You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
nss/SOURCES/nss_p521_hacl.patch

14366 lines
650 KiB

diff -up ./lib/freebl/ec.c.p521_hacl ./lib/freebl/ec.c
--- ./lib/freebl/ec.c.p521_hacl 2024-01-10 14:02:53.236576444 -0800
+++ ./lib/freebl/ec.c 2024-01-10 14:07:12.780312061 -0800
@@ -1,3 +1,4 @@
+
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
@@ -86,8 +87,15 @@ static const ECMethod kMethods[] = {
ec_secp384r1_scalar_validate,
ec_secp384r1_sign_digest,
ec_secp384r1_verify_digest,
- }
-
+ },
+ {
+ ECCurve_NIST_P521,
+ ec_secp521r1_pt_mul,
+ ec_secp521r1_pt_validate,
+ ec_secp521r1_scalar_validate,
+ ec_secp521r1_sign_digest,
+ ec_secp521r1_verify_digest,
+ }
};
static const ECMethod *
diff -up ./lib/freebl/ecdecode.c.p521_hacl ./lib/freebl/ecdecode.c
--- ./lib/freebl/ecdecode.c.p521_hacl 2024-01-10 14:02:53.236576444 -0800
+++ ./lib/freebl/ecdecode.c 2024-01-10 14:04:29.761450868 -0800
@@ -171,7 +171,7 @@ EC_FillParams(PLArenaPool *arena, const
* (the NIST P-521 curve)
*/
CHECK_SEC_OK(gf_populate_params_bytes(ECCurve_SECG_PRIME_521R1,
- ec_field_GFp, params));
+ ec_field_plain, params));
break;
case SEC_OID_CURVE25519:
diff -up ./lib/freebl/ecl/ecl.c.p521_hacl ./lib/freebl/ecl/ecl.c
--- ./lib/freebl/ecl/ecl.c.p521_hacl 2024-01-10 14:02:53.236576444 -0800
+++ ./lib/freebl/ecl/ecl.c 2024-01-10 14:04:29.761450868 -0800
@@ -184,7 +184,7 @@ construct_ecgroup(const ECCurveName name
goto CLEANUP;
}
MP_CHECKOK(ec_group_set_gfp521(group, name));
- MP_CHECKOK(ec_group_set_secp521r1(group, name));
+ //MP_CHECKOK(ec_group_set_secp521r1(group, name));
break;
default:
/* use generic arithmetic */
diff -up ./lib/freebl/ecl/ecl.h.p521_hacl ./lib/freebl/ecl/ecl.h
--- ./lib/freebl/ecl/ecl.h.p521_hacl 2024-01-10 14:04:29.761450868 -0800
+++ ./lib/freebl/ecl/ecl.h 2024-01-10 14:09:12.853803604 -0800
@@ -67,6 +67,13 @@ SECStatus ec_secp384r1_sign_digest(ECPri
SECStatus ec_secp384r1_verify_digest(ECPublicKey *key, const SECItem *signature,
const SECItem *digest);
+SECStatus ec_secp521r1_pt_mul(SECItem *X, SECItem *k, SECItem *P);
+SECStatus ec_secp521r1_pt_validate(const SECItem *px);
SECStatus ec_secp521r1_scalar_validate(const SECItem *scalar);
+SECStatus ec_secp521r1_sign_digest(ECPrivateKey *key, SECItem *signature,
+ const SECItem *digest, const unsigned char *kb,
+ const unsigned int kblen);
+SECStatus ec_secp521r1_verify_digest(ECPublicKey *key, const SECItem *signature,
+ const SECItem *digest);
#endif /* __ecl_h_ */
diff -up ./lib/freebl/ecl/ecp_secp521r1.c.p521_hacl ./lib/freebl/ecl/ecp_secp521r1.c
--- ./lib/freebl/ecl/ecp_secp521r1.c.p521_hacl 2023-06-04 01:42:53.000000000 -0700
+++ ./lib/freebl/ecl/ecp_secp521r1.c 2024-01-10 14:04:29.763450886 -0800
@@ -1,12082 +1,238 @@
-/* Autogenerated: ECCKiila https://gitlab.com/nisec/ecckiila */
-/*-
- * MIT License
- * -
- * Copyright (c) 2020 Luis Rivera-Zamarripa, Jesús-Javier Chi-Domínguez, Billy Bob Brumley
- * -
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- * -
- * The above copyright notice and this permission notice shall be included in all
- * copies or substantial portions of the Software.
- * -
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-#if defined(__SIZEOF_INT128__) && !defined(PEDANTIC)
-
-#include <stdint.h>
-#include <string.h>
-#define LIMB_BITS 64
-#define LIMB_CNT 9
-/* Field elements */
-typedef uint64_t fe_t[LIMB_CNT];
-typedef uint64_t limb_t;
-
-#define fe_copy(d, s) memcpy(d, s, sizeof(fe_t))
-#define fe_set_zero(d) memset(d, 0, sizeof(fe_t))
-
-/* Projective points */
-typedef struct {
- fe_t X;
- fe_t Y;
- fe_t Z;
-} pt_prj_t;
-
-/* Affine points */
-typedef struct {
- fe_t X;
- fe_t Y;
-} pt_aff_t;
-
-/* BEGIN verbatim fiat code https://github.com/mit-plv/fiat-crypto */
-/*-
- * MIT License
- *
- * Copyright (c) 2015-2021 the fiat-crypto authors (see the AUTHORS file).
- * https://github.com/mit-plv/fiat-crypto/blob/master/AUTHORS
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
+/* P-384 from HACL* */
-/* Autogenerated: unsaturated_solinas --static --use-value-barrier secp521r1 64 9 '2^521 - 1' */
-/* curve description: secp521r1 */
-/* machine_wordsize = 64 (from "64") */
-/* requested operations: (all) */
-/* n = 9 (from "9") */
-/* s-c = 2^521 - [(1, 1)] (from "2^521 - 1") */
-/* tight_bounds_multiplier = 1 (from "") */
-/* */
-/* Computed values: */
-/* carry_chain = [0, 1, 2, 3, 4, 5, 6, 7, 8, 0, 1] */
-/* eval z = z[0] + (z[1] << 58) + (z[2] << 116) + (z[3] << 174) + (z[4] << 232) + (z[5] << 0x122) + (z[6] << 0x15c) + (z[7] << 0x196) + (z[8] << 0x1d0) */
-/* bytes_eval z = z[0] + (z[1] << 8) + (z[2] << 16) + (z[3] << 24) + (z[4] << 32) + (z[5] << 40) + (z[6] << 48) + (z[7] << 56) + (z[8] << 64) + (z[9] << 72) + (z[10] << 80) + (z[11] << 88) + (z[12] << 96) + (z[13] << 104) + (z[14] << 112) + (z[15] << 120) + (z[16] << 128) + (z[17] << 136) + (z[18] << 144) + (z[19] << 152) + (z[20] << 160) + (z[21] << 168) + (z[22] << 176) + (z[23] << 184) + (z[24] << 192) + (z[25] << 200) + (z[26] << 208) + (z[27] << 216) + (z[28] << 224) + (z[29] << 232) + (z[30] << 240) + (z[31] << 248) + (z[32] << 256) + (z[33] << 0x108) + (z[34] << 0x110) + (z[35] << 0x118) + (z[36] << 0x120) + (z[37] << 0x128) + (z[38] << 0x130) + (z[39] << 0x138) + (z[40] << 0x140) + (z[41] << 0x148) + (z[42] << 0x150) + (z[43] << 0x158) + (z[44] << 0x160) + (z[45] << 0x168) + (z[46] << 0x170) + (z[47] << 0x178) + (z[48] << 0x180) + (z[49] << 0x188) + (z[50] << 0x190) + (z[51] << 0x198) + (z[52] << 0x1a0) + (z[53] << 0x1a8) + (z[54] << 0x1b0) + (z[55] << 0x1b8) + (z[56] << 0x1c0) + (z[57] << 0x1c8) + (z[58] << 0x1d0) + (z[59] << 0x1d8) + (z[60] << 0x1e0) + (z[61] << 0x1e8) + (z[62] << 0x1f0) + (z[63] << 0x1f8) + (z[64] << 2^9) + (z[65] << 0x208) */
-/* balance = [0x7fffffffffffffe, 0x7fffffffffffffe, 0x7fffffffffffffe, 0x7fffffffffffffe, 0x7fffffffffffffe, 0x7fffffffffffffe, 0x7fffffffffffffe, 0x7fffffffffffffe, 0x3fffffffffffffe] */
-
-#include <stdint.h>
-typedef unsigned char fiat_secp521r1_uint1;
-typedef signed char fiat_secp521r1_int1;
-#ifdef __GNUC__
-#define FIAT_SECP521R1_FIAT_EXTENSION __extension__
-#define FIAT_SECP521R1_FIAT_INLINE __inline__
-#else
-#define FIAT_SECP521R1_FIAT_EXTENSION
-#define FIAT_SECP521R1_FIAT_INLINE
+#ifdef FREEBL_NO_DEPEND
+#include "../stubs.h"
#endif
-FIAT_SECP521R1_FIAT_EXTENSION typedef signed __int128 fiat_secp521r1_int128;
-FIAT_SECP521R1_FIAT_EXTENSION typedef unsigned __int128 fiat_secp521r1_uint128;
-
-/* The type fiat_secp521r1_loose_field_element is a field element with loose bounds. */
-/* Bounds: [[0x0 ~> 0xc00000000000000], [0x0 ~> 0xc00000000000000], [0x0 ~> 0xc00000000000000], [0x0 ~> 0xc00000000000000], [0x0 ~> 0xc00000000000000], [0x0 ~> 0xc00000000000000], [0x0 ~> 0xc00000000000000], [0x0 ~> 0xc00000000000000], [0x0 ~> 0x600000000000000]] */
-typedef uint64_t fiat_secp521r1_loose_field_element[9];
-
-/* The type fiat_secp521r1_tight_field_element is a field element with tight bounds. */
-/* Bounds: [[0x0 ~> 0x400000000000000], [0x0 ~> 0x400000000000000], [0x0 ~> 0x400000000000000], [0x0 ~> 0x400000000000000], [0x0 ~> 0x400000000000000], [0x0 ~> 0x400000000000000], [0x0 ~> 0x400000000000000], [0x0 ~> 0x400000000000000], [0x0 ~> 0x200000000000000]] */
-typedef uint64_t fiat_secp521r1_tight_field_element[9];
-
-#if (-1 & 3) != 3
-#error "This code only works on a two's complement system"
-#endif
-
-#if !defined(FIAT_SECP521R1_NO_ASM) && (defined(__GNUC__) || defined(__clang__))
-static __inline__ uint64_t
-fiat_secp521r1_value_barrier_u64(uint64_t a)
-{
- __asm__(""
- : "+r"(a)
- : /* no inputs */);
- return a;
-}
-#else
-#define fiat_secp521r1_value_barrier_u64(x) (x)
-#endif
+#include "ecl-priv.h"
+#include "secitem.h"
+#include "secerr.h"
+#include "secmpi.h"
+#include "../verified/Hacl_P521.h"
/*
- * The function fiat_secp521r1_addcarryx_u58 is an addition with carry.
- *
- * Postconditions:
- * out1 = (arg1 + arg2 + arg3) mod 2^58
- * out2 = ⌊(arg1 + arg2 + arg3) / 2^58⌋
- *
- * Input Bounds:
- * arg1: [0x0 ~> 0x1]
- * arg2: [0x0 ~> 0x3ffffffffffffff]
- * arg3: [0x0 ~> 0x3ffffffffffffff]
- * Output Bounds:
- * out1: [0x0 ~> 0x3ffffffffffffff]
- * out2: [0x0 ~> 0x1]
+ * Point Validation for P-521.
*/
-static void
-fiat_secp521r1_addcarryx_u58(uint64_t *out1,
- fiat_secp521r1_uint1 *out2,
- fiat_secp521r1_uint1 arg1,
- uint64_t arg2, uint64_t arg3)
-{
- uint64_t x1;
- uint64_t x2;
- fiat_secp521r1_uint1 x3;
- x1 = ((arg1 + arg2) + arg3);
- x2 = (x1 & UINT64_C(0x3ffffffffffffff));
- x3 = (fiat_secp521r1_uint1)(x1 >> 58);
- *out1 = x2;
- *out2 = x3;
-}
-/*
- * The function fiat_secp521r1_subborrowx_u58 is a subtraction with borrow.
- *
- * Postconditions:
- * out1 = (-arg1 + arg2 + -arg3) mod 2^58
- * out2 = -⌊(-arg1 + arg2 + -arg3) / 2^58⌋
- *
- * Input Bounds:
- * arg1: [0x0 ~> 0x1]
- * arg2: [0x0 ~> 0x3ffffffffffffff]
- * arg3: [0x0 ~> 0x3ffffffffffffff]
- * Output Bounds:
- * out1: [0x0 ~> 0x3ffffffffffffff]
- * out2: [0x0 ~> 0x1]
- */
-static void
-fiat_secp521r1_subborrowx_u58(uint64_t *out1,
- fiat_secp521r1_uint1 *out2,
- fiat_secp521r1_uint1 arg1,
- uint64_t arg2, uint64_t arg3)
+SECStatus
+ec_secp521r1_pt_validate(const SECItem *pt)
{
- int64_t x1;
- fiat_secp521r1_int1 x2;
- uint64_t x3;
- x1 = ((int64_t)(arg2 - (int64_t)arg1) - (int64_t)arg3);
- x2 = (fiat_secp521r1_int1)(x1 >> 58);
- x3 = (x1 & UINT64_C(0x3ffffffffffffff));
- *out1 = x3;
- *out2 = (fiat_secp521r1_uint1)(0x0 - x2);
-}
-
-/*
- * The function fiat_secp521r1_addcarryx_u57 is an addition with carry.
- *
- * Postconditions:
- * out1 = (arg1 + arg2 + arg3) mod 2^57
- * out2 = ⌊(arg1 + arg2 + arg3) / 2^57⌋
- *
- * Input Bounds:
- * arg1: [0x0 ~> 0x1]
- * arg2: [0x0 ~> 0x1ffffffffffffff]
- * arg3: [0x0 ~> 0x1ffffffffffffff]
- * Output Bounds:
- * out1: [0x0 ~> 0x1ffffffffffffff]
- * out2: [0x0 ~> 0x1]
- */
-static void
-fiat_secp521r1_addcarryx_u57(uint64_t *out1,
- fiat_secp521r1_uint1 *out2,
- fiat_secp521r1_uint1 arg1,
- uint64_t arg2, uint64_t arg3)
-{
- uint64_t x1;
- uint64_t x2;
- fiat_secp521r1_uint1 x3;
- x1 = ((arg1 + arg2) + arg3);
- x2 = (x1 & UINT64_C(0x1ffffffffffffff));
- x3 = (fiat_secp521r1_uint1)(x1 >> 57);
- *out1 = x2;
- *out2 = x3;
-}
-
-/*
- * The function fiat_secp521r1_subborrowx_u57 is a subtraction with borrow.
- *
- * Postconditions:
- * out1 = (-arg1 + arg2 + -arg3) mod 2^57
- * out2 = -⌊(-arg1 + arg2 + -arg3) / 2^57⌋
- *
- * Input Bounds:
- * arg1: [0x0 ~> 0x1]
- * arg2: [0x0 ~> 0x1ffffffffffffff]
- * arg3: [0x0 ~> 0x1ffffffffffffff]
- * Output Bounds:
- * out1: [0x0 ~> 0x1ffffffffffffff]
- * out2: [0x0 ~> 0x1]
- */
-static void
-fiat_secp521r1_subborrowx_u57(uint64_t *out1,
- fiat_secp521r1_uint1 *out2,
- fiat_secp521r1_uint1 arg1,
- uint64_t arg2, uint64_t arg3)
-{
- int64_t x1;
- fiat_secp521r1_int1 x2;
- uint64_t x3;
- x1 = ((int64_t)(arg2 - (int64_t)arg1) - (int64_t)arg3);
- x2 = (fiat_secp521r1_int1)(x1 >> 57);
- x3 = (x1 & UINT64_C(0x1ffffffffffffff));
- *out1 = x3;
- *out2 = (fiat_secp521r1_uint1)(0x0 - x2);
-}
-
-/*
- * The function fiat_secp521r1_cmovznz_u64 is a single-word conditional move.
- *
- * Postconditions:
- * out1 = (if arg1 = 0 then arg2 else arg3)
- *
- * Input Bounds:
- * arg1: [0x0 ~> 0x1]
- * arg2: [0x0 ~> 0xffffffffffffffff]
- * arg3: [0x0 ~> 0xffffffffffffffff]
- * Output Bounds:
- * out1: [0x0 ~> 0xffffffffffffffff]
- */
-static void
-fiat_secp521r1_cmovznz_u64(uint64_t *out1,
- fiat_secp521r1_uint1 arg1, uint64_t arg2,
- uint64_t arg3)
-{
- fiat_secp521r1_uint1 x1;
- uint64_t x2;
- uint64_t x3;
- x1 = (!(!arg1));
- x2 = ((fiat_secp521r1_int1)(0x0 - x1) & UINT64_C(0xffffffffffffffff));
- x3 = ((fiat_secp521r1_value_barrier_u64(x2) & arg3) |
- (fiat_secp521r1_value_barrier_u64((~x2)) & arg2));
- *out1 = x3;
-}
-
-/*
- * The function fiat_secp521r1_carry_mul multiplies two field elements and reduces the result.
- *
- * Postconditions:
- * eval out1 mod m = (eval arg1 * eval arg2) mod m
- *
- */
-static void
-fiat_secp521r1_carry_mul(
- fiat_secp521r1_tight_field_element out1,
- const fiat_secp521r1_loose_field_element arg1,
- const fiat_secp521r1_loose_field_element arg2)
-{
- fiat_secp521r1_uint128 x1;
- fiat_secp521r1_uint128 x2;
- fiat_secp521r1_uint128 x3;
- fiat_secp521r1_uint128 x4;
- fiat_secp521r1_uint128 x5;
- fiat_secp521r1_uint128 x6;
- fiat_secp521r1_uint128 x7;
- fiat_secp521r1_uint128 x8;
- fiat_secp521r1_uint128 x9;
- fiat_secp521r1_uint128 x10;
- fiat_secp521r1_uint128 x11;
- fiat_secp521r1_uint128 x12;
- fiat_secp521r1_uint128 x13;
- fiat_secp521r1_uint128 x14;
- fiat_secp521r1_uint128 x15;
- fiat_secp521r1_uint128 x16;
- fiat_secp521r1_uint128 x17;
- fiat_secp521r1_uint128 x18;
- fiat_secp521r1_uint128 x19;
- fiat_secp521r1_uint128 x20;
- fiat_secp521r1_uint128 x21;
- fiat_secp521r1_uint128 x22;
- fiat_secp521r1_uint128 x23;
- fiat_secp521r1_uint128 x24;
- fiat_secp521r1_uint128 x25;
- fiat_secp521r1_uint128 x26;
- fiat_secp521r1_uint128 x27;
- fiat_secp521r1_uint128 x28;
- fiat_secp521r1_uint128 x29;
- fiat_secp521r1_uint128 x30;
- fiat_secp521r1_uint128 x31;
- fiat_secp521r1_uint128 x32;
- fiat_secp521r1_uint128 x33;
- fiat_secp521r1_uint128 x34;
- fiat_secp521r1_uint128 x35;
- fiat_secp521r1_uint128 x36;
- fiat_secp521r1_uint128 x37;
- fiat_secp521r1_uint128 x38;
- fiat_secp521r1_uint128 x39;
- fiat_secp521r1_uint128 x40;
- fiat_secp521r1_uint128 x41;
- fiat_secp521r1_uint128 x42;
- fiat_secp521r1_uint128 x43;
- fiat_secp521r1_uint128 x44;
- fiat_secp521r1_uint128 x45;
- fiat_secp521r1_uint128 x46;
- fiat_secp521r1_uint128 x47;
- fiat_secp521r1_uint128 x48;
- fiat_secp521r1_uint128 x49;
- fiat_secp521r1_uint128 x50;
- fiat_secp521r1_uint128 x51;
- fiat_secp521r1_uint128 x52;
- fiat_secp521r1_uint128 x53;
- fiat_secp521r1_uint128 x54;
- fiat_secp521r1_uint128 x55;
- fiat_secp521r1_uint128 x56;
- fiat_secp521r1_uint128 x57;
- fiat_secp521r1_uint128 x58;
- fiat_secp521r1_uint128 x59;
- fiat_secp521r1_uint128 x60;
- fiat_secp521r1_uint128 x61;
- fiat_secp521r1_uint128 x62;
- fiat_secp521r1_uint128 x63;
- fiat_secp521r1_uint128 x64;
- fiat_secp521r1_uint128 x65;
- fiat_secp521r1_uint128 x66;
- fiat_secp521r1_uint128 x67;
- fiat_secp521r1_uint128 x68;
- fiat_secp521r1_uint128 x69;
- fiat_secp521r1_uint128 x70;
- fiat_secp521r1_uint128 x71;
- fiat_secp521r1_uint128 x72;
- fiat_secp521r1_uint128 x73;
- fiat_secp521r1_uint128 x74;
- fiat_secp521r1_uint128 x75;
- fiat_secp521r1_uint128 x76;
- fiat_secp521r1_uint128 x77;
- fiat_secp521r1_uint128 x78;
- fiat_secp521r1_uint128 x79;
- fiat_secp521r1_uint128 x80;
- fiat_secp521r1_uint128 x81;
- fiat_secp521r1_uint128 x82;
- fiat_secp521r1_uint128 x83;
- uint64_t x84;
- fiat_secp521r1_uint128 x85;
- fiat_secp521r1_uint128 x86;
- fiat_secp521r1_uint128 x87;
- fiat_secp521r1_uint128 x88;
- fiat_secp521r1_uint128 x89;
- fiat_secp521r1_uint128 x90;
- fiat_secp521r1_uint128 x91;
- fiat_secp521r1_uint128 x92;
- fiat_secp521r1_uint128 x93;
- fiat_secp521r1_uint128 x94;
- uint64_t x95;
- fiat_secp521r1_uint128 x96;
- fiat_secp521r1_uint128 x97;
- uint64_t x98;
- fiat_secp521r1_uint128 x99;
- fiat_secp521r1_uint128 x100;
- uint64_t x101;
- fiat_secp521r1_uint128 x102;
- fiat_secp521r1_uint128 x103;
- uint64_t x104;
- fiat_secp521r1_uint128 x105;
- fiat_secp521r1_uint128 x106;
- uint64_t x107;
- fiat_secp521r1_uint128 x108;
- fiat_secp521r1_uint128 x109;
- uint64_t x110;
- fiat_secp521r1_uint128 x111;
- fiat_secp521r1_uint128 x112;
- uint64_t x113;
- fiat_secp521r1_uint128 x114;
- fiat_secp521r1_uint128 x115;
- uint64_t x116;
- fiat_secp521r1_uint128 x117;
- uint64_t x118;
- uint64_t x119;
- uint64_t x120;
- fiat_secp521r1_uint1 x121;
- uint64_t x122;
- uint64_t x123;
- x1 = ((fiat_secp521r1_uint128)(arg1[8]) * ((arg2[8]) * 0x2));
- x2 = ((fiat_secp521r1_uint128)(arg1[8]) * ((arg2[7]) * 0x2));
- x3 = ((fiat_secp521r1_uint128)(arg1[8]) * ((arg2[6]) * 0x2));
- x4 = ((fiat_secp521r1_uint128)(arg1[8]) * ((arg2[5]) * 0x2));
- x5 = ((fiat_secp521r1_uint128)(arg1[8]) * ((arg2[4]) * 0x2));
- x6 = ((fiat_secp521r1_uint128)(arg1[8]) * ((arg2[3]) * 0x2));
- x7 = ((fiat_secp521r1_uint128)(arg1[8]) * ((arg2[2]) * 0x2));
- x8 = ((fiat_secp521r1_uint128)(arg1[8]) * ((arg2[1]) * 0x2));
- x9 = ((fiat_secp521r1_uint128)(arg1[7]) * ((arg2[8]) * 0x2));
- x10 = ((fiat_secp521r1_uint128)(arg1[7]) * ((arg2[7]) * 0x2));
- x11 = ((fiat_secp521r1_uint128)(arg1[7]) * ((arg2[6]) * 0x2));
- x12 = ((fiat_secp521r1_uint128)(arg1[7]) * ((arg2[5]) * 0x2));
- x13 = ((fiat_secp521r1_uint128)(arg1[7]) * ((arg2[4]) * 0x2));
- x14 = ((fiat_secp521r1_uint128)(arg1[7]) * ((arg2[3]) * 0x2));
- x15 = ((fiat_secp521r1_uint128)(arg1[7]) * ((arg2[2]) * 0x2));
- x16 = ((fiat_secp521r1_uint128)(arg1[6]) * ((arg2[8]) * 0x2));
- x17 = ((fiat_secp521r1_uint128)(arg1[6]) * ((arg2[7]) * 0x2));
- x18 = ((fiat_secp521r1_uint128)(arg1[6]) * ((arg2[6]) * 0x2));
- x19 = ((fiat_secp521r1_uint128)(arg1[6]) * ((arg2[5]) * 0x2));
- x20 = ((fiat_secp521r1_uint128)(arg1[6]) * ((arg2[4]) * 0x2));
- x21 = ((fiat_secp521r1_uint128)(arg1[6]) * ((arg2[3]) * 0x2));
- x22 = ((fiat_secp521r1_uint128)(arg1[5]) * ((arg2[8]) * 0x2));
- x23 = ((fiat_secp521r1_uint128)(arg1[5]) * ((arg2[7]) * 0x2));
- x24 = ((fiat_secp521r1_uint128)(arg1[5]) * ((arg2[6]) * 0x2));
- x25 = ((fiat_secp521r1_uint128)(arg1[5]) * ((arg2[5]) * 0x2));
- x26 = ((fiat_secp521r1_uint128)(arg1[5]) * ((arg2[4]) * 0x2));
- x27 = ((fiat_secp521r1_uint128)(arg1[4]) * ((arg2[8]) * 0x2));
- x28 = ((fiat_secp521r1_uint128)(arg1[4]) * ((arg2[7]) * 0x2));
- x29 = ((fiat_secp521r1_uint128)(arg1[4]) * ((arg2[6]) * 0x2));
- x30 = ((fiat_secp521r1_uint128)(arg1[4]) * ((arg2[5]) * 0x2));
- x31 = ((fiat_secp521r1_uint128)(arg1[3]) * ((arg2[8]) * 0x2));
- x32 = ((fiat_secp521r1_uint128)(arg1[3]) * ((arg2[7]) * 0x2));
- x33 = ((fiat_secp521r1_uint128)(arg1[3]) * ((arg2[6]) * 0x2));
- x34 = ((fiat_secp521r1_uint128)(arg1[2]) * ((arg2[8]) * 0x2));
- x35 = ((fiat_secp521r1_uint128)(arg1[2]) * ((arg2[7]) * 0x2));
- x36 = ((fiat_secp521r1_uint128)(arg1[1]) * ((arg2[8]) * 0x2));
- x37 = ((fiat_secp521r1_uint128)(arg1[8]) * (arg2[0]));
- x38 = ((fiat_secp521r1_uint128)(arg1[7]) * (arg2[1]));
- x39 = ((fiat_secp521r1_uint128)(arg1[7]) * (arg2[0]));
- x40 = ((fiat_secp521r1_uint128)(arg1[6]) * (arg2[2]));
- x41 = ((fiat_secp521r1_uint128)(arg1[6]) * (arg2[1]));
- x42 = ((fiat_secp521r1_uint128)(arg1[6]) * (arg2[0]));
- x43 = ((fiat_secp521r1_uint128)(arg1[5]) * (arg2[3]));
- x44 = ((fiat_secp521r1_uint128)(arg1[5]) * (arg2[2]));
- x45 = ((fiat_secp521r1_uint128)(arg1[5]) * (arg2[1]));
- x46 = ((fiat_secp521r1_uint128)(arg1[5]) * (arg2[0]));
- x47 = ((fiat_secp521r1_uint128)(arg1[4]) * (arg2[4]));
- x48 = ((fiat_secp521r1_uint128)(arg1[4]) * (arg2[3]));
- x49 = ((fiat_secp521r1_uint128)(arg1[4]) * (arg2[2]));
- x50 = ((fiat_secp521r1_uint128)(arg1[4]) * (arg2[1]));
- x51 = ((fiat_secp521r1_uint128)(arg1[4]) * (arg2[0]));
- x52 = ((fiat_secp521r1_uint128)(arg1[3]) * (arg2[5]));
- x53 = ((fiat_secp521r1_uint128)(arg1[3]) * (arg2[4]));
- x54 = ((fiat_secp521r1_uint128)(arg1[3]) * (arg2[3]));
- x55 = ((fiat_secp521r1_uint128)(arg1[3]) * (arg2[2]));
- x56 = ((fiat_secp521r1_uint128)(arg1[3]) * (arg2[1]));
- x57 = ((fiat_secp521r1_uint128)(arg1[3]) * (arg2[0]));
- x58 = ((fiat_secp521r1_uint128)(arg1[2]) * (arg2[6]));
- x59 = ((fiat_secp521r1_uint128)(arg1[2]) * (arg2[5]));
- x60 = ((fiat_secp521r1_uint128)(arg1[2]) * (arg2[4]));
- x61 = ((fiat_secp521r1_uint128)(arg1[2]) * (arg2[3]));
- x62 = ((fiat_secp521r1_uint128)(arg1[2]) * (arg2[2]));
- x63 = ((fiat_secp521r1_uint128)(arg1[2]) * (arg2[1]));
- x64 = ((fiat_secp521r1_uint128)(arg1[2]) * (arg2[0]));
- x65 = ((fiat_secp521r1_uint128)(arg1[1]) * (arg2[7]));
- x66 = ((fiat_secp521r1_uint128)(arg1[1]) * (arg2[6]));
- x67 = ((fiat_secp521r1_uint128)(arg1[1]) * (arg2[5]));
- x68 = ((fiat_secp521r1_uint128)(arg1[1]) * (arg2[4]));
- x69 = ((fiat_secp521r1_uint128)(arg1[1]) * (arg2[3]));
- x70 = ((fiat_secp521r1_uint128)(arg1[1]) * (arg2[2]));
- x71 = ((fiat_secp521r1_uint128)(arg1[1]) * (arg2[1]));
- x72 = ((fiat_secp521r1_uint128)(arg1[1]) * (arg2[0]));
- x73 = ((fiat_secp521r1_uint128)(arg1[0]) * (arg2[8]));
- x74 = ((fiat_secp521r1_uint128)(arg1[0]) * (arg2[7]));
- x75 = ((fiat_secp521r1_uint128)(arg1[0]) * (arg2[6]));
- x76 = ((fiat_secp521r1_uint128)(arg1[0]) * (arg2[5]));
- x77 = ((fiat_secp521r1_uint128)(arg1[0]) * (arg2[4]));
- x78 = ((fiat_secp521r1_uint128)(arg1[0]) * (arg2[3]));
- x79 = ((fiat_secp521r1_uint128)(arg1[0]) * (arg2[2]));
- x80 = ((fiat_secp521r1_uint128)(arg1[0]) * (arg2[1]));
- x81 = ((fiat_secp521r1_uint128)(arg1[0]) * (arg2[0]));
- x82 = (x81 + (x36 + (x35 + (x33 + (x30 + (x26 + (x21 + (x15 + x8))))))));
- x83 = (x82 >> 58);
- x84 = (uint64_t)(x82 & UINT64_C(0x3ffffffffffffff));
- x85 = (x73 + (x65 + (x58 + (x52 + (x47 + (x43 + (x40 + (x38 + x37))))))));
- x86 = (x74 + (x66 + (x59 + (x53 + (x48 + (x44 + (x41 + (x39 + x1))))))));
- x87 = (x75 + (x67 + (x60 + (x54 + (x49 + (x45 + (x42 + (x9 + x2))))))));
- x88 = (x76 + (x68 + (x61 + (x55 + (x50 + (x46 + (x16 + (x10 + x3))))))));
- x89 = (x77 + (x69 + (x62 + (x56 + (x51 + (x22 + (x17 + (x11 + x4))))))));
- x90 = (x78 + (x70 + (x63 + (x57 + (x27 + (x23 + (x18 + (x12 + x5))))))));
- x91 = (x79 + (x71 + (x64 + (x31 + (x28 + (x24 + (x19 + (x13 + x6))))))));
- x92 = (x80 + (x72 + (x34 + (x32 + (x29 + (x25 + (x20 + (x14 + x7))))))));
- x93 = (x83 + x92);
- x94 = (x93 >> 58);
- x95 = (uint64_t)(x93 & UINT64_C(0x3ffffffffffffff));
- x96 = (x94 + x91);
- x97 = (x96 >> 58);
- x98 = (uint64_t)(x96 & UINT64_C(0x3ffffffffffffff));
- x99 = (x97 + x90);
- x100 = (x99 >> 58);
- x101 = (uint64_t)(x99 & UINT64_C(0x3ffffffffffffff));
- x102 = (x100 + x89);
- x103 = (x102 >> 58);
- x104 = (uint64_t)(x102 & UINT64_C(0x3ffffffffffffff));
- x105 = (x103 + x88);
- x106 = (x105 >> 58);
- x107 = (uint64_t)(x105 & UINT64_C(0x3ffffffffffffff));
- x108 = (x106 + x87);
- x109 = (x108 >> 58);
- x110 = (uint64_t)(x108 & UINT64_C(0x3ffffffffffffff));
- x111 = (x109 + x86);
- x112 = (x111 >> 58);
- x113 = (uint64_t)(x111 & UINT64_C(0x3ffffffffffffff));
- x114 = (x112 + x85);
- x115 = (x114 >> 57);
- x116 = (uint64_t)(x114 & UINT64_C(0x1ffffffffffffff));
- x117 = (x84 + x115);
- x118 = (uint64_t)(x117 >> 58);
- x119 = (uint64_t)(x117 & UINT64_C(0x3ffffffffffffff));
- x120 = (x118 + x95);
- x121 = (fiat_secp521r1_uint1)(x120 >> 58);
- x122 = (x120 & UINT64_C(0x3ffffffffffffff));
- x123 = (x121 + x98);
- out1[0] = x119;
- out1[1] = x122;
- out1[2] = x123;
- out1[3] = x101;
- out1[4] = x104;
- out1[5] = x107;
- out1[6] = x110;
- out1[7] = x113;
- out1[8] = x116;
-}
-
-/*
- * The function fiat_secp521r1_carry_square squares a field element and reduces the result.
- *
- * Postconditions:
- * eval out1 mod m = (eval arg1 * eval arg1) mod m
- *
- */
-static void
-fiat_secp521r1_carry_square(
- fiat_secp521r1_tight_field_element out1,
- const fiat_secp521r1_loose_field_element arg1)
-{
- uint64_t x1;
- uint64_t x2;
- uint64_t x3;
- uint64_t x4;
- uint64_t x5;
- uint64_t x6;
- uint64_t x7;
- uint64_t x8;
- uint64_t x9;
- uint64_t x10;
- uint64_t x11;
- uint64_t x12;
- uint64_t x13;
- uint64_t x14;
- uint64_t x15;
- uint64_t x16;
- fiat_secp521r1_uint128 x17;
- fiat_secp521r1_uint128 x18;
- fiat_secp521r1_uint128 x19;
- fiat_secp521r1_uint128 x20;
- fiat_secp521r1_uint128 x21;
- fiat_secp521r1_uint128 x22;
- fiat_secp521r1_uint128 x23;
- fiat_secp521r1_uint128 x24;
- fiat_secp521r1_uint128 x25;
- fiat_secp521r1_uint128 x26;
- fiat_secp521r1_uint128 x27;
- fiat_secp521r1_uint128 x28;
- fiat_secp521r1_uint128 x29;
- fiat_secp521r1_uint128 x30;
- fiat_secp521r1_uint128 x31;
- fiat_secp521r1_uint128 x32;
- fiat_secp521r1_uint128 x33;
- fiat_secp521r1_uint128 x34;
- fiat_secp521r1_uint128 x35;
- fiat_secp521r1_uint128 x36;
- fiat_secp521r1_uint128 x37;
- fiat_secp521r1_uint128 x38;
- fiat_secp521r1_uint128 x39;
- fiat_secp521r1_uint128 x40;
- fiat_secp521r1_uint128 x41;
- fiat_secp521r1_uint128 x42;
- fiat_secp521r1_uint128 x43;
- fiat_secp521r1_uint128 x44;
- fiat_secp521r1_uint128 x45;
- fiat_secp521r1_uint128 x46;
- fiat_secp521r1_uint128 x47;
- fiat_secp521r1_uint128 x48;
- fiat_secp521r1_uint128 x49;
- fiat_secp521r1_uint128 x50;
- fiat_secp521r1_uint128 x51;
- fiat_secp521r1_uint128 x52;
- fiat_secp521r1_uint128 x53;
- fiat_secp521r1_uint128 x54;
- fiat_secp521r1_uint128 x55;
- fiat_secp521r1_uint128 x56;
- fiat_secp521r1_uint128 x57;
- fiat_secp521r1_uint128 x58;
- fiat_secp521r1_uint128 x59;
- fiat_secp521r1_uint128 x60;
- fiat_secp521r1_uint128 x61;
- fiat_secp521r1_uint128 x62;
- fiat_secp521r1_uint128 x63;
- uint64_t x64;
- fiat_secp521r1_uint128 x65;
- fiat_secp521r1_uint128 x66;
- fiat_secp521r1_uint128 x67;
- fiat_secp521r1_uint128 x68;
- fiat_secp521r1_uint128 x69;
- fiat_secp521r1_uint128 x70;
- fiat_secp521r1_uint128 x71;
- fiat_secp521r1_uint128 x72;
- fiat_secp521r1_uint128 x73;
- fiat_secp521r1_uint128 x74;
- uint64_t x75;
- fiat_secp521r1_uint128 x76;
- fiat_secp521r1_uint128 x77;
- uint64_t x78;
- fiat_secp521r1_uint128 x79;
- fiat_secp521r1_uint128 x80;
- uint64_t x81;
- fiat_secp521r1_uint128 x82;
- fiat_secp521r1_uint128 x83;
- uint64_t x84;
- fiat_secp521r1_uint128 x85;
- fiat_secp521r1_uint128 x86;
- uint64_t x87;
- fiat_secp521r1_uint128 x88;
- fiat_secp521r1_uint128 x89;
- uint64_t x90;
- fiat_secp521r1_uint128 x91;
- fiat_secp521r1_uint128 x92;
- uint64_t x93;
- fiat_secp521r1_uint128 x94;
- fiat_secp521r1_uint128 x95;
- uint64_t x96;
- fiat_secp521r1_uint128 x97;
- uint64_t x98;
- uint64_t x99;
- uint64_t x100;
- fiat_secp521r1_uint1 x101;
- uint64_t x102;
- uint64_t x103;
- x1 = (arg1[8]);
- x2 = (x1 * 0x2);
- x3 = ((arg1[8]) * 0x2);
- x4 = (arg1[7]);
- x5 = (x4 * 0x2);
- x6 = ((arg1[7]) * 0x2);
- x7 = (arg1[6]);
- x8 = (x7 * 0x2);
- x9 = ((arg1[6]) * 0x2);
- x10 = (arg1[5]);
- x11 = (x10 * 0x2);
- x12 = ((arg1[5]) * 0x2);
- x13 = ((arg1[4]) * 0x2);
- x14 = ((arg1[3]) * 0x2);
- x15 = ((arg1[2]) * 0x2);
- x16 = ((arg1[1]) * 0x2);
- x17 = ((fiat_secp521r1_uint128)(arg1[8]) * (x1 * 0x2));
- x18 = ((fiat_secp521r1_uint128)(arg1[7]) * (x2 * 0x2));
- x19 = ((fiat_secp521r1_uint128)(arg1[7]) * (x4 * 0x2));
- x20 = ((fiat_secp521r1_uint128)(arg1[6]) * (x2 * 0x2));
- x21 = ((fiat_secp521r1_uint128)(arg1[6]) * (x5 * 0x2));
- x22 = ((fiat_secp521r1_uint128)(arg1[6]) * (x7 * 0x2));
- x23 = ((fiat_secp521r1_uint128)(arg1[5]) * (x2 * 0x2));
- x24 = ((fiat_secp521r1_uint128)(arg1[5]) * (x5 * 0x2));
- x25 = ((fiat_secp521r1_uint128)(arg1[5]) * (x8 * 0x2));
- x26 = ((fiat_secp521r1_uint128)(arg1[5]) * (x10 * 0x2));
- x27 = ((fiat_secp521r1_uint128)(arg1[4]) * (x2 * 0x2));
- x28 = ((fiat_secp521r1_uint128)(arg1[4]) * (x5 * 0x2));
- x29 = ((fiat_secp521r1_uint128)(arg1[4]) * (x8 * 0x2));
- x30 = ((fiat_secp521r1_uint128)(arg1[4]) * (x11 * 0x2));
- x31 = ((fiat_secp521r1_uint128)(arg1[4]) * (arg1[4]));
- x32 = ((fiat_secp521r1_uint128)(arg1[3]) * (x2 * 0x2));
- x33 = ((fiat_secp521r1_uint128)(arg1[3]) * (x5 * 0x2));
- x34 = ((fiat_secp521r1_uint128)(arg1[3]) * (x8 * 0x2));
- x35 = ((fiat_secp521r1_uint128)(arg1[3]) * x12);
- x36 = ((fiat_secp521r1_uint128)(arg1[3]) * x13);
- x37 = ((fiat_secp521r1_uint128)(arg1[3]) * (arg1[3]));
- x38 = ((fiat_secp521r1_uint128)(arg1[2]) * (x2 * 0x2));
- x39 = ((fiat_secp521r1_uint128)(arg1[2]) * (x5 * 0x2));
- x40 = ((fiat_secp521r1_uint128)(arg1[2]) * x9);
- x41 = ((fiat_secp521r1_uint128)(arg1[2]) * x12);
- x42 = ((fiat_secp521r1_uint128)(arg1[2]) * x13);
- x43 = ((fiat_secp521r1_uint128)(arg1[2]) * x14);
- x44 = ((fiat_secp521r1_uint128)(arg1[2]) * (arg1[2]));
- x45 = ((fiat_secp521r1_uint128)(arg1[1]) * (x2 * 0x2));
- x46 = ((fiat_secp521r1_uint128)(arg1[1]) * x6);
- x47 = ((fiat_secp521r1_uint128)(arg1[1]) * x9);
- x48 = ((fiat_secp521r1_uint128)(arg1[1]) * x12);
- x49 = ((fiat_secp521r1_uint128)(arg1[1]) * x13);
- x50 = ((fiat_secp521r1_uint128)(arg1[1]) * x14);
- x51 = ((fiat_secp521r1_uint128)(arg1[1]) * x15);
- x52 = ((fiat_secp521r1_uint128)(arg1[1]) * (arg1[1]));
- x53 = ((fiat_secp521r1_uint128)(arg1[0]) * x3);
- x54 = ((fiat_secp521r1_uint128)(arg1[0]) * x6);
- x55 = ((fiat_secp521r1_uint128)(arg1[0]) * x9);
- x56 = ((fiat_secp521r1_uint128)(arg1[0]) * x12);
- x57 = ((fiat_secp521r1_uint128)(arg1[0]) * x13);
- x58 = ((fiat_secp521r1_uint128)(arg1[0]) * x14);
- x59 = ((fiat_secp521r1_uint128)(arg1[0]) * x15);
- x60 = ((fiat_secp521r1_uint128)(arg1[0]) * x16);
- x61 = ((fiat_secp521r1_uint128)(arg1[0]) * (arg1[0]));
- x62 = (x61 + (x45 + (x39 + (x34 + x30))));
- x63 = (x62 >> 58);
- x64 = (uint64_t)(x62 & UINT64_C(0x3ffffffffffffff));
- x65 = (x53 + (x46 + (x40 + (x35 + x31))));
- x66 = (x54 + (x47 + (x41 + (x36 + x17))));
- x67 = (x55 + (x48 + (x42 + (x37 + x18))));
- x68 = (x56 + (x49 + (x43 + (x20 + x19))));
- x69 = (x57 + (x50 + (x44 + (x23 + x21))));
- x70 = (x58 + (x51 + (x27 + (x24 + x22))));
- x71 = (x59 + (x52 + (x32 + (x28 + x25))));
- x72 = (x60 + (x38 + (x33 + (x29 + x26))));
- x73 = (x63 + x72);
- x74 = (x73 >> 58);
- x75 = (uint64_t)(x73 & UINT64_C(0x3ffffffffffffff));
- x76 = (x74 + x71);
- x77 = (x76 >> 58);
- x78 = (uint64_t)(x76 & UINT64_C(0x3ffffffffffffff));
- x79 = (x77 + x70);
- x80 = (x79 >> 58);
- x81 = (uint64_t)(x79 & UINT64_C(0x3ffffffffffffff));
- x82 = (x80 + x69);
- x83 = (x82 >> 58);
- x84 = (uint64_t)(x82 & UINT64_C(0x3ffffffffffffff));
- x85 = (x83 + x68);
- x86 = (x85 >> 58);
- x87 = (uint64_t)(x85 & UINT64_C(0x3ffffffffffffff));
- x88 = (x86 + x67);
- x89 = (x88 >> 58);
- x90 = (uint64_t)(x88 & UINT64_C(0x3ffffffffffffff));
- x91 = (x89 + x66);
- x92 = (x91 >> 58);
- x93 = (uint64_t)(x91 & UINT64_C(0x3ffffffffffffff));
- x94 = (x92 + x65);
- x95 = (x94 >> 57);
- x96 = (uint64_t)(x94 & UINT64_C(0x1ffffffffffffff));
- x97 = (x64 + x95);
- x98 = (uint64_t)(x97 >> 58);
- x99 = (uint64_t)(x97 & UINT64_C(0x3ffffffffffffff));
- x100 = (x98 + x75);
- x101 = (fiat_secp521r1_uint1)(x100 >> 58);
- x102 = (x100 & UINT64_C(0x3ffffffffffffff));
- x103 = (x101 + x78);
- out1[0] = x99;
- out1[1] = x102;
- out1[2] = x103;
- out1[3] = x81;
- out1[4] = x84;
- out1[5] = x87;
- out1[6] = x90;
- out1[7] = x93;
- out1[8] = x96;
-}
-
-/*
- * The function fiat_secp521r1_carry_add adds two field elements.
- *
- * Postconditions:
- * eval out1 mod m = (eval arg1 + eval arg2) mod m
- *
- */
-static void
-fiat_secp521r1_carry_add(
- fiat_secp521r1_tight_field_element out1,
- const fiat_secp521r1_tight_field_element arg1,
- const fiat_secp521r1_tight_field_element arg2)
-{
- uint64_t x1;
- uint64_t x2;
- uint64_t x3;
- uint64_t x4;
- uint64_t x5;
- uint64_t x6;
- uint64_t x7;
- uint64_t x8;
- uint64_t x9;
- uint64_t x10;
- uint64_t x11;
- uint64_t x12;
- uint64_t x13;
- uint64_t x14;
- uint64_t x15;
- uint64_t x16;
- uint64_t x17;
- uint64_t x18;
- uint64_t x19;
- uint64_t x20;
- x1 = ((arg1[0]) + (arg2[0]));
- x2 = ((x1 >> 58) + ((arg1[1]) + (arg2[1])));
- x3 = ((x2 >> 58) + ((arg1[2]) + (arg2[2])));
- x4 = ((x3 >> 58) + ((arg1[3]) + (arg2[3])));
- x5 = ((x4 >> 58) + ((arg1[4]) + (arg2[4])));
- x6 = ((x5 >> 58) + ((arg1[5]) + (arg2[5])));
- x7 = ((x6 >> 58) + ((arg1[6]) + (arg2[6])));
- x8 = ((x7 >> 58) + ((arg1[7]) + (arg2[7])));
- x9 = ((x8 >> 58) + ((arg1[8]) + (arg2[8])));
- x10 = ((x1 & UINT64_C(0x3ffffffffffffff)) + (x9 >> 57));
- x11 = ((fiat_secp521r1_uint1)(x10 >> 58) +
- (x2 & UINT64_C(0x3ffffffffffffff)));
- x12 = (x10 & UINT64_C(0x3ffffffffffffff));
- x13 = (x11 & UINT64_C(0x3ffffffffffffff));
- x14 = ((fiat_secp521r1_uint1)(x11 >> 58) +
- (x3 & UINT64_C(0x3ffffffffffffff)));
- x15 = (x4 & UINT64_C(0x3ffffffffffffff));
- x16 = (x5 & UINT64_C(0x3ffffffffffffff));
- x17 = (x6 & UINT64_C(0x3ffffffffffffff));
- x18 = (x7 & UINT64_C(0x3ffffffffffffff));
- x19 = (x8 & UINT64_C(0x3ffffffffffffff));
- x20 = (x9 & UINT64_C(0x1ffffffffffffff));
- out1[0] = x12;
- out1[1] = x13;
- out1[2] = x14;
- out1[3] = x15;
- out1[4] = x16;
- out1[5] = x17;
- out1[6] = x18;
- out1[7] = x19;
- out1[8] = x20;
-}
-
-/*
- * The function fiat_secp521r1_carry_sub subtracts two field elements.
