1 /* Autogenerated: ECCKiila https://gitlab.com/nisec/ecckiila */
2 /*-
3  * MIT License
4  *
5  * Copyright (c) 2020 Luis Rivera-Zamarripa, Jesús-Javier Chi-Domínguez, Billy Bob Brumley
6  *
7  * Permission is hereby granted, free of charge, to any person obtaining a copy
8  * of this software and associated documentation files (the "Software"), to deal
9  * in the Software without restriction, including without limitation the rights
10  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
11  * copies of the Software, and to permit persons to whom the Software is
12  * furnished to do so, subject to the following conditions:
13  *
14  * The above copyright notice and this permission notice shall be included in all
15  * copies or substantial portions of the Software.
16  *
17  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
18  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
19  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
20  * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
21  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
22  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
23  * SOFTWARE.
24  */
25 #if defined(__SIZEOF_INT128__) && !defined(PEDANTIC)
26 
27 #include <stdint.h>
28 #include <string.h>
29 #define LIMB_BITS 64
30 #define LIMB_CNT 6
31 /* Field elements */
32 typedef uint64_t fe_t[LIMB_CNT];
33 typedef uint64_t limb_t;
34 
35 #define fe_copy(d, s) memcpy(d, s, sizeof(fe_t))
36 #define fe_set_zero(d) memset(d, 0, sizeof(fe_t))
37 
38 /* Projective points */
39 typedef struct {
40     fe_t X;
41     fe_t Y;
42     fe_t Z;
43 } pt_prj_t;
44 
45 /* Affine points */
46 typedef struct {
47     fe_t X;
48     fe_t Y;
49 } pt_aff_t;
50 
51 /* BEGIN verbatim fiat code https://github.com/mit-plv/fiat-crypto */
52 /*-
53  * MIT License
54  *
55  * Copyright (c) 2015-2021 the fiat-crypto authors (see the AUTHORS file).
56  * https://github.com/mit-plv/fiat-crypto/blob/master/AUTHORS
57  *
58  * Permission is hereby granted, free of charge, to any person obtaining a copy
59  * of this software and associated documentation files (the "Software"), to deal
60  * in the Software without restriction, including without limitation the rights
61  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
62  * copies of the Software, and to permit persons to whom the Software is
63  * furnished to do so, subject to the following conditions:
64  *
65  * The above copyright notice and this permission notice shall be included in
66  * all copies or substantial portions of the Software.
67  *
68  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
69  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
70  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
71  * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
72  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
73  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
74  * SOFTWARE.
75  */
76 
77 /* Autogenerated: word_by_word_montgomery --static --use-value-barrier secp384r1 64 '2^384 - 2^128 - 2^96 + 2^32 - 1' */
78 /* curve description: secp384r1 */
79 /* machine_wordsize = 64 (from "64") */
80 /* requested operations: (all) */
81 /* m = 0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff (from "2^384 - 2^128 - 2^96 + 2^32 - 1") */
82 /*                                                                    */
83 /* NOTE: In addition to the bounds specified above each function, all */
84 /*   functions synthesized for this Montgomery arithmetic require the */
85 /*   input to be strictly less than the prime modulus (m), and also   */
86 /*   require the input to be in the unique saturated representation.  */
87 /*   All functions also ensure that these two properties are true of  */
88 /*   return values.                                                   */
89 /*  */
90 /* Computed values: */
91 /* eval z = z[0] + (z[1] << 64) + (z[2] << 128) + (z[3] << 192) + (z[4] << 256) + (z[5] << 0x140) */
92 /* bytes_eval z = z[0] + (z[1] << 8) + (z[2] << 16) + (z[3] << 24) + (z[4] << 32) + (z[5] << 40) + (z[6] << 48) + (z[7] << 56) + (z[8] << 64) + (z[9] << 72) + (z[10] << 80) + (z[11] << 88) + (z[12] << 96) + (z[13] << 104) + (z[14] << 112) + (z[15] << 120) + (z[16] << 128) + (z[17] << 136) + (z[18] << 144) + (z[19] << 152) + (z[20] << 160) + (z[21] << 168) + (z[22] << 176) + (z[23] << 184) + (z[24] << 192) + (z[25] << 200) + (z[26] << 208) + (z[27] << 216) + (z[28] << 224) + (z[29] << 232) + (z[30] << 240) + (z[31] << 248) + (z[32] << 256) + (z[33] << 0x108) + (z[34] << 0x110) + (z[35] << 0x118) + (z[36] << 0x120) + (z[37] << 0x128) + (z[38] << 0x130) + (z[39] << 0x138) + (z[40] << 0x140) + (z[41] << 0x148) + (z[42] << 0x150) + (z[43] << 0x158) + (z[44] << 0x160) + (z[45] << 0x168) + (z[46] << 0x170) + (z[47] << 0x178) */
93 
94 #include <stdint.h>
95 typedef unsigned char fiat_secp384r1_uint1;
96 typedef signed char fiat_secp384r1_int1;
97 typedef signed __int128 fiat_secp384r1_int128;
98 typedef unsigned __int128 fiat_secp384r1_uint128;
99 
100 #if (-1 & 3) != 3
101 #error "This code only works on a two's complement system"
102 #endif
103 
104 #if !defined(FIAT_SECP384R1_NO_ASM) && (defined(__GNUC__) || defined(__clang__))
105 static __inline__ uint64_t
fiat_secp384r1_value_barrier_u64(uint64_t a)106 fiat_secp384r1_value_barrier_u64(uint64_t a)
107 {
108     __asm__(""
109             : "+r"(a)
110             : /* no inputs */);
111     return a;
112 }
113 #else
114 #define fiat_secp384r1_value_barrier_u64(x) (x)
115 #endif
116 
117 /*
118  * The function fiat_secp384r1_addcarryx_u64 is an addition with carry.
119  * Postconditions:
120  *   out1 = (arg1 + arg2 + arg3) mod 2^64
121  *   out2 = ⌊(arg1 + arg2 + arg3) / 2^64⌋
122  *
123  * Input Bounds:
124  *   arg1: [0x0 ~> 0x1]
125  *   arg2: [0x0 ~> 0xffffffffffffffff]
126  *   arg3: [0x0 ~> 0xffffffffffffffff]
127  * Output Bounds:
128  *   out1: [0x0 ~> 0xffffffffffffffff]
129  *   out2: [0x0 ~> 0x1]
130  */
131 static void
fiat_secp384r1_addcarryx_u64(uint64_t * out1,fiat_secp384r1_uint1 * out2,fiat_secp384r1_uint1 arg1,uint64_t arg2,uint64_t arg3)132 fiat_secp384r1_addcarryx_u64(uint64_t *out1,
133                              fiat_secp384r1_uint1 *out2,
134                              fiat_secp384r1_uint1 arg1,
135                              uint64_t arg2, uint64_t arg3)
136 {
137     fiat_secp384r1_uint128 x1;
138     uint64_t x2;
139     fiat_secp384r1_uint1 x3;
140     x1 = ((arg1 + (fiat_secp384r1_uint128)arg2) + arg3);
141     x2 = (uint64_t)(x1 & UINT64_C(0xffffffffffffffff));
142     x3 = (fiat_secp384r1_uint1)(x1 >> 64);
143     *out1 = x2;
144     *out2 = x3;
145 }
146 
147 /*
148  * The function fiat_secp384r1_subborrowx_u64 is a subtraction with borrow.
149  * Postconditions:
150  *   out1 = (-arg1 + arg2 + -arg3) mod 2^64
151  *   out2 = -⌊(-arg1 + arg2 + -arg3) / 2^64⌋
152  *
153  * Input Bounds:
154  *   arg1: [0x0 ~> 0x1]
155  *   arg2: [0x0 ~> 0xffffffffffffffff]
156  *   arg3: [0x0 ~> 0xffffffffffffffff]
157  * Output Bounds:
158  *   out1: [0x0 ~> 0xffffffffffffffff]
159  *   out2: [0x0 ~> 0x1]
160  */
161 static void
fiat_secp384r1_subborrowx_u64(uint64_t * out1,fiat_secp384r1_uint1 * out2,fiat_secp384r1_uint1 arg1,uint64_t arg2,uint64_t arg3)162 fiat_secp384r1_subborrowx_u64(uint64_t *out1,
163                               fiat_secp384r1_uint1 *out2,
164                               fiat_secp384r1_uint1 arg1,
165                               uint64_t arg2, uint64_t arg3)
166 {
167     fiat_secp384r1_int128 x1;
168     fiat_secp384r1_int1 x2;
169     uint64_t x3;
170     x1 = ((arg2 - (fiat_secp384r1_int128)arg1) - arg3);
171     x2 = (fiat_secp384r1_int1)(x1 >> 64);
172     x3 = (uint64_t)(x1 & UINT64_C(0xffffffffffffffff));
173     *out1 = x3;
174     *out2 = (fiat_secp384r1_uint1)(0x0 - x2);
175 }
176 
177 /*
178  * The function fiat_secp384r1_mulx_u64 is a multiplication, returning the full double-width result.
179  * Postconditions:
180  *   out1 = (arg1 * arg2) mod 2^64
181  *   out2 = ⌊arg1 * arg2 / 2^64⌋
182  *
183  * Input Bounds:
184  *   arg1: [0x0 ~> 0xffffffffffffffff]
185  *   arg2: [0x0 ~> 0xffffffffffffffff]
186  * Output Bounds:
187  *   out1: [0x0 ~> 0xffffffffffffffff]
188  *   out2: [0x0 ~> 0xffffffffffffffff]
189  */
190 static void
fiat_secp384r1_mulx_u64(uint64_t * out1,uint64_t * out2,uint64_t arg1,uint64_t arg2)191 fiat_secp384r1_mulx_u64(uint64_t *out1, uint64_t *out2,
192                         uint64_t arg1, uint64_t arg2)
193 {
194     fiat_secp384r1_uint128 x1;
195     uint64_t x2;
196     uint64_t x3;
197     x1 = ((fiat_secp384r1_uint128)arg1 * arg2);
198     x2 = (uint64_t)(x1 & UINT64_C(0xffffffffffffffff));
199     x3 = (uint64_t)(x1 >> 64);
200     *out1 = x2;
201     *out2 = x3;
202 }
203 
204 /*
205  * The function fiat_secp384r1_cmovznz_u64 is a single-word conditional move.
206  * Postconditions:
207  *   out1 = (if arg1 = 0 then arg2 else arg3)
208  *
209  * Input Bounds:
210  *   arg1: [0x0 ~> 0x1]
211  *   arg2: [0x0 ~> 0xffffffffffffffff]
212  *   arg3: [0x0 ~> 0xffffffffffffffff]
213  * Output Bounds:
214  *   out1: [0x0 ~> 0xffffffffffffffff]
215  */
216 static void
fiat_secp384r1_cmovznz_u64(uint64_t * out1,fiat_secp384r1_uint1 arg1,uint64_t arg2,uint64_t arg3)217 fiat_secp384r1_cmovznz_u64(uint64_t *out1,
218                            fiat_secp384r1_uint1 arg1, uint64_t arg2,
219                            uint64_t arg3)
220 {
221     fiat_secp384r1_uint1 x1;
222     uint64_t x2;
223     uint64_t x3;
224     x1 = (!(!arg1));
225     x2 = ((fiat_secp384r1_int1)(0x0 - x1) & UINT64_C(0xffffffffffffffff));
226     x3 = ((fiat_secp384r1_value_barrier_u64(x2) & arg3) |
227           (fiat_secp384r1_value_barrier_u64((~x2)) & arg2));
228     *out1 = x3;
229 }
230 
231 /*
232  * The function fiat_secp384r1_mul multiplies two field elements in the Montgomery domain.
233  * Preconditions:
234  *   0 ≤ eval arg1 < m
235  *   0 ≤ eval arg2 < m
236  * Postconditions:
237  *   eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) * eval (from_montgomery arg2)) mod m
238  *   0 ≤ eval out1 < m
239  *
240  * Input Bounds:
241  *   arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
242  *   arg2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
243  * Output Bounds:
244  *   out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
245  */
246 static void
fiat_secp384r1_mul(uint64_t out1[6],const uint64_t arg1[6],const uint64_t arg2[6])247 fiat_secp384r1_mul(uint64_t out1[6], const uint64_t arg1[6],
248                    const uint64_t arg2[6])
249 {
250     uint64_t x1;
251     uint64_t x2;
252     uint64_t x3;
253     uint64_t x4;
254     uint64_t x5;
255     uint64_t x6;
256     uint64_t x7;
257     uint64_t x8;
258     uint64_t x9;
259     uint64_t x10;
260     uint64_t x11;
261     uint64_t x12;
262     uint64_t x13;
263     uint64_t x14;
264     uint64_t x15;
265     uint64_t x16;
266     uint64_t x17;
267     uint64_t x18;
268     uint64_t x19;
269     fiat_secp384r1_uint1 x20;
270     uint64_t x21;
271     fiat_secp384r1_uint1 x22;
272     uint64_t x23;
273     fiat_secp384r1_uint1 x24;
274     uint64_t x25;
275     fiat_secp384r1_uint1 x26;
276     uint64_t x27;
277     fiat_secp384r1_uint1 x28;
278     uint64_t x29;
279     uint64_t x30;
280     uint64_t x31;
281     uint64_t x32;
282     uint64_t x33;
283     uint64_t x34;
284     uint64_t x35;
285     uint64_t x36;
286     uint64_t x37;
287     uint64_t x38;
288     uint64_t x39;
289     uint64_t x40;
290     uint64_t x41;
291     uint64_t x42;
292     uint64_t x43;
293     uint64_t x44;
294     fiat_secp384r1_uint1 x45;
295     uint64_t x46;
296     fiat_secp384r1_uint1 x47;
297     uint64_t x48;
298     fiat_secp384r1_uint1 x49;
299     uint64_t x50;
300     fiat_secp384r1_uint1 x51;
301     uint64_t x52;
302     fiat_secp384r1_uint1 x53;
303     uint64_t x54;
304     uint64_t x55;
305     fiat_secp384r1_uint1 x56;
306     uint64_t x57;
307     fiat_secp384r1_uint1 x58;
308     uint64_t x59;
309     fiat_secp384r1_uint1 x60;
310     uint64_t x61;
311     fiat_secp384r1_uint1 x62;
312     uint64_t x63;
313     fiat_secp384r1_uint1 x64;
314     uint64_t x65;
315     fiat_secp384r1_uint1 x66;
316     uint64_t x67;
317     fiat_secp384r1_uint1 x68;
318     uint64_t x69;
319     uint64_t x70;
320     uint64_t x71;
321     uint64_t x72;
322     uint64_t x73;
323     uint64_t x74;
324     uint64_t x75;
325     uint64_t x76;
326     uint64_t x77;
327     uint64_t x78;
328     uint64_t x79;
329     uint64_t x80;
330     uint64_t x81;
331     fiat_secp384r1_uint1 x82;
332     uint64_t x83;
333     fiat_secp384r1_uint1 x84;
334     uint64_t x85;
335     fiat_secp384r1_uint1 x86;
336     uint64_t x87;
337     fiat_secp384r1_uint1 x88;
338     uint64_t x89;
339     fiat_secp384r1_uint1 x90;
340     uint64_t x91;
341     uint64_t x92;
342     fiat_secp384r1_uint1 x93;
343     uint64_t x94;
344     fiat_secp384r1_uint1 x95;
345     uint64_t x96;
346     fiat_secp384r1_uint1 x97;
347     uint64_t x98;
348     fiat_secp384r1_uint1 x99;
349     uint64_t x100;
350     fiat_secp384r1_uint1 x101;
351     uint64_t x102;
352     fiat_secp384r1_uint1 x103;
353     uint64_t x104;
354     fiat_secp384r1_uint1 x105;
355     uint64_t x106;
356     uint64_t x107;
357     uint64_t x108;
358     uint64_t x109;
359     uint64_t x110;
360     uint64_t x111;
361     uint64_t x112;
362     uint64_t x113;
363     uint64_t x114;
364     uint64_t x115;
365     uint64_t x116;
366     uint64_t x117;
367     uint64_t x118;
368     uint64_t x119;
369     uint64_t x120;
370     fiat_secp384r1_uint1 x121;
371     uint64_t x122;
372     fiat_secp384r1_uint1 x123;
373     uint64_t x124;
374     fiat_secp384r1_uint1 x125;
375     uint64_t x126;
376     fiat_secp384r1_uint1 x127;
377     uint64_t x128;
378     fiat_secp384r1_uint1 x129;
379     uint64_t x130;
380     uint64_t x131;
381     fiat_secp384r1_uint1 x132;
382     uint64_t x133;
383     fiat_secp384r1_uint1 x134;
384     uint64_t x135;
385     fiat_secp384r1_uint1 x136;
386     uint64_t x137;
387     fiat_secp384r1_uint1 x138;
388     uint64_t x139;
389     fiat_secp384r1_uint1 x140;
390     uint64_t x141;
391     fiat_secp384r1_uint1 x142;
392     uint64_t x143;
393     fiat_secp384r1_uint1 x144;
394     uint64_t x145;
395     uint64_t x146;
396     uint64_t x147;
397     uint64_t x148;
398     uint64_t x149;
399     uint64_t x150;
400     uint64_t x151;
401     uint64_t x152;
402     uint64_t x153;
403     uint64_t x154;
404     uint64_t x155;
405     uint64_t x156;
406     uint64_t x157;
407     uint64_t x158;
408     fiat_secp384r1_uint1 x159;
409     uint64_t x160;
410     fiat_secp384r1_uint1 x161;
411     uint64_t x162;
412     fiat_secp384r1_uint1 x163;
413     uint64_t x164;
414     fiat_secp384r1_uint1 x165;
415     uint64_t x166;
416     fiat_secp384r1_uint1 x167;
417     uint64_t x168;
418     uint64_t x169;
419     fiat_secp384r1_uint1 x170;
420     uint64_t x171;
421     fiat_secp384r1_uint1 x172;
422     uint64_t x173;
423     fiat_secp384r1_uint1 x174;
424     uint64_t x175;
425     fiat_secp384r1_uint1 x176;
426     uint64_t x177;
427     fiat_secp384r1_uint1 x178;
428     uint64_t x179;
429     fiat_secp384r1_uint1 x180;
430     uint64_t x181;
431     fiat_secp384r1_uint1 x182;
432     uint64_t x183;
433     uint64_t x184;
434     uint64_t x185;
435     uint64_t x186;
436     uint64_t x187;
437     uint64_t x188;
438     uint64_t x189;
439     uint64_t x190;
440     uint64_t x191;
441     uint64_t x192;
442     uint64_t x193;
443     uint64_t x194;
444     uint64_t x195;
445     uint64_t x196;
446     uint64_t x197;
447     fiat_secp384r1_uint1 x198;
448     uint64_t x199;
449     fiat_secp384r1_uint1 x200;
450     uint64_t x201;
451     fiat_secp384r1_uint1 x202;
452     uint64_t x203;
453     fiat_secp384r1_uint1 x204;
454     uint64_t x205;
455     fiat_secp384r1_uint1 x206;
456     uint64_t x207;
457     uint64_t x208;
458     fiat_secp384r1_uint1 x209;
459     uint64_t x210;
460     fiat_secp384r1_uint1 x211;
461     uint64_t x212;
462     fiat_secp384r1_uint1 x213;
463     uint64_t x214;
464     fiat_secp384r1_uint1 x215;
465     uint64_t x216;
466     fiat_secp384r1_uint1 x217;
467     uint64_t x218;
468     fiat_secp384r1_uint1 x219;
469     uint64_t x220;
470     fiat_secp384r1_uint1 x221;
471     uint64_t x222;
472     uint64_t x223;
473     uint64_t x224;
474     uint64_t x225;
475     uint64_t x226;
476     uint64_t x227;
477     uint64_t x228;
478     uint64_t x229;
479     uint64_t x230;
480     uint64_t x231;
481     uint64_t x232;
482     uint64_t x233;
483     uint64_t x234;
484     uint64_t x235;
485     fiat_secp384r1_uint1 x236;
486     uint64_t x237;
487     fiat_secp384r1_uint1 x238;
488     uint64_t x239;
489     fiat_secp384r1_uint1 x240;
490     uint64_t x241;
491     fiat_secp384r1_uint1 x242;
492     uint64_t x243;
493     fiat_secp384r1_uint1 x244;
494     uint64_t x245;
495     uint64_t x246;
496     fiat_secp384r1_uint1 x247;
497     uint64_t x248;
498     fiat_secp384r1_uint1 x249;
499     uint64_t x250;
500     fiat_secp384r1_uint1 x251;
501     uint64_t x252;
502     fiat_secp384r1_uint1 x253;
503     uint64_t x254;
504     fiat_secp384r1_uint1 x255;
505     uint64_t x256;
506     fiat_secp384r1_uint1 x257;
507     uint64_t x258;
508     fiat_secp384r1_uint1 x259;
509     uint64_t x260;
510     uint64_t x261;
511     uint64_t x262;
512     uint64_t x263;
513     uint64_t x264;
514     uint64_t x265;
515     uint64_t x266;
516     uint64_t x267;
517     uint64_t x268;
518     uint64_t x269;
519     uint64_t x270;
520     uint64_t x271;
521     uint64_t x272;
522     uint64_t x273;
523     uint64_t x274;
524     fiat_secp384r1_uint1 x275;
525     uint64_t x276;
526     fiat_secp384r1_uint1 x277;
527     uint64_t x278;
528     fiat_secp384r1_uint1 x279;
529     uint64_t x280;
530     fiat_secp384r1_uint1 x281;
531     uint64_t x282;
532     fiat_secp384r1_uint1 x283;
533     uint64_t x284;
534     uint64_t x285;
535     fiat_secp384r1_uint1 x286;
536     uint64_t x287;
537     fiat_secp384r1_uint1 x288;
538     uint64_t x289;
539     fiat_secp384r1_uint1 x290;
540     uint64_t x291;
541     fiat_secp384r1_uint1 x292;
542     uint64_t x293;
543     fiat_secp384r1_uint1 x294;
544     uint64_t x295;
545     fiat_secp384r1_uint1 x296;
546     uint64_t x297;
547     fiat_secp384r1_uint1 x298;
548     uint64_t x299;
549     uint64_t x300;
550     uint64_t x301;
551     uint64_t x302;
552     uint64_t x303;
553     uint64_t x304;
554     uint64_t x305;
555     uint64_t x306;
556     uint64_t x307;
557     uint64_t x308;
558     uint64_t x309;
559     uint64_t x310;
560     uint64_t x311;
561     uint64_t x312;
562     fiat_secp384r1_uint1 x313;
563     uint64_t x314;
564     fiat_secp384r1_uint1 x315;
565     uint64_t x316;
566     fiat_secp384r1_uint1 x317;
567     uint64_t x318;
568     fiat_secp384r1_uint1 x319;
569     uint64_t x320;
570     fiat_secp384r1_uint1 x321;
571     uint64_t x322;
572     uint64_t x323;
573     fiat_secp384r1_uint1 x324;
574     uint64_t x325;
575     fiat_secp384r1_uint1 x326;
576     uint64_t x327;
577     fiat_secp384r1_uint1 x328;
578     uint64_t x329;
579     fiat_secp384r1_uint1 x330;
580     uint64_t x331;
581     fiat_secp384r1_uint1 x332;
582     uint64_t x333;
583     fiat_secp384r1_uint1 x334;
584     uint64_t x335;
585     fiat_secp384r1_uint1 x336;
586     uint64_t x337;
587     uint64_t x338;
588     uint64_t x339;
589     uint64_t x340;
590     uint64_t x341;
591     uint64_t x342;
592     uint64_t x343;
593     uint64_t x344;
594     uint64_t x345;
595     uint64_t x346;
596     uint64_t x347;
597     uint64_t x348;
598     uint64_t x349;
599     uint64_t x350;
600     uint64_t x351;
601     fiat_secp384r1_uint1 x352;
602     uint64_t x353;
603     fiat_secp384r1_uint1 x354;
604     uint64_t x355;
605     fiat_secp384r1_uint1 x356;
606     uint64_t x357;
607     fiat_secp384r1_uint1 x358;
608     uint64_t x359;
609     fiat_secp384r1_uint1 x360;
610     uint64_t x361;
611     uint64_t x362;
612     fiat_secp384r1_uint1 x363;
613     uint64_t x364;
614     fiat_secp384r1_uint1 x365;
615     uint64_t x366;
616     fiat_secp384r1_uint1 x367;
617     uint64_t x368;
618     fiat_secp384r1_uint1 x369;
619     uint64_t x370;
620     fiat_secp384r1_uint1 x371;
621     uint64_t x372;
622     fiat_secp384r1_uint1 x373;
623     uint64_t x374;
624     fiat_secp384r1_uint1 x375;
625     uint64_t x376;
626     uint64_t x377;
627     uint64_t x378;
628     uint64_t x379;
629     uint64_t x380;
630     uint64_t x381;
631     uint64_t x382;
632     uint64_t x383;
633     uint64_t x384;
634     uint64_t x385;
635     uint64_t x386;
636     uint64_t x387;
637     uint64_t x388;
638     uint64_t x389;
639     fiat_secp384r1_uint1 x390;
640     uint64_t x391;
641     fiat_secp384r1_uint1 x392;
642     uint64_t x393;
643     fiat_secp384r1_uint1 x394;
644     uint64_t x395;
645     fiat_secp384r1_uint1 x396;
646     uint64_t x397;
647     fiat_secp384r1_uint1 x398;
648     uint64_t x399;
649     uint64_t x400;
650     fiat_secp384r1_uint1 x401;
651     uint64_t x402;
652     fiat_secp384r1_uint1 x403;
653     uint64_t x404;
654     fiat_secp384r1_uint1 x405;
655     uint64_t x406;
656     fiat_secp384r1_uint1 x407;
657     uint64_t x408;
658     fiat_secp384r1_uint1 x409;
659     uint64_t x410;
660     fiat_secp384r1_uint1 x411;
661     uint64_t x412;
662     fiat_secp384r1_uint1 x413;
663     uint64_t x414;
664     uint64_t x415;
665     uint64_t x416;
666     uint64_t x417;
667     uint64_t x418;
668     uint64_t x419;
669     uint64_t x420;
670     uint64_t x421;
671     uint64_t x422;
672     uint64_t x423;
673     uint64_t x424;
674     uint64_t x425;
675     uint64_t x426;
676     uint64_t x427;
677     uint64_t x428;
678     fiat_secp384r1_uint1 x429;
679     uint64_t x430;
680     fiat_secp384r1_uint1 x431;
681     uint64_t x432;
682     fiat_secp384r1_uint1 x433;
683     uint64_t x434;
684     fiat_secp384r1_uint1 x435;
685     uint64_t x436;
686     fiat_secp384r1_uint1 x437;
687     uint64_t x438;
688     uint64_t x439;
689     fiat_secp384r1_uint1 x440;
690     uint64_t x441;
691     fiat_secp384r1_uint1 x442;
692     uint64_t x443;
693     fiat_secp384r1_uint1 x444;
694     uint64_t x445;
695     fiat_secp384r1_uint1 x446;
696     uint64_t x447;
697     fiat_secp384r1_uint1 x448;
698     uint64_t x449;
699     fiat_secp384r1_uint1 x450;
700     uint64_t x451;
701     fiat_secp384r1_uint1 x452;
702     uint64_t x453;
703     uint64_t x454;
704     fiat_secp384r1_uint1 x455;
705     uint64_t x456;
706     fiat_secp384r1_uint1 x457;
707     uint64_t x458;
708     fiat_secp384r1_uint1 x459;
709     uint64_t x460;
710     fiat_secp384r1_uint1 x461;
711     uint64_t x462;
712     fiat_secp384r1_uint1 x463;
713     uint64_t x464;
714     fiat_secp384r1_uint1 x465;
715     uint64_t x466;
716     fiat_secp384r1_uint1 x467;
717     uint64_t x468;
718     uint64_t x469;
719     uint64_t x470;
720     uint64_t x471;
721     uint64_t x472;
722     uint64_t x473;
723     x1 = (arg1[1]);
724     x2 = (arg1[2]);
725     x3 = (arg1[3]);
726     x4 = (arg1[4]);
727     x5 = (arg1[5]);
728     x6 = (arg1[0]);
729     fiat_secp384r1_mulx_u64(&x7, &x8, x6, (arg2[5]));
730     fiat_secp384r1_mulx_u64(&x9, &x10, x6, (arg2[4]));
731     fiat_secp384r1_mulx_u64(&x11, &x12, x6, (arg2[3]));
732     fiat_secp384r1_mulx_u64(&x13, &x14, x6, (arg2[2]));
733     fiat_secp384r1_mulx_u64(&x15, &x16, x6, (arg2[1]));
734     fiat_secp384r1_mulx_u64(&x17, &x18, x6, (arg2[0]));
735     fiat_secp384r1_addcarryx_u64(&x19, &x20, 0x0, x18, x15);
736     fiat_secp384r1_addcarryx_u64(&x21, &x22, x20, x16, x13);
737     fiat_secp384r1_addcarryx_u64(&x23, &x24, x22, x14, x11);
738     fiat_secp384r1_addcarryx_u64(&x25, &x26, x24, x12, x9);
739     fiat_secp384r1_addcarryx_u64(&x27, &x28, x26, x10, x7);
740     x29 = (x28 + x8);
741     fiat_secp384r1_mulx_u64(&x30, &x31, x17, UINT64_C(0x100000001));
742     fiat_secp384r1_mulx_u64(&x32, &x33, x30, UINT64_C(0xffffffffffffffff));
743     fiat_secp384r1_mulx_u64(&x34, &x35, x30, UINT64_C(0xffffffffffffffff));
744     fiat_secp384r1_mulx_u64(&x36, &x37, x30, UINT64_C(0xffffffffffffffff));
745     fiat_secp384r1_mulx_u64(&x38, &x39, x30, UINT64_C(0xfffffffffffffffe));
746     fiat_secp384r1_mulx_u64(&x40, &x41, x30, UINT64_C(0xffffffff00000000));
747     fiat_secp384r1_mulx_u64(&x42, &x43, x30, UINT32_C(0xffffffff));
748     fiat_secp384r1_addcarryx_u64(&x44, &x45, 0x0, x43, x40);
749     fiat_secp384r1_addcarryx_u64(&x46, &x47, x45, x41, x38);
750     fiat_secp384r1_addcarryx_u64(&x48, &x49, x47, x39, x36);
751     fiat_secp384r1_addcarryx_u64(&x50, &x51, x49, x37, x34);
752     fiat_secp384r1_addcarryx_u64(&x52, &x53, x51, x35, x32);
753     x54 = (x53 + x33);
754     fiat_secp384r1_addcarryx_u64(&x55, &x56, 0x0, x17, x42);
755     fiat_secp384r1_addcarryx_u64(&x57, &x58, x56, x19, x44);
756     fiat_secp384r1_addcarryx_u64(&x59, &x60, x58, x21, x46);
757     fiat_secp384r1_addcarryx_u64(&x61, &x62, x60, x23, x48);
758     fiat_secp384r1_addcarryx_u64(&x63, &x64, x62, x25, x50);
759     fiat_secp384r1_addcarryx_u64(&x65, &x66, x64, x27, x52);
760     fiat_secp384r1_addcarryx_u64(&x67, &x68, x66, x29, x54);
761     fiat_secp384r1_mulx_u64(&x69, &x70, x1, (arg2[5]));
762     fiat_secp384r1_mulx_u64(&x71, &x72, x1, (arg2[4]));
763     fiat_secp384r1_mulx_u64(&x73, &x74, x1, (arg2[3]));
764     fiat_secp384r1_mulx_u64(&x75, &x76, x1, (arg2[2]));
765     fiat_secp384r1_mulx_u64(&x77, &x78, x1, (arg2[1]));
766     fiat_secp384r1_mulx_u64(&x79, &x80, x1, (arg2[0]));
767     fiat_secp384r1_addcarryx_u64(&x81, &x82, 0x0, x80, x77);
768     fiat_secp384r1_addcarryx_u64(&x83, &x84, x82, x78, x75);
769     fiat_secp384r1_addcarryx_u64(&x85, &x86, x84, x76, x73);
770     fiat_secp384r1_addcarryx_u64(&x87, &x88, x86, x74, x71);
771     fiat_secp384r1_addcarryx_u64(&x89, &x90, x88, x72, x69);
772     x91 = (x90 + x70);
773     fiat_secp384r1_addcarryx_u64(&x92, &x93, 0x0, x57, x79);
774     fiat_secp384r1_addcarryx_u64(&x94, &x95, x93, x59, x81);
775     fiat_secp384r1_addcarryx_u64(&x96, &x97, x95, x61, x83);
776     fiat_secp384r1_addcarryx_u64(&x98, &x99, x97, x63, x85);
777     fiat_secp384r1_addcarryx_u64(&x100, &x101, x99, x65, x87);
778     fiat_secp384r1_addcarryx_u64(&x102, &x103, x101, x67, x89);
779     fiat_secp384r1_addcarryx_u64(&x104, &x105, x103, x68, x91);
780     fiat_secp384r1_mulx_u64(&x106, &x107, x92, UINT64_C(0x100000001));
781     fiat_secp384r1_mulx_u64(&x108, &x109, x106, UINT64_C(0xffffffffffffffff));
782     fiat_secp384r1_mulx_u64(&x110, &x111, x106, UINT64_C(0xffffffffffffffff));
783     fiat_secp384r1_mulx_u64(&x112, &x113, x106, UINT64_C(0xffffffffffffffff));
784     fiat_secp384r1_mulx_u64(&x114, &x115, x106, UINT64_C(0xfffffffffffffffe));
785     fiat_secp384r1_mulx_u64(&x116, &x117, x106, UINT64_C(0xffffffff00000000));
786     fiat_secp384r1_mulx_u64(&x118, &x119, x106, UINT32_C(0xffffffff));
787     fiat_secp384r1_addcarryx_u64(&x120, &x121, 0x0, x119, x116);
788     fiat_secp384r1_addcarryx_u64(&x122, &x123, x121, x117, x114);
789     fiat_secp384r1_addcarryx_u64(&x124, &x125, x123, x115, x112);
790     fiat_secp384r1_addcarryx_u64(&x126, &x127, x125, x113, x110);
791     fiat_secp384r1_addcarryx_u64(&x128, &x129, x127, x111, x108);
792     x130 = (x129 + x109);
793     fiat_secp384r1_addcarryx_u64(&x131, &x132, 0x0, x92, x118);
794     fiat_secp384r1_addcarryx_u64(&x133, &x134, x132, x94, x120);
795     fiat_secp384r1_addcarryx_u64(&x135, &x136, x134, x96, x122);
796     fiat_secp384r1_addcarryx_u64(&x137, &x138, x136, x98, x124);
797     fiat_secp384r1_addcarryx_u64(&x139, &x140, x138, x100, x126);
798     fiat_secp384r1_addcarryx_u64(&x141, &x142, x140, x102, x128);
799     fiat_secp384r1_addcarryx_u64(&x143, &x144, x142, x104, x130);
800     x145 = ((uint64_t)x144 + x105);
801     fiat_secp384r1_mulx_u64(&x146, &x147, x2, (arg2[5]));
802     fiat_secp384r1_mulx_u64(&x148, &x149, x2, (arg2[4]));
803     fiat_secp384r1_mulx_u64(&x150, &x151, x2, (arg2[3]));
804     fiat_secp384r1_mulx_u64(&x152, &x153, x2, (arg2[2]));
805     fiat_secp384r1_mulx_u64(&x154, &x155, x2, (arg2[1]));
806     fiat_secp384r1_mulx_u64(&x156, &x157, x2, (arg2[0]));
807     fiat_secp384r1_addcarryx_u64(&x158, &x159, 0x0, x157, x154);
808     fiat_secp384r1_addcarryx_u64(&x160, &x161, x159, x155, x152);
809     fiat_secp384r1_addcarryx_u64(&x162, &x163, x161, x153, x150);
810     fiat_secp384r1_addcarryx_u64(&x164, &x165, x163, x151, x148);
811     fiat_secp384r1_addcarryx_u64(&x166, &x167, x165, x149, x146);
812     x168 = (x167 + x147);
813     fiat_secp384r1_addcarryx_u64(&x169, &x170, 0x0, x133, x156);
814     fiat_secp384r1_addcarryx_u64(&x171, &x172, x170, x135, x158);
815     fiat_secp384r1_addcarryx_u64(&x173, &x174, x172, x137, x160);
816     fiat_secp384r1_addcarryx_u64(&x175, &x176, x174, x139, x162);
817     fiat_secp384r1_addcarryx_u64(&x177, &x178, x176, x141, x164);
818     fiat_secp384r1_addcarryx_u64(&x179, &x180, x178, x143, x166);
819     fiat_secp384r1_addcarryx_u64(&x181, &x182, x180, x145, x168);
820     fiat_secp384r1_mulx_u64(&x183, &x184, x169, UINT64_C(0x100000001));
821     fiat_secp384r1_mulx_u64(&x185, &x186, x183, UINT64_C(0xffffffffffffffff));
822     fiat_secp384r1_mulx_u64(&x187, &x188, x183, UINT64_C(0xffffffffffffffff));
823     fiat_secp384r1_mulx_u64(&x189, &x190, x183, UINT64_C(0xffffffffffffffff));
824     fiat_secp384r1_mulx_u64(&x191, &x192, x183, UINT64_C(0xfffffffffffffffe));
825     fiat_secp384r1_mulx_u64(&x193, &x194, x183, UINT64_C(0xffffffff00000000));
826     fiat_secp384r1_mulx_u64(&x195, &x196, x183, UINT32_C(0xffffffff));
827     fiat_secp384r1_addcarryx_u64(&x197, &x198, 0x0, x196, x193);
828     fiat_secp384r1_addcarryx_u64(&x199, &x200, x198, x194, x191);
829     fiat_secp384r1_addcarryx_u64(&x201, &x202, x200, x192, x189);
830     fiat_secp384r1_addcarryx_u64(&x203, &x204, x202, x190, x187);
831     fiat_secp384r1_addcarryx_u64(&x205, &x206, x204, x188, x185);
832     x207 = (x206 + x186);
833     fiat_secp384r1_addcarryx_u64(&x208, &x209, 0x0, x169, x195);
834     fiat_secp384r1_addcarryx_u64(&x210, &x211, x209, x171, x197);
835     fiat_secp384r1_addcarryx_u64(&x212, &x213, x211, x173, x199);
836     fiat_secp384r1_addcarryx_u64(&x214, &x215, x213, x175, x201);
837     fiat_secp384r1_addcarryx_u64(&x216, &x217, x215, x177, x203);
838     fiat_secp384r1_addcarryx_u64(&x218, &x219, x217, x179, x205);
839     fiat_secp384r1_addcarryx_u64(&x220, &x221, x219, x181, x207);
840     x222 = ((uint64_t)x221 + x182);
841     fiat_secp384r1_mulx_u64(&x223, &x224, x3, (arg2[5]));
842     fiat_secp384r1_mulx_u64(&x225, &x226, x3, (arg2[4]));
843     fiat_secp384r1_mulx_u64(&x227, &x228, x3, (arg2[3]));
844     fiat_secp384r1_mulx_u64(&x229, &x230, x3, (arg2[2]));
845     fiat_secp384r1_mulx_u64(&x231, &x232, x3, (arg2[1]));
846     fiat_secp384r1_mulx_u64(&x233, &x234, x3, (arg2[0]));
847     fiat_secp384r1_addcarryx_u64(&x235, &x236, 0x0, x234, x231);
848     fiat_secp384r1_addcarryx_u64(&x237, &x238, x236, x232, x229);
849     fiat_secp384r1_addcarryx_u64(&x239, &x240, x238, x230, x227);
850     fiat_secp384r1_addcarryx_u64(&x241, &x242, x240, x228, x225);
851     fiat_secp384r1_addcarryx_u64(&x243, &x244, x242, x226, x223);
852     x245 = (x244 + x224);
853     fiat_secp384r1_addcarryx_u64(&x246, &x247, 0x0, x210, x233);
854     fiat_secp384r1_addcarryx_u64(&x248, &x249, x247, x212, x235);
855     fiat_secp384r1_addcarryx_u64(&x250, &x251, x249, x214, x237);
856     fiat_secp384r1_addcarryx_u64(&x252, &x253, x251, x216, x239);
857     fiat_secp384r1_addcarryx_u64(&x254, &x255, x253, x218, x241);
858     fiat_secp384r1_addcarryx_u64(&x256, &x257, x255, x220, x243);
859     fiat_secp384r1_addcarryx_u64(&x258, &x259, x257, x222, x245);
860     fiat_secp384r1_mulx_u64(&x260, &x261, x246, UINT64_C(0x100000001));
861     fiat_secp384r1_mulx_u64(&x262, &x263, x260, UINT64_C(0xffffffffffffffff));
862     fiat_secp384r1_mulx_u64(&x264, &x265, x260, UINT64_C(0xffffffffffffffff));
863     fiat_secp384r1_mulx_u64(&x266, &x267, x260, UINT64_C(0xffffffffffffffff));
864     fiat_secp384r1_mulx_u64(&x268, &x269, x260, UINT64_C(0xfffffffffffffffe));
865     fiat_secp384r1_mulx_u64(&x270, &x271, x260, UINT64_C(0xffffffff00000000));
866     fiat_secp384r1_mulx_u64(&x272, &x273, x260, UINT32_C(0xffffffff));
867     fiat_secp384r1_addcarryx_u64(&x274, &x275, 0x0, x273, x270);
868     fiat_secp384r1_addcarryx_u64(&x276, &x277, x275, x271, x268);
869     fiat_secp384r1_addcarryx_u64(&x278, &x279, x277, x269, x266);
870     fiat_secp384r1_addcarryx_u64(&x280, &x281, x279, x267, x264);
871     fiat_secp384r1_addcarryx_u64(&x282, &x283, x281, x265, x262);
872     x284 = (x283 + x263);
873     fiat_secp384r1_addcarryx_u64(&x285, &x286, 0x0, x246, x272);
874     fiat_secp384r1_addcarryx_u64(&x287, &x288, x286, x248, x274);
875     fiat_secp384r1_addcarryx_u64(&x289, &x290, x288, x250, x276);
876     fiat_secp384r1_addcarryx_u64(&x291, &x292, x290, x252, x278);
877     fiat_secp384r1_addcarryx_u64(&x293, &x294, x292, x254, x280);
878     fiat_secp384r1_addcarryx_u64(&x295, &x296, x294, x256, x282);
879     fiat_secp384r1_addcarryx_u64(&x297, &x298, x296, x258, x284);
880     x299 = ((uint64_t)x298 + x259);
881     fiat_secp384r1_mulx_u64(&x300, &x301, x4, (arg2[5]));
882     fiat_secp384r1_mulx_u64(&x302, &x303, x4, (arg2[4]));
883     fiat_secp384r1_mulx_u64(&x304, &x305, x4, (arg2[3]));
884     fiat_secp384r1_mulx_u64(&x306, &x307, x4, (arg2[2]));
885     fiat_secp384r1_mulx_u64(&x308, &x309, x4, (arg2[1]));
886     fiat_secp384r1_mulx_u64(&x310, &x311, x4, (arg2[0]));
887     fiat_secp384r1_addcarryx_u64(&x312, &x313, 0x0, x311, x308);
888     fiat_secp384r1_addcarryx_u64(&x314, &x315, x313, x309, x306);
889     fiat_secp384r1_addcarryx_u64(&x316, &x317, x315, x307, x304);
890     fiat_secp384r1_addcarryx_u64(&x318, &x319, x317, x305, x302);
891     fiat_secp384r1_addcarryx_u64(&x320, &x321, x319, x303, x300);
892     x322 = (x321 + x301);
893     fiat_secp384r1_addcarryx_u64(&x323, &x324, 0x0, x287, x310);
894     fiat_secp384r1_addcarryx_u64(&x325, &x326, x324, x289, x312);
895     fiat_secp384r1_addcarryx_u64(&x327, &x328, x326, x291, x314);
896     fiat_secp384r1_addcarryx_u64(&x329, &x330, x328, x293, x316);
897     fiat_secp384r1_addcarryx_u64(&x331, &x332, x330, x295, x318);
898     fiat_secp384r1_addcarryx_u64(&x333, &x334, x332, x297, x320);
899     fiat_secp384r1_addcarryx_u64(&x335, &x336, x334, x299, x322);
900     fiat_secp384r1_mulx_u64(&x337, &x338, x323, UINT64_C(0x100000001));
901     fiat_secp384r1_mulx_u64(&x339, &x340, x337, UINT64_C(0xffffffffffffffff));
902     fiat_secp384r1_mulx_u64(&x341, &x342, x337, UINT64_C(0xffffffffffffffff));
903     fiat_secp384r1_mulx_u64(&x343, &x344, x337, UINT64_C(0xffffffffffffffff));
904     fiat_secp384r1_mulx_u64(&x345, &x346, x337, UINT64_C(0xfffffffffffffffe));
905     fiat_secp384r1_mulx_u64(&x347, &x348, x337, UINT64_C(0xffffffff00000000));
906     fiat_secp384r1_mulx_u64(&x349, &x350, x337, UINT32_C(0xffffffff));
907     fiat_secp384r1_addcarryx_u64(&x351, &x352, 0x0, x350, x347);
908     fiat_secp384r1_addcarryx_u64(&x353, &x354, x352, x348, x345);
909     fiat_secp384r1_addcarryx_u64(&x355, &x356, x354, x346, x343);
910     fiat_secp384r1_addcarryx_u64(&x357, &x358, x356, x344, x341);
911     fiat_secp384r1_addcarryx_u64(&x359, &x360, x358, x342, x339);
912     x361 = (x360 + x340);
913     fiat_secp384r1_addcarryx_u64(&x362, &x363, 0x0, x323, x349);
914     fiat_secp384r1_addcarryx_u64(&x364, &x365, x363, x325, x351);
915     fiat_secp384r1_addcarryx_u64(&x366, &x367, x365, x327, x353);
916     fiat_secp384r1_addcarryx_u64(&x368, &x369, x367, x329, x355);
917     fiat_secp384r1_addcarryx_u64(&x370, &x371, x369, x331, x357);
918     fiat_secp384r1_addcarryx_u64(&x372, &x373, x371, x333, x359);
919     fiat_secp384r1_addcarryx_u64(&x374, &x375, x373, x335, x361);
920     x376 = ((uint64_t)x375 + x336);
921     fiat_secp384r1_mulx_u64(&x377, &x378, x5, (arg2[5]));
922     fiat_secp384r1_mulx_u64(&x379, &x380, x5, (arg2[4]));
923     fiat_secp384r1_mulx_u64(&x381, &x382, x5, (arg2[3]));
924     fiat_secp384r1_mulx_u64(&x383, &x384, x5, (arg2[2]));
925     fiat_secp384r1_mulx_u64(&x385, &x386, x5, (arg2[1]));
926     fiat_secp384r1_mulx_u64(&x387, &x388, x5, (arg2[0]));
927     fiat_secp384r1_addcarryx_u64(&x389, &x390, 0x0, x388, x385);
928     fiat_secp384r1_addcarryx_u64(&x391, &x392, x390, x386, x383);
929     fiat_secp384r1_addcarryx_u64(&x393, &x394, x392, x384, x381);
930     fiat_secp384r1_addcarryx_u64(&x395, &x396, x394, x382, x379);
931     fiat_secp384r1_addcarryx_u64(&x397, &x398, x396, x380, x377);
932     x399 = (x398 + x378);
933     fiat_secp384r1_addcarryx_u64(&x400, &x401, 0x0, x364, x387);
934     fiat_secp384r1_addcarryx_u64(&x402, &x403, x401, x366, x389);
935     fiat_secp384r1_addcarryx_u64(&x404, &x405, x403, x368, x391);
936     fiat_secp384r1_addcarryx_u64(&x406, &x407, x405, x370, x393);
937     fiat_secp384r1_addcarryx_u64(&x408, &x409, x407, x372, x395);
938     fiat_secp384r1_addcarryx_u64(&x410, &x411, x409, x374, x397);
939     fiat_secp384r1_addcarryx_u64(&x412, &x413, x411, x376, x399);
940     fiat_secp384r1_mulx_u64(&x414, &x415, x400, UINT64_C(0x100000001));
941     fiat_secp384r1_mulx_u64(&x416, &x417, x414, UINT64_C(0xffffffffffffffff));
942     fiat_secp384r1_mulx_u64(&x418, &x419, x414, UINT64_C(0xffffffffffffffff));
943     fiat_secp384r1_mulx_u64(&x420, &x421, x414, UINT64_C(0xffffffffffffffff));
944     fiat_secp384r1_mulx_u64(&x422, &x423, x414, UINT64_C(0xfffffffffffffffe));
945     fiat_secp384r1_mulx_u64(&x424, &x425, x414, UINT64_C(0xffffffff00000000));
946     fiat_secp384r1_mulx_u64(&x426, &x427, x414, UINT32_C(0xffffffff));
947     fiat_secp384r1_addcarryx_u64(&x428, &x429, 0x0, x427, x424);
948     fiat_secp384r1_addcarryx_u64(&x430, &x431, x429, x425, x422);
949     fiat_secp384r1_addcarryx_u64(&x432, &x433, x431, x423, x420);
950     fiat_secp384r1_addcarryx_u64(&x434, &x435, x433, x421, x418);
951     fiat_secp384r1_addcarryx_u64(&x436, &x437, x435, x419, x416);
952     x438 = (x437 + x417);
953     fiat_secp384r1_addcarryx_u64(&x439, &x440, 0x0, x400, x426);
954     fiat_secp384r1_addcarryx_u64(&x441, &x442, x440, x402, x428);
955     fiat_secp384r1_addcarryx_u64(&x443, &x444, x442, x404, x430);
956     fiat_secp384r1_addcarryx_u64(&x445, &x446, x444, x406, x432);
957     fiat_secp384r1_addcarryx_u64(&x447, &x448, x446, x408, x434);
958     fiat_secp384r1_addcarryx_u64(&x449, &x450, x448, x410, x436);
959     fiat_secp384r1_addcarryx_u64(&x451, &x452, x450, x412, x438);
960     x453 = ((uint64_t)x452 + x413);
961     fiat_secp384r1_subborrowx_u64(&x454, &x455, 0x0, x441,
962                                   UINT32_C(0xffffffff));
963     fiat_secp384r1_subborrowx_u64(&x456, &x457, x455, x443,
964                                   UINT64_C(0xffffffff00000000));
965     fiat_secp384r1_subborrowx_u64(&x458, &x459, x457, x445,
966                                   UINT64_C(0xfffffffffffffffe));
967     fiat_secp384r1_subborrowx_u64(&x460, &x461, x459, x447,
968                                   UINT64_C(0xffffffffffffffff));
969     fiat_secp384r1_subborrowx_u64(&x462, &x463, x461, x449,
970                                   UINT64_C(0xffffffffffffffff));
971     fiat_secp384r1_subborrowx_u64(&x464, &x465, x463, x451,
972                                   UINT64_C(0xffffffffffffffff));
973     fiat_secp384r1_subborrowx_u64(&x466, &x467, x465, x453, 0x0);
974     fiat_secp384r1_cmovznz_u64(&x468, x467, x454, x441);
975     fiat_secp384r1_cmovznz_u64(&x469, x467, x456, x443);
976     fiat_secp384r1_cmovznz_u64(&x470, x467, x458, x445);
977     fiat_secp384r1_cmovznz_u64(&x471, x467, x460, x447);
978     fiat_secp384r1_cmovznz_u64(&x472, x467, x462, x449);
979     fiat_secp384r1_cmovznz_u64(&x473, x467, x464, x451);
980     out1[0] = x468;
981     out1[1] = x469;
982     out1[2] = x470;
983     out1[3] = x471;
984     out1[4] = x472;
985     out1[5] = x473;
986 }
987 
988 /*
989  * The function fiat_secp384r1_square squares a field element in the Montgomery domain.
990  * Preconditions:
991  *   0 ≤ eval arg1 < m
992  * Postconditions:
993  *   eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) * eval (from_montgomery arg1)) mod m
994  *   0 ≤ eval out1 < m
995  *
996  * Input Bounds:
997  *   arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
998  * Output Bounds:
999  *   out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
1000  */
1001 static void
fiat_secp384r1_square(uint64_t out1[6],const uint64_t arg1[6])1002 fiat_secp384r1_square(uint64_t out1[6], const uint64_t arg1[6])
1003 {
1004     uint64_t x1;
1005     uint64_t x2;
1006     uint64_t x3;
1007     uint64_t x4;
1008     uint64_t x5;
1009     uint64_t x6;
1010     uint64_t x7;
1011     uint64_t x8;
1012     uint64_t x9;
1013     uint64_t x10;
1014     uint64_t x11;
1015     uint64_t x12;
1016     uint64_t x13;
1017     uint64_t x14;
1018     uint64_t x15;
1019     uint64_t x16;
1020     uint64_t x17;
1021     uint64_t x18;
1022     uint64_t x19;
1023     fiat_secp384r1_uint1 x20;
1024     uint64_t x21;
1025     fiat_secp384r1_uint1 x22;
1026     uint64_t x23;
1027     fiat_secp384r1_uint1 x24;
1028     uint64_t x25;
1029     fiat_secp384r1_uint1 x26;
1030     uint64_t x27;
1031     fiat_secp384r1_uint1 x28;
1032     uint64_t x29;
1033     uint64_t x30;
1034     uint64_t x31;
1035     uint64_t x32;
1036     uint64_t x33;
1037     uint64_t x34;
1038     uint64_t x35;
1039     uint64_t x36;
1040     uint64_t x37;
1041     uint64_t x38;
1042     uint64_t x39;
1043     uint64_t x40;
1044     uint64_t x41;
1045     uint64_t x42;
1046     uint64_t x43;
1047     uint64_t x44;
1048     fiat_secp384r1_uint1 x45;
1049     uint64_t x46;
1050     fiat_secp384r1_uint1 x47;
1051     uint64_t x48;
1052     fiat_secp384r1_uint1 x49;
1053     uint64_t x50;
1054     fiat_secp384r1_uint1 x51;
1055     uint64_t x52;
1056     fiat_secp384r1_uint1 x53;
1057     uint64_t x54;
1058     uint64_t x55;
1059     fiat_secp384r1_uint1 x56;
1060     uint64_t x57;
1061     fiat_secp384r1_uint1 x58;
1062     uint64_t x59;
1063     fiat_secp384r1_uint1 x60;
1064     uint64_t x61;
1065     fiat_secp384r1_uint1 x62;
1066     uint64_t x63;
1067     fiat_secp384r1_uint1 x64;
1068     uint64_t x65;
1069     fiat_secp384r1_uint1 x66;
1070     uint64_t x67;
1071     fiat_secp384r1_uint1 x68;
1072     uint64_t x69;
1073     uint64_t x70;
1074     uint64_t x71;
1075     uint64_t x72;
1076     uint64_t x73;
1077     uint64_t x74;
1078     uint64_t x75;
1079     uint64_t x76;
1080     uint64_t x77;
1081     uint64_t x78;
1082     uint64_t x79;
1083     uint64_t x80;
1084     uint64_t x81;
1085     fiat_secp384r1_uint1 x82;
1086     uint64_t x83;
1087     fiat_secp384r1_uint1 x84;
1088     uint64_t x85;
1089     fiat_secp384r1_uint1 x86;
1090     uint64_t x87;
1091     fiat_secp384r1_uint1 x88;
1092     uint64_t x89;
1093     fiat_secp384r1_uint1 x90;
1094     uint64_t x91;
1095     uint64_t x92;
1096     fiat_secp384r1_uint1 x93;
1097     uint64_t x94;
1098     fiat_secp384r1_uint1 x95;
1099     uint64_t x96;
1100     fiat_secp384r1_uint1 x97;
1101     uint64_t x98;
1102     fiat_secp384r1_uint1 x99;
1103     uint64_t x100;
1104     fiat_secp384r1_uint1 x101;
1105     uint64_t x102;
1106     fiat_secp384r1_uint1 x103;
1107     uint64_t x104;
1108     fiat_secp384r1_uint1 x105;
1109     uint64_t x106;
1110     uint64_t x107;
1111     uint64_t x108;
1112     uint64_t x109;
1113     uint64_t x110;
1114     uint64_t x111;
1115     uint64_t x112;
1116     uint64_t x113;
1117     uint64_t x114;
1118     uint64_t x115;
1119     uint64_t x116;
1120     uint64_t x117;
1121     uint64_t x118;
1122     uint64_t x119;
1123     uint64_t x120;
1124     fiat_secp384r1_uint1 x121;
1125     uint64_t x122;
1126     fiat_secp384r1_uint1 x123;
1127     uint64_t x124;
1128     fiat_secp384r1_uint1 x125;
1129     uint64_t x126;
1130     fiat_secp384r1_uint1 x127;
1131     uint64_t x128;
1132     fiat_secp384r1_uint1 x129;
1133     uint64_t x130;
1134     uint64_t x131;
1135     fiat_secp384r1_uint1 x132;
1136     uint64_t x133;
1137     fiat_secp384r1_uint1 x134;
1138     uint64_t x135;
1139     fiat_secp384r1_uint1 x136;
1140     uint64_t x137;
1141     fiat_secp384r1_uint1 x138;
1142     uint64_t x139;
1143     fiat_secp384r1_uint1 x140;
1144     uint64_t x141;
1145     fiat_secp384r1_uint1 x142;
1146     uint64_t x143;
1147     fiat_secp384r1_uint1 x144;
1148     uint64_t x145;
1149     uint64_t x146;
1150     uint64_t x147;
1151     uint64_t x148;
1152     uint64_t x149;
1153     uint64_t x150;
1154     uint64_t x151;
1155     uint64_t x152;
1156     uint64_t x153;
1157     uint64_t x154;
1158     uint64_t x155;
1159     uint64_t x156;
1160     uint64_t x157;
1161     uint64_t x158;
1162     fiat_secp384r1_uint1 x159;
1163     uint64_t x160;
1164     fiat_secp384r1_uint1 x161;
1165     uint64_t x162;
1166     fiat_secp384r1_uint1 x163;
1167     uint64_t x164;
1168     fiat_secp384r1_uint1 x165;
1169     uint64_t x166;
1170     fiat_secp384r1_uint1 x167;
1171     uint64_t x168;
1172     uint64_t x169;
1173     fiat_secp384r1_uint1 x170;
1174     uint64_t x171;
1175     fiat_secp384r1_uint1 x172;
1176     uint64_t x173;
1177     fiat_secp384r1_uint1 x174;
1178     uint64_t x175;
1179     fiat_secp384r1_uint1 x176;
1180     uint64_t x177;
1181     fiat_secp384r1_uint1 x178;
1182     uint64_t x179;
1183     fiat_secp384r1_uint1 x180;
1184     uint64_t x181;
1185     fiat_secp384r1_uint1 x182;
1186     uint64_t x183;
1187     uint64_t x184;
1188     uint64_t x185;
1189     uint64_t x186;
1190     uint64_t x187;
1191     uint64_t x188;
1192     uint64_t x189;
1193     uint64_t x190;
1194     uint64_t x191;
1195     uint64_t x192;
1196     uint64_t x193;
1197     uint64_t x194;
1198     uint64_t x195;
1199     uint64_t x196;
1200     uint64_t x197;
1201     fiat_secp384r1_uint1 x198;
1202     uint64_t x199;
1203     fiat_secp384r1_uint1 x200;
1204     uint64_t x201;
1205     fiat_secp384r1_uint1 x202;
1206     uint64_t x203;
1207     fiat_secp384r1_uint1 x204;
1208     uint64_t x205;
1209     fiat_secp384r1_uint1 x206;
1210     uint64_t x207;
1211     uint64_t x208;
1212     fiat_secp384r1_uint1 x209;
1213     uint64_t x210;
1214     fiat_secp384r1_uint1 x211;
1215     uint64_t x212;
1216     fiat_secp384r1_uint1 x213;
1217     uint64_t x214;
1218     fiat_secp384r1_uint1 x215;
1219     uint64_t x216;
1220     fiat_secp384r1_uint1 x217;
1221     uint64_t x218;
1222     fiat_secp384r1_uint1 x219;
1223     uint64_t x220;
1224     fiat_secp384r1_uint1 x221;
1225     uint64_t x222;
1226     uint64_t x223;
1227     uint64_t x224;
1228     uint64_t x225;
1229     uint64_t x226;
1230     uint64_t x227;
1231     uint64_t x228;
1232     uint64_t x229;
1233     uint64_t x230;
1234     uint64_t x231;
1235     uint64_t x232;
1236     uint64_t x233;
1237     uint64_t x234;
1238     uint64_t x235;
1239     fiat_secp384r1_uint1 x236;
1240     uint64_t x237;
1241     fiat_secp384r1_uint1 x238;
1242     uint64_t x239;
1243     fiat_secp384r1_uint1 x240;
1244     uint64_t x241;
1245     fiat_secp384r1_uint1 x242;
1246     uint64_t x243;
1247     fiat_secp384r1_uint1 x244;
1248     uint64_t x245;
1249     uint64_t x246;
1250     fiat_secp384r1_uint1 x247;
1251     uint64_t x248;
1252     fiat_secp384r1_uint1 x249;
1253     uint64_t x250;
1254     fiat_secp384r1_uint1 x251;
1255     uint64_t x252;
1256     fiat_secp384r1_uint1 x253;
1257     uint64_t x254;
1258     fiat_secp384r1_uint1 x255;
1259     uint64_t x256;
1260     fiat_secp384r1_uint1 x257;
1261     uint64_t x258;
1262     fiat_secp384r1_uint1 x259;
1263     uint64_t x260;
1264     uint64_t x261;
1265     uint64_t x262;
1266     uint64_t x263;
1267     uint64_t x264;
1268     uint64_t x265;
1269     uint64_t x266;
1270     uint64_t x267;
1271     uint64_t x268;
1272     uint64_t x269;
1273     uint64_t x270;
1274     uint64_t x271;
1275     uint64_t x272;
1276     uint64_t x273;
1277     uint64_t x274;
1278     fiat_secp384r1_uint1 x275;
1279     uint64_t x276;
1280     fiat_secp384r1_uint1 x277;
1281     uint64_t x278;
1282     fiat_secp384r1_uint1 x279;
1283     uint64_t x280;
1284     fiat_secp384r1_uint1 x281;
1285     uint64_t x282;
1286     fiat_secp384r1_uint1 x283;
1287     uint64_t x284;
1288     uint64_t x285;
1289     fiat_secp384r1_uint1 x286;
1290     uint64_t x287;
1291     fiat_secp384r1_uint1 x288;
1292     uint64_t x289;
1293     fiat_secp384r1_uint1 x290;
1294     uint64_t x291;
1295     fiat_secp384r1_uint1 x292;
1296     uint64_t x293;
1297     fiat_secp384r1_uint1 x294;
1298     uint64_t x295;
1299     fiat_secp384r1_uint1 x296;
1300     uint64_t x297;
1301     fiat_secp384r1_uint1 x298;
1302     uint64_t x299;
1303     uint64_t x300;
1304     uint64_t x301;
1305     uint64_t x302;
1306     uint64_t x303;
1307     uint64_t x304;
1308     uint64_t x305;
1309     uint64_t x306;
1310     uint64_t x307;
1311     uint64_t x308;
1312     uint64_t x309;
1313     uint64_t x310;
1314     uint64_t x311;
1315     uint64_t x312;
1316     fiat_secp384r1_uint1 x313;
1317     uint64_t x314;
1318     fiat_secp384r1_uint1 x315;
1319     uint64_t x316;
1320     fiat_secp384r1_uint1 x317;
1321     uint64_t x318;
1322     fiat_secp384r1_uint1 x319;
1323     uint64_t x320;
1324     fiat_secp384r1_uint1 x321;
1325     uint64_t x322;
1326     uint64_t x323;
1327     fiat_secp384r1_uint1 x324;
1328     uint64_t x325;
1329     fiat_secp384r1_uint1 x326;
1330     uint64_t x327;
1331     fiat_secp384r1_uint1 x328;
1332     uint64_t x329;
1333     fiat_secp384r1_uint1 x330;
1334     uint64_t x331;
1335     fiat_secp384r1_uint1 x332;
1336     uint64_t x333;
1337     fiat_secp384r1_uint1 x334;
1338     uint64_t x335;
1339     fiat_secp384r1_uint1 x336;
1340     uint64_t x337;
1341     uint64_t x338;
1342     uint64_t x339;
1343     uint64_t x340;
1344     uint64_t x341;
1345     uint64_t x342;
1346     uint64_t x343;
1347     uint64_t x344;
1348     uint64_t x345;
1349     uint64_t x346;
1350     uint64_t x347;
1351     uint64_t x348;
1352     uint64_t x349;
1353     uint64_t x350;
1354     uint64_t x351;
1355     fiat_secp384r1_uint1 x352;
1356     uint64_t x353;
1357     fiat_secp384r1_uint1 x354;
1358     uint64_t x355;
1359     fiat_secp384r1_uint1 x356;
1360     uint64_t x357;
1361     fiat_secp384r1_uint1 x358;
1362     uint64_t x359;
1363     fiat_secp384r1_uint1 x360;
1364     uint64_t x361;
1365     uint64_t x362;
1366     fiat_secp384r1_uint1 x363;
1367     uint64_t x364;
1368     fiat_secp384r1_uint1 x365;
1369     uint64_t x366;
1370     fiat_secp384r1_uint1 x367;
1371     uint64_t x368;
1372     fiat_secp384r1_uint1 x369;
1373     uint64_t x370;
1374     fiat_secp384r1_uint1 x371;
1375     uint64_t x372;
1376     fiat_secp384r1_uint1 x373;
1377     uint64_t x374;
1378     fiat_secp384r1_uint1 x375;
1379     uint64_t x376;
1380     uint64_t x377;
1381     uint64_t x378;
1382     uint64_t x379;
1383     uint64_t x380;
1384     uint64_t x381;
1385     uint64_t x382;
1386     uint64_t x383;
1387     uint64_t x384;
1388     uint64_t x385;
1389     uint64_t x386;
1390     uint64_t x387;
1391     uint64_t x388;
1392     uint64_t x389;
1393     fiat_secp384r1_uint1 x390;
1394     uint64_t x391;
1395     fiat_secp384r1_uint1 x392;
1396     uint64_t x393;
1397     fiat_secp384r1_uint1 x394;
1398     uint64_t x395;
1399     fiat_secp384r1_uint1 x396;
1400     uint64_t x397;
1401     fiat_secp384r1_uint1 x398;
1402     uint64_t x399;
1403     uint64_t x400;
1404     fiat_secp384r1_uint1 x401;
1405     uint64_t x402;
1406     fiat_secp384r1_uint1 x403;
1407     uint64_t x404;
1408     fiat_secp384r1_uint1 x405;
1409     uint64_t x406;
1410     fiat_secp384r1_uint1 x407;
1411     uint64_t x408;
1412     fiat_secp384r1_uint1 x409;
1413     uint64_t x410;
1414     fiat_secp384r1_uint1 x411;
1415     uint64_t x412;
1416     fiat_secp384r1_uint1 x413;
1417     uint64_t x414;
1418     uint64_t x415;
1419     uint64_t x416;
1420     uint64_t x417;
1421     uint64_t x418;
1422     uint64_t x419;
1423     uint64_t x420;
1424     uint64_t x421;
1425     uint64_t x422;
1426     uint64_t x423;
1427     uint64_t x424;
1428     uint64_t x425;
1429     uint64_t x426;
1430     uint64_t x427;
1431     uint64_t x428;
1432     fiat_secp384r1_uint1 x429;
1433     uint64_t x430;
1434     fiat_secp384r1_uint1 x431;
1435     uint64_t x432;
1436     fiat_secp384r1_uint1 x433;
1437     uint64_t x434;
1438     fiat_secp384r1_uint1 x435;
1439     uint64_t x436;
1440     fiat_secp384r1_uint1 x437;
1441     uint64_t x438;
1442     uint64_t x439;
1443     fiat_secp384r1_uint1 x440;
1444     uint64_t x441;
1445     fiat_secp384r1_uint1 x442;
1446     uint64_t x443;
1447     fiat_secp384r1_uint1 x444;
1448     uint64_t x445;
1449     fiat_secp384r1_uint1 x446;
1450     uint64_t x447;
1451     fiat_secp384r1_uint1 x448;
1452     uint64_t x449;
1453     fiat_secp384r1_uint1 x450;
1454     uint64_t x451;
1455     fiat_secp384r1_uint1 x452;
1456     uint64_t x453;
1457     uint64_t x454;
1458     fiat_secp384r1_uint1 x455;
1459     uint64_t x456;
1460     fiat_secp384r1_uint1 x457;
1461     uint64_t x458;
1462     fiat_secp384r1_uint1 x459;
1463     uint64_t x460;
1464     fiat_secp384r1_uint1 x461;
1465     uint64_t x462;
1466     fiat_secp384r1_uint1 x463;
1467     uint64_t x464;
1468     fiat_secp384r1_uint1 x465;
1469     uint64_t x466;
1470     fiat_secp384r1_uint1 x467;
1471     uint64_t x468;
1472     uint64_t x469;
1473     uint64_t x470;
1474     uint64_t x471;
1475     uint64_t x472;
1476     uint64_t x473;
1477     x1 = (arg1[1]);
1478     x2 = (arg1[2]);
1479     x3 = (arg1[3]);
1480     x4 = (arg1[4]);
1481     x5 = (arg1[5]);
1482     x6 = (arg1[0]);
1483     fiat_secp384r1_mulx_u64(&x7, &x8, x6, (arg1[5]));
1484     fiat_secp384r1_mulx_u64(&x9, &x10, x6, (arg1[4]));
1485     fiat_secp384r1_mulx_u64(&x11, &x12, x6, (arg1[3]));
1486     fiat_secp384r1_mulx_u64(&x13, &x14, x6, (arg1[2]));
1487     fiat_secp384r1_mulx_u64(&x15, &x16, x6, (arg1[1]));
1488     fiat_secp384r1_mulx_u64(&x17, &x18, x6, (arg1[0]));
1489     fiat_secp384r1_addcarryx_u64(&x19, &x20, 0x0, x18, x15);
1490     fiat_secp384r1_addcarryx_u64(&x21, &x22, x20, x16, x13);
1491     fiat_secp384r1_addcarryx_u64(&x23, &x24, x22, x14, x11);
1492     fiat_secp384r1_addcarryx_u64(&x25, &x26, x24, x12, x9);
1493     fiat_secp384r1_addcarryx_u64(&x27, &x28, x26, x10, x7);
1494     x29 = (x28 + x8);
1495     fiat_secp384r1_mulx_u64(&x30, &x31, x17, UINT64_C(0x100000001));
1496     fiat_secp384r1_mulx_u64(&x32, &x33, x30, UINT64_C(0xffffffffffffffff));
1497     fiat_secp384r1_mulx_u64(&x34, &x35, x30, UINT64_C(0xffffffffffffffff));
1498     fiat_secp384r1_mulx_u64(&x36, &x37, x30, UINT64_C(0xffffffffffffffff));
1499     fiat_secp384r1_mulx_u64(&x38, &x39, x30, UINT64_C(0xfffffffffffffffe));
1500     fiat_secp384r1_mulx_u64(&x40, &x41, x30, UINT64_C(0xffffffff00000000));
1501     fiat_secp384r1_mulx_u64(&x42, &x43, x30, UINT32_C(0xffffffff));
1502     fiat_secp384r1_addcarryx_u64(&x44, &x45, 0x0, x43, x40);
1503     fiat_secp384r1_addcarryx_u64(&x46, &x47, x45, x41, x38);
1504     fiat_secp384r1_addcarryx_u64(&x48, &x49, x47, x39, x36);
1505     fiat_secp384r1_addcarryx_u64(&x50, &x51, x49, x37, x34);
1506     fiat_secp384r1_addcarryx_u64(&x52, &x53, x51, x35, x32);
1507     x54 = (x53 + x33);
1508     fiat_secp384r1_addcarryx_u64(&x55, &x56, 0x0, x17, x42);
1509     fiat_secp384r1_addcarryx_u64(&x57, &x58, x56, x19, x44);
1510     fiat_secp384r1_addcarryx_u64(&x59, &x60, x58, x21, x46);
1511     fiat_secp384r1_addcarryx_u64(&x61, &x62, x60, x23, x48);
1512     fiat_secp384r1_addcarryx_u64(&x63, &x64, x62, x25, x50);
1513     fiat_secp384r1_addcarryx_u64(&x65, &x66, x64, x27, x52);
1514     fiat_secp384r1_addcarryx_u64(&x67, &x68, x66, x29, x54);
1515     fiat_secp384r1_mulx_u64(&x69, &x70, x1, (arg1[5]));
1516     fiat_secp384r1_mulx_u64(&x71, &x72, x1, (arg1[4]));
1517     fiat_secp384r1_mulx_u64(&x73, &x74, x1, (arg1[3]));
1518     fiat_secp384r1_mulx_u64(&x75, &x76, x1, (arg1[2]));
1519     fiat_secp384r1_mulx_u64(&x77, &x78, x1, (arg1[1]));
1520     fiat_secp384r1_mulx_u64(&x79, &x80, x1, (arg1[0]));
1521     fiat_secp384r1_addcarryx_u64(&x81, &x82, 0x0, x80, x77);
1522     fiat_secp384r1_addcarryx_u64(&x83, &x84, x82, x78, x75);
1523     fiat_secp384r1_addcarryx_u64(&x85, &x86, x84, x76, x73);
1524     fiat_secp384r1_addcarryx_u64(&x87, &x88, x86, x74, x71);
1525     fiat_secp384r1_addcarryx_u64(&x89, &x90, x88, x72, x69);
1526     x91 = (x90 + x70);
1527     fiat_secp384r1_addcarryx_u64(&x92, &x93, 0x0, x57, x79);
1528     fiat_secp384r1_addcarryx_u64(&x94, &x95, x93, x59, x81);
1529     fiat_secp384r1_addcarryx_u64(&x96, &x97, x95, x61, x83);
1530     fiat_secp384r1_addcarryx_u64(&x98, &x99, x97, x63, x85);
1531     fiat_secp384r1_addcarryx_u64(&x100, &x101, x99, x65, x87);
1532     fiat_secp384r1_addcarryx_u64(&x102, &x103, x101, x67, x89);
1533     fiat_secp384r1_addcarryx_u64(&x104, &x105, x103, x68, x91);
1534     fiat_secp384r1_mulx_u64(&x106, &x107, x92, UINT64_C(0x100000001));
1535     fiat_secp384r1_mulx_u64(&x108, &x109, x106, UINT64_C(0xffffffffffffffff));
1536     fiat_secp384r1_mulx_u64(&x110, &x111, x106, UINT64_C(0xffffffffffffffff));
1537     fiat_secp384r1_mulx_u64(&x112, &x113, x106, UINT64_C(0xffffffffffffffff));
1538     fiat_secp384r1_mulx_u64(&x114, &x115, x106, UINT64_C(0xfffffffffffffffe));
1539     fiat_secp384r1_mulx_u64(&x116, &x117, x106, UINT64_C(0xffffffff00000000));
1540     fiat_secp384r1_mulx_u64(&x118, &x119, x106, UINT32_C(0xffffffff));
1541     fiat_secp384r1_addcarryx_u64(&x120, &x121, 0x0, x119, x116);
1542     fiat_secp384r1_addcarryx_u64(&x122, &x123, x121, x117, x114);
1543     fiat_secp384r1_addcarryx_u64(&x124, &x125, x123, x115, x112);
1544     fiat_secp384r1_addcarryx_u64(&x126, &x127, x125, x113, x110);
1545     fiat_secp384r1_addcarryx_u64(&x128, &x129, x127, x111, x108);
1546     x130 = (x129 + x109);
1547     fiat_secp384r1_addcarryx_u64(&x131, &x132, 0x0, x92, x118);
1548     fiat_secp384r1_addcarryx_u64(&x133, &x134, x132, x94, x120);
1549     fiat_secp384r1_addcarryx_u64(&x135, &x136, x134, x96, x122);
1550     fiat_secp384r1_addcarryx_u64(&x137, &x138, x136, x98, x124);
1551     fiat_secp384r1_addcarryx_u64(&x139, &x140, x138, x100, x126);
1552     fiat_secp384r1_addcarryx_u64(&x141, &x142, x140, x102, x128);
1553     fiat_secp384r1_addcarryx_u64(&x143, &x144, x142, x104, x130);
1554     x145 = ((uint64_t)x144 + x105);
1555     fiat_secp384r1_mulx_u64(&x146, &x147, x2, (arg1[5]));
1556     fiat_secp384r1_mulx_u64(&x148, &x149, x2, (arg1[4]));
1557     fiat_secp384r1_mulx_u64(&x150, &x151, x2, (arg1[3]));
1558     fiat_secp384r1_mulx_u64(&x152, &x153, x2, (arg1[2]));
1559     fiat_secp384r1_mulx_u64(&x154, &x155, x2, (arg1[1]));
1560     fiat_secp384r1_mulx_u64(&x156, &x157, x2, (arg1[0]));
1561     fiat_secp384r1_addcarryx_u64(&x158, &x159, 0x0, x157, x154);
1562     fiat_secp384r1_addcarryx_u64(&x160, &x161, x159, x155, x152);
1563     fiat_secp384r1_addcarryx_u64(&x162, &x163, x161, x153, x150);
1564     fiat_secp384r1_addcarryx_u64(&x164, &x165, x163, x151, x148);
1565     fiat_secp384r1_addcarryx_u64(&x166, &x167, x165, x149, x146);
1566     x168 = (x167 + x147);
1567     fiat_secp384r1_addcarryx_u64(&x169, &x170, 0x0, x133, x156);
1568     fiat_secp384r1_addcarryx_u64(&x171, &x172, x170, x135, x158);
1569     fiat_secp384r1_addcarryx_u64(&x173, &x174, x172, x137, x160);
1570     fiat_secp384r1_addcarryx_u64(&x175, &x176, x174, x139, x162);
1571     fiat_secp384r1_addcarryx_u64(&x177, &x178, x176, x141, x164);
1572     fiat_secp384r1_addcarryx_u64(&x179, &x180, x178, x143, x166);
1573     fiat_secp384r1_addcarryx_u64(&x181, &x182, x180, x145, x168);
1574     fiat_secp384r1_mulx_u64(&x183, &x184, x169, UINT64_C(0x100000001));
1575     fiat_secp384r1_mulx_u64(&x185, &x186, x183, UINT64_C(0xffffffffffffffff));
1576     fiat_secp384r1_mulx_u64(&x187, &x188, x183, UINT64_C(0xffffffffffffffff));
1577     fiat_secp384r1_mulx_u64(&x189, &x190, x183, UINT64_C(0xffffffffffffffff));
1578     fiat_secp384r1_mulx_u64(&x191, &x192, x183, UINT64_C(0xfffffffffffffffe));
1579     fiat_secp384r1_mulx_u64(&x193, &x194, x183, UINT64_C(0xffffffff00000000));
1580     fiat_secp384r1_mulx_u64(&x195, &x196, x183, UINT32_C(0xffffffff));
1581     fiat_secp384r1_addcarryx_u64(&x197, &x198, 0x0, x196, x193);
1582     fiat_secp384r1_addcarryx_u64(&x199, &x200, x198, x194, x191);
1583     fiat_secp384r1_addcarryx_u64(&x201, &x202, x200, x192, x189);
1584     fiat_secp384r1_addcarryx_u64(&x203, &x204, x202, x190, x187);
1585     fiat_secp384r1_addcarryx_u64(&x205, &x206, x204, x188, x185);
1586     x207 = (x206 + x186);
1587     fiat_secp384r1_addcarryx_u64(&x208, &x209, 0x0, x169, x195);
1588     fiat_secp384r1_addcarryx_u64(&x210, &x211, x209, x171, x197);
1589     fiat_secp384r1_addcarryx_u64(&x212, &x213, x211, x173, x199);
1590     fiat_secp384r1_addcarryx_u64(&x214, &x215, x213, x175, x201);
1591     fiat_secp384r1_addcarryx_u64(&x216, &x217, x215, x177, x203);
1592     fiat_secp384r1_addcarryx_u64(&x218, &x219, x217, x179, x205);
1593     fiat_secp384r1_addcarryx_u64(&x220, &x221, x219, x181, x207);
1594     x222 = ((uint64_t)x221 + x182);
1595     fiat_secp384r1_mulx_u64(&x223, &x224, x3, (arg1[5]));
1596     fiat_secp384r1_mulx_u64(&x225, &x226, x3, (arg1[4]));
1597     fiat_secp384r1_mulx_u64(&x227, &x228, x3, (arg1[3]));
1598     fiat_secp384r1_mulx_u64(&x229, &x230, x3, (arg1[2]));
1599     fiat_secp384r1_mulx_u64(&x231, &x232, x3, (arg1[1]));
1600     fiat_secp384r1_mulx_u64(&x233, &x234, x3, (arg1[0]));
1601     fiat_secp384r1_addcarryx_u64(&x235, &x236, 0x0, x234, x231);
1602     fiat_secp384r1_addcarryx_u64(&x237, &x238, x236, x232, x229);
1603     fiat_secp384r1_addcarryx_u64(&x239, &x240, x238, x230, x227);
1604     fiat_secp384r1_addcarryx_u64(&x241, &x242, x240, x228, x225);
1605     fiat_secp384r1_addcarryx_u64(&x243, &x244, x242, x226, x223);
1606     x245 = (x244 + x224);
1607     fiat_secp384r1_addcarryx_u64(&x246, &x247, 0x0, x210, x233);
1608     fiat_secp384r1_addcarryx_u64(&x248, &x249, x247, x212, x235);
1609     fiat_secp384r1_addcarryx_u64(&x250, &x251, x249, x214, x237);
1610     fiat_secp384r1_addcarryx_u64(&x252, &x253, x251, x216, x239);
1611     fiat_secp384r1_addcarryx_u64(&x254, &x255, x253, x218, x241);
1612     fiat_secp384r1_addcarryx_u64(&x256, &x257, x255, x220, x243);
1613     fiat_secp384r1_addcarryx_u64(&x258, &x259, x257, x222, x245);
1614     fiat_secp384r1_mulx_u64(&x260, &x261, x246, UINT64_C(0x100000001));
1615     fiat_secp384r1_mulx_u64(&x262, &x263, x260, UINT64_C(0xffffffffffffffff));
1616     fiat_secp384r1_mulx_u64(&x264, &x265, x260, UINT64_C(0xffffffffffffffff));
1617     fiat_secp384r1_mulx_u64(&x266, &x267, x260, UINT64_C(0xffffffffffffffff));
1618     fiat_secp384r1_mulx_u64(&x268, &x269, x260, UINT64_C(0xfffffffffffffffe));
1619     fiat_secp384r1_mulx_u64(&x270, &x271, x260, UINT64_C(0xffffffff00000000));
1620     fiat_secp384r1_mulx_u64(&x272, &x273, x260, UINT32_C(0xffffffff));
1621     fiat_secp384r1_addcarryx_u64(&x274, &x275, 0x0, x273, x270);
1622     fiat_secp384r1_addcarryx_u64(&x276, &x277, x275, x271, x268);
1623     fiat_secp384r1_addcarryx_u64(&x278, &x279, x277, x269, x266);
1624     fiat_secp384r1_addcarryx_u64(&x280, &x281, x279, x267, x264);
1625     fiat_secp384r1_addcarryx_u64(&x282, &x283, x281, x265, x262);
1626     x284 = (x283 + x263);
1627     fiat_secp384r1_addcarryx_u64(&x285, &x286, 0x0, x246, x272);
1628     fiat_secp384r1_addcarryx_u64(&x287, &x288, x286, x248, x274);
1629     fiat_secp384r1_addcarryx_u64(&x289, &x290, x288, x250, x276);
1630     fiat_secp384r1_addcarryx_u64(&x291, &x292, x290, x252, x278);
1631     fiat_secp384r1_addcarryx_u64(&x293, &x294, x292, x254, x280);
1632     fiat_secp384r1_addcarryx_u64(&x295, &x296, x294, x256, x282);
1633     fiat_secp384r1_addcarryx_u64(&x297, &x298, x296, x258, x284);
1634     x299 = ((uint64_t)x298 + x259);
1635     fiat_secp384r1_mulx_u64(&x300, &x301, x4, (arg1[5]));
1636     fiat_secp384r1_mulx_u64(&x302, &x303, x4, (arg1[4]));
1637     fiat_secp384r1_mulx_u64(&x304, &x305, x4, (arg1[3]));
1638     fiat_secp384r1_mulx_u64(&x306, &x307, x4, (arg1[2]));
1639     fiat_secp384r1_mulx_u64(&x308, &x309, x4, (arg1[1]));
1640     fiat_secp384r1_mulx_u64(&x310, &x311, x4, (arg1[0]));
1641     fiat_secp384r1_addcarryx_u64(&x312, &x313, 0x0, x311, x308);
1642     fiat_secp384r1_addcarryx_u64(&x314, &x315, x313, x309, x306);
1643     fiat_secp384r1_addcarryx_u64(&x316, &x317, x315, x307, x304);
1644     fiat_secp384r1_addcarryx_u64(&x318, &x319, x317, x305, x302);
1645     fiat_secp384r1_addcarryx_u64(&x320, &x321, x319, x303, x300);
1646     x322 = (x321 + x301);
1647     fiat_secp384r1_addcarryx_u64(&x323, &x324, 0x0, x287, x310);
1648     fiat_secp384r1_addcarryx_u64(&x325, &x326, x324, x289, x312);
1649     fiat_secp384r1_addcarryx_u64(&x327, &x328, x326, x291, x314);
1650     fiat_secp384r1_addcarryx_u64(&x329, &x330, x328, x293, x316);
1651     fiat_secp384r1_addcarryx_u64(&x331, &x332, x330, x295, x318);
1652     fiat_secp384r1_addcarryx_u64(&x333, &x334, x332, x297, x320);
1653     fiat_secp384r1_addcarryx_u64(&x335, &x336, x334, x299, x322);
1654     fiat_secp384r1_mulx_u64(&x337, &x338, x323, UINT64_C(0x100000001));
1655     fiat_secp384r1_mulx_u64(&x339, &x340, x337, UINT64_C(0xffffffffffffffff));
1656     fiat_secp384r1_mulx_u64(&x341, &x342, x337, UINT64_C(0xffffffffffffffff));
1657     fiat_secp384r1_mulx_u64(&x343, &x344, x337, UINT64_C(0xffffffffffffffff));
1658     fiat_secp384r1_mulx_u64(&x345, &x346, x337, UINT64_C(0xfffffffffffffffe));
1659     fiat_secp384r1_mulx_u64(&x347, &x348, x337, UINT64_C(0xffffffff00000000));
1660     fiat_secp384r1_mulx_u64(&x349, &x350, x337, UINT32_C(0xffffffff));
1661     fiat_secp384r1_addcarryx_u64(&x351, &x352, 0x0, x350, x347);
1662     fiat_secp384r1_addcarryx_u64(&x353, &x354, x352, x348, x345);
1663     fiat_secp384r1_addcarryx_u64(&x355, &x356, x354, x346, x343);
1664     fiat_secp384r1_addcarryx_u64(&x357, &x358, x356, x344, x341);
1665     fiat_secp384r1_addcarryx_u64(&x359, &x360, x358, x342, x339);
1666     x361 = (x360 + x340);
1667     fiat_secp384r1_addcarryx_u64(&x362, &x363, 0x0, x323, x349);
1668     fiat_secp384r1_addcarryx_u64(&x364, &x365, x363, x325, x351);
1669     fiat_secp384r1_addcarryx_u64(&x366, &x367, x365, x327, x353);
1670     fiat_secp384r1_addcarryx_u64(&x368, &x369, x367, x329, x355);
1671     fiat_secp384r1_addcarryx_u64(&x370, &x371, x369, x331, x357);
1672     fiat_secp384r1_addcarryx_u64(&x372, &x373, x371, x333, x359);
1673     fiat_secp384r1_addcarryx_u64(&x374, &x375, x373, x335, x361);
1674     x376 = ((uint64_t)x375 + x336);
1675     fiat_secp384r1_mulx_u64(&x377, &x378, x5, (arg1[5]));
1676     fiat_secp384r1_mulx_u64(&x379, &x380, x5, (arg1[4]));
1677     fiat_secp384r1_mulx_u64(&x381, &x382, x5, (arg1[3]));
1678     fiat_secp384r1_mulx_u64(&x383, &x384, x5, (arg1[2]));
1679     fiat_secp384r1_mulx_u64(&x385, &x386, x5, (arg1[1]));
1680     fiat_secp384r1_mulx_u64(&x387, &x388, x5, (arg1[0]));
1681     fiat_secp384r1_addcarryx_u64(&x389, &x390, 0x0, x388, x385);
1682     fiat_secp384r1_addcarryx_u64(&x391, &x392, x390, x386, x383);
1683     fiat_secp384r1_addcarryx_u64(&x393, &x394, x392, x384, x381);
1684     fiat_secp384r1_addcarryx_u64(&x395, &x396, x394, x382, x379);
1685     fiat_secp384r1_addcarryx_u64(&x397, &x398, x396, x380, x377);
1686     x399 = (x398 + x378);
1687     fiat_secp384r1_addcarryx_u64(&x400, &x401, 0x0, x364, x387);
1688     fiat_secp384r1_addcarryx_u64(&x402, &x403, x401, x366, x389);
1689     fiat_secp384r1_addcarryx_u64(&x404, &x405, x403, x368, x391);
1690     fiat_secp384r1_addcarryx_u64(&x406, &x407, x405, x370, x393);
1691     fiat_secp384r1_addcarryx_u64(&x408, &x409, x407, x372, x395);
1692     fiat_secp384r1_addcarryx_u64(&x410, &x411, x409, x374, x397);
1693     fiat_secp384r1_addcarryx_u64(&x412, &x413, x411, x376, x399);
1694     fiat_secp384r1_mulx_u64(&x414, &x415, x400, UINT64_C(0x100000001));
1695     fiat_secp384r1_mulx_u64(&x416, &x417, x414, UINT64_C(0xffffffffffffffff));
1696     fiat_secp384r1_mulx_u64(&x418, &x419, x414, UINT64_C(0xffffffffffffffff));
1697     fiat_secp384r1_mulx_u64(&x420, &x421, x414, UINT64_C(0xffffffffffffffff));
1698     fiat_secp384r1_mulx_u64(&x422, &x423, x414, UINT64_C(0xfffffffffffffffe));
1699     fiat_secp384r1_mulx_u64(&x424, &x425, x414, UINT64_C(0xffffffff00000000));
1700     fiat_secp384r1_mulx_u64(&x426, &x427, x414, UINT32_C(0xffffffff));
1701     fiat_secp384r1_addcarryx_u64(&x428, &x429, 0x0, x427, x424);
1702     fiat_secp384r1_addcarryx_u64(&x430, &x431, x429, x425, x422);
1703     fiat_secp384r1_addcarryx_u64(&x432, &x433, x431, x423, x420);
1704     fiat_secp384r1_addcarryx_u64(&x434, &x435, x433, x421, x418);
1705     fiat_secp384r1_addcarryx_u64(&x436, &x437, x435, x419, x416);
1706     x438 = (x437 + x417);
1707     fiat_secp384r1_addcarryx_u64(&x439, &x440, 0x0, x400, x426);
1708     fiat_secp384r1_addcarryx_u64(&x441, &x442, x440, x402, x428);
1709     fiat_secp384r1_addcarryx_u64(&x443, &x444, x442, x404, x430);
1710     fiat_secp384r1_addcarryx_u64(&x445, &x446, x444, x406, x432);
1711     fiat_secp384r1_addcarryx_u64(&x447, &x448, x446, x408, x434);
1712     fiat_secp384r1_addcarryx_u64(&x449, &x450, x448, x410, x436);
1713     fiat_secp384r1_addcarryx_u64(&x451, &x452, x450, x412, x438);
1714     x453 = ((uint64_t)x452 + x413);
1715     fiat_secp384r1_subborrowx_u64(&x454, &x455, 0x0, x441,
1716                                   UINT32_C(0xffffffff));
1717     fiat_secp384r1_subborrowx_u64(&x456, &x457, x455, x443,
1718                                   UINT64_C(0xffffffff00000000));
1719     fiat_secp384r1_subborrowx_u64(&x458, &x459, x457, x445,
1720                                   UINT64_C(0xfffffffffffffffe));
1721     fiat_secp384r1_subborrowx_u64(&x460, &x461, x459, x447,
1722                                   UINT64_C(0xffffffffffffffff));
1723     fiat_secp384r1_subborrowx_u64(&x462, &x463, x461, x449,
1724                                   UINT64_C(0xffffffffffffffff));
1725     fiat_secp384r1_subborrowx_u64(&x464, &x465, x463, x451,
1726                                   UINT64_C(0xffffffffffffffff));
1727     fiat_secp384r1_subborrowx_u64(&x466, &x467, x465, x453, 0x0);
1728     fiat_secp384r1_cmovznz_u64(&x468, x467, x454, x441);
1729     fiat_secp384r1_cmovznz_u64(&x469, x467, x456, x443);
1730     fiat_secp384r1_cmovznz_u64(&x470, x467, x458, x445);
1731     fiat_secp384r1_cmovznz_u64(&x471, x467, x460, x447);
1732     fiat_secp384r1_cmovznz_u64(&x472, x467, x462, x449);
1733     fiat_secp384r1_cmovznz_u64(&x473, x467, x464, x451);
1734     out1[0] = x468;
1735     out1[1] = x469;
1736     out1[2] = x470;
1737     out1[3] = x471;
1738     out1[4] = x472;
1739     out1[5] = x473;
1740 }
1741 
1742 /*
1743  * The function fiat_secp384r1_add adds two field elements in the Montgomery domain.
1744  * Preconditions:
1745  *   0 ≤ eval arg1 < m
1746  *   0 ≤ eval arg2 < m
1747  * Postconditions:
1748  *   eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) + eval (from_montgomery arg2)) mod m
1749  *   0 ≤ eval out1 < m
1750  *
1751  * Input Bounds:
1752  *   arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
1753  *   arg2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
1754  * Output Bounds:
1755  *   out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
1756  */
1757 static void
fiat_secp384r1_add(uint64_t out1[6],const uint64_t arg1[6],const uint64_t arg2[6])1758 fiat_secp384r1_add(uint64_t out1[6], const uint64_t arg1[6],
1759                    const uint64_t arg2[6])
1760 {
1761     uint64_t x1;
1762     fiat_secp384r1_uint1 x2;
1763     uint64_t x3;
1764     fiat_secp384r1_uint1 x4;
1765     uint64_t x5;
1766     fiat_secp384r1_uint1 x6;
1767     uint64_t x7;
1768     fiat_secp384r1_uint1 x8;
1769     uint64_t x9;
1770     fiat_secp384r1_uint1 x10;
1771     uint64_t x11;
1772     fiat_secp384r1_uint1 x12;
1773     uint64_t x13;
1774     fiat_secp384r1_uint1 x14;
1775     uint64_t x15;
1776     fiat_secp384r1_uint1 x16;
1777     uint64_t x17;
1778     fiat_secp384r1_uint1 x18;
1779     uint64_t x19;
1780     fiat_secp384r1_uint1 x20;
1781     uint64_t x21;
1782     fiat_secp384r1_uint1 x22;
1783     uint64_t x23;
1784     fiat_secp384r1_uint1 x24;
1785     uint64_t x25;
1786     fiat_secp384r1_uint1 x26;
1787     uint64_t x27;
1788     uint64_t x28;
1789     uint64_t x29;
1790     uint64_t x30;
1791     uint64_t x31;
1792     uint64_t x32;
1793     fiat_secp384r1_addcarryx_u64(&x1, &x2, 0x0, (arg1[0]), (arg2[0]));
1794     fiat_secp384r1_addcarryx_u64(&x3, &x4, x2, (arg1[1]), (arg2[1]));
1795     fiat_secp384r1_addcarryx_u64(&x5, &x6, x4, (arg1[2]), (arg2[2]));
1796     fiat_secp384r1_addcarryx_u64(&x7, &x8, x6, (arg1[3]), (arg2[3]));
1797     fiat_secp384r1_addcarryx_u64(&x9, &x10, x8, (arg1[4]), (arg2[4]));
1798     fiat_secp384r1_addcarryx_u64(&x11, &x12, x10, (arg1[5]), (arg2[5]));
1799     fiat_secp384r1_subborrowx_u64(&x13, &x14, 0x0, x1, UINT32_C(0xffffffff));
1800     fiat_secp384r1_subborrowx_u64(&x15, &x16, x14, x3,
1801                                   UINT64_C(0xffffffff00000000));
1802     fiat_secp384r1_subborrowx_u64(&x17, &x18, x16, x5,
1803                                   UINT64_C(0xfffffffffffffffe));
1804     fiat_secp384r1_subborrowx_u64(&x19, &x20, x18, x7,
1805                                   UINT64_C(0xffffffffffffffff));
1806     fiat_secp384r1_subborrowx_u64(&x21, &x22, x20, x9,
1807                                   UINT64_C(0xffffffffffffffff));
1808     fiat_secp384r1_subborrowx_u64(&x23, &x24, x22, x11,
1809                                   UINT64_C(0xffffffffffffffff));
1810     fiat_secp384r1_subborrowx_u64(&x25, &x26, x24, x12, 0x0);
1811     fiat_secp384r1_cmovznz_u64(&x27, x26, x13, x1);
1812     fiat_secp384r1_cmovznz_u64(&x28, x26, x15, x3);
1813     fiat_secp384r1_cmovznz_u64(&x29, x26, x17, x5);
1814     fiat_secp384r1_cmovznz_u64(&x30, x26, x19, x7);
1815     fiat_secp384r1_cmovznz_u64(&x31, x26, x21, x9);
1816     fiat_secp384r1_cmovznz_u64(&x32, x26, x23, x11);
1817     out1[0] = x27;
1818     out1[1] = x28;
1819     out1[2] = x29;
1820     out1[3] = x30;
1821     out1[4] = x31;
1822     out1[5] = x32;
1823 }
1824 
1825 /*
1826  * The function fiat_secp384r1_sub subtracts two field elements in the Montgomery domain.
1827  * Preconditions:
1828  *   0 ≤ eval arg1 < m
1829  *   0 ≤ eval arg2 < m
1830  * Postconditions:
1831  *   eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) - eval (from_montgomery arg2)) mod m
1832  *   0 ≤ eval out1 < m
1833  *
1834  * Input Bounds:
1835  *   arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
1836  *   arg2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
1837  * Output Bounds:
1838  *   out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
1839  */
1840 static void
fiat_secp384r1_sub(uint64_t out1[6],const uint64_t arg1[6],const uint64_t arg2[6])1841 fiat_secp384r1_sub(uint64_t out1[6], const uint64_t arg1[6],
1842                    const uint64_t arg2[6])
1843 {
1844     uint64_t x1;
1845     fiat_secp384r1_uint1 x2;
1846     uint64_t x3;
1847     fiat_secp384r1_uint1 x4;
1848     uint64_t x5;
1849     fiat_secp384r1_uint1 x6;
1850     uint64_t x7;
1851     fiat_secp384r1_uint1 x8;
1852     uint64_t x9;
1853     fiat_secp384r1_uint1 x10;
1854     uint64_t x11;
1855     fiat_secp384r1_uint1 x12;
1856     uint64_t x13;
1857     uint64_t x14;
1858     fiat_secp384r1_uint1 x15;
1859     uint64_t x16;
1860     fiat_secp384r1_uint1 x17;
1861     uint64_t x18;
1862     fiat_secp384r1_uint1 x19;
1863     uint64_t x20;
1864     fiat_secp384r1_uint1 x21;
1865     uint64_t x22;
1866     fiat_secp384r1_uint1 x23;
1867     uint64_t x24;
1868     fiat_secp384r1_uint1 x25;
1869     fiat_secp384r1_subborrowx_u64(&x1, &x2, 0x0, (arg1[0]), (arg2[0]));
1870     fiat_secp384r1_subborrowx_u64(&x3, &x4, x2, (arg1[1]), (arg2[1]));
1871     fiat_secp384r1_subborrowx_u64(&x5, &x6, x4, (arg1[2]), (arg2[2]));
1872     fiat_secp384r1_subborrowx_u64(&x7, &x8, x6, (arg1[3]), (arg2[3]));
1873     fiat_secp384r1_subborrowx_u64(&x9, &x10, x8, (arg1[4]), (arg2[4]));
1874     fiat_secp384r1_subborrowx_u64(&x11, &x12, x10, (arg1[5]), (arg2[5]));
1875     fiat_secp384r1_cmovznz_u64(&x13, x12, 0x0, UINT64_C(0xffffffffffffffff));
1876     fiat_secp384r1_addcarryx_u64(&x14, &x15, 0x0, x1,
1877                                  (x13 & UINT32_C(0xffffffff)));
1878     fiat_secp384r1_addcarryx_u64(&x16, &x17, x15, x3,
1879                                  (x13 & UINT64_C(0xffffffff00000000)));
1880     fiat_secp384r1_addcarryx_u64(&x18, &x19, x17, x5,
1881                                  (x13 & UINT64_C(0xfffffffffffffffe)));
1882     fiat_secp384r1_addcarryx_u64(&x20, &x21, x19, x7, x13);
1883     fiat_secp384r1_addcarryx_u64(&x22, &x23, x21, x9, x13);
1884     fiat_secp384r1_addcarryx_u64(&x24, &x25, x23, x11, x13);
1885     out1[0] = x14;
1886     out1[1] = x16;
1887     out1[2] = x18;
1888     out1[3] = x20;
1889     out1[4] = x22;
1890     out1[5] = x24;
1891 }
1892 
1893 /*
1894  * The function fiat_secp384r1_opp negates a field element in the Montgomery domain.
1895  * Preconditions:
1896  *   0 ≤ eval arg1 < m
1897  * Postconditions:
1898  *   eval (from_montgomery out1) mod m = -eval (from_montgomery arg1) mod m
1899  *   0 ≤ eval out1 < m
1900  *
1901  * Input Bounds:
1902  *   arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
1903  * Output Bounds:
1904  *   out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
1905  */
1906 static void
fiat_secp384r1_opp(uint64_t out1[6],const uint64_t arg1[6])1907 fiat_secp384r1_opp(uint64_t out1[6], const uint64_t arg1[6])
1908 {
1909     uint64_t x1;
1910     fiat_secp384r1_uint1 x2;
1911     uint64_t x3;
1912     fiat_secp384r1_uint1 x4;
1913     uint64_t x5;
1914     fiat_secp384r1_uint1 x6;
1915     uint64_t x7;
1916     fiat_secp384r1_uint1 x8;
1917     uint64_t x9;
1918     fiat_secp384r1_uint1 x10;
1919     uint64_t x11;
1920     fiat_secp384r1_uint1 x12;
1921     uint64_t x13;
1922     uint64_t x14;
1923     fiat_secp384r1_uint1 x15;
1924     uint64_t x16;
1925     fiat_secp384r1_uint1 x17;
1926     uint64_t x18;
1927     fiat_secp384r1_uint1 x19;
1928     uint64_t x20;
1929     fiat_secp384r1_uint1 x21;
1930     uint64_t x22;
1931     fiat_secp384r1_uint1 x23;
1932     uint64_t x24;
1933     fiat_secp384r1_uint1 x25;
1934     fiat_secp384r1_subborrowx_u64(&x1, &x2, 0x0, 0x0, (arg1[0]));
1935     fiat_secp384r1_subborrowx_u64(&x3, &x4, x2, 0x0, (arg1[1]));
1936     fiat_secp384r1_subborrowx_u64(&x5, &x6, x4, 0x0, (arg1[2]));
1937     fiat_secp384r1_subborrowx_u64(&x7, &x8, x6, 0x0, (arg1[3]));
1938     fiat_secp384r1_subborrowx_u64(&x9, &x10, x8, 0x0, (arg1[4]));
1939     fiat_secp384r1_subborrowx_u64(&x11, &x12, x10, 0x0, (arg1[5]));
1940     fiat_secp384r1_cmovznz_u64(&x13, x12, 0x0, UINT64_C(0xffffffffffffffff));
1941     fiat_secp384r1_addcarryx_u64(&x14, &x15, 0x0, x1,
1942                                  (x13 & UINT32_C(0xffffffff)));
1943     fiat_secp384r1_addcarryx_u64(&x16, &x17, x15, x3,
1944                                  (x13 & UINT64_C(0xffffffff00000000)));
1945     fiat_secp384r1_addcarryx_u64(&x18, &x19, x17, x5,
1946                                  (x13 & UINT64_C(0xfffffffffffffffe)));
1947     fiat_secp384r1_addcarryx_u64(&x20, &x21, x19, x7, x13);
1948     fiat_secp384r1_addcarryx_u64(&x22, &x23, x21, x9, x13);
1949     fiat_secp384r1_addcarryx_u64(&x24, &x25, x23, x11, x13);
1950     out1[0] = x14;
1951     out1[1] = x16;
1952     out1[2] = x18;
1953     out1[3] = x20;
1954     out1[4] = x22;
1955     out1[5] = x24;
1956 }
1957 
1958 /*
1959  * The function fiat_secp384r1_from_montgomery translates a field element out of the Montgomery domain.
1960  * Preconditions:
1961  *   0 ≤ eval arg1 < m
1962  * Postconditions:
1963  *   eval out1 mod m = (eval arg1 * ((2^64)⁻¹ mod m)^6) mod m
1964  *   0 ≤ eval out1 < m
1965  *
1966  * Input Bounds:
1967  *   arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
1968  * Output Bounds:
1969  *   out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
1970  */
1971 static void
fiat_secp384r1_from_montgomery(uint64_t out1[6],const uint64_t arg1[6])1972 fiat_secp384r1_from_montgomery(uint64_t out1[6],
1973                                const uint64_t arg1[6])
1974 {
1975     uint64_t x1;
1976     uint64_t x2;
1977     uint64_t x3;
1978     uint64_t x4;
1979     uint64_t x5;
1980     uint64_t x6;
1981     uint64_t x7;
1982     uint64_t x8;
1983     uint64_t x9;
1984     uint64_t x10;
1985     uint64_t x11;
1986     uint64_t x12;
1987     uint64_t x13;
1988     uint64_t x14;
1989     uint64_t x15;
1990     uint64_t x16;
1991     fiat_secp384r1_uint1 x17;
1992     uint64_t x18;
1993     fiat_secp384r1_uint1 x19;
1994     uint64_t x20;
1995     fiat_secp384r1_uint1 x21;
1996     uint64_t x22;
1997     fiat_secp384r1_uint1 x23;
1998     uint64_t x24;
1999     fiat_secp384r1_uint1 x25;
2000     uint64_t x26;
2001     fiat_secp384r1_uint1 x27;
2002     uint64_t x28;
2003     fiat_secp384r1_uint1 x29;
2004     uint64_t x30;
2005     fiat_secp384r1_uint1 x31;
2006     uint64_t x32;
2007     fiat_secp384r1_uint1 x33;
2008     uint64_t x34;
2009     fiat_secp384r1_uint1 x35;
2010     uint64_t x36;
2011     fiat_secp384r1_uint1 x37;
2012     uint64_t x38;
2013     fiat_secp384r1_uint1 x39;
2014     uint64_t x40;
2015     fiat_secp384r1_uint1 x41;
2016     uint64_t x42;
2017     fiat_secp384r1_uint1 x43;
2018     uint64_t x44;
2019     fiat_secp384r1_uint1 x45;
2020     uint64_t x46;
2021     fiat_secp384r1_uint1 x47;
2022     uint64_t x48;
2023     fiat_secp384r1_uint1 x49;
2024     uint64_t x50;
2025     fiat_secp384r1_uint1 x51;
2026     uint64_t x52;
2027     uint64_t x53;
2028     uint64_t x54;
2029     uint64_t x55;
2030     uint64_t x56;
2031     uint64_t x57;
2032     uint64_t x58;
2033     uint64_t x59;
2034     uint64_t x60;
2035     uint64_t x61;
2036     uint64_t x62;
2037     uint64_t x63;
2038     uint64_t x64;
2039     uint64_t x65;
2040     uint64_t x66;
2041     fiat_secp384r1_uint1 x67;
2042     uint64_t x68;
2043     fiat_secp384r1_uint1 x69;
2044     uint64_t x70;
2045     fiat_secp384r1_uint1 x71;
2046     uint64_t x72;
2047     fiat_secp384r1_uint1 x73;
2048     uint64_t x74;
2049     fiat_secp384r1_uint1 x75;
2050     uint64_t x76;
2051     fiat_secp384r1_uint1 x77;
2052     uint64_t x78;
2053     fiat_secp384r1_uint1 x79;
2054     uint64_t x80;
2055     fiat_secp384r1_uint1 x81;
2056     uint64_t x82;
2057     fiat_secp384r1_uint1 x83;
2058     uint64_t x84;
2059     fiat_secp384r1_uint1 x85;
2060     uint64_t x86;
2061     fiat_secp384r1_uint1 x87;
2062     uint64_t x88;
2063     fiat_secp384r1_uint1 x89;
2064     uint64_t x90;
2065     fiat_secp384r1_uint1 x91;
2066     uint64_t x92;
2067     fiat_secp384r1_uint1 x93;
2068     uint64_t x94;
2069     fiat_secp384r1_uint1 x95;
2070     uint64_t x96;
2071     fiat_secp384r1_uint1 x97;
2072     uint64_t x98;
2073     fiat_secp384r1_uint1 x99;
2074     uint64_t x100;
2075     fiat_secp384r1_uint1 x101;
2076     uint64_t x102;
2077     uint64_t x103;
2078     uint64_t x104;
2079     uint64_t x105;
2080     uint64_t x106;
2081     uint64_t x107;
2082     uint64_t x108;
2083     uint64_t x109;
2084     uint64_t x110;
2085     uint64_t x111;
2086     uint64_t x112;
2087     uint64_t x113;
2088     uint64_t x114;
2089     uint64_t x115;
2090     uint64_t x116;
2091     fiat_secp384r1_uint1 x117;
2092     uint64_t x118;
2093     fiat_secp384r1_uint1 x119;
2094     uint64_t x120;
2095     fiat_secp384r1_uint1 x121;
2096     uint64_t x122;
2097     fiat_secp384r1_uint1 x123;
2098     uint64_t x124;
2099     fiat_secp384r1_uint1 x125;
2100     uint64_t x126;
2101     fiat_secp384r1_uint1 x127;
2102     uint64_t x128;
2103     fiat_secp384r1_uint1 x129;
2104     uint64_t x130;
2105     fiat_secp384r1_uint1 x131;
2106     uint64_t x132;
2107     fiat_secp384r1_uint1 x133;
2108     uint64_t x134;
2109     fiat_secp384r1_uint1 x135;
2110     uint64_t x136;
2111     fiat_secp384r1_uint1 x137;
2112     uint64_t x138;
2113     fiat_secp384r1_uint1 x139;
2114     uint64_t x140;
2115     fiat_secp384r1_uint1 x141;
2116     uint64_t x142;
2117     fiat_secp384r1_uint1 x143;
2118     uint64_t x144;
2119     fiat_secp384r1_uint1 x145;
2120     uint64_t x146;
2121     fiat_secp384r1_uint1 x147;
2122     uint64_t x148;
2123     fiat_secp384r1_uint1 x149;
2124     uint64_t x150;
2125     fiat_secp384r1_uint1 x151;
2126     uint64_t x152;
2127     uint64_t x153;
2128     uint64_t x154;
2129     uint64_t x155;
2130     uint64_t x156;
2131     uint64_t x157;
2132     uint64_t x158;
2133     uint64_t x159;
2134     uint64_t x160;
2135     uint64_t x161;
2136     uint64_t x162;
2137     uint64_t x163;
2138     uint64_t x164;
2139     uint64_t x165;
2140     uint64_t x166;
2141     fiat_secp384r1_uint1 x167;
2142     uint64_t x168;
2143     fiat_secp384r1_uint1 x169;
2144     uint64_t x170;
2145     fiat_secp384r1_uint1 x171;
2146     uint64_t x172;
2147     fiat_secp384r1_uint1 x173;
2148     uint64_t x174;
2149     fiat_secp384r1_uint1 x175;
2150     uint64_t x176;
2151     fiat_secp384r1_uint1 x177;
2152     uint64_t x178;
2153     fiat_secp384r1_uint1 x179;
2154     uint64_t x180;
2155     fiat_secp384r1_uint1 x181;
2156     uint64_t x182;
2157     fiat_secp384r1_uint1 x183;
2158     uint64_t x184;
2159     fiat_secp384r1_uint1 x185;
2160     uint64_t x186;
2161     fiat_secp384r1_uint1 x187;
2162     uint64_t x188;
2163     fiat_secp384r1_uint1 x189;
2164     uint64_t x190;
2165     fiat_secp384r1_uint1 x191;
2166     uint64_t x192;
2167     fiat_secp384r1_uint1 x193;
2168     uint64_t x194;
2169     fiat_secp384r1_uint1 x195;
2170     uint64_t x196;
2171     fiat_secp384r1_uint1 x197;
2172     uint64_t x198;
2173     fiat_secp384r1_uint1 x199;
2174     uint64_t x200;
2175     fiat_secp384r1_uint1 x201;
2176     uint64_t x202;
2177     uint64_t x203;
2178     uint64_t x204;
2179     uint64_t x205;
2180     uint64_t x206;
2181     uint64_t x207;
2182     uint64_t x208;
2183     uint64_t x209;
2184     uint64_t x210;
2185     uint64_t x211;
2186     uint64_t x212;
2187     uint64_t x213;
2188     uint64_t x214;
2189     uint64_t x215;
2190     uint64_t x216;
2191     fiat_secp384r1_uint1 x217;
2192     uint64_t x218;
2193     fiat_secp384r1_uint1 x219;
2194     uint64_t x220;
2195     fiat_secp384r1_uint1 x221;
2196     uint64_t x222;
2197     fiat_secp384r1_uint1 x223;
2198     uint64_t x224;
2199     fiat_secp384r1_uint1 x225;
2200     uint64_t x226;
2201     fiat_secp384r1_uint1 x227;
2202     uint64_t x228;
2203     fiat_secp384r1_uint1 x229;
2204     uint64_t x230;
2205     fiat_secp384r1_uint1 x231;
2206     uint64_t x232;
2207     fiat_secp384r1_uint1 x233;
2208     uint64_t x234;
2209     fiat_secp384r1_uint1 x235;
2210     uint64_t x236;
2211     fiat_secp384r1_uint1 x237;
2212     uint64_t x238;
2213     fiat_secp384r1_uint1 x239;
2214     uint64_t x240;
2215     fiat_secp384r1_uint1 x241;
2216     uint64_t x242;
2217     fiat_secp384r1_uint1 x243;
2218     uint64_t x244;
2219     fiat_secp384r1_uint1 x245;
2220     uint64_t x246;
2221     fiat_secp384r1_uint1 x247;
2222     uint64_t x248;
2223     fiat_secp384r1_uint1 x249;
2224     uint64_t x250;
2225     fiat_secp384r1_uint1 x251;
2226     uint64_t x252;
2227     uint64_t x253;
2228     uint64_t x254;
2229     uint64_t x255;
2230     uint64_t x256;
2231     uint64_t x257;
2232     uint64_t x258;
2233     uint64_t x259;
2234     uint64_t x260;
2235     uint64_t x261;
2236     uint64_t x262;
2237     uint64_t x263;
2238     uint64_t x264;
2239     uint64_t x265;
2240     uint64_t x266;
2241     fiat_secp384r1_uint1 x267;
2242     uint64_t x268;
2243     fiat_secp384r1_uint1 x269;
2244     uint64_t x270;
2245     fiat_secp384r1_uint1 x271;
2246     uint64_t x272;
2247     fiat_secp384r1_uint1 x273;
2248     uint64_t x274;
2249     fiat_secp384r1_uint1 x275;
2250     uint64_t x276;
2251     fiat_secp384r1_uint1 x277;
2252     uint64_t x278;
2253     fiat_secp384r1_uint1 x279;
2254     uint64_t x280;
2255     fiat_secp384r1_uint1 x281;
2256     uint64_t x282;
2257     fiat_secp384r1_uint1 x283;
2258     uint64_t x284;
2259     fiat_secp384r1_uint1 x285;
2260     uint64_t x286;
2261     fiat_secp384r1_uint1 x287;
2262     uint64_t x288;
2263     fiat_secp384r1_uint1 x289;
2264     uint64_t x290;
2265     fiat_secp384r1_uint1 x291;
2266     uint64_t x292;
2267     fiat_secp384r1_uint1 x293;
2268     uint64_t x294;
2269     fiat_secp384r1_uint1 x295;
2270     uint64_t x296;
2271     fiat_secp384r1_uint1 x297;
2272     uint64_t x298;
2273     fiat_secp384r1_uint1 x299;
2274     uint64_t x300;
2275     fiat_secp384r1_uint1 x301;
2276     uint64_t x302;
2277     fiat_secp384r1_uint1 x303;
2278     uint64_t x304;
2279     uint64_t x305;
2280     uint64_t x306;
2281     uint64_t x307;
2282     uint64_t x308;
2283     uint64_t x309;
2284     x1 = (arg1[0]);
2285     fiat_secp384r1_mulx_u64(&x2, &x3, x1, UINT64_C(0x100000001));
2286     fiat_secp384r1_mulx_u64(&x4, &x5, x2, UINT64_C(0xffffffffffffffff));
2287     fiat_secp384r1_mulx_u64(&x6, &x7, x2, UINT64_C(0xffffffffffffffff));
2288     fiat_secp384r1_mulx_u64(&x8, &x9, x2, UINT64_C(0xffffffffffffffff));
2289     fiat_secp384r1_mulx_u64(&x10, &x11, x2, UINT64_C(0xfffffffffffffffe));
2290     fiat_secp384r1_mulx_u64(&x12, &x13, x2, UINT64_C(0xffffffff00000000));
2291     fiat_secp384r1_mulx_u64(&x14, &x15, x2, UINT32_C(0xffffffff));
2292     fiat_secp384r1_addcarryx_u64(&x16, &x17, 0x0, x15, x12);
2293     fiat_secp384r1_addcarryx_u64(&x18, &x19, x17, x13, x10);
2294     fiat_secp384r1_addcarryx_u64(&x20, &x21, x19, x11, x8);
2295     fiat_secp384r1_addcarryx_u64(&x22, &x23, x21, x9, x6);
2296     fiat_secp384r1_addcarryx_u64(&x24, &x25, x23, x7, x4);
2297     fiat_secp384r1_addcarryx_u64(&x26, &x27, 0x0, x1, x14);
2298     fiat_secp384r1_addcarryx_u64(&x28, &x29, x27, 0x0, x16);
2299     fiat_secp384r1_addcarryx_u64(&x30, &x31, x29, 0x0, x18);
2300     fiat_secp384r1_addcarryx_u64(&x32, &x33, x31, 0x0, x20);
2301     fiat_secp384r1_addcarryx_u64(&x34, &x35, x33, 0x0, x22);
2302     fiat_secp384r1_addcarryx_u64(&x36, &x37, x35, 0x0, x24);
2303     fiat_secp384r1_addcarryx_u64(&x38, &x39, x37, 0x0, (x25 + x5));
2304     fiat_secp384r1_addcarryx_u64(&x40, &x41, 0x0, x28, (arg1[1]));
2305     fiat_secp384r1_addcarryx_u64(&x42, &x43, x41, x30, 0x0);
2306     fiat_secp384r1_addcarryx_u64(&x44, &x45, x43, x32, 0x0);
2307     fiat_secp384r1_addcarryx_u64(&x46, &x47, x45, x34, 0x0);
2308     fiat_secp384r1_addcarryx_u64(&x48, &x49, x47, x36, 0x0);
2309     fiat_secp384r1_addcarryx_u64(&x50, &x51, x49, x38, 0x0);
2310     fiat_secp384r1_mulx_u64(&x52, &x53, x40, UINT64_C(0x100000001));
2311     fiat_secp384r1_mulx_u64(&x54, &x55, x52, UINT64_C(0xffffffffffffffff));
2312     fiat_secp384r1_mulx_u64(&x56, &x57, x52, UINT64_C(0xffffffffffffffff));
2313     fiat_secp384r1_mulx_u64(&x58, &x59, x52, UINT64_C(0xffffffffffffffff));
2314     fiat_secp384r1_mulx_u64(&x60, &x61, x52, UINT64_C(0xfffffffffffffffe));
2315     fiat_secp384r1_mulx_u64(&x62, &x63, x52, UINT64_C(0xffffffff00000000));
2316     fiat_secp384r1_mulx_u64(&x64, &x65, x52, UINT32_C(0xffffffff));
2317     fiat_secp384r1_addcarryx_u64(&x66, &x67, 0x0, x65, x62);
2318     fiat_secp384r1_addcarryx_u64(&x68, &x69, x67, x63, x60);
2319     fiat_secp384r1_addcarryx_u64(&x70, &x71, x69, x61, x58);
2320     fiat_secp384r1_addcarryx_u64(&x72, &x73, x71, x59, x56);
2321     fiat_secp384r1_addcarryx_u64(&x74, &x75, x73, x57, x54);
2322     fiat_secp384r1_addcarryx_u64(&x76, &x77, 0x0, x40, x64);
2323     fiat_secp384r1_addcarryx_u64(&x78, &x79, x77, x42, x66);
2324     fiat_secp384r1_addcarryx_u64(&x80, &x81, x79, x44, x68);
2325     fiat_secp384r1_addcarryx_u64(&x82, &x83, x81, x46, x70);
2326     fiat_secp384r1_addcarryx_u64(&x84, &x85, x83, x48, x72);
2327     fiat_secp384r1_addcarryx_u64(&x86, &x87, x85, x50, x74);
2328     fiat_secp384r1_addcarryx_u64(&x88, &x89, x87, ((uint64_t)x51 + x39),
2329                                  (x75 + x55));
2330     fiat_secp384r1_addcarryx_u64(&x90, &x91, 0x0, x78, (arg1[2]));
2331     fiat_secp384r1_addcarryx_u64(&x92, &x93, x91, x80, 0x0);
2332     fiat_secp384r1_addcarryx_u64(&x94, &x95, x93, x82, 0x0);
2333     fiat_secp384r1_addcarryx_u64(&x96, &x97, x95, x84, 0x0);
2334     fiat_secp384r1_addcarryx_u64(&x98, &x99, x97, x86, 0x0);
2335     fiat_secp384r1_addcarryx_u64(&x100, &x101, x99, x88, 0x0);
2336     fiat_secp384r1_mulx_u64(&x102, &x103, x90, UINT64_C(0x100000001));
2337     fiat_secp384r1_mulx_u64(&x104, &x105, x102, UINT64_C(0xffffffffffffffff));
2338     fiat_secp384r1_mulx_u64(&x106, &x107, x102, UINT64_C(0xffffffffffffffff));
2339     fiat_secp384r1_mulx_u64(&x108, &x109, x102, UINT64_C(0xffffffffffffffff));
2340     fiat_secp384r1_mulx_u64(&x110, &x111, x102, UINT64_C(0xfffffffffffffffe));
2341     fiat_secp384r1_mulx_u64(&x112, &x113, x102, UINT64_C(0xffffffff00000000));
2342     fiat_secp384r1_mulx_u64(&x114, &x115, x102, UINT32_C(0xffffffff));
2343     fiat_secp384r1_addcarryx_u64(&x116, &x117, 0x0, x115, x112);
2344     fiat_secp384r1_addcarryx_u64(&x118, &x119, x117, x113, x110);
2345     fiat_secp384r1_addcarryx_u64(&x120, &x121, x119, x111, x108);
2346     fiat_secp384r1_addcarryx_u64(&x122, &x123, x121, x109, x106);
2347     fiat_secp384r1_addcarryx_u64(&x124, &x125, x123, x107, x104);
2348     fiat_secp384r1_addcarryx_u64(&x126, &x127, 0x0, x90, x114);
2349     fiat_secp384r1_addcarryx_u64(&x128, &x129, x127, x92, x116);
2350     fiat_secp384r1_addcarryx_u64(&x130, &x131, x129, x94, x118);
2351     fiat_secp384r1_addcarryx_u64(&x132, &x133, x131, x96, x120);
2352     fiat_secp384r1_addcarryx_u64(&x134, &x135, x133, x98, x122);
2353     fiat_secp384r1_addcarryx_u64(&x136, &x137, x135, x100, x124);
2354     fiat_secp384r1_addcarryx_u64(&x138, &x139, x137, ((uint64_t)x101 + x89),
2355                                  (x125 + x105));
2356     fiat_secp384r1_addcarryx_u64(&x140, &x141, 0x0, x128, (arg1[3]));
2357     fiat_secp384r1_addcarryx_u64(&x142, &x143, x141, x130, 0x0);
2358     fiat_secp384r1_addcarryx_u64(&x144, &x145, x143, x132, 0x0);
2359     fiat_secp384r1_addcarryx_u64(&x146, &x147, x145, x134, 0x0);
2360     fiat_secp384r1_addcarryx_u64(&x148, &x149, x147, x136, 0x0);
2361     fiat_secp384r1_addcarryx_u64(&x150, &x151, x149, x138, 0x0);
2362     fiat_secp384r1_mulx_u64(&x152, &x153, x140, UINT64_C(0x100000001));
2363     fiat_secp384r1_mulx_u64(&x154, &x155, x152, UINT64_C(0xffffffffffffffff));
2364     fiat_secp384r1_mulx_u64(&x156, &x157, x152, UINT64_C(0xffffffffffffffff));
2365     fiat_secp384r1_mulx_u64(&x158, &x159, x152, UINT64_C(0xffffffffffffffff));
2366     fiat_secp384r1_mulx_u64(&x160, &x161, x152, UINT64_C(0xfffffffffffffffe));
2367     fiat_secp384r1_mulx_u64(&x162, &x163, x152, UINT64_C(0xffffffff00000000));
2368     fiat_secp384r1_mulx_u64(&x164, &x165, x152, UINT32_C(0xffffffff));
2369     fiat_secp384r1_addcarryx_u64(&x166, &x167, 0x0, x165, x162);
2370     fiat_secp384r1_addcarryx_u64(&x168, &x169, x167, x163, x160);
2371     fiat_secp384r1_addcarryx_u64(&x170, &x171, x169, x161, x158);
2372     fiat_secp384r1_addcarryx_u64(&x172, &x173, x171, x159, x156);
2373     fiat_secp384r1_addcarryx_u64(&x174, &x175, x173, x157, x154);
2374     fiat_secp384r1_addcarryx_u64(&x176, &x177, 0x0, x140, x164);
2375     fiat_secp384r1_addcarryx_u64(&x178, &x179, x177, x142, x166);
2376     fiat_secp384r1_addcarryx_u64(&x180, &x181, x179, x144, x168);
2377     fiat_secp384r1_addcarryx_u64(&x182, &x183, x181, x146, x170);
2378     fiat_secp384r1_addcarryx_u64(&x184, &x185, x183, x148, x172);
2379     fiat_secp384r1_addcarryx_u64(&x186, &x187, x185, x150, x174);
2380     fiat_secp384r1_addcarryx_u64(&x188, &x189, x187, ((uint64_t)x151 + x139),
2381                                  (x175 + x155));
2382     fiat_secp384r1_addcarryx_u64(&x190, &x191, 0x0, x178, (arg1[4]));
2383     fiat_secp384r1_addcarryx_u64(&x192, &x193, x191, x180, 0x0);
2384     fiat_secp384r1_addcarryx_u64(&x194, &x195, x193, x182, 0x0);
2385     fiat_secp384r1_addcarryx_u64(&x196, &x197, x195, x184, 0x0);
2386     fiat_secp384r1_addcarryx_u64(&x198, &x199, x197, x186, 0x0);
2387     fiat_secp384r1_addcarryx_u64(&x200, &x201, x199, x188, 0x0);
2388     fiat_secp384r1_mulx_u64(&x202, &x203, x190, UINT64_C(0x100000001));
2389     fiat_secp384r1_mulx_u64(&x204, &x205, x202, UINT64_C(0xffffffffffffffff));
2390     fiat_secp384r1_mulx_u64(&x206, &x207, x202, UINT64_C(0xffffffffffffffff));
2391     fiat_secp384r1_mulx_u64(&x208, &x209, x202, UINT64_C(0xffffffffffffffff));
2392     fiat_secp384r1_mulx_u64(&x210, &x211, x202, UINT64_C(0xfffffffffffffffe));
2393     fiat_secp384r1_mulx_u64(&x212, &x213, x202, UINT64_C(0xffffffff00000000));
2394     fiat_secp384r1_mulx_u64(&x214, &x215, x202, UINT32_C(0xffffffff));
2395     fiat_secp384r1_addcarryx_u64(&x216, &x217, 0x0, x215, x212);
2396     fiat_secp384r1_addcarryx_u64(&x218, &x219, x217, x213, x210);
2397     fiat_secp384r1_addcarryx_u64(&x220, &x221, x219, x211, x208);
2398     fiat_secp384r1_addcarryx_u64(&x222, &x223, x221, x209, x206);
2399     fiat_secp384r1_addcarryx_u64(&x224, &x225, x223, x207, x204);
2400     fiat_secp384r1_addcarryx_u64(&x226, &x227, 0x0, x190, x214);
2401     fiat_secp384r1_addcarryx_u64(&x228, &x229, x227, x192, x216);
2402     fiat_secp384r1_addcarryx_u64(&x230, &x231, x229, x194, x218);
2403     fiat_secp384r1_addcarryx_u64(&x232, &x233, x231, x196, x220);
2404     fiat_secp384r1_addcarryx_u64(&x234, &x235, x233, x198, x222);
2405     fiat_secp384r1_addcarryx_u64(&x236, &x237, x235, x200, x224);
2406     fiat_secp384r1_addcarryx_u64(&x238, &x239, x237, ((uint64_t)x201 + x189),
2407                                  (x225 + x205));
2408     fiat_secp384r1_addcarryx_u64(&x240, &x241, 0x0, x228, (arg1[5]));
2409     fiat_secp384r1_addcarryx_u64(&x242, &x243, x241, x230, 0x0);
2410     fiat_secp384r1_addcarryx_u64(&x244, &x245, x243, x232, 0x0);
2411     fiat_secp384r1_addcarryx_u64(&x246, &x247, x245, x234, 0x0);
2412     fiat_secp384r1_addcarryx_u64(&x248, &x249, x247, x236, 0x0);
2413     fiat_secp384r1_addcarryx_u64(&x250, &x251, x249, x238, 0x0);
2414     fiat_secp384r1_mulx_u64(&x252, &x253, x240, UINT64_C(0x100000001));
2415     fiat_secp384r1_mulx_u64(&x254, &x255, x252, UINT64_C(0xffffffffffffffff));
2416     fiat_secp384r1_mulx_u64(&x256, &x257, x252, UINT64_C(0xffffffffffffffff));
2417     fiat_secp384r1_mulx_u64(&x258, &x259, x252, UINT64_C(0xffffffffffffffff));
2418     fiat_secp384r1_mulx_u64(&x260, &x261, x252, UINT64_C(0xfffffffffffffffe));
2419     fiat_secp384r1_mulx_u64(&x262, &x263, x252, UINT64_C(0xffffffff00000000));
2420     fiat_secp384r1_mulx_u64(&x264, &x265, x252, UINT32_C(0xffffffff));
2421     fiat_secp384r1_addcarryx_u64(&x266, &x267, 0x0, x265, x262);
2422     fiat_secp384r1_addcarryx_u64(&x268, &x269, x267, x263, x260);
2423     fiat_secp384r1_addcarryx_u64(&x270, &x271, x269, x261, x258);
2424     fiat_secp384r1_addcarryx_u64(&x272, &x273, x271, x259, x256);
2425     fiat_secp384r1_addcarryx_u64(&x274, &x275, x273, x257, x254);
2426     fiat_secp384r1_addcarryx_u64(&x276, &x277, 0x0, x240, x264);
2427     fiat_secp384r1_addcarryx_u64(&x278, &x279, x277, x242, x266);
2428     fiat_secp384r1_addcarryx_u64(&x280, &x281, x279, x244, x268);
2429     fiat_secp384r1_addcarryx_u64(&x282, &x283, x281, x246, x270);
2430     fiat_secp384r1_addcarryx_u64(&x284, &x285, x283, x248, x272);
2431     fiat_secp384r1_addcarryx_u64(&x286, &x287, x285, x250, x274);
2432     fiat_secp384r1_addcarryx_u64(&x288, &x289, x287, ((uint64_t)x251 + x239),
2433                                  (x275 + x255));
2434     fiat_secp384r1_subborrowx_u64(&x290, &x291, 0x0, x278,
2435                                   UINT32_C(0xffffffff));
2436     fiat_secp384r1_subborrowx_u64(&x292, &x293, x291, x280,
2437                                   UINT64_C(0xffffffff00000000));
2438     fiat_secp384r1_subborrowx_u64(&x294, &x295, x293, x282,
2439                                   UINT64_C(0xfffffffffffffffe));
2440     fiat_secp384r1_subborrowx_u64(&x296, &x297, x295, x284,
2441                                   UINT64_C(0xffffffffffffffff));
2442     fiat_secp384r1_subborrowx_u64(&x298, &x299, x297, x286,
2443                                   UINT64_C(0xffffffffffffffff));
2444     fiat_secp384r1_subborrowx_u64(&x300, &x301, x299, x288,
2445                                   UINT64_C(0xffffffffffffffff));
2446     fiat_secp384r1_subborrowx_u64(&x302, &x303, x301, x289, 0x0);
2447     fiat_secp384r1_cmovznz_u64(&x304, x303, x290, x278);
2448     fiat_secp384r1_cmovznz_u64(&x305, x303, x292, x280);
2449     fiat_secp384r1_cmovznz_u64(&x306, x303, x294, x282);
2450     fiat_secp384r1_cmovznz_u64(&x307, x303, x296, x284);
2451     fiat_secp384r1_cmovznz_u64(&x308, x303, x298, x286);
2452     fiat_secp384r1_cmovznz_u64(&x309, x303, x300, x288);
2453     out1[0] = x304;
2454     out1[1] = x305;
2455     out1[2] = x306;
2456     out1[3] = x307;
2457     out1[4] = x308;
2458     out1[5] = x309;
2459 }
2460 
2461 /*
2462  * The function fiat_secp384r1_to_montgomery translates a field element into the Montgomery domain.
2463  * Preconditions:
2464  *   0 ≤ eval arg1 < m
2465  * Postconditions:
2466  *   eval (from_montgomery out1) mod m = eval arg1 mod m
2467  *   0 ≤ eval out1 < m
2468  *
2469  * Input Bounds:
2470  *   arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
2471  * Output Bounds:
2472  *   out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
2473  */
2474 static void
fiat_secp384r1_to_montgomery(uint64_t out1[6],const uint64_t arg1[6])2475 fiat_secp384r1_to_montgomery(uint64_t out1[6],
2476                              const uint64_t arg1[6])
2477 {
2478     uint64_t x1;
2479     uint64_t x2;
2480     uint64_t x3;
2481     uint64_t x4;
2482     uint64_t x5;
2483     uint64_t x6;
2484     uint64_t x7;
2485     uint64_t x8;
2486     uint64_t x9;
2487     uint64_t x10;
2488     uint64_t x11;
2489     uint64_t x12;
2490     uint64_t x13;
2491     uint64_t x14;
2492     uint64_t x15;
2493     fiat_secp384r1_uint1 x16;
2494     uint64_t x17;
2495     fiat_secp384r1_uint1 x18;
2496     uint64_t x19;
2497     fiat_secp384r1_uint1 x20;
2498     uint64_t x21;
2499     fiat_secp384r1_uint1 x22;
2500     uint64_t x23;
2501     uint64_t x24;
2502     uint64_t x25;
2503     uint64_t x26;
2504     uint64_t x27;
2505     uint64_t x28;
2506     uint64_t x29;
2507     uint64_t x30;
2508     uint64_t x31;
2509     uint64_t x32;
2510     uint64_t x33;
2511     uint64_t x34;
2512     uint64_t x35;
2513     uint64_t x36;
2514     uint64_t x37;
2515     fiat_secp384r1_uint1 x38;
2516     uint64_t x39;
2517     fiat_secp384r1_uint1 x40;
2518     uint64_t x41;
2519     fiat_secp384r1_uint1 x42;
2520     uint64_t x43;
2521     fiat_secp384r1_uint1 x44;
2522     uint64_t x45;
2523     fiat_secp384r1_uint1 x46;
2524     uint64_t x47;
2525     fiat_secp384r1_uint1 x48;
2526     uint64_t x49;
2527     fiat_secp384r1_uint1 x50;
2528     uint64_t x51;
2529     fiat_secp384r1_uint1 x52;
2530     uint64_t x53;
2531     fiat_secp384r1_uint1 x54;
2532     uint64_t x55;
2533     fiat_secp384r1_uint1 x56;
2534     uint64_t x57;
2535     fiat_secp384r1_uint1 x58;
2536     uint64_t x59;
2537     fiat_secp384r1_uint1 x60;
2538     uint64_t x61;
2539     uint64_t x62;
2540     uint64_t x63;
2541     uint64_t x64;
2542     uint64_t x65;
2543     uint64_t x66;
2544     uint64_t x67;
2545     uint64_t x68;
2546     uint64_t x69;
2547     fiat_secp384r1_uint1 x70;
2548     uint64_t x71;
2549     fiat_secp384r1_uint1 x72;
2550     uint64_t x73;
2551     fiat_secp384r1_uint1 x74;
2552     uint64_t x75;
2553     fiat_secp384r1_uint1 x76;
2554     uint64_t x77;
2555     fiat_secp384r1_uint1 x78;
2556     uint64_t x79;
2557     fiat_secp384r1_uint1 x80;
2558     uint64_t x81;
2559     fiat_secp384r1_uint1 x82;
2560     uint64_t x83;
2561     fiat_secp384r1_uint1 x84;
2562     uint64_t x85;
2563     fiat_secp384r1_uint1 x86;
2564     uint64_t x87;
2565     fiat_secp384r1_uint1 x88;
2566     uint64_t x89;
2567     uint64_t x90;
2568     uint64_t x91;
2569     uint64_t x92;
2570     uint64_t x93;
2571     uint64_t x94;
2572     uint64_t x95;
2573     uint64_t x96;
2574     uint64_t x97;
2575     uint64_t x98;
2576     uint64_t x99;
2577     uint64_t x100;
2578     uint64_t x101;
2579     uint64_t x102;
2580     uint64_t x103;
2581     fiat_secp384r1_uint1 x104;
2582     uint64_t x105;
2583     fiat_secp384r1_uint1 x106;
2584     uint64_t x107;
2585     fiat_secp384r1_uint1 x108;
2586     uint64_t x109;
2587     fiat_secp384r1_uint1 x110;
2588     uint64_t x111;
2589     fiat_secp384r1_uint1 x112;
2590     uint64_t x113;
2591     fiat_secp384r1_uint1 x114;
2592     uint64_t x115;
2593     fiat_secp384r1_uint1 x116;
2594     uint64_t x117;
2595     fiat_secp384r1_uint1 x118;
2596     uint64_t x119;
2597     fiat_secp384r1_uint1 x120;
2598     uint64_t x121;
2599     fiat_secp384r1_uint1 x122;
2600     uint64_t x123;
2601     fiat_secp384r1_uint1 x124;
2602     uint64_t x125;
2603     fiat_secp384r1_uint1 x126;
2604     uint64_t x127;
2605     uint64_t x128;
2606     uint64_t x129;
2607     uint64_t x130;
2608     uint64_t x131;
2609     uint64_t x132;
2610     uint64_t x133;
2611     uint64_t x134;
2612     uint64_t x135;
2613     fiat_secp384r1_uint1 x136;
2614     uint64_t x137;
2615     fiat_secp384r1_uint1 x138;
2616     uint64_t x139;
2617     fiat_secp384r1_uint1 x140;
2618     uint64_t x141;
2619     fiat_secp384r1_uint1 x142;
2620     uint64_t x143;
2621     fiat_secp384r1_uint1 x144;
2622     uint64_t x145;
2623     fiat_secp384r1_uint1 x146;
2624     uint64_t x147;
2625     fiat_secp384r1_uint1 x148;
2626     uint64_t x149;
2627     fiat_secp384r1_uint1 x150;
2628     uint64_t x151;
2629     fiat_secp384r1_uint1 x152;
2630     uint64_t x153;
2631     fiat_secp384r1_uint1 x154;
2632     uint64_t x155;
2633     uint64_t x156;
2634     uint64_t x157;
2635     uint64_t x158;
2636     uint64_t x159;
2637     uint64_t x160;
2638     uint64_t x161;
2639     uint64_t x162;
2640     uint64_t x163;
2641     uint64_t x164;
2642     uint64_t x165;
2643     uint64_t x166;
2644     uint64_t x167;
2645     uint64_t x168;
2646     uint64_t x169;
2647     fiat_secp384r1_uint1 x170;
2648     uint64_t x171;
2649     fiat_secp384r1_uint1 x172;
2650     uint64_t x173;
2651     fiat_secp384r1_uint1 x174;
2652     uint64_t x175;
2653     fiat_secp384r1_uint1 x176;
2654     uint64_t x177;
2655     fiat_secp384r1_uint1 x178;
2656     uint64_t x179;
2657     fiat_secp384r1_uint1 x180;
2658     uint64_t x181;
2659     fiat_secp384r1_uint1 x182;
2660     uint64_t x183;
2661     fiat_secp384r1_uint1 x184;
2662     uint64_t x185;
2663     fiat_secp384r1_uint1 x186;
2664     uint64_t x187;
2665     fiat_secp384r1_uint1 x188;
2666     uint64_t x189;
2667     fiat_secp384r1_uint1 x190;
2668     uint64_t x191;
2669     fiat_secp384r1_uint1 x192;
2670     uint64_t x193;
2671     uint64_t x194;
2672     uint64_t x195;
2673     uint64_t x196;
2674     uint64_t x197;
2675     uint64_t x198;
2676     uint64_t x199;
2677     uint64_t x200;
2678     uint64_t x201;
2679     fiat_secp384r1_uint1 x202;
2680     uint64_t x203;
2681     fiat_secp384r1_uint1 x204;
2682     uint64_t x205;
2683     fiat_secp384r1_uint1 x206;
2684     uint64_t x207;
2685     fiat_secp384r1_uint1 x208;
2686     uint64_t x209;
2687     fiat_secp384r1_uint1 x210;
2688     uint64_t x211;
2689     fiat_secp384r1_uint1 x212;
2690     uint64_t x213;
2691     fiat_secp384r1_uint1 x214;
2692     uint64_t x215;
2693     fiat_secp384r1_uint1 x216;
2694     uint64_t x217;
2695     fiat_secp384r1_uint1 x218;
2696     uint64_t x219;
2697     fiat_secp384r1_uint1 x220;
2698     uint64_t x221;
2699     uint64_t x222;
2700     uint64_t x223;
2701     uint64_t x224;
2702     uint64_t x225;
2703     uint64_t x226;
2704     uint64_t x227;
2705     uint64_t x228;
2706     uint64_t x229;
2707     uint64_t x230;
2708     uint64_t x231;
2709     uint64_t x232;
2710     uint64_t x233;
2711     uint64_t x234;
2712     uint64_t x235;
2713     fiat_secp384r1_uint1 x236;
2714     uint64_t x237;
2715     fiat_secp384r1_uint1 x238;
2716     uint64_t x239;
2717     fiat_secp384r1_uint1 x240;
2718     uint64_t x241;
2719     fiat_secp384r1_uint1 x242;
2720     uint64_t x243;
2721     fiat_secp384r1_uint1 x244;
2722     uint64_t x245;
2723     fiat_secp384r1_uint1 x246;
2724     uint64_t x247;
2725     fiat_secp384r1_uint1 x248;
2726     uint64_t x249;
2727     fiat_secp384r1_uint1 x250;
2728     uint64_t x251;
2729     fiat_secp384r1_uint1 x252;
2730     uint64_t x253;
2731     fiat_secp384r1_uint1 x254;
2732     uint64_t x255;
2733     fiat_secp384r1_uint1 x256;
2734     uint64_t x257;
2735     fiat_secp384r1_uint1 x258;
2736     uint64_t x259;
2737     uint64_t x260;
2738     uint64_t x261;
2739     uint64_t x262;
2740     uint64_t x263;
2741     uint64_t x264;
2742     uint64_t x265;
2743     uint64_t x266;
2744     uint64_t x267;
2745     fiat_secp384r1_uint1 x268;
2746     uint64_t x269;
2747     fiat_secp384r1_uint1 x270;
2748     uint64_t x271;
2749     fiat_secp384r1_uint1 x272;
2750     uint64_t x273;
2751     fiat_secp384r1_uint1 x274;
2752     uint64_t x275;
2753     fiat_secp384r1_uint1 x276;
2754     uint64_t x277;
2755     fiat_secp384r1_uint1 x278;
2756     uint64_t x279;
2757     fiat_secp384r1_uint1 x280;
2758     uint64_t x281;
2759     fiat_secp384r1_uint1 x282;
2760     uint64_t x283;
2761     fiat_secp384r1_uint1 x284;
2762     uint64_t x285;
2763     fiat_secp384r1_uint1 x286;
2764     uint64_t x287;
2765     uint64_t x288;
2766     uint64_t x289;
2767     uint64_t x290;
2768     uint64_t x291;
2769     uint64_t x292;
2770     uint64_t x293;
2771     uint64_t x294;
2772     uint64_t x295;
2773     uint64_t x296;
2774     uint64_t x297;
2775     uint64_t x298;
2776     uint64_t x299;
2777     uint64_t x300;
2778     uint64_t x301;
2779     fiat_secp384r1_uint1 x302;
2780     uint64_t x303;
2781     fiat_secp384r1_uint1 x304;
2782     uint64_t x305;
2783     fiat_secp384r1_uint1 x306;
2784     uint64_t x307;
2785     fiat_secp384r1_uint1 x308;
2786     uint64_t x309;
2787     fiat_secp384r1_uint1 x310;
2788     uint64_t x311;
2789     fiat_secp384r1_uint1 x312;
2790     uint64_t x313;
2791     fiat_secp384r1_uint1 x314;
2792     uint64_t x315;
2793     fiat_secp384r1_uint1 x316;
2794     uint64_t x317;
2795     fiat_secp384r1_uint1 x318;
2796     uint64_t x319;
2797     fiat_secp384r1_uint1 x320;
2798     uint64_t x321;
2799     fiat_secp384r1_uint1 x322;
2800     uint64_t x323;
2801     fiat_secp384r1_uint1 x324;
2802     uint64_t x325;
2803     uint64_t x326;
2804     uint64_t x327;
2805     uint64_t x328;
2806     uint64_t x329;
2807     uint64_t x330;
2808     uint64_t x331;
2809     uint64_t x332;
2810     uint64_t x333;
2811     fiat_secp384r1_uint1 x334;
2812     uint64_t x335;
2813     fiat_secp384r1_uint1 x336;
2814     uint64_t x337;
2815     fiat_secp384r1_uint1 x338;
2816     uint64_t x339;
2817     fiat_secp384r1_uint1 x340;
2818     uint64_t x341;
2819     fiat_secp384r1_uint1 x342;
2820     uint64_t x343;
2821     fiat_secp384r1_uint1 x344;
2822     uint64_t x345;
2823     fiat_secp384r1_uint1 x346;
2824     uint64_t x347;
2825     fiat_secp384r1_uint1 x348;
2826     uint64_t x349;
2827     fiat_secp384r1_uint1 x350;
2828     uint64_t x351;
2829     fiat_secp384r1_uint1 x352;
2830     uint64_t x353;
2831     uint64_t x354;
2832     uint64_t x355;
2833     uint64_t x356;
2834     uint64_t x357;
2835     uint64_t x358;
2836     uint64_t x359;
2837     uint64_t x360;
2838     uint64_t x361;
2839     uint64_t x362;
2840     uint64_t x363;
2841     uint64_t x364;
2842     uint64_t x365;
2843     uint64_t x366;
2844     uint64_t x367;
2845     fiat_secp384r1_uint1 x368;
2846     uint64_t x369;
2847     fiat_secp384r1_uint1 x370;
2848     uint64_t x371;
2849     fiat_secp384r1_uint1 x372;
2850     uint64_t x373;
2851     fiat_secp384r1_uint1 x374;
2852     uint64_t x375;
2853     fiat_secp384r1_uint1 x376;
2854     uint64_t x377;
2855     fiat_secp384r1_uint1 x378;
2856     uint64_t x379;
2857     fiat_secp384r1_uint1 x380;
2858     uint64_t x381;
2859     fiat_secp384r1_uint1 x382;
2860     uint64_t x383;
2861     fiat_secp384r1_uint1 x384;
2862     uint64_t x385;
2863     fiat_secp384r1_uint1 x386;
2864     uint64_t x387;
2865     fiat_secp384r1_uint1 x388;
2866     uint64_t x389;
2867     fiat_secp384r1_uint1 x390;
2868     uint64_t x391;
2869     fiat_secp384r1_uint1 x392;
2870     uint64_t x393;
2871     fiat_secp384r1_uint1 x394;
2872     uint64_t x395;
2873     fiat_secp384r1_uint1 x396;
2874     uint64_t x397;
2875     fiat_secp384r1_uint1 x398;
2876     uint64_t x399;
2877     fiat_secp384r1_uint1 x400;
2878     uint64_t x401;
2879     fiat_secp384r1_uint1 x402;
2880     uint64_t x403;
2881     fiat_secp384r1_uint1 x404;
2882     uint64_t x405;
2883     uint64_t x406;
2884     uint64_t x407;
2885     uint64_t x408;
2886     uint64_t x409;
2887     uint64_t x410;
2888     x1 = (arg1[1]);
2889     x2 = (arg1[2]);
2890     x3 = (arg1[3]);
2891     x4 = (arg1[4]);
2892     x5 = (arg1[5]);
2893     x6 = (arg1[0]);
2894     fiat_secp384r1_mulx_u64(&x7, &x8, x6, UINT64_C(0x200000000));
2895     fiat_secp384r1_mulx_u64(&x9, &x10, x6, UINT64_C(0xfffffffe00000000));
2896     fiat_secp384r1_mulx_u64(&x11, &x12, x6, UINT64_C(0x200000000));
2897     fiat_secp384r1_mulx_u64(&x13, &x14, x6, UINT64_C(0xfffffffe00000001));
2898     fiat_secp384r1_addcarryx_u64(&x15, &x16, 0x0, x14, x11);
2899     fiat_secp384r1_addcarryx_u64(&x17, &x18, x16, x12, x9);
2900     fiat_secp384r1_addcarryx_u64(&x19, &x20, x18, x10, x7);
2901     fiat_secp384r1_addcarryx_u64(&x21, &x22, x20, x8, x6);
2902     fiat_secp384r1_mulx_u64(&x23, &x24, x13, UINT64_C(0x100000001));
2903     fiat_secp384r1_mulx_u64(&x25, &x26, x23, UINT64_C(0xffffffffffffffff));
2904     fiat_secp384r1_mulx_u64(&x27, &x28, x23, UINT64_C(0xffffffffffffffff));
2905     fiat_secp384r1_mulx_u64(&x29, &x30, x23, UINT64_C(0xffffffffffffffff));
2906     fiat_secp384r1_mulx_u64(&x31, &x32, x23, UINT64_C(0xfffffffffffffffe));
2907     fiat_secp384r1_mulx_u64(&x33, &x34, x23, UINT64_C(0xffffffff00000000));
2908     fiat_secp384r1_mulx_u64(&x35, &x36, x23, UINT32_C(0xffffffff));
2909     fiat_secp384r1_addcarryx_u64(&x37, &x38, 0x0, x36, x33);
2910     fiat_secp384r1_addcarryx_u64(&x39, &x40, x38, x34, x31);
2911     fiat_secp384r1_addcarryx_u64(&x41, &x42, x40, x32, x29);
2912     fiat_secp384r1_addcarryx_u64(&x43, &x44, x42, x30, x27);
2913     fiat_secp384r1_addcarryx_u64(&x45, &x46, x44, x28, x25);
2914     fiat_secp384r1_addcarryx_u64(&x47, &x48, 0x0, x13, x35);
2915     fiat_secp384r1_addcarryx_u64(&x49, &x50, x48, x15, x37);
2916     fiat_secp384r1_addcarryx_u64(&x51, &x52, x50, x17, x39);
2917     fiat_secp384r1_addcarryx_u64(&x53, &x54, x52, x19, x41);
2918     fiat_secp384r1_addcarryx_u64(&x55, &x56, x54, x21, x43);
2919     fiat_secp384r1_addcarryx_u64(&x57, &x58, x56, x22, x45);
2920     fiat_secp384r1_addcarryx_u64(&x59, &x60, x58, 0x0, (x46 + x26));
2921     fiat_secp384r1_mulx_u64(&x61, &x62, x1, UINT64_C(0x200000000));
2922     fiat_secp384r1_mulx_u64(&x63, &x64, x1, UINT64_C(0xfffffffe00000000));
2923     fiat_secp384r1_mulx_u64(&x65, &x66, x1, UINT64_C(0x200000000));
2924     fiat_secp384r1_mulx_u64(&x67, &x68, x1, UINT64_C(0xfffffffe00000001));
2925     fiat_secp384r1_addcarryx_u64(&x69, &x70, 0x0, x68, x65);
2926     fiat_secp384r1_addcarryx_u64(&x71, &x72, x70, x66, x63);
2927     fiat_secp384r1_addcarryx_u64(&x73, &x74, x72, x64, x61);
2928     fiat_secp384r1_addcarryx_u64(&x75, &x76, x74, x62, x1);
2929     fiat_secp384r1_addcarryx_u64(&x77, &x78, 0x0, x49, x67);
2930     fiat_secp384r1_addcarryx_u64(&x79, &x80, x78, x51, x69);
2931     fiat_secp384r1_addcarryx_u64(&x81, &x82, x80, x53, x71);
2932     fiat_secp384r1_addcarryx_u64(&x83, &x84, x82, x55, x73);
2933     fiat_secp384r1_addcarryx_u64(&x85, &x86, x84, x57, x75);
2934     fiat_secp384r1_addcarryx_u64(&x87, &x88, x86, x59, x76);
2935     fiat_secp384r1_mulx_u64(&x89, &x90, x77, UINT64_C(0x100000001));
2936     fiat_secp384r1_mulx_u64(&x91, &x92, x89, UINT64_C(0xffffffffffffffff));
2937     fiat_secp384r1_mulx_u64(&x93, &x94, x89, UINT64_C(0xffffffffffffffff));
2938     fiat_secp384r1_mulx_u64(&x95, &x96, x89, UINT64_C(0xffffffffffffffff));
2939     fiat_secp384r1_mulx_u64(&x97, &x98, x89, UINT64_C(0xfffffffffffffffe));
2940     fiat_secp384r1_mulx_u64(&x99, &x100, x89, UINT64_C(0xffffffff00000000));
2941     fiat_secp384r1_mulx_u64(&x101, &x102, x89, UINT32_C(0xffffffff));
2942     fiat_secp384r1_addcarryx_u64(&x103, &x104, 0x0, x102, x99);
2943     fiat_secp384r1_addcarryx_u64(&x105, &x106, x104, x100, x97);
2944     fiat_secp384r1_addcarryx_u64(&x107, &x108, x106, x98, x95);
2945     fiat_secp384r1_addcarryx_u64(&x109, &x110, x108, x96, x93);
2946     fiat_secp384r1_addcarryx_u64(&x111, &x112, x110, x94, x91);
2947     fiat_secp384r1_addcarryx_u64(&x113, &x114, 0x0, x77, x101);
2948     fiat_secp384r1_addcarryx_u64(&x115, &x116, x114, x79, x103);
2949     fiat_secp384r1_addcarryx_u64(&x117, &x118, x116, x81, x105);
2950     fiat_secp384r1_addcarryx_u64(&x119, &x120, x118, x83, x107);
2951     fiat_secp384r1_addcarryx_u64(&x121, &x122, x120, x85, x109);
2952     fiat_secp384r1_addcarryx_u64(&x123, &x124, x122, x87, x111);
2953     fiat_secp384r1_addcarryx_u64(&x125, &x126, x124, ((uint64_t)x88 + x60),
2954                                  (x112 + x92));
2955     fiat_secp384r1_mulx_u64(&x127, &x128, x2, UINT64_C(0x200000000));
2956     fiat_secp384r1_mulx_u64(&x129, &x130, x2, UINT64_C(0xfffffffe00000000));
2957     fiat_secp384r1_mulx_u64(&x131, &x132, x2, UINT64_C(0x200000000));
2958     fiat_secp384r1_mulx_u64(&x133, &x134, x2, UINT64_C(0xfffffffe00000001));
2959     fiat_secp384r1_addcarryx_u64(&x135, &x136, 0x0, x134, x131);
2960     fiat_secp384r1_addcarryx_u64(&x137, &x138, x136, x132, x129);
2961     fiat_secp384r1_addcarryx_u64(&x139, &x140, x138, x130, x127);
2962     fiat_secp384r1_addcarryx_u64(&x141, &x142, x140, x128, x2);
2963     fiat_secp384r1_addcarryx_u64(&x143, &x144, 0x0, x115, x133);
2964     fiat_secp384r1_addcarryx_u64(&x145, &x146, x144, x117, x135);
2965     fiat_secp384r1_addcarryx_u64(&x147, &x148, x146, x119, x137);
2966     fiat_secp384r1_addcarryx_u64(&x149, &x150, x148, x121, x139);
2967     fiat_secp384r1_addcarryx_u64(&x151, &x152, x150, x123, x141);
2968     fiat_secp384r1_addcarryx_u64(&x153, &x154, x152, x125, x142);
2969     fiat_secp384r1_mulx_u64(&x155, &x156, x143, UINT64_C(0x100000001));
2970     fiat_secp384r1_mulx_u64(&x157, &x158, x155, UINT64_C(0xffffffffffffffff));
2971     fiat_secp384r1_mulx_u64(&x159, &x160, x155, UINT64_C(0xffffffffffffffff));
2972     fiat_secp384r1_mulx_u64(&x161, &x162, x155, UINT64_C(0xffffffffffffffff));
2973     fiat_secp384r1_mulx_u64(&x163, &x164, x155, UINT64_C(0xfffffffffffffffe));
2974     fiat_secp384r1_mulx_u64(&x165, &x166, x155, UINT64_C(0xffffffff00000000));
2975     fiat_secp384r1_mulx_u64(&x167, &x168, x155, UINT32_C(0xffffffff));
2976     fiat_secp384r1_addcarryx_u64(&x169, &x170, 0x0, x168, x165);
2977     fiat_secp384r1_addcarryx_u64(&x171, &x172, x170, x166, x163);
2978     fiat_secp384r1_addcarryx_u64(&x173, &x174, x172, x164, x161);
2979     fiat_secp384r1_addcarryx_u64(&x175, &x176, x174, x162, x159);
2980     fiat_secp384r1_addcarryx_u64(&x177, &x178, x176, x160, x157);
2981     fiat_secp384r1_addcarryx_u64(&x179, &x180, 0x0, x143, x167);
2982     fiat_secp384r1_addcarryx_u64(&x181, &x182, x180, x145, x169);
2983     fiat_secp384r1_addcarryx_u64(&x183, &x184, x182, x147, x171);
2984     fiat_secp384r1_addcarryx_u64(&x185, &x186, x184, x149, x173);
2985     fiat_secp384r1_addcarryx_u64(&x187, &x188, x186, x151, x175);
2986     fiat_secp384r1_addcarryx_u64(&x189, &x190, x188, x153, x177);
2987     fiat_secp384r1_addcarryx_u64(&x191, &x192, x190, ((uint64_t)x154 + x126),
2988                                  (x178 + x158));
2989     fiat_secp384r1_mulx_u64(&x193, &x194, x3, UINT64_C(0x200000000));
2990     fiat_secp384r1_mulx_u64(&x195, &x196, x3, UINT64_C(0xfffffffe00000000));
2991     fiat_secp384r1_mulx_u64(&x197, &x198, x3, UINT64_C(0x200000000));
2992     fiat_secp384r1_mulx_u64(&x199, &x200, x3, UINT64_C(0xfffffffe00000001));
2993     fiat_secp384r1_addcarryx_u64(&x201, &x202, 0x0, x200, x197);
2994     fiat_secp384r1_addcarryx_u64(&x203, &x204, x202, x198, x195);
2995     fiat_secp384r1_addcarryx_u64(&x205, &x206, x204, x196, x193);
2996     fiat_secp384r1_addcarryx_u64(&x207, &x208, x206, x194, x3);
2997     fiat_secp384r1_addcarryx_u64(&x209, &x210, 0x0, x181, x199);
2998     fiat_secp384r1_addcarryx_u64(&x211, &x212, x210, x183, x201);
2999     fiat_secp384r1_addcarryx_u64(&x213, &x214, x212, x185, x203);
3000     fiat_secp384r1_addcarryx_u64(&x215, &x216, x214, x187, x205);
3001     fiat_secp384r1_addcarryx_u64(&x217, &x218, x216, x189, x207);
3002     fiat_secp384r1_addcarryx_u64(&x219, &x220, x218, x191, x208);
3003     fiat_secp384r1_mulx_u64(&x221, &x222, x209, UINT64_C(0x100000001));
3004     fiat_secp384r1_mulx_u64(&x223, &x224, x221, UINT64_C(0xffffffffffffffff));
3005     fiat_secp384r1_mulx_u64(&x225, &x226, x221, UINT64_C(0xffffffffffffffff));
3006     fiat_secp384r1_mulx_u64(&x227, &x228, x221, UINT64_C(0xffffffffffffffff));
3007     fiat_secp384r1_mulx_u64(&x229, &x230, x221, UINT64_C(0xfffffffffffffffe));
3008     fiat_secp384r1_mulx_u64(&x231, &x232, x221, UINT64_C(0xffffffff00000000));
3009     fiat_secp384r1_mulx_u64(&x233, &x234, x221, UINT32_C(0xffffffff));
3010     fiat_secp384r1_addcarryx_u64(&x235, &x236, 0x0, x234, x231);
3011     fiat_secp384r1_addcarryx_u64(&x237, &x238, x236, x232, x229);
3012     fiat_secp384r1_addcarryx_u64(&x239, &x240, x238, x230, x227);
3013     fiat_secp384r1_addcarryx_u64(&x241, &x242, x240, x228, x225);
3014     fiat_secp384r1_addcarryx_u64(&x243, &x244, x242, x226, x223);
3015     fiat_secp384r1_addcarryx_u64(&x245, &x246, 0x0, x209, x233);
3016     fiat_secp384r1_addcarryx_u64(&x247, &x248, x246, x211, x235);
3017     fiat_secp384r1_addcarryx_u64(&x249, &x250, x248, x213, x237);
3018     fiat_secp384r1_addcarryx_u64(&x251, &x252, x250, x215, x239);
3019     fiat_secp384r1_addcarryx_u64(&x253, &x254, x252, x217, x241);
3020     fiat_secp384r1_addcarryx_u64(&x255, &x256, x254, x219, x243);
3021     fiat_secp384r1_addcarryx_u64(&x257, &x258, x256, ((uint64_t)x220 + x192),
3022                                  (x244 + x224));
3023     fiat_secp384r1_mulx_u64(&x259, &x260, x4, UINT64_C(0x200000000));
3024     fiat_secp384r1_mulx_u64(&x261, &x262, x4, UINT64_C(0xfffffffe00000000));
3025     fiat_secp384r1_mulx_u64(&x263, &x264, x4, UINT64_C(0x200000000));
3026     fiat_secp384r1_mulx_u64(&x265, &x266, x4, UINT64_C(0xfffffffe00000001));
3027     fiat_secp384r1_addcarryx_u64(&x267, &x268, 0x0, x266, x263);
3028     fiat_secp384r1_addcarryx_u64(&x269, &x270, x268, x264, x261);
3029     fiat_secp384r1_addcarryx_u64(&x271, &x272, x270, x262, x259);
3030     fiat_secp384r1_addcarryx_u64(&x273, &x274, x272, x260, x4);
3031     fiat_secp384r1_addcarryx_u64(&x275, &x276, 0x0, x247, x265);
3032     fiat_secp384r1_addcarryx_u64(&x277, &x278, x276, x249, x267);
3033     fiat_secp384r1_addcarryx_u64(&x279, &x280, x278, x251, x269);
3034     fiat_secp384r1_addcarryx_u64(&x281, &x282, x280, x253, x271);
3035     fiat_secp384r1_addcarryx_u64(&x283, &x284, x282, x255, x273);
3036     fiat_secp384r1_addcarryx_u64(&x285, &x286, x284, x257, x274);
3037     fiat_secp384r1_mulx_u64(&x287, &x288, x275, UINT64_C(0x100000001));
3038     fiat_secp384r1_mulx_u64(&x289, &x290, x287, UINT64_C(0xffffffffffffffff));
3039     fiat_secp384r1_mulx_u64(&x291, &x292, x287, UINT64_C(0xffffffffffffffff));
3040     fiat_secp384r1_mulx_u64(&x293, &x294, x287, UINT64_C(0xffffffffffffffff));
3041     fiat_secp384r1_mulx_u64(&x295, &x296, x287, UINT64_C(0xfffffffffffffffe));
3042     fiat_secp384r1_mulx_u64(&x297, &x298, x287, UINT64_C(0xffffffff00000000));
3043     fiat_secp384r1_mulx_u64(&x299, &x300, x287, UINT32_C(0xffffffff));
3044     fiat_secp384r1_addcarryx_u64(&x301, &x302, 0x0, x300, x297);
3045     fiat_secp384r1_addcarryx_u64(&x303, &x304, x302, x298, x295);
3046     fiat_secp384r1_addcarryx_u64(&x305, &x306, x304, x296, x293);
3047     fiat_secp384r1_addcarryx_u64(&x307, &x308, x306, x294, x291);
3048     fiat_secp384r1_addcarryx_u64(&x309, &x310, x308, x292, x289);
3049     fiat_secp384r1_addcarryx_u64(&x311, &x312, 0x0, x275, x299);
3050     fiat_secp384r1_addcarryx_u64(&x313, &x314, x312, x277, x301);
3051     fiat_secp384r1_addcarryx_u64(&x315, &x316, x314, x279, x303);
3052     fiat_secp384r1_addcarryx_u64(&x317, &x318, x316, x281, x305);
3053     fiat_secp384r1_addcarryx_u64(&x319, &x320, x318, x283, x307);
3054     fiat_secp384r1_addcarryx_u64(&x321, &x322, x320, x285, x309);
3055     fiat_secp384r1_addcarryx_u64(&x323, &x324, x322, ((uint64_t)x286 + x258),
3056                                  (x310 + x290));
3057     fiat_secp384r1_mulx_u64(&x325, &x326, x5, UINT64_C(0x200000000));
3058     fiat_secp384r1_mulx_u64(&x327, &x328, x5, UINT64_C(0xfffffffe00000000));
3059     fiat_secp384r1_mulx_u64(&x329, &x330, x5, UINT64_C(0x200000000));
3060     fiat_secp384r1_mulx_u64(&x331, &x332, x5, UINT64_C(0xfffffffe00000001));
3061     fiat_secp384r1_addcarryx_u64(&x333, &x334, 0x0, x332, x329);
3062     fiat_secp384r1_addcarryx_u64(&x335, &x336, x334, x330, x327);
3063     fiat_secp384r1_addcarryx_u64(&x337, &x338, x336, x328, x325);
3064     fiat_secp384r1_addcarryx_u64(&x339, &x340, x338, x326, x5);
3065     fiat_secp384r1_addcarryx_u64(&x341, &x342, 0x0, x313, x331);
3066     fiat_secp384r1_addcarryx_u64(&x343, &x344, x342, x315, x333);
3067     fiat_secp384r1_addcarryx_u64(&x345, &x346, x344, x317, x335);
3068     fiat_secp384r1_addcarryx_u64(&x347, &x348, x346, x319, x337);
3069     fiat_secp384r1_addcarryx_u64(&x349, &x350, x348, x321, x339);
3070     fiat_secp384r1_addcarryx_u64(&x351, &x352, x350, x323, x340);
3071     fiat_secp384r1_mulx_u64(&x353, &x354, x341, UINT64_C(0x100000001));
3072     fiat_secp384r1_mulx_u64(&x355, &x356, x353, UINT64_C(0xffffffffffffffff));
3073     fiat_secp384r1_mulx_u64(&x357, &x358, x353, UINT64_C(0xffffffffffffffff));
3074     fiat_secp384r1_mulx_u64(&x359, &x360, x353, UINT64_C(0xffffffffffffffff));
3075     fiat_secp384r1_mulx_u64(&x361, &x362, x353, UINT64_C(0xfffffffffffffffe));
3076     fiat_secp384r1_mulx_u64(&x363, &x364, x353, UINT64_C(0xffffffff00000000));
3077     fiat_secp384r1_mulx_u64(&x365, &x366, x353, UINT32_C(0xffffffff));
3078     fiat_secp384r1_addcarryx_u64(&x367, &x368, 0x0, x366, x363);
3079     fiat_secp384r1_addcarryx_u64(&x369, &x370, x368, x364, x361);
3080     fiat_secp384r1_addcarryx_u64(&x371, &x372, x370, x362, x359);
3081     fiat_secp384r1_addcarryx_u64(&x373, &x374, x372, x360, x357);
3082     fiat_secp384r1_addcarryx_u64(&x375, &x376, x374, x358, x355);
3083     fiat_secp384r1_addcarryx_u64(&x377, &x378, 0x0, x341, x365);
3084     fiat_secp384r1_addcarryx_u64(&x379, &x380, x378, x343, x367);
3085     fiat_secp384r1_addcarryx_u64(&x381, &x382, x380, x345, x369);
3086     fiat_secp384r1_addcarryx_u64(&x383, &x384, x382, x347, x371);
3087     fiat_secp384r1_addcarryx_u64(&x385, &x386, x384, x349, x373);
3088     fiat_secp384r1_addcarryx_u64(&x387, &x388, x386, x351, x375);
3089     fiat_secp384r1_addcarryx_u64(&x389, &x390, x388, ((uint64_t)x352 + x324),
3090                                  (x376 + x356));
3091     fiat_secp384r1_subborrowx_u64(&x391, &x392, 0x0, x379,
3092                                   UINT32_C(0xffffffff));
3093     fiat_secp384r1_subborrowx_u64(&x393, &x394, x392, x381,
3094                                   UINT64_C(0xffffffff00000000));
3095     fiat_secp384r1_subborrowx_u64(&x395, &x396, x394, x383,
3096                                   UINT64_C(0xfffffffffffffffe));
3097     fiat_secp384r1_subborrowx_u64(&x397, &x398, x396, x385,
3098                                   UINT64_C(0xffffffffffffffff));
3099     fiat_secp384r1_subborrowx_u64(&x399, &x400, x398, x387,
3100                                   UINT64_C(0xffffffffffffffff));
3101     fiat_secp384r1_subborrowx_u64(&x401, &x402, x400, x389,
3102                                   UINT64_C(0xffffffffffffffff));
3103     fiat_secp384r1_subborrowx_u64(&x403, &x404, x402, x390, 0x0);
3104     fiat_secp384r1_cmovznz_u64(&x405, x404, x391, x379);
3105     fiat_secp384r1_cmovznz_u64(&x406, x404, x393, x381);
3106     fiat_secp384r1_cmovznz_u64(&x407, x404, x395, x383);
3107     fiat_secp384r1_cmovznz_u64(&x408, x404, x397, x385);
3108     fiat_secp384r1_cmovznz_u64(&x409, x404, x399, x387);
3109     fiat_secp384r1_cmovznz_u64(&x410, x404, x401, x389);
3110     out1[0] = x405;
3111     out1[1] = x406;
3112     out1[2] = x407;
3113     out1[3] = x408;
3114     out1[4] = x409;
3115     out1[5] = x410;
3116 }
3117 
3118 /*
3119  * The function fiat_secp384r1_nonzero outputs a single non-zero word if the input is non-zero and zero otherwise.
3120  * Preconditions:
3121  *   0 ≤ eval arg1 < m
3122  * Postconditions:
3123  *   out1 = 0 ↔ eval (from_montgomery arg1) mod m = 0
3124  *
3125  * Input Bounds:
3126  *   arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3127  * Output Bounds:
3128  *   out1: [0x0 ~> 0xffffffffffffffff]
3129  */
3130 static void
fiat_secp384r1_nonzero(uint64_t * out1,const uint64_t arg1[6])3131 fiat_secp384r1_nonzero(uint64_t *out1, const uint64_t arg1[6])
3132 {
3133     uint64_t x1;
3134     x1 = ((arg1[0]) |
3135           ((arg1[1]) | ((arg1[2]) | ((arg1[3]) | ((arg1[4]) | (arg1[5]))))));
3136     *out1 = x1;
3137 }
3138 
3139 /*
3140  * The function fiat_secp384r1_selectznz is a multi-limb conditional select.
3141  * Postconditions:
3142  *   eval out1 = (if arg1 = 0 then eval arg2 else eval arg3)
3143  *
3144  * Input Bounds:
3145  *   arg1: [0x0 ~> 0x1]
3146  *   arg2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3147  *   arg3: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3148  * Output Bounds:
3149  *   out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3150  */
3151 static void
fiat_secp384r1_selectznz(uint64_t out1[6],fiat_secp384r1_uint1 arg1,const uint64_t arg2[6],const uint64_t arg3[6])3152 fiat_secp384r1_selectznz(uint64_t out1[6],
3153                          fiat_secp384r1_uint1 arg1,
3154                          const uint64_t arg2[6],
3155                          const uint64_t arg3[6])
3156 {
3157     uint64_t x1;
3158     uint64_t x2;
3159     uint64_t x3;
3160     uint64_t x4;
3161     uint64_t x5;
3162     uint64_t x6;
3163     fiat_secp384r1_cmovznz_u64(&x1, arg1, (arg2[0]), (arg3[0]));
3164     fiat_secp384r1_cmovznz_u64(&x2, arg1, (arg2[1]), (arg3[1]));
3165     fiat_secp384r1_cmovznz_u64(&x3, arg1, (arg2[2]), (arg3[2]));
3166     fiat_secp384r1_cmovznz_u64(&x4, arg1, (arg2[3]), (arg3[3]));
3167     fiat_secp384r1_cmovznz_u64(&x5, arg1, (arg2[4]), (arg3[4]));
3168     fiat_secp384r1_cmovznz_u64(&x6, arg1, (arg2[5]), (arg3[5]));
3169     out1[0] = x1;
3170     out1[1] = x2;
3171     out1[2] = x3;
3172     out1[3] = x4;
3173     out1[4] = x5;
3174     out1[5] = x6;
3175 }
3176 
3177 /*
3178  * The function fiat_secp384r1_to_bytes serializes a field element NOT in the Montgomery domain to bytes in little-endian order.
