32(&x173, &x174, x172, 0x0, x128); + fiat_p384_addcarryx_u32(&x173, &x174, x172, x128, 0x0); uint32_t x175; fiat_p384_uint1 x176; - fiat_p384_addcarryx_u32(&x175, &x176, 0x0, x149, x101); + fiat_p384_addcarryx_u32(&x175, &x176, 0x0, x101, x149); uint32_t x177; fiat_p384_uint1 x178; - fiat_p384_addcarryx_u32(&x177, &x178, x176, x151, x103); + fiat_p384_addcarryx_u32(&x177, &x178, x176, x103, x151); uint32_t x179; fiat_p384_uint1 x180; - fiat_p384_addcarryx_u32(&x179, &x180, x178, x153, x105); + fiat_p384_addcarryx_u32(&x179, &x180, x178, x105, x153); uint32_t x181; fiat_p384_uint1 x182; - fiat_p384_addcarryx_u32(&x181, &x182, x180, x155, x107); + fiat_p384_addcarryx_u32(&x181, &x182, x180, x107, x155); uint32_t x183; fiat_p384_uint1 x184; - fiat_p384_addcarryx_u32(&x183, &x184, x182, x157, x109); + fiat_p384_addcarryx_u32(&x183, &x184, x182, x109, x157); uint32_t x185; fiat_p384_uint1 x186; - fiat_p384_addcarryx_u32(&x185, &x186, x184, x159, x111); + fiat_p384_addcarryx_u32(&x185, &x186, x184, x111, x159); uint32_t x187; fiat_p384_uint1 x188; - fiat_p384_addcarryx_u32(&x187, &x188, x186, x161, x113); + fiat_p384_addcarryx_u32(&x187, &x188, x186, x113, x161); uint32_t x189; fiat_p384_uint1 x190; - fiat_p384_addcarryx_u32(&x189, &x190, x188, x163, x115); + fiat_p384_addcarryx_u32(&x189, &x190, x188, x115, x163); uint32_t x191; fiat_p384_uint1 x192; - fiat_p384_addcarryx_u32(&x191, &x192, x190, x165, x117); + fiat_p384_addcarryx_u32(&x191, &x192, x190, x117, x165); uint32_t x193; fiat_p384_uint1 x194; - fiat_p384_addcarryx_u32(&x193, &x194, x192, x167, x119); + fiat_p384_addcarryx_u32(&x193, &x194, x192, x119, x167); uint32_t x195; fiat_p384_uint1 x196; - fiat_p384_addcarryx_u32(&x195, &x196, x194, x169, x121); + fiat_p384_addcarryx_u32(&x195, &x196, x194, x121, x169); uint32_t x197; fiat_p384_uint1 x198; - fiat_p384_addcarryx_u32(&x197, &x198, x196, x171, x123); + fiat_p384_addcarryx_u32(&x197, &x198, x196, x123, x171); uint32_t x199; fiat_p384_uint1 x200; - fiat_p384_addcarryx_u32(&x199, &x200, x198, x173, (fiat_p384_uint1)x125); + fiat_p384_addcarryx_u32(&x199, &x200, x198, (fiat_p384_uint1)x125, x173); uint32_t x201; uint32_t x202; fiat_p384_mulx_u32(&x201, &x202, x175, UINT32_C(0xffffffff)); @@ -3026,73 +3026,73 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x219, &x220, x175, UINT32_C(0xffffffff)); uint32_t x221; fiat_p384_uint1 x222; - fiat_p384_addcarryx_u32(&x221, &x222, 0x0, x215, x218); + fiat_p384_addcarryx_u32(&x221, &x222, 0x0, x218, x215); uint32_t x223; fiat_p384_uint1 x224; - fiat_p384_addcarryx_u32(&x223, &x224, x222, x213, x216); + fiat_p384_addcarryx_u32(&x223, &x224, x222, x216, x213); uint32_t x225; fiat_p384_uint1 x226; - fiat_p384_addcarryx_u32(&x225, &x226, x224, x211, x214); + fiat_p384_addcarryx_u32(&x225, &x226, x224, x214, x211); uint32_t x227; fiat_p384_uint1 x228; - fiat_p384_addcarryx_u32(&x227, &x228, x226, x209, x212); + fiat_p384_addcarryx_u32(&x227, &x228, x226, x212, x209); uint32_t x229; fiat_p384_uint1 x230; - fiat_p384_addcarryx_u32(&x229, &x230, x228, x207, x210); + fiat_p384_addcarryx_u32(&x229, &x230, x228, x210, x207); uint32_t x231; fiat_p384_uint1 x232; - fiat_p384_addcarryx_u32(&x231, &x232, x230, x205, x208); + fiat_p384_addcarryx_u32(&x231, &x232, x230, x208, x205); uint32_t x233; fiat_p384_uint1 x234; - fiat_p384_addcarryx_u32(&x233, &x234, x232, x203, x206); + fiat_p384_addcarryx_u32(&x233, &x234, x232, x206, x203); uint32_t x235; fiat_p384_uint1 x236; - fiat_p384_addcarryx_u32(&x235, &x236, x234, x201, x204); + fiat_p384_addcarryx_u32(&x235, &x236, x234, x204, x201); uint32_t x237; fiat_p384_uint1 x238; - fiat_p384_addcarryx_u32(&x237, &x238, x236, 0x0, x202); + fiat_p384_addcarryx_u32(&x237, &x238, x236, x202, 0x0); uint32_t x239; fiat_p384_uint1 x240; - fiat_p384_addcarryx_u32(&x239, &x240, 0x0, x219, x175); + fiat_p384_addcarryx_u32(&x239, &x240, 0x0, x175, x219); uint32_t x241; fiat_p384_uint1 x242; - fiat_p384_addcarryx_u32(&x241, &x242, x240, x220, x177); + fiat_p384_addcarryx_u32(&x241, &x242, x240, x177, x220); uint32_t x243; fiat_p384_uint1 x244; - fiat_p384_addcarryx_u32(&x243, &x244, x242, 0x0, x179); + fiat_p384_addcarryx_u32(&x243, &x244, x242, x179, 0x0); uint32_t x245; fiat_p384_uint1 x246; - fiat_p384_addcarryx_u32(&x245, &x246, x244, x217, x181); + fiat_p384_addcarryx_u32(&x245, &x246, x244, x181, x217); uint32_t x247; fiat_p384_uint1 x248; - fiat_p384_addcarryx_u32(&x247, &x248, x246, x221, x183); + fiat_p384_addcarryx_u32(&x247, &x248, x246, x183, x221); uint32_t x249; fiat_p384_uint1 x250; - fiat_p384_addcarryx_u32(&x249, &x250, x248, x223, x185); + fiat_p384_addcarryx_u32(&x249, &x250, x248, x185, x223); uint32_t x251; fiat_p384_uint1 x252; - fiat_p384_addcarryx_u32(&x251, &x252, x250, x225, x187); + fiat_p384_addcarryx_u32(&x251, &x252, x250, x187, x225); uint32_t x253; fiat_p384_uint1 x254; - fiat_p384_addcarryx_u32(&x253, &x254, x252, x227, x189); + fiat_p384_addcarryx_u32(&x253, &x254, x252, x189, x227); uint32_t x255; fiat_p384_uint1 x256; - fiat_p384_addcarryx_u32(&x255, &x256, x254, x229, x191); + fiat_p384_addcarryx_u32(&x255, &x256, x254, x191, x229); uint32_t x257; fiat_p384_uint1 x258; - fiat_p384_addcarryx_u32(&x257, &x258, x256, x231, x193); + fiat_p384_addcarryx_u32(&x257, &x258, x256, x193, x231); uint32_t x259; fiat_p384_uint1 x260; - fiat_p384_addcarryx_u32(&x259, &x260, x258, x233, x195); + fiat_p384_addcarryx_u32(&x259, &x260, x258, x195, x233); uint32_t x261; fiat_p384_uint1 x262; - fiat_p384_addcarryx_u32(&x261, &x262, x260, x235, x197); + fiat_p384_addcarryx_u32(&x261, &x262, x260, x197, x235); uint32_t x263; fiat_p384_uint1 x264; - fiat_p384_addcarryx_u32(&x263, &x264, x262, x237, x199); + fiat_p384_addcarryx_u32(&x263, &x264, x262, x199, x237); uint32_t x265; fiat_p384_uint1 x266; - fiat_p384_addcarryx_u32(&x265, &x266, x264, 0x0, x200); + fiat_p384_addcarryx_u32(&x265, &x266, x264, x200, 0x0); uint32_t x267; uint32_t x268; fiat_p384_mulx_u32(&x267, &x268, x2, (arg1[11])); @@ -3131,79 +3131,79 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x289, &x290, x2, (arg1[0])); uint32_t x291; fiat_p384_uint1 x292; - fiat_p384_addcarryx_u32(&x291, &x292, 0x0, x287, x290); + fiat_p384_addcarryx_u32(&x291, &x292, 0x0, x290, x287); uint32_t x293; fiat_p384_uint1 x294; - fiat_p384_addcarryx_u32(&x293, &x294, x292, x285, x288); + fiat_p384_addcarryx_u32(&x293, &x294, x292, x288, x285); uint32_t x295; fiat_p384_uint1 x296; - fiat_p384_addcarryx_u32(&x295, &x296, x294, x283, x286); + fiat_p384_addcarryx_u32(&x295, &x296, x294, x286, x283); uint32_t x297; fiat_p384_uint1 x298; - fiat_p384_addcarryx_u32(&x297, &x298, x296, x281, x284); + fiat_p384_addcarryx_u32(&x297, &x298, x296, x284, x281); uint32_t x299; fiat_p384_uint1 x300; - fiat_p384_addcarryx_u32(&x299, &x300, x298, x279, x282); + fiat_p384_addcarryx_u32(&x299, &x300, x298, x282, x279); uint32_t x301; fiat_p384_uint1 x302; - fiat_p384_addcarryx_u32(&x301, &x302, x300, x277, x280); + fiat_p384_addcarryx_u32(&x301, &x302, x300, x280, x277); uint32_t x303; fiat_p384_uint1 x304; - fiat_p384_addcarryx_u32(&x303, &x304, x302, x275, x278); + fiat_p384_addcarryx_u32(&x303, &x304, x302, x278, x275); uint32_t x305; fiat_p384_uint1 x306; - fiat_p384_addcarryx_u32(&x305, &x306, x304, x273, x276); + fiat_p384_addcarryx_u32(&x305, &x306, x304, x276, x273); uint32_t x307; fiat_p384_uint1 x308; - fiat_p384_addcarryx_u32(&x307, &x308, x306, x271, x274); + fiat_p384_addcarryx_u32(&x307, &x308, x306, x274, x271); uint32_t x309; fiat_p384_uint1 x310; - fiat_p384_addcarryx_u32(&x309, &x310, x308, x269, x272); + fiat_p384_addcarryx_u32(&x309, &x310, x308, x272, x269); uint32_t x311; fiat_p384_uint1 x312; - fiat_p384_addcarryx_u32(&x311, &x312, x310, x267, x270); + fiat_p384_addcarryx_u32(&x311, &x312, x310, x270, x267); uint32_t x313; fiat_p384_uint1 x314; - fiat_p384_addcarryx_u32(&x313, &x314, x312, 0x0, x268); + fiat_p384_addcarryx_u32(&x313, &x314, x312, x268, 0x0); uint32_t x315; fiat_p384_uint1 x316; - fiat_p384_addcarryx_u32(&x315, &x316, 0x0, x289, x241); + fiat_p384_addcarryx_u32(&x315, &x316, 0x0, x241, x289); uint32_t x317; fiat_p384_uint1 x318; - fiat_p384_addcarryx_u32(&x317, &x318, x316, x291, x243); + fiat_p384_addcarryx_u32(&x317, &x318, x316, x243, x291); uint32_t x319; fiat_p384_uint1 x320; - fiat_p384_addcarryx_u32(&x319, &x320, x318, x293, x245); + fiat_p384_addcarryx_u32(&x319, &x320, x318, x245, x293); uint32_t x321; fiat_p384_uint1 x322; - fiat_p384_addcarryx_u32(&x321, &x322, x320, x295, x247); + fiat_p384_addcarryx_u32(&x321, &x322, x320, x247, x295); uint32_t x323; fiat_p384_uint1 x324; - fiat_p384_addcarryx_u32(&x323, &x324, x322, x297, x249); + fiat_p384_addcarryx_u32(&x323, &x324, x322, x249, x297); uint32_t x325; fiat_p384_uint1 x326; - fiat_p384_addcarryx_u32(&x325, &x326, x324, x299, x251); + fiat_p384_addcarryx_u32(&x325, &x326, x324, x251, x299); uint32_t x327; fiat_p384_uint1 x328; - fiat_p384_addcarryx_u32(&x327, &x328, x326, x301, x253); + fiat_p384_addcarryx_u32(&x327, &x328, x326, x253, x301); uint32_t x329; fiat_p384_uint1 x330; - fiat_p384_addcarryx_u32(&x329, &x330, x328, x303, x255); + fiat_p384_addcarryx_u32(&x329, &x330, x328, x255, x303); uint32_t x331; fiat_p384_uint1 x332; - fiat_p384_addcarryx_u32(&x331, &x332, x330, x305, x257); + fiat_p384_addcarryx_u32(&x331, &x332, x330, x257, x305); uint32_t x333; fiat_p384_uint1 x334; - fiat_p384_addcarryx_u32(&x333, &x334, x332, x307, x259); + fiat_p384_addcarryx_u32(&x333, &x334, x332, x259, x307); uint32_t x335; fiat_p384_uint1 x336; - fiat_p384_addcarryx_u32(&x335, &x336, x334, x309, x261); + fiat_p384_addcarryx_u32(&x335, &x336, x334, x261, x309); uint32_t x337; fiat_p384_uint1 x338; - fiat_p384_addcarryx_u32(&x337, &x338, x336, x311, x263); + fiat_p384_addcarryx_u32(&x337, &x338, x336, x263, x311); uint32_t x339; fiat_p384_uint1 x340; - fiat_p384_addcarryx_u32(&x339, &x340, x338, x313, x265); + fiat_p384_addcarryx_u32(&x339, &x340, x338, x265, x313); uint32_t x341; uint32_t x342; fiat_p384_mulx_u32(&x341, &x342, x315, UINT32_C(0xffffffff)); @@ -3236,73 +3236,73 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x359, &x360, x315, UINT32_C(0xffffffff)); uint32_t x361; fiat_p384_uint1 x362; - fiat_p384_addcarryx_u32(&x361, &x362, 0x0, x355, x358); + fiat_p384_addcarryx_u32(&x361, &x362, 0x0, x358, x355); uint32_t x363; fiat_p384_uint1 x364; - fiat_p384_addcarryx_u32(&x363, &x364, x362, x353, x356); + fiat_p384_addcarryx_u32(&x363, &x364, x362, x356, x353); uint32_t x365; fiat_p384_uint1 x366; - fiat_p384_addcarryx_u32(&x365, &x366, x364, x351, x354); + fiat_p384_addcarryx_u32(&x365, &x366, x364, x354, x351); uint32_t x367; fiat_p384_uint1 x368; - fiat_p384_addcarryx_u32(&x367, &x368, x366, x349, x352); + fiat_p384_addcarryx_u32(&x367, &x368, x366, x352, x349); uint32_t x369; fiat_p384_uint1 x370; - fiat_p384_addcarryx_u32(&x369, &x370, x368, x347, x350); + fiat_p384_addcarryx_u32(&x369, &x370, x368, x350, x347); uint32_t x371; fiat_p384_uint1 x372; - fiat_p384_addcarryx_u32(&x371, &x372, x370, x345, x348); + fiat_p384_addcarryx_u32(&x371, &x372, x370, x348, x345); uint32_t x373; fiat_p384_uint1 x374; - fiat_p384_addcarryx_u32(&x373, &x374, x372, x343, x346); + fiat_p384_addcarryx_u32(&x373, &x374, x372, x346, x343); uint32_t x375; fiat_p384_uint1 x376; - fiat_p384_addcarryx_u32(&x375, &x376, x374, x341, x344); + fiat_p384_addcarryx_u32(&x375, &x376, x374, x344, x341); uint32_t x377; fiat_p384_uint1 x378; - fiat_p384_addcarryx_u32(&x377, &x378, x376, 0x0, x342); + fiat_p384_addcarryx_u32(&x377, &x378, x376, x342, 0x0); uint32_t x379; fiat_p384_uint1 x380; - fiat_p384_addcarryx_u32(&x379, &x380, 0x0, x359, x315); + fiat_p384_addcarryx_u32(&x379, &x380, 0x0, x315, x359); uint32_t x381; fiat_p384_uint1 x382; - fiat_p384_addcarryx_u32(&x381, &x382, x380, x360, x317); + fiat_p384_addcarryx_u32(&x381, &x382, x380, x317, x360); uint32_t x383; fiat_p384_uint1 x384; - fiat_p384_addcarryx_u32(&x383, &x384, x382, 0x0, x319); + fiat_p384_addcarryx_u32(&x383, &x384, x382, x319, 0x0); uint32_t x385; fiat_p384_uint1 x386; - fiat_p384_addcarryx_u32(&x385, &x386, x384, x357, x321); + fiat_p384_addcarryx_u32(&x385, &x386, x384, x321, x357); uint32_t x387; fiat_p384_uint1 x388; - fiat_p384_addcarryx_u32(&x387, &x388, x386, x361, x323); + fiat_p384_addcarryx_u32(&x387, &x388, x386, x323, x361); uint32_t x389; fiat_p384_uint1 x390; - fiat_p384_addcarryx_u32(&x389, &x390, x388, x363, x325); + fiat_p384_addcarryx_u32(&x389, &x390, x388, x325, x363); uint32_t x391; fiat_p384_uint1 x392; - fiat_p384_addcarryx_u32(&x391, &x392, x390, x365, x327); + fiat_p384_addcarryx_u32(&x391, &x392, x390, x327, x365); uint32_t x393; fiat_p384_uint1 x394; - fiat_p384_addcarryx_u32(&x393, &x394, x392, x367, x329); + fiat_p384_addcarryx_u32(&x393, &x394, x392, x329, x367); uint32_t x395; fiat_p384_uint1 x396; - fiat_p384_addcarryx_u32(&x395, &x396, x394, x369, x331); + fiat_p384_addcarryx_u32(&x395, &x396, x394, x331, x369); uint32_t x397; fiat_p384_uint1 x398; - fiat_p384_addcarryx_u32(&x397, &x398, x396, x371, x333); + fiat_p384_addcarryx_u32(&x397, &x398, x396, x333, x371); uint32_t x399; fiat_p384_uint1 x400; - fiat_p384_addcarryx_u32(&x399, &x400, x398, x373, x335); + fiat_p384_addcarryx_u32(&x399, &x400, x398, x335, x373); uint32_t x401; fiat_p384_uint1 x402; - fiat_p384_addcarryx_u32(&x401, &x402, x400, x375, x337); + fiat_p384_addcarryx_u32(&x401, &x402, x400, x337, x375); uint32_t x403; fiat_p384_uint1 x404; - fiat_p384_addcarryx_u32(&x403, &x404, x402, x377, x339); + fiat_p384_addcarryx_u32(&x403, &x404, x402, x339, x377); uint32_t x405; fiat_p384_uint1 x406; - fiat_p384_addcarryx_u32(&x405, &x406, x404, 0x0, x340); + fiat_p384_addcarryx_u32(&x405, &x406, x404, x340, 0x0); uint32_t x407; uint32_t x408; fiat_p384_mulx_u32(&x407, &x408, x3, (arg1[11])); @@ -3341,79 +3341,79 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x429, &x430, x3, (arg1[0])); uint32_t x431; fiat_p384_uint1 x432; - fiat_p384_addcarryx_u32(&x431, &x432, 0x0, x427, x430); + fiat_p384_addcarryx_u32(&x431, &x432, 0x0, x430, x427); uint32_t x433; fiat_p384_uint1 x434; - fiat_p384_addcarryx_u32(&x433, &x434, x432, x425, x428); + fiat_p384_addcarryx_u32(&x433, &x434, x432, x428, x425); uint32_t x435; fiat_p384_uint1 x436; - fiat_p384_addcarryx_u32(&x435, &x436, x434, x423, x426); + fiat_p384_addcarryx_u32(&x435, &x436, x434, x426, x423); uint32_t x437; fiat_p384_uint1 x438; - fiat_p384_addcarryx_u32(&x437, &x438, x436, x421, x424); + fiat_p384_addcarryx_u32(&x437, &x438, x436, x424, x421); uint32_t x439; fiat_p384_uint1 x440; - fiat_p384_addcarryx_u32(&x439, &x440, x438, x419, x422); + fiat_p384_addcarryx_u32(&x439, &x440, x438, x422, x419); uint32_t x441; fiat_p384_uint1 x442; - fiat_p384_addcarryx_u32(&x441, &x442, x440, x417, x420); + fiat_p384_addcarryx_u32(&x441, &x442, x440, x420, x417); uint32_t x443; fiat_p384_uint1 x444; - fiat_p384_addcarryx_u32(&x443, &x444, x442, x415, x418); + fiat_p384_addcarryx_u32(&x443, &x444, x442, x418, x415); uint32_t x445; fiat_p384_uint1 x446; - fiat_p384_addcarryx_u32(&x445, &x446, x444, x413, x416); + fiat_p384_addcarryx_u32(&x445, &x446, x444, x416, x413); uint32_t x447; fiat_p384_uint1 x448; - fiat_p384_addcarryx_u32(&x447, &x448, x446, x411, x414); + fiat_p384_addcarryx_u32(&x447, &x448, x446, x414, x411); uint32_t x449; fiat_p384_uint1 x450; - fiat_p384_addcarryx_u32(&x449, &x450, x448, x409, x412); + fiat_p384_addcarryx_u32(&x449, &x450, x448, x412, x409); uint32_t x451; fiat_p384_uint1 x452; - fiat_p384_addcarryx_u32(&x451, &x452, x450, x407, x410); + fiat_p384_addcarryx_u32(&x451, &x452, x450, x410, x407); uint32_t x453; fiat_p384_uint1 x454; - fiat_p384_addcarryx_u32(&x453, &x454, x452, 0x0, x408); + fiat_p384_addcarryx_u32(&x453, &x454, x452, x408, 0x0); uint32_t x455; fiat_p384_uint1 x456; - fiat_p384_addcarryx_u32(&x455, &x456, 0x0, x429, x381); + fiat_p384_addcarryx_u32(&x455, &x456, 0x0, x381, x429); uint32_t x457; fiat_p384_uint1 x458; - fiat_p384_addcarryx_u32(&x457, &x458, x456, x431, x383); + fiat_p384_addcarryx_u32(&x457, &x458, x456, x383, x431); uint32_t x459; fiat_p384_uint1 x460; - fiat_p384_addcarryx_u32(&x459, &x460, x458, x433, x385); + fiat_p384_addcarryx_u32(&x459, &x460, x458, x385, x433); uint32_t x461; fiat_p384_uint1 x462; - fiat_p384_addcarryx_u32(&x461, &x462, x460, x435, x387); + fiat_p384_addcarryx_u32(&x461, &x462, x460, x387, x435); uint32_t x463; fiat_p384_uint1 x464; - fiat_p384_addcarryx_u32(&x463, &x464, x462, x437, x389); + fiat_p384_addcarryx_u32(&x463, &x464, x462, x389, x437); uint32_t x465; fiat_p384_uint1 x466; - fiat_p384_addcarryx_u32(&x465, &x466, x464, x439, x391); + fiat_p384_addcarryx_u32(&x465, &x466, x464, x391, x439); uint32_t x467; fiat_p384_uint1 x468; - fiat_p384_addcarryx_u32(&x467, &x468, x466, x441, x393); + fiat_p384_addcarryx_u32(&x467, &x468, x466, x393, x441); uint32_t x469; fiat_p384_uint1 x470; - fiat_p384_addcarryx_u32(&x469, &x470, x468, x443, x395); + fiat_p384_addcarryx_u32(&x469, &x470, x468, x395, x443); uint32_t x471; fiat_p384_uint1 x472; - fiat_p384_addcarryx_u32(&x471, &x472, x470, x445, x397); + fiat_p384_addcarryx_u32(&x471, &x472, x470, x397, x445); uint32_t x473; fiat_p384_uint1 x474; - fiat_p384_addcarryx_u32(&x473, &x474, x472, x447, x399); + fiat_p384_addcarryx_u32(&x473, &x474, x472, x399, x447); uint32_t x475; fiat_p384_uint1 x476; - fiat_p384_addcarryx_u32(&x475, &x476, x474, x449, x401); + fiat_p384_addcarryx_u32(&x475, &x476, x474, x401, x449); uint32_t x477; fiat_p384_uint1 x478; - fiat_p384_addcarryx_u32(&x477, &x478, x476, x451, x403); + fiat_p384_addcarryx_u32(&x477, &x478, x476, x403, x451); uint32_t x479; fiat_p384_uint1 x480; - fiat_p384_addcarryx_u32(&x479, &x480, x478, x453, x405); + fiat_p384_addcarryx_u32(&x479, &x480, x478, x405, x453); uint32_t x481; uint32_t x482; fiat_p384_mulx_u32(&x481, &x482, x455, UINT32_C(0xffffffff)); @@ -3446,73 +3446,73 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x499, &x500, x455, UINT32_C(0xffffffff)); uint32_t x501; fiat_p384_uint1 x502; - fiat_p384_addcarryx_u32(&x501, &x502, 0x0, x495, x498); + fiat_p384_addcarryx_u32(&x501, &x502, 0x0, x498, x495); uint32_t x503; fiat_p384_uint1 x504; - fiat_p384_addcarryx_u32(&x503, &x504, x502, x493, x496); + fiat_p384_addcarryx_u32(&x503, &x504, x502, x496, x493); uint32_t x505; fiat_p384_uint1 x506; - fiat_p384_addcarryx_u32(&x505, &x506, x504, x491, x494); + fiat_p384_addcarryx_u32(&x505, &x506, x504, x494, x491); uint32_t x507; fiat_p384_uint1 x508; - fiat_p384_addcarryx_u32(&x507, &x508, x506, x489, x492); + fiat_p384_addcarryx_u32(&x507, &x508, x506, x492, x489); uint32_t x509; fiat_p384_uint1 x510; - fiat_p384_addcarryx_u32(&x509, &x510, x508, x487, x490); + fiat_p384_addcarryx_u32(&x509, &x510, x508, x490, x487); uint32_t x511; fiat_p384_uint1 x512; - fiat_p384_addcarryx_u32(&x511, &x512, x510, x485, x488); + fiat_p384_addcarryx_u32(&x511, &x512, x510, x488, x485); uint32_t x513; fiat_p384_uint1 x514; - fiat_p384_addcarryx_u32(&x513, &x514, x512, x483, x486); + fiat_p384_addcarryx_u32(&x513, &x514, x512, x486, x483); uint32_t x515; fiat_p384_uint1 x516; - fiat_p384_addcarryx_u32(&x515, &x516, x514, x481, x484); + fiat_p384_addcarryx_u32(&x515, &x516, x514, x484, x481); uint32_t x517; fiat_p384_uint1 x518; - fiat_p384_addcarryx_u32(&x517, &x518, x516, 0x0, x482); + fiat_p384_addcarryx_u32(&x517, &x518, x516, x482, 0x0); uint32_t x519; fiat_p384_uint1 x520; - fiat_p384_addcarryx_u32(&x519, &x520, 0x0, x499, x455); + fiat_p384_addcarryx_u32(&x519, &x520, 0x0, x455, x499); uint32_t x521; fiat_p384_uint1 x522; - fiat_p384_addcarryx_u32(&x521, &x522, x520, x500, x457); + fiat_p384_addcarryx_u32(&x521, &x522, x520, x457, x500); uint32_t x523; fiat_p384_uint1 x524; - fiat_p384_addcarryx_u32(&x523, &x524, x522, 0x0, x459); + fiat_p384_addcarryx_u32(&x523, &x524, x522, x459, 0x0); uint32_t x525; fiat_p384_uint1 x526; - fiat_p384_addcarryx_u32(&x525, &x526, x524, x497, x461); + fiat_p384_addcarryx_u32(&x525, &x526, x524, x461, x497); uint32_t x527; fiat_p384_uint1 x528; - fiat_p384_addcarryx_u32(&x527, &x528, x526, x501, x463); + fiat_p384_addcarryx_u32(&x527, &x528, x526, x463, x501); uint32_t x529; fiat_p384_uint1 x530; - fiat_p384_addcarryx_u32(&x529, &x530, x528, x503, x465); + fiat_p384_addcarryx_u32(&x529, &x530, x528, x465, x503); uint32_t x531; fiat_p384_uint1 x532; - fiat_p384_addcarryx_u32(&x531, &x532, x530, x505, x467); + fiat_p384_addcarryx_u32(&x531, &x532, x530, x467, x505); uint32_t x533; fiat_p384_uint1 x534; - fiat_p384_addcarryx_u32(&x533, &x534, x532, x507, x469); + fiat_p384_addcarryx_u32(&x533, &x534, x532, x469, x507); uint32_t x535; fiat_p384_uint1 x536; - fiat_p384_addcarryx_u32(&x535, &x536, x534, x509, x471); + fiat_p384_addcarryx_u32(&x535, &x536, x534, x471, x509); uint32_t x537; fiat_p384_uint1 x538; - fiat_p384_addcarryx_u32(&x537, &x538, x536, x511, x473); + fiat_p384_addcarryx_u32(&x537, &x538, x536, x473, x511); uint32_t x539; fiat_p384_uint1 x540; - fiat_p384_addcarryx_u32(&x539, &x540, x538, x513, x475); + fiat_p384_addcarryx_u32(&x539, &x540, x538, x475, x513); uint32_t x541; fiat_p384_uint1 x542; - fiat_p384_addcarryx_u32(&x541, &x542, x540, x515, x477); + fiat_p384_addcarryx_u32(&x541, &x542, x540, x477, x515); uint32_t x543; fiat_p384_uint1 x544; - fiat_p384_addcarryx_u32(&x543, &x544, x542, x517, x479); + fiat_p384_addcarryx_u32(&x543, &x544, x542, x479, x517); uint32_t x545; fiat_p384_uint1 x546; - fiat_p384_addcarryx_u32(&x545, &x546, x544, 0x0, x480); + fiat_p384_addcarryx_u32(&x545, &x546, x544, x480, 0x0); uint32_t x547; uint32_t x548; fiat_p384_mulx_u32(&x547, &x548, x4, (arg1[11])); @@ -3551,79 +3551,79 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x569, &x570, x4, (arg1[0])); uint32_t x571; fiat_p384_uint1 x572; - fiat_p384_addcarryx_u32(&x571, &x572, 0x0, x567, x570); + fiat_p384_addcarryx_u32(&x571, &x572, 0x0, x570, x567); uint32_t x573; fiat_p384_uint1 x574; - fiat_p384_addcarryx_u32(&x573, &x574, x572, x565, x568); + fiat_p384_addcarryx_u32(&x573, &x574, x572, x568, x565); uint32_t x575; fiat_p384_uint1 x576; - fiat_p384_addcarryx_u32(&x575, &x576, x574, x563, x566); + fiat_p384_addcarryx_u32(&x575, &x576, x574, x566, x563); uint32_t x577; fiat_p384_uint1 x578; - fiat_p384_addcarryx_u32(&x577, &x578, x576, x561, x564); + fiat_p384_addcarryx_u32(&x577, &x578, x576, x564, x561); uint32_t x579; fiat_p384_uint1 x580; - fiat_p384_addcarryx_u32(&x579, &x580, x578, x559, x562); + fiat_p384_addcarryx_u32(&x579, &x580, x578, x562, x559); uint32_t x581; fiat_p384_uint1 x582; - fiat_p384_addcarryx_u32(&x581, &x582, x580, x557, x560); + fiat_p384_addcarryx_u32(&x581, &x582, x580, x560, x557); uint32_t x583; fiat_p384_uint1 x584; - fiat_p384_addcarryx_u32(&x583, &x584, x582, x555, x558); + fiat_p384_addcarryx_u32(&x583, &x584, x582, x558, x555); uint32_t x585; fiat_p384_uint1 x586; - fiat_p384_addcarryx_u32(&x585, &x586, x584, x553, x556); + fiat_p384_addcarryx_u32(&x585, &x586, x584, x556, x553); uint32_t x587; fiat_p384_uint1 x588; - fiat_p384_addcarryx_u32(&x587, &x588, x586, x551, x554); + fiat_p384_addcarryx_u32(&x587, &x588, x586, x554, x551); uint32_t x589; fiat_p384_uint1 x590; - fiat_p384_addcarryx_u32(&x589, &x590, x588, x549, x552); + fiat_p384_addcarryx_u32(&x589, &x590, x588, x552, x549); uint32_t x591; fiat_p384_uint1 x592; - fiat_p384_addcarryx_u32(&x591, &x592, x590, x547, x550); + fiat_p384_addcarryx_u32(&x591, &x592, x590, x550, x547); uint32_t x593; fiat_p384_uint1 x594; - fiat_p384_addcarryx_u32(&x593, &x594, x592, 0x0, x548); + fiat_p384_addcarryx_u32(&x593, &x594, x592, x548, 0x0); uint32_t x595; fiat_p384_uint1 x596; - fiat_p384_addcarryx_u32(&x595, &x596, 0x0, x569, x521); + fiat_p384_addcarryx_u32(&x595, &x596, 0x0, x521, x569); uint32_t x597; fiat_p384_uint1 x598; - fiat_p384_addcarryx_u32(&x597, &x598, x596, x571, x523); + fiat_p384_addcarryx_u32(&x597, &x598, x596, x523, x571); uint32_t x599; fiat_p384_uint1 x600; - fiat_p384_addcarryx_u32(&x599, &x600, x598, x573, x525); + fiat_p384_addcarryx_u32(&x599, &x600, x598, x525, x573); uint32_t x601; fiat_p384_uint1 x602; - fiat_p384_addcarryx_u32(&x601, &x602, x600, x575, x527); + fiat_p384_addcarryx_u32(&x601, &x602, x600, x527, x575); uint32_t x603; fiat_p384_uint1 x604; - fiat_p384_addcarryx_u32(&x603, &x604, x602, x577, x529); + fiat_p384_addcarryx_u32(&x603, &x604, x602, x529, x577); uint32_t x605; fiat_p384_uint1 x606; - fiat_p384_addcarryx_u32(&x605, &x606, x604, x579, x531); + fiat_p384_addcarryx_u32(&x605, &x606, x604, x531, x579); uint32_t x607; fiat_p384_uint1 x608; - fiat_p384_addcarryx_u32(&x607, &x608, x606, x581, x533); + fiat_p384_addcarryx_u32(&x607, &x608, x606, x533, x581); uint32_t x609; fiat_p384_uint1 x610; - fiat_p384_addcarryx_u32(&x609, &x610, x608, x583, x535); + fiat_p384_addcarryx_u32(&x609, &x610, x608, x535, x583); uint32_t x611; fiat_p384_uint1 x612; - fiat_p384_addcarryx_u32(&x611, &x612, x610, x585, x537); + fiat_p384_addcarryx_u32(&x611, &x612, x610, x537, x585); uint32_t x613; fiat_p384_uint1 x614; - fiat_p384_addcarryx_u32(&x613, &x614, x612, x587, x539); + fiat_p384_addcarryx_u32(&x613, &x614, x612, x539, x587); uint32_t x615; fiat_p384_uint1 x616; - fiat_p384_addcarryx_u32(&x615, &x616, x614, x589, x541); + fiat_p384_addcarryx_u32(&x615, &x616, x614, x541, x589); uint32_t x617; fiat_p384_uint1 x618; - fiat_p384_addcarryx_u32(&x617, &x618, x616, x591, x543); + fiat_p384_addcarryx_u32(&x617, &x618, x616, x543, x591); uint32_t x619; fiat_p384_uint1 x620; - fiat_p384_addcarryx_u32(&x619, &x620, x618, x593, x545); + fiat_p384_addcarryx_u32(&x619, &x620, x618, x545, x593); uint32_t x621; uint32_t x622; fiat_p384_mulx_u32(&x621, &x622, x595, UINT32_C(0xffffffff)); @@ -3656,73 +3656,73 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x639, &x640, x595, UINT32_C(0xffffffff)); uint32_t x641; fiat_p384_uint1 x642; - fiat_p384_addcarryx_u32(&x641, &x642, 0x0, x635, x638); + fiat_p384_addcarryx_u32(&x641, &x642, 0x0, x638, x635); uint32_t x643; fiat_p384_uint1 x644; - fiat_p384_addcarryx_u32(&x643, &x644, x642, x633, x636); + fiat_p384_addcarryx_u32(&x643, &x644, x642, x636, x633); uint32_t x645; fiat_p384_uint1 x646; - fiat_p384_addcarryx_u32(&x645, &x646, x644, x631, x634); + fiat_p384_addcarryx_u32(&x645, &x646, x644, x634, x631); uint32_t x647; fiat_p384_uint1 x648; - fiat_p384_addcarryx_u32(&x647, &x648, x646, x629, x632); + fiat_p384_addcarryx_u32(&x647, &x648, x646, x632, x629); uint32_t x649; fiat_p384_uint1 x650; - fiat_p384_addcarryx_u32(&x649, &x650, x648, x627, x630); + fiat_p384_addcarryx_u32(&x649, &x650, x648, x630, x627); uint32_t x651; fiat_p384_uint1 x652; - fiat_p384_addcarryx_u32(&x651, &x652, x650, x625, x628); + fiat_p384_addcarryx_u32(&x651, &x652, x650, x628, x625); uint32_t x653; fiat_p384_uint1 x654; - fiat_p384_addcarryx_u32(&x653, &x654, x652, x623, x626); + fiat_p384_addcarryx_u32(&x653, &x654, x652, x626, x623); uint32_t x655; fiat_p384_uint1 x656; - fiat_p384_addcarryx_u32(&x655, &x656, x654, x621, x624); + fiat_p384_addcarryx_u32(&x655, &x656, x654, x624, x621); uint32_t x657; fiat_p384_uint1 x658; - fiat_p384_addcarryx_u32(&x657, &x658, x656, 0x0, x622); + fiat_p384_addcarryx_u32(&x657, &x658, x656, x622, 0x0); uint32_t x659; fiat_p384_uint1 x660; - fiat_p384_addcarryx_u32(&x659, &x660, 0x0, x639, x595); + fiat_p384_addcarryx_u32(&x659, &x660, 0x0, x595, x639); uint32_t x661; fiat_p384_uint1 x662; - fiat_p384_addcarryx_u32(&x661, &x662, x660, x640, x597); + fiat_p384_addcarryx_u32(&x661, &x662, x660, x597, x640); uint32_t x663; fiat_p384_uint1 x664; - fiat_p384_addcarryx_u32(&x663, &x664, x662, 0x0, x599); + fiat_p384_addcarryx_u32(&x663, &x664, x662, x599, 0x0); uint32_t x665; fiat_p384_uint1 x666; - fiat_p384_addcarryx_u32(&x665, &x666, x664, x637, x601); + fiat_p384_addcarryx_u32(&x665, &x666, x664, x601, x637); uint32_t x667; fiat_p384_uint1 x668; - fiat_p384_addcarryx_u32(&x667, &x668, x666, x641, x603); + fiat_p384_addcarryx_u32(&x667, &x668, x666, x603, x641); uint32_t x669; fiat_p384_uint1 x670; - fiat_p384_addcarryx_u32(&x669, &x670, x668, x643, x605); + fiat_p384_addcarryx_u32(&x669, &x670, x668, x605, x643); uint32_t x671; fiat_p384_uint1 x672; - fiat_p384_addcarryx_u32(&x671, &x672, x670, x645, x607); + fiat_p384_addcarryx_u32(&x671, &x672, x670, x607, x645); uint32_t x673; fiat_p384_uint1 x674; - fiat_p384_addcarryx_u32(&x673, &x674, x672, x647, x609); + fiat_p384_addcarryx_u32(&x673, &x674, x672, x609, x647); uint32_t x675; fiat_p384_uint1 x676; - fiat_p384_addcarryx_u32(&x675, &x676, x674, x649, x611); + fiat_p384_addcarryx_u32(&x675, &x676, x674, x611, x649); uint32_t x677; fiat_p384_uint1 x678; - fiat_p384_addcarryx_u32(&x677, &x678, x676, x651, x613); + fiat_p384_addcarryx_u32(&x677, &x678, x676, x613, x651); uint32_t x679; fiat_p384_uint1 x680; - fiat_p384_addcarryx_u32(&x679, &x680, x678, x653, x615); + fiat_p384_addcarryx_u32(&x679, &x680, x678, x615, x653); uint32_t x681; fiat_p384_uint1 x682; - fiat_p384_addcarryx_u32(&x681, &x682, x680, x655, x617); + fiat_p384_addcarryx_u32(&x681, &x682, x680, x617, x655); uint32_t x683; fiat_p384_uint1 x684; - fiat_p384_addcarryx_u32(&x683, &x684, x682, x657, x619); + fiat_p384_addcarryx_u32(&x683, &x684, x682, x619, x657); uint32_t x685; fiat_p384_uint1 x686; - fiat_p384_addcarryx_u32(&x685, &x686, x684, 0x0, x620); + fiat_p384_addcarryx_u32(&x685, &x686, x684, x620, 0x0); uint32_t x687; uint32_t x688; fiat_p384_mulx_u32(&x687, &x688, x5, (arg1[11])); @@ -3761,79 +3761,79 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x709, &x710, x5, (arg1[0])); uint32_t x711; fiat_p384_uint1 x712; - fiat_p384_addcarryx_u32(&x711, &x712, 0x0, x707, x710); + fiat_p384_addcarryx_u32(&x711, &x712, 0x0, x710, x707); uint32_t x713; fiat_p384_uint1 x714; - fiat_p384_addcarryx_u32(&x713, &x714, x712, x705, x708); + fiat_p384_addcarryx_u32(&x713, &x714, x712, x708, x705); uint32_t x715; fiat_p384_uint1 x716; - fiat_p384_addcarryx_u32(&x715, &x716, x714, x703, x706); + fiat_p384_addcarryx_u32(&x715, &x716, x714, x706, x703); uint32_t x717; fiat_p384_uint1 x718; - fiat_p384_addcarryx_u32(&x717, &x718, x716, x701, x704); + fiat_p384_addcarryx_u32(&x717, &x718, x716, x704, x701); uint32_t x719; fiat_p384_uint1 x720; - fiat_p384_addcarryx_u32(&x719, &x720, x718, x699, x702); + fiat_p384_addcarryx_u32(&x719, &x720, x718, x702, x699); uint32_t x721; fiat_p384_uint1 x722; - fiat_p384_addcarryx_u32(&x721, &x722, x720, x697, x700); + fiat_p384_addcarryx_u32(&x721, &x722, x720, x700, x697); uint32_t x723; fiat_p384_uint1 x724; - fiat_p384_addcarryx_u32(&x723, &x724, x722, x695, x698); + fiat_p384_addcarryx_u32(&x723, &x724, x722, x698, x695); uint32_t x725; fiat_p384_uint1 x726; - fiat_p384_addcarryx_u32(&x725, &x726, x724, x693, x696); + fiat_p384_addcarryx_u32(&x725, &x726, x724, x696, x693); uint32_t x727; fiat_p384_uint1 x728; - fiat_p384_addcarryx_u32(&x727, &x728, x726, x691, x694); + fiat_p384_addcarryx_u32(&x727, &x728, x726, x694, x691); uint32_t x729; fiat_p384_uint1 x730; - fiat_p384_addcarryx_u32(&x729, &x730, x728, x689, x692); + fiat_p384_addcarryx_u32(&x729, &x730, x728, x692, x689); uint32_t x731; fiat_p384_uint1 x732; - fiat_p384_addcarryx_u32(&x731, &x732, x730, x687, x690); + fiat_p384_addcarryx_u32(&x731, &x732, x730, x690, x687); uint32_t x733; fiat_p384_uint1 x734; - fiat_p384_addcarryx_u32(&x733, &x734, x732, 0x0, x688); + fiat_p384_addcarryx_u32(&x733, &x734, x732, x688, 0x0); uint32_t x735; fiat_p384_uint1 x736; - fiat_p384_addcarryx_u32(&x735, &x736, 0x0, x709, x661); + fiat_p384_addcarryx_u32(&x735, &x736, 0x0, x661, x709); uint32_t x737; fiat_p384_uint1 x738; - fiat_p384_addcarryx_u32(&x737, &x738, x736, x711, x663); + fiat_p384_addcarryx_u32(&x737, &x738, x736, x663, x711); uint32_t x739; fiat_p384_uint1 x740; - fiat_p384_addcarryx_u32(&x739, &x740, x738, x713, x665); + fiat_p384_addcarryx_u32(&x739, &x740, x738, x665, x713); uint32_t x741; fiat_p384_uint1 x742; - fiat_p384_addcarryx_u32(&x741, &x742, x740, x715, x667); + fiat_p384_addcarryx_u32(&x741, &x742, x740, x667, x715); uint32_t x743; fiat_p384_uint1 x744; - fiat_p384_addcarryx_u32(&x743, &x744, x742, x717, x669); + fiat_p384_addcarryx_u32(&x743, &x744, x742, x669, x717); uint32_t x745; fiat_p384_uint1 x746; - fiat_p384_addcarryx_u32(&x745, &x746, x744, x719, x671); + fiat_p384_addcarryx_u32(&x745, &x746, x744, x671, x719); uint32_t x747; fiat_p384_uint1 x748; - fiat_p384_addcarryx_u32(&x747, &x748, x746, x721, x673); + fiat_p384_addcarryx_u32(&x747, &x748, x746, x673, x721); uint32_t x749; fiat_p384_uint1 x750; - fiat_p384_addcarryx_u32(&x749, &x750, x748, x723, x675); + fiat_p384_addcarryx_u32(&x749, &x750, x748, x675, x723); uint32_t x751; fiat_p384_uint1 x752; - fiat_p384_addcarryx_u32(&x751, &x752, x750, x725, x677); + fiat_p384_addcarryx_u32(&x751, &x752, x750, x677, x725); uint32_t x753; fiat_p384_uint1 x754; - fiat_p384_addcarryx_u32(&x753, &x754, x752, x727, x679); + fiat_p384_addcarryx_u32(&x753, &x754, x752, x679, x727); uint32_t x755; fiat_p384_uint1 x756; - fiat_p384_addcarryx_u32(&x755, &x756, x754, x729, x681); + fiat_p384_addcarryx_u32(&x755, &x756, x754, x681, x729); uint32_t x757; fiat_p384_uint1 x758; - fiat_p384_addcarryx_u32(&x757, &x758, x756, x731, x683); + fiat_p384_addcarryx_u32(&x757, &x758, x756, x683, x731); uint32_t x759; fiat_p384_uint1 x760; - fiat_p384_addcarryx_u32(&x759, &x760, x758, x733, x685); + fiat_p384_addcarryx_u32(&x759, &x760, x758, x685, x733); uint32_t x761; uint32_t x762; fiat_p384_mulx_u32(&x761, &x762, x735, UINT32_C(0xffffffff)); @@ -3866,73 +3866,73 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x779, &x780, x735, UINT32_C(0xffffffff)); uint32_t x781; fiat_p384_uint1 x782; - fiat_p384_addcarryx_u32(&x781, &x782, 0x0, x775, x778); + fiat_p384_addcarryx_u32(&x781, &x782, 0x0, x778, x775); uint32_t x783; fiat_p384_uint1 x784; - fiat_p384_addcarryx_u32(&x783, &x784, x782, x773, x776); + fiat_p384_addcarryx_u32(&x783, &x784, x782, x776, x773); uint32_t x785; fiat_p384_uint1 x786; - fiat_p384_addcarryx_u32(&x785, &x786, x784, x771, x774); + fiat_p384_addcarryx_u32(&x785, &x786, x784, x774, x771); uint32_t x787; fiat_p384_uint1 x788; - fiat_p384_addcarryx_u32(&x787, &x788, x786, x769, x772); + fiat_p384_addcarryx_u32(&x787, &x788, x786, x772, x769); uint32_t x789; fiat_p384_uint1 x790; - fiat_p384_addcarryx_u32(&x789, &x790, x788, x767, x770); + fiat_p384_addcarryx_u32(&x789, &x790, x788, x770, x767); uint32_t x791; fiat_p384_uint1 x792; - fiat_p384_addcarryx_u32(&x791, &x792, x790, x765, x768); + fiat_p384_addcarryx_u32(&x791, &x792, x790, x768, x765); uint32_t x793; fiat_p384_uint1 x794; - fiat_p384_addcarryx_u32(&x793, &x794, x792, x763, x766); + fiat_p384_addcarryx_u32(&x793, &x794, x792, x766, x763); uint32_t x795; fiat_p384_uint1 x796; - fiat_p384_addcarryx_u32(&x795, &x796, x794, x761, x764); + fiat_p384_addcarryx_u32(&x795, &x796, x794, x764, x761); uint32_t x797; fiat_p384_uint1 x798; - fiat_p384_addcarryx_u32(&x797, &x798, x796, 0x0, x762); + fiat_p384_addcarryx_u32(&x797, &x798, x796, x762, 0x0); uint32_t x799; fiat_p384_uint1 x800; - fiat_p384_addcarryx_u32(&x799, &x800, 0x0, x779, x735); + fiat_p384_addcarryx_u32(&x799, &x800, 0x0, x735, x779); uint32_t x801; fiat_p384_uint1 x802; - fiat_p384_addcarryx_u32(&x801, &x802, x800, x780, x737); + fiat_p384_addcarryx_u32(&x801, &x802, x800, x737, x780); uint32_t x803; fiat_p384_uint1 x804; - fiat_p384_addcarryx_u32(&x803, &x804, x802, 0x0, x739); + fiat_p384_addcarryx_u32(&x803, &x804, x802, x739, 0x0); uint32_t x805; fiat_p384_uint1 x806; - fiat_p384_addcarryx_u32(&x805, &x806, x804, x777, x741); + fiat_p384_addcarryx_u32(&x805, &x806, x804, x741, x777); uint32_t x807; fiat_p384_uint1 x808; - fiat_p384_addcarryx_u32(&x807, &x808, x806, x781, x743); + fiat_p384_addcarryx_u32(&x807, &x808, x806, x743, x781); uint32_t x809; fiat_p384_uint1 x810; - fiat_p384_addcarryx_u32(&x809, &x810, x808, x783, x745); + fiat_p384_addcarryx_u32(&x809, &x810, x808, x745, x783); uint32_t x811; fiat_p384_uint1 x812; - fiat_p384_addcarryx_u32(&x811, &x812, x810, x785, x747); + fiat_p384_addcarryx_u32(&x811, &x812, x810, x747, x785); uint32_t x813; fiat_p384_uint1 x814; - fiat_p384_addcarryx_u32(&x813, &x814, x812, x787, x749); + fiat_p384_addcarryx_u32(&x813, &x814, x812, x749, x787); uint32_t x815; fiat_p384_uint1 x816; - fiat_p384_addcarryx_u32(&x815, &x816, x814, x789, x751); + fiat_p384_addcarryx_u32(&x815, &x816, x814, x751, x789); uint32_t x817; fiat_p384_uint1 x818; - fiat_p384_addcarryx_u32(&x817, &x818, x816, x791, x753); + fiat_p384_addcarryx_u32(&x817, &x818, x816, x753, x791); uint32_t x819; fiat_p384_uint1 x820; - fiat_p384_addcarryx_u32(&x819, &x820, x818, x793, x755); + fiat_p384_addcarryx_u32(&x819, &x820, x818, x755, x793); uint32_t x821; fiat_p384_uint1 x822; - fiat_p384_addcarryx_u32(&x821, &x822, x820, x795, x757); + fiat_p384_addcarryx_u32(&x821, &x822, x820, x757, x795); uint32_t x823; fiat_p384_uint1 x824; - fiat_p384_addcarryx_u32(&x823, &x824, x822, x797, x759); + fiat_p384_addcarryx_u32(&x823, &x824, x822, x759, x797); uint32_t x825; fiat_p384_uint1 x826; - fiat_p384_addcarryx_u32(&x825, &x826, x824, 0x0, x760); + fiat_p384_addcarryx_u32(&x825, &x826, x824, x760, 0x0); uint32_t x827; uint32_t x828; fiat_p384_mulx_u32(&x827, &x828, x6, (arg1[11])); @@ -3971,79 +3971,79 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x849, &x850, x6, (arg1[0])); uint32_t x851; fiat_p384_uint1 x852; - fiat_p384_addcarryx_u32(&x851, &x852, 0x0, x847, x850); + fiat_p384_addcarryx_u32(&x851, &x852, 0x0, x850, x847); uint32_t x853; fiat_p384_uint1 x854; - fiat_p384_addcarryx_u32(&x853, &x854, x852, x845, x848); + fiat_p384_addcarryx_u32(&x853, &x854, x852, x848, x845); uint32_t x855; fiat_p384_uint1 x856; - fiat_p384_addcarryx_u32(&x855, &x856, x854, x843, x846); + fiat_p384_addcarryx_u32(&x855, &x856, x854, x846, x843); uint32_t x857; fiat_p384_uint1 x858; - fiat_p384_addcarryx_u32(&x857, &x858, x856, x841, x844); + fiat_p384_addcarryx_u32(&x857, &x858, x856, x844, x841); uint32_t x859; fiat_p384_uint1 x860; - fiat_p384_addcarryx_u32(&x859, &x860, x858, x839, x842); + fiat_p384_addcarryx_u32(&x859, &x860, x858, x842, x839); uint32_t x861; fiat_p384_uint1 x862; - fiat_p384_addcarryx_u32(&x861, &x862, x860, x837, x840); + fiat_p384_addcarryx_u32(&x861, &x862, x860, x840, x837); uint32_t x863; fiat_p384_uint1 x864; - fiat_p384_addcarryx_u32(&x863, &x864, x862, x835, x838); + fiat_p384_addcarryx_u32(&x863, &x864, x862, x838, x835); uint32_t x865; fiat_p384_uint1 x866; - fiat_p384_addcarryx_u32(&x865, &x866, x864, x833, x836); + fiat_p384_addcarryx_u32(&x865, &x866, x864, x836, x833); uint32_t x867; fiat_p384_uint1 x868; - fiat_p384_addcarryx_u32(&x867, &x868, x866, x831, x834); + fiat_p384_addcarryx_u32(&x867, &x868, x866, x834, x831); uint32_t x869; fiat_p384_uint1 x870; - fiat_p384_addcarryx_u32(&x869, &x870, x868, x829, x832); + fiat_p384_addcarryx_u32(&x869, &x870, x868, x832, x829); uint32_t x871; fiat_p384_uint1 x872; - fiat_p384_addcarryx_u32(&x871, &x872, x870, x827, x830); + fiat_p384_addcarryx_u32(&x871, &x872, x870, x830, x827); uint32_t x873; fiat_p384_uint1 x874; - fiat_p384_addcarryx_u32(&x873, &x874, x872, 0x0, x828); + fiat_p384_addcarryx_u32(&x873, &x874, x872, x828, 0x0); uint32_t x875; fiat_p384_uint1 x876; - fiat_p384_addcarryx_u32(&x875, &x876, 0x0, x849, x801); + fiat_p384_addcarryx_u32(&x875, &x876, 0x0, x801, x849); uint32_t x877; fiat_p384_uint1 x878; - fiat_p384_addcarryx_u32(&x877, &x878, x876, x851, x803); + fiat_p384_addcarryx_u32(&x877, &x878, x876, x803, x851); uint32_t x879; fiat_p384_uint1 x880; - fiat_p384_addcarryx_u32(&x879, &x880, x878, x853, x805); + fiat_p384_addcarryx_u32(&x879, &x880, x878, x805, x853); uint32_t x881; fiat_p384_uint1 x882; - fiat_p384_addcarryx_u32(&x881, &x882, x880, x855, x807); + fiat_p384_addcarryx_u32(&x881, &x882, x880, x807, x855); uint32_t x883; fiat_p384_uint1 x884; - fiat_p384_addcarryx_u32(&x883, &x884, x882, x857, x809); + fiat_p384_addcarryx_u32(&x883, &x884, x882, x809, x857); uint32_t x885; fiat_p384_uint1 x886; - fiat_p384_addcarryx_u32(&x885, &x886, x884, x859, x811); + fiat_p384_addcarryx_u32(&x885, &x886, x884, x811, x859); uint32_t x887; fiat_p384_uint1 x888; - fiat_p384_addcarryx_u32(&x887, &x888, x886, x861, x813); + fiat_p384_addcarryx_u32(&x887, &x888, x886, x813, x861); uint32_t x889; fiat_p384_uint1 x890; - fiat_p384_addcarryx_u32(&x889, &x890, x888, x863, x815); + fiat_p384_addcarryx_u32(&x889, &x890, x888, x815, x863); uint32_t x891; fiat_p384_uint1 x892; - fiat_p384_addcarryx_u32(&x891, &x892, x890, x865, x817); + fiat_p384_addcarryx_u32(&x891, &x892, x890, x817, x865); uint32_t x893; fiat_p384_uint1 x894; - fiat_p384_addcarryx_u32(&x893, &x894, x892, x867, x819); + fiat_p384_addcarryx_u32(&x893, &x894, x892, x819, x867); uint32_t x895; fiat_p384_uint1 x896; - fiat_p384_addcarryx_u32(&x895, &x896, x894, x869, x821); + fiat_p384_addcarryx_u32(&x895, &x896, x894, x821, x869); uint32_t x897; fiat_p384_uint1 x898; - fiat_p384_addcarryx_u32(&x897, &x898, x896, x871, x823); + fiat_p384_addcarryx_u32(&x897, &x898, x896, x823, x871); uint32_t x899; fiat_p384_uint1 x900; - fiat_p384_addcarryx_u32(&x899, &x900, x898, x873, x825); + fiat_p384_addcarryx_u32(&x899, &x900, x898, x825, x873); uint32_t x901; uint32_t x902; fiat_p384_mulx_u32(&x901, &x902, x875, UINT32_C(0xffffffff)); @@ -4076,73 +4076,73 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x919, &x920, x875, UINT32_C(0xffffffff)); uint32_t x921; fiat_p384_uint1 x922; - fiat_p384_addcarryx_u32(&x921, &x922, 0x0, x915, x918); + fiat_p384_addcarryx_u32(&x921, &x922, 0x0, x918, x915); uint32_t x923; fiat_p384_uint1 x924; - fiat_p384_addcarryx_u32(&x923, &x924, x922, x913, x916); + fiat_p384_addcarryx_u32(&x923, &x924, x922, x916, x913); uint32_t x925; fiat_p384_uint1 x926; - fiat_p384_addcarryx_u32(&x925, &x926, x924, x911, x914); + fiat_p384_addcarryx_u32(&x925, &x926, x924, x914, x911); uint32_t x927; fiat_p384_uint1 x928; - fiat_p384_addcarryx_u32(&x927, &x928, x926, x909, x912); + fiat_p384_addcarryx_u32(&x927, &x928, x926, x912, x909); uint32_t x929; fiat_p384_uint1 x930; - fiat_p384_addcarryx_u32(&x929, &x930, x928, x907, x910); + fiat_p384_addcarryx_u32(&x929, &x930, x928, x910, x907); uint32_t x931; fiat_p384_uint1 x932; - fiat_p384_addcarryx_u32(&x931, &x932, x930, x905, x908); + fiat_p384_addcarryx_u32(&x931, &x932, x930, x908, x905); uint32_t x933; fiat_p384_uint1 x934; - fiat_p384_addcarryx_u32(&x933, &x934, x932, x903, x906); + fiat_p384_addcarryx_u32(&x933, &x934, x932, x906, x903); uint32_t x935; fiat_p384_uint1 x936; - fiat_p384_addcarryx_u32(&x935, &x936, x934, x901, x904); + fiat_p384_addcarryx_u32(&x935, &x936, x934, x904, x901); uint32_t x937; fiat_p384_uint1 x938; - fiat_p384_addcarryx_u32(&x937, &x938, x936, 0x0, x902); + fiat_p384_addcarryx_u32(&x937, &x938, x936, x902, 0x0); uint32_t x939; fiat_p384_uint1 x940; - fiat_p384_addcarryx_u32(&x939, &x940, 0x0, x919, x875); + fiat_p384_addcarryx_u32(&x939, &x940, 0x0, x875, x919); uint32_t x941; fiat_p384_uint1 x942; - fiat_p384_addcarryx_u32(&x941, &x942, x940, x920, x877); + fiat_p384_addcarryx_u32(&x941, &x942, x940, x877, x920); uint32_t x943; fiat_p384_uint1 x944; - fiat_p384_addcarryx_u32(&x943, &x944, x942, 0x0, x879); + fiat_p384_addcarryx_u32(&x943, &x944, x942, x879, 0x0); uint32_t x945; fiat_p384_uint1 x946; - fiat_p384_addcarryx_u32(&x945, &x946, x944, x917, x881); + fiat_p384_addcarryx_u32(&x945, &x946, x944, x881, x917); uint32_t x947; fiat_p384_uint1 x948; - fiat_p384_addcarryx_u32(&x947, &x948, x946, x921, x883); + fiat_p384_addcarryx_u32(&x947, &x948, x946, x883, x921); uint32_t x949; fiat_p384_uint1 x950; - fiat_p384_addcarryx_u32(&x949, &x950, x948, x923, x885); + fiat_p384_addcarryx_u32(&x949, &x950, x948, x885, x923); uint32_t x951; fiat_p384_uint1 x952; - fiat_p384_addcarryx_u32(&x951, &x952, x950, x925, x887); + fiat_p384_addcarryx_u32(&x951, &x952, x950, x887, x925); uint32_t x953; fiat_p384_uint1 x954; - fiat_p384_addcarryx_u32(&x953, &x954, x952, x927, x889); + fiat_p384_addcarryx_u32(&x953, &x954, x952, x889, x927); uint32_t x955; fiat_p384_uint1 x956; - fiat_p384_addcarryx_u32(&x955, &x956, x954, x929, x891); + fiat_p384_addcarryx_u32(&x955, &x956, x954, x891, x929); uint32_t x957; fiat_p384_uint1 x958; - fiat_p384_addcarryx_u32(&x957, &x958, x956, x931, x893); + fiat_p384_addcarryx_u32(&x957, &x958, x956, x893, x931); uint32_t x959; fiat_p384_uint1 x960; - fiat_p384_addcarryx_u32(&x959, &x960, x958, x933, x895); + fiat_p384_addcarryx_u32(&x959, &x960, x958, x895, x933); uint32_t x961; fiat_p384_uint1 x962; - fiat_p384_addcarryx_u32(&x961, &x962, x960, x935, x897); + fiat_p384_addcarryx_u32(&x961, &x962, x960, x897, x935); uint32_t x963; fiat_p384_uint1 x964; - fiat_p384_addcarryx_u32(&x963, &x964, x962, x937, x899); + fiat_p384_addcarryx_u32(&x963, &x964, x962, x899, x937); uint32_t x965; fiat_p384_uint1 x966; - fiat_p384_addcarryx_u32(&x965, &x966, x964, 0x0, x900); + fiat_p384_addcarryx_u32(&x965, &x966, x964, x900, 0x0); uint32_t x967; uint32_t x968; fiat_p384_mulx_u32(&x967, &x968, x7, (arg1[11])); @@ -4181,79 +4181,79 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x989, &x990, x7, (arg1[0])); uint32_t x991; fiat_p384_uint1 x992; - fiat_p384_addcarryx_u32(&x991, &x992, 0x0, x987, x990); + fiat_p384_addcarryx_u32(&x991, &x992, 0x0, x990, x987); uint32_t x993; fiat_p384_uint1 x994; - fiat_p384_addcarryx_u32(&x993, &x994, x992, x985, x988); + fiat_p384_addcarryx_u32(&x993, &x994, x992, x988, x985); uint32_t x995; fiat_p384_uint1 x996; - fiat_p384_addcarryx_u32(&x995, &x996, x994, x983, x986); + fiat_p384_addcarryx_u32(&x995, &x996, x994, x986, x983); uint32_t x997; fiat_p384_uint1 x998; - fiat_p384_addcarryx_u32(&x997, &x998, x996, x981, x984); + fiat_p384_addcarryx_u32(&x997, &x998, x996, x984, x981); uint32_t x999; fiat_p384_uint1 x1000; - fiat_p384_addcarryx_u32(&x999, &x1000, x998, x979, x982); + fiat_p384_addcarryx_u32(&x999, &x1000, x998, x982, x979); uint32_t x1001; fiat_p384_uint1 x1002; - fiat_p384_addcarryx_u32(&x1001, &x1002, x1000, x977, x980); + fiat_p384_addcarryx_u32(&x1001, &x1002, x1000, x980, x977); uint32_t x1003; fiat_p384_uint1 x1004; - fiat_p384_addcarryx_u32(&x1003, &x1004, x1002, x975, x978); + fiat_p384_addcarryx_u32(&x1003, &x1004, x1002, x978, x975); uint32_t x1005; fiat_p384_uint1 x1006; - fiat_p384_addcarryx_u32(&x1005, &x1006, x1004, x973, x976); + fiat_p384_addcarryx_u32(&x1005, &x1006, x1004, x976, x973); uint32_t x1007; fiat_p384_uint1 x1008; - fiat_p384_addcarryx_u32(&x1007, &x1008, x1006, x971, x974); + fiat_p384_addcarryx_u32(&x1007, &x1008, x1006, x974, x971); uint32_t x1009; fiat_p384_uint1 x1010; - fiat_p384_addcarryx_u32(&x1009, &x1010, x1008, x969, x972); + fiat_p384_addcarryx_u32(&x1009, &x1010, x1008, x972, x969); uint32_t x1011; fiat_p384_uint1 x1012; - fiat_p384_addcarryx_u32(&x1011, &x1012, x1010, x967, x970); + fiat_p384_addcarryx_u32(&x1011, &x1012, x1010, x970, x967); uint32_t x1013; fiat_p384_uint1 x1014; - fiat_p384_addcarryx_u32(&x1013, &x1014, x1012, 0x0, x968); + fiat_p384_addcarryx_u32(&x1013, &x1014, x1012, x968, 0x0); uint32_t x1015; fiat_p384_uint1 x1016; - fiat_p384_addcarryx_u32(&x1015, &x1016, 0x0, x989, x941); + fiat_p384_addcarryx_u32(&x1015, &x1016, 0x0, x941, x989); uint32_t x1017; fiat_p384_uint1 x1018; - fiat_p384_addcarryx_u32(&x1017, &x1018, x1016, x991, x943); + fiat_p384_addcarryx_u32(&x1017, &x1018, x1016, x943, x991); uint32_t x1019; fiat_p384_uint1 x1020; - fiat_p384_addcarryx_u32(&x1019, &x1020, x1018, x993, x945); + fiat_p384_addcarryx_u32(&x1019, &x1020, x1018, x945, x993); uint32_t x1021; fiat_p384_uint1 x1022; - fiat_p384_addcarryx_u32(&x1021, &x1022, x1020, x995, x947); + fiat_p384_addcarryx_u32(&x1021, &x1022, x1020, x947, x995); uint32_t x1023; fiat_p384_uint1 x1024; - fiat_p384_addcarryx_u32(&x1023, &x1024, x1022, x997, x949); + fiat_p384_addcarryx_u32(&x1023, &x1024, x1022, x949, x997); uint32_t x1025; fiat_p384_uint1 x1026; - fiat_p384_addcarryx_u32(&x1025, &x1026, x1024, x999, x951); + fiat_p384_addcarryx_u32(&x1025, &x1026, x1024, x951, x999); uint32_t x1027; fiat_p384_uint1 x1028; - fiat_p384_addcarryx_u32(&x1027, &x1028, x1026, x1001, x953); + fiat_p384_addcarryx_u32(&x1027, &x1028, x1026, x953, x1001); uint32_t x1029; fiat_p384_uint1 x1030; - fiat_p384_addcarryx_u32(&x1029, &x1030, x1028, x1003, x955); + fiat_p384_addcarryx_u32(&x1029, &x1030, x1028, x955, x1003); uint32_t x1031; fiat_p384_uint1 x1032; - fiat_p384_addcarryx_u32(&x1031, &x1032, x1030, x1005, x957); + fiat_p384_addcarryx_u32(&x1031, &x1032, x1030, x957, x1005); uint32_t x1033; fiat_p384_uint1 x1034; - fiat_p384_addcarryx_u32(&x1033, &x1034, x1032, x1007, x959); + fiat_p384_addcarryx_u32(&x1033, &x1034, x1032, x959, x1007); uint32_t x1035; fiat_p384_uint1 x1036; - fiat_p384_addcarryx_u32(&x1035, &x1036, x1034, x1009, x961); + fiat_p384_addcarryx_u32(&x1035, &x1036, x1034, x961, x1009); uint32_t x1037; fiat_p384_uint1 x1038; - fiat_p384_addcarryx_u32(&x1037, &x1038, x1036, x1011, x963); + fiat_p384_addcarryx_u32(&x1037, &x1038, x1036, x963, x1011); uint32_t x1039; fiat_p384_uint1 x1040; - fiat_p384_addcarryx_u32(&x1039, &x1040, x1038, x1013, x965); + fiat_p384_addcarryx_u32(&x1039, &x1040, x1038, x965, x1013); uint32_t x1041; uint32_t x1042; fiat_p384_mulx_u32(&x1041, &x1042, x1015, UINT32_C(0xffffffff)); @@ -4286,73 +4286,73 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x1059, &x1060, x1015, UINT32_C(0xffffffff)); uint32_t x1061; fiat_p384_uint1 x1062; - fiat_p384_addcarryx_u32(&x1061, &x1062, 0x0, x1055, x1058); + fiat_p384_addcarryx_u32(&x1061, &x1062, 0x0, x1058, x1055); uint32_t x1063; fiat_p384_uint1 x1064; - fiat_p384_addcarryx_u32(&x1063, &x1064, x1062, x1053, x1056); + fiat_p384_addcarryx_u32(&x1063, &x1064, x1062, x1056, x1053); uint32_t x1065; fiat_p384_uint1 x1066; - fiat_p384_addcarryx_u32(&x1065, &x1066, x1064, x1051, x1054); + fiat_p384_addcarryx_u32(&x1065, &x1066, x1064, x1054, x1051); uint32_t x1067; fiat_p384_uint1 x1068; - fiat_p384_addcarryx_u32(&x1067, &x1068, x1066, x1049, x1052); + fiat_p384_addcarryx_u32(&x1067, &x1068, x1066, x1052, x1049); uint32_t x1069; fiat_p384_uint1 x1070; - fiat_p384_addcarryx_u32(&x1069, &x1070, x1068, x1047, x1050); + fiat_p384_addcarryx_u32(&x1069, &x1070, x1068, x1050, x1047); uint32_t x1071; fiat_p384_uint1 x1072; - fiat_p384_addcarryx_u32(&x1071, &x1072, x1070, x1045, x1048); + fiat_p384_addcarryx_u32(&x1071, &x1072, x1070, x1048, x1045); uint32_t x1073; fiat_p384_uint1 x1074; - fiat_p384_addcarryx_u32(&x1073, &x1074, x1072, x1043, x1046); + fiat_p384_addcarryx_u32(&x1073, &x1074, x1072, x1046, x1043); uint32_t x1075; fiat_p384_uint1 x1076; - fiat_p384_addcarryx_u32(&x1075, &x1076, x1074, x1041, x1044); + fiat_p384_addcarryx_u32(&x1075, &x1076, x1074, x1044, x1041); uint32_t x1077; fiat_p384_uint1 x1078; - fiat_p384_addcarryx_u32(&x1077, &x1078, x1076, 0x0, x1042); + fiat_p384_addcarryx_u32(&x1077, &x1078, x1076, x1042, 0x0); uint32_t x1079; fiat_p384_uint1 x1080; - fiat_p384_addcarryx_u32(&x1079, &x1080, 0x0, x1059, x1015); + fiat_p384_addcarryx_u32(&x1079, &x1080, 0x0, x1015, x1059); uint32_t x1081; fiat_p384_uint1 x1082; - fiat_p384_addcarryx_u32(&x1081, &x1082, x1080, x1060, x1017); + fiat_p384_addcarryx_u32(&x1081, &x1082, x1080, x1017, x1060); uint32_t x1083; fiat_p384_uint1 x1084; - fiat_p384_addcarryx_u32(&x1083, &x1084, x1082, 0x0, x1019); + fiat_p384_addcarryx_u32(&x1083, &x1084, x1082, x1019, 0x0); uint32_t x1085; fiat_p384_uint1 x1086; - fiat_p384_addcarryx_u32(&x1085, &x1086, x1084, x1057, x1021); + fiat_p384_addcarryx_u32(&x1085, &x1086, x1084, x1021, x1057); uint32_t x1087; fiat_p384_uint1 x1088; - fiat_p384_addcarryx_u32(&x1087, &x1088, x1086, x1061, x1023); + fiat_p384_addcarryx_u32(&x1087, &x1088, x1086, x1023, x1061); uint32_t x1089; fiat_p384_uint1 x1090; - fiat_p384_addcarryx_u32(&x1089, &x1090, x1088, x1063, x1025); + fiat_p384_addcarryx_u32(&x1089, &x1090, x1088, x1025, x1063); uint32_t x1091; fiat_p384_uint1 x1092; - fiat_p384_addcarryx_u32(&x1091, &x1092, x1090, x1065, x1027); + fiat_p384_addcarryx_u32(&x1091, &x1092, x1090, x1027, x1065); uint32_t x1093; fiat_p384_uint1 x1094; - fiat_p384_addcarryx_u32(&x1093, &x1094, x1092, x1067, x1029); + fiat_p384_addcarryx_u32(&x1093, &x1094, x1092, x1029, x1067); uint32_t x1095; fiat_p384_uint1 x1096; - fiat_p384_addcarryx_u32(&x1095, &x1096, x1094, x1069, x1031); + fiat_p384_addcarryx_u32(&x1095, &x1096, x1094, x1031, x1069); uint32_t x1097; fiat_p384_uint1 x1098; - fiat_p384_addcarryx_u32(&x1097, &x1098, x1096, x1071, x1033); + fiat_p384_addcarryx_u32(&x1097, &x1098, x1096, x1033, x1071); uint32_t x1099; fiat_p384_uint1 x1100; - fiat_p384_addcarryx_u32(&x1099, &x1100, x1098, x1073, x1035); + fiat_p384_addcarryx_u32(&x1099, &x1100, x1098, x1035, x1073); uint32_t x1101; fiat_p384_uint1 x1102; - fiat_p384_addcarryx_u32(&x1101, &x1102, x1100, x1075, x1037); + fiat_p384_addcarryx_u32(&x1101, &x1102, x1100, x1037, x1075); uint32_t x1103; fiat_p384_uint1 x1104; - fiat_p384_addcarryx_u32(&x1103, &x1104, x1102, x1077, x1039); + fiat_p384_addcarryx_u32(&x1103, &x1104, x1102, x1039, x1077); uint32_t x1105; fiat_p384_uint1 x1106; - fiat_p384_addcarryx_u32(&x1105, &x1106, x1104, 0x0, x1040); + fiat_p384_addcarryx_u32(&x1105, &x1106, x1104, x1040, 0x0); uint32_t x1107; uint32_t x1108; fiat_p384_mulx_u32(&x1107, &x1108, x8, (arg1[11])); @@ -4391,79 +4391,79 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x1129, &x1130, x8, (arg1[0])); uint32_t x1131; fiat_p384_uint1 x1132; - fiat_p384_addcarryx_u32(&x1131, &x1132, 0x0, x1127, x1130); + fiat_p384_addcarryx_u32(&x1131, &x1132, 0x0, x1130, x1127); uint32_t x1133; fiat_p384_uint1 x1134; - fiat_p384_addcarryx_u32(&x1133, &x1134, x1132, x1125, x1128); + fiat_p384_addcarryx_u32(&x1133, &x1134, x1132, x1128, x1125); uint32_t x1135; fiat_p384_uint1 x1136; - fiat_p384_addcarryx_u32(&x1135, &x1136, x1134, x1123, x1126); + fiat_p384_addcarryx_u32(&x1135, &x1136, x1134, x1126, x1123); uint32_t x1137; fiat_p384_uint1 x1138; - fiat_p384_addcarryx_u32(&x1137, &x1138, x1136, x1121, x1124); + fiat_p384_addcarryx_u32(&x1137, &x1138, x1136, x1124, x1121); uint32_t x1139; fiat_p384_uint1 x1140; - fiat_p384_addcarryx_u32(&x1139, &x1140, x1138, x1119, x1122); + fiat_p384_addcarryx_u32(&x1139, &x1140, x1138, x1122, x1119); uint32_t x1141; fiat_p384_uint1 x1142; - fiat_p384_addcarryx_u32(&x1141, &x1142, x1140, x1117, x1120); + fiat_p384_addcarryx_u32(&x1141, &x1142, x1140, x1120, x1117); uint32_t x1143; fiat_p384_uint1 x1144; - fiat_p384_addcarryx_u32(&x1143, &x1144, x1142, x1115, x1118); + fiat_p384_addcarryx_u32(&x1143, &x1144, x1142, x1118, x1115); uint32_t x1145; fiat_p384_uint1 x1146; - fiat_p384_addcarryx_u32(&x1145, &x1146, x1144, x1113, x1116); + fiat_p384_addcarryx_u32(&x1145, &x1146, x1144, x1116, x1113); uint32_t x1147; fiat_p384_uint1 x1148; - fiat_p384_addcarryx_u32(&x1147, &x1148, x1146, x1111, x1114); + fiat_p384_addcarryx_u32(&x1147, &x1148, x1146, x1114, x1111); uint32_t x1149; fiat_p384_uint1 x1150; - fiat_p384_addcarryx_u32(&x1149, &x1150, x1148, x1109, x1112); + fiat_p384_addcarryx_u32(&x1149, &x1150, x1148, x1112, x1109); uint32_t x1151; fiat_p384_uint1 x1152; - fiat_p384_addcarryx_u32(&x1151, &x1152, x1150, x1107, x1110); + fiat_p384_addcarryx_u32(&x1151, &x1152, x1150, x1110, x1107); uint32_t x1153; fiat_p384_uint1 x1154; - fiat_p384_addcarryx_u32(&x1153, &x1154, x1152, 0x0, x1108); + fiat_p384_addcarryx_u32(&x1153, &x1154, x1152, x1108, 0x0); uint32_t x1155; fiat_p384_uint1 x1156; - fiat_p384_addcarryx_u32(&x1155, &x1156, 0x0, x1129, x1081); + fiat_p384_addcarryx_u32(&x1155, &x1156, 0x0, x1081, x1129); uint32_t x1157; fiat_p384_uint1 x1158; - fiat_p384_addcarryx_u32(&x1157, &x1158, x1156, x1131, x1083); + fiat_p384_addcarryx_u32(&x1157, &x1158, x1156, x1083, x1131); uint32_t x1159; fiat_p384_uint1 x1160; - fiat_p384_addcarryx_u32(&x1159, &x1160, x1158, x1133, x1085); + fiat_p384_addcarryx_u32(&x1159, &x1160, x1158, x1085, x1133); uint32_t x1161; fiat_p384_uint1 x1162; - fiat_p384_addcarryx_u32(&x1161, &x1162, x1160, x1135, x1087); + fiat_p384_addcarryx_u32(&x1161, &x1162, x1160, x1087, x1135); uint32_t x1163; fiat_p384_uint1 x1164; - fiat_p384_addcarryx_u32(&x1163, &x1164, x1162, x1137, x1089); + fiat_p384_addcarryx_u32(&x1163, &x1164, x1162, x1089, x1137); uint32_t x1165; fiat_p384_uint1 x1166; - fiat_p384_addcarryx_u32(&x1165, &x1166, x1164, x1139, x1091); + fiat_p384_addcarryx_u32(&x1165, &x1166, x1164, x1091, x1139); uint32_t x1167; fiat_p384_uint1 x1168; - fiat_p384_addcarryx_u32(&x1167, &x1168, x1166, x1141, x1093); + fiat_p384_addcarryx_u32(&x1167, &x1168, x1166, x1093, x1141); uint32_t x1169; fiat_p384_uint1 x1170; - fiat_p384_addcarryx_u32(&x1169, &x1170, x1168, x1143, x1095); + fiat_p384_addcarryx_u32(&x1169, &x1170, x1168, x1095, x1143); uint32_t x1171; fiat_p384_uint1 x1172; - fiat_p384_addcarryx_u32(&x1171, &x1172, x1170, x1145, x1097); + fiat_p384_addcarryx_u32(&x1171, &x1172, x1170, x1097, x1145); uint32_t x1173; fiat_p384_uint1 x1174; - fiat_p384_addcarryx_u32(&x1173, &x1174, x1172, x1147, x1099); + fiat_p384_addcarryx_u32(&x1173, &x1174, x1172, x1099, x1147); uint32_t x1175; fiat_p384_uint1 x1176; - fiat_p384_addcarryx_u32(&x1175, &x1176, x1174, x1149, x1101); + fiat_p384_addcarryx_u32(&x1175, &x1176, x1174, x1101, x1149); uint32_t x1177; fiat_p384_uint1 x1178; - fiat_p384_addcarryx_u32(&x1177, &x1178, x1176, x1151, x1103); + fiat_p384_addcarryx_u32(&x1177, &x1178, x1176, x1103, x1151); uint32_t x1179; fiat_p384_uint1 x1180; - fiat_p384_addcarryx_u32(&x1179, &x1180, x1178, x1153, x1105); + fiat_p384_addcarryx_u32(&x1179, &x1180, x1178, x1105, x1153); uint32_t x1181; uint32_t x1182; fiat_p384_mulx_u32(&x1181, &x1182, x1155, UINT32_C(0xffffffff)); @@ -4496,73 +4496,73 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x1199, &x1200, x1155, UINT32_C(0xffffffff)); uint32_t x1201; fiat_p384_uint1 x1202; - fiat_p384_addcarryx_u32(&x1201, &x1202, 0x0, x1195, x1198); + fiat_p384_addcarryx_u32(&x1201, &x1202, 0x0, x1198, x1195); uint32_t x1203; fiat_p384_uint1 x1204; - fiat_p384_addcarryx_u32(&x1203, &x1204, x1202, x1193, x1196); + fiat_p384_addcarryx_u32(&x1203, &x1204, x1202, x1196, x1193); uint32_t x1205; fiat_p384_uint1 x1206; - fiat_p384_addcarryx_u32(&x1205, &x1206, x1204, x1191, x1194); + fiat_p384_addcarryx_u32(&x1205, &x1206, x1204, x1194, x1191); uint32_t x1207; fiat_p384_uint1 x1208; - fiat_p384_addcarryx_u32(&x1207, &x1208, x1206, x1189, x1192); + fiat_p384_addcarryx_u32(&x1207, &x1208, x1206, x1192, x1189); uint32_t x1209; fiat_p384_uint1 x1210; - fiat_p384_addcarryx_u32(&x1209, &x1210, x1208, x1187, x1190); + fiat_p384_addcarryx_u32(&x1209, &x1210, x1208, x1190, x1187); uint32_t x1211; fiat_p384_uint1 x1212; - fiat_p384_addcarryx_u32(&x1211, &x1212, x1210, x1185, x1188); + fiat_p384_addcarryx_u32(&x1211, &x1212, x1210, x1188, x1185); uint32_t x1213; fiat_p384_uint1 x1214; - fiat_p384_addcarryx_u32(&x1213, &x1214, x1212, x1183, x1186); + fiat_p384_addcarryx_u32(&x1213, &x1214, x1212, x1186, x1183); uint32_t x1215; fiat_p384_uint1 x1216; - fiat_p384_addcarryx_u32(&x1215, &x1216, x1214, x1181, x1184); + fiat_p384_addcarryx_u32(&x1215, &x1216, x1214, x1184, x1181); uint32_t x1217; fiat_p384_uint1 x1218; - fiat_p384_addcarryx_u32(&x1217, &x1218, x1216, 0x0, x1182); + fiat_p384_addcarryx_u32(&x1217, &x1218, x1216, x1182, 0x0); uint32_t x1219; fiat_p384_uint1 x1220; - fiat_p384_addcarryx_u32(&x1219, &x1220, 0x0, x1199, x1155); + fiat_p384_addcarryx_u32(&x1219, &x1220, 0x0, x1155, x1199); uint32_t x1221; fiat_p384_uint1 x1222; - fiat_p384_addcarryx_u32(&x1221, &x1222, x1220, x1200, x1157); + fiat_p384_addcarryx_u32(&x1221, &x1222, x1220, x1157, x1200); uint32_t x1223; fiat_p384_uint1 x1224; - fiat_p384_addcarryx_u32(&x1223, &x1224, x1222, 0x0, x1159); + fiat_p384_addcarryx_u32(&x1223, &x1224, x1222, x1159, 0x0); uint32_t x1225; fiat_p384_uint1 x1226; - fiat_p384_addcarryx_u32(&x1225, &x1226, x1224, x1197, x1161); + fiat_p384_addcarryx_u32(&x1225, &x1226, x1224, x1161, x1197); uint32_t x1227; fiat_p384_uint1 x1228; - fiat_p384_addcarryx_u32(&x1227, &x1228, x1226, x1201, x1163); + fiat_p384_addcarryx_u32(&x1227, &x1228, x1226, x1163, x1201); uint32_t x1229; fiat_p384_uint1 x1230; - fiat_p384_addcarryx_u32(&x1229, &x1230, x1228, x1203, x1165); + fiat_p384_addcarryx_u32(&x1229, &x1230, x1228, x1165, x1203); uint32_t x1231; fiat_p384_uint1 x1232; - fiat_p384_addcarryx_u32(&x1231, &x1232, x1230, x1205, x1167); + fiat_p384_addcarryx_u32(&x1231, &x1232, x1230, x1167, x1205); uint32_t x1233; fiat_p384_uint1 x1234; - fiat_p384_addcarryx_u32(&x1233, &x1234, x1232, x1207, x1169); + fiat_p384_addcarryx_u32(&x1233, &x1234, x1232, x1169, x1207); uint32_t x1235; fiat_p384_uint1 x1236; - fiat_p384_addcarryx_u32(&x1235, &x1236, x1234, x1209, x1171); + fiat_p384_addcarryx_u32(&x1235, &x1236, x1234, x1171, x1209); uint32_t x1237; fiat_p384_uint1 x1238; - fiat_p384_addcarryx_u32(&x1237, &x1238, x1236, x1211, x1173); + fiat_p384_addcarryx_u32(&x1237, &x1238, x1236, x1173, x1211); uint32_t x1239; fiat_p384_uint1 x1240; - fiat_p384_addcarryx_u32(&x1239, &x1240, x1238, x1213, x1175); + fiat_p384_addcarryx_u32(&x1239, &x1240, x1238, x1175, x1213); uint32_t x1241; fiat_p384_uint1 x1242; - fiat_p384_addcarryx_u32(&x1241, &x1242, x1240, x1215, x1177); + fiat_p384_addcarryx_u32(&x1241, &x1242, x1240, x1177, x1215); uint32_t x1243; fiat_p384_uint1 x1244; - fiat_p384_addcarryx_u32(&x1243, &x1244, x1242, x1217, x1179); + fiat_p384_addcarryx_u32(&x1243, &x1244, x1242, x1179, x1217); uint32_t x1245; fiat_p384_uint1 x1246; - fiat_p384_addcarryx_u32(&x1245, &x1246, x1244, 0x0, x1180); + fiat_p384_addcarryx_u32(&x1245, &x1246, x1244, x1180, 0x0); uint32_t x1247; uint32_t x1248; fiat_p384_mulx_u32(&x1247, &x1248, x9, (arg1[11])); @@ -4601,79 +4601,79 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x1269, &x1270, x9, (arg1[0])); uint32_t x1271; fiat_p384_uint1 x1272; - fiat_p384_addcarryx_u32(&x1271, &x1272, 0x0, x1267, x1270); + fiat_p384_addcarryx_u32(&x1271, &x1272, 0x0, x1270, x1267); uint32_t x1273; fiat_p384_uint1 x1274; - fiat_p384_addcarryx_u32(&x1273, &x1274, x1272, x1265, x1268); + fiat_p384_addcarryx_u32(&x1273, &x1274, x1272, x1268, x1265); uint32_t x1275; fiat_p384_uint1 x1276; - fiat_p384_addcarryx_u32(&x1275, &x1276, x1274, x1263, x1266); + fiat_p384_addcarryx_u32(&x1275, &x1276, x1274, x1266, x1263); uint32_t x1277; fiat_p384_uint1 x1278; - fiat_p384_addcarryx_u32(&x1277, &x1278, x1276, x1261, x1264); + fiat_p384_addcarryx_u32(&x1277, &x1278, x1276, x1264, x1261); uint32_t x1279; fiat_p384_uint1 x1280; - fiat_p384_addcarryx_u32(&x1279, &x1280, x1278, x1259, x1262); + fiat_p384_addcarryx_u32(&x1279, &x1280, x1278, x1262, x1259); uint32_t x1281; fiat_p384_uint1 x1282; - fiat_p384_addcarryx_u32(&x1281, &x1282, x1280, x1257, x1260); + fiat_p384_addcarryx_u32(&x1281, &x1282, x1280, x1260, x1257); uint32_t x1283; fiat_p384_uint1 x1284; - fiat_p384_addcarryx_u32(&x1283, &x1284, x1282, x1255, x1258); + fiat_p384_addcarryx_u32(&x1283, &x1284, x1282, x1258, x1255); uint32_t x1285; fiat_p384_uint1 x1286; - fiat_p384_addcarryx_u32(&x1285, &x1286, x1284, x1253, x1256); + fiat_p384_addcarryx_u32(&x1285, &x1286, x1284, x1256, x1253); uint32_t x1287; fiat_p384_uint1 x1288; - fiat_p384_addcarryx_u32(&x1287, &x1288, x1286, x1251, x1254); + fiat_p384_addcarryx_u32(&x1287, &x1288, x1286, x1254, x1251); uint32_t x1289; fiat_p384_uint1 x1290; - fiat_p384_addcarryx_u32(&x1289, &x1290, x1288, x1249, x1252); + fiat_p384_addcarryx_u32(&x1289, &x1290, x1288, x1252, x1249); uint32_t x1291; fiat_p384_uint1 x1292; - fiat_p384_addcarryx_u32(&x1291, &x1292, x1290, x1247, x1250); + fiat_p384_addcarryx_u32(&x1291, &x1292, x1290, x1250, x1247); uint32_t x1293; fiat_p384_uint1 x1294; - fiat_p384_addcarryx_u32(&x1293, &x1294, x1292, 0x0, x1248); + fiat_p384_addcarryx_u32(&x1293, &x1294, x1292, x1248, 0x0); uint32_t x1295; fiat_p384_uint1 x1296; - fiat_p384_addcarryx_u32(&x1295, &x1296, 0x0, x1269, x1221); + fiat_p384_addcarryx_u32(&x1295, &x1296, 0x0, x1221, x1269); uint32_t x1297; fiat_p384_uint1 x1298; - fiat_p384_addcarryx_u32(&x1297, &x1298, x1296, x1271, x1223); + fiat_p384_addcarryx_u32(&x1297, &x1298, x1296, x1223, x1271); uint32_t x1299; fiat_p384_uint1 x1300; - fiat_p384_addcarryx_u32(&x1299, &x1300, x1298, x1273, x1225); + fiat_p384_addcarryx_u32(&x1299, &x1300, x1298, x1225, x1273); uint32_t x1301; fiat_p384_uint1 x1302; - fiat_p384_addcarryx_u32(&x1301, &x1302, x1300, x1275, x1227); + fiat_p384_addcarryx_u32(&x1301, &x1302, x1300, x1227, x1275); uint32_t x1303; fiat_p384_uint1 x1304; - fiat_p384_addcarryx_u32(&x1303, &x1304, x1302, x1277, x1229); + fiat_p384_addcarryx_u32(&x1303, &x1304, x1302, x1229, x1277); uint32_t x1305; fiat_p384_uint1 x1306; - fiat_p384_addcarryx_u32(&x1305, &x1306, x1304, x1279, x1231); + fiat_p384_addcarryx_u32(&x1305, &x1306, x1304, x1231, x1279); uint32_t x1307; fiat_p384_uint1 x1308; - fiat_p384_addcarryx_u32(&x1307, &x1308, x1306, x1281, x1233); + fiat_p384_addcarryx_u32(&x1307, &x1308, x1306, x1233, x1281); uint32_t x1309; fiat_p384_uint1 x1310; - fiat_p384_addcarryx_u32(&x1309, &x1310, x1308, x1283, x1235); + fiat_p384_addcarryx_u32(&x1309, &x1310, x1308, x1235, x1283); uint32_t x1311; fiat_p384_uint1 x1312; - fiat_p384_addcarryx_u32(&x1311, &x1312, x1310, x1285, x1237); + fiat_p384_addcarryx_u32(&x1311, &x1312, x1310, x1237, x1285); uint32_t