- *
- * Postconditions:
- * eval out1 mod m = (eval arg1 - eval arg2) mod m
- *
- */
-static void
-fiat_secp521r1_carry_sub(
- fiat_secp521r1_tight_field_element out1,
- const fiat_secp521r1_tight_field_element arg1,
- const fiat_secp521r1_tight_field_element arg2)
-{
- uint64_t x1;
- uint64_t x2;
- uint64_t x3;
- uint64_t x4;
- uint64_t x5;
- uint64_t x6;
- uint64_t x7;
- uint64_t x8;
- uint64_t x9;
- uint64_t x10;
- uint64_t x11;
- uint64_t x12;
- uint64_t x13;
- uint64_t x14;
- uint64_t x15;
- uint64_t x16;
- uint64_t x17;
- uint64_t x18;
- uint64_t x19;
- uint64_t x20;
- x1 = ((UINT64_C(0x7fffffffffffffe) + (arg1[0])) - (arg2[0]));
- x2 = ((x1 >> 58) + ((UINT64_C(0x7fffffffffffffe) + (arg1[1])) - (arg2[1])));
- x3 = ((x2 >> 58) + ((UINT64_C(0x7fffffffffffffe) + (arg1[2])) - (arg2[2])));
- x4 = ((x3 >> 58) + ((UINT64_C(0x7fffffffffffffe) + (arg1[3])) - (arg2[3])));
- x5 = ((x4 >> 58) + ((UINT64_C(0x7fffffffffffffe) + (arg1[4])) - (arg2[4])));
- x6 = ((x5 >> 58) + ((UINT64_C(0x7fffffffffffffe) + (arg1[5])) - (arg2[5])));
- x7 = ((x6 >> 58) + ((UINT64_C(0x7fffffffffffffe) + (arg1[6])) - (arg2[6])));
- x8 = ((x7 >> 58) + ((UINT64_C(0x7fffffffffffffe) + (arg1[7])) - (arg2[7])));
- x9 = ((x8 >> 58) + ((UINT64_C(0x3fffffffffffffe) + (arg1[8])) - (arg2[8])));
- x10 = ((x1 & UINT64_C(0x3ffffffffffffff)) + (x9 >> 57));
- x11 = ((fiat_secp521r1_uint1)(x10 >> 58) +
- (x2 & UINT64_C(0x3ffffffffffffff)));
- x12 = (x10 & UINT64_C(0x3ffffffffffffff));
- x13 = (x11 & UINT64_C(0x3ffffffffffffff));
- x14 = ((fiat_secp521r1_uint1)(x11 >> 58) +
- (x3 & UINT64_C(0x3ffffffffffffff)));
- x15 = (x4 & UINT64_C(0x3ffffffffffffff));
- x16 = (x5 & UINT64_C(0x3ffffffffffffff));
- x17 = (x6 & UINT64_C(0x3ffffffffffffff));
- x18 = (x7 & UINT64_C(0x3ffffffffffffff));
- x19 = (x8 & UINT64_C(0x3ffffffffffffff));
- x20 = (x9 & UINT64_C(0x1ffffffffffffff));
- out1[0] = x12;
- out1[1] = x13;
- out1[2] = x14;
- out1[3] = x15;
- out1[4] = x16;
- out1[5] = x17;
- out1[6] = x18;
- out1[7] = x19;
- out1[8] = x20;
-}
-
-/*
- * The function fiat_secp521r1_carry_opp negates a field element.
- *
- * Postconditions:
- * eval out1 mod m = -eval arg1 mod m
- *
- */
-static void
-fiat_secp521r1_carry_opp(
- fiat_secp521r1_tight_field_element out1,
- const fiat_secp521r1_tight_field_element arg1)
-{
- uint64_t x1;
- uint64_t x2;
- uint64_t x3;
- uint64_t x4;
- uint64_t x5;
- uint64_t x6;
- uint64_t x7;
- uint64_t x8;
- uint64_t x9;
- uint64_t x10;
- uint64_t x11;
- uint64_t x12;
- uint64_t x13;
- uint64_t x14;
- uint64_t x15;
- uint64_t x16;
- uint64_t x17;
- uint64_t x18;
- uint64_t x19;
- uint64_t x20;
- x1 = (UINT64_C(0x7fffffffffffffe) - (arg1[0]));
- x2 = ((fiat_secp521r1_uint1)(x1 >> 58) +
- (UINT64_C(0x7fffffffffffffe) - (arg1[1])));
- x3 = ((fiat_secp521r1_uint1)(x2 >> 58) +
- (UINT64_C(0x7fffffffffffffe) - (arg1[2])));
- x4 = ((fiat_secp521r1_uint1)(x3 >> 58) +
- (UINT64_C(0x7fffffffffffffe) - (arg1[3])));
- x5 = ((fiat_secp521r1_uint1)(x4 >> 58) +
- (UINT64_C(0x7fffffffffffffe) - (arg1[4])));
- x6 = ((fiat_secp521r1_uint1)(x5 >> 58) +
- (UINT64_C(0x7fffffffffffffe) - (arg1[5])));
- x7 = ((fiat_secp521r1_uint1)(x6 >> 58) +
- (UINT64_C(0x7fffffffffffffe) - (arg1[6])));
- x8 = ((fiat_secp521r1_uint1)(x7 >> 58) +
- (UINT64_C(0x7fffffffffffffe) - (arg1[7])));
- x9 = ((fiat_secp521r1_uint1)(x8 >> 58) +
- (UINT64_C(0x3fffffffffffffe) - (arg1[8])));
- x10 = ((x1 & UINT64_C(0x3ffffffffffffff)) +
- (uint64_t)(fiat_secp521r1_uint1)(x9 >> 57));
- x11 = ((fiat_secp521r1_uint1)(x10 >> 58) +
- (x2 & UINT64_C(0x3ffffffffffffff)));
- x12 = (x10 & UINT64_C(0x3ffffffffffffff));
- x13 = (x11 & UINT64_C(0x3ffffffffffffff));
- x14 = ((fiat_secp521r1_uint1)(x11 >> 58) +
- (x3 & UINT64_C(0x3ffffffffffffff)));
- x15 = (x4 & UINT64_C(0x3ffffffffffffff));
- x16 = (x5 & UINT64_C(0x3ffffffffffffff));
- x17 = (x6 & UINT64_C(0x3ffffffffffffff));
- x18 = (x7 & UINT64_C(0x3ffffffffffffff));
- x19 = (x8 & UINT64_C(0x3ffffffffffffff));
- x20 = (x9 & UINT64_C(0x1ffffffffffffff));
- out1[0] = x12;
- out1[1] = x13;
- out1[2] = x14;
- out1[3] = x15;
- out1[4] = x16;
- out1[5] = x17;
- out1[6] = x18;
- out1[7] = x19;
- out1[8] = x20;
-}
-
-/*
- * The function fiat_secp521r1_selectznz is a multi-limb conditional select.
- *
- * Postconditions:
- * eval out1 = (if arg1 = 0 then eval arg2 else eval arg3)
- *
- * Input Bounds:
- * arg1: [0x0 ~> 0x1]
- * arg2: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
- * arg3: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
- * Output Bounds:
- * out1: [[0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff], [0x0 ~> 0xffffffffffffffff]]
- */
-static void
-fiat_secp521r1_selectznz(uint64_t out1[9],
- fiat_secp521r1_uint1 arg1,
- const uint64_t arg2[9],
- const uint64_t arg3[9])
-{
- uint64_t x1;
- uint64_t x2;
- uint64_t x3;
- uint64_t x4;
- uint64_t x5;
- uint64_t x6;
- uint64_t x7;
- uint64_t x8;
- uint64_t x9;
- fiat_secp521r1_cmovznz_u64(&x1, arg1, (arg2[0]), (arg3[0]));
- fiat_secp521r1_cmovznz_u64(&x2, arg1, (arg2[1]), (arg3[1]));
- fiat_secp521r1_cmovznz_u64(&x3, arg1, (arg2[2]), (arg3[2]));
- fiat_secp521r1_cmovznz_u64(&x4, arg1, (arg2[3]), (arg3[3]));
- fiat_secp521r1_cmovznz_u64(&x5, arg1, (arg2[4]), (arg3[4]));
- fiat_secp521r1_cmovznz_u64(&x6, arg1, (arg2[5]), (arg3[5]));
- fiat_secp521r1_cmovznz_u64(&x7, arg1, (arg2[6]), (arg3[6]));
- fiat_secp521r1_cmovznz_u64(&x8, arg1, (arg2[7]), (arg3[7]));
- fiat_secp521r1_cmovznz_u64(&x9, arg1, (arg2[8]), (arg3[8]));
- out1[0] = x1;
- out1[1] = x2;
- out1[2] = x3;
- out1[3] = x4;
- out1[4] = x5;
- out1[5] = x6;
- out1[6] = x7;
- out1[7] = x8;
- out1[8] = x9;
-}
-
-/*
- * The function fiat_secp521r1_to_bytes serializes a field element to bytes in little-endian order.
- *
- * Postconditions:
- * out1 = map (λ x, ⌊((eval arg1 mod m) mod 2^(8 * (x + 1))) / 2^(8 * x)⌋) [0..65]
- *
- * Output Bounds:
- * out1: [[0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0x1]]
- */
-static void
-fiat_secp521r1_to_bytes(
- uint8_t out1[66], const fiat_secp521r1_tight_field_element arg1)
-{
- uint64_t x1;
- fiat_secp521r1_uint1 x2;
- uint64_t x3;
- fiat_secp521r1_uint1 x4;
- uint64_t x5;
- fiat_secp521r1_uint1 x6;
- uint64_t x7;
- fiat_secp521r1_uint1 x8;
- uint64_t x9;
- fiat_secp521r1_uint1 x10;
- uint64_t x11;
- fiat_secp521r1_uint1 x12;
- uint64_t x13;
- fiat_secp521r1_uint1 x14;
- uint64_t x15;
- fiat_secp521r1_uint1 x16;
- uint64_t x17;
- fiat_secp521r1_uint1 x18;
- uint64_t x19;
- uint64_t x20;
- fiat_secp521r1_uint1 x21;
- uint64_t x22;
- fiat_secp521r1_uint1 x23;
- uint64_t x24;
- fiat_secp521r1_uint1 x25;
- uint64_t x26;
- fiat_secp521r1_uint1 x27;
- uint64_t x28;
- fiat_secp521r1_uint1 x29;
- uint64_t x30;
- fiat_secp521r1_uint1 x31;
- uint64_t x32;
- fiat_secp521r1_uint1 x33;
- uint64_t x34;
- fiat_secp521r1_uint1 x35;
- uint64_t x36;
- fiat_secp521r1_uint1 x37;
- uint64_t x38;
- uint64_t x39;
- uint64_t x40;
- uint64_t x41;
- uint64_t x42;
- uint64_t x43;
- uint8_t x44;
- uint64_t x45;
- uint8_t x46;
- uint64_t x47;
- uint8_t x48;
- uint64_t x49;
- uint8_t x50;
- uint64_t x51;
- uint8_t x52;
- uint64_t x53;
- uint8_t x54;
- uint64_t x55;
- uint8_t x56;
- uint8_t x57;
- uint64_t x58;
- uint8_t x59;
- uint64_t x60;
- uint8_t x61;
- uint64_t x62;
- uint8_t x63;
- uint64_t x64;
- uint8_t x65;
- uint64_t x66;
- uint8_t x67;
- uint64_t x68;
- uint8_t x69;
- uint64_t x70;
- uint8_t x71;
- uint8_t x72;
- uint64_t x73;
- uint8_t x74;
- uint64_t x75;
- uint8_t x76;
- uint64_t x77;
- uint8_t x78;
- uint64_t x79;
- uint8_t x80;
- uint64_t x81;
- uint8_t x82;
- uint64_t x83;
- uint8_t x84;
- uint64_t x85;
- uint8_t x86;
- uint8_t x87;
- uint64_t x88;
- uint8_t x89;
- uint64_t x90;
- uint8_t x91;
- uint64_t x92;
- uint8_t x93;
- uint64_t x94;
- uint8_t x95;
- uint64_t x96;
- uint8_t x97;
- uint64_t x98;
- uint8_t x99;
- uint64_t x100;
- uint8_t x101;
- uint8_t x102;
- uint8_t x103;
- uint64_t x104;
- uint8_t x105;
- uint64_t x106;
- uint8_t x107;
- uint64_t x108;
- uint8_t x109;
- uint64_t x110;
- uint8_t x111;
- uint64_t x112;
- uint8_t x113;
- uint64_t x114;
- uint8_t x115;
- uint8_t x116;
- uint64_t x117;
- uint8_t x118;
- uint64_t x119;
- uint8_t x120;
- uint64_t x121;
- uint8_t x122;
- uint64_t x123;
- uint8_t x124;
- uint64_t x125;
- uint8_t x126;
- uint64_t x127;
- uint8_t x128;
- uint64_t x129;
- uint8_t x130;
- uint8_t x131;
- uint64_t x132;
- uint8_t x133;
- uint64_t x134;
- uint8_t x135;
- uint64_t x136;
- uint8_t x137;
- uint64_t x138;
- uint8_t x139;
- uint64_t x140;
- uint8_t x141;
- uint64_t x142;
- uint8_t x143;
- uint64_t x144;
- uint8_t x145;
- uint8_t x146;
- uint64_t x147;
- uint8_t x148;
- uint64_t x149;
- uint8_t x150;
- uint64_t x151;
- uint8_t x152;
- uint64_t x153;
- uint8_t x154;
- uint64_t x155;
- uint8_t x156;
- uint64_t x157;
- uint8_t x158;
- uint64_t x159;
- uint8_t x160;
- uint8_t x161;
- uint8_t x162;
- uint64_t x163;
- uint8_t x164;
- uint64_t x165;
- uint8_t x166;
- uint64_t x167;
- uint8_t x168;
- uint64_t x169;
- uint8_t x170;
- uint64_t x171;
- uint8_t x172;
- uint64_t x173;
- uint8_t x174;
- fiat_secp521r1_uint1 x175;
- fiat_secp521r1_subborrowx_u58(&x1, &x2, 0x0, (arg1[0]),
- UINT64_C(0x3ffffffffffffff));
- fiat_secp521r1_subborrowx_u58(&x3, &x4, x2, (arg1[1]),
- UINT64_C(0x3ffffffffffffff));
- fiat_secp521r1_subborrowx_u58(&x5, &x6, x4, (arg1[2]),
- UINT64_C(0x3ffffffffffffff));
- fiat_secp521r1_subborrowx_u58(&x7, &x8, x6, (arg1[3]),
- UINT64_C(0x3ffffffffffffff));
- fiat_secp521r1_subborrowx_u58(&x9, &x10, x8, (arg1[4]),
- UINT64_C(0x3ffffffffffffff));
- fiat_secp521r1_subborrowx_u58(&x11, &x12, x10, (arg1[5]),
- UINT64_C(0x3ffffffffffffff));
- fiat_secp521r1_subborrowx_u58(&x13, &x14, x12, (arg1[6]),
- UINT64_C(0x3ffffffffffffff));
- fiat_secp521r1_subborrowx_u58(&x15, &x16, x14, (arg1[7]),
- UINT64_C(0x3ffffffffffffff));
- fiat_secp521r1_subborrowx_u57(&x17, &x18, x16, (arg1[8]),
- UINT64_C(0x1ffffffffffffff));
- fiat_secp521r1_cmovznz_u64(&x19, x18, 0x0, UINT64_C(0xffffffffffffffff));
- fiat_secp521r1_addcarryx_u58(&x20, &x21, 0x0, x1,
- (x19 & UINT64_C(0x3ffffffffffffff)));
- fiat_secp521r1_addcarryx_u58(&x22, &x23, x21, x3,
- (x19 & UINT64_C(0x3ffffffffffffff)));
- fiat_secp521r1_addcarryx_u58(&x24, &x25, x23, x5,
- (x19 & UINT64_C(0x3ffffffffffffff)));
- fiat_secp521r1_addcarryx_u58(&x26, &x27, x25, x7,
- (x19 & UINT64_C(0x3ffffffffffffff)));
- fiat_secp521r1_addcarryx_u58(&x28, &x29, x27, x9,
- (x19 & UINT64_C(0x3ffffffffffffff)));
- fiat_secp521r1_addcarryx_u58(&x30, &x31, x29, x11,
- (x19 & UINT64_C(0x3ffffffffffffff)));
- fiat_secp521r1_addcarryx_u58(&x32, &x33, x31, x13,
- (x19 & UINT64_C(0x3ffffffffffffff)));
- fiat_secp521r1_addcarryx_u58(&x34, &x35, x33, x15,
- (x19 & UINT64_C(0x3ffffffffffffff)));
- fiat_secp521r1_addcarryx_u57(&x36, &x37, x35, x17,
- (x19 & UINT64_C(0x1ffffffffffffff)));
- x38 = (x34 << 6);
- x39 = (x32 << 4);
- x40 = (x30 << 2);
- x41 = (x26 << 6);
- x42 = (x24 << 4);
- x43 = (x22 << 2);
- x44 = (uint8_t)(x20 & UINT8_C(0xff));
- x45 = (x20 >> 8);
- x46 = (uint8_t)(x45 & UINT8_C(0xff));
- x47 = (x45 >> 8);
- x48 = (uint8_t)(x47 & UINT8_C(0xff));
- x49 = (x47 >> 8);
- x50 = (uint8_t)(x49 & UINT8_C(0xff));
- x51 = (x49 >> 8);
- x52 = (uint8_t)(x51 & UINT8_C(0xff));
- x53 = (x51 >> 8);
- x54 = (uint8_t)(x53 & UINT8_C(0xff));
- x55 = (x53 >> 8);
- x56 = (uint8_t)(x55 & UINT8_C(0xff));
- x57 = (uint8_t)(x55 >> 8);
- x58 = (x43 + (uint64_t)x57);
- x59 = (uint8_t)(x58 & UINT8_C(0xff));
- x60 = (x58 >> 8);
- x61 = (uint8_t)(x60 & UINT8_C(0xff));
- x62 = (x60 >> 8);
- x63 = (uint8_t)(x62 & UINT8_C(0xff));
- x64 = (x62 >> 8);
- x65 = (uint8_t)(x64 & UINT8_C(0xff));
- x66 = (x64 >> 8);
- x67 = (uint8_t)(x66 & UINT8_C(0xff));
- x68 = (x66 >> 8);
- x69 = (uint8_t)(x68 & UINT8_C(0xff));
- x70 = (x68 >> 8);
- x71 = (uint8_t)(x70 & UINT8_C(0xff));
- x72 = (uint8_t)(x70 >> 8);
- x73 = (x42 + (uint64_t)x72);
- x74 = (uint8_t)(x73 & UINT8_C(0xff));
- x75 = (x73 >> 8);
- x76 = (uint8_t)(x75 & UINT8_C(0xff));
- x77 = (x75 >> 8);
- x78 = (uint8_t)(x77 & UINT8_C(0xff));
- x79 = (x77 >> 8);
- x80 = (uint8_t)(x79 & UINT8_C(0xff));
- x81 = (x79 >> 8);
- x82 = (uint8_t)(x81 & UINT8_C(0xff));
- x83 = (x81 >> 8);
- x84 = (uint8_t)(x83 & UINT8_C(0xff));
- x85 = (x83 >> 8);
- x86 = (uint8_t)(x85 & UINT8_C(0xff));
- x87 = (uint8_t)(x85 >> 8);
- x88 = (x41 + (uint64_t)x87);
- x89 = (uint8_t)(x88 & UINT8_C(0xff));
- x90 = (x88 >> 8);
- x91 = (uint8_t)(x90 & UINT8_C(0xff));
- x92 = (x90 >> 8);
- x93 = (uint8_t)(x92 & UINT8_C(0xff));
- x94 = (x92 >> 8);
- x95 = (uint8_t)(x94 & UINT8_C(0xff));
- x96 = (x94 >> 8);
- x97 = (uint8_t)(x96 & UINT8_C(0xff));
- x98 = (x96 >> 8);
- x99 = (uint8_t)(x98 & UINT8_C(0xff));
- x100 = (x98 >> 8);
- x101 = (uint8_t)(x100 & UINT8_C(0xff));
- x102 = (uint8_t)(x100 >> 8);
- x103 = (uint8_t)(x28 & UINT8_C(0xff));
- x104 = (x28 >> 8);
- x105 = (uint8_t)(x104 & UINT8_C(0xff));
- x106 = (x104 >> 8);
- x107 = (uint8_t)(x106 & UINT8_C(0xff));
- x108 = (x106 >> 8);
- x109 = (uint8_t)(x108 & UINT8_C(0xff));
- x110 = (x108 >> 8);
- x111 = (uint8_t)(x110 & UINT8_C(0xff));
- x112 = (x110 >> 8);
- x113 = (uint8_t)(x112 & UINT8_C(0xff));
- x114 = (x112 >> 8);
- x115 = (uint8_t)(x114 & UINT8_C(0xff));
- x116 = (uint8_t)(x114 >> 8);
- x117 = (x40 + (uint64_t)x116);
- x118 = (uint8_t)(x117 & UINT8_C(0xff));
- x119 = (x117 >> 8);
- x120 = (uint8_t)(x119 & UINT8_C(0xff));
- x121 = (x119 >> 8);
- x122 = (uint8_t)(x121 & UINT8_C(0xff));
- x123 = (x121 >> 8);
- x124 = (uint8_t)(x123 & UINT8_C(0xff));
- x125 = (x123 >> 8);
- x126 = (uint8_t)(x125 & UINT8_C(0xff));
- x127 = (x125 >> 8);
- x128 = (uint8_t)(x127 & UINT8_C(0xff));
- x129 = (x127 >> 8);
- x130 = (uint8_t)(x129 & UINT8_C(0xff));
- x131 = (uint8_t)(x129 >> 8);
- x132 = (x39 + (uint64_t)x131);
- x133 = (uint8_t)(x132 & UINT8_C(0xff));
- x134 = (x132 >> 8);
- x135 = (uint8_t)(x134 & UINT8_C(0xff));
- x136 = (x134 >> 8);
- x137 = (uint8_t)(x136 & UINT8_C(0xff));
- x138 = (x136 >> 8);
- x139 = (uint8_t)(x138 & UINT8_C(0xff));
- x140 = (x138 >> 8);
- x141 = (uint8_t)(x140 & UINT8_C(0xff));
- x142 = (x140 >> 8);
- x143 = (uint8_t)(x142 & UINT8_C(0xff));
- x144 = (x142 >> 8);
- x145 = (uint8_t)(x144 & UINT8_C(0xff));
- x146 = (uint8_t)(x144 >> 8);
- x147 = (x38 + (uint64_t)x146);
- x148 = (uint8_t)(x147 & UINT8_C(0xff));
- x149 = (x147 >> 8);
- x150 = (uint8_t)(x149 & UINT8_C(0xff));
- x151 = (x149 >> 8);
- x152 = (uint8_t)(x151 & UINT8_C(0xff));
- x153 = (x151 >> 8);
- x154 = (uint8_t)(x153 & UINT8_C(0xff));
- x155 = (x153 >> 8);
- x156 = (uint8_t)(x155 & UINT8_C(0xff));
- x157 = (x155 >> 8);
- x158 = (uint8_t)(x157 & UINT8_C(0xff));
- x159 = (x157 >> 8);
- x160 = (uint8_t)(x159 & UINT8_C(0xff));
- x161 = (uint8_t)(x159 >> 8);
- x162 = (uint8_t)(x36 & UINT8_C(0xff));
- x163 = (x36 >> 8);
- x164 = (uint8_t)(x163 & UINT8_C(0xff));
- x165 = (x163 >> 8);
- x166 = (uint8_t)(x165 & UINT8_C(0xff));
- x167 = (x165 >> 8);
- x168 = (uint8_t)(x167 & UINT8_C(0xff));
- x169 = (x167 >> 8);
- x170 = (uint8_t)(x169 & UINT8_C(0xff));
- x171 = (x169 >> 8);
- x172 = (uint8_t)(x171 & UINT8_C(0xff));
- x173 = (x171 >> 8);
- x174 = (uint8_t)(x173 & UINT8_C(0xff));
- x175 = (fiat_secp521r1_uint1)(x173 >> 8);
- out1[0] = x44;
- out1[1] = x46;
- out1[2] = x48;
- out1[3] = x50;
- out1[4] = x52;
- out1[5] = x54;
- out1[6] = x56;
- out1[7] = x59;
- out1[8] = x61;
- out1[9] = x63;
- out1[10] = x65;
- out1[11] = x67;
- out1[12] = x69;
- out1[13] = x71;
- out1[14] = x74;
- out1[15] = x76;
- out1[16] = x78;
- out1[17] = x80;
- out1[18] = x82;
- out1[19] = x84;
- out1[20] = x86;
- out1[21] = x89;
- out1[22] = x91;
- out1[23] = x93;
- out1[24] = x95;
- out1[25] = x97;
- out1[26] = x99;
- out1[27] = x101;
- out1[28] = x102;
- out1[29] = x103;
- out1[30] = x105;
- out1[31] = x107;
- out1[32] = x109;
- out1[33] = x111;
- out1[34] = x113;
- out1[35] = x115;
- out1[36] = x118;
- out1[37] = x120;
- out1[38] = x122;
- out1[39] = x124;
- out1[40] = x126;
- out1[41] = x128;
- out1[42] = x130;
- out1[43] = x133;
- out1[44] = x135;
- out1[45] = x137;
- out1[46] = x139;
- out1[47] = x141;
- out1[48] = x143;
- out1[49] = x145;
- out1[50] = x148;
- out1[51] = x150;
- out1[52] = x152;
- out1[53] = x154;
- out1[54] = x156;
- out1[55] = x158;
- out1[56] = x160;
- out1[57] = x161;
- out1[58] = x162;
- out1[59] = x164;
- out1[60] = x166;
- out1[61] = x168;
- out1[62] = x170;
- out1[63] = x172;
- out1[64] = x174;
- out1[65] = x175;
-}
-
-/*
- * The function fiat_secp521r1_from_bytes deserializes a field element from bytes in little-endian order.
- *
- * Postconditions:
- * eval out1 mod m = bytes_eval arg1 mod m
- *
- * Input Bounds:
- * arg1: [[0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0x1]]
- */
-static void
-fiat_secp521r1_from_bytes(fiat_secp521r1_tight_field_element out1,
- const uint8_t arg1[66])
-{
- uint64_t x1;
- uint64_t x2;
- uint64_t x3;
- uint64_t x4;
- uint64_t x5;
- uint64_t x6;
- uint64_t x7;
- uint8_t x8;
- uint64_t x9;
- uint64_t x10;
- uint64_t x11;
- uint64_t x12;
- uint64_t x13;
- uint64_t x14;
- uint64_t x15;
- uint64_t x16;
- uint64_t x17;
- uint64_t x18;
- uint64_t x19;
- uint64_t x20;
- uint64_t x21;
- uint64_t x22;
- uint64_t x23;
- uint64_t x24;
- uint64_t x25;
- uint64_t x26;
- uint64_t x27;
- uint64_t x28;
- uint64_t x29;
- uint64_t x30;
- uint64_t x31;
- uint64_t x32;
- uint64_t x33;
- uint64_t x34;
- uint64_t x35;
- uint64_t x36;
- uint8_t x37;
- uint64_t x38;
- uint64_t x39;
- uint64_t x40;
- uint64_t x41;
- uint64_t x42;
- uint64_t x43;
- uint64_t x44;
- uint64_t x45;
- uint64_t x46;
- uint64_t x47;
- uint64_t x48;
- uint64_t x49;
- uint64_t x50;
- uint64_t x51;
- uint64_t x52;
- uint64_t x53;
- uint64_t x54;
- uint64_t x55;
- uint64_t x56;
- uint64_t x57;
- uint64_t x58;
- uint64_t x59;
- uint64_t x60;
- uint64_t x61;
- uint64_t x62;
- uint64_t x63;
- uint64_t x64;
- uint64_t x65;
- uint8_t x66;
- uint64_t x67;
- uint64_t x68;
- uint64_t x69;
- uint64_t x70;
- uint64_t x71;
- uint64_t x72;
- uint64_t x73;
- uint64_t x74;
- uint8_t x75;
- uint64_t x76;
- uint64_t x77;
- uint64_t x78;
- uint64_t x79;
- uint64_t x80;
- uint64_t x81;
- uint64_t x82;
- uint64_t x83;
- uint8_t x84;
- uint64_t x85;
- uint64_t x86;
- uint64_t x87;
- uint64_t x88;
- uint64_t x89;
- uint64_t x90;
- uint64_t x91;
- uint64_t x92;
- uint8_t x93;
- uint64_t x94;
- uint64_t x95;
- uint64_t x96;
- uint64_t x97;
- uint64_t x98;
- uint64_t x99;
- uint64_t x100;
- uint64_t x101;
- uint64_t x102;
- uint64_t x103;
- uint64_t x104;
- uint64_t x105;
- uint64_t x106;
- uint64_t x107;
- uint64_t x108;
- uint8_t x109;
- uint64_t x110;
- uint64_t x111;
- uint64_t x112;
- uint64_t x113;
- uint64_t x114;
- uint64_t x115;
- uint64_t x116;
- uint64_t x117;
- uint8_t x118;
- uint64_t x119;
- uint64_t x120;
- uint64_t x121;
- uint64_t x122;
- uint64_t x123;
- uint64_t x124;
- uint64_t x125;
- uint64_t x126;
- uint8_t x127;
- uint64_t x128;
- uint64_t x129;
- uint64_t x130;
- uint64_t x131;
- uint64_t x132;
- uint64_t x133;
- uint64_t x134;
- uint64_t x135;
- uint64_t x136;
- uint64_t x137;
- uint64_t x138;
- uint64_t x139;
- uint64_t x140;
- uint64_t x141;
- x1 = ((uint64_t)(fiat_secp521r1_uint1)(arg1[65]) << 56);
- x2 = ((uint64_t)(arg1[64]) << 48);
- x3 = ((uint64_t)(arg1[63]) << 40);
- x4 = ((uint64_t)(arg1[62]) << 32);
- x5 = ((uint64_t)(arg1[61]) << 24);
- x6 = ((uint64_t)(arg1[60]) << 16);
- x7 = ((uint64_t)(arg1[59]) << 8);
- x8 = (arg1[58]);
- x9 = ((uint64_t)(arg1[57]) << 50);
- x10 = ((uint64_t)(arg1[56]) << 42);
- x11 = ((uint64_t)(arg1[55]) << 34);
- x12 = ((uint64_t)(arg1[54]) << 26);
- x13 = ((uint64_t)(arg1[53]) << 18);
- x14 = ((uint64_t)(arg1[52]) << 10);
- x15 = ((uint64_t)(arg1[51]) << 2);
- x16 = ((uint64_t)(arg1[50]) << 52);
- x17 = ((uint64_t)(arg1[49]) << 44);
- x18 = ((uint64_t)(arg1[48]) << 36);
- x19 = ((uint64_t)(arg1[47]) << 28);
- x20 = ((uint64_t)(arg1[46]) << 20);
- x21 = ((uint64_t)(arg1[45]) << 12);
- x22 = ((uint64_t)(arg1[44]) << 4);
- x23 = ((uint64_t)(arg1[43]) << 54);
- x24 = ((uint64_t)(arg1[42]) << 46);
- x25 = ((uint64_t)(arg1[41]) << 38);
- x26 = ((uint64_t)(arg1[40]) << 30);
- x27 = ((uint64_t)(arg1[39]) << 22);
- x28 = ((uint64_t)(arg1[38]) << 14);
- x29 = ((uint64_t)(arg1[37]) << 6);
- x30 = ((uint64_t)(arg1[36]) << 56);
- x31 = ((uint64_t)(arg1[35]) << 48);
- x32 = ((uint64_t)(arg1[34]) << 40);
- x33 = ((uint64_t)(arg1[33]) << 32);
- x34 = ((uint64_t)(arg1[32]) << 24);
- x35 = ((uint64_t)(arg1[31]) << 16);
- x36 = ((uint64_t)(arg1[30]) << 8);
- x37 = (arg1[29]);
- x38 = ((uint64_t)(arg1[28]) << 50);
- x39 = ((uint64_t)(arg1[27]) << 42);
- x40 = ((uint64_t)(arg1[26]) << 34);
- x41 = ((uint64_t)(arg1[25]) << 26);
- x42 = ((uint64_t)(arg1[24]) << 18);
- x43 = ((uint64_t)(arg1[23]) << 10);
- x44 = ((uint64_t)(arg1[22]) << 2);
- x45 = ((uint64_t)(arg1[21]) << 52);
- x46 = ((uint64_t)(arg1[20]) << 44);
- x47 = ((uint64_t)(arg1[19]) << 36);
- x48 = ((uint64_t)(arg1[18]) << 28);
- x49 = ((uint64_t)(arg1[17]) << 20);
- x50 = ((uint64_t)(arg1[16]) << 12);
- x51 = ((uint64_t)(arg1[15]) << 4);
- x52 = ((uint64_t)(arg1[14]) << 54);
- x53 = ((uint64_t)(arg1[13]) << 46);
- x54 = ((uint64_t)(arg1[12]) << 38);
- x55 = ((uint64_t)(arg1[11]) << 30);
- x56 = ((uint64_t)(arg1[10]) << 22);
- x57 = ((uint64_t)(arg1[9]) << 14);
- x58 = ((uint64_t)(arg1[8]) << 6);
- x59 = ((uint64_t)(arg1[7]) << 56);
- x60 = ((uint64_t)(arg1[6]) << 48);
- x61 = ((uint64_t)(arg1[5]) << 40);
- x62 = ((uint64_t)(arg1[4]) << 32);
- x63 = ((uint64_t)(arg1[3]) << 24);
- x64 = ((uint64_t)(arg1[2]) << 16);
- x65 = ((uint64_t)(arg1[1]) << 8);
- x66 = (arg1[0]);
- x67 = (x65 + (uint64_t)x66);
- x68 = (x64 + x67);
- x69 = (x63 + x68);
- x70 = (x62 + x69);
- x71 = (x61 + x70);
- x72 = (x60 + x71);
- x73 = (x59 + x72);
- x74 = (x73 & UINT64_C(0x3ffffffffffffff));
- x75 = (uint8_t)(x73 >> 58);
- x76 = (x58 + (uint64_t)x75);
- x77 = (x57 + x76);
- x78 = (x56 + x77);
- x79 = (x55 + x78);
- x80 = (x54 + x79);
- x81 = (x53 + x80);
- x82 = (x52 + x81);
- x83 = (x82 & UINT64_C(0x3ffffffffffffff));
- x84 = (uint8_t)(x82 >> 58);
- x85 = (x51 + (uint64_t)x84);
- x86 = (x50 + x85);
- x87 = (x49 + x86);
- x88 = (x48 + x87);
- x89 = (x47 + x88);
- x90 = (x46 + x89);
- x91 = (x45 + x90);
- x92 = (x91 & UINT64_C(0x3ffffffffffffff));
- x93 = (uint8_t)(x91 >> 58);
- x94 = (x44 + (uint64_t)x93);
- x95 = (x43 + x94);
- x96 = (x42 + x95);
- x97 = (x41 + x96);
- x98 = (x40 + x97);
- x99 = (x39 + x98);
- x100 = (x38 + x99);
- x101 = (x36 + (uint64_t)x37);
- x102 = (x35 + x101);
- x103 = (x34 + x102);
- x104 = (x33 + x103);
- x105 = (x32 + x104);
- x106 = (x31 + x105);
- x107 = (x30 + x106);
- x108 = (x107 & UINT64_C(0x3ffffffffffffff));
- x109 = (uint8_t)(x107 >> 58);
- x110 = (x29 + (uint64_t)x109);
- x111 = (x28 + x110);
- x112 = (x27 + x111);
- x113 = (x26 + x112);
- x114 = (x25 + x113);
- x115 = (x24 + x114);
- x116 = (x23 + x115);
- x117 = (x116 & UINT64_C(0x3ffffffffffffff));
- x118 = (uint8_t)(x116 >> 58);
- x119 = (x22 + (uint64_t)x118);
- x120 = (x21 + x119);
- x121 = (x20 + x120);
- x122 = (x19 + x121);
- x123 = (x18 + x122);
- x124 = (x17 + x123);
- x125 = (x16 + x124);
- x126 = (x125 & UINT64_C(0x3ffffffffffffff));
- x127 = (uint8_t)(x125 >> 58);
- x128 = (x15 + (uint64_t)x127);
- x129 = (x14 + x128);
- x130 = (x13 + x129);
- x131 = (x12 + x130);
- x132 = (x11 + x131);
- x133 = (x10 + x132);
- x134 = (x9 + x133);
- x135 = (x7 + (uint64_t)x8);
- x136 = (x6 + x135);
- x137 = (x5 + x136);
- x138 = (x4 + x137);
- x139 = (x3 + x138);
- x140 = (x2 + x139);
- x141 = (x1 + x140);
- out1[0] = x74;
- out1[1] = x83;
- out1[2] = x92;
- out1[3] = x100;
- out1[4] = x108;
- out1[5] = x117;
- out1[6] = x126;
- out1[7] = x134;
- out1[8] = x141;
-}
-
-/* END verbatim fiat code */
-
-/* curve-related constants */
-
-static const limb_t const_one[9] = {
- UINT64_C(0x0000000000000001), UINT64_C(0x0000000000000000),
- UINT64_C(0x0000000000000000), UINT64_C(0x0000000000000000),
- UINT64_C(0x0000000000000000), UINT64_C(0x0000000000000000),
- UINT64_C(0x0000000000000000), UINT64_C(0x0000000000000000),
- UINT64_C(0x0000000000000000)
-};
-
-static const limb_t const_b[9] = {
- UINT64_C(0x03451FD46B503F00), UINT64_C(0x00F7E20F4B0D3C7B),
- UINT64_C(0x000BD3BB1BF07357), UINT64_C(0x0147B1FA4DEC594B),
- UINT64_C(0x018EF109E1561939), UINT64_C(0x026CC57CEE2D2264),
- UINT64_C(0x00540EEA2DA725B9), UINT64_C(0x02687E4A688682DA),
- UINT64_C(0x0051953EB9618E1C)
-};
-
-/* LUT for scalar multiplication by comb interleaving */
-static const pt_aff_t lut_cmb[13][16] = {
- {
- { { UINT64_C(0x017E7E31C2E5BD66), UINT64_C(0x022CF0615A90A6FE),
- UINT64_C(0x00127A2FFA8DE334), UINT64_C(0x01DFBF9D64A3F877),
- UINT64_C(0x006B4D3DBAA14B5E), UINT64_C(0x014FED487E0A2BD8),
- UINT64_C(0x015B4429C6481390), UINT64_C(0x03A73678FB2D988E),
- UINT64_C(0x00C6858E06B70404) },
- { UINT64_C(0x00BE94769FD16650), UINT64_C(0x031C21A89CB09022),
- UINT64_C(0x039013FAD0761353), UINT64_C(0x02657BD099031542),
- UINT64_C(0x03273E662C97EE72), UINT64_C(0x01E6D11A05EBEF45),
- UINT64_C(0x03D1BD998F544495), UINT64_C(0x03001172297ED0B1),
- UINT64_C(0x011839296A789A3B) } },
- { { UINT64_C(0x01919D2EDE37AD7D), UINT64_C(0x0124218B0CBA8169),
- UINT64_C(0x03D16B59FE21BAEB), UINT64_C(0x0128E920C814769A),
- UINT64_C(0x012D7A8DD1AD3F16), UINT64_C(0x008F66AE796B5E84),
- UINT64_C(0x0159479B52A6E5B1), UINT64_C(0x0065776475A992D6),
- UINT64_C(0x01A73D352443DE29) },
- { UINT64_C(0x03588CA1EE86C0E5), UINT64_C(0x01726F24E9641097),
- UINT64_C(0x00ED1DEC3C70CF10), UINT64_C(0x033E3715D6C0B56B),
- UINT64_C(0x03A355CEEC2E2DD4), UINT64_C(0x02A740C5F4BE2AC7),
- UINT64_C(0x03814F2F1557FA82), UINT64_C(0x0377665E7E1B1B2A),
- UINT64_C(0x013E9B03B97DFA62) } },
- { { UINT64_C(0x01AB5096EC8F3078), UINT64_C(0x01F879B624C5CE35),
- UINT64_C(0x03EAF137E79A329D), UINT64_C(0x01B578C0508DC44B),
- UINT64_C(0x00F177ACE4383C0C), UINT64_C(0x014FC34933C0F6AE),
- UINT64_C(0x00EB0BF7A596EFDB), UINT64_C(0x00CB1CF6F0CE4701),
- UINT64_C(0x00652BF3C52927A4) },
- { UINT64_C(0x033CC3E8DEB090CB), UINT64_C(0x0001C95CD53DFE05),
- UINT64_C(0x000211CF5FF79D1F), UINT64_C(0x03241CB3CDD0C455),
- UINT64_C(0x01A0347087BB6897), UINT64_C(0x01CB80147B7605F2),
- UINT64_C(0x00112911CD8FE8E8), UINT64_C(0x035BB228ADCC452A),
- UINT64_C(0x015BE6EF1BDD6601) } },
- { { UINT64_C(0x01CEAD882816ECD4), UINT64_C(0x014FD43F70986680),
- UINT64_C(0x01F30DCE3BBC46F9), UINT64_C(0x002AFF1A6363269B),
- UINT64_C(0x02F7114C5D8C308D), UINT64_C(0x01520C8A3C0634B0),
- UINT64_C(0x0073A0C5F22E0E8F), UINT64_C(0x018D1BBAD97F682C),
- UINT64_C(0x0056D5D1D99D5B7F) },
- { UINT64_C(0x006B8BC90525251B), UINT64_C(0x019C4A9777BF1ED7),
- UINT64_C(0x0234591CE1A5F9E7), UINT64_C(0x024F37B278AE548E),
- UINT64_C(0x0226CBDE556BD0F2), UINT64_C(0x02093C375C76F662),
- UINT64_C(0x0168478B5C582D02), UINT64_C(0x0284434760C5E8E7),
- UINT64_C(0x003D2D1B7D9BAAA2) } },
- { { UINT64_C(0x0345627967CBE207), UINT64_C(0x002EAF61734A1987),
- UINT64_C(0x016DF725A318F4F5), UINT64_C(0x00E584D368D7CF15),
- UINT64_C(0x01B8C6B6657429E1), UINT64_C(0x0221D1A64B12AC51),
- UINT64_C(0x016D488ED34541B9), UINT64_C(0x00609A8BD6FC55C5),
- UINT64_C(0x01585389E359E1E2) },
- { UINT64_C(0x02A0EA86B9AD2A4E), UINT64_C(0x030ABA4A2203CD0E),
- UINT64_C(0x02ECF4ABFD87D736), UINT64_C(0x01D5815EB2103FD5),
- UINT64_C(0x023DDB446E0D69E5), UINT64_C(0x03873AEDB2096E89),
- UINT64_C(0x02E938E3088A654E), UINT64_C(0x03CE7C2D5555E89E),
- UINT64_C(0x002A2E618C9A8AED) } },
- { { UINT64_C(0x00C0E02DDA0CDB9A), UINT64_C(0x030093E9326A40BB),
- UINT64_C(0x01AEBE3191085015), UINT64_C(0x00CC998F686F466C),
- UINT64_C(0x00F2991652F3DBC5), UINT64_C(0x0305E12550FBCB15),
- UINT64_C(0x00315CFED5DC7ED7), UINT64_C(0x03FD51BC68E55CED),
- UINT64_C(0x008A75841259FDED) },
- { UINT64_C(0x00874F92CE48C808), UINT64_C(0x032038FD2066D756),
- UINT64_C(0x0331914A95336DCA), UINT64_C(0x003A2D0A92ACE248),
- UINT64_C(0x00E0B9B82B1BC8A9), UINT64_C(0x002F4124FB4BA575),
- UINT64_C(0x00FB2293ADD56621), UINT64_C(0x00A6127432A1DC15),
- UINT64_C(0x0096FB303FCBBA21) } },
- { { UINT64_C(0x0087848D32FBCDA7), UINT64_C(0x030EC02ACE3BFE06),
- UINT64_C(0x025E79AB88EE94BE), UINT64_C(0x002380F265A8D542),
- UINT64_C(0x02AF5B866132C459), UINT64_C(0x006D308E13BB74AF),
- UINT64_C(0x024861A93F736CDE), UINT64_C(0x02B6735E1974AD24),
- UINT64_C(0x007E3E98F984C396) },
- { UINT64_C(0x011A01FB022A71C9), UINT64_C(0x027AABE445FA7DCA),
- UINT64_C(0x01D351CBFBBC3619), UINT64_C(0x0160E2F1D8FC9B7F),
- UINT64_C(0x025C1E212AC1BD5D), UINT64_C(0x03550871A71E99EB),
- UINT64_C(0x02D5A08CED50A386), UINT64_C(0x03B6A468649B6A8F),
- UINT64_C(0x0108EE58EB6D781F) } },
- { { UINT64_C(0x01AFE337BCB8DB55), UINT64_C(0x0365A6078FE4AF7A),
- UINT64_C(0x03D1C8FC0331D9B8), UINT64_C(0x009F6F403FF9E1D6),
- UINT64_C(0x02DF128E11B91CCE), UINT64_C(0x01028214B5A5ED4C),
- UINT64_C(0x014300FB8FBCC30B), UINT64_C(0x0197C105563F151B),
- UINT64_C(0x006B6AD89ABCB924) },
- { UINT64_C(0x02343480A1475465), UINT64_C(0x036433111AAF7655),
- UINT64_C(0x022232C96C99246F), UINT64_C(0x0322651C2A008523),