3179  * Preconditions:
3180  *   0 ≤ eval arg1 < m
3181  * Postconditions:
3182  *   out1 = map (λ x, ⌊((eval arg1 mod m) mod 2^(8 * (x + 1))) / 2^(8 * x)⌋) [0..47]
3183  *
3184  * Input Bounds:
3185  *   arg1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3186  * Output Bounds:
3187  *   out1: [[0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff]]
3188  */
3189 static void
fiat_secp384r1_to_bytes(uint8_t out1[48],const uint64_t arg1[6])3190 fiat_secp384r1_to_bytes(uint8_t out1[48], const uint64_t arg1[6])
3191 {
3192     uint64_t x1;
3193     uint64_t x2;
3194     uint64_t x3;
3195     uint64_t x4;
3196     uint64_t x5;
3197     uint64_t x6;
3198     uint8_t x7;
3199     uint64_t x8;
3200     uint8_t x9;
3201     uint64_t x10;
3202     uint8_t x11;
3203     uint64_t x12;
3204     uint8_t x13;
3205     uint64_t x14;
3206     uint8_t x15;
3207     uint64_t x16;
3208     uint8_t x17;
3209     uint64_t x18;
3210     uint8_t x19;
3211     uint8_t x20;
3212     uint8_t x21;
3213     uint64_t x22;
3214     uint8_t x23;
3215     uint64_t x24;
3216     uint8_t x25;
3217     uint64_t x26;
3218     uint8_t x27;
3219     uint64_t x28;
3220     uint8_t x29;
3221     uint64_t x30;
3222     uint8_t x31;
3223     uint64_t x32;
3224     uint8_t x33;
3225     uint8_t x34;
3226     uint8_t x35;
3227     uint64_t x36;
3228     uint8_t x37;
3229     uint64_t x38;
3230     uint8_t x39;
3231     uint64_t x40;
3232     uint8_t x41;
3233     uint64_t x42;
3234     uint8_t x43;
3235     uint64_t x44;
3236     uint8_t x45;
3237     uint64_t x46;
3238     uint8_t x47;
3239     uint8_t x48;
3240     uint8_t x49;
3241     uint64_t x50;
3242     uint8_t x51;
3243     uint64_t x52;
3244     uint8_t x53;
3245     uint64_t x54;
3246     uint8_t x55;
3247     uint64_t x56;
3248     uint8_t x57;
3249     uint64_t x58;
3250     uint8_t x59;
3251     uint64_t x60;
3252     uint8_t x61;
3253     uint8_t x62;
3254     uint8_t x63;
3255     uint64_t x64;
3256     uint8_t x65;
3257     uint64_t x66;
3258     uint8_t x67;
3259     uint64_t x68;
3260     uint8_t x69;
3261     uint64_t x70;
3262     uint8_t x71;
3263     uint64_t x72;
3264     uint8_t x73;
3265     uint64_t x74;
3266     uint8_t x75;
3267     uint8_t x76;
3268     uint8_t x77;
3269     uint64_t x78;
3270     uint8_t x79;
3271     uint64_t x80;
3272     uint8_t x81;
3273     uint64_t x82;
3274     uint8_t x83;
3275     uint64_t x84;
3276     uint8_t x85;
3277     uint64_t x86;
3278     uint8_t x87;
3279     uint64_t x88;
3280     uint8_t x89;
3281     uint8_t x90;
3282     x1 = (arg1[5]);
3283     x2 = (arg1[4]);
3284     x3 = (arg1[3]);
3285     x4 = (arg1[2]);
3286     x5 = (arg1[1]);
3287     x6 = (arg1[0]);
3288     x7 = (uint8_t)(x6 & UINT8_C(0xff));
3289     x8 = (x6 >> 8);
3290     x9 = (uint8_t)(x8 & UINT8_C(0xff));
3291     x10 = (x8 >> 8);
3292     x11 = (uint8_t)(x10 & UINT8_C(0xff));
3293     x12 = (x10 >> 8);
3294     x13 = (uint8_t)(x12 & UINT8_C(0xff));
3295     x14 = (x12 >> 8);
3296     x15 = (uint8_t)(x14 & UINT8_C(0xff));
3297     x16 = (x14 >> 8);
3298     x17 = (uint8_t)(x16 & UINT8_C(0xff));
3299     x18 = (x16 >> 8);
3300     x19 = (uint8_t)(x18 & UINT8_C(0xff));
3301     x20 = (uint8_t)(x18 >> 8);
3302     x21 = (uint8_t)(x5 & UINT8_C(0xff));
3303     x22 = (x5 >> 8);
3304     x23 = (uint8_t)(x22 & UINT8_C(0xff));
3305     x24 = (x22 >> 8);
3306     x25 = (uint8_t)(x24 & UINT8_C(0xff));
3307     x26 = (x24 >> 8);
3308     x27 = (uint8_t)(x26 & UINT8_C(0xff));
3309     x28 = (x26 >> 8);
3310     x29 = (uint8_t)(x28 & UINT8_C(0xff));
3311     x30 = (x28 >> 8);
3312     x31 = (uint8_t)(x30 & UINT8_C(0xff));
3313     x32 = (x30 >> 8);
3314     x33 = (uint8_t)(x32 & UINT8_C(0xff));
3315     x34 = (uint8_t)(x32 >> 8);
3316     x35 = (uint8_t)(x4 & UINT8_C(0xff));
3317     x36 = (x4 >> 8);
3318     x37 = (uint8_t)(x36 & UINT8_C(0xff));
3319     x38 = (x36 >> 8);
3320     x39 = (uint8_t)(x38 & UINT8_C(0xff));
3321     x40 = (x38 >> 8);
3322     x41 = (uint8_t)(x40 & UINT8_C(0xff));
3323     x42 = (x40 >> 8);
3324     x43 = (uint8_t)(x42 & UINT8_C(0xff));
3325     x44 = (x42 >> 8);
3326     x45 = (uint8_t)(x44 & UINT8_C(0xff));
3327     x46 = (x44 >> 8);
3328     x47 = (uint8_t)(x46 & UINT8_C(0xff));
3329     x48 = (uint8_t)(x46 >> 8);
3330     x49 = (uint8_t)(x3 & UINT8_C(0xff));
3331     x50 = (x3 >> 8);
3332     x51 = (uint8_t)(x50 & UINT8_C(0xff));
3333     x52 = (x50 >> 8);
3334     x53 = (uint8_t)(x52 & UINT8_C(0xff));
3335     x54 = (x52 >> 8);
3336     x55 = (uint8_t)(x54 & UINT8_C(0xff));
3337     x56 = (x54 >> 8);
3338     x57 = (uint8_t)(x56 & UINT8_C(0xff));
3339     x58 = (x56 >> 8);
3340     x59 = (uint8_t)(x58 & UINT8_C(0xff));
3341     x60 = (x58 >> 8);
3342     x61 = (uint8_t)(x60 & UINT8_C(0xff));
3343     x62 = (uint8_t)(x60 >> 8);
3344     x63 = (uint8_t)(x2 & UINT8_C(0xff));
3345     x64 = (x2 >> 8);
3346     x65 = (uint8_t)(x64 & UINT8_C(0xff));
3347     x66 = (x64 >> 8);
3348     x67 = (uint8_t)(x66 & UINT8_C(0xff));
3349     x68 = (x66 >> 8);
3350     x69 = (uint8_t)(x68 & UINT8_C(0xff));
3351     x70 = (x68 >> 8);
3352     x71 = (uint8_t)(x70 & UINT8_C(0xff));
3353     x72 = (x70 >> 8);
3354     x73 = (uint8_t)(x72 & UINT8_C(0xff));
3355     x74 = (x72 >> 8);
3356     x75 = (uint8_t)(x74 & UINT8_C(0xff));
3357     x76 = (uint8_t)(x74 >> 8);
3358     x77 = (uint8_t)(x1 & UINT8_C(0xff));
3359     x78 = (x1 >> 8);
3360     x79 = (uint8_t)(x78 & UINT8_C(0xff));
3361     x80 = (x78 >> 8);
3362     x81 = (uint8_t)(x80 & UINT8_C(0xff));
3363     x82 = (x80 >> 8);
3364     x83 = (uint8_t)(x82 & UINT8_C(0xff));
3365     x84 = (x82 >> 8);
3366     x85 = (uint8_t)(x84 & UINT8_C(0xff));
3367     x86 = (x84 >> 8);
3368     x87 = (uint8_t)(x86 & UINT8_C(0xff));
3369     x88 = (x86 >> 8);
3370     x89 = (uint8_t)(x88 & UINT8_C(0xff));
3371     x90 = (uint8_t)(x88 >> 8);
3372     out1[0] = x7;
3373     out1[1] = x9;
3374     out1[2] = x11;
3375     out1[3] = x13;
3376     out1[4] = x15;
3377     out1[5] = x17;
3378     out1[6] = x19;
3379     out1[7] = x20;
3380     out1[8] = x21;
3381     out1[9] = x23;
3382     out1[10] = x25;
3383     out1[11] = x27;
3384     out1[12] = x29;
3385     out1[13] = x31;
3386     out1[14] = x33;
3387     out1[15] = x34;
3388     out1[16] = x35;
3389     out1[17] = x37;
3390     out1[18] = x39;
3391     out1[19] = x41;
3392     out1[20] = x43;
3393     out1[21] = x45;
3394     out1[22] = x47;
3395     out1[23] = x48;
3396     out1[24] = x49;
3397     out1[25] = x51;
3398     out1[26] = x53;
3399     out1[27] = x55;
3400     out1[28] = x57;
3401     out1[29] = x59;
3402     out1[30] = x61;
3403     out1[31] = x62;
3404     out1[32] = x63;
3405     out1[33] = x65;
3406     out1[34] = x67;
3407     out1[35] = x69;
3408     out1[36] = x71;
3409     out1[37] = x73;
3410     out1[38] = x75;
3411     out1[39] = x76;
3412     out1[40] = x77;
3413     out1[41] = x79;
3414     out1[42] = x81;
3415     out1[43] = x83;
3416     out1[44] = x85;
3417     out1[45] = x87;
3418     out1[46] = x89;
3419     out1[47] = x90;
3420 }
3421 
3422 /*
3423  * The function fiat_secp384r1_from_bytes deserializes a field element NOT in the Montgomery domain from bytes in little-endian order.
3424  * Preconditions:
3425  *   0 ≤ bytes_eval arg1 < m
3426  * Postconditions:
3427  *   eval out1 mod m = bytes_eval arg1 mod m
3428  *   0 ≤ eval out1 < m
3429  *
3430  * Input Bounds:
3431  *   arg1: [[0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff]]
3432  * Output Bounds:
3433  *   out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
3434  */
3435 static void
fiat_secp384r1_from_bytes(uint64_t out1[6],const uint8_t arg1[48])3436 fiat_secp384r1_from_bytes(uint64_t out1[6],
3437                           const uint8_t arg1[48])
3438 {
3439     uint64_t x1;
3440     uint64_t x2;
3441     uint64_t x3;
3442     uint64_t x4;
3443     uint64_t x5;
3444     uint64_t x6;
3445     uint64_t x7;
3446     uint8_t x8;
3447     uint64_t x9;
3448     uint64_t x10;
3449     uint64_t x11;
3450     uint64_t x12;
3451     uint64_t x13;
3452     uint64_t x14;
3453     uint64_t x15;
3454     uint8_t x16;
3455     uint64_t x17;
3456     uint64_t x18;
3457     uint64_t x19;
3458     uint64_t x20;
3459     uint64_t x21;
3460     uint64_t x22;
3461     uint64_t x23;
3462     uint8_t x24;
3463     uint64_t x25;
3464     uint64_t x26;
3465     uint64_t x27;
3466     uint64_t x28;
3467     uint64_t x29;
3468     uint64_t x30;
3469     uint64_t x31;
3470     uint8_t x32;
3471     uint64_t x33;
3472     uint64_t x34;
3473     uint64_t x35;
3474     uint64_t x36;
3475     uint64_t x37;
3476     uint64_t x38;
3477     uint64_t x39;
3478     uint8_t x40;
3479     uint64_t x41;
3480     uint64_t x42;
3481     uint64_t x43;
3482     uint64_t x44;
3483     uint64_t x45;
3484     uint64_t x46;
3485     uint64_t x47;
3486     uint8_t x48;
3487     uint64_t x49;
3488     uint64_t x50;
3489     uint64_t x51;
3490     uint64_t x52;
3491     uint64_t x53;
3492     uint64_t x54;
3493     uint64_t x55;
3494     uint64_t x56;
3495     uint64_t x57;
3496     uint64_t x58;
3497     uint64_t x59;
3498     uint64_t x60;
3499     uint64_t x61;
3500     uint64_t x62;
3501     uint64_t x63;
3502     uint64_t x64;
3503     uint64_t x65;
3504     uint64_t x66;
3505     uint64_t x67;
3506     uint64_t x68;
3507     uint64_t x69;
3508     uint64_t x70;
3509     uint64_t x71;
3510     uint64_t x72;
3511     uint64_t x73;
3512     uint64_t x74;
3513     uint64_t x75;
3514     uint64_t x76;
3515     uint64_t x77;
3516     uint64_t x78;
3517     uint64_t x79;
3518     uint64_t x80;
3519     uint64_t x81;
3520     uint64_t x82;
3521     uint64_t x83;
3522     uint64_t x84;
3523     uint64_t x85;
3524     uint64_t x86;
3525     uint64_t x87;
3526     uint64_t x88;
3527     uint64_t x89;
3528     uint64_t x90;
3529     x1 = ((uint64_t)(arg1[47]) << 56);
3530     x2 = ((uint64_t)(arg1[46]) << 48);
3531     x3 = ((uint64_t)(arg1[45]) << 40);
3532     x4 = ((uint64_t)(arg1[44]) << 32);
3533     x5 = ((uint64_t)(arg1[43]) << 24);
3534     x6 = ((uint64_t)(arg1[42]) << 16);
3535     x7 = ((uint64_t)(arg1[41]) << 8);
3536     x8 = (arg1[40]);
3537     x9 = ((uint64_t)(arg1[39]) << 56);
3538     x10 = ((uint64_t)(arg1[38]) << 48);
3539     x11 = ((uint64_t)(arg1[37]) << 40);
3540     x12 = ((uint64_t)(arg1[36]) << 32);
3541     x13 = ((uint64_t)(arg1[35]) << 24);
3542     x14 = ((uint64_t)(arg1[34]) << 16);
3543     x15 = ((uint64_t)(arg1[33]) << 8);
3544     x16 = (arg1[32]);
3545     x17 = ((uint64_t)(arg1[31]) << 56);
3546     x18 = ((uint64_t)(arg1[30]) << 48);
3547     x19 = ((uint64_t)(arg1[29]) << 40);
3548     x20 = ((uint64_t)(arg1[28]) << 32);
3549     x21 = ((uint64_t)(arg1[27]) << 24);
3550     x22 = ((uint64_t)(arg1[26]) << 16);
3551     x23 = ((uint64_t)(arg1[25]) << 8);
3552     x24 = (arg1[24]);
3553     x25 = ((uint64_t)(arg1[23]) << 56);
3554     x26 = ((uint64_t)(arg1[22]) << 48);
3555     x27 = ((uint64_t)(arg1[21]) << 40);
3556     x28 = ((uint64_t)(arg1[20]) << 32);
3557     x29 = ((uint64_t)(arg1[19]) << 24);
3558     x30 = ((uint64_t)(arg1[18]) << 16);
3559     x31 = ((uint64_t)(arg1[17]) << 8);
3560     x32 = (arg1[16]);
3561     x33 = ((uint64_t)(arg1[15]) << 56);
3562     x34 = ((uint64_t)(arg1[14]) << 48);
3563     x35 = ((uint64_t)(arg1[13]) << 40);
3564     x36 = ((uint64_t)(arg1[12]) << 32);
3565     x37 = ((uint64_t)(arg1[11]) << 24);
3566     x38 = ((uint64_t)(arg1[10]) << 16);
3567     x39 = ((uint64_t)(arg1[9]) << 8);
3568     x40 = (arg1[8]);
3569     x41 = ((uint64_t)(arg1[7]) << 56);
3570     x42 = ((uint64_t)(arg1[6]) << 48);
3571     x43 = ((uint64_t)(arg1[5]) << 40);
3572     x44 = ((uint64_t)(arg1[4]) << 32);
3573     x45 = ((uint64_t)(arg1[3]) << 24);
3574     x46 = ((uint64_t)(arg1[2]) << 16);
3575     x47 = ((uint64_t)(arg1[1]) << 8);
3576     x48 = (arg1[0]);
3577     x49 = (x47 + (uint64_t)x48);
3578     x50 = (x46 + x49);
3579     x51 = (x45 + x50);
3580     x52 = (x44 + x51);
3581     x53 = (x43 + x52);
3582     x54 = (x42 + x53);
3583     x55 = (x41 + x54);
3584     x56 = (x39 + (uint64_t)x40);
3585     x57 = (x38 + x56);
3586     x58 = (x37 + x57);
3587     x59 = (x36 + x58);
3588     x60 = (x35 + x59);
3589     x61 = (x34 + x60);
3590     x62 = (x33 + x61);
3591     x63 = (x31 + (uint64_t)x32);
3592     x64 = (x30 + x63);
3593     x65 = (x29 + x64);
3594     x66 = (x28 + x65);
3595     x67 = (x27 + x66);
3596     x68 = (x26 + x67);
3597     x69 = (x25 + x68);
3598     x70 = (x23 + (uint64_t)x24);
3599     x71 = (x22 + x70);
3600     x72 = (x21 + x71);
3601     x73 = (x20 + x72);
3602     x74 = (x19 + x73);
3603     x75 = (x18 + x74);
3604     x76 = (x17 + x75);
3605     x77 = (x15 + (uint64_t)x16);
3606     x78 = (x14 + x77);
3607     x79 = (x13 + x78);
3608     x80 = (x12 + x79);
3609     x81 = (x11 + x80);
3610     x82 = (x10 + x81);
3611     x83 = (x9 + x82);
3612     x84 = (x7 + (uint64_t)x8);
3613     x85 = (x6 + x84);
3614     x86 = (x5 + x85);
3615     x87 = (x4 + x86);
3616     x88 = (x3 + x87);
3617     x89 = (x2 + x88);
3618     x90 = (x1 + x89);
3619     out1[0] = x55;
3620     out1[1] = x62;
3621     out1[2] = x69;
3622     out1[3] = x76;
3623     out1[4] = x83;
3624     out1[5] = x90;
3625 }
3626 
3627 /* END verbatim fiat code */
3628 
3629 /*-
3630  * Finite field inversion via FLT.
3631  * NB: this is not a real Fiat function, just named that way for consistency.
3632  * Autogenerated: ecp/secp384r1/fe_inv.op3
3633  * custom repunit addition chain
3634  */
3635 static void
fiat_secp384r1_inv(fe_t output,const fe_t t1)3636 fiat_secp384r1_inv(fe_t output, const fe_t t1)
3637 {
3638     int i;
3639     /* temporary variables */
3640     fe_t acc, t10, t170, t2, t20, t255, t30, t32, t4, t64, t8, t84, t85;
3641 
3642     fiat_secp384r1_square(acc, t1);
3643     fiat_secp384r1_mul(t2, acc, t1);
3644     fiat_secp384r1_square(acc, t2);
3645     fiat_secp384r1_square(acc, acc);
3646     fiat_secp384r1_mul(t4, acc, t2);
3647     fiat_secp384r1_square(acc, t4);
3648     for (i = 0; i < 3; i++)
3649         fiat_secp384r1_square(acc, acc);
3650     fiat_secp384r1_mul(t8, acc, t4);
3651     fiat_secp384r1_square(acc, t8);
3652     fiat_secp384r1_square(acc, acc);
3653     fiat_secp384r1_mul(t10, acc, t2);
3654     fiat_secp384r1_square(acc, t10);
3655     for (i = 0; i < 9; i++)
3656         fiat_secp384r1_square(acc, acc);
3657     fiat_secp384r1_mul(t20, acc, t10);
3658     fiat_secp384r1_square(acc, t20);
3659     for (i = 0; i < 9; i++)
3660         fiat_secp384r1_square(acc, acc);
3661     fiat_secp384r1_mul(t30, acc, t10);
3662     fiat_secp384r1_square(acc, t30);
3663     fiat_secp384r1_square(acc, acc);
3664     fiat_secp384r1_mul(t32, acc, t2);
3665     fiat_secp384r1_square(acc, t32);
3666     for (i = 0; i < 31; i++)
3667         fiat_secp384r1_square(acc, acc);
3668     fiat_secp384r1_mul(t64, acc, t32);
3669     fiat_secp384r1_square(acc, t64);
3670     for (i = 0; i < 19; i++)
3671         fiat_secp384r1_square(acc, acc);
3672     fiat_secp384r1_mul(t84, acc, t20);
3673     fiat_secp384r1_square(acc, t84);
3674     fiat_secp384r1_mul(t85, acc, t1);
3675     fiat_secp384r1_square(acc, t85);
3676     for (i = 0; i < 84; i++)
3677         fiat_secp384r1_square(acc, acc);
3678     fiat_secp384r1_mul(t170, acc, t85);
3679     fiat_secp384r1_square(acc, t170);
3680     for (i = 0; i < 84; i++)
3681         fiat_secp384r1_square(acc, acc);
3682     fiat_secp384r1_mul(t255, acc, t85);
3683     fiat_secp384r1_square(acc, t255);
3684     for (i = 0; i < 32; i++)
3685         fiat_secp384r1_square(acc, acc);
3686     fiat_secp384r1_mul(acc, acc, t32);
3687     for (i = 0; i < 94; i++)
3688         fiat_secp384r1_square(acc, acc);
3689     fiat_secp384r1_mul(acc, acc, t30);
3690     for (i = 0; i < 2; i++)
3691         fiat_secp384r1_square(acc, acc);
3692     fiat_secp384r1_mul(output, acc, t1);
3693 }
3694 
3695 /* curve coefficient constants */
3696 
3697 static const limb_t const_one[6] = {
3698     UINT64_C(0xFFFFFFFF00000001), UINT64_C(0x00000000FFFFFFFF),
3699     UINT64_C(0x0000000000000001), UINT64_C(0x0000000000000000),
3700     UINT64_C(0x0000000000000000), UINT64_C(0x0000000000000000)
3701 };
3702 
3703 static const limb_t const_b[6] = {
3704     UINT64_C(0x081188719D412DCC), UINT64_C(0xF729ADD87A4C32EC),
3705     UINT64_C(0x77F2209B1920022E), UINT64_C(0xE3374BEE94938AE2),
3706     UINT64_C(0xB62B21F41F022094), UINT64_C(0xCD08114B604FBFF9)
3707 };
3708 
3709 /* LUT for scalar multiplication by comb interleaving */
3710 static const pt_aff_t lut_cmb[21][16] = {
3711     {
3712         { { UINT64_C(0x3DD0756649C0B528), UINT64_C(0x20E378E2A0D6CE38),
3713             UINT64_C(0x879C3AFC541B4D6E), UINT64_C(0x6454868459A30EFF),
3714             UINT64_C(0x812FF723614EDE2B), UINT64_C(0x4D3AADC2299E1513) },
3715           { UINT64_C(0x23043DAD4B03A4FE), UINT64_C(0xA1BFA8BF7BB4A9AC),
3716             UINT64_C(0x8BADE7562E83B050), UINT64_C(0xC6C3521968F4FFD9),
3717             UINT64_C(0xDD8002263969A840), UINT64_C(0x2B78ABC25A15C5E9) } },
3718         { { UINT64_C(0x05E4DBE6C1DC4073), UINT64_C(0xC54EA9FFF04F779C),
3719             UINT64_C(0x6B2034E9A170CCF0), UINT64_C(0x3A48D732D51C6C3E),
3720             UINT64_C(0xE36F7E2D263AA470), UINT64_C(0xD283FE68E7C1C3AC) },
3721           { UINT64_C(0x7E284821C04EE157), UINT64_C(0x92D789A77AE0E36D),
3722             UINT64_C(0x132663C04EF67446), UINT64_C(0x68012D5AD2E1D0B4),
3723             UINT64_C(0xF6DB68B15102B339), UINT64_C(0x465465FC983292AF) } },
3724         { { UINT64_C(0xBB595EBA68F1F0DF), UINT64_C(0xC185C0CBCC873466),
3725             UINT64_C(0x7F1EB1B5293C703B), UINT64_C(0x60DB2CF5AACC05E6),
3726             UINT64_C(0xC676B987E2E8E4C6), UINT64_C(0xE1BB26B11D178FFB) },
3727           { UINT64_C(0x2B694BA07073FA21), UINT64_C(0x22C16E2E72F34566),
3728             UINT64_C(0x80B61B3101C35B99), UINT64_C(0x4B237FAF982C0411),
3729             UINT64_C(0xE6C5944024DE236D), UINT64_C(0x4DB1C9D6E209E4A3) } },
3730         { { UINT64_C(0xDF13B9D17D69222B), UINT64_C(0x4CE6415F874774B1),
3731             UINT64_C(0x731EDCF8211FAA95), UINT64_C(0x5F4215D1659753ED),
3732             UINT64_C(0xF893DB589DB2DF55), UINT64_C(0x932C9F811C89025B) },
3733           { UINT64_C(0x0996B2207706A61E), UINT64_C(0x135349D5A8641C79),
3734             UINT64_C(0x65AAD76F50130844), UINT64_C(0x0FF37C0401FFF780),
3735             UINT64_C(0xF57F238E693B0706), UINT64_C(0xD90A16B6AF6C9B3E) } },
3736         { { UINT64_C(0x2F5D200E2353B92F), UINT64_C(0xE35D87293FD7E4F9),
3737             UINT64_C(0x26094833A96D745D), UINT64_C(0xDC351DC13CBFFF3F),
3738             UINT64_C(0x26D464C6DAD54D6A), UINT64_C(0x5CAB1D1D53636C6A) },
3739           { UINT64_C(0xF2813072B18EC0B0), UINT64_C(0x3777E270D742AA2F),
3740             UINT64_C(0x27F061C7033CA7C2), UINT64_C(0xA6ECACCC68EAD0D8),
3741             UINT64_C(0x7D9429F4EE69A754), UINT64_C(0xE770633431E8F5C6) } },
3742         { { UINT64_C(0xC7708B19B68B8C7D), UINT64_C(0x4532077C44377ABA),
3743             UINT64_C(0x0DCC67706CDAD64F), UINT64_C(0x01B8BF56147B6602),
3744             UINT64_C(0xF8D89885F0561D79), UINT64_C(0x9C19E9FC7BA9C437) },
3745           { UINT64_C(0x764EB146BDC4BA25), UINT64_C(0x604FE46BAC144B83),
3746             UINT64_C(0x3CE813298A77E780), UINT64_C(0x2E070F36FE9E682E),
3747             UINT64_C(0x41821D0C3A53287A), UINT64_C(0x9AA62F9F3533F918) } },
3748         { { UINT64_C(0x9B7AEB7E75CCBDFB), UINT64_C(0xB25E28C5F6749A95),
3749             UINT64_C(0x8A7A8E4633B7D4AE), UINT64_C(0xDB5203A8D9C1BD56),
3750             UINT64_C(0xD2657265ED22DF97), UINT64_C(0xB51C56E18CF23C94) },
3751           { UINT64_C(0xF4D394596C3D812D), UINT64_C(0xD8E88F1A87CAE0C2),
3752             UINT64_C(0x789A2A48CF4D0FE3), UINT64_C(0xB7FEAC2DFEC38D60),
3753             UINT64_C(0x81FDBD1C3B490EC3), UINT64_C(0x4617ADB7CC6979E1) } },
3754         { { UINT64_C(0x446AD8884709F4A9), UINT64_C(0x2B7210E2EC3DABD8),
3755             UINT64_C(0x83CCF19550E07B34), UINT64_C(0x59500917789B3075),
3756             UINT64_C(0x0FC01FD4EB085993), UINT64_C(0xFB62D26F4903026B) },
3757           { UINT64_C(0x2309CC9D6FE989BB), UINT64_C(0x61609CBD144BD586),
3758             UINT64_C(0x4B23D3A0DE06610C), UINT64_C(0xDDDC2866D898F470),
3759             UINT64_C(0x8733FC41400C5797), UINT64_C(0x5A68C6FED0BC2716) } },
3760         { { UINT64_C(0x8903E1304B4A3CD0), UINT64_C(0x3EA4EA4C8FF1F43E),
3761             UINT64_C(0xE6FC3F2AF655A10D), UINT64_C(0x7BE3737D524FFEFC),
3762             UINT64_C(0x9F6928555330455E), UINT64_C(0x524F166EE475CE70) },
3763           { UINT64_C(0x3FCC69CD6C12F055), UINT64_C(0x4E23B6FFD5B9C0DA),
3764             UINT64_C(0x49CE6993336BF183), UINT64_C(0xF87D6D854A54504A),
3765             UINT64_C(0x25EB5DF1B3C2677A), UINT64_C(0xAC37986F55B164C9) } },
3766         { { UINT64_C(0x82A2ED4ABAA84C08), UINT64_C(0x22C4CC5F41A8C912),
3767             UINT64_C(0xCA109C3B154AAD5E), UINT64_C(0x23891298FC38538E),
3768             UINT64_C(0xB3B6639C539802AE), UINT64_C(0xFA0F1F450390D706) },
3769           { UINT64_C(0x46B78E5DB0DC21D0), UINT64_C(0xA8C72D3CC3DA2EAC),
3770             UINT64_C(0x9170B3786FF2F643), UINT64_C(0x3F5A799BB67F30C3),
3771             UINT64_C(0x15D1DC778264B672), UINT64_C(0xA1D47B23E9577764) } },
3772         { { UINT64_C(0x08265E510422CE2F), UINT64_C(0x88E0D496DD2F9E21),
3773             UINT64_C(0x30128AA06177F75D), UINT64_C(0x2E59AB62BD9EBE69),
3774             UINT64_C(0x1B1A0F6C5DF0E537), UINT64_C(0xAB16C626DAC012B5) },
3775           { UINT64_C(0x8014214B008C5DE7), UINT64_C(0xAA740A9E38F17BEA),
3776             UINT64_C(0x262EBB498A149098), UINT64_C(0xB454111E8527CD59),
3777             UINT64_C(0x266AD15AACEA5817), UINT64_C(0x21824F411353CCBA) } },
3778         { { UINT64_C(0xD1B4E74D12E3683B), UINT64_C(0x990ED20B569B8EF6),
3779             UINT64_C(0xB9D3DD25429C0A18), UINT64_C(0x1C75B8AB2A351783),
3780             UINT64_C(0x61E4CA2B905432F0), UINT64_C(0x80826A69EEA8F224) },
3781           { UINT64_C(0x7FC33A6BEC52ABAD), UINT64_C(0x0BCCA3F0A65E4813),
3782             UINT64_C(0x7AD8A132A527CEBE), UINT64_C(0xF0138950EAF22C7E),
3783             UINT64_C(0x282D2437566718C1), UINT64_C(0x9DFCCB0DE2212559) } },
3784         { { UINT64_C(0x1E93722758CE3B83), UINT64_C(0xBB280DFA3CB3FB36),
3785             UINT64_C(0x57D0F3D2E2BE174A), UINT64_C(0x9BD51B99208ABE1E),
3786             UINT64_C(0x3809AB50DE248024), UINT64_C(0xC29C6E2CA5BB7331) },
3787           { UINT64_C(0x9944FD2E61124F05), UINT64_C(0x83CCBC4E9009E391),
3788             UINT64_C(0x01628F059424A3CC), UINT64_C(0xD6A2F51DEA8E4344),
3789             UINT64_C(0xDA3E1A3D4CEBC96E), UINT64_C(0x1FE6FB42E97809DC) } },
3790         { { UINT64_C(0xA04482D2467D66E4), UINT64_C(0xCF1912934D78291D),
3791             UINT64_C(0x8E0D4168482396F9), UINT64_C(0x7228E2D5D18F14D0),
3792             UINT64_C(0x2F7E8D509C6A58FE), UINT64_C(0xE8CA780E373E5AEC) },
3793           { UINT64_C(0x42AAD1D61B68E9F8), UINT64_C(0x58A6D7F569E2F8F4),
3794             UINT64_C(0xD779ADFE31DA1BEA), UINT64_C(0x7D26540638C85A85),
3795             UINT64_C(0x67E67195D44D3CDF), UINT64_C(0x17820A0BC5134ED7) } },
3796         { { UINT64_C(0x019D6AC5D3021470), UINT64_C(0x25846B66780443D6),
3797             UINT64_C(0xCE3C15ED55C97647), UINT64_C(0x3DC22D490E3FEB0F),
3798             UINT64_C(0x2065B7CBA7DF26E4), UINT64_C(0xC8B00AE8187CEA1F) },
3799           { UINT64_C(0x1A5284A0865DDED3), UINT64_C(0x293C164920C83DE2),
3800             UINT64_C(0xAB178D26CCE851B3), UINT64_C(0x8E6DB10B404505FB),
3801             UINT64_C(0xF6F57E7190C82033), UINT64_C(0x1D2A1C015977F16C) } },
3802         { { UINT64_C(0xA39C89317C8906A4), UINT64_C(0xB6E7ECDD9E821EE6),
3803             UINT64_C(0x2ECF8340F0DF4FE6), UINT64_C(0xD42F7DC953C14965),
3804             UINT64_C(0x1AFB51A3E3BA8285), UINT64_C(0x6C07C4040A3305D1) },
3805           { UINT64_C(0xDAB83288127FC1DA), UINT64_C(0xBC0A699B374C4B08),
3806             UINT64_C(0x402A9BAB42EB20DD), UINT64_C(0xD7DD464F045A7A1C),
3807             UINT64_C(0x5B3D0D6D36BEECC4), UINT64_C(0x475A3E756398A19D) } },
3808     },
3809     {
3810         { { UINT64_C(0x31BDB48372876AE8), UINT64_C(0xE3325D98961ED1BF),
3811             UINT64_C(0x18C042469B6FC64D), UINT64_C(0x0DCC15FA15786B8C),
3812             UINT64_C(0x81ACDB068E63DA4A), UINT64_C(0xD3A4B643DADA70FB) },
3813           { UINT64_C(0x46361AFEDEA424EB), UINT64_C(0xDC2D2CAE89B92970),
3814             UINT64_C(0xF389B61B615694E6), UINT64_C(0x7036DEF1872951D2),
3815             UINT64_C(0x40FD3BDAD93BADC7), UINT64_C(0x45AB6321380A68D3) } },
3816         { { UINT64_C(0x23C1F74481A2703A), UINT64_C(0x1A5D075CB9859136),
3817             UINT64_C(0xA4F82C9D5AFD1BFD), UINT64_C(0xA3D1E9A4F89D76FE),
3818             UINT64_C(0x964F705075702F80), UINT64_C(0x182BF349F56C089D) },
3819           { UINT64_C(0xE205FA8FBE0DA6E1), UINT64_C(0x32905EB90A40F8F3),
3820             UINT64_C(0x331A1004356D4395), UINT64_C(0x58B78901FDBBDFDE),
3821             UINT64_C(0xA52A15979BA00E71), UINT64_C(0xE0092E1F55497A30) } },
3822         { { UINT64_C(0x5562A85670EE8F39), UINT64_C(0x86B0C11764E52A9C),
3823             UINT64_C(0xC19F317409C75B8C), UINT64_C(0x21C7CC3124923F80),
3824             UINT64_C(0xE63FE47F8F5B291E), UINT64_C(0x3D6D3C050DC08B05) },
3825           { UINT64_C(0x58AE455EEE0C39A1), UINT64_C(0x78BEA4310AD97942),
3826             UINT64_C(0x42C7C97F3EE3989C), UINT64_C(0xC1B03AF5F38759AE),
3827             UINT64_C(0x1A673C75BCF46899), UINT64_C(0x4831B7D38D508C7D) } },
3828         { { UINT64_C(0x76512D1BC552E354), UINT64_C(0x2B7EB6DF273020FD),
3829             UINT64_C(0xD1C73AA8025A5F25), UINT64_C(0x2ABA19295CBD2A40),
3830             UINT64_C(0xB53CADC3C88D61C6), UINT64_C(0x7E66A95E098290F3) },
3831           { UINT64_C(0x72800ECBAF4C5073), UINT64_C(0x81F2725E9DC63FAF),
3832             UINT64_C(0x14BF92A7282BA9D1), UINT64_C(0x90629672BD5F1BB2),
3833             UINT64_C(0x362F68EBA97C6C96), UINT64_C(0xB1D3BB8B7EA9D601) } },
3834         { { UINT64_C(0x73878F7FA9C94429), UINT64_C(0xB35C3BC8456CA6D8),
3835             UINT64_C(0xD96F0B3CF721923A), UINT64_C(0x28D8F06CE6D44FA1),
3836             UINT64_C(0x94EFDCDCD5CD671A), UINT64_C(0x0299AB933F97D481) },
3837           { UINT64_C(0xB7CED6EA2FD1D324), UINT64_C(0xBD6832087E932EC2),
3838             UINT64_C(0x24ED31FBCB755A6E), UINT64_C(0xA636098EE48781D2),
3839             UINT64_C(0x8687C63CF0A4F297), UINT64_C(0xBB52344007478526) } },
3840         { { UINT64_C(0x2E5F741934124B56), UINT64_C(0x1F223AE14B3F02CA),
3841             UINT64_C(0x6345B427E8336C7E), UINT64_C(0x92123E16F5D0E3D0),
3842             UINT64_C(0xDAF0D14D45E79F3A), UINT64_C(0x6ACA67656F3BD0C6) },
3843           { UINT64_C(0xF6169FAB403813F4), UINT64_C(0x31DC39C0334A4C59),
3844             UINT64_C(0x74C46753D589866D), UINT64_C(0x5741511D984C6A5D),
3845             UINT64_C(0xF263128797FED2D3), UINT64_C(0x5687CA1B11614886) } },
3846         { { UINT64_C(0x076D902A33836D4B), UINT64_C(0xEC6C5C4324AFB557),
3847             UINT64_C(0xA0FE2D1CA0516A0F), UINT64_C(0x6FB8D73700D22ECC),
3848             UINT64_C(0xF1DE9077DAF1D7B3), UINT64_C(0xE4695F77D4C0C1EB) },
3849           { UINT64_C(0x5F0FD8A8B4375573), UINT64_C(0x762383595E50944F),
3850             UINT64_C(0x65EA2F28635CD76F), UINT64_C(0x0854776925FDE7B0),
3851             UINT64_C(0xB2345A2E51944304), UINT64_C(0x86EFA2F7A16C980D) } },
3852         { { UINT64_C(0x4CCBE2D0BF4D1D63), UINT64_C(0x32E33401397366D5),
3853             UINT64_C(0xC83AFDDE71BDA2CE), UINT64_C(0x8DACE2AC478ED9E6),
3854             UINT64_C(0x3AC6A559763FDD9E), UINT64_C(0x0FFDB04CB398558F) },
3855           { UINT64_C(0x6C1B99B2AFB9D6B8), UINT64_C(0x572BA39C27F815DD),
3856             UINT64_C(0x9DE73EE70DBCF842), UINT64_C(0x2A3ED58929267B88),
3857             UINT64_C(0xD46A7FD315EBBBB3), UINT64_C(0xD1D01863E29400C7) } },
3858         { { UINT64_C(0x8FB101D1E1F89EC5), UINT64_C(0xB87A1F53F8508042),
3859             UINT64_C(0x28C8DB240ED7BEEF), UINT64_C(0x3940F845ACE8660A),
3860             UINT64_C(0x4EACB619C6D453FD), UINT64_C(0x2E044C982BAD6160) },
3861           { UINT64_C(0x8792854880B16C02), UINT64_C(0xF0D4BEB3C0A9EB64),
3862             UINT64_C(0xD785B4AFC183C195), UINT64_C(0x23AAB0E65E6C46EA),
3863             UINT64_C(0x30F7E104A930FECA), UINT64_C(0x6A1A7B8BD55C10FB) } },
3864         { { UINT64_C(0xDA74EAEBDBFED1AA), UINT64_C(0xC8A59223DF0B025C),
3865             UINT64_C(0x7EF7DC85D5B627F7), UINT64_C(0x02A13AE1197D7624),
3866             UINT64_C(0x119E9BE12F785A9B), UINT64_C(0xC0B7572F00D6B219) },
3867           { UINT64_C(0x9B1E51266D4CAF30), UINT64_C(0xA16A51170A840BD1),
3868             UINT64_C(0x5BE17B910E9CCF43), UINT64_C(0x5BDBEDDD69CF2C9C),
3869             UINT64_C(0x9FFBFBCF4CF4F289), UINT64_C(0xE1A621836C355CE9) } },
3870         { { UINT64_C(0x056199D9A7B2FCCF), UINT64_C(0x51F2E7B6CE1D784E),
3871             UINT64_C(0xA1D09C47339E2FF0), UINT64_C(0xC8E64890B836D0A9),
3872             UINT64_C(0x2F781DCBC0D07EBE), UINT64_C(0x5CF3C2AD3ACF934C) },
3873           { UINT64_C(0xE55DB190A17E26AE), UINT64_C(0xC9C61E1F91245513),
3874             UINT64_C(0x83D7E6CF61998C15), UINT64_C(0x4DB33C85E41D38E3),
3875             UINT64_C(0x74D5F91DC2FEE43D), UINT64_C(0x7EBBDB4536BBC826) } },
3876         { { UINT64_C(0xE20EC7E9CB655A9D), UINT64_C(0x4977EB925C47D421),
3877             UINT64_C(0xA237E12C3B9D72FA), UINT64_C(0xCAAEDBC1CBF7B145),
3878             UINT64_C(0x5200F5B23B77AAA3), UINT64_C(0x32EDED55BDBE5380) },
3879           { UINT64_C(0x74E38A40E7C9B80A), UINT64_C(0x3A3F0CF8AB6DE911),
3880             UINT64_C(0x56DCDD7AAD16AAF0), UINT64_C(0x3D2924498E861D5E),
3881             UINT64_C(0xD6C61878985733E2), UINT64_C(0x2401FE7D6AA6CD5B) } },
3882         { { UINT64_C(0xABB3DC75B42E3686), UINT64_C(0xAE712419B4C57E61),
3883             UINT64_C(0x2C565F72B21B009B), UINT64_C(0xA5F1DA2E710C3699),
3884             UINT64_C(0x771099A0A5EBA59A), UINT64_C(0x4DA88F4AC10017A0) },
3885           { UINT64_C(0x987FFFD31927B56D), UINT64_C(0xB98CB8ECC4E33478),
3886             UINT64_C(0xB224A971C2248166), UINT64_C(0x5470F554DE1DC794),
3887             UINT64_C(0xD747CC24E31FF983), UINT64_C(0xB91745E9B5B22DAE) } },
3888         { { UINT64_C(0x6CCBFED072F34420), UINT64_C(0x95045E4DA53039D2),
3889             UINT64_C(0x3B6C11545A793944), UINT64_C(0xAA114145DDB6B799),
3890             UINT64_C(0xABC15CA4252B7637), UINT64_C(0x5745A35BA5744634) },
3891           { UINT64_C(0x05DC6BDEDA596FC0), UINT64_C(0xCD52C18CA8020881),
3892             UINT64_C(0x03FA9F47D296BAD0), UINT64_C(0xD8E2C1297268E139),
3893             UINT64_C(0x58C1A98D9EC450B0), UINT64_C(0x909638DADE48B20D) } },
3894         { { UINT64_C(0x7AFC30D49B7F8311), UINT64_C(0x82A0042242368EA3),
3895             UINT64_C(0xBFF951986F5F9865), UINT64_C(0x9B24F612FC0A070F),
3896             UINT64_C(0x22C06CF2620F489D), UINT64_C(0x3C7ED052780F7DBB) },
3897           { UINT64_C(0xDB87AB1834DAFE9B), UINT64_C(0x20C03B409C4BBCA1),
3898             UINT64_C(0x5D718CF059A42341), UINT64_C(0x9863170669E84538),
3899             UINT64_C(0x5557192BD27D64E1), UINT64_C(0x08B4EC52DA822766) } },
3900         { { UINT64_C(0xB2D986F6D66C1A59), UINT64_C(0x927DEB1678E0E423),
3901             UINT64_C(0x9E673CDE49C3DEDC), UINT64_C(0xFA362D84F7ECB6CF),
3902             UINT64_C(0x078E5F401BA17340), UINT64_C(0x934CA5D11F4E489C) },
3903           { UINT64_C(0xC03C073164EEF493), UINT64_C(0x631A353BD7931A7E),
3904             UINT64_C(0x8E7CC3BB65DD74F1), UINT64_C(0xD55864C5702676A5),
3905             UINT64_C(0x6D306AC4439F04BD), UINT64_C(0x58544F672BAFED57) } },
3906     },
3907     {
3908         { { UINT64_C(0xB083BA6AEC074AEA), UINT64_C(0x46FAC5EF7F0B505B),
3909             UINT64_C(0x95367A21FC82DC03), UINT64_C(0x227BE26A9D3679D8),
3910             UINT64_C(0xC70F6D6C7E9724C0), UINT64_C(0xCD68C757F9EBEC0F) },
3911           { UINT64_C(0x29DDE03E8FF321B2), UINT64_C(0xF84AD7BB031939DC),
3912             UINT64_C(0xDAF590C90F602F4B), UINT64_C(0x17C5288849722BC4),
3913             UINT64_C(0xA8DF99F0089B22B6), UINT64_C(0xC21BC5D4E59B9B90) } },
3914         { { UINT64_C(0x4936C6A08A31973F), UINT64_C(0x54D442FA83B8C205),
3915             UINT64_C(0x03AEE8B45714F2C6), UINT64_C(0x139BD6923F5AC25A),
3916             UINT64_C(0x6A2E42BAB5B33794), UINT64_C(0x50FA11643FF7BBA9) },
3917           { UINT64_C(0xB61D8643F7E2C099), UINT64_C(0x2366C993BD5C6637),
3918             UINT64_C(0x62110E1472EB77FA), UINT64_C(0x3D5B96F13B99C635),
3919             UINT64_C(0x956ECF64F674C9F2), UINT64_C(0xC56F7E51EF2BA250) } },
3920         { { UINT64_C(0x246FFCB6FF602C1B), UINT64_C(0x1E1A1D746E1258E0),
3921             UINT64_C(0xB4B43AE2250E6676), UINT64_C(0x95C1B5F0924CE5FA),
3922             UINT64_C(0x2555795BEBD8C776), UINT64_C(0x4C1E03DCACD9D9D0) },
3923           { UINT64_C(0xE1D74AA69CE90C61), UINT64_C(0xA88C0769A9C4B9F9),
3924             UINT64_C(0xDF74DF2795AF56DE), UINT64_C(0x24B10C5FB331B6F4),
3925             UINT64_C(0xB0A6DF9A6559E137), UINT64_C(0x6ACC1B8FC06637F2) } },
3926         { { UINT64_C(0xBD8C086834B4E381), UINT64_C(0x278CACC730DFF271),
3927             UINT64_C(0x87ED12DE02459389), UINT64_C(0x3F7D98FFDEF840B6),
3928             UINT64_C(0x71EEE0CB5F0B56E1), UINT64_C(0x462B5C9BD8D9BE87) },
3929           { UINT64_C(0xE6B50B5A98094C0F), UINT64_C(0x26F3B274508C67CE),
3930             UINT64_C(0x418B1BD17CB1F992), UINT64_C(0x607818ED4FF11827),
3931             UINT64_C(0xE630D93A9B042C63), UINT64_C(0x38B9EFF38C779AE3) } },
3932         { { UINT64_C(0xE8767D36729C5431), UINT64_C(0xA8BD07C0BB94642C),
3933             UINT64_C(0x0C11FC8E58F2E5B2), UINT64_C(0xD8912D48547533FE),
3934             UINT64_C(0xAAE14F5E230D91FB), UINT64_C(0xC122051A676DFBA0) },
3935           { UINT64_C(0x9ED4501F5EA93078), UINT64_C(0x2758515CBD4BEE0A),
3936             UINT64_C(0x97733C6C94D21F52), UINT64_C(0x139BCD6D4AD306A2),
3937             UINT64_C(0x0AAECBDC298123CC), UINT64_C(0x102B8A311CB7C7C9) } },
3938         { { UINT64_C(0x22A28E59FAF46675), UINT64_C(0x1075730810A31E7D),
3939             UINT64_C(0xC7EEAC842B4C2F4F), UINT64_C(0xBA370148B5EF5184),
3940             UINT64_C(0x4A5A28668732E055), UINT64_C(0x14B8DCDCB887C36F) },
3941           { UINT64_C(0xDBA8C85C433F093D), UINT64_C(0x73DF549D1C9A201C),
3942             UINT64_C(0x69AA0D7B70F927D8), UINT64_C(0xFA3A8685D7D2493A),
3943             UINT64_C(0x6F48A2550A7F4013), UINT64_C(0xD20C8BF9DD393067) } },
3944         { { UINT64_C(0x4EC874EA81625E78), UINT64_C(0x8B8D8B5A3FBE9267),
3945             UINT64_C(0xA3D9D1649421EC2F), UINT64_C(0x490E92D9880EA295),
3946             UINT64_C(0x745D1EDCD8F3B6DA), UINT64_C(0x0116628B8F18BA03) },
3947           { UINT64_C(0x0FF6BCE0834EADCE), UINT64_C(0x464697F2000827F7),
3948             UINT64_C(0x08DCCF84498D724E), UINT64_C(0x7896D3651E88304C),
3949             UINT64_C(0xE63EBCCE135E3622), UINT64_C(0xFB942E8EDC007521) } },
3950         { { UINT64_C(0xBB155A66A3688621), UINT64_C(0xED2FD7CDF91B52A3),
3951             UINT64_C(0x52798F5DEA20CB88), UINT64_C(0x069CE105373F7DD8),
3952             UINT64_C(0xF9392EC78CA78F6B), UINT64_C(0xB3013E256B335169) },
3953           { UINT64_C(0x1D92F8006B11715C), UINT64_C(0xADD4050EFF9DC464),
3954             UINT64_C(0x2AC226598465B84A), UINT64_C(0x2729D646465B2BD6),
3955             UINT64_C(0x6202344AE4EFF9DD), UINT64_C(0x51F3198FCD9B90B9) } },
3956         { { UINT64_C(0x17CE54EFE5F0AE1D), UINT64_C(0x984E8204B09852AF),
3957             UINT64_C(0x3365B37AC4B27A71), UINT64_C(0x720E3152A00E0A9C),
3958             UINT64_C(0x3692F70D925BD606), UINT64_C(0xBE6E699D7BC7E9AB) },
3959           { UINT64_C(0xD75C041F4C89A3C0), UINT64_C(0x8B9F592D8DC100C0),
3960             UINT64_C(0x30750F3AAD228F71), UINT64_C(0x1B9ECF84E8B17A11),
3961             UINT64_C(0xDF2025620FBFA8A2), UINT64_C(0x45C811FCAA1B6D67) } },
3962         { { UINT64_C(0xEC5B84B71A5151F8), UINT64_C(0x118E59E8550AB2D2),
3963             UINT64_C(0x2CCDEDA4049BD735), UINT64_C(0xC99CBA719CD62F0F),
3964             UINT64_C(0x69B8040A62C9E4F8), UINT64_C(0x16F1A31A110B8283) },
3965           { UINT64_C(0x53F6380298E908A3), UINT64_C(0x308CB6EFD862F9DE),
3966             UINT64_C(0xE185DAD8A521A95A), UINT64_C(0x4D8FE9A4097F75CA),
3967             UINT64_C(0xD1ECCEC71CA07D53), UINT64_C(0x13DFA1DC0DB07E83) } },
3968         { { UINT64_C(0xDDAF9DC60F591A76), UINT64_C(0xE1A6D7CC1685F412),
3969             UINT64_C(0x153DE557002B6E8D), UINT64_C(0x730C38BCC6DA37D9),
3970             UINT64_C(0xAE1806220914B597), UINT64_C(0x84F98103DD8C3A0A) },
3971           { UINT64_C(0x369C53988DA205B0), UINT64_C(0xA3D95B813888A720),
3972             UINT64_C(0x1F3F8BBFE10E2806), UINT64_C(0x48663DF54530D1F3),
3973             UINT64_C(0x320523B43E377713), UINT64_C(0xE8B1A575C7894814) } },
3974         { { UINT64_C(0x330668712EE8EA07), UINT64_C(0xC6FB4EC560DA199D),
3975             UINT64_C(0x33231860F4370A05), UINT64_C(0x7ABECE72C6DE4E26),
3976             UINT64_C(0xDE8D4BD8EBDECE7A), UINT64_C(0xC90EE6571CBE93C7) },
3977           { UINT64_C(0x0246751B85AC2509), UINT64_C(0xD0EF142C30380245),
3978             UINT64_C(0x086DF9C47C76E39C), UINT64_C(0x68F1304FB789FB56),
3979             UINT64_C(0x23E4CB98A5E4BD56), UINT64_C(0x69A4C63C64663DCA) } },
3980         { { UINT64_C(0x6C72B6AF7CB34E63), UINT64_C(0x073C40CD6DFC23FE),
3981             UINT64_C(0xBDEEE7A1C936693A), UINT64_C(0xBC858E806EFAD378),
3982             UINT64_C(0xEAD719FFF5BE55D4), UINT64_C(0xC8C3238F04552F5F) },
3983           { UINT64_C(0x0952C068928D5784), UINT64_C(0x89DFDF2294C58F2B),
3984             UINT64_C(0x332DEDF367502C50), UINT64_C(0x3ED2FA3AAC0BE258),
3985             UINT64_C(0xAEDC9B8A7C5C8244), UINT64_C(0x43A761B9DC0EA34F) } },
3986         { { UINT64_C(0x8FD683A2CC5E21A5), UINT64_C(0x5F444C6EFBA2BB68),
3987             UINT64_C(0x709ACD0EAF05586D), UINT64_C(0x8EFA54D2DE8FB348),
3988             UINT64_C(0x35276B7134CFE29E), UINT64_C(0x77A06FCD941EAC8C) },
3989           { UINT64_C(0x5815792D928322DD), UINT64_C(0x82FF356B67F7CB59),
3990             UINT64_C(0x71E40A78304980F4), UINT64_C(0xC8645C273667D021),
3991             UINT64_C(0xE785741CAEBAE28F), UINT64_C(0xB2C1BC7553ECAC37) } },
3992         { { UINT64_C(0x633EB24F1D0A74DB), UINT64_C(0xF1F55E56FA752512),
3993             UINT64_C(0x75FECA688EFE11DE), UINT64_C(0xC80FD91CE6BF19EC),
3994             UINT64_C(0xAD0BAFEC2A14C908), UINT64_C(0x4E1C4ACAADE4031F) },
3995           { UINT64_C(0x463A815B1EB1549A), UINT64_C(0x5AD4253C668F1298),
3996             UINT64_C(0x5CB3866238A37151), UINT64_C(0x34BB1CCFAFF16B96),
3997             UINT64_C(0xDCA93B13EE731AB0), UINT64_C(0x9F3CE5CC9BE01A0B) } },
3998         { { UINT64_C(0x75DB5723A110D331), UINT64_C(0x67C66F6A7123D89F),
3999             UINT64_C(0x27ABBD4B4009D570), UINT64_C(0xACDA6F84C73451BC),
4000             UINT64_C(0xE4B9A23905575ACF), UINT64_C(0x3C2DB7EFAB2D3D6C) },
4001           { UINT64_C(0x01CCDD0829115145), UINT64_C(0x9E0602FE57B5814A),
4002             UINT64_C(0x679B35C287862838), UINT64_C(0x0277DC4C38AD598D),
4003             UINT64_C(0xEF80A2136D896DD4), UINT64_C(0xC8812213E7B9047B) } },
4004     },
4005     {
4006         { { UINT64_C(0xAC6DBDF6EDC9CE62), UINT64_C(0xA58F5B440F9C006E),
4007             UINT64_C(0x16694DE3DC28E1B0), UINT64_C(0x2D039CF2A6647711),
4008             UINT64_C(0xA13BBE6FC5B08B4B), UINT64_C(0xE44DA93010EBD8CE) },
4009           { UINT64_C(0xCD47208719649A16), UINT64_C(0xE18F4E44683E5DF1),
4010             UINT64_C(0xB3F66303929BFA28), UINT64_C(0x7C378E43818249BF),
4011             UINT64_C(0x76068C80847F7CD9), UINT64_C(0xEE3DB6D1987EBA16) } },
4012         { { UINT64_C(0xCBBD8576C42A2F52), UINT64_C(0x9ACC6F709D2B06BB),
4013             UINT64_C(0xE5CB56202E6B72A4), UINT64_C(0x5738EA0E7C024443),
4014             UINT64_C(0x8ED06170B55368F3), UINT64_C(0xE54C99BB1AEED44F) },
4015           { UINT64_C(0x3D90A6B2E2E0D8B2), UINT64_C(0x21718977CF7B2856),
4016             UINT64_C(0x089093DCC5612AEC), UINT64_C(0xC272EF6F99C1BACC),
4017             UINT64_C(0x47DB3B43DC43EAAD), UINT64_C(0x730F30E40832D891) } },
4018         { { UINT64_C(0x9FFE55630C7FECDB), UINT64_C(0x55CC67B6F88101E5),
4019             UINT64_C(0x3039F981CBEFA3C7), UINT64_C(0x2AB06883667BFD64),
4020             UINT64_C(0x9007A2574340E3DF), UINT64_C(0x1AC3F3FA5A3A49CA) },
4021           { UINT64_C(0x9C7BE629C97E20FD), UINT64_C(0xF61823D3A3DAE003),
4022             UINT64_C(0xFFE7FF39E7380DBA), UINT64_C(0x620BB9B59FACC3B8),
4023             UINT64_C(0x2DDCB8CD31AE422C), UINT64_C(0x1DE3BCFAD12C3C43) } },
4024         { { UINT64_C(0x8C074946D6E0F9A9), UINT64_C(0x662FA99551C3B05B),
4025             UINT64_C(0x6CDAE96904BB2048), UINT64_C(0x6DEC9594D6DC8B60),
4026             UINT64_C(0x8D26586954438BBC), UINT64_C(0x88E983E31B0E95A5) },
4027           { UINT64_C(0x8189F11460CBF838), UINT64_C(0x77190697771DC46B),
4028             UINT64_C(0x775775A227F8EC1A), UINT64_C(0x7A125240607E3739),
4029             UINT64_C(0xAFAE84E74F793E4E), UINT64_C(0x44FA17F35BF5BAF4) } },
4030         { { UINT64_C(0xA21E69A5D03AC439), UINT64_C(0x2069C5FC88AA8094),
4031             UINT64_C(0xB041EEA78C08F206), UINT64_C(0x55B9D4613D65B8ED),
4032             UINT64_C(0x951EA25CD392C7C4), UINT64_C(0x4B9A1CEC9D166232) },
4033           { UINT64_C(0xC184FCD8FCF931A4), UINT64_C(0xBA59AD44063AD374),
4034             UINT64_C(0x1868AD2A1AA9796F), UINT64_C(0x38A34018DFF29832),
4035             UINT64_C(0x01FC880103DF8070), UINT64_C(0x1282CCE048DD334A) } },
4036         { { UINT64_C(0x76AA955726D8503C), UINT64_C(0xBE962B636BC3E3D0),
4037             UINT64_C(0xF5CA93E597DE8841), UINT64_C(0x1561B05EAF3F2C16),
4038             UINT64_C(0x34BE00AAD34BFF98), UINT64_C(0xEA21E6E9D23D2925) },
4039           { UINT64_C(0x55713230394C3AFB), UINT64_C(0xEAF0529BD6C8BECA),
4040             UINT64_C(0xFF38A743202B9A11), UINT64_C(0xA13E39FC6D3A398B),
4041             UINT64_C(0x8CBD644B86E2615A), UINT64_C(0x92063988191057EC) } },
4042         { { UINT64_C(0x787835CE13F89146), UINT64_C(0x7FCD42CC69446C3F),
4043             UINT64_C(0x0DA2AA98840E679D), UINT64_C(0x44F2052318779A1B),
4044             UINT64_C(0xE3A3B34FEFBF5935), UINT64_C(0xA5D2CFD0B9947B70) },
4045           { UINT64_C(0xAE2AF4EF27F4E16F), UINT64_C(0xA7FA70D2B9D21322),
4046             UINT64_C(0x68084919B3FD566B), UINT64_C(0xF04D71C8D7AAD6AB),
4047             UINT64_C(0xDBEA21E410BC4260), UINT64_C(0xAA7DC6658D949B42) } },
4048         { { UINT64_C(0xD8E958A06CCB8213), UINT64_C(0x118D9DB991900B54),
4049             UINT64_C(0x09BB9D4985E8CED6), UINT64_C(0x410E9FB524019281),
4050             UINT64_C(0x3B31B4E16D74C86E), UINT64_C(0x52BC0252020BB77D) },
4051           { UINT64_C(0x5616A26F27092CE4), UINT64_C(0x67774DBCA08F65CD),
4052             UINT64_C(0x560AD494C08BD569), UINT64_C(0xBE26DA36AD498783),
4053             UINT64_C(0x0276C8AB7F019C91), UINT64_C(0x09843ADA5248266E) } },
4054         { { UINT64_C(0xA0AE88A77D963CF2), UINT64_C(0x91EF8986D0E84920),
4055             UINT64_C(0xC7EFE344F8C58104), UINT64_C(0x0A25D9FDECA20773),
4056             UINT64_C(0x9D989FAA00D8F1D5), UINT64_C(0x4204C8CEC8B06264) },
4057           { UINT64_C(0x717C12E0BE1A2796), UINT64_C(0x1FA4BA8CC190C728),
4058             UINT64_C(0xA245CA8D8C8A59BA), UINT64_C(0xE3C374757672B935),
4059             UINT64_C(0x083D5E402E4D6375), UINT64_C(0x0B8D5AB35455E16E) } },
4060         { { UINT64_C(0x1DB17DBFEED765D4), UINT64_C(0xBBC9B1BEA5DDB965),
4061             UINT64_C(0x1948F76DDFC12ABC), UINT64_C(0x2C2714E5134EF489),
4062             UINT64_C(0x60CE2EE8741C600F), UINT64_C(0x32396F22F80E6E63) },
4063           { UINT64_C(0x421DAC7522537F59), UINT64_C(0x58FB73C649475DF5),
4064             UINT64_C(0x0ABF28856F18F1C7), UINT64_C(0x364744689A398D16),
4065             UINT64_C(0x87A661A7BF673B87), UINT64_C(0x3E80698F73819E17) } },
4066         { { UINT64_C(0xDFE4979353784CC4), UINT64_C(0x4280EAB0486D508F),
4067             UINT64_C(0x119593FFE534F5A4), UINT64_C(0x98AEFADD9F63242F),
4068             UINT64_C(0x9AE6A24AC4829CAE), UINT64_C(0xF2373CA558E8BA80) },
4069           { UINT64_C(0x4017AF7E51765FB3), UINT64_C(0xD1E40F7CAF4AEC4B),
4070             UINT64_C(0x87372C7A0898E3BC), UINT64_C(0x688982B285452CA9),
4071             UINT64_C(0x71E0B4BFB1E50BCA), UINT64_C(0x21FD2DBFF70E714A) } },
4072         { { UINT64_C(0xEE6E8820FB78DDAC), UINT64_C(0x0BAED29C063892CD),
4073             UINT64_C(0x5F33049C28C0588D), UINT64_C(0x90C2515E18DBC432),
4074             UINT64_C(0xB8A1B1433B4CB0BD), UINT64_C(0x0AB5C0C968103043) },
4075           { UINT64_C(0xF3788FA04005EC40), UINT64_C(0x82571C99039EE115),
4076             UINT64_C(0xEE8FCED593260BED), UINT64_C(0x5A9BAF7910836D18),
4077             UINT64_C(0x7C258B09C46AA4F6), UINT64_C(0x46ECC5E837F53D31) } },
4078         { { UINT64_C(0xFA32C0DCBFE0DD98), UINT64_C(0x66EFAFC4962B1066),
4079             UINT64_C(0xBA81D33E64BDF5EB), UINT64_C(0x36C28536FC7FC512),
4080             UINT64_C(0x0C95176BE0B4FA97), UINT64_C(0x47DDE29B3B9BC64A) },
4081           { UINT64_C(0x08D986FD5C173B36), UINT64_C(0x46D84B526CF3F28C),
4082             UINT64_C(0x6F6ED6C3F026BDB9), UINT64_C(0xAC90668B68206DC5),
4083             UINT64_C(0xE8ED5D98ECBE4E70), UINT64_C(0xCFFF61DDDC1A6974) } },
4084         { { UINT64_C(0xFF5C3A2977B1A5C1), UINT64_C(0x10C27E4A0DDF995D),
4085             UINT64_C(0xCB745F77E23363E3), UINT64_C(0xD765DF6F32F399A3),
4086             UINT64_C(0xF0CA0C2F8A99E109), UINT64_C(0xC3A6BFB71E025CA0) },
4087           { UINT64_C(0x830B2C0A4F9D9FA5), UINT64_C(0xAE914CACBD1A84E5),
4088             UINT64_C(0x30B35ED8A4FEBCC1), UINT64_C(0xCB902B4684CFBF2E),
4089             UINT64_C(0x0BD4762825FC6375), UINT64_C(0xA858A53C85509D04) } },
4090         { { UINT64_C(0x8B995D0C552E0A3F), UINT64_C(0xEDBD4E9417BE9FF7),
4091             UINT64_C(0x3432E83995085178), UINT64_C(0x0FE5C18180C256F5),
4092             UINT64_C(0x05A64EA8EBF9597C), UINT64_C(0x6ED44BB13F80371F) },
4093           { UINT64_C(0x6A29A05EFE4C12EE), UINT64_C(0x3E436A43E0BB83B3),
4094             UINT64_C(0x38365D9A74D72921), UINT64_C(0x3F5EE823C38E1ED7),
4095             UINT64_C(0x09A53213E8FA063F), UINT64_C(0x1E7FE47AB435E713) } },
4096         { { UINT64_C(0xE4D9BC94FDDD17F3), UINT64_C(0xC74B8FEDC1016C20),
4097             UINT64_C(0x095DE39BB49C060E), UINT64_C(0xDBCC67958AC0DF00),
4098             UINT64_C(0x4CF6BAEB1C34F4DF), UINT64_C(0x72C55C21E8390170) },
4099           { UINT64_C(0x4F17BFD2F6C48E79), UINT64_C(0x18BF4DA0017A80BA),
4100             UINT64_C(0xCF51D829BCF4B138), UINT64_C(0x598AEE5FF48F8B0D),
4101             UINT64_C(0x83FAEE5620F10809), UINT64_C(0x4615D4DC779F0850) } },
4102     },
4103     {
4104         { { UINT64_C(0x22313DEE5852B59B), UINT64_C(0x6F56C8E8B6A0B37F),
4105             UINT64_C(0x43D6EEAEA76EC380), UINT64_C(0xA16551360275AD36),
4106             UINT64_C(0xE5C1B65ADF095BDA), UINT64_C(0xBD1FFA8D367C44B0) },
4107           { UINT64_C(0xE2B419C26B48AF2B), UINT64_C(0x57BBBD973DA194C8),
4108             UINT64_C(0xB5FBE51FA2BAFF05), UINT64_C(0xA0594D706269B5D0),
4109             UINT64_C(0x0B07B70523E8D667), UINT64_C(0xAE1976B563E016E7) } },
4110         { { UINT64_C(0x2FDE4893FBECAAAE), UINT64_C(0x444346DE30332229),
4111             UINT64_C(0x157B8A5B09456ED5), UINT64_C(0x73606A7925797C6C),
4112             UINT64_C(0xA9D0F47C33C14C06), UINT64_C(0x7BC8962CFAF971CA) },
4113           { UINT64_C(0x6E763C5165909DFD), UINT64_C(0x1BBBE41B14A9BF42),
4114             UINT64_C(0xD95B7ECBC49E9EFC), UINT64_C(0x0C317927B38F2B59),
4115             UINT64_C(0x97912B53B3C397DB), UINT64_C(0xCB3879AA45C7ABC7) } },
4116         { { UINT64_C(0xCD81BDCF24359B81), UINT64_C(0x6FD326E2DB4C321C),
4117             UINT64_C(0x4CB0228BF8EBE39C), UINT64_C(0x496A9DCEB2CDD852),
4118             UINT64_C(0x0F115A1AD0E9B3AF), UINT64_C(0xAA08BF36D8EEEF8A) },
4119           { UINT64_C(0x5232A51506E5E739), UINT64_C(0x21FAE9D58407A551),
4120             UINT64_C(0x289D18B08994B4E8), UINT64_C(0xB4E346A809097A52),
4121             UINT64_C(0xC641510F324621D0), UINT64_C(0xC567FD4A95A41AB8) } },
4122         { { UINT64_C(0x261578C7D57C8DE9), UINT64_C(0xB9BC491F3836C5C8),
4123             UINT64_C(0x993266B414C8038F), UINT64_C(0xBACAD755FAA7CC39),
4124             UINT64_C(0x418C4DEFD69B7E27), UINT64_C(0x53FDC5CDAE751533) },
4125           { UINT64_C(0x6F3BD329C3EEA63A), UINT64_C(0xA7A22091E53DD29E),
4126             UINT64_C(0xB7164F73DC4C54EC), UINT64_C(0xCA66290D44D3D74E),
4127             UINT64_C(0xF77C62424C9EA511), UINT64_C(0x34337F551F714C49) } },
4128         { { UINT64_C(0x5ED2B216A64B6C4B), UINT64_C(0x1C38794F3AAE640D),
4129             UINT64_C(0x30BBAEE08905794F), UINT64_C(0x0D9EE41EC8699CFB),
4130             UINT64_C(0xAF38DAF2CF7B7C29), UINT64_C(0x0D6A05CA43E53513) },
4131           { UINT64_C(0xBE96C6442606AB56), UINT64_C(0x13E7A072E9EB9734),
4132             UINT64_C(0xF96694455FF50CD7), UINT64_C(0x68EF26B547DA6F1D),
4133             UINT64_C(0xF002873823687CB7), UINT64_C(0x5ED9C8766217C1CE) } },
4134         { { UINT64_C(0x423BA5130A3A9691), UINT64_C(0xF421B1E7B3179296),
4135             UINT64_C(0x6B51BCDB1A871E1B), UINT64_C(0x6E3BB5B5464E4300),
4136             UINT64_C(0x24171E2EFC6C54CC), UINT64_C(0xA9DFA947D3E58DC2) },
4137           { UINT64_C(0x175B33099DE9CFA7), UINT64_C(0x707B25292D1015DA),
4138             UINT64_C(0xCBB95F17993EA65A), UINT64_C(0x935150630447450D),
4139             UINT64_C(0x0F47B2051B2753C9), UINT64_C(0x4A0BAB14E7D427CF) } },
4140         { { UINT64_C(0xA39DEF39B5AA7CA1), UINT64_C(0x591CB173C47C33DF),
4141             UINT64_C(0xA09DAC796BBAB872), UINT64_C(0x3EF9D7CF7208BA2F),
4142             UINT64_C(0x3CC189317A0A34FC), UINT64_C(0xAE31C62BBCC3380F) },
4143           { UINT64_C(0xD72A67940287C0B4), UINT64_C(0x3373382C68E334F1),
4144             UINT64_C(0xD0310CA8BD20C6A6), UINT64_C(0xA2734B8742C033FD),
4145             UINT64_C(0xA5D390F18DCE4509), UINT64_C(0xFC84E74B3E1AFCB5) } },
4146         { { UINT64_C(0xB028334DF2CD8A9C), UINT64_C(0xB8719291570F76F6),
4147             UINT64_C(0x662A386E01065A2D), UINT64_C(0xDF1634CB53D940AE),
4148             UINT64_C(0x625A7B838F5B41F9), UINT64_C(0xA033E4FEEE6AA1B4) },
4149           { UINT64_C(0x51E9D4631E42BABB), UINT64_C(0x660BC2E40D388468),
4150             UINT64_C(0x3F702189FCBB114A), UINT64_C(0x6B46FE35B414CA78),
4151             UINT64_C(0x328F6CF24A57316B), UINT64_C(0x917423B5381AD156) } },
4152         { { UINT64_C(0xAC19306E5373A607), UINT64_C(0x471DF8E3191D0969),
4153             UINT64_C(0x380ADE35B9720D83), UINT64_C(0x7423FDF548F1FD5C),
4154             UINT64_C(0x8B090C9F49CABC95), UINT64_C(0xB768E8CDC9842F2F) },
4155           { UINT64_C(0x399F456DE56162D6), UINT64_C(0xBB6BA2404F326791),
4156             UINT64_C(0x8F4FBA3B342590BE), UINT64_C(0x053986B93DFB6B3E),
4157             UINT64_C(0xBB6739F1190C7425), UINT64_C(0x32D4A55332F7E95F) } },
4158         { { UINT64_C(0x0205A0EC0DDBFB21), UINT64_C(0x3010327D33AC3407),
4159             UINT64_C(0xCF2F4DB33348999B), UINT64_C(0x660DB9F41551604A),
4160             UINT64_C(0xC346C69A5D38D335), UINT64_C(0x64AAB3D338882479) },
4161           { UINT64_C(0xA096B5E76AE44403), UINT64_C(0x6B4C9571645F76CD),
4162             UINT64_C(0x72E1CD5F4711120F), UINT64_C(0x93EC42ACF27CC3E1),
4163             UINT64_C(0x2D18D004A72ABB12), UINT64_C(0x232E9568C9841A04) } },
4164         { { UINT64_C(0xFF01DB223CC7F908), UINT64_C(0x9F214F8FD13CDD3B),
4165             UINT64_C(0x38DADBB7E0B014B5), UINT64_C(0x2C548CCC94245C95),
4166             UINT64_C(0x714BE331809AFCE3), UINT64_C(0xBCC644109BFE957E) },
4167           { UINT64_C(0xC21C2D215B957F80), UINT64_C(0xBA2D4FDCBB8A4C42),
4168             UINT64_C(0xFA6CD4AF74817CEC), UINT64_C(0x9E7FB523C528EAD6),
4169             UINT64_C(0xAED781FF7714B10E), UINT64_C(0xB52BB59294F04455) } },
4170         { { UINT64_C(0xA578BD69868CC68B), UINT64_C(0xA40FDC8D603F2C08),
4171             UINT64_C(0x53D79BD12D81B042), UINT64_C(0x1B136AF3A7587EAB),
4172             UINT64_C(0x1ED4F939868A16DB), UINT64_C(0x775A61FBD0B98273) },
4173           { UINT64_C(0xBA5C12A6E56BEF8C), UINT64_C(0xF926CE52DDDC8595),
4174             UINT64_C(0xA13F5C8F586FE1F8), UINT64_C(0xEAC9F7F2060DBB54),
4175             UINT64_C(0x70C0AC3A51AF4342), UINT64_C(0xC16E303C79CDA450) } },
4176         { { UINT64_C(0xD0DADD6C8113F4EA), UINT64_C(0xF14E392207BDF09F),
4177             UINT64_C(0x3FE5E9C2AA7D877C), UINT64_C(0x9EA95C1948779264),
4178             UINT64_C(0xE93F65A74FCB8344), UINT64_C(0x9F40837E76D925A4) },
4179           { UINT64_C(0x0EA6DA3F8271FFC7), UINT64_C(0x557FA529CC8F9B19),
4180             UINT64_C(0x2613DBF178E6DDFD), UINT64_C(0x7A7523B836B1E954),
4181             UINT64_C(0x20EB3168406A87FB), UINT64_C(0x64C21C1403ABA56A) } },
4182         { { UINT64_C(0xE86C9C2DC032DD5F), UINT64_C(0x158CEB8E86F16A21),
4183             UINT64_C(0x0279FF5368326AF1), UINT64_C(0x1FFE2E2B59F12BA5),
4184             UINT64_C(0xD75A46DB86826D45), UINT64_C(0xE19B48411E33E6AC) },
4185           { UINT64_C(0x5F0CC5240E52991C), UINT64_C(0x645871F98B116286),
4186             UINT64_C(0xAB3B4B1EFCAEC5D3), UINT64_C(0x994C8DF051D0F698),
4187             UINT64_C(0x06F890AFE5D13040), UINT64_C(0x72D9DC235F96C7C2) } },
4188         { { UINT64_C(0x7C018DEEE7886A80), UINT64_C(0xFA2093308786E4A3),
4189             UINT64_C(0xCEC8E2A3A4415CA1), UINT64_C(0x5C736FC1CC83CC60),
4190             UINT64_C(0xFEF9788CF00C259F), UINT64_C(0xED5C01CBDD29A6AD) },
4191           { UINT64_C(0x87834A033E20825B), UINT64_C(0x13B1239D123F9358),
4192             UINT64_C(0x7E8869D0FBC286C1), UINT64_C(0xC4AB5AA324CE8609),
4193             UINT64_C(0x38716BEEB6349208), UINT64_C(0x0BDF4F99B322AE21) } },
4194         { { UINT64_C(0x6B97A2BF53E3494B), UINT64_C(0xA8AA05C570F7A13E),
4195             UINT64_C(0x209709C2F1305B51), UINT64_C(0x57B31888DAB76F2C),
4196             UINT64_C(0x75B2ECD7AA2A406A), UINT64_C(0x88801A00A35374A4) },
4197           { UINT64_C(0xE1458D1C45C0471B), UINT64_C(0x5760E306322C1AB0),
4198             UINT64_C(0x789A0AF1AD6AB0A6), UINT64_C(0x74398DE1F458B9CE),
4199             UINT64_C(0x1652FF9F32E0C65F), UINT64_C(0xFAF1F9D5FFFB3A52) } },
4200     },
4201     {
4202         { { UINT64_C(0xA05C751CD1D1B007), UINT64_C(0x016C213B0213E478),
4203             UINT64_C(0x9C56E26CF4C98FEE), UINT64_C(0x6084F8B9E7B3A7C7),
4204             UINT64_C(0xA0B042F6DECC1646), UINT64_C(0x4A6F3C1AFBF3A0BC) },
4205           { UINT64_C(0x94524C2C51C9F909), UINT64_C(0xF3B3AD403A6D3748),
4206             UINT64_C(0x18792D6E7CE1F9F5), UINT64_C(0x8EBC2FD7FC0C34FA),
4207             UINT64_C(0x032A9F41780A1693), UINT64_C(0x34F9801E56A60019) } },
4208         { { UINT64_C(0xB398290CF0DB3751), UINT64_C(0x01170580BA42C976),
4209             UINT64_C(0x3E71AA2956560B89), UINT64_C(0x80817AAC50E6647B),
4210             UINT64_C(0x35C833ADA0BE42DA), UINT64_C(0xFA3C6148F1BABA4E) },
4211           { UINT64_C(0xC57BE645CD8F6253), UINT64_C(0x77CEE46BC657AD0D),
4212             UINT64_C(0x830077310DEFD908), UINT64_C(0x92FE9BCE899CBA56),
4213             UINT64_C(0x48450EC4BCEFFB5A), UINT64_C(0xE615148DF2F5F4BF) } },
4214         { { UINT64_C(0xF55EDABB90B86166), UINT64_C(0x27F7D784075430A2),
4215             UINT64_C(0xF53E822B9BF17161), UINT64_C(0x4A5B3B93AFE808DC),
4216             UINT64_C(0x590BBBDED7272F55), UINT64_C(0x233D63FAEAEA79A1) },
4217           { UINT64_C(0xD7042BEAFE1EBA07), UINT64_C(0xD2B9AEA010750D7E),
4218             UINT64_C(0xD8D1E69031078AA5), UINT64_C(0x9E837F187E37BC8B),
4219             UINT64_C(0x9558FF4F85008975), UINT64_C(0x93EDB837421FE867) } },
4220         { { UINT64_C(0xAA6489DF83D55B5A), UINT64_C(0xEA092E4986BF27F7),
4221             UINT64_C(0x4D8943A95FA2EFEC), UINT64_C(0xC9BAAE53720E1A8C),
4222             UINT64_C(0xC055444B95A4F8A3), UINT64_C(0x93BD01E8A7C1206B) },
4223           { UINT64_C(0xD97765B6714A27DF), UINT64_C(0xD622D954193F1B16),
4224             UINT64_C(0x115CC35AF1503B15), UINT64_C(0x1DD5359FA9FA21F8),
4225             UINT64_C(0x197C32996DFED1F1), UINT64_C(0xDEE8B7C9F77F2679) } },
4226         { { UINT64_C(0x5405179F394FD855), UINT64_C(0xC9D6E24449FDFB33),
4227             UINT64_C(0x70EBCAB4BD903393), UINT64_C(0x0D3A3899A2C56780),
4228             UINT64_C(0x012C7256683D1A0A), UINT64_C(0xC688FC8880A48F3B) },
4229           { UINT64_C(0x180957546F7DF527), UINT64_C(0x9E339B4B71315D16),
4230             UINT64_C(0x90560C28A956BB12), UINT64_C(0x2BECEA60D42EEE8D),
4231             UINT64_C(0x82AEB9A750632653), UINT64_C(0xED34353EDFA5CD6A) } },
4232         { { UINT64_C(0x82154D2C91AECCE4), UINT64_C(0x312C60705041887F),
4233             UINT64_C(0xECF589F3FB9FBD71), UINT64_C(0x67660A7DB524BDE4),
4234             UINT64_C(0xE99B029D724ACF23), UINT64_C(0xDF06E4AF6D1CD891) },
4235           { UINT64_C(0x07806CB580EE304D), UINT64_C(0x0C70BB9F7443A8F8),
4236             UINT64_C(0x01EC341408B0830A), UINT64_C(0xFD7B63C35A81510B),
4237             UINT64_C(0xE90A0A39453B5F93), UINT64_C(0xAB700F8F9BC71725) } },
4238         { { UINT64_C(0x9401AEC2B9F00793), UINT64_C(0x064EC4F4B997F0BF),
4239             UINT64_C(0xDC0CC1FD849240C8), UINT64_C(0x39A75F37B6E92D72),
4240             UINT64_C(0xAA43CA5D0224A4AB), UINT64_C(0x9C4D632554614C47) },
4241           { UINT64_C(0x1767366FC6709DA3), UINT64_C(0xA6B482D123479232),
4242             UINT64_C(0x54DC6DDC84D63E85), UINT64_C(0x0ACCB5ADC99D3B9E),
4243             UINT64_C(0x211716BBE8AA3ABF), UINT64_C(0xD0FE25AD69EC6406) } },
4244         { { UINT64_C(0x0D5C1769DF85C705), UINT64_C(0x7086C93DA409DCD1),
4245             UINT64_C(0x9710839D0E8D75D8), UINT64_C(0x17B7DB75EBDD4177),
4246             UINT64_C(0xAF69EB58F649A809), UINT64_C(0x6EF19EA28A84E220) },
4247           { UINT64_C(0x36EB5C6665C278B2), UINT64_C(0xD2A1512881EA9D65),
4248             UINT64_C(0x4FCBA840769300AD), UINT64_C(0xC2052CCDC8E536E5),
4249             UINT64_C(0x9CAEE014AC263B8F), UINT64_C(0x56F7ED7AF9239663) } },
4250         { { UINT64_C(0xF6FA251FAC9E09E1), UINT64_C(0xA3775605955A2853),
4251             UINT64_C(0x977B8D21F2A4BD78), UINT64_C(0xF68AA7FF3E096410),
4252             UINT64_C(0x01AB055265F88419), UINT64_C(0xC4C8D77EBB93F64E) },
4253           { UINT64_C(0x718251113451FE64), UINT64_C(0xFA0F905B46F9BAF0),
4254             UINT64_C(0x79BE3BF3CA49EF1A), UINT64_C(0x831109B26CB02071),
4255             UINT64_C(0x765F935FC4DDBFE5), UINT64_C(0x6F99CD1480E5A3BA) } },
4256         { { UINT64_C(0xD2E8DA04234F91FF), UINT64_C(0x4DED4D6D813867AA),
4257             UINT64_C(0x3B50175DE0A0D945), UINT64_C(0x55AC74064EB78137),
4258             UINT64_C(0xE9FA7F6EE1D47730), UINT64_C(0x2C1715315CBF2176) },
4259           { UINT64_C(0xA521788F2BE7A47D), UINT64_C(0x95B15A273FCF1AB3),
4260             UINT64_C(0xAADA6401F28A946A), UINT64_C(0x628B2EF48B4E898B),
4261             UINT64_C(0x0E6F46296D6592CC), UINT64_C(0x997C7094A723CADD) } },
4262         { { UINT64_C(0x878BCE116AFE80C6), UINT64_C(0xA89ABC9D007BBA38),
4263             UINT64_C(0xB0C1F87BA7CC267F), UINT64_C(0x86D33B9D5104FF04),
4264             UINT64_C(0xB0504B1B2EF1BA42), UINT64_C(0x21693048B2827E88) },
4265           { UINT64_C(0x11F1CCD579CFCD14), UINT64_C(0x59C09FFA94AD227E),
4266             UINT64_C(0x95A4ADCB3EA91ACF), UINT64_C(0x1346238BB4370BAA),
4267             UINT64_C(0xB099D2023E1367B0), UINT64_C(0xCF5BBDE690F23CEA) } },
4268         { { UINT64_C(0x453299BBBCB3BE5E), UINT64_C(0x123C588E38E9FF97),
4269             UINT64_C(0x8C115DD9F6A2E521), UINT64_C(0x6E333C11FF7D4B98),
4270             UINT64_C(0x9DD061E5DA73E736), UINT64_C(0xC6AB7B3A5CA53056) },
4271           { UINT64_C(0xF1EF3EE35B30A76B), UINT64_C(0xADD6B44A961BA11F),
4272             UINT64_C(0x7BB00B752CA6E030), UINT64_C(0x270272E82FE270AD),
4273             UINT64_C(0x23BC6F4F241A9239), UINT64_C(0x88581E130BB94A94) } },
4274         { { UINT64_C(0xBD225A6924EEF67F), UINT64_C(0x7CFD96140412CEB7),
4275             UINT64_C(0xF6DE167999AC298E), UINT64_C(0xB20FD895ED6C3571),
4276             UINT64_C(0x03C73B7861836C56), UINT64_C(0xEE3C3A16ABA6CB34) },
4277           { UINT64_C(0x9E8C56674138408A), UINT64_C(0xEC25FCB12DD6EBDF),
4278             UINT64_C(0xC54C33FDDBBDF6E3), UINT64_C(0x93E0913B4A3C9DD4),
4279             UINT64_C(0x66D7D13535EDEED4), UINT64_C(0xD29A36C4453FB66E) } },
4280         { { UINT64_C(0x7F192F039F1943AF), UINT64_C(0x6488163F4E0B5FB0),
4281             UINT64_C(0x66A45C6953599226), UINT64_C(0x924E2E439AD15A73),
4282             UINT64_C(0x8B553DB742A99D76), UINT64_C(0x4BC6B53B0451F521) },
4283           { UINT64_C(0xC029B5EF101F8AD6), UINT64_C(0x6A4DA71CC507EED9),
4284             UINT64_C(0x3ADFAEC030BB22F3), UINT64_C(0x81BCAF7AB514F85B),
4285             UINT64_C(0x2E1E6EFF5A7E60D3), UINT64_C(0x5270ABC0AE39D42F) } },
4286         { { UINT64_C(0x86D56DEB3901F0F8), UINT64_C(0x1D0BC792EED5F650),
4287             UINT64_C(0x1A2DDFD8CA1114A3), UINT64_C(0x94ABF4B1F1DD316D),
4288             UINT64_C(0xF72179E43D9F18EF), UINT64_C(0x52A0921E9AA2CABF) },
4289           { UINT64_C(0xECDA9E27A7452883), UINT64_C(0x7E90850AAFD771B4),
4290             UINT64_C(0xD40F87EA9CC0465C), UINT64_C(0x8CFCB60A865CDA36),
4291             UINT64_C(0x3DBEC2CC7C650942), UINT64_C(0x071A4EE7E718CA9D) } },
4292         { { UINT64_C(0x73C0E4FF276AC5F3), UINT64_C(0xE7BA5A6ABDB97EA1),
4293             UINT64_C(0x638CA54EC5808398), UINT64_C(0x8258DC82413855E5),
4294             UINT64_C(0x35DDD2E957F07614), UINT64_C(0xF98DD6921DC13BF9) },
4295           { UINT64_C(0x3A4C0088F16DCD84), UINT64_C(0xF192EADD833D83F9),
4296             UINT64_C(0x3C26C931A6D61D29), UINT64_C(0x589FDD52DE0AD7A1),
4297             UINT64_C(0x7CD83DD20442D37F), UINT64_C(0x1E47E777403ECBFC) } },
4298     },
4299     {
4300         { { UINT64_C(0x2AF8ED8170D4D7BC), UINT64_C(0xABC3E15FB632435C),
4301             UINT64_C(0x4C0E726F78219356), UINT64_C(0x8C1962A1B87254C4),
4302             UINT64_C(0x30796A71C9E7691A), UINT64_C(0xD453EF19A75A12EE) },
4303           { UINT64_C(0x535F42C213AE4964), UINT64_C(0x86831C3C0DA9586A),
4304             UINT64_C(0xB7F1EF35E39A7A58), UINT64_C(0xA2789AE2D459B91A),
4305             UINT64_C(0xEADBCA7F02FD429D), UINT64_C(0x94F215D465290F57) } },
4306         { { UINT64_C(0x37ED2BE51CFB79AC), UINT64_C(0x801946F3E7AF84C3),
4307             UINT64_C(0xB061AD8AE77C2F00), UINT64_C(0xE87E1A9A44DE16A8),
4308             UINT64_C(0xDF4F57C87EE490FF), UINT64_C(0x4E793B49005993ED) },
4309           { UINT64_C(0xE1036387BCCB593F), UINT64_C(0xF174941195E09B80),
4310             UINT64_C(0x59CB20D15AB42F91), UINT64_C(0xA738A18DAC0FF033),
4311             UINT64_C(0xDA501A2E2AC1E7F4), UINT64_C(0x1B67EDA084D8A6E0) } },
4312         { { UINT64_C(0x1D27EFCE1080E90B), UINT64_C(0xA28152463FD01DC6),
4313             UINT64_C(0x99A3FB83CAA26D18), UINT64_C(0xD27E6133B82BABBE),
4314             UINT64_C(0x61030DFDD783DD60), UINT64_C(0x295A291373C78CB8) },
4315           { UINT64_C(0x8707A2CF68BE6A92), UINT64_C(0xC9C2FB98EEB3474A),
4316             UINT64_C(0x7C3FD412A2B176B8), UINT64_C(0xD5B52E2FC7202101),
4317             UINT64_C(0x24A63030F0A6D536), UINT64_C(0x05842DE304648EC0) } },
4318         { { UINT64_C(0x67477CDC30577AC9), UINT64_C(0x51DD9775244F92A8),
4319             UINT64_C(0x31FD60B9917EEC66), UINT64_C(0xACD95BD4D66C5C1D),
4320             UINT64_C(0x2E0551F3BF9508BA), UINT64_C(0x121168E1688CB243) },
4321           { UINT64_C(0x8C0397404540D230), UINT64_C(0xC4ED3CF6009ECDF9),
4322             UINT64_C(0x191825E144DB62AF), UINT64_C(0x3EE8ACABC4A030DA),
4323             UINT64_C(0x8AB154A894081504), UINT64_C(0x1FE09E4B486C9CD0) } },
4324         { { UINT64_C(0x512F82F9D113450B), UINT64_C(0x5878C9012DBC9197),
4325             UINT64_C(0xDB87412BE13F355B), UINT64_C(0x0A0A4A9B935B8A5E),
4326             UINT64_C(0x818587BDF25A5351), UINT64_C(0xE807931031E3D9C7) },
4327           { UINT64_C(0x8B1D47C7611BC1B1), UINT64_C(0x51722B5872A823F2),
4328             UINT64_C(0x6F97EE8A53B36B3E), UINT64_C(0x6E085AAC946DD453),
4329             UINT64_C(0x2EC5057DE65E6533), UINT64_C(0xF82D9D714BB18801) } },
4330         { { UINT64_C(0xAD81FA938BA5AA8E), UINT64_C(0x723E628E8F7AA69E),
4331             UINT64_C(0x0BA7C2DEEF35937C), UINT64_C(0x83A43EC56DECFB40),
4332             UINT64_C(0xF520F849E60C4F2D), UINT64_C(0x8260E8AE457E3B5E) },
4333           { UINT64_C(0x7CE874F0BF1D9ED7), UINT64_C(0x5FDE35537F1A5466),
4334             UINT64_C(0x5A63777C0C162DBB), UINT64_C(0x0FD04F8CDAD87289),
4335             UINT64_C(0xCA2D9E0E640761D5), UINT64_C(0x4615CFF838501ADB) } },
4336         { { UINT64_C(0x9422789B110B4A25), UINT64_C(0x5C26779F70AD8CC1),
4337             UINT64_C(0x4EE6A748EC4F1E14), UINT64_C(0xFB584A0D5C7AB5E0),
4338             UINT64_C(0xED1DCB0BFB21EE66), UINT64_C(0xDBED1F0011C6863C) },
4339           { UINT64_C(0xD2969269B1B1D187), UINT64_C(0xF7D0C3F2AFE964E6),
4340             UINT64_C(0xE05EE93F12BB865E), UINT64_C(0x1AFB7BEEED79118E),
4341             UINT64_C(0x220AF1380F0FE453), UINT64_C(0x1463AA1A52782AB9) } },
4342         { { UINT64_C(0x7C139D56D7DBE5F9), UINT64_C(0xFC16E6110B83685B),
4343             UINT64_C(0xFA723C029018463C), UINT64_C(0xC472458C840BF5D7),
4344             UINT64_C(0x4D8093590AF07591), UINT64_C(0x418D88303308DFD9) },
4345           { UINT64_C(0x9B381E040C365AE3), UINT64_C(0x3780BF33F8190FD1),
4346             UINT64_C(0x45397418DD03E854), UINT64_C(0xA95D030F4E51E491),
4347             UINT64_C(0x87C8C686E3286CEA), UINT64_C(0x01C773BF900B5F83) } },
4348         { { UINT64_C(0xDABE347578673B02), UINT64_C(0x4F0F25CEF6E7395E),
4349             UINT64_C(0x3117ABB9D181AD45), UINT64_C(0x4B559F88AA13DE0B),
4350             UINT64_C(0xFD8EFE78EA7C9745), UINT64_C(0x080600475DD21682) },
4351           { UINT64_C(0xC0F5DE4BD4C86FFC), UINT64_C(0x4BB14B1EF21AB6A2),
4352             UINT64_C(0xACB53A6CF50C1D12), UINT64_C(0x46AAC4505CC9162E),
4353             UINT64_C(0x049C51E02DE240B6), UINT64_C(0xBB2DC016E383C3B0) } },
4354         { { UINT64_C(0xA3C56AD28E438C92), UINT64_C(0x7C43F98FB2CEAF1A),
4355             UINT64_C(0x397C44F7E2150778), UINT64_C(0x48D17AB771A24131),
4356             UINT64_C(0xCC5138631E2ACDA9), UINT64_C(0x2C76A55EF0C9BAC9) },
4357           { UINT64_C(0x4D74CDCE7EA4BB7B), UINT64_C(0x834BD5BFB1B3C2BA),
4358             UINT64_C(0x46E2911ECCC310A4), UINT64_C(0xD3DE84AA0FC1BF13),
4359             UINT64_C(0x27F2892F80A03AD3), UINT64_C(0x85B476203BD2F08B) } },
4360         { { UINT64_C(0xAB1CB818567AF533), UINT64_C(0x273B4537BAC2705A),
4361             UINT64_C(0x133066C422C84AB6), UINT64_C(0xC3590DE64830BFC1),
4362             UINT64_C(0xEA2978695E4742D0), UINT64_C(0xF6D8C6944F3164C0) },
4363           { UINT64_C(0x09E85F3DC1249588), UINT64_C(0x6C2BB05D4EC64DF7),
4364             UINT64_C(0xD267115E8B78000F), UINT64_C(0x07C5D7AEC7E4A316),
4365             UINT64_C(0xCB1187BA4619E5BD), UINT64_C(0x57B1D4EFA43F7EEE) } },
4366         { { UINT64_C(0x3618891FC8176A96), UINT64_C(0x62C4B084E5808B97),
4367             UINT64_C(0xDE5585464DD95D6E), UINT64_C(0x27A8133E730B2EA4),
4368             UINT64_C(0xE07CEEC36AF318A0), UINT64_C(0x0ACC1286CE24FD2C) },
4369           { UINT64_C(0x8A48FE4ADD4D307C), UINT64_C(0x71A9BA9C18CDE0DA),
4370             UINT64_C(0x655E2B66D5D79747), UINT64_C(0x409FE856A79AEDC7),
4371             UINT64_C(0xC5A9F244D287E5CF), UINT64_C(0xCCE103844E82EC39) } },
4372         { { UINT64_C(0x00675BA7F25D364C), UINT64_C(0x7A7F162968D36BDF),
4373             UINT64_C(0x35EC468AA9E23F29), UINT64_C(0xF797AC502D926E6C),
4374             UINT64_C(0x639BA4534B4F4376), UINT64_C(0xD71B430F51FF9519) },
4375           { UINT64_C(0xB8C439EC2CF5635C), UINT64_C(0x0CE4C8D181980393),
4376             UINT64_C(0x4C5362A964123B15), UINT64_C(0x6E0421E0FFDCF096),
4377             UINT64_C(0x624A855F10D1F914), UINT64_C(0x7D8F3AB7614DCD29) } },
4378         { { UINT64_C(0xD9219ADAB3493CE0), UINT64_C(0x971B243A52F09AE5),
4379             UINT64_C(0xC16C9BF8E24E3674), UINT64_C(0x026D408DCE68C7CD),
4380             UINT64_C(0xF9B33DD9358209E3), UINT64_C(0x02D0595DF3B2A206) },
4381           { UINT64_C(0xBF99427160D15640), UINT64_C(0x6DA7A04E15B5466A),
4382             UINT64_C(0x03AA4ED81CADB50D), UINT64_C(0x1548F029129A4253),
4383             UINT64_C(0x41741F7EB842865A), UINT64_C(0x859FE0A4A3F88C98) } },
4384         { { UINT64_C(0x80DE085A05FD7553), UINT64_C(0x4A4AB91EB897566B),
4385             UINT64_C(0x33BCD4752F1C173F), UINT64_C(0x4E238896C100C013),
4386             UINT64_C(0x1C88500DD614B34B), UINT64_C(0x0401C5F6C3BA9E23) },
4387           { UINT64_C(0x8E8003C4D0AF0DE5), UINT64_C(0x19B1DFB59D0DCBB9),
4388             UINT64_C(0x4A3640A9EBEF7AB6), UINT64_C(0xEDAFD65B959B15F6),
4389             UINT64_C(0x8092EF7F7FB95821), UINT64_C(0xAB8DD52ECE2E45D1) } },
4390         { { UINT64_C(0xD1F2D6B8B9CFE6BF), UINT64_C(0x6358810B00073F6F),
4391             UINT64_C(0x5FCE5993D712106E), UINT64_C(0x5EE6B2711C024C91),
4392             UINT64_C(0xD0248FF5453DB663), UINT64_C(0xD6D81CB2ADB835E8) },
4393           { UINT64_C(0x8696CFECFDFCB4C7), UINT64_C(0x696B7FCB53BC9045),
4394             UINT64_C(0xAB4D3807DDA56981), UINT64_C(0x2F9980521E4B943B),
4395             UINT64_C(0x8AA76ADB166B7F18), UINT64_C(0x6393430152A2D7ED) } },
4396     },
4397     {
4398         { { UINT64_C(0xBBCCCE39A368EFF6), UINT64_C(0xD8CAABDF8CEB5C43),
4399             UINT64_C(0x9EAE35A5D2252FDA), UINT64_C(0xA8F4F20954E7DD49),
4400             UINT64_C(0xA56D72A6295100FD), UINT64_C(0x20FC1FE856767727) },
4401           { UINT64_C(0xBF60B2480BBAA5AB), UINT64_C(0xA4F3CE5A313911F2),
4402             UINT64_C(0xC2A67AD4B93DAB9C), UINT64_C(0x18CD0ED022D71F39),
4403             UINT64_C(0x04380C425F304DB2), UINT64_C(0x26420CBB6729C821) } },
4404         { { UINT64_C(0x26BD07D6BDFBCAE8), UINT64_C(0x10B5173FDF01A80A),
4405             UINT64_C(0xD831C5466798B96C), UINT64_C(0x1D6B41081D3F3859),
4406             UINT64_C(0x501D38EC991B9EC7), UINT64_C(0x26319283D78431A9) },
4407           { UINT64_C(0x8B85BAF7118B343C), UINT64_C(0x4696CDDD58DEF7D0),
4408             UINT64_C(0xEFC7C1107ACDCF58), UINT64_C(0xD9AF415C848D5842),
4409             UINT64_C(0x6B5A06BC0AC7FDAC), UINT64_C(0x7D623E0DA344319B) } },
4410         { { UINT64_C(0x4C0D78060C9D3547), UINT64_C(0x993F048DCF2AED47),
4411             UINT64_C(0x5217C453E4B57E22), UINT64_C(0xB4669E35F4172B28),
4412             UINT64_C(0x509A3CD049F999F8), UINT64_C(0xD19F863287C69D41) },
4413           { UINT64_C(0xE14D01E84C8FDED0), UINT64_C(0x342880FDEAFD9E1C),
4414             UINT64_C(0x0E17BFF270DC2BF0), UINT64_C(0x46560B7BC0186400),
4415             UINT64_C(0xE28C7B9C49A4DD34), UINT64_C(0x182119160F325D06) } },
4416         { { UINT64_C(0x46D70888D7E02E18), UINT64_C(0x7C806954D9F11FD9),
4417             UINT64_C(0xE4948FCA4FBEA271), UINT64_C(0x7D6C7765BD80A9DF),
4418             UINT64_C(0x1B470EA6F3871C71), UINT64_C(0xD62DE2448330A570) },
4419           { UINT64_C(0xDAECDDC1C659C3A7), UINT64_C(0x8621E513077F7AFC),
4420             UINT64_C(0x56C7CD84CAEEEF13), UINT64_C(0xC60C910FC685A356),
4421             UINT64_C(0xE68BC5C59DD93DDC), UINT64_C(0xD904E89FFEB64895) } },
4422         { { UINT64_C(0x75D874FB8BA7917A), UINT64_C(0x18FA7F53FD043BD4),
4423             UINT64_C(0x212A0AD71FC3979E), UINT64_C(0x5703A7D95D6EAC0E),
4424             UINT64_C(0x222F7188017DEAD5), UINT64_C(0x1EC687B70F6C1817) },
4425           { UINT64_C(0x23412FC3238BACB6), UINT64_C(0xB85D70E954CED154),
4426             UINT64_C(0xD4E06722BDA674D0), UINT64_C(0x3EA5F17836F5A0C2),
4427             UINT64_C(0x7E7D79CFF5C6D2CA), UINT64_C(0x1FFF94643DBB3C73) } },
4428         { { UINT64_C(0x916E19D0F163E4A8), UINT64_C(0x1E6740E71489DF17),
4429             UINT64_C(0x1EAF9723339F3A47), UINT64_C(0x22F0ED1A124B8DAD),
4430             UINT64_C(0x39C9166C49C3DD04), UINT64_C(0x628E7FD4CE1E9ACC) },
4431           { UINT64_C(0x124DDF2740031676), UINT64_C(0x002569391EDDB9BE),
4432             UINT64_C(0xD39E25E7D360B0DA), UINT64_C(0x6E3015A84AA6C4C9),
4433             UINT64_C(0xC6A2F643623EDA09), UINT64_C(0xBEFF2D1250AA99FB) } },
4434         { { UINT64_C(0x1FEEF7CE93EE8089), UINT64_C(0xC6B180BC252DD7BD),
4435             UINT64_C(0xA16FB20B1788F051), UINT64_C(0xD86FD392E046ED39),
4436             UINT64_C(0xDA0A36119378CE1D), UINT64_C(0x121EF3E7A5F7A61D) },
4437           { UINT64_C(0x94D2206192D13CAE), UINT64_C(0x5076046A77C72E08),
4438             UINT64_C(0xF18BC2337D2308B9), UINT64_C(0x004DB3C517F977B1),
4439             UINT64_C(0xD05AE3990471C11D), UINT64_C(0x86A2A55785CD1726) } },
4440         { { UINT64_C(0xB8D9B28672107804), UINT64_C(0xB5A7C4133303B79B),
4441             UINT64_C(0x927EEF785FA37DED), UINT64_C(0xA1C5CF1EAD67DABA),
4442             UINT64_C(0xAA5E3FB27360E7C7), UINT64_C(0x8354E61A0A0C0993) },
4443           { UINT64_C(0x2EC73AF97F5458CC), UINT64_C(0xDE4CB48848474325),
4444             UINT64_C(0x2DD134C77209BC69), UINT64_C(0xB70C5567451A2ABE),
4445             UINT64_C(0x2CD1B2008E293018), UINT64_C(0x15F8DA7AD33C0D72) } },
4446         { { UINT64_C(0x5DC386D0A8790657), UINT64_C(0xA4FDF676BC4D88BB),
4447             UINT64_C(0x1B21F38F48BC6C49), UINT64_C(0xCDCC7FAA543A7003),
4448             UINT64_C(0xEA97E7AA8C9CF72C), UINT64_C(0xA6B883F450D938A8) },
4449           { UINT64_C(0x51936F3AA3A10F27), UINT64_C(0x0170785FDECC76BF),
4450             UINT64_C(0x7539ECE1908C578A), UINT64_C(0x5D9C8A8E0F3E8C25),
4451             UINT64_C(0x8681B43B9E4717A7), UINT64_C(0x94F42507A9D83E39) } },
4452         { { UINT64_C(0xBBE11CA8A55ADDE7), UINT64_C(0x39E6F5CF3BC0896B),
4453             UINT64_C(0x1447314E1D2D8D94), UINT64_C(0x45B481255B012F8A),
4454             UINT64_C(0x41AD23FA08AD5283), UINT64_C(0x837243E241D13774) },
4455           { UINT64_C(0x1FC0BD9DBADCAA46), UINT64_C(0x8DF164ED26E84CAE),
4456             UINT64_C(0x8FF70EC041017176), UINT64_C(0x23AD4BCE5C848BA7),
4457             UINT64_C(0x89246FDE97A19CBB), UINT64_C(0xA5EF987B78397991) } },
4458         { { UINT64_C(0x111AF1B74757964D), UINT64_C(0x1D25D351DDBBF258),
4459             UINT64_C(0x4161E7767D2B06D6), UINT64_C(0x6EFD26911CAC0C5B),
4460             UINT64_C(0x633B95DB211BFAEB), UINT64_C(0x9BEDFA5AE2BDF701) },
4461           { UINT64_C(0xADAC2B0B73E099C8), UINT64_C(0x436F0023BFB16BFF),
4462             UINT64_C(0xB91B100230F55854), UINT64_C(0xAF6A2097F4C6C8B7),
4463             UINT64_C(0x3FF65CED3AD7B3D9), UINT64_C(0x6FA2626F330E56DF) } },
4464         { { UINT64_C(0x3D28BF2DFFCCFD07), UINT64_C(0x0514F6FFD989603B),
4465             UINT64_C(0xB95196295514787A), UINT64_C(0xA1848121C3DB4E9C),
4466             UINT64_C(0x47FE2E392A3D4595), UINT64_C(0x506F5D8211B73ED4) },
4467           { UINT64_C(0xA2257AE7A600D8BB), UINT64_C(0xD659DBD10F9F122C),
4468             UINT64_C(0xDB0FDC6764DF160F), UINT64_C(0xFF3793397CB19690),
4469             UINT64_C(0xDF4366B898E72EC1), UINT64_C(0x97E72BECDF437EB8) } },
4470         { { UINT64_C(0x81DCEA271C81E5D9), UINT64_C(0x7E1B6CDA6717FC49),
4471             UINT64_C(0xAA36B3B511EAE80D), UINT64_C(0x1306687C3CD7CBB3),
4472             UINT64_C(0xED670235C4E89064), UINT64_C(0x9D3B000958A94760) },
4473           { UINT64_C(0x5A64E158E6A6333C), UINT64_C(0x1A8B4A3649453203),
4474             UINT64_C(0xF1CAD7241F77CC21), UINT64_C(0x693EBB4B70518EF7),
4475             UINT64_C(0xFB47BD810F39C91A), UINT64_C(0xCFE63DA2FA4BC64B) } },
4476         { { UINT64_C(0x82C1C684EAA66108), UINT64_C(0xE32262184CFE79FC),
4477             UINT64_C(0x3F28B72B849C720E), UINT64_C(0x137FB3558FEE1CA8),
4478             UINT64_C(0x4D18A9CDE4F90C4E), UINT64_C(0xC0344227CC3E46FA) },
4479           { UINT64_C(0x4FD5C08E79CDA392), UINT64_C(0x65DB20DB8ADC87B5),
4480             UINT64_C(0x86F95D5B916C1B84), UINT64_C(0x7EDA387117BB2B7C),
4481             UINT64_C(0x18CCF7E7669A533B), UINT64_C(0x5E92421CECAD0E06) } },
4482         { { UINT64_C(0x26063E124174B08B), UINT64_C(0xE621D9BE70DE8E4D),
4483             UINT64_C(0xAEA0FD0F5ECDF350), UINT64_C(0x0D9F69E49C20E5C9),
4484             UINT64_C(0xD3DADEB90BBE2918), UINT64_C(0xD7B9B5DB58AA2F71) },
4485           { UINT64_C(0x7A971DD73364CAF8), UINT64_C(0x702616A3C25D4BE4),
4486             UINT64_C(0xA30F0FA1A9E30071), UINT64_C(0x98AB24385573BC69),
4487             UINT64_C(0xCBC63CDF6FEC2E22), UINT64_C(0x965F90EDCC901B9B) } },
4488         { { UINT64_C(0xD53B592D71E15BB3), UINT64_C(0x1F03C0E98820E0D0),
4489             UINT64_C(0xCE93947D3CCCB726), UINT64_C(0x2790FEE01D547590),
4490             UINT64_C(0x4401D847C59CDD7A), UINT64_C(0x72D69120A926DD9D) },
4491           { UINT64_C(0x38B8F21D4229F289), UINT64_C(0x9F412E407FE978AF),
4492             UINT64_C(0xAE07901BCDB59AF1), UINT64_C(0x1E6BE5EBD1D4715E),
4493             UINT64_C(0x3715BD8B18C96BEF), UINT64_C(0x4B71F6E6E11B3798) } },
4494     },
4495     {
4496         { { UINT64_C(0x11A8FDE5F0CE2DF4), UINT64_C(0xBC70CA3EFA8D26DF),
4497             UINT64_C(0x6818C275C74DFE82), UINT64_C(0x2B0294AC38373A50),
4498             UINT64_C(0x584C4061E8E5F88F), UINT64_C(0x1C05C1CA7342383A) },
4499           { UINT64_C(0x263895B3911430EC), UINT64_C(0xEF9B0032A5171453),
4500             UINT64_C(0x144359DA84DA7F0C), UINT64_C(0x76E3095A924A09F2),
4501             UINT64_C(0x612986E3D69AD835), UINT64_C(0x70E03ADA392122AF) } },
4502         { { UINT64_C(0xFEB707EE67AAD17B), UINT64_C(0xBB21B28783042995),
4503             UINT64_C(0x26DE16459A0D32BA), UINT64_C(0x9A2FF38A1FFB9266),
4504             UINT64_C(0x4E5AD96D8F578B4A), UINT64_C(0x26CC0655883E7443) },
4505           { UINT64_C(0x1D8EECAB2EE9367A), UINT64_C(0x42B84337881DE2F8),
4506             UINT64_C(0xE49B2FAED758AE41), UINT64_C(0x6A9A22904A85D867),
4507             UINT64_C(0x2FB89DCEE68CBA86), UINT64_C(0xBC2526357F09A982) } },
4508         { { UINT64_C(0xADC794368C61AAAC), UINT64_C(0x24C7FD135E926563),
4509             UINT64_C(0xEF9FAAA40406C129), UINT64_C(0xF4E6388C8B658D3C),
4510             UINT64_C(0x7262BEB41E435BAF), UINT64_C(0x3BF622CCFDAEAC99) },
4511           { UINT64_C(0xD359F7D84E1AEDDC), UINT64_C(0x05DC4F8CD78C17B7),
4512             UINT64_C(0xB18CF03229498BA5), UINT64_C(0xC67388CA85BF35AD),
4513             UINT64_C(0x8A7A6AA262AA4BC8), UINT64_C(0x0B8F458E72F4627A) } },
4514         { { UINT64_C(0x3FB812EEC68E4488), UINT64_C(0x53C5EAA460EF7281),
4515             UINT64_C(0xE57241838FBEFBE4), UINT64_C(0x2B7D49F4A4B24A05),
4516             UINT64_C(0x23B138D0710C0A43), UINT64_C(0x16A5B4C1A85EC1DB) },
4517           { UINT64_C(0x7CC1F3D7305FEB02), UINT64_C(0x52F7947D5B6C1B54),
4518             UINT64_C(0x1BDA23128F56981C), UINT64_C(0x68663EAEB4080A01),
4519             UINT64_C(0x8DD7BA7E9F999B7F), UINT64_C(0xD8768D19B686580C) } },
4520         { { UINT64_C(0xBCD0E0AD7AFDDA94), UINT64_C(0x95A0DBBE34A30687),
4521             UINT64_C(0xBBE3C3DF8C5E2665), UINT64_C(0x742BECD8EBF2BC16),
4522             UINT64_C(0x300CEB483FA163A6), UINT64_C(0x0C5D02EE4663354B) },
4523           { UINT64_C(0xE4FB9AD6B5E606A4), UINT64_C(0x93F507B8CF49FF95),
4524             UINT64_C(0x9406A90C585C193B), UINT64_C(0xAD1440C14ECF9517),
4525             UINT64_C(0x184CB4759CEA53F1), UINT64_C(0x6855C4748EF11302) } },
4526         { { UINT64_C(0x00ECB523EDCAFA52), UINT64_C(0x0DA0AE0E086F69D3),
4527             UINT64_C(0xC384DE15C242F347), UINT64_C(0xFB050E6E848C12B7),
4528             UINT64_C(0x22F6765464E015CE), UINT64_C(0xCBDC2A487CA122F2) },
4529           { UINT64_C(0xA940D973445FB02C), UINT64_C(0x00F31E783767D89D),
4530             UINT64_C(0x2B65A237613DABDD), UINT64_C(0x2BE0AB05C875AE09),
4531             UINT64_C(0xB22E54FDBA204F8E), UINT64_C(0x65E2029D0F7687B9) } },
4532         { { UINT64_C(0xFFD825381855A71C), UINT64_C(0x26A330B3438BD8D8),
4533             UINT64_C(0x89628311F9D8C5F9), UINT64_C(0x8D5FB9CF953738A0),
4534             UINT64_C(0xCB7159C9EDFCD4E5), UINT64_C(0xD64E52302064C7C2) },
4535           { UINT64_C(0xF858ED80689F3CFE), UINT64_C(0x4830E30956128B67),
4536             UINT64_C(0x2E1692DAE0E90688), UINT64_C(0xAB818913CA9CC232),
4537             UINT64_C(0xE2E30C23A5D229A6), UINT64_C(0xA544E8B10E740E23) } },
4538         { { UINT64_C(0x1C15E569DC61E6CC), UINT64_C(0x8FD7296758FC7800),
4539             UINT64_C(0xE61E7DB737A9DFC5), UINT64_C(0x3F34A9C65AFD7822),
4540             UINT64_C(0x0A11274219E80773), UINT64_C(0xA353460C4760FC58) },
4541           { UINT64_C(0x2FB7DEEBB3124C71), UINT64_C(0x484636272D4009CC),
4542             UINT64_C(0x399D1933C3A10370), UINT64_C(0x7EB1945054388DBD),
4543             UINT64_C(0x8ECCE6397C2A006A), UINT64_C(0x3D565DAF55C932A0) } },
4544         { { UINT64_C(0xCEF57A9FD9ADAE53), UINT64_C(0xE2EB27D7F83FD8CD),
4545             UINT64_C(0x4AC8F7199BBD2DDE), UINT64_C(0x604283AAE91ABFB7),
4546             UINT64_C(0xB6A4E11534799F87), UINT64_C(0x2B253224E4C2A8F3) },
4547           { UINT64_C(0xC34F8B92C8782294), UINT64_C(0xC74D697DFCC2CB6B),
4548             UINT64_C(0xD990411BC2C84C46), UINT64_C(0x2807B5C631EA4955),
4549             UINT64_C(0x14AE2B93B9EB27F5), UINT64_C(0xF0AE96A76163EDFA) } },
4550         { { UINT64_C(0xA7BDCBB442DB7180), UINT64_C(0xC9FAA41FEDCA752F),
4551             UINT64_C(0x147F91B4E820F401), UINT64_C(0x1E6CEF86F5F2645F),
4552             UINT64_C(0xB4AB4D7F31FE711D), UINT64_C(0xCE68FB3C743EF882) },
4553           { UINT64_C(0xB9D7D6823EF2FCFF), UINT64_C(0xF6893811020DCAFD),
4554             UINT64_C(0x30D9A50CBF81E760), UINT64_C(0x7F247D06B9B87228),
4555             UINT64_C(0x143D4FEC5F40CFC0), UINT64_C(0x21D78D73329B2A88) } },
4556         { { UINT64_C(0x06B3FF8AED3F2055), UINT64_C(0x50482C77522BE214),
4557             UINT64_C(0x8DF69CD8DDF54620), UINT64_C(0x6D1DB204F78A1165),
4558             UINT64_C(0x459AE4A29AFE6BF2), UINT64_C(0xC23A9FFD24AC871E) },
4559           { UINT64_C(0xB7FD22E389E85D81), UINT64_C(0x297F1F6B122E9978),
4560             UINT64_C(0xAB283D66144BE1CE), UINT64_C(0xC1F90AC2C00C614E),
4561             UINT64_C(0x5465576E3224CD09), UINT64_C(0x8E8D910D441B6059) } },
4562         { { UINT64_C(0xF73A060AAAA228BC), UINT64_C(0xCF1B078356EFF87D),
4563             UINT64_C(0x11EF17C0A54C9133), UINT64_C(0x9E476B1576A4DAA5),
4564             UINT64_C(0x5624FEAC8018FB92), UINT64_C(0x9826A0FCCFEEC1B9) },
4565           { UINT64_C(0xB732F7FE2DFE2046), UINT64_C(0x9260BD9F3B40DA6A),
4566             UINT64_C(0xCC9F908F4F231773), UINT64_C(0x4827FEB9DAFC0D55),
4567             UINT64_C(0x07D32E85538ACE95), UINT64_C(0xAD9F897CB8EDAF37) } },
4568         { { UINT64_C(0x2F75B82FE3415498), UINT64_C(0xF99CAC5FF1015F30),
4569             UINT64_C(0x766408247D7F25DE), UINT64_C(0x714BC9CDEE74C047),
4570             UINT64_C(0x70F847BF07448879), UINT64_C(0xA14481DE072165C0) },
4571           { UINT64_C(0x9BFA59E3DB1140A8), UINT64_C(0x7B9C7FF0FCD13502),
4572             UINT64_C(0xF4D7538E68459ABF), UINT64_C(0xED93A791C8FC6AD2),
4573             UINT64_C(0xA8BBE2A8B51BD9B2), UINT64_C(0x084B5A279FB34008) } },
4574         { { UINT64_C(0xB3BB9545EB138C84), UINT64_C(0x59C3489C3FC88BFD),
4575             UINT64_C(0x3A97FF6385F53EC7), UINT64_C(0x40FDF5A60AA69C3D),
4576             UINT64_C(0x0E8CCEC753D19668), UINT64_C(0x0AA72EF933FAA661) },
4577           { UINT64_C(0xF5C5A6CF9B1E684B), UINT64_C(0x630F937131A22EA1),
4578             UINT64_C(0x06B2AAC2AC60F7EA), UINT64_C(0xB181CAE25BC37D80),
4579             UINT64_C(0x4601A929247B13EA), UINT64_C(0x8A71C3865F739797) } },
4580         { { UINT64_C(0x545387B3AB134786), UINT64_C(0x3179BB061599B64A),
4581             UINT64_C(0xB0A6198607593574), UINT64_C(0xC7E39B2163FA7C3B),
4582             UINT64_C(0xA1173F8691585D13), UINT64_C(0x09D5CC8ECB9525CD) },
4583           { UINT64_C(0xAAD44FFD8F3A3451), UINT64_C(0x702B04F225820CC5),
4584             UINT64_C(0xE90CAC491CB66C17), UINT64_C(0x40F6B547EE161DC4),
4585             UINT64_C(0xC08BB8B41BA4AC4E), UINT64_C(0x7DC064FBAE5A6BC1) } },
4586         { { UINT64_C(0x90A5E8719D76DDC7), UINT64_C(0x39DC8FAEEDFC8E2E),
4587             UINT64_C(0x98467A235B079C62), UINT64_C(0xE25E378505450C98),
4588             UINT64_C(0x2FE23A4D96140083), UINT64_C(0x65CE3B9AE9900312) },
4589           { UINT64_C(0x1D87D0886B72B5D9), UINT64_C(0x72F53220FD9AFC82),
4590             UINT64_C(0xC63C7C159E1F71FA), UINT64_C(0x90DF26EA8D449637),
4591             UINT64_C(0x97089F40C1C2B215), UINT64_C(0x83AF266442317FAA) } },
4592     },
4593     {
4594         { { UINT64_C(0xFA2DB51A8D688E31), UINT64_C(0x225B696CA09C88D4),
4595             UINT64_C(0x9F88AF1D6059171F), UINT64_C(0x1C5FEA5E782A0993),
4596             UINT64_C(0xE0FB15884EC710D3), UINT64_C(0xFAF372E5D32CE365) },
4597           { UINT64_C(0xD9F896AB26506F45), UINT64_C(0x8D3503388373C724),
4598             UINT64_C(0x1B76992DCA6E7342), UINT64_C(0x76338FCA6FD0C08B),
4599             UINT64_C(0xC3EA4C65A00F5C23), UINT64_C(0xDFAB29B3B316B35B) } },
4600         { { UINT64_C(0x84E5541F483AEBF9), UINT64_C(0x8ADFF7DC49165772),
4601             UINT64_C(0xE0A43AD69BEAAD3C), UINT64_C(0x97DD1820F51C2714),
4602             UINT64_C(0xAC2B4CB457EA5B0C), UINT64_C(0x87DBD011D11767CA) },
4603           { UINT64_C(0x18CCF36CBFC7957A), UINT64_C(0xD4A088411BC79227),
4604             UINT64_C(0x9811CE43D8D292A8), UINT64_C(0x72C5FC68D58C4EE7),
4605             UINT64_C(0x5BC0F0BED35C65A7), UINT64_C(0x0B446DBCCBBF9669) } },
4606         { { UINT64_C(0x7EBA3DA69CEE9BCE), UINT64_C(0x3E2C1248D5377750),
4607             UINT64_C(0x8C917D982B93D8B2), UINT64_C(0xCA8FC6AC7CAD1F75),
4608             UINT64_C(0x5F581F19A0FF150A), UINT64_C(0x872CC14AE08327FA) },
4609           { UINT64_C(0xC774F187E9333188), UINT64_C(0x528ED4AC497AF7E8),
4610             UINT64_C(0xCE036E9B8AD72B10), UINT64_C(0x463F9EBB917986CF),
4611             UINT64_C(0xBE5163281325CF9B), UINT64_C(0xD28D5C50DD7E5FEA) } },
4612         { { UINT64_C(0x714C1D1BDD58BBE3), UINT64_C(0x85BA01AE039AFD0F),
4613             UINT64_C(0x7F23EA3A6951AC80), UINT64_C(0x5C599290AC00C837),
4614             UINT64_C(0xF6EFA2B3BF24CC1B), UINT64_C(0x393D8E421E84462B) },
4615           { UINT64_C(0x9BDA627DF8B89453), UINT64_C(0xE66FFF2EB23E0D1B),
4616             UINT64_C(0xD1EE7089C3B94EC2), UINT64_C(0xF75DBA6E3031699A),
4617             UINT64_C(0x8FF75F79242B2453), UINT64_C(0xE721EDEB289BFED4) } },
4618         { { UINT64_C(0x083215A1C1390FA8), UINT64_C(0x901D686A6DCE8CE0),
4619             UINT64_C(0x4AB1BA62837073FF), UINT64_C(0x10C287AA34BEABA5),
4620             UINT64_C(0xB4931AF446985239), UINT64_C(0x07639899B053C4DC) },
4621           { UINT64_C(0x29E7F44DE721EECD), UINT64_C(0x6581718257B3FF48),
4622             UINT64_C(0x198542E25054E2E0), UINT64_C(0x923C9E1584616DE8),
4623             UINT64_C(0x2A9C15E1AD465BB9), UINT64_C(0xD8D4EFC716319245) } },
4624         { { UINT64_C(0x72DC79439961A674), UINT64_C(0x839A0A52A0E13668),
4625             UINT64_C(0xD7A53FA9334945EA), UINT64_C(0xDB21DB77E7AA25DB),
4626             UINT64_C(0xB6675A7D66E96DA3), UINT64_C(0x2C31C406E66F33C0) },
4627           { UINT64_C(0x45020B626EC7B9CB), UINT64_C(0xFF46E9CD0391F267),
4628             UINT64_C(0x7DABD7440FA2F221), UINT64_C(0x9A32364B9D4A2A3E),
4629             UINT64_C(0xF0F84AE852D2E47A), UINT64_C(0xD0B872BB888F488A) } },
4630         { { UINT64_C(0x531E4CEFC9790EEF), UINT64_C(0xF7B5735E2B8D1A58),
4631             UINT64_C(0xB8882F1EEF568511), UINT64_C(0xAFB08D1C86A86DB3),
4632             UINT64_C(0x88CB9DF2F54DE8C7), UINT64_C(0xA44234F19A683282) },
4633           { UINT64_C(0xBC1B3D3AA6E9AB2E), UINT64_C(0xEFA071FB87FC99EE),
4634             UINT64_C(0xFA3C737DA102DC0F), UINT64_C(0xDF3248A6D6A0CBD2),
4635             UINT64_C(0x6E62A4FF1ECC1BF4), UINT64_C(0xF718F940C8F1BC17) } },
4636         { { UINT64_C(0x2C8B0AAD4F63F026), UINT64_C(0x2AFF623850B253CC),
4637             UINT64_C(0xCAB3E94210C4D122), UINT64_C(0x52B59F0407CD2816),
4638             UINT64_C(0x22322803982C41FC), UINT64_C(0x38844E668CF50B19) },
4639           { UINT64_C(0x42A959F7BE3264CD), UINT64_C(0xBDDC24BD6C983524),
4640             UINT64_C(0xA489EB0C462B8640), UINT64_C(0xB7C0509298029BE7),
4641             UINT64_C(0xD5546B5FA1ADDC64), UINT64_C(0xE7CAC1FCA0C655AF) } },
4642         { { UINT64_C(0x1454719847636F97), UINT64_C(0x6FA67481EBCDCCFF),
4643             UINT64_C(0xC164872F395D3258), UINT64_C(0xB8CECAFEEE6ACDBC),
4644             UINT64_C(0x3FBFE5F3A933F180), UINT64_C(0xEC20CAC2898C3B1E) },
4645           { UINT64_C(0x6A031BEE87DA73F9), UINT64_C(0xD1E667D15C5AF46E),
4646             UINT64_C(0xCB3DC1681DC6EEF9), UINT64_C(0x2DD1BD9433D310C0),
4647             UINT64_C(0x0F78D4939207E438), UINT64_C(0xC233D544A99C0E75) } },
4648         { { UINT64_C(0x228F19F19E2A0113), UINT64_C(0x58495BE50E1A5D37),
4649             UINT64_C(0x97E08F6938D7F364), UINT64_C(0x1EC3BA3E510759B0),
4650             UINT64_C(0x3682F19AE03CD40D), UINT64_C(0xC87745D8F9E16D68) },
4651           { UINT64_C(0xFD527AB509A642EA), UINT64_C(0x6308EEBDF9C81F27),
4652             UINT64_C(0xFA9F666C550C5D68), UINT64_C(0xDEBA436F584AB153),
4653             UINT64_C(0x1D4861D35B63E939), UINT64_C(0x073BED9BC9850221) } },
4654         { { UINT64_C(0x802BCCF08B171246), UINT64_C(0xFFF7D15A733B072F),
4655             UINT64_C(0xEA3862664CBFA4EF), UINT64_C(0x9E5B5073D635946B),
4656             UINT64_C(0x16E9A979FA81BE95), UINT64_C(0x41E8716EB14F701F) },
4657           { UINT64_C(0x25782E0F101A6719), UINT64_C(0x442C4875C9D66959),
4658             UINT64_C(0x52D845D92B85D153), UINT64_C(0xFF9251382E831117),
4659             UINT64_C(0x01B700CC8E02434B), UINT64_C(0xD2DB7F8EEC0BAE3E) } },
4660         { { UINT64_C(0x1B225300966A4872), UINT64_C(0x40C149BE566F537B),
4661             UINT64_C(0x3335F4D2CB680021), UINT64_C(0x773D0263778E5F5F),
4662             UINT64_C(0x1D9B7602666FA9ED), UINT64_C(0x52490A102E6200CF) },
4663           { UINT64_C(0x8434C7DD961F290B), UINT64_C(0x773AC15664456446),
4664             UINT64_C(0x5E2BB78947B712BB), UINT64_C(0xFD3BCBFDBE0974AD),
4665             UINT64_C(0x71AE9351791AD5D8), UINT64_C(0x1EE738BA6F4E1400) } },
4666         { { UINT64_C(0x2FA428AB0BE8E26E), UINT64_C(0xFEFF0600BB4CF9FC),
4667             UINT64_C(0x76F25CA9B2EA5FB0), UINT64_C(0xAB7FECF06835C5F4),
4668             UINT64_C(0x649D077219D5F328), UINT64_C(0xABE7B895ACBCB12E) },
4669           { UINT64_C(0xF2D1031AD69B1EA8), UINT64_C(0x46065D5DC60B0BBB),
4670             UINT64_C(0xB0908DC185D798FF), UINT64_C(0x4E2420F0D2C9B18A),
4671             UINT64_C(0x6B3A9BDDD30432A2), UINT64_C(0x501C3383C9B134AD) } },
4672         { { UINT64_C(0x608F096798A21284), UINT64_C(0x5361BE86059CCEDE),
4673             UINT64_C(0x3A40655CAFD87EF7), UINT64_C(0x03CF311759083AA2),
4674             UINT64_C(0x57DB5F61B6C366D9), UINT64_C(0x29DC275B6DD0D232) },
4675           { UINT64_C(0xBDAB24DD8FA67501), UINT64_C(0x5928F77565D08C37),
4676             UINT64_C(0x9448A856645D466A), UINT64_C(0x6E6B5E2EC0E927A5),
4677             UINT64_C(0xE884D546E80C6871), UINT64_C(0x10C881C953A9A851) } },
4678         { { UINT64_C(0x355053749B627AA5), UINT64_C(0xE7CA1B577976677B),
4679             UINT64_C(0x812397124976CE17), UINT64_C(0x96E9080B96DA31B9),
4680             UINT64_C(0x458254ABCC64AA1F), UINT64_C(0xFEFF682148E674C9) },
4681           { UINT64_C(0x8772F37A021F1488), UINT64_C(0x2E274E18AB56345C),
4682             UINT64_C(0x7C7BE61C29823B76), UINT64_C(0x275DB7B29EEFB39E),
4683             UINT64_C(0x83B10ED4BF5CBCEF), UINT64_C(0x40D7F5B4518E5183) } },
4684         { { UINT64_C(0x315CCC01F960B41B), UINT64_C(0x90B417C91D99E722),
4685             UINT64_C(0x84AFAA0D013463E0), UINT64_C(0xF133C5D813E6D9E1),
4686             UINT64_C(0xD95C6ADC525B7430), UINT64_C(0x082C61AD7A25106A) },
4687           { UINT64_C(0xABC1966DBA1CE179), UINT64_C(0xE0578B77A5DB529A),
4688             UINT64_C(0x10988C05EC84107D), UINT64_C(0xFCADE5D71B207F83),
4689             UINT64_C(0x0BEB6FDBC5BA83DB), UINT64_C(0x1C39B86D57537E34) } },
4690     },
4691     {
4692         { { UINT64_C(0x5B0B5D692A7AECED), UINT64_C(0x4C03450C01DC545F),
4693             UINT64_C(0x72AD0A4A404A3458), UINT64_C(0x1DE8E2559F467B60),
4694             UINT64_C(0xA4B3570590634809), UINT64_C(0x76F30205706F0178) },
4695           { UINT64_C(0x588D21AB4454F0E5), UINT64_C(0xD22DF54964134928),
4696             UINT64_C(0xF4E7E73D241BCD90), UINT64_C(0xB8D8A1D22FACC7CC),
4697             UINT64_C(0x483C35A71D25D2A0), UINT64_C(0x7F8D25451EF9F608) } },
4698         { { UINT64_C(0xCB51F03954EBC926), UINT64_C(0xE235D356B8D4A7BB),
4699             UINT64_C(0x93C8FAFAB41FE1A6), UINT64_C(0x6297701DA719F254),
4700             UINT64_C(0x6E9165BC644F5CDE), UINT64_C(0x6506329D0C11C542) },
4701           { UINT64_C(0xA2564809A92B4250), UINT64_C(0x0E9AC173889C2E3E),
4702             UINT64_C(0x286A592622B1D1BE), UINT64_C(0x86A3D7526ECDD041),
4703             UINT64_C(0x4B867E0A649F9524), UINT64_C(0x1FE7D95A0629CB0F) } },
4704         { { UINT64_C(0xF4F66843CA5BAF54), UINT64_C(0x298DB357EFE7DB78),
4705             UINT64_C(0xF607E86E7365712F), UINT64_C(0xD58822988A822BC0),
4706             UINT64_C(0x2CFBD63AC61299B3), UINT64_C(0x6F713D9B67167B1A) },
4707           { UINT64_C(0x750F673FDE0B077A), UINT64_C(0x07482708EE2178DA),
4708             UINT64_C(0x5E6D5BD169123C75), UINT64_C(0x6A93D1B6EAB99B37),
4709             UINT64_C(0x6EF4F7E68CAEC6A3), UINT64_C(0x7BE411D6CF3ED818) } },
4710         { { UINT64_C(0xF92B307363A0A7D2), UINT64_C(0x32DA431C881DC8CF),
4711             UINT64_C(0xE51BD5EDC578E3A3), UINT64_C(0xEFDA70D29587FA22),
4712             UINT64_C(0xCFEC17089B2EBA85), UINT64_C(0x6AB51A4BAF7BA530) },
4713           { UINT64_C(0x5AC155AE98174812), UINT64_C(0xCAF07A71CCB076E3),
4714             UINT64_C(0x280E86C2C38718A7), UINT64_C(0x9D12DE73D63745B7),
4715             UINT64_C(0x0E8EA855BF8A79AA), UINT64_C(0x5EB2BED8BD705BF7) } },
4716         { { UINT64_C(0x33FE9578AE16DE53), UINT64_C(0x3AE85EB510BEC902),
4717             UINT64_C(0xC4F4965844AF850E), UINT64_C(0x6EA222B3087DD658),
4718             UINT64_C(0xB255E6FDA51F1447), UINT64_C(0xB35E4997117E3F48) },
4719           { UINT64_C(0x562E813B05616CA1), UINT64_C(0xDF5925D68A61E156),
4720             UINT64_C(0xB2FA8125571C728B), UINT64_C(0x00864805A2F2D1CF),
4721             UINT64_C(0x2DC26F411BCCB6FF), UINT64_C(0xEBD5E09363AE37DD) } },
4722         { { UINT64_C(0xD2D68BB30A285611), UINT64_C(0x3EAE7596DC8378F2),
4723             UINT64_C(0x2DC6CCC66CC688A3), UINT64_C(0xC45E5713011F5DFB),
4724             UINT64_C(0x6B9C4F6C62D34487), UINT64_C(0xFAD6F0771FC65551) },
4725           { UINT64_C(0x5E3266E062B23B52), UINT64_C(0xF1DAF319E98F4715),
4726             UINT64_C(0x064D12EA3ED0AE83), UINT64_C(0x5CCF9326564125CB),
4727             UINT64_C(0x09057022C63C1E9F), UINT64_C(0x7171972CDC9B5D2E) } },
4728         { { UINT64_C(0x2364FD9AEABD21B2), UINT64_C(0x3CE5F4BB9174AD6D),
4729             UINT64_C(0xA4D6D5D0B38688C0), UINT64_C(0x2292A2D26D87FD7D),
4730             UINT64_C(0x2A7D1B534CA02E54), UINT64_C(0x7BEE6E7EB4185715) },
4731           { UINT64_C(0x73E546098FC63ACD), UINT64_C(0xF4D93A124064E09D),
4732             UINT64_C(0xD20E157A2B92DAA5), UINT64_C(0x90D125DBC4B81A00),
4733             UINT64_C(0xCB951C9E7682DE13), UINT64_C(0x1ABE58F427987545) } },
4734         { { UINT64_C(0x6D35164030C70C8D), UINT64_C(0x8047D811CE2361B8),
4735             UINT64_C(0x3F8B3D4FDF8E2C81), UINT64_C(0x5D59547733FA1F6C),
4736             UINT64_C(0xF769FE5AE29B8A91), UINT64_C(0x26F0E606D737B2A2) },
4737           { UINT64_C(0x70CBFA5DB8B31C6A), UINT64_C(0x0F883B4A863D3AEA),
4738             UINT64_C(0x156A4479E386AE2F), UINT64_C(0xA17A2FCDADE8A684),
4739             UINT64_C(0x78BDF958E2A7E335), UINT64_C(0xD1B4E6733B9E3041) } },
4740         { { UINT64_C(0x1EAF48EC449A6D11), UINT64_C(0x6B94B8E46D2FA7B9),
4741             UINT64_C(0x1D75D269728E4C1B), UINT64_C(0x91123819DD304E2C),
4742             UINT64_C(0x0B34CAE388804F4B), UINT64_C(0x2BA192FBC5495E9A) },
4743           { UINT64_C(0xC93FF6EFFF4D24BF), UINT64_C(0xF8C2C0B00342BA78),
4744             UINT64_C(0x8041F769831EB94C), UINT64_C(0x353100747782985E),
4745             UINT64_C(0xC755320B3AF84E83), UINT64_C(0x384B6D266F497E7F) } },
4746         { { UINT64_C(0xEF92CD5917E6BD17), UINT64_C(0xA087305BA426965C),
4747             UINT64_C(0x13895CE7AC47F773), UINT64_C(0xB85F2A9FE0BB2867),
4748             UINT64_C(0x2926E6AA7CD7C58E), UINT64_C(0xE544EDA6450459C5) },
4749           { UINT64_C(0x73DBC351B90A9849), UINT64_C(0x961183F6848EBE86),
4750             UINT64_C(0xC45BB21080534712), UINT64_C(0x379D08D7A654D9A3),
4751             UINT64_C(0x5B97CEF2BD3FFA9C), UINT64_C(0x0F469F34DDC2FCE5) } },
4752         { { UINT64_C(0x6D1461080642F38D), UINT64_C(0x055171A0D21EB887),
4753             UINT64_C(0x28DFFAB4D0DCEB28), UINT64_C(0x0D0E631298DE9CCD),
4754             UINT64_C(0x750A9156118C3C3F), UINT64_C(0x8C1F1390B049D799) },
4755           { UINT64_C(0xE4823858439607C5), UINT64_C(0x947E9BA05C111EAB),
4756             UINT64_C(0x39C95616A355DF2E), UINT64_C(0xF5F6B98E10E54BDA),
4757             UINT64_C(0xB0E0B33D142B876A), UINT64_C(0x71197D73EA18C90C) } },
4758         { { UINT64_C(0x36A5139DF52BE819), UINT64_C(0xF60DDF3429A45D2B),
4759             UINT64_C(0x0727EFECE9220E34), UINT64_C(0x431D33864EF7F446),
4760             UINT64_C(0xC3165A64FCC4962C), UINT64_C(0xB7D926E1D64362BB) },
4761           { UINT64_C(0x216BC61FD45F9350), UINT64_C(0xA974CB2FBBAED815),
4762             UINT64_C(0x31DF342D86FB2F76), UINT64_C(0x3AB67E0501D78314),
4763             UINT64_C(0x7AA951E0DEE33ED2), UINT64_C(0x318FBBBDCEC78D94) } },
4764         { { UINT64_C(0xAD7EFB65B8FE0204), UINT64_C(0x0432E1C5230AB7F7),
4765             UINT64_C(0x7563A62D9C967400), UINT64_C(0xD88B9C743524D4FF),
4766             UINT64_C(0x16A1991CF1A823E3), UINT64_C(0xCF2F9BFEFA6F0FFB) },
4767           { UINT64_C(0x55AAA946A50CA61F), UINT64_C(0x8CBBD3C8FED4CAB3),
4768             UINT64_C(0x03A0FAB87651365A), UINT64_C(0x46B5234B62DC3913),
4769             UINT64_C(0xFD875B28B558CBBD), UINT64_C(0xA48EC3AE11CEB361) } },
4770         { { UINT64_C(0x5DD131A1B3ADBD8B), UINT64_C(0xF9FBCA3A29B45EF8),
4771             UINT64_C(0x022048669341EE18), UINT64_C(0x8D13B89583BF9618),
4772             UINT64_C(0x0E395BAEE807459C), UINT64_C(0xB9C110CCB190E7DB) },
4773           { UINT64_C(0xA0DC345225D25063), UINT64_C(0x2FB78EC802371462),
4774             UINT64_C(0xC3A9E7BB8975C2D5), UINT64_C(0x9466687285A78264),
4775             UINT64_C(0x480D2CC28029AA92), UINT64_C(0x237086C75655726D) } },
4776         { { UINT64_C(0x197F14BB65EB9EEE), UINT64_C(0xFC93125C9F12E5FD),
4777             UINT64_C(0x9C20BC538BFBAE5E), UINT64_C(0xB35E21544BC053BA),
4778             UINT64_C(0xE5FA9CC721C3898E), UINT64_C(0x502D72FFD42F950F) },
4779           { UINT64_C(0x6812D38AD1EB8C31), UINT64_C(0x1F77F3F1080D30BB),
4780             UINT64_C(0x18D128335A8B1E98), UINT64_C(0x7FD39FA9299196CE),
4781             UINT64_C(0xFB8C9F11CF4ED6D6), UINT64_C(0x4C00F604D6363194) } },
4782         { { UINT64_C(0x5C8AFCF9FA2A21C2), UINT64_C(0x71CBF2821928D133),
4783             UINT64_C(0x56BEF28E42B29506), UINT64_C(0xAFBA250C70323DE2),
4784             UINT64_C(0x3FE208D17DED2C30), UINT64_C(0xBD2CD213CE9AA598) },
4785           { UINT64_C(0x52C5EC52CFEED070), UINT64_C(0x0A7223E7D3DA336B),
4786             UINT64_C(0x7156A4EDCE156B46), UINT64_C(0x9AF6C499ED7E6159),
4787             UINT64_C(0x9D7A679713C029AD), UINT64_C(0xE5B5C9249018DC77) } },
4788     },
4789     {
4790         { { UINT64_C(0x3F2EFF53DE1E4E55), UINT64_C(0x6B749943E4D3ECC4),
4791             UINT64_C(0xAF10B18A0DDE190D), UINT64_C(0xF491B98DA26B0409),
4792             UINT64_C(0x66080782A2B1D944), UINT64_C(0x59277DC697E8C541) },
4793           { UINT64_C(0xFDBFC5F6006F18AA), UINT64_C(0x435D165BFADD8BE1),
4794             UINT64_C(0x8E5D263857645EF4), UINT64_C(0x31BCFDA6A0258363),
4795             UINT64_C(0xF5330AB8D35D2503), UINT64_C(0xB71369F0C7CAB285) } },
4796         { { UINT64_C(0xE6A19DCC40ACC5A8), UINT64_C(0x1C3A1FF1DBC6DBF8),
4797             UINT64_C(0xB4D89B9FC6455613), UINT64_C(0x6CB0FE44A7390D0E),
4798             UINT64_C(0xADE197A459EA135A), UINT64_C(0xDA6AA86520680982) },
4799           { UINT64_C(0x03DB9BE95A442C1B), UINT64_C(0x221A2D732BFB93F2),
4800             UINT64_C(0x44DEE8D4753C196C), UINT64_C(0x59ADCC700B7C6FF5),
4801             UINT64_C(0xC6260EC24CA1B142), UINT64_C(0x4C3CB5C646CBD4F2) } },
4802         { { UINT64_C(0x8A15D6FEA417111F), UINT64_C(0xFE4A16BD71D93FCC),
4803             UINT64_C(0x7A7EE38C55BBE732), UINT64_C(0xEFF146A51FF94A9D),
4804             UINT64_C(0xE572D13EDD585AB5), UINT64_C(0xD879790E06491A5D) },
4805           { UINT64_C(0x9C84E1C52A58CB2E), UINT64_C(0xD79D13746C938630),
4806             UINT64_C(0xDB12CD9B385F06C7), UINT64_C(0x0C93EB977A7759C3),
4807             UINT64_C(0xF1F5B0FE683BD706), UINT64_C(0x541E4F7285EC3D50) } },
4808         { { UINT64_C(0x9A0E153581833608), UINT64_C(0x5CCE871E6E2833AC),
4809             UINT64_C(0xC17059EAFB29777C), UINT64_C(0x7E40E5FAE354CAFD),
4810             UINT64_C(0x9CF594054D07C371), UINT64_C(0x64CE36B2A71C3945) },
4811           { UINT64_C(0x69309E9656CAF487), UINT64_C(0x3D719E9F1AE3454B),
4812             UINT64_C(0xF2164070E25823B6), UINT64_C(0xEAD851BD0BC27359),
4813             UINT64_C(0x3D21BFE8B0925094), UINT64_C(0xA783B1E934A97F4E) } },
4814         { { UINT64_C(0x406B0C269546491A), UINT64_C(0x9E5E15E2F293C4E5),
4815             UINT64_C(0xC60D641315B164DB), UINT64_C(0x0DA46F530C75A78E),
4816             UINT64_C(0x7C599BB7EA0C656B), UINT64_C(0x0F07A5121B1A8122) },
4817           { UINT64_C(0x14C7204A15172686), UINT64_C(0x8FAEDFF85165625D),
4818             UINT64_C(0x20F260CE37AEDE40), UINT64_C(0xC81F771E8F357FFE),
4819             UINT64_C(0x25499197B0912557), UINT64_C(0x736197DC4C739C74) } },
4820         { { UINT64_C(0x6151BAB1381B3462), UINT64_C(0x27E5A07843DBD344),
4821             UINT64_C(0x2CB05BD6A1C3E9FB), UINT64_C(0x2A75976027CF2A11),
4822             UINT64_C(0x0ADCF9DBFF43E702), UINT64_C(0x4BBF03E21F484146) },
4823           { UINT64_C(0x0E74997F55B6521A), UINT64_C(0x15629231ADE17086),
4824             UINT64_C(0x7F143E867493FC58), UINT64_C(0x60869095AF8B9670),
4825             UINT64_C(0x482CFCD77E524869), UINT64_C(0x9E8060C31D454756) } },
4826         { { UINT64_C(0xE495747AC88B4D3B), UINT64_C(0xB7559835AE8A948F),
4827             UINT64_C(0x67EEF3A9DEB56853), UINT64_C(0x0E20E2699DEE5ADF),
4828             UINT64_C(0x9031AF6761F0A1AA), UINT64_C(0x76669D32683402BC) },
4829           { UINT64_C(0x90BD231306718B16), UINT64_C(0xE1B22A21864EFDAC),
4830             UINT64_C(0xE4FFE9096620089F), UINT64_C(0xB84C842E3428E2D9),
4831             UINT64_C(0x0E28C880FE3871FC), UINT64_C(0x8932F6983F21C200) } },
4832         { { UINT64_C(0x603F00CE6C90EA5D), UINT64_C(0x6473930740A2F693),
4833             UINT64_C(0xAF65148B2174E517), UINT64_C(0x162FC2CAF784AE74),
4834             UINT64_C(0x0D9A88254D5F6458), UINT64_C(0x0C2D586143AACE93) },
4835           { UINT64_C(0xBF1EADDE9F73CBFC), UINT64_C(0xDE9C34C09C68BBCA),
4836             UINT64_C(0x6D95602D67EF8A1A), UINT64_C(0x0AF2581BA791B241),
4837             UINT64_C(0x14F7736112CAD604), UINT64_C(0x19F2354DE2ACD1AD) } },
4838         { { UINT64_C(0x272F78F60D60F263), UINT64_C(0xE7A8F4AF208FD785),
4839             UINT64_C(0x10E191C636554F2C), UINT64_C(0x06D88551FD5CD0B3),
4840             UINT64_C(0x29BF856857069C27), UINT64_C(0x3CE7ECD828AA6FAD) },
4841           { UINT64_C(0x7D8A92D0E9F1A1D8), UINT64_C(0xD40C7FF8D30B5725),
4842             UINT64_C(0x16BE6CB2F54CAEB8), UINT64_C(0x14CA471A14CB0A91),
4843             UINT64_C(0xD5FF15B802733CAE), UINT64_C(0xCAF88D87DAA76580) } },
4844         { { UINT64_C(0x39430E222C046592), UINT64_C(0x6CDAE81F1AD26706),
4845             UINT64_C(0x8C102159A25D9106), UINT64_C(0x9A44057227CA9F30),
4846             UINT64_C(0x8D34C43070287FBC), UINT64_C(0x9003A45529DB8AFA) },
4847           { UINT64_C(0x91364CC37FD971AD), UINT64_C(0x7B3AA0489C60EDB7),
4848             UINT64_C(0x58B0E008526F4DD8), UINT64_C(0xB7674454D86D98AE),
4849             UINT64_C(0xC25F4051B2B45747), UINT64_C(0x8243BF9CCC043E8F) } },
4850         { { UINT64_C(0xA89641C643A0C387), UINT64_C(0x6D92205C87B9AB17),
4851             UINT64_C(0x37D691F4DAA0E102), UINT64_C(0xEB3E52D7CDE5312E),
4852             UINT64_C(0x60D3C09916F518A2), UINT64_C(0x7854C0518A378EEB) },
4853           { UINT64_C(0x7359DB514BBCAAC5), UINT64_C(0xF5B1B68C1713F102),
4854             UINT64_C(0xDAEAE645E4398DE5), UINT64_C(0x8C8ACB6CD1ABFB82),
4855             UINT64_C(0x2E8B76C3136423E2), UINT64_C(0x509DCB2DA8BA015E) } },
4856         { { UINT64_C(0x2FF368159AD9C59C), UINT64_C(0xB189A4E8658E65B9),
4857             UINT64_C(0x7D33DDBBEA786AD2), UINT64_C(0x96D0D648C0D2DC05),
4858             UINT64_C(0x05E49256BFA03BE9), UINT64_C(0x0EA4E7A68BAF5A1C) },
4859           { UINT64_C(0x3DDCE0B09F9AD5A8), UINT64_C(0xF78091959E49C2CB),
4860             UINT64_C(0xBFCEF29D21782C2F), UINT64_C(0xE57AD39FC41BFD97),
4861             UINT64_C(0xC04B93E81355AD19), UINT64_C(0xAABC9E6E59440F9F) } },
4862         { { UINT64_C(0x7AA481035B6459DA), UINT64_C(0x83EF74770166E880),
4863             UINT64_C(0x536182B1511CCE80), UINT64_C(0xAFDD2EEE73CA55AA),
4864             UINT64_C(0xAB910D0DA8716143), UINT64_C(0x8BEAA42B83707250) },
4865           { UINT64_C(0x4BCCFD898DA2AB3D), UINT64_C(0x1DBF68A9EC6AA105),
4866             UINT64_C(0x32CE610868EB42DA), UINT64_C(0x5C2C2C858EA62E37),
4867             UINT64_C(0x1ED2791FCD3088A7), UINT64_C(0x496B4FEBFF05070C) } },
4868         { { UINT64_C(0x9FA9121A0AA629C5), UINT64_C(0xE286CFF157558BEC),
4869             UINT64_C(0x4D9D657E59813A4D), UINT64_C(0xC4676A1626103519),
4870             UINT64_C(0x616160B32BD4DF80), UINT64_C(0x26FB78CC30FBAE87) },
4871           { UINT64_C(0x096070138F0F66BD), UINT64_C(0xDD4E2D0C03D9B90D),
4872             UINT64_C(0x5D3A8912600D1B12), UINT64_C(0xF76DD52F4308E126),
4873             UINT64_C(0x97CC04099E4FCCA6), UINT64_C(0x0CFBE31104C4DF7B) } },
4874         { { UINT64_C(0x6CA62C1228437A23), UINT64_C(0x0DAF335340E7A003),
4875             UINT64_C(0x1FD07DF0D20F8079), UINT64_C(0xEAE7969C3BBC9749),