x1313; fiat_p384_uint1 x1314; - fiat_p384_addcarryx_u32(&x1313, &x1314, x1312, x1287, x1239); + fiat_p384_addcarryx_u32(&x1313, &x1314, x1312, x1239, x1287); uint32_t x1315; fiat_p384_uint1 x1316; - fiat_p384_addcarryx_u32(&x1315, &x1316, x1314, x1289, x1241); + fiat_p384_addcarryx_u32(&x1315, &x1316, x1314, x1241, x1289); uint32_t x1317; fiat_p384_uint1 x1318; - fiat_p384_addcarryx_u32(&x1317, &x1318, x1316, x1291, x1243); + fiat_p384_addcarryx_u32(&x1317, &x1318, x1316, x1243, x1291); uint32_t x1319; fiat_p384_uint1 x1320; - fiat_p384_addcarryx_u32(&x1319, &x1320, x1318, x1293, x1245); + fiat_p384_addcarryx_u32(&x1319, &x1320, x1318, x1245, x1293); uint32_t x1321; uint32_t x1322; fiat_p384_mulx_u32(&x1321, &x1322, x1295, UINT32_C(0xffffffff)); @@ -4706,73 +4706,73 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x1339, &x1340, x1295, UINT32_C(0xffffffff)); uint32_t x1341; fiat_p384_uint1 x1342; - fiat_p384_addcarryx_u32(&x1341, &x1342, 0x0, x1335, x1338); + fiat_p384_addcarryx_u32(&x1341, &x1342, 0x0, x1338, x1335); uint32_t x1343; fiat_p384_uint1 x1344; - fiat_p384_addcarryx_u32(&x1343, &x1344, x1342, x1333, x1336); + fiat_p384_addcarryx_u32(&x1343, &x1344, x1342, x1336, x1333); uint32_t x1345; fiat_p384_uint1 x1346; - fiat_p384_addcarryx_u32(&x1345, &x1346, x1344, x1331, x1334); + fiat_p384_addcarryx_u32(&x1345, &x1346, x1344, x1334, x1331); uint32_t x1347; fiat_p384_uint1 x1348; - fiat_p384_addcarryx_u32(&x1347, &x1348, x1346, x1329, x1332); + fiat_p384_addcarryx_u32(&x1347, &x1348, x1346, x1332, x1329); uint32_t x1349; fiat_p384_uint1 x1350; - fiat_p384_addcarryx_u32(&x1349, &x1350, x1348, x1327, x1330); + fiat_p384_addcarryx_u32(&x1349, &x1350, x1348, x1330, x1327); uint32_t x1351; fiat_p384_uint1 x1352; - fiat_p384_addcarryx_u32(&x1351, &x1352, x1350, x1325, x1328); + fiat_p384_addcarryx_u32(&x1351, &x1352, x1350, x1328, x1325); uint32_t x1353; fiat_p384_uint1 x1354; - fiat_p384_addcarryx_u32(&x1353, &x1354, x1352, x1323, x1326); + fiat_p384_addcarryx_u32(&x1353, &x1354, x1352, x1326, x1323); uint32_t x1355; fiat_p384_uint1 x1356; - fiat_p384_addcarryx_u32(&x1355, &x1356, x1354, x1321, x1324); + fiat_p384_addcarryx_u32(&x1355, &x1356, x1354, x1324, x1321); uint32_t x1357; fiat_p384_uint1 x1358; - fiat_p384_addcarryx_u32(&x1357, &x1358, x1356, 0x0, x1322); + fiat_p384_addcarryx_u32(&x1357, &x1358, x1356, x1322, 0x0); uint32_t x1359; fiat_p384_uint1 x1360; - fiat_p384_addcarryx_u32(&x1359, &x1360, 0x0, x1339, x1295); + fiat_p384_addcarryx_u32(&x1359, &x1360, 0x0, x1295, x1339); uint32_t x1361; fiat_p384_uint1 x1362; - fiat_p384_addcarryx_u32(&x1361, &x1362, x1360, x1340, x1297); + fiat_p384_addcarryx_u32(&x1361, &x1362, x1360, x1297, x1340); uint32_t x1363; fiat_p384_uint1 x1364; - fiat_p384_addcarryx_u32(&x1363, &x1364, x1362, 0x0, x1299); + fiat_p384_addcarryx_u32(&x1363, &x1364, x1362, x1299, 0x0); uint32_t x1365; fiat_p384_uint1 x1366; - fiat_p384_addcarryx_u32(&x1365, &x1366, x1364, x1337, x1301); + fiat_p384_addcarryx_u32(&x1365, &x1366, x1364, x1301, x1337); uint32_t x1367; fiat_p384_uint1 x1368; - fiat_p384_addcarryx_u32(&x1367, &x1368, x1366, x1341, x1303); + fiat_p384_addcarryx_u32(&x1367, &x1368, x1366, x1303, x1341); uint32_t x1369; fiat_p384_uint1 x1370; - fiat_p384_addcarryx_u32(&x1369, &x1370, x1368, x1343, x1305); + fiat_p384_addcarryx_u32(&x1369, &x1370, x1368, x1305, x1343); uint32_t x1371; fiat_p384_uint1 x1372; - fiat_p384_addcarryx_u32(&x1371, &x1372, x1370, x1345, x1307); + fiat_p384_addcarryx_u32(&x1371, &x1372, x1370, x1307, x1345); uint32_t x1373; fiat_p384_uint1 x1374; - fiat_p384_addcarryx_u32(&x1373, &x1374, x1372, x1347, x1309); + fiat_p384_addcarryx_u32(&x1373, &x1374, x1372, x1309, x1347); uint32_t x1375; fiat_p384_uint1 x1376; - fiat_p384_addcarryx_u32(&x1375, &x1376, x1374, x1349, x1311); + fiat_p384_addcarryx_u32(&x1375, &x1376, x1374, x1311, x1349); uint32_t x1377; fiat_p384_uint1 x1378; - fiat_p384_addcarryx_u32(&x1377, &x1378, x1376, x1351, x1313); + fiat_p384_addcarryx_u32(&x1377, &x1378, x1376, x1313, x1351); uint32_t x1379; fiat_p384_uint1 x1380; - fiat_p384_addcarryx_u32(&x1379, &x1380, x1378, x1353, x1315); + fiat_p384_addcarryx_u32(&x1379, &x1380, x1378, x1315, x1353); uint32_t x1381; fiat_p384_uint1 x1382; - fiat_p384_addcarryx_u32(&x1381, &x1382, x1380, x1355, x1317); + fiat_p384_addcarryx_u32(&x1381, &x1382, x1380, x1317, x1355); uint32_t x1383; fiat_p384_uint1 x1384; - fiat_p384_addcarryx_u32(&x1383, &x1384, x1382, x1357, x1319); + fiat_p384_addcarryx_u32(&x1383, &x1384, x1382, x1319, x1357); uint32_t x1385; fiat_p384_uint1 x1386; - fiat_p384_addcarryx_u32(&x1385, &x1386, x1384, 0x0, x1320); + fiat_p384_addcarryx_u32(&x1385, &x1386, x1384, x1320, 0x0); uint32_t x1387; uint32_t x1388; fiat_p384_mulx_u32(&x1387, &x1388, x10, (arg1[11])); @@ -4811,79 +4811,79 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x1409, &x1410, x10, (arg1[0])); uint32_t x1411; fiat_p384_uint1 x1412; - fiat_p384_addcarryx_u32(&x1411, &x1412, 0x0, x1407, x1410); + fiat_p384_addcarryx_u32(&x1411, &x1412, 0x0, x1410, x1407); uint32_t x1413; fiat_p384_uint1 x1414; - fiat_p384_addcarryx_u32(&x1413, &x1414, x1412, x1405, x1408); + fiat_p384_addcarryx_u32(&x1413, &x1414, x1412, x1408, x1405); uint32_t x1415; fiat_p384_uint1 x1416; - fiat_p384_addcarryx_u32(&x1415, &x1416, x1414, x1403, x1406); + fiat_p384_addcarryx_u32(&x1415, &x1416, x1414, x1406, x1403); uint32_t x1417; fiat_p384_uint1 x1418; - fiat_p384_addcarryx_u32(&x1417, &x1418, x1416, x1401, x1404); + fiat_p384_addcarryx_u32(&x1417, &x1418, x1416, x1404, x1401); uint32_t x1419; fiat_p384_uint1 x1420; - fiat_p384_addcarryx_u32(&x1419, &x1420, x1418, x1399, x1402); + fiat_p384_addcarryx_u32(&x1419, &x1420, x1418, x1402, x1399); uint32_t x1421; fiat_p384_uint1 x1422; - fiat_p384_addcarryx_u32(&x1421, &x1422, x1420, x1397, x1400); + fiat_p384_addcarryx_u32(&x1421, &x1422, x1420, x1400, x1397); uint32_t x1423; fiat_p384_uint1 x1424; - fiat_p384_addcarryx_u32(&x1423, &x1424, x1422, x1395, x1398); + fiat_p384_addcarryx_u32(&x1423, &x1424, x1422, x1398, x1395); uint32_t x1425; fiat_p384_uint1 x1426; - fiat_p384_addcarryx_u32(&x1425, &x1426, x1424, x1393, x1396); + fiat_p384_addcarryx_u32(&x1425, &x1426, x1424, x1396, x1393); uint32_t x1427; fiat_p384_uint1 x1428; - fiat_p384_addcarryx_u32(&x1427, &x1428, x1426, x1391, x1394); + fiat_p384_addcarryx_u32(&x1427, &x1428, x1426, x1394, x1391); uint32_t x1429; fiat_p384_uint1 x1430; - fiat_p384_addcarryx_u32(&x1429, &x1430, x1428, x1389, x1392); + fiat_p384_addcarryx_u32(&x1429, &x1430, x1428, x1392, x1389); uint32_t x1431; fiat_p384_uint1 x1432; - fiat_p384_addcarryx_u32(&x1431, &x1432, x1430, x1387, x1390); + fiat_p384_addcarryx_u32(&x1431, &x1432, x1430, x1390, x1387); uint32_t x1433; fiat_p384_uint1 x1434; - fiat_p384_addcarryx_u32(&x1433, &x1434, x1432, 0x0, x1388); + fiat_p384_addcarryx_u32(&x1433, &x1434, x1432, x1388, 0x0); uint32_t x1435; fiat_p384_uint1 x1436; - fiat_p384_addcarryx_u32(&x1435, &x1436, 0x0, x1409, x1361); + fiat_p384_addcarryx_u32(&x1435, &x1436, 0x0, x1361, x1409); uint32_t x1437; fiat_p384_uint1 x1438; - fiat_p384_addcarryx_u32(&x1437, &x1438, x1436, x1411, x1363); + fiat_p384_addcarryx_u32(&x1437, &x1438, x1436, x1363, x1411); uint32_t x1439; fiat_p384_uint1 x1440; - fiat_p384_addcarryx_u32(&x1439, &x1440, x1438, x1413, x1365); + fiat_p384_addcarryx_u32(&x1439, &x1440, x1438, x1365, x1413); uint32_t x1441; fiat_p384_uint1 x1442; - fiat_p384_addcarryx_u32(&x1441, &x1442, x1440, x1415, x1367); + fiat_p384_addcarryx_u32(&x1441, &x1442, x1440, x1367, x1415); uint32_t x1443; fiat_p384_uint1 x1444; - fiat_p384_addcarryx_u32(&x1443, &x1444, x1442, x1417, x1369); + fiat_p384_addcarryx_u32(&x1443, &x1444, x1442, x1369, x1417); uint32_t x1445; fiat_p384_uint1 x1446; - fiat_p384_addcarryx_u32(&x1445, &x1446, x1444, x1419, x1371); + fiat_p384_addcarryx_u32(&x1445, &x1446, x1444, x1371, x1419); uint32_t x1447; fiat_p384_uint1 x1448; - fiat_p384_addcarryx_u32(&x1447, &x1448, x1446, x1421, x1373); + fiat_p384_addcarryx_u32(&x1447, &x1448, x1446, x1373, x1421); uint32_t x1449; fiat_p384_uint1 x1450; - fiat_p384_addcarryx_u32(&x1449, &x1450, x1448, x1423, x1375); + fiat_p384_addcarryx_u32(&x1449, &x1450, x1448, x1375, x1423); uint32_t x1451; fiat_p384_uint1 x1452; - fiat_p384_addcarryx_u32(&x1451, &x1452, x1450, x1425, x1377); + fiat_p384_addcarryx_u32(&x1451, &x1452, x1450, x1377, x1425); uint32_t x1453; fiat_p384_uint1 x1454; - fiat_p384_addcarryx_u32(&x1453, &x1454, x1452, x1427, x1379); + fiat_p384_addcarryx_u32(&x1453, &x1454, x1452, x1379, x1427); uint32_t x1455; fiat_p384_uint1 x1456; - fiat_p384_addcarryx_u32(&x1455, &x1456, x1454, x1429, x1381); + fiat_p384_addcarryx_u32(&x1455, &x1456, x1454, x1381, x1429); uint32_t x1457; fiat_p384_uint1 x1458; - fiat_p384_addcarryx_u32(&x1457, &x1458, x1456, x1431, x1383); + fiat_p384_addcarryx_u32(&x1457, &x1458, x1456, x1383, x1431); uint32_t x1459; fiat_p384_uint1 x1460; - fiat_p384_addcarryx_u32(&x1459, &x1460, x1458, x1433, x1385); + fiat_p384_addcarryx_u32(&x1459, &x1460, x1458, x1385, x1433); uint32_t x1461; uint32_t x1462; fiat_p384_mulx_u32(&x1461, &x1462, x1435, UINT32_C(0xffffffff)); @@ -4916,73 +4916,73 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x1479, &x1480, x1435, UINT32_C(0xffffffff)); uint32_t x1481; fiat_p384_uint1 x1482; - fiat_p384_addcarryx_u32(&x1481, &x1482, 0x0, x1475, x1478); + fiat_p384_addcarryx_u32(&x1481, &x1482, 0x0, x1478, x1475); uint32_t x1483; fiat_p384_uint1 x1484; - fiat_p384_addcarryx_u32(&x1483, &x1484, x1482, x1473, x1476); + fiat_p384_addcarryx_u32(&x1483, &x1484, x1482, x1476, x1473); uint32_t x1485; fiat_p384_uint1 x1486; - fiat_p384_addcarryx_u32(&x1485, &x1486, x1484, x1471, x1474); + fiat_p384_addcarryx_u32(&x1485, &x1486, x1484, x1474, x1471); uint32_t x1487; fiat_p384_uint1 x1488; - fiat_p384_addcarryx_u32(&x1487, &x1488, x1486, x1469, x1472); + fiat_p384_addcarryx_u32(&x1487, &x1488, x1486, x1472, x1469); uint32_t x1489; fiat_p384_uint1 x1490; - fiat_p384_addcarryx_u32(&x1489, &x1490, x1488, x1467, x1470); + fiat_p384_addcarryx_u32(&x1489, &x1490, x1488, x1470, x1467); uint32_t x1491; fiat_p384_uint1 x1492; - fiat_p384_addcarryx_u32(&x1491, &x1492, x1490, x1465, x1468); + fiat_p384_addcarryx_u32(&x1491, &x1492, x1490, x1468, x1465); uint32_t x1493; fiat_p384_uint1 x1494; - fiat_p384_addcarryx_u32(&x1493, &x1494, x1492, x1463, x1466); + fiat_p384_addcarryx_u32(&x1493, &x1494, x1492, x1466, x1463); uint32_t x1495; fiat_p384_uint1 x1496; - fiat_p384_addcarryx_u32(&x1495, &x1496, x1494, x1461, x1464); + fiat_p384_addcarryx_u32(&x1495, &x1496, x1494, x1464, x1461); uint32_t x1497; fiat_p384_uint1 x1498; - fiat_p384_addcarryx_u32(&x1497, &x1498, x1496, 0x0, x1462); + fiat_p384_addcarryx_u32(&x1497, &x1498, x1496, x1462, 0x0); uint32_t x1499; fiat_p384_uint1 x1500; - fiat_p384_addcarryx_u32(&x1499, &x1500, 0x0, x1479, x1435); + fiat_p384_addcarryx_u32(&x1499, &x1500, 0x0, x1435, x1479); uint32_t x1501; fiat_p384_uint1 x1502; - fiat_p384_addcarryx_u32(&x1501, &x1502, x1500, x1480, x1437); + fiat_p384_addcarryx_u32(&x1501, &x1502, x1500, x1437, x1480); uint32_t x1503; fiat_p384_uint1 x1504; - fiat_p384_addcarryx_u32(&x1503, &x1504, x1502, 0x0, x1439); + fiat_p384_addcarryx_u32(&x1503, &x1504, x1502, x1439, 0x0); uint32_t x1505; fiat_p384_uint1 x1506; - fiat_p384_addcarryx_u32(&x1505, &x1506, x1504, x1477, x1441); + fiat_p384_addcarryx_u32(&x1505, &x1506, x1504, x1441, x1477); uint32_t x1507; fiat_p384_uint1 x1508; - fiat_p384_addcarryx_u32(&x1507, &x1508, x1506, x1481, x1443); + fiat_p384_addcarryx_u32(&x1507, &x1508, x1506, x1443, x1481); uint32_t x1509; fiat_p384_uint1 x1510; - fiat_p384_addcarryx_u32(&x1509, &x1510, x1508, x1483, x1445); + fiat_p384_addcarryx_u32(&x1509, &x1510, x1508, x1445, x1483); uint32_t x1511; fiat_p384_uint1 x1512; - fiat_p384_addcarryx_u32(&x1511, &x1512, x1510, x1485, x1447); + fiat_p384_addcarryx_u32(&x1511, &x1512, x1510, x1447, x1485); uint32_t x1513; fiat_p384_uint1 x1514; - fiat_p384_addcarryx_u32(&x1513, &x1514, x1512, x1487, x1449); + fiat_p384_addcarryx_u32(&x1513, &x1514, x1512, x1449, x1487); uint32_t x1515; fiat_p384_uint1 x1516; - fiat_p384_addcarryx_u32(&x1515, &x1516, x1514, x1489, x1451); + fiat_p384_addcarryx_u32(&x1515, &x1516, x1514, x1451, x1489); uint32_t x1517; fiat_p384_uint1 x1518; - fiat_p384_addcarryx_u32(&x1517, &x1518, x1516, x1491, x1453); + fiat_p384_addcarryx_u32(&x1517, &x1518, x1516, x1453, x1491); uint32_t x1519; fiat_p384_uint1 x1520; - fiat_p384_addcarryx_u32(&x1519, &x1520, x1518, x1493, x1455); + fiat_p384_addcarryx_u32(&x1519, &x1520, x1518, x1455, x1493); uint32_t x1521; fiat_p384_uint1 x1522; - fiat_p384_addcarryx_u32(&x1521, &x1522, x1520, x1495, x1457); + fiat_p384_addcarryx_u32(&x1521, &x1522, x1520, x1457, x1495); uint32_t x1523; fiat_p384_uint1 x1524; - fiat_p384_addcarryx_u32(&x1523, &x1524, x1522, x1497, x1459); + fiat_p384_addcarryx_u32(&x1523, &x1524, x1522, x1459, x1497); uint32_t x1525; fiat_p384_uint1 x1526; - fiat_p384_addcarryx_u32(&x1525, &x1526, x1524, 0x0, x1460); + fiat_p384_addcarryx_u32(&x1525, &x1526, x1524, x1460, 0x0); uint32_t x1527; uint32_t x1528; fiat_p384_mulx_u32(&x1527, &x1528, x11, (arg1[11])); @@ -5021,79 +5021,79 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x1549, &x1550, x11, (arg1[0])); uint32_t x1551; fiat_p384_uint1 x1552; - fiat_p384_addcarryx_u32(&x1551, &x1552, 0x0, x1547, x1550); + fiat_p384_addcarryx_u32(&x1551, &x1552, 0x0, x1550, x1547); uint32_t x1553; fiat_p384_uint1 x1554; - fiat_p384_addcarryx_u32(&x1553, &x1554, x1552, x1545, x1548); + fiat_p384_addcarryx_u32(&x1553, &x1554, x1552, x1548, x1545); uint32_t x1555; fiat_p384_uint1 x1556; - fiat_p384_addcarryx_u32(&x1555, &x1556, x1554, x1543, x1546); + fiat_p384_addcarryx_u32(&x1555, &x1556, x1554, x1546, x1543); uint32_t x1557; fiat_p384_uint1 x1558; - fiat_p384_addcarryx_u32(&x1557, &x1558, x1556, x1541, x1544); + fiat_p384_addcarryx_u32(&x1557, &x1558, x1556, x1544, x1541); uint32_t x1559; fiat_p384_uint1 x1560; - fiat_p384_addcarryx_u32(&x1559, &x1560, x1558, x1539, x1542); + fiat_p384_addcarryx_u32(&x1559, &x1560, x1558, x1542, x1539); uint32_t x1561; fiat_p384_uint1 x1562; - fiat_p384_addcarryx_u32(&x1561, &x1562, x1560, x1537, x1540); + fiat_p384_addcarryx_u32(&x1561, &x1562, x1560, x1540, x1537); uint32_t x1563; fiat_p384_uint1 x1564; - fiat_p384_addcarryx_u32(&x1563, &x1564, x1562, x1535, x1538); + fiat_p384_addcarryx_u32(&x1563, &x1564, x1562, x1538, x1535); uint32_t x1565; fiat_p384_uint1 x1566; - fiat_p384_addcarryx_u32(&x1565, &x1566, x1564, x1533, x1536); + fiat_p384_addcarryx_u32(&x1565, &x1566, x1564, x1536, x1533); uint32_t x1567; fiat_p384_uint1 x1568; - fiat_p384_addcarryx_u32(&x1567, &x1568, x1566, x1531, x1534); + fiat_p384_addcarryx_u32(&x1567, &x1568, x1566, x1534, x1531); uint32_t x1569; fiat_p384_uint1 x1570; - fiat_p384_addcarryx_u32(&x1569, &x1570, x1568, x1529, x1532); + fiat_p384_addcarryx_u32(&x1569, &x1570, x1568, x1532, x1529); uint32_t x1571; fiat_p384_uint1 x1572; - fiat_p384_addcarryx_u32(&x1571, &x1572, x1570, x1527, x1530); + fiat_p384_addcarryx_u32(&x1571, &x1572, x1570, x1530, x1527); uint32_t x1573; fiat_p384_uint1 x1574; - fiat_p384_addcarryx_u32(&x1573, &x1574, x1572, 0x0, x1528); + fiat_p384_addcarryx_u32(&x1573, &x1574, x1572, x1528, 0x0); uint32_t x1575; fiat_p384_uint1 x1576; - fiat_p384_addcarryx_u32(&x1575, &x1576, 0x0, x1549, x1501); + fiat_p384_addcarryx_u32(&x1575, &x1576, 0x0, x1501, x1549); uint32_t x1577; fiat_p384_uint1 x1578; - fiat_p384_addcarryx_u32(&x1577, &x1578, x1576, x1551, x1503); + fiat_p384_addcarryx_u32(&x1577, &x1578, x1576, x1503, x1551); uint32_t x1579; fiat_p384_uint1 x1580; - fiat_p384_addcarryx_u32(&x1579, &x1580, x1578, x1553, x1505); + fiat_p384_addcarryx_u32(&x1579, &x1580, x1578, x1505, x1553); uint32_t x1581; fiat_p384_uint1 x1582; - fiat_p384_addcarryx_u32(&x1581, &x1582, x1580, x1555, x1507); + fiat_p384_addcarryx_u32(&x1581, &x1582, x1580, x1507, x1555); uint32_t x1583; fiat_p384_uint1 x1584; - fiat_p384_addcarryx_u32(&x1583, &x1584, x1582, x1557, x1509); + fiat_p384_addcarryx_u32(&x1583, &x1584, x1582, x1509, x1557); uint32_t x1585; fiat_p384_uint1 x1586; - fiat_p384_addcarryx_u32(&x1585, &x1586, x1584, x1559, x1511); + fiat_p384_addcarryx_u32(&x1585, &x1586, x1584, x1511, x1559); uint32_t x1587; fiat_p384_uint1 x1588; - fiat_p384_addcarryx_u32(&x1587, &x1588, x1586, x1561, x1513); + fiat_p384_addcarryx_u32(&x1587, &x1588, x1586, x1513, x1561); uint32_t x1589; fiat_p384_uint1 x1590; - fiat_p384_addcarryx_u32(&x1589, &x1590, x1588, x1563, x1515); + fiat_p384_addcarryx_u32(&x1589, &x1590, x1588, x1515, x1563); uint32_t x1591; fiat_p384_uint1 x1592; - fiat_p384_addcarryx_u32(&x1591, &x1592, x1590, x1565, x1517); + fiat_p384_addcarryx_u32(&x1591, &x1592, x1590, x1517, x1565); uint32_t x1593; fiat_p384_uint1 x1594; - fiat_p384_addcarryx_u32(&x1593, &x1594, x1592, x1567, x1519); + fiat_p384_addcarryx_u32(&x1593, &x1594, x1592, x1519, x1567); uint32_t x1595; fiat_p384_uint1 x1596; - fiat_p384_addcarryx_u32(&x1595, &x1596, x1594, x1569, x1521); + fiat_p384_addcarryx_u32(&x1595, &x1596, x1594, x1521, x1569); uint32_t x1597; fiat_p384_uint1 x1598; - fiat_p384_addcarryx_u32(&x1597, &x1598, x1596, x1571, x1523); + fiat_p384_addcarryx_u32(&x1597, &x1598, x1596, x1523, x1571); uint32_t x1599; fiat_p384_uint1 x1600; - fiat_p384_addcarryx_u32(&x1599, &x1600, x1598, x1573, x1525); + fiat_p384_addcarryx_u32(&x1599, &x1600, x1598, x1525, x1573); uint32_t x1601; uint32_t x1602; fiat_p384_mulx_u32(&x1601, &x1602, x1575, UINT32_C(0xffffffff)); @@ -5126,73 +5126,73 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_mulx_u32(&x1619, &x1620, x1575, UINT32_C(0xffffffff)); uint32_t x1621; fiat_p384_uint1 x1622; - fiat_p384_addcarryx_u32(&x1621, &x1622, 0x0, x1615, x1618); + fiat_p384_addcarryx_u32(&x1621, &x1622, 0x0, x1618, x1615); uint32_t x1623; fiat_p384_uint1 x1624; - fiat_p384_addcarryx_u32(&x1623, &x1624, x1622, x1613, x1616); + fiat_p384_addcarryx_u32(&x1623, &x1624, x1622, x1616, x1613); uint32_t x1625; fiat_p384_uint1 x1626; - fiat_p384_addcarryx_u32(&x1625, &x1626, x1624, x1611, x1614); + fiat_p384_addcarryx_u32(&x1625, &x1626, x1624, x1614, x1611); uint32_t x1627; fiat_p384_uint1 x1628; - fiat_p384_addcarryx_u32(&x1627, &x1628, x1626, x1609, x1612); + fiat_p384_addcarryx_u32(&x1627, &x1628, x1626, x1612, x1609); uint32_t x1629; fiat_p384_uint1 x1630; - fiat_p384_addcarryx_u32(&x1629, &x1630, x1628, x1607, x1610); + fiat_p384_addcarryx_u32(&x1629, &x1630, x1628, x1610, x1607); uint32_t x1631; fiat_p384_uint1 x1632; - fiat_p384_addcarryx_u32(&x1631, &x1632, x1630, x1605, x1608); + fiat_p384_addcarryx_u32(&x1631, &x1632, x1630, x1608, x1605); uint32_t x1633; fiat_p384_uint1 x1634; - fiat_p384_addcarryx_u32(&x1633, &x1634, x1632, x1603, x1606); + fiat_p384_addcarryx_u32(&x1633, &x1634, x1632, x1606, x1603); uint32_t x1635; fiat_p384_uint1 x1636; - fiat_p384_addcarryx_u32(&x1635, &x1636, x1634, x1601, x1604); + fiat_p384_addcarryx_u32(&x1635, &x1636, x1634, x1604, x1601); uint32_t x1637; fiat_p384_uint1 x1638; - fiat_p384_addcarryx_u32(&x1637, &x1638, x1636, 0x0, x1602); + fiat_p384_addcarryx_u32(&x1637, &x1638, x1636, x1602, 0x0); uint32_t x1639; fiat_p384_uint1 x1640; - fiat_p384_addcarryx_u32(&x1639, &x1640, 0x0, x1619, x1575); + fiat_p384_addcarryx_u32(&x1639, &x1640, 0x0, x1575, x1619); uint32_t x1641; fiat_p384_uint1 x1642; - fiat_p384_addcarryx_u32(&x1641, &x1642, x1640, x1620, x1577); + fiat_p384_addcarryx_u32(&x1641, &x1642, x1640, x1577, x1620); uint32_t x1643; fiat_p384_uint1 x1644; - fiat_p384_addcarryx_u32(&x1643, &x1644, x1642, 0x0, x1579); + fiat_p384_addcarryx_u32(&x1643, &x1644, x1642, x1579, 0x0); uint32_t x1645; fiat_p384_uint1 x1646; - fiat_p384_addcarryx_u32(&x1645, &x1646, x1644, x1617, x1581); + fiat_p384_addcarryx_u32(&x1645, &x1646, x1644, x1581, x1617); uint32_t x1647; fiat_p384_uint1 x1648; - fiat_p384_addcarryx_u32(&x1647, &x1648, x1646, x1621, x1583); + fiat_p384_addcarryx_u32(&x1647, &x1648, x1646, x1583, x1621); uint32_t x1649; fiat_p384_uint1 x1650; - fiat_p384_addcarryx_u32(&x1649, &x1650, x1648, x1623, x1585); + fiat_p384_addcarryx_u32(&x1649, &x1650, x1648, x1585, x1623); uint32_t x1651; fiat_p384_uint1 x1652; - fiat_p384_addcarryx_u32(&x1651, &x1652, x1650, x1625, x1587); + fiat_p384_addcarryx_u32(&x1651, &x1652, x1650, x1587, x1625); uint32_t x1653; fiat_p384_uint1 x1654; - fiat_p384_addcarryx_u32(&x1653, &x1654, x1652, x1627, x1589); + fiat_p384_addcarryx_u32(&x1653, &x1654, x1652, x1589, x1627); uint32_t x1655; fiat_p384_uint1 x1656; - fiat_p384_addcarryx_u32(&x1655, &x1656, x1654, x1629, x1591); + fiat_p384_addcarryx_u32(&x1655, &x1656, x1654, x1591, x1629); uint32_t x1657; fiat_p384_uint1 x1658; - fiat_p384_addcarryx_u32(&x1657, &x1658, x1656, x1631, x1593); + fiat_p384_addcarryx_u32(&x1657, &x1658, x1656, x1593, x1631); uint32_t x1659; fiat_p384_uint1 x1660; - fiat_p384_addcarryx_u32(&x1659, &x1660, x1658, x1633, x1595); + fiat_p384_addcarryx_u32(&x1659, &x1660, x1658, x1595, x1633); uint32_t x1661; fiat_p384_uint1 x1662; - fiat_p384_addcarryx_u32(&x1661, &x1662, x1660, x1635, x1597); + fiat_p384_addcarryx_u32(&x1661, &x1662, x1660, x1597, x1635); uint32_t x1663; fiat_p384_uint1 x1664; - fiat_p384_addcarryx_u32(&x1663, &x1664, x1662, x1637, x1599); + fiat_p384_addcarryx_u32(&x1663, &x1664, x1662, x1599, x1637); uint32_t x1665; fiat_p384_uint1 x1666; - fiat_p384_addcarryx_u32(&x1665, &x1666, x1664, 0x0, x1600); + fiat_p384_addcarryx_u32(&x1665, &x1666, x1664, x1600, 0x0); uint32_t x1667; fiat_p384_uint1 x1668; fiat_p384_subborrowx_u32(&x1667, &x1668, 0x0, x1641, UINT32_C(0xffffffff)); @@ -5288,40 +5288,40 @@ static void fiat_p384_square(uint32_t out1[12], const uint32_t arg1[12]) { static void fiat_p384_add(uint32_t out1[12], const uint32_t arg1[12], const uint32_t arg2[12]) { uint32_t x1; fiat_p384_uint1 x2; - fiat_p384_addcarryx_u32(&x1, &x2, 0x0, (arg2[0]), (arg1[0])); + fiat_p384_addcarryx_u32(&x1, &x2, 0x0, (arg1[0]), (arg2[0])); uint32_t x3; fiat_p384_uint1 x4; - fiat_p384_addcarryx_u32(&x3, &x4, x2, (arg2[1]), (arg1[1])); + fiat_p384_addcarryx_u32(&x3, &x4, x2, (arg1[1]), (arg2[1])); uint32_t x5; fiat_p384_uint1 x6; - fiat_p384_addcarryx_u32(&x5, &x6, x4, (arg2[2]), (arg1[2])); + fiat_p384_addcarryx_u32(&x5, &x6, x4, (arg1[2]), (arg2[2])); uint32_t x7; fiat_p384_uint1 x8; - fiat_p384_addcarryx_u32(&x7, &x8, x6, (arg2[3]), (arg1[3])); + fiat_p384_addcarryx_u32(&x7, &x8, x6, (arg1[3]), (arg2[3])); uint32_t x9; fiat_p384_uint1 x10; - fiat_p384_addcarryx_u32(&x9, &x10, x8, (arg2[4]), (arg1[4])); + fiat_p384_addcarryx_u32(&x9, &x10, x8, (arg1[4]), (arg2[4])); uint32_t x11; fiat_p384_uint1 x12; - fiat_p384_addcarryx_u32(&x11, &x12, x10, (arg2[5]), (arg1[5])); + fiat_p384_addcarryx_u32(&x11, &x12, x10, (arg1[5]), (arg2[5])); uint32_t x13; fiat_p384_uint1 x14; - fiat_p384_addcarryx_u32(&x13, &x14, x12, (arg2[6]), (arg1[6])); + fiat_p384_addcarryx_u32(&x13, &x14, x12, (arg1[6]), (arg2[6])); uint32_t x15; fiat_p384_uint1 x16; - fiat_p384_addcarryx_u32(&x15, &x16, x14, (arg2[7]), (arg1[7])); + fiat_p384_addcarryx_u32(&x15, &x16, x14, (arg1[7]), (arg2[7])); uint32_t x17; fiat_p384_uint1 x18; - fiat_p384_addcarryx_u32(&x17, &x18, x16, (arg2[8]), (arg1[8])); + fiat_p384_addcarryx_u32(&x17, &x18, x16, (arg1[8]), (arg2[8])); uint32_t x19; fiat_p384_uint1 x20; - fiat_p384_addcarryx_u32(&x19, &x20, x18, (arg2[9]), (arg1[9])); + fiat_p384_addcarryx_u32(&x19, &x20, x18, (arg1[9]), (arg2[9])); uint32_t x21; fiat_p384_uint1 x22; - fiat_p384_addcarryx_u32(&x21, &x22, x20, (arg2[10]), (arg1[10])); + fiat_p384_addcarryx_u32(&x21, &x22, x20, (arg1[10]), (arg2[10])); uint32_t x23; fiat_p384_uint1 x24; - fiat_p384_addcarryx_u32(&x23, &x24, x22, (arg2[11]), (arg1[11])); + fiat_p384_addcarryx_u32(&x23, &x24, x22, (arg1[11]), (arg2[11])); uint32_t x25; fiat_p384_uint1 x26; fiat_p384_subborrowx_u32(&x25, &x26, 0x0, x1, UINT32_C(0xffffffff)); @@ -5455,40 +5455,40 @@ static void fiat_p384_sub(uint32_t out1[12], const uint32_t arg1[12], const uint fiat_p384_cmovznz_u32(&x25, x24, 0x0, UINT32_C(0xffffffff)); uint32_t x26; fiat_p384_uint1 x27; - fiat_p384_addcarryx_u32(&x26, &x27, 0x0, (x25 & UINT32_C(0xffffffff)), x1); + fiat_p384_addcarryx_u32(&x26, &x27, 0x0, x1, (x25 & UINT32_C(0xffffffff))); uint32_t x28; fiat_p384_uint1 x29; - fiat_p384_addcarryx_u32(&x28, &x29, x27, 0x0, x3); + fiat_p384_addcarryx_u32(&x28, &x29, x27, x3, 0x0); uint32_t x30; fiat_p384_uint1 x31; - fiat_p384_addcarryx_u32(&x30, &x31, x29, 0x0, x5); + fiat_p384_addcarryx_u32(&x30, &x31, x29, x5, 0x0); uint32_t x32; fiat_p384_uint1 x33; - fiat_p384_addcarryx_u32(&x32, &x33, x31, (x25 & UINT32_C(0xffffffff)), x7); + fiat_p384_addcarryx_u32(&x32, &x33, x31, x7, (x25 & UINT32_C(0xffffffff))); uint32_t x34; fiat_p384_uint1 x35; - fiat_p384_addcarryx_u32(&x34, &x35, x33, (x25 & UINT32_C(0xfffffffe)), x9); + fiat_p384_addcarryx_u32(&x34, &x35, x33, x9, (x25 & UINT32_C(0xfffffffe))); uint32_t x36; fiat_p384_uint1 x37; - fiat_p384_addcarryx_u32(&x36, &x37, x35, (x25 & UINT32_C(0xffffffff)), x11); + fiat_p384_addcarryx_u32(&x36, &x37, x35, x11, (x25 & UINT32_C(0xffffffff))); uint32_t x38; fiat_p384_uint1 x39; - fiat_p384_addcarryx_u32(&x38, &x39, x37, (x25 & UINT32_C(0xffffffff)), x13); + fiat_p384_addcarryx_u32(&x38, &x39, x37, x13, (x25 & UINT32_C(0xffffffff))); uint32_t x40; fiat_p384_uint1 x41; - fiat_p384_addcarryx_u32(&x40, &x41, x39, (x25 & UINT32_C(0xffffffff)), x15); + fiat_p384_addcarryx_u32(&x40, &x41, x39, x15, (x25 & UINT32_C(0xffffffff))); uint32_t x42; fiat_p384_uint1 x43; - fiat_p384_addcarryx_u32(&x42, &x43, x41, (x25 & UINT32_C(0xffffffff)), x17); + fiat_p384_addcarryx_u32(&x42, &x43, x41, x17, (x25 & UINT32_C(0xffffffff))); uint32_t x44; fiat_p384_uint1 x45; - fiat_p384_addcarryx_u32(&x44, &x45, x43, (x25 & UINT32_C(0xffffffff)), x19); + fiat_p384_addcarryx_u32(&x44, &x45, x43, x19, (x25 & UINT32_C(0xffffffff))); uint32_t x46; fiat_p384_uint1 x47; - fiat_p384_addcarryx_u32(&x46, &x47, x45, (x25 & UINT32_C(0xffffffff)), x21); + fiat_p384_addcarryx_u32(&x46, &x47, x45, x21, (x25 & UINT32_C(0xffffffff))); uint32_t x48; fiat_p384_uint1 x49; - fiat_p384_addcarryx_u32(&x48, &x49, x47, (x25 & UINT32_C(0xffffffff)), x23); + fiat_p384_addcarryx_u32(&x48, &x49, x47, x23, (x25 & UINT32_C(0xffffffff))); out1[0] = x26; out1[1] = x28; out1[2] = x30; @@ -5557,40 +5557,40 @@ static void fiat_p384_opp(uint32_t out1[12], const uint32_t arg1[12]) { fiat_p384_cmovznz_u32(&x25, x24, 0x0, UINT32_C(0xffffffff)); uint32_t x26; fiat_p384_uint1 x27; - fiat_p384_addcarryx_u32(&x26, &x27, 0x0, (x25 & UINT32_C(0xffffffff)), x1); + fiat_p384_addcarryx_u32(&x26, &x27, 0x0, x1, (x25 & UINT32_C(0xffffffff))); uint32_t x28; fiat_p384_uint1 x29; - fiat_p384_addcarryx_u32(&x28, &x29, x27, 0x0, x3); + fiat_p384_addcarryx_u32(&x28, &x29, x27, x3, 0x0); uint32_t x30; fiat_p384_uint1 x31; - fiat_p384_addcarryx_u32(&x30, &x31, x29, 0x0, x5); + fiat_p384_addcarryx_u32(&x30, &x31, x29, x5, 0x0); uint32_t x32; fiat_p384_uint1 x33; - fiat_p384_addcarryx_u32(&x32, &x33, x31, (x25 & UINT32_C(0xffffffff)), x7); + fiat_p384_addcarryx_u32(&x32, &x33, x31, x7, (x25 & UINT32_C(0xffffffff))); uint32_t x34; fiat_p384_uint1 x35; - fiat_p384_addcarryx_u32(&x34, &x35, x33, (x25 & UINT32_C(0xfffffffe)), x9); + fiat_p384_addcarryx_u32(&x34, &x35, x33, x9, (x25 & UINT32_C(0xfffffffe))); uint32_t x36; fiat_p384_uint1 x37; - fiat_p384_addcarryx_u32(&x36, &x37, x35, (x25 & UINT32_C(0xffffffff)), x11); + fiat_p384_addcarryx_u32(&x36, &x37, x35, x11, (x25 & UINT32_C(0xffffffff))); uint32_t x38; fiat_p384_uint1 x39; - fiat_p384_addcarryx_u32(&x38, &x39, x37, (x25 & UINT32_C(0xffffffff)), x13); + fiat_p384_addcarryx_u32(&x38, &x39, x37, x13, (x25 & UINT32_C(0xffffffff))); uint32_t x40; fiat_p384_uint1 x41; - fiat_p384_addcarryx_u32(&x40, &x41, x39, (x25 & UINT32_C(0xffffffff)), x15); + fiat_p384_addcarryx_u32(&x40, &x41, x39, x15, (x25 & UINT32_C(0xffffffff))); uint32_t x42; fiat_p384_uint1 x43; - fiat_p384_addcarryx_u32(&x42, &x43, x41, (x25 & UINT32_C(0xffffffff)), x17); + fiat_p384_addcarryx_u32(&x42, &x43, x41, x17, (x25 & UINT32_C(0xffffffff))); uint32_t x44; fiat_p384_uint1 x45; - fiat_p384_addcarryx_u32(&x44, &x45, x43, (x25 & UINT32_C(0xffffffff)), x19); + fiat_p384_addcarryx_u32(&x44, &x45, x43, x19, (x25 & UINT32_C(0xffffffff))); uint32_t x46; fiat_p384_uint1 x47; - fiat_p384_addcarryx_u32(&x46, &x47, x45, (x25 & UINT32_C(0xffffffff)), x21); + fiat_p384_addcarryx_u32(&x46, &x47, x45, x21, (x25 & UINT32_C(0xffffffff))); uint32_t x48; fiat_p384_uint1 x49; - fiat_p384_addcarryx_u32(&x48, &x49, x47, (x25 & UINT32_C(0xffffffff)), x23); + fiat_p384_addcarryx_u32(&x48, &x49, x47, x23, (x25 & UINT32_C(0xffffffff))); out1[0] = x26; out1[1] = x28; out1[2] = x30; @@ -5652,37 +5652,37 @@ static void fiat_p384_from_montgomery(uint32_t out1[12], const uint32_t arg1[12] fiat_p384_mulx_u32(&x20, &x21, x1, UINT32_C(0xffffffff)); uint32_t x22; fiat_p384_uint1 x23; - fiat_p384_addcarryx_u32(&x22, &x23, 0x0, x16, x19); + fiat_p384_addcarryx_u32(&x22, &x23, 0x0, x19, x16); uint32_t x24; fiat_p384_uint1 x25; - fiat_p384_addcarryx_u32(&x24, &x25, x23, x14, x17); + fiat_p384_addcarryx_u32(&x24, &x25, x23, x17, x14); uint32_t x26; fiat_p384_uint1 x27; - fiat_p384_addcarryx_u32(&x26, &x27, x25, x12, x15); + fiat_p384_addcarryx_u32(&x26, &x27, x25, x15, x12); uint32_t x28; fiat_p384_uint1 x29; - fiat_p384_addcarryx_u32(&x28, &x29, x27, x10, x13); + fiat_p384_addcarryx_u32(&x28, &x29, x27, x13, x10); uint32_t x30; fiat_p384_uint1 x31; - fiat_p384_addcarryx_u32(&x30, &x31, x29, x8, x11); + fiat_p384_addcarryx_u32(&x30, &x31, x29, x11, x8); uint32_t x32; fiat_p384_uint1 x33; - fiat_p384_addcarryx_u32(&x32, &x33, x31, x6, x9); + fiat_p384_addcarryx_u32(&x32, &x33, x31, x9, x6); uint32_t x34; fiat_p384_uint1 x35; - fiat_p384_addcarryx_u32(&x34, &x35, x33, x4, x7); + fiat_p384_addcarryx_u32(&x34, &x35, x33, x7, x4); uint32_t x36; fiat_p384_uint1 x37; - fiat_p384_addcarryx_u32(&x36, &x37, x35, x2, x5); + fiat_p384_addcarryx_u32(&x36, &x37, x35, x5, x2); uint32_t x38; fiat_p384_uint1 x39; - fiat_p384_addcarryx_u32(&x38, &x39, 0x0, x20, x1); + fiat_p384_addcarryx_u32(&x38, &x39, 0x0, x1, x20); uint32_t x40; fiat_p384_uint1 x41; - fiat_p384_addcarryx_u32(&x40, &x41, x39, x21, 0x0); + fiat_p384_addcarryx_u32(&x40, &x41, x39, 0x0, x21); uint32_t x42; fiat_p384_uint1 x43; - fiat_p384_addcarryx_u32(&x42, &x43, 0x0, (arg1[1]), x40); + fiat_p384_addcarryx_u32(&x42, &x43, 0x0, x40, (arg1[1])); uint32_t x44; uint32_t x45; fiat_p384_mulx_u32(&x44, &x45, x42, UINT32_C(0xffffffff)); @@ -5715,112 +5715,112 @@ static void fiat_p384_from_montgomery(uint32_t out1[12], const uint32_t arg1[12] fiat_p384_mulx_u32(&x62, &x63, x42, UINT32_C(0xffffffff)); uint32_t x64; fiat_p384_uint1 x65; - fiat_p384_addcarryx_u32(&x64, &x65, 0x0, x58, x61); + fiat_p384_addcarryx_u32(&x64, &x65, 0x0, x61, x58); uint32_t x66; fiat_p384_uint1 x67; - fiat_p384_addcarryx_u32(&x66, &x67, x65, x56, x59); + fiat_p384_addcarryx_u32(&x66, &x67, x65, x59, x56); uint32_t x68; fiat_p384_uint1 x69; - fiat_p384_addcarryx_u32(&x68, &x69, x67, x54, x57); + fiat_p384_addcarryx_u32(&x68, &x69, x67, x57, x54); uint32_t x70; fiat_p384_uint1 x71; - fiat_p384_addcarryx_u32(&x70, &x71, x69, x52, x55); + fiat_p384_addcarryx_u32(&x70, &x71, x69, x55, x52); uint32_t x72; fiat_p384_uint1 x73; - fiat_p384_addcarryx_u32(&x72, &x73, x71, x50, x53); + fiat_p384_addcarryx_u32(&x72, &x73, x71, x53, x50); uint32_t x74; fiat_p384_uint1 x75; - fiat_p384_addcarryx_u32(&x74, &x75, x73, x48, x51); + fiat_p384_addcarryx_u32(&x74, &x75, x73, x51, x48); uint32_t x76; fiat_p384_uint1 x77; - fiat_p384_addcarryx_u32(&x76, &x77, x75, x46, x49); + fiat_p384_addcarryx_u32(&x76, &x77, x75, x49, x46); uint32_t x78; fiat_p384_uint1 x79; - fiat_p384_addcarryx_u32(&x78, &x79, x77, x44, x47); + fiat_p384_addcarryx_u32(&x78, &x79, x77, x47, x44); uint32_t x80; fiat_p384_uint1 x81; fiat_p384_addcarryx_u32(&x80, &x81, x43, 0x0, 0x0); uint32_t x82; fiat_p384_uint1 x83; - fiat_p384_addcarryx_u32(&x82, &x83, 0x0, x62, x42); + fiat_p384_addcarryx_u32(&x82, &x83, 0x0, x42, x62); uint32_t x84; fiat_p384_uint1 x85; - fiat_p384_addcarryx_u32(&x84, &x85, x83, x63, (fiat_p384_uint1)x80); + fiat_p384_addcarryx_u32(&x84, &x85, x83, (fiat_p384_uint1)x80, x63); uint32_t x86; fiat_p384_uint1 x87; - fiat_p384_addcarryx_u32(&x86, &x87, x85, 0x0, x18); + fiat_p384_addcarryx_u32(&x86, &x87, x85, x18, 0x0); uint32_t x88; fiat_p384_uint1 x89; - fiat_p384_addcarryx_u32(&x88, &x89, x87, x60, x22); + fiat_p384_addcarryx_u32(&x88, &x89, x87, x22, x60); uint32_t x90; fiat_p384_uint1 x91; - fiat_p384_addcarryx_u32(&x90, &x91, x89, x64, x24); + fiat_p384_addcarryx_u32(&x90, &x91, x89, x24, x64); uint32_t x92; fiat_p384_uint1 x93; - fiat_p384_addcarryx_u32(&x92, &x93, x91, x66, x26); + fiat_p384_addcarryx_u32(&x92, &x93, x91, x26, x66); uint32_t x94; fiat_p384_uint1 x95; - fiat_p384_addcarryx_u32(&x94, &x95, x93, x68, x28); + fiat_p384_addcarryx_u32(&x94, &x95, x93, x28, x68); uint32_t x96; fiat_p384_uint1 x97; - fiat_p384_addcarryx_u32(&x96, &x97, x95, x70, x30); + fiat_p384_addcarryx_u32(&x96, &x97, x95, x30, x70); uint32_t x98; fiat_p384_uint1 x99; - fiat_p384_addcarryx_u32(&x98, &x99, x97, x72, x32); + fiat_p384_addcarryx_u32(&x98, &x99, x97, x32, x72); uint32_t x100; fiat_p384_uint1 x101; - fiat_p384_addcarryx_u32(&x100, &x101, x99, x74, x34); + fiat_p384_addcarryx_u32(&x100, &x101, x99, x34, x74); uint32_t x102; fiat_p384_uint1 x103; - fiat_p384_addcarryx_u32(&x102, &x103, x101, x76, x36); + fiat_p384_addcarryx_u32(&x102, &x103, x101, x36, x76); uint32_t x104; fiat_p384_uint1 x105; - fiat_p384_addcarryx_u32(&x104, &x105, x37, 0x0, x3); + fiat_p384_addcarryx_u32(&x104, &x105, x37, x3, 0x0); uint32_t x106; fiat_p384_uint1 x107; - fiat_p384_addcarryx_u32(&x106, &x107, x103, x78, x104); + fiat_p384_addcarryx_u32(&x106, &x107, x103, x104, x78); uint32_t x108; fiat_p384_uint1 x109; - fiat_p384_addcarryx_u32(&x108, &x109, x79, 0x0, x45); + fiat_p384_addcarryx_u32(&x108, &x109, x79, x45, 0x0); uint32_t x110; fiat_p384_uint1 x111; - fiat_p384_addcarryx_u32(&x110, &x111, x107, x108, 0x0); + fiat_p384_addcarryx_u32(&x110, &x111, x107, 0x0, x108); uint32_t x112; fiat_p384_uint1 x113; - fiat_p384_addcarryx_u32(&x112, &x113, 0x0, (arg1[2]), x84); + fiat_p384_addcarryx_u32(&x112, &x113, 0x0, x84, (arg1[2])); uint32_t x114; fiat_p384_uint1 x115; - fiat_p384_addcarryx_u32(&x114, &x115, x113, 0x0, x86); + fiat_p384_addcarryx_u32(&x114, &x115, x113, x86, 0x0); uint32_t x116; fiat_p384_uint1 x117; - fiat_p384_addcarryx_u32(&x116, &x117, x115, 0x0, x88); + fiat_p384_addcarryx_u32(&x116, &x117, x115, x88, 0x0); uint32_t x118; fiat_p384_uint1 x119; - fiat_p384_addcarryx_u32(&x118, &x119, x117, 0x0, x90); + fiat_p384_addcarryx_u32(&x118, &x119, x117, x90, 0x0); uint32_t x120; fiat_p384_uint1 x121; - fiat_p384_addcarryx_u32(&x120, &x121, x119, 0x0, x92); + fiat_p384_addcarryx_u32(&x120, &x121, x119, x92, 0x0); uint32_t x122; fiat_p384_uint1 x123; - fiat_p384_addcarryx_u32(&x122, &x123, x121, 0x0, x94); + fiat_p384_addcarryx_u32(&x122, &x123, x121, x94, 0x0); uint32_t x124; fiat_p384_uint1 x125; - fiat_p384_addcarryx_u32(&x124, &x125, x123, 0x0, x96); + fiat_p384_addcarryx_u32(&x124, &x125, x123, x96, 0x0); uint32_t x126; fiat_p384_uint1 x127; - fiat_p384_addcarryx_u32(&x126, &x127, x125, 0x0, x98); + fiat_p384_addcarryx_u32(&x126, &x127, x125, x98, 0x0); uint32_t x128; fiat_p384_uint1 x129; - fiat_p384_addcarryx_u32(&x128, &x129, x127, 0x0, x100); + fiat_p384_addcarryx_u32(&x128, &x129, x127, x100, 0x0); uint32_t x130; fiat_p384_uint1 x131; - fiat_p384_addcarryx_u32(&x130, &x131, x129, 0x0, x102); + fiat_p384_addcarryx_u32(&x130, &x131, x129, x102, 0x0); uint32_t x132; fiat_p384_uint1 x133; - fiat_p384_addcarryx_u32(&x132, &x133, x131, 0x0, x106); + fiat_p384_addcarryx_u32(&x132, &x133, x131, x106, 0x0); uint32_t x134; fiat_p384_uint1 x135; - fiat_p384_addcarryx_u32(&x134, &x135, x133, 0x0, x110); + fiat_p384_addcarryx_u32(&x134, &x135, x133, x110, 0x0); uint32_t x136; uint32_t x137; fiat_p384_mulx_u32(&x136, &x137, x112, UINT32_C(0xffffffff)); @@ -5853,112 +5853,112 @@ static void fiat_p384_from_montgomery(uint32_t out1[12], const uint32_t arg1[12] fiat_p384_mulx_u32(&x154, &x155, x112, UINT32_C(0xffffffff)); uint32_t x156; fiat_p384_uint1 x157; - fiat_p384_addcarryx_u32(&x156, &x157, 0x0, x150, x153); + fiat_p384_addcarryx_u32(&x156, &x157, 0x0, x153, x150); uint32_t x158; fiat_p384_uint1 x159; - fiat_p384_addcarryx_u32(&x158, &x159, x157, x148, x151); + fiat_p384_addcarryx_u32(&x158, &x159, x157, x151, x148); uint32_t x160; fiat_p384_uint1 x161; - fiat_p384_addcarryx_u32(&x160, &x161, x159, x146, x149); + fiat_p384_addcarryx_u32(&x160, &x161, x159, x149, x146); uint32_t x162; fiat_p384_uint1 x163; - fiat_p384_addcarryx_u32(&x162, &x163, x161, x144, x147); + fiat_p384_addcarryx_u32(&x162, &x163, x161, x147, x144); uint32_t x164; fiat_p384_uint1 x165; - fiat_p384_addcarryx_u32(&x164, &x165, x163, x142, x145); + fiat_p384_addcarryx_u32(&x164, &x165, x163, x145, x142); uint32_t x166; fiat_p384_uint1 x167; - fiat_p384_addcarryx_u32(&x166, &x167, x165, x140, x143); + fiat_p384_addcarryx_u32(&x166, &x167, x165, x143, x140); uint32_t x168; fiat_p384_uint1 x169; - fiat_p384_addcarryx_u32(&x168, &x169, x167, x138, x141); + fiat_p384_addcarryx_u32(&x168, &x169, x167, x141, x138); uint32_t x170; fiat_p384_uint1 x171; - fiat_p384_addcarryx_u32(&x170, &x171, x169, x136, x139); + fiat_p384_addcarryx_u32(&x170, &x171, x169, x139, x136); uint32_t x172; fiat_p384_uint1 x173; - fiat_p384_addcarryx_u32(&x172, &x173, 0x0, x154, x112); + fiat_p384_addcarryx_u32(&x172, &x173, 0x0, x112, x154); uint32_t x174; fiat_p384_uint1 x175; - fiat_p384_addcarryx_u32(&x174, &x175, x173, x155, x114); + fiat_p384_addcarryx_u32(&x174, &x175, x173, x114, x155); uint32_t x176; fiat_p384_uint1 x177; - fiat_p384_addcarryx_u32(&x176, &x177, x175, 0x0, x116); + fiat_p384_addcarryx_u32(&x176, &x177, x175, x116, 0x0); uint32_t x178; fiat_p384_uint1 x179; - fiat_p384_addcarryx_u32(&x178, &x179, x177, x152, x118); + fiat_p384_addcarryx_u32(&x178, &x179, x177, x118, x152); uint32_t x180; fiat_p384_uint1 x181; - fiat_p384_addcarryx_u32(&x180, &x181, x179, x156, x120); + fiat_p384_addcarryx_u32(&x180, &x181, x179, x120, x156); uint32_t x182; fiat_p384_uint1 x183; - fiat_p384_addcarryx_u32(&x182, &x183, x181, x158, x122); + fiat_p384_addcarryx_u32(&x182, &x183, x181, x122, x158); uint32_t x184; fiat_p384_uint1 x185; - fiat_p384_addcarryx_u32(&x184, &x185, x183, x160, x124); + fiat_p384_addcarryx_u32(&x184, &x185, x183, x124, x160); uint32_t x186; fiat_p384_uint1 x187; - fiat_p384_addcarryx_u32(&x186, &x187, x185, x162, x126); + fiat_p384_addcarryx_u32(&x186, &x187, x185, x126, x162); uint32_t x188; fiat_p384_uint1 x189; - fiat_p384_addcarryx_u32(&x188, &x189, x187, x164, x128); + fiat_p384_addcarryx_u32(&x188, &x189, x187, x128, x164); uint32_t x190; fiat_p384_uint1 x191; - fiat_p384_addcarryx_u32(&x190, &x191, x189, x166, x130); + fiat_p384_addcarryx_u32(&x190, &x191, x189, x130, x166); uint32_t x192; fiat_p384_uint1 x193; - fiat_p384_addcarryx_u32(&x192, &x193, x191, x168, x132); + fiat_p384_addcarryx_u32(&x192, &x193, x191, x132, x168); uint32_t x194; fiat_p384_uint1 x195; - fiat_p384_addcarryx_u32(&x194, &x195, x193, x170, x134); + fiat_p384_addcarryx_u32(&x194, &x195, x193, x134, x170); uint32_t x196; fiat_p384_uint1 x197; - fiat_p384_addcarryx_u32(&x196, &x197, x111, 0x0, 0x0); + fiat_p384_addcarryx_u32(&x196, &x197, x171, x137, 0x0); uint32_t x198; fiat_p384_uint1 x199; - fiat_p384_addcarryx_u32(&x198, &x199, x135, 0x0, (fiat_p384_uint1)x196); + fiat_p384_addcarryx_u32(&x198, &x199, x111, 0x0, 0x0); uint32_t x200; fiat_p384_uint1 x201; - fiat_p384_addcarryx_u32(&x200, &x201, x171, 0x0, x137); + fiat_p384_addcarryx_u32(&x200, &x201, x135, (fiat_p384_uint1)x198, 0x0); uint32_t x202; fiat_p384_uint1 x203; - fiat_p384_addcarryx_u32(&x202, &x203, x195, x200, x198); + fiat_p384_addcarryx_u32(&x202, &x203, x195, x200, x196); uint32_t x204; fiat_p384_uint1 x205; - fiat_p384_addcarryx_u32(&x204, &x205, 0x0, (arg1[3]), x174); + fiat_p384_addcarryx_u32(&x204, &x205, 0x0, x174, (arg1[3])); uint32_t x206; fiat_p384_uint1 x207; - fiat_p384_addcarryx_u32(&x206, &x207, x205, 0x0, x176); + fiat_p384_addcarryx_u32(&x206, &x207, x205, x176, 0x0); uint32_t x208; fiat_p384_uint1 x209; - fiat_p384_addcarryx_u32(&x208, &x209, x207, 0x0, x178); + fiat_p384_addcarryx_u32(&x208, &x209, x207, x178, 0x0); uint32_t x210; fiat_p384_uint1 x211; - fiat_p384_addcarryx_u32(&x210, &x211, x209, 0x0, x180); + fiat_p384_addcarryx_u32(&x210, &x211, x209, x180, 0x0); uint32_t x212; fiat_p384_uint1 x213; - fiat_p384_addcarryx_u32(&x212, &x213, x211, 0x0, x182); + fiat_p384_addcarryx_u32(&x212, &x213, x211, x182, 0x0); uint32_t x214; fiat_p384_uint1 x215; - fiat_p384_addcarryx_u32(&x214, &x215, x213, 0x0, x184); + fiat_p384_addcarryx_u32(&x214, &x215, x213, x184, 0x0); uint32_t x216; fiat_p384_uint1 x217; - fiat_p384_addcarryx_u32(&x216, &x217, x215, 0x0, x186); + fiat_p384_addcarryx_u32(&x216, &x217, x215, x186, 0x0); uint32_t x218; fiat_p384_uint1 x219; - fiat_p384_addcarryx_u32(&x218, &x219, x217, 0x0, x188); + fiat_p384_addcarryx_u32(&x218, &x219, x217, x188, 0x0); uint32_t x220; fiat_p384_uint1 x221; - fiat_p384_addcarryx_u32(&x220, &x221, x219, 0x0, x190); + fiat_p384_addcarryx_u32(&x220, &x221, x219, x190, 0x0); uint32_t x222; fiat_p384_uint1 x223; - fiat_p384_addcarryx_u32(&x222, &x223, x221, 0x0, x192); + fiat_p384_addcarryx_u32(&x222, &x223, x221, x192, 0x0); uint32_t x224; fiat_p384_uint1 x225; - fiat_p384_addcarryx_u32(&x224, &x225, x223, 0x0, x194); + fiat_p384_addcarryx_u32(&x224, &x225, x223, x194, 0x0); uint32_t x226; fiat_p384_uint1 x227; - fiat_p384_addcarryx_u32(&x226, &x227, x225, 0x0, x202); + fiat_p384_addcarryx_u32(&x226, &x227, x225, x202, 0x0); uint32_t x228; uint32_t x229; fiat_p384_mulx_u32(&x228, &x229, x204, UINT32_C(0xffffffff)); @@ -5991,112 +5991,112 @@ static void fiat_p384_from_montgomery(uint32_t out1[12], const uint32_t arg1[12] fiat_p384_mulx_u32(&x246, &x247, x204, UINT32_C(0xffffffff)); uint32_t x248; fiat_p384_uint1 x249; - fiat_p384_addcarryx_u32(&x248, &x249, 0x0, x242, x245); + fiat_p384_addcarryx_u32(&x248, &x249, 0x0, x245, x242); uint32_t x250; fiat_p384_uint1 x251; - fiat_p384_addcarryx_u32(&x250, &x251, x249, x240, x243); + fiat_p384_addcarryx_u32(&x250, &x251, x249, x243, x240); uint32_t x252; fiat_p384_uint1 x253; - fiat_p384_addcarryx_u32(&x252, &x253, x251, x238, x241); + fiat_p384_addcarryx_u32(&x252, &x253, x251, x241, x238); uint32_t x254; fiat_p384_uint1 x255; - fiat_p384_addcarryx_u32(&x254, &x255, x253, x236, x239); + fiat_p384_addcarryx_u32(&x254, &x255, x253, x239, x236); uint32_t x256; fiat_p384_uint1 x257; - fiat_p384_addcarryx_u32(&x256, &x257, x255, x234, x237); + fiat_p384_addcarryx_u32(&x256, &x257, x255, x237, x234); uint32_t x258; fiat_p384_uint1 x259; - fiat_p384_addcarryx_u32(&x258, &x259, x257, x232, x235); + fiat_p384_addcarryx_u32(&x258, &x259, x257, x235, x232); uint32_t x260; fiat_p384_uint1 x261; - fiat_p384_addcarryx_u32(&x260, &x261, x259, x230, x233); + fiat_p384_addcarryx_u32(&x260, &x261, x259, x233, x230); uint32_t x262; fiat_p384_uint1 x263; - fiat_p384_addcarryx_u32(&x262, &x263, x261, x228, x231); + fiat_p384_addcarryx_u32(&x262, &x263, x261, x231, x228); uint32_t x264; fiat_p384_uint1 x265; - fiat_p384_addcarryx_u32(&x264, &x265, 0x0, x246, x204); + fiat_p384_addcarryx_u32(&x264, &x265, 0x0, x204, x246); uint32_t x266; fiat_p384_uint1 x267; - fiat_p384_addcarryx_u32(&x266, &x267, x265, x247, x206); + fiat_p384_addcarryx_u32(&x266, &x267, x265, x206, x247); uint32_t x268; fiat_p384_uint1 x269; - fiat_p384_addcarryx_u32(&x268, &x269, x267, 0x0, x208); + fiat_p384_addcarryx_u32(&x268, &x269, x267, x208, 0x0); uint32_t x270; fiat_p384_uint1 x271; - fiat_p384_addcarryx_u32(&x270, &x271, x269, x244, x210); + fiat_p384_addcarryx_u32(&x270, &x271, x269, x210, x244); uint32_t x272; fiat_p384_uint1 x273; - fiat_p384_addcarryx_u32(&x272, &x273, x271, x248, x212); + fiat_p384_addcarryx_u32(&x272, &x273, x271, x212, x248); uint32_t x274; fiat_p384_uint1 x275; - fiat_p384_addcarryx_u32(&x274, &x275, x273, x250, x214); + fiat_p384_addcarryx_u32(&x274, &x275, x273, x214, x250); uint32_t x276; fiat_p384_uint1 x277; - fiat_p384_addcarryx_u32(&x276, &x277, x275, x252, x216); + fiat_p384_addcarryx_u32(&x276, &x277, x275, x216, x252); uint32_t x278; fiat_p384_uint1 x279; - fiat_p384_addcarryx_u32(&x278, &x279, x277, x254, x218); + fiat_p384_addcarryx_u32(&x278, &x279, x277, x218, x254); uint32_t x280; fiat_p384_uint1 x281; - fiat_p384_addcarryx_u32(&x280, &x281, x279, x256, x220); + fiat_p384_addcarryx_u32(&x280, &x281, x279, x220, x256); uint32_t x282; fiat_p384_uint1 x283; - fiat_p384_addcarryx_u32(&x282, &x283, x281, x258, x222); + fiat_p384_addcarryx_u32(&x282, &x283, x281, x222, x258); uint32_t x284; fiat_p384_uint1 x285; - fiat_p384_addcarryx_u32(&x284, &x285, x283, x260, x224); + fiat_p384_addcarryx_u32(&x284, &x285, x283, x224, x260); uint32_t x286; fiat_p384_uint1 x287; - fiat_p384_addcarryx_u32(&x286, &x287, x285, x262, x226); + fiat_p384_addcarryx_u32(&x286, &x287, x285, x226, x262); uint32_t x288; fiat_p384_uint1 x289; - fiat_p384_addcarryx_u32(&x288, &x289, x203, 0x0, 0x0); + fiat_p384_addcarryx_u32(&x288, &x289, x263, x229, 0x0); uint32_t x290; fiat_p384_uint1 x291; - fiat_p384_addcarryx_u32(&x290, &x291, x227, 0x0, (fiat_p384_uint1)x288); + fiat_p384_addcarryx_u32(&x290, &x291, x203, 0x0, 0x0); uint32_t x292; fiat_p384_uint1 x293; - fiat_p384_addcarryx_u32(&x292, &x293, x263, 0x0, x229); + fiat_p384_addcarryx_u32(&x292, &x293, x227, (fiat_p384_uint1)x290, 0x0); uint32_t x294; fiat_p384_uint1 x295; - fiat_p384_addcarryx_u32(&x294, &x295, x287, x292, x290); + fiat_p384_addcarryx_u32(&x294, &x295, x287, x292, x288); uint32_t x296; fiat_p384_uint1 x297; - fiat_p384_addcarryx_u32(&x296, &x297, 0x0, (arg1[4]), x266); + fiat_p384_addcarryx_u32(&x296, &x297, 0x0, x266, (arg1[4])); uint32_t x298; fiat_p384_uint1 x299; - fiat_p384_addcarryx_u32(&x298, &x299, x297, 0x0, x268); + fiat_p384_addcarryx_u32(&x298, &x299, x297, x268, 0x0); uint32_t x300; fiat_p384_uint1 x301; - fiat_p384_addcarryx_u32(&x300, &x301, x299, 0x0, x270); + fiat_p384_addcarryx_u32(&x300, &x301, x299, x270, 0x0); uint32_t x302; fiat_p384_uint1 x303; - fiat_p384_addcarryx_u32(&x302, &x303, x301, 0x0, x272); + fiat_p384_addcarryx_u32(&x302, &x303, x301, x272, 0x0); uint32_t x304; fiat_p384_uint1 x305; - fiat_p384_addcarryx_u32(&x304, &x305, x303, 0x0, x274); + fiat_p384_addcarryx_u32(&x304, &x305, x303, x274, 0x0); uint32_t x306; fiat_p384_uint1 x307; - fiat_p384_addcarryx_u32(&x306, &x307, x305, 0x0, x276); + fiat_p384_addcarryx_u32(&x306, &x307, x305, x276, 0x0); uint32_t x308; fiat_p384_uint1 x309; - fiat_p384_addcarryx_u32(&x308, &x309, x307, 0x0, x278); + fiat_p384_addcarryx_u32(&x308, &x309, x307, x278, 0x0); uint32_t x310; fiat_p384_uint1 x311; - fiat_p384_addcarryx_u32(&x310, &x311, x309, 0x0, x280); + fiat_p384_addcarryx_u32(&x310, &x311, x309, x280, 0x0); uint32_t x312; fiat_p384_uint1 x313; - fiat_p384_addcarryx_u32(&x312, &x313, x311, 0x0, x282); + fiat_p384_addcarryx_u32(&x312, &x313, x311, x282, 0x0); uint32_t x314; fiat_p384_uint1 x315; - fiat_p384_addcarryx_u32(&x314, &x315, x313, 0x0, x284); + fiat_p384_addcarryx_u32(&x314, &x315, x313, x284, 0x0); uint32_t x316; fiat_p384_uint1 x317; - fiat_p384_addcarryx_u32(&x316, &x317, x315, 0x0, x286); + fiat_p384_addcarryx_u32(&x316, &x317, x315, x286, 0x0); uint32_t x318; fiat_p384_uint1 x319; - fiat_p384_addcarryx_u32(&x318, &x319, x317, 0x0, x294); + fiat_p384_addcarryx_u32(&x318, &x319, x317, x294, 0x0); uint32_t x320; uint32_t x321; fiat_p384_mulx_u32(&x320, &x321, x296, UINT32_C(0xffffffff)); @@ -6129,112 +6129,112 @@ static void fiat_p384_from_montgomery(uint32_t out1[12], const uint32_t arg1[12] fiat_p384_mulx_u32(&x338, &x339, x296, UINT32_C(0xffffffff)); uint32_t x340; fiat_p384_uint1 x341; - fiat_p384_addcarryx_u32(&x340, &x341, 0x0, x334, x337); + fiat_p384_addcarryx_u32(&x340, &x341, 0x0, x337, x334); uint32_t x342; fiat_p384_uint1 x343; - fiat_p384_addcarryx_u32(&x342, &x343, x341, x332, x335); + fiat_p384_addcarryx_u32(&x342, &x343, x341, x335, x332); uint32_t x344; fiat_p384_uint1 x345; - fiat_p384_addcarryx_u32(&x344, &x345, x343, x330, x333); + fiat_p384_addcarryx_u32(&x344, &x345, x343, x333, x330); uint32_t x346; fiat_p384_uint1 x347; - fiat_p384_addcarryx_u32(&x346, &x347, x345, x328, x331); + fiat_p384_addcarryx_u32(&x346, &x347, x345, x331, x328); uint32_t x348; fiat_p384_uint1 x349; - fiat_p384_addcarryx_u32(&x348, &x349, x347, x326, x329); + fiat_p384_addcarryx_u32(&x348, &x349, x347, x329, x326); uint32_t x350; fiat_p384_uint1 x351; - fiat_p384_addcarryx_u32(&x350, &x351, x349, x324, x327); + fiat_p384_addcarryx_u32(&x350, &x351, x349, x327, x324); uint32_t x352; fiat_p384_uint1 x353; - fiat_p384_addcarryx_u32(&x352, &x353, x351, x322, x325); + fiat_p384_addcarryx_u32(&x352, &x353, x351, x325, x322); uint32_t x354; fiat_p384_uint1 x355; - fiat_p384_addcarryx_u32(&x354, &x355, x353, x320, x323); + fiat_p384_addcarryx_u32(&x354, &x355, x353, x323, x320); uint32_t x356; fiat_p384_uint1 x357; - fiat_p384_addcarryx_u32(&x356, &x357, 0x0, x338, x296); + fiat_p384_addcarryx_u32(&x356, &x357, 0x0, x296, x338); uint32_t x358; fiat_p384_uint1 x359; - fiat_p384_addcarryx_u32(&x358, &x359, x357, x339, x298); + fiat_p384_addcarryx_u32(&x358, &x359, x357, x298, x339); uint32_t x360; fiat_p384_uint1 x361; - fiat_p384_addcarryx_u32(&x360, &x361, x359, 0x0, x300); + fiat_p384_addcarryx_u32(&x360, &x361, x359, x300, 0x0); uint32_t x362; fiat_p384_uint1 x363; - fiat_p384_addcarryx_u32(&x362, &x363, x361, x336, x302); + fiat_p384_addcarryx_u32(&x362, &x363, x361, x302, x336); uint32_t x364; fiat_p384_uint1 x365; - fiat_p384_addcarryx_u32(&x364, &x365, x363, x340, x304); + fiat_p384_addcarryx_u32(&x364, &x365, x363, x304, x340); uint32_t x366; fiat_p384_uint1 x367; - fiat_p384_addcarryx_u32(&x366, &x367, x365, x342, x306); + fiat_p384_addcarryx_u32(&x366, &x367, x365, x306, x342); uint32_t x368; fiat_p384_uint1 x369; - fiat_p384_addcarryx_u32(&x368, &x369, x367, x344, x308); + fiat_p384_addcarryx_u32(&x368, &x369, x367, x308, x344); uint32_t x370; fiat_p384_uint1 x371; - fiat_p384_addcarryx_u32(&x370, &x371, x369, x346, x310); + fiat_p384_addcarryx_u32(&x370, &x371, x369, x310, x346); uint32_t x372; fiat_p384_uint1 x373; - fiat_p384_addcarryx_u32(&x372, &x373, x371, x348, x312); + fiat_p384_addcarryx_u32(&x372, &x373, x371, x312, x348); uint32_t x374; fiat_p384_uint1 x375; - fiat_p384_addcarryx_u32(&x374, &x375, x373, x350, x314); + fiat_p384_addcarryx_u32(&x374, &x375, x373, x314, x350); uint32_t x376; fiat_p384_uint1 x377; - fiat_p384_addcarryx_u32(&x376, &x377, x375, x352, x316); + fiat_p384_addcarryx_u32(&x376, &x377, x375, x316, x352); uint32_t x378; fiat_p384_uint1 x379; - fiat_p384_addcarryx_u32(&x378, &x379, x377, x354, x318); + fiat_p384_addcarryx_u32(&x378, &x379, x377, x318, x354); uint32_t x380; fiat_p384_uint1 x381; - fiat_p384_addcarryx_u32(&x380, &x381, x295, 0x0, 0x0); + fiat_p384_addcarryx_u32(&x380, &x381, x355, x321, 0x0); uint32_t x382; fiat_p384_uint1 x383; - fiat_p384_addcarryx_u32(&x382, &x383, x319, 0x0, (fiat_p384_uint1)x380); + fiat_p384_addcarryx_u32(&x382, &x383, x295, 0x0, 0x0); uint32_t x384; fiat_p384_uint1 x385; - fiat_p384_addcarryx_u32(&x384, &x385, x355, 0x0, x321); + fiat_p384_addcarryx_u32(&x384, &x385, x319, (fiat_p384_uint1)x382, 0x0); uint32_t x386; fiat_p384_uint1 x387; - fiat_p384_addcarryx_u32(&x386, &x387, x379, x384, x382); + fiat_p384_addcarryx_u32(&x386, &x387, x379, x384, x380); uint32_t x388; fiat_p384_uint1 x389; - fiat_p384_addcarryx_u32(&x388, &x389, 0x0, (arg1[5]), x358); + fiat_p384_addcarryx_u32(&x388, &x389, 0x0, x358, (arg1[5])); uint32_t x390; fiat_p384_uint1 x391; - fiat_p384_addcarryx_u32(&x390, &x391, x389, 0x0, x360); + fiat_p384_addcarryx_u32(&x390, &x391, x389, x360, 0x0); uint32_t x392; fiat_p384_uint1 x393; - fiat_p384_addcarryx_u32(&x392, &x393, x391, 0x0, x362); + fiat_p384_addcarryx_u32(&x392, &x393, x391, x362, 0x0); uint32_t x394; fiat_p384_uint1 x395; - fiat_p384_addcarryx_u32(&x394, &x395, x393, 0x0, x364); + fiat_p384_addcarryx_u32(&x394, &x395, x393, x364, 0x0); uint32_t x396; fiat_p384_uint1 x397; - fiat_p384_addcarryx_u32(&x396, &x397, x395, 0x0, x366); + fiat_p384_addcarryx_u32(&x396, &x397, x395, x366, 0x0); uint32_t x398; fiat_p384_uint1 x399; - fiat_p384_addcarryx_u32(&x398, &x399, x397, 0x0, x368); + fiat_p384_addcarryx_u32(&x398, &x399, x397, x368, 0x0); uint32_t x400; fiat_p384_uint1 x401; - fiat_p384_addcarryx_u32(&x400, &x401, x399, 0x0, x370); + fiat_p384_addcarryx_u32(&x400, &x401, x399, x370, 0x0); uint32_t x402; fiat_p384_uint1 x403; - fiat_p384_addcarryx_u32(&x402, &x403, x401, 0x0, x372); + fiat_p384_addcarryx_u32(&x402, &x403, x401, x372, 0x0); uint32_t x404; fiat_p384_uint1 x405; - fiat_p384_addcarryx_u32(&x404, &x405, x403, 0x0, x374); + fiat_p384_addcarryx_u32(&x404, &x405, x403, x374, 0x0); uint32_t x406; fiat_p384_uint1 x407; - fiat_p384_addcarryx_u32(&x406, &x407, x405, 0x0, x376); + fiat_p384_addcarryx_u32(&x406, &x407, x405, x376, 0x0); uint32_t x408; fiat_p384_uint1 x409; - fiat_p384_addcarryx_u32(&x408, &x409, x407, 0x0, x378); + fiat_p384_addcarryx_u32(&x408, &x409, x407, x378, 0x0); uint32_t x410; fiat_p384_uint1 x411; - fiat_p384_addcarryx_u32(&x410, &x411, x409, 0x0, x386); + fiat_p384_addcarryx_u32(&x410, &x411, x409, x386, 0x0); uint32_t x412; uint32_t x413; fiat_p384_mulx_u32(&x412, &x413, x388, UINT32_C(0xffffffff)); @@ -6267,112 +6267,112 @@ static void fiat_p384_from_montgomery(uint32_t out1[12], const uint32_t arg1[12] fiat_p384_mulx_u32(&x430, &x431, x388, UINT32_C(0xffffffff)); uint32_t x432; fiat_p384_uint1 x433; - fiat_p384_addcarryx_u32(&x432, &x433, 0x0, x426, x429); + fiat_p384_addcarryx_u32(&x432, &x433, 0x0, x429, x426); uint32_t x434; fiat_p384_uint1 x435; - fiat_p384_addcarryx_u32(&x434, &x435, x433, x424, x427); + fiat_p384_addcarryx_u32(&x434, &x435, x433, x427, x424); uint32_t x436; fiat_p384_uint1 x437; - fiat_p384_addcarryx_u32(&x436, &x437, x435, x422, x425); + fiat_p384_addcarryx_u32(&x436, &x437, x435, x425, x422); uint32_t x438; fiat_p384_uint1 x439; - fiat_p384_addcarryx_u32(&x438, &x439, x437, x420, x423); + fiat_p384_addcarryx_u32(&x438, &x439, x437, x423, x420); uint32_t x440; fiat_p384_uint1 x441; - fiat_p384_addcarryx_u32(&x440, &x441, x439, x418, x421); + fiat_p384_addcarryx_u32(&x440, &x441, x439, x421, x418); uint32_t x442; fiat_p384_uint1 x443; - fiat_p384_addcarryx_u32(&x442, &x443, x441, x416, x419); + fiat_p384_addcarryx_u32(&x442, &x443, x441, x419, x416); uint32_t x444; fiat_p384_uint1 x445; - fiat_p384_addcarryx_u32(&x444, &x445, x443, x414, x417); + fiat_p384_addcarryx_u32(&x444, &x445, x443, x417, x414); uint32_t x446; fiat_p384_uint1 x447; - fiat_p384_addcarryx_u32(&x446, &x447, x445, x412, x415); + fiat_p384_addcarryx_u32(&x446, &x447, x445, x415, x412); uint32_t x448; fiat_p384_uint1 x449; - fiat_p384_addcarryx_u32(&x448, &x449, 0x0, x430, x388); + fiat_p384_addcarryx_u32(&x448, &x449, 0x0, x388, x430); uint32_t x450; fiat_p384_uint1 x451; - fiat_p384_addcarryx_u32(&x450, &x451, x449, x431, x390); + fiat_p384_addcarryx_u32(&x450, &x451, x449, x390, x431); uint32_t x452; fiat_p384_uint1 x453; - fiat_p384_addcarryx_u32(&x452, &x453, x451, 0x0, x392); + fiat_p384_addcarryx_u32(&x452, &x453, x451, x392, 0x0); uint32_t x454; fiat_p384_uint1 x455; - fiat_p384_addcarryx_u32(&x454, &x455, x453, x428, x394); + fiat_p384_addcarryx_u32(&x454, &x455, x453, x394, x428); uint32_t x456; fiat_p384_uint1 x457; - fiat_p384_addcarryx_u32(&x456, &x457, x455, x432, x396); + fiat_p384_addcarryx_u32(&x456, &x457, x455, x396, x432); uint32_t x458; fiat_p384_uint1 x459; - fiat_p384_addcarryx_u32(&x458, &x459, x457, x434, x398); + fiat_p384_addcarryx_u32(&x458, &x459, x457, x398, x434); uint32_t x460; fiat_p384_uint1 x461; - fiat_p384_addcarryx_u32(&x460, &x461, x459, x436, x400); + fiat_p384_addcarryx_u32(&x460, &x461, x459, x400, x436); uint32_t x462; fiat_p384_uint1 x463; - fiat_p384_addcarryx_u32(&x462, &x463, x461, x438, x402); + fiat_p384_addcarryx_u32(&x462, &x463, x461, x402, x438); uint32_t x464; fiat_p384_uint1 x465; - fiat_p384_addcarryx_u32(&x464, &x465, x463, x440, x404); + fiat_p384_addcarryx_u32(&x464, &x465, x463, x404, x440); uint32_t x466; fiat_p384_uint1 x467; - fiat_p384_addcarryx_u32(&x466, &x467, x465, x442, x406); + fiat_p384_addcarryx_u32(&x466, &x467, x465, x406, x442); uint32_t x468; fiat_p384_uint1 x469; - fiat_p384_addcarryx_u32(&x468, &x469, x467, x444, x408); + fiat_p384_addcarryx_u32(&x468, &x469, x467, x408, x444); uint32_t x470; fiat_p384_uint1 x471; - fiat_p384_addcarryx_u32(&x470, &x471, x469, x446, x410); + fiat_p384_addcarryx_u32(&x470, &x471, x469, x410, x446); uint32_t x472; fiat_p384_uint1 x473; - fiat_p384_addcarryx_u32(&x472, &x473, x387, 0x0, 0x0); + fiat_p384_addcarryx_u32(&x472, &x473, x447, x413, 0x0); uint32_t x474; fiat_p384_uint1 x475; - fiat_p384_addcarryx_u32(&x474, &x475, x411, 0x0, (fiat_p384_uint1)x472); + fiat_p384_addcarryx_u32(&x474, &x475, x387, 0x0, 0x0); uint32_t x476; fiat_p384_uint1 x477; - fiat_p384_addcarryx_u32(&x476, &x477, x447, 0x0, x413); + fiat_p384_addcarryx_u32(&x476, &x477, x411, (fiat_p384_uint1)x474, 0x0); uint32_t x478; fiat_p384_uint1 x479; - fiat_p384_addcarryx_u32(&x478, &x479, x471, x476, x474); + fiat_p384_addcarryx_u32(&x478, &x479, x471, x476, x472); uint32_t x480; fiat_p384_uint1 x481; - fiat_p384_addcarryx_u32(&x480, &x481, 0x0, (arg1[6]), x450); + fiat_p384_addcarryx_u32(&x480, &x481, 0x0, x450, (arg1[6])); uint32_t x482; fiat_p384_uint1 x483; - fiat_p384_addcarryx_u32(&x482, &x483, x481, 0x0, x452); + fiat_p384_addcarryx_u32(&x482, &x483, x481, x452, 0x0); uint32_t x484; fiat_p384_uint1 x485; - fiat_p384_addcarryx_u32(&x484, &x485, x483, 0x0, x454); + fiat_p384_addcarryx_u32(&x484, &x485, x483, x454, 0x0); uint32_t x486; fiat_p384_uint1 x487; - fiat_p384_addcarryx_u32(&x486, &x487, x485, 0x0, x456); + fiat_p384_addcarryx_u32(&x486, &x487, x485, x456, 0x0); uint32_t x488; fiat_p384_uint1 x489; - fiat_p384_addcarryx_u32(&x488, &x489, x487, 0x0, x458); + fiat_p384_addcarryx_u32(&x488, &x489, x487, x458, 0x0); uint32_t x490; fiat_p384_uint1 x491; - fiat_p384_addcarryx_u32(&x490, &x491, x489, 0x0, x460); + fiat_p384_addcarryx_u32(&x490, &x491, x489, x460, 0x0); uint32_t x492; fiat_p384_uint1 x493; - fiat_p384_addcarryx_u32(&x492, &x493, x491, 0x0, x462); + fiat_p384_addcarryx_u32(&x492, &x493, x491, x462, 0x0); uint32_t x494; fiat_p384_uint1 x495; - fiat_p384_addcarryx_u32(&x494, &x495, x493, 0x0, x464); + fiat_p384_addcarryx_u32(&x494, &x495, x493, x464, 0x0); uint32_t x496; fiat_p384_uint1 x497; - fiat_p384_addcarryx_u32(&x496, &x497, x495, 0x0, x466); + fiat_p384_addcarryx_u32(&x496, &x497, x495, x466, 0x0); uint32_t x498; fiat_p384_uint1 x499; - fiat_p384_addcarryx_u32(&x498, &x499, x497, 0x0, x468); + fiat_p384_addcarryx_u32(&x498, &x499, x497, x468, 0x0); uint32_t x500; fiat_p384_uint1 x501; - fiat_p384_addcarryx_u32(&x500, &x501, x499, 0x0, x470); + fiat_p384_addcarryx_u32(&x500, &x501, x499, x470, 0x0); uint32_t x502; fiat_p384_uint1 x503; - fiat_p384_addcarryx_u32(&x502, &x503, x501, 0x0, x478); + fiat_p384_addcarryx_u32(&x502, &x503, x501, x478, 0x0); uint32_t x504; uint32_t x505; fiat_p384_mulx_u32(&x504, &x505, x480, UINT32_C(0xffffffff)); @@ -6405,112 +6405,112 @@ static void fiat_p384_from_montgomery(uint32_t out1[12], const uint32_t arg1[12] fiat_p384_mulx_u32(&x522, &x523, x480, UINT32_C(0xffffffff)); uint32_t x524; fiat_p384_uint1 x525; - fiat_p384_addcarryx_u32(&x524, &x525, 0x0, x518, x521); + fiat_p384_addcarryx_u32(&x524, &x525, 0x0, x521, x518); uint32_t x526; fiat_p384_uint1 x527; - fiat_p384_addcarryx_u32(&x526, &x527, x525, x516, x519); + fiat_p384_addcarryx_u32(&x526, &x527, x525, x519, x516); uint32_t x528; fiat_p384_uint1 x529; - fiat_p384_addcarryx_u32(&x528, &x529, x527, x514, x517); + fiat_p384_addcarryx_u32(&x528, &x529, x527, x517, x514); uint32_t x530; fiat_p384_uint1 x531; - fiat_p384_addcarryx_u32(&x530, &x531, x529, x512, x515); + fiat_p384_addcarryx_u32(&x530, &x531, x529, x515, x512); uint32_t x532; fiat_p384_uint1 x533; - fiat_p384_addcarryx_u32(&x532, &x533, x531, x510, x513); + fiat_p384_addcarryx_u32(&x532, &x533, x531, x513, x510); uint32_t x534; fiat_p384_uint1 x535; - fiat_p384_addcarryx_u32(&x534, &x535, x533, x508, x511); + fiat_p384_addcarryx_u32(&x534, &x535, x533, x511, x508); uint32_t x536; fiat_p384_uint1 x537; - fiat_p384_addcarryx_u32(&x536, &x537, x535, x506, x509); + fiat_p384_addcarryx_u32(&x536, &x537, x535, x509, x506); uint32_t x538; fiat_p384_uint1 x539; - fiat_p384_addcarryx_u32(&x538, &x539, x537, x504, x507); + fiat_p384_addcarryx_u32(&x538, &x539, x537, x507, x504); uint32_t x540; fiat_p384_uint1 x541; - fiat_p384_addcarryx_u32(&x540, &x541, 0x0, x522, x480); + fiat_p384_addcarryx_u32(&x540, &x541, 0x0, x480, x522); uint32_t x542; fiat_p384_uint1 x543; - fiat_p384_addcarryx_u32(&x542, &x543, x541, x523, x482); + fiat_p384_addcarryx_u32(&x542, &x543, x541, x482, x523); uint32_t x544; fiat_p384_uint1 x545; - fiat_p384_addcarryx_u32(&x544, &x545, x543, 0x0, x484); + fiat_p384_addcarryx_u32(&x544, &x545, x543, x484, 0x0); uint32_t x546; fiat_p384_uint1 x547; - fiat_p384_addcarryx_u32(&x546, &x547, x545, x520, x486); + fiat_p384_addcarryx_u32(&x546, &x547, x545, x486, x520); uint32_t x548; fiat_p384_uint1 x549; - fiat_p384_addcarryx_u32(&x548, &x549, x547, x524, x488); + fiat_p384_addcarryx_u32(&x548, &x549, x547, x488, x524); uint32_t x550; fiat_p384_uint1 x551; - fiat_p384_addcarryx_u32(&x550, &x551, x549, x526, x490); + fiat_p384_addcarryx_u32(&x550, &x551, x549, x490, x526); uint32_t x552; fiat_p384_uint1 x553; - fiat_p384_addcarryx_u32(&x552, &x553, x551, x528, x492); + fiat_p384_addcarryx_u32(&x552, &x553, x551, x492, x528); uint32_t x554; fiat_p384_uint1 x555; - fiat_p384_addcarryx_u32(&x554, &x555, x553, x530, x494); + fiat_p384_addcarryx_u32(&x554, &x555, x553, x494, x530); uint32_t x556; fiat_p384_uint1 x557; - fiat_p384_addcarryx_u32(&x556, &x557, x555, x532, x496); + fiat_p384_addcarryx_u32(&x556, &x557, x555, x496, x532); uint32_t x558; fiat_p384_uint1 x559; - fiat_p384_addcarryx_u32(&x558, &x559, x557, x534, x498); + fiat_p384_addcarryx_u32(&x558, &x559, x557, x498, x534); uint32_t x560; fiat_p384_uint1 x561; - fiat_p384_addcarryx_u32(&x560, &x561, x559, x536, x500); + fiat_p384_addcarryx_u32(&x560, &x561, x559, x500, x536); uint32_t x562; fiat_p384_uint1 x563; - fiat_p384_addcarryx_u32(&x562, &x563, x561, x538, x502); + fiat_p384_addcarryx_u32(&x562, &x563, x561, x502, x538); uint32_t x564; fiat_p384_uint1 x565; - fiat_p384_addcarryx_u32(&x564, &x565, x479, 0x0, 0x0); + fiat_p384_addcarryx_u32(&x564, &x565, x539, x505, 0x0); uint32_t x566; fiat_p384_uint1 x567; - fiat_p384_addcarryx_u32(&x566, &x567, x503, 0x0, (fiat_p384_uint1)x564); + fiat_p384_addcarryx_u32(&x566, &x567, x479, 0x0, 0x0); uint32_t x568; fiat_p384_uint1 x569; - fiat_p384_addcarryx_u32(&x568, &x569, x539, 0x0, x505); + fiat_p384_addcarryx_u32(&x568, &x569, x503, (fiat_p384_uint1)x566, 0x0); uint32_t x570; fiat_p384_uint1 x571; - fiat_p384_addcarryx_u32(&x570, &x571, x563, x568, x566); + fiat_p384_addcarryx_u32(&x570, &x571, x563, x568, x564); uint32_t x572; fiat_p384_uint1 x573; - fiat_p384_addcarryx_u32(&x572, &x573, 0x0, (arg1[7]), x542); + fiat_p384_addcarryx_u32(&x572, &x573, 0x0, x542, (arg1[7])); uint32_t x574; fiat_p384_uint1 x575; - fiat_p384_addcarryx_u32(&x574, &x575, x573, 0x0, x544); + fiat_p384_addcarryx_u32(&x574, &x575, x573, x544, 0x0); uint32_t x576; fiat_p384_uint1 x577; - fiat_p384_addcarryx_u32(&x576, &x577, x575, 0x0, x546); + fiat_p384_addcarryx_u32(&x576, &x577, x575, x546, 0x0); uint32_t x578; fiat_p384_uint1 x579; - fiat_p384_addcarryx_u32(&x578, &x579, x577, 0x0, x548); + fiat_p384_addcarryx_u32(&x578, &x579, x577, x548, 0x0); uint32_t x580; fiat_p384_uint1 x581; - fiat_p384_addcarryx_u32(&x580, &x581, x579, 0x0, x550); + fiat_p384_addcarryx_u32(&x580, &x581, x579, x550, 0x0); uint32_t x582; fiat_p384_uint1 x583; - fiat_p384_addcarryx_u32(&x582, &x583, x581, 0x0, x552); + fiat_p384_addcarryx_u32(&x582, &x583, x581, x552, 0x0); uint32_t x584; fiat_p384_uint1 x585; - fiat_p384_addcarryx_u32(&x584, &x585, x583, 0x0, x554); + fiat_p384_addcarryx_u32(&x584, &x585, x583, x554, 0x0); uint32_t x586; fiat_p384_uint1 x587; - fiat_p384_addcarryx_u32(&x586, &x587, x585, 0x0, x556); + fiat_p384_addcarryx_u32(&x586, &x587, x585, x556, 0x0); uint32_t x588; fiat_p384_uint1 x589; - fiat_p384_addcarryx_u32(&x588, &x589, x587, 0x0, x558); + fiat_p384_addcarryx_u32(&x588, &x589, x587, x558, 0x0); uint32_t x590; fiat_p384_uint1 x591; - fiat_p384_addcarryx_u32(&x590, &x591, x589, 0x0, x560); + fiat_p384_addcarryx_u32(&x590, &x591, x589, x560, 0x0); uint32_t x592; fiat_p384_uint1 x593; - fiat_p384_addcarryx_u32(&x592, &x593, x591, 0x0, x562); + fiat_p384_addcarryx_u32(&x592, &x593, x591, x562, 0x0); uint32_t x594; fiat_p384_uint1 x595; - fiat_p384_addcarryx_u32(&x594, &x595, x593, 0x0, x570); + fiat_p384_addcarryx_u32(&x594, &x595, x593, x570, 0x0); uint32_t x596; uint32_t x597; fiat_p384_mulx_u32(&x596, &x597, x572, UINT32_C(0xffffffff)); @@ -6543,112 +6543,112 @@ static void fiat_p384_from_montgomery(uint32_t out1[12], const uint32_t arg1[12] fiat_p384_mulx_u32(&x614, &x615, x572, UINT32_C(0xffffffff)); uint32_t x616; fiat_p384_uint1 x617; - fiat_p384_addcarryx_u32(&x616, &x617, 0x0, x610, x613); + fiat_p384_addcarryx_u32(&x616, &x617, 0x0, x613, x610); uint32_t x618; fiat_p384_uint1 x619; - fiat_p384_addcarryx_u32(&x618, &x619, x617, x608, x611); + fiat_p384_addcarryx_u32(&x618, &x619, x617, x611, x608); uint32_t x620; fiat_p384_uint1 x621; - fiat_p384_addcarryx_u32(&x620, &x621, x619, x606, x609); + fiat_p384_addcarryx_u32(&x620, &x621, x619, x609, x606); uint32_t x622; fiat_p384_uint1 x623; - fiat_p384_addcarryx_u32(&x622, &x623, x621, x604, x607); + fiat_p384_addcarryx_u32(&x622, &x623, x621, x607, x604); uint32_t x624; fiat_p384_uint1 x625; - fiat_p384_addcarryx_u32(&x624, &x625, x623, x602, x605); + fiat_p384_addcarryx_u32(&x624, &x625, x623, x605, x602); uint32_t x626; fiat_p384_uint1 x627; - fiat_p384_addcarryx_u32(&x626, &x627, x625, x600, x603); + fiat_p384_addcarryx_u32(&x626, &x627, x625, x603, x600); uint32_t x628; fiat_p384_uint1 x629; - fiat_p384_addcarryx_u32(&x628, &x629, x627, x598, x601); + fiat_p384_addcarryx_u32(&x628, &x629, x627, x601, x598); uint32_t x630; fiat_p384_uint1 x631; - fiat_p384_addcarryx_u32(&x630, &x631, x629, x596, x599); + fiat_p384_addcarryx_u32(&x630, &x631, x629, x599, x596); uint32_t x632; fiat_p384_uint1 x633; - fiat_p384_addcarryx_u32(&x632, &x633, 0x0, x614, x572); + fiat_p384_addcarryx_u32(&x632, &x633, 0x0, x572, x614); uint32_t x634; fiat_p384_uint1 x635; - fiat_p384_addcarryx_u32(&x634, &x635, x633, x615, x574); + fiat_p384_addcarryx_u32(&x634, &x635, x633, x574, x615); uint32_t x636; fiat_p384_uint1 x637; - fiat_p384_addcarryx_u32(&x636, &x637, x635, 0x0, x576); + fiat_p384_addcarryx_u32(&x636, &x637, x635, x576, 0x0); uint32_t x638; fiat_p384_uint1 x639; - fiat_p384_addcarryx_u32(&x638, &x639, x637, x612, x578); + fiat_p384_addcarryx_u32(&x638, &x639, x637, x578, x612); uint32_t x640; fiat_p384_uint1 x641; - fiat_p384_addcarryx_u32(&x640, &x641, x639, x616, x580); + fiat_p384_addcarryx_u32(&x640, &x641, x639, x580, x616); uint32_t x642; fiat_p384_uint1 x643; - fiat_p384_addcarryx_u32(&x642, &x643, x641, x618, x582); + fiat_p384_addcarryx_u32(&x642, &x643, x641, x582, x618); uint32_t x644; fiat_p384_uint1 x645; - fiat_p384_addcarryx_u32(&x644, &x645, x643, x620, x584); + fiat_p384_addcarryx_u32(&x644, &x645, x643, x584, x620); uint32_t x646; fiat_p384_uint1 x647; - fiat_p384_addcarryx_u32(&x646, &x647, x645, x622, x586); + fiat_p384_addcarryx_u32(&x646, &x647, x645, x586, x622); uint32_t x648; fiat_p384_uint1 x649; - fiat_p384_addcarryx_u32(&x648, &x649, x647, x624, x588); + fiat_p384_addcarryx_u32(&x648, &x649, x647, x588, x624); uint32_t x650; fiat_p384_uint1 x651; - fiat_p384_addcarryx_u32(&x650, &x651, x649, x626, x590); + fiat_p384_addcarryx_u32(&x650, &x651, x649, x590, x626); uint32_t x652; fiat_p384_uint1 x653; - fiat_p384_addcarryx_u32(&x652, &x653, x651, x628, x592); + fiat_p384_addcarryx_u32(&x652, &x653, x651, x592, x628); uint32_t x654; fiat_p384_uint1 x655; - fiat_p384_addcarryx_u32(&x654, &x655, x653, x630, x594); + fiat_p384_addcarryx_u32(&x654, &x655, x653, x594, x630); uint32_t x656; fiat_p384_uint1 x657; - fiat_p384_addcarryx_u32(&x656, &x657, x571, 0x0, 0x0); + fiat_p384_addcarryx_u32(&x656, &x657, x631, x597, 0x0); uint32_t x658; fiat_p384_uint1 x659; - fiat_p384_addcarryx_u32(&x658, &x659, x595, 0x0, (fiat_p384_uint1)x656); + fiat_p384_addcarryx_u32(&x658, &x659, x571, 0x0, 0x0); uint32_t x660; fiat_p384_uint1 x661; - fiat_p384_addcarryx_u32(&x660, &x661, x631, 0x0, x597); + fiat_p384_addcarryx_u32(&x660, &x661, x595, (fiat_p384_uint1)x658, 0x0); uint32_t x662; fiat_p384_uint1 x663; - fiat_p384_addcarryx_u32(&x662, &x663, x655, x660, x658); + fiat_p384_addcarryx_u32(&x662, &x663, x655, x660, x656); uint32_t x664; fiat_p384_uint1 x665; - fiat_p384_addcarryx_u32(&x664, &x665, 0x0, (arg1[8]), x634); + fiat_p384_addcarryx_u32(&x664, &x665, 0x0, x634, (arg1[8])); uint32_t x666; fiat_p384_uint1 x667; - fiat_p384_addcarryx_u32(&x666, &x667, x665, 0x0, x636); + fiat_p384_addcarryx_u32(&x666, &x667, x665, x636, 0x0); uint32_t x668; fiat_p384_uint1 x669; - fiat_p384_addcarryx_u32(&x668, &x669, x667, 0x0, x638); + fiat_p384_addcarryx_u32(&x668, &x669, x667, x638, 0x0); uint32_t x670; fiat_p384_uint1 x671; - fiat_p384_addcarryx_u32(&x670, &x671, x669, 0x0, x640); + fiat_p384_addcarryx_u32(&x670, &x671, x669, x640, 0x0); uint32_t x672; fiat_p384_uint1 x673; - fiat_p384_addcarryx_u32(&x672, &x673, x671, 0x0, x642); + fiat_p384_addcarryx_u32(&x672, &x673, x671, x642, 0x0); uint32_t x674; fiat_p384_uint1 x675; - fiat_p384_addcarryx_u32(&x674, &x675, x673, 0x0, x644); + fiat_p384_addcarryx_u32(&x674, &x675, x673, x644, 0x0); uint32_t x676; fiat_p384_uint1 x677; - fiat_p384_addcarryx_u32(&x676, &x677, x675, 0x0, x646); + fiat_p384_addcarryx_u32(&x676, &x677, x675, x646, 0x0); uint32_t x678; fiat_p384_uint1 x679; - fiat_p384_addcarryx_u32(&x678, &x679, x677, 0x0, x648); + fiat_p384_addcarryx_u32(&x678, &x679, x677, x648, 0x0); uint32_t x680; fiat_p384_uint1 x681; - fiat_p384_addcarryx_u32(&x680, &x681, x679, 0x0, x650); + fiat_p384_addcarryx_u32(&x680, &x681, x679, x650, 0x0); uint32_t x682; fiat_p384_uint1 x683; - fiat_p384_addcarryx_u32(&x682, &x683, x681, 0x0, x652); + fiat_p384_addcarryx_u32(&x682, &x683, x681, x652, 0x0); uint32_t x684; fiat_p384_uint1 x685; - fiat_p384_addcarryx_u32(&x684, &x685, x683, 0x0, x654); + fiat_p384_addcarryx_u32(&x684, &x685, x683, x654, 0x0); uint32_t x686; fiat_p384_uint1 x687; - fiat_p384_addcarryx_u32(&x686, &x687, x685, 0x0, x662); + fiat_p384_addcarryx_u32(&x686, &x687, x685, x662, 0x0); uint32_t x688; uint32_t x689; fiat_p384_mulx_u32(&x688, &x689, x664, UINT32_C(0xffffffff)); @@ -6681,112 +6681,112 @@ static void fiat_p384_from_montgomery(uint32_t out1[12], const uint32_t arg1[12] fiat_p384_mulx_u32(&x706, &x707, x664, UINT32_C(0xffffffff)); uint32_t x708; fiat_p384_uint1 x709; - fiat_p384_addcarryx_u32(&x708, &x709, 0x0, x702, x705); + fiat_p384_addcarryx_u32(&x708, &x709, 0x0, x705, x702); uint32_t x710; fiat_p384_uint1 x711; - fiat_p384_addcarryx_u32(&x710, &x711, x709, x700, x703); + fiat_p384_addcarryx_u32(&x710, &x711, x709, x703, x700); uint32_t x712; fiat_p384_uint1 x713; - fiat_p384_addcarryx_u32(&x712, &x713, x711, x698, x701); + fiat_p384_addcarryx_u32(&x712, &x713, x711, x701, x698); uint32_t x714; fiat_p384_uint1 x715; - fiat_p384_addcarryx_u32(&x714, &x715, x713, x696, x699); + fiat_p384_addcarryx_u32(&x714, &x715, x713, x699, x696); uint32_t x716; fiat_p384_uint1 x717; - fiat_p384_addcarryx_u32(&x716, &x717, x715, x694, x697); + fiat_p384_addcarryx_u32(&x716, &x717, x715, x697, x694); uint32_t x718; fiat_p384_uint1 x719; - fiat_p384_addcarryx_u32(&x718, &x719, x717, x692, x695); + fiat_p384_addcarryx_u32(&x718, &x719, x717, x695, x692); uint32_t x720; fiat_p384_uint1 x721; - fiat_p384_addcarryx_u32(&x720, &x721, x719, x690, x693); + fiat_p384_addcarryx_u32(&x720, &x721, x719, x693, x690); uint32_t x722; fiat_p384_uint1 x723; - fiat_p384_addcarryx_u32(&x722, &x723, x721, x688, x691); + fiat_p384_addcarryx_u32(&x722, &x723, x721, x691, x688); uint32_t x724; fiat_p384_uint1 x725; - fiat_p384_addcarryx_u32(&x724, &x725, 0x0, x706, x664); + fiat_p384_addcarryx_u32(&x724, &x725, 0x0, x664, x706); uint32_t x726; fiat_p384_uint1 x727; - fiat_p384_addcarryx_u32(&x726, &x727, x725, x707, x666); + fiat_p384_addcarryx_u32(&x726, &x727, x725, x666, x707); uint32_t x728; fiat_p384_uint1 x729; - fiat_p384_addcarryx_u32(&x728, &x729, x727, 0x0, x668); + fiat_p384_addcarryx_u32(&x728, &x729, x727, x668, 0x0); uint32_t x730; fiat_p384_uint1 x731; - fiat_p384_addcarryx_u32(&x730, &x731, x729, x704, x670); + fiat_p384_addcarryx_u32(&x730, &x731, x729, x670, x704); uint32_t x732; fiat_p384_uint1 x733; - fiat_p384_addcarryx_u32(&x732, &x733, x731, x708, x672); + fiat_p384_addcarryx_u32(&x732, &x733, x731, x672, x708); uint32_t x734; fiat_p384_uint1 x735; - fiat_p384_addcarryx_u32(&x734, &x735, x733, x710, x674); + fiat_p384_addcarryx_u32(&x734, &x735, x733, x674, x710); uint32_t x736; fiat_p384_uint1 x737; - fiat_p384_addcarryx_u32(&x736, &x737, x735, x712, x676); + fiat_p384_addcarryx_u32(&x736, &x737, x735, x676, x712); uint32_t x738; fiat_p384_uint1 x739; - fiat_p384_addcarryx_u32(&x738, &x739, x737, x714, x678); + fiat_p384_addcarryx_u32(&x738, &x739, x737, x678, x714); uint32_t x740; fiat_p384_uint1 x741; - fiat_p384_addcarryx_u32(&x740, &x741, x739, x716, x680); + fiat_p384_addcarryx_u32(&x740, &x741, x739, x680, x716); uint32_t x742; fiat_p384_uint1 x743; - fiat_p384_addcarryx_u32(&x742, &x743, x741, x718, x682); + fiat_p384_addcarryx_u32(&x742, &x743, x741, x682, x718); uint32_t x744; fiat_p384_uint1 x745; - fiat_p384_addcarryx_u32(&x744, &x745, x743, x720, x684); + fiat_p384_addcarryx_u32(&x744, &x745, x743, x684, x720); uint32_t x746; fiat_p384_uint1 x747; - fiat_p384_addcarryx_u32(&x746, &x747, x745, x722, x686); + fiat_p384_addcarryx_u32(&x746, &x747, x745, x686, x722); uint32_t x748; fiat_p384_uint1 x749; - fiat_p384_addcarryx_u32(&x748, &x749, x663, 0x0, 0x0); + fiat_p384_addcarryx_u32(&x748, &x749, x723, x689, 0x0); uint32_t x750; fiat_p384_uint1 x751; - fiat_p384_addcarryx_u32(&x750, &x751, x687, 0x0, (fiat_p384_uint1)x748); + fiat_p384_addcarryx_u32(&x750, &x751, x663, 0x0, 0x0); uint32_t x752; fiat_p384_uint1 x753; - fiat_p384_addcarryx_u32(&x752, &x753, x723, 0x0, x689); + fiat_p384_addcarryx_u32(&x752, &x753, x687, (fiat_p384_uint1)x750, 0x0); uint32_t x754; fiat_p384_uint1 x755; - fiat_p384_addcarryx_u32(&x754, &x755, x747, x752, x750); + fiat_p384_addcarryx_u32(&x754, &x755, x747, x752, x748); uint32_t x756; fiat_p384_uint1 x757; - fiat_p384_addcarryx_u32(&x756, &x757, 0x0, (arg1[9]), x726); + fiat_p384_addcarryx_u32(&x756, &x757, 0x0, x726, (arg1[9])); uint32_t x758; fiat_p384_uint1 x759; - fiat_p384_addcarryx_u32(&x758, &x759, x757, 0x0, x728); + fiat_p384_addcarryx_u32(&x758, &x759, x757, x728, 0x0); uint32_t x760; fiat_p384_uint1 x761; - fiat_p384_addcarryx_u32(&x760, &x761, x759, 0x0, x730); + fiat_p384_addcarryx_u32(&x760, &x761, x759, x730, 0x0); uint32_t x762; fiat_p384_uint1 x763; - fiat_p384_addcarryx_u32(&x762, &x763, x761, 0x0, x732); + fiat_p384_addcarryx_u32(&x762, &x763, x761, x732, 0x0); uint32_t x764; fiat_p384_uint1 x765; - fiat_p384_addcarryx_u32(&x764, &x765, x763, 0x0, x734); + fiat_p384_addcarryx_u32(&x764, &x765, x763, x734, 0x0); uint32_t x766; fiat_p384_uint1 x767; - fiat_p384_addcarryx_u32(&x766, &x767, x765, 0x0, x736); + fiat_p384_addcarryx_u32(&x766, &x767, x765, x736, 0x0); uint32_t x768; fiat_p384_uint1 x769; - fiat_p384_addcarryx_u32(&x768, &x769, x767, 0x0, x738); + fiat_p384_addcarryx_u32(&x768, &x769, x767, x738, 0x0); uint32_t x770; fiat_p384_uint1 x771; - fiat_p384_addcarryx_u32(&x770, &x771, x769, 0x0, x740); + fiat_p384_addcarryx_u32(&x770, &x771, x769, x740, 0x0); uint32_t x772; fiat_p384_uint1 x773; - fiat_p384_addcarryx_u32(&x772, &x773, x771, 0x0, x742); + fiat_p384_addcarryx_u32(&x772, &x773, x771, x742, 0x0); uint32_t x774; fiat_p384_uint1 x775; - fiat_p384_addcarryx_u32(&x774, &x775, x773, 0x0, x744); + fiat_p384_addcarryx_u32(&x774, &x775, x773, x744, 0x0); uint32_t x776; fiat_p384_uint1 x777; - fiat_p384_addcarryx_u32(&x776, &x777, x775, 0x0, x746); + fiat_p384_addcarryx_u32(&x776, &x777, x775, x746, 0x0); uint32_t x778; fiat_p384_uint1 x779; - fiat_p384_addcarryx_u32(&x778, &x779, x777, 0x0, x754); + fiat_p384_addcarryx_u32(&x778, &x779, x777, x754, 0x0); uint32_t x780; uint32_t x781; fiat_p384_mulx_u32(&x780, &x781, x756, UINT32_C(0xffffffff)); @@ -6819,112 +6819,112 @@ static void fiat_p384_from_montgomery(uint32_t out1[12], const uint32_t arg1[12] fiat_p384_mulx_u32(&x798, &x799, x756, UINT32_C(0xffffffff)); uint32_t x800; fiat_p384_uint1 x801; - fiat_p384_addcarryx_u32(&x800, &x801, 0x0, x794, x797); + fiat_p384_addcarryx_u32(&x800, &x801, 0x0, x797, x794); uint32_t x802; fiat_p384_uint1 x803; - fiat_p384_addcarryx_u32(&x802, &x803, x801, x792, x795); + fiat_p384_addcarryx_u32(&x802, &x803, x801, x795, x792); uint32_t x804; fiat_p384_uint1 x805; - fiat_p384_addcarryx_u32(&x804, &x805, x803, x790, x793); + fiat_p384_addcarryx_u32(&x804, &x805, x803, x793, x790); uint32_t x806; fiat_p384_uint1 x807; - fiat_p384_addcarryx_u32(&x806, &x807, x805, x788, x791); + fiat_p384_addcarryx_u32(&x806, &x807, x805, x791, x788); uint32_t x808; fiat_p384_uint1 x809; - fiat_p384_addcarryx_u32(&x808, &x809, x807, x786, x789); + fiat_p384_addcarryx_u32(&x808, &x809, x807, x789, x786); uint32_t x810; fiat_p384_uint1 x811; - fiat_p384_addcarryx_u32(&x810, &x811, x809, x784, x787); + fiat_p384_addcarryx_u32(&x810, &x811, x809, x787, x784); uint32_t x812; fiat_p384_uint1 x813; - fiat_p384_addcarryx_u32(&x812, &x813, x811, x782, x785); + fiat_p384_addcarryx_u32(&x812, &x813, x811, x785, x782); uint32_t x814; fiat_p384_uint1 x815; - fiat_p384_addcarryx_u32(&x814, &x815, x813, x780, x783); + fiat_p384_addcarryx_u32(&x814, &x815, x813, x783, x780); uint32_t x816; fiat_p384_uint1 x817; - fiat_p384_addcarryx_u32(&x816, &x817, 0x0, x798, x756); + fiat_p384_addcarryx_u32(&x816, &x817, 0x0, x756, x798); uint32_t x818; fiat_p384_uint1 x819; - fiat_p384_addcarryx_u32(&x818, &x819, x817, x799, x758); + fiat_p384_addcarryx_u32(&x818, &x819, x817, x758, x799); uint32_t x820; fiat_p384_uint1 x821; - fiat_p384_addcarryx_u32(&x820, &x821, x819, 0x0, x760); + fiat_p384_addcarryx_u32(&x820, &x821, x819, x760, 0x0); uint32_t x822; fiat_p384_uint1 x823; - fiat_p384_addcarryx_u32(&x822, &x823, x821, x796, x762); + fiat_p384_addcarryx_u32(&x822, &x823, x821, x762, x796); uint32_t x824; fiat_p384_uint1 x825; - fiat_p384_addcarryx_u32(&x824, &x825, x823, x800, x764); + fiat_p384_addcarryx_u32(&x824, &x825, x823, x764, x800); uint32_t x826; fiat_p384_uint1 x827; - fiat_p384_addcarryx_u32(&x826, &x827, x825, x802, x766); + fiat_p384_addcarryx_u32(&x826, &x827, x825, x766, x802); uint32_t x828; fiat_p384_uint1 x829; - fiat_p384_addcarryx_u32(&x828, &x829, x827, x804, x768); + fiat_p384_addcarryx_u32(&x828, &x829, x827, x768, x804); uint32_t x830; fiat_p384_uint1 x831; - fiat_p384_addcarryx_u32(&x830, &x831, x829, x806, x770); + fiat_p384_addcarryx_u32(&x830, &x831, x829, x770, x806); uint32_t x832; fiat_p384_uint1 x833; - fiat_p384_addcarryx_u32(&x832, &x833, x831, x808, x772); + fiat_p384_addcarryx_u32(&x832, &x833, x831, x772, x808); uint32_t x834; fiat_p384_uint1 x835; - fiat_p384_addcarryx_u32(&x834, &x835, x833, x810, x774); + fiat_p384_addcarryx_u32(&x834, &x835, x833, x774, x810); uint32_t x836; fiat_p384_uint1 x837; - fiat_p384_addcarryx_u32(&x836, &x837, x835, x812, x776); + fiat_p384_addcarryx_u32(&x836, &x837, x835, x776, x812); uint32_t x838; fiat_p384_uint1 x839; - fiat_p384_addcarryx_u32(&x838, &x839, x837, x814, x778); + fiat_p384_addcarryx_u32(&x838, &x839, x837, x778, x814); uint32_t x840; fiat_p384_uint1 x841; - fiat_p384_addcarryx_u32(&x840, &x841, x755, 0x0, 0x0); + fiat_p384_addcarryx_u32(&x840, &x841, x815, x781, 0x0); uint32_t x842; fiat_p384_uint1 x843; - fiat_p384_addcarryx_u32(&x842, &x843, x779, 0x0, (fiat_p384_uint1)x840); + fiat_p384_addcarryx_u32(&x842, &x843, x755, 0x0, 0x0); uint32_t x844; fiat_p384_uint1 x845; - fiat_p384_addcarryx_u32(&x844, &x845, x815, 0x0, x781); + fiat_p384_addcarryx_u32(&x844, &x845, x779, (fiat_p384_uint1)x842, 0x0); uint32_t x846; fiat_p384_uint1 x847; - fiat_p384_addcarryx_u32(&x846, &x847, x839, x844, x842); + fiat_p384_addcarryx_u32(&x846, &x847, x839, x844, x840); uint32_t x848; fiat_p384_uint1 x849; - fiat_p384_addcarryx_u32(&x848, &x849, 0x0, (arg1[10]), x818); + fiat_p384_addcarryx_u32(&x848, &x849, 0x0, x818, (arg1[10])); uint32_t x850; fiat_p384_uint1 x851; - fiat_p384_addcarryx_u32(&x850, &x851, x849, 0x0, x820); + fiat_p384_addcarryx_u32(&x850, &x851, x849, x820, 0x0); uint32_t x852; fiat_p384_uint1 x853; - fiat_p384_addcarryx_u32(&x852, &x853, x851, 0x0, x822); + fiat_p384_addcarryx_u32(&x852, &x853, x851, x822, 0x0); uint32_t x854; fiat_p384_uint1 x855; - fiat_p384_addcarryx_u32(&x854, &x855, x853, 0x0, x824); + fiat_p384_addcarryx_u32(&x854, &x855, x853, x824, 0x0); uint32_t x856; fiat_p384_uint1 x857; - fiat_p384_addcarryx_u32(&x856, &x857, x855, 0x0, x826); + fiat_p384_addcarryx_u32(&x856, &x857, x855, x826, 0x0); uint32_t x858; fiat_p384_uint1 x859; - fiat_p384_addcarryx_u32(&x858, &x859, x857, 0x0, x828); + fiat_p384_addcarryx_u32(&x858, &x859, x857, x828, 0x0); uint32_t x860; fiat_p384_uint1 x861; - fiat_p384_addcarryx_u32(&x860, &x861, x859, 0x0, x830); + fiat_p384_addcarryx_u32(&x860, &x861, x859, x830, 0x0); uint32_t x862; fiat_p384_uint1 x863; - fiat_p384_addcarryx_u32(&x862, &x863, x861, 0x0, x832); + fiat_p384_addcarryx_u32(&x862, &x863, x861, x832, 0x0); uint32_t x864; fiat_p384_uint1 x865; - fiat_p384_addcarryx_u32(&x864, &x865, x863, 0x0, x834); + fiat_p384_addcarryx_u32(&x864, &x865, x863, x834, 0x0); uint32_t x866; fiat_p384_uint1 x867; - fiat_p384_addcarryx_u32(&x866, &x867, x865, 0x0, x836); + fiat_p384_addcarryx_u32(&x866, &x867, x865, x836, 0x0); uint32_t x868; fiat_p384_uint1 x869; - fiat_p384_addcarryx_u32(&x868, &x869, x867, 0x0, x838); + fiat_p384_addcarryx_u32(&x868, &x869, x867, x838, 0x0); uint32_t x870; fiat_p384_uint1 x871; - fiat_p384_addcarryx_u32(&x870, &x871, x869, 0x0, x846); + fiat_p384_addcarryx_u32(&x870, &x871, x869, x846, 0x0); uint32_t x872; uint32_t x873; fiat_p384_mulx_u32(&x872, &x873, x848, UINT32_C(0xffffffff)); @@ -6957,112 +6957,112 @@ static void fiat_p384_from_montgomery(uint32_t out1[12], const uint32_t arg1[12] fiat_p384_mulx_u32(&x890, &x891, x848, UINT32_C(0xffffffff)); uint32_t x892; fiat_p384_uint1 x893; - fiat_p384_addcarryx_u32(&x892, &x893, 0x0, x886, x889); + fiat_p384_addcarryx_u32(&x892, &x893, 0x0, x889, x886); uint32_t x894; fiat_p384_uint1 x895; - fiat_p384_addcarryx_u32(&x894, &x895, x893, x884, x887); + fiat_p384_addcarryx_u32(&x894, &x895, x893, x887, x884); uint32_t x896; fiat_p384_uint1 x897; - fiat_p384_addcarryx_u32(&x896, &x897, x895, x882, x885); + fiat_p384_addcarryx_u32(&x896, &x897, x895, x885, x882); uint32_t x898; fiat_p384_uint1 x899; - fiat_p384_addcarryx_u32(&x898, &x899, x897, x880, x883); + fiat_p384_addcarryx_u32(&x898, &x899, x897, x883, x880); uint32_t x900; fiat_p384_uint1 x901; - fiat_p384_addcarryx_u32(&x900, &x901, x899, x878, x881); + fiat_p384_addcarryx_u32(&x900, &x901, x899, x881, x878); uint32_t x902; fiat_p384_uint1 x903; - fiat_p384_addcarryx_u32(&x902, &x903, x901, x876, x879); + fiat_p384_addcarryx_u32(&x902, &x903, x901, x879, x876); uint32_t x904; fiat_p384_uint1 x905; - fiat_p384_addcarryx_u32(&x904, &x905, x903, x874, x877); + fiat_p384_addcarryx_u32(&x904, &x905, x903, x877, x874); uint32_t x906; fiat_p384_uint1 x907; - fiat_p384_addcarryx_u32(&x906, &x907, x905, x872, x875); + fiat_p384_addcarryx_u32(&x906, &x907, x905, x875, x872); uint32_t x908; fiat_p384_uint1 x909; - fiat_p384_addcarryx_u32(&x908, &x909, 0x0, x890, x848); + fiat_p384_addcarryx_u32(&x908, &x909, 0x0, x848, x890); uint32_t x910; fiat_p384_uint1 x911; - fiat_p384_addcarryx_u32(&x910, &x911, x909, x891, x850); + fiat_p384_addcarryx_u32(&x910, &x911, x909, x850, x891); uint32_t x912; fiat_p384_uint1 x913; - fiat_p384_addcarryx_u32(&x912, &x913, x911, 0x0, x852); + fiat_p384_addcarryx_u32(&x912, &x913, x911, x852, 0x0); uint32_t x914; fiat_p384_uint1 x915; - fiat_p384_addcarryx_u32(&x914, &x915, x913, x888, x854); + fiat_p384_addcarryx_u32(&x914, &x915, x913, x854, x888); uint32_t x916; fiat_p384_uint1 x917; - fiat_p384_addcarryx_u32(&x916, &x917, x915, x892, x856); + fiat_p384_addcarryx_u32(&x916, &x917, x915, x856, x892); uint32_t x918; fiat_p384_uint1 x919; - fiat_p384_addcarryx_u32(&x918, &x919, x917, x894, x858); + fiat_p384_addcarryx_u32(&x918, &x919, x917, x858, x894); uint32_t x920; fiat_p384_uint1 x921; - fiat_p384_addcarryx_u32(&x920, &x921, x919, x896, x860); + fiat_p384_addcarryx_u32(&x920, &x921, x919, x860, x896); uint32_t x922; fiat_p384_uint1 x923; - fiat_p384_addcarryx_u32(&x922, &x923, x921, x898, x862); + fiat_p384_addcarryx_u32(&x922, &x923, x921, x862, x898); uint32_t x924; fiat_p384_uint1 x925; - fiat_p384_addcarryx_u32(&x924, &x925, x923, x900, x864); + fiat_p384_addcarryx_u32(&x924, &x925, x923, x864, x900); uint32_t x926; fiat_p384_uint1 x927; - fiat_p384_addcarryx_u32(&x926, &x927, x925, x902, x866); + fiat_p384_addcarryx_u32(&x926, &x927, x925, x866, x902); uint32_t x928; fiat_p384_uint1 x929; - fiat_p384_addcarryx_u32(&x928, &x929, x927, x904, x868); + fiat_p384_addcarryx_u32(&x928, &x929, x927, x868, x904); uint32_t x930; fiat_p384_uint1 x931; - fiat_p384_addcarryx_u32(&x930, &x931, x929, x906, x870); + fiat_p384_addcarryx_u32(&x930, &x931, x929, x870, x906); uint32_t x932; fiat_p384_uint1 x933; - fiat_p384_addcarryx_u32(&x932, &x933, x847, 0x0, 0x0); + fiat_p384_addcarryx_u32(&x932, &x933, x907, x873, 0x0); uint32_t x934; fiat_p384_uint1 x935; - fiat_p384_addcarryx_u32(&x934, &x935, x871, 0x0, (fiat_p384_uint1)x932); + fiat_p384_addcarryx_u32(&x934, &x935, x847, 0x0, 0x0); uint32_t x936; fiat_p384_uint1 x937; - fiat_p384_addcarryx_u32(&x936, &x937, x907, 0x0, x873); + fiat_p384_addcarryx_u32(&x936, &x937, x871, (fiat_p384_uint1)x934, 0x0); uint32_t x938; fiat_p384_uint1 x939; - fiat_p384_addcarryx_u32(&x938, &x939, x931, x936, x934); + fiat_p384_addcarryx_u32(&x938, &x939, x931, x936, x932); uint32_t x940; fiat_p384_uint1 x941; - fiat_p384_addcarryx_u32(&x940, &x941, 0x0, (arg1[11]), x910); + fiat_p384_addcarryx_u32(&x940, &x941, 0x0, x910, (arg1[11])); uint32_t x942; fiat_p384_uint1 x943; - fiat_p384_addcarryx_u32(&x942, &x943, x941, 0x0, x912); + fiat_p384_addcarryx_u32(&x942, &x943, x941, x912, 0x0); uint32_t x944; fiat_p384_uint1 x945; - fiat_p384_addcarryx_u32(&x944, &x945, x943, 0x0, x914); + fiat_p384_addcarryx_u32(&x944, &x945, x943, x914, 0x0); uint32_t x946; fiat_p384_uint1 x947; - fiat_p384_addcarryx_u32(&x946, &x947, x945, 0x0, x916); + fiat_p384_addcarryx_u32(&x946, &x947, x945, x916, 0x0); uint32_t x948; fiat_p384_uint1 x949; - fiat_p384_addcarryx_u32(&x948, &x949, x947, 0x0, x918); + fiat_p384_addcarryx_u32(&x948, &x949, x947, x918, 0x0); uint32_t x950; fiat_p384_uint1 x951; - fiat_p384_addcarryx_u32(&x950, &x951, x949, 0x0, x920); + fiat_p384_addcarryx_u32(&x950, &x951, x949, x920, 0x0); uint32_t x952; fiat_p384_uint1 x953; - fiat_p384_addcarryx_u32(&x952, &x953, x951, 0x0, x922); + fiat_p384_addcarryx_u32(&x952, &x953, x951, x922, 0x0); uint32_t x954; fiat_p384_uint1 x955; - fiat_p384_addcarryx_u32(&x954, &x955, x953, 0x0, x924); + fiat_p384_addcarryx_u32(&x954, &x955, x953, x924, 0x0); uint32_t x956; fiat_p384_uint1 x957; - fiat_p384_addcarryx_u32(&x956, &x957, x955, 0x0, x926); + fiat_p384_addcarryx_u32(&x956, &x957, x955, x926, 0x0); uint32_t x958; fiat_p384_uint1 x959; - fiat_p384_addcarryx_u32(&x958, &x959, x957, 0x0, x928); + fiat_p384_addcarryx_u32(&x958, &x959, x957, x928, 0x0); uint32_t x960; fiat_p384_uint1 x961; - fiat_p384_addcarryx_u32(&x960, &x961, x959, 0x0, x930); + fiat_p384_addcarryx_u32(&x960, &x961, x959, x930, 0x0); uint32_t x962; fiat_p384_uint1 x963; - fiat_p384_addcarryx_u32(&x962, &x963, x961, 0x0, x938); + fiat_p384_addcarryx_u32(&x962, &x963, x961, x938, 0x0); uint32_t x964; uint32_t x965; fiat_p384_mulx_u32(&x964, &x965, x940, UINT32_C(0xffffffff)); @@ -7095,76 +7095,76 @@ static void fiat_p384_from_montgomery(uint32_t out1[12], const uint32_t arg1[12] fiat_p384_mulx_u32(&x982, &x983, x940, UINT32_C(0xffffffff)); uint32_t x984; fiat_p384_uint1 x985; - fiat_p384_addcarryx_u32(&x984, &x985, 0x0, x978, x981); + fiat_p384_addcarryx_u32(&x984, &x985, 0x0, x981, x978); uint32_t x986; fiat_p384_uint1 x987; - fiat_p384_addcarryx_u32(&x986, &x987, x985, x976, x979); + fiat_p384_addcarryx_u32(&x986, &x987, x985, x979, x976); uint32_t x988; fiat_p384_uint1 x989; - fiat_p384_addcarryx_u32(&x988, &x989, x987, x974, x977); + fiat_p384_addcarryx_u32(&x988, &x989, x987, x977, x974); uint32_t x990; fiat_p384_uint1 x991; - fiat_p384_addcarryx_u32(&x990, &x991, x989, x972, x975); + fiat_p384_addcarryx_u32(&x990, &x991, x989, x975, x972); uint32_t x992; fiat_p384_uint1 x993; - fiat_p384_addcarryx_u32(&x992, &x993, x991, x970, x973); + fiat_p384_addcarryx_u32(&x992, &x993, x991, x973, x970); uint32_t x994; fiat_p384_uint1 x995; - fiat_p384_addcarryx_u32(&x994, &x995, x993, x968, x971); + fiat_p384_addcarryx_u32(&x994, &x995, x993, x971, x968); uint32_t x996; fiat_p384_uint1 x997; - fiat_p384_addcarryx_u32(&x996, &x997, x995, x966, x969); + fiat_p384_addcarryx_u32(&x996, &x997, x995, x969, x966); uint32_t x998; fiat_p384_uint1 x999; - fiat_p384_addcarryx_u32(&x998, &x999, x997, x964, x967); + fiat_p384_addcarryx_u32(&x998, &x999, x997, x967, x964); uint32_t x1000; fiat_p384_uint1 x1001; - fiat_p384_addcarryx_u32(&x1000, &x1001, 0x0, x982, x940); + fiat_p384_addcarryx_u32(&x1000, &x1001, 0x0, x940, x982); uint32_t x1002; fiat_p384_uint1 x1003; - fiat_p384_addcarryx_u32(&x1002, &x1003, x1001, x983, x942); + fiat_p384_addcarryx_u32(&x1002, &x1003, x1001, x942, x983); uint32_t x1004; fiat_p384_uint1 x1005; - fiat_p384_addcarryx_u32(&x1004, &x1005, x1003, 0x0, x944); + fiat_p384_addcarryx_u32(&x1004, &x1005, x1003, x944, 0x0); uint32_t x1006; fiat_p384_uint1 x1007; - fiat_p384_addcarryx_u32(&x1006, &x1007, x1005, x980, x946); + fiat_p384_addcarryx_u32(&x1006, &x1007, x1005, x946, x980); uint32_t x1008; fiat_p384_uint1 x1009; - fiat_p384_addcarryx_u32(&x1008, &x1009, x1007, x984, x948); + fiat_p384_addcarryx_u32(&x1008, &x1009, x1007, x948, x984); uint32_t x1010; fiat_p384_uint1 x1011; - fiat_p384_addcarryx_u32(&x1010, &x1011, x1009, x986, x950); + fiat_p384_addcarryx_u32(&x1010, &x1011, x1009, x950, x986); uint32_t x1012; fiat_p384_uint1 x1013; - fiat_p384_addcarryx_u32(&x1012, &x1013, x1011, x988, x952); + fiat_p384_addcarryx_u32(&x1012, &x1013, x1011, x952, x988); uint32_t x1014; fiat_p384_uint1 x1015; - fiat_p384_addcarryx_u32(&x1014, &x1015, x1013, x990, x954); + fiat_p384_addcarryx_u32(&x1014, &x1015, x1013, x954, x990); uint32_t x1016; fiat_p384_uint1 x1017; - fiat_p384_addcarryx_u32(&x1016, &x1017, x1015, x992, x956); + fiat_p384_addcarryx_u32(&x1016, &x1017, x1015, x956, x992); uint32_t x1018; fiat_p384_uint1 x1019; - fiat_p384_addcarryx_u32(&x1018, &x1019, x1017, x994, x958); + fiat_p384_addcarryx_u32(&x1018, &x1019, x1017, x958, x994); uint32_t x1020; fiat_p384_uint1 x1021; - fiat_p384_addcarryx_u32(&x1020, &x1021, x1019, x996, x960); + fiat_p384_addcarryx_u32(&x1020, &x1021, x1019, x960, x996); uint32_t x1022; fiat_p384_uint1 x1023; - fiat_p384_addcarryx_u32(&x1022, &x1023, x1021, x998, x962); + fiat_p384_addcarryx_u32(&x1022, &x1023, x1021, x962, x998); uint32_t x1024; fiat_p384_uint1 x1025; - fiat_p384_addcarryx_u32(&x1024, &x1025, x939, 0x0, 0x0); + fiat_p384_addcarryx_u32(&x1024, &x1025, x999, x965, 0x0); uint32_t x1026; fiat_p384_uint1 x1027; - fiat_p384_addcarryx_u32(&x1026, &x1027, x963, 0x0, (fiat_p384_uint1)x1024); + fiat_p384_addcarryx_u32(&x1026, &x1027, x939, 0x0, 0x0); uint32_t x1028; fiat_p384_uint1 x1029; - fiat_p384_addcarryx_u32(&x1028, &x1029, x999, 0x0, x965); + fiat_p384_addcarryx_u32(&x1028, &x1029, x963, (fiat_p384_uint1)x1026, 0x0); uint32_t x1030; fiat_p384_uint1 x1031; - fiat_p384_addcarryx_u32(&x1030, &x1031, x1023, x1028, x1026); + fiat_p384_addcarryx_u32(&x1030, &x1031, x1023, x1028, x1024); uint32_t x1032; fiat_p384_uint1 x1033; fiat_p384_subborrowx_u32(&x1032, &x1033, 0x0, x1002, UINT32_C(0xffffffff)); diff --git a/p384_64.c b/p384_64.c index 49c264b60..e10938f1c 100644 --- a/p384_64.c +++ b/p384_64.c @@ -144,22 +144,22 @@ static void fiat_p384_mul(uint64_t out1[6], const uint64_t arg1[6], const uint64 fiat_p384_mulx_u64(&x17, &x18, x6, (arg2[0])); uint64_t x19; fiat_p384_uint1 x20; - fiat_p384_addcarryx_u64(&x19, &x20, 0x0, x15, x18); + fiat_p384_addcarryx_u64(&x19, &x20, 0x0, x18, x15); uint64_t x21; fiat_p384_uint1 x22; - fiat_p384_addcarryx_u64(&x21, &x22, x20, x13, x16); + fiat_p384_addcarryx_u64(&x21, &x22, x20, x16, x13); uint64_t x23; fiat_p384_uint1 x24; - fiat_p384_addcarryx_u64(&x23, &x24, x22, x11, x14); + fiat_p384_addcarryx_u64(&x23, &x24, x22, x14, x11); uint64_t x25; fiat_p384_uint1 x26; - fiat_p384_addcarryx_u64(&x25, &x26, x24, x9, x12); + fiat_p384_addcarryx_u64(&x25, &x26, x24, x12, x9); uint64_t x27; fiat_p384_uint1 x28; - fiat_p384_addcarryx_u64(&x27, &x28, x26, x7, x10); + fiat_p384_addcarryx_u64(&x27, &x28, x26, x10, x7); uint64_t x29; fiat_p384_uint1 x30; - fiat_p384_addcarryx_u64(&x29, &x30, x28, 0x0, x8); + fiat_p384_addcarryx_u64(&x29, &x30, x28, x8, 0x0); uint64_t x31; uint64_t x32; fiat_p384_mulx_u64(&x31, &x32, x17, UINT64_C(0x100000001)); @@ -183,43 +183,43 @@ static void fiat_p384_mul(uint64_t out1[6], const uint64_t arg1[6], const uint64 fiat_p384_mulx_u64(&x43, &x44, x31, UINT32_C(0xffffffff)); uint64_t x45; fiat_p384_uint1 x46; - fiat_p384_addcarryx_u64(&x45, &x46, 0x0, x41, x44); + fiat_p384_addcarryx_u64(&x45, &x46, 0x0, x44, x41); uint64_t x47; fiat_p384_uint1 x48; - fiat_p384_addcarryx_u64(&x47, &x48, x46, x39, x42); + fiat_p384_addcarryx_u64(&x47, &x48, x46, x42, x39); uint64_t x49; fiat_p384_uint1 x50; - fiat_p384_addcarryx_u64(&x49, &x50, x48, x37, x40); + fiat_p384_addcarryx_u64(&x49, &x50, x48, x40, x37); uint64_t x51; fiat_p384_uint1 x52; - fiat_p384_addcarryx_u64(&x51, &x52, x50, x35, x38); + fiat_p384_addcarryx_u64(&x51, &x52, x50, x38, x35); uint64_t x53; fiat_p384_uint1 x54; - fiat_p384_addcarryx_u64(&x53, &x54, x52, x33, x36); + fiat_p384_addcarryx_u64(&x53, &x54, x52, x36, x33); uint64_t x55; fiat_p384_uint1 x56; - fiat_p384_addcarryx_u64(&x55, &x56, x54, 0x0, x34); + fiat_p384_addcarryx_u64(&x55, &x56, x54, x34, 0x0); uint64_t x57; fiat_p384_uint1 x58; - fiat_p384_addcarryx_u64(&x57, &x58, 0x0, x43, x17); + fiat_p384_addcarryx_u64(&x57, &x58, 0x0, x17, x43); uint64_t x59; fiat_p384_uint1 x60; - fiat_p384_addcarryx_u64(&x59, &x60, x58, x45, x19); + fiat_p384_addcarryx_u64(&x59, &x60, x58, x19, x45); uint64_t x61; fiat_p384_uint1 x62; - fiat_p384_addcarryx_u64(&x61, &x62, x60, x47, x21); + fiat_p384_addcarryx_u64(&x61, &x62, x60, x21, x47); uint64_t x63; fiat_p384_uint1 x64; - fiat_p384_addcarryx_u64(&x63, &x64, x62, x49, x23); + fiat_p384_addcarryx_u64(&x63, &x64, x62, x23, x49); uint64_t x65; fiat_p384_uint1 x66; - fiat_p384_addcarryx_u64(&x65, &x66, x64, x51, x25); + fiat_p384_addcarryx_u64(&x65, &x66, x64, x25, x51); uint64_t x67; fiat_p384_uint1 x68; - fiat_p384_addcarryx_u64(&x67, &x68, x66, x53, x27); + fiat_p384_addcarryx_u64(&x67, &x68, x66, x27, x53); uint64_t x69; fiat_p384_uint1 x70; - fiat_p384_addcarryx_u64(&x69, &x70, x68, x55, x29); + fiat_p384_addcarryx_u64(&x69, &x70, x68, x29, x55); uint64_t x71; fiat_p384_uint1 x72; fiat_p384_addcarryx_u64(&x71, &x72, x70, 0x0, 0x0); @@ -243,43 +243,43 @@ static void fiat_p384_mul(uint64_t out1[6], const uint64_t arg1[6], const uint64 fiat_p384_mulx_u64(&x83, &x84, x1, (arg2[0])); uint64_t x85; fiat_p384_uint1 x86; - fiat_p384_addcarryx_u64(&x85, &x86, 0x0, x81, x84); + fiat_p384_addcarryx_u64(&x85, &x86, 0x0, x84, x81); uint64_t x87; fiat_p384_uint1 x88; - fiat_p384_addcarryx_u64(&x87, &x88, x86, x79, x82); + fiat_p384_addcarryx_u64(&x87, &x88, x86, x82, x79); uint64_t x89; fiat_p384_uint1 x90; - fiat_p384_addcarryx_u64(&x89, &x90, x88, x77, x80); + fiat_p384_addcarryx_u64(&x89, &x90, x88, x80, x77); uint64_t x91; fiat_p384_uint1 x92; - fiat_p384_addcarryx_u64(&x91, &x92, x90, x75, x78); + fiat_p384_addcarryx_u64(&x91, &x92, x90, x78, x75); uint64_t x93; fiat_p384_uint1 x94; - fiat_p384_addcarryx_u64(&x93, &x94, x92, x73, x76); + fiat_p384_addcarryx_u64(&x93, &x94, x92, x76, x73); uint64_t x95; fiat_p384_uint1 x96; - fiat_p384_addcarryx_u64(&x95, &x96, x94, 0x0, x74); + fiat_p384_addcarryx_u64(&x95, &x96, x94, x74, 0x0); uint64_t x97; fiat_p384_uint1 x98; - fiat_p384_addcarryx_u64(&x97, &x98, 0x0, x83, x59); + fiat_p384_addcarryx_u64(&x97, &x98, 0x0, x59, x83); uint64_t x99; fiat_p384_uint1 x100; - fiat_p384_addcarryx_u64(&x99, &x100, x98, x85, x61); + fiat_p384_addcarryx_u64(&x99, &x100, x98, x61, x85); uint64_t x101; fiat_p384_uint1 x102; - fiat_p384_addcarryx_u64(&x101, &x102, x100, x87, x63); + fiat_p384_addcarryx_u64(&x101, &x102, x100, x63, x87); uint64_t x103; fiat_p384_uint1 x104; - fiat_p384_addcarryx_u64(&x103, &x104, x102, x89, x65); + fiat_p384_addcarryx_u64(&x103, &x104, x102, x65, x89); uint64_t x105; fiat_p384_uint1 x106; - fiat_p384_addcarryx_u64(&x105, &x106, x104, x91, x67); + fiat_p384_addcarryx_u64(&x105, &x106, x104, x67, x91); uint64_t x107; fiat_p384_uint1 x108; - fiat_p384_addcarryx_u64(&x107, &x108, x106, x93, x69); + fiat_p384_addcarryx_u64(&x107, &x108, x106, x69, x93); uint64_t x109; fiat_p384_uint1 x110; - fiat_p384_addcarryx_u64(&x109, &x110, x108, x95, (fiat_p384_uint1)x71); + fiat_p384_addcarryx_u64(&x109, &x110, x108, (fiat_p384_uint1)x71, x95); uint64_t x111; uint64_t x112; fiat_p384_mulx_u64(&x111, &x112, x97, UINT64_C(0x100000001)); @@ -303,46 +303,46 @@ static void fiat_p384_mul(uint64_t out1[6], const uint64_t arg1[6], const uint64 fiat_p384_mulx_u64(&x123, &x124, x111, UINT32_C(0xffffffff)); uint64_t x125; fiat_p384_uint1 x126; - fiat_p384_addcarryx_u64(&x125, &x126, 0x0, x121, x124); + fiat_p384_addcarryx_u64(&x125, &x126, 0x0, x124, x121); uint64_t x127; fiat_p384_uint1 x128; - fiat_p384_addcarryx_u64(&x127, &x128, x126, x119, x122); + fiat_p384_addcarryx_u64(&x127, &x128, x126, x122, x119); uint64_t x129; fiat_p384_uint1 x130; - fiat_p384_addcarryx_u64(&x129, &x130, x128, x117, x120); + fiat_p384_addcarryx_u64(&x129, &x130, x128, x120, x117); uint64_t x131; fiat_p384_uint1 x132; - fiat_p384_addcarryx_u64(&x131, &x132, x130, x115, x118); + fiat_p384_addcarryx_u64(&x131, &x132, x130, x118, x115); uint64_t x133; fiat_p384_uint1 x134; - fiat_p384_addcarryx_u64(&x133, &x134, x132, x113, x116); + fiat_p384_addcarryx_u64(&x133, &x134, x132, x116, x113); uint64_t x135; fiat_p384_uint1 x136; - fiat_p384_addcarryx_u64(&x135, &x136, x134, 0x0, x114); + fiat_p384_addcarryx_u64(&x135, &x136, x134, x114, 0x0); uint64_t x137; fiat_p384_uint1 x138; - fiat_p384_addcarryx_u64(&x137, &x138, 0x0, x123, x97); + fiat_p384_addcarryx_u64(&x137, &x138, 0x0, x97, x123); uint64_t x139; fiat_p384_uint1 x140; - fiat_p384_addcarryx_u64(&x139, &x140, x138, x125, x99); + fiat_p384_addcarryx_u64(&x139, &x140, x138, x99, x125); uint64_t x141; fiat_p384_uint1 x142; - fiat_p384_addcarryx_u64(&x141, &x142, x140, x127, x101); + fiat_p384_addcarryx_u64(&x141, &x142, x140, x101, x127); uint64_t x143; fiat_p384_uint1 x144; - fiat_p384_addcarryx_u64(&x143, &x144, x142, x129, x103); + fiat_p384_addcarryx_u64(&x143, &x144, x142, x103, x129); uint64_t x145; fiat_p384_uint1 x146; - fiat_p384_addcarryx_u64(&x145, &x146, x144, x131, x105); + fiat_p384_addcarryx_u64(&x145, &x146, x144, x105, x131); uint64_t x147; fiat_p384_uint1 x148; - fiat_p384_addcarryx_u64(&x147, &x148, x146, x133, x107); + fiat_p384_addcarryx_u64(&x147, &x148, x146, x107, x133); uint64_t x149; fiat_p384_uint1 x150; - fiat_p384_addcarryx_u64(&x149, &x150, x148, x135, x109); + fiat_p384_addcarryx_u64(&x149, &x150, x148, x109, x135); uint64_t x151; fiat_p384_uint1 x152; - fiat_p384_addcarryx_u64(&x151, &x152, x150, 0x0, x110); + fiat_p384_addcarryx_u64(&x151, &x152, x150, x110, 0x0); uint64_t x153; uint64_t x154; fiat_p384_mulx_u64(&x153, &x154, x2, (arg2[5])); @@ -363,43 +363,43 @@ static void fiat_p384_mul(uint64_t out1[6], const uint64_t arg1[6], const uint64 fiat_p384_mulx_u64(&x163, &x164, x2, (arg2[0])); uint64_t x165; fiat_p384_uint1 x166; - fiat_p384_addcarryx_u64(&x165, &x166, 0x0, x161, x164); + fiat_p384_addcarryx_u64(&x165, &x166, 0x0, x164, x161); uint64_t x167; fiat_p384_uint1 x168; - fiat_p384_addcarryx_u64(&x167, &x168, x166, x159, x162); + fiat_p384_addcarryx_u64(&x167, &x168, x166, x162, x159); uint64_t x169; fiat_p384_uint1 x170; - fiat_p384_addcarryx_u64(&x169, &x170, x168, x157, x160); + fiat_p384_addcarryx_u64(&x169, &x170, x168, x160, x157); uint64_t x171; fiat_p384_uint1 x172; - fiat_p384_addcarryx_u64(&x171, &x172, x170, x155, x158); + fiat_p384_addcarryx_u64(&x171, &x172, x170, x158, x155); uint64_t x173; fiat_p384_uint1 x174; - fiat_p384_addcarryx_u64(&x173, &x174, x172, x153, x156); + fiat_p384_addcarryx_u64(&x173, &x174, x172, x156, x153); uint64_t x175; fiat_p384_uint1 x176; - fiat_p384_addcarryx_u64(&x175, &x176, x174, 0x0, x154); + fiat_p384_addcarryx_u64(&x175, &x176, x174, x154, 0x0); uint64_t x177; fiat_p384_uint1 x178; - fiat_p384_addcarryx_u64(&x177, &x178, 0x0, x163, x139); + fiat_p384_addcarryx_u64(&x177, &x178, 0x0, x139, x163); uint64_t x179; fiat_p384_uint1 x180; - fiat_p384_addcarryx_u64(&x179, &x180, x178, x165, x141); + fiat_p384_addcarryx_u64(&x179, &x180, x178, x141, x165); uint64_t x181; fiat_p384_uint1 x182; - fiat_p384_addcarryx_u64(&x181, &x182, x180, x167, x143); + fiat_p384_addcarryx_u64(&x181, &x182, x180, x143, x167); uint64_t x183; fiat_p384_uint1 x184; - fiat_p384_addcarryx_u64(&x183, &x184, x182, x169, x145); + fiat_p384_addcarryx_u64(&x183, &x184, x182, x145, x169); uint64_t x185; fiat_p384_uint1 x186; - fiat_p384_addcarryx_u64(&x185, &x186, x184, x171, x147); + fiat_p384_addcarryx_u64(&x185, &x186, x184, x147, x171); uint64_t x187; fiat_p384_uint1 x188; - fiat_p384_addcarryx_u64(&x187, &x188, x186, x173, x149); + fiat_p384_addcarryx_u64(&x187, &x188, x186, x149, x173); uint64_t x189; fiat_p384_uint1 x190; - fiat_p384_addcarryx_u64(&x189, &x190, x188, x175, x151); + fiat_p384_addcarryx_u64(&x189, &x190, x188, x151, x175); uint64_t x191; uint64_t x192; fiat_p384_mulx_u64(&x191, &x192, x177, UINT64_C(0x100000001)); @@ -423,46 +423,46 @@ static void fiat_p384_mul(uint64_t out1[6], const uint64_t arg1[6], const uint64 fiat_p384_mulx_u64(&x203, &x204, x191, UINT32_C(0xffffffff)); uint64_t x205; fiat_p384_uint1 x206; - fiat_p384_addcarryx_u64(&x205, &x206, 0x0, x201, x204); + fiat_p384_addcarryx_u64(&x205, &x206, 0x0, x204, x201); uint64_t x207; fiat_p384_uint1 x208; - fiat_p384_addcarryx_u64(&x207, &x208, x206, x199, x202); + fiat_p384_addcarryx_u64(&x207, &x208, x206, x202, x199); uint64_t x209; fiat_p384_uint1 x210; - fiat_p384_addcarryx_u64(&x209, &x210, x208, x197, x200); + fiat_p384_addcarryx_u64(&x209, &x210, x208, x200, x197); uint64_t x211; fiat_p384_uint1 x212; - fiat_p384_addcarryx_u64(&x211, &x212, x210, x195, x198); + fiat_p384_addcarryx_u64(&x211, &x212, x210, x198, x195); uint64_t x213; fiat_p384_uint1 x214; - fiat_p384_addcarryx_u64(&x213, &x214, x212, x193, x196); + fiat_p384_addcarryx_u64(&x213, &x214, x212, x196, x193); uint64_t x215; fiat_p384_uint1 x216; - fiat_p384_addcarryx_u64(&x215, &x216, x214, 0x0, x194); + fiat_p384_addcarryx_u64(&x215, &x216, x214, x194, 0x0); uint64_t x217; fiat_p384_uint1 x218; - fiat_p384_addcarryx_u64(&x217, &x218, 0x0, x203, x177); + fiat_p384_addcarryx_u64(&x217, &x218, 0x0, x177, x203); uint64_t x219; fiat_p384_uint1 x220; - fiat_p384_addcarryx_u64(&x219, &x220, x218, x205, x179); + fiat_p384_addcarryx_u64(&x219, &x220, x218, x179, x205); uint64_t x221; fiat_p384_uint1 x222; - fiat_p384_addcarryx_u64(&x221, &x222, x220, x207, x181); + fiat_p384_addcarryx_u64(&x221, &x222, x220, x181, x207); uint64_t x223; fiat_p384_uint1 x224; - fiat_p384_addcarryx_u64(&x223, &x224, x222, x209, x183); + fiat_p384_addcarryx_u64(&x223, &x224, x222, x183, x209); uint64_t x225; fiat_p384_uint1 x226; - fiat_p384_addcarryx_u64(&x225, &x226, x224, x211, x185); + fiat_p384_addcarryx_u64(&x225, &x226, x224, x185, x211); uint64_t x227; fiat_p384_uint1 x228; - fiat_p384_addcarryx_u64(&x227, &x228, x226, x213, x187); + fiat_p384_addcarryx_u64(&x227, &x228, x226, x187, x213); uint64_t x229; fiat_p384_uint1 x230; - fiat_p384_addcarryx_u64(&x229, &x230, x228, x215, x189); + fiat_p384_addcarryx_u64(&x229, &x230, x228, x189, x215); uint64_t x231; fiat_p384_uint1 x232; - fiat_p384_addcarryx_u64(&x231, &x232, x230, 0x0, x190); + fiat_p384_addcarryx_u64(&x231, &x232, x230, x190, 0x0); uint64_t x233; uint64_t x234; fiat_p384_mulx_u64(&x233, &x234, x3, (arg2[5])); @@ -483,43 +483,43 @@ static void fiat_p384_mul(uint64_t out1[6], const uint64_t arg1[6], const uint64 fiat_p384_mulx_u64(&x243, &x244, x3, (arg2[0])); uint64_t x245; fiat_p384_uint1 x246; - fiat_p384_addcarryx_u64(&x245, &x246, 0x0, x241, x244); + fiat_p384_addcarryx_u64(&x245, &x246, 0x0, x244, x241); uint64_t x247; fiat_p384_uint1 x248; - fiat_p384_addcarryx_u64(&x247, &x248, x246, x239, x242); + fiat_p384_addcarryx_u64(&x247, &x248, x246, x242, x239); uint64_t x249; fiat_p384_uint1 x250; - fiat_p384_addcarryx_u64(&x249, &x250, x248, x237, x240); + fiat_p384_addcarryx_u64(&x249, &x250, x248, x240, x237); uint64_t x251; fiat_p384_uint1 x252; - fiat_p384_addcarryx_u64(&x251, &x252, x250, x235, x238); + fiat_p384_addcarryx_u64(&x251, &x252, x250, x238, x235); uint64_t x253; fiat_p384_uint1 x254; - fiat_p384_addcarryx_u64(&x253, &x254, x252, x233, x236); + fiat_p384_addcarryx_u64(&x253, &x254, x252, x236, x233); uint64_t x255; fiat_p384_uint1 x256; - fiat_p384_addcarryx_u64(&x255, &x256, x254, 0x0, x234); + fiat_p384_addcarryx_u64(&x255, &x256, x254, x234, 0x0); uint64_t x257; fiat_p384_uint1 x258; - fiat_p384_addcarryx_u64(&x257, &x258, 0x0, x243, x219); + fiat_p384_addcarryx_u64(&x257, &x258, 0x0, x219, x243); uint64_t x259; fiat_p384_uint1 x260; - fiat_p384_addcarryx_u64(&x259, &x260, x258, x245, x221); + fiat_p384_addcarryx_u64(&x259, &x260, x258, x221, x245); uint64_t x261; fiat_p384_uint1 x262; - fiat_p384_addcarryx_u64(&x261, &x262, x260, x247, x223); + fiat_p384_addcarryx_u64(&x261, &x262, x260, x223, x247); uint64_t x263; fiat_p384_uint1 x264; - fiat_p384_addcarryx_u64(&x263, &x264, x262, x249, x225); + fiat_p384_addcarryx_u64(&x263, &x264, x262, x225, x249); uint64_t x265; fiat_p384_uint1 x266; - fiat_p384_addcarryx_u64(&x265, &x266, x264, x251, x227); + fiat_p384_addcarryx_u64(&x265, &x266, x264, x227, x251); uint64_t x267; fiat_p384_uint1 x268; - fiat_p384_addcarryx_u64(&x267, &x268, x266, x253, x229); + fiat_p384_addcarryx_u64(&x267, &x268, x266, x229, x253); uint64_t x269; fiat_p384_uint1 x270; - fiat_p384_addcarryx_u64(&x269, &x270, x268, x255, x231); + fiat_p384_addcarryx_u64(&x269, &x270, x268, x231, x255); uint64_t x271; uint64_t x272; fiat_p384_mulx_u64(&x271, &x272, x257, UINT64_C(0x100000001)); @@ -543,46 +543,46 @@ static void fiat_p384_mul(uint64_t out1[6], const uint64_t arg1[6], const uint64 fiat_p384_mulx_u64(&x283, &x284, x271, UINT32_C(0xffffffff)); uint64_t x285; fiat_p384_uint1 x286; - fiat_p384_addcarryx_u64(&x285, &x286, 0x0, x281, x284); + fiat_p384_addcarryx_u64(&x285, &x286, 0x0, x284, x281); uint64_t x287; fiat_p384_uint1 x288; - fiat_p384_addcarryx_u64(&x287, &x288, x286, x279, x282); + fiat_p384_addcarryx_u64(&x287, &x288, x286, x282, x279); uint64_t x289; fiat_p384_uint1 x290; - fiat_p384_addcarryx_u64(&x289, &x290, x288, x277, x280); + fiat_p384_addcarryx_u64(&x289, &x290, x288, x280, x277); uint64_t x291; fiat_p384_uint1 x292; - fiat_p384_addcarryx_u64(&x291, &x292, x290, x275, x278); + fiat_p384_addcarryx_u64(&x291, &x292, x290, x278, x275); uint64_t x293; fiat_p384_uint1 x294; - fiat_p384_addcarryx_u64(&x293, &x294, x292, x273, x276); + fiat_p384_addcarryx_u64(&x293, &x294, x292, x276, x273); uint64_t x295; fiat_p384_uint1 x296; - fiat_p384_addcarryx_u64(&x295, &x296, x294, 0x0, x274); + fiat_p384_addcarryx_u64(&x295, &x296, x294, x274, 0x0); uint64_t x297; fiat_p384_uint1 x298; - fiat_p384_addcarryx_u64(&x297, &x298, 0x0, x283, x257); + fiat_p384_addcarryx_u64(&x297, &x298, 0x0, x257, x283); uint64_t x299; fiat_p384_uint1 x300; - fiat_p384_addcarryx_u64(&x299, &x300, x298, x285, x259); + fiat_p384_addcarryx_u64(&x299, &x300, x298, x259, x285); uint64_t x301; fiat_p384_uint1 x302; - fiat_p384_addcarryx_u64(&x301, &x302, x300, x287, x261); + fiat_p384_addcarryx_u64(&x301, &x302, x300, x261, x287); uint64_t x303; fiat_p384_uint1 x304; - fiat_p384_addcarryx_u64(&x303, &x304, x302, x289, x263); + fiat_p384_addcarryx_u64(&x303, &x304, x302, x263, x289); uint64_t x305; fiat_p384_uint1 x306; - fiat_p384_addcarryx_u64(&x305, &x306, x304, x291, x265); + fiat_p384_addcarryx_u64(&x305, &x306, x304, x265, x291); uint64_t x307; fiat_p384_uint1 x308; - fiat_p384_addcarryx_u64(&x307, &x308, x306, x293, x267); + fiat_p384_addcarryx_u64(&x307, &x308, x306, x267, x293); uint64_t x309; fiat_p384_uint1 x310; - fiat_p384_addcarryx_u64(&x309, &x310, x308, x295, x269); + fiat_p384_addcarryx_u64(&x309, &x310, x308, x269, x295); uint64_t x311; fiat_p384_uint1 x312; - fiat_p384_addcarryx_u64(&x311, &x312, x310, 0x0, x270); + fiat_p384_addcarryx_u64(&x311, &x312, x310, x270, 0x0); uint64_t x313; uint64_t x314; fiat_p384_mulx_u64(&x313, &x314, x4, (arg2[5])); @@ -603,43 +603,43 @@ static void fiat_p384_mul(uint64_t out1[6], const uint64_t arg1[6], const uint64 fiat_p384_mulx_u64(&x323, &x324, x4, (arg2[0])); uint64_t x325; fiat_p384_uint1 x326; - fiat_p384_addcarryx_u64(&x325, &x326, 0x0, x321, x324); + fiat_p384_addcarryx_u64(&x325, &x326, 0x0, x324, x321); uint64_t x327; fiat_p384_uint1 x328; - fiat_p384_addcarryx_u64(&x327, &x328, x326, x319, x322); + fiat_p384_addcarryx_u64(&x327, &x328, x326, x322, x319); uint64_t x329; fiat_p384_uint1 x330; - fiat_p384_addcarryx_u64(&x329, &x330, x328, x317, x320); + fiat_p384_addcarryx_u64(&x329, &x330, x328, x320, x317); uint64_t x331; fiat_p384_uint1 x332; - fiat_p384_addcarryx_u64(&x331, &x332, x330, x315, x318); + fiat_p384_addcarryx_u64(&x331, &x332, x330, x318, x315); uint64_t x333; fiat_p384_uint1 x334; - fiat_p384_addcarryx_u64(&x333, &x334, x332, x313, x316); + fiat_p384_addcarryx_u64(&x333, &x334, x332, x316, x313); uint64_t x335; fiat_p384_uint1 x336; - fiat_p384_addcarryx_u64(&x335, &x336, x334, 0x0, x314); + fiat_p384_addcarryx_u64(&x335, &x336, x334, x314, 0x0); uint64_t x337; fiat_p384_uint1 x338; - fiat_p384_addcarryx_u64(&x337, &x338, 0x0, x323, x299); + fiat_p384_addcarryx_u64(&x337, &x338, 0x0, x299, x323); uint64_t x339; fiat_p384_uint1 x340; - fiat_p384_addcarryx_u64(&x339, &x340, x338, x325, x301); + fiat_p384_addcarryx_u64(&x339, &x340, x338, x301, x325); uint64_t x341; fiat_p384_uint1 x342; - fiat_p384_addcarryx_u64(&x341, &x342, x340, x327, x303); + fiat_p384_addcarryx_u64(&x341, &x342, x340, x303, x327); uint64_t x343; fiat_p384_uint1 x344; - fiat_p384_addcarryx_u64(&x343, &x344, x342, x329, x305); + fiat_p384_addcarryx_u64(&x343, &x344, x342, x305, x329); uint64_t x345; fiat_p384_uint1 x346; - fiat_p384_addcarryx_u64(&x345, &x346, x344, x331, x307); + fiat_p384_addcarryx_u64(&x345, &x346, x344, x307, x331); uint64_t x347; fiat_p384_uint1 x348; - fiat_p384_addcarryx_u64(&x347, &x348, x346, x333, x309); + fiat_p384_addcarryx_u64(&x347, &x348, x346, x309, x333); uint64_t x349; fiat_p384_uint1 x350; - fiat_p384_addcarryx_u64(&x349, &x350, x348, x335, x311); + fiat_p384_addcarryx_u64(&x349, &x350, x348, x311, x335); uint64_t x351; uint64_t x352; fiat_p384_mulx_u64(&x351, &x352, x337, UINT64_C(0x100000001)); @@ -663,46 +663,46 @@ static void fiat_p384_mul(uint64_t out1[6], const uint64_t arg1[6], const uint64 fiat_p384_mulx_u64(&x363, &x364, x351, UINT32_C(0xffffffff)); uint64_t x365; fiat_p384_uint1 x366; - fiat_p384_addcarryx_u64(&x365, &x366, 0x0, x361, x364); + fiat_p384_addcarryx_u64(&x365, &x366, 0x0, x364, x361); uint64_t x367; fiat_p384_uint1 x368; - fiat_p384_addcarryx_u64(&x367, &x368, x366, x359, x362); + fiat_p384_addcarryx_u64(&x367, &x368, x366, x362, x359); uint64_t x369; fiat_p384_uint1 x370; - fiat_p384_addcarryx_u64(&x369, &x370, x368, x357, x360); + fiat_p384_addcarryx_u64(&x369, &x370, x368, x360, x357); uint64_t x371; fiat_p384_uint1 x372; - fiat_p384_addcarryx_u64(&x371, &x372, x370, x355, x358); + fiat_p384_addcarryx_u64(&x371, &x372, x370, x358, x355); uint64_t x373; fiat_p384_uint1 x374; - fiat_p384_addcarryx_u64(&x373, &x374, x372, x353, x356); + fiat_p384_addcarryx_u64(&x373, &x374, x372, x356, x353); uint64_t x375; fiat_p384_uint1 x376; - fiat_p384_addcarryx_u64(&x375, &x376, x374, 0x0, x354); + fiat_p384_addcarryx_u64(&x375, &x376, x374, x354, 0x0); uint64_t x377; fiat_p384_uint1 x378; - fiat_p384_addcarryx_u64(&x377, &x378, 0x0, x363, x337); + fiat_p384_addcarryx_u64(&x377, &x378, 0x0, x337, x363); uint64_t x379; fiat_p384_uint1 x380; - fiat_p384_addcarryx_u64(&x379, &x380, x378, x365, x339); + fiat_p384_addcarryx_u64(&x379, &x380, x378, x339, x365); uint64_t x381; fiat_p384_uint1 x382; - fiat_p384_addcarryx_u64(&x381, &x382, x380, x367, x341); + fiat_p384_addcarryx_u64(&x381, &x382, x380, x341, x367); uint64_t x383; fiat_p384_uint1 x384; - fiat_p384_addcarryx_u64(&x383, &x384, x382, x369, x343); + fiat_p384_addcarryx_u64(&x383, &x384, x382, x343, x369); uint64_t x385; fiat_p384_uint1 x386; - fiat_p384_addcarryx_u64(&x385, &x386, x384, x371, x345); + fiat_p384_addcarryx_u64(&x385, &x386, x384, x345, x371); uint64_t x387; fiat_p384_uint1 x388; - fiat_p384_addcarryx_u64(&x387, &x388, x386, x373, x347); + fiat_p384_addcarryx_u64(&x387, &x388, x386, x347, x373); uint64_t x389; fiat_p384_uint1 x390; - fiat_p384_addcarryx_u64(&x389, &x390, x388, x375, x349); + fiat_p384_addcarryx_u64(&x389, &x390, x388, x349, x375); uint64_t x391; fiat_p384_uint1 x392; - fiat_p384_addcarryx_u64(&x391, &x392, x390, 0x0, x350); + fiat_p384_addcarryx_u64(&x391, &x392, x390, x350, 0x0); uint64_t x393; uint64_t x394; fiat_p384_mulx_u64(&x393, &x394, x5, (arg2[5])); @@ -723,43 +723,43 @@ static void fiat_p384_mul(uint64_t out1[6], const uint64_t arg1[6], const uint64 fiat_p384_mulx_u64(&x403, &x404, x5, (arg2[0])); uint64_t x405; fiat_p384_uint1 x406; - fiat_p384_addcarryx_u64(&x405, &x406, 0x0, x401, x404); + fiat_p384_addcarryx_u64(&x405, &x406, 0x0, x404, x401); uint64_t x407; fiat_p384_uint1 x408; - fiat_p384_addcarryx_u64(&x407, &x408, x406, x399, x402); + fiat_p384_addcarryx_u64(&x407, &x408, x406, x402, x399); uint64_t x409; fiat_p384_uint1 x410; - fiat_p384_addcarryx_u64(&x409, &x410, x408, x397, x400); + fiat_p384_addcarryx_u64(&x409, &x410, x408, x400, x397); uint64_t x411; fiat_p384_uint1 x412; - fiat_p384_addcarryx_u64(&x411, &x412, x410, x395, x398); + fiat_p384_addcarryx_u64(&x411, &x412, x410, x398, x395); uint64_t x413; fiat_p384_uint1 x414; - fiat_p384_addcarryx_u64(&x413, &x414, x412, x393, x396); + fiat_p384_addcarryx_u64(&x413, &x414, x412, x396, x393); uint64_t x415; fiat_p384_uint1 x416; - fiat_p384_addcarryx_u64(&x415, &x416, x414, 0x0, x394); + fiat_p384_addcarryx_u64(&x415, &x416, x414, x394, 0x0); uint64_t x417; fiat_p384_uint1 x418; - fiat_p384_addcarryx_u64(&x417, &x418, 0x0, x403, x379); + fiat_p384_addcarryx_u64(&x417, &x418, 0x0, x379, x403); uint64_t x419; fiat_p384_uint1 x420; - fiat_p384_addcarryx_u64(&x419, &x420, x418, x405, x381); + fiat_p384_addcarryx_u64(&x419, &x420, x418, x381, x405); uint64_t x421; fiat_p384_uint1 x422; - fiat_p384_addcarryx_u64(&x421, &x422, x420, x407, x383); + fiat_p384_addcarryx_u64(&x421, &x422, x420, x383, x407); uint64_t x423; fiat_p384_uint1 x424; - fiat_p384_addcarryx_u64(&x423, &x424, x422, x409, x385); + fiat_p384_addcarryx_u64(&x423, &x424, x422, x385, x409); uint64_t x425; fiat_p384_uint1 x426; - fiat_p384_addcarryx_u64(&x425, &x426, x424, x411, x387); + fiat_p384_addcarryx_u64(&x425, &x426, x424, x387, x411); uint64_t x427; fiat_p384_uint1 x428; - fiat_p384_addcarryx_u64(&x427, &x428, x426, x413, x389); + fiat_p384_addcarryx_u64(&x427, &x428, x426, x389, x413); uint64_t x429; fiat_p384_uint1 x430; - fiat_p384_addcarryx_u64(&x429, &x430, x428, x415, x391); + fiat_p384_addcarryx_u64(&x429, &x430, x428, x391, x415); uint64_t x431; uint64_t x432; fiat_p384_mulx_u64(&x431, &x432, x417, UINT64_C(0x100000001)); @@ -783,46 +783,46 @@ static void fiat_p384_mul(uint64_t out1[6], const uint64_t arg1[6], const uint64 fiat_p384_mulx_u64(&x443, &x444, x431, UINT32_C(0xffffffff)); uint64_t x445; fiat_p384_uint1 x446; - fiat_p384_addcarryx_u64(&x445, &x446, 0x0, x441, x444); + fiat_p384_addcarryx_u64(&x445, &x446, 0x0, x444, x441); uint64_t x447; fiat_p384_uint1 x448; - fiat_p384_addcarryx_u64(&x447, &x448, x446, x439, x442); + fiat_p384_addcarryx_u64(&x447, &x448, x446, x442, x439); uint64_t x449; fiat_p384_uint1 x450; - fiat_p384_addcarryx_u64(&x449, &x450, x448, x437, x440); + fiat_p384_addcarryx_u64(&x449, &x450, x448, x440, x437); uint64_t x451; fiat_p384_uint1 x452; - fiat_p384_addcarryx_u64(&x451, &x452, x450, x435, x438); + fiat_p384_addcarryx_u64(&x451, &x452, x450, x438, x435); uint64_t x453; fiat_p384_uint1 x454; - fiat_p384_addcarryx_u64(&x453, &x454, x452, x433, x436); + fiat_p384_addcarryx_u64(&x453, &x454, x452, x436, x433); uint64_t x455; fiat_p384_uint1 x456; - fiat_p384_addcarryx_u64(&x455, &x456, x454, 0x0, x434); + fiat_p384_addcarryx_u64(&x455, &x456, x454, x434, 0x0); uint64_t x457; fiat_p384_uint1 x458; - fiat_p384_addcarryx_u64(&x457, &x458, 0x0, x443, x417); + fiat_p384_addcarryx_u64(&x457, &x458, 0x0, x417, x443); uint64_t x459; fiat_p384_uint1 x460; - fiat_p384_addcarryx_u64(&x459, &x460, x458, x445, x419); + fiat_p384_addcarryx_u64(&x459, &x460, x458, x419, x445); uint64_t x461; fiat_p384_uint1 x462; - fiat_p384_addcarryx_u64(&x461, &x462, x460, x447, x421); + fiat_p384_addcarryx_u64(&x461, &x462, x460, x421, x447); uint64_t x463; fiat_p384_uint1 x464; - fiat_p384_addcarryx_u64(&x463, &x464, x462, x449, x423); + fiat_p384_addcarryx_u64(&x463, &x464, x462, x423, x449); uint64_t x465; fiat_p384_uint1 x466; - fiat_p384_addcarryx_u64(&x465, &x466, x464, x451, x425); + fiat_p384_addcarryx_u64(&x465, &x466, x464, x425, x451); uint64_t x467; fiat_p384_uint1 x468; - fiat_p384_addcarryx_u64(&x467, &x468, x466, x453, x427); + fiat_p384_addcarryx_u64(&x467, &x468, x466, x427, x453); uint64_t x469; fiat_p384_uint1 x470; - fiat_p384_addcarryx_u64(&x469, &x470, x468, x455, x429); + fiat_p384_addcarryx_u64(&x469, &x470, x468, x429, x455); uint64_t x471; fiat_p384_uint1 x472; - fiat_p384_addcarryx_u64(&x471, &x472, x470, 0x0, x430); + fiat_p384_addcarryx_u64(&x471, &x472, x470, x430, 0x0); uint64_t x473; fiat_p384_uint1 x474; fiat_p384_subborrowx_u64(&x473, &x474, 0x0, x459, UINT32_C(0xffffffff)); @@ -904,22 +904,22 @@ static void fiat_p384_square(uint64_t out1[6], const uint64_t arg1[6]) { fiat_p384_mulx_u64(&x17, &x18, x6, (arg1[0])); uint64_t x19; fiat_p384_uint1 x20; - fiat_p384_addcarryx_u64(&x19, &x20, 0x0, x15, x18); + fiat_p384_addcarryx_u64(&x19, &x20, 0x0, x18, x15); uint64_t x21; fiat_p384_uint1 x22; - fiat_p384_addcarryx_u64(&x21, &x22, x20, x13, x16); + fiat_p384_addcarryx_u64(&x21, &x22, x20, x16, x13); uint64_t x23; fiat_p384_uint1 x24; - fiat_p384_addcarryx_u64(&x23, &x24, x22, x11, x14); + fiat_p384_addcarryx_u64(&x23, &x24, x22, x14, x11); uint64_t x25; fiat_p384_uint1 x26; - fiat_p384_addcarryx_u64(&x25, &x26, x24, x9, x12); + fiat_p384_addcarryx_u64(&x25, &x26, x24, x12, x9); uint64_t x27; fiat_p384_uint1 x28; - fiat_p384_addcarryx_u64(&x27, &x28, x26, x7, x10); + fiat_p384_addcarryx_u64(&x27, &x28, x26, x10, x7); uint64_t x29; fiat_p384_uint1 x30; - fiat_p384_addcarryx_u64(&x29, &x30, x28, 0x0, x8); + fiat_p384_addcarryx_u64(&x29, &x30, x28, x8, 0x0); uint64_t x31; uint64_t x32; fiat_p384_mulx_u64(&x31, &x32, x17, UINT64_C(0x100000001)); @@ -943,43 +943,43 @@ static void fiat_p384_square(uint64_t out1[6], const uint64_t arg1[6]) { fiat_p384_mulx_u64(&x43, &x44, x31, UINT32_C(0xffffffff)); uint64_t x45; fiat_p384_uint1 x46; - fiat_p384_addcarryx_u64(&x45, &x46, 0x0, x41, x44); + fiat_p384_addcarryx_u64(&x45, &x46, 0x0, x44, x41); uint64_t x47; fiat_p384_uint1 x48; - fiat_p384_addcarryx_u64(&x47, &x48, x46, x39, x42); + fiat_p384_addcarryx_u64(&x47, &x48, x46, x42, x39); uint64_t x49; fiat_p384_uint1 x50; - fiat_p384_addcarryx_u64(&x49, &x50, x48, x37, x40); + fiat_p384_addcarryx_u64(&x49, &x50, x48, x40, x37); uint64_t x51; fiat_p384_uint1 x52; - fiat_p384_addcarryx_u64(&x51, &x52, x50, x35, x38); + fiat_p384_addcarryx_u64(&x51, &x52, x50, x38, x35); uint64_t x53; fiat_p384_uint1 x54; - fiat_p384_addcarryx_u64(&x53, &x54, x52, x33, x36); + fiat_p384_addcarryx_u64(&x53, &x54, x52, x36, x33); uint64_t x55; fiat_p384_uint1 x56; - fiat_p384_addcarryx_u64(&x55, &x56, x54, 0x0, x34); + fiat_p384_addcarryx_u64(&x55, &x56, x54, x34, 0x0); uint64_t x57; fiat_p384_uint1 x58; - fiat_p384_addcarryx_u64(&x57, &x58, 0x0, x43, x17); + fiat_p384_addcarryx_u64(&x57, &x58, 0x0, x17, x43); uint64_t x59; fiat_p384_uint1 x60; - fiat_p384_addcarryx_u64(&x59, &x60, x58, x45, x19); + fiat_p384_addcarryx_u64(&x59, &x60, x58, x19, x45); uint64_t x61; fiat_p384_uint1 x62; - fiat_p384_addcarryx_u64(&x61, &x62, x60, x47, x21); + fiat_p384_addcarryx_u64(&x61, &x62, x60, x21, x47); uint64_t x63; fiat_p384_uint1 x64; - fiat_p384_addcarryx_u64(&x63, &x64, x62, x49, x23); + fiat_p384_addcarryx_u64(&x63, &x64, x62, x23, x49); uint64_t x65; fiat_p384_uint1 x66; - fiat_p384_addcarryx_u64(&x65, &x66, x64, x51, x25); + fiat_p384_addcarryx_u64(&x65, &x66, x64, x25, x51); uint64_t x67; fiat_p384_uint1 x68; - fiat_p384_addcarryx_u64(&x67, &x68, x66, x53, x27); + fiat_p384_addcarryx_u64(&x67, &x68, x66, x27, x53); uint64_t x69; fiat_p384_uint1 x70; - fiat_p384_addcarryx_u64(&x69, &x70, x68, x55, x29); + fiat_p384_addcarryx_u64(&x69, &x70, x68, x29, x55); uint64_t x71; fiat_p384_uint1 x72; fiat_p384_addcarryx_u64(&x71, &x72, x70, 0x0, 0x0); @@ -1003,43 +1003,43 @@ static void fiat_p384_square(uint64_t out1[6], const uint64_t arg1[6]) { fiat_p384_mulx_u64(&x83, &x84, x1, (arg1[0])); uint64_t x85; fiat_p384_uint1 x86; - fiat_p384_addcarryx_u64(&x85, &x86, 0x0, x81, x84); + fiat_p384_addcarryx_u64(&x85, &x86, 0x0, x84, x81); uint64_t x87; fiat_p384_uint1 x88; - fiat_p384_addcarryx_u64(&x87, &x88, x86, x79, x82); + fiat_p384_addcarryx_u64(&x87, &x88, x86, x82, x79); uint64_t x89; fiat_p384_uint1 x90; - fiat_p384_addcarryx_u64(&x89, &x90, x88, x77, x80); + fiat_p384_addcarryx_u64(&x89, &x90, x88, x80, x77); uint64_t x91; fiat_p384_uint1 x92; - fiat_p384_addcarryx_u64(&x91, &x92, x90, x75, x78); + fiat_p384_addcarryx_u64(&x91, &x92, x90, x78, x75); uint64_t x93; fiat_p384_uint1 x94; - fiat_p384_addcarryx_u64(&x93, &x94, x92, x73, x76); + fiat_p384_addcarryx_u64(&x93, &x94, x92, x76, x73); uint64_t x95; fiat_p384_uint1 x96; - fiat_p384_addcarryx_u64(&x95, &x96, x94, 0x0, x74); + fiat_p384_addcarryx_u64(&x95, &x96, x94, x74, 0x0); uint64_t x97; fiat_p384_uint1 x98; - fiat_p384_addcarryx_u64(&x97, &x98, 0x0, x83, x59); + fiat_p384_addcarryx_u64(&x97, &x98, 0x0, x59, x83); uint64_t x99; fiat_p384_uint1 x100; - fiat_p384_addcarryx_u64(&x99, &x100, x98, x85, x61); + fiat_p384_addcarryx_u64(&x99, &x100, x98, x61, x85); uint64_t x101; fiat_p384_uint1 x102; - fiat_p384_addcarryx_u64(&x101, &x102, x100, x87, x63); + fiat_p384_addcarryx_u64(&x101, &x102, x100, x63, x87); uint64_t x103; fiat_p384_uint1 x104; - fiat_p384_addcarryx_u64(&x103, &x104, x102, x89, x65); + fiat_p384_addcarryx_u64(&x103, &x104, x102, x65, x89); uint64_t x105; fiat_p384_uint1 x106; - fiat_p384_addcarryx_u64(&x105, &x106, x104, x91, x67); + fiat_p384_addcarryx_u64(&x105, &x106, x104, x67, x91); uint64_t x107; fiat_p384_uint1 x108; - fiat_p384_addcarryx_u64(&x107, &x108, x106, x93, x69); + fiat_p384_addcarryx_u64(&x107, &x108, x106, x69, x93); uint64_t x109; fiat_p384_uint1 x110; - fiat_p384_addcarryx_u64(&x109, &x110, x108, x95, (fiat_p384_uint1)x71); + fiat_p384_addcarryx_u64(&x109, &x110, x108, (fiat_p384_uint1)x71, x95); uint64_t x111; uint64_t x112; fiat_p384_mulx_u64(&x111, &x112, x97, UINT64_C(0x100000001)); @@ -1063,46 +1063,46 @@ static void fiat_p384_square(uint64_t out1[6], const uint64_t arg1[6]) { fiat_p384_mulx_u64(&x123, &x124, x111, UINT32_C(0xffffffff)); uint64_t x125; fiat_p384_uint1 x126; - fiat_p384_addcarryx_u64(&x125, &x126, 0x0, x121, x124); + fiat_p384_addcarryx_u64(&x125, &x126, 0x0, x124, x121); uint64_t x127; fiat_p384_uint1 x128; - fiat_p384_addcarryx_u64(&x127, &x128, x126, x119, x122); + fiat_p384_addcarryx_u64(&x127, &x128, x126, x122, x119); uint64_t x129; fiat_p384_uint1 x130; - fiat_p384_addcarryx_u64(&x129, &x130, x128, x117, x120); + fiat_p384_addcarryx_u64(&x129, &x130, x128, x120, x117); uint64_t x131; fiat_p384_uint1 x132; - fiat_p384_addcarryx_u64(&x131, &x132, x130, x115, x118); + fiat_p384_addcarryx_u64(&x131, &x132, x130, x118, x115); uint64_t x133; fiat_p384_uint1 x134; - fiat_p384_addcarryx_u64(&x133, &x134, x132, x113, x116); + fiat_p384_addcarryx_u64(&x133, &x134, x132, x116, x113); uint64_t x135; fiat_p384_uint1 x136; - fiat_p384_addcarryx_u64(&x135, &x136, x134, 0x0, x114); + fiat_p384_addcarryx_u64(&x135, &x136, x134, x114, 0x0); uint64_t x137; fiat_p384_uint1 x138; - fiat_p384_addcarryx_u64(&x137, &x138, 0x0, x123, x97); + fiat_p384_addcarryx_u64(&x137, &x138, 0x0, x97, x123); uint64_t x139; fiat_p384_uint1 x140; - fiat_p384_addcarryx_u64(&x139, &x140, x138, x125, x99); + fiat_p384_addcarryx_u64(&x139, &x140, x138, x99, x125); uint64_t x141; fiat_p384_uint1 x142; - fiat_p384_addcarryx_u64(&x141, &x142, x140, x127, x101); + fiat_p384_addcarryx_u64(&x141, &x142, x140, x101, x127); uint64_t x143; fiat_p384_uint1 x144; - fiat_p384_addcarryx_u64(&x143, &x144, x142, x129, x103); + fiat_p384_addcarryx_u64(&x143, &x144, x142, x103, x129); uint64_t x145; fiat_p384_uint1 x146; - fiat_p384_addcarryx_u64(&x145, &x146, x144, x131, x105); + fiat_p384_addcarryx_u64(&x145, &x146, x144, x105, x131); uint64_t x147; fiat_p384_uint1 x148; - fiat_p384_addcarryx_u64(&x147, &x148, x146, x133, x107); + fiat_p384_addcarryx_u64(&x147, &x148, x146, x107, x133); uint64_t x149; fiat_p384_uint1 x150; - fiat_p384_addcarryx_u64(&x149, &x150, x148, x135, x109); + fiat_p384_addcarryx_u64(&x149, &x150, x148, x109, x135); uint64_t x151; fiat_p384_uint1 x152; - fiat_p384_addcarryx_u64(&x151, &x152, x150, 0x0, x110); + fiat_p384_addcarryx_u64(&x151, &x152, x150, x110, 0x0); uint64_t x153; uint64_t x154; fiat_p384_mulx_u64(&x153, &x154, x2, (arg1[5])); @@ -1123,43 +1123,43 @@ static void fiat_p384_square(uint64_t out1[6], const uint64_t arg1[6]) { fiat_p384_mulx_u64(&x163, &x164, x2, (arg1[0])); uint64_t x165; fiat_p384_uint1 x166; - fiat_p384_addcarryx_u64(&x165, &x166, 0x0, x161, x164); + fiat_p384_addcarryx_u64(&x165, &x166, 0x0, x164, x161); uint64_t x167; fiat_p384_uint1 x168; - fiat_p384_addcarryx_u64(&x167, &x168, x166, x159, x162); + fiat_p384_addcarryx_u64(&x167, &x168, x166, x162, x159); uint64_t x169; fiat_p384_uint1 x170; - fiat_p384_addcarryx_u64(&x169, &x170, x168, x157, x160); + fiat_p384_addcarryx_u64(&x169, &x170, x168, x160, x157); uint64_t x171; fiat_p384_uint1 x172; - fiat_p384_addcarryx_u64(&x171, &x172, x170, x155, x158); + fiat_p384_addcarryx_u64(&x171, &x172, x170, x158, x155); uint64_t x173; fiat_p384_uint1 x174; - fiat_p384_addcarryx_u64(&x173, &x174, x172, x153, x156); + fiat_p384_addcarryx_u64(&x173, &x174, x172, x156, x153); uint64_t x175; fiat_p384_uint1 x176; - fiat_p384_addcarryx_u64(&x175, &x176, x174, 0x0, x154); + fiat_p384_addcarryx_u64(&x175, &x176, x174, x154, 0x0); uint64_t x177; fiat_p384_uint1 x178; - fiat_p384_addcarryx_u64(&x177, &x178, 0x0, x163, x139); + fiat_p384_addcarryx_u64(&x177, &x178, 0x0, x139, x163); uint64_t x179; fiat_p384_uint1 x180; - fiat_p384_addcarryx_u64(&x179, &x180, x178, x165, x141); + fiat_p384_addcarryx_u64(&x179, &x180, x178, x141, x165); uint64_t x181; fiat_p384_uint1 x182; - fiat_p384_addcarryx_u64(&x181, &x182, x180, x167, x143); + fiat_p384_addcarryx_u64(&x181, &x182, x180, x143, x167); uint64_t x183; fiat_p384_uint1 x184; - fiat_p384_addcarryx_u64(&x183, &x184, x182, x169, x145); + fiat_p384_addcarryx_u64(&x183, &x184, x182, x145, x169); uint64_t x185; fiat_p384_uint1 x186; - fiat_p384_addcarryx_u64(&x185, &x186, x184, x171, x147); + fiat_p384_addcarryx_u64(&x185, &x186, x184, x147, x171); uint64_t x187; fiat_p384_uint1 x188; - fiat_p384_addcarryx_u64(&x187, &x188, x186, x173, x149); + fiat_p384_addcarryx_u64(&x187, &x188, x186, x149, x173); uint64_t x189; fiat_p384_uint1 x190; - fiat_p384_addcarryx_u64(&x189, &x190, x188, x175, x151); + fiat_p384_addcarryx_u64(&x189, &x190, x188, x151, x175); uint64_t x191; uint64_t x192; fiat_p384_mulx_u64(&x191, &x192, x177, UINT64_C(0x100000001)); @@ -1183,46 +1183,46 @@ static void fiat_p384_square(uint64_t out1[6], const uint64_t arg1[6]) { fiat_p384_mulx_u64(&x203, &x204, x191, UINT32_C(0xffffffff)); uint64_t x205; fiat_p384_uint1 x206; - fiat_p384_addcarryx_u64(&x205, &x206, 0x0, x201, x204); + fiat_p384_addcarryx_u64(&x205, &x206, 0x0, x204, x201); uint64_t x207; fiat_p384_uint1 x208; - fiat_p384_addcarryx_u64(&x207, &x208, x206, x199, x202); + fiat_p384_addcarryx_u64(&x207, &x208, x206, x202, x199); uint64_t x209; fiat_p384_uint1 x210; - fiat_p384_addcarryx_u64(&x209, &x210, x208, x197, x200); + fiat_p384_addcarryx_u64(&x209, &x210, x208, x200, x197); uint64_t x211; fiat_p384_uint1 x212; - fiat_p384_addcarryx_u64(&x211, &x212, x210, x195, x198); + fiat_p384_addcarryx_u64(&x211, &x212, x210, x198, x195); uint64_t x213; fiat_p384_uint1 x214; - fiat_p384_addcarryx_u64(&x213, &x214, x212, x193, x196); + fiat_p384_addcarryx_u64(&x213, &x214, x212, x196, x193); uint64_t x215; fiat_p384_uint1 x216; - fiat_p384_addcarryx_u64(&x215, &x216, x214, 0x0, x194); + fiat_p384_addcarryx_u64(&x215, &x216, x214, x194, 0x0); uint64_t x217; fiat_p384_uint1 x218; - fiat_p384_addcarryx_u64(&x217, &x218, 0x0, x203, x177); + fiat_p384_addcarryx_u64(&x217, &x218, 0x0, x177, x203); uint64_t