- UINT64_C(0x0197485ED57E9062), UINT64_C(0x02B4832E92D8841A),
- UINT64_C(0x02DBF63DF0496A9B), UINT64_C(0x0075A9F399348CCF),
- UINT64_C(0x01B468DA27157139) } },
- { { UINT64_C(0x02F817A853110AE0), UINT64_C(0x00C10ABC3469041D),
- UINT64_C(0x0399B5681380FF8C), UINT64_C(0x0399D3F80A1F7D39),
- UINT64_C(0x0269250858760A69), UINT64_C(0x03E8ACED3599493C),
- UINT64_C(0x023906A99EE9E269), UINT64_C(0x03684E82E1D19164),
- UINT64_C(0x01B00DDB707F130E) },
- { UINT64_C(0x01B9CB7C70E64647), UINT64_C(0x00156530ADD57D4D),
- UINT64_C(0x0357F16ADF420E69), UINT64_C(0x013BDB742FC34BD9),
- UINT64_C(0x0322A1323DF9DA56), UINT64_C(0x01A6442A635A2B0A),
- UINT64_C(0x01DD106B799534CF), UINT64_C(0x01DB6F04475392BB),
- UINT64_C(0x0085683F1D7DB165) } },
- { { UINT64_C(0x00FF0B2418D6A19B), UINT64_C(0x03D0C79C96EF791E),
- UINT64_C(0x0157D7A45970DFEC), UINT64_C(0x0258D899A59E48C9),
- UINT64_C(0x033790E7F1FA3B30), UINT64_C(0x0177D51FBFFC2B36),
- UINT64_C(0x021A07245B77E075), UINT64_C(0x00D21F03E5230B56),
- UINT64_C(0x00998DCCE486419C) },
- { UINT64_C(0x01091A695BFD0575), UINT64_C(0x013627AA7EFF912A),
- UINT64_C(0x039991631C377F5A), UINT64_C(0x00FFCBAE33E6C3B0),
- UINT64_C(0x036545772773AD96), UINT64_C(0x02DEF3D2B3143BB8),
- UINT64_C(0x01B245D67D28AEE2), UINT64_C(0x03B5730E50925D4D),
- UINT64_C(0x0137D5DA0626A021) } },
- { { UINT64_C(0x02EF399693C8C9ED), UINT64_C(0x032480E4E91B4B50),
- UINT64_C(0x03EAED827D75B37A), UINT64_C(0x02B9358A8C276525),
- UINT64_C(0x019C467FA946257E), UINT64_C(0x03B457A606548F9D),
- UINT64_C(0x02D3B10268BB98C2), UINT64_C(0x034BECF321542167),
- UINT64_C(0x01A1CBB2C11A742B) },
- { UINT64_C(0x020BC43C9CBA4DF5), UINT64_C(0x02C3C5D92732D879),
- UINT64_C(0x03A372C63EEC57C9), UINT64_C(0x014F6920CA56FAD0),
- UINT64_C(0x036BAFA7F7DF741A), UINT64_C(0x01464F9B06028A5B),
- UINT64_C(0x000CE62E83C0059C), UINT64_C(0x00F520B04B69F179),
- UINT64_C(0x011A209D7D4F8EEB) } },
- { { UINT64_C(0x01C6A5ECE2AF535C), UINT64_C(0x007C6B09AB9601A8),
- UINT64_C(0x038E9A5EC53E207E), UINT64_C(0x03F26BD6C2BFA78F),
- UINT64_C(0x010CDD45101F6F83), UINT64_C(0x0217ECA0924348D3),
- UINT64_C(0x0147B8EEE7A39BA7), UINT64_C(0x024DDB6C72B3B17D),
- UINT64_C(0x01AE0B275D729015) },
- { UINT64_C(0x0015C3536FA0D000), UINT64_C(0x02D1142A348E15B6),
- UINT64_C(0x0327BB07DD0C2213), UINT64_C(0x0187BA5FF3D0F09E),
- UINT64_C(0x0044C2DC0E108433), UINT64_C(0x0034160CAD0C591E),
- UINT64_C(0x028471C7D759FF89), UINT64_C(0x00E019A28A163F01),
- UINT64_C(0x00F2C97A825E5385) } },
- { { UINT64_C(0x038C2460BF70ACE0), UINT64_C(0x0383AC70974FEC4F),
- UINT64_C(0x03E2AA648FF27E41), UINT64_C(0x0245F0DBB9355BA1),
- UINT64_C(0x005499994AA91856), UINT64_C(0x006C41EC471DCB23),
- UINT64_C(0x01FF9D2007310265), UINT64_C(0x0060D28D61D29BD7),
- UINT64_C(0x0154E84C6D5C5A9A) },
- { UINT64_C(0x0325BCE404C78230), UINT64_C(0x038A9519CB9ADB50),
- UINT64_C(0x0370A6A5972F5EED), UINT64_C(0x00D5CBEF06834788),
- UINT64_C(0x00151666A6DEE354), UINT64_C(0x0008A831FD9B0A22),
- UINT64_C(0x0360D3F15A923EB0), UINT64_C(0x011CEB88A8A3E02E),
- UINT64_C(0x00CD0FDCE9171910) } },
- { { UINT64_C(0x017643017002D68B), UINT64_C(0x01581124BB115A0D),
- UINT64_C(0x03AEDA0D3163CB21), UINT64_C(0x00F69C67520D44D4),
- UINT64_C(0x03E135854D80B212), UINT64_C(0x0393E18B0CFCD461),
- UINT64_C(0x01E646F8739535D0), UINT64_C(0x02DA9D8A9353AE22),
- UINT64_C(0x0160373EDF8218F9) },
- { UINT64_C(0x03E6AECA5D90B740), UINT64_C(0x03FF9C27516B2CFC),
- UINT64_C(0x034F4A8BB572E463), UINT64_C(0x007B64BAF1504EE1),
- UINT64_C(0x021A1B22011EFA49), UINT64_C(0x03D4B0EED295BDE3),
- UINT64_C(0x006A3FA9FD193C5C), UINT64_C(0x038717960A1006B0),
- UINT64_C(0x00F1597050014DCF) } },
- { { UINT64_C(0x003927618EDA25DC), UINT64_C(0x0361657547DB658B),
- UINT64_C(0x02B8E847FFB9EF33), UINT64_C(0x001A1DB5CA45000E),
- UINT64_C(0x037664A1305CA9BC), UINT64_C(0x0218997B0A2FBCE3),
- UINT64_C(0x01A085FF9F45131E), UINT64_C(0x00A1F6CF07EFF2D9),
- UINT64_C(0x0174C644D6C94B68) },
- { UINT64_C(0x007BBBC4821A0C30), UINT64_C(0x02649F09BAEFEF46),
- UINT64_C(0x0332D706D303F067), UINT64_C(0x0254B383642D4309),
- UINT64_C(0x0395AD34B7BE0E21), UINT64_C(0x02D9107F2D73D7AD),
- UINT64_C(0x037B7820233EF8FC), UINT64_C(0x0279A016B3256D06),
- UINT64_C(0x011AF3A7C2F87F41) } },
- { { UINT64_C(0x0257D0E0C16A8803), UINT64_C(0x03ED792238920488),
- UINT64_C(0x001AC09CD6B220DC), UINT64_C(0x02A4132750A7F053),
- UINT64_C(0x00A5E7726CD65543), UINT64_C(0x01F0A9985C982A0F),
- UINT64_C(0x0307B7DB57458965), UINT64_C(0x01985401A96336DC),
- UINT64_C(0x00D8E9920CF30F0C) },
- { UINT64_C(0x024677C739792D19), UINT64_C(0x02F65F1ED50C62B2),
- UINT64_C(0x0068CAE4CC263AA1), UINT64_C(0x00C913451E404E6A),
- UINT64_C(0x00BED1AA30F76B8C), UINT64_C(0x03C4320182BBEDCB),
- UINT64_C(0x00A30EC8B5406328), UINT64_C(0x00E61F7C2704E885),
- UINT64_C(0x0127B023B5454A66) } },
- },
- {
- { { UINT64_C(0x00E9E114E43C6A8B), UINT64_C(0x027E2C20105A2E23),
- UINT64_C(0x03D5B5FA745094EE), UINT64_C(0x01337080223BD7FF),
- UINT64_C(0x00D8CCA5AD4589D8), UINT64_C(0x0132DCA140336E19),
- UINT64_C(0x0302098FAB8EE167), UINT64_C(0x00625B5791BF1AAD),
- UINT64_C(0x01ECCAEB2EF79CDB) },
- { UINT64_C(0x01886BBC26B04438), UINT64_C(0x004F43B6559C663D),
- UINT64_C(0x035D8CA99B91E616), UINT64_C(0x01354ED06659D27A),
- UINT64_C(0x0054DF4765586194), UINT64_C(0x021052BBF70881C7),
- UINT64_C(0x031C5EA1F6288A8B), UINT64_C(0x018AC1ACD36CBDFF),
- UINT64_C(0x002E5EDF2873FF52) } },
- { { UINT64_C(0x0192DA26804ED5E3), UINT64_C(0x019DEC17F31925DE),
- UINT64_C(0x01585208EBD95AC4), UINT64_C(0x039C6674D066C682),
- UINT64_C(0x000715A11D1C0CFA), UINT64_C(0x032AD56C1F218BD5),
- UINT64_C(0x0310FABD23E934F9), UINT64_C(0x009AF7F574942B50),
- UINT64_C(0x005E0976782CAEF4) },
- { UINT64_C(0x038B0A7A2A7D5B37), UINT64_C(0x0315653FB7DA77BD),
- UINT64_C(0x023F157F76616F31), UINT64_C(0x03C8C103329ACAE7),
- UINT64_C(0x005A72502EE9CFA2), UINT64_C(0x03204345A2A46FC3),
- UINT64_C(0x03666DC71F8A5B63), UINT64_C(0x01671725C07390A9),
- UINT64_C(0x01E82DA80D6C216A) } },
- { { UINT64_C(0x02F28395A29D2024), UINT64_C(0x031A09859C9B6A2D),
- UINT64_C(0x0047073FD20F177A), UINT64_C(0x03D961594C7CA571),
- UINT64_C(0x019555237A9B2EC3), UINT64_C(0x029EFFFB7289E9D9),
- UINT64_C(0x008D541E497546F7), UINT64_C(0x0270E93D46DCEE94),
- UINT64_C(0x00396B23A204BEFD) },
- { UINT64_C(0x024295052DDD93A9), UINT64_C(0x0081670F33C07709),
- UINT64_C(0x00B1D851D4CDFDA9), UINT64_C(0x014DF8329142BB29),
- UINT64_C(0x00CDDB9A15F7FCFB), UINT64_C(0x0225454F3A1F5B86),
- UINT64_C(0x01A46C8B126C191D), UINT64_C(0x03D3D3229D104DF9),
- UINT64_C(0x018B36AD8A91DE12) } },
- { { UINT64_C(0x008FA75A590E92D6), UINT64_C(0x02223AFBB681AD2D),
- UINT64_C(0x000DD9E71FEC0AB1), UINT64_C(0x03B4A988F4ABFEC5),
- UINT64_C(0x02BDD3FD9A8FB4C8), UINT64_C(0x037A5B9AD9171110),
- UINT64_C(0x0225D2934ADB68F2), UINT64_C(0x008BA6F5E067B164),
- UINT64_C(0x014EA0A8B0C5768B) },
- { UINT64_C(0x000AB8407662F537), UINT64_C(0x02F781E22DFF31BF),
- UINT64_C(0x03E22656A1F21F75), UINT64_C(0x01054C62C579B73D),
- UINT64_C(0x0177A8529E6C1116), UINT64_C(0x03211865DCC5D46F),
- UINT64_C(0x012706123E7C2723), UINT64_C(0x0396C31AADED99AB),
- UINT64_C(0x01637E315762AAD0) } },
- { { UINT64_C(0x03847D336B9839DA), UINT64_C(0x02200E98133D266E),
- UINT64_C(0x0039A8261B62D7DC), UINT64_C(0x033295F072A9D5EA),
- UINT64_C(0x000C3FE4DCCB2B2A), UINT64_C(0x03907B7861011A91),
- UINT64_C(0x023BC0EFEDB5EE58), UINT64_C(0x0288D6CD63BC03CD),
- UINT64_C(0x01280E54E8A553CA) },
- { UINT64_C(0x036493BB1C1962CE), UINT64_C(0x0361F9CAD30DAC24),
- UINT64_C(0x023856E058F7248C), UINT64_C(0x01EBC4CE9BBA1951),
- UINT64_C(0x00FE14205169D78D), UINT64_C(0x01237D85837C8C98),
- UINT64_C(0x017C4E2A95E40B90), UINT64_C(0x004E446F2E2C7819),
- UINT64_C(0x0007FA80EDA9F2C8) } },
- { { UINT64_C(0x009A65815D2BF9A7), UINT64_C(0x027CB047E8DF8668),
- UINT64_C(0x0391C32A60456677), UINT64_C(0x01CBC26A69AB3F09),
- UINT64_C(0x0334D4D8DE25229B), UINT64_C(0x0383C0FA69B0DD79),
- UINT64_C(0x01D206CDCC54B9E2), UINT64_C(0x02E51DE738338588),
- UINT64_C(0x006112D5229EA977) },
- { UINT64_C(0x03CE85BEE20C30CB), UINT64_C(0x02FEBC02D12BC9D5),
- UINT64_C(0x02AEDC3A968E7052), UINT64_C(0x02090B846E5AD878),
- UINT64_C(0x00E4B6AEE2DDC2E3), UINT64_C(0x00269BE91139208A),
- UINT64_C(0x02FEA688006D25C9), UINT64_C(0x002F5EFACF2F785D),
- UINT64_C(0x009FE82D05CAC96A) } },
- { { UINT64_C(0x02EE8F69AB2E6D92), UINT64_C(0x0213F64F73B9A354),
- UINT64_C(0x000A9DDA2E925D3C), UINT64_C(0x0192E31297313B4F),
- UINT64_C(0x02B3145C4DD947AF), UINT64_C(0x03401B39394615DA),
- UINT64_C(0x01C98D9DFBE6AE7D), UINT64_C(0x02BB8069EC7A7746),
- UINT64_C(0x00A8BDC9CF002A7B) },
- { UINT64_C(0x00A3BF702EB71C5F), UINT64_C(0x00A25EDAE6446CE2),
- UINT64_C(0x00108D65D5F288B8), UINT64_C(0x02FF972C1494ABED),
- UINT64_C(0x0398342A5B4A102C), UINT64_C(0x00CD83A6E3855FF3),
- UINT64_C(0x02D6848441981C93), UINT64_C(0x0335A209E0E8D9AA),
- UINT64_C(0x01ED6F04D42258A5) } },
- { { UINT64_C(0x01FC3B47C1490429), UINT64_C(0x01B9A21B27B6F4B1),
- UINT64_C(0x0193FF421EE32901), UINT64_C(0x03CC9F551147E445),
- UINT64_C(0x01773B6B14BB7010), UINT64_C(0x005040A2326FD6EA),
- UINT64_C(0x01949206C0BB7211), UINT64_C(0x02643DEA7E3C37CC),
- UINT64_C(0x01725F6694BF623F) },
- { UINT64_C(0x014D9BD8587CA374), UINT64_C(0x020B8D6C1F3C983C),
- UINT64_C(0x0395B0E3A7CCCE2F), UINT64_C(0x0071FCA214298293),
- UINT64_C(0x038CF96F2462B942), UINT64_C(0x00DD1C97E2E6BCA4),
- UINT64_C(0x00DEC4ACF114C9D6), UINT64_C(0x005DCE68C5288587),
- UINT64_C(0x017B1DC591DEA2A9) } },
- { { UINT64_C(0x01A03D95A3ACF0F9), UINT64_C(0x0123031B8850C86B),
- UINT64_C(0x0269AB94408A086E), UINT64_C(0x0181DEF245438334),
- UINT64_C(0x00AB4F62CC0E7BA5), UINT64_C(0x0294A03CC0C2A98D),
- UINT64_C(0x02234FBFCCAA23F6), UINT64_C(0x0304B9AF501D1961),
- UINT64_C(0x0037258E9F9B8667) },
- { UINT64_C(0x0344657939436D81), UINT64_C(0x010709812083B7CE),
- UINT64_C(0x00DBCA5B5A81714D), UINT64_C(0x00396E25D33E3896),
- UINT64_C(0x00C0A65FA9547A23), UINT64_C(0x03F6796EDC3F72D8),
- UINT64_C(0x022AA55EA0053589), UINT64_C(0x031E838C917FDA1B),
- UINT64_C(0x014AF707C515D93F) } },
- { { UINT64_C(0x00E48C0436C8D427), UINT64_C(0x02A85992128BD380),
- UINT64_C(0x03861C4538E26A42), UINT64_C(0x027A6E7784D042DB),
- UINT64_C(0x0129555575E66B0A), UINT64_C(0x017362D6E2713125),
- UINT64_C(0x00A08F82306ED961), UINT64_C(0x007FCDDA0F78CBC0),
- UINT64_C(0x010F4598B67DA097) },
- { UINT64_C(0x03448C05AD400463), UINT64_C(0x03CB26D3975CCFCD),
- UINT64_C(0x0067B9FD99A88F1D), UINT64_C(0x001F257A56DADDC1),
- UINT64_C(0x03AEAFB6384BA84C), UINT64_C(0x0010C9301FE7F887),
- UINT64_C(0x03D65C213A46C68C), UINT64_C(0x029BB4A1F8A5E81E),
- UINT64_C(0x00C1838AFD6E3F39) } },
- { { UINT64_C(0x03CE07505924C15F), UINT64_C(0x0043A08ED31A1B99),
- UINT64_C(0x0339C4C25E8B8B88), UINT64_C(0x0380DFF73DEBF4DA),
- UINT64_C(0x031FBA11E366BE60), UINT64_C(0x001D2B7C0FA8BD42),
- UINT64_C(0x009DE3ACE8B8A24D), UINT64_C(0x02B5F07FB5B5BD4F),
- UINT64_C(0x018247CA534C6F7F) },
- { UINT64_C(0x01E0A02B3DBEEE78), UINT64_C(0x001E200666AB15CD),
- UINT64_C(0x0186BEA684E8C48E), UINT64_C(0x00F3F1894CDB68E0),
- UINT64_C(0x032ECC59DF1BBB85), UINT64_C(0x02D06C53B9B53209),
- UINT64_C(0x004A86739B90C8A8), UINT64_C(0x03AD8A97D98C89BC),
- UINT64_C(0x00F01344204A1E2F) } },
- { { UINT64_C(0x03582A68690F8C80), UINT64_C(0x012E151E3D7485DA),
- UINT64_C(0x02527AD70F6AC0B4), UINT64_C(0x018B935CB107A3CD),
- UINT64_C(0x036AA37D7A7E3625), UINT64_C(0x034CFB229578C67F),
- UINT64_C(0x00A3FBC7740B7E16), UINT64_C(0x03D0C73BF6F5756D),
- UINT64_C(0x009FFA51FEAC33FA) },
- { UINT64_C(0x0208A8D791982847), UINT64_C(0x03EDDBD997642B6C),
- UINT64_C(0x025D551977914C26), UINT64_C(0x02DD352759CA1376),
- UINT64_C(0x00654090371E1000), UINT64_C(0x004AC720BEC03C34),
- UINT64_C(0x03C06BE7F6C95884), UINT64_C(0x01FA475777DF0765),
- UINT64_C(0x00A99275E15E46C7) } },
- { { UINT64_C(0x016A50E0A643409F), UINT64_C(0x0122617180184D38),
- UINT64_C(0x0105E92945AC97AB), UINT64_C(0x01A1B865FE31BAD8),
- UINT64_C(0x033E0DC143E2D46B), UINT64_C(0x03DD157DF58A1946),
- UINT64_C(0x02DF8E8C2EC7FB6D), UINT64_C(0x00E031916AFF1478),
- UINT64_C(0x017A7BE92C9A8A1C) },
- { UINT64_C(0x02063F9B1AF2F29D), UINT64_C(0x0275AF845DF62346),
- UINT64_C(0x010016B05B22BD9F), UINT64_C(0x03772DD9DE8A3F70),
- UINT64_C(0x011B489BE6C04500), UINT64_C(0x0122DEDE177B839E),
- UINT64_C(0x008B9ED1DBF81860), UINT64_C(0x00CDA67D0D8CEDC1),
- UINT64_C(0x01984030C18BF083) } },
- { { UINT64_C(0x02791762137B93A2), UINT64_C(0x01F9DE3C5491E823),
- UINT64_C(0x01E50243877F23E4), UINT64_C(0x0144F0B0081F37BC),
- UINT64_C(0x00D7A781DD6DE5E2), UINT64_C(0x036A5EFE959E26D1),
- UINT64_C(0x03A51922038AEEA2), UINT64_C(0x0054D452C10BD4F0),
- UINT64_C(0x01B8A51151884AEF) },
- { UINT64_C(0x0241D85F77A00331), UINT64_C(0x023528AF19A313C4),
- UINT64_C(0x0176DFC98292A79E), UINT64_C(0x03AADEBB4F7B06B1),
- UINT64_C(0x00DAB141E4CE727F), UINT64_C(0x0388E18953348B42),
- UINT64_C(0x03FD5A751265E468), UINT64_C(0x024673750B3DB1AB),
- UINT64_C(0x00E57DD5F1A23923) } },
- { { UINT64_C(0x019D69A891328CE4), UINT64_C(0x008F01053E7A765C),
- UINT64_C(0x030B5EE16F612292), UINT64_C(0x020A99C1AB590289),
- UINT64_C(0x01D62D438BE82D64), UINT64_C(0x037D8D3250B87A70),
- UINT64_C(0x03ACF90A3316DB71), UINT64_C(0x011F2D638816284F),
- UINT64_C(0x000D63B1CF94E578) },
- { UINT64_C(0x026288694B620A88), UINT64_C(0x01D7EC9688B643F5),
- UINT64_C(0x0329AC344C36F494), UINT64_C(0x01F7C91E725E18A1),
- UINT64_C(0x02FEB98C58EA0341), UINT64_C(0x00A508DDA6BF1EC5),
- UINT64_C(0x00733B2463BD7A85), UINT64_C(0x0384EBC8AB299B36),
- UINT64_C(0x00074909BD45312A) } },
- { { UINT64_C(0x03E08C2C5C95FF29), UINT64_C(0x00C670644C808211),
- UINT64_C(0x012D8021671FE338), UINT64_C(0x039F033363AA44CD),
- UINT64_C(0x0337E7DB83662796), UINT64_C(0x03DDF327E2706223),
- UINT64_C(0x005FBC050700CAFA), UINT64_C(0x020FC3C9D5CBB556),
- UINT64_C(0x0105E1BC0BF33DC4) },
- { UINT64_C(0x03F3D06894519732), UINT64_C(0x029248D001BE65FE),
- UINT64_C(0x011EC77A8F1A11E3), UINT64_C(0x0365A31B2279F38F),
- UINT64_C(0x014E2577747A12CD), UINT64_C(0x0160E01F73DAA243),
- UINT64_C(0x01E3B9CC567EDCCC), UINT64_C(0x03E1B7F6A7B42960),
- UINT64_C(0x01809B863B2F3F5A) } },
- },
- {
- { { UINT64_C(0x0373B24CDED2EB86), UINT64_C(0x02402CCFAA26116F),
- UINT64_C(0x005073857CDB6102), UINT64_C(0x01AE6F89575C7623),
- UINT64_C(0x022FF653B3A939A7), UINT64_C(0x0190B7CB0A3545D4),
- UINT64_C(0x02353B26D8170467), UINT64_C(0x003C64522D17855F),
- UINT64_C(0x01E5D565F776B34F) },
- { UINT64_C(0x025185A2C4B5DE1E), UINT64_C(0x02B3AFFAB7E382B2),
- UINT64_C(0x0194B86479736527), UINT64_C(0x026B4BE5E81594AE),
- UINT64_C(0x01D6960578E25220), UINT64_C(0x00993E60F26C1FF2),
- UINT64_C(0x019B938479BA949D), UINT64_C(0x01FCA32034CAD7A3),
- UINT64_C(0x017759280D580A6A) } },
- { { UINT64_C(0x02346AE90C2CA70B), UINT64_C(0x013757CC55F070F5),
- UINT64_C(0x017E107D86CA7681), UINT64_C(0x005AD490EBA565E0),
- UINT64_C(0x02C9C614514CB60C), UINT64_C(0x03BEAF2AC475AF2B),
- UINT64_C(0x008C591B4CE3CC44), UINT64_C(0x014A9DDFA491CE57),
- UINT64_C(0x001268735793A719) },
- { UINT64_C(0x007F97B31426994D), UINT64_C(0x01A96DF191B418F1),
- UINT64_C(0x027DF055755518F4), UINT64_C(0x025DAAC2254C5D3C),
- UINT64_C(0x0262D34E340FC2C3), UINT64_C(0x01F14824C8F72557),
- UINT64_C(0x02A4819301BACB9F), UINT64_C(0x0268E03E6BEAB510),
- UINT64_C(0x00EA805018D6E199) } },
- { { UINT64_C(0x00FEA5E6ABEE1F7B), UINT64_C(0x00538DB9B2D8E2D4),
- UINT64_C(0x0305BA64218318A0), UINT64_C(0x022BD39A67AA3F20),
- UINT64_C(0x01157632723B17F9), UINT64_C(0x00C8DAAF646E78C9),
- UINT64_C(0x0158EFBD367A27CD), UINT64_C(0x011375E95CB4F12F),
- UINT64_C(0x005E40D5A4D44054) },
- { UINT64_C(0x0297475C1D71A4FA), UINT64_C(0x03C1DABD876A7908),
- UINT64_C(0x0038CB20D99CAE76), UINT64_C(0x03D63A3A005959E9),
- UINT64_C(0x02AF78B93B764B6F), UINT64_C(0x0109A0342CFC2D30),
- UINT64_C(0x01C301BEC294E434), UINT64_C(0x01972384DAD5FD67),
- UINT64_C(0x01C3F5C9DF46F8D3) } },
- { { UINT64_C(0x03C115A0432574BE), UINT64_C(0x01495DBDA1F302E5),
- UINT64_C(0x010568069CC94673), UINT64_C(0x000A2EEAB0E37751),
- UINT64_C(0x033EE9D566902CC4), UINT64_C(0x006B34AFED584340),
- UINT64_C(0x02B50803E9B165A1), UINT64_C(0x03E38D1CBBEC3EC2),
- UINT64_C(0x0023CF19CC14F82C) },
- { UINT64_C(0x01CCAAFE462EC0F0), UINT64_C(0x02E714845D028EE6),
- UINT64_C(0x02DCB47FF5021595), UINT64_C(0x030908AA9B079880),
- UINT64_C(0x00371B5A69854385), UINT64_C(0x0185FE540E9AE9FF),
- UINT64_C(0x02EE86F4F1A83CE4), UINT64_C(0x03AB730574E67F57),
- UINT64_C(0x01F85953DB252C4B) } },
- { { UINT64_C(0x02EC254BFD8CB3CC), UINT64_C(0x01DFEE8DE5F7858B),
- UINT64_C(0x019C8AD2711F9096), UINT64_C(0x00B1E57CC4C26707),
- UINT64_C(0x03511BB53983E402), UINT64_C(0x02A4019CDD626E9F),
- UINT64_C(0x03BA2E0AC5C44D84), UINT64_C(0x00A965FE7663AD49),
- UINT64_C(0x01739420DA2DD7E5) },
- { UINT64_C(0x001E59C7B82FB619), UINT64_C(0x007B29CCEEF8AD83),
- UINT64_C(0x02907C71BFFAE931), UINT64_C(0x003F110EC15CB5CF),
- UINT64_C(0x02A76ECA58531793), UINT64_C(0x02D8D0EB5EA2FA03),
- UINT64_C(0x0302231943B524FC), UINT64_C(0x01EBC24F8F0A0C29),
- UINT64_C(0x019802CBF5F3CE73) } },
- { { UINT64_C(0x01852168BF26ECDA), UINT64_C(0x03BA5FFA1597B73C),
- UINT64_C(0x00E55E47A88BF735), UINT64_C(0x03EF5511C575EFAA),
- UINT64_C(0x03BEAAED274CB2F4), UINT64_C(0x01A2B7AEE5E82012),
- UINT64_C(0x00161524928CEDED), UINT64_C(0x0243FB8CEB1DB1ED),
- UINT64_C(0x00A939AAE7662875) },
- { UINT64_C(0x035FC996431E0BB4), UINT64_C(0x03871F05A029588C),
- UINT64_C(0x024685D44F302D5A), UINT64_C(0x03D65DBBB0A24C64),
- UINT64_C(0x031CCDBD89C13824), UINT64_C(0x03EEC80794841ADF),
- UINT64_C(0x02BDD19433E827DB), UINT64_C(0x025D0DEF338BCA12),
- UINT64_C(0x019DD1E057A3957F) } },
- { { UINT64_C(0x028221686CEBC7BE), UINT64_C(0x00550CAC829C5C56),
- UINT64_C(0x024473DA711003E5), UINT64_C(0x01D2D356A63016BD),
- UINT64_C(0x016B5C937B93F5AA), UINT64_C(0x016BA509AE911631),
- UINT64_C(0x03BB387F2983AA08), UINT64_C(0x0087050F624145D1),
- UINT64_C(0x00430D39E6B578E6) },
- { UINT64_C(0x02E690EFE2E3859D), UINT64_C(0x021D189217E0C7B9),
- UINT64_C(0x03BC89797B1B794C), UINT64_C(0x01D6B16B566AB9D7),
- UINT64_C(0x02935CEB8993E4D1), UINT64_C(0x03C0BF4C7D6967AE),
- UINT64_C(0x00EA7B0862929371), UINT64_C(0x014624F22194B5D9),
- UINT64_C(0x00D68221B3478C47) } },
- { { UINT64_C(0x03BEC558C2EB8133), UINT64_C(0x031106A5F911659D),
- UINT64_C(0x00D07C39AEFB3CBE), UINT64_C(0x02F06E730A651F25),
- UINT64_C(0x0183C527F019A937), UINT64_C(0x0153E778C8608775),
- UINT64_C(0x0214C61DB43A7203), UINT64_C(0x00CD284ED5892F97),
- UINT64_C(0x0198EB083CFD5B2B) },
- { UINT64_C(0x0393B136D6835A15), UINT64_C(0x03ED1013491B6647),
- UINT64_C(0x00702068040A8E55), UINT64_C(0x0136DD3C55BF5BE4),
- UINT64_C(0x03D053D6F8B28F3A), UINT64_C(0x00FAF9585D310B40),
- UINT64_C(0x002690874B88A2A9), UINT64_C(0x02651384F1D8C181),
- UINT64_C(0x00E5D3BFA7EC53DE) } },
- { { UINT64_C(0x033F039A91D85118), UINT64_C(0x03A170E9A74E89EC),
- UINT64_C(0x03EBE8F17E2B4C68), UINT64_C(0x032E08DD52962FFF),
- UINT64_C(0x01F682C887362E38), UINT64_C(0x02848A835A72A2EE),
- UINT64_C(0x00AFA36F7A88966F), UINT64_C(0x02D505E8ED473B2D),
- UINT64_C(0x007B6EF0E4DAA123) },
- { UINT64_C(0x03F322E8CD472029), UINT64_C(0x009B31F349123C63),
- UINT64_C(0x024396A463AE29B2), UINT64_C(0x035A559411C8D9B7),
- UINT64_C(0x0302AAF84FEF53A7), UINT64_C(0x00322717487DC79C),
- UINT64_C(0x02CA6AE27A92266C), UINT64_C(0x03E6B6580391B525),
- UINT64_C(0x00647CC677EE4353) } },
- { { UINT64_C(0x0015F4FB3CE12393), UINT64_C(0x013D9CD65B87D1CA),
- UINT64_C(0x03ED1458BDACF05A), UINT64_C(0x011BC2A44D7A03F7),
- UINT64_C(0x00D1E2748EE247CF), UINT64_C(0x025C05134193D6D7),
- UINT64_C(0x03D8D4701057B20F), UINT64_C(0x03CD86409D914C19),
- UINT64_C(0x0123EE9725146150) },
- { UINT64_C(0x03B85772CCE5DBF5), UINT64_C(0x024E60E34E33C627),
- UINT64_C(0x00CEB58FBCFD7F20), UINT64_C(0x0213A9AF85D15B81),
- UINT64_C(0x00879FD075FE76EA), UINT64_C(0x01883D1962AC7DA6),
- UINT64_C(0x0041CDD770D92E82), UINT64_C(0x024CF83E19940701),
- UINT64_C(0x0001A7D69F562E49) } },
- { { UINT64_C(0x03F06D3661D1EEDB), UINT64_C(0x01062600B09B6B3E),
- UINT64_C(0x01A0A640D07EFC7A), UINT64_C(0x0317F67E20F296A1),
- UINT64_C(0x034843017C701C3C), UINT64_C(0x033891152A103E33),
- UINT64_C(0x01C00AE12BC93968), UINT64_C(0x0280A3403412AA1F),
- UINT64_C(0x0111DA6A8E2C4EE1) },
- { UINT64_C(0x0138BBADC5A4238D), UINT64_C(0x02BB1A5504498DAF),
- UINT64_C(0x03D55FD7A02F99F7), UINT64_C(0x030B36D2716AAE98),
- UINT64_C(0x00846799916170BE), UINT64_C(0x021843A1130EBD86),
- UINT64_C(0x01602A0048ED7277), UINT64_C(0x010F628883F5C170),
- UINT64_C(0x00A879F20138FE97) } },
- { { UINT64_C(0x010B697E6BB71E17), UINT64_C(0x00A5FF1EE44F8A1A),
- UINT64_C(0x02F0A65F0594ADDF), UINT64_C(0x01B97DFF3B989E00),
- UINT64_C(0x02EBB1D34E1BC0B6), UINT64_C(0x0318AB0F908D45CA),
- UINT64_C(0x006D84E0ECA51F49), UINT64_C(0x022CBEFDFAF29F0C),
- UINT64_C(0x019FF3250EDA2D48) },
- { UINT64_C(0x0247BD9A1791633D), UINT64_C(0x001017CA6D44DB39),
- UINT64_C(0x001392DBCF3C08AE), UINT64_C(0x00BBFD8C9245DBED),
- UINT64_C(0x03C6094D363A2A9B), UINT64_C(0x0026C46C1B980722),
- UINT64_C(0x014C00915831C495), UINT64_C(0x03480A51EA642A61),
- UINT64_C(0x018A2CD0EE26C545) } },
- { { UINT64_C(0x00179F4F97812A25), UINT64_C(0x02A5E9E3F33BC581),
- UINT64_C(0x000BD5248493D239), UINT64_C(0x02B7DE8E94D0B6E5),
- UINT64_C(0x01D8674B49C2359A), UINT64_C(0x020163E368BE3C3B),
- UINT64_C(0x0332717F9505C7C1), UINT64_C(0x035A143000B7EC9C),
- UINT64_C(0x00C999A3E0BCCAF1) },
- { UINT64_C(0x007B047729EF75E3), UINT64_C(0x02CC12EE110A5B9B),
- UINT64_C(0x0330E2E6286E55F0), UINT64_C(0x00C6FC4CB1CD5C12),
- UINT64_C(0x014B93EA65F0CCE4), UINT64_C(0x01E5A20D3788D937),
- UINT64_C(0x039AB1AC6BF17BFB), UINT64_C(0x0397FE82B1886D3A),
- UINT64_C(0x000C112A21CE8FCD) } },
- { { UINT64_C(0x02B7C1C48CF8D334), UINT64_C(0x0078EAF1E0B9AA5A),
- UINT64_C(0x0397B9A209EF9EF0), UINT64_C(0x001CFFAFD847B222),
- UINT64_C(0x0321A14F818F0142), UINT64_C(0x0214D3F98F9D0ED8),
- UINT64_C(0x011305B71C04D0D3), UINT64_C(0x03DE98EACA808006),
- UINT64_C(0x01360AA21413198A) },
- { UINT64_C(0x028D3F07FD51E170), UINT64_C(0x023F03474306CBA2),
- UINT64_C(0x034205D496752F99), UINT64_C(0x02D4BC03F380060F),
- UINT64_C(0x01E2CE3EBF008299), UINT64_C(0x03EE2B7C9CF44A54),
- UINT64_C(0x022CB7C6BCE06379), UINT64_C(0x03934E9100F4AD3F),
- UINT64_C(0x001B8D6D7EA30D7F) } },
- { { UINT64_C(0x0175E6F14594D02E), UINT64_C(0x0107CFBBB666C104),
- UINT64_C(0x0043C920F3FC7184), UINT64_C(0x01D3F596321DF679),
- UINT64_C(0x034FBFA8E62660AC), UINT64_C(0x02F07B7B2F64B7D6),
- UINT64_C(0x020B7A4B1CB30890), UINT64_C(0x0027370AF3A01ACE),
- UINT64_C(0x004C3DF94ED57F1B) },
- { UINT64_C(0x02F7E28D420891BB), UINT64_C(0x00A165AF3355D551),
- UINT64_C(0x03E2077F4C7840E2), UINT64_C(0x010A42F1F956CFC2),
- UINT64_C(0x01586FF6FC545309), UINT64_C(0x00E2A2E3F8A44D6A),
- UINT64_C(0x01BCD7CFAB0CD9EA), UINT64_C(0x02CD7B5AA257EF8B),
- UINT64_C(0x01E161EB6461E56F) } },
- { { UINT64_C(0x03AA1E440B1B7656), UINT64_C(0x02DB3F4D449DEBD4),
- UINT64_C(0x025617A010F1A335), UINT64_C(0x010C03757E20D72C),
- UINT64_C(0x01EA95F9EFACD59B), UINT64_C(0x0126D8DDDE17B239),
- UINT64_C(0x02DBF2D291F6AEC7), UINT64_C(0x02F6100FC8834353),
- UINT64_C(0x00C18C83BB58FB77) },
- { UINT64_C(0x03754C15A7EEE80E), UINT64_C(0x00247AB9412690FE),
- UINT64_C(0x016E9C7BD742F5DF), UINT64_C(0x02361FAE95827D75),
- UINT64_C(0x029E41CC30EA15A1), UINT64_C(0x005F53D5863CB83F),
- UINT64_C(0x0025C9FC701A2B9B), UINT64_C(0x0389C7702E9DAFBA),
- UINT64_C(0x00ED3C35310B5895) } },
- },
- {
- { { UINT64_C(0x0373C85A8201C48B), UINT64_C(0x000BE293272BB8C3),
- UINT64_C(0x0299641D84048EF5), UINT64_C(0x012EE83CEE0A37DD),
- UINT64_C(0x00D6A81ED893F8A3), UINT64_C(0x01988A5103EE9A5B),
- UINT64_C(0x01495F90BE6C8319), UINT64_C(0x00954437A6A3C821),
- UINT64_C(0x010E12D843E6580B) },
- { UINT64_C(0x007820FBE51DE678), UINT64_C(0x013364C5E0C684D4),
- UINT64_C(0x009D1721196C2E40), UINT64_C(0x01933769A5FD2063),
- UINT64_C(0x00BAB8B58BEFA01A), UINT64_C(0x012866F6B7334CBC),
- UINT64_C(0x025340A51AC6E1FB), UINT64_C(0x03B1135009A4FD38),
- UINT64_C(0x018AD6567590AFBB) } },
- { { UINT64_C(0x03F7CC1DCD9C3B89), UINT64_C(0x03F2238DF027BB54),
- UINT64_C(0x014C7FD4BA95DD01), UINT64_C(0x01DBD8CC489F6AB6),
- UINT64_C(0x03A6066BFEA7BAB5), UINT64_C(0x0065E8AD52465D5E),
- UINT64_C(0x03E8F9DA8D525106), UINT64_C(0x001A6869F0B37603),
- UINT64_C(0x016D47A0587C292E) },
- { UINT64_C(0x0374FC0618A5170B), UINT64_C(0x0152FB1A3C0C1CC0),
- UINT64_C(0x01710A373C6A380E), UINT64_C(0x00845789535E37A3),
- UINT64_C(0x035D0DA356C25D05), UINT64_C(0x00C2670CA5FED688),
- UINT64_C(0x010367DAE1D930AA), UINT64_C(0x0109B528D8B5E2DD),
- UINT64_C(0x0160EAA2FD7C6C7E) } },
- { { UINT64_C(0x02EB058989126FAC), UINT64_C(0x03391866A50E5BF0),
- UINT64_C(0x0249D99C7ECCC796), UINT64_C(0x031F124A928D03B2),
- UINT64_C(0x0106FA952E20ED57), UINT64_C(0x001BC6E7D0224A59),
- UINT64_C(0x00CE05E4690915C9), UINT64_C(0x020A90266CA1AD52),
- UINT64_C(0x0094293617B76FE5) },
- { UINT64_C(0x034B04313831CD9D), UINT64_C(0x03B7732D91E90928),
- UINT64_C(0x014A1E82A9C3D51E), UINT64_C(0x02AEC53126F32DDD),
- UINT64_C(0x028AC8F7A359BD6C), UINT64_C(0x01B3A0EDE3DB4B4B),
- UINT64_C(0x028EB875F2FBF434), UINT64_C(0x01AE764FB3A07035),
- UINT64_C(0x006701271A1304D0) } },
- { { UINT64_C(0x0015B0C258BC45E5), UINT64_C(0x00500CF779654876),
- UINT64_C(0x00D61185031EC91A), UINT64_C(0x0237D26B8AB4ABC0),
- UINT64_C(0x0303DB5DD0B1113F), UINT64_C(0x02C21386988E1A69),
- UINT64_C(0x002A78FA27F52A38), UINT64_C(0x02373FFEB8A111FB),
- UINT64_C(0x01ED316A4A837D78) },
- { UINT64_C(0x02151FA30AE71753), UINT64_C(0x018559984522D236),
- UINT64_C(0x02AA1CED8D6E9D2C), UINT64_C(0x0336B3277D457875),
- UINT64_C(0x01FEB5FD684C784F), UINT64_C(0x0312F506AD5C57EB),
- UINT64_C(0x026506BE8AA4F453), UINT64_C(0x0334630A573CB20E),
- UINT64_C(0x00AA6EBCFBE68959) } },
- { { UINT64_C(0x0339D37CD0D9229F), UINT64_C(0x0170E57961291D98),
- UINT64_C(0x029AE28566E91600), UINT64_C(0x02402C0C57E9B401),
- UINT64_C(0x01EC520A49429756), UINT64_C(0x02A2CF079E7747FF),
- UINT64_C(0x03751BAC838751C0), UINT64_C(0x021ED034A3B7C53C),
- UINT64_C(0x0118500D09678BBC) },
- { UINT64_C(0x007E207E14E4C072), UINT64_C(0x039277F4D05B1F1F),
- UINT64_C(0x02A052EAB5B31E63), UINT64_C(0x02B6A467E3451DEA),
- UINT64_C(0x001613AC11B73C00), UINT64_C(0x00C5A6FA0FE24B0C),
- UINT64_C(0x034F01404D69886A), UINT64_C(0x00324E28B3CA9FD4),
- UINT64_C(0x005A3181E5A8A0B8) } },
- { { UINT64_C(0x02CE6BA9219403A6), UINT64_C(0x030DFB5CBE0CA405),
- UINT64_C(0x039D700EFB6B4704), UINT64_C(0x0365CAD8F9D06BE7),
- UINT64_C(0x00FE6873B0456CD8), UINT64_C(0x0090EC1026095A01),
- UINT64_C(0x016F3A2CC5EC6B62), UINT64_C(0x001AD035AE2286FC),
- UINT64_C(0x018819632B44D890) },
- { UINT64_C(0x039574FA6B48EFBA), UINT64_C(0x029D9BE545F8EFA2),
- UINT64_C(0x00F42C7789B73AA2), UINT64_C(0x03CB90D731504D3E),
- UINT64_C(0x0202ACD7E2DE6E8A), UINT64_C(0x02C8AD45BF6E2A24),
- UINT64_C(0x0067A40E7FC99B4D), UINT64_C(0x03E0738CFADACE29),
- UINT64_C(0x01177C98831102AA) } },
- { { UINT64_C(0x030A8610AC5E165D), UINT64_C(0x014AA32172C55EC2),
- UINT64_C(0x027CE551CABE6211), UINT64_C(0x02477F69861DB6E6),
- UINT64_C(0x01E8FF337E7E36EC), UINT64_C(0x0054ACDF3E1C9EF7),
- UINT64_C(0x03DED626009E6F01), UINT64_C(0x02E49BFEF7555C32),
- UINT64_C(0x002E4F1C3DB00152) },
- { UINT64_C(0x0332D8B606C8A9BC), UINT64_C(0x03AD929E6D810A1A),
- UINT64_C(0x02C0030394592734), UINT64_C(0x02442FE9824BDA03),
- UINT64_C(0x03CBAC9513FF99FB), UINT64_C(0x03B3D4E910EDA5AD),
- UINT64_C(0x005A6F83029FFE7F), UINT64_C(0x02F6FF8D9E1F29A6),
- UINT64_C(0x0188A1C08A99132D) } },
- { { UINT64_C(0x001F1A68F391B195), UINT64_C(0x00F016D21D573BA5),
- UINT64_C(0x00EB4A4B11B13F56), UINT64_C(0x0390443801100BE8),
- UINT64_C(0x00CDF1786689F09F), UINT64_C(0x008708E6F68D807B),
- UINT64_C(0x00CFC70B63E2B318), UINT64_C(0x02DA65CABECA51A9),
- UINT64_C(0x01BB4CC16417876B) },
- { UINT64_C(0x002270E155C4416F), UINT64_C(0x0275E82A3EE6287C),
- UINT64_C(0x019550DEBAE641A6), UINT64_C(0x0189E9D792313D48),
- UINT64_C(0x022E11801B0D93FC), UINT64_C(0x006308C9DD555E4E),
- UINT64_C(0x02F9EBC6E275E976), UINT64_C(0x00011D5E55FC63C6),
- UINT64_C(0x01D3E16AA048085F) } },
- { { UINT64_C(0x01C6845EE45C5FF5), UINT64_C(0x03B6D8ADC4E97112),
- UINT64_C(0x0068C305E2731ED0), UINT64_C(0x037AFCABEDF2C8B5),
- UINT64_C(0x016C0203DF9F154E), UINT64_C(0x03FF6DCCA97B1A6C),
- UINT64_C(0x019D691BB5C8CD06), UINT64_C(0x022C5EA48F6FE25F),
- UINT64_C(0x00553B7F4065FABA) },
- { UINT64_C(0x006009B918BF712A), UINT64_C(0x0087FAC6655FF7A7),
- UINT64_C(0x039DB19E2FDB3477), UINT64_C(0x014389D0D15C2072),
- UINT64_C(0x02B3AB48E4A3E0DF), UINT64_C(0x00D55CD68B325E8D),
- UINT64_C(0x020332F2B62898A4), UINT64_C(0x019DB12158F6D4D6),
- UINT64_C(0x010E1F4D65633E42) } },
- { { UINT64_C(0x035FDBF97A66FBB8), UINT64_C(0x0397FDA15F48E249),
- UINT64_C(0x0314912B73A0AD12), UINT64_C(0x018B5A1F5856CC06),
- UINT64_C(0x026DB1F90C057E46), UINT64_C(0x02BC203FE8141974),
- UINT64_C(0x032698D0DBE8152C), UINT64_C(0x01BC802ED9745CEA),
- UINT64_C(0x00B1E80CFCF35D14) },
- { UINT64_C(0x026A4890175570A1), UINT64_C(0x03DEFA508892558E),
- UINT64_C(0x00D274862CB6E1EF), UINT64_C(0x02F12D3DF3D2916D),
- UINT64_C(0x01D9AF2100AA8841), UINT64_C(0x024123BB5E94517B),
- UINT64_C(0x00CEA1686B604BBF), UINT64_C(0x007E9A1A2F8E072B),