4876             UINT64_C(0x55861AFA9ECAD022), UINT64_C(0xEC41DAD91FBC3D4C) },
4877           { UINT64_C(0x1FE4CB40DA8B261B), UINT64_C(0xC2671AB6427C5C9D),
4878             UINT64_C(0xDFCDA7B8261D4939), UINT64_C(0x9E7B802B2072C0B9),
4879             UINT64_C(0x3AFEE900C7828CC2), UINT64_C(0x3488BF28F6DE987F) } },
4880         { { UINT64_C(0x33B9F2DE7BE1F89E), UINT64_C(0xD4E80821299B15C9),
4881             UINT64_C(0x87A3067A0E13F37F), UINT64_C(0x6D4C09ED55FD239F),
4882             UINT64_C(0x48B1042D92EF014F), UINT64_C(0xA382B2E0B385A759) },
4883           { UINT64_C(0xBF571BB07F6F84F8), UINT64_C(0x25AFFA370CE87F50),
4884             UINT64_C(0x826906D3FE54F1BC), UINT64_C(0x6B0421F4C53AE76A),
4885             UINT64_C(0x44F85A3A4855EB3C), UINT64_C(0xF49E21518D1F2B27) } },
4886     },
4887     {
4888         { { UINT64_C(0xC0426B775E3C647B), UINT64_C(0xBFCBD9398CF05348),
4889             UINT64_C(0x31D312E3172C0D3D), UINT64_C(0x5F49FDE6EE754737),
4890             UINT64_C(0x895530F06DA7EE61), UINT64_C(0xCF281B0AE8B3A5FB) },
4891           { UINT64_C(0xFD14973541B8A543), UINT64_C(0x41A625A73080DD30),
4892             UINT64_C(0xE2BAAE07653908CF), UINT64_C(0xC3D01436BA02A278),
4893             UINT64_C(0xA0D0222E7B21B8F8), UINT64_C(0xFDC270E9D7EC1297) } },
4894         { { UINT64_C(0x06A67BD29F101E64), UINT64_C(0xCB6E0AC7E1733A4A),
4895             UINT64_C(0xEE0B5D5197BC62D2), UINT64_C(0x52B1703924C51874),
4896             UINT64_C(0xFED1F42382A1A0D5), UINT64_C(0x55D90569DB6270AC) },
4897           { UINT64_C(0x36BE4A9C5D73D533), UINT64_C(0xBE9266D6976ED4D5),
4898             UINT64_C(0xC17436D3B8F8074B), UINT64_C(0x3BB4D399718545C6),
4899             UINT64_C(0x8E1EA3555C757D21), UINT64_C(0xF7EDBC978C474366) } },
4900         { { UINT64_C(0xEC72C6506EA83242), UINT64_C(0xF7DE7BE51B2D237F),
4901             UINT64_C(0x3C5E22001819EFB0), UINT64_C(0xDF5AB6D68CDDE870),
4902             UINT64_C(0x75A44E9D92A87AEE), UINT64_C(0xBDDC46F4BCF77F19) },
4903           { UINT64_C(0x8191EFBD669B674D), UINT64_C(0x52884DF9ED71768F),
4904             UINT64_C(0xE62BE58265CF242C), UINT64_C(0xAE99A3B180B1D17B),
4905             UINT64_C(0x48CBB44692DE59A9), UINT64_C(0xD3C226CF2DCB3CE2) } },
4906         { { UINT64_C(0x9580CDFB9FD94EC4), UINT64_C(0xED273A6C28631AD9),
4907             UINT64_C(0x5D3D5F77C327F3E7), UINT64_C(0x05D5339C35353C5F),
4908             UINT64_C(0xC56FB5FE5C258EB1), UINT64_C(0xEFF8425EEDCE1F79) },
4909           { UINT64_C(0xAB7AA141CF83CF9C), UINT64_C(0xBD2A690A207D6D4F),
4910             UINT64_C(0xE1241491458D9E52), UINT64_C(0xDD2448CCAA7F0F31),
4911             UINT64_C(0xEC58D3C7F0FDA7AB), UINT64_C(0x7B6E122DC91BBA4D) } },
4912         { { UINT64_C(0x2A2DEDAFB1B48156), UINT64_C(0xA0A2C63ABB93DB87),
4913             UINT64_C(0xC655907808ACD99E), UINT64_C(0x03EA42AFFE4AC331),
4914             UINT64_C(0x43D2C14AEB180ED6), UINT64_C(0xC2F293DDB1156A1A) },
4915           { UINT64_C(0x1FAFABF5A9D81249), UINT64_C(0x39ADDEAD9A8EEE87),
4916             UINT64_C(0x21E206F2119E2E92), UINT64_C(0xBC5DCC2ED74DCEB6),
4917             UINT64_C(0x86647FA30A73A358), UINT64_C(0xEAD8BEA42F53F642) } },
4918         { { UINT64_C(0x636225F591C09091), UINT64_C(0xCCF5070A71BDCFDF),
4919             UINT64_C(0x0EF8D625B9668EE2), UINT64_C(0x57BDF6CDB5E04E4F),
4920             UINT64_C(0xFC6AB0A67C75EA43), UINT64_C(0xEB6B8AFBF7FD6EF3) },
4921           { UINT64_C(0x5B2AEEF02A3DF404), UINT64_C(0x31FD3B48B9823197),
4922             UINT64_C(0x56226DB683A7EB23), UINT64_C(0x3772C21E5BB1ED2F),
4923             UINT64_C(0x3E833624CD1ABA6A), UINT64_C(0xBAE58FFAAC672DAD) } },
4924         { { UINT64_C(0xCE92224D31BA1705), UINT64_C(0x022C6ED2F0197F63),
4925             UINT64_C(0x21F18D99A4DC1113), UINT64_C(0x5CD04DE803616BF1),
4926             UINT64_C(0x6F9006799FF12E08), UINT64_C(0xF59A331548E61DDF) },
4927           { UINT64_C(0x9474D42CB51BD024), UINT64_C(0x11A0A4139051E49D),
4928             UINT64_C(0x79C92705DCE70EDB), UINT64_C(0x113CE27834198426),
4929             UINT64_C(0x8978396FEA8616D2), UINT64_C(0x9A2A14D0EA894C36) } },
4930         { { UINT64_C(0x4F1E1254604F6E4A), UINT64_C(0x4513B0880187D585),
4931             UINT64_C(0x9022F25719E0F482), UINT64_C(0x51FB2A80E2239DBF),
4932             UINT64_C(0x49940D9E998ED9D5), UINT64_C(0x0583D2416C932C5D) },
4933           { UINT64_C(0x1188CEC8F25B73F7), UINT64_C(0xA28788CB3B3D06CD),
4934             UINT64_C(0xDEA194ECA083DB5A), UINT64_C(0xD93A4F7E22DF4272),
4935             UINT64_C(0x8D84E4BF6A009C49), UINT64_C(0x893D8DD93E3E4A9E) } },
4936         { { UINT64_C(0x35E909EA33D31160), UINT64_C(0x5020316857172F1E),
4937             UINT64_C(0x2707FC4451F3D866), UINT64_C(0xEB9D2018D2442A5D),
4938             UINT64_C(0x904D72095DBFE378), UINT64_C(0x6DB132A35F13CF77) },
4939           { UINT64_C(0x9D842BA67A3AF54B), UINT64_C(0x4E16EA195AA5B4F9),
4940             UINT64_C(0x2BBA457CAF24228E), UINT64_C(0xCC04B3BB16F3C5FE),
4941             UINT64_C(0xBAFAC51677E64944), UINT64_C(0x31580A34F08BCEE0) } },
4942         { { UINT64_C(0xC6808DEE20C30ACA), UINT64_C(0xDADD216FA3EA2056),
4943             UINT64_C(0xD331394E7A4A9F9D), UINT64_C(0x9E0441AD424C4026),
4944             UINT64_C(0xAEED102F0AEB5350), UINT64_C(0xC6697FBBD45B09DA) },
4945           { UINT64_C(0x52A2590EDEAC1496), UINT64_C(0x7142B831250B87AF),
4946             UINT64_C(0xBEF2E68B6D0784A8), UINT64_C(0x5F62593AA5F71CEF),
4947             UINT64_C(0x3B8F7616B5DA51A3), UINT64_C(0xC7A6FA0DB680F5FE) } },
4948         { { UINT64_C(0x36C21DE699C8227C), UINT64_C(0xBEE3E867C26813B1),
4949             UINT64_C(0x9B05F2E6BDD91549), UINT64_C(0x34FF2B1FA7D1110F),
4950             UINT64_C(0x8E6953B937F67FD0), UINT64_C(0x56C7F18BC3183E20) },
4951           { UINT64_C(0x48AF46DE9E2019ED), UINT64_C(0xDEAF972EF551BBBF),
4952             UINT64_C(0x88EE38F8CC5E3EEF), UINT64_C(0xFB8D7A44392D6BAF),
4953             UINT64_C(0x32293BFC0127187D), UINT64_C(0x7689E767E58647CC) } },
4954         { { UINT64_C(0x00CE901B52168013), UINT64_C(0xC6BF8E38837AAE71),
4955             UINT64_C(0xD6F11EFA167677D8), UINT64_C(0xE53BB48586C8E5CF),
4956             UINT64_C(0x671167CEC48E74AB), UINT64_C(0x8A40218C8AD720A7) },
4957           { UINT64_C(0x81E827A6E7C1191A), UINT64_C(0x54058F8DADDB153D),
4958             UINT64_C(0x0BAF29250D950FA2), UINT64_C(0xC244674D576DDA13),
4959             UINT64_C(0x8C4630AE41BCD13B), UINT64_C(0x6C2127BF5A077419) } },
4960         { { UINT64_C(0xCF977FD5A83C501F), UINT64_C(0xD7C6DF36B6AB176F),
4961             UINT64_C(0x117F6331397BC6B5), UINT64_C(0x72A6078BF7A2D491),
4962             UINT64_C(0xE5A2AAED5242FE2E), UINT64_C(0x88ECFFDCFEBDC212) },
4963           { UINT64_C(0xF2DBBF50CE33BA21), UINT64_C(0xE1343B76CEB19F07),
4964             UINT64_C(0x1F32D4C9D2C28F71), UINT64_C(0x93FC64B418587685),
4965             UINT64_C(0x39CEEF9BBA1F8BD1), UINT64_C(0x99C36A788D6D6BB0) } },
4966         { { UINT64_C(0x0D0638173E9561CF), UINT64_C(0x1D8646AA3D33704D),
4967             UINT64_C(0x8C4513847A08BA33), UINT64_C(0x96446BD3E02D6624),
4968             UINT64_C(0x749849F02D6F4166), UINT64_C(0xE364DA0114268BF0) },
4969           { UINT64_C(0x7CE4587E9AEBFCFD), UINT64_C(0xD468606456234393),
4970             UINT64_C(0x00231D5116DF73B2), UINT64_C(0xF6A969B77279C78C),
4971             UINT64_C(0x1FF1F6B66CB4117C), UINT64_C(0x30AEBC39D3EAB680) } },
4972         { { UINT64_C(0x5CC97E6493EF00B9), UINT64_C(0xDAE13841972345AE),
4973             UINT64_C(0x858391844788F43C), UINT64_C(0xD0FF521EE2E6CF3E),
4974             UINT64_C(0xAED14A5B4B707C86), UINT64_C(0x7EAAE4A6D2523CF7) },
4975           { UINT64_C(0x266472C5024C8AC6), UINT64_C(0xE47E1522C0170051),
4976             UINT64_C(0x7B83DA6173826BAE), UINT64_C(0xE97E19F5CF543F0D),
4977             UINT64_C(0x5D5248FA20BF38E2), UINT64_C(0x8A7C2F7DDF56A037) } },
4978         { { UINT64_C(0xB04659DD87B0526C), UINT64_C(0x593C604A2307565E),
4979             UINT64_C(0x49E522257C630AB8), UINT64_C(0x24C1D0C6DCE9CD23),
4980             UINT64_C(0x6FDB241C85177079), UINT64_C(0x5F521D19F250C351) },
4981           { UINT64_C(0xFB56134BA6FB61DF), UINT64_C(0xA4E70D69D75C07ED),
4982             UINT64_C(0xB7A824487D8825A8), UINT64_C(0xA3AEA7D4DD64BBCC),
4983             UINT64_C(0xD53E6E6C8692F539), UINT64_C(0x8DDDA83BF7AA4BC0) } },
4984     },
4985     {
4986         { { UINT64_C(0x140A0F9FDD93D50A), UINT64_C(0x4799FFDE83B7ABAC),
4987             UINT64_C(0x78FF7C2304A1F742), UINT64_C(0xC0568F51195BA34E),
4988             UINT64_C(0xE97183603B7F78B4), UINT64_C(0x9CFD1FF1F9EFAA53) },
4989           { UINT64_C(0xE924D2C5BB06022E), UINT64_C(0x9987FA86FAA2AF6D),
4990             UINT64_C(0x4B12E73F6EE37E0F), UINT64_C(0x1836FDFA5E5A1DDE),
4991             UINT64_C(0x7F1B92259DCD6416), UINT64_C(0xCB2C1B4D677544D8) } },
4992         { { UINT64_C(0x0254486D9C213D95), UINT64_C(0x68A9DB56CB2F6E94),
4993             UINT64_C(0xFB5858BA000F5491), UINT64_C(0x1315BDD934009FB6),
4994             UINT64_C(0xB18A8E0AC42BDE30), UINT64_C(0xFDCF93D1F1070358) },
4995           { UINT64_C(0xBEB1DB753022937E), UINT64_C(0x9B9ECA7ACAC20DB4),
4996             UINT64_C(0x152214D4E4122B20), UINT64_C(0xD3E673F2AABCCC7B),
4997             UINT64_C(0x94C50F64AED07571), UINT64_C(0xD767059AE66B4F17) } },
4998         { { UINT64_C(0x40336B12DCD6D14B), UINT64_C(0xF6BCFF5DE3B4919C),
4999             UINT64_C(0xC337048D9C841F0C), UINT64_C(0x4CE6D0251D617F50),
5000             UINT64_C(0x00FEF2198117D379), UINT64_C(0x18B7C4E9F95BE243) },
5001           { UINT64_C(0x98DE119E38DF08FF), UINT64_C(0xDFD803BD8D772D20),
5002             UINT64_C(0x94125B720F9678BD), UINT64_C(0xFC5B57CD334ACE30),
5003             UINT64_C(0x09486527B7E86E04), UINT64_C(0xFE9F8BCC6E552039) } },
5004         { { UINT64_C(0x3B75C45BD6F5A10E), UINT64_C(0xFD4680F4C1C35F38),
5005             UINT64_C(0x5450227DF8E0A113), UINT64_C(0x5E69F1AE73DDBA24),
5006             UINT64_C(0x2007B80E57F24645), UINT64_C(0xC63695DC3D159741) },
5007           { UINT64_C(0xCBE54D294530F623), UINT64_C(0x986AD5732869586B),
5008             UINT64_C(0xE19F70594CC39F73), UINT64_C(0x80F00AB32B1B8DA9),
5009             UINT64_C(0xB765AAF973F68D26), UINT64_C(0xBC79A394E993F829) } },
5010         { { UINT64_C(0x9C441043F310D2A0), UINT64_C(0x2865EE58DC5EB106),
5011             UINT64_C(0x71A959229CB8065C), UINT64_C(0x8EB3A733A052AF0F),
5012             UINT64_C(0x56009F42B09D716E), UINT64_C(0xA7F923C5ABCBE6AD) },
5013           { UINT64_C(0x263B7669FA375C01), UINT64_C(0x641C47E521EF27A2),
5014             UINT64_C(0xA89B474EB08FFD25), UINT64_C(0x5BE8EC3FF0A239F3),
5015             UINT64_C(0x0E79957A242A6C5A), UINT64_C(0x1DFB26D00C6C75F5) } },
5016         { { UINT64_C(0x2FD97B9B9DFBF22A), UINT64_C(0xDEC16CC85643532D),
5017             UINT64_C(0xDF0E6E3960FEE7C3), UINT64_C(0xD09AD7B6545860C8),
5018             UINT64_C(0xCC16E98473FC3B7C), UINT64_C(0x6CE734C10D4E1555) },
5019           { UINT64_C(0xC6EFE68B4B5F6032), UINT64_C(0x3A64F34C14F54073),
5020             UINT64_C(0x25DA689CAC44DC95), UINT64_C(0x990C477E5358AD8A),
5021             UINT64_C(0x00E958A5F36DA7DE), UINT64_C(0x902B7360C9B6F161) } },
5022         { { UINT64_C(0x454AB42C9347B90A), UINT64_C(0xCAEBE64AA698B02B),
5023             UINT64_C(0x119CDC69FB86FA40), UINT64_C(0x2E5CB7ADC3109281),
5024             UINT64_C(0x67BB1EC5CD0C3D00), UINT64_C(0x5D430BC783F25BBF) },
5025           { UINT64_C(0x69FD84A85CDE0ABB), UINT64_C(0x69DA263E9816B688),
5026             UINT64_C(0xE52D93DF0E53CBB8), UINT64_C(0x42CF6F25ADD2D5A7),
5027             UINT64_C(0x227BA59DC87CA88F), UINT64_C(0x7A1CA876DA738554) } },
5028         { { UINT64_C(0x3FA5C1051CAC82C4), UINT64_C(0x23C760878A78C9BE),
5029             UINT64_C(0xE98CDAD61C5CFA42), UINT64_C(0x09C302520A6C0421),
5030             UINT64_C(0x149BAC7C42FC61B9), UINT64_C(0x3A1C22AC3004A3E2) },
5031           { UINT64_C(0xDE6B0D6E202C7FED), UINT64_C(0xB2457377E7E63052),
5032             UINT64_C(0x31725FD43706B3EF), UINT64_C(0xE16A347D2B1AFDBF),
5033             UINT64_C(0xBE4850C48C29CF66), UINT64_C(0x8F51CC4D2939F23C) } },
5034         { { UINT64_C(0x169E025B219AE6C1), UINT64_C(0x55FF526F116E1CA1),
5035             UINT64_C(0x01B810A3B191F55D), UINT64_C(0x2D98127229588A69),
5036             UINT64_C(0x53C9377048B92199), UINT64_C(0x8C7DD84E8A85236F) },
5037           { UINT64_C(0x293D48B6CAACF958), UINT64_C(0x1F084ACB43572B30),
5038             UINT64_C(0x628BFA2DFAD91F28), UINT64_C(0x8D627B11829386AF),
5039             UINT64_C(0x3EC1DD00D44A77BE), UINT64_C(0x8D3B0D08649AC7F0) } },
5040         { { UINT64_C(0x00A93DAA177513BF), UINT64_C(0x2EF0B96F42AD79E1),
5041             UINT64_C(0x81F5AAF1A07129D9), UINT64_C(0xFC04B7EF923F2449),
5042             UINT64_C(0x855DA79560CDB1B7), UINT64_C(0xB1EB5DABAD5D61D4) },
5043           { UINT64_C(0xD2CEF1AE353FD028), UINT64_C(0xC21D54399EE94847),
5044             UINT64_C(0x9ED552BB0380C1A8), UINT64_C(0xB156FE7A2BAC328F),
5045             UINT64_C(0xBB7E01967213C6A4), UINT64_C(0x36002A331701ED5B) } },
5046         { { UINT64_C(0x20B1632ADDC9EF4D), UINT64_C(0x2A35FF4C272D082B),
5047             UINT64_C(0x30D39923F6CC9BD3), UINT64_C(0x6D879BC2E65C9D08),
5048             UINT64_C(0xCE8274E16FA9983C), UINT64_C(0x652371E80EB7424F) },
5049           { UINT64_C(0x32B77503C5C35282), UINT64_C(0xD7306333C885A931),
5050             UINT64_C(0x8A16D71972955AA8), UINT64_C(0x5548F1637D51F882),
5051             UINT64_C(0xB311DC66BABA59EF), UINT64_C(0x773D54480DB8F627) } },
5052         { { UINT64_C(0x59B1B1347A62EB3B), UINT64_C(0x0F8CE157CCEEFB34),
5053             UINT64_C(0x3FE842A8A798CB2B), UINT64_C(0xD01BC6260BF4161D),
5054             UINT64_C(0x55EF6E554D016FDB), UINT64_C(0xCB561503B242B201) },
5055           { UINT64_C(0x076EBC73AF4199C1), UINT64_C(0x39DEDCBB697244F7),
5056             UINT64_C(0x9D184733040162BC), UINT64_C(0x902992C17F6B5FA6),
5057             UINT64_C(0xAD1DE754BB4952B5), UINT64_C(0x7ACF1B93A121F6C8) } },
5058         { { UINT64_C(0x7A56867C325C9B9A), UINT64_C(0x1A143999F3DC3D6A),
5059             UINT64_C(0xCE10959003F5BCB8), UINT64_C(0x034E9035D6EEE5B7),
5060             UINT64_C(0x2AFA81C8495DF1BC), UINT64_C(0x5EAB52DC08924D02) },
5061           { UINT64_C(0xEE6AA014AA181904), UINT64_C(0xE62DEF09310AD621),
5062             UINT64_C(0x6C9792FCC7538A03), UINT64_C(0xA89D3E883E41D789),
5063             UINT64_C(0xD60FA11C9F94AE83), UINT64_C(0x5E16A8C2E0D6234A) } },
5064         { { UINT64_C(0x87EC053DA9242F3B), UINT64_C(0x99544637F0E03545),
5065             UINT64_C(0xEA0633FF6B7019E9), UINT64_C(0x8CB8AE0768DDDB5B),
5066             UINT64_C(0x892E7C841A811AC7), UINT64_C(0xC7EF19EB73664249) },
5067           { UINT64_C(0xD1B5819ACD1489E3), UINT64_C(0xF9C80FB0DE45D24A),
5068             UINT64_C(0x045C21A683BB7491), UINT64_C(0xA65325BE73F7A47D),
5069             UINT64_C(0x08D09F0E9C394F0C), UINT64_C(0xE7FB21C6268D4F08) } },
5070         { { UINT64_C(0xC4CCAB956CA95C18), UINT64_C(0x563FFD56BC42E040),
5071             UINT64_C(0xFA3C64D8E701C604), UINT64_C(0xC88D4426B0ABAFEE),
5072             UINT64_C(0x1A353E5E8542E4C3), UINT64_C(0x9A2D8B7CED726186) },
5073           { UINT64_C(0xD61CE19042D097FA), UINT64_C(0x6A63E280799A748B),
5074             UINT64_C(0x0F48D0633225486B), UINT64_C(0x848F8FE142A3C443),
5075             UINT64_C(0x2CCDE2508493CEF4), UINT64_C(0x5450A50845E77E7C) } },
5076         { { UINT64_C(0xD0F4E24803112816), UINT64_C(0xFCAD9DDBCCBE9E16),
5077             UINT64_C(0x177999BF5AE01EA0), UINT64_C(0xD20C78B9CE832DCE),
5078             UINT64_C(0x3CC694FB50C8C646), UINT64_C(0x24D75968C93D4887) },
5079           { UINT64_C(0x9F06366A87BC08AF), UINT64_C(0x59FAB50E7FD0DF2A),
5080             UINT64_C(0x5FFCC7F76C4CC234), UINT64_C(0x87198DD765F52D86),
5081             UINT64_C(0x5B9C94B0A855DF04), UINT64_C(0xD8BA6C738A067AD7) } },
5082     },
5083     {
5084         { { UINT64_C(0x9E9AF3151C4C9D90), UINT64_C(0x8665C5A9D12E0A89),
5085             UINT64_C(0x204ABD9258286493), UINT64_C(0x79959889B2E09205),
5086             UINT64_C(0x0C727A3DFE56B101), UINT64_C(0xF366244C8B657F26) },
5087           { UINT64_C(0xDE35D954CCA65BE2), UINT64_C(0x52EE1230B0FD41CE),
5088             UINT64_C(0xFA03261F36019FEE), UINT64_C(0xAFDA42D966511D8F),
5089             UINT64_C(0xF63211DD821148B9), UINT64_C(0x7B56AF7E6F13A3E1) } },
5090         { { UINT64_C(0x47FE47995913E184), UINT64_C(0x5BBE584C82145900),
5091             UINT64_C(0xB76CFA8B9A867173), UINT64_C(0x9BC87BF0514BF471),
5092             UINT64_C(0x37392DCE71DCF1FC), UINT64_C(0xEC3EFAE03AD1EFA8) },
5093           { UINT64_C(0xBBEA5A3414876451), UINT64_C(0x96E5F5436217090F),
5094             UINT64_C(0x5B3D4ECD9B1665A9), UINT64_C(0xE7B0DF26E329DF22),
5095             UINT64_C(0x18FB438E0BAA808D), UINT64_C(0x90757EBFDD516FAF) } },
5096         { { UINT64_C(0x1E6F9A95D5A98D68), UINT64_C(0x759EA7DF849DA828),
5097             UINT64_C(0x365D56256E8B4198), UINT64_C(0xE1B9C53B7A4A53F9),
5098             UINT64_C(0x55DC1D50E32B9B16), UINT64_C(0xA4657EBBBB6D5701) },
5099           { UINT64_C(0x4C270249EACC76E2), UINT64_C(0xBE49EC75162B1CC7),
5100             UINT64_C(0x19A95B610689902B), UINT64_C(0xDD5706BFA4CFC5A8),
5101             UINT64_C(0xD33BDB7314E5B424), UINT64_C(0x21311BD1E69EBA87) } },
5102         { { UINT64_C(0x75BA2F9B72A21ACC), UINT64_C(0x356688D4A28EDB4C),
5103             UINT64_C(0x3C339E0B610D080F), UINT64_C(0x614AC29333A99C2F),
5104             UINT64_C(0xA5E23AF2AA580AFF), UINT64_C(0xA6BCB860E1FDBA3A) },
5105           { UINT64_C(0xAA603365B43F9425), UINT64_C(0xAE8D7126F7EE4635),
5106             UINT64_C(0xA2B2524456330A32), UINT64_C(0xC396B5BB9E025AA3),
5107             UINT64_C(0xABBF77FAF8A0D5CF), UINT64_C(0xB322EE30EA31C83B) } },
5108         { { UINT64_C(0x048813847890E234), UINT64_C(0x387F1159672E70C6),
5109             UINT64_C(0x1468A6147B307F75), UINT64_C(0x56335B52ED85EC96),
5110             UINT64_C(0xDA1BB60FD45BCAE9), UINT64_C(0x4D94F3F0F9FAEADD) },
5111           { UINT64_C(0x6C6A7183FC78D86B), UINT64_C(0xA425B5C73018DEC6),
5112             UINT64_C(0xB1549C332D877399), UINT64_C(0x6C41C50C92B2BC37),
5113             UINT64_C(0x3A9F380C83EE0DDB), UINT64_C(0xDED5FEB6C4599E73) } },
5114         { { UINT64_C(0x14D34C210B7F8354), UINT64_C(0x1475A1CD9177CE45),
5115             UINT64_C(0x9F5F764A9B926E4B), UINT64_C(0x77260D1E05DD21FE),
5116             UINT64_C(0x3C882480C4B937F7), UINT64_C(0xC92DCD39722372F2) },
5117           { UINT64_C(0xF636A1BEEC6F657E), UINT64_C(0xB0E6C3121D30DD35),
5118             UINT64_C(0xFE4B0528E4654EFE), UINT64_C(0x1C4A682021D230D2),
5119             UINT64_C(0x615D2E4898FA45AB), UINT64_C(0x1F35D6D801FDBABF) } },
5120         { { UINT64_C(0xA636EEB83A7B10D1), UINT64_C(0x4E1AE352F4A29E73),
5121             UINT64_C(0x01704F5FE6BB1EC7), UINT64_C(0x75C04F720EF020AE),
5122             UINT64_C(0x448D8CEE5A31E6A6), UINT64_C(0xE40A9C29208F994B) },
5123           { UINT64_C(0x69E09A30FD8F9D5D), UINT64_C(0xE6A5F7EB449BAB7E),
5124             UINT64_C(0xF25BC18A2AA1768B), UINT64_C(0x9449E4043C841234),
5125             UINT64_C(0x7A3BF43E016A7BEF), UINT64_C(0xF25803E82A150B60) } },
5126         { { UINT64_C(0xE44A2A57B215F9E0), UINT64_C(0x38B34DCE19066F0A),
5127             UINT64_C(0x8BB91DAD40BB1BFB), UINT64_C(0x64C9F775E67735FC),
5128             UINT64_C(0xDE14241788D613CD), UINT64_C(0xC5014FF51901D88D) },
5129           { UINT64_C(0xA250341DF38116B0), UINT64_C(0xF96B9DD49D6CBCB2),
5130             UINT64_C(0x15EC6C7276B3FAC2), UINT64_C(0x88F1952F8124C1E9),
5131             UINT64_C(0x6B72F8EA975BE4F5), UINT64_C(0x23D288FF061F7530) } },
5132         { { UINT64_C(0xEBFE3E5FAFB96CE3), UINT64_C(0x2275EDFBB1979537),
5133             UINT64_C(0xC37AB9E8C97BA741), UINT64_C(0x446E4B1063D7C626),
5134             UINT64_C(0xB73E2DCED025EB02), UINT64_C(0x1F952B517669EEA7) },
5135           { UINT64_C(0xABDD00F66069A424), UINT64_C(0x1C0F9D9BDC298BFB),
5136             UINT64_C(0x831B1FD3EB757B33), UINT64_C(0xD7DBE18359D60B32),
5137             UINT64_C(0x663D1F369EF094B3), UINT64_C(0x1BD5732E67F7F11A) } },
5138         { { UINT64_C(0x3C7FB3F5C75D8892), UINT64_C(0x2CFF9A0CBA68DA69),
5139             UINT64_C(0x76455E8B60EC740B), UINT64_C(0x4B8D67FF167B88F0),
5140             UINT64_C(0xEDEC0C025A4186B1), UINT64_C(0x127C462DBEBF35AB) },
5141           { UINT64_C(0x9159C67E049430FC), UINT64_C(0x86B21DD2E7747320),
5142             UINT64_C(0x0E0E01520CF27B89), UINT64_C(0x705F28F5CD1316B6),
5143             UINT64_C(0x76751691BEAEA8A8), UINT64_C(0x4C73E282360C5B69) } },
5144         { { UINT64_C(0x46BCC0D5FD7B3D74), UINT64_C(0x6F13C20E0DC4F410),
5145             UINT64_C(0x98A1AF7D72F11CDF), UINT64_C(0x6099FD837928881C),
5146             UINT64_C(0x66976356371BB94B), UINT64_C(0x673FBA7219B945AB) },
5147           { UINT64_C(0xE4D8FA6EAED00700), UINT64_C(0xEA2313EC5C71A9F7),
5148             UINT64_C(0xF9ED8268F99D4AEA), UINT64_C(0xADD8916442AB59C7),
5149             UINT64_C(0xB37EB26F3F3A2D45), UINT64_C(0x0B39BD7AA924841E) } },
5150         { { UINT64_C(0xD811EB32E03CDBBB), UINT64_C(0x12055F1D7CC3610E),
5151             UINT64_C(0x6B23A1A0A9046E3F), UINT64_C(0x4D7121229DD4A749),
5152             UINT64_C(0xB0C2ACA1B1BF0AC3), UINT64_C(0x71EFF575C1B0432F) },
5153           { UINT64_C(0x6CD814922B44E285), UINT64_C(0x3088BD9CD87E8D20),
5154             UINT64_C(0xACE218E5F567E8FA), UINT64_C(0xB3FA0424CF90CBBB),
5155             UINT64_C(0xADBDA751770734D3), UINT64_C(0xBCD78BAD5AD6569A) } },
5156         { { UINT64_C(0xCADB31FA7F39641F), UINT64_C(0x3EF3E295825E5562),
5157             UINT64_C(0x4893C633F4094C64), UINT64_C(0x52F685F18ADDF432),
5158             UINT64_C(0x9FD887AB7FDC9373), UINT64_C(0x47A9ADA0E8680E8B) },
5159           { UINT64_C(0x579313B7F0CD44F6), UINT64_C(0xAC4B8668E188AE2E),
5160             UINT64_C(0x648F43698FB145BD), UINT64_C(0xE0460AB374629E31),
5161             UINT64_C(0xC25F28758FF2B05F), UINT64_C(0x4720C2B62D31EAEA) } },
5162         { { UINT64_C(0x4603CDF413D48F80), UINT64_C(0x9ADB50E2A49725DA),
5163             UINT64_C(0x8CD3305065DF63F0), UINT64_C(0x58D8B3BBCD643003),
5164             UINT64_C(0x170A4F4AB739826B), UINT64_C(0x857772B51EAD0E17) },
5165           { UINT64_C(0x01B78152E65320F1), UINT64_C(0xA6B4D845B7503FC0),
5166             UINT64_C(0x0F5089B93DD50798), UINT64_C(0x488F200F5690B6BE),
5167             UINT64_C(0x220B4ADF9E096F36), UINT64_C(0x474D7C9F8CE5BC7C) } },
5168         { { UINT64_C(0xFED8C058C745F8C9), UINT64_C(0xB683179E291262D1),
5169             UINT64_C(0x26ABD367D15EE88C), UINT64_C(0x29E8EED3F60A6249),
5170             UINT64_C(0xED6008BB1E02D6E1), UINT64_C(0xD82ECF4CA6B12B8D) },
5171           { UINT64_C(0x9929D021AAE4FA22), UINT64_C(0xBE4DEF14336A1AB3),
5172             UINT64_C(0x529B7E098C80A312), UINT64_C(0xB059188DEE0EB0CE),
5173             UINT64_C(0x1E42979A16DEAB7F), UINT64_C(0x2411034984EE9477) } },
5174         { { UINT64_C(0xD65246852BE579CC), UINT64_C(0x849316F1C456FDED),
5175             UINT64_C(0xC51B7DA42D1B67DA), UINT64_C(0xC25B539E41BC6D6A),
5176             UINT64_C(0xE3B7CCA3A9BF8BED), UINT64_C(0x813EF18C045C15E4) },
5177           { UINT64_C(0x5F3789A1697982C4), UINT64_C(0x4C1253698C435566),
5178             UINT64_C(0x00A7AE6EDC0A92C6), UINT64_C(0x1ABC929B2F64A053),
5179             UINT64_C(0xF4925C4C38666B44), UINT64_C(0xA81044B00F3DE7F6) } },
5180     },
5181     {
5182         { { UINT64_C(0xBCC88422C2EC3731), UINT64_C(0x78A3E4D410DC4EC2),
5183             UINT64_C(0x745DA1EF2571D6B1), UINT64_C(0xF01C2921739A956E),
5184             UINT64_C(0xEFFD8065E4BFFC16), UINT64_C(0x6EFE62A1F36FE72C) },
5185           { UINT64_C(0xF49E90D20F4629A4), UINT64_C(0xADD1DCC78CE646F4),
5186             UINT64_C(0xCB78B583B7240D91), UINT64_C(0x2E1A7C3C03F8387F),
5187             UINT64_C(0x16566C223200F2D9), UINT64_C(0x2361B14BAAF80A84) } },
5188         { { UINT64_C(0xDB1CFFD2B5733309), UINT64_C(0x24BC250B0F9DD939),
5189             UINT64_C(0xA4181E5AA3C1DB85), UINT64_C(0xE5183E51AC55D391),
5190             UINT64_C(0x2793D5EFEFD270D0), UINT64_C(0x7D56F63DC0631546) },
5191           { UINT64_C(0xECB40A590C1EE59D), UINT64_C(0xE613A9E4BB5BFA2C),
5192             UINT64_C(0xA89B14AB6C5830F9), UINT64_C(0x4DC477DCA03F201E),
5193             UINT64_C(0x5604F5DAC88C54F6), UINT64_C(0xD49264DC2ACFC66E) } },
5194         { { UINT64_C(0x283DD7F01C4DFA95), UINT64_C(0xB898CC2C62C0B160),
5195             UINT64_C(0xBA08C095870282AA), UINT64_C(0xB02B00D8F4E36324),
5196             UINT64_C(0x53AADDC0604CECF2), UINT64_C(0xF1F927D384DDD24E) },
5197           { UINT64_C(0x34BC00A0E2ABC9E1), UINT64_C(0x2DA1227D60289F88),
5198             UINT64_C(0x5228EAAACEF68F74), UINT64_C(0x40A790D23C029351),
5199             UINT64_C(0xE0E9AF5C8442E3B7), UINT64_C(0xA3214142A9F141E0) } },
5200         { { UINT64_C(0x72F4949EF9A58E3D), UINT64_C(0x738C700BA48660A6),
5201             UINT64_C(0x71B04726092A5805), UINT64_C(0xAD5C3C110F5CDB72),
5202             UINT64_C(0xD4951F9E554BFC49), UINT64_C(0xEE594EE56131EBE7) },
5203           { UINT64_C(0x37DA59F33C1AF0A9), UINT64_C(0xD7AFC73BCB040A63),
5204             UINT64_C(0xD020962A4D89FA65), UINT64_C(0x2610C61E71D824F5),
5205             UINT64_C(0x9C917DA73C050E31), UINT64_C(0x3840F92FE6E7EBFB) } },
5206         { { UINT64_C(0x50FBD7FE8D8B8CED), UINT64_C(0xC7282F7547D240AE),
5207             UINT64_C(0x79646A471930FF73), UINT64_C(0x2E0BAC4E2F7F5A77),
5208             UINT64_C(0x0EE44FA526127E0B), UINT64_C(0x678881B782BC2AA7) },
5209           { UINT64_C(0xB9E5D38467F5F497), UINT64_C(0x8F94A7D4A9B7106B),
5210             UINT64_C(0xBF7E0B079D329F68), UINT64_C(0x169B93EA45D192FB),
5211             UINT64_C(0xCCAA946720DBE8C0), UINT64_C(0xD4513A50938F9574) } },
5212         { { UINT64_C(0x841C96B4054CB874), UINT64_C(0xD75B1AF1A3C26834),
5213             UINT64_C(0x7237169DEE6575F0), UINT64_C(0xD71FC7E50322AADC),
5214             UINT64_C(0xD7A23F1E949E3A8E), UINT64_C(0x77E2D102DD31D8C7) },
5215           { UINT64_C(0x5AD69D09D10F5A1F), UINT64_C(0x526C9CB4B99D9A0B),
5216             UINT64_C(0x521BB10B972B237D), UINT64_C(0x1E4CD42FA326F342),
5217             UINT64_C(0x5BB6DB27F0F126CA), UINT64_C(0x587AF22CA4A515AD) } },
5218         { { UINT64_C(0x1123A531B12E542F), UINT64_C(0x1D01A64DB9EB2811),
5219             UINT64_C(0xA4A3515BF2D70F87), UINT64_C(0xFA205234B4BD0270),
5220             UINT64_C(0x74B818305EDA26B9), UINT64_C(0x9305D6E656578E75) },
5221           { UINT64_C(0xF38E69DE9F11BE19), UINT64_C(0x1E2A5C2344DBE89F),
5222             UINT64_C(0x1077E7BCFD286654), UINT64_C(0xD36698940FCA4741),
5223             UINT64_C(0x893BF904278F8497), UINT64_C(0xD6AC5F83EB3E14F4) } },
5224         { { UINT64_C(0x327B9DAB488F5F74), UINT64_C(0x2B44F4B8CAB7364F),
5225             UINT64_C(0xB4A6D22D19B6C6BD), UINT64_C(0xA087E613FC77CD3E),
5226             UINT64_C(0x4558E327B0B49BC7), UINT64_C(0x188805BECD835D35) },
5227           { UINT64_C(0x592F293CC1DC1007), UINT64_C(0xFAEE660F6AF02B44),
5228             UINT64_C(0x5BFBB3BF904035F2), UINT64_C(0xD7C9AE6079C07E70),
5229             UINT64_C(0xC5287DD4234896C2), UINT64_C(0xC4CE4523CB0E4121) } },
5230         { { UINT64_C(0x3626B40658344831), UINT64_C(0xABCCE3568E55C984),
5231             UINT64_C(0x495CC81C77241602), UINT64_C(0x4FB796766D70DF8F),
5232             UINT64_C(0x6354B37C5B071DCA), UINT64_C(0x2CAD80A48C0FC0AD) },
5233           { UINT64_C(0x18AADD51F68739B4), UINT64_C(0x1BFBB17747F09C6C),
5234             UINT64_C(0x9355EA19A8FD51C4), UINT64_C(0x3D512A84EE58DB7B),
5235             UINT64_C(0x70842AFDE9237640), UINT64_C(0x36F515CAACAF858D) } },
5236         { { UINT64_C(0x3DDEC7C47E768B23), UINT64_C(0x97E13C53036D43ED),
5237             UINT64_C(0x871E59253A39AB5F), UINT64_C(0x9AF292DE07E68E2B),
5238             UINT64_C(0x411583494A40112E), UINT64_C(0xCDBB46AF3D4D97E6) },
5239           { UINT64_C(0x2F8912933C0EBE40), UINT64_C(0x696C7EEE3EBAD1E5),
5240             UINT64_C(0x8A5F3B6933B50D99), UINT64_C(0xB7BC48407ED47DDE),
5241             UINT64_C(0x3A6F8E6C1E6706D8), UINT64_C(0x6A1479433D84BB8F) } },
5242         { { UINT64_C(0xEC3A9C78603AE8D1), UINT64_C(0xBFE07E37228C29E5),
5243             UINT64_C(0xB0385C5B396DBC2B), UINT64_C(0x7C14FE83DF85F41F),
5244             UINT64_C(0xE2E64676ADFD463E), UINT64_C(0x5BEF10AA8BF9F23D) },
5245           { UINT64_C(0xFA83EA0DF6BAB6DA), UINT64_C(0xCD0C8BA5966BF7E3),
5246             UINT64_C(0xD62216B498501C2E), UINT64_C(0xB7F298A4C3E69F2D),
5247             UINT64_C(0x42CEF13B9C8740F4), UINT64_C(0xBB317E520DD64307) } },
5248         { { UINT64_C(0x22B6245C3FFEE775), UINT64_C(0x5C3F60BEB37CE7AA),
5249             UINT64_C(0xDE195D40E1FEC0DF), UINT64_C(0x3BFAFBC5A0A82074),
5250             UINT64_C(0xC36EC86AC72CA86A), UINT64_C(0x5606285113FD43EA) },
5251           { UINT64_C(0x8686BE808E0B03A4), UINT64_C(0xC3BD1F93D540D440),
5252             UINT64_C(0x13E4EBC0BF96CEC5), UINT64_C(0xE8E239849190C844),
5253             UINT64_C(0x183593A600844802), UINT64_C(0x467168794D206878) } },
5254         { { UINT64_C(0x358F394DB6F63D19), UINT64_C(0xA75D48496B052194),
5255             UINT64_C(0x584035905C8D7975), UINT64_C(0x86DC9B6B6CBFBD77),
5256             UINT64_C(0x2DB04D77647A51E5), UINT64_C(0x5E9A5B02F8950D88) },
5257           { UINT64_C(0xCE69A7E5017168B0), UINT64_C(0x94630FACC4843AD3),
5258             UINT64_C(0xB3B9D7361EFC44FF), UINT64_C(0xE729E9B6B14D7F93),
5259             UINT64_C(0xA071FC60E0ED0ABC), UINT64_C(0xFC1A99718C8D9B83) } },
5260         { { UINT64_C(0x49686031D138E975), UINT64_C(0x648640385A8EF0D1),
5261             UINT64_C(0x32679713E7F7DE49), UINT64_C(0x5913234929D1CD1D),
5262             UINT64_C(0x849AA23A20BE9ED2), UINT64_C(0x15D303E1284B3F33) },
5263           { UINT64_C(0x37309475B63F9FE9), UINT64_C(0x327BAC8B45B7256A),
5264             UINT64_C(0x291CD227D17FC5D3), UINT64_C(0x8291D8CDA973EDF1),
5265             UINT64_C(0xF3843562437ABA09), UINT64_C(0x33FFB704271D0785) } },
5266         { { UINT64_C(0x5248D6E447E11E5E), UINT64_C(0x0F66FC3C269C7ED3),
5267             UINT64_C(0x18C0D2B9903E346E), UINT64_C(0xD81D9D974BEAE1B8),
5268             UINT64_C(0x610326B0FC30FDF3), UINT64_C(0x2B13687019A7DFCD) },
5269           { UINT64_C(0xEC75F70AB9527676), UINT64_C(0x90829F5129A3D897),
5270             UINT64_C(0x92FE180997980302), UINT64_C(0xA3F2498E68474991),
5271             UINT64_C(0x6A66307B0F22BBAD), UINT64_C(0x32014B9120378557) } },
5272         { { UINT64_C(0x72CD7D553CD98610), UINT64_C(0xC3D560B074504ADF),
5273             UINT64_C(0x23F0A982CEBB5D5D), UINT64_C(0x1431C15BB839DDB8),
5274             UINT64_C(0x7E207CD8CEB72207), UINT64_C(0x28E0A848E7EFB28D) },
5275           { UINT64_C(0xD22561FE1BD96F6E), UINT64_C(0x04812C1862A8236B),
5276             UINT64_C(0xA0BF2334975491FA), UINT64_C(0x294F42A6435DF87F),
5277             UINT64_C(0x2772B783A5D6F4F6), UINT64_C(0x348F92ED2724F853) } },
5278     },
5279     {
5280         { { UINT64_C(0xC20FB9111A42E5E7), UINT64_C(0x075A678B81D12863),
5281             UINT64_C(0x12BCBC6A5CC0AA89), UINT64_C(0x5279C6AB4FB9F01E),
5282             UINT64_C(0xBC8E178911AE1B89), UINT64_C(0xAE74A706C290003C) },
5283           { UINT64_C(0x9949D6EC79DF3F45), UINT64_C(0xBA18E26296C8D37F),
5284             UINT64_C(0x68DE6EE2DD2275BF), UINT64_C(0xA9E4FFF8C419F1D5),
5285             UINT64_C(0xBC759CA4A52B5A40), UINT64_C(0xFF18CBD863B0996D) } },
5286         { { UINT64_C(0x73C57FDED7DD47E5), UINT64_C(0xB0FE5479D49A7F5D),
5287             UINT64_C(0xD25C71F1CFB9821E), UINT64_C(0x9427E209CF6A1D68),
5288             UINT64_C(0xBF3C3916ACD24E64), UINT64_C(0x7E9F5583BDA7B8B5) },
5289           { UINT64_C(0xE7C5F7C8CF971E11), UINT64_C(0xEC16D5D73C7F035E),
5290             UINT64_C(0x818DC472E66B277C), UINT64_C(0x4413FD47B2816F1E),
5291             UINT64_C(0x40F262AF48383C6D), UINT64_C(0xFB0575844F190537) } },
5292         { { UINT64_C(0x487EDC0708962F6B), UINT64_C(0x6002F1E7190A7E55),
5293             UINT64_C(0x7FC62BEA10FDBA0C), UINT64_C(0xC836BBC52C3DBF33),
5294             UINT64_C(0x4FDFB5C34F7D2A46), UINT64_C(0x824654DEDCA0DF71) },
5295           { UINT64_C(0x30A076760C23902B), UINT64_C(0x7F1EBB9377FBBF37),
5296             UINT64_C(0xD307D49DFACC13DB), UINT64_C(0x148D673AAE1A261A),
5297             UINT64_C(0xE008F95B52D98650), UINT64_C(0xC76144409F558FDE) } },
5298         { { UINT64_C(0x17CD6AF69CB16650), UINT64_C(0x86CC27C169F4EEBE),
5299             UINT64_C(0x7E495B1D78822432), UINT64_C(0xFED338E31B974525),
5300             UINT64_C(0x527743D386F3CE21), UINT64_C(0x87948AD3B515C896) },
5301           { UINT64_C(0x9FDE7039B17F2FB8), UINT64_C(0xA2FA9A5FD9B89D96),
5302             UINT64_C(0x5D46600B36FF74DC), UINT64_C(0x8EA74B048302C3C9),
5303             UINT64_C(0xD560F570F744B5EB), UINT64_C(0xC921023BFE762402) } },
5304         { { UINT64_C(0xA35AB657FFF4C8ED), UINT64_C(0x017C61248A5FABD7),
5305             UINT64_C(0x5646302509ACDA28), UINT64_C(0x6038D36114CF238A),
5306             UINT64_C(0x1428B1B6AF1B9F07), UINT64_C(0x5827FF447482E95C) },
5307           { UINT64_C(0xCB997E18780FF362), UINT64_C(0x2B89D702E0BCAC1E),
5308             UINT64_C(0xC632A0B5A837DDC8), UINT64_C(0xF3EFCF1F59762647),
5309             UINT64_C(0xE9BA309A38B0D60A), UINT64_C(0x05DEABDD20B5FB37) } },
5310         { { UINT64_C(0xD44E5DBACB8AF047), UINT64_C(0x15400CB4943CFE82),
5311             UINT64_C(0xDBD695759DF88B67), UINT64_C(0x8299DB2BB2405A7D),
5312             UINT64_C(0x46E3BF770B1D80CD), UINT64_C(0xC50CF66CE82BA3D9) },
5313           { UINT64_C(0xB2910A07F2F747A9), UINT64_C(0xF6B669DB5ADC89C1),
5314             UINT64_C(0x3B5EF1A09052B081), UINT64_C(0x0F5D5ED3B594ACE2),
5315             UINT64_C(0xDA30B8D5D5F01320), UINT64_C(0x0D688C5EAAFCD58F) } },
5316         { { UINT64_C(0x5EEE3A312A161074), UINT64_C(0x6BAAAE56EFE2BE37),
5317             UINT64_C(0xF9787F61E3D78698), UINT64_C(0xC6836B2650630A30),
5318             UINT64_C(0x7445B85D1445DEF1), UINT64_C(0xD72016A2D568A6A5) },
5319           { UINT64_C(0x9DD6F533E355614F), UINT64_C(0x637E7E5F91E04588),
5320             UINT64_C(0x42E142F3B9FB1391), UINT64_C(0x0D07C05C41AFE5DA),
5321             UINT64_C(0xD7CD25C81394EDF1), UINT64_C(0xEBE6A0FCB99288EE) } },
5322         { { UINT64_C(0xB8E63B7BBABBAD86), UINT64_C(0x63226A9F90D66766),
5323             UINT64_C(0x263818365CF26666), UINT64_C(0xCCBD142D4CADD0BF),
5324             UINT64_C(0xA070965E9AC29470), UINT64_C(0x6BDCA26025FF23ED) },
5325           { UINT64_C(0xD4E00FD487DCA7B3), UINT64_C(0xA50978339E0E8734),
5326             UINT64_C(0xF73F162E048173A4), UINT64_C(0xD23F91969C3C2FA2),
5327             UINT64_C(0x9AB98B45E4AC397A), UINT64_C(0x2BAA0300543F2D4B) } },
5328         { { UINT64_C(0xBBBE15E7C658C445), UINT64_C(0xB8CBCB20C28941D1),
5329             UINT64_C(0x65549BE2027D6540), UINT64_C(0xEBBCA8021E8EF4F4),
5330             UINT64_C(0x18214B4BD2ACA397), UINT64_C(0xCBEC7DE2E31784A3) },
5331           { UINT64_C(0x96F0533F0116FDF3), UINT64_C(0x68911C905C8F5EE1),
5332             UINT64_C(0x7DE9A3AED568603A), UINT64_C(0x3F56C52C6A3AD7B7),
5333             UINT64_C(0x5BE9AFCA670B4D0E), UINT64_C(0x628BFEEE375DFE2F) } },
5334         { { UINT64_C(0x97DAE81BDD4ADDB3), UINT64_C(0x12D2CF4E8704761B),
5335             UINT64_C(0x5E820B403247788D), UINT64_C(0x82234B620051CA80),
5336             UINT64_C(0x0C62704D6CB5EA74), UINT64_C(0xDE56042023941593) },
5337           { UINT64_C(0xB3912A3CF1B04145), UINT64_C(0xE3967CD7AF93688D),
5338             UINT64_C(0x2E2DCD2F58DABB4B), UINT64_C(0x6564836F0E303911),
5339             UINT64_C(0x1F10F19BECE07C5C), UINT64_C(0xB47F07EED8919126) } },
5340         { { UINT64_C(0xE3545085E9A2EEC9), UINT64_C(0x81866A972C8E51FE),
5341             UINT64_C(0xD2BA7DB550027243), UINT64_C(0x29DAEAB54AE87DE4),
5342             UINT64_C(0x5EF3D4B8684F9497), UINT64_C(0xE2DACE3B9D5D6873) },
5343           { UINT64_C(0xF012C951FFD29C9C), UINT64_C(0x48289445ADBADA14),
5344             UINT64_C(0x8751F50D89558C49), UINT64_C(0x75511A4F99E35BEE),
5345             UINT64_C(0xEF802D6E7D59AA5F), UINT64_C(0x14FCAD65A2A795E2) } },
5346         { { UINT64_C(0xC8EB00E808CB8F2C), UINT64_C(0x686075322B45BD86),
5347             UINT64_C(0x7A29B45959969713), UINT64_C(0x5FA15B9BD684201B),
5348             UINT64_C(0x1A853190B9E538EE), UINT64_C(0x4150605CD573D043) },
5349           { UINT64_C(0xEF011D3BEB9FBB68), UINT64_C(0x6727998266AE32B6),
5350             UINT64_C(0x861B86EA445DE5EC), UINT64_C(0x62837D18A34A50E1),
5351             UINT64_C(0x228C006ABF5F0663), UINT64_C(0xE007FDE7396DB36A) } },
5352         { { UINT64_C(0xDEE4F8815A916A55), UINT64_C(0x20DC0370F39C82CB),
5353             UINT64_C(0xD9A7161540F09821), UINT64_C(0xD50AD8BFF7273492),
5354             UINT64_C(0xA06F7D1232E7C4BF), UINT64_C(0xFA0F61544C5CEA36) },
5355           { UINT64_C(0xF4FD9BED5FC49CFE), UINT64_C(0xD8CB45D1C9291678),
5356             UINT64_C(0x94DB86CC7B92C9F2), UINT64_C(0x09CA5F3873C81169),
5357             UINT64_C(0x109F40B0AEED06F0), UINT64_C(0x9F0360B214DCAA0A) } },
5358         { { UINT64_C(0x4189B70DE12AD3E7), UINT64_C(0x5208ADB210B06607),
5359             UINT64_C(0xEBD8E2A2EE8497FA), UINT64_C(0x61B1BD67E04F2ECB),
5360             UINT64_C(0x0E2DDA724F3F5F99), UINT64_C(0xD5D96740F747B16D) },
5361           { UINT64_C(0x308A48F6A6BF397F), UINT64_C(0x7021C3E523A93595),
5362             UINT64_C(0xF10B022936470AA0), UINT64_C(0x7761E8EC4E03295B),
5363             UINT64_C(0x16EFEF5807339770), UINT64_C(0x0D55D2DD5DA5DAA2) } },
5364         { { UINT64_C(0x915EA6A38A22F87A), UINT64_C(0x191151C12E5A088E),
5365             UINT64_C(0x190252F17F1D5CBE), UINT64_C(0xE43F59C33B0EC99B),
5366             UINT64_C(0xBE8588D4FF2A6135), UINT64_C(0x103877CC2ECB4B9F) },
5367           { UINT64_C(0x8F4147E5023CF92B), UINT64_C(0xC24384CC0CC2085B),
5368             UINT64_C(0x6A2DB4A2D082D311), UINT64_C(0x06283811ED7BA9AE),
5369             UINT64_C(0xE9A3F5322A8E1592), UINT64_C(0xAC20F0F45A59E894) } },
5370         { { UINT64_C(0x788CAA5274AAB4B1), UINT64_C(0xEB84ABA12FEAFC7E),
5371             UINT64_C(0x31DA71DAAC04FF77), UINT64_C(0x39D12EB924E4D0BF),
5372             UINT64_C(0x4F2F292F87A34EF8), UINT64_C(0x9B324372A237A8ED) },
5373           { UINT64_C(0xBB2D04B12EE3A82D), UINT64_C(0xED4FF367D18D36B2),
5374             UINT64_C(0x99D231EEA6EA0138), UINT64_C(0x7C2D4F064F92E04A),
5375             UINT64_C(0x78A82AB2CA272FD0), UINT64_C(0x7EC41340AB8CDC32) } },
5376     },
5377     {
5378         { { UINT64_C(0xD23658C8D2E15A8C), UINT64_C(0x23F93DF716BA28CA),
5379             UINT64_C(0x6DAB10EC082210F1), UINT64_C(0xFB1ADD91BFC36490),
5380             UINT64_C(0xEDA8B02F9A4F2D14), UINT64_C(0x9060318C56560443) },
5381           { UINT64_C(0x6C01479E64711AB2), UINT64_C(0x41446FC7E337EB85),
5382             UINT64_C(0x4DCF3C1D71888397), UINT64_C(0x87A9C04E13C34FD2),
5383             UINT64_C(0xFE0E08EC510C15AC), UINT64_C(0xFC0D0413C0F495D2) } },
5384         { { UINT64_C(0xEB05C516156636C2), UINT64_C(0x2F613ABA090E93FC),
5385             UINT64_C(0xCFD573CD489576F5), UINT64_C(0xE6535380535A8D57),
5386             UINT64_C(0x13947314671436C4), UINT64_C(0x1172FB0C5F0A122D) },
5387           { UINT64_C(0xAECC7EC1C12F58F6), UINT64_C(0xFE42F9578E41AFD2),
5388             UINT64_C(0xDF96F6523D4221AA), UINT64_C(0xFEF5649F2851996B),
5389             UINT64_C(0x46FB9F26D5CFB67E), UINT64_C(0xB047BFC7EF5C4052) } },
5390         { { UINT64_C(0x5CBDC442F4484374), UINT64_C(0x6B156957F92452EF),
5391             UINT64_C(0x58A26886C118D02A), UINT64_C(0x87FF74E675AAF276),
5392             UINT64_C(0xB133BE95F65F6EC1), UINT64_C(0xA89B62844B1B8D32) },
5393           { UINT64_C(0xDD8A8EF309C81004), UINT64_C(0x7F8225DB0CF21991),
5394             UINT64_C(0xD525A6DB26623FAF), UINT64_C(0xF2368D40BAE15453),
5395             UINT64_C(0x55D6A84D84F89FC9), UINT64_C(0xAF38358A86021A3E) } },
5396         { { UINT64_C(0xBD048BDCFF52E280), UINT64_C(0x8A51D0B2526A1795),
5397             UINT64_C(0x40AAA758A985AC0F), UINT64_C(0x6039BCDCF2C7ACE9),
5398             UINT64_C(0x712092CC6AEC347D), UINT64_C(0x7976D0906B5ACAB7) },
5399           { UINT64_C(0x1EBCF80D6EED9617), UINT64_C(0xB3A63149B0F404A4),
5400             UINT64_C(0x3FDD3D1AD0B610EF), UINT64_C(0xDD3F6F9498C28AC7),
5401             UINT64_C(0x650B77943A59750F), UINT64_C(0xEC59BAB12D3991AC) } },
5402         { { UINT64_C(0x01F40E882E552766), UINT64_C(0x1FE3D50966F5354F),
5403             UINT64_C(0x0E46D006B3A8EA7F), UINT64_C(0xF75AB629F831CD6A),
5404             UINT64_C(0xDAD808D791465119), UINT64_C(0x442405AF17EF9B10) },
5405           { UINT64_C(0xD5FE0A96672BDFCB), UINT64_C(0xA9DFA422355DBDEC),
5406             UINT64_C(0xFDB79AA179B25636), UINT64_C(0xE7F26FFDEECE8AEC),
5407             UINT64_C(0xB59255507EDD5AA2), UINT64_C(0x2C8F6FF08EB3A6C2) } },
5408         { { UINT64_C(0x88887756757D6136), UINT64_C(0xAD9AC18388B92E72),
5409             UINT64_C(0x92CB2FC48785D3EB), UINT64_C(0xD1A542FE9319764B),
5410             UINT64_C(0xAF4CC78F626A62F8), UINT64_C(0x7F3F5FC926BFFAAE) },
5411           { UINT64_C(0x0A203D4340AE2231), UINT64_C(0xA8BFD9E0387898E8),
5412             UINT64_C(0x1A0C379C474B7DDD), UINT64_C(0x03855E0A34FD49EA),
5413             UINT64_C(0x02B26223B3EF4AE1), UINT64_C(0x804BD8CFE399E0A3) } },
5414         { { UINT64_C(0x11A9F3D0DE865713), UINT64_C(0x81E36B6BBDE98821),
5415             UINT64_C(0x324996C86AA891D0), UINT64_C(0x7B95BDC1395682B5),
5416             UINT64_C(0x47BF2219C1600563), UINT64_C(0x7A473F50643E38B4) },
5417           { UINT64_C(0x0911F50AF5738288), UINT64_C(0xDF947A706F9C415B),
5418             UINT64_C(0xBDB994F267A067F6), UINT64_C(0x3F4BEC1B88BE96CD),
5419             UINT64_C(0x9820E931E56DD6D9), UINT64_C(0xB138F14F0A80F419) } },
5420         { { UINT64_C(0xA11A1A8F0429077A), UINT64_C(0x2BB1E33D10351C68),
5421             UINT64_C(0x3C25ABFE89459A27), UINT64_C(0x2D0091B86B8AC774),
5422             UINT64_C(0xDAFC78533B2415D9), UINT64_C(0xDE713CF19201680D) },
5423           { UINT64_C(0x8E5F445D68889D57), UINT64_C(0x608B209C60EABF5B),
5424             UINT64_C(0x10EC0ACCF9CFA408), UINT64_C(0xD5256B9D4D1EE754),
5425             UINT64_C(0xFF866BAB0AA6C18D), UINT64_C(0x9D196DB8ACB90A45) } },
5426         { { UINT64_C(0xA46D76A9B9B081B2), UINT64_C(0xFC743A1062163C25),
5427             UINT64_C(0xCD2A5C8D7761C392), UINT64_C(0x39BDDE0BBE808583),
5428             UINT64_C(0x7C416021B98E4DFE), UINT64_C(0xF930E56365913A44) },
5429           { UINT64_C(0xC3555F7E7585CF3C), UINT64_C(0xC737E3833D6333D5),
5430             UINT64_C(0x5B60DBA4B430B03D), UINT64_C(0x42B715EBE7555404),
5431             UINT64_C(0x571BDF5B7C7796E3), UINT64_C(0x33DC62C66DB6331F) } },
5432         { { UINT64_C(0x3FB9CCB0E61DEE59), UINT64_C(0xC5185F2318B14DB9),
5433             UINT64_C(0x1B2ADC4F845EF36C), UINT64_C(0x195D5B505C1A33AB),
5434             UINT64_C(0x8CEA528E421F59D2), UINT64_C(0x7DFCCECFD2931CEA) },
5435           { UINT64_C(0x51FFA1D58CF7E3F7), UINT64_C(0xF01B7886BDC9FB43),
5436             UINT64_C(0xD65AB610261A0D35), UINT64_C(0x84BCBAFD7574A554),
5437             UINT64_C(0x4B119956FAD70208), UINT64_C(0xDDC329C24FAB5243) } },
5438         { { UINT64_C(0x1A08AA579CE92177), UINT64_C(0x3395E557DC2B5C36),
5439             UINT64_C(0xFDFE7041394ED04E), UINT64_C(0xB797EB24C6DFCDDE),
5440             UINT64_C(0x284A6B2ACB9DE5D6), UINT64_C(0xE0BD95C807222765) },
5441           { UINT64_C(0x114A951B9FE678A7), UINT64_C(0xE7ECD0BD9E4954EC),
5442             UINT64_C(0x7D4096FE79F0B8A9), UINT64_C(0xBDB26E9A09724FE2),
5443             UINT64_C(0x08741AD8F787AF95), UINT64_C(0x2BF9727224045AD8) } },
5444         { { UINT64_C(0xAB1FEDD9A9451D57), UINT64_C(0xDF4D91DF483E38C9),
5445             UINT64_C(0x2D54D31124E9CF8E), UINT64_C(0x9C2A5AF87A22EEB6),
5446             UINT64_C(0xBD9861EF0A43F123), UINT64_C(0x581EA6A238A18B7B) },
5447           { UINT64_C(0xAF339C85296470A3), UINT64_C(0xF9603FCDAFD8203E),
5448             UINT64_C(0x95D0535096763C28), UINT64_C(0x15445C16860EC831),
5449             UINT64_C(0x2AFB87286867A323), UINT64_C(0x4B152D6D0C4838BF) } },
5450         { { UINT64_C(0x45BA0E4F837CACBA), UINT64_C(0x7ADB38AEC0725275),
5451             UINT64_C(0x19C82831942D3C28), UINT64_C(0x94F4731D6D0FE7DD),
5452             UINT64_C(0xC3C07E134898F1E6), UINT64_C(0x76350EACED410B51) },
5453           { UINT64_C(0x0FA8BECAF99AACFC), UINT64_C(0x2834D86F65FAF9CF),
5454             UINT64_C(0x8E62846A6F3866AF), UINT64_C(0xDAA9BD4F3DFD6A2B),
5455             UINT64_C(0xC27115BBA6132655), UINT64_C(0x83972DF7BD5A32C2) } },
5456         { { UINT64_C(0xA330CB5BD513B825), UINT64_C(0xAE18B2D3EE37BEC3),
5457             UINT64_C(0xFC3AB80AF780A902), UINT64_C(0xD7835BE2D607DDF1),
5458             UINT64_C(0x8120F7675B6E4C2B), UINT64_C(0xAA8C385967E78CCB) },
5459           { UINT64_C(0xA8DA8CE2AA0ED321), UINT64_C(0xCB8846FDD766341A),
5460             UINT64_C(0xF2A342EE33DC9D9A), UINT64_C(0xA519E0BED0A18A80),
5461             UINT64_C(0x9CDAA39CAF48DF4C), UINT64_C(0xA4B500CA7E0C19EE) } },
5462         { { UINT64_C(0x83A7FD2F8217001B), UINT64_C(0x4F6FCF064296A8BA),
5463             UINT64_C(0x7D74864391619927), UINT64_C(0x174C1075941E4D41),
5464             UINT64_C(0x037EDEBDA64F5A6C), UINT64_C(0xCF64DB3A6E29DC56) },
5465           { UINT64_C(0x150B3ACE37C0B9F4), UINT64_C(0x1323234A7168178B),
5466             UINT64_C(0x1CE47014EF4D1879), UINT64_C(0xA22E374217FB4D5C),
5467             UINT64_C(0x69B81822D985F794), UINT64_C(0x199C21C4081D7214) } },
5468         { { UINT64_C(0x160BC7A18F04B4D2), UINT64_C(0x79CA81DDB10DE174),
5469             UINT64_C(0xE2A280B02DA1E9C7), UINT64_C(0xB4F6BD991D6A0A29),
5470             UINT64_C(0x57CF3EDD1C5B8F27), UINT64_C(0x7E34FC57158C2FD4) },
5471           { UINT64_C(0x828CFD89CAC93459), UINT64_C(0x9E631B6FB7AF499F),
5472             UINT64_C(0xF4DC8BC0DA26C135), UINT64_C(0x6128ED3937186735),
5473             UINT64_C(0xBB45538B67BF0BA5), UINT64_C(0x1ADDD4C10064A3AB) } },
5474     },
5475     {
5476         { { UINT64_C(0xC32730E8DD14D47E), UINT64_C(0xCDC1FD42C0F01E0F),
5477             UINT64_C(0x2BACFDBF3F5CD846), UINT64_C(0x45F364167272D4DD),
5478             UINT64_C(0xDD813A795EB75776), UINT64_C(0xB57885E450997BE2) },
5479           { UINT64_C(0xDA054E2BDB8C9829), UINT64_C(0x4161D820AAB5A594),
5480             UINT64_C(0x4C428F31026116A3), UINT64_C(0x372AF9A0DCD85E91),
5481             UINT64_C(0xFDA6E903673ADC2D), UINT64_C(0x4526B8ACA8DB59E6) } },
5482         { { UINT64_C(0x68FE359DE23A8472), UINT64_C(0x43EB12BD4CE3C101),
5483             UINT64_C(0x0EC652C3FC704935), UINT64_C(0x1EEFF1F952E4E22D),
5484             UINT64_C(0xBA6777CB083E3ADA), UINT64_C(0xAB52D7DC8BEFC871) },
5485           { UINT64_C(0x4EDE689F497CBD59), UINT64_C(0xC8AE42B927577DD9),
5486             UINT64_C(0xE0F080517AB83C27), UINT64_C(0x1F3D5F252C8C1F48),
5487             UINT64_C(0x57991607AF241AAC), UINT64_C(0xC4458B0AB8A337E0) } },
5488         { { UINT64_C(0x3DBB3FA651DD1BA9), UINT64_C(0xE53C1C4D545E960B),
5489             UINT64_C(0x35AC6574793CE803), UINT64_C(0xB2697DC783DBCE4F),
5490             UINT64_C(0xE35C5BF2E13CF6B0), UINT64_C(0x35034280B0C4A164) },
5491           { UINT64_C(0xAA490908D9C0D3C1), UINT64_C(0x2CCE614DCB4D2E90),
5492             UINT64_C(0xF646E96C54D504E4), UINT64_C(0xD74E7541B73310A3),
5493             UINT64_C(0xEAD7159618BDE5DA), UINT64_C(0x96E7F4A8AA09AEF7) } },
5494         { { UINT64_C(0xA8393A245D6E5F48), UINT64_C(0x2C8D7EA2F9175CE8),
5495             UINT64_C(0xD8824E0255A20268), UINT64_C(0x9DD9A272A446BCC6),
5496             UINT64_C(0xC929CDED5351499B), UINT64_C(0xEA5AD9ECCFE76535) },
5497           { UINT64_C(0x26F3D7D9DC32D001), UINT64_C(0x51C3BE8343EB9689),
5498             UINT64_C(0x91FDCC06759E6DDB), UINT64_C(0xAC2E1904E302B891),
5499             UINT64_C(0xAD25C645C207E1F7), UINT64_C(0x28A70F0DAB3DEB4A) } },
5500         { { UINT64_C(0x922D7F9703BEA8F1), UINT64_C(0x3AD820D4584570BE),
5501             UINT64_C(0x0CE0A8503CD46B43), UINT64_C(0x4C07911FAE66743D),
5502             UINT64_C(0x66519EB9FDA60023), UINT64_C(0x7F83004BEC2ACD9C) },
5503           { UINT64_C(0x001E0B80C3117EAD), UINT64_C(0xBB72D5410722BA25),
5504             UINT64_C(0x3AF7DB966E9A5078), UINT64_C(0x86C5774E701B6B4C),
5505             UINT64_C(0xBD2C0E8E37824DB5), UINT64_C(0x3AE3028CBFAC286D) } },
5506         { { UINT64_C(0x83D4D4A8A33E071B), UINT64_C(0x881C0A9261444BB5),
5507             UINT64_C(0xEEA1E292520E3BC3), UINT64_C(0x5A5F4C3C2AAAB729),
5508             UINT64_C(0x0B766C5EE63C7C94), UINT64_C(0x62BB8A9FBB2CC79C) },
5509           { UINT64_C(0x97ADC7D2AA5DC49D), UINT64_C(0x30CC26B331718681),
5510             UINT64_C(0xAC86E6FF56E86EDE), UINT64_C(0x37BCA7A2CD52F7F2),
5511             UINT64_C(0x734D2C949CE6D87F), UINT64_C(0x06A71D71C2F7E0CA) } },
5512         { { UINT64_C(0x559DCF75C6357D33), UINT64_C(0x4616D940652517DE),
5513             UINT64_C(0x3D576B981CCF207B), UINT64_C(0x51E2D1EF1979F631),
5514             UINT64_C(0x57517DDD06AE8296), UINT64_C(0x309A3D7FD6E7151F) },
5515           { UINT64_C(0xBA2A23E60E3A6FE5), UINT64_C(0x76CF674AD28B22C3),
5516             UINT64_C(0xD235AD07F8B808C3), UINT64_C(0x7BBF4C586B71213A),
5517             UINT64_C(0x0676792E93271EBB), UINT64_C(0x2CFD2C7605B1FC31) } },
5518         { { UINT64_C(0x4258E5C037A450F5), UINT64_C(0xC3245F1B52D2B118),
5519             UINT64_C(0x6DF7B48482BC5963), UINT64_C(0xE520DA4D9C273D1E),
5520             UINT64_C(0xED78E0122C3010E5), UINT64_C(0x112229483C1D4C05) },
5521           { UINT64_C(0xE3DAE5AFC692B490), UINT64_C(0x3272BD10C197F793),
5522             UINT64_C(0xF7EAE411E709ACAA), UINT64_C(0x00B0C95F778270A6),
5523             UINT64_C(0x4DA76EE1220D4350), UINT64_C(0x521E1461AB71E308) } },
5524         { { UINT64_C(0x7B654323343196A3), UINT64_C(0x35D442ADB0C95250),
5525             UINT64_C(0x38AF50E6E264FF17), UINT64_C(0x28397A412030D2EA),
5526             UINT64_C(0x8F1D84E9F74EEDA1), UINT64_C(0xD521F92DE6FB3C52) },
5527           { UINT64_C(0xAF358D7795733811), UINT64_C(0xEBFDDD0193ABFE94),
5528             UINT64_C(0x05D8A028D18D99DE), UINT64_C(0x5A664019B5D5BDD9),
5529             UINT64_C(0x3DF172822AA12FE8), UINT64_C(0xB42E006FB889A28E) } },
5530         { { UINT64_C(0xCF10E97DBC35CB1A), UINT64_C(0xC70A7BBD994DEDC5),
5531             UINT64_C(0x76A5327C37D04FB9), UINT64_C(0x87539F76A76E0CDA),
5532             UINT64_C(0xE9FE493FCD60A6B1), UINT64_C(0xA4574796132F01C0) },
5533           { UINT64_C(0xC43B85EBDB70B167), UINT64_C(0x81D5039A98551DFA),
5534             UINT64_C(0x6B56FBE91D979FA4), UINT64_C(0x49714FD78615098F),
5535             UINT64_C(0xB10E1CEA94DECAB5), UINT64_C(0x8342EBA3480EF6E3) } },
5536         { { UINT64_C(0xE1E030B0B3677288), UINT64_C(0x2978174C8D5CE3AF),
5537             UINT64_C(0xAFC0271CF7B2DE98), UINT64_C(0x745BC6F3B99C20B5),
5538             UINT64_C(0x9F6EDCED1E3BB4E5), UINT64_C(0x58D3EE4E73C8C1FC) },
5539           { UINT64_C(0x1F3535F47FD30124), UINT64_C(0xF366AC705FA62502),
5540             UINT64_C(0x4C4C1FDD965363FE), UINT64_C(0x8B2C77771DE2CA2B),
5541             UINT64_C(0x0CB54743882F1173), UINT64_C(0x94B6B8C071343331) } },
5542         { { UINT64_C(0x75AF014165B8B35B), UINT64_C(0x6D7B84854670A1F5),
5543             UINT64_C(0x6EAA3A47A3B6D376), UINT64_C(0xD7E673D2CB3E5B66),
5544             UINT64_C(0xC0338E6C9589AB38), UINT64_C(0x4BE26CB309440FAA) },
5545           { UINT64_C(0x82CB05E7394F9AA3), UINT64_C(0xC45C8A8A7F7792EA),
5546             UINT64_C(0x37E5E33BB687DC70), UINT64_C(0x63853219DFE48E49),
5547             UINT64_C(0x087951C16D0E5C8C), UINT64_C(0x7696A8C72BC27310) } },
5548         { { UINT64_C(0xA05736D5B67E834A), UINT64_C(0xDD2AA0F29098D42A),
5549             UINT64_C(0x09F0C1D849C69DDC), UINT64_C(0x81F8BC1C8FF0F0F3),
5550             UINT64_C(0x36FD3A4F03037775), UINT64_C(0x8286717D4B06DF5C) },
5551           { UINT64_C(0xB878F496A9079EA2), UINT64_C(0xA5642426D7DC796D),
5552             UINT64_C(0x29B9351A67FDAC2B), UINT64_C(0x93774C0E1D543CDE),
5553             UINT64_C(0x4F8793BA1A8E31C4), UINT64_C(0x7C9F3F3A6C94798A) } },
5554         { { UINT64_C(0x23C5AD11CB8ECDB8), UINT64_C(0x1E88D25E485A6A02),
5555             UINT64_C(0xB27CBE84F1E268AE), UINT64_C(0xDDA80238F4CD0475),
5556             UINT64_C(0x4F88857B49F8EB1B), UINT64_C(0x91B1221F52FB07F9) },
5557           { UINT64_C(0x7CE974608637FA67), UINT64_C(0x528B3CF4632198D8),
5558             UINT64_C(0x33365AB3F6623769), UINT64_C(0x6FEBCFFF3A83A30F),
5559             UINT64_C(0x398F4C999BD341EB), UINT64_C(0x180712BBB33A333C) } },
5560         { { UINT64_C(0x2B8655A2D93429E7), UINT64_C(0x99D600BB75C8B9EE),
5561             UINT64_C(0x9FC1AF8B88FCA6CD), UINT64_C(0x2FB533867C311F80),
5562             UINT64_C(0x20743ECBE8A71EEE), UINT64_C(0xEC3713C4E848B49E) },
5563           { UINT64_C(0x5B2037B5BB886817), UINT64_C(0x40EF5AC2307DBAF4),
5564             UINT64_C(0xC2888AF21B3F643D), UINT64_C(0x0D8252E19D5A4190),
5565             UINT64_C(0x06CC0BEC2DB52A8A), UINT64_C(0xB84B98EAAB94E969) } },
5566         { { UINT64_C(0x2E7AC078A0321E0E), UINT64_C(0x5C5A1168EF3DAAB6),
5567             UINT64_C(0xD2D573CBADDD454A), UINT64_C(0x27E149E236259CC7),
5568             UINT64_C(0x1EDFD469A63F47F1), UINT64_C(0x039AD674F1BD2CFD) },
5569           { UINT64_C(0xBFA633FC3077D3CC), UINT64_C(0x14A7C82F2FD64E9F),
5570             UINT64_C(0xAAA650149D824999), UINT64_C(0x41AB113B21760F2E),
5571             UINT64_C(0x23E646C51CAE260A), UINT64_C(0x08062C8F68DC5159) } },
5572     },
5573     {
5574         { { UINT64_C(0x2E7D0A16204BE028), UINT64_C(0x4F1D082ED0E41851),
5575             UINT64_C(0x15F1DDC63EB317F9), UINT64_C(0xF02750715ADF71D7),
5576             UINT64_C(0x2CE33C2EEE858BC3), UINT64_C(0xA24C76D1DA73B71A) },
5577           { UINT64_C(0x9EF6A70A6C70C483), UINT64_C(0xEFCF170505CF9612),
5578             UINT64_C(0x9F5BF5A67502DE64), UINT64_C(0xD11122A1A4701973),
5579             UINT64_C(0x82CFAAC2A2EA7B24), UINT64_C(0x6CAD67CC0A4582E1) } },
5580         { { UINT64_C(0x597A26FFB4DC8600), UINT64_C(0x264A09F3F9288555),
5581             UINT64_C(0x0B06AFF65C27F5F6), UINT64_C(0xCE5AB665D8D544E6),
5582             UINT64_C(0x92F031BE99275C32), UINT64_C(0xAF51C5BBF42E0E7C) },
5583           { UINT64_C(0x5BB28B061E37B36D), UINT64_C(0x583FBA6A8473543A),
5584             UINT64_C(0xE73FD299F93FB7DC), UINT64_C(0xFCD999A86E2CCAD9),
5585             UINT64_C(0xB8C8A6DF334D4F57), UINT64_C(0x5ADB28DD9A2ACC9B) } },
5586         { { UINT64_C(0x5ADF3D9A111792B9), UINT64_C(0x1C77A3054F1E0D09),
5587             UINT64_C(0xF9FBCE33A82D3736), UINT64_C(0xF307823E718C8AA3),
5588             UINT64_C(0x860578CF416CCF69), UINT64_C(0xB942ADD81EF8465B) },
5589           { UINT64_C(0x9EE0CF97CD9472E1), UINT64_C(0xE6792EEFB01528A8),
5590             UINT64_C(0xF99B9A8DC09DA90B), UINT64_C(0x1F521C2DCBF3CCB8),
5591             UINT64_C(0x6BF6694891A62632), UINT64_C(0xCC7A9CEB854FE9DA) } },
5592         { { UINT64_C(0x46303171491CCB92), UINT64_C(0xA80A8C0D2771235B),
5593             UINT64_C(0xD8E497FFF172C7CF), UINT64_C(0x7F7009D735B193CF),
5594             UINT64_C(0x6B9FD3F7F19DF4BC), UINT64_C(0xADA548C3B46F1E37) },
5595           { UINT64_C(0x87C6EAA9C7A20270), UINT64_C(0xEF2245D6AE78EF99),
5596             UINT64_C(0x2A121042539EAB95), UINT64_C(0x29A6D5D779B8F5CC),
5597             UINT64_C(0x33803A10B77840DC), UINT64_C(0xFEDD3A7011A6A30F) } },
5598         { { UINT64_C(0xFA070E22142403D1), UINT64_C(0x68FF316015C6F7F5),
5599             UINT64_C(0xE09F04E6223A0CE8), UINT64_C(0x22BBD01853E14183),
5600             UINT64_C(0x35D9FAFCCF45B75B), UINT64_C(0x3A34819D7ECEEC88) },
5601           { UINT64_C(0xD9CF7568D33262D2), UINT64_C(0x431036D5841D1505),
5602             UINT64_C(0x0C8005659EB2A79A), UINT64_C(0x8E77D9F05F7EDC6A),
5603             UINT64_C(0x19E12D0565E800AA), UINT64_C(0x335C8D36B7784E7C) } },
5604         { { UINT64_C(0x8B2FC4E96484FD40), UINT64_C(0xEE702764A35D24EA),
5605             UINT64_C(0x15B28AC7B871C3F3), UINT64_C(0x805B4048E097047F),
5606             UINT64_C(0xD6F1B8DF647CAD2F), UINT64_C(0xF1D5B458DC7DD67F) },
5607           { UINT64_C(0x324C529C25148803), UINT64_C(0xF6185EBE21274FAF),
5608             UINT64_C(0xAF14751E95148B55), UINT64_C(0x283ED89D28F284F4),
5609             UINT64_C(0x93AD20E74CBEBF1A), UINT64_C(0x5F6EC65D882935E1) } },
5610         { { UINT64_C(0xE222EBA4A4DCEFE9), UINT64_C(0x63AD235FEC1CEB74),
5611             UINT64_C(0x2E0BF749E05B18E7), UINT64_C(0x547BD050B48BDD87),
5612             UINT64_C(0x0490C970F5AA2FC4), UINT64_C(0xCED5E4CF2B431390) },
5613           { UINT64_C(0x07D8270451D2898E), UINT64_C(0x44B72442083B57D4),
5614             UINT64_C(0xA4ADA2305037FCE8), UINT64_C(0x55F7905E50510DA6),
5615             UINT64_C(0xD8EE724F8D890A98), UINT64_C(0x925A8E7C11B85640) } },
5616         { { UINT64_C(0x5BFA10CD1CA459ED), UINT64_C(0x593F085A6DCF56BF),
5617             UINT64_C(0xE6F0AD9BC0579C3E), UINT64_C(0xC11C95A22527C1AD),
5618             UINT64_C(0x7CFA71E1CF1CB8B3), UINT64_C(0xEDCFF8331D6DC79D) },
5619           { UINT64_C(0x581C4BBE432521C9), UINT64_C(0xBF620096144E11A0),
5620             UINT64_C(0x54C38B71BE3A107B), UINT64_C(0xED555E37E2606EC0),
5621             UINT64_C(0x3FB148B8D721D034), UINT64_C(0x79D53DAD0091BC90) } },
5622         { { UINT64_C(0xE32068C5B7082C80), UINT64_C(0x4140FFD27A144E22),
5623             UINT64_C(0x5811D2F09EDD9E86), UINT64_C(0xCDD79B5FC572C465),
5624             UINT64_C(0x3563FED1C97BF450), UINT64_C(0x985C1444F2CE5C9C) },
5625           { UINT64_C(0x260AE79799950F1C), UINT64_C(0x659F4F40765E9DED),
5626             UINT64_C(0x2A412D662E3BC286), UINT64_C(0xE865E62CF87E0C82),
5627             UINT64_C(0xD63D3A9A6C05E7D7), UINT64_C(0x96725D678686F89A) } },
5628         { { UINT64_C(0xC99A5E4CAB7EA0F5), UINT64_C(0xC9860A1AC5393FA9),
5629             UINT64_C(0x9ED83CEE8FDEEFC0), UINT64_C(0xE3EA8B4C5ED6869A),
5630             UINT64_C(0x89A85463D2EED3A9), UINT64_C(0x2CD91B6DE421A622) },
5631           { UINT64_C(0x6FEC1EF32C91C41D), UINT64_C(0xB1540D1F8171037D),
5632             UINT64_C(0x4FE4991A1C010E5B), UINT64_C(0x28A3469FFC1C7368),
5633             UINT64_C(0xE1EEECD1AF118781), UINT64_C(0x1BCCB97799EF3531) } },
5634         { { UINT64_C(0x63D3B638C4DAB7B8), UINT64_C(0xD92133B63F7F5BAB),
5635             UINT64_C(0x2573EE2009FB6069), UINT64_C(0x771FABDF890A1686),
5636             UINT64_C(0x1D0BA21FA77AFFF5), UINT64_C(0x83145FCCBA3DD2C0) },
5637           { UINT64_C(0xFA073A812D115C20), UINT64_C(0x6AB7A9D319176F27),
5638             UINT64_C(0xAF62CF939AC639EE), UINT64_C(0xF73848B92CCD1319),
5639             UINT64_C(0x3B6132343C71659D), UINT64_C(0xF8E0011C10AB3826) } },
5640         { { UINT64_C(0x0501F0360282FFA5), UINT64_C(0xC39A5CF4D9E0F15A),
5641             UINT64_C(0x48D8C7299A3D1F3C), UINT64_C(0xB5FC136B64E18EDA),
5642             UINT64_C(0xE81B53D97E58FEF0), UINT64_C(0x0D534055F7B0F28D) },
5643           { UINT64_C(0x47B8DE127A80619B), UINT64_C(0x60E2A2B381F9E55D),
5644             UINT64_C(0x6E9624D7CF564CC5), UINT64_C(0xFDF18A216BDEDFFF),
5645             UINT64_C(0x3787DE38C0D5FC82), UINT64_C(0xCBCAA347497A6B11) } },
5646         { { UINT64_C(0x6E7EF35EB226465A), UINT64_C(0x4B4699195F8A2BAF),
5647             UINT64_C(0x44B3A3CF1120D93F), UINT64_C(0xB052C8B668F34AD1),
5648             UINT64_C(0x27EC574BEF7632DD), UINT64_C(0xAEBEA108685DE26F) },
5649           { UINT64_C(0xDA33236BE39424B6), UINT64_C(0xB1BD94A9EBCC22AD),
5650             UINT64_C(0x6DDEE6CC2CDFB5D5), UINT64_C(0xBDAED9276F14069A),
5651             UINT64_C(0x2ADE427C2A247CB7), UINT64_C(0xCE96B436ED156A40) } },
5652         { { UINT64_C(0xDDDCA36081F3F819), UINT64_C(0x4AF4A49FD419B96A),
5653             UINT64_C(0x746C65257CB966B9), UINT64_C(0x01E390886F610023),
5654             UINT64_C(0x05ECB38D98DD33FC), UINT64_C(0x962B971B8F84EDF4) },
5655           { UINT64_C(0xEB32C0A56A6F2602), UINT64_C(0xF026AF71562D60F2),
5656             UINT64_C(0xA9E246BF84615FAB), UINT64_C(0xAD96709275DBAE01),
5657             UINT64_C(0xBF97C79B3ECE5D07), UINT64_C(0xE06266C774EAA3D3) } },
5658         { { UINT64_C(0x161A01572E6DBB6E), UINT64_C(0xB8AF490460FA8F47),
5659             UINT64_C(0xE4336C4400197F22), UINT64_C(0xF811AFFA9CEDCE0E),
5660             UINT64_C(0xB1DD7685F94C2EF1), UINT64_C(0xEEDC0F4BCA957BB0) },
5661           { UINT64_C(0xD319FD574AA76BB1), UINT64_C(0xB3525D7C16CD7CCB),
5662             UINT64_C(0x7B22DA9CA97DD072), UINT64_C(0x99DB84BD38A83E71),
5663             UINT64_C(0x4939BC8DC0EDD8BE), UINT64_C(0x06D524EA903A932C) } },
5664         { { UINT64_C(0x4BC950EC0E31F639), UINT64_C(0xB7ABD3DC6016BE30),
5665             UINT64_C(0x3B0F44736703DAD0), UINT64_C(0xCC405F8B0AC1C4EA),
5666             UINT64_C(0x9BED5E57176C3FEE), UINT64_C(0xF452481036AE36C2) },
5667           { UINT64_C(0xC1EDBB8315D7B503), UINT64_C(0x943B1156E30F3657),
5668             UINT64_C(0x984E9EEF98377805), UINT64_C(0x291AE7AC36CF1DEB),
5669             UINT64_C(0xFED8748CA9F66DF3), UINT64_C(0xECA758BBFEA8FA5D) } },
5670     },
5671     {
5672         { { UINT64_C(0xACC787EF2DD1B249), UINT64_C(0x736E1030D82976F1),
5673             UINT64_C(0x0A6940FAA01B3649), UINT64_C(0xE00B926BC42341E7),
5674             UINT64_C(0x911508D0DE8FFD6C), UINT64_C(0x4DCF8D465276B0CB) },
5675           { UINT64_C(0x23AD0A90CC3CAD8D), UINT64_C(0x2A92E54CADED962A),
5676             UINT64_C(0x93FBEC4DF231BFAF), UINT64_C(0x9544BC774798987A),
5677             UINT64_C(0x48084E2508E29F60), UINT64_C(0x0C0D2F4332DE5869) } },
5678         { { UINT64_C(0x6778F9703A9ABC13), UINT64_C(0xFD014FAC3D2B166B),
5679             UINT64_C(0x1FE4FC783C6FED60), UINT64_C(0x04295FA8AA7C69C5),
5680             UINT64_C(0xA01DE56D7C123175), UINT64_C(0x0FA0D3A83D9A713A) },
5681           { UINT64_C(0xA7A6E5E3E3E08ADD), UINT64_C(0xBD77E94B1AC58F85),
5682             UINT64_C(0x078F6FD2B7321A9C), UINT64_C(0x9564601E911EF6D9),
5683             UINT64_C(0x31C5C1B2415C6BEF), UINT64_C(0xE6C0C91ED3212C62) } },
5684         { { UINT64_C(0xBA7BD23C0D16022F), UINT64_C(0xE9CF4750198BE288),
5685             UINT64_C(0x304E316947DEEC65), UINT64_C(0xCF65B41F96EEB288),
5686             UINT64_C(0x17E99C17927E9E3B), UINT64_C(0x82225546F6630A80) },
5687           { UINT64_C(0x15122B8ACA067BD9), UINT64_C(0xE2673205B77B4E98),
5688             UINT64_C(0x130375659407CA63), UINT64_C(0x53624F548B621602),
5689             UINT64_C(0x96AF2CB1EAE4BD06), UINT64_C(0x576ECD1C8FA20829) } },
5690         { { UINT64_C(0xA551CE107E02D2D0), UINT64_C(0x1584ED249D13DBC7),
5691             UINT64_C(0x082017AD4DA7B6D8), UINT64_C(0x81918A8FE054BC48),
5692             UINT64_C(0x677DB48E572DC384), UINT64_C(0x2EF822966155484C) },
5693           { UINT64_C(0xC3DB14C641B9C231), UINT64_C(0x910A87D14A766192),
5694             UINT64_C(0x93D5CC8610AB8E0F), UINT64_C(0x4194D548AE57CA1B),
5695             UINT64_C(0xFAF3A1D6267FC37A), UINT64_C(0x70EC236413B87C97) } },
5696         { { UINT64_C(0x064B565B5E12756A), UINT64_C(0x953B7BD1AE49C98E),
5697             UINT64_C(0xE0CE8284F7001D91), UINT64_C(0x1546060BF31108D0),
5698             UINT64_C(0xDBC2C3F46779B6E2), UINT64_C(0x157AA47DE0DD07CF) },
5699           { UINT64_C(0xBF4A1C6FF23B261E), UINT64_C(0x5B8EED30654F4BE5),
5700             UINT64_C(0xDF5896D36B20CCD8), UINT64_C(0x56920E2C559ED23D),
5701             UINT64_C(0x901F342EFA6E3E27), UINT64_C(0x745C747C896CA082) } },
5702         { { UINT64_C(0xDBCCD5752944EC84), UINT64_C(0x54A2A935A5FF65FE),
5703             UINT64_C(0x88C92A5E1A1319B6), UINT64_C(0x9537C28F82DA96C1),
5704             UINT64_C(0xB683647435F93C46), UINT64_C(0xEC526A1D65B0846C) },
5705           { UINT64_C(0x6F12AFBDF382C412), UINT64_C(0x5EBC81D89E99FA06),
5706             UINT64_C(0x97B5D672869B93BD), UINT64_C(0x2983C310377E12AA),
5707             UINT64_C(0x4875968124D681EA), UINT64_C(0x1E0BD106287FD767) } },
5708         { { UINT64_C(0x0AC75A3E7231247F), UINT64_C(0x65C20DE6EF27AD3A),
5709             UINT64_C(0x87EB6CF1BD02EEE5), UINT64_C(0x264ACA7A00147E03),
5710             UINT64_C(0xEBC78581AE2A9437), UINT64_C(0x9929964E6316BFA5) },
5711           { UINT64_C(0xDC09E0409AF207EF), UINT64_C(0x3ECFFE2D0C9D8658),
5712             UINT64_C(0x547EA735DFB43D38), UINT64_C(0x5485247BD04B1B20),
5713             UINT64_C(0xB18D3F02BFD8B609), UINT64_C(0xEEB3E805CCE73705) } },
5714         { { UINT64_C(0xDAB1A525DB93850F), UINT64_C(0x18ADAA238365B7D5),
5715             UINT64_C(0x58485C90113FC8C7), UINT64_C(0x80C3DBB9348AD323),
5716             UINT64_C(0xAF892FB5E16ADCA1), UINT64_C(0x2183C879979F005A) },
5717           { UINT64_C(0x20FA1A940643A99E), UINT64_C(0x2741221C1A1609CB),
5718             UINT64_C(0x1C1687E53C2FBDDC), UINT64_C(0xDCCF329ED420D6CF),
5719             UINT64_C(0x75D5577D2B7197D1), UINT64_C(0x4C3C3875C8729D9C) } },
5720         { { UINT64_C(0x5E79F995E5CBDCB9), UINT64_C(0x03139824A742FCC7),
5721             UINT64_C(0x6D0C214A239EF4A1), UINT64_C(0x53A27952401A2944),
5722             UINT64_C(0xF42A1B34C10BCDF0), UINT64_C(0x426BAA437CF38061) },
5723           { UINT64_C(0x16A53139A96AD0C8), UINT64_C(0x627F1D316BAD5301),
5724             UINT64_C(0x5AF748774ACCD627), UINT64_C(0x3C58A1C5B55B0FB8),
5725             UINT64_C(0xFAA57B91F4399A6A), UINT64_C(0xBAD283FBC28094B8) } },
5726         { { UINT64_C(0xBA32AC6183E10A93), UINT64_C(0x1C91F6B4EC06BDB0),
5727             UINT64_C(0x42E6CFBC65F60C93), UINT64_C(0xEFE33BC82C0CDCBE),
5728             UINT64_C(0xE0FE1D094D6414F2), UINT64_C(0x4C11231676FA5C5B) },
5729           { UINT64_C(0x812C1DC62E26200A), UINT64_C(0xD6C413C5EE879D25),
5730             UINT64_C(0xBEADE255BCA8BAFE), UINT64_C(0x0EAF4AE2CE2BA0E7),
5731             UINT64_C(0x66E9FFB0C4F4408A), UINT64_C(0xB36A86D79782C7AD) } },
5732         { { UINT64_C(0x10FCD1F4BAD8D1C7), UINT64_C(0xC903816A4502F645),
5733             UINT64_C(0x7FAC1CC1A503B895), UINT64_C(0x8BCD60410778900C),
5734             UINT64_C(0x5A5F22025BCF2784), UINT64_C(0x9B157E8710EDB896) },
5735           { UINT64_C(0x4C58DA69F602A8B1), UINT64_C(0xD55132F859EC9D7E),
5736             UINT64_C(0x155B719AA26D4870), UINT64_C(0x25AAFCA336441746),
5737             UINT64_C(0x01F83338DD3B6B30), UINT64_C(0xD52BB5C1551917CC) } },
5738         { { UINT64_C(0xA0B6207B6135066A), UINT64_C(0xB3409F842AEC8CBD),
5739             UINT64_C(0x5EBFD43619D87DF0), UINT64_C(0xCB4C209BE8526DE2),
5740             UINT64_C(0xD764085B21E1A230), UINT64_C(0x96F915540899964A) },
5741           { UINT64_C(0xB0BEC8EFA57D122A), UINT64_C(0xC572EC565D9D0B33),
5742             UINT64_C(0xEBE2A780CFA7C72C), UINT64_C(0x52D40CDB9EF3295C),
5743             UINT64_C(0x640045840DE74DFE), UINT64_C(0xA6846432C0809716) } },
5744         { { UINT64_C(0x0D09E8CD02C979BC), UINT64_C(0xEC4B21F6409F4F2A),
5745             UINT64_C(0x68125C7013FB07CA), UINT64_C(0x1C4CFC176FDFA72A),
5746             UINT64_C(0xC9E71B9E04539FCD), UINT64_C(0x94B7103D8BA70797) },
5747           { UINT64_C(0x6B81E82FB33FDE83), UINT64_C(0x7CA9A8CAEABAFD4B),
5748             UINT64_C(0xADD85A67EAB819CE), UINT64_C(0xAEC2548398E99FFC),
5749             UINT64_C(0x938D6440274A07B6), UINT64_C(0x0A5C7097564A6AA0) } },
5750         { { UINT64_C(0x7284FF502F4FCEB6), UINT64_C(0x0A28715A78D0D5CB),
5751             UINT64_C(0xE70B7014BFCE187C), UINT64_C(0xA6B538F57A17148D),
5752             UINT64_C(0x1DAB07C9DD427166), UINT64_C(0x5C5578B0149D23CA) },
5753           { UINT64_C(0x875E2056875B5EDE), UINT64_C(0xCBF44B6D02C893B9),
5754             UINT64_C(0x5715A77E5C2993FB), UINT64_C(0xAF3281463410597E),
5755             UINT64_C(0x65DF418F42DC49DF), UINT64_C(0x7AC9C720A9EE52F6) } },
5756         { { UINT64_C(0xB1C9AA0762955486), UINT64_C(0xCBF35BE3245061D7),
5757             UINT64_C(0x811E1BD38CF4DDC0), UINT64_C(0xD9D4589C948F7C84),
5758             UINT64_C(0x30D09A0FCB0F996D), UINT64_C(0x1A1B3B7A590E7704) },
5759           { UINT64_C(0xA848E3492082768D), UINT64_C(0x9FEBD4929A249DF4),
5760             UINT64_C(0x503420AF5F20439A), UINT64_C(0x0CBE52B68E2BFCD4),
5761             UINT64_C(0xB1D5E261118C91B2), UINT64_C(0x93CFF6DA71D8F2BC) } },
5762         { { UINT64_C(0x5F5BC06B8AB58944), UINT64_C(0xE4BED5384979882D),
5763             UINT64_C(0x57C30362D79B0EB1), UINT64_C(0x391AE2C1EF7C56D8),
5764             UINT64_C(0x28BC2E97ADD98625), UINT64_C(0xFA8E86B81B257107) },
5765           { UINT64_C(0x5E4859F86118C715), UINT64_C(0x91C83324524C71DD),
5766             UINT64_C(0xFB2092436D2F5E6D), UINT64_C(0x6B4FE21F2A900A43),
5767             UINT64_C(0x241F75D632A73C1F), UINT64_C(0xF5BC46295AE89613) } },
5768     }
5769 };
5770 
5771 /*-
5772  * Q := 2P, both projective, Q and P same pointers OK
5773  * Autogenerated: op3/dbl_proj.op3
5774  * https://eprint.iacr.org/2015/1060 Alg 6
5775  * ASSERT: a = -3
5776  */
5777 static void
point_double(pt_prj_t * Q,const pt_prj_t * P)5778 point_double(pt_prj_t *Q, const pt_prj_t *P)
5779 {
5780     /* temporary variables */
5781     fe_t t0, t1, t2, t3, t4;
5782     /* constants */
5783     const limb_t *b = const_b;
5784     /* set pointers for legacy curve arith */
5785     const limb_t *X = P->X;
5786     const limb_t *Y = P->Y;
5787     const limb_t *Z = P->Z;
5788     limb_t *X3 = Q->X;
5789     limb_t *Y3 = Q->Y;
5790     limb_t *Z3 = Q->Z;
5791 
5792     /* the curve arith formula */
5793     fiat_secp384r1_square(t0, X);
5794     fiat_secp384r1_square(t1, Y);
5795     fiat_secp384r1_square(t2, Z);
5796     fiat_secp384r1_mul(t3, X, Y);
5797     fiat_secp384r1_add(t3, t3, t3);
5798     fiat_secp384r1_mul(t4, Y, Z);
5799     fiat_secp384r1_mul(Z3, X, Z);
5800     fiat_secp384r1_add(Z3, Z3, Z3);
5801     fiat_secp384r1_mul(Y3, b, t2);
5802     fiat_secp384r1_sub(Y3, Y3, Z3);
5803     fiat_secp384r1_add(X3, Y3, Y3);
5804     fiat_secp384r1_add(Y3, X3, Y3);
5805     fiat_secp384r1_sub(X3, t1, Y3);
5806     fiat_secp384r1_add(Y3, t1, Y3);
5807     fiat_secp384r1_mul(Y3, X3, Y3);
5808     fiat_secp384r1_mul(X3, X3, t3);
5809     fiat_secp384r1_add(t3, t2, t2);
5810     fiat_secp384r1_add(t2, t2, t3);
5811     fiat_secp384r1_mul(Z3, b, Z3);
5812     fiat_secp384r1_sub(Z3, Z3, t2);
5813     fiat_secp384r1_sub(Z3, Z3, t0);
5814     fiat_secp384r1_add(t3, Z3, Z3);
5815     fiat_secp384r1_add(Z3, Z3, t3);
5816     fiat_secp384r1_add(t3, t0, t0);
5817     fiat_secp384r1_add(t0, t3, t0);
5818     fiat_secp384r1_sub(t0, t0, t2);
5819     fiat_secp384r1_mul(t0, t0, Z3);
5820     fiat_secp384r1_add(Y3, Y3, t0);
5821     fiat_secp384r1_add(t0, t4, t4);
5822     fiat_secp384r1_mul(Z3, t0, Z3);
5823     fiat_secp384r1_sub(X3, X3, Z3);
5824     fiat_secp384r1_mul(Z3, t0, t1);
5825     fiat_secp384r1_add(Z3, Z3, Z3);
5826     fiat_secp384r1_add(Z3, Z3, Z3);
5827 }
5828 
5829 /*-
5830  * R := Q + P where R and Q are projective, P affine.
5831  * R and Q same pointers OK
5832  * R and P same pointers not OK
5833  * Autogenerated: op3/add_mixed.op3
5834  * https://eprint.iacr.org/2015/1060 Alg 5
5835  * ASSERT: a = -3
5836  */
5837 static void
point_add_mixed(pt_prj_t * R,const pt_prj_t * Q,const pt_aff_t * P)5838 point_add_mixed(pt_prj_t *R, const pt_prj_t *Q, const pt_aff_t *P)
5839 {
5840     /* temporary variables */
5841     fe_t t0, t1, t2, t3, t4;
5842     /* constants */
5843     const limb_t *b = const_b;
5844     /* set pointers for legacy curve arith */
5845     const limb_t *X1 = Q->X;
5846     const limb_t *Y1 = Q->Y;
5847     const limb_t *Z1 = Q->Z;
5848     const limb_t *X2 = P->X;
5849     const limb_t *Y2 = P->Y;
5850     fe_t X3;
5851     fe_t Y3;
5852     fe_t Z3;
5853     limb_t nz;
5854 
5855     /* check P for affine inf */
5856     fiat_secp384r1_nonzero(&nz, P->Y);
5857 
5858     /* the curve arith formula */
5859     fiat_secp384r1_mul(t0, X1, X2);
5860     fiat_secp384r1_mul(t1, Y1, Y2);
5861     fiat_secp384r1_add(t3, X2, Y2);
5862     fiat_secp384r1_add(t4, X1, Y1);
5863     fiat_secp384r1_mul(t3, t3, t4);
5864     fiat_secp384r1_add(t4, t0, t1);
5865     fiat_secp384r1_sub(t3, t3, t4);
5866     fiat_secp384r1_mul(t4, Y2, Z1);
5867     fiat_secp384r1_add(t4, t4, Y1);
5868     fiat_secp384r1_mul(Y3, X2, Z1);
5869     fiat_secp384r1_add(Y3, Y3, X1);
5870     fiat_secp384r1_mul(Z3, b, Z1);
5871     fiat_secp384r1_sub(X3, Y3, Z3);
5872     fiat_secp384r1_add(Z3, X3, X3);
5873     fiat_secp384r1_add(X3, X3, Z3);
5874     fiat_secp384r1_sub(Z3, t1, X3);
5875     fiat_secp384r1_add(X3, t1, X3);
5876     fiat_secp384r1_mul(Y3, b, Y3);
5877     fiat_secp384r1_add(t1, Z1, Z1);
5878     fiat_secp384r1_add(t2, t1, Z1);
5879     fiat_secp384r1_sub(Y3, Y3, t2);
5880     fiat_secp384r1_sub(Y3, Y3, t0);
5881     fiat_secp384r1_add(t1, Y3, Y3);
5882     fiat_secp384r1_add(Y3, t1, Y3);
5883     fiat_secp384r1_add(t1, t0, t0);
5884     fiat_secp384r1_add(t0, t1, t0);
5885     fiat_secp384r1_sub(t0, t0, t2);
5886     fiat_secp384r1_mul(t1, t4, Y3);
5887     fiat_secp384r1_mul(t2, t0, Y3);
5888     fiat_secp384r1_mul(Y3, X3, Z3);
5889     fiat_secp384r1_add(Y3, Y3, t2);
5890     fiat_secp384r1_mul(X3, t3, X3);
5891     fiat_secp384r1_sub(X3, X3, t1);
5892     fiat_secp384r1_mul(Z3, t4, Z3);
5893     fiat_secp384r1_mul(t1, t3, t0);
5894     fiat_secp384r1_add(Z3, Z3, t1);
5895 
5896     /* if P is inf, throw all that away and take Q */
5897     fiat_secp384r1_selectznz(R->X, nz, Q->X, X3);
5898     fiat_secp384r1_selectznz(R->Y, nz, Q->Y, Y3);
5899     fiat_secp384r1_selectznz(R->Z, nz, Q->Z, Z3);
5900 }
5901 
5902 /*-
5903  * R := Q + P all projective.
5904  * R and Q same pointers OK
5905  * R and P same pointers not OK
5906  * Autogenerated: op3/add_proj.op3
5907  * https://eprint.iacr.org/2015/1060 Alg 4
5908  * ASSERT: a = -3
5909  */
5910 static void
point_add_proj(pt_prj_t * R,const pt_prj_t * Q,const pt_prj_t * P)5911 point_add_proj(pt_prj_t *R, const pt_prj_t *Q, const pt_prj_t *P)
5912 {
5913     /* temporary variables */
5914     fe_t t0, t1, t2, t3, t4, t5;
5915     /* constants */
5916     const limb_t *b = const_b;
5917     /* set pointers for legacy curve arith */
5918     const limb_t *X1 = Q->X;
5919     const limb_t *Y1 = Q->Y;
5920     const limb_t *Z1 = Q->Z;
5921     const limb_t *X2 = P->X;
5922     const limb_t *Y2 = P->Y;
5923     const limb_t *Z2 = P->Z;
5924     limb_t *X3 = R->X;
5925     limb_t *Y3 = R->Y;
5926     limb_t *Z3 = R->Z;
5927 
5928     /* the curve arith formula */
5929     fiat_secp384r1_mul(t0, X1, X2);
5930     fiat_secp384r1_mul(t1, Y1, Y2);
5931     fiat_secp384r1_mul(t2, Z1, Z2);
5932     fiat_secp384r1_add(t3, X1, Y1);
5933     fiat_secp384r1_add(t4, X2, Y2);
5934     fiat_secp384r1_mul(t3, t3, t4);
5935     fiat_secp384r1_add(t4, t0, t1);
5936     fiat_secp384r1_sub(t3, t3, t4);
5937     fiat_secp384r1_add(t4, Y1, Z1);
5938     fiat_secp384r1_add(t5, Y2, Z2);
5939     fiat_secp384r1_mul(t4, t4, t5);
5940     fiat_secp384r1_add(t5, t1, t2);
5941     fiat_secp384r1_sub(t4, t4, t5);
5942     fiat_secp384r1_add(X3, X1, Z1);
5943     fiat_secp384r1_add(Y3, X2, Z2);
5944     fiat_secp384r1_mul(X3, X3, Y3);
5945     fiat_secp384r1_add(Y3, t0, t2);
5946     fiat_secp384r1_sub(Y3, X3, Y3);
5947     fiat_secp384r1_mul(Z3, b, t2);
5948     fiat_secp384r1_sub(X3, Y3, Z3);
5949     fiat_secp384r1_add(Z3, X3, X3);
5950     fiat_secp384r1_add(X3, X3, Z3);
5951     fiat_secp384r1_sub(Z3, t1, X3);
5952     fiat_secp384r1_add(X3, t1, X3);
5953     fiat_secp384r1_mul(Y3, b, Y3);
5954     fiat_secp384r1_add(t1, t2, t2);
5955     fiat_secp384r1_add(t2, t1, t2);
5956     fiat_secp384r1_sub(Y3, Y3, t2);
5957     fiat_secp384r1_sub(Y3, Y3, t0);
5958     fiat_secp384r1_add(t1, Y3, Y3);
5959     fiat_secp384r1_add(Y3, t1, Y3);
5960     fiat_secp384r1_add(t1, t0, t0);
5961     fiat_secp384r1_add(t0, t1, t0);
5962     fiat_secp384r1_sub(t0, t0, t2);
5963     fiat_secp384r1_mul(t1, t4, Y3);
5964     fiat_secp384r1_mul(t2, t0, Y3);
5965     fiat_secp384r1_mul(Y3, X3, Z3);
5966     fiat_secp384r1_add(Y3, Y3, t2);
5967     fiat_secp384r1_mul(X3, t3, X3);
5968     fiat_secp384r1_sub(X3, X3, t1);
5969     fiat_secp384r1_mul(Z3, t4, Z3);
5970     fiat_secp384r1_mul(t1, t3, t0);
5971     fiat_secp384r1_add(Z3, Z3, t1);
5972 }
5973 
5974 /* constants */
5975 #define RADIX 5
5976 #define DRADIX (1 << RADIX)
5977 #define DRADIX_WNAF ((DRADIX) << 1)
5978 
5979 /*-
5980  * precomp for wnaf scalar multiplication:
5981  * precomp[0] = 1P
5982  * precomp[1] = 3P
5983  * precomp[2] = 5P
5984  * precomp[3] = 7P
5985  * precomp[4] = 9P
5986  * ...
5987  */
5988 static void
precomp_wnaf(pt_prj_t precomp[DRADIX/2],const pt_aff_t * P)5989 precomp_wnaf(pt_prj_t precomp[DRADIX / 2], const pt_aff_t *P)
5990 {
5991     int i;
5992 
5993     fe_copy(precomp[0].X, P->X);
5994     fe_copy(precomp[0].Y, P->Y);
5995     fe_copy(precomp[0].Z, const_one);
5996     point_double(&precomp[DRADIX / 2 - 1], &precomp[0]);
5997 
5998     for (i = 1; i < DRADIX / 2; i++)
5999         point_add_proj(&precomp[i], &precomp[DRADIX / 2 - 1], &precomp[i - 1]);
6000 }
6001 
6002 /* fetch a scalar bit */
6003 static int
scalar_get_bit(const unsigned char in[48],int idx)6004 scalar_get_bit(const unsigned char in[48], int idx)
6005 {
6006     int widx, rshift;
6007 
6008     widx = idx >> 3;
6009     rshift = idx & 0x7;
6010 
6011     if (idx < 0 || widx >= 48)
6012         return 0;
6013 
6014     return (in[widx] >> rshift) & 0x1;
6015 }
6016 
6017 /*-
6018  * Compute "regular" wnaf representation of a scalar.
6019  * See "Exponent Recoding and Regular Exponentiation Algorithms",
6020  * Tunstall et al., AfricaCrypt 2009, Alg 6.
6021  * It forces an odd scalar and outputs digits in
6022  * {\pm 1, \pm 3, \pm 5, \pm 7, \pm 9, ...}
6023  * i.e. signed odd digits with _no zeroes_ -- that makes it "regular".
6024  */
6025 static void
scalar_rwnaf(int8_t out[77],const unsigned char in[48])6026 scalar_rwnaf(int8_t out[77], const unsigned char in[48])
6027 {
6028     int i;
6029     int8_t window, d;
6030 
6031     window = (in[0] & (DRADIX_WNAF - 1)) | 1;
6032     for (i = 0; i < 76; i++) {
6033         d = (window & (DRADIX_WNAF - 1)) - DRADIX;
6034         out[i] = d;
6035         window = (window - d) >> RADIX;
6036         window += scalar_get_bit(in, (i + 1) * RADIX + 1) << 1;
6037         window += scalar_get_bit(in, (i + 1) * RADIX + 2) << 2;
6038         window += scalar_get_bit(in, (i + 1) * RADIX + 3) << 3;
6039         window += scalar_get_bit(in, (i + 1) * RADIX + 4) << 4;
6040         window += scalar_get_bit(in, (i + 1) * RADIX + 5) << 5;
6041     }
6042     out[i] = window;
6043 }
6044 
6045 /*-
6046  * Compute "textbook" wnaf representation of a scalar.
6047  * NB: not constant time
6048  */
6049 static void
scalar_wnaf(int8_t out[385],const unsigned char in[48])6050 scalar_wnaf(int8_t out[385], const unsigned char in[48])
6051 {
6052     int i;
6053     int8_t window, d;
6054 
6055     window = in[0] & (DRADIX_WNAF - 1);
6056     for (i = 0; i < 385; i++) {
6057         d = 0;
6058         if ((window & 1) && ((d = window & (DRADIX_WNAF - 1)) & DRADIX))
6059             d -= DRADIX_WNAF;
6060         out[i] = d;
6061         window = (window - d) >> 1;
6062         window += scalar_get_bit(in, i + 1 + RADIX) << RADIX;
6063     }
6064 }
6065 
6066 /*-
6067  * Simultaneous scalar multiplication: interleaved "textbook" wnaf.
6068  * NB: not constant time
6069  */
6070 static void
var_smul_wnaf_two(pt_aff_t * out,const unsigned char a[48],const unsigned char b[48],const pt_aff_t * P)6071 var_smul_wnaf_two(pt_aff_t *out, const unsigned char a[48],
6072                   const unsigned char b[48], const pt_aff_t *P)
6073 {
6074     int i, d, is_neg, is_inf = 1, flipped = 0;
6075     int8_t anaf[385] = { 0 };
6076     int8_t bnaf[385] = { 0 };
6077     pt_prj_t Q = { { 0 } };
6078     pt_prj_t precomp[DRADIX / 2];
6079 
6080     precomp_wnaf(precomp, P);
6081     scalar_wnaf(anaf, a);
6082     scalar_wnaf(bnaf, b);
6083 
6084     for (i = 384; i >= 0; i--) {
6085         if (!is_inf)
6086             point_double(&Q, &Q);
6087         if ((d = bnaf[i])) {
6088             if ((is_neg = d < 0) != flipped) {
6089                 fiat_secp384r1_opp(Q.Y, Q.Y);
6090                 flipped ^= 1;
6091             }
6092             d = (is_neg) ? (-d - 1) >> 1 : (d - 1) >> 1;
6093             if (is_inf) {
6094                 /* initialize accumulator */
6095                 fe_copy(Q.X, &precomp[d].X);
6096                 fe_copy(Q.Y, &precomp[d].Y);
6097                 fe_copy(Q.Z, &precomp[d].Z);
6098                 is_inf = 0;
6099             } else
6100                 point_add_proj(&Q, &Q, &precomp[d]);
6101         }
6102         if ((d = anaf[i])) {
6103             if ((is_neg = d < 0) != flipped) {
6104                 fiat_secp384r1_opp(Q.Y, Q.Y);
6105                 flipped ^= 1;
6106             }
6107             d = (is_neg) ? (-d - 1) >> 1 : (d - 1) >> 1;
6108             if (is_inf) {
6109                 /* initialize accumulator */
6110                 fe_copy(Q.X, &lut_cmb[0][d].X);
6111                 fe_copy(Q.Y, &lut_cmb[0][d].Y);
6112                 fe_copy(Q.Z, const_one);
6113                 is_inf = 0;
6114             } else
6115                 point_add_mixed(&Q, &Q, &lut_cmb[0][d]);
6116         }
6117     }
6118 
6119     if (is_inf) {
6120         /* initialize accumulator to inf: all-zero scalars */
6121         fe_set_zero(Q.X);
6122         fe_copy(Q.Y, const_one);
6123         fe_set_zero(Q.Z);
6124     }
6125 
6126     if (flipped) {
6127         /* correct sign */
6128         fiat_secp384r1_opp(Q.Y, Q.Y);
6129     }
6130 
6131     /* convert to affine -- NB depends on coordinate system */
6132     fiat_secp384r1_inv(Q.Z, Q.Z);
6133     fiat_secp384r1_mul(out->X, Q.X, Q.Z);
6134     fiat_secp384r1_mul(out->Y, Q.Y, Q.Z);
6135 }
6136 
6137 /*-
6138  * Variable point scalar multiplication with "regular" wnaf.
6139  */
6140 static void
var_smul_rwnaf(pt_aff_t * out,const unsigned char scalar[48],const pt_aff_t * P)6141 var_smul_rwnaf(pt_aff_t *out, const unsigned char scalar[48],
6142                const pt_aff_t *P)
6143 {
6144     int i, j, d, diff, is_neg;
6145     int8_t rnaf[77] = { 0 };
6146     pt_prj_t Q = { { 0 } }, lut = { { 0 } };
6147     pt_prj_t precomp[DRADIX / 2];
6148 
6149     precomp_wnaf(precomp, P);
6150     scalar_rwnaf(rnaf, scalar);
6151 
6152 #if defined(_MSC_VER)
6153 /* result still unsigned: yes we know */
6154 #pragma warning(push)
6155 #pragma warning(disable : 4146)
6156 #endif
6157 
6158     /* initialize accumulator to high digit */
6159     d = (rnaf[76] - 1) >> 1;
6160     for (j = 0; j < DRADIX / 2; j++) {
6161         diff = (1 - (-(d ^ j) >> (8 * sizeof(int) - 1))) & 1;
6162         fiat_secp384r1_selectznz(Q.X, diff, Q.X, precomp[j].X);
6163         fiat_secp384r1_selectznz(Q.Y, diff, Q.Y, precomp[j].Y);
6164         fiat_secp384r1_selectznz(Q.Z, diff, Q.Z, precomp[j].Z);
6165     }
6166 
6167     for (i = 75; i >= 0; i--) {
6168         for (j = 0; j < RADIX; j++)
6169             point_double(&Q, &Q);
6170         d = rnaf[i];
6171         /* is_neg = (d < 0) ? 1 : 0 */
6172         is_neg = (d >> (8 * sizeof(int) - 1)) & 1;
6173         /* d = abs(d) */
6174         d = (d ^ -is_neg) + is_neg;
6175         d = (d - 1) >> 1;
6176         for (j = 0; j < DRADIX / 2; j++) {
6177             diff = (1 - (-(d ^ j) >> (8 * sizeof(int) - 1))) & 1;
6178             fiat_secp384r1_selectznz(lut.X, diff, lut.X, precomp[j].X);
6179             fiat_secp384r1_selectznz(lut.Y, diff, lut.Y, precomp[j].Y);
6180             fiat_secp384r1_selectznz(lut.Z, diff, lut.Z, precomp[j].Z);
6181         }
6182         /* negate lut point if digit is negative */
6183         fiat_secp384r1_opp(out->Y, lut.Y);
6184         fiat_secp384r1_selectznz(lut.Y, is_neg, lut.Y, out->Y);
6185         point_add_proj(&Q, &Q, &lut);
6186     }
6187 
6188 #if defined(_MSC_VER)
6189 #pragma warning(pop)
6190 #endif
6191 
6192     /* conditionally subtract P if the scalar was even */
6193     fe_copy(lut.X, precomp[0].X);
6194     fiat_secp384r1_opp(lut.Y, precomp[0].Y);
6195     fe_copy(lut.Z, precomp[0].Z);
6196     point_add_proj(&lut, &lut, &Q);
6197     fiat_secp384r1_selectznz(Q.X, scalar[0] & 1, lut.X, Q.X);
6198     fiat_secp384r1_selectznz(Q.Y, scalar[0] & 1, lut.Y, Q.Y);
6199     fiat_secp384r1_selectznz(Q.Z, scalar[0] & 1, lut.Z, Q.Z);
6200 
6201     /* convert to affine -- NB depends on coordinate system */
6202     fiat_secp384r1_inv(Q.Z, Q.Z);
6203     fiat_secp384r1_mul(out->X, Q.X, Q.Z);
6204     fiat_secp384r1_mul(out->Y, Q.Y, Q.Z);
6205 }
6206 
6207 /*-
6208  * Fixed scalar multiplication: comb with interleaving.
6209  */
6210 static void
fixed_smul_cmb(pt_aff_t * out,const unsigned char scalar[48])6211 fixed_smul_cmb(pt_aff_t *out, const unsigned char scalar[48])
6212 {
6213     int i, j, k, d, diff, is_neg = 0;
6214     int8_t rnaf[77] = { 0 };
6215     pt_prj_t Q = { { 0 } }, R = { { 0 } };
6216     pt_aff_t lut = { { 0 } };
6217 
6218     scalar_rwnaf(rnaf, scalar);
6219 
6220     /* initalize accumulator to inf */
6221     fe_set_zero(Q.X);
6222     fe_copy(Q.Y, const_one);
6223     fe_set_zero(Q.Z);
6224 
6225 #if defined(_MSC_VER)
6226 /* result still unsigned: yes we know */
6227 #pragma warning(push)
6228 #pragma warning(disable : 4146)
6229 #endif
6230 
6231     for (i = 3; i >= 0; i--) {
6232         for (j = 0; i != 3 && j < RADIX; j++)
6233             point_double(&Q, &Q);
6234         for (j = 0; j < 21; j++) {
6235             if (j * 4 + i > 76)
6236                 continue;
6237             d = rnaf[j * 4 + i];
6238             /* is_neg = (d < 0) ? 1 : 0 */
6239             is_neg = (d >> (8 * sizeof(int) - 1)) & 1;
6240             /* d = abs(d) */
6241             d = (d ^ -is_neg) + is_neg;
6242             d = (d - 1) >> 1;
6243             for (k = 0; k < DRADIX / 2; k++) {
6244                 diff = (1 - (-(d ^ k) >> (8 * sizeof(int) - 1))) & 1;
6245                 fiat_secp384r1_selectznz(lut.X, diff, lut.X, lut_cmb[j][k].X);
6246                 fiat_secp384r1_selectznz(lut.Y, diff, lut.Y, lut_cmb[j][k].Y);
6247             }
6248             /* negate lut point if digit is negative */
6249             fiat_secp384r1_opp(out->Y, lut.Y);
6250             fiat_secp384r1_selectznz(lut.Y, is_neg, lut.Y, out->Y);
6251             point_add_mixed(&Q, &Q, &lut);
6252         }
6253     }
6254 
6255 #if defined(_MSC_VER)
6256 #pragma warning(pop)
6257 #endif
6258 
6259     /* conditionally subtract P if the scalar was even */
6260     fe_copy(lut.X, lut_cmb[0][0].X);
6261     fiat_secp384r1_opp(lut.Y, lut_cmb[0][0].Y);
6262     point_add_mixed(&R, &Q, &lut);
6263     fiat_secp384r1_selectznz(Q.X, scalar[0] & 1, R.X, Q.X);
6264     fiat_secp384r1_selectznz(Q.Y, scalar[0] & 1, R.Y, Q.Y);
6265     fiat_secp384r1_selectznz(Q.Z, scalar[0] & 1, R.Z, Q.Z);
6266 
6267     /* convert to affine -- NB depends on coordinate system */
6268     fiat_secp384r1_inv(Q.Z, Q.Z);
6269     fiat_secp384r1_mul(out->X, Q.X, Q.Z);
6270     fiat_secp384r1_mul(out->Y, Q.Y, Q.Z);
6271 }
6272 
6273 /*-
6274  * Wrapper: simultaneous scalar mutiplication.
6275  * outx, outy := a * G + b * P
6276  * where P = (inx, iny).
6277  * Everything is LE byte ordering.
6278  */
6279 static void
point_mul_two(unsigned char outx[48],unsigned char outy[48],const unsigned char a[48],const unsigned char b[48],const unsigned char inx[48],const unsigned char iny[48])6280 point_mul_two(unsigned char outx[48], unsigned char outy[48],
6281               const unsigned char a[48], const unsigned char b[48],
6282               const unsigned char inx[48],
6283               const unsigned char iny[48])
6284 {
6285     pt_aff_t P;
6286 
6287     fiat_secp384r1_from_bytes(P.X, inx);
6288     fiat_secp384r1_from_bytes(P.Y, iny);
6289     fiat_secp384r1_to_montgomery(P.X, P.X);
6290     fiat_secp384r1_to_montgomery(P.Y, P.Y);
6291     /* simultaneous scalar multiplication */
6292     var_smul_wnaf_two(&P, a, b, &P);
6293 
6294     fiat_secp384r1_from_montgomery(P.X, P.X);
6295     fiat_secp384r1_from_montgomery(P.Y, P.Y);
6296     fiat_secp384r1_to_bytes(outx, P.X);
6297     fiat_secp384r1_to_bytes(outy, P.Y);
6298 }
6299 
6300 /*-
6301  * Wrapper: fixed scalar mutiplication.
6302  * outx, outy := scalar * G
6303  * Everything is LE byte ordering.
6304  */
6305 static void
point_mul_g(unsigned char outx[48],unsigned char outy[48],const unsigned char scalar[48])6306 point_mul_g(unsigned char outx[48], unsigned char outy[48],
6307             const unsigned char scalar[48])
6308 {
6309     pt_aff_t P;
6310 
6311     /* fixed scmul function */
6312     fixed_smul_cmb(&P, scalar);
6313     fiat_secp384r1_from_montgomery(P.X, P.X);
6314     fiat_secp384r1_from_montgomery(P.Y, P.Y);
6315     fiat_secp384r1_to_bytes(outx, P.X);
6316     fiat_secp384r1_to_bytes(outy, P.Y);
6317 }
6318 
6319 /*-
6320  * Wrapper: variable point scalar mutiplication.
6321  * outx, outy := scalar * P
6322  * where P = (inx, iny).
6323  * Everything is LE byte ordering.
6324  */
6325 static void
point_mul(unsigned char outx[48],unsigned char outy[48],const unsigned char scalar[48],const unsigned char inx[48],const unsigned char iny[48])6326 point_mul(unsigned char outx[48], unsigned char outy[48],
6327           const unsigned char scalar[48],
6328           const unsigned char inx[48],
6329           const unsigned char iny[48])
6330 {
6331     pt_aff_t P;
6332 
6333     fiat_secp384r1_from_bytes(P.X, inx);
6334     fiat_secp384r1_from_bytes(P.Y, iny);
6335     fiat_secp384r1_to_montgomery(P.X, P.X);
6336     fiat_secp384r1_to_montgomery(P.Y, P.Y);
6337     /* var scmul function */
6338     var_smul_rwnaf(&P, scalar, &P);
6339     fiat_secp384r1_from_montgomery(P.X, P.X);
6340     fiat_secp384r1_from_montgomery(P.Y, P.Y);
6341     fiat_secp384r1_to_bytes(outx, P.X);
6342     fiat_secp384r1_to_bytes(outy, P.Y);
6343 }
6344 
6345 #undef RADIX
6346 #include "ecp.h"
6347 #include "mpi-priv.h"
6348 #include "mplogic.h"
6349 
6350 /*-
6351  * reverse bytes -- total hack
6352  */
6353 #define MP_BE2LE(a)            \
6354     do {                       \
6355         unsigned char z_bswap; \
6356         z_bswap = a[0];        \
6357         a[0] = a[47];          \
6358         a[47] = z_bswap;       \
6359         z_bswap = a[1];        \
6360         a[1] = a[46];          \
6361         a[46] = z_bswap;       \
6362         z_bswap = a[2];        \
6363         a[2] = a[45];          \
6364         a[45] = z_bswap;       \
6365         z_bswap = a[3];        \
6366         a[3] = a[44];          \
6367         a[44] = z_bswap;       \
6368         z_bswap = a[4];        \
6369         a[4] = a[43];          \
6370         a[43] = z_bswap;       \
6371         z_bswap = a[5];        \
6372         a[5] = a[42];          \
6373         a[42] = z_bswap;       \
6374         z_bswap = a[6];        \
6375         a[6] = a[41];          \
6376         a[41] = z_bswap;       \
6377         z_bswap = a[7];        \
6378         a[7] = a[40];          \
6379         a[40] = z_bswap;       \
6380         z_bswap = a[8];        \
6381         a[8] = a[39];          \
6382         a[39] = z_bswap;       \
6383         z_bswap = a[9];        \
6384         a[9] = a[38];          \
6385         a[38] = z_bswap;       \
6386         z_bswap = a[10];       \
6387         a[10] = a[37];         \
6388         a[37] = z_bswap;       \
6389         z_bswap = a[11];       \
6390         a[11] = a[36];         \
6391         a[36] = z_bswap;       \
6392         z_bswap = a[12];       \
6393         a[12] = a[35];         \
6394         a[35] = z_bswap;       \
6395         z_bswap = a[13];       \
6396         a[13] = a[34];         \
6397         a[34] = z_bswap;       \
6398         z_bswap = a[14];       \
6399         a[14] = a[33];         \
6400         a[33] = z_bswap;       \
6401         z_bswap = a[15];       \
6402         a[15] = a[32];         \
6403         a[32] = z_bswap;       \
6404         z_bswap = a[16];       \
6405         a[16] = a[31];         \
6406         a[31] = z_bswap;       \
6407         z_bswap = a[17];       \
6408         a[17] = a[30];         \
6409         a[30] = z_bswap;       \
6410         z_bswap = a[18];       \
6411         a[18] = a[29];         \
6412         a[29] = z_bswap;       \
6413         z_bswap = a[19];       \
6414         a[19] = a[28];         \
6415         a[28] = z_bswap;       \
6416         z_bswap = a[20];       \
6417         a[20] = a[27];         \
6418         a[27] = z_bswap;       \
6419         z_bswap = a[21];       \
6420         a[21] = a[26];         \
6421         a[26] = z_bswap;       \
6422         z_bswap = a[22];       \
6423         a[22] = a[25];         \
6424         a[25] = z_bswap;       \
6425         z_bswap = a[23];       \
6426         a[23] = a[24];         \
6427         a[24] = z_bswap;       \
6428     } while (0)
6429 
6430 static mp_err
point_mul_g_secp384r1(const mp_int * n,mp_int * out_x,mp_int * out_y,const ECGroup * group)6431 point_mul_g_secp384r1(const mp_int *n, mp_int *out_x,
6432                       mp_int *out_y, const ECGroup *group)
6433 {
6434     unsigned char b_x[48];
6435     unsigned char b_y[48];
6436     unsigned char b_n[48];
6437     mp_err res;
6438 
6439     ARGCHK(n != NULL && out_x != NULL && out_y != NULL, MP_BADARG);
6440 
6441     /* fail on out of range scalars */
6442     if (mpl_significant_bits(n) > 384 || mp_cmp_z(n) != MP_GT)
6443         return MP_RANGE;
6444 
6445     MP_CHECKOK(mp_to_fixlen_octets(n, b_n, 48));
6446     MP_BE2LE(b_n);
6447     point_mul_g(b_x, b_y, b_n);
6448     MP_BE2LE(b_x);
6449     MP_BE2LE(b_y);
6450     MP_CHECKOK(mp_read_unsigned_octets(out_x, b_x, 48));
6451     MP_CHECKOK(mp_read_unsigned_octets(out_y, b_y, 48));
6452 
6453 CLEANUP:
6454     return res;
6455 }
6456 
6457 static mp_err
point_mul_secp384r1(const mp_int * n,const mp_int * in_x,const mp_int * in_y,mp_int * out_x,mp_int * out_y,const ECGroup * group)6458 point_mul_secp384r1(const mp_int *n, const mp_int *in_x,
6459                     const mp_int *in_y, mp_int *out_x,
6460                     mp_int *out_y, const ECGroup *group)
6461 {
6462     unsigned char b_x[48];
6463     unsigned char b_y[48];
6464     unsigned char b_n[48];
6465     mp_err res;
6466 
6467     ARGCHK(n != NULL && in_x != NULL && in_y != NULL && out_x != NULL &&
6468                out_y != NULL,
6469            MP_BADARG);
6470 
6471     /* fail on out of range scalars */
6472     if (mpl_significant_bits(n) > 384 || mp_cmp_z(n) != MP_GT)
6473         return MP_RANGE;
6474 
6475     MP_CHECKOK(mp_to_fixlen_octets(n, b_n, 48));
6476     MP_CHECKOK(mp_to_fixlen_octets(in_x, b_x, 48));
6477     MP_CHECKOK(mp_to_fixlen_octets(in_y, b_y, 48));
6478     MP_BE2LE(b_x);
6479     MP_BE2LE(b_y);
6480     MP_BE2LE(b_n);
6481     point_mul(b_x, b_y, b_n, b_x, b_y);
6482     MP_BE2LE(b_x);
6483     MP_BE2LE(b_y);
6484     MP_CHECKOK(mp_read_unsigned_octets(out_x, b_x, 48));
6485     MP_CHECKOK(mp_read_unsigned_octets(out_y, b_y, 48));
6486 
6487 CLEANUP:
6488     return res;
6489 }
6490 
6491 static mp_err
point_mul_two_secp384r1(const mp_int * n1,const mp_int * n2,const mp_int * in_x,const mp_int * in_y,mp_int * out_x,mp_int * out_y,const ECGroup * group)6492 point_mul_two_secp384r1(const mp_int *n1, const mp_int *n2,
6493                         const mp_int *in_x, const mp_int *in_y,
6494                         mp_int *out_x, mp_int *out_y,
6495                         const ECGroup *group)
6496 {
6497     unsigned char b_x[48];
6498     unsigned char b_y[48];
6499     unsigned char b_n1[48];
6500     unsigned char b_n2[48];
6501     mp_err res;
6502 
6503     /* If n2 == NULL or 0, this is just a base-point multiplication. */
6504     if (n2 == NULL || mp_cmp_z(n2) == MP_EQ)
6505         return point_mul_g_secp384r1(n1, out_x, out_y, group);
6506 
6507     /* If n1 == NULL or 0, this is just an arbitary-point multiplication. */
6508     if (n1 == NULL || mp_cmp_z(n1) == MP_EQ)
6509         return point_mul_secp384r1(n2, in_x, in_y, out_x, out_y, group);
6510 
6511     ARGCHK(in_x != NULL && in_y != NULL && out_x != NULL && out_y != NULL,
6512            MP_BADARG);
6513 
6514     /* fail on out of range scalars */
6515     if (mpl_significant_bits(n1) > 384 || mp_cmp_z(n1) != MP_GT ||
6516         mpl_significant_bits(n2) > 384 || mp_cmp_z(n2) != MP_GT)
6517         return MP_RANGE;
6518 
6519     MP_CHECKOK(mp_to_fixlen_octets(n1, b_n1, 48));
6520     MP_CHECKOK(mp_to_fixlen_octets(n2, b_n2, 48));
6521     MP_CHECKOK(mp_to_fixlen_octets(in_x, b_x, 48));
6522     MP_CHECKOK(mp_to_fixlen_octets(in_y, b_y, 48));
6523     MP_BE2LE(b_x);
6524     MP_BE2LE(b_y);
6525     MP_BE2LE(b_n1);
6526     MP_BE2LE(b_n2);
6527     point_mul_two(b_x, b_y, b_n1, b_n2, b_x, b_y);
6528     MP_BE2LE(b_x);
6529     MP_BE2LE(b_y);
6530     MP_CHECKOK(mp_read_unsigned_octets(out_x, b_x, 48));
6531     MP_CHECKOK(mp_read_unsigned_octets(out_y, b_y, 48));
6532 
6533 CLEANUP:
6534     return res;
6535 }
6536 
6537 mp_err
ec_group_set_secp384r1(ECGroup * group,ECCurveName name)6538 ec_group_set_secp384r1(ECGroup *group, ECCurveName name)
6539 {
6540     if (name == ECCurve_NIST_P384) {
6541         group->base_point_mul = &point_mul_g_secp384r1;
6542         group->point_mul = &point_mul_secp384r1;
6543         group->points_mul = &point_mul_two_secp384r1;
6544     }
6545     return MP_OKAY;
6546 }
6547 
6548 #else /* __SIZEOF_INT128__ */
6549 
6550 #include <stdint.h>
6551 #include <string.h>
6552 #define LIMB_BITS 32
6553 #define LIMB_CNT 12
6554 /* Field elements */
6555 typedef uint32_t fe_t[LIMB_CNT];
6556 typedef uint32_t limb_t;
6557 
6558 #define fe_copy(d, s) memcpy(d, s, sizeof(fe_t))
6559 #define fe_set_zero(d) memset(d, 0, sizeof(fe_t))
6560 
6561 /* Projective points */
6562 typedef struct {
6563     fe_t X;
6564     fe_t Y;
6565     fe_t Z;
6566 } pt_prj_t;
6567 
6568 /* Affine points */
6569 typedef struct {
6570     fe_t X;
6571     fe_t Y;
6572 } pt_aff_t;
6573 
6574 /* BEGIN verbatim fiat code https://github.com/mit-plv/fiat-crypto */
6575 /*-
6576  * MIT License
6577  *
6578  * Copyright (c) 2015-2021 the fiat-crypto authors (see the AUTHORS file).
6579  * https://github.com/mit-plv/fiat-crypto/blob/master/AUTHORS
6580  *
6581  * Permission is hereby granted, free of charge, to any person obtaining a copy
6582  * of this software and associated documentation files (the "Software"), to deal
6583  * in the Software without restriction, including without limitation the rights
6584  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
6585  * copies of the Software, and to permit persons to whom the Software is
6586  * furnished to do so, subject to the following conditions:
6587  *
6588  * The above copyright notice and this permission notice shall be included in
6589  * all copies or substantial portions of the Software.
6590  *
6591  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
6592  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
6593  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
6594  * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
6595  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
6596  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
6597  * SOFTWARE.
6598  */
6599 
6600 /* Autogenerated: word_by_word_montgomery --static --use-value-barrier secp384r1 32 '2^384 - 2^128 - 2^96 + 2^32 - 1' */
6601 /* curve description: secp384r1 */
6602 /* machine_wordsize = 32 (from "32") */
6603 /* requested operations: (all) */
6604 /* m = 0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff (from "2^384 - 2^128 - 2^96 + 2^32 - 1") */
6605 /*                                                                    */
6606 /* NOTE: In addition to the bounds specified above each function, all */
6607 /*   functions synthesized for this Montgomery arithmetic require the */
6608 /*   input to be strictly less than the prime modulus (m), and also   */
6609 /*   require the input to be in the unique saturated representation.  */
6610 /*   All functions also ensure that these two properties are true of  */
6611 /*   return values.                                                   */
6612 /*  */
6613 /* Computed values: */
6614 /* eval z = z[0] + (z[1] << 32) + (z[2] << 64) + (z[3] << 96) + (z[4] << 128) + (z[5] << 160) + (z[6] << 192) + (z[7] << 224) + (z[8] << 256) + (z[9] << 0x120) + (z[10] << 0x140) + (z[11] << 0x160) */
6615 /* bytes_eval z = z[0] + (z[1] << 8) + (z[2] << 16) + (z[3] << 24) + (z[4] << 32) + (z[5] << 40) + (z[6] << 48) + (z[7] << 56) + (z[8] << 64) + (z[9] << 72) + (z[10] << 80) + (z[11] << 88) + (z[12] << 96) + (z[13] << 104) + (z[14] << 112) + (z[15] << 120) + (z[16] << 128) + (z[17] << 136) + (z[18] << 144) + (z[19] << 152) + (z[20] << 160) + (z[21] << 168) + (z[22] << 176) + (z[23] << 184) + (z[24] << 192) + (z[25] << 200) + (z[26] << 208) + (z[27] << 216) + (z[28] << 224) + (z[29] << 232) + (z[30] << 240) + (z[31] << 248) + (z[32] << 256) + (z[33] << 0x108) + (z[34] << 0x110) + (z[35] << 0x118) + (z[36] << 0x120) + (z[37] << 0x128) + (z[38] << 0x130) + (z[39] << 0x138) + (z[40] << 0x140) + (z[41] << 0x148) + (z[42] << 0x150) + (z[43] << 0x158) + (z[44] << 0x160) + (z[45] << 0x168) + (z[46] << 0x170) + (z[47] << 0x178) */
6616 
6617 #include <stdint.h>
6618 typedef unsigned char fiat_secp384r1_uint1;
6619 typedef signed char fiat_secp384r1_int1;
6620 
6621 #if (-1 & 3) != 3
6622 #error "This code only works on a two's complement system"
6623 #endif
6624 
6625 #if !defined(FIAT_SECP384R1_NO_ASM) && (defined(__GNUC__) || defined(__clang__))
6626 static __inline__ uint32_t
fiat_secp384r1_value_barrier_u32(uint32_t a)6627 fiat_secp384r1_value_barrier_u32(uint32_t a)
6628 {
6629     __asm__(""
6630             : "+r"(a)
6631             : /* no inputs */);
6632     return a;
6633 }
6634 #else
6635 #define fiat_secp384r1_value_barrier_u32(x) (x)
6636 #endif
6637 
6638 /*
6639  * The function fiat_secp384r1_addcarryx_u32 is an addition with carry.
6640  * Postconditions:
6641  *   out1 = (arg1 + arg2 + arg3) mod 2^32
6642  *   out2 = ⌊(arg1 + arg2 + arg3) / 2^32⌋
6643  *
6644  * Input Bounds:
6645  *   arg1: [0x0 ~> 0x1]
6646  *   arg2: [0x0 ~> 0xffffffff]
6647  *   arg3: [0x0 ~> 0xffffffff]
6648  * Output Bounds:
6649  *   out1: [0x0 ~> 0xffffffff]
6650  *   out2: [0x0 ~> 0x1]
6651  */
6652 static void
fiat_secp384r1_addcarryx_u32(uint32_t * out1,fiat_secp384r1_uint1 * out2,fiat_secp384r1_uint1 arg1,uint32_t arg2,uint32_t arg3)6653 fiat_secp384r1_addcarryx_u32(uint32_t *out1,
6654                              fiat_secp384r1_uint1 *out2,
6655                              fiat_secp384r1_uint1 arg1,
6656                              uint32_t arg2, uint32_t arg3)
6657 {
6658     uint64_t x1;
6659     uint32_t x2;
6660     fiat_secp384r1_uint1 x3;
6661     x1 = ((arg1 + (uint64_t)arg2) + arg3);
6662     x2 = (uint32_t)(x1 & UINT32_C(0xffffffff));
6663     x3 = (fiat_secp384r1_uint1)(x1 >> 32);
6664     *out1 = x2;
6665     *out2 = x3;
6666 }
6667 
6668 /*
6669  * The function fiat_secp384r1_subborrowx_u32 is a subtraction with borrow.
6670  * Postconditions:
6671  *   out1 = (-arg1 + arg2 + -arg3) mod 2^32
6672  *   out2 = -⌊(-arg1 + arg2 + -arg3) / 2^32⌋
6673  *
6674  * Input Bounds:
6675  *   arg1: [0x0 ~> 0x1]
6676  *   arg2: [0x0 ~> 0xffffffff]
6677  *   arg3: [0x0 ~> 0xffffffff]
6678  * Output Bounds:
6679  *   out1: [0x0 ~> 0xffffffff]
6680  *   out2: [0x0 ~> 0x1]
6681  */
6682 static void
fiat_secp384r1_subborrowx_u32(uint32_t * out1,fiat_secp384r1_uint1 * out2,fiat_secp384r1_uint1 arg1,uint32_t arg2,uint32_t arg3)6683 fiat_secp384r1_subborrowx_u32(uint32_t *out1,
6684                               fiat_secp384r1_uint1 *out2,
6685                               fiat_secp384r1_uint1 arg1,
6686                               uint32_t arg2, uint32_t arg3)
6687 {
6688     int64_t x1;
6689     fiat_secp384r1_int1 x2;
6690     uint32_t x3;
6691     x1 = ((arg2 - (int64_t)arg1) - arg3);
6692     x2 = (fiat_secp384r1_int1)(x1 >> 32);
6693     x3 = (uint32_t)(x1 & UINT32_C(0xffffffff));
6694     *out1 = x3;
6695     *out2 = (fiat_secp384r1_uint1)(0x0 - x2);
6696 }
6697 
6698 /*
6699  * The function fiat_secp384r1_mulx_u32 is a multiplication, returning the full double-width result.
6700  * Postconditions:
6701  *   out1 = (arg1 * arg2) mod 2^32
6702  *   out2 = ⌊arg1 * arg2 / 2^32⌋
6703  *
6704  * Input Bounds:
6705  *   arg1: [0x0 ~> 0xffffffff]
6706  *   arg2: [0x0 ~> 0xffffffff]
6707  * Output Bounds:
6708  *   out1: [0x0 ~> 0xffffffff]
6709  *   out2: [0x0 ~> 0xffffffff]
6710  */
6711 static void
fiat_secp384r1_mulx_u32(uint32_t * out1,uint32_t * out2,uint32_t arg1,uint32_t arg2)6712 fiat_secp384r1_mulx_u32(uint32_t *out1, uint32_t *out2,
6713                         uint32_t arg1, uint32_t arg2)
6714 {
6715     uint64_t x1;
6716     uint32_t x2;
6717     uint32_t x3;
6718     x1 = ((uint64_t)arg1 * arg2);
6719     x2 = (uint32_t)(x1 & UINT32_C(0xffffffff));
6720     x3 = (uint32_t)(x1 >> 32);
6721     *out1 = x2;
6722     *out2 = x3;
6723 }
6724 
6725 /*
6726  * The function fiat_secp384r1_cmovznz_u32 is a single-word conditional move.
6727  * Postconditions:
6728  *   out1 = (if arg1 = 0 then arg2 else arg3)
6729  *
6730  * Input Bounds:
6731  *   arg1: [0x0 ~> 0x1]
6732  *   arg2: [0x0 ~> 0xffffffff]
6733  *   arg3: [0x0 ~> 0xffffffff]
6734  * Output Bounds:
6735  *   out1: [0x0 ~> 0xffffffff]
6736  */
6737 static void
fiat_secp384r1_cmovznz_u32(uint32_t * out1,fiat_secp384r1_uint1 arg1,uint32_t arg2,uint32_t arg3)6738 fiat_secp384r1_cmovznz_u32(uint32_t *out1,
6739                            fiat_secp384r1_uint1 arg1, uint32_t arg2,
6740                            uint32_t arg3)
6741 {
6742     fiat_secp384r1_uint1 x1;
6743     uint32_t x2;
6744     uint32_t x3;
6745     x1 = (!(!arg1));
6746     x2 = ((fiat_secp384r1_int1)(0x0 - x1) & UINT32_C(0xffffffff));
6747     x3 = ((fiat_secp384r1_value_barrier_u32(x2) & arg3) |
6748           (fiat_secp384r1_value_barrier_u32((~x2)) & arg2));
6749     *out1 = x3;
6750 }
6751 
6752 /*
6753  * The function fiat_secp384r1_mul multiplies two field elements in the Montgomery domain.