x219; fiat_p384_uint1 x220; - fiat_p384_addcarryx_u64(&x219, &x220, x218, x205, x179); + fiat_p384_addcarryx_u64(&x219, &x220, x218, x179, x205); uint64_t x221; fiat_p384_uint1 x222; - fiat_p384_addcarryx_u64(&x221, &x222, x220, x207, x181); + fiat_p384_addcarryx_u64(&x221, &x222, x220, x181, x207); uint64_t x223; fiat_p384_uint1 x224; - fiat_p384_addcarryx_u64(&x223, &x224, x222, x209, x183); + fiat_p384_addcarryx_u64(&x223, &x224, x222, x183, x209); uint64_t x225; fiat_p384_uint1 x226; - fiat_p384_addcarryx_u64(&x225, &x226, x224, x211, x185); + fiat_p384_addcarryx_u64(&x225, &x226, x224, x185, x211); uint64_t x227; fiat_p384_uint1 x228; - fiat_p384_addcarryx_u64(&x227, &x228, x226, x213, x187); + fiat_p384_addcarryx_u64(&x227, &x228, x226, x187, x213); uint64_t x229; fiat_p384_uint1 x230; - fiat_p384_addcarryx_u64(&x229, &x230, x228, x215, x189); + fiat_p384_addcarryx_u64(&x229, &x230, x228, x189, x215); uint64_t x231; fiat_p384_uint1 x232; - fiat_p384_addcarryx_u64(&x231, &x232, x230, 0x0, x190); + fiat_p384_addcarryx_u64(&x231, &x232, x230, x190, 0x0); uint64_t x233; uint64_t x234; fiat_p384_mulx_u64(&x233, &x234, x3, (arg1[5])); @@ -1243,43 +1243,43 @@ static void fiat_p384_square(uint64_t out1[6], const uint64_t arg1[6]) { fiat_p384_mulx_u64(&x243, &x244, x3, (arg1[0])); uint64_t x245; fiat_p384_uint1 x246; - fiat_p384_addcarryx_u64(&x245, &x246, 0x0, x241, x244); + fiat_p384_addcarryx_u64(&x245, &x246, 0x0, x244, x241); uint64_t x247; fiat_p384_uint1 x248; - fiat_p384_addcarryx_u64(&x247, &x248, x246, x239, x242); + fiat_p384_addcarryx_u64(&x247, &x248, x246, x242, x239); uint64_t x249; fiat_p384_uint1 x250; - fiat_p384_addcarryx_u64(&x249, &x250, x248, x237, x240); + fiat_p384_addcarryx_u64(&x249, &x250, x248, x240, x237); uint64_t x251; fiat_p384_uint1 x252; - fiat_p384_addcarryx_u64(&x251, &x252, x250, x235, x238); + fiat_p384_addcarryx_u64(&x251, &x252, x250, x238, x235); uint64_t x253; fiat_p384_uint1 x254; - fiat_p384_addcarryx_u64(&x253, &x254, x252, x233, x236); + fiat_p384_addcarryx_u64(&x253, &x254, x252, x236, x233); uint64_t x255; fiat_p384_uint1 x256; - fiat_p384_addcarryx_u64(&x255, &x256, x254, 0x0, x234); + fiat_p384_addcarryx_u64(&x255, &x256, x254, x234, 0x0); uint64_t x257; fiat_p384_uint1 x258; - fiat_p384_addcarryx_u64(&x257, &x258, 0x0, x243, x219); + fiat_p384_addcarryx_u64(&x257, &x258, 0x0, x219, x243); uint64_t x259; fiat_p384_uint1 x260; - fiat_p384_addcarryx_u64(&x259, &x260, x258, x245, x221); + fiat_p384_addcarryx_u64(&x259, &x260, x258, x221, x245); uint64_t x261; fiat_p384_uint1 x262; - fiat_p384_addcarryx_u64(&x261, &x262, x260, x247, x223); + fiat_p384_addcarryx_u64(&x261, &x262, x260, x223, x247); uint64_t x263; fiat_p384_uint1 x264; - fiat_p384_addcarryx_u64(&x263, &x264, x262, x249, x225); + fiat_p384_addcarryx_u64(&x263, &x264, x262, x225, x249); uint64_t x265; fiat_p384_uint1 x266; - fiat_p384_addcarryx_u64(&x265, &x266, x264, x251, x227); + fiat_p384_addcarryx_u64(&x265, &x266, x264, x227, x251); uint64_t x267; fiat_p384_uint1 x268; - fiat_p384_addcarryx_u64(&x267, &x268, x266, x253, x229); + fiat_p384_addcarryx_u64(&x267, &x268, x266, x229, x253); uint64_t x269; fiat_p384_uint1 x270; - fiat_p384_addcarryx_u64(&x269, &x270, x268, x255, x231); + fiat_p384_addcarryx_u64(&x269, &x270, x268, x231, x255); uint64_t x271; uint64_t x272; fiat_p384_mulx_u64(&x271, &x272, x257, UINT64_C(0x100000001)); @@ -1303,46 +1303,46 @@ static void fiat_p384_square(uint64_t out1[6], const uint64_t arg1[6]) { fiat_p384_mulx_u64(&x283, &x284, x271, UINT32_C(0xffffffff)); uint64_t x285; fiat_p384_uint1 x286; - fiat_p384_addcarryx_u64(&x285, &x286, 0x0, x281, x284); + fiat_p384_addcarryx_u64(&x285, &x286, 0x0, x284, x281); uint64_t x287; fiat_p384_uint1 x288; - fiat_p384_addcarryx_u64(&x287, &x288, x286, x279, x282); + fiat_p384_addcarryx_u64(&x287, &x288, x286, x282, x279); uint64_t x289; fiat_p384_uint1 x290; - fiat_p384_addcarryx_u64(&x289, &x290, x288, x277, x280); + fiat_p384_addcarryx_u64(&x289, &x290, x288, x280, x277); uint64_t x291; fiat_p384_uint1 x292; - fiat_p384_addcarryx_u64(&x291, &x292, x290, x275, x278); + fiat_p384_addcarryx_u64(&x291, &x292, x290, x278, x275); uint64_t x293; fiat_p384_uint1 x294; - fiat_p384_addcarryx_u64(&x293, &x294, x292, x273, x276); + fiat_p384_addcarryx_u64(&x293, &x294, x292, x276, x273); uint64_t x295; fiat_p384_uint1 x296; - fiat_p384_addcarryx_u64(&x295, &x296, x294, 0x0, x274); + fiat_p384_addcarryx_u64(&x295, &x296, x294, x274, 0x0); uint64_t x297; fiat_p384_uint1 x298; - fiat_p384_addcarryx_u64(&x297, &x298, 0x0, x283, x257); + fiat_p384_addcarryx_u64(&x297, &x298, 0x0, x257, x283); uint64_t x299; fiat_p384_uint1 x300; - fiat_p384_addcarryx_u64(&x299, &x300, x298, x285, x259); + fiat_p384_addcarryx_u64(&x299, &x300, x298, x259, x285); uint64_t x301; fiat_p384_uint1 x302; - fiat_p384_addcarryx_u64(&x301, &x302, x300, x287, x261); + fiat_p384_addcarryx_u64(&x301, &x302, x300, x261, x287); uint64_t x303; fiat_p384_uint1 x304; - fiat_p384_addcarryx_u64(&x303, &x304, x302, x289, x263); + fiat_p384_addcarryx_u64(&x303, &x304, x302, x263, x289); uint64_t x305; fiat_p384_uint1 x306; - fiat_p384_addcarryx_u64(&x305, &x306, x304, x291, x265); + fiat_p384_addcarryx_u64(&x305, &x306, x304, x265, x291); uint64_t x307; fiat_p384_uint1 x308; - fiat_p384_addcarryx_u64(&x307, &x308, x306, x293, x267); + fiat_p384_addcarryx_u64(&x307, &x308, x306, x267, x293); uint64_t x309; fiat_p384_uint1 x310; - fiat_p384_addcarryx_u64(&x309, &x310, x308, x295, x269); + fiat_p384_addcarryx_u64(&x309, &x310, x308, x269, x295); uint64_t x311; fiat_p384_uint1 x312; - fiat_p384_addcarryx_u64(&x311, &x312, x310, 0x0, x270); + fiat_p384_addcarryx_u64(&x311, &x312, x310, x270, 0x0); uint64_t x313; uint64_t x314; fiat_p384_mulx_u64(&x313, &x314, x4, (arg1[5])); @@ -1363,43 +1363,43 @@ static void fiat_p384_square(uint64_t out1[6], const uint64_t arg1[6]) { fiat_p384_mulx_u64(&x323, &x324, x4, (arg1[0])); uint64_t x325; fiat_p384_uint1 x326; - fiat_p384_addcarryx_u64(&x325, &x326, 0x0, x321, x324); + fiat_p384_addcarryx_u64(&x325, &x326, 0x0, x324, x321); uint64_t x327; fiat_p384_uint1 x328; - fiat_p384_addcarryx_u64(&x327, &x328, x326, x319, x322); + fiat_p384_addcarryx_u64(&x327, &x328, x326, x322, x319); uint64_t x329; fiat_p384_uint1 x330; - fiat_p384_addcarryx_u64(&x329, &x330, x328, x317, x320); + fiat_p384_addcarryx_u64(&x329, &x330, x328, x320, x317); uint64_t x331; fiat_p384_uint1 x332; - fiat_p384_addcarryx_u64(&x331, &x332, x330, x315, x318); + fiat_p384_addcarryx_u64(&x331, &x332, x330, x318, x315); uint64_t x333; fiat_p384_uint1 x334; - fiat_p384_addcarryx_u64(&x333, &x334, x332, x313, x316); + fiat_p384_addcarryx_u64(&x333, &x334, x332, x316, x313); uint64_t x335; fiat_p384_uint1 x336; - fiat_p384_addcarryx_u64(&x335, &x336, x334, 0x0, x314); + fiat_p384_addcarryx_u64(&x335, &x336, x334, x314, 0x0); uint64_t x337; fiat_p384_uint1 x338; - fiat_p384_addcarryx_u64(&x337, &x338, 0x0, x323, x299); + fiat_p384_addcarryx_u64(&x337, &x338, 0x0, x299, x323); uint64_t x339; fiat_p384_uint1 x340; - fiat_p384_addcarryx_u64(&x339, &x340, x338, x325, x301); + fiat_p384_addcarryx_u64(&x339, &x340, x338, x301, x325); uint64_t x341; fiat_p384_uint1 x342; - fiat_p384_addcarryx_u64(&x341, &x342, x340, x327, x303); + fiat_p384_addcarryx_u64(&x341, &x342, x340, x303, x327); uint64_t x343; fiat_p384_uint1 x344; - fiat_p384_addcarryx_u64(&x343, &x344, x342, x329, x305); + fiat_p384_addcarryx_u64(&x343, &x344, x342, x305, x329); uint64_t x345; fiat_p384_uint1 x346; - fiat_p384_addcarryx_u64(&x345, &x346, x344, x331, x307); + fiat_p384_addcarryx_u64(&x345, &x346, x344, x307, x331); uint64_t x347; fiat_p384_uint1 x348; - fiat_p384_addcarryx_u64(&x347, &x348, x346, x333, x309); + fiat_p384_addcarryx_u64(&x347, &x348, x346, x309, x333); uint64_t x349; fiat_p384_uint1 x350; - fiat_p384_addcarryx_u64(&x349, &x350, x348, x335, x311); + fiat_p384_addcarryx_u64(&x349, &x350, x348, x311, x335); uint64_t x351; uint64_t x352; fiat_p384_mulx_u64(&x351, &x352, x337, UINT64_C(0x100000001)); @@ -1423,46 +1423,46 @@ static void fiat_p384_square(uint64_t out1[6], const uint64_t arg1[6]) { fiat_p384_mulx_u64(&x363, &x364, x351, UINT32_C(0xffffffff)); uint64_t x365; fiat_p384_uint1 x366; - fiat_p384_addcarryx_u64(&x365, &x366, 0x0, x361, x364); + fiat_p384_addcarryx_u64(&x365, &x366, 0x0, x364, x361); uint64_t x367; fiat_p384_uint1 x368; - fiat_p384_addcarryx_u64(&x367, &x368, x366, x359, x362); + fiat_p384_addcarryx_u64(&x367, &x368, x366, x362, x359); uint64_t x369; fiat_p384_uint1 x370; - fiat_p384_addcarryx_u64(&x369, &x370, x368, x357, x360); + fiat_p384_addcarryx_u64(&x369, &x370, x368, x360, x357); uint64_t x371; fiat_p384_uint1 x372; - fiat_p384_addcarryx_u64(&x371, &x372, x370, x355, x358); + fiat_p384_addcarryx_u64(&x371, &x372, x370, x358, x355); uint64_t x373; fiat_p384_uint1 x374; - fiat_p384_addcarryx_u64(&x373, &x374, x372, x353, x356); + fiat_p384_addcarryx_u64(&x373, &x374, x372, x356, x353); uint64_t x375; fiat_p384_uint1 x376; - fiat_p384_addcarryx_u64(&x375, &x376, x374, 0x0, x354); + fiat_p384_addcarryx_u64(&x375, &x376, x374, x354, 0x0); uint64_t x377; fiat_p384_uint1 x378; - fiat_p384_addcarryx_u64(&x377, &x378, 0x0, x363, x337); + fiat_p384_addcarryx_u64(&x377, &x378, 0x0, x337, x363); uint64_t x379; fiat_p384_uint1 x380; - fiat_p384_addcarryx_u64(&x379, &x380, x378, x365, x339); + fiat_p384_addcarryx_u64(&x379, &x380, x378, x339, x365); uint64_t x381; fiat_p384_uint1 x382; - fiat_p384_addcarryx_u64(&x381, &x382, x380, x367, x341); + fiat_p384_addcarryx_u64(&x381, &x382, x380, x341, x367); uint64_t x383; fiat_p384_uint1 x384; - fiat_p384_addcarryx_u64(&x383, &x384, x382, x369, x343); + fiat_p384_addcarryx_u64(&x383, &x384, x382, x343, x369); uint64_t x385; fiat_p384_uint1 x386; - fiat_p384_addcarryx_u64(&x385, &x386, x384, x371, x345); + fiat_p384_addcarryx_u64(&x385, &x386, x384, x345, x371); uint64_t x387; fiat_p384_uint1 x388; - fiat_p384_addcarryx_u64(&x387, &x388, x386, x373, x347); + fiat_p384_addcarryx_u64(&x387, &x388, x386, x347, x373); uint64_t x389; fiat_p384_uint1 x390; - fiat_p384_addcarryx_u64(&x389, &x390, x388, x375, x349); + fiat_p384_addcarryx_u64(&x389, &x390, x388, x349, x375); uint64_t x391; fiat_p384_uint1 x392; - fiat_p384_addcarryx_u64(&x391, &x392, x390, 0x0, x350); + fiat_p384_addcarryx_u64(&x391, &x392, x390, x350, 0x0); uint64_t x393; uint64_t x394; fiat_p384_mulx_u64(&x393, &x394, x5, (arg1[5])); @@ -1483,43 +1483,43 @@ static void fiat_p384_square(uint64_t out1[6], const uint64_t arg1[6]) { fiat_p384_mulx_u64(&x403, &x404, x5, (arg1[0])); uint64_t x405; fiat_p384_uint1 x406; - fiat_p384_addcarryx_u64(&x405, &x406, 0x0, x401, x404); + fiat_p384_addcarryx_u64(&x405, &x406, 0x0, x404, x401); uint64_t x407; fiat_p384_uint1 x408; - fiat_p384_addcarryx_u64(&x407, &x408, x406, x399, x402); + fiat_p384_addcarryx_u64(&x407, &x408, x406, x402, x399); uint64_t x409; fiat_p384_uint1 x410; - fiat_p384_addcarryx_u64(&x409, &x410, x408, x397, x400); + fiat_p384_addcarryx_u64(&x409, &x410, x408, x400, x397); uint64_t x411; fiat_p384_uint1 x412; - fiat_p384_addcarryx_u64(&x411, &x412, x410, x395, x398); + fiat_p384_addcarryx_u64(&x411, &x412, x410, x398, x395); uint64_t x413; fiat_p384_uint1 x414; - fiat_p384_addcarryx_u64(&x413, &x414, x412, x393, x396); + fiat_p384_addcarryx_u64(&x413, &x414, x412, x396, x393); uint64_t x415; fiat_p384_uint1 x416; - fiat_p384_addcarryx_u64(&x415, &x416, x414, 0x0, x394); + fiat_p384_addcarryx_u64(&x415, &x416, x414, x394, 0x0); uint64_t x417; fiat_p384_uint1 x418; - fiat_p384_addcarryx_u64(&x417, &x418, 0x0, x403, x379); + fiat_p384_addcarryx_u64(&x417, &x418, 0x0, x379, x403); uint64_t x419; fiat_p384_uint1 x420; - fiat_p384_addcarryx_u64(&x419, &x420, x418, x405, x381); + fiat_p384_addcarryx_u64(&x419, &x420, x418, x381, x405); uint64_t x421; fiat_p384_uint1 x422; - fiat_p384_addcarryx_u64(&x421, &x422, x420, x407, x383); + fiat_p384_addcarryx_u64(&x421, &x422, x420, x383, x407); uint64_t x423; fiat_p384_uint1 x424; - fiat_p384_addcarryx_u64(&x423, &x424, x422, x409, x385); + fiat_p384_addcarryx_u64(&x423, &x424, x422, x385, x409); uint64_t x425; fiat_p384_uint1 x426; - fiat_p384_addcarryx_u64(&x425, &x426, x424, x411, x387); + fiat_p384_addcarryx_u64(&x425, &x426, x424, x387, x411); uint64_t x427; fiat_p384_uint1 x428; - fiat_p384_addcarryx_u64(&x427, &x428, x426, x413, x389); + fiat_p384_addcarryx_u64(&x427, &x428, x426, x389, x413); uint64_t x429; fiat_p384_uint1 x430; - fiat_p384_addcarryx_u64(&x429, &x430, x428, x415, x391); + fiat_p384_addcarryx_u64(&x429, &x430, x428, x391, x415); uint64_t x431; uint64_t x432; fiat_p384_mulx_u64(&x431, &x432, x417, UINT64_C(0x100000001)); @@ -1543,46 +1543,46 @@ static void fiat_p384_square(uint64_t out1[6], const uint64_t arg1[6]) { fiat_p384_mulx_u64(&x443, &x444, x431, UINT32_C(0xffffffff)); uint64_t x445; fiat_p384_uint1 x446; - fiat_p384_addcarryx_u64(&x445, &x446, 0x0, x441, x444); + fiat_p384_addcarryx_u64(&x445, &x446, 0x0, x444, x441); uint64_t x447; fiat_p384_uint1 x448; - fiat_p384_addcarryx_u64(&x447, &x448, x446, x439, x442); + fiat_p384_addcarryx_u64(&x447, &x448, x446, x442, x439); uint64_t x449; fiat_p384_uint1 x450; - fiat_p384_addcarryx_u64(&x449, &x450, x448, x437, x440); + fiat_p384_addcarryx_u64(&x449, &x450, x448, x440, x437); uint64_t x451; fiat_p384_uint1 x452; - fiat_p384_addcarryx_u64(&x451, &x452, x450, x435, x438); + fiat_p384_addcarryx_u64(&x451, &x452, x450, x438, x435); uint64_t x453; fiat_p384_uint1 x454; - fiat_p384_addcarryx_u64(&x453, &x454, x452, x433, x436); + fiat_p384_addcarryx_u64(&x453, &x454, x452, x436, x433); uint64_t x455; fiat_p384_uint1 x456; - fiat_p384_addcarryx_u64(&x455, &x456, x454, 0x0, x434); + fiat_p384_addcarryx_u64(&x455, &x456, x454, x434, 0x0); uint64_t x457; fiat_p384_uint1 x458; - fiat_p384_addcarryx_u64(&x457, &x458, 0x0, x443, x417); + fiat_p384_addcarryx_u64(&x457, &x458, 0x0, x417, x443); uint64_t x459; fiat_p384_uint1 x460; - fiat_p384_addcarryx_u64(&x459, &x460, x458, x445, x419); + fiat_p384_addcarryx_u64(&x459, &x460, x458, x419, x445); uint64_t x461; fiat_p384_uint1 x462; - fiat_p384_addcarryx_u64(&x461, &x462, x460, x447, x421); + fiat_p384_addcarryx_u64(&x461, &x462, x460, x421, x447); uint64_t x463; fiat_p384_uint1 x464; - fiat_p384_addcarryx_u64(&x463, &x464, x462, x449, x423); + fiat_p384_addcarryx_u64(&x463, &x464, x462, x423, x449); uint64_t x465; fiat_p384_uint1 x466; - fiat_p384_addcarryx_u64(&x465, &x466, x464, x451, x425); + fiat_p384_addcarryx_u64(&x465, &x466, x464, x425, x451); uint64_t x467; fiat_p384_uint1 x468; - fiat_p384_addcarryx_u64(&x467, &x468, x466, x453, x427); + fiat_p384_addcarryx_u64(&x467, &x468, x466, x427, x453); uint64_t x469; fiat_p384_uint1 x470; - fiat_p384_addcarryx_u64(&x469, &x470, x468, x455, x429); + fiat_p384_addcarryx_u64(&x469, &x470, x468, x429, x455); uint64_t x471; fiat_p384_uint1 x472; - fiat_p384_addcarryx_u64(&x471, &x472, x470, 0x0, x430); + fiat_p384_addcarryx_u64(&x471, &x472, x470, x430, 0x0); uint64_t x473; fiat_p384_uint1 x474; fiat_p384_subborrowx_u64(&x473, &x474, 0x0, x459, UINT32_C(0xffffffff)); @@ -1642,22 +1642,22 @@ static void fiat_p384_square(uint64_t out1[6], const uint64_t arg1[6]) { static void fiat_p384_add(uint64_t out1[6], const uint64_t arg1[6], const uint64_t arg2[6]) { uint64_t x1; fiat_p384_uint1 x2; - fiat_p384_addcarryx_u64(&x1, &x2, 0x0, (arg2[0]), (arg1[0])); + fiat_p384_addcarryx_u64(&x1, &x2, 0x0, (arg1[0]), (arg2[0])); uint64_t x3; fiat_p384_uint1 x4; - fiat_p384_addcarryx_u64(&x3, &x4, x2, (arg2[1]), (arg1[1])); + fiat_p384_addcarryx_u64(&x3, &x4, x2, (arg1[1]), (arg2[1])); uint64_t x5; fiat_p384_uint1 x6; - fiat_p384_addcarryx_u64(&x5, &x6, x4, (arg2[2]), (arg1[2])); + fiat_p384_addcarryx_u64(&x5, &x6, x4, (arg1[2]), (arg2[2])); uint64_t x7; fiat_p384_uint1 x8; - fiat_p384_addcarryx_u64(&x7, &x8, x6, (arg2[3]), (arg1[3])); + fiat_p384_addcarryx_u64(&x7, &x8, x6, (arg1[3]), (arg2[3])); uint64_t x9; fiat_p384_uint1 x10; - fiat_p384_addcarryx_u64(&x9, &x10, x8, (arg2[4]), (arg1[4])); + fiat_p384_addcarryx_u64(&x9, &x10, x8, (arg1[4]), (arg2[4])); uint64_t x11; fiat_p384_uint1 x12; - fiat_p384_addcarryx_u64(&x11, &x12, x10, (arg2[5]), (arg1[5])); + fiat_p384_addcarryx_u64(&x11, &x12, x10, (arg1[5]), (arg2[5])); uint64_t x13; fiat_p384_uint1 x14; fiat_p384_subborrowx_u64(&x13, &x14, 0x0, x1, UINT32_C(0xffffffff)); @@ -1737,22 +1737,22 @@ static void fiat_p384_sub(uint64_t out1[6], const uint64_t arg1[6], const uint64 fiat_p384_cmovznz_u64(&x13, x12, 0x0, UINT64_C(0xffffffffffffffff)); uint64_t x14; fiat_p384_uint1 x15; - fiat_p384_addcarryx_u64(&x14, &x15, 0x0, (x13 & UINT32_C(0xffffffff)), x1); + fiat_p384_addcarryx_u64(&x14, &x15, 0x0, x1, (x13 & UINT32_C(0xffffffff))); uint64_t x16; fiat_p384_uint1 x17; - fiat_p384_addcarryx_u64(&x16, &x17, x15, (x13 & UINT64_C(0xffffffff00000000)), x3); + fiat_p384_addcarryx_u64(&x16, &x17, x15, x3, (x13 & UINT64_C(0xffffffff00000000))); uint64_t x18; fiat_p384_uint1 x19; - fiat_p384_addcarryx_u64(&x18, &x19, x17, (x13 & UINT64_C(0xfffffffffffffffe)), x5); + fiat_p384_addcarryx_u64(&x18, &x19, x17, x5, (x13 & UINT64_C(0xfffffffffffffffe))); uint64_t x20; fiat_p384_uint1 x21; - fiat_p384_addcarryx_u64(&x20, &x21, x19, (x13 & UINT64_C(0xffffffffffffffff)), x7); + fiat_p384_addcarryx_u64(&x20, &x21, x19, x7, (x13 & UINT64_C(0xffffffffffffffff))); uint64_t x22; fiat_p384_uint1 x23; - fiat_p384_addcarryx_u64(&x22, &x23, x21, (x13 & UINT64_C(0xffffffffffffffff)), x9); + fiat_p384_addcarryx_u64(&x22, &x23, x21, x9, (x13 & UINT64_C(0xffffffffffffffff))); uint64_t x24; fiat_p384_uint1 x25; - fiat_p384_addcarryx_u64(&x24, &x25, x23, (x13 & UINT64_C(0xffffffffffffffff)), x11); + fiat_p384_addcarryx_u64(&x24, &x25, x23, x11, (x13 & UINT64_C(0xffffffffffffffff))); out1[0] = x14; out1[1] = x16; out1[2] = x18; @@ -1797,22 +1797,22 @@ static void fiat_p384_opp(uint64_t out1[6], const uint64_t arg1[6]) { fiat_p384_cmovznz_u64(&x13, x12, 0x0, UINT64_C(0xffffffffffffffff)); uint64_t x14; fiat_p384_uint1 x15; - fiat_p384_addcarryx_u64(&x14, &x15, 0x0, (x13 & UINT32_C(0xffffffff)), x1); + fiat_p384_addcarryx_u64(&x14, &x15, 0x0, x1, (x13 & UINT32_C(0xffffffff))); uint64_t x16; fiat_p384_uint1 x17; - fiat_p384_addcarryx_u64(&x16, &x17, x15, (x13 & UINT64_C(0xffffffff00000000)), x3); + fiat_p384_addcarryx_u64(&x16, &x17, x15, x3, (x13 & UINT64_C(0xffffffff00000000))); uint64_t x18; fiat_p384_uint1 x19; - fiat_p384_addcarryx_u64(&x18, &x19, x17, (x13 & UINT64_C(0xfffffffffffffffe)), x5); + fiat_p384_addcarryx_u64(&x18, &x19, x17, x5, (x13 & UINT64_C(0xfffffffffffffffe))); uint64_t x20; fiat_p384_uint1 x21; - fiat_p384_addcarryx_u64(&x20, &x21, x19, (x13 & UINT64_C(0xffffffffffffffff)), x7); + fiat_p384_addcarryx_u64(&x20, &x21, x19, x7, (x13 & UINT64_C(0xffffffffffffffff))); uint64_t x22; fiat_p384_uint1 x23; - fiat_p384_addcarryx_u64(&x22, &x23, x21, (x13 & UINT64_C(0xffffffffffffffff)), x9); + fiat_p384_addcarryx_u64(&x22, &x23, x21, x9, (x13 & UINT64_C(0xffffffffffffffff))); uint64_t x24; fiat_p384_uint1 x25; - fiat_p384_addcarryx_u64(&x24, &x25, x23, (x13 & UINT64_C(0xffffffffffffffff)), x11); + fiat_p384_addcarryx_u64(&x24, &x25, x23, x11, (x13 & UINT64_C(0xffffffffffffffff))); out1[0] = x14; out1[1] = x16; out1[2] = x18; @@ -1859,61 +1859,61 @@ static void fiat_p384_from_montgomery(uint64_t out1[6], const uint64_t arg1[6]) fiat_p384_mulx_u64(&x14, &x15, x2, UINT32_C(0xffffffff)); uint64_t x16; fiat_p384_uint1 x17; - fiat_p384_addcarryx_u64(&x16, &x17, 0x0, x12, x15); + fiat_p384_addcarryx_u64(&x16, &x17, 0x0, x15, x12); uint64_t x18; fiat_p384_uint1 x19; - fiat_p384_addcarryx_u64(&x18, &x19, x17, x10, x13); + fiat_p384_addcarryx_u64(&x18, &x19, x17, x13, x10); uint64_t x20; fiat_p384_uint1 x21; - fiat_p384_addcarryx_u64(&x20, &x21, x19, x8, x11); + fiat_p384_addcarryx_u64(&x20, &x21, x19, x11, x8); uint64_t x22; fiat_p384_uint1 x23; - fiat_p384_addcarryx_u64(&x22, &x23, x21, x6, x9); + fiat_p384_addcarryx_u64(&x22, &x23, x21, x9, x6); uint64_t x24; fiat_p384_uint1 x25; - fiat_p384_addcarryx_u64(&x24, &x25, x23, x4, x7); + fiat_p384_addcarryx_u64(&x24, &x25, x23, x7, x4); uint64_t x26; fiat_p384_uint1 x27; - fiat_p384_addcarryx_u64(&x26, &x27, 0x0, x14, x1); + fiat_p384_addcarryx_u64(&x26, &x27, 0x0, x1, x14); uint64_t x28; fiat_p384_uint1 x29; - fiat_p384_addcarryx_u64(&x28, &x29, x27, x16, 0x0); + fiat_p384_addcarryx_u64(&x28, &x29, x27, 0x0, x16); uint64_t x30; fiat_p384_uint1 x31; - fiat_p384_addcarryx_u64(&x30, &x31, x29, x18, 0x0); + fiat_p384_addcarryx_u64(&x30, &x31, x29, 0x0, x18); uint64_t x32; fiat_p384_uint1 x33; - fiat_p384_addcarryx_u64(&x32, &x33, x31, x20, 0x0); + fiat_p384_addcarryx_u64(&x32, &x33, x31, 0x0, x20); uint64_t x34; fiat_p384_uint1 x35; - fiat_p384_addcarryx_u64(&x34, &x35, x33, x22, 0x0); + fiat_p384_addcarryx_u64(&x34, &x35, x33, 0x0, x22); uint64_t x36; fiat_p384_uint1 x37; - fiat_p384_addcarryx_u64(&x36, &x37, x35, x24, 0x0); + fiat_p384_addcarryx_u64(&x36, &x37, x35, 0x0, x24); uint64_t x38; fiat_p384_uint1 x39; - fiat_p384_addcarryx_u64(&x38, &x39, x25, 0x0, x5); + fiat_p384_addcarryx_u64(&x38, &x39, x25, x5, 0x0); uint64_t x40; fiat_p384_uint1 x41; - fiat_p384_addcarryx_u64(&x40, &x41, x37, x38, 0x0); + fiat_p384_addcarryx_u64(&x40, &x41, x37, 0x0, x38); uint64_t x42; fiat_p384_uint1 x43; - fiat_p384_addcarryx_u64(&x42, &x43, 0x0, (arg1[1]), x28); + fiat_p384_addcarryx_u64(&x42, &x43, 0x0, x28, (arg1[1])); uint64_t x44; fiat_p384_uint1 x45; - fiat_p384_addcarryx_u64(&x44, &x45, x43, 0x0, x30); + fiat_p384_addcarryx_u64(&x44, &x45, x43, x30, 0x0); uint64_t x46; fiat_p384_uint1 x47; - fiat_p384_addcarryx_u64(&x46, &x47, x45, 0x0, x32); + fiat_p384_addcarryx_u64(&x46, &x47, x45, x32, 0x0); uint64_t x48; fiat_p384_uint1 x49; - fiat_p384_addcarryx_u64(&x48, &x49, x47, 0x0, x34); + fiat_p384_addcarryx_u64(&x48, &x49, x47, x34, 0x0); uint64_t x50; fiat_p384_uint1 x51; - fiat_p384_addcarryx_u64(&x50, &x51, x49, 0x0, x36); + fiat_p384_addcarryx_u64(&x50, &x51, x49, x36, 0x0); uint64_t x52; fiat_p384_uint1 x53; - fiat_p384_addcarryx_u64(&x52, &x53, x51, 0x0, x40); + fiat_p384_addcarryx_u64(&x52, &x53, x51, x40, 0x0); uint64_t x54; uint64_t x55; fiat_p384_mulx_u64(&x54, &x55, x42, UINT64_C(0x100000001)); @@ -1937,67 +1937,67 @@ static void fiat_p384_from_montgomery(uint64_t out1[6], const uint64_t arg1[6]) fiat_p384_mulx_u64(&x66, &x67, x54, UINT32_C(0xffffffff)); uint64_t x68; fiat_p384_uint1 x69; - fiat_p384_addcarryx_u64(&x68, &x69, 0x0, x64, x67); + fiat_p384_addcarryx_u64(&x68, &x69, 0x0, x67, x64); uint64_t x70; fiat_p384_uint1 x71; - fiat_p384_addcarryx_u64(&x70, &x71, x69, x62, x65); + fiat_p384_addcarryx_u64(&x70, &x71, x69, x65, x62); uint64_t x72; fiat_p384_uint1 x73; - fiat_p384_addcarryx_u64(&x72, &x73, x71, x60, x63); + fiat_p384_addcarryx_u64(&x72, &x73, x71, x63, x60); uint64_t x74; fiat_p384_uint1 x75; - fiat_p384_addcarryx_u64(&x74, &x75, x73, x58, x61); + fiat_p384_addcarryx_u64(&x74, &x75, x73, x61, x58); uint64_t x76; fiat_p384_uint1 x77; - fiat_p384_addcarryx_u64(&x76, &x77, x75, x56, x59); + fiat_p384_addcarryx_u64(&x76, &x77, x75, x59, x56); uint64_t x78; fiat_p384_uint1 x79; - fiat_p384_addcarryx_u64(&x78, &x79, 0x0, x66, x42); + fiat_p384_addcarryx_u64(&x78, &x79, 0x0, x42, x66); uint64_t x80; fiat_p384_uint1 x81; - fiat_p384_addcarryx_u64(&x80, &x81, x79, x68, x44); + fiat_p384_addcarryx_u64(&x80, &x81, x79, x44, x68); uint64_t x82; fiat_p384_uint1 x83; - fiat_p384_addcarryx_u64(&x82, &x83, x81, x70, x46); + fiat_p384_addcarryx_u64(&x82, &x83, x81, x46, x70); uint64_t x84; fiat_p384_uint1 x85; - fiat_p384_addcarryx_u64(&x84, &x85, x83, x72, x48); + fiat_p384_addcarryx_u64(&x84, &x85, x83, x48, x72); uint64_t x86; fiat_p384_uint1 x87; - fiat_p384_addcarryx_u64(&x86, &x87, x85, x74, x50); + fiat_p384_addcarryx_u64(&x86, &x87, x85, x50, x74); uint64_t x88; fiat_p384_uint1 x89; - fiat_p384_addcarryx_u64(&x88, &x89, x87, x76, x52); + fiat_p384_addcarryx_u64(&x88, &x89, x87, x52, x76); uint64_t x90; fiat_p384_uint1 x91; - fiat_p384_addcarryx_u64(&x90, &x91, x41, 0x0, 0x0); + fiat_p384_addcarryx_u64(&x90, &x91, x77, x57, 0x0); uint64_t x92; fiat_p384_uint1 x93; - fiat_p384_addcarryx_u64(&x92, &x93, x53, 0x0, (fiat_p384_uint1)x90); + fiat_p384_addcarryx_u64(&x92, &x93, x41, 0x0, 0x0); uint64_t x94; fiat_p384_uint1 x95; - fiat_p384_addcarryx_u64(&x94, &x95, x77, 0x0, x57); + fiat_p384_addcarryx_u64(&x94, &x95, x53, (fiat_p384_uint1)x92, 0x0); uint64_t x96; fiat_p384_uint1 x97; - fiat_p384_addcarryx_u64(&x96, &x97, x89, x94, x92); + fiat_p384_addcarryx_u64(&x96, &x97, x89, x94, x90); uint64_t x98; fiat_p384_uint1 x99; - fiat_p384_addcarryx_u64(&x98, &x99, 0x0, (arg1[2]), x80); + fiat_p384_addcarryx_u64(&x98, &x99, 0x0, x80, (arg1[2])); uint64_t x100; fiat_p384_uint1 x101; - fiat_p384_addcarryx_u64(&x100, &x101, x99, 0x0, x82); + fiat_p384_addcarryx_u64(&x100, &x101, x99, x82, 0x0); uint64_t x102; fiat_p384_uint1 x103; - fiat_p384_addcarryx_u64(&x102, &x103, x101, 0x0, x84); + fiat_p384_addcarryx_u64(&x102, &x103, x101, x84, 0x0); uint64_t x104; fiat_p384_uint1 x105; - fiat_p384_addcarryx_u64(&x104, &x105, x103, 0x0, x86); + fiat_p384_addcarryx_u64(&x104, &x105, x103, x86, 0x0); uint64_t x106; fiat_p384_uint1 x107; - fiat_p384_addcarryx_u64(&x106, &x107, x105, 0x0, x88); + fiat_p384_addcarryx_u64(&x106, &x107, x105, x88, 0x0); uint64_t x108; fiat_p384_uint1 x109; - fiat_p384_addcarryx_u64(&x108, &x109, x107, 0x0, x96); + fiat_p384_addcarryx_u64(&x108, &x109, x107, x96, 0x0); uint64_t x110; uint64_t x111; fiat_p384_mulx_u64(&x110, &x111, x98, UINT64_C(0x100000001)); @@ -2021,67 +2021,67 @@ static void fiat_p384_from_montgomery(uint64_t out1[6], const uint64_t arg1[6]) fiat_p384_mulx_u64(&x122, &x123, x110, UINT32_C(0xffffffff)); uint64_t x124; fiat_p384_uint1 x125; - fiat_p384_addcarryx_u64(&x124, &x125, 0x0, x120, x123); + fiat_p384_addcarryx_u64(&x124, &x125, 0x0, x123, x120); uint64_t x126; fiat_p384_uint1 x127; - fiat_p384_addcarryx_u64(&x126, &x127, x125, x118, x121); + fiat_p384_addcarryx_u64(&x126, &x127, x125, x121, x118); uint64_t x128; fiat_p384_uint1 x129; - fiat_p384_addcarryx_u64(&x128, &x129, x127, x116, x119); + fiat_p384_addcarryx_u64(&x128, &x129, x127, x119, x116); uint64_t x130; fiat_p384_uint1 x131; - fiat_p384_addcarryx_u64(&x130, &x131, x129, x114, x117); + fiat_p384_addcarryx_u64(&x130, &x131, x129, x117, x114); uint64_t x132; fiat_p384_uint1 x133; - fiat_p384_addcarryx_u64(&x132, &x133, x131, x112, x115); + fiat_p384_addcarryx_u64(&x132, &x133, x131, x115, x112); uint64_t x134; fiat_p384_uint1 x135; - fiat_p384_addcarryx_u64(&x134, &x135, 0x0, x122, x98); + fiat_p384_addcarryx_u64(&x134, &x135, 0x0, x98, x122); uint64_t x136; fiat_p384_uint1 x137; - fiat_p384_addcarryx_u64(&x136, &x137, x135, x124, x100); + fiat_p384_addcarryx_u64(&x136, &x137, x135, x100, x124); uint64_t x138; fiat_p384_uint1 x139; - fiat_p384_addcarryx_u64(&x138, &x139, x137, x126, x102); + fiat_p384_addcarryx_u64(&x138, &x139, x137, x102, x126); uint64_t x140; fiat_p384_uint1 x141; - fiat_p384_addcarryx_u64(&x140, &x141, x139, x128, x104); + fiat_p384_addcarryx_u64(&x140, &x141, x139, x104, x128); uint64_t x142; fiat_p384_uint1 x143; - fiat_p384_addcarryx_u64(&x142, &x143, x141, x130, x106); + fiat_p384_addcarryx_u64(&x142, &x143, x141, x106, x130); uint64_t x144; fiat_p384_uint1 x145; - fiat_p384_addcarryx_u64(&x144, &x145, x143, x132, x108); + fiat_p384_addcarryx_u64(&x144, &x145, x143, x108, x132); uint64_t x146; fiat_p384_uint1 x147; - fiat_p384_addcarryx_u64(&x146, &x147, x97, 0x0, 0x0); + fiat_p384_addcarryx_u64(&x146, &x147, x133, x113, 0x0); uint64_t x148; fiat_p384_uint1 x149; - fiat_p384_addcarryx_u64(&x148, &x149, x109, 0x0, (fiat_p384_uint1)x146); + fiat_p384_addcarryx_u64(&x148, &x149, x97, 0x0, 0x0); uint64_t x150; fiat_p384_uint1 x151; - fiat_p384_addcarryx_u64(&x150, &x151, x133, 0x0, x113); + fiat_p384_addcarryx_u64(&x150, &x151, x109, (fiat_p384_uint1)x148, 0x0); uint64_t x152; fiat_p384_uint1 x153; - fiat_p384_addcarryx_u64(&x152, &x153, x145, x150, x148); + fiat_p384_addcarryx_u64(&x152, &x153, x145, x150, x146); uint64_t x154; fiat_p384_uint1 x155; - fiat_p384_addcarryx_u64(&x154, &x155, 0x0, (arg1[3]), x136); + fiat_p384_addcarryx_u64(&x154, &x155, 0x0, x136, (arg1[3])); uint64_t x156; fiat_p384_uint1 x157; - fiat_p384_addcarryx_u64(&x156, &x157, x155, 0x0, x138); + fiat_p384_addcarryx_u64(&x156, &x157, x155, x138, 0x0); uint64_t x158; fiat_p384_uint1 x159; - fiat_p384_addcarryx_u64(&x158, &x159, x157, 0x0, x140); + fiat_p384_addcarryx_u64(&x158, &x159, x157, x140, 0x0); uint64_t x160; fiat_p384_uint1 x161; - fiat_p384_addcarryx_u64(&x160, &x161, x159, 0x0, x142); + fiat_p384_addcarryx_u64(&x160, &x161, x159, x142, 0x0); uint64_t x162; fiat_p384_uint1 x163; - fiat_p384_addcarryx_u64(&x162, &x163, x161, 0x0, x144); + fiat_p384_addcarryx_u64(&x162, &x163, x161, x144, 0x0); uint64_t x164; fiat_p384_uint1 x165; - fiat_p384_addcarryx_u64(&x164, &x165, x163, 0x0, x152); + fiat_p384_addcarryx_u64(&x164, &x165, x163, x152, 0x0); uint64_t x166; uint64_t x167; fiat_p384_mulx_u64(&x166, &x167, x154, UINT64_C(0x100000001)); @@ -2105,67 +2105,67 @@ static void fiat_p384_from_montgomery(uint64_t out1[6], const uint64_t arg1[6]) fiat_p384_mulx_u64(&x178, &x179, x166, UINT32_C(0xffffffff)); uint64_t x180; fiat_p384_uint1 x181; - fiat_p384_addcarryx_u64(&x180, &x181, 0x0, x176, x179); + fiat_p384_addcarryx_u64(&x180, &x181, 0x0, x179, x176); uint64_t x182; fiat_p384_uint1 x183; - fiat_p384_addcarryx_u64(&x182, &x183, x181, x174, x177); + fiat_p384_addcarryx_u64(&x182, &x183, x181, x177, x174); uint64_t x184; fiat_p384_uint1 x185; - fiat_p384_addcarryx_u64(&x184, &x185, x183, x172, x175); + fiat_p384_addcarryx_u64(&x184, &x185, x183, x175, x172); uint64_t x186; fiat_p384_uint1 x187; - fiat_p384_addcarryx_u64(&x186, &x187, x185, x170, x173); + fiat_p384_addcarryx_u64(&x186, &x187, x185, x173, x170); uint64_t x188; fiat_p384_uint1 x189; - fiat_p384_addcarryx_u64(&x188, &x189, x187, x168, x171); + fiat_p384_addcarryx_u64(&x188, &x189, x187, x171, x168); uint64_t x190; fiat_p384_uint1 x191; - fiat_p384_addcarryx_u64(&x190, &x191, 0x0, x178, x154); + fiat_p384_addcarryx_u64(&x190, &x191, 0x0, x154, x178); uint64_t x192; fiat_p384_uint1 x193; - fiat_p384_addcarryx_u64(&x192, &x193, x191, x180, x156); + fiat_p384_addcarryx_u64(&x192, &x193, x191, x156, x180); uint64_t x194; fiat_p384_uint1 x195; - fiat_p384_addcarryx_u64(&x194, &x195, x193, x182, x158); + fiat_p384_addcarryx_u64(&x194, &x195, x193, x158, x182); uint64_t x196; fiat_p384_uint1 x197; - fiat_p384_addcarryx_u64(&x196, &x197, x195, x184, x160); + fiat_p384_addcarryx_u64(&x196, &x197, x195, x160, x184); uint64_t x198; fiat_p384_uint1 x199; - fiat_p384_addcarryx_u64(&x198, &x199, x197, x186, x162); + fiat_p384_addcarryx_u64(&x198, &x199, x197, x162, x186); uint64_t x200; fiat_p384_uint1 x201; - fiat_p384_addcarryx_u64(&x200, &x201, x199, x188, x164); + fiat_p384_addcarryx_u64(&x200, &x201, x199, x164, x188); uint64_t x202; fiat_p384_uint1 x203; - fiat_p384_addcarryx_u64(&x202, &x203, x153, 0x0, 0x0); + fiat_p384_addcarryx_u64(&x202, &x203, x189, x169, 0x0); uint64_t x204; fiat_p384_uint1 x205; - fiat_p384_addcarryx_u64(&x204, &x205, x165, 0x0, (fiat_p384_uint1)x202); + fiat_p384_addcarryx_u64(&x204, &x205, x153, 0x0, 0x0); uint64_t x206; fiat_p384_uint1 x207; - fiat_p384_addcarryx_u64(&x206, &x207, x189, 0x0, x169); + fiat_p384_addcarryx_u64(&x206, &x207, x165, (fiat_p384_uint1)x204, 0x0); uint64_t x208; fiat_p384_uint1 x209; - fiat_p384_addcarryx_u64(&x208, &x209, x201, x206, x204); + fiat_p384_addcarryx_u64(&x208, &x209, x201, x206, x202); uint64_t x210; fiat_p384_uint1 x211; - fiat_p384_addcarryx_u64(&x210, &x211, 0x0, (arg1[4]), x192); + fiat_p384_addcarryx_u64(&x210, &x211, 0x0, x192, (arg1[4])); uint64_t x212; fiat_p384_uint1 x213; - fiat_p384_addcarryx_u64(&x212, &x213, x211, 0x0, x194); + fiat_p384_addcarryx_u64(&x212, &x213, x211, x194, 0x0); uint64_t x214; fiat_p384_uint1 x215; - fiat_p384_addcarryx_u64(&x214, &x215, x213, 0x0, x196); + fiat_p384_addcarryx_u64(&x214, &x215, x213, x196, 0x0); uint64_t x216; fiat_p384_uint1 x217; - fiat_p384_addcarryx_u64(&x216, &x217, x215, 0x0, x198); + fiat_p384_addcarryx_u64(&x216, &x217, x215, x198, 0x0); uint64_t x218; fiat_p384_uint1 x219; - fiat_p384_addcarryx_u64(&x218, &x219, x217, 0x0, x200); + fiat_p384_addcarryx_u64(&x218, &x219, x217, x200, 0x0); uint64_t x220; fiat_p384_uint1 x221; - fiat_p384_addcarryx_u64(&x220, &x221, x219, 0x0, x208); + fiat_p384_addcarryx_u64(&x220, &x221, x219, x208, 0x0); uint64_t x222; uint64_t x223; fiat_p384_mulx_u64(&x222, &x223, x210, UINT64_C(0x100000001)); @@ -2189,67 +2189,67 @@ static void fiat_p384_from_montgomery(uint64_t out1[6], const uint64_t arg1[6]) fiat_p384_mulx_u64(&x234, &x235, x222, UINT32_C(0xffffffff)); uint64_t x236; fiat_p384_uint1 x237; - fiat_p384_addcarryx_u64(&x236, &x237, 0x0, x232, x235); + fiat_p384_addcarryx_u64(&x236, &x237, 0x0, x235, x232); uint64_t x238; fiat_p384_uint1 x239; - fiat_p384_addcarryx_u64(&x238, &x239, x237, x230, x233); + fiat_p384_addcarryx_u64(&x238, &x239, x237, x233, x230); uint64_t x240; fiat_p384_uint1 x241; - fiat_p384_addcarryx_u64(&x240, &x241, x239, x228, x231); + fiat_p384_addcarryx_u64(&x240, &x241, x239, x231, x228); uint64_t x242; fiat_p384_uint1 x243; - fiat_p384_addcarryx_u64(&x242, &x243, x241, x226, x229); + fiat_p384_addcarryx_u64(&x242, &x243, x241, x229, x226); uint64_t x244; fiat_p384_uint1 x245; - fiat_p384_addcarryx_u64(&x244, &x245, x243, x224, x227); + fiat_p384_addcarryx_u64(&x244, &x245, x243, x227, x224); uint64_t x246; fiat_p384_uint1 x247; - fiat_p384_addcarryx_u64(&x246, &x247, 0x0, x234, x210); + fiat_p384_addcarryx_u64(&x246, &x247, 0x0, x210, x234); uint64_t x248; fiat_p384_uint1 x249; - fiat_p384_addcarryx_u64(&x248, &x249, x247, x236, x212); + fiat_p384_addcarryx_u64(&x248, &x249, x247, x212, x236); uint64_t x250; fiat_p384_uint1 x251; - fiat_p384_addcarryx_u64(&x250, &x251, x249, x238, x214); + fiat_p384_addcarryx_u64(&x250, &x251, x249, x214, x238); uint64_t x252; fiat_p384_uint1 x253; - fiat_p384_addcarryx_u64(&x252, &x253, x251, x240, x216); + fiat_p384_addcarryx_u64(&x252, &x253, x251, x216, x240); uint64_t x254; fiat_p384_uint1 x255; - fiat_p384_addcarryx_u64(&x254, &x255, x253, x242, x218); + fiat_p384_addcarryx_u64(&x254, &x255, x253, x218, x242); uint64_t x256; fiat_p384_uint1 x257; - fiat_p384_addcarryx_u64(&x256, &x257, x255, x244, x220); + fiat_p384_addcarryx_u64(&x256, &x257, x255, x220, x244); uint64_t x258; fiat_p384_uint1 x259; - fiat_p384_addcarryx_u64(&x258, &x259, x209, 0x0, 0x0); + fiat_p384_addcarryx_u64(&x258, &x259, x245, x225, 0x0); uint64_t x260; fiat_p384_uint1 x261; - fiat_p384_addcarryx_u64(&x260, &x261, x221, 0x0, (fiat_p384_uint1)x258); + fiat_p384_addcarryx_u64(&x260, &x261, x209, 0x0, 0x0); uint64_t x262; fiat_p384_uint1 x263; - fiat_p384_addcarryx_u64(&x262, &x263, x245, 0x0, x225); + fiat_p384_addcarryx_u64(&x262, &x263, x221, (fiat_p384_uint1)x260, 0x0); uint64_t x264; fiat_p384_uint1 x265; - fiat_p384_addcarryx_u64(&x264, &x265, x257, x262, x260); + fiat_p384_addcarryx_u64(&x264, &x265, x257, x262, x258); uint64_t x266; fiat_p384_uint1 x267; - fiat_p384_addcarryx_u64(&x266, &x267, 0x0, (arg1[5]), x248); + fiat_p384_addcarryx_u64(&x266, &x267, 0x0, x248, (arg1[5])); uint64_t x268; fiat_p384_uint1 x269; - fiat_p384_addcarryx_u64(&x268, &x269, x267, 0x0, x250); + fiat_p384_addcarryx_u64(&x268, &x269, x267, x250, 0x0); uint64_t x270; fiat_p384_uint1 x271; - fiat_p384_addcarryx_u64(&x270, &x271, x269, 0x0, x252); + fiat_p384_addcarryx_u64(&x270, &x271, x269, x252, 0x0); uint64_t x272; fiat_p384_uint1 x273; - fiat_p384_addcarryx_u64(&x272, &x273, x271, 0x0, x254); + fiat_p384_addcarryx_u64(&x272, &x273, x271, x254, 0x0); uint64_t x274; fiat_p384_uint1 x275; - fiat_p384_addcarryx_u64(&x274, &x275, x273, 0x0, x256); + fiat_p384_addcarryx_u64(&x274, &x275, x273, x256, 0x0); uint64_t x276; fiat_p384_uint1 x277; - fiat_p384_addcarryx_u64(&x276, &x277, x275, 0x0, x264); + fiat_p384_addcarryx_u64(&x276, &x277, x275, x264, 0x0); uint64_t x278; uint64_t x279; fiat_p384_mulx_u64(&x278, &x279, x266, UINT64_C(0x100000001)); @@ -2273,49 +2273,49 @@ static void fiat_p384_from_montgomery(uint64_t out1[6], const uint64_t arg1[6]) fiat_p384_mulx_u64(&x290, &x291, x278, UINT32_C(0xffffffff)); uint64_t x292; fiat_p384_uint1 x293; - fiat_p384_addcarryx_u64(&x292, &x293, 0x0, x288, x291); + fiat_p384_addcarryx_u64(&x292, &x293, 0x0, x291, x288); uint64_t x294; fiat_p384_uint1 x295; - fiat_p384_addcarryx_u64(&x294, &x295, x293, x286, x289); + fiat_p384_addcarryx_u64(&x294, &x295, x293, x289, x286); uint64_t x296; fiat_p384_uint1 x297; - fiat_p384_addcarryx_u64(&x296, &x297, x295, x284, x287); + fiat_p384_addcarryx_u64(&x296, &x297, x295, x287, x284); uint64_t x298; fiat_p384_uint1 x299; - fiat_p384_addcarryx_u64(&x298, &x299, x297, x282, x285); + fiat_p384_addcarryx_u64(&x298, &x299, x297, x285, x282); uint64_t x300; fiat_p384_uint1 x301; - fiat_p384_addcarryx_u64(&x300, &x301, x299, x280, x283); + fiat_p384_addcarryx_u64(&x300, &x301, x299, x283, x280); uint64_t x302; fiat_p384_uint1 x303; - fiat_p384_addcarryx_u64(&x302, &x303, 0x0, x290, x266); + fiat_p384_addcarryx_u64(&x302, &x303, 0x0, x266, x290); uint64_t x304; fiat_p384_uint1 x305; - fiat_p384_addcarryx_u64(&x304, &x305, x303, x292, x268); + fiat_p384_addcarryx_u64(&x304, &x305, x303, x268, x292); uint64_t x306; fiat_p384_uint1 x307; - fiat_p384_addcarryx_u64(&x306, &x307, x305, x294, x270); + fiat_p384_addcarryx_u64(&x306, &x307, x305, x270, x294); uint64_t x308; fiat_p384_uint1 x309; - fiat_p384_addcarryx_u64(&x308, &x309, x307, x296, x272); + fiat_p384_addcarryx_u64(&x308, &x309, x307, x272, x296); uint64_t x310; fiat_p384_uint1 x311; - fiat_p384_addcarryx_u64(&x310, &x311, x309, x298, x274); + fiat_p384_addcarryx_u64(&x310, &x311, x309, x274, x298); uint64_t x312; fiat_p384_uint1 x313; - fiat_p384_addcarryx_u64(&x312, &x313, x311, x300, x276); + fiat_p384_addcarryx_u64(&x312, &x313, x311, x276, x300); uint64_t x314; fiat_p384_uint1 x315; - fiat_p384_addcarryx_u64(&x314, &x315, x265, 0x0, 0x0); + fiat_p384_addcarryx_u64(&x314, &x315, x301, x281, 0x0); uint64_t x316; fiat_p384_uint1 x317; - fiat_p384_addcarryx_u64(&x316, &x317, x277, 0x0, (fiat_p384_uint1)x314); + fiat_p384_addcarryx_u64(&x316, &x317, x265, 0x0, 0x0); uint64_t x318; fiat_p384_uint1 x319; - fiat_p384_addcarryx_u64(&x318, &x319, x301, 0x0, x281); + fiat_p384_addcarryx_u64(&x318, &x319, x277, (fiat_p384_uint1)x316, 0x0); uint64_t x320; fiat_p384_uint1 x321; - fiat_p384_addcarryx_u64(&x320, &x321, x313, x318, x316); + fiat_p384_addcarryx_u64(&x320, &x321, x313, x318, x314); uint64_t x322; fiat_p384_uint1 x323; fiat_p384_subborrowx_u64(&x322, &x323, 0x0, x304, UINT32_C(0xffffffff)); diff --git a/p434_64.c b/p434_64.c index ff56cd51d..390af5f95 100644 --- a/p434_64.c +++ b/p434_64.c @@ -148,25 +148,25 @@ static void fiat_p434_mul(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_mulx_u64(&x20, &x21, x7, (arg2[0])); uint64_t x22; fiat_p434_uint1 x23; - fiat_p434_addcarryx_u64(&x22, &x23, 0x0, x18, x21); + fiat_p434_addcarryx_u64(&x22, &x23, 0x0, x21, x18); uint64_t x24; fiat_p434_uint1 x25; - fiat_p434_addcarryx_u64(&x24, &x25, x23, x16, x19); + fiat_p434_addcarryx_u64(&x24, &x25, x23, x19, x16); uint64_t x26; fiat_p434_uint1 x27; - fiat_p434_addcarryx_u64(&x26, &x27, x25, x14, x17); + fiat_p434_addcarryx_u64(&x26, &x27, x25, x17, x14); uint64_t x28; fiat_p434_uint1 x29; - fiat_p434_addcarryx_u64(&x28, &x29, x27, x12, x15); + fiat_p434_addcarryx_u64(&x28, &x29, x27, x15, x12); uint64_t x30; fiat_p434_uint1 x31; - fiat_p434_addcarryx_u64(&x30, &x31, x29, x10, x13); + fiat_p434_addcarryx_u64(&x30, &x31, x29, x13, x10); uint64_t x32; fiat_p434_uint1 x33; - fiat_p434_addcarryx_u64(&x32, &x33, x31, x8, x11); + fiat_p434_addcarryx_u64(&x32, &x33, x31, x11, x8); uint64_t x34; fiat_p434_uint1 x35; - fiat_p434_addcarryx_u64(&x34, &x35, x33, 0x0, x9); + fiat_p434_addcarryx_u64(&x34, &x35, x33, x9, 0x0); uint64_t x36; uint64_t x37; fiat_p434_mulx_u64(&x36, &x37, x20, UINT64_C(0x2341f27177344)); @@ -190,49 +190,49 @@ static void fiat_p434_mul(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_mulx_u64(&x48, &x49, x20, UINT64_C(0xffffffffffffffff)); uint64_t x50; fiat_p434_uint1 x51; - fiat_p434_addcarryx_u64(&x50, &x51, 0x0, x46, x49); + fiat_p434_addcarryx_u64(&x50, &x51, 0x0, x49, x46); uint64_t x52; fiat_p434_uint1 x53; - fiat_p434_addcarryx_u64(&x52, &x53, x51, x44, x47); + fiat_p434_addcarryx_u64(&x52, &x53, x51, x47, x44); uint64_t x54; fiat_p434_uint1 x55; - fiat_p434_addcarryx_u64(&x54, &x55, x53, x42, x45); + fiat_p434_addcarryx_u64(&x54, &x55, x53, x45, x42); uint64_t x56; fiat_p434_uint1 x57; - fiat_p434_addcarryx_u64(&x56, &x57, x55, x40, x43); + fiat_p434_addcarryx_u64(&x56, &x57, x55, x43, x40); uint64_t x58; fiat_p434_uint1 x59; - fiat_p434_addcarryx_u64(&x58, &x59, x57, x38, x41); + fiat_p434_addcarryx_u64(&x58, &x59, x57, x41, x38); uint64_t x60; fiat_p434_uint1 x61; - fiat_p434_addcarryx_u64(&x60, &x61, x59, x36, x39); + fiat_p434_addcarryx_u64(&x60, &x61, x59, x39, x36); uint64_t x62; fiat_p434_uint1 x63; - fiat_p434_addcarryx_u64(&x62, &x63, x61, 0x0, x37); + fiat_p434_addcarryx_u64(&x62, &x63, x61, x37, 0x0); uint64_t x64; fiat_p434_uint1 x65; - fiat_p434_addcarryx_u64(&x64, &x65, 0x0, x48, x20); + fiat_p434_addcarryx_u64(&x64, &x65, 0x0, x20, x48); uint64_t x66; fiat_p434_uint1 x67; - fiat_p434_addcarryx_u64(&x66, &x67, x65, x50, x22); + fiat_p434_addcarryx_u64(&x66, &x67, x65, x22, x50); uint64_t x68; fiat_p434_uint1 x69; - fiat_p434_addcarryx_u64(&x68, &x69, x67, x52, x24); + fiat_p434_addcarryx_u64(&x68, &x69, x67, x24, x52); uint64_t x70; fiat_p434_uint1 x71; - fiat_p434_addcarryx_u64(&x70, &x71, x69, x54, x26); + fiat_p434_addcarryx_u64(&x70, &x71, x69, x26, x54); uint64_t x72; fiat_p434_uint1 x73; - fiat_p434_addcarryx_u64(&x72, &x73, x71, x56, x28); + fiat_p434_addcarryx_u64(&x72, &x73, x71, x28, x56); uint64_t x74; fiat_p434_uint1 x75; - fiat_p434_addcarryx_u64(&x74, &x75, x73, x58, x30); + fiat_p434_addcarryx_u64(&x74, &x75, x73, x30, x58); uint64_t x76; fiat_p434_uint1 x77; - fiat_p434_addcarryx_u64(&x76, &x77, x75, x60, x32); + fiat_p434_addcarryx_u64(&x76, &x77, x75, x32, x60); uint64_t x78; fiat_p434_uint1 x79; - fiat_p434_addcarryx_u64(&x78, &x79, x77, x62, x34); + fiat_p434_addcarryx_u64(&x78, &x79, x77, x34, x62); uint64_t x80; fiat_p434_uint1 x81; fiat_p434_addcarryx_u64(&x80, &x81, x79, 0x0, 0x0); @@ -259,49 +259,49 @@ static void fiat_p434_mul(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_mulx_u64(&x94, &x95, x1, (arg2[0])); uint64_t x96; fiat_p434_uint1 x97; - fiat_p434_addcarryx_u64(&x96, &x97, 0x0, x92, x95); + fiat_p434_addcarryx_u64(&x96, &x97, 0x0, x95, x92); uint64_t x98; fiat_p434_uint1 x99; - fiat_p434_addcarryx_u64(&x98, &x99, x97, x90, x93); + fiat_p434_addcarryx_u64(&x98, &x99, x97, x93, x90); uint64_t x100; fiat_p434_uint1 x101; - fiat_p434_addcarryx_u64(&x100, &x101, x99, x88, x91); + fiat_p434_addcarryx_u64(&x100, &x101, x99, x91, x88); uint64_t x102; fiat_p434_uint1 x103; - fiat_p434_addcarryx_u64(&x102, &x103, x101, x86, x89); + fiat_p434_addcarryx_u64(&x102, &x103, x101, x89, x86); uint64_t x104; fiat_p434_uint1 x105; - fiat_p434_addcarryx_u64(&x104, &x105, x103, x84, x87); + fiat_p434_addcarryx_u64(&x104, &x105, x103, x87, x84); uint64_t x106; fiat_p434_uint1 x107; - fiat_p434_addcarryx_u64(&x106, &x107, x105, x82, x85); + fiat_p434_addcarryx_u64(&x106, &x107, x105, x85, x82); uint64_t x108; fiat_p434_uint1 x109; - fiat_p434_addcarryx_u64(&x108, &x109, x107, 0x0, x83); + fiat_p434_addcarryx_u64(&x108, &x109, x107, x83, 0x0); uint64_t x110; fiat_p434_uint1 x111; - fiat_p434_addcarryx_u64(&x110, &x111, 0x0, x94, x66); + fiat_p434_addcarryx_u64(&x110, &x111, 0x0, x66, x94); uint64_t x112; fiat_p434_uint1 x113; - fiat_p434_addcarryx_u64(&x112, &x113, x111, x96, x68); + fiat_p434_addcarryx_u64(&x112, &x113, x111, x68, x96); uint64_t x114; fiat_p434_uint1 x115; - fiat_p434_addcarryx_u64(&x114, &x115, x113, x98, x70); + fiat_p434_addcarryx_u64(&x114, &x115, x113, x70, x98); uint64_t x116; fiat_p434_uint1 x117; - fiat_p434_addcarryx_u64(&x116, &x117, x115, x100, x72); + fiat_p434_addcarryx_u64(&x116, &x117, x115, x72, x100); uint64_t x118; fiat_p434_uint1 x119; - fiat_p434_addcarryx_u64(&x118, &x119, x117, x102, x74); + fiat_p434_addcarryx_u64(&x118, &x119, x117, x74, x102); uint64_t x120; fiat_p434_uint1 x121; - fiat_p434_addcarryx_u64(&x120, &x121, x119, x104, x76); + fiat_p434_addcarryx_u64(&x120, &x121, x119, x76, x104); uint64_t x122; fiat_p434_uint1 x123; - fiat_p434_addcarryx_u64(&x122, &x123, x121, x106, x78); + fiat_p434_addcarryx_u64(&x122, &x123, x121, x78, x106); uint64_t x124; fiat_p434_uint1 x125; - fiat_p434_addcarryx_u64(&x124, &x125, x123, x108, (fiat_p434_uint1)x80); + fiat_p434_addcarryx_u64(&x124, &x125, x123, (fiat_p434_uint1)x80, x108); uint64_t x126; uint64_t x127; fiat_p434_mulx_u64(&x126, &x127, x110, UINT64_C(0x2341f27177344)); @@ -325,52 +325,52 @@ static void fiat_p434_mul(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_mulx_u64(&x138, &x139, x110, UINT64_C(0xffffffffffffffff)); uint64_t x140; fiat_p434_uint1 x141; - fiat_p434_addcarryx_u64(&x140, &x141, 0x0, x136, x139); + fiat_p434_addcarryx_u64(&x140, &x141, 0x0, x139, x136); uint64_t x142; fiat_p434_uint1 x143; - fiat_p434_addcarryx_u64(&x142, &x143, x141, x134, x137); + fiat_p434_addcarryx_u64(&x142, &x143, x141, x137, x134); uint64_t x144; fiat_p434_uint1 x145; - fiat_p434_addcarryx_u64(&x144, &x145, x143, x132, x135); + fiat_p434_addcarryx_u64(&x144, &x145, x143, x135, x132); uint64_t x146; fiat_p434_uint1 x147; - fiat_p434_addcarryx_u64(&x146, &x147, x145, x130, x133); + fiat_p434_addcarryx_u64(&x146, &x147, x145, x133, x130); uint64_t x148; fiat_p434_uint1 x149; - fiat_p434_addcarryx_u64(&x148, &x149, x147, x128, x131); + fiat_p434_addcarryx_u64(&x148, &x149, x147, x131, x128); uint64_t x150; fiat_p434_uint1 x151; - fiat_p434_addcarryx_u64(&x150, &x151, x149, x126, x129); + fiat_p434_addcarryx_u64(&x150, &x151, x149, x129, x126); uint64_t x152; fiat_p434_uint1 x153; - fiat_p434_addcarryx_u64(&x152, &x153, x151, 0x0, x127); + fiat_p434_addcarryx_u64(&x152, &x153, x151, x127, 0x0); uint64_t x154; fiat_p434_uint1 x155; - fiat_p434_addcarryx_u64(&x154, &x155, 0x0, x138, x110); + fiat_p434_addcarryx_u64(&x154, &x155, 0x0, x110, x138); uint64_t x156; fiat_p434_uint1 x157; - fiat_p434_addcarryx_u64(&x156, &x157, x155, x140, x112); + fiat_p434_addcarryx_u64(&x156, &x157, x155, x112, x140); uint64_t x158; fiat_p434_uint1 x159; - fiat_p434_addcarryx_u64(&x158, &x159, x157, x142, x114); + fiat_p434_addcarryx_u64(&x158, &x159, x157, x114, x142); uint64_t x160; fiat_p434_uint1 x161; - fiat_p434_addcarryx_u64(&x160, &x161, x159, x144, x116); + fiat_p434_addcarryx_u64(&x160, &x161, x159, x116, x144); uint64_t x162; fiat_p434_uint1 x163; - fiat_p434_addcarryx_u64(&x162, &x163, x161, x146, x118); + fiat_p434_addcarryx_u64(&x162, &x163, x161, x118, x146); uint64_t x164; fiat_p434_uint1 x165; - fiat_p434_addcarryx_u64(&x164, &x165, x163, x148, x120); + fiat_p434_addcarryx_u64(&x164, &x165, x163, x120, x148); uint64_t x166; fiat_p434_uint1 x167; - fiat_p434_addcarryx_u64(&x166, &x167, x165, x150, x122); + fiat_p434_addcarryx_u64(&x166, &x167, x165, x122, x150); uint64_t x168; fiat_p434_uint1 x169; - fiat_p434_addcarryx_u64(&x168, &x169, x167, x152, x124); + fiat_p434_addcarryx_u64(&x168, &x169, x167, x124, x152); uint64_t x170; fiat_p434_uint1 x171; - fiat_p434_addcarryx_u64(&x170, &x171, x169, 0x0, x125); + fiat_p434_addcarryx_u64(&x170, &x171, x169, x125, 0x0); uint64_t x172; uint64_t x173; fiat_p434_mulx_u64(&x172, &x173, x2, (arg2[6])); @@ -394,49 +394,49 @@ static void fiat_p434_mul(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_mulx_u64(&x184, &x185, x2, (arg2[0])); uint64_t x186; fiat_p434_uint1 x187; - fiat_p434_addcarryx_u64(&x186, &x187, 0x0, x182, x185); + fiat_p434_addcarryx_u64(&x186, &x187, 0x0, x185, x182); uint64_t x188; fiat_p434_uint1 x189; - fiat_p434_addcarryx_u64(&x188, &x189, x187, x180, x183); + fiat_p434_addcarryx_u64(&x188, &x189, x187, x183, x180); uint64_t x190; fiat_p434_uint1 x191; - fiat_p434_addcarryx_u64(&x190, &x191, x189, x178, x181); + fiat_p434_addcarryx_u64(&x190, &x191, x189, x181, x178); uint64_t x192; fiat_p434_uint1 x193; - fiat_p434_addcarryx_u64(&x192, &x193, x191, x176, x179); + fiat_p434_addcarryx_u64(&x192, &x193, x191, x179, x176); uint64_t x194; fiat_p434_uint1 x195; - fiat_p434_addcarryx_u64(&x194, &x195, x193, x174, x177); + fiat_p434_addcarryx_u64(&x194, &x195, x193, x177, x174); uint64_t x196; fiat_p434_uint1 x197; - fiat_p434_addcarryx_u64(&x196, &x197, x195, x172, x175); + fiat_p434_addcarryx_u64(&x196, &x197, x195, x175, x172); uint64_t x198; fiat_p434_uint1 x199; - fiat_p434_addcarryx_u64(&x198, &x199, x197, 0x0, x173); + fiat_p434_addcarryx_u64(&x198, &x199, x197, x173, 0x0); uint64_t x200; fiat_p434_uint1 x201; - fiat_p434_addcarryx_u64(&x200, &x201, 0x0, x184, x156); + fiat_p434_addcarryx_u64(&x200, &x201, 0x0, x156, x184); uint64_t x202; fiat_p434_uint1 x203; - fiat_p434_addcarryx_u64(&x202, &x203, x201, x186, x158); + fiat_p434_addcarryx_u64(&x202, &x203, x201, x158, x186); uint64_t x204; fiat_p434_uint1 x205; - fiat_p434_addcarryx_u64(&x204, &x205, x203, x188, x160); + fiat_p434_addcarryx_u64(&x204, &x205, x203, x160, x188); uint64_t x206; fiat_p434_uint1 x207; - fiat_p434_addcarryx_u64(&x206, &x207, x205, x190, x162); + fiat_p434_addcarryx_u64(&x206, &x207, x205, x162, x190); uint64_t x208; fiat_p434_uint1 x209; - fiat_p434_addcarryx_u64(&x208, &x209, x207, x192, x164); + fiat_p434_addcarryx_u64(&x208, &x209, x207, x164, x192); uint64_t x210; fiat_p434_uint1 x211; - fiat_p434_addcarryx_u64(&x210, &x211, x209, x194, x166); + fiat_p434_addcarryx_u64(&x210, &x211, x209, x166, x194); uint64_t x212; fiat_p434_uint1 x213; - fiat_p434_addcarryx_u64(&x212, &x213, x211, x196, x168); + fiat_p434_addcarryx_u64(&x212, &x213, x211, x168, x196); uint64_t x214; fiat_p434_uint1 x215; - fiat_p434_addcarryx_u64(&x214, &x215, x213, x198, x170); + fiat_p434_addcarryx_u64(&x214, &x215, x213, x170, x198); uint64_t x216; uint64_t x217; fiat_p434_mulx_u64(&x216, &x217, x200, UINT64_C(0x2341f27177344)); @@ -460,52 +460,52 @@ static void fiat_p434_mul(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_mulx_u64(&x228, &x229, x200, UINT64_C(0xffffffffffffffff)); uint64_t x230; fiat_p434_uint1 x231; - fiat_p434_addcarryx_u64(&x230, &x231, 0x0, x226, x229); + fiat_p434_addcarryx_u64(&x230, &x231, 0x0, x229, x226); uint64_t x232; fiat_p434_uint1 x233; - fiat_p434_addcarryx_u64(&x232, &x233, x231, x224, x227); + fiat_p434_addcarryx_u64(&x232, &x233, x231, x227, x224); uint64_t x234; fiat_p434_uint1 x235; - fiat_p434_addcarryx_u64(&x234, &x235, x233, x222, x225); + fiat_p434_addcarryx_u64(&x234, &x235, x233, x225, x222); uint64_t x236; fiat_p434_uint1 x237; - fiat_p434_addcarryx_u64(&x236, &x237, x235, x220, x223); + fiat_p434_addcarryx_u64(&x236, &x237, x235, x223, x220); uint64_t x238; fiat_p434_uint1 x239; - fiat_p434_addcarryx_u64(&x238, &x239, x237, x218, x221); + fiat_p434_addcarryx_u64(&x238, &x239, x237, x221, x218); uint64_t x240; fiat_p434_uint1 x241; - fiat_p434_addcarryx_u64(&x240, &x241, x239, x216, x219); + fiat_p434_addcarryx_u64(&x240, &x241, x239, x219, x216); uint64_t x242; fiat_p434_uint1 x243; - fiat_p434_addcarryx_u64(&x242, &x243, x241, 0x0, x217); + fiat_p434_addcarryx_u64(&x242, &x243, x241, x217, 0x0); uint64_t x244; fiat_p434_uint1 x245; - fiat_p434_addcarryx_u64(&x244, &x245, 0x0, x228, x200); + fiat_p434_addcarryx_u64(&x244, &x245, 0x0, x200, x228); uint64_t x246; fiat_p434_uint1 x247; - fiat_p434_addcarryx_u64(&x246, &x247, x245, x230, x202); + fiat_p434_addcarryx_u64(&x246, &x247, x245, x202, x230); uint64_t x248; fiat_p434_uint1 x249; - fiat_p434_addcarryx_u64(&x248, &x249, x247, x232, x204); + fiat_p434_addcarryx_u64(&x248, &x249, x247, x204, x232); uint64_t x250; fiat_p434_uint1 x251; - fiat_p434_addcarryx_u64(&x250, &x251, x249, x234, x206); + fiat_p434_addcarryx_u64(&x250, &x251, x249, x206, x234); uint64_t x252; fiat_p434_uint1 x253; - fiat_p434_addcarryx_u64(&x252, &x253, x251, x236, x208); + fiat_p434_addcarryx_u64(&x252, &x253, x251, x208, x236); uint64_t x254; fiat_p434_uint1 x255; - fiat_p434_addcarryx_u64(&x254, &x255, x253, x238, x210); + fiat_p434_addcarryx_u64(&x254, &x255, x253, x210, x238); uint64_t x256; fiat_p434_uint1 x257; - fiat_p434_addcarryx_u64(&x256, &x257, x255, x240, x212); + fiat_p434_addcarryx_u64(&x256, &x257, x255, x212, x240); uint64_t x258; fiat_p434_uint1 x259; - fiat_p434_addcarryx_u64(&x258, &x259, x257, x242, x214); + fiat_p434_addcarryx_u64(&x258, &x259, x257, x214, x242); uint64_t x260; fiat_p434_uint1 x261; - fiat_p434_addcarryx_u64(&x260, &x261, x259, 0x0, x215); + fiat_p434_addcarryx_u64(&x260, &x261, x259, x215, 0x0); uint64_t x262; uint64_t x263; fiat_p434_mulx_u64(&x262, &x263, x3, (arg2[6])); @@ -529,49 +529,49 @@ static void fiat_p434_mul(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_mulx_u64(&x274, &x275, x3, (arg2[0])); uint64_t x276; fiat_p434_uint1 x277; - fiat_p434_addcarryx_u64(&x276, &x277, 0x0, x272, x275); + fiat_p434_addcarryx_u64(&x276, &x277, 0x0, x275, x272); uint64_t x278; fiat_p434_uint1 x279; - fiat_p434_addcarryx_u64(&x278, &x279, x277, x270, x273); + fiat_p434_addcarryx_u64(&x278, &x279, x277, x273, x270); uint64_t x280; fiat_p434_uint1 x281; - fiat_p434_addcarryx_u64(&x280, &x281, x279, x268, x271); + fiat_p434_addcarryx_u64(&x280, &x281, x279, x271, x268); uint64_t x282; fiat_p434_uint1 x283; - fiat_p434_addcarryx_u64(&x282, &x283, x281, x266, x269); + fiat_p434_addcarryx_u64(&x282, &x283, x281, x269, x266); uint64_t x284; fiat_p434_uint1 x285; - fiat_p434_addcarryx_u64(&x284, &x285, x283, x264, x267); + fiat_p434_addcarryx_u64(&x284, &x285, x283, x267, x264); uint64_t x286; fiat_p434_uint1 x287; - fiat_p434_addcarryx_u64(&x286, &x287, x285, x262, x265); + fiat_p434_addcarryx_u64(&x286, &x287, x285, x265, x262); uint64_t x288; fiat_p434_uint1 x289; - fiat_p434_addcarryx_u64(&x288, &x289, x287, 0x0, x263); + fiat_p434_addcarryx_u64(&x288, &x289, x287, x263, 0x0); uint64_t x290; fiat_p434_uint1 x291; - fiat_p434_addcarryx_u64(&x290, &x291, 0x0, x274, x246); + fiat_p434_addcarryx_u64(&x290, &x291, 0x0, x246, x274); uint64_t x292; fiat_p434_uint1 x293; - fiat_p434_addcarryx_u64(&x292, &x293, x291, x276, x248); + fiat_p434_addcarryx_u64(&x292, &x293, x291, x248, x276); uint64_t x294; fiat_p434_uint1 x295; - fiat_p434_addcarryx_u64(&x294, &x295, x293, x278, x250); + fiat_p434_addcarryx_u64(&x294, &x295, x293, x250, x278); uint64_t x296; fiat_p434_uint1 x297; - fiat_p434_addcarryx_u64(&x296, &x297, x295, x280, x252); + fiat_p434_addcarryx_u64(&x296, &x297, x295, x252, x280); uint64_t x298; fiat_p434_uint1 x299; - fiat_p434_addcarryx_u64(&x298, &x299, x297, x282, x254); + fiat_p434_addcarryx_u64(&x298, &x299, x297, x254, x282); uint64_t x300; fiat_p434_uint1 x301; - fiat_p434_addcarryx_u64(&x300, &x301, x299, x284, x256); + fiat_p434_addcarryx_u64(&x300, &x301, x299, x256, x284); uint64_t x302; fiat_p434_uint1 x303; - fiat_p434_addcarryx_u64(&x302, &x303, x301, x286, x258); + fiat_p434_addcarryx_u64(&x302, &x303, x301, x258, x286); uint64_t x304; fiat_p434_uint1 x305; - fiat_p434_addcarryx_u64(&x304, &x305, x303, x288, x260); + fiat_p434_addcarryx_u64(&x304, &x305, x303, x260, x288); uint64_t x306; uint64_t x307; fiat_p434_mulx_u64(&x306, &x307, x290, UINT64_C(0x2341f27177344)); @@ -595,52 +595,52 @@ static void fiat_p434_mul(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_mulx_u64(&x318, &x319, x290, UINT64_C(0xffffffffffffffff)); uint64_t x320; fiat_p434_uint1 x321; - fiat_p434_addcarryx_u64(&x320, &x321, 0x0, x316, x319); + fiat_p434_addcarryx_u64(&x320, &x321, 0x0, x319, x316); uint64_t x322; fiat_p434_uint1 x323; - fiat_p434_addcarryx_u64(&x322, &x323, x321, x314, x317); + fiat_p434_addcarryx_u64(&x322, &x323, x321, x317, x314); uint64_t x324; fiat_p434_uint1 x325; - fiat_p434_addcarryx_u64(&x324, &x325, x323, x312, x315); + fiat_p434_addcarryx_u64(&x324, &x325, x323, x315, x312); uint64_t x326; fiat_p434_uint1 x327; - fiat_p434_addcarryx_u64(&x326, &x327, x325, x310, x313); + fiat_p434_addcarryx_u64(&x326, &x327, x325, x313, x310); uint64_t x328; fiat_p434_uint1 x329; - fiat_p434_addcarryx_u64(&x328, &x329, x327, x308, x311); + fiat_p434_addcarryx_u64(&x328, &x329, x327, x311, x308); uint64_t x330; fiat_p434_uint1 x331; - fiat_p434_addcarryx_u64(&x330, &x331, x329, x306, x309); + fiat_p434_addcarryx_u64(&x330, &x331, x329, x309, x306); uint64_t x332; fiat_p434_uint1 x333; - fiat_p434_addcarryx_u64(&x332, &x333, x331, 0x0, x307); + fiat_p434_addcarryx_u64(&x332, &x333, x331, x307, 0x0); uint64_t x334; fiat_p434_uint1 x335; - fiat_p434_addcarryx_u64(&x334, &x335, 0x0, x318, x290); + fiat_p434_addcarryx_u64(&x334, &x335, 0x0, x290, x318); uint64_t x336; fiat_p434_uint1 x337; - fiat_p434_addcarryx_u64(&x336, &x337, x335, x320, x292); + fiat_p434_addcarryx_u64(&x336, &x337, x335, x292, x320); uint64_t x338; fiat_p434_uint1 x339; - fiat_p434_addcarryx_u64(&x338, &x339, x337, x322, x294); + fiat_p434_addcarryx_u64(&x338, &x339, x337, x294, x322); uint64_t x340; fiat_p434_uint1 x341; - fiat_p434_addcarryx_u64(&x340, &x341, x339, x324, x296); + fiat_p434_addcarryx_u64(&x340, &x341, x339, x296, x324); uint64_t x342; fiat_p434_uint1 x343; - fiat_p434_addcarryx_u64(&x342, &x343, x341, x326, x298); + fiat_p434_addcarryx_u64(&x342, &x343, x341, x298, x326); uint64_t x344; fiat_p434_uint1 x345; - fiat_p434_addcarryx_u64(&x344, &x345, x343, x328, x300); + fiat_p434_addcarryx_u64(&x344, &x345, x343, x300, x328); uint64_t x346; fiat_p434_uint1 x347; - fiat_p434_addcarryx_u64(&x346, &x347, x345, x330, x302); + fiat_p434_addcarryx_u64(&x346, &x347, x345, x302, x330); uint64_t x348; fiat_p434_uint1 x349; - fiat_p434_addcarryx_u64(&x348, &x349, x347, x332, x304); + fiat_p434_addcarryx_u64(&x348, &x349, x347, x304, x332); uint64_t x350; fiat_p434_uint1 x351; - fiat_p434_addcarryx_u64(&x350, &x351, x349, 0x0, x305); + fiat_p434_addcarryx_u64(&x350, &x351, x349, x305, 0x0); uint64_t x352; uint64_t x353; fiat_p434_mulx_u64(&x352, &x353, x4, (arg2[6])); @@ -664,49 +664,49 @@ static void fiat_p434_mul(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_mulx_u64(&x364, &x365, x4, (arg2[0])); uint64_t x366; fiat_p434_uint1 x367; - fiat_p434_addcarryx_u64(&x366, &x367, 0x0, x362, x365); + fiat_p434_addcarryx_u64(&x366, &x367, 0x0, x365, x362); uint64_t x368; fiat_p434_uint1 x369; - fiat_p434_addcarryx_u64(&x368, &x369, x367, x360, x363); + fiat_p434_addcarryx_u64(&x368, &x369, x367, x363, x360); uint64_t x370; fiat_p434_uint1 x371; - fiat_p434_addcarryx_u64(&x370, &x371, x369, x358, x361); + fiat_p434_addcarryx_u64(&x370, &x371, x369, x361, x358); uint64_t x372; fiat_p434_uint1 x373; - fiat_p434_addcarryx_u64(&x372, &x373, x371, x356, x359); + fiat_p434_addcarryx_u64(&x372, &x373, x371, x359, x356); uint64_t x374; fiat_p434_uint1 x375; - fiat_p434_addcarryx_u64(&x374, &x375, x373, x354, x357); + fiat_p434_addcarryx_u64(&x374, &x375, x373, x357, x354); uint64_t x376; fiat_p434_uint1 x377; - fiat_p434_addcarryx_u64(&x376, &x377, x375, x352, x355); + fiat_p434_addcarryx_u64(&x376, &x377, x375, x355, x352); uint64_t x378; fiat_p434_uint1 x379; - fiat_p434_addcarryx_u64(&x378, &x379, x377, 0x0, x353); + fiat_p434_addcarryx_u64(&x378, &x379, x377, x353, 0x0); uint64_t x380; fiat_p434_uint1 x381; - fiat_p434_addcarryx_u64(&x380, &x381, 0x0, x364, x336); + fiat_p434_addcarryx_u64(&x380, &x381, 0x0, x336, x364); uint64_t x382; fiat_p434_uint1 x383; - fiat_p434_addcarryx_u64(&x382, &x383, x381, x366, x338); + fiat_p434_addcarryx_u64(&x382, &x383, x381, x338, x366); uint64_t x384; fiat_p434_uint1 x385; - fiat_p434_addcarryx_u64(&x384, &x385, x383, x368, x340); + fiat_p434_addcarryx_u64(&x384, &x385, x383, x340, x368); uint64_t x386; fiat_p434_uint1 x387; - fiat_p434_addcarryx_u64(&x386, &x387, x385, x370, x342); + fiat_p434_addcarryx_u64(&x386, &x387, x385, x342, x370); uint64_t x388; fiat_p434_uint1 x389; - fiat_p434_addcarryx_u64(&x388, &x389, x387, x372, x344); + fiat_p434_addcarryx_u64(&x388, &x389, x387, x344, x372); uint64_t x390; fiat_p434_uint1 x391; - fiat_p434_addcarryx_u64(&x390, &x391, x389, x374, x346); + fiat_p434_addcarryx_u64(&x390, &x391, x389, x346, x374); uint64_t x392; fiat_p434_uint1 x393; - fiat_p434_addcarryx_u64(&x392, &x393, x391, x376, x348); + fiat_p434_addcarryx_u64(&x392, &x393, x391, x348, x376); uint64_t x394; fiat_p434_uint1 x395; - fiat_p434_addcarryx_u64(&x394, &x395, x393, x378, x350); + fiat_p434_addcarryx_u64(&x394, &x395, x393, x350, x378); uint64_t x396; uint64_t x397; fiat_p434_mulx_u64(&x396, &x397, x380, UINT64_C(0x2341f27177344)); @@ -730,52 +730,52 @@ static void fiat_p434_mul(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_mulx_u64(&x408, &x409, x380, UINT64_C(0xffffffffffffffff)); uint64_t x410; fiat_p434_uint1 x411; - fiat_p434_addcarryx_u64(&x410, &x411, 0x0, x406, x409); + fiat_p434_addcarryx_u64(&x410, &x411, 0x0, x409, x406); uint64_t x412; fiat_p434_uint1 x413; - fiat_p434_addcarryx_u64(&x412, &x413, x411, x404, x407); + fiat_p434_addcarryx_u64(&x412, &x413, x411, x407, x404); uint64_t x414; fiat_p434_uint1 x415; - fiat_p434_addcarryx_u64(&x414, &x415, x413, x402, x405); + fiat_p434_addcarryx_u64(&x414, &x415, x413, x405, x402); uint64_t x416; fiat_p434_uint1 x417; - fiat_p434_addcarryx_u64(&x416, &x417, x415, x400, x403); + fiat_p434_addcarryx_u64(&x416, &x417, x415, x403, x400); uint64_t x418; fiat_p434_uint1 x419; - fiat_p434_addcarryx_u64(&x418, &x419, x417, x398, x401); + fiat_p434_addcarryx_u64(&x418, &x419, x417, x401, x398); uint64_t x420; fiat_p434_uint1 x421; - fiat_p434_addcarryx_u64(&x420, &x421, x419, x396, x399); + fiat_p434_addcarryx_u64(&x420, &x421, x419, x399, x396); uint64_t x422; fiat_p434_uint1 x423; - fiat_p434_addcarryx_u64(&x422, &x423, x421, 0x0, x397); + fiat_p434_addcarryx_u64(&x422, &x423, x421, x397, 0x0); uint64_t x424; fiat_p434_uint1 x425; - fiat_p434_addcarryx_u64(&x424, &x425, 0x0, x408, x380); + fiat_p434_addcarryx_u64(&x424, &x425, 0x0, x380, x408); uint64_t x426; fiat_p434_uint1 x427; - fiat_p434_addcarryx_u64(&x426, &x427, x425, x410, x382); + fiat_p434_addcarryx_u64(&x426, &x427, x425, x382, x410); uint64_t x428; fiat_p434_uint1 x429; - fiat_p434_addcarryx_u64(&x428, &x429, x427, x412, x384); + fiat_p434_addcarryx_u64(&x428, &x429, x427, x384, x412); uint64_t x430; fiat_p434_uint1 x431; - fiat_p434_addcarryx_u64(&x430, &x431, x429, x414, x386); + fiat_p434_addcarryx_u64(&x430, &x431, x429, x386, x414); uint64_t x432; fiat_p434_uint1 x433; - fiat_p434_addcarryx_u64(&x432, &x433, x431, x416, x388); + fiat_p434_addcarryx_u64(&x432, &x433, x431, x388, x416); uint64_t x434; fiat_p434_uint1 x435; - fiat_p434_addcarryx_u64(&x434, &x435, x433, x418, x390); + fiat_p434_addcarryx_u64(&x434, &x435, x433, x390, x418); uint64_t x436; fiat_p434_uint1 x437; - fiat_p434_addcarryx_u64(&x436, &x437, x435, x420, x392); + fiat_p434_addcarryx_u64(&x436, &x437, x435, x392, x420); uint64_t x438; fiat_p434_uint1 x439; - fiat_p434_addcarryx_u64(&x438, &x439, x437, x422, x394); + fiat_p434_addcarryx_u64(&x438, &x439, x437, x394, x422); uint64_t x440; fiat_p434_uint1 x441; - fiat_p434_addcarryx_u64(&x440, &x441, x439, 0x0, x395); + fiat_p434_addcarryx_u64(&x440, &x441, x439, x395, 0x0); uint64_t x442; uint64_t x443; fiat_p434_mulx_u64(&x442, &x443, x5, (arg2[6])); @@ -799,49 +799,49 @@ static void fiat_p434_mul(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_mulx_u64(&x454, &x455, x5, (arg2[0])); uint64_t x456; fiat_p434_uint1 x457; - fiat_p434_addcarryx_u64(&x456, &x457, 0x0, x452, x455); + fiat_p434_addcarryx_u64(&x456, &x457, 0x0, x455, x452); uint64_t x458; fiat_p434_uint1 x459; - fiat_p434_addcarryx_u64(&x458, &x459, x457, x450, x453); + fiat_p434_addcarryx_u64(&x458, &x459, x457, x453, x450); uint64_t x460; fiat_p434_uint1 x461; - fiat_p434_addcarryx_u64(&x460, &x461, x459, x448, x451); + fiat_p434_addcarryx_u64(&x460, &x461, x459, x451, x448); uint64_t x462; fiat_p434_uint1 x463; - fiat_p434_addcarryx_u64(&x462, &x463, x461, x446, x449); + fiat_p434_addcarryx_u64(&x462, &x463, x461, x449, x446); uint64_t x464; fiat_p434_uint1 x465; - fiat_p434_addcarryx_u64(&x464, &x465, x463, x444, x447); + fiat_p434_addcarryx_u64(&x464, &x465, x463, x447, x444); uint64_t x466; fiat_p434_uint1 x467; - fiat_p434_addcarryx_u64(&x466, &x467, x465, x442, x445); + fiat_p434_addcarryx_u64(&x466, &x467, x465, x445, x442); uint64_t x468; fiat_p434_uint1 x469; - fiat_p434_addcarryx_u64(&x468, &x469, x467, 0x0, x443); + fiat_p434_addcarryx_u64(&x468, &x469, x467, x443, 0x0); uint64_t x470; fiat_p434_uint1 x471; - fiat_p434_addcarryx_u64(&x470, &x471, 0x0, x454, x426); + fiat_p434_addcarryx_u64(&x470, &x471, 0x0, x426, x454); uint64_t x472; fiat_p434_uint1 x473; - fiat_p434_addcarryx_u64(&x472, &x473, x471, x456, x428); + fiat_p434_addcarryx_u64(&x472, &x473, x471, x428, x456); uint64_t x474; fiat_p434_uint1 x475; - fiat_p434_addcarryx_u64(&x474, &x475, x473, x458, x430); + fiat_p434_addcarryx_u64(&x474, &x475, x473, x430, x458); uint64_t x476; fiat_p434_uint1 