- UINT64_C(0x012919949C3170DE) } },
- { { UINT64_C(0x028CFBD7509B3F23), UINT64_C(0x0341392CF0D37CE2),
- UINT64_C(0x03BB3B849E04FCBA), UINT64_C(0x004BCCA7E7C71C3F),
- UINT64_C(0x007EAF927839C8E2), UINT64_C(0x0061602F3DAFE11E),
- UINT64_C(0x01D0F1831E9A3AE7), UINT64_C(0x032630A59BC245BA),
- UINT64_C(0x00C9122EE0775F54) },
- { UINT64_C(0x027706840C226E2C), UINT64_C(0x021FC974C3A78386),
- UINT64_C(0x0254E3803EE94792), UINT64_C(0x02763098FB07712F),
- UINT64_C(0x03085BE39396F8D2), UINT64_C(0x039CDBB83C0DCAE5),
- UINT64_C(0x0275170CD909C685), UINT64_C(0x02A48EFA2F7CBD9D),
- UINT64_C(0x0151800A47F18A8F) } },
- { { UINT64_C(0x0266B421EDA35EBF), UINT64_C(0x016EE661AEE22D67),
- UINT64_C(0x02189CC63A33934C), UINT64_C(0x02035BBEEF2E6505),
- UINT64_C(0x03A21BDAB12827FF), UINT64_C(0x010837E5E86E37F7),
- UINT64_C(0x000889F4FF18C641), UINT64_C(0x00B83D668CF5F701),
- UINT64_C(0x00A90A0E4C84A45C) },
- { UINT64_C(0x014A9DB7546020F0), UINT64_C(0x026B8123F183E007),
- UINT64_C(0x014172F8A29A74BC), UINT64_C(0x03ECB113DDF05CC6),
- UINT64_C(0x0056019B554AE591), UINT64_C(0x01C3E5A8AC670B45),
- UINT64_C(0x0328112932236FCD), UINT64_C(0x0147D09F4CAD8D13),
- UINT64_C(0x007CA80EB751C2E8) } },
- { { UINT64_C(0x03260C3CA6A09384), UINT64_C(0x01A2DAEF9F24A534),
- UINT64_C(0x01FA415780AE38B6), UINT64_C(0x02FE728B02BEADE2),
- UINT64_C(0x031F71486AA63A4A), UINT64_C(0x021F907074346F6D),
- UINT64_C(0x00225A4DA564511F), UINT64_C(0x02CC4C97BC497C99),
- UINT64_C(0x01C2DD5CCD878296) },
- { UINT64_C(0x03CD4A619B2264B8), UINT64_C(0x03093FC7F1583EA2),
- UINT64_C(0x02B47AD7D9A2FB6F), UINT64_C(0x00C0D0B440BCA2A9),
- UINT64_C(0x00B22B3DB051C447), UINT64_C(0x01CEC4D502303875),
- UINT64_C(0x0340F66A4D33C79A), UINT64_C(0x00C02F44477E4379),
- UINT64_C(0x01A54038DE4CD448) } },
- { { UINT64_C(0x036F26FDD184B415), UINT64_C(0x0077144A843CA00F),
- UINT64_C(0x012DE3D50936A2A0), UINT64_C(0x00F1A915BEF669FD),
- UINT64_C(0x02A728B908D36285), UINT64_C(0x023009A8F3585930),
- UINT64_C(0x01AFE37F5F6903E6), UINT64_C(0x015BE42AC69043A0),
- UINT64_C(0x0029A3961324FE67) },
- { UINT64_C(0x03744629EA87B468), UINT64_C(0x01B1B421D820F115),
- UINT64_C(0x009DEF11D39EF564), UINT64_C(0x002A1D3B4419573F),
- UINT64_C(0x00558617DEFBD955), UINT64_C(0x03E4BE19D9F46F14),
- UINT64_C(0x012A38F1BF3ED4C3), UINT64_C(0x00B5C5CD4AC51A53),
- UINT64_C(0x00A0E10EBF360168) } },
- { { UINT64_C(0x011616DEF784F95B), UINT64_C(0x02677312C6AD8D2D),
- UINT64_C(0x03F3EF6B22617C90), UINT64_C(0x029E26932332F57D),
- UINT64_C(0x0285AE820DE6D58A), UINT64_C(0x014C9337216D597B),
- UINT64_C(0x00A6F170854E55AF), UINT64_C(0x010EA56E5DFB91ED),
- UINT64_C(0x012F8DBABA868C11) },
- { UINT64_C(0x015249FC91DCCF70), UINT64_C(0x0306C5CB46C7DD02),
- UINT64_C(0x021954201045F6CB), UINT64_C(0x00E2B058688BC602),
- UINT64_C(0x002D5DDCF79B78E3), UINT64_C(0x03AF429058EAD023),
- UINT64_C(0x016A3FA5F7DB5234), UINT64_C(0x01EAFE34B82E4D26),
- UINT64_C(0x0095115BD2F5AE74) } },
- { { UINT64_C(0x01C1741308F9B528), UINT64_C(0x011456D2FA27C256),
- UINT64_C(0x029EE8BA38AC33BC), UINT64_C(0x0162AD2DF7E46CB7),
- UINT64_C(0x01239C1DD2198564), UINT64_C(0x00D634D586B52D14),
- UINT64_C(0x00362033A3D5AE2B), UINT64_C(0x00F403720300250C),
- UINT64_C(0x0134664850978D32) },
- { UINT64_C(0x032ECC2C4837554E), UINT64_C(0x008F4BC077701F7F),
- UINT64_C(0x002D0F7435107071), UINT64_C(0x015A21A6D90E61B2),
- UINT64_C(0x03E1B78AD2E928DC), UINT64_C(0x02A2214D7306E1AF),
- UINT64_C(0x01C4FCA92A1694C1), UINT64_C(0x00656FBD23561E1B),
- UINT64_C(0x013FF3454072CB98) } },
- },
- {
- { { UINT64_C(0x003C182D851368EE), UINT64_C(0x0128CF55F2467CB0),
- UINT64_C(0x00767E333ACE3BB9), UINT64_C(0x011F65D379FE73C3),
- UINT64_C(0x038B18FA5C037C7D), UINT64_C(0x01B3CD7DFA5B80B3),
- UINT64_C(0x0086C596F1A3E912), UINT64_C(0x00A8AD1EBFF700CD),
- UINT64_C(0x00E12C370BFEEC8C) },
- { UINT64_C(0x00E5DE2C18A3F84B), UINT64_C(0x02D9CB8AB50B28B7),
- UINT64_C(0x01D7EDD0731B2C4B), UINT64_C(0x0328A026B1FAD960),
- UINT64_C(0x02189B0FF8B6CA46), UINT64_C(0x03FD18C777A3B6E8),
- UINT64_C(0x0004BCBA72EE3E81), UINT64_C(0x0214C7D12A3F1BC4),
- UINT64_C(0x01CA103DD1B9C887) } },
- { { UINT64_C(0x00A781D5DE024391), UINT64_C(0x01D4AC6B9AA04C66),
- UINT64_C(0x0298088919924A4E), UINT64_C(0x02295F237B9E2B5F),
- UINT64_C(0x0228FA8EA8570017), UINT64_C(0x01AE7F1814C6B59C),
- UINT64_C(0x008FF64625C08899), UINT64_C(0x002A626C4EECF6A1),
- UINT64_C(0x0118A9AD8CEFC12E) },
- { UINT64_C(0x014B05DA9E9AB68C), UINT64_C(0x036EDCE530984903),
- UINT64_C(0x03147DF5F527C318), UINT64_C(0x0196BC1DED347CDD),
- UINT64_C(0x01BB4AC96E14A591), UINT64_C(0x03C4F3EDF23B9460),
- UINT64_C(0x03547D14C90381B8), UINT64_C(0x03693FA10D27208C),
- UINT64_C(0x003B75AA5EA458F7) } },
- { { UINT64_C(0x02779CC419496A3E), UINT64_C(0x01D3BB2E4FE62409),
- UINT64_C(0x032F4C70FCAE21C4), UINT64_C(0x013310DA0ECE14A3),
- UINT64_C(0x03F3B3593FC9DDBB), UINT64_C(0x0051822EF8CFB99D),
- UINT64_C(0x012D89EA3AE1C997), UINT64_C(0x00D12E2856922EAE),
- UINT64_C(0x00E81549D787C4C8) },
- { UINT64_C(0x02337896D4B88B67), UINT64_C(0x00A59FC2D1584FBE),
- UINT64_C(0x02FAA1ED2840EB09), UINT64_C(0x02061203F2AA6499),
- UINT64_C(0x03BF834C1997385E), UINT64_C(0x02274588F3F24162),
- UINT64_C(0x001CC1FD4A622D5A), UINT64_C(0x0044FEAA4FA76E84),
- UINT64_C(0x00B3619A1E813DA3) } },
- { { UINT64_C(0x0276BEE0D076683D), UINT64_C(0x030210C875AFAF69),
- UINT64_C(0x0011EDC7657E64F0), UINT64_C(0x02488D3166D94F20),
- UINT64_C(0x011EA313A85E0E01), UINT64_C(0x032E12BF7FFAF1B4),
- UINT64_C(0x00327C5A8CCEF85B), UINT64_C(0x0252EF23E4C30C4E),
- UINT64_C(0x01CC6A9EB749B839) },
- { UINT64_C(0x02B00795BB99594F), UINT64_C(0x01F383BC6F8BE7AA),
- UINT64_C(0x00760524F18BF5F2), UINT64_C(0x013AA36073E7DDA9),
- UINT64_C(0x025A0A5A67DE0097), UINT64_C(0x01A61B644AB9486A),
- UINT64_C(0x0313B98AABF5EA94), UINT64_C(0x003BB89B65E51F0D),
- UINT64_C(0x01776B040E0F32AB) } },
- { { UINT64_C(0x01721BA5B2662A6A), UINT64_C(0x0215447AF117F66C),
- UINT64_C(0x03DB83ECC5D3D99A), UINT64_C(0x0215A6C6CE2794E3),
- UINT64_C(0x010BE3489ECF31F8), UINT64_C(0x012B3FA3634CDEF2),
- UINT64_C(0x017C1F03CDFBCD8A), UINT64_C(0x02EE6A91A626677E),
- UINT64_C(0x003FF1568F6BE74E) },
- { UINT64_C(0x01995519CD76A58E), UINT64_C(0x02DC3A3040585EF5),
- UINT64_C(0x0061DDCAE3A68494), UINT64_C(0x025E1A1EF3C2AAA5),
- UINT64_C(0x00CA54B0D55B6CE8), UINT64_C(0x00543A97F9E4CC22),
- UINT64_C(0x01F7F09EDEFF8BFA), UINT64_C(0x00168473D37DD44E),
- UINT64_C(0x00FE410E086ACD40) } },
- { { UINT64_C(0x006AF7630DA09D54), UINT64_C(0x010ABA844C57F2B5),
- UINT64_C(0x03C9AC1832567F47), UINT64_C(0x00B3CFD3C603E8BB),
- UINT64_C(0x01A04969EEACA1C9), UINT64_C(0x02E57B7E17E4591D),
- UINT64_C(0x03E68AB3619DA17B), UINT64_C(0x00ECCA930F030279),
- UINT64_C(0x01B2C98B4036BF1D) },
- { UINT64_C(0x0077C78B045007F6), UINT64_C(0x03CCE2791A0C0815),
- UINT64_C(0x01688DB89F24D07A), UINT64_C(0x0017DBDDD43EAD41),
- UINT64_C(0x033A80BF740D6693), UINT64_C(0x02F768ED65974242),
- UINT64_C(0x026B74A3E2B11EFF), UINT64_C(0x023E110BE2C45B38),
- UINT64_C(0x00B98CD56F7AB2CD) } },
- { { UINT64_C(0x0383E5A50FB0D3ED), UINT64_C(0x034513587B8AB555),
- UINT64_C(0x03B1C6783B97BD45), UINT64_C(0x0062B781B344D4E1),
- UINT64_C(0x00FD5DFB5083FED9), UINT64_C(0x00CF4B880197BC29),
- UINT64_C(0x02084C42BE014183), UINT64_C(0x01C81317B056C149),
- UINT64_C(0x016318E131F69642) },
- { UINT64_C(0x019B4B41240FA002), UINT64_C(0x0312BAA4E914151E),
- UINT64_C(0x0180907D9FACF5B0), UINT64_C(0x007774B33895C1D0),
- UINT64_C(0x017E17EBCCA7FA72), UINT64_C(0x030812EEB0BC890A),
- UINT64_C(0x02294B1CB2912B73), UINT64_C(0x03835B7F1FA5A17D),
- UINT64_C(0x001712AC45AB3EC9) } },
- { { UINT64_C(0x006603D4F696BA83), UINT64_C(0x00D22CAFE710B52F),
- UINT64_C(0x00A86019255DD155), UINT64_C(0x03D9E86EE758D999),
- UINT64_C(0x024051D5CE463A6D), UINT64_C(0x02906D0203D86E6E),
- UINT64_C(0x02B53E1EA3B77733), UINT64_C(0x01298EBA501720C6),
- UINT64_C(0x00A49AB3D5669F64) },
- { UINT64_C(0x00C3477F5E8C01EF), UINT64_C(0x02CFF8B3EED1F46C),
- UINT64_C(0x02588DBF2A1259EE), UINT64_C(0x01BC0AE8F9969F27),
- UINT64_C(0x0284232123DA5F9F), UINT64_C(0x03E79C894325C436),
- UINT64_C(0x00FE809311DA7F3B), UINT64_C(0x0102255D12EBA535),
- UINT64_C(0x01F50E25AE34114E) } },
- { { UINT64_C(0x0277D803646C1FB6), UINT64_C(0x02488A5E5052BBB1),
- UINT64_C(0x000391356EAC8F11), UINT64_C(0x01646437C00A834F),
- UINT64_C(0x02EAB8F940B93B40), UINT64_C(0x024958DF1C74ED20),
- UINT64_C(0x03F2F1AF37BD1D73), UINT64_C(0x011FE3F5381F17F4),
- UINT64_C(0x00EF826DAE390184) },
- { UINT64_C(0x00D2D6B4BA78B572), UINT64_C(0x0073D6C96322203E),
- UINT64_C(0x018C7B2E976AA1E5), UINT64_C(0x026E3F6920E5F016),
- UINT64_C(0x01E846537687AFF5), UINT64_C(0x017563948203FD81),
- UINT64_C(0x019F1D17DABC8810), UINT64_C(0x00F8ED530C4E3A67),
- UINT64_C(0x0196F10721B62324) } },
- { { UINT64_C(0x032F87D12878503F), UINT64_C(0x03648B98DC48ECC8),
- UINT64_C(0x0184FD4C8EF53242), UINT64_C(0x01333846A9EEDB04),
- UINT64_C(0x02C1DF317872BBBF), UINT64_C(0x002D6E1FAF12E7FB),
- UINT64_C(0x039480C808CCDA38), UINT64_C(0x02845D8F6413B928),
- UINT64_C(0x01979462C493957E) },
- { UINT64_C(0x02E38CCA2947A480), UINT64_C(0x00298B225770DDF9),
- UINT64_C(0x02859B366A105BC5), UINT64_C(0x00C80C32E8803179),
- UINT64_C(0x01DEC1627A49675D), UINT64_C(0x018FD7B10ED2384C),
- UINT64_C(0x00CE729C9A700811), UINT64_C(0x00B9251157C6408C),
- UINT64_C(0x00D18FB5EDB29090) } },
- { { UINT64_C(0x0019C27F1002FA40), UINT64_C(0x0187B6686A1976EA),
- UINT64_C(0x03089E6ABFDCA1BA), UINT64_C(0x01E3A9276DAB6A31),
- UINT64_C(0x01010381B56E1374), UINT64_C(0x02059C3444CA22AD),
- UINT64_C(0x0340D48C52418852), UINT64_C(0x001C397FEACAD014),
- UINT64_C(0x00A9B91476DE1E3B) },
- { UINT64_C(0x01B18811D2203C97), UINT64_C(0x006802C3244A5143),
- UINT64_C(0x034CC7484B00B0C2), UINT64_C(0x02D138E88D39FE0E),
- UINT64_C(0x00035A355C8D48A2), UINT64_C(0x01257073943DE7F1),
- UINT64_C(0x003B2AA49BD592AC), UINT64_C(0x03D7C1DBA4418663),
- UINT64_C(0x01A24E3A67DAF410) } },
- { { UINT64_C(0x02B819FA06A8409F), UINT64_C(0x004A52ACCE9D798F),
- UINT64_C(0x0342BCE5E942F51F), UINT64_C(0x01499CF92BE85899),
- UINT64_C(0x03ACD69B9655760D), UINT64_C(0x020F4E9A7813F0D0),
- UINT64_C(0x03880853D5E05E02), UINT64_C(0x02B0666045F612A7),
- UINT64_C(0x00302D53FFFEEF1D) },
- { UINT64_C(0x025294489593BC03), UINT64_C(0x013D42D26192AAEB),
- UINT64_C(0x010D09630D5F95E5), UINT64_C(0x02152684A6D53F7C),
- UINT64_C(0x022DD5DAD7C7B4A8), UINT64_C(0x02966500C48498D3),
- UINT64_C(0x03D763E4EB3C2E33), UINT64_C(0x027FAC6AFEDC5F61),
- UINT64_C(0x0074EA2C83E52FE7) } },
- { { UINT64_C(0x01DB9F78868172DA), UINT64_C(0x0100A5C0A0C25D2E),
- UINT64_C(0x023587D7C3E66CE7), UINT64_C(0x0234D19B042FCCD7),
- UINT64_C(0x0059721B0F60680E), UINT64_C(0x03A0B2DF23AB3A42),
- UINT64_C(0x0177AFB700329CAC), UINT64_C(0x03D5A5CFAF392AE7),
- UINT64_C(0x00CF59BC96ECDBA2) },
- { UINT64_C(0x03CE38933BF1C993), UINT64_C(0x0388C35CC45F89F5),
- UINT64_C(0x039286D1ED3DB46C), UINT64_C(0x0061947308D0F830),
- UINT64_C(0x0307100E3F7C9C8E), UINT64_C(0x00967048E8CC7CC9),
- UINT64_C(0x03CAD0590370F457), UINT64_C(0x0110D9420ECE3996),
- UINT64_C(0x009955E94586B830) } },
- { { UINT64_C(0x03B6822745F0E5DA), UINT64_C(0x03120B5D07E9C6A5),
- UINT64_C(0x01F88B173B2A0839), UINT64_C(0x0245CA639869EE96),
- UINT64_C(0x0199F585B26F8120), UINT64_C(0x01D2153C5D41B782),
- UINT64_C(0x009EAD730F2E3B2D), UINT64_C(0x007E27FEF3F3388E),
- UINT64_C(0x01DD0BBF32960B2B) },
- { UINT64_C(0x0298F45E5931C0F0), UINT64_C(0x012A6F48D3898EAD),
- UINT64_C(0x01EFD537B310CFED), UINT64_C(0x030390CD48666C4B),
- UINT64_C(0x01DCF41DD16073BB), UINT64_C(0x035CF923EABD525A),
- UINT64_C(0x00DDF48F41B47311), UINT64_C(0x0316E0000BFFF7E2),
- UINT64_C(0x003C6A0632821286) } },
- { { UINT64_C(0x006FA434852228CC), UINT64_C(0x03EE279533E093C6),
- UINT64_C(0x03C215EE36B974E7), UINT64_C(0x02FA330552481892),
- UINT64_C(0x01ABFC67F3C2F700), UINT64_C(0x000945F47832719D),
- UINT64_C(0x01BA378921E29D68), UINT64_C(0x0364936B83B66609),
- UINT64_C(0x0137B7B2011DE260) },
- { UINT64_C(0x00A7EBAC8BA1E090), UINT64_C(0x0343E15BB9BADFCE),
- UINT64_C(0x01C5AFA1059527D8), UINT64_C(0x039CE94C694D78AB),
- UINT64_C(0x020EE7FF8C758AFB), UINT64_C(0x03859CF409F61041),
- UINT64_C(0x033F2682BABD9F38), UINT64_C(0x0344ED7AA22D40CE),
- UINT64_C(0x00C59BE4543774E1) } },
- { { UINT64_C(0x01B5777A8F1CAC2C), UINT64_C(0x001A1BB0AB5E6822),
- UINT64_C(0x011BC043646DAF27), UINT64_C(0x03F711C68F6A2900),
- UINT64_C(0x001C279115DF5830), UINT64_C(0x017D6649CFD4D909),
- UINT64_C(0x02270B8E48C4FC60), UINT64_C(0x01D402B5FB5683E0),
- UINT64_C(0x001F8DB87807BBF7) },
- { UINT64_C(0x00C9DAC0A9244F78), UINT64_C(0x02B03A3698AE7AB0),
- UINT64_C(0x02CCF3FF50BC045B), UINT64_C(0x03BCD2148E821FFF),
- UINT64_C(0x035E87616BD7E71C), UINT64_C(0x034B54F4034B6093),
- UINT64_C(0x02C5BEA4BCD01770), UINT64_C(0x0219F4B5BD513DB4),
- UINT64_C(0x01DF5AC58C13B575) } },
- },
- {
- { { UINT64_C(0x019885D110E10587), UINT64_C(0x0225E6982614E90C),
- UINT64_C(0x03FE389B08EF52DA), UINT64_C(0x02986A5F6773FA41),
- UINT64_C(0x02D7E3FB92A3A338), UINT64_C(0x02804DB8E96B46A6),
- UINT64_C(0x02ED29A77A3BFC07), UINT64_C(0x021EDA658D1622A9),
- UINT64_C(0x00DC41F148BEEF47) },
- { UINT64_C(0x00671195EBF698BD), UINT64_C(0x02DA5978A5D3B8AE),
- UINT64_C(0x0067084C20702323), UINT64_C(0x01BAE92F07B45047),
- UINT64_C(0x01EECFF9A6840B39), UINT64_C(0x00B5A0A6F615E949),
- UINT64_C(0x02CE02C0AFAD4F4D), UINT64_C(0x02CCCE13BD8C56FD),
- UINT64_C(0x001BC38FE857CCC6) } },
- { { UINT64_C(0x00081356B6965640), UINT64_C(0x006CE26431E83C07),
- UINT64_C(0x01BA4874007EE7A0), UINT64_C(0x02537377BE8BDCBF),
- UINT64_C(0x0248DB2FA66BD85D), UINT64_C(0x028C676B603EF79F),
- UINT64_C(0x011FB7160B2BE1C4), UINT64_C(0x02E60E65885FEFB9),
- UINT64_C(0x012B85F1B13BE0ED) },
- { UINT64_C(0x0353AA14ECFB1D0D), UINT64_C(0x01FF0DDD82885F37),
- UINT64_C(0x0331E99B56FBDDD7), UINT64_C(0x03AEB28F8419966F),
- UINT64_C(0x021F907EA8D0F042), UINT64_C(0x013BD7D21430856E),
- UINT64_C(0x0386870C6BB892CA), UINT64_C(0x03E04B0EFADCEFFA),
- UINT64_C(0x007C04B740BD4123) } },
- { { UINT64_C(0x0003B2CD3E0BF039), UINT64_C(0x00C735DA6B8581E9),
- UINT64_C(0x0012D9341E1131F3), UINT64_C(0x03D2B2BBE7116022),
- UINT64_C(0x00A056CCF73BDC37), UINT64_C(0x027C9AA3BBBDE400),
- UINT64_C(0x02165FF6E36E8907), UINT64_C(0x0139C88969C85A96),
- UINT64_C(0x00C7B0F49EEA4A8D) },
- { UINT64_C(0x01F03CD678EAF6EB), UINT64_C(0x01BF3F1E8FBD78DF),
- UINT64_C(0x00857FD3BFA434E9), UINT64_C(0x008641B0E586D15E),
- UINT64_C(0x021227FC18AF0795), UINT64_C(0x022F892EEA381B7A),
- UINT64_C(0x00B3FA1F0F06E680), UINT64_C(0x01EAB02BC55C4EE1),
- UINT64_C(0x01116BB9BA45D30F) } },
- { { UINT64_C(0x03B557A9EDCBF5E2), UINT64_C(0x00B1DFD3ECC7A54C),
- UINT64_C(0x02DCE258E5A7E8D4), UINT64_C(0x00CA7703C434FC01),
- UINT64_C(0x038801282507AB56), UINT64_C(0x025FD9FA5A9E7C74),
- UINT64_C(0x0084D0CBBC9F71D9), UINT64_C(0x00D621CCEBB93EC1),
- UINT64_C(0x007E0D7D26AF06B2) },
- { UINT64_C(0x02584763447D2B4B), UINT64_C(0x00E02402AF814CEB),
- UINT64_C(0x01A0946A66DEBE3C), UINT64_C(0x025BDCD462246772),
- UINT64_C(0x032E9062B0C5E215), UINT64_C(0x037BCF49D9FBECDC),
- UINT64_C(0x001F56138C539278), UINT64_C(0x000AEA3CABF951BB),
- UINT64_C(0x007AA80F0C621590) } },
- { { UINT64_C(0x00B8EEBBBD959BD9), UINT64_C(0x001BE3997D083340),
- UINT64_C(0x01B3F063154C5C54), UINT64_C(0x0258C476F7A9A983),
- UINT64_C(0x0042A485E75D36E5), UINT64_C(0x034928BB28AF526A),
- UINT64_C(0x01BA009661FE033D), UINT64_C(0x039E10035E2FEDA5),
- UINT64_C(0x01AFFCC1198129AF) },
- { UINT64_C(0x030AD5348384E611), UINT64_C(0x01579499B7C9277C),
- UINT64_C(0x01969EE33931346F), UINT64_C(0x025C5C1EBDB572DA),
- UINT64_C(0x033A65D217266A39), UINT64_C(0x026F0D4AD6360EAB),
- UINT64_C(0x037599346289BDA2), UINT64_C(0x0092404E9E02CE9C),
- UINT64_C(0x01D0C694EC0434A7) } },
- { { UINT64_C(0x0099723AA10FBD04), UINT64_C(0x03F7E7474E4B9E21),
- UINT64_C(0x03ECBDF12C367638), UINT64_C(0x009B6D83C1B5EFBE),
- UINT64_C(0x03E6CE2FC3522A5D), UINT64_C(0x0083A6DEF388FDCF),
- UINT64_C(0x0001D8542F4EA36B), UINT64_C(0x035D032BD68C8381),
- UINT64_C(0x0131DF4BF7A79938) },
- { UINT64_C(0x008A14C7B9493BE8), UINT64_C(0x0273BD54452391FF),
- UINT64_C(0x035758B804AAD2E8), UINT64_C(0x0218D8B66AABA8CD),
- UINT64_C(0x0013BC5120CE58B7), UINT64_C(0x027C6BF5C3CF36BB),
- UINT64_C(0x0325B4A1E773C0D4), UINT64_C(0x01C2F7A449EA2D3B),
- UINT64_C(0x01C6E6D30CAF29F6) } },
- { { UINT64_C(0x0321B0EB2DAA2FB7), UINT64_C(0x001AF441996ABD26),
- UINT64_C(0x0075B82E9704E625), UINT64_C(0x00FD42C4DDFBEF6D),
- UINT64_C(0x0199707C61408809), UINT64_C(0x017F62CF54E5FBA8),
- UINT64_C(0x03E8914D3356B6E7), UINT64_C(0x010B415870E01C17),
- UINT64_C(0x01B8D0304825F773) },
- { UINT64_C(0x01AA92433FDAA949), UINT64_C(0x01186BD47A9D105F),
- UINT64_C(0x03D995A63573F12F), UINT64_C(0x032129C097A55B0D),
- UINT64_C(0x01817B31A05D6C77), UINT64_C(0x03D1CAF9B4BCAF81),
- UINT64_C(0x01524CCC3B01B281), UINT64_C(0x0296DAA6FDAA7E18),
- UINT64_C(0x002F1DC74BE29F0C) } },
- { { UINT64_C(0x02171F9BDC8D6167), UINT64_C(0x03D306F736B287BD),
- UINT64_C(0x021943224F5B91BE), UINT64_C(0x02B6BA63BB681A7A),
- UINT64_C(0x003527F99B16E603), UINT64_C(0x00CC933DC7095468),
- UINT64_C(0x0265D81677BFCEEF), UINT64_C(0x028AA225CE78ABEA),
- UINT64_C(0x00837C63F321EE01) },
- { UINT64_C(0x00A4B775684BF04E), UINT64_C(0x00AB33042AB3CA3F),
- UINT64_C(0x019796F5B70DA12B), UINT64_C(0x00CD06B6726983AD),
- UINT64_C(0x002698B98D097375), UINT64_C(0x03BB3A2632FF6007),
- UINT64_C(0x00B02BB6915F2608), UINT64_C(0x0267E64CB1F79BA2),
- UINT64_C(0x01DAB183858DB0F4) } },
- { { UINT64_C(0x01D545A21757C756), UINT64_C(0x001D934F1E31FF52),
- UINT64_C(0x023B0285CE4B1861), UINT64_C(0x031354B83A06220D),
- UINT64_C(0x017177FFE06AFE14), UINT64_C(0x019E6D07584A960E),
- UINT64_C(0x0119B9405A4BEA49), UINT64_C(0x019D70486EC70531),
- UINT64_C(0x00D7844A95DDF521) },
- { UINT64_C(0x02045C5C7288CF7B), UINT64_C(0x00677CB68405B1B1),
- UINT64_C(0x01845055E3EA0793), UINT64_C(0x035EFB9C55059FBD),
- UINT64_C(0x038843F3AF91E7EA), UINT64_C(0x00822747CA170235),
- UINT64_C(0x037B132A90F3A94C), UINT64_C(0x00526CF439B472A8),
- UINT64_C(0x00132F18D93B62FB) } },
- { { UINT64_C(0x01D84FC9D0CF69E7), UINT64_C(0x006503AA38D2A5EE),
- UINT64_C(0x03A94DFC118DD98F), UINT64_C(0x03B7F19AE7F392FF),
- UINT64_C(0x007287A7DC1849A3), UINT64_C(0x00067A7B188F6CE5),
- UINT64_C(0x02A347BDE0D7D087), UINT64_C(0x0268E88CC6AAFE02),
- UINT64_C(0x010F44A365B11B99) },
- { UINT64_C(0x018F73AC92AE7427), UINT64_C(0x0371CC00B812BB06),
- UINT64_C(0x0093D3088101FF62), UINT64_C(0x00C8613B7544141B),
- UINT64_C(0x01AF7C6201945AC7), UINT64_C(0x030C7CA555FE097F),
- UINT64_C(0x025B2E6EDA00AB31), UINT64_C(0x0214A3B6A76443D0),
- UINT64_C(0x0040A360259C7CDD) } },
- { { UINT64_C(0x006047E27F3DE4D2), UINT64_C(0x01FC4A47DA6A0A53),
- UINT64_C(0x015A543BD0BC352A), UINT64_C(0x014AACDA98A2B65E),
- UINT64_C(0x036FE6BD165C71A3), UINT64_C(0x02DF772BAC823A1F),
- UINT64_C(0x00416598B2CD1443), UINT64_C(0x032CA3B1D0CAEDD0),
- UINT64_C(0x0032FB284CCCEF17) },
- { UINT64_C(0x006DC83E96A2607F), UINT64_C(0x013B7280B80B6341),
- UINT64_C(0x004551B88CA47813), UINT64_C(0x01849A56EE6AB37F),
- UINT64_C(0x00C3074BC3D0074A), UINT64_C(0x0049915404661EF6),
- UINT64_C(0x017F0B8543807006), UINT64_C(0x01235802E0AA61E9),
- UINT64_C(0x016866C456C5454B) } },
- { { UINT64_C(0x0397A466381DC2A6), UINT64_C(0x00CD4D54FE413A43),
- UINT64_C(0x0320035D8FD47311), UINT64_C(0x03FEF7B90109A77E),
- UINT64_C(0x01FF2C161A6CFCBA), UINT64_C(0x014089BF152955D6),
- UINT64_C(0x00595A7ADB79909F), UINT64_C(0x02E10BC4FB022F89),
- UINT64_C(0x012739D14BF39AB2) },
- { UINT64_C(0x03045804E123BA29), UINT64_C(0x037196AFA31BDBE1),
- UINT64_C(0x01A3BADADE7D8795), UINT64_C(0x005FE72D3736F1F7),
- UINT64_C(0x00B261A79C9F5DAE), UINT64_C(0x00CC055F3C4A27EA),
- UINT64_C(0x018DD7C9E5958FC2), UINT64_C(0x0096748344CCC75E),
- UINT64_C(0x0065ADD88400A218) } },
- { { UINT64_C(0x033557744356B52C), UINT64_C(0x03DD368D0EA0209F),
- UINT64_C(0x02EA630FD3CCDE4D), UINT64_C(0x037A07B902382B40),
- UINT64_C(0x000B7AF2CF41C092), UINT64_C(0x0221D85556DCC533),
- UINT64_C(0x03C92114F14EA6E1), UINT64_C(0x006813B827858B16),
- UINT64_C(0x011933B0203B754D) },
- { UINT64_C(0x03A2396D5A659158), UINT64_C(0x0350A8E07708486E),
- UINT64_C(0x0306EEBAE2B49C8B), UINT64_C(0x00EC9E65F76A5B29),
- UINT64_C(0x03CECDD7F9A47F6A), UINT64_C(0x024DB8B97AA04533),
- UINT64_C(0x028D089D2C8EBEAE), UINT64_C(0x01959F5D1CB2E7ED),
- UINT64_C(0x0024A23BD4403D34) } },
- { { UINT64_C(0x038B31C4EED9CDF5), UINT64_C(0x0185AFF2C98A930A),
- UINT64_C(0x0245E4B7D7DD3E7E), UINT64_C(0x00232AA32609076B),
- UINT64_C(0x023F2A9E6F982A24), UINT64_C(0x03087A8E3FF2F39E),
- UINT64_C(0x02F6CA050121ACCC), UINT64_C(0x03568930B3D90B8C),
- UINT64_C(0x01C922F3A5335B36) },
- { UINT64_C(0x032AD6EEE92B1FE6), UINT64_C(0x02FC436D7BD6B2C7),
- UINT64_C(0x023EDD35035286A3), UINT64_C(0x003D77B6144EB9BC),
- UINT64_C(0x0304C9A105C2BAEE), UINT64_C(0x01ADB987C7CA786C),
- UINT64_C(0x0132676ADD1D742E), UINT64_C(0x02A9E9CB749E88B9),
- UINT64_C(0x00A99A53E3A5AC0A) } },
- { { UINT64_C(0x03639306E80DE633), UINT64_C(0x01AB767B97949EED),
- UINT64_C(0x006F4BAA789B6820), UINT64_C(0x039D5F497550BD7A),
- UINT64_C(0x00B4B2B380BC772D), UINT64_C(0x03022AD28F3A1DD0),
- UINT64_C(0x0017950F61ACF7EB), UINT64_C(0x019CAC6E06DC1B93),
- UINT64_C(0x008470E16670F97A) },
- { UINT64_C(0x03C11D39EE5D0D74), UINT64_C(0x01C090F08CC26FEC),
- UINT64_C(0x0006AD970C46C574), UINT64_C(0x015907C555DF013E),
- UINT64_C(0x0070AB35D20A91F0), UINT64_C(0x00C0481F822220A4),
- UINT64_C(0x03A92E8B413E83FE), UINT64_C(0x00C3982C5F8D922E),
- UINT64_C(0x017CB1B97D4ED7B4) } },
- { { UINT64_C(0x0057D40664DA7708), UINT64_C(0x00D1DC31FC3ED514),
- UINT64_C(0x01C1C72DE7D6ECFF), UINT64_C(0x00DAEABFA1F9C5DE),
- UINT64_C(0x0027EE8200E32455), UINT64_C(0x00F2A2064D51F4F3),
- UINT64_C(0x0087C336FD335B37), UINT64_C(0x0350C7F9A0D4FC4D),
- UINT64_C(0x01D53465439099CD) },
- { UINT64_C(0x01B27DD4E9031706), UINT64_C(0x0197F1275CBBB42C),
- UINT64_C(0x015ABB1962BC7CE5), UINT64_C(0x015AEBA4FCC2D21C),
- UINT64_C(0x01DB34AC91849D8B), UINT64_C(0x02168D50E8D52313),
- UINT64_C(0x024C7BCFFA60FB49), UINT64_C(0x00653790EC4A5122),
- UINT64_C(0x0021ECA115250E74) } },
- },
- {
- { { UINT64_C(0x01017ED5F1C86157), UINT64_C(0x01C5FACEAAF3291A),
- UINT64_C(0x01980E57AC2978AD), UINT64_C(0x012E4C78C1EF8537),
- UINT64_C(0x019080B37DC2F0DA), UINT64_C(0x0104D379379FF55E),
- UINT64_C(0x0019CF345BF6F641), UINT64_C(0x01CE7973781C9EB0),
- UINT64_C(0x00E6B4E5C2E7863E) },
- { UINT64_C(0x014E085628E15F36), UINT64_C(0x03113ED189D82402),
- UINT64_C(0x0198521CB21CCF92), UINT64_C(0x03CB794E55F64866),
- UINT64_C(0x01B6C417EBCEDCD4), UINT64_C(0x001D79C7600B1BE5),
- UINT64_C(0x02EC6810EA41A2B6), UINT64_C(0x0083606535BEC6E7),
- UINT64_C(0x01CA8E7CD41F2E03) } },
- { { UINT64_C(0x01BA87BAF1C9C2EC), UINT64_C(0x00D55499AAADC0DE),
- UINT64_C(0x019712C990B590E5), UINT64_C(0x00384B1ACA78C747),
- UINT64_C(0x03563BCAB01E0B5D), UINT64_C(0x0190C274005354FF),
- UINT64_C(0x00B9D6C425986F2F), UINT64_C(0x038E491D7F2754C6),
- UINT64_C(0x01B202739C50FF59) },
- { UINT64_C(0x03F58DFC16F1CACC), UINT64_C(0x00EE939AC23381A2),
- UINT64_C(0x020399FE184301C9), UINT64_C(0x0351F7998C95E6D7),
- UINT64_C(0x03713D0FEFC9F67B), UINT64_C(0x02651504977BC9CC),
- UINT64_C(0x039962831BD8B37B), UINT64_C(0x03398A2CADA7CFCE),
- UINT64_C(0x00D4F08A7E5A3118) } },
- { { UINT64_C(0x03C9826425A2D6F0), UINT64_C(0x00ECC054CD119CA9),
- UINT64_C(0x00C8AF9373A85F21), UINT64_C(0x03167F72CB478C61),
- UINT64_C(0x01CE9F2616361F7A), UINT64_C(0x03FB08CCEB9E536B),
- UINT64_C(0x0319FD98C00E9131), UINT64_C(0x0010725A47005067),
- UINT64_C(0x01D7C9A8F84C990D) },
- { UINT64_C(0x029CA261BAF35FA1), UINT64_C(0x0220865C1BFEF071),
- UINT64_C(0x0115DF412660A5A4), UINT64_C(0x02257646F5EF524C),
- UINT64_C(0x019648D3BF5907D4), UINT64_C(0x03B8287D6BB4E923),
- UINT64_C(0x00C1831BA518EF96), UINT64_C(0x01147F1EC444000D),
- UINT64_C(0x001BEB2743E8CF72) } },
- { { UINT64_C(0x017385BC9719C87C), UINT64_C(0x038E9A8AC23E84A0),
- UINT64_C(0x03B86FA4168B29E6), UINT64_C(0x0259140D286A2701),
- UINT64_C(0x0248D5F9426712B4), UINT64_C(0x01E876B4EE205101),
- UINT64_C(0x016F0D598FB30248), UINT64_C(0x020D4EEE450E3327),
- UINT64_C(0x0075F0EB2FEC4E8C) },
- { UINT64_C(0x02999066B392D834), UINT64_C(0x03A4F34FCBCA75D9),
- UINT64_C(0x029F3E28ABFA2CC4), UINT64_C(0x0207E1A7B58B1513),
- UINT64_C(0x036C4EE93B0C1C40), UINT64_C(0x038D0C53869B6127),
- UINT64_C(0x02203321AF3FCDF2), UINT64_C(0x0016E986CD98C912),
- UINT64_C(0x019AB5DBF8618B76) } },
- { { UINT64_C(0x02775F5E811FA55B), UINT64_C(0x002FF97CDF8F7EDE),
- UINT64_C(0x00AA05F646486F8F), UINT64_C(0x0357ABB8FF5CB222),
- UINT64_C(0x0047A8176117A59D), UINT64_C(0x01ED8538F6CBC1A6),
- UINT64_C(0x0209FE9034A7F53F), UINT64_C(0x0364120EC4B9D3CF),
- UINT64_C(0x019B67A37C660EDC) },
- { UINT64_C(0x0038B0D828C7A5B7), UINT64_C(0x015D9C74EAC7C806),
- UINT64_C(0x0118152AAA9222B5), UINT64_C(0x01B83339A6AA2783),
- UINT64_C(0x01993B4601A314EF), UINT64_C(0x0325A7A416B3D288),
- UINT64_C(0x019D7FD16DD01F3A), UINT64_C(0x021D190386BFFC60),
- UINT64_C(0x011CF2C0B0E2A983) } },
- { { UINT64_C(0x00D7DE7D18D8BE36), UINT64_C(0x02F0734BAAC04BF5),
- UINT64_C(0x0048BB9E44C3F40B), UINT64_C(0x035994B7094672F1),
- UINT64_C(0x02BD0CFD78BD4138), UINT64_C(0x0015A28B8F06A61A),
- UINT64_C(0x014D5DF2A7F95274), UINT64_C(0x028141F42EAB92B1),
- UINT64_C(0x00B25EF25C149754) },
- { UINT64_C(0x0057378C324BFA00), UINT64_C(0x001F4C62175258AF),
- UINT64_C(0x03153B4FD5FCA3E4), UINT64_C(0x000682DC5C05BE3E),
- UINT64_C(0x0330954DA1D1973A), UINT64_C(0x01BC1D711118932D),
- UINT64_C(0x0168D97A2A9692FD), UINT64_C(0x012BBEB288330777),
- UINT64_C(0x00E133BE00A38BE4) } },
- { { UINT64_C(0x03F431A945F8022D), UINT64_C(0x01CDF8AABB4F5212),
- UINT64_C(0x02CC1D637215E00A), UINT64_C(0x03D36BA40B447ED7),
- UINT64_C(0x02513AB7E6956FDD), UINT64_C(0x008D5E83EDDB9727),
- UINT64_C(0x01B75785B4FDC3C7), UINT64_C(0x01EAB35E8B3CAE24),
- UINT64_C(0x01339E1C87AA8ECC) },
- { UINT64_C(0x02D325A33450FD39), UINT64_C(0x00322202FEDA09D5),
- UINT64_C(0x024827340C12DF41), UINT64_C(0x01E66CCCF20D3B06),
- UINT64_C(0x02001372B74C978F), UINT64_C(0x012C696C6F55CD58),
- UINT64_C(0x02D10F2EED8A9308), UINT64_C(0x02688747F53110D6),
- UINT64_C(0x0188C13D0F26D624) } },
- { { UINT64_C(0x0239E7FBF9FFF942), UINT64_C(0x024391DE07C9C0A8),
- UINT64_C(0x03BB90544685654F), UINT64_C(0x010453EE881DA06B),
- UINT64_C(0x02D2A672E21ACDCD), UINT64_C(0x0047CF596F209D90),
- UINT64_C(0x0321D4C73047EE1B), UINT64_C(0x008011F4FFA1ADC5),
- UINT64_C(0x0051B7DD6F083F62) },
- { UINT64_C(0x00B4E0D173BF30CF), UINT64_C(0x0142CF0DBD8DD71C),
- UINT64_C(0x02FE7953062D3E36), UINT64_C(0x02A5AB5A7D6604A9),
- UINT64_C(0x03CC08A13AACC423), UINT64_C(0x024662C655FF1A2F),
- UINT64_C(0x0179D6E29B6B1FCA), UINT64_C(0x03C8D9EF4E5B76E6),
- UINT64_C(0x00CD341C315CEB11) } },
- { { UINT64_C(0x00CC4030AC8B2AF6), UINT64_C(0x016D6A39FA7E9D4C),
- UINT64_C(0x0392D441BAE14C3A), UINT64_C(0x038840FEA9B7D65B),
- UINT64_C(0x02398CE4933605AF), UINT64_C(0x022CD8745AC294D0),
- UINT64_C(0x00B8391D34172B85), UINT64_C(0x035C1A0D5C360EA4),
- UINT64_C(0x00B2CE02EA54ADC4) },
- { UINT64_C(0x004B32E432779E4D), UINT64_C(0x0396A43E6B80B056),
- UINT64_C(0x035AEFC64CE26A3C), UINT64_C(0x01E9181F393D3B2C),
- UINT64_C(0x0224B7B616D6F2A9), UINT64_C(0x0127AF2D0AF23C91),
- UINT64_C(0x000AD7965D20EADA), UINT64_C(0x0379FD4481124D87),
- UINT64_C(0x01BB6F3DFED6FF8E) } },
- { { UINT64_C(0x001E54056209B80C), UINT64_C(0x01535B3A19C72F26),
- UINT64_C(0x0160AA689BA423E2), UINT64_C(0x0188ECB5D9CC3A27),
- UINT64_C(0x02349FCF75CC0736), UINT64_C(0x0298585615D70FD1),
- UINT64_C(0x03A32918B91165DF), UINT64_C(0x022291948224D8DA),
- UINT64_C(0x0099F8E69358E726) },
- { UINT64_C(0x01F00247AE9F76E1), UINT64_C(0x0128BAD6165EB802),
- UINT64_C(0x01B045052E08E61D), UINT64_C(0x032D595886F8C4D8),
- UINT64_C(0x00186E393A2F7214), UINT64_C(0x016991BB5064F4DD),
- UINT64_C(0x02AD9C4CF5574CEF), UINT64_C(0x0255AD5071D22CCE),
- UINT64_C(0x01456916FD8D5687) } },
- { { UINT64_C(0x0133F0C2BD45283F), UINT64_C(0x01B7E6242FDEFD97),
- UINT64_C(0x035D6B97C76FCAF7), UINT64_C(0x01DEAC7652ACAD19),
- UINT64_C(0x03C4E3BEA33C8BB3), UINT64_C(0x0217A37165F99AD5),
- UINT64_C(0x0269B9B99EC2F11A), UINT64_C(0x028A7868FC6E7D80),
- UINT64_C(0x01D15668B929808B) },
- { UINT64_C(0x028D12F5F8D82B0E), UINT64_C(0x03E7880D363FAA5E),
- UINT64_C(0x00437A04942C06CB), UINT64_C(0x0049CD3A9C99AEE3),
- UINT64_C(0x015E2D9B6B404613), UINT64_C(0x0162924B16171DEA),
- UINT64_C(0x00D5B19300B07C85), UINT64_C(0x02FDE0650EE6F8B2),
- UINT64_C(0x00BB3143583D139C) } },
- { { UINT64_C(0x009BBB9CD613AC50), UINT64_C(0x0128ACBF00659E30),
- UINT64_C(0x003847B178A6C039), UINT64_C(0x03CE96D95CB2F3AB),
- UINT64_C(0x0319F2188F1C72FB), UINT64_C(0x0082FCC27E7E96A0),
- UINT64_C(0x00E32363BCE8DAB7), UINT64_C(0x0014FD07C4ADAC1E),
- UINT64_C(0x0130440FC8AE58D8) },
- { UINT64_C(0x0065ADF64359ED2E), UINT64_C(0x037ED7D5FA4BC647),
- UINT64_C(0x03FF76F3555C909F), UINT64_C(0x03512196FF57D59B),
- UINT64_C(0x00299F8EAAC04382), UINT64_C(0x0329BF8D6A784DA0),
- UINT64_C(0x0175E680B9D87F6E), UINT64_C(0x000779614D617559),
- UINT64_C(0x0091C31FD7BBAA02) } },
- { { UINT64_C(0x007961B4B2C087ED), UINT64_C(0x019162C863ECAFF8),
- UINT64_C(0x02BAA68FEDC62170), UINT64_C(0x00E14BEB5E7390A9),