6754  * Preconditions:
6755  *   0 ≤ eval arg1 < m
6756  *   0 ≤ eval arg2 < m
6757  * Postconditions:
6758  *   eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) * eval (from_montgomery arg2)) mod m
6759  *   0 ≤ eval out1 < m
6760  *
6761  * Input Bounds:
6762  *   arg1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
6763  *   arg2: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
6764  * Output Bounds:
6765  *   out1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
6766  */
6767 static void
fiat_secp384r1_mul(uint32_t out1[12],const uint32_t arg1[12],const uint32_t arg2[12])6768 fiat_secp384r1_mul(uint32_t out1[12], const uint32_t arg1[12],
6769                    const uint32_t arg2[12])
6770 {
6771     uint32_t x1;
6772     uint32_t x2;
6773     uint32_t x3;
6774     uint32_t x4;
6775     uint32_t x5;
6776     uint32_t x6;
6777     uint32_t x7;
6778     uint32_t x8;
6779     uint32_t x9;
6780     uint32_t x10;
6781     uint32_t x11;
6782     uint32_t x12;
6783     uint32_t x13;
6784     uint32_t x14;
6785     uint32_t x15;
6786     uint32_t x16;
6787     uint32_t x17;
6788     uint32_t x18;
6789     uint32_t x19;
6790     uint32_t x20;
6791     uint32_t x21;
6792     uint32_t x22;
6793     uint32_t x23;
6794     uint32_t x24;
6795     uint32_t x25;
6796     uint32_t x26;
6797     uint32_t x27;
6798     uint32_t x28;
6799     uint32_t x29;
6800     uint32_t x30;
6801     uint32_t x31;
6802     uint32_t x32;
6803     uint32_t x33;
6804     uint32_t x34;
6805     uint32_t x35;
6806     uint32_t x36;
6807     uint32_t x37;
6808     fiat_secp384r1_uint1 x38;
6809     uint32_t x39;
6810     fiat_secp384r1_uint1 x40;
6811     uint32_t x41;
6812     fiat_secp384r1_uint1 x42;
6813     uint32_t x43;
6814     fiat_secp384r1_uint1 x44;
6815     uint32_t x45;
6816     fiat_secp384r1_uint1 x46;
6817     uint32_t x47;
6818     fiat_secp384r1_uint1 x48;
6819     uint32_t x49;
6820     fiat_secp384r1_uint1 x50;
6821     uint32_t x51;
6822     fiat_secp384r1_uint1 x52;
6823     uint32_t x53;
6824     fiat_secp384r1_uint1 x54;
6825     uint32_t x55;
6826     fiat_secp384r1_uint1 x56;
6827     uint32_t x57;
6828     fiat_secp384r1_uint1 x58;
6829     uint32_t x59;
6830     uint32_t x60;
6831     uint32_t x61;
6832     uint32_t x62;
6833     uint32_t x63;
6834     uint32_t x64;
6835     uint32_t x65;
6836     uint32_t x66;
6837     uint32_t x67;
6838     uint32_t x68;
6839     uint32_t x69;
6840     uint32_t x70;
6841     uint32_t x71;
6842     uint32_t x72;
6843     uint32_t x73;
6844     uint32_t x74;
6845     uint32_t x75;
6846     uint32_t x76;
6847     uint32_t x77;
6848     uint32_t x78;
6849     uint32_t x79;
6850     uint32_t x80;
6851     fiat_secp384r1_uint1 x81;
6852     uint32_t x82;
6853     fiat_secp384r1_uint1 x83;
6854     uint32_t x84;
6855     fiat_secp384r1_uint1 x85;
6856     uint32_t x86;
6857     fiat_secp384r1_uint1 x87;
6858     uint32_t x88;
6859     fiat_secp384r1_uint1 x89;
6860     uint32_t x90;
6861     fiat_secp384r1_uint1 x91;
6862     uint32_t x92;
6863     fiat_secp384r1_uint1 x93;
6864     uint32_t x94;
6865     fiat_secp384r1_uint1 x95;
6866     uint32_t x96;
6867     uint32_t x97;
6868     fiat_secp384r1_uint1 x98;
6869     uint32_t x99;
6870     fiat_secp384r1_uint1 x100;
6871     uint32_t x101;
6872     fiat_secp384r1_uint1 x102;
6873     uint32_t x103;
6874     fiat_secp384r1_uint1 x104;
6875     uint32_t x105;
6876     fiat_secp384r1_uint1 x106;
6877     uint32_t x107;
6878     fiat_secp384r1_uint1 x108;
6879     uint32_t x109;
6880     fiat_secp384r1_uint1 x110;
6881     uint32_t x111;
6882     fiat_secp384r1_uint1 x112;
6883     uint32_t x113;
6884     fiat_secp384r1_uint1 x114;
6885     uint32_t x115;
6886     fiat_secp384r1_uint1 x116;
6887     uint32_t x117;
6888     fiat_secp384r1_uint1 x118;
6889     uint32_t x119;
6890     fiat_secp384r1_uint1 x120;
6891     uint32_t x121;
6892     fiat_secp384r1_uint1 x122;
6893     uint32_t x123;
6894     uint32_t x124;
6895     uint32_t x125;
6896     uint32_t x126;
6897     uint32_t x127;
6898     uint32_t x128;
6899     uint32_t x129;
6900     uint32_t x130;
6901     uint32_t x131;
6902     uint32_t x132;
6903     uint32_t x133;
6904     uint32_t x134;
6905     uint32_t x135;
6906     uint32_t x136;
6907     uint32_t x137;
6908     uint32_t x138;
6909     uint32_t x139;
6910     uint32_t x140;
6911     uint32_t x141;
6912     uint32_t x142;
6913     uint32_t x143;
6914     uint32_t x144;
6915     uint32_t x145;
6916     uint32_t x146;
6917     uint32_t x147;
6918     fiat_secp384r1_uint1 x148;
6919     uint32_t x149;
6920     fiat_secp384r1_uint1 x150;
6921     uint32_t x151;
6922     fiat_secp384r1_uint1 x152;
6923     uint32_t x153;
6924     fiat_secp384r1_uint1 x154;
6925     uint32_t x155;
6926     fiat_secp384r1_uint1 x156;
6927     uint32_t x157;
6928     fiat_secp384r1_uint1 x158;
6929     uint32_t x159;
6930     fiat_secp384r1_uint1 x160;
6931     uint32_t x161;
6932     fiat_secp384r1_uint1 x162;
6933     uint32_t x163;
6934     fiat_secp384r1_uint1 x164;
6935     uint32_t x165;
6936     fiat_secp384r1_uint1 x166;
6937     uint32_t x167;
6938     fiat_secp384r1_uint1 x168;
6939     uint32_t x169;
6940     uint32_t x170;
6941     fiat_secp384r1_uint1 x171;
6942     uint32_t x172;
6943     fiat_secp384r1_uint1 x173;
6944     uint32_t x174;
6945     fiat_secp384r1_uint1 x175;
6946     uint32_t x176;
6947     fiat_secp384r1_uint1 x177;
6948     uint32_t x178;
6949     fiat_secp384r1_uint1 x179;
6950     uint32_t x180;
6951     fiat_secp384r1_uint1 x181;
6952     uint32_t x182;
6953     fiat_secp384r1_uint1 x183;
6954     uint32_t x184;
6955     fiat_secp384r1_uint1 x185;
6956     uint32_t x186;
6957     fiat_secp384r1_uint1 x187;
6958     uint32_t x188;
6959     fiat_secp384r1_uint1 x189;
6960     uint32_t x190;
6961     fiat_secp384r1_uint1 x191;
6962     uint32_t x192;
6963     fiat_secp384r1_uint1 x193;
6964     uint32_t x194;
6965     fiat_secp384r1_uint1 x195;
6966     uint32_t x196;
6967     uint32_t x197;
6968     uint32_t x198;
6969     uint32_t x199;
6970     uint32_t x200;
6971     uint32_t x201;
6972     uint32_t x202;
6973     uint32_t x203;
6974     uint32_t x204;
6975     uint32_t x205;
6976     uint32_t x206;
6977     uint32_t x207;
6978     uint32_t x208;
6979     uint32_t x209;
6980     uint32_t x210;
6981     uint32_t x211;
6982     uint32_t x212;
6983     uint32_t x213;
6984     uint32_t x214;
6985     uint32_t x215;
6986     uint32_t x216;
6987     fiat_secp384r1_uint1 x217;
6988     uint32_t x218;
6989     fiat_secp384r1_uint1 x219;
6990     uint32_t x220;
6991     fiat_secp384r1_uint1 x221;
6992     uint32_t x222;
6993     fiat_secp384r1_uint1 x223;
6994     uint32_t x224;
6995     fiat_secp384r1_uint1 x225;
6996     uint32_t x226;
6997     fiat_secp384r1_uint1 x227;
6998     uint32_t x228;
6999     fiat_secp384r1_uint1 x229;
7000     uint32_t x230;
7001     fiat_secp384r1_uint1 x231;
7002     uint32_t x232;
7003     uint32_t x233;
7004     fiat_secp384r1_uint1 x234;
7005     uint32_t x235;
7006     fiat_secp384r1_uint1 x236;
7007     uint32_t x237;
7008     fiat_secp384r1_uint1 x238;
7009     uint32_t x239;
7010     fiat_secp384r1_uint1 x240;
7011     uint32_t x241;
7012     fiat_secp384r1_uint1 x242;
7013     uint32_t x243;
7014     fiat_secp384r1_uint1 x244;
7015     uint32_t x245;
7016     fiat_secp384r1_uint1 x246;
7017     uint32_t x247;
7018     fiat_secp384r1_uint1 x248;
7019     uint32_t x249;
7020     fiat_secp384r1_uint1 x250;
7021     uint32_t x251;
7022     fiat_secp384r1_uint1 x252;
7023     uint32_t x253;
7024     fiat_secp384r1_uint1 x254;
7025     uint32_t x255;
7026     fiat_secp384r1_uint1 x256;
7027     uint32_t x257;
7028     fiat_secp384r1_uint1 x258;
7029     uint32_t x259;
7030     uint32_t x260;
7031     uint32_t x261;
7032     uint32_t x262;
7033     uint32_t x263;
7034     uint32_t x264;
7035     uint32_t x265;
7036     uint32_t x266;
7037     uint32_t x267;
7038     uint32_t x268;
7039     uint32_t x269;
7040     uint32_t x270;
7041     uint32_t x271;
7042     uint32_t x272;
7043     uint32_t x273;
7044     uint32_t x274;
7045     uint32_t x275;
7046     uint32_t x276;
7047     uint32_t x277;
7048     uint32_t x278;
7049     uint32_t x279;
7050     uint32_t x280;
7051     uint32_t x281;
7052     uint32_t x282;
7053     uint32_t x283;
7054     uint32_t x284;
7055     fiat_secp384r1_uint1 x285;
7056     uint32_t x286;
7057     fiat_secp384r1_uint1 x287;
7058     uint32_t x288;
7059     fiat_secp384r1_uint1 x289;
7060     uint32_t x290;
7061     fiat_secp384r1_uint1 x291;
7062     uint32_t x292;
7063     fiat_secp384r1_uint1 x293;
7064     uint32_t x294;
7065     fiat_secp384r1_uint1 x295;
7066     uint32_t x296;
7067     fiat_secp384r1_uint1 x297;
7068     uint32_t x298;
7069     fiat_secp384r1_uint1 x299;
7070     uint32_t x300;
7071     fiat_secp384r1_uint1 x301;
7072     uint32_t x302;
7073     fiat_secp384r1_uint1 x303;
7074     uint32_t x304;
7075     fiat_secp384r1_uint1 x305;
7076     uint32_t x306;
7077     uint32_t x307;
7078     fiat_secp384r1_uint1 x308;
7079     uint32_t x309;
7080     fiat_secp384r1_uint1 x310;
7081     uint32_t x311;
7082     fiat_secp384r1_uint1 x312;
7083     uint32_t x313;
7084     fiat_secp384r1_uint1 x314;
7085     uint32_t x315;
7086     fiat_secp384r1_uint1 x316;
7087     uint32_t x317;
7088     fiat_secp384r1_uint1 x318;
7089     uint32_t x319;
7090     fiat_secp384r1_uint1 x320;
7091     uint32_t x321;
7092     fiat_secp384r1_uint1 x322;
7093     uint32_t x323;
7094     fiat_secp384r1_uint1 x324;
7095     uint32_t x325;
7096     fiat_secp384r1_uint1 x326;
7097     uint32_t x327;
7098     fiat_secp384r1_uint1 x328;
7099     uint32_t x329;
7100     fiat_secp384r1_uint1 x330;
7101     uint32_t x331;
7102     fiat_secp384r1_uint1 x332;
7103     uint32_t x333;
7104     uint32_t x334;
7105     uint32_t x335;
7106     uint32_t x336;
7107     uint32_t x337;
7108     uint32_t x338;
7109     uint32_t x339;
7110     uint32_t x340;
7111     uint32_t x341;
7112     uint32_t x342;
7113     uint32_t x343;
7114     uint32_t x344;
7115     uint32_t x345;
7116     uint32_t x346;
7117     uint32_t x347;
7118     uint32_t x348;
7119     uint32_t x349;
7120     uint32_t x350;
7121     uint32_t x351;
7122     uint32_t x352;
7123     uint32_t x353;
7124     fiat_secp384r1_uint1 x354;
7125     uint32_t x355;
7126     fiat_secp384r1_uint1 x356;
7127     uint32_t x357;
7128     fiat_secp384r1_uint1 x358;
7129     uint32_t x359;
7130     fiat_secp384r1_uint1 x360;
7131     uint32_t x361;
7132     fiat_secp384r1_uint1 x362;
7133     uint32_t x363;
7134     fiat_secp384r1_uint1 x364;
7135     uint32_t x365;
7136     fiat_secp384r1_uint1 x366;
7137     uint32_t x367;
7138     fiat_secp384r1_uint1 x368;
7139     uint32_t x369;
7140     uint32_t x370;
7141     fiat_secp384r1_uint1 x371;
7142     uint32_t x372;
7143     fiat_secp384r1_uint1 x373;
7144     uint32_t x374;
7145     fiat_secp384r1_uint1 x375;
7146     uint32_t x376;
7147     fiat_secp384r1_uint1 x377;
7148     uint32_t x378;
7149     fiat_secp384r1_uint1 x379;
7150     uint32_t x380;
7151     fiat_secp384r1_uint1 x381;
7152     uint32_t x382;
7153     fiat_secp384r1_uint1 x383;
7154     uint32_t x384;
7155     fiat_secp384r1_uint1 x385;
7156     uint32_t x386;
7157     fiat_secp384r1_uint1 x387;
7158     uint32_t x388;
7159     fiat_secp384r1_uint1 x389;
7160     uint32_t x390;
7161     fiat_secp384r1_uint1 x391;
7162     uint32_t x392;
7163     fiat_secp384r1_uint1 x393;
7164     uint32_t x394;
7165     fiat_secp384r1_uint1 x395;
7166     uint32_t x396;
7167     uint32_t x397;
7168     uint32_t x398;
7169     uint32_t x399;
7170     uint32_t x400;
7171     uint32_t x401;
7172     uint32_t x402;
7173     uint32_t x403;
7174     uint32_t x404;
7175     uint32_t x405;
7176     uint32_t x406;
7177     uint32_t x407;
7178     uint32_t x408;
7179     uint32_t x409;
7180     uint32_t x410;
7181     uint32_t x411;
7182     uint32_t x412;
7183     uint32_t x413;
7184     uint32_t x414;
7185     uint32_t x415;
7186     uint32_t x416;
7187     uint32_t x417;
7188     uint32_t x418;
7189     uint32_t x419;
7190     uint32_t x420;
7191     uint32_t x421;
7192     fiat_secp384r1_uint1 x422;
7193     uint32_t x423;
7194     fiat_secp384r1_uint1 x424;
7195     uint32_t x425;
7196     fiat_secp384r1_uint1 x426;
7197     uint32_t x427;
7198     fiat_secp384r1_uint1 x428;
7199     uint32_t x429;
7200     fiat_secp384r1_uint1 x430;
7201     uint32_t x431;
7202     fiat_secp384r1_uint1 x432;
7203     uint32_t x433;
7204     fiat_secp384r1_uint1 x434;
7205     uint32_t x435;
7206     fiat_secp384r1_uint1 x436;
7207     uint32_t x437;
7208     fiat_secp384r1_uint1 x438;
7209     uint32_t x439;
7210     fiat_secp384r1_uint1 x440;
7211     uint32_t x441;
7212     fiat_secp384r1_uint1 x442;
7213     uint32_t x443;
7214     uint32_t x444;
7215     fiat_secp384r1_uint1 x445;
7216     uint32_t x446;
7217     fiat_secp384r1_uint1 x447;
7218     uint32_t x448;
7219     fiat_secp384r1_uint1 x449;
7220     uint32_t x450;
7221     fiat_secp384r1_uint1 x451;
7222     uint32_t x452;
7223     fiat_secp384r1_uint1 x453;
7224     uint32_t x454;
7225     fiat_secp384r1_uint1 x455;
7226     uint32_t x456;
7227     fiat_secp384r1_uint1 x457;
7228     uint32_t x458;
7229     fiat_secp384r1_uint1 x459;
7230     uint32_t x460;
7231     fiat_secp384r1_uint1 x461;
7232     uint32_t x462;
7233     fiat_secp384r1_uint1 x463;
7234     uint32_t x464;
7235     fiat_secp384r1_uint1 x465;
7236     uint32_t x466;
7237     fiat_secp384r1_uint1 x467;
7238     uint32_t x468;
7239     fiat_secp384r1_uint1 x469;
7240     uint32_t x470;
7241     uint32_t x471;
7242     uint32_t x472;
7243     uint32_t x473;
7244     uint32_t x474;
7245     uint32_t x475;
7246     uint32_t x476;
7247     uint32_t x477;
7248     uint32_t x478;
7249     uint32_t x479;
7250     uint32_t x480;
7251     uint32_t x481;
7252     uint32_t x482;
7253     uint32_t x483;
7254     uint32_t x484;
7255     uint32_t x485;
7256     uint32_t x486;
7257     uint32_t x487;
7258     uint32_t x488;
7259     uint32_t x489;
7260     uint32_t x490;
7261     fiat_secp384r1_uint1 x491;
7262     uint32_t x492;
7263     fiat_secp384r1_uint1 x493;
7264     uint32_t x494;
7265     fiat_secp384r1_uint1 x495;
7266     uint32_t x496;
7267     fiat_secp384r1_uint1 x497;
7268     uint32_t x498;
7269     fiat_secp384r1_uint1 x499;
7270     uint32_t x500;
7271     fiat_secp384r1_uint1 x501;
7272     uint32_t x502;
7273     fiat_secp384r1_uint1 x503;
7274     uint32_t x504;
7275     fiat_secp384r1_uint1 x505;
7276     uint32_t x506;
7277     uint32_t x507;
7278     fiat_secp384r1_uint1 x508;
7279     uint32_t x509;
7280     fiat_secp384r1_uint1 x510;
7281     uint32_t x511;
7282     fiat_secp384r1_uint1 x512;
7283     uint32_t x513;
7284     fiat_secp384r1_uint1 x514;
7285     uint32_t x515;
7286     fiat_secp384r1_uint1 x516;
7287     uint32_t x517;
7288     fiat_secp384r1_uint1 x518;
7289     uint32_t x519;
7290     fiat_secp384r1_uint1 x520;
7291     uint32_t x521;
7292     fiat_secp384r1_uint1 x522;
7293     uint32_t x523;
7294     fiat_secp384r1_uint1 x524;
7295     uint32_t x525;
7296     fiat_secp384r1_uint1 x526;
7297     uint32_t x527;
7298     fiat_secp384r1_uint1 x528;
7299     uint32_t x529;
7300     fiat_secp384r1_uint1 x530;
7301     uint32_t x531;
7302     fiat_secp384r1_uint1 x532;
7303     uint32_t x533;
7304     uint32_t x534;
7305     uint32_t x535;
7306     uint32_t x536;
7307     uint32_t x537;
7308     uint32_t x538;
7309     uint32_t x539;
7310     uint32_t x540;
7311     uint32_t x541;
7312     uint32_t x542;
7313     uint32_t x543;
7314     uint32_t x544;
7315     uint32_t x545;
7316     uint32_t x546;
7317     uint32_t x547;
7318     uint32_t x548;
7319     uint32_t x549;
7320     uint32_t x550;
7321     uint32_t x551;
7322     uint32_t x552;
7323     uint32_t x553;
7324     uint32_t x554;
7325     uint32_t x555;
7326     uint32_t x556;
7327     uint32_t x557;
7328     uint32_t x558;
7329     fiat_secp384r1_uint1 x559;
7330     uint32_t x560;
7331     fiat_secp384r1_uint1 x561;
7332     uint32_t x562;
7333     fiat_secp384r1_uint1 x563;
7334     uint32_t x564;
7335     fiat_secp384r1_uint1 x565;
7336     uint32_t x566;
7337     fiat_secp384r1_uint1 x567;
7338     uint32_t x568;
7339     fiat_secp384r1_uint1 x569;
7340     uint32_t x570;
7341     fiat_secp384r1_uint1 x571;
7342     uint32_t x572;
7343     fiat_secp384r1_uint1 x573;
7344     uint32_t x574;
7345     fiat_secp384r1_uint1 x575;
7346     uint32_t x576;
7347     fiat_secp384r1_uint1 x577;
7348     uint32_t x578;
7349     fiat_secp384r1_uint1 x579;
7350     uint32_t x580;
7351     uint32_t x581;
7352     fiat_secp384r1_uint1 x582;
7353     uint32_t x583;
7354     fiat_secp384r1_uint1 x584;
7355     uint32_t x585;
7356     fiat_secp384r1_uint1 x586;
7357     uint32_t x587;
7358     fiat_secp384r1_uint1 x588;
7359     uint32_t x589;
7360     fiat_secp384r1_uint1 x590;
7361     uint32_t x591;
7362     fiat_secp384r1_uint1 x592;
7363     uint32_t x593;
7364     fiat_secp384r1_uint1 x594;
7365     uint32_t x595;
7366     fiat_secp384r1_uint1 x596;
7367     uint32_t x597;
7368     fiat_secp384r1_uint1 x598;
7369     uint32_t x599;
7370     fiat_secp384r1_uint1 x600;
7371     uint32_t x601;
7372     fiat_secp384r1_uint1 x602;
7373     uint32_t x603;
7374     fiat_secp384r1_uint1 x604;
7375     uint32_t x605;
7376     fiat_secp384r1_uint1 x606;
7377     uint32_t x607;
7378     uint32_t x608;
7379     uint32_t x609;
7380     uint32_t x610;
7381     uint32_t x611;
7382     uint32_t x612;
7383     uint32_t x613;
7384     uint32_t x614;
7385     uint32_t x615;
7386     uint32_t x616;
7387     uint32_t x617;
7388     uint32_t x618;
7389     uint32_t x619;
7390     uint32_t x620;
7391     uint32_t x621;
7392     uint32_t x622;
7393     uint32_t x623;
7394     uint32_t x624;
7395     uint32_t x625;
7396     uint32_t x626;
7397     uint32_t x627;
7398     fiat_secp384r1_uint1 x628;
7399     uint32_t x629;
7400     fiat_secp384r1_uint1 x630;
7401     uint32_t x631;
7402     fiat_secp384r1_uint1 x632;
7403     uint32_t x633;
7404     fiat_secp384r1_uint1 x634;
7405     uint32_t x635;
7406     fiat_secp384r1_uint1 x636;
7407     uint32_t x637;
7408     fiat_secp384r1_uint1 x638;
7409     uint32_t x639;
7410     fiat_secp384r1_uint1 x640;
7411     uint32_t x641;
7412     fiat_secp384r1_uint1 x642;
7413     uint32_t x643;
7414     uint32_t x644;
7415     fiat_secp384r1_uint1 x645;
7416     uint32_t x646;
7417     fiat_secp384r1_uint1 x647;
7418     uint32_t x648;
7419     fiat_secp384r1_uint1 x649;
7420     uint32_t x650;
7421     fiat_secp384r1_uint1 x651;
7422     uint32_t x652;
7423     fiat_secp384r1_uint1 x653;
7424     uint32_t x654;
7425     fiat_secp384r1_uint1 x655;
7426     uint32_t x656;
7427     fiat_secp384r1_uint1 x657;
7428     uint32_t x658;
7429     fiat_secp384r1_uint1 x659;
7430     uint32_t x660;
7431     fiat_secp384r1_uint1 x661;
7432     uint32_t x662;
7433     fiat_secp384r1_uint1 x663;
7434     uint32_t x664;
7435     fiat_secp384r1_uint1 x665;
7436     uint32_t x666;
7437     fiat_secp384r1_uint1 x667;
7438     uint32_t x668;
7439     fiat_secp384r1_uint1 x669;
7440     uint32_t x670;
7441     uint32_t x671;
7442     uint32_t x672;
7443     uint32_t x673;
7444     uint32_t x674;
7445     uint32_t x675;
7446     uint32_t x676;
7447     uint32_t x677;
7448     uint32_t x678;
7449     uint32_t x679;
7450     uint32_t x680;
7451     uint32_t x681;
7452     uint32_t x682;
7453     uint32_t x683;
7454     uint32_t x684;
7455     uint32_t x685;
7456     uint32_t x686;
7457     uint32_t x687;
7458     uint32_t x688;
7459     uint32_t x689;
7460     uint32_t x690;
7461     uint32_t x691;
7462     uint32_t x692;
7463     uint32_t x693;
7464     uint32_t x694;
7465     uint32_t x695;
7466     fiat_secp384r1_uint1 x696;
7467     uint32_t x697;
7468     fiat_secp384r1_uint1 x698;
7469     uint32_t x699;
7470     fiat_secp384r1_uint1 x700;
7471     uint32_t x701;
7472     fiat_secp384r1_uint1 x702;
7473     uint32_t x703;
7474     fiat_secp384r1_uint1 x704;
7475     uint32_t x705;
7476     fiat_secp384r1_uint1 x706;
7477     uint32_t x707;
7478     fiat_secp384r1_uint1 x708;
7479     uint32_t x709;
7480     fiat_secp384r1_uint1 x710;
7481     uint32_t x711;
7482     fiat_secp384r1_uint1 x712;
7483     uint32_t x713;
7484     fiat_secp384r1_uint1 x714;
7485     uint32_t x715;
7486     fiat_secp384r1_uint1 x716;
7487     uint32_t x717;
7488     uint32_t x718;
7489     fiat_secp384r1_uint1 x719;
7490     uint32_t x720;
7491     fiat_secp384r1_uint1 x721;
7492     uint32_t x722;
7493     fiat_secp384r1_uint1 x723;
7494     uint32_t x724;
7495     fiat_secp384r1_uint1 x725;
7496     uint32_t x726;
7497     fiat_secp384r1_uint1 x727;
7498     uint32_t x728;
7499     fiat_secp384r1_uint1 x729;
7500     uint32_t x730;
7501     fiat_secp384r1_uint1 x731;
7502     uint32_t x732;
7503     fiat_secp384r1_uint1 x733;
7504     uint32_t x734;
7505     fiat_secp384r1_uint1 x735;
7506     uint32_t x736;
7507     fiat_secp384r1_uint1 x737;
7508     uint32_t x738;
7509     fiat_secp384r1_uint1 x739;
7510     uint32_t x740;
7511     fiat_secp384r1_uint1 x741;
7512     uint32_t x742;
7513     fiat_secp384r1_uint1 x743;
7514     uint32_t x744;
7515     uint32_t x745;
7516     uint32_t x746;
7517     uint32_t x747;
7518     uint32_t x748;
7519     uint32_t x749;
7520     uint32_t x750;
7521     uint32_t x751;
7522     uint32_t x752;
7523     uint32_t x753;
7524     uint32_t x754;
7525     uint32_t x755;
7526     uint32_t x756;
7527     uint32_t x757;
7528     uint32_t x758;
7529     uint32_t x759;
7530     uint32_t x760;
7531     uint32_t x761;
7532     uint32_t x762;
7533     uint32_t x763;
7534     uint32_t x764;
7535     fiat_secp384r1_uint1 x765;
7536     uint32_t x766;
7537     fiat_secp384r1_uint1 x767;
7538     uint32_t x768;
7539     fiat_secp384r1_uint1 x769;
7540     uint32_t x770;
7541     fiat_secp384r1_uint1 x771;
7542     uint32_t x772;
7543     fiat_secp384r1_uint1 x773;
7544     uint32_t x774;
7545     fiat_secp384r1_uint1 x775;
7546     uint32_t x776;
7547     fiat_secp384r1_uint1 x777;
7548     uint32_t x778;
7549     fiat_secp384r1_uint1 x779;
7550     uint32_t x780;
7551     uint32_t x781;
7552     fiat_secp384r1_uint1 x782;
7553     uint32_t x783;
7554     fiat_secp384r1_uint1 x784;
7555     uint32_t x785;
7556     fiat_secp384r1_uint1 x786;
7557     uint32_t x787;
7558     fiat_secp384r1_uint1 x788;
7559     uint32_t x789;
7560     fiat_secp384r1_uint1 x790;
7561     uint32_t x791;
7562     fiat_secp384r1_uint1 x792;
7563     uint32_t x793;
7564     fiat_secp384r1_uint1 x794;
7565     uint32_t x795;
7566     fiat_secp384r1_uint1 x796;
7567     uint32_t x797;
7568     fiat_secp384r1_uint1 x798;
7569     uint32_t x799;
7570     fiat_secp384r1_uint1 x800;
7571     uint32_t x801;
7572     fiat_secp384r1_uint1 x802;
7573     uint32_t x803;
7574     fiat_secp384r1_uint1 x804;
7575     uint32_t x805;
7576     fiat_secp384r1_uint1 x806;
7577     uint32_t x807;
7578     uint32_t x808;
7579     uint32_t x809;
7580     uint32_t x810;
7581     uint32_t x811;
7582     uint32_t x812;
7583     uint32_t x813;
7584     uint32_t x814;
7585     uint32_t x815;
7586     uint32_t x816;
7587     uint32_t x817;
7588     uint32_t x818;
7589     uint32_t x819;
7590     uint32_t x820;
7591     uint32_t x821;
7592     uint32_t x822;
7593     uint32_t x823;
7594     uint32_t x824;
7595     uint32_t x825;
7596     uint32_t x826;
7597     uint32_t x827;
7598     uint32_t x828;
7599     uint32_t x829;
7600     uint32_t x830;
7601     uint32_t x831;
7602     uint32_t x832;
7603     fiat_secp384r1_uint1 x833;
7604     uint32_t x834;
7605     fiat_secp384r1_uint1 x835;
7606     uint32_t x836;
7607     fiat_secp384r1_uint1 x837;
7608     uint32_t x838;
7609     fiat_secp384r1_uint1 x839;
7610     uint32_t x840;
7611     fiat_secp384r1_uint1 x841;
7612     uint32_t x842;
7613     fiat_secp384r1_uint1 x843;
7614     uint32_t x844;
7615     fiat_secp384r1_uint1 x845;
7616     uint32_t x846;
7617     fiat_secp384r1_uint1 x847;
7618     uint32_t x848;
7619     fiat_secp384r1_uint1 x849;
7620     uint32_t x850;
7621     fiat_secp384r1_uint1 x851;
7622     uint32_t x852;
7623     fiat_secp384r1_uint1 x853;
7624     uint32_t x854;
7625     uint32_t x855;
7626     fiat_secp384r1_uint1 x856;
7627     uint32_t x857;
7628     fiat_secp384r1_uint1 x858;
7629     uint32_t x859;
7630     fiat_secp384r1_uint1 x860;
7631     uint32_t x861;
7632     fiat_secp384r1_uint1 x862;
7633     uint32_t x863;
7634     fiat_secp384r1_uint1 x864;
7635     uint32_t x865;
7636     fiat_secp384r1_uint1 x866;
7637     uint32_t x867;
7638     fiat_secp384r1_uint1 x868;
7639     uint32_t x869;
7640     fiat_secp384r1_uint1 x870;
7641     uint32_t x871;
7642     fiat_secp384r1_uint1 x872;
7643     uint32_t x873;
7644     fiat_secp384r1_uint1 x874;
7645     uint32_t x875;
7646     fiat_secp384r1_uint1 x876;
7647     uint32_t x877;
7648     fiat_secp384r1_uint1 x878;
7649     uint32_t x879;
7650     fiat_secp384r1_uint1 x880;
7651     uint32_t x881;
7652     uint32_t x882;
7653     uint32_t x883;
7654     uint32_t x884;
7655     uint32_t x885;
7656     uint32_t x886;
7657     uint32_t x887;
7658     uint32_t x888;
7659     uint32_t x889;
7660     uint32_t x890;
7661     uint32_t x891;
7662     uint32_t x892;
7663     uint32_t x893;
7664     uint32_t x894;
7665     uint32_t x895;
7666     uint32_t x896;
7667     uint32_t x897;
7668     uint32_t x898;
7669     uint32_t x899;
7670     uint32_t x900;
7671     uint32_t x901;
7672     fiat_secp384r1_uint1 x902;
7673     uint32_t x903;
7674     fiat_secp384r1_uint1 x904;
7675     uint32_t x905;
7676     fiat_secp384r1_uint1 x906;
7677     uint32_t x907;
7678     fiat_secp384r1_uint1 x908;
7679     uint32_t x909;
7680     fiat_secp384r1_uint1 x910;
7681     uint32_t x911;
7682     fiat_secp384r1_uint1 x912;
7683     uint32_t x913;
7684     fiat_secp384r1_uint1 x914;
7685     uint32_t x915;
7686     fiat_secp384r1_uint1 x916;
7687     uint32_t x917;
7688     uint32_t x918;
7689     fiat_secp384r1_uint1 x919;
7690     uint32_t x920;
7691     fiat_secp384r1_uint1 x921;
7692     uint32_t x922;
7693     fiat_secp384r1_uint1 x923;
7694     uint32_t x924;
7695     fiat_secp384r1_uint1 x925;
7696     uint32_t x926;
7697     fiat_secp384r1_uint1 x927;
7698     uint32_t x928;
7699     fiat_secp384r1_uint1 x929;
7700     uint32_t x930;
7701     fiat_secp384r1_uint1 x931;
7702     uint32_t x932;
7703     fiat_secp384r1_uint1 x933;
7704     uint32_t x934;
7705     fiat_secp384r1_uint1 x935;
7706     uint32_t x936;
7707     fiat_secp384r1_uint1 x937;
7708     uint32_t x938;
7709     fiat_secp384r1_uint1 x939;
7710     uint32_t x940;
7711     fiat_secp384r1_uint1 x941;
7712     uint32_t x942;
7713     fiat_secp384r1_uint1 x943;
7714     uint32_t x944;
7715     uint32_t x945;
7716     uint32_t x946;
7717     uint32_t x947;
7718     uint32_t x948;
7719     uint32_t x949;
7720     uint32_t x950;
7721     uint32_t x951;
7722     uint32_t x952;
7723     uint32_t x953;
7724     uint32_t x954;
7725     uint32_t x955;
7726     uint32_t x956;
7727     uint32_t x957;
7728     uint32_t x958;
7729     uint32_t x959;
7730     uint32_t x960;
7731     uint32_t x961;
7732     uint32_t x962;
7733     uint32_t x963;
7734     uint32_t x964;
7735     uint32_t x965;
7736     uint32_t x966;
7737     uint32_t x967;
7738     uint32_t x968;
7739     uint32_t x969;
7740     fiat_secp384r1_uint1 x970;
7741     uint32_t x971;
7742     fiat_secp384r1_uint1 x972;
7743     uint32_t x973;
7744     fiat_secp384r1_uint1 x974;
7745     uint32_t x975;
7746     fiat_secp384r1_uint1 x976;
7747     uint32_t x977;
7748     fiat_secp384r1_uint1 x978;
7749     uint32_t x979;
7750     fiat_secp384r1_uint1 x980;
7751     uint32_t x981;
7752     fiat_secp384r1_uint1 x982;
7753     uint32_t x983;
7754     fiat_secp384r1_uint1 x984;
7755     uint32_t x985;
7756     fiat_secp384r1_uint1 x986;
7757     uint32_t x987;
7758     fiat_secp384r1_uint1 x988;
7759     uint32_t x989;
7760     fiat_secp384r1_uint1 x990;
7761     uint32_t x991;
7762     uint32_t x992;
7763     fiat_secp384r1_uint1 x993;
7764     uint32_t x994;
7765     fiat_secp384r1_uint1 x995;
7766     uint32_t x996;
7767     fiat_secp384r1_uint1 x997;
7768     uint32_t x998;
7769     fiat_secp384r1_uint1 x999;
7770     uint32_t x1000;
7771     fiat_secp384r1_uint1 x1001;
7772     uint32_t x1002;
7773     fiat_secp384r1_uint1 x1003;
7774     uint32_t x1004;
7775     fiat_secp384r1_uint1 x1005;
7776     uint32_t x1006;
7777     fiat_secp384r1_uint1 x1007;
7778     uint32_t x1008;
7779     fiat_secp384r1_uint1 x1009;
7780     uint32_t x1010;
7781     fiat_secp384r1_uint1 x1011;
7782     uint32_t x1012;
7783     fiat_secp384r1_uint1 x1013;
7784     uint32_t x1014;
7785     fiat_secp384r1_uint1 x1015;
7786     uint32_t x1016;
7787     fiat_secp384r1_uint1 x1017;
7788     uint32_t x1018;
7789     uint32_t x1019;
7790     uint32_t x1020;
7791     uint32_t x1021;
7792     uint32_t x1022;
7793     uint32_t x1023;
7794     uint32_t x1024;
7795     uint32_t x1025;
7796     uint32_t x1026;
7797     uint32_t x1027;
7798     uint32_t x1028;
7799     uint32_t x1029;
7800     uint32_t x1030;
7801     uint32_t x1031;
7802     uint32_t x1032;
7803     uint32_t x1033;
7804     uint32_t x1034;
7805     uint32_t x1035;
7806     uint32_t x1036;
7807     uint32_t x1037;
7808     uint32_t x1038;
7809     fiat_secp384r1_uint1 x1039;
7810     uint32_t x1040;
7811     fiat_secp384r1_uint1 x1041;
7812     uint32_t x1042;
7813     fiat_secp384r1_uint1 x1043;
7814     uint32_t x1044;
7815     fiat_secp384r1_uint1 x1045;
7816     uint32_t x1046;
7817     fiat_secp384r1_uint1 x1047;
7818     uint32_t x1048;
7819     fiat_secp384r1_uint1 x1049;
7820     uint32_t x1050;
7821     fiat_secp384r1_uint1 x1051;
7822     uint32_t x1052;
7823     fiat_secp384r1_uint1 x1053;
7824     uint32_t x1054;
7825     uint32_t x1055;
7826     fiat_secp384r1_uint1 x1056;
7827     uint32_t x1057;
7828     fiat_secp384r1_uint1 x1058;
7829     uint32_t x1059;
7830     fiat_secp384r1_uint1 x1060;
7831     uint32_t x1061;
7832     fiat_secp384r1_uint1 x1062;
7833     uint32_t x1063;
7834     fiat_secp384r1_uint1 x1064;
7835     uint32_t x1065;
7836     fiat_secp384r1_uint1 x1066;
7837     uint32_t x1067;
7838     fiat_secp384r1_uint1 x1068;
7839     uint32_t x1069;
7840     fiat_secp384r1_uint1 x1070;
7841     uint32_t x1071;
7842     fiat_secp384r1_uint1 x1072;
7843     uint32_t x1073;
7844     fiat_secp384r1_uint1 x1074;
7845     uint32_t x1075;
7846     fiat_secp384r1_uint1 x1076;
7847     uint32_t x1077;
7848     fiat_secp384r1_uint1 x1078;
7849     uint32_t x1079;
7850     fiat_secp384r1_uint1 x1080;
7851     uint32_t x1081;
7852     uint32_t x1082;
7853     uint32_t x1083;
7854     uint32_t x1084;
7855     uint32_t x1085;
7856     uint32_t x1086;
7857     uint32_t x1087;
7858     uint32_t x1088;
7859     uint32_t x1089;
7860     uint32_t x1090;
7861     uint32_t x1091;
7862     uint32_t x1092;
7863     uint32_t x1093;
7864     uint32_t x1094;
7865     uint32_t x1095;
7866     uint32_t x1096;
7867     uint32_t x1097;
7868     uint32_t x1098;
7869     uint32_t x1099;
7870     uint32_t x1100;
7871     uint32_t x1101;
7872     uint32_t x1102;
7873     uint32_t x1103;
7874     uint32_t x1104;
7875     uint32_t x1105;
7876     uint32_t x1106;
7877     fiat_secp384r1_uint1 x1107;
7878     uint32_t x1108;
7879     fiat_secp384r1_uint1 x1109;
7880     uint32_t x1110;
7881     fiat_secp384r1_uint1 x1111;
7882     uint32_t x1112;
7883     fiat_secp384r1_uint1 x1113;
7884     uint32_t x1114;
7885     fiat_secp384r1_uint1 x1115;
7886     uint32_t x1116;
7887     fiat_secp384r1_uint1 x1117;
7888     uint32_t x1118;
7889     fiat_secp384r1_uint1 x1119;
7890     uint32_t x1120;
7891     fiat_secp384r1_uint1 x1121;
7892     uint32_t x1122;
7893     fiat_secp384r1_uint1 x1123;
7894     uint32_t x1124;
7895     fiat_secp384r1_uint1 x1125;
7896     uint32_t x1126;
7897     fiat_secp384r1_uint1 x1127;
7898     uint32_t x1128;
7899     uint32_t x1129;
7900     fiat_secp384r1_uint1 x1130;
7901     uint32_t x1131;
7902     fiat_secp384r1_uint1 x1132;
7903     uint32_t x1133;
7904     fiat_secp384r1_uint1 x1134;
7905     uint32_t x1135;
7906     fiat_secp384r1_uint1 x1136;
7907     uint32_t x1137;
7908     fiat_secp384r1_uint1 x1138;
7909     uint32_t x1139;
7910     fiat_secp384r1_uint1 x1140;
7911     uint32_t x1141;
7912     fiat_secp384r1_uint1 x1142;
7913     uint32_t x1143;
7914     fiat_secp384r1_uint1 x1144;
7915     uint32_t x1145;
7916     fiat_secp384r1_uint1 x1146;
7917     uint32_t x1147;
7918     fiat_secp384r1_uint1 x1148;
7919     uint32_t x1149;
7920     fiat_secp384r1_uint1 x1150;
7921     uint32_t x1151;
7922     fiat_secp384r1_uint1 x1152;
7923     uint32_t x1153;
7924     fiat_secp384r1_uint1 x1154;
7925     uint32_t x1155;
7926     uint32_t x1156;
7927     uint32_t x1157;
7928     uint32_t x1158;
7929     uint32_t x1159;
7930     uint32_t x1160;
7931     uint32_t x1161;
7932     uint32_t x1162;
7933     uint32_t x1163;
7934     uint32_t x1164;
7935     uint32_t x1165;
7936     uint32_t x1166;
7937     uint32_t x1167;
7938     uint32_t x1168;
7939     uint32_t x1169;
7940     uint32_t x1170;
7941     uint32_t x1171;
7942     uint32_t x1172;
7943     uint32_t x1173;
7944     uint32_t x1174;
7945     uint32_t x1175;
7946     fiat_secp384r1_uint1 x1176;
7947     uint32_t x1177;
7948     fiat_secp384r1_uint1 x1178;
7949     uint32_t x1179;
7950     fiat_secp384r1_uint1 x1180;
7951     uint32_t x1181;
7952     fiat_secp384r1_uint1 x1182;
7953     uint32_t x1183;
7954     fiat_secp384r1_uint1 x1184;
7955     uint32_t x1185;
7956     fiat_secp384r1_uint1 x1186;
7957     uint32_t x1187;
7958     fiat_secp384r1_uint1 x1188;
7959     uint32_t x1189;
7960     fiat_secp384r1_uint1 x1190;
7961     uint32_t x1191;
7962     uint32_t x1192;
7963     fiat_secp384r1_uint1 x1193;
7964     uint32_t x1194;
7965     fiat_secp384r1_uint1 x1195;
7966     uint32_t x1196;
7967     fiat_secp384r1_uint1 x1197;
7968     uint32_t x1198;
7969     fiat_secp384r1_uint1 x1199;
7970     uint32_t x1200;
7971     fiat_secp384r1_uint1 x1201;
7972     uint32_t x1202;
7973     fiat_secp384r1_uint1 x1203;
7974     uint32_t x1204;
7975     fiat_secp384r1_uint1 x1205;
7976     uint32_t x1206;
7977     fiat_secp384r1_uint1 x1207;
7978     uint32_t x1208;
7979     fiat_secp384r1_uint1 x1209;
7980     uint32_t x1210;
7981     fiat_secp384r1_uint1 x1211;
7982     uint32_t x1212;
7983     fiat_secp384r1_uint1 x1213;
7984     uint32_t x1214;
7985     fiat_secp384r1_uint1 x1215;
7986     uint32_t x1216;
7987     fiat_secp384r1_uint1 x1217;
7988     uint32_t x1218;
7989     uint32_t x1219;
7990     uint32_t x1220;
7991     uint32_t x1221;
7992     uint32_t x1222;
7993     uint32_t x1223;
7994     uint32_t x1224;
7995     uint32_t x1225;
7996     uint32_t x1226;
7997     uint32_t x1227;
7998     uint32_t x1228;
7999     uint32_t x1229;
8000     uint32_t x1230;
8001     uint32_t x1231;
8002     uint32_t x1232;
8003     uint32_t x1233;
8004     uint32_t x1234;
8005     uint32_t x1235;
8006     uint32_t x1236;
8007     uint32_t x1237;
8008     uint32_t x1238;
8009     uint32_t x1239;
8010     uint32_t x1240;
8011     uint32_t x1241;
8012     uint32_t x1242;
8013     uint32_t x1243;
8014     fiat_secp384r1_uint1 x1244;
8015     uint32_t x1245;
8016     fiat_secp384r1_uint1 x1246;
8017     uint32_t x1247;
8018     fiat_secp384r1_uint1 x1248;
8019     uint32_t x1249;
8020     fiat_secp384r1_uint1 x1250;
8021     uint32_t x1251;
8022     fiat_secp384r1_uint1 x1252;
8023     uint32_t x1253;
8024     fiat_secp384r1_uint1 x1254;
8025     uint32_t x1255;
8026     fiat_secp384r1_uint1 x1256;
8027     uint32_t x1257;
8028     fiat_secp384r1_uint1 x1258;
8029     uint32_t x1259;
8030     fiat_secp384r1_uint1 x1260;
8031     uint32_t x1261;
8032     fiat_secp384r1_uint1 x1262;
8033     uint32_t x1263;
8034     fiat_secp384r1_uint1 x1264;
8035     uint32_t x1265;
8036     uint32_t x1266;
8037     fiat_secp384r1_uint1 x1267;
8038     uint32_t x1268;
8039     fiat_secp384r1_uint1 x1269;
8040     uint32_t x1270;
8041     fiat_secp384r1_uint1 x1271;
8042     uint32_t x1272;
8043     fiat_secp384r1_uint1 x1273;
8044     uint32_t x1274;
8045     fiat_secp384r1_uint1 x1275;
8046     uint32_t x1276;
8047     fiat_secp384r1_uint1 x1277;
8048     uint32_t x1278;
8049     fiat_secp384r1_uint1 x1279;
8050     uint32_t x1280;
8051     fiat_secp384r1_uint1 x1281;
8052     uint32_t x1282;
8053     fiat_secp384r1_uint1 x1283;
8054     uint32_t x1284;
8055     fiat_secp384r1_uint1 x1285;
8056     uint32_t x1286;
8057     fiat_secp384r1_uint1 x1287;
8058     uint32_t x1288;
8059     fiat_secp384r1_uint1 x1289;
8060     uint32_t x1290;
8061     fiat_secp384r1_uint1 x1291;
8062     uint32_t x1292;
8063     uint32_t x1293;
8064     uint32_t x1294;
8065     uint32_t x1295;
8066     uint32_t x1296;
8067     uint32_t x1297;
8068     uint32_t x1298;
8069     uint32_t x1299;
8070     uint32_t x1300;
8071     uint32_t x1301;
8072     uint32_t x1302;
8073     uint32_t x1303;
8074     uint32_t x1304;
8075     uint32_t x1305;
8076     uint32_t x1306;
8077     uint32_t x1307;
8078     uint32_t x1308;
8079     uint32_t x1309;
8080     uint32_t x1310;
8081     uint32_t x1311;
8082     uint32_t x1312;
8083     fiat_secp384r1_uint1 x1313;
8084     uint32_t x1314;
8085     fiat_secp384r1_uint1 x1315;
8086     uint32_t x1316;
8087     fiat_secp384r1_uint1 x1317;
8088     uint32_t x1318;
8089     fiat_secp384r1_uint1 x1319;
8090     uint32_t x1320;
8091     fiat_secp384r1_uint1 x1321;
8092     uint32_t x1322;
8093     fiat_secp384r1_uint1 x1323;
8094     uint32_t x1324;
8095     fiat_secp384r1_uint1 x1325;
8096     uint32_t x1326;
8097     fiat_secp384r1_uint1 x1327;
8098     uint32_t x1328;
8099     uint32_t x1329;
8100     fiat_secp384r1_uint1 x1330;
8101     uint32_t x1331;
8102     fiat_secp384r1_uint1 x1332;
8103     uint32_t x1333;
8104     fiat_secp384r1_uint1 x1334;
8105     uint32_t x1335;
8106     fiat_secp384r1_uint1 x1336;
8107     uint32_t x1337;
8108     fiat_secp384r1_uint1 x1338;
8109     uint32_t x1339;
8110     fiat_secp384r1_uint1 x1340;
8111     uint32_t x1341;
8112     fiat_secp384r1_uint1 x1342;
8113     uint32_t x1343;
8114     fiat_secp384r1_uint1 x1344;
8115     uint32_t x1345;
8116     fiat_secp384r1_uint1 x1346;
8117     uint32_t x1347;
8118     fiat_secp384r1_uint1 x1348;
8119     uint32_t x1349;
8120     fiat_secp384r1_uint1 x1350;
8121     uint32_t x1351;
8122     fiat_secp384r1_uint1 x1352;
8123     uint32_t x1353;
8124     fiat_secp384r1_uint1 x1354;
8125     uint32_t x1355;
8126     uint32_t x1356;
8127     uint32_t x1357;
8128     uint32_t x1358;
8129     uint32_t x1359;
8130     uint32_t x1360;
8131     uint32_t x1361;
8132     uint32_t x1362;
8133     uint32_t x1363;
8134     uint32_t x1364;
8135     uint32_t x1365;
8136     uint32_t x1366;
8137     uint32_t x1367;
8138     uint32_t x1368;
8139     uint32_t x1369;
8140     uint32_t x1370;
8141     uint32_t x1371;
8142     uint32_t x1372;
8143     uint32_t x1373;
8144     uint32_t x1374;
8145     uint32_t x1375;
8146     uint32_t x1376;
8147     uint32_t x1377;
8148     uint32_t x1378;
8149     uint32_t x1379;
8150     uint32_t x1380;
8151     fiat_secp384r1_uint1 x1381;
8152     uint32_t x1382;
8153     fiat_secp384r1_uint1 x1383;
8154     uint32_t x1384;
8155     fiat_secp384r1_uint1 x1385;
8156     uint32_t x1386;
8157     fiat_secp384r1_uint1 x1387;
8158     uint32_t x1388;
8159     fiat_secp384r1_uint1 x1389;
8160     uint32_t x1390;
8161     fiat_secp384r1_uint1 x1391;
8162     uint32_t x1392;
8163     fiat_secp384r1_uint1 x1393;
8164     uint32_t x1394;
8165     fiat_secp384r1_uint1 x1395;
8166     uint32_t x1396;
8167     fiat_secp384r1_uint1 x1397;
8168     uint32_t x1398;
8169     fiat_secp384r1_uint1 x1399;
8170     uint32_t x1400;
8171     fiat_secp384r1_uint1 x1401;
8172     uint32_t x1402;
8173     uint32_t x1403;
8174     fiat_secp384r1_uint1 x1404;
8175     uint32_t x1405;
8176     fiat_secp384r1_uint1 x1406;
8177     uint32_t x1407;
8178     fiat_secp384r1_uint1 x1408;
8179     uint32_t x1409;
8180     fiat_secp384r1_uint1 x1410;
8181     uint32_t x1411;
8182     fiat_secp384r1_uint1 x1412;
8183     uint32_t x1413;
8184     fiat_secp384r1_uint1 x1414;
8185     uint32_t x1415;
8186     fiat_secp384r1_uint1 x1416;
8187     uint32_t x1417;
8188     fiat_secp384r1_uint1 x1418;
8189     uint32_t x1419;
8190     fiat_secp384r1_uint1 x1420;
8191     uint32_t x1421;
8192     fiat_secp384r1_uint1 x1422;
8193     uint32_t x1423;
8194     fiat_secp384r1_uint1 x1424;
8195     uint32_t x1425;
8196     fiat_secp384r1_uint1 x1426;
8197     uint32_t x1427;
8198     fiat_secp384r1_uint1 x1428;
8199     uint32_t x1429;
8200     uint32_t x1430;
8201     uint32_t x1431;
8202     uint32_t x1432;
8203     uint32_t x1433;
8204     uint32_t x1434;
8205     uint32_t x1435;
8206     uint32_t x1436;
8207     uint32_t x1437;
8208     uint32_t x1438;
8209     uint32_t x1439;
8210     uint32_t x1440;
8211     uint32_t x1441;
8212     uint32_t x1442;
8213     uint32_t x1443;
8214     uint32_t x1444;
8215     uint32_t x1445;
8216     uint32_t x1446;
8217     uint32_t x1447;
8218     uint32_t x1448;
8219     uint32_t x1449;
8220     fiat_secp384r1_uint1 x1450;
8221     uint32_t x1451;
8222     fiat_secp384r1_uint1 x1452;
8223     uint32_t x1453;
8224     fiat_secp384r1_uint1 x1454;
8225     uint32_t x1455;
8226     fiat_secp384r1_uint1 x1456;
8227     uint32_t x1457;
8228     fiat_secp384r1_uint1 x1458;
8229     uint32_t x1459;
8230     fiat_secp384r1_uint1 x1460;
8231     uint32_t x1461;
8232     fiat_secp384r1_uint1 x1462;
8233     uint32_t x1463;
8234     fiat_secp384r1_uint1 x1464;
8235     uint32_t x1465;
8236     uint32_t x1466;
8237     fiat_secp384r1_uint1 x1467;
8238     uint32_t x1468;
8239     fiat_secp384r1_uint1 x1469;
8240     uint32_t x1470;
8241     fiat_secp384r1_uint1 x1471;
8242     uint32_t x1472;
8243     fiat_secp384r1_uint1 x1473;
8244     uint32_t x1474;
8245     fiat_secp384r1_uint1 x1475;
8246     uint32_t x1476;
8247     fiat_secp384r1_uint1 x1477;
8248     uint32_t x1478;
8249     fiat_secp384r1_uint1 x1479;
8250     uint32_t x1480;
8251     fiat_secp384r1_uint1 x1481;
8252     uint32_t x1482;
8253     fiat_secp384r1_uint1 x1483;
8254     uint32_t x1484;
8255     fiat_secp384r1_uint1 x1485;
8256     uint32_t x1486;
8257     fiat_secp384r1_uint1 x1487;
8258     uint32_t x1488;
8259     fiat_secp384r1_uint1 x1489;
8260     uint32_t x1490;
8261     fiat_secp384r1_uint1 x1491;
8262     uint32_t x1492;
8263     uint32_t x1493;
8264     uint32_t x1494;
8265     uint32_t x1495;
8266     uint32_t x1496;
8267     uint32_t x1497;
8268     uint32_t x1498;
8269     uint32_t x1499;
8270     uint32_t x1500;
8271     uint32_t x1501;
8272     uint32_t x1502;
8273     uint32_t x1503;
8274     uint32_t x1504;
8275     uint32_t x1505;
8276     uint32_t x1506;
8277     uint32_t x1507;
8278     uint32_t x1508;
8279     uint32_t x1509;
8280     uint32_t x1510;
8281     uint32_t x1511;
8282     uint32_t x1512;
8283     uint32_t x1513;
8284     uint32_t x1514;
8285     uint32_t x1515;
8286     uint32_t x1516;
8287     uint32_t x1517;
8288     fiat_secp384r1_uint1 x1518;
8289     uint32_t x1519;
8290     fiat_secp384r1_uint1 x1520;
8291     uint32_t x1521;
8292     fiat_secp384r1_uint1 x1522;
8293     uint32_t x1523;
8294     fiat_secp384r1_uint1 x1524;
8295     uint32_t x1525;
8296     fiat_secp384r1_uint1 x1526;
8297     uint32_t x1527;
8298     fiat_secp384r1_uint1 x1528;
8299     uint32_t x1529;
8300     fiat_secp384r1_uint1 x1530;
8301     uint32_t x1531;
8302     fiat_secp384r1_uint1 x1532;
8303     uint32_t x1533;
8304     fiat_secp384r1_uint1 x1534;
8305     uint32_t x1535;
8306     fiat_secp384r1_uint1 x1536;
8307     uint32_t x1537;
8308     fiat_secp384r1_uint1 x1538;
8309     uint32_t x1539;
8310     uint32_t x1540;
8311     fiat_secp384r1_uint1 x1541;
8312     uint32_t x1542;
8313     fiat_secp384r1_uint1 x1543;
8314     uint32_t x1544;
8315     fiat_secp384r1_uint1 x1545;
8316     uint32_t x1546;
8317     fiat_secp384r1_uint1 x1547;
8318     uint32_t x1548;
8319     fiat_secp384r1_uint1 x1549;
8320     uint32_t x1550;
8321     fiat_secp384r1_uint1 x1551;
8322     uint32_t x1552;
8323     fiat_secp384r1_uint1 x1553;
8324     uint32_t x1554;
8325     fiat_secp384r1_uint1 x1555;
8326     uint32_t x1556;
8327     fiat_secp384r1_uint1 x1557;
8328     uint32_t x1558;
8329     fiat_secp384r1_uint1 x1559;
8330     uint32_t x1560;
8331     fiat_secp384r1_uint1 x1561;
8332     uint32_t x1562;
8333     fiat_secp384r1_uint1 x1563;
8334     uint32_t x1564;
8335     fiat_secp384r1_uint1 x1565;
8336     uint32_t x1566;
8337     uint32_t x1567;
8338     uint32_t x1568;
8339     uint32_t x1569;
8340     uint32_t x1570;
8341     uint32_t x1571;
8342     uint32_t x1572;
8343     uint32_t x1573;
8344     uint32_t x1574;
8345     uint32_t x1575;
8346     uint32_t x1576;
8347     uint32_t x1577;
8348     uint32_t x1578;
8349     uint32_t x1579;
8350     uint32_t x1580;
8351     uint32_t x1581;
8352     uint32_t x1582;
8353     uint32_t x1583;
8354     uint32_t x1584;
8355     uint32_t x1585;
8356     uint32_t x1586;
8357     fiat_secp384r1_uint1 x1587;
8358     uint32_t x1588;
8359     fiat_secp384r1_uint1 x1589;
8360     uint32_t x1590;
8361     fiat_secp384r1_uint1 x1591;
8362     uint32_t x1592;
8363     fiat_secp384r1_uint1 x1593;
8364     uint32_t x1594;
8365     fiat_secp384r1_uint1 x1595;
8366     uint32_t x1596;
8367     fiat_secp384r1_uint1 x1597;
8368     uint32_t x1598;
8369     fiat_secp384r1_uint1 x1599;
8370     uint32_t x1600;
8371     fiat_secp384r1_uint1 x1601;
8372     uint32_t x1602;
8373     uint32_t x1603;
8374     fiat_secp384r1_uint1 x1604;
8375     uint32_t x1605;
8376     fiat_secp384r1_uint1 x1606;
8377     uint32_t x1607;
8378     fiat_secp384r1_uint1 x1608;
8379     uint32_t x1609;
8380     fiat_secp384r1_uint1 x1610;
8381     uint32_t x1611;
8382     fiat_secp384r1_uint1 x1612;
8383     uint32_t x1613;
8384     fiat_secp384r1_uint1 x1614;
8385     uint32_t x1615;
8386     fiat_secp384r1_uint1 x1616;
8387     uint32_t x1617;
8388     fiat_secp384r1_uint1 x1618;
8389     uint32_t x1619;
8390     fiat_secp384r1_uint1 x1620;
8391     uint32_t x1621;
8392     fiat_secp384r1_uint1 x1622;
8393     uint32_t x1623;
8394     fiat_secp384r1_uint1 x1624;
8395     uint32_t x1625;
8396     fiat_secp384r1_uint1 x1626;
8397     uint32_t x1627;
8398     fiat_secp384r1_uint1 x1628;
8399     uint32_t x1629;
8400     uint32_t x1630;
8401     fiat_secp384r1_uint1 x1631;
8402     uint32_t x1632;
8403     fiat_secp384r1_uint1 x1633;
8404     uint32_t x1634;
8405     fiat_secp384r1_uint1 x1635;
8406     uint32_t x1636;
8407     fiat_secp384r1_uint1 x1637;
8408     uint32_t x1638;
8409     fiat_secp384r1_uint1 x1639;
8410     uint32_t x1640;
8411     fiat_secp384r1_uint1 x1641;
8412     uint32_t x1642;
8413     fiat_secp384r1_uint1 x1643;
8414     uint32_t x1644;
8415     fiat_secp384r1_uint1 x1645;
8416     uint32_t x1646;
8417     fiat_secp384r1_uint1 x1647;
8418     uint32_t x1648;
8419     fiat_secp384r1_uint1 x1649;
8420     uint32_t x1650;
8421     fiat_secp384r1_uint1 x1651;
8422     uint32_t x1652;
8423     fiat_secp384r1_uint1 x1653;
8424     uint32_t x1654;
8425     fiat_secp384r1_uint1 x1655;
8426     uint32_t x1656;
8427     uint32_t x1657;
8428     uint32_t x1658;
8429     uint32_t x1659;
8430     uint32_t x1660;
8431     uint32_t x1661;
8432     uint32_t x1662;
8433     uint32_t x1663;
8434     uint32_t x1664;
8435     uint32_t x1665;
8436     uint32_t x1666;
8437     uint32_t x1667;
8438     x1 = (arg1[1]);
8439     x2 = (arg1[2]);
8440     x3 = (arg1[3]);
8441     x4 = (arg1[4]);
8442     x5 = (arg1[5]);
8443     x6 = (arg1[6]);
8444     x7 = (arg1[7]);
8445     x8 = (arg1[8]);
8446     x9 = (arg1[9]);
8447     x10 = (arg1[10]);
8448     x11 = (arg1[11]);
8449     x12 = (arg1[0]);
8450     fiat_secp384r1_mulx_u32(&x13, &x14, x12, (arg2[11]));
8451     fiat_secp384r1_mulx_u32(&x15, &x16, x12, (arg2[10]));
8452     fiat_secp384r1_mulx_u32(&x17, &x18, x12, (arg2[9]));
8453     fiat_secp384r1_mulx_u32(&x19, &x20, x12, (arg2[8]));
8454     fiat_secp384r1_mulx_u32(&x21, &x22, x12, (arg2[7]));
8455     fiat_secp384r1_mulx_u32(&x23, &x24, x12, (arg2[6]));
8456     fiat_secp384r1_mulx_u32(&x25, &x26, x12, (arg2[5]));
8457     fiat_secp384r1_mulx_u32(&x27, &x28, x12, (arg2[4]));
8458     fiat_secp384r1_mulx_u32(&x29, &x30, x12, (arg2[3]));
8459     fiat_secp384r1_mulx_u32(&x31, &x32, x12, (arg2[2]));
8460     fiat_secp384r1_mulx_u32(&x33, &x34, x12, (arg2[1]));
8461     fiat_secp384r1_mulx_u32(&x35, &x36, x12, (arg2[0]));
8462     fiat_secp384r1_addcarryx_u32(&x37, &x38, 0x0, x36, x33);
8463     fiat_secp384r1_addcarryx_u32(&x39, &x40, x38, x34, x31);
8464     fiat_secp384r1_addcarryx_u32(&x41, &x42, x40, x32, x29);
8465     fiat_secp384r1_addcarryx_u32(&x43, &x44, x42, x30, x27);
8466     fiat_secp384r1_addcarryx_u32(&x45, &x46, x44, x28, x25);
8467     fiat_secp384r1_addcarryx_u32(&x47, &x48, x46, x26, x23);
8468     fiat_secp384r1_addcarryx_u32(&x49, &x50, x48, x24, x21);
8469     fiat_secp384r1_addcarryx_u32(&x51, &x52, x50, x22, x19);
8470     fiat_secp384r1_addcarryx_u32(&x53, &x54, x52, x20, x17);
8471     fiat_secp384r1_addcarryx_u32(&x55, &x56, x54, x18, x15);
8472     fiat_secp384r1_addcarryx_u32(&x57, &x58, x56, x16, x13);
8473     x59 = (x58 + x14);
8474     fiat_secp384r1_mulx_u32(&x60, &x61, x35, UINT32_C(0xffffffff));
8475     fiat_secp384r1_mulx_u32(&x62, &x63, x35, UINT32_C(0xffffffff));
8476     fiat_secp384r1_mulx_u32(&x64, &x65, x35, UINT32_C(0xffffffff));
8477     fiat_secp384r1_mulx_u32(&x66, &x67, x35, UINT32_C(0xffffffff));
8478     fiat_secp384r1_mulx_u32(&x68, &x69, x35, UINT32_C(0xffffffff));
8479     fiat_secp384r1_mulx_u32(&x70, &x71, x35, UINT32_C(0xffffffff));
8480     fiat_secp384r1_mulx_u32(&x72, &x73, x35, UINT32_C(0xffffffff));
8481     fiat_secp384r1_mulx_u32(&x74, &x75, x35, UINT32_C(0xfffffffe));
8482     fiat_secp384r1_mulx_u32(&x76, &x77, x35, UINT32_C(0xffffffff));
8483     fiat_secp384r1_mulx_u32(&x78, &x79, x35, UINT32_C(0xffffffff));
8484     fiat_secp384r1_addcarryx_u32(&x80, &x81, 0x0, x77, x74);
8485     fiat_secp384r1_addcarryx_u32(&x82, &x83, x81, x75, x72);
8486     fiat_secp384r1_addcarryx_u32(&x84, &x85, x83, x73, x70);
8487     fiat_secp384r1_addcarryx_u32(&x86, &x87, x85, x71, x68);
8488     fiat_secp384r1_addcarryx_u32(&x88, &x89, x87, x69, x66);
8489     fiat_secp384r1_addcarryx_u32(&x90, &x91, x89, x67, x64);
8490     fiat_secp384r1_addcarryx_u32(&x92, &x93, x91, x65, x62);
8491     fiat_secp384r1_addcarryx_u32(&x94, &x95, x93, x63, x60);
8492     x96 = (x95 + x61);
8493     fiat_secp384r1_addcarryx_u32(&x97, &x98, 0x0, x35, x78);
8494     fiat_secp384r1_addcarryx_u32(&x99, &x100, x98, x37, x79);
8495     fiat_secp384r1_addcarryx_u32(&x101, &x102, x100, x39, 0x0);
8496     fiat_secp384r1_addcarryx_u32(&x103, &x104, x102, x41, x76);
8497     fiat_secp384r1_addcarryx_u32(&x105, &x106, x104, x43, x80);
8498     fiat_secp384r1_addcarryx_u32(&x107, &x108, x106, x45, x82);
8499     fiat_secp384r1_addcarryx_u32(&x109, &x110, x108, x47, x84);
8500     fiat_secp384r1_addcarryx_u32(&x111, &x112, x110, x49, x86);
8501     fiat_secp384r1_addcarryx_u32(&x113, &x114, x112, x51, x88);
8502     fiat_secp384r1_addcarryx_u32(&x115, &x116, x114, x53, x90);
8503     fiat_secp384r1_addcarryx_u32(&x117, &x118, x116, x55, x92);
8504     fiat_secp384r1_addcarryx_u32(&x119, &x120, x118, x57, x94);
8505     fiat_secp384r1_addcarryx_u32(&x121, &x122, x120, x59, x96);
8506     fiat_secp384r1_mulx_u32(&x123, &x124, x1, (arg2[11]));
8507     fiat_secp384r1_mulx_u32(&x125, &x126, x1, (arg2[10]));
8508     fiat_secp384r1_mulx_u32(&x127, &x128, x1, (arg2[9]));
8509     fiat_secp384r1_mulx_u32(&x129, &x130, x1, (arg2[8]));
8510     fiat_secp384r1_mulx_u32(&x131, &x132, x1, (arg2[7]));
8511     fiat_secp384r1_mulx_u32(&x133, &x134, x1, (arg2[6]));
8512     fiat_secp384r1_mulx_u32(&x135, &x136, x1, (arg2[5]));
8513     fiat_secp384r1_mulx_u32(&x137, &x138, x1, (arg2[4]));
8514     fiat_secp384r1_mulx_u32(&x139, &x140, x1, (arg2[3]));
8515     fiat_secp384r1_mulx_u32(&x141, &x142, x1, (arg2[2]));
8516     fiat_secp384r1_mulx_u32(&x143, &x144, x1, (arg2[1]));
8517     fiat_secp384r1_mulx_u32(&x145, &x146, x1, (arg2[0]));
8518     fiat_secp384r1_addcarryx_u32(&x147, &x148, 0x0, x146, x143);
8519     fiat_secp384r1_addcarryx_u32(&x149, &x150, x148, x144, x141);
8520     fiat_secp384r1_addcarryx_u32(&x151, &x152, x150, x142, x139);
8521     fiat_secp384r1_addcarryx_u32(&x153, &x154, x152, x140, x137);
8522     fiat_secp384r1_addcarryx_u32(&x155, &x156, x154, x138, x135);
8523     fiat_secp384r1_addcarryx_u32(&x157, &x158, x156, x136, x133);
8524     fiat_secp384r1_addcarryx_u32(&x159, &x160, x158, x134, x131);
8525     fiat_secp384r1_addcarryx_u32(&x161, &x162, x160, x132, x129);
8526     fiat_secp384r1_addcarryx_u32(&x163, &x164, x162, x130, x127);
8527     fiat_secp384r1_addcarryx_u32(&x165, &x166, x164, x128, x125);
8528     fiat_secp384r1_addcarryx_u32(&x167, &x168, x166, x126, x123);
8529     x169 = (x168 + x124);
8530     fiat_secp384r1_addcarryx_u32(&x170, &x171, 0x0, x99, x145);
8531     fiat_secp384r1_addcarryx_u32(&x172, &x173, x171, x101, x147);
8532     fiat_secp384r1_addcarryx_u32(&x174, &x175, x173, x103, x149);
8533     fiat_secp384r1_addcarryx_u32(&x176, &x177, x175, x105, x151);
8534     fiat_secp384r1_addcarryx_u32(&x178, &x179, x177, x107, x153);
8535     fiat_secp384r1_addcarryx_u32(&x180, &x181, x179, x109, x155);
8536     fiat_secp384r1_addcarryx_u32(&x182, &x183, x181, x111, x157);
8537     fiat_secp384r1_addcarryx_u32(&x184, &x185, x183, x113, x159);
8538     fiat_secp384r1_addcarryx_u32(&x186, &x187, x185, x115, x161);
8539     fiat_secp384r1_addcarryx_u32(&x188, &x189, x187, x117, x163);
8540     fiat_secp384r1_addcarryx_u32(&x190, &x191, x189, x119, x165);
8541     fiat_secp384r1_addcarryx_u32(&x192, &x193, x191, x121, x167);
8542     fiat_secp384r1_addcarryx_u32(&x194, &x195, x193, x122, x169);
8543     fiat_secp384r1_mulx_u32(&x196, &x197, x170, UINT32_C(0xffffffff));
8544     fiat_secp384r1_mulx_u32(&x198, &x199, x170, UINT32_C(0xffffffff));
8545     fiat_secp384r1_mulx_u32(&x200, &x201, x170, UINT32_C(0xffffffff));
8546     fiat_secp384r1_mulx_u32(&x202, &x203, x170, UINT32_C(0xffffffff));
8547     fiat_secp384r1_mulx_u32(&x204, &x205, x170, UINT32_C(0xffffffff));
8548     fiat_secp384r1_mulx_u32(&x206, &x207, x170, UINT32_C(0xffffffff));
8549     fiat_secp384r1_mulx_u32(&x208, &x209, x170, UINT32_C(0xffffffff));
8550     fiat_secp384r1_mulx_u32(&x210, &x211, x170, UINT32_C(0xfffffffe));
8551     fiat_secp384r1_mulx_u32(&x212, &x213, x170, UINT32_C(0xffffffff));
8552     fiat_secp384r1_mulx_u32(&x214, &x215, x170, UINT32_C(0xffffffff));
8553     fiat_secp384r1_addcarryx_u32(&x216, &x217, 0x0, x213, x210);
8554     fiat_secp384r1_addcarryx_u32(&x218, &x219, x217, x211, x208);
8555     fiat_secp384r1_addcarryx_u32(&x220, &x221, x219, x209, x206);
8556     fiat_secp384r1_addcarryx_u32(&x222, &x223, x221, x207, x204);
8557     fiat_secp384r1_addcarryx_u32(&x224, &x225, x223, x205, x202);
8558     fiat_secp384r1_addcarryx_u32(&x226, &x227, x225, x203, x200);
8559     fiat_secp384r1_addcarryx_u32(&x228, &x229, x227, x201, x198);
8560     fiat_secp384r1_addcarryx_u32(&x230, &x231, x229, x199, x196);
8561     x232 = (x231 + x197);
8562     fiat_secp384r1_addcarryx_u32(&x233, &x234, 0x0, x170, x214);
8563     fiat_secp384r1_addcarryx_u32(&x235, &x236, x234, x172, x215);
8564     fiat_secp384r1_addcarryx_u32(&x237, &x238, x236, x174, 0x0);
8565     fiat_secp384r1_addcarryx_u32(&x239, &x240, x238, x176, x212);
8566     fiat_secp384r1_addcarryx_u32(&x241, &x242, x240, x178, x216);
8567     fiat_secp384r1_addcarryx_u32(&x243, &x244, x242, x180, x218);
8568     fiat_secp384r1_addcarryx_u32(&x245, &x246, x244, x182, x220);
8569     fiat_secp384r1_addcarryx_u32(&x247, &x248, x246, x184, x222);
8570     fiat_secp384r1_addcarryx_u32(&x249, &x250, x248, x186, x224);
8571     fiat_secp384r1_addcarryx_u32(&x251, &x252, x250, x188, x226);
8572     fiat_secp384r1_addcarryx_u32(&x253, &x254, x252, x190, x228);
8573     fiat_secp384r1_addcarryx_u32(&x255, &x256, x254, x192, x230);
8574     fiat_secp384r1_addcarryx_u32(&x257, &x258, x256, x194, x232);
8575     x259 = ((uint32_t)x258 + x195);
8576     fiat_secp384r1_mulx_u32(&x260, &x261, x2, (arg2[11]));
8577     fiat_secp384r1_mulx_u32(&x262, &x263, x2, (arg2[10]));
8578     fiat_secp384r1_mulx_u32(&x264, &x265, x2, (arg2[9]));
8579     fiat_secp384r1_mulx_u32(&x266, &x267, x2, (arg2[8]));
8580     fiat_secp384r1_mulx_u32(&x268, &x269, x2, (arg2[7]));
8581     fiat_secp384r1_mulx_u32(&x270, &x271, x2, (arg2[6]));
8582     fiat_secp384r1_mulx_u32(&x272, &x273, x2, (arg2[5]));
8583     fiat_secp384r1_mulx_u32(&x274, &x275, x2, (arg2[4]));
8584     fiat_secp384r1_mulx_u32(&x276, &x277, x2, (arg2[3]));
8585     fiat_secp384r1_mulx_u32(&x278, &x279, x2, (arg2[2]));
8586     fiat_secp384r1_mulx_u32(&x280, &x281, x2, (arg2[1]));
8587     fiat_secp384r1_mulx_u32(&x282, &x283, x2, (arg2[0]));
8588     fiat_secp384r1_addcarryx_u32(&x284, &x285, 0x0, x283, x280);
8589     fiat_secp384r1_addcarryx_u32(&x286, &x287, x285, x281, x278);
8590     fiat_secp384r1_addcarryx_u32(&x288, &x289, x287, x279, x276);
8591     fiat_secp384r1_addcarryx_u32(&x290, &x291, x289, x277, x274);
8592     fiat_secp384r1_addcarryx_u32(&x292, &x293, x291, x275, x272);
8593     fiat_secp384r1_addcarryx_u32(&x294, &x295, x293, x273, x270);
8594     fiat_secp384r1_addcarryx_u32(&x296, &x297, x295, x271, x268);
8595     fiat_secp384r1_addcarryx_u32(&x298, &x299, x297, x269, x266);
8596     fiat_secp384r1_addcarryx_u32(&x300, &x301, x299, x267, x264);
8597     fiat_secp384r1_addcarryx_u32(&x302, &x303, x301, x265, x262);
8598     fiat_secp384r1_addcarryx_u32(&x304, &x305, x303, x263, x260);
8599     x306 = (x305 + x261);
8600     fiat_secp384r1_addcarryx_u32(&x307, &x308, 0x0, x235, x282);
8601     fiat_secp384r1_addcarryx_u32(&x309, &x310, x308, x237, x284);
8602     fiat_secp384r1_addcarryx_u32(&x311, &x312, x310, x239, x286);
8603     fiat_secp384r1_addcarryx_u32(&x313, &x314, x312, x241, x288);
8604     fiat_secp384r1_addcarryx_u32(&x315, &x316, x314, x243, x290);
8605     fiat_secp384r1_addcarryx_u32(&x317, &x318, x316, x245, x292);
8606     fiat_secp384r1_addcarryx_u32(&x319, &x320, x318, x247, x294);
8607     fiat_secp384r1_addcarryx_u32(&x321, &x322, x320, x249, x296);
8608     fiat_secp384r1_addcarryx_u32(&x323, &x324, x322, x251, x298);
8609     fiat_secp384r1_addcarryx_u32(&x325, &x326, x324, x253, x300);
8610     fiat_secp384r1_addcarryx_u32(&x327, &x328, x326, x255, x302);
8611     fiat_secp384r1_addcarryx_u32(&x329, &x330, x328, x257, x304);
8612     fiat_secp384r1_addcarryx_u32(&x331, &x332, x330, x259, x306);
8613     fiat_secp384r1_mulx_u32(&x333, &x334, x307, UINT32_C(0xffffffff));
8614     fiat_secp384r1_mulx_u32(&x335, &x336, x307, UINT32_C(0xffffffff));
8615     fiat_secp384r1_mulx_u32(&x337, &x338, x307, UINT32_C(0xffffffff));
8616     fiat_secp384r1_mulx_u32(&x339, &x340, x307, UINT32_C(0xffffffff));
8617     fiat_secp384r1_mulx_u32(&x341, &x342, x307, UINT32_C(0xffffffff));
8618     fiat_secp384r1_mulx_u32(&x343, &x344, x307, UINT32_C(0xffffffff));
8619     fiat_secp384r1_mulx_u32(&x345, &x346, x307, UINT32_C(0xffffffff));
8620     fiat_secp384r1_mulx_u32(&x347, &x348, x307, UINT32_C(0xfffffffe));
8621     fiat_secp384r1_mulx_u32(&x349, &x350, x307, UINT32_C(0xffffffff));
8622     fiat_secp384r1_mulx_u32(&x351, &x352, x307, UINT32_C(0xffffffff));
8623     fiat_secp384r1_addcarryx_u32(&x353, &x354, 0x0, x350, x347);
8624     fiat_secp384r1_addcarryx_u32(&x355, &x356, x354, x348, x345);
8625     fiat_secp384r1_addcarryx_u32(&x357, &x358, x356, x346, x343);
8626     fiat_secp384r1_addcarryx_u32(&x359, &x360, x358, x344, x341);
8627     fiat_secp384r1_addcarryx_u32(&x361, &x362, x360, x342, x339);
8628     fiat_secp384r1_addcarryx_u32(&x363, &x364, x362, x340, x337);
8629     fiat_secp384r1_addcarryx_u32(&x365, &x366, x364, x338, x335);
8630     fiat_secp384r1_addcarryx_u32(&x367, &x368, x366, x336, x333);
8631     x369 = (x368 + x334);
8632     fiat_secp384r1_addcarryx_u32(&x370, &x371, 0x0, x307, x351);
8633     fiat_secp384r1_addcarryx_u32(&x372, &x373, x371, x309, x352);
8634     fiat_secp384r1_addcarryx_u32(&x374, &x375, x373, x311, 0x0);
8635     fiat_secp384r1_addcarryx_u32(&x376, &x377, x375, x313, x349);
8636     fiat_secp384r1_addcarryx_u32(&x378, &x379, x377, x315, x353);
8637     fiat_secp384r1_addcarryx_u32(&x380, &x381, x379, x317, x355);
8638     fiat_secp384r1_addcarryx_u32(&x382, &x383, x381, x319, x357);
8639     fiat_secp384r1_addcarryx_u32(&x384, &x385, x383, x321, x359);
8640     fiat_secp384r1_addcarryx_u32(&x386, &x387, x385, x323, x361);
8641     fiat_secp384r1_addcarryx_u32(&x388, &x389, x387, x325, x363);
8642     fiat_secp384r1_addcarryx_u32(&x390, &x391, x389, x327, x365);
8643     fiat_secp384r1_addcarryx_u32(&x392, &x393, x391, x329, x367);
8644     fiat_secp384r1_addcarryx_u32(&x394, &x395, x393, x331, x369);
8645     x396 = ((uint32_t)x395 + x332);
8646     fiat_secp384r1_mulx_u32(&x397, &x398, x3, (arg2[11]));
8647     fiat_secp384r1_mulx_u32(&x399, &x400, x3, (arg2[10]));
8648     fiat_secp384r1_mulx_u32(&x401, &x402, x3, (arg2[9]));
8649     fiat_secp384r1_mulx_u32(&x403, &x404, x3, (arg2[8]));
8650     fiat_secp384r1_mulx_u32(&x405, &x406, x3, (arg2[7]));
8651     fiat_secp384r1_mulx_u32(&x407, &x408, x3, (arg2[6]));
8652     fiat_secp384r1_mulx_u32(&x409, &x410, x3, (arg2[5]));
8653     fiat_secp384r1_mulx_u32(&x411, &x412, x3, (arg2[4]));
8654     fiat_secp384r1_mulx_u32(&x413, &x414, x3, (arg2[3]));
8655     fiat_secp384r1_mulx_u32(&x415, &x416, x3, (arg2[2]));
8656     fiat_secp384r1_mulx_u32(&x417, &x418, x3, (arg2[1]));
8657     fiat_secp384r1_mulx_u32(&x419, &x420, x3, (arg2[0]));
8658     fiat_secp384r1_addcarryx_u32(&x421, &x422, 0x0, x420, x417);
8659     fiat_secp384r1_addcarryx_u32(&x423, &x424, x422, x418, x415);
8660     fiat_secp384r1_addcarryx_u32(&x425, &x426, x424, x416, x413);
8661     fiat_secp384r1_addcarryx_u32(&x427, &x428, x426, x414, x411);
8662     fiat_secp384r1_addcarryx_u32(&x429, &x430, x428, x412, x409);
8663     fiat_secp384r1_addcarryx_u32(&x431, &x432, x430, x410, x407);
8664     fiat_secp384r1_addcarryx_u32(&x433, &x434, x432, x408, x405);
8665     fiat_secp384r1_addcarryx_u32(&x435, &x436, x434, x406, x403);
8666     fiat_secp384r1_addcarryx_u32(&x437, &x438, x436, x404, x401);
8667     fiat_secp384r1_addcarryx_u32(&x439, &x440, x438, x402, x399);
8668     fiat_secp384r1_addcarryx_u32(&x441, &x442, x440, x400, x397);
8669     x443 = (x442 + x398);
8670     fiat_secp384r1_addcarryx_u32(&x444, &x445, 0x0, x372, x419);
8671     fiat_secp384r1_addcarryx_u32(&x446, &x447, x445, x374, x421);
8672     fiat_secp384r1_addcarryx_u32(&x448, &x449, x447, x376, x423);
8673     fiat_secp384r1_addcarryx_u32(&x450, &x451, x449, x378, x425);
8674     fiat_secp384r1_addcarryx_u32(&x452, &x453, x451, x380, x427);
8675     fiat_secp384r1_addcarryx_u32(&x454, &x455, x453, x382, x429);
8676     fiat_secp384r1_addcarryx_u32(&x456, &x457, x455, x384, x431);
8677     fiat_secp384r1_addcarryx_u32(&x458, &x459, x457, x386, x433);
8678     fiat_secp384r1_addcarryx_u32(&x460, &x461, x459, x388, x435);
8679     fiat_secp384r1_addcarryx_u32(&x462, &x463, x461, x390, x437);
8680     fiat_secp384r1_addcarryx_u32(&x464, &x465, x463, x392, x439);
8681     fiat_secp384r1_addcarryx_u32(&x466, &x467, x465, x394, x441);
8682     fiat_secp384r1_addcarryx_u32(&x468, &x469, x467, x396, x443);
8683     fiat_secp384r1_mulx_u32(&x470, &x471, x444, UINT32_C(0xffffffff));
8684     fiat_secp384r1_mulx_u32(&x472, &x473, x444, UINT32_C(0xffffffff));
8685     fiat_secp384r1_mulx_u32(&x474, &x475, x444, UINT32_C(0xffffffff));
8686     fiat_secp384r1_mulx_u32(&x476, &x477, x444, UINT32_C(0xffffffff));
8687     fiat_secp384r1_mulx_u32(&x478, &x479, x444, UINT32_C(0xffffffff));
8688     fiat_secp384r1_mulx_u32(&x480, &x481, x444, UINT32_C(0xffffffff));
8689     fiat_secp384r1_mulx_u32(&x482, &x483, x444, UINT32_C(0xffffffff));
8690     fiat_secp384r1_mulx_u32(&x484, &x485, x444, UINT32_C(0xfffffffe));
8691     fiat_secp384r1_mulx_u32(&x486, &x487, x444, UINT32_C(0xffffffff));
8692     fiat_secp384r1_mulx_u32(&x488, &x489, x444, UINT32_C(0xffffffff));
8693     fiat_secp384r1_addcarryx_u32(&x490, &x491, 0x0, x487, x484);
8694     fiat_secp384r1_addcarryx_u32(&x492, &x493, x491, x485, x482);
8695     fiat_secp384r1_addcarryx_u32(&x494, &x495, x493, x483, x480);
8696     fiat_secp384r1_addcarryx_u32(&x496, &x497, x495, x481, x478);
8697     fiat_secp384r1_addcarryx_u32(&x498, &x499, x497, x479, x476);
8698     fiat_secp384r1_addcarryx_u32(&x500, &x501, x499, x477, x474);
8699     fiat_secp384r1_addcarryx_u32(&x502, &x503, x501, x475, x472);
8700     fiat_secp384r1_addcarryx_u32(&x504, &x505, x503, x473, x470);
8701     x506 = (x505 + x471);
8702     fiat_secp384r1_addcarryx_u32(&x507, &x508, 0x0, x444, x488);
8703     fiat_secp384r1_addcarryx_u32(&x509, &x510, x508, x446, x489);
8704     fiat_secp384r1_addcarryx_u32(&x511, &x512, x510, x448, 0x0);
8705     fiat_secp384r1_addcarryx_u32(&x513, &x514, x512, x450, x486);
8706     fiat_secp384r1_addcarryx_u32(&x515, &x516, x514, x452, x490);
8707     fiat_secp384r1_addcarryx_u32(&x517, &x518, x516, x454, x492);
8708     fiat_secp384r1_addcarryx_u32(&x519, &x520, x518, x456, x494);
8709     fiat_secp384r1_addcarryx_u32(&x521, &x522, x520, x458, x496);
8710     fiat_secp384r1_addcarryx_u32(&x523, &x524, x522, x460, x498);
8711     fiat_secp384r1_addcarryx_u32(&x525, &x526, x524, x462, x500);
8712     fiat_secp384r1_addcarryx_u32(&x527, &x528, x526, x464, x502);
8713     fiat_secp384r1_addcarryx_u32(&x529, &x530, x528, x466, x504);
8714     fiat_secp384r1_addcarryx_u32(&x531, &x532, x530, x468, x506);
8715     x533 = ((uint32_t)x532 + x469);
8716     fiat_secp384r1_mulx_u32(&x534, &x535, x4, (arg2[11]));
8717     fiat_secp384r1_mulx_u32(&x536, &x537, x4, (arg2[10]));
8718     fiat_secp384r1_mulx_u32(&x538, &x539, x4, (arg2[9]));
8719     fiat_secp384r1_mulx_u32(&x540, &x541, x4, (arg2[8]));
8720     fiat_secp384r1_mulx_u32(&x542, &x543, x4, (arg2[7]));
8721     fiat_secp384r1_mulx_u32(&x544, &x545, x4, (arg2[6]));
8722     fiat_secp384r1_mulx_u32(&x546, &x547, x4, (arg2[5]));
8723     fiat_secp384r1_mulx_u32(&x548, &x549, x4, (arg2[4]));
8724     fiat_secp384r1_mulx_u32(&x550, &x551, x4, (arg2[3]));
8725     fiat_secp384r1_mulx_u32(&x552, &x553, x4, (arg2[2]));
8726     fiat_secp384r1_mulx_u32(&x554, &x555, x4, (arg2[1]));
8727     fiat_secp384r1_mulx_u32(&x556, &x557, x4, (arg2[0]));
8728     fiat_secp384r1_addcarryx_u32(&x558, &x559, 0x0, x557, x554);
8729     fiat_secp384r1_addcarryx_u32(&x560, &x561, x559, x555, x552);
8730     fiat_secp384r1_addcarryx_u32(&x562, &x563, x561, x553, x550);
8731     fiat_secp384r1_addcarryx_u32(&x564, &x565, x563, x551, x548);
8732     fiat_secp384r1_addcarryx_u32(&x566, &x567, x565, x549, x546);
8733     fiat_secp384r1_addcarryx_u32(&x568, &x569, x567, x547, x544);
8734     fiat_secp384r1_addcarryx_u32(&x570, &x571, x569, x545, x542);
8735     fiat_secp384r1_addcarryx_u32(&x572, &x573, x571, x543, x540);
8736     fiat_secp384r1_addcarryx_u32(&x574, &x575, x573, x541, x538);
8737     fiat_secp384r1_addcarryx_u32(&x576, &x577, x575, x539, x536);
8738     fiat_secp384r1_addcarryx_u32(&x578, &x579, x577, x537, x534);
8739     x580 = (x579 + x535);
8740     fiat_secp384r1_addcarryx_u32(&x581, &x582, 0x0, x509, x556);
8741     fiat_secp384r1_addcarryx_u32(&x583, &x584, x582, x511, x558);
8742     fiat_secp384r1_addcarryx_u32(&x585, &x586, x584, x513, x560);
8743     fiat_secp384r1_addcarryx_u32(&x587, &x588, x586, x515, x562);
8744     fiat_secp384r1_addcarryx_u32(&x589, &x590, x588, x517, x564);
8745     fiat_secp384r1_addcarryx_u32(&x591, &x592, x590, x519, x566);
8746     fiat_secp384r1_addcarryx_u32(&x593, &x594, x592, x521, x568);
8747     fiat_secp384r1_addcarryx_u32(&x595, &x596, x594, x523, x570);
8748     fiat_secp384r1_addcarryx_u32(&x597, &x598, x596, x525, x572);
8749     fiat_secp384r1_addcarryx_u32(&x599, &x600, x598, x527, x574);
8750     fiat_secp384r1_addcarryx_u32(&x601, &x602, x600, x529, x576);
8751     fiat_secp384r1_addcarryx_u32(&x603, &x604, x602, x531, x578);
8752     fiat_secp384r1_addcarryx_u32(&x605, &x606, x604, x533, x580);
8753     fiat_secp384r1_mulx_u32(&x607, &x608, x581, UINT32_C(0xffffffff));
8754     fiat_secp384r1_mulx_u32(&x609, &x610, x581, UINT32_C(0xffffffff));
8755     fiat_secp384r1_mulx_u32(&x611, &x612, x581, UINT32_C(0xffffffff));
8756     fiat_secp384r1_mulx_u32(&x613, &x614, x581, UINT32_C(0xffffffff));
8757     fiat_secp384r1_mulx_u32(&x615, &x616, x581, UINT32_C(0xffffffff));
8758     fiat_secp384r1_mulx_u32(&x617, &x618, x581, UINT32_C(0xffffffff));
8759     fiat_secp384r1_mulx_u32(&x619, &x620, x581, UINT32_C(0xffffffff));
8760     fiat_secp384r1_mulx_u32(&x621, &x622, x581, UINT32_C(0xfffffffe));
8761     fiat_secp384r1_mulx_u32(&x623, &x624, x581, UINT32_C(0xffffffff));
8762     fiat_secp384r1_mulx_u32(&x625, &x626, x581, UINT32_C(0xffffffff));
8763     fiat_secp384r1_addcarryx_u32(&x627, &x628, 0x0, x624, x621);
8764     fiat_secp384r1_addcarryx_u32(&x629, &x630, x628, x622, x619);
8765     fiat_secp384r1_addcarryx_u32(&x631, &x632, x630, x620, x617);
8766     fiat_secp384r1_addcarryx_u32(&x633, &x634, x632, x618, x615);
8767     fiat_secp384r1_addcarryx_u32(&x635, &x636, x634, x616, x613);
8768     fiat_secp384r1_addcarryx_u32(&x637, &x638, x636, x614, x611);
8769     fiat_secp384r1_addcarryx_u32(&x639, &x640, x638, x612, x609);
8770     fiat_secp384r1_addcarryx_u32(&x641, &x642, x640, x610, x607);
8771     x643 = (x642 + x608);
8772     fiat_secp384r1_addcarryx_u32(&x644, &x645, 0x0, x581, x625);
8773     fiat_secp384r1_addcarryx_u32(&x646, &x647, x645, x583, x626);
8774     fiat_secp384r1_addcarryx_u32(&x648, &x649, x647, x585, 0x0);
8775     fiat_secp384r1_addcarryx_u32(&x650, &x651, x649, x587, x623);
8776     fiat_secp384r1_addcarryx_u32(&x652, &x653, x651, x589, x627);
8777     fiat_secp384r1_addcarryx_u32(&x654, &x655, x653, x591, x629);
8778     fiat_secp384r1_addcarryx_u32(&x656, &x657, x655, x593, x631);
8779     fiat_secp384r1_addcarryx_u32(&x658, &x659, x657, x595, x633);
8780     fiat_secp384r1_addcarryx_u32(&x660, &x661, x659, x597, x635);
8781     fiat_secp384r1_addcarryx_u32(&x662, &x663, x661, x599, x637);
8782     fiat_secp384r1_addcarryx_u32(&x664, &x665, x663, x601, x639);
8783     fiat_secp384r1_addcarryx_u32(&x666, &x667, x665, x603, x641);
8784     fiat_secp384r1_addcarryx_u32(&x668, &x669, x667, x605, x643);
8785     x670 = ((uint32_t)x669 + x606);
8786     fiat_secp384r1_mulx_u32(&x671, &x672, x5, (arg2[11]));
8787     fiat_secp384r1_mulx_u32(&x673, &x674, x5, (arg2[10]));
8788     fiat_secp384r1_mulx_u32(&x675, &x676, x5, (arg2[9]));
8789     fiat_secp384r1_mulx_u32(&x677, &x678, x5, (arg2[8]));
8790     fiat_secp384r1_mulx_u32(&x679, &x680, x5, (arg2[7]));
8791     fiat_secp384r1_mulx_u32(&x681, &x682, x5, (arg2[6]));
8792     fiat_secp384r1_mulx_u32(&x683, &x684, x5, (arg2[5]));
8793     fiat_secp384r1_mulx_u32(&x685, &x686, x5, (arg2[4]));
8794     fiat_secp384r1_mulx_u32(&x687, &x688, x5, (arg2[3]));
8795     fiat_secp384r1_mulx_u32(&x689, &x690, x5, (arg2[2]));
8796     fiat_secp384r1_mulx_u32(&x691, &x692, x5, (arg2[1]));
8797     fiat_secp384r1_mulx_u32(&x693, &x694, x5, (arg2[0]));
8798     fiat_secp384r1_addcarryx_u32(&x695, &x696, 0x0, x694, x691);
8799     fiat_secp384r1_addcarryx_u32(&x697, &x698, x696, x692, x689);
8800     fiat_secp384r1_addcarryx_u32(&x699, &x700, x698, x690, x687);
8801     fiat_secp384r1_addcarryx_u32(&x701, &x702, x700, x688, x685);
8802     fiat_secp384r1_addcarryx_u32(&x703, &x704, x702, x686, x683);
8803     fiat_secp384r1_addcarryx_u32(&x705, &x706, x704, x684, x681);
8804     fiat_secp384r1_addcarryx_u32(&x707, &x708, x706, x682, x679);
8805     fiat_secp384r1_addcarryx_u32(&x709, &x710, x708, x680, x677);
8806     fiat_secp384r1_addcarryx_u32(&x711, &x712, x710, x678, x675);
8807     fiat_secp384r1_addcarryx_u32(&x713, &x714, x712, x676, x673);
8808     fiat_secp384r1_addcarryx_u32(&x715, &x716, x714, x674, x671);
8809     x717 = (x716 + x672);
8810     fiat_secp384r1_addcarryx_u32(&x718, &x719, 0x0, x646, x693);
8811     fiat_secp384r1_addcarryx_u32(&x720, &x721, x719, x648, x695);
8812     fiat_secp384r1_addcarryx_u32(&x722, &x723, x721, x650, x697);
8813     fiat_secp384r1_addcarryx_u32(&x724, &x725, x723, x652, x699);
8814     fiat_secp384r1_addcarryx_u32(&x726, &x727, x725, x654, x701);
8815     fiat_secp384r1_addcarryx_u32(&x728, &x729, x727, x656, x703);
8816     fiat_secp384r1_addcarryx_u32(&x730, &x731, x729, x658, x705);
8817     fiat_secp384r1_addcarryx_u32(&x732, &x733, x731, x660, x707);
8818     fiat_secp384r1_addcarryx_u32(&x734, &x735, x733, x662, x709);
8819     fiat_secp384r1_addcarryx_u32(&x736, &x737, x735, x664, x711);
8820     fiat_secp384r1_addcarryx_u32(&x738, &x739, x737, x666, x713);
8821     fiat_secp384r1_addcarryx_u32(&x740, &x741, x739, x668, x715);
8822     fiat_secp384r1_addcarryx_u32(&x742, &x743, x741, x670, x717);
8823     fiat_secp384r1_mulx_u32(&x744, &x745, x718, UINT32_C(0xffffffff));
8824     fiat_secp384r1_mulx_u32(&x746, &x747, x718, UINT32_C(0xffffffff));
8825     fiat_secp384r1_mulx_u32(&x748, &x749, x718, UINT32_C(0xffffffff));
8826     fiat_secp384r1_mulx_u32(&x750, &x751, x718, UINT32_C(0xffffffff));
8827     fiat_secp384r1_mulx_u32(&x752, &x753, x718, UINT32_C(0xffffffff));
8828     fiat_secp384r1_mulx_u32(&x754, &x755, x718, UINT32_C(0xffffffff));
8829     fiat_secp384r1_mulx_u32(&x756, &x757, x718, UINT32_C(0xffffffff));
8830     fiat_secp384r1_mulx_u32(&x758, &x759, x718, UINT32_C(0xfffffffe));
8831     fiat_secp384r1_mulx_u32(&x760, &x761, x718, UINT32_C(0xffffffff));
8832     fiat_secp384r1_mulx_u32(&x762, &x763, x718, UINT32_C(0xffffffff));
8833     fiat_secp384r1_addcarryx_u32(&x764, &x765, 0x0, x761, x758);
8834     fiat_secp384r1_addcarryx_u32(&x766, &x767, x765, x759, x756);
8835     fiat_secp384r1_addcarryx_u32(&x768, &x769, x767, x757, x754);
8836     fiat_secp384r1_addcarryx_u32(&x770, &x771, x769, x755, x752);
8837     fiat_secp384r1_addcarryx_u32(&x772, &x773, x771, x753, x750);
8838     fiat_secp384r1_addcarryx_u32(&x774, &x775, x773, x751, x748);
8839     fiat_secp384r1_addcarryx_u32(&x776, &x777, x775, x749, x746);
8840     fiat_secp384r1_addcarryx_u32(&x778, &x779, x777, x747, x744);
8841     x780 = (x779 + x745);
8842     fiat_secp384r1_addcarryx_u32(&x781, &x782, 0x0, x718, x762);
8843     fiat_secp384r1_addcarryx_u32(&x783, &x784, x782, x720, x763);
8844     fiat_secp384r1_addcarryx_u32(&x785, &x786, x784, x722, 0x0);
8845     fiat_secp384r1_addcarryx_u32(&x787, &x788, x786, x724, x760);
8846     fiat_secp384r1_addcarryx_u32(&x789, &x790, x788, x726, x764);
8847     fiat_secp384r1_addcarryx_u32(&x791, &x792, x790, x728, x766);
8848     fiat_secp384r1_addcarryx_u32(&x793, &x794, x792, x730, x768);
8849     fiat_secp384r1_addcarryx_u32(&x795, &x796, x794, x732, x770);
8850     fiat_secp384r1_addcarryx_u32(&x797, &x798, x796, x734, x772);
8851     fiat_secp384r1_addcarryx_u32(&x799, &x800, x798, x736, x774);
8852     fiat_secp384r1_addcarryx_u32(&x801, &x802, x800, x738, x776);
8853     fiat_secp384r1_addcarryx_u32(&x803, &x804, x802, x740, x778);
8854     fiat_secp384r1_addcarryx_u32(&x805, &x806, x804, x742, x780);
8855     x807 = ((uint32_t)x806 + x743);
8856     fiat_secp384r1_mulx_u32(&x808, &x809, x6, (arg2[11]));
8857     fiat_secp384r1_mulx_u32(&x810, &x811, x6, (arg2[10]));
8858     fiat_secp384r1_mulx_u32(&x812, &x813, x6, (arg2[9]));
8859     fiat_secp384r1_mulx_u32(&x814, &x815, x6, (arg2[8]));
8860     fiat_secp384r1_mulx_u32(&x816, &x817, x6, (arg2[7]));
8861     fiat_secp384r1_mulx_u32(&x818, &x819, x6, (arg2[6]));
8862     fiat_secp384r1_mulx_u32(&x820, &x821, x6, (arg2[5]));
8863     fiat_secp384r1_mulx_u32(&x822, &x823, x6, (arg2[4]));
8864     fiat_secp384r1_mulx_u32(&x824, &x825, x6, (arg2[3]));
8865     fiat_secp384r1_mulx_u32(&x826, &x827, x6, (arg2[2]));
8866     fiat_secp384r1_mulx_u32(&x828, &x829, x6, (arg2[1]));
8867     fiat_secp384r1_mulx_u32(&x830, &x831, x6, (arg2[0]));
8868     fiat_secp384r1_addcarryx_u32(&x832, &x833, 0x0, x831, x828);
8869     fiat_secp384r1_addcarryx_u32(&x834, &x835, x833, x829, x826);
8870     fiat_secp384r1_addcarryx_u32(&x836, &x837, x835, x827, x824);
8871     fiat_secp384r1_addcarryx_u32(&x838, &x839, x837, x825, x822);
8872     fiat_secp384r1_addcarryx_u32(&x840, &x841, x839, x823, x820);
8873     fiat_secp384r1_addcarryx_u32(&x842, &x843, x841, x821, x818);
8874     fiat_secp384r1_addcarryx_u32(&x844, &x845, x843, x819, x816);
8875     fiat_secp384r1_addcarryx_u32(&x846, &x847, x845, x817, x814);
8876     fiat_secp384r1_addcarryx_u32(&x848, &x849, x847, x815, x812);
8877     fiat_secp384r1_addcarryx_u32(&x850, &x851, x849, x813, x810);
8878     fiat_secp384r1_addcarryx_u32(&x852, &x853, x851, x811, x808);
8879     x854 = (x853 + x809);
8880     fiat_secp384r1_addcarryx_u32(&x855, &x856, 0x0, x783, x830);
8881     fiat_secp384r1_addcarryx_u32(&x857, &x858, x856, x785, x832);
8882     fiat_secp384r1_addcarryx_u32(&x859, &x860, x858, x787, x834);
8883     fiat_secp384r1_addcarryx_u32(&x861, &x862, x860, x789, x836);
8884     fiat_secp384r1_addcarryx_u32(&x863, &x864, x862, x791, x838);
8885     fiat_secp384r1_addcarryx_u32(&x865, &x866, x864, x793, x840);
8886     fiat_secp384r1_addcarryx_u32(&x867, &x868, x866, x795, x842);
8887     fiat_secp384r1_addcarryx_u32(&x869, &x870, x868, x797, x844);
8888     fiat_secp384r1_addcarryx_u32(&x871, &x872, x870, x799, x846);
8889     fiat_secp384r1_addcarryx_u32(&x873, &x874, x872, x801, x848);
8890     fiat_secp384r1_addcarryx_u32(&x875, &x876, x874, x803, x850);
8891     fiat_secp384r1_addcarryx_u32(&x877, &x878, x876, x805, x852);
8892     fiat_secp384r1_addcarryx_u32(&x879, &x880, x878, x807, x854);
8893     fiat_secp384r1_mulx_u32(&x881, &x882, x855, UINT32_C(0xffffffff));
8894     fiat_secp384r1_mulx_u32(&x883, &x884, x855, UINT32_C(0xffffffff));
8895     fiat_secp384r1_mulx_u32(&x885, &x886, x855, UINT32_C(0xffffffff));
8896     fiat_secp384r1_mulx_u32(&x887, &x888, x855, UINT32_C(0xffffffff));
8897     fiat_secp384r1_mulx_u32(&x889, &x890, x855, UINT32_C(0xffffffff));
8898     fiat_secp384r1_mulx_u32(&x891, &x892, x855, UINT32_C(0xffffffff));
8899     fiat_secp384r1_mulx_u32(&x893, &x894, x855, UINT32_C(0xffffffff));
8900     fiat_secp384r1_mulx_u32(&x895, &x896, x855, UINT32_C(0xfffffffe));
8901     fiat_secp384r1_mulx_u32(&x897, &x898, x855, UINT32_C(0xffffffff));
8902     fiat_secp384r1_mulx_u32(&x899, &x900, x855, UINT32_C(0xffffffff));
8903     fiat_secp384r1_addcarryx_u32(&x901, &x902, 0x0, x898, x895);
8904     fiat_secp384r1_addcarryx_u32(&x903, &x904, x902, x896, x893);
8905     fiat_secp384r1_addcarryx_u32(&x905, &x906, x904, x894, x891);
8906     fiat_secp384r1_addcarryx_u32(&x907, &x908, x906, x892, x889);
8907     fiat_secp384r1_addcarryx_u32(&x909, &x910, x908, x890, x887);
8908     fiat_secp384r1_addcarryx_u32(&x911, &x912, x910, x888, x885);
8909     fiat_secp384r1_addcarryx_u32(&x913, &x914, x912, x886, x883);
8910     fiat_secp384r1_addcarryx_u32(&x915, &x916, x914, x884, x881);
8911     x917 = (x916 + x882);
8912     fiat_secp384r1_addcarryx_u32(&x918, &x919, 0x0, x855, x899);
8913     fiat_secp384r1_addcarryx_u32(&x920, &x921, x919, x857, x900);
8914     fiat_secp384r1_addcarryx_u32(&x922, &x923, x921, x859, 0x0);
8915     fiat_secp384r1_addcarryx_u32(&x924, &x925, x923, x861, x897);
8916     fiat_secp384r1_addcarryx_u32(&x926, &x927, x925, x863, x901);
8917     fiat_secp384r1_addcarryx_u32(&x928, &x929, x927, x865, x903);
8918     fiat_secp384r1_addcarryx_u32(&x930, &x931, x929, x867, x905);
8919     fiat_secp384r1_addcarryx_u32(&x932, &x933, x931, x869, x907);
8920     fiat_secp384r1_addcarryx_u32(&x934, &x935, x933, x871, x909);
8921     fiat_secp384r1_addcarryx_u32(&x936, &x937, x935, x873, x911);
8922     fiat_secp384r1_addcarryx_u32(&x938, &x939, x937, x875, x913);
8923     fiat_secp384r1_addcarryx_u32(&x940, &x941, x939, x877, x915);
8924     fiat_secp384r1_addcarryx_u32(&x942, &x943, x941, x879, x917);
8925     x944 = ((uint32_t)x943 + x880);
8926     fiat_secp384r1_mulx_u32(&x945, &x946, x7, (arg2[11]));
8927     fiat_secp384r1_mulx_u32(&x947, &x948, x7, (arg2[10]));
8928     fiat_secp384r1_mulx_u32(&x949, &x950, x7, (arg2[9]));
8929     fiat_secp384r1_mulx_u32(&x951, &x952, x7, (arg2[8]));
8930     fiat_secp384r1_mulx_u32(&x953, &x954, x7, (arg2[7]));
8931     fiat_secp384r1_mulx_u32(&x955, &x956, x7, (arg2[6]));
8932     fiat_secp384r1_mulx_u32(&x957, &x958, x7, (arg2[5]));
8933     fiat_secp384r1_mulx_u32(&x959, &x960, x7, (arg2[4]));
8934     fiat_secp384r1_mulx_u32(&x961, &x962, x7, (arg2[3]));
8935     fiat_secp384r1_mulx_u32(&x963, &x964, x7, (arg2[2]));
8936     fiat_secp384r1_mulx_u32(&x965, &x966, x7, (arg2[1]));
8937     fiat_secp384r1_mulx_u32(&x967, &x968, x7, (arg2[0]));
8938     fiat_secp384r1_addcarryx_u32(&x969, &x970, 0x0, x968, x965);
8939     fiat_secp384r1_addcarryx_u32(&x971, &x972, x970, x966, x963);
8940     fiat_secp384r1_addcarryx_u32(&x973, &x974, x972, x964, x961);
8941     fiat_secp384r1_addcarryx_u32(&x975, &x976, x974, x962, x959);
8942     fiat_secp384r1_addcarryx_u32(&x977, &x978, x976, x960, x957);
8943     fiat_secp384r1_addcarryx_u32(&x979, &x980, x978, x958, x955);
8944     fiat_secp384r1_addcarryx_u32(&x981, &x982, x980, x956, x953);
8945     fiat_secp384r1_addcarryx_u32(&x983, &x984, x982, x954, x951);
8946     fiat_secp384r1_addcarryx_u32(&x985, &x986, x984, x952, x949);
8947     fiat_secp384r1_addcarryx_u32(&x987, &x988, x986, x950, x947);
8948     fiat_secp384r1_addcarryx_u32(&x989, &x990, x988, x948, x945);
8949     x991 = (x990 + x946);
8950     fiat_secp384r1_addcarryx_u32(&x992, &x993, 0x0, x920, x967);
8951     fiat_secp384r1_addcarryx_u32(&x994, &x995, x993, x922, x969);
8952     fiat_secp384r1_addcarryx_u32(&x996, &x997, x995, x924, x971);
8953     fiat_secp384r1_addcarryx_u32(&x998, &x999, x997, x926, x973);
8954     fiat_secp384r1_addcarryx_u32(&x1000, &x1001, x999, x928, x975);
8955     fiat_secp384r1_addcarryx_u32(&x1002, &x1003, x1001, x930, x977);
8956     fiat_secp384r1_addcarryx_u32(&x1004, &x1005, x1003, x932, x979);
8957     fiat_secp384r1_addcarryx_u32(&x1006, &x1007, x1005, x934, x981);
8958     fiat_secp384r1_addcarryx_u32(&x1008, &x1009, x1007, x936, x983);
8959     fiat_secp384r1_addcarryx_u32(&x1010, &x1011, x1009, x938, x985);
8960     fiat_secp384r1_addcarryx_u32(&x1012, &x1013, x1011, x940, x987);
8961     fiat_secp384r1_addcarryx_u32(&x1014, &x1015, x1013, x942, x989);
8962     fiat_secp384r1_addcarryx_u32(&x1016, &x1017, x1015, x944, x991);
8963     fiat_secp384r1_mulx_u32(&x1018, &x1019, x992, UINT32_C(0xffffffff));
8964     fiat_secp384r1_mulx_u32(&x1020, &x1021, x992, UINT32_C(0xffffffff));
8965     fiat_secp384r1_mulx_u32(&x1022, &x1023, x992, UINT32_C(0xffffffff));
8966     fiat_secp384r1_mulx_u32(&x1024, &x1025, x992, UINT32_C(0xffffffff));
8967     fiat_secp384r1_mulx_u32(&x1026, &x1027, x992, UINT32_C(0xffffffff));
8968     fiat_secp384r1_mulx_u32(&x1028, &x1029, x992, UINT32_C(0xffffffff));
8969     fiat_secp384r1_mulx_u32(&x1030, &x1031, x992, UINT32_C(0xffffffff));
8970     fiat_secp384r1_mulx_u32(&x1032, &x1033, x992, UINT32_C(0xfffffffe));
8971     fiat_secp384r1_mulx_u32(&x1034, &x1035, x992, UINT32_C(0xffffffff));
8972     fiat_secp384r1_mulx_u32(&x1036, &x1037, x992, UINT32_C(0xffffffff));
8973     fiat_secp384r1_addcarryx_u32(&x1038, &x1039, 0x0, x1035, x1032);
8974     fiat_secp384r1_addcarryx_u32(&x1040, &x1041, x1039, x1033, x1030);
8975     fiat_secp384r1_addcarryx_u32(&x1042, &x1043, x1041, x1031, x1028);
8976     fiat_secp384r1_addcarryx_u32(&x1044, &x1045, x1043, x1029, x1026);
8977     fiat_secp384r1_addcarryx_u32(&x1046, &x1047, x1045, x1027, x1024);
8978     fiat_secp384r1_addcarryx_u32(&x1048, &x1049, x1047, x1025, x1022);
8979     fiat_secp384r1_addcarryx_u32(&x1050, &x1051, x1049, x1023, x1020);
8980     fiat_secp384r1_addcarryx_u32(&x1052, &x1053, x1051, x1021, x1018);
8981     x1054 = (x1053 + x1019);
8982     fiat_secp384r1_addcarryx_u32(&x1055, &x1056, 0x0, x992, x1036);
8983     fiat_secp384r1_addcarryx_u32(&x1057, &x1058, x1056, x994, x1037);
8984     fiat_secp384r1_addcarryx_u32(&x1059, &x1060, x1058, x996, 0x0);
8985     fiat_secp384r1_addcarryx_u32(&x1061, &x1062, x1060, x998, x1034);
8986     fiat_secp384r1_addcarryx_u32(&x1063, &x1064, x1062, x1000, x1038);
8987     fiat_secp384r1_addcarryx_u32(&x1065, &x1066, x1064, x1002, x1040);
8988     fiat_secp384r1_addcarryx_u32(&x1067, &x1068, x1066, x1004, x1042);
8989     fiat_secp384r1_addcarryx_u32(&x1069, &x1070, x1068, x1006, x1044);
8990     fiat_secp384r1_addcarryx_u32(&x1071, &x1072, x1070, x1008, x1046);
8991     fiat_secp384r1_addcarryx_u32(&x1073, &x1074, x1072, x1010, x1048);
8992     fiat_secp384r1_addcarryx_u32(&x1075, &x1076, x1074, x1012, x1050);
8993     fiat_secp384r1_addcarryx_u32(&x1077, &x1078, x1076, x1014, x1052);
8994     fiat_secp384r1_addcarryx_u32(&x1079, &x1080, x1078, x1016, x1054);
8995     x1081 = ((uint32_t)x1080 + x1017);
8996     fiat_secp384r1_mulx_u32(&x1082, &x1083, x8, (arg2[11]));
8997     fiat_secp384r1_mulx_u32(&x1084, &x1085, x8, (arg2[10]));
8998     fiat_secp384r1_mulx_u32(&x1086, &x1087, x8, (arg2[9]));
8999     fiat_secp384r1_mulx_u32(&x1088, &x1089, x8, (arg2[8]));
9000     fiat_secp384r1_mulx_u32(&x1090, &x1091, x8, (arg2[7]));
9001     fiat_secp384r1_mulx_u32(&x1092, &x1093, x8, (arg2[6]));
9002     fiat_secp384r1_mulx_u32(&x1094, &x1095, x8, (arg2[5]));
9003     fiat_secp384r1_mulx_u32(&x1096, &x1097, x8, (arg2[4]));
9004     fiat_secp384r1_mulx_u32(&x1098, &x1099, x8, (arg2[3]));
9005     fiat_secp384r1_mulx_u32(&x1100, &x1101, x8, (arg2[2]));
9006     fiat_secp384r1_mulx_u32(&x1102, &x1103, x8, (arg2[1]));
9007     fiat_secp384r1_mulx_u32(&x1104, &x1105, x8, (arg2[0]));
9008     fiat_secp384r1_addcarryx_u32(&x1106, &x1107, 0x0, x1105, x1102);
9009     fiat_secp384r1_addcarryx_u32(&x1108, &x1109, x1107, x1103, x1100);
9010     fiat_secp384r1_addcarryx_u32(&x1110, &x1111, x1109, x1101, x1098);
9011     fiat_secp384r1_addcarryx_u32(&x1112, &x1113, x1111, x1099, x1096);
9012     fiat_secp384r1_addcarryx_u32(&x1114, &x1115, x1113, x1097, x1094);
9013     fiat_secp384r1_addcarryx_u32(&x1116, &x1117, x1115, x1095, x1092);
9014     fiat_secp384r1_addcarryx_u32(&x1118, &x1119, x1117, x1093, x1090);
9015     fiat_secp384r1_addcarryx_u32(&x1120, &x1121, x1119, x1091, x1088);
9016     fiat_secp384r1_addcarryx_u32(&x1122, &x1123, x1121, x1089, x1086);
9017     fiat_secp384r1_addcarryx_u32(&x1124, &x1125, x1123, x1087, x1084);
9018     fiat_secp384r1_addcarryx_u32(&x1126, &x1127, x1125, x1085, x1082);
9019     x1128 = (x1127 + x1083);
9020     fiat_secp384r1_addcarryx_u32(&x1129, &x1130, 0x0, x1057, x1104);
9021     fiat_secp384r1_addcarryx_u32(&x1131, &x1132, x1130, x1059, x1106);
9022     fiat_secp384r1_addcarryx_u32(&x1133, &x1134, x1132, x1061, x1108);
9023     fiat_secp384r1_addcarryx_u32(&x1135, &x1136, x1134, x1063, x1110);
9024     fiat_secp384r1_addcarryx_u32(&x1137, &x1138, x1136, x1065, x1112);
9025     fiat_secp384r1_addcarryx_u32(&x1139, &x1140, x1138, x1067, x1114);
9026     fiat_secp384r1_addcarryx_u32(&x1141, &x1142, x1140, x1069, x1116);
9027     fiat_secp384r1_addcarryx_u32(&x1143, &x1144, x1142, x1071, x1118);
9028     fiat_secp384r1_addcarryx_u32(&x1145, &x1146, x1144, x1073, x1120);
9029     fiat_secp384r1_addcarryx_u32(&x1147, &x1148, x1146, x1075, x1122);
9030     fiat_secp384r1_addcarryx_u32(&x1149, &x1150, x1148, x1077, x1124);
9031     fiat_secp384r1_addcarryx_u32(&x1151, &x1152, x1150, x1079, x1126);
9032     fiat_secp384r1_addcarryx_u32(&x1153, &x1154, x1152, x1081, x1128);
9033     fiat_secp384r1_mulx_u32(&x1155, &x1156, x1129, UINT32_C(0xffffffff));
9034     fiat_secp384r1_mulx_u32(&x1157, &x1158, x1129, UINT32_C(0xffffffff));
9035     fiat_secp384r1_mulx_u32(&x1159, &x1160, x1129, UINT32_C(0xffffffff));
9036     fiat_secp384r1_mulx_u32(&x1161, &x1162, x1129, UINT32_C(0xffffffff));
9037     fiat_secp384r1_mulx_u32(&x1163, &x1164, x1129, UINT32_C(0xffffffff));
9038     fiat_secp384r1_mulx_u32(&x1165, &x1166, x1129, UINT32_C(0xffffffff));
9039     fiat_secp384r1_mulx_u32(&x1167, &x1168, x1129, UINT32_C(0xffffffff));
9040     fiat_secp384r1_mulx_u32(&x1169, &x1170, x1129, UINT32_C(0xfffffffe));
9041     fiat_secp384r1_mulx_u32(&x1171, &x1172, x1129, UINT32_C(0xffffffff));
9042     fiat_secp384r1_mulx_u32(&x1173, &x1174, x1129, UINT32_C(0xffffffff));
9043     fiat_secp384r1_addcarryx_u32(&x1175, &x1176, 0x0, x1172, x1169);
9044     fiat_secp384r1_addcarryx_u32(&x1177, &x1178, x1176, x1170, x1167);
9045     fiat_secp384r1_addcarryx_u32(&x1179, &x1180, x1178, x1168, x1165);
9046     fiat_secp384r1_addcarryx_u32(&x1181, &x1182, x1180, x1166, x1163);
9047     fiat_secp384r1_addcarryx_u32(&x1183, &x1184, x1182, x1164, x1161);
9048     fiat_secp384r1_addcarryx_u32(&x1185, &x1186, x1184, x1162, x1159);
9049     fiat_secp384r1_addcarryx_u32(&x1187, &x1188, x1186, x1160, x1157);
9050     fiat_secp384r1_addcarryx_u32(&x1189, &x1190, x1188, x1158, x1155);
9051     x1191 = (x1190 + x1156);
9052     fiat_secp384r1_addcarryx_u32(&x1192, &x1193, 0x0, x1129, x1173);
9053     fiat_secp384r1_addcarryx_u32(&x1194, &x1195, x1193, x1131, x1174);
9054     fiat_secp384r1_addcarryx_u32(&x1196, &x1197, x1195, x1133, 0x0);
9055     fiat_secp384r1_addcarryx_u32(&x1198, &x1199, x1197, x1135, x1171);
9056     fiat_secp384r1_addcarryx_u32(&x1200, &x1201, x1199, x1137, x1175);
9057     fiat_secp384r1_addcarryx_u32(&x1202, &x1203, x1201, x1139, x1177);
9058     fiat_secp384r1_addcarryx_u32(&x1204, &x1205, x1203, x1141, x1179);
9059     fiat_secp384r1_addcarryx_u32(&x1206, &x1207, x1205, x1143, x1181);
9060     fiat_secp384r1_addcarryx_u32(&x1208, &x1209, x1207, x1145, x1183);
9061     fiat_secp384r1_addcarryx_u32(&x1210, &x1211, x1209, x1147, x1185);
9062     fiat_secp384r1_addcarryx_u32(&x1212, &x1213, x1211, x1149, x1187);
9063     fiat_secp384r1_addcarryx_u32(&x1214, &x1215, x1213, x1151, x1189);
9064     fiat_secp384r1_addcarryx_u32(&x1216, &x1217, x1215, x1153, x1191);
9065     x1218 = ((uint32_t)x1217 + x1154);
9066     fiat_secp384r1_mulx_u32(&x1219, &x1220, x9, (arg2[11]));
9067     fiat_secp384r1_mulx_u32(&x1221, &x1222, x9, (arg2[10]));
9068     fiat_secp384r1_mulx_u32(&x1223, &x1224, x9, (arg2[9]));
9069     fiat_secp384r1_mulx_u32(&x1225, &x1226, x9, (arg2[8]));
9070     fiat_secp384r1_mulx_u32(&x1227, &x1228, x9, (arg2[7]));
9071     fiat_secp384r1_mulx_u32(&x1229, &x1230, x9, (arg2[6]));
9072     fiat_secp384r1_mulx_u32(&x1231, &x1232, x9, (arg2[5]));
9073     fiat_secp384r1_mulx_u32(&x1233, &x1234, x9, (arg2[4]));
9074     fiat_secp384r1_mulx_u32(&x1235, &x1236, x9, (arg2[3]));
9075     fiat_secp384r1_mulx_u32(&x1237, &x1238, x9, (arg2[2]));
9076     fiat_secp384r1_mulx_u32(&x1239, &x1240, x9, (arg2[1]));
9077     fiat_secp384r1_mulx_u32(&x1241, &x1242, x9, (arg2[0]));
9078     fiat_secp384r1_addcarryx_u32(&x1243, &x1244, 0x0, x1242, x1239);
9079     fiat_secp384r1_addcarryx_u32(&x1245, &x1246, x1244, x1240, x1237);
9080     fiat_secp384r1_addcarryx_u32(&x1247, &x1248, x1246, x1238, x1235);
9081     fiat_secp384r1_addcarryx_u32(&x1249, &x1250, x1248, x1236, x1233);
9082     fiat_secp384r1_addcarryx_u32(&x1251, &x1252, x1250, x1234, x1231);
9083     fiat_secp384r1_addcarryx_u32(&x1253, &x1254, x1252, x1232, x1229);
9084     fiat_secp384r1_addcarryx_u32(&x1255, &x1256, x1254, x1230, x1227);
9085     fiat_secp384r1_addcarryx_u32(&x1257, &x1258, x1256, x1228, x1225);
9086     fiat_secp384r1_addcarryx_u32(&x1259, &x1260, x1258, x1226, x1223);
9087     fiat_secp384r1_addcarryx_u32(&x1261, &x1262, x1260, x1224, x1221);
9088     fiat_secp384r1_addcarryx_u32(&x1263, &x1264, x1262, x1222, x1219);
9089     x1265 = (x1264 + x1220);
9090     fiat_secp384r1_addcarryx_u32(&x1266, &x1267, 0x0, x1194, x1241);
9091     fiat_secp384r1_addcarryx_u32(&x1268, &x1269, x1267, x1196, x1243);
9092     fiat_secp384r1_addcarryx_u32(&x1270, &x1271, x1269, x1198, x1245);
9093     fiat_secp384r1_addcarryx_u32(&x1272, &x1273, x1271, x1200, x1247);
9094     fiat_secp384r1_addcarryx_u32(&x1274, &x1275, x1273, x1202, x1249);
9095     fiat_secp384r1_addcarryx_u32(&x1276, &x1277, x1275, x1204, x1251);
9096     fiat_secp384r1_addcarryx_u32(&x1278, &x1279, x1277, x1206, x1253);
9097     fiat_secp384r1_addcarryx_u32(&x1280, &x1281, x1279, x1208, x1255);
9098     fiat_secp384r1_addcarryx_u32(&x1282, &x1283, x1281, x1210, x1257);
9099     fiat_secp384r1_addcarryx_u32(&x1284, &x1285, x1283, x1212, x1259);
9100     fiat_secp384r1_addcarryx_u32(&x1286, &x1287, x1285, x1214, x1261);
9101     fiat_secp384r1_addcarryx_u32(&x1288, &x1289, x1287, x1216, x1263);
9102     fiat_secp384r1_addcarryx_u32(&x1290, &x1291, x1289, x1218, x1265);
9103     fiat_secp384r1_mulx_u32(&x1292, &x1293, x1266, UINT32_C(0xffffffff));
9104     fiat_secp384r1_mulx_u32(&x1294, &x1295, x1266, UINT32_C(0xffffffff));
9105     fiat_secp384r1_mulx_u32(&x1296, &x1297, x1266, UINT32_C(0xffffffff));
9106     fiat_secp384r1_mulx_u32(&x1298, &x1299, x1266, UINT32_C(0xffffffff));
9107     fiat_secp384r1_mulx_u32(&x1300, &x1301, x1266, UINT32_C(0xffffffff));
9108     fiat_secp384r1_mulx_u32(&x1302, &x1303, x1266, UINT32_C(0xffffffff));
9109     fiat_secp384r1_mulx_u32(&x1304, &x1305, x1266, UINT32_C(0xffffffff));
9110     fiat_secp384r1_mulx_u32(&x1306, &x1307, x1266, UINT32_C(0xfffffffe));
9111     fiat_secp384r1_mulx_u32(&x1308, &x1309, x1266, UINT32_C(0xffffffff));
9112     fiat_secp384r1_mulx_u32(&x1310, &x1311, x1266, UINT32_C(0xffffffff));
9113     fiat_secp384r1_addcarryx_u32(&x1312, &x1313, 0x0, x1309, x1306);
9114     fiat_secp384r1_addcarryx_u32(&x1314, &x1315, x1313, x1307, x1304);
9115     fiat_secp384r1_addcarryx_u32(&x1316, &x1317, x1315, x1305, x1302);
9116     fiat_secp384r1_addcarryx_u32(&x1318, &x1319, x1317, x1303, x1300);
9117     fiat_secp384r1_addcarryx_u32(&x1320, &x1321, x1319, x1301, x1298);
9118     fiat_secp384r1_addcarryx_u32(&x1322, &x1323, x1321, x1299, x1296);
9119     fiat_secp384r1_addcarryx_u32(&x1324, &x1325, x1323, x1297, x1294);
9120     fiat_secp384r1_addcarryx_u32(&x1326, &x1327, x1325, x1295, x1292);
9121     x1328 = (x1327 + x1293);
9122     fiat_secp384r1_addcarryx_u32(&x1329, &x1330, 0x0, x1266, x1310);
9123     fiat_secp384r1_addcarryx_u32(&x1331, &x1332, x1330, x1268, x1311);
9124     fiat_secp384r1_addcarryx_u32(&x1333, &x1334, x1332, x1270, 0x0);
9125     fiat_secp384r1_addcarryx_u32(&x1335, &x1336, x1334, x1272, x1308);
9126     fiat_secp384r1_addcarryx_u32(&x1337, &x1338, x1336, x1274, x1312);
9127     fiat_secp384r1_addcarryx_u32(&x1339, &x1340, x1338, x1276, x1314);
9128     fiat_secp384r1_addcarryx_u32(&x1341, &x1342, x1340, x1278, x1316);
9129     fiat_secp384r1_addcarryx_u32(&x1343, &x1344, x1342, x1280, x1318);
9130     fiat_secp384r1_addcarryx_u32(&x1345, &x1346, x1344, x1282, x1320);
9131     fiat_secp384r1_addcarryx_u32(&x1347, &x1348, x1346, x1284, x1322);
9132     fiat_secp384r1_addcarryx_u32(&x1349, &x1350, x1348, x1286, x1324);
9133     fiat_secp384r1_addcarryx_u32(&x1351, &x1352, x1350, x1288, x1326);
9134     fiat_secp384r1_addcarryx_u32(&x1353, &x1354, x1352, x1290, x1328);
9135     x1355 = ((uint32_t)x1354 + x1291);
9136     fiat_secp384r1_mulx_u32(&x1356, &x1357, x10, (arg2[11]));
9137     fiat_secp384r1_mulx_u32(&x1358, &x1359, x10, (arg2[10]));
9138     fiat_secp384r1_mulx_u32(&x1360, &x1361, x10, (arg2[9]));
9139     fiat_secp384r1_mulx_u32(&x1362, &x1363, x10, (arg2[8]));
9140     fiat_secp384r1_mulx_u32(&x1364, &x1365, x10, (arg2[7]));
9141     fiat_secp384r1_mulx_u32(&x1366, &x1367, x10, (arg2[6]));
9142     fiat_secp384r1_mulx_u32(&x1368, &x1369, x10, (arg2[5]));
9143     fiat_secp384r1_mulx_u32(&x1370, &x1371, x10, (arg2[4]));
9144     fiat_secp384r1_mulx_u32(&x1372, &x1373, x10, (arg2[3]));
9145     fiat_secp384r1_mulx_u32(&x1374, &x1375, x10, (arg2[2]));
9146     fiat_secp384r1_mulx_u32(&x1376, &x1377, x10, (arg2[1]));
9147     fiat_secp384r1_mulx_u32(&x1378, &x1379, x10, (arg2[0]));
9148     fiat_secp384r1_addcarryx_u32(&x1380, &x1381, 0x0, x1379, x1376);
9149     fiat_secp384r1_addcarryx_u32(&x1382, &x1383, x1381, x1377, x1374);
9150     fiat_secp384r1_addcarryx_u32(&x1384, &x1385, x1383, x1375, x1372);
9151     fiat_secp384r1_addcarryx_u32(&x1386, &x1387, x1385, x1373, x1370);
9152     fiat_secp384r1_addcarryx_u32(&x1388, &x1389, x1387, x1371, x1368);
9153     fiat_secp384r1_addcarryx_u32(&x1390, &x1391, x1389, x1369, x1366);
9154     fiat_secp384r1_addcarryx_u32(&x1392, &x1393, x1391, x1367, x1364);
9155     fiat_secp384r1_addcarryx_u32(&x1394, &x1395, x1393, x1365, x1362);
9156     fiat_secp384r1_addcarryx_u32(&x1396, &x1397, x1395, x1363, x1360);
9157     fiat_secp384r1_addcarryx_u32(&x1398, &x1399, x1397, x1361, x1358);
9158     fiat_secp384r1_addcarryx_u32(&x1400, &x1401, x1399, x1359, x1356);
9159     x1402 = (x1401 + x1357);
9160     fiat_secp384r1_addcarryx_u32(&x1403, &x1404, 0x0, x1331, x1378);
9161     fiat_secp384r1_addcarryx_u32(&x1405, &x1406, x1404, x1333, x1380);
9162     fiat_secp384r1_addcarryx_u32(&x1407, &x1408, x1406, x1335, x1382);
9163     fiat_secp384r1_addcarryx_u32(&x1409, &x1410, x1408, x1337, x1384);
9164     fiat_secp384r1_addcarryx_u32(&x1411, &x1412, x1410, x1339, x1386);
9165     fiat_secp384r1_addcarryx_u32(&x1413, &x1414, x1412, x1341, x1388);
9166     fiat_secp384r1_addcarryx_u32(&x1415, &x1416, x1414, x1343, x1390);
9167     fiat_secp384r1_addcarryx_u32(&x1417, &x1418, x1416, x1345, x1392);
9168     fiat_secp384r1_addcarryx_u32(&x1419, &x1420, x1418, x1347, x1394);
9169     fiat_secp384r1_addcarryx_u32(&x1421, &x1422, x1420, x1349, x1396);
9170     fiat_secp384r1_addcarryx_u32(&x1423, &x1424, x1422, x1351, x1398);
9171     fiat_secp384r1_addcarryx_u32(&x1425, &x1426, x1424, x1353, x1400);
9172     fiat_secp384r1_addcarryx_u32(&x1427, &x1428, x1426, x1355, x1402);
9173     fiat_secp384r1_mulx_u32(&x1429, &x1430, x1403, UINT32_C(0xffffffff));
9174     fiat_secp384r1_mulx_u32(&x1431, &x1432, x1403, UINT32_C(0xffffffff));
9175     fiat_secp384r1_mulx_u32(&x1433, &x1434, x1403, UINT32_C(0xffffffff));
9176     fiat_secp384r1_mulx_u32(&x1435, &x1436, x1403, UINT32_C(0xffffffff));
9177     fiat_secp384r1_mulx_u32(&x1437, &x1438, x1403, UINT32_C(0xffffffff));
9178     fiat_secp384r1_mulx_u32(&x1439, &x1440, x1403, UINT32_C(0xffffffff));
9179     fiat_secp384r1_mulx_u32(&x1441, &x1442, x1403, UINT32_C(0xffffffff));
9180     fiat_secp384r1_mulx_u32(&x1443, &x1444, x1403, UINT32_C(0xfffffffe));
9181     fiat_secp384r1_mulx_u32(&x1445, &x1446, x1403, UINT32_C(0xffffffff));
9182     fiat_secp384r1_mulx_u32(&x1447, &x1448, x1403, UINT32_C(0xffffffff));
9183     fiat_secp384r1_addcarryx_u32(&x1449, &x1450, 0x0, x1446, x1443);
9184     fiat_secp384r1_addcarryx_u32(&x1451, &x1452, x1450, x1444, x1441);
9185     fiat_secp384r1_addcarryx_u32(&x1453, &x1454, x1452, x1442, x1439);
9186     fiat_secp384r1_addcarryx_u32(&x1455, &x1456, x1454, x1440, x1437);
9187     fiat_secp384r1_addcarryx_u32(&x1457, &x1458, x1456, x1438, x1435);
9188     fiat_secp384r1_addcarryx_u32(&x1459, &x1460, x1458, x1436, x1433);
9189     fiat_secp384r1_addcarryx_u32(&x1461, &x1462, x1460, x1434, x1431);
9190     fiat_secp384r1_addcarryx_u32(&x1463, &x1464, x1462, x1432, x1429);
9191     x1465 = (x1464 + x1430);
9192     fiat_secp384r1_addcarryx_u32(&x1466, &x1467, 0x0, x1403, x1447);
9193     fiat_secp384r1_addcarryx_u32(&x1468, &x1469, x1467, x1405, x1448);
9194     fiat_secp384r1_addcarryx_u32(&x1470, &x1471, x1469, x1407, 0x0);
9195     fiat_secp384r1_addcarryx_u32(&x1472, &x1473, x1471, x1409, x1445);
9196     fiat_secp384r1_addcarryx_u32(&x1474, &x1475, x1473, x1411, x1449);
9197     fiat_secp384r1_addcarryx_u32(&x1476, &x1477, x1475, x1413, x1451);
9198     fiat_secp384r1_addcarryx_u32(&x1478, &x1479, x1477, x1415, x1453);
9199     fiat_secp384r1_addcarryx_u32(&x1480, &x1481, x1479, x1417, x1455);
9200     fiat_secp384r1_addcarryx_u32(&x1482, &x1483, x1481, x1419, x1457);
9201     fiat_secp384r1_addcarryx_u32(&x1484, &x1485, x1483, x1421, x1459);
9202     fiat_secp384r1_addcarryx_u32(&x1486, &x1487, x1485, x1423, x1461);
9203     fiat_secp384r1_addcarryx_u32(&x1488, &x1489, x1487, x1425, x1463);
9204     fiat_secp384r1_addcarryx_u32(&x1490, &x1491, x1489, x1427, x1465);
9205     x1492 = ((uint32_t)x1491 + x1428);
9206     fiat_secp384r1_mulx_u32(&x1493, &x1494, x11, (arg2[11]));
9207     fiat_secp384r1_mulx_u32(&x1495, &x1496, x11, (arg2[10]));
9208     fiat_secp384r1_mulx_u32(&x1497, &x1498, x11, (arg2[9]));
9209     fiat_secp384r1_mulx_u32(&x1499, &x1500, x11, (arg2[8]));
9210     fiat_secp384r1_mulx_u32(&x1501, &x1502, x11, (arg2[7]));
9211     fiat_secp384r1_mulx_u32(&x1503, &x1504, x11, (arg2[6]));
9212     fiat_secp384r1_mulx_u32(&x1505, &x1506, x11, (arg2[5]));
9213     fiat_secp384r1_mulx_u32(&x1507, &x1508, x11, (arg2[4]));
9214     fiat_secp384r1_mulx_u32(&x1509, &x1510, x11, (arg2[3]));
9215     fiat_secp384r1_mulx_u32(&x1511, &x1512, x11, (arg2[2]));
9216     fiat_secp384r1_mulx_u32(&x1513, &x1514, x11, (arg2[1]));
9217     fiat_secp384r1_mulx_u32(&x1515, &x1516, x11, (arg2[0]));
9218     fiat_secp384r1_addcarryx_u32(&x1517, &x1518, 0x0, x1516, x1513);
9219     fiat_secp384r1_addcarryx_u32(&x1519, &x1520, x1518, x1514, x1511);
9220     fiat_secp384r1_addcarryx_u32(&x1521, &x1522, x1520, x1512, x1509);
9221     fiat_secp384r1_addcarryx_u32(&x1523, &x1524, x1522, x1510, x1507);
9222     fiat_secp384r1_addcarryx_u32(&x1525, &x1526, x1524, x1508, x1505);
9223     fiat_secp384r1_addcarryx_u32(&x1527, &x1528, x1526, x1506, x1503);
9224     fiat_secp384r1_addcarryx_u32(&x1529, &x1530, x1528, x1504, x1501);
9225     fiat_secp384r1_addcarryx_u32(&x1531, &x1532, x1530, x1502, x1499);
9226     fiat_secp384r1_addcarryx_u32(&x1533, &x1534, x1532, x1500, x1497);
9227     fiat_secp384r1_addcarryx_u32(&x1535, &x1536, x1534, x1498, x1495);
9228     fiat_secp384r1_addcarryx_u32(&x1537, &x1538, x1536, x1496, x1493);
9229     x1539 = (x1538 + x1494);
9230     fiat_secp384r1_addcarryx_u32(&x1540, &x1541, 0x0, x1468, x1515);
9231     fiat_secp384r1_addcarryx_u32(&x1542, &x1543, x1541, x1470, x1517);
9232     fiat_secp384r1_addcarryx_u32(&x1544, &x1545, x1543, x1472, x1519);
9233     fiat_secp384r1_addcarryx_u32(&x1546, &x1547, x1545, x1474, x1521);
9234     fiat_secp384r1_addcarryx_u32(&x1548, &x1549, x1547, x1476, x1523);
9235     fiat_secp384r1_addcarryx_u32(&x1550, &x1551, x1549, x1478, x1525);
9236     fiat_secp384r1_addcarryx_u32(&x1552, &x1553, x1551, x1480, x1527);
9237     fiat_secp384r1_addcarryx_u32(&x1554, &x1555, x1553, x1482, x1529);
9238     fiat_secp384r1_addcarryx_u32(&x1556, &x1557, x1555, x1484, x1531);
9239     fiat_secp384r1_addcarryx_u32(&x1558, &x1559, x1557, x1486, x1533);
9240     fiat_secp384r1_addcarryx_u32(&x1560, &x1561, x1559, x1488, x1535);
9241     fiat_secp384r1_addcarryx_u32(&x1562, &x1563, x1561, x1490, x1537);
9242     fiat_secp384r1_addcarryx_u32(&x1564, &x1565, x1563, x1492, x1539);
9243     fiat_secp384r1_mulx_u32(&x1566, &x1567, x1540, UINT32_C(0xffffffff));
9244     fiat_secp384r1_mulx_u32(&x1568, &x1569, x1540, UINT32_C(0xffffffff));
9245     fiat_secp384r1_mulx_u32(&x1570, &x1571, x1540, UINT32_C(0xffffffff));
9246     fiat_secp384r1_mulx_u32(&x1572, &x1573, x1540, UINT32_C(0xffffffff));
9247     fiat_secp384r1_mulx_u32(&x1574, &x1575, x1540, UINT32_C(0xffffffff));
9248     fiat_secp384r1_mulx_u32(&x1576, &x1577, x1540, UINT32_C(0xffffffff));
9249     fiat_secp384r1_mulx_u32(&x1578, &x1579, x1540, UINT32_C(0xffffffff));
9250     fiat_secp384r1_mulx_u32(&x1580, &x1581, x1540, UINT32_C(0xfffffffe));
9251     fiat_secp384r1_mulx_u32(&x1582, &x1583, x1540, UINT32_C(0xffffffff));
9252     fiat_secp384r1_mulx_u32(&x1584, &x1585, x1540, UINT32_C(0xffffffff));
9253     fiat_secp384r1_addcarryx_u32(&x1586, &x1587, 0x0, x1583, x1580);
9254     fiat_secp384r1_addcarryx_u32(&x1588, &x1589, x1587, x1581, x1578);
9255     fiat_secp384r1_addcarryx_u32(&x1590, &x1591, x1589, x1579, x1576);
9256     fiat_secp384r1_addcarryx_u32(&x1592, &x1593, x1591, x1577, x1574);
9257     fiat_secp384r1_addcarryx_u32(&x1594, &x1595, x1593, x1575, x1572);
9258     fiat_secp384r1_addcarryx_u32(&x1596, &x1597, x1595, x1573, x1570);
9259     fiat_secp384r1_addcarryx_u32(&x1598, &x1599, x1597, x1571, x1568);
9260     fiat_secp384r1_addcarryx_u32(&x1600, &x1601, x1599, x1569, x1566);
9261     x1602 = (x1601 + x1567);
9262     fiat_secp384r1_addcarryx_u32(&x1603, &x1604, 0x0, x1540, x1584);
9263     fiat_secp384r1_addcarryx_u32(&x1605, &x1606, x1604, x1542, x1585);
9264     fiat_secp384r1_addcarryx_u32(&x1607, &x1608, x1606, x1544, 0x0);
9265     fiat_secp384r1_addcarryx_u32(&x1609, &x1610, x1608, x1546, x1582);
9266     fiat_secp384r1_addcarryx_u32(&x1611, &x1612, x1610, x1548, x1586);
9267     fiat_secp384r1_addcarryx_u32(&x1613, &x1614, x1612, x1550, x1588);
9268     fiat_secp384r1_addcarryx_u32(&x1615, &x1616, x1614, x1552, x1590);
9269     fiat_secp384r1_addcarryx_u32(&x1617, &x1618, x1616, x1554, x1592);
9270     fiat_secp384r1_addcarryx_u32(&x1619, &x1620, x1618, x1556, x1594);
9271     fiat_secp384r1_addcarryx_u32(&x1621, &x1622, x1620, x1558, x1596);
9272     fiat_secp384r1_addcarryx_u32(&x1623, &x1624, x1622, x1560, x1598);
9273     fiat_secp384r1_addcarryx_u32(&x1625, &x1626, x1624, x1562, x1600);
9274     fiat_secp384r1_addcarryx_u32(&x1627, &x1628, x1626, x1564, x1602);
9275     x1629 = ((uint32_t)x1628 + x1565);
9276     fiat_secp384r1_subborrowx_u32(&x1630, &x1631, 0x0, x1605,
9277                                   UINT32_C(0xffffffff));
9278     fiat_secp384r1_subborrowx_u32(&x1632, &x1633, x1631, x1607, 0x0);
9279     fiat_secp384r1_subborrowx_u32(&x1634, &x1635, x1633, x1609, 0x0);
9280     fiat_secp384r1_subborrowx_u32(&x1636, &x1637, x1635, x1611,
9281                                   UINT32_C(0xffffffff));
9282     fiat_secp384r1_subborrowx_u32(&x1638, &x1639, x1637, x1613,
9283                                   UINT32_C(0xfffffffe));
9284     fiat_secp384r1_subborrowx_u32(&x1640, &x1641, x1639, x1615,
9285                                   UINT32_C(0xffffffff));
9286     fiat_secp384r1_subborrowx_u32(&x1642, &x1643, x1641, x1617,
9287                                   UINT32_C(0xffffffff));
9288     fiat_secp384r1_subborrowx_u32(&x1644, &x1645, x1643, x1619,
9289                                   UINT32_C(0xffffffff));
9290     fiat_secp384r1_subborrowx_u32(&x1646, &x1647, x1645, x1621,
9291                                   UINT32_C(0xffffffff));
9292     fiat_secp384r1_subborrowx_u32(&x1648, &x1649, x1647, x1623,
9293                                   UINT32_C(0xffffffff));
9294     fiat_secp384r1_subborrowx_u32(&x1650, &x1651, x1649, x1625,
9295                                   UINT32_C(0xffffffff));
9296     fiat_secp384r1_subborrowx_u32(&x1652, &x1653, x1651, x1627,
9297                                   UINT32_C(0xffffffff));
9298     fiat_secp384r1_subborrowx_u32(&x1654, &x1655, x1653, x1629, 0x0);
9299     fiat_secp384r1_cmovznz_u32(&x1656, x1655, x1630, x1605);
9300     fiat_secp384r1_cmovznz_u32(&x1657, x1655, x1632, x1607);
9301     fiat_secp384r1_cmovznz_u32(&x1658, x1655, x1634, x1609);
9302     fiat_secp384r1_cmovznz_u32(&x1659, x1655, x1636, x1611);
9303     fiat_secp384r1_cmovznz_u32(&x1660, x1655, x1638, x1613);
9304     fiat_secp384r1_cmovznz_u32(&x1661, x1655, x1640, x1615);
9305     fiat_secp384r1_cmovznz_u32(&x1662, x1655, x1642, x1617);
9306     fiat_secp384r1_cmovznz_u32(&x1663, x1655, x1644, x1619);
9307     fiat_secp384r1_cmovznz_u32(&x1664, x1655, x1646, x1621);
9308     fiat_secp384r1_cmovznz_u32(&x1665, x1655, x1648, x1623);
9309     fiat_secp384r1_cmovznz_u32(&x1666, x1655, x1650, x1625);
9310     fiat_secp384r1_cmovznz_u32(&x1667, x1655, x1652, x1627);
9311     out1[0] = x1656;
9312     out1[1] = x1657;
9313     out1[2] = x1658;
9314     out1[3] = x1659;
9315     out1[4] = x1660;
9316     out1[5] = x1661;
9317     out1[6] = x1662;
9318     out1[7] = x1663;
9319     out1[8] = x1664;
9320     out1[9] = x1665;
9321     out1[10] = x1666;
9322     out1[11] = x1667;
9323 }
9324 
9325 /*
9326  * The function fiat_secp384r1_square squares a field element in the Montgomery domain.
9327  * Preconditions:
9328  *   0 ≤ eval arg1 < m
9329  * Postconditions:
9330  *   eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) * eval (from_montgomery arg1)) mod m
9331  *   0 ≤ eval out1 < m
9332  *
9333  * Input Bounds:
9334  *   arg1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
9335  * Output Bounds:
9336  *   out1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
9337  */
9338 static void
fiat_secp384r1_square(uint32_t out1[12],const uint32_t arg1[12])9339 fiat_secp384r1_square(uint32_t out1[12], const uint32_t arg1[12])
9340 {
9341     uint32_t x1;
9342     uint32_t x2;
9343     uint32_t x3;
9344     uint32_t x4;
9345     uint32_t x5;
9346     uint32_t x6;
9347     uint32_t x7;
9348     uint32_t x8;
9349     uint32_t x9;
9350     uint32_t x10;
9351     uint32_t x11;
9352     uint32_t x12;
9353     uint32_t x13;
9354     uint32_t x14;
9355     uint32_t x15;
9356     uint32_t x16;
9357     uint32_t x17;
9358     uint32_t x18;
9359     uint32_t x19;
9360     uint32_t x20;
9361     uint32_t x21;
9362     uint32_t x22;
9363     uint32_t x23;
9364     uint32_t x24;
9365     uint32_t x25;
9366     uint32_t x26;
9367     uint32_t x27;
9368     uint32_t x28;
9369     uint32_t x29;
9370     uint32_t x30;
9371     uint32_t x31;
9372     uint32_t x32;
9373     uint32_t x33;
9374     uint32_t x34;
9375     uint32_t x35;
9376     uint32_t x36;
9377     uint32_t x37;
9378     fiat_secp384r1_uint1 x38;
9379     uint32_t x39;
9380     fiat_secp384r1_uint1 x40;
9381     uint32_t x41;
9382     fiat_secp384r1_uint1 x42;
9383     uint32_t x43;
9384     fiat_secp384r1_uint1 x44;
9385     uint32_t x45;
9386     fiat_secp384r1_uint1 x46;
9387     uint32_t x47;
9388     fiat_secp384r1_uint1 x48;
9389     uint32_t x49;
9390     fiat_secp384r1_uint1 x50;
9391     uint32_t x51;
9392     fiat_secp384r1_uint1 x52;
9393     uint32_t x53;
9394     fiat_secp384r1_uint1 x54;
9395     uint32_t x55;
9396     fiat_secp384r1_uint1 x56;
9397     uint32_t x57;
9398     fiat_secp384r1_uint1 x58;
9399     uint32_t x59;
9400     uint32_t x60;
9401     uint32_t x61;
9402     uint32_t x62;
9403     uint32_t x63;
9404     uint32_t x64;
9405     uint32_t x65;
9406     uint32_t x66;
9407     uint32_t x67;
9408     uint32_t x68;
9409     uint32_t x69;
9410     uint32_t x70;
9411     uint32_t x71;
9412     uint32_t x72;
9413     uint32_t x73;
9414     uint32_t x74;
9415     uint32_t x75;
9416     uint32_t x76;
9417     uint32_t x77;
9418     uint32_t x78;
9419     uint32_t x79;
9420     uint32_t x80;
9421     fiat_secp384r1_uint1 x81;
9422     uint32_t x82;
9423     fiat_secp384r1_uint1 x83;
9424     uint32_t x84;
9425     fiat_secp384r1_uint1 x85;
9426     uint32_t x86;
9427     fiat_secp384r1_uint1 x87;
9428     uint32_t x88;
9429     fiat_secp384r1_uint1 x89;
9430     uint32_t x90;
9431     fiat_secp384r1_uint1 x91;
9432     uint32_t x92;
9433     fiat_secp384r1_uint1 x93;
9434     uint32_t x94;
9435     fiat_secp384r1_uint1 x95;
9436     uint32_t x96;
9437     uint32_t x97;
9438     fiat_secp384r1_uint1 x98;
9439     uint32_t x99;
9440     fiat_secp384r1_uint1 x100;
9441     uint32_t x101;
9442     fiat_secp384r1_uint1 x102;
9443     uint32_t x103;
9444     fiat_secp384r1_uint1 x104;
9445     uint32_t x105;
9446     fiat_secp384r1_uint1 x106;
9447     uint32_t x107;
9448     fiat_secp384r1_uint1 x108;
9449     uint32_t x109;
9450     fiat_secp384r1_uint1 x110;
9451     uint32_t x111;
9452     fiat_secp384r1_uint1 x112;
9453     uint32_t x113;
9454     fiat_secp384r1_uint1 x114;
9455     uint32_t x115;
9456     fiat_secp384r1_uint1 x116;
9457     uint32_t x117;
9458     fiat_secp384r1_uint1 x118;
9459     uint32_t x119;
9460     fiat_secp384r1_uint1 x120;
9461     uint32_t x121;
9462     fiat_secp384r1_uint1 x122;
9463     uint32_t x123;
9464     uint32_t x124;
9465     uint32_t x125;
9466     uint32_t x126;
9467     uint32_t x127;
9468     uint32_t x128;
9469     uint32_t x129;
9470     uint32_t x130;
9471     uint32_t x131;
9472     uint32_t x132;
9473     uint32_t x133;
9474     uint32_t x134;
9475     uint32_t x135;
9476     uint32_t x136;
9477     uint32_t x137;
9478     uint32_t x138;
9479     uint32_t x139;
9480     uint32_t x140;
9481     uint32_t x141;
9482     uint32_t x142;
9483     uint32_t x143;
9484     uint32_t x144;
9485     uint32_t x145;
9486     uint32_t x146;
9487     uint32_t x147;
9488     fiat_secp384r1_uint1 x148;
9489     uint32_t x149;
9490     fiat_secp384r1_uint1 x150;
9491     uint32_t x151;
9492     fiat_secp384r1_uint1 x152;
9493     uint32_t x153;
9494     fiat_secp384r1_uint1 x154;
9495     uint32_t x155;
9496     fiat_secp384r1_uint1 x156;
9497     uint32_t x157;
9498     fiat_secp384r1_uint1 x158;
9499     uint32_t x159;
9500     fiat_secp384r1_uint1 x160;
9501     uint32_t x161;
9502     fiat_secp384r1_uint1 x162;
9503     uint32_t x163;
9504     fiat_secp384r1_uint1 x164;
9505     uint32_t x165;
9506     fiat_secp384r1_uint1 x166;
9507     uint32_t x167;
9508     fiat_secp384r1_uint1 x168;
9509     uint32_t x169;
9510     uint32_t x170;
9511     fiat_secp384r1_uint1 x171;
9512     uint32_t x172;
9513     fiat_secp384r1_uint1 x173;
9514     uint32_t x174;
9515     fiat_secp384r1_uint1 x175;
9516     uint32_t x176;
9517     fiat_secp384r1_uint1 x177;
9518     uint32_t x178;
9519     fiat_secp384r1_uint1 x179;
9520     uint32_t x180;
9521     fiat_secp384r1_uint1 x181;
9522     uint32_t x182;
9523     fiat_secp384r1_uint1 x183;
9524     uint32_t x184;
9525     fiat_secp384r1_uint1 x185;
9526     uint32_t x186;
9527     fiat_secp384r1_uint1 x187;
9528     uint32_t x188;
9529     fiat_secp384r1_uint1 x189;
9530     uint32_t x190;
9531     fiat_secp384r1_uint1 x191;
9532     uint32_t x192;
9533     fiat_secp384r1_uint1 x193;
9534     uint32_t x194;
9535     fiat_secp384r1_uint1 x195;
9536     uint32_t x196;
9537     uint32_t x197;
9538     uint32_t x198;
9539     uint32_t x199;
9540     uint32_t x200;
9541     uint32_t x201;
9542     uint32_t x202;
9543     uint32_t x203;
9544     uint32_t x204;
9545     uint32_t x205;
9546     uint32_t x206;
9547     uint32_t x207;
9548     uint32_t x208;
9549     uint32_t x209;
9550     uint32_t x210;
9551     uint32_t x211;
9552     uint32_t x212;
9553     uint32_t x213;
9554     uint32_t x214;
9555     uint32_t x215;
9556     uint32_t x216;
9557     fiat_secp384r1_uint1 x217;
9558     uint32_t x218;
9559     fiat_secp384r1_uint1 x219;
9560     uint32_t x220;
9561     fiat_secp384r1_uint1 x221;
9562     uint32_t x222;
9563     fiat_secp384r1_uint1 x223;
9564     uint32_t x224;
9565     fiat_secp384r1_uint1 x225;
9566     uint32_t x226;
9567     fiat_secp384r1_uint1 x227;
9568     uint32_t x228;
9569     fiat_secp384r1_uint1 x229;
9570     uint32_t x230;
9571     fiat_secp384r1_uint1 x231;
9572     uint32_t x232;
9573     uint32_t x233;
9574     fiat_secp384r1_uint1 x234;
9575     uint32_t x235;
9576     fiat_secp384r1_uint1 x236;
9577     uint32_t x237;
9578     fiat_secp384r1_uint1 x238;
9579     uint32_t x239;
9580     fiat_secp384r1_uint1 x240;
9581     uint32_t x241;
9582     fiat_secp384r1_uint1 x242;
9583     uint32_t x243;
9584     fiat_secp384r1_uint1 x244;
9585     uint32_t x245;
9586     fiat_secp384r1_uint1 x246;
9587     uint32_t x247;
9588     fiat_secp384r1_uint1 x248;
9589     uint32_t x249;
9590     fiat_secp384r1_uint1 x250;
9591     uint32_t x251;
9592     fiat_secp384r1_uint1 x252;
9593     uint32_t x253;
9594     fiat_secp384r1_uint1 x254;
9595     uint32_t x255;
9596     fiat_secp384r1_uint1 x256;
9597     uint32_t x257;
9598     fiat_secp384r1_uint1 x258;
9599     uint32_t x259;
9600     uint32_t x260;
9601     uint32_t x261;
9602     uint32_t x262;
9603     uint32_t x263;
9604     uint32_t x264;
9605     uint32_t x265;
9606     uint32_t x266;
9607     uint32_t x267;
9608     uint32_t x268;
9609     uint32_t x269;
9610     uint32_t x270;
9611     uint32_t x271;
9612     uint32_t x272;
9613     uint32_t x273;
9614     uint32_t x274;
9615     uint32_t x275;
9616     uint32_t x276;
9617     uint32_t x277;
9618     uint32_t x278;
9619     uint32_t x279;
9620     uint32_t x280;
9621     uint32_t x281;
9622     uint32_t x282;
9623     uint32_t x283;
9624     uint32_t x284;
9625     fiat_secp384r1_uint1 x285;
9626     uint32_t x286;
9627     fiat_secp384r1_uint1 x287;
9628     uint32_t x288;
9629     fiat_secp384r1_uint1 x289;
9630     uint32_t x290;
9631     fiat_secp384r1_uint1 x291;
9632     uint32_t x292;
9633     fiat_secp384r1_uint1 x293;
9634     uint32_t x294;
9635     fiat_secp384r1_uint1 x295;
9636     uint32_t x296;
9637     fiat_secp384r1_uint1 x297;
9638     uint32_t x298;
9639     fiat_secp384r1_uint1 x299;
9640     uint32_t x300;
9641     fiat_secp384r1_uint1 x301;
9642     uint32_t x302;
9643     fiat_secp384r1_uint1 x303;
9644     uint32_t x304;
9645     fiat_secp384r1_uint1 x305;
9646     uint32_t x306;
9647     uint32_t x307;
9648     fiat_secp384r1_uint1 x308;
9649     uint32_t x309;
9650     fiat_secp384r1_uint1 x310;
9651     uint32_t x311;
9652     fiat_secp384r1_uint1 x312;
9653     uint32_t x313;
9654     fiat_secp384r1_uint1 x314;
9655     uint32_t x315;
9656     fiat_secp384r1_uint1 x316;
9657     uint32_t x317;
9658     fiat_secp384r1_uint1 x318;
9659     uint32_t x319;
9660     fiat_secp384r1_uint1 x320;
9661     uint32_t x321;
9662     fiat_secp384r1_uint1 x322;
9663     uint32_t x323;
9664     fiat_secp384r1_uint1 x324;
9665     uint32_t x325;
9666     fiat_secp384r1_uint1 x326;
9667     uint32_t x327;
9668     fiat_secp384r1_uint1 x328;
9669     uint32_t x329;
9670     fiat_secp384r1_uint1 x330;
9671     uint32_t x331;
9672     fiat_secp384r1_uint1 x332;
9673     uint32_t x333;
9674     uint32_t x334;
9675     uint32_t x335;
9676     uint32_t x336;
9677     uint32_t x337;
9678     uint32_t x338;
9679     uint32_t x339;
9680     uint32_t x340;
9681     uint32_t x341;
9682     uint32_t x342;
9683     uint32_t x343;
9684     uint32_t x344;
9685     uint32_t x345;
9686     uint32_t x346;
9687     uint32_t x347;
9688     uint32_t x348;
9689     uint32_t x349;
9690     uint32_t x350;
9691     uint32_t x351;
9692     uint32_t x352;
9693     uint32_t x353;
9694     fiat_secp384r1_uint1 x354;
9695     uint32_t x355;
9696     fiat_secp384r1_uint1 x356;
9697     uint32_t x357;
9698     fiat_secp384r1_uint1 x358;
9699     uint32_t x359;
9700     fiat_secp384r1_uint1 x360;
9701     uint32_t x361;
9702     fiat_secp384r1_uint1 x362;
9703     uint32_t x363;
9704     fiat_secp384r1_uint1 x364;
9705     uint32_t x365;
9706     fiat_secp384r1_uint1 x366;
9707     uint32_t x367;
9708     fiat_secp384r1_uint1 x368;
9709     uint32_t x369;
9710     uint32_t x370;
9711     fiat_secp384r1_uint1 x371;
9712     uint32_t x372;
9713     fiat_secp384r1_uint1 x373;
9714     uint32_t x374;
9715     fiat_secp384r1_uint1 x375;
9716     uint32_t x376;
9717     fiat_secp384r1_uint1 x377;
9718     uint32_t x378;
9719     fiat_secp384r1_uint1 x379;
9720     uint32_t x380;
9721     fiat_secp384r1_uint1 x381;
9722     uint32_t x382;
9723     fiat_secp384r1_uint1 x383;
9724     uint32_t x384;
9725     fiat_secp384r1_uint1 x385;
9726     uint32_t x386;
9727     fiat_secp384r1_uint1 x387;
9728     uint32_t x388;
9729     fiat_secp384r1_uint1 x389;
9730     uint32_t x390;
9731     fiat_secp384r1_uint1 x391;
9732     uint32_t x392;
9733     fiat_secp384r1_uint1 x393;
9734     uint32_t x394;
9735     fiat_secp384r1_uint1 x395;
9736     uint32_t x396;
9737     uint32_t x397;
9738     uint32_t x398;
9739     uint32_t x399;
9740     uint32_t x400;
9741     uint32_t x401;
9742     uint32_t x402;
9743     uint32_t x403;
9744     uint32_t x404;
9745     uint32_t x405;
9746     uint32_t x406;
9747     uint32_t x407;
9748     uint32_t x408;
9749     uint32_t x409;
9750     uint32_t x410;
9751     uint32_t x411;
9752     uint32_t x412;
9753     uint32_t x413;
9754     uint32_t x414;
9755     uint32_t x415;
9756     uint32_t x416;
9757     uint32_t x417;
9758     uint32_t x418;
9759     uint32_t x419;
9760     uint32_t x420;
9761     uint32_t x421;
9762     fiat_secp384r1_uint1 x422;
9763     uint32_t x423;
9764     fiat_secp384r1_uint1 x424;
9765     uint32_t x425;
9766     fiat_secp384r1_uint1 x426;
9767     uint32_t x427;
9768     fiat_secp384r1_uint1 x428;
9769     uint32_t x429;
9770     fiat_secp384r1_uint1 x430;
9771     uint32_t x431;
9772     fiat_secp384r1_uint1 x432;
9773     uint32_t x433;
9774     fiat_secp384r1_uint1 x434;
9775     uint32_t x435;
9776     fiat_secp384r1_uint1 x436;
9777     uint32_t x437;
9778     fiat_secp384r1_uint1 x438;
9779     uint32_t x439;
9780     fiat_secp384r1_uint1 x440;
9781     uint32_t x441;
9782     fiat_secp384r1_uint1 x442;
9783     uint32_t x443;
9784     uint32_t x444;
9785     fiat_secp384r1_uint1 x445;
9786     uint32_t x446;
9787     fiat_secp384r1_uint1 x447;
9788     uint32_t x448;
9789     fiat_secp384r1_uint1 x449;
9790     uint32_t x450;
9791     fiat_secp384r1_uint1 x451;
9792     uint32_t x452;
9793     fiat_secp384r1_uint1 x453;
9794     uint32_t x454;
9795     fiat_secp384r1_uint1 x455;
9796     uint32_t x456;
9797     fiat_secp384r1_uint1 x457;
9798     uint32_t x458;
9799     fiat_secp384r1_uint1 x459;
9800     uint32_t x460;
9801     fiat_secp384r1_uint1 x461;
9802     uint32_t x462;
9803     fiat_secp384r1_uint1 x463;
9804     uint32_t x464;
9805     fiat_secp384r1_uint1 x465;
9806     uint32_t x466;
9807     fiat_secp384r1_uint1 x467;
9808     uint32_t x468;
9809     fiat_secp384r1_uint1 x469;
9810     uint32_t x470;
9811     uint32_t x471;
9812     uint32_t x472;
9813     uint32_t x473;
9814     uint32_t x474;
9815     uint32_t x475;
9816     uint32_t x476;
9817     uint32_t x477;
9818     uint32_t x478;
9819     uint32_t x479;
9820     uint32_t x480;
9821     uint32_t x481;
9822     uint32_t x482;
9823     uint32_t x483;
9824     uint32_t x484;
9825     uint32_t x485;
9826     uint32_t x486;
9827     uint32_t x487;
9828     uint32_t x488;
9829     uint32_t x489;
9830     uint32_t x490;
9831     fiat_secp384r1_uint1 x491;
9832     uint32_t x492;
9833     fiat_secp384r1_uint1 x493;
9834     uint32_t x494;
9835     fiat_secp384r1_uint1 x495;
9836     uint32_t x496;
9837     fiat_secp384r1_uint1 x497;
9838     uint32_t x498;
9839     fiat_secp384r1_uint1 x499;
9840     uint32_t x500;
9841     fiat_secp384r1_uint1 x501;
9842     uint32_t x502;
9843     fiat_secp384r1_uint1 x503;
9844     uint32_t x504;
9845     fiat_secp384r1_uint1 x505;
9846     uint32_t x506;
9847     uint32_t x507;
9848     fiat_secp384r1_uint1 x508;
9849     uint32_t x509;
9850     fiat_secp384r1_uint1 x510;
9851     uint32_t x511;
9852     fiat_secp384r1_uint1 x512;
9853     uint32_t x513;
9854     fiat_secp384r1_uint1 x514;
9855     uint32_t x515;
9856     fiat_secp384r1_uint1 x516;
9857     uint32_t x517;
9858     fiat_secp384r1_uint1 x518;
9859     uint32_t x519;
9860     fiat_secp384r1_uint1 x520;
9861     uint32_t x521;
9862     fiat_secp384r1_uint1 x522;
9863     uint32_t x523;
9864     fiat_secp384r1_uint1 x524;
9865     uint32_t x525;
9866     fiat_secp384r1_uint1 x526;
9867     uint32_t x527;
9868     fiat_secp384r1_uint1 x528;
9869     uint32_t x529;
9870     fiat_secp384r1_uint1 x530;
9871     uint32_t x531;
9872     fiat_secp384r1_uint1 x532;
9873     uint32_t x533;
9874     uint32_t x534;
9875     uint32_t x535;
9876     uint32_t x536;
9877     uint32_t x537;
9878     uint32_t x538;
9879     uint32_t x539;
9880     uint32_t x540;
9881     uint32_t x541;
9882     uint32_t x542;
9883     uint32_t x543;
9884     uint32_t x544;
9885     uint32_t x545;
9886     uint32_t x546;
9887     uint32_t x547;
9888     uint32_t x548;
9889     uint32_t x549;
9890     uint32_t x550;
9891     uint32_t x551;
9892     uint32_t x552;
9893     uint32_t x553;
9894     uint32_t x554;
9895     uint32_t x555;
9896     uint32_t x556;
9897     uint32_t x557;
9898     uint32_t x558;
9899     fiat_secp384r1_uint1 x559;
9900     uint32_t x560;
9901     fiat_secp384r1_uint1 x561;
9902     uint32_t x562;
9903     fiat_secp384r1_uint1 x563;
9904     uint32_t x564;
9905     fiat_secp384r1_uint1 x565;
9906     uint32_t x566;
9907     fiat_secp384r1_uint1 x567;
9908     uint32_t x568;
9909     fiat_secp384r1_uint1 x569;
9910     uint32_t x570;
9911     fiat_secp384r1_uint1 x571;
9912     uint32_t x572;
9913     fiat_secp384r1_uint1 x573;
9914     uint32_t x574;
9915     fiat_secp384r1_uint1 x575;
9916     uint32_t x576;
9917     fiat_secp384r1_uint1 x577;
9918     uint32_t x578;
9919     fiat_secp384r1_uint1 x579;
9920     uint32_t x580;
9921     uint32_t x581;
9922     fiat_secp384r1_uint1 x582;
9923     uint32_t x583;
9924     fiat_secp384r1_uint1 x584;
9925     uint32_t x585;
9926     fiat_secp384r1_uint1 x586;
9927     uint32_t x587;
9928     fiat_secp384r1_uint1 x588;
9929     uint32_t x589;
9930     fiat_secp384r1_uint1 x590;
9931     uint32_t x591;
9932     fiat_secp384r1_uint1 x592;
9933     uint32_t x593;
9934     fiat_secp384r1_uint1 x594;
9935     uint32_t x595;
9936     fiat_secp384r1_uint1 x596;
9937     uint32_t x597;
9938     fiat_secp384r1_uint1 x598;
9939     uint32_t x599;
9940     fiat_secp384r1_uint1 x600;
9941     uint32_t x601;
9942     fiat_secp384r1_uint1 x602;
9943     uint32_t x603;
9944     fiat_secp384r1_uint1 x604;
9945     uint32_t x605;
9946     fiat_secp384r1_uint1 x606;
9947     uint32_t x607;
9948     uint32_t x608;
9949     uint32_t x609;
9950     uint32_t x610;
9951     uint32_t x611;
9952     uint32_t x612;
9953     uint32_t x613;
9954     uint32_t x614;
9955     uint32_t x615;
9956     uint32_t x616;
9957     uint32_t x617;
9958     uint32_t x618;
9959     uint32_t x619;
9960     uint32_t x620;
9961     uint32_t x621;
9962     uint32_t x622;
9963     uint32_t x623;
9964     uint32_t x624;
9965     uint32_t x625;
9966     uint32_t x626;
9967     uint32_t x627;
9968     fiat_secp384r1_uint1 x628;
9969     uint32_t x629;
9970     fiat_secp384r1_uint1 x630;
9971     uint32_t x631;
9972     fiat_secp384r1_uint1 x632;
9973     uint32_t x633;
9974     fiat_secp384r1_uint1 x634;
9975     uint32_t x635;
9976     fiat_secp384r1_uint1 x636;
9977     uint32_t x637;
9978     fiat_secp384r1_uint1 x638;
9979     uint32_t x639;
9980     fiat_secp384r1_uint1 x640;
9981     uint32_t x641;
9982     fiat_secp384r1_uint1 x642;
9983     uint32_t x643;
9984     uint32_t x644;
9985     fiat_secp384r1_uint1 x645;
9986     uint32_t x646;
9987     fiat_secp384r1_uint1 x647;
9988     uint32_t x648;
9989     fiat_secp384r1_uint1 x649;
9990     uint32_t x650;
9991     fiat_secp384r1_uint1 x651;
9992     uint32_t x652;
9993     fiat_secp384r1_uint1 x653;
9994     uint32_t x654;
9995     fiat_secp384r1_uint1 x655;
9996     uint32_t x656;
9997     fiat_secp384r1_uint1 x657;
9998     uint32_t x658;
9999     fiat_secp384r1_uint1 x659;
10000     uint32_t x660;
10001     fiat_secp384r1_uint1 x661;
10002     uint32_t x662;
10003     fiat_secp384r1_uint1 x663;
10004     uint32_t x664;
10005     fiat_secp384r1_uint1 x665;
10006     uint32_t x666;
10007     fiat_secp384r1_uint1 x667;
10008     uint32_t x668;
10009     fiat_secp384r1_uint1 x669;
10010     uint32_t x670;
10011     uint32_t x671;
10012     uint32_t x672;
10013     uint32_t x673;
10014     uint32_t x674;
10015     uint32_t x675;
10016     uint32_t x676;
10017     uint32_t x677;
10018     uint32_t x678;
10019     uint32_t x679;
10020     uint32_t x680;
10021     uint32_t x681;
10022     uint32_t x682;
10023     uint32_t x683;
10024     uint32_t x684;
10025     uint32_t x685;
10026     uint32_t x686;
10027     uint32_t x687;
10028     uint32_t x688;
10029     uint32_t x689;
10030     uint32_t x690;
10031     uint32_t x691;
10032     uint32_t x692;
10033     uint32_t x693;
10034     uint32_t x694;
10035     uint32_t x695;
10036     fiat_secp384r1_uint1 x696;
10037     uint32_t x697;
10038     fiat_secp384r1_uint1 x698;
10039     uint32_t x699;
10040     fiat_secp384r1_uint1 x700;
10041     uint32_t x701;
10042     fiat_secp384r1_uint1 x702;
10043     uint32_t x703;
10044     fiat_secp384r1_uint1 x704;
10045     uint32_t x705;
10046     fiat_secp384r1_uint1 x706;
10047     uint32_t x707;
10048     fiat_secp384r1_uint1 x708;
10049     uint32_t x709;
10050     fiat_secp384r1_uint1 x710;
10051     uint32_t x711;
10052     fiat_secp384r1_uint1 x712;
10053     uint32_t x713;
10054     fiat_secp384r1_uint1 x714;
10055     uint32_t x715;
10056     fiat_secp384r1_uint1 x716;
10057     uint32_t x717;
10058     uint32_t x718;
10059     fiat_secp384r1_uint1 x719;
10060     uint32_t x720;
10061     fiat_secp384r1_uint1 x721;
10062     uint32_t x722;
10063     fiat_secp384r1_uint1 x723;
10064     uint32_t x724;
10065     fiat_secp384r1_uint1 x725;
10066     uint32_t x726;
10067     fiat_secp384r1_uint1 x727;
10068     uint32_t x728;
10069     fiat_secp384r1_uint1 x729;
10070     uint32_t x730;
10071     fiat_secp384r1_uint1 x731;
10072     uint32_t x732;
10073     fiat_secp384r1_uint1 x733;
10074     uint32_t x734;
10075     fiat_secp384r1_uint1 x735;
10076     uint32_t x736;
10077     fiat_secp384r1_uint1 x737;
10078     uint32_t x738;
10079     fiat_secp384r1_uint1 x739;
10080     uint32_t x740;
10081     fiat_secp384r1_uint1 x741;
10082     uint32_t x742;
10083     fiat_secp384r1_uint1 x743;
10084     uint32_t x744;
10085     uint32_t x745;
10086     uint32_t x746;
10087     uint32_t x747;
10088     uint32_t x748;
10089     uint32_t x749;
10090     uint32_t x750;
10091     uint32_t x751;
10092     uint32_t x752;
10093     uint32_t x753;
10094     uint32_t x754;
10095     uint32_t x755;
10096     uint32_t x756;
10097     uint32_t x757;
10098     uint32_t x758;
10099     uint32_t x759;
10100     uint32_t x760;
10101     uint32_t x761;
10102     uint32_t x762;
10103     uint32_t x763;
10104     uint32_t x764;
10105     fiat_secp384r1_uint1 x765;
10106     uint32_t x766;
10107     fiat_secp384r1_uint1 x767;
10108     uint32_t x768;
10109     fiat_secp384r1_uint1 x769;
10110     uint32_t x770;
10111     fiat_secp384r1_uint1 x771;
10112     uint32_t x772;
10113     fiat_secp384r1_uint1 x773;
10114     uint32_t x774;
10115     fiat_secp384r1_uint1 x775;
10116     uint32_t x776;
10117     fiat_secp384r1_uint1 x777;
10118     uint32_t x778;
10119     fiat_secp384r1_uint1 x779;
10120     uint32_t x780;
10121     uint32_t x781;
10122     fiat_secp384r1_uint1 x782;
10123     uint32_t x783;
10124     fiat_secp384r1_uint1 x784;
10125     uint32_t x785;
10126     fiat_secp384r1_uint1 x786;
10127     uint32_t x787;
10128     fiat_secp384r1_uint1 x788;
10129     uint32_t x789;
10130     fiat_secp384r1_uint1 x790;
10131     uint32_t x791;
10132     fiat_secp384r1_uint1 x792;
10133     uint32_t x793;
10134     fiat_secp384r1_uint1 x794;
10135     uint32_t x795;
10136     fiat_secp384r1_uint1 x796;
10137     uint32_t x797;
10138     fiat_secp384r1_uint1 x798;
10139     uint32_t x799;
10140     fiat_secp384r1_uint1 x800;
10141     uint32_t x801;
10142     fiat_secp384r1_uint1 x802;
10143     uint32_t x803;
10144     fiat_secp384r1_uint1 x804;
10145     uint32_t x805;
10146     fiat_secp384r1_uint1 x806;
10147     uint32_t x807;
10148     uint32_t x808;
10149     uint32_t x809;
10150     uint32_t x810;
10151     uint32_t x811;
10152     uint32_t x812;
10153     uint32_t x813;
10154     uint32_t x814;
10155     uint32_t x815;
10156     uint32_t x816;
10157     uint32_t x817;
10158     uint32_t x818;
10159     uint32_t x819;
10160     uint32_t x820;
10161     uint32_t x821;
10162     uint32_t x822;
10163     uint32_t x823;
10164     uint32_t x824;
10165     uint32_t x825;
10166     uint32_t x826;
10167     uint32_t x827;
10168     uint32_t x828;
10169     uint32_t x829;
10170     uint32_t x830;
10171     uint32_t x831;
10172     uint32_t x832;
10173     fiat_secp384r1_uint1 x833;
10174     uint32_t x834;
10175     fiat_secp384r1_uint1 x835;
10176     uint32_t x836;
10177     fiat_secp384r1_uint1 x837;
10178     uint32_t x838;
10179     fiat_secp384r1_uint1 x839;
10180     uint32_t x840;
10181     fiat_secp384r1_uint1 x841;
10182     uint32_t x842;
10183     fiat_secp384r1_uint1 x843;
10184     uint32_t x844;
10185     fiat_secp384r1_uint1 x845;
10186     uint32_t x846;
10187     fiat_secp384r1_uint1 x847;
10188     uint32_t x848;
10189     fiat_secp384r1_uint1 x849;
10190     uint32_t x850;
10191     fiat_secp384r1_uint1 x851;
10192     uint32_t x852;
10193     fiat_secp384r1_uint1 x853;
10194     uint32_t x854;
10195     uint32_t x855;
10196     fiat_secp384r1_uint1 x856;
10197     uint32_t x857;
10198     fiat_secp384r1_uint1 x858;
10199     uint32_t x859;
10200     fiat_secp384r1_uint1 x860;
10201     uint32_t x861;
10202     fiat_secp384r1_uint1 x862;
10203     uint32_t x863;
10204     fiat_secp384r1_uint1 x864;
10205     uint32_t x865;
10206     fiat_secp384r1_uint1 x866;
10207     uint32_t x867;
10208     fiat_secp384r1_uint1 x868;
10209     uint32_t x869;
10210     fiat_secp384r1_uint1 x870;
10211     uint32_t x871;
10212     fiat_secp384r1_uint1 x872;
10213     uint32_t x873;
10214     fiat_secp384r1_uint1 x874;
10215     uint32_t x875;
10216     fiat_secp384r1_uint1 x876;
10217     uint32_t x877;
10218     fiat_secp384r1_uint1 x878;
10219     uint32_t x879;
10220     fiat_secp384r1_uint1 x880;
10221     uint32_t x881;
10222     uint32_t x882;
10223     uint32_t x883;
10224     uint32_t x884;
10225     uint32_t x885;
10226     uint32_t x886;
10227     uint32_t x887;
10228     uint32_t x888;
10229     uint32_t x889;
10230     uint32_t x890;
10231     uint32_t x891;
10232     uint32_t x892;
10233     uint32_t x893;
10234     uint32_t x894;
10235     uint32_t x895;
10236     uint32_t x896;
10237     uint32_t x897;
10238     uint32_t x898;
10239     uint32_t x899;
10240     uint32_t x900;
10241     uint32_t x901;
10242     fiat_secp384r1_uint1 x902;
10243     uint32_t x903;
10244     fiat_secp384r1_uint1 x904;
10245     uint32_t x905;
10246     fiat_secp384r1_uint1 x906;
10247     uint32_t x907;
10248     fiat_secp384r1_uint1 x908;
10249     uint32_t x909;
10250     fiat_secp384r1_uint1 x910;
10251     uint32_t x911;
10252     fiat_secp384r1_uint1 x912;
10253     uint32_t x913;
10254     fiat_secp384r1_uint1 x914;
10255     uint32_t x915;
10256     fiat_secp384r1_uint1 x916;
10257     uint32_t x917;
10258     uint32_t x918;
10259     fiat_secp384r1_uint1 x919;
10260     uint32_t x920;
10261     fiat_secp384r1_uint1 x921;
10262     uint32_t x922;
10263     fiat_secp384r1_uint1 x923;
10264     uint32_t x924;
10265     fiat_secp384r1_uint1 x925;
10266     uint32_t x926;
10267     fiat_secp384r1_uint1 x927;
10268     uint32_t x928;
10269     fiat_secp384r1_uint1 x929;
10270     uint32_t x930;
10271     fiat_secp384r1_uint1 x931;
10272     uint32_t x932;
10273     fiat_secp384r1_uint1 x933;
10274     uint32_t x934;
10275     fiat_secp384r1_uint1 x935;
10276     uint32_t x936;
10277     fiat_secp384r1_uint1 x937;
10278     uint32_t x938;
10279     fiat_secp384r1_uint1 x939;
10280     uint32_t x940;
10281     fiat_secp384r1_uint1 x941;
10282     uint32_t x942;
10283     fiat_secp384r1_uint1 x943;
10284     uint32_t x944;
10285     uint32_t x945;
10286     uint32_t x946;
10287     uint32_t x947;
10288     uint32_t x948;
10289     uint32_t x949;
10290     uint32_t x950;
10291     uint32_t x951;
10292     uint32_t x952;
10293     uint32_t x953;
10294     uint32_t x954;
10295     uint32_t x955;
10296     uint32_t x956;
10297     uint32_t x957;
10298     uint32_t x958;
10299     uint32_t x959;
10300     uint32_t x960;
10301     uint32_t x961;
10302     uint32_t x962;
10303     uint32_t x963;
10304     uint32_t x964;
10305     uint32_t x965;
10306     uint32_t x966;
10307     uint32_t x967;
10308     uint32_t x968;
10309     uint32_t x969;
10310     fiat_secp384r1_uint1 x970;
10311     uint32_t x971;
10312     fiat_secp384r1_uint1 x972;
10313     uint32_t x973;
10314     fiat_secp384r1_uint1 x974;
10315     uint32_t x975;
10316     fiat_secp384r1_uint1 x976;
10317     uint32_t x977;
10318     fiat_secp384r1_uint1 x978;
10319     uint32_t x979;
10320     fiat_secp384r1_uint1 x980;
10321     uint32_t x981;
10322     fiat_secp384r1_uint1 x982;
10323     uint32_t x983;
10324     fiat_secp384r1_uint1 x984;
10325     uint32_t x985;
10326     fiat_secp384r1_uint1 x986;
10327     uint32_t x987;
10328     fiat_secp384r1_uint1 x988;
10329     uint32_t x989;
10330     fiat_secp384r1_uint1 x990;
10331     uint32_t x991;
10332     uint32_t x992;
10333     fiat_secp384r1_uint1 x993;
10334     uint32_t x994;
10335     fiat_secp384r1_uint1 x995;
10336     uint32_t x996;
10337     fiat_secp384r1_uint1 x997;
10338     uint32_t x998;
10339     fiat_secp384r1_uint1 x999;
10340     uint32_t x1000;
10341     fiat_secp384r1_uint1 x1001;
10342     uint32_t x1002;
10343     fiat_secp384r1_uint1 x1003;
10344     uint32_t x1004;
10345     fiat_secp384r1_uint1 x1005;
10346     uint32_t x1006;
10347     fiat_secp384r1_uint1 x1007;
10348     uint32_t x1008;
10349     fiat_secp384r1_uint1 x1009;
10350     uint32_t x1010;
10351     fiat_secp384r1_uint1 x1011;
10352     uint32_t x1012;
10353     fiat_secp384r1_uint1 x1013;
10354     uint32_t x1014;
10355     fiat_secp384r1_uint1 x1015;
10356     uint32_t x1016;
10357     fiat_secp384r1_uint1 x1017;
10358     uint32_t x1018;
10359     uint32_t x1019;
10360     uint32_t x1020;
10361     uint32_t x1021;
10362     uint32_t x1022;
10363     uint32_t x1023;
10364     uint32_t x1024;
10365     uint32_t x1025;
10366     uint32_t x1026;
10367     uint32_t x1027;
10368     uint32_t x1028;
10369     uint32_t x1029;
10370     uint32_t x1030;
10371     uint32_t x1031;
10372     uint32_t x1032;
10373     uint32_t x1033;
10374     uint32_t x1034;
10375     uint32_t x1035;
10376     uint32_t x1036;
10377     uint32_t x1037;
10378     uint32_t x1038;
10379     fiat_secp384r1_uint1 x1039;
10380     uint32_t x1040;
10381     fiat_secp384r1_uint1 x1041;
10382     uint32_t x1042;
10383     fiat_secp384r1_uint1 x1043;
10384     uint32_t x1044;
10385     fiat_secp384r1_uint1 x1045;
10386     uint32_t x1046;
10387     fiat_secp384r1_uint1 x1047;
10388     uint32_t x1048;
10389     fiat_secp384r1_uint1 x1049;
10390     uint32_t x1050;
10391     fiat_secp384r1_uint1 x1051;
10392     uint32_t x1052;
10393     fiat_secp384r1_uint1 x1053;
10394     uint32_t x1054;
10395     uint32_t x1055;
10396     fiat_secp384r1_uint1 x1056;
10397     uint32_t x1057;
10398     fiat_secp384r1_uint1 x1058;
10399     uint32_t x1059;
10400     fiat_secp384r1_uint1 x1060;
10401     uint32_t x1061;
10402     fiat_secp384r1_uint1 x1062;
10403     uint32_t x1063;
10404     fiat_secp384r1_uint1 x1064;
10405     uint32_t x1065;
10406     fiat_secp384r1_uint1 x1066;
10407     uint32_t x1067;
10408     fiat_secp384r1_uint1 x1068;
10409     uint32_t x1069;
10410     fiat_secp384r1_uint1 x1070;
10411     uint32_t x1071;
10412     fiat_secp384r1_uint1 x1072;
10413     uint32_t x1073;
10414     fiat_secp384r1_uint1 x1074;
10415     uint32_t x1075;
10416     fiat_secp384r1_uint1 x1076;
10417     uint32_t x1077;
10418     fiat_secp384r1_uint1 x1078;
10419     uint32_t x1079;
10420     fiat_secp384r1_uint1 x1080;
10421     uint32_t x1081;
10422     uint32_t x1082;
10423     uint32_t x1083;
10424     uint32_t x1084;
10425     uint32_t x1085;
10426     uint32_t x1086;
10427     uint32_t x1087;
10428     uint32_t x1088;
10429     uint32_t x1089;
10430     uint32_t x1090;
10431     uint32_t x1091;
10432     uint32_t x1092;
10433     uint32_t x1093;
10434     uint32_t x1094;
10435     uint32_t x1095;
10436     uint32_t x1096;
10437     uint32_t x1097;
10438     uint32_t x1098;
10439     uint32_t x1099;
10440     uint32_t x1100;
10441     uint32_t x1101;
10442     uint32_t x1102;
10443     uint32_t x1103;
10444     uint32_t x1104;
10445     uint32_t x1105;
10446     uint32_t x1106;
10447     fiat_secp384r1_uint1 x1107;
10448     uint32_t x1108;
10449     fiat_secp384r1_uint1 x1109;
10450     uint32_t x1110;
10451     fiat_secp384r1_uint1 x1111;
10452     uint32_t x1112;
10453     fiat_secp384r1_uint1 x1113;
10454     uint32_t x1114;
10455     fiat_secp384r1_uint1 x1115;
10456     uint32_t x1116;
10457     fiat_secp384r1_uint1 x1117;
10458     uint32_t x1118;
10459     fiat_secp384r1_uint1 x1119;
10460     uint32_t x1120;
10461     fiat_secp384r1_uint1 x1121;
10462     uint32_t x1122;
10463     fiat_secp384r1_uint1 x1123;
10464     uint32_t x1124;
10465     fiat_secp384r1_uint1 x1125;
10466     uint32_t x1126;
10467     fiat_secp384r1_uint1 x1127;
10468     uint32_t x1128;
10469     uint32_t x1129;
10470     fiat_secp384r1_uint1 x1130;
10471     uint32_t x1131;
10472     fiat_secp384r1_uint1 x1132;
10473     uint32_t x1133;
10474     fiat_secp384r1_uint1 x1134;
10475     uint32_t x1135;
10476     fiat_secp384r1_uint1 x1136;
10477     uint32_t x1137;
10478     fiat_secp384r1_uint1 x1138;
10479     uint32_t x1139;
10480     fiat_secp384r1_uint1 x1140;
10481     uint32_t x1141;
10482     fiat_secp384r1_uint1 x1142;
10483     uint32_t x1143;
10484     fiat_secp384r1_uint1 x1144;
10485     uint32_t x1145;
10486     fiat_secp384r1_uint1 x1146;
10487     uint32_t x1147;
10488     fiat_secp384r1_uint1 x1148;
10489     uint32_t x1149;
10490     fiat_secp384r1_uint1 x1150;
10491     uint32_t x1151;
10492     fiat_secp384r1_uint1 x1152;
10493     uint32_t x1153;
10494     fiat_secp384r1_uint1 x1154;
10495     uint32_t x1155;
10496     uint32_t x1156;
10497     uint32_t x1157;
10498     uint32_t x1158;
10499     uint32_t x1159;
10500     uint32_t x1160;
10501     uint32_t x1161;
10502     uint32_t x1162;
10503     uint32_t x1163;
10504     uint32_t x1164;
10505     uint32_t x1165;
10506     uint32_t x1166;
10507     uint32_t x1167;
10508     uint32_t x1168;
10509     uint32_t x1169;
10510     uint32_t x1170;
10511     uint32_t x1171;
10512     uint32_t x1172;
10513     uint32_t x1173;
10514     uint32_t x1174;
10515     uint32_t x1175;
10516     fiat_secp384r1_uint1 x1176;
10517     uint32_t x1177;
10518     fiat_secp384r1_uint1 x1178;
10519     uint32_t x1179;
10520     fiat_secp384r1_uint1 x1180;
10521     uint32_t x1181;
10522     fiat_secp384r1_uint1 x1182;
10523     uint32_t x1183;
10524     fiat_secp384r1_uint1 x1184;
10525     uint32_t x1185;
10526     fiat_secp384r1_uint1 x1186;
10527     uint32_t x1187;
10528     fiat_secp384r1_uint1 x1188;
10529     uint32_t x1189;
10530     fiat_secp384r1_uint1 x1190;
10531     uint32_t x1191;
10532     uint32_t x1192;
10533     fiat_secp384r1_uint1 x1193;
10534     uint32_t x1194;
10535     fiat_secp384r1_uint1 x1195;
10536     uint32_t x1196;
10537     fiat_secp384r1_uint1 x1197;
10538     uint32_t x1198;
10539     fiat_secp384r1_uint1 x1199;
10540     uint32_t x1200;
10541     fiat_secp384r1_uint1 x1201;
10542     uint32_t x1202;
10543     fiat_secp384r1_uint1 x1203;
10544     uint32_t x1204;
10545     fiat_secp384r1_uint1 x1205;
10546     uint32_t x1206;
10547     fiat_secp384r1_uint1 x1207;
10548     uint32_t x1208;
10549     fiat_secp384r1_uint1 x1209;
10550     uint32_t x1210;
10551     fiat_secp384r1_uint1 x1211;
10552     uint32_t x1212;
10553     fiat_secp384r1_uint1 x1213;
10554     uint32_t x1214;
10555     fiat_secp384r1_uint1 x1215;
10556     uint32_t x1216;
10557     fiat_secp384r1_uint1 x1217;
10558     uint32_t x1218;
10559     uint32_t x1219;
10560     uint32_t x1220;
10561     uint32_t x1221;
10562     uint32_t x1222;
10563     uint32_t x1223;
10564     uint32_t x1224;
10565     uint32_t x1225;
10566     uint32_t x1226;
10567     uint32_t x1227;
10568     uint32_t x1228;
10569     uint32_t x1229;
10570     uint32_t x1230;
10571     uint32_t x1231;
10572     uint32_t x1232;
10573     uint32_t x1233;
10574     uint32_t x1234;
10575     uint32_t x1235;
10576     uint32_t x1236;
10577     uint32_t x1237;
10578     uint32_t x1238;
10579     uint32_t x1239;
10580     uint32_t x1240;
10581     uint32_t x1241;
10582     uint32_t x1242;
10583     uint32_t x1243;
10584     fiat_secp384r1_uint1 x1244;
10585     uint32_t x1245;
10586     fiat_secp384r1_uint1 x1246;
10587     uint32_t x1247;
10588     fiat_secp384r1_uint1 x1248;
10589     uint32_t x1249;
10590     fiat_secp384r1_uint1 x1250;
10591     uint32_t x1251;
10592     fiat_secp384r1_uint1 x1252;
10593     uint32_t x1253;
10594     fiat_secp384r1_uint1 x1254;
10595     uint32_t x1255;
10596     fiat_secp384r1_uint1 x1256;
10597     uint32_t x1257;
10598     fiat_secp384r1_uint1 x1258;
10599     uint32_t x1259;
10600     fiat_secp384r1_uint1 x1260;
10601     uint32_t x1261;
10602     fiat_secp384r1_uint1 x1262;
10603     uint32_t x1263;
10604     fiat_secp384r1_uint1 x1264;
10605     uint32_t x1265;
10606     uint32_t x1266;
10607     fiat_secp384r1_uint1 x1267;
10608     uint32_t x1268;
10609     fiat_secp384r1_uint1 x1269;
10610     uint32_t x1270;
10611     fiat_secp384r1_uint1 x1271;
10612     uint32_t x1272;
10613     fiat_secp384r1_uint1 x1273;
10614     uint32_t x1274;
10615     fiat_secp384r1_uint1 x1275;
10616     uint32_t x1276;
10617     fiat_secp384r1_uint1 x1277;
10618     uint32_t x1278;
10619     fiat_secp384r1_uint1 x1279;
10620     uint32_t x1280;
10621     fiat_secp384r1_uint1 x1281;
10622     uint32_t x1282;
10623     fiat_secp384r1_uint1 x1283;
10624     uint32_t x1284;
10625     fiat_secp384r1_uint1 x1285;
10626     uint32_t x1286;
10627     fiat_secp384r1_uint1 x1287;
10628     uint32_t x1288;
10629     fiat_secp384r1_uint1 x1289;
10630     uint32_t x1290;
10631     fiat_secp384r1_uint1 x1291;
10632     uint32_t x1292;
10633     uint32_t x1293;
10634     uint32_t x1294;
10635     uint32_t x1295;
10636     uint32_t x1296;
10637     uint32_t x1297;
10638     uint32_t x1298;
10639     uint32_t x1299;
10640     uint32_t x1300;
10641     uint32_t x1301;
10642     uint32_t x1302;
10643     uint32_t x1303;
10644     uint32_t x1304;
10645     uint32_t x1305;
10646     uint32_t x1306;
10647     uint32_t x1307;
10648     uint32_t x1308;
10649     uint32_t x1309;
10650     uint32_t x1310;
10651     uint32_t x1311;
10652     uint32_t x1312;
10653     fiat_secp384r1_uint1 x1313;
10654     uint32_t x1314;
10655     fiat_secp384r1_uint1 x1315;
10656     uint32_t x1316;
10657     fiat_secp384r1_uint1 x1317;
10658     uint32_t x1318;
10659     fiat_secp384r1_uint1 x1319;
10660     uint32_t x1320;
10661     fiat_secp384r1_uint1 x1321;
10662     uint32_t x1322;
10663     fiat_secp384r1_uint1 x1323;
10664     uint32_t x1324;
10665     fiat_secp384r1_uint1 x1325;
10666     uint32_t x1326;
10667     fiat_secp384r1_uint1 x1327;
10668     uint32_t x1328;
10669     uint32_t x1329;
10670     fiat_secp384r1_uint1 x1330;
10671     uint32_t x1331;
10672     fiat_secp384r1_uint1 x1332;
10673     uint32_t x1333;
10674     fiat_secp384r1_uint1 x1334;
10675     uint32_t x1335;
10676     fiat_secp384r1_uint1 x1336;
10677     uint32_t x1337;
10678     fiat_secp384r1_uint1 x1338;
10679     uint32_t x1339;
10680     fiat_secp384r1_uint1 x1340;
10681     uint32_t x1341;
10682     fiat_secp384r1_uint1 x1342;
10683     uint32_t x1343;
10684     fiat_secp384r1_uint1 x1344;
10685     uint32_t x1345;
10686     fiat_secp384r1_uint1 x1346;
10687     uint32_t x1347;
10688     fiat_secp384r1_uint1 x1348;
10689     uint32_t x1349;
10690     fiat_secp384r1_uint1 x1350;
10691     uint32_t x1351;
10692     fiat_secp384r1_uint1 x1352;
10693     uint32_t x1353;
10694     fiat_secp384r1_uint1 x1354;
10695     uint32_t x1355;
10696     uint32_t x1356;
10697     uint32_t x1357;
10698     uint32_t x1358;
10699     uint32_t x1359;
10700     uint32_t x1360;
10701     uint32_t x1361;
10702     uint32_t x1362;
10703     uint32_t x1363;
10704     uint32_t x1364;
10705     uint32_t x1365;
10706     uint32_t x1366;
10707     uint32_t x1367;
10708     uint32_t x1368;
10709     uint32_t x1369;
10710     uint32_t x1370;
10711     uint32_t x1371;
10712     uint32_t x1372;
10713     uint32_t x1373;
10714     uint32_t x1374;
10715     uint32_t x1375;
10716     uint32_t x1376;
10717     uint32_t x1377;
10718     uint32_t x1378;
10719     uint32_t x1379;
10720     uint32_t x1380;
10721     fiat_secp384r1_uint1 x1381;
10722     uint32_t x1382;
10723     fiat_secp384r1_uint1 x1383;
10724     uint32_t x1384;
10725     fiat_secp384r1_uint1 x1385;
10726     uint32_t x1386;
10727     fiat_secp384r1_uint1 x1387;
10728     uint32_t x1388;
10729     fiat_secp384r1_uint1 x1389;
10730     uint32_t x1390;
10731     fiat_secp384r1_uint1 x1391;
10732     uint32_t x1392;
10733     fiat_secp384r1_uint1 x1393;
10734     uint32_t x1394;
10735     fiat_secp384r1_uint1 x1395;
10736     uint32_t x1396;
10737     fiat_secp384r1_uint1 x1397;
10738     uint32_t x1398;
10739     fiat_secp384r1_uint1 x1399;
10740     uint32_t x1400;
10741     fiat_secp384r1_uint1 x1401;
10742     uint32_t x1402;
10743     uint32_t x1403;
10744     fiat_secp384r1_uint1 x1404;
10745     uint32_t x1405;
10746     fiat_secp384r1_uint1 x1406;
10747     uint32_t x1407;
10748     fiat_secp384r1_uint1 x1408;
10749     uint32_t x1409;
10750     fiat_secp384r1_uint1 x1410;
10751     uint32_t x1411;
10752     fiat_secp384r1_uint1 x1412;
10753     uint32_t x1413;
10754     fiat_secp384r1_uint1 x1414;
10755     uint32_t x1415;
10756     fiat_secp384r1_uint1 x1416;
10757     uint32_t x1417;
10758     fiat_secp384r1_uint1 x1418;
10759     uint32_t x1419;
10760     fiat_secp384r1_uint1 x1420;
10761     uint32_t x1421;
10762     fiat_secp384r1_uint1 x1422;
10763     uint32_t x1423;
10764     fiat_secp384r1_uint1 x1424;
10765     uint32_t x1425;
10766     fiat_secp384r1_uint1 x1426;
10767     uint32_t x1427;
10768     fiat_secp384r1_uint1 x1428;
10769     uint32_t x1429;
10770     uint32_t x1430;
10771     uint32_t x1431;
10772     uint32_t x1432;
10773     uint32_t x1433;
10774     uint32_t x1434;
10775     uint32_t x1435;
10776     uint32_t x1436;
10777     uint32_t x1437;
10778     uint32_t x1438;
10779     uint32_t x1439;
10780     uint32_t x1440;
10781     uint32_t x1441;
10782     uint32_t x1442;
10783     uint32_t x1443;
10784     uint32_t x1444;
10785     uint32_t x1445;
10786     uint32_t x1446;
10787     uint32_t x1447;
10788     uint32_t x1448;
10789     uint32_t x1449;
10790     fiat_secp384r1_uint1 x1450;
10791     uint32_t x1451;
10792     fiat_secp384r1_uint1 x1452;
10793     uint32_t x1453;
10794     fiat_secp384r1_uint1 x1454;
10795     uint32_t x1455;
10796     fiat_secp384r1_uint1 x1456;