x477; - fiat_p434_addcarryx_u64(&x476, &x477, x475, x460, x432); + fiat_p434_addcarryx_u64(&x476, &x477, x475, x432, x460); uint64_t x478; fiat_p434_uint1 x479; - fiat_p434_addcarryx_u64(&x478, &x479, x477, x462, x434); + fiat_p434_addcarryx_u64(&x478, &x479, x477, x434, x462); uint64_t x480; fiat_p434_uint1 x481; - fiat_p434_addcarryx_u64(&x480, &x481, x479, x464, x436); + fiat_p434_addcarryx_u64(&x480, &x481, x479, x436, x464); uint64_t x482; fiat_p434_uint1 x483; - fiat_p434_addcarryx_u64(&x482, &x483, x481, x466, x438); + fiat_p434_addcarryx_u64(&x482, &x483, x481, x438, x466); uint64_t x484; fiat_p434_uint1 x485; - fiat_p434_addcarryx_u64(&x484, &x485, x483, x468, x440); + fiat_p434_addcarryx_u64(&x484, &x485, x483, x440, x468); uint64_t x486; uint64_t x487; fiat_p434_mulx_u64(&x486, &x487, x470, UINT64_C(0x2341f27177344)); @@ -865,52 +865,52 @@ static void fiat_p434_mul(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_mulx_u64(&x498, &x499, x470, UINT64_C(0xffffffffffffffff)); uint64_t x500; fiat_p434_uint1 x501; - fiat_p434_addcarryx_u64(&x500, &x501, 0x0, x496, x499); + fiat_p434_addcarryx_u64(&x500, &x501, 0x0, x499, x496); uint64_t x502; fiat_p434_uint1 x503; - fiat_p434_addcarryx_u64(&x502, &x503, x501, x494, x497); + fiat_p434_addcarryx_u64(&x502, &x503, x501, x497, x494); uint64_t x504; fiat_p434_uint1 x505; - fiat_p434_addcarryx_u64(&x504, &x505, x503, x492, x495); + fiat_p434_addcarryx_u64(&x504, &x505, x503, x495, x492); uint64_t x506; fiat_p434_uint1 x507; - fiat_p434_addcarryx_u64(&x506, &x507, x505, x490, x493); + fiat_p434_addcarryx_u64(&x506, &x507, x505, x493, x490); uint64_t x508; fiat_p434_uint1 x509; - fiat_p434_addcarryx_u64(&x508, &x509, x507, x488, x491); + fiat_p434_addcarryx_u64(&x508, &x509, x507, x491, x488); uint64_t x510; fiat_p434_uint1 x511; - fiat_p434_addcarryx_u64(&x510, &x511, x509, x486, x489); + fiat_p434_addcarryx_u64(&x510, &x511, x509, x489, x486); uint64_t x512; fiat_p434_uint1 x513; - fiat_p434_addcarryx_u64(&x512, &x513, x511, 0x0, x487); + fiat_p434_addcarryx_u64(&x512, &x513, x511, x487, 0x0); uint64_t x514; fiat_p434_uint1 x515; - fiat_p434_addcarryx_u64(&x514, &x515, 0x0, x498, x470); + fiat_p434_addcarryx_u64(&x514, &x515, 0x0, x470, x498); uint64_t x516; fiat_p434_uint1 x517; - fiat_p434_addcarryx_u64(&x516, &x517, x515, x500, x472); + fiat_p434_addcarryx_u64(&x516, &x517, x515, x472, x500); uint64_t x518; fiat_p434_uint1 x519; - fiat_p434_addcarryx_u64(&x518, &x519, x517, x502, x474); + fiat_p434_addcarryx_u64(&x518, &x519, x517, x474, x502); uint64_t x520; fiat_p434_uint1 x521; - fiat_p434_addcarryx_u64(&x520, &x521, x519, x504, x476); + fiat_p434_addcarryx_u64(&x520, &x521, x519, x476, x504); uint64_t x522; fiat_p434_uint1 x523; - fiat_p434_addcarryx_u64(&x522, &x523, x521, x506, x478); + fiat_p434_addcarryx_u64(&x522, &x523, x521, x478, x506); uint64_t x524; fiat_p434_uint1 x525; - fiat_p434_addcarryx_u64(&x524, &x525, x523, x508, x480); + fiat_p434_addcarryx_u64(&x524, &x525, x523, x480, x508); uint64_t x526; fiat_p434_uint1 x527; - fiat_p434_addcarryx_u64(&x526, &x527, x525, x510, x482); + fiat_p434_addcarryx_u64(&x526, &x527, x525, x482, x510); uint64_t x528; fiat_p434_uint1 x529; - fiat_p434_addcarryx_u64(&x528, &x529, x527, x512, x484); + fiat_p434_addcarryx_u64(&x528, &x529, x527, x484, x512); uint64_t x530; fiat_p434_uint1 x531; - fiat_p434_addcarryx_u64(&x530, &x531, x529, 0x0, x485); + fiat_p434_addcarryx_u64(&x530, &x531, x529, x485, 0x0); uint64_t x532; uint64_t x533; fiat_p434_mulx_u64(&x532, &x533, x6, (arg2[6])); @@ -934,49 +934,49 @@ static void fiat_p434_mul(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_mulx_u64(&x544, &x545, x6, (arg2[0])); uint64_t x546; fiat_p434_uint1 x547; - fiat_p434_addcarryx_u64(&x546, &x547, 0x0, x542, x545); + fiat_p434_addcarryx_u64(&x546, &x547, 0x0, x545, x542); uint64_t x548; fiat_p434_uint1 x549; - fiat_p434_addcarryx_u64(&x548, &x549, x547, x540, x543); + fiat_p434_addcarryx_u64(&x548, &x549, x547, x543, x540); uint64_t x550; fiat_p434_uint1 x551; - fiat_p434_addcarryx_u64(&x550, &x551, x549, x538, x541); + fiat_p434_addcarryx_u64(&x550, &x551, x549, x541, x538); uint64_t x552; fiat_p434_uint1 x553; - fiat_p434_addcarryx_u64(&x552, &x553, x551, x536, x539); + fiat_p434_addcarryx_u64(&x552, &x553, x551, x539, x536); uint64_t x554; fiat_p434_uint1 x555; - fiat_p434_addcarryx_u64(&x554, &x555, x553, x534, x537); + fiat_p434_addcarryx_u64(&x554, &x555, x553, x537, x534); uint64_t x556; fiat_p434_uint1 x557; - fiat_p434_addcarryx_u64(&x556, &x557, x555, x532, x535); + fiat_p434_addcarryx_u64(&x556, &x557, x555, x535, x532); uint64_t x558; fiat_p434_uint1 x559; - fiat_p434_addcarryx_u64(&x558, &x559, x557, 0x0, x533); + fiat_p434_addcarryx_u64(&x558, &x559, x557, x533, 0x0); uint64_t x560; fiat_p434_uint1 x561; - fiat_p434_addcarryx_u64(&x560, &x561, 0x0, x544, x516); + fiat_p434_addcarryx_u64(&x560, &x561, 0x0, x516, x544); uint64_t x562; fiat_p434_uint1 x563; - fiat_p434_addcarryx_u64(&x562, &x563, x561, x546, x518); + fiat_p434_addcarryx_u64(&x562, &x563, x561, x518, x546); uint64_t x564; fiat_p434_uint1 x565; - fiat_p434_addcarryx_u64(&x564, &x565, x563, x548, x520); + fiat_p434_addcarryx_u64(&x564, &x565, x563, x520, x548); uint64_t x566; fiat_p434_uint1 x567; - fiat_p434_addcarryx_u64(&x566, &x567, x565, x550, x522); + fiat_p434_addcarryx_u64(&x566, &x567, x565, x522, x550); uint64_t x568; fiat_p434_uint1 x569; - fiat_p434_addcarryx_u64(&x568, &x569, x567, x552, x524); + fiat_p434_addcarryx_u64(&x568, &x569, x567, x524, x552); uint64_t x570; fiat_p434_uint1 x571; - fiat_p434_addcarryx_u64(&x570, &x571, x569, x554, x526); + fiat_p434_addcarryx_u64(&x570, &x571, x569, x526, x554); uint64_t x572; fiat_p434_uint1 x573; - fiat_p434_addcarryx_u64(&x572, &x573, x571, x556, x528); + fiat_p434_addcarryx_u64(&x572, &x573, x571, x528, x556); uint64_t x574; fiat_p434_uint1 x575; - fiat_p434_addcarryx_u64(&x574, &x575, x573, x558, x530); + fiat_p434_addcarryx_u64(&x574, &x575, x573, x530, x558); uint64_t x576; uint64_t x577; fiat_p434_mulx_u64(&x576, &x577, x560, UINT64_C(0x2341f27177344)); @@ -1000,52 +1000,52 @@ static void fiat_p434_mul(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_mulx_u64(&x588, &x589, x560, UINT64_C(0xffffffffffffffff)); uint64_t x590; fiat_p434_uint1 x591; - fiat_p434_addcarryx_u64(&x590, &x591, 0x0, x586, x589); + fiat_p434_addcarryx_u64(&x590, &x591, 0x0, x589, x586); uint64_t x592; fiat_p434_uint1 x593; - fiat_p434_addcarryx_u64(&x592, &x593, x591, x584, x587); + fiat_p434_addcarryx_u64(&x592, &x593, x591, x587, x584); uint64_t x594; fiat_p434_uint1 x595; - fiat_p434_addcarryx_u64(&x594, &x595, x593, x582, x585); + fiat_p434_addcarryx_u64(&x594, &x595, x593, x585, x582); uint64_t x596; fiat_p434_uint1 x597; - fiat_p434_addcarryx_u64(&x596, &x597, x595, x580, x583); + fiat_p434_addcarryx_u64(&x596, &x597, x595, x583, x580); uint64_t x598; fiat_p434_uint1 x599; - fiat_p434_addcarryx_u64(&x598, &x599, x597, x578, x581); + fiat_p434_addcarryx_u64(&x598, &x599, x597, x581, x578); uint64_t x600; fiat_p434_uint1 x601; - fiat_p434_addcarryx_u64(&x600, &x601, x599, x576, x579); + fiat_p434_addcarryx_u64(&x600, &x601, x599, x579, x576); uint64_t x602; fiat_p434_uint1 x603; - fiat_p434_addcarryx_u64(&x602, &x603, x601, 0x0, x577); + fiat_p434_addcarryx_u64(&x602, &x603, x601, x577, 0x0); uint64_t x604; fiat_p434_uint1 x605; - fiat_p434_addcarryx_u64(&x604, &x605, 0x0, x588, x560); + fiat_p434_addcarryx_u64(&x604, &x605, 0x0, x560, x588); uint64_t x606; fiat_p434_uint1 x607; - fiat_p434_addcarryx_u64(&x606, &x607, x605, x590, x562); + fiat_p434_addcarryx_u64(&x606, &x607, x605, x562, x590); uint64_t x608; fiat_p434_uint1 x609; - fiat_p434_addcarryx_u64(&x608, &x609, x607, x592, x564); + fiat_p434_addcarryx_u64(&x608, &x609, x607, x564, x592); uint64_t x610; fiat_p434_uint1 x611; - fiat_p434_addcarryx_u64(&x610, &x611, x609, x594, x566); + fiat_p434_addcarryx_u64(&x610, &x611, x609, x566, x594); uint64_t x612; fiat_p434_uint1 x613; - fiat_p434_addcarryx_u64(&x612, &x613, x611, x596, x568); + fiat_p434_addcarryx_u64(&x612, &x613, x611, x568, x596); uint64_t x614; fiat_p434_uint1 x615; - fiat_p434_addcarryx_u64(&x614, &x615, x613, x598, x570); + fiat_p434_addcarryx_u64(&x614, &x615, x613, x570, x598); uint64_t x616; fiat_p434_uint1 x617; - fiat_p434_addcarryx_u64(&x616, &x617, x615, x600, x572); + fiat_p434_addcarryx_u64(&x616, &x617, x615, x572, x600); uint64_t x618; fiat_p434_uint1 x619; - fiat_p434_addcarryx_u64(&x618, &x619, x617, x602, x574); + fiat_p434_addcarryx_u64(&x618, &x619, x617, x574, x602); uint64_t x620; fiat_p434_uint1 x621; - fiat_p434_addcarryx_u64(&x620, &x621, x619, 0x0, x575); + fiat_p434_addcarryx_u64(&x620, &x621, x619, x575, 0x0); uint64_t x622; fiat_p434_uint1 x623; fiat_p434_subborrowx_u64(&x622, &x623, 0x0, x606, UINT64_C(0xffffffffffffffff)); @@ -1137,25 +1137,25 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_mulx_u64(&x20, &x21, x7, (arg1[0])); uint64_t x22; fiat_p434_uint1 x23; - fiat_p434_addcarryx_u64(&x22, &x23, 0x0, x18, x21); + fiat_p434_addcarryx_u64(&x22, &x23, 0x0, x21, x18); uint64_t x24; fiat_p434_uint1 x25; - fiat_p434_addcarryx_u64(&x24, &x25, x23, x16, x19); + fiat_p434_addcarryx_u64(&x24, &x25, x23, x19, x16); uint64_t x26; fiat_p434_uint1 x27; - fiat_p434_addcarryx_u64(&x26, &x27, x25, x14, x17); + fiat_p434_addcarryx_u64(&x26, &x27, x25, x17, x14); uint64_t x28; fiat_p434_uint1 x29; - fiat_p434_addcarryx_u64(&x28, &x29, x27, x12, x15); + fiat_p434_addcarryx_u64(&x28, &x29, x27, x15, x12); uint64_t x30; fiat_p434_uint1 x31; - fiat_p434_addcarryx_u64(&x30, &x31, x29, x10, x13); + fiat_p434_addcarryx_u64(&x30, &x31, x29, x13, x10); uint64_t x32; fiat_p434_uint1 x33; - fiat_p434_addcarryx_u64(&x32, &x33, x31, x8, x11); + fiat_p434_addcarryx_u64(&x32, &x33, x31, x11, x8); uint64_t x34; fiat_p434_uint1 x35; - fiat_p434_addcarryx_u64(&x34, &x35, x33, 0x0, x9); + fiat_p434_addcarryx_u64(&x34, &x35, x33, x9, 0x0); uint64_t x36; uint64_t x37; fiat_p434_mulx_u64(&x36, &x37, x20, UINT64_C(0x2341f27177344)); @@ -1179,49 +1179,49 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_mulx_u64(&x48, &x49, x20, UINT64_C(0xffffffffffffffff)); uint64_t x50; fiat_p434_uint1 x51; - fiat_p434_addcarryx_u64(&x50, &x51, 0x0, x46, x49); + fiat_p434_addcarryx_u64(&x50, &x51, 0x0, x49, x46); uint64_t x52; fiat_p434_uint1 x53; - fiat_p434_addcarryx_u64(&x52, &x53, x51, x44, x47); + fiat_p434_addcarryx_u64(&x52, &x53, x51, x47, x44); uint64_t x54; fiat_p434_uint1 x55; - fiat_p434_addcarryx_u64(&x54, &x55, x53, x42, x45); + fiat_p434_addcarryx_u64(&x54, &x55, x53, x45, x42); uint64_t x56; fiat_p434_uint1 x57; - fiat_p434_addcarryx_u64(&x56, &x57, x55, x40, x43); + fiat_p434_addcarryx_u64(&x56, &x57, x55, x43, x40); uint64_t x58; fiat_p434_uint1 x59; - fiat_p434_addcarryx_u64(&x58, &x59, x57, x38, x41); + fiat_p434_addcarryx_u64(&x58, &x59, x57, x41, x38); uint64_t x60; fiat_p434_uint1 x61; - fiat_p434_addcarryx_u64(&x60, &x61, x59, x36, x39); + fiat_p434_addcarryx_u64(&x60, &x61, x59, x39, x36); uint64_t x62; fiat_p434_uint1 x63; - fiat_p434_addcarryx_u64(&x62, &x63, x61, 0x0, x37); + fiat_p434_addcarryx_u64(&x62, &x63, x61, x37, 0x0); uint64_t x64; fiat_p434_uint1 x65; - fiat_p434_addcarryx_u64(&x64, &x65, 0x0, x48, x20); + fiat_p434_addcarryx_u64(&x64, &x65, 0x0, x20, x48); uint64_t x66; fiat_p434_uint1 x67; - fiat_p434_addcarryx_u64(&x66, &x67, x65, x50, x22); + fiat_p434_addcarryx_u64(&x66, &x67, x65, x22, x50); uint64_t x68; fiat_p434_uint1 x69; - fiat_p434_addcarryx_u64(&x68, &x69, x67, x52, x24); + fiat_p434_addcarryx_u64(&x68, &x69, x67, x24, x52); uint64_t x70; fiat_p434_uint1 x71; - fiat_p434_addcarryx_u64(&x70, &x71, x69, x54, x26); + fiat_p434_addcarryx_u64(&x70, &x71, x69, x26, x54); uint64_t x72; fiat_p434_uint1 x73; - fiat_p434_addcarryx_u64(&x72, &x73, x71, x56, x28); + fiat_p434_addcarryx_u64(&x72, &x73, x71, x28, x56); uint64_t x74; fiat_p434_uint1 x75; - fiat_p434_addcarryx_u64(&x74, &x75, x73, x58, x30); + fiat_p434_addcarryx_u64(&x74, &x75, x73, x30, x58); uint64_t x76; fiat_p434_uint1 x77; - fiat_p434_addcarryx_u64(&x76, &x77, x75, x60, x32); + fiat_p434_addcarryx_u64(&x76, &x77, x75, x32, x60); uint64_t x78; fiat_p434_uint1 x79; - fiat_p434_addcarryx_u64(&x78, &x79, x77, x62, x34); + fiat_p434_addcarryx_u64(&x78, &x79, x77, x34, x62); uint64_t x80; fiat_p434_uint1 x81; fiat_p434_addcarryx_u64(&x80, &x81, x79, 0x0, 0x0); @@ -1248,49 +1248,49 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_mulx_u64(&x94, &x95, x1, (arg1[0])); uint64_t x96; fiat_p434_uint1 x97; - fiat_p434_addcarryx_u64(&x96, &x97, 0x0, x92, x95); + fiat_p434_addcarryx_u64(&x96, &x97, 0x0, x95, x92); uint64_t x98; fiat_p434_uint1 x99; - fiat_p434_addcarryx_u64(&x98, &x99, x97, x90, x93); + fiat_p434_addcarryx_u64(&x98, &x99, x97, x93, x90); uint64_t x100; fiat_p434_uint1 x101; - fiat_p434_addcarryx_u64(&x100, &x101, x99, x88, x91); + fiat_p434_addcarryx_u64(&x100, &x101, x99, x91, x88); uint64_t x102; fiat_p434_uint1 x103; - fiat_p434_addcarryx_u64(&x102, &x103, x101, x86, x89); + fiat_p434_addcarryx_u64(&x102, &x103, x101, x89, x86); uint64_t x104; fiat_p434_uint1 x105; - fiat_p434_addcarryx_u64(&x104, &x105, x103, x84, x87); + fiat_p434_addcarryx_u64(&x104, &x105, x103, x87, x84); uint64_t x106; fiat_p434_uint1 x107; - fiat_p434_addcarryx_u64(&x106, &x107, x105, x82, x85); + fiat_p434_addcarryx_u64(&x106, &x107, x105, x85, x82); uint64_t x108; fiat_p434_uint1 x109; - fiat_p434_addcarryx_u64(&x108, &x109, x107, 0x0, x83); + fiat_p434_addcarryx_u64(&x108, &x109, x107, x83, 0x0); uint64_t x110; fiat_p434_uint1 x111; - fiat_p434_addcarryx_u64(&x110, &x111, 0x0, x94, x66); + fiat_p434_addcarryx_u64(&x110, &x111, 0x0, x66, x94); uint64_t x112; fiat_p434_uint1 x113; - fiat_p434_addcarryx_u64(&x112, &x113, x111, x96, x68); + fiat_p434_addcarryx_u64(&x112, &x113, x111, x68, x96); uint64_t x114; fiat_p434_uint1 x115; - fiat_p434_addcarryx_u64(&x114, &x115, x113, x98, x70); + fiat_p434_addcarryx_u64(&x114, &x115, x113, x70, x98); uint64_t x116; fiat_p434_uint1 x117; - fiat_p434_addcarryx_u64(&x116, &x117, x115, x100, x72); + fiat_p434_addcarryx_u64(&x116, &x117, x115, x72, x100); uint64_t x118; fiat_p434_uint1 x119; - fiat_p434_addcarryx_u64(&x118, &x119, x117, x102, x74); + fiat_p434_addcarryx_u64(&x118, &x119, x117, x74, x102); uint64_t x120; fiat_p434_uint1 x121; - fiat_p434_addcarryx_u64(&x120, &x121, x119, x104, x76); + fiat_p434_addcarryx_u64(&x120, &x121, x119, x76, x104); uint64_t x122; fiat_p434_uint1 x123; - fiat_p434_addcarryx_u64(&x122, &x123, x121, x106, x78); + fiat_p434_addcarryx_u64(&x122, &x123, x121, x78, x106); uint64_t x124; fiat_p434_uint1 x125; - fiat_p434_addcarryx_u64(&x124, &x125, x123, x108, (fiat_p434_uint1)x80); + fiat_p434_addcarryx_u64(&x124, &x125, x123, (fiat_p434_uint1)x80, x108); uint64_t x126; uint64_t x127; fiat_p434_mulx_u64(&x126, &x127, x110, UINT64_C(0x2341f27177344)); @@ -1314,52 +1314,52 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_mulx_u64(&x138, &x139, x110, UINT64_C(0xffffffffffffffff)); uint64_t x140; fiat_p434_uint1 x141; - fiat_p434_addcarryx_u64(&x140, &x141, 0x0, x136, x139); + fiat_p434_addcarryx_u64(&x140, &x141, 0x0, x139, x136); uint64_t x142; fiat_p434_uint1 x143; - fiat_p434_addcarryx_u64(&x142, &x143, x141, x134, x137); + fiat_p434_addcarryx_u64(&x142, &x143, x141, x137, x134); uint64_t x144; fiat_p434_uint1 x145; - fiat_p434_addcarryx_u64(&x144, &x145, x143, x132, x135); + fiat_p434_addcarryx_u64(&x144, &x145, x143, x135, x132); uint64_t x146; fiat_p434_uint1 x147; - fiat_p434_addcarryx_u64(&x146, &x147, x145, x130, x133); + fiat_p434_addcarryx_u64(&x146, &x147, x145, x133, x130); uint64_t x148; fiat_p434_uint1 x149; - fiat_p434_addcarryx_u64(&x148, &x149, x147, x128, x131); + fiat_p434_addcarryx_u64(&x148, &x149, x147, x131, x128); uint64_t x150; fiat_p434_uint1 x151; - fiat_p434_addcarryx_u64(&x150, &x151, x149, x126, x129); + fiat_p434_addcarryx_u64(&x150, &x151, x149, x129, x126); uint64_t x152; fiat_p434_uint1 x153; - fiat_p434_addcarryx_u64(&x152, &x153, x151, 0x0, x127); + fiat_p434_addcarryx_u64(&x152, &x153, x151, x127, 0x0); uint64_t x154; fiat_p434_uint1 x155; - fiat_p434_addcarryx_u64(&x154, &x155, 0x0, x138, x110); + fiat_p434_addcarryx_u64(&x154, &x155, 0x0, x110, x138); uint64_t x156; fiat_p434_uint1 x157; - fiat_p434_addcarryx_u64(&x156, &x157, x155, x140, x112); + fiat_p434_addcarryx_u64(&x156, &x157, x155, x112, x140); uint64_t x158; fiat_p434_uint1 x159; - fiat_p434_addcarryx_u64(&x158, &x159, x157, x142, x114); + fiat_p434_addcarryx_u64(&x158, &x159, x157, x114, x142); uint64_t x160; fiat_p434_uint1 x161; - fiat_p434_addcarryx_u64(&x160, &x161, x159, x144, x116); + fiat_p434_addcarryx_u64(&x160, &x161, x159, x116, x144); uint64_t x162; fiat_p434_uint1 x163; - fiat_p434_addcarryx_u64(&x162, &x163, x161, x146, x118); + fiat_p434_addcarryx_u64(&x162, &x163, x161, x118, x146); uint64_t x164; fiat_p434_uint1 x165; - fiat_p434_addcarryx_u64(&x164, &x165, x163, x148, x120); + fiat_p434_addcarryx_u64(&x164, &x165, x163, x120, x148); uint64_t x166; fiat_p434_uint1 x167; - fiat_p434_addcarryx_u64(&x166, &x167, x165, x150, x122); + fiat_p434_addcarryx_u64(&x166, &x167, x165, x122, x150); uint64_t x168; fiat_p434_uint1 x169; - fiat_p434_addcarryx_u64(&x168, &x169, x167, x152, x124); + fiat_p434_addcarryx_u64(&x168, &x169, x167, x124, x152); uint64_t x170; fiat_p434_uint1 x171; - fiat_p434_addcarryx_u64(&x170, &x171, x169, 0x0, x125); + fiat_p434_addcarryx_u64(&x170, &x171, x169, x125, 0x0); uint64_t x172; uint64_t x173; fiat_p434_mulx_u64(&x172, &x173, x2, (arg1[6])); @@ -1383,49 +1383,49 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_mulx_u64(&x184, &x185, x2, (arg1[0])); uint64_t x186; fiat_p434_uint1 x187; - fiat_p434_addcarryx_u64(&x186, &x187, 0x0, x182, x185); + fiat_p434_addcarryx_u64(&x186, &x187, 0x0, x185, x182); uint64_t x188; fiat_p434_uint1 x189; - fiat_p434_addcarryx_u64(&x188, &x189, x187, x180, x183); + fiat_p434_addcarryx_u64(&x188, &x189, x187, x183, x180); uint64_t x190; fiat_p434_uint1 x191; - fiat_p434_addcarryx_u64(&x190, &x191, x189, x178, x181); + fiat_p434_addcarryx_u64(&x190, &x191, x189, x181, x178); uint64_t x192; fiat_p434_uint1 x193; - fiat_p434_addcarryx_u64(&x192, &x193, x191, x176, x179); + fiat_p434_addcarryx_u64(&x192, &x193, x191, x179, x176); uint64_t x194; fiat_p434_uint1 x195; - fiat_p434_addcarryx_u64(&x194, &x195, x193, x174, x177); + fiat_p434_addcarryx_u64(&x194, &x195, x193, x177, x174); uint64_t x196; fiat_p434_uint1 x197; - fiat_p434_addcarryx_u64(&x196, &x197, x195, x172, x175); + fiat_p434_addcarryx_u64(&x196, &x197, x195, x175, x172); uint64_t x198; fiat_p434_uint1 x199; - fiat_p434_addcarryx_u64(&x198, &x199, x197, 0x0, x173); + fiat_p434_addcarryx_u64(&x198, &x199, x197, x173, 0x0); uint64_t x200; fiat_p434_uint1 x201; - fiat_p434_addcarryx_u64(&x200, &x201, 0x0, x184, x156); + fiat_p434_addcarryx_u64(&x200, &x201, 0x0, x156, x184); uint64_t x202; fiat_p434_uint1 x203; - fiat_p434_addcarryx_u64(&x202, &x203, x201, x186, x158); + fiat_p434_addcarryx_u64(&x202, &x203, x201, x158, x186); uint64_t x204; fiat_p434_uint1 x205; - fiat_p434_addcarryx_u64(&x204, &x205, x203, x188, x160); + fiat_p434_addcarryx_u64(&x204, &x205, x203, x160, x188); uint64_t x206; fiat_p434_uint1 x207; - fiat_p434_addcarryx_u64(&x206, &x207, x205, x190, x162); + fiat_p434_addcarryx_u64(&x206, &x207, x205, x162, x190); uint64_t x208; fiat_p434_uint1 x209; - fiat_p434_addcarryx_u64(&x208, &x209, x207, x192, x164); + fiat_p434_addcarryx_u64(&x208, &x209, x207, x164, x192); uint64_t x210; fiat_p434_uint1 x211; - fiat_p434_addcarryx_u64(&x210, &x211, x209, x194, x166); + fiat_p434_addcarryx_u64(&x210, &x211, x209, x166, x194); uint64_t x212; fiat_p434_uint1 x213; - fiat_p434_addcarryx_u64(&x212, &x213, x211, x196, x168); + fiat_p434_addcarryx_u64(&x212, &x213, x211, x168, x196); uint64_t x214; fiat_p434_uint1 x215; - fiat_p434_addcarryx_u64(&x214, &x215, x213, x198, x170); + fiat_p434_addcarryx_u64(&x214, &x215, x213, x170, x198); uint64_t x216; uint64_t x217; fiat_p434_mulx_u64(&x216, &x217, x200, UINT64_C(0x2341f27177344)); @@ -1449,52 +1449,52 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_mulx_u64(&x228, &x229, x200, UINT64_C(0xffffffffffffffff)); uint64_t x230; fiat_p434_uint1 x231; - fiat_p434_addcarryx_u64(&x230, &x231, 0x0, x226, x229); + fiat_p434_addcarryx_u64(&x230, &x231, 0x0, x229, x226); uint64_t x232; fiat_p434_uint1 x233; - fiat_p434_addcarryx_u64(&x232, &x233, x231, x224, x227); + fiat_p434_addcarryx_u64(&x232, &x233, x231, x227, x224); uint64_t x234; fiat_p434_uint1 x235; - fiat_p434_addcarryx_u64(&x234, &x235, x233, x222, x225); + fiat_p434_addcarryx_u64(&x234, &x235, x233, x225, x222); uint64_t x236; fiat_p434_uint1 x237; - fiat_p434_addcarryx_u64(&x236, &x237, x235, x220, x223); + fiat_p434_addcarryx_u64(&x236, &x237, x235, x223, x220); uint64_t x238; fiat_p434_uint1 x239; - fiat_p434_addcarryx_u64(&x238, &x239, x237, x218, x221); + fiat_p434_addcarryx_u64(&x238, &x239, x237, x221, x218); uint64_t x240; fiat_p434_uint1 x241; - fiat_p434_addcarryx_u64(&x240, &x241, x239, x216, x219); + fiat_p434_addcarryx_u64(&x240, &x241, x239, x219, x216); uint64_t x242; fiat_p434_uint1 x243; - fiat_p434_addcarryx_u64(&x242, &x243, x241, 0x0, x217); + fiat_p434_addcarryx_u64(&x242, &x243, x241, x217, 0x0); uint64_t x244; fiat_p434_uint1 x245; - fiat_p434_addcarryx_u64(&x244, &x245, 0x0, x228, x200); + fiat_p434_addcarryx_u64(&x244, &x245, 0x0, x200, x228); uint64_t x246; fiat_p434_uint1 x247; - fiat_p434_addcarryx_u64(&x246, &x247, x245, x230, x202); + fiat_p434_addcarryx_u64(&x246, &x247, x245, x202, x230); uint64_t x248; fiat_p434_uint1 x249; - fiat_p434_addcarryx_u64(&x248, &x249, x247, x232, x204); + fiat_p434_addcarryx_u64(&x248, &x249, x247, x204, x232); uint64_t x250; fiat_p434_uint1 x251; - fiat_p434_addcarryx_u64(&x250, &x251, x249, x234, x206); + fiat_p434_addcarryx_u64(&x250, &x251, x249, x206, x234); uint64_t x252; fiat_p434_uint1 x253; - fiat_p434_addcarryx_u64(&x252, &x253, x251, x236, x208); + fiat_p434_addcarryx_u64(&x252, &x253, x251, x208, x236); uint64_t x254; fiat_p434_uint1 x255; - fiat_p434_addcarryx_u64(&x254, &x255, x253, x238, x210); + fiat_p434_addcarryx_u64(&x254, &x255, x253, x210, x238); uint64_t x256; fiat_p434_uint1 x257; - fiat_p434_addcarryx_u64(&x256, &x257, x255, x240, x212); + fiat_p434_addcarryx_u64(&x256, &x257, x255, x212, x240); uint64_t x258; fiat_p434_uint1 x259; - fiat_p434_addcarryx_u64(&x258, &x259, x257, x242, x214); + fiat_p434_addcarryx_u64(&x258, &x259, x257, x214, x242); uint64_t x260; fiat_p434_uint1 x261; - fiat_p434_addcarryx_u64(&x260, &x261, x259, 0x0, x215); + fiat_p434_addcarryx_u64(&x260, &x261, x259, x215, 0x0); uint64_t x262; uint64_t x263; fiat_p434_mulx_u64(&x262, &x263, x3, (arg1[6])); @@ -1518,49 +1518,49 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_mulx_u64(&x274, &x275, x3, (arg1[0])); uint64_t x276; fiat_p434_uint1 x277; - fiat_p434_addcarryx_u64(&x276, &x277, 0x0, x272, x275); + fiat_p434_addcarryx_u64(&x276, &x277, 0x0, x275, x272); uint64_t x278; fiat_p434_uint1 x279; - fiat_p434_addcarryx_u64(&x278, &x279, x277, x270, x273); + fiat_p434_addcarryx_u64(&x278, &x279, x277, x273, x270); uint64_t x280; fiat_p434_uint1 x281; - fiat_p434_addcarryx_u64(&x280, &x281, x279, x268, x271); + fiat_p434_addcarryx_u64(&x280, &x281, x279, x271, x268); uint64_t x282; fiat_p434_uint1 x283; - fiat_p434_addcarryx_u64(&x282, &x283, x281, x266, x269); + fiat_p434_addcarryx_u64(&x282, &x283, x281, x269, x266); uint64_t x284; fiat_p434_uint1 x285; - fiat_p434_addcarryx_u64(&x284, &x285, x283, x264, x267); + fiat_p434_addcarryx_u64(&x284, &x285, x283, x267, x264); uint64_t x286; fiat_p434_uint1 x287; - fiat_p434_addcarryx_u64(&x286, &x287, x285, x262, x265); + fiat_p434_addcarryx_u64(&x286, &x287, x285, x265, x262); uint64_t x288; fiat_p434_uint1 x289; - fiat_p434_addcarryx_u64(&x288, &x289, x287, 0x0, x263); + fiat_p434_addcarryx_u64(&x288, &x289, x287, x263, 0x0); uint64_t x290; fiat_p434_uint1 x291; - fiat_p434_addcarryx_u64(&x290, &x291, 0x0, x274, x246); + fiat_p434_addcarryx_u64(&x290, &x291, 0x0, x246, x274); uint64_t x292; fiat_p434_uint1 x293; - fiat_p434_addcarryx_u64(&x292, &x293, x291, x276, x248); + fiat_p434_addcarryx_u64(&x292, &x293, x291, x248, x276); uint64_t x294; fiat_p434_uint1 x295; - fiat_p434_addcarryx_u64(&x294, &x295, x293, x278, x250); + fiat_p434_addcarryx_u64(&x294, &x295, x293, x250, x278); uint64_t x296; fiat_p434_uint1 x297; - fiat_p434_addcarryx_u64(&x296, &x297, x295, x280, x252); + fiat_p434_addcarryx_u64(&x296, &x297, x295, x252, x280); uint64_t x298; fiat_p434_uint1 x299; - fiat_p434_addcarryx_u64(&x298, &x299, x297, x282, x254); + fiat_p434_addcarryx_u64(&x298, &x299, x297, x254, x282); uint64_t x300; fiat_p434_uint1 x301; - fiat_p434_addcarryx_u64(&x300, &x301, x299, x284, x256); + fiat_p434_addcarryx_u64(&x300, &x301, x299, x256, x284); uint64_t x302; fiat_p434_uint1 x303; - fiat_p434_addcarryx_u64(&x302, &x303, x301, x286, x258); + fiat_p434_addcarryx_u64(&x302, &x303, x301, x258, x286); uint64_t x304; fiat_p434_uint1 x305; - fiat_p434_addcarryx_u64(&x304, &x305, x303, x288, x260); + fiat_p434_addcarryx_u64(&x304, &x305, x303, x260, x288); uint64_t x306; uint64_t x307; fiat_p434_mulx_u64(&x306, &x307, x290, UINT64_C(0x2341f27177344)); @@ -1584,52 +1584,52 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_mulx_u64(&x318, &x319, x290, UINT64_C(0xffffffffffffffff)); uint64_t x320; fiat_p434_uint1 x321; - fiat_p434_addcarryx_u64(&x320, &x321, 0x0, x316, x319); + fiat_p434_addcarryx_u64(&x320, &x321, 0x0, x319, x316); uint64_t x322; fiat_p434_uint1 x323; - fiat_p434_addcarryx_u64(&x322, &x323, x321, x314, x317); + fiat_p434_addcarryx_u64(&x322, &x323, x321, x317, x314); uint64_t x324; fiat_p434_uint1 x325; - fiat_p434_addcarryx_u64(&x324, &x325, x323, x312, x315); + fiat_p434_addcarryx_u64(&x324, &x325, x323, x315, x312); uint64_t x326; fiat_p434_uint1 x327; - fiat_p434_addcarryx_u64(&x326, &x327, x325, x310, x313); + fiat_p434_addcarryx_u64(&x326, &x327, x325, x313, x310); uint64_t x328; fiat_p434_uint1 x329; - fiat_p434_addcarryx_u64(&x328, &x329, x327, x308, x311); + fiat_p434_addcarryx_u64(&x328, &x329, x327, x311, x308); uint64_t x330; fiat_p434_uint1 x331; - fiat_p434_addcarryx_u64(&x330, &x331, x329, x306, x309); + fiat_p434_addcarryx_u64(&x330, &x331, x329, x309, x306); uint64_t x332; fiat_p434_uint1 x333; - fiat_p434_addcarryx_u64(&x332, &x333, x331, 0x0, x307); + fiat_p434_addcarryx_u64(&x332, &x333, x331, x307, 0x0); uint64_t x334; fiat_p434_uint1 x335; - fiat_p434_addcarryx_u64(&x334, &x335, 0x0, x318, x290); + fiat_p434_addcarryx_u64(&x334, &x335, 0x0, x290, x318); uint64_t x336; fiat_p434_uint1 x337; - fiat_p434_addcarryx_u64(&x336, &x337, x335, x320, x292); + fiat_p434_addcarryx_u64(&x336, &x337, x335, x292, x320); uint64_t x338; fiat_p434_uint1 x339; - fiat_p434_addcarryx_u64(&x338, &x339, x337, x322, x294); + fiat_p434_addcarryx_u64(&x338, &x339, x337, x294, x322); uint64_t x340; fiat_p434_uint1 x341; - fiat_p434_addcarryx_u64(&x340, &x341, x339, x324, x296); + fiat_p434_addcarryx_u64(&x340, &x341, x339, x296, x324); uint64_t x342; fiat_p434_uint1 x343; - fiat_p434_addcarryx_u64(&x342, &x343, x341, x326, x298); + fiat_p434_addcarryx_u64(&x342, &x343, x341, x298, x326); uint64_t x344; fiat_p434_uint1 x345; - fiat_p434_addcarryx_u64(&x344, &x345, x343, x328, x300); + fiat_p434_addcarryx_u64(&x344, &x345, x343, x300, x328); uint64_t x346; fiat_p434_uint1 x347; - fiat_p434_addcarryx_u64(&x346, &x347, x345, x330, x302); + fiat_p434_addcarryx_u64(&x346, &x347, x345, x302, x330); uint64_t x348; fiat_p434_uint1 x349; - fiat_p434_addcarryx_u64(&x348, &x349, x347, x332, x304); + fiat_p434_addcarryx_u64(&x348, &x349, x347, x304, x332); uint64_t x350; fiat_p434_uint1 x351; - fiat_p434_addcarryx_u64(&x350, &x351, x349, 0x0, x305); + fiat_p434_addcarryx_u64(&x350, &x351, x349, x305, 0x0); uint64_t x352; uint64_t x353; fiat_p434_mulx_u64(&x352, &x353, x4, (arg1[6])); @@ -1653,49 +1653,49 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_mulx_u64(&x364, &x365, x4, (arg1[0])); uint64_t x366; fiat_p434_uint1 x367; - fiat_p434_addcarryx_u64(&x366, &x367, 0x0, x362, x365); + fiat_p434_addcarryx_u64(&x366, &x367, 0x0, x365, x362); uint64_t x368; fiat_p434_uint1 x369; - fiat_p434_addcarryx_u64(&x368, &x369, x367, x360, x363); + fiat_p434_addcarryx_u64(&x368, &x369, x367, x363, x360); uint64_t x370; fiat_p434_uint1 x371; - fiat_p434_addcarryx_u64(&x370, &x371, x369, x358, x361); + fiat_p434_addcarryx_u64(&x370, &x371, x369, x361, x358); uint64_t x372; fiat_p434_uint1 x373; - fiat_p434_addcarryx_u64(&x372, &x373, x371, x356, x359); + fiat_p434_addcarryx_u64(&x372, &x373, x371, x359, x356); uint64_t x374; fiat_p434_uint1 x375; - fiat_p434_addcarryx_u64(&x374, &x375, x373, x354, x357); + fiat_p434_addcarryx_u64(&x374, &x375, x373, x357, x354); uint64_t x376; fiat_p434_uint1 x377; - fiat_p434_addcarryx_u64(&x376, &x377, x375, x352, x355); + fiat_p434_addcarryx_u64(&x376, &x377, x375, x355, x352); uint64_t x378; fiat_p434_uint1 x379; - fiat_p434_addcarryx_u64(&x378, &x379, x377, 0x0, x353); + fiat_p434_addcarryx_u64(&x378, &x379, x377, x353, 0x0); uint64_t x380; fiat_p434_uint1 x381; - fiat_p434_addcarryx_u64(&x380, &x381, 0x0, x364, x336); + fiat_p434_addcarryx_u64(&x380, &x381, 0x0, x336, x364); uint64_t x382; fiat_p434_uint1 x383; - fiat_p434_addcarryx_u64(&x382, &x383, x381, x366, x338); + fiat_p434_addcarryx_u64(&x382, &x383, x381, x338, x366); uint64_t x384; fiat_p434_uint1 x385; - fiat_p434_addcarryx_u64(&x384, &x385, x383, x368, x340); + fiat_p434_addcarryx_u64(&x384, &x385, x383, x340, x368); uint64_t x386; fiat_p434_uint1 x387; - fiat_p434_addcarryx_u64(&x386, &x387, x385, x370, x342); + fiat_p434_addcarryx_u64(&x386, &x387, x385, x342, x370); uint64_t x388; fiat_p434_uint1 x389; - fiat_p434_addcarryx_u64(&x388, &x389, x387, x372, x344); + fiat_p434_addcarryx_u64(&x388, &x389, x387, x344, x372); uint64_t x390; fiat_p434_uint1 x391; - fiat_p434_addcarryx_u64(&x390, &x391, x389, x374, x346); + fiat_p434_addcarryx_u64(&x390, &x391, x389, x346, x374); uint64_t x392; fiat_p434_uint1 x393; - fiat_p434_addcarryx_u64(&x392, &x393, x391, x376, x348); + fiat_p434_addcarryx_u64(&x392, &x393, x391, x348, x376); uint64_t x394; fiat_p434_uint1 x395; - fiat_p434_addcarryx_u64(&x394, &x395, x393, x378, x350); + fiat_p434_addcarryx_u64(&x394, &x395, x393, x350, x378); uint64_t x396; uint64_t x397; fiat_p434_mulx_u64(&x396, &x397, x380, UINT64_C(0x2341f27177344)); @@ -1719,52 +1719,52 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_mulx_u64(&x408, &x409, x380, UINT64_C(0xffffffffffffffff)); uint64_t x410; fiat_p434_uint1 x411; - fiat_p434_addcarryx_u64(&x410, &x411, 0x0, x406, x409); + fiat_p434_addcarryx_u64(&x410, &x411, 0x0, x409, x406); uint64_t x412; fiat_p434_uint1 x413; - fiat_p434_addcarryx_u64(&x412, &x413, x411, x404, x407); + fiat_p434_addcarryx_u64(&x412, &x413, x411, x407, x404); uint64_t x414; fiat_p434_uint1 x415; - fiat_p434_addcarryx_u64(&x414, &x415, x413, x402, x405); + fiat_p434_addcarryx_u64(&x414, &x415, x413, x405, x402); uint64_t x416; fiat_p434_uint1 x417; - fiat_p434_addcarryx_u64(&x416, &x417, x415, x400, x403); + fiat_p434_addcarryx_u64(&x416, &x417, x415, x403, x400); uint64_t x418; fiat_p434_uint1 x419; - fiat_p434_addcarryx_u64(&x418, &x419, x417, x398, x401); + fiat_p434_addcarryx_u64(&x418, &x419, x417, x401, x398); uint64_t x420; fiat_p434_uint1 x421; - fiat_p434_addcarryx_u64(&x420, &x421, x419, x396, x399); + fiat_p434_addcarryx_u64(&x420, &x421, x419, x399, x396); uint64_t x422; fiat_p434_uint1 x423; - fiat_p434_addcarryx_u64(&x422, &x423, x421, 0x0, x397); + fiat_p434_addcarryx_u64(&x422, &x423, x421, x397, 0x0); uint64_t x424; fiat_p434_uint1 x425; - fiat_p434_addcarryx_u64(&x424, &x425, 0x0, x408, x380); + fiat_p434_addcarryx_u64(&x424, &x425, 0x0, x380, x408); uint64_t x426; fiat_p434_uint1 x427; - fiat_p434_addcarryx_u64(&x426, &x427, x425, x410, x382); + fiat_p434_addcarryx_u64(&x426, &x427, x425, x382, x410); uint64_t x428; fiat_p434_uint1 x429; - fiat_p434_addcarryx_u64(&x428, &x429, x427, x412, x384); + fiat_p434_addcarryx_u64(&x428, &x429, x427, x384, x412); uint64_t x430; fiat_p434_uint1 x431; - fiat_p434_addcarryx_u64(&x430, &x431, x429, x414, x386); + fiat_p434_addcarryx_u64(&x430, &x431, x429, x386, x414); uint64_t x432; fiat_p434_uint1 x433; - fiat_p434_addcarryx_u64(&x432, &x433, x431, x416, x388); + fiat_p434_addcarryx_u64(&x432, &x433, x431, x388, x416); uint64_t x434; fiat_p434_uint1 x435; - fiat_p434_addcarryx_u64(&x434, &x435, x433, x418, x390); + fiat_p434_addcarryx_u64(&x434, &x435, x433, x390, x418); uint64_t x436; fiat_p434_uint1 x437; - fiat_p434_addcarryx_u64(&x436, &x437, x435, x420, x392); + fiat_p434_addcarryx_u64(&x436, &x437, x435, x392, x420); uint64_t x438; fiat_p434_uint1 x439; - fiat_p434_addcarryx_u64(&x438, &x439, x437, x422, x394); + fiat_p434_addcarryx_u64(&x438, &x439, x437, x394, x422); uint64_t x440; fiat_p434_uint1 x441; - fiat_p434_addcarryx_u64(&x440, &x441, x439, 0x0, x395); + fiat_p434_addcarryx_u64(&x440, &x441, x439, x395, 0x0); uint64_t x442; uint64_t x443; fiat_p434_mulx_u64(&x442, &x443, x5, (arg1[6])); @@ -1788,49 +1788,49 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_mulx_u64(&x454, &x455, x5, (arg1[0])); uint64_t x456; fiat_p434_uint1 x457; - fiat_p434_addcarryx_u64(&x456, &x457, 0x0, x452, x455); + fiat_p434_addcarryx_u64(&x456, &x457, 0x0, x455, x452); uint64_t x458; fiat_p434_uint1 x459; - fiat_p434_addcarryx_u64(&x458, &x459, x457, x450, x453); + fiat_p434_addcarryx_u64(&x458, &x459, x457, x453, x450); uint64_t x460; fiat_p434_uint1 x461; - fiat_p434_addcarryx_u64(&x460, &x461, x459, x448, x451); + fiat_p434_addcarryx_u64(&x460, &x461, x459, x451, x448); uint64_t x462; fiat_p434_uint1 x463; - fiat_p434_addcarryx_u64(&x462, &x463, x461, x446, x449); + fiat_p434_addcarryx_u64(&x462, &x463, x461, x449, x446); uint64_t x464; fiat_p434_uint1 x465; - fiat_p434_addcarryx_u64(&x464, &x465, x463, x444, x447); + fiat_p434_addcarryx_u64(&x464, &x465, x463, x447, x444); uint64_t x466; fiat_p434_uint1 x467; - fiat_p434_addcarryx_u64(&x466, &x467, x465, x442, x445); + fiat_p434_addcarryx_u64(&x466, &x467, x465, x445, x442); uint64_t x468; fiat_p434_uint1 x469; - fiat_p434_addcarryx_u64(&x468, &x469, x467, 0x0, x443); + fiat_p434_addcarryx_u64(&x468, &x469, x467, x443, 0x0); uint64_t x470; fiat_p434_uint1 x471; - fiat_p434_addcarryx_u64(&x470, &x471, 0x0, x454, x426); + fiat_p434_addcarryx_u64(&x470, &x471, 0x0, x426, x454); uint64_t x472; fiat_p434_uint1 x473; - fiat_p434_addcarryx_u64(&x472, &x473, x471, x456, x428); + fiat_p434_addcarryx_u64(&x472, &x473, x471, x428, x456); uint64_t x474; fiat_p434_uint1 x475; - fiat_p434_addcarryx_u64(&x474, &x475, x473, x458, x430); + fiat_p434_addcarryx_u64(&x474, &x475, x473, x430, x458); uint64_t x476; fiat_p434_uint1 x477; - fiat_p434_addcarryx_u64(&x476, &x477, x475, x460, x432); + fiat_p434_addcarryx_u64(&x476, &x477, x475, x432, x460); uint64_t x478; fiat_p434_uint1 x479; - fiat_p434_addcarryx_u64(&x478, &x479, x477, x462, x434); + fiat_p434_addcarryx_u64(&x478, &x479, x477, x434, x462); uint64_t x480; fiat_p434_uint1 x481; - fiat_p434_addcarryx_u64(&x480, &x481, x479, x464, x436); + fiat_p434_addcarryx_u64(&x480, &x481, x479, x436, x464); uint64_t x482; fiat_p434_uint1 x483; - fiat_p434_addcarryx_u64(&x482, &x483, x481, x466, x438); + fiat_p434_addcarryx_u64(&x482, &x483, x481, x438, x466); uint64_t x484; fiat_p434_uint1 x485; - fiat_p434_addcarryx_u64(&x484, &x485, x483, x468, x440); + fiat_p434_addcarryx_u64(&x484, &x485, x483, x440, x468); uint64_t x486; uint64_t x487; fiat_p434_mulx_u64(&x486, &x487, x470, UINT64_C(0x2341f27177344)); @@ -1854,52 +1854,52 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_mulx_u64(&x498, &x499, x470, UINT64_C(0xffffffffffffffff)); uint64_t x500; fiat_p434_uint1 x501; - fiat_p434_addcarryx_u64(&x500, &x501, 0x0, x496, x499); + fiat_p434_addcarryx_u64(&x500, &x501, 0x0, x499, x496); uint64_t x502; fiat_p434_uint1 x503; - fiat_p434_addcarryx_u64(&x502, &x503, x501, x494, x497); + fiat_p434_addcarryx_u64(&x502, &x503, x501, x497, x494); uint64_t x504; fiat_p434_uint1 x505; - fiat_p434_addcarryx_u64(&x504, &x505, x503, x492, x495); + fiat_p434_addcarryx_u64(&x504, &x505, x503, x495, x492); uint64_t x506; fiat_p434_uint1 x507; - fiat_p434_addcarryx_u64(&x506, &x507, x505, x490, x493); + fiat_p434_addcarryx_u64(&x506, &x507, x505, x493, x490); uint64_t x508; fiat_p434_uint1 x509; - fiat_p434_addcarryx_u64(&x508, &x509, x507, x488, x491); + fiat_p434_addcarryx_u64(&x508, &x509, x507, x491, x488); uint64_t x510; fiat_p434_uint1 x511; - fiat_p434_addcarryx_u64(&x510, &x511, x509, x486, x489); + fiat_p434_addcarryx_u64(&x510, &x511, x509, x489, x486); uint64_t x512; fiat_p434_uint1 x513; - fiat_p434_addcarryx_u64(&x512, &x513, x511, 0x0, x487); + fiat_p434_addcarryx_u64(&x512, &x513, x511, x487, 0x0); uint64_t x514; fiat_p434_uint1 x515; - fiat_p434_addcarryx_u64(&x514, &x515, 0x0, x498, x470); + fiat_p434_addcarryx_u64(&x514, &x515, 0x0, x470, x498); uint64_t x516; fiat_p434_uint1 x517; - fiat_p434_addcarryx_u64(&x516, &x517, x515, x500, x472); + fiat_p434_addcarryx_u64(&x516, &x517, x515, x472, x500); uint64_t x518; fiat_p434_uint1 x519; - fiat_p434_addcarryx_u64(&x518, &x519, x517, x502, x474); + fiat_p434_addcarryx_u64(&x518, &x519, x517, x474, x502); uint64_t x520; fiat_p434_uint1 x521; - fiat_p434_addcarryx_u64(&x520, &x521, x519, x504, x476); + fiat_p434_addcarryx_u64(&x520, &x521, x519, x476, x504); uint64_t x522; fiat_p434_uint1 x523; - fiat_p434_addcarryx_u64(&x522, &x523, x521, x506, x478); + fiat_p434_addcarryx_u64(&x522, &x523, x521, x478, x506); uint64_t x524; fiat_p434_uint1 x525; - fiat_p434_addcarryx_u64(&x524, &x525, x523, x508, x480); + fiat_p434_addcarryx_u64(&x524, &x525, x523, x480, x508); uint64_t x526; fiat_p434_uint1 x527; - fiat_p434_addcarryx_u64(&x526, &x527, x525, x510, x482); + fiat_p434_addcarryx_u64(&x526, &x527, x525, x482, x510); uint64_t x528; fiat_p434_uint1 x529; - fiat_p434_addcarryx_u64(&x528, &x529, x527, x512, x484); + fiat_p434_addcarryx_u64(&x528, &x529, x527, x484, x512); uint64_t x530; fiat_p434_uint1 x531; - fiat_p434_addcarryx_u64(&x530, &x531, x529, 0x0, x485); + fiat_p434_addcarryx_u64(&x530, &x531, x529, x485, 0x0); uint64_t x532; uint64_t x533; fiat_p434_mulx_u64(&x532, &x533, x6, (arg1[6])); @@ -1923,49 +1923,49 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_mulx_u64(&x544, &x545, x6, (arg1[0])); uint64_t x546; fiat_p434_uint1 x547; - fiat_p434_addcarryx_u64(&x546, &x547, 0x0, x542, x545); + fiat_p434_addcarryx_u64(&x546, &x547, 0x0, x545, x542); uint64_t x548; fiat_p434_uint1 x549; - fiat_p434_addcarryx_u64(&x548, &x549, x547, x540, x543); + fiat_p434_addcarryx_u64(&x548, &x549, x547, x543, x540); uint64_t x550; fiat_p434_uint1 x551; - fiat_p434_addcarryx_u64(&x550, &x551, x549, x538, x541); + fiat_p434_addcarryx_u64(&x550, &x551, x549, x541, x538); uint64_t x552; fiat_p434_uint1 x553; - fiat_p434_addcarryx_u64(&x552, &x553, x551, x536, x539); + fiat_p434_addcarryx_u64(&x552, &x553, x551, x539, x536); uint64_t x554; fiat_p434_uint1 x555; - fiat_p434_addcarryx_u64(&x554, &x555, x553, x534, x537); + fiat_p434_addcarryx_u64(&x554, &x555, x553, x537, x534); uint64_t x556; fiat_p434_uint1 x557; - fiat_p434_addcarryx_u64(&x556, &x557, x555, x532, x535); + fiat_p434_addcarryx_u64(&x556, &x557, x555, x535, x532); uint64_t x558; fiat_p434_uint1 x559; - fiat_p434_addcarryx_u64(&x558, &x559, x557, 0x0, x533); + fiat_p434_addcarryx_u64(&x558, &x559, x557, x533, 0x0); uint64_t x560; fiat_p434_uint1 x561; - fiat_p434_addcarryx_u64(&x560, &x561, 0x0, x544, x516); + fiat_p434_addcarryx_u64(&x560, &x561, 0x0, x516, x544); uint64_t x562; fiat_p434_uint1 x563; - fiat_p434_addcarryx_u64(&x562, &x563, x561, x546, x518); + fiat_p434_addcarryx_u64(&x562, &x563, x561, x518, x546); uint64_t x564; fiat_p434_uint1 x565; - fiat_p434_addcarryx_u64(&x564, &x565, x563, x548, x520); + fiat_p434_addcarryx_u64(&x564, &x565, x563, x520, x548); uint64_t x566; fiat_p434_uint1 x567; - fiat_p434_addcarryx_u64(&x566, &x567, x565, x550, x522); + fiat_p434_addcarryx_u64(&x566, &x567, x565, x522, x550); uint64_t x568; fiat_p434_uint1 x569; - fiat_p434_addcarryx_u64(&x568, &x569, x567, x552, x524); + fiat_p434_addcarryx_u64(&x568, &x569, x567, x524, x552); uint64_t x570; fiat_p434_uint1 x571; - fiat_p434_addcarryx_u64(&x570, &x571, x569, x554, x526); + fiat_p434_addcarryx_u64(&x570, &x571, x569, x526, x554); uint64_t x572; fiat_p434_uint1 x573; - fiat_p434_addcarryx_u64(&x572, &x573, x571, x556, x528); + fiat_p434_addcarryx_u64(&x572, &x573, x571, x528, x556); uint64_t x574; fiat_p434_uint1 x575; - fiat_p434_addcarryx_u64(&x574, &x575, x573, x558, x530); + fiat_p434_addcarryx_u64(&x574, &x575, x573, x530, x558); uint64_t x576; uint64_t x577; fiat_p434_mulx_u64(&x576, &x577, x560, UINT64_C(0x2341f27177344)); @@ -1989,52 +1989,52 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_mulx_u64(&x588, &x589, x560, UINT64_C(0xffffffffffffffff)); uint64_t x590; fiat_p434_uint1 x591; - fiat_p434_addcarryx_u64(&x590, &x591, 0x0, x586, x589); + fiat_p434_addcarryx_u64(&x590, &x591, 0x0, x589, x586); uint64_t x592; fiat_p434_uint1 x593; - fiat_p434_addcarryx_u64(&x592, &x593, x591, x584, x587); + fiat_p434_addcarryx_u64(&x592, &x593, x591, x587, x584); uint64_t x594; fiat_p434_uint1 x595; - fiat_p434_addcarryx_u64(&x594, &x595, x593, x582, x585); + fiat_p434_addcarryx_u64(&x594, &x595, x593, x585, x582); uint64_t x596; fiat_p434_uint1 x597; - fiat_p434_addcarryx_u64(&x596, &x597, x595, x580, x583); + fiat_p434_addcarryx_u64(&x596, &x597, x595, x583, x580); uint64_t x598; fiat_p434_uint1 x599; - fiat_p434_addcarryx_u64(&x598, &x599, x597, x578, x581); + fiat_p434_addcarryx_u64(&x598, &x599, x597, x581, x578); uint64_t x600; fiat_p434_uint1 x601; - fiat_p434_addcarryx_u64(&x600, &x601, x599, x576, x579); + fiat_p434_addcarryx_u64(&x600, &x601, x599, x579, x576); uint64_t x602; fiat_p434_uint1 x603; - fiat_p434_addcarryx_u64(&x602, &x603, x601, 0x0, x577); + fiat_p434_addcarryx_u64(&x602, &x603, x601, x577, 0x0); uint64_t x604; fiat_p434_uint1 x605; - fiat_p434_addcarryx_u64(&x604, &x605, 0x0, x588, x560); + fiat_p434_addcarryx_u64(&x604, &x605, 0x0, x560, x588); uint64_t x606; fiat_p434_uint1 x607; - fiat_p434_addcarryx_u64(&x606, &x607, x605, x590, x562); + fiat_p434_addcarryx_u64(&x606, &x607, x605, x562, x590); uint64_t x608; fiat_p434_uint1 x609; - fiat_p434_addcarryx_u64(&x608, &x609, x607, x592, x564); + fiat_p434_addcarryx_u64(&x608, &x609, x607, x564, x592); uint64_t x610; fiat_p434_uint1 x611; - fiat_p434_addcarryx_u64(&x610, &x611, x609, x594, x566); + fiat_p434_addcarryx_u64(&x610, &x611, x609, x566, x594); uint64_t x612; fiat_p434_uint1 x613; - fiat_p434_addcarryx_u64(&x612, &x613, x611, x596, x568); + fiat_p434_addcarryx_u64(&x612, &x613, x611, x568, x596); uint64_t x614; fiat_p434_uint1 x615; - fiat_p434_addcarryx_u64(&x614, &x615, x613, x598, x570); + fiat_p434_addcarryx_u64(&x614, &x615, x613, x570, x598); uint64_t x616; fiat_p434_uint1 x617; - fiat_p434_addcarryx_u64(&x616, &x617, x615, x600, x572); + fiat_p434_addcarryx_u64(&x616, &x617, x615, x572, x600); uint64_t x618; fiat_p434_uint1 x619; - fiat_p434_addcarryx_u64(&x618, &x619, x617, x602, x574); + fiat_p434_addcarryx_u64(&x618, &x619, x617, x574, x602); uint64_t x620; fiat_p434_uint1 x621; - fiat_p434_addcarryx_u64(&x620, &x621, x619, 0x0, x575); + fiat_p434_addcarryx_u64(&x620, &x621, x619, x575, 0x0); uint64_t x622; fiat_p434_uint1 x623; fiat_p434_subborrowx_u64(&x622, &x623, 0x0, x606, UINT64_C(0xffffffffffffffff)); @@ -2100,25 +2100,25 @@ static void fiat_p434_square(uint64_t out1[7], const uint64_t arg1[7]) { static void fiat_p434_add(uint64_t out1[7], const uint64_t arg1[7], const uint64_t arg2[7]) { uint64_t x1; fiat_p434_uint1 x2; - fiat_p434_addcarryx_u64(&x1, &x2, 0x0, (arg2[0]), (arg1[0])); + fiat_p434_addcarryx_u64(&x1, &x2, 0x0, (arg1[0]), (arg2[0])); uint64_t x3; fiat_p434_uint1 x4; - fiat_p434_addcarryx_u64(&x3, &x4, x2, (arg2[1]), (arg1[1])); + fiat_p434_addcarryx_u64(&x3, &x4, x2, (arg1[1]), (arg2[1])); uint64_t x5; fiat_p434_uint1 x6; - fiat_p434_addcarryx_u64(&x5, &x6, x4, (arg2[2]), (arg1[2])); + fiat_p434_addcarryx_u64(&x5, &x6, x4, (arg1[2]), (arg2[2])); uint64_t x7; fiat_p434_uint1 x8; - fiat_p434_addcarryx_u64(&x7, &x8, x6, (arg2[3]), (arg1[3])); + fiat_p434_addcarryx_u64(&x7, &x8, x6, (arg1[3]), (arg2[3])); uint64_t x9; fiat_p434_uint1 x10; - fiat_p434_addcarryx_u64(&x9, &x10, x8, (arg2[4]), (arg1[4])); + fiat_p434_addcarryx_u64(&x9, &x10, x8, (arg1[4]), (arg2[4])); uint64_t x11; fiat_p434_uint1 x12; - fiat_p434_addcarryx_u64(&x11, &x12, x10, (arg2[5]), (arg1[5])); + fiat_p434_addcarryx_u64(&x11, &x12, x10, (arg1[5]), (arg2[5])); uint64_t x13; fiat_p434_uint1 x14; - fiat_p434_addcarryx_u64(&x13, &x14, x12, (arg2[6]), (arg1[6])); + fiat_p434_addcarryx_u64(&x13, &x14, x12, (arg1[6]), (arg2[6])); uint64_t x15; fiat_p434_uint1 x16; fiat_p434_subborrowx_u64(&x15, &x16, 0x0, x1, UINT64_C(0xffffffffffffffff)); @@ -2207,25 +2207,25 @@ static void fiat_p434_sub(uint64_t out1[7], const uint64_t arg1[7], const uint64 fiat_p434_cmovznz_u64(&x15, x14, 0x0, UINT64_C(0xffffffffffffffff)); uint64_t x16; fiat_p434_uint1 x17; - fiat_p434_addcarryx_u64(&x16, &x17, 0x0, (x15 & UINT64_C(0xffffffffffffffff)), x1); + fiat_p434_addcarryx_u64(&x16, &x17, 0x0, x1, (x15 & UINT64_C(0xffffffffffffffff))); uint64_t x18; fiat_p434_uint1 x19; - fiat_p434_addcarryx_u64(&x18, &x19, x17, (x15 & UINT64_C(0xffffffffffffffff)), x3); + fiat_p434_addcarryx_u64(&x18, &x19, x17, x3, (x15 & UINT64_C(0xffffffffffffffff))); uint64_t x20; fiat_p434_uint1 x21; - fiat_p434_addcarryx_u64(&x20, &x21, x19, (x15 & UINT64_C(0xffffffffffffffff)), x5); + fiat_p434_addcarryx_u64(&x20, &x21, x19, x5, (x15 & UINT64_C(0xffffffffffffffff))); uint64_t x22; fiat_p434_uint1 x23; - fiat_p434_addcarryx_u64(&x22, &x23, x21, (x15 & UINT64_C(0xfdc1767ae2ffffff)), x7); + fiat_p434_addcarryx_u64(&x22, &x23, x21, x7, (x15 & UINT64_C(0xfdc1767ae2ffffff))); uint64_t x24; fiat_p434_uint1 x25; - fiat_p434_addcarryx_u64(&x24, &x25, x23, (x15 & UINT64_C(0x7bc65c783158aea3)), x9); + fiat_p434_addcarryx_u64(&x24, &x25, x23, x9, (x15 & UINT64_C(0x7bc65c783158aea3))); uint64_t x26; fiat_p434_uint1 x27; - fiat_p434_addcarryx_u64(&x26, &x27, x25, (x15 & UINT64_C(0x6cfc5fd681c52056)), x11); + fiat_p434_addcarryx_u64(&x26, &x27, x25, x11, (x15 & UINT64_C(0x6cfc5fd681c52056))); uint64_t x28; fiat_p434_uint1 x29; - fiat_p434_addcarryx_u64(&x28, &x29, x27, (x15 & UINT64_C(0x2341f27177344)), x13); + fiat_p434_addcarryx_u64(&x28, &x29, x27, x13, (x15 & UINT64_C(0x2341f27177344))); out1[0] = x16; out1[1] = x18; out1[2] = x20; @@ -2274,25 +2274,25 @@ static void fiat_p434_opp(uint64_t out1[7], const uint64_t arg1[7]) { fiat_p434_cmovznz_u64(&x15, x14, 0x0, UINT64_C(0xffffffffffffffff)); uint64_t x16; fiat_p434_uint1 x17; - fiat_p434_addcarryx_u64(&x16, &x17, 0x0, (x15 & UINT64_C(0xffffffffffffffff)), x1); + fiat_p434_addcarryx_u64(&x16, &x17, 0x0, x1, (x15 & UINT64_C(0xffffffffffffffff))); uint64_t x18; fiat_p434_uint1 x19; - fiat_p434_addcarryx_u64(&x18, &x19, x17, (x15 & UINT64_C(0xffffffffffffffff)), x3); + fiat_p434_addcarryx_u64(&x18, &x19, x17, x3, (x15 & UINT64_C(0xffffffffffffffff))); uint64_t x20; fiat_p434_uint1 x21; - fiat_p434_addcarryx_u64(&x20, &x21, x19, (x15 & UINT64_C(0xffffffffffffffff)), x5); + fiat_p434_addcarryx_u64(&x20, &x21, x19, x5, (x15 & UINT64_C(0xffffffffffffffff))); uint64_t x22; fiat_p434_uint1 x23; - fiat_p434_addcarryx_u64(&x22, &x23, x21, (x15 & UINT64_C(0xfdc1767ae2ffffff)), x7); + fiat_p434_addcarryx_u64(&x22, &x23, x21, x7, (x15 & UINT64_C(0xfdc1767ae2ffffff))); uint64_t x24; fiat_p434_uint1 x25; - fiat_p434_addcarryx_u64(&x24, &x25, x23, (x15 & UINT64_C(0x7bc65c783158aea3)), x9); + fiat_p434_addcarryx_u64(&x24, &x25, x23, x9, (x15 & UINT64_C(0x7bc65c783158aea3))); uint64_t x26; fiat_p434_uint1 x27; - fiat_p434_addcarryx_u64(&x26, &x27, x25, (x15 & UINT64_C(0x6cfc5fd681c52056)), x11); + fiat_p434_addcarryx_u64(&x26, &x27, x25, x11, (x15 & UINT64_C(0x6cfc5fd681c52056))); uint64_t x28; fiat_p434_uint1 x29; - fiat_p434_addcarryx_u64(&x28, &x29, x27, (x15 & UINT64_C(0x2341f27177344)), x13); + fiat_p434_addcarryx_u64(&x28, &x29, x27, x13, (x15 & UINT64_C(0x2341f27177344))); out1[0] = x16; out1[1] = x18; out1[2] = x20; @@ -2340,61 +2340,61 @@ static void fiat_p434_from_montgomery(uint64_t out1[7], const uint64_t arg1[7]) fiat_p434_mulx_u64(&x14, &x15, x1, UINT64_C(0xffffffffffffffff)); uint64_t x16; fiat_p434_uint1 x17; - fiat_p434_addcarryx_u64(&x16, &x17, 0x0, x12, x15); + fiat_p434_addcarryx_u64(&x16, &x17, 0x0, x15, x12); uint64_t x18; fiat_p434_uint1 x19; - fiat_p434_addcarryx_u64(&x18, &x19, x17, x10, x13); + fiat_p434_addcarryx_u64(&x18, &x19, x17, x13, x10); uint64_t x20; fiat_p434_uint1 x21; - fiat_p434_addcarryx_u64(&x20, &x21, x19, x8, x11); + fiat_p434_addcarryx_u64(&x20, &x21, x19, x11, x8); uint64_t x22; fiat_p434_uint1 x23; - fiat_p434_addcarryx_u64(&x22, &x23, x21, x6, x9); + fiat_p434_addcarryx_u64(&x22, &x23, x21, x9, x6); uint64_t x24; fiat_p434_uint1 x25; - fiat_p434_addcarryx_u64(&x24, &x25, x23, x4, x7); + fiat_p434_addcarryx_u64(&x24, &x25, x23, x7, x4); uint64_t x26; fiat_p434_uint1 x27; - fiat_p434_addcarryx_u64(&x26, &x27, x25, x2, x5); + fiat_p434_addcarryx_u64(&x26, &x27, x25, x5, x2); uint64_t x28; fiat_p434_uint1 x29; - fiat_p434_addcarryx_u64(&x28, &x29, 0x0, x14, x1); + fiat_p434_addcarryx_u64(&x28, &x29, 0x0, x1, x14); uint64_t x30; fiat_p434_uint1 x31; - fiat_p434_addcarryx_u64(&x30, &x31, x29, x16, 0x0); + fiat_p434_addcarryx_u64(&x30, &x31, x29, 0x0, x16); uint64_t x32; fiat_p434_uint1 x33; - fiat_p434_addcarryx_u64(&x32, &x33, x31, x18, 0x0); + fiat_p434_addcarryx_u64(&x32, &x33, x31, 0x0, x18); uint64_t x34; fiat_p434_uint1 x35; - fiat_p434_addcarryx_u64(&x34, &x35, x33, x20, 0x0); + fiat_p434_addcarryx_u64(&x34, &x35, x33, 0x0, x20); uint64_t x36; fiat_p434_uint1 x37; - fiat_p434_addcarryx_u64(&x36, &x37, x35, x22, 0x0); + fiat_p434_addcarryx_u64(&x36, &x37, x35, 0x0, x22); uint64_t x38; fiat_p434_uint1 x39; - fiat_p434_addcarryx_u64(&x38, &x39, x37, x24, 0x0); + fiat_p434_addcarryx_u64(&x38, &x39, x37, 0x0, x24); uint64_t x40; fiat_p434_uint1 x41; - fiat_p434_addcarryx_u64(&x40, &x41, x39, x26, 0x0); + fiat_p434_addcarryx_u64(&x40, &x41, x39, 0x0, x26); uint64_t x42; fiat_p434_uint1 x43; - fiat_p434_addcarryx_u64(&x42, &x43, 0x0, (arg1[1]), x30); + fiat_p434_addcarryx_u64(&x42, &x43, 0x0, x30, (arg1[1])); uint64_t x44; fiat_p434_uint1 x45; - fiat_p434_addcarryx_u64(&x44, &x45, x43, 0x0, x32); + fiat_p434_addcarryx_u64(&x44, &x45, x43, x32, 0x0); uint64_t x46; fiat_p434_uint1 x47; - fiat_p434_addcarryx_u64(&x46, &x47, x45, 0x0, x34); + fiat_p434_addcarryx_u64(&x46, &x47, x45, x34, 0x0); uint64_t x48; fiat_p434_uint1 x49; - fiat_p434_addcarryx_u64(&x48, &x49, x47, 0x0, x36); + fiat_p434_addcarryx_u64(&x48, &x49, x47, x36, 0x0); uint64_t x50; fiat_p434_uint1 x51; - fiat_p434_addcarryx_u64(&x50, &x51, x49, 0x0, x38); + fiat_p434_addcarryx_u64(&x50, &x51, x49, x38, 0x0); uint64_t x52; fiat_p434_uint1 x53; - fiat_p434_addcarryx_u64(&x52, &x53, x51, 0x0, x40); + fiat_p434_addcarryx_u64(&x52, &x53, x51, x40, 0x0); uint64_t x54; uint64_t x55; fiat_p434_mulx_u64(&x54, &x55, x42, UINT64_C(0x2341f27177344)); @@ -2418,70 +2418,70 @@ static void fiat_p434_from_montgomery(uint64_t out1[7], const uint64_t arg1[7]) fiat_p434_mulx_u64(&x66, &x67, x42, UINT64_C(0xffffffffffffffff)); uint64_t x68; fiat_p434_uint1 x69; - fiat_p434_addcarryx_u64(&x68, &x69, 0x0, x64, x67); + fiat_p434_addcarryx_u64(&x68, &x69, 0x0, x67, x64); uint64_t x70; fiat_p434_uint1 x71; - fiat_p434_addcarryx_u64(&x70, &x71, x69, x62, x65); + fiat_p434_addcarryx_u64(&x70, &x71, x69, x65, x62); uint64_t x72; fiat_p434_uint1 x73; - fiat_p434_addcarryx_u64(&x72, &x73, x71, x60, x63); + fiat_p434_addcarryx_u64(&x72, &x73, x71, x63, x60); uint64_t x74; fiat_p434_uint1 x75; - fiat_p434_addcarryx_u64(&x74, &x75, x73, x58, x61); + fiat_p434_addcarryx_u64(&x74, &x75, x73, x61, x58); uint64_t x76; fiat_p434_uint1 x77; - fiat_p434_addcarryx_u64(&x76, &x77, x75, x56, x59); + fiat_p434_addcarryx_u64(&x76, &x77, x75, x59, x56); uint64_t x78; fiat_p434_uint1 x79; - fiat_p434_addcarryx_u64(&x78, &x79, x77, x54, x57); + fiat_p434_addcarryx_u64(&x78, &x79, x77, x57, x54); uint64_t x80; fiat_p434_uint1 x81; - fiat_p434_addcarryx_u64(&x80, &x81, 0x0, x66, x42); + fiat_p434_addcarryx_u64(&x80, &x81, 0x0, x42, x66); uint64_t x82; fiat_p434_uint1 x83; - fiat_p434_addcarryx_u64(&x82, &x83, x81, x68, x44); + fiat_p434_addcarryx_u64(&x82, &x83, x81, x44, x68); uint64_t x84; fiat_p434_uint1 x85; - fiat_p434_addcarryx_u64(&x84, &x85, x83, x70, x46); + fiat_p434_addcarryx_u64(&x84, &x85, x83, x46, x70); uint64_t x86; fiat_p434_uint1 x87; - fiat_p434_addcarryx_u64(&x86, &x87, x85, x72, x48); + fiat_p434_addcarryx_u64(&x86, &x87, x85, x48, x72); uint64_t x88; fiat_p434_uint1 x89; - fiat_p434_addcarryx_u64(&x88, &x89, x87, x74, x50); + fiat_p434_addcarryx_u64(&x88, &x89, x87, x50, x74); uint64_t x90; fiat_p434_uint1 x91; - fiat_p434_addcarryx_u64(&x90, &x91, x89, x76, x52); + fiat_p434_addcarryx_u64(&x90, &x91, x89, x52, x76); uint64_t x92; fiat_p434_uint1 x93; - fiat_p434_addcarryx_u64(&x92, &x93, x27, 0x0, x3); + fiat_p434_addcarryx_u64(&x92, &x93, x27, x3, 0x0); uint64_t x94; fiat_p434_uint1 x95; - fiat_p434_addcarryx_u64(&x94, &x95, x41, x92, 0x0); + fiat_p434_addcarryx_u64(&x94, &x95, x41, 0x0, x92); uint64_t x96; fiat_p434_uint1 x97; - fiat_p434_addcarryx_u64(&x96, &x97, x53, 0x0, x94); + fiat_p434_addcarryx_u64(&x96, &x97, x53, x94, 0x0); uint64_t x98; fiat_p434_uint1 x99; - fiat_p434_addcarryx_u64(&x98, &x99, x91, x78, x96); + fiat_p434_addcarryx_u64(&x98, &x99, x91, x96, x78); uint64_t x100; fiat_p434_uint1 x101; - fiat_p434_addcarryx_u64(&x100, &x101, 0x0, (arg1[2]), x82); + fiat_p434_addcarryx_u64(&x100, &x101, 0x0, x82, (arg1[2])); uint64_t x102; fiat_p434_uint1 x103; - fiat_p434_addcarryx_u64(&x102, &x103, x101, 0x0, x84); + fiat_p434_addcarryx_u64(&x102, &x103, x101, x84, 0x0); uint64_t x104; fiat_p434_uint1 x105; - fiat_p434_addcarryx_u64(&x104, &x105, x103, 0x0, x86); + fiat_p434_addcarryx_u64(&x104, &x105, x103, x86, 0x0); uint64_t x106; fiat_p434_uint1 x107; - fiat_p434_addcarryx_u64(&x106, &x107, x105, 0x0, x88); + fiat_p434_addcarryx_u64(&x106, &x107, x105, x88, 0x0); uint64_t x108; fiat_p434_uint1 x109; - fiat_p434_addcarryx_u64(&x108, &x109, x107, 0x0, x90); + fiat_p434_addcarryx_u64(&x108, &x109, x107, x90, 0x0); uint64_t x110; fiat_p434_uint1 x111; - fiat_p434_addcarryx_u64(&x110, &x111, x109, 0x0, x98); + fiat_p434_addcarryx_u64(&x110, &x111, x109, x98, 0x0); uint64_t x112; uint64_t x113; fiat_p434_mulx_u64(&x112, &x113, x100, UINT64_C(0x2341f27177344)); @@ -2505,70 +2505,70 @@ static void fiat_p434_from_montgomery(uint64_t out1[7], const uint64_t arg1[7]) fiat_p434_mulx_u64(&x124, &x125, x100, UINT64_C(0xffffffffffffffff)); uint64_t x126; fiat_p434_uint1 x127; - fiat_p434_addcarryx_u64(&x126, &x127, 0x0, x122, x125); + fiat_p434_addcarryx_u64(&x126, &x127, 0x0, x125, x122); uint64_t x128; fiat_p434_uint1 x129; - fiat_p434_addcarryx_u64(&x128, &x129, x127, x120, x123); + fiat_p434_addcarryx_u64(&x128, &x129, x127, x123, x120); uint64_t x130; fiat_p434_uint1 x131; - fiat_p434_addcarryx_u64(&x130, &x131, x129, x118, x121); + fiat_p434_addcarryx_u64(&x130, &x131, x129, x121, x118); uint64_t x132; fiat_p434_uint1 x133; - fiat_p434_addcarryx_u64(&x132, &x133, x131, x116, x119); + fiat_p434_addcarryx_u64(&x132, &x133, x131, x119, x116); uint64_t x134; fiat_p434_uint1 x135; - fiat_p434_addcarryx_u64(&x134, &x135, x133, x114, x117); + fiat_p434_addcarryx_u64(&x134, &x135, x133, x117, x114); uint64_t x136; fiat_p434_uint1 x137; - fiat_p434_addcarryx_u64(&x136, &x137, x135, x112, x115); + fiat_p434_addcarryx_u64(&x136, &x137, x135, x115, x112); uint64_t x138; fiat_p434_uint1 x139; - fiat_p434_addcarryx_u64(&x138, &x139, 0x0, x124, x100); + fiat_p434_addcarryx_u64(&x138, &x139, 0x0, x100, x124); uint64_t x140; fiat_p434_uint1 x141; - fiat_p434_addcarryx_u64(&x140, &x141, x139, x126, x102); + fiat_p434_addcarryx_u64(&x140, &x141, x139, x102, x126); uint64_t x142; fiat_p434_uint1 x143; - fiat_p434_addcarryx_u64(&x142, &x143, x141, x128, x104); + fiat_p434_addcarryx_u64(&x142, &x143, x141, x104, x128); uint64_t x144; fiat_p434_uint1 x145; - fiat_p434_addcarryx_u64(&x144, &x145, x143, x130, x106); + fiat_p434_addcarryx_u64(&x144, &x145, x143, x106, x130); uint64_t x146; fiat_p434_uint1 x147; - fiat_p434_addcarryx_u64(&x146, &x147, x145, x132, x108); + fiat_p434_addcarryx_u64(&x146, &x147, x145, x108, x132); uint64_t x148; fiat_p434_uint1 x149; - fiat_p434_addcarryx_u64(&x148, &x149, x147, x134, x110); + fiat_p434_addcarryx_u64(&x148, &x149, x147, x110, x134); uint64_t x150; fiat_p434_uint1 x151; - fiat_p434_addcarryx_u64(&x150, &x151, x79, 0x0, x55); + fiat_p434_addcarryx_u64(&x150, &x151, x79, x55, 0x0); uint64_t x152; fiat_p434_uint1 x153; - fiat_p434_addcarryx_u64(&x152, &x153, x99, x150, 0x0); + fiat_p434_addcarryx_u64(&x152, &x153, x99, 0x0, x150); uint64_t x154; fiat_p434_uint1 x155; - fiat_p434_addcarryx_u64(&x154, &x155, x111, 0x0, x152); + fiat_p434_addcarryx_u64(&x154, &x155, x111, x152, 0x0); uint64_t x156; fiat_p434_uint1 x157; - fiat_p434_addcarryx_u64(&x156, &x157, x149, x136, x154); + fiat_p434_addcarryx_u64(&x156, &x157, x149, x154, x136); uint64_t x158; fiat_p434_uint1 x159; - fiat_p434_addcarryx_u64(&x158, &x159, 0x0, (arg1[3]), x140); + fiat_p434_addcarryx_u64(&x158, &x159, 0x0, x140, (arg1[3])); uint64_t x160; fiat_p434_uint1 x161; - fiat_p434_addcarryx_u64(&x160, &x161, x159, 0x0, x142); + fiat_p434_addcarryx_u64(&x160, &x161, x159, x142, 0x0); uint64_t x162; fiat_p434_uint1 x163; - fiat_p434_addcarryx_u64(&x162, &x163, x161, 0x0, x144); + fiat_p434_addcarryx_u64(&x162, &x163, x161, x144, 0x0); uint64_t x164; fiat_p434_uint1 x165; - fiat_p434_addcarryx_u64(&x164, &x165, x163, 0x0, x146); + fiat_p434_addcarryx_u64(&x164, &x165, x163, x146, 0x0); uint64_t x166; fiat_p434_uint1 x167; - fiat_p434_addcarryx_u64(&x166, &x167, x165, 0x0, x148); + fiat_p434_addcarryx_u64(&x166, &x167, x165, x148, 0x0); uint64_t x168; fiat_p434_uint1 x169; - fiat_p434_addcarryx_u64(&x168, &x169, x167, 0x0, x156); + fiat_p434_addcarryx_u64(&x168, &x169, x167, x156, 0x0); uint64_t x170; uint64_t x171; fiat_p434_mulx_u64(&x170, &x171, x158, UINT64_C(0x2341f27177344)); @@ -2592,70 +2592,70 @@ static void fiat_p434_from_montgomery(uint64_t out1[7], const uint64_t arg1[7]) fiat_p434_mulx_u64(&x182, &x183, x158, UINT64_C(0xffffffffffffffff)); uint64_t x184; fiat_p434_uint1 x185; - fiat_p434_addcarryx_u64(&x184, &x185, 0x0, x180, x183); + fiat_p434_addcarryx_u64(&x184, &x185, 0x0, x183, x180); uint64_t x186; fiat_p434_uint1 x187; - fiat_p434_addcarryx_u64(&x186, &x187, x185, x178, x181); + fiat_p434_addcarryx_u64(&x186, &x187, x185, x181, x178); uint64_t x188; fiat_p434_uint1 x189; - fiat_p434_addcarryx_u64(&x188, &x189, x187, x176, x179); + fiat_p434_addcarryx_u64(&x188, &x189, x187, x179, x176); uint64_t x190; fiat_p434_uint1 x191; - fiat_p434_addcarryx_u64(&x190, &x191, x189, x174, x177); + fiat_p434_addcarryx_u64(&x190, &x191, x189, x177, x174); uint64_t x192; fiat_p434_uint1 x193; - fiat_p434_addcarryx_u64(&x192, &x193, x191, x172, x175); + fiat_p434_addcarryx_u64(&x192, &x193, x191, x175, x172); uint64_t x194; fiat_p434_uint1 x195; - fiat_p434_addcarryx_u64(&x194, &x195, x193, x170, x173); + fiat_p434_addcarryx_u64(&x194, &x195, x193, x173, x170); uint64_t x196; fiat_p434_uint1 x197; - fiat_p434_addcarryx_u64(&x196, &x197, 0x0, x182, x158); + fiat_p434_addcarryx_u64(&x196, &x197, 0x0, x158, x182); uint64_t x198; fiat_p434_uint1 x199; - fiat_p434_addcarryx_u64(&x198, &x199, x197, x184, x160); + fiat_p434_addcarryx_u64(&x198, &x199, x197, x160, x184); uint64_t x200; fiat_p434_uint1 x201; - fiat_p434_addcarryx_u64(&x200, &x201, x199, x186, x162); + fiat_p434_addcarryx_u64(&x200, &x201, x199, x162, x186); uint64_t x202; fiat_p434_uint1 x203; - fiat_p434_addcarryx_u64(&x202, &x203, x201, x188, x164); + fiat_p434_addcarryx_u64(&x202, &x203, x201, x164, x188); uint64_t x204; fiat_p434_uint1 x205; - fiat_p434_addcarryx_u64(&x204, &x205, x203, x190, x166); + fiat_p434_addcarryx_u64(&x204, &x205, x203, x166, x190); uint64_t x206; fiat_p434_uint1 x207; - fiat_p434_addcarryx_u64(&x206, &x207, x205, x192, x168); + fiat_p434_addcarryx_u64(&x206, &x207, x205, x168, x192); uint64_t x208; fiat_p434_uint1 x209; - fiat_p434_addcarryx_u64(&x208, &x209, x137, 0x0, x113); + fiat_p434_addcarryx_u64(&x208, &x209, x137, x113, 0x0); uint64_t x210; fiat_p434_uint1 x211; - fiat_p434_addcarryx_u64(&x210, &x211, x157, x208, 0x0); + fiat_p434_addcarryx_u64(&x210, &x211, x157, 0x0, x208); uint64_t x212; fiat_p434_uint1 x213; - fiat_p434_addcarryx_u64(&x212, &x213, x169, 0x0, x210); + fiat_p434_addcarryx_u64(&x212, &x213, x169, x210, 0x0); uint64_t x214; fiat_p434_uint1 x215; - fiat_p434_addcarryx_u64(&x214, &x215, x207, x194, x212); + fiat_p434_addcarryx_u64(&x214, &x215, x207, x212, x194); uint64_t x216; fiat_p434_uint1 x217; - fiat_p434_addcarryx_u64(&x216, &x217, 0x0, (arg1[4]), x198); + fiat_p434_addcarryx_u64(&x216, &x217, 0x0, x198, (arg1[4])); uint64_t x218; fiat_p434_uint1 x219; - fiat_p434_addcarryx_u64(&x218, &x219, x217, 0x0, x200); + fiat_p434_addcarryx_u64(&x218, &x219, x217, x200, 0x0); uint64_t x220; fiat_p434_uint1 x221; - fiat_p434_addcarryx_u64(&x220, &x221, x219, 0x0, x202); + fiat_p434_addcarryx_u64(&x220, &x221, x219, x202, 0x0); uint64_t x222; fiat_p434_uint1 x223; - fiat_p434_addcarryx_u64(&x222, &x223, x221, 0x0, x204); + fiat_p434_addcarryx_u64(&x222, &x223, x221, x204, 0x0); uint64_t x224; fiat_p434_uint1 x225; - fiat_p434_addcarryx_u64(&x224, &x225, x223, 0x0, x206); + fiat_p434_addcarryx_u64(&x224, &x225, x223, x206, 0x0); uint64_t x226; fiat_p434_uint1 x227; - fiat_p434_addcarryx_u64(&x226, &x227, x225, 0x0, x214); + fiat_p434_addcarryx_u64(&x226, &x227, x225, x214, 0x0); uint64_t x228; uint64_t x229; fiat_p434_mulx_u64(&x228, &x229, x216, UINT64_C(0x2341f27177344)); @@ -2679,70 +2679,70 @@ static void fiat_p434_from_montgomery(uint64_t out1[7], const uint64_t arg1[7]) fiat_p434_mulx_u64(&x240, &x241, x216, UINT64_C(0xffffffffffffffff)); uint64_t x242; fiat_p434_uint1 x243; - fiat_p434_addcarryx_u64(&x242, &x243, 0x0, x238, x241); + fiat_p434_addcarryx_u64(&x242, &x243, 0x0, x241, x238); uint64_t x244; fiat_p434_uint1 x245; - fiat_p434_addcarryx_u64(&x244, &x245, x243, x236, x239); + fiat_p434_addcarryx_u64(&x244, &x245, x243, x239, x236); uint64_t x246; fiat_p434_uint1 x247; - fiat_p434_addcarryx_u64(&x246, &x247, x245, x234, x237); + fiat_p434_addcarryx_u64(&x246, &x247, x245, x237, x234); uint64_t x248; fiat_p434_uint1 x249; - fiat_p434_addcarryx_u64(&x248, &x249, x247, x232, x235); + fiat_p434_addcarryx_u64(&x248, &x249, x247, x235, x232); uint64_t x250; fiat_p434_uint1 x251; - fiat_p434_addcarryx_u64(&x250, &x251, x249, x230, x233); + fiat_p434_addcarryx_u64(&x250, &x251, x249, x233, x230); uint64_t x252; fiat_p434_uint1 x253; - fiat_p434_addcarryx_u64(&x252, &x253, x251, x228, x231); + fiat_p434_addcarryx_u64(&x252, &x253, x251, x231, x228); uint64_t x254; fiat_p434_uint1 x255; - fiat_p434_addcarryx_u64(&x254, &x255, 0x0, x240, x216); + fiat_p434_addcarryx_u64(&x254, &x255, 0x0, x216, x240); uint64_t x256; fiat_p434_uint1 x257; - fiat_p434_addcarryx_u64(&x256, &x257, x255, x242, x218); + fiat_p434_addcarryx_u64(&x256, &x257, x255, x218, x242); uint64_t x258; fiat_p434_uint1 x259; - fiat_p434_addcarryx_u64(&x258, &x259, x257, x244, x220); + fiat_p434_addcarryx_u64(&x258, &x259, x257, x220, x244); uint64_t x260; fiat_p434_uint1 x261; - fiat_p434_addcarryx_u64(&x260, &x261, x259, x246, x222); + fiat_p434_addcarryx_u64(&x260, &x261, x259, x222, x246); uint64_t x262; fiat_p434_uint1 x263; - fiat_p434_addcarryx_u64(&x262, &x263, x261, x248, x224); + fiat_p434_addcarryx_u64(&x262, &x263, x261, x224, x248); uint64_t x264; fiat_p434_uint1 x265; - fiat_p434_addcarryx_u64(&x264, &x265, x263, x250, x226); + fiat_p434_addcarryx_u64(&x264, &x265, x263, x226, x250); uint64_t x266; fiat_p434_uint1 x267; - fiat_p434_addcarryx_u64(&x266, &x267, x195, 0x0, x171); + fiat_p434_addcarryx_u64(&x266, &x267, x195, x171, 0x0); uint64_t x268; fiat_p434_uint1 x269; - fiat_p434_addcarryx_u64(&x268, &x269, x215, x266, 0x0); + fiat_p434_addcarryx_u64(&x268, &x269, x215, 0x0, x266); uint64_t x270; fiat_p434_uint1 x271; - fiat_p434_addcarryx_u64(&x270, &x271, x227, 0x0, x268); + fiat_p434_addcarryx_u64(&x270, &x271, x227, x268, 0x0); uint64_t x272; fiat_p434_uint1 x273; - fiat_p434_addcarryx_u64(&x272, &x273, x265, x252, x270); + fiat_p434_addcarryx_u64(&x272, &x273, x265, x270, x252); uint64_t x274; fiat_p434_uint1 x275; - fiat_p434_addcarryx_u64(&x274, &x275, 0x0, (arg1[5]), x256); + fiat_p434_addcarryx_u64(&x274, &x275, 0x0, x256, (arg1[5])); uint64_t x276; fiat_p434_uint1 x277; - fiat_p434_addcarryx_u64(&x276, &x277, x275, 0x0, x258); + fiat_p434_addcarryx_u64(&x276, &x277, x275, x258, 0x0); uint64_t x278; fiat_p434_uint1 x279; - fiat_p434_addcarryx_u64(&x278, &x279, x277, 0x0, x260); + fiat_p434_addcarryx_u64(&x278, &x279, x277, x260, 