- UINT64_C(0x014BD12090B0D96E), UINT64_C(0x01E7BB1B54107513),
- UINT64_C(0x023B8205C7A4AC9C), UINT64_C(0x0077AA83FD6A3B9F),
- UINT64_C(0x00B556918DDE426E) },
- { UINT64_C(0x007982C0406E7D53), UINT64_C(0x00514C5527392914),
- UINT64_C(0x030F83C68AD1F365), UINT64_C(0x01248844664ABB22),
- UINT64_C(0x00E9372C39E53CD3), UINT64_C(0x019288EBDD26390E),
- UINT64_C(0x0175B25020B2C5E2), UINT64_C(0x01BE6F3235A8D35E),
- UINT64_C(0x01BF2B1514039839) } },
- { { UINT64_C(0x00ACAC37A302E505), UINT64_C(0x027765CE9E34F2E4),
- UINT64_C(0x02EC67D63AAF96D8), UINT64_C(0x000F998F38DDD8C4),
- UINT64_C(0x01F09C36E648CC10), UINT64_C(0x00F522A0C94D1ACD),
- UINT64_C(0x01621C139782CB28), UINT64_C(0x002ADC14FDA30F4F),
- UINT64_C(0x000AFE14E60E403A) },
- { UINT64_C(0x03F6E66F873938D8), UINT64_C(0x008370549C4A240B),
- UINT64_C(0x019BCDB6FBB27AB2), UINT64_C(0x03968D48A1554399),
- UINT64_C(0x02AE029F24D2343E), UINT64_C(0x008518D4096DF4BA),
- UINT64_C(0x011410655CE49E44), UINT64_C(0x030585BCC07AC55D),
- UINT64_C(0x00DBC52BEF1D2C2E) } },
- { { UINT64_C(0x031E0D6D77452267), UINT64_C(0x02FDA38F6A949512),
- UINT64_C(0x01F65ED3128F260F), UINT64_C(0x0268DE30B333E479),
- UINT64_C(0x03FD84E6AC2E676C), UINT64_C(0x0393B320720BDA53),
- UINT64_C(0x009EDD5FCCBB47ED), UINT64_C(0x01B82B4900272372),
- UINT64_C(0x01D21A307BE4561F) },
- { UINT64_C(0x01FB6C41FDBC2674), UINT64_C(0x02FC0F6001620C6D),
- UINT64_C(0x009450A0F3C6CB0F), UINT64_C(0x015385B69A47DECA),
- UINT64_C(0x026E2296F08B9474), UINT64_C(0x0194DEC7BE891DCB),
- UINT64_C(0x008B5DA06C5F46EF), UINT64_C(0x019F5A58030A2A18),
- UINT64_C(0x00207771A8172F5B) } },
- { { UINT64_C(0x02D0EED2AA2FCC67), UINT64_C(0x028799FC7DD58724),
- UINT64_C(0x01664BF5933707D3), UINT64_C(0x039B5E487A0167D1),
- UINT64_C(0x02767C865F544F76), UINT64_C(0x012879933B9C8060),
- UINT64_C(0x03EBB40C5524547A), UINT64_C(0x0173A7851D6D690E),
- UINT64_C(0x01CF4AB59422F25D) },
- { UINT64_C(0x02E0C44B926C197B), UINT64_C(0x021DCFA310FAD65B),
- UINT64_C(0x03309DFCCBCED9CA), UINT64_C(0x02A11F05E3D88EA0),
- UINT64_C(0x039FE02B0CE3AE95), UINT64_C(0x023B5E3CAC5E3536),
- UINT64_C(0x02C9903F85BF51A2), UINT64_C(0x018141A1EBBB4D03),
- UINT64_C(0x01B6F9AE1517FBCC) } },
- },
- {
- { { UINT64_C(0x01CE126EEC3D1383), UINT64_C(0x03E60292016C63B4),
- UINT64_C(0x01086FC1B1F4E0C7), UINT64_C(0x02B824B832819651),
- UINT64_C(0x018B5EE5C0AC1703), UINT64_C(0x03467EED60D31DFE),
- UINT64_C(0x0370BD13E722F576), UINT64_C(0x01C406BA2A512BD9),
- UINT64_C(0x00D7E1D110502A7C) },
- { UINT64_C(0x02029FD2CA303000), UINT64_C(0x031CB26B2D4BB358),
- UINT64_C(0x001AACC8DD8A2366), UINT64_C(0x02FD746E61373E27),
- UINT64_C(0x01D1A80D5295C235), UINT64_C(0x01FA56B74D0D3443),
- UINT64_C(0x0203660094D0A8F7), UINT64_C(0x006ACC0E24009F44),
- UINT64_C(0x007532FAF2732979) } },
- { { UINT64_C(0x00CC8937C5CFE5E0), UINT64_C(0x036CA3F94D098379),
- UINT64_C(0x0127E76C1F2F6B01), UINT64_C(0x03F376385910CC44),
- UINT64_C(0x005AE2B93F0F4F7C), UINT64_C(0x001F51D975E23E7E),
- UINT64_C(0x0159FF4F64431F80), UINT64_C(0x0215FECEB62BCA1C),
- UINT64_C(0x00168401E32600A7) },
- { UINT64_C(0x01B5A301E78A8DB5), UINT64_C(0x00FF512D35D3F2D2),
- UINT64_C(0x0354D19F77E5A97B), UINT64_C(0x0271EFC5E9AFD789),
- UINT64_C(0x006980179F908FBC), UINT64_C(0x034A31A6FEF922C2),
- UINT64_C(0x01832DCC33A8480C), UINT64_C(0x02589E9D28BAFB44),
- UINT64_C(0x0115572B5F3957D4) } },
- { { UINT64_C(0x02B1A9337E8401D3), UINT64_C(0x0290DCDD374D1722),
- UINT64_C(0x03B06DFC52EC6DB8), UINT64_C(0x0230EA32F50E3F05),
- UINT64_C(0x00FF74654453A452), UINT64_C(0x01A248F21E47C014),
- UINT64_C(0x01E2CED97C15ABF4), UINT64_C(0x0283D12E9548735C),
- UINT64_C(0x011DE7FF5CC44367) },
- { UINT64_C(0x0397C8B2CA828FA8), UINT64_C(0x023C2C16EF221608),
- UINT64_C(0x0079F7CCDCEE62D1), UINT64_C(0x02ABBC4A12FA2ABB),
- UINT64_C(0x02D3E0D3AF058906), UINT64_C(0x016EE5FFCAFF1F4D),
- UINT64_C(0x0383A01497A17543), UINT64_C(0x015456C9C2BA3AA0),
- UINT64_C(0x00833A7F70B8DB1E) } },
- { { UINT64_C(0x02874A121147F509), UINT64_C(0x00814720ED638371),
- UINT64_C(0x03306823E9395088), UINT64_C(0x02A5E552F8389554),
- UINT64_C(0x00F06CF7F0BA5751), UINT64_C(0x030415DEE1815B81),
- UINT64_C(0x00E24A9DB057CA02), UINT64_C(0x0130F23B0BDFF500),
- UINT64_C(0x00CD32356D2FBCF3) },
- { UINT64_C(0x031835514BB690A0), UINT64_C(0x011475889E6369E4),
- UINT64_C(0x02A366B8DA44B373), UINT64_C(0x01336BAE9A4C91D2),
- UINT64_C(0x0321F6D6C8947D98), UINT64_C(0x0331E2910F0F8ECA),
- UINT64_C(0x01F6B3937B0234FE), UINT64_C(0x016C792D27998656),
- UINT64_C(0x009729CAFA8B37BB) } },
- { { UINT64_C(0x030BF08BF55F34E4), UINT64_C(0x01472A877A6E6046),
- UINT64_C(0x03502971975705FE), UINT64_C(0x00F5A66B1DDF090E),
- UINT64_C(0x01DD9C80102CADCC), UINT64_C(0x004EB57A202D88C1),
- UINT64_C(0x0383DED93A003D31), UINT64_C(0x00DF42EE4835E279),
- UINT64_C(0x010B2A2DF2E8CDFC) },
- { UINT64_C(0x00E3757112860379), UINT64_C(0x0049E41486F1D305),
- UINT64_C(0x007F50407D2B699F), UINT64_C(0x0186CFF64543014A),
- UINT64_C(0x015D637AD6EB6B8D), UINT64_C(0x03EDC1A07906ADD6),
- UINT64_C(0x025B1CE8EFA6E451), UINT64_C(0x0281938DC6CCB3C0),
- UINT64_C(0x01E95BF35241E85F) } },
- { { UINT64_C(0x01900B5C8B1B724E), UINT64_C(0x00091B0E23027016),
- UINT64_C(0x033EA7B567F8D8DD), UINT64_C(0x0149CA26370EF3C0),
- UINT64_C(0x0224F7CCEEAEB621), UINT64_C(0x01056822C07633BE),
- UINT64_C(0x02682C8A34D4C312), UINT64_C(0x017F1D80C56ACAFB),
- UINT64_C(0x000D28BD510F85EC) },
- { UINT64_C(0x0031C759D505A0E7), UINT64_C(0x00695B369E0D5C70),
- UINT64_C(0x007414EC503E140D), UINT64_C(0x02998878F14B0559),
- UINT64_C(0x03EB48B235BD02B9), UINT64_C(0x02030C241863472E),
- UINT64_C(0x00302A0DF1BDB378), UINT64_C(0x02ADB25754F52D99),
- UINT64_C(0x01EBEAF9E9BDE9AC) } },
- { { UINT64_C(0x0016D2E6C4CB8040), UINT64_C(0x0251BE4AB3BBC8D1),
- UINT64_C(0x00979A86B1EA6004), UINT64_C(0x03197F4F1967EFAE),
- UINT64_C(0x03A8E572D3878481), UINT64_C(0x0175BC0B4A3D453E),
- UINT64_C(0x0067A078B9E4BDD5), UINT64_C(0x00C290F9DB5CD51A),
- UINT64_C(0x00C8A1050BE75174) },
- { UINT64_C(0x0138FA01526AE111), UINT64_C(0x01E92EC50AC0E2D9),
- UINT64_C(0x03430EFE4DD66F27), UINT64_C(0x027E3E362221AF89),
- UINT64_C(0x0065DC30B6D8ED5E), UINT64_C(0x0194B4AA3299C658),
- UINT64_C(0x03FCCBD1A1EE5AFC), UINT64_C(0x0011C786A00C112C),
- UINT64_C(0x01770EC65BD04CBD) } },
- { { UINT64_C(0x0219978F485193F0), UINT64_C(0x0169EF77837E1846),
- UINT64_C(0x039A4F73B9DC8ADB), UINT64_C(0x0060DDE7E026EABA),
- UINT64_C(0x033EDEE638C66335), UINT64_C(0x0296BFF6A6D575A3),
- UINT64_C(0x01B793FCB261CF96), UINT64_C(0x00066B2DAA6E8B8E),
- UINT64_C(0x00FAA4EE0DF08936) },
- { UINT64_C(0x0082665D53161177), UINT64_C(0x00BF125BA82F6D39),
- UINT64_C(0x022B5DABCDFDBE3B), UINT64_C(0x021CD6983941E0F2),
- UINT64_C(0x010414D9EC902549), UINT64_C(0x03C8E709DAE4453B),
- UINT64_C(0x03B39712A9467665), UINT64_C(0x01718D188F0108E5),
- UINT64_C(0x0001E683E6E53299) } },
- { { UINT64_C(0x026BEC9ED63E2975), UINT64_C(0x02445B0FA3670F21),
- UINT64_C(0x01B0436EA7FA88A2), UINT64_C(0x01B3E0317834AC34),
- UINT64_C(0x0370A51D7EBF7519), UINT64_C(0x028FE5E7A5374634),
- UINT64_C(0x004F9C7DD9D61B9E), UINT64_C(0x024629F3A018136E),
- UINT64_C(0x01B14207DD17A593) },
- { UINT64_C(0x02B49CBF0B981980), UINT64_C(0x03D510AA4EE52E56),
- UINT64_C(0x0223FC5E38C54336), UINT64_C(0x006CECAD3BD995A0),
- UINT64_C(0x01C1E9CE9CFF80F2), UINT64_C(0x03F2A4F91A9DFFC4),
- UINT64_C(0x023C10907D4D0C02), UINT64_C(0x0266DE5575DC75DB),
- UINT64_C(0x00C42F22C54D0AE1) } },
- { { UINT64_C(0x02CA7240C82B5AA4), UINT64_C(0x009FC67BD6157E6E),
- UINT64_C(0x0237AEA0E986F61E), UINT64_C(0x0295536DA6F6D324),
- UINT64_C(0x03CCCEAED7D090D6), UINT64_C(0x02AEB5185AD3ED8F),
- UINT64_C(0x01709E10CC89909F), UINT64_C(0x02104E7DD9DB3C2E),
- UINT64_C(0x018FBE92AA69FDDA) },
- { UINT64_C(0x019CC5A0410AA767), UINT64_C(0x01BD2A1F9D7CB636),
- UINT64_C(0x016925EEC5FA539B), UINT64_C(0x030EE211BCC86603),
- UINT64_C(0x02286DD13B9B314D), UINT64_C(0x019EE14925C53864),
- UINT64_C(0x03BA30594CCCD2C4), UINT64_C(0x03CF135ECF524017),
- UINT64_C(0x009675B7F38F7A5F) } },
- { { UINT64_C(0x034097FDD5C529C4), UINT64_C(0x022BABC53852C90D),
- UINT64_C(0x005FA5449B2CFEAE), UINT64_C(0x0213E3712D2D891B),
- UINT64_C(0x01EC7B3EEE99C138), UINT64_C(0x027C357D0B9CBABB),
- UINT64_C(0x025A19E877887A6F), UINT64_C(0x00D4CD3E5DC97F03),
- UINT64_C(0x01A0BD7971FE9BC8) },
- { UINT64_C(0x01302079C035FA1B), UINT64_C(0x03A553C1D7472F9E),
- UINT64_C(0x01A4254310460FA3), UINT64_C(0x00172E37209ED67F),
- UINT64_C(0x01598766A435004B), UINT64_C(0x015F6DA2FE9089F7),
- UINT64_C(0x03D7A8AD6610ED72), UINT64_C(0x00218A47CD395F7C),
- UINT64_C(0x01CEBC586BD69C42) } },
- { { UINT64_C(0x005E156C633E8718), UINT64_C(0x036F6921E8311E5A),
- UINT64_C(0x012516B3E4747664), UINT64_C(0x016B6481265AF56F),
- UINT64_C(0x005B9CA959873FB0), UINT64_C(0x01215A2E38706CDD),
- UINT64_C(0x00C64AAAEE1FE5AB), UINT64_C(0x009494AE29DD5833),
- UINT64_C(0x001DE0FFFA144A84) },
- { UINT64_C(0x01AB0B04D7864A53), UINT64_C(0x03B6589B739D3720),
- UINT64_C(0x0342AE6EE03B4D2D), UINT64_C(0x0366C4CD40B083D3),
- UINT64_C(0x02E583D735216939), UINT64_C(0x028069A08705938A),
- UINT64_C(0x03470E4558BB0247), UINT64_C(0x037269A3A352E23F),
- UINT64_C(0x000A1B500F437A69) } },
- { { UINT64_C(0x017C93D92A097CC4), UINT64_C(0x001BA88CC46C7150),
- UINT64_C(0x01AE786C3A4D3E20), UINT64_C(0x028BF5869DC58997),
- UINT64_C(0x02E52726A122777F), UINT64_C(0x00972F198872159B),
- UINT64_C(0x02552DD5544B0BA5), UINT64_C(0x009FAC089C64945A),
- UINT64_C(0x00A926F159FE26EE) },
- { UINT64_C(0x003998CBAECC32F4), UINT64_C(0x01BD7CE18DCAAA28),
- UINT64_C(0x00A1F5FB988BB383), UINT64_C(0x03AEB19DEFD835C2),
- UINT64_C(0x00244E47BC8D865E), UINT64_C(0x0038157724E1BB10),
- UINT64_C(0x007BD8BF38E25231), UINT64_C(0x00C5E24E2CD69DAB),
- UINT64_C(0x01A779CC34494897) } },
- { { UINT64_C(0x004BD43B7D176E2E), UINT64_C(0x005E93AB83087469),
- UINT64_C(0x03E80C170CBB6730), UINT64_C(0x02CA4F7C8BEDBE63),
- UINT64_C(0x02A85DD542AB5799), UINT64_C(0x0066D2B71D97D372),
- UINT64_C(0x03558E6854EDDBC6), UINT64_C(0x01014B87714911B3),
- UINT64_C(0x0150C0A4F996E45F) },
- { UINT64_C(0x01E0E94EA8A05AA1), UINT64_C(0x02AFE47CFC92BB70),
- UINT64_C(0x0203EC4D3CE6EAF1), UINT64_C(0x024771DB1D696301),
- UINT64_C(0x0196D9AA529C496E), UINT64_C(0x03B56E31398127F0),
- UINT64_C(0x0387E08D7862B4A2), UINT64_C(0x032941073AE64CE3),
- UINT64_C(0x0000E769C78F3C16) } },
- { { UINT64_C(0x034AFDE7FF46E9D5), UINT64_C(0x01174874945BB22A),
- UINT64_C(0x0315AE08354CD33E), UINT64_C(0x020944101FCD5584),
- UINT64_C(0x02AD3EF0CDDE6E15), UINT64_C(0x030A2698AB480B82),
- UINT64_C(0x03BF15403C92749F), UINT64_C(0x025EFF1408AEDEF4),
- UINT64_C(0x00853B2112F03584) },
- { UINT64_C(0x017A76C60E367447), UINT64_C(0x031C3B84E9CFE4B6),
- UINT64_C(0x0383807320E00DD1), UINT64_C(0x02152F5E5EE3BE00),
- UINT64_C(0x035287A9CC92FA2D), UINT64_C(0x0007C4F52ABBB00A),
- UINT64_C(0x006B2558DC7D9071), UINT64_C(0x0266DBFFAED357E3),
- UINT64_C(0x007E76EA86C8A78C) } },
- { { UINT64_C(0x00DA97D33D831A04), UINT64_C(0x0273CA87AB20DA80),
- UINT64_C(0x004C77C7C118ED92), UINT64_C(0x00F87131473BDF57),
- UINT64_C(0x036EC3E2E0DE7125), UINT64_C(0x00C7E8EADB491D0D),
- UINT64_C(0x0299CB19B912B7BF), UINT64_C(0x0399A443D4E010F6),
- UINT64_C(0x0098FCF8A99C2A16) },
- { UINT64_C(0x030D9571D49B2FC3), UINT64_C(0x02127D20D334D6E9),
- UINT64_C(0x00CF98756BB05081), UINT64_C(0x02A955A34EA7C78A),
- UINT64_C(0x0099BBA4C82FA729), UINT64_C(0x03B80CA8EED74492),
- UINT64_C(0x03A7668CD742B7C3), UINT64_C(0x039AA1A4CD0B2F61),
- UINT64_C(0x01769BB74BE7BFCF) } },
- },
- {
- { { UINT64_C(0x01AE6D7AF8ECE594), UINT64_C(0x004BD233382C1067),
- UINT64_C(0x02FC7E73749707AD), UINT64_C(0x01A0C47D78BA765F),
- UINT64_C(0x02BB7416407B8B16), UINT64_C(0x02F996A9035A29ED),
- UINT64_C(0x01C78A5F9EA3DEA9), UINT64_C(0x03997AA8F9A04684),
- UINT64_C(0x0062155AD4E50AC6) },
- { UINT64_C(0x0136D4FEFEBBFAD7), UINT64_C(0x03C498A8C3B5B196),
- UINT64_C(0x03AF4B2081A7DC94), UINT64_C(0x02FE1693A20D804F),
- UINT64_C(0x0019DBDAD1684FFD), UINT64_C(0x03E47903EABFC90E),
- UINT64_C(0x00EA7078F3484441), UINT64_C(0x037A0851741BD87B),
- UINT64_C(0x004DEB7A4980ECBA) } },
- { { UINT64_C(0x02A998A0008164D4), UINT64_C(0x014B73504FD3FC3A),
- UINT64_C(0x00C19E4FF76A915D), UINT64_C(0x00D30C3B2FD0EC60),
- UINT64_C(0x01518FD432879FDC), UINT64_C(0x018585905FB0DE73),
- UINT64_C(0x002E0E88A51BB32E), UINT64_C(0x011E824BA1621756),
- UINT64_C(0x008F5503550AE008) },
- { UINT64_C(0x01F4C5CC039B003C), UINT64_C(0x034FE4F1205365F7),
- UINT64_C(0x029B502075F020C8), UINT64_C(0x02E622483E3884F2),
- UINT64_C(0x0096DBF1B7347D87), UINT64_C(0x03E49F71A5BBC472),
- UINT64_C(0x028F694B092BA1CC), UINT64_C(0x03911DA84B731F41),
- UINT64_C(0x00AEE98DB68D16A6) } },
- { { UINT64_C(0x03335FA8EB78796F), UINT64_C(0x02878D6632487FA2),
- UINT64_C(0x023DC13EBB873632), UINT64_C(0x0328E4AB268A2A07),
- UINT64_C(0x017A111FE36EA0A1), UINT64_C(0x02DD260BC4AB23DF),
- UINT64_C(0x02BD012E8019E481), UINT64_C(0x02DAEA5C2102ACDC),
- UINT64_C(0x0191F08F46778030) },
- { UINT64_C(0x01DAFF85FF6CA70B), UINT64_C(0x00C20C713262D23C),
- UINT64_C(0x0002F4B44F09083A), UINT64_C(0x014BFF17F10ECF45),
- UINT64_C(0x025ADB2237EA42A8), UINT64_C(0x03E47544193ED683),
- UINT64_C(0x016D405A3F97D5CE), UINT64_C(0x03412AAA28009BC3),
- UINT64_C(0x0061A9DB41BEFEDC) } },
- { { UINT64_C(0x02DE586F26762E69), UINT64_C(0x016435D71514BA52),
- UINT64_C(0x016D7A3D17B63A4D), UINT64_C(0x026D50DCE42619B6),
- UINT64_C(0x0071889F59482029), UINT64_C(0x011CE57167125C3C),
- UINT64_C(0x00A0EA2BE409EA4A), UINT64_C(0x009EDE87052C5E58),
- UINT64_C(0x01024A33C8A03073) },
- { UINT64_C(0x0190FE7C2B54A6C6), UINT64_C(0x006AD6F23DFB4339),
- UINT64_C(0x01A290051C927B4A), UINT64_C(0x001E3AB0900247C6),
- UINT64_C(0x02F0CF556BD9F5D6), UINT64_C(0x0044A9D7E6F09A3D),
- UINT64_C(0x03647C4823C77404), UINT64_C(0x0174246A05A125F4),
- UINT64_C(0x005046F70E49B3B4) } },
- { { UINT64_C(0x0168F14947F5FEA0), UINT64_C(0x00769E99AB9E6CB3),
- UINT64_C(0x0132518C89E21038), UINT64_C(0x01B680C1A8696720),
- UINT64_C(0x002ED6053CD44327), UINT64_C(0x01D30DD43B7E58A9),
- UINT64_C(0x00944E2E081D9491), UINT64_C(0x006831ACBEAD123C),
- UINT64_C(0x0152C11DC5777195) },
- { UINT64_C(0x00241773802E1A49), UINT64_C(0x01BAF7037807F846),
- UINT64_C(0x03D3C7A48FA494BE), UINT64_C(0x011E5017010FAAB7),
- UINT64_C(0x02754857375E5F4A), UINT64_C(0x03779B43EFE7F8E1),
- UINT64_C(0x0012FF3BABC982CB), UINT64_C(0x00FFF200A782A57D),
- UINT64_C(0x01525BFCB1CE27F1) } },
- { { UINT64_C(0x03E552EA093A81E5), UINT64_C(0x0289B3D7E8ED9281),
- UINT64_C(0x0342009AC81D0D79), UINT64_C(0x03AD34454A991783),
- UINT64_C(0x01E2910F69599605), UINT64_C(0x03D879F03BB2582D),
- UINT64_C(0x027BC06449C49ACB), UINT64_C(0x008DC219F862EDC8),
- UINT64_C(0x01C5BFA6129C1E94) },
- { UINT64_C(0x026A51D1748353E7), UINT64_C(0x0181475224C056F6),
- UINT64_C(0x00C626EAA883505E), UINT64_C(0x0279EE327830A7B4),
- UINT64_C(0x0320D8F515A684E8), UINT64_C(0x00C3F8E23CD44D3F),
- UINT64_C(0x02C122EE12C67CA1), UINT64_C(0x00E99C91530D5183),
- UINT64_C(0x0021144C6B142C61) } },
- { { UINT64_C(0x011D351AD93C77DA), UINT64_C(0x03AA1509EA474780),
- UINT64_C(0x018659BD1EF489E2), UINT64_C(0x003305C7CD548712),
- UINT64_C(0x0274078260A570D7), UINT64_C(0x0053143C92277CEB),
- UINT64_C(0x002C9848EA865C9F), UINT64_C(0x02CCE08E86A1AEA9),
- UINT64_C(0x017387D78B16B104) },
- { UINT64_C(0x004AA27AD541016D), UINT64_C(0x018249526E484E54),
- UINT64_C(0x02AB312423D0089E), UINT64_C(0x0219D7F11A43C693),
- UINT64_C(0x02063682A176BD49), UINT64_C(0x03B53A444F4AA295),
- UINT64_C(0x00795B99C8C7C949), UINT64_C(0x03E13055864354E1),
- UINT64_C(0x00AD0290F60CD7D0) } },
- { { UINT64_C(0x012D2A436D526DD9), UINT64_C(0x01CD402DD6D978C6),
- UINT64_C(0x00A58E861B88A485), UINT64_C(0x02D5660B63C2B513),
- UINT64_C(0x00AC661A50344950), UINT64_C(0x005912EC7C3046DF),
- UINT64_C(0x00386C50A42C0A1A), UINT64_C(0x03AB81C1B172201D),
- UINT64_C(0x00C7E276190DAFE0) },
- { UINT64_C(0x02C2EF02CE4F4EFB), UINT64_C(0x036C62A28EE8E529),
- UINT64_C(0x007713DEA66609AC), UINT64_C(0x0335AC64B1B06D35),
- UINT64_C(0x030C33E87E4697D9), UINT64_C(0x02A8B6DA5FD2C060),
- UINT64_C(0x00A7681837DA7123), UINT64_C(0x034383051138278A),
- UINT64_C(0x0100BA5CB675B5C3) } },
- { { UINT64_C(0x007A90498A37CD61), UINT64_C(0x00C21A3950646D6E),
- UINT64_C(0x00E24CC900B23BA5), UINT64_C(0x00177482F428680B),
- UINT64_C(0x008C265BAA81CF89), UINT64_C(0x035D3B4D224FFF8E),
- UINT64_C(0x036D6B85A5B0977B), UINT64_C(0x00D1075A6C1311DD),
- UINT64_C(0x01CE20C3E0DE4C26) },
- { UINT64_C(0x03983305308A7408), UINT64_C(0x034CC1C79BB9BDAE),
- UINT64_C(0x02079940C900D507), UINT64_C(0x011184B7705AB688),
- UINT64_C(0x00BE018DECC7C858), UINT64_C(0x00059833EA10EFD5),
- UINT64_C(0x03D3C58726A0CFF9), UINT64_C(0x03FAC56BC268E09A),
- UINT64_C(0x00AF6C171D653277) } },
- { { UINT64_C(0x01151276D19DDB66), UINT64_C(0x00BE849EE9A2D3A8),
- UINT64_C(0x02C6A7580CC1CD5D), UINT64_C(0x03AE7FCF32E2402D),
- UINT64_C(0x0077F3388646E57B), UINT64_C(0x0321275FFC38AED4),
- UINT64_C(0x035220194FAC16E6), UINT64_C(0x00AC60DD1664CBF4),
- UINT64_C(0x005C9F4FAEB1E475) },
- { UINT64_C(0x03454E2FDA228C02), UINT64_C(0x03CE54CE918B9E80),
- UINT64_C(0x01E6700CB1251E2C), UINT64_C(0x004D9EF2E269258E),
- UINT64_C(0x0271A9DFD10397F8), UINT64_C(0x01D68E1301C08065),
- UINT64_C(0x0255D3F4888FC07C), UINT64_C(0x01EA14C32D6DB6C1),
- UINT64_C(0x00641A5E7FF0CED4) } },
- { { UINT64_C(0x03D2DB7494E80EB1), UINT64_C(0x03429AAC7DF50EDF),
- UINT64_C(0x0193B4233D776372), UINT64_C(0x00FA6676BCB0445B),
- UINT64_C(0x00962AF93FA06ADE), UINT64_C(0x00ED262149C44EC5),
- UINT64_C(0x00DD0F0802C2CD3B), UINT64_C(0x0349A7F09C0CD9BA),
- UINT64_C(0x019BCEE240624924) },
- { UINT64_C(0x0301B8CB30F92986), UINT64_C(0x02FBD5618F84FCAA),
- UINT64_C(0x020844CC6DEA56EF), UINT64_C(0x0399AC423AE9922A),
- UINT64_C(0x0304B577679CF04F), UINT64_C(0x033A00D5B3E1E90B),
- UINT64_C(0x02E0EA5DF7501CB6), UINT64_C(0x01AEEBA7909CF3AB),
- UINT64_C(0x00D1F739C1192316) } },
- { { UINT64_C(0x03FBED19829AE558), UINT64_C(0x018A508538E70057),
- UINT64_C(0x00CB16FE844A9E7C), UINT64_C(0x02A5D97534D7DBBC),
- UINT64_C(0x005769E43FDAB701), UINT64_C(0x02371B260F0C6E67),
- UINT64_C(0x0088CED91D562ACB), UINT64_C(0x03FF0E5F0D26F719),
- UINT64_C(0x009911094F5E4AA4) },
- { UINT64_C(0x014DA634DAAD22D1), UINT64_C(0x0126CD74DB263614),
- UINT64_C(0x00B20F1368A80FE1), UINT64_C(0x01C40150F01BDEEF),
- UINT64_C(0x036B7B115D665EA4), UINT64_C(0x00E64D810EAB1790),
- UINT64_C(0x037432C58B6DDE4A), UINT64_C(0x02689716E469337C),
- UINT64_C(0x009023B703EED1A4) } },
- { { UINT64_C(0x0168DF986EB8B398), UINT64_C(0x0373053537795BF1),
- UINT64_C(0x018911988685F26D), UINT64_C(0x0387383FA6C93770),
- UINT64_C(0x019704736EAD528F), UINT64_C(0x0271A2FD2A7AB31F),
- UINT64_C(0x016F759D385DF60B), UINT64_C(0x00588A673CE9E385),
- UINT64_C(0x00F00D2C74D140B1) },
- { UINT64_C(0x037761186D05FF6A), UINT64_C(0x021D5810D7AE7578),
- UINT64_C(0x032F7D951B6FE596), UINT64_C(0x00F101711823BB39),
- UINT64_C(0x028DE92770998580), UINT64_C(0x037C0C99F0D97BF8),
- UINT64_C(0x030EB60AA7504E10), UINT64_C(0x038624C9A9EBB17E),
- UINT64_C(0x0117D8E0506A5993) } },
- { { UINT64_C(0x02D315A154D9F1F8), UINT64_C(0x00A34DBD30332164),
- UINT64_C(0x0306F497C34DB615), UINT64_C(0x03599315A4DB339F),
- UINT64_C(0x007E9E0F8E2399AC), UINT64_C(0x003A93148F4FA95A),
- UINT64_C(0x011F62B5F0DC45EF), UINT64_C(0x02C2CA027E1C8CCA),
- UINT64_C(0x017EDB2AB60DCF2F) },
- { UINT64_C(0x03D0BE47BDAF0C41), UINT64_C(0x0261770EA9BAF337),
- UINT64_C(0x00123C9A8D5C885C), UINT64_C(0x02304942CA223A54),
- UINT64_C(0x027514FEE2CC680A), UINT64_C(0x02845D9CADE7E084),
- UINT64_C(0x037BF3E603649E24), UINT64_C(0x00221D7FD1EC9BB3),
- UINT64_C(0x019ABE2E017E3282) } },
- { { UINT64_C(0x022C310986DBC74A), UINT64_C(0x016910C9D8D292FA),
- UINT64_C(0x0168FBA7C0C784B2), UINT64_C(0x02F0C2E785D2A006),
- UINT64_C(0x01AE45ADAA754923), UINT64_C(0x0340D3039A77094C),
- UINT64_C(0x028C800560A74DE4), UINT64_C(0x0209DAB7CF99A92A),
- UINT64_C(0x01A7AE95C3D65A81) },
- { UINT64_C(0x03D0EF28C4FA3D53), UINT64_C(0x01C7BD38B1347859),
- UINT64_C(0x0005A7461F21783E), UINT64_C(0x01367207E2FE3122),
- UINT64_C(0x033746BBB79E2E44), UINT64_C(0x0279FE17A5803572),
- UINT64_C(0x03015592FFEC7617), UINT64_C(0x02742174C25F4D16),
- UINT64_C(0x00E410A0B89682D7) } },
- { { UINT64_C(0x02B22FBEE727DDB2), UINT64_C(0x024FD40DFE0DC5F9),
- UINT64_C(0x015C3DCCFE2E8278), UINT64_C(0x029992449755EB6E),
- UINT64_C(0x03FD36B4574277E1), UINT64_C(0x02D49C964F2299EE),
- UINT64_C(0x021CD67B9805D246), UINT64_C(0x0157D17DBA6DBB8F),
- UINT64_C(0x014315532B63B009) },
- { UINT64_C(0x0192F41C11B068CF), UINT64_C(0x013ADE386B9A6252),
- UINT64_C(0x0023510A4F9C5B28), UINT64_C(0x027BD3DC9B9B0039),
- UINT64_C(0x02377F19B4B907D4), UINT64_C(0x0292B925A6106638),
- UINT64_C(0x01058CF22E01616A), UINT64_C(0x017799C00E576B04),
- UINT64_C(0x00A289A954F56291) } },
- },
- {
- { { UINT64_C(0x00C4AC143FFE4858), UINT64_C(0x0306D22EAAC4A5AD),
- UINT64_C(0x01F0A5791E3783D9), UINT64_C(0x03A0A974CB2ACA2D),
- UINT64_C(0x02E76FB3F03AA34D), UINT64_C(0x0217400AE3A40C22),
- UINT64_C(0x0040CD3B74A7ED3C), UINT64_C(0x00FCB122891AAD96),
- UINT64_C(0x01B8C8494718771D) },
- { UINT64_C(0x03F57D14A28DA023), UINT64_C(0x022E364741E3E46C),
- UINT64_C(0x01A7ABA67F27FDBC), UINT64_C(0x030FF1837DC3E97D),
- UINT64_C(0x00618486CF4908AD), UINT64_C(0x02CF161553F374F8),
- UINT64_C(0x019DD012E725571E), UINT64_C(0x033EDF6BF47BD717),
- UINT64_C(0x0125806554EE19B9) } },
- { { UINT64_C(0x018E9A7BA994A7B1), UINT64_C(0x02AC0D7BEC6A8983),
- UINT64_C(0x03D38D705E07CD01), UINT64_C(0x005566DD3C426505),
- UINT64_C(0x0067EB2AB8C5C6E4), UINT64_C(0x02833D0E2656CD6B),
- UINT64_C(0x01DDCA9C78AA1909), UINT64_C(0x00EDF1FB3DAA7F12),
- UINT64_C(0x0166F72F3DE51C63) },
- { UINT64_C(0x02B78FAEB96F6D73), UINT64_C(0x02052F35A5545293),
- UINT64_C(0x005CD62AD9BF553E), UINT64_C(0x00B728FA50CC968E),
- UINT64_C(0x019295FA16301250), UINT64_C(0x0287D8B59A13D480),
- UINT64_C(0x0316813DDF4A21F3), UINT64_C(0x01769E5723184C7C),
- UINT64_C(0x0066E0E7009AE7B5) } },
- { { UINT64_C(0x021F2EE46CDE12CD), UINT64_C(0x003D0000412CCD1F),
- UINT64_C(0x02C67E761CB63537), UINT64_C(0x02C1A38D4F403A59),
- UINT64_C(0x03B812F8D1F26B87), UINT64_C(0x029994AD5ACE97AC),
- UINT64_C(0x026C55C785488093), UINT64_C(0x01869CEF172A91D6),
- UINT64_C(0x01661593B4702F1D) },
- { UINT64_C(0x0197935A2366B021), UINT64_C(0x01C8C53ECC9EEE7B),
- UINT64_C(0x02C636CFB825AB8B), UINT64_C(0x02EEC0E46E96B427),
- UINT64_C(0x00525F145382F270), UINT64_C(0x0133F597DCA61576),
- UINT64_C(0x0237ACF913367D38), UINT64_C(0x02C6B96EB5398F41),
- UINT64_C(0x0088A6A556F6EF14) } },
- { { UINT64_C(0x03AE1C8DCCD34315), UINT64_C(0x0157B6DF5CCF4DF6),
- UINT64_C(0x02191AB191DCA071), UINT64_C(0x01897CF46F10173C),
- UINT64_C(0x02767320BD61533A), UINT64_C(0x01A9DAB7019D6315),
- UINT64_C(0x01911BB32715F1BB), UINT64_C(0x001C7F74F8A656CA),
- UINT64_C(0x0009C70F08ACB68E) },
- { UINT64_C(0x0072A1ED9356A25A), UINT64_C(0x01556970A7D5EEF6),
- UINT64_C(0x0350BEDB0F71D649), UINT64_C(0x03EA3565DDFF826F),
- UINT64_C(0x013B29E08B1AF8F4), UINT64_C(0x0331B92ACB74C5CA),
- UINT64_C(0x03A4E6E26F5AAC1D), UINT64_C(0x036F06A79D110118),
- UINT64_C(0x00631FDFA318D2BC) } },
- { { UINT64_C(0x035871450EAD4FF9), UINT64_C(0x0045783A9CFF37E4),
- UINT64_C(0x03713AE92AC33512), UINT64_C(0x009A3896CE34EF6D),
- UINT64_C(0x03A8EE82555DC9D1), UINT64_C(0x002C620829E4335D),
- UINT64_C(0x0375E016D1AE1B50), UINT64_C(0x016D891B140E00CD),
- UINT64_C(0x00097FE78FE880E9) },
- { UINT64_C(0x01A323FFCB8B195A), UINT64_C(0x014E7DA6CA0AAFF4),
- UINT64_C(0x00C88E8E6528DDB5), UINT64_C(0x01A720372EE878E6),
- UINT64_C(0x015A2426F3EF9BB8), UINT64_C(0x01604A559CF4A620),
- UINT64_C(0x02C8F10B967488E1), UINT64_C(0x028191262B209448),
- UINT64_C(0x019E5661C083C48E) } },
- { { UINT64_C(0x01D1ED07D6920A2A), UINT64_C(0x03909AA105A814DB),
- UINT64_C(0x029B1BBB7F2ECAC2), UINT64_C(0x03BB4096CC1FBE27),
- UINT64_C(0x0382CAD68C150CCC), UINT64_C(0x00F1CBB480EE5E69),
- UINT64_C(0x03933B382F4CE45C), UINT64_C(0x0283D1969E6EC1D6),
- UINT64_C(0x008C6BE4F8FBF5F9) },
- { UINT64_C(0x00C2A30AF1CA3CCC), UINT64_C(0x02FF4D4359C3CABE),
- UINT64_C(0x020AA78B337657B0), UINT64_C(0x01C5C613D10C423A),
- UINT64_C(0x003249BB2418CB6D), UINT64_C(0x00CAB4378A53687C),
- UINT64_C(0x0147E31B6118850C), UINT64_C(0x02D08DC29C2D596C),
- UINT64_C(0x00409A1F9C9C0372) } },
- { { UINT64_C(0x03985FC5DEB5DCD3), UINT64_C(0x02328F30C46302C2),
- UINT64_C(0x00260388D4747802), UINT64_C(0x03BFBB0240E60F52),
- UINT64_C(0x03B209042D288213), UINT64_C(0x00F7BBEE239C04F6),
- UINT64_C(0x039A7EE4CF9007B4), UINT64_C(0x01BFEC97A07FF7ED),
- UINT64_C(0x00F46BA7F4461BE4) },
- { UINT64_C(0x02FF04BE53B68E6C), UINT64_C(0x01CA69133AC1C9A1),
- UINT64_C(0x001C0711D4BE94AE), UINT64_C(0x02E7507B45945E53),
- UINT64_C(0x011B7A5F7EC81DBE), UINT64_C(0x0329BFC6DA7CDB63),
- UINT64_C(0x01FCD3B287A0A497), UINT64_C(0x01F250F924D3B826),
- UINT64_C(0x0174EABAF5F90BA0) } },
- { { UINT64_C(0x0288B8614B07B1BF), UINT64_C(0x00AE0C951E1C4290),
- UINT64_C(0x01FC49AB7CD0CA2F), UINT64_C(0x0139ED7FA367ECE7),
- UINT64_C(0x007ACFF8F0933B14), UINT64_C(0x01BE527A6CE02D5F),
- UINT64_C(0x03F3D3A06B11DFFE), UINT64_C(0x021959D14B1DF4BB),
- UINT64_C(0x01BC6741AD8DA8F8) },
- { UINT64_C(0x034CD028C42166D8), UINT64_C(0x0185807E32738495),
- UINT64_C(0x005883F1CCD9FD2E), UINT64_C(0x03CA0BFCEE08ED5A),
- UINT64_C(0x03EAF8CDFF12C8BC), UINT64_C(0x039F9E6871AF8AEE),
- UINT64_C(0x0109893E423B3304), UINT64_C(0x0120DC6E783F51AB),
- UINT64_C(0x011A855D5413AED9) } },
- { { UINT64_C(0x03EC078648AA3834), UINT64_C(0x022666BDFBC08928),
- UINT64_C(0x020CD318C559ED79), UINT64_C(0x031A1F3F1113AB91),
- UINT64_C(0x0225DA57498B9B85), UINT64_C(0x00501D2B9387A084),
- UINT64_C(0x01462ED6150B49FB), UINT64_C(0x0270A359C4EB430D),
- UINT64_C(0x01AD03ACD7F1F2DA) },
- { UINT64_C(0x00577220553E08C6), UINT64_C(0x02711DCC2A6176C2),
- UINT64_C(0x00D41E0F942DF9B3), UINT64_C(0x032019849BF44B40),
- UINT64_C(0x006F6F65E6AF51C1), UINT64_C(0x02192F8FD6395745),
- UINT64_C(0x0369C64E6D49408A), UINT64_C(0x01C1CA82AADBB384),
- UINT64_C(0x00252180D9240A33) } },
- { { UINT64_C(0x03B36603F69B34EA), UINT64_C(0x023601EA98DB7FF6),
- UINT64_C(0x0119384D5B4D0084), UINT64_C(0x009CB1557E1A2117),
- UINT64_C(0x0120F29FC187E5AB), UINT64_C(0x020795FEFEF91AF3),
- UINT64_C(0x01654BD2C20FF213), UINT64_C(0x0193B09B2AFFB3A3),
- UINT64_C(0x01F2DBD41C09A92B) },
- { UINT64_C(0x0190B8EB79047156), UINT64_C(0x002863629F98DF90),
- UINT64_C(0x0131D825BFCD5C94), UINT64_C(0x012459BCEEE81461),
- UINT64_C(0x012AEB328B250B06), UINT64_C(0x031E1C2DAC09694B),
- UINT64_C(0x000530A4AD5276F9), UINT64_C(0x02B3D1F18BB7C853),
- UINT64_C(0x01E8BD2FCCA04F6F) } },
- { { UINT64_C(0x02834F110665B1CF), UINT64_C(0x017AA90109CDC18A),
- UINT64_C(0x009242A3E1F2E720), UINT64_C(0x02D5A60BD5F8954E),
- UINT64_C(0x03508324EB838D5B), UINT64_C(0x02EDD0C3ED33B190),
- UINT64_C(0x00AAD5DC3A119996), UINT64_C(0x01CD04A457847144),
- UINT64_C(0x008F9F585EE51416) },
- { UINT64_C(0x0353544CA94CC511), UINT64_C(0x03C458B74ECFBB85),
- UINT64_C(0x00DFB34B9CF940F6), UINT64_C(0x025DDCAA8FA2C670),
- UINT64_C(0x005DE224A75FEDB1), UINT64_C(0x0133692E8F60712D),
- UINT64_C(0x0273753106CAA7BE), UINT64_C(0x01408D58EA2D6196),
- UINT64_C(0x00E26553508F8448) } },
- { { UINT64_C(0x01A3A4F60BB13D25), UINT64_C(0x0023ED9ED8B71298),
- UINT64_C(0x03FFC9A520FCC5AA), UINT64_C(0x0045A041830B9268),
- UINT64_C(0x00CC9DB2983FF213), UINT64_C(0x0121E74580D3BD97),
- UINT64_C(0x03180DFFF5302191), UINT64_C(0x017F708B61C069C2),
- UINT64_C(0x00AFC5190BADFB44) },
- { UINT64_C(0x0059EAFDA4B66F01), UINT64_C(0x007705DA965D6F67),
- UINT64_C(0x020B87871134FA29), UINT64_C(0x01AD088735B31B4F),
- UINT64_C(0x018012C061713383), UINT64_C(0x0284C3C51E97DE38),
- UINT64_C(0x011439AE9AC5E3B5), UINT64_C(0x0201A73CE2ADC421),
- UINT64_C(0x013663825C862321) } },
- { { UINT64_C(0x018D68C0B140A004), UINT64_C(0x01BFAA6599011216),
- UINT64_C(0x01E7950576D7B0B1), UINT64_C(0x0078B24B131D0E5F),
- UINT64_C(0x02AD5C3FFEDF02C1), UINT64_C(0x0322CFD3147C6177),
- UINT64_C(0x038BD27915C61C9C), UINT64_C(0x02F37687B9498DE9),
- UINT64_C(0x00EBB6AC6E166ECF) },
- { UINT64_C(0x01DE078E81F8F797), UINT64_C(0x036F3FD0C148612A),
- UINT64_C(0x00D42800CEE62CC8), UINT64_C(0x02EF08C94C9988E1),
- UINT64_C(0x02A200E24C7221CE), UINT64_C(0x0087BB91FBA9446C),
- UINT64_C(0x01AEF9F64351AA5D), UINT64_C(0x0379F61D1F515F5C),
- UINT64_C(0x01D6BBEA838FBDE0) } },
- { { UINT64_C(0x029C5257AC98DFAE), UINT64_C(0x033122DA34CA0C86),
- UINT64_C(0x02E5AEB04EB596D8), UINT64_C(0x01866E31FF449E97),
- UINT64_C(0x01EFC618512D868E), UINT64_C(0x02AB8DD8A2E422DD),
- UINT64_C(0x0315FBBF0AB5F678), UINT64_C(0x029B64EE769245C7),
- UINT64_C(0x006C6C12185D61E3) },
- { UINT64_C(0x008781A5F0C92FB5), UINT64_C(0x02186CDBC76A7DC2),
- UINT64_C(0x02BF30F2AE35EBF2), UINT64_C(0x02A9033768598F59),
- UINT64_C(0x026D8F763CE2DDB2), UINT64_C(0x000096A41DC06247),
- UINT64_C(0x0378DBDD308791A2), UINT64_C(0x0303B0E7D471E5F3),
- UINT64_C(0x0047B4CFEAEEA101) } },
- { { UINT64_C(0x03329136A629DD22), UINT64_C(0x00E5BE3AD1E98750),
- UINT64_C(0x00E718574118A518), UINT64_C(0x0001BFD334A31B85),
- UINT64_C(0x010ACC7BD56131AD), UINT64_C(0x01BAE8680FF31AF2),
- UINT64_C(0x033BF365D3656538), UINT64_C(0x01275681F6A3E780),