10797     uint32_t x1457;
10798     fiat_secp384r1_uint1 x1458;
10799     uint32_t x1459;
10800     fiat_secp384r1_uint1 x1460;
10801     uint32_t x1461;
10802     fiat_secp384r1_uint1 x1462;
10803     uint32_t x1463;
10804     fiat_secp384r1_uint1 x1464;
10805     uint32_t x1465;
10806     uint32_t x1466;
10807     fiat_secp384r1_uint1 x1467;
10808     uint32_t x1468;
10809     fiat_secp384r1_uint1 x1469;
10810     uint32_t x1470;
10811     fiat_secp384r1_uint1 x1471;
10812     uint32_t x1472;
10813     fiat_secp384r1_uint1 x1473;
10814     uint32_t x1474;
10815     fiat_secp384r1_uint1 x1475;
10816     uint32_t x1476;
10817     fiat_secp384r1_uint1 x1477;
10818     uint32_t x1478;
10819     fiat_secp384r1_uint1 x1479;
10820     uint32_t x1480;
10821     fiat_secp384r1_uint1 x1481;
10822     uint32_t x1482;
10823     fiat_secp384r1_uint1 x1483;
10824     uint32_t x1484;
10825     fiat_secp384r1_uint1 x1485;
10826     uint32_t x1486;
10827     fiat_secp384r1_uint1 x1487;
10828     uint32_t x1488;
10829     fiat_secp384r1_uint1 x1489;
10830     uint32_t x1490;
10831     fiat_secp384r1_uint1 x1491;
10832     uint32_t x1492;
10833     uint32_t x1493;
10834     uint32_t x1494;
10835     uint32_t x1495;
10836     uint32_t x1496;
10837     uint32_t x1497;
10838     uint32_t x1498;
10839     uint32_t x1499;
10840     uint32_t x1500;
10841     uint32_t x1501;
10842     uint32_t x1502;
10843     uint32_t x1503;
10844     uint32_t x1504;
10845     uint32_t x1505;
10846     uint32_t x1506;
10847     uint32_t x1507;
10848     uint32_t x1508;
10849     uint32_t x1509;
10850     uint32_t x1510;
10851     uint32_t x1511;
10852     uint32_t x1512;
10853     uint32_t x1513;
10854     uint32_t x1514;
10855     uint32_t x1515;
10856     uint32_t x1516;
10857     uint32_t x1517;
10858     fiat_secp384r1_uint1 x1518;
10859     uint32_t x1519;
10860     fiat_secp384r1_uint1 x1520;
10861     uint32_t x1521;
10862     fiat_secp384r1_uint1 x1522;
10863     uint32_t x1523;
10864     fiat_secp384r1_uint1 x1524;
10865     uint32_t x1525;
10866     fiat_secp384r1_uint1 x1526;
10867     uint32_t x1527;
10868     fiat_secp384r1_uint1 x1528;
10869     uint32_t x1529;
10870     fiat_secp384r1_uint1 x1530;
10871     uint32_t x1531;
10872     fiat_secp384r1_uint1 x1532;
10873     uint32_t x1533;
10874     fiat_secp384r1_uint1 x1534;
10875     uint32_t x1535;
10876     fiat_secp384r1_uint1 x1536;
10877     uint32_t x1537;
10878     fiat_secp384r1_uint1 x1538;
10879     uint32_t x1539;
10880     uint32_t x1540;
10881     fiat_secp384r1_uint1 x1541;
10882     uint32_t x1542;
10883     fiat_secp384r1_uint1 x1543;
10884     uint32_t x1544;
10885     fiat_secp384r1_uint1 x1545;
10886     uint32_t x1546;
10887     fiat_secp384r1_uint1 x1547;
10888     uint32_t x1548;
10889     fiat_secp384r1_uint1 x1549;
10890     uint32_t x1550;
10891     fiat_secp384r1_uint1 x1551;
10892     uint32_t x1552;
10893     fiat_secp384r1_uint1 x1553;
10894     uint32_t x1554;
10895     fiat_secp384r1_uint1 x1555;
10896     uint32_t x1556;
10897     fiat_secp384r1_uint1 x1557;
10898     uint32_t x1558;
10899     fiat_secp384r1_uint1 x1559;
10900     uint32_t x1560;
10901     fiat_secp384r1_uint1 x1561;
10902     uint32_t x1562;
10903     fiat_secp384r1_uint1 x1563;
10904     uint32_t x1564;
10905     fiat_secp384r1_uint1 x1565;
10906     uint32_t x1566;
10907     uint32_t x1567;
10908     uint32_t x1568;
10909     uint32_t x1569;
10910     uint32_t x1570;
10911     uint32_t x1571;
10912     uint32_t x1572;
10913     uint32_t x1573;
10914     uint32_t x1574;
10915     uint32_t x1575;
10916     uint32_t x1576;
10917     uint32_t x1577;
10918     uint32_t x1578;
10919     uint32_t x1579;
10920     uint32_t x1580;
10921     uint32_t x1581;
10922     uint32_t x1582;
10923     uint32_t x1583;
10924     uint32_t x1584;
10925     uint32_t x1585;
10926     uint32_t x1586;
10927     fiat_secp384r1_uint1 x1587;
10928     uint32_t x1588;
10929     fiat_secp384r1_uint1 x1589;
10930     uint32_t x1590;
10931     fiat_secp384r1_uint1 x1591;
10932     uint32_t x1592;
10933     fiat_secp384r1_uint1 x1593;
10934     uint32_t x1594;
10935     fiat_secp384r1_uint1 x1595;
10936     uint32_t x1596;
10937     fiat_secp384r1_uint1 x1597;
10938     uint32_t x1598;
10939     fiat_secp384r1_uint1 x1599;
10940     uint32_t x1600;
10941     fiat_secp384r1_uint1 x1601;
10942     uint32_t x1602;
10943     uint32_t x1603;
10944     fiat_secp384r1_uint1 x1604;
10945     uint32_t x1605;
10946     fiat_secp384r1_uint1 x1606;
10947     uint32_t x1607;
10948     fiat_secp384r1_uint1 x1608;
10949     uint32_t x1609;
10950     fiat_secp384r1_uint1 x1610;
10951     uint32_t x1611;
10952     fiat_secp384r1_uint1 x1612;
10953     uint32_t x1613;
10954     fiat_secp384r1_uint1 x1614;
10955     uint32_t x1615;
10956     fiat_secp384r1_uint1 x1616;
10957     uint32_t x1617;
10958     fiat_secp384r1_uint1 x1618;
10959     uint32_t x1619;
10960     fiat_secp384r1_uint1 x1620;
10961     uint32_t x1621;
10962     fiat_secp384r1_uint1 x1622;
10963     uint32_t x1623;
10964     fiat_secp384r1_uint1 x1624;
10965     uint32_t x1625;
10966     fiat_secp384r1_uint1 x1626;
10967     uint32_t x1627;
10968     fiat_secp384r1_uint1 x1628;
10969     uint32_t x1629;
10970     uint32_t x1630;
10971     fiat_secp384r1_uint1 x1631;
10972     uint32_t x1632;
10973     fiat_secp384r1_uint1 x1633;
10974     uint32_t x1634;
10975     fiat_secp384r1_uint1 x1635;
10976     uint32_t x1636;
10977     fiat_secp384r1_uint1 x1637;
10978     uint32_t x1638;
10979     fiat_secp384r1_uint1 x1639;
10980     uint32_t x1640;
10981     fiat_secp384r1_uint1 x1641;
10982     uint32_t x1642;
10983     fiat_secp384r1_uint1 x1643;
10984     uint32_t x1644;
10985     fiat_secp384r1_uint1 x1645;
10986     uint32_t x1646;
10987     fiat_secp384r1_uint1 x1647;
10988     uint32_t x1648;
10989     fiat_secp384r1_uint1 x1649;
10990     uint32_t x1650;
10991     fiat_secp384r1_uint1 x1651;
10992     uint32_t x1652;
10993     fiat_secp384r1_uint1 x1653;
10994     uint32_t x1654;
10995     fiat_secp384r1_uint1 x1655;
10996     uint32_t x1656;
10997     uint32_t x1657;
10998     uint32_t x1658;
10999     uint32_t x1659;
11000     uint32_t x1660;
11001     uint32_t x1661;
11002     uint32_t x1662;
11003     uint32_t x1663;
11004     uint32_t x1664;
11005     uint32_t x1665;
11006     uint32_t x1666;
11007     uint32_t x1667;
11008     x1 = (arg1[1]);
11009     x2 = (arg1[2]);
11010     x3 = (arg1[3]);
11011     x4 = (arg1[4]);
11012     x5 = (arg1[5]);
11013     x6 = (arg1[6]);
11014     x7 = (arg1[7]);
11015     x8 = (arg1[8]);
11016     x9 = (arg1[9]);
11017     x10 = (arg1[10]);
11018     x11 = (arg1[11]);
11019     x12 = (arg1[0]);
11020     fiat_secp384r1_mulx_u32(&x13, &x14, x12, (arg1[11]));
11021     fiat_secp384r1_mulx_u32(&x15, &x16, x12, (arg1[10]));
11022     fiat_secp384r1_mulx_u32(&x17, &x18, x12, (arg1[9]));
11023     fiat_secp384r1_mulx_u32(&x19, &x20, x12, (arg1[8]));
11024     fiat_secp384r1_mulx_u32(&x21, &x22, x12, (arg1[7]));
11025     fiat_secp384r1_mulx_u32(&x23, &x24, x12, (arg1[6]));
11026     fiat_secp384r1_mulx_u32(&x25, &x26, x12, (arg1[5]));
11027     fiat_secp384r1_mulx_u32(&x27, &x28, x12, (arg1[4]));
11028     fiat_secp384r1_mulx_u32(&x29, &x30, x12, (arg1[3]));
11029     fiat_secp384r1_mulx_u32(&x31, &x32, x12, (arg1[2]));
11030     fiat_secp384r1_mulx_u32(&x33, &x34, x12, (arg1[1]));
11031     fiat_secp384r1_mulx_u32(&x35, &x36, x12, (arg1[0]));
11032     fiat_secp384r1_addcarryx_u32(&x37, &x38, 0x0, x36, x33);
11033     fiat_secp384r1_addcarryx_u32(&x39, &x40, x38, x34, x31);
11034     fiat_secp384r1_addcarryx_u32(&x41, &x42, x40, x32, x29);
11035     fiat_secp384r1_addcarryx_u32(&x43, &x44, x42, x30, x27);
11036     fiat_secp384r1_addcarryx_u32(&x45, &x46, x44, x28, x25);
11037     fiat_secp384r1_addcarryx_u32(&x47, &x48, x46, x26, x23);
11038     fiat_secp384r1_addcarryx_u32(&x49, &x50, x48, x24, x21);
11039     fiat_secp384r1_addcarryx_u32(&x51, &x52, x50, x22, x19);
11040     fiat_secp384r1_addcarryx_u32(&x53, &x54, x52, x20, x17);
11041     fiat_secp384r1_addcarryx_u32(&x55, &x56, x54, x18, x15);
11042     fiat_secp384r1_addcarryx_u32(&x57, &x58, x56, x16, x13);
11043     x59 = (x58 + x14);
11044     fiat_secp384r1_mulx_u32(&x60, &x61, x35, UINT32_C(0xffffffff));
11045     fiat_secp384r1_mulx_u32(&x62, &x63, x35, UINT32_C(0xffffffff));
11046     fiat_secp384r1_mulx_u32(&x64, &x65, x35, UINT32_C(0xffffffff));
11047     fiat_secp384r1_mulx_u32(&x66, &x67, x35, UINT32_C(0xffffffff));
11048     fiat_secp384r1_mulx_u32(&x68, &x69, x35, UINT32_C(0xffffffff));
11049     fiat_secp384r1_mulx_u32(&x70, &x71, x35, UINT32_C(0xffffffff));
11050     fiat_secp384r1_mulx_u32(&x72, &x73, x35, UINT32_C(0xffffffff));
11051     fiat_secp384r1_mulx_u32(&x74, &x75, x35, UINT32_C(0xfffffffe));
11052     fiat_secp384r1_mulx_u32(&x76, &x77, x35, UINT32_C(0xffffffff));
11053     fiat_secp384r1_mulx_u32(&x78, &x79, x35, UINT32_C(0xffffffff));
11054     fiat_secp384r1_addcarryx_u32(&x80, &x81, 0x0, x77, x74);
11055     fiat_secp384r1_addcarryx_u32(&x82, &x83, x81, x75, x72);
11056     fiat_secp384r1_addcarryx_u32(&x84, &x85, x83, x73, x70);
11057     fiat_secp384r1_addcarryx_u32(&x86, &x87, x85, x71, x68);
11058     fiat_secp384r1_addcarryx_u32(&x88, &x89, x87, x69, x66);
11059     fiat_secp384r1_addcarryx_u32(&x90, &x91, x89, x67, x64);
11060     fiat_secp384r1_addcarryx_u32(&x92, &x93, x91, x65, x62);
11061     fiat_secp384r1_addcarryx_u32(&x94, &x95, x93, x63, x60);
11062     x96 = (x95 + x61);
11063     fiat_secp384r1_addcarryx_u32(&x97, &x98, 0x0, x35, x78);
11064     fiat_secp384r1_addcarryx_u32(&x99, &x100, x98, x37, x79);
11065     fiat_secp384r1_addcarryx_u32(&x101, &x102, x100, x39, 0x0);
11066     fiat_secp384r1_addcarryx_u32(&x103, &x104, x102, x41, x76);
11067     fiat_secp384r1_addcarryx_u32(&x105, &x106, x104, x43, x80);
11068     fiat_secp384r1_addcarryx_u32(&x107, &x108, x106, x45, x82);
11069     fiat_secp384r1_addcarryx_u32(&x109, &x110, x108, x47, x84);
11070     fiat_secp384r1_addcarryx_u32(&x111, &x112, x110, x49, x86);
11071     fiat_secp384r1_addcarryx_u32(&x113, &x114, x112, x51, x88);
11072     fiat_secp384r1_addcarryx_u32(&x115, &x116, x114, x53, x90);
11073     fiat_secp384r1_addcarryx_u32(&x117, &x118, x116, x55, x92);
11074     fiat_secp384r1_addcarryx_u32(&x119, &x120, x118, x57, x94);
11075     fiat_secp384r1_addcarryx_u32(&x121, &x122, x120, x59, x96);
11076     fiat_secp384r1_mulx_u32(&x123, &x124, x1, (arg1[11]));
11077     fiat_secp384r1_mulx_u32(&x125, &x126, x1, (arg1[10]));
11078     fiat_secp384r1_mulx_u32(&x127, &x128, x1, (arg1[9]));
11079     fiat_secp384r1_mulx_u32(&x129, &x130, x1, (arg1[8]));
11080     fiat_secp384r1_mulx_u32(&x131, &x132, x1, (arg1[7]));
11081     fiat_secp384r1_mulx_u32(&x133, &x134, x1, (arg1[6]));
11082     fiat_secp384r1_mulx_u32(&x135, &x136, x1, (arg1[5]));
11083     fiat_secp384r1_mulx_u32(&x137, &x138, x1, (arg1[4]));
11084     fiat_secp384r1_mulx_u32(&x139, &x140, x1, (arg1[3]));
11085     fiat_secp384r1_mulx_u32(&x141, &x142, x1, (arg1[2]));
11086     fiat_secp384r1_mulx_u32(&x143, &x144, x1, (arg1[1]));
11087     fiat_secp384r1_mulx_u32(&x145, &x146, x1, (arg1[0]));
11088     fiat_secp384r1_addcarryx_u32(&x147, &x148, 0x0, x146, x143);
11089     fiat_secp384r1_addcarryx_u32(&x149, &x150, x148, x144, x141);
11090     fiat_secp384r1_addcarryx_u32(&x151, &x152, x150, x142, x139);
11091     fiat_secp384r1_addcarryx_u32(&x153, &x154, x152, x140, x137);
11092     fiat_secp384r1_addcarryx_u32(&x155, &x156, x154, x138, x135);
11093     fiat_secp384r1_addcarryx_u32(&x157, &x158, x156, x136, x133);
11094     fiat_secp384r1_addcarryx_u32(&x159, &x160, x158, x134, x131);
11095     fiat_secp384r1_addcarryx_u32(&x161, &x162, x160, x132, x129);
11096     fiat_secp384r1_addcarryx_u32(&x163, &x164, x162, x130, x127);
11097     fiat_secp384r1_addcarryx_u32(&x165, &x166, x164, x128, x125);
11098     fiat_secp384r1_addcarryx_u32(&x167, &x168, x166, x126, x123);
11099     x169 = (x168 + x124);
11100     fiat_secp384r1_addcarryx_u32(&x170, &x171, 0x0, x99, x145);
11101     fiat_secp384r1_addcarryx_u32(&x172, &x173, x171, x101, x147);
11102     fiat_secp384r1_addcarryx_u32(&x174, &x175, x173, x103, x149);
11103     fiat_secp384r1_addcarryx_u32(&x176, &x177, x175, x105, x151);
11104     fiat_secp384r1_addcarryx_u32(&x178, &x179, x177, x107, x153);
11105     fiat_secp384r1_addcarryx_u32(&x180, &x181, x179, x109, x155);
11106     fiat_secp384r1_addcarryx_u32(&x182, &x183, x181, x111, x157);
11107     fiat_secp384r1_addcarryx_u32(&x184, &x185, x183, x113, x159);
11108     fiat_secp384r1_addcarryx_u32(&x186, &x187, x185, x115, x161);
11109     fiat_secp384r1_addcarryx_u32(&x188, &x189, x187, x117, x163);
11110     fiat_secp384r1_addcarryx_u32(&x190, &x191, x189, x119, x165);
11111     fiat_secp384r1_addcarryx_u32(&x192, &x193, x191, x121, x167);
11112     fiat_secp384r1_addcarryx_u32(&x194, &x195, x193, x122, x169);
11113     fiat_secp384r1_mulx_u32(&x196, &x197, x170, UINT32_C(0xffffffff));
11114     fiat_secp384r1_mulx_u32(&x198, &x199, x170, UINT32_C(0xffffffff));
11115     fiat_secp384r1_mulx_u32(&x200, &x201, x170, UINT32_C(0xffffffff));
11116     fiat_secp384r1_mulx_u32(&x202, &x203, x170, UINT32_C(0xffffffff));
11117     fiat_secp384r1_mulx_u32(&x204, &x205, x170, UINT32_C(0xffffffff));
11118     fiat_secp384r1_mulx_u32(&x206, &x207, x170, UINT32_C(0xffffffff));
11119     fiat_secp384r1_mulx_u32(&x208, &x209, x170, UINT32_C(0xffffffff));
11120     fiat_secp384r1_mulx_u32(&x210, &x211, x170, UINT32_C(0xfffffffe));
11121     fiat_secp384r1_mulx_u32(&x212, &x213, x170, UINT32_C(0xffffffff));
11122     fiat_secp384r1_mulx_u32(&x214, &x215, x170, UINT32_C(0xffffffff));
11123     fiat_secp384r1_addcarryx_u32(&x216, &x217, 0x0, x213, x210);
11124     fiat_secp384r1_addcarryx_u32(&x218, &x219, x217, x211, x208);
11125     fiat_secp384r1_addcarryx_u32(&x220, &x221, x219, x209, x206);
11126     fiat_secp384r1_addcarryx_u32(&x222, &x223, x221, x207, x204);
11127     fiat_secp384r1_addcarryx_u32(&x224, &x225, x223, x205, x202);
11128     fiat_secp384r1_addcarryx_u32(&x226, &x227, x225, x203, x200);
11129     fiat_secp384r1_addcarryx_u32(&x228, &x229, x227, x201, x198);
11130     fiat_secp384r1_addcarryx_u32(&x230, &x231, x229, x199, x196);
11131     x232 = (x231 + x197);
11132     fiat_secp384r1_addcarryx_u32(&x233, &x234, 0x0, x170, x214);
11133     fiat_secp384r1_addcarryx_u32(&x235, &x236, x234, x172, x215);
11134     fiat_secp384r1_addcarryx_u32(&x237, &x238, x236, x174, 0x0);
11135     fiat_secp384r1_addcarryx_u32(&x239, &x240, x238, x176, x212);
11136     fiat_secp384r1_addcarryx_u32(&x241, &x242, x240, x178, x216);
11137     fiat_secp384r1_addcarryx_u32(&x243, &x244, x242, x180, x218);
11138     fiat_secp384r1_addcarryx_u32(&x245, &x246, x244, x182, x220);
11139     fiat_secp384r1_addcarryx_u32(&x247, &x248, x246, x184, x222);
11140     fiat_secp384r1_addcarryx_u32(&x249, &x250, x248, x186, x224);
11141     fiat_secp384r1_addcarryx_u32(&x251, &x252, x250, x188, x226);
11142     fiat_secp384r1_addcarryx_u32(&x253, &x254, x252, x190, x228);
11143     fiat_secp384r1_addcarryx_u32(&x255, &x256, x254, x192, x230);
11144     fiat_secp384r1_addcarryx_u32(&x257, &x258, x256, x194, x232);
11145     x259 = ((uint32_t)x258 + x195);
11146     fiat_secp384r1_mulx_u32(&x260, &x261, x2, (arg1[11]));
11147     fiat_secp384r1_mulx_u32(&x262, &x263, x2, (arg1[10]));
11148     fiat_secp384r1_mulx_u32(&x264, &x265, x2, (arg1[9]));
11149     fiat_secp384r1_mulx_u32(&x266, &x267, x2, (arg1[8]));
11150     fiat_secp384r1_mulx_u32(&x268, &x269, x2, (arg1[7]));
11151     fiat_secp384r1_mulx_u32(&x270, &x271, x2, (arg1[6]));
11152     fiat_secp384r1_mulx_u32(&x272, &x273, x2, (arg1[5]));
11153     fiat_secp384r1_mulx_u32(&x274, &x275, x2, (arg1[4]));
11154     fiat_secp384r1_mulx_u32(&x276, &x277, x2, (arg1[3]));
11155     fiat_secp384r1_mulx_u32(&x278, &x279, x2, (arg1[2]));
11156     fiat_secp384r1_mulx_u32(&x280, &x281, x2, (arg1[1]));
11157     fiat_secp384r1_mulx_u32(&x282, &x283, x2, (arg1[0]));
11158     fiat_secp384r1_addcarryx_u32(&x284, &x285, 0x0, x283, x280);
11159     fiat_secp384r1_addcarryx_u32(&x286, &x287, x285, x281, x278);
11160     fiat_secp384r1_addcarryx_u32(&x288, &x289, x287, x279, x276);
11161     fiat_secp384r1_addcarryx_u32(&x290, &x291, x289, x277, x274);
11162     fiat_secp384r1_addcarryx_u32(&x292, &x293, x291, x275, x272);
11163     fiat_secp384r1_addcarryx_u32(&x294, &x295, x293, x273, x270);
11164     fiat_secp384r1_addcarryx_u32(&x296, &x297, x295, x271, x268);
11165     fiat_secp384r1_addcarryx_u32(&x298, &x299, x297, x269, x266);
11166     fiat_secp384r1_addcarryx_u32(&x300, &x301, x299, x267, x264);
11167     fiat_secp384r1_addcarryx_u32(&x302, &x303, x301, x265, x262);
11168     fiat_secp384r1_addcarryx_u32(&x304, &x305, x303, x263, x260);
11169     x306 = (x305 + x261);
11170     fiat_secp384r1_addcarryx_u32(&x307, &x308, 0x0, x235, x282);
11171     fiat_secp384r1_addcarryx_u32(&x309, &x310, x308, x237, x284);
11172     fiat_secp384r1_addcarryx_u32(&x311, &x312, x310, x239, x286);
11173     fiat_secp384r1_addcarryx_u32(&x313, &x314, x312, x241, x288);
11174     fiat_secp384r1_addcarryx_u32(&x315, &x316, x314, x243, x290);
11175     fiat_secp384r1_addcarryx_u32(&x317, &x318, x316, x245, x292);
11176     fiat_secp384r1_addcarryx_u32(&x319, &x320, x318, x247, x294);
11177     fiat_secp384r1_addcarryx_u32(&x321, &x322, x320, x249, x296);
11178     fiat_secp384r1_addcarryx_u32(&x323, &x324, x322, x251, x298);
11179     fiat_secp384r1_addcarryx_u32(&x325, &x326, x324, x253, x300);
11180     fiat_secp384r1_addcarryx_u32(&x327, &x328, x326, x255, x302);
11181     fiat_secp384r1_addcarryx_u32(&x329, &x330, x328, x257, x304);
11182     fiat_secp384r1_addcarryx_u32(&x331, &x332, x330, x259, x306);
11183     fiat_secp384r1_mulx_u32(&x333, &x334, x307, UINT32_C(0xffffffff));
11184     fiat_secp384r1_mulx_u32(&x335, &x336, x307, UINT32_C(0xffffffff));
11185     fiat_secp384r1_mulx_u32(&x337, &x338, x307, UINT32_C(0xffffffff));
11186     fiat_secp384r1_mulx_u32(&x339, &x340, x307, UINT32_C(0xffffffff));
11187     fiat_secp384r1_mulx_u32(&x341, &x342, x307, UINT32_C(0xffffffff));
11188     fiat_secp384r1_mulx_u32(&x343, &x344, x307, UINT32_C(0xffffffff));
11189     fiat_secp384r1_mulx_u32(&x345, &x346, x307, UINT32_C(0xffffffff));
11190     fiat_secp384r1_mulx_u32(&x347, &x348, x307, UINT32_C(0xfffffffe));
11191     fiat_secp384r1_mulx_u32(&x349, &x350, x307, UINT32_C(0xffffffff));
11192     fiat_secp384r1_mulx_u32(&x351, &x352, x307, UINT32_C(0xffffffff));
11193     fiat_secp384r1_addcarryx_u32(&x353, &x354, 0x0, x350, x347);
11194     fiat_secp384r1_addcarryx_u32(&x355, &x356, x354, x348, x345);
11195     fiat_secp384r1_addcarryx_u32(&x357, &x358, x356, x346, x343);
11196     fiat_secp384r1_addcarryx_u32(&x359, &x360, x358, x344, x341);
11197     fiat_secp384r1_addcarryx_u32(&x361, &x362, x360, x342, x339);
11198     fiat_secp384r1_addcarryx_u32(&x363, &x364, x362, x340, x337);
11199     fiat_secp384r1_addcarryx_u32(&x365, &x366, x364, x338, x335);
11200     fiat_secp384r1_addcarryx_u32(&x367, &x368, x366, x336, x333);
11201     x369 = (x368 + x334);
11202     fiat_secp384r1_addcarryx_u32(&x370, &x371, 0x0, x307, x351);
11203     fiat_secp384r1_addcarryx_u32(&x372, &x373, x371, x309, x352);
11204     fiat_secp384r1_addcarryx_u32(&x374, &x375, x373, x311, 0x0);
11205     fiat_secp384r1_addcarryx_u32(&x376, &x377, x375, x313, x349);
11206     fiat_secp384r1_addcarryx_u32(&x378, &x379, x377, x315, x353);
11207     fiat_secp384r1_addcarryx_u32(&x380, &x381, x379, x317, x355);
11208     fiat_secp384r1_addcarryx_u32(&x382, &x383, x381, x319, x357);
11209     fiat_secp384r1_addcarryx_u32(&x384, &x385, x383, x321, x359);
11210     fiat_secp384r1_addcarryx_u32(&x386, &x387, x385, x323, x361);
11211     fiat_secp384r1_addcarryx_u32(&x388, &x389, x387, x325, x363);
11212     fiat_secp384r1_addcarryx_u32(&x390, &x391, x389, x327, x365);
11213     fiat_secp384r1_addcarryx_u32(&x392, &x393, x391, x329, x367);
11214     fiat_secp384r1_addcarryx_u32(&x394, &x395, x393, x331, x369);
11215     x396 = ((uint32_t)x395 + x332);
11216     fiat_secp384r1_mulx_u32(&x397, &x398, x3, (arg1[11]));
11217     fiat_secp384r1_mulx_u32(&x399, &x400, x3, (arg1[10]));
11218     fiat_secp384r1_mulx_u32(&x401, &x402, x3, (arg1[9]));
11219     fiat_secp384r1_mulx_u32(&x403, &x404, x3, (arg1[8]));
11220     fiat_secp384r1_mulx_u32(&x405, &x406, x3, (arg1[7]));
11221     fiat_secp384r1_mulx_u32(&x407, &x408, x3, (arg1[6]));
11222     fiat_secp384r1_mulx_u32(&x409, &x410, x3, (arg1[5]));
11223     fiat_secp384r1_mulx_u32(&x411, &x412, x3, (arg1[4]));
11224     fiat_secp384r1_mulx_u32(&x413, &x414, x3, (arg1[3]));
11225     fiat_secp384r1_mulx_u32(&x415, &x416, x3, (arg1[2]));
11226     fiat_secp384r1_mulx_u32(&x417, &x418, x3, (arg1[1]));
11227     fiat_secp384r1_mulx_u32(&x419, &x420, x3, (arg1[0]));
11228     fiat_secp384r1_addcarryx_u32(&x421, &x422, 0x0, x420, x417);
11229     fiat_secp384r1_addcarryx_u32(&x423, &x424, x422, x418, x415);
11230     fiat_secp384r1_addcarryx_u32(&x425, &x426, x424, x416, x413);
11231     fiat_secp384r1_addcarryx_u32(&x427, &x428, x426, x414, x411);
11232     fiat_secp384r1_addcarryx_u32(&x429, &x430, x428, x412, x409);
11233     fiat_secp384r1_addcarryx_u32(&x431, &x432, x430, x410, x407);
11234     fiat_secp384r1_addcarryx_u32(&x433, &x434, x432, x408, x405);
11235     fiat_secp384r1_addcarryx_u32(&x435, &x436, x434, x406, x403);
11236     fiat_secp384r1_addcarryx_u32(&x437, &x438, x436, x404, x401);
11237     fiat_secp384r1_addcarryx_u32(&x439, &x440, x438, x402, x399);
11238     fiat_secp384r1_addcarryx_u32(&x441, &x442, x440, x400, x397);
11239     x443 = (x442 + x398);
11240     fiat_secp384r1_addcarryx_u32(&x444, &x445, 0x0, x372, x419);
11241     fiat_secp384r1_addcarryx_u32(&x446, &x447, x445, x374, x421);
11242     fiat_secp384r1_addcarryx_u32(&x448, &x449, x447, x376, x423);
11243     fiat_secp384r1_addcarryx_u32(&x450, &x451, x449, x378, x425);
11244     fiat_secp384r1_addcarryx_u32(&x452, &x453, x451, x380, x427);
11245     fiat_secp384r1_addcarryx_u32(&x454, &x455, x453, x382, x429);
11246     fiat_secp384r1_addcarryx_u32(&x456, &x457, x455, x384, x431);
11247     fiat_secp384r1_addcarryx_u32(&x458, &x459, x457, x386, x433);
11248     fiat_secp384r1_addcarryx_u32(&x460, &x461, x459, x388, x435);
11249     fiat_secp384r1_addcarryx_u32(&x462, &x463, x461, x390, x437);
11250     fiat_secp384r1_addcarryx_u32(&x464, &x465, x463, x392, x439);
11251     fiat_secp384r1_addcarryx_u32(&x466, &x467, x465, x394, x441);
11252     fiat_secp384r1_addcarryx_u32(&x468, &x469, x467, x396, x443);
11253     fiat_secp384r1_mulx_u32(&x470, &x471, x444, UINT32_C(0xffffffff));
11254     fiat_secp384r1_mulx_u32(&x472, &x473, x444, UINT32_C(0xffffffff));
11255     fiat_secp384r1_mulx_u32(&x474, &x475, x444, UINT32_C(0xffffffff));
11256     fiat_secp384r1_mulx_u32(&x476, &x477, x444, UINT32_C(0xffffffff));
11257     fiat_secp384r1_mulx_u32(&x478, &x479, x444, UINT32_C(0xffffffff));
11258     fiat_secp384r1_mulx_u32(&x480, &x481, x444, UINT32_C(0xffffffff));
11259     fiat_secp384r1_mulx_u32(&x482, &x483, x444, UINT32_C(0xffffffff));
11260     fiat_secp384r1_mulx_u32(&x484, &x485, x444, UINT32_C(0xfffffffe));
11261     fiat_secp384r1_mulx_u32(&x486, &x487, x444, UINT32_C(0xffffffff));
11262     fiat_secp384r1_mulx_u32(&x488, &x489, x444, UINT32_C(0xffffffff));
11263     fiat_secp384r1_addcarryx_u32(&x490, &x491, 0x0, x487, x484);
11264     fiat_secp384r1_addcarryx_u32(&x492, &x493, x491, x485, x482);
11265     fiat_secp384r1_addcarryx_u32(&x494, &x495, x493, x483, x480);
11266     fiat_secp384r1_addcarryx_u32(&x496, &x497, x495, x481, x478);
11267     fiat_secp384r1_addcarryx_u32(&x498, &x499, x497, x479, x476);
11268     fiat_secp384r1_addcarryx_u32(&x500, &x501, x499, x477, x474);
11269     fiat_secp384r1_addcarryx_u32(&x502, &x503, x501, x475, x472);
11270     fiat_secp384r1_addcarryx_u32(&x504, &x505, x503, x473, x470);
11271     x506 = (x505 + x471);
11272     fiat_secp384r1_addcarryx_u32(&x507, &x508, 0x0, x444, x488);
11273     fiat_secp384r1_addcarryx_u32(&x509, &x510, x508, x446, x489);
11274     fiat_secp384r1_addcarryx_u32(&x511, &x512, x510, x448, 0x0);
11275     fiat_secp384r1_addcarryx_u32(&x513, &x514, x512, x450, x486);
11276     fiat_secp384r1_addcarryx_u32(&x515, &x516, x514, x452, x490);
11277     fiat_secp384r1_addcarryx_u32(&x517, &x518, x516, x454, x492);
11278     fiat_secp384r1_addcarryx_u32(&x519, &x520, x518, x456, x494);
11279     fiat_secp384r1_addcarryx_u32(&x521, &x522, x520, x458, x496);
11280     fiat_secp384r1_addcarryx_u32(&x523, &x524, x522, x460, x498);
11281     fiat_secp384r1_addcarryx_u32(&x525, &x526, x524, x462, x500);
11282     fiat_secp384r1_addcarryx_u32(&x527, &x528, x526, x464, x502);
11283     fiat_secp384r1_addcarryx_u32(&x529, &x530, x528, x466, x504);
11284     fiat_secp384r1_addcarryx_u32(&x531, &x532, x530, x468, x506);
11285     x533 = ((uint32_t)x532 + x469);
11286     fiat_secp384r1_mulx_u32(&x534, &x535, x4, (arg1[11]));
11287     fiat_secp384r1_mulx_u32(&x536, &x537, x4, (arg1[10]));
11288     fiat_secp384r1_mulx_u32(&x538, &x539, x4, (arg1[9]));
11289     fiat_secp384r1_mulx_u32(&x540, &x541, x4, (arg1[8]));
11290     fiat_secp384r1_mulx_u32(&x542, &x543, x4, (arg1[7]));
11291     fiat_secp384r1_mulx_u32(&x544, &x545, x4, (arg1[6]));
11292     fiat_secp384r1_mulx_u32(&x546, &x547, x4, (arg1[5]));
11293     fiat_secp384r1_mulx_u32(&x548, &x549, x4, (arg1[4]));
11294     fiat_secp384r1_mulx_u32(&x550, &x551, x4, (arg1[3]));
11295     fiat_secp384r1_mulx_u32(&x552, &x553, x4, (arg1[2]));
11296     fiat_secp384r1_mulx_u32(&x554, &x555, x4, (arg1[1]));
11297     fiat_secp384r1_mulx_u32(&x556, &x557, x4, (arg1[0]));
11298     fiat_secp384r1_addcarryx_u32(&x558, &x559, 0x0, x557, x554);
11299     fiat_secp384r1_addcarryx_u32(&x560, &x561, x559, x555, x552);
11300     fiat_secp384r1_addcarryx_u32(&x562, &x563, x561, x553, x550);
11301     fiat_secp384r1_addcarryx_u32(&x564, &x565, x563, x551, x548);
11302     fiat_secp384r1_addcarryx_u32(&x566, &x567, x565, x549, x546);
11303     fiat_secp384r1_addcarryx_u32(&x568, &x569, x567, x547, x544);
11304     fiat_secp384r1_addcarryx_u32(&x570, &x571, x569, x545, x542);
11305     fiat_secp384r1_addcarryx_u32(&x572, &x573, x571, x543, x540);
11306     fiat_secp384r1_addcarryx_u32(&x574, &x575, x573, x541, x538);
11307     fiat_secp384r1_addcarryx_u32(&x576, &x577, x575, x539, x536);
11308     fiat_secp384r1_addcarryx_u32(&x578, &x579, x577, x537, x534);
11309     x580 = (x579 + x535);
11310     fiat_secp384r1_addcarryx_u32(&x581, &x582, 0x0, x509, x556);
11311     fiat_secp384r1_addcarryx_u32(&x583, &x584, x582, x511, x558);
11312     fiat_secp384r1_addcarryx_u32(&x585, &x586, x584, x513, x560);
11313     fiat_secp384r1_addcarryx_u32(&x587, &x588, x586, x515, x562);
11314     fiat_secp384r1_addcarryx_u32(&x589, &x590, x588, x517, x564);
11315     fiat_secp384r1_addcarryx_u32(&x591, &x592, x590, x519, x566);
11316     fiat_secp384r1_addcarryx_u32(&x593, &x594, x592, x521, x568);
11317     fiat_secp384r1_addcarryx_u32(&x595, &x596, x594, x523, x570);
11318     fiat_secp384r1_addcarryx_u32(&x597, &x598, x596, x525, x572);
11319     fiat_secp384r1_addcarryx_u32(&x599, &x600, x598, x527, x574);
11320     fiat_secp384r1_addcarryx_u32(&x601, &x602, x600, x529, x576);
11321     fiat_secp384r1_addcarryx_u32(&x603, &x604, x602, x531, x578);
11322     fiat_secp384r1_addcarryx_u32(&x605, &x606, x604, x533, x580);
11323     fiat_secp384r1_mulx_u32(&x607, &x608, x581, UINT32_C(0xffffffff));
11324     fiat_secp384r1_mulx_u32(&x609, &x610, x581, UINT32_C(0xffffffff));
11325     fiat_secp384r1_mulx_u32(&x611, &x612, x581, UINT32_C(0xffffffff));
11326     fiat_secp384r1_mulx_u32(&x613, &x614, x581, UINT32_C(0xffffffff));
11327     fiat_secp384r1_mulx_u32(&x615, &x616, x581, UINT32_C(0xffffffff));
11328     fiat_secp384r1_mulx_u32(&x617, &x618, x581, UINT32_C(0xffffffff));
11329     fiat_secp384r1_mulx_u32(&x619, &x620, x581, UINT32_C(0xffffffff));
11330     fiat_secp384r1_mulx_u32(&x621, &x622, x581, UINT32_C(0xfffffffe));
11331     fiat_secp384r1_mulx_u32(&x623, &x624, x581, UINT32_C(0xffffffff));
11332     fiat_secp384r1_mulx_u32(&x625, &x626, x581, UINT32_C(0xffffffff));
11333     fiat_secp384r1_addcarryx_u32(&x627, &x628, 0x0, x624, x621);
11334     fiat_secp384r1_addcarryx_u32(&x629, &x630, x628, x622, x619);
11335     fiat_secp384r1_addcarryx_u32(&x631, &x632, x630, x620, x617);
11336     fiat_secp384r1_addcarryx_u32(&x633, &x634, x632, x618, x615);
11337     fiat_secp384r1_addcarryx_u32(&x635, &x636, x634, x616, x613);
11338     fiat_secp384r1_addcarryx_u32(&x637, &x638, x636, x614, x611);
11339     fiat_secp384r1_addcarryx_u32(&x639, &x640, x638, x612, x609);
11340     fiat_secp384r1_addcarryx_u32(&x641, &x642, x640, x610, x607);
11341     x643 = (x642 + x608);
11342     fiat_secp384r1_addcarryx_u32(&x644, &x645, 0x0, x581, x625);
11343     fiat_secp384r1_addcarryx_u32(&x646, &x647, x645, x583, x626);
11344     fiat_secp384r1_addcarryx_u32(&x648, &x649, x647, x585, 0x0);
11345     fiat_secp384r1_addcarryx_u32(&x650, &x651, x649, x587, x623);
11346     fiat_secp384r1_addcarryx_u32(&x652, &x653, x651, x589, x627);
11347     fiat_secp384r1_addcarryx_u32(&x654, &x655, x653, x591, x629);
11348     fiat_secp384r1_addcarryx_u32(&x656, &x657, x655, x593, x631);
11349     fiat_secp384r1_addcarryx_u32(&x658, &x659, x657, x595, x633);
11350     fiat_secp384r1_addcarryx_u32(&x660, &x661, x659, x597, x635);
11351     fiat_secp384r1_addcarryx_u32(&x662, &x663, x661, x599, x637);
11352     fiat_secp384r1_addcarryx_u32(&x664, &x665, x663, x601, x639);
11353     fiat_secp384r1_addcarryx_u32(&x666, &x667, x665, x603, x641);
11354     fiat_secp384r1_addcarryx_u32(&x668, &x669, x667, x605, x643);
11355     x670 = ((uint32_t)x669 + x606);
11356     fiat_secp384r1_mulx_u32(&x671, &x672, x5, (arg1[11]));
11357     fiat_secp384r1_mulx_u32(&x673, &x674, x5, (arg1[10]));
11358     fiat_secp384r1_mulx_u32(&x675, &x676, x5, (arg1[9]));
11359     fiat_secp384r1_mulx_u32(&x677, &x678, x5, (arg1[8]));
11360     fiat_secp384r1_mulx_u32(&x679, &x680, x5, (arg1[7]));
11361     fiat_secp384r1_mulx_u32(&x681, &x682, x5, (arg1[6]));
11362     fiat_secp384r1_mulx_u32(&x683, &x684, x5, (arg1[5]));
11363     fiat_secp384r1_mulx_u32(&x685, &x686, x5, (arg1[4]));
11364     fiat_secp384r1_mulx_u32(&x687, &x688, x5, (arg1[3]));
11365     fiat_secp384r1_mulx_u32(&x689, &x690, x5, (arg1[2]));
11366     fiat_secp384r1_mulx_u32(&x691, &x692, x5, (arg1[1]));
11367     fiat_secp384r1_mulx_u32(&x693, &x694, x5, (arg1[0]));
11368     fiat_secp384r1_addcarryx_u32(&x695, &x696, 0x0, x694, x691);
11369     fiat_secp384r1_addcarryx_u32(&x697, &x698, x696, x692, x689);
11370     fiat_secp384r1_addcarryx_u32(&x699, &x700, x698, x690, x687);
11371     fiat_secp384r1_addcarryx_u32(&x701, &x702, x700, x688, x685);
11372     fiat_secp384r1_addcarryx_u32(&x703, &x704, x702, x686, x683);
11373     fiat_secp384r1_addcarryx_u32(&x705, &x706, x704, x684, x681);
11374     fiat_secp384r1_addcarryx_u32(&x707, &x708, x706, x682, x679);
11375     fiat_secp384r1_addcarryx_u32(&x709, &x710, x708, x680, x677);
11376     fiat_secp384r1_addcarryx_u32(&x711, &x712, x710, x678, x675);
11377     fiat_secp384r1_addcarryx_u32(&x713, &x714, x712, x676, x673);
11378     fiat_secp384r1_addcarryx_u32(&x715, &x716, x714, x674, x671);
11379     x717 = (x716 + x672);
11380     fiat_secp384r1_addcarryx_u32(&x718, &x719, 0x0, x646, x693);
11381     fiat_secp384r1_addcarryx_u32(&x720, &x721, x719, x648, x695);
11382     fiat_secp384r1_addcarryx_u32(&x722, &x723, x721, x650, x697);
11383     fiat_secp384r1_addcarryx_u32(&x724, &x725, x723, x652, x699);
11384     fiat_secp384r1_addcarryx_u32(&x726, &x727, x725, x654, x701);
11385     fiat_secp384r1_addcarryx_u32(&x728, &x729, x727, x656, x703);
11386     fiat_secp384r1_addcarryx_u32(&x730, &x731, x729, x658, x705);
11387     fiat_secp384r1_addcarryx_u32(&x732, &x733, x731, x660, x707);
11388     fiat_secp384r1_addcarryx_u32(&x734, &x735, x733, x662, x709);
11389     fiat_secp384r1_addcarryx_u32(&x736, &x737, x735, x664, x711);
11390     fiat_secp384r1_addcarryx_u32(&x738, &x739, x737, x666, x713);
11391     fiat_secp384r1_addcarryx_u32(&x740, &x741, x739, x668, x715);
11392     fiat_secp384r1_addcarryx_u32(&x742, &x743, x741, x670, x717);
11393     fiat_secp384r1_mulx_u32(&x744, &x745, x718, UINT32_C(0xffffffff));
11394     fiat_secp384r1_mulx_u32(&x746, &x747, x718, UINT32_C(0xffffffff));
11395     fiat_secp384r1_mulx_u32(&x748, &x749, x718, UINT32_C(0xffffffff));
11396     fiat_secp384r1_mulx_u32(&x750, &x751, x718, UINT32_C(0xffffffff));
11397     fiat_secp384r1_mulx_u32(&x752, &x753, x718, UINT32_C(0xffffffff));
11398     fiat_secp384r1_mulx_u32(&x754, &x755, x718, UINT32_C(0xffffffff));
11399     fiat_secp384r1_mulx_u32(&x756, &x757, x718, UINT32_C(0xffffffff));
11400     fiat_secp384r1_mulx_u32(&x758, &x759, x718, UINT32_C(0xfffffffe));
11401     fiat_secp384r1_mulx_u32(&x760, &x761, x718, UINT32_C(0xffffffff));
11402     fiat_secp384r1_mulx_u32(&x762, &x763, x718, UINT32_C(0xffffffff));
11403     fiat_secp384r1_addcarryx_u32(&x764, &x765, 0x0, x761, x758);
11404     fiat_secp384r1_addcarryx_u32(&x766, &x767, x765, x759, x756);
11405     fiat_secp384r1_addcarryx_u32(&x768, &x769, x767, x757, x754);
11406     fiat_secp384r1_addcarryx_u32(&x770, &x771, x769, x755, x752);
11407     fiat_secp384r1_addcarryx_u32(&x772, &x773, x771, x753, x750);
11408     fiat_secp384r1_addcarryx_u32(&x774, &x775, x773, x751, x748);
11409     fiat_secp384r1_addcarryx_u32(&x776, &x777, x775, x749, x746);
11410     fiat_secp384r1_addcarryx_u32(&x778, &x779, x777, x747, x744);
11411     x780 = (x779 + x745);
11412     fiat_secp384r1_addcarryx_u32(&x781, &x782, 0x0, x718, x762);
11413     fiat_secp384r1_addcarryx_u32(&x783, &x784, x782, x720, x763);
11414     fiat_secp384r1_addcarryx_u32(&x785, &x786, x784, x722, 0x0);
11415     fiat_secp384r1_addcarryx_u32(&x787, &x788, x786, x724, x760);
11416     fiat_secp384r1_addcarryx_u32(&x789, &x790, x788, x726, x764);
11417     fiat_secp384r1_addcarryx_u32(&x791, &x792, x790, x728, x766);
11418     fiat_secp384r1_addcarryx_u32(&x793, &x794, x792, x730, x768);
11419     fiat_secp384r1_addcarryx_u32(&x795, &x796, x794, x732, x770);
11420     fiat_secp384r1_addcarryx_u32(&x797, &x798, x796, x734, x772);
11421     fiat_secp384r1_addcarryx_u32(&x799, &x800, x798, x736, x774);
11422     fiat_secp384r1_addcarryx_u32(&x801, &x802, x800, x738, x776);
11423     fiat_secp384r1_addcarryx_u32(&x803, &x804, x802, x740, x778);
11424     fiat_secp384r1_addcarryx_u32(&x805, &x806, x804, x742, x780);
11425     x807 = ((uint32_t)x806 + x743);
11426     fiat_secp384r1_mulx_u32(&x808, &x809, x6, (arg1[11]));
11427     fiat_secp384r1_mulx_u32(&x810, &x811, x6, (arg1[10]));
11428     fiat_secp384r1_mulx_u32(&x812, &x813, x6, (arg1[9]));
11429     fiat_secp384r1_mulx_u32(&x814, &x815, x6, (arg1[8]));
11430     fiat_secp384r1_mulx_u32(&x816, &x817, x6, (arg1[7]));
11431     fiat_secp384r1_mulx_u32(&x818, &x819, x6, (arg1[6]));
11432     fiat_secp384r1_mulx_u32(&x820, &x821, x6, (arg1[5]));
11433     fiat_secp384r1_mulx_u32(&x822, &x823, x6, (arg1[4]));
11434     fiat_secp384r1_mulx_u32(&x824, &x825, x6, (arg1[3]));
11435     fiat_secp384r1_mulx_u32(&x826, &x827, x6, (arg1[2]));
11436     fiat_secp384r1_mulx_u32(&x828, &x829, x6, (arg1[1]));
11437     fiat_secp384r1_mulx_u32(&x830, &x831, x6, (arg1[0]));
11438     fiat_secp384r1_addcarryx_u32(&x832, &x833, 0x0, x831, x828);
11439     fiat_secp384r1_addcarryx_u32(&x834, &x835, x833, x829, x826);
11440     fiat_secp384r1_addcarryx_u32(&x836, &x837, x835, x827, x824);
11441     fiat_secp384r1_addcarryx_u32(&x838, &x839, x837, x825, x822);
11442     fiat_secp384r1_addcarryx_u32(&x840, &x841, x839, x823, x820);
11443     fiat_secp384r1_addcarryx_u32(&x842, &x843, x841, x821, x818);
11444     fiat_secp384r1_addcarryx_u32(&x844, &x845, x843, x819, x816);
11445     fiat_secp384r1_addcarryx_u32(&x846, &x847, x845, x817, x814);
11446     fiat_secp384r1_addcarryx_u32(&x848, &x849, x847, x815, x812);
11447     fiat_secp384r1_addcarryx_u32(&x850, &x851, x849, x813, x810);
11448     fiat_secp384r1_addcarryx_u32(&x852, &x853, x851, x811, x808);
11449     x854 = (x853 + x809);
11450     fiat_secp384r1_addcarryx_u32(&x855, &x856, 0x0, x783, x830);
11451     fiat_secp384r1_addcarryx_u32(&x857, &x858, x856, x785, x832);
11452     fiat_secp384r1_addcarryx_u32(&x859, &x860, x858, x787, x834);
11453     fiat_secp384r1_addcarryx_u32(&x861, &x862, x860, x789, x836);
11454     fiat_secp384r1_addcarryx_u32(&x863, &x864, x862, x791, x838);
11455     fiat_secp384r1_addcarryx_u32(&x865, &x866, x864, x793, x840);
11456     fiat_secp384r1_addcarryx_u32(&x867, &x868, x866, x795, x842);
11457     fiat_secp384r1_addcarryx_u32(&x869, &x870, x868, x797, x844);
11458     fiat_secp384r1_addcarryx_u32(&x871, &x872, x870, x799, x846);
11459     fiat_secp384r1_addcarryx_u32(&x873, &x874, x872, x801, x848);
11460     fiat_secp384r1_addcarryx_u32(&x875, &x876, x874, x803, x850);
11461     fiat_secp384r1_addcarryx_u32(&x877, &x878, x876, x805, x852);
11462     fiat_secp384r1_addcarryx_u32(&x879, &x880, x878, x807, x854);
11463     fiat_secp384r1_mulx_u32(&x881, &x882, x855, UINT32_C(0xffffffff));
11464     fiat_secp384r1_mulx_u32(&x883, &x884, x855, UINT32_C(0xffffffff));
11465     fiat_secp384r1_mulx_u32(&x885, &x886, x855, UINT32_C(0xffffffff));
11466     fiat_secp384r1_mulx_u32(&x887, &x888, x855, UINT32_C(0xffffffff));
11467     fiat_secp384r1_mulx_u32(&x889, &x890, x855, UINT32_C(0xffffffff));
11468     fiat_secp384r1_mulx_u32(&x891, &x892, x855, UINT32_C(0xffffffff));
11469     fiat_secp384r1_mulx_u32(&x893, &x894, x855, UINT32_C(0xffffffff));
11470     fiat_secp384r1_mulx_u32(&x895, &x896, x855, UINT32_C(0xfffffffe));
11471     fiat_secp384r1_mulx_u32(&x897, &x898, x855, UINT32_C(0xffffffff));
11472     fiat_secp384r1_mulx_u32(&x899, &x900, x855, UINT32_C(0xffffffff));
11473     fiat_secp384r1_addcarryx_u32(&x901, &x902, 0x0, x898, x895);
11474     fiat_secp384r1_addcarryx_u32(&x903, &x904, x902, x896, x893);
11475     fiat_secp384r1_addcarryx_u32(&x905, &x906, x904, x894, x891);
11476     fiat_secp384r1_addcarryx_u32(&x907, &x908, x906, x892, x889);
11477     fiat_secp384r1_addcarryx_u32(&x909, &x910, x908, x890, x887);
11478     fiat_secp384r1_addcarryx_u32(&x911, &x912, x910, x888, x885);
11479     fiat_secp384r1_addcarryx_u32(&x913, &x914, x912, x886, x883);
11480     fiat_secp384r1_addcarryx_u32(&x915, &x916, x914, x884, x881);
11481     x917 = (x916 + x882);
11482     fiat_secp384r1_addcarryx_u32(&x918, &x919, 0x0, x855, x899);
11483     fiat_secp384r1_addcarryx_u32(&x920, &x921, x919, x857, x900);
11484     fiat_secp384r1_addcarryx_u32(&x922, &x923, x921, x859, 0x0);
11485     fiat_secp384r1_addcarryx_u32(&x924, &x925, x923, x861, x897);
11486     fiat_secp384r1_addcarryx_u32(&x926, &x927, x925, x863, x901);
11487     fiat_secp384r1_addcarryx_u32(&x928, &x929, x927, x865, x903);
11488     fiat_secp384r1_addcarryx_u32(&x930, &x931, x929, x867, x905);
11489     fiat_secp384r1_addcarryx_u32(&x932, &x933, x931, x869, x907);
11490     fiat_secp384r1_addcarryx_u32(&x934, &x935, x933, x871, x909);
11491     fiat_secp384r1_addcarryx_u32(&x936, &x937, x935, x873, x911);
11492     fiat_secp384r1_addcarryx_u32(&x938, &x939, x937, x875, x913);
11493     fiat_secp384r1_addcarryx_u32(&x940, &x941, x939, x877, x915);
11494     fiat_secp384r1_addcarryx_u32(&x942, &x943, x941, x879, x917);
11495     x944 = ((uint32_t)x943 + x880);
11496     fiat_secp384r1_mulx_u32(&x945, &x946, x7, (arg1[11]));
11497     fiat_secp384r1_mulx_u32(&x947, &x948, x7, (arg1[10]));
11498     fiat_secp384r1_mulx_u32(&x949, &x950, x7, (arg1[9]));
11499     fiat_secp384r1_mulx_u32(&x951, &x952, x7, (arg1[8]));
11500     fiat_secp384r1_mulx_u32(&x953, &x954, x7, (arg1[7]));
11501     fiat_secp384r1_mulx_u32(&x955, &x956, x7, (arg1[6]));
11502     fiat_secp384r1_mulx_u32(&x957, &x958, x7, (arg1[5]));
11503     fiat_secp384r1_mulx_u32(&x959, &x960, x7, (arg1[4]));
11504     fiat_secp384r1_mulx_u32(&x961, &x962, x7, (arg1[3]));
11505     fiat_secp384r1_mulx_u32(&x963, &x964, x7, (arg1[2]));
11506     fiat_secp384r1_mulx_u32(&x965, &x966, x7, (arg1[1]));
11507     fiat_secp384r1_mulx_u32(&x967, &x968, x7, (arg1[0]));
11508     fiat_secp384r1_addcarryx_u32(&x969, &x970, 0x0, x968, x965);
11509     fiat_secp384r1_addcarryx_u32(&x971, &x972, x970, x966, x963);
11510     fiat_secp384r1_addcarryx_u32(&x973, &x974, x972, x964, x961);
11511     fiat_secp384r1_addcarryx_u32(&x975, &x976, x974, x962, x959);
11512     fiat_secp384r1_addcarryx_u32(&x977, &x978, x976, x960, x957);
11513     fiat_secp384r1_addcarryx_u32(&x979, &x980, x978, x958, x955);
11514     fiat_secp384r1_addcarryx_u32(&x981, &x982, x980, x956, x953);
11515     fiat_secp384r1_addcarryx_u32(&x983, &x984, x982, x954, x951);
11516     fiat_secp384r1_addcarryx_u32(&x985, &x986, x984, x952, x949);
11517     fiat_secp384r1_addcarryx_u32(&x987, &x988, x986, x950, x947);
11518     fiat_secp384r1_addcarryx_u32(&x989, &x990, x988, x948, x945);
11519     x991 = (x990 + x946);
11520     fiat_secp384r1_addcarryx_u32(&x992, &x993, 0x0, x920, x967);
11521     fiat_secp384r1_addcarryx_u32(&x994, &x995, x993, x922, x969);
11522     fiat_secp384r1_addcarryx_u32(&x996, &x997, x995, x924, x971);
11523     fiat_secp384r1_addcarryx_u32(&x998, &x999, x997, x926, x973);
11524     fiat_secp384r1_addcarryx_u32(&x1000, &x1001, x999, x928, x975);
11525     fiat_secp384r1_addcarryx_u32(&x1002, &x1003, x1001, x930, x977);
11526     fiat_secp384r1_addcarryx_u32(&x1004, &x1005, x1003, x932, x979);
11527     fiat_secp384r1_addcarryx_u32(&x1006, &x1007, x1005, x934, x981);
11528     fiat_secp384r1_addcarryx_u32(&x1008, &x1009, x1007, x936, x983);
11529     fiat_secp384r1_addcarryx_u32(&x1010, &x1011, x1009, x938, x985);
11530     fiat_secp384r1_addcarryx_u32(&x1012, &x1013, x1011, x940, x987);
11531     fiat_secp384r1_addcarryx_u32(&x1014, &x1015, x1013, x942, x989);
11532     fiat_secp384r1_addcarryx_u32(&x1016, &x1017, x1015, x944, x991);
11533     fiat_secp384r1_mulx_u32(&x1018, &x1019, x992, UINT32_C(0xffffffff));
11534     fiat_secp384r1_mulx_u32(&x1020, &x1021, x992, UINT32_C(0xffffffff));
11535     fiat_secp384r1_mulx_u32(&x1022, &x1023, x992, UINT32_C(0xffffffff));
11536     fiat_secp384r1_mulx_u32(&x1024, &x1025, x992, UINT32_C(0xffffffff));
11537     fiat_secp384r1_mulx_u32(&x1026, &x1027, x992, UINT32_C(0xffffffff));
11538     fiat_secp384r1_mulx_u32(&x1028, &x1029, x992, UINT32_C(0xffffffff));
11539     fiat_secp384r1_mulx_u32(&x1030, &x1031, x992, UINT32_C(0xffffffff));
11540     fiat_secp384r1_mulx_u32(&x1032, &x1033, x992, UINT32_C(0xfffffffe));
11541     fiat_secp384r1_mulx_u32(&x1034, &x1035, x992, UINT32_C(0xffffffff));
11542     fiat_secp384r1_mulx_u32(&x1036, &x1037, x992, UINT32_C(0xffffffff));
11543     fiat_secp384r1_addcarryx_u32(&x1038, &x1039, 0x0, x1035, x1032);
11544     fiat_secp384r1_addcarryx_u32(&x1040, &x1041, x1039, x1033, x1030);
11545     fiat_secp384r1_addcarryx_u32(&x1042, &x1043, x1041, x1031, x1028);
11546     fiat_secp384r1_addcarryx_u32(&x1044, &x1045, x1043, x1029, x1026);
11547     fiat_secp384r1_addcarryx_u32(&x1046, &x1047, x1045, x1027, x1024);
11548     fiat_secp384r1_addcarryx_u32(&x1048, &x1049, x1047, x1025, x1022);
11549     fiat_secp384r1_addcarryx_u32(&x1050, &x1051, x1049, x1023, x1020);
11550     fiat_secp384r1_addcarryx_u32(&x1052, &x1053, x1051, x1021, x1018);
11551     x1054 = (x1053 + x1019);
11552     fiat_secp384r1_addcarryx_u32(&x1055, &x1056, 0x0, x992, x1036);
11553     fiat_secp384r1_addcarryx_u32(&x1057, &x1058, x1056, x994, x1037);
11554     fiat_secp384r1_addcarryx_u32(&x1059, &x1060, x1058, x996, 0x0);
11555     fiat_secp384r1_addcarryx_u32(&x1061, &x1062, x1060, x998, x1034);
11556     fiat_secp384r1_addcarryx_u32(&x1063, &x1064, x1062, x1000, x1038);
11557     fiat_secp384r1_addcarryx_u32(&x1065, &x1066, x1064, x1002, x1040);
11558     fiat_secp384r1_addcarryx_u32(&x1067, &x1068, x1066, x1004, x1042);
11559     fiat_secp384r1_addcarryx_u32(&x1069, &x1070, x1068, x1006, x1044);
11560     fiat_secp384r1_addcarryx_u32(&x1071, &x1072, x1070, x1008, x1046);
11561     fiat_secp384r1_addcarryx_u32(&x1073, &x1074, x1072, x1010, x1048);
11562     fiat_secp384r1_addcarryx_u32(&x1075, &x1076, x1074, x1012, x1050);
11563     fiat_secp384r1_addcarryx_u32(&x1077, &x1078, x1076, x1014, x1052);
11564     fiat_secp384r1_addcarryx_u32(&x1079, &x1080, x1078, x1016, x1054);
11565     x1081 = ((uint32_t)x1080 + x1017);
11566     fiat_secp384r1_mulx_u32(&x1082, &x1083, x8, (arg1[11]));
11567     fiat_secp384r1_mulx_u32(&x1084, &x1085, x8, (arg1[10]));
11568     fiat_secp384r1_mulx_u32(&x1086, &x1087, x8, (arg1[9]));
11569     fiat_secp384r1_mulx_u32(&x1088, &x1089, x8, (arg1[8]));
11570     fiat_secp384r1_mulx_u32(&x1090, &x1091, x8, (arg1[7]));
11571     fiat_secp384r1_mulx_u32(&x1092, &x1093, x8, (arg1[6]));
11572     fiat_secp384r1_mulx_u32(&x1094, &x1095, x8, (arg1[5]));
11573     fiat_secp384r1_mulx_u32(&x1096, &x1097, x8, (arg1[4]));
11574     fiat_secp384r1_mulx_u32(&x1098, &x1099, x8, (arg1[3]));
11575     fiat_secp384r1_mulx_u32(&x1100, &x1101, x8, (arg1[2]));
11576     fiat_secp384r1_mulx_u32(&x1102, &x1103, x8, (arg1[1]));
11577     fiat_secp384r1_mulx_u32(&x1104, &x1105, x8, (arg1[0]));
11578     fiat_secp384r1_addcarryx_u32(&x1106, &x1107, 0x0, x1105, x1102);
11579     fiat_secp384r1_addcarryx_u32(&x1108, &x1109, x1107, x1103, x1100);
11580     fiat_secp384r1_addcarryx_u32(&x1110, &x1111, x1109, x1101, x1098);
11581     fiat_secp384r1_addcarryx_u32(&x1112, &x1113, x1111, x1099, x1096);
11582     fiat_secp384r1_addcarryx_u32(&x1114, &x1115, x1113, x1097, x1094);
11583     fiat_secp384r1_addcarryx_u32(&x1116, &x1117, x1115, x1095, x1092);
11584     fiat_secp384r1_addcarryx_u32(&x1118, &x1119, x1117, x1093, x1090);
11585     fiat_secp384r1_addcarryx_u32(&x1120, &x1121, x1119, x1091, x1088);
11586     fiat_secp384r1_addcarryx_u32(&x1122, &x1123, x1121, x1089, x1086);
11587     fiat_secp384r1_addcarryx_u32(&x1124, &x1125, x1123, x1087, x1084);
11588     fiat_secp384r1_addcarryx_u32(&x1126, &x1127, x1125, x1085, x1082);
11589     x1128 = (x1127 + x1083);
11590     fiat_secp384r1_addcarryx_u32(&x1129, &x1130, 0x0, x1057, x1104);
11591     fiat_secp384r1_addcarryx_u32(&x1131, &x1132, x1130, x1059, x1106);
11592     fiat_secp384r1_addcarryx_u32(&x1133, &x1134, x1132, x1061, x1108);
11593     fiat_secp384r1_addcarryx_u32(&x1135, &x1136, x1134, x1063, x1110);
11594     fiat_secp384r1_addcarryx_u32(&x1137, &x1138, x1136, x1065, x1112);
11595     fiat_secp384r1_addcarryx_u32(&x1139, &x1140, x1138, x1067, x1114);
11596     fiat_secp384r1_addcarryx_u32(&x1141, &x1142, x1140, x1069, x1116);
11597     fiat_secp384r1_addcarryx_u32(&x1143, &x1144, x1142, x1071, x1118);
11598     fiat_secp384r1_addcarryx_u32(&x1145, &x1146, x1144, x1073, x1120);
11599     fiat_secp384r1_addcarryx_u32(&x1147, &x1148, x1146, x1075, x1122);
11600     fiat_secp384r1_addcarryx_u32(&x1149, &x1150, x1148, x1077, x1124);
11601     fiat_secp384r1_addcarryx_u32(&x1151, &x1152, x1150, x1079, x1126);
11602     fiat_secp384r1_addcarryx_u32(&x1153, &x1154, x1152, x1081, x1128);
11603     fiat_secp384r1_mulx_u32(&x1155, &x1156, x1129, UINT32_C(0xffffffff));
11604     fiat_secp384r1_mulx_u32(&x1157, &x1158, x1129, UINT32_C(0xffffffff));
11605     fiat_secp384r1_mulx_u32(&x1159, &x1160, x1129, UINT32_C(0xffffffff));
11606     fiat_secp384r1_mulx_u32(&x1161, &x1162, x1129, UINT32_C(0xffffffff));
11607     fiat_secp384r1_mulx_u32(&x1163, &x1164, x1129, UINT32_C(0xffffffff));
11608     fiat_secp384r1_mulx_u32(&x1165, &x1166, x1129, UINT32_C(0xffffffff));
11609     fiat_secp384r1_mulx_u32(&x1167, &x1168, x1129, UINT32_C(0xffffffff));
11610     fiat_secp384r1_mulx_u32(&x1169, &x1170, x1129, UINT32_C(0xfffffffe));
11611     fiat_secp384r1_mulx_u32(&x1171, &x1172, x1129, UINT32_C(0xffffffff));
11612     fiat_secp384r1_mulx_u32(&x1173, &x1174, x1129, UINT32_C(0xffffffff));
11613     fiat_secp384r1_addcarryx_u32(&x1175, &x1176, 0x0, x1172, x1169);
11614     fiat_secp384r1_addcarryx_u32(&x1177, &x1178, x1176, x1170, x1167);
11615     fiat_secp384r1_addcarryx_u32(&x1179, &x1180, x1178, x1168, x1165);
11616     fiat_secp384r1_addcarryx_u32(&x1181, &x1182, x1180, x1166, x1163);
11617     fiat_secp384r1_addcarryx_u32(&x1183, &x1184, x1182, x1164, x1161);
11618     fiat_secp384r1_addcarryx_u32(&x1185, &x1186, x1184, x1162, x1159);
11619     fiat_secp384r1_addcarryx_u32(&x1187, &x1188, x1186, x1160, x1157);
11620     fiat_secp384r1_addcarryx_u32(&x1189, &x1190, x1188, x1158, x1155);
11621     x1191 = (x1190 + x1156);
11622     fiat_secp384r1_addcarryx_u32(&x1192, &x1193, 0x0, x1129, x1173);
11623     fiat_secp384r1_addcarryx_u32(&x1194, &x1195, x1193, x1131, x1174);
11624     fiat_secp384r1_addcarryx_u32(&x1196, &x1197, x1195, x1133, 0x0);
11625     fiat_secp384r1_addcarryx_u32(&x1198, &x1199, x1197, x1135, x1171);
11626     fiat_secp384r1_addcarryx_u32(&x1200, &x1201, x1199, x1137, x1175);
11627     fiat_secp384r1_addcarryx_u32(&x1202, &x1203, x1201, x1139, x1177);
11628     fiat_secp384r1_addcarryx_u32(&x1204, &x1205, x1203, x1141, x1179);
11629     fiat_secp384r1_addcarryx_u32(&x1206, &x1207, x1205, x1143, x1181);
11630     fiat_secp384r1_addcarryx_u32(&x1208, &x1209, x1207, x1145, x1183);
11631     fiat_secp384r1_addcarryx_u32(&x1210, &x1211, x1209, x1147, x1185);
11632     fiat_secp384r1_addcarryx_u32(&x1212, &x1213, x1211, x1149, x1187);
11633     fiat_secp384r1_addcarryx_u32(&x1214, &x1215, x1213, x1151, x1189);
11634     fiat_secp384r1_addcarryx_u32(&x1216, &x1217, x1215, x1153, x1191);
11635     x1218 = ((uint32_t)x1217 + x1154);
11636     fiat_secp384r1_mulx_u32(&x1219, &x1220, x9, (arg1[11]));
11637     fiat_secp384r1_mulx_u32(&x1221, &x1222, x9, (arg1[10]));
11638     fiat_secp384r1_mulx_u32(&x1223, &x1224, x9, (arg1[9]));
11639     fiat_secp384r1_mulx_u32(&x1225, &x1226, x9, (arg1[8]));
11640     fiat_secp384r1_mulx_u32(&x1227, &x1228, x9, (arg1[7]));
11641     fiat_secp384r1_mulx_u32(&x1229, &x1230, x9, (arg1[6]));
11642     fiat_secp384r1_mulx_u32(&x1231, &x1232, x9, (arg1[5]));
11643     fiat_secp384r1_mulx_u32(&x1233, &x1234, x9, (arg1[4]));
11644     fiat_secp384r1_mulx_u32(&x1235, &x1236, x9, (arg1[3]));
11645     fiat_secp384r1_mulx_u32(&x1237, &x1238, x9, (arg1[2]));
11646     fiat_secp384r1_mulx_u32(&x1239, &x1240, x9, (arg1[1]));
11647     fiat_secp384r1_mulx_u32(&x1241, &x1242, x9, (arg1[0]));
11648     fiat_secp384r1_addcarryx_u32(&x1243, &x1244, 0x0, x1242, x1239);
11649     fiat_secp384r1_addcarryx_u32(&x1245, &x1246, x1244, x1240, x1237);
11650     fiat_secp384r1_addcarryx_u32(&x1247, &x1248, x1246, x1238, x1235);
11651     fiat_secp384r1_addcarryx_u32(&x1249, &x1250, x1248, x1236, x1233);
11652     fiat_secp384r1_addcarryx_u32(&x1251, &x1252, x1250, x1234, x1231);
11653     fiat_secp384r1_addcarryx_u32(&x1253, &x1254, x1252, x1232, x1229);
11654     fiat_secp384r1_addcarryx_u32(&x1255, &x1256, x1254, x1230, x1227);
11655     fiat_secp384r1_addcarryx_u32(&x1257, &x1258, x1256, x1228, x1225);
11656     fiat_secp384r1_addcarryx_u32(&x1259, &x1260, x1258, x1226, x1223);
11657     fiat_secp384r1_addcarryx_u32(&x1261, &x1262, x1260, x1224, x1221);
11658     fiat_secp384r1_addcarryx_u32(&x1263, &x1264, x1262, x1222, x1219);
11659     x1265 = (x1264 + x1220);
11660     fiat_secp384r1_addcarryx_u32(&x1266, &x1267, 0x0, x1194, x1241);
11661     fiat_secp384r1_addcarryx_u32(&x1268, &x1269, x1267, x1196, x1243);
11662     fiat_secp384r1_addcarryx_u32(&x1270, &x1271, x1269, x1198, x1245);
11663     fiat_secp384r1_addcarryx_u32(&x1272, &x1273, x1271, x1200, x1247);
11664     fiat_secp384r1_addcarryx_u32(&x1274, &x1275, x1273, x1202, x1249);
11665     fiat_secp384r1_addcarryx_u32(&x1276, &x1277, x1275, x1204, x1251);
11666     fiat_secp384r1_addcarryx_u32(&x1278, &x1279, x1277, x1206, x1253);
11667     fiat_secp384r1_addcarryx_u32(&x1280, &x1281, x1279, x1208, x1255);
11668     fiat_secp384r1_addcarryx_u32(&x1282, &x1283, x1281, x1210, x1257);
11669     fiat_secp384r1_addcarryx_u32(&x1284, &x1285, x1283, x1212, x1259);
11670     fiat_secp384r1_addcarryx_u32(&x1286, &x1287, x1285, x1214, x1261);
11671     fiat_secp384r1_addcarryx_u32(&x1288, &x1289, x1287, x1216, x1263);
11672     fiat_secp384r1_addcarryx_u32(&x1290, &x1291, x1289, x1218, x1265);
11673     fiat_secp384r1_mulx_u32(&x1292, &x1293, x1266, UINT32_C(0xffffffff));
11674     fiat_secp384r1_mulx_u32(&x1294, &x1295, x1266, UINT32_C(0xffffffff));
11675     fiat_secp384r1_mulx_u32(&x1296, &x1297, x1266, UINT32_C(0xffffffff));
11676     fiat_secp384r1_mulx_u32(&x1298, &x1299, x1266, UINT32_C(0xffffffff));
11677     fiat_secp384r1_mulx_u32(&x1300, &x1301, x1266, UINT32_C(0xffffffff));
11678     fiat_secp384r1_mulx_u32(&x1302, &x1303, x1266, UINT32_C(0xffffffff));
11679     fiat_secp384r1_mulx_u32(&x1304, &x1305, x1266, UINT32_C(0xffffffff));
11680     fiat_secp384r1_mulx_u32(&x1306, &x1307, x1266, UINT32_C(0xfffffffe));
11681     fiat_secp384r1_mulx_u32(&x1308, &x1309, x1266, UINT32_C(0xffffffff));
11682     fiat_secp384r1_mulx_u32(&x1310, &x1311, x1266, UINT32_C(0xffffffff));
11683     fiat_secp384r1_addcarryx_u32(&x1312, &x1313, 0x0, x1309, x1306);
11684     fiat_secp384r1_addcarryx_u32(&x1314, &x1315, x1313, x1307, x1304);
11685     fiat_secp384r1_addcarryx_u32(&x1316, &x1317, x1315, x1305, x1302);
11686     fiat_secp384r1_addcarryx_u32(&x1318, &x1319, x1317, x1303, x1300);
11687     fiat_secp384r1_addcarryx_u32(&x1320, &x1321, x1319, x1301, x1298);
11688     fiat_secp384r1_addcarryx_u32(&x1322, &x1323, x1321, x1299, x1296);
11689     fiat_secp384r1_addcarryx_u32(&x1324, &x1325, x1323, x1297, x1294);
11690     fiat_secp384r1_addcarryx_u32(&x1326, &x1327, x1325, x1295, x1292);
11691     x1328 = (x1327 + x1293);
11692     fiat_secp384r1_addcarryx_u32(&x1329, &x1330, 0x0, x1266, x1310);
11693     fiat_secp384r1_addcarryx_u32(&x1331, &x1332, x1330, x1268, x1311);
11694     fiat_secp384r1_addcarryx_u32(&x1333, &x1334, x1332, x1270, 0x0);
11695     fiat_secp384r1_addcarryx_u32(&x1335, &x1336, x1334, x1272, x1308);
11696     fiat_secp384r1_addcarryx_u32(&x1337, &x1338, x1336, x1274, x1312);
11697     fiat_secp384r1_addcarryx_u32(&x1339, &x1340, x1338, x1276, x1314);
11698     fiat_secp384r1_addcarryx_u32(&x1341, &x1342, x1340, x1278, x1316);
11699     fiat_secp384r1_addcarryx_u32(&x1343, &x1344, x1342, x1280, x1318);
11700     fiat_secp384r1_addcarryx_u32(&x1345, &x1346, x1344, x1282, x1320);
11701     fiat_secp384r1_addcarryx_u32(&x1347, &x1348, x1346, x1284, x1322);
11702     fiat_secp384r1_addcarryx_u32(&x1349, &x1350, x1348, x1286, x1324);
11703     fiat_secp384r1_addcarryx_u32(&x1351, &x1352, x1350, x1288, x1326);
11704     fiat_secp384r1_addcarryx_u32(&x1353, &x1354, x1352, x1290, x1328);
11705     x1355 = ((uint32_t)x1354 + x1291);
11706     fiat_secp384r1_mulx_u32(&x1356, &x1357, x10, (arg1[11]));
11707     fiat_secp384r1_mulx_u32(&x1358, &x1359, x10, (arg1[10]));
11708     fiat_secp384r1_mulx_u32(&x1360, &x1361, x10, (arg1[9]));
11709     fiat_secp384r1_mulx_u32(&x1362, &x1363, x10, (arg1[8]));
11710     fiat_secp384r1_mulx_u32(&x1364, &x1365, x10, (arg1[7]));
11711     fiat_secp384r1_mulx_u32(&x1366, &x1367, x10, (arg1[6]));
11712     fiat_secp384r1_mulx_u32(&x1368, &x1369, x10, (arg1[5]));
11713     fiat_secp384r1_mulx_u32(&x1370, &x1371, x10, (arg1[4]));
11714     fiat_secp384r1_mulx_u32(&x1372, &x1373, x10, (arg1[3]));
11715     fiat_secp384r1_mulx_u32(&x1374, &x1375, x10, (arg1[2]));
11716     fiat_secp384r1_mulx_u32(&x1376, &x1377, x10, (arg1[1]));
11717     fiat_secp384r1_mulx_u32(&x1378, &x1379, x10, (arg1[0]));
11718     fiat_secp384r1_addcarryx_u32(&x1380, &x1381, 0x0, x1379, x1376);
11719     fiat_secp384r1_addcarryx_u32(&x1382, &x1383, x1381, x1377, x1374);
11720     fiat_secp384r1_addcarryx_u32(&x1384, &x1385, x1383, x1375, x1372);
11721     fiat_secp384r1_addcarryx_u32(&x1386, &x1387, x1385, x1373, x1370);
11722     fiat_secp384r1_addcarryx_u32(&x1388, &x1389, x1387, x1371, x1368);
11723     fiat_secp384r1_addcarryx_u32(&x1390, &x1391, x1389, x1369, x1366);
11724     fiat_secp384r1_addcarryx_u32(&x1392, &x1393, x1391, x1367, x1364);
11725     fiat_secp384r1_addcarryx_u32(&x1394, &x1395, x1393, x1365, x1362);
11726     fiat_secp384r1_addcarryx_u32(&x1396, &x1397, x1395, x1363, x1360);
11727     fiat_secp384r1_addcarryx_u32(&x1398, &x1399, x1397, x1361, x1358);
11728     fiat_secp384r1_addcarryx_u32(&x1400, &x1401, x1399, x1359, x1356);
11729     x1402 = (x1401 + x1357);
11730     fiat_secp384r1_addcarryx_u32(&x1403, &x1404, 0x0, x1331, x1378);
11731     fiat_secp384r1_addcarryx_u32(&x1405, &x1406, x1404, x1333, x1380);
11732     fiat_secp384r1_addcarryx_u32(&x1407, &x1408, x1406, x1335, x1382);
11733     fiat_secp384r1_addcarryx_u32(&x1409, &x1410, x1408, x1337, x1384);
11734     fiat_secp384r1_addcarryx_u32(&x1411, &x1412, x1410, x1339, x1386);
11735     fiat_secp384r1_addcarryx_u32(&x1413, &x1414, x1412, x1341, x1388);
11736     fiat_secp384r1_addcarryx_u32(&x1415, &x1416, x1414, x1343, x1390);
11737     fiat_secp384r1_addcarryx_u32(&x1417, &x1418, x1416, x1345, x1392);
11738     fiat_secp384r1_addcarryx_u32(&x1419, &x1420, x1418, x1347, x1394);
11739     fiat_secp384r1_addcarryx_u32(&x1421, &x1422, x1420, x1349, x1396);
11740     fiat_secp384r1_addcarryx_u32(&x1423, &x1424, x1422, x1351, x1398);
11741     fiat_secp384r1_addcarryx_u32(&x1425, &x1426, x1424, x1353, x1400);
11742     fiat_secp384r1_addcarryx_u32(&x1427, &x1428, x1426, x1355, x1402);
11743     fiat_secp384r1_mulx_u32(&x1429, &x1430, x1403, UINT32_C(0xffffffff));
11744     fiat_secp384r1_mulx_u32(&x1431, &x1432, x1403, UINT32_C(0xffffffff));
11745     fiat_secp384r1_mulx_u32(&x1433, &x1434, x1403, UINT32_C(0xffffffff));
11746     fiat_secp384r1_mulx_u32(&x1435, &x1436, x1403, UINT32_C(0xffffffff));
11747     fiat_secp384r1_mulx_u32(&x1437, &x1438, x1403, UINT32_C(0xffffffff));
11748     fiat_secp384r1_mulx_u32(&x1439, &x1440, x1403, UINT32_C(0xffffffff));
11749     fiat_secp384r1_mulx_u32(&x1441, &x1442, x1403, UINT32_C(0xffffffff));
11750     fiat_secp384r1_mulx_u32(&x1443, &x1444, x1403, UINT32_C(0xfffffffe));
11751     fiat_secp384r1_mulx_u32(&x1445, &x1446, x1403, UINT32_C(0xffffffff));
11752     fiat_secp384r1_mulx_u32(&x1447, &x1448, x1403, UINT32_C(0xffffffff));
11753     fiat_secp384r1_addcarryx_u32(&x1449, &x1450, 0x0, x1446, x1443);
11754     fiat_secp384r1_addcarryx_u32(&x1451, &x1452, x1450, x1444, x1441);
11755     fiat_secp384r1_addcarryx_u32(&x1453, &x1454, x1452, x1442, x1439);
11756     fiat_secp384r1_addcarryx_u32(&x1455, &x1456, x1454, x1440, x1437);
11757     fiat_secp384r1_addcarryx_u32(&x1457, &x1458, x1456, x1438, x1435);
11758     fiat_secp384r1_addcarryx_u32(&x1459, &x1460, x1458, x1436, x1433);
11759     fiat_secp384r1_addcarryx_u32(&x1461, &x1462, x1460, x1434, x1431);
11760     fiat_secp384r1_addcarryx_u32(&x1463, &x1464, x1462, x1432, x1429);
11761     x1465 = (x1464 + x1430);
11762     fiat_secp384r1_addcarryx_u32(&x1466, &x1467, 0x0, x1403, x1447);
11763     fiat_secp384r1_addcarryx_u32(&x1468, &x1469, x1467, x1405, x1448);
11764     fiat_secp384r1_addcarryx_u32(&x1470, &x1471, x1469, x1407, 0x0);
11765     fiat_secp384r1_addcarryx_u32(&x1472, &x1473, x1471, x1409, x1445);
11766     fiat_secp384r1_addcarryx_u32(&x1474, &x1475, x1473, x1411, x1449);
11767     fiat_secp384r1_addcarryx_u32(&x1476, &x1477, x1475, x1413, x1451);
11768     fiat_secp384r1_addcarryx_u32(&x1478, &x1479, x1477, x1415, x1453);
11769     fiat_secp384r1_addcarryx_u32(&x1480, &x1481, x1479, x1417, x1455);
11770     fiat_secp384r1_addcarryx_u32(&x1482, &x1483, x1481, x1419, x1457);
11771     fiat_secp384r1_addcarryx_u32(&x1484, &x1485, x1483, x1421, x1459);
11772     fiat_secp384r1_addcarryx_u32(&x1486, &x1487, x1485, x1423, x1461);
11773     fiat_secp384r1_addcarryx_u32(&x1488, &x1489, x1487, x1425, x1463);
11774     fiat_secp384r1_addcarryx_u32(&x1490, &x1491, x1489, x1427, x1465);
11775     x1492 = ((uint32_t)x1491 + x1428);
11776     fiat_secp384r1_mulx_u32(&x1493, &x1494, x11, (arg1[11]));
11777     fiat_secp384r1_mulx_u32(&x1495, &x1496, x11, (arg1[10]));
11778     fiat_secp384r1_mulx_u32(&x1497, &x1498, x11, (arg1[9]));
11779     fiat_secp384r1_mulx_u32(&x1499, &x1500, x11, (arg1[8]));
11780     fiat_secp384r1_mulx_u32(&x1501, &x1502, x11, (arg1[7]));
11781     fiat_secp384r1_mulx_u32(&x1503, &x1504, x11, (arg1[6]));
11782     fiat_secp384r1_mulx_u32(&x1505, &x1506, x11, (arg1[5]));
11783     fiat_secp384r1_mulx_u32(&x1507, &x1508, x11, (arg1[4]));
11784     fiat_secp384r1_mulx_u32(&x1509, &x1510, x11, (arg1[3]));
11785     fiat_secp384r1_mulx_u32(&x1511, &x1512, x11, (arg1[2]));
11786     fiat_secp384r1_mulx_u32(&x1513, &x1514, x11, (arg1[1]));
11787     fiat_secp384r1_mulx_u32(&x1515, &x1516, x11, (arg1[0]));
11788     fiat_secp384r1_addcarryx_u32(&x1517, &x1518, 0x0, x1516, x1513);
11789     fiat_secp384r1_addcarryx_u32(&x1519, &x1520, x1518, x1514, x1511);
11790     fiat_secp384r1_addcarryx_u32(&x1521, &x1522, x1520, x1512, x1509);
11791     fiat_secp384r1_addcarryx_u32(&x1523, &x1524, x1522, x1510, x1507);
11792     fiat_secp384r1_addcarryx_u32(&x1525, &x1526, x1524, x1508, x1505);
11793     fiat_secp384r1_addcarryx_u32(&x1527, &x1528, x1526, x1506, x1503);
11794     fiat_secp384r1_addcarryx_u32(&x1529, &x1530, x1528, x1504, x1501);
11795     fiat_secp384r1_addcarryx_u32(&x1531, &x1532, x1530, x1502, x1499);
11796     fiat_secp384r1_addcarryx_u32(&x1533, &x1534, x1532, x1500, x1497);
11797     fiat_secp384r1_addcarryx_u32(&x1535, &x1536, x1534, x1498, x1495);
11798     fiat_secp384r1_addcarryx_u32(&x1537, &x1538, x1536, x1496, x1493);
11799     x1539 = (x1538 + x1494);
11800     fiat_secp384r1_addcarryx_u32(&x1540, &x1541, 0x0, x1468, x1515);
11801     fiat_secp384r1_addcarryx_u32(&x1542, &x1543, x1541, x1470, x1517);
11802     fiat_secp384r1_addcarryx_u32(&x1544, &x1545, x1543, x1472, x1519);
11803     fiat_secp384r1_addcarryx_u32(&x1546, &x1547, x1545, x1474, x1521);
11804     fiat_secp384r1_addcarryx_u32(&x1548, &x1549, x1547, x1476, x1523);
11805     fiat_secp384r1_addcarryx_u32(&x1550, &x1551, x1549, x1478, x1525);
11806     fiat_secp384r1_addcarryx_u32(&x1552, &x1553, x1551, x1480, x1527);
11807     fiat_secp384r1_addcarryx_u32(&x1554, &x1555, x1553, x1482, x1529);
11808     fiat_secp384r1_addcarryx_u32(&x1556, &x1557, x1555, x1484, x1531);
11809     fiat_secp384r1_addcarryx_u32(&x1558, &x1559, x1557, x1486, x1533);
11810     fiat_secp384r1_addcarryx_u32(&x1560, &x1561, x1559, x1488, x1535);
11811     fiat_secp384r1_addcarryx_u32(&x1562, &x1563, x1561, x1490, x1537);
11812     fiat_secp384r1_addcarryx_u32(&x1564, &x1565, x1563, x1492, x1539);
11813     fiat_secp384r1_mulx_u32(&x1566, &x1567, x1540, UINT32_C(0xffffffff));
11814     fiat_secp384r1_mulx_u32(&x1568, &x1569, x1540, UINT32_C(0xffffffff));
11815     fiat_secp384r1_mulx_u32(&x1570, &x1571, x1540, UINT32_C(0xffffffff));
11816     fiat_secp384r1_mulx_u32(&x1572, &x1573, x1540, UINT32_C(0xffffffff));
11817     fiat_secp384r1_mulx_u32(&x1574, &x1575, x1540, UINT32_C(0xffffffff));
11818     fiat_secp384r1_mulx_u32(&x1576, &x1577, x1540, UINT32_C(0xffffffff));
11819     fiat_secp384r1_mulx_u32(&x1578, &x1579, x1540, UINT32_C(0xffffffff));
11820     fiat_secp384r1_mulx_u32(&x1580, &x1581, x1540, UINT32_C(0xfffffffe));
11821     fiat_secp384r1_mulx_u32(&x1582, &x1583, x1540, UINT32_C(0xffffffff));
11822     fiat_secp384r1_mulx_u32(&x1584, &x1585, x1540, UINT32_C(0xffffffff));
11823     fiat_secp384r1_addcarryx_u32(&x1586, &x1587, 0x0, x1583, x1580);
11824     fiat_secp384r1_addcarryx_u32(&x1588, &x1589, x1587, x1581, x1578);
11825     fiat_secp384r1_addcarryx_u32(&x1590, &x1591, x1589, x1579, x1576);
11826     fiat_secp384r1_addcarryx_u32(&x1592, &x1593, x1591, x1577, x1574);
11827     fiat_secp384r1_addcarryx_u32(&x1594, &x1595, x1593, x1575, x1572);
11828     fiat_secp384r1_addcarryx_u32(&x1596, &x1597, x1595, x1573, x1570);
11829     fiat_secp384r1_addcarryx_u32(&x1598, &x1599, x1597, x1571, x1568);
11830     fiat_secp384r1_addcarryx_u32(&x1600, &x1601, x1599, x1569, x1566);
11831     x1602 = (x1601 + x1567);
11832     fiat_secp384r1_addcarryx_u32(&x1603, &x1604, 0x0, x1540, x1584);
11833     fiat_secp384r1_addcarryx_u32(&x1605, &x1606, x1604, x1542, x1585);
11834     fiat_secp384r1_addcarryx_u32(&x1607, &x1608, x1606, x1544, 0x0);
11835     fiat_secp384r1_addcarryx_u32(&x1609, &x1610, x1608, x1546, x1582);
11836     fiat_secp384r1_addcarryx_u32(&x1611, &x1612, x1610, x1548, x1586);
11837     fiat_secp384r1_addcarryx_u32(&x1613, &x1614, x1612, x1550, x1588);
11838     fiat_secp384r1_addcarryx_u32(&x1615, &x1616, x1614, x1552, x1590);
11839     fiat_secp384r1_addcarryx_u32(&x1617, &x1618, x1616, x1554, x1592);
11840     fiat_secp384r1_addcarryx_u32(&x1619, &x1620, x1618, x1556, x1594);
11841     fiat_secp384r1_addcarryx_u32(&x1621, &x1622, x1620, x1558, x1596);
11842     fiat_secp384r1_addcarryx_u32(&x1623, &x1624, x1622, x1560, x1598);
11843     fiat_secp384r1_addcarryx_u32(&x1625, &x1626, x1624, x1562, x1600);
11844     fiat_secp384r1_addcarryx_u32(&x1627, &x1628, x1626, x1564, x1602);
11845     x1629 = ((uint32_t)x1628 + x1565);
11846     fiat_secp384r1_subborrowx_u32(&x1630, &x1631, 0x0, x1605,
11847                                   UINT32_C(0xffffffff));
11848     fiat_secp384r1_subborrowx_u32(&x1632, &x1633, x1631, x1607, 0x0);
11849     fiat_secp384r1_subborrowx_u32(&x1634, &x1635, x1633, x1609, 0x0);
11850     fiat_secp384r1_subborrowx_u32(&x1636, &x1637, x1635, x1611,
11851                                   UINT32_C(0xffffffff));
11852     fiat_secp384r1_subborrowx_u32(&x1638, &x1639, x1637, x1613,
11853                                   UINT32_C(0xfffffffe));
11854     fiat_secp384r1_subborrowx_u32(&x1640, &x1641, x1639, x1615,
11855                                   UINT32_C(0xffffffff));
11856     fiat_secp384r1_subborrowx_u32(&x1642, &x1643, x1641, x1617,
11857                                   UINT32_C(0xffffffff));
11858     fiat_secp384r1_subborrowx_u32(&x1644, &x1645, x1643, x1619,
11859                                   UINT32_C(0xffffffff));
11860     fiat_secp384r1_subborrowx_u32(&x1646, &x1647, x1645, x1621,
11861                                   UINT32_C(0xffffffff));
11862     fiat_secp384r1_subborrowx_u32(&x1648, &x1649, x1647, x1623,
11863                                   UINT32_C(0xffffffff));
11864     fiat_secp384r1_subborrowx_u32(&x1650, &x1651, x1649, x1625,
11865                                   UINT32_C(0xffffffff));
11866     fiat_secp384r1_subborrowx_u32(&x1652, &x1653, x1651, x1627,
11867                                   UINT32_C(0xffffffff));
11868     fiat_secp384r1_subborrowx_u32(&x1654, &x1655, x1653, x1629, 0x0);
11869     fiat_secp384r1_cmovznz_u32(&x1656, x1655, x1630, x1605);
11870     fiat_secp384r1_cmovznz_u32(&x1657, x1655, x1632, x1607);
11871     fiat_secp384r1_cmovznz_u32(&x1658, x1655, x1634, x1609);
11872     fiat_secp384r1_cmovznz_u32(&x1659, x1655, x1636, x1611);
11873     fiat_secp384r1_cmovznz_u32(&x1660, x1655, x1638, x1613);
11874     fiat_secp384r1_cmovznz_u32(&x1661, x1655, x1640, x1615);
11875     fiat_secp384r1_cmovznz_u32(&x1662, x1655, x1642, x1617);
11876     fiat_secp384r1_cmovznz_u32(&x1663, x1655, x1644, x1619);
11877     fiat_secp384r1_cmovznz_u32(&x1664, x1655, x1646, x1621);
11878     fiat_secp384r1_cmovznz_u32(&x1665, x1655, x1648, x1623);
11879     fiat_secp384r1_cmovznz_u32(&x1666, x1655, x1650, x1625);
11880     fiat_secp384r1_cmovznz_u32(&x1667, x1655, x1652, x1627);
11881     out1[0] = x1656;
11882     out1[1] = x1657;
11883     out1[2] = x1658;
11884     out1[3] = x1659;
11885     out1[4] = x1660;
11886     out1[5] = x1661;
11887     out1[6] = x1662;
11888     out1[7] = x1663;
11889     out1[8] = x1664;
11890     out1[9] = x1665;
11891     out1[10] = x1666;
11892     out1[11] = x1667;
11893 }
11894 
11895 /*
11896  * The function fiat_secp384r1_add adds two field elements in the Montgomery domain.
11897  * Preconditions:
11898  *   0 ≤ eval arg1 < m
11899  *   0 ≤ eval arg2 < m
11900  * Postconditions:
11901  *   eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) + eval (from_montgomery arg2)) mod m
11902  *   0 ≤ eval out1 < m
11903  *
11904  * Input Bounds:
11905  *   arg1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
11906  *   arg2: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
11907  * Output Bounds:
11908  *   out1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
11909  */
11910 static void
fiat_secp384r1_add(uint32_t out1[12],const uint32_t arg1[12],const uint32_t arg2[12])11911 fiat_secp384r1_add(uint32_t out1[12], const uint32_t arg1[12],
11912                    const uint32_t arg2[12])
11913 {
11914     uint32_t x1;
11915     fiat_secp384r1_uint1 x2;
11916     uint32_t x3;
11917     fiat_secp384r1_uint1 x4;
11918     uint32_t x5;
11919     fiat_secp384r1_uint1 x6;
11920     uint32_t x7;
11921     fiat_secp384r1_uint1 x8;
11922     uint32_t x9;
11923     fiat_secp384r1_uint1 x10;
11924     uint32_t x11;
11925     fiat_secp384r1_uint1 x12;
11926     uint32_t x13;
11927     fiat_secp384r1_uint1 x14;
11928     uint32_t x15;
11929     fiat_secp384r1_uint1 x16;
11930     uint32_t x17;
11931     fiat_secp384r1_uint1 x18;
11932     uint32_t x19;
11933     fiat_secp384r1_uint1 x20;
11934     uint32_t x21;
11935     fiat_secp384r1_uint1 x22;
11936     uint32_t x23;
11937     fiat_secp384r1_uint1 x24;
11938     uint32_t x25;
11939     fiat_secp384r1_uint1 x26;
11940     uint32_t x27;
11941     fiat_secp384r1_uint1 x28;
11942     uint32_t x29;
11943     fiat_secp384r1_uint1 x30;
11944     uint32_t x31;
11945     fiat_secp384r1_uint1 x32;
11946     uint32_t x33;
11947     fiat_secp384r1_uint1 x34;
11948     uint32_t x35;
11949     fiat_secp384r1_uint1 x36;
11950     uint32_t x37;
11951     fiat_secp384r1_uint1 x38;
11952     uint32_t x39;
11953     fiat_secp384r1_uint1 x40;
11954     uint32_t x41;
11955     fiat_secp384r1_uint1 x42;
11956     uint32_t x43;
11957     fiat_secp384r1_uint1 x44;
11958     uint32_t x45;
11959     fiat_secp384r1_uint1 x46;
11960     uint32_t x47;
11961     fiat_secp384r1_uint1 x48;
11962     uint32_t x49;
11963     fiat_secp384r1_uint1 x50;
11964     uint32_t x51;
11965     uint32_t x52;
11966     uint32_t x53;
11967     uint32_t x54;
11968     uint32_t x55;
11969     uint32_t x56;
11970     uint32_t x57;
11971     uint32_t x58;
11972     uint32_t x59;
11973     uint32_t x60;
11974     uint32_t x61;
11975     uint32_t x62;
11976     fiat_secp384r1_addcarryx_u32(&x1, &x2, 0x0, (arg1[0]), (arg2[0]));
11977     fiat_secp384r1_addcarryx_u32(&x3, &x4, x2, (arg1[1]), (arg2[1]));
11978     fiat_secp384r1_addcarryx_u32(&x5, &x6, x4, (arg1[2]), (arg2[2]));
11979     fiat_secp384r1_addcarryx_u32(&x7, &x8, x6, (arg1[3]), (arg2[3]));
11980     fiat_secp384r1_addcarryx_u32(&x9, &x10, x8, (arg1[4]), (arg2[4]));
11981     fiat_secp384r1_addcarryx_u32(&x11, &x12, x10, (arg1[5]), (arg2[5]));
11982     fiat_secp384r1_addcarryx_u32(&x13, &x14, x12, (arg1[6]), (arg2[6]));
11983     fiat_secp384r1_addcarryx_u32(&x15, &x16, x14, (arg1[7]), (arg2[7]));
11984     fiat_secp384r1_addcarryx_u32(&x17, &x18, x16, (arg1[8]), (arg2[8]));
11985     fiat_secp384r1_addcarryx_u32(&x19, &x20, x18, (arg1[9]), (arg2[9]));
11986     fiat_secp384r1_addcarryx_u32(&x21, &x22, x20, (arg1[10]), (arg2[10]));
11987     fiat_secp384r1_addcarryx_u32(&x23, &x24, x22, (arg1[11]), (arg2[11]));
11988     fiat_secp384r1_subborrowx_u32(&x25, &x26, 0x0, x1, UINT32_C(0xffffffff));
11989     fiat_secp384r1_subborrowx_u32(&x27, &x28, x26, x3, 0x0);
11990     fiat_secp384r1_subborrowx_u32(&x29, &x30, x28, x5, 0x0);
11991     fiat_secp384r1_subborrowx_u32(&x31, &x32, x30, x7, UINT32_C(0xffffffff));
11992     fiat_secp384r1_subborrowx_u32(&x33, &x34, x32, x9, UINT32_C(0xfffffffe));
11993     fiat_secp384r1_subborrowx_u32(&x35, &x36, x34, x11, UINT32_C(0xffffffff));
11994     fiat_secp384r1_subborrowx_u32(&x37, &x38, x36, x13, UINT32_C(0xffffffff));
11995     fiat_secp384r1_subborrowx_u32(&x39, &x40, x38, x15, UINT32_C(0xffffffff));
11996     fiat_secp384r1_subborrowx_u32(&x41, &x42, x40, x17, UINT32_C(0xffffffff));
11997     fiat_secp384r1_subborrowx_u32(&x43, &x44, x42, x19, UINT32_C(0xffffffff));
11998     fiat_secp384r1_subborrowx_u32(&x45, &x46, x44, x21, UINT32_C(0xffffffff));
11999     fiat_secp384r1_subborrowx_u32(&x47, &x48, x46, x23, UINT32_C(0xffffffff));
12000     fiat_secp384r1_subborrowx_u32(&x49, &x50, x48, x24, 0x0);
12001     fiat_secp384r1_cmovznz_u32(&x51, x50, x25, x1);
12002     fiat_secp384r1_cmovznz_u32(&x52, x50, x27, x3);
12003     fiat_secp384r1_cmovznz_u32(&x53, x50, x29, x5);
12004     fiat_secp384r1_cmovznz_u32(&x54, x50, x31, x7);
12005     fiat_secp384r1_cmovznz_u32(&x55, x50, x33, x9);
12006     fiat_secp384r1_cmovznz_u32(&x56, x50, x35, x11);
12007     fiat_secp384r1_cmovznz_u32(&x57, x50, x37, x13);
12008     fiat_secp384r1_cmovznz_u32(&x58, x50, x39, x15);
12009     fiat_secp384r1_cmovznz_u32(&x59, x50, x41, x17);
12010     fiat_secp384r1_cmovznz_u32(&x60, x50, x43, x19);
12011     fiat_secp384r1_cmovznz_u32(&x61, x50, x45, x21);
12012     fiat_secp384r1_cmovznz_u32(&x62, x50, x47, x23);
12013     out1[0] = x51;
12014     out1[1] = x52;
12015     out1[2] = x53;
12016     out1[3] = x54;
12017     out1[4] = x55;
12018     out1[5] = x56;
12019     out1[6] = x57;
12020     out1[7] = x58;
12021     out1[8] = x59;
12022     out1[9] = x60;
12023     out1[10] = x61;
12024     out1[11] = x62;
12025 }
12026 
12027 /*
12028  * The function fiat_secp384r1_sub subtracts two field elements in the Montgomery domain.
12029  * Preconditions:
12030  *   0 ≤ eval arg1 < m
12031  *   0 ≤ eval arg2 < m
12032  * Postconditions:
12033  *   eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) - eval (from_montgomery arg2)) mod m
12034  *   0 ≤ eval out1 < m
12035  *
12036  * Input Bounds:
12037  *   arg1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
12038  *   arg2: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
12039  * Output Bounds:
12040  *   out1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
12041  */
12042 static void
fiat_secp384r1_sub(uint32_t out1[12],const uint32_t arg1[12],const uint32_t arg2[12])12043 fiat_secp384r1_sub(uint32_t out1[12], const uint32_t arg1[12],
12044                    const uint32_t arg2[12])
12045 {
12046     uint32_t x1;
12047     fiat_secp384r1_uint1 x2;
12048     uint32_t x3;
12049     fiat_secp384r1_uint1 x4;
12050     uint32_t x5;
12051     fiat_secp384r1_uint1 x6;
12052     uint32_t x7;
12053     fiat_secp384r1_uint1 x8;
12054     uint32_t x9;
12055     fiat_secp384r1_uint1 x10;
12056     uint32_t x11;
12057     fiat_secp384r1_uint1 x12;
12058     uint32_t x13;
12059     fiat_secp384r1_uint1 x14;
12060     uint32_t x15;
12061     fiat_secp384r1_uint1 x16;
12062     uint32_t x17;
12063     fiat_secp384r1_uint1 x18;
12064     uint32_t x19;
12065     fiat_secp384r1_uint1 x20;
12066     uint32_t x21;
12067     fiat_secp384r1_uint1 x22;
12068     uint32_t x23;
12069     fiat_secp384r1_uint1 x24;
12070     uint32_t x25;
12071     uint32_t x26;
12072     fiat_secp384r1_uint1 x27;
12073     uint32_t x28;
12074     fiat_secp384r1_uint1 x29;
12075     uint32_t x30;
12076     fiat_secp384r1_uint1 x31;
12077     uint32_t x32;
12078     fiat_secp384r1_uint1 x33;
12079     uint32_t x34;
12080     fiat_secp384r1_uint1 x35;
12081     uint32_t x36;
12082     fiat_secp384r1_uint1 x37;
12083     uint32_t x38;
12084     fiat_secp384r1_uint1 x39;
12085     uint32_t x40;
12086     fiat_secp384r1_uint1 x41;
12087     uint32_t x42;
12088     fiat_secp384r1_uint1 x43;
12089     uint32_t x44;
12090     fiat_secp384r1_uint1 x45;
12091     uint32_t x46;
12092     fiat_secp384r1_uint1 x47;
12093     uint32_t x48;
12094     fiat_secp384r1_uint1 x49;
12095     fiat_secp384r1_subborrowx_u32(&x1, &x2, 0x0, (arg1[0]), (arg2[0]));
12096     fiat_secp384r1_subborrowx_u32(&x3, &x4, x2, (arg1[1]), (arg2[1]));
12097     fiat_secp384r1_subborrowx_u32(&x5, &x6, x4, (arg1[2]), (arg2[2]));
12098     fiat_secp384r1_subborrowx_u32(&x7, &x8, x6, (arg1[3]), (arg2[3]));
12099     fiat_secp384r1_subborrowx_u32(&x9, &x10, x8, (arg1[4]), (arg2[4]));
12100     fiat_secp384r1_subborrowx_u32(&x11, &x12, x10, (arg1[5]), (arg2[5]));
12101     fiat_secp384r1_subborrowx_u32(&x13, &x14, x12, (arg1[6]), (arg2[6]));
12102     fiat_secp384r1_subborrowx_u32(&x15, &x16, x14, (arg1[7]), (arg2[7]));
12103     fiat_secp384r1_subborrowx_u32(&x17, &x18, x16, (arg1[8]), (arg2[8]));
12104     fiat_secp384r1_subborrowx_u32(&x19, &x20, x18, (arg1[9]), (arg2[9]));
12105     fiat_secp384r1_subborrowx_u32(&x21, &x22, x20, (arg1[10]), (arg2[10]));
12106     fiat_secp384r1_subborrowx_u32(&x23, &x24, x22, (arg1[11]), (arg2[11]));
12107     fiat_secp384r1_cmovznz_u32(&x25, x24, 0x0, UINT32_C(0xffffffff));
12108     fiat_secp384r1_addcarryx_u32(&x26, &x27, 0x0, x1, x25);
12109     fiat_secp384r1_addcarryx_u32(&x28, &x29, x27, x3, 0x0);
12110     fiat_secp384r1_addcarryx_u32(&x30, &x31, x29, x5, 0x0);
12111     fiat_secp384r1_addcarryx_u32(&x32, &x33, x31, x7, x25);
12112     fiat_secp384r1_addcarryx_u32(&x34, &x35, x33, x9,
12113                                  (x25 & UINT32_C(0xfffffffe)));
12114     fiat_secp384r1_addcarryx_u32(&x36, &x37, x35, x11, x25);
12115     fiat_secp384r1_addcarryx_u32(&x38, &x39, x37, x13, x25);
12116     fiat_secp384r1_addcarryx_u32(&x40, &x41, x39, x15, x25);
12117     fiat_secp384r1_addcarryx_u32(&x42, &x43, x41, x17, x25);
12118     fiat_secp384r1_addcarryx_u32(&x44, &x45, x43, x19, x25);
12119     fiat_secp384r1_addcarryx_u32(&x46, &x47, x45, x21, x25);
12120     fiat_secp384r1_addcarryx_u32(&x48, &x49, x47, x23, x25);
12121     out1[0] = x26;
12122     out1[1] = x28;
12123     out1[2] = x30;
12124     out1[3] = x32;
12125     out1[4] = x34;
12126     out1[5] = x36;
12127     out1[6] = x38;
12128     out1[7] = x40;
12129     out1[8] = x42;
12130     out1[9] = x44;
12131     out1[10] = x46;
12132     out1[11] = x48;
12133 }
12134 
12135 /*
12136  * The function fiat_secp384r1_opp negates a field element in the Montgomery domain.
12137  * Preconditions:
12138  *   0 ≤ eval arg1 < m
12139  * Postconditions:
12140  *   eval (from_montgomery out1) mod m = -eval (from_montgomery arg1) mod m
12141  *   0 ≤ eval out1 < m
12142  *
12143  * Input Bounds:
12144  *   arg1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
12145  * Output Bounds:
12146  *   out1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
12147  */
12148 static void
fiat_secp384r1_opp(uint32_t out1[12],const uint32_t arg1[12])12149 fiat_secp384r1_opp(uint32_t out1[12], const uint32_t arg1[12])
12150 {
12151     uint32_t x1;
12152     fiat_secp384r1_uint1 x2;
12153     uint32_t x3;
12154     fiat_secp384r1_uint1 x4;
12155     uint32_t x5;
12156     fiat_secp384r1_uint1 x6;
12157     uint32_t x7;
12158     fiat_secp384r1_uint1 x8;
12159     uint32_t x9;
12160     fiat_secp384r1_uint1 x10;
12161     uint32_t x11;
12162     fiat_secp384r1_uint1 x12;
12163     uint32_t x13;
12164     fiat_secp384r1_uint1 x14;
12165     uint32_t x15;
12166     fiat_secp384r1_uint1 x16;
12167     uint32_t x17;
12168     fiat_secp384r1_uint1 x18;
12169     uint32_t x19;
12170     fiat_secp384r1_uint1 x20;
12171     uint32_t x21;
12172     fiat_secp384r1_uint1 x22;
12173     uint32_t x23;
12174     fiat_secp384r1_uint1 x24;
12175     uint32_t x25;
12176     uint32_t x26;
12177     fiat_secp384r1_uint1 x27;
12178     uint32_t x28;
12179     fiat_secp384r1_uint1 x29;
12180     uint32_t x30;
12181     fiat_secp384r1_uint1 x31;
12182     uint32_t x32;
12183     fiat_secp384r1_uint1 x33;
12184     uint32_t x34;
12185     fiat_secp384r1_uint1 x35;
12186     uint32_t x36;
12187     fiat_secp384r1_uint1 x37;
12188     uint32_t x38;
12189     fiat_secp384r1_uint1 x39;
12190     uint32_t x40;
12191     fiat_secp384r1_uint1 x41;
12192     uint32_t x42;
12193     fiat_secp384r1_uint1 x43;
12194     uint32_t x44;
12195     fiat_secp384r1_uint1 x45;
12196     uint32_t x46;
12197     fiat_secp384r1_uint1 x47;
12198     uint32_t x48;
12199     fiat_secp384r1_uint1 x49;
12200     fiat_secp384r1_subborrowx_u32(&x1, &x2, 0x0, 0x0, (arg1[0]));
12201     fiat_secp384r1_subborrowx_u32(&x3, &x4, x2, 0x0, (arg1[1]));
12202     fiat_secp384r1_subborrowx_u32(&x5, &x6, x4, 0x0, (arg1[2]));
12203     fiat_secp384r1_subborrowx_u32(&x7, &x8, x6, 0x0, (arg1[3]));
12204     fiat_secp384r1_subborrowx_u32(&x9, &x10, x8, 0x0, (arg1[4]));
12205     fiat_secp384r1_subborrowx_u32(&x11, &x12, x10, 0x0, (arg1[5]));
12206     fiat_secp384r1_subborrowx_u32(&x13, &x14, x12, 0x0, (arg1[6]));
12207     fiat_secp384r1_subborrowx_u32(&x15, &x16, x14, 0x0, (arg1[7]));
12208     fiat_secp384r1_subborrowx_u32(&x17, &x18, x16, 0x0, (arg1[8]));
12209     fiat_secp384r1_subborrowx_u32(&x19, &x20, x18, 0x0, (arg1[9]));
12210     fiat_secp384r1_subborrowx_u32(&x21, &x22, x20, 0x0, (arg1[10]));
12211     fiat_secp384r1_subborrowx_u32(&x23, &x24, x22, 0x0, (arg1[11]));
12212     fiat_secp384r1_cmovznz_u32(&x25, x24, 0x0, UINT32_C(0xffffffff));
12213     fiat_secp384r1_addcarryx_u32(&x26, &x27, 0x0, x1, x25);
12214     fiat_secp384r1_addcarryx_u32(&x28, &x29, x27, x3, 0x0);
12215     fiat_secp384r1_addcarryx_u32(&x30, &x31, x29, x5, 0x0);
12216     fiat_secp384r1_addcarryx_u32(&x32, &x33, x31, x7, x25);
12217     fiat_secp384r1_addcarryx_u32(&x34, &x35, x33, x9,
12218                                  (x25 & UINT32_C(0xfffffffe)));
12219     fiat_secp384r1_addcarryx_u32(&x36, &x37, x35, x11, x25);
12220     fiat_secp384r1_addcarryx_u32(&x38, &x39, x37, x13, x25);
12221     fiat_secp384r1_addcarryx_u32(&x40, &x41, x39, x15, x25);
12222     fiat_secp384r1_addcarryx_u32(&x42, &x43, x41, x17, x25);
12223     fiat_secp384r1_addcarryx_u32(&x44, &x45, x43, x19, x25);
12224     fiat_secp384r1_addcarryx_u32(&x46, &x47, x45, x21, x25);
12225     fiat_secp384r1_addcarryx_u32(&x48, &x49, x47, x23, x25);
12226     out1[0] = x26;
12227     out1[1] = x28;
12228     out1[2] = x30;
12229     out1[3] = x32;
12230     out1[4] = x34;
12231     out1[5] = x36;
12232     out1[6] = x38;
12233     out1[7] = x40;
12234     out1[8] = x42;
12235     out1[9] = x44;
12236     out1[10] = x46;
12237     out1[11] = x48;
12238 }
12239 
12240 /*
12241  * The function fiat_secp384r1_from_montgomery translates a field element out of the Montgomery domain.
12242  * Preconditions:
12243  *   0 ≤ eval arg1 < m
12244  * Postconditions:
12245  *   eval out1 mod m = (eval arg1 * ((2^32)⁻¹ mod m)^12) mod m
12246  *   0 ≤ eval out1 < m
12247  *
12248  * Input Bounds:
12249  *   arg1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
12250  * Output Bounds:
12251  *   out1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
12252  */
12253 static void
fiat_secp384r1_from_montgomery(uint32_t out1[12],const uint32_t arg1[12])12254 fiat_secp384r1_from_montgomery(uint32_t out1[12],
12255                                const uint32_t arg1[12])
12256 {
12257     uint32_t x1;
12258     uint32_t x2;
12259     uint32_t x3;
12260     uint32_t x4;
12261     uint32_t x5;
12262     uint32_t x6;
12263     uint32_t x7;
12264     uint32_t x8;
12265     uint32_t x9;
12266     uint32_t x10;
12267     uint32_t x11;
12268     uint32_t x12;
12269     uint32_t x13;
12270     uint32_t x14;
12271     uint32_t x15;
12272     uint32_t x16;
12273     uint32_t x17;
12274     uint32_t x18;
12275     uint32_t x19;
12276     uint32_t x20;
12277     uint32_t x21;
12278     uint32_t x22;
12279     fiat_secp384r1_uint1 x23;
12280     uint32_t x24;
12281     fiat_secp384r1_uint1 x25;
12282     uint32_t x26;
12283     fiat_secp384r1_uint1 x27;
12284     uint32_t x28;
12285     fiat_secp384r1_uint1 x29;
12286     uint32_t x30;
12287     fiat_secp384r1_uint1 x31;
12288     uint32_t x32;
12289     fiat_secp384r1_uint1 x33;
12290     uint32_t x34;
12291     fiat_secp384r1_uint1 x35;
12292     uint32_t x36;
12293     fiat_secp384r1_uint1 x37;
12294     uint32_t x38;
12295     fiat_secp384r1_uint1 x39;
12296     uint32_t x40;
12297     fiat_secp384r1_uint1 x41;
12298     uint32_t x42;
12299     uint32_t x43;
12300     uint32_t x44;
12301     uint32_t x45;
12302     uint32_t x46;
12303     uint32_t x47;
12304     uint32_t x48;
12305     uint32_t x49;
12306     uint32_t x50;
12307     uint32_t x51;
12308     uint32_t x52;
12309     uint32_t x53;
12310     uint32_t x54;
12311     uint32_t x55;
12312     uint32_t x56;
12313     uint32_t x57;
12314     uint32_t x58;
12315     uint32_t x59;
12316     uint32_t x60;
12317     uint32_t x61;
12318     uint32_t x62;
12319     fiat_secp384r1_uint1 x63;
12320     uint32_t x64;
12321     fiat_secp384r1_uint1 x65;
12322     uint32_t x66;
12323     fiat_secp384r1_uint1 x67;
12324     uint32_t x68;
12325     fiat_secp384r1_uint1 x69;
12326     uint32_t x70;
12327     fiat_secp384r1_uint1 x71;
12328     uint32_t x72;
12329     fiat_secp384r1_uint1 x73;
12330     uint32_t x74;
12331     fiat_secp384r1_uint1 x75;
12332     uint32_t x76;
12333     fiat_secp384r1_uint1 x77;
12334     uint32_t x78;
12335     fiat_secp384r1_uint1 x79;
12336     uint32_t x80;
12337     fiat_secp384r1_uint1 x81;
12338     uint32_t x82;
12339     fiat_secp384r1_uint1 x83;
12340     uint32_t x84;
12341     fiat_secp384r1_uint1 x85;
12342     uint32_t x86;
12343     fiat_secp384r1_uint1 x87;
12344     uint32_t x88;
12345     fiat_secp384r1_uint1 x89;
12346     uint32_t x90;
12347     fiat_secp384r1_uint1 x91;
12348     uint32_t x92;
12349     fiat_secp384r1_uint1 x93;
12350     uint32_t x94;
12351     fiat_secp384r1_uint1 x95;
12352     uint32_t x96;
12353     fiat_secp384r1_uint1 x97;
12354     uint32_t x98;
12355     fiat_secp384r1_uint1 x99;
12356     uint32_t x100;
12357     fiat_secp384r1_uint1 x101;
12358     uint32_t x102;
12359     fiat_secp384r1_uint1 x103;
12360     uint32_t x104;
12361     fiat_secp384r1_uint1 x105;
12362     uint32_t x106;
12363     fiat_secp384r1_uint1 x107;
12364     uint32_t x108;
12365     fiat_secp384r1_uint1 x109;
12366     uint32_t x110;
12367     fiat_secp384r1_uint1 x111;
12368     uint32_t x112;
12369     fiat_secp384r1_uint1 x113;
12370     uint32_t x114;
12371     fiat_secp384r1_uint1 x115;
12372     uint32_t x116;
12373     fiat_secp384r1_uint1 x117;
12374     uint32_t x118;
12375     fiat_secp384r1_uint1 x119;
12376     uint32_t x120;
12377     fiat_secp384r1_uint1 x121;
12378     uint32_t x122;
12379     fiat_secp384r1_uint1 x123;
12380     uint32_t x124;
12381     fiat_secp384r1_uint1 x125;
12382     uint32_t x126;
12383     fiat_secp384r1_uint1 x127;
12384     uint32_t x128;
12385     uint32_t x129;
12386     uint32_t x130;
12387     uint32_t x131;
12388     uint32_t x132;
12389     uint32_t x133;
12390     uint32_t x134;
12391     uint32_t x135;
12392     uint32_t x136;
12393     uint32_t x137;
12394     uint32_t x138;
12395     uint32_t x139;
12396     uint32_t x140;
12397     uint32_t x141;
12398     uint32_t x142;
12399     uint32_t x143;
12400     uint32_t x144;
12401     uint32_t x145;
12402     uint32_t x146;
12403     uint32_t x147;
12404     uint32_t x148;
12405     fiat_secp384r1_uint1 x149;
12406     uint32_t x150;
12407     fiat_secp384r1_uint1 x151;
12408     uint32_t x152;
12409     fiat_secp384r1_uint1 x153;
12410     uint32_t x154;
12411     fiat_secp384r1_uint1 x155;
12412     uint32_t x156;
12413     fiat_secp384r1_uint1 x157;
12414     uint32_t x158;
12415     fiat_secp384r1_uint1 x159;
12416     uint32_t x160;
12417     fiat_secp384r1_uint1 x161;
12418     uint32_t x162;
12419     fiat_secp384r1_uint1 x163;
12420     uint32_t x164;
12421     fiat_secp384r1_uint1 x165;
12422     uint32_t x166;
12423     fiat_secp384r1_uint1 x167;
12424     uint32_t x168;
12425     fiat_secp384r1_uint1 x169;
12426     uint32_t x170;
12427     fiat_secp384r1_uint1 x171;
12428     uint32_t x172;
12429     fiat_secp384r1_uint1 x173;
12430     uint32_t x174;
12431     fiat_secp384r1_uint1 x175;
12432     uint32_t x176;
12433     fiat_secp384r1_uint1 x177;
12434     uint32_t x178;
12435     fiat_secp384r1_uint1 x179;
12436     uint32_t x180;
12437     fiat_secp384r1_uint1 x181;
12438     uint32_t x182;
12439     fiat_secp384r1_uint1 x183;
12440     uint32_t x184;
12441     fiat_secp384r1_uint1 x185;
12442     uint32_t x186;
12443     fiat_secp384r1_uint1 x187;
12444     uint32_t x188;
12445     fiat_secp384r1_uint1 x189;
12446     uint32_t x190;
12447     fiat_secp384r1_uint1 x191;
12448     uint32_t x192;
12449     fiat_secp384r1_uint1 x193;
12450     uint32_t x194;
12451     fiat_secp384r1_uint1 x195;
12452     uint32_t x196;
12453     fiat_secp384r1_uint1 x197;
12454     uint32_t x198;
12455     fiat_secp384r1_uint1 x199;
12456     uint32_t x200;
12457     fiat_secp384r1_uint1 x201;
12458     uint32_t x202;
12459     fiat_secp384r1_uint1 x203;
12460     uint32_t x204;
12461     fiat_secp384r1_uint1 x205;
12462     uint32_t x206;
12463     fiat_secp384r1_uint1 x207;
12464     uint32_t x208;
12465     fiat_secp384r1_uint1 x209;
12466     uint32_t x210;
12467     fiat_secp384r1_uint1 x211;
12468     uint32_t x212;
12469     fiat_secp384r1_uint1 x213;
12470     uint32_t x214;
12471     uint32_t x215;
12472     uint32_t x216;
12473     uint32_t x217;
12474     uint32_t x218;
12475     uint32_t x219;
12476     uint32_t x220;
12477     uint32_t x221;
12478     uint32_t x222;
12479     uint32_t x223;
12480     uint32_t x224;
12481     uint32_t x225;
12482     uint32_t x226;
12483     uint32_t x227;
12484     uint32_t x228;
12485     uint32_t x229;
12486     uint32_t x230;
12487     uint32_t x231;
12488     uint32_t x232;
12489     uint32_t x233;
12490     uint32_t x234;
12491     fiat_secp384r1_uint1 x235;
12492     uint32_t x236;
12493     fiat_secp384r1_uint1 x237;
12494     uint32_t x238;
12495     fiat_secp384r1_uint1 x239;
12496     uint32_t x240;
12497     fiat_secp384r1_uint1 x241;
12498     uint32_t x242;
12499     fiat_secp384r1_uint1 x243;
12500     uint32_t x244;
12501     fiat_secp384r1_uint1 x245;
12502     uint32_t x246;
12503     fiat_secp384r1_uint1 x247;
12504     uint32_t x248;
12505     fiat_secp384r1_uint1 x249;
12506     uint32_t x250;
12507     fiat_secp384r1_uint1 x251;
12508     uint32_t x252;
12509     fiat_secp384r1_uint1 x253;
12510     uint32_t x254;
12511     fiat_secp384r1_uint1 x255;
12512     uint32_t x256;
12513     fiat_secp384r1_uint1 x257;
12514     uint32_t x258;
12515     fiat_secp384r1_uint1 x259;
12516     uint32_t x260;
12517     fiat_secp384r1_uint1 x261;
12518     uint32_t x262;
12519     fiat_secp384r1_uint1 x263;
12520     uint32_t x264;
12521     fiat_secp384r1_uint1 x265;
12522     uint32_t x266;
12523     fiat_secp384r1_uint1 x267;
12524     uint32_t x268;
12525     fiat_secp384r1_uint1 x269;
12526     uint32_t x270;
12527     fiat_secp384r1_uint1 x271;
12528     uint32_t x272;
12529     fiat_secp384r1_uint1 x273;
12530     uint32_t x274;
12531     fiat_secp384r1_uint1 x275;
12532     uint32_t x276;
12533     fiat_secp384r1_uint1 x277;
12534     uint32_t x278;
12535     fiat_secp384r1_uint1 x279;
12536     uint32_t x280;
12537     fiat_secp384r1_uint1 x281;
12538     uint32_t x282;
12539     fiat_secp384r1_uint1 x283;
12540     uint32_t x284;
12541     fiat_secp384r1_uint1 x285;
12542     uint32_t x286;
12543     fiat_secp384r1_uint1 x287;
12544     uint32_t x288;
12545     fiat_secp384r1_uint1 x289;
12546     uint32_t x290;
12547     fiat_secp384r1_uint1 x291;
12548     uint32_t x292;
12549     fiat_secp384r1_uint1 x293;
12550     uint32_t x294;
12551     fiat_secp384r1_uint1 x295;
12552     uint32_t x296;
12553     fiat_secp384r1_uint1 x297;
12554     uint32_t x298;
12555     fiat_secp384r1_uint1 x299;
12556     uint32_t x300;
12557     uint32_t x301;
12558     uint32_t x302;
12559     uint32_t x303;
12560     uint32_t x304;
12561     uint32_t x305;
12562     uint32_t x306;
12563     uint32_t x307;
12564     uint32_t x308;
12565     uint32_t x309;
12566     uint32_t x310;
12567     uint32_t x311;
12568     uint32_t x312;
12569     uint32_t x313;
12570     uint32_t x314;
12571     uint32_t x315;
12572     uint32_t x316;
12573     uint32_t x317;
12574     uint32_t x318;
12575     uint32_t x319;
12576     uint32_t x320;
12577     fiat_secp384r1_uint1 x321;
12578     uint32_t x322;
12579     fiat_secp384r1_uint1 x323;
12580     uint32_t x324;
12581     fiat_secp384r1_uint1 x325;
12582     uint32_t x326;
12583     fiat_secp384r1_uint1 x327;
12584     uint32_t x328;
12585     fiat_secp384r1_uint1 x329;
12586     uint32_t x330;
12587     fiat_secp384r1_uint1 x331;
12588     uint32_t x332;
12589     fiat_secp384r1_uint1 x333;
12590     uint32_t x334;
12591     fiat_secp384r1_uint1 x335;
12592     uint32_t x336;
12593     fiat_secp384r1_uint1 x337;
12594     uint32_t x338;
12595     fiat_secp384r1_uint1 x339;
12596     uint32_t x340;
12597     fiat_secp384r1_uint1 x341;
12598     uint32_t x342;
12599     fiat_secp384r1_uint1 x343;
12600     uint32_t x344;
12601     fiat_secp384r1_uint1 x345;
12602     uint32_t x346;
12603     fiat_secp384r1_uint1 x347;
12604     uint32_t x348;
12605     fiat_secp384r1_uint1 x349;
12606     uint32_t x350;
12607     fiat_secp384r1_uint1 x351;
12608     uint32_t x352;
12609     fiat_secp384r1_uint1 x353;
12610     uint32_t x354;
12611     fiat_secp384r1_uint1 x355;
12612     uint32_t x356;
12613     fiat_secp384r1_uint1 x357;
12614     uint32_t x358;
12615     fiat_secp384r1_uint1 x359;
12616     uint32_t x360;
12617     fiat_secp384r1_uint1 x361;
12618     uint32_t x362;
12619     fiat_secp384r1_uint1 x363;
12620     uint32_t x364;
12621     fiat_secp384r1_uint1 x365;
12622     uint32_t x366;
12623     fiat_secp384r1_uint1 x367;
12624     uint32_t x368;
12625     fiat_secp384r1_uint1 x369;
12626     uint32_t x370;
12627     fiat_secp384r1_uint1 x371;
12628     uint32_t x372;
12629     fiat_secp384r1_uint1 x373;
12630     uint32_t x374;
12631     fiat_secp384r1_uint1 x375;
12632     uint32_t x376;
12633     fiat_secp384r1_uint1 x377;
12634     uint32_t x378;
12635     fiat_secp384r1_uint1 x379;
12636     uint32_t x380;
12637     fiat_secp384r1_uint1 x381;
12638     uint32_t x382;
12639     fiat_secp384r1_uint1 x383;
12640     uint32_t x384;
12641     fiat_secp384r1_uint1 x385;
12642     uint32_t x386;
12643     uint32_t x387;
12644     uint32_t x388;
12645     uint32_t x389;
12646     uint32_t x390;
12647     uint32_t x391;
12648     uint32_t x392;
12649     uint32_t x393;
12650     uint32_t x394;
12651     uint32_t x395;
12652     uint32_t x396;
12653     uint32_t x397;
12654     uint32_t x398;
12655     uint32_t x399;
12656     uint32_t x400;
12657     uint32_t x401;
12658     uint32_t x402;
12659     uint32_t x403;
12660     uint32_t x404;
12661     uint32_t x405;
12662     uint32_t x406;
12663     fiat_secp384r1_uint1 x407;
12664     uint32_t x408;
12665     fiat_secp384r1_uint1 x409;
12666     uint32_t x410;
12667     fiat_secp384r1_uint1 x411;
12668     uint32_t x412;
12669     fiat_secp384r1_uint1 x413;
12670     uint32_t x414;
12671     fiat_secp384r1_uint1 x415;
12672     uint32_t x416;
12673     fiat_secp384r1_uint1 x417;
12674     uint32_t x418;
12675     fiat_secp384r1_uint1 x419;
12676     uint32_t x420;
12677     fiat_secp384r1_uint1 x421;
12678     uint32_t x422;
12679     fiat_secp384r1_uint1 x423;
12680     uint32_t x424;
12681     fiat_secp384r1_uint1 x425;
12682     uint32_t x426;
12683     fiat_secp384r1_uint1 x427;
12684     uint32_t x428;
12685     fiat_secp384r1_uint1 x429;
12686     uint32_t x430;
12687     fiat_secp384r1_uint1 x431;
12688     uint32_t x432;
12689     fiat_secp384r1_uint1 x433;
12690     uint32_t x434;
12691     fiat_secp384r1_uint1 x435;
12692     uint32_t x436;
12693     fiat_secp384r1_uint1 x437;
12694     uint32_t x438;
12695     fiat_secp384r1_uint1 x439;
12696     uint32_t x440;
12697     fiat_secp384r1_uint1 x441;
12698     uint32_t x442;
12699     fiat_secp384r1_uint1 x443;
12700     uint32_t x444;
12701     fiat_secp384r1_uint1 x445;
12702     uint32_t x446;
12703     fiat_secp384r1_uint1 x447;
12704     uint32_t x448;
12705     fiat_secp384r1_uint1 x449;
12706     uint32_t x450;
12707     fiat_secp384r1_uint1 x451;
12708     uint32_t x452;
12709     fiat_secp384r1_uint1 x453;
12710     uint32_t x454;
12711     fiat_secp384r1_uint1 x455;
12712     uint32_t x456;
12713     fiat_secp384r1_uint1 x457;
12714     uint32_t x458;
12715     fiat_secp384r1_uint1 x459;
12716     uint32_t x460;
12717     fiat_secp384r1_uint1 x461;
12718     uint32_t x462;
12719     fiat_secp384r1_uint1 x463;
12720     uint32_t x464;
12721     fiat_secp384r1_uint1 x465;
12722     uint32_t x466;
12723     fiat_secp384r1_uint1 x467;
12724     uint32_t x468;
12725     fiat_secp384r1_uint1 x469;
12726     uint32_t x470;
12727     fiat_secp384r1_uint1 x471;
12728     uint32_t x472;
12729     uint32_t x473;
12730     uint32_t x474;
12731     uint32_t x475;
12732     uint32_t x476;
12733     uint32_t x477;
12734     uint32_t x478;
12735     uint32_t x479;
12736     uint32_t x480;
12737     uint32_t x481;
12738     uint32_t x482;
12739     uint32_t x483;
12740     uint32_t x484;
12741     uint32_t x485;
12742     uint32_t x486;
12743     uint32_t x487;
12744     uint32_t x488;
12745     uint32_t x489;
12746     uint32_t x490;
12747     uint32_t x491;
12748     uint32_t x492;
12749     fiat_secp384r1_uint1 x493;
12750     uint32_t x494;
12751     fiat_secp384r1_uint1 x495;
12752     uint32_t x496;
12753     fiat_secp384r1_uint1 x497;
12754     uint32_t x498;
12755     fiat_secp384r1_uint1 x499;
12756     uint32_t x500;
12757     fiat_secp384r1_uint1 x501;
12758     uint32_t x502;
12759     fiat_secp384r1_uint1 x503;
12760     uint32_t x504;
12761     fiat_secp384r1_uint1 x505;
12762     uint32_t x506;
12763     fiat_secp384r1_uint1 x507;
12764     uint32_t x508;
12765     fiat_secp384r1_uint1 x509;
12766     uint32_t x510;
12767     fiat_secp384r1_uint1 x511;
12768     uint32_t x512;
12769     fiat_secp384r1_uint1 x513;
12770     uint32_t x514;
12771     fiat_secp384r1_uint1 x515;
12772     uint32_t x516;
12773     fiat_secp384r1_uint1 x517;
12774     uint32_t x518;
12775     fiat_secp384r1_uint1 x519;
12776     uint32_t x520;
12777     fiat_secp384r1_uint1 x521;
12778     uint32_t x522;
12779     fiat_secp384r1_uint1 x523;
12780     uint32_t x524;
12781     fiat_secp384r1_uint1 x525;
12782     uint32_t x526;
12783     fiat_secp384r1_uint1 x527;
12784     uint32_t x528;
12785     fiat_secp384r1_uint1 x529;
12786     uint32_t x530;
12787     fiat_secp384r1_uint1 x531;
12788     uint32_t x532;
12789     fiat_secp384r1_uint1 x533;
12790     uint32_t x534;
12791     fiat_secp384r1_uint1 x535;
12792     uint32_t x536;
12793     fiat_secp384r1_uint1 x537;
12794     uint32_t x538;
12795     fiat_secp384r1_uint1 x539;
12796     uint32_t x540;
12797     fiat_secp384r1_uint1 x541;
12798     uint32_t x542;
12799     fiat_secp384r1_uint1 x543;
12800     uint32_t x544;
12801     fiat_secp384r1_uint1 x545;
12802     uint32_t x546;
12803     fiat_secp384r1_uint1 x547;
12804     uint32_t x548;
12805     fiat_secp384r1_uint1 x549;
12806     uint32_t x550;
12807     fiat_secp384r1_uint1 x551;
12808     uint32_t x552;
12809     fiat_secp384r1_uint1 x553;
12810     uint32_t x554;
12811     fiat_secp384r1_uint1 x555;
12812     uint32_t x556;
12813     fiat_secp384r1_uint1 x557;
12814     uint32_t x558;
12815     uint32_t x559;
12816     uint32_t x560;
12817     uint32_t x561;
12818     uint32_t x562;
12819     uint32_t x563;
12820     uint32_t x564;
12821     uint32_t x565;
12822     uint32_t x566;
12823     uint32_t x567;
12824     uint32_t x568;
12825     uint32_t x569;
12826     uint32_t x570;
12827     uint32_t x571;
12828     uint32_t x572;
12829     uint32_t x573;
12830     uint32_t x574;
12831     uint32_t x575;
12832     uint32_t x576;
12833     uint32_t x577;
12834     uint32_t x578;
12835     fiat_secp384r1_uint1 x579;
12836     uint32_t x580;
12837     fiat_secp384r1_uint1 x581;
12838     uint32_t x582;
12839     fiat_secp384r1_uint1 x583;
12840     uint32_t x584;
12841     fiat_secp384r1_uint1 x585;
12842     uint32_t x586;
12843     fiat_secp384r1_uint1 x587;
12844     uint32_t x588;
12845     fiat_secp384r1_uint1 x589;
12846     uint32_t x590;
12847     fiat_secp384r1_uint1 x591;
12848     uint32_t x592;
12849     fiat_secp384r1_uint1 x593;
12850     uint32_t x594;
12851     fiat_secp384r1_uint1 x595;
12852     uint32_t x596;
12853     fiat_secp384r1_uint1 x597;
12854     uint32_t x598;
12855     fiat_secp384r1_uint1 x599;
12856     uint32_t x600;
12857     fiat_secp384r1_uint1 x601;
12858     uint32_t x602;
12859     fiat_secp384r1_uint1 x603;
12860     uint32_t x604;
12861     fiat_secp384r1_uint1 x605;
12862     uint32_t x606;
12863     fiat_secp384r1_uint1 x607;
12864     uint32_t x608;
12865     fiat_secp384r1_uint1 x609;
12866     uint32_t x610;
12867     fiat_secp384r1_uint1 x611;
12868     uint32_t x612;
12869     fiat_secp384r1_uint1 x613;
12870     uint32_t x614;
12871     fiat_secp384r1_uint1 x615;
12872     uint32_t x616;
12873     fiat_secp384r1_uint1 x617;
12874     uint32_t x618;
12875     fiat_secp384r1_uint1 x619;
12876     uint32_t x620;
12877     fiat_secp384r1_uint1 x621;
12878     uint32_t x622;
12879     fiat_secp384r1_uint1 x623;
12880     uint32_t x624;
12881     fiat_secp384r1_uint1 x625;
12882     uint32_t x626;
12883     fiat_secp384r1_uint1 x627;
12884     uint32_t x628;
12885     fiat_secp384r1_uint1 x629;
12886     uint32_t x630;
12887     fiat_secp384r1_uint1 x631;
12888     uint32_t x632;
12889     fiat_secp384r1_uint1 x633;
12890     uint32_t x634;
12891     fiat_secp384r1_uint1 x635;
12892     uint32_t x636;
12893     fiat_secp384r1_uint1 x637;
12894     uint32_t x638;
12895     fiat_secp384r1_uint1 x639;
12896     uint32_t x640;
12897     fiat_secp384r1_uint1 x641;
12898     uint32_t x642;
12899     fiat_secp384r1_uint1 x643;
12900     uint32_t x644;
12901     uint32_t x645;
12902     uint32_t x646;
12903     uint32_t x647;
12904     uint32_t x648;
12905     uint32_t x649;
12906     uint32_t x650;
12907     uint32_t x651;
12908     uint32_t x652;
12909     uint32_t x653;
12910     uint32_t x654;
12911     uint32_t x655;
12912     uint32_t x656;
12913     uint32_t x657;
12914     uint32_t x658;
12915     uint32_t x659;
12916     uint32_t x660;
12917     uint32_t x661;
12918     uint32_t x662;
12919     uint32_t x663;
12920     uint32_t x664;
12921     fiat_secp384r1_uint1 x665;
12922     uint32_t x666;
12923     fiat_secp384r1_uint1 x667;
12924     uint32_t x668;
12925     fiat_secp384r1_uint1 x669;
12926     uint32_t x670;
12927     fiat_secp384r1_uint1 x671;
12928     uint32_t x672;
12929     fiat_secp384r1_uint1 x673;
12930     uint32_t x674;
12931     fiat_secp384r1_uint1 x675;
12932     uint32_t x676;
12933     fiat_secp384r1_uint1 x677;
12934     uint32_t x678;
12935     fiat_secp384r1_uint1 x679;
12936     uint32_t x680;
12937     fiat_secp384r1_uint1 x681;
12938     uint32_t x682;
12939     fiat_secp384r1_uint1 x683;
12940     uint32_t x684;
12941     fiat_secp384r1_uint1 x685;
12942     uint32_t x686;
12943     fiat_secp384r1_uint1 x687;
12944     uint32_t x688;
12945     fiat_secp384r1_uint1 x689;
12946     uint32_t x690;
12947     fiat_secp384r1_uint1 x691;
12948     uint32_t x692;
12949     fiat_secp384r1_uint1 x693;
12950     uint32_t x694;
12951     fiat_secp384r1_uint1 x695;
12952     uint32_t x696;
12953     fiat_secp384r1_uint1 x697;
12954     uint32_t x698;
12955     fiat_secp384r1_uint1 x699;
12956     uint32_t x700;
12957     fiat_secp384r1_uint1 x701;
12958     uint32_t x702;
12959     fiat_secp384r1_uint1 x703;
12960     uint32_t x704;
12961     fiat_secp384r1_uint1 x705;
12962     uint32_t x706;
12963     fiat_secp384r1_uint1 x707;
12964     uint32_t x708;
12965     fiat_secp384r1_uint1 x709;
12966     uint32_t x710;
12967     fiat_secp384r1_uint1 x711;
12968     uint32_t x712;
12969     fiat_secp384r1_uint1 x713;
12970     uint32_t x714;
12971     fiat_secp384r1_uint1 x715;
12972     uint32_t x716;
12973     fiat_secp384r1_uint1 x717;
12974     uint32_t x718;
12975     fiat_secp384r1_uint1 x719;
12976     uint32_t x720;
12977     fiat_secp384r1_uint1 x721;
12978     uint32_t x722;
12979     fiat_secp384r1_uint1 x723;
12980     uint32_t x724;
12981     fiat_secp384r1_uint1 x725;
12982     uint32_t x726;
12983     fiat_secp384r1_uint1 x727;
12984     uint32_t x728;
12985     fiat_secp384r1_uint1 x729;
12986     uint32_t x730;
12987     uint32_t x731;
12988     uint32_t x732;
12989     uint32_t x733;
12990     uint32_t x734;
12991     uint32_t x735;
12992     uint32_t x736;
12993     uint32_t x737;
12994     uint32_t x738;
12995     uint32_t x739;
12996     uint32_t x740;
12997     uint32_t x741;
12998     uint32_t x742;
12999     uint32_t x743;
13000     uint32_t x744;
13001     uint32_t x745;
13002     uint32_t x746;
13003     uint32_t x747;
13004     uint32_t x748;
13005     uint32_t x749;
13006     uint32_t x750;
13007     fiat_secp384r1_uint1 x751;
13008     uint32_t x752;
13009     fiat_secp384r1_uint1 x753;
13010     uint32_t x754;
13011     fiat_secp384r1_uint1 x755;
13012     uint32_t x756;
13013     fiat_secp384r1_uint1 x757;
13014     uint32_t x758;
13015     fiat_secp384r1_uint1 x759;
13016     uint32_t x760;
13017     fiat_secp384r1_uint1 x761;
13018     uint32_t x762;
13019     fiat_secp384r1_uint1 x763;
13020     uint32_t x764;
13021     fiat_secp384r1_uint1 x765;
13022     uint32_t x766;
13023     fiat_secp384r1_uint1 x767;
13024     uint32_t x768;
13025     fiat_secp384r1_uint1 x769;
13026     uint32_t x770;
13027     fiat_secp384r1_uint1 x771;
13028     uint32_t x772;
13029     fiat_secp384r1_uint1 x773;
13030     uint32_t x774;
13031     fiat_secp384r1_uint1 x775;
13032     uint32_t x776;
13033     fiat_secp384r1_uint1 x777;
13034     uint32_t x778;
13035     fiat_secp384r1_uint1 x779;
13036     uint32_t x780;
13037     fiat_secp384r1_uint1 x781;
13038     uint32_t x782;
13039     fiat_secp384r1_uint1 x783;
13040     uint32_t x784;
13041     fiat_secp384r1_uint1 x785;
13042     uint32_t x786;
13043     fiat_secp384r1_uint1 x787;
13044     uint32_t x788;
13045     fiat_secp384r1_uint1 x789;
13046     uint32_t x790;
13047     fiat_secp384r1_uint1 x791;
13048     uint32_t x792;
13049     fiat_secp384r1_uint1 x793;
13050     uint32_t x794;
13051     fiat_secp384r1_uint1 x795;
13052     uint32_t x796;
13053     fiat_secp384r1_uint1 x797;
13054     uint32_t x798;
13055     fiat_secp384r1_uint1 x799;
13056     uint32_t x800;
13057     fiat_secp384r1_uint1 x801;
13058     uint32_t x802;
13059     fiat_secp384r1_uint1 x803;
13060     uint32_t x804;
13061     fiat_secp384r1_uint1 x805;
13062     uint32_t x806;
13063     fiat_secp384r1_uint1 x807;
13064     uint32_t x808;
13065     fiat_secp384r1_uint1 x809;
13066     uint32_t x810;
13067     fiat_secp384r1_uint1 x811;
13068     uint32_t x812;
13069     fiat_secp384r1_uint1 x813;
13070     uint32_t x814;
13071     fiat_secp384r1_uint1 x815;
13072     uint32_t x816;
13073     uint32_t x817;
13074     uint32_t x818;
13075     uint32_t x819;
13076     uint32_t x820;
13077     uint32_t x821;
13078     uint32_t x822;
13079     uint32_t x823;
13080     uint32_t x824;
13081     uint32_t x825;
13082     uint32_t x826;
13083     uint32_t x827;
13084     uint32_t x828;
13085     uint32_t x829;
13086     uint32_t x830;
13087     uint32_t x831;
13088     uint32_t x832;
13089     uint32_t x833;
13090     uint32_t x834;
13091     uint32_t x835;
13092     uint32_t x836;
13093     fiat_secp384r1_uint1 x837;
13094     uint32_t x838;
13095     fiat_secp384r1_uint1 x839;
13096     uint32_t x840;
13097     fiat_secp384r1_uint1 x841;
13098     uint32_t x842;
13099     fiat_secp384r1_uint1 x843;
13100     uint32_t x844;
13101     fiat_secp384r1_uint1 x845;
13102     uint32_t x846;
13103     fiat_secp384r1_uint1 x847;
13104     uint32_t x848;
13105     fiat_secp384r1_uint1 x849;
13106     uint32_t x850;
13107     fiat_secp384r1_uint1 x851;
13108     uint32_t x852;
13109     fiat_secp384r1_uint1 x853;
13110     uint32_t x854;
13111     fiat_secp384r1_uint1 x855;
13112     uint32_t x856;
13113     fiat_secp384r1_uint1 x857;
13114     uint32_t x858;
13115     fiat_secp384r1_uint1 x859;
13116     uint32_t x860;
13117     fiat_secp384r1_uint1 x861;
13118     uint32_t x862;
13119     fiat_secp384r1_uint1 x863;
13120     uint32_t x864;
13121     fiat_secp384r1_uint1 x865;
13122     uint32_t x866;
13123     fiat_secp384r1_uint1 x867;
13124     uint32_t x868;
13125     fiat_secp384r1_uint1 x869;
13126     uint32_t x870;
13127     fiat_secp384r1_uint1 x871;
13128     uint32_t x872;
13129     fiat_secp384r1_uint1 x873;
13130     uint32_t x874;
13131     fiat_secp384r1_uint1 x875;
13132     uint32_t x876;
13133     fiat_secp384r1_uint1 x877;
13134     uint32_t x878;
13135     fiat_secp384r1_uint1 x879;
13136     uint32_t x880;
13137     fiat_secp384r1_uint1 x881;
13138     uint32_t x882;
13139     fiat_secp384r1_uint1 x883;
13140     uint32_t x884;
13141     fiat_secp384r1_uint1 x885;
13142     uint32_t x886;
13143     fiat_secp384r1_uint1 x887;
13144     uint32_t x888;
13145     fiat_secp384r1_uint1 x889;
13146     uint32_t x890;
13147     fiat_secp384r1_uint1 x891;
13148     uint32_t x892;
13149     fiat_secp384r1_uint1 x893;
13150     uint32_t x894;
13151     fiat_secp384r1_uint1 x895;
13152     uint32_t x896;
13153     fiat_secp384r1_uint1 x897;
13154     uint32_t x898;
13155     fiat_secp384r1_uint1 x899;
13156     uint32_t x900;
13157     fiat_secp384r1_uint1 x901;
13158     uint32_t x902;
13159     uint32_t x903;
13160     uint32_t x904;
13161     uint32_t x905;
13162     uint32_t x906;
13163     uint32_t x907;
13164     uint32_t x908;
13165     uint32_t x909;
13166     uint32_t x910;
13167     uint32_t x911;
13168     uint32_t x912;
13169     uint32_t x913;
13170     uint32_t x914;
13171     uint32_t x915;
13172     uint32_t x916;
13173     uint32_t x917;
13174     uint32_t x918;
13175     uint32_t x919;
13176     uint32_t x920;
13177     uint32_t x921;
13178     uint32_t x922;
13179     fiat_secp384r1_uint1 x923;
13180     uint32_t x924;
13181     fiat_secp384r1_uint1 x925;
13182     uint32_t x926;
13183     fiat_secp384r1_uint1 x927;
13184     uint32_t x928;
13185     fiat_secp384r1_uint1 x929;
13186     uint32_t x930;
13187     fiat_secp384r1_uint1 x931;
13188     uint32_t x932;
13189     fiat_secp384r1_uint1 x933;
13190     uint32_t x934;
13191     fiat_secp384r1_uint1 x935;
13192     uint32_t x936;
13193     fiat_secp384r1_uint1 x937;
13194     uint32_t x938;
13195     fiat_secp384r1_uint1 x939;
13196     uint32_t x940;
13197     fiat_secp384r1_uint1 x941;
13198     uint32_t x942;
13199     fiat_secp384r1_uint1 x943;
13200     uint32_t x944;
13201     fiat_secp384r1_uint1 x945;
13202     uint32_t x946;
13203     fiat_secp384r1_uint1 x947;
13204     uint32_t x948;
13205     fiat_secp384r1_uint1 x949;
13206     uint32_t x950;
13207     fiat_secp384r1_uint1 x951;
13208     uint32_t x952;
13209     fiat_secp384r1_uint1 x953;
13210     uint32_t x954;
13211     fiat_secp384r1_uint1 x955;
13212     uint32_t x956;
13213     fiat_secp384r1_uint1 x957;
13214     uint32_t x958;
13215     fiat_secp384r1_uint1 x959;
13216     uint32_t x960;
13217     fiat_secp384r1_uint1 x961;
13218     uint32_t x962;
13219     fiat_secp384r1_uint1 x963;
13220     uint32_t x964;
13221     fiat_secp384r1_uint1 x965;
13222     uint32_t x966;
13223     fiat_secp384r1_uint1 x967;
13224     uint32_t x968;
13225     fiat_secp384r1_uint1 x969;
13226     uint32_t x970;
13227     fiat_secp384r1_uint1 x971;
13228     uint32_t x972;
13229     fiat_secp384r1_uint1 x973;
13230     uint32_t x974;
13231     fiat_secp384r1_uint1 x975;
13232     uint32_t x976;
13233     fiat_secp384r1_uint1 x977;
13234     uint32_t x978;
13235     fiat_secp384r1_uint1 x979;
13236     uint32_t x980;
13237     fiat_secp384r1_uint1 x981;
13238     uint32_t x982;
13239     fiat_secp384r1_uint1 x983;
13240     uint32_t x984;
13241     fiat_secp384r1_uint1 x985;
13242     uint32_t x986;
13243     fiat_secp384r1_uint1 x987;
13244     uint32_t x988;
13245     fiat_secp384r1_uint1 x989;
13246     uint32_t x990;
13247     uint32_t x991;
13248     uint32_t x992;
13249     uint32_t x993;
13250     uint32_t x994;
13251     uint32_t x995;
13252     uint32_t x996;
13253     uint32_t x997;
13254     uint32_t x998;
13255     uint32_t x999;
13256     uint32_t x1000;
13257     uint32_t x1001;
13258     x1 = (arg1[0]);
13259     fiat_secp384r1_mulx_u32(&x2, &x3, x1, UINT32_C(0xffffffff));
13260     fiat_secp384r1_mulx_u32(&x4, &x5, x1, UINT32_C(0xffffffff));
13261     fiat_secp384r1_mulx_u32(&x6, &x7, x1, UINT32_C(0xffffffff));
13262     fiat_secp384r1_mulx_u32(&x8, &x9, x1, UINT32_C(0xffffffff));
13263     fiat_secp384r1_mulx_u32(&x10, &x11, x1, UINT32_C(0xffffffff));
13264     fiat_secp384r1_mulx_u32(&x12, &x13, x1, UINT32_C(0xffffffff));
13265     fiat_secp384r1_mulx_u32(&x14, &x15, x1, UINT32_C(0xffffffff));
13266     fiat_secp384r1_mulx_u32(&x16, &x17, x1, UINT32_C(0xfffffffe));
13267     fiat_secp384r1_mulx_u32(&x18, &x19, x1, UINT32_C(0xffffffff));
13268     fiat_secp384r1_mulx_u32(&x20, &x21, x1, UINT32_C(0xffffffff));
13269     fiat_secp384r1_addcarryx_u32(&x22, &x23, 0x0, x19, x16);
13270     fiat_secp384r1_addcarryx_u32(&x24, &x25, x23, x17, x14);
13271     fiat_secp384r1_addcarryx_u32(&x26, &x27, x25, x15, x12);
13272     fiat_secp384r1_addcarryx_u32(&x28, &x29, x27, x13, x10);
13273     fiat_secp384r1_addcarryx_u32(&x30, &x31, x29, x11, x8);
13274     fiat_secp384r1_addcarryx_u32(&x32, &x33, x31, x9, x6);
13275     fiat_secp384r1_addcarryx_u32(&x34, &x35, x33, x7, x4);
13276     fiat_secp384r1_addcarryx_u32(&x36, &x37, x35, x5, x2);
13277     fiat_secp384r1_addcarryx_u32(&x38, &x39, 0x0, x1, x20);
13278     fiat_secp384r1_addcarryx_u32(&x40, &x41, 0x0, (x39 + x21), (arg1[1]));
13279     fiat_secp384r1_mulx_u32(&x42, &x43, x40, UINT32_C(0xffffffff));
13280     fiat_secp384r1_mulx_u32(&x44, &x45, x40, UINT32_C(0xffffffff));
13281     fiat_secp384r1_mulx_u32(&x46, &x47, x40, UINT32_C(0xffffffff));
13282     fiat_secp384r1_mulx_u32(&x48, &x49, x40, UINT32_C(0xffffffff));
13283     fiat_secp384r1_mulx_u32(&x50, &x51, x40, UINT32_C(0xffffffff));
13284     fiat_secp384r1_mulx_u32(&x52, &x53, x40, UINT32_C(0xffffffff));
13285     fiat_secp384r1_mulx_u32(&x54, &x55, x40, UINT32_C(0xffffffff));
13286     fiat_secp384r1_mulx_u32(&x56, &x57, x40, UINT32_C(0xfffffffe));
13287     fiat_secp384r1_mulx_u32(&x58, &x59, x40, UINT32_C(0xffffffff));
13288     fiat_secp384r1_mulx_u32(&x60, &x61, x40, UINT32_C(0xffffffff));
13289     fiat_secp384r1_addcarryx_u32(&x62, &x63, 0x0, x59, x56);
13290     fiat_secp384r1_addcarryx_u32(&x64, &x65, x63, x57, x54);
13291     fiat_secp384r1_addcarryx_u32(&x66, &x67, x65, x55, x52);
13292     fiat_secp384r1_addcarryx_u32(&x68, &x69, x67, x53, x50);
13293     fiat_secp384r1_addcarryx_u32(&x70, &x71, x69, x51, x48);
13294     fiat_secp384r1_addcarryx_u32(&x72, &x73, x71, x49, x46);
13295     fiat_secp384r1_addcarryx_u32(&x74, &x75, x73, x47, x44);
13296     fiat_secp384r1_addcarryx_u32(&x76, &x77, x75, x45, x42);
13297     fiat_secp384r1_addcarryx_u32(&x78, &x79, 0x0, x40, x60);
13298     fiat_secp384r1_addcarryx_u32(&x80, &x81, x79, x41, x61);
13299     fiat_secp384r1_addcarryx_u32(&x82, &x83, x81, x18, 0x0);
13300     fiat_secp384r1_addcarryx_u32(&x84, &x85, x83, x22, x58);
13301     fiat_secp384r1_addcarryx_u32(&x86, &x87, x85, x24, x62);
13302     fiat_secp384r1_addcarryx_u32(&x88, &x89, x87, x26, x64);
13303     fiat_secp384r1_addcarryx_u32(&x90, &x91, x89, x28, x66);
13304     fiat_secp384r1_addcarryx_u32(&x92, &x93, x91, x30, x68);
13305     fiat_secp384r1_addcarryx_u32(&x94, &x95, x93, x32, x70);
13306     fiat_secp384r1_addcarryx_u32(&x96, &x97, x95, x34, x72);
13307     fiat_secp384r1_addcarryx_u32(&x98, &x99, x97, x36, x74);
13308     fiat_secp384r1_addcarryx_u32(&x100, &x101, x99, (x37 + x3), x76);
13309     fiat_secp384r1_addcarryx_u32(&x102, &x103, x101, 0x0, (x77 + x43));
13310     fiat_secp384r1_addcarryx_u32(&x104, &x105, 0x0, x80, (arg1[2]));
13311     fiat_secp384r1_addcarryx_u32(&x106, &x107, x105, x82, 0x0);
13312     fiat_secp384r1_addcarryx_u32(&x108, &x109, x107, x84, 0x0);
13313     fiat_secp384r1_addcarryx_u32(&x110, &x111, x109, x86, 0x0);
13314     fiat_secp384r1_addcarryx_u32(&x112, &x113, x111, x88, 0x0);
13315     fiat_secp384r1_addcarryx_u32(&x114, &x115, x113, x90, 0x0);
13316     fiat_secp384r1_addcarryx_u32(&x116, &x117, x115, x92, 0x0);
13317     fiat_secp384r1_addcarryx_u32(&x118, &x119, x117, x94, 0x0);
13318     fiat_secp384r1_addcarryx_u32(&x120, &x121, x119, x96, 0x0);
13319     fiat_secp384r1_addcarryx_u32(&x122, &x123, x121, x98, 0x0);
13320     fiat_secp384r1_addcarryx_u32(&x124, &x125, x123, x100, 0x0);
13321     fiat_secp384r1_addcarryx_u32(&x126, &x127, x125, x102, 0x0);
13322     fiat_secp384r1_mulx_u32(&x128, &x129, x104, UINT32_C(0xffffffff));
13323     fiat_secp384r1_mulx_u32(&x130, &x131, x104, UINT32_C(0xffffffff));
13324     fiat_secp384r1_mulx_u32(&x132, &x133, x104, UINT32_C(0xffffffff));
13325     fiat_secp384r1_mulx_u32(&x134, &x135, x104, UINT32_C(0xffffffff));
13326     fiat_secp384r1_mulx_u32(&x136, &x137, x104, UINT32_C(0xffffffff));
13327     fiat_secp384r1_mulx_u32(&x138, &x139, x104, UINT32_C(0xffffffff));
13328     fiat_secp384r1_mulx_u32(&x140, &x141, x104, UINT32_C(0xffffffff));
13329     fiat_secp384r1_mulx_u32(&x142, &x143, x104, UINT32_C(0xfffffffe));
13330     fiat_secp384r1_mulx_u32(&x144, &x145, x104, UINT32_C(0xffffffff));
13331     fiat_secp384r1_mulx_u32(&x146, &x147, x104, UINT32_C(0xffffffff));
13332     fiat_secp384r1_addcarryx_u32(&x148, &x149, 0x0, x145, x142);
13333     fiat_secp384r1_addcarryx_u32(&x150, &x151, x149, x143, x140);
13334     fiat_secp384r1_addcarryx_u32(&x152, &x153, x151, x141, x138);
13335     fiat_secp384r1_addcarryx_u32(&x154, &x155, x153, x139, x136);
13336     fiat_secp384r1_addcarryx_u32(&x156, &x157, x155, x137, x134);
13337     fiat_secp384r1_addcarryx_u32(&x158, &x159, x157, x135, x132);
13338     fiat_secp384r1_addcarryx_u32(&x160, &x161, x159, x133, x130);
13339     fiat_secp384r1_addcarryx_u32(&x162, &x163, x161, x131, x128);
13340     fiat_secp384r1_addcarryx_u32(&x164, &x165, 0x0, x104, x146);
13341     fiat_secp384r1_addcarryx_u32(&x166, &x167, x165, x106, x147);
13342     fiat_secp384r1_addcarryx_u32(&x168, &x169, x167, x108, 0x0);
13343     fiat_secp384r1_addcarryx_u32(&x170, &x171, x169, x110, x144);
13344     fiat_secp384r1_addcarryx_u32(&x172, &x173, x171, x112, x148);
13345     fiat_secp384r1_addcarryx_u32(&x174, &x175, x173, x114, x150);
13346     fiat_secp384r1_addcarryx_u32(&x176, &x177, x175, x116, x152);
13347     fiat_secp384r1_addcarryx_u32(&x178, &x179, x177, x118, x154);
13348     fiat_secp384r1_addcarryx_u32(&x180, &x181, x179, x120, x156);
13349     fiat_secp384r1_addcarryx_u32(&x182, &x183, x181, x122, x158);
13350     fiat_secp384r1_addcarryx_u32(&x184, &x185, x183, x124, x160);
13351     fiat_secp384r1_addcarryx_u32(&x186, &x187, x185, x126, x162);
13352     fiat_secp384r1_addcarryx_u32(&x188, &x189, x187, ((uint32_t)x127 + x103),
13353                                  (x163 + x129));
13354     fiat_secp384r1_addcarryx_u32(&x190, &x191, 0x0, x166, (arg1[3]));
13355     fiat_secp384r1_addcarryx_u32(&x192, &x193, x191, x168, 0x0);
13356     fiat_secp384r1_addcarryx_u32(&x194, &x195, x193, x170, 0x0);
13357     fiat_secp384r1_addcarryx_u32(&x196, &x197, x195, x172, 0x0);
13358     fiat_secp384r1_addcarryx_u32(&x198, &x199, x197, x174, 0x0);
13359     fiat_secp384r1_addcarryx_u32(&x200, &x201, x199, x176, 0x0);
13360     fiat_secp384r1_addcarryx_u32(&x202, &x203, x201, x178, 0x0);
13361     fiat_secp384r1_addcarryx_u32(&x204, &x205, x203, x180, 0x0);
13362     fiat_secp384r1_addcarryx_u32(&x206, &x207, x205, x182, 0x0);
13363     fiat_secp384r1_addcarryx_u32(&x208, &x209, x207, x184, 0x0);
13364     fiat_secp384r1_addcarryx_u32(&x210, &x211, x209, x186, 0x0);
13365     fiat_secp384r1_addcarryx_u32(&x212, &x213, x211, x188, 0x0);
13366     fiat_secp384r1_mulx_u32(&x214, &x215, x190, UINT32_C(0xffffffff));
13367     fiat_secp384r1_mulx_u32(&x216, &x217, x190, UINT32_C(0xffffffff));
13368     fiat_secp384r1_mulx_u32(&x218, &x219, x190, UINT32_C(0xffffffff));
13369     fiat_secp384r1_mulx_u32(&x220, &x221, x190, UINT32_C(0xffffffff));
13370     fiat_secp384r1_mulx_u32(&x222, &x223, x190, UINT32_C(0xffffffff));
13371     fiat_secp384r1_mulx_u32(&x224, &x225, x190, UINT32_C(0xffffffff));
13372     fiat_secp384r1_mulx_u32(&x226, &x227, x190, UINT32_C(0xffffffff));
13373     fiat_secp384r1_mulx_u32(&x228, &x229, x190, UINT32_C(0xfffffffe));
13374     fiat_secp384r1_mulx_u32(&x230, &x231, x190, UINT32_C(0xffffffff));
13375     fiat_secp384r1_mulx_u32(&x232, &x233, x190, UINT32_C(0xffffffff));
13376     fiat_secp384r1_addcarryx_u32(&x234, &x235, 0x0, x231, x228);
13377     fiat_secp384r1_addcarryx_u32(&x236, &x237, x235, x229, x226);
13378     fiat_secp384r1_addcarryx_u32(&x238, &x239, x237, x227, x224);
13379     fiat_secp384r1_addcarryx_u32(&x240, &x241, x239, x225, x222);
13380     fiat_secp384r1_addcarryx_u32(&x242, &x243, x241, x223, x220);
13381     fiat_secp384r1_addcarryx_u32(&x244, &x245, x243, x221, x218);
13382     fiat_secp384r1_addcarryx_u32(&x246, &x247, x245, x219, x216);
13383     fiat_secp384r1_addcarryx_u32(&x248, &x249, x247, x217, x214);
13384     fiat_secp384r1_addcarryx_u32(&x250, &x251, 0x0, x190, x232);
13385     fiat_secp384r1_addcarryx_u32(&x252, &x253, x251, x192, x233);
13386     fiat_secp384r1_addcarryx_u32(&x254, &x255, x253, x194, 0x0);
13387     fiat_secp384r1_addcarryx_u32(&x256, &x257, x255, x196, x230);
13388     fiat_secp384r1_addcarryx_u32(&x258, &x259, x257, x198, x234);
13389     fiat_secp384r1_addcarryx_u32(&x260, &x261, x259, x200, x236);
13390     fiat_secp384r1_addcarryx_u32(&x262, &x263, x261, x202, x238);
13391     fiat_secp384r1_addcarryx_u32(&x264, &x265, x263, x204, x240);
13392     fiat_secp384r1_addcarryx_u32(&x266, &x267, x265, x206, x242);
13393     fiat_secp384r1_addcarryx_u32(&x268, &x269, x267, x208, x244);
13394     fiat_secp384r1_addcarryx_u32(&x270, &x271, x269, x210, x246);
13395     fiat_secp384r1_addcarryx_u32(&x272, &x273, x271, x212, x248);
13396     fiat_secp384r1_addcarryx_u32(&x274, &x275, x273, ((uint32_t)x213 + x189),
13397                                  (x249 + x215));
13398     fiat_secp384r1_addcarryx_u32(&x276, &x277, 0x0, x252, (arg1[4]));
13399     fiat_secp384r1_addcarryx_u32(&x278, &x279, x277, x254, 0x0);
13400     fiat_secp384r1_addcarryx_u32(&x280, &x281, x279, x256, 0x0);
13401     fiat_secp384r1_addcarryx_u32(&x282, &x283, x281, x258, 0x0);
13402     fiat_secp384r1_addcarryx_u32(&x284, &x285, x283, x260, 0x0);
13403     fiat_secp384r1_addcarryx_u32(&x286, &x287, x285, x262, 0x0);
13404     fiat_secp384r1_addcarryx_u32(&x288, &x289, x287, x264, 0x0);
13405     fiat_secp384r1_addcarryx_u32(&x290, &x291, x289, x266, 0x0);
13406     fiat_secp384r1_addcarryx_u32(&x292, &x293, x291, x268, 0x0);
13407     fiat_secp384r1_addcarryx_u32(&x294, &x295, x293, x270, 0x0);
13408     fiat_secp384r1_addcarryx_u32(&x296, &x297, x295, x272, 0x0);
13409     fiat_secp384r1_addcarryx_u32(&x298, &x299, x297, x274, 0x0);
13410     fiat_secp384r1_mulx_u32(&x300, &x301, x276, UINT32_C(0xffffffff));
13411     fiat_secp384r1_mulx_u32(&x302, &x303, x276, UINT32_C(0xffffffff));
13412     fiat_secp384r1_mulx_u32(&x304, &x305, x276, UINT32_C(0xffffffff));
13413     fiat_secp384r1_mulx_u32(&x306, &x307, x276, UINT32_C(0xffffffff));
13414     fiat_secp384r1_mulx_u32(&x308, &x309, x276, UINT32_C(0xffffffff));
13415     fiat_secp384r1_mulx_u32(&x310, &x311, x276, UINT32_C(0xffffffff));
13416     fiat_secp384r1_mulx_u32(&x312, &x313, x276, UINT32_C(0xffffffff));
13417     fiat_secp384r1_mulx_u32(&x314, &x315, x276, UINT32_C(0xfffffffe));
13418     fiat_secp384r1_mulx_u32(&x316, &x317, x276, UINT32_C(0xffffffff));
13419     fiat_secp384r1_mulx_u32(&x318, &x319, x276, UINT32_C(0xffffffff));
13420     fiat_secp384r1_addcarryx_u32(&x320, &x321, 0x0, x317, x314);
13421     fiat_secp384r1_addcarryx_u32(&x322, &x323, x321, x315, x312);
13422     fiat_secp384r1_addcarryx_u32(&x324, &x325, x323, x313, x310);
13423     fiat_secp384r1_addcarryx_u32(&x326, &x327, x325, x311, x308);
13424     fiat_secp384r1_addcarryx_u32(&x328, &x329, x327, x309, x306);
13425     fiat_secp384r1_addcarryx_u32(&x330, &x331, x329, x307, x304);
13426     fiat_secp384r1_addcarryx_u32(&x332, &x333, x331, x305, x302);
13427     fiat_secp384r1_addcarryx_u32(&x334, &x335, x333, x303, x300);
13428     fiat_secp384r1_addcarryx_u32(&x336, &x337, 0x0, x276, x318);
13429     fiat_secp384r1_addcarryx_u32(&x338, &x339, x337, x278, x319);
13430     fiat_secp384r1_addcarryx_u32(&x340, &x341, x339, x280, 0x0);
13431     fiat_secp384r1_addcarryx_u32(&x342, &x343, x341, x282, x316);
13432     fiat_secp384r1_addcarryx_u32(&x344, &x345, x343, x284, x320);
13433     fiat_secp384r1_addcarryx_u32(&x346, &x347, x345, x286, x322);
13434     fiat_secp384r1_addcarryx_u32(&x348, &x349, x347, x288, x324);
13435     fiat_secp384r1_addcarryx_u32(&x350, &x351, x349, x290, x326);
13436     fiat_secp384r1_addcarryx_u32(&x352, &x353, x351, x292, x328);
13437     fiat_secp384r1_addcarryx_u32(&x354, &x355, x353, x294, x330);
13438     fiat_secp384r1_addcarryx_u32(&x356, &x357, x355, x296, x332);
13439     fiat_secp384r1_addcarryx_u32(&x358, &x359, x357, x298, x334);
13440     fiat_secp384r1_addcarryx_u32(&x360, &x361, x359, ((uint32_t)x299 + x275),
13441                                  (x335 + x301));
13442     fiat_secp384r1_addcarryx_u32(&x362, &x363, 0x0, x338, (arg1[5]));
13443     fiat_secp384r1_addcarryx_u32(&x364, &x365, x363, x340, 0x0);
13444     fiat_secp384r1_addcarryx_u32(&x366, &x367, x365, x342, 0x0);
13445     fiat_secp384r1_addcarryx_u32(&x368, &x369, x367, x344, 0x0);
13446     fiat_secp384r1_addcarryx_u32(&x370, &x371, x369, x346, 0x0);
13447     fiat_secp384r1_addcarryx_u32(&x372, &x373, x371, x348, 0x0);
13448     fiat_secp384r1_addcarryx_u32(&x374, &x375, x373, x350, 0x0);
13449     fiat_secp384r1_addcarryx_u32(&x376, &x377, x375, x352, 0x0);
13450     fiat_secp384r1_addcarryx_u32(&x378, &x379, x377, x354, 0x0);
13451     fiat_secp384r1_addcarryx_u32(&x380, &x381, x379, x356, 0x0);
13452     fiat_secp384r1_addcarryx_u32(&x382, &x383, x381, x358, 0x0);
13453     fiat_secp384r1_addcarryx_u32(&x384, &x385, x383, x360, 0x0);
13454     fiat_secp384r1_mulx_u32(&x386, &x387, x362, UINT32_C(0xffffffff));
13455     fiat_secp384r1_mulx_u32(&x388, &x389, x362, UINT32_C(0xffffffff));
13456     fiat_secp384r1_mulx_u32(&x390, &x391, x362, UINT32_C(0xffffffff));
13457     fiat_secp384r1_mulx_u32(&x392, &x393, x362, UINT32_C(0xffffffff));
13458     fiat_secp384r1_mulx_u32(&x394, &x395, x362, UINT32_C(0xffffffff));
13459     fiat_secp384r1_mulx_u32(&x396, &x397, x362, UINT32_C(0xffffffff));
13460     fiat_secp384r1_mulx_u32(&x398, &x399, x362, UINT32_C(0xffffffff));
13461     fiat_secp384r1_mulx_u32(&x400, &x401, x362, UINT32_C(0xfffffffe));
13462     fiat_secp384r1_mulx_u32(&x402, &x403, x362, UINT32_C(0xffffffff));
13463     fiat_secp384r1_mulx_u32(&x404, &x405, x362, UINT32_C(0xffffffff));
13464     fiat_secp384r1_addcarryx_u32(&x406, &x407, 0x0, x403, x400);
13465     fiat_secp384r1_addcarryx_u32(&x408, &x409, x407, x401, x398);
13466     fiat_secp384r1_addcarryx_u32(&x410, &x411, x409, x399, x396);
13467     fiat_secp384r1_addcarryx_u32(&x412, &x413, x411, x397, x394);
13468     fiat_secp384r1_addcarryx_u32(&x414, &x415, x413, x395, x392);
13469     fiat_secp384r1_addcarryx_u32(&x416, &x417, x415, x393, x390);
13470     fiat_secp384r1_addcarryx_u32(&x418, &x419, x417, x391, x388);
13471     fiat_secp384r1_addcarryx_u32(&x420, &x421, x419, x389, x386);
13472     fiat_secp384r1_addcarryx_u32(&x422, &x423, 0x0, x362, x404);
13473     fiat_secp384r1_addcarryx_u32(&x424, &x425, x423, x364, x405);
13474     fiat_secp384r1_addcarryx_u32(&x426, &x427, x425, x366, 0x0);
13475     fiat_secp384r1_addcarryx_u32(&x428, &x429, x427, x368, x402);
13476     fiat_secp384r1_addcarryx_u32(&x430, &x431, x429, x370, x406);
13477     fiat_secp384r1_addcarryx_u32(&x432, &x433, x431, x372, x408);
13478     fiat_secp384r1_addcarryx_u32(&x434, &x435, x433, x374, x410);
13479     fiat_secp384r1_addcarryx_u32(&x436, &x437, x435, x376, x412);
13480     fiat_secp384r1_addcarryx_u32(&x438, &x439, x437, x378, x414);
13481     fiat_secp384r1_addcarryx_u32(&x440, &x441, x439, x380, x416);
13482     fiat_secp384r1_addcarryx_u32(&x442, &x443, x441, x382, x418);
13483     fiat_secp384r1_addcarryx_u32(&x444, &x445, x443, x384, x420);
13484     fiat_secp384r1_addcarryx_u32(&x446, &x447, x445, ((uint32_t)x385 + x361),
13485                                  (x421 + x387));
13486     fiat_secp384r1_addcarryx_u32(&x448, &x449, 0x0, x424, (arg1[6]));
13487     fiat_secp384r1_addcarryx_u32(&x450, &x451, x449, x426, 0x0);
13488     fiat_secp384r1_addcarryx_u32(&x452, &x453, x451, x428, 0x0);
13489     fiat_secp384r1_addcarryx_u32(&x454, &x455, x453, x430, 0x0);
13490     fiat_secp384r1_addcarryx_u32(&x456, &x457, x455, x432, 0x0);
13491     fiat_secp384r1_addcarryx_u32(&x458, &x459, x457, x434, 0x0);
13492     fiat_secp384r1_addcarryx_u32(&x460, &x461, x459, x436, 0x0);
13493     fiat_secp384r1_addcarryx_u32(&x462, &x463, x461, x438, 0x0);
13494     fiat_secp384r1_addcarryx_u32(&x464, &x465, x463, x440, 0x0);
13495     fiat_secp384r1_addcarryx_u32(&x466, &x467, x465, x442, 0x0);
13496     fiat_secp384r1_addcarryx_u32(&x468, &x469, x467, x444, 0x0);
13497     fiat_secp384r1_addcarryx_u32(&x470, &x471, x469, x446, 0x0);
13498     fiat_secp384r1_mulx_u32(&x472, &x473, x448, UINT32_C(0xffffffff));
13499     fiat_secp384r1_mulx_u32(&x474, &x475, x448, UINT32_C(0xffffffff));
13500     fiat_secp384r1_mulx_u32(&x476, &x477, x448, UINT32_C(0xffffffff));
13501     fiat_secp384r1_mulx_u32(&x478, &x479, x448, UINT32_C(0xffffffff));
13502     fiat_secp384r1_mulx_u32(&x480, &x481, x448, UINT32_C(0xffffffff));
13503     fiat_secp384r1_mulx_u32(&x482, &x483, x448, UINT32_C(0xffffffff));
13504     fiat_secp384r1_mulx_u32(&x484, &x485, x448, UINT32_C(0xffffffff));
13505     fiat_secp384r1_mulx_u32(&x486, &x487, x448, UINT32_C(0xfffffffe));
13506     fiat_secp384r1_mulx_u32(&x488, &x489, x448, UINT32_C(0xffffffff));
13507     fiat_secp384r1_mulx_u32(&x490, &x491, x448, UINT32_C(0xffffffff));
13508     fiat_secp384r1_addcarryx_u32(&x492, &x493, 0x0, x489, x486);
13509     fiat_secp384r1_addcarryx_u32(&x494, &x495, x493, x487, x484);
13510     fiat_secp384r1_addcarryx_u32(&x496, &x497, x495, x485, x482);
13511     fiat_secp384r1_addcarryx_u32(&x498, &x499, x497, x483, x480);
13512     fiat_secp384r1_addcarryx_u32(&x500, &x501, x499, x481, x478);
13513     fiat_secp384r1_addcarryx_u32(&x502, &x503, x501, x479, x476);
13514     fiat_secp384r1_addcarryx_u32(&x504, &x505, x503, x477, x474);
13515     fiat_secp384r1_addcarryx_u32(&x506, &x507, x505, x475, x472);
13516     fiat_secp384r1_addcarryx_u32(&x508, &x509, 0x0, x448, x490);
13517     fiat_secp384r1_addcarryx_u32(&x510, &x511, x509, x450, x491);
13518     fiat_secp384r1_addcarryx_u32(&x512, &x513, x511, x452, 0x0);
13519     fiat_secp384r1_addcarryx_u32(&x514, &x515, x513, x454, x488);
13520     fiat_secp384r1_addcarryx_u32(&x516, &x517, x515, x456, x492);
13521     fiat_secp384r1_addcarryx_u32(&x518, &x519, x517, x458, x494);
13522     fiat_secp384r1_addcarryx_u32(&x520, &x521, x519, x460, x496);
13523     fiat_secp384r1_addcarryx_u32(&x522, &x523, x521, x462, x498);
13524     fiat_secp384r1_addcarryx_u32(&x524, &x525, x523, x464, x500);
13525     fiat_secp384r1_addcarryx_u32(&x526, &x527, x525, x466, x502);
13526     fiat_secp384r1_addcarryx_u32(&x528, &x529, x527, x468, x504);
13527     fiat_secp384r1_addcarryx_u32(&x530, &x531, x529, x470, x506);
13528     fiat_secp384r1_addcarryx_u32(&x532, &x533, x531, ((uint32_t)x471 + x447),
13529                                  (x507 + x473));
13530     fiat_secp384r1_addcarryx_u32(&x534, &x535, 0x0, x510, (arg1[7]));
13531     fiat_secp384r1_addcarryx_u32(&x536, &x537, x535, x512, 0x0);
13532     fiat_secp384r1_addcarryx_u32(&x538, &x539, x537, x514, 0x0);
13533     fiat_secp384r1_addcarryx_u32(&x540, &x541, x539, x516, 0x0);
13534     fiat_secp384r1_addcarryx_u32(&x542, &x543, x541, x518, 0x0);
13535     fiat_secp384r1_addcarryx_u32(&x544, &x545, x543, x520, 0x0);
13536     fiat_secp384r1_addcarryx_u32(&x546, &x547, x545, x522, 0x0);
13537     fiat_secp384r1_addcarryx_u32(&x548, &x549, x547, x524, 0x0);
13538     fiat_secp384r1_addcarryx_u32(&x550, &x551, x549, x526, 0x0);
13539     fiat_secp384r1_addcarryx_u32(&x552, &x553, x551, x528, 0x0);
13540     fiat_secp384r1_addcarryx_u32(&x554, &x555, x553, x530, 0x0);
13541     fiat_secp384r1_addcarryx_u32(&x556, &x557, x555, x532, 0x0);
13542     fiat_secp384r1_mulx_u32(&x558, &x559, x534, UINT32_C(0xffffffff));
13543     fiat_secp384r1_mulx_u32(&x560, &x561, x534, UINT32_C(0xffffffff));
13544     fiat_secp384r1_mulx_u32(&x562, &x563, x534, UINT32_C(0xffffffff));
13545     fiat_secp384r1_mulx_u32(&x564, &x565, x534, UINT32_C(0xffffffff));
13546     fiat_secp384r1_mulx_u32(&x566, &x567, x534, UINT32_C(0xffffffff));
13547     fiat_secp384r1_mulx_u32(&x568, &x569, x534, UINT32_C(0xffffffff));
13548     fiat_secp384r1_mulx_u32(&x570, &x571, x534, UINT32_C(0xffffffff));
13549     fiat_secp384r1_mulx_u32(&x572, &x573, x534, UINT32_C(0xfffffffe));
13550     fiat_secp384r1_mulx_u32(&x574, &x575, x534, UINT32_C(0xffffffff));
13551     fiat_secp384r1_mulx_u32(&x576, &x577, x534, UINT32_C(0xffffffff));
13552     fiat_secp384r1_addcarryx_u32(&x578, &x579, 0x0, x575, x572);
13553     fiat_secp384r1_addcarryx_u32(&x580, &x581, x579, x573, x570);
13554     fiat_secp384r1_addcarryx_u32(&x582, &x583, x581, x571, x568);
13555     fiat_secp384r1_addcarryx_u32(&x584, &x585, x583, x569, x566);
13556     fiat_secp384r1_addcarryx_u32(&x586, &x587, x585, x567, x564);
13557     fiat_secp384r1_addcarryx_u32(&x588, &x589, x587, x565, x562);
13558     fiat_secp384r1_addcarryx_u32(&x590, &x591, x589, x563, x560);
13559     fiat_secp384r1_addcarryx_u32(&x592, &x593, x591, x561, x558);
13560     fiat_secp384r1_addcarryx_u32(&x594, &x595, 0x0, x534, x576);
13561     fiat_secp384r1_addcarryx_u32(&x596, &x597, x595, x536, x577);
13562     fiat_secp384r1_addcarryx_u32(&x598, &x599, x597, x538, 0x0);
13563     fiat_secp384r1_addcarryx_u32(&x600, &x601, x599, x540, x574);
13564     fiat_secp384r1_addcarryx_u32(&x602, &x603, x601, x542, x578);
13565     fiat_secp384r1_addcarryx_u32(&x604, &x605, x603, x544, x580);
13566     fiat_secp384r1_addcarryx_u32(&x606, &x607, x605, x546, x582);
13567     fiat_secp384r1_addcarryx_u32(&x608, &x609, x607, x548, x584);
13568     fiat_secp384r1_addcarryx_u32(&x610, &x611, x609, x550, x586);
13569     fiat_secp384r1_addcarryx_u32(&x612, &x613, x611, x552, x588);
13570     fiat_secp384r1_addcarryx_u32(&x614, &x615, x613, x554, x590);
13571     fiat_secp384r1_addcarryx_u32(&x616, &x617, x615, x556, x592);
13572     fiat_secp384r1_addcarryx_u32(&x618, &x619, x617, ((uint32_t)x557 + x533),
13573                                  (x593 + x559));
13574     fiat_secp384r1_addcarryx_u32(&x620, &x621, 0x0, x596, (arg1[8]));
13575     fiat_secp384r1_addcarryx_u32(&x622, &x623, x621, x598, 0x0);
13576     fiat_secp384r1_addcarryx_u32(&x624, &x625, x623, x600, 0x0);
13577     fiat_secp384r1_addcarryx_u32(&x626, &x627, x625, x602, 0x0);
13578     fiat_secp384r1_addcarryx_u32(&x628, &x629, x627, x604, 0x0);
13579     fiat_secp384r1_addcarryx_u32(&x630, &x631, x629, x606, 0x0);
13580     fiat_secp384r1_addcarryx_u32(&x632, &x633, x631, x608, 0x0);
13581     fiat_secp384r1_addcarryx_u32(&x634, &x635, x633, x610, 0x0);
13582     fiat_secp384r1_addcarryx_u32(&x636, &x637, x635, x612, 0x0);
13583     fiat_secp384r1_addcarryx_u32(&x638, &x639, x637, x614, 0x0);
13584     fiat_secp384r1_addcarryx_u32(&x640, &x641, x639, x616, 0x0);
13585     fiat_secp384r1_addcarryx_u32(&x642, &x643, x641, x618, 0x0);
13586     fiat_secp384r1_mulx_u32(&x644, &x645, x620, UINT32_C(0xffffffff));
13587     fiat_secp384r1_mulx_u32(&x646, &x647, x620, UINT32_C(0xffffffff));
13588     fiat_secp384r1_mulx_u32(&x648, &x649, x620, UINT32_C(0xffffffff));
13589     fiat_secp384r1_mulx_u32(&x650, &x651, x620, UINT32_C(0xffffffff));
13590     fiat_secp384r1_mulx_u32(&x652, &x653, x620, UINT32_C(0xffffffff));
13591     fiat_secp384r1_mulx_u32(&x654, &x655, x620, UINT32_C(0xffffffff));
13592     fiat_secp384r1_mulx_u32(&x656, &x657, x620, UINT32_C(0xffffffff));
13593     fiat_secp384r1_mulx_u32(&x658, &x659, x620, UINT32_C(0xfffffffe));
13594     fiat_secp384r1_mulx_u32(&x660, &x661, x620, UINT32_C(0xffffffff));
13595     fiat_secp384r1_mulx_u32(&x662, &x663, x620, UINT32_C(0xffffffff));
13596     fiat_secp384r1_addcarryx_u32(&x664, &x665, 0x0, x661, x658);
13597     fiat_secp384r1_addcarryx_u32(&x666, &x667, x665, x659, x656);
13598     fiat_secp384r1_addcarryx_u32(&x668, &x669, x667, x657, x654);
13599     fiat_secp384r1_addcarryx_u32(&x670, &x671, x669, x655, x652);
13600     fiat_secp384r1_addcarryx_u32(&x672, &x673, x671, x653, x650);
13601     fiat_secp384r1_addcarryx_u32(&x674, &x675, x673, x651, x648);
13602     fiat_secp384r1_addcarryx_u32(&x676, &x677, x675, x649, x646);
13603     fiat_secp384r1_addcarryx_u32(&x678, &x679, x677, x647, x644);
13604     fiat_secp384r1_addcarryx_u32(&x680, &x681, 0x0, x620, x662);
13605     fiat_secp384r1_addcarryx_u32(&x682, &x683, x681, x622, x663);
13606     fiat_secp384r1_addcarryx_u32(&x684, &x685, x683, x624, 0x0);
13607     fiat_secp384r1_addcarryx_u32(&x686, &x687, x685, x626, x660);
13608     fiat_secp384r1_addcarryx_u32(&x688, &x689, x687, x628, x664);
13609     fiat_secp384r1_addcarryx_u32(&x690, &x691, x689, x630, x666);
13610     fiat_secp384r1_addcarryx_u32(&x692, &x693, x691, x632, x668);
13611     fiat_secp384r1_addcarryx_u32(&x694, &x695, x693, x634, x670);
13612     fiat_secp384r1_addcarryx_u32(&x696, &x697, x695, x636, x672);
13613     fiat_secp384r1_addcarryx_u32(&x698, &x699, x697, x638, x674);
13614     fiat_secp384r1_addcarryx_u32(&x700, &x701, x699, x640, x676);
13615     fiat_secp384r1_addcarryx_u32(&x702, &x703, x701, x642, x678);
13616     fiat_secp384r1_addcarryx_u32(&x704, &x705, x703, ((uint32_t)x643 + x619),
13617                                  (x679 + x645));
13618     fiat_secp384r1_addcarryx_u32(&x706, &x707, 0x0, x682, (arg1[9]));
13619     fiat_secp384r1_addcarryx_u32(&x708, &x709, x707, x684, 0x0);
13620     fiat_secp384r1_addcarryx_u32(&x710, &x711, x709, x686, 0x0);
13621     fiat_secp384r1_addcarryx_u32(&x712, &x713, x711, x688, 0x0);
13622     fiat_secp384r1_addcarryx_u32(&x714, &x715, x713, x690, 0x0);
13623     fiat_secp384r1_addcarryx_u32(&x716, &x717, x715, x692, 0x0);
13624     fiat_secp384r1_addcarryx_u32(&x718, &x719, x717, x694, 0x0);
13625     fiat_secp384r1_addcarryx_u32(&x720, &x721, x719, x696, 0x0);
13626     fiat_secp384r1_addcarryx_u32(&x722, &x723, x721, x698, 0x0);
13627     fiat_secp384r1_addcarryx_u32(&x724, &x725, x723, x700, 0x0);
13628     fiat_secp384r1_addcarryx_u32(&x726, &x727, x725, x702, 0x0);
13629     fiat_secp384r1_addcarryx_u32(&x728, &x729, x727, x704, 0x0);
13630     fiat_secp384r1_mulx_u32(&x730, &x731, x706, UINT32_C(0xffffffff));
13631     fiat_secp384r1_mulx_u32(&x732, &x733, x706, UINT32_C(0xffffffff));
13632     fiat_secp384r1_mulx_u32(&x734, &x735, x706, UINT32_C(0xffffffff));
13633     fiat_secp384r1_mulx_u32(&x736, &x737, x706, UINT32_C(0xffffffff));
13634     fiat_secp384r1_mulx_u32(&x738, &x739, x706, UINT32_C(0xffffffff));
13635     fiat_secp384r1_mulx_u32(&x740, &x741, x706, UINT32_C(0xffffffff));
13636     fiat_secp384r1_mulx_u32(&x742, &x743, x706, UINT32_C(0xffffffff));
13637     fiat_secp384r1_mulx_u32(&x744, &x745, x706, UINT32_C(0xfffffffe));
13638     fiat_secp384r1_mulx_u32(&x746, &x747, x706, UINT32_C(0xffffffff));
13639     fiat_secp384r1_mulx_u32(&x748, &x749, x706, UINT32_C(0xffffffff));
13640     fiat_secp384r1_addcarryx_u32(&x750, &x751, 0x0, x747, x744);
13641     fiat_secp384r1_addcarryx_u32(&x752, &x753, x751, x745, x742);
13642     fiat_secp384r1_addcarryx_u32(&x754, &x755, x753, x743, x740);
13643     fiat_secp384r1_addcarryx_u32(&x756, &x757, x755, x741, x738);
13644     fiat_secp384r1_addcarryx_u32(&x758, &x759, x757, x739, x736);
13645     fiat_secp384r1_addcarryx_u32(&x760, &x761, x759, x737, x734);
13646     fiat_secp384r1_addcarryx_u32(&x762, &x763, x761, x735, x732);
13647     fiat_secp384r1_addcarryx_u32(&x764, &x765, x763, x733, x730);
13648     fiat_secp384r1_addcarryx_u32(&x766, &x767, 0x0, x706, x748);
13649     fiat_secp384r1_addcarryx_u32(&x768, &x769, x767, x708, x749);
13650     fiat_secp384r1_addcarryx_u32(&x770, &x771, x769, x710, 0x0);
13651     fiat_secp384r1_addcarryx_u32(&x772, &x773, x771, x712, x746);
13652     fiat_secp384r1_addcarryx_u32(&x774, &x775, x773, x714, x750);
13653     fiat_secp384r1_addcarryx_u32(&x776, &x777, x775, x716, x752);
13654     fiat_secp384r1_addcarryx_u32(&x778, &x779, x777, x718, x754);
13655     fiat_secp384r1_addcarryx_u32(&x780, &x781, x779, x720, x756);
13656     fiat_secp384r1_addcarryx_u32(&x782, &x783, x781, x722, x758);
13657     fiat_secp384r1_addcarryx_u32(&x784, &x785, x783, x724, x760);
13658     fiat_secp384r1_addcarryx_u32(&x786, &x787, x785, x726, x762);
13659     fiat_secp384r1_addcarryx_u32(&x788, &x789, x787, x728, x764);
13660     fiat_secp384r1_addcarryx_u32(&x790, &x791, x789, ((uint32_t)x729 + x705),
13661                                  (x765 + x731));
13662     fiat_secp384r1_addcarryx_u32(&x792, &x793, 0x0, x768, (arg1[10]));
13663     fiat_secp384r1_addcarryx_u32(&x794, &x795, x793, x770, 0x0);
13664     fiat_secp384r1_addcarryx_u32(&x796, &x797, x795, x772, 0x0);
13665     fiat_secp384r1_addcarryx_u32(&x798, &x799, x797, x774, 0x0);
13666     fiat_secp384r1_addcarryx_u32(&x800, &x801, x799, x776, 0x0);
13667     fiat_secp384r1_addcarryx_u32(&x802, &x803, x801, x778, 0x0);
13668     fiat_secp384r1_addcarryx_u32(&x804, &x805, x803, x780, 0x0);
13669     fiat_secp384r1_addcarryx_u32(&x806, &x807, x805, x782, 0x0);
13670     fiat_secp384r1_addcarryx_u32(&x808, &x809, x807, x784, 0x0);
13671     fiat_secp384r1_addcarryx_u32(&x810, &x811, x809, x786, 0x0);
13672     fiat_secp384r1_addcarryx_u32(&x812, &x813, x811, x788, 0x0);
13673     fiat_secp384r1_addcarryx_u32(&x814, &x815, x813, x790, 0x0);
13674     fiat_secp384r1_mulx_u32(&x816, &x817, x792, UINT32_C(0xffffffff));
13675     fiat_secp384r1_mulx_u32(&x818, &x819, x792, UINT32_C(0xffffffff));
13676     fiat_secp384r1_mulx_u32(&x820, &x821, x792, UINT32_C(0xffffffff));
13677     fiat_secp384r1_mulx_u32(&x822, &x823, x792, UINT32_C(0xffffffff));
13678     fiat_secp384r1_mulx_u32(&x824, &x825, x792, UINT32_C(0xffffffff));
13679     fiat_secp384r1_mulx_u32(&x826, &x827, x792, UINT32_C(0xffffffff));
13680     fiat_secp384r1_mulx_u32(&x828, &x829, x792, UINT32_C(0xffffffff));
13681     fiat_secp384r1_mulx_u32(&x830, &x831, x792, UINT32_C(0xfffffffe));
13682     fiat_secp384r1_mulx_u32(&x832, &x833, x792, UINT32_C(0xffffffff));
13683     fiat_secp384r1_mulx_u32(&x834, &x835, x792, UINT32_C(0xffffffff));
13684     fiat_secp384r1_addcarryx_u32(&x836, &x837, 0x0, x833, x830);
13685     fiat_secp384r1_addcarryx_u32(&x838, &x839, x837, x831, x828);
13686     fiat_secp384r1_addcarryx_u32(&x840, &x841, x839, x829, x826);
13687     fiat_secp384r1_addcarryx_u32(&x842, &x843, x841, x827, x824);
13688     fiat_secp384r1_addcarryx_u32(&x844, &x845, x843, x825, x822);
13689     fiat_secp384r1_addcarryx_u32(&x846, &x847, x845, x823, x820);
13690     fiat_secp384r1_addcarryx_u32(&x848, &x849, x847, x821, x818);
13691     fiat_secp384r1_addcarryx_u32(&x850, &x851, x849, x819, x816);
13692     fiat_secp384r1_addcarryx_u32(&x852, &x853, 0x0, x792, x834);
13693     fiat_secp384r1_addcarryx_u32(&x854, &x855, x853, x794, x835);
13694     fiat_secp384r1_addcarryx_u32(&x856, &x857, x855, x796, 0x0);
13695     fiat_secp384r1_addcarryx_u32(&x858, &x859, x857, x798, x832);
13696     fiat_secp384r1_addcarryx_u32(&x860, &x861, x859, x800, x836);
13697     fiat_secp384r1_addcarryx_u32(&x862, &x863, x861, x802, x838);
13698     fiat_secp384r1_addcarryx_u32(&x864, &x865, x863, x804, x840);
13699     fiat_secp384r1_addcarryx_u32(&x866, &x867, x865, x806, x842);
13700     fiat_secp384r1_addcarryx_u32(&x868, &x869, x867, x808, x844);
13701     fiat_secp384r1_addcarryx_u32(&x870, &x871, x869, x810, x846);
13702     fiat_secp384r1_addcarryx_u32(&x872, &x873, x871, x812, x848);
13703     fiat_secp384r1_addcarryx_u32(&x874, &x875, x873, x814, x850);
13704     fiat_secp384r1_addcarryx_u32(&x876, &x877, x875, ((uint32_t)x815 + x791),
13705                                  (x851 + x817));
13706     fiat_secp384r1_addcarryx_u32(&x878, &x879, 0x0, x854, (arg1[11]));
13707     fiat_secp384r1_addcarryx_u32(&x880, &x881, x879, x856, 0x0);
13708     fiat_secp384r1_addcarryx_u32(&x882, &x883, x881, x858, 0x0);
13709     fiat_secp384r1_addcarryx_u32(&x884, &x885, x883, x860, 0x0);
13710     fiat_secp384r1_addcarryx_u32(&x886, &x887, x885, x862, 0x0);
13711     fiat_secp384r1_addcarryx_u32(&x888, &x889, x887, x864, 0x0);
13712     fiat_secp384r1_addcarryx_u32(&x890, &x891, x889, x866, 0x0);
13713     fiat_secp384r1_addcarryx_u32(&x892, &x893, x891, x868, 0x0);
13714     fiat_secp384r1_addcarryx_u32(&x894, &x895, x893, x870, 0x0);
13715     fiat_secp384r1_addcarryx_u32(&x896, &x897, x895, x872, 0x0);
13716     fiat_secp384r1_addcarryx_u32(&x898, &x899, x897, x874, 0x0);
13717     fiat_secp384r1_addcarryx_u32(&x900, &x901, x899, x876, 0x0);
13718     fiat_secp384r1_mulx_u32(&x902, &x903, x878, UINT32_C(0xffffffff));
13719     fiat_secp384r1_mulx_u32(&x904, &x905, x878, UINT32_C(0xffffffff));
13720     fiat_secp384r1_mulx_u32(&x906, &x907, x878, UINT32_C(0xffffffff));
13721     fiat_secp384r1_mulx_u32(&x908, &x909, x878, UINT32_C(0xffffffff));
13722     fiat_secp384r1_mulx_u32(&x910, &x911, x878, UINT32_C(0xffffffff));
13723     fiat_secp384r1_mulx_u32(&x912, &x913, x878, UINT32_C(0xffffffff));
13724     fiat_secp384r1_mulx_u32(&x914, &x915, x878, UINT32_C(0xffffffff));
13725     fiat_secp384r1_mulx_u32(&x916, &x917, x878, UINT32_C(0xfffffffe));
13726     fiat_secp384r1_mulx_u32(&x918, &x919, x878, UINT32_C(0xffffffff));
13727     fiat_secp384r1_mulx_u32(&x920, &x921, x878, UINT32_C(0xffffffff));
13728     fiat_secp384r1_addcarryx_u32(&x922, &x923, 0x0, x919, x916);
13729     fiat_secp384r1_addcarryx_u32(&x924, &x925, x923, x917, x914);
13730     fiat_secp384r1_addcarryx_u32(&x926, &x927, x925, x915, x912);
13731     fiat_secp384r1_addcarryx_u32(&x928, &x929, x927, x913, x910);
13732     fiat_secp384r1_addcarryx_u32(&x930, &x931, x929, x911, x908);
13733     fiat_secp384r1_addcarryx_u32(&x932, &x933, x931, x909, x906);
13734     fiat_secp384r1_addcarryx_u32(&x934, &x935, x933, x907, x904);
13735     fiat_secp384r1_addcarryx_u32(&x936, &x937, x935, x905, x902);
13736     fiat_secp384r1_addcarryx_u32(&x938, &x939, 0x0, x878, x920);
13737     fiat_secp384r1_addcarryx_u32(&x940, &x941, x939, x880, x921);
13738     fiat_secp384r1_addcarryx_u32(&x942, &x943, x941, x882, 0x0);
13739     fiat_secp384r1_addcarryx_u32(&x944, &x945, x943, x884, x918);
13740     fiat_secp384r1_addcarryx_u32(&x946, &x947, x945, x886, x922);
13741     fiat_secp384r1_addcarryx_u32(&x948, &x949, x947, x888, x924);
13742     fiat_secp384r1_addcarryx_u32(&x950, &x951, x949, x890, x926);
13743     fiat_secp384r1_addcarryx_u32(&x952, &x953, x951, x892, x928);
13744     fiat_secp384r1_addcarryx_u32(&x954, &x955, x953, x894, x930);
13745     fiat_secp384r1_addcarryx_u32(&x956, &x957, x955, x896, x932);
13746     fiat_secp384r1_addcarryx_u32(&x958, &x959, x957, x898, x934);
13747     fiat_secp384r1_addcarryx_u32(&x960, &x961, x959, x900, x936);
13748     fiat_secp384r1_addcarryx_u32(&x962, &x963, x961, ((uint32_t)x901 + x877),
13749                                  (x937 + x903));
13750     fiat_secp384r1_subborrowx_u32(&x964, &x965, 0x0, x940,
13751                                   UINT32_C(0xffffffff));
13752     fiat_secp384r1_subborrowx_u32(&x966, &x967, x965, x942, 0x0);
13753     fiat_secp384r1_subborrowx_u32(&x968, &x969, x967, x944, 0x0);
13754     fiat_secp384r1_subborrowx_u32(&x970, &x971, x969, x946,
13755                                   UINT32_C(0xffffffff));
13756     fiat_secp384r1_subborrowx_u32(&x972, &x973, x971, x948,
13757                                   UINT32_C(0xfffffffe));
13758     fiat_secp384r1_subborrowx_u32(&x974, &x975, x973, x950,
13759                                   UINT32_C(0xffffffff));
13760     fiat_secp384r1_subborrowx_u32(&x976, &x977, x975, x952,
13761                                   UINT32_C(0xffffffff));
13762     fiat_secp384r1_subborrowx_u32(&x978, &x979, x977, x954,
13763                                   UINT32_C(0xffffffff));
13764     fiat_secp384r1_subborrowx_u32(&x980, &x981, x979, x956,
13765                                   UINT32_C(0xffffffff));
13766     fiat_secp384r1_subborrowx_u32(&x982, &x983, x981, x958,
13767                                   UINT32_C(0xffffffff));
13768     fiat_secp384r1_subborrowx_u32(&x984, &x985, x983, x960,
13769                                   UINT32_C(0xffffffff));
13770     fiat_secp384r1_subborrowx_u32(&x986, &x987, x985, x962,
13771                                   UINT32_C(0xffffffff));
13772     fiat_secp384r1_subborrowx_u32(&x988, &x989, x987, x963, 0x0);
13773     fiat_secp384r1_cmovznz_u32(&x990, x989, x964, x940);
13774     fiat_secp384r1_cmovznz_u32(&x991, x989, x966, x942);
13775     fiat_secp384r1_cmovznz_u32(&x992, x989, x968, x944);
13776     fiat_secp384r1_cmovznz_u32(&x993, x989, x970, x946);
13777     fiat_secp384r1_cmovznz_u32(&x994, x989, x972, x948);
13778     fiat_secp384r1_cmovznz_u32(&x995, x989, x974, x950);
13779     fiat_secp384r1_cmovznz_u32(&x996, x989, x976, x952);
13780     fiat_secp384r1_cmovznz_u32(&x997, x989, x978, x954);
13781     fiat_secp384r1_cmovznz_u32(&x998, x989, x980, x956);
13782     fiat_secp384r1_cmovznz_u32(&x999, x989, x982, x958);
13783     fiat_secp384r1_cmovznz_u32(&x1000, x989, x984, x960);
13784     fiat_secp384r1_cmovznz_u32(&x1001, x989, x986, x962);
13785     out1[0] = x990;
13786     out1[1] = x991;
13787     out1[2] = x992;
13788     out1[3] = x993;
13789     out1[4] = x994;
13790     out1[5] = x995;
13791     out1[6] = x996;
13792     out1[7] = x997;
13793     out1[8] = x998;
13794     out1[9] = x999;
13795     out1[10] = x1000;
13796     out1[11] = x1001;
13797 }
13798 
13799 /*
13800  * The function fiat_secp384r1_to_montgomery translates a field element into the Montgomery domain.