0x0); uint64_t x280; fiat_p434_uint1 x281; - fiat_p434_addcarryx_u64(&x280, &x281, x279, 0x0, x262); + fiat_p434_addcarryx_u64(&x280, &x281, x279, x262, 0x0); uint64_t x282; fiat_p434_uint1 x283; - fiat_p434_addcarryx_u64(&x282, &x283, x281, 0x0, x264); + fiat_p434_addcarryx_u64(&x282, &x283, x281, x264, 0x0); uint64_t x284; fiat_p434_uint1 x285; - fiat_p434_addcarryx_u64(&x284, &x285, x283, 0x0, x272); + fiat_p434_addcarryx_u64(&x284, &x285, x283, x272, 0x0); uint64_t x286; uint64_t x287; fiat_p434_mulx_u64(&x286, &x287, x274, UINT64_C(0x2341f27177344)); @@ -2766,70 +2766,70 @@ static void fiat_p434_from_montgomery(uint64_t out1[7], const uint64_t arg1[7]) fiat_p434_mulx_u64(&x298, &x299, x274, UINT64_C(0xffffffffffffffff)); uint64_t x300; fiat_p434_uint1 x301; - fiat_p434_addcarryx_u64(&x300, &x301, 0x0, x296, x299); + fiat_p434_addcarryx_u64(&x300, &x301, 0x0, x299, x296); uint64_t x302; fiat_p434_uint1 x303; - fiat_p434_addcarryx_u64(&x302, &x303, x301, x294, x297); + fiat_p434_addcarryx_u64(&x302, &x303, x301, x297, x294); uint64_t x304; fiat_p434_uint1 x305; - fiat_p434_addcarryx_u64(&x304, &x305, x303, x292, x295); + fiat_p434_addcarryx_u64(&x304, &x305, x303, x295, x292); uint64_t x306; fiat_p434_uint1 x307; - fiat_p434_addcarryx_u64(&x306, &x307, x305, x290, x293); + fiat_p434_addcarryx_u64(&x306, &x307, x305, x293, x290); uint64_t x308; fiat_p434_uint1 x309; - fiat_p434_addcarryx_u64(&x308, &x309, x307, x288, x291); + fiat_p434_addcarryx_u64(&x308, &x309, x307, x291, x288); uint64_t x310; fiat_p434_uint1 x311; - fiat_p434_addcarryx_u64(&x310, &x311, x309, x286, x289); + fiat_p434_addcarryx_u64(&x310, &x311, x309, x289, x286); uint64_t x312; fiat_p434_uint1 x313; - fiat_p434_addcarryx_u64(&x312, &x313, 0x0, x298, x274); + fiat_p434_addcarryx_u64(&x312, &x313, 0x0, x274, x298); uint64_t x314; fiat_p434_uint1 x315; - fiat_p434_addcarryx_u64(&x314, &x315, x313, x300, x276); + fiat_p434_addcarryx_u64(&x314, &x315, x313, x276, x300); uint64_t x316; fiat_p434_uint1 x317; - fiat_p434_addcarryx_u64(&x316, &x317, x315, x302, x278); + fiat_p434_addcarryx_u64(&x316, &x317, x315, x278, x302); uint64_t x318; fiat_p434_uint1 x319; - fiat_p434_addcarryx_u64(&x318, &x319, x317, x304, x280); + fiat_p434_addcarryx_u64(&x318, &x319, x317, x280, x304); uint64_t x320; fiat_p434_uint1 x321; - fiat_p434_addcarryx_u64(&x320, &x321, x319, x306, x282); + fiat_p434_addcarryx_u64(&x320, &x321, x319, x282, x306); uint64_t x322; fiat_p434_uint1 x323; - fiat_p434_addcarryx_u64(&x322, &x323, x321, x308, x284); + fiat_p434_addcarryx_u64(&x322, &x323, x321, x284, x308); uint64_t x324; fiat_p434_uint1 x325; - fiat_p434_addcarryx_u64(&x324, &x325, x253, 0x0, x229); + fiat_p434_addcarryx_u64(&x324, &x325, x253, x229, 0x0); uint64_t x326; fiat_p434_uint1 x327; - fiat_p434_addcarryx_u64(&x326, &x327, x273, x324, 0x0); + fiat_p434_addcarryx_u64(&x326, &x327, x273, 0x0, x324); uint64_t x328; fiat_p434_uint1 x329; - fiat_p434_addcarryx_u64(&x328, &x329, x285, 0x0, x326); + fiat_p434_addcarryx_u64(&x328, &x329, x285, x326, 0x0); uint64_t x330; fiat_p434_uint1 x331; - fiat_p434_addcarryx_u64(&x330, &x331, x323, x310, x328); + fiat_p434_addcarryx_u64(&x330, &x331, x323, x328, x310); uint64_t x332; fiat_p434_uint1 x333; - fiat_p434_addcarryx_u64(&x332, &x333, 0x0, (arg1[6]), x314); + fiat_p434_addcarryx_u64(&x332, &x333, 0x0, x314, (arg1[6])); uint64_t x334; fiat_p434_uint1 x335; - fiat_p434_addcarryx_u64(&x334, &x335, x333, 0x0, x316); + fiat_p434_addcarryx_u64(&x334, &x335, x333, x316, 0x0); uint64_t x336; fiat_p434_uint1 x337; - fiat_p434_addcarryx_u64(&x336, &x337, x335, 0x0, x318); + fiat_p434_addcarryx_u64(&x336, &x337, x335, x318, 0x0); uint64_t x338; fiat_p434_uint1 x339; - fiat_p434_addcarryx_u64(&x338, &x339, x337, 0x0, x320); + fiat_p434_addcarryx_u64(&x338, &x339, x337, x320, 0x0); uint64_t x340; fiat_p434_uint1 x341; - fiat_p434_addcarryx_u64(&x340, &x341, x339, 0x0, x322); + fiat_p434_addcarryx_u64(&x340, &x341, x339, x322, 0x0); uint64_t x342; fiat_p434_uint1 x343; - fiat_p434_addcarryx_u64(&x342, &x343, x341, 0x0, x330); + fiat_p434_addcarryx_u64(&x342, &x343, x341, x330, 0x0); uint64_t x344; uint64_t x345; fiat_p434_mulx_u64(&x344, &x345, x332, UINT64_C(0x2341f27177344)); @@ -2853,58 +2853,58 @@ static void fiat_p434_from_montgomery(uint64_t out1[7], const uint64_t arg1[7]) fiat_p434_mulx_u64(&x356, &x357, x332, UINT64_C(0xffffffffffffffff)); uint64_t x358; fiat_p434_uint1 x359; - fiat_p434_addcarryx_u64(&x358, &x359, 0x0, x354, x357); + fiat_p434_addcarryx_u64(&x358, &x359, 0x0, x357, x354); uint64_t x360; fiat_p434_uint1 x361; - fiat_p434_addcarryx_u64(&x360, &x361, x359, x352, x355); + fiat_p434_addcarryx_u64(&x360, &x361, x359, x355, x352); uint64_t x362; fiat_p434_uint1 x363; - fiat_p434_addcarryx_u64(&x362, &x363, x361, x350, x353); + fiat_p434_addcarryx_u64(&x362, &x363, x361, x353, x350); uint64_t x364; fiat_p434_uint1 x365; - fiat_p434_addcarryx_u64(&x364, &x365, x363, x348, x351); + fiat_p434_addcarryx_u64(&x364, &x365, x363, x351, x348); uint64_t x366; fiat_p434_uint1 x367; - fiat_p434_addcarryx_u64(&x366, &x367, x365, x346, x349); + fiat_p434_addcarryx_u64(&x366, &x367, x365, x349, x346); uint64_t x368; fiat_p434_uint1 x369; - fiat_p434_addcarryx_u64(&x368, &x369, x367, x344, x347); + fiat_p434_addcarryx_u64(&x368, &x369, x367, x347, x344); uint64_t x370; fiat_p434_uint1 x371; - fiat_p434_addcarryx_u64(&x370, &x371, 0x0, x356, x332); + fiat_p434_addcarryx_u64(&x370, &x371, 0x0, x332, x356); uint64_t x372; fiat_p434_uint1 x373; - fiat_p434_addcarryx_u64(&x372, &x373, x371, x358, x334); + fiat_p434_addcarryx_u64(&x372, &x373, x371, x334, x358); uint64_t x374; fiat_p434_uint1 x375; - fiat_p434_addcarryx_u64(&x374, &x375, x373, x360, x336); + fiat_p434_addcarryx_u64(&x374, &x375, x373, x336, x360); uint64_t x376; fiat_p434_uint1 x377; - fiat_p434_addcarryx_u64(&x376, &x377, x375, x362, x338); + fiat_p434_addcarryx_u64(&x376, &x377, x375, x338, x362); uint64_t x378; fiat_p434_uint1 x379; - fiat_p434_addcarryx_u64(&x378, &x379, x377, x364, x340); + fiat_p434_addcarryx_u64(&x378, &x379, x377, x340, x364); uint64_t x380; fiat_p434_uint1 x381; - fiat_p434_addcarryx_u64(&x380, &x381, x379, x366, x342); + fiat_p434_addcarryx_u64(&x380, &x381, x379, x342, x366); uint64_t x382; fiat_p434_uint1 x383; - fiat_p434_addcarryx_u64(&x382, &x383, x311, 0x0, x287); + fiat_p434_addcarryx_u64(&x382, &x383, x311, x287, 0x0); uint64_t x384; fiat_p434_uint1 x385; - fiat_p434_addcarryx_u64(&x384, &x385, x331, x382, 0x0); + fiat_p434_addcarryx_u64(&x384, &x385, x331, 0x0, x382); uint64_t x386; fiat_p434_uint1 x387; - fiat_p434_addcarryx_u64(&x386, &x387, x343, 0x0, x384); + fiat_p434_addcarryx_u64(&x386, &x387, x343, x384, 0x0); uint64_t x388; fiat_p434_uint1 x389; - fiat_p434_addcarryx_u64(&x388, &x389, x381, x368, x386); + fiat_p434_addcarryx_u64(&x388, &x389, x381, x386, x368); uint64_t x390; fiat_p434_uint1 x391; - fiat_p434_addcarryx_u64(&x390, &x391, x369, 0x0, x345); + fiat_p434_addcarryx_u64(&x390, &x391, x369, x345, 0x0); uint64_t x392; fiat_p434_uint1 x393; - fiat_p434_addcarryx_u64(&x392, &x393, x389, x390, 0x0); + fiat_p434_addcarryx_u64(&x392, &x393, x389, 0x0, x390); uint64_t x394; fiat_p434_uint1 x395; fiat_p434_subborrowx_u64(&x394, &x395, 0x0, x372, UINT64_C(0xffffffffffffffff)); diff --git a/p448_solinas_64.c b/p448_solinas_64.c index 6e5c8066b..9433b2b52 100644 --- a/p448_solinas_64.c +++ b/p448_solinas_64.c @@ -599,28 +599,28 @@ static void fiat_p448_to_bytes(uint8_t out1[56], const uint64_t arg1[8]) { fiat_p448_cmovznz_u64(&x17, x16, 0x0, UINT64_C(0xffffffffffffffff)); uint64_t x18; fiat_p448_uint1 x19; - fiat_p448_addcarryx_u56(&x18, &x19, 0x0, (x17 & UINT64_C(0xffffffffffffff)), x1); + fiat_p448_addcarryx_u56(&x18, &x19, 0x0, x1, (x17 & UINT64_C(0xffffffffffffff))); uint64_t x20; fiat_p448_uint1 x21; - fiat_p448_addcarryx_u56(&x20, &x21, x19, (x17 & UINT64_C(0xffffffffffffff)), x3); + fiat_p448_addcarryx_u56(&x20, &x21, x19, x3, (x17 & UINT64_C(0xffffffffffffff))); uint64_t x22; fiat_p448_uint1 x23; - fiat_p448_addcarryx_u56(&x22, &x23, x21, (x17 & UINT64_C(0xffffffffffffff)), x5); + fiat_p448_addcarryx_u56(&x22, &x23, x21, x5, (x17 & UINT64_C(0xffffffffffffff))); uint64_t x24; fiat_p448_uint1 x25; - fiat_p448_addcarryx_u56(&x24, &x25, x23, (x17 & UINT64_C(0xffffffffffffff)), x7); + fiat_p448_addcarryx_u56(&x24, &x25, x23, x7, (x17 & UINT64_C(0xffffffffffffff))); uint64_t x26; fiat_p448_uint1 x27; - fiat_p448_addcarryx_u56(&x26, &x27, x25, (x17 & UINT64_C(0xfffffffffffffe)), x9); + fiat_p448_addcarryx_u56(&x26, &x27, x25, x9, (x17 & UINT64_C(0xfffffffffffffe))); uint64_t x28; fiat_p448_uint1 x29; - fiat_p448_addcarryx_u56(&x28, &x29, x27, (x17 & UINT64_C(0xffffffffffffff)), x11); + fiat_p448_addcarryx_u56(&x28, &x29, x27, x11, (x17 & UINT64_C(0xffffffffffffff))); uint64_t x30; fiat_p448_uint1 x31; - fiat_p448_addcarryx_u56(&x30, &x31, x29, (x17 & UINT64_C(0xffffffffffffff)), x13); + fiat_p448_addcarryx_u56(&x30, &x31, x29, x13, (x17 & UINT64_C(0xffffffffffffff))); uint64_t x32; fiat_p448_uint1 x33; - fiat_p448_addcarryx_u56(&x32, &x33, x31, (x17 & UINT64_C(0xffffffffffffff)), x15); + fiat_p448_addcarryx_u56(&x32, &x33, x31, x15, (x17 & UINT64_C(0xffffffffffffff))); uint64_t x34 = (x18 >> 8); uint8_t x35 = (uint8_t)(x18 & UINT8_C(0xff)); uint64_t x36 = (x34 >> 8); diff --git a/p521_32.c b/p521_32.c index aa8416aa9..67ab9d882 100644 --- a/p521_32.c +++ b/p521_32.c @@ -1147,55 +1147,55 @@ static void fiat_p521_to_bytes(uint8_t out1[66], const uint32_t arg1[17]) { fiat_p521_cmovznz_u32(&x35, x34, 0x0, UINT32_C(0xffffffff)); uint32_t x36; fiat_p521_uint1 x37; - fiat_p521_addcarryx_u31(&x36, &x37, 0x0, (x35 & UINT32_C(0x7fffffff)), x1); + fiat_p521_addcarryx_u31(&x36, &x37, 0x0, x1, (x35 & UINT32_C(0x7fffffff))); uint32_t x38; fiat_p521_uint1 x39; - fiat_p521_addcarryx_u31(&x38, &x39, x37, (x35 & UINT32_C(0x7fffffff)), x3); + fiat_p521_addcarryx_u31(&x38, &x39, x37, x3, (x35 & UINT32_C(0x7fffffff))); uint32_t x40; fiat_p521_uint1 x41; - fiat_p521_addcarryx_u30(&x40, &x41, x39, (x35 & UINT32_C(0x3fffffff)), x5); + fiat_p521_addcarryx_u30(&x40, &x41, x39, x5, (x35 & UINT32_C(0x3fffffff))); uint32_t x42; fiat_p521_uint1 x43; - fiat_p521_addcarryx_u31(&x42, &x43, x41, (x35 & UINT32_C(0x7fffffff)), x7); + fiat_p521_addcarryx_u31(&x42, &x43, x41, x7, (x35 & UINT32_C(0x7fffffff))); uint32_t x44; fiat_p521_uint1 x45; - fiat_p521_addcarryx_u31(&x44, &x45, x43, (x35 & UINT32_C(0x7fffffff)), x9); + fiat_p521_addcarryx_u31(&x44, &x45, x43, x9, (x35 & UINT32_C(0x7fffffff))); uint32_t x46; fiat_p521_uint1 x47; - fiat_p521_addcarryx_u30(&x46, &x47, x45, (x35 & UINT32_C(0x3fffffff)), x11); + fiat_p521_addcarryx_u30(&x46, &x47, x45, x11, (x35 & UINT32_C(0x3fffffff))); uint32_t x48; fiat_p521_uint1 x49; - fiat_p521_addcarryx_u31(&x48, &x49, x47, (x35 & UINT32_C(0x7fffffff)), x13); + fiat_p521_addcarryx_u31(&x48, &x49, x47, x13, (x35 & UINT32_C(0x7fffffff))); uint32_t x50; fiat_p521_uint1 x51; - fiat_p521_addcarryx_u31(&x50, &x51, x49, (x35 & UINT32_C(0x7fffffff)), x15); + fiat_p521_addcarryx_u31(&x50, &x51, x49, x15, (x35 & UINT32_C(0x7fffffff))); uint32_t x52; fiat_p521_uint1 x53; - fiat_p521_addcarryx_u30(&x52, &x53, x51, (x35 & UINT32_C(0x3fffffff)), x17); + fiat_p521_addcarryx_u30(&x52, &x53, x51, x17, (x35 & UINT32_C(0x3fffffff))); uint32_t x54; fiat_p521_uint1 x55; - fiat_p521_addcarryx_u31(&x54, &x55, x53, (x35 & UINT32_C(0x7fffffff)), x19); + fiat_p521_addcarryx_u31(&x54, &x55, x53, x19, (x35 & UINT32_C(0x7fffffff))); uint32_t x56; fiat_p521_uint1 x57; - fiat_p521_addcarryx_u31(&x56, &x57, x55, (x35 & UINT32_C(0x7fffffff)), x21); + fiat_p521_addcarryx_u31(&x56, &x57, x55, x21, (x35 & UINT32_C(0x7fffffff))); uint32_t x58; fiat_p521_uint1 x59; - fiat_p521_addcarryx_u30(&x58, &x59, x57, (x35 & UINT32_C(0x3fffffff)), x23); + fiat_p521_addcarryx_u30(&x58, &x59, x57, x23, (x35 & UINT32_C(0x3fffffff))); uint32_t x60; fiat_p521_uint1 x61; - fiat_p521_addcarryx_u31(&x60, &x61, x59, (x35 & UINT32_C(0x7fffffff)), x25); + fiat_p521_addcarryx_u31(&x60, &x61, x59, x25, (x35 & UINT32_C(0x7fffffff))); uint32_t x62; fiat_p521_uint1 x63; - fiat_p521_addcarryx_u31(&x62, &x63, x61, (x35 & UINT32_C(0x7fffffff)), x27); + fiat_p521_addcarryx_u31(&x62, &x63, x61, x27, (x35 & UINT32_C(0x7fffffff))); uint32_t x64; fiat_p521_uint1 x65; - fiat_p521_addcarryx_u30(&x64, &x65, x63, (x35 & UINT32_C(0x3fffffff)), x29); + fiat_p521_addcarryx_u30(&x64, &x65, x63, x29, (x35 & UINT32_C(0x3fffffff))); uint32_t x66; fiat_p521_uint1 x67; - fiat_p521_addcarryx_u31(&x66, &x67, x65, (x35 & UINT32_C(0x7fffffff)), x31); + fiat_p521_addcarryx_u31(&x66, &x67, x65, x31, (x35 & UINT32_C(0x7fffffff))); uint32_t x68; fiat_p521_uint1 x69; - fiat_p521_addcarryx_u30(&x68, &x69, x67, (x35 & UINT32_C(0x3fffffff)), x33); + fiat_p521_addcarryx_u30(&x68, &x69, x67, x33, (x35 & UINT32_C(0x3fffffff))); uint64_t x70 = ((uint64_t)x68 << 3); uint64_t x71 = ((uint64_t)x66 << 4); uint64_t x72 = ((uint64_t)x64 << 6); diff --git a/p521_64.c b/p521_64.c index 377c99de4..9499fbc9c 100644 --- a/p521_64.c +++ b/p521_64.c @@ -615,31 +615,31 @@ static void fiat_p521_to_bytes(uint8_t out1[66], const uint64_t arg1[9]) { fiat_p521_cmovznz_u64(&x19, x18, 0x0, UINT64_C(0xffffffffffffffff)); uint64_t x20; fiat_p521_uint1 x21; - fiat_p521_addcarryx_u58(&x20, &x21, 0x0, (x19 & UINT64_C(0x3ffffffffffffff)), x1); + fiat_p521_addcarryx_u58(&x20, &x21, 0x0, x1, (x19 & UINT64_C(0x3ffffffffffffff))); uint64_t x22; fiat_p521_uint1 x23; - fiat_p521_addcarryx_u58(&x22, &x23, x21, (x19 & UINT64_C(0x3ffffffffffffff)), x3); + fiat_p521_addcarryx_u58(&x22, &x23, x21, x3, (x19 & UINT64_C(0x3ffffffffffffff))); uint64_t x24; fiat_p521_uint1 x25; - fiat_p521_addcarryx_u58(&x24, &x25, x23, (x19 & UINT64_C(0x3ffffffffffffff)), x5); + fiat_p521_addcarryx_u58(&x24, &x25, x23, x5, (x19 & UINT64_C(0x3ffffffffffffff))); uint64_t x26; fiat_p521_uint1 x27; - fiat_p521_addcarryx_u58(&x26, &x27, x25, (x19 & UINT64_C(0x3ffffffffffffff)), x7); + fiat_p521_addcarryx_u58(&x26, &x27, x25, x7, (x19 & UINT64_C(0x3ffffffffffffff))); uint64_t x28; fiat_p521_uint1 x29; - fiat_p521_addcarryx_u58(&x28, &x29, x27, (x19 & UINT64_C(0x3ffffffffffffff)), x9); + fiat_p521_addcarryx_u58(&x28, &x29, x27, x9, (x19 & UINT64_C(0x3ffffffffffffff))); uint64_t x30; fiat_p521_uint1 x31; - fiat_p521_addcarryx_u58(&x30, &x31, x29, (x19 & UINT64_C(0x3ffffffffffffff)), x11); + fiat_p521_addcarryx_u58(&x30, &x31, x29, x11, (x19 & UINT64_C(0x3ffffffffffffff))); uint64_t x32; fiat_p521_uint1 x33; - fiat_p521_addcarryx_u58(&x32, &x33, x31, (x19 & UINT64_C(0x3ffffffffffffff)), x13); + fiat_p521_addcarryx_u58(&x32, &x33, x31, x13, (x19 & UINT64_C(0x3ffffffffffffff))); uint64_t x34; fiat_p521_uint1 x35; - fiat_p521_addcarryx_u58(&x34, &x35, x33, (x19 & UINT64_C(0x3ffffffffffffff)), x15); + fiat_p521_addcarryx_u58(&x34, &x35, x33, x15, (x19 & UINT64_C(0x3ffffffffffffff))); uint64_t x36; fiat_p521_uint1 x37; - fiat_p521_addcarryx_u57(&x36, &x37, x35, (x19 & UINT64_C(0x1ffffffffffffff)), x17); + fiat_p521_addcarryx_u57(&x36, &x37, x35, x17, (x19 & UINT64_C(0x1ffffffffffffff))); uint64_t x38 = (x34 << 6); uint64_t x39 = (x32 << 4); uint64_t x40 = (x30 << 2); diff --git a/secp256k1_32.c b/secp256k1_32.c index cfa8e76f8..42445af9d 100644 --- a/secp256k1_32.c +++ b/secp256k1_32.c @@ -150,28 +150,28 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x23, &x24, x8, (arg2[0])); uint32_t x25; fiat_secp256k1_uint1 x26; - fiat_secp256k1_addcarryx_u32(&x25, &x26, 0x0, x21, x24); + fiat_secp256k1_addcarryx_u32(&x25, &x26, 0x0, x24, x21); uint32_t x27; fiat_secp256k1_uint1 x28; - fiat_secp256k1_addcarryx_u32(&x27, &x28, x26, x19, x22); + fiat_secp256k1_addcarryx_u32(&x27, &x28, x26, x22, x19); uint32_t x29; fiat_secp256k1_uint1 x30; - fiat_secp256k1_addcarryx_u32(&x29, &x30, x28, x17, x20); + fiat_secp256k1_addcarryx_u32(&x29, &x30, x28, x20, x17); uint32_t x31; fiat_secp256k1_uint1 x32; - fiat_secp256k1_addcarryx_u32(&x31, &x32, x30, x15, x18); + fiat_secp256k1_addcarryx_u32(&x31, &x32, x30, x18, x15); uint32_t x33; fiat_secp256k1_uint1 x34; - fiat_secp256k1_addcarryx_u32(&x33, &x34, x32, x13, x16); + fiat_secp256k1_addcarryx_u32(&x33, &x34, x32, x16, x13); uint32_t x35; fiat_secp256k1_uint1 x36; - fiat_secp256k1_addcarryx_u32(&x35, &x36, x34, x11, x14); + fiat_secp256k1_addcarryx_u32(&x35, &x36, x34, x14, x11); uint32_t x37; fiat_secp256k1_uint1 x38; - fiat_secp256k1_addcarryx_u32(&x37, &x38, x36, x9, x12); + fiat_secp256k1_addcarryx_u32(&x37, &x38, x36, x12, x9); uint32_t x39; fiat_secp256k1_uint1 x40; - fiat_secp256k1_addcarryx_u32(&x39, &x40, x38, 0x0, x10); + fiat_secp256k1_addcarryx_u32(&x39, &x40, x38, x10, 0x0); uint32_t x41; uint32_t x42; fiat_secp256k1_mulx_u32(&x41, &x42, x23, UINT32_C(0xd2253531)); @@ -201,55 +201,55 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x57, &x58, x41, UINT32_C(0xfffffc2f)); uint32_t x59; fiat_secp256k1_uint1 x60; - fiat_secp256k1_addcarryx_u32(&x59, &x60, 0x0, x55, x58); + fiat_secp256k1_addcarryx_u32(&x59, &x60, 0x0, x58, x55); uint32_t x61; fiat_secp256k1_uint1 x62; - fiat_secp256k1_addcarryx_u32(&x61, &x62, x60, x53, x56); + fiat_secp256k1_addcarryx_u32(&x61, &x62, x60, x56, x53); uint32_t x63; fiat_secp256k1_uint1 x64; - fiat_secp256k1_addcarryx_u32(&x63, &x64, x62, x51, x54); + fiat_secp256k1_addcarryx_u32(&x63, &x64, x62, x54, x51); uint32_t x65; fiat_secp256k1_uint1 x66; - fiat_secp256k1_addcarryx_u32(&x65, &x66, x64, x49, x52); + fiat_secp256k1_addcarryx_u32(&x65, &x66, x64, x52, x49); uint32_t x67; fiat_secp256k1_uint1 x68; - fiat_secp256k1_addcarryx_u32(&x67, &x68, x66, x47, x50); + fiat_secp256k1_addcarryx_u32(&x67, &x68, x66, x50, x47); uint32_t x69; fiat_secp256k1_uint1 x70; - fiat_secp256k1_addcarryx_u32(&x69, &x70, x68, x45, x48); + fiat_secp256k1_addcarryx_u32(&x69, &x70, x68, x48, x45); uint32_t x71; fiat_secp256k1_uint1 x72; - fiat_secp256k1_addcarryx_u32(&x71, &x72, x70, x43, x46); + fiat_secp256k1_addcarryx_u32(&x71, &x72, x70, x46, x43); uint32_t x73; fiat_secp256k1_uint1 x74; - fiat_secp256k1_addcarryx_u32(&x73, &x74, x72, 0x0, x44); + fiat_secp256k1_addcarryx_u32(&x73, &x74, x72, x44, 0x0); uint32_t x75; fiat_secp256k1_uint1 x76; - fiat_secp256k1_addcarryx_u32(&x75, &x76, 0x0, x57, x23); + fiat_secp256k1_addcarryx_u32(&x75, &x76, 0x0, x23, x57); uint32_t x77; fiat_secp256k1_uint1 x78; - fiat_secp256k1_addcarryx_u32(&x77, &x78, x76, x59, x25); + fiat_secp256k1_addcarryx_u32(&x77, &x78, x76, x25, x59); uint32_t x79; fiat_secp256k1_uint1 x80; - fiat_secp256k1_addcarryx_u32(&x79, &x80, x78, x61, x27); + fiat_secp256k1_addcarryx_u32(&x79, &x80, x78, x27, x61); uint32_t x81; fiat_secp256k1_uint1 x82; - fiat_secp256k1_addcarryx_u32(&x81, &x82, x80, x63, x29); + fiat_secp256k1_addcarryx_u32(&x81, &x82, x80, x29, x63); uint32_t x83; fiat_secp256k1_uint1 x84; - fiat_secp256k1_addcarryx_u32(&x83, &x84, x82, x65, x31); + fiat_secp256k1_addcarryx_u32(&x83, &x84, x82, x31, x65); uint32_t x85; fiat_secp256k1_uint1 x86; - fiat_secp256k1_addcarryx_u32(&x85, &x86, x84, x67, x33); + fiat_secp256k1_addcarryx_u32(&x85, &x86, x84, x33, x67); uint32_t x87; fiat_secp256k1_uint1 x88; - fiat_secp256k1_addcarryx_u32(&x87, &x88, x86, x69, x35); + fiat_secp256k1_addcarryx_u32(&x87, &x88, x86, x35, x69); uint32_t x89; fiat_secp256k1_uint1 x90; - fiat_secp256k1_addcarryx_u32(&x89, &x90, x88, x71, x37); + fiat_secp256k1_addcarryx_u32(&x89, &x90, x88, x37, x71); uint32_t x91; fiat_secp256k1_uint1 x92; - fiat_secp256k1_addcarryx_u32(&x91, &x92, x90, x73, x39); + fiat_secp256k1_addcarryx_u32(&x91, &x92, x90, x39, x73); uint32_t x93; fiat_secp256k1_uint1 x94; fiat_secp256k1_addcarryx_u32(&x93, &x94, x92, 0x0, 0x0); @@ -279,55 +279,55 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x109, &x110, x1, (arg2[0])); uint32_t x111; fiat_secp256k1_uint1 x112; - fiat_secp256k1_addcarryx_u32(&x111, &x112, 0x0, x107, x110); + fiat_secp256k1_addcarryx_u32(&x111, &x112, 0x0, x110, x107); uint32_t x113; fiat_secp256k1_uint1 x114; - fiat_secp256k1_addcarryx_u32(&x113, &x114, x112, x105, x108); + fiat_secp256k1_addcarryx_u32(&x113, &x114, x112, x108, x105); uint32_t x115; fiat_secp256k1_uint1 x116; - fiat_secp256k1_addcarryx_u32(&x115, &x116, x114, x103, x106); + fiat_secp256k1_addcarryx_u32(&x115, &x116, x114, x106, x103); uint32_t x117; fiat_secp256k1_uint1 x118; - fiat_secp256k1_addcarryx_u32(&x117, &x118, x116, x101, x104); + fiat_secp256k1_addcarryx_u32(&x117, &x118, x116, x104, x101); uint32_t x119; fiat_secp256k1_uint1 x120; - fiat_secp256k1_addcarryx_u32(&x119, &x120, x118, x99, x102); + fiat_secp256k1_addcarryx_u32(&x119, &x120, x118, x102, x99); uint32_t x121; fiat_secp256k1_uint1 x122; - fiat_secp256k1_addcarryx_u32(&x121, &x122, x120, x97, x100); + fiat_secp256k1_addcarryx_u32(&x121, &x122, x120, x100, x97); uint32_t x123; fiat_secp256k1_uint1 x124; - fiat_secp256k1_addcarryx_u32(&x123, &x124, x122, x95, x98); + fiat_secp256k1_addcarryx_u32(&x123, &x124, x122, x98, x95); uint32_t x125; fiat_secp256k1_uint1 x126; - fiat_secp256k1_addcarryx_u32(&x125, &x126, x124, 0x0, x96); + fiat_secp256k1_addcarryx_u32(&x125, &x126, x124, x96, 0x0); uint32_t x127; fiat_secp256k1_uint1 x128; - fiat_secp256k1_addcarryx_u32(&x127, &x128, 0x0, x109, x77); + fiat_secp256k1_addcarryx_u32(&x127, &x128, 0x0, x77, x109); uint32_t x129; fiat_secp256k1_uint1 x130; - fiat_secp256k1_addcarryx_u32(&x129, &x130, x128, x111, x79); + fiat_secp256k1_addcarryx_u32(&x129, &x130, x128, x79, x111); uint32_t x131; fiat_secp256k1_uint1 x132; - fiat_secp256k1_addcarryx_u32(&x131, &x132, x130, x113, x81); + fiat_secp256k1_addcarryx_u32(&x131, &x132, x130, x81, x113); uint32_t x133; fiat_secp256k1_uint1 x134; - fiat_secp256k1_addcarryx_u32(&x133, &x134, x132, x115, x83); + fiat_secp256k1_addcarryx_u32(&x133, &x134, x132, x83, x115); uint32_t x135; fiat_secp256k1_uint1 x136; - fiat_secp256k1_addcarryx_u32(&x135, &x136, x134, x117, x85); + fiat_secp256k1_addcarryx_u32(&x135, &x136, x134, x85, x117); uint32_t x137; fiat_secp256k1_uint1 x138; - fiat_secp256k1_addcarryx_u32(&x137, &x138, x136, x119, x87); + fiat_secp256k1_addcarryx_u32(&x137, &x138, x136, x87, x119); uint32_t x139; fiat_secp256k1_uint1 x140; - fiat_secp256k1_addcarryx_u32(&x139, &x140, x138, x121, x89); + fiat_secp256k1_addcarryx_u32(&x139, &x140, x138, x89, x121); uint32_t x141; fiat_secp256k1_uint1 x142; - fiat_secp256k1_addcarryx_u32(&x141, &x142, x140, x123, x91); + fiat_secp256k1_addcarryx_u32(&x141, &x142, x140, x91, x123); uint32_t x143; fiat_secp256k1_uint1 x144; - fiat_secp256k1_addcarryx_u32(&x143, &x144, x142, x125, (fiat_secp256k1_uint1)x93); + fiat_secp256k1_addcarryx_u32(&x143, &x144, x142, (fiat_secp256k1_uint1)x93, x125); uint32_t x145; uint32_t x146; fiat_secp256k1_mulx_u32(&x145, &x146, x127, UINT32_C(0xd2253531)); @@ -357,58 +357,58 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x161, &x162, x145, UINT32_C(0xfffffc2f)); uint32_t x163; fiat_secp256k1_uint1 x164; - fiat_secp256k1_addcarryx_u32(&x163, &x164, 0x0, x159, x162); + fiat_secp256k1_addcarryx_u32(&x163, &x164, 0x0, x162, x159); uint32_t x165; fiat_secp256k1_uint1 x166; - fiat_secp256k1_addcarryx_u32(&x165, &x166, x164, x157, x160); + fiat_secp256k1_addcarryx_u32(&x165, &x166, x164, x160, x157); uint32_t x167; fiat_secp256k1_uint1 x168; - fiat_secp256k1_addcarryx_u32(&x167, &x168, x166, x155, x158); + fiat_secp256k1_addcarryx_u32(&x167, &x168, x166, x158, x155); uint32_t x169; fiat_secp256k1_uint1 x170; - fiat_secp256k1_addcarryx_u32(&x169, &x170, x168, x153, x156); + fiat_secp256k1_addcarryx_u32(&x169, &x170, x168, x156, x153); uint32_t x171; fiat_secp256k1_uint1 x172; - fiat_secp256k1_addcarryx_u32(&x171, &x172, x170, x151, x154); + fiat_secp256k1_addcarryx_u32(&x171, &x172, x170, x154, x151); uint32_t x173; fiat_secp256k1_uint1 x174; - fiat_secp256k1_addcarryx_u32(&x173, &x174, x172, x149, x152); + fiat_secp256k1_addcarryx_u32(&x173, &x174, x172, x152, x149); uint32_t x175; fiat_secp256k1_uint1 x176; - fiat_secp256k1_addcarryx_u32(&x175, &x176, x174, x147, x150); + fiat_secp256k1_addcarryx_u32(&x175, &x176, x174, x150, x147); uint32_t x177; fiat_secp256k1_uint1 x178; - fiat_secp256k1_addcarryx_u32(&x177, &x178, x176, 0x0, x148); + fiat_secp256k1_addcarryx_u32(&x177, &x178, x176, x148, 0x0); uint32_t x179; fiat_secp256k1_uint1 x180; - fiat_secp256k1_addcarryx_u32(&x179, &x180, 0x0, x161, x127); + fiat_secp256k1_addcarryx_u32(&x179, &x180, 0x0, x127, x161); uint32_t x181; fiat_secp256k1_uint1 x182; - fiat_secp256k1_addcarryx_u32(&x181, &x182, x180, x163, x129); + fiat_secp256k1_addcarryx_u32(&x181, &x182, x180, x129, x163); uint32_t x183; fiat_secp256k1_uint1 x184; - fiat_secp256k1_addcarryx_u32(&x183, &x184, x182, x165, x131); + fiat_secp256k1_addcarryx_u32(&x183, &x184, x182, x131, x165); uint32_t x185; fiat_secp256k1_uint1 x186; - fiat_secp256k1_addcarryx_u32(&x185, &x186, x184, x167, x133); + fiat_secp256k1_addcarryx_u32(&x185, &x186, x184, x133, x167); uint32_t x187; fiat_secp256k1_uint1 x188; - fiat_secp256k1_addcarryx_u32(&x187, &x188, x186, x169, x135); + fiat_secp256k1_addcarryx_u32(&x187, &x188, x186, x135, x169); uint32_t x189; fiat_secp256k1_uint1 x190; - fiat_secp256k1_addcarryx_u32(&x189, &x190, x188, x171, x137); + fiat_secp256k1_addcarryx_u32(&x189, &x190, x188, x137, x171); uint32_t x191; fiat_secp256k1_uint1 x192; - fiat_secp256k1_addcarryx_u32(&x191, &x192, x190, x173, x139); + fiat_secp256k1_addcarryx_u32(&x191, &x192, x190, x139, x173); uint32_t x193; fiat_secp256k1_uint1 x194; - fiat_secp256k1_addcarryx_u32(&x193, &x194, x192, x175, x141); + fiat_secp256k1_addcarryx_u32(&x193, &x194, x192, x141, x175); uint32_t x195; fiat_secp256k1_uint1 x196; - fiat_secp256k1_addcarryx_u32(&x195, &x196, x194, x177, x143); + fiat_secp256k1_addcarryx_u32(&x195, &x196, x194, x143, x177); uint32_t x197; fiat_secp256k1_uint1 x198; - fiat_secp256k1_addcarryx_u32(&x197, &x198, x196, 0x0, x144); + fiat_secp256k1_addcarryx_u32(&x197, &x198, x196, x144, 0x0); uint32_t x199; uint32_t x200; fiat_secp256k1_mulx_u32(&x199, &x200, x2, (arg2[7])); @@ -435,55 +435,55 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x213, &x214, x2, (arg2[0])); uint32_t x215; fiat_secp256k1_uint1 x216; - fiat_secp256k1_addcarryx_u32(&x215, &x216, 0x0, x211, x214); + fiat_secp256k1_addcarryx_u32(&x215, &x216, 0x0, x214, x211); uint32_t x217; fiat_secp256k1_uint1 x218; - fiat_secp256k1_addcarryx_u32(&x217, &x218, x216, x209, x212); + fiat_secp256k1_addcarryx_u32(&x217, &x218, x216, x212, x209); uint32_t x219; fiat_secp256k1_uint1 x220; - fiat_secp256k1_addcarryx_u32(&x219, &x220, x218, x207, x210); + fiat_secp256k1_addcarryx_u32(&x219, &x220, x218, x210, x207); uint32_t x221; fiat_secp256k1_uint1 x222; - fiat_secp256k1_addcarryx_u32(&x221, &x222, x220, x205, x208); + fiat_secp256k1_addcarryx_u32(&x221, &x222, x220, x208, x205); uint32_t x223; fiat_secp256k1_uint1 x224; - fiat_secp256k1_addcarryx_u32(&x223, &x224, x222, x203, x206); + fiat_secp256k1_addcarryx_u32(&x223, &x224, x222, x206, x203); uint32_t x225; fiat_secp256k1_uint1 x226; - fiat_secp256k1_addcarryx_u32(&x225, &x226, x224, x201, x204); + fiat_secp256k1_addcarryx_u32(&x225, &x226, x224, x204, x201); uint32_t x227; fiat_secp256k1_uint1 x228; - fiat_secp256k1_addcarryx_u32(&x227, &x228, x226, x199, x202); + fiat_secp256k1_addcarryx_u32(&x227, &x228, x226, x202, x199); uint32_t x229; fiat_secp256k1_uint1 x230; - fiat_secp256k1_addcarryx_u32(&x229, &x230, x228, 0x0, x200); + fiat_secp256k1_addcarryx_u32(&x229, &x230, x228, x200, 0x0); uint32_t x231; fiat_secp256k1_uint1 x232; - fiat_secp256k1_addcarryx_u32(&x231, &x232, 0x0, x213, x181); + fiat_secp256k1_addcarryx_u32(&x231, &x232, 0x0, x181, x213); uint32_t x233; fiat_secp256k1_uint1 x234; - fiat_secp256k1_addcarryx_u32(&x233, &x234, x232, x215, x183); + fiat_secp256k1_addcarryx_u32(&x233, &x234, x232, x183, x215); uint32_t x235; fiat_secp256k1_uint1 x236; - fiat_secp256k1_addcarryx_u32(&x235, &x236, x234, x217, x185); + fiat_secp256k1_addcarryx_u32(&x235, &x236, x234, x185, x217); uint32_t x237; fiat_secp256k1_uint1 x238; - fiat_secp256k1_addcarryx_u32(&x237, &x238, x236, x219, x187); + fiat_secp256k1_addcarryx_u32(&x237, &x238, x236, x187, x219); uint32_t x239; fiat_secp256k1_uint1 x240; - fiat_secp256k1_addcarryx_u32(&x239, &x240, x238, x221, x189); + fiat_secp256k1_addcarryx_u32(&x239, &x240, x238, x189, x221); uint32_t x241; fiat_secp256k1_uint1 x242; - fiat_secp256k1_addcarryx_u32(&x241, &x242, x240, x223, x191); + fiat_secp256k1_addcarryx_u32(&x241, &x242, x240, x191, x223); uint32_t x243; fiat_secp256k1_uint1 x244; - fiat_secp256k1_addcarryx_u32(&x243, &x244, x242, x225, x193); + fiat_secp256k1_addcarryx_u32(&x243, &x244, x242, x193, x225); uint32_t x245; fiat_secp256k1_uint1 x246; - fiat_secp256k1_addcarryx_u32(&x245, &x246, x244, x227, x195); + fiat_secp256k1_addcarryx_u32(&x245, &x246, x244, x195, x227); uint32_t x247; fiat_secp256k1_uint1 x248; - fiat_secp256k1_addcarryx_u32(&x247, &x248, x246, x229, x197); + fiat_secp256k1_addcarryx_u32(&x247, &x248, x246, x197, x229); uint32_t x249; uint32_t x250; fiat_secp256k1_mulx_u32(&x249, &x250, x231, UINT32_C(0xd2253531)); @@ -513,58 +513,58 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x265, &x266, x249, UINT32_C(0xfffffc2f)); uint32_t x267; fiat_secp256k1_uint1 x268; - fiat_secp256k1_addcarryx_u32(&x267, &x268, 0x0, x263, x266); + fiat_secp256k1_addcarryx_u32(&x267, &x268, 0x0, x266, x263); uint32_t x269; fiat_secp256k1_uint1 x270; - fiat_secp256k1_addcarryx_u32(&x269, &x270, x268, x261, x264); + fiat_secp256k1_addcarryx_u32(&x269, &x270, x268, x264, x261); uint32_t x271; fiat_secp256k1_uint1 x272; - fiat_secp256k1_addcarryx_u32(&x271, &x272, x270, x259, x262); + fiat_secp256k1_addcarryx_u32(&x271, &x272, x270, x262, x259); uint32_t x273; fiat_secp256k1_uint1 x274; - fiat_secp256k1_addcarryx_u32(&x273, &x274, x272, x257, x260); + fiat_secp256k1_addcarryx_u32(&x273, &x274, x272, x260, x257); uint32_t x275; fiat_secp256k1_uint1 x276; - fiat_secp256k1_addcarryx_u32(&x275, &x276, x274, x255, x258); + fiat_secp256k1_addcarryx_u32(&x275, &x276, x274, x258, x255); uint32_t x277; fiat_secp256k1_uint1 x278; - fiat_secp256k1_addcarryx_u32(&x277, &x278, x276, x253, x256); + fiat_secp256k1_addcarryx_u32(&x277, &x278, x276, x256, x253); uint32_t x279; fiat_secp256k1_uint1 x280; - fiat_secp256k1_addcarryx_u32(&x279, &x280, x278, x251, x254); + fiat_secp256k1_addcarryx_u32(&x279, &x280, x278, x254, x251); uint32_t x281; fiat_secp256k1_uint1 x282; - fiat_secp256k1_addcarryx_u32(&x281, &x282, x280, 0x0, x252); + fiat_secp256k1_addcarryx_u32(&x281, &x282, x280, x252, 0x0); uint32_t x283; fiat_secp256k1_uint1 x284; - fiat_secp256k1_addcarryx_u32(&x283, &x284, 0x0, x265, x231); + fiat_secp256k1_addcarryx_u32(&x283, &x284, 0x0, x231, x265); uint32_t x285; fiat_secp256k1_uint1 x286; - fiat_secp256k1_addcarryx_u32(&x285, &x286, x284, x267, x233); + fiat_secp256k1_addcarryx_u32(&x285, &x286, x284, x233, x267); uint32_t x287; fiat_secp256k1_uint1 x288; - fiat_secp256k1_addcarryx_u32(&x287, &x288, x286, x269, x235); + fiat_secp256k1_addcarryx_u32(&x287, &x288, x286, x235, x269); uint32_t x289; fiat_secp256k1_uint1 x290; - fiat_secp256k1_addcarryx_u32(&x289, &x290, x288, x271, x237); + fiat_secp256k1_addcarryx_u32(&x289, &x290, x288, x237, x271); uint32_t x291; fiat_secp256k1_uint1 x292; - fiat_secp256k1_addcarryx_u32(&x291, &x292, x290, x273, x239); + fiat_secp256k1_addcarryx_u32(&x291, &x292, x290, x239, x273); uint32_t x293; fiat_secp256k1_uint1 x294; - fiat_secp256k1_addcarryx_u32(&x293, &x294, x292, x275, x241); + fiat_secp256k1_addcarryx_u32(&x293, &x294, x292, x241, x275); uint32_t x295; fiat_secp256k1_uint1 x296; - fiat_secp256k1_addcarryx_u32(&x295, &x296, x294, x277, x243); + fiat_secp256k1_addcarryx_u32(&x295, &x296, x294, x243, x277); uint32_t x297; fiat_secp256k1_uint1 x298; - fiat_secp256k1_addcarryx_u32(&x297, &x298, x296, x279, x245); + fiat_secp256k1_addcarryx_u32(&x297, &x298, x296, x245, x279); uint32_t x299; fiat_secp256k1_uint1 x300; - fiat_secp256k1_addcarryx_u32(&x299, &x300, x298, x281, x247); + fiat_secp256k1_addcarryx_u32(&x299, &x300, x298, x247, x281); uint32_t x301; fiat_secp256k1_uint1 x302; - fiat_secp256k1_addcarryx_u32(&x301, &x302, x300, 0x0, x248); + fiat_secp256k1_addcarryx_u32(&x301, &x302, x300, x248, 0x0); uint32_t x303; uint32_t x304; fiat_secp256k1_mulx_u32(&x303, &x304, x3, (arg2[7])); @@ -591,55 +591,55 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x317, &x318, x3, (arg2[0])); uint32_t x319; fiat_secp256k1_uint1 x320; - fiat_secp256k1_addcarryx_u32(&x319, &x320, 0x0, x315, x318); + fiat_secp256k1_addcarryx_u32(&x319, &x320, 0x0, x318, x315); uint32_t x321; fiat_secp256k1_uint1 x322; - fiat_secp256k1_addcarryx_u32(&x321, &x322, x320, x313, x316); + fiat_secp256k1_addcarryx_u32(&x321, &x322, x320, x316, x313); uint32_t x323; fiat_secp256k1_uint1 x324; - fiat_secp256k1_addcarryx_u32(&x323, &x324, x322, x311, x314); + fiat_secp256k1_addcarryx_u32(&x323, &x324, x322, x314, x311); uint32_t x325; fiat_secp256k1_uint1 x326; - fiat_secp256k1_addcarryx_u32(&x325, &x326, x324, x309, x312); + fiat_secp256k1_addcarryx_u32(&x325, &x326, x324, x312, x309); uint32_t x327; fiat_secp256k1_uint1 x328; - fiat_secp256k1_addcarryx_u32(&x327, &x328, x326, x307, x310); + fiat_secp256k1_addcarryx_u32(&x327, &x328, x326, x310, x307); uint32_t x329; fiat_secp256k1_uint1 x330; - fiat_secp256k1_addcarryx_u32(&x329, &x330, x328, x305, x308); + fiat_secp256k1_addcarryx_u32(&x329, &x330, x328, x308, x305); uint32_t x331; fiat_secp256k1_uint1 x332; - fiat_secp256k1_addcarryx_u32(&x331, &x332, x330, x303, x306); + fiat_secp256k1_addcarryx_u32(&x331, &x332, x330, x306, x303); uint32_t x333; fiat_secp256k1_uint1 x334; - fiat_secp256k1_addcarryx_u32(&x333, &x334, x332, 0x0, x304); + fiat_secp256k1_addcarryx_u32(&x333, &x334, x332, x304, 0x0); uint32_t x335; fiat_secp256k1_uint1 x336; - fiat_secp256k1_addcarryx_u32(&x335, &x336, 0x0, x317, x285); + fiat_secp256k1_addcarryx_u32(&x335, &x336, 0x0, x285, x317); uint32_t x337; fiat_secp256k1_uint1 x338; - fiat_secp256k1_addcarryx_u32(&x337, &x338, x336, x319, x287); + fiat_secp256k1_addcarryx_u32(&x337, &x338, x336, x287, x319); uint32_t x339; fiat_secp256k1_uint1 x340; - fiat_secp256k1_addcarryx_u32(&x339, &x340, x338, x321, x289); + fiat_secp256k1_addcarryx_u32(&x339, &x340, x338, x289, x321); uint32_t x341; fiat_secp256k1_uint1 x342; - fiat_secp256k1_addcarryx_u32(&x341, &x342, x340, x323, x291); + fiat_secp256k1_addcarryx_u32(&x341, &x342, x340, x291, x323); uint32_t x343; fiat_secp256k1_uint1 x344; - fiat_secp256k1_addcarryx_u32(&x343, &x344, x342, x325, x293); + fiat_secp256k1_addcarryx_u32(&x343, &x344, x342, x293, x325); uint32_t x345; fiat_secp256k1_uint1 x346; - fiat_secp256k1_addcarryx_u32(&x345, &x346, x344, x327, x295); + fiat_secp256k1_addcarryx_u32(&x345, &x346, x344, x295, x327); uint32_t x347; fiat_secp256k1_uint1 x348; - fiat_secp256k1_addcarryx_u32(&x347, &x348, x346, x329, x297); + fiat_secp256k1_addcarryx_u32(&x347, &x348, x346, x297, x329); uint32_t x349; fiat_secp256k1_uint1 x350; - fiat_secp256k1_addcarryx_u32(&x349, &x350, x348, x331, x299); + fiat_secp256k1_addcarryx_u32(&x349, &x350, x348, x299, x331); uint32_t x351; fiat_secp256k1_uint1 x352; - fiat_secp256k1_addcarryx_u32(&x351, &x352, x350, x333, x301); + fiat_secp256k1_addcarryx_u32(&x351, &x352, x350, x301, x333); uint32_t x353; uint32_t x354; fiat_secp256k1_mulx_u32(&x353, &x354, x335, UINT32_C(0xd2253531)); @@ -669,58 +669,58 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x369, &x370, x353, UINT32_C(0xfffffc2f)); uint32_t x371; fiat_secp256k1_uint1 x372; - fiat_secp256k1_addcarryx_u32(&x371, &x372, 0x0, x367, x370); + fiat_secp256k1_addcarryx_u32(&x371, &x372, 0x0, x370, x367); uint32_t x373; fiat_secp256k1_uint1 x374; - fiat_secp256k1_addcarryx_u32(&x373, &x374, x372, x365, x368); + fiat_secp256k1_addcarryx_u32(&x373, &x374, x372, x368, x365); uint32_t x375; fiat_secp256k1_uint1 x376; - fiat_secp256k1_addcarryx_u32(&x375, &x376, x374, x363, x366); + fiat_secp256k1_addcarryx_u32(&x375, &x376, x374, x366, x363); uint32_t x377; fiat_secp256k1_uint1 x378; - fiat_secp256k1_addcarryx_u32(&x377, &x378, x376, x361, x364); + fiat_secp256k1_addcarryx_u32(&x377, &x378, x376, x364, x361); uint32_t x379; fiat_secp256k1_uint1 x380; - fiat_secp256k1_addcarryx_u32(&x379, &x380, x378, x359, x362); + fiat_secp256k1_addcarryx_u32(&x379, &x380, x378, x362, x359); uint32_t x381; fiat_secp256k1_uint1 x382; - fiat_secp256k1_addcarryx_u32(&x381, &x382, x380, x357, x360); + fiat_secp256k1_addcarryx_u32(&x381, &x382, x380, x360, x357); uint32_t x383; fiat_secp256k1_uint1 x384; - fiat_secp256k1_addcarryx_u32(&x383, &x384, x382, x355, x358); + fiat_secp256k1_addcarryx_u32(&x383, &x384, x382, x358, x355); uint32_t x385; fiat_secp256k1_uint1 x386; - fiat_secp256k1_addcarryx_u32(&x385, &x386, x384, 0x0, x356); + fiat_secp256k1_addcarryx_u32(&x385, &x386, x384, x356, 0x0); uint32_t x387; fiat_secp256k1_uint1 x388; - fiat_secp256k1_addcarryx_u32(&x387, &x388, 0x0, x369, x335); + fiat_secp256k1_addcarryx_u32(&x387, &x388, 0x0, x335, x369); uint32_t x389; fiat_secp256k1_uint1 x390; - fiat_secp256k1_addcarryx_u32(&x389, &x390, x388, x371, x337); + fiat_secp256k1_addcarryx_u32(&x389, &x390, x388, x337, x371); uint32_t x391; fiat_secp256k1_uint1 x392; - fiat_secp256k1_addcarryx_u32(&x391, &x392, x390, x373, x339); + fiat_secp256k1_addcarryx_u32(&x391, &x392, x390, x339, x373); uint32_t x393; fiat_secp256k1_uint1 x394; - fiat_secp256k1_addcarryx_u32(&x393, &x394, x392, x375, x341); + fiat_secp256k1_addcarryx_u32(&x393, &x394, x392, x341, x375); uint32_t x395; fiat_secp256k1_uint1 x396; - fiat_secp256k1_addcarryx_u32(&x395, &x396, x394, x377, x343); + fiat_secp256k1_addcarryx_u32(&x395, &x396, x394, x343, x377); uint32_t x397; fiat_secp256k1_uint1 x398; - fiat_secp256k1_addcarryx_u32(&x397, &x398, x396, x379, x345); + fiat_secp256k1_addcarryx_u32(&x397, &x398, x396, x345, x379); uint32_t x399; fiat_secp256k1_uint1 x400; - fiat_secp256k1_addcarryx_u32(&x399, &x400, x398, x381, x347); + fiat_secp256k1_addcarryx_u32(&x399, &x400, x398, x347, x381); uint32_t x401; fiat_secp256k1_uint1 x402; - fiat_secp256k1_addcarryx_u32(&x401, &x402, x400, x383, x349); + fiat_secp256k1_addcarryx_u32(&x401, &x402, x400, x349, x383); uint32_t x403; fiat_secp256k1_uint1 x404; - fiat_secp256k1_addcarryx_u32(&x403, &x404, x402, x385, x351); + fiat_secp256k1_addcarryx_u32(&x403, &x404, x402, x351, x385); uint32_t x405; fiat_secp256k1_uint1 x406; - fiat_secp256k1_addcarryx_u32(&x405, &x406, x404, 0x0, x352); + fiat_secp256k1_addcarryx_u32(&x405, &x406, x404, x352, 0x0); uint32_t x407; uint32_t x408; fiat_secp256k1_mulx_u32(&x407, &x408, x4, (arg2[7])); @@ -747,55 +747,55 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x421, &x422, x4, (arg2[0])); uint32_t x423; fiat_secp256k1_uint1 x424; - fiat_secp256k1_addcarryx_u32(&x423, &x424, 0x0, x419, x422); + fiat_secp256k1_addcarryx_u32(&x423, &x424, 0x0, x422, x419); uint32_t x425; fiat_secp256k1_uint1 x426; - fiat_secp256k1_addcarryx_u32(&x425, &x426, x424, x417, x420); + fiat_secp256k1_addcarryx_u32(&x425, &x426, x424, x420, x417); uint32_t x427; fiat_secp256k1_uint1 x428; - fiat_secp256k1_addcarryx_u32(&x427, &x428, x426, x415, x418); + fiat_secp256k1_addcarryx_u32(&x427, &x428, x426, x418, x415); uint32_t x429; fiat_secp256k1_uint1 x430; - fiat_secp256k1_addcarryx_u32(&x429, &x430, x428, x413, x416); + fiat_secp256k1_addcarryx_u32(&x429, &x430, x428, x416, x413); uint32_t x431; fiat_secp256k1_uint1 x432; - fiat_secp256k1_addcarryx_u32(&x431, &x432, x430, x411, x414); + fiat_secp256k1_addcarryx_u32(&x431, &x432, x430, x414, x411); uint32_t x433; fiat_secp256k1_uint1 x434; - fiat_secp256k1_addcarryx_u32(&x433, &x434, x432, x409, x412); + fiat_secp256k1_addcarryx_u32(&x433, &x434, x432, x412, x409); uint32_t x435; fiat_secp256k1_uint1 x436; - fiat_secp256k1_addcarryx_u32(&x435, &x436, x434, x407, x410); + fiat_secp256k1_addcarryx_u32(&x435, &x436, x434, x410, x407); uint32_t x437; fiat_secp256k1_uint1 x438; - fiat_secp256k1_addcarryx_u32(&x437, &x438, x436, 0x0, x408); + fiat_secp256k1_addcarryx_u32(&x437, &x438, x436, x408, 0x0); uint32_t x439; fiat_secp256k1_uint1 x440; - fiat_secp256k1_addcarryx_u32(&x439, &x440, 0x0, x421, x389); + fiat_secp256k1_addcarryx_u32(&x439, &x440, 0x0, x389, x421); uint32_t x441; fiat_secp256k1_uint1 x442; - fiat_secp256k1_addcarryx_u32(&x441, &x442, x440, x423, x391); + fiat_secp256k1_addcarryx_u32(&x441, &x442, x440, x391, x423); uint32_t x443; fiat_secp256k1_uint1 x444; - fiat_secp256k1_addcarryx_u32(&x443, &x444, x442, x425, x393); + fiat_secp256k1_addcarryx_u32(&x443, &x444, x442, x393, x425); uint32_t x445; fiat_secp256k1_uint1 x446; - fiat_secp256k1_addcarryx_u32(&x445, &x446, x444, x427, x395); + fiat_secp256k1_addcarryx_u32(&x445, &x446, x444, x395, x427); uint32_t x447; fiat_secp256k1_uint1 x448; - fiat_secp256k1_addcarryx_u32(&x447, &x448, x446, x429, x397); + fiat_secp256k1_addcarryx_u32(&x447, &x448, x446, x397, x429); uint32_t x449; fiat_secp256k1_uint1 x450; - fiat_secp256k1_addcarryx_u32(&x449, &x450, x448, x431, x399); + fiat_secp256k1_addcarryx_u32(&x449, &x450, x448, x399, x431); uint32_t x451; fiat_secp256k1_uint1 x452; - fiat_secp256k1_addcarryx_u32(&x451, &x452, x450, x433, x401); + fiat_secp256k1_addcarryx_u32(&x451, &x452, x450, x401, x433); uint32_t x453; fiat_secp256k1_uint1 x454; - fiat_secp256k1_addcarryx_u32(&x453, &x454, x452, x435, x403); + fiat_secp256k1_addcarryx_u32(&x453, &x454, x452, x403, x435); uint32_t x455; fiat_secp256k1_uint1 x456; - fiat_secp256k1_addcarryx_u32(&x455, &x456, x454, x437, x405); + fiat_secp256k1_addcarryx_u32(&x455, &x456, x454, x405, x437); uint32_t x457; uint32_t x458; fiat_secp256k1_mulx_u32(&x457, &x458, x439, UINT32_C(0xd2253531)); @@ -825,58 +825,58 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x473, &x474, x457, UINT32_C(0xfffffc2f)); uint32_t x475; fiat_secp256k1_uint1 x476; - fiat_secp256k1_addcarryx_u32(&x475, &x476, 0x0, x471, x474); + fiat_secp256k1_addcarryx_u32(&x475, &x476, 0x0, x474, x471); uint32_t x477; fiat_secp256k1_uint1 x478; - fiat_secp256k1_addcarryx_u32(&x477, &x478, x476, x469, x472); + fiat_secp256k1_addcarryx_u32(&x477, &x478, x476, x472, x469); uint32_t x479; fiat_secp256k1_uint1 x480; - fiat_secp256k1_addcarryx_u32(&x479, &x480, x478, x467, x470); + fiat_secp256k1_addcarryx_u32(&x479, &x480, x478, x470, x467); uint32_t x481; fiat_secp256k1_uint1 x482; - fiat_secp256k1_addcarryx_u32(&x481, &x482, x480, x465, x468); + fiat_secp256k1_addcarryx_u32(&x481, &x482, x480, x468, x465); uint32_t x483; fiat_secp256k1_uint1 x484; - fiat_secp256k1_addcarryx_u32(&x483, &x484, x482, x463, x466); + fiat_secp256k1_addcarryx_u32(&x483, &x484, x482, x466, x463); uint32_t x485; fiat_secp256k1_uint1 x486; - fiat_secp256k1_addcarryx_u32(&x485, &x486, x484, x461, x464); + fiat_secp256k1_addcarryx_u32(&x485, &x486, x484, x464, x461); uint32_t x487; fiat_secp256k1_uint1 x488; - fiat_secp256k1_addcarryx_u32(&x487, &x488, x486, x459, x462); + fiat_secp256k1_addcarryx_u32(&x487, &x488, x486, x462, x459); uint32_t x489; fiat_secp256k1_uint1 x490; - fiat_secp256k1_addcarryx_u32(&x489, &x490, x488, 0x0, x460); + fiat_secp256k1_addcarryx_u32(&x489, &x490, x488, x460, 0x0); uint32_t x491; fiat_secp256k1_uint1 x492; - fiat_secp256k1_addcarryx_u32(&x491, &x492, 0x0, x473, x439); + fiat_secp256k1_addcarryx_u32(&x491, &x492, 0x0, x439, x473); uint32_t x493; fiat_secp256k1_uint1 x494; - fiat_secp256k1_addcarryx_u32(&x493, &x494, x492, x475, x441); + fiat_secp256k1_addcarryx_u32(&x493, &x494, x492, x441, x475); uint32_t x495; fiat_secp256k1_uint1 x496; - fiat_secp256k1_addcarryx_u32(&x495, &x496, x494, x477, x443); + fiat_secp256k1_addcarryx_u32(&x495, &x496, x494, x443, x477); uint32_t x497; fiat_secp256k1_uint1 x498; - fiat_secp256k1_addcarryx_u32(&x497, &x498, x496, x479, x445); + fiat_secp256k1_addcarryx_u32(&x497, &x498, x496, x445, x479); uint32_t x499; fiat_secp256k1_uint1 x500; - fiat_secp256k1_addcarryx_u32(&x499, &x500, x498, x481, x447); + fiat_secp256k1_addcarryx_u32(&x499, &x500, x498, x447, x481); uint32_t x501; fiat_secp256k1_uint1 x502; - fiat_secp256k1_addcarryx_u32(&x501, &x502, x500, x483, x449); + fiat_secp256k1_addcarryx_u32(&x501, &x502, x500, x449, x483); uint32_t x503; fiat_secp256k1_uint1 x504; - fiat_secp256k1_addcarryx_u32(&x503, &x504, x502, x485, x451); + fiat_secp256k1_addcarryx_u32(&x503, &x504, x502, x451, x485); uint32_t x505; fiat_secp256k1_uint1 x506; - fiat_secp256k1_addcarryx_u32(&x505, &x506, x504, x487, x453); + fiat_secp256k1_addcarryx_u32(&x505, &x506, x504, x453, x487); uint32_t x507; fiat_secp256k1_uint1 x508; - fiat_secp256k1_addcarryx_u32(&x507, &x508, x506, x489, x455); + fiat_secp256k1_addcarryx_u32(&x507, &x508, x506, x455, x489); uint32_t x509; fiat_secp256k1_uint1 x510; - fiat_secp256k1_addcarryx_u32(&x509, &x510, x508, 0x0, x456); + fiat_secp256k1_addcarryx_u32(&x509, &x510, x508, x456, 0x0); uint32_t x511; uint32_t x512; fiat_secp256k1_mulx_u32(&x511, &x512, x5, (arg2[7])); @@ -903,55 +903,55 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x525, &x526, x5, (arg2[0])); uint32_t x527; fiat_secp256k1_uint1 x528; - fiat_secp256k1_addcarryx_u32(&x527, &x528, 0x0, x523, x526); + fiat_secp256k1_addcarryx_u32(&x527, &x528, 0x0, x526, x523); uint32_t x529; fiat_secp256k1_uint1 x530; - fiat_secp256k1_addcarryx_u32(&x529, &x530, x528, x521, x524); + fiat_secp256k1_addcarryx_u32(&x529, &x530, x528, x524, x521); uint32_t x531; fiat_secp256k1_uint1 x532; - fiat_secp256k1_addcarryx_u32(&x531, &x532, x530, x519, x522); + fiat_secp256k1_addcarryx_u32(&x531, &x532, x530, x522, x519); uint32_t x533; fiat_secp256k1_uint1 x534; - fiat_secp256k1_addcarryx_u32(&x533, &x534, x532, x517, x520); + fiat_secp256k1_addcarryx_u32(&x533, &x534, x532, x520, x517); uint32_t x535; fiat_secp256k1_uint1 x536; - fiat_secp256k1_addcarryx_u32(&x535, &x536, x534, x515, x518); + fiat_secp256k1_addcarryx_u32(&x535, &x536, x534, x518, x515); uint32_t x537; fiat_secp256k1_uint1 x538; - fiat_secp256k1_addcarryx_u32(&x537, &x538, x536, x513, x516); + fiat_secp256k1_addcarryx_u32(&x537, &x538, x536, x516, x513); uint32_t x539; fiat_secp256k1_uint1 x540; - fiat_secp256k1_addcarryx_u32(&x539, &x540, x538, x511, x514); + fiat_secp256k1_addcarryx_u32(&x539, &x540, x538, x514, x511); uint32_t x541; fiat_secp256k1_uint1 x542; - fiat_secp256k1_addcarryx_u32(&x541, &x542, x540, 0x0, x512); + fiat_secp256k1_addcarryx_u32(&x541, &x542, x540, x512, 0x0); uint32_t x543; fiat_secp256k1_uint1 x544; - fiat_secp256k1_addcarryx_u32(&x543, &x544, 0x0, x525, x493); + fiat_secp256k1_addcarryx_u32(&x543, &x544, 0x0, x493, x525); uint32_t x545; fiat_secp256k1_uint1 x546; - fiat_secp256k1_addcarryx_u32(&x545, &x546, x544, x527, x495); + fiat_secp256k1_addcarryx_u32(&x545, &x546, x544, x495, x527); uint32_t x547; fiat_secp256k1_uint1 x548; - fiat_secp256k1_addcarryx_u32(&x547, &x548, x546, x529, x497); + fiat_secp256k1_addcarryx_u32(&x547, &x548, x546, x497, x529); uint32_t x549; fiat_secp256k1_uint1 x550; - fiat_secp256k1_addcarryx_u32(&x549, &x550, x548, x531, x499); + fiat_secp256k1_addcarryx_u32(&x549, &x550, x548, x499, x531); uint32_t x551; fiat_secp256k1_uint1 x552; - fiat_secp256k1_addcarryx_u32(&x551, &x552, x550, x533, x501); + fiat_secp256k1_addcarryx_u32(&x551, &x552, x550, x501, x533); uint32_t x553; fiat_secp256k1_uint1 x554; - fiat_secp256k1_addcarryx_u32(&x553, &x554, x552, x535, x503); + fiat_secp256k1_addcarryx_u32(&x553, &x554, x552, x503, x535); uint32_t x555; fiat_secp256k1_uint1 x556; - fiat_secp256k1_addcarryx_u32(&x555, &x556, x554, x537, x505); + fiat_secp256k1_addcarryx_u32(&x555, &x556, x554, x505, x537); uint32_t x557; fiat_secp256k1_uint1 x558; - fiat_secp256k1_addcarryx_u32(&x557, &x558, x556, x539, x507); + fiat_secp256k1_addcarryx_u32(&x557, &x558, x556, x507, x539); uint32_t x559; fiat_secp256k1_uint1 x560; - fiat_secp256k1_addcarryx_u32(&x559, &x560, x558, x541, x509); + fiat_secp256k1_addcarryx_u32(&x559, &x560, x558, x509, x541); uint32_t x561; uint32_t x562; fiat_secp256k1_mulx_u32(&x561, &x562, x543, UINT32_C(0xd2253531)); @@ -981,58 +981,58 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x577, &x578, x561, UINT32_C(0xfffffc2f)); uint32_t x579; fiat_secp256k1_uint1 x580; - fiat_secp256k1_addcarryx_u32(&x579, &x580, 0x0, x575, x578); + fiat_secp256k1_addcarryx_u32(&x579, &x580, 0x0, x578, x575); uint32_t x581; fiat_secp256k1_uint1 x582; - fiat_secp256k1_addcarryx_u32(&x581, &x582, x580, x573, x576); + fiat_secp256k1_addcarryx_u32(&x581, &x582, x580, x576, x573); uint32_t x583; fiat_secp256k1_uint1 x584; - fiat_secp256k1_addcarryx_u32(&x583, &x584, x582, x571, x574); + fiat_secp256k1_addcarryx_u32(&x583, &x584, x582, x574, x571); uint32_t x585; fiat_secp256k1_uint1 x586; - fiat_secp256k1_addcarryx_u32(&x585, &x586, x584, x569, x572); + fiat_secp256k1_addcarryx_u32(&x585, &x586, x584, x572, x569); uint32_t x587; fiat_secp256k1_uint1 x588; - fiat_secp256k1_addcarryx_u32(&x587, &x588, x586, x567, x570); + fiat_secp256k1_addcarryx_u32(&x587, &x588, x586, x570, x567); uint32_t x589; fiat_secp256k1_uint1 x590; - fiat_secp256k1_addcarryx_u32(&x589, &x590, x588, x565, x568); + fiat_secp256k1_addcarryx_u32(&x589, &x590, x588, x568, x565); uint32_t x591; fiat_secp256k1_uint1 x592; - fiat_secp256k1_addcarryx_u32(&x591, &x592, x590, x563, x566); + fiat_secp256k1_addcarryx_u32(&x591, &x592, x590, x566, x563); uint32_t x593; fiat_secp256k1_uint1 x594; - fiat_secp256k1_addcarryx_u32(&x593, &x594, x592, 0x0, x564); + fiat_secp256k1_addcarryx_u32(&x593, &x594, x592, x564, 0x0); uint32_t x595; fiat_secp256k1_uint1 x596; - fiat_secp256k1_addcarryx_u32(&x595, &x596, 0x0, x577, x543); + fiat_secp256k1_addcarryx_u32(&x595, &x596, 0x0, x543, x577); uint32_t x597; fiat_secp256k1_uint1 x598; - fiat_secp256k1_addcarryx_u32(&x597, &x598, x596, x579, x545); + fiat_secp256k1_addcarryx_u32(&x597, &x598, x596, x545, x579); uint32_t x599; fiat_secp256k1_uint1 x600; - fiat_secp256k1_addcarryx_u32(&x599, &x600, x598, x581, x547); + fiat_secp256k1_addcarryx_u32(&x599, &x600, x598, x547, x581); uint32_t x601; fiat_secp256k1_uint1 x602; - fiat_secp256k1_addcarryx_u32(&x601, &x602, x600, x583, x549); + fiat_secp256k1_addcarryx_u32(&x601, &x602, x600, x549, x583); uint32_t x603; fiat_secp256k1_uint1 x604; - fiat_secp256k1_addcarryx_u32(&x603, &x604, x602, x585, x551); + fiat_secp256k1_addcarryx_u32(&x603, &x604, x602, x551, x585); uint32_t x605; fiat_secp256k1_uint1 x606; - fiat_secp256k1_addcarryx_u32(&x605, &x606, x604, x587, x553); + fiat_secp256k1_addcarryx_u32(&x605, &x606, x604, x553, x587); uint32_t x607; fiat_secp256k1_uint1 x608; - fiat_secp256k1_addcarryx_u32(&x607, &x608, x606, x589, x555); + fiat_secp256k1_addcarryx_u32(&x607, &x608, x606, x555, x589); uint32_t x609; fiat_secp256k1_uint1 x610; - fiat_secp256k1_addcarryx_u32(&x609, &x610, x608, x591, x557); + fiat_secp256k1_addcarryx_u32(&x609, &x610, x608, x557, x591); uint32_t x611; fiat_secp256k1_uint1 x612; - fiat_secp256k1_addcarryx_u32(&x611, &x612, x610, x593, x559); + fiat_secp256k1_addcarryx_u32(&x611, &x612, x610, x559, x593); uint32_t x613; fiat_secp256k1_uint1 x614; - fiat_secp256k1_addcarryx_u32(&x613, &x614, x612, 0x0, x560); + fiat_secp256k1_addcarryx_u32(&x613, &x614, x612, x560, 0x0); uint32_t x615; uint32_t x616; fiat_secp256k1_mulx_u32(&x615, &x616, x6, (arg2[7])); @@ -1059,55 +1059,55 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x629, &x630, x6, (arg2[0])); uint32_t x631; fiat_secp256k1_uint1 x632; - fiat_secp256k1_addcarryx_u32(&x631, &x632, 0x0, x627, x630); + fiat_secp256k1_addcarryx_u32(&x631, &x632, 0x0, x630, x627); uint32_t x633; fiat_secp256k1_uint1 x634; - fiat_secp256k1_addcarryx_u32(&x633, &x634, x632, x625, x628); + fiat_secp256k1_addcarryx_u32(&x633, &x634, x632, x628, x625); uint32_t x635; fiat_secp256k1_uint1 x636; - fiat_secp256k1_addcarryx_u32(&x635, &x636, x634, x623, x626); + fiat_secp256k1_addcarryx_u32(&x635, &x636, x634, x626, x623); uint32_t x637; fiat_secp256k1_uint1 x638; - fiat_secp256k1_addcarryx_u32(&x637, &x638, x636, x621, x624); + fiat_secp256k1_addcarryx_u32(&x637, &x638, x636, x624, x621); uint32_t x639; fiat_secp256k1_uint1 x640; - fiat_secp256k1_addcarryx_u32(&x639, &x640, x638, x619, x622); + fiat_secp256k1_addcarryx_u32(&x639, &x640, x638, x622, x619); uint32_t x641; fiat_secp256k1_uint1 x642; - fiat_secp256k1_addcarryx_u32(&x641, &x642, x640, x617, x620); + fiat_secp256k1_addcarryx_u32(&x641, &x642, x640, x620, x617); uint32_t x643; fiat_secp256k1_uint1 x644; - fiat_secp256k1_addcarryx_u32(&x643, &x644, x642, x615, x618); + fiat_secp256k1_addcarryx_u32(&x643, &x644, x642, x618, x615); uint32_t x645; fiat_secp256k1_uint1 x646; - fiat_secp256k1_addcarryx_u32(&x645, &x646, x644, 0x0, x616); + fiat_secp256k1_addcarryx_u32(&x645, &x646, x644, x616, 0x0); uint32_t x647; fiat_secp256k1_uint1 x648; - fiat_secp256k1_addcarryx_u32(&x647, &x648, 0x0, x629, x597); + fiat_secp256k1_addcarryx_u32(&x647, &x648, 0x0, x597, x629); uint32_t x649; fiat_secp256k1_uint1 x650; - fiat_secp256k1_addcarryx_u32(&x649, &x650, x648, x631, x599); + fiat_secp256k1_addcarryx_u32(&x649, &x650, x648, x599, x631); uint32_t x651; fiat_secp256k1_uint1 x652; - fiat_secp256k1_addcarryx_u32(&x651, &x652, x650, x633, x601); + fiat_secp256k1_addcarryx_u32(&x651, &x652, x650, x601, x633); uint32_t x653; fiat_secp256k1_uint1 x654; - fiat_secp256k1_addcarryx_u32(&x653, &x654, x652, x635, x603); + fiat_secp256k1_addcarryx_u32(&x653, &x654, x652, x603, x635); uint32_t x655; fiat_secp256k1_uint1 x656; - fiat_secp256k1_addcarryx_u32(&x655, &x656, x654, x637, x605); + fiat_secp256k1_addcarryx_u32(&x655, &x656, x654, x605, x637); uint32_t x657; fiat_secp256k1_uint1 x658; - fiat_secp256k1_addcarryx_u32(&x657, &x658, x656, x639, x607); + fiat_secp256k1_addcarryx_u32(&x657, &x658, x656, x607, x639); uint32_t x659; fiat_secp256k1_uint1 x660; - fiat_secp256k1_addcarryx_u32(&x659, &x660, x658, x641, x609); + fiat_secp256k1_addcarryx_u32(&x659, &x660, x658, x609, x641); uint32_t x661; fiat_secp256k1_uint1 x662; - fiat_secp256k1_addcarryx_u32(&x661, &x662, x660, x643, x611); + fiat_secp256k1_addcarryx_u32(&x661, &x662, x660, x611, x643); uint32_t x663; fiat_secp256k1_uint1 x664; - fiat_secp256k1_addcarryx_u32(&x663, &x664, x662, x645, x613); + fiat_secp256k1_addcarryx_u32(&x663, &x664, x662, x613, x645); uint32_t x665; uint32_t x666; fiat_secp256k1_mulx_u32(&x665, &x666, x647, UINT32_C(0xd2253531)); @@ -1137,58 +1137,58 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x681, &x682, x665, UINT32_C(0xfffffc2f)); uint32_t x683; fiat_secp256k1_uint1 x684; - fiat_secp256k1_addcarryx_u32(&x683, &x684, 0x0, x679, x682); + fiat_secp256k1_addcarryx_u32(&x683, &x684, 0x0, x682, x679); uint32_t x685; fiat_secp256k1_uint1 x686; - fiat_secp256k1_addcarryx_u32(&x685, &x686, x684, x677, x680); + fiat_secp256k1_addcarryx_u32(&x685, &x686, x684, x680, x677); uint32_t x687; fiat_secp256k1_uint1 x688; - fiat_secp256k1_addcarryx_u32(&x687, &x688, x686, x675, x678); + fiat_secp256k1_addcarryx_u32(&x687, &x688, x686, x678, x675); uint32_t x689; fiat_secp256k1_uint1 x690; - fiat_secp256k1_addcarryx_u32(&x689, &x690, x688, x673, x676); + fiat_secp256k1_addcarryx_u32(&x689, &x690, x688, x676, x673); uint32_t x691; fiat_secp256k1_uint1 x692; - fiat_secp256k1_addcarryx_u32(&x691, &x692, x690, x671, x674); + fiat_secp256k1_addcarryx_u32(&x691, &x692, x690, x674, x671); uint32_t x693; fiat_secp256k1_uint1 x694; - fiat_secp256k1_addcarryx_u32(&x693, &x694, x692, x669, x672); + fiat_secp256k1_addcarryx_u32(&x693, &x694, x692, x672, x669); uint32_t x695; fiat_secp256k1_uint1 x696; - fiat_secp256k1_addcarryx_u32(&x695, &x696, x694, x667, x670); + fiat_secp256k1_addcarryx_u32(&x695, &x696, x694, x670, x667); uint32_t x697; fiat_secp256k1_uint1 x698; - fiat_secp256k1_addcarryx_u32(&x697, &x698, x696, 0x0, x668); + fiat_secp256k1_addcarryx_u32(&x697, &x698, x696, x668, 0x0); uint32_t x699; fiat_secp256k1_uint1 x700; - fiat_secp256k1_addcarryx_u32(&x699, &x700, 0x0, x681, x647); + fiat_secp256k1_addcarryx_u32(&x699, &x700, 0x0, x647, x681); uint32_t x701; fiat_secp256k1_uint1 x702; - fiat_secp256k1_addcarryx_u32(&x701, &x702, x700, x683, x649); + fiat_secp256k1_addcarryx_u32(&x701, &x702, x700, x649, x683); uint32_t x703; fiat_secp256k1_uint1 x704; - fiat_secp256k1_addcarryx_u32(&x703, &x704, x702, x685, x651); + fiat_secp256k1_addcarryx_u32(&x703, &x704, x702, x651, x685); uint32_t x705; fiat_secp256k1_uint1 x706; - fiat_secp256k1_addcarryx_u32(&x705, &x706, x704, x687, x653); + fiat_secp256k1_addcarryx_u32(&x705, &x706, x704, x653, x687); uint32_t x707; fiat_secp256k1_uint1 x708; - fiat_secp256k1_addcarryx_u32(&x707, &x708, x706, x689, x655); + fiat_secp256k1_addcarryx_u32(&x707, &x708, x706, x655, x689); uint32_t x709; fiat_secp256k1_uint1 x710; - fiat_secp256k1_addcarryx_u32(&x709, &x710, x708, x691, x657); + fiat_secp256k1_addcarryx_u32(&x709, &x710, x708, x657, x691); uint32_t x711; fiat_secp256k1_uint1 x712; - fiat_secp256k1_addcarryx_u32(&x711, &x712, x710, x693, x659); + fiat_secp256k1_addcarryx_u32(&x711, &x712, x710, x659, x693); uint32_t x713; fiat_secp256k1_uint1 x714; - fiat_secp256k1_addcarryx_u32(&x713, &x714, x712, x695, x661); + fiat_secp256k1_addcarryx_u32(&x713, &x714, x712, x661, x695); uint32_t x715; fiat_secp256k1_uint1 x716; - fiat_secp256k1_addcarryx_u32(&x715, &x716, x714, x697, x663); + fiat_secp256k1_addcarryx_u32(&x715, &x716, x714, x663, x697); uint32_t x717; fiat_secp256k1_uint1 x718; - fiat_secp256k1_addcarryx_u32(&x717, &x718, x716, 0x0, x664); + fiat_secp256k1_addcarryx_u32(&x717, &x718, x716, x664, 0x0); uint32_t x719; uint32_t x720; fiat_secp256k1_mulx_u32(&x719, &x720, x7, (arg2[7])); @@ -1215,55 +1215,55 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x733, &x734, x7, (arg2[0])); uint32_t x735; fiat_secp256k1_uint1 x736; - fiat_secp256k1_addcarryx_u32(&x735, &x736, 0x0, x731, x734); + fiat_secp256k1_addcarryx_u32(&x735, &x736, 0x0, x734, x731); uint32_t x737; fiat_secp256k1_uint1 x738; - fiat_secp256k1_addcarryx_u32(&x737, &x738, x736, x729, x732); + fiat_secp256k1_addcarryx_u32(&x737, &x738, x736, x732, x729); uint32_t x739; fiat_secp256k1_uint1 x740; - fiat_secp256k1_addcarryx_u32(&x739, &x740, x738, x727, x730); + fiat_secp256k1_addcarryx_u32(&x739, &x740, x738, x730, x727); uint32_t x741; fiat_secp256k1_uint1 x742; - fiat_secp256k1_addcarryx_u32(&x741, &x742, x740, x725, x728); + fiat_secp256k1_addcarryx_u32(&x741, &x742, x740, x728, x725); uint32_t x743; fiat_secp256k1_uint1 x744; - fiat_secp256k1_addcarryx_u32(&x743, &x744, x742, x723, x726); + fiat_secp256k1_addcarryx_u32(&x743, &x744, x742, x726, x723); uint32_t x745; fiat_secp256k1_uint1 x746; - fiat_secp256k1_addcarryx_u32(&x745, &x746, x744, x721, x724); + fiat_secp256k1_addcarryx_u32(&x745, &x746, x744, x724, x721); uint32_t x747; fiat_secp256k1_uint1 x748; - fiat_secp256k1_addcarryx_u32(&x747, &x748, x746, x719, x722); + fiat_secp256k1_addcarryx_u32(&x747, &x748, x746, x722, x719); uint32_t x749; fiat_secp256k1_uint1 x750; - fiat_secp256k1_addcarryx_u32(&x749, &x750, x748, 0x0, x720); + fiat_secp256k1_addcarryx_u32(&x749, &x750, x748, x720, 0x0); uint32_t x751; fiat_secp256k1_uint1 x752; - fiat_secp256k1_addcarryx_u32(&x751, &x752, 0x0, x733, x701); + fiat_secp256k1_addcarryx_u32(&x751, &x752, 0x0, x701, x733); uint32_t x753; fiat_secp256k1_uint1 x754; - fiat_secp256k1_addcarryx_u32(&x753, &x754, x752, x735, x703); + fiat_secp256k1_addcarryx_u32(&x753, &x754, x752, x703, x735); uint32_t x755; fiat_secp256k1_uint1 x756; - fiat_secp256k1_addcarryx_u32(&x755, &x756, x754, x737, x705); + fiat_secp256k1_addcarryx_u32(&x755, &x756, x754, x705, x737); uint32_t x757; fiat_secp256k1_uint1 x758; - fiat_secp256k1_addcarryx_u32(&x757, &x758, x756, x739, x707); + fiat_secp256k1_addcarryx_u32(&x757, &x758, x756, x707, x739); uint32_t x759; fiat_secp256k1_uint1 x760; - fiat_secp256k1_addcarryx_u32(&x759, &x760, x758, x741, x709); + fiat_secp256k1_addcarryx_u32(&x759, &x760, x758, x709, x741); uint32_t x761; fiat_secp256k1_uint1 x762; - fiat_secp256k1_addcarryx_u32(&x761, &x762, x760, x743, x711); + fiat_secp256k1_addcarryx_u32(&x761, &x762, x760, x711, x743); uint32_t x763; fiat_secp256k1_uint1 x764; - fiat_secp256k1_addcarryx_u32(&x763, &x764, x762, x745, x713); + fiat_secp256k1_addcarryx_u32(&x763, &x764, x762, x713, x745); uint32_t x765; fiat_secp256k1_uint1 x766; - fiat_secp256k1_addcarryx_u32(&x765, &x766, x764, x747, x715); + fiat_secp256k1_addcarryx_u32(&x765, &x766, x764, x715, x747); uint32_t x767; fiat_secp256k1_uint1 x768; - fiat_secp256k1_addcarryx_u32(&x767, &x768, x766, x749, x717); + fiat_secp256k1_addcarryx_u32(&x767, &x768, x766, x717, x749); uint32_t x769; uint32_t x770; fiat_secp256k1_mulx_u32(&x769, &x770, x751, UINT32_C(0xd2253531)); @@ -1293,58 +1293,58 @@ static void fiat_secp256k1_mul(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_mulx_u32(&x785, &x786, x769, UINT32_C(0xfffffc2f)); uint32_t x787; fiat_secp256k1_uint1 x788; - fiat_secp256k1_addcarryx_u32(&x787, &x788, 0x0, x783, x786); + fiat_secp256k1_addcarryx_u32(&x787, &x788, 0x0, x786, x783); uint32_t x789; fiat_secp256k1_uint1 x790; - fiat_secp256k1_addcarryx_u32(&x789, &x790, x788, x781, x784); + fiat_secp256k1_addcarryx_u32(&x789, &x790, x788, x784, x781); uint32_t x791; fiat_secp256k1_uint1 x792; - fiat_secp256k1_addcarryx_u32(&x791, &x792, x790, x779, x782); + fiat_secp256k1_addcarryx_u32(&x791, &x792, x790, x782, x779); uint32_t x793; fiat_secp256k1_uint1 x794; - fiat_secp256k1_addcarryx_u32(&x793, &x794, x792, x777, x780); + fiat_secp256k1_addcarryx_u32(&x793, &x794, x792, x780, x777); uint32_t x795; fiat_secp256k1_uint1 x796; - fiat_secp256k1_addcarryx_u32(&x795, &x796, x794, x775, x778); + fiat_secp256k1_addcarryx_u32(&x795, &x796, x794, x778, x775); uint32_t x797; fiat_secp256k1_uint1 x798; - fiat_secp256k1_addcarryx_u32(&x797, &x798, x796, x773, x776); + fiat_secp256k1_addcarryx_u32(&x797, &x798, x796, x776, x773); uint32_t x799; fiat_secp256k1_uint1 x800; - fiat_secp256k1_addcarryx_u32(&x799, &x800, x798, x771, x774); + fiat_secp256k1_addcarryx_u32(&x799, &x800, x798, x774, x771); uint32_t x801; fiat_secp256k1_uint1 x802; - fiat_secp256k1_addcarryx_u32(&x801, &x802, x800, 0x0, x772); + fiat_secp256k1_addcarryx_u32(&x801, &x802, x800, x772, 0x0); uint32_t x803; fiat_secp256k1_uint1 x804; - fiat_secp256k1_addcarryx_u32(&x803, &x804, 0x0, x785, x751); + fiat_secp256k1_addcarryx_u32(&x803, &x804, 0x0, x751, x785); uint32_t x805; fiat_secp256k1_uint1 x806; - fiat_secp256k1_addcarryx_u32(&x805, &x806, x804, x787, x753); + fiat_secp256k1_addcarryx_u32(&x805, &x806, x804, x753, x787); uint32_t x807; fiat_secp256k1_uint1 x808; - fiat_secp256k1_addcarryx_u32(&x807, &x808, x806, x789, x755); + fiat_secp256k1_addcarryx_u32(&x807, &x808, x806, x755, x789); uint32_t x809; fiat_secp256k1_uint1 x810; - fiat_secp256k1_addcarryx_u32(&x809, &x810, x808, x791, x757); + fiat_secp256k1_addcarryx_u32(&x809, &x810, x808, x757, x791); uint32_t x811; fiat_secp256k1_uint1 x812; - fiat_secp256k1_addcarryx_u32(&x811, &x812, x810, x793, x759); + fiat_secp256k1_addcarryx_u32(&x811, &x812, x810, x759, x793); uint32_t x813; fiat_secp256k1_uint1 x814; - fiat_secp256k1_addcarryx_u32(&x813, &x814, x812, x795, x761); + fiat_secp256k1_addcarryx_u32(&x813, &x814, x812, x761, x795); uint32_t x815; fiat_secp256k1_uint1 x816; - fiat_secp256k1_addcarryx_u32(&x815, &x816, x814, x797, x763); + fiat_secp256k1_addcarryx_u32(&x815, &x816, x814, x763, x797); uint32_t x817; fiat_secp256k1_uint1 x818; - fiat_secp256k1_addcarryx_u32(&x817, &x818, x816, x799, x765); + fiat_secp256k1_addcarryx_u32(&x817, &x818, x816, x765, x799); uint32_t x819; fiat_secp256k1_uint1 x820; - fiat_secp256k1_addcarryx_u32(&x819, &x820, x818, x801, x767); + fiat_secp256k1_addcarryx_u32(&x819, &x820, x818, x767, x801); uint32_t x821; fiat_secp256k1_uint1 x822; - fiat_secp256k1_addcarryx_u32(&x821, &x822, x820, 0x0, x768); + fiat_secp256k1_addcarryx_u32(&x821, &x822, x820, x768, 0x0); uint32_t x823; fiat_secp256k1_uint1 x824; fiat_secp256k1_subborrowx_u32(&x823, &x824, 0x0, x805, UINT32_C(0xfffffc2f)); @@ -1446,28 +1446,28 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x23, &x24, x8, (arg1[0])); uint32_t x25; fiat_secp256k1_uint1 x26; - fiat_secp256k1_addcarryx_u32(&x25, &x26, 0x0, x21, x24); + fiat_secp256k1_addcarryx_u32(&x25, &x26, 0x0, x24, x21); uint32_t x27; fiat_secp256k1_uint1 x28; - fiat_secp256k1_addcarryx_u32(&x27, &x28, x26, x19, x22); + fiat_secp256k1_addcarryx_u32(&x27, &x28, x26, x22, x19); uint32_t x29; fiat_secp256k1_uint1 x30; - fiat_secp256k1_addcarryx_u32(&x29, &x30, x28, x17, x20); + fiat_secp256k1_addcarryx_u32(&x29, &x30, x28, x20, x17); uint32_t x31; fiat_secp256k1_uint1 x32; - fiat_secp256k1_addcarryx_u32(&x31, &x32, x30, x15, x18); + fiat_secp256k1_addcarryx_u32(&x31, &x32, x30, x18, x15); uint32_t x33; fiat_secp256k1_uint1 x34; - fiat_secp256k1_addcarryx_u32(&x33, &x34, x32, x13, x16); + fiat_secp256k1_addcarryx_u32(&x33, &x34, x32, x16, x13); uint32_t x35; fiat_secp256k1_uint1 x36; - fiat_secp256k1_addcarryx_u32(&x35, &x36, x34, x11, x14); + fiat_secp256k1_addcarryx_u32(&x35, &x36, x34, x14, x11); uint32_t x37; fiat_secp256k1_uint1 x38; - fiat_secp256k1_addcarryx_u32(&x37, &x38, x36, x9, x12); + fiat_secp256k1_addcarryx_u32(&x37, &x38, x36, x12, x9); uint32_t x39; fiat_secp256k1_uint1 