- UINT64_C(0x01D9134C0EBA1F9E) },
- { UINT64_C(0x03FC0784F75200EB), UINT64_C(0x02505880E37CB45D),
- UINT64_C(0x02D012B6F4AEDF75), UINT64_C(0x0239FE68EEDA06B2),
- UINT64_C(0x0214FD97D35A83E1), UINT64_C(0x0161FD60913389DA),
- UINT64_C(0x02E06AA08A955A74), UINT64_C(0x00A478BB3A540872),
- UINT64_C(0x0194213360ACA782) } },
- { { UINT64_C(0x01C7D837402145D7), UINT64_C(0x029A3987EA8CF574),
- UINT64_C(0x017B7322E3920EED), UINT64_C(0x01DA90CCE8A07229),
- UINT64_C(0x019966632762CF1A), UINT64_C(0x02EA82E975BFDBB2),
- UINT64_C(0x00D089776CD7C2DA), UINT64_C(0x01094FFA3D38BAB2),
- UINT64_C(0x00ED9425E7C61A8F) },
- { UINT64_C(0x030890ADFDDB406F), UINT64_C(0x02F38194427778C1),
- UINT64_C(0x02645A577E29DB0B), UINT64_C(0x02B73BB5A04F839F),
- UINT64_C(0x02CBE569872B94D6), UINT64_C(0x034D3051E8314100),
- UINT64_C(0x0228FAA39358328C), UINT64_C(0x00F6B458D19C41F5),
- UINT64_C(0x01B60D6BFFF120A1) } },
- },
- {
- { { UINT64_C(0x03B0D91DCEF34144), UINT64_C(0x0240FE90ACAA2EEA),
- UINT64_C(0x02F5638E4C5FABC5), UINT64_C(0x0279B56C13AF89E7),
- UINT64_C(0x007BB923CEB3416E), UINT64_C(0x024528E9111E0646),
- UINT64_C(0x0019F3658FEFA212), UINT64_C(0x007942C115ACBB8B),
- UINT64_C(0x00B3176361BBE92C) },
- { UINT64_C(0x0056A1AF824FDE34), UINT64_C(0x03EFECC262943F2F),
- UINT64_C(0x00F55AB9CFA7333B), UINT64_C(0x02E423937E89B9C8),
- UINT64_C(0x0177865B2FF1E104), UINT64_C(0x00D9D0346E5AE2AF),
- UINT64_C(0x0250F4369EB257AA), UINT64_C(0x02479F5CEE51B49A),
- UINT64_C(0x007A588E4A1470CD) } },
- { { UINT64_C(0x006FD0B27FF5FDD9), UINT64_C(0x0315207EADCA6EB7),
- UINT64_C(0x038531FDE9E82663), UINT64_C(0x03E9C7DA1307DC24),
- UINT64_C(0x007FCF66FC293D27), UINT64_C(0x0073411170172CF4),
- UINT64_C(0x03FA0B1709D86BA1), UINT64_C(0x0023FC735B565525),
- UINT64_C(0x00C65EABD8A0D474) },
- { UINT64_C(0x001EA477B6B64713), UINT64_C(0x03CAD4127E803700),
- UINT64_C(0x02F97EFCE2EC6148), UINT64_C(0x021B881732700041),
- UINT64_C(0x01A6D874ACACA115), UINT64_C(0x00A7CA705835C220),
- UINT64_C(0x01191B137DD5C14D), UINT64_C(0x02CB4161AB1B2384),
- UINT64_C(0x01EA96470F229677) } },
- { { UINT64_C(0x016F41AA44BE78BD), UINT64_C(0x00DBC87805312BB8),
- UINT64_C(0x0318156EA17D7B54), UINT64_C(0x026CDF0148DE5C45),
- UINT64_C(0x03F974EA0D77EB08), UINT64_C(0x02136BB03794FF4E),
- UINT64_C(0x01B53A227C4C2E9C), UINT64_C(0x02B0229F1C11498E),
- UINT64_C(0x01CDAB34CEF9122C) },
- { UINT64_C(0x01942B2B520FED74), UINT64_C(0x0278BB0606178C91),
- UINT64_C(0x03C70799A5848E33), UINT64_C(0x01024AF0188FBCA7),
- UINT64_C(0x017502FD5E81CD21), UINT64_C(0x0341AC8FD5BE6E9F),
- UINT64_C(0x03807308C0C55507), UINT64_C(0x02DA9120D7D39BD9),
- UINT64_C(0x0078E0C0ADC9F3B8) } },
- { { UINT64_C(0x0249E4056736B7A8), UINT64_C(0x000AD5FD0E326A32),
- UINT64_C(0x00F1D8DD5BD49BAE), UINT64_C(0x03C65D240FD61C7B),
- UINT64_C(0x0348AA1A2246B05E), UINT64_C(0x03D6D10E55244A30),
- UINT64_C(0x02E9906E8F8D085E), UINT64_C(0x0187FD8BEFA8BFBF),
- UINT64_C(0x00F8ECD06F55C492) },
- { UINT64_C(0x003A56FE1DEF19D6), UINT64_C(0x0197C74F933E6798),
- UINT64_C(0x005694559A51C48D), UINT64_C(0x028423114901AE4B),
- UINT64_C(0x006C134B2FD133CC), UINT64_C(0x01F5B1FDE595A9F1),
- UINT64_C(0x037CDF87E407C290), UINT64_C(0x01C9430D19026B6E),
- UINT64_C(0x00AE4EBC0B91EEC4) } },
- { { UINT64_C(0x0027F5A2CFACC519), UINT64_C(0x0007D8CA3F95188A),
- UINT64_C(0x02386E76D1ED1FA2), UINT64_C(0x012CFC615ECB44AE),
- UINT64_C(0x02BAC8E16C4EECC0), UINT64_C(0x030FC8B6EACB48A4),
- UINT64_C(0x0356F1C94FF8F3DD), UINT64_C(0x00E7898C9228D80E),
- UINT64_C(0x0100391DE5D28C45) },
- { UINT64_C(0x00DDA167BAEA3E6E), UINT64_C(0x024E9B6238591A96),
- UINT64_C(0x000B124B20D76C9C), UINT64_C(0x00844E80DAD85B15),
- UINT64_C(0x006322B9CC9CFBC9), UINT64_C(0x03C3F3E68B0EC1FB),
- UINT64_C(0x0198C8988C8CDF43), UINT64_C(0x012F63F58B2E6769),
- UINT64_C(0x0146D6A4BBF8FA16) } },
- { { UINT64_C(0x025929A379C36058), UINT64_C(0x03AA8D69D0F228FC),
- UINT64_C(0x03137C58503106D0), UINT64_C(0x031D3407BEC09250),
- UINT64_C(0x012A5E9F3CB78FCD), UINT64_C(0x03C89A97F7DE8B2F),
- UINT64_C(0x03FFA336D8C2CB9D), UINT64_C(0x03CDFCCBE0B2ABB7),
- UINT64_C(0x018DB520A44381C3) },
- { UINT64_C(0x037F91B7E71EFA02), UINT64_C(0x02CD2A4F8F2A0051),
- UINT64_C(0x03247FBAA82739BD), UINT64_C(0x004F7652DC5CA6F6),
- UINT64_C(0x0247D54BFA1094B5), UINT64_C(0x01201F41A5F24EA8),
- UINT64_C(0x036AE048899075C8), UINT64_C(0x008DE5B2C2092D5F),
- UINT64_C(0x01A05D1DEF90E6C9) } },
- { { UINT64_C(0x009C63F00DDEF055), UINT64_C(0x029E867514AE17BD),
- UINT64_C(0x0071477B7FA6548A), UINT64_C(0x01DCF23B30CCB894),
- UINT64_C(0x039F3EAF10214846), UINT64_C(0x0131314742EE42E6),
- UINT64_C(0x025A42537B162041), UINT64_C(0x0344D321CAEDE286),
- UINT64_C(0x00C49346566A2F80) },
- { UINT64_C(0x00AC1057A1A2F1BD), UINT64_C(0x01B16F3F4CF6D85A),
- UINT64_C(0x00470A35FA26D12C), UINT64_C(0x02FDF7EC571664A6),
- UINT64_C(0x00357DE22954AF5D), UINT64_C(0x01CB9B6C3295D89E),
- UINT64_C(0x02A6D5E003D32198), UINT64_C(0x02BCFEFCD08395C8),
- UINT64_C(0x0024E3256C9EC29E) } },
- { { UINT64_C(0x02E3E3726899A80A), UINT64_C(0x0026F9277D12E5D8),
- UINT64_C(0x03A9F147B7CC784D), UINT64_C(0x02D1E1BE2785B816),
- UINT64_C(0x035FD35148DBC7EB), UINT64_C(0x008735EF566F4D0B),
- UINT64_C(0x023A56774FF10ABF), UINT64_C(0x02650BA6B7B26925),
- UINT64_C(0x016ADF49024BBCF1) },
- { UINT64_C(0x003AD342E4E67976), UINT64_C(0x03C92192D00DAB16),
- UINT64_C(0x020460FDED50A384), UINT64_C(0x034C8C7A7CCCB477),
- UINT64_C(0x026F1F63625979C2), UINT64_C(0x01C81B4E10D5FC66),
- UINT64_C(0x036A3D003DC0490C), UINT64_C(0x012B902A026C1347),
- UINT64_C(0x01F7B86A36390DAD) } },
- { { UINT64_C(0x000691E2EC112CB8), UINT64_C(0x024EF99D143B7D60),
- UINT64_C(0x0115A42EEFCFA47F), UINT64_C(0x01E802D725D2BBE5),
- UINT64_C(0x0121B37EFA442937), UINT64_C(0x0017BB506D32E10E),
- UINT64_C(0x026AAA87600CCD57), UINT64_C(0x016CF4C8E0A70FF4),
- UINT64_C(0x009FFBF163AE94B4) },
- { UINT64_C(0x0295886926814D18), UINT64_C(0x03A0FBF4C1A9E1DB),
- UINT64_C(0x03C42214E510B980), UINT64_C(0x01795048E2D2FBCB),
- UINT64_C(0x007E6ECA8AF45230), UINT64_C(0x03B7348F6C6F8B62),
- UINT64_C(0x0082EEE297D2810F), UINT64_C(0x001262A01DEC143A),
- UINT64_C(0x01B9903A2D05B891) } },
- { { UINT64_C(0x023634A86BE77EA4), UINT64_C(0x00A0B41ED63F1BFE),
- UINT64_C(0x0275C4824374C264), UINT64_C(0x02608A7A328E460A),
- UINT64_C(0x00FED89AAE8DD2B7), UINT64_C(0x02109029EF3CE021),
- UINT64_C(0x011969F67E04BEBE), UINT64_C(0x01A57DE74BB6D7CF),
- UINT64_C(0x0032260FF5FAEF2A) },
- { UINT64_C(0x02058C1764B8EB93), UINT64_C(0x034A7BEAEE142796),
- UINT64_C(0x01C4178E14455ABA), UINT64_C(0x0089C0C3FD3F4E75),
- UINT64_C(0x006C6AD7C0E981DA), UINT64_C(0x0228FCA3E86007B0),
- UINT64_C(0x025CE2ECCA48B8F4), UINT64_C(0x01E5A636E10EA6E7),
- UINT64_C(0x00B998D460C196E1) } },
- { { UINT64_C(0x0160926185730C8D), UINT64_C(0x032DE7C19EF3EB5F),
- UINT64_C(0x01B89DB78DA4AF19), UINT64_C(0x03E8BF1A8A7D683F),
- UINT64_C(0x00C74484F132486E), UINT64_C(0x0020C78A33777ADF),
- UINT64_C(0x028B418FCCA39E1E), UINT64_C(0x03C6B30F7BDFA864),
- UINT64_C(0x012E1D3651FF3815) },
- { UINT64_C(0x023FC40DA01A8D36), UINT64_C(0x0396DC8A8E0AC356),
- UINT64_C(0x0257ECBA277518BE), UINT64_C(0x015E0BE8CDCF0B5F),
- UINT64_C(0x017CA95C0BC967EE), UINT64_C(0x0305AA19591EC746),
- UINT64_C(0x00ECEE9B1C5E531F), UINT64_C(0x017F62DDF7CD8C93),
- UINT64_C(0x01843F3A5D58D681) } },
- { { UINT64_C(0x008235BF1CE87EAC), UINT64_C(0x0337B13BA7D5C15E),
- UINT64_C(0x03846B02056DE241), UINT64_C(0x033C6CAEB5DEAB90),
- UINT64_C(0x030248638020D787), UINT64_C(0x0224F8D01B9221DD),
- UINT64_C(0x01F402C62FF58E8A), UINT64_C(0x03AAD9850E5506F5),
- UINT64_C(0x003902A9875C05FB) },
- { UINT64_C(0x0020DA18AA01F6F0), UINT64_C(0x030A6715F4E78D18),
- UINT64_C(0x037807033B777232), UINT64_C(0x01B7606FD787D415),
- UINT64_C(0x008A9CC327698B87), UINT64_C(0x0061BCA066C82FF1),
- UINT64_C(0x01BFA28EB25A2709), UINT64_C(0x024D6272DC7593CB),
- UINT64_C(0x00EC0BB76A281871) } },
- { { UINT64_C(0x032999435C8AA41D), UINT64_C(0x01A489157A228E17),
- UINT64_C(0x0156F793B6B0E956), UINT64_C(0x028D96D92EBD33D6),
- UINT64_C(0x0359740492EFE167), UINT64_C(0x015A71262E572E91),
- UINT64_C(0x01FA4485B8FC6399), UINT64_C(0x0347A0956647A542),
- UINT64_C(0x010E38E5A425F12F) },
- { UINT64_C(0x00AEFDFC244C41BB), UINT64_C(0x003952945BE8B3B5),
- UINT64_C(0x0319FE9C6BCFD1F0), UINT64_C(0x03F504A658EDEE0B),
- UINT64_C(0x02ED873A43F5A1E1), UINT64_C(0x02712F6EE0434187),
- UINT64_C(0x03F8F26F084CADB4), UINT64_C(0x0037A2587E5D9BC4),
- UINT64_C(0x007E3E8815CB75BB) } },
- { { UINT64_C(0x00D0B08F2FB80E07), UINT64_C(0x001F1C3F02C8AA99),
- UINT64_C(0x02C965AB70A7B621), UINT64_C(0x02934839B849A6F8),
- UINT64_C(0x003F88BA718D98ED), UINT64_C(0x02899A10EC155762),
- UINT64_C(0x0019825E2EA0BBFE), UINT64_C(0x031BADAF50BB1556),
- UINT64_C(0x00C2052564BF2D01) },
- { UINT64_C(0x02BBD600B64986F4), UINT64_C(0x0001308CBE96F1C1),
- UINT64_C(0x00C849F303B9F9E3), UINT64_C(0x02D14076FC63D1DE),
- UINT64_C(0x0236169D2D35EA78), UINT64_C(0x0264B3B8EE95BD05),
- UINT64_C(0x002F66E82F19619B), UINT64_C(0x0095E5BD3AAECF3F),
- UINT64_C(0x004DAC1BA614BE0C) } },
- { { UINT64_C(0x031F00ED67DF6D6E), UINT64_C(0x03D70047AC4E0BA7),
- UINT64_C(0x02D8711992AA1754), UINT64_C(0x036ECAEB89D30859),
- UINT64_C(0x0036A42A32CE3566), UINT64_C(0x01D98A9D0A6301E2),
- UINT64_C(0x0254343364F9506D), UINT64_C(0x00BA44E9D5246E7C),
- UINT64_C(0x01A19768E78BDB19) },
- { UINT64_C(0x01612B559D4C1CFE), UINT64_C(0x00FD06AC0FA53998),
- UINT64_C(0x01000FCBA8F910A9), UINT64_C(0x02941E6AFC5E6D3F),
- UINT64_C(0x00CAEFF18F01E2A7), UINT64_C(0x00C3611A9DC5189A),
- UINT64_C(0x004BD42C721A7B6E), UINT64_C(0x02CFCE0AB6DE8255),
- UINT64_C(0x0157E0604D9A6299) } },
- { { UINT64_C(0x004C36A17F3F00C1), UINT64_C(0x03AAE85897960B4C),
- UINT64_C(0x00162519D94A771E), UINT64_C(0x00EFA894195CFB14),
- UINT64_C(0x0377393E0BEA5785), UINT64_C(0x01275D68934C0C3C),
- UINT64_C(0x020E33D09CE0D489), UINT64_C(0x00636664BBECE0A2),
- UINT64_C(0x01D94E3BA2F10531) },
- { UINT64_C(0x00F1D932B72461C9), UINT64_C(0x030803CCCD33A980),
- UINT64_C(0x03D527D0F91F6DBE), UINT64_C(0x032A75271076B0B3),
- UINT64_C(0x00618C0762DDDF10), UINT64_C(0x0023381E1F452B93),
- UINT64_C(0x02E55888093553F9), UINT64_C(0x0179B91A78A3270C),
- UINT64_C(0x008109452184E2A2) } },
- },
- {
- { { UINT64_C(0x039BF352B2648196), UINT64_C(0x0255A7410BF9D82B),
- UINT64_C(0x00E69B9D9444400A), UINT64_C(0x0115B8CE4ADD0E15),
- UINT64_C(0x0286C0702CA01A26), UINT64_C(0x0343E585D0F62B8D),
- UINT64_C(0x0270AB3B658EDEED), UINT64_C(0x00BDF019DAC3BE2C),
- UINT64_C(0x01DA71CEBA8F0207) },
- { UINT64_C(0x031B398D4D9BC7BB), UINT64_C(0x000CF24C3929C7AB),
- UINT64_C(0x01B421C8D3FD5E6F), UINT64_C(0x007CC4196EE4E246),
- UINT64_C(0x020BD4BEA34DCA8A), UINT64_C(0x0290B50CAE9698DF),
- UINT64_C(0x00FCD1330F886EB9), UINT64_C(0x01E1AC79F03E8C00),
- UINT64_C(0x00DA9DFFAC1D7299) } },
- { { UINT64_C(0x023B6F4171DE62A2), UINT64_C(0x02483565211B08E1),
- UINT64_C(0x03590C48E9F4C557), UINT64_C(0x0300655D7CA7761E),
- UINT64_C(0x000FC94679705CC8), UINT64_C(0x03F1F51E4C554176),
- UINT64_C(0x02F4AA91C9B85DEC), UINT64_C(0x01830B06FDF1C0BD),
- UINT64_C(0x01705BC114A4818F) },
- { UINT64_C(0x026AF34683BFC242), UINT64_C(0x02704B0386A138E6),
- UINT64_C(0x0201A2D902335BC5), UINT64_C(0x00F97548337FE82F),
- UINT64_C(0x0068481E95BAAC46), UINT64_C(0x02198BC38D3244C8),
- UINT64_C(0x02FB3AE37E76F25B), UINT64_C(0x0051FD7A6C46B763),
- UINT64_C(0x00BB4F63544525E2) } },
- { { UINT64_C(0x0184463DCFE3927A), UINT64_C(0x038592C4A5446C69),
- UINT64_C(0x00820DA1FCA22B30), UINT64_C(0x01BE68F5BD638385),
- UINT64_C(0x01820BD08BDBAACC), UINT64_C(0x02A44306C3D5797E),
- UINT64_C(0x0038CCA1AA697778), UINT64_C(0x00C7C5B9FA5A6346),
- UINT64_C(0x00AF09862D4121FA) },
- { UINT64_C(0x01CB3F3FBEBC6638), UINT64_C(0x037E0A83514FED33),
- UINT64_C(0x03EACD5523409D6F), UINT64_C(0x020D6BA55D786340),
- UINT64_C(0x01CCC13F9ADFA032), UINT64_C(0x0019CA4869978150),
- UINT64_C(0x039E387EBA3B5F3E), UINT64_C(0x02E531E4CE95EAED),
- UINT64_C(0x019F9D4B6C1E271A) } },
- { { UINT64_C(0x03D9C637E6B4D0F2), UINT64_C(0x02F39727B4A2B4A9),
- UINT64_C(0x03B1C91C466BE1FF), UINT64_C(0x0002CA1D422DB470),
- UINT64_C(0x035959F6F8064E3B), UINT64_C(0x01A06409B64B70C1),
- UINT64_C(0x0138166589198416), UINT64_C(0x01E4D2E6E69DFBF6),
- UINT64_C(0x01235B6CCAD8ED3A) },
- { UINT64_C(0x036BC004511EBBDB), UINT64_C(0x03C77128404EB6AD),
- UINT64_C(0x02C7DBC63944D083), UINT64_C(0x00A0B83D92DC53A7),
- UINT64_C(0x0236B4A39AE88503), UINT64_C(0x03A8D6E5C0E1C279),
- UINT64_C(0x029FE38FA8BE1456), UINT64_C(0x03585B0A0A7CC668),
- UINT64_C(0x00A7641453F65799) } },
- { { UINT64_C(0x00158306BEA400A9), UINT64_C(0x007F40534A2A445F),
- UINT64_C(0x01C35C303D86F4A4), UINT64_C(0x00EDDE592FDFA8FD),
- UINT64_C(0x0103A9EFC14289AA), UINT64_C(0x03407BDDBE6E50BA),
- UINT64_C(0x009401AB57CFB13E), UINT64_C(0x0399C8A12EA5A5B1),
- UINT64_C(0x00FC6AFA631B2401) },
- { UINT64_C(0x03676F7FA3EA1F68), UINT64_C(0x0292D21900F132BA),
- UINT64_C(0x023C1FDE32777454), UINT64_C(0x016AD44E9E4A043B),
- UINT64_C(0x034CE0B6BF5A83B8), UINT64_C(0x007C5DBECEE12BCA),
- UINT64_C(0x034C6521C9D71204), UINT64_C(0x0295DA0F38E7DE8B),
- UINT64_C(0x0062381F9092A871) } },
- { { UINT64_C(0x021E20A63FBBA24C), UINT64_C(0x036388882DF52B55),
- UINT64_C(0x00530F2F7C7C2371), UINT64_C(0x03643DB108CC955E),
- UINT64_C(0x024B18165F1B6107), UINT64_C(0x02769559E8B8FA46),
- UINT64_C(0x00ABDA3964357585), UINT64_C(0x006A3DE26D6BDE65),
- UINT64_C(0x00FA0EF45FF0F7F0) },
- { UINT64_C(0x0328AF72F4ADEFE3), UINT64_C(0x00F209DB1F3C181A),
- UINT64_C(0x01A0AC16B36B8052), UINT64_C(0x03FE68F1AFEB358F),
- UINT64_C(0x011BB7B356C432BB), UINT64_C(0x03D087AF0D447953),
- UINT64_C(0x00088B00BECEF91E), UINT64_C(0x0330A2DA3B763B85),
- UINT64_C(0x01CC26379FF0902A) } },
- { { UINT64_C(0x02451A0F72841A85), UINT64_C(0x0354FC0056ED797F),
- UINT64_C(0x03F4EAB6EB12B346), UINT64_C(0x0032B842273C8FB8),
- UINT64_C(0x024B836D935DD874), UINT64_C(0x0090627CCD9E0492),
- UINT64_C(0x0244927C3C49DF5D), UINT64_C(0x0042534A4E5AA66E),
- UINT64_C(0x00B4C23CB62729C6) },
- { UINT64_C(0x00295DE15E7B0D82), UINT64_C(0x003481AED4B38216),
- UINT64_C(0x020CB574DA2A8CEB), UINT64_C(0x03DB292DC006EFC3),
- UINT64_C(0x03153DE3966C31DB), UINT64_C(0x0398C0D13BB538D2),
- UINT64_C(0x00D2735B5509DAE6), UINT64_C(0x00BBE1C7422AD656),
- UINT64_C(0x006495E2F55306CC) } },
- { { UINT64_C(0x00FC0E58752517BF), UINT64_C(0x0287DC3FE2714AA6),
- UINT64_C(0x024BBBD332D8AADB), UINT64_C(0x000BF6FA0D08504F),
- UINT64_C(0x02E724A624D71D7E), UINT64_C(0x01F16EF435B7F288),
- UINT64_C(0x024E6F71370923F3), UINT64_C(0x00C2B9525922566C),
- UINT64_C(0x005733338A43CFE0) },
- { UINT64_C(0x0372270A8BB6E5C0), UINT64_C(0x0023295E1C578E27),
- UINT64_C(0x01EA019B1BDD171A), UINT64_C(0x0243564F2EC5E9B6),
- UINT64_C(0x01283B58FFA9DAE7), UINT64_C(0x00215CCB462BFC41),
- UINT64_C(0x03E3900D562119A3), UINT64_C(0x0273C10EF622442D),
- UINT64_C(0x00D7B5F5A5718A0A) } },
- { { UINT64_C(0x03E792204254F3D7), UINT64_C(0x0197A7FB52460AD3),
- UINT64_C(0x0387DC97132E1376), UINT64_C(0x00D82DE34F7F5873),
- UINT64_C(0x03B853655C8CF8AC), UINT64_C(0x0173E013A8BD55E9),
- UINT64_C(0x008A7D4896369A87), UINT64_C(0x024DBCC16EA9BB3A),
- UINT64_C(0x010910C0CEC40352) },
- { UINT64_C(0x03B95A34F108C612), UINT64_C(0x0333E2F3D8672331),
- UINT64_C(0x028C77D48D5C235B), UINT64_C(0x0233CC3106C11962),
- UINT64_C(0x03EBBF90DDDA15FE), UINT64_C(0x0369066DD81ED647),
- UINT64_C(0x03BD05AA96CD4304), UINT64_C(0x039E3FFACDB3BA32),
- UINT64_C(0x01EAC4B260DDEC7F) } },
- { { UINT64_C(0x035858F23BBE227D), UINT64_C(0x00EAE5030697E923),
- UINT64_C(0x02368A87F3DE71C5), UINT64_C(0x0168E7B6DEE0F7C3),
- UINT64_C(0x00527543ED139D52), UINT64_C(0x0127219B1CDD187E),
- UINT64_C(0x023DB1516D99AC2E), UINT64_C(0x008101C88F395DB5),
- UINT64_C(0x00C6A87659F9030E) },
- { UINT64_C(0x039C69A3A7EC3A20), UINT64_C(0x02842173900384B8),
- UINT64_C(0x0136BA0852E2F7FE), UINT64_C(0x034921364764BE1F),
- UINT64_C(0x02C74764840F38B3), UINT64_C(0x02F37D32908AE4DC),
- UINT64_C(0x0138C24B162396AC), UINT64_C(0x02A70AD1A514245D),
- UINT64_C(0x00C442ABF244BFAF) } },
- { { UINT64_C(0x02A6B09F093E7BB1), UINT64_C(0x027395A268EC7AC7),
- UINT64_C(0x028CC643D554CA43), UINT64_C(0x0035243849E2C949),
- UINT64_C(0x03CF25745B571D36), UINT64_C(0x00F8968B891A06D4),
- UINT64_C(0x03F9158462DF4912), UINT64_C(0x0277B23F176B632C),
- UINT64_C(0x0100FDC9203FE38B) },
- { UINT64_C(0x024667E35C0213B3), UINT64_C(0x001C9D8E55C59D73),
- UINT64_C(0x03C67911C028CE7C), UINT64_C(0x01D6BE78640D4CA8),
- UINT64_C(0x024E359FD8B3F600), UINT64_C(0x03240449153262A6),
- UINT64_C(0x03B253E7A16A83A5), UINT64_C(0x02FDB9879C3019FF),
- UINT64_C(0x01D5771531A45180) } },
- { { UINT64_C(0x02FFF1EEAD72BA02), UINT64_C(0x01773B2AD40CD7B5),
- UINT64_C(0x00B549067C93A24B), UINT64_C(0x0040E568D769A5B9),
- UINT64_C(0x01CBA8C547CFD559), UINT64_C(0x01B900D1740D29F8),
- UINT64_C(0x0153A5FEC2807EDD), UINT64_C(0x003616B13CBFDC6E),
- UINT64_C(0x014FA30FBEC2B9FF) },
- { UINT64_C(0x03CEBD84555A3B73), UINT64_C(0x011642C087A74BA4),
- UINT64_C(0x03FAF4C90C28B568), UINT64_C(0x00D2B6FE13831FC3),
- UINT64_C(0x02F1845F4A404C99), UINT64_C(0x03031352DB2945ED),
- UINT64_C(0x0192B108B24A2CC8), UINT64_C(0x008B79F2C497B8AE),
- UINT64_C(0x016844B1F9A48A1A) } },
- { { UINT64_C(0x033F1B159EA0B318), UINT64_C(0x015BA4F73890FCA5),
- UINT64_C(0x03AB1671767AEB58), UINT64_C(0x0190DE3F4B53983C),
- UINT64_C(0x01C67D39EE1606B7), UINT64_C(0x02092898897E0832),
- UINT64_C(0x016BC61B17E221D9), UINT64_C(0x0302B2A3F7863F1A),
- UINT64_C(0x0153FC11A3315E45) },
- { UINT64_C(0x02AC9E25352466CC), UINT64_C(0x03A49408E6FA3892),
- UINT64_C(0x03B3B7FC83F96BAA), UINT64_C(0x02447E01B52DE677),
- UINT64_C(0x01EB6353F032192D), UINT64_C(0x00910C3CF3E5926D),
- UINT64_C(0x02261F650A5EA2DB), UINT64_C(0x03AA8819EC45E274),
- UINT64_C(0x01F274F4B47595FA) } },
- { { UINT64_C(0x0026282EB3F78C83), UINT64_C(0x00C28C0709CFCB19),
- UINT64_C(0x01821376CE1FE0A2), UINT64_C(0x01FDCED392DF4511),
- UINT64_C(0x007CEFA4CDFC46EC), UINT64_C(0x01C18D201835A1D3),
- UINT64_C(0x021190BA9D0FC1B3), UINT64_C(0x01CF1181F215C327),
- UINT64_C(0x0144F63DC1DC2337) },
- { UINT64_C(0x02467154F82AE76F), UINT64_C(0x00A8E4BC6B21A6C1),
- UINT64_C(0x003C5960D11DFC29), UINT64_C(0x02CCE05B7F97DFEA),
- UINT64_C(0x0155EBEF61A21A64), UINT64_C(0x02E5A1DD22DB3809),
- UINT64_C(0x008CACD3BAEA4ADC), UINT64_C(0x01AF102BA92E48C7),
- UINT64_C(0x0060B7381DB1721E) } },
- { { UINT64_C(0x03861A0264B1FB35), UINT64_C(0x02F8C8B3CD33A6FA),
- UINT64_C(0x030806F41BBA295F), UINT64_C(0x0164D82631325495),
- UINT64_C(0x00CE9EA6FF0E358B), UINT64_C(0x0079012DD18DCC6B),
- UINT64_C(0x000CC353D3BB1AC0), UINT64_C(0x03AB6D47DE397D50),
- UINT64_C(0x00AD096897EA08E2) },
- { UINT64_C(0x023B78EFC3812C10), UINT64_C(0x0089EFA9532A659C),
- UINT64_C(0x0281A0EB9A3DF013), UINT64_C(0x03AE4559CDF48DB0),
- UINT64_C(0x00CF5D05BA21B5A4), UINT64_C(0x000FB2B315217C86),
- UINT64_C(0x018D07209C8D7927), UINT64_C(0x0142BF514B4FAA4C),
- UINT64_C(0x002374D59706AD5B) } },
- { { UINT64_C(0x00C15F67DD00894F), UINT64_C(0x0365718AE78487A2),
- UINT64_C(0x01F5CF8A8DD7221A), UINT64_C(0x00B966824944DA72),
- UINT64_C(0x039495E53E96A028), UINT64_C(0x017A489926C99CDF),
- UINT64_C(0x03E7DBA2A6042AD8), UINT64_C(0x0070896FE2C77ED8),
- UINT64_C(0x01DE2D3E99009396) },
- { UINT64_C(0x02CDACE519305F18), UINT64_C(0x0199321FCFA0FFC9),
- UINT64_C(0x01FDEB80C6DC481C), UINT64_C(0x02944307EF501A18),
- UINT64_C(0x0007F535095DB6A0), UINT64_C(0x01898CF112F16E56),
- UINT64_C(0x00CB5741AFE7E00B), UINT64_C(0x01926B1FD8D17FCB),
- UINT64_C(0x015E5CD28BDE5A59) } },
- },
- {
- { { UINT64_C(0x0287283D0F0DB502), UINT64_C(0x01F7D518BD1DEC47),
- UINT64_C(0x0110E901D0288278), UINT64_C(0x000A9C8AA5A57C0C),
- UINT64_C(0x03B765C5FA16BDCF), UINT64_C(0x03E5DF4E7DE798D7),
- UINT64_C(0x00F43CD382F586CB), UINT64_C(0x016DF729B4C5BFE2),
- UINT64_C(0x00F84CAB1D3D3490) },
- { UINT64_C(0x03C62F43F45CE248), UINT64_C(0x01779CCA073E2076),
- UINT64_C(0x003E7EB22E4B1573), UINT64_C(0x0192926CE48BFBEA),
- UINT64_C(0x00AEAE190B45D381), UINT64_C(0x02BD36FBE7AB443A),
- UINT64_C(0x00906E0CD124F126), UINT64_C(0x025881B2A14C49E4),
- UINT64_C(0x016E768F54273911) } },
- { { UINT64_C(0x0339D7B298B06389), UINT64_C(0x00171C63E44DC1B1),
- UINT64_C(0x00C31B1589FD2080), UINT64_C(0x00B27F131898A9FA),
- UINT64_C(0x0342FE5ADE76B5A2), UINT64_C(0x01090D97105A2655),
- UINT64_C(0x0388BB1432187198), UINT64_C(0x02D27D0C82BF52D7),
- UINT64_C(0x00807B9F1B11A583) },
- { UINT64_C(0x01F3344975177EBC), UINT64_C(0x00D1C4854243F6DB),
- UINT64_C(0x00CF85E1839AB312), UINT64_C(0x00D9C19A12D20012),
- UINT64_C(0x01709110819085E7), UINT64_C(0x011FEDA170483D5C),
- UINT64_C(0x01B28F055EEB31A0), UINT64_C(0x02289D0F2CBAB0E6),
- UINT64_C(0x000867BA2963A0E1) } },
- { { UINT64_C(0x03F6911B90581DC0), UINT64_C(0x01F1FB19987F20FB),
- UINT64_C(0x0134E22EFA2F437F), UINT64_C(0x00398E1EB156A4E0),
- UINT64_C(0x0325F4C0DBD2FAF4), UINT64_C(0x0204D252D5C55B5B),
- UINT64_C(0x00E279F64EA373DA), UINT64_C(0x01DB9B5CD34A8E6F),
- UINT64_C(0x00D14F2FC1B2EE3D) },
- { UINT64_C(0x0391CF084FAB453E), UINT64_C(0x016D9E632F3C4388),
- UINT64_C(0x01D15FD339420C4A), UINT64_C(0x026356CC61C907C7),
- UINT64_C(0x026E23E3D6197795), UINT64_C(0x0142F5E058DB2B6C),
- UINT64_C(0x020EFE8EAFF59180), UINT64_C(0x00A481A4F4563A8C),
- UINT64_C(0x012FEE21C8B4C4E9) } },
- { { UINT64_C(0x02056DCD3DB8A57B), UINT64_C(0x0317AAE4B46AB720),
- UINT64_C(0x031833D064C1F1CD), UINT64_C(0x03A3CC17BEBD056B),
- UINT64_C(0x03F05A7034003715), UINT64_C(0x009FAC41671C58C9),
- UINT64_C(0x01BEE4D8BD8671CA), UINT64_C(0x0004BC6DBD8A8392),
- UINT64_C(0x01F15A2D6E92E74A) },
- { UINT64_C(0x010933993D4BD6B6), UINT64_C(0x028502613D6FDD77),
- UINT64_C(0x0134D55E73D97A09), UINT64_C(0x001DB5E602D2AA86),
- UINT64_C(0x00FE1E6979BF531F), UINT64_C(0x02AC99028117960B),
- UINT64_C(0x03849A42EAAB4E66), UINT64_C(0x0190FBBD3B94D87F),
- UINT64_C(0x011CAB9AC249065C) } },
- { { UINT64_C(0x03000D01D5AD0B4E), UINT64_C(0x01E094F415439045),
- UINT64_C(0x0071645EF32A823C), UINT64_C(0x013C18E27FCF9EA5),
- UINT64_C(0x00B2733886CDC7A9), UINT64_C(0x02902330EF732EA5),
- UINT64_C(0x003C25CEA5C5686B), UINT64_C(0x029DF5773028F0CD),
- UINT64_C(0x016FB941FCD6583D) },
- { UINT64_C(0x01DEA99AF3494AD9), UINT64_C(0x03BA2C1B9C712901),
- UINT64_C(0x02E32E4B0A8430F2), UINT64_C(0x00CB695E8BF6F96B),
- UINT64_C(0x0161F767B32907C2), UINT64_C(0x002FC8531B5E7CEC),
- UINT64_C(0x00298C1304153AFA), UINT64_C(0x0189BCBF02EE4544),
- UINT64_C(0x0035592EC7CAC39B) } },
- { { UINT64_C(0x0359513866647B76), UINT64_C(0x00DB6945523879DD),
- UINT64_C(0x0349C662AF030344), UINT64_C(0x03638440AAB5A275),
- UINT64_C(0x02A0720FE9DC8A6B), UINT64_C(0x011CEE4DF271AE5F),
- UINT64_C(0x00BC676869500BE5), UINT64_C(0x02F5135FF9B7674F),
- UINT64_C(0x00142511483B55E9) },
- { UINT64_C(0x02DE083E6D8A2C33), UINT64_C(0x014C0545D4B8062F),
- UINT64_C(0x01AD94143AC28589), UINT64_C(0x01AEBAA37C00A634),
- UINT64_C(0x0078E06973DA0209), UINT64_C(0x03F56A237FA0E6B0),
- UINT64_C(0x02879F4A94D49E71), UINT64_C(0x01BE6BF822D1FD4F),
- UINT64_C(0x00F9E2018F9FBF87) } },
- { { UINT64_C(0x025B8DCB938F6A40), UINT64_C(0x0026725B42FA4F9B),
- UINT64_C(0x039198D12A999847), UINT64_C(0x010A9C957A1EFA18),
- UINT64_C(0x012FAA8E7E5D1356), UINT64_C(0x0205AB8BB7E3A8BA),
- UINT64_C(0x015652F190E95489), UINT64_C(0x0231452E385A88C6),
- UINT64_C(0x0096A500D25B0C46) },
- { UINT64_C(0x01B6696514F1EAD3), UINT64_C(0x026BE39E6BD0E127),
- UINT64_C(0x01725DEFE2C66DD3), UINT64_C(0x01FEAE05ECA5B5BB),
- UINT64_C(0x015AA101430609C7), UINT64_C(0x0274AAB1807123A3),
- UINT64_C(0x02A446B243B7DBAC), UINT64_C(0x007DC3A911987A6B),
- UINT64_C(0x005309D7E2813F76) } },
- { { UINT64_C(0x01966924104023FD), UINT64_C(0x0020B1F67AD27833),
- UINT64_C(0x03DFD742FB1D5AC6), UINT64_C(0x017F6DD6D843D1C9),
- UINT64_C(0x01DEAB06F70CFD0B), UINT64_C(0x00F3AAA1D84BA46E),
- UINT64_C(0x01535D03B00F23FA), UINT64_C(0x02F223786ADE70A7),
- UINT64_C(0x00DC3F149A4B2AAE) },
- { UINT64_C(0x0318A8079CA626DD), UINT64_C(0x00A1DE38CE5C6BE6),
- UINT64_C(0x032F55E2E4E50992), UINT64_C(0x0192257A6FB7EED9),
- UINT64_C(0x020B9106C175FDEB), UINT64_C(0x001ACA988C739470),
- UINT64_C(0x02A12D0A78C3DAD7), UINT64_C(0x02A0BFDBC1802E4D),
- UINT64_C(0x0138CB75E6BBB8BA) } },
- { { UINT64_C(0x00B271637F32AB3F), UINT64_C(0x02196867BE3CDC78),
- UINT64_C(0x00647C1710CC4F5D), UINT64_C(0x00A0EDE0B8D8DB71),
- UINT64_C(0x0092AB51B9BB942A), UINT64_C(0x030CEE5FF47C8C77),
- UINT64_C(0x0172B6296758CE89), UINT64_C(0x03FBF70A184CFE5F),
- UINT64_C(0x0101B88E67F1E05D) },
- { UINT64_C(0x02FFBCD12737D38E), UINT64_C(0x02754305441EA3F7),
- UINT64_C(0x0174766ADA98B6A0), UINT64_C(0x00EEEAD822C29CD7),
- UINT64_C(0x02D88F6B991FA26B), UINT64_C(0x02CB655B1E5DF95B),
- UINT64_C(0x03DD0BD505307E4F), UINT64_C(0x010182FDFC359D4A),
- UINT64_C(0x00755C3675A01A9E) } },
- { { UINT64_C(0x00371ACBFD4D4113), UINT64_C(0x01CD0CEE90EDA0C0),
- UINT64_C(0x023F0667BA099F71), UINT64_C(0x0122476EC028AFF8),
- UINT64_C(0x0057490C1B9D3C8E), UINT64_C(0x0037D1A2CAFBC030),
- UINT64_C(0x0357613B144BA059), UINT64_C(0x030B5ED5F7E2DFAA),
- UINT64_C(0x00C03407E66571BC) },
- { UINT64_C(0x015B2051592A3113), UINT64_C(0x033C0B977FE1CA61),
- UINT64_C(0x0114564ECE17F466), UINT64_C(0x02770F5D995C1ECC),
- UINT64_C(0x01D8797648C617E7), UINT64_C(0x00B30F6FB78CAD34),
- UINT64_C(0x036CD504495109EC), UINT64_C(0x02EA78A9F6758E7F),
- UINT64_C(0x007A71C9E769E9C6) } },
- { { UINT64_C(0x011D5BE35201CD59), UINT64_C(0x0209D1C58765C0EE),
- UINT64_C(0x01D25192839B1DB8), UINT64_C(0x03EAD38ED4A2B60E),
- UINT64_C(0x0057B36709A7B7AA), UINT64_C(0x0085B62AF338BC2B),
- UINT64_C(0x030F3BEF5577F894), UINT64_C(0x0390BAA242140FD9),
- UINT64_C(0x011B9BF27FA21CD6) },
- { UINT64_C(0x031FF60458FFB263), UINT64_C(0x00D71C9EC589C2CE),
- UINT64_C(0x006C50B6449B7493), UINT64_C(0x034EF7D63824AD56),
- UINT64_C(0x038578A6820938F3), UINT64_C(0x00843B021ED27247),
- UINT64_C(0x02672B0B7E864C01), UINT64_C(0x00FE28A0AD914F56),
- UINT64_C(0x01870F7E6544AD26) } },
- { { UINT64_C(0x03FABFF21E593E49), UINT64_C(0x01EB902CACEDCD38),
- UINT64_C(0x010907F07EA1634E), UINT64_C(0x013A3B3D20F1ACCD),
- UINT64_C(0x035F3C751269190C), UINT64_C(0x02F6BAE3746C46A6),
- UINT64_C(0x00097CBB9F7B998C), UINT64_C(0x016B88BF2C151BD8),
- UINT64_C(0x01317587E7C4BAF5) },
- { UINT64_C(0x027516E2062B46F6), UINT64_C(0x01703ECD4583F2AB),
- UINT64_C(0x007D01ABE67B4364), UINT64_C(0x00F1753628034E7C),
- UINT64_C(0x0108FF0FECD3BD76), UINT64_C(0x033B697531A2F0AC),
- UINT64_C(0x010AC9943B9A6425), UINT64_C(0x020BC633526FFAA7),
- UINT64_C(0x0006E03EC9A132B1) } },
- { { UINT64_C(0x016BC247531FFCBB), UINT64_C(0x02EE2DDBF721D516),
- UINT64_C(0x0052E0725E10638A), UINT64_C(0x013566F49B1AAC88),
- UINT64_C(0x007343ED5106C60D), UINT64_C(0x02985C4AAAB232AC),
- UINT64_C(0x0113830C6312DE7A), UINT64_C(0x0136F1CF05895FFF),
- UINT64_C(0x01ED7817C0B0027B) },
- { UINT64_C(0x02716A42F749B010), UINT64_C(0x039DC807B7BDBC44),
- UINT64_C(0x035DFD64A2C7F19C), UINT64_C(0x00AFE5B488D67F84),
- UINT64_C(0x03831B1AD5D8B241), UINT64_C(0x00FEF3BA557CC901),
- UINT64_C(0x0082C2A38F96B970), UINT64_C(0x027380F80F3D96E5),
- UINT64_C(0x014FDF6544812C07) } },
- { { UINT64_C(0x03600187B0C6A752), UINT64_C(0x019E405A0263FA53),
- UINT64_C(0x000E0EA369E1C1BF), UINT64_C(0x0130C422E3895E24),
- UINT64_C(0x035F4072E884BDCB), UINT64_C(0x0284B4DBC9FDB267),
- UINT64_C(0x0159D4401B2054DE), UINT64_C(0x03649FACE16E526C),
- UINT64_C(0x0100AC3AAFFE225D) },
- { UINT64_C(0x03BA224ACAFA8C2B), UINT64_C(0x031E5C26E31FAF8C),
- UINT64_C(0x00B183566D47E97E), UINT64_C(0x0020C64F9C9C2688),
- UINT64_C(0x02F6655D04CC893B), UINT64_C(0x03908BE8D4648FE4),
- UINT64_C(0x02F14F85922DC116), UINT64_C(0x031D345610C10114),
- UINT64_C(0x00FC287447A5FA2D) } },
- { { UINT64_C(0x020880798CEE5802), UINT64_C(0x03BE370A4C38C7FF),
- UINT64_C(0x00934BE76CF041A3), UINT64_C(0x011B7A12BC50EEE4),
- UINT64_C(0x0301BD4FC9636CD4), UINT64_C(0x03C53C2A0264C2CE),
- UINT64_C(0x0347FF0A389DC319), UINT64_C(0x03A848048891AD07),
- UINT64_C(0x0110D35394388CFB) },
- { UINT64_C(0x0042E86EE18DA0C0), UINT64_C(0x0359DB5D730A12EE),
- UINT64_C(0x03D8CD72D5690026), UINT64_C(0x01FD191FD18F2690),
- UINT64_C(0x00B8691FD8727A16), UINT64_C(0x0135130205267C55),
- UINT64_C(0x011FDBAF57A304DB), UINT64_C(0x012D7FC9DED7342D),
- UINT64_C(0x01BFE56058019C74) } },
- { { UINT64_C(0x00ADCF21754184BF), UINT64_C(0x02532EC18F101A1B),
- UINT64_C(0x02E7AA58B7598AF4), UINT64_C(0x0297C67528666348),
- UINT64_C(0x022BAF11DF85DAD5), UINT64_C(0x0097F7BCDA9CFFA7),
- UINT64_C(0x03F0C563228A2E65), UINT64_C(0x0316126723B57D49),
- UINT64_C(0x019B45ECCD3F5983) },
- { UINT64_C(0x02B86D25E0A95EDC), UINT64_C(0x027ED42D9C73BD22),
- UINT64_C(0x0385F10181D77392), UINT64_C(0x02C8AA05E16378DB),
- UINT64_C(0x02962E884B04947C), UINT64_C(0x00A054D788CF48A9),
- UINT64_C(0x006616654F6E2CF7), UINT64_C(0x021848D66B0ACC97),
- UINT64_C(0x00E73704171C5696) } },
+ SECStatus res = SECSuccess;
+ if (!pt || !pt->data) {
+ PORT_SetError(SEC_ERROR_INVALID_ARGS);
+ res = SECFailure;
+ return res;
}
-};
-
-/*-
- * Finite field inversion.
- * Computed with exponentiation via FLT.
- * Autogenerated: ecp/secp521r1/fe_inv.op3
- * custom repunit addition chain
- * NB: this is not a real fiat-crypto function, just named that way for consistency.