13801  * Preconditions:
13802  *   0 ≤ eval arg1 < m
13803  * Postconditions:
13804  *   eval (from_montgomery out1) mod m = eval arg1 mod m
13805  *   0 ≤ eval out1 < m
13806  *
13807  * Input Bounds:
13808  *   arg1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
13809  * Output Bounds:
13810  *   out1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
13811  */
13812 static void
fiat_secp384r1_to_montgomery(uint32_t out1[12],const uint32_t arg1[12])13813 fiat_secp384r1_to_montgomery(uint32_t out1[12],
13814                              const uint32_t arg1[12])
13815 {
13816     uint32_t x1;
13817     uint32_t x2;
13818     uint32_t x3;
13819     uint32_t x4;
13820     uint32_t x5;
13821     uint32_t x6;
13822     uint32_t x7;
13823     uint32_t x8;
13824     uint32_t x9;
13825     uint32_t x10;
13826     uint32_t x11;
13827     uint32_t x12;
13828     uint32_t x13;
13829     uint32_t x14;
13830     uint32_t x15;
13831     uint32_t x16;
13832     uint32_t x17;
13833     uint32_t x18;
13834     uint32_t x19;
13835     uint32_t x20;
13836     uint32_t x21;
13837     fiat_secp384r1_uint1 x22;
13838     uint32_t x23;
13839     uint32_t x24;
13840     uint32_t x25;
13841     uint32_t x26;
13842     uint32_t x27;
13843     uint32_t x28;
13844     uint32_t x29;
13845     uint32_t x30;
13846     uint32_t x31;
13847     uint32_t x32;
13848     uint32_t x33;
13849     uint32_t x34;
13850     uint32_t x35;
13851     uint32_t x36;
13852     uint32_t x37;
13853     uint32_t x38;
13854     uint32_t x39;
13855     uint32_t x40;
13856     uint32_t x41;
13857     uint32_t x42;
13858     uint32_t x43;
13859     fiat_secp384r1_uint1 x44;
13860     uint32_t x45;
13861     fiat_secp384r1_uint1 x46;
13862     uint32_t x47;
13863     fiat_secp384r1_uint1 x48;
13864     uint32_t x49;
13865     fiat_secp384r1_uint1 x50;
13866     uint32_t x51;
13867     fiat_secp384r1_uint1 x52;
13868     uint32_t x53;
13869     fiat_secp384r1_uint1 x54;
13870     uint32_t x55;
13871     fiat_secp384r1_uint1 x56;
13872     uint32_t x57;
13873     fiat_secp384r1_uint1 x58;
13874     uint32_t x59;
13875     fiat_secp384r1_uint1 x60;
13876     uint32_t x61;
13877     fiat_secp384r1_uint1 x62;
13878     uint32_t x63;
13879     fiat_secp384r1_uint1 x64;
13880     uint32_t x65;
13881     fiat_secp384r1_uint1 x66;
13882     uint32_t x67;
13883     fiat_secp384r1_uint1 x68;
13884     uint32_t x69;
13885     fiat_secp384r1_uint1 x70;
13886     uint32_t x71;
13887     fiat_secp384r1_uint1 x72;
13888     uint32_t x73;
13889     fiat_secp384r1_uint1 x74;
13890     uint32_t x75;
13891     fiat_secp384r1_uint1 x76;
13892     uint32_t x77;
13893     fiat_secp384r1_uint1 x78;
13894     uint32_t x79;
13895     fiat_secp384r1_uint1 x80;
13896     uint32_t x81;
13897     fiat_secp384r1_uint1 x82;
13898     uint32_t x83;
13899     uint32_t x84;
13900     uint32_t x85;
13901     uint32_t x86;
13902     uint32_t x87;
13903     uint32_t x88;
13904     uint32_t x89;
13905     uint32_t x90;
13906     uint32_t x91;
13907     fiat_secp384r1_uint1 x92;
13908     uint32_t x93;
13909     fiat_secp384r1_uint1 x94;
13910     uint32_t x95;
13911     fiat_secp384r1_uint1 x96;
13912     uint32_t x97;
13913     fiat_secp384r1_uint1 x98;
13914     uint32_t x99;
13915     fiat_secp384r1_uint1 x100;
13916     uint32_t x101;
13917     fiat_secp384r1_uint1 x102;
13918     uint32_t x103;
13919     fiat_secp384r1_uint1 x104;
13920     uint32_t x105;
13921     fiat_secp384r1_uint1 x106;
13922     uint32_t x107;
13923     fiat_secp384r1_uint1 x108;
13924     uint32_t x109;
13925     fiat_secp384r1_uint1 x110;
13926     uint32_t x111;
13927     fiat_secp384r1_uint1 x112;
13928     uint32_t x113;
13929     fiat_secp384r1_uint1 x114;
13930     uint32_t x115;
13931     fiat_secp384r1_uint1 x116;
13932     uint32_t x117;
13933     uint32_t x118;
13934     uint32_t x119;
13935     uint32_t x120;
13936     uint32_t x121;
13937     uint32_t x122;
13938     uint32_t x123;
13939     uint32_t x124;
13940     uint32_t x125;
13941     uint32_t x126;
13942     uint32_t x127;
13943     uint32_t x128;
13944     uint32_t x129;
13945     uint32_t x130;
13946     uint32_t x131;
13947     uint32_t x132;
13948     uint32_t x133;
13949     uint32_t x134;
13950     uint32_t x135;
13951     uint32_t x136;
13952     uint32_t x137;
13953     fiat_secp384r1_uint1 x138;
13954     uint32_t x139;
13955     fiat_secp384r1_uint1 x140;
13956     uint32_t x141;
13957     fiat_secp384r1_uint1 x142;
13958     uint32_t x143;
13959     fiat_secp384r1_uint1 x144;
13960     uint32_t x145;
13961     fiat_secp384r1_uint1 x146;
13962     uint32_t x147;
13963     fiat_secp384r1_uint1 x148;
13964     uint32_t x149;
13965     fiat_secp384r1_uint1 x150;
13966     uint32_t x151;
13967     fiat_secp384r1_uint1 x152;
13968     uint32_t x153;
13969     fiat_secp384r1_uint1 x154;
13970     uint32_t x155;
13971     fiat_secp384r1_uint1 x156;
13972     uint32_t x157;
13973     fiat_secp384r1_uint1 x158;
13974     uint32_t x159;
13975     fiat_secp384r1_uint1 x160;
13976     uint32_t x161;
13977     fiat_secp384r1_uint1 x162;
13978     uint32_t x163;
13979     fiat_secp384r1_uint1 x164;
13980     uint32_t x165;
13981     fiat_secp384r1_uint1 x166;
13982     uint32_t x167;
13983     fiat_secp384r1_uint1 x168;
13984     uint32_t x169;
13985     fiat_secp384r1_uint1 x170;
13986     uint32_t x171;
13987     fiat_secp384r1_uint1 x172;
13988     uint32_t x173;
13989     fiat_secp384r1_uint1 x174;
13990     uint32_t x175;
13991     fiat_secp384r1_uint1 x176;
13992     uint32_t x177;
13993     fiat_secp384r1_uint1 x178;
13994     uint32_t x179;
13995     uint32_t x180;
13996     uint32_t x181;
13997     uint32_t x182;
13998     uint32_t x183;
13999     uint32_t x184;
14000     uint32_t x185;
14001     uint32_t x186;
14002     uint32_t x187;
14003     fiat_secp384r1_uint1 x188;
14004     uint32_t x189;
14005     fiat_secp384r1_uint1 x190;
14006     uint32_t x191;
14007     fiat_secp384r1_uint1 x192;
14008     uint32_t x193;
14009     fiat_secp384r1_uint1 x194;
14010     uint32_t x195;
14011     fiat_secp384r1_uint1 x196;
14012     uint32_t x197;
14013     fiat_secp384r1_uint1 x198;
14014     uint32_t x199;
14015     fiat_secp384r1_uint1 x200;
14016     uint32_t x201;
14017     fiat_secp384r1_uint1 x202;
14018     uint32_t x203;
14019     fiat_secp384r1_uint1 x204;
14020     uint32_t x205;
14021     fiat_secp384r1_uint1 x206;
14022     uint32_t x207;
14023     fiat_secp384r1_uint1 x208;
14024     uint32_t x209;
14025     fiat_secp384r1_uint1 x210;
14026     uint32_t x211;
14027     fiat_secp384r1_uint1 x212;
14028     uint32_t x213;
14029     uint32_t x214;
14030     uint32_t x215;
14031     uint32_t x216;
14032     uint32_t x217;
14033     uint32_t x218;
14034     uint32_t x219;
14035     uint32_t x220;
14036     uint32_t x221;
14037     uint32_t x222;
14038     uint32_t x223;
14039     uint32_t x224;
14040     uint32_t x225;
14041     uint32_t x226;
14042     uint32_t x227;
14043     uint32_t x228;
14044     uint32_t x229;
14045     uint32_t x230;
14046     uint32_t x231;
14047     uint32_t x232;
14048     uint32_t x233;
14049     fiat_secp384r1_uint1 x234;
14050     uint32_t x235;
14051     fiat_secp384r1_uint1 x236;
14052     uint32_t x237;
14053     fiat_secp384r1_uint1 x238;
14054     uint32_t x239;
14055     fiat_secp384r1_uint1 x240;
14056     uint32_t x241;
14057     fiat_secp384r1_uint1 x242;
14058     uint32_t x243;
14059     fiat_secp384r1_uint1 x244;
14060     uint32_t x245;
14061     fiat_secp384r1_uint1 x246;
14062     uint32_t x247;
14063     fiat_secp384r1_uint1 x248;
14064     uint32_t x249;
14065     fiat_secp384r1_uint1 x250;
14066     uint32_t x251;
14067     fiat_secp384r1_uint1 x252;
14068     uint32_t x253;
14069     fiat_secp384r1_uint1 x254;
14070     uint32_t x255;
14071     fiat_secp384r1_uint1 x256;
14072     uint32_t x257;
14073     fiat_secp384r1_uint1 x258;
14074     uint32_t x259;
14075     fiat_secp384r1_uint1 x260;
14076     uint32_t x261;
14077     fiat_secp384r1_uint1 x262;
14078     uint32_t x263;
14079     fiat_secp384r1_uint1 x264;
14080     uint32_t x265;
14081     fiat_secp384r1_uint1 x266;
14082     uint32_t x267;
14083     fiat_secp384r1_uint1 x268;
14084     uint32_t x269;
14085     fiat_secp384r1_uint1 x270;
14086     uint32_t x271;
14087     fiat_secp384r1_uint1 x272;
14088     uint32_t x273;
14089     fiat_secp384r1_uint1 x274;
14090     uint32_t x275;
14091     uint32_t x276;
14092     uint32_t x277;
14093     uint32_t x278;
14094     uint32_t x279;
14095     uint32_t x280;
14096     uint32_t x281;
14097     uint32_t x282;
14098     uint32_t x283;
14099     fiat_secp384r1_uint1 x284;
14100     uint32_t x285;
14101     fiat_secp384r1_uint1 x286;
14102     uint32_t x287;
14103     fiat_secp384r1_uint1 x288;
14104     uint32_t x289;
14105     fiat_secp384r1_uint1 x290;
14106     uint32_t x291;
14107     fiat_secp384r1_uint1 x292;
14108     uint32_t x293;
14109     fiat_secp384r1_uint1 x294;
14110     uint32_t x295;
14111     fiat_secp384r1_uint1 x296;
14112     uint32_t x297;
14113     fiat_secp384r1_uint1 x298;
14114     uint32_t x299;
14115     fiat_secp384r1_uint1 x300;
14116     uint32_t x301;
14117     fiat_secp384r1_uint1 x302;
14118     uint32_t x303;
14119     fiat_secp384r1_uint1 x304;
14120     uint32_t x305;
14121     fiat_secp384r1_uint1 x306;
14122     uint32_t x307;
14123     fiat_secp384r1_uint1 x308;
14124     uint32_t x309;
14125     uint32_t x310;
14126     uint32_t x311;
14127     uint32_t x312;
14128     uint32_t x313;
14129     uint32_t x314;
14130     uint32_t x315;
14131     uint32_t x316;
14132     uint32_t x317;
14133     uint32_t x318;
14134     uint32_t x319;
14135     uint32_t x320;
14136     uint32_t x321;
14137     uint32_t x322;
14138     uint32_t x323;
14139     uint32_t x324;
14140     uint32_t x325;
14141     uint32_t x326;
14142     uint32_t x327;
14143     uint32_t x328;
14144     uint32_t x329;
14145     fiat_secp384r1_uint1 x330;
14146     uint32_t x331;
14147     fiat_secp384r1_uint1 x332;
14148     uint32_t x333;
14149     fiat_secp384r1_uint1 x334;
14150     uint32_t x335;
14151     fiat_secp384r1_uint1 x336;
14152     uint32_t x337;
14153     fiat_secp384r1_uint1 x338;
14154     uint32_t x339;
14155     fiat_secp384r1_uint1 x340;
14156     uint32_t x341;
14157     fiat_secp384r1_uint1 x342;
14158     uint32_t x343;
14159     fiat_secp384r1_uint1 x344;
14160     uint32_t x345;
14161     fiat_secp384r1_uint1 x346;
14162     uint32_t x347;
14163     fiat_secp384r1_uint1 x348;
14164     uint32_t x349;
14165     fiat_secp384r1_uint1 x350;
14166     uint32_t x351;
14167     fiat_secp384r1_uint1 x352;
14168     uint32_t x353;
14169     fiat_secp384r1_uint1 x354;
14170     uint32_t x355;
14171     fiat_secp384r1_uint1 x356;
14172     uint32_t x357;
14173     fiat_secp384r1_uint1 x358;
14174     uint32_t x359;
14175     fiat_secp384r1_uint1 x360;
14176     uint32_t x361;
14177     fiat_secp384r1_uint1 x362;
14178     uint32_t x363;
14179     fiat_secp384r1_uint1 x364;
14180     uint32_t x365;
14181     fiat_secp384r1_uint1 x366;
14182     uint32_t x367;
14183     fiat_secp384r1_uint1 x368;
14184     uint32_t x369;
14185     fiat_secp384r1_uint1 x370;
14186     uint32_t x371;
14187     uint32_t x372;
14188     uint32_t x373;
14189     uint32_t x374;
14190     uint32_t x375;
14191     uint32_t x376;
14192     uint32_t x377;
14193     uint32_t x378;
14194     uint32_t x379;
14195     fiat_secp384r1_uint1 x380;
14196     uint32_t x381;
14197     fiat_secp384r1_uint1 x382;
14198     uint32_t x383;
14199     fiat_secp384r1_uint1 x384;
14200     uint32_t x385;
14201     fiat_secp384r1_uint1 x386;
14202     uint32_t x387;
14203     fiat_secp384r1_uint1 x388;
14204     uint32_t x389;
14205     fiat_secp384r1_uint1 x390;
14206     uint32_t x391;
14207     fiat_secp384r1_uint1 x392;
14208     uint32_t x393;
14209     fiat_secp384r1_uint1 x394;
14210     uint32_t x395;
14211     fiat_secp384r1_uint1 x396;
14212     uint32_t x397;
14213     fiat_secp384r1_uint1 x398;
14214     uint32_t x399;
14215     fiat_secp384r1_uint1 x400;
14216     uint32_t x401;
14217     fiat_secp384r1_uint1 x402;
14218     uint32_t x403;
14219     fiat_secp384r1_uint1 x404;
14220     uint32_t x405;
14221     uint32_t x406;
14222     uint32_t x407;
14223     uint32_t x408;
14224     uint32_t x409;
14225     uint32_t x410;
14226     uint32_t x411;
14227     uint32_t x412;
14228     uint32_t x413;
14229     uint32_t x414;
14230     uint32_t x415;
14231     uint32_t x416;
14232     uint32_t x417;
14233     uint32_t x418;
14234     uint32_t x419;
14235     uint32_t x420;
14236     uint32_t x421;
14237     uint32_t x422;
14238     uint32_t x423;
14239     uint32_t x424;
14240     uint32_t x425;
14241     fiat_secp384r1_uint1 x426;
14242     uint32_t x427;
14243     fiat_secp384r1_uint1 x428;
14244     uint32_t x429;
14245     fiat_secp384r1_uint1 x430;
14246     uint32_t x431;
14247     fiat_secp384r1_uint1 x432;
14248     uint32_t x433;
14249     fiat_secp384r1_uint1 x434;
14250     uint32_t x435;
14251     fiat_secp384r1_uint1 x436;
14252     uint32_t x437;
14253     fiat_secp384r1_uint1 x438;
14254     uint32_t x439;
14255     fiat_secp384r1_uint1 x440;
14256     uint32_t x441;
14257     fiat_secp384r1_uint1 x442;
14258     uint32_t x443;
14259     fiat_secp384r1_uint1 x444;
14260     uint32_t x445;
14261     fiat_secp384r1_uint1 x446;
14262     uint32_t x447;
14263     fiat_secp384r1_uint1 x448;
14264     uint32_t x449;
14265     fiat_secp384r1_uint1 x450;
14266     uint32_t x451;
14267     fiat_secp384r1_uint1 x452;
14268     uint32_t x453;
14269     fiat_secp384r1_uint1 x454;
14270     uint32_t x455;
14271     fiat_secp384r1_uint1 x456;
14272     uint32_t x457;
14273     fiat_secp384r1_uint1 x458;
14274     uint32_t x459;
14275     fiat_secp384r1_uint1 x460;
14276     uint32_t x461;
14277     fiat_secp384r1_uint1 x462;
14278     uint32_t x463;
14279     fiat_secp384r1_uint1 x464;
14280     uint32_t x465;
14281     fiat_secp384r1_uint1 x466;
14282     uint32_t x467;
14283     uint32_t x468;
14284     uint32_t x469;
14285     uint32_t x470;
14286     uint32_t x471;
14287     uint32_t x472;
14288     uint32_t x473;
14289     uint32_t x474;
14290     uint32_t x475;
14291     fiat_secp384r1_uint1 x476;
14292     uint32_t x477;
14293     fiat_secp384r1_uint1 x478;
14294     uint32_t x479;
14295     fiat_secp384r1_uint1 x480;
14296     uint32_t x481;
14297     fiat_secp384r1_uint1 x482;
14298     uint32_t x483;
14299     fiat_secp384r1_uint1 x484;
14300     uint32_t x485;
14301     fiat_secp384r1_uint1 x486;
14302     uint32_t x487;
14303     fiat_secp384r1_uint1 x488;
14304     uint32_t x489;
14305     fiat_secp384r1_uint1 x490;
14306     uint32_t x491;
14307     fiat_secp384r1_uint1 x492;
14308     uint32_t x493;
14309     fiat_secp384r1_uint1 x494;
14310     uint32_t x495;
14311     fiat_secp384r1_uint1 x496;
14312     uint32_t x497;
14313     fiat_secp384r1_uint1 x498;
14314     uint32_t x499;
14315     fiat_secp384r1_uint1 x500;
14316     uint32_t x501;
14317     uint32_t x502;
14318     uint32_t x503;
14319     uint32_t x504;
14320     uint32_t x505;
14321     uint32_t x506;
14322     uint32_t x507;
14323     uint32_t x508;
14324     uint32_t x509;
14325     uint32_t x510;
14326     uint32_t x511;
14327     uint32_t x512;
14328     uint32_t x513;
14329     uint32_t x514;
14330     uint32_t x515;
14331     uint32_t x516;
14332     uint32_t x517;
14333     uint32_t x518;
14334     uint32_t x519;
14335     uint32_t x520;
14336     uint32_t x521;
14337     fiat_secp384r1_uint1 x522;
14338     uint32_t x523;
14339     fiat_secp384r1_uint1 x524;
14340     uint32_t x525;
14341     fiat_secp384r1_uint1 x526;
14342     uint32_t x527;
14343     fiat_secp384r1_uint1 x528;
14344     uint32_t x529;
14345     fiat_secp384r1_uint1 x530;
14346     uint32_t x531;
14347     fiat_secp384r1_uint1 x532;
14348     uint32_t x533;
14349     fiat_secp384r1_uint1 x534;
14350     uint32_t x535;
14351     fiat_secp384r1_uint1 x536;
14352     uint32_t x537;
14353     fiat_secp384r1_uint1 x538;
14354     uint32_t x539;
14355     fiat_secp384r1_uint1 x540;
14356     uint32_t x541;
14357     fiat_secp384r1_uint1 x542;
14358     uint32_t x543;
14359     fiat_secp384r1_uint1 x544;
14360     uint32_t x545;
14361     fiat_secp384r1_uint1 x546;
14362     uint32_t x547;
14363     fiat_secp384r1_uint1 x548;
14364     uint32_t x549;
14365     fiat_secp384r1_uint1 x550;
14366     uint32_t x551;
14367     fiat_secp384r1_uint1 x552;
14368     uint32_t x553;
14369     fiat_secp384r1_uint1 x554;
14370     uint32_t x555;
14371     fiat_secp384r1_uint1 x556;
14372     uint32_t x557;
14373     fiat_secp384r1_uint1 x558;
14374     uint32_t x559;
14375     fiat_secp384r1_uint1 x560;
14376     uint32_t x561;
14377     fiat_secp384r1_uint1 x562;
14378     uint32_t x563;
14379     uint32_t x564;
14380     uint32_t x565;
14381     uint32_t x566;
14382     uint32_t x567;
14383     uint32_t x568;
14384     uint32_t x569;
14385     uint32_t x570;
14386     uint32_t x571;
14387     fiat_secp384r1_uint1 x572;
14388     uint32_t x573;
14389     fiat_secp384r1_uint1 x574;
14390     uint32_t x575;
14391     fiat_secp384r1_uint1 x576;
14392     uint32_t x577;
14393     fiat_secp384r1_uint1 x578;
14394     uint32_t x579;
14395     fiat_secp384r1_uint1 x580;
14396     uint32_t x581;
14397     fiat_secp384r1_uint1 x582;
14398     uint32_t x583;
14399     fiat_secp384r1_uint1 x584;
14400     uint32_t x585;
14401     fiat_secp384r1_uint1 x586;
14402     uint32_t x587;
14403     fiat_secp384r1_uint1 x588;
14404     uint32_t x589;
14405     fiat_secp384r1_uint1 x590;
14406     uint32_t x591;
14407     fiat_secp384r1_uint1 x592;
14408     uint32_t x593;
14409     fiat_secp384r1_uint1 x594;
14410     uint32_t x595;
14411     fiat_secp384r1_uint1 x596;
14412     uint32_t x597;
14413     uint32_t x598;
14414     uint32_t x599;
14415     uint32_t x600;
14416     uint32_t x601;
14417     uint32_t x602;
14418     uint32_t x603;
14419     uint32_t x604;
14420     uint32_t x605;
14421     uint32_t x606;
14422     uint32_t x607;
14423     uint32_t x608;
14424     uint32_t x609;
14425     uint32_t x610;
14426     uint32_t x611;
14427     uint32_t x612;
14428     uint32_t x613;
14429     uint32_t x614;
14430     uint32_t x615;
14431     uint32_t x616;
14432     uint32_t x617;
14433     fiat_secp384r1_uint1 x618;
14434     uint32_t x619;
14435     fiat_secp384r1_uint1 x620;
14436     uint32_t x621;
14437     fiat_secp384r1_uint1 x622;
14438     uint32_t x623;
14439     fiat_secp384r1_uint1 x624;
14440     uint32_t x625;
14441     fiat_secp384r1_uint1 x626;
14442     uint32_t x627;
14443     fiat_secp384r1_uint1 x628;
14444     uint32_t x629;
14445     fiat_secp384r1_uint1 x630;
14446     uint32_t x631;
14447     fiat_secp384r1_uint1 x632;
14448     uint32_t x633;
14449     fiat_secp384r1_uint1 x634;
14450     uint32_t x635;
14451     fiat_secp384r1_uint1 x636;
14452     uint32_t x637;
14453     fiat_secp384r1_uint1 x638;
14454     uint32_t x639;
14455     fiat_secp384r1_uint1 x640;
14456     uint32_t x641;
14457     fiat_secp384r1_uint1 x642;
14458     uint32_t x643;
14459     fiat_secp384r1_uint1 x644;
14460     uint32_t x645;
14461     fiat_secp384r1_uint1 x646;
14462     uint32_t x647;
14463     fiat_secp384r1_uint1 x648;
14464     uint32_t x649;
14465     fiat_secp384r1_uint1 x650;
14466     uint32_t x651;
14467     fiat_secp384r1_uint1 x652;
14468     uint32_t x653;
14469     fiat_secp384r1_uint1 x654;
14470     uint32_t x655;
14471     fiat_secp384r1_uint1 x656;
14472     uint32_t x657;
14473     fiat_secp384r1_uint1 x658;
14474     uint32_t x659;
14475     uint32_t x660;
14476     uint32_t x661;
14477     uint32_t x662;
14478     uint32_t x663;
14479     uint32_t x664;
14480     uint32_t x665;
14481     uint32_t x666;
14482     uint32_t x667;
14483     fiat_secp384r1_uint1 x668;
14484     uint32_t x669;
14485     fiat_secp384r1_uint1 x670;
14486     uint32_t x671;
14487     fiat_secp384r1_uint1 x672;
14488     uint32_t x673;
14489     fiat_secp384r1_uint1 x674;
14490     uint32_t x675;
14491     fiat_secp384r1_uint1 x676;
14492     uint32_t x677;
14493     fiat_secp384r1_uint1 x678;
14494     uint32_t x679;
14495     fiat_secp384r1_uint1 x680;
14496     uint32_t x681;
14497     fiat_secp384r1_uint1 x682;
14498     uint32_t x683;
14499     fiat_secp384r1_uint1 x684;
14500     uint32_t x685;
14501     fiat_secp384r1_uint1 x686;
14502     uint32_t x687;
14503     fiat_secp384r1_uint1 x688;
14504     uint32_t x689;
14505     fiat_secp384r1_uint1 x690;
14506     uint32_t x691;
14507     fiat_secp384r1_uint1 x692;
14508     uint32_t x693;
14509     uint32_t x694;
14510     uint32_t x695;
14511     uint32_t x696;
14512     uint32_t x697;
14513     uint32_t x698;
14514     uint32_t x699;
14515     uint32_t x700;
14516     uint32_t x701;
14517     uint32_t x702;
14518     uint32_t x703;
14519     uint32_t x704;
14520     uint32_t x705;
14521     uint32_t x706;
14522     uint32_t x707;
14523     uint32_t x708;
14524     uint32_t x709;
14525     uint32_t x710;
14526     uint32_t x711;
14527     uint32_t x712;
14528     uint32_t x713;
14529     fiat_secp384r1_uint1 x714;
14530     uint32_t x715;
14531     fiat_secp384r1_uint1 x716;
14532     uint32_t x717;
14533     fiat_secp384r1_uint1 x718;
14534     uint32_t x719;
14535     fiat_secp384r1_uint1 x720;
14536     uint32_t x721;
14537     fiat_secp384r1_uint1 x722;
14538     uint32_t x723;
14539     fiat_secp384r1_uint1 x724;
14540     uint32_t x725;
14541     fiat_secp384r1_uint1 x726;
14542     uint32_t x727;
14543     fiat_secp384r1_uint1 x728;
14544     uint32_t x729;
14545     fiat_secp384r1_uint1 x730;
14546     uint32_t x731;
14547     fiat_secp384r1_uint1 x732;
14548     uint32_t x733;
14549     fiat_secp384r1_uint1 x734;
14550     uint32_t x735;
14551     fiat_secp384r1_uint1 x736;
14552     uint32_t x737;
14553     fiat_secp384r1_uint1 x738;
14554     uint32_t x739;
14555     fiat_secp384r1_uint1 x740;
14556     uint32_t x741;
14557     fiat_secp384r1_uint1 x742;
14558     uint32_t x743;
14559     fiat_secp384r1_uint1 x744;
14560     uint32_t x745;
14561     fiat_secp384r1_uint1 x746;
14562     uint32_t x747;
14563     fiat_secp384r1_uint1 x748;
14564     uint32_t x749;
14565     fiat_secp384r1_uint1 x750;
14566     uint32_t x751;
14567     fiat_secp384r1_uint1 x752;
14568     uint32_t x753;
14569     fiat_secp384r1_uint1 x754;
14570     uint32_t x755;
14571     uint32_t x756;
14572     uint32_t x757;
14573     uint32_t x758;
14574     uint32_t x759;
14575     uint32_t x760;
14576     uint32_t x761;
14577     uint32_t x762;
14578     uint32_t x763;
14579     fiat_secp384r1_uint1 x764;
14580     uint32_t x765;
14581     fiat_secp384r1_uint1 x766;
14582     uint32_t x767;
14583     fiat_secp384r1_uint1 x768;
14584     uint32_t x769;
14585     fiat_secp384r1_uint1 x770;
14586     uint32_t x771;
14587     fiat_secp384r1_uint1 x772;
14588     uint32_t x773;
14589     fiat_secp384r1_uint1 x774;
14590     uint32_t x775;
14591     fiat_secp384r1_uint1 x776;
14592     uint32_t x777;
14593     fiat_secp384r1_uint1 x778;
14594     uint32_t x779;
14595     fiat_secp384r1_uint1 x780;
14596     uint32_t x781;
14597     fiat_secp384r1_uint1 x782;
14598     uint32_t x783;
14599     fiat_secp384r1_uint1 x784;
14600     uint32_t x785;
14601     fiat_secp384r1_uint1 x786;
14602     uint32_t x787;
14603     fiat_secp384r1_uint1 x788;
14604     uint32_t x789;
14605     uint32_t x790;
14606     uint32_t x791;
14607     uint32_t x792;
14608     uint32_t x793;
14609     uint32_t x794;
14610     uint32_t x795;
14611     uint32_t x796;
14612     uint32_t x797;
14613     uint32_t x798;
14614     uint32_t x799;
14615     uint32_t x800;
14616     uint32_t x801;
14617     uint32_t x802;
14618     uint32_t x803;
14619     uint32_t x804;
14620     uint32_t x805;
14621     uint32_t x806;
14622     uint32_t x807;
14623     uint32_t x808;
14624     uint32_t x809;
14625     fiat_secp384r1_uint1 x810;
14626     uint32_t x811;
14627     fiat_secp384r1_uint1 x812;
14628     uint32_t x813;
14629     fiat_secp384r1_uint1 x814;
14630     uint32_t x815;
14631     fiat_secp384r1_uint1 x816;
14632     uint32_t x817;
14633     fiat_secp384r1_uint1 x818;
14634     uint32_t x819;
14635     fiat_secp384r1_uint1 x820;
14636     uint32_t x821;
14637     fiat_secp384r1_uint1 x822;
14638     uint32_t x823;
14639     fiat_secp384r1_uint1 x824;
14640     uint32_t x825;
14641     fiat_secp384r1_uint1 x826;
14642     uint32_t x827;
14643     fiat_secp384r1_uint1 x828;
14644     uint32_t x829;
14645     fiat_secp384r1_uint1 x830;
14646     uint32_t x831;
14647     fiat_secp384r1_uint1 x832;
14648     uint32_t x833;
14649     fiat_secp384r1_uint1 x834;
14650     uint32_t x835;
14651     fiat_secp384r1_uint1 x836;
14652     uint32_t x837;
14653     fiat_secp384r1_uint1 x838;
14654     uint32_t x839;
14655     fiat_secp384r1_uint1 x840;
14656     uint32_t x841;
14657     fiat_secp384r1_uint1 x842;
14658     uint32_t x843;
14659     fiat_secp384r1_uint1 x844;
14660     uint32_t x845;
14661     fiat_secp384r1_uint1 x846;
14662     uint32_t x847;
14663     fiat_secp384r1_uint1 x848;
14664     uint32_t x849;
14665     fiat_secp384r1_uint1 x850;
14666     uint32_t x851;
14667     uint32_t x852;
14668     uint32_t x853;
14669     uint32_t x854;
14670     uint32_t x855;
14671     uint32_t x856;
14672     uint32_t x857;
14673     uint32_t x858;
14674     uint32_t x859;
14675     fiat_secp384r1_uint1 x860;
14676     uint32_t x861;
14677     fiat_secp384r1_uint1 x862;
14678     uint32_t x863;
14679     fiat_secp384r1_uint1 x864;
14680     uint32_t x865;
14681     fiat_secp384r1_uint1 x866;
14682     uint32_t x867;
14683     fiat_secp384r1_uint1 x868;
14684     uint32_t x869;
14685     fiat_secp384r1_uint1 x870;
14686     uint32_t x871;
14687     fiat_secp384r1_uint1 x872;
14688     uint32_t x873;
14689     fiat_secp384r1_uint1 x874;
14690     uint32_t x875;
14691     fiat_secp384r1_uint1 x876;
14692     uint32_t x877;
14693     fiat_secp384r1_uint1 x878;
14694     uint32_t x879;
14695     fiat_secp384r1_uint1 x880;
14696     uint32_t x881;
14697     fiat_secp384r1_uint1 x882;
14698     uint32_t x883;
14699     fiat_secp384r1_uint1 x884;
14700     uint32_t x885;
14701     uint32_t x886;
14702     uint32_t x887;
14703     uint32_t x888;
14704     uint32_t x889;
14705     uint32_t x890;
14706     uint32_t x891;
14707     uint32_t x892;
14708     uint32_t x893;
14709     uint32_t x894;
14710     uint32_t x895;
14711     uint32_t x896;
14712     uint32_t x897;
14713     uint32_t x898;
14714     uint32_t x899;
14715     uint32_t x900;
14716     uint32_t x901;
14717     uint32_t x902;
14718     uint32_t x903;
14719     uint32_t x904;
14720     uint32_t x905;
14721     fiat_secp384r1_uint1 x906;
14722     uint32_t x907;
14723     fiat_secp384r1_uint1 x908;
14724     uint32_t x909;
14725     fiat_secp384r1_uint1 x910;
14726     uint32_t x911;
14727     fiat_secp384r1_uint1 x912;
14728     uint32_t x913;
14729     fiat_secp384r1_uint1 x914;
14730     uint32_t x915;
14731     fiat_secp384r1_uint1 x916;
14732     uint32_t x917;
14733     fiat_secp384r1_uint1 x918;
14734     uint32_t x919;
14735     fiat_secp384r1_uint1 x920;
14736     uint32_t x921;
14737     fiat_secp384r1_uint1 x922;
14738     uint32_t x923;
14739     fiat_secp384r1_uint1 x924;
14740     uint32_t x925;
14741     fiat_secp384r1_uint1 x926;
14742     uint32_t x927;
14743     fiat_secp384r1_uint1 x928;
14744     uint32_t x929;
14745     fiat_secp384r1_uint1 x930;
14746     uint32_t x931;
14747     fiat_secp384r1_uint1 x932;
14748     uint32_t x933;
14749     fiat_secp384r1_uint1 x934;
14750     uint32_t x935;
14751     fiat_secp384r1_uint1 x936;
14752     uint32_t x937;
14753     fiat_secp384r1_uint1 x938;
14754     uint32_t x939;
14755     fiat_secp384r1_uint1 x940;
14756     uint32_t x941;
14757     fiat_secp384r1_uint1 x942;
14758     uint32_t x943;
14759     fiat_secp384r1_uint1 x944;
14760     uint32_t x945;
14761     fiat_secp384r1_uint1 x946;
14762     uint32_t x947;
14763     uint32_t x948;
14764     uint32_t x949;
14765     uint32_t x950;
14766     uint32_t x951;
14767     uint32_t x952;
14768     uint32_t x953;
14769     uint32_t x954;
14770     uint32_t x955;
14771     fiat_secp384r1_uint1 x956;
14772     uint32_t x957;
14773     fiat_secp384r1_uint1 x958;
14774     uint32_t x959;
14775     fiat_secp384r1_uint1 x960;
14776     uint32_t x961;
14777     fiat_secp384r1_uint1 x962;
14778     uint32_t x963;
14779     fiat_secp384r1_uint1 x964;
14780     uint32_t x965;
14781     fiat_secp384r1_uint1 x966;
14782     uint32_t x967;
14783     fiat_secp384r1_uint1 x968;
14784     uint32_t x969;
14785     fiat_secp384r1_uint1 x970;
14786     uint32_t x971;
14787     fiat_secp384r1_uint1 x972;
14788     uint32_t x973;
14789     fiat_secp384r1_uint1 x974;
14790     uint32_t x975;
14791     fiat_secp384r1_uint1 x976;
14792     uint32_t x977;
14793     fiat_secp384r1_uint1 x978;
14794     uint32_t x979;
14795     fiat_secp384r1_uint1 x980;
14796     uint32_t x981;
14797     uint32_t x982;
14798     uint32_t x983;
14799     uint32_t x984;
14800     uint32_t x985;
14801     uint32_t x986;
14802     uint32_t x987;
14803     uint32_t x988;
14804     uint32_t x989;
14805     uint32_t x990;
14806     uint32_t x991;
14807     uint32_t x992;
14808     uint32_t x993;
14809     uint32_t x994;
14810     uint32_t x995;
14811     uint32_t x996;
14812     uint32_t x997;
14813     uint32_t x998;
14814     uint32_t x999;
14815     uint32_t x1000;
14816     uint32_t x1001;
14817     fiat_secp384r1_uint1 x1002;
14818     uint32_t x1003;
14819     fiat_secp384r1_uint1 x1004;
14820     uint32_t x1005;
14821     fiat_secp384r1_uint1 x1006;
14822     uint32_t x1007;
14823     fiat_secp384r1_uint1 x1008;
14824     uint32_t x1009;
14825     fiat_secp384r1_uint1 x1010;
14826     uint32_t x1011;
14827     fiat_secp384r1_uint1 x1012;
14828     uint32_t x1013;
14829     fiat_secp384r1_uint1 x1014;
14830     uint32_t x1015;
14831     fiat_secp384r1_uint1 x1016;
14832     uint32_t x1017;
14833     fiat_secp384r1_uint1 x1018;
14834     uint32_t x1019;
14835     fiat_secp384r1_uint1 x1020;
14836     uint32_t x1021;
14837     fiat_secp384r1_uint1 x1022;
14838     uint32_t x1023;
14839     fiat_secp384r1_uint1 x1024;
14840     uint32_t x1025;
14841     fiat_secp384r1_uint1 x1026;
14842     uint32_t x1027;
14843     fiat_secp384r1_uint1 x1028;
14844     uint32_t x1029;
14845     fiat_secp384r1_uint1 x1030;
14846     uint32_t x1031;
14847     fiat_secp384r1_uint1 x1032;
14848     uint32_t x1033;
14849     fiat_secp384r1_uint1 x1034;
14850     uint32_t x1035;
14851     fiat_secp384r1_uint1 x1036;
14852     uint32_t x1037;
14853     fiat_secp384r1_uint1 x1038;
14854     uint32_t x1039;
14855     fiat_secp384r1_uint1 x1040;
14856     uint32_t x1041;
14857     fiat_secp384r1_uint1 x1042;
14858     uint32_t x1043;
14859     uint32_t x1044;
14860     uint32_t x1045;
14861     uint32_t x1046;
14862     uint32_t x1047;
14863     uint32_t x1048;
14864     uint32_t x1049;
14865     uint32_t x1050;
14866     uint32_t x1051;
14867     fiat_secp384r1_uint1 x1052;
14868     uint32_t x1053;
14869     fiat_secp384r1_uint1 x1054;
14870     uint32_t x1055;
14871     fiat_secp384r1_uint1 x1056;
14872     uint32_t x1057;
14873     fiat_secp384r1_uint1 x1058;
14874     uint32_t x1059;
14875     fiat_secp384r1_uint1 x1060;
14876     uint32_t x1061;
14877     fiat_secp384r1_uint1 x1062;
14878     uint32_t x1063;
14879     fiat_secp384r1_uint1 x1064;
14880     uint32_t x1065;
14881     fiat_secp384r1_uint1 x1066;
14882     uint32_t x1067;
14883     fiat_secp384r1_uint1 x1068;
14884     uint32_t x1069;
14885     fiat_secp384r1_uint1 x1070;
14886     uint32_t x1071;
14887     fiat_secp384r1_uint1 x1072;
14888     uint32_t x1073;
14889     fiat_secp384r1_uint1 x1074;
14890     uint32_t x1075;
14891     fiat_secp384r1_uint1 x1076;
14892     uint32_t x1077;
14893     uint32_t x1078;
14894     uint32_t x1079;
14895     uint32_t x1080;
14896     uint32_t x1081;
14897     uint32_t x1082;
14898     uint32_t x1083;
14899     uint32_t x1084;
14900     uint32_t x1085;
14901     uint32_t x1086;
14902     uint32_t x1087;
14903     uint32_t x1088;
14904     uint32_t x1089;
14905     uint32_t x1090;
14906     uint32_t x1091;
14907     uint32_t x1092;
14908     uint32_t x1093;
14909     uint32_t x1094;
14910     uint32_t x1095;
14911     uint32_t x1096;
14912     uint32_t x1097;
14913     fiat_secp384r1_uint1 x1098;
14914     uint32_t x1099;
14915     fiat_secp384r1_uint1 x1100;
14916     uint32_t x1101;
14917     fiat_secp384r1_uint1 x1102;
14918     uint32_t x1103;
14919     fiat_secp384r1_uint1 x1104;
14920     uint32_t x1105;
14921     fiat_secp384r1_uint1 x1106;
14922     uint32_t x1107;
14923     fiat_secp384r1_uint1 x1108;
14924     uint32_t x1109;
14925     fiat_secp384r1_uint1 x1110;
14926     uint32_t x1111;
14927     fiat_secp384r1_uint1 x1112;
14928     uint32_t x1113;
14929     fiat_secp384r1_uint1 x1114;
14930     uint32_t x1115;
14931     fiat_secp384r1_uint1 x1116;
14932     uint32_t x1117;
14933     fiat_secp384r1_uint1 x1118;
14934     uint32_t x1119;
14935     fiat_secp384r1_uint1 x1120;
14936     uint32_t x1121;
14937     fiat_secp384r1_uint1 x1122;
14938     uint32_t x1123;
14939     fiat_secp384r1_uint1 x1124;
14940     uint32_t x1125;
14941     fiat_secp384r1_uint1 x1126;
14942     uint32_t x1127;
14943     fiat_secp384r1_uint1 x1128;
14944     uint32_t x1129;
14945     fiat_secp384r1_uint1 x1130;
14946     uint32_t x1131;
14947     fiat_secp384r1_uint1 x1132;
14948     uint32_t x1133;
14949     fiat_secp384r1_uint1 x1134;
14950     uint32_t x1135;
14951     fiat_secp384r1_uint1 x1136;
14952     uint32_t x1137;
14953     fiat_secp384r1_uint1 x1138;
14954     uint32_t x1139;
14955     fiat_secp384r1_uint1 x1140;
14956     uint32_t x1141;
14957     fiat_secp384r1_uint1 x1142;
14958     uint32_t x1143;
14959     fiat_secp384r1_uint1 x1144;
14960     uint32_t x1145;
14961     fiat_secp384r1_uint1 x1146;
14962     uint32_t x1147;
14963     fiat_secp384r1_uint1 x1148;
14964     uint32_t x1149;
14965     fiat_secp384r1_uint1 x1150;
14966     uint32_t x1151;
14967     fiat_secp384r1_uint1 x1152;
14968     uint32_t x1153;
14969     fiat_secp384r1_uint1 x1154;
14970     uint32_t x1155;
14971     fiat_secp384r1_uint1 x1156;
14972     uint32_t x1157;
14973     fiat_secp384r1_uint1 x1158;
14974     uint32_t x1159;
14975     fiat_secp384r1_uint1 x1160;
14976     uint32_t x1161;
14977     fiat_secp384r1_uint1 x1162;
14978     uint32_t x1163;
14979     fiat_secp384r1_uint1 x1164;
14980     uint32_t x1165;
14981     uint32_t x1166;
14982     uint32_t x1167;
14983     uint32_t x1168;
14984     uint32_t x1169;
14985     uint32_t x1170;
14986     uint32_t x1171;
14987     uint32_t x1172;
14988     uint32_t x1173;
14989     uint32_t x1174;
14990     uint32_t x1175;
14991     uint32_t x1176;
14992     x1 = (arg1[1]);
14993     x2 = (arg1[2]);
14994     x3 = (arg1[3]);
14995     x4 = (arg1[4]);
14996     x5 = (arg1[5]);
14997     x6 = (arg1[6]);
14998     x7 = (arg1[7]);
14999     x8 = (arg1[8]);
15000     x9 = (arg1[9]);
15001     x10 = (arg1[10]);
15002     x11 = (arg1[11]);
15003     x12 = (arg1[0]);
15004     fiat_secp384r1_mulx_u32(&x13, &x14, x12, 0x2);
15005     fiat_secp384r1_mulx_u32(&x15, &x16, x12, UINT32_C(0xfffffffe));
15006     fiat_secp384r1_mulx_u32(&x17, &x18, x12, 0x2);
15007     fiat_secp384r1_mulx_u32(&x19, &x20, x12, UINT32_C(0xfffffffe));
15008     fiat_secp384r1_addcarryx_u32(&x21, &x22, 0x0, (fiat_secp384r1_uint1)x14,
15009                                  x12);
15010     fiat_secp384r1_mulx_u32(&x23, &x24, x12, UINT32_C(0xffffffff));
15011     fiat_secp384r1_mulx_u32(&x25, &x26, x12, UINT32_C(0xffffffff));
15012     fiat_secp384r1_mulx_u32(&x27, &x28, x12, UINT32_C(0xffffffff));
15013     fiat_secp384r1_mulx_u32(&x29, &x30, x12, UINT32_C(0xffffffff));
15014     fiat_secp384r1_mulx_u32(&x31, &x32, x12, UINT32_C(0xffffffff));
15015     fiat_secp384r1_mulx_u32(&x33, &x34, x12, UINT32_C(0xffffffff));
15016     fiat_secp384r1_mulx_u32(&x35, &x36, x12, UINT32_C(0xffffffff));
15017     fiat_secp384r1_mulx_u32(&x37, &x38, x12, UINT32_C(0xfffffffe));
15018     fiat_secp384r1_mulx_u32(&x39, &x40, x12, UINT32_C(0xffffffff));
15019     fiat_secp384r1_mulx_u32(&x41, &x42, x12, UINT32_C(0xffffffff));
15020     fiat_secp384r1_addcarryx_u32(&x43, &x44, 0x0, x40, x37);
15021     fiat_secp384r1_addcarryx_u32(&x45, &x46, x44, x38, x35);
15022     fiat_secp384r1_addcarryx_u32(&x47, &x48, x46, x36, x33);
15023     fiat_secp384r1_addcarryx_u32(&x49, &x50, x48, x34, x31);
15024     fiat_secp384r1_addcarryx_u32(&x51, &x52, x50, x32, x29);
15025     fiat_secp384r1_addcarryx_u32(&x53, &x54, x52, x30, x27);
15026     fiat_secp384r1_addcarryx_u32(&x55, &x56, x54, x28, x25);
15027     fiat_secp384r1_addcarryx_u32(&x57, &x58, x56, x26, x23);
15028     fiat_secp384r1_addcarryx_u32(&x59, &x60, 0x0, x12, x41);
15029     fiat_secp384r1_addcarryx_u32(&x61, &x62, x60, x19, x42);
15030     fiat_secp384r1_addcarryx_u32(&x63, &x64, 0x0, x17, x39);
15031     fiat_secp384r1_addcarryx_u32(&x65, &x66, x64, (fiat_secp384r1_uint1)x18,
15032                                  x43);
15033     fiat_secp384r1_addcarryx_u32(&x67, &x68, x66, x15, x45);
15034     fiat_secp384r1_addcarryx_u32(&x69, &x70, x68, x16, x47);
15035     fiat_secp384r1_addcarryx_u32(&x71, &x72, x70, x13, x49);
15036     fiat_secp384r1_addcarryx_u32(&x73, &x74, x72, x21, x51);
15037     fiat_secp384r1_addcarryx_u32(&x75, &x76, x74, x22, x53);
15038     fiat_secp384r1_addcarryx_u32(&x77, &x78, x76, 0x0, x55);
15039     fiat_secp384r1_addcarryx_u32(&x79, &x80, x78, 0x0, x57);
15040     fiat_secp384r1_addcarryx_u32(&x81, &x82, x80, 0x0, (x58 + x24));
15041     fiat_secp384r1_mulx_u32(&x83, &x84, x1, 0x2);
15042     fiat_secp384r1_mulx_u32(&x85, &x86, x1, UINT32_C(0xfffffffe));
15043     fiat_secp384r1_mulx_u32(&x87, &x88, x1, 0x2);
15044     fiat_secp384r1_mulx_u32(&x89, &x90, x1, UINT32_C(0xfffffffe));
15045     fiat_secp384r1_addcarryx_u32(&x91, &x92, 0x0, (fiat_secp384r1_uint1)x84,
15046                                  x1);
15047     fiat_secp384r1_addcarryx_u32(&x93, &x94, 0x0, x61, x1);
15048     fiat_secp384r1_addcarryx_u32(&x95, &x96, x94, (x62 + x20), x89);
15049     fiat_secp384r1_addcarryx_u32(&x97, &x98, x96, x63, x90);
15050     fiat_secp384r1_addcarryx_u32(&x99, &x100, x98, x65, x87);
15051     fiat_secp384r1_addcarryx_u32(&x101, &x102, x100, x67,
15052                                  (fiat_secp384r1_uint1)x88);
15053     fiat_secp384r1_addcarryx_u32(&x103, &x104, x102, x69, x85);
15054     fiat_secp384r1_addcarryx_u32(&x105, &x106, x104, x71, x86);
15055     fiat_secp384r1_addcarryx_u32(&x107, &x108, x106, x73, x83);
15056     fiat_secp384r1_addcarryx_u32(&x109, &x110, x108, x75, x91);
15057     fiat_secp384r1_addcarryx_u32(&x111, &x112, x110, x77, x92);
15058     fiat_secp384r1_addcarryx_u32(&x113, &x114, x112, x79, 0x0);
15059     fiat_secp384r1_addcarryx_u32(&x115, &x116, x114, x81, 0x0);
15060     fiat_secp384r1_mulx_u32(&x117, &x118, x93, UINT32_C(0xffffffff));
15061     fiat_secp384r1_mulx_u32(&x119, &x120, x93, UINT32_C(0xffffffff));
15062     fiat_secp384r1_mulx_u32(&x121, &x122, x93, UINT32_C(0xffffffff));
15063     fiat_secp384r1_mulx_u32(&x123, &x124, x93, UINT32_C(0xffffffff));
15064     fiat_secp384r1_mulx_u32(&x125, &x126, x93, UINT32_C(0xffffffff));
15065     fiat_secp384r1_mulx_u32(&x127, &x128, x93, UINT32_C(0xffffffff));
15066     fiat_secp384r1_mulx_u32(&x129, &x130, x93, UINT32_C(0xffffffff));
15067     fiat_secp384r1_mulx_u32(&x131, &x132, x93, UINT32_C(0xfffffffe));
15068     fiat_secp384r1_mulx_u32(&x133, &x134, x93, UINT32_C(0xffffffff));
15069     fiat_secp384r1_mulx_u32(&x135, &x136, x93, UINT32_C(0xffffffff));
15070     fiat_secp384r1_addcarryx_u32(&x137, &x138, 0x0, x134, x131);
15071     fiat_secp384r1_addcarryx_u32(&x139, &x140, x138, x132, x129);
15072     fiat_secp384r1_addcarryx_u32(&x141, &x142, x140, x130, x127);
15073     fiat_secp384r1_addcarryx_u32(&x143, &x144, x142, x128, x125);
15074     fiat_secp384r1_addcarryx_u32(&x145, &x146, x144, x126, x123);
15075     fiat_secp384r1_addcarryx_u32(&x147, &x148, x146, x124, x121);
15076     fiat_secp384r1_addcarryx_u32(&x149, &x150, x148, x122, x119);
15077     fiat_secp384r1_addcarryx_u32(&x151, &x152, x150, x120, x117);
15078     fiat_secp384r1_addcarryx_u32(&x153, &x154, 0x0, x93, x135);
15079     fiat_secp384r1_addcarryx_u32(&x155, &x156, x154, x95, x136);
15080     fiat_secp384r1_addcarryx_u32(&x157, &x158, x156, x97, 0x0);
15081     fiat_secp384r1_addcarryx_u32(&x159, &x160, x158, x99, x133);
15082     fiat_secp384r1_addcarryx_u32(&x161, &x162, x160, x101, x137);
15083     fiat_secp384r1_addcarryx_u32(&x163, &x164, x162, x103, x139);
15084     fiat_secp384r1_addcarryx_u32(&x165, &x166, x164, x105, x141);
15085     fiat_secp384r1_addcarryx_u32(&x167, &x168, x166, x107, x143);
15086     fiat_secp384r1_addcarryx_u32(&x169, &x170, x168, x109, x145);
15087     fiat_secp384r1_addcarryx_u32(&x171, &x172, x170, x111, x147);
15088     fiat_secp384r1_addcarryx_u32(&x173, &x174, x172, x113, x149);
15089     fiat_secp384r1_addcarryx_u32(&x175, &x176, x174, x115, x151);
15090     fiat_secp384r1_addcarryx_u32(&x177, &x178, x176, ((uint32_t)x116 + x82),
15091                                  (x152 + x118));
15092     fiat_secp384r1_mulx_u32(&x179, &x180, x2, 0x2);
15093     fiat_secp384r1_mulx_u32(&x181, &x182, x2, UINT32_C(0xfffffffe));
15094     fiat_secp384r1_mulx_u32(&x183, &x184, x2, 0x2);
15095     fiat_secp384r1_mulx_u32(&x185, &x186, x2, UINT32_C(0xfffffffe));
15096     fiat_secp384r1_addcarryx_u32(&x187, &x188, 0x0, (fiat_secp384r1_uint1)x180,
15097                                  x2);
15098     fiat_secp384r1_addcarryx_u32(&x189, &x190, 0x0, x155, x2);
15099     fiat_secp384r1_addcarryx_u32(&x191, &x192, x190, x157, x185);
15100     fiat_secp384r1_addcarryx_u32(&x193, &x194, x192, x159, x186);
15101     fiat_secp384r1_addcarryx_u32(&x195, &x196, x194, x161, x183);
15102     fiat_secp384r1_addcarryx_u32(&x197, &x198, x196, x163,
15103                                  (fiat_secp384r1_uint1)x184);
15104     fiat_secp384r1_addcarryx_u32(&x199, &x200, x198, x165, x181);
15105     fiat_secp384r1_addcarryx_u32(&x201, &x202, x200, x167, x182);
15106     fiat_secp384r1_addcarryx_u32(&x203, &x204, x202, x169, x179);
15107     fiat_secp384r1_addcarryx_u32(&x205, &x206, x204, x171, x187);
15108     fiat_secp384r1_addcarryx_u32(&x207, &x208, x206, x173, x188);
15109     fiat_secp384r1_addcarryx_u32(&x209, &x210, x208, x175, 0x0);
15110     fiat_secp384r1_addcarryx_u32(&x211, &x212, x210, x177, 0x0);
15111     fiat_secp384r1_mulx_u32(&x213, &x214, x189, UINT32_C(0xffffffff));
15112     fiat_secp384r1_mulx_u32(&x215, &x216, x189, UINT32_C(0xffffffff));
15113     fiat_secp384r1_mulx_u32(&x217, &x218, x189, UINT32_C(0xffffffff));
15114     fiat_secp384r1_mulx_u32(&x219, &x220, x189, UINT32_C(0xffffffff));
15115     fiat_secp384r1_mulx_u32(&x221, &x222, x189, UINT32_C(0xffffffff));
15116     fiat_secp384r1_mulx_u32(&x223, &x224, x189, UINT32_C(0xffffffff));
15117     fiat_secp384r1_mulx_u32(&x225, &x226, x189, UINT32_C(0xffffffff));
15118     fiat_secp384r1_mulx_u32(&x227, &x228, x189, UINT32_C(0xfffffffe));
15119     fiat_secp384r1_mulx_u32(&x229, &x230, x189, UINT32_C(0xffffffff));
15120     fiat_secp384r1_mulx_u32(&x231, &x232, x189, UINT32_C(0xffffffff));
15121     fiat_secp384r1_addcarryx_u32(&x233, &x234, 0x0, x230, x227);
15122     fiat_secp384r1_addcarryx_u32(&x235, &x236, x234, x228, x225);
15123     fiat_secp384r1_addcarryx_u32(&x237, &x238, x236, x226, x223);
15124     fiat_secp384r1_addcarryx_u32(&x239, &x240, x238, x224, x221);
15125     fiat_secp384r1_addcarryx_u32(&x241, &x242, x240, x222, x219);
15126     fiat_secp384r1_addcarryx_u32(&x243, &x244, x242, x220, x217);
15127     fiat_secp384r1_addcarryx_u32(&x245, &x246, x244, x218, x215);
15128     fiat_secp384r1_addcarryx_u32(&x247, &x248, x246, x216, x213);
15129     fiat_secp384r1_addcarryx_u32(&x249, &x250, 0x0, x189, x231);
15130     fiat_secp384r1_addcarryx_u32(&x251, &x252, x250, x191, x232);
15131     fiat_secp384r1_addcarryx_u32(&x253, &x254, x252, x193, 0x0);
15132     fiat_secp384r1_addcarryx_u32(&x255, &x256, x254, x195, x229);
15133     fiat_secp384r1_addcarryx_u32(&x257, &x258, x256, x197, x233);
15134     fiat_secp384r1_addcarryx_u32(&x259, &x260, x258, x199, x235);
15135     fiat_secp384r1_addcarryx_u32(&x261, &x262, x260, x201, x237);
15136     fiat_secp384r1_addcarryx_u32(&x263, &x264, x262, x203, x239);
15137     fiat_secp384r1_addcarryx_u32(&x265, &x266, x264, x205, x241);
15138     fiat_secp384r1_addcarryx_u32(&x267, &x268, x266, x207, x243);
15139     fiat_secp384r1_addcarryx_u32(&x269, &x270, x268, x209, x245);
15140     fiat_secp384r1_addcarryx_u32(&x271, &x272, x270, x211, x247);
15141     fiat_secp384r1_addcarryx_u32(&x273, &x274, x272, ((uint32_t)x212 + x178),
15142                                  (x248 + x214));
15143     fiat_secp384r1_mulx_u32(&x275, &x276, x3, 0x2);
15144     fiat_secp384r1_mulx_u32(&x277, &x278, x3, UINT32_C(0xfffffffe));
15145     fiat_secp384r1_mulx_u32(&x279, &x280, x3, 0x2);
15146     fiat_secp384r1_mulx_u32(&x281, &x282, x3, UINT32_C(0xfffffffe));
15147     fiat_secp384r1_addcarryx_u32(&x283, &x284, 0x0, (fiat_secp384r1_uint1)x276,
15148                                  x3);
15149     fiat_secp384r1_addcarryx_u32(&x285, &x286, 0x0, x251, x3);
15150     fiat_secp384r1_addcarryx_u32(&x287, &x288, x286, x253, x281);
15151     fiat_secp384r1_addcarryx_u32(&x289, &x290, x288, x255, x282);
15152     fiat_secp384r1_addcarryx_u32(&x291, &x292, x290, x257, x279);
15153     fiat_secp384r1_addcarryx_u32(&x293, &x294, x292, x259,
15154                                  (fiat_secp384r1_uint1)x280);
15155     fiat_secp384r1_addcarryx_u32(&x295, &x296, x294, x261, x277);
15156     fiat_secp384r1_addcarryx_u32(&x297, &x298, x296, x263, x278);
15157     fiat_secp384r1_addcarryx_u32(&x299, &x300, x298, x265, x275);
15158     fiat_secp384r1_addcarryx_u32(&x301, &x302, x300, x267, x283);
15159     fiat_secp384r1_addcarryx_u32(&x303, &x304, x302, x269, x284);
15160     fiat_secp384r1_addcarryx_u32(&x305, &x306, x304, x271, 0x0);
15161     fiat_secp384r1_addcarryx_u32(&x307, &x308, x306, x273, 0x0);
15162     fiat_secp384r1_mulx_u32(&x309, &x310, x285, UINT32_C(0xffffffff));
15163     fiat_secp384r1_mulx_u32(&x311, &x312, x285, UINT32_C(0xffffffff));
15164     fiat_secp384r1_mulx_u32(&x313, &x314, x285, UINT32_C(0xffffffff));
15165     fiat_secp384r1_mulx_u32(&x315, &x316, x285, UINT32_C(0xffffffff));
15166     fiat_secp384r1_mulx_u32(&x317, &x318, x285, UINT32_C(0xffffffff));
15167     fiat_secp384r1_mulx_u32(&x319, &x320, x285, UINT32_C(0xffffffff));
15168     fiat_secp384r1_mulx_u32(&x321, &x322, x285, UINT32_C(0xffffffff));
15169     fiat_secp384r1_mulx_u32(&x323, &x324, x285, UINT32_C(0xfffffffe));
15170     fiat_secp384r1_mulx_u32(&x325, &x326, x285, UINT32_C(0xffffffff));
15171     fiat_secp384r1_mulx_u32(&x327, &x328, x285, UINT32_C(0xffffffff));
15172     fiat_secp384r1_addcarryx_u32(&x329, &x330, 0x0, x326, x323);
15173     fiat_secp384r1_addcarryx_u32(&x331, &x332, x330, x324, x321);
15174     fiat_secp384r1_addcarryx_u32(&x333, &x334, x332, x322, x319);
15175     fiat_secp384r1_addcarryx_u32(&x335, &x336, x334, x320, x317);
15176     fiat_secp384r1_addcarryx_u32(&x337, &x338, x336, x318, x315);
15177     fiat_secp384r1_addcarryx_u32(&x339, &x340, x338, x316, x313);
15178     fiat_secp384r1_addcarryx_u32(&x341, &x342, x340, x314, x311);
15179     fiat_secp384r1_addcarryx_u32(&x343, &x344, x342, x312, x309);
15180     fiat_secp384r1_addcarryx_u32(&x345, &x346, 0x0, x285, x327);
15181     fiat_secp384r1_addcarryx_u32(&x347, &x348, x346, x287, x328);
15182     fiat_secp384r1_addcarryx_u32(&x349, &x350, x348, x289, 0x0);
15183     fiat_secp384r1_addcarryx_u32(&x351, &x352, x350, x291, x325);
15184     fiat_secp384r1_addcarryx_u32(&x353, &x354, x352, x293, x329);
15185     fiat_secp384r1_addcarryx_u32(&x355, &x356, x354, x295, x331);
15186     fiat_secp384r1_addcarryx_u32(&x357, &x358, x356, x297, x333);
15187     fiat_secp384r1_addcarryx_u32(&x359, &x360, x358, x299, x335);
15188     fiat_secp384r1_addcarryx_u32(&x361, &x362, x360, x301, x337);
15189     fiat_secp384r1_addcarryx_u32(&x363, &x364, x362, x303, x339);
15190     fiat_secp384r1_addcarryx_u32(&x365, &x366, x364, x305, x341);
15191     fiat_secp384r1_addcarryx_u32(&x367, &x368, x366, x307, x343);
15192     fiat_secp384r1_addcarryx_u32(&x369, &x370, x368, ((uint32_t)x308 + x274),
15193                                  (x344 + x310));
15194     fiat_secp384r1_mulx_u32(&x371, &x372, x4, 0x2);
15195     fiat_secp384r1_mulx_u32(&x373, &x374, x4, UINT32_C(0xfffffffe));
15196     fiat_secp384r1_mulx_u32(&x375, &x376, x4, 0x2);
15197     fiat_secp384r1_mulx_u32(&x377, &x378, x4, UINT32_C(0xfffffffe));
15198     fiat_secp384r1_addcarryx_u32(&x379, &x380, 0x0, (fiat_secp384r1_uint1)x372,
15199                                  x4);
15200     fiat_secp384r1_addcarryx_u32(&x381, &x382, 0x0, x347, x4);
15201     fiat_secp384r1_addcarryx_u32(&x383, &x384, x382, x349, x377);
15202     fiat_secp384r1_addcarryx_u32(&x385, &x386, x384, x351, x378);
15203     fiat_secp384r1_addcarryx_u32(&x387, &x388, x386, x353, x375);
15204     fiat_secp384r1_addcarryx_u32(&x389, &x390, x388, x355,
15205                                  (fiat_secp384r1_uint1)x376);
15206     fiat_secp384r1_addcarryx_u32(&x391, &x392, x390, x357, x373);
15207     fiat_secp384r1_addcarryx_u32(&x393, &x394, x392, x359, x374);
15208     fiat_secp384r1_addcarryx_u32(&x395, &x396, x394, x361, x371);
15209     fiat_secp384r1_addcarryx_u32(&x397, &x398, x396, x363, x379);
15210     fiat_secp384r1_addcarryx_u32(&x399, &x400, x398, x365, x380);
15211     fiat_secp384r1_addcarryx_u32(&x401, &x402, x400, x367, 0x0);
15212     fiat_secp384r1_addcarryx_u32(&x403, &x404, x402, x369, 0x0);
15213     fiat_secp384r1_mulx_u32(&x405, &x406, x381, UINT32_C(0xffffffff));
15214     fiat_secp384r1_mulx_u32(&x407, &x408, x381, UINT32_C(0xffffffff));
15215     fiat_secp384r1_mulx_u32(&x409, &x410, x381, UINT32_C(0xffffffff));
15216     fiat_secp384r1_mulx_u32(&x411, &x412, x381, UINT32_C(0xffffffff));
15217     fiat_secp384r1_mulx_u32(&x413, &x414, x381, UINT32_C(0xffffffff));
15218     fiat_secp384r1_mulx_u32(&x415, &x416, x381, UINT32_C(0xffffffff));
15219     fiat_secp384r1_mulx_u32(&x417, &x418, x381, UINT32_C(0xffffffff));
15220     fiat_secp384r1_mulx_u32(&x419, &x420, x381, UINT32_C(0xfffffffe));
15221     fiat_secp384r1_mulx_u32(&x421, &x422, x381, UINT32_C(0xffffffff));
15222     fiat_secp384r1_mulx_u32(&x423, &x424, x381, UINT32_C(0xffffffff));
15223     fiat_secp384r1_addcarryx_u32(&x425, &x426, 0x0, x422, x419);
15224     fiat_secp384r1_addcarryx_u32(&x427, &x428, x426, x420, x417);
15225     fiat_secp384r1_addcarryx_u32(&x429, &x430, x428, x418, x415);
15226     fiat_secp384r1_addcarryx_u32(&x431, &x432, x430, x416, x413);
15227     fiat_secp384r1_addcarryx_u32(&x433, &x434, x432, x414, x411);
15228     fiat_secp384r1_addcarryx_u32(&x435, &x436, x434, x412, x409);
15229     fiat_secp384r1_addcarryx_u32(&x437, &x438, x436, x410, x407);
15230     fiat_secp384r1_addcarryx_u32(&x439, &x440, x438, x408, x405);
15231     fiat_secp384r1_addcarryx_u32(&x441, &x442, 0x0, x381, x423);
15232     fiat_secp384r1_addcarryx_u32(&x443, &x444, x442, x383, x424);
15233     fiat_secp384r1_addcarryx_u32(&x445, &x446, x444, x385, 0x0);
15234     fiat_secp384r1_addcarryx_u32(&x447, &x448, x446, x387, x421);
15235     fiat_secp384r1_addcarryx_u32(&x449, &x450, x448, x389, x425);
15236     fiat_secp384r1_addcarryx_u32(&x451, &x452, x450, x391, x427);
15237     fiat_secp384r1_addcarryx_u32(&x453, &x454, x452, x393, x429);
15238     fiat_secp384r1_addcarryx_u32(&x455, &x456, x454, x395, x431);
15239     fiat_secp384r1_addcarryx_u32(&x457, &x458, x456, x397, x433);
15240     fiat_secp384r1_addcarryx_u32(&x459, &x460, x458, x399, x435);
15241     fiat_secp384r1_addcarryx_u32(&x461, &x462, x460, x401, x437);
15242     fiat_secp384r1_addcarryx_u32(&x463, &x464, x462, x403, x439);
15243     fiat_secp384r1_addcarryx_u32(&x465, &x466, x464, ((uint32_t)x404 + x370),
15244                                  (x440 + x406));
15245     fiat_secp384r1_mulx_u32(&x467, &x468, x5, 0x2);
15246     fiat_secp384r1_mulx_u32(&x469, &x470, x5, UINT32_C(0xfffffffe));
15247     fiat_secp384r1_mulx_u32(&x471, &x472, x5, 0x2);
15248     fiat_secp384r1_mulx_u32(&x473, &x474, x5, UINT32_C(0xfffffffe));
15249     fiat_secp384r1_addcarryx_u32(&x475, &x476, 0x0, (fiat_secp384r1_uint1)x468,
15250                                  x5);
15251     fiat_secp384r1_addcarryx_u32(&x477, &x478, 0x0, x443, x5);
15252     fiat_secp384r1_addcarryx_u32(&x479, &x480, x478, x445, x473);
15253     fiat_secp384r1_addcarryx_u32(&x481, &x482, x480, x447, x474);
15254     fiat_secp384r1_addcarryx_u32(&x483, &x484, x482, x449, x471);
15255     fiat_secp384r1_addcarryx_u32(&x485, &x486, x484, x451,
15256                                  (fiat_secp384r1_uint1)x472);
15257     fiat_secp384r1_addcarryx_u32(&x487, &x488, x486, x453, x469);
15258     fiat_secp384r1_addcarryx_u32(&x489, &x490, x488, x455, x470);
15259     fiat_secp384r1_addcarryx_u32(&x491, &x492, x490, x457, x467);
15260     fiat_secp384r1_addcarryx_u32(&x493, &x494, x492, x459, x475);
15261     fiat_secp384r1_addcarryx_u32(&x495, &x496, x494, x461, x476);
15262     fiat_secp384r1_addcarryx_u32(&x497, &x498, x496, x463, 0x0);
15263     fiat_secp384r1_addcarryx_u32(&x499, &x500, x498, x465, 0x0);
15264     fiat_secp384r1_mulx_u32(&x501, &x502, x477, UINT32_C(0xffffffff));
15265     fiat_secp384r1_mulx_u32(&x503, &x504, x477, UINT32_C(0xffffffff));
15266     fiat_secp384r1_mulx_u32(&x505, &x506, x477, UINT32_C(0xffffffff));
15267     fiat_secp384r1_mulx_u32(&x507, &x508, x477, UINT32_C(0xffffffff));
15268     fiat_secp384r1_mulx_u32(&x509, &x510, x477, UINT32_C(0xffffffff));
15269     fiat_secp384r1_mulx_u32(&x511, &x512, x477, UINT32_C(0xffffffff));
15270     fiat_secp384r1_mulx_u32(&x513, &x514, x477, UINT32_C(0xffffffff));
15271     fiat_secp384r1_mulx_u32(&x515, &x516, x477, UINT32_C(0xfffffffe));
15272     fiat_secp384r1_mulx_u32(&x517, &x518, x477, UINT32_C(0xffffffff));
15273     fiat_secp384r1_mulx_u32(&x519, &x520, x477, UINT32_C(0xffffffff));
15274     fiat_secp384r1_addcarryx_u32(&x521, &x522, 0x0, x518, x515);
15275     fiat_secp384r1_addcarryx_u32(&x523, &x524, x522, x516, x513);
15276     fiat_secp384r1_addcarryx_u32(&x525, &x526, x524, x514, x511);
15277     fiat_secp384r1_addcarryx_u32(&x527, &x528, x526, x512, x509);
15278     fiat_secp384r1_addcarryx_u32(&x529, &x530, x528, x510, x507);
15279     fiat_secp384r1_addcarryx_u32(&x531, &x532, x530, x508, x505);
15280     fiat_secp384r1_addcarryx_u32(&x533, &x534, x532, x506, x503);
15281     fiat_secp384r1_addcarryx_u32(&x535, &x536, x534, x504, x501);
15282     fiat_secp384r1_addcarryx_u32(&x537, &x538, 0x0, x477, x519);
15283     fiat_secp384r1_addcarryx_u32(&x539, &x540, x538, x479, x520);
15284     fiat_secp384r1_addcarryx_u32(&x541, &x542, x540, x481, 0x0);
15285     fiat_secp384r1_addcarryx_u32(&x543, &x544, x542, x483, x517);
15286     fiat_secp384r1_addcarryx_u32(&x545, &x546, x544, x485, x521);
15287     fiat_secp384r1_addcarryx_u32(&x547, &x548, x546, x487, x523);
15288     fiat_secp384r1_addcarryx_u32(&x549, &x550, x548, x489, x525);
15289     fiat_secp384r1_addcarryx_u32(&x551, &x552, x550, x491, x527);
15290     fiat_secp384r1_addcarryx_u32(&x553, &x554, x552, x493, x529);
15291     fiat_secp384r1_addcarryx_u32(&x555, &x556, x554, x495, x531);
15292     fiat_secp384r1_addcarryx_u32(&x557, &x558, x556, x497, x533);
15293     fiat_secp384r1_addcarryx_u32(&x559, &x560, x558, x499, x535);
15294     fiat_secp384r1_addcarryx_u32(&x561, &x562, x560, ((uint32_t)x500 + x466),
15295                                  (x536 + x502));
15296     fiat_secp384r1_mulx_u32(&x563, &x564, x6, 0x2);
15297     fiat_secp384r1_mulx_u32(&x565, &x566, x6, UINT32_C(0xfffffffe));
15298     fiat_secp384r1_mulx_u32(&x567, &x568, x6, 0x2);
15299     fiat_secp384r1_mulx_u32(&x569, &x570, x6, UINT32_C(0xfffffffe));
15300     fiat_secp384r1_addcarryx_u32(&x571, &x572, 0x0, (fiat_secp384r1_uint1)x564,
15301                                  x6);
15302     fiat_secp384r1_addcarryx_u32(&x573, &x574, 0x0, x539, x6);
15303     fiat_secp384r1_addcarryx_u32(&x575, &x576, x574, x541, x569);
15304     fiat_secp384r1_addcarryx_u32(&x577, &x578, x576, x543, x570);
15305     fiat_secp384r1_addcarryx_u32(&x579, &x580, x578, x545, x567);
15306     fiat_secp384r1_addcarryx_u32(&x581, &x582, x580, x547,
15307                                  (fiat_secp384r1_uint1)x568);
15308     fiat_secp384r1_addcarryx_u32(&x583, &x584, x582, x549, x565);
15309     fiat_secp384r1_addcarryx_u32(&x585, &x586, x584, x551, x566);
15310     fiat_secp384r1_addcarryx_u32(&x587, &x588, x586, x553, x563);
15311     fiat_secp384r1_addcarryx_u32(&x589, &x590, x588, x555, x571);
15312     fiat_secp384r1_addcarryx_u32(&x591, &x592, x590, x557, x572);
15313     fiat_secp384r1_addcarryx_u32(&x593, &x594, x592, x559, 0x0);
15314     fiat_secp384r1_addcarryx_u32(&x595, &x596, x594, x561, 0x0);
15315     fiat_secp384r1_mulx_u32(&x597, &x598, x573, UINT32_C(0xffffffff));
15316     fiat_secp384r1_mulx_u32(&x599, &x600, x573, UINT32_C(0xffffffff));
15317     fiat_secp384r1_mulx_u32(&x601, &x602, x573, UINT32_C(0xffffffff));
15318     fiat_secp384r1_mulx_u32(&x603, &x604, x573, UINT32_C(0xffffffff));
15319     fiat_secp384r1_mulx_u32(&x605, &x606, x573, UINT32_C(0xffffffff));
15320     fiat_secp384r1_mulx_u32(&x607, &x608, x573, UINT32_C(0xffffffff));
15321     fiat_secp384r1_mulx_u32(&x609, &x610, x573, UINT32_C(0xffffffff));
15322     fiat_secp384r1_mulx_u32(&x611, &x612, x573, UINT32_C(0xfffffffe));
15323     fiat_secp384r1_mulx_u32(&x613, &x614, x573, UINT32_C(0xffffffff));
15324     fiat_secp384r1_mulx_u32(&x615, &x616, x573, UINT32_C(0xffffffff));
15325     fiat_secp384r1_addcarryx_u32(&x617, &x618, 0x0, x614, x611);
15326     fiat_secp384r1_addcarryx_u32(&x619, &x620, x618, x612, x609);
15327     fiat_secp384r1_addcarryx_u32(&x621, &x622, x620, x610, x607);
15328     fiat_secp384r1_addcarryx_u32(&x623, &x624, x622, x608, x605);
15329     fiat_secp384r1_addcarryx_u32(&x625, &x626, x624, x606, x603);
15330     fiat_secp384r1_addcarryx_u32(&x627, &x628, x626, x604, x601);
15331     fiat_secp384r1_addcarryx_u32(&x629, &x630, x628, x602, x599);
15332     fiat_secp384r1_addcarryx_u32(&x631, &x632, x630, x600, x597);
15333     fiat_secp384r1_addcarryx_u32(&x633, &x634, 0x0, x573, x615);
15334     fiat_secp384r1_addcarryx_u32(&x635, &x636, x634, x575, x616);
15335     fiat_secp384r1_addcarryx_u32(&x637, &x638, x636, x577, 0x0);
15336     fiat_secp384r1_addcarryx_u32(&x639, &x640, x638, x579, x613);
15337     fiat_secp384r1_addcarryx_u32(&x641, &x642, x640, x581, x617);
15338     fiat_secp384r1_addcarryx_u32(&x643, &x644, x642, x583, x619);
15339     fiat_secp384r1_addcarryx_u32(&x645, &x646, x644, x585, x621);
15340     fiat_secp384r1_addcarryx_u32(&x647, &x648, x646, x587, x623);
15341     fiat_secp384r1_addcarryx_u32(&x649, &x650, x648, x589, x625);
15342     fiat_secp384r1_addcarryx_u32(&x651, &x652, x650, x591, x627);
15343     fiat_secp384r1_addcarryx_u32(&x653, &x654, x652, x593, x629);
15344     fiat_secp384r1_addcarryx_u32(&x655, &x656, x654, x595, x631);
15345     fiat_secp384r1_addcarryx_u32(&x657, &x658, x656, ((uint32_t)x596 + x562),
15346                                  (x632 + x598));
15347     fiat_secp384r1_mulx_u32(&x659, &x660, x7, 0x2);
15348     fiat_secp384r1_mulx_u32(&x661, &x662, x7, UINT32_C(0xfffffffe));
15349     fiat_secp384r1_mulx_u32(&x663, &x664, x7, 0x2);
15350     fiat_secp384r1_mulx_u32(&x665, &x666, x7, UINT32_C(0xfffffffe));
15351     fiat_secp384r1_addcarryx_u32(&x667, &x668, 0x0, (fiat_secp384r1_uint1)x660,
15352                                  x7);
15353     fiat_secp384r1_addcarryx_u32(&x669, &x670, 0x0, x635, x7);
15354     fiat_secp384r1_addcarryx_u32(&x671, &x672, x670, x637, x665);
15355     fiat_secp384r1_addcarryx_u32(&x673, &x674, x672, x639, x666);
15356     fiat_secp384r1_addcarryx_u32(&x675, &x676, x674, x641, x663);
15357     fiat_secp384r1_addcarryx_u32(&x677, &x678, x676, x643,
15358                                  (fiat_secp384r1_uint1)x664);
15359     fiat_secp384r1_addcarryx_u32(&x679, &x680, x678, x645, x661);
15360     fiat_secp384r1_addcarryx_u32(&x681, &x682, x680, x647, x662);
15361     fiat_secp384r1_addcarryx_u32(&x683, &x684, x682, x649, x659);
15362     fiat_secp384r1_addcarryx_u32(&x685, &x686, x684, x651, x667);
15363     fiat_secp384r1_addcarryx_u32(&x687, &x688, x686, x653, x668);
15364     fiat_secp384r1_addcarryx_u32(&x689, &x690, x688, x655, 0x0);
15365     fiat_secp384r1_addcarryx_u32(&x691, &x692, x690, x657, 0x0);
15366     fiat_secp384r1_mulx_u32(&x693, &x694, x669, UINT32_C(0xffffffff));
15367     fiat_secp384r1_mulx_u32(&x695, &x696, x669, UINT32_C(0xffffffff));
15368     fiat_secp384r1_mulx_u32(&x697, &x698, x669, UINT32_C(0xffffffff));
15369     fiat_secp384r1_mulx_u32(&x699, &x700, x669, UINT32_C(0xffffffff));
15370     fiat_secp384r1_mulx_u32(&x701, &x702, x669, UINT32_C(0xffffffff));
15371     fiat_secp384r1_mulx_u32(&x703, &x704, x669, UINT32_C(0xffffffff));
15372     fiat_secp384r1_mulx_u32(&x705, &x706, x669, UINT32_C(0xffffffff));
15373     fiat_secp384r1_mulx_u32(&x707, &x708, x669, UINT32_C(0xfffffffe));
15374     fiat_secp384r1_mulx_u32(&x709, &x710, x669, UINT32_C(0xffffffff));
15375     fiat_secp384r1_mulx_u32(&x711, &x712, x669, UINT32_C(0xffffffff));
15376     fiat_secp384r1_addcarryx_u32(&x713, &x714, 0x0, x710, x707);
15377     fiat_secp384r1_addcarryx_u32(&x715, &x716, x714, x708, x705);
15378     fiat_secp384r1_addcarryx_u32(&x717, &x718, x716, x706, x703);
15379     fiat_secp384r1_addcarryx_u32(&x719, &x720, x718, x704, x701);
15380     fiat_secp384r1_addcarryx_u32(&x721, &x722, x720, x702, x699);
15381     fiat_secp384r1_addcarryx_u32(&x723, &x724, x722, x700, x697);
15382     fiat_secp384r1_addcarryx_u32(&x725, &x726, x724, x698, x695);
15383     fiat_secp384r1_addcarryx_u32(&x727, &x728, x726, x696, x693);
15384     fiat_secp384r1_addcarryx_u32(&x729, &x730, 0x0, x669, x711);
15385     fiat_secp384r1_addcarryx_u32(&x731, &x732, x730, x671, x712);
15386     fiat_secp384r1_addcarryx_u32(&x733, &x734, x732, x673, 0x0);
15387     fiat_secp384r1_addcarryx_u32(&x735, &x736, x734, x675, x709);
15388     fiat_secp384r1_addcarryx_u32(&x737, &x738, x736, x677, x713);
15389     fiat_secp384r1_addcarryx_u32(&x739, &x740, x738, x679, x715);
15390     fiat_secp384r1_addcarryx_u32(&x741, &x742, x740, x681, x717);
15391     fiat_secp384r1_addcarryx_u32(&x743, &x744, x742, x683, x719);
15392     fiat_secp384r1_addcarryx_u32(&x745, &x746, x744, x685, x721);
15393     fiat_secp384r1_addcarryx_u32(&x747, &x748, x746, x687, x723);
15394     fiat_secp384r1_addcarryx_u32(&x749, &x750, x748, x689, x725);
15395     fiat_secp384r1_addcarryx_u32(&x751, &x752, x750, x691, x727);
15396     fiat_secp384r1_addcarryx_u32(&x753, &x754, x752, ((uint32_t)x692 + x658),
15397                                  (x728 + x694));
15398     fiat_secp384r1_mulx_u32(&x755, &x756, x8, 0x2);
15399     fiat_secp384r1_mulx_u32(&x757, &x758, x8, UINT32_C(0xfffffffe));
15400     fiat_secp384r1_mulx_u32(&x759, &x760, x8, 0x2);
15401     fiat_secp384r1_mulx_u32(&x761, &x762, x8, UINT32_C(0xfffffffe));
15402     fiat_secp384r1_addcarryx_u32(&x763, &x764, 0x0, (fiat_secp384r1_uint1)x756,
15403                                  x8);
15404     fiat_secp384r1_addcarryx_u32(&x765, &x766, 0x0, x731, x8);
15405     fiat_secp384r1_addcarryx_u32(&x767, &x768, x766, x733, x761);
15406     fiat_secp384r1_addcarryx_u32(&x769, &x770, x768, x735, x762);
15407     fiat_secp384r1_addcarryx_u32(&x771, &x772, x770, x737, x759);
15408     fiat_secp384r1_addcarryx_u32(&x773, &x774, x772, x739,
15409                                  (fiat_secp384r1_uint1)x760);
15410     fiat_secp384r1_addcarryx_u32(&x775, &x776, x774, x741, x757);
15411     fiat_secp384r1_addcarryx_u32(&x777, &x778, x776, x743, x758);
15412     fiat_secp384r1_addcarryx_u32(&x779, &x780, x778, x745, x755);
15413     fiat_secp384r1_addcarryx_u32(&x781, &x782, x780, x747, x763);
15414     fiat_secp384r1_addcarryx_u32(&x783, &x784, x782, x749, x764);
15415     fiat_secp384r1_addcarryx_u32(&x785, &x786, x784, x751, 0x0);
15416     fiat_secp384r1_addcarryx_u32(&x787, &x788, x786, x753, 0x0);
15417     fiat_secp384r1_mulx_u32(&x789, &x790, x765, UINT32_C(0xffffffff));
15418     fiat_secp384r1_mulx_u32(&x791, &x792, x765, UINT32_C(0xffffffff));
15419     fiat_secp384r1_mulx_u32(&x793, &x794, x765, UINT32_C(0xffffffff));
15420     fiat_secp384r1_mulx_u32(&x795, &x796, x765, UINT32_C(0xffffffff));
15421     fiat_secp384r1_mulx_u32(&x797, &x798, x765, UINT32_C(0xffffffff));
15422     fiat_secp384r1_mulx_u32(&x799, &x800, x765, UINT32_C(0xffffffff));
15423     fiat_secp384r1_mulx_u32(&x801, &x802, x765, UINT32_C(0xffffffff));
15424     fiat_secp384r1_mulx_u32(&x803, &x804, x765, UINT32_C(0xfffffffe));
15425     fiat_secp384r1_mulx_u32(&x805, &x806, x765, UINT32_C(0xffffffff));
15426     fiat_secp384r1_mulx_u32(&x807, &x808, x765, UINT32_C(0xffffffff));
15427     fiat_secp384r1_addcarryx_u32(&x809, &x810, 0x0, x806, x803);
15428     fiat_secp384r1_addcarryx_u32(&x811, &x812, x810, x804, x801);
15429     fiat_secp384r1_addcarryx_u32(&x813, &x814, x812, x802, x799);
15430     fiat_secp384r1_addcarryx_u32(&x815, &x816, x814, x800, x797);
15431     fiat_secp384r1_addcarryx_u32(&x817, &x818, x816, x798, x795);
15432     fiat_secp384r1_addcarryx_u32(&x819, &x820, x818, x796, x793);
15433     fiat_secp384r1_addcarryx_u32(&x821, &x822, x820, x794, x791);
15434     fiat_secp384r1_addcarryx_u32(&x823, &x824, x822, x792, x789);
15435     fiat_secp384r1_addcarryx_u32(&x825, &x826, 0x0, x765, x807);
15436     fiat_secp384r1_addcarryx_u32(&x827, &x828, x826, x767, x808);
15437     fiat_secp384r1_addcarryx_u32(&x829, &x830, x828, x769, 0x0);
15438     fiat_secp384r1_addcarryx_u32(&x831, &x832, x830, x771, x805);
15439     fiat_secp384r1_addcarryx_u32(&x833, &x834, x832, x773, x809);
15440     fiat_secp384r1_addcarryx_u32(&x835, &x836, x834, x775, x811);
15441     fiat_secp384r1_addcarryx_u32(&x837, &x838, x836, x777, x813);
15442     fiat_secp384r1_addcarryx_u32(&x839, &x840, x838, x779, x815);
15443     fiat_secp384r1_addcarryx_u32(&x841, &x842, x840, x781, x817);
15444     fiat_secp384r1_addcarryx_u32(&x843, &x844, x842, x783, x819);
15445     fiat_secp384r1_addcarryx_u32(&x845, &x846, x844, x785, x821);
15446     fiat_secp384r1_addcarryx_u32(&x847, &x848, x846, x787, x823);
15447     fiat_secp384r1_addcarryx_u32(&x849, &x850, x848, ((uint32_t)x788 + x754),
15448                                  (x824 + x790));
15449     fiat_secp384r1_mulx_u32(&x851, &x852, x9, 0x2);
15450     fiat_secp384r1_mulx_u32(&x853, &x854, x9, UINT32_C(0xfffffffe));
15451     fiat_secp384r1_mulx_u32(&x855, &x856, x9, 0x2);
15452     fiat_secp384r1_mulx_u32(&x857, &x858, x9, UINT32_C(0xfffffffe));
15453     fiat_secp384r1_addcarryx_u32(&x859, &x860, 0x0, (fiat_secp384r1_uint1)x852,
15454                                  x9);
15455     fiat_secp384r1_addcarryx_u32(&x861, &x862, 0x0, x827, x9);
15456     fiat_secp384r1_addcarryx_u32(&x863, &x864, x862, x829, x857);
15457     fiat_secp384r1_addcarryx_u32(&x865, &x866, x864, x831, x858);
15458     fiat_secp384r1_addcarryx_u32(&x867, &x868, x866, x833, x855);
15459     fiat_secp384r1_addcarryx_u32(&x869, &x870, x868, x835,
15460                                  (fiat_secp384r1_uint1)x856);
15461     fiat_secp384r1_addcarryx_u32(&x871, &x872, x870, x837, x853);
15462     fiat_secp384r1_addcarryx_u32(&x873, &x874, x872, x839, x854);
15463     fiat_secp384r1_addcarryx_u32(&x875, &x876, x874, x841, x851);
15464     fiat_secp384r1_addcarryx_u32(&x877, &x878, x876, x843, x859);
15465     fiat_secp384r1_addcarryx_u32(&x879, &x880, x878, x845, x860);
15466     fiat_secp384r1_addcarryx_u32(&x881, &x882, x880, x847, 0x0);
15467     fiat_secp384r1_addcarryx_u32(&x883, &x884, x882, x849, 0x0);
15468     fiat_secp384r1_mulx_u32(&x885, &x886, x861, UINT32_C(0xffffffff));
15469     fiat_secp384r1_mulx_u32(&x887, &x888, x861, UINT32_C(0xffffffff));
15470     fiat_secp384r1_mulx_u32(&x889, &x890, x861, UINT32_C(0xffffffff));
15471     fiat_secp384r1_mulx_u32(&x891, &x892, x861, UINT32_C(0xffffffff));
15472     fiat_secp384r1_mulx_u32(&x893, &x894, x861, UINT32_C(0xffffffff));
15473     fiat_secp384r1_mulx_u32(&x895, &x896, x861, UINT32_C(0xffffffff));
15474     fiat_secp384r1_mulx_u32(&x897, &x898, x861, UINT32_C(0xffffffff));
15475     fiat_secp384r1_mulx_u32(&x899, &x900, x861, UINT32_C(0xfffffffe));
15476     fiat_secp384r1_mulx_u32(&x901, &x902, x861, UINT32_C(0xffffffff));
15477     fiat_secp384r1_mulx_u32(&x903, &x904, x861, UINT32_C(0xffffffff));
15478     fiat_secp384r1_addcarryx_u32(&x905, &x906, 0x0, x902, x899);
15479     fiat_secp384r1_addcarryx_u32(&x907, &x908, x906, x900, x897);
15480     fiat_secp384r1_addcarryx_u32(&x909, &x910, x908, x898, x895);
15481     fiat_secp384r1_addcarryx_u32(&x911, &x912, x910, x896, x893);
15482     fiat_secp384r1_addcarryx_u32(&x913, &x914, x912, x894, x891);
15483     fiat_secp384r1_addcarryx_u32(&x915, &x916, x914, x892, x889);
15484     fiat_secp384r1_addcarryx_u32(&x917, &x918, x916, x890, x887);
15485     fiat_secp384r1_addcarryx_u32(&x919, &x920, x918, x888, x885);
15486     fiat_secp384r1_addcarryx_u32(&x921, &x922, 0x0, x861, x903);
15487     fiat_secp384r1_addcarryx_u32(&x923, &x924, x922, x863, x904);
15488     fiat_secp384r1_addcarryx_u32(&x925, &x926, x924, x865, 0x0);
15489     fiat_secp384r1_addcarryx_u32(&x927, &x928, x926, x867, x901);
15490     fiat_secp384r1_addcarryx_u32(&x929, &x930, x928, x869, x905);
15491     fiat_secp384r1_addcarryx_u32(&x931, &x932, x930, x871, x907);
15492     fiat_secp384r1_addcarryx_u32(&x933, &x934, x932, x873, x909);
15493     fiat_secp384r1_addcarryx_u32(&x935, &x936, x934, x875, x911);
15494     fiat_secp384r1_addcarryx_u32(&x937, &x938, x936, x877, x913);
15495     fiat_secp384r1_addcarryx_u32(&x939, &x940, x938, x879, x915);
15496     fiat_secp384r1_addcarryx_u32(&x941, &x942, x940, x881, x917);
15497     fiat_secp384r1_addcarryx_u32(&x943, &x944, x942, x883, x919);
15498     fiat_secp384r1_addcarryx_u32(&x945, &x946, x944, ((uint32_t)x884 + x850),
15499                                  (x920 + x886));
15500     fiat_secp384r1_mulx_u32(&x947, &x948, x10, 0x2);
15501     fiat_secp384r1_mulx_u32(&x949, &x950, x10, UINT32_C(0xfffffffe));
15502     fiat_secp384r1_mulx_u32(&x951, &x952, x10, 0x2);
15503     fiat_secp384r1_mulx_u32(&x953, &x954, x10, UINT32_C(0xfffffffe));
15504     fiat_secp384r1_addcarryx_u32(&x955, &x956, 0x0, (fiat_secp384r1_uint1)x948,
15505                                  x10);
15506     fiat_secp384r1_addcarryx_u32(&x957, &x958, 0x0, x923, x10);
15507     fiat_secp384r1_addcarryx_u32(&x959, &x960, x958, x925, x953);
15508     fiat_secp384r1_addcarryx_u32(&x961, &x962, x960, x927, x954);
15509     fiat_secp384r1_addcarryx_u32(&x963, &x964, x962, x929, x951);
15510     fiat_secp384r1_addcarryx_u32(&x965, &x966, x964, x931,
15511                                  (fiat_secp384r1_uint1)x952);
15512     fiat_secp384r1_addcarryx_u32(&x967, &x968, x966, x933, x949);
15513     fiat_secp384r1_addcarryx_u32(&x969, &x970, x968, x935, x950);
15514     fiat_secp384r1_addcarryx_u32(&x971, &x972, x970, x937, x947);
15515     fiat_secp384r1_addcarryx_u32(&x973, &x974, x972, x939, x955);
15516     fiat_secp384r1_addcarryx_u32(&x975, &x976, x974, x941, x956);
15517     fiat_secp384r1_addcarryx_u32(&x977, &x978, x976, x943, 0x0);
15518     fiat_secp384r1_addcarryx_u32(&x979, &x980, x978, x945, 0x0);
15519     fiat_secp384r1_mulx_u32(&x981, &x982, x957, UINT32_C(0xffffffff));
15520     fiat_secp384r1_mulx_u32(&x983, &x984, x957, UINT32_C(0xffffffff));
15521     fiat_secp384r1_mulx_u32(&x985, &x986, x957, UINT32_C(0xffffffff));
15522     fiat_secp384r1_mulx_u32(&x987, &x988, x957, UINT32_C(0xffffffff));
15523     fiat_secp384r1_mulx_u32(&x989, &x990, x957, UINT32_C(0xffffffff));
15524     fiat_secp384r1_mulx_u32(&x991, &x992, x957, UINT32_C(0xffffffff));
15525     fiat_secp384r1_mulx_u32(&x993, &x994, x957, UINT32_C(0xffffffff));
15526     fiat_secp384r1_mulx_u32(&x995, &x996, x957, UINT32_C(0xfffffffe));
15527     fiat_secp384r1_mulx_u32(&x997, &x998, x957, UINT32_C(0xffffffff));
15528     fiat_secp384r1_mulx_u32(&x999, &x1000, x957, UINT32_C(0xffffffff));
15529     fiat_secp384r1_addcarryx_u32(&x1001, &x1002, 0x0, x998, x995);
15530     fiat_secp384r1_addcarryx_u32(&x1003, &x1004, x1002, x996, x993);
15531     fiat_secp384r1_addcarryx_u32(&x1005, &x1006, x1004, x994, x991);
15532     fiat_secp384r1_addcarryx_u32(&x1007, &x1008, x1006, x992, x989);
15533     fiat_secp384r1_addcarryx_u32(&x1009, &x1010, x1008, x990, x987);
15534     fiat_secp384r1_addcarryx_u32(&x1011, &x1012, x1010, x988, x985);
15535     fiat_secp384r1_addcarryx_u32(&x1013, &x1014, x1012, x986, x983);
15536     fiat_secp384r1_addcarryx_u32(&x1015, &x1016, x1014, x984, x981);
15537     fiat_secp384r1_addcarryx_u32(&x1017, &x1018, 0x0, x957, x999);
15538     fiat_secp384r1_addcarryx_u32(&x1019, &x1020, x1018, x959, x1000);
15539     fiat_secp384r1_addcarryx_u32(&x1021, &x1022, x1020, x961, 0x0);
15540     fiat_secp384r1_addcarryx_u32(&x1023, &x1024, x1022, x963, x997);
15541     fiat_secp384r1_addcarryx_u32(&x1025, &x1026, x1024, x965, x1001);
15542     fiat_secp384r1_addcarryx_u32(&x1027, &x1028, x1026, x967, x1003);
15543     fiat_secp384r1_addcarryx_u32(&x1029, &x1030, x1028, x969, x1005);
15544     fiat_secp384r1_addcarryx_u32(&x1031, &x1032, x1030, x971, x1007);
15545     fiat_secp384r1_addcarryx_u32(&x1033, &x1034, x1032, x973, x1009);
15546     fiat_secp384r1_addcarryx_u32(&x1035, &x1036, x1034, x975, x1011);
15547     fiat_secp384r1_addcarryx_u32(&x1037, &x1038, x1036, x977, x1013);
15548     fiat_secp384r1_addcarryx_u32(&x1039, &x1040, x1038, x979, x1015);
15549     fiat_secp384r1_addcarryx_u32(&x1041, &x1042, x1040, ((uint32_t)x980 + x946),
15550                                  (x1016 + x982));
15551     fiat_secp384r1_mulx_u32(&x1043, &x1044, x11, 0x2);
15552     fiat_secp384r1_mulx_u32(&x1045, &x1046, x11, UINT32_C(0xfffffffe));
15553     fiat_secp384r1_mulx_u32(&x1047, &x1048, x11, 0x2);
15554     fiat_secp384r1_mulx_u32(&x1049, &x1050, x11, UINT32_C(0xfffffffe));
15555     fiat_secp384r1_addcarryx_u32(&x1051, &x1052, 0x0,
15556                                  (fiat_secp384r1_uint1)x1044, x11);
15557     fiat_secp384r1_addcarryx_u32(&x1053, &x1054, 0x0, x1019, x11);
15558     fiat_secp384r1_addcarryx_u32(&x1055, &x1056, x1054, x1021, x1049);
15559     fiat_secp384r1_addcarryx_u32(&x1057, &x1058, x1056, x1023, x1050);
15560     fiat_secp384r1_addcarryx_u32(&x1059, &x1060, x1058, x1025, x1047);
15561     fiat_secp384r1_addcarryx_u32(&x1061, &x1062, x1060, x1027,
15562                                  (fiat_secp384r1_uint1)x1048);
15563     fiat_secp384r1_addcarryx_u32(&x1063, &x1064, x1062, x1029, x1045);
15564     fiat_secp384r1_addcarryx_u32(&x1065, &x1066, x1064, x1031, x1046);
15565     fiat_secp384r1_addcarryx_u32(&x1067, &x1068, x1066, x1033, x1043);
15566     fiat_secp384r1_addcarryx_u32(&x1069, &x1070, x1068, x1035, x1051);
15567     fiat_secp384r1_addcarryx_u32(&x1071, &x1072, x1070, x1037, x1052);
15568     fiat_secp384r1_addcarryx_u32(&x1073, &x1074, x1072, x1039, 0x0);
15569     fiat_secp384r1_addcarryx_u32(&x1075, &x1076, x1074, x1041, 0x0);
15570     fiat_secp384r1_mulx_u32(&x1077, &x1078, x1053, UINT32_C(0xffffffff));
15571     fiat_secp384r1_mulx_u32(&x1079, &x1080, x1053, UINT32_C(0xffffffff));
15572     fiat_secp384r1_mulx_u32(&x1081, &x1082, x1053, UINT32_C(0xffffffff));
15573     fiat_secp384r1_mulx_u32(&x1083, &x1084, x1053, UINT32_C(0xffffffff));
15574     fiat_secp384r1_mulx_u32(&x1085, &x1086, x1053, UINT32_C(0xffffffff));
15575     fiat_secp384r1_mulx_u32(&x1087, &x1088, x1053, UINT32_C(0xffffffff));
15576     fiat_secp384r1_mulx_u32(&x1089, &x1090, x1053, UINT32_C(0xffffffff));
15577     fiat_secp384r1_mulx_u32(&x1091, &x1092, x1053, UINT32_C(0xfffffffe));
15578     fiat_secp384r1_mulx_u32(&x1093, &x1094, x1053, UINT32_C(0xffffffff));
15579     fiat_secp384r1_mulx_u32(&x1095, &x1096, x1053, UINT32_C(0xffffffff));
15580     fiat_secp384r1_addcarryx_u32(&x1097, &x1098, 0x0, x1094, x1091);
15581     fiat_secp384r1_addcarryx_u32(&x1099, &x1100, x1098, x1092, x1089);
15582     fiat_secp384r1_addcarryx_u32(&x1101, &x1102, x1100, x1090, x1087);
15583     fiat_secp384r1_addcarryx_u32(&x1103, &x1104, x1102, x1088, x1085);
15584     fiat_secp384r1_addcarryx_u32(&x1105, &x1106, x1104, x1086, x1083);
15585     fiat_secp384r1_addcarryx_u32(&x1107, &x1108, x1106, x1084, x1081);
15586     fiat_secp384r1_addcarryx_u32(&x1109, &x1110, x1108, x1082, x1079);
15587     fiat_secp384r1_addcarryx_u32(&x1111, &x1112, x1110, x1080, x1077);
15588     fiat_secp384r1_addcarryx_u32(&x1113, &x1114, 0x0, x1053, x1095);
15589     fiat_secp384r1_addcarryx_u32(&x1115, &x1116, x1114, x1055, x1096);
15590     fiat_secp384r1_addcarryx_u32(&x1117, &x1118, x1116, x1057, 0x0);
15591     fiat_secp384r1_addcarryx_u32(&x1119, &x1120, x1118, x1059, x1093);
15592     fiat_secp384r1_addcarryx_u32(&x1121, &x1122, x1120, x1061, x1097);
15593     fiat_secp384r1_addcarryx_u32(&x1123, &x1124, x1122, x1063, x1099);
15594     fiat_secp384r1_addcarryx_u32(&x1125, &x1126, x1124, x1065, x1101);
15595     fiat_secp384r1_addcarryx_u32(&x1127, &x1128, x1126, x1067, x1103);
15596     fiat_secp384r1_addcarryx_u32(&x1129, &x1130, x1128, x1069, x1105);
15597     fiat_secp384r1_addcarryx_u32(&x1131, &x1132, x1130, x1071, x1107);
15598     fiat_secp384r1_addcarryx_u32(&x1133, &x1134, x1132, x1073, x1109);
15599     fiat_secp384r1_addcarryx_u32(&x1135, &x1136, x1134, x1075, x1111);
15600     fiat_secp384r1_addcarryx_u32(&x1137, &x1138, x1136,
15601                                  ((uint32_t)x1076 + x1042), (x1112 + x1078));
15602     fiat_secp384r1_subborrowx_u32(&x1139, &x1140, 0x0, x1115,
15603                                   UINT32_C(0xffffffff));
15604     fiat_secp384r1_subborrowx_u32(&x1141, &x1142, x1140, x1117, 0x0);
15605     fiat_secp384r1_subborrowx_u32(&x1143, &x1144, x1142, x1119, 0x0);
15606     fiat_secp384r1_subborrowx_u32(&x1145, &x1146, x1144, x1121,
15607                                   UINT32_C(0xffffffff));
15608     fiat_secp384r1_subborrowx_u32(&x1147, &x1148, x1146, x1123,
15609                                   UINT32_C(0xfffffffe));
15610     fiat_secp384r1_subborrowx_u32(&x1149, &x1150, x1148, x1125,
15611                                   UINT32_C(0xffffffff));
15612     fiat_secp384r1_subborrowx_u32(&x1151, &x1152, x1150, x1127,
15613                                   UINT32_C(0xffffffff));
15614     fiat_secp384r1_subborrowx_u32(&x1153, &x1154, x1152, x1129,
15615                                   UINT32_C(0xffffffff));
15616     fiat_secp384r1_subborrowx_u32(&x1155, &x1156, x1154, x1131,
15617                                   UINT32_C(0xffffffff));
15618     fiat_secp384r1_subborrowx_u32(&x1157, &x1158, x1156, x1133,
15619                                   UINT32_C(0xffffffff));
15620     fiat_secp384r1_subborrowx_u32(&x1159, &x1160, x1158, x1135,
15621                                   UINT32_C(0xffffffff));
15622     fiat_secp384r1_subborrowx_u32(&x1161, &x1162, x1160, x1137,
15623                                   UINT32_C(0xffffffff));
15624     fiat_secp384r1_subborrowx_u32(&x1163, &x1164, x1162, x1138, 0x0);
15625     fiat_secp384r1_cmovznz_u32(&x1165, x1164, x1139, x1115);
15626     fiat_secp384r1_cmovznz_u32(&x1166, x1164, x1141, x1117);
15627     fiat_secp384r1_cmovznz_u32(&x1167, x1164, x1143, x1119);
15628     fiat_secp384r1_cmovznz_u32(&x1168, x1164, x1145, x1121);
15629     fiat_secp384r1_cmovznz_u32(&x1169, x1164, x1147, x1123);
15630     fiat_secp384r1_cmovznz_u32(&x1170, x1164, x1149, x1125);
15631     fiat_secp384r1_cmovznz_u32(&x1171, x1164, x1151, x1127);
15632     fiat_secp384r1_cmovznz_u32(&x1172, x1164, x1153, x1129);
15633     fiat_secp384r1_cmovznz_u32(&x1173, x1164, x1155, x1131);
15634     fiat_secp384r1_cmovznz_u32(&x1174, x1164, x1157, x1133);
15635     fiat_secp384r1_cmovznz_u32(&x1175, x1164, x1159, x1135);
15636     fiat_secp384r1_cmovznz_u32(&x1176, x1164, x1161, x1137);
15637     out1[0] = x1165;
15638     out1[1] = x1166;
15639     out1[2] = x1167;
15640     out1[3] = x1168;
15641     out1[4] = x1169;
15642     out1[5] = x1170;
15643     out1[6] = x1171;
15644     out1[7] = x1172;
15645     out1[8] = x1173;
15646     out1[9] = x1174;
15647     out1[10] = x1175;
15648     out1[11] = x1176;
15649 }
15650 
15651 /*
15652  * The function fiat_secp384r1_nonzero outputs a single non-zero word if the input is non-zero and zero otherwise.
15653  * Preconditions:
15654  *   0 ≤ eval arg1 < m
15655  * Postconditions:
15656  *   out1 = 0 ↔ eval (from_montgomery arg1) mod m = 0
15657  *
15658  * Input Bounds:
15659  *   arg1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
15660  * Output Bounds:
15661  *   out1: [0x0 ~> 0xffffffff]
15662  */
15663 static void
fiat_secp384r1_nonzero(uint32_t * out1,const uint32_t arg1[12])15664 fiat_secp384r1_nonzero(uint32_t *out1, const uint32_t arg1[12])
15665 {
15666     uint32_t x1;
15667     x1 = ((arg1[0]) |
15668           ((arg1[1]) |
15669            ((arg1[2]) |
15670             ((arg1[3]) |
15671              ((arg1[4]) |
15672               ((arg1[5]) |
15673                ((arg1[6]) |
15674                 ((arg1[7]) |
15675                  ((arg1[8]) | ((arg1[9]) | ((arg1[10]) | (arg1[11]))))))))))));
15676     *out1 = x1;
15677 }
15678 
15679 /*
15680  * The function fiat_secp384r1_selectznz is a multi-limb conditional select.
15681  * Postconditions:
15682  *   eval out1 = (if arg1 = 0 then eval arg2 else eval arg3)
15683  *
15684  * Input Bounds:
15685  *   arg1: [0x0 ~> 0x1]
15686  *   arg2: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
15687  *   arg3: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
15688  * Output Bounds:
15689  *   out1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
15690  */
15691 static void
fiat_secp384r1_selectznz(uint32_t out1[12],fiat_secp384r1_uint1 arg1,const uint32_t arg2[12],const uint32_t arg3[12])15692 fiat_secp384r1_selectznz(uint32_t out1[12],
15693                          fiat_secp384r1_uint1 arg1,
15694                          const uint32_t arg2[12],
15695                          const uint32_t arg3[12])
15696 {
15697     uint32_t x1;
15698     uint32_t x2;
15699     uint32_t x3;
15700     uint32_t x4;
15701     uint32_t x5;
15702     uint32_t x6;
15703     uint32_t x7;
15704     uint32_t x8;
15705     uint32_t x9;
15706     uint32_t x10;
15707     uint32_t x11;
15708     uint32_t x12;
15709     fiat_secp384r1_cmovznz_u32(&x1, arg1, (arg2[0]), (arg3[0]));
15710     fiat_secp384r1_cmovznz_u32(&x2, arg1, (arg2[1]), (arg3[1]));
15711     fiat_secp384r1_cmovznz_u32(&x3, arg1, (arg2[2]), (arg3[2]));
15712     fiat_secp384r1_cmovznz_u32(&x4, arg1, (arg2[3]), (arg3[3]));
15713     fiat_secp384r1_cmovznz_u32(&x5, arg1, (arg2[4]), (arg3[4]));
15714     fiat_secp384r1_cmovznz_u32(&x6, arg1, (arg2[5]), (arg3[5]));
15715     fiat_secp384r1_cmovznz_u32(&x7, arg1, (arg2[6]), (arg3[6]));
15716     fiat_secp384r1_cmovznz_u32(&x8, arg1, (arg2[7]), (arg3[7]));
15717     fiat_secp384r1_cmovznz_u32(&x9, arg1, (arg2[8]), (arg3[8]));
15718     fiat_secp384r1_cmovznz_u32(&x10, arg1, (arg2[9]), (arg3[9]));
15719     fiat_secp384r1_cmovznz_u32(&x11, arg1, (arg2[10]), (arg3[10]));
15720     fiat_secp384r1_cmovznz_u32(&x12, arg1, (arg2[11]), (arg3[11]));
15721     out1[0] = x1;
15722     out1[1] = x2;
15723     out1[2] = x3;
15724     out1[3] = x4;
15725     out1[4] = x5;
15726     out1[5] = x6;
15727     out1[6] = x7;
15728     out1[7] = x8;
15729     out1[8] = x9;
15730     out1[9] = x10;
15731     out1[10] = x11;
15732     out1[11] = x12;
15733 }
15734 
15735 /*
15736  * The function fiat_secp384r1_to_bytes serializes a field element NOT in the Montgomery domain to bytes in little-endian order.
15737  * Preconditions:
15738  *   0 ≤ eval arg1 < m
15739  * Postconditions:
15740  *   out1 = map (λ x, ⌊((eval arg1 mod m) mod 2^(8 * (x + 1))) / 2^(8 * x)⌋) [0..47]
15741  *
15742  * Input Bounds:
15743  *   arg1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
15744  * Output Bounds:
15745  *   out1: [[0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff]]
15746  */
15747 static void
fiat_secp384r1_to_bytes(uint8_t out1[48],const uint32_t arg1[12])15748 fiat_secp384r1_to_bytes(uint8_t out1[48], const uint32_t arg1[12])
15749 {
15750     uint32_t x1;
15751     uint32_t x2;
15752     uint32_t x3;
15753     uint32_t x4;
15754     uint32_t x5;
15755     uint32_t x6;
15756     uint32_t x7;
15757     uint32_t x8;
15758     uint32_t x9;
15759     uint32_t x10;
15760     uint32_t x11;
15761     uint32_t x12;
15762     uint8_t x13;
15763     uint32_t x14;
15764     uint8_t x15;
15765     uint32_t x16;
15766     uint8_t x17;
15767     uint8_t x18;
15768     uint8_t x19;
15769     uint32_t x20;
15770     uint8_t x21;
15771     uint32_t x22;
15772     uint8_t x23;
15773     uint8_t x24;
15774     uint8_t x25;
15775     uint32_t x26;
15776     uint8_t x27;
15777     uint32_t x28;
15778     uint8_t x29;
15779     uint8_t x30;
15780     uint8_t x31;
15781     uint32_t x32;
15782     uint8_t x33;
15783     uint32_t x34;
15784     uint8_t x35;
15785     uint8_t x36;
15786     uint8_t x37;
15787     uint32_t x38;
15788     uint8_t x39;
15789     uint32_t x40;
15790     uint8_t x41;
15791     uint8_t x42;
15792     uint8_t x43;
15793     uint32_t x44;
15794     uint8_t x45;
15795     uint32_t x46;
15796     uint8_t x47;
15797     uint8_t x48;
15798     uint8_t x49;
15799     uint32_t x50;
15800     uint8_t x51;
15801     uint32_t x52;
15802     uint8_t x53;
15803     uint8_t x54;
15804     uint8_t x55;
15805     uint32_t x56;
15806     uint8_t x57;
15807     uint32_t x58;
15808     uint8_t x59;
15809     uint8_t x60;
15810     uint8_t x61;
15811     uint32_t x62;
15812     uint8_t x63;
15813     uint32_t x64;
15814     uint8_t x65;
15815     uint8_t x66;
15816     uint8_t x67;
15817     uint32_t x68;
15818     uint8_t x69;
15819     uint32_t x70;
15820     uint8_t x71;
15821     uint8_t x72;
15822     uint8_t x73;
15823     uint32_t x74;
15824     uint8_t x75;
15825     uint32_t x76;
15826     uint8_t x77;
15827     uint8_t x78;
15828     uint8_t x79;
15829     uint32_t x80;
15830     uint8_t x81;
15831     uint32_t x82;
15832     uint8_t x83;
15833     uint8_t x84;
15834     x1 = (arg1[11]);
15835     x2 = (arg1[10]);
15836     x3 = (arg1[9]);
15837     x4 = (arg1[8]);
15838     x5 = (arg1[7]);
15839     x6 = (arg1[6]);
15840     x7 = (arg1[5]);
15841     x8 = (arg1[4]);
15842     x9 = (arg1[3]);
15843     x10 = (arg1[2]);
15844     x11 = (arg1[1]);
15845     x12 = (arg1[0]);
15846     x13 = (uint8_t)(x12 & UINT8_C(0xff));
15847     x14 = (x12 >> 8);
15848     x15 = (uint8_t)(x14 & UINT8_C(0xff));
15849     x16 = (x14 >> 8);
15850     x17 = (uint8_t)(x16 & UINT8_C(0xff));
15851     x18 = (uint8_t)(x16 >> 8);
15852     x19 = (uint8_t)(x11 & UINT8_C(0xff));
15853     x20 = (x11 >> 8);
15854     x21 = (uint8_t)(x20 & UINT8_C(0xff));
15855     x22 = (x20 >> 8);
15856     x23 = (uint8_t)(x22 & UINT8_C(0xff));
15857     x24 = (uint8_t)(x22 >> 8);
15858     x25 = (uint8_t)(x10 & UINT8_C(0xff));
15859     x26 = (x10 >> 8);
15860     x27 = (uint8_t)(x26 & UINT8_C(0xff));
15861     x28 = (x26 >> 8);
15862     x29 = (uint8_t)(x28 & UINT8_C(0xff));
15863     x30 = (uint8_t)(x28 >> 8);
15864     x31 = (uint8_t)(x9 & UINT8_C(0xff));
15865     x32 = (x9 >> 8);
15866     x33 = (uint8_t)(x32 & UINT8_C(0xff));
15867     x34 = (x32 >> 8);
15868     x35 = (uint8_t)(x34 & UINT8_C(0xff));
15869     x36 = (uint8_t)(x34 >> 8);
15870     x37 = (uint8_t)(x8 & UINT8_C(0xff));
15871     x38 = (x8 >> 8);
15872     x39 = (uint8_t)(x38 & UINT8_C(0xff));
15873     x40 = (x38 >> 8);
15874     x41 = (uint8_t)(x40 & UINT8_C(0xff));
15875     x42 = (uint8_t)(x40 >> 8);
15876     x43 = (uint8_t)(x7 & UINT8_C(0xff));
15877     x44 = (x7 >> 8);
15878     x45 = (uint8_t)(x44 & UINT8_C(0xff));
15879     x46 = (x44 >> 8);
15880     x47 = (uint8_t)(x46 & UINT8_C(0xff));
15881     x48 = (uint8_t)(x46 >> 8);
15882     x49 = (uint8_t)(x6 & UINT8_C(0xff));
15883     x50 = (x6 >> 8);
15884     x51 = (uint8_t)(x50 & UINT8_C(0xff));
15885     x52 = (x50 >> 8);
15886     x53 = (uint8_t)(x52 & UINT8_C(0xff));
15887     x54 = (uint8_t)(x52 >> 8);
15888     x55 = (uint8_t)(x5 & UINT8_C(0xff));
15889     x56 = (x5 >> 8);
15890     x57 = (uint8_t)(x56 & UINT8_C(0xff));
15891     x58 = (x56 >> 8);
15892     x59 = (uint8_t)(x58 & UINT8_C(0xff));
15893     x60 = (uint8_t)(x58 >> 8);
15894     x61 = (uint8_t)(x4 & UINT8_C(0xff));
15895     x62 = (x4 >> 8);
15896     x63 = (uint8_t)(x62 & UINT8_C(0xff));
15897     x64 = (x62 >> 8);
15898     x65 = (uint8_t)(x64 & UINT8_C(0xff));
15899     x66 = (uint8_t)(x64 >> 8);
15900     x67 = (uint8_t)(x3 & UINT8_C(0xff));
15901     x68 = (x3 >> 8);
15902     x69 = (uint8_t)(x68 & UINT8_C(0xff));
15903     x70 = (x68 >> 8);
15904     x71 = (uint8_t)(x70 & UINT8_C(0xff));
15905     x72 = (uint8_t)(x70 >> 8);
15906     x73 = (uint8_t)(x2 & UINT8_C(0xff));
15907     x74 = (x2 >> 8);
15908     x75 = (uint8_t)(x74 & UINT8_C(0xff));
15909     x76 = (x74 >> 8);
15910     x77 = (uint8_t)(x76 & UINT8_C(0xff));
15911     x78 = (uint8_t)(x76 >> 8);
15912     x79 = (uint8_t)(x1 & UINT8_C(0xff));
15913     x80 = (x1 >> 8);
15914     x81 = (uint8_t)(x80 & UINT8_C(0xff));
15915     x82 = (x80 >> 8);
15916     x83 = (uint8_t)(x82 & UINT8_C(0xff));
15917     x84 = (uint8_t)(x82 >> 8);
15918     out1[0] = x13;
15919     out1[1] = x15;
15920     out1[2] = x17;
15921     out1[3] = x18;
15922     out1[4] = x19;
15923     out1[5] = x21;
15924     out1[6] = x23;
15925     out1[7] = x24;
15926     out1[8] = x25;
15927     out1[9] = x27;
15928     out1[10] = x29;
15929     out1[11] = x30;
15930     out1[12] = x31;
15931     out1[13] = x33;
15932     out1[14] = x35;
15933     out1[15] = x36;
15934     out1[16] = x37;
15935     out1[17] = x39;
15936     out1[18] = x41;
15937     out1[19] = x42;
15938     out1[20] = x43;
15939     out1[21] = x45;
15940     out1[22] = x47;
15941     out1[23] = x48;
15942     out1[24] = x49;
15943     out1[25] = x51;
15944     out1[26] = x53;
15945     out1[27] = x54;
15946     out1[28] = x55;
15947     out1[29] = x57;
15948     out1[30] = x59;
15949     out1[31] = x60;
15950     out1[32] = x61;
15951     out1[33] = x63;
15952     out1[34] = x65;
15953     out1[35] = x66;
15954     out1[36] = x67;
15955     out1[37] = x69;
15956     out1[38] = x71;
15957     out1[39] = x72;
15958     out1[40] = x73;
15959     out1[41] = x75;
15960     out1[42] = x77;
15961     out1[43] = x78;
15962     out1[44] = x79;
15963     out1[45] = x81;
15964     out1[46] = x83;
15965     out1[47] = x84;
15966 }
15967 
15968 /*
15969  * The function fiat_secp384r1_from_bytes deserializes a field element NOT in the Montgomery domain from bytes in little-endian order.
15970  * Preconditions:
15971  *   0 ≤ bytes_eval arg1 < m
15972  * Postconditions:
15973  *   eval out1 mod m = bytes_eval arg1 mod m
15974  *   0 ≤ eval out1 < m
15975  *
15976  * Input Bounds:
15977  *   arg1: [[0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff]]
15978  * Output Bounds:
15979  *   out1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
15980  */
15981 static void
fiat_secp384r1_from_bytes(uint32_t out1[12],const uint8_t arg1[48])15982 fiat_secp384r1_from_bytes(uint32_t out1[12],
15983                           const uint8_t arg1[48])
15984 {
15985     uint32_t x1;
15986     uint32_t x2;
15987     uint32_t x3;
15988     uint8_t x4;
15989     uint32_t x5;
15990     uint32_t x6;
15991     uint32_t x7;
15992     uint8_t x8;
15993     uint32_t x9;
15994     uint32_t x10;
15995     uint32_t x11;
15996     uint8_t x12;
15997     uint32_t x13;
15998     uint32_t x14;
15999     uint32_t x15;
16000     uint8_t x16;
16001     uint32_t x17;
16002     uint32_t x18;
16003     uint32_t x19;
16004     uint8_t x20;
16005     uint32_t x21;
16006     uint32_t x22;
16007     uint32_t x23;
16008     uint8_t x24;
16009     uint32_t x25;
16010     uint32_t x26;
16011     uint32_t x27;
16012     uint8_t x28;
16013     uint32_t x29;
16014     uint32_t x30;
16015     uint32_t x31;
16016     uint8_t x32;
16017     uint32_t x33;
16018     uint32_t x34;
16019     uint32_t x35;
16020     uint8_t x36;
16021     uint32_t x37;
16022     uint32_t x38;
16023     uint32_t x39;
16024     uint8_t x40;
16025     uint32_t x41;
16026     uint32_t x42;
16027     uint32_t x43;
16028     uint8_t x44;
16029     uint32_t x45;
16030     uint32_t x46;
16031     uint32_t x47;
16032     uint8_t x48;
16033     uint32_t x49;
16034     uint32_t x50;
16035     uint32_t x51;
16036     uint32_t x52;
16037     uint32_t x53;
16038     uint32_t x54;
16039     uint32_t x55;
16040     uint32_t x56;
16041     uint32_t x57;
16042     uint32_t x58;
16043     uint32_t x59;
16044     uint32_t x60;
16045     uint32_t x61;
16046     uint32_t x62;
16047     uint32_t x63;
16048     uint32_t x64;
16049     uint32_t x65;
16050     uint32_t x66;
16051     uint32_t x67;
16052     uint32_t x68;
16053     uint32_t x69;
16054     uint32_t x70;
16055     uint32_t x71;
16056     uint32_t x72;
16057     uint32_t x73;
16058     uint32_t x74;
16059     uint32_t x75;
16060     uint32_t x76;
16061     uint32_t x77;
16062     uint32_t x78;
16063     uint32_t x79;
16064     uint32_t x80;
16065     uint32_t x81;
16066     uint32_t x82;
16067     uint32_t x83;
16068     uint32_t x84;
16069     x1 = ((uint32_t)(arg1[47]) << 24);
16070     x2 = ((uint32_t)(arg1[46]) << 16);
16071     x3 = ((uint32_t)(arg1[45]) << 8);
16072     x4 = (arg1[44]);
16073     x5 = ((uint32_t)(arg1[43]) << 24);
16074     x6 = ((uint32_t)(arg1[42]) << 16);
16075     x7 = ((uint32_t)(arg1[41]) << 8);
16076     x8 = (arg1[40]);
16077     x9 = ((uint32_t)(arg1[39]) << 24);
16078     x10 = ((uint32_t)(arg1[38]) << 16);
16079     x11 = ((uint32_t)(arg1[37]) << 8);
16080     x12 = (arg1[36]);
16081     x13 = ((uint32_t)(arg1[35]) << 24);
16082     x14 = ((uint32_t)(arg1[34]) << 16);
16083     x15 = ((uint32_t)(arg1[33]) << 8);
16084     x16 = (arg1[32]);
16085     x17 = ((uint32_t)(arg1[31]) << 24);
16086     x18 = ((uint32_t)(arg1[30]) << 16);
16087     x19 = ((uint32_t)(arg1[29]) << 8);
16088     x20 = (arg1[28]);
16089     x21 = ((uint32_t)(arg1[27]) << 24);
16090     x22 = ((uint32_t)(arg1[26]) << 16);
16091     x23 = ((uint32_t)(arg1[25]) << 8);
16092     x24 = (arg1[24]);
16093     x25 = ((uint32_t)(arg1[23]) << 24);
16094     x26 = ((uint32_t)(arg1[22]) << 16);
16095     x27 = ((uint32_t)(arg1[21]) << 8);
16096     x28 = (arg1[20]);
16097     x29 = ((uint32_t)(arg1[19]) << 24);
16098     x30 = ((uint32_t)(arg1[18]) << 16);
16099     x31 = ((uint32_t)(arg1[17]) << 8);
16100     x32 = (arg1[16]);
16101     x33 = ((uint32_t)(arg1[15]) << 24);
16102     x34 = ((uint32_t)(arg1[14]) << 16);
16103     x35 = ((uint32_t)(arg1[13]) << 8);
16104     x36 = (arg1[12]);
16105     x37 = ((uint32_t)(arg1[11]) << 24);
16106     x38 = ((uint32_t)(arg1[10]) << 16);
16107     x39 = ((uint32_t)(arg1[9]) << 8);
16108     x40 = (arg1[8]);
16109     x41 = ((uint32_t)(arg1[7]) << 24);
16110     x42 = ((uint32_t)(arg1[6]) << 16);
16111     x43 = ((uint32_t)(arg1[5]) << 8);
16112     x44 = (arg1[4]);
16113     x45 = ((uint32_t)(arg1[3]) << 24);
16114     x46 = ((uint32_t)(arg1[2]) << 16);
16115     x47 = ((uint32_t)(arg1[1]) << 8);
16116     x48 = (arg1[0]);
16117     x49 = (x47 + (uint32_t)x48);
16118     x50 = (x46 + x49);
16119     x51 = (x45 + x50);
16120     x52 = (x43 + (uint32_t)x44);
16121     x53 = (x42 + x52);
16122     x54 = (x41 + x53);
16123     x55 = (x39 + (uint32_t)x40);
16124     x56 = (x38 + x55);
16125     x57 = (x37 + x56);
16126     x58 = (x35 + (uint32_t)x36);
16127     x59 = (x34 + x58);
16128     x60 = (x33 + x59);
16129     x61 = (x31 + (uint32_t)x32);
16130     x62 = (x30 + x61);
16131     x63 = (x29 + x62);
16132     x64 = (x27 + (uint32_t)x28);
16133     x65 = (x26 + x64);
16134     x66 = (x25 + x65);
16135     x67 = (x23 + (uint32_t)x24);
16136     x68 = (x22 + x67);
16137     x69 = (x21 + x68);
16138     x70 = (x19 + (uint32_t)x20);
16139     x71 = (x18 + x70);
16140     x72 = (x17 + x71);
16141     x73 = (x15 + (uint32_t)x16);
16142     x74 = (x14 + x73);
16143     x75 = (x13 + x74);
16144     x76 = (x11 + (uint32_t)x12);
16145     x77 = (x10 + x76);
16146     x78 = (x9 + x77);
16147     x79 = (x7 + (uint32_t)x8);
16148     x80 = (x6 + x79);
16149     x81 = (x5 + x80);
16150     x82 = (x3 + (uint32_t)x4);
16151     x83 = (x2 + x82);
16152     x84 = (x1 + x83);
16153     out1[0] = x51;
16154     out1[1] = x54;
16155     out1[2] = x57;
16156     out1[3] = x60;
16157     out1[4] = x63;
16158     out1[5] = x66;
16159     out1[6] = x69;
16160     out1[7] = x72;
16161     out1[8] = x75;
16162     out1[9] = x78;
16163     out1[10] = x81;
16164     out1[11] = x84;
16165 }
16166 
16167 /* END verbatim fiat code */
16168 
16169 /*-
16170  * Finite field inversion via FLT.
16171  * NB: this is not a real Fiat function, just named that way for consistency.