x40; - fiat_secp256k1_addcarryx_u32(&x39, &x40, x38, 0x0, x10); + fiat_secp256k1_addcarryx_u32(&x39, &x40, x38, x10, 0x0); uint32_t x41; uint32_t x42; fiat_secp256k1_mulx_u32(&x41, &x42, x23, UINT32_C(0xd2253531)); @@ -1497,55 +1497,55 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x57, &x58, x41, UINT32_C(0xfffffc2f)); uint32_t x59; fiat_secp256k1_uint1 x60; - fiat_secp256k1_addcarryx_u32(&x59, &x60, 0x0, x55, x58); + fiat_secp256k1_addcarryx_u32(&x59, &x60, 0x0, x58, x55); uint32_t x61; fiat_secp256k1_uint1 x62; - fiat_secp256k1_addcarryx_u32(&x61, &x62, x60, x53, x56); + fiat_secp256k1_addcarryx_u32(&x61, &x62, x60, x56, x53); uint32_t x63; fiat_secp256k1_uint1 x64; - fiat_secp256k1_addcarryx_u32(&x63, &x64, x62, x51, x54); + fiat_secp256k1_addcarryx_u32(&x63, &x64, x62, x54, x51); uint32_t x65; fiat_secp256k1_uint1 x66; - fiat_secp256k1_addcarryx_u32(&x65, &x66, x64, x49, x52); + fiat_secp256k1_addcarryx_u32(&x65, &x66, x64, x52, x49); uint32_t x67; fiat_secp256k1_uint1 x68; - fiat_secp256k1_addcarryx_u32(&x67, &x68, x66, x47, x50); + fiat_secp256k1_addcarryx_u32(&x67, &x68, x66, x50, x47); uint32_t x69; fiat_secp256k1_uint1 x70; - fiat_secp256k1_addcarryx_u32(&x69, &x70, x68, x45, x48); + fiat_secp256k1_addcarryx_u32(&x69, &x70, x68, x48, x45); uint32_t x71; fiat_secp256k1_uint1 x72; - fiat_secp256k1_addcarryx_u32(&x71, &x72, x70, x43, x46); + fiat_secp256k1_addcarryx_u32(&x71, &x72, x70, x46, x43); uint32_t x73; fiat_secp256k1_uint1 x74; - fiat_secp256k1_addcarryx_u32(&x73, &x74, x72, 0x0, x44); + fiat_secp256k1_addcarryx_u32(&x73, &x74, x72, x44, 0x0); uint32_t x75; fiat_secp256k1_uint1 x76; - fiat_secp256k1_addcarryx_u32(&x75, &x76, 0x0, x57, x23); + fiat_secp256k1_addcarryx_u32(&x75, &x76, 0x0, x23, x57); uint32_t x77; fiat_secp256k1_uint1 x78; - fiat_secp256k1_addcarryx_u32(&x77, &x78, x76, x59, x25); + fiat_secp256k1_addcarryx_u32(&x77, &x78, x76, x25, x59); uint32_t x79; fiat_secp256k1_uint1 x80; - fiat_secp256k1_addcarryx_u32(&x79, &x80, x78, x61, x27); + fiat_secp256k1_addcarryx_u32(&x79, &x80, x78, x27, x61); uint32_t x81; fiat_secp256k1_uint1 x82; - fiat_secp256k1_addcarryx_u32(&x81, &x82, x80, x63, x29); + fiat_secp256k1_addcarryx_u32(&x81, &x82, x80, x29, x63); uint32_t x83; fiat_secp256k1_uint1 x84; - fiat_secp256k1_addcarryx_u32(&x83, &x84, x82, x65, x31); + fiat_secp256k1_addcarryx_u32(&x83, &x84, x82, x31, x65); uint32_t x85; fiat_secp256k1_uint1 x86; - fiat_secp256k1_addcarryx_u32(&x85, &x86, x84, x67, x33); + fiat_secp256k1_addcarryx_u32(&x85, &x86, x84, x33, x67); uint32_t x87; fiat_secp256k1_uint1 x88; - fiat_secp256k1_addcarryx_u32(&x87, &x88, x86, x69, x35); + fiat_secp256k1_addcarryx_u32(&x87, &x88, x86, x35, x69); uint32_t x89; fiat_secp256k1_uint1 x90; - fiat_secp256k1_addcarryx_u32(&x89, &x90, x88, x71, x37); + fiat_secp256k1_addcarryx_u32(&x89, &x90, x88, x37, x71); uint32_t x91; fiat_secp256k1_uint1 x92; - fiat_secp256k1_addcarryx_u32(&x91, &x92, x90, x73, x39); + fiat_secp256k1_addcarryx_u32(&x91, &x92, x90, x39, x73); uint32_t x93; fiat_secp256k1_uint1 x94; fiat_secp256k1_addcarryx_u32(&x93, &x94, x92, 0x0, 0x0); @@ -1575,55 +1575,55 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x109, &x110, x1, (arg1[0])); uint32_t x111; fiat_secp256k1_uint1 x112; - fiat_secp256k1_addcarryx_u32(&x111, &x112, 0x0, x107, x110); + fiat_secp256k1_addcarryx_u32(&x111, &x112, 0x0, x110, x107); uint32_t x113; fiat_secp256k1_uint1 x114; - fiat_secp256k1_addcarryx_u32(&x113, &x114, x112, x105, x108); + fiat_secp256k1_addcarryx_u32(&x113, &x114, x112, x108, x105); uint32_t x115; fiat_secp256k1_uint1 x116; - fiat_secp256k1_addcarryx_u32(&x115, &x116, x114, x103, x106); + fiat_secp256k1_addcarryx_u32(&x115, &x116, x114, x106, x103); uint32_t x117; fiat_secp256k1_uint1 x118; - fiat_secp256k1_addcarryx_u32(&x117, &x118, x116, x101, x104); + fiat_secp256k1_addcarryx_u32(&x117, &x118, x116, x104, x101); uint32_t x119; fiat_secp256k1_uint1 x120; - fiat_secp256k1_addcarryx_u32(&x119, &x120, x118, x99, x102); + fiat_secp256k1_addcarryx_u32(&x119, &x120, x118, x102, x99); uint32_t x121; fiat_secp256k1_uint1 x122; - fiat_secp256k1_addcarryx_u32(&x121, &x122, x120, x97, x100); + fiat_secp256k1_addcarryx_u32(&x121, &x122, x120, x100, x97); uint32_t x123; fiat_secp256k1_uint1 x124; - fiat_secp256k1_addcarryx_u32(&x123, &x124, x122, x95, x98); + fiat_secp256k1_addcarryx_u32(&x123, &x124, x122, x98, x95); uint32_t x125; fiat_secp256k1_uint1 x126; - fiat_secp256k1_addcarryx_u32(&x125, &x126, x124, 0x0, x96); + fiat_secp256k1_addcarryx_u32(&x125, &x126, x124, x96, 0x0); uint32_t x127; fiat_secp256k1_uint1 x128; - fiat_secp256k1_addcarryx_u32(&x127, &x128, 0x0, x109, x77); + fiat_secp256k1_addcarryx_u32(&x127, &x128, 0x0, x77, x109); uint32_t x129; fiat_secp256k1_uint1 x130; - fiat_secp256k1_addcarryx_u32(&x129, &x130, x128, x111, x79); + fiat_secp256k1_addcarryx_u32(&x129, &x130, x128, x79, x111); uint32_t x131; fiat_secp256k1_uint1 x132; - fiat_secp256k1_addcarryx_u32(&x131, &x132, x130, x113, x81); + fiat_secp256k1_addcarryx_u32(&x131, &x132, x130, x81, x113); uint32_t x133; fiat_secp256k1_uint1 x134; - fiat_secp256k1_addcarryx_u32(&x133, &x134, x132, x115, x83); + fiat_secp256k1_addcarryx_u32(&x133, &x134, x132, x83, x115); uint32_t x135; fiat_secp256k1_uint1 x136; - fiat_secp256k1_addcarryx_u32(&x135, &x136, x134, x117, x85); + fiat_secp256k1_addcarryx_u32(&x135, &x136, x134, x85, x117); uint32_t x137; fiat_secp256k1_uint1 x138; - fiat_secp256k1_addcarryx_u32(&x137, &x138, x136, x119, x87); + fiat_secp256k1_addcarryx_u32(&x137, &x138, x136, x87, x119); uint32_t x139; fiat_secp256k1_uint1 x140; - fiat_secp256k1_addcarryx_u32(&x139, &x140, x138, x121, x89); + fiat_secp256k1_addcarryx_u32(&x139, &x140, x138, x89, x121); uint32_t x141; fiat_secp256k1_uint1 x142; - fiat_secp256k1_addcarryx_u32(&x141, &x142, x140, x123, x91); + fiat_secp256k1_addcarryx_u32(&x141, &x142, x140, x91, x123); uint32_t x143; fiat_secp256k1_uint1 x144; - fiat_secp256k1_addcarryx_u32(&x143, &x144, x142, x125, (fiat_secp256k1_uint1)x93); + fiat_secp256k1_addcarryx_u32(&x143, &x144, x142, (fiat_secp256k1_uint1)x93, x125); uint32_t x145; uint32_t x146; fiat_secp256k1_mulx_u32(&x145, &x146, x127, UINT32_C(0xd2253531)); @@ -1653,58 +1653,58 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x161, &x162, x145, UINT32_C(0xfffffc2f)); uint32_t x163; fiat_secp256k1_uint1 x164; - fiat_secp256k1_addcarryx_u32(&x163, &x164, 0x0, x159, x162); + fiat_secp256k1_addcarryx_u32(&x163, &x164, 0x0, x162, x159); uint32_t x165; fiat_secp256k1_uint1 x166; - fiat_secp256k1_addcarryx_u32(&x165, &x166, x164, x157, x160); + fiat_secp256k1_addcarryx_u32(&x165, &x166, x164, x160, x157); uint32_t x167; fiat_secp256k1_uint1 x168; - fiat_secp256k1_addcarryx_u32(&x167, &x168, x166, x155, x158); + fiat_secp256k1_addcarryx_u32(&x167, &x168, x166, x158, x155); uint32_t x169; fiat_secp256k1_uint1 x170; - fiat_secp256k1_addcarryx_u32(&x169, &x170, x168, x153, x156); + fiat_secp256k1_addcarryx_u32(&x169, &x170, x168, x156, x153); uint32_t x171; fiat_secp256k1_uint1 x172; - fiat_secp256k1_addcarryx_u32(&x171, &x172, x170, x151, x154); + fiat_secp256k1_addcarryx_u32(&x171, &x172, x170, x154, x151); uint32_t x173; fiat_secp256k1_uint1 x174; - fiat_secp256k1_addcarryx_u32(&x173, &x174, x172, x149, x152); + fiat_secp256k1_addcarryx_u32(&x173, &x174, x172, x152, x149); uint32_t x175; fiat_secp256k1_uint1 x176; - fiat_secp256k1_addcarryx_u32(&x175, &x176, x174, x147, x150); + fiat_secp256k1_addcarryx_u32(&x175, &x176, x174, x150, x147); uint32_t x177; fiat_secp256k1_uint1 x178; - fiat_secp256k1_addcarryx_u32(&x177, &x178, x176, 0x0, x148); + fiat_secp256k1_addcarryx_u32(&x177, &x178, x176, x148, 0x0); uint32_t x179; fiat_secp256k1_uint1 x180; - fiat_secp256k1_addcarryx_u32(&x179, &x180, 0x0, x161, x127); + fiat_secp256k1_addcarryx_u32(&x179, &x180, 0x0, x127, x161); uint32_t x181; fiat_secp256k1_uint1 x182; - fiat_secp256k1_addcarryx_u32(&x181, &x182, x180, x163, x129); + fiat_secp256k1_addcarryx_u32(&x181, &x182, x180, x129, x163); uint32_t x183; fiat_secp256k1_uint1 x184; - fiat_secp256k1_addcarryx_u32(&x183, &x184, x182, x165, x131); + fiat_secp256k1_addcarryx_u32(&x183, &x184, x182, x131, x165); uint32_t x185; fiat_secp256k1_uint1 x186; - fiat_secp256k1_addcarryx_u32(&x185, &x186, x184, x167, x133); + fiat_secp256k1_addcarryx_u32(&x185, &x186, x184, x133, x167); uint32_t x187; fiat_secp256k1_uint1 x188; - fiat_secp256k1_addcarryx_u32(&x187, &x188, x186, x169, x135); + fiat_secp256k1_addcarryx_u32(&x187, &x188, x186, x135, x169); uint32_t x189; fiat_secp256k1_uint1 x190; - fiat_secp256k1_addcarryx_u32(&x189, &x190, x188, x171, x137); + fiat_secp256k1_addcarryx_u32(&x189, &x190, x188, x137, x171); uint32_t x191; fiat_secp256k1_uint1 x192; - fiat_secp256k1_addcarryx_u32(&x191, &x192, x190, x173, x139); + fiat_secp256k1_addcarryx_u32(&x191, &x192, x190, x139, x173); uint32_t x193; fiat_secp256k1_uint1 x194; - fiat_secp256k1_addcarryx_u32(&x193, &x194, x192, x175, x141); + fiat_secp256k1_addcarryx_u32(&x193, &x194, x192, x141, x175); uint32_t x195; fiat_secp256k1_uint1 x196; - fiat_secp256k1_addcarryx_u32(&x195, &x196, x194, x177, x143); + fiat_secp256k1_addcarryx_u32(&x195, &x196, x194, x143, x177); uint32_t x197; fiat_secp256k1_uint1 x198; - fiat_secp256k1_addcarryx_u32(&x197, &x198, x196, 0x0, x144); + fiat_secp256k1_addcarryx_u32(&x197, &x198, x196, x144, 0x0); uint32_t x199; uint32_t x200; fiat_secp256k1_mulx_u32(&x199, &x200, x2, (arg1[7])); @@ -1731,55 +1731,55 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x213, &x214, x2, (arg1[0])); uint32_t x215; fiat_secp256k1_uint1 x216; - fiat_secp256k1_addcarryx_u32(&x215, &x216, 0x0, x211, x214); + fiat_secp256k1_addcarryx_u32(&x215, &x216, 0x0, x214, x211); uint32_t x217; fiat_secp256k1_uint1 x218; - fiat_secp256k1_addcarryx_u32(&x217, &x218, x216, x209, x212); + fiat_secp256k1_addcarryx_u32(&x217, &x218, x216, x212, x209); uint32_t x219; fiat_secp256k1_uint1 x220; - fiat_secp256k1_addcarryx_u32(&x219, &x220, x218, x207, x210); + fiat_secp256k1_addcarryx_u32(&x219, &x220, x218, x210, x207); uint32_t x221; fiat_secp256k1_uint1 x222; - fiat_secp256k1_addcarryx_u32(&x221, &x222, x220, x205, x208); + fiat_secp256k1_addcarryx_u32(&x221, &x222, x220, x208, x205); uint32_t x223; fiat_secp256k1_uint1 x224; - fiat_secp256k1_addcarryx_u32(&x223, &x224, x222, x203, x206); + fiat_secp256k1_addcarryx_u32(&x223, &x224, x222, x206, x203); uint32_t x225; fiat_secp256k1_uint1 x226; - fiat_secp256k1_addcarryx_u32(&x225, &x226, x224, x201, x204); + fiat_secp256k1_addcarryx_u32(&x225, &x226, x224, x204, x201); uint32_t x227; fiat_secp256k1_uint1 x228; - fiat_secp256k1_addcarryx_u32(&x227, &x228, x226, x199, x202); + fiat_secp256k1_addcarryx_u32(&x227, &x228, x226, x202, x199); uint32_t x229; fiat_secp256k1_uint1 x230; - fiat_secp256k1_addcarryx_u32(&x229, &x230, x228, 0x0, x200); + fiat_secp256k1_addcarryx_u32(&x229, &x230, x228, x200, 0x0); uint32_t x231; fiat_secp256k1_uint1 x232; - fiat_secp256k1_addcarryx_u32(&x231, &x232, 0x0, x213, x181); + fiat_secp256k1_addcarryx_u32(&x231, &x232, 0x0, x181, x213); uint32_t x233; fiat_secp256k1_uint1 x234; - fiat_secp256k1_addcarryx_u32(&x233, &x234, x232, x215, x183); + fiat_secp256k1_addcarryx_u32(&x233, &x234, x232, x183, x215); uint32_t x235; fiat_secp256k1_uint1 x236; - fiat_secp256k1_addcarryx_u32(&x235, &x236, x234, x217, x185); + fiat_secp256k1_addcarryx_u32(&x235, &x236, x234, x185, x217); uint32_t x237; fiat_secp256k1_uint1 x238; - fiat_secp256k1_addcarryx_u32(&x237, &x238, x236, x219, x187); + fiat_secp256k1_addcarryx_u32(&x237, &x238, x236, x187, x219); uint32_t x239; fiat_secp256k1_uint1 x240; - fiat_secp256k1_addcarryx_u32(&x239, &x240, x238, x221, x189); + fiat_secp256k1_addcarryx_u32(&x239, &x240, x238, x189, x221); uint32_t x241; fiat_secp256k1_uint1 x242; - fiat_secp256k1_addcarryx_u32(&x241, &x242, x240, x223, x191); + fiat_secp256k1_addcarryx_u32(&x241, &x242, x240, x191, x223); uint32_t x243; fiat_secp256k1_uint1 x244; - fiat_secp256k1_addcarryx_u32(&x243, &x244, x242, x225, x193); + fiat_secp256k1_addcarryx_u32(&x243, &x244, x242, x193, x225); uint32_t x245; fiat_secp256k1_uint1 x246; - fiat_secp256k1_addcarryx_u32(&x245, &x246, x244, x227, x195); + fiat_secp256k1_addcarryx_u32(&x245, &x246, x244, x195, x227); uint32_t x247; fiat_secp256k1_uint1 x248; - fiat_secp256k1_addcarryx_u32(&x247, &x248, x246, x229, x197); + fiat_secp256k1_addcarryx_u32(&x247, &x248, x246, x197, x229); uint32_t x249; uint32_t x250; fiat_secp256k1_mulx_u32(&x249, &x250, x231, UINT32_C(0xd2253531)); @@ -1809,58 +1809,58 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x265, &x266, x249, UINT32_C(0xfffffc2f)); uint32_t x267; fiat_secp256k1_uint1 x268; - fiat_secp256k1_addcarryx_u32(&x267, &x268, 0x0, x263, x266); + fiat_secp256k1_addcarryx_u32(&x267, &x268, 0x0, x266, x263); uint32_t x269; fiat_secp256k1_uint1 x270; - fiat_secp256k1_addcarryx_u32(&x269, &x270, x268, x261, x264); + fiat_secp256k1_addcarryx_u32(&x269, &x270, x268, x264, x261); uint32_t x271; fiat_secp256k1_uint1 x272; - fiat_secp256k1_addcarryx_u32(&x271, &x272, x270, x259, x262); + fiat_secp256k1_addcarryx_u32(&x271, &x272, x270, x262, x259); uint32_t x273; fiat_secp256k1_uint1 x274; - fiat_secp256k1_addcarryx_u32(&x273, &x274, x272, x257, x260); + fiat_secp256k1_addcarryx_u32(&x273, &x274, x272, x260, x257); uint32_t x275; fiat_secp256k1_uint1 x276; - fiat_secp256k1_addcarryx_u32(&x275, &x276, x274, x255, x258); + fiat_secp256k1_addcarryx_u32(&x275, &x276, x274, x258, x255); uint32_t x277; fiat_secp256k1_uint1 x278; - fiat_secp256k1_addcarryx_u32(&x277, &x278, x276, x253, x256); + fiat_secp256k1_addcarryx_u32(&x277, &x278, x276, x256, x253); uint32_t x279; fiat_secp256k1_uint1 x280; - fiat_secp256k1_addcarryx_u32(&x279, &x280, x278, x251, x254); + fiat_secp256k1_addcarryx_u32(&x279, &x280, x278, x254, x251); uint32_t x281; fiat_secp256k1_uint1 x282; - fiat_secp256k1_addcarryx_u32(&x281, &x282, x280, 0x0, x252); + fiat_secp256k1_addcarryx_u32(&x281, &x282, x280, x252, 0x0); uint32_t x283; fiat_secp256k1_uint1 x284; - fiat_secp256k1_addcarryx_u32(&x283, &x284, 0x0, x265, x231); + fiat_secp256k1_addcarryx_u32(&x283, &x284, 0x0, x231, x265); uint32_t x285; fiat_secp256k1_uint1 x286; - fiat_secp256k1_addcarryx_u32(&x285, &x286, x284, x267, x233); + fiat_secp256k1_addcarryx_u32(&x285, &x286, x284, x233, x267); uint32_t x287; fiat_secp256k1_uint1 x288; - fiat_secp256k1_addcarryx_u32(&x287, &x288, x286, x269, x235); + fiat_secp256k1_addcarryx_u32(&x287, &x288, x286, x235, x269); uint32_t x289; fiat_secp256k1_uint1 x290; - fiat_secp256k1_addcarryx_u32(&x289, &x290, x288, x271, x237); + fiat_secp256k1_addcarryx_u32(&x289, &x290, x288, x237, x271); uint32_t x291; fiat_secp256k1_uint1 x292; - fiat_secp256k1_addcarryx_u32(&x291, &x292, x290, x273, x239); + fiat_secp256k1_addcarryx_u32(&x291, &x292, x290, x239, x273); uint32_t x293; fiat_secp256k1_uint1 x294; - fiat_secp256k1_addcarryx_u32(&x293, &x294, x292, x275, x241); + fiat_secp256k1_addcarryx_u32(&x293, &x294, x292, x241, x275); uint32_t x295; fiat_secp256k1_uint1 x296; - fiat_secp256k1_addcarryx_u32(&x295, &x296, x294, x277, x243); + fiat_secp256k1_addcarryx_u32(&x295, &x296, x294, x243, x277); uint32_t x297; fiat_secp256k1_uint1 x298; - fiat_secp256k1_addcarryx_u32(&x297, &x298, x296, x279, x245); + fiat_secp256k1_addcarryx_u32(&x297, &x298, x296, x245, x279); uint32_t x299; fiat_secp256k1_uint1 x300; - fiat_secp256k1_addcarryx_u32(&x299, &x300, x298, x281, x247); + fiat_secp256k1_addcarryx_u32(&x299, &x300, x298, x247, x281); uint32_t x301; fiat_secp256k1_uint1 x302; - fiat_secp256k1_addcarryx_u32(&x301, &x302, x300, 0x0, x248); + fiat_secp256k1_addcarryx_u32(&x301, &x302, x300, x248, 0x0); uint32_t x303; uint32_t x304; fiat_secp256k1_mulx_u32(&x303, &x304, x3, (arg1[7])); @@ -1887,55 +1887,55 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x317, &x318, x3, (arg1[0])); uint32_t x319; fiat_secp256k1_uint1 x320; - fiat_secp256k1_addcarryx_u32(&x319, &x320, 0x0, x315, x318); + fiat_secp256k1_addcarryx_u32(&x319, &x320, 0x0, x318, x315); uint32_t x321; fiat_secp256k1_uint1 x322; - fiat_secp256k1_addcarryx_u32(&x321, &x322, x320, x313, x316); + fiat_secp256k1_addcarryx_u32(&x321, &x322, x320, x316, x313); uint32_t x323; fiat_secp256k1_uint1 x324; - fiat_secp256k1_addcarryx_u32(&x323, &x324, x322, x311, x314); + fiat_secp256k1_addcarryx_u32(&x323, &x324, x322, x314, x311); uint32_t x325; fiat_secp256k1_uint1 x326; - fiat_secp256k1_addcarryx_u32(&x325, &x326, x324, x309, x312); + fiat_secp256k1_addcarryx_u32(&x325, &x326, x324, x312, x309); uint32_t x327; fiat_secp256k1_uint1 x328; - fiat_secp256k1_addcarryx_u32(&x327, &x328, x326, x307, x310); + fiat_secp256k1_addcarryx_u32(&x327, &x328, x326, x310, x307); uint32_t x329; fiat_secp256k1_uint1 x330; - fiat_secp256k1_addcarryx_u32(&x329, &x330, x328, x305, x308); + fiat_secp256k1_addcarryx_u32(&x329, &x330, x328, x308, x305); uint32_t x331; fiat_secp256k1_uint1 x332; - fiat_secp256k1_addcarryx_u32(&x331, &x332, x330, x303, x306); + fiat_secp256k1_addcarryx_u32(&x331, &x332, x330, x306, x303); uint32_t x333; fiat_secp256k1_uint1 x334; - fiat_secp256k1_addcarryx_u32(&x333, &x334, x332, 0x0, x304); + fiat_secp256k1_addcarryx_u32(&x333, &x334, x332, x304, 0x0); uint32_t x335; fiat_secp256k1_uint1 x336; - fiat_secp256k1_addcarryx_u32(&x335, &x336, 0x0, x317, x285); + fiat_secp256k1_addcarryx_u32(&x335, &x336, 0x0, x285, x317); uint32_t x337; fiat_secp256k1_uint1 x338; - fiat_secp256k1_addcarryx_u32(&x337, &x338, x336, x319, x287); + fiat_secp256k1_addcarryx_u32(&x337, &x338, x336, x287, x319); uint32_t x339; fiat_secp256k1_uint1 x340; - fiat_secp256k1_addcarryx_u32(&x339, &x340, x338, x321, x289); + fiat_secp256k1_addcarryx_u32(&x339, &x340, x338, x289, x321); uint32_t x341; fiat_secp256k1_uint1 x342; - fiat_secp256k1_addcarryx_u32(&x341, &x342, x340, x323, x291); + fiat_secp256k1_addcarryx_u32(&x341, &x342, x340, x291, x323); uint32_t x343; fiat_secp256k1_uint1 x344; - fiat_secp256k1_addcarryx_u32(&x343, &x344, x342, x325, x293); + fiat_secp256k1_addcarryx_u32(&x343, &x344, x342, x293, x325); uint32_t x345; fiat_secp256k1_uint1 x346; - fiat_secp256k1_addcarryx_u32(&x345, &x346, x344, x327, x295); + fiat_secp256k1_addcarryx_u32(&x345, &x346, x344, x295, x327); uint32_t x347; fiat_secp256k1_uint1 x348; - fiat_secp256k1_addcarryx_u32(&x347, &x348, x346, x329, x297); + fiat_secp256k1_addcarryx_u32(&x347, &x348, x346, x297, x329); uint32_t x349; fiat_secp256k1_uint1 x350; - fiat_secp256k1_addcarryx_u32(&x349, &x350, x348, x331, x299); + fiat_secp256k1_addcarryx_u32(&x349, &x350, x348, x299, x331); uint32_t x351; fiat_secp256k1_uint1 x352; - fiat_secp256k1_addcarryx_u32(&x351, &x352, x350, x333, x301); + fiat_secp256k1_addcarryx_u32(&x351, &x352, x350, x301, x333); uint32_t x353; uint32_t x354; fiat_secp256k1_mulx_u32(&x353, &x354, x335, UINT32_C(0xd2253531)); @@ -1965,58 +1965,58 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x369, &x370, x353, UINT32_C(0xfffffc2f)); uint32_t x371; fiat_secp256k1_uint1 x372; - fiat_secp256k1_addcarryx_u32(&x371, &x372, 0x0, x367, x370); + fiat_secp256k1_addcarryx_u32(&x371, &x372, 0x0, x370, x367); uint32_t x373; fiat_secp256k1_uint1 x374; - fiat_secp256k1_addcarryx_u32(&x373, &x374, x372, x365, x368); + fiat_secp256k1_addcarryx_u32(&x373, &x374, x372, x368, x365); uint32_t x375; fiat_secp256k1_uint1 x376; - fiat_secp256k1_addcarryx_u32(&x375, &x376, x374, x363, x366); + fiat_secp256k1_addcarryx_u32(&x375, &x376, x374, x366, x363); uint32_t x377; fiat_secp256k1_uint1 x378; - fiat_secp256k1_addcarryx_u32(&x377, &x378, x376, x361, x364); + fiat_secp256k1_addcarryx_u32(&x377, &x378, x376, x364, x361); uint32_t x379; fiat_secp256k1_uint1 x380; - fiat_secp256k1_addcarryx_u32(&x379, &x380, x378, x359, x362); + fiat_secp256k1_addcarryx_u32(&x379, &x380, x378, x362, x359); uint32_t x381; fiat_secp256k1_uint1 x382; - fiat_secp256k1_addcarryx_u32(&x381, &x382, x380, x357, x360); + fiat_secp256k1_addcarryx_u32(&x381, &x382, x380, x360, x357); uint32_t x383; fiat_secp256k1_uint1 x384; - fiat_secp256k1_addcarryx_u32(&x383, &x384, x382, x355, x358); + fiat_secp256k1_addcarryx_u32(&x383, &x384, x382, x358, x355); uint32_t x385; fiat_secp256k1_uint1 x386; - fiat_secp256k1_addcarryx_u32(&x385, &x386, x384, 0x0, x356); + fiat_secp256k1_addcarryx_u32(&x385, &x386, x384, x356, 0x0); uint32_t x387; fiat_secp256k1_uint1 x388; - fiat_secp256k1_addcarryx_u32(&x387, &x388, 0x0, x369, x335); + fiat_secp256k1_addcarryx_u32(&x387, &x388, 0x0, x335, x369); uint32_t x389; fiat_secp256k1_uint1 x390; - fiat_secp256k1_addcarryx_u32(&x389, &x390, x388, x371, x337); + fiat_secp256k1_addcarryx_u32(&x389, &x390, x388, x337, x371); uint32_t x391; fiat_secp256k1_uint1 x392; - fiat_secp256k1_addcarryx_u32(&x391, &x392, x390, x373, x339); + fiat_secp256k1_addcarryx_u32(&x391, &x392, x390, x339, x373); uint32_t x393; fiat_secp256k1_uint1 x394; - fiat_secp256k1_addcarryx_u32(&x393, &x394, x392, x375, x341); + fiat_secp256k1_addcarryx_u32(&x393, &x394, x392, x341, x375); uint32_t x395; fiat_secp256k1_uint1 x396; - fiat_secp256k1_addcarryx_u32(&x395, &x396, x394, x377, x343); + fiat_secp256k1_addcarryx_u32(&x395, &x396, x394, x343, x377); uint32_t x397; fiat_secp256k1_uint1 x398; - fiat_secp256k1_addcarryx_u32(&x397, &x398, x396, x379, x345); + fiat_secp256k1_addcarryx_u32(&x397, &x398, x396, x345, x379); uint32_t x399; fiat_secp256k1_uint1 x400; - fiat_secp256k1_addcarryx_u32(&x399, &x400, x398, x381, x347); + fiat_secp256k1_addcarryx_u32(&x399, &x400, x398, x347, x381); uint32_t x401; fiat_secp256k1_uint1 x402; - fiat_secp256k1_addcarryx_u32(&x401, &x402, x400, x383, x349); + fiat_secp256k1_addcarryx_u32(&x401, &x402, x400, x349, x383); uint32_t x403; fiat_secp256k1_uint1 x404; - fiat_secp256k1_addcarryx_u32(&x403, &x404, x402, x385, x351); + fiat_secp256k1_addcarryx_u32(&x403, &x404, x402, x351, x385); uint32_t x405; fiat_secp256k1_uint1 x406; - fiat_secp256k1_addcarryx_u32(&x405, &x406, x404, 0x0, x352); + fiat_secp256k1_addcarryx_u32(&x405, &x406, x404, x352, 0x0); uint32_t x407; uint32_t x408; fiat_secp256k1_mulx_u32(&x407, &x408, x4, (arg1[7])); @@ -2043,55 +2043,55 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x421, &x422, x4, (arg1[0])); uint32_t x423; fiat_secp256k1_uint1 x424; - fiat_secp256k1_addcarryx_u32(&x423, &x424, 0x0, x419, x422); + fiat_secp256k1_addcarryx_u32(&x423, &x424, 0x0, x422, x419); uint32_t x425; fiat_secp256k1_uint1 x426; - fiat_secp256k1_addcarryx_u32(&x425, &x426, x424, x417, x420); + fiat_secp256k1_addcarryx_u32(&x425, &x426, x424, x420, x417); uint32_t x427; fiat_secp256k1_uint1 x428; - fiat_secp256k1_addcarryx_u32(&x427, &x428, x426, x415, x418); + fiat_secp256k1_addcarryx_u32(&x427, &x428, x426, x418, x415); uint32_t x429; fiat_secp256k1_uint1 x430; - fiat_secp256k1_addcarryx_u32(&x429, &x430, x428, x413, x416); + fiat_secp256k1_addcarryx_u32(&x429, &x430, x428, x416, x413); uint32_t x431; fiat_secp256k1_uint1 x432; - fiat_secp256k1_addcarryx_u32(&x431, &x432, x430, x411, x414); + fiat_secp256k1_addcarryx_u32(&x431, &x432, x430, x414, x411); uint32_t x433; fiat_secp256k1_uint1 x434; - fiat_secp256k1_addcarryx_u32(&x433, &x434, x432, x409, x412); + fiat_secp256k1_addcarryx_u32(&x433, &x434, x432, x412, x409); uint32_t x435; fiat_secp256k1_uint1 x436; - fiat_secp256k1_addcarryx_u32(&x435, &x436, x434, x407, x410); + fiat_secp256k1_addcarryx_u32(&x435, &x436, x434, x410, x407); uint32_t x437; fiat_secp256k1_uint1 x438; - fiat_secp256k1_addcarryx_u32(&x437, &x438, x436, 0x0, x408); + fiat_secp256k1_addcarryx_u32(&x437, &x438, x436, x408, 0x0); uint32_t x439; fiat_secp256k1_uint1 x440; - fiat_secp256k1_addcarryx_u32(&x439, &x440, 0x0, x421, x389); + fiat_secp256k1_addcarryx_u32(&x439, &x440, 0x0, x389, x421); uint32_t x441; fiat_secp256k1_uint1 x442; - fiat_secp256k1_addcarryx_u32(&x441, &x442, x440, x423, x391); + fiat_secp256k1_addcarryx_u32(&x441, &x442, x440, x391, x423); uint32_t x443; fiat_secp256k1_uint1 x444; - fiat_secp256k1_addcarryx_u32(&x443, &x444, x442, x425, x393); + fiat_secp256k1_addcarryx_u32(&x443, &x444, x442, x393, x425); uint32_t x445; fiat_secp256k1_uint1 x446; - fiat_secp256k1_addcarryx_u32(&x445, &x446, x444, x427, x395); + fiat_secp256k1_addcarryx_u32(&x445, &x446, x444, x395, x427); uint32_t x447; fiat_secp256k1_uint1 x448; - fiat_secp256k1_addcarryx_u32(&x447, &x448, x446, x429, x397); + fiat_secp256k1_addcarryx_u32(&x447, &x448, x446, x397, x429); uint32_t x449; fiat_secp256k1_uint1 x450; - fiat_secp256k1_addcarryx_u32(&x449, &x450, x448, x431, x399); + fiat_secp256k1_addcarryx_u32(&x449, &x450, x448, x399, x431); uint32_t x451; fiat_secp256k1_uint1 x452; - fiat_secp256k1_addcarryx_u32(&x451, &x452, x450, x433, x401); + fiat_secp256k1_addcarryx_u32(&x451, &x452, x450, x401, x433); uint32_t x453; fiat_secp256k1_uint1 x454; - fiat_secp256k1_addcarryx_u32(&x453, &x454, x452, x435, x403); + fiat_secp256k1_addcarryx_u32(&x453, &x454, x452, x403, x435); uint32_t x455; fiat_secp256k1_uint1 x456; - fiat_secp256k1_addcarryx_u32(&x455, &x456, x454, x437, x405); + fiat_secp256k1_addcarryx_u32(&x455, &x456, x454, x405, x437); uint32_t x457; uint32_t x458; fiat_secp256k1_mulx_u32(&x457, &x458, x439, UINT32_C(0xd2253531)); @@ -2121,58 +2121,58 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x473, &x474, x457, UINT32_C(0xfffffc2f)); uint32_t x475; fiat_secp256k1_uint1 x476; - fiat_secp256k1_addcarryx_u32(&x475, &x476, 0x0, x471, x474); + fiat_secp256k1_addcarryx_u32(&x475, &x476, 0x0, x474, x471); uint32_t x477; fiat_secp256k1_uint1 x478; - fiat_secp256k1_addcarryx_u32(&x477, &x478, x476, x469, x472); + fiat_secp256k1_addcarryx_u32(&x477, &x478, x476, x472, x469); uint32_t x479; fiat_secp256k1_uint1 x480; - fiat_secp256k1_addcarryx_u32(&x479, &x480, x478, x467, x470); + fiat_secp256k1_addcarryx_u32(&x479, &x480, x478, x470, x467); uint32_t x481; fiat_secp256k1_uint1 x482; - fiat_secp256k1_addcarryx_u32(&x481, &x482, x480, x465, x468); + fiat_secp256k1_addcarryx_u32(&x481, &x482, x480, x468, x465); uint32_t x483; fiat_secp256k1_uint1 x484; - fiat_secp256k1_addcarryx_u32(&x483, &x484, x482, x463, x466); + fiat_secp256k1_addcarryx_u32(&x483, &x484, x482, x466, x463); uint32_t x485; fiat_secp256k1_uint1 x486; - fiat_secp256k1_addcarryx_u32(&x485, &x486, x484, x461, x464); + fiat_secp256k1_addcarryx_u32(&x485, &x486, x484, x464, x461); uint32_t x487; fiat_secp256k1_uint1 x488; - fiat_secp256k1_addcarryx_u32(&x487, &x488, x486, x459, x462); + fiat_secp256k1_addcarryx_u32(&x487, &x488, x486, x462, x459); uint32_t x489; fiat_secp256k1_uint1 x490; - fiat_secp256k1_addcarryx_u32(&x489, &x490, x488, 0x0, x460); + fiat_secp256k1_addcarryx_u32(&x489, &x490, x488, x460, 0x0); uint32_t x491; fiat_secp256k1_uint1 x492; - fiat_secp256k1_addcarryx_u32(&x491, &x492, 0x0, x473, x439); + fiat_secp256k1_addcarryx_u32(&x491, &x492, 0x0, x439, x473); uint32_t x493; fiat_secp256k1_uint1 x494; - fiat_secp256k1_addcarryx_u32(&x493, &x494, x492, x475, x441); + fiat_secp256k1_addcarryx_u32(&x493, &x494, x492, x441, x475); uint32_t x495; fiat_secp256k1_uint1 x496; - fiat_secp256k1_addcarryx_u32(&x495, &x496, x494, x477, x443); + fiat_secp256k1_addcarryx_u32(&x495, &x496, x494, x443, x477); uint32_t x497; fiat_secp256k1_uint1 x498; - fiat_secp256k1_addcarryx_u32(&x497, &x498, x496, x479, x445); + fiat_secp256k1_addcarryx_u32(&x497, &x498, x496, x445, x479); uint32_t x499; fiat_secp256k1_uint1 x500; - fiat_secp256k1_addcarryx_u32(&x499, &x500, x498, x481, x447); + fiat_secp256k1_addcarryx_u32(&x499, &x500, x498, x447, x481); uint32_t x501; fiat_secp256k1_uint1 x502; - fiat_secp256k1_addcarryx_u32(&x501, &x502, x500, x483, x449); + fiat_secp256k1_addcarryx_u32(&x501, &x502, x500, x449, x483); uint32_t x503; fiat_secp256k1_uint1 x504; - fiat_secp256k1_addcarryx_u32(&x503, &x504, x502, x485, x451); + fiat_secp256k1_addcarryx_u32(&x503, &x504, x502, x451, x485); uint32_t x505; fiat_secp256k1_uint1 x506; - fiat_secp256k1_addcarryx_u32(&x505, &x506, x504, x487, x453); + fiat_secp256k1_addcarryx_u32(&x505, &x506, x504, x453, x487); uint32_t x507; fiat_secp256k1_uint1 x508; - fiat_secp256k1_addcarryx_u32(&x507, &x508, x506, x489, x455); + fiat_secp256k1_addcarryx_u32(&x507, &x508, x506, x455, x489); uint32_t x509; fiat_secp256k1_uint1 x510; - fiat_secp256k1_addcarryx_u32(&x509, &x510, x508, 0x0, x456); + fiat_secp256k1_addcarryx_u32(&x509, &x510, x508, x456, 0x0); uint32_t x511; uint32_t x512; fiat_secp256k1_mulx_u32(&x511, &x512, x5, (arg1[7])); @@ -2199,55 +2199,55 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x525, &x526, x5, (arg1[0])); uint32_t x527; fiat_secp256k1_uint1 x528; - fiat_secp256k1_addcarryx_u32(&x527, &x528, 0x0, x523, x526); + fiat_secp256k1_addcarryx_u32(&x527, &x528, 0x0, x526, x523); uint32_t x529; fiat_secp256k1_uint1 x530; - fiat_secp256k1_addcarryx_u32(&x529, &x530, x528, x521, x524); + fiat_secp256k1_addcarryx_u32(&x529, &x530, x528, x524, x521); uint32_t x531; fiat_secp256k1_uint1 x532; - fiat_secp256k1_addcarryx_u32(&x531, &x532, x530, x519, x522); + fiat_secp256k1_addcarryx_u32(&x531, &x532, x530, x522, x519); uint32_t x533; fiat_secp256k1_uint1 x534; - fiat_secp256k1_addcarryx_u32(&x533, &x534, x532, x517, x520); + fiat_secp256k1_addcarryx_u32(&x533, &x534, x532, x520, x517); uint32_t x535; fiat_secp256k1_uint1 x536; - fiat_secp256k1_addcarryx_u32(&x535, &x536, x534, x515, x518); + fiat_secp256k1_addcarryx_u32(&x535, &x536, x534, x518, x515); uint32_t x537; fiat_secp256k1_uint1 x538; - fiat_secp256k1_addcarryx_u32(&x537, &x538, x536, x513, x516); + fiat_secp256k1_addcarryx_u32(&x537, &x538, x536, x516, x513); uint32_t x539; fiat_secp256k1_uint1 x540; - fiat_secp256k1_addcarryx_u32(&x539, &x540, x538, x511, x514); + fiat_secp256k1_addcarryx_u32(&x539, &x540, x538, x514, x511); uint32_t x541; fiat_secp256k1_uint1 x542; - fiat_secp256k1_addcarryx_u32(&x541, &x542, x540, 0x0, x512); + fiat_secp256k1_addcarryx_u32(&x541, &x542, x540, x512, 0x0); uint32_t x543; fiat_secp256k1_uint1 x544; - fiat_secp256k1_addcarryx_u32(&x543, &x544, 0x0, x525, x493); + fiat_secp256k1_addcarryx_u32(&x543, &x544, 0x0, x493, x525); uint32_t x545; fiat_secp256k1_uint1 x546; - fiat_secp256k1_addcarryx_u32(&x545, &x546, x544, x527, x495); + fiat_secp256k1_addcarryx_u32(&x545, &x546, x544, x495, x527); uint32_t x547; fiat_secp256k1_uint1 x548; - fiat_secp256k1_addcarryx_u32(&x547, &x548, x546, x529, x497); + fiat_secp256k1_addcarryx_u32(&x547, &x548, x546, x497, x529); uint32_t x549; fiat_secp256k1_uint1 x550; - fiat_secp256k1_addcarryx_u32(&x549, &x550, x548, x531, x499); + fiat_secp256k1_addcarryx_u32(&x549, &x550, x548, x499, x531); uint32_t x551; fiat_secp256k1_uint1 x552; - fiat_secp256k1_addcarryx_u32(&x551, &x552, x550, x533, x501); + fiat_secp256k1_addcarryx_u32(&x551, &x552, x550, x501, x533); uint32_t x553; fiat_secp256k1_uint1 x554; - fiat_secp256k1_addcarryx_u32(&x553, &x554, x552, x535, x503); + fiat_secp256k1_addcarryx_u32(&x553, &x554, x552, x503, x535); uint32_t x555; fiat_secp256k1_uint1 x556; - fiat_secp256k1_addcarryx_u32(&x555, &x556, x554, x537, x505); + fiat_secp256k1_addcarryx_u32(&x555, &x556, x554, x505, x537); uint32_t x557; fiat_secp256k1_uint1 x558; - fiat_secp256k1_addcarryx_u32(&x557, &x558, x556, x539, x507); + fiat_secp256k1_addcarryx_u32(&x557, &x558, x556, x507, x539); uint32_t x559; fiat_secp256k1_uint1 x560; - fiat_secp256k1_addcarryx_u32(&x559, &x560, x558, x541, x509); + fiat_secp256k1_addcarryx_u32(&x559, &x560, x558, x509, x541); uint32_t x561; uint32_t x562; fiat_secp256k1_mulx_u32(&x561, &x562, x543, UINT32_C(0xd2253531)); @@ -2277,58 +2277,58 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x577, &x578, x561, UINT32_C(0xfffffc2f)); uint32_t x579; fiat_secp256k1_uint1 x580; - fiat_secp256k1_addcarryx_u32(&x579, &x580, 0x0, x575, x578); + fiat_secp256k1_addcarryx_u32(&x579, &x580, 0x0, x578, x575); uint32_t x581; fiat_secp256k1_uint1 x582; - fiat_secp256k1_addcarryx_u32(&x581, &x582, x580, x573, x576); + fiat_secp256k1_addcarryx_u32(&x581, &x582, x580, x576, x573); uint32_t x583; fiat_secp256k1_uint1 x584; - fiat_secp256k1_addcarryx_u32(&x583, &x584, x582, x571, x574); + fiat_secp256k1_addcarryx_u32(&x583, &x584, x582, x574, x571); uint32_t x585; fiat_secp256k1_uint1 x586; - fiat_secp256k1_addcarryx_u32(&x585, &x586, x584, x569, x572); + fiat_secp256k1_addcarryx_u32(&x585, &x586, x584, x572, x569); uint32_t x587; fiat_secp256k1_uint1 x588; - fiat_secp256k1_addcarryx_u32(&x587, &x588, x586, x567, x570); + fiat_secp256k1_addcarryx_u32(&x587, &x588, x586, x570, x567); uint32_t x589; fiat_secp256k1_uint1 x590; - fiat_secp256k1_addcarryx_u32(&x589, &x590, x588, x565, x568); + fiat_secp256k1_addcarryx_u32(&x589, &x590, x588, x568, x565); uint32_t x591; fiat_secp256k1_uint1 x592; - fiat_secp256k1_addcarryx_u32(&x591, &x592, x590, x563, x566); + fiat_secp256k1_addcarryx_u32(&x591, &x592, x590, x566, x563); uint32_t x593; fiat_secp256k1_uint1 x594; - fiat_secp256k1_addcarryx_u32(&x593, &x594, x592, 0x0, x564); + fiat_secp256k1_addcarryx_u32(&x593, &x594, x592, x564, 0x0); uint32_t x595; fiat_secp256k1_uint1 x596; - fiat_secp256k1_addcarryx_u32(&x595, &x596, 0x0, x577, x543); + fiat_secp256k1_addcarryx_u32(&x595, &x596, 0x0, x543, x577); uint32_t x597; fiat_secp256k1_uint1 x598; - fiat_secp256k1_addcarryx_u32(&x597, &x598, x596, x579, x545); + fiat_secp256k1_addcarryx_u32(&x597, &x598, x596, x545, x579); uint32_t x599; fiat_secp256k1_uint1 x600; - fiat_secp256k1_addcarryx_u32(&x599, &x600, x598, x581, x547); + fiat_secp256k1_addcarryx_u32(&x599, &x600, x598, x547, x581); uint32_t x601; fiat_secp256k1_uint1 x602; - fiat_secp256k1_addcarryx_u32(&x601, &x602, x600, x583, x549); + fiat_secp256k1_addcarryx_u32(&x601, &x602, x600, x549, x583); uint32_t x603; fiat_secp256k1_uint1 x604; - fiat_secp256k1_addcarryx_u32(&x603, &x604, x602, x585, x551); + fiat_secp256k1_addcarryx_u32(&x603, &x604, x602, x551, x585); uint32_t x605; fiat_secp256k1_uint1 x606; - fiat_secp256k1_addcarryx_u32(&x605, &x606, x604, x587, x553); + fiat_secp256k1_addcarryx_u32(&x605, &x606, x604, x553, x587); uint32_t x607; fiat_secp256k1_uint1 x608; - fiat_secp256k1_addcarryx_u32(&x607, &x608, x606, x589, x555); + fiat_secp256k1_addcarryx_u32(&x607, &x608, x606, x555, x589); uint32_t x609; fiat_secp256k1_uint1 x610; - fiat_secp256k1_addcarryx_u32(&x609, &x610, x608, x591, x557); + fiat_secp256k1_addcarryx_u32(&x609, &x610, x608, x557, x591); uint32_t x611; fiat_secp256k1_uint1 x612; - fiat_secp256k1_addcarryx_u32(&x611, &x612, x610, x593, x559); + fiat_secp256k1_addcarryx_u32(&x611, &x612, x610, x559, x593); uint32_t x613; fiat_secp256k1_uint1 x614; - fiat_secp256k1_addcarryx_u32(&x613, &x614, x612, 0x0, x560); + fiat_secp256k1_addcarryx_u32(&x613, &x614, x612, x560, 0x0); uint32_t x615; uint32_t x616; fiat_secp256k1_mulx_u32(&x615, &x616, x6, (arg1[7])); @@ -2355,55 +2355,55 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x629, &x630, x6, (arg1[0])); uint32_t x631; fiat_secp256k1_uint1 x632; - fiat_secp256k1_addcarryx_u32(&x631, &x632, 0x0, x627, x630); + fiat_secp256k1_addcarryx_u32(&x631, &x632, 0x0, x630, x627); uint32_t x633; fiat_secp256k1_uint1 x634; - fiat_secp256k1_addcarryx_u32(&x633, &x634, x632, x625, x628); + fiat_secp256k1_addcarryx_u32(&x633, &x634, x632, x628, x625); uint32_t x635; fiat_secp256k1_uint1 x636; - fiat_secp256k1_addcarryx_u32(&x635, &x636, x634, x623, x626); + fiat_secp256k1_addcarryx_u32(&x635, &x636, x634, x626, x623); uint32_t x637; fiat_secp256k1_uint1 x638; - fiat_secp256k1_addcarryx_u32(&x637, &x638, x636, x621, x624); + fiat_secp256k1_addcarryx_u32(&x637, &x638, x636, x624, x621); uint32_t x639; fiat_secp256k1_uint1 x640; - fiat_secp256k1_addcarryx_u32(&x639, &x640, x638, x619, x622); + fiat_secp256k1_addcarryx_u32(&x639, &x640, x638, x622, x619); uint32_t x641; fiat_secp256k1_uint1 x642; - fiat_secp256k1_addcarryx_u32(&x641, &x642, x640, x617, x620); + fiat_secp256k1_addcarryx_u32(&x641, &x642, x640, x620, x617); uint32_t x643; fiat_secp256k1_uint1 x644; - fiat_secp256k1_addcarryx_u32(&x643, &x644, x642, x615, x618); + fiat_secp256k1_addcarryx_u32(&x643, &x644, x642, x618, x615); uint32_t x645; fiat_secp256k1_uint1 x646; - fiat_secp256k1_addcarryx_u32(&x645, &x646, x644, 0x0, x616); + fiat_secp256k1_addcarryx_u32(&x645, &x646, x644, x616, 0x0); uint32_t x647; fiat_secp256k1_uint1 x648; - fiat_secp256k1_addcarryx_u32(&x647, &x648, 0x0, x629, x597); + fiat_secp256k1_addcarryx_u32(&x647, &x648, 0x0, x597, x629); uint32_t x649; fiat_secp256k1_uint1 x650; - fiat_secp256k1_addcarryx_u32(&x649, &x650, x648, x631, x599); + fiat_secp256k1_addcarryx_u32(&x649, &x650, x648, x599, x631); uint32_t x651; fiat_secp256k1_uint1 x652; - fiat_secp256k1_addcarryx_u32(&x651, &x652, x650, x633, x601); + fiat_secp256k1_addcarryx_u32(&x651, &x652, x650, x601, x633); uint32_t x653; fiat_secp256k1_uint1 x654; - fiat_secp256k1_addcarryx_u32(&x653, &x654, x652, x635, x603); + fiat_secp256k1_addcarryx_u32(&x653, &x654, x652, x603, x635); uint32_t x655; fiat_secp256k1_uint1 x656; - fiat_secp256k1_addcarryx_u32(&x655, &x656, x654, x637, x605); + fiat_secp256k1_addcarryx_u32(&x655, &x656, x654, x605, x637); uint32_t x657; fiat_secp256k1_uint1 x658; - fiat_secp256k1_addcarryx_u32(&x657, &x658, x656, x639, x607); + fiat_secp256k1_addcarryx_u32(&x657, &x658, x656, x607, x639); uint32_t x659; fiat_secp256k1_uint1 x660; - fiat_secp256k1_addcarryx_u32(&x659, &x660, x658, x641, x609); + fiat_secp256k1_addcarryx_u32(&x659, &x660, x658, x609, x641); uint32_t x661; fiat_secp256k1_uint1 x662; - fiat_secp256k1_addcarryx_u32(&x661, &x662, x660, x643, x611); + fiat_secp256k1_addcarryx_u32(&x661, &x662, x660, x611, x643); uint32_t x663; fiat_secp256k1_uint1 x664; - fiat_secp256k1_addcarryx_u32(&x663, &x664, x662, x645, x613); + fiat_secp256k1_addcarryx_u32(&x663, &x664, x662, x613, x645); uint32_t x665; uint32_t x666; fiat_secp256k1_mulx_u32(&x665, &x666, x647, UINT32_C(0xd2253531)); @@ -2433,58 +2433,58 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x681, &x682, x665, UINT32_C(0xfffffc2f)); uint32_t x683; fiat_secp256k1_uint1 x684; - fiat_secp256k1_addcarryx_u32(&x683, &x684, 0x0, x679, x682); + fiat_secp256k1_addcarryx_u32(&x683, &x684, 0x0, x682, x679); uint32_t x685; fiat_secp256k1_uint1 x686; - fiat_secp256k1_addcarryx_u32(&x685, &x686, x684, x677, x680); + fiat_secp256k1_addcarryx_u32(&x685, &x686, x684, x680, x677); uint32_t x687; fiat_secp256k1_uint1 x688; - fiat_secp256k1_addcarryx_u32(&x687, &x688, x686, x675, x678); + fiat_secp256k1_addcarryx_u32(&x687, &x688, x686, x678, x675); uint32_t x689; fiat_secp256k1_uint1 x690; - fiat_secp256k1_addcarryx_u32(&x689, &x690, x688, x673, x676); + fiat_secp256k1_addcarryx_u32(&x689, &x690, x688, x676, x673); uint32_t x691; fiat_secp256k1_uint1 x692; - fiat_secp256k1_addcarryx_u32(&x691, &x692, x690, x671, x674); + fiat_secp256k1_addcarryx_u32(&x691, &x692, x690, x674, x671); uint32_t x693; fiat_secp256k1_uint1 x694; - fiat_secp256k1_addcarryx_u32(&x693, &x694, x692, x669, x672); + fiat_secp256k1_addcarryx_u32(&x693, &x694, x692, x672, x669); uint32_t x695; fiat_secp256k1_uint1 x696; - fiat_secp256k1_addcarryx_u32(&x695, &x696, x694, x667, x670); + fiat_secp256k1_addcarryx_u32(&x695, &x696, x694, x670, x667); uint32_t x697; fiat_secp256k1_uint1 x698; - fiat_secp256k1_addcarryx_u32(&x697, &x698, x696, 0x0, x668); + fiat_secp256k1_addcarryx_u32(&x697, &x698, x696, x668, 0x0); uint32_t x699; fiat_secp256k1_uint1 x700; - fiat_secp256k1_addcarryx_u32(&x699, &x700, 0x0, x681, x647); + fiat_secp256k1_addcarryx_u32(&x699, &x700, 0x0, x647, x681); uint32_t x701; fiat_secp256k1_uint1 x702; - fiat_secp256k1_addcarryx_u32(&x701, &x702, x700, x683, x649); + fiat_secp256k1_addcarryx_u32(&x701, &x702, x700, x649, x683); uint32_t x703; fiat_secp256k1_uint1 x704; - fiat_secp256k1_addcarryx_u32(&x703, &x704, x702, x685, x651); + fiat_secp256k1_addcarryx_u32(&x703, &x704, x702, x651, x685); uint32_t x705; fiat_secp256k1_uint1 x706; - fiat_secp256k1_addcarryx_u32(&x705, &x706, x704, x687, x653); + fiat_secp256k1_addcarryx_u32(&x705, &x706, x704, x653, x687); uint32_t x707; fiat_secp256k1_uint1 x708; - fiat_secp256k1_addcarryx_u32(&x707, &x708, x706, x689, x655); + fiat_secp256k1_addcarryx_u32(&x707, &x708, x706, x655, x689); uint32_t x709; fiat_secp256k1_uint1 x710; - fiat_secp256k1_addcarryx_u32(&x709, &x710, x708, x691, x657); + fiat_secp256k1_addcarryx_u32(&x709, &x710, x708, x657, x691); uint32_t x711; fiat_secp256k1_uint1 x712; - fiat_secp256k1_addcarryx_u32(&x711, &x712, x710, x693, x659); + fiat_secp256k1_addcarryx_u32(&x711, &x712, x710, x659, x693); uint32_t x713; fiat_secp256k1_uint1 x714; - fiat_secp256k1_addcarryx_u32(&x713, &x714, x712, x695, x661); + fiat_secp256k1_addcarryx_u32(&x713, &x714, x712, x661, x695); uint32_t x715; fiat_secp256k1_uint1 x716; - fiat_secp256k1_addcarryx_u32(&x715, &x716, x714, x697, x663); + fiat_secp256k1_addcarryx_u32(&x715, &x716, x714, x663, x697); uint32_t x717; fiat_secp256k1_uint1 x718; - fiat_secp256k1_addcarryx_u32(&x717, &x718, x716, 0x0, x664); + fiat_secp256k1_addcarryx_u32(&x717, &x718, x716, x664, 0x0); uint32_t x719; uint32_t x720; fiat_secp256k1_mulx_u32(&x719, &x720, x7, (arg1[7])); @@ -2511,55 +2511,55 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x733, &x734, x7, (arg1[0])); uint32_t x735; fiat_secp256k1_uint1 x736; - fiat_secp256k1_addcarryx_u32(&x735, &x736, 0x0, x731, x734); + fiat_secp256k1_addcarryx_u32(&x735, &x736, 0x0, x734, x731); uint32_t x737; fiat_secp256k1_uint1 x738; - fiat_secp256k1_addcarryx_u32(&x737, &x738, x736, x729, x732); + fiat_secp256k1_addcarryx_u32(&x737, &x738, x736, x732, x729); uint32_t x739; fiat_secp256k1_uint1 x740; - fiat_secp256k1_addcarryx_u32(&x739, &x740, x738, x727, x730); + fiat_secp256k1_addcarryx_u32(&x739, &x740, x738, x730, x727); uint32_t x741; fiat_secp256k1_uint1 x742; - fiat_secp256k1_addcarryx_u32(&x741, &x742, x740, x725, x728); + fiat_secp256k1_addcarryx_u32(&x741, &x742, x740, x728, x725); uint32_t x743; fiat_secp256k1_uint1 x744; - fiat_secp256k1_addcarryx_u32(&x743, &x744, x742, x723, x726); + fiat_secp256k1_addcarryx_u32(&x743, &x744, x742, x726, x723); uint32_t x745; fiat_secp256k1_uint1 x746; - fiat_secp256k1_addcarryx_u32(&x745, &x746, x744, x721, x724); + fiat_secp256k1_addcarryx_u32(&x745, &x746, x744, x724, x721); uint32_t x747; fiat_secp256k1_uint1 x748; - fiat_secp256k1_addcarryx_u32(&x747, &x748, x746, x719, x722); + fiat_secp256k1_addcarryx_u32(&x747, &x748, x746, x722, x719); uint32_t x749; fiat_secp256k1_uint1 x750; - fiat_secp256k1_addcarryx_u32(&x749, &x750, x748, 0x0, x720); + fiat_secp256k1_addcarryx_u32(&x749, &x750, x748, x720, 0x0); uint32_t x751; fiat_secp256k1_uint1 x752; - fiat_secp256k1_addcarryx_u32(&x751, &x752, 0x0, x733, x701); + fiat_secp256k1_addcarryx_u32(&x751, &x752, 0x0, x701, x733); uint32_t x753; fiat_secp256k1_uint1 x754; - fiat_secp256k1_addcarryx_u32(&x753, &x754, x752, x735, x703); + fiat_secp256k1_addcarryx_u32(&x753, &x754, x752, x703, x735); uint32_t x755; fiat_secp256k1_uint1 x756; - fiat_secp256k1_addcarryx_u32(&x755, &x756, x754, x737, x705); + fiat_secp256k1_addcarryx_u32(&x755, &x756, x754, x705, x737); uint32_t x757; fiat_secp256k1_uint1 x758; - fiat_secp256k1_addcarryx_u32(&x757, &x758, x756, x739, x707); + fiat_secp256k1_addcarryx_u32(&x757, &x758, x756, x707, x739); uint32_t x759; fiat_secp256k1_uint1 x760; - fiat_secp256k1_addcarryx_u32(&x759, &x760, x758, x741, x709); + fiat_secp256k1_addcarryx_u32(&x759, &x760, x758, x709, x741); uint32_t x761; fiat_secp256k1_uint1 x762; - fiat_secp256k1_addcarryx_u32(&x761, &x762, x760, x743, x711); + fiat_secp256k1_addcarryx_u32(&x761, &x762, x760, x711, x743); uint32_t x763; fiat_secp256k1_uint1 x764; - fiat_secp256k1_addcarryx_u32(&x763, &x764, x762, x745, x713); + fiat_secp256k1_addcarryx_u32(&x763, &x764, x762, x713, x745); uint32_t x765; fiat_secp256k1_uint1 x766; - fiat_secp256k1_addcarryx_u32(&x765, &x766, x764, x747, x715); + fiat_secp256k1_addcarryx_u32(&x765, &x766, x764, x715, x747); uint32_t x767; fiat_secp256k1_uint1 x768; - fiat_secp256k1_addcarryx_u32(&x767, &x768, x766, x749, x717); + fiat_secp256k1_addcarryx_u32(&x767, &x768, x766, x717, x749); uint32_t x769; uint32_t x770; fiat_secp256k1_mulx_u32(&x769, &x770, x751, UINT32_C(0xd2253531)); @@ -2589,58 +2589,58 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_mulx_u32(&x785, &x786, x769, UINT32_C(0xfffffc2f)); uint32_t x787; fiat_secp256k1_uint1 x788; - fiat_secp256k1_addcarryx_u32(&x787, &x788, 0x0, x783, x786); + fiat_secp256k1_addcarryx_u32(&x787, &x788, 0x0, x786, x783); uint32_t x789; fiat_secp256k1_uint1 x790; - fiat_secp256k1_addcarryx_u32(&x789, &x790, x788, x781, x784); + fiat_secp256k1_addcarryx_u32(&x789, &x790, x788, x784, x781); uint32_t x791; fiat_secp256k1_uint1 x792; - fiat_secp256k1_addcarryx_u32(&x791, &x792, x790, x779, x782); + fiat_secp256k1_addcarryx_u32(&x791, &x792, x790, x782, x779); uint32_t x793; fiat_secp256k1_uint1 x794; - fiat_secp256k1_addcarryx_u32(&x793, &x794, x792, x777, x780); + fiat_secp256k1_addcarryx_u32(&x793, &x794, x792, x780, x777); uint32_t x795; fiat_secp256k1_uint1 x796; - fiat_secp256k1_addcarryx_u32(&x795, &x796, x794, x775, x778); + fiat_secp256k1_addcarryx_u32(&x795, &x796, x794, x778, x775); uint32_t x797; fiat_secp256k1_uint1 x798; - fiat_secp256k1_addcarryx_u32(&x797, &x798, x796, x773, x776); + fiat_secp256k1_addcarryx_u32(&x797, &x798, x796, x776, x773); uint32_t x799; fiat_secp256k1_uint1 x800; - fiat_secp256k1_addcarryx_u32(&x799, &x800, x798, x771, x774); + fiat_secp256k1_addcarryx_u32(&x799, &x800, x798, x774, x771); uint32_t x801; fiat_secp256k1_uint1 x802; - fiat_secp256k1_addcarryx_u32(&x801, &x802, x800, 0x0, x772); + fiat_secp256k1_addcarryx_u32(&x801, &x802, x800, x772, 0x0); uint32_t x803; fiat_secp256k1_uint1 x804; - fiat_secp256k1_addcarryx_u32(&x803, &x804, 0x0, x785, x751); + fiat_secp256k1_addcarryx_u32(&x803, &x804, 0x0, x751, x785); uint32_t x805; fiat_secp256k1_uint1 x806; - fiat_secp256k1_addcarryx_u32(&x805, &x806, x804, x787, x753); + fiat_secp256k1_addcarryx_u32(&x805, &x806, x804, x753, x787); uint32_t x807; fiat_secp256k1_uint1 x808; - fiat_secp256k1_addcarryx_u32(&x807, &x808, x806, x789, x755); + fiat_secp256k1_addcarryx_u32(&x807, &x808, x806, x755, x789); uint32_t x809; fiat_secp256k1_uint1 x810; - fiat_secp256k1_addcarryx_u32(&x809, &x810, x808, x791, x757); + fiat_secp256k1_addcarryx_u32(&x809, &x810, x808, x757, x791); uint32_t x811; fiat_secp256k1_uint1 x812; - fiat_secp256k1_addcarryx_u32(&x811, &x812, x810, x793, x759); + fiat_secp256k1_addcarryx_u32(&x811, &x812, x810, x759, x793); uint32_t x813; fiat_secp256k1_uint1 x814; - fiat_secp256k1_addcarryx_u32(&x813, &x814, x812, x795, x761); + fiat_secp256k1_addcarryx_u32(&x813, &x814, x812, x761, x795); uint32_t x815; fiat_secp256k1_uint1 x816; - fiat_secp256k1_addcarryx_u32(&x815, &x816, x814, x797, x763); + fiat_secp256k1_addcarryx_u32(&x815, &x816, x814, x763, x797); uint32_t x817; fiat_secp256k1_uint1 x818; - fiat_secp256k1_addcarryx_u32(&x817, &x818, x816, x799, x765); + fiat_secp256k1_addcarryx_u32(&x817, &x818, x816, x765, x799); uint32_t x819; fiat_secp256k1_uint1 x820; - fiat_secp256k1_addcarryx_u32(&x819, &x820, x818, x801, x767); + fiat_secp256k1_addcarryx_u32(&x819, &x820, x818, x767, x801); uint32_t x821; fiat_secp256k1_uint1 x822; - fiat_secp256k1_addcarryx_u32(&x821, &x822, x820, 0x0, x768); + fiat_secp256k1_addcarryx_u32(&x821, &x822, x820, x768, 0x0); uint32_t x823; fiat_secp256k1_uint1 x824; fiat_secp256k1_subborrowx_u32(&x823, &x824, 0x0, x805, UINT32_C(0xfffffc2f)); @@ -2712,28 +2712,28 @@ static void fiat_secp256k1_square(uint32_t out1[8], const uint32_t arg1[8]) { static void fiat_secp256k1_add(uint32_t out1[8], const uint32_t arg1[8], const uint32_t arg2[8]) { uint32_t x1; fiat_secp256k1_uint1 x2; - fiat_secp256k1_addcarryx_u32(&x1, &x2, 0x0, (arg2[0]), (arg1[0])); + fiat_secp256k1_addcarryx_u32(&x1, &x2, 0x0, (arg1[0]), (arg2[0])); uint32_t x3; fiat_secp256k1_uint1 x4; - fiat_secp256k1_addcarryx_u32(&x3, &x4, x2, (arg2[1]), (arg1[1])); + fiat_secp256k1_addcarryx_u32(&x3, &x4, x2, (arg1[1]), (arg2[1])); uint32_t x5; fiat_secp256k1_uint1 x6; - fiat_secp256k1_addcarryx_u32(&x5, &x6, x4, (arg2[2]), (arg1[2])); + fiat_secp256k1_addcarryx_u32(&x5, &x6, x4, (arg1[2]), (arg2[2])); uint32_t x7; fiat_secp256k1_uint1 x8; - fiat_secp256k1_addcarryx_u32(&x7, &x8, x6, (arg2[3]), (arg1[3])); + fiat_secp256k1_addcarryx_u32(&x7, &x8, x6, (arg1[3]), (arg2[3])); uint32_t x9; fiat_secp256k1_uint1 x10; - fiat_secp256k1_addcarryx_u32(&x9, &x10, x8, (arg2[4]), (arg1[4])); + fiat_secp256k1_addcarryx_u32(&x9, &x10, x8, (arg1[4]), (arg2[4])); uint32_t x11; fiat_secp256k1_uint1 x12; - fiat_secp256k1_addcarryx_u32(&x11, &x12, x10, (arg2[5]), (arg1[5])); + fiat_secp256k1_addcarryx_u32(&x11, &x12, x10, (arg1[5]), (arg2[5])); uint32_t x13; fiat_secp256k1_uint1 x14; - fiat_secp256k1_addcarryx_u32(&x13, &x14, x12, (arg2[6]), (arg1[6])); + fiat_secp256k1_addcarryx_u32(&x13, &x14, x12, (arg1[6]), (arg2[6])); uint32_t x15; fiat_secp256k1_uint1 x16; - fiat_secp256k1_addcarryx_u32(&x15, &x16, x14, (arg2[7]), (arg1[7])); + fiat_secp256k1_addcarryx_u32(&x15, &x16, x14, (arg1[7]), (arg2[7])); uint32_t x17; fiat_secp256k1_uint1 x18; fiat_secp256k1_subborrowx_u32(&x17, &x18, 0x0, x1, UINT32_C(0xfffffc2f)); @@ -2831,28 +2831,28 @@ static void fiat_secp256k1_sub(uint32_t out1[8], const uint32_t arg1[8], const u fiat_secp256k1_cmovznz_u32(&x17, x16, 0x0, UINT32_C(0xffffffff)); uint32_t x18; fiat_secp256k1_uint1 x19; - fiat_secp256k1_addcarryx_u32(&x18, &x19, 0x0, (x17 & UINT32_C(0xfffffc2f)), x1); + fiat_secp256k1_addcarryx_u32(&x18, &x19, 0x0, x1, (x17 & UINT32_C(0xfffffc2f))); uint32_t x20; fiat_secp256k1_uint1 x21; - fiat_secp256k1_addcarryx_u32(&x20, &x21, x19, (x17 & UINT32_C(0xfffffffe)), x3); + fiat_secp256k1_addcarryx_u32(&x20, &x21, x19, x3, (x17 & UINT32_C(0xfffffffe))); uint32_t x22; fiat_secp256k1_uint1 x23; - fiat_secp256k1_addcarryx_u32(&x22, &x23, x21, (x17 & UINT32_C(0xffffffff)), x5); + fiat_secp256k1_addcarryx_u32(&x22, &x23, x21, x5, (x17 & UINT32_C(0xffffffff))); uint32_t x24; fiat_secp256k1_uint1 x25; - fiat_secp256k1_addcarryx_u32(&x24, &x25, x23, (x17 & UINT32_C(0xffffffff)), x7); + fiat_secp256k1_addcarryx_u32(&x24, &x25, x23, x7, (x17 & UINT32_C(0xffffffff))); uint32_t x26; fiat_secp256k1_uint1 x27; - fiat_secp256k1_addcarryx_u32(&x26, &x27, x25, (x17 & UINT32_C(0xffffffff)), x9); + fiat_secp256k1_addcarryx_u32(&x26, &x27, x25, x9, (x17 & UINT32_C(0xffffffff))); uint32_t x28; fiat_secp256k1_uint1 x29; - fiat_secp256k1_addcarryx_u32(&x28, &x29, x27, (x17 & UINT32_C(0xffffffff)), x11); + fiat_secp256k1_addcarryx_u32(&x28, &x29, x27, x11, (x17 & UINT32_C(0xffffffff))); uint32_t x30; fiat_secp256k1_uint1 x31; - fiat_secp256k1_addcarryx_u32(&x30, &x31, x29, (x17 & UINT32_C(0xffffffff)), x13); + fiat_secp256k1_addcarryx_u32(&x30, &x31, x29, x13, (x17 & UINT32_C(0xffffffff))); uint32_t x32; fiat_secp256k1_uint1 x33; - fiat_secp256k1_addcarryx_u32(&x32, &x33, x31, (x17 & UINT32_C(0xffffffff)), x15); + fiat_secp256k1_addcarryx_u32(&x32, &x33, x31, x15, (x17 & UINT32_C(0xffffffff))); out1[0] = x18; out1[1] = x20; out1[2] = x22; @@ -2905,28 +2905,28 @@ static void fiat_secp256k1_opp(uint32_t out1[8], const uint32_t arg1[8]) { fiat_secp256k1_cmovznz_u32(&x17, x16, 0x0, UINT32_C(0xffffffff)); uint32_t x18; fiat_secp256k1_uint1 x19; - fiat_secp256k1_addcarryx_u32(&x18, &x19, 0x0, (x17 & UINT32_C(0xfffffc2f)), x1); + fiat_secp256k1_addcarryx_u32(&x18, &x19, 0x0, x1, (x17 & UINT32_C(0xfffffc2f))); uint32_t x20; fiat_secp256k1_uint1 x21; - fiat_secp256k1_addcarryx_u32(&x20, &x21, x19, (x17 & UINT32_C(0xfffffffe)), x3); + fiat_secp256k1_addcarryx_u32(&x20, &x21, x19, x3, (x17 & UINT32_C(0xfffffffe))); uint32_t x22; fiat_secp256k1_uint1 x23; - fiat_secp256k1_addcarryx_u32(&x22, &x23, x21, (x17 & UINT32_C(0xffffffff)), x5); + fiat_secp256k1_addcarryx_u32(&x22, &x23, x21, x5, (x17 & UINT32_C(0xffffffff))); uint32_t x24; fiat_secp256k1_uint1 x25; - fiat_secp256k1_addcarryx_u32(&x24, &x25, x23, (x17 & UINT32_C(0xffffffff)), x7); + fiat_secp256k1_addcarryx_u32(&x24, &x25, x23, x7, (x17 & UINT32_C(0xffffffff))); uint32_t x26; fiat_secp256k1_uint1 x27; - fiat_secp256k1_addcarryx_u32(&x26, &x27, x25, (x17 & UINT32_C(0xffffffff)), x9); + fiat_secp256k1_addcarryx_u32(&x26, &x27, x25, x9, (x17 & UINT32_C(0xffffffff))); uint32_t x28; fiat_secp256k1_uint1 x29; - fiat_secp256k1_addcarryx_u32(&x28, &x29, x27, (x17 & UINT32_C(0xffffffff)), x11); + fiat_secp256k1_addcarryx_u32(&x28, &x29, x27, x11, (x17 & UINT32_C(0xffffffff))); uint32_t x30; fiat_secp256k1_uint1 x31; - fiat_secp256k1_addcarryx_u32(&x30, &x31, x29, (x17 & UINT32_C(0xffffffff)), x13); + fiat_secp256k1_addcarryx_u32(&x30, &x31, x29, x13, (x17 & UINT32_C(0xffffffff))); uint32_t x32; fiat_secp256k1_uint1 x33; - fiat_secp256k1_addcarryx_u32(&x32, &x33, x31, (x17 & UINT32_C(0xffffffff)), x15); + fiat_secp256k1_addcarryx_u32(&x32, &x33, x31, x15, (x17 & UINT32_C(0xffffffff))); out1[0] = x18; out1[1] = x20; out1[2] = x22; @@ -2981,79 +2981,79 @@ static void fiat_secp256k1_from_montgomery(uint32_t out1[8], const uint32_t arg1 fiat_secp256k1_mulx_u32(&x18, &x19, x2, UINT32_C(0xfffffc2f)); uint32_t x20; fiat_secp256k1_uint1 x21; - fiat_secp256k1_addcarryx_u32(&x20, &x21, 0x0, x16, x19); + fiat_secp256k1_addcarryx_u32(&x20, &x21, 0x0, x19, x16); uint32_t x22; fiat_secp256k1_uint1 x23; - fiat_secp256k1_addcarryx_u32(&x22, &x23, x21, x14, x17); + fiat_secp256k1_addcarryx_u32(&x22, &x23, x21, x17, x14); uint32_t x24; fiat_secp256k1_uint1 x25; - fiat_secp256k1_addcarryx_u32(&x24, &x25, x23, x12, x15); + fiat_secp256k1_addcarryx_u32(&x24, &x25, x23, x15, x12); uint32_t x26; fiat_secp256k1_uint1 x27; - fiat_secp256k1_addcarryx_u32(&x26, &x27, x25, x10, x13); + fiat_secp256k1_addcarryx_u32(&x26, &x27, x25, x13, x10); uint32_t x28; fiat_secp256k1_uint1 x29; - fiat_secp256k1_addcarryx_u32(&x28, &x29, x27, x8, x11); + fiat_secp256k1_addcarryx_u32(&x28, &x29, x27, x11, x8); uint32_t x30; fiat_secp256k1_uint1 x31; - fiat_secp256k1_addcarryx_u32(&x30, &x31, x29, x6, x9); + fiat_secp256k1_addcarryx_u32(&x30, &x31, x29, x9, x6); uint32_t x32; fiat_secp256k1_uint1 x33; - fiat_secp256k1_addcarryx_u32(&x32, &x33, x31, x4, x7); + fiat_secp256k1_addcarryx_u32(&x32, &x33, x31, x7, x4); uint32_t x34; fiat_secp256k1_uint1 x35; - fiat_secp256k1_addcarryx_u32(&x34, &x35, 0x0, x18, x1); + fiat_secp256k1_addcarryx_u32(&x34, &x35, 0x0, x1, x18); uint32_t x36; fiat_secp256k1_uint1 x37; - fiat_secp256k1_addcarryx_u32(&x36, &x37, x35, x20, 0x0); + fiat_secp256k1_addcarryx_u32(&x36, &x37, x35, 0x0, x20); uint32_t x38; fiat_secp256k1_uint1 x39; - fiat_secp256k1_addcarryx_u32(&x38, &x39, x37, x22, 0x0); + fiat_secp256k1_addcarryx_u32(&x38, &x39, x37, 0x0, x22); uint32_t x40; fiat_secp256k1_uint1 x41; - fiat_secp256k1_addcarryx_u32(&x40, &x41, x39, x24, 0x0); + fiat_secp256k1_addcarryx_u32(&x40, &x41, x39, 0x0, x24); uint32_t x42; fiat_secp256k1_uint1 x43; - fiat_secp256k1_addcarryx_u32(&x42, &x43, x41, x26, 0x0); + fiat_secp256k1_addcarryx_u32(&x42, &x43, x41, 0x0, x26); uint32_t x44; fiat_secp256k1_uint1 x45; - fiat_secp256k1_addcarryx_u32(&x44, &x45, x43, x28, 0x0); + fiat_secp256k1_addcarryx_u32(&x44, &x45, x43, 0x0, x28); uint32_t x46; fiat_secp256k1_uint1 x47; - fiat_secp256k1_addcarryx_u32(&x46, &x47, x45, x30, 0x0); + fiat_secp256k1_addcarryx_u32(&x46, &x47, x45, 0x0, x30); uint32_t x48; fiat_secp256k1_uint1 x49; - fiat_secp256k1_addcarryx_u32(&x48, &x49, x47, x32, 0x0); + fiat_secp256k1_addcarryx_u32(&x48, &x49, x47, 0x0, x32); uint32_t x50; fiat_secp256k1_uint1 x51; - fiat_secp256k1_addcarryx_u32(&x50, &x51, x33, 0x0, x5); + fiat_secp256k1_addcarryx_u32(&x50, &x51, x33, x5, 0x0); uint32_t x52; fiat_secp256k1_uint1 x53; - fiat_secp256k1_addcarryx_u32(&x52, &x53, x49, x50, 0x0); + fiat_secp256k1_addcarryx_u32(&x52, &x53, x49, 0x0, x50); uint32_t x54; fiat_secp256k1_uint1 x55; - fiat_secp256k1_addcarryx_u32(&x54, &x55, 0x0, (arg1[1]), x36); + fiat_secp256k1_addcarryx_u32(&x54, &x55, 0x0, x36, (arg1[1])); uint32_t x56; fiat_secp256k1_uint1 x57; - fiat_secp256k1_addcarryx_u32(&x56, &x57, x55, 0x0, x38); + fiat_secp256k1_addcarryx_u32(&x56, &x57, x55, x38, 0x0); uint32_t x58; fiat_secp256k1_uint1 x59; - fiat_secp256k1_addcarryx_u32(&x58, &x59, x57, 0x0, x40); + fiat_secp256k1_addcarryx_u32(&x58, &x59, x57, x40, 0x0); uint32_t x60; fiat_secp256k1_uint1 x61; - fiat_secp256k1_addcarryx_u32(&x60, &x61, x59, 0x0, x42); + fiat_secp256k1_addcarryx_u32(&x60, &x61, x59, x42, 0x0); uint32_t x62; fiat_secp256k1_uint1 x63; - fiat_secp256k1_addcarryx_u32(&x62, &x63, x61, 0x0, x44); + fiat_secp256k1_addcarryx_u32(&x62, &x63, x61, x44, 0x0); uint32_t x64; fiat_secp256k1_uint1 x65; - fiat_secp256k1_addcarryx_u32(&x64, &x65, x63, 0x0, x46); + fiat_secp256k1_addcarryx_u32(&x64, &x65, x63, x46, 0x0); uint32_t x66; fiat_secp256k1_uint1 x67; - fiat_secp256k1_addcarryx_u32(&x66, &x67, x65, 0x0, x48); + fiat_secp256k1_addcarryx_u32(&x66, &x67, x65, x48, 0x0); uint32_t x68; fiat_secp256k1_uint1 x69; - fiat_secp256k1_addcarryx_u32(&x68, &x69, x67, 0x0, x52); + fiat_secp256k1_addcarryx_u32(&x68, &x69, x67, x52, 0x0); uint32_t x70; uint32_t x71; fiat_secp256k1_mulx_u32(&x70, &x71, x54, UINT32_C(0xd2253531)); @@ -3083,85 +3083,85 @@ static void fiat_secp256k1_from_montgomery(uint32_t out1[8], const uint32_t arg1 fiat_secp256k1_mulx_u32(&x86, &x87, x70, UINT32_C(0xfffffc2f)); uint32_t x88; fiat_secp256k1_uint1 x89; - fiat_secp256k1_addcarryx_u32(&x88, &x89, 0x0, x84, x87); + fiat_secp256k1_addcarryx_u32(&x88, &x89, 0x0, x87, x84); uint32_t x90; fiat_secp256k1_uint1 x91; - fiat_secp256k1_addcarryx_u32(&x90, &x91, x89, x82, x85); + fiat_secp256k1_addcarryx_u32(&x90, &x91, x89, x85, x82); uint32_t x92; fiat_secp256k1_uint1 x93; - fiat_secp256k1_addcarryx_u32(&x92, &x93, x91, x80, x83); + fiat_secp256k1_addcarryx_u32(&x92, &x93, x91, x83, x80); uint32_t x94; fiat_secp256k1_uint1 x95; - fiat_secp256k1_addcarryx_u32(&x94, &x95, x93, x78, x81); + fiat_secp256k1_addcarryx_u32(&x94, &x95, x93, x81, x78); uint32_t x96; fiat_secp256k1_uint1 x97; - fiat_secp256k1_addcarryx_u32(&x96, &x97, x95, x76, x79); + fiat_secp256k1_addcarryx_u32(&x96, &x97, x95, x79, x76); uint32_t x98; fiat_secp256k1_uint1 x99; - fiat_secp256k1_addcarryx_u32(&x98, &x99, x97, x74, x77); + fiat_secp256k1_addcarryx_u32(&x98, &x99, x97, x77, x74); uint32_t x100; fiat_secp256k1_uint1 x101; - fiat_secp256k1_addcarryx_u32(&x100, &x101, x99, x72, x75); + fiat_secp256k1_addcarryx_u32(&x100, &x101, x99, x75, x72); uint32_t x102; fiat_secp256k1_uint1 x103; - fiat_secp256k1_addcarryx_u32(&x102, &x103, 0x0, x86, x54); + fiat_secp256k1_addcarryx_u32(&x102, &x103, 0x0, x54, x86); uint32_t x104; fiat_secp256k1_uint1 x105; - fiat_secp256k1_addcarryx_u32(&x104, &x105, x103, x88, x56); + fiat_secp256k1_addcarryx_u32(&x104, &x105, x103, x56, x88); uint32_t x106; fiat_secp256k1_uint1 x107; - fiat_secp256k1_addcarryx_u32(&x106, &x107, x105, x90, x58); + fiat_secp256k1_addcarryx_u32(&x106, &x107, x105, x58, x90); uint32_t x108; fiat_secp256k1_uint1 x109; - fiat_secp256k1_addcarryx_u32(&x108, &x109, x107, x92, x60); + fiat_secp256k1_addcarryx_u32(&x108, &x109, x107, x60, x92); uint32_t x110; fiat_secp256k1_uint1 x111; - fiat_secp256k1_addcarryx_u32(&x110, &x111, x109, x94, x62); + fiat_secp256k1_addcarryx_u32(&x110, &x111, x109, x62, x94); uint32_t x112; fiat_secp256k1_uint1 x113; - fiat_secp256k1_addcarryx_u32(&x112, &x113, x111, x96, x64); + fiat_secp256k1_addcarryx_u32(&x112, &x113, x111, x64, x96); uint32_t x114; fiat_secp256k1_uint1 x115; - fiat_secp256k1_addcarryx_u32(&x114, &x115, x113, x98, x66); + fiat_secp256k1_addcarryx_u32(&x114, &x115, x113, x66, x98); uint32_t x116; fiat_secp256k1_uint1 x117; - fiat_secp256k1_addcarryx_u32(&x116, &x117, x115, x100, x68); + fiat_secp256k1_addcarryx_u32(&x116, &x117, x115, x68, x100); uint32_t x118; fiat_secp256k1_uint1 x119; - fiat_secp256k1_addcarryx_u32(&x118, &x119, x53, 0x0, 0x0); + fiat_secp256k1_addcarryx_u32(&x118, &x119, x101, x73, 0x0); uint32_t x120; fiat_secp256k1_uint1 x121; - fiat_secp256k1_addcarryx_u32(&x120, &x121, x69, 0x0, (fiat_secp256k1_uint1)x118); + fiat_secp256k1_addcarryx_u32(&x120, &x121, x53, 0x0, 0x0); uint32_t x122; fiat_secp256k1_uint1 x123; - fiat_secp256k1_addcarryx_u32(&x122, &x123, x101, 0x0, x73); + fiat_secp256k1_addcarryx_u32(&x122, &x123, x69, (fiat_secp256k1_uint1)x120, 0x0); uint32_t x124; fiat_secp256k1_uint1 x125; - fiat_secp256k1_addcarryx_u32(&x124, &x125, x117, x122, x120); + fiat_secp256k1_addcarryx_u32(&x124, &x125, x117, x122, x118); uint32_t x126; fiat_secp256k1_uint1 x127; - fiat_secp256k1_addcarryx_u32(&x126, &x127, 0x0, (arg1[2]), x104); + fiat_secp256k1_addcarryx_u32(&x126, &x127, 0x0, x104, (arg1[2])); uint32_t x128; fiat_secp256k1_uint1 x129; - fiat_secp256k1_addcarryx_u32(&x128, &x129, x127, 0x0, x106); + fiat_secp256k1_addcarryx_u32(&x128, &x129, x127, x106, 0x0); uint32_t x130; fiat_secp256k1_uint1 x131; - fiat_secp256k1_addcarryx_u32(&x130, &x131, x129, 0x0, x108); + fiat_secp256k1_addcarryx_u32(&x130, &x131, x129, x108, 0x0); uint32_t x132; fiat_secp256k1_uint1 x133; - fiat_secp256k1_addcarryx_u32(&x132, &x133, x131, 0x0, x110); + fiat_secp256k1_addcarryx_u32(&x132, &x133, x131, x110, 0x0); uint32_t x134; fiat_secp256k1_uint1 x135; - fiat_secp256k1_addcarryx_u32(&x134, &x135, x133, 0x0, x112); + fiat_secp256k1_addcarryx_u32(&x134, &x135, x133, x112, 0x0); uint32_t x136; fiat_secp256k1_uint1 x137; - fiat_secp256k1_addcarryx_u32(&x136, &x137, x135, 0x0, x114); + fiat_secp256k1_addcarryx_u32(&x136, &x137, x135, x114, 0x0); uint32_t x138; fiat_secp256k1_uint1 x139; - fiat_secp256k1_addcarryx_u32(&x138, &x139, x137, 0x0, x116); + fiat_secp256k1_addcarryx_u32(&x138, &x139, x137, x116, 0x0); uint32_t x140; fiat_secp256k1_uint1 x141; - fiat_secp256k1_addcarryx_u32(&x140, &x141, x139, 0x0, x124); + fiat_secp256k1_addcarryx_u32(&x140, &x141, x139, x124, 0x0); uint32_t x142; uint32_t x143; fiat_secp256k1_mulx_u32(&x142, &x143, x126, UINT32_C(0xd2253531)); @@ -3191,85 +3191,85 @@ static void fiat_secp256k1_from_montgomery(uint32_t out1[8], const uint32_t arg1 fiat_secp256k1_mulx_u32(&x158, &x159, x142, UINT32_C(0xfffffc2f)); uint32_t x160; fiat_secp256k1_uint1 x161; - fiat_secp256k1_addcarryx_u32(&x160, &x161, 0x0, x156, x159); + fiat_secp256k1_addcarryx_u32(&x160, &x161, 0x0, x159, x156); uint32_t x162; fiat_secp256k1_uint1 x163; - fiat_secp256k1_addcarryx_u32(&x162, &x163, x161, x154, x157); + fiat_secp256k1_addcarryx_u32(&x162, &x163, x161, x157, x154); uint32_t x164; fiat_secp256k1_uint1 x165; - fiat_secp256k1_addcarryx_u32(&x164, &x165, x163, x152, x155); + fiat_secp256k1_addcarryx_u32(&x164, &x165, x163, x155, x152); uint32_t x166; fiat_secp256k1_uint1 x167; - fiat_secp256k1_addcarryx_u32(&x166, &x167, x165, x150, x153); + fiat_secp256k1_addcarryx_u32(&x166, &x167, x165, x153, x150); uint32_t x168; fiat_secp256k1_uint1 x169; - fiat_secp256k1_addcarryx_u32(&x168, &x169, x167, x148, x151); + fiat_secp256k1_addcarryx_u32(&x168, &x169, x167, x151, x148); uint32_t x170; fiat_secp256k1_uint1 x171; - fiat_secp256k1_addcarryx_u32(&x170, &x171, x169, x146, x149); + fiat_secp256k1_addcarryx_u32(&x170, &x171, x169, x149, x146); uint32_t x172; fiat_secp256k1_uint1 x173; - fiat_secp256k1_addcarryx_u32(&x172, &x173, x171, x144, x147); + fiat_secp256k1_addcarryx_u32(&x172, &x173, x171, x147, x144); uint32_t x174; fiat_secp256k1_uint1 x175; - fiat_secp256k1_addcarryx_u32(&x174, &x175, 0x0, x158, x126); + fiat_secp256k1_addcarryx_u32(&x174, &x175, 0x0, x126, x158); uint32_t x176; fiat_secp256k1_uint1 x177; - fiat_secp256k1_addcarryx_u32(&x176, &x177, x175, x160, x128); + fiat_secp256k1_addcarryx_u32(&x176, &x177, x175, x128, x160); uint32_t x178; fiat_secp256k1_uint1 x179; - fiat_secp256k1_addcarryx_u32(&x178, &x179, x177, x162, x130); + fiat_secp256k1_addcarryx_u32(&x178, &x179, x177, x130, x162); uint32_t x180; fiat_secp256k1_uint1 x181; - fiat_secp256k1_addcarryx_u32(&x180, &x181, x179, x164, x132); + fiat_secp256k1_addcarryx_u32(&x180, &x181, x179, x132, x164); uint32_t x182; fiat_secp256k1_uint1 x183; - fiat_secp256k1_addcarryx_u32(&x182, &x183, x181, x166, x134); + fiat_secp256k1_addcarryx_u32(&x182, &x183, x181, x134, x166); uint32_t x184; fiat_secp256k1_uint1 x185; - fiat_secp256k1_addcarryx_u32(&x184, &x185, x183, x168, x136); + fiat_secp256k1_addcarryx_u32(&x184, &x185, x183, x136, x168); uint32_t x186; fiat_secp256k1_uint1 x187; - fiat_secp256k1_addcarryx_u32(&x186, &x187, x185, x170, x138); + fiat_secp256k1_addcarryx_u32(&x186, &x187, x185, x138, x170); uint32_t x188; fiat_secp256k1_uint1 x189; - fiat_secp256k1_addcarryx_u32(&x188, &x189, x187, x172, x140); + fiat_secp256k1_addcarryx_u32(&x188, &x189, x187, x140, x172); uint32_t x190; fiat_secp256k1_uint1 x191; - fiat_secp256k1_addcarryx_u32(&x190, &x191, x125, 0x0, 0x0); + fiat_secp256k1_addcarryx_u32(&x190, &x191, x173, x145, 0x0); uint32_t x192; fiat_secp256k1_uint1 x193; - fiat_secp256k1_addcarryx_u32(&x192, &x193, x141, 0x0, (fiat_secp256k1_uint1)x190); + fiat_secp256k1_addcarryx_u32(&x192, &x193, x125, 0x0, 0x0); uint32_t x194; fiat_secp256k1_uint1 x195; - fiat_secp256k1_addcarryx_u32(&x194, &x195, x173, 0x0, x145); + fiat_secp256k1_addcarryx_u32(&x194, &x195, x141, (fiat_secp256k1_uint1)x192, 0x0); uint32_t x196; fiat_secp256k1_uint1 