- */
-static void
-fiat_secp521r1_inv(fe_t output, const fe_t t1)
-{
- int i;
- /* temporary variables */
- fe_t acc, t128, t16, t2, t256, t32, t4, t512, t516, t518, t519, t64, t8;
-
- fiat_secp521r1_carry_square(acc, t1);
- fiat_secp521r1_carry_mul(t2, acc, t1);
- fiat_secp521r1_carry_square(acc, t2);
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t4, acc, t2);
- fiat_secp521r1_carry_square(acc, t4);
- for (i = 0; i < 3; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t8, acc, t4);
- fiat_secp521r1_carry_square(acc, t8);
- for (i = 0; i < 7; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t16, acc, t8);
- fiat_secp521r1_carry_square(acc, t16);
- for (i = 0; i < 15; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t32, acc, t16);
- fiat_secp521r1_carry_square(acc, t32);
- for (i = 0; i < 31; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t64, acc, t32);
- fiat_secp521r1_carry_square(acc, t64);
- for (i = 0; i < 63; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t128, acc, t64);
- fiat_secp521r1_carry_square(acc, t128);
- for (i = 0; i < 127; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t256, acc, t128);
- fiat_secp521r1_carry_square(acc, t256);
- for (i = 0; i < 255; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t512, acc, t256);
- fiat_secp521r1_carry_square(acc, t512);
- for (i = 0; i < 3; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t516, acc, t4);
- fiat_secp521r1_carry_square(acc, t516);
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t518, acc, t2);
- fiat_secp521r1_carry_square(acc, t518);
- fiat_secp521r1_carry_mul(t519, acc, t1);
- fiat_secp521r1_carry_square(acc, t519);
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(output, acc, t1);
-}
-
-/*-
- * Q := 2P, both projective, Q and P same pointers OK
- * Autogenerated: op3/dbl_proj.op3
- * https://eprint.iacr.org/2015/1060 Alg 6
- * ASSERT: a = -3
- */
-static void
-point_double(pt_prj_t *Q, const pt_prj_t *P)
-{
- /* temporary variables */
- fe_t t0, t1, t2, t3, t4;
- /* constants */
- const limb_t *b = const_b;
- /* set pointers for legacy curve arith */
- const limb_t *X = P->X;
- const limb_t *Y = P->Y;
- const limb_t *Z = P->Z;
- limb_t *X3 = Q->X;
- limb_t *Y3 = Q->Y;
- limb_t *Z3 = Q->Z;
-
- /* the curve arith formula */
- fiat_secp521r1_carry_square(t0, X);
- fiat_secp521r1_carry_square(t1, Y);
- fiat_secp521r1_carry_square(t2, Z);
- fiat_secp521r1_carry_mul(t3, X, Y);
- fiat_secp521r1_carry_add(t3, t3, t3);
- fiat_secp521r1_carry_mul(t4, Y, Z);
- fiat_secp521r1_carry_mul(Z3, X, Z);
- fiat_secp521r1_carry_add(Z3, Z3, Z3);
- fiat_secp521r1_carry_mul(Y3, b, t2);
- fiat_secp521r1_carry_sub(Y3, Y3, Z3);
- fiat_secp521r1_carry_add(X3, Y3, Y3);
- fiat_secp521r1_carry_add(Y3, X3, Y3);
- fiat_secp521r1_carry_sub(X3, t1, Y3);
- fiat_secp521r1_carry_add(Y3, t1, Y3);
- fiat_secp521r1_carry_mul(Y3, X3, Y3);
- fiat_secp521r1_carry_mul(X3, X3, t3);
- fiat_secp521r1_carry_add(t3, t2, t2);
- fiat_secp521r1_carry_add(t2, t2, t3);
- fiat_secp521r1_carry_mul(Z3, b, Z3);
- fiat_secp521r1_carry_sub(Z3, Z3, t2);
- fiat_secp521r1_carry_sub(Z3, Z3, t0);
- fiat_secp521r1_carry_add(t3, Z3, Z3);
- fiat_secp521r1_carry_add(Z3, Z3, t3);
- fiat_secp521r1_carry_add(t3, t0, t0);
- fiat_secp521r1_carry_add(t0, t3, t0);
- fiat_secp521r1_carry_sub(t0, t0, t2);
- fiat_secp521r1_carry_mul(t0, t0, Z3);
- fiat_secp521r1_carry_add(Y3, Y3, t0);
- fiat_secp521r1_carry_add(t0, t4, t4);
- fiat_secp521r1_carry_mul(Z3, t0, Z3);
- fiat_secp521r1_carry_sub(X3, X3, Z3);
- fiat_secp521r1_carry_mul(Z3, t0, t1);
- fiat_secp521r1_carry_add(Z3, Z3, Z3);
- fiat_secp521r1_carry_add(Z3, Z3, Z3);
-}
-
-/*-
- * out1 = (arg1 == 0) ? 0 : nz
- * NB: this is not a "mod p equiv" 0, but literal 0
- * NB: this is not a real fiat-crypto function, just named that way for consistency.
- */
-static void
-fiat_secp521r1_nonzero(limb_t *out1, const fe_t arg1)
-{
- limb_t x1 = 0;
- int i;
-
- for (i = 0; i < LIMB_CNT; i++)
- x1 |= arg1[i];
- *out1 = x1;
-}
-
-/*-
- * R := Q + P where R and Q are projective, P affine.
- * R and Q same pointers OK
- * R and P same pointers not OK
- * Autogenerated: op3/add_mixed.op3
- * https://eprint.iacr.org/2015/1060 Alg 5
- * ASSERT: a = -3
- */
-static void
-point_add_mixed(pt_prj_t *R, const pt_prj_t *Q, const pt_aff_t *P)
-{
- /* temporary variables */
- fe_t t0, t1, t2, t3, t4;
- /* constants */
- const limb_t *b = const_b;
- /* set pointers for legacy curve arith */
- const limb_t *X1 = Q->X;
- const limb_t *Y1 = Q->Y;
- const limb_t *Z1 = Q->Z;
- const limb_t *X2 = P->X;
- const limb_t *Y2 = P->Y;
- fe_t X3;
- fe_t Y3;
- fe_t Z3;
- limb_t nz;
- /* check P for affine inf */
- fiat_secp521r1_nonzero(&nz, P->Y);
-
- /* the curve arith formula */
- fiat_secp521r1_carry_mul(t0, X1, X2);
- fiat_secp521r1_carry_mul(t1, Y1, Y2);
- fiat_secp521r1_carry_add(t3, X2, Y2);
- fiat_secp521r1_carry_add(t4, X1, Y1);
- fiat_secp521r1_carry_mul(t3, t3, t4);
- fiat_secp521r1_carry_add(t4, t0, t1);
- fiat_secp521r1_carry_sub(t3, t3, t4);
- fiat_secp521r1_carry_mul(t4, Y2, Z1);
- fiat_secp521r1_carry_add(t4, t4, Y1);
- fiat_secp521r1_carry_mul(Y3, X2, Z1);
- fiat_secp521r1_carry_add(Y3, Y3, X1);
- fiat_secp521r1_carry_mul(Z3, b, Z1);
- fiat_secp521r1_carry_sub(X3, Y3, Z3);
- fiat_secp521r1_carry_add(Z3, X3, X3);
- fiat_secp521r1_carry_add(X3, X3, Z3);
- fiat_secp521r1_carry_sub(Z3, t1, X3);
- fiat_secp521r1_carry_add(X3, t1, X3);
- fiat_secp521r1_carry_mul(Y3, b, Y3);
- fiat_secp521r1_carry_add(t1, Z1, Z1);
- fiat_secp521r1_carry_add(t2, t1, Z1);
- fiat_secp521r1_carry_sub(Y3, Y3, t2);
- fiat_secp521r1_carry_sub(Y3, Y3, t0);
- fiat_secp521r1_carry_add(t1, Y3, Y3);
- fiat_secp521r1_carry_add(Y3, t1, Y3);
- fiat_secp521r1_carry_add(t1, t0, t0);
- fiat_secp521r1_carry_add(t0, t1, t0);
- fiat_secp521r1_carry_sub(t0, t0, t2);
- fiat_secp521r1_carry_mul(t1, t4, Y3);
- fiat_secp521r1_carry_mul(t2, t0, Y3);
- fiat_secp521r1_carry_mul(Y3, X3, Z3);
- fiat_secp521r1_carry_add(Y3, Y3, t2);
- fiat_secp521r1_carry_mul(X3, t3, X3);
- fiat_secp521r1_carry_sub(X3, X3, t1);
- fiat_secp521r1_carry_mul(Z3, t4, Z3);
- fiat_secp521r1_carry_mul(t1, t3, t0);
- fiat_secp521r1_carry_add(Z3, Z3, t1);
-
- /* if P is inf, throw all that away and take Q */
- fiat_secp521r1_selectznz(R->X, nz, Q->X, X3);
- fiat_secp521r1_selectznz(R->Y, nz, Q->Y, Y3);
- fiat_secp521r1_selectznz(R->Z, nz, Q->Z, Z3);
-}
-
-/*-
- * R := Q + P all projective.
- * R and Q same pointers OK
- * R and P same pointers not OK
- * Autogenerated: op3/add_proj.op3
- * https://eprint.iacr.org/2015/1060 Alg 4
- * ASSERT: a = -3
- */
-static void
-point_add_proj(pt_prj_t *R, const pt_prj_t *Q, const pt_prj_t *P)
-{
- /* temporary variables */
- fe_t t0, t1, t2, t3, t4, t5;
- /* constants */
- const limb_t *b = const_b;
- /* set pointers for legacy curve arith */
- const limb_t *X1 = Q->X;
- const limb_t *Y1 = Q->Y;
- const limb_t *Z1 = Q->Z;
- const limb_t *X2 = P->X;
- const limb_t *Y2 = P->Y;
- const limb_t *Z2 = P->Z;
- limb_t *X3 = R->X;
- limb_t *Y3 = R->Y;
- limb_t *Z3 = R->Z;
-
- /* the curve arith formula */
- fiat_secp521r1_carry_mul(t0, X1, X2);
- fiat_secp521r1_carry_mul(t1, Y1, Y2);
- fiat_secp521r1_carry_mul(t2, Z1, Z2);
- fiat_secp521r1_carry_add(t3, X1, Y1);
- fiat_secp521r1_carry_add(t4, X2, Y2);
- fiat_secp521r1_carry_mul(t3, t3, t4);
- fiat_secp521r1_carry_add(t4, t0, t1);
- fiat_secp521r1_carry_sub(t3, t3, t4);
- fiat_secp521r1_carry_add(t4, Y1, Z1);
- fiat_secp521r1_carry_add(t5, Y2, Z2);
- fiat_secp521r1_carry_mul(t4, t4, t5);
- fiat_secp521r1_carry_add(t5, t1, t2);
- fiat_secp521r1_carry_sub(t4, t4, t5);
- fiat_secp521r1_carry_add(X3, X1, Z1);
- fiat_secp521r1_carry_add(Y3, X2, Z2);
- fiat_secp521r1_carry_mul(X3, X3, Y3);
- fiat_secp521r1_carry_add(Y3, t0, t2);
- fiat_secp521r1_carry_sub(Y3, X3, Y3);
- fiat_secp521r1_carry_mul(Z3, b, t2);
- fiat_secp521r1_carry_sub(X3, Y3, Z3);
- fiat_secp521r1_carry_add(Z3, X3, X3);
- fiat_secp521r1_carry_add(X3, X3, Z3);
- fiat_secp521r1_carry_sub(Z3, t1, X3);
- fiat_secp521r1_carry_add(X3, t1, X3);
- fiat_secp521r1_carry_mul(Y3, b, Y3);
- fiat_secp521r1_carry_add(t1, t2, t2);
- fiat_secp521r1_carry_add(t2, t1, t2);
- fiat_secp521r1_carry_sub(Y3, Y3, t2);
- fiat_secp521r1_carry_sub(Y3, Y3, t0);
- fiat_secp521r1_carry_add(t1, Y3, Y3);
- fiat_secp521r1_carry_add(Y3, t1, Y3);
- fiat_secp521r1_carry_add(t1, t0, t0);
- fiat_secp521r1_carry_add(t0, t1, t0);
- fiat_secp521r1_carry_sub(t0, t0, t2);
- fiat_secp521r1_carry_mul(t1, t4, Y3);
- fiat_secp521r1_carry_mul(t2, t0, Y3);
- fiat_secp521r1_carry_mul(Y3, X3, Z3);
- fiat_secp521r1_carry_add(Y3, Y3, t2);
- fiat_secp521r1_carry_mul(X3, t3, X3);
- fiat_secp521r1_carry_sub(X3, X3, t1);
- fiat_secp521r1_carry_mul(Z3, t4, Z3);
- fiat_secp521r1_carry_mul(t1, t3, t0);
- fiat_secp521r1_carry_add(Z3, Z3, t1);
-}
-
-/* constants */
-#define RADIX 5
-#define DRADIX (1 << RADIX)
-#define DRADIX_WNAF ((DRADIX) << 1)
-
-/*-
- * precomp for wnaf scalar multiplication:
- * precomp[0] = 1P
- * precomp[1] = 3P
- * precomp[2] = 5P
- * precomp[3] = 7P
- * precomp[4] = 9P
- * ...
- */
-static void
-precomp_wnaf(pt_prj_t precomp[DRADIX / 2], const pt_aff_t *P)
-{
- int i;
-
- fe_copy(precomp[0].X, P->X);
- fe_copy(precomp[0].Y, P->Y);
- fe_copy(precomp[0].Z, const_one);
- point_double(&precomp[DRADIX / 2 - 1], &precomp[0]);
-
- for (i = 1; i < DRADIX / 2; i++)
- point_add_proj(&precomp[i], &precomp[DRADIX / 2 - 1], &precomp[i - 1]);
-}
-
-/* fetch a scalar bit */
-static int
-scalar_get_bit(const unsigned char in[66], int idx)
-{
- int widx, rshift;
-
- widx = idx >> 3;
- rshift = idx & 0x7;
-
- if (idx < 0 || widx >= 66)
- return 0;
-
- return (in[widx] >> rshift) & 0x1;
-}
-
-/*-
- * Compute "regular" wnaf representation of a scalar.
- * See "Exponent Recoding and Regular Exponentiation Algorithms",
- * Tunstall et al., AfricaCrypt 2009, Alg 6.
- * It forces an odd scalar and outputs digits in
- * {\pm 1, \pm 3, \pm 5, \pm 7, \pm 9, ...}
- * i.e. signed odd digits with _no zeroes_ -- that makes it "regular".
- */
-static void
-scalar_rwnaf(int8_t out[106], const unsigned char in[66])
-{
- int i;
- int8_t window, d;
-
- window = (in[0] & (DRADIX_WNAF - 1)) | 1;
- for (i = 0; i < 105; i++) {
- d = (window & (DRADIX_WNAF - 1)) - DRADIX;
- out[i] = d;
- window = (window - d) >> RADIX;
- window += scalar_get_bit(in, (i + 1) * RADIX + 1) << 1;
- window += scalar_get_bit(in, (i + 1) * RADIX + 2) << 2;
- window += scalar_get_bit(in, (i + 1) * RADIX + 3) << 3;
- window += scalar_get_bit(in, (i + 1) * RADIX + 4) << 4;
- window += scalar_get_bit(in, (i + 1) * RADIX + 5) << 5;
- }
- out[i] = window;
-}
-
-/*-
- * Compute "textbook" wnaf representation of a scalar.
- * NB: not constant time
- */
-static void
-scalar_wnaf(int8_t out[529], const unsigned char in[66])
-{
- int i;
- int8_t window, d;
-
- window = in[0] & (DRADIX_WNAF - 1);
- for (i = 0; i < 529; i++) {
- d = 0;
- if ((window & 1) && ((d = window & (DRADIX_WNAF - 1)) & DRADIX))
- d -= DRADIX_WNAF;
- out[i] = d;
- window = (window - d) >> 1;
- window += scalar_get_bit(in, i + 1 + RADIX) << RADIX;
- }
-}
-
-/*-
- * Simultaneous scalar multiplication: interleaved "textbook" wnaf.
- * NB: not constant time
- */
-static void
-var_smul_wnaf_two(pt_aff_t *out, const unsigned char a[66],
- const unsigned char b[66], const pt_aff_t *P)
-{
- int i, d, is_neg, is_inf = 1, flipped = 0;
- int8_t anaf[529] = { 0 };
- int8_t bnaf[529] = { 0 };
- pt_prj_t Q = { { 0 }, { 0 }, { 0 } };
- pt_prj_t precomp[DRADIX / 2];
-
- precomp_wnaf(precomp, P);
- scalar_wnaf(anaf, a);
- scalar_wnaf(bnaf, b);
-
- for (i = 528; i >= 0; i--) {
- if (!is_inf)
- point_double(&Q, &Q);
- if ((d = bnaf[i])) {
- if ((is_neg = d < 0) != flipped) {
- fiat_secp521r1_carry_opp(Q.Y, Q.Y);
- flipped ^= 1;
- }
- d = (is_neg) ? (-d - 1) >> 1 : (d - 1) >> 1;
- if (is_inf) {
- /* initialize accumulator */
- fe_copy(Q.X, &precomp[d].X);
- fe_copy(Q.Y, &precomp[d].Y);
- fe_copy(Q.Z, &precomp[d].Z);
- is_inf = 0;
- } else
- point_add_proj(&Q, &Q, &precomp[d]);
- }
- if ((d = anaf[i])) {
- if ((is_neg = d < 0) != flipped) {
- fiat_secp521r1_carry_opp(Q.Y, Q.Y);
- flipped ^= 1;
- }
- d = (is_neg) ? (-d - 1) >> 1 : (d - 1) >> 1;
- if (is_inf) {
- /* initialize accumulator */
- fe_copy(Q.X, &lut_cmb[0][d].X);
- fe_copy(Q.Y, &lut_cmb[0][d].Y);
- fe_copy(Q.Z, const_one);
- is_inf = 0;
- } else
- point_add_mixed(&Q, &Q, &lut_cmb[0][d]);
- }
- }
-
- if (is_inf) {
- /* initialize accumulator to inf: all-zero scalars */
- fe_set_zero(Q.X);
- fe_copy(Q.Y, const_one);
- fe_set_zero(Q.Z);
- }
-
- if (flipped) {
- /* correct sign */
- fiat_secp521r1_carry_opp(Q.Y, Q.Y);
- }
-
- /* convert to affine -- NB depends on coordinate system */
- fiat_secp521r1_inv(Q.Z, Q.Z);
- fiat_secp521r1_carry_mul(out->X, Q.X, Q.Z);
- fiat_secp521r1_carry_mul(out->Y, Q.Y, Q.Z);
-}
-
-/*-
- * Variable point scalar multiplication with "regular" wnaf.
- * Here "regular" means _no zeroes_, so the sequence of
- * EC arithmetic ops is fixed.
- */
-static void
-var_smul_rwnaf(pt_aff_t *out, const unsigned char scalar[66],
- const pt_aff_t *P)
-{
- int i, j, d, diff, is_neg;
- int8_t rnaf[106] = { 0 };
- pt_prj_t Q = { { 0 }, { 0 }, { 0 } }, lut = { { 0 }, { 0 }, { 0 } };
- pt_prj_t precomp[DRADIX / 2];
-
- precomp_wnaf(precomp, P);
- scalar_rwnaf(rnaf, scalar);
-
-#if defined(_MSC_VER)
- /* result still unsigned: yes we know */
-#pragma warning(push)
-#pragma warning(disable : 4146)
-#endif
-
- /* initialize accumulator to high digit */
- d = (rnaf[105] - 1) >> 1;
- for (j = 0; j < DRADIX / 2; j++) {
- diff = (1 - (-(d ^ j) >> (8 * sizeof(int) - 1))) & 1;
- fiat_secp521r1_selectznz(Q.X, diff, Q.X, precomp[j].X);
- fiat_secp521r1_selectznz(Q.Y, diff, Q.Y, precomp[j].Y);
- fiat_secp521r1_selectznz(Q.Z, diff, Q.Z, precomp[j].Z);
+ if (pt->len != 133) {
+ PORT_SetError(SEC_ERROR_BAD_KEY);
+ res = SECFailure;
+ return res;
}
- for (i = 104; i >= 0; i--) {
- for (j = 0; j < RADIX; j++)
- point_double(&Q, &Q);
- d = rnaf[i];
- /* is_neg = (d < 0) ? 1 : 0 */
- is_neg = (d >> (8 * sizeof(int) - 1)) & 1;
- /* d = abs(d) */
- d = (d ^ -is_neg) + is_neg;
- d = (d - 1) >> 1;
- for (j = 0; j < DRADIX / 2; j++) {
- diff = (1 - (-(d ^ j) >> (8 * sizeof(int) - 1))) & 1;
- fiat_secp521r1_selectznz(lut.X, diff, lut.X, precomp[j].X);
- fiat_secp521r1_selectznz(lut.Y, diff, lut.Y, precomp[j].Y);
- fiat_secp521r1_selectznz(lut.Z, diff, lut.Z, precomp[j].Z);
- }
- /* negate lut point if digit is negative */
- fiat_secp521r1_carry_opp(out->Y, lut.Y);
- fiat_secp521r1_selectznz(lut.Y, is_neg, lut.Y, out->Y);
- point_add_proj(&Q, &Q, &lut);
+ if (pt->data[0] != EC_POINT_FORM_UNCOMPRESSED) {
+ PORT_SetError(SEC_ERROR_UNSUPPORTED_EC_POINT_FORM);
+ res = SECFailure;
+ return res;
}
-#if defined(_MSC_VER)
-#pragma warning(pop)
-#endif
-
- /* conditionally subtract P if the scalar was even */
- fe_copy(lut.X, precomp[0].X);
- fiat_secp521r1_carry_opp(lut.Y, precomp[0].Y);
- fe_copy(lut.Z, precomp[0].Z);
- point_add_proj(&lut, &lut, &Q);
- fiat_secp521r1_selectznz(Q.X, scalar[0] & 1, lut.X, Q.X);
- fiat_secp521r1_selectznz(Q.Y, scalar[0] & 1, lut.Y, Q.Y);
- fiat_secp521r1_selectznz(Q.Z, scalar[0] & 1, lut.Z, Q.Z);
-
- /* convert to affine -- NB depends on coordinate system */
- fiat_secp521r1_inv(Q.Z, Q.Z);
- fiat_secp521r1_carry_mul(out->X, Q.X, Q.Z);
- fiat_secp521r1_carry_mul(out->Y, Q.Y, Q.Z);
-}
-
-/*-
- * Fixed scalar multiplication: comb with interleaving.
- */
-static void
-fixed_smul_cmb(pt_aff_t *out, const unsigned char scalar[66])
-{
- int i, j, k, d, diff, is_neg = 0;
- int8_t rnaf[106] = { 0 };
- pt_prj_t Q = { { 0 }, { 0 }, { 0 } }, R = { { 0 }, { 0 }, { 0 } };
- pt_aff_t lut = { { 0 }, { 0 } };
+ bool b = Hacl_P521_validate_public_key(pt->data + 1);
- scalar_rwnaf(rnaf, scalar);
-
- /* initalize accumulator to inf */
- fe_set_zero(Q.X);
- fe_copy(Q.Y, const_one);
- fe_set_zero(Q.Z);
-
-#if defined(_MSC_VER)
- /* result still unsigned: yes we know */
-#pragma warning(push)
-#pragma warning(disable : 4146)
-#endif
-
- for (i = 8; i >= 0; i--) {
- for (j = 0; i != 8 && j < RADIX; j++)
- point_double(&Q, &Q);
- for (j = 0; j < 13; j++) {
- if (j * 9 + i > 105)
- continue;
- d = rnaf[j * 9 + i];
- /* is_neg = (d < 0) ? 1 : 0 */
- is_neg = (d >> (8 * sizeof(int) - 1)) & 1;
- /* d = abs(d) */
- d = (d ^ -is_neg) + is_neg;
- d = (d - 1) >> 1;
- for (k = 0; k < DRADIX / 2; k++) {
- diff = (1 - (-(d ^ k) >> (8 * sizeof(int) - 1))) & 1;
- fiat_secp521r1_selectznz(lut.X, diff, lut.X, lut_cmb[j][k].X);
- fiat_secp521r1_selectznz(lut.Y, diff, lut.Y, lut_cmb[j][k].Y);
- }
- /* negate lut point if digit is negative */
- fiat_secp521r1_carry_opp(out->Y, lut.Y);
- fiat_secp521r1_selectznz(lut.Y, is_neg, lut.Y, out->Y);
- point_add_mixed(&Q, &Q, &lut);
- }
+ if (!b) {
+ PORT_SetError(SEC_ERROR_BAD_KEY);
+ res = SECFailure;
}
-
-#if defined(_MSC_VER)
-#pragma warning(pop)
-#endif
-
- /* conditionally subtract P if the scalar was even */
- fe_copy(lut.X, lut_cmb[0][0].X);
- fiat_secp521r1_carry_opp(lut.Y, lut_cmb[0][0].Y);
- point_add_mixed(&R, &Q, &lut);
- fiat_secp521r1_selectznz(Q.X, scalar[0] & 1, R.X, Q.X);
- fiat_secp521r1_selectznz(Q.Y, scalar[0] & 1, R.Y, Q.Y);
- fiat_secp521r1_selectznz(Q.Z, scalar[0] & 1, R.Z, Q.Z);
-
- /* convert to affine -- NB depends on coordinate system */
- fiat_secp521r1_inv(Q.Z, Q.Z);
- fiat_secp521r1_carry_mul(out->X, Q.X, Q.Z);
- fiat_secp521r1_carry_mul(out->Y, Q.Y, Q.Z);
-}
-
-/*-
- * Wrapper: simultaneous scalar mutiplication.
- * outx, outy := a * G + b * P
- * where P = (inx, iny).
- * Everything is LE byte ordering.
- */
-static void
-point_mul_two_secp521r1(unsigned char outx[66], unsigned char outy[66],
- const unsigned char a[66],
- const unsigned char b[66],
- const unsigned char inx[66],
- const unsigned char iny[66])
-{
- pt_aff_t P;
-
- fiat_secp521r1_from_bytes(P.X, inx);
- fiat_secp521r1_from_bytes(P.Y, iny);
- /* simultaneous scalar multiplication */
- var_smul_wnaf_two(&P, a, b, &P);
-
- fiat_secp521r1_to_bytes(outx, P.X);
- fiat_secp521r1_to_bytes(outy, P.Y);
-}
-
-/*-
- * Wrapper: fixed scalar mutiplication.
- * outx, outy := scalar * G
- * Everything is LE byte ordering.
- */
-static void
-point_mul_g_secp521r1(unsigned char outx[66], unsigned char outy[66],
- const unsigned char scalar[66])
-{
- pt_aff_t P;
-
- /* fixed scmul function */
- fixed_smul_cmb(&P, scalar);
- fiat_secp521r1_to_bytes(outx, P.X);
- fiat_secp521r1_to_bytes(outy, P.Y);
-}
-
-/*-
- * Wrapper: variable point scalar mutiplication.
- * outx, outy := scalar * P
- * where P = (inx, iny).
- * Everything is LE byte ordering.
- */
-static void
-point_mul_secp521r1(unsigned char outx[66], unsigned char outy[66],
- const unsigned char scalar[66],
- const unsigned char inx[66],
- const unsigned char iny[66])
-{
- pt_aff_t P;
-
- fiat_secp521r1_from_bytes(P.X, inx);
- fiat_secp521r1_from_bytes(P.Y, iny);
- /* var scmul function */
- var_smul_rwnaf(&P, scalar, &P);
- fiat_secp521r1_to_bytes(outx, P.X);
- fiat_secp521r1_to_bytes(outy, P.Y);
-}
-
-#undef RADIX
-#include "ecp.h"
-#include "mpi-priv.h"
-#include "mplogic.h"
-
-/*-
- * reverse bytes -- total hack
- */
-#define MP_BE2LE(a) \
- do { \
- unsigned char z_bswap; \
- z_bswap = a[0]; \
- a[0] = a[65]; \
- a[65] = z_bswap; \
- z_bswap = a[1]; \
- a[1] = a[64]; \
- a[64] = z_bswap; \
- z_bswap = a[2]; \
- a[2] = a[63]; \
- a[63] = z_bswap; \
- z_bswap = a[3]; \
- a[3] = a[62]; \
- a[62] = z_bswap; \
- z_bswap = a[4]; \
- a[4] = a[61]; \
- a[61] = z_bswap; \
- z_bswap = a[5]; \
- a[5] = a[60]; \
- a[60] = z_bswap; \
- z_bswap = a[6]; \
- a[6] = a[59]; \
- a[59] = z_bswap; \
- z_bswap = a[7]; \
- a[7] = a[58]; \
- a[58] = z_bswap; \
- z_bswap = a[8]; \
- a[8] = a[57]; \
- a[57] = z_bswap; \
- z_bswap = a[9]; \
- a[9] = a[56]; \
- a[56] = z_bswap; \
- z_bswap = a[10]; \
- a[10] = a[55]; \
- a[55] = z_bswap; \
- z_bswap = a[11]; \
- a[11] = a[54]; \
- a[54] = z_bswap; \
- z_bswap = a[12]; \
- a[12] = a[53]; \
- a[53] = z_bswap; \
- z_bswap = a[13]; \
- a[13] = a[52]; \
- a[52] = z_bswap; \
- z_bswap = a[14]; \
- a[14] = a[51]; \
- a[51] = z_bswap; \
- z_bswap = a[15]; \
- a[15] = a[50]; \
- a[50] = z_bswap; \
- z_bswap = a[16]; \
- a[16] = a[49]; \
- a[49] = z_bswap; \
- z_bswap = a[17]; \
- a[17] = a[48]; \
- a[48] = z_bswap; \
- z_bswap = a[18]; \
- a[18] = a[47]; \
- a[47] = z_bswap; \
- z_bswap = a[19]; \
- a[19] = a[46]; \
- a[46] = z_bswap; \
- z_bswap = a[20]; \
- a[20] = a[45]; \
- a[45] = z_bswap; \
- z_bswap = a[21]; \
- a[21] = a[44]; \
- a[44] = z_bswap; \
- z_bswap = a[22]; \
- a[22] = a[43]; \
- a[43] = z_bswap; \
- z_bswap = a[23]; \
- a[23] = a[42]; \
- a[42] = z_bswap; \
- z_bswap = a[24]; \
- a[24] = a[41]; \
- a[41] = z_bswap; \
- z_bswap = a[25]; \
- a[25] = a[40]; \
- a[40] = z_bswap; \
- z_bswap = a[26]; \
- a[26] = a[39]; \
- a[39] = z_bswap; \
- z_bswap = a[27]; \
- a[27] = a[38]; \
- a[38] = z_bswap; \
- z_bswap = a[28]; \
- a[28] = a[37]; \
- a[37] = z_bswap; \
- z_bswap = a[29]; \
- a[29] = a[36]; \
- a[36] = z_bswap; \
- z_bswap = a[30]; \
- a[30] = a[35]; \
- a[35] = z_bswap; \
- z_bswap = a[31]; \
- a[31] = a[34]; \
- a[34] = z_bswap; \
- z_bswap = a[32]; \
- a[32] = a[33]; \
- a[33] = z_bswap; \
- } while (0)
-
-static mp_err
-point_mul_g_secp521r1_wrap(const mp_int *n, mp_int *out_x,
- mp_int *out_y, const ECGroup *group)
-{
- unsigned char b_x[66];
- unsigned char b_y[66];
- unsigned char b_n[66];
- mp_err res;
-
- ARGCHK(n != NULL && out_x != NULL && out_y != NULL, MP_BADARG);
-
- /* fail on out of range scalars */
- if (mpl_significant_bits(n) > 521 || mp_cmp_z(n) != MP_GT)
- return MP_RANGE;
-
- MP_CHECKOK(mp_to_fixlen_octets(n, b_n, 66));
- MP_BE2LE(b_n);
- point_mul_g_secp521r1(b_x, b_y, b_n);
- MP_BE2LE(b_x);
- MP_BE2LE(b_y);
- MP_CHECKOK(mp_read_unsigned_octets(out_x, b_x, 66));
- MP_CHECKOK(mp_read_unsigned_octets(out_y, b_y, 66));
-
-CLEANUP:
- return res;
-}
-
-static mp_err
-point_mul_secp521r1_wrap(const mp_int *n, const mp_int *in_x,
- const mp_int *in_y, mp_int *out_x,
- mp_int *out_y, const ECGroup *group)
-{
- unsigned char b_x[66];
- unsigned char b_y[66];
- unsigned char b_n[66];
- mp_err res;
-
- ARGCHK(n != NULL && in_x != NULL && in_y != NULL && out_x != NULL &&
- out_y != NULL,
- MP_BADARG);
-
- /* fail on out of range scalars */
- if (mpl_significant_bits(n) > 521 || mp_cmp_z(n) != MP_GT)
- return MP_RANGE;
-
- MP_CHECKOK(mp_to_fixlen_octets(n, b_n, 66));
- MP_CHECKOK(mp_to_fixlen_octets(in_x, b_x, 66));
- MP_CHECKOK(mp_to_fixlen_octets(in_y, b_y, 66));
- MP_BE2LE(b_x);
- MP_BE2LE(b_y);
- MP_BE2LE(b_n);
- point_mul_secp521r1(b_x, b_y, b_n, b_x, b_y);
- MP_BE2LE(b_x);
- MP_BE2LE(b_y);
- MP_CHECKOK(mp_read_unsigned_octets(out_x, b_x, 66));
- MP_CHECKOK(mp_read_unsigned_octets(out_y, b_y, 66));
-
-CLEANUP:
- return res;
-}
-
-static mp_err
-point_mul_two_secp521r1_wrap(const mp_int *n1, const mp_int *n2,
- const mp_int *in_x,
- const mp_int *in_y, mp_int *out_x,
- mp_int *out_y,
- const ECGroup *group)
-{
- unsigned char b_x[66];
- unsigned char b_y[66];
- unsigned char b_n1[66];
- unsigned char b_n2[66];
- mp_err res;
-
- /* If n2 == NULL or 0, this is just a base-point multiplication. */
- if (n2 == NULL || mp_cmp_z(n2) == MP_EQ)
- return point_mul_g_secp521r1_wrap(n1, out_x, out_y, group);
-
- /* If n1 == NULL or 0, this is just an arbitary-point multiplication. */
- if (n1 == NULL || mp_cmp_z(n1) == MP_EQ)
- return point_mul_secp521r1_wrap(n2, in_x, in_y, out_x, out_y, group);
-
- ARGCHK(in_x != NULL && in_y != NULL && out_x != NULL && out_y != NULL,
- MP_BADARG);
-
- /* fail on out of range scalars */
- if (mpl_significant_bits(n1) > 521 || mp_cmp_z(n1) != MP_GT ||
- mpl_significant_bits(n2) > 521 || mp_cmp_z(n2) != MP_GT)
- return MP_RANGE;
-
- MP_CHECKOK(mp_to_fixlen_octets(n1, b_n1, 66));
- MP_CHECKOK(mp_to_fixlen_octets(n2, b_n2, 66));
- MP_CHECKOK(mp_to_fixlen_octets(in_x, b_x, 66));
- MP_CHECKOK(mp_to_fixlen_octets(in_y, b_y, 66));
- MP_BE2LE(b_x);
- MP_BE2LE(b_y);
- MP_BE2LE(b_n1);
- MP_BE2LE(b_n2);
- point_mul_two_secp521r1(b_x, b_y, b_n1, b_n2, b_x, b_y);
- MP_BE2LE(b_x);
- MP_BE2LE(b_y);
- MP_CHECKOK(mp_read_unsigned_octets(out_x, b_x, 66));
- MP_CHECKOK(mp_read_unsigned_octets(out_y, b_y, 66));
-
-CLEANUP:
return res;
}
-mp_err
-ec_group_set_secp521r1(ECGroup *group, ECCurveName name)
-{
- if (name == ECCurve_NIST_P521) {
- group->base_point_mul = &point_mul_g_secp521r1_wrap;
- group->point_mul = &point_mul_secp521r1_wrap;
- group->points_mul = &point_mul_two_secp521r1_wrap;
- }
- return MP_OKAY;
-}
-
-#else /* __SIZEOF_INT128__ */
-
-#include <stdint.h>
-#include <string.h>
-#define LIMB_BITS 32
-#define LIMB_CNT 19
-/* Field elements */
-typedef uint32_t fe_t[LIMB_CNT];
-typedef uint32_t limb_t;
-
-#define fe_copy(d, s) memcpy(d, s, sizeof(fe_t))
-#define fe_set_zero(d) memset(d, 0, sizeof(fe_t))
-
-/* Projective points */
-typedef struct {
- fe_t X;
- fe_t Y;
- fe_t Z;
-} pt_prj_t;
-
-/* Affine points */
-typedef struct {
- fe_t X;
- fe_t Y;
-} pt_aff_t;
-
-/* BEGIN verbatim fiat code https://github.com/mit-plv/fiat-crypto */
-/*-
- * MIT License
- *
- * Copyright (c) 2015-2021 the fiat-crypto authors (see the AUTHORS file).
- * https://github.com/mit-plv/fiat-crypto/blob/master/AUTHORS
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
-
-/* Autogenerated: unsaturated_solinas --static --use-value-barrier secp521r1 32 '(auto)' '2^521 - 1' */
-/* curve description: secp521r1 */
-/* machine_wordsize = 32 (from "32") */
-/* requested operations: (all) */
-/* n = 19 (from "(auto)") */
-/* s-c = 2^521 - [(1, 1)] (from "2^521 - 1") */
-/* tight_bounds_multiplier = 1 (from "") */
-/* */
-/* Computed values: */
-/* carry_chain = [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 0, 1] */
-/* eval z = z[0] + (z[1] << 28) + (z[2] << 55) + (z[3] << 83) + (z[4] << 110) + (z[5] << 138) + (z[6] << 165) + (z[7] << 192) + (z[8] << 220) + (z[9] << 247) + (z[10] << 0x113) + (z[11] << 0x12e) + (z[12] << 0x14a) + (z[13] << 0x165) + (z[14] << 0x180) + (z[15] << 0x19c) + (z[16] << 0x1b7) + (z[17] << 0x1d3) + (z[18] << 0x1ee) */
-/* bytes_eval z = z[0] + (z[1] << 8) + (z[2] << 16) + (z[3] << 24) + (z[4] << 32) + (z[5] << 40) + (z[6] << 48) + (z[7] << 56) + (z[8] << 64) + (z[9] << 72) + (z[10] << 80) + (z[11] << 88) + (z[12] << 96) + (z[13] << 104) + (z[14] << 112) + (z[15] << 120) + (z[16] << 128) + (z[17] << 136) + (z[18] << 144) + (z[19] << 152) + (z[20] << 160) + (z[21] << 168) + (z[22] << 176) + (z[23] << 184) + (z[24] << 192) + (z[25] << 200) + (z[26] << 208) + (z[27] << 216) + (z[28] << 224) + (z[29] << 232) + (z[30] << 240) + (z[31] << 248) + (z[32] << 256) + (z[33] << 0x108) + (z[34] << 0x110) + (z[35] << 0x118) + (z[36] << 0x120) + (z[37] << 0x128) + (z[38] << 0x130) + (z[39] << 0x138) + (z[40] << 0x140) + (z[41] << 0x148) + (z[42] << 0x150) + (z[43] << 0x158) + (z[44] << 0x160) + (z[45] << 0x168) + (z[46] << 0x170) + (z[47] << 0x178) + (z[48] << 0x180) + (z[49] << 0x188) + (z[50] << 0x190) + (z[51] << 0x198) + (z[52] << 0x1a0) + (z[53] << 0x1a8) + (z[54] << 0x1b0) + (z[55] << 0x1b8) + (z[56] << 0x1c0) + (z[57] << 0x1c8) + (z[58] << 0x1d0) + (z[59] << 0x1d8) + (z[60] << 0x1e0) + (z[61] << 0x1e8) + (z[62] << 0x1f0) + (z[63] << 0x1f8) + (z[64] << 2^9) + (z[65] << 0x208) */
-/* balance = [0x1ffffffe, 0xffffffe, 0x1ffffffe, 0xffffffe, 0x1ffffffe, 0xffffffe, 0xffffffe, 0x1ffffffe, 0xffffffe, 0x1ffffffe, 0xffffffe, 0x1ffffffe, 0xffffffe, 0xffffffe, 0x1ffffffe, 0xffffffe, 0x1ffffffe, 0xffffffe, 0xffffffe] */
-
-#include <stdint.h>
-typedef unsigned char fiat_secp521r1_uint1;
-typedef signed char fiat_secp521r1_int1;
-#ifdef __GNUC__
-#define FIAT_SECP521R1_FIAT_INLINE __inline__
-#else
-#define FIAT_SECP521R1_FIAT_INLINE
-#endif
-
-/* The type fiat_secp521r1_loose_field_element is a field element with loose bounds. */
-/* Bounds: [[0x0 ~> 0x30000000], [0x0 ~> 0x18000000], [0x0 ~> 0x30000000], [0x0 ~> 0x18000000], [0x0 ~> 0x30000000], [0x0 ~> 0x18000000], [0x0 ~> 0x18000000], [0x0 ~> 0x30000000], [0x0 ~> 0x18000000], [0x0 ~> 0x30000000], [0x0 ~> 0x18000000], [0x0 ~> 0x30000000], [0x0 ~> 0x18000000], [0x0 ~> 0x18000000], [0x0 ~> 0x30000000], [0x0 ~> 0x18000000], [0x0 ~> 0x30000000], [0x0 ~> 0x18000000], [0x0 ~> 0x18000000]] */
-typedef uint32_t fiat_secp521r1_loose_field_element[19];
-
-/* The type fiat_secp521r1_tight_field_element is a field element with tight bounds. */
-/* Bounds: [[0x0 ~> 0x10000000], [0x0 ~> 0x8000000], [0x0 ~> 0x10000000], [0x0 ~> 0x8000000], [0x0 ~> 0x10000000], [0x0 ~> 0x8000000], [0x0 ~> 0x8000000], [0x0 ~> 0x10000000], [0x0 ~> 0x8000000], [0x0 ~> 0x10000000], [0x0 ~> 0x8000000], [0x0 ~> 0x10000000], [0x0 ~> 0x8000000], [0x0 ~> 0x8000000], [0x0 ~> 0x10000000], [0x0 ~> 0x8000000], [0x0 ~> 0x10000000], [0x0 ~> 0x8000000], [0x0 ~> 0x8000000]] */
-typedef uint32_t fiat_secp521r1_tight_field_element[19];
-
-#if (-1 & 3) != 3
-#error "This code only works on a two's complement system"
-#endif
-
-#if !defined(FIAT_SECP521R1_NO_ASM) && (defined(__GNUC__) || defined(__clang__))
-static __inline__ uint32_t
-fiat_secp521r1_value_barrier_u32(uint32_t a)
-{
- __asm__(""
- : "+r"(a)
- : /* no inputs */);
- return a;
-}
-#else
-#define fiat_secp521r1_value_barrier_u32(x) (x)
-#endif
-
/*
- * The function fiat_secp521r1_addcarryx_u28 is an addition with carry.
- *
- * Postconditions:
- * out1 = (arg1 + arg2 + arg3) mod 2^28
- * out2 = ⌊(arg1 + arg2 + arg3) / 2^28⌋
- *
- * Input Bounds:
- * arg1: [0x0 ~> 0x1]
- * arg2: [0x0 ~> 0xfffffff]
- * arg3: [0x0 ~> 0xfffffff]
- * Output Bounds:
- * out1: [0x0 ~> 0xfffffff]
- * out2: [0x0 ~> 0x1]
+ * Scalar multiplication for P-521.
+ * If P == NULL, the base point is used.
+ * Returns X = k*P
*/
-static void
-fiat_secp521r1_addcarryx_u28(uint32_t *out1,
- fiat_secp521r1_uint1 *out2,
- fiat_secp521r1_uint1 arg1,
- uint32_t arg2, uint32_t arg3)
-{
- uint32_t x1;
- uint32_t x2;
- fiat_secp521r1_uint1 x3;
- x1 = ((arg1 + arg2) + arg3);
- x2 = (x1 & UINT32_C(0xfffffff));
- x3 = (fiat_secp521r1_uint1)(x1 >> 28);
- *out1 = x2;
- *out2 = x3;
-}
-
-/*
- * The function fiat_secp521r1_subborrowx_u28 is a subtraction with borrow.
- *
- * Postconditions:
- * out1 = (-arg1 + arg2 + -arg3) mod 2^28
- * out2 = -⌊(-arg1 + arg2 + -arg3) / 2^28⌋
- *
- * Input Bounds:
- * arg1: [0x0 ~> 0x1]
- * arg2: [0x0 ~> 0xfffffff]
- * arg3: [0x0 ~> 0xfffffff]
- * Output Bounds:
- * out1: [0x0 ~> 0xfffffff]
- * out2: [0x0 ~> 0x1]
- */
-static void
-fiat_secp521r1_subborrowx_u28(uint32_t *out1,
- fiat_secp521r1_uint1 *out2,
- fiat_secp521r1_uint1 arg1,
- uint32_t arg2, uint32_t arg3)
-{
- int32_t x1;
- fiat_secp521r1_int1 x2;
- uint32_t x3;
- x1 = ((int32_t)(arg2 - arg1) - (int32_t)arg3);
- x2 = (fiat_secp521r1_int1)(x1 >> 28);
- x3 = (x1 & UINT32_C(0xfffffff));
- *out1 = x3;
- *out2 = (fiat_secp521r1_uint1)(0x0 - x2);
-}
-
-/*
- * The function fiat_secp521r1_addcarryx_u27 is an addition with carry.
- *
- * Postconditions:
- * out1 = (arg1 + arg2 + arg3) mod 2^27
- * out2 = ⌊(arg1 + arg2 + arg3) / 2^27⌋
- *
- * Input Bounds:
- * arg1: [0x0 ~> 0x1]
- * arg2: [0x0 ~> 0x7ffffff]
- * arg3: [0x0 ~> 0x7ffffff]
- * Output Bounds:
- * out1: [0x0 ~> 0x7ffffff]
- * out2: [0x0 ~> 0x1]
- */
-static void
-fiat_secp521r1_addcarryx_u27(uint32_t *out1,
- fiat_secp521r1_uint1 *out2,
- fiat_secp521r1_uint1 arg1,
- uint32_t arg2, uint32_t arg3)
-{
- uint32_t x1;
- uint32_t x2;
- fiat_secp521r1_uint1 x3;
- x1 = ((arg1 + arg2) + arg3);
- x2 = (x1 & UINT32_C(0x7ffffff));
- x3 = (fiat_secp521r1_uint1)(x1 >> 27);
- *out1 = x2;
- *out2 = x3;
-}
-
-/*
- * The function fiat_secp521r1_subborrowx_u27 is a subtraction with borrow.
- *
- * Postconditions:
- * out1 = (-arg1 + arg2 + -arg3) mod 2^27
- * out2 = -⌊(-arg1 + arg2 + -arg3) / 2^27⌋
- *
- * Input Bounds:
- * arg1: [0x0 ~> 0x1]
- * arg2: [0x0 ~> 0x7ffffff]
- * arg3: [0x0 ~> 0x7ffffff]
- * Output Bounds:
- * out1: [0x0 ~> 0x7ffffff]
- * out2: [0x0 ~> 0x1]
- */
-static void
-fiat_secp521r1_subborrowx_u27(uint32_t *out1,
- fiat_secp521r1_uint1 *out2,
- fiat_secp521r1_uint1 arg1,
- uint32_t arg2, uint32_t arg3)
-{
- int32_t x1;
- fiat_secp521r1_int1 x2;
- uint32_t x3;
- x1 = ((int32_t)(arg2 - arg1) - (int32_t)arg3);
- x2 = (fiat_secp521r1_int1)(x1 >> 27);
- x3 = (x1 & UINT32_C(0x7ffffff));
- *out1 = x3;
- *out2 = (fiat_secp521r1_uint1)(0x0 - x2);
-}
-/*
- * The function fiat_secp521r1_cmovznz_u32 is a single-word conditional move.
- *
- * Postconditions:
- * out1 = (if arg1 = 0 then arg2 else arg3)
- *
- * Input Bounds:
- * arg1: [0x0 ~> 0x1]
- * arg2: [0x0 ~> 0xffffffff]
- * arg3: [0x0 ~> 0xffffffff]
- * Output Bounds:
- * out1: [0x0 ~> 0xffffffff]
- */
-static void
-fiat_secp521r1_cmovznz_u32(uint32_t *out1,
- fiat_secp521r1_uint1 arg1, uint32_t arg2,
- uint32_t arg3)
+SECStatus
+ec_secp521r1_pt_mul(SECItem *X, SECItem *k, SECItem *P)
{
- fiat_secp521r1_uint1 x1;
- uint32_t x2;
- uint32_t x3;
- x1 = (!(!arg1));
- x2 = ((fiat_secp521r1_int1)(0x0 - x1) & UINT32_C(0xffffffff));
- x3 = ((fiat_secp521r1_value_barrier_u32(x2) & arg3) |
- (fiat_secp521r1_value_barrier_u32((~x2)) & arg2));
- *out1 = x3;
-}
+ SECStatus res = SECSuccess;
+ if (!P) {
+ uint8_t derived[132] = { 0 };
-/*
- * The function fiat_secp521r1_carry_mul multiplies two field elements and reduces the result.