16172  * Autogenerated: ecp/secp384r1/fe_inv.op3
16173  * custom repunit addition chain
16174  */
16175 static void
fiat_secp384r1_inv(fe_t output,const fe_t t1)16176 fiat_secp384r1_inv(fe_t output, const fe_t t1)
16177 {
16178     int i;
16179     /* temporary variables */
16180     fe_t acc, t10, t170, t2, t20, t255, t30, t32, t4, t64, t8, t84, t85;
16181 
16182     fiat_secp384r1_square(acc, t1);
16183     fiat_secp384r1_mul(t2, acc, t1);
16184     fiat_secp384r1_square(acc, t2);
16185     fiat_secp384r1_square(acc, acc);
16186     fiat_secp384r1_mul(t4, acc, t2);
16187     fiat_secp384r1_square(acc, t4);
16188     for (i = 0; i < 3; i++)
16189         fiat_secp384r1_square(acc, acc);
16190     fiat_secp384r1_mul(t8, acc, t4);
16191     fiat_secp384r1_square(acc, t8);
16192     fiat_secp384r1_square(acc, acc);
16193     fiat_secp384r1_mul(t10, acc, t2);
16194     fiat_secp384r1_square(acc, t10);
16195     for (i = 0; i < 9; i++)
16196         fiat_secp384r1_square(acc, acc);
16197     fiat_secp384r1_mul(t20, acc, t10);
16198     fiat_secp384r1_square(acc, t20);
16199     for (i = 0; i < 9; i++)
16200         fiat_secp384r1_square(acc, acc);
16201     fiat_secp384r1_mul(t30, acc, t10);
16202     fiat_secp384r1_square(acc, t30);
16203     fiat_secp384r1_square(acc, acc);
16204     fiat_secp384r1_mul(t32, acc, t2);
16205     fiat_secp384r1_square(acc, t32);
16206     for (i = 0; i < 31; i++)
16207         fiat_secp384r1_square(acc, acc);
16208     fiat_secp384r1_mul(t64, acc, t32);
16209     fiat_secp384r1_square(acc, t64);
16210     for (i = 0; i < 19; i++)
16211         fiat_secp384r1_square(acc, acc);
16212     fiat_secp384r1_mul(t84, acc, t20);
16213     fiat_secp384r1_square(acc, t84);
16214     fiat_secp384r1_mul(t85, acc, t1);
16215     fiat_secp384r1_square(acc, t85);
16216     for (i = 0; i < 84; i++)
16217         fiat_secp384r1_square(acc, acc);
16218     fiat_secp384r1_mul(t170, acc, t85);
16219     fiat_secp384r1_square(acc, t170);
16220     for (i = 0; i < 84; i++)
16221         fiat_secp384r1_square(acc, acc);
16222     fiat_secp384r1_mul(t255, acc, t85);
16223     fiat_secp384r1_square(acc, t255);
16224     for (i = 0; i < 32; i++)
16225         fiat_secp384r1_square(acc, acc);
16226     fiat_secp384r1_mul(acc, acc, t32);
16227     for (i = 0; i < 94; i++)
16228         fiat_secp384r1_square(acc, acc);
16229     fiat_secp384r1_mul(acc, acc, t30);
16230     for (i = 0; i < 2; i++)
16231         fiat_secp384r1_square(acc, acc);
16232     fiat_secp384r1_mul(output, acc, t1);
16233 }
16234 
16235 /* curve coefficient constants */
16236 
16237 static const limb_t const_one[12] = {
16238     UINT32_C(0x00000001), UINT32_C(0xFFFFFFFF), UINT32_C(0xFFFFFFFF),
16239     UINT32_C(0x00000000), UINT32_C(0x00000001), UINT32_C(0x00000000),
16240     UINT32_C(0x00000000), UINT32_C(0x00000000), UINT32_C(0x00000000),
16241     UINT32_C(0x00000000), UINT32_C(0x00000000), UINT32_C(0x00000000)
16242 };
16243 
16244 static const limb_t const_b[12] = {
16245     UINT32_C(0x9D412DCC), UINT32_C(0x08118871), UINT32_C(0x7A4C32EC),
16246     UINT32_C(0xF729ADD8), UINT32_C(0x1920022E), UINT32_C(0x77F2209B),
16247     UINT32_C(0x94938AE2), UINT32_C(0xE3374BEE), UINT32_C(0x1F022094),
16248     UINT32_C(0xB62B21F4), UINT32_C(0x604FBFF9), UINT32_C(0xCD08114B)
16249 };
16250 
16251 /* LUT for scalar multiplication by comb interleaving */
16252 static const pt_aff_t lut_cmb[21][16] = {
16253     {
16254         { { UINT32_C(0x49C0B528), UINT32_C(0x3DD07566), UINT32_C(0xA0D6CE38),
16255             UINT32_C(0x20E378E2), UINT32_C(0x541B4D6E), UINT32_C(0x879C3AFC),
16256             UINT32_C(0x59A30EFF), UINT32_C(0x64548684), UINT32_C(0x614EDE2B),
16257             UINT32_C(0x812FF723), UINT32_C(0x299E1513), UINT32_C(0x4D3AADC2) },
16258           { UINT32_C(0x4B03A4FE), UINT32_C(0x23043DAD), UINT32_C(0x7BB4A9AC),
16259             UINT32_C(0xA1BFA8BF), UINT32_C(0x2E83B050), UINT32_C(0x8BADE756),
16260             UINT32_C(0x68F4FFD9), UINT32_C(0xC6C35219), UINT32_C(0x3969A840),
16261             UINT32_C(0xDD800226), UINT32_C(0x5A15C5E9), UINT32_C(0x2B78ABC2) } },
16262         { { UINT32_C(0xC1DC4073), UINT32_C(0x05E4DBE6), UINT32_C(0xF04F779C),
16263             UINT32_C(0xC54EA9FF), UINT32_C(0xA170CCF0), UINT32_C(0x6B2034E9),
16264             UINT32_C(0xD51C6C3E), UINT32_C(0x3A48D732), UINT32_C(0x263AA470),
16265             UINT32_C(0xE36F7E2D), UINT32_C(0xE7C1C3AC), UINT32_C(0xD283FE68) },
16266           { UINT32_C(0xC04EE157), UINT32_C(0x7E284821), UINT32_C(0x7AE0E36D),
16267             UINT32_C(0x92D789A7), UINT32_C(0x4EF67446), UINT32_C(0x132663C0),
16268             UINT32_C(0xD2E1D0B4), UINT32_C(0x68012D5A), UINT32_C(0x5102B339),
16269             UINT32_C(0xF6DB68B1), UINT32_C(0x983292AF), UINT32_C(0x465465FC) } },
16270         { { UINT32_C(0x68F1F0DF), UINT32_C(0xBB595EBA), UINT32_C(0xCC873466),
16271             UINT32_C(0xC185C0CB), UINT32_C(0x293C703B), UINT32_C(0x7F1EB1B5),
16272             UINT32_C(0xAACC05E6), UINT32_C(0x60DB2CF5), UINT32_C(0xE2E8E4C6),
16273             UINT32_C(0xC676B987), UINT32_C(0x1D178FFB), UINT32_C(0xE1BB26B1) },
16274           { UINT32_C(0x7073FA21), UINT32_C(0x2B694BA0), UINT32_C(0x72F34566),
16275             UINT32_C(0x22C16E2E), UINT32_C(0x01C35B99), UINT32_C(0x80B61B31),
16276             UINT32_C(0x982C0411), UINT32_C(0x4B237FAF), UINT32_C(0x24DE236D),
16277             UINT32_C(0xE6C59440), UINT32_C(0xE209E4A3), UINT32_C(0x4DB1C9D6) } },
16278         { { UINT32_C(0x7D69222B), UINT32_C(0xDF13B9D1), UINT32_C(0x874774B1),
16279             UINT32_C(0x4CE6415F), UINT32_C(0x211FAA95), UINT32_C(0x731EDCF8),
16280             UINT32_C(0x659753ED), UINT32_C(0x5F4215D1), UINT32_C(0x9DB2DF55),
16281             UINT32_C(0xF893DB58), UINT32_C(0x1C89025B), UINT32_C(0x932C9F81) },
16282           { UINT32_C(0x7706A61E), UINT32_C(0x0996B220), UINT32_C(0xA8641C79),
16283             UINT32_C(0x135349D5), UINT32_C(0x50130844), UINT32_C(0x65AAD76F),
16284             UINT32_C(0x01FFF780), UINT32_C(0x0FF37C04), UINT32_C(0x693B0706),
16285             UINT32_C(0xF57F238E), UINT32_C(0xAF6C9B3E), UINT32_C(0xD90A16B6) } },
16286         { { UINT32_C(0x2353B92F), UINT32_C(0x2F5D200E), UINT32_C(0x3FD7E4F9),
16287             UINT32_C(0xE35D8729), UINT32_C(0xA96D745D), UINT32_C(0x26094833),
16288             UINT32_C(0x3CBFFF3F), UINT32_C(0xDC351DC1), UINT32_C(0xDAD54D6A),
16289             UINT32_C(0x26D464C6), UINT32_C(0x53636C6A), UINT32_C(0x5CAB1D1D) },
16290           { UINT32_C(0xB18EC0B0), UINT32_C(0xF2813072), UINT32_C(0xD742AA2F),
16291             UINT32_C(0x3777E270), UINT32_C(0x033CA7C2), UINT32_C(0x27F061C7),
16292             UINT32_C(0x68EAD0D8), UINT32_C(0xA6ECACCC), UINT32_C(0xEE69A754),
16293             UINT32_C(0x7D9429F4), UINT32_C(0x31E8F5C6), UINT32_C(0xE7706334) } },
16294         { { UINT32_C(0xB68B8C7D), UINT32_C(0xC7708B19), UINT32_C(0x44377ABA),
16295             UINT32_C(0x4532077C), UINT32_C(0x6CDAD64F), UINT32_C(0x0DCC6770),
16296             UINT32_C(0x147B6602), UINT32_C(0x01B8BF56), UINT32_C(0xF0561D79),
16297             UINT32_C(0xF8D89885), UINT32_C(0x7BA9C437), UINT32_C(0x9C19E9FC) },
16298           { UINT32_C(0xBDC4BA25), UINT32_C(0x764EB146), UINT32_C(0xAC144B83),
16299             UINT32_C(0x604FE46B), UINT32_C(0x8A77E780), UINT32_C(0x3CE81329),
16300             UINT32_C(0xFE9E682E), UINT32_C(0x2E070F36), UINT32_C(0x3A53287A),
16301             UINT32_C(0x41821D0C), UINT32_C(0x3533F918), UINT32_C(0x9AA62F9F) } },
16302         { { UINT32_C(0x75CCBDFB), UINT32_C(0x9B7AEB7E), UINT32_C(0xF6749A95),
16303             UINT32_C(0xB25E28C5), UINT32_C(0x33B7D4AE), UINT32_C(0x8A7A8E46),
16304             UINT32_C(0xD9C1BD56), UINT32_C(0xDB5203A8), UINT32_C(0xED22DF97),
16305             UINT32_C(0xD2657265), UINT32_C(0x8CF23C94), UINT32_C(0xB51C56E1) },
16306           { UINT32_C(0x6C3D812D), UINT32_C(0xF4D39459), UINT32_C(0x87CAE0C2),
16307             UINT32_C(0xD8E88F1A), UINT32_C(0xCF4D0FE3), UINT32_C(0x789A2A48),
16308             UINT32_C(0xFEC38D60), UINT32_C(0xB7FEAC2D), UINT32_C(0x3B490EC3),
16309             UINT32_C(0x81FDBD1C), UINT32_C(0xCC6979E1), UINT32_C(0x4617ADB7) } },
16310         { { UINT32_C(0x4709F4A9), UINT32_C(0x446AD888), UINT32_C(0xEC3DABD8),
16311             UINT32_C(0x2B7210E2), UINT32_C(0x50E07B34), UINT32_C(0x83CCF195),
16312             UINT32_C(0x789B3075), UINT32_C(0x59500917), UINT32_C(0xEB085993),
16313             UINT32_C(0x0FC01FD4), UINT32_C(0x4903026B), UINT32_C(0xFB62D26F) },
16314           { UINT32_C(0x6FE989BB), UINT32_C(0x2309CC9D), UINT32_C(0x144BD586),
16315             UINT32_C(0x61609CBD), UINT32_C(0xDE06610C), UINT32_C(0x4B23D3A0),
16316             UINT32_C(0xD898F470), UINT32_C(0xDDDC2866), UINT32_C(0x400C5797),
16317             UINT32_C(0x8733FC41), UINT32_C(0xD0BC2716), UINT32_C(0x5A68C6FE) } },
16318         { { UINT32_C(0x4B4A3CD0), UINT32_C(0x8903E130), UINT32_C(0x8FF1F43E),
16319             UINT32_C(0x3EA4EA4C), UINT32_C(0xF655A10D), UINT32_C(0xE6FC3F2A),
16320             UINT32_C(0x524FFEFC), UINT32_C(0x7BE3737D), UINT32_C(0x5330455E),
16321             UINT32_C(0x9F692855), UINT32_C(0xE475CE70), UINT32_C(0x524F166E) },
16322           { UINT32_C(0x6C12F055), UINT32_C(0x3FCC69CD), UINT32_C(0xD5B9C0DA),
16323             UINT32_C(0x4E23B6FF), UINT32_C(0x336BF183), UINT32_C(0x49CE6993),
16324             UINT32_C(0x4A54504A), UINT32_C(0xF87D6D85), UINT32_C(0xB3C2677A),
16325             UINT32_C(0x25EB5DF1), UINT32_C(0x55B164C9), UINT32_C(0xAC37986F) } },
16326         { { UINT32_C(0xBAA84C08), UINT32_C(0x82A2ED4A), UINT32_C(0x41A8C912),
16327             UINT32_C(0x22C4CC5F), UINT32_C(0x154AAD5E), UINT32_C(0xCA109C3B),
16328             UINT32_C(0xFC38538E), UINT32_C(0x23891298), UINT32_C(0x539802AE),
16329             UINT32_C(0xB3B6639C), UINT32_C(0x0390D706), UINT32_C(0xFA0F1F45) },
16330           { UINT32_C(0xB0DC21D0), UINT32_C(0x46B78E5D), UINT32_C(0xC3DA2EAC),
16331             UINT32_C(0xA8C72D3C), UINT32_C(0x6FF2F643), UINT32_C(0x9170B378),
16332             UINT32_C(0xB67F30C3), UINT32_C(0x3F5A799B), UINT32_C(0x8264B672),
16333             UINT32_C(0x15D1DC77), UINT32_C(0xE9577764), UINT32_C(0xA1D47B23) } },
16334         { { UINT32_C(0x0422CE2F), UINT32_C(0x08265E51), UINT32_C(0xDD2F9E21),
16335             UINT32_C(0x88E0D496), UINT32_C(0x6177F75D), UINT32_C(0x30128AA0),
16336             UINT32_C(0xBD9EBE69), UINT32_C(0x2E59AB62), UINT32_C(0x5DF0E537),
16337             UINT32_C(0x1B1A0F6C), UINT32_C(0xDAC012B5), UINT32_C(0xAB16C626) },
16338           { UINT32_C(0x008C5DE7), UINT32_C(0x8014214B), UINT32_C(0x38F17BEA),
16339             UINT32_C(0xAA740A9E), UINT32_C(0x8A149098), UINT32_C(0x262EBB49),
16340             UINT32_C(0x8527CD59), UINT32_C(0xB454111E), UINT32_C(0xACEA5817),
16341             UINT32_C(0x266AD15A), UINT32_C(0x1353CCBA), UINT32_C(0x21824F41) } },
16342         { { UINT32_C(0x12E3683B), UINT32_C(0xD1B4E74D), UINT32_C(0x569B8EF6),
16343             UINT32_C(0x990ED20B), UINT32_C(0x429C0A18), UINT32_C(0xB9D3DD25),
16344             UINT32_C(0x2A351783), UINT32_C(0x1C75B8AB), UINT32_C(0x905432F0),
16345             UINT32_C(0x61E4CA2B), UINT32_C(0xEEA8F224), UINT32_C(0x80826A69) },
16346           { UINT32_C(0xEC52ABAD), UINT32_C(0x7FC33A6B), UINT32_C(0xA65E4813),
16347             UINT32_C(0x0BCCA3F0), UINT32_C(0xA527CEBE), UINT32_C(0x7AD8A132),
16348             UINT32_C(0xEAF22C7E), UINT32_C(0xF0138950), UINT32_C(0x566718C1),
16349             UINT32_C(0x282D2437), UINT32_C(0xE2212559), UINT32_C(0x9DFCCB0D) } },
16350         { { UINT32_C(0x58CE3B83), UINT32_C(0x1E937227), UINT32_C(0x3CB3FB36),
16351             UINT32_C(0xBB280DFA), UINT32_C(0xE2BE174A), UINT32_C(0x57D0F3D2),
16352             UINT32_C(0x208ABE1E), UINT32_C(0x9BD51B99), UINT32_C(0xDE248024),
16353             UINT32_C(0x3809AB50), UINT32_C(0xA5BB7331), UINT32_C(0xC29C6E2C) },
16354           { UINT32_C(0x61124F05), UINT32_C(0x9944FD2E), UINT32_C(0x9009E391),
16355             UINT32_C(0x83CCBC4E), UINT32_C(0x9424A3CC), UINT32_C(0x01628F05),
16356             UINT32_C(0xEA8E4344), UINT32_C(0xD6A2F51D), UINT32_C(0x4CEBC96E),
16357             UINT32_C(0xDA3E1A3D), UINT32_C(0xE97809DC), UINT32_C(0x1FE6FB42) } },
16358         { { UINT32_C(0x467D66E4), UINT32_C(0xA04482D2), UINT32_C(0x4D78291D),
16359             UINT32_C(0xCF191293), UINT32_C(0x482396F9), UINT32_C(0x8E0D4168),
16360             UINT32_C(0xD18F14D0), UINT32_C(0x7228E2D5), UINT32_C(0x9C6A58FE),
16361             UINT32_C(0x2F7E8D50), UINT32_C(0x373E5AEC), UINT32_C(0xE8CA780E) },
16362           { UINT32_C(0x1B68E9F8), UINT32_C(0x42AAD1D6), UINT32_C(0x69E2F8F4),
16363             UINT32_C(0x58A6D7F5), UINT32_C(0x31DA1BEA), UINT32_C(0xD779ADFE),
16364             UINT32_C(0x38C85A85), UINT32_C(0x7D265406), UINT32_C(0xD44D3CDF),
16365             UINT32_C(0x67E67195), UINT32_C(0xC5134ED7), UINT32_C(0x17820A0B) } },
16366         { { UINT32_C(0xD3021470), UINT32_C(0x019D6AC5), UINT32_C(0x780443D6),
16367             UINT32_C(0x25846B66), UINT32_C(0x55C97647), UINT32_C(0xCE3C15ED),
16368             UINT32_C(0x0E3FEB0F), UINT32_C(0x3DC22D49), UINT32_C(0xA7DF26E4),
16369             UINT32_C(0x2065B7CB), UINT32_C(0x187CEA1F), UINT32_C(0xC8B00AE8) },
16370           { UINT32_C(0x865DDED3), UINT32_C(0x1A5284A0), UINT32_C(0x20C83DE2),
16371             UINT32_C(0x293C1649), UINT32_C(0xCCE851B3), UINT32_C(0xAB178D26),
16372             UINT32_C(0x404505FB), UINT32_C(0x8E6DB10B), UINT32_C(0x90C82033),
16373             UINT32_C(0xF6F57E71), UINT32_C(0x5977F16C), UINT32_C(0x1D2A1C01) } },
16374         { { UINT32_C(0x7C8906A4), UINT32_C(0xA39C8931), UINT32_C(0x9E821EE6),
16375             UINT32_C(0xB6E7ECDD), UINT32_C(0xF0DF4FE6), UINT32_C(0x2ECF8340),
16376             UINT32_C(0x53C14965), UINT32_C(0xD42F7DC9), UINT32_C(0xE3BA8285),
16377             UINT32_C(0x1AFB51A3), UINT32_C(0x0A3305D1), UINT32_C(0x6C07C404) },
16378           { UINT32_C(0x127FC1DA), UINT32_C(0xDAB83288), UINT32_C(0x374C4B08),
16379             UINT32_C(0xBC0A699B), UINT32_C(0x42EB20DD), UINT32_C(0x402A9BAB),
16380             UINT32_C(0x045A7A1C), UINT32_C(0xD7DD464F), UINT32_C(0x36BEECC4),
16381             UINT32_C(0x5B3D0D6D), UINT32_C(0x6398A19D), UINT32_C(0x475A3E75) } },
16382     },
16383     {
16384         { { UINT32_C(0x72876AE8), UINT32_C(0x31BDB483), UINT32_C(0x961ED1BF),
16385             UINT32_C(0xE3325D98), UINT32_C(0x9B6FC64D), UINT32_C(0x18C04246),
16386             UINT32_C(0x15786B8C), UINT32_C(0x0DCC15FA), UINT32_C(0x8E63DA4A),
16387             UINT32_C(0x81ACDB06), UINT32_C(0xDADA70FB), UINT32_C(0xD3A4B643) },
16388           { UINT32_C(0xDEA424EB), UINT32_C(0x46361AFE), UINT32_C(0x89B92970),
16389             UINT32_C(0xDC2D2CAE), UINT32_C(0x615694E6), UINT32_C(0xF389B61B),
16390             UINT32_C(0x872951D2), UINT32_C(0x7036DEF1), UINT32_C(0xD93BADC7),
16391             UINT32_C(0x40FD3BDA), UINT32_C(0x380A68D3), UINT32_C(0x45AB6321) } },
16392         { { UINT32_C(0x81A2703A), UINT32_C(0x23C1F744), UINT32_C(0xB9859136),
16393             UINT32_C(0x1A5D075C), UINT32_C(0x5AFD1BFD), UINT32_C(0xA4F82C9D),
16394             UINT32_C(0xF89D76FE), UINT32_C(0xA3D1E9A4), UINT32_C(0x75702F80),
16395             UINT32_C(0x964F7050), UINT32_C(0xF56C089D), UINT32_C(0x182BF349) },
16396           { UINT32_C(0xBE0DA6E1), UINT32_C(0xE205FA8F), UINT32_C(0x0A40F8F3),
16397             UINT32_C(0x32905EB9), UINT32_C(0x356D4395), UINT32_C(0x331A1004),
16398             UINT32_C(0xFDBBDFDE), UINT32_C(0x58B78901), UINT32_C(0x9BA00E71),
16399             UINT32_C(0xA52A1597), UINT32_C(0x55497A30), UINT32_C(0xE0092E1F) } },
16400         { { UINT32_C(0x70EE8F39), UINT32_C(0x5562A856), UINT32_C(0x64E52A9C),
16401             UINT32_C(0x86B0C117), UINT32_C(0x09C75B8C), UINT32_C(0xC19F3174),
16402             UINT32_C(0x24923F80), UINT32_C(0x21C7CC31), UINT32_C(0x8F5B291E),
16403             UINT32_C(0xE63FE47F), UINT32_C(0x0DC08B05), UINT32_C(0x3D6D3C05) },
16404           { UINT32_C(0xEE0C39A1), UINT32_C(0x58AE455E), UINT32_C(0x0AD97942),
16405             UINT32_C(0x78BEA431), UINT32_C(0x3EE3989C), UINT32_C(0x42C7C97F),
16406             UINT32_C(0xF38759AE), UINT32_C(0xC1B03AF5), UINT32_C(0xBCF46899),
16407             UINT32_C(0x1A673C75), UINT32_C(0x8D508C7D), UINT32_C(0x4831B7D3) } },
16408         { { UINT32_C(0xC552E354), UINT32_C(0x76512D1B), UINT32_C(0x273020FD),
16409             UINT32_C(0x2B7EB6DF), UINT32_C(0x025A5F25), UINT32_C(0xD1C73AA8),
16410             UINT32_C(0x5CBD2A40), UINT32_C(0x2ABA1929), UINT32_C(0xC88D61C6),
16411             UINT32_C(0xB53CADC3), UINT32_C(0x098290F3), UINT32_C(0x7E66A95E) },
16412           { UINT32_C(0xAF4C5073), UINT32_C(0x72800ECB), UINT32_C(0x9DC63FAF),
16413             UINT32_C(0x81F2725E), UINT32_C(0x282BA9D1), UINT32_C(0x14BF92A7),
16414             UINT32_C(0xBD5F1BB2), UINT32_C(0x90629672), UINT32_C(0xA97C6C96),
16415             UINT32_C(0x362F68EB), UINT32_C(0x7EA9D601), UINT32_C(0xB1D3BB8B) } },
16416         { { UINT32_C(0xA9C94429), UINT32_C(0x73878F7F), UINT32_C(0x456CA6D8),
16417             UINT32_C(0xB35C3BC8), UINT32_C(0xF721923A), UINT32_C(0xD96F0B3C),
16418             UINT32_C(0xE6D44FA1), UINT32_C(0x28D8F06C), UINT32_C(0xD5CD671A),
16419             UINT32_C(0x94EFDCDC), UINT32_C(0x3F97D481), UINT32_C(0x0299AB93) },
16420           { UINT32_C(0x2FD1D324), UINT32_C(0xB7CED6EA), UINT32_C(0x7E932EC2),
16421             UINT32_C(0xBD683208), UINT32_C(0xCB755A6E), UINT32_C(0x24ED31FB),
16422             UINT32_C(0xE48781D2), UINT32_C(0xA636098E), UINT32_C(0xF0A4F297),
16423             UINT32_C(0x8687C63C), UINT32_C(0x07478526), UINT32_C(0xBB523440) } },
16424         { { UINT32_C(0x34124B56), UINT32_C(0x2E5F7419), UINT32_C(0x4B3F02CA),
16425             UINT32_C(0x1F223AE1), UINT32_C(0xE8336C7E), UINT32_C(0x6345B427),
16426             UINT32_C(0xF5D0E3D0), UINT32_C(0x92123E16), UINT32_C(0x45E79F3A),
16427             UINT32_C(0xDAF0D14D), UINT32_C(0x6F3BD0C6), UINT32_C(0x6ACA6765) },
16428           { UINT32_C(0x403813F4), UINT32_C(0xF6169FAB), UINT32_C(0x334A4C59),
16429             UINT32_C(0x31DC39C0), UINT32_C(0xD589866D), UINT32_C(0x74C46753),
16430             UINT32_C(0x984C6A5D), UINT32_C(0x5741511D), UINT32_C(0x97FED2D3),
16431             UINT32_C(0xF2631287), UINT32_C(0x11614886), UINT32_C(0x5687CA1B) } },
16432         { { UINT32_C(0x33836D4B), UINT32_C(0x076D902A), UINT32_C(0x24AFB557),
16433             UINT32_C(0xEC6C5C43), UINT32_C(0xA0516A0F), UINT32_C(0xA0FE2D1C),
16434             UINT32_C(0x00D22ECC), UINT32_C(0x6FB8D737), UINT32_C(0xDAF1D7B3),
16435             UINT32_C(0xF1DE9077), UINT32_C(0xD4C0C1EB), UINT32_C(0xE4695F77) },
16436           { UINT32_C(0xB4375573), UINT32_C(0x5F0FD8A8), UINT32_C(0x5E50944F),
16437             UINT32_C(0x76238359), UINT32_C(0x635CD76F), UINT32_C(0x65EA2F28),
16438             UINT32_C(0x25FDE7B0), UINT32_C(0x08547769), UINT32_C(0x51944304),
16439             UINT32_C(0xB2345A2E), UINT32_C(0xA16C980D), UINT32_C(0x86EFA2F7) } },
16440         { { UINT32_C(0xBF4D1D63), UINT32_C(0x4CCBE2D0), UINT32_C(0x397366D5),
16441             UINT32_C(0x32E33401), UINT32_C(0x71BDA2CE), UINT32_C(0xC83AFDDE),
16442             UINT32_C(0x478ED9E6), UINT32_C(0x8DACE2AC), UINT32_C(0x763FDD9E),
16443             UINT32_C(0x3AC6A559), UINT32_C(0xB398558F), UINT32_C(0x0FFDB04C) },
16444           { UINT32_C(0xAFB9D6B8), UINT32_C(0x6C1B99B2), UINT32_C(0x27F815DD),
16445             UINT32_C(0x572BA39C), UINT32_C(0x0DBCF842), UINT32_C(0x9DE73EE7),
16446             UINT32_C(0x29267B88), UINT32_C(0x2A3ED589), UINT32_C(0x15EBBBB3),
16447             UINT32_C(0xD46A7FD3), UINT32_C(0xE29400C7), UINT32_C(0xD1D01863) } },
16448         { { UINT32_C(0xE1F89EC5), UINT32_C(0x8FB101D1), UINT32_C(0xF8508042),
16449             UINT32_C(0xB87A1F53), UINT32_C(0x0ED7BEEF), UINT32_C(0x28C8DB24),
16450             UINT32_C(0xACE8660A), UINT32_C(0x3940F845), UINT32_C(0xC6D453FD),
16451             UINT32_C(0x4EACB619), UINT32_C(0x2BAD6160), UINT32_C(0x2E044C98) },
16452           { UINT32_C(0x80B16C02), UINT32_C(0x87928548), UINT32_C(0xC0A9EB64),
16453             UINT32_C(0xF0D4BEB3), UINT32_C(0xC183C195), UINT32_C(0xD785B4AF),
16454             UINT32_C(0x5E6C46EA), UINT32_C(0x23AAB0E6), UINT32_C(0xA930FECA),
16455             UINT32_C(0x30F7E104), UINT32_C(0xD55C10FB), UINT32_C(0x6A1A7B8B) } },
16456         { { UINT32_C(0xDBFED1AA), UINT32_C(0xDA74EAEB), UINT32_C(0xDF0B025C),
16457             UINT32_C(0xC8A59223), UINT32_C(0xD5B627F7), UINT32_C(0x7EF7DC85),
16458             UINT32_C(0x197D7624), UINT32_C(0x02A13AE1), UINT32_C(0x2F785A9B),
16459             UINT32_C(0x119E9BE1), UINT32_C(0x00D6B219), UINT32_C(0xC0B7572F) },
16460           { UINT32_C(0x6D4CAF30), UINT32_C(0x9B1E5126), UINT32_C(0x0A840BD1),
16461             UINT32_C(0xA16A5117), UINT32_C(0x0E9CCF43), UINT32_C(0x5BE17B91),
16462             UINT32_C(0x69CF2C9C), UINT32_C(0x5BDBEDDD), UINT32_C(0x4CF4F289),
16463             UINT32_C(0x9FFBFBCF), UINT32_C(0x6C355CE9), UINT32_C(0xE1A62183) } },
16464         { { UINT32_C(0xA7B2FCCF), UINT32_C(0x056199D9), UINT32_C(0xCE1D784E),
16465             UINT32_C(0x51F2E7B6), UINT32_C(0x339E2FF0), UINT32_C(0xA1D09C47),
16466             UINT32_C(0xB836D0A9), UINT32_C(0xC8E64890), UINT32_C(0xC0D07EBE),
16467             UINT32_C(0x2F781DCB), UINT32_C(0x3ACF934C), UINT32_C(0x5CF3C2AD) },
16468           { UINT32_C(0xA17E26AE), UINT32_C(0xE55DB190), UINT32_C(0x91245513),
16469             UINT32_C(0xC9C61E1F), UINT32_C(0x61998C15), UINT32_C(0x83D7E6CF),
16470             UINT32_C(0xE41D38E3), UINT32_C(0x4DB33C85), UINT32_C(0xC2FEE43D),
16471             UINT32_C(0x74D5F91D), UINT32_C(0x36BBC826), UINT32_C(0x7EBBDB45) } },
16472         { { UINT32_C(0xCB655A9D), UINT32_C(0xE20EC7E9), UINT32_C(0x5C47D421),
16473             UINT32_C(0x4977EB92), UINT32_C(0x3B9D72FA), UINT32_C(0xA237E12C),
16474             UINT32_C(0xCBF7B145), UINT32_C(0xCAAEDBC1), UINT32_C(0x3B77AAA3),
16475             UINT32_C(0x5200F5B2), UINT32_C(0xBDBE5380), UINT32_C(0x32EDED55) },
16476           { UINT32_C(0xE7C9B80A), UINT32_C(0x74E38A40), UINT32_C(0xAB6DE911),
16477             UINT32_C(0x3A3F0CF8), UINT32_C(0xAD16AAF0), UINT32_C(0x56DCDD7A),
16478             UINT32_C(0x8E861D5E), UINT32_C(0x3D292449), UINT32_C(0x985733E2),
16479             UINT32_C(0xD6C61878), UINT32_C(0x6AA6CD5B), UINT32_C(0x2401FE7D) } },
16480         { { UINT32_C(0xB42E3686), UINT32_C(0xABB3DC75), UINT32_C(0xB4C57E61),
16481             UINT32_C(0xAE712419), UINT32_C(0xB21B009B), UINT32_C(0x2C565F72),
16482             UINT32_C(0x710C3699), UINT32_C(0xA5F1DA2E), UINT32_C(0xA5EBA59A),
16483             UINT32_C(0x771099A0), UINT32_C(0xC10017A0), UINT32_C(0x4DA88F4A) },
16484           { UINT32_C(0x1927B56D), UINT32_C(0x987FFFD3), UINT32_C(0xC4E33478),
16485             UINT32_C(0xB98CB8EC), UINT32_C(0xC2248166), UINT32_C(0xB224A971),
16486             UINT32_C(0xDE1DC794), UINT32_C(0x5470F554), UINT32_C(0xE31FF983),
16487             UINT32_C(0xD747CC24), UINT32_C(0xB5B22DAE), UINT32_C(0xB91745E9) } },
16488         { { UINT32_C(0x72F34420), UINT32_C(0x6CCBFED0), UINT32_C(0xA53039D2),
16489             UINT32_C(0x95045E4D), UINT32_C(0x5A793944), UINT32_C(0x3B6C1154),
16490             UINT32_C(0xDDB6B799), UINT32_C(0xAA114145), UINT32_C(0x252B7637),
16491             UINT32_C(0xABC15CA4), UINT32_C(0xA5744634), UINT32_C(0x5745A35B) },
16492           { UINT32_C(0xDA596FC0), UINT32_C(0x05DC6BDE), UINT32_C(0xA8020881),
16493             UINT32_C(0xCD52C18C), UINT32_C(0xD296BAD0), UINT32_C(0x03FA9F47),
16494             UINT32_C(0x7268E139), UINT32_C(0xD8E2C129), UINT32_C(0x9EC450B0),
16495             UINT32_C(0x58C1A98D), UINT32_C(0xDE48B20D), UINT32_C(0x909638DA) } },
16496         { { UINT32_C(0x9B7F8311), UINT32_C(0x7AFC30D4), UINT32_C(0x42368EA3),
16497             UINT32_C(0x82A00422), UINT32_C(0x6F5F9865), UINT32_C(0xBFF95198),
16498             UINT32_C(0xFC0A070F), UINT32_C(0x9B24F612), UINT32_C(0x620F489D),
16499             UINT32_C(0x22C06CF2), UINT32_C(0x780F7DBB), UINT32_C(0x3C7ED052) },
16500           { UINT32_C(0x34DAFE9B), UINT32_C(0xDB87AB18), UINT32_C(0x9C4BBCA1),
16501             UINT32_C(0x20C03B40), UINT32_C(0x59A42341), UINT32_C(0x5D718CF0),
16502             UINT32_C(0x69E84538), UINT32_C(0x98631706), UINT32_C(0xD27D64E1),
16503             UINT32_C(0x5557192B), UINT32_C(0xDA822766), UINT32_C(0x08B4EC52) } },
16504         { { UINT32_C(0xD66C1A59), UINT32_C(0xB2D986F6), UINT32_C(0x78E0E423),
16505             UINT32_C(0x927DEB16), UINT32_C(0x49C3DEDC), UINT32_C(0x9E673CDE),
16506             UINT32_C(0xF7ECB6CF), UINT32_C(0xFA362D84), UINT32_C(0x1BA17340),
16507             UINT32_C(0x078E5F40), UINT32_C(0x1F4E489C), UINT32_C(0x934CA5D1) },
16508           { UINT32_C(0x64EEF493), UINT32_C(0xC03C0731), UINT32_C(0xD7931A7E),
16509             UINT32_C(0x631A353B), UINT32_C(0x65DD74F1), UINT32_C(0x8E7CC3BB),
16510             UINT32_C(0x702676A5), UINT32_C(0xD55864C5), UINT32_C(0x439F04BD),
16511             UINT32_C(0x6D306AC4), UINT32_C(0x2BAFED57), UINT32_C(0x58544F67) } },
16512     },
16513     {
16514         { { UINT32_C(0xEC074AEA), UINT32_C(0xB083BA6A), UINT32_C(0x7F0B505B),
16515             UINT32_C(0x46FAC5EF), UINT32_C(0xFC82DC03), UINT32_C(0x95367A21),
16516             UINT32_C(0x9D3679D8), UINT32_C(0x227BE26A), UINT32_C(0x7E9724C0),
16517             UINT32_C(0xC70F6D6C), UINT32_C(0xF9EBEC0F), UINT32_C(0xCD68C757) },
16518           { UINT32_C(0x8FF321B2), UINT32_C(0x29DDE03E), UINT32_C(0x031939DC),
16519             UINT32_C(0xF84AD7BB), UINT32_C(0x0F602F4B), UINT32_C(0xDAF590C9),
16520             UINT32_C(0x49722BC4), UINT32_C(0x17C52888), UINT32_C(0x089B22B6),
16521             UINT32_C(0xA8DF99F0), UINT32_C(0xE59B9B90), UINT32_C(0xC21BC5D4) } },
16522         { { UINT32_C(0x8A31973F), UINT32_C(0x4936C6A0), UINT32_C(0x83B8C205),
16523             UINT32_C(0x54D442FA), UINT32_C(0x5714F2C6), UINT32_C(0x03AEE8B4),
16524             UINT32_C(0x3F5AC25A), UINT32_C(0x139BD692), UINT32_C(0xB5B33794),
16525             UINT32_C(0x6A2E42BA), UINT32_C(0x3FF7BBA9), UINT32_C(0x50FA1164) },
16526           { UINT32_C(0xF7E2C099), UINT32_C(0xB61D8643), UINT32_C(0xBD5C6637),
16527             UINT32_C(0x2366C993), UINT32_C(0x72EB77FA), UINT32_C(0x62110E14),
16528             UINT32_C(0x3B99C635), UINT32_C(0x3D5B96F1), UINT32_C(0xF674C9F2),
16529             UINT32_C(0x956ECF64), UINT32_C(0xEF2BA250), UINT32_C(0xC56F7E51) } },
16530         { { UINT32_C(0xFF602C1B), UINT32_C(0x246FFCB6), UINT32_C(0x6E1258E0),
16531             UINT32_C(0x1E1A1D74), UINT32_C(0x250E6676), UINT32_C(0xB4B43AE2),
16532             UINT32_C(0x924CE5FA), UINT32_C(0x95C1B5F0), UINT32_C(0xEBD8C776),
16533             UINT32_C(0x2555795B), UINT32_C(0xACD9D9D0), UINT32_C(0x4C1E03DC) },
16534           { UINT32_C(0x9CE90C61), UINT32_C(0xE1D74AA6), UINT32_C(0xA9C4B9F9),
16535             UINT32_C(0xA88C0769), UINT32_C(0x95AF56DE), UINT32_C(0xDF74DF27),
16536             UINT32_C(0xB331B6F4), UINT32_C(0x24B10C5F), UINT32_C(0x6559E137),
16537             UINT32_C(0xB0A6DF9A), UINT32_C(0xC06637F2), UINT32_C(0x6ACC1B8F) } },
16538         { { UINT32_C(0x34B4E381), UINT32_C(0xBD8C0868), UINT32_C(0x30DFF271),
16539             UINT32_C(0x278CACC7), UINT32_C(0x02459389), UINT32_C(0x87ED12DE),
16540             UINT32_C(0xDEF840B6), UINT32_C(0x3F7D98FF), UINT32_C(0x5F0B56E1),
16541             UINT32_C(0x71EEE0CB), UINT32_C(0xD8D9BE87), UINT32_C(0x462B5C9B) },
16542           { UINT32_C(0x98094C0F), UINT32_C(0xE6B50B5A), UINT32_C(0x508C67CE),
16543             UINT32_C(0x26F3B274), UINT32_C(0x7CB1F992), UINT32_C(0x418B1BD1),
16544             UINT32_C(0x4FF11827), UINT32_C(0x607818ED), UINT32_C(0x9B042C63),
16545             UINT32_C(0xE630D93A), UINT32_C(0x8C779AE3), UINT32_C(0x38B9EFF3) } },
16546         { { UINT32_C(0x729C5431), UINT32_C(0xE8767D36), UINT32_C(0xBB94642C),
16547             UINT32_C(0xA8BD07C0), UINT32_C(0x58F2E5B2), UINT32_C(0x0C11FC8E),
16548             UINT32_C(0x547533FE), UINT32_C(0xD8912D48), UINT32_C(0x230D91FB),
16549             UINT32_C(0xAAE14F5E), UINT32_C(0x676DFBA0), UINT32_C(0xC122051A) },
16550           { UINT32_C(0x5EA93078), UINT32_C(0x9ED4501F), UINT32_C(0xBD4BEE0A),
16551             UINT32_C(0x2758515C), UINT32_C(0x94D21F52), UINT32_C(0x97733C6C),
16552             UINT32_C(0x4AD306A2), UINT32_C(0x139BCD6D), UINT32_C(0x298123CC),
16553             UINT32_C(0x0AAECBDC), UINT32_C(0x1CB7C7C9), UINT32_C(0x102B8A31) } },
16554         { { UINT32_C(0xFAF46675), UINT32_C(0x22A28E59), UINT32_C(0x10A31E7D),
16555             UINT32_C(0x10757308), UINT32_C(0x2B4C2F4F), UINT32_C(0xC7EEAC84),
16556             UINT32_C(0xB5EF5184), UINT32_C(0xBA370148), UINT32_C(0x8732E055),
16557             UINT32_C(0x4A5A2866), UINT32_C(0xB887C36F), UINT32_C(0x14B8DCDC) },
16558           { UINT32_C(0x433F093D), UINT32_C(0xDBA8C85C), UINT32_C(0x1C9A201C),
16559             UINT32_C(0x73DF549D), UINT32_C(0x70F927D8), UINT32_C(0x69AA0D7B),
16560             UINT32_C(0xD7D2493A), UINT32_C(0xFA3A8685), UINT32_C(0x0A7F4013),
16561             UINT32_C(0x6F48A255), UINT32_C(0xDD393067), UINT32_C(0xD20C8BF9) } },
16562         { { UINT32_C(0x81625E78), UINT32_C(0x4EC874EA), UINT32_C(0x3FBE9267),
16563             UINT32_C(0x8B8D8B5A), UINT32_C(0x9421EC2F), UINT32_C(0xA3D9D164),
16564             UINT32_C(0x880EA295), UINT32_C(0x490E92D9), UINT32_C(0xD8F3B6DA),
16565             UINT32_C(0x745D1EDC), UINT32_C(0x8F18BA03), UINT32_C(0x0116628B) },
16566           { UINT32_C(0x834EADCE), UINT32_C(0x0FF6BCE0), UINT32_C(0x000827F7),
16567             UINT32_C(0x464697F2), UINT32_C(0x498D724E), UINT32_C(0x08DCCF84),
16568             UINT32_C(0x1E88304C), UINT32_C(0x7896D365), UINT32_C(0x135E3622),
16569             UINT32_C(0xE63EBCCE), UINT32_C(0xDC007521), UINT32_C(0xFB942E8E) } },
16570         { { UINT32_C(0xA3688621), UINT32_C(0xBB155A66), UINT32_C(0xF91B52A3),
16571             UINT32_C(0xED2FD7CD), UINT32_C(0xEA20CB88), UINT32_C(0x52798F5D),
16572             UINT32_C(0x373F7DD8), UINT32_C(0x069CE105), UINT32_C(0x8CA78F6B),
16573             UINT32_C(0xF9392EC7), UINT32_C(0x6B335169), UINT32_C(0xB3013E25) },
16574           { UINT32_C(0x6B11715C), UINT32_C(0x1D92F800), UINT32_C(0xFF9DC464),
16575             UINT32_C(0xADD4050E), UINT32_C(0x8465B84A), UINT32_C(0x2AC22659),
16576             UINT32_C(0x465B2BD6), UINT32_C(0x2729D646), UINT32_C(0xE4EFF9DD),
16577             UINT32_C(0x6202344A), UINT32_C(0xCD9B90B9), UINT32_C(0x51F3198F) } },
16578         { { UINT32_C(0xE5F0AE1D), UINT32_C(0x17CE54EF), UINT32_C(0xB09852AF),
16579             UINT32_C(0x984E8204), UINT32_C(0xC4B27A71), UINT32_C(0x3365B37A),
16580             UINT32_C(0xA00E0A9C), UINT32_C(0x720E3152), UINT32_C(0x925BD606),
16581             UINT32_C(0x3692F70D), UINT32_C(0x7BC7E9AB), UINT32_C(0xBE6E699D) },
16582           { UINT32_C(0x4C89A3C0), UINT32_C(0xD75C041F), UINT32_C(0x8DC100C0),
16583             UINT32_C(0x8B9F592D), UINT32_C(0xAD228F71), UINT32_C(0x30750F3A),
16584             UINT32_C(0xE8B17A11), UINT32_C(0x1B9ECF84), UINT32_C(0x0FBFA8A2),
16585             UINT32_C(0xDF202562), UINT32_C(0xAA1B6D67), UINT32_C(0x45C811FC) } },
16586         { { UINT32_C(0x1A5151F8), UINT32_C(0xEC5B84B7), UINT32_C(0x550AB2D2),
16587             UINT32_C(0x118E59E8), UINT32_C(0x049BD735), UINT32_C(0x2CCDEDA4),
16588             UINT32_C(0x9CD62F0F), UINT32_C(0xC99CBA71), UINT32_C(0x62C9E4F8),
16589             UINT32_C(0x69B8040A), UINT32_C(0x110B8283), UINT32_C(0x16F1A31A) },
16590           { UINT32_C(0x98E908A3), UINT32_C(0x53F63802), UINT32_C(0xD862F9DE),
16591             UINT32_C(0x308CB6EF), UINT32_C(0xA521A95A), UINT32_C(0xE185DAD8),
16592             UINT32_C(0x097F75CA), UINT32_C(0x4D8FE9A4), UINT32_C(0x1CA07D53),
16593             UINT32_C(0xD1ECCEC7), UINT32_C(0x0DB07E83), UINT32_C(0x13DFA1DC) } },
16594         { { UINT32_C(0x0F591A76), UINT32_C(0xDDAF9DC6), UINT32_C(0x1685F412),
16595             UINT32_C(0xE1A6D7CC), UINT32_C(0x002B6E8D), UINT32_C(0x153DE557),
16596             UINT32_C(0xC6DA37D9), UINT32_C(0x730C38BC), UINT32_C(0x0914B597),
16597             UINT32_C(0xAE180622), UINT32_C(0xDD8C3A0A), UINT32_C(0x84F98103) },
16598           { UINT32_C(0x8DA205B0), UINT32_C(0x369C5398), UINT32_C(0x3888A720),
16599             UINT32_C(0xA3D95B81), UINT32_C(0xE10E2806), UINT32_C(0x1F3F8BBF),
16600             UINT32_C(0x4530D1F3), UINT32_C(0x48663DF5), UINT32_C(0x3E377713),
16601             UINT32_C(0x320523B4), UINT32_C(0xC7894814), UINT32_C(0xE8B1A575) } },
16602         { { UINT32_C(0x2EE8EA07), UINT32_C(0x33066871), UINT32_C(0x60DA199D),
16603             UINT32_C(0xC6FB4EC5), UINT32_C(0xF4370A05), UINT32_C(0x33231860),
16604             UINT32_C(0xC6DE4E26), UINT32_C(0x7ABECE72), UINT32_C(0xEBDECE7A),
16605             UINT32_C(0xDE8D4BD8), UINT32_C(0x1CBE93C7), UINT32_C(0xC90EE657) },
16606           { UINT32_C(0x85AC2509), UINT32_C(0x0246751B), UINT32_C(0x30380245),
16607             UINT32_C(0xD0EF142C), UINT32_C(0x7C76E39C), UINT32_C(0x086DF9C4),
16608             UINT32_C(0xB789FB56), UINT32_C(0x68F1304F), UINT32_C(0xA5E4BD56),
16609             UINT32_C(0x23E4CB98), UINT32_C(0x64663DCA), UINT32_C(0x69A4C63C) } },
16610         { { UINT32_C(0x7CB34E63), UINT32_C(0x6C72B6AF), UINT32_C(0x6DFC23FE),
16611             UINT32_C(0x073C40CD), UINT32_C(0xC936693A), UINT32_C(0xBDEEE7A1),
16612             UINT32_C(0x6EFAD378), UINT32_C(0xBC858E80), UINT32_C(0xF5BE55D4),
16613             UINT32_C(0xEAD719FF), UINT32_C(0x04552F5F), UINT32_C(0xC8C3238F) },
16614           { UINT32_C(0x928D5784), UINT32_C(0x0952C068), UINT32_C(0x94C58F2B),
16615             UINT32_C(0x89DFDF22), UINT32_C(0x67502C50), UINT32_C(0x332DEDF3),
16616             UINT32_C(0xAC0BE258), UINT32_C(0x3ED2FA3A), UINT32_C(0x7C5C8244),
16617             UINT32_C(0xAEDC9B8A), UINT32_C(0xDC0EA34F), UINT32_C(0x43A761B9) } },
16618         { { UINT32_C(0xCC5E21A5), UINT32_C(0x8FD683A2), UINT32_C(0xFBA2BB68),
16619             UINT32_C(0x5F444C6E), UINT32_C(0xAF05586D), UINT32_C(0x709ACD0E),
16620             UINT32_C(0xDE8FB348), UINT32_C(0x8EFA54D2), UINT32_C(0x34CFE29E),
16621             UINT32_C(0x35276B71), UINT32_C(0x941EAC8C), UINT32_C(0x77A06FCD) },
16622           { UINT32_C(0x928322DD), UINT32_C(0x5815792D), UINT32_C(0x67F7CB59),
16623             UINT32_C(0x82FF356B), UINT32_C(0x304980F4), UINT32_C(0x71E40A78),
16624             UINT32_C(0x3667D021), UINT32_C(0xC8645C27), UINT32_C(0xAEBAE28F),
16625             UINT32_C(0xE785741C), UINT32_C(0x53ECAC37), UINT32_C(0xB2C1BC75) } },
16626         { { UINT32_C(0x1D0A74DB), UINT32_C(0x633EB24F), UINT32_C(0xFA752512),
16627             UINT32_C(0xF1F55E56), UINT32_C(0x8EFE11DE), UINT32_C(0x75FECA68),
16628             UINT32_C(0xE6BF19EC), UINT32_C(0xC80FD91C), UINT32_C(0x2A14C908),
16629             UINT32_C(0xAD0BAFEC), UINT32_C(0xADE4031F), UINT32_C(0x4E1C4ACA) },
16630           { UINT32_C(0x1EB1549A), UINT32_C(0x463A815B), UINT32_C(0x668F1298),
16631             UINT32_C(0x5AD4253C), UINT32_C(0x38A37151), UINT32_C(0x5CB38662),
16632             UINT32_C(0xAFF16B96), UINT32_C(0x34BB1CCF), UINT32_C(0xEE731AB0),
16633             UINT32_C(0xDCA93B13), UINT32_C(0x9BE01A0B), UINT32_C(0x9F3CE5CC) } },
16634         { { UINT32_C(0xA110D331), UINT32_C(0x75DB5723), UINT32_C(0x7123D89F),
16635             UINT32_C(0x67C66F6A), UINT32_C(0x4009D570), UINT32_C(0x27ABBD4B),
16636             UINT32_C(0xC73451BC), UINT32_C(0xACDA6F84), UINT32_C(0x05575ACF),
16637             UINT32_C(0xE4B9A239), UINT32_C(0xAB2D3D6C), UINT32_C(0x3C2DB7EF) },
16638           { UINT32_C(0x29115145), UINT32_C(0x01CCDD08), UINT32_C(0x57B5814A),
16639             UINT32_C(0x9E0602FE), UINT32_C(0x87862838), UINT32_C(0x679B35C2),
16640             UINT32_C(0x38AD598D), UINT32_C(0x0277DC4C), UINT32_C(0x6D896DD4),
16641             UINT32_C(0xEF80A213), UINT32_C(0xE7B9047B), UINT32_C(0xC8812213) } },
16642     },
16643     {
16644         { { UINT32_C(0xEDC9CE62), UINT32_C(0xAC6DBDF6), UINT32_C(0x0F9C006E),
16645             UINT32_C(0xA58F5B44), UINT32_C(0xDC28E1B0), UINT32_C(0x16694DE3),
16646             UINT32_C(0xA6647711), UINT32_C(0x2D039CF2), UINT32_C(0xC5B08B4B),
16647             UINT32_C(0xA13BBE6F), UINT32_C(0x10EBD8CE), UINT32_C(0xE44DA930) },
16648           { UINT32_C(0x19649A16), UINT32_C(0xCD472087), UINT32_C(0x683E5DF1),
16649             UINT32_C(0xE18F4E44), UINT32_C(0x929BFA28), UINT32_C(0xB3F66303),
16650             UINT32_C(0x818249BF), UINT32_C(0x7C378E43), UINT32_C(0x847F7CD9),
16651             UINT32_C(0x76068C80), UINT32_C(0x987EBA16), UINT32_C(0xEE3DB6D1) } },
16652         { { UINT32_C(0xC42A2F52), UINT32_C(0xCBBD8576), UINT32_C(0x9D2B06BB),
16653             UINT32_C(0x9ACC6F70), UINT32_C(0x2E6B72A4), UINT32_C(0xE5CB5620),
16654             UINT32_C(0x7C024443), UINT32_C(0x5738EA0E), UINT32_C(0xB55368F3),
16655             UINT32_C(0x8ED06170), UINT32_C(0x1AEED44F), UINT32_C(0xE54C99BB) },
16656           { UINT32_C(0xE2E0D8B2), UINT32_C(0x3D90A6B2), UINT32_C(0xCF7B2856),
16657             UINT32_C(0x21718977), UINT32_C(0xC5612AEC), UINT32_C(0x089093DC),
16658             UINT32_C(0x99C1BACC), UINT32_C(0xC272EF6F), UINT32_C(0xDC43EAAD),
16659             UINT32_C(0x47DB3B43), UINT32_C(0x0832D891), UINT32_C(0x730F30E4) } },
16660         { { UINT32_C(0x0C7FECDB), UINT32_C(0x9FFE5563), UINT32_C(0xF88101E5),
16661             UINT32_C(0x55CC67B6), UINT32_C(0xCBEFA3C7), UINT32_C(0x3039F981),
16662             UINT32_C(0x667BFD64), UINT32_C(0x2AB06883), UINT32_C(0x4340E3DF),
16663             UINT32_C(0x9007A257), UINT32_C(0x5A3A49CA), UINT32_C(0x1AC3F3FA) },
16664           { UINT32_C(0xC97E20FD), UINT32_C(0x9C7BE629), UINT32_C(0xA3DAE003),
16665             UINT32_C(0xF61823D3), UINT32_C(0xE7380DBA), UINT32_C(0xFFE7FF39),
16666             UINT32_C(0x9FACC3B8), UINT32_C(0x620BB9B5), UINT32_C(0x31AE422C),
16667             UINT32_C(0x2DDCB8CD), UINT32_C(0xD12C3C43), UINT32_C(0x1DE3BCFA) } },
16668         { { UINT32_C(0xD6E0F9A9), UINT32_C(0x8C074946), UINT32_C(0x51C3B05B),
16669             UINT32_C(0x662FA995), UINT32_C(0x04BB2048), UINT32_C(0x6CDAE969),
16670             UINT32_C(0xD6DC8B60), UINT32_C(0x6DEC9594), UINT32_C(0x54438BBC),
16671             UINT32_C(0x8D265869), UINT32_C(0x1B0E95A5), UINT32_C(0x88E983E3) },
16672           { UINT32_C(0x60CBF838), UINT32_C(0x8189F114), UINT32_C(0x771DC46B),
16673             UINT32_C(0x77190697), UINT32_C(0x27F8EC1A), UINT32_C(0x775775A2),
16674             UINT32_C(0x607E3739), UINT32_C(0x7A125240), UINT32_C(0x4F793E4E),
16675             UINT32_C(0xAFAE84E7), UINT32_C(0x5BF5BAF4), UINT32_C(0x44FA17F3) } },
16676         { { UINT32_C(0xD03AC439), UINT32_C(0xA21E69A5), UINT32_C(0x88AA8094),
16677             UINT32_C(0x2069C5FC), UINT32_C(0x8C08F206), UINT32_C(0xB041EEA7),
16678             UINT32_C(0x3D65B8ED), UINT32_C(0x55B9D461), UINT32_C(0xD392C7C4),
16679             UINT32_C(0x951EA25C), UINT32_C(0x9D166232), UINT32_C(0x4B9A1CEC) },
16680           { UINT32_C(0xFCF931A4), UINT32_C(0xC184FCD8), UINT32_C(0x063AD374),
16681             UINT32_C(0xBA59AD44), UINT32_C(0x1AA9796F), UINT32_C(0x1868AD2A),
16682             UINT32_C(0xDFF29832), UINT32_C(0x38A34018), UINT32_C(0x03DF8070),
16683             UINT32_C(0x01FC8801), UINT32_C(0x48DD334A), UINT32_C(0x1282CCE0) } },
16684         { { UINT32_C(0x26D8503C), UINT32_C(0x76AA9557), UINT32_C(0x6BC3E3D0),
16685             UINT32_C(0xBE962B63), UINT32_C(0x97DE8841), UINT32_C(0xF5CA93E5),
16686             UINT32_C(0xAF3F2C16), UINT32_C(0x1561B05E), UINT32_C(0xD34BFF98),
16687             UINT32_C(0x34BE00AA), UINT32_C(0xD23D2925), UINT32_C(0xEA21E6E9) },
16688           { UINT32_C(0x394C3AFB), UINT32_C(0x55713230), UINT32_C(0xD6C8BECA),
16689             UINT32_C(0xEAF0529B), UINT32_C(0x202B9A11), UINT32_C(0xFF38A743),
16690             UINT32_C(0x6D3A398B), UINT32_C(0xA13E39FC), UINT32_C(0x86E2615A),
16691             UINT32_C(0x8CBD644B), UINT32_C(0x191057EC), UINT32_C(0x92063988) } },
16692         { { UINT32_C(0x13F89146), UINT32_C(0x787835CE), UINT32_C(0x69446C3F),
16693             UINT32_C(0x7FCD42CC), UINT32_C(0x840E679D), UINT32_C(0x0DA2AA98),
16694             UINT32_C(0x18779A1B), UINT32_C(0x44F20523), UINT32_C(0xEFBF5935),
16695             UINT32_C(0xE3A3B34F), UINT32_C(0xB9947B70), UINT32_C(0xA5D2CFD0) },
16696           { UINT32_C(0x27F4E16F), UINT32_C(0xAE2AF4EF), UINT32_C(0xB9D21322),
16697             UINT32_C(0xA7FA70D2), UINT32_C(0xB3FD566B), UINT32_C(0x68084919),
16698             UINT32_C(0xD7AAD6AB), UINT32_C(0xF04D71C8), UINT32_C(0x10BC4260),
16699             UINT32_C(0xDBEA21E4), UINT32_C(0x8D949B42), UINT32_C(0xAA7DC665) } },
16700         { { UINT32_C(0x6CCB8213), UINT32_C(0xD8E958A0), UINT32_C(0x91900B54),
16701             UINT32_C(0x118D9DB9), UINT32_C(0x85E8CED6), UINT32_C(0x09BB9D49),
16702             UINT32_C(0x24019281), UINT32_C(0x410E9FB5), UINT32_C(0x6D74C86E),
16703             UINT32_C(0x3B31B4E1), UINT32_C(0x020BB77D), UINT32_C(0x52BC0252) },
16704           { UINT32_C(0x27092CE4), UINT32_C(0x5616A26F), UINT32_C(0xA08F65CD),
16705             UINT32_C(0x67774DBC), UINT32_C(0xC08BD569), UINT32_C(0x560AD494),
16706             UINT32_C(0xAD498783), UINT32_C(0xBE26DA36), UINT32_C(0x7F019C91),
16707             UINT32_C(0x0276C8AB), UINT32_C(0x5248266E), UINT32_C(0x09843ADA) } },
16708         { { UINT32_C(0x7D963CF2), UINT32_C(0xA0AE88A7), UINT32_C(0xD0E84920),
16709             UINT32_C(0x91EF8986), UINT32_C(0xF8C58104), UINT32_C(0xC7EFE344),
16710             UINT32_C(0xECA20773), UINT32_C(0x0A25D9FD), UINT32_C(0x00D8F1D5),
16711             UINT32_C(0x9D989FAA), UINT32_C(0xC8B06264), UINT32_C(0x4204C8CE) },
16712           { UINT32_C(0xBE1A2796), UINT32_C(0x717C12E0), UINT32_C(0xC190C728),
16713             UINT32_C(0x1FA4BA8C), UINT32_C(0x8C8A59BA), UINT32_C(0xA245CA8D),
16714             UINT32_C(0x7672B935), UINT32_C(0xE3C37475), UINT32_C(0x2E4D6375),
16715             UINT32_C(0x083D5E40), UINT32_C(0x5455E16E), UINT32_C(0x0B8D5AB3) } },
16716         { { UINT32_C(0xEED765D4), UINT32_C(0x1DB17DBF), UINT32_C(0xA5DDB965),
16717             UINT32_C(0xBBC9B1BE), UINT32_C(0xDFC12ABC), UINT32_C(0x1948F76D),
16718             UINT32_C(0x134EF489), UINT32_C(0x2C2714E5), UINT32_C(0x741C600F),
16719             UINT32_C(0x60CE2EE8), UINT32_C(0xF80E6E63), UINT32_C(0x32396F22) },
16720           { UINT32_C(0x22537F59), UINT32_C(0x421DAC75), UINT32_C(0x49475DF5),
16721             UINT32_C(0x58FB73C6), UINT32_C(0x6F18F1C7), UINT32_C(0x0ABF2885),
16722             UINT32_C(0x9A398D16), UINT32_C(0x36474468), UINT32_C(0xBF673B87),
16723             UINT32_C(0x87A661A7), UINT32_C(0x73819E17), UINT32_C(0x3E80698F) } },
16724         { { UINT32_C(0x53784CC4), UINT32_C(0xDFE49793), UINT32_C(0x486D508F),
16725             UINT32_C(0x4280EAB0), UINT32_C(0xE534F5A4), UINT32_C(0x119593FF),
16726             UINT32_C(0x9F63242F), UINT32_C(0x98AEFADD), UINT32_C(0xC4829CAE),
16727             UINT32_C(0x9AE6A24A), UINT32_C(0x58E8BA80), UINT32_C(0xF2373CA5) },
16728           { UINT32_C(0x51765FB3), UINT32_C(0x4017AF7E), UINT32_C(0xAF4AEC4B),
16729             UINT32_C(0xD1E40F7C), UINT32_C(0x0898E3BC), UINT32_C(0x87372C7A),
16730             UINT32_C(0x85452CA9), UINT32_C(0x688982B2), UINT32_C(0xB1E50BCA),
16731             UINT32_C(0x71E0B4BF), UINT32_C(0xF70E714A), UINT32_C(0x21FD2DBF) } },
16732         { { UINT32_C(0xFB78DDAC), UINT32_C(0xEE6E8820), UINT32_C(0x063892CD),
16733             UINT32_C(0x0BAED29C), UINT32_C(0x28C0588D), UINT32_C(0x5F33049C),
16734             UINT32_C(0x18DBC432), UINT32_C(0x90C2515E), UINT32_C(0x3B4CB0BD),
16735             UINT32_C(0xB8A1B143), UINT32_C(0x68103043), UINT32_C(0x0AB5C0C9) },
16736           { UINT32_C(0x4005EC40), UINT32_C(0xF3788FA0), UINT32_C(0x039EE115),
16737             UINT32_C(0x82571C99), UINT32_C(0x93260BED), UINT32_C(0xEE8FCED5),
16738             UINT32_C(0x10836D18), UINT32_C(0x5A9BAF79), UINT32_C(0xC46AA4F6),
16739             UINT32_C(0x7C258B09), UINT32_C(0x37F53D31), UINT32_C(0x46ECC5E8) } },
16740         { { UINT32_C(0xBFE0DD98), UINT32_C(0xFA32C0DC), UINT32_C(0x962B1066),
16741             UINT32_C(0x66EFAFC4), UINT32_C(0x64BDF5EB), UINT32_C(0xBA81D33E),
16742             UINT32_C(0xFC7FC512), UINT32_C(0x36C28536), UINT32_C(0xE0B4FA97),
16743             UINT32_C(0x0C95176B), UINT32_C(0x3B9BC64A), UINT32_C(0x47DDE29B) },
16744           { UINT32_C(0x5C173B36), UINT32_C(0x08D986FD), UINT32_C(0x6CF3F28C),
16745             UINT32_C(0x46D84B52), UINT32_C(0xF026BDB9), UINT32_C(0x6F6ED6C3),
16746             UINT32_C(0x68206DC5), UINT32_C(0xAC90668B), UINT32_C(0xECBE4E70),
16747             UINT32_C(0xE8ED5D98), UINT32_C(0xDC1A6974), UINT32_C(0xCFFF61DD) } },
16748         { { UINT32_C(0x77B1A5C1), UINT32_C(0xFF5C3A29), UINT32_C(0x0DDF995D),
16749             UINT32_C(0x10C27E4A), UINT32_C(0xE23363E3), UINT32_C(0xCB745F77),
16750             UINT32_C(0x32F399A3), UINT32_C(0xD765DF6F), UINT32_C(0x8A99E109),
16751             UINT32_C(0xF0CA0C2F), UINT32_C(0x1E025CA0), UINT32_C(0xC3A6BFB7) },
16752           { UINT32_C(0x4F9D9FA5), UINT32_C(0x830B2C0A), UINT32_C(0xBD1A84E5),
16753             UINT32_C(0xAE914CAC), UINT32_C(0xA4FEBCC1), UINT32_C(0x30B35ED8),
16754             UINT32_C(0x84CFBF2E), UINT32_C(0xCB902B46), UINT32_C(0x25FC6375),
16755             UINT32_C(0x0BD47628), UINT32_C(0x85509D04), UINT32_C(0xA858A53C) } },
16756         { { UINT32_C(0x552E0A3F), UINT32_C(0x8B995D0C), UINT32_C(0x17BE9FF7),
16757             UINT32_C(0xEDBD4E94), UINT32_C(0x95085178), UINT32_C(0x3432E839),
16758             UINT32_C(0x80C256F5), UINT32_C(0x0FE5C181), UINT32_C(0xEBF9597C),
16759             UINT32_C(0x05A64EA8), UINT32_C(0x3F80371F), UINT32_C(0x6ED44BB1) },
16760           { UINT32_C(0xFE4C12EE), UINT32_C(0x6A29A05E), UINT32_C(0xE0BB83B3),
16761             UINT32_C(0x3E436A43), UINT32_C(0x74D72921), UINT32_C(0x38365D9A),
16762             UINT32_C(0xC38E1ED7), UINT32_C(0x3F5EE823), UINT32_C(0xE8FA063F),
16763             UINT32_C(0x09A53213), UINT32_C(0xB435E713), UINT32_C(0x1E7FE47A) } },
16764         { { UINT32_C(0xFDDD17F3), UINT32_C(0xE4D9BC94), UINT32_C(0xC1016C20),
16765             UINT32_C(0xC74B8FED), UINT32_C(0xB49C060E), UINT32_C(0x095DE39B),
16766             UINT32_C(0x8AC0DF00), UINT32_C(0xDBCC6795), UINT32_C(0x1C34F4DF),
16767             UINT32_C(0x4CF6BAEB), UINT32_C(0xE8390170), UINT32_C(0x72C55C21) },
16768           { UINT32_C(0xF6C48E79), UINT32_C(0x4F17BFD2), UINT32_C(0x017A80BA),
16769             UINT32_C(0x18BF4DA0), UINT32_C(0xBCF4B138), UINT32_C(0xCF51D829),
16770             UINT32_C(0xF48F8B0D), UINT32_C(0x598AEE5F), UINT32_C(0x20F10809),
16771             UINT32_C(0x83FAEE56), UINT32_C(0x779F0850), UINT32_C(0x4615D4DC) } },
16772     },
16773     {
16774         { { UINT32_C(0x5852B59B), UINT32_C(0x22313DEE), UINT32_C(0xB6A0B37F),
16775             UINT32_C(0x6F56C8E8), UINT32_C(0xA76EC380), UINT32_C(0x43D6EEAE),
16776             UINT32_C(0x0275AD36), UINT32_C(0xA1655136), UINT32_C(0xDF095BDA),
16777             UINT32_C(0xE5C1B65A), UINT32_C(0x367C44B0), UINT32_C(0xBD1FFA8D) },
16778           { UINT32_C(0x6B48AF2B), UINT32_C(0xE2B419C2), UINT32_C(0x3DA194C8),
16779             UINT32_C(0x57BBBD97), UINT32_C(0xA2BAFF05), UINT32_C(0xB5FBE51F),
16780             UINT32_C(0x6269B5D0), UINT32_C(0xA0594D70), UINT32_C(0x23E8D667),
16781             UINT32_C(0x0B07B705), UINT32_C(0x63E016E7), UINT32_C(0xAE1976B5) } },
16782         { { UINT32_C(0xFBECAAAE), UINT32_C(0x2FDE4893), UINT32_C(0x30332229),
16783             UINT32_C(0x444346DE), UINT32_C(0x09456ED5), UINT32_C(0x157B8A5B),
16784             UINT32_C(0x25797C6C), UINT32_C(0x73606A79), UINT32_C(0x33C14C06),
16785             UINT32_C(0xA9D0F47C), UINT32_C(0xFAF971CA), UINT32_C(0x7BC8962C) },
16786           { UINT32_C(0x65909DFD), UINT32_C(0x6E763C51), UINT32_C(0x14A9BF42),
16787             UINT32_C(0x1BBBE41B), UINT32_C(0xC49E9EFC), UINT32_C(0xD95B7ECB),
16788             UINT32_C(0xB38F2B59), UINT32_C(0x0C317927), UINT32_C(0xB3C397DB),
16789             UINT32_C(0x97912B53), UINT32_C(0x45C7ABC7), UINT32_C(0xCB3879AA) } },
16790         { { UINT32_C(0x24359B81), UINT32_C(0xCD81BDCF), UINT32_C(0xDB4C321C),
16791             UINT32_C(0x6FD326E2), UINT32_C(0xF8EBE39C), UINT32_C(0x4CB0228B),
16792             UINT32_C(0xB2CDD852), UINT32_C(0x496A9DCE), UINT32_C(0xD0E9B3AF),
16793             UINT32_C(0x0F115A1A), UINT32_C(0xD8EEEF8A), UINT32_C(0xAA08BF36) },
16794           { UINT32_C(0x06E5E739), UINT32_C(0x5232A515), UINT32_C(0x8407A551),
16795             UINT32_C(0x21FAE9D5), UINT32_C(0x8994B4E8), UINT32_C(0x289D18B0),
16796             UINT32_C(0x09097A52), UINT32_C(0xB4E346A8), UINT32_C(0x324621D0),
16797             UINT32_C(0xC641510F), UINT32_C(0x95A41AB8), UINT32_C(0xC567FD4A) } },
16798         { { UINT32_C(0xD57C8DE9), UINT32_C(0x261578C7), UINT32_C(0x3836C5C8),
16799             UINT32_C(0xB9BC491F), UINT32_C(0x14C8038F), UINT32_C(0x993266B4),
16800             UINT32_C(0xFAA7CC39), UINT32_C(0xBACAD755), UINT32_C(0xD69B7E27),
16801             UINT32_C(0x418C4DEF), UINT32_C(0xAE751533), UINT32_C(0x53FDC5CD) },
16802           { UINT32_C(0xC3EEA63A), UINT32_C(0x6F3BD329), UINT32_C(0xE53DD29E),
16803             UINT32_C(0xA7A22091), UINT32_C(0xDC4C54EC), UINT32_C(0xB7164F73),
16804             UINT32_C(0x44D3D74E), UINT32_C(0xCA66290D), UINT32_C(0x4C9EA511),
16805             UINT32_C(0xF77C6242), UINT32_C(0x1F714C49), UINT32_C(0x34337F55) } },
16806         { { UINT32_C(0xA64B6C4B), UINT32_C(0x5ED2B216), UINT32_C(0x3AAE640D),
16807             UINT32_C(0x1C38794F), UINT32_C(0x8905794F), UINT32_C(0x30BBAEE0),
16808             UINT32_C(0xC8699CFB), UINT32_C(0x0D9EE41E), UINT32_C(0xCF7B7C29),
16809             UINT32_C(0xAF38DAF2), UINT32_C(0x43E53513), UINT32_C(0x0D6A05CA) },
16810           { UINT32_C(0x2606AB56), UINT32_C(0xBE96C644), UINT32_C(0xE9EB9734),
16811             UINT32_C(0x13E7A072), UINT32_C(0x5FF50CD7), UINT32_C(0xF9669445),
16812             UINT32_C(0x47DA6F1D), UINT32_C(0x68EF26B5), UINT32_C(0x23687CB7),
16813             UINT32_C(0xF0028738), UINT32_C(0x6217C1CE), UINT32_C(0x5ED9C876) } },
16814         { { UINT32_C(0x0A3A9691), UINT32_C(0x423BA513), UINT32_C(0xB3179296),
16815             UINT32_C(0xF421B1E7), UINT32_C(0x1A871E1B), UINT32_C(0x6B51BCDB),
16816             UINT32_C(0x464E4300), UINT32_C(0x6E3BB5B5), UINT32_C(0xFC6C54CC),
16817             UINT32_C(0x24171E2E), UINT32_C(0xD3E58DC2), UINT32_C(0xA9DFA947) },
16818           { UINT32_C(0x9DE9CFA7), UINT32_C(0x175B3309), UINT32_C(0x2D1015DA),
16819             UINT32_C(0x707B2529), UINT32_C(0x993EA65A), UINT32_C(0xCBB95F17),
16820             UINT32_C(0x0447450D), UINT32_C(0x93515063), UINT32_C(0x1B2753C9),
16821             UINT32_C(0x0F47B205), UINT32_C(0xE7D427CF), UINT32_C(0x4A0BAB14) } },
16822         { { UINT32_C(0xB5AA7CA1), UINT32_C(0xA39DEF39), UINT32_C(0xC47C33DF),
16823             UINT32_C(0x591CB173), UINT32_C(0x6BBAB872), UINT32_C(0xA09DAC79),
16824             UINT32_C(0x7208BA2F), UINT32_C(0x3EF9D7CF), UINT32_C(0x7A0A34FC),
16825             UINT32_C(0x3CC18931), UINT32_C(0xBCC3380F), UINT32_C(0xAE31C62B) },
16826           { UINT32_C(0x0287C0B4), UINT32_C(0xD72A6794), UINT32_C(0x68E334F1),
16827             UINT32_C(0x3373382C), UINT32_C(0xBD20C6A6), UINT32_C(0xD0310CA8),
16828             UINT32_C(0x42C033FD), UINT32_C(0xA2734B87), UINT32_C(0x8DCE4509),
16829             UINT32_C(0xA5D390F1), UINT32_C(0x3E1AFCB5), UINT32_C(0xFC84E74B) } },
16830         { { UINT32_C(0xF2CD8A9C), UINT32_C(0xB028334D), UINT32_C(0x570F76F6),
16831             UINT32_C(0xB8719291), UINT32_C(0x01065A2D), UINT32_C(0x662A386E),
16832             UINT32_C(0x53D940AE), UINT32_C(0xDF1634CB), UINT32_C(0x8F5B41F9),
16833             UINT32_C(0x625A7B83), UINT32_C(0xEE6AA1B4), UINT32_C(0xA033E4FE) },
16834           { UINT32_C(0x1E42BABB), UINT32_C(0x51E9D463), UINT32_C(0x0D388468),
16835             UINT32_C(0x660BC2E4), UINT32_C(0xFCBB114A), UINT32_C(0x3F702189),
16836             UINT32_C(0xB414CA78), UINT32_C(0x6B46FE35), UINT32_C(0x4A57316B),
16837             UINT32_C(0x328F6CF2), UINT32_C(0x381AD156), UINT32_C(0x917423B5) } },
16838         { { UINT32_C(0x5373A607), UINT32_C(0xAC19306E), UINT32_C(0x191D0969),
16839             UINT32_C(0x471DF8E3), UINT32_C(0xB9720D83), UINT32_C(0x380ADE35),
16840             UINT32_C(0x48F1FD5C), UINT32_C(0x7423FDF5), UINT32_C(0x49CABC95),
16841             UINT32_C(0x8B090C9F), UINT32_C(0xC9842F2F), UINT32_C(0xB768E8CD) },
16842           { UINT32_C(0xE56162D6), UINT32_C(0x399F456D), UINT32_C(0x4F326791),
16843             UINT32_C(0xBB6BA240), UINT32_C(0x342590BE), UINT32_C(0x8F4FBA3B),
16844             UINT32_C(0x3DFB6B3E), UINT32_C(0x053986B9), UINT32_C(0x190C7425),
16845             UINT32_C(0xBB6739F1), UINT32_C(0x32F7E95F), UINT32_C(0x32D4A553) } },
16846         { { UINT32_C(0x0DDBFB21), UINT32_C(0x0205A0EC), UINT32_C(0x33AC3407),
16847             UINT32_C(0x3010327D), UINT32_C(0x3348999B), UINT32_C(0xCF2F4DB3),
16848             UINT32_C(0x1551604A), UINT32_C(0x660DB9F4), UINT32_C(0x5D38D335),
16849             UINT32_C(0xC346C69A), UINT32_C(0x38882479), UINT32_C(0x64AAB3D3) },
16850           { UINT32_C(0x6AE44403), UINT32_C(0xA096B5E7), UINT32_C(0x645F76CD),
16851             UINT32_C(0x6B4C9571), UINT32_C(0x4711120F), UINT32_C(0x72E1CD5F),
16852             UINT32_C(0xF27CC3E1), UINT32_C(0x93EC42AC), UINT32_C(0xA72ABB12),
16853             UINT32_C(0x2D18D004), UINT32_C(0xC9841A04), UINT32_C(0x232E9568) } },
16854         { { UINT32_C(0x3CC7F908), UINT32_C(0xFF01DB22), UINT32_C(0xD13CDD3B),
16855             UINT32_C(0x9F214F8F), UINT32_C(0xE0B014B5), UINT32_C(0x38DADBB7),
16856             UINT32_C(0x94245C95), UINT32_C(0x2C548CCC), UINT32_C(0x809AFCE3),
16857             UINT32_C(0x714BE331), UINT32_C(0x9BFE957E), UINT32_C(0xBCC64410) },
16858           { UINT32_C(0x5B957F80), UINT32_C(0xC21C2D21), UINT32_C(0xBB8A4C42),
16859             UINT32_C(0xBA2D4FDC), UINT32_C(0x74817CEC), UINT32_C(0xFA6CD4AF),
16860             UINT32_C(0xC528EAD6), UINT32_C(0x9E7FB523), UINT32_C(0x7714B10E),
16861             UINT32_C(0xAED781FF), UINT32_C(0x94F04455), UINT32_C(0xB52BB592) } },
16862         { { UINT32_C(0x868CC68B), UINT32_C(0xA578BD69), UINT32_C(0x603F2C08),
16863             UINT32_C(0xA40FDC8D), UINT32_C(0x2D81B042), UINT32_C(0x53D79BD1),
16864             UINT32_C(0xA7587EAB), UINT32_C(0x1B136AF3), UINT32_C(0x868A16DB),
16865             UINT32_C(0x1ED4F939), UINT32_C(0xD0B98273), UINT32_C(0x775A61FB) },
16866           { UINT32_C(0xE56BEF8C), UINT32_C(0xBA5C12A6), UINT32_C(0xDDDC8595),
16867             UINT32_C(0xF926CE52), UINT32_C(0x586FE1F8), UINT32_C(0xA13F5C8F),
16868             UINT32_C(0x060DBB54), UINT32_C(0xEAC9F7F2), UINT32_C(0x51AF4342),
16869             UINT32_C(0x70C0AC3A), UINT32_C(0x79CDA450), UINT32_C(0xC16E303C) } },
16870         { { UINT32_C(0x8113F4EA), UINT32_C(0xD0DADD6C), UINT32_C(0x07BDF09F),
16871             UINT32_C(0xF14E3922), UINT32_C(0xAA7D877C), UINT32_C(0x3FE5E9C2),
16872             UINT32_C(0x48779264), UINT32_C(0x9EA95C19), UINT32_C(0x4FCB8344),
16873             UINT32_C(0xE93F65A7), UINT32_C(0x76D925A4), UINT32_C(0x9F40837E) },
16874           { UINT32_C(0x8271FFC7), UINT32_C(0x0EA6DA3F), UINT32_C(0xCC8F9B19),
16875             UINT32_C(0x557FA529), UINT32_C(0x78E6DDFD), UINT32_C(0x2613DBF1),
16876             UINT32_C(0x36B1E954), UINT32_C(0x7A7523B8), UINT32_C(0x406A87FB),
16877             UINT32_C(0x20EB3168), UINT32_C(0x03ABA56A), UINT32_C(0x64C21C14) } },
16878         { { UINT32_C(0xC032DD5F), UINT32_C(0xE86C9C2D), UINT32_C(0x86F16A21),
16879             UINT32_C(0x158CEB8E), UINT32_C(0x68326AF1), UINT32_C(0x0279FF53),
16880             UINT32_C(0x59F12BA5), UINT32_C(0x1FFE2E2B), UINT32_C(0x86826D45),
16881             UINT32_C(0xD75A46DB), UINT32_C(0x1E33E6AC), UINT32_C(0xE19B4841) },
16882           { UINT32_C(0x0E52991C), UINT32_C(0x5F0CC524), UINT32_C(0x8B116286),
16883             UINT32_C(0x645871F9), UINT32_C(0xFCAEC5D3), UINT32_C(0xAB3B4B1E),
16884             UINT32_C(0x51D0F698), UINT32_C(0x994C8DF0), UINT32_C(0xE5D13040),
16885             UINT32_C(0x06F890AF), UINT32_C(0x5F96C7C2), UINT32_C(0x72D9DC23) } },
16886         { { UINT32_C(0xE7886A80), UINT32_C(0x7C018DEE), UINT32_C(0x8786E4A3),
16887             UINT32_C(0xFA209330), UINT32_C(0xA4415CA1), UINT32_C(0xCEC8E2A3),
16888             UINT32_C(0xCC83CC60), UINT32_C(0x5C736FC1), UINT32_C(0xF00C259F),
16889             UINT32_C(0xFEF9788C), UINT32_C(0xDD29A6AD), UINT32_C(0xED5C01CB) },
16890           { UINT32_C(0x3E20825B), UINT32_C(0x87834A03), UINT32_C(0x123F9358),
16891             UINT32_C(0x13B1239D), UINT32_C(0xFBC286C1), UINT32_C(0x7E8869D0),
16892             UINT32_C(0x24CE8609), UINT32_C(0xC4AB5AA3), UINT32_C(0xB6349208),
16893             UINT32_C(0x38716BEE), UINT32_C(0xB322AE21), UINT32_C(0x0BDF4F99) } },
16894         { { UINT32_C(0x53E3494B), UINT32_C(0x6B97A2BF), UINT32_C(0x70F7A13E),
16895             UINT32_C(0xA8AA05C5), UINT32_C(0xF1305B51), UINT32_C(0x209709C2),
16896             UINT32_C(0xDAB76F2C), UINT32_C(0x57B31888), UINT32_C(0xAA2A406A),
16897             UINT32_C(0x75B2ECD7), UINT32_C(0xA35374A4), UINT32_C(0x88801A00) },
16898           { UINT32_C(0x45C0471B), UINT32_C(0xE1458D1C), UINT32_C(0x322C1AB0),
16899             UINT32_C(0x5760E306), UINT32_C(0xAD6AB0A6), UINT32_C(0x789A0AF1),
16900             UINT32_C(0xF458B9CE), UINT32_C(0x74398DE1), UINT32_C(0x32E0C65F),
16901             UINT32_C(0x1652FF9F), UINT32_C(0xFFFB3A52), UINT32_C(0xFAF1F9D5) } },
16902     },
16903     {
16904         { { UINT32_C(0xD1D1B007), UINT32_C(0xA05C751C), UINT32_C(0x0213E478),
16905             UINT32_C(0x016C213B), UINT32_C(0xF4C98FEE), UINT32_C(0x9C56E26C),
16906             UINT32_C(0xE7B3A7C7), UINT32_C(0x6084F8B9), UINT32_C(0xDECC1646),
16907             UINT32_C(0xA0B042F6), UINT32_C(0xFBF3A0BC), UINT32_C(0x4A6F3C1A) },
16908           { UINT32_C(0x51C9F909), UINT32_C(0x94524C2C), UINT32_C(0x3A6D3748),
16909             UINT32_C(0xF3B3AD40), UINT32_C(0x7CE1F9F5), UINT32_C(0x18792D6E),
16910             UINT32_C(0xFC0C34FA), UINT32_C(0x8EBC2FD7), UINT32_C(0x780A1693),
16911             UINT32_C(0x032A9F41), UINT32_C(0x56A60019), UINT32_C(0x34F9801E) } },
16912         { { UINT32_C(0xF0DB3751), UINT32_C(0xB398290C), UINT32_C(0xBA42C976),
16913             UINT32_C(0x01170580), UINT32_C(0x56560B89), UINT32_C(0x3E71AA29),
16914             UINT32_C(0x50E6647B), UINT32_C(0x80817AAC), UINT32_C(0xA0BE42DA),
16915             UINT32_C(0x35C833AD), UINT32_C(0xF1BABA4E), UINT32_C(0xFA3C6148) },
16916           { UINT32_C(0xCD8F6253), UINT32_C(0xC57BE645), UINT32_C(0xC657AD0D),
16917             UINT32_C(0x77CEE46B), UINT32_C(0x0DEFD908), UINT32_C(0x83007731),
16918             UINT32_C(0x899CBA56), UINT32_C(0x92FE9BCE), UINT32_C(0xBCEFFB5A),
16919             UINT32_C(0x48450EC4), UINT32_C(0xF2F5F4BF), UINT32_C(0xE615148D) } },
16920         { { UINT32_C(0x90B86166), UINT32_C(0xF55EDABB), UINT32_C(0x075430A2),
16921             UINT32_C(0x27F7D784), UINT32_C(0x9BF17161), UINT32_C(0xF53E822B),
16922             UINT32_C(0xAFE808DC), UINT32_C(0x4A5B3B93), UINT32_C(0xD7272F55),
16923             UINT32_C(0x590BBBDE), UINT32_C(0xEAEA79A1), UINT32_C(0x233D63FA) },
16924           { UINT32_C(0xFE1EBA07), UINT32_C(0xD7042BEA), UINT32_C(0x10750D7E),
16925             UINT32_C(0xD2B9AEA0), UINT32_C(0x31078AA5), UINT32_C(0xD8D1E690),
16926             UINT32_C(0x7E37BC8B), UINT32_C(0x9E837F18), UINT32_C(0x85008975),
16927             UINT32_C(0x9558FF4F), UINT32_C(0x421FE867), UINT32_C(0x93EDB837) } },
16928         { { UINT32_C(0x83D55B5A), UINT32_C(0xAA6489DF), UINT32_C(0x86BF27F7),
16929             UINT32_C(0xEA092E49), UINT32_C(0x5FA2EFEC), UINT32_C(0x4D8943A9),
16930             UINT32_C(0x720E1A8C), UINT32_C(0xC9BAAE53), UINT32_C(0x95A4F8A3),
16931             UINT32_C(0xC055444B), UINT32_C(0xA7C1206B), UINT32_C(0x93BD01E8) },
16932           { UINT32_C(0x714A27DF), UINT32_C(0xD97765B6), UINT32_C(0x193F1B16),
16933             UINT32_C(0xD622D954), UINT32_C(0xF1503B15), UINT32_C(0x115CC35A),
16934             UINT32_C(0xA9FA21F8), UINT32_C(0x1DD5359F), UINT32_C(0x6DFED1F1),
16935             UINT32_C(0x197C3299), UINT32_C(0xF77F2679), UINT32_C(0xDEE8B7C9) } },
16936         { { UINT32_C(0x394FD855), UINT32_C(0x5405179F), UINT32_C(0x49FDFB33),
16937             UINT32_C(0xC9D6E244), UINT32_C(0xBD903393), UINT32_C(0x70EBCAB4),
16938             UINT32_C(0xA2C56780), UINT32_C(0x0D3A3899), UINT32_C(0x683D1A0A),
16939             UINT32_C(0x012C7256), UINT32_C(0x80A48F3B), UINT32_C(0xC688FC88) },
16940           { UINT32_C(0x6F7DF527), UINT32_C(0x18095754), UINT32_C(0x71315D16),
16941             UINT32_C(0x9E339B4B), UINT32_C(0xA956BB12), UINT32_C(0x90560C28),
16942             UINT32_C(0xD42EEE8D), UINT32_C(0x2BECEA60), UINT32_C(0x50632653),
16943             UINT32_C(0x82AEB9A7), UINT32_C(0xDFA5CD6A), UINT32_C(0xED34353E) } },
16944         { { UINT32_C(0x91AECCE4), UINT32_C(0x82154D2C), UINT32_C(0x5041887F),
16945             UINT32_C(0x312C6070), UINT32_C(0xFB9FBD71), UINT32_C(0xECF589F3),
16946             UINT32_C(0xB524BDE4), UINT32_C(0x67660A7D), UINT32_C(0x724ACF23),
16947             UINT32_C(0xE99B029D), UINT32_C(0x6D1CD891), UINT32_C(0xDF06E4AF) },
16948           { UINT32_C(0x80EE304D), UINT32_C(0x07806CB5), UINT32_C(0x7443A8F8),
16949             UINT32_C(0x0C70BB9F), UINT32_C(0x08B0830A), UINT32_C(0x01EC3414),
16950             UINT32_C(0x5A81510B), UINT32_C(0xFD7B63C3), UINT32_C(0x453B5F93),
16951             UINT32_C(0xE90A0A39), UINT32_C(0x9BC71725), UINT32_C(0xAB700F8F) } },
16952         { { UINT32_C(0xB9F00793), UINT32_C(0x9401AEC2), UINT32_C(0xB997F0BF),
16953             UINT32_C(0x064EC4F4), UINT32_C(0x849240C8), UINT32_C(0xDC0CC1FD),
16954             UINT32_C(0xB6E92D72), UINT32_C(0x39A75F37), UINT32_C(0x0224A4AB),
16955             UINT32_C(0xAA43CA5D), UINT32_C(0x54614C47), UINT32_C(0x9C4D6325) },
16956           { UINT32_C(0xC6709DA3), UINT32_C(0x1767366F), UINT32_C(0x23479232),
16957             UINT32_C(0xA6B482D1), UINT32_C(0x84D63E85), UINT32_C(0x54DC6DDC),
16958             UINT32_C(0xC99D3B9E), UINT32_C(0x0ACCB5AD), UINT32_C(0xE8AA3ABF),
16959             UINT32_C(0x211716BB), UINT32_C(0x69EC6406), UINT32_C(0xD0FE25AD) } },
16960         { { UINT32_C(0xDF85C705), UINT32_C(0x0D5C1769), UINT32_C(0xA409DCD1),
16961             UINT32_C(0x7086C93D), UINT32_C(0x0E8D75D8), UINT32_C(0x9710839D),
16962             UINT32_C(0xEBDD4177), UINT32_C(0x17B7DB75), UINT32_C(0xF649A809),
16963             UINT32_C(0xAF69EB58), UINT32_C(0x8A84E220), UINT32_C(0x6EF19EA2) },
16964           { UINT32_C(0x65C278B2), UINT32_C(0x36EB5C66), UINT32_C(0x81EA9D65),
16965             UINT32_C(0xD2A15128), UINT32_C(0x769300AD), UINT32_C(0x4FCBA840),
16966             UINT32_C(0xC8E536E5), UINT32_C(0xC2052CCD), UINT32_C(0xAC263B8F),
16967             UINT32_C(0x9CAEE014), UINT32_C(0xF9239663), UINT32_C(0x56F7ED7A) } },
16968         { { UINT32_C(0xAC9E09E1), UINT32_C(0xF6FA251F), UINT32_C(0x955A2853),
16969             UINT32_C(0xA3775605), UINT32_C(0xF2A4BD78), UINT32_C(0x977B8D21),
16970             UINT32_C(0x3E096410), UINT32_C(0xF68AA7FF), UINT32_C(0x65F88419),
16971             UINT32_C(0x01AB0552), UINT32_C(0xBB93F64E), UINT32_C(0xC4C8D77E) },
16972           { UINT32_C(0x3451FE64), UINT32_C(0x71825111), UINT32_C(0x46F9BAF0),
16973             UINT32_C(0xFA0F905B), UINT32_C(0xCA49EF1A), UINT32_C(0x79BE3BF3),
16974             UINT32_C(0x6CB02071), UINT32_C(0x831109B2), UINT32_C(0xC4DDBFE5),
16975             UINT32_C(0x765F935F), UINT32_C(0x80E5A3BA), UINT32_C(0x6F99CD14) } },
16976         { { UINT32_C(0x234F91FF), UINT32_C(0xD2E8DA04), UINT32_C(0x813867AA),
16977             UINT32_C(0x4DED4D6D), UINT32_C(0xE0A0D945), UINT32_C(0x3B50175D),
16978             UINT32_C(0x4EB78137), UINT32_C(0x55AC7406), UINT32_C(0xE1D47730),
16979             UINT32_C(0xE9FA7F6E), UINT32_C(0x5CBF2176), UINT32_C(0x2C171531) },
16980           { UINT32_C(0x2BE7A47D), UINT32_C(0xA521788F), UINT32_C(0x3FCF1AB3),
16981             UINT32_C(0x95B15A27), UINT32_C(0xF28A946A), UINT32_C(0xAADA6401),
16982             UINT32_C(0x8B4E898B), UINT32_C(0x628B2EF4), UINT32_C(0x6D6592CC),
16983             UINT32_C(0x0E6F4629), UINT32_C(0xA723CADD), UINT32_C(0x997C7094) } },
16984         { { UINT32_C(0x6AFE80C6), UINT32_C(0x878BCE11), UINT32_C(0x007BBA38),
16985             UINT32_C(0xA89ABC9D), UINT32_C(0xA7CC267F), UINT32_C(0xB0C1F87B),
16986             UINT32_C(0x5104FF04), UINT32_C(0x86D33B9D), UINT32_C(0x2EF1BA42),
16987             UINT32_C(0xB0504B1B), UINT32_C(0xB2827E88), UINT32_C(0x21693048) },
16988           { UINT32_C(0x79CFCD14), UINT32_C(0x11F1CCD5), UINT32_C(0x94AD227E),
16989             UINT32_C(0x59C09FFA), UINT32_C(0x3EA91ACF), UINT32_C(0x95A4ADCB),
16990             UINT32_C(0xB4370BAA), UINT32_C(0x1346238B), UINT32_C(0x3E1367B0),
16991             UINT32_C(0xB099D202), UINT32_C(0x90F23CEA), UINT32_C(0xCF5BBDE6) } },
16992         { { UINT32_C(0xBCB3BE5E), UINT32_C(0x453299BB), UINT32_C(0x38E9FF97),
16993             UINT32_C(0x123C588E), UINT32_C(0xF6A2E521), UINT32_C(0x8C115DD9),
16994             UINT32_C(0xFF7D4B98), UINT32_C(0x6E333C11), UINT32_C(0xDA73E736),
16995             UINT32_C(0x9DD061E5), UINT32_C(0x5CA53056), UINT32_C(0xC6AB7B3A) },
16996           { UINT32_C(0x5B30A76B), UINT32_C(0xF1EF3EE3), UINT32_C(0x961BA11F),
16997             UINT32_C(0xADD6B44A), UINT32_C(0x2CA6E030), UINT32_C(0x7BB00B75),
16998             UINT32_C(0x2FE270AD), UINT32_C(0x270272E8), UINT32_C(0x241A9239),
16999             UINT32_C(0x23BC6F4F), UINT32_C(0x0BB94A94), UINT32_C(0x88581E13) } },
17000         { { UINT32_C(0x24EEF67F), UINT32_C(0xBD225A69), UINT32_C(0x0412CEB7),
17001             UINT32_C(0x7CFD9614), UINT32_C(0x99AC298E), UINT32_C(0xF6DE1679),
17002             UINT32_C(0xED6C3571), UINT32_C(0xB20FD895), UINT32_C(0x61836C56),
17003             UINT32_C(0x03C73B78), UINT32_C(0xABA6CB34), UINT32_C(0xEE3C3A16) },
17004           { UINT32_C(0x4138408A), UINT32_C(0x9E8C5667), UINT32_C(0x2DD6EBDF),
17005             UINT32_C(0xEC25FCB1), UINT32_C(0xDBBDF6E3), UINT32_C(0xC54C33FD),
17006             UINT32_C(0x4A3C9DD4), UINT32_C(0x93E0913B), UINT32_C(0x35EDEED4),
17007             UINT32_C(0x66D7D135), UINT32_C(0x453FB66E), UINT32_C(0xD29A36C4) } },
17008         { { UINT32_C(0x9F1943AF), UINT32_C(0x7F192F03), UINT32_C(0x4E0B5FB0),
17009             UINT32_C(0x6488163F), UINT32_C(0x53599226), UINT32_C(0x66A45C69),
17010             UINT32_C(0x9AD15A73), UINT32_C(0x924E2E43), UINT32_C(0x42A99D76),
17011             UINT32_C(0x8B553DB7), UINT32_C(0x0451F521), UINT32_C(0x4BC6B53B) },
17012           { UINT32_C(0x101F8AD6), UINT32_C(0xC029B5EF), UINT32_C(0xC507EED9),
17013             UINT32_C(0x6A4DA71C), UINT32_C(0x30BB22F3), UINT32_C(0x3ADFAEC0),
17014             UINT32_C(0xB514F85B), UINT32_C(0x81BCAF7A), UINT32_C(0x5A7E60D3),
17015             UINT32_C(0x2E1E6EFF), UINT32_C(0xAE39D42F), UINT32_C(0x5270ABC0) } },
17016         { { UINT32_C(0x3901F0F8), UINT32_C(0x86D56DEB), UINT32_C(0xEED5F650),
17017             UINT32_C(0x1D0BC792), UINT32_C(0xCA1114A3), UINT32_C(0x1A2DDFD8),
17018             UINT32_C(0xF1DD316D), UINT32_C(0x94ABF4B1), UINT32_C(0x3D9F18EF),
17019             UINT32_C(0xF72179E4), UINT32_C(0x9AA2CABF), UINT32_C(0x52A0921E) },
17020           { UINT32_C(0xA7452883), UINT32_C(0xECDA9E27), UINT32_C(0xAFD771B4),
17021             UINT32_C(0x7E90850A), UINT32_C(0x9CC0465C), UINT32_C(0xD40F87EA),
17022             UINT32_C(0x865CDA36), UINT32_C(0x8CFCB60A), UINT32_C(0x7C650942),
17023             UINT32_C(0x3DBEC2CC), UINT32_C(0xE718CA9D), UINT32_C(0x071A4EE7) } },
17024         { { UINT32_C(0x276AC5F3), UINT32_C(0x73C0E4FF), UINT32_C(0xBDB97EA1),
17025             UINT32_C(0xE7BA5A6A), UINT32_C(0xC5808398), UINT32_C(0x638CA54E),
17026             UINT32_C(0x413855E5), UINT32_C(0x8258DC82), UINT32_C(0x57F07614),
17027             UINT32_C(0x35DDD2E9), UINT32_C(0x1DC13BF9), UINT32_C(0xF98DD692) },
17028           { UINT32_C(0xF16DCD84), UINT32_C(0x3A4C0088), UINT32_C(0x833D83F9),
17029             UINT32_C(0xF192EADD), UINT32_C(0xA6D61D29), UINT32_C(0x3C26C931),
17030             UINT32_C(0xDE0AD7A1), UINT32_C(0x589FDD52), UINT32_C(0x0442D37F),
17031             UINT32_C(0x7CD83DD2), UINT32_C(0x403ECBFC), UINT32_C(0x1E47E777) } },
17032     },
17033     {
17034         { { UINT32_C(0x70D4D7BC), UINT32_C(0x2AF8ED81), UINT32_C(0xB632435C),
17035             UINT32_C(0xABC3E15F), UINT32_C(0x78219356), UINT32_C(0x4C0E726F),
17036             UINT32_C(0xB87254C4), UINT32_C(0x8C1962A1), UINT32_C(0xC9E7691A),
17037             UINT32_C(0x30796A71), UINT32_C(0xA75A12EE), UINT32_C(0xD453EF19) },
17038           { UINT32_C(0x13AE4964), UINT32_C(0x535F42C2), UINT32_C(0x0DA9586A),
17039             UINT32_C(0x86831C3C), UINT32_C(0xE39A7A58), UINT32_C(0xB7F1EF35),
17040             UINT32_C(0xD459B91A), UINT32_C(0xA2789AE2), UINT32_C(0x02FD429D),
17041             UINT32_C(0xEADBCA7F), UINT32_C(0x65290F57), UINT32_C(0x94F215D4) } },
17042         { { UINT32_C(0x1CFB79AC), UINT32_C(0x37ED2BE5), UINT32_C(0xE7AF84C3),
17043             UINT32_C(0x801946F3), UINT32_C(0xE77C2F00), UINT32_C(0xB061AD8A),
17044             UINT32_C(0x44DE16A8), UINT32_C(0xE87E1A9A), UINT32_C(0x7EE490FF),
17045             UINT32_C(0xDF4F57C8), UINT32_C(0x005993ED), UINT32_C(0x4E793B49) },
17046           { UINT32_C(0xBCCB593F), UINT32_C(0xE1036387), UINT32_C(0x95E09B80),
17047             UINT32_C(0xF1749411), UINT32_C(0x5AB42F91), UINT32_C(0x59CB20D1),
17048             UINT32_C(0xAC0FF033), UINT32_C(0xA738A18D), UINT32_C(0x2AC1E7F4),
17049             UINT32_C(0xDA501A2E), UINT32_C(0x84D8A6E0), UINT32_C(0x1B67EDA0) } },
17050         { { UINT32_C(0x1080E90B), UINT32_C(0x1D27EFCE), UINT32_C(0x3FD01DC6),
17051             UINT32_C(0xA2815246), UINT32_C(0xCAA26D18), UINT32_C(0x99A3FB83),
17052             UINT32_C(0xB82BABBE), UINT32_C(0xD27E6133), UINT32_C(0xD783DD60),
17053             UINT32_C(0x61030DFD), UINT32_C(0x73C78CB8), UINT32_C(0x295A2913) },
17054           { UINT32_C(0x68BE6A92), UINT32_C(0x8707A2CF), UINT32_C(0xEEB3474A),
17055             UINT32_C(0xC9C2FB98), UINT32_C(0xA2B176B8), UINT32_C(0x7C3FD412),
17056             UINT32_C(0xC7202101), UINT32_C(0xD5B52E2F), UINT32_C(0xF0A6D536),
17057             UINT32_C(0x24A63030), UINT32_C(0x04648EC0), UINT32_C(0x05842DE3) } },
17058         { { UINT32_C(0x30577AC9), UINT32_C(0x67477CDC), UINT32_C(0x244F92A8),
17059             UINT32_C(0x51DD9775), UINT32_C(0x917EEC66), UINT32_C(0x31FD60B9),
17060             UINT32_C(0xD66C5C1D), UINT32_C(0xACD95BD4), UINT32_C(0xBF9508BA),
17061             UINT32_C(0x2E0551F3), UINT32_C(0x688CB243), UINT32_C(0x121168E1) },
17062           { UINT32_C(0x4540D230), UINT32_C(0x8C039740), UINT32_C(0x009ECDF9),
17063             UINT32_C(0xC4ED3CF6), UINT32_C(0x44DB62AF), UINT32_C(0x191825E1),
17064             UINT32_C(0xC4A030DA), UINT32_C(0x3EE8ACAB), UINT32_C(0x94081504),
17065             UINT32_C(0x8AB154A8), UINT32_C(0x486C9CD0), UINT32_C(0x1FE09E4B) } },
17066         { { UINT32_C(0xD113450B), UINT32_C(0x512F82F9), UINT32_C(0x2DBC9197),
17067             UINT32_C(0x5878C901), UINT32_C(0xE13F355B), UINT32_C(0xDB87412B),
17068             UINT32_C(0x935B8A5E), UINT32_C(0x0A0A4A9B), UINT32_C(0xF25A5351),
17069             UINT32_C(0x818587BD), UINT32_C(0x31E3D9C7), UINT32_C(0xE8079310) },
17070           { UINT32_C(0x611BC1B1), UINT32_C(0x8B1D47C7), UINT32_C(0x72A823F2),
17071             UINT32_C(0x51722B58), UINT32_C(0x53B36B3E), UINT32_C(0x6F97EE8A),
17072             UINT32_C(0x946DD453), UINT32_C(0x6E085AAC), UINT32_C(0xE65E6533),
17073             UINT32_C(0x2EC5057D), UINT32_C(0x4BB18801), UINT32_C(0xF82D9D71) } },
17074         { { UINT32_C(0x8BA5AA8E), UINT32_C(0xAD81FA93), UINT32_C(0x8F7AA69E),
17075             UINT32_C(0x723E628E), UINT32_C(0xEF35937C), UINT32_C(0x0BA7C2DE),
17076             UINT32_C(0x6DECFB40), UINT32_C(0x83A43EC5), UINT32_C(0xE60C4F2D),
17077             UINT32_C(0xF520F849), UINT32_C(0x457E3B5E), UINT32_C(0x8260E8AE) },
17078           { UINT32_C(0xBF1D9ED7), UINT32_C(0x7CE874F0), UINT32_C(0x7F1A5466),
17079             UINT32_C(0x5FDE3553), UINT32_C(0x0C162DBB), UINT32_C(0x5A63777C),
17080             UINT32_C(0xDAD87289), UINT32_C(0x0FD04F8C), UINT32_C(0x640761D5),
17081             UINT32_C(0xCA2D9E0E), UINT32_C(0x38501ADB), UINT32_C(0x4615CFF8) } },
17082         { { UINT32_C(0x110B4A25), UINT32_C(0x9422789B), UINT32_C(0x70AD8CC1),
17083             UINT32_C(0x5C26779F), UINT32_C(0xEC4F1E14), UINT32_C(0x4EE6A748),
17084             UINT32_C(0x5C7AB5E0), UINT32_C(0xFB584A0D), UINT32_C(0xFB21EE66),
17085             UINT32_C(0xED1DCB0B), UINT32_C(0x11C6863C), UINT32_C(0xDBED1F00) },
17086           { UINT32_C(0xB1B1D187), UINT32_C(0xD2969269), UINT32_C(0xAFE964E6),
17087             UINT32_C(0xF7D0C3F2), UINT32_C(0x12BB865E), UINT32_C(0xE05EE93F),
17088             UINT32_C(0xED79118E), UINT32_C(0x1AFB7BEE), UINT32_C(0x0F0FE453),
17089             UINT32_C(0x220AF138), UINT32_C(0x52782AB9), UINT32_C(0x1463AA1A) } },
17090         { { UINT32_C(0xD7DBE5F9), UINT32_C(0x7C139D56), UINT32_C(0x0B83685B),
17091             UINT32_C(0xFC16E611), UINT32_C(0x9018463C), UINT32_C(0xFA723C02),
17092             UINT32_C(0x840BF5D7), UINT32_C(0xC472458C), UINT32_C(0x0AF07591),
17093             UINT32_C(0x4D809359), UINT32_C(0x3308DFD9), UINT32_C(0x418D8830) },
17094           { UINT32_C(0x0C365AE3), UINT32_C(0x9B381E04), UINT32_C(0xF8190FD1),
17095             UINT32_C(0x3780BF33), UINT32_C(0xDD03E854), UINT32_C(0x45397418),
17096             UINT32_C(0x4E51E491), UINT32_C(0xA95D030F), UINT32_C(0xE3286CEA),
17097             UINT32_C(0x87C8C686), UINT32_C(0x900B5F83), UINT32_C(0x01C773BF) } },
17098         { { UINT32_C(0x78673B02), UINT32_C(0xDABE3475), UINT32_C(0xF6E7395E),
17099             UINT32_C(0x4F0F25CE), UINT32_C(0xD181AD45), UINT32_C(0x3117ABB9),
17100             UINT32_C(0xAA13DE0B), UINT32_C(0x4B559F88), UINT32_C(0xEA7C9745),
17101             UINT32_C(0xFD8EFE78), UINT32_C(0x5DD21682), UINT32_C(0x08060047) },
17102           { UINT32_C(0xD4C86FFC), UINT32_C(0xC0F5DE4B), UINT32_C(0xF21AB6A2),
17103             UINT32_C(0x4BB14B1E), UINT32_C(0xF50C1D12), UINT32_C(0xACB53A6C),
17104             UINT32_C(0x5CC9162E), UINT32_C(0x46AAC450), UINT32_C(0x2DE240B6),
17105             UINT32_C(0x049C51E0), UINT32_C(0xE383C3B0), UINT32_C(0xBB2DC016) } },
17106         { { UINT32_C(0x8E438C92), UINT32_C(0xA3C56AD2), UINT32_C(0xB2CEAF1A),
17107             UINT32_C(0x7C43F98F), UINT32_C(0xE2150778), UINT32_C(0x397C44F7),
17108             UINT32_C(0x71A24131), UINT32_C(0x48D17AB7), UINT32_C(0x1E2ACDA9),
17109             UINT32_C(0xCC513863), UINT32_C(0xF0C9BAC9), UINT32_C(0x2C76A55E) },
17110           { UINT32_C(0x7EA4BB7B), UINT32_C(0x4D74CDCE), UINT32_C(0xB1B3C2BA),
17111             UINT32_C(0x834BD5BF), UINT32_C(0xCCC310A4), UINT32_C(0x46E2911E),
17112             UINT32_C(0x0FC1BF13), UINT32_C(0xD3DE84AA), UINT32_C(0x80A03AD3),
17113             UINT32_C(0x27F2892F), UINT32_C(0x3BD2F08B), UINT32_C(0x85B47620) } },
17114         { { UINT32_C(0x567AF533), UINT32_C(0xAB1CB818), UINT32_C(0xBAC2705A),
17115             UINT32_C(0x273B4537), UINT32_C(0x22C84AB6), UINT32_C(0x133066C4),
17116             UINT32_C(0x4830BFC1), UINT32_C(0xC3590DE6), UINT32_C(0x5E4742D0),
17117             UINT32_C(0xEA297869), UINT32_C(0x4F3164C0), UINT32_C(0xF6D8C694) },
17118           { UINT32_C(0xC1249588), UINT32_C(0x09E85F3D), UINT32_C(0x4EC64DF7),
17119             UINT32_C(0x6C2BB05D), UINT32_C(0x8B78000F), UINT32_C(0xD267115E),
17120             UINT32_C(0xC7E4A316), UINT32_C(0x07C5D7AE), UINT32_C(0x4619E5BD),
17121             UINT32_C(0xCB1187BA), UINT32_C(0xA43F7EEE), UINT32_C(0x57B1D4EF) } },
17122         { { UINT32_C(0xC8176A96), UINT32_C(0x3618891F), UINT32_C(0xE5808B97),
17123             UINT32_C(0x62C4B084), UINT32_C(0x4DD95D6E), UINT32_C(0xDE558546),
17124             UINT32_C(0x730B2EA4), UINT32_C(0x27A8133E), UINT32_C(0x6AF318A0),
17125             UINT32_C(0xE07CEEC3), UINT32_C(0xCE24FD2C), UINT32_C(0x0ACC1286) },
17126           { UINT32_C(0xDD4D307C), UINT32_C(0x8A48FE4A), UINT32_C(0x18CDE0DA),
17127             UINT32_C(0x71A9BA9C), UINT32_C(0xD5D79747), UINT32_C(0x655E2B66),
17128             UINT32_C(0xA79AEDC7), UINT32_C(0x409FE856), UINT32_C(0xD287E5CF),
17129             UINT32_C(0xC5A9F244), UINT32_C(0x4E82EC39), UINT32_C(0xCCE10384) } },
17130         { { UINT32_C(0xF25D364C), UINT32_C(0x00675BA7), UINT32_C(0x68D36BDF),
17131             UINT32_C(0x7A7F1629), UINT32_C(0xA9E23F29), UINT32_C(0x35EC468A),
17132             UINT32_C(0x2D926E6C), UINT32_C(0xF797AC50), UINT32_C(0x4B4F4376),
17133             UINT32_C(0x639BA453), UINT32_C(0x51FF9519), UINT32_C(0xD71B430F) },
17134           { UINT32_C(0x2CF5635C), UINT32_C(0xB8C439EC), UINT32_C(0x81980393),
17135             UINT32_C(0x0CE4C8D1), UINT32_C(0x64123B15), UINT32_C(0x4C5362A9),
17136             UINT32_C(0xFFDCF096), UINT32_C(0x6E0421E0), UINT32_C(0x10D1F914),
17137             UINT32_C(0x624A855F), UINT32_C(0x614DCD29), UINT32_C(0x7D8F3AB7) } },
17138         { { UINT32_C(0xB3493CE0), UINT32_C(0xD9219ADA), UINT32_C(0x52F09AE5),
17139             UINT32_C(0x971B243A), UINT32_C(0xE24E3674), UINT32_C(0xC16C9BF8),
17140             UINT32_C(0xCE68C7CD), UINT32_C(0x026D408D), UINT32_C(0x358209E3),
17141             UINT32_C(0xF9B33DD9), UINT32_C(0xF3B2A206), UINT32_C(0x02D0595D) },
17142           { UINT32_C(0x60D15640), UINT32_C(0xBF994271), UINT32_C(0x15B5466A),
17143             UINT32_C(0x6DA7A04E), UINT32_C(0x1CADB50D), UINT32_C(0x03AA4ED8),
17144             UINT32_C(0x129A4253), UINT32_C(0x1548F029), UINT32_C(0xB842865A),
17145             UINT32_C(0x41741F7E), UINT32_C(0xA3F88C98), UINT32_C(0x859FE0A4) } },
17146         { { UINT32_C(0x05FD7553), UINT32_C(0x80DE085A), UINT32_C(0xB897566B),
17147             UINT32_C(0x4A4AB91E), UINT32_C(0x2F1C173F), UINT32_C(0x33BCD475),
17148             UINT32_C(0xC100C013), UINT32_C(0x4E238896), UINT32_C(0xD614B34B),
17149             UINT32_C(0x1C88500D), UINT32_C(0xC3BA9E23), UINT32_C(0x0401C5F6) },
17150           { UINT32_C(0xD0AF0DE5), UINT32_C(0x8E8003C4), UINT32_C(0x9D0DCBB9),
17151             UINT32_C(0x19B1DFB5), UINT32_C(0xEBEF7AB6), UINT32_C(0x4A3640A9),
17152             UINT32_C(0x959B15F6), UINT32_C(0xEDAFD65B), UINT32_C(0x7FB95821),
17153             UINT32_C(0x8092EF7F), UINT32_C(0xCE2E45D1), UINT32_C(0xAB8DD52E) } },
17154         { { UINT32_C(0xB9CFE6BF), UINT32_C(0xD1F2D6B8), UINT32_C(0x00073F6F),
17155             UINT32_C(0x6358810B), UINT32_C(0xD712106E), UINT32_C(0x5FCE5993),
17156             UINT32_C(0x1C024C91), UINT32_C(0x5EE6B271), UINT32_C(0x453DB663),
17157             UINT32_C(0xD0248FF5), UINT32_C(0xADB835E8), UINT32_C(0xD6D81CB2) },
17158           { UINT32_C(0xFDFCB4C7), UINT32_C(0x8696CFEC), UINT32_C(0x53BC9045),
17159             UINT32_C(0x696B7FCB), UINT32_C(0xDDA56981), UINT32_C(0xAB4D3807),
17160             UINT32_C(0x1E4B943B), UINT32_C(0x2F998052), UINT32_C(0x166B7F18),
17161             UINT32_C(0x8AA76ADB), UINT32_C(0x52A2D7ED), UINT32_C(0x63934301) } },
17162     },
17163     {
17164         { { UINT32_C(0xA368EFF6), UINT32_C(0xBBCCCE39), UINT32_C(0x8CEB5C43),
17165             UINT32_C(0xD8CAABDF), UINT32_C(0xD2252FDA), UINT32_C(0x9EAE35A5),
17166             UINT32_C(0x54E7DD49), UINT32_C(0xA8F4F209), UINT32_C(0x295100FD),
17167             UINT32_C(0xA56D72A6), UINT32_C(0x56767727), UINT32_C(0x20FC1FE8) },
17168           { UINT32_C(0x0BBAA5AB), UINT32_C(0xBF60B248), UINT32_C(0x313911F2),
17169             UINT32_C(0xA4F3CE5A), UINT32_C(0xB93DAB9C), UINT32_C(0xC2A67AD4),
17170             UINT32_C(0x22D71F39), UINT32_C(0x18CD0ED0), UINT32_C(0x5F304DB2),
17171             UINT32_C(0x04380C42), UINT32_C(0x6729C821), UINT32_C(0x26420CBB) } },
17172         { { UINT32_C(0xBDFBCAE8), UINT32_C(0x26BD07D6), UINT32_C(0xDF01A80A),
17173             UINT32_C(0x10B5173F), UINT32_C(0x6798B96C), UINT32_C(0xD831C546),
17174             UINT32_C(0x1D3F3859), UINT32_C(0x1D6B4108), UINT32_C(0x991B9EC7),
17175             UINT32_C(0x501D38EC), UINT32_C(0xD78431A9), UINT32_C(0x26319283) },
17176           { UINT32_C(0x118B343C), UINT32_C(0x8B85BAF7), UINT32_C(0x58DEF7D0),
17177             UINT32_C(0x4696CDDD), UINT32_C(0x7ACDCF58), UINT32_C(0xEFC7C110),
17178             UINT32_C(0x848D5842), UINT32_C(0xD9AF415C), UINT32_C(0x0AC7FDAC),
17179             UINT32_C(0x6B5A06BC), UINT32_C(0xA344319B), UINT32_C(0x7D623E0D) } },
17180         { { UINT32_C(0x0C9D3547), UINT32_C(0x4C0D7806), UINT32_C(0xCF2AED47),
17181             UINT32_C(0x993F048D), UINT32_C(0xE4B57E22), UINT32_C(0x5217C453),
17182             UINT32_C(0xF4172B28), UINT32_C(0xB4669E35), UINT32_C(0x49F999F8),
17183             UINT32_C(0x509A3CD0), UINT32_C(0x87C69D41), UINT32_C(0xD19F8632) },
17184           { UINT32_C(0x4C8FDED0), UINT32_C(0xE14D01E8), UINT32_C(0xEAFD9E1C),
17185             UINT32_C(0x342880FD), UINT32_C(0x70DC2BF0), UINT32_C(0x0E17BFF2),
17186             UINT32_C(0xC0186400), UINT32_C(0x46560B7B), UINT32_C(0x49A4DD34),
17187             UINT32_C(0xE28C7B9C), UINT32_C(0x0F325D06), UINT32_C(0x18211916) } },
17188         { { UINT32_C(0xD7E02E18), UINT32_C(0x46D70888), UINT32_C(0xD9F11FD9),
17189             UINT32_C(0x7C806954), UINT32_C(0x4FBEA271), UINT32_C(0xE4948FCA),
17190             UINT32_C(0xBD80A9DF), UINT32_C(0x7D6C7765), UINT32_C(0xF3871C71),
17191             UINT32_C(0x1B470EA6), UINT32_C(0x8330A570), UINT32_C(0xD62DE244) },
17192           { UINT32_C(0xC659C3A7), UINT32_C(0xDAECDDC1), UINT32_C(0x077F7AFC),
17193             UINT32_C(0x8621E513), UINT32_C(0xCAEEEF13), UINT32_C(0x56C7CD84),
17194             UINT32_C(0xC685A356), UINT32_C(0xC60C910F), UINT32_C(0x9DD93DDC),
17195             UINT32_C(0xE68BC5C5), UINT32_C(0xFEB64895), UINT32_C(0xD904E89F) } },
17196         { { UINT32_C(0x8BA7917A), UINT32_C(0x75D874FB), UINT32_C(0xFD043BD4),
17197             UINT32_C(0x18FA7F53), UINT32_C(0x1FC3979E), UINT32_C(0x212A0AD7),
17198             UINT32_C(0x5D6EAC0E), UINT32_C(0x5703A7D9), UINT32_C(0x017DEAD5),
17199             UINT32_C(0x222F7188), UINT32_C(0x0F6C1817), UINT32_C(0x1EC687B7) },
17200           { UINT32_C(0x238BACB6), UINT32_C(0x23412FC3), UINT32_C(0x54CED154),
17201             UINT32_C(0xB85D70E9), UINT32_C(0xBDA674D0), UINT32_C(0xD4E06722),
17202             UINT32_C(0x36F5A0C2), UINT32_C(0x3EA5F178), UINT32_C(0xF5C6D2CA),
17203             UINT32_C(0x7E7D79CF), UINT32_C(0x3DBB3C73), UINT32_C(0x1FFF9464) } },
17204         { { UINT32_C(0xF163E4A8), UINT32_C(0x916E19D0), UINT32_C(0x1489DF17),
17205             UINT32_C(0x1E6740E7), UINT32_C(0x339F3A47), UINT32_C(0x1EAF9723),
17206             UINT32_C(0x124B8DAD), UINT32_C(0x22F0ED1A), UINT32_C(0x49C3DD04),
17207             UINT32_C(0x39C9166C), UINT32_C(0xCE1E9ACC), UINT32_C(0x628E7FD4) },
17208           { UINT32_C(0x40031676), UINT32_C(0x124DDF27), UINT32_C(0x1EDDB9BE),
17209             UINT32_C(0x00256939), UINT32_C(0xD360B0DA), UINT32_C(0xD39E25E7),
17210             UINT32_C(0x4AA6C4C9), UINT32_C(0x6E3015A8), UINT32_C(0x623EDA09),
17211             UINT32_C(0xC6A2F643), UINT32_C(0x50AA99FB), UINT32_C(0xBEFF2D12) } },
17212         { { UINT32_C(0x93EE8089), UINT32_C(0x1FEEF7CE), UINT32_C(0x252DD7BD),
17213             UINT32_C(0xC6B180BC), UINT32_C(0x1788F051), UINT32_C(0xA16FB20B),
17214             UINT32_C(0xE046ED39), UINT32_C(0xD86FD392), UINT32_C(0x9378CE1D),
17215             UINT32_C(0xDA0A3611), UINT32_C(0xA5F7A61D), UINT32_C(0x121EF3E7) },
17216           { UINT32_C(0x92D13CAE), UINT32_C(0x94D22061), UINT32_C(0x77C72E08),
17217             UINT32_C(0x5076046A), UINT32_C(0x7D2308B9), UINT32_C(0xF18BC233),
17218             UINT32_C(0x17F977B1), UINT32_C(0x004DB3C5), UINT32_C(0x0471C11D),
17219             UINT32_C(0xD05AE399), UINT32_C(0x85CD1726), UINT32_C(0x86A2A557) } },
17220         { { UINT32_C(0x72107804), UINT32_C(0xB8D9B286), UINT32_C(0x3303B79B),
17221             UINT32_C(0xB5A7C413), UINT32_C(0x5FA37DED), UINT32_C(0x927EEF78),
17222             UINT32_C(0xAD67DABA), UINT32_C(0xA1C5CF1E), UINT32_C(0x7360E7C7),
17223             UINT32_C(0xAA5E3FB2), UINT32_C(0x0A0C0993), UINT32_C(0x8354E61A) },
17224           { UINT32_C(0x7F5458CC), UINT32_C(0x2EC73AF9), UINT32_C(0x48474325),
17225             UINT32_C(0xDE4CB488), UINT32_C(0x7209BC69), UINT32_C(0x2DD134C7),
17226             UINT32_C(0x451A2ABE), UINT32_C(0xB70C5567), UINT32_C(0x8E293018),
17227             UINT32_C(0x2CD1B200), UINT32_C(0xD33C0D72), UINT32_C(0x15F8DA7A) } },
17228         { { UINT32_C(0xA8790657), UINT32_C(0x5DC386D0), UINT32_C(0xBC4D88BB),
17229             UINT32_C(0xA4FDF676), UINT32_C(0x48BC6C49), UINT32_C(0x1B21F38F),
17230             UINT32_C(0x543A7003), UINT32_C(0xCDCC7FAA), UINT32_C(0x8C9CF72C),
17231             UINT32_C(0xEA97E7AA), UINT32_C(0x50D938A8), UINT32_C(0xA6B883F4) },
17232           { UINT32_C(0xA3A10F27), UINT32_C(0x51936F3A), UINT32_C(0xDECC76BF),
17233             UINT32_C(0x0170785F), UINT32_C(0x908C578A), UINT32_C(0x7539ECE1),
17234             UINT32_C(0x0F3E8C25), UINT32_C(0x5D9C8A8E), UINT32_C(0x9E4717A7),
17235             UINT32_C(0x8681B43B), UINT32_C(0xA9D83E39), UINT32_C(0x94F42507) } },
17236         { { UINT32_C(0xA55ADDE7), UINT32_C(0xBBE11CA8), UINT32_C(0x3BC0896B),
17237             UINT32_C(0x39E6F5CF), UINT32_C(0x1D2D8D94), UINT32_C(0x1447314E),
17238             UINT32_C(0x5B012F8A), UINT32_C(0x45B48125), UINT32_C(0x08AD5283),
17239             UINT32_C(0x41AD23FA), UINT32_C(0x41D13774), UINT32_C(0x837243E2) },
17240           { UINT32_C(0xBADCAA46), UINT32_C(0x1FC0BD9D), UINT32_C(0x26E84CAE),
17241             UINT32_C(0x8DF164ED), UINT32_C(0x41017176), UINT32_C(0x8FF70EC0),
17242             UINT32_C(0x5C848BA7), UINT32_C(0x23AD4BCE), UINT32_C(0x97A19CBB),
17243             UINT32_C(0x89246FDE), UINT32_C(0x78397991), UINT32_C(0xA5EF987B) } },
17244         { { UINT32_C(0x4757964D), UINT32_C(0x111AF1B7), UINT32_C(0xDDBBF258),
17245             UINT32_C(0x1D25D351), UINT32_C(0x7D2B06D6), UINT32_C(0x4161E776),
17246             UINT32_C(0x1CAC0C5B), UINT32_C(0x6EFD2691), UINT32_C(0x211BFAEB),
17247             UINT32_C(0x633B95DB), UINT32_C(0xE2BDF701), UINT32_C(0x9BEDFA5A) },
17248           { UINT32_C(0x73E099C8), UINT32_C(0xADAC2B0B), UINT32_C(0xBFB16BFF),
17249             UINT32_C(0x436F0023), UINT32_C(0x30F55854), UINT32_C(0xB91B1002),
17250             UINT32_C(0xF4C6C8B7), UINT32_C(0xAF6A2097), UINT32_C(0x3AD7B3D9),
17251             UINT32_C(0x3FF65CED), UINT32_C(0x330E56DF), UINT32_C(0x6FA2626F) } },
17252         { { UINT32_C(0xFFCCFD07), UINT32_C(0x3D28BF2D), UINT32_C(0xD989603B),
17253             UINT32_C(0x0514F6FF), UINT32_C(0x5514787A), UINT32_C(0xB9519629),
17254             UINT32_C(0xC3DB4E9C), UINT32_C(0xA1848121), UINT32_C(0x2A3D4595),
17255             UINT32_C(0x47FE2E39), UINT32_C(0x11B73ED4), UINT32_C(0x506F5D82) },
17256           { UINT32_C(0xA600D8BB), UINT32_C(0xA2257AE7), UINT32_C(0x0F9F122C),
17257             UINT32_C(0xD659DBD1), UINT32_C(0x64DF160F), UINT32_C(0xDB0FDC67),
17258             UINT32_C(0x7CB19690), UINT32_C(0xFF379339), UINT32_C(0x98E72EC1),
17259             UINT32_C(0xDF4366B8), UINT32_C(0xDF437EB8), UINT32_C(0x97E72BEC) } },
17260         { { UINT32_C(0x1C81E5D9), UINT32_C(0x81DCEA27), UINT32_C(0x6717FC49),
17261             UINT32_C(0x7E1B6CDA), UINT32_C(0x11EAE80D), UINT32_C(0xAA36B3B5),
17262             UINT32_C(0x3CD7CBB3), UINT32_C(0x1306687C), UINT32_C(0xC4E89064),
17263             UINT32_C(0xED670235), UINT32_C(0x58A94760), UINT32_C(0x9D3B0009) },
17264           { UINT32_C(0xE6A6333C), UINT32_C(0x5A64E158), UINT32_C(0x49453203),
17265             UINT32_C(0x1A8B4A36), UINT32_C(0x1F77CC21), UINT32_C(0xF1CAD724),
17266             UINT32_C(0x70518EF7), UINT32_C(0x693EBB4B), UINT32_C(0x0F39C91A),
17267             UINT32_C(0xFB47BD81), UINT32_C(0xFA4BC64B), UINT32_C(0xCFE63DA2) } },
17268         { { UINT32_C(0xEAA66108), UINT32_C(0x82C1C684), UINT32_C(0x4CFE79FC),
17269             UINT32_C(0xE3226218), UINT32_C(0x849C720E), UINT32_C(0x3F28B72B),
17270             UINT32_C(0x8FEE1CA8), UINT32_C(0x137FB355), UINT32_C(0xE4F90C4E),
17271             UINT32_C(0x4D18A9CD), UINT32_C(0xCC3E46FA), UINT32_C(0xC0344227) },
17272           { UINT32_C(0x79CDA392), UINT32_C(0x4FD5C08E), UINT32_C(0x8ADC87B5),
17273             UINT32_C(0x65DB20DB), UINT32_C(0x916C1B84), UINT32_C(0x86F95D5B),
17274             UINT32_C(0x17BB2B7C), UINT32_C(0x7EDA3871), UINT32_C(0x669A533B),
17275             UINT32_C(0x18CCF7E7), UINT32_C(0xECAD0E06), UINT32_C(0x5E92421C) } },
17276         { { UINT32_C(0x4174B08B), UINT32_C(0x26063E12), UINT32_C(0x70DE8E4D),
17277             UINT32_C(0xE621D9BE), UINT32_C(0x5ECDF350), UINT32_C(0xAEA0FD0F),
17278             UINT32_C(0x9C20E5C9), UINT32_C(0x0D9F69E4), UINT32_C(0x0BBE2918),
17279             UINT32_C(0xD3DADEB9), UINT32_C(0x58AA2F71), UINT32_C(0xD7B9B5DB) },
17280           { UINT32_C(0x3364CAF8), UINT32_C(0x7A971DD7), UINT32_C(0xC25D4BE4),
17281             UINT32_C(0x702616A3), UINT32_C(0xA9E30071), UINT32_C(0xA30F0FA1),
17282             UINT32_C(0x5573BC69), UINT32_C(0x98AB2438), UINT32_C(0x6FEC2E22),
17283             UINT32_C(0xCBC63CDF), UINT32_C(0xCC901B9B), UINT32_C(0x965F90ED) } },
17284         { { UINT32_C(0x71E15BB3), UINT32_C(0xD53B592D), UINT32_C(0x8820E0D0),
17285             UINT32_C(0x1F03C0E9), UINT32_C(0x3CCCB726), UINT32_C(0xCE93947D),
17286             UINT32_C(0x1D547590), UINT32_C(0x2790FEE0), UINT32_C(0xC59CDD7A),
17287             UINT32_C(0x4401D847), UINT32_C(0xA926DD9D), UINT32_C(0x72D69120) },
17288           { UINT32_C(0x4229F289), UINT32_C(0x38B8F21D), UINT32_C(0x7FE978AF),
17289             UINT32_C(0x9F412E40), UINT32_C(0xCDB59AF1), UINT32_C(0xAE07901B),
17290             UINT32_C(0xD1D4715E), UINT32_C(0x1E6BE5EB), UINT32_C(0x18C96BEF),
17291             UINT32_C(0x3715BD8B), UINT32_C(0xE11B3798), UINT32_C(0x4B71F6E6) } },
17292     },
17293     {
17294         { { UINT32_C(0xF0CE2DF4), UINT32_C(0x11A8FDE5), UINT32_C(0xFA8D26DF),
17295             UINT32_C(0xBC70CA3E), UINT32_C(0xC74DFE82), UINT32_C(0x6818C275),
17296             UINT32_C(0x38373A50), UINT32_C(0x2B0294AC), UINT32_C(0xE8E5F88F),
17297             UINT32_C(0x584C4061), UINT32_C(0x7342383A), UINT32_C(0x1C05C1CA) },
17298           { UINT32_C(0x911430EC), UINT32_C(0x263895B3), UINT32_C(0xA5171453),
17299             UINT32_C(0xEF9B0032), UINT32_C(0x84DA7F0C), UINT32_C(0x144359DA),
17300             UINT32_C(0x924A09F2), UINT32_C(0x76E3095A), UINT32_C(0xD69AD835),
17301             UINT32_C(0x612986E3), UINT32_C(0x392122AF), UINT32_C(0x70E03ADA) } },
17302         { { UINT32_C(0x67AAD17B), UINT32_C(0xFEB707EE), UINT32_C(0x83042995),
17303             UINT32_C(0xBB21B287), UINT32_C(0x9A0D32BA), UINT32_C(0x26DE1645),
17304             UINT32_C(0x1FFB9266), UINT32_C(0x9A2FF38A), UINT32_C(0x8F578B4A),
17305             UINT32_C(0x4E5AD96D), UINT32_C(0x883E7443), UINT32_C(0x26CC0655) },
17306           { UINT32_C(0x2EE9367A), UINT32_C(0x1D8EECAB), UINT32_C(0x881DE2F8),
17307             UINT32_C(0x42B84337), UINT32_C(0xD758AE41), UINT32_C(0xE49B2FAE),
17308             UINT32_C(0x4A85D867), UINT32_C(0x6A9A2290), UINT32_C(0xE68CBA86),
17309             UINT32_C(0x2FB89DCE), UINT32_C(0x7F09A982), UINT32_C(0xBC252635) } },
17310         { { UINT32_C(0x8C61AAAC), UINT32_C(0xADC79436), UINT32_C(0x5E926563),
17311             UINT32_C(0x24C7FD13), UINT32_C(0x0406C129), UINT32_C(0xEF9FAAA4),
17312             UINT32_C(0x8B658D3C), UINT32_C(0xF4E6388C), UINT32_C(0x1E435BAF),
17313             UINT32_C(0x7262BEB4), UINT32_C(0xFDAEAC99), UINT32_C(0x3BF622CC) },
17314           { UINT32_C(0x4E1AEDDC), UINT32_C(0xD359F7D8), UINT32_C(0xD78C17B7),
17315             UINT32_C(0x05DC4F8C), UINT32_C(0x29498BA5), UINT32_C(0xB18CF032),
17316             UINT32_C(0x85BF35AD), UINT32_C(0xC67388CA), UINT32_C(0x62AA4BC8),
17317             UINT32_C(0x8A7A6AA2), UINT32_C(0x72F4627A), UINT32_C(0x0B8F458E) } },
17318         { { UINT32_C(0xC68E4488), UINT32_C(0x3FB812EE), UINT32_C(0x60EF7281),
17319             UINT32_C(0x53C5EAA4), UINT32_C(0x8FBEFBE4), UINT32_C(0xE5724183),
17320             UINT32_C(0xA4B24A05), UINT32_C(0x2B7D49F4), UINT32_C(0x710C0A43),
17321             UINT32_C(0x23B138D0), UINT32_C(0xA85EC1DB), UINT32_C(0x16A5B4C1) },
17322           { UINT32_C(0x305FEB02), UINT32_C(0x7CC1F3D7), UINT32_C(0x5B6C1B54),
17323             UINT32_C(0x52F7947D), UINT32_C(0x8F56981C), UINT32_C(0x1BDA2312),
17324             UINT32_C(0xB4080A01), UINT32_C(0x68663EAE), UINT32_C(0x9F999B7F),
17325             UINT32_C(0x8DD7BA7E), UINT32_C(0xB686580C), UINT32_C(0xD8768D19) } },
17326         { { UINT32_C(0x7AFDDA94), UINT32_C(0xBCD0E0AD), UINT32_C(0x34A30687),
17327             UINT32_C(0x95A0DBBE), UINT32_C(0x8C5E2665), UINT32_C(0xBBE3C3DF),
17328             UINT32_C(0xEBF2BC16), UINT32_C(0x742BECD8), UINT32_C(0x3FA163A6),
17329             UINT32_C(0x300CEB48), UINT32_C(0x4663354B), UINT32_C(0x0C5D02EE) },
17330           { UINT32_C(0xB5E606A4), UINT32_C(0xE4FB9AD6), UINT32_C(0xCF49FF95),
17331             UINT32_C(0x93F507B8), UINT32_C(0x585C193B), UINT32_C(0x9406A90C),
17332             UINT32_C(0x4ECF9517), UINT32_C(0xAD1440C1), UINT32_C(0x9CEA53F1),
17333             UINT32_C(0x184CB475), UINT32_C(0x8EF11302), UINT32_C(0x6855C474) } },
17334         { { UINT32_C(0xEDCAFA52), UINT32_C(0x00ECB523), UINT32_C(0x086F69D3),
17335             UINT32_C(0x0DA0AE0E), UINT32_C(0xC242F347), UINT32_C(0xC384DE15),
17336             UINT32_C(0x848C12B7), UINT32_C(0xFB050E6E), UINT32_C(0x64E015CE),
17337             UINT32_C(0x22F67654), UINT32_C(0x7CA122F2), UINT32_C(0xCBDC2A48) },
17338           { UINT32_C(0x445FB02C), UINT32_C(0xA940D973), UINT32_C(0x3767D89D),
17339             UINT32_C(0x00F31E78), UINT32_C(0x613DABDD), UINT32_C(0x2B65A237),
17340             UINT32_C(0xC875AE09), UINT32_C(0x2BE0AB05), UINT32_C(0xBA204F8E),
17341             UINT32_C(0xB22E54FD), UINT32_C(0x0F7687B9), UINT32_C(0x65E2029D) } },
17342         { { UINT32_C(0x1855A71C), UINT32_C(0xFFD82538), UINT32_C(0x438BD8D8),
17343             UINT32_C(0x26A330B3), UINT32_C(0xF9D8C5F9), UINT32_C(0x89628311),
17344             UINT32_C(0x953738A0), UINT32_C(0x8D5FB9CF), UINT32_C(0xEDFCD4E5),
17345             UINT32_C(0xCB7159C9), UINT32_C(0x2064C7C2), UINT32_C(0xD64E5230) },
17346           { UINT32_C(0x689F3CFE), UINT32_C(0xF858ED80), UINT32_C(0x56128B67),
17347             UINT32_C(0x4830E309), UINT32_C(0xE0E90688), UINT32_C(0x2E1692DA),
17348             UINT32_C(0xCA9CC232), UINT32_C(0xAB818913), UINT32_C(0xA5D229A6),
17349             UINT32_C(0xE2E30C23), UINT32_C(0x0E740E23), UINT32_C(0xA544E8B1) } },
17350         { { UINT32_C(0xDC61E6CC), UINT32_C(0x1C15E569), UINT32_C(0x58FC7800),
17351             UINT32_C(0x8FD72967), UINT32_C(0x37A9DFC5), UINT32_C(0xE61E7DB7),
17352             UINT32_C(0x5AFD7822), UINT32_C(0x3F34A9C6), UINT32_C(0x19E80773),
17353             UINT32_C(0x0A112742), UINT32_C(0x4760FC58), UINT32_C(0xA353460C) },
17354           { UINT32_C(0xB3124C71), UINT32_C(0x2FB7DEEB), UINT32_C(0x2D4009CC),
17355             UINT32_C(0x48463627), UINT32_C(0xC3A10370), UINT32_C(0x399D1933),
17356             UINT32_C(0x54388DBD), UINT32_C(0x7EB19450), UINT32_C(0x7C2A006A),
17357             UINT32_C(0x8ECCE639), UINT32_C(0x55C932A0), UINT32_C(0x3D565DAF) } },
17358         { { UINT32_C(0xD9ADAE53), UINT32_C(0xCEF57A9F), UINT32_C(0xF83FD8CD),
17359             UINT32_C(0xE2EB27D7), UINT32_C(0x9BBD2DDE), UINT32_C(0x4AC8F719),
17360             UINT32_C(0xE91ABFB7), UINT32_C(0x604283AA), UINT32_C(0x34799F87),
17361             UINT32_C(0xB6A4E115), UINT32_C(0xE4C2A8F3), UINT32_C(0x2B253224) },
17362           { UINT32_C(0xC8782294), UINT32_C(0xC34F8B92), UINT32_C(0xFCC2CB6B),
17363             UINT32_C(0xC74D697D), UINT32_C(0xC2C84C46), UINT32_C(0xD990411B),
17364             UINT32_C(0x31EA4955), UINT32_C(0x2807B5C6), UINT32_C(0xB9EB27F5),
17365             UINT32_C(0x14AE2B93), UINT32_C(0x6163EDFA), UINT32_C(0xF0AE96A7) } },
17366         { { UINT32_C(0x42DB7180), UINT32_C(0xA7BDCBB4), UINT32_C(0xEDCA752F),
17367             UINT32_C(0xC9FAA41F), UINT32_C(0xE820F401), UINT32_C(0x147F91B4),
17368             UINT32_C(0xF5F2645F), UINT32_C(0x1E6CEF86), UINT32_C(0x31FE711D),
17369             UINT32_C(0xB4AB4D7F), UINT32_C(0x743EF882), UINT32_C(0xCE68FB3C) },
17370           { UINT32_C(0x3EF2FCFF), UINT32_C(0xB9D7D682), UINT32_C(0x020DCAFD),
17371             UINT32_C(0xF6893811), UINT32_C(0xBF81E760), UINT32_C(0x30D9A50C),
17372             UINT32_C(0xB9B87228), UINT32_C(0x7F247D06), UINT32_C(0x5F40CFC0),
17373             UINT32_C(0x143D4FEC), UINT32_C(0x329B2A88), UINT32_C(0x21D78D73) } },
17374         { { UINT32_C(0xED3F2055), UINT32_C(0x06B3FF8A), UINT32_C(0x522BE214),
17375             UINT32_C(0x50482C77), UINT32_C(0xDDF54620), UINT32_C(0x8DF69CD8),
17376             UINT32_C(0xF78A1165), UINT32_C(0x6D1DB204), UINT32_C(0x9AFE6BF2),
17377             UINT32_C(0x459AE4A2), UINT32_C(0x24AC871E), UINT32_C(0xC23A9FFD) },
17378           { UINT32_C(0x89E85D81), UINT32_C(0xB7FD22E3), UINT32_C(0x122E9978),
17379             UINT32_C(0x297F1F6B), UINT32_C(0x144BE1CE), UINT32_C(0xAB283D66),
17380             UINT32_C(0xC00C614E), UINT32_C(0xC1F90AC2), UINT32_C(0x3224CD09),
17381             UINT32_C(0x5465576E), UINT32_C(0x441B6059), UINT32_C(0x8E8D910D) } },
17382         { { UINT32_C(0xAAA228BC), UINT32_C(0xF73A060A), UINT32_C(0x56EFF87D),
17383             UINT32_C(0xCF1B0783), UINT32_C(0xA54C9133), UINT32_C(0x11EF17C0),
17384             UINT32_C(0x76A4DAA5), UINT32_C(0x9E476B15), UINT32_C(0x8018FB92),
17385             UINT32_C(0x5624FEAC), UINT32_C(0xCFEEC1B9), UINT32_C(0x9826A0FC) },
17386           { UINT32_C(0x2DFE2046), UINT32_C(0xB732F7FE), UINT32_C(0x3B40DA6A),
17387             UINT32_C(0x9260BD9F), UINT32_C(0x4F231773), UINT32_C(0xCC9F908F),
17388             UINT32_C(0xDAFC0D55), UINT32_C(0x4827FEB9), UINT32_C(0x538ACE95),
17389             UINT32_C(0x07D32E85), UINT32_C(0xB8EDAF37), UINT32_C(0xAD9F897C) } },
17390         { { UINT32_C(0xE3415498), UINT32_C(0x2F75B82F), UINT32_C(0xF1015F30),
17391             UINT32_C(0xF99CAC5F), UINT32_C(0x7D7F25DE), UINT32_C(0x76640824),
17392             UINT32_C(0xEE74C047), UINT32_C(0x714BC9CD), UINT32_C(0x07448879),
17393             UINT32_C(0x70F847BF), UINT32_C(0x072165C0), UINT32_C(0xA14481DE) },
17394           { UINT32_C(0xDB1140A8), UINT32_C(0x9BFA59E3), UINT32_C(0xFCD13502),
17395             UINT32_C(0x7B9C7FF0), UINT32_C(0x68459ABF), UINT32_C(0xF4D7538E),
17396             UINT32_C(0xC8FC6AD2), UINT32_C(0xED93A791), UINT32_C(0xB51BD9B2),
17397             UINT32_C(0xA8BBE2A8), UINT32_C(0x9FB34008), UINT32_C(0x084B5A27) } },
17398         { { UINT32_C(0xEB138C84), UINT32_C(0xB3BB9545), UINT32_C(0x3FC88BFD),
17399             UINT32_C(0x59C3489C), UINT32_C(0x85F53EC7), UINT32_C(0x3A97FF63),
17400             UINT32_C(0x0AA69C3D), UINT32_C(0x40FDF5A6), UINT32_C(0x53D19668),
17401             UINT32_C(0x0E8CCEC7), UINT32_C(0x33FAA661), UINT32_C(0x0AA72EF9) },
17402           { UINT32_C(0x9B1E684B), UINT32_C(0xF5C5A6CF), UINT32_C(0x31A22EA1),
17403             UINT32_C(0x630F9371), UINT32_C(0xAC60F7EA), UINT32_C(0x06B2AAC2),
17404             UINT32_C(0x5BC37D80), UINT32_C(0xB181CAE2), UINT32_C(0x247B13EA),
17405             UINT32_C(0x4601A929), UINT32_C(0x5F739797), UINT32_C(0x8A71C386) } },
17406         { { UINT32_C(0xAB134786), UINT32_C(0x545387B3), UINT32_C(0x1599B64A),
17407             UINT32_C(0x3179BB06), UINT32_C(0x07593574), UINT32_C(0xB0A61986),
17408             UINT32_C(0x63FA7C3B), UINT32_C(0xC7E39B21), UINT32_C(0x91585D13),
17409             UINT32_C(0xA1173F86), UINT32_C(0xCB9525CD), UINT32_C(0x09D5CC8E) },
17410           { UINT32_C(0x8F3A3451), UINT32_C(0xAAD44FFD), UINT32_C(0x25820CC5),
17411             UINT32_C(0x702B04F2), UINT32_C(0x1CB66C17), UINT32_C(0xE90CAC49),
17412             UINT32_C(0xEE161DC4), UINT32_C(0x40F6B547), UINT32_C(0x1BA4AC4E),
17413             UINT32_C(0xC08BB8B4), UINT32_C(0xAE5A6BC1), UINT32_C(0x7DC064FB) } },
17414         { { UINT32_C(0x9D76DDC7), UINT32_C(0x90A5E871), UINT32_C(0xEDFC8E2E),
17415             UINT32_C(0x39DC8FAE), UINT32_C(0x5B079C62), UINT32_C(0x98467A23),
17416             UINT32_C(0x05450C98), UINT32_C(0xE25E3785), UINT32_C(0x96140083),
17417             UINT32_C(0x2FE23A4D), UINT32_C(0xE9900312), UINT32_C(0x65CE3B9A) },
17418           { UINT32_C(0x6B72B5D9), UINT32_C(0x1D87D088), UINT32_C(0xFD9AFC82),
17419             UINT32_C(0x72F53220), UINT32_C(0x9E1F71FA), UINT32_C(0xC63C7C15),
17420             UINT32_C(0x8D449637), UINT32_C(0x90DF26EA), UINT32_C(0xC1C2B215),
17421             UINT32_C(0x97089F40), UINT32_C(0x42317FAA), UINT32_C(0x83AF2664) } },
17422     },
17423     {
17424         { { UINT32_C(0x8D688E31), UINT32_C(0xFA2DB51A), UINT32_C(0xA09C88D4),
17425             UINT32_C(0x225B696C), UINT32_C(0x6059171F), UINT32_C(0x9F88AF1D),
17426             UINT32_C(0x782A0993), UINT32_C(0x1C5FEA5E), UINT32_C(0x4EC710D3),
17427             UINT32_C(0xE0FB1588), UINT32_C(0xD32CE365), UINT32_C(0xFAF372E5) },
17428           { UINT32_C(0x26506F45), UINT32_C(0xD9F896AB), UINT32_C(0x8373C724),
17429             UINT32_C(0x8D350338), UINT32_C(0xCA6E7342), UINT32_C(0x1B76992D),
17430             UINT32_C(0x6FD0C08B), UINT32_C(0x76338FCA), UINT32_C(0xA00F5C23),
17431             UINT32_C(0xC3EA4C65), UINT32_C(0xB316B35B), UINT32_C(0xDFAB29B3) } },
17432         { { UINT32_C(0x483AEBF9), UINT32_C(0x84E5541F), UINT32_C(0x49165772),
17433             UINT32_C(0x8ADFF7DC), UINT32_C(0x9BEAAD3C), UINT32_C(0xE0A43AD6),
17434             UINT32_C(0xF51C2714), UINT32_C(0x97DD1820), UINT32_C(0x57EA5B0C),
17435             UINT32_C(0xAC2B4CB4), UINT32_C(0xD11767CA), UINT32_C(0x87DBD011) },
17436           { UINT32_C(0xBFC7957A), UINT32_C(0x18CCF36C), UINT32_C(0x1BC79227),
17437             UINT32_C(0xD4A08841), UINT32_C(0xD8D292A8), UINT32_C(0x9811CE43),
17438             UINT32_C(0xD58C4EE7), UINT32_C(0x72C5FC68), UINT32_C(0xD35C65A7),
17439             UINT32_C(0x5BC0F0BE), UINT32_C(0xCBBF9669), UINT32_C(0x0B446DBC) } },
17440         { { UINT32_C(0x9CEE9BCE), UINT32_C(0x7EBA3DA6), UINT32_C(0xD5377750),
17441             UINT32_C(0x3E2C1248), UINT32_C(0x2B93D8B2), UINT32_C(0x8C917D98),
17442             UINT32_C(0x7CAD1F75), UINT32_C(0xCA8FC6AC), UINT32_C(0xA0FF150A),
17443             UINT32_C(0x5F581F19), UINT32_C(0xE08327FA), UINT32_C(0x872CC14A) },
17444           { UINT32_C(0xE9333188), UINT32_C(0xC774F187), UINT32_C(0x497AF7E8),
17445             UINT32_C(0x528ED4AC), UINT32_C(0x8AD72B10), UINT32_C(0xCE036E9B),
17446             UINT32_C(0x917986CF), UINT32_C(0x463F9EBB), UINT32_C(0x1325CF9B),
17447             UINT32_C(0xBE516328), UINT32_C(0xDD7E5FEA), UINT32_C(0xD28D5C50) } },
17448         { { UINT32_C(0xDD58BBE3), UINT32_C(0x714C1D1B), UINT32_C(0x039AFD0F),
17449             UINT32_C(0x85BA01AE), UINT32_C(0x6951AC80), UINT32_C(0x7F23EA3A),
17450             UINT32_C(0xAC00C837), UINT32_C(0x5C599290), UINT32_C(0xBF24CC1B),
17451             UINT32_C(0xF6EFA2B3), UINT32_C(0x1E84462B), UINT32_C(0x393D8E42) },
17452           { UINT32_C(0xF8B89453), UINT32_C(0x9BDA627D), UINT32_C(0xB23E0D1B),
17453             UINT32_C(0xE66FFF2E), UINT32_C(0xC3B94EC2), UINT32_C(0xD1EE7089),
17454             UINT32_C(0x3031699A), UINT32_C(0xF75DBA6E), UINT32_C(0x242B2453),
17455             UINT32_C(0x8FF75F79), UINT32_C(0x289BFED4), UINT32_C(0xE721EDEB) } },
17456         { { UINT32_C(0xC1390FA8), UINT32_C(0x083215A1), UINT32_C(0x6DCE8CE0),
17457             UINT32_C(0x901D686A), UINT32_C(0x837073FF), UINT32_C(0x4AB1BA62),
17458             UINT32_C(0x34BEABA5), UINT32_C(0x10C287AA), UINT32_C(0x46985239),
17459             UINT32_C(0xB4931AF4), UINT32_C(0xB053C4DC), UINT32_C(0x07639899) },
17460           { UINT32_C(0xE721EECD), UINT32_C(0x29E7F44D), UINT32_C(0x57B3FF48),
17461             UINT32_C(0x65817182), UINT32_C(0x5054E2E0), UINT32_C(0x198542E2),
17462             UINT32_C(0x84616DE8), UINT32_C(0x923C9E15), UINT32_C(0xAD465BB9),
17463             UINT32_C(0x2A9C15E1), UINT32_C(0x16319245), UINT32_C(0xD8D4EFC7) } },
17464         { { UINT32_C(0x9961A674), UINT32_C(0x72DC7943), UINT32_C(0xA0E13668),
17465             UINT32_C(0x839A0A52), UINT32_C(0x334945EA), UINT32_C(0xD7A53FA9),
17466             UINT32_C(0xE7AA25DB), UINT32_C(0xDB21DB77), UINT32_C(0x66E96DA3),
17467             UINT32_C(0xB6675A7D), UINT32_C(0xE66F33C0), UINT32_C(0x2C31C406) },
17468           { UINT32_C(0x6EC7B9CB), UINT32_C(0x45020B62), UINT32_C(0x0391F267),
17469             UINT32_C(0xFF46E9CD), UINT32_C(0x0FA2F221), UINT32_C(0x7DABD744),
17470             UINT32_C(0x9D4A2A3E), UINT32_C(0x9A32364B), UINT32_C(0x52D2E47A),
17471             UINT32_C(0xF0F84AE8), UINT32_C(0x888F488A), UINT32_C(0xD0B872BB) } },
17472         { { UINT32_C(0xC9790EEF), UINT32_C(0x531E4CEF), UINT32_C(0x2B8D1A58),
17473             UINT32_C(0xF7B5735E), UINT32_C(0xEF568511), UINT32_C(0xB8882F1E),
17474             UINT32_C(0x86A86DB3), UINT32_C(0xAFB08D1C), UINT32_C(0xF54DE8C7),
17475             UINT32_C(0x88CB9DF2), UINT32_C(0x9A683282), UINT32_C(0xA44234F1) },
17476           { UINT32_C(0xA6E9AB2E), UINT32_C(0xBC1B3D3A), UINT32_C(0x87FC99EE),
17477             UINT32_C(0xEFA071FB), UINT32_C(0xA102DC0F), UINT32_C(0xFA3C737D),
17478             UINT32_C(0xD6A0CBD2), UINT32_C(0xDF3248A6), UINT32_C(0x1ECC1BF4),
17479             UINT32_C(0x6E62A4FF), UINT32_C(0xC8F1BC17), UINT32_C(0xF718F940) } },
17480         { { UINT32_C(0x4F63F026), UINT32_C(0x2C8B0AAD), UINT32_C(0x50B253CC),
17481             UINT32_C(0x2AFF6238), UINT32_C(0x10C4D122), UINT32_C(0xCAB3E942),
17482             UINT32_C(0x07CD2816), UINT32_C(0x52B59F04), UINT32_C(0x982C41FC),
17483             UINT32_C(0x22322803), UINT32_C(0x8CF50B19), UINT32_C(0x38844E66) },
17484           { UINT32_C(0xBE3264CD), UINT32_C(0x42A959F7), UINT32_C(0x6C983524),
17485             UINT32_C(0xBDDC24BD), UINT32_C(0x462B8640), UINT32_C(0xA489EB0C),
17486             UINT32_C(0x98029BE7), UINT32_C(0xB7C05092), UINT32_C(0xA1ADDC64),
17487             UINT32_C(0xD5546B5F), UINT32_C(0xA0C655AF), UINT32_C(0xE7CAC1FC) } },
17488         { { UINT32_C(0x47636F97), UINT32_C(0x14547198), UINT32_C(0xEBCDCCFF),
17489             UINT32_C(0x6FA67481), UINT32_C(0x395D3258), UINT32_C(0xC164872F),
17490             UINT32_C(0xEE6ACDBC), UINT32_C(0xB8CECAFE), UINT32_C(0xA933F180),
17491             UINT32_C(0x3FBFE5F3), UINT32_C(0x898C3B1E), UINT32_C(0xEC20CAC2) },
17492           { UINT32_C(0x87DA73F9), UINT32_C(0x6A031BEE), UINT32_C(0x5C5AF46E),
17493             UINT32_C(0xD1E667D1), UINT32_C(0x1DC6EEF9), UINT32_C(0xCB3DC168),
17494             UINT32_C(0x33D310C0), UINT32_C(0x2DD1BD94), UINT32_C(0x9207E438),
17495             UINT32_C(0x0F78D493), UINT32_C(0xA99C0E75), UINT32_C(0xC233D544) } },
17496         { { UINT32_C(0x9E2A0113), UINT32_C(0x228F19F1), UINT32_C(0x0E1A5D37),
17497             UINT32_C(0x58495BE5), UINT32_C(0x38D7F364), UINT32_C(0x97E08F69),
17498             UINT32_C(0x510759B0), UINT32_C(0x1EC3BA3E), UINT32_C(0xE03CD40D),
17499             UINT32_C(0x3682F19A), UINT32_C(0xF9E16D68), UINT32_C(0xC87745D8) },
17500           { UINT32_C(0x09A642EA), UINT32_C(0xFD527AB5), UINT32_C(0xF9C81F27),
17501             UINT32_C(0x6308EEBD), UINT32_C(0x550C5D68), UINT32_C(0xFA9F666C),
17502             UINT32_C(0x584AB153), UINT32_C(0xDEBA436F), UINT32_C(0x5B63E939),
17503             UINT32_C(0x1D4861D3), UINT32_C(0xC9850221), UINT32_C(0x073BED9B) } },
17504         { { UINT32_C(0x8B171246), UINT32_C(0x802BCCF0), UINT32_C(0x733B072F),
17505             UINT32_C(0xFFF7D15A), UINT32_C(0x4CBFA4EF), UINT32_C(0xEA386266),
17506             UINT32_C(0xD635946B), UINT32_C(0x9E5B5073), UINT32_C(0xFA81BE95),
17507             UINT32_C(0x16E9A979), UINT32_C(0xB14F701F), UINT32_C(0x41E8716E) },
17508           { UINT32_C(0x101A6719), UINT32_C(0x25782E0F), UINT32_C(0xC9D66959),
17509             UINT32_C(0x442C4875), UINT32_C(0x2B85D153), UINT32_C(0x52D845D9),
17510             UINT32_C(0x2E831117), UINT32_C(0xFF925138), UINT32_C(0x8E02434B),
17511             UINT32_C(0x01B700CC), UINT32_C(0xEC0BAE3E), UINT32_C(0xD2DB7F8E) } },
17512         { { UINT32_C(0x966A4872), UINT32_C(0x1B225300), UINT32_C(0x566F537B),
17513             UINT32_C(0x40C149BE), UINT32_C(0xCB680021), UINT32_C(0x3335F4D2),
17514             UINT32_C(0x778E5F5F), UINT32_C(0x773D0263), UINT32_C(0x666FA9ED),
17515             UINT32_C(0x1D9B7602), UINT32_C(0x2E6200CF), UINT32_C(0x52490A10) },
17516           { UINT32_C(0x961F290B), UINT32_C(0x8434C7DD), UINT32_C(0x64456446),
17517             UINT32_C(0x773AC156), UINT32_C(0x47B712BB), UINT32_C(0x5E2BB789),
17518             UINT32_C(0xBE0974AD), UINT32_C(0xFD3BCBFD), UINT32_C(0x791AD5D8),
17519             UINT32_C(0x71AE9351), UINT32_C(0x6F4E1400), UINT32_C(0x1EE738BA) } },
17520         { { UINT32_C(0x0BE8E26E), UINT32_C(0x2FA428AB), UINT32_C(0xBB4CF9FC),
17521             UINT32_C(0xFEFF0600), UINT32_C(0xB2EA5FB0), UINT32_C(0x76F25CA9),
17522             UINT32_C(0x6835C5F4), UINT32_C(0xAB7FECF0), UINT32_C(0x19D5F328),
17523             UINT32_C(0x649D0772), UINT32_C(0xACBCB12E), UINT32_C(0xABE7B895) },
17524           { UINT32_C(0xD69B1EA8), UINT32_C(0xF2D1031A), UINT32_C(0xC60B0BBB),
17525             UINT32_C(0x46065D5D), UINT32_C(0x85D798FF), UINT32_C(0xB0908DC1),
17526             UINT32_C(0xD2C9B18A), UINT32_C(0x4E2420F0), UINT32_C(0xD30432A2),
17527             UINT32_C(0x6B3A9BDD), UINT32_C(0xC9B134AD), UINT32_C(0x501C3383) } },
17528         { { UINT32_C(0x98A21284), UINT32_C(0x608F0967), UINT32_C(0x059CCEDE),
17529             UINT32_C(0x5361BE86), UINT32_C(0xAFD87EF7), UINT32_C(0x3A40655C),
17530             UINT32_C(0x59083AA2), UINT32_C(0x03CF3117), UINT32_C(0xB6C366D9),
17531             UINT32_C(0x57DB5F61), UINT32_C(0x6DD0D232), UINT32_C(0x29DC275B) },
17532           { UINT32_C(0x8FA67501), UINT32_C(0xBDAB24DD), UINT32_C(0x65D08C37),
17533             UINT32_C(0x5928F775), UINT32_C(0x645D466A), UINT32_C(0x9448A856),
17534             UINT32_C(0xC0E927A5), UINT32_C(0x6E6B5E2E), UINT32_C(0xE80C6871),
17535             UINT32_C(0xE884D546), UINT32_C(0x53A9A851), UINT32_C(0x10C881C9) } },
17536         { { UINT32_C(0x9B627AA5), UINT32_C(0x35505374), UINT32_C(0x7976677B),
17537             UINT32_C(0xE7CA1B57), UINT32_C(0x4976CE17), UINT32_C(0x81239712),
17538             UINT32_C(0x96DA31B9), UINT32_C(0x96E9080B), UINT32_C(0xCC64AA1F),
17539             UINT32_C(0x458254AB), UINT32_C(0x48E674C9), UINT32_C(0xFEFF6821) },
17540           { UINT32_C(0x021F1488), UINT32_C(0x8772F37A), UINT32_C(0xAB56345C),
17541             UINT32_C(0x2E274E18), UINT32_C(0x29823B76), UINT32_C(0x7C7BE61C),
17542             UINT32_C(0x9EEFB39E), UINT32_C(0x275DB7B2), UINT32_C(0xBF5CBCEF),
17543             UINT32_C(0x83B10ED4), UINT32_C(0x518E5183), UINT32_C(0x40D7F5B4) } },
17544         { { UINT32_C(0xF960B41B), UINT32_C(0x315CCC01), UINT32_C(0x1D99E722),
17545             UINT32_C(0x90B417C9), UINT32_C(0x013463E0), UINT32_C(0x84AFAA0D),
17546             UINT32_C(0x13E6D9E1), UINT32_C(0xF133C5D8), UINT32_C(0x525B7430),
17547             UINT32_C(0xD95C6ADC), UINT32_C(0x7A25106A), UINT32_C(0x082C61AD) },
17548           { UINT32_C(0xBA1CE179), UINT32_C(0xABC1966D), UINT32_C(0xA5DB529A),
17549             UINT32_C(0xE0578B77), UINT32_C(0xEC84107D), UINT32_C(0x10988C05),
17550             UINT32_C(0x1B207F83), UINT32_C(0xFCADE5D7), UINT32_C(0xC5BA83DB),
17551             UINT32_C(0x0BEB6FDB), UINT32_C(0x57537E34), UINT32_C(0x1C39B86D) } },
17552     },
17553     {
17554         { { UINT32_C(0x2A7AECED), UINT32_C(0x5B0B5D69), UINT32_C(0x01DC545F),
17555             UINT32_C(0x4C03450C), UINT32_C(0x404A3458), UINT32_C(0x72AD0A4A),
17556             UINT32_C(0x9F467B60), UINT32_C(0x1DE8E255), UINT32_C(0x90634809),
17557             UINT32_C(0xA4B35705), UINT32_C(0x706F0178), UINT32_C(0x76F30205) },
17558           { UINT32_C(0x4454F0E5), UINT32_C(0x588D21AB), UINT32_C(0x64134928),
17559             UINT32_C(0xD22DF549), UINT32_C(0x241BCD90), UINT32_C(0xF4E7E73D),
17560             UINT32_C(0x2FACC7CC), UINT32_C(0xB8D8A1D2), UINT32_C(0x1D25D2A0),
17561             UINT32_C(0x483C35A7), UINT32_C(0x1EF9F608), UINT32_C(0x7F8D2545) } },
17562         { { UINT32_C(0x54EBC926), UINT32_C(0xCB51F039), UINT32_C(0xB8D4A7BB),
17563             UINT32_C(0xE235D356), UINT32_C(0xB41FE1A6), UINT32_C(0x93C8FAFA),
17564             UINT32_C(0xA719F254), UINT32_C(0x6297701D), UINT32_C(0x644F5CDE),
17565             UINT32_C(0x6E9165BC), UINT32_C(0x0C11C542), UINT32_C(0x6506329D) },
17566           { UINT32_C(0xA92B4250), UINT32_C(0xA2564809), UINT32_C(0x889C2E3E),
17567             UINT32_C(0x0E9AC173), UINT32_C(0x22B1D1BE), UINT32_C(0x286A5926),
17568             UINT32_C(0x6ECDD041), UINT32_C(0x86A3D752), UINT32_C(0x649F9524),
17569             UINT32_C(0x4B867E0A), UINT32_C(0x0629CB0F), UINT32_C(0x1FE7D95A) } },
17570         { { UINT32_C(0xCA5BAF54), UINT32_C(0xF4F66843), UINT32_C(0xEFE7DB78),
17571             UINT32_C(0x298DB357), UINT32_C(0x7365712F), UINT32_C(0xF607E86E),
17572             UINT32_C(0x8A822BC0), UINT32_C(0xD5882298), UINT32_C(0xC61299B3),
17573             UINT32_C(0x2CFBD63A), UINT32_C(0x67167B1A), UINT32_C(0x6F713D9B) },
17574           { UINT32_C(0xDE0B077A), UINT32_C(0x750F673F), UINT32_C(0xEE2178DA),
17575             UINT32_C(0x07482708), UINT32_C(0x69123C75), UINT32_C(0x5E6D5BD1),
17576             UINT32_C(0xEAB99B37), UINT32_C(0x6A93D1B6), UINT32_C(0x8CAEC6A3),
17577             UINT32_C(0x6EF4F7E6), UINT32_C(0xCF3ED818), UINT32_C(0x7BE411D6) } },
17578         { { UINT32_C(0x63A0A7D2), UINT32_C(0xF92B3073), UINT32_C(0x881DC8CF),
17579             UINT32_C(0x32DA431C), UINT32_C(0xC578E3A3), UINT32_C(0xE51BD5ED),
17580             UINT32_C(0x9587FA22), UINT32_C(0xEFDA70D2), UINT32_C(0x9B2EBA85),
17581             UINT32_C(0xCFEC1708), UINT32_C(0xAF7BA530), UINT32_C(0x6AB51A4B) },
17582           { UINT32_C(0x98174812), UINT32_C(0x5AC155AE), UINT32_C(0xCCB076E3),
17583             UINT32_C(0xCAF07A71), UINT32_C(0xC38718A7), UINT32_C(0x280E86C2),
17584             UINT32_C(0xD63745B7), UINT32_C(0x9D12DE73), UINT32_C(0xBF8A79AA),
17585             UINT32_C(0x0E8EA855), UINT32_C(0xBD705BF7), UINT32_C(0x5EB2BED8) } },
17586         { { UINT32_C(0xAE16DE53), UINT32_C(0x33FE9578), UINT32_C(0x10BEC902),
17587             UINT32_C(0x3AE85EB5), UINT32_C(0x44AF850E), UINT32_C(0xC4F49658),
17588             UINT32_C(0x087DD658), UINT32_C(0x6EA222B3), UINT32_C(0xA51F1447),
17589             UINT32_C(0xB255E6FD), UINT32_C(0x117E3F48), UINT32_C(0xB35E4997) },
17590           { UINT32_C(0x05616CA1), UINT32_C(0x562E813B), UINT32_C(0x8A61E156),
17591             UINT32_C(0xDF5925D6), UINT32_C(0x571C728B), UINT32_C(0xB2FA8125),
17592             UINT32_C(0xA2F2D1CF), UINT32_C(0x00864805), UINT32_C(0x1BCCB6FF),
17593             UINT32_C(0x2DC26F41), UINT32_C(0x63AE37DD), UINT32_C(0xEBD5E093) } },
17594         { { UINT32_C(0x0A285611), UINT32_C(0xD2D68BB3), UINT32_C(0xDC8378F2),
17595             UINT32_C(0x3EAE7596), UINT32_C(0x6CC688A3), UINT32_C(0x2DC6CCC6),
17596             UINT32_C(0x011F5DFB), UINT32_C(0xC45E5713), UINT32_C(0x62D34487),
17597             UINT32_C(0x6B9C4F6C), UINT32_C(0x1FC65551), UINT32_C(0xFAD6F077) },
17598           { UINT32_C(0x62B23B52), UINT32_C(0x5E3266E0), UINT32_C(0xE98F4715),
17599             UINT32_C(0xF1DAF319), UINT32_C(0x3ED0AE83), UINT32_C(0x064D12EA),
17600             UINT32_C(0x564125CB), UINT32_C(0x5CCF9326), UINT32_C(0xC63C1E9F),
17601             UINT32_C(0x09057022), UINT32_C(0xDC9B5D2E), UINT32_C(0x7171972C) } },
17602         { { UINT32_C(0xEABD21B2), UINT32_C(0x2364FD9A), UINT32_C(0x9174AD6D),
17603             UINT32_C(0x3CE5F4BB), UINT32_C(0xB38688C0), UINT32_C(0xA4D6D5D0),
17604             UINT32_C(0x6D87FD7D), UINT32_C(0x2292A2D2), UINT32_C(0x4CA02E54),
17605             UINT32_C(0x2A7D1B53), UINT32_C(0xB4185715), UINT32_C(0x7BEE6E7E) },
17606           { UINT32_C(0x8FC63ACD), UINT32_C(0x73E54609), UINT32_C(0x4064E09D),
17607             UINT32_C(0xF4D93A12), UINT32_C(0x2B92DAA5), UINT32_C(0xD20E157A),
17608             UINT32_C(0xC4B81A00), UINT32_C(0x90D125DB), UINT32_C(0x7682DE13),
17609             UINT32_C(0xCB951C9E), UINT32_C(0x27987545), UINT32_C(0x1ABE58F4) } },
17610         { { UINT32_C(0x30C70C8D), UINT32_C(0x6D351640), UINT32_C(0xCE2361B8),
17611             UINT32_C(0x8047D811), UINT32_C(0xDF8E2C81), UINT32_C(0x3F8B3D4F),
17612             UINT32_C(0x33FA1F6C), UINT32_C(0x5D595477), UINT32_C(0xE29B8A91),
17613             UINT32_C(0xF769FE5A), UINT32_C(0xD737B2A2), UINT32_C(0x26F0E606) },
17614           { UINT32_C(0xB8B31C6A), UINT32_C(0x70CBFA5D), UINT32_C(0x863D3AEA),
17615             UINT32_C(0x0F883B4A), UINT32_C(0xE386AE2F), UINT32_C(0x156A4479),
17616             UINT32_C(0xADE8A684), UINT32_C(0xA17A2FCD), UINT32_C(0xE2A7E335),
17617             UINT32_C(0x78BDF958), UINT32_C(0x3B9E3041), UINT32_C(0xD1B4E673) } },
17618         { { UINT32_C(0x449A6D11), UINT32_C(0x1EAF48EC), UINT32_C(0x6D2FA7B9),
17619             UINT32_C(0x6B94B8E4), UINT32_C(0x728E4C1B), UINT32_C(0x1D75D269),
17620             UINT32_C(0xDD304E2C), UINT32_C(0x91123819), UINT32_C(0x88804F4B),
17621             UINT32_C(0x0B34CAE3), UINT32_C(0xC5495E9A), UINT32_C(0x2BA192FB) },
17622           { UINT32_C(0xFF4D24BF), UINT32_C(0xC93FF6EF), UINT32_C(0x0342BA78),
17623             UINT32_C(0xF8C2C0B0), UINT32_C(0x831EB94C), UINT32_C(0x8041F769),
17624             UINT32_C(0x7782985E), UINT32_C(0x35310074), UINT32_C(0x3AF84E83),
17625             UINT32_C(0xC755320B), UINT32_C(0x6F497E7F), UINT32_C(0x384B6D26) } },
17626         { { UINT32_C(0x17E6BD17), UINT32_C(0xEF92CD59), UINT32_C(0xA426965C),
17627             UINT32_C(0xA087305B), UINT32_C(0xAC47F773), UINT32_C(0x13895CE7),
17628             UINT32_C(0xE0BB2867), UINT32_C(0xB85F2A9F), UINT32_C(0x7CD7C58E),
17629             UINT32_C(0x2926E6AA), UINT32_C(0x450459C5), UINT32_C(0xE544EDA6) },
17630           { UINT32_C(0xB90A9849), UINT32_C(0x73DBC351), UINT32_C(0x848EBE86),
17631             UINT32_C(0x961183F6), UINT32_C(0x80534712), UINT32_C(0xC45BB210),
17632             UINT32_C(0xA654D9A3), UINT32_C(0x379D08D7), UINT32_C(0xBD3FFA9C),
17633             UINT32_C(0x5B97CEF2), UINT32_C(0xDDC2FCE5), UINT32_C(0x0F469F34) } },
17634         { { UINT32_C(0x0642F38D), UINT32_C(0x6D146108), UINT32_C(0xD21EB887),
17635             UINT32_C(0x055171A0), UINT32_C(0xD0DCEB28), UINT32_C(0x28DFFAB4),
17636             UINT32_C(0x98DE9CCD), UINT32_C(0x0D0E6312), UINT32_C(0x118C3C3F),
17637             UINT32_C(0x750A9156), UINT32_C(0xB049D799), UINT32_C(0x8C1F1390) },
17638           { UINT32_C(0x439607C5), UINT32_C(0xE4823858), UINT32_C(0x5C111EAB),
17639             UINT32_C(0x947E9BA0), UINT32_C(0xA355DF2E), UINT32_C(0x39C95616),
17640             UINT32_C(0x10E54BDA), UINT32_C(0xF5F6B98E), UINT32_C(0x142B876A),
17641             UINT32_C(0xB0E0B33D), UINT32_C(0xEA18C90C), UINT32_C(0x71197D73) } },
17642         { { UINT32_C(0xF52BE819), UINT32_C(0x36A5139D), UINT32_C(0x29A45D2B),
17643             UINT32_C(0xF60DDF34), UINT32_C(0xE9220E34), UINT32_C(0x0727EFEC),
17644             UINT32_C(0x4EF7F446), UINT32_C(0x431D3386), UINT32_C(0xFCC4962C),
17645             UINT32_C(0xC3165A64), UINT32_C(0xD64362BB), UINT32_C(0xB7D926E1) },
17646           { UINT32_C(0xD45F9350), UINT32_C(0x216BC61F), UINT32_C(0xBBAED815),
17647             UINT32_C(0xA974CB2F), UINT32_C(0x86FB2F76), UINT32_C(0x31DF342D),
17648             UINT32_C(0x01D78314), UINT32_C(0x3AB67E05), UINT32_C(0xDEE33ED2),
17649             UINT32_C(0x7AA951E0), UINT32_C(0xCEC78D94), UINT32_C(0x318FBBBD) } },
17650         { { UINT32_C(0xB8FE0204), UINT32_C(0xAD7EFB65), UINT32_C(0x230AB7F7),
17651             UINT32_C(0x0432E1C5), UINT32_C(0x9C967400), UINT32_C(0x7563A62D),
17652             UINT32_C(0x3524D4FF), UINT32_C(0xD88B9C74), UINT32_C(0xF1A823E3),
17653             UINT32_C(0x16A1991C), UINT32_C(0xFA6F0FFB), UINT32_C(0xCF2F9BFE) },
17654           { UINT32_C(0xA50CA61F), UINT32_C(0x55AAA946), UINT32_C(0xFED4CAB3),
17655             UINT32_C(0x8CBBD3C8), UINT32_C(0x7651365A), UINT32_C(0x03A0FAB8),
17656             UINT32_C(0x62DC3913), UINT32_C(0x46B5234B), UINT32_C(0xB558CBBD),
17657             UINT32_C(0xFD875B28), UINT32_C(0x11CEB361), UINT32_C(0xA48EC3AE) } },
17658         { { UINT32_C(0xB3ADBD8B), UINT32_C(0x5DD131A1), UINT32_C(0x29B45EF8),
17659             UINT32_C(0xF9FBCA3A), UINT32_C(0x9341EE18), UINT32_C(0x02204866),
17660             UINT32_C(0x83BF9618), UINT32_C(0x8D13B895), UINT32_C(0xE807459C),
17661             UINT32_C(0x0E395BAE), UINT32_C(0xB190E7DB), UINT32_C(0xB9C110CC) },
17662           { UINT32_C(0x25D25063), UINT32_C(0xA0DC3452), UINT32_C(0x02371462),
17663             UINT32_C(0x2FB78EC8), UINT32_C(0x8975C2D5), UINT32_C(0xC3A9E7BB),
17664             UINT32_C(0x85A78264), UINT32_C(0x94666872), UINT32_C(0x8029AA92),
17665             UINT32_C(0x480D2CC2), UINT32_C(0x5655726D), UINT32_C(0x237086C7) } },
17666         { { UINT32_C(0x65EB9EEE), UINT32_C(0x197F14BB), UINT32_C(0x9F12E5FD),
17667             UINT32_C(0xFC93125C), UINT32_C(0x8BFBAE5E), UINT32_C(0x9C20BC53),
17668             UINT32_C(0x4BC053BA), UINT32_C(0xB35E2154), UINT32_C(0x21C3898E),
17669             UINT32_C(0xE5FA9CC7), UINT32_C(0xD42F950F), UINT32_C(0x502D72FF) },
17670           { UINT32_C(0xD1EB8C31), UINT32_C(0x6812D38A), UINT32_C(0x080D30BB),
17671             UINT32_C(0x1F77F3F1), UINT32_C(0x5A8B1E98), UINT32_C(0x18D12833),
17672             UINT32_C(0x299196CE), UINT32_C(0x7FD39FA9), UINT32_C(0xCF4ED6D6),
17673             UINT32_C(0xFB8C9F11), UINT32_C(0xD6363194), UINT32_C(0x4C00F604) } },
17674         { { UINT32_C(0xFA2A21C2), UINT32_C(0x5C8AFCF9), UINT32_C(0x1928D133),
17675             UINT32_C(0x71CBF282), UINT32_C(0x42B29506), UINT32_C(0x56BEF28E),
17676             UINT32_C(0x70323DE2), UINT32_C(0xAFBA250C), UINT32_C(0x7DED2C30),
17677             UINT32_C(0x3FE208D1), UINT32_C(0xCE9AA598), UINT32_C(0xBD2CD213) },
17678           { UINT32_C(0xCFEED070), UINT32_C(0x52C5EC52), UINT32_C(0xD3DA336B),
17679             UINT32_C(0x0A7223E7), UINT32_C(0xCE156B46), UINT32_C(0x7156A4ED),
17680             UINT32_C(0xED7E6159), UINT32_C(0x9AF6C499), UINT32_C(0x13C029AD),
17681             UINT32_C(0x9D7A6797), UINT32_C(0x9018DC77), UINT32_C(0xE5B5C924) } },
17682     },
17683     {
17684         { { UINT32_C(0xDE1E4E55), UINT32_C(0x3F2EFF53), UINT32_C(0xE4D3ECC4),
17685             UINT32_C(0x6B749943), UINT32_C(0x0DDE190D), UINT32_C(0xAF10B18A),
17686             UINT32_C(0xA26B0409), UINT32_C(0xF491B98D), UINT32_C(0xA2B1D944),
17687             UINT32_C(0x66080782), UINT32_C(0x97E8C541), UINT32_C(0x59277DC6) },
17688           { UINT32_C(0x006F18AA), UINT32_C(0xFDBFC5F6), UINT32_C(0xFADD8BE1),
17689             UINT32_C(0x435D165B), UINT32_C(0x57645EF4), UINT32_C(0x8E5D2638),
17690             UINT32_C(0xA0258363), UINT32_C(0x31BCFDA6), UINT32_C(0xD35D2503),
17691             UINT32_C(0xF5330AB8), UINT32_C(0xC7CAB285), UINT32_C(0xB71369F0) } },
17692         { { UINT32_C(0x40ACC5A8), UINT32_C(0xE6A19DCC), UINT32_C(0xDBC6DBF8),
17693             UINT32_C(0x1C3A1FF1), UINT32_C(0xC6455613), UINT32_C(0xB4D89B9F),
17694             UINT32_C(0xA7390D0E), UINT32_C(0x6CB0FE44), UINT32_C(0x59EA135A),
17695             UINT32_C(0xADE197A4), UINT32_C(0x20680982), UINT32_C(0xDA6AA865) },
17696           { UINT32_C(0x5A442C1B), UINT32_C(0x03DB9BE9), UINT32_C(0x2BFB93F2),
17697             UINT32_C(0x221A2D73), UINT32_C(0x753C196C), UINT32_C(0x44DEE8D4),
17698             UINT32_C(0x0B7C6FF5), UINT32_C(0x59ADCC70), UINT32_C(0x4CA1B142),
17699             UINT32_C(0xC6260EC2), UINT32_C(0x46CBD4F2), UINT32_C(0x4C3CB5C6) } },
17700         { { UINT32_C(0xA417111F), UINT32_C(0x8A15D6FE), UINT32_C(0x71D93FCC),
17701             UINT32_C(0xFE4A16BD), UINT32_C(0x55BBE732), UINT32_C(0x7A7EE38C),
17702             UINT32_C(0x1FF94A9D), UINT32_C(0xEFF146A5), UINT32_C(0xDD585AB5),
17703             UINT32_C(0xE572D13E), UINT32_C(0x06491A5D), UINT32_C(0xD879790E) },
17704           { UINT32_C(0x2A58CB2E), UINT32_C(0x9C84E1C5), UINT32_C(0x6C938630),
17705             UINT32_C(0xD79D1374), UINT32_C(0x385F06C7), UINT32_C(0xDB12CD9B),
17706             UINT32_C(0x7A7759C3), UINT32_C(0x0C93EB97), UINT32_C(0x683BD706),
17707             UINT32_C(0xF1F5B0FE), UINT32_C(0x85EC3D50), UINT32_C(0x541E4F72) } },
17708         { { UINT32_C(0x81833608), UINT32_C(0x9A0E1535), UINT32_C(0x6E2833AC),
17709             UINT32_C(0x5CCE871E), UINT32_C(0xFB29777C), UINT32_C(0xC17059EA),
17710             UINT32_C(0xE354CAFD), UINT32_C(0x7E40E5FA), UINT32_C(0x4D07C371),
17711             UINT32_C(0x9CF59405), UINT32_C(0xA71C3945), UINT32_C(0x64CE36B2) },
17712           { UINT32_C(0x56CAF487), UINT32_C(0x69309E96), UINT32_C(0x1AE3454B),
17713             UINT32_C(0x3D719E9F), UINT32_C(0xE25823B6), UINT32_C(0xF2164070),
17714             UINT32_C(0x0BC27359), UINT32_C(0xEAD851BD), UINT32_C(0xB0925094),
17715             UINT32_C(0x3D21BFE8), UINT32_C(0x34A97F4E), UINT32_C(0xA783B1E9) } },
17716         { { UINT32_C(0x9546491A), UINT32_C(0x406B0C26), UINT32_C(0xF293C4E5),
17717             UINT32_C(0x9E5E15E2), UINT32_C(0x15B164DB), UINT32_C(0xC60D6413),
17718             UINT32_C(0x0C75A78E), UINT32_C(0x0DA46F53), UINT32_C(0xEA0C656B),
17719             UINT32_C(0x7C599BB7), UINT32_C(0x1B1A8122), UINT32_C(0x0F07A512) },
17720           { UINT32_C(0x15172686), UINT32_C(0x14C7204A), UINT32_C(0x5165625D),
17721             UINT32_C(0x8FAEDFF8), UINT32_C(0x37AEDE40), UINT32_C(0x20F260CE),
17722             UINT32_C(0x8F357FFE), UINT32_C(0xC81F771E), UINT32_C(0xB0912557),
17723             UINT32_C(0x25499197), UINT32_C(0x4C739C74), UINT32_C(0x736197DC) } },
17724         { { UINT32_C(0x381B3462), UINT32_C(0x6151BAB1), UINT32_C(0x43DBD344),
17725             UINT32_C(0x27E5A078), UINT32_C(0xA1C3E9FB), UINT32_C(0x2CB05BD6),
17726             UINT32_C(0x27CF2A11), UINT32_C(0x2A759760), UINT32_C(0xFF43E702),
17727             UINT32_C(0x0ADCF9DB), UINT32_C(0x1F484146), UINT32_C(0x4BBF03E2) },
17728           { UINT32_C(0x55B6521A), UINT32_C(0x0E74997F), UINT32_C(0xADE17086),
17729             UINT32_C(0x15629231), UINT32_C(0x7493FC58), UINT32_C(0x7F143E86),
17730             UINT32_C(0xAF8B9670), UINT32_C(0x60869095), UINT32_C(0x7E524869),
17731             UINT32_C(0x482CFCD7), UINT32_C(0x1D454756), UINT32_C(0x9E8060C3) } },
17732         { { UINT32_C(0xC88B4D3B), UINT32_C(0xE495747A), UINT32_C(0xAE8A948F),
17733             UINT32_C(0xB7559835), UINT32_C(0xDEB56853), UINT32_C(0x67EEF3A9),
17734             UINT32_C(0x9DEE5ADF), UINT32_C(0x0E20E269), UINT32_C(0x61F0A1AA),
17735             UINT32_C(0x9031AF67), UINT32_C(0x683402BC), UINT32_C(0x76669D32) },
17736           { UINT32_C(0x06718B16), UINT32_C(0x90BD2313), UINT32_C(0x864EFDAC),
17737             UINT32_C(0xE1B22A21), UINT32_C(0x6620089F), UINT32_C(0xE4FFE909),
17738             UINT32_C(0x3428E2D9), UINT32_C(0xB84C842E), UINT32_C(0xFE3871FC),
17739             UINT32_C(0x0E28C880), UINT32_C(0x3F21C200), UINT32_C(0x8932F698) } },
17740         { { UINT32_C(0x6C90EA5D), UINT32_C(0x603F00CE), UINT32_C(0x40A2F693),
17741             UINT32_C(0x64739307), UINT32_C(0x2174E517), UINT32_C(0xAF65148B),
17742             UINT32_C(0xF784AE74), UINT32_C(0x162FC2CA), UINT32_C(0x4D5F6458),
17743             UINT32_C(0x0D9A8825), UINT32_C(0x43AACE93), UINT32_C(0x0C2D5861) },
17744           { UINT32_C(0x9F73CBFC), UINT32_C(0xBF1EADDE), UINT32_C(0x9C68BBCA),
17745             UINT32_C(0xDE9C34C0), UINT32_C(0x67EF8A1A), UINT32_C(0x6D95602D),
17746             UINT32_C(0xA791B241), UINT32_C(0x0AF2581B), UINT32_C(0x12CAD604),
17747             UINT32_C(0x14F77361), UINT32_C(0xE2ACD1AD), UINT32_C(0x19F2354D) } },
17748         { { UINT32_C(0x0D60F263), UINT32_C(0x272F78F6), UINT32_C(0x208FD785),
17749             UINT32_C(0xE7A8F4AF), UINT32_C(0x36554F2C), UINT32_C(0x10E191C6),
17750             UINT32_C(0xFD5CD0B3), UINT32_C(0x06D88551), UINT32_C(0x57069C27),
17751             UINT32_C(0x29BF8568), UINT32_C(0x28AA6FAD), UINT32_C(0x3CE7ECD8) },
17752           { UINT32_C(0xE9F1A1D8), UINT32_C(0x7D8A92D0), UINT32_C(0xD30B5725),
17753             UINT32_C(0xD40C7FF8), UINT32_C(0xF54CAEB8), UINT32_C(0x16BE6CB2),
17754             UINT32_C(0x14CB0A91), UINT32_C(0x14CA471A), UINT32_C(0x02733CAE),
17755             UINT32_C(0xD5FF15B8), UINT32_C(0xDAA76580), UINT32_C(0xCAF88D87) } },
17756         { { UINT32_C(0x2C046592), UINT32_C(0x39430E22), UINT32_C(0x1AD26706),
17757             UINT32_C(0x6CDAE81F), UINT32_C(0xA25D9106), UINT32_C(0x8C102159),
17758             UINT32_C(0x27CA9F30), UINT32_C(0x9A440572), UINT32_C(0x70287FBC),
17759             UINT32_C(0x8D34C430), UINT32_C(0x29DB8AFA), UINT32_C(0x9003A455) },
17760           { UINT32_C(0x7FD971AD), UINT32_C(0x91364CC3), UINT32_C(0x9C60EDB7),
17761             UINT32_C(0x7B3AA048), UINT32_C(0x526F4DD8), UINT32_C(0x58B0E008),
17762             UINT32_C(0xD86D98AE), UINT32_C(0xB7674454), UINT32_C(0xB2B45747),
17763             UINT32_C(0xC25F4051), UINT32_C(0xCC043E8F), UINT32_C(0x8243BF9C) } },
17764         { { UINT32_C(0x43A0C387), UINT32_C(0xA89641C6), UINT32_C(0x87B9AB17),
17765             UINT32_C(0x6D92205C), UINT32_C(0xDAA0E102), UINT32_C(0x37D691F4),
17766             UINT32_C(0xCDE5312E), UINT32_C(0xEB3E52D7), UINT32_C(0x16F518A2),
17767             UINT32_C(0x60D3C099), UINT32_C(0x8A378EEB), UINT32_C(0x7854C051) },
17768           { UINT32_C(0x4BBCAAC5), UINT32_C(0x7359DB51), UINT32_C(0x1713F102),
17769             UINT32_C(0xF5B1B68C), UINT32_C(0xE4398DE5), UINT32_C(0xDAEAE645),
17770             UINT32_C(0xD1ABFB82), UINT32_C(0x8C8ACB6C), UINT32_C(0x136423E2),
17771             UINT32_C(0x2E8B76C3), UINT32_C(0xA8BA015E), UINT32_C(0x509DCB2D) } },
17772         { { UINT32_C(0x9AD9C59C), UINT32_C(0x2FF36815), UINT32_C(0x658E65B9),
17773             UINT32_C(0xB189A4E8), UINT32_C(0xEA786AD2), UINT32_C(0x7D33DDBB),