x197; - fiat_secp256k1_addcarryx_u32(&x196, &x197, x189, x194, x192); + fiat_secp256k1_addcarryx_u32(&x196, &x197, x189, x194, x190); uint32_t x198; fiat_secp256k1_uint1 x199; - fiat_secp256k1_addcarryx_u32(&x198, &x199, 0x0, (arg1[3]), x176); + fiat_secp256k1_addcarryx_u32(&x198, &x199, 0x0, x176, (arg1[3])); uint32_t x200; fiat_secp256k1_uint1 x201; - fiat_secp256k1_addcarryx_u32(&x200, &x201, x199, 0x0, x178); + fiat_secp256k1_addcarryx_u32(&x200, &x201, x199, x178, 0x0); uint32_t x202; fiat_secp256k1_uint1 x203; - fiat_secp256k1_addcarryx_u32(&x202, &x203, x201, 0x0, x180); + fiat_secp256k1_addcarryx_u32(&x202, &x203, x201, x180, 0x0); uint32_t x204; fiat_secp256k1_uint1 x205; - fiat_secp256k1_addcarryx_u32(&x204, &x205, x203, 0x0, x182); + fiat_secp256k1_addcarryx_u32(&x204, &x205, x203, x182, 0x0); uint32_t x206; fiat_secp256k1_uint1 x207; - fiat_secp256k1_addcarryx_u32(&x206, &x207, x205, 0x0, x184); + fiat_secp256k1_addcarryx_u32(&x206, &x207, x205, x184, 0x0); uint32_t x208; fiat_secp256k1_uint1 x209; - fiat_secp256k1_addcarryx_u32(&x208, &x209, x207, 0x0, x186); + fiat_secp256k1_addcarryx_u32(&x208, &x209, x207, x186, 0x0); uint32_t x210; fiat_secp256k1_uint1 x211; - fiat_secp256k1_addcarryx_u32(&x210, &x211, x209, 0x0, x188); + fiat_secp256k1_addcarryx_u32(&x210, &x211, x209, x188, 0x0); uint32_t x212; fiat_secp256k1_uint1 x213; - fiat_secp256k1_addcarryx_u32(&x212, &x213, x211, 0x0, x196); + fiat_secp256k1_addcarryx_u32(&x212, &x213, x211, x196, 0x0); uint32_t x214; uint32_t x215; fiat_secp256k1_mulx_u32(&x214, &x215, x198, UINT32_C(0xd2253531)); @@ -3299,85 +3299,85 @@ static void fiat_secp256k1_from_montgomery(uint32_t out1[8], const uint32_t arg1 fiat_secp256k1_mulx_u32(&x230, &x231, x214, UINT32_C(0xfffffc2f)); uint32_t x232; fiat_secp256k1_uint1 x233; - fiat_secp256k1_addcarryx_u32(&x232, &x233, 0x0, x228, x231); + fiat_secp256k1_addcarryx_u32(&x232, &x233, 0x0, x231, x228); uint32_t x234; fiat_secp256k1_uint1 x235; - fiat_secp256k1_addcarryx_u32(&x234, &x235, x233, x226, x229); + fiat_secp256k1_addcarryx_u32(&x234, &x235, x233, x229, x226); uint32_t x236; fiat_secp256k1_uint1 x237; - fiat_secp256k1_addcarryx_u32(&x236, &x237, x235, x224, x227); + fiat_secp256k1_addcarryx_u32(&x236, &x237, x235, x227, x224); uint32_t x238; fiat_secp256k1_uint1 x239; - fiat_secp256k1_addcarryx_u32(&x238, &x239, x237, x222, x225); + fiat_secp256k1_addcarryx_u32(&x238, &x239, x237, x225, x222); uint32_t x240; fiat_secp256k1_uint1 x241; - fiat_secp256k1_addcarryx_u32(&x240, &x241, x239, x220, x223); + fiat_secp256k1_addcarryx_u32(&x240, &x241, x239, x223, x220); uint32_t x242; fiat_secp256k1_uint1 x243; - fiat_secp256k1_addcarryx_u32(&x242, &x243, x241, x218, x221); + fiat_secp256k1_addcarryx_u32(&x242, &x243, x241, x221, x218); uint32_t x244; fiat_secp256k1_uint1 x245; - fiat_secp256k1_addcarryx_u32(&x244, &x245, x243, x216, x219); + fiat_secp256k1_addcarryx_u32(&x244, &x245, x243, x219, x216); uint32_t x246; fiat_secp256k1_uint1 x247; - fiat_secp256k1_addcarryx_u32(&x246, &x247, 0x0, x230, x198); + fiat_secp256k1_addcarryx_u32(&x246, &x247, 0x0, x198, x230); uint32_t x248; fiat_secp256k1_uint1 x249; - fiat_secp256k1_addcarryx_u32(&x248, &x249, x247, x232, x200); + fiat_secp256k1_addcarryx_u32(&x248, &x249, x247, x200, x232); uint32_t x250; fiat_secp256k1_uint1 x251; - fiat_secp256k1_addcarryx_u32(&x250, &x251, x249, x234, x202); + fiat_secp256k1_addcarryx_u32(&x250, &x251, x249, x202, x234); uint32_t x252; fiat_secp256k1_uint1 x253; - fiat_secp256k1_addcarryx_u32(&x252, &x253, x251, x236, x204); + fiat_secp256k1_addcarryx_u32(&x252, &x253, x251, x204, x236); uint32_t x254; fiat_secp256k1_uint1 x255; - fiat_secp256k1_addcarryx_u32(&x254, &x255, x253, x238, x206); + fiat_secp256k1_addcarryx_u32(&x254, &x255, x253, x206, x238); uint32_t x256; fiat_secp256k1_uint1 x257; - fiat_secp256k1_addcarryx_u32(&x256, &x257, x255, x240, x208); + fiat_secp256k1_addcarryx_u32(&x256, &x257, x255, x208, x240); uint32_t x258; fiat_secp256k1_uint1 x259; - fiat_secp256k1_addcarryx_u32(&x258, &x259, x257, x242, x210); + fiat_secp256k1_addcarryx_u32(&x258, &x259, x257, x210, x242); uint32_t x260; fiat_secp256k1_uint1 x261; - fiat_secp256k1_addcarryx_u32(&x260, &x261, x259, x244, x212); + fiat_secp256k1_addcarryx_u32(&x260, &x261, x259, x212, x244); uint32_t x262; fiat_secp256k1_uint1 x263; - fiat_secp256k1_addcarryx_u32(&x262, &x263, x197, 0x0, 0x0); + fiat_secp256k1_addcarryx_u32(&x262, &x263, x245, x217, 0x0); uint32_t x264; fiat_secp256k1_uint1 x265; - fiat_secp256k1_addcarryx_u32(&x264, &x265, x213, 0x0, (fiat_secp256k1_uint1)x262); + fiat_secp256k1_addcarryx_u32(&x264, &x265, x197, 0x0, 0x0); uint32_t x266; fiat_secp256k1_uint1 x267; - fiat_secp256k1_addcarryx_u32(&x266, &x267, x245, 0x0, x217); + fiat_secp256k1_addcarryx_u32(&x266, &x267, x213, (fiat_secp256k1_uint1)x264, 0x0); uint32_t x268; fiat_secp256k1_uint1 x269; - fiat_secp256k1_addcarryx_u32(&x268, &x269, x261, x266, x264); + fiat_secp256k1_addcarryx_u32(&x268, &x269, x261, x266, x262); uint32_t x270; fiat_secp256k1_uint1 x271; - fiat_secp256k1_addcarryx_u32(&x270, &x271, 0x0, (arg1[4]), x248); + fiat_secp256k1_addcarryx_u32(&x270, &x271, 0x0, x248, (arg1[4])); uint32_t x272; fiat_secp256k1_uint1 x273; - fiat_secp256k1_addcarryx_u32(&x272, &x273, x271, 0x0, x250); + fiat_secp256k1_addcarryx_u32(&x272, &x273, x271, x250, 0x0); uint32_t x274; fiat_secp256k1_uint1 x275; - fiat_secp256k1_addcarryx_u32(&x274, &x275, x273, 0x0, x252); + fiat_secp256k1_addcarryx_u32(&x274, &x275, x273, x252, 0x0); uint32_t x276; fiat_secp256k1_uint1 x277; - fiat_secp256k1_addcarryx_u32(&x276, &x277, x275, 0x0, x254); + fiat_secp256k1_addcarryx_u32(&x276, &x277, x275, x254, 0x0); uint32_t x278; fiat_secp256k1_uint1 x279; - fiat_secp256k1_addcarryx_u32(&x278, &x279, x277, 0x0, x256); + fiat_secp256k1_addcarryx_u32(&x278, &x279, x277, x256, 0x0); uint32_t x280; fiat_secp256k1_uint1 x281; - fiat_secp256k1_addcarryx_u32(&x280, &x281, x279, 0x0, x258); + fiat_secp256k1_addcarryx_u32(&x280, &x281, x279, x258, 0x0); uint32_t x282; fiat_secp256k1_uint1 x283; - fiat_secp256k1_addcarryx_u32(&x282, &x283, x281, 0x0, x260); + fiat_secp256k1_addcarryx_u32(&x282, &x283, x281, x260, 0x0); uint32_t x284; fiat_secp256k1_uint1 x285; - fiat_secp256k1_addcarryx_u32(&x284, &x285, x283, 0x0, x268); + fiat_secp256k1_addcarryx_u32(&x284, &x285, x283, x268, 0x0); uint32_t x286; uint32_t x287; fiat_secp256k1_mulx_u32(&x286, &x287, x270, UINT32_C(0xd2253531)); @@ -3407,85 +3407,85 @@ static void fiat_secp256k1_from_montgomery(uint32_t out1[8], const uint32_t arg1 fiat_secp256k1_mulx_u32(&x302, &x303, x286, UINT32_C(0xfffffc2f)); uint32_t x304; fiat_secp256k1_uint1 x305; - fiat_secp256k1_addcarryx_u32(&x304, &x305, 0x0, x300, x303); + fiat_secp256k1_addcarryx_u32(&x304, &x305, 0x0, x303, x300); uint32_t x306; fiat_secp256k1_uint1 x307; - fiat_secp256k1_addcarryx_u32(&x306, &x307, x305, x298, x301); + fiat_secp256k1_addcarryx_u32(&x306, &x307, x305, x301, x298); uint32_t x308; fiat_secp256k1_uint1 x309; - fiat_secp256k1_addcarryx_u32(&x308, &x309, x307, x296, x299); + fiat_secp256k1_addcarryx_u32(&x308, &x309, x307, x299, x296); uint32_t x310; fiat_secp256k1_uint1 x311; - fiat_secp256k1_addcarryx_u32(&x310, &x311, x309, x294, x297); + fiat_secp256k1_addcarryx_u32(&x310, &x311, x309, x297, x294); uint32_t x312; fiat_secp256k1_uint1 x313; - fiat_secp256k1_addcarryx_u32(&x312, &x313, x311, x292, x295); + fiat_secp256k1_addcarryx_u32(&x312, &x313, x311, x295, x292); uint32_t x314; fiat_secp256k1_uint1 x315; - fiat_secp256k1_addcarryx_u32(&x314, &x315, x313, x290, x293); + fiat_secp256k1_addcarryx_u32(&x314, &x315, x313, x293, x290); uint32_t x316; fiat_secp256k1_uint1 x317; - fiat_secp256k1_addcarryx_u32(&x316, &x317, x315, x288, x291); + fiat_secp256k1_addcarryx_u32(&x316, &x317, x315, x291, x288); uint32_t x318; fiat_secp256k1_uint1 x319; - fiat_secp256k1_addcarryx_u32(&x318, &x319, 0x0, x302, x270); + fiat_secp256k1_addcarryx_u32(&x318, &x319, 0x0, x270, x302); uint32_t x320; fiat_secp256k1_uint1 x321; - fiat_secp256k1_addcarryx_u32(&x320, &x321, x319, x304, x272); + fiat_secp256k1_addcarryx_u32(&x320, &x321, x319, x272, x304); uint32_t x322; fiat_secp256k1_uint1 x323; - fiat_secp256k1_addcarryx_u32(&x322, &x323, x321, x306, x274); + fiat_secp256k1_addcarryx_u32(&x322, &x323, x321, x274, x306); uint32_t x324; fiat_secp256k1_uint1 x325; - fiat_secp256k1_addcarryx_u32(&x324, &x325, x323, x308, x276); + fiat_secp256k1_addcarryx_u32(&x324, &x325, x323, x276, x308); uint32_t x326; fiat_secp256k1_uint1 x327; - fiat_secp256k1_addcarryx_u32(&x326, &x327, x325, x310, x278); + fiat_secp256k1_addcarryx_u32(&x326, &x327, x325, x278, x310); uint32_t x328; fiat_secp256k1_uint1 x329; - fiat_secp256k1_addcarryx_u32(&x328, &x329, x327, x312, x280); + fiat_secp256k1_addcarryx_u32(&x328, &x329, x327, x280, x312); uint32_t x330; fiat_secp256k1_uint1 x331; - fiat_secp256k1_addcarryx_u32(&x330, &x331, x329, x314, x282); + fiat_secp256k1_addcarryx_u32(&x330, &x331, x329, x282, x314); uint32_t x332; fiat_secp256k1_uint1 x333; - fiat_secp256k1_addcarryx_u32(&x332, &x333, x331, x316, x284); + fiat_secp256k1_addcarryx_u32(&x332, &x333, x331, x284, x316); uint32_t x334; fiat_secp256k1_uint1 x335; - fiat_secp256k1_addcarryx_u32(&x334, &x335, x269, 0x0, 0x0); + fiat_secp256k1_addcarryx_u32(&x334, &x335, x317, x289, 0x0); uint32_t x336; fiat_secp256k1_uint1 x337; - fiat_secp256k1_addcarryx_u32(&x336, &x337, x285, 0x0, (fiat_secp256k1_uint1)x334); + fiat_secp256k1_addcarryx_u32(&x336, &x337, x269, 0x0, 0x0); uint32_t x338; fiat_secp256k1_uint1 x339; - fiat_secp256k1_addcarryx_u32(&x338, &x339, x317, 0x0, x289); + fiat_secp256k1_addcarryx_u32(&x338, &x339, x285, (fiat_secp256k1_uint1)x336, 0x0); uint32_t x340; fiat_secp256k1_uint1 x341; - fiat_secp256k1_addcarryx_u32(&x340, &x341, x333, x338, x336); + fiat_secp256k1_addcarryx_u32(&x340, &x341, x333, x338, x334); uint32_t x342; fiat_secp256k1_uint1 x343; - fiat_secp256k1_addcarryx_u32(&x342, &x343, 0x0, (arg1[5]), x320); + fiat_secp256k1_addcarryx_u32(&x342, &x343, 0x0, x320, (arg1[5])); uint32_t x344; fiat_secp256k1_uint1 x345; - fiat_secp256k1_addcarryx_u32(&x344, &x345, x343, 0x0, x322); + fiat_secp256k1_addcarryx_u32(&x344, &x345, x343, x322, 0x0); uint32_t x346; fiat_secp256k1_uint1 x347; - fiat_secp256k1_addcarryx_u32(&x346, &x347, x345, 0x0, x324); + fiat_secp256k1_addcarryx_u32(&x346, &x347, x345, x324, 0x0); uint32_t x348; fiat_secp256k1_uint1 x349; - fiat_secp256k1_addcarryx_u32(&x348, &x349, x347, 0x0, x326); + fiat_secp256k1_addcarryx_u32(&x348, &x349, x347, x326, 0x0); uint32_t x350; fiat_secp256k1_uint1 x351; - fiat_secp256k1_addcarryx_u32(&x350, &x351, x349, 0x0, x328); + fiat_secp256k1_addcarryx_u32(&x350, &x351, x349, x328, 0x0); uint32_t x352; fiat_secp256k1_uint1 x353; - fiat_secp256k1_addcarryx_u32(&x352, &x353, x351, 0x0, x330); + fiat_secp256k1_addcarryx_u32(&x352, &x353, x351, x330, 0x0); uint32_t x354; fiat_secp256k1_uint1 x355; - fiat_secp256k1_addcarryx_u32(&x354, &x355, x353, 0x0, x332); + fiat_secp256k1_addcarryx_u32(&x354, &x355, x353, x332, 0x0); uint32_t x356; fiat_secp256k1_uint1 x357; - fiat_secp256k1_addcarryx_u32(&x356, &x357, x355, 0x0, x340); + fiat_secp256k1_addcarryx_u32(&x356, &x357, x355, x340, 0x0); uint32_t x358; uint32_t x359; fiat_secp256k1_mulx_u32(&x358, &x359, x342, UINT32_C(0xd2253531)); @@ -3515,85 +3515,85 @@ static void fiat_secp256k1_from_montgomery(uint32_t out1[8], const uint32_t arg1 fiat_secp256k1_mulx_u32(&x374, &x375, x358, UINT32_C(0xfffffc2f)); uint32_t x376; fiat_secp256k1_uint1 x377; - fiat_secp256k1_addcarryx_u32(&x376, &x377, 0x0, x372, x375); + fiat_secp256k1_addcarryx_u32(&x376, &x377, 0x0, x375, x372); uint32_t x378; fiat_secp256k1_uint1 x379; - fiat_secp256k1_addcarryx_u32(&x378, &x379, x377, x370, x373); + fiat_secp256k1_addcarryx_u32(&x378, &x379, x377, x373, x370); uint32_t x380; fiat_secp256k1_uint1 x381; - fiat_secp256k1_addcarryx_u32(&x380, &x381, x379, x368, x371); + fiat_secp256k1_addcarryx_u32(&x380, &x381, x379, x371, x368); uint32_t x382; fiat_secp256k1_uint1 x383; - fiat_secp256k1_addcarryx_u32(&x382, &x383, x381, x366, x369); + fiat_secp256k1_addcarryx_u32(&x382, &x383, x381, x369, x366); uint32_t x384; fiat_secp256k1_uint1 x385; - fiat_secp256k1_addcarryx_u32(&x384, &x385, x383, x364, x367); + fiat_secp256k1_addcarryx_u32(&x384, &x385, x383, x367, x364); uint32_t x386; fiat_secp256k1_uint1 x387; - fiat_secp256k1_addcarryx_u32(&x386, &x387, x385, x362, x365); + fiat_secp256k1_addcarryx_u32(&x386, &x387, x385, x365, x362); uint32_t x388; fiat_secp256k1_uint1 x389; - fiat_secp256k1_addcarryx_u32(&x388, &x389, x387, x360, x363); + fiat_secp256k1_addcarryx_u32(&x388, &x389, x387, x363, x360); uint32_t x390; fiat_secp256k1_uint1 x391; - fiat_secp256k1_addcarryx_u32(&x390, &x391, 0x0, x374, x342); + fiat_secp256k1_addcarryx_u32(&x390, &x391, 0x0, x342, x374); uint32_t x392; fiat_secp256k1_uint1 x393; - fiat_secp256k1_addcarryx_u32(&x392, &x393, x391, x376, x344); + fiat_secp256k1_addcarryx_u32(&x392, &x393, x391, x344, x376); uint32_t x394; fiat_secp256k1_uint1 x395; - fiat_secp256k1_addcarryx_u32(&x394, &x395, x393, x378, x346); + fiat_secp256k1_addcarryx_u32(&x394, &x395, x393, x346, x378); uint32_t x396; fiat_secp256k1_uint1 x397; - fiat_secp256k1_addcarryx_u32(&x396, &x397, x395, x380, x348); + fiat_secp256k1_addcarryx_u32(&x396, &x397, x395, x348, x380); uint32_t x398; fiat_secp256k1_uint1 x399; - fiat_secp256k1_addcarryx_u32(&x398, &x399, x397, x382, x350); + fiat_secp256k1_addcarryx_u32(&x398, &x399, x397, x350, x382); uint32_t x400; fiat_secp256k1_uint1 x401; - fiat_secp256k1_addcarryx_u32(&x400, &x401, x399, x384, x352); + fiat_secp256k1_addcarryx_u32(&x400, &x401, x399, x352, x384); uint32_t x402; fiat_secp256k1_uint1 x403; - fiat_secp256k1_addcarryx_u32(&x402, &x403, x401, x386, x354); + fiat_secp256k1_addcarryx_u32(&x402, &x403, x401, x354, x386); uint32_t x404; fiat_secp256k1_uint1 x405; - fiat_secp256k1_addcarryx_u32(&x404, &x405, x403, x388, x356); + fiat_secp256k1_addcarryx_u32(&x404, &x405, x403, x356, x388); uint32_t x406; fiat_secp256k1_uint1 x407; - fiat_secp256k1_addcarryx_u32(&x406, &x407, x341, 0x0, 0x0); + fiat_secp256k1_addcarryx_u32(&x406, &x407, x389, x361, 0x0); uint32_t x408; fiat_secp256k1_uint1 x409; - fiat_secp256k1_addcarryx_u32(&x408, &x409, x357, 0x0, (fiat_secp256k1_uint1)x406); + fiat_secp256k1_addcarryx_u32(&x408, &x409, x341, 0x0, 0x0); uint32_t x410; fiat_secp256k1_uint1 x411; - fiat_secp256k1_addcarryx_u32(&x410, &x411, x389, 0x0, x361); + fiat_secp256k1_addcarryx_u32(&x410, &x411, x357, (fiat_secp256k1_uint1)x408, 0x0); uint32_t x412; fiat_secp256k1_uint1 x413; - fiat_secp256k1_addcarryx_u32(&x412, &x413, x405, x410, x408); + fiat_secp256k1_addcarryx_u32(&x412, &x413, x405, x410, x406); uint32_t x414; fiat_secp256k1_uint1 x415; - fiat_secp256k1_addcarryx_u32(&x414, &x415, 0x0, (arg1[6]), x392); + fiat_secp256k1_addcarryx_u32(&x414, &x415, 0x0, x392, (arg1[6])); uint32_t x416; fiat_secp256k1_uint1 x417; - fiat_secp256k1_addcarryx_u32(&x416, &x417, x415, 0x0, x394); + fiat_secp256k1_addcarryx_u32(&x416, &x417, x415, x394, 0x0); uint32_t x418; fiat_secp256k1_uint1 x419; - fiat_secp256k1_addcarryx_u32(&x418, &x419, x417, 0x0, x396); + fiat_secp256k1_addcarryx_u32(&x418, &x419, x417, x396, 0x0); uint32_t x420; fiat_secp256k1_uint1 x421; - fiat_secp256k1_addcarryx_u32(&x420, &x421, x419, 0x0, x398); + fiat_secp256k1_addcarryx_u32(&x420, &x421, x419, x398, 0x0); uint32_t x422; fiat_secp256k1_uint1 x423; - fiat_secp256k1_addcarryx_u32(&x422, &x423, x421, 0x0, x400); + fiat_secp256k1_addcarryx_u32(&x422, &x423, x421, x400, 0x0); uint32_t x424; fiat_secp256k1_uint1 x425; - fiat_secp256k1_addcarryx_u32(&x424, &x425, x423, 0x0, x402); + fiat_secp256k1_addcarryx_u32(&x424, &x425, x423, x402, 0x0); uint32_t x426; fiat_secp256k1_uint1 x427; - fiat_secp256k1_addcarryx_u32(&x426, &x427, x425, 0x0, x404); + fiat_secp256k1_addcarryx_u32(&x426, &x427, x425, x404, 0x0); uint32_t x428; fiat_secp256k1_uint1 x429; - fiat_secp256k1_addcarryx_u32(&x428, &x429, x427, 0x0, x412); + fiat_secp256k1_addcarryx_u32(&x428, &x429, x427, x412, 0x0); uint32_t x430; uint32_t x431; fiat_secp256k1_mulx_u32(&x430, &x431, x414, UINT32_C(0xd2253531)); @@ -3623,85 +3623,85 @@ static void fiat_secp256k1_from_montgomery(uint32_t out1[8], const uint32_t arg1 fiat_secp256k1_mulx_u32(&x446, &x447, x430, UINT32_C(0xfffffc2f)); uint32_t x448; fiat_secp256k1_uint1 x449; - fiat_secp256k1_addcarryx_u32(&x448, &x449, 0x0, x444, x447); + fiat_secp256k1_addcarryx_u32(&x448, &x449, 0x0, x447, x444); uint32_t x450; fiat_secp256k1_uint1 x451; - fiat_secp256k1_addcarryx_u32(&x450, &x451, x449, x442, x445); + fiat_secp256k1_addcarryx_u32(&x450, &x451, x449, x445, x442); uint32_t x452; fiat_secp256k1_uint1 x453; - fiat_secp256k1_addcarryx_u32(&x452, &x453, x451, x440, x443); + fiat_secp256k1_addcarryx_u32(&x452, &x453, x451, x443, x440); uint32_t x454; fiat_secp256k1_uint1 x455; - fiat_secp256k1_addcarryx_u32(&x454, &x455, x453, x438, x441); + fiat_secp256k1_addcarryx_u32(&x454, &x455, x453, x441, x438); uint32_t x456; fiat_secp256k1_uint1 x457; - fiat_secp256k1_addcarryx_u32(&x456, &x457, x455, x436, x439); + fiat_secp256k1_addcarryx_u32(&x456, &x457, x455, x439, x436); uint32_t x458; fiat_secp256k1_uint1 x459; - fiat_secp256k1_addcarryx_u32(&x458, &x459, x457, x434, x437); + fiat_secp256k1_addcarryx_u32(&x458, &x459, x457, x437, x434); uint32_t x460; fiat_secp256k1_uint1 x461; - fiat_secp256k1_addcarryx_u32(&x460, &x461, x459, x432, x435); + fiat_secp256k1_addcarryx_u32(&x460, &x461, x459, x435, x432); uint32_t x462; fiat_secp256k1_uint1 x463; - fiat_secp256k1_addcarryx_u32(&x462, &x463, 0x0, x446, x414); + fiat_secp256k1_addcarryx_u32(&x462, &x463, 0x0, x414, x446); uint32_t x464; fiat_secp256k1_uint1 x465; - fiat_secp256k1_addcarryx_u32(&x464, &x465, x463, x448, x416); + fiat_secp256k1_addcarryx_u32(&x464, &x465, x463, x416, x448); uint32_t x466; fiat_secp256k1_uint1 x467; - fiat_secp256k1_addcarryx_u32(&x466, &x467, x465, x450, x418); + fiat_secp256k1_addcarryx_u32(&x466, &x467, x465, x418, x450); uint32_t x468; fiat_secp256k1_uint1 x469; - fiat_secp256k1_addcarryx_u32(&x468, &x469, x467, x452, x420); + fiat_secp256k1_addcarryx_u32(&x468, &x469, x467, x420, x452); uint32_t x470; fiat_secp256k1_uint1 x471; - fiat_secp256k1_addcarryx_u32(&x470, &x471, x469, x454, x422); + fiat_secp256k1_addcarryx_u32(&x470, &x471, x469, x422, x454); uint32_t x472; fiat_secp256k1_uint1 x473; - fiat_secp256k1_addcarryx_u32(&x472, &x473, x471, x456, x424); + fiat_secp256k1_addcarryx_u32(&x472, &x473, x471, x424, x456); uint32_t x474; fiat_secp256k1_uint1 x475; - fiat_secp256k1_addcarryx_u32(&x474, &x475, x473, x458, x426); + fiat_secp256k1_addcarryx_u32(&x474, &x475, x473, x426, x458); uint32_t x476; fiat_secp256k1_uint1 x477; - fiat_secp256k1_addcarryx_u32(&x476, &x477, x475, x460, x428); + fiat_secp256k1_addcarryx_u32(&x476, &x477, x475, x428, x460); uint32_t x478; fiat_secp256k1_uint1 x479; - fiat_secp256k1_addcarryx_u32(&x478, &x479, x413, 0x0, 0x0); + fiat_secp256k1_addcarryx_u32(&x478, &x479, x461, x433, 0x0); uint32_t x480; fiat_secp256k1_uint1 x481; - fiat_secp256k1_addcarryx_u32(&x480, &x481, x429, 0x0, (fiat_secp256k1_uint1)x478); + fiat_secp256k1_addcarryx_u32(&x480, &x481, x413, 0x0, 0x0); uint32_t x482; fiat_secp256k1_uint1 x483; - fiat_secp256k1_addcarryx_u32(&x482, &x483, x461, 0x0, x433); + fiat_secp256k1_addcarryx_u32(&x482, &x483, x429, (fiat_secp256k1_uint1)x480, 0x0); uint32_t x484; fiat_secp256k1_uint1 x485; - fiat_secp256k1_addcarryx_u32(&x484, &x485, x477, x482, x480); + fiat_secp256k1_addcarryx_u32(&x484, &x485, x477, x482, x478); uint32_t x486; fiat_secp256k1_uint1 x487; - fiat_secp256k1_addcarryx_u32(&x486, &x487, 0x0, (arg1[7]), x464); + fiat_secp256k1_addcarryx_u32(&x486, &x487, 0x0, x464, (arg1[7])); uint32_t x488; fiat_secp256k1_uint1 x489; - fiat_secp256k1_addcarryx_u32(&x488, &x489, x487, 0x0, x466); + fiat_secp256k1_addcarryx_u32(&x488, &x489, x487, x466, 0x0); uint32_t x490; fiat_secp256k1_uint1 x491; - fiat_secp256k1_addcarryx_u32(&x490, &x491, x489, 0x0, x468); + fiat_secp256k1_addcarryx_u32(&x490, &x491, x489, x468, 0x0); uint32_t x492; fiat_secp256k1_uint1 x493; - fiat_secp256k1_addcarryx_u32(&x492, &x493, x491, 0x0, x470); + fiat_secp256k1_addcarryx_u32(&x492, &x493, x491, x470, 0x0); uint32_t x494; fiat_secp256k1_uint1 x495; - fiat_secp256k1_addcarryx_u32(&x494, &x495, x493, 0x0, x472); + fiat_secp256k1_addcarryx_u32(&x494, &x495, x493, x472, 0x0); uint32_t x496; fiat_secp256k1_uint1 x497; - fiat_secp256k1_addcarryx_u32(&x496, &x497, x495, 0x0, x474); + fiat_secp256k1_addcarryx_u32(&x496, &x497, x495, x474, 0x0); uint32_t x498; fiat_secp256k1_uint1 x499; - fiat_secp256k1_addcarryx_u32(&x498, &x499, x497, 0x0, x476); + fiat_secp256k1_addcarryx_u32(&x498, &x499, x497, x476, 0x0); uint32_t x500; fiat_secp256k1_uint1 x501; - fiat_secp256k1_addcarryx_u32(&x500, &x501, x499, 0x0, x484); + fiat_secp256k1_addcarryx_u32(&x500, &x501, x499, x484, 0x0); uint32_t x502; uint32_t x503; fiat_secp256k1_mulx_u32(&x502, &x503, x486, UINT32_C(0xd2253531)); @@ -3731,61 +3731,61 @@ static void fiat_secp256k1_from_montgomery(uint32_t out1[8], const uint32_t arg1 fiat_secp256k1_mulx_u32(&x518, &x519, x502, UINT32_C(0xfffffc2f)); uint32_t x520; fiat_secp256k1_uint1 x521; - fiat_secp256k1_addcarryx_u32(&x520, &x521, 0x0, x516, x519); + fiat_secp256k1_addcarryx_u32(&x520, &x521, 0x0, x519, x516); uint32_t x522; fiat_secp256k1_uint1 x523; - fiat_secp256k1_addcarryx_u32(&x522, &x523, x521, x514, x517); + fiat_secp256k1_addcarryx_u32(&x522, &x523, x521, x517, x514); uint32_t x524; fiat_secp256k1_uint1 x525; - fiat_secp256k1_addcarryx_u32(&x524, &x525, x523, x512, x515); + fiat_secp256k1_addcarryx_u32(&x524, &x525, x523, x515, x512); uint32_t x526; fiat_secp256k1_uint1 x527; - fiat_secp256k1_addcarryx_u32(&x526, &x527, x525, x510, x513); + fiat_secp256k1_addcarryx_u32(&x526, &x527, x525, x513, x510); uint32_t x528; fiat_secp256k1_uint1 x529; - fiat_secp256k1_addcarryx_u32(&x528, &x529, x527, x508, x511); + fiat_secp256k1_addcarryx_u32(&x528, &x529, x527, x511, x508); uint32_t x530; fiat_secp256k1_uint1 x531; - fiat_secp256k1_addcarryx_u32(&x530, &x531, x529, x506, x509); + fiat_secp256k1_addcarryx_u32(&x530, &x531, x529, x509, x506); uint32_t x532; fiat_secp256k1_uint1 x533; - fiat_secp256k1_addcarryx_u32(&x532, &x533, x531, x504, x507); + fiat_secp256k1_addcarryx_u32(&x532, &x533, x531, x507, x504); uint32_t x534; fiat_secp256k1_uint1 x535; - fiat_secp256k1_addcarryx_u32(&x534, &x535, 0x0, x518, x486); + fiat_secp256k1_addcarryx_u32(&x534, &x535, 0x0, x486, x518); uint32_t x536; fiat_secp256k1_uint1 x537; - fiat_secp256k1_addcarryx_u32(&x536, &x537, x535, x520, x488); + fiat_secp256k1_addcarryx_u32(&x536, &x537, x535, x488, x520); uint32_t x538; fiat_secp256k1_uint1 x539; - fiat_secp256k1_addcarryx_u32(&x538, &x539, x537, x522, x490); + fiat_secp256k1_addcarryx_u32(&x538, &x539, x537, x490, x522); uint32_t x540; fiat_secp256k1_uint1 x541; - fiat_secp256k1_addcarryx_u32(&x540, &x541, x539, x524, x492); + fiat_secp256k1_addcarryx_u32(&x540, &x541, x539, x492, x524); uint32_t x542; fiat_secp256k1_uint1 x543; - fiat_secp256k1_addcarryx_u32(&x542, &x543, x541, x526, x494); + fiat_secp256k1_addcarryx_u32(&x542, &x543, x541, x494, x526); uint32_t x544; fiat_secp256k1_uint1 x545; - fiat_secp256k1_addcarryx_u32(&x544, &x545, x543, x528, x496); + fiat_secp256k1_addcarryx_u32(&x544, &x545, x543, x496, x528); uint32_t x546; fiat_secp256k1_uint1 x547; - fiat_secp256k1_addcarryx_u32(&x546, &x547, x545, x530, x498); + fiat_secp256k1_addcarryx_u32(&x546, &x547, x545, x498, x530); uint32_t x548; fiat_secp256k1_uint1 x549; - fiat_secp256k1_addcarryx_u32(&x548, &x549, x547, x532, x500); + fiat_secp256k1_addcarryx_u32(&x548, &x549, x547, x500, x532); uint32_t x550; fiat_secp256k1_uint1 x551; - fiat_secp256k1_addcarryx_u32(&x550, &x551, x485, 0x0, 0x0); + fiat_secp256k1_addcarryx_u32(&x550, &x551, x533, x505, 0x0); uint32_t x552; fiat_secp256k1_uint1 x553; - fiat_secp256k1_addcarryx_u32(&x552, &x553, x501, 0x0, (fiat_secp256k1_uint1)x550); + fiat_secp256k1_addcarryx_u32(&x552, &x553, x485, 0x0, 0x0); uint32_t x554; fiat_secp256k1_uint1 x555; - fiat_secp256k1_addcarryx_u32(&x554, &x555, x533, 0x0, x505); + fiat_secp256k1_addcarryx_u32(&x554, &x555, x501, (fiat_secp256k1_uint1)x552, 0x0); uint32_t x556; fiat_secp256k1_uint1 x557; - fiat_secp256k1_addcarryx_u32(&x556, &x557, x549, x554, x552); + fiat_secp256k1_addcarryx_u32(&x556, &x557, x549, x554, x550); uint32_t x558; fiat_secp256k1_uint1 x559; fiat_secp256k1_subborrowx_u32(&x558, &x559, 0x0, x536, UINT32_C(0xfffffc2f)); diff --git a/secp256k1_64.c b/secp256k1_64.c index 2706759bd..72245e439 100644 --- a/secp256k1_64.c +++ b/secp256k1_64.c @@ -136,16 +136,16 @@ static void fiat_secp256k1_mul(uint64_t out1[4], const uint64_t arg1[4], const u fiat_secp256k1_mulx_u64(&x11, &x12, x4, (arg2[0])); uint64_t x13; fiat_secp256k1_uint1 x14; - fiat_secp256k1_addcarryx_u64(&x13, &x14, 0x0, x9, x12); + fiat_secp256k1_addcarryx_u64(&x13, &x14, 0x0, x12, x9); uint64_t x15; fiat_secp256k1_uint1 x16; - fiat_secp256k1_addcarryx_u64(&x15, &x16, x14, x7, x10); + fiat_secp256k1_addcarryx_u64(&x15, &x16, x14, x10, x7); uint64_t x17; fiat_secp256k1_uint1 x18; - fiat_secp256k1_addcarryx_u64(&x17, &x18, x16, x5, x8); + fiat_secp256k1_addcarryx_u64(&x17, &x18, x16, x8, x5); uint64_t x19; fiat_secp256k1_uint1 x20; - fiat_secp256k1_addcarryx_u64(&x19, &x20, x18, 0x0, x6); + fiat_secp256k1_addcarryx_u64(&x19, &x20, x18, x6, 0x0); uint64_t x21; uint64_t x22; fiat_secp256k1_mulx_u64(&x21, &x22, x11, UINT64_C(0xd838091dd2253531)); @@ -163,31 +163,31 @@ static void fiat_secp256k1_mul(uint64_t out1[4], const uint64_t arg1[4], const u fiat_secp256k1_mulx_u64(&x29, &x30, x21, UINT64_C(0xfffffffefffffc2f)); uint64_t x31; fiat_secp256k1_uint1 x32; - fiat_secp256k1_addcarryx_u64(&x31, &x32, 0x0, x27, x30); + fiat_secp256k1_addcarryx_u64(&x31, &x32, 0x0, x30, x27); uint64_t x33; fiat_secp256k1_uint1 x34; - fiat_secp256k1_addcarryx_u64(&x33, &x34, x32, x25, x28); + fiat_secp256k1_addcarryx_u64(&x33, &x34, x32, x28, x25); uint64_t x35; fiat_secp256k1_uint1 x36; - fiat_secp256k1_addcarryx_u64(&x35, &x36, x34, x23, x26); + fiat_secp256k1_addcarryx_u64(&x35, &x36, x34, x26, x23); uint64_t x37; fiat_secp256k1_uint1 x38; - fiat_secp256k1_addcarryx_u64(&x37, &x38, x36, 0x0, x24); + fiat_secp256k1_addcarryx_u64(&x37, &x38, x36, x24, 0x0); uint64_t x39; fiat_secp256k1_uint1 x40; - fiat_secp256k1_addcarryx_u64(&x39, &x40, 0x0, x29, x11); + fiat_secp256k1_addcarryx_u64(&x39, &x40, 0x0, x11, x29); uint64_t x41; fiat_secp256k1_uint1 x42; - fiat_secp256k1_addcarryx_u64(&x41, &x42, x40, x31, x13); + fiat_secp256k1_addcarryx_u64(&x41, &x42, x40, x13, x31); uint64_t x43; fiat_secp256k1_uint1 x44; - fiat_secp256k1_addcarryx_u64(&x43, &x44, x42, x33, x15); + fiat_secp256k1_addcarryx_u64(&x43, &x44, x42, x15, x33); uint64_t x45; fiat_secp256k1_uint1 x46; - fiat_secp256k1_addcarryx_u64(&x45, &x46, x44, x35, x17); + fiat_secp256k1_addcarryx_u64(&x45, &x46, x44, x17, x35); uint64_t x47; fiat_secp256k1_uint1 x48; - fiat_secp256k1_addcarryx_u64(&x47, &x48, x46, x37, x19); + fiat_secp256k1_addcarryx_u64(&x47, &x48, x46, x19, x37); uint64_t x49; fiat_secp256k1_uint1 x50; fiat_secp256k1_addcarryx_u64(&x49, &x50, x48, 0x0, 0x0); @@ -205,31 +205,31 @@ static void fiat_secp256k1_mul(uint64_t out1[4], const uint64_t arg1[4], const u fiat_secp256k1_mulx_u64(&x57, &x58, x1, (arg2[0])); uint64_t x59; fiat_secp256k1_uint1 x60; - fiat_secp256k1_addcarryx_u64(&x59, &x60, 0x0, x55, x58); + fiat_secp256k1_addcarryx_u64(&x59, &x60, 0x0, x58, x55); uint64_t x61; fiat_secp256k1_uint1 x62; - fiat_secp256k1_addcarryx_u64(&x61, &x62, x60, x53, x56); + fiat_secp256k1_addcarryx_u64(&x61, &x62, x60, x56, x53); uint64_t x63; fiat_secp256k1_uint1 x64; - fiat_secp256k1_addcarryx_u64(&x63, &x64, x62, x51, x54); + fiat_secp256k1_addcarryx_u64(&x63, &x64, x62, x54, x51); uint64_t x65; fiat_secp256k1_uint1 x66; - fiat_secp256k1_addcarryx_u64(&x65, &x66, x64, 0x0, x52); + fiat_secp256k1_addcarryx_u64(&x65, &x66, x64, x52, 0x0); uint64_t x67; fiat_secp256k1_uint1 x68; - fiat_secp256k1_addcarryx_u64(&x67, &x68, 0x0, x57, x41); + fiat_secp256k1_addcarryx_u64(&x67, &x68, 0x0, x41, x57); uint64_t x69; fiat_secp256k1_uint1 x70; - fiat_secp256k1_addcarryx_u64(&x69, &x70, x68, x59, x43); + fiat_secp256k1_addcarryx_u64(&x69, &x70, x68, x43, x59); uint64_t x71; fiat_secp256k1_uint1 x72; - fiat_secp256k1_addcarryx_u64(&x71, &x72, x70, x61, x45); + fiat_secp256k1_addcarryx_u64(&x71, &x72, x70, x45, x61); uint64_t x73; fiat_secp256k1_uint1 x74; - fiat_secp256k1_addcarryx_u64(&x73, &x74, x72, x63, x47); + fiat_secp256k1_addcarryx_u64(&x73, &x74, x72, x47, x63); uint64_t x75; fiat_secp256k1_uint1 x76; - fiat_secp256k1_addcarryx_u64(&x75, &x76, x74, x65, (fiat_secp256k1_uint1)x49); + fiat_secp256k1_addcarryx_u64(&x75, &x76, x74, (fiat_secp256k1_uint1)x49, x65); uint64_t x77; uint64_t x78; fiat_secp256k1_mulx_u64(&x77, &x78, x67, UINT64_C(0xd838091dd2253531)); @@ -247,34 +247,34 @@ static void fiat_secp256k1_mul(uint64_t out1[4], const uint64_t arg1[4], const u fiat_secp256k1_mulx_u64(&x85, &x86, x77, UINT64_C(0xfffffffefffffc2f)); uint64_t x87; fiat_secp256k1_uint1 x88; - fiat_secp256k1_addcarryx_u64(&x87, &x88, 0x0, x83, x86); + fiat_secp256k1_addcarryx_u64(&x87, &x88, 0x0, x86, x83); uint64_t x89; fiat_secp256k1_uint1 x90; - fiat_secp256k1_addcarryx_u64(&x89, &x90, x88, x81, x84); + fiat_secp256k1_addcarryx_u64(&x89, &x90, x88, x84, x81); uint64_t x91; fiat_secp256k1_uint1 x92; - fiat_secp256k1_addcarryx_u64(&x91, &x92, x90, x79, x82); + fiat_secp256k1_addcarryx_u64(&x91, &x92, x90, x82, x79); uint64_t x93; fiat_secp256k1_uint1 x94; - fiat_secp256k1_addcarryx_u64(&x93, &x94, x92, 0x0, x80); + fiat_secp256k1_addcarryx_u64(&x93, &x94, x92, x80, 0x0); uint64_t x95; fiat_secp256k1_uint1 x96; - fiat_secp256k1_addcarryx_u64(&x95, &x96, 0x0, x85, x67); + fiat_secp256k1_addcarryx_u64(&x95, &x96, 0x0, x67, x85); uint64_t x97; fiat_secp256k1_uint1 x98; - fiat_secp256k1_addcarryx_u64(&x97, &x98, x96, x87, x69); + fiat_secp256k1_addcarryx_u64(&x97, &x98, x96, x69, x87); uint64_t x99; fiat_secp256k1_uint1 x100; - fiat_secp256k1_addcarryx_u64(&x99, &x100, x98, x89, x71); + fiat_secp256k1_addcarryx_u64(&x99, &x100, x98, x71, x89); uint64_t x101; fiat_secp256k1_uint1 x102; - fiat_secp256k1_addcarryx_u64(&x101, &x102, x100, x91, x73); + fiat_secp256k1_addcarryx_u64(&x101, &x102, x100, x73, x91); uint64_t x103; fiat_secp256k1_uint1 x104; - fiat_secp256k1_addcarryx_u64(&x103, &x104, x102, x93, x75); + fiat_secp256k1_addcarryx_u64(&x103, &x104, x102, x75, x93); uint64_t x105; fiat_secp256k1_uint1 x106; - fiat_secp256k1_addcarryx_u64(&x105, &x106, x104, 0x0, x76); + fiat_secp256k1_addcarryx_u64(&x105, &x106, x104, x76, 0x0); uint64_t x107; uint64_t x108; fiat_secp256k1_mulx_u64(&x107, &x108, x2, (arg2[3])); @@ -289,31 +289,31 @@ static void fiat_secp256k1_mul(uint64_t out1[4], const uint64_t arg1[4], const u fiat_secp256k1_mulx_u64(&x113, &x114, x2, (arg2[0])); uint64_t x115; fiat_secp256k1_uint1 x116; - fiat_secp256k1_addcarryx_u64(&x115, &x116, 0x0, x111, x114); + fiat_secp256k1_addcarryx_u64(&x115, &x116, 0x0, x114, x111); uint64_t x117; fiat_secp256k1_uint1 x118; - fiat_secp256k1_addcarryx_u64(&x117, &x118, x116, x109, x112); + fiat_secp256k1_addcarryx_u64(&x117, &x118, x116, x112, x109); uint64_t x119; fiat_secp256k1_uint1 x120; - fiat_secp256k1_addcarryx_u64(&x119, &x120, x118, x107, x110); + fiat_secp256k1_addcarryx_u64(&x119, &x120, x118, x110, x107); uint64_t x121; fiat_secp256k1_uint1 x122; - fiat_secp256k1_addcarryx_u64(&x121, &x122, x120, 0x0, x108); + fiat_secp256k1_addcarryx_u64(&x121, &x122, x120, x108, 0x0); uint64_t x123; fiat_secp256k1_uint1 x124; - fiat_secp256k1_addcarryx_u64(&x123, &x124, 0x0, x113, x97); + fiat_secp256k1_addcarryx_u64(&x123, &x124, 0x0, x97, x113); uint64_t x125; fiat_secp256k1_uint1 x126; - fiat_secp256k1_addcarryx_u64(&x125, &x126, x124, x115, x99); + fiat_secp256k1_addcarryx_u64(&x125, &x126, x124, x99, x115); uint64_t x127; fiat_secp256k1_uint1 x128; - fiat_secp256k1_addcarryx_u64(&x127, &x128, x126, x117, x101); + fiat_secp256k1_addcarryx_u64(&x127, &x128, x126, x101, x117); uint64_t x129; fiat_secp256k1_uint1 x130; - fiat_secp256k1_addcarryx_u64(&x129, &x130, x128, x119, x103); + fiat_secp256k1_addcarryx_u64(&x129, &x130, x128, x103, x119); uint64_t x131; fiat_secp256k1_uint1 x132; - fiat_secp256k1_addcarryx_u64(&x131, &x132, x130, x121, x105); + fiat_secp256k1_addcarryx_u64(&x131, &x132, x130, x105, x121); uint64_t x133; uint64_t x134; fiat_secp256k1_mulx_u64(&x133, &x134, x123, UINT64_C(0xd838091dd2253531)); @@ -331,34 +331,34 @@ static void fiat_secp256k1_mul(uint64_t out1[4], const uint64_t arg1[4], const u fiat_secp256k1_mulx_u64(&x141, &x142, x133, UINT64_C(0xfffffffefffffc2f)); uint64_t x143; fiat_secp256k1_uint1 x144; - fiat_secp256k1_addcarryx_u64(&x143, &x144, 0x0, x139, x142); + fiat_secp256k1_addcarryx_u64(&x143, &x144, 0x0, x142, x139); uint64_t x145; fiat_secp256k1_uint1 x146; - fiat_secp256k1_addcarryx_u64(&x145, &x146, x144, x137, x140); + fiat_secp256k1_addcarryx_u64(&x145, &x146, x144, x140, x137); uint64_t x147; fiat_secp256k1_uint1 x148; - fiat_secp256k1_addcarryx_u64(&x147, &x148, x146, x135, x138); + fiat_secp256k1_addcarryx_u64(&x147, &x148, x146, x138, x135); uint64_t x149; fiat_secp256k1_uint1 x150; - fiat_secp256k1_addcarryx_u64(&x149, &x150, x148, 0x0, x136); + fiat_secp256k1_addcarryx_u64(&x149, &x150, x148, x136, 0x0); uint64_t x151; fiat_secp256k1_uint1 x152; - fiat_secp256k1_addcarryx_u64(&x151, &x152, 0x0, x141, x123); + fiat_secp256k1_addcarryx_u64(&x151, &x152, 0x0, x123, x141); uint64_t x153; fiat_secp256k1_uint1 x154; - fiat_secp256k1_addcarryx_u64(&x153, &x154, x152, x143, x125); + fiat_secp256k1_addcarryx_u64(&x153, &x154, x152, x125, x143); uint64_t x155; fiat_secp256k1_uint1 x156; - fiat_secp256k1_addcarryx_u64(&x155, &x156, x154, x145, x127); + fiat_secp256k1_addcarryx_u64(&x155, &x156, x154, x127, x145); uint64_t x157; fiat_secp256k1_uint1 x158; - fiat_secp256k1_addcarryx_u64(&x157, &x158, x156, x147, x129); + fiat_secp256k1_addcarryx_u64(&x157, &x158, x156, x129, x147); uint64_t x159; fiat_secp256k1_uint1 x160; - fiat_secp256k1_addcarryx_u64(&x159, &x160, x158, x149, x131); + fiat_secp256k1_addcarryx_u64(&x159, &x160, x158, x131, x149); uint64_t x161; fiat_secp256k1_uint1 x162; - fiat_secp256k1_addcarryx_u64(&x161, &x162, x160, 0x0, x132); + fiat_secp256k1_addcarryx_u64(&x161, &x162, x160, x132, 0x0); uint64_t x163; uint64_t x164; fiat_secp256k1_mulx_u64(&x163, &x164, x3, (arg2[3])); @@ -373,31 +373,31 @@ static void fiat_secp256k1_mul(uint64_t out1[4], const uint64_t arg1[4], const u fiat_secp256k1_mulx_u64(&x169, &x170, x3, (arg2[0])); uint64_t x171; fiat_secp256k1_uint1 x172; - fiat_secp256k1_addcarryx_u64(&x171, &x172, 0x0, x167, x170); + fiat_secp256k1_addcarryx_u64(&x171, &x172, 0x0, x170, x167); uint64_t x173; fiat_secp256k1_uint1 x174; - fiat_secp256k1_addcarryx_u64(&x173, &x174, x172, x165, x168); + fiat_secp256k1_addcarryx_u64(&x173, &x174, x172, x168, x165); uint64_t x175; fiat_secp256k1_uint1 x176; - fiat_secp256k1_addcarryx_u64(&x175, &x176, x174, x163, x166); + fiat_secp256k1_addcarryx_u64(&x175, &x176, x174, x166, x163); uint64_t x177; fiat_secp256k1_uint1 x178; - fiat_secp256k1_addcarryx_u64(&x177, &x178, x176, 0x0, x164); + fiat_secp256k1_addcarryx_u64(&x177, &x178, x176, x164, 0x0); uint64_t x179; fiat_secp256k1_uint1 x180; - fiat_secp256k1_addcarryx_u64(&x179, &x180, 0x0, x169, x153); + fiat_secp256k1_addcarryx_u64(&x179, &x180, 0x0, x153, x169); uint64_t x181; fiat_secp256k1_uint1 x182; - fiat_secp256k1_addcarryx_u64(&x181, &x182, x180, x171, x155); + fiat_secp256k1_addcarryx_u64(&x181, &x182, x180, x155, x171); uint64_t x183; fiat_secp256k1_uint1 x184; - fiat_secp256k1_addcarryx_u64(&x183, &x184, x182, x173, x157); + fiat_secp256k1_addcarryx_u64(&x183, &x184, x182, x157, x173); uint64_t x185; fiat_secp256k1_uint1 x186; - fiat_secp256k1_addcarryx_u64(&x185, &x186, x184, x175, x159); + fiat_secp256k1_addcarryx_u64(&x185, &x186, x184, x159, x175); uint64_t x187; fiat_secp256k1_uint1 x188; - fiat_secp256k1_addcarryx_u64(&x187, &x188, x186, x177, x161); + fiat_secp256k1_addcarryx_u64(&x187, &x188, x186, x161, x177); uint64_t x189; uint64_t x190; fiat_secp256k1_mulx_u64(&x189, &x190, x179, UINT64_C(0xd838091dd2253531)); @@ -415,34 +415,34 @@ static void fiat_secp256k1_mul(uint64_t out1[4], const uint64_t arg1[4], const u fiat_secp256k1_mulx_u64(&x197, &x198, x189, UINT64_C(0xfffffffefffffc2f)); uint64_t x199; fiat_secp256k1_uint1 x200; - fiat_secp256k1_addcarryx_u64(&x199, &x200, 0x0, x195, x198); + fiat_secp256k1_addcarryx_u64(&x199, &x200, 0x0, x198, x195); uint64_t x201; fiat_secp256k1_uint1 x202; - fiat_secp256k1_addcarryx_u64(&x201, &x202, x200, x193, x196); + fiat_secp256k1_addcarryx_u64(&x201, &x202, x200, x196, x193); uint64_t x203; fiat_secp256k1_uint1 x204; - fiat_secp256k1_addcarryx_u64(&x203, &x204, x202, x191, x194); + fiat_secp256k1_addcarryx_u64(&x203, &x204, x202, x194, x191); uint64_t x205; fiat_secp256k1_uint1 x206; - fiat_secp256k1_addcarryx_u64(&x205, &x206, x204, 0x0, x192); + fiat_secp256k1_addcarryx_u64(&x205, &x206, x204, x192, 0x0); uint64_t x207; fiat_secp256k1_uint1 x208; - fiat_secp256k1_addcarryx_u64(&x207, &x208, 0x0, x197, x179); + fiat_secp256k1_addcarryx_u64(&x207, &x208, 0x0, x179, x197); uint64_t x209; fiat_secp256k1_uint1 x210; - fiat_secp256k1_addcarryx_u64(&x209, &x210, x208, x199, x181); + fiat_secp256k1_addcarryx_u64(&x209, &x210, x208, x181, x199); uint64_t x211; fiat_secp256k1_uint1 x212; - fiat_secp256k1_addcarryx_u64(&x211, &x212, x210, x201, x183); + fiat_secp256k1_addcarryx_u64(&x211, &x212, x210, x183, x201); uint64_t x213; fiat_secp256k1_uint1 x214; - fiat_secp256k1_addcarryx_u64(&x213, &x214, x212, x203, x185); + fiat_secp256k1_addcarryx_u64(&x213, &x214, x212, x185, x203); uint64_t x215; fiat_secp256k1_uint1 x216; - fiat_secp256k1_addcarryx_u64(&x215, &x216, x214, x205, x187); + fiat_secp256k1_addcarryx_u64(&x215, &x216, x214, x187, x205); uint64_t x217; fiat_secp256k1_uint1 x218; - fiat_secp256k1_addcarryx_u64(&x217, &x218, x216, 0x0, x188); + fiat_secp256k1_addcarryx_u64(&x217, &x218, x216, x188, 0x0); uint64_t x219; fiat_secp256k1_uint1 x220; fiat_secp256k1_subborrowx_u64(&x219, &x220, 0x0, x209, UINT64_C(0xfffffffefffffc2f)); @@ -504,16 +504,16 @@ static void fiat_secp256k1_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_secp256k1_mulx_u64(&x11, &x12, x4, (arg1[0])); uint64_t x13; fiat_secp256k1_uint1 x14; - fiat_secp256k1_addcarryx_u64(&x13, &x14, 0x0, x9, x12); + fiat_secp256k1_addcarryx_u64(&x13, &x14, 0x0, x12, x9); uint64_t x15; fiat_secp256k1_uint1 x16; - fiat_secp256k1_addcarryx_u64(&x15, &x16, x14, x7, x10); + fiat_secp256k1_addcarryx_u64(&x15, &x16, x14, x10, x7); uint64_t x17; fiat_secp256k1_uint1 x18; - fiat_secp256k1_addcarryx_u64(&x17, &x18, x16, x5, x8); + fiat_secp256k1_addcarryx_u64(&x17, &x18, x16, x8, x5); uint64_t x19; fiat_secp256k1_uint1 x20; - fiat_secp256k1_addcarryx_u64(&x19, &x20, x18, 0x0, x6); + fiat_secp256k1_addcarryx_u64(&x19, &x20, x18, x6, 0x0); uint64_t x21; uint64_t x22; fiat_secp256k1_mulx_u64(&x21, &x22, x11, UINT64_C(0xd838091dd2253531)); @@ -531,31 +531,31 @@ static void fiat_secp256k1_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_secp256k1_mulx_u64(&x29, &x30, x21, UINT64_C(0xfffffffefffffc2f)); uint64_t x31; fiat_secp256k1_uint1 x32; - fiat_secp256k1_addcarryx_u64(&x31, &x32, 0x0, x27, x30); + fiat_secp256k1_addcarryx_u64(&x31, &x32, 0x0, x30, x27); uint64_t x33; fiat_secp256k1_uint1 x34; - fiat_secp256k1_addcarryx_u64(&x33, &x34, x32, x25, x28); + fiat_secp256k1_addcarryx_u64(&x33, &x34, x32, x28, x25); uint64_t x35; fiat_secp256k1_uint1 x36; - fiat_secp256k1_addcarryx_u64(&x35, &x36, x34, x23, x26); + fiat_secp256k1_addcarryx_u64(&x35, &x36, x34, x26, x23); uint64_t x37; fiat_secp256k1_uint1 x38; - fiat_secp256k1_addcarryx_u64(&x37, &x38, x36, 0x0, x24); + fiat_secp256k1_addcarryx_u64(&x37, &x38, x36, x24, 0x0); uint64_t x39; fiat_secp256k1_uint1 x40; - fiat_secp256k1_addcarryx_u64(&x39, &x40, 0x0, x29, x11); + fiat_secp256k1_addcarryx_u64(&x39, &x40, 0x0, x11, x29); uint64_t x41; fiat_secp256k1_uint1 x42; - fiat_secp256k1_addcarryx_u64(&x41, &x42, x40, x31, x13); + fiat_secp256k1_addcarryx_u64(&x41, &x42, x40, x13, x31); uint64_t x43; fiat_secp256k1_uint1 x44; - fiat_secp256k1_addcarryx_u64(&x43, &x44, x42, x33, x15); + fiat_secp256k1_addcarryx_u64(&x43, &x44, x42, x15, x33); uint64_t x45; fiat_secp256k1_uint1 x46; - fiat_secp256k1_addcarryx_u64(&x45, &x46, x44, x35, x17); + fiat_secp256k1_addcarryx_u64(&x45, &x46, x44, x17, x35); uint64_t x47; fiat_secp256k1_uint1 x48; - fiat_secp256k1_addcarryx_u64(&x47, &x48, x46, x37, x19); + fiat_secp256k1_addcarryx_u64(&x47, &x48, x46, x19, x37); uint64_t x49; fiat_secp256k1_uint1 x50; fiat_secp256k1_addcarryx_u64(&x49, &x50, x48, 0x0, 0x0); @@ -573,31 +573,31 @@ static void fiat_secp256k1_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_secp256k1_mulx_u64(&x57, &x58, x1, (arg1[0])); uint64_t x59; fiat_secp256k1_uint1 x60; - fiat_secp256k1_addcarryx_u64(&x59, &x60, 0x0, x55, x58); + fiat_secp256k1_addcarryx_u64(&x59, &x60, 0x0, x58, x55); uint64_t x61; fiat_secp256k1_uint1 x62; - fiat_secp256k1_addcarryx_u64(&x61, &x62, x60, x53, x56); + fiat_secp256k1_addcarryx_u64(&x61, &x62, x60, x56, x53); uint64_t x63; fiat_secp256k1_uint1 x64; - fiat_secp256k1_addcarryx_u64(&x63, &x64, x62, x51, x54); + fiat_secp256k1_addcarryx_u64(&x63, &x64, x62, x54, x51); uint64_t x65; fiat_secp256k1_uint1 x66; - fiat_secp256k1_addcarryx_u64(&x65, &x66, x64, 0x0, x52); + fiat_secp256k1_addcarryx_u64(&x65, &x66, x64, x52, 0x0); uint64_t x67; fiat_secp256k1_uint1 x68; - fiat_secp256k1_addcarryx_u64(&x67, &x68, 0x0, x57, x41); + fiat_secp256k1_addcarryx_u64(&x67, &x68, 0x0, x41, x57); uint64_t x69; fiat_secp256k1_uint1 x70; - fiat_secp256k1_addcarryx_u64(&x69, &x70, x68, x59, x43); + fiat_secp256k1_addcarryx_u64(&x69, &x70, x68, x43, x59); uint64_t x71; fiat_secp256k1_uint1 x72; - fiat_secp256k1_addcarryx_u64(&x71, &x72, x70, x61, x45); + fiat_secp256k1_addcarryx_u64(&x71, &x72, x70, x45, x61); uint64_t x73; fiat_secp256k1_uint1 x74; - fiat_secp256k1_addcarryx_u64(&x73, &x74, x72, x63, x47); + fiat_secp256k1_addcarryx_u64(&x73, &x74, x72, x47, x63); uint64_t x75; fiat_secp256k1_uint1 x76; - fiat_secp256k1_addcarryx_u64(&x75, &x76, x74, x65, (fiat_secp256k1_uint1)x49); + fiat_secp256k1_addcarryx_u64(&x75, &x76, x74, (fiat_secp256k1_uint1)x49, x65); uint64_t x77; uint64_t x78; fiat_secp256k1_mulx_u64(&x77, &x78, x67, UINT64_C(0xd838091dd2253531)); @@ -615,34 +615,34 @@ static void fiat_secp256k1_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_secp256k1_mulx_u64(&x85, &x86, x77, UINT64_C(0xfffffffefffffc2f)); uint64_t x87; fiat_secp256k1_uint1 x88; - fiat_secp256k1_addcarryx_u64(&x87, &x88, 0x0, x83, x86); + fiat_secp256k1_addcarryx_u64(&x87, &x88, 0x0, x86, x83); uint64_t x89; fiat_secp256k1_uint1 x90; - fiat_secp256k1_addcarryx_u64(&x89, &x90, x88, x81, x84); + fiat_secp256k1_addcarryx_u64(&x89, &x90, x88, x84, x81); uint64_t x91; fiat_secp256k1_uint1 x92; - fiat_secp256k1_addcarryx_u64(&x91, &x92, x90, x79, x82); + fiat_secp256k1_addcarryx_u64(&x91, &x92, x90, x82, x79); uint64_t x93; fiat_secp256k1_uint1 x94; - fiat_secp256k1_addcarryx_u64(&x93, &x94, x92, 0x0, x80); + fiat_secp256k1_addcarryx_u64(&x93, &x94, x92, x80, 0x0); uint64_t x95; fiat_secp256k1_uint1 x96; - fiat_secp256k1_addcarryx_u64(&x95, &x96, 0x0, x85, x67); + fiat_secp256k1_addcarryx_u64(&x95, &x96, 0x0, x67, x85); uint64_t x97; fiat_secp256k1_uint1 x98; - fiat_secp256k1_addcarryx_u64(&x97, &x98, x96, x87, x69); + fiat_secp256k1_addcarryx_u64(&x97, &x98, x96, x69, x87); uint64_t x99; fiat_secp256k1_uint1 x100; - fiat_secp256k1_addcarryx_u64(&x99, &x100, x98, x89, x71); + fiat_secp256k1_addcarryx_u64(&x99, &x100, x98, x71, x89); uint64_t x101; fiat_secp256k1_uint1 x102; - fiat_secp256k1_addcarryx_u64(&x101, &x102, x100, x91, x73); + fiat_secp256k1_addcarryx_u64(&x101, &x102, x100, x73, x91); uint64_t x103; fiat_secp256k1_uint1 x104; - fiat_secp256k1_addcarryx_u64(&x103, &x104, x102, x93, x75); + fiat_secp256k1_addcarryx_u64(&x103, &x104, x102, x75, x93); uint64_t x105; fiat_secp256k1_uint1 x106; - fiat_secp256k1_addcarryx_u64(&x105, &x106, x104, 0x0, x76); + fiat_secp256k1_addcarryx_u64(&x105, &x106, x104, x76, 0x0); uint64_t x107; uint64_t x108; fiat_secp256k1_mulx_u64(&x107, &x108, x2, (arg1[3])); @@ -657,31 +657,31 @@ static void fiat_secp256k1_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_secp256k1_mulx_u64(&x113, &x114, x2, (arg1[0])); uint64_t x115; fiat_secp256k1_uint1 x116; - fiat_secp256k1_addcarryx_u64(&x115, &x116, 0x0, x111, x114); + fiat_secp256k1_addcarryx_u64(&x115, &x116, 0x0, x114, x111); uint64_t x117; fiat_secp256k1_uint1 x118; - fiat_secp256k1_addcarryx_u64(&x117, &x118, x116, x109, x112); + fiat_secp256k1_addcarryx_u64(&x117, &x118, x116, x112, x109); uint64_t x119; fiat_secp256k1_uint1 x120; - fiat_secp256k1_addcarryx_u64(&x119, &x120, x118, x107, x110); + fiat_secp256k1_addcarryx_u64(&x119, &x120, x118, x110, x107); uint64_t x121; fiat_secp256k1_uint1 x122; - fiat_secp256k1_addcarryx_u64(&x121, &x122, x120, 0x0, x108); + fiat_secp256k1_addcarryx_u64(&x121, &x122, x120, x108, 0x0); uint64_t x123; fiat_secp256k1_uint1 x124; - fiat_secp256k1_addcarryx_u64(&x123, &x124, 0x0, x113, x97); + fiat_secp256k1_addcarryx_u64(&x123, &x124, 0x0, x97, x113); uint64_t x125; fiat_secp256k1_uint1 x126; - fiat_secp256k1_addcarryx_u64(&x125, &x126, x124, x115, x99); + fiat_secp256k1_addcarryx_u64(&x125, &x126, x124, x99, x115); uint64_t x127; fiat_secp256k1_uint1 x128; - fiat_secp256k1_addcarryx_u64(&x127, &x128, x126, x117, x101); + fiat_secp256k1_addcarryx_u64(&x127, &x128, x126, x101, x117); uint64_t x129; fiat_secp256k1_uint1 x130; - fiat_secp256k1_addcarryx_u64(&x129, &x130, x128, x119, x103); + fiat_secp256k1_addcarryx_u64(&x129, &x130, x128, x103, x119); uint64_t x131; fiat_secp256k1_uint1 x132; - fiat_secp256k1_addcarryx_u64(&x131, &x132, x130, x121, x105); + fiat_secp256k1_addcarryx_u64(&x131, &x132, x130, x105, x121); uint64_t x133; uint64_t x134; fiat_secp256k1_mulx_u64(&x133, &x134, x123, UINT64_C(0xd838091dd2253531)); @@ -699,34 +699,34 @@ static void fiat_secp256k1_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_secp256k1_mulx_u64(&x141, &x142, x133, UINT64_C(0xfffffffefffffc2f)); uint64_t x143; fiat_secp256k1_uint1 x144; - fiat_secp256k1_addcarryx_u64(&x143, &x144, 0x0, x139, x142); + fiat_secp256k1_addcarryx_u64(&x143, &x144, 0x0, x142, x139); uint64_t x145; fiat_secp256k1_uint1 x146; - fiat_secp256k1_addcarryx_u64(&x145, &x146, x144, x137, x140); + fiat_secp256k1_addcarryx_u64(&x145, &x146, x144, x140, x137); uint64_t x147; fiat_secp256k1_uint1 x148; - fiat_secp256k1_addcarryx_u64(&x147, &x148, x146, x135, x138); + fiat_secp256k1_addcarryx_u64(&x147, &x148, x146, x138, x135); uint64_t x149; fiat_secp256k1_uint1 x150; - fiat_secp256k1_addcarryx_u64(&x149, &x150, x148, 0x0, x136); + fiat_secp256k1_addcarryx_u64(&x149, &x150, x148, x136, 0x0); uint64_t x151; fiat_secp256k1_uint1 x152; - fiat_secp256k1_addcarryx_u64(&x151, &x152, 0x0, x141, x123); + fiat_secp256k1_addcarryx_u64(&x151, &x152, 0x0, x123, x141); uint64_t x153; fiat_secp256k1_uint1 x154; - fiat_secp256k1_addcarryx_u64(&x153, &x154, x152, x143, x125); + fiat_secp256k1_addcarryx_u64(&x153, &x154, x152, x125, x143); uint64_t x155; fiat_secp256k1_uint1 x156; - fiat_secp256k1_addcarryx_u64(&x155, &x156, x154, x145, x127); + fiat_secp256k1_addcarryx_u64(&x155, &x156, x154, x127, x145); uint64_t x157; fiat_secp256k1_uint1 x158; - fiat_secp256k1_addcarryx_u64(&x157, &x158, x156, x147, x129); + fiat_secp256k1_addcarryx_u64(&x157, &x158, x156, x129, x147); uint64_t x159; fiat_secp256k1_uint1 x160; - fiat_secp256k1_addcarryx_u64(&x159, &x160, x158, x149, x131); + fiat_secp256k1_addcarryx_u64(&x159, &x160, x158, x131, x149); uint64_t x161; fiat_secp256k1_uint1 x162; - fiat_secp256k1_addcarryx_u64(&x161, &x162, x160, 0x0, x132); + fiat_secp256k1_addcarryx_u64(&x161, &x162, x160, x132, 0x0); uint64_t x163; uint64_t x164; fiat_secp256k1_mulx_u64(&x163, &x164, x3, (arg1[3])); @@ -741,31 +741,31 @@ static void fiat_secp256k1_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_secp256k1_mulx_u64(&x169, &x170, x3, (arg1[0])); uint64_t x171; fiat_secp256k1_uint1 x172; - fiat_secp256k1_addcarryx_u64(&x171, &x172, 0x0, x167, x170); + fiat_secp256k1_addcarryx_u64(&x171, &x172, 0x0, x170, x167); uint64_t x173; fiat_secp256k1_uint1 x174; - fiat_secp256k1_addcarryx_u64(&x173, &x174, x172, x165, x168); + fiat_secp256k1_addcarryx_u64(&x173, &x174, x172, x168, x165); uint64_t x175; fiat_secp256k1_uint1 x176; - fiat_secp256k1_addcarryx_u64(&x175, &x176, x174, x163, x166); + fiat_secp256k1_addcarryx_u64(&x175, &x176, x174, x166, x163); uint64_t x177; fiat_secp256k1_uint1 x178; - fiat_secp256k1_addcarryx_u64(&x177, &x178, x176, 0x0, x164); + fiat_secp256k1_addcarryx_u64(&x177, &x178, x176, x164, 0x0); uint64_t x179; fiat_secp256k1_uint1 x180; - fiat_secp256k1_addcarryx_u64(&x179, &x180, 0x0, x169, x153); + fiat_secp256k1_addcarryx_u64(&x179, &x180, 0x0, x153, x169); uint64_t x181; fiat_secp256k1_uint1 x182; - fiat_secp256k1_addcarryx_u64(&x181, &x182, x180, x171, x155); + fiat_secp256k1_addcarryx_u64(&x181, &x182, x180, x155, x171); uint64_t x183; fiat_secp256k1_uint1 x184; - fiat_secp256k1_addcarryx_u64(&x183, &x184, x182, x173, x157); + fiat_secp256k1_addcarryx_u64(&x183, &x184, x182, x157, x173); uint64_t x185; fiat_secp256k1_uint1 x186; - fiat_secp256k1_addcarryx_u64(&x185, &x186, x184, x175, x159); + fiat_secp256k1_addcarryx_u64(&x185, &x186, x184, x159, x175); uint64_t x187; fiat_secp256k1_uint1 x188; - fiat_secp256k1_addcarryx_u64(&x187, &x188, x186, x177, x161); + fiat_secp256k1_addcarryx_u64(&x187, &x188, x186, x161, x177); uint64_t x189; uint64_t x190; fiat_secp256k1_mulx_u64(&x189, &x190, x179, UINT64_C(0xd838091dd2253531)); @@ -783,34 +783,34 @@ static void fiat_secp256k1_square(uint64_t out1[4], const uint64_t arg1[4]) { fiat_secp256k1_mulx_u64(&x197, &x198, x189, UINT64_C(0xfffffffefffffc2f)); uint64_t x199; fiat_secp256k1_uint1 x200; - fiat_secp256k1_addcarryx_u64(&x199, &x200, 0x0, x195, x198); + fiat_secp256k1_addcarryx_u64(&x199, &x200, 0x0, x198, x195); uint64_t x201; fiat_secp256k1_uint1 x202; - fiat_secp256k1_addcarryx_u64(&x201, &x202, x200, x193, x196); + fiat_secp256k1_addcarryx_u64(&x201, &x202, x200, x196, x193); uint64_t x203; fiat_secp256k1_uint1 x204; - fiat_secp256k1_addcarryx_u64(&x203, &x204, x202, x191, x194); + fiat_secp256k1_addcarryx_u64(&x203, &x204, x202, x194, x191); uint64_t x205; fiat_secp256k1_uint1 x206; - fiat_secp256k1_addcarryx_u64(&x205, &x206, x204, 0x0, x192); + fiat_secp256k1_addcarryx_u64(&x205, &x206, x204, x192, 0x0); uint64_t x207; fiat_secp256k1_uint1 x208; - fiat_secp256k1_addcarryx_u64(&x207, &x208, 0x0, x197, x179); + fiat_secp256k1_addcarryx_u64(&x207, &x208, 0x0, x179, x197); uint64_t x209; fiat_secp256k1_uint1 x210; - fiat_secp256k1_addcarryx_u64(&x209, &x210, x208, x199, x181); + fiat_secp256k1_addcarryx_u64(&x209, &x210, x208, x181, x199); uint64_t x211; fiat_secp256k1_uint1 x212; - fiat_secp256k1_addcarryx_u64(&x211, &x212, x210, x201, x183); + fiat_secp256k1_addcarryx_u64(&x211, &x212, x210, x183, x201); uint64_t x213; fiat_secp256k1_uint1 x214; - fiat_secp256k1_addcarryx_u64(&x213, &x214, x212, x203, x185); + fiat_secp256k1_addcarryx_u64(&x213, &x214, x212, x185, x203); uint64_t x215; fiat_secp256k1_uint1 x216; - fiat_secp256k1_addcarryx_u64(&x215, &x216, x214, x205, x187); + fiat_secp256k1_addcarryx_u64(&x215, &x216, x214, x187, x205); uint64_t x217; fiat_secp256k1_uint1 x218; - fiat_secp256k1_addcarryx_u64(&x217, &x218, x216, 0x0, x188); + fiat_secp256k1_addcarryx_u64(&x217, &x218, x216, x188, 0x0); uint64_t x219; fiat_secp256k1_uint1 x220; fiat_secp256k1_subborrowx_u64(&x219, &x220, 0x0, x209, UINT64_C(0xfffffffefffffc2f)); @@ -858,16 +858,16 @@ static void fiat_secp256k1_square(uint64_t out1[4], const uint64_t arg1[4]) { static void fiat_secp256k1_add(uint64_t out1[4], const uint64_t arg1[4], const uint64_t arg2[4]) { uint64_t x1; fiat_secp256k1_uint1 x2; - fiat_secp256k1_addcarryx_u64(&x1, &x2, 0x0, (arg2[0]), (arg1[0])); + fiat_secp256k1_addcarryx_u64(&x1, &x2, 0x0, (arg1[0]), (arg2[0])); uint64_t x3; fiat_secp256k1_uint1 x4; - fiat_secp256k1_addcarryx_u64(&x3, &x4, x2, (arg2[1]), (arg1[1])); + fiat_secp256k1_addcarryx_u64(&x3, &x4, x2, (arg1[1]), (arg2[1])); uint64_t x5; fiat_secp256k1_uint1 x6; - fiat_secp256k1_addcarryx_u64(&x5, &x6, x4, (arg2[2]), (arg1[2])); + fiat_secp256k1_addcarryx_u64(&x5, &x6, x4, (arg1[2]), (arg2[2])); uint64_t x7; fiat_secp256k1_uint1 x8; - fiat_secp256k1_addcarryx_u64(&x7, &x8, x6, (arg2[3]), (arg1[3])); + fiat_secp256k1_addcarryx_u64(&x7, &x8, x6, (arg1[3]), (arg2[3])); uint64_t x9; fiat_secp256k1_uint1 x10; fiat_secp256k1_subborrowx_u64(&x9, &x10, 0x0, x1, UINT64_C(0xfffffffefffffc2f)); @@ -929,16 +929,16 @@ static void fiat_secp256k1_sub(uint64_t out1[4], const uint64_t arg1[4], const u fiat_secp256k1_cmovznz_u64(&x9, x8, 0x0, UINT64_C(0xffffffffffffffff)); uint64_t x10; fiat_secp256k1_uint1 x11; - fiat_secp256k1_addcarryx_u64(&x10, &x11, 0x0, (x9 & UINT64_C(0xfffffffefffffc2f)), x1); + fiat_secp256k1_addcarryx_u64(&x10, &x11, 0x0, x1, (x9 & UINT64_C(0xfffffffefffffc2f))); uint64_t x12; fiat_secp256k1_uint1 x13; - fiat_secp256k1_addcarryx_u64(&x12, &x13, x11, (x9 & UINT64_C(0xffffffffffffffff)), x3); + fiat_secp256k1_addcarryx_u64(&x12, &x13, x11, x3, (x9 & UINT64_C(0xffffffffffffffff))); uint64_t x14; fiat_secp256k1_uint1 x15; - fiat_secp256k1_addcarryx_u64(&x14, &x15, x13, (x9 & UINT64_C(0xffffffffffffffff)), x5); + fiat_secp256k1_addcarryx_u64(&x14, &x15, x13, x5, (x9 & UINT64_C(0xffffffffffffffff))); uint64_t x16; fiat_secp256k1_uint1 x17; - fiat_secp256k1_addcarryx_u64(&x16, &x17, x15, (x9 & UINT64_C(0xffffffffffffffff)), x7); + fiat_secp256k1_addcarryx_u64(&x16, &x17, x15, x7, (x9 & UINT64_C(0xffffffffffffffff))); out1[0] = x10; out1[1] = x12; out1[2] = x14; @@ -975,16 +975,16 @@ static void fiat_secp256k1_opp(uint64_t out1[4], const uint64_t arg1[4]) { fiat_secp256k1_cmovznz_u64(&x9, x8, 0x0, UINT64_C(0xffffffffffffffff)); uint64_t x10; fiat_secp256k1_uint1 x11; - fiat_secp256k1_addcarryx_u64(&x10, &x11, 0x0, (x9 & UINT64_C(0xfffffffefffffc2f)), x1); + fiat_secp256k1_addcarryx_u64(&x10, &x11, 0x0, x1, (x9 & UINT64_C(0xfffffffefffffc2f))); uint64_t x12; fiat_secp256k1_uint1 x13; - fiat_secp256k1_addcarryx_u64(&x12, &x13, x11, (x9 & UINT64_C(0xffffffffffffffff)), x3); + fiat_secp256k1_addcarryx_u64(&x12, &x13, x11, x3, (x9 & UINT64_C(0xffffffffffffffff))); uint64_t x14; fiat_secp256k1_uint1 x15; - fiat_secp256k1_addcarryx_u64(&x14, &x15, x13, (x9 & UINT64_C(0xffffffffffffffff)), x5); + fiat_secp256k1_addcarryx_u64(&x14, &x15, x13, x5, (x9 & UINT64_C(0xffffffffffffffff))); uint64_t x16; fiat_secp256k1_uint1 x17; - fiat_secp256k1_addcarryx_u64(&x16, &x17, x15, (x9 & UINT64_C(0xffffffffffffffff)), x7); + fiat_secp256k1_addcarryx_u64(&x16, &x17, x15, x7, (x9 & UINT64_C(0xffffffffffffffff))); out1[0] = x10; out1[1] = x12; out1[2] = x14; @@ -1023,43 +1023,43 @@ static void fiat_secp256k1_from_montgomery(uint64_t out1[4], const uint64_t arg1 fiat_secp256k1_mulx_u64(&x10, &x11, x2, UINT64_C(0xfffffffefffffc2f)); uint64_t x12; fiat_secp256k1_uint1 x13; - fiat_secp256k1_addcarryx_u64(&x12, &x13, 0x0, x8, x11); + fiat_secp256k1_addcarryx_u64(&x12, &x13, 0x0, x11, x8); uint64_t x14; fiat_secp256k1_uint1 x15; - fiat_secp256k1_addcarryx_u64(&x14, &x15, x13, x6, x9); + fiat_secp256k1_addcarryx_u64(&x14, &x15, x13, x9, x6); uint64_t x16; fiat_secp256k1_uint1 x17; - fiat_secp256k1_addcarryx_u64(&x16, &x17, x15, x4, x7); + fiat_secp256k1_addcarryx_u64(&x16, &x17, x15, x7, x4); uint64_t x18; fiat_secp256k1_uint1 x19; - fiat_secp256k1_addcarryx_u64(&x18, &x19, 0x0, x10, x1); + fiat_secp256k1_addcarryx_u64(&x18, &x19, 0x0, x1, x10); uint64_t x20; fiat_secp256k1_uint1 x21; - fiat_secp256k1_addcarryx_u64(&x20, &x21, x19, x12, 0x0); + fiat_secp256k1_addcarryx_u64(&x20, &x21, x19, 0x0, x12); uint64_t x22; fiat_secp256k1_uint1 x23; - fiat_secp256k1_addcarryx_u64(&x22, &x23, x21, x14, 0x0); + fiat_secp256k1_addcarryx_u64(&x22, &x23, x21, 0x0, x14); uint64_t x24; fiat_secp256k1_uint1 x25; - fiat_secp256k1_addcarryx_u64(&x24, &x25, x23, x16, 0x0); + fiat_secp256k1_addcarryx_u64(&x24, &x25, x23, 0x0, x16); uint64_t x26; fiat_secp256k1_uint1 x27; - fiat_secp256k1_addcarryx_u64(&x26, &x27, x17, 0x0, x5); + fiat_secp256k1_addcarryx_u64(&x26, &x27, x17, x5, 0x0); uint64_t x28; fiat_secp256k1_uint1 x29; - fiat_secp256k1_addcarryx_u64(&x28, &x29, x25, x26, 0x0); + fiat_secp256k1_addcarryx_u64(&x28, &x29, x25, 0x0, x26); uint64_t x30; fiat_secp256k1_uint1 x31; - fiat_secp256k1_addcarryx_u64(&x30, &x31, 0x0, (arg1[1]), x20); + fiat_secp256k1_addcarryx_u64(&x30, &x31, 0x0, x20, (arg1[1])); uint64_t x32; fiat_secp256k1_uint1 x33; - fiat_secp256k1_addcarryx_u64(&x32, &x33, x31, 0x0, x22); + fiat_secp256k1_addcarryx_u64(&x32, &x33, x31, x22, 0x0); uint64_t x34; fiat_secp256k1_uint1 x35; - fiat_secp256k1_addcarryx_u64(&x34, &x35, x33, 0x0, x24); + fiat_secp256k1_addcarryx_u64(&x34, &x35, x33, x24, 0x0); uint64_t x36; fiat_secp256k1_uint1 x37; - fiat_secp256k1_addcarryx_u64(&x36, &x37, x35, 0x0, x28); + fiat_secp256k1_addcarryx_u64(&x36, &x37, x35, x28, 0x0); uint64_t x38; uint64_t x39; fiat_secp256k1_mulx_u64(&x38, &x39, x30, UINT64_C(0xd838091dd2253531)); @@ -1077,49 +1077,49 @@ static void fiat_secp256k1_from_montgomery(uint64_t out1[4], const uint64_t arg1 fiat_secp256k1_mulx_u64(&x46, &x47, x38, UINT64_C(0xfffffffefffffc2f)); uint64_t x48; fiat_secp256k1_uint1 x49; - fiat_secp256k1_addcarryx_u64(&x48, &x49, 0x0, x44, x47); + fiat_secp256k1_addcarryx_u64(&x48, &x49, 0x0, x47, x44); uint64_t x50; fiat_secp256k1_uint1 x51; - fiat_secp256k1_addcarryx_u64(&x50, &x51, x49, x42, x45); + fiat_secp256k1_addcarryx_u64(&x50, &x51, x49, x45, x42); uint64_t x52; fiat_secp256k1_uint1 x53; - fiat_secp256k1_addcarryx_u64(&x52, &x53, x51, x40, x43); + fiat_secp256k1_addcarryx_u64(&x52, &x53, x51, x43, x40); uint64_t x54; fiat_secp256k1_uint1 x55; - fiat_secp256k1_addcarryx_u64(&x54, &x55, 0x0, x46, x30); + fiat_secp256k1_addcarryx_u64(&x54, &x55, 0x0, x30, x46); uint64_t x56; fiat_secp256k1_uint1 x57; - fiat_secp256k1_addcarryx_u64(&x56, &x57, x55, x48, x32); + fiat_secp256k1_addcarryx_u64(&x56, &x57, x55, x32, x48); uint64_t x58; fiat_secp256k1_uint1 x59; - fiat_secp256k1_addcarryx_u64(&x58, &x59, x57, x50, x34); + fiat_secp256k1_addcarryx_u64(&x58, &x59, x57, x34, x50); uint64_t x60; fiat_secp256k1_uint1 x61; - fiat_secp256k1_addcarryx_u64(&x60, &x61, x59, x52, x36); + fiat_secp256k1_addcarryx_u64(&x60, &x61, x59, x36, x52); uint64_t x62; fiat_secp256k1_uint1 x63; - fiat_secp256k1_addcarryx_u64(&x62, &x63, x29, 0x0, 0x0); + fiat_secp256k1_addcarryx_u64(&x62, &x63, x53, x41, 0x0); uint64_t x64; fiat_secp256k1_uint1 x65; - fiat_secp256k1_addcarryx_u64(&x64, &x65, x37, 0x0, (fiat_secp256k1_uint1)x62); + fiat_secp256k1_addcarryx_u64(&x64, &x65, x29, 0x0, 0x0); uint64_t x66; fiat_secp256k1_uint1 x67; - fiat_secp256k1_addcarryx_u64(&x66, &x67, x53, 0x0, x41); + fiat_secp256k1_addcarryx_u64(&x66, &x67, x37, (fiat_secp256k1_uint1)x64, 0x0); uint64_t x68; fiat_secp256k1_uint1 x69; - fiat_secp256k1_addcarryx_u64(&x68, &x69, x61, x66, x64); + fiat_secp256k1_addcarryx_u64(&x68, &x69, x61, x66, x62); uint64_t x70; fiat_secp256k1_uint1 x71; - fiat_secp256k1_addcarryx_u64(&x70, &x71, 0x0, (arg1[2]), x56); + fiat_secp256k1_addcarryx_u64(&x70, &x71, 0x0, x56, (arg1[2])); uint64_t x72; fiat_secp256k1_uint1 x73; - fiat_secp256k1_addcarryx_u64(&x72, &x73, x71, 0x0, x58); + fiat_secp256k1_addcarryx_u64(&x72, &x73, x71, x58, 0x0); uint64_t x74; fiat_secp256k1_uint1 x75; - fiat_secp256k1_addcarryx_u64(&x74, &x75, x73, 0x0, x60); + fiat_secp256k1_addcarryx_u64(&x74, &x75, x73, x60, 0x0); uint64_t x76; fiat_secp256k1_uint1 x77; - fiat_secp256k1_addcarryx_u64(&x76, &x77, x75, 0x0, x68); + fiat_secp256k1_addcarryx_u64(&x76, &x77, x75, x68, 0x0); uint64_t x78; uint64_t x79; fiat_secp256k1_mulx_u64(&x78, &x79, x70, UINT64_C(0xd838091dd2253531)); @@ -1137,49 +1137,49 @@ static void fiat_secp256k1_from_montgomery(uint64_t out1[4], const uint64_t arg1 fiat_secp256k1_mulx_u64(&x86, &x87, x78, UINT64_C(0xfffffffefffffc2f)); uint64_t x88; fiat_secp256k1_uint1 x89; - fiat_secp256k1_addcarryx_u64(&x88, &x89, 0x0, x84, x87); + fiat_secp256k1_addcarryx_u64(&x88, &x89, 0x0, x87, x84); uint64_t x90; fiat_secp256k1_uint1 x91; - fiat_secp256k1_addcarryx_u64(&x90, &x91, x89, x82, x85); + fiat_secp256k1_addcarryx_u64(&x90, &x91, x89, x85, x82); uint64_t x92; fiat_secp256k1_uint1 x93; - fiat_secp256k1_addcarryx_u64(&x92, &x93, x91, x80, x83); + fiat_secp256k1_addcarryx_u64(&x92, &x93, x91, x83, x80); uint64_t x94; fiat_secp256k1_uint1 x95; - fiat_secp256k1_addcarryx_u64(&x94, &x95, 0x0, x86, x70); + fiat_secp256k1_addcarryx_u64(&x94, &x95, 0x0, x70, x86); uint64_t x96; fiat_secp256k1_uint1 x97; - fiat_secp256k1_addcarryx_u64(&x96, &x97, x95, x88, x72); + fiat_secp256k1_addcarryx_u64(&x96, &x97, x95, x72, x88); uint64_t x98; fiat_secp256k1_uint1 x99; - fiat_secp256k1_addcarryx_u64(&x98, &x99, x97, x90, x74); + fiat_secp256k1_addcarryx_u64(&x98, &x99, x97, x74, x90); uint64_t x100; fiat_secp256k1_uint1 x101; - fiat_secp256k1_addcarryx_u64(&x100, &x101, x99, x92, x76); + fiat_secp256k1_addcarryx_u64(&x100, &x101, x99, x76, x92); uint64_t x102; fiat_secp256k1_uint1 x103; - fiat_secp256k1_addcarryx_u64(&x102, &x103, x69, 0x0, 0x0); + fiat_secp256k1_addcarryx_u64(&x102, &x103, x93, x81, 0x0); uint64_t x104; fiat_secp256k1_uint1 x105; - fiat_secp256k1_addcarryx_u64(&x104, &x105, x77, 0x0, (fiat_secp256k1_uint1)x102); + fiat_secp256k1_addcarryx_u64(&x104, &x105, x69, 0x0, 0x0); uint64_t x106; fiat_secp256k1_uint1 x107; - fiat_secp256k1_addcarryx_u64(&x106, &x107, x93, 0x0, x81); + fiat_secp256k1_addcarryx_u64(&x106, &x107, x77, (fiat_secp256k1_uint1)x104, 0x0); uint64_t x108; fiat_secp256k1_uint1 x109; - fiat_secp256k1_addcarryx_u64(&x108, &x109, x101, x106, x104); + fiat_secp256k1_addcarryx_u64(&x108, &x109, x101, x106, x102); uint64_t x110; fiat_secp256k1_uint1 x111; - fiat_secp256k1_addcarryx_u64(&x110, &x111, 0x0, (arg1[3]), x96); + fiat_secp256k1_addcarryx_u64(&x110, &x111, 0x0, x96, (arg1[3])); uint64_t x112; fiat_secp256k1_uint1 x113; - fiat_secp256k1_addcarryx_u64(&x112, &x113, x111, 0x0, x98); + fiat_secp256k1_addcarryx_u64(&x112, &x113, x111, x98, 0x0); uint64_t x114; fiat_secp256k1_uint1 x115; - fiat_secp256k1_addcarryx_u64(&x114, &x115, x113, 0x0, x100); + fiat_secp256k1_addcarryx_u64(&x114, &x115, x113, x100, 0x0); uint64_t x116; fiat_secp256k1_uint1 x117; - fiat_secp256k1_addcarryx_u64(&x116, &x117, x115, 0x0, x108); + fiat_secp256k1_addcarryx_u64(&x116, &x117, x115, x108, 0x0); uint64_t x118; uint64_t x119; fiat_secp256k1_mulx_u64(&x118, &x119, x110, UINT64_C(0xd838091dd2253531)); @@ -1197,37 +1197,37 @@ static void fiat_secp256k1_from_montgomery(uint64_t out1[4], const uint64_t arg1 fiat_secp256k1_mulx_u64(&x126, &x127, x118, UINT64_C(0xfffffffefffffc2f)); uint64_t x128; fiat_secp256k1_uint1 x129; - fiat_secp256k1_addcarryx_u64(&x128, &x129, 0x0, x124, x127); + fiat_secp256k1_addcarryx_u64(&x128, &x129, 0x0, x127, x124); uint64_t x130; fiat_secp256k1_uint1 x131; - fiat_secp256k1_addcarryx_u64(&x130, &x131, x129, x122, x125); + fiat_secp256k1_addcarryx_u64(&x130, &x131, x129, x125, x122); uint64_t x132; fiat_secp256k1_uint1 x133; - fiat_secp256k1_addcarryx_u64(&x132, &x133, x131, x120, x123); + fiat_secp256k1_addcarryx_u64(&x132, &x133, x131, x123, x120); uint64_t x134; fiat_secp256k1_uint1 x135; - fiat_secp256k1_addcarryx_u64(&x134, &x135, 0x0, x126, x110); + fiat_secp256k1_addcarryx_u64(&x134, &x135, 0x0, x110, x126); uint64_t x136; fiat_secp256k1_uint1 x137; - fiat_secp256k1_addcarryx_u64(&x136, &x137, x135, x128, x112); + fiat_secp256k1_addcarryx_u64(&x136, &x137, x135, x112, x128); uint64_t x138; fiat_secp256k1_uint1 x139; - fiat_secp256k1_addcarryx_u64(&x138, &x139, x137, x130, x114); + fiat_secp256k1_addcarryx_u64(&x138, &x139, x137, x114, x130); uint64_t x140; fiat_secp256k1_uint1 x141; - fiat_secp256k1_addcarryx_u64(&x140, &x141, x139, x132, x116); + fiat_secp256k1_addcarryx_u64(&x140, &x141, x139, x116, x132); uint64_t x142; fiat_secp256k1_uint1 x143; - fiat_secp256k1_addcarryx_u64(&x142, &x143, x109, 0x0, 0x0); + fiat_secp256k1_addcarryx_u64(&x142, &x143, x133, x121, 0x0); uint64_t x144; fiat_secp256k1_uint1 x145; - fiat_secp256k1_addcarryx_u64(&x144, &x145, x117, 0x0, (fiat_secp256k1_uint1)x142); + fiat_secp256k1_addcarryx_u64(&x144, &x145, x109, 0x0, 0x0); uint64_t x146; fiat_secp256k1_uint1 x147; - fiat_secp256k1_addcarryx_u64(&x146, &x147, x133, 0x0, x121); + fiat_secp256k1_addcarryx_u64(&x146, &x147, x117, (fiat_secp256k1_uint1)x144, 0x0); uint64_t x148; fiat_secp256k1_uint1 x149; - fiat_secp256k1_addcarryx_u64(&x148, &x149, x141, x146, x144); + fiat_secp256k1_addcarryx_u64(&x148, &x149, x141, x146, x142); uint64_t x150; fiat_secp256k1_uint1 x151; fiat_secp256k1_subborrowx_u64(&x150, &x151, 0x0, x136, UINT64_C(0xfffffffefffffc2f)); -- cgit v1.2.3