17774             UINT32_C(0xC0D2DC05), UINT32_C(0x96D0D648), UINT32_C(0xBFA03BE9),
17775             UINT32_C(0x05E49256), UINT32_C(0x8BAF5A1C), UINT32_C(0x0EA4E7A6) },
17776           { UINT32_C(0x9F9AD5A8), UINT32_C(0x3DDCE0B0), UINT32_C(0x9E49C2CB),
17777             UINT32_C(0xF7809195), UINT32_C(0x21782C2F), UINT32_C(0xBFCEF29D),
17778             UINT32_C(0xC41BFD97), UINT32_C(0xE57AD39F), UINT32_C(0x1355AD19),
17779             UINT32_C(0xC04B93E8), UINT32_C(0x59440F9F), UINT32_C(0xAABC9E6E) } },
17780         { { UINT32_C(0x5B6459DA), UINT32_C(0x7AA48103), UINT32_C(0x0166E880),
17781             UINT32_C(0x83EF7477), UINT32_C(0x511CCE80), UINT32_C(0x536182B1),
17782             UINT32_C(0x73CA55AA), UINT32_C(0xAFDD2EEE), UINT32_C(0xA8716143),
17783             UINT32_C(0xAB910D0D), UINT32_C(0x83707250), UINT32_C(0x8BEAA42B) },
17784           { UINT32_C(0x8DA2AB3D), UINT32_C(0x4BCCFD89), UINT32_C(0xEC6AA105),
17785             UINT32_C(0x1DBF68A9), UINT32_C(0x68EB42DA), UINT32_C(0x32CE6108),
17786             UINT32_C(0x8EA62E37), UINT32_C(0x5C2C2C85), UINT32_C(0xCD3088A7),
17787             UINT32_C(0x1ED2791F), UINT32_C(0xFF05070C), UINT32_C(0x496B4FEB) } },
17788         { { UINT32_C(0x0AA629C5), UINT32_C(0x9FA9121A), UINT32_C(0x57558BEC),
17789             UINT32_C(0xE286CFF1), UINT32_C(0x59813A4D), UINT32_C(0x4D9D657E),
17790             UINT32_C(0x26103519), UINT32_C(0xC4676A16), UINT32_C(0x2BD4DF80),
17791             UINT32_C(0x616160B3), UINT32_C(0x30FBAE87), UINT32_C(0x26FB78CC) },
17792           { UINT32_C(0x8F0F66BD), UINT32_C(0x09607013), UINT32_C(0x03D9B90D),
17793             UINT32_C(0xDD4E2D0C), UINT32_C(0x600D1B12), UINT32_C(0x5D3A8912),
17794             UINT32_C(0x4308E126), UINT32_C(0xF76DD52F), UINT32_C(0x9E4FCCA6),
17795             UINT32_C(0x97CC0409), UINT32_C(0x04C4DF7B), UINT32_C(0x0CFBE311) } },
17796         { { UINT32_C(0x28437A23), UINT32_C(0x6CA62C12), UINT32_C(0x40E7A003),
17797             UINT32_C(0x0DAF3353), UINT32_C(0xD20F8079), UINT32_C(0x1FD07DF0),
17798             UINT32_C(0x3BBC9749), UINT32_C(0xEAE7969C), UINT32_C(0x9ECAD022),
17799             UINT32_C(0x55861AFA), UINT32_C(0x1FBC3D4C), UINT32_C(0xEC41DAD9) },
17800           { UINT32_C(0xDA8B261B), UINT32_C(0x1FE4CB40), UINT32_C(0x427C5C9D),
17801             UINT32_C(0xC2671AB6), UINT32_C(0x261D4939), UINT32_C(0xDFCDA7B8),
17802             UINT32_C(0x2072C0B9), UINT32_C(0x9E7B802B), UINT32_C(0xC7828CC2),
17803             UINT32_C(0x3AFEE900), UINT32_C(0xF6DE987F), UINT32_C(0x3488BF28) } },
17804         { { UINT32_C(0x7BE1F89E), UINT32_C(0x33B9F2DE), UINT32_C(0x299B15C9),
17805             UINT32_C(0xD4E80821), UINT32_C(0x0E13F37F), UINT32_C(0x87A3067A),
17806             UINT32_C(0x55FD239F), UINT32_C(0x6D4C09ED), UINT32_C(0x92EF014F),
17807             UINT32_C(0x48B1042D), UINT32_C(0xB385A759), UINT32_C(0xA382B2E0) },
17808           { UINT32_C(0x7F6F84F8), UINT32_C(0xBF571BB0), UINT32_C(0x0CE87F50),
17809             UINT32_C(0x25AFFA37), UINT32_C(0xFE54F1BC), UINT32_C(0x826906D3),
17810             UINT32_C(0xC53AE76A), UINT32_C(0x6B0421F4), UINT32_C(0x4855EB3C),
17811             UINT32_C(0x44F85A3A), UINT32_C(0x8D1F2B27), UINT32_C(0xF49E2151) } },
17812     },
17813     {
17814         { { UINT32_C(0x5E3C647B), UINT32_C(0xC0426B77), UINT32_C(0x8CF05348),
17815             UINT32_C(0xBFCBD939), UINT32_C(0x172C0D3D), UINT32_C(0x31D312E3),
17816             UINT32_C(0xEE754737), UINT32_C(0x5F49FDE6), UINT32_C(0x6DA7EE61),
17817             UINT32_C(0x895530F0), UINT32_C(0xE8B3A5FB), UINT32_C(0xCF281B0A) },
17818           { UINT32_C(0x41B8A543), UINT32_C(0xFD149735), UINT32_C(0x3080DD30),
17819             UINT32_C(0x41A625A7), UINT32_C(0x653908CF), UINT32_C(0xE2BAAE07),
17820             UINT32_C(0xBA02A278), UINT32_C(0xC3D01436), UINT32_C(0x7B21B8F8),
17821             UINT32_C(0xA0D0222E), UINT32_C(0xD7EC1297), UINT32_C(0xFDC270E9) } },
17822         { { UINT32_C(0x9F101E64), UINT32_C(0x06A67BD2), UINT32_C(0xE1733A4A),
17823             UINT32_C(0xCB6E0AC7), UINT32_C(0x97BC62D2), UINT32_C(0xEE0B5D51),
17824             UINT32_C(0x24C51874), UINT32_C(0x52B17039), UINT32_C(0x82A1A0D5),
17825             UINT32_C(0xFED1F423), UINT32_C(0xDB6270AC), UINT32_C(0x55D90569) },
17826           { UINT32_C(0x5D73D533), UINT32_C(0x36BE4A9C), UINT32_C(0x976ED4D5),
17827             UINT32_C(0xBE9266D6), UINT32_C(0xB8F8074B), UINT32_C(0xC17436D3),
17828             UINT32_C(0x718545C6), UINT32_C(0x3BB4D399), UINT32_C(0x5C757D21),
17829             UINT32_C(0x8E1EA355), UINT32_C(0x8C474366), UINT32_C(0xF7EDBC97) } },
17830         { { UINT32_C(0x6EA83242), UINT32_C(0xEC72C650), UINT32_C(0x1B2D237F),
17831             UINT32_C(0xF7DE7BE5), UINT32_C(0x1819EFB0), UINT32_C(0x3C5E2200),
17832             UINT32_C(0x8CDDE870), UINT32_C(0xDF5AB6D6), UINT32_C(0x92A87AEE),
17833             UINT32_C(0x75A44E9D), UINT32_C(0xBCF77F19), UINT32_C(0xBDDC46F4) },
17834           { UINT32_C(0x669B674D), UINT32_C(0x8191EFBD), UINT32_C(0xED71768F),
17835             UINT32_C(0x52884DF9), UINT32_C(0x65CF242C), UINT32_C(0xE62BE582),
17836             UINT32_C(0x80B1D17B), UINT32_C(0xAE99A3B1), UINT32_C(0x92DE59A9),
17837             UINT32_C(0x48CBB446), UINT32_C(0x2DCB3CE2), UINT32_C(0xD3C226CF) } },
17838         { { UINT32_C(0x9FD94EC4), UINT32_C(0x9580CDFB), UINT32_C(0x28631AD9),
17839             UINT32_C(0xED273A6C), UINT32_C(0xC327F3E7), UINT32_C(0x5D3D5F77),
17840             UINT32_C(0x35353C5F), UINT32_C(0x05D5339C), UINT32_C(0x5C258EB1),
17841             UINT32_C(0xC56FB5FE), UINT32_C(0xEDCE1F79), UINT32_C(0xEFF8425E) },
17842           { UINT32_C(0xCF83CF9C), UINT32_C(0xAB7AA141), UINT32_C(0x207D6D4F),
17843             UINT32_C(0xBD2A690A), UINT32_C(0x458D9E52), UINT32_C(0xE1241491),
17844             UINT32_C(0xAA7F0F31), UINT32_C(0xDD2448CC), UINT32_C(0xF0FDA7AB),
17845             UINT32_C(0xEC58D3C7), UINT32_C(0xC91BBA4D), UINT32_C(0x7B6E122D) } },
17846         { { UINT32_C(0xB1B48156), UINT32_C(0x2A2DEDAF), UINT32_C(0xBB93DB87),
17847             UINT32_C(0xA0A2C63A), UINT32_C(0x08ACD99E), UINT32_C(0xC6559078),
17848             UINT32_C(0xFE4AC331), UINT32_C(0x03EA42AF), UINT32_C(0xEB180ED6),
17849             UINT32_C(0x43D2C14A), UINT32_C(0xB1156A1A), UINT32_C(0xC2F293DD) },
17850           { UINT32_C(0xA9D81249), UINT32_C(0x1FAFABF5), UINT32_C(0x9A8EEE87),
17851             UINT32_C(0x39ADDEAD), UINT32_C(0x119E2E92), UINT32_C(0x21E206F2),
17852             UINT32_C(0xD74DCEB6), UINT32_C(0xBC5DCC2E), UINT32_C(0x0A73A358),
17853             UINT32_C(0x86647FA3), UINT32_C(0x2F53F642), UINT32_C(0xEAD8BEA4) } },
17854         { { UINT32_C(0x91C09091), UINT32_C(0x636225F5), UINT32_C(0x71BDCFDF),
17855             UINT32_C(0xCCF5070A), UINT32_C(0xB9668EE2), UINT32_C(0x0EF8D625),
17856             UINT32_C(0xB5E04E4F), UINT32_C(0x57BDF6CD), UINT32_C(0x7C75EA43),
17857             UINT32_C(0xFC6AB0A6), UINT32_C(0xF7FD6EF3), UINT32_C(0xEB6B8AFB) },
17858           { UINT32_C(0x2A3DF404), UINT32_C(0x5B2AEEF0), UINT32_C(0xB9823197),
17859             UINT32_C(0x31FD3B48), UINT32_C(0x83A7EB23), UINT32_C(0x56226DB6),
17860             UINT32_C(0x5BB1ED2F), UINT32_C(0x3772C21E), UINT32_C(0xCD1ABA6A),
17861             UINT32_C(0x3E833624), UINT32_C(0xAC672DAD), UINT32_C(0xBAE58FFA) } },
17862         { { UINT32_C(0x31BA1705), UINT32_C(0xCE92224D), UINT32_C(0xF0197F63),
17863             UINT32_C(0x022C6ED2), UINT32_C(0xA4DC1113), UINT32_C(0x21F18D99),
17864             UINT32_C(0x03616BF1), UINT32_C(0x5CD04DE8), UINT32_C(0x9FF12E08),
17865             UINT32_C(0x6F900679), UINT32_C(0x48E61DDF), UINT32_C(0xF59A3315) },
17866           { UINT32_C(0xB51BD024), UINT32_C(0x9474D42C), UINT32_C(0x9051E49D),
17867             UINT32_C(0x11A0A413), UINT32_C(0xDCE70EDB), UINT32_C(0x79C92705),
17868             UINT32_C(0x34198426), UINT32_C(0x113CE278), UINT32_C(0xEA8616D2),
17869             UINT32_C(0x8978396F), UINT32_C(0xEA894C36), UINT32_C(0x9A2A14D0) } },
17870         { { UINT32_C(0x604F6E4A), UINT32_C(0x4F1E1254), UINT32_C(0x0187D585),
17871             UINT32_C(0x4513B088), UINT32_C(0x19E0F482), UINT32_C(0x9022F257),
17872             UINT32_C(0xE2239DBF), UINT32_C(0x51FB2A80), UINT32_C(0x998ED9D5),
17873             UINT32_C(0x49940D9E), UINT32_C(0x6C932C5D), UINT32_C(0x0583D241) },
17874           { UINT32_C(0xF25B73F7), UINT32_C(0x1188CEC8), UINT32_C(0x3B3D06CD),
17875             UINT32_C(0xA28788CB), UINT32_C(0xA083DB5A), UINT32_C(0xDEA194EC),
17876             UINT32_C(0x22DF4272), UINT32_C(0xD93A4F7E), UINT32_C(0x6A009C49),
17877             UINT32_C(0x8D84E4BF), UINT32_C(0x3E3E4A9E), UINT32_C(0x893D8DD9) } },
17878         { { UINT32_C(0x33D31160), UINT32_C(0x35E909EA), UINT32_C(0x57172F1E),
17879             UINT32_C(0x50203168), UINT32_C(0x51F3D866), UINT32_C(0x2707FC44),
17880             UINT32_C(0xD2442A5D), UINT32_C(0xEB9D2018), UINT32_C(0x5DBFE378),
17881             UINT32_C(0x904D7209), UINT32_C(0x5F13CF77), UINT32_C(0x6DB132A3) },
17882           { UINT32_C(0x7A3AF54B), UINT32_C(0x9D842BA6), UINT32_C(0x5AA5B4F9),
17883             UINT32_C(0x4E16EA19), UINT32_C(0xAF24228E), UINT32_C(0x2BBA457C),
17884             UINT32_C(0x16F3C5FE), UINT32_C(0xCC04B3BB), UINT32_C(0x77E64944),
17885             UINT32_C(0xBAFAC516), UINT32_C(0xF08BCEE0), UINT32_C(0x31580A34) } },
17886         { { UINT32_C(0x20C30ACA), UINT32_C(0xC6808DEE), UINT32_C(0xA3EA2056),
17887             UINT32_C(0xDADD216F), UINT32_C(0x7A4A9F9D), UINT32_C(0xD331394E),
17888             UINT32_C(0x424C4026), UINT32_C(0x9E0441AD), UINT32_C(0x0AEB5350),
17889             UINT32_C(0xAEED102F), UINT32_C(0xD45B09DA), UINT32_C(0xC6697FBB) },
17890           { UINT32_C(0xDEAC1496), UINT32_C(0x52A2590E), UINT32_C(0x250B87AF),
17891             UINT32_C(0x7142B831), UINT32_C(0x6D0784A8), UINT32_C(0xBEF2E68B),
17892             UINT32_C(0xA5F71CEF), UINT32_C(0x5F62593A), UINT32_C(0xB5DA51A3),
17893             UINT32_C(0x3B8F7616), UINT32_C(0xB680F5FE), UINT32_C(0xC7A6FA0D) } },
17894         { { UINT32_C(0x99C8227C), UINT32_C(0x36C21DE6), UINT32_C(0xC26813B1),
17895             UINT32_C(0xBEE3E867), UINT32_C(0xBDD91549), UINT32_C(0x9B05F2E6),
17896             UINT32_C(0xA7D1110F), UINT32_C(0x34FF2B1F), UINT32_C(0x37F67FD0),
17897             UINT32_C(0x8E6953B9), UINT32_C(0xC3183E20), UINT32_C(0x56C7F18B) },
17898           { UINT32_C(0x9E2019ED), UINT32_C(0x48AF46DE), UINT32_C(0xF551BBBF),
17899             UINT32_C(0xDEAF972E), UINT32_C(0xCC5E3EEF), UINT32_C(0x88EE38F8),
17900             UINT32_C(0x392D6BAF), UINT32_C(0xFB8D7A44), UINT32_C(0x0127187D),
17901             UINT32_C(0x32293BFC), UINT32_C(0xE58647CC), UINT32_C(0x7689E767) } },
17902         { { UINT32_C(0x52168013), UINT32_C(0x00CE901B), UINT32_C(0x837AAE71),
17903             UINT32_C(0xC6BF8E38), UINT32_C(0x167677D8), UINT32_C(0xD6F11EFA),
17904             UINT32_C(0x86C8E5CF), UINT32_C(0xE53BB485), UINT32_C(0xC48E74AB),
17905             UINT32_C(0x671167CE), UINT32_C(0x8AD720A7), UINT32_C(0x8A40218C) },
17906           { UINT32_C(0xE7C1191A), UINT32_C(0x81E827A6), UINT32_C(0xADDB153D),
17907             UINT32_C(0x54058F8D), UINT32_C(0x0D950FA2), UINT32_C(0x0BAF2925),
17908             UINT32_C(0x576DDA13), UINT32_C(0xC244674D), UINT32_C(0x41BCD13B),
17909             UINT32_C(0x8C4630AE), UINT32_C(0x5A077419), UINT32_C(0x6C2127BF) } },
17910         { { UINT32_C(0xA83C501F), UINT32_C(0xCF977FD5), UINT32_C(0xB6AB176F),
17911             UINT32_C(0xD7C6DF36), UINT32_C(0x397BC6B5), UINT32_C(0x117F6331),
17912             UINT32_C(0xF7A2D491), UINT32_C(0x72A6078B), UINT32_C(0x5242FE2E),
17913             UINT32_C(0xE5A2AAED), UINT32_C(0xFEBDC212), UINT32_C(0x88ECFFDC) },
17914           { UINT32_C(0xCE33BA21), UINT32_C(0xF2DBBF50), UINT32_C(0xCEB19F07),
17915             UINT32_C(0xE1343B76), UINT32_C(0xD2C28F71), UINT32_C(0x1F32D4C9),
17916             UINT32_C(0x18587685), UINT32_C(0x93FC64B4), UINT32_C(0xBA1F8BD1),
17917             UINT32_C(0x39CEEF9B), UINT32_C(0x8D6D6BB0), UINT32_C(0x99C36A78) } },
17918         { { UINT32_C(0x3E9561CF), UINT32_C(0x0D063817), UINT32_C(0x3D33704D),
17919             UINT32_C(0x1D8646AA), UINT32_C(0x7A08BA33), UINT32_C(0x8C451384),
17920             UINT32_C(0xE02D6624), UINT32_C(0x96446BD3), UINT32_C(0x2D6F4166),
17921             UINT32_C(0x749849F0), UINT32_C(0x14268BF0), UINT32_C(0xE364DA01) },
17922           { UINT32_C(0x9AEBFCFD), UINT32_C(0x7CE4587E), UINT32_C(0x56234393),
17923             UINT32_C(0xD4686064), UINT32_C(0x16DF73B2), UINT32_C(0x00231D51),
17924             UINT32_C(0x7279C78C), UINT32_C(0xF6A969B7), UINT32_C(0x6CB4117C),
17925             UINT32_C(0x1FF1F6B6), UINT32_C(0xD3EAB680), UINT32_C(0x30AEBC39) } },
17926         { { UINT32_C(0x93EF00B9), UINT32_C(0x5CC97E64), UINT32_C(0x972345AE),
17927             UINT32_C(0xDAE13841), UINT32_C(0x4788F43C), UINT32_C(0x85839184),
17928             UINT32_C(0xE2E6CF3E), UINT32_C(0xD0FF521E), UINT32_C(0x4B707C86),
17929             UINT32_C(0xAED14A5B), UINT32_C(0xD2523CF7), UINT32_C(0x7EAAE4A6) },
17930           { UINT32_C(0x024C8AC6), UINT32_C(0x266472C5), UINT32_C(0xC0170051),
17931             UINT32_C(0xE47E1522), UINT32_C(0x73826BAE), UINT32_C(0x7B83DA61),
17932             UINT32_C(0xCF543F0D), UINT32_C(0xE97E19F5), UINT32_C(0x20BF38E2),
17933             UINT32_C(0x5D5248FA), UINT32_C(0xDF56A037), UINT32_C(0x8A7C2F7D) } },
17934         { { UINT32_C(0x87B0526C), UINT32_C(0xB04659DD), UINT32_C(0x2307565E),
17935             UINT32_C(0x593C604A), UINT32_C(0x7C630AB8), UINT32_C(0x49E52225),
17936             UINT32_C(0xDCE9CD23), UINT32_C(0x24C1D0C6), UINT32_C(0x85177079),
17937             UINT32_C(0x6FDB241C), UINT32_C(0xF250C351), UINT32_C(0x5F521D19) },
17938           { UINT32_C(0xA6FB61DF), UINT32_C(0xFB56134B), UINT32_C(0xD75C07ED),
17939             UINT32_C(0xA4E70D69), UINT32_C(0x7D8825A8), UINT32_C(0xB7A82448),
17940             UINT32_C(0xDD64BBCC), UINT32_C(0xA3AEA7D4), UINT32_C(0x8692F539),
17941             UINT32_C(0xD53E6E6C), UINT32_C(0xF7AA4BC0), UINT32_C(0x8DDDA83B) } },
17942     },
17943     {
17944         { { UINT32_C(0xDD93D50A), UINT32_C(0x140A0F9F), UINT32_C(0x83B7ABAC),
17945             UINT32_C(0x4799FFDE), UINT32_C(0x04A1F742), UINT32_C(0x78FF7C23),
17946             UINT32_C(0x195BA34E), UINT32_C(0xC0568F51), UINT32_C(0x3B7F78B4),
17947             UINT32_C(0xE9718360), UINT32_C(0xF9EFAA53), UINT32_C(0x9CFD1FF1) },
17948           { UINT32_C(0xBB06022E), UINT32_C(0xE924D2C5), UINT32_C(0xFAA2AF6D),
17949             UINT32_C(0x9987FA86), UINT32_C(0x6EE37E0F), UINT32_C(0x4B12E73F),
17950             UINT32_C(0x5E5A1DDE), UINT32_C(0x1836FDFA), UINT32_C(0x9DCD6416),
17951             UINT32_C(0x7F1B9225), UINT32_C(0x677544D8), UINT32_C(0xCB2C1B4D) } },
17952         { { UINT32_C(0x9C213D95), UINT32_C(0x0254486D), UINT32_C(0xCB2F6E94),
17953             UINT32_C(0x68A9DB56), UINT32_C(0x000F5491), UINT32_C(0xFB5858BA),
17954             UINT32_C(0x34009FB6), UINT32_C(0x1315BDD9), UINT32_C(0xC42BDE30),
17955             UINT32_C(0xB18A8E0A), UINT32_C(0xF1070358), UINT32_C(0xFDCF93D1) },
17956           { UINT32_C(0x3022937E), UINT32_C(0xBEB1DB75), UINT32_C(0xCAC20DB4),
17957             UINT32_C(0x9B9ECA7A), UINT32_C(0xE4122B20), UINT32_C(0x152214D4),
17958             UINT32_C(0xAABCCC7B), UINT32_C(0xD3E673F2), UINT32_C(0xAED07571),
17959             UINT32_C(0x94C50F64), UINT32_C(0xE66B4F17), UINT32_C(0xD767059A) } },
17960         { { UINT32_C(0xDCD6D14B), UINT32_C(0x40336B12), UINT32_C(0xE3B4919C),
17961             UINT32_C(0xF6BCFF5D), UINT32_C(0x9C841F0C), UINT32_C(0xC337048D),
17962             UINT32_C(0x1D617F50), UINT32_C(0x4CE6D025), UINT32_C(0x8117D379),
17963             UINT32_C(0x00FEF219), UINT32_C(0xF95BE243), UINT32_C(0x18B7C4E9) },
17964           { UINT32_C(0x38DF08FF), UINT32_C(0x98DE119E), UINT32_C(0x8D772D20),
17965             UINT32_C(0xDFD803BD), UINT32_C(0x0F9678BD), UINT32_C(0x94125B72),
17966             UINT32_C(0x334ACE30), UINT32_C(0xFC5B57CD), UINT32_C(0xB7E86E04),
17967             UINT32_C(0x09486527), UINT32_C(0x6E552039), UINT32_C(0xFE9F8BCC) } },
17968         { { UINT32_C(0xD6F5A10E), UINT32_C(0x3B75C45B), UINT32_C(0xC1C35F38),
17969             UINT32_C(0xFD4680F4), UINT32_C(0xF8E0A113), UINT32_C(0x5450227D),
17970             UINT32_C(0x73DDBA24), UINT32_C(0x5E69F1AE), UINT32_C(0x57F24645),
17971             UINT32_C(0x2007B80E), UINT32_C(0x3D159741), UINT32_C(0xC63695DC) },
17972           { UINT32_C(0x4530F623), UINT32_C(0xCBE54D29), UINT32_C(0x2869586B),
17973             UINT32_C(0x986AD573), UINT32_C(0x4CC39F73), UINT32_C(0xE19F7059),
17974             UINT32_C(0x2B1B8DA9), UINT32_C(0x80F00AB3), UINT32_C(0x73F68D26),
17975             UINT32_C(0xB765AAF9), UINT32_C(0xE993F829), UINT32_C(0xBC79A394) } },
17976         { { UINT32_C(0xF310D2A0), UINT32_C(0x9C441043), UINT32_C(0xDC5EB106),
17977             UINT32_C(0x2865EE58), UINT32_C(0x9CB8065C), UINT32_C(0x71A95922),
17978             UINT32_C(0xA052AF0F), UINT32_C(0x8EB3A733), UINT32_C(0xB09D716E),
17979             UINT32_C(0x56009F42), UINT32_C(0xABCBE6AD), UINT32_C(0xA7F923C5) },
17980           { UINT32_C(0xFA375C01), UINT32_C(0x263B7669), UINT32_C(0x21EF27A2),
17981             UINT32_C(0x641C47E5), UINT32_C(0xB08FFD25), UINT32_C(0xA89B474E),
17982             UINT32_C(0xF0A239F3), UINT32_C(0x5BE8EC3F), UINT32_C(0x242A6C5A),
17983             UINT32_C(0x0E79957A), UINT32_C(0x0C6C75F5), UINT32_C(0x1DFB26D0) } },
17984         { { UINT32_C(0x9DFBF22A), UINT32_C(0x2FD97B9B), UINT32_C(0x5643532D),
17985             UINT32_C(0xDEC16CC8), UINT32_C(0x60FEE7C3), UINT32_C(0xDF0E6E39),
17986             UINT32_C(0x545860C8), UINT32_C(0xD09AD7B6), UINT32_C(0x73FC3B7C),
17987             UINT32_C(0xCC16E984), UINT32_C(0x0D4E1555), UINT32_C(0x6CE734C1) },
17988           { UINT32_C(0x4B5F6032), UINT32_C(0xC6EFE68B), UINT32_C(0x14F54073),
17989             UINT32_C(0x3A64F34C), UINT32_C(0xAC44DC95), UINT32_C(0x25DA689C),
17990             UINT32_C(0x5358AD8A), UINT32_C(0x990C477E), UINT32_C(0xF36DA7DE),
17991             UINT32_C(0x00E958A5), UINT32_C(0xC9B6F161), UINT32_C(0x902B7360) } },
17992         { { UINT32_C(0x9347B90A), UINT32_C(0x454AB42C), UINT32_C(0xA698B02B),
17993             UINT32_C(0xCAEBE64A), UINT32_C(0xFB86FA40), UINT32_C(0x119CDC69),
17994             UINT32_C(0xC3109281), UINT32_C(0x2E5CB7AD), UINT32_C(0xCD0C3D00),
17995             UINT32_C(0x67BB1EC5), UINT32_C(0x83F25BBF), UINT32_C(0x5D430BC7) },
17996           { UINT32_C(0x5CDE0ABB), UINT32_C(0x69FD84A8), UINT32_C(0x9816B688),
17997             UINT32_C(0x69DA263E), UINT32_C(0x0E53CBB8), UINT32_C(0xE52D93DF),
17998             UINT32_C(0xADD2D5A7), UINT32_C(0x42CF6F25), UINT32_C(0xC87CA88F),
17999             UINT32_C(0x227BA59D), UINT32_C(0xDA738554), UINT32_C(0x7A1CA876) } },
18000         { { UINT32_C(0x1CAC82C4), UINT32_C(0x3FA5C105), UINT32_C(0x8A78C9BE),
18001             UINT32_C(0x23C76087), UINT32_C(0x1C5CFA42), UINT32_C(0xE98CDAD6),
18002             UINT32_C(0x0A6C0421), UINT32_C(0x09C30252), UINT32_C(0x42FC61B9),
18003             UINT32_C(0x149BAC7C), UINT32_C(0x3004A3E2), UINT32_C(0x3A1C22AC) },
18004           { UINT32_C(0x202C7FED), UINT32_C(0xDE6B0D6E), UINT32_C(0xE7E63052),
18005             UINT32_C(0xB2457377), UINT32_C(0x3706B3EF), UINT32_C(0x31725FD4),
18006             UINT32_C(0x2B1AFDBF), UINT32_C(0xE16A347D), UINT32_C(0x8C29CF66),
18007             UINT32_C(0xBE4850C4), UINT32_C(0x2939F23C), UINT32_C(0x8F51CC4D) } },
18008         { { UINT32_C(0x219AE6C1), UINT32_C(0x169E025B), UINT32_C(0x116E1CA1),
18009             UINT32_C(0x55FF526F), UINT32_C(0xB191F55D), UINT32_C(0x01B810A3),
18010             UINT32_C(0x29588A69), UINT32_C(0x2D981272), UINT32_C(0x48B92199),
18011             UINT32_C(0x53C93770), UINT32_C(0x8A85236F), UINT32_C(0x8C7DD84E) },
18012           { UINT32_C(0xCAACF958), UINT32_C(0x293D48B6), UINT32_C(0x43572B30),
18013             UINT32_C(0x1F084ACB), UINT32_C(0xFAD91F28), UINT32_C(0x628BFA2D),
18014             UINT32_C(0x829386AF), UINT32_C(0x8D627B11), UINT32_C(0xD44A77BE),
18015             UINT32_C(0x3EC1DD00), UINT32_C(0x649AC7F0), UINT32_C(0x8D3B0D08) } },
18016         { { UINT32_C(0x177513BF), UINT32_C(0x00A93DAA), UINT32_C(0x42AD79E1),
18017             UINT32_C(0x2EF0B96F), UINT32_C(0xA07129D9), UINT32_C(0x81F5AAF1),
18018             UINT32_C(0x923F2449), UINT32_C(0xFC04B7EF), UINT32_C(0x60CDB1B7),
18019             UINT32_C(0x855DA795), UINT32_C(0xAD5D61D4), UINT32_C(0xB1EB5DAB) },
18020           { UINT32_C(0x353FD028), UINT32_C(0xD2CEF1AE), UINT32_C(0x9EE94847),
18021             UINT32_C(0xC21D5439), UINT32_C(0x0380C1A8), UINT32_C(0x9ED552BB),
18022             UINT32_C(0x2BAC328F), UINT32_C(0xB156FE7A), UINT32_C(0x7213C6A4),
18023             UINT32_C(0xBB7E0196), UINT32_C(0x1701ED5B), UINT32_C(0x36002A33) } },
18024         { { UINT32_C(0xDDC9EF4D), UINT32_C(0x20B1632A), UINT32_C(0x272D082B),
18025             UINT32_C(0x2A35FF4C), UINT32_C(0xF6CC9BD3), UINT32_C(0x30D39923),
18026             UINT32_C(0xE65C9D08), UINT32_C(0x6D879BC2), UINT32_C(0x6FA9983C),
18027             UINT32_C(0xCE8274E1), UINT32_C(0x0EB7424F), UINT32_C(0x652371E8) },
18028           { UINT32_C(0xC5C35282), UINT32_C(0x32B77503), UINT32_C(0xC885A931),
18029             UINT32_C(0xD7306333), UINT32_C(0x72955AA8), UINT32_C(0x8A16D719),
18030             UINT32_C(0x7D51F882), UINT32_C(0x5548F163), UINT32_C(0xBABA59EF),
18031             UINT32_C(0xB311DC66), UINT32_C(0x0DB8F627), UINT32_C(0x773D5448) } },
18032         { { UINT32_C(0x7A62EB3B), UINT32_C(0x59B1B134), UINT32_C(0xCCEEFB34),
18033             UINT32_C(0x0F8CE157), UINT32_C(0xA798CB2B), UINT32_C(0x3FE842A8),
18034             UINT32_C(0x0BF4161D), UINT32_C(0xD01BC626), UINT32_C(0x4D016FDB),
18035             UINT32_C(0x55EF6E55), UINT32_C(0xB242B201), UINT32_C(0xCB561503) },
18036           { UINT32_C(0xAF4199C1), UINT32_C(0x076EBC73), UINT32_C(0x697244F7),
18037             UINT32_C(0x39DEDCBB), UINT32_C(0x040162BC), UINT32_C(0x9D184733),
18038             UINT32_C(0x7F6B5FA6), UINT32_C(0x902992C1), UINT32_C(0xBB4952B5),
18039             UINT32_C(0xAD1DE754), UINT32_C(0xA121F6C8), UINT32_C(0x7ACF1B93) } },
18040         { { UINT32_C(0x325C9B9A), UINT32_C(0x7A56867C), UINT32_C(0xF3DC3D6A),
18041             UINT32_C(0x1A143999), UINT32_C(0x03F5BCB8), UINT32_C(0xCE109590),
18042             UINT32_C(0xD6EEE5B7), UINT32_C(0x034E9035), UINT32_C(0x495DF1BC),
18043             UINT32_C(0x2AFA81C8), UINT32_C(0x08924D02), UINT32_C(0x5EAB52DC) },
18044           { UINT32_C(0xAA181904), UINT32_C(0xEE6AA014), UINT32_C(0x310AD621),
18045             UINT32_C(0xE62DEF09), UINT32_C(0xC7538A03), UINT32_C(0x6C9792FC),
18046             UINT32_C(0x3E41D789), UINT32_C(0xA89D3E88), UINT32_C(0x9F94AE83),
18047             UINT32_C(0xD60FA11C), UINT32_C(0xE0D6234A), UINT32_C(0x5E16A8C2) } },
18048         { { UINT32_C(0xA9242F3B), UINT32_C(0x87EC053D), UINT32_C(0xF0E03545),
18049             UINT32_C(0x99544637), UINT32_C(0x6B7019E9), UINT32_C(0xEA0633FF),
18050             UINT32_C(0x68DDDB5B), UINT32_C(0x8CB8AE07), UINT32_C(0x1A811AC7),
18051             UINT32_C(0x892E7C84), UINT32_C(0x73664249), UINT32_C(0xC7EF19EB) },
18052           { UINT32_C(0xCD1489E3), UINT32_C(0xD1B5819A), UINT32_C(0xDE45D24A),
18053             UINT32_C(0xF9C80FB0), UINT32_C(0x83BB7491), UINT32_C(0x045C21A6),
18054             UINT32_C(0x73F7A47D), UINT32_C(0xA65325BE), UINT32_C(0x9C394F0C),
18055             UINT32_C(0x08D09F0E), UINT32_C(0x268D4F08), UINT32_C(0xE7FB21C6) } },
18056         { { UINT32_C(0x6CA95C18), UINT32_C(0xC4CCAB95), UINT32_C(0xBC42E040),
18057             UINT32_C(0x563FFD56), UINT32_C(0xE701C604), UINT32_C(0xFA3C64D8),
18058             UINT32_C(0xB0ABAFEE), UINT32_C(0xC88D4426), UINT32_C(0x8542E4C3),
18059             UINT32_C(0x1A353E5E), UINT32_C(0xED726186), UINT32_C(0x9A2D8B7C) },
18060           { UINT32_C(0x42D097FA), UINT32_C(0xD61CE190), UINT32_C(0x799A748B),
18061             UINT32_C(0x6A63E280), UINT32_C(0x3225486B), UINT32_C(0x0F48D063),
18062             UINT32_C(0x42A3C443), UINT32_C(0x848F8FE1), UINT32_C(0x8493CEF4),
18063             UINT32_C(0x2CCDE250), UINT32_C(0x45E77E7C), UINT32_C(0x5450A508) } },
18064         { { UINT32_C(0x03112816), UINT32_C(0xD0F4E248), UINT32_C(0xCCBE9E16),
18065             UINT32_C(0xFCAD9DDB), UINT32_C(0x5AE01EA0), UINT32_C(0x177999BF),
18066             UINT32_C(0xCE832DCE), UINT32_C(0xD20C78B9), UINT32_C(0x50C8C646),
18067             UINT32_C(0x3CC694FB), UINT32_C(0xC93D4887), UINT32_C(0x24D75968) },
18068           { UINT32_C(0x87BC08AF), UINT32_C(0x9F06366A), UINT32_C(0x7FD0DF2A),
18069             UINT32_C(0x59FAB50E), UINT32_C(0x6C4CC234), UINT32_C(0x5FFCC7F7),
18070             UINT32_C(0x65F52D86), UINT32_C(0x87198DD7), UINT32_C(0xA855DF04),
18071             UINT32_C(0x5B9C94B0), UINT32_C(0x8A067AD7), UINT32_C(0xD8BA6C73) } },
18072     },
18073     {
18074         { { UINT32_C(0x1C4C9D90), UINT32_C(0x9E9AF315), UINT32_C(0xD12E0A89),
18075             UINT32_C(0x8665C5A9), UINT32_C(0x58286493), UINT32_C(0x204ABD92),
18076             UINT32_C(0xB2E09205), UINT32_C(0x79959889), UINT32_C(0xFE56B101),
18077             UINT32_C(0x0C727A3D), UINT32_C(0x8B657F26), UINT32_C(0xF366244C) },
18078           { UINT32_C(0xCCA65BE2), UINT32_C(0xDE35D954), UINT32_C(0xB0FD41CE),
18079             UINT32_C(0x52EE1230), UINT32_C(0x36019FEE), UINT32_C(0xFA03261F),
18080             UINT32_C(0x66511D8F), UINT32_C(0xAFDA42D9), UINT32_C(0x821148B9),
18081             UINT32_C(0xF63211DD), UINT32_C(0x6F13A3E1), UINT32_C(0x7B56AF7E) } },
18082         { { UINT32_C(0x5913E184), UINT32_C(0x47FE4799), UINT32_C(0x82145900),
18083             UINT32_C(0x5BBE584C), UINT32_C(0x9A867173), UINT32_C(0xB76CFA8B),
18084             UINT32_C(0x514BF471), UINT32_C(0x9BC87BF0), UINT32_C(0x71DCF1FC),
18085             UINT32_C(0x37392DCE), UINT32_C(0x3AD1EFA8), UINT32_C(0xEC3EFAE0) },
18086           { UINT32_C(0x14876451), UINT32_C(0xBBEA5A34), UINT32_C(0x6217090F),
18087             UINT32_C(0x96E5F543), UINT32_C(0x9B1665A9), UINT32_C(0x5B3D4ECD),
18088             UINT32_C(0xE329DF22), UINT32_C(0xE7B0DF26), UINT32_C(0x0BAA808D),
18089             UINT32_C(0x18FB438E), UINT32_C(0xDD516FAF), UINT32_C(0x90757EBF) } },
18090         { { UINT32_C(0xD5A98D68), UINT32_C(0x1E6F9A95), UINT32_C(0x849DA828),
18091             UINT32_C(0x759EA7DF), UINT32_C(0x6E8B4198), UINT32_C(0x365D5625),
18092             UINT32_C(0x7A4A53F9), UINT32_C(0xE1B9C53B), UINT32_C(0xE32B9B16),
18093             UINT32_C(0x55DC1D50), UINT32_C(0xBB6D5701), UINT32_C(0xA4657EBB) },
18094           { UINT32_C(0xEACC76E2), UINT32_C(0x4C270249), UINT32_C(0x162B1CC7),
18095             UINT32_C(0xBE49EC75), UINT32_C(0x0689902B), UINT32_C(0x19A95B61),
18096             UINT32_C(0xA4CFC5A8), UINT32_C(0xDD5706BF), UINT32_C(0x14E5B424),
18097             UINT32_C(0xD33BDB73), UINT32_C(0xE69EBA87), UINT32_C(0x21311BD1) } },
18098         { { UINT32_C(0x72A21ACC), UINT32_C(0x75BA2F9B), UINT32_C(0xA28EDB4C),
18099             UINT32_C(0x356688D4), UINT32_C(0x610D080F), UINT32_C(0x3C339E0B),
18100             UINT32_C(0x33A99C2F), UINT32_C(0x614AC293), UINT32_C(0xAA580AFF),
18101             UINT32_C(0xA5E23AF2), UINT32_C(0xE1FDBA3A), UINT32_C(0xA6BCB860) },
18102           { UINT32_C(0xB43F9425), UINT32_C(0xAA603365), UINT32_C(0xF7EE4635),
18103             UINT32_C(0xAE8D7126), UINT32_C(0x56330A32), UINT32_C(0xA2B25244),
18104             UINT32_C(0x9E025AA3), UINT32_C(0xC396B5BB), UINT32_C(0xF8A0D5CF),
18105             UINT32_C(0xABBF77FA), UINT32_C(0xEA31C83B), UINT32_C(0xB322EE30) } },
18106         { { UINT32_C(0x7890E234), UINT32_C(0x04881384), UINT32_C(0x672E70C6),
18107             UINT32_C(0x387F1159), UINT32_C(0x7B307F75), UINT32_C(0x1468A614),
18108             UINT32_C(0xED85EC96), UINT32_C(0x56335B52), UINT32_C(0xD45BCAE9),
18109             UINT32_C(0xDA1BB60F), UINT32_C(0xF9FAEADD), UINT32_C(0x4D94F3F0) },
18110           { UINT32_C(0xFC78D86B), UINT32_C(0x6C6A7183), UINT32_C(0x3018DEC6),
18111             UINT32_C(0xA425B5C7), UINT32_C(0x2D877399), UINT32_C(0xB1549C33),
18112             UINT32_C(0x92B2BC37), UINT32_C(0x6C41C50C), UINT32_C(0x83EE0DDB),
18113             UINT32_C(0x3A9F380C), UINT32_C(0xC4599E73), UINT32_C(0xDED5FEB6) } },
18114         { { UINT32_C(0x0B7F8354), UINT32_C(0x14D34C21), UINT32_C(0x9177CE45),
18115             UINT32_C(0x1475A1CD), UINT32_C(0x9B926E4B), UINT32_C(0x9F5F764A),
18116             UINT32_C(0x05DD21FE), UINT32_C(0x77260D1E), UINT32_C(0xC4B937F7),
18117             UINT32_C(0x3C882480), UINT32_C(0x722372F2), UINT32_C(0xC92DCD39) },
18118           { UINT32_C(0xEC6F657E), UINT32_C(0xF636A1BE), UINT32_C(0x1D30DD35),
18119             UINT32_C(0xB0E6C312), UINT32_C(0xE4654EFE), UINT32_C(0xFE4B0528),
18120             UINT32_C(0x21D230D2), UINT32_C(0x1C4A6820), UINT32_C(0x98FA45AB),
18121             UINT32_C(0x615D2E48), UINT32_C(0x01FDBABF), UINT32_C(0x1F35D6D8) } },
18122         { { UINT32_C(0x3A7B10D1), UINT32_C(0xA636EEB8), UINT32_C(0xF4A29E73),
18123             UINT32_C(0x4E1AE352), UINT32_C(0xE6BB1EC7), UINT32_C(0x01704F5F),
18124             UINT32_C(0x0EF020AE), UINT32_C(0x75C04F72), UINT32_C(0x5A31E6A6),
18125             UINT32_C(0x448D8CEE), UINT32_C(0x208F994B), UINT32_C(0xE40A9C29) },
18126           { UINT32_C(0xFD8F9D5D), UINT32_C(0x69E09A30), UINT32_C(0x449BAB7E),
18127             UINT32_C(0xE6A5F7EB), UINT32_C(0x2AA1768B), UINT32_C(0xF25BC18A),
18128             UINT32_C(0x3C841234), UINT32_C(0x9449E404), UINT32_C(0x016A7BEF),
18129             UINT32_C(0x7A3BF43E), UINT32_C(0x2A150B60), UINT32_C(0xF25803E8) } },
18130         { { UINT32_C(0xB215F9E0), UINT32_C(0xE44A2A57), UINT32_C(0x19066F0A),
18131             UINT32_C(0x38B34DCE), UINT32_C(0x40BB1BFB), UINT32_C(0x8BB91DAD),
18132             UINT32_C(0xE67735FC), UINT32_C(0x64C9F775), UINT32_C(0x88D613CD),
18133             UINT32_C(0xDE142417), UINT32_C(0x1901D88D), UINT32_C(0xC5014FF5) },
18134           { UINT32_C(0xF38116B0), UINT32_C(0xA250341D), UINT32_C(0x9D6CBCB2),
18135             UINT32_C(0xF96B9DD4), UINT32_C(0x76B3FAC2), UINT32_C(0x15EC6C72),
18136             UINT32_C(0x8124C1E9), UINT32_C(0x88F1952F), UINT32_C(0x975BE4F5),
18137             UINT32_C(0x6B72F8EA), UINT32_C(0x061F7530), UINT32_C(0x23D288FF) } },
18138         { { UINT32_C(0xAFB96CE3), UINT32_C(0xEBFE3E5F), UINT32_C(0xB1979537),
18139             UINT32_C(0x2275EDFB), UINT32_C(0xC97BA741), UINT32_C(0xC37AB9E8),
18140             UINT32_C(0x63D7C626), UINT32_C(0x446E4B10), UINT32_C(0xD025EB02),
18141             UINT32_C(0xB73E2DCE), UINT32_C(0x7669EEA7), UINT32_C(0x1F952B51) },
18142           { UINT32_C(0x6069A424), UINT32_C(0xABDD00F6), UINT32_C(0xDC298BFB),
18143             UINT32_C(0x1C0F9D9B), UINT32_C(0xEB757B33), UINT32_C(0x831B1FD3),
18144             UINT32_C(0x59D60B32), UINT32_C(0xD7DBE183), UINT32_C(0x9EF094B3),
18145             UINT32_C(0x663D1F36), UINT32_C(0x67F7F11A), UINT32_C(0x1BD5732E) } },
18146         { { UINT32_C(0xC75D8892), UINT32_C(0x3C7FB3F5), UINT32_C(0xBA68DA69),
18147             UINT32_C(0x2CFF9A0C), UINT32_C(0x60EC740B), UINT32_C(0x76455E8B),
18148             UINT32_C(0x167B88F0), UINT32_C(0x4B8D67FF), UINT32_C(0x5A4186B1),
18149             UINT32_C(0xEDEC0C02), UINT32_C(0xBEBF35AB), UINT32_C(0x127C462D) },
18150           { UINT32_C(0x049430FC), UINT32_C(0x9159C67E), UINT32_C(0xE7747320),
18151             UINT32_C(0x86B21DD2), UINT32_C(0x0CF27B89), UINT32_C(0x0E0E0152),
18152             UINT32_C(0xCD1316B6), UINT32_C(0x705F28F5), UINT32_C(0xBEAEA8A8),
18153             UINT32_C(0x76751691), UINT32_C(0x360C5B69), UINT32_C(0x4C73E282) } },
18154         { { UINT32_C(0xFD7B3D74), UINT32_C(0x46BCC0D5), UINT32_C(0x0DC4F410),
18155             UINT32_C(0x6F13C20E), UINT32_C(0x72F11CDF), UINT32_C(0x98A1AF7D),
18156             UINT32_C(0x7928881C), UINT32_C(0x6099FD83), UINT32_C(0x371BB94B),
18157             UINT32_C(0x66976356), UINT32_C(0x19B945AB), UINT32_C(0x673FBA72) },
18158           { UINT32_C(0xAED00700), UINT32_C(0xE4D8FA6E), UINT32_C(0x5C71A9F7),
18159             UINT32_C(0xEA2313EC), UINT32_C(0xF99D4AEA), UINT32_C(0xF9ED8268),
18160             UINT32_C(0x42AB59C7), UINT32_C(0xADD89164), UINT32_C(0x3F3A2D45),
18161             UINT32_C(0xB37EB26F), UINT32_C(0xA924841E), UINT32_C(0x0B39BD7A) } },
18162         { { UINT32_C(0xE03CDBBB), UINT32_C(0xD811EB32), UINT32_C(0x7CC3610E),
18163             UINT32_C(0x12055F1D), UINT32_C(0xA9046E3F), UINT32_C(0x6B23A1A0),
18164             UINT32_C(0x9DD4A749), UINT32_C(0x4D712122), UINT32_C(0xB1BF0AC3),
18165             UINT32_C(0xB0C2ACA1), UINT32_C(0xC1B0432F), UINT32_C(0x71EFF575) },
18166           { UINT32_C(0x2B44E285), UINT32_C(0x6CD81492), UINT32_C(0xD87E8D20),
18167             UINT32_C(0x3088BD9C), UINT32_C(0xF567E8FA), UINT32_C(0xACE218E5),
18168             UINT32_C(0xCF90CBBB), UINT32_C(0xB3FA0424), UINT32_C(0x770734D3),
18169             UINT32_C(0xADBDA751), UINT32_C(0x5AD6569A), UINT32_C(0xBCD78BAD) } },
18170         { { UINT32_C(0x7F39641F), UINT32_C(0xCADB31FA), UINT32_C(0x825E5562),
18171             UINT32_C(0x3EF3E295), UINT32_C(0xF4094C64), UINT32_C(0x4893C633),
18172             UINT32_C(0x8ADDF432), UINT32_C(0x52F685F1), UINT32_C(0x7FDC9373),
18173             UINT32_C(0x9FD887AB), UINT32_C(0xE8680E8B), UINT32_C(0x47A9ADA0) },
18174           { UINT32_C(0xF0CD44F6), UINT32_C(0x579313B7), UINT32_C(0xE188AE2E),
18175             UINT32_C(0xAC4B8668), UINT32_C(0x8FB145BD), UINT32_C(0x648F4369),
18176             UINT32_C(0x74629E31), UINT32_C(0xE0460AB3), UINT32_C(0x8FF2B05F),
18177             UINT32_C(0xC25F2875), UINT32_C(0x2D31EAEA), UINT32_C(0x4720C2B6) } },
18178         { { UINT32_C(0x13D48F80), UINT32_C(0x4603CDF4), UINT32_C(0xA49725DA),
18179             UINT32_C(0x9ADB50E2), UINT32_C(0x65DF63F0), UINT32_C(0x8CD33050),
18180             UINT32_C(0xCD643003), UINT32_C(0x58D8B3BB), UINT32_C(0xB739826B),
18181             UINT32_C(0x170A4F4A), UINT32_C(0x1EAD0E17), UINT32_C(0x857772B5) },
18182           { UINT32_C(0xE65320F1), UINT32_C(0x01B78152), UINT32_C(0xB7503FC0),
18183             UINT32_C(0xA6B4D845), UINT32_C(0x3DD50798), UINT32_C(0x0F5089B9),
18184             UINT32_C(0x5690B6BE), UINT32_C(0x488F200F), UINT32_C(0x9E096F36),
18185             UINT32_C(0x220B4ADF), UINT32_C(0x8CE5BC7C), UINT32_C(0x474D7C9F) } },
18186         { { UINT32_C(0xC745F8C9), UINT32_C(0xFED8C058), UINT32_C(0x291262D1),
18187             UINT32_C(0xB683179E), UINT32_C(0xD15EE88C), UINT32_C(0x26ABD367),
18188             UINT32_C(0xF60A6249), UINT32_C(0x29E8EED3), UINT32_C(0x1E02D6E1),
18189             UINT32_C(0xED6008BB), UINT32_C(0xA6B12B8D), UINT32_C(0xD82ECF4C) },
18190           { UINT32_C(0xAAE4FA22), UINT32_C(0x9929D021), UINT32_C(0x336A1AB3),
18191             UINT32_C(0xBE4DEF14), UINT32_C(0x8C80A312), UINT32_C(0x529B7E09),
18192             UINT32_C(0xEE0EB0CE), UINT32_C(0xB059188D), UINT32_C(0x16DEAB7F),
18193             UINT32_C(0x1E42979A), UINT32_C(0x84EE9477), UINT32_C(0x24110349) } },
18194         { { UINT32_C(0x2BE579CC), UINT32_C(0xD6524685), UINT32_C(0xC456FDED),
18195             UINT32_C(0x849316F1), UINT32_C(0x2D1B67DA), UINT32_C(0xC51B7DA4),
18196             UINT32_C(0x41BC6D6A), UINT32_C(0xC25B539E), UINT32_C(0xA9BF8BED),
18197             UINT32_C(0xE3B7CCA3), UINT32_C(0x045C15E4), UINT32_C(0x813EF18C) },
18198           { UINT32_C(0x697982C4), UINT32_C(0x5F3789A1), UINT32_C(0x8C435566),
18199             UINT32_C(0x4C125369), UINT32_C(0xDC0A92C6), UINT32_C(0x00A7AE6E),
18200             UINT32_C(0x2F64A053), UINT32_C(0x1ABC929B), UINT32_C(0x38666B44),
18201             UINT32_C(0xF4925C4C), UINT32_C(0x0F3DE7F6), UINT32_C(0xA81044B0) } },
18202     },
18203     {
18204         { { UINT32_C(0xC2EC3731), UINT32_C(0xBCC88422), UINT32_C(0x10DC4EC2),
18205             UINT32_C(0x78A3E4D4), UINT32_C(0x2571D6B1), UINT32_C(0x745DA1EF),
18206             UINT32_C(0x739A956E), UINT32_C(0xF01C2921), UINT32_C(0xE4BFFC16),
18207             UINT32_C(0xEFFD8065), UINT32_C(0xF36FE72C), UINT32_C(0x6EFE62A1) },
18208           { UINT32_C(0x0F4629A4), UINT32_C(0xF49E90D2), UINT32_C(0x8CE646F4),
18209             UINT32_C(0xADD1DCC7), UINT32_C(0xB7240D91), UINT32_C(0xCB78B583),
18210             UINT32_C(0x03F8387F), UINT32_C(0x2E1A7C3C), UINT32_C(0x3200F2D9),
18211             UINT32_C(0x16566C22), UINT32_C(0xAAF80A84), UINT32_C(0x2361B14B) } },
18212         { { UINT32_C(0xB5733309), UINT32_C(0xDB1CFFD2), UINT32_C(0x0F9DD939),
18213             UINT32_C(0x24BC250B), UINT32_C(0xA3C1DB85), UINT32_C(0xA4181E5A),
18214             UINT32_C(0xAC55D391), UINT32_C(0xE5183E51), UINT32_C(0xEFD270D0),
18215             UINT32_C(0x2793D5EF), UINT32_C(0xC0631546), UINT32_C(0x7D56F63D) },
18216           { UINT32_C(0x0C1EE59D), UINT32_C(0xECB40A59), UINT32_C(0xBB5BFA2C),
18217             UINT32_C(0xE613A9E4), UINT32_C(0x6C5830F9), UINT32_C(0xA89B14AB),
18218             UINT32_C(0xA03F201E), UINT32_C(0x4DC477DC), UINT32_C(0xC88C54F6),
18219             UINT32_C(0x5604F5DA), UINT32_C(0x2ACFC66E), UINT32_C(0xD49264DC) } },
18220         { { UINT32_C(0x1C4DFA95), UINT32_C(0x283DD7F0), UINT32_C(0x62C0B160),
18221             UINT32_C(0xB898CC2C), UINT32_C(0x870282AA), UINT32_C(0xBA08C095),
18222             UINT32_C(0xF4E36324), UINT32_C(0xB02B00D8), UINT32_C(0x604CECF2),
18223             UINT32_C(0x53AADDC0), UINT32_C(0x84DDD24E), UINT32_C(0xF1F927D3) },
18224           { UINT32_C(0xE2ABC9E1), UINT32_C(0x34BC00A0), UINT32_C(0x60289F88),
18225             UINT32_C(0x2DA1227D), UINT32_C(0xCEF68F74), UINT32_C(0x5228EAAA),
18226             UINT32_C(0x3C029351), UINT32_C(0x40A790D2), UINT32_C(0x8442E3B7),
18227             UINT32_C(0xE0E9AF5C), UINT32_C(0xA9F141E0), UINT32_C(0xA3214142) } },
18228         { { UINT32_C(0xF9A58E3D), UINT32_C(0x72F4949E), UINT32_C(0xA48660A6),
18229             UINT32_C(0x738C700B), UINT32_C(0x092A5805), UINT32_C(0x71B04726),
18230             UINT32_C(0x0F5CDB72), UINT32_C(0xAD5C3C11), UINT32_C(0x554BFC49),
18231             UINT32_C(0xD4951F9E), UINT32_C(0x6131EBE7), UINT32_C(0xEE594EE5) },
18232           { UINT32_C(0x3C1AF0A9), UINT32_C(0x37DA59F3), UINT32_C(0xCB040A63),
18233             UINT32_C(0xD7AFC73B), UINT32_C(0x4D89FA65), UINT32_C(0xD020962A),
18234             UINT32_C(0x71D824F5), UINT32_C(0x2610C61E), UINT32_C(0x3C050E31),
18235             UINT32_C(0x9C917DA7), UINT32_C(0xE6E7EBFB), UINT32_C(0x3840F92F) } },
18236         { { UINT32_C(0x8D8B8CED), UINT32_C(0x50FBD7FE), UINT32_C(0x47D240AE),
18237             UINT32_C(0xC7282F75), UINT32_C(0x1930FF73), UINT32_C(0x79646A47),
18238             UINT32_C(0x2F7F5A77), UINT32_C(0x2E0BAC4E), UINT32_C(0x26127E0B),
18239             UINT32_C(0x0EE44FA5), UINT32_C(0x82BC2AA7), UINT32_C(0x678881B7) },
18240           { UINT32_C(0x67F5F497), UINT32_C(0xB9E5D384), UINT32_C(0xA9B7106B),
18241             UINT32_C(0x8F94A7D4), UINT32_C(0x9D329F68), UINT32_C(0xBF7E0B07),
18242             UINT32_C(0x45D192FB), UINT32_C(0x169B93EA), UINT32_C(0x20DBE8C0),
18243             UINT32_C(0xCCAA9467), UINT32_C(0x938F9574), UINT32_C(0xD4513A50) } },
18244         { { UINT32_C(0x054CB874), UINT32_C(0x841C96B4), UINT32_C(0xA3C26834),
18245             UINT32_C(0xD75B1AF1), UINT32_C(0xEE6575F0), UINT32_C(0x7237169D),
18246             UINT32_C(0x0322AADC), UINT32_C(0xD71FC7E5), UINT32_C(0x949E3A8E),
18247             UINT32_C(0xD7A23F1E), UINT32_C(0xDD31D8C7), UINT32_C(0x77E2D102) },
18248           { UINT32_C(0xD10F5A1F), UINT32_C(0x5AD69D09), UINT32_C(0xB99D9A0B),
18249             UINT32_C(0x526C9CB4), UINT32_C(0x972B237D), UINT32_C(0x521BB10B),
18250             UINT32_C(0xA326F342), UINT32_C(0x1E4CD42F), UINT32_C(0xF0F126CA),
18251             UINT32_C(0x5BB6DB27), UINT32_C(0xA4A515AD), UINT32_C(0x587AF22C) } },
18252         { { UINT32_C(0xB12E542F), UINT32_C(0x1123A531), UINT32_C(0xB9EB2811),
18253             UINT32_C(0x1D01A64D), UINT32_C(0xF2D70F87), UINT32_C(0xA4A3515B),
18254             UINT32_C(0xB4BD0270), UINT32_C(0xFA205234), UINT32_C(0x5EDA26B9),
18255             UINT32_C(0x74B81830), UINT32_C(0x56578E75), UINT32_C(0x9305D6E6) },
18256           { UINT32_C(0x9F11BE19), UINT32_C(0xF38E69DE), UINT32_C(0x44DBE89F),
18257             UINT32_C(0x1E2A5C23), UINT32_C(0xFD286654), UINT32_C(0x1077E7BC),
18258             UINT32_C(0x0FCA4741), UINT32_C(0xD3669894), UINT32_C(0x278F8497),
18259             UINT32_C(0x893BF904), UINT32_C(0xEB3E14F4), UINT32_C(0xD6AC5F83) } },
18260         { { UINT32_C(0x488F5F74), UINT32_C(0x327B9DAB), UINT32_C(0xCAB7364F),
18261             UINT32_C(0x2B44F4B8), UINT32_C(0x19B6C6BD), UINT32_C(0xB4A6D22D),
18262             UINT32_C(0xFC77CD3E), UINT32_C(0xA087E613), UINT32_C(0xB0B49BC7),
18263             UINT32_C(0x4558E327), UINT32_C(0xCD835D35), UINT32_C(0x188805BE) },
18264           { UINT32_C(0xC1DC1007), UINT32_C(0x592F293C), UINT32_C(0x6AF02B44),
18265             UINT32_C(0xFAEE660F), UINT32_C(0x904035F2), UINT32_C(0x5BFBB3BF),
18266             UINT32_C(0x79C07E70), UINT32_C(0xD7C9AE60), UINT32_C(0x234896C2),
18267             UINT32_C(0xC5287DD4), UINT32_C(0xCB0E4121), UINT32_C(0xC4CE4523) } },
18268         { { UINT32_C(0x58344831), UINT32_C(0x3626B406), UINT32_C(0x8E55C984),
18269             UINT32_C(0xABCCE356), UINT32_C(0x77241602), UINT32_C(0x495CC81C),
18270             UINT32_C(0x6D70DF8F), UINT32_C(0x4FB79676), UINT32_C(0x5B071DCA),
18271             UINT32_C(0x6354B37C), UINT32_C(0x8C0FC0AD), UINT32_C(0x2CAD80A4) },
18272           { UINT32_C(0xF68739B4), UINT32_C(0x18AADD51), UINT32_C(0x47F09C6C),
18273             UINT32_C(0x1BFBB177), UINT32_C(0xA8FD51C4), UINT32_C(0x9355EA19),
18274             UINT32_C(0xEE58DB7B), UINT32_C(0x3D512A84), UINT32_C(0xE9237640),
18275             UINT32_C(0x70842AFD), UINT32_C(0xACAF858D), UINT32_C(0x36F515CA) } },
18276         { { UINT32_C(0x7E768B23), UINT32_C(0x3DDEC7C4), UINT32_C(0x036D43ED),
18277             UINT32_C(0x97E13C53), UINT32_C(0x3A39AB5F), UINT32_C(0x871E5925),
18278             UINT32_C(0x07E68E2B), UINT32_C(0x9AF292DE), UINT32_C(0x4A40112E),
18279             UINT32_C(0x41158349), UINT32_C(0x3D4D97E6), UINT32_C(0xCDBB46AF) },
18280           { UINT32_C(0x3C0EBE40), UINT32_C(0x2F891293), UINT32_C(0x3EBAD1E5),
18281             UINT32_C(0x696C7EEE), UINT32_C(0x33B50D99), UINT32_C(0x8A5F3B69),
18282             UINT32_C(0x7ED47DDE), UINT32_C(0xB7BC4840), UINT32_C(0x1E6706D8),
18283             UINT32_C(0x3A6F8E6C), UINT32_C(0x3D84BB8F), UINT32_C(0x6A147943) } },
18284         { { UINT32_C(0x603AE8D1), UINT32_C(0xEC3A9C78), UINT32_C(0x228C29E5),
18285             UINT32_C(0xBFE07E37), UINT32_C(0x396DBC2B), UINT32_C(0xB0385C5B),
18286             UINT32_C(0xDF85F41F), UINT32_C(0x7C14FE83), UINT32_C(0xADFD463E),
18287             UINT32_C(0xE2E64676), UINT32_C(0x8BF9F23D), UINT32_C(0x5BEF10AA) },
18288           { UINT32_C(0xF6BAB6DA), UINT32_C(0xFA83EA0D), UINT32_C(0x966BF7E3),
18289             UINT32_C(0xCD0C8BA5), UINT32_C(0x98501C2E), UINT32_C(0xD62216B4),
18290             UINT32_C(0xC3E69F2D), UINT32_C(0xB7F298A4), UINT32_C(0x9C8740F4),
18291             UINT32_C(0x42CEF13B), UINT32_C(0x0DD64307), UINT32_C(0xBB317E52) } },
18292         { { UINT32_C(0x3FFEE775), UINT32_C(0x22B6245C), UINT32_C(0xB37CE7AA),
18293             UINT32_C(0x5C3F60BE), UINT32_C(0xE1FEC0DF), UINT32_C(0xDE195D40),
18294             UINT32_C(0xA0A82074), UINT32_C(0x3BFAFBC5), UINT32_C(0xC72CA86A),
18295             UINT32_C(0xC36EC86A), UINT32_C(0x13FD43EA), UINT32_C(0x56062851) },
18296           { UINT32_C(0x8E0B03A4), UINT32_C(0x8686BE80), UINT32_C(0xD540D440),
18297             UINT32_C(0xC3BD1F93), UINT32_C(0xBF96CEC5), UINT32_C(0x13E4EBC0),
18298             UINT32_C(0x9190C844), UINT32_C(0xE8E23984), UINT32_C(0x00844802),
18299             UINT32_C(0x183593A6), UINT32_C(0x4D206878), UINT32_C(0x46716879) } },
18300         { { UINT32_C(0xB6F63D19), UINT32_C(0x358F394D), UINT32_C(0x6B052194),
18301             UINT32_C(0xA75D4849), UINT32_C(0x5C8D7975), UINT32_C(0x58403590),
18302             UINT32_C(0x6CBFBD77), UINT32_C(0x86DC9B6B), UINT32_C(0x647A51E5),
18303             UINT32_C(0x2DB04D77), UINT32_C(0xF8950D88), UINT32_C(0x5E9A5B02) },
18304           { UINT32_C(0x017168B0), UINT32_C(0xCE69A7E5), UINT32_C(0xC4843AD3),
18305             UINT32_C(0x94630FAC), UINT32_C(0x1EFC44FF), UINT32_C(0xB3B9D736),
18306             UINT32_C(0xB14D7F93), UINT32_C(0xE729E9B6), UINT32_C(0xE0ED0ABC),
18307             UINT32_C(0xA071FC60), UINT32_C(0x8C8D9B83), UINT32_C(0xFC1A9971) } },
18308         { { UINT32_C(0xD138E975), UINT32_C(0x49686031), UINT32_C(0x5A8EF0D1),
18309             UINT32_C(0x64864038), UINT32_C(0xE7F7DE49), UINT32_C(0x32679713),
18310             UINT32_C(0x29D1CD1D), UINT32_C(0x59132349), UINT32_C(0x20BE9ED2),
18311             UINT32_C(0x849AA23A), UINT32_C(0x284B3F33), UINT32_C(0x15D303E1) },
18312           { UINT32_C(0xB63F9FE9), UINT32_C(0x37309475), UINT32_C(0x45B7256A),
18313             UINT32_C(0x327BAC8B), UINT32_C(0xD17FC5D3), UINT32_C(0x291CD227),
18314             UINT32_C(0xA973EDF1), UINT32_C(0x8291D8CD), UINT32_C(0x437ABA09),
18315             UINT32_C(0xF3843562), UINT32_C(0x271D0785), UINT32_C(0x33FFB704) } },
18316         { { UINT32_C(0x47E11E5E), UINT32_C(0x5248D6E4), UINT32_C(0x269C7ED3),
18317             UINT32_C(0x0F66FC3C), UINT32_C(0x903E346E), UINT32_C(0x18C0D2B9),
18318             UINT32_C(0x4BEAE1B8), UINT32_C(0xD81D9D97), UINT32_C(0xFC30FDF3),
18319             UINT32_C(0x610326B0), UINT32_C(0x19A7DFCD), UINT32_C(0x2B136870) },
18320           { UINT32_C(0xB9527676), UINT32_C(0xEC75F70A), UINT32_C(0x29A3D897),
18321             UINT32_C(0x90829F51), UINT32_C(0x97980302), UINT32_C(0x92FE1809),
18322             UINT32_C(0x68474991), UINT32_C(0xA3F2498E), UINT32_C(0x0F22BBAD),
18323             UINT32_C(0x6A66307B), UINT32_C(0x20378557), UINT32_C(0x32014B91) } },
18324         { { UINT32_C(0x3CD98610), UINT32_C(0x72CD7D55), UINT32_C(0x74504ADF),
18325             UINT32_C(0xC3D560B0), UINT32_C(0xCEBB5D5D), UINT32_C(0x23F0A982),
18326             UINT32_C(0xB839DDB8), UINT32_C(0x1431C15B), UINT32_C(0xCEB72207),
18327             UINT32_C(0x7E207CD8), UINT32_C(0xE7EFB28D), UINT32_C(0x28E0A848) },
18328           { UINT32_C(0x1BD96F6E), UINT32_C(0xD22561FE), UINT32_C(0x62A8236B),
18329             UINT32_C(0x04812C18), UINT32_C(0x975491FA), UINT32_C(0xA0BF2334),
18330             UINT32_C(0x435DF87F), UINT32_C(0x294F42A6), UINT32_C(0xA5D6F4F6),
18331             UINT32_C(0x2772B783), UINT32_C(0x2724F853), UINT32_C(0x348F92ED) } },
18332     },
18333     {
18334         { { UINT32_C(0x1A42E5E7), UINT32_C(0xC20FB911), UINT32_C(0x81D12863),
18335             UINT32_C(0x075A678B), UINT32_C(0x5CC0AA89), UINT32_C(0x12BCBC6A),
18336             UINT32_C(0x4FB9F01E), UINT32_C(0x5279C6AB), UINT32_C(0x11AE1B89),
18337             UINT32_C(0xBC8E1789), UINT32_C(0xC290003C), UINT32_C(0xAE74A706) },
18338           { UINT32_C(0x79DF3F45), UINT32_C(0x9949D6EC), UINT32_C(0x96C8D37F),
18339             UINT32_C(0xBA18E262), UINT32_C(0xDD2275BF), UINT32_C(0x68DE6EE2),
18340             UINT32_C(0xC419F1D5), UINT32_C(0xA9E4FFF8), UINT32_C(0xA52B5A40),
18341             UINT32_C(0xBC759CA4), UINT32_C(0x63B0996D), UINT32_C(0xFF18CBD8) } },
18342         { { UINT32_C(0xD7DD47E5), UINT32_C(0x73C57FDE), UINT32_C(0xD49A7F5D),
18343             UINT32_C(0xB0FE5479), UINT32_C(0xCFB9821E), UINT32_C(0xD25C71F1),
18344             UINT32_C(0xCF6A1D68), UINT32_C(0x9427E209), UINT32_C(0xACD24E64),
18345             UINT32_C(0xBF3C3916), UINT32_C(0xBDA7B8B5), UINT32_C(0x7E9F5583) },
18346           { UINT32_C(0xCF971E11), UINT32_C(0xE7C5F7C8), UINT32_C(0x3C7F035E),
18347             UINT32_C(0xEC16D5D7), UINT32_C(0xE66B277C), UINT32_C(0x818DC472),
18348             UINT32_C(0xB2816F1E), UINT32_C(0x4413FD47), UINT32_C(0x48383C6D),
18349             UINT32_C(0x40F262AF), UINT32_C(0x4F190537), UINT32_C(0xFB057584) } },
18350         { { UINT32_C(0x08962F6B), UINT32_C(0x487EDC07), UINT32_C(0x190A7E55),
18351             UINT32_C(0x6002F1E7), UINT32_C(0x10FDBA0C), UINT32_C(0x7FC62BEA),
18352             UINT32_C(0x2C3DBF33), UINT32_C(0xC836BBC5), UINT32_C(0x4F7D2A46),
18353             UINT32_C(0x4FDFB5C3), UINT32_C(0xDCA0DF71), UINT32_C(0x824654DE) },
18354           { UINT32_C(0x0C23902B), UINT32_C(0x30A07676), UINT32_C(0x77FBBF37),
18355             UINT32_C(0x7F1EBB93), UINT32_C(0xFACC13DB), UINT32_C(0xD307D49D),
18356             UINT32_C(0xAE1A261A), UINT32_C(0x148D673A), UINT32_C(0x52D98650),
18357             UINT32_C(0xE008F95B), UINT32_C(0x9F558FDE), UINT32_C(0xC7614440) } },
18358         { { UINT32_C(0x9CB16650), UINT32_C(0x17CD6AF6), UINT32_C(0x69F4EEBE),
18359             UINT32_C(0x86CC27C1), UINT32_C(0x78822432), UINT32_C(0x7E495B1D),
18360             UINT32_C(0x1B974525), UINT32_C(0xFED338E3), UINT32_C(0x86F3CE21),
18361             UINT32_C(0x527743D3), UINT32_C(0xB515C896), UINT32_C(0x87948AD3) },
18362           { UINT32_C(0xB17F2FB8), UINT32_C(0x9FDE7039), UINT32_C(0xD9B89D96),
18363             UINT32_C(0xA2FA9A5F), UINT32_C(0x36FF74DC), UINT32_C(0x5D46600B),
18364             UINT32_C(0x8302C3C9), UINT32_C(0x8EA74B04), UINT32_C(0xF744B5EB),
18365             UINT32_C(0xD560F570), UINT32_C(0xFE762402), UINT32_C(0xC921023B) } },
18366         { { UINT32_C(0xFFF4C8ED), UINT32_C(0xA35AB657), UINT32_C(0x8A5FABD7),
18367             UINT32_C(0x017C6124), UINT32_C(0x09ACDA28), UINT32_C(0x56463025),
18368             UINT32_C(0x14CF238A), UINT32_C(0x6038D361), UINT32_C(0xAF1B9F07),
18369             UINT32_C(0x1428B1B6), UINT32_C(0x7482E95C), UINT32_C(0x5827FF44) },
18370           { UINT32_C(0x780FF362), UINT32_C(0xCB997E18), UINT32_C(0xE0BCAC1E),
18371             UINT32_C(0x2B89D702), UINT32_C(0xA837DDC8), UINT32_C(0xC632A0B5),
18372             UINT32_C(0x59762647), UINT32_C(0xF3EFCF1F), UINT32_C(0x38B0D60A),
18373             UINT32_C(0xE9BA309A), UINT32_C(0x20B5FB37), UINT32_C(0x05DEABDD) } },
18374         { { UINT32_C(0xCB8AF047), UINT32_C(0xD44E5DBA), UINT32_C(0x943CFE82),
18375             UINT32_C(0x15400CB4), UINT32_C(0x9DF88B67), UINT32_C(0xDBD69575),
18376             UINT32_C(0xB2405A7D), UINT32_C(0x8299DB2B), UINT32_C(0x0B1D80CD),
18377             UINT32_C(0x46E3BF77), UINT32_C(0xE82BA3D9), UINT32_C(0xC50CF66C) },
18378           { UINT32_C(0xF2F747A9), UINT32_C(0xB2910A07), UINT32_C(0x5ADC89C1),
18379             UINT32_C(0xF6B669DB), UINT32_C(0x9052B081), UINT32_C(0x3B5EF1A0),
18380             UINT32_C(0xB594ACE2), UINT32_C(0x0F5D5ED3), UINT32_C(0xD5F01320),
18381             UINT32_C(0xDA30B8D5), UINT32_C(0xAAFCD58F), UINT32_C(0x0D688C5E) } },
18382         { { UINT32_C(0x2A161074), UINT32_C(0x5EEE3A31), UINT32_C(0xEFE2BE37),
18383             UINT32_C(0x6BAAAE56), UINT32_C(0xE3D78698), UINT32_C(0xF9787F61),
18384             UINT32_C(0x50630A30), UINT32_C(0xC6836B26), UINT32_C(0x1445DEF1),
18385             UINT32_C(0x7445B85D), UINT32_C(0xD568A6A5), UINT32_C(0xD72016A2) },
18386           { UINT32_C(0xE355614F), UINT32_C(0x9DD6F533), UINT32_C(0x91E04588),
18387             UINT32_C(0x637E7E5F), UINT32_C(0xB9FB1391), UINT32_C(0x42E142F3),
18388             UINT32_C(0x41AFE5DA), UINT32_C(0x0D07C05C), UINT32_C(0x1394EDF1),
18389             UINT32_C(0xD7CD25C8), UINT32_C(0xB99288EE), UINT32_C(0xEBE6A0FC) } },
18390         { { UINT32_C(0xBABBAD86), UINT32_C(0xB8E63B7B), UINT32_C(0x90D66766),
18391             UINT32_C(0x63226A9F), UINT32_C(0x5CF26666), UINT32_C(0x26381836),
18392             UINT32_C(0x4CADD0BF), UINT32_C(0xCCBD142D), UINT32_C(0x9AC29470),
18393             UINT32_C(0xA070965E), UINT32_C(0x25FF23ED), UINT32_C(0x6BDCA260) },
18394           { UINT32_C(0x87DCA7B3), UINT32_C(0xD4E00FD4), UINT32_C(0x9E0E8734),
18395             UINT32_C(0xA5097833), UINT32_C(0x048173A4), UINT32_C(0xF73F162E),
18396             UINT32_C(0x9C3C2FA2), UINT32_C(0xD23F9196), UINT32_C(0xE4AC397A),
18397             UINT32_C(0x9AB98B45), UINT32_C(0x543F2D4B), UINT32_C(0x2BAA0300) } },
18398         { { UINT32_C(0xC658C445), UINT32_C(0xBBBE15E7), UINT32_C(0xC28941D1),
18399             UINT32_C(0xB8CBCB20), UINT32_C(0x027D6540), UINT32_C(0x65549BE2),
18400             UINT32_C(0x1E8EF4F4), UINT32_C(0xEBBCA802), UINT32_C(0xD2ACA397),
18401             UINT32_C(0x18214B4B), UINT32_C(0xE31784A3), UINT32_C(0xCBEC7DE2) },
18402           { UINT32_C(0x0116FDF3), UINT32_C(0x96F0533F), UINT32_C(0x5C8F5EE1),
18403             UINT32_C(0x68911C90), UINT32_C(0xD568603A), UINT32_C(0x7DE9A3AE),
18404             UINT32_C(0x6A3AD7B7), UINT32_C(0x3F56C52C), UINT32_C(0x670B4D0E),
18405             UINT32_C(0x5BE9AFCA), UINT32_C(0x375DFE2F), UINT32_C(0x628BFEEE) } },
18406         { { UINT32_C(0xDD4ADDB3), UINT32_C(0x97DAE81B), UINT32_C(0x8704761B),
18407             UINT32_C(0x12D2CF4E), UINT32_C(0x3247788D), UINT32_C(0x5E820B40),
18408             UINT32_C(0x0051CA80), UINT32_C(0x82234B62), UINT32_C(0x6CB5EA74),
18409             UINT32_C(0x0C62704D), UINT32_C(0x23941593), UINT32_C(0xDE560420) },
18410           { UINT32_C(0xF1B04145), UINT32_C(0xB3912A3C), UINT32_C(0xAF93688D),
18411             UINT32_C(0xE3967CD7), UINT32_C(0x58DABB4B), UINT32_C(0x2E2DCD2F),
18412             UINT32_C(0x0E303911), UINT32_C(0x6564836F), UINT32_C(0xECE07C5C),
18413             UINT32_C(0x1F10F19B), UINT32_C(0xD8919126), UINT32_C(0xB47F07EE) } },
18414         { { UINT32_C(0xE9A2EEC9), UINT32_C(0xE3545085), UINT32_C(0x2C8E51FE),
18415             UINT32_C(0x81866A97), UINT32_C(0x50027243), UINT32_C(0xD2BA7DB5),
18416             UINT32_C(0x4AE87DE4), UINT32_C(0x29DAEAB5), UINT32_C(0x684F9497),
18417             UINT32_C(0x5EF3D4B8), UINT32_C(0x9D5D6873), UINT32_C(0xE2DACE3B) },
18418           { UINT32_C(0xFFD29C9C), UINT32_C(0xF012C951), UINT32_C(0xADBADA14),
18419             UINT32_C(0x48289445), UINT32_C(0x89558C49), UINT32_C(0x8751F50D),
18420             UINT32_C(0x99E35BEE), UINT32_C(0x75511A4F), UINT32_C(0x7D59AA5F),
18421             UINT32_C(0xEF802D6E), UINT32_C(0xA2A795E2), UINT32_C(0x14FCAD65) } },
18422         { { UINT32_C(0x08CB8F2C), UINT32_C(0xC8EB00E8), UINT32_C(0x2B45BD86),
18423             UINT32_C(0x68607532), UINT32_C(0x59969713), UINT32_C(0x7A29B459),
18424             UINT32_C(0xD684201B), UINT32_C(0x5FA15B9B), UINT32_C(0xB9E538EE),
18425             UINT32_C(0x1A853190), UINT32_C(0xD573D043), UINT32_C(0x4150605C) },
18426           { UINT32_C(0xEB9FBB68), UINT32_C(0xEF011D3B), UINT32_C(0x66AE32B6),
18427             UINT32_C(0x67279982), UINT32_C(0x445DE5EC), UINT32_C(0x861B86EA),
18428             UINT32_C(0xA34A50E1), UINT32_C(0x62837D18), UINT32_C(0xBF5F0663),
18429             UINT32_C(0x228C006A), UINT32_C(0x396DB36A), UINT32_C(0xE007FDE7) } },
18430         { { UINT32_C(0x5A916A55), UINT32_C(0xDEE4F881), UINT32_C(0xF39C82CB),
18431             UINT32_C(0x20DC0370), UINT32_C(0x40F09821), UINT32_C(0xD9A71615),
18432             UINT32_C(0xF7273492), UINT32_C(0xD50AD8BF), UINT32_C(0x32E7C4BF),
18433             UINT32_C(0xA06F7D12), UINT32_C(0x4C5CEA36), UINT32_C(0xFA0F6154) },
18434           { UINT32_C(0x5FC49CFE), UINT32_C(0xF4FD9BED), UINT32_C(0xC9291678),
18435             UINT32_C(0xD8CB45D1), UINT32_C(0x7B92C9F2), UINT32_C(0x94DB86CC),
18436             UINT32_C(0x73C81169), UINT32_C(0x09CA5F38), UINT32_C(0xAEED06F0),
18437             UINT32_C(0x109F40B0), UINT32_C(0x14DCAA0A), UINT32_C(0x9F0360B2) } },
18438         { { UINT32_C(0xE12AD3E7), UINT32_C(0x4189B70D), UINT32_C(0x10B06607),
18439             UINT32_C(0x5208ADB2), UINT32_C(0xEE8497FA), UINT32_C(0xEBD8E2A2),
18440             UINT32_C(0xE04F2ECB), UINT32_C(0x61B1BD67), UINT32_C(0x4F3F5F99),
18441             UINT32_C(0x0E2DDA72), UINT32_C(0xF747B16D), UINT32_C(0xD5D96740) },
18442           { UINT32_C(0xA6BF397F), UINT32_C(0x308A48F6), UINT32_C(0x23A93595),
18443             UINT32_C(0x7021C3E5), UINT32_C(0x36470AA0), UINT32_C(0xF10B0229),
18444             UINT32_C(0x4E03295B), UINT32_C(0x7761E8EC), UINT32_C(0x07339770),
18445             UINT32_C(0x16EFEF58), UINT32_C(0x5DA5DAA2), UINT32_C(0x0D55D2DD) } },
18446         { { UINT32_C(0x8A22F87A), UINT32_C(0x915EA6A3), UINT32_C(0x2E5A088E),
18447             UINT32_C(0x191151C1), UINT32_C(0x7F1D5CBE), UINT32_C(0x190252F1),
18448             UINT32_C(0x3B0EC99B), UINT32_C(0xE43F59C3), UINT32_C(0xFF2A6135),
18449             UINT32_C(0xBE8588D4), UINT32_C(0x2ECB4B9F), UINT32_C(0x103877CC) },
18450           { UINT32_C(0x023CF92B), UINT32_C(0x8F4147E5), UINT32_C(0x0CC2085B),
18451             UINT32_C(0xC24384CC), UINT32_C(0xD082D311), UINT32_C(0x6A2DB4A2),
18452             UINT32_C(0xED7BA9AE), UINT32_C(0x06283811), UINT32_C(0x2A8E1592),
18453             UINT32_C(0xE9A3F532), UINT32_C(0x5A59E894), UINT32_C(0xAC20F0F4) } },
18454         { { UINT32_C(0x74AAB4B1), UINT32_C(0x788CAA52), UINT32_C(0x2FEAFC7E),
18455             UINT32_C(0xEB84ABA1), UINT32_C(0xAC04FF77), UINT32_C(0x31DA71DA),
18456             UINT32_C(0x24E4D0BF), UINT32_C(0x39D12EB9), UINT32_C(0x87A34EF8),
18457             UINT32_C(0x4F2F292F), UINT32_C(0xA237A8ED), UINT32_C(0x9B324372) },
18458           { UINT32_C(0x2EE3A82D), UINT32_C(0xBB2D04B1), UINT32_C(0xD18D36B2),
18459             UINT32_C(0xED4FF367), UINT32_C(0xA6EA0138), UINT32_C(0x99D231EE),
18460             UINT32_C(0x4F92E04A), UINT32_C(0x7C2D4F06), UINT32_C(0xCA272FD0),
18461             UINT32_C(0x78A82AB2), UINT32_C(0xAB8CDC32), UINT32_C(0x7EC41340) } },
18462     },
18463     {
18464         { { UINT32_C(0xD2E15A8C), UINT32_C(0xD23658C8), UINT32_C(0x16BA28CA),
18465             UINT32_C(0x23F93DF7), UINT32_C(0x082210F1), UINT32_C(0x6DAB10EC),
18466             UINT32_C(0xBFC36490), UINT32_C(0xFB1ADD91), UINT32_C(0x9A4F2D14),
18467             UINT32_C(0xEDA8B02F), UINT32_C(0x56560443), UINT32_C(0x9060318C) },
18468           { UINT32_C(0x64711AB2), UINT32_C(0x6C01479E), UINT32_C(0xE337EB85),
18469             UINT32_C(0x41446FC7), UINT32_C(0x71888397), UINT32_C(0x4DCF3C1D),
18470             UINT32_C(0x13C34FD2), UINT32_C(0x87A9C04E), UINT32_C(0x510C15AC),
18471             UINT32_C(0xFE0E08EC), UINT32_C(0xC0F495D2), UINT32_C(0xFC0D0413) } },
18472         { { UINT32_C(0x156636C2), UINT32_C(0xEB05C516), UINT32_C(0x090E93FC),
18473             UINT32_C(0x2F613ABA), UINT32_C(0x489576F5), UINT32_C(0xCFD573CD),
18474             UINT32_C(0x535A8D57), UINT32_C(0xE6535380), UINT32_C(0x671436C4),
18475             UINT32_C(0x13947314), UINT32_C(0x5F0A122D), UINT32_C(0x1172FB0C) },
18476           { UINT32_C(0xC12F58F6), UINT32_C(0xAECC7EC1), UINT32_C(0x8E41AFD2),
18477             UINT32_C(0xFE42F957), UINT32_C(0x3D4221AA), UINT32_C(0xDF96F652),
18478             UINT32_C(0x2851996B), UINT32_C(0xFEF5649F), UINT32_C(0xD5CFB67E),
18479             UINT32_C(0x46FB9F26), UINT32_C(0xEF5C4052), UINT32_C(0xB047BFC7) } },
18480         { { UINT32_C(0xF4484374), UINT32_C(0x5CBDC442), UINT32_C(0xF92452EF),
18481             UINT32_C(0x6B156957), UINT32_C(0xC118D02A), UINT32_C(0x58A26886),
18482             UINT32_C(0x75AAF276), UINT32_C(0x87FF74E6), UINT32_C(0xF65F6EC1),
18483             UINT32_C(0xB133BE95), UINT32_C(0x4B1B8D32), UINT32_C(0xA89B6284) },
18484           { UINT32_C(0x09C81004), UINT32_C(0xDD8A8EF3), UINT32_C(0x0CF21991),
18485             UINT32_C(0x7F8225DB), UINT32_C(0x26623FAF), UINT32_C(0xD525A6DB),
18486             UINT32_C(0xBAE15453), UINT32_C(0xF2368D40), UINT32_C(0x84F89FC9),
18487             UINT32_C(0x55D6A84D), UINT32_C(0x86021A3E), UINT32_C(0xAF38358A) } },
18488         { { UINT32_C(0xFF52E280), UINT32_C(0xBD048BDC), UINT32_C(0x526A1795),
18489             UINT32_C(0x8A51D0B2), UINT32_C(0xA985AC0F), UINT32_C(0x40AAA758),
18490             UINT32_C(0xF2C7ACE9), UINT32_C(0x6039BCDC), UINT32_C(0x6AEC347D),
18491             UINT32_C(0x712092CC), UINT32_C(0x6B5ACAB7), UINT32_C(0x7976D090) },
18492           { UINT32_C(0x6EED9617), UINT32_C(0x1EBCF80D), UINT32_C(0xB0F404A4),
18493             UINT32_C(0xB3A63149), UINT32_C(0xD0B610EF), UINT32_C(0x3FDD3D1A),
18494             UINT32_C(0x98C28AC7), UINT32_C(0xDD3F6F94), UINT32_C(0x3A59750F),
18495             UINT32_C(0x650B7794), UINT32_C(0x2D3991AC), UINT32_C(0xEC59BAB1) } },
18496         { { UINT32_C(0x2E552766), UINT32_C(0x01F40E88), UINT32_C(0x66F5354F),
18497             UINT32_C(0x1FE3D509), UINT32_C(0xB3A8EA7F), UINT32_C(0x0E46D006),
18498             UINT32_C(0xF831CD6A), UINT32_C(0xF75AB629), UINT32_C(0x91465119),
18499             UINT32_C(0xDAD808D7), UINT32_C(0x17EF9B10), UINT32_C(0x442405AF) },
18500           { UINT32_C(0x672BDFCB), UINT32_C(0xD5FE0A96), UINT32_C(0x355DBDEC),
18501             UINT32_C(0xA9DFA422), UINT32_C(0x79B25636), UINT32_C(0xFDB79AA1),
18502             UINT32_C(0xEECE8AEC), UINT32_C(0xE7F26FFD), UINT32_C(0x7EDD5AA2),
18503             UINT32_C(0xB5925550), UINT32_C(0x8EB3A6C2), UINT32_C(0x2C8F6FF0) } },
18504         { { UINT32_C(0x757D6136), UINT32_C(0x88887756), UINT32_C(0x88B92E72),
18505             UINT32_C(0xAD9AC183), UINT32_C(0x8785D3EB), UINT32_C(0x92CB2FC4),
18506             UINT32_C(0x9319764B), UINT32_C(0xD1A542FE), UINT32_C(0x626A62F8),
18507             UINT32_C(0xAF4CC78F), UINT32_C(0x26BFFAAE), UINT32_C(0x7F3F5FC9) },
18508           { UINT32_C(0x40AE2231), UINT32_C(0x0A203D43), UINT32_C(0x387898E8),
18509             UINT32_C(0xA8BFD9E0), UINT32_C(0x474B7DDD), UINT32_C(0x1A0C379C),
18510             UINT32_C(0x34FD49EA), UINT32_C(0x03855E0A), UINT32_C(0xB3EF4AE1),
18511             UINT32_C(0x02B26223), UINT32_C(0xE399E0A3), UINT32_C(0x804BD8CF) } },
18512         { { UINT32_C(0xDE865713), UINT32_C(0x11A9F3D0), UINT32_C(0xBDE98821),
18513             UINT32_C(0x81E36B6B), UINT32_C(0x6AA891D0), UINT32_C(0x324996C8),
18514             UINT32_C(0x395682B5), UINT32_C(0x7B95BDC1), UINT32_C(0xC1600563),
18515             UINT32_C(0x47BF2219), UINT32_C(0x643E38B4), UINT32_C(0x7A473F50) },
18516           { UINT32_C(0xF5738288), UINT32_C(0x0911F50A), UINT32_C(0x6F9C415B),
18517             UINT32_C(0xDF947A70), UINT32_C(0x67A067F6), UINT32_C(0xBDB994F2),
18518             UINT32_C(0x88BE96CD), UINT32_C(0x3F4BEC1B), UINT32_C(0xE56DD6D9),
18519             UINT32_C(0x9820E931), UINT32_C(0x0A80F419), UINT32_C(0xB138F14F) } },
18520         { { UINT32_C(0x0429077A), UINT32_C(0xA11A1A8F), UINT32_C(0x10351C68),
18521             UINT32_C(0x2BB1E33D), UINT32_C(0x89459A27), UINT32_C(0x3C25ABFE),
18522             UINT32_C(0x6B8AC774), UINT32_C(0x2D0091B8), UINT32_C(0x3B2415D9),
18523             UINT32_C(0xDAFC7853), UINT32_C(0x9201680D), UINT32_C(0xDE713CF1) },
18524           { UINT32_C(0x68889D57), UINT32_C(0x8E5F445D), UINT32_C(0x60EABF5B),
18525             UINT32_C(0x608B209C), UINT32_C(0xF9CFA408), UINT32_C(0x10EC0ACC),
18526             UINT32_C(0x4D1EE754), UINT32_C(0xD5256B9D), UINT32_C(0x0AA6C18D),
18527             UINT32_C(0xFF866BAB), UINT32_C(0xACB90A45), UINT32_C(0x9D196DB8) } },
18528         { { UINT32_C(0xB9B081B2), UINT32_C(0xA46D76A9), UINT32_C(0x62163C25),
18529             UINT32_C(0xFC743A10), UINT32_C(0x7761C392), UINT32_C(0xCD2A5C8D),
18530             UINT32_C(0xBE808583), UINT32_C(0x39BDDE0B), UINT32_C(0xB98E4DFE),
18531             UINT32_C(0x7C416021), UINT32_C(0x65913A44), UINT32_C(0xF930E563) },
18532           { UINT32_C(0x7585CF3C), UINT32_C(0xC3555F7E), UINT32_C(0x3D6333D5),
18533             UINT32_C(0xC737E383), UINT32_C(0xB430B03D), UINT32_C(0x5B60DBA4),
18534             UINT32_C(0xE7555404), UINT32_C(0x42B715EB), UINT32_C(0x7C7796E3),
18535             UINT32_C(0x571BDF5B), UINT32_C(0x6DB6331F), UINT32_C(0x33DC62C6) } },
18536         { { UINT32_C(0xE61DEE59), UINT32_C(0x3FB9CCB0), UINT32_C(0x18B14DB9),
18537             UINT32_C(0xC5185F23), UINT32_C(0x845EF36C), UINT32_C(0x1B2ADC4F),
18538             UINT32_C(0x5C1A33AB), UINT32_C(0x195D5B50), UINT32_C(0x421F59D2),
18539             UINT32_C(0x8CEA528E), UINT32_C(0xD2931CEA), UINT32_C(0x7DFCCECF) },
18540           { UINT32_C(0x8CF7E3F7), UINT32_C(0x51FFA1D5), UINT32_C(0xBDC9FB43),
18541             UINT32_C(0xF01B7886), UINT32_C(0x261A0D35), UINT32_C(0xD65AB610),
18542             UINT32_C(0x7574A554), UINT32_C(0x84BCBAFD), UINT32_C(0xFAD70208),
18543             UINT32_C(0x4B119956), UINT32_C(0x4FAB5243), UINT32_C(0xDDC329C2) } },
18544         { { UINT32_C(0x9CE92177), UINT32_C(0x1A08AA57), UINT32_C(0xDC2B5C36),
18545             UINT32_C(0x3395E557), UINT32_C(0x394ED04E), UINT32_C(0xFDFE7041),
18546             UINT32_C(0xC6DFCDDE), UINT32_C(0xB797EB24), UINT32_C(0xCB9DE5D6),
18547             UINT32_C(0x284A6B2A), UINT32_C(0x07222765), UINT32_C(0xE0BD95C8) },
18548           { UINT32_C(0x9FE678A7), UINT32_C(0x114A951B), UINT32_C(0x9E4954EC),
18549             UINT32_C(0xE7ECD0BD), UINT32_C(0x79F0B8A9), UINT32_C(0x7D4096FE),
18550             UINT32_C(0x09724FE2), UINT32_C(0xBDB26E9A), UINT32_C(0xF787AF95),
18551             UINT32_C(0x08741AD8), UINT32_C(0x24045AD8), UINT32_C(0x2BF97272) } },
18552         { { UINT32_C(0xA9451D57), UINT32_C(0xAB1FEDD9), UINT32_C(0x483E38C9),
18553             UINT32_C(0xDF4D91DF), UINT32_C(0x24E9CF8E), UINT32_C(0x2D54D311),
18554             UINT32_C(0x7A22EEB6), UINT32_C(0x9C2A5AF8), UINT32_C(0x0A43F123),
18555             UINT32_C(0xBD9861EF), UINT32_C(0x38A18B7B), UINT32_C(0x581EA6A2) },
18556           { UINT32_C(0x296470A3), UINT32_C(0xAF339C85), UINT32_C(0xAFD8203E),
18557             UINT32_C(0xF9603FCD), UINT32_C(0x96763C28), UINT32_C(0x95D05350),
18558             UINT32_C(0x860EC831), UINT32_C(0x15445C16), UINT32_C(0x6867A323),
18559             UINT32_C(0x2AFB8728), UINT32_C(0x0C4838BF), UINT32_C(0x4B152D6D) } },
18560         { { UINT32_C(0x837CACBA), UINT32_C(0x45BA0E4F), UINT32_C(0xC0725275),
18561             UINT32_C(0x7ADB38AE), UINT32_C(0x942D3C28), UINT32_C(0x19C82831),
18562             UINT32_C(0x6D0FE7DD), UINT32_C(0x94F4731D), UINT32_C(0x4898F1E6),
18563             UINT32_C(0xC3C07E13), UINT32_C(0xED410B51), UINT32_C(0x76350EAC) },
18564           { UINT32_C(0xF99AACFC), UINT32_C(0x0FA8BECA), UINT32_C(0x65FAF9CF),
18565             UINT32_C(0x2834D86F), UINT32_C(0x6F3866AF), UINT32_C(0x8E62846A),
18566             UINT32_C(0x3DFD6A2B), UINT32_C(0xDAA9BD4F), UINT32_C(0xA6132655),
18567             UINT32_C(0xC27115BB), UINT32_C(0xBD5A32C2), UINT32_C(0x83972DF7) } },
18568         { { UINT32_C(0xD513B825), UINT32_C(0xA330CB5B), UINT32_C(0xEE37BEC3),
18569             UINT32_C(0xAE18B2D3), UINT32_C(0xF780A902), UINT32_C(0xFC3AB80A),
18570             UINT32_C(0xD607DDF1), UINT32_C(0xD7835BE2), UINT32_C(0x5B6E4C2B),
18571             UINT32_C(0x8120F767), UINT32_C(0x67E78CCB), UINT32_C(0xAA8C3859) },
18572           { UINT32_C(0xAA0ED321), UINT32_C(0xA8DA8CE2), UINT32_C(0xD766341A),
18573             UINT32_C(0xCB8846FD), UINT32_C(0x33DC9D9A), UINT32_C(0xF2A342EE),
18574             UINT32_C(0xD0A18A80), UINT32_C(0xA519E0BE), UINT32_C(0xAF48DF4C),
18575             UINT32_C(0x9CDAA39C), UINT32_C(0x7E0C19EE), UINT32_C(0xA4B500CA) } },
18576         { { UINT32_C(0x8217001B), UINT32_C(0x83A7FD2F), UINT32_C(0x4296A8BA),
18577             UINT32_C(0x4F6FCF06), UINT32_C(0x91619927), UINT32_C(0x7D748643),
18578             UINT32_C(0x941E4D41), UINT32_C(0x174C1075), UINT32_C(0xA64F5A6C),
18579             UINT32_C(0x037EDEBD), UINT32_C(0x6E29DC56), UINT32_C(0xCF64DB3A) },
18580           { UINT32_C(0x37C0B9F4), UINT32_C(0x150B3ACE), UINT32_C(0x7168178B),
18581             UINT32_C(0x1323234A), UINT32_C(0xEF4D1879), UINT32_C(0x1CE47014),
18582             UINT32_C(0x17FB4D5C), UINT32_C(0xA22E3742), UINT32_C(0xD985F794),
18583             UINT32_C(0x69B81822), UINT32_C(0x081D7214), UINT32_C(0x199C21C4) } },
18584         { { UINT32_C(0x8F04B4D2), UINT32_C(0x160BC7A1), UINT32_C(0xB10DE174),
18585             UINT32_C(0x79CA81DD), UINT32_C(0x2DA1E9C7), UINT32_C(0xE2A280B0),
18586             UINT32_C(0x1D6A0A29), UINT32_C(0xB4F6BD99), UINT32_C(0x1C5B8F27),
18587             UINT32_C(0x57CF3EDD), UINT32_C(0x158C2FD4), UINT32_C(0x7E34FC57) },
18588           { UINT32_C(0xCAC93459), UINT32_C(0x828CFD89), UINT32_C(0xB7AF499F),
18589             UINT32_C(0x9E631B6F), UINT32_C(0xDA26C135), UINT32_C(0xF4DC8BC0),
18590             UINT32_C(0x37186735), UINT32_C(0x6128ED39), UINT32_C(0x67BF0BA5),
18591             UINT32_C(0xBB45538B), UINT32_C(0x0064A3AB), UINT32_C(0x1ADDD4C1) } },
18592     },
18593     {
18594         { { UINT32_C(0xDD14D47E), UINT32_C(0xC32730E8), UINT32_C(0xC0F01E0F),
18595             UINT32_C(0xCDC1FD42), UINT32_C(0x3F5CD846), UINT32_C(0x2BACFDBF),
18596             UINT32_C(0x7272D4DD), UINT32_C(0x45F36416), UINT32_C(0x5EB75776),
18597             UINT32_C(0xDD813A79), UINT32_C(0x50997BE2), UINT32_C(0xB57885E4) },
18598           { UINT32_C(0xDB8C9829), UINT32_C(0xDA054E2B), UINT32_C(0xAAB5A594),
18599             UINT32_C(0x4161D820), UINT32_C(0x026116A3), UINT32_C(0x4C428F31),
18600             UINT32_C(0xDCD85E91), UINT32_C(0x372AF9A0), UINT32_C(0x673ADC2D),
18601             UINT32_C(0xFDA6E903), UINT32_C(0xA8DB59E6), UINT32_C(0x4526B8AC) } },
18602         { { UINT32_C(0xE23A8472), UINT32_C(0x68FE359D), UINT32_C(0x4CE3C101),
18603             UINT32_C(0x43EB12BD), UINT32_C(0xFC704935), UINT32_C(0x0EC652C3),
18604             UINT32_C(0x52E4E22D), UINT32_C(0x1EEFF1F9), UINT32_C(0x083E3ADA),
18605             UINT32_C(0xBA6777CB), UINT32_C(0x8BEFC871), UINT32_C(0xAB52D7DC) },
18606           { UINT32_C(0x497CBD59), UINT32_C(0x4EDE689F), UINT32_C(0x27577DD9),
18607             UINT32_C(0xC8AE42B9), UINT32_C(0x7AB83C27), UINT32_C(0xE0F08051),
18608             UINT32_C(0x2C8C1F48), UINT32_C(0x1F3D5F25), UINT32_C(0xAF241AAC),
18609             UINT32_C(0x57991607), UINT32_C(0xB8A337E0), UINT32_C(0xC4458B0A) } },
18610         { { UINT32_C(0x51DD1BA9), UINT32_C(0x3DBB3FA6), UINT32_C(0x545E960B),
18611             UINT32_C(0xE53C1C4D), UINT32_C(0x793CE803), UINT32_C(0x35AC6574),
18612             UINT32_C(0x83DBCE4F), UINT32_C(0xB2697DC7), UINT32_C(0xE13CF6B0),
18613             UINT32_C(0xE35C5BF2), UINT32_C(0xB0C4A164), UINT32_C(0x35034280) },
18614           { UINT32_C(0xD9C0D3C1), UINT32_C(0xAA490908), UINT32_C(0xCB4D2E90),
18615             UINT32_C(0x2CCE614D), UINT32_C(0x54D504E4), UINT32_C(0xF646E96C),
18616             UINT32_C(0xB73310A3), UINT32_C(0xD74E7541), UINT32_C(0x18BDE5DA),
18617             UINT32_C(0xEAD71596), UINT32_C(0xAA09AEF7), UINT32_C(0x96E7F4A8) } },
18618         { { UINT32_C(0x5D6E5F48), UINT32_C(0xA8393A24), UINT32_C(0xF9175CE8),
18619             UINT32_C(0x2C8D7EA2), UINT32_C(0x55A20268), UINT32_C(0xD8824E02),
18620             UINT32_C(0xA446BCC6), UINT32_C(0x9DD9A272), UINT32_C(0x5351499B),
18621             UINT32_C(0xC929CDED), UINT32_C(0xCFE76535), UINT32_C(0xEA5AD9EC) },
18622           { UINT32_C(0xDC32D001), UINT32_C(0x26F3D7D9), UINT32_C(0x43EB9689),
18623             UINT32_C(0x51C3BE83), UINT32_C(0x759E6DDB), UINT32_C(0x91FDCC06),
18624             UINT32_C(0xE302B891), UINT32_C(0xAC2E1904), UINT32_C(0xC207E1F7),
18625             UINT32_C(0xAD25C645), UINT32_C(0xAB3DEB4A), UINT32_C(0x28A70F0D) } },
18626         { { UINT32_C(0x03BEA8F1), UINT32_C(0x922D7F97), UINT32_C(0x584570BE),
18627             UINT32_C(0x3AD820D4), UINT32_C(0x3CD46B43), UINT32_C(0x0CE0A850),
18628             UINT32_C(0xAE66743D), UINT32_C(0x4C07911F), UINT32_C(0xFDA60023),
18629             UINT32_C(0x66519EB9), UINT32_C(0xEC2ACD9C), UINT32_C(0x7F83004B) },
18630           { UINT32_C(0xC3117EAD), UINT32_C(0x001E0B80), UINT32_C(0x0722BA25),
18631             UINT32_C(0xBB72D541), UINT32_C(0x6E9A5078), UINT32_C(0x3AF7DB96),
18632             UINT32_C(0x701B6B4C), UINT32_C(0x86C5774E), UINT32_C(0x37824DB5),
18633             UINT32_C(0xBD2C0E8E), UINT32_C(0xBFAC286D), UINT32_C(0x3AE3028C) } },
18634         { { UINT32_C(0xA33E071B), UINT32_C(0x83D4D4A8), UINT32_C(0x61444BB5),
18635             UINT32_C(0x881C0A92), UINT32_C(0x520E3BC3), UINT32_C(0xEEA1E292),
18636             UINT32_C(0x2AAAB729), UINT32_C(0x5A5F4C3C), UINT32_C(0xE63C7C94),
18637             UINT32_C(0x0B766C5E), UINT32_C(0xBB2CC79C), UINT32_C(0x62BB8A9F) },
18638           { UINT32_C(0xAA5DC49D), UINT32_C(0x97ADC7D2), UINT32_C(0x31718681),
18639             UINT32_C(0x30CC26B3), UINT32_C(0x56E86EDE), UINT32_C(0xAC86E6FF),
18640             UINT32_C(0xCD52F7F2), UINT32_C(0x37BCA7A2), UINT32_C(0x9CE6D87F),
18641             UINT32_C(0x734D2C94), UINT32_C(0xC2F7E0CA), UINT32_C(0x06A71D71) } },
18642         { { UINT32_C(0xC6357D33), UINT32_C(0x559DCF75), UINT32_C(0x652517DE),
18643             UINT32_C(0x4616D940), UINT32_C(0x1CCF207B), UINT32_C(0x3D576B98),
18644             UINT32_C(0x1979F631), UINT32_C(0x51E2D1EF), UINT32_C(0x06AE8296),
18645             UINT32_C(0x57517DDD), UINT32_C(0xD6E7151F), UINT32_C(0x309A3D7F) },
18646           { UINT32_C(0x0E3A6FE5), UINT32_C(0xBA2A23E6), UINT32_C(0xD28B22C3),
18647             UINT32_C(0x76CF674A), UINT32_C(0xF8B808C3), UINT32_C(0xD235AD07),
18648             UINT32_C(0x6B71213A), UINT32_C(0x7BBF4C58), UINT32_C(0x93271EBB),
18649             UINT32_C(0x0676792E), UINT32_C(0x05B1FC31), UINT32_C(0x2CFD2C76) } },
18650         { { UINT32_C(0x37A450F5), UINT32_C(0x4258E5C0), UINT32_C(0x52D2B118),
18651             UINT32_C(0xC3245F1B), UINT32_C(0x82BC5963), UINT32_C(0x6DF7B484),
18652             UINT32_C(0x9C273D1E), UINT32_C(0xE520DA4D), UINT32_C(0x2C3010E5),
18653             UINT32_C(0xED78E012), UINT32_C(0x3C1D4C05), UINT32_C(0x11222948) },
18654           { UINT32_C(0xC692B490), UINT32_C(0xE3DAE5AF), UINT32_C(0xC197F793),
18655             UINT32_C(0x3272BD10), UINT32_C(0xE709ACAA), UINT32_C(0xF7EAE411),
18656             UINT32_C(0x778270A6), UINT32_C(0x00B0C95F), UINT32_C(0x220D4350),
18657             UINT32_C(0x4DA76EE1), UINT32_C(0xAB71E308), UINT32_C(0x521E1461) } },
18658         { { UINT32_C(0x343196A3), UINT32_C(0x7B654323), UINT32_C(0xB0C95250),
18659             UINT32_C(0x35D442AD), UINT32_C(0xE264FF17), UINT32_C(0x38AF50E6),
18660             UINT32_C(0x2030D2EA), UINT32_C(0x28397A41), UINT32_C(0xF74EEDA1),
18661             UINT32_C(0x8F1D84E9), UINT32_C(0xE6FB3C52), UINT32_C(0xD521F92D) },
18662           { UINT32_C(0x95733811), UINT32_C(0xAF358D77), UINT32_C(0x93ABFE94),
18663             UINT32_C(0xEBFDDD01), UINT32_C(0xD18D99DE), UINT32_C(0x05D8A028),
18664             UINT32_C(0xB5D5BDD9), UINT32_C(0x5A664019), UINT32_C(0x2AA12FE8),
18665             UINT32_C(0x3DF17282), UINT32_C(0xB889A28E), UINT32_C(0xB42E006F) } },
18666         { { UINT32_C(0xBC35CB1A), UINT32_C(0xCF10E97D), UINT32_C(0x994DEDC5),
18667             UINT32_C(0xC70A7BBD), UINT32_C(0x37D04FB9), UINT32_C(0x76A5327C),
18668             UINT32_C(0xA76E0CDA), UINT32_C(0x87539F76), UINT32_C(0xCD60A6B1),
18669             UINT32_C(0xE9FE493F), UINT32_C(0x132F01C0), UINT32_C(0xA4574796) },
18670           { UINT32_C(0xDB70B167), UINT32_C(0xC43B85EB), UINT32_C(0x98551DFA),
18671             UINT32_C(0x81D5039A), UINT32_C(0x1D979FA4), UINT32_C(0x6B56FBE9),
18672             UINT32_C(0x8615098F), UINT32_C(0x49714FD7), UINT32_C(0x94DECAB5),
18673             UINT32_C(0xB10E1CEA), UINT32_C(0x480EF6E3), UINT32_C(0x8342EBA3) } },
18674         { { UINT32_C(0xB3677288), UINT32_C(0xE1E030B0), UINT32_C(0x8D5CE3AF),
18675             UINT32_C(0x2978174C), UINT32_C(0xF7B2DE98), UINT32_C(0xAFC0271C),
18676             UINT32_C(0xB99C20B5), UINT32_C(0x745BC6F3), UINT32_C(0x1E3BB4E5),
18677             UINT32_C(0x9F6EDCED), UINT32_C(0x73C8C1FC), UINT32_C(0x58D3EE4E) },
18678           { UINT32_C(0x7FD30124), UINT32_C(0x1F3535F4), UINT32_C(0x5FA62502),
18679             UINT32_C(0xF366AC70), UINT32_C(0x965363FE), UINT32_C(0x4C4C1FDD),
18680             UINT32_C(0x1DE2CA2B), UINT32_C(0x8B2C7777), UINT32_C(0x882F1173),
18681             UINT32_C(0x0CB54743), UINT32_C(0x71343331), UINT32_C(0x94B6B8C0) } },
18682         { { UINT32_C(0x65B8B35B), UINT32_C(0x75AF0141), UINT32_C(0x4670A1F5),
18683             UINT32_C(0x6D7B8485), UINT32_C(0xA3B6D376), UINT32_C(0x6EAA3A47),
18684             UINT32_C(0xCB3E5B66), UINT32_C(0xD7E673D2), UINT32_C(0x9589AB38),
18685             UINT32_C(0xC0338E6C), UINT32_C(0x09440FAA), UINT32_C(0x4BE26CB3) },
18686           { UINT32_C(0x394F9AA3), UINT32_C(0x82CB05E7), UINT32_C(0x7F7792EA),
18687             UINT32_C(0xC45C8A8A), UINT32_C(0xB687DC70), UINT32_C(0x37E5E33B),
18688             UINT32_C(0xDFE48E49), UINT32_C(0x63853219), UINT32_C(0x6D0E5C8C),
18689             UINT32_C(0x087951C1), UINT32_C(0x2BC27310), UINT32_C(0x7696A8C7) } },
18690         { { UINT32_C(0xB67E834A), UINT32_C(0xA05736D5), UINT32_C(0x9098D42A),
18691             UINT32_C(0xDD2AA0F2), UINT32_C(0x49C69DDC), UINT32_C(0x09F0C1D8),
18692             UINT32_C(0x8FF0F0F3), UINT32_C(0x81F8BC1C), UINT32_C(0x03037775),
18693             UINT32_C(0x36FD3A4F), UINT32_C(0x4B06DF5C), UINT32_C(0x8286717D) },
18694           { UINT32_C(0xA9079EA2), UINT32_C(0xB878F496), UINT32_C(0xD7DC796D),
18695             UINT32_C(0xA5642426), UINT32_C(0x67FDAC2B), UINT32_C(0x29B9351A),
18696             UINT32_C(0x1D543CDE), UINT32_C(0x93774C0E), UINT32_C(0x1A8E31C4),
18697             UINT32_C(0x4F8793BA), UINT32_C(0x6C94798A), UINT32_C(0x7C9F3F3A) } },
18698         { { UINT32_C(0xCB8ECDB8), UINT32_C(0x23C5AD11), UINT32_C(0x485A6A02),
18699             UINT32_C(0x1E88D25E), UINT32_C(0xF1E268AE), UINT32_C(0xB27CBE84),
18700             UINT32_C(0xF4CD0475), UINT32_C(0xDDA80238), UINT32_C(0x49F8EB1B),
18701             UINT32_C(0x4F88857B), UINT32_C(0x52FB07F9), UINT32_C(0x91B1221F) },
18702           { UINT32_C(0x8637FA67), UINT32_C(0x7CE97460), UINT32_C(0x632198D8),
18703             UINT32_C(0x528B3CF4), UINT32_C(0xF6623769), UINT32_C(0x33365AB3),
18704             UINT32_C(0x3A83A30F), UINT32_C(0x6FEBCFFF), UINT32_C(0x9BD341EB),
18705             UINT32_C(0x398F4C99), UINT32_C(0xB33A333C), UINT32_C(0x180712BB) } },
18706         { { UINT32_C(0xD93429E7), UINT32_C(0x2B8655A2), UINT32_C(0x75C8B9EE),
18707             UINT32_C(0x99D600BB), UINT32_C(0x88FCA6CD), UINT32_C(0x9FC1AF8B),
18708             UINT32_C(0x7C311F80), UINT32_C(0x2FB53386), UINT32_C(0xE8A71EEE),
18709             UINT32_C(0x20743ECB), UINT32_C(0xE848B49E), UINT32_C(0xEC3713C4) },
18710           { UINT32_C(0xBB886817), UINT32_C(0x5B2037B5), UINT32_C(0x307DBAF4),
18711             UINT32_C(0x40EF5AC2), UINT32_C(0x1B3F643D), UINT32_C(0xC2888AF2),
18712             UINT32_C(0x9D5A4190), UINT32_C(0x0D8252E1), UINT32_C(0x2DB52A8A),
18713             UINT32_C(0x06CC0BEC), UINT32_C(0xAB94E969), UINT32_C(0xB84B98EA) } },
18714         { { UINT32_C(0xA0321E0E), UINT32_C(0x2E7AC078), UINT32_C(0xEF3DAAB6),
18715             UINT32_C(0x5C5A1168), UINT32_C(0xADDD454A), UINT32_C(0xD2D573CB),
18716             UINT32_C(0x36259CC7), UINT32_C(0x27E149E2), UINT32_C(0xA63F47F1),
18717             UINT32_C(0x1EDFD469), UINT32_C(0xF1BD2CFD), UINT32_C(0x039AD674) },
18718           { UINT32_C(0x3077D3CC), UINT32_C(0xBFA633FC), UINT32_C(0x2FD64E9F),
18719             UINT32_C(0x14A7C82F), UINT32_C(0x9D824999), UINT32_C(0xAAA65014),
18720             UINT32_C(0x21760F2E), UINT32_C(0x41AB113B), UINT32_C(0x1CAE260A),
18721             UINT32_C(0x23E646C5), UINT32_C(0x68DC5159), UINT32_C(0x08062C8F) } },
18722     },
18723     {
18724         { { UINT32_C(0x204BE028), UINT32_C(0x2E7D0A16), UINT32_C(0xD0E41851),
18725             UINT32_C(0x4F1D082E), UINT32_C(0x3EB317F9), UINT32_C(0x15F1DDC6),
18726             UINT32_C(0x5ADF71D7), UINT32_C(0xF0275071), UINT32_C(0xEE858BC3),
18727             UINT32_C(0x2CE33C2E), UINT32_C(0xDA73B71A), UINT32_C(0xA24C76D1) },
18728           { UINT32_C(0x6C70C483), UINT32_C(0x9EF6A70A), UINT32_C(0x05CF9612),
18729             UINT32_C(0xEFCF1705), UINT32_C(0x7502DE64), UINT32_C(0x9F5BF5A6),
18730             UINT32_C(0xA4701973), UINT32_C(0xD11122A1), UINT32_C(0xA2EA7B24),
18731             UINT32_C(0x82CFAAC2), UINT32_C(0x0A4582E1), UINT32_C(0x6CAD67CC) } },
18732         { { UINT32_C(0xB4DC8600), UINT32_C(0x597A26FF), UINT32_C(0xF9288555),
18733             UINT32_C(0x264A09F3), UINT32_C(0x5C27F5F6), UINT32_C(0x0B06AFF6),
18734             UINT32_C(0xD8D544E6), UINT32_C(0xCE5AB665), UINT32_C(0x99275C32),
18735             UINT32_C(0x92F031BE), UINT32_C(0xF42E0E7C), UINT32_C(0xAF51C5BB) },
18736           { UINT32_C(0x1E37B36D), UINT32_C(0x5BB28B06), UINT32_C(0x8473543A),
18737             UINT32_C(0x583FBA6A), UINT32_C(0xF93FB7DC), UINT32_C(0xE73FD299),
18738             UINT32_C(0x6E2CCAD9), UINT32_C(0xFCD999A8), UINT32_C(0x334D4F57),
18739             UINT32_C(0xB8C8A6DF), UINT32_C(0x9A2ACC9B), UINT32_C(0x5ADB28DD) } },
18740         { { UINT32_C(0x111792B9), UINT32_C(0x5ADF3D9A), UINT32_C(0x4F1E0D09),
18741             UINT32_C(0x1C77A305), UINT32_C(0xA82D3736), UINT32_C(0xF9FBCE33),
18742             UINT32_C(0x718C8AA3), UINT32_C(0xF307823E), UINT32_C(0x416CCF69),
18743             UINT32_C(0x860578CF), UINT32_C(0x1EF8465B), UINT32_C(0xB942ADD8) },
18744           { UINT32_C(0xCD9472E1), UINT32_C(0x9EE0CF97), UINT32_C(0xB01528A8),
18745             UINT32_C(0xE6792EEF), UINT32_C(0xC09DA90B), UINT32_C(0xF99B9A8D),
18746             UINT32_C(0xCBF3CCB8), UINT32_C(0x1F521C2D), UINT32_C(0x91A62632),
18747             UINT32_C(0x6BF66948), UINT32_C(0x854FE9DA), UINT32_C(0xCC7A9CEB) } },
18748         { { UINT32_C(0x491CCB92), UINT32_C(0x46303171), UINT32_C(0x2771235B),
18749             UINT32_C(0xA80A8C0D), UINT32_C(0xF172C7CF), UINT32_C(0xD8E497FF),
18750             UINT32_C(0x35B193CF), UINT32_C(0x7F7009D7), UINT32_C(0xF19DF4BC),
18751             UINT32_C(0x6B9FD3F7), UINT32_C(0xB46F1E37), UINT32_C(0xADA548C3) },
18752           { UINT32_C(0xC7A20270), UINT32_C(0x87C6EAA9), UINT32_C(0xAE78EF99),
18753             UINT32_C(0xEF2245D6), UINT32_C(0x539EAB95), UINT32_C(0x2A121042),
18754             UINT32_C(0x79B8F5CC), UINT32_C(0x29A6D5D7), UINT32_C(0xB77840DC),
18755             UINT32_C(0x33803A10), UINT32_C(0x11A6A30F), UINT32_C(0xFEDD3A70) } },
18756         { { UINT32_C(0x142403D1), UINT32_C(0xFA070E22), UINT32_C(0x15C6F7F5),
18757             UINT32_C(0x68FF3160), UINT32_C(0x223A0CE8), UINT32_C(0xE09F04E6),
18758             UINT32_C(0x53E14183), UINT32_C(0x22BBD018), UINT32_C(0xCF45B75B),
18759             UINT32_C(0x35D9FAFC), UINT32_C(0x7ECEEC88), UINT32_C(0x3A34819D) },
18760           { UINT32_C(0xD33262D2), UINT32_C(0xD9CF7568), UINT32_C(0x841D1505),
18761             UINT32_C(0x431036D5), UINT32_C(0x9EB2A79A), UINT32_C(0x0C800565),
18762             UINT32_C(0x5F7EDC6A), UINT32_C(0x8E77D9F0), UINT32_C(0x65E800AA),
18763             UINT32_C(0x19E12D05), UINT32_C(0xB7784E7C), UINT32_C(0x335C8D36) } },
18764         { { UINT32_C(0x6484FD40), UINT32_C(0x8B2FC4E9), UINT32_C(0xA35D24EA),
18765             UINT32_C(0xEE702764), UINT32_C(0xB871C3F3), UINT32_C(0x15B28AC7),
18766             UINT32_C(0xE097047F), UINT32_C(0x805B4048), UINT32_C(0x647CAD2F),
18767             UINT32_C(0xD6F1B8DF), UINT32_C(0xDC7DD67F), UINT32_C(0xF1D5B458) },
18768           { UINT32_C(0x25148803), UINT32_C(0x324C529C), UINT32_C(0x21274FAF),
18769             UINT32_C(0xF6185EBE), UINT32_C(0x95148B55), UINT32_C(0xAF14751E),
18770             UINT32_C(0x28F284F4), UINT32_C(0x283ED89D), UINT32_C(0x4CBEBF1A),
18771             UINT32_C(0x93AD20E7), UINT32_C(0x882935E1), UINT32_C(0x5F6EC65D) } },
18772         { { UINT32_C(0xA4DCEFE9), UINT32_C(0xE222EBA4), UINT32_C(0xEC1CEB74),
18773             UINT32_C(0x63AD235F), UINT32_C(0xE05B18E7), UINT32_C(0x2E0BF749),
18774             UINT32_C(0xB48BDD87), UINT32_C(0x547BD050), UINT32_C(0xF5AA2FC4),
18775             UINT32_C(0x0490C970), UINT32_C(0x2B431390), UINT32_C(0xCED5E4CF) },
18776           { UINT32_C(0x51D2898E), UINT32_C(0x07D82704), UINT32_C(0x083B57D4),
18777             UINT32_C(0x44B72442), UINT32_C(0x5037FCE8), UINT32_C(0xA4ADA230),
18778             UINT32_C(0x50510DA6), UINT32_C(0x55F7905E), UINT32_C(0x8D890A98),
18779             UINT32_C(0xD8EE724F), UINT32_C(0x11B85640), UINT32_C(0x925A8E7C) } },
18780         { { UINT32_C(0x1CA459ED), UINT32_C(0x5BFA10CD), UINT32_C(0x6DCF56BF),
18781             UINT32_C(0x593F085A), UINT32_C(0xC0579C3E), UINT32_C(0xE6F0AD9B),
18782             UINT32_C(0x2527C1AD), UINT32_C(0xC11C95A2), UINT32_C(0xCF1CB8B3),
18783             UINT32_C(0x7CFA71E1), UINT32_C(0x1D6DC79D), UINT32_C(0xEDCFF833) },
18784           { UINT32_C(0x432521C9), UINT32_C(0x581C4BBE), UINT32_C(0x144E11A0),
18785             UINT32_C(0xBF620096), UINT32_C(0xBE3A107B), UINT32_C(0x54C38B71),
18786             UINT32_C(0xE2606EC0), UINT32_C(0xED555E37), UINT32_C(0xD721D034),
18787             UINT32_C(0x3FB148B8), UINT32_C(0x0091BC90), UINT32_C(0x79D53DAD) } },
18788         { { UINT32_C(0xB7082C80), UINT32_C(0xE32068C5), UINT32_C(0x7A144E22),
18789             UINT32_C(0x4140FFD2), UINT32_C(0x9EDD9E86), UINT32_C(0x5811D2F0),
18790             UINT32_C(0xC572C465), UINT32_C(0xCDD79B5F), UINT32_C(0xC97BF450),
18791             UINT32_C(0x3563FED1), UINT32_C(0xF2CE5C9C), UINT32_C(0x985C1444) },
18792           { UINT32_C(0x99950F1C), UINT32_C(0x260AE797), UINT32_C(0x765E9DED),
18793             UINT32_C(0x659F4F40), UINT32_C(0x2E3BC286), UINT32_C(0x2A412D66),
18794             UINT32_C(0xF87E0C82), UINT32_C(0xE865E62C), UINT32_C(0x6C05E7D7),
18795             UINT32_C(0xD63D3A9A), UINT32_C(0x8686F89A), UINT32_C(0x96725D67) } },
18796         { { UINT32_C(0xAB7EA0F5), UINT32_C(0xC99A5E4C), UINT32_C(0xC5393FA9),
18797             UINT32_C(0xC9860A1A), UINT32_C(0x8FDEEFC0), UINT32_C(0x9ED83CEE),
18798             UINT32_C(0x5ED6869A), UINT32_C(0xE3EA8B4C), UINT32_C(0xD2EED3A9),
18799             UINT32_C(0x89A85463), UINT32_C(0xE421A622), UINT32_C(0x2CD91B6D) },
18800           { UINT32_C(0x2C91C41D), UINT32_C(0x6FEC1EF3), UINT32_C(0x8171037D),
18801             UINT32_C(0xB1540D1F), UINT32_C(0x1C010E5B), UINT32_C(0x4FE4991A),
18802             UINT32_C(0xFC1C7368), UINT32_C(0x28A3469F), UINT32_C(0xAF118781),
18803             UINT32_C(0xE1EEECD1), UINT32_C(0x99EF3531), UINT32_C(0x1BCCB977) } },
18804         { { UINT32_C(0xC4DAB7B8), UINT32_C(0x63D3B638), UINT32_C(0x3F7F5BAB),
18805             UINT32_C(0xD92133B6), UINT32_C(0x09FB6069), UINT32_C(0x2573EE20),
18806             UINT32_C(0x890A1686), UINT32_C(0x771FABDF), UINT32_C(0xA77AFFF5),
18807             UINT32_C(0x1D0BA21F), UINT32_C(0xBA3DD2C0), UINT32_C(0x83145FCC) },
18808           { UINT32_C(0x2D115C20), UINT32_C(0xFA073A81), UINT32_C(0x19176F27),
18809             UINT32_C(0x6AB7A9D3), UINT32_C(0x9AC639EE), UINT32_C(0xAF62CF93),
18810             UINT32_C(0x2CCD1319), UINT32_C(0xF73848B9), UINT32_C(0x3C71659D),
18811             UINT32_C(0x3B613234), UINT32_C(0x10AB3826), UINT32_C(0xF8E0011C) } },
18812         { { UINT32_C(0x0282FFA5), UINT32_C(0x0501F036), UINT32_C(0xD9E0F15A),
18813             UINT32_C(0xC39A5CF4), UINT32_C(0x9A3D1F3C), UINT32_C(0x48D8C729),
18814             UINT32_C(0x64E18EDA), UINT32_C(0xB5FC136B), UINT32_C(0x7E58FEF0),
18815             UINT32_C(0xE81B53D9), UINT32_C(0xF7B0F28D), UINT32_C(0x0D534055) },
18816           { UINT32_C(0x7A80619B), UINT32_C(0x47B8DE12), UINT32_C(0x81F9E55D),
18817             UINT32_C(0x60E2A2B3), UINT32_C(0xCF564CC5), UINT32_C(0x6E9624D7),
18818             UINT32_C(0x6BDEDFFF), UINT32_C(0xFDF18A21), UINT32_C(0xC0D5FC82),
18819             UINT32_C(0x3787DE38), UINT32_C(0x497A6B11), UINT32_C(0xCBCAA347) } },
18820         { { UINT32_C(0xB226465A), UINT32_C(0x6E7EF35E), UINT32_C(0x5F8A2BAF),
18821             UINT32_C(0x4B469919), UINT32_C(0x1120D93F), UINT32_C(0x44B3A3CF),
18822             UINT32_C(0x68F34AD1), UINT32_C(0xB052C8B6), UINT32_C(0xEF7632DD),
18823             UINT32_C(0x27EC574B), UINT32_C(0x685DE26F), UINT32_C(0xAEBEA108) },
18824           { UINT32_C(0xE39424B6), UINT32_C(0xDA33236B), UINT32_C(0xEBCC22AD),
18825             UINT32_C(0xB1BD94A9), UINT32_C(0x2CDFB5D5), UINT32_C(0x6DDEE6CC),
18826             UINT32_C(0x6F14069A), UINT32_C(0xBDAED927), UINT32_C(0x2A247CB7),
18827             UINT32_C(0x2ADE427C), UINT32_C(0xED156A40), UINT32_C(0xCE96B436) } },
18828         { { UINT32_C(0x81F3F819), UINT32_C(0xDDDCA360), UINT32_C(0xD419B96A),
18829             UINT32_C(0x4AF4A49F), UINT32_C(0x7CB966B9), UINT32_C(0x746C6525),
18830             UINT32_C(0x6F610023), UINT32_C(0x01E39088), UINT32_C(0x98DD33FC),
18831             UINT32_C(0x05ECB38D), UINT32_C(0x8F84EDF4), UINT32_C(0x962B971B) },
18832           { UINT32_C(0x6A6F2602), UINT32_C(0xEB32C0A5), UINT32_C(0x562D60F2),
18833             UINT32_C(0xF026AF71), UINT32_C(0x84615FAB), UINT32_C(0xA9E246BF),
18834             UINT32_C(0x75DBAE01), UINT32_C(0xAD967092), UINT32_C(0x3ECE5D07),
18835             UINT32_C(0xBF97C79B), UINT32_C(0x74EAA3D3), UINT32_C(0xE06266C7) } },
18836         { { UINT32_C(0x2E6DBB6E), UINT32_C(0x161A0157), UINT32_C(0x60FA8F47),
18837             UINT32_C(0xB8AF4904), UINT32_C(0x00197F22), UINT32_C(0xE4336C44),
18838             UINT32_C(0x9CEDCE0E), UINT32_C(0xF811AFFA), UINT32_C(0xF94C2EF1),
18839             UINT32_C(0xB1DD7685), UINT32_C(0xCA957BB0), UINT32_C(0xEEDC0F4B) },
18840           { UINT32_C(0x4AA76BB1), UINT32_C(0xD319FD57), UINT32_C(0x16CD7CCB),
18841             UINT32_C(0xB3525D7C), UINT32_C(0xA97DD072), UINT32_C(0x7B22DA9C),
18842             UINT32_C(0x38A83E71), UINT32_C(0x99DB84BD), UINT32_C(0xC0EDD8BE),
18843             UINT32_C(0x4939BC8D), UINT32_C(0x903A932C), UINT32_C(0x06D524EA) } },
18844         { { UINT32_C(0x0E31F639), UINT32_C(0x4BC950EC), UINT32_C(0x6016BE30),
18845             UINT32_C(0xB7ABD3DC), UINT32_C(0x6703DAD0), UINT32_C(0x3B0F4473),
18846             UINT32_C(0x0AC1C4EA), UINT32_C(0xCC405F8B), UINT32_C(0x176C3FEE),
18847             UINT32_C(0x9BED5E57), UINT32_C(0x36AE36C2), UINT32_C(0xF4524810) },
18848           { UINT32_C(0x15D7B503), UINT32_C(0xC1EDBB83), UINT32_C(0xE30F3657),
18849             UINT32_C(0x943B1156), UINT32_C(0x98377805), UINT32_C(0x984E9EEF),
18850             UINT32_C(0x36CF1DEB), UINT32_C(0x291AE7AC), UINT32_C(0xA9F66DF3),
18851             UINT32_C(0xFED8748C), UINT32_C(0xFEA8FA5D), UINT32_C(0xECA758BB) } },
18852     },
18853     {
18854         { { UINT32_C(0x2DD1B249), UINT32_C(0xACC787EF), UINT32_C(0xD82976F1),
18855             UINT32_C(0x736E1030), UINT32_C(0xA01B3649), UINT32_C(0x0A6940FA),
18856             UINT32_C(0xC42341E7), UINT32_C(0xE00B926B), UINT32_C(0xDE8FFD6C),
18857             UINT32_C(0x911508D0), UINT32_C(0x5276B0CB), UINT32_C(0x4DCF8D46) },
18858           { UINT32_C(0xCC3CAD8D), UINT32_C(0x23AD0A90), UINT32_C(0xADED962A),
18859             UINT32_C(0x2A92E54C), UINT32_C(0xF231BFAF), UINT32_C(0x93FBEC4D),
18860             UINT32_C(0x4798987A), UINT32_C(0x9544BC77), UINT32_C(0x08E29F60),
18861             UINT32_C(0x48084E25), UINT32_C(0x32DE5869), UINT32_C(0x0C0D2F43) } },
18862         { { UINT32_C(0x3A9ABC13), UINT32_C(0x6778F970), UINT32_C(0x3D2B166B),
18863             UINT32_C(0xFD014FAC), UINT32_C(0x3C6FED60), UINT32_C(0x1FE4FC78),
18864             UINT32_C(0xAA7C69C5), UINT32_C(0x04295FA8), UINT32_C(0x7C123175),
18865             UINT32_C(0xA01DE56D), UINT32_C(0x3D9A713A), UINT32_C(0x0FA0D3A8) },
18866           { UINT32_C(0xE3E08ADD), UINT32_C(0xA7A6E5E3), UINT32_C(0x1AC58F85),
18867             UINT32_C(0xBD77E94B), UINT32_C(0xB7321A9C), UINT32_C(0x078F6FD2),
18868             UINT32_C(0x911EF6D9), UINT32_C(0x9564601E), UINT32_C(0x415C6BEF),
18869             UINT32_C(0x31C5C1B2), UINT32_C(0xD3212C62), UINT32_C(0xE6C0C91E) } },
18870         { { UINT32_C(0x0D16022F), UINT32_C(0xBA7BD23C), UINT32_C(0x198BE288),
18871             UINT32_C(0xE9CF4750), UINT32_C(0x47DEEC65), UINT32_C(0x304E3169),
18872             UINT32_C(0x96EEB288), UINT32_C(0xCF65B41F), UINT32_C(0x927E9E3B),
18873             UINT32_C(0x17E99C17), UINT32_C(0xF6630A80), UINT32_C(0x82225546) },
18874           { UINT32_C(0xCA067BD9), UINT32_C(0x15122B8A), UINT32_C(0xB77B4E98),
18875             UINT32_C(0xE2673205), UINT32_C(0x9407CA63), UINT32_C(0x13037565),
18876             UINT32_C(0x8B621602), UINT32_C(0x53624F54), UINT32_C(0xEAE4BD06),
18877             UINT32_C(0x96AF2CB1), UINT32_C(0x8FA20829), UINT32_C(0x576ECD1C) } },
18878         { { UINT32_C(0x7E02D2D0), UINT32_C(0xA551CE10), UINT32_C(0x9D13DBC7),
18879             UINT32_C(0x1584ED24), UINT32_C(0x4DA7B6D8), UINT32_C(0x082017AD),
18880             UINT32_C(0xE054BC48), UINT32_C(0x81918A8F), UINT32_C(0x572DC384),
18881             UINT32_C(0x677DB48E), UINT32_C(0x6155484C), UINT32_C(0x2EF82296) },
18882           { UINT32_C(0x41B9C231), UINT32_C(0xC3DB14C6), UINT32_C(0x4A766192),
18883             UINT32_C(0x910A87D1), UINT32_C(0x10AB8E0F), UINT32_C(0x93D5CC86),
18884             UINT32_C(0xAE57CA1B), UINT32_C(0x4194D548), UINT32_C(0x267FC37A),
18885             UINT32_C(0xFAF3A1D6), UINT32_C(0x13B87C97), UINT32_C(0x70EC2364) } },
18886         { { UINT32_C(0x5E12756A), UINT32_C(0x064B565B), UINT32_C(0xAE49C98E),
18887             UINT32_C(0x953B7BD1), UINT32_C(0xF7001D91), UINT32_C(0xE0CE8284),
18888             UINT32_C(0xF31108D0), UINT32_C(0x1546060B), UINT32_C(0x6779B6E2),
18889             UINT32_C(0xDBC2C3F4), UINT32_C(0xE0DD07CF), UINT32_C(0x157AA47D) },
18890           { UINT32_C(0xF23B261E), UINT32_C(0xBF4A1C6F), UINT32_C(0x654F4BE5),
18891             UINT32_C(0x5B8EED30), UINT32_C(0x6B20CCD8), UINT32_C(0xDF5896D3),
18892             UINT32_C(0x559ED23D), UINT32_C(0x56920E2C), UINT32_C(0xFA6E3E27),
18893             UINT32_C(0x901F342E), UINT32_C(0x896CA082), UINT32_C(0x745C747C) } },
18894         { { UINT32_C(0x2944EC84), UINT32_C(0xDBCCD575), UINT32_C(0xA5FF65FE),
18895             UINT32_C(0x54A2A935), UINT32_C(0x1A1319B6), UINT32_C(0x88C92A5E),
18896             UINT32_C(0x82DA96C1), UINT32_C(0x9537C28F), UINT32_C(0x35F93C46),
18897             UINT32_C(0xB6836474), UINT32_C(0x65B0846C), UINT32_C(0xEC526A1D) },
18898           { UINT32_C(0xF382C412), UINT32_C(0x6F12AFBD), UINT32_C(0x9E99FA06),
18899             UINT32_C(0x5EBC81D8), UINT32_C(0x869B93BD), UINT32_C(0x97B5D672),
18900             UINT32_C(0x377E12AA), UINT32_C(0x2983C310), UINT32_C(0x24D681EA),
18901             UINT32_C(0x48759681), UINT32_C(0x287FD767), UINT32_C(0x1E0BD106) } },
18902         { { UINT32_C(0x7231247F), UINT32_C(0x0AC75A3E), UINT32_C(0xEF27AD3A),
18903             UINT32_C(0x65C20DE6), UINT32_C(0xBD02EEE5), UINT32_C(0x87EB6CF1),
18904             UINT32_C(0x00147E03), UINT32_C(0x264ACA7A), UINT32_C(0xAE2A9437),
18905             UINT32_C(0xEBC78581), UINT32_C(0x6316BFA5), UINT32_C(0x9929964E) },
18906           { UINT32_C(0x9AF207EF), UINT32_C(0xDC09E040), UINT32_C(0x0C9D8658),
18907             UINT32_C(0x3ECFFE2D), UINT32_C(0xDFB43D38), UINT32_C(0x547EA735),
18908             UINT32_C(0xD04B1B20), UINT32_C(0x5485247B), UINT32_C(0xBFD8B609),
18909             UINT32_C(0xB18D3F02), UINT32_C(0xCCE73705), UINT32_C(0xEEB3E805) } },
18910         { { UINT32_C(0xDB93850F), UINT32_C(0xDAB1A525), UINT32_C(0x8365B7D5),
18911             UINT32_C(0x18ADAA23), UINT32_C(0x113FC8C7), UINT32_C(0x58485C90),
18912             UINT32_C(0x348AD323), UINT32_C(0x80C3DBB9), UINT32_C(0xE16ADCA1),
18913             UINT32_C(0xAF892FB5), UINT32_C(0x979F005A), UINT32_C(0x2183C879) },
18914           { UINT32_C(0x0643A99E), UINT32_C(0x20FA1A94), UINT32_C(0x1A1609CB),
18915             UINT32_C(0x2741221C), UINT32_C(0x3C2FBDDC), UINT32_C(0x1C1687E5),
18916             UINT32_C(0xD420D6CF), UINT32_C(0xDCCF329E), UINT32_C(0x2B7197D1),
18917             UINT32_C(0x75D5577D), UINT32_C(0xC8729D9C), UINT32_C(0x4C3C3875) } },
18918         { { UINT32_C(0xE5CBDCB9), UINT32_C(0x5E79F995), UINT32_C(0xA742FCC7),
18919             UINT32_C(0x03139824), UINT32_C(0x239EF4A1), UINT32_C(0x6D0C214A),
18920             UINT32_C(0x401A2944), UINT32_C(0x53A27952), UINT32_C(0xC10BCDF0),
18921             UINT32_C(0xF42A1B34), UINT32_C(0x7CF38061), UINT32_C(0x426BAA43) },
18922           { UINT32_C(0xA96AD0C8), UINT32_C(0x16A53139), UINT32_C(0x6BAD5301),
18923             UINT32_C(0x627F1D31), UINT32_C(0x4ACCD627), UINT32_C(0x5AF74877),
18924             UINT32_C(0xB55B0FB8), UINT32_C(0x3C58A1C5), UINT32_C(0xF4399A6A),
18925             UINT32_C(0xFAA57B91), UINT32_C(0xC28094B8), UINT32_C(0xBAD283FB) } },
18926         { { UINT32_C(0x83E10A93), UINT32_C(0xBA32AC61), UINT32_C(0xEC06BDB0),
18927             UINT32_C(0x1C91F6B4), UINT32_C(0x65F60C93), UINT32_C(0x42E6CFBC),
18928             UINT32_C(0x2C0CDCBE), UINT32_C(0xEFE33BC8), UINT32_C(0x4D6414F2),
18929             UINT32_C(0xE0FE1D09), UINT32_C(0x76FA5C5B), UINT32_C(0x4C112316) },
18930           { UINT32_C(0x2E26200A), UINT32_C(0x812C1DC6), UINT32_C(0xEE879D25),
18931             UINT32_C(0xD6C413C5), UINT32_C(0xBCA8BAFE), UINT32_C(0xBEADE255),
18932             UINT32_C(0xCE2BA0E7), UINT32_C(0x0EAF4AE2), UINT32_C(0xC4F4408A),
18933             UINT32_C(0x66E9FFB0), UINT32_C(0x9782C7AD), UINT32_C(0xB36A86D7) } },
18934         { { UINT32_C(0xBAD8D1C7), UINT32_C(0x10FCD1F4), UINT32_C(0x4502F645),
18935             UINT32_C(0xC903816A), UINT32_C(0xA503B895), UINT32_C(0x7FAC1CC1),
18936             UINT32_C(0x0778900C), UINT32_C(0x8BCD6041), UINT32_C(0x5BCF2784),
18937             UINT32_C(0x5A5F2202), UINT32_C(0x10EDB896), UINT32_C(0x9B157E87) },
18938           { UINT32_C(0xF602A8B1), UINT32_C(0x4C58DA69), UINT32_C(0x59EC9D7E),
18939             UINT32_C(0xD55132F8), UINT32_C(0xA26D4870), UINT32_C(0x155B719A),
18940             UINT32_C(0x36441746), UINT32_C(0x25AAFCA3), UINT32_C(0xDD3B6B30),
18941             UINT32_C(0x01F83338), UINT32_C(0x551917CC), UINT32_C(0xD52BB5C1) } },
18942         { { UINT32_C(0x6135066A), UINT32_C(0xA0B6207B), UINT32_C(0x2AEC8CBD),
18943             UINT32_C(0xB3409F84), UINT32_C(0x19D87DF0), UINT32_C(0x5EBFD436),
18944             UINT32_C(0xE8526DE2), UINT32_C(0xCB4C209B), UINT32_C(0x21E1A230),
18945             UINT32_C(0xD764085B), UINT32_C(0x0899964A), UINT32_C(0x96F91554) },
18946           { UINT32_C(0xA57D122A), UINT32_C(0xB0BEC8EF), UINT32_C(0x5D9D0B33),
18947             UINT32_C(0xC572EC56), UINT32_C(0xCFA7C72C), UINT32_C(0xEBE2A780),
18948             UINT32_C(0x9EF3295C), UINT32_C(0x52D40CDB), UINT32_C(0x0DE74DFE),
18949             UINT32_C(0x64004584), UINT32_C(0xC0809716), UINT32_C(0xA6846432) } },
18950         { { UINT32_C(0x02C979BC), UINT32_C(0x0D09E8CD), UINT32_C(0x409F4F2A),
18951             UINT32_C(0xEC4B21F6), UINT32_C(0x13FB07CA), UINT32_C(0x68125C70),
18952             UINT32_C(0x6FDFA72A), UINT32_C(0x1C4CFC17), UINT32_C(0x04539FCD),
18953             UINT32_C(0xC9E71B9E), UINT32_C(0x8BA70797), UINT32_C(0x94B7103D) },
18954           { UINT32_C(0xB33FDE83), UINT32_C(0x6B81E82F), UINT32_C(0xEABAFD4B),
18955             UINT32_C(0x7CA9A8CA), UINT32_C(0xEAB819CE), UINT32_C(0xADD85A67),
18956             UINT32_C(0x98E99FFC), UINT32_C(0xAEC25483), UINT32_C(0x274A07B6),
18957             UINT32_C(0x938D6440), UINT32_C(0x564A6AA0), UINT32_C(0x0A5C7097) } },
18958         { { UINT32_C(0x2F4FCEB6), UINT32_C(0x7284FF50), UINT32_C(0x78D0D5CB),
18959             UINT32_C(0x0A28715A), UINT32_C(0xBFCE187C), UINT32_C(0xE70B7014),
18960             UINT32_C(0x7A17148D), UINT32_C(0xA6B538F5), UINT32_C(0xDD427166),
18961             UINT32_C(0x1DAB07C9), UINT32_C(0x149D23CA), UINT32_C(0x5C5578B0) },
18962           { UINT32_C(0x875B5EDE), UINT32_C(0x875E2056), UINT32_C(0x02C893B9),
18963             UINT32_C(0xCBF44B6D), UINT32_C(0x5C2993FB), UINT32_C(0x5715A77E),
18964             UINT32_C(0x3410597E), UINT32_C(0xAF328146), UINT32_C(0x42DC49DF),
18965             UINT32_C(0x65DF418F), UINT32_C(0xA9EE52F6), UINT32_C(0x7AC9C720) } },
18966         { { UINT32_C(0x62955486), UINT32_C(0xB1C9AA07), UINT32_C(0x245061D7),
18967             UINT32_C(0xCBF35BE3), UINT32_C(0x8CF4DDC0), UINT32_C(0x811E1BD3),
18968             UINT32_C(0x948F7C84), UINT32_C(0xD9D4589C), UINT32_C(0xCB0F996D),
18969             UINT32_C(0x30D09A0F), UINT32_C(0x590E7704), UINT32_C(0x1A1B3B7A) },
18970           { UINT32_C(0x2082768D), UINT32_C(0xA848E349), UINT32_C(0x9A249DF4),
18971             UINT32_C(0x9FEBD492), UINT32_C(0x5F20439A), UINT32_C(0x503420AF),
18972             UINT32_C(0x8E2BFCD4), UINT32_C(0x0CBE52B6), UINT32_C(0x118C91B2),
18973             UINT32_C(0xB1D5E261), UINT32_C(0x71D8F2BC), UINT32_C(0x93CFF6DA) } },
18974         { { UINT32_C(0x8AB58944), UINT32_C(0x5F5BC06B), UINT32_C(0x4979882D),
18975             UINT32_C(0xE4BED538), UINT32_C(0xD79B0EB1), UINT32_C(0x57C30362),
18976             UINT32_C(0xEF7C56D8), UINT32_C(0x391AE2C1), UINT32_C(0xADD98625),
18977             UINT32_C(0x28BC2E97), UINT32_C(0x1B257107), UINT32_C(0xFA8E86B8) },
18978           { UINT32_C(0x6118C715), UINT32_C(0x5E4859F8), UINT32_C(0x524C71DD),
18979             UINT32_C(0x91C83324), UINT32_C(0x6D2F5E6D), UINT32_C(0xFB209243),
18980             UINT32_C(0x2A900A43), UINT32_C(0x6B4FE21F), UINT32_C(0x32A73C1F),
18981             UINT32_C(0x241F75D6), UINT32_C(0x5AE89613), UINT32_C(0xF5BC4629) } },
18982     }
18983 };
18984 
18985 /*-
18986  * Q := 2P, both projective, Q and P same pointers OK
18987  * Autogenerated: op3/dbl_proj.op3
18988  * https://eprint.iacr.org/2015/1060 Alg 6
18989  * ASSERT: a = -3
18990  */
18991 static void
point_double(pt_prj_t * Q,const pt_prj_t * P)18992 point_double(pt_prj_t *Q, const pt_prj_t *P)
18993 {
18994     /* temporary variables */
18995     fe_t t0, t1, t2, t3, t4;
18996     /* constants */
18997     const limb_t *b = const_b;
18998     /* set pointers for legacy curve arith */
18999     const limb_t *X = P->X;
19000     const limb_t *Y = P->Y;
19001     const limb_t *Z = P->Z;
19002     limb_t *X3 = Q->X;
19003     limb_t *Y3 = Q->Y;
19004     limb_t *Z3 = Q->Z;
19005 
19006     /* the curve arith formula */
19007     fiat_secp384r1_square(t0, X);
19008     fiat_secp384r1_square(t1, Y);
19009     fiat_secp384r1_square(t2, Z);
19010     fiat_secp384r1_mul(t3, X, Y);
19011     fiat_secp384r1_add(t3, t3, t3);
19012     fiat_secp384r1_mul(t4, Y, Z);
19013     fiat_secp384r1_mul(Z3, X, Z);
19014     fiat_secp384r1_add(Z3, Z3, Z3);
19015     fiat_secp384r1_mul(Y3, b, t2);
19016     fiat_secp384r1_sub(Y3, Y3, Z3);
19017     fiat_secp384r1_add(X3, Y3, Y3);
19018     fiat_secp384r1_add(Y3, X3, Y3);
19019     fiat_secp384r1_sub(X3, t1, Y3);
19020     fiat_secp384r1_add(Y3, t1, Y3);
19021     fiat_secp384r1_mul(Y3, X3, Y3);
19022     fiat_secp384r1_mul(X3, X3, t3);
19023     fiat_secp384r1_add(t3, t2, t2);
19024     fiat_secp384r1_add(t2, t2, t3);
19025     fiat_secp384r1_mul(Z3, b, Z3);
19026     fiat_secp384r1_sub(Z3, Z3, t2);
19027     fiat_secp384r1_sub(Z3, Z3, t0);
19028     fiat_secp384r1_add(t3, Z3, Z3);
19029     fiat_secp384r1_add(Z3, Z3, t3);
19030     fiat_secp384r1_add(t3, t0, t0);
19031     fiat_secp384r1_add(t0, t3, t0);
19032     fiat_secp384r1_sub(t0, t0, t2);
19033     fiat_secp384r1_mul(t0, t0, Z3);
19034     fiat_secp384r1_add(Y3, Y3, t0);
19035     fiat_secp384r1_add(t0, t4, t4);
19036     fiat_secp384r1_mul(Z3, t0, Z3);
19037     fiat_secp384r1_sub(X3, X3, Z3);
19038     fiat_secp384r1_mul(Z3, t0, t1);
19039     fiat_secp384r1_add(Z3, Z3, Z3);
19040     fiat_secp384r1_add(Z3, Z3, Z3);
19041 }
19042 
19043 /*-
19044  * R := Q + P where R and Q are projective, P affine.
19045  * R and Q same pointers OK
19046  * R and P same pointers not OK
19047  * Autogenerated: op3/add_mixed.op3
19048  * https://eprint.iacr.org/2015/1060 Alg 5
19049  * ASSERT: a = -3
19050  */
19051 static void
point_add_mixed(pt_prj_t * R,const pt_prj_t * Q,const pt_aff_t * P)19052 point_add_mixed(pt_prj_t *R, const pt_prj_t *Q, const pt_aff_t *P)
19053 {
19054     /* temporary variables */
19055     fe_t t0, t1, t2, t3, t4;
19056     /* constants */
19057     const limb_t *b = const_b;
19058     /* set pointers for legacy curve arith */
19059     const limb_t *X1 = Q->X;
19060     const limb_t *Y1 = Q->Y;
19061     const limb_t *Z1 = Q->Z;
19062     const limb_t *X2 = P->X;
19063     const limb_t *Y2 = P->Y;
19064     fe_t X3;
19065     fe_t Y3;
19066     fe_t Z3;
19067     limb_t nz;
19068 
19069     /* check P for affine inf */
19070     fiat_secp384r1_nonzero(&nz, P->Y);
19071 
19072     /* the curve arith formula */
19073     fiat_secp384r1_mul(t0, X1, X2);
19074     fiat_secp384r1_mul(t1, Y1, Y2);
19075     fiat_secp384r1_add(t3, X2, Y2);
19076     fiat_secp384r1_add(t4, X1, Y1);
19077     fiat_secp384r1_mul(t3, t3, t4);
19078     fiat_secp384r1_add(t4, t0, t1);
19079     fiat_secp384r1_sub(t3, t3, t4);
19080     fiat_secp384r1_mul(t4, Y2, Z1);
19081     fiat_secp384r1_add(t4, t4, Y1);
19082     fiat_secp384r1_mul(Y3, X2, Z1);
19083     fiat_secp384r1_add(Y3, Y3, X1);
19084     fiat_secp384r1_mul(Z3, b, Z1);
19085     fiat_secp384r1_sub(X3, Y3, Z3);
19086     fiat_secp384r1_add(Z3, X3, X3);
19087     fiat_secp384r1_add(X3, X3, Z3);
19088     fiat_secp384r1_sub(Z3, t1, X3);
19089     fiat_secp384r1_add(X3, t1, X3);
19090     fiat_secp384r1_mul(Y3, b, Y3);
19091     fiat_secp384r1_add(t1, Z1, Z1);
19092     fiat_secp384r1_add(t2, t1, Z1);
19093     fiat_secp384r1_sub(Y3, Y3, t2);
19094     fiat_secp384r1_sub(Y3, Y3, t0);
19095     fiat_secp384r1_add(t1, Y3, Y3);
19096     fiat_secp384r1_add(Y3, t1, Y3);
19097     fiat_secp384r1_add(t1, t0, t0);
19098     fiat_secp384r1_add(t0, t1, t0);
19099     fiat_secp384r1_sub(t0, t0, t2);
19100     fiat_secp384r1_mul(t1, t4, Y3);
19101     fiat_secp384r1_mul(t2, t0, Y3);
19102     fiat_secp384r1_mul(Y3, X3, Z3);
19103     fiat_secp384r1_add(Y3, Y3, t2);
19104     fiat_secp384r1_mul(X3, t3, X3);
19105     fiat_secp384r1_sub(X3, X3, t1);
19106     fiat_secp384r1_mul(Z3, t4, Z3);
19107     fiat_secp384r1_mul(t1, t3, t0);
19108     fiat_secp384r1_add(Z3, Z3, t1);
19109 
19110     /* if P is inf, throw all that away and take Q */
19111     fiat_secp384r1_selectznz(R->X, nz, Q->X, X3);
19112     fiat_secp384r1_selectznz(R->Y, nz, Q->Y, Y3);
19113     fiat_secp384r1_selectznz(R->Z, nz, Q->Z, Z3);
19114 }
19115 
19116 /*-
19117  * R := Q + P all projective.
19118  * R and Q same pointers OK
19119  * R and P same pointers not OK
19120  * Autogenerated: op3/add_proj.op3
19121  * https://eprint.iacr.org/2015/1060 Alg 4
19122  * ASSERT: a = -3
19123  */
19124 static void
point_add_proj(pt_prj_t * R,const pt_prj_t * Q,const pt_prj_t * P)19125 point_add_proj(pt_prj_t *R, const pt_prj_t *Q, const pt_prj_t *P)
19126 {
19127     /* temporary variables */
19128     fe_t t0, t1, t2, t3, t4, t5;
19129     /* constants */
19130     const limb_t *b = const_b;
19131     /* set pointers for legacy curve arith */
19132     const limb_t *X1 = Q->X;
19133     const limb_t *Y1 = Q->Y;
19134     const limb_t *Z1 = Q->Z;
19135     const limb_t *X2 = P->X;
19136     const limb_t *Y2 = P->Y;
19137     const limb_t *Z2 = P->Z;
19138     limb_t *X3 = R->X;
19139     limb_t *Y3 = R->Y;
19140     limb_t *Z3 = R->Z;
19141 
19142     /* the curve arith formula */
19143     fiat_secp384r1_mul(t0, X1, X2);
19144     fiat_secp384r1_mul(t1, Y1, Y2);
19145     fiat_secp384r1_mul(t2, Z1, Z2);
19146     fiat_secp384r1_add(t3, X1, Y1);
19147     fiat_secp384r1_add(t4, X2, Y2);
19148     fiat_secp384r1_mul(t3, t3, t4);
19149     fiat_secp384r1_add(t4, t0, t1);
19150     fiat_secp384r1_sub(t3, t3, t4);
19151     fiat_secp384r1_add(t4, Y1, Z1);
19152     fiat_secp384r1_add(t5, Y2, Z2);
19153     fiat_secp384r1_mul(t4, t4, t5);
19154     fiat_secp384r1_add(t5, t1, t2);
19155     fiat_secp384r1_sub(t4, t4, t5);
19156     fiat_secp384r1_add(X3, X1, Z1);
19157     fiat_secp384r1_add(Y3, X2, Z2);
19158     fiat_secp384r1_mul(X3, X3, Y3);
19159     fiat_secp384r1_add(Y3, t0, t2);
19160     fiat_secp384r1_sub(Y3, X3, Y3);
19161     fiat_secp384r1_mul(Z3, b, t2);
19162     fiat_secp384r1_sub(X3, Y3, Z3);
19163     fiat_secp384r1_add(Z3, X3, X3);
19164     fiat_secp384r1_add(X3, X3, Z3);
19165     fiat_secp384r1_sub(Z3, t1, X3);
19166     fiat_secp384r1_add(X3, t1, X3);
19167     fiat_secp384r1_mul(Y3, b, Y3);
19168     fiat_secp384r1_add(t1, t2, t2);
19169     fiat_secp384r1_add(t2, t1, t2);
19170     fiat_secp384r1_sub(Y3, Y3, t2);
19171     fiat_secp384r1_sub(Y3, Y3, t0);
19172     fiat_secp384r1_add(t1, Y3, Y3);
19173     fiat_secp384r1_add(Y3, t1, Y3);
19174     fiat_secp384r1_add(t1, t0, t0);
19175     fiat_secp384r1_add(t0, t1, t0);
19176     fiat_secp384r1_sub(t0, t0, t2);
19177     fiat_secp384r1_mul(t1, t4, Y3);
19178     fiat_secp384r1_mul(t2, t0, Y3);
19179     fiat_secp384r1_mul(Y3, X3, Z3);
19180     fiat_secp384r1_add(Y3, Y3, t2);
19181     fiat_secp384r1_mul(X3, t3, X3);
19182     fiat_secp384r1_sub(X3, X3, t1);
19183     fiat_secp384r1_mul(Z3, t4, Z3);
19184     fiat_secp384r1_mul(t1, t3, t0);
19185     fiat_secp384r1_add(Z3, Z3, t1);
19186 }
19187 
19188 /* constants */
19189 #define RADIX 5
19190 #define DRADIX (1 << RADIX)
19191 #define DRADIX_WNAF ((DRADIX) << 1)
19192 
19193 /*-
19194  * precomp for wnaf scalar multiplication:
19195  * precomp[0] = 1P
19196  * precomp[1] = 3P
19197  * precomp[2] = 5P
19198  * precomp[3] = 7P
19199  * precomp[4] = 9P
19200  * ...
19201  */
19202 static void
precomp_wnaf(pt_prj_t precomp[DRADIX/2],const pt_aff_t * P)19203 precomp_wnaf(pt_prj_t precomp[DRADIX / 2], const pt_aff_t *P)
19204 {
19205     int i;
19206 
19207     fe_copy(precomp[0].X, P->X);
19208     fe_copy(precomp[0].Y, P->Y);
19209     fe_copy(precomp[0].Z, const_one);
19210     point_double(&precomp[DRADIX / 2 - 1], &precomp[0]);
19211 
19212     for (i = 1; i < DRADIX / 2; i++)
19213         point_add_proj(&precomp[i], &precomp[DRADIX / 2 - 1], &precomp[i - 1]);
19214 }
19215 
19216 /* fetch a scalar bit */
19217 static int
scalar_get_bit(const unsigned char in[48],int idx)19218 scalar_get_bit(const unsigned char in[48], int idx)
19219 {
19220     int widx, rshift;
19221 
19222     widx = idx >> 3;
19223     rshift = idx & 0x7;
19224 
19225     if (idx < 0 || widx >= 48)
19226         return 0;
19227 
19228     return (in[widx] >> rshift) & 0x1;
19229 }
19230 
19231 /*-
19232  * Compute "regular" wnaf representation of a scalar.
19233  * See "Exponent Recoding and Regular Exponentiation Algorithms",
19234  * Tunstall et al., AfricaCrypt 2009, Alg 6.
19235  * It forces an odd scalar and outputs digits in
19236  * {\pm 1, \pm 3, \pm 5, \pm 7, \pm 9, ...}
19237  * i.e. signed odd digits with _no zeroes_ -- that makes it "regular".
19238  */
19239 static void
scalar_rwnaf(int8_t out[77],const unsigned char in[48])19240 scalar_rwnaf(int8_t out[77], const unsigned char in[48])
19241 {
19242     int i;
19243     int8_t window, d;
19244 
19245     window = (in[0] & (DRADIX_WNAF - 1)) | 1;
19246     for (i = 0; i < 76; i++) {
19247         d = (window & (DRADIX_WNAF - 1)) - DRADIX;
19248         out[i] = d;
19249         window = (window - d) >> RADIX;
19250         window += scalar_get_bit(in, (i + 1) * RADIX + 1) << 1;
19251         window += scalar_get_bit(in, (i + 1) * RADIX + 2) << 2;
19252         window += scalar_get_bit(in, (i + 1) * RADIX + 3) << 3;
19253         window += scalar_get_bit(in, (i + 1) * RADIX + 4) << 4;
19254         window += scalar_get_bit(in, (i + 1) * RADIX + 5) << 5;
19255     }
19256     out[i] = window;
19257 }
19258 
19259 /*-
19260  * Compute "textbook" wnaf representation of a scalar.
19261  * NB: not constant time
19262  */
19263 static void
scalar_wnaf(int8_t out[385],const unsigned char in[48])19264 scalar_wnaf(int8_t out[385], const unsigned char in[48])
19265 {
19266     int i;
19267     int8_t window, d;
19268 
19269     window = in[0] & (DRADIX_WNAF - 1);
19270     for (i = 0; i < 385; i++) {
19271         d = 0;
19272         if ((window & 1) && ((d = window & (DRADIX_WNAF - 1)) & DRADIX))
19273             d -= DRADIX_WNAF;
19274         out[i] = d;
19275         window = (window - d) >> 1;
19276         window += scalar_get_bit(in, i + 1 + RADIX) << RADIX;
19277     }
19278 }
19279 
19280 /*-
19281  * Simultaneous scalar multiplication: interleaved "textbook" wnaf.
19282  * NB: not constant time
19283  */
19284 static void
var_smul_wnaf_two(pt_aff_t * out,const unsigned char a[48],const unsigned char b[48],const pt_aff_t * P)19285 var_smul_wnaf_two(pt_aff_t *out, const unsigned char a[48],
19286                   const unsigned char b[48], const pt_aff_t *P)
19287 {
19288     int i, d, is_neg, is_inf = 1, flipped = 0;
19289     int8_t anaf[385] = { 0 };
19290     int8_t bnaf[385] = { 0 };
19291     pt_prj_t Q = { { 0 } };
19292     pt_prj_t precomp[DRADIX / 2];
19293 
19294     precomp_wnaf(precomp, P);
19295     scalar_wnaf(anaf, a);
19296     scalar_wnaf(bnaf, b);
19297 
19298     for (i = 384; i >= 0; i--) {
19299         if (!is_inf)
19300             point_double(&Q, &Q);
19301         if ((d = bnaf[i])) {
19302             if ((is_neg = d < 0) != flipped) {
19303                 fiat_secp384r1_opp(Q.Y, Q.Y);
19304                 flipped ^= 1;
19305             }
19306             d = (is_neg) ? (-d - 1) >> 1 : (d - 1) >> 1;
19307             if (is_inf) {
19308                 /* initialize accumulator */
19309                 fe_copy(Q.X, &precomp[d].X);
19310                 fe_copy(Q.Y, &precomp[d].Y);
19311                 fe_copy(Q.Z, &precomp[d].Z);
19312                 is_inf = 0;
19313             } else
19314                 point_add_proj(&Q, &Q, &precomp[d]);
19315         }
19316         if ((d = anaf[i])) {
19317             if ((is_neg = d < 0) != flipped) {
19318                 fiat_secp384r1_opp(Q.Y, Q.Y);
19319                 flipped ^= 1;
19320             }
19321             d = (is_neg) ? (-d - 1) >> 1 : (d - 1) >> 1;
19322             if (is_inf) {
19323                 /* initialize accumulator */
19324                 fe_copy(Q.X, &lut_cmb[0][d].X);
19325                 fe_copy(Q.Y, &lut_cmb[0][d].Y);
19326                 fe_copy(Q.Z, const_one);
19327                 is_inf = 0;
19328             } else
19329                 point_add_mixed(&Q, &Q, &lut_cmb[0][d]);
19330         }
19331     }
19332 
19333     if (is_inf) {
19334         /* initialize accumulator to inf: all-zero scalars */
19335         fe_set_zero(Q.X);
19336         fe_copy(Q.Y, const_one);
19337         fe_set_zero(Q.Z);
19338     }
19339 
19340     if (flipped) {
19341         /* correct sign */
19342         fiat_secp384r1_opp(Q.Y, Q.Y);
19343     }
19344 
19345     /* convert to affine -- NB depends on coordinate system */
19346     fiat_secp384r1_inv(Q.Z, Q.Z);
19347     fiat_secp384r1_mul(out->X, Q.X, Q.Z);
19348     fiat_secp384r1_mul(out->Y, Q.Y, Q.Z);
19349 }
19350 
19351 /*-
19352  * Variable point scalar multiplication with "regular" wnaf.
19353  */
19354 static void
var_smul_rwnaf(pt_aff_t * out,const unsigned char scalar[48],const pt_aff_t * P)19355 var_smul_rwnaf(pt_aff_t *out, const unsigned char scalar[48],
19356                const pt_aff_t *P)
19357 {
19358     int i, j, d, diff, is_neg;
19359     int8_t rnaf[77] = { 0 };
19360     pt_prj_t Q = { { 0 } }, lut = { { 0 } };
19361     pt_prj_t precomp[DRADIX / 2];
19362 
19363     precomp_wnaf(precomp, P);
19364     scalar_rwnaf(rnaf, scalar);
19365 
19366 #if defined(_MSC_VER)
19367 /* result still unsigned: yes we know */
19368 #pragma warning(push)
19369 #pragma warning(disable : 4146)
19370 #endif
19371 
19372     /* initialize accumulator to high digit */
19373     d = (rnaf[76] - 1) >> 1;
19374     for (j = 0; j < DRADIX / 2; j++) {
19375         diff = (1 - (-(d ^ j) >> (8 * sizeof(int) - 1))) & 1;
19376         fiat_secp384r1_selectznz(Q.X, diff, Q.X, precomp[j].X);
19377         fiat_secp384r1_selectznz(Q.Y, diff, Q.Y, precomp[j].Y);
19378         fiat_secp384r1_selectznz(Q.Z, diff, Q.Z, precomp[j].Z);
19379     }
19380 
19381     for (i = 75; i >= 0; i--) {
19382         for (j = 0; j < RADIX; j++)
19383             point_double(&Q, &Q);
19384         d = rnaf[i];
19385         /* is_neg = (d < 0) ? 1 : 0 */
19386         is_neg = (d >> (8 * sizeof(int) - 1)) & 1;
19387         /* d = abs(d) */
19388         d = (d ^ -is_neg) + is_neg;
19389         d = (d - 1) >> 1;
19390         for (j = 0; j < DRADIX / 2; j++) {
19391             diff = (1 - (-(d ^ j) >> (8 * sizeof(int) - 1))) & 1;
19392             fiat_secp384r1_selectznz(lut.X, diff, lut.X, precomp[j].X);
19393             fiat_secp384r1_selectznz(lut.Y, diff, lut.Y, precomp[j].Y);
19394             fiat_secp384r1_selectznz(lut.Z, diff, lut.Z, precomp[j].Z);
19395         }
19396         /* negate lut point if digit is negative */
19397         fiat_secp384r1_opp(out->Y, lut.Y);
19398         fiat_secp384r1_selectznz(lut.Y, is_neg, lut.Y, out->Y);
19399         point_add_proj(&Q, &Q, &lut);
19400     }
19401 
19402 #if defined(_MSC_VER)
19403 #pragma warning(pop)
19404 #endif
19405 
19406     /* conditionally subtract P if the scalar was even */
19407     fe_copy(lut.X, precomp[0].X);
19408     fiat_secp384r1_opp(lut.Y, precomp[0].Y);
19409     fe_copy(lut.Z, precomp[0].Z);
19410     point_add_proj(&lut, &lut, &Q);
19411     fiat_secp384r1_selectznz(Q.X, scalar[0] & 1, lut.X, Q.X);
19412     fiat_secp384r1_selectznz(Q.Y, scalar[0] & 1, lut.Y, Q.Y);
19413     fiat_secp384r1_selectznz(Q.Z, scalar[0] & 1, lut.Z, Q.Z);
19414 
19415     /* convert to affine -- NB depends on coordinate system */
19416     fiat_secp384r1_inv(Q.Z, Q.Z);
19417     fiat_secp384r1_mul(out->X, Q.X, Q.Z);
19418     fiat_secp384r1_mul(out->Y, Q.Y, Q.Z);
19419 }
19420 
19421 /*-
19422  * Fixed scalar multiplication: comb with interleaving.
19423  */
19424 static void
fixed_smul_cmb(pt_aff_t * out,const unsigned char scalar[48])19425 fixed_smul_cmb(pt_aff_t *out, const unsigned char scalar[48])
19426 {
19427     int i, j, k, d, diff, is_neg = 0;
19428     int8_t rnaf[77] = { 0 };
19429     pt_prj_t Q = { { 0 } }, R = { { 0 } };
19430     pt_aff_t lut = { { 0 } };
19431 
19432     scalar_rwnaf(rnaf, scalar);
19433 
19434     /* initalize accumulator to inf */
19435     fe_set_zero(Q.X);
19436     fe_copy(Q.Y, const_one);
19437     fe_set_zero(Q.Z);
19438 
19439 #if defined(_MSC_VER)
19440 /* result still unsigned: yes we know */
19441 #pragma warning(push)
19442 #pragma warning(disable : 4146)
19443 #endif
19444 
19445     for (i = 3; i >= 0; i--) {
19446         for (j = 0; i != 3 && j < RADIX; j++)
19447             point_double(&Q, &Q);
19448         for (j = 0; j < 21; j++) {
19449             if (j * 4 + i > 76)
19450                 continue;
19451             d = rnaf[j * 4 + i];
19452             /* is_neg = (d < 0) ? 1 : 0 */
19453             is_neg = (d >> (8 * sizeof(int) - 1)) & 1;
19454             /* d = abs(d) */
19455             d = (d ^ -is_neg) + is_neg;
19456             d = (d - 1) >> 1;
19457             for (k = 0; k < DRADIX / 2; k++) {
19458                 diff = (1 - (-(d ^ k) >> (8 * sizeof(int) - 1))) & 1;
19459                 fiat_secp384r1_selectznz(lut.X, diff, lut.X, lut_cmb[j][k].X);
19460                 fiat_secp384r1_selectznz(lut.Y, diff, lut.Y, lut_cmb[j][k].Y);
19461             }
19462             /* negate lut point if digit is negative */
19463             fiat_secp384r1_opp(out->Y, lut.Y);
19464             fiat_secp384r1_selectznz(lut.Y, is_neg, lut.Y, out->Y);
19465             point_add_mixed(&Q, &Q, &lut);
19466         }
19467     }
19468 
19469 #if defined(_MSC_VER)
19470 #pragma warning(pop)
19471 #endif
19472 
19473     /* conditionally subtract P if the scalar was even */
19474     fe_copy(lut.X, lut_cmb[0][0].X);
19475     fiat_secp384r1_opp(lut.Y, lut_cmb[0][0].Y);
19476     point_add_mixed(&R, &Q, &lut);
19477     fiat_secp384r1_selectznz(Q.X, scalar[0] & 1, R.X, Q.X);
19478     fiat_secp384r1_selectznz(Q.Y, scalar[0] & 1, R.Y, Q.Y);
19479     fiat_secp384r1_selectznz(Q.Z, scalar[0] & 1, R.Z, Q.Z);
19480 
19481     /* convert to affine -- NB depends on coordinate system */
19482     fiat_secp384r1_inv(Q.Z, Q.Z);
19483     fiat_secp384r1_mul(out->X, Q.X, Q.Z);
19484     fiat_secp384r1_mul(out->Y, Q.Y, Q.Z);
19485 }
19486 
19487 /*-
19488  * Wrapper: simultaneous scalar mutiplication.
19489  * outx, outy := a * G + b * P
19490  * where P = (inx, iny).
19491  * Everything is LE byte ordering.
19492  */
19493 static void
point_mul_two(unsigned char outx[48],unsigned char outy[48],const unsigned char a[48],const unsigned char b[48],const unsigned char inx[48],const unsigned char iny[48])19494 point_mul_two(unsigned char outx[48], unsigned char outy[48],
19495               const unsigned char a[48], const unsigned char b[48],
19496               const unsigned char inx[48],
19497               const unsigned char iny[48])
19498 {
19499     pt_aff_t P;
19500 
19501     fiat_secp384r1_from_bytes(P.X, inx);
19502     fiat_secp384r1_from_bytes(P.Y, iny);
19503     fiat_secp384r1_to_montgomery(P.X, P.X);
19504     fiat_secp384r1_to_montgomery(P.Y, P.Y);
19505     /* simultaneous scalar multiplication */
19506     var_smul_wnaf_two(&P, a, b, &P);
19507 
19508     fiat_secp384r1_from_montgomery(P.X, P.X);
19509     fiat_secp384r1_from_montgomery(P.Y, P.Y);
19510     fiat_secp384r1_to_bytes(outx, P.X);
19511     fiat_secp384r1_to_bytes(outy, P.Y);
19512 }
19513 
19514 /*-
19515  * Wrapper: fixed scalar mutiplication.
19516  * outx, outy := scalar * G
19517  * Everything is LE byte ordering.
19518  */
19519 static void
point_mul_g(unsigned char outx[48],unsigned char outy[48],const unsigned char scalar[48])19520 point_mul_g(unsigned char outx[48], unsigned char outy[48],
19521             const unsigned char scalar[48])
19522 {
19523     pt_aff_t P;
19524 
19525     /* fixed scmul function */
19526     fixed_smul_cmb(&P, scalar);
19527     fiat_secp384r1_from_montgomery(P.X, P.X);
19528     fiat_secp384r1_from_montgomery(P.Y, P.Y);
19529     fiat_secp384r1_to_bytes(outx, P.X);
19530     fiat_secp384r1_to_bytes(outy, P.Y);
19531 }
19532 
19533 /*-
19534  * Wrapper: variable point scalar mutiplication.
19535  * outx, outy := scalar * P
19536  * where P = (inx, iny).
19537  * Everything is LE byte ordering.
19538  */
19539 static void
point_mul(unsigned char outx[48],unsigned char outy[48],const unsigned char scalar[48],const unsigned char inx[48],const unsigned char iny[48])19540 point_mul(unsigned char outx[48], unsigned char outy[48],
19541           const unsigned char scalar[48],
19542           const unsigned char inx[48],
19543           const unsigned char iny[48])
19544 {
19545     pt_aff_t P;
19546 
19547     fiat_secp384r1_from_bytes(P.X, inx);
19548     fiat_secp384r1_from_bytes(P.Y, iny);
19549     fiat_secp384r1_to_montgomery(P.X, P.X);
19550     fiat_secp384r1_to_montgomery(P.Y, P.Y);
19551     /* var scmul function */
19552     var_smul_rwnaf(&P, scalar, &P);
19553     fiat_secp384r1_from_montgomery(P.X, P.X);
19554     fiat_secp384r1_from_montgomery(P.Y, P.Y);
19555     fiat_secp384r1_to_bytes(outx, P.X);
19556     fiat_secp384r1_to_bytes(outy, P.Y);
19557 }
19558 
19559 #undef RADIX
19560 #include "ecp.h"
19561 #include "mpi-priv.h"
19562 #include "mplogic.h"
19563 
19564 /*-
19565  * reverse bytes -- total hack
19566  */
19567 #define MP_BE2LE(a)            \
19568     do {                       \
19569         unsigned char z_bswap; \
19570         z_bswap = a[0];        \
19571         a[0] = a[47];          \
19572         a[47] = z_bswap;       \
19573         z_bswap = a[1];        \
19574         a[1] = a[46];          \
19575         a[46] = z_bswap;       \
19576         z_bswap = a[2];        \
19577         a[2] = a[45];          \
19578         a[45] = z_bswap;       \
19579         z_bswap = a[3];        \
19580         a[3] = a[44];          \
19581         a[44] = z_bswap;       \
19582         z_bswap = a[4];        \
19583         a[4] = a[43];          \
19584         a[43] = z_bswap;       \
19585         z_bswap = a[5];        \
19586         a[5] = a[42];          \
19587         a[42] = z_bswap;       \
19588         z_bswap = a[6];        \
19589         a[6] = a[41];          \
19590         a[41] = z_bswap;       \
19591         z_bswap = a[7];        \
19592         a[7] = a[40];          \
19593         a[40] = z_bswap;       \
19594         z_bswap = a[8];        \
19595         a[8] = a[39];          \
19596         a[39] = z_bswap;       \
19597         z_bswap = a[9];        \
19598         a[9] = a[38];          \
19599         a[38] = z_bswap;       \
19600         z_bswap = a[10];       \
19601         a[10] = a[37];         \
19602         a[37] = z_bswap;       \
19603         z_bswap = a[11];       \
19604         a[11] = a[36];         \
19605         a[36] = z_bswap;       \
19606         z_bswap = a[12];       \
19607         a[12] = a[35];         \
19608         a[35] = z_bswap;       \
19609         z_bswap = a[13];       \
19610         a[13] = a[34];         \
19611         a[34] = z_bswap;       \
19612         z_bswap = a[14];       \
19613         a[14] = a[33];         \
19614         a[33] = z_bswap;       \
19615         z_bswap = a[15];       \
19616         a[15] = a[32];         \
19617         a[32] = z_bswap;       \
19618         z_bswap = a[16];       \
19619         a[16] = a[31];         \
19620         a[31] = z_bswap;       \
19621         z_bswap = a[17];       \
19622         a[17] = a[30];         \
19623         a[30] = z_bswap;       \
19624         z_bswap = a[18];       \
19625         a[18] = a[29];         \
19626         a[29] = z_bswap;       \
19627         z_bswap = a[19];       \
19628         a[19] = a[28];         \
19629         a[28] = z_bswap;       \
19630         z_bswap = a[20];       \
19631         a[20] = a[27];         \
19632         a[27] = z_bswap;       \
19633         z_bswap = a[21];       \
19634         a[21] = a[26];         \
19635         a[26] = z_bswap;       \
19636         z_bswap = a[22];       \
19637         a[22] = a[25];         \
19638         a[25] = z_bswap;       \
19639         z_bswap = a[23];       \
19640         a[23] = a[24];         \
19641         a[24] = z_bswap;       \
19642     } while (0)
19643 
19644 static mp_err
point_mul_g_secp384r1(const mp_int * n,mp_int * out_x,mp_int * out_y,const ECGroup * group)19645 point_mul_g_secp384r1(const mp_int *n, mp_int *out_x,
19646                       mp_int *out_y, const ECGroup *group)
19647 {
19648     unsigned char b_x[48];
19649     unsigned char b_y[48];
19650     unsigned char b_n[48];
19651     mp_err res;
19652 
19653     ARGCHK(n != NULL && out_x != NULL && out_y != NULL, MP_BADARG);
19654 
19655     /* fail on out of range scalars */
19656     if (mpl_significant_bits(n) > 384 || mp_cmp_z(n) != MP_GT)
19657         return MP_RANGE;
19658 
19659     MP_CHECKOK(mp_to_fixlen_octets(n, b_n, 48));
19660     MP_BE2LE(b_n);
19661     point_mul_g(b_x, b_y, b_n);
19662     MP_BE2LE(b_x);
19663     MP_BE2LE(b_y);
19664     MP_CHECKOK(mp_read_unsigned_octets(out_x, b_x, 48));
19665     MP_CHECKOK(mp_read_unsigned_octets(out_y, b_y, 48));
19666 
19667 CLEANUP:
19668     return res;
19669 }
19670 
19671 static mp_err
point_mul_secp384r1(const mp_int * n,const mp_int * in_x,const mp_int * in_y,mp_int * out_x,mp_int * out_y,const ECGroup * group)19672 point_mul_secp384r1(const mp_int *n, const mp_int *in_x,
19673                     const mp_int *in_y, mp_int *out_x,
19674                     mp_int *out_y, const ECGroup *group)
19675 {
19676     unsigned char b_x[48];
19677     unsigned char b_y[48];
19678     unsigned char b_n[48];
19679     mp_err res;
19680 
19681     ARGCHK(n != NULL && in_x != NULL && in_y != NULL && out_x != NULL &&
19682                out_y != NULL,
19683            MP_BADARG);
19684 
19685     /* fail on out of range scalars */
19686     if (mpl_significant_bits(n) > 384 || mp_cmp_z(n) != MP_GT)
19687         return MP_RANGE;
19688 
19689     MP_CHECKOK(mp_to_fixlen_octets(n, b_n, 48));
19690     MP_CHECKOK(mp_to_fixlen_octets(in_x, b_x, 48));
19691     MP_CHECKOK(mp_to_fixlen_octets(in_y, b_y, 48));
19692     MP_BE2LE(b_x);
19693     MP_BE2LE(b_y);
19694     MP_BE2LE(b_n);
19695     point_mul(b_x, b_y, b_n, b_x, b_y);
19696     MP_BE2LE(b_x);
19697     MP_BE2LE(b_y);
19698     MP_CHECKOK(mp_read_unsigned_octets(out_x, b_x, 48));
19699     MP_CHECKOK(mp_read_unsigned_octets(out_y, b_y, 48));
19700 
19701 CLEANUP:
19702     return res;
19703 }
19704 
19705 static mp_err
point_mul_two_secp384r1(const mp_int * n1,const mp_int * n2,const mp_int * in_x,const mp_int * in_y,mp_int * out_x,mp_int * out_y,const ECGroup * group)19706 point_mul_two_secp384r1(const mp_int *n1, const mp_int *n2,
19707                         const mp_int *in_x, const mp_int *in_y,
19708                         mp_int *out_x, mp_int *out_y,
19709                         const ECGroup *group)
19710 {
19711     unsigned char b_x[48];
19712     unsigned char b_y[48];
19713     unsigned char b_n1[48];
19714     unsigned char b_n2[48];
19715     mp_err res;
19716 
19717     /* If n2 == NULL or 0, this is just a base-point multiplication. */
19718     if (n2 == NULL || mp_cmp_z(n2) == MP_EQ)
19719         return point_mul_g_secp384r1(n1, out_x, out_y, group);
19720 
19721     /* If n1 == NULL or 0, this is just an arbitary-point multiplication. */
19722     if (n1 == NULL || mp_cmp_z(n1) == MP_EQ)
19723         return point_mul_secp384r1(n2, in_x, in_y, out_x, out_y, group);
19724 
19725     ARGCHK(in_x != NULL && in_y != NULL && out_x != NULL && out_y != NULL,
19726            MP_BADARG);
19727 
19728     /* fail on out of range scalars */
19729     if (mpl_significant_bits(n1) > 384 || mp_cmp_z(n1) != MP_GT ||
19730         mpl_significant_bits(n2) > 384 || mp_cmp_z(n2) != MP_GT)
19731         return MP_RANGE;
19732 
19733     MP_CHECKOK(mp_to_fixlen_octets(n1, b_n1, 48));
19734     MP_CHECKOK(mp_to_fixlen_octets(n2, b_n2, 48));
19735     MP_CHECKOK(mp_to_fixlen_octets(in_x, b_x, 48));
19736     MP_CHECKOK(mp_to_fixlen_octets(in_y, b_y, 48));
19737     MP_BE2LE(b_x);
19738     MP_BE2LE(b_y);
19739     MP_BE2LE(b_n1);
19740     MP_BE2LE(b_n2);
19741     point_mul_two(b_x, b_y, b_n1, b_n2, b_x, b_y);
19742     MP_BE2LE(b_x);
19743     MP_BE2LE(b_y);
19744     MP_CHECKOK(mp_read_unsigned_octets(out_x, b_x, 48));
19745     MP_CHECKOK(mp_read_unsigned_octets(out_y, b_y, 48));
19746 
19747 CLEANUP:
19748     return res;
19749 }
19750 
19751 mp_err
ec_group_set_secp384r1(ECGroup * group,ECCurveName name)19752 ec_group_set_secp384r1(ECGroup *group, ECCurveName name)
19753 {
19754     if (name == ECCurve_NIST_P384) {
19755         group->base_point_mul = &point_mul_g_secp384r1;
19756         group->point_mul = &point_mul_secp384r1;
19757         group->points_mul = &point_mul_two_secp384r1;
19758     }
19759     return MP_OKAY;
19760 }
19761 
19762 #endif /* __SIZEOF_INT128__ */
19763