- *
- * Postconditions:
- * eval out1 mod m = (eval arg1 * eval arg2) mod m
- *
- */
-static void
-fiat_secp521r1_carry_mul(
- fiat_secp521r1_tight_field_element out1,
- const fiat_secp521r1_loose_field_element arg1,
- const fiat_secp521r1_loose_field_element arg2)
-{
- uint64_t x1;
- uint64_t x2;
- uint64_t x3;
- uint64_t x4;
- uint64_t x5;
- uint64_t x6;
- uint64_t x7;
- uint64_t x8;
- uint64_t x9;
- uint64_t x10;
- uint64_t x11;
- uint64_t x12;
- uint64_t x13;
- uint64_t x14;
- uint64_t x15;
- uint64_t x16;
- uint64_t x17;
- uint64_t x18;
- uint64_t x19;
- uint64_t x20;
- uint64_t x21;
- uint64_t x22;
- uint64_t x23;
- uint64_t x24;
- uint64_t x25;
- uint64_t x26;
- uint64_t x27;
- uint64_t x28;
- uint64_t x29;
- uint64_t x30;
- uint64_t x31;
- uint64_t x32;
- uint64_t x33;
- uint64_t x34;
- uint64_t x35;
- uint64_t x36;
- uint64_t x37;
- uint64_t x38;
- uint64_t x39;
- uint64_t x40;
- uint64_t x41;
- uint64_t x42;
- uint64_t x43;
- uint64_t x44;
- uint64_t x45;
- uint64_t x46;
- uint64_t x47;
- uint64_t x48;
- uint64_t x49;
- uint64_t x50;
- uint64_t x51;
- uint64_t x52;
- uint64_t x53;
- uint64_t x54;
- uint64_t x55;
- uint64_t x56;
- uint64_t x57;
- uint64_t x58;
- uint64_t x59;
- uint64_t x60;
- uint64_t x61;
- uint64_t x62;
- uint64_t x63;
- uint64_t x64;
- uint64_t x65;
- uint64_t x66;
- uint64_t x67;
- uint64_t x68;
- uint64_t x69;
- uint64_t x70;
- uint64_t x71;
- uint64_t x72;
- uint64_t x73;
- uint64_t x74;
- uint64_t x75;
- uint64_t x76;
- uint64_t x77;
- uint64_t x78;
- uint64_t x79;
- uint64_t x80;
- uint64_t x81;
- uint64_t x82;
- uint64_t x83;
- uint64_t x84;
- uint64_t x85;
- uint64_t x86;
- uint64_t x87;
- uint64_t x88;
- uint64_t x89;
- uint64_t x90;
- uint64_t x91;
- uint64_t x92;
- uint64_t x93;
- uint64_t x94;
- uint64_t x95;
- uint64_t x96;
- uint64_t x97;
- uint64_t x98;
- uint64_t x99;
- uint64_t x100;
- uint64_t x101;
- uint64_t x102;
- uint64_t x103;
- uint64_t x104;
- uint64_t x105;
- uint64_t x106;
- uint64_t x107;
- uint64_t x108;
- uint64_t x109;
- uint64_t x110;
- uint64_t x111;
- uint64_t x112;
- uint64_t x113;
- uint64_t x114;
- uint64_t x115;
- uint64_t x116;
- uint64_t x117;
- uint64_t x118;
- uint64_t x119;
- uint64_t x120;
- uint64_t x121;
- uint64_t x122;
- uint64_t x123;
- uint64_t x124;
- uint64_t x125;
- uint64_t x126;
- uint64_t x127;
- uint64_t x128;
- uint64_t x129;
- uint64_t x130;
- uint64_t x131;
- uint64_t x132;
- uint64_t x133;
- uint64_t x134;
- uint64_t x135;
- uint64_t x136;
- uint64_t x137;
- uint64_t x138;
- uint64_t x139;
- uint64_t x140;
- uint64_t x141;
- uint64_t x142;
- uint64_t x143;
- uint64_t x144;
- uint64_t x145;
- uint64_t x146;
- uint64_t x147;
- uint64_t x148;
- uint64_t x149;
- uint64_t x150;
- uint64_t x151;
- uint64_t x152;
- uint64_t x153;
- uint64_t x154;
- uint64_t x155;
- uint64_t x156;
- uint64_t x157;
- uint64_t x158;
- uint64_t x159;
- uint64_t x160;
- uint64_t x161;
- uint64_t x162;
- uint64_t x163;
- uint64_t x164;
- uint64_t x165;
- uint64_t x166;
- uint64_t x167;
- uint64_t x168;
- uint64_t x169;
- uint64_t x170;
- uint64_t x171;
- uint64_t x172;
- uint64_t x173;
- uint64_t x174;
- uint64_t x175;
- uint64_t x176;
- uint64_t x177;
- uint64_t x178;
- uint64_t x179;
- uint64_t x180;
- uint64_t x181;
- uint64_t x182;
- uint64_t x183;
- uint64_t x184;
- uint64_t x185;
- uint64_t x186;
- uint64_t x187;
- uint64_t x188;
- uint64_t x189;
- uint64_t x190;
- uint64_t x191;
- uint64_t x192;
- uint64_t x193;
- uint64_t x194;
- uint64_t x195;
- uint64_t x196;
- uint64_t x197;
- uint64_t x198;
- uint64_t x199;
- uint64_t x200;
- uint64_t x201;
- uint64_t x202;
- uint64_t x203;
- uint64_t x204;
- uint64_t x205;
- uint64_t x206;
- uint64_t x207;
- uint64_t x208;
- uint64_t x209;
- uint64_t x210;
- uint64_t x211;
- uint64_t x212;
- uint64_t x213;
- uint64_t x214;
- uint64_t x215;
- uint64_t x216;
- uint64_t x217;
- uint64_t x218;
- uint64_t x219;
- uint64_t x220;
- uint64_t x221;
- uint64_t x222;
- uint64_t x223;
- uint64_t x224;
- uint64_t x225;
- uint64_t x226;
- uint64_t x227;
- uint64_t x228;
- uint64_t x229;
- uint64_t x230;
- uint64_t x231;
- uint64_t x232;
- uint64_t x233;
- uint64_t x234;
- uint64_t x235;
- uint64_t x236;
- uint64_t x237;
- uint64_t x238;
- uint64_t x239;
- uint64_t x240;
- uint64_t x241;
- uint64_t x242;
- uint64_t x243;
- uint64_t x244;
- uint64_t x245;
- uint64_t x246;
- uint64_t x247;
- uint64_t x248;
- uint64_t x249;
- uint64_t x250;
- uint64_t x251;
- uint64_t x252;
- uint64_t x253;
- uint64_t x254;
- uint64_t x255;
- uint64_t x256;
- uint64_t x257;
- uint64_t x258;
- uint64_t x259;
- uint64_t x260;
- uint64_t x261;
- uint64_t x262;
- uint64_t x263;
- uint64_t x264;
- uint64_t x265;
- uint64_t x266;
- uint64_t x267;
- uint64_t x268;
- uint64_t x269;
- uint64_t x270;
- uint64_t x271;
- uint64_t x272;
- uint64_t x273;
- uint64_t x274;
- uint64_t x275;
- uint64_t x276;
- uint64_t x277;
- uint64_t x278;
- uint64_t x279;
- uint64_t x280;
- uint64_t x281;
- uint64_t x282;
- uint64_t x283;
- uint64_t x284;
- uint64_t x285;
- uint64_t x286;
- uint64_t x287;
- uint64_t x288;
- uint64_t x289;
- uint64_t x290;
- uint64_t x291;
- uint64_t x292;
- uint64_t x293;
- uint64_t x294;
- uint64_t x295;
- uint64_t x296;
- uint64_t x297;
- uint64_t x298;
- uint64_t x299;
- uint64_t x300;
- uint64_t x301;
- uint64_t x302;
- uint64_t x303;
- uint64_t x304;
- uint64_t x305;
- uint64_t x306;
- uint64_t x307;
- uint64_t x308;
- uint64_t x309;
- uint64_t x310;
- uint64_t x311;
- uint64_t x312;
- uint64_t x313;
- uint64_t x314;
- uint64_t x315;
- uint64_t x316;
- uint64_t x317;
- uint64_t x318;
- uint64_t x319;
- uint64_t x320;
- uint64_t x321;
- uint64_t x322;
- uint64_t x323;
- uint64_t x324;
- uint64_t x325;
- uint64_t x326;
- uint64_t x327;
- uint64_t x328;
- uint64_t x329;
- uint64_t x330;
- uint64_t x331;
- uint64_t x332;
- uint64_t x333;
- uint64_t x334;
- uint64_t x335;
- uint64_t x336;
- uint64_t x337;
- uint64_t x338;
- uint64_t x339;
- uint64_t x340;
- uint64_t x341;
- uint64_t x342;
- uint64_t x343;
- uint64_t x344;
- uint64_t x345;
- uint64_t x346;
- uint64_t x347;
- uint64_t x348;
- uint64_t x349;
- uint64_t x350;
- uint64_t x351;
- uint64_t x352;
- uint64_t x353;
- uint64_t x354;
- uint64_t x355;
- uint64_t x356;
- uint64_t x357;
- uint64_t x358;
- uint64_t x359;
- uint64_t x360;
- uint64_t x361;
- uint64_t x362;
- uint64_t x363;
- uint32_t x364;
- uint64_t x365;
- uint64_t x366;
- uint64_t x367;
- uint64_t x368;
- uint64_t x369;
- uint64_t x370;
- uint64_t x371;
- uint64_t x372;
- uint64_t x373;
- uint64_t x374;
- uint64_t x375;
- uint64_t x376;
- uint64_t x377;
- uint64_t x378;
- uint64_t x379;
- uint64_t x380;
- uint64_t x381;
- uint64_t x382;
- uint64_t x383;
- uint64_t x384;
- uint32_t x385;
- uint64_t x386;
- uint64_t x387;
- uint32_t x388;
- uint64_t x389;
- uint64_t x390;
- uint32_t x391;
- uint64_t x392;
- uint64_t x393;
- uint32_t x394;
- uint64_t x395;
- uint64_t x396;
- uint32_t x397;
- uint64_t x398;
- uint64_t x399;
- uint32_t x400;
- uint64_t x401;
- uint64_t x402;
- uint32_t x403;
- uint64_t x404;
- uint64_t x405;
- uint32_t x406;
- uint64_t x407;
- uint64_t x408;
- uint32_t x409;
- uint64_t x410;
- uint64_t x411;
- uint32_t x412;
- uint64_t x413;
- uint64_t x414;
- uint32_t x415;
- uint64_t x416;
- uint64_t x417;
- uint32_t x418;
- uint64_t x419;
- uint64_t x420;
- uint32_t x421;
- uint64_t x422;
- uint64_t x423;
- uint32_t x424;
- uint64_t x425;
- uint64_t x426;
- uint32_t x427;
- uint64_t x428;
- uint64_t x429;
- uint32_t x430;
- uint64_t x431;
- uint64_t x432;
- uint32_t x433;
- uint64_t x434;
- uint64_t x435;
- uint32_t x436;
- uint64_t x437;
- uint32_t x438;
- uint32_t x439;
- uint32_t x440;
- fiat_secp521r1_uint1 x441;
- uint32_t x442;
- uint32_t x443;
- x1 = ((uint64_t)(arg1[18]) * (arg2[18]));
- x2 = ((uint64_t)(arg1[18]) * ((arg2[17]) * 0x2));
- x3 = ((uint64_t)(arg1[18]) * (arg2[16]));
- x4 = ((uint64_t)(arg1[18]) * ((arg2[15]) * 0x2));
- x5 = ((uint64_t)(arg1[18]) * (arg2[14]));
- x6 = ((uint64_t)(arg1[18]) * (arg2[13]));
- x7 = ((uint64_t)(arg1[18]) * ((arg2[12]) * 0x2));
- x8 = ((uint64_t)(arg1[18]) * (arg2[11]));
- x9 = ((uint64_t)(arg1[18]) * ((arg2[10]) * 0x2));
- x10 = ((uint64_t)(arg1[18]) * (arg2[9]));
- x11 = ((uint64_t)(arg1[18]) * ((arg2[8]) * 0x2));
- x12 = ((uint64_t)(arg1[18]) * (arg2[7]));
- x13 = ((uint64_t)(arg1[18]) * (arg2[6]));
- x14 = ((uint64_t)(arg1[18]) * ((arg2[5]) * 0x2));
- x15 = ((uint64_t)(arg1[18]) * (arg2[4]));
- x16 = ((uint64_t)(arg1[18]) * ((arg2[3]) * 0x2));
- x17 = ((uint64_t)(arg1[18]) * (arg2[2]));
- x18 = ((uint64_t)(arg1[18]) * ((arg2[1]) * 0x2));
- x19 = ((uint64_t)(arg1[17]) * ((arg2[18]) * 0x2));
- x20 = ((uint64_t)(arg1[17]) * ((arg2[17]) * 0x2));
- x21 = ((uint64_t)(arg1[17]) * ((arg2[16]) * 0x2));
- x22 = ((uint64_t)(arg1[17]) * ((arg2[15]) * 0x2));
- x23 = ((uint64_t)(arg1[17]) * (arg2[14]));
- x24 = ((uint64_t)(arg1[17]) * ((arg2[13]) * 0x2));
- x25 = ((uint64_t)(arg1[17]) * ((arg2[12]) * 0x2));
- x26 = ((uint64_t)(arg1[17]) * ((arg2[11]) * 0x2));
- x27 = ((uint64_t)(arg1[17]) * ((arg2[10]) * 0x2));
- x28 = ((uint64_t)(arg1[17]) * ((arg2[9]) * 0x2));
- x29 = ((uint64_t)(arg1[17]) * ((arg2[8]) * 0x2));
- x30 = ((uint64_t)(arg1[17]) * (arg2[7]));
- x31 = ((uint64_t)(arg1[17]) * ((arg2[6]) * 0x2));
- x32 = ((uint64_t)(arg1[17]) * ((arg2[5]) * 0x2));
- x33 = ((uint64_t)(arg1[17]) * ((arg2[4]) * 0x2));
- x34 = ((uint64_t)(arg1[17]) * ((arg2[3]) * 0x2));
- x35 = ((uint64_t)(arg1[17]) * ((arg2[2]) * 0x2));
- x36 = ((uint64_t)(arg1[16]) * (arg2[18]));
- x37 = ((uint64_t)(arg1[16]) * ((arg2[17]) * 0x2));
- x38 = ((uint64_t)(arg1[16]) * (arg2[16]));
- x39 = ((uint64_t)(arg1[16]) * (arg2[15]));
- x40 = ((uint64_t)(arg1[16]) * (arg2[14]));
- x41 = ((uint64_t)(arg1[16]) * (arg2[13]));
- x42 = ((uint64_t)(arg1[16]) * ((arg2[12]) * 0x2));
- x43 = ((uint64_t)(arg1[16]) * (arg2[11]));
- x44 = ((uint64_t)(arg1[16]) * ((arg2[10]) * 0x2));
- x45 = ((uint64_t)(arg1[16]) * (arg2[9]));
- x46 = ((uint64_t)(arg1[16]) * (arg2[8]));
- x47 = ((uint64_t)(arg1[16]) * (arg2[7]));
- x48 = ((uint64_t)(arg1[16]) * (arg2[6]));
- x49 = ((uint64_t)(arg1[16]) * ((arg2[5]) * 0x2));
- x50 = ((uint64_t)(arg1[16]) * (arg2[4]));
- x51 = ((uint64_t)(arg1[16]) * ((arg2[3]) * 0x2));
- x52 = ((uint64_t)(arg1[15]) * ((arg2[18]) * 0x2));
- x53 = ((uint64_t)(arg1[15]) * ((arg2[17]) * 0x2));
- x54 = ((uint64_t)(arg1[15]) * (arg2[16]));
- x55 = ((uint64_t)(arg1[15]) * ((arg2[15]) * 0x2));
- x56 = ((uint64_t)(arg1[15]) * (arg2[14]));
- x57 = ((uint64_t)(arg1[15]) * ((arg2[13]) * 0x2));
- x58 = ((uint64_t)(arg1[15]) * ((arg2[12]) * 0x2));
- x59 = ((uint64_t)(arg1[15]) * ((arg2[11]) * 0x2));
- x60 = ((uint64_t)(arg1[15]) * ((arg2[10]) * 0x2));
- x61 = ((uint64_t)(arg1[15]) * (arg2[9]));
- x62 = ((uint64_t)(arg1[15]) * ((arg2[8]) * 0x2));
- x63 = ((uint64_t)(arg1[15]) * (arg2[7]));
- x64 = ((uint64_t)(arg1[15]) * ((arg2[6]) * 0x2));
- x65 = ((uint64_t)(arg1[15]) * ((arg2[5]) * 0x2));
- x66 = ((uint64_t)(arg1[15]) * ((arg2[4]) * 0x2));
- x67 = ((uint64_t)(arg1[14]) * (arg2[18]));
- x68 = ((uint64_t)(arg1[14]) * (arg2[17]));
- x69 = ((uint64_t)(arg1[14]) * (arg2[16]));
- x70 = ((uint64_t)(arg1[14]) * (arg2[15]));
- x71 = ((uint64_t)(arg1[14]) * (arg2[14]));
- x72 = ((uint64_t)(arg1[14]) * (arg2[13]));
- x73 = ((uint64_t)(arg1[14]) * ((arg2[12]) * 0x2));
- x74 = ((uint64_t)(arg1[14]) * (arg2[11]));
- x75 = ((uint64_t)(arg1[14]) * (arg2[10]));
- x76 = ((uint64_t)(arg1[14]) * (arg2[9]));
- x77 = ((uint64_t)(arg1[14]) * (arg2[8]));
- x78 = ((uint64_t)(arg1[14]) * (arg2[7]));
- x79 = ((uint64_t)(arg1[14]) * (arg2[6]));
- x80 = ((uint64_t)(arg1[14]) * ((arg2[5]) * 0x2));
- x81 = ((uint64_t)(arg1[13]) * (arg2[18]));
- x82 = ((uint64_t)(arg1[13]) * ((arg2[17]) * 0x2));
- x83 = ((uint64_t)(arg1[13]) * (arg2[16]));
- x84 = ((uint64_t)(arg1[13]) * ((arg2[15]) * 0x2));
- x85 = ((uint64_t)(arg1[13]) * (arg2[14]));
- x86 = ((uint64_t)(arg1[13]) * ((arg2[13]) * 0x2));
- x87 = ((uint64_t)(arg1[13]) * ((arg2[12]) * 0x2));
- x88 = ((uint64_t)(arg1[13]) * (arg2[11]));
- x89 = ((uint64_t)(arg1[13]) * ((arg2[10]) * 0x2));
- x90 = ((uint64_t)(arg1[13]) * (arg2[9]));
- x91 = ((uint64_t)(arg1[13]) * ((arg2[8]) * 0x2));
- x92 = ((uint64_t)(arg1[13]) * (arg2[7]));
- x93 = ((uint64_t)(arg1[13]) * ((arg2[6]) * 0x2));
- x94 = ((uint64_t)(arg1[12]) * ((arg2[18]) * 0x2));
- x95 = ((uint64_t)(arg1[12]) * ((arg2[17]) * 0x2));
- x96 = ((uint64_t)(arg1[12]) * ((arg2[16]) * 0x2));
- x97 = ((uint64_t)(arg1[12]) * ((arg2[15]) * 0x2));
- x98 = ((uint64_t)(arg1[12]) * ((arg2[14]) * 0x2));
- x99 = ((uint64_t)(arg1[12]) * ((arg2[13]) * 0x2));
- x100 = ((uint64_t)(arg1[12]) * ((arg2[12]) * 0x2));
- x101 = ((uint64_t)(arg1[12]) * ((arg2[11]) * 0x2));
- x102 = ((uint64_t)(arg1[12]) * ((arg2[10]) * 0x2));
- x103 = ((uint64_t)(arg1[12]) * ((arg2[9]) * 0x2));
- x104 = ((uint64_t)(arg1[12]) * ((arg2[8]) * 0x2));
- x105 = ((uint64_t)(arg1[12]) * ((arg2[7]) * 0x2));
- x106 = ((uint64_t)(arg1[11]) * (arg2[18]));
- x107 = ((uint64_t)(arg1[11]) * ((arg2[17]) * 0x2));
- x108 = ((uint64_t)(arg1[11]) * (arg2[16]));
- x109 = ((uint64_t)(arg1[11]) * ((arg2[15]) * 0x2));
- x110 = ((uint64_t)(arg1[11]) * (arg2[14]));
- x111 = ((uint64_t)(arg1[11]) * (arg2[13]));
- x112 = ((uint64_t)(arg1[11]) * ((arg2[12]) * 0x2));
- x113 = ((uint64_t)(arg1[11]) * (arg2[11]));
- x114 = ((uint64_t)(arg1[11]) * ((arg2[10]) * 0x2));
- x115 = ((uint64_t)(arg1[11]) * (arg2[9]));
- x116 = ((uint64_t)(arg1[11]) * ((arg2[8]) * 0x2));
- x117 = ((uint64_t)(arg1[10]) * ((arg2[18]) * 0x2));
- x118 = ((uint64_t)(arg1[10]) * ((arg2[17]) * 0x2));
- x119 = ((uint64_t)(arg1[10]) * ((arg2[16]) * 0x2));
- x120 = ((uint64_t)(arg1[10]) * ((arg2[15]) * 0x2));
- x121 = ((uint64_t)(arg1[10]) * (arg2[14]));
- x122 = ((uint64_t)(arg1[10]) * ((arg2[13]) * 0x2));
- x123 = ((uint64_t)(arg1[10]) * ((arg2[12]) * 0x2));
- x124 = ((uint64_t)(arg1[10]) * ((arg2[11]) * 0x2));
- x125 = ((uint64_t)(arg1[10]) * ((arg2[10]) * 0x2));
- x126 = ((uint64_t)(arg1[10]) * ((arg2[9]) * 0x2));
- x127 = ((uint64_t)(arg1[9]) * (arg2[18]));
- x128 = ((uint64_t)(arg1[9]) * ((arg2[17]) * 0x2));
- x129 = ((uint64_t)(arg1[9]) * (arg2[16]));
- x130 = ((uint64_t)(arg1[9]) * (arg2[15]));
- x131 = ((uint64_t)(arg1[9]) * (arg2[14]));
- x132 = ((uint64_t)(arg1[9]) * (arg2[13]));
- x133 = ((uint64_t)(arg1[9]) * ((arg2[12]) * 0x2));
- x134 = ((uint64_t)(arg1[9]) * (arg2[11]));
- x135 = ((uint64_t)(arg1[9]) * ((arg2[10]) * 0x2));
- x136 = ((uint64_t)(arg1[8]) * ((arg2[18]) * 0x2));
- x137 = ((uint64_t)(arg1[8]) * ((arg2[17]) * 0x2));
- x138 = ((uint64_t)(arg1[8]) * (arg2[16]));
- x139 = ((uint64_t)(arg1[8]) * ((arg2[15]) * 0x2));
- x140 = ((uint64_t)(arg1[8]) * (arg2[14]));
- x141 = ((uint64_t)(arg1[8]) * ((arg2[13]) * 0x2));
- x142 = ((uint64_t)(arg1[8]) * ((arg2[12]) * 0x2));
- x143 = ((uint64_t)(arg1[8]) * ((arg2[11]) * 0x2));
- x144 = ((uint64_t)(arg1[7]) * (arg2[18]));
- x145 = ((uint64_t)(arg1[7]) * (arg2[17]));
- x146 = ((uint64_t)(arg1[7]) * (arg2[16]));
- x147 = ((uint64_t)(arg1[7]) * (arg2[15]));
- x148 = ((uint64_t)(arg1[7]) * (arg2[14]));
- x149 = ((uint64_t)(arg1[7]) * (arg2[13]));
- x150 = ((uint64_t)(arg1[7]) * ((arg2[12]) * 0x2));
- x151 = ((uint64_t)(arg1[6]) * (arg2[18]));
- x152 = ((uint64_t)(arg1[6]) * ((arg2[17]) * 0x2));
- x153 = ((uint64_t)(arg1[6]) * (arg2[16]));
- x154 = ((uint64_t)(arg1[6]) * ((arg2[15]) * 0x2));
- x155 = ((uint64_t)(arg1[6]) * (arg2[14]));
- x156 = ((uint64_t)(arg1[6]) * ((arg2[13]) * 0x2));
- x157 = ((uint64_t)(arg1[5]) * ((arg2[18]) * 0x2));
- x158 = ((uint64_t)(arg1[5]) * ((arg2[17]) * 0x2));
- x159 = ((uint64_t)(arg1[5]) * ((arg2[16]) * 0x2));
- x160 = ((uint64_t)(arg1[5]) * ((arg2[15]) * 0x2));
- x161 = ((uint64_t)(arg1[5]) * ((arg2[14]) * 0x2));
- x162 = ((uint64_t)(arg1[4]) * (arg2[18]));
- x163 = ((uint64_t)(arg1[4]) * ((arg2[17]) * 0x2));
- x164 = ((uint64_t)(arg1[4]) * (arg2[16]));
- x165 = ((uint64_t)(arg1[4]) * ((arg2[15]) * 0x2));
- x166 = ((uint64_t)(arg1[3]) * ((arg2[18]) * 0x2));
- x167 = ((uint64_t)(arg1[3]) * ((arg2[17]) * 0x2));
- x168 = ((uint64_t)(arg1[3]) * ((arg2[16]) * 0x2));
- x169 = ((uint64_t)(arg1[2]) * (arg2[18]));
- x170 = ((uint64_t)(arg1[2]) * ((arg2[17]) * 0x2));
- x171 = ((uint64_t)(arg1[1]) * ((arg2[18]) * 0x2));
- x172 = ((uint64_t)(arg1[18]) * (arg2[0]));
- x173 = ((uint64_t)(arg1[17]) * ((arg2[1]) * 0x2));
- x174 = ((uint64_t)(arg1[17]) * (arg2[0]));
- x175 = ((uint64_t)(arg1[16]) * (arg2[2]));
- x176 = ((uint64_t)(arg1[16]) * (arg2[1]));
- x177 = ((uint64_t)(arg1[16]) * (arg2[0]));
- x178 = ((uint64_t)(arg1[15]) * ((arg2[3]) * 0x2));
- x179 = ((uint64_t)(arg1[15]) * (arg2[2]));
- x180 = ((uint64_t)(arg1[15]) * ((arg2[1]) * 0x2));
- x181 = ((uint64_t)(arg1[15]) * (arg2[0]));
- x182 = ((uint64_t)(arg1[14]) * (arg2[4]));
- x183 = ((uint64_t)(arg1[14]) * (arg2[3]));
- x184 = ((uint64_t)(arg1[14]) * (arg2[2]));
- x185 = ((uint64_t)(arg1[14]) * (arg2[1]));
- x186 = ((uint64_t)(arg1[14]) * (arg2[0]));
- x187 = ((uint64_t)(arg1[13]) * ((arg2[5]) * 0x2));
- x188 = ((uint64_t)(arg1[13]) * (arg2[4]));
- x189 = ((uint64_t)(arg1[13]) * ((arg2[3]) * 0x2));
- x190 = ((uint64_t)(arg1[13]) * (arg2[2]));
- x191 = ((uint64_t)(arg1[13]) * ((arg2[1]) * 0x2));
- x192 = ((uint64_t)(arg1[13]) * (arg2[0]));
- x193 = ((uint64_t)(arg1[12]) * ((arg2[6]) * 0x2));
- x194 = ((uint64_t)(arg1[12]) * ((arg2[5]) * 0x2));
- x195 = ((uint64_t)(arg1[12]) * ((arg2[4]) * 0x2));
- x196 = ((uint64_t)(arg1[12]) * ((arg2[3]) * 0x2));
- x197 = ((uint64_t)(arg1[12]) * ((arg2[2]) * 0x2));
- x198 = ((uint64_t)(arg1[12]) * ((arg2[1]) * 0x2));
- x199 = ((uint64_t)(arg1[12]) * (arg2[0]));
- x200 = ((uint64_t)(arg1[11]) * (arg2[7]));
- x201 = ((uint64_t)(arg1[11]) * (arg2[6]));
- x202 = ((uint64_t)(arg1[11]) * ((arg2[5]) * 0x2));
- x203 = ((uint64_t)(arg1[11]) * (arg2[4]));
- x204 = ((uint64_t)(arg1[11]) * ((arg2[3]) * 0x2));
- x205 = ((uint64_t)(arg1[11]) * (arg2[2]));
- x206 = ((uint64_t)(arg1[11]) * (arg2[1]));
- x207 = ((uint64_t)(arg1[11]) * (arg2[0]));
- x208 = ((uint64_t)(arg1[10]) * ((arg2[8]) * 0x2));
- x209 = ((uint64_t)(arg1[10]) * (arg2[7]));
- x210 = ((uint64_t)(arg1[10]) * ((arg2[6]) * 0x2));
- x211 = ((uint64_t)(arg1[10]) * ((arg2[5]) * 0x2));
- x212 = ((uint64_t)(arg1[10]) * ((arg2[4]) * 0x2));
- x213 = ((uint64_t)(arg1[10]) * ((arg2[3]) * 0x2));
- x214 = ((uint64_t)(arg1[10]) * (arg2[2]));
- x215 = ((uint64_t)(arg1[10]) * ((arg2[1]) * 0x2));
- x216 = ((uint64_t)(arg1[10]) * (arg2[0]));
- x217 = ((uint64_t)(arg1[9]) * (arg2[9]));
- x218 = ((uint64_t)(arg1[9]) * (arg2[8]));
- x219 = ((uint64_t)(arg1[9]) * (arg2[7]));
- x220 = ((uint64_t)(arg1[9]) * (arg2[6]));
- x221 = ((uint64_t)(arg1[9]) * ((arg2[5]) * 0x2));
- x222 = ((uint64_t)(arg1[9]) * (arg2[4]));
- x223 = ((uint64_t)(arg1[9]) * (arg2[3]));
- x224 = ((uint64_t)(arg1[9]) * (arg2[2]));
- x225 = ((uint64_t)(arg1[9]) * (arg2[1]));
- x226 = ((uint64_t)(arg1[9]) * (arg2[0]));
- x227 = ((uint64_t)(arg1[8]) * ((arg2[10]) * 0x2));
- x228 = ((uint64_t)(arg1[8]) * (arg2[9]));
- x229 = ((uint64_t)(arg1[8]) * ((arg2[8]) * 0x2));
- x230 = ((uint64_t)(arg1[8]) * (arg2[7]));
- x231 = ((uint64_t)(arg1[8]) * ((arg2[6]) * 0x2));
- x232 = ((uint64_t)(arg1[8]) * ((arg2[5]) * 0x2));
- x233 = ((uint64_t)(arg1[8]) * (arg2[4]));
- x234 = ((uint64_t)(arg1[8]) * ((arg2[3]) * 0x2));
- x235 = ((uint64_t)(arg1[8]) * (arg2[2]));
- x236 = ((uint64_t)(arg1[8]) * ((arg2[1]) * 0x2));
- x237 = ((uint64_t)(arg1[8]) * (arg2[0]));
- x238 = ((uint64_t)(arg1[7]) * (arg2[11]));
- x239 = ((uint64_t)(arg1[7]) * (arg2[10]));
- x240 = ((uint64_t)(arg1[7]) * (arg2[9]));
- x241 = ((uint64_t)(arg1[7]) * (arg2[8]));
- x242 = ((uint64_t)(arg1[7]) * (arg2[7]));
- x243 = ((uint64_t)(arg1[7]) * (arg2[6]));
- x244 = ((uint64_t)(arg1[7]) * (arg2[5]));
- x245 = ((uint64_t)(arg1[7]) * (arg2[4]));
- x246 = ((uint64_t)(arg1[7]) * (arg2[3]));
- x247 = ((uint64_t)(arg1[7]) * (arg2[2]));
- x248 = ((uint64_t)(arg1[7]) * (arg2[1]));
- x249 = ((uint64_t)(arg1[7]) * (arg2[0]));
- x250 = ((uint64_t)(arg1[6]) * ((arg2[12]) * 0x2));
- x251 = ((uint64_t)(arg1[6]) * (arg2[11]));
- x252 = ((uint64_t)(arg1[6]) * ((arg2[10]) * 0x2));
- x253 = ((uint64_t)(arg1[6]) * (arg2[9]));
- x254 = ((uint64_t)(arg1[6]) * ((arg2[8]) * 0x2));
- x255 = ((uint64_t)(arg1[6]) * (arg2[7]));
- x256 = ((uint64_t)(arg1[6]) * (arg2[6]));
- x257 = ((uint64_t)(arg1[6]) * ((arg2[5]) * 0x2));
- x258 = ((uint64_t)(arg1[6]) * (arg2[4]));
- x259 = ((uint64_t)(arg1[6]) * ((arg2[3]) * 0x2));
- x260 = ((uint64_t)(arg1[6]) * (arg2[2]));
- x261 = ((uint64_t)(arg1[6]) * ((arg2[1]) * 0x2));
- x262 = ((uint64_t)(arg1[6]) * (arg2[0]));
- x263 = ((uint64_t)(arg1[5]) * ((arg2[13]) * 0x2));
- x264 = ((uint64_t)(arg1[5]) * ((arg2[12]) * 0x2));
- x265 = ((uint64_t)(arg1[5]) * ((arg2[11]) * 0x2));
- x266 = ((uint64_t)(arg1[5]) * ((arg2[10]) * 0x2));
- x267 = ((uint64_t)(arg1[5]) * ((arg2[9]) * 0x2));
- x268 = ((uint64_t)(arg1[5]) * ((arg2[8]) * 0x2));
- x269 = ((uint64_t)(arg1[5]) * (arg2[7]));
- x270 = ((uint64_t)(arg1[5]) * ((arg2[6]) * 0x2));
- x271 = ((uint64_t)(arg1[5]) * ((arg2[5]) * 0x2));
- x272 = ((uint64_t)(arg1[5]) * ((arg2[4]) * 0x2));
- x273 = ((uint64_t)(arg1[5]) * ((arg2[3]) * 0x2));
- x274 = ((uint64_t)(arg1[5]) * ((arg2[2]) * 0x2));
- x275 = ((uint64_t)(arg1[5]) * ((arg2[1]) * 0x2));
- x276 = ((uint64_t)(arg1[5]) * (arg2[0]));
- x277 = ((uint64_t)(arg1[4]) * (arg2[14]));
- x278 = ((uint64_t)(arg1[4]) * (arg2[13]));
- x279 = ((uint64_t)(arg1[4]) * ((arg2[12]) * 0x2));
- x280 = ((uint64_t)(arg1[4]) * (arg2[11]));
- x281 = ((uint64_t)(arg1[4]) * ((arg2[10]) * 0x2));
- x282 = ((uint64_t)(arg1[4]) * (arg2[9]));
- x283 = ((uint64_t)(arg1[4]) * (arg2[8]));
- x284 = ((uint64_t)(arg1[4]) * (arg2[7]));
- x285 = ((uint64_t)(arg1[4]) * (arg2[6]));
- x286 = ((uint64_t)(arg1[4]) * ((arg2[5]) * 0x2));
- x287 = ((uint64_t)(arg1[4]) * (arg2[4]));
- x288 = ((uint64_t)(arg1[4]) * ((arg2[3]) * 0x2));
- x289 = ((uint64_t)(arg1[4]) * (arg2[2]));
- x290 = ((uint64_t)(arg1[4]) * (arg2[1]));
- x291 = ((uint64_t)(arg1[4]) * (arg2[0]));
- x292 = ((uint64_t)(arg1[3]) * ((arg2[15]) * 0x2));
- x293 = ((uint64_t)(arg1[3]) * (arg2[14]));
- x294 = ((uint64_t)(arg1[3]) * ((arg2[13]) * 0x2));
- x295 = ((uint64_t)(arg1[3]) * ((arg2[12]) * 0x2));
- x296 = ((uint64_t)(arg1[3]) * ((arg2[11]) * 0x2));
- x297 = ((uint64_t)(arg1[3]) * ((arg2[10]) * 0x2));
- x298 = ((uint64_t)(arg1[3]) * (arg2[9]));
- x299 = ((uint64_t)(arg1[3]) * ((arg2[8]) * 0x2));
- x300 = ((uint64_t)(arg1[3]) * (arg2[7]));
- x301 = ((uint64_t)(arg1[3]) * ((arg2[6]) * 0x2));
- x302 = ((uint64_t)(arg1[3]) * ((arg2[5]) * 0x2));
- x303 = ((uint64_t)(arg1[3]) * ((arg2[4]) * 0x2));
- x304 = ((uint64_t)(arg1[3]) * ((arg2[3]) * 0x2));
- x305 = ((uint64_t)(arg1[3]) * (arg2[2]));
- x306 = ((uint64_t)(arg1[3]) * ((arg2[1]) * 0x2));
- x307 = ((uint64_t)(arg1[3]) * (arg2[0]));
- x308 = ((uint64_t)(arg1[2]) * (arg2[16]));
- x309 = ((uint64_t)(arg1[2]) * (arg2[15]));
- x310 = ((uint64_t)(arg1[2]) * (arg2[14]));
- x311 = ((uint64_t)(arg1[2]) * (arg2[13]));
- x312 = ((uint64_t)(arg1[2]) * ((arg2[12]) * 0x2));
- x313 = ((uint64_t)(arg1[2]) * (arg2[11]));
- x314 = ((uint64_t)(arg1[2]) * (arg2[10]));
- x315 = ((uint64_t)(arg1[2]) * (arg2[9]));
- x316 = ((uint64_t)(arg1[2]) * (arg2[8]));
- x317 = ((uint64_t)(arg1[2]) * (arg2[7]));
- x318 = ((uint64_t)(arg1[2]) * (arg2[6]));
- x319 = ((uint64_t)(arg1[2]) * ((arg2[5]) * 0x2));
- x320 = ((uint64_t)(arg1[2]) * (arg2[4]));
- x321 = ((uint64_t)(arg1[2]) * (arg2[3]));
- x322 = ((uint64_t)(arg1[2]) * (arg2[2]));
- x323 = ((uint64_t)(arg1[2]) * (arg2[1]));
- x324 = ((uint64_t)(arg1[2]) * (arg2[0]));
- x325 = ((uint64_t)(arg1[1]) * ((arg2[17]) * 0x2));
- x326 = ((uint64_t)(arg1[1]) * (arg2[16]));
- x327 = ((uint64_t)(arg1[1]) * ((arg2[15]) * 0x2));
- x328 = ((uint64_t)(arg1[1]) * (arg2[14]));
- x329 = ((uint64_t)(arg1[1]) * ((arg2[13]) * 0x2));
- x330 = ((uint64_t)(arg1[1]) * ((arg2[12]) * 0x2));
- x331 = ((uint64_t)(arg1[1]) * (arg2[11]));
- x332 = ((uint64_t)(arg1[1]) * ((arg2[10]) * 0x2));
- x333 = ((uint64_t)(arg1[1]) * (arg2[9]));
- x334 = ((uint64_t)(arg1[1]) * ((arg2[8]) * 0x2));
- x335 = ((uint64_t)(arg1[1]) * (arg2[7]));
- x336 = ((uint64_t)(arg1[1]) * ((arg2[6]) * 0x2));
- x337 = ((uint64_t)(arg1[1]) * ((arg2[5]) * 0x2));
- x338 = ((uint64_t)(arg1[1]) * (arg2[4]));
- x339 = ((uint64_t)(arg1[1]) * ((arg2[3]) * 0x2));
- x340 = ((uint64_t)(arg1[1]) * (arg2[2]));
- x341 = ((uint64_t)(arg1[1]) * ((arg2[1]) * 0x2));
- x342 = ((uint64_t)(arg1[1]) * (arg2[0]));
- x343 = ((uint64_t)(arg1[0]) * (arg2[18]));
- x344 = ((uint64_t)(arg1[0]) * (arg2[17]));
- x345 = ((uint64_t)(arg1[0]) * (arg2[16]));
- x346 = ((uint64_t)(arg1[0]) * (arg2[15]));
- x347 = ((uint64_t)(arg1[0]) * (arg2[14]));
- x348 = ((uint64_t)(arg1[0]) * (arg2[13]));
- x349 = ((uint64_t)(arg1[0]) * (arg2[12]));
- x350 = ((uint64_t)(arg1[0]) * (arg2[11]));
- x351 = ((uint64_t)(arg1[0]) * (arg2[10]));
- x352 = ((uint64_t)(arg1[0]) * (arg2[9]));
- x353 = ((uint64_t)(arg1[0]) * (arg2[8]));
- x354 = ((uint64_t)(arg1[0]) * (arg2[7]));
- x355 = ((uint64_t)(arg1[0]) * (arg2[6]));
- x356 = ((uint64_t)(arg1[0]) * (arg2[5]));
- x357 = ((uint64_t)(arg1[0]) * (arg2[4]));
- x358 = ((uint64_t)(arg1[0]) * (arg2[3]));
- x359 = ((uint64_t)(arg1[0]) * (arg2[2]));
- x360 = ((uint64_t)(arg1[0]) * (arg2[1]));
- x361 = ((uint64_t)(arg1[0]) * (arg2[0]));
- x362 =
- (x361 +
- (x171 +
- (x170 +
- (x168 +
- (x165 +
- (x161 +
- (x156 +
- (x150 +
- (x143 +
- (x135 +
- (x126 +
- (x116 +
- (x105 +
- (x93 + (x80 + (x66 + (x51 + (x35 + x18))))))))))))))))));
- x363 = (x362 >> 28);
- x364 = (uint32_t)(x362 & UINT32_C(0xfffffff));
- x365 = (x343 +
- (x325 +
- (x308 +
- (x292 +
- (x277 +
- (x263 +
- (x250 +
- (x238 +
- (x227 +
- (x217 +
- (x208 +
- (x200 +
- (x193 +
- (x187 +
- (x182 + (x178 + (x175 + (x173 + x172))))))))))))))))));
- x366 = (x344 +
- (x326 +
- (x309 +
- (x293 +
- (x278 +
- (x264 +
- (x251 +
- (x239 +
- (x228 +
- (x218 +
- (x209 +
- (x201 +
- (x194 +
- (x188 +
- (x183 + (x179 + (x176 + (x174 + x1))))))))))))))))));
- x367 = (x345 +
- (x327 +
- (x310 +
- (x294 +
- (x279 +
- (x265 +
- (x252 +
- (x240 +
- (x229 +
- (x219 +
- (x210 +
- (x202 +
- (x195 +
- (x189 +
- (x184 + (x180 + (x177 + (x19 + x2))))))))))))))))));
- x368 =
- (x346 +
- (x328 +
- (x311 +
- (x295 +
- (x280 +
- (x266 +
- (x253 +
- (x241 +
- (x230 +
- (x220 +
- (x211 +
- (x203 +
- (x196 +
- (x190 + (x185 + (x181 + (x36 + (x20 + x3))))))))))))))))));
- x369 =
- (x347 +
- (x329 +
- (x312 +
- (x296 +
- (x281 +
- (x267 +
- (x254 +
- (x242 +
- (x231 +
- (x221 +
- (x212 +
- (x204 +
- (x197 +
- (x191 + (x186 + (x52 + (x37 + (x21 + x4))))))))))))))))));
- x370 =
- (x348 +
- (x330 +
- (x313 +
- (x297 +
- (x282 +
- (x268 +
- (x255 +
- (x243 +
- (x232 +
- (x222 +
- (x213 +
- (x205 +
- (x198 +
- (x192 + (x67 + (x53 + (x38 + (x22 + x5))))))))))))))))));
- x371 = (x349 +
- (x331 +
- (x314 +
- (x298 +
- (x283 +
- (x269 +
- (x256 +
- (x244 +
- (x233 +
- (x223 +
- (x214 +
- (x206 +
- (x199 +
- (x81 + (x68 + (x54 + (x39 + (x23 + x6))))))))))))))))));
- x372 = (x350 +
- (x332 +
- (x315 +
- (x299 +
- (x284 +
- (x270 +
- (x257 +
- (x245 +
- (x234 +
- (x224 +
- (x215 +
- (x207 +
- (x94 +
- (x82 + (x69 + (x55 + (x40 + (x24 + x7))))))))))))))))));
- x373 = (x351 +
- (x333 +
- (x316 +
- (x300 +
- (x285 +
- (x271 +
- (x258 +
- (x246 +
- (x235 +
- (x225 +
- (x216 +
- (x106 +
- (x95 +
- (x83 + (x70 + (x56 + (x41 + (x25 + x8))))))))))))))))));
- x374 = (x352 +
- (x334 +
- (x317 +
- (x301 +
- (x286 +
- (x272 +
- (x259 +
- (x247 +
- (x236 +
- (x226 +
- (x117 +
- (x107 +
- (x96 +
- (x84 + (x71 + (x57 + (x42 + (x26 + x9))))))))))))))))));
- x375 =
- (x353 +
- (x335 +
- (x318 +
- (x302 +
- (x287 +
- (x273 +
- (x260 +
- (x248 +
- (x237 +
- (x127 +
- (x118 +
- (x108 +
- (x97 +
- (x85 + (x72 + (x58 + (x43 + (x27 + x10))))))))))))))))));
- x376 =
- (x354 +
- (x336 +
- (x319 +
- (x303 +
- (x288 +
- (x274 +
- (x261 +
- (x249 +
- (x136 +
- (x128 +
- (x119 +
- (x109 +
- (x98 +
- (x86 + (x73 + (x59 + (x44 + (x28 + x11))))))))))))))))));
- x377 =
- (x355 +
- (x337 +
- (x320 +
- (x304 +
- (x289 +
- (x275 +
- (x262 +
- (x144 +
- (x137 +
- (x129 +
- (x120 +
- (x110 +
- (x99 +
- (x87 + (x74 + (x60 + (x45 + (x29 + x12))))))))))))))))));
- x378 =
- (x356 +
- (x338 +
- (x321 +
- (x305 +
- (x290 +
- (x276 +
- (x151 +
- (x145 +
- (x138 +
- (x130 +
- (x121 +
- (x111 +
- (x100 +
- (x88 + (x75 + (x61 + (x46 + (x30 + x13))))))))))))))))));
- x379 =
- (x357 +
- (x339 +
- (x322 +
- (x306 +
- (x291 +
- (x157 +
- (x152 +
- (x146 +
- (x139 +
- (x131 +
- (x122 +
- (x112 +
- (x101 +
- (x89 + (x76 + (x62 + (x47 + (x31 + x14))))))))))))))))));
- x380 =
- (x358 +
- (x340 +
- (x323 +
- (x307 +
- (x162 +
- (x158 +
- (x153 +
- (x147 +
- (x140 +
- (x132 +
- (x123 +
- (x113 +
- (x102 +
- (x90 + (x77 + (x63 + (x48 + (x32 + x15))))))))))))))))));
- x381 =
- (x359 +
- (x341 +
- (x324 +
- (x166 +
- (x163 +
- (x159 +
- (x154 +
- (x148 +
- (x141 +
- (x133 +
- (x124 +
- (x114 +
- (x103 +
- (x91 + (x78 + (x64 + (x49 + (x33 + x16))))))))))))))))));
- x382 =
- (x360 +
- (x342 +
- (x169 +
- (x167 +
- (x164 +
- (x160 +
- (x155 +
- (x149 +
- (x142 +
- (x134 +
- (x125 +
- (x115 +
- (x104 +
- (x92 + (x79 + (x65 + (x50 + (x34 + x17))))))))))))))))));
- x383 = (x363 + x382);
- x384 = (x383 >> 27);
- x385 = (uint32_t)(x383 & UINT32_C(0x7ffffff));
- x386 = (x384 + x381);
- x387 = (x386 >> 28);
- x388 = (uint32_t)(x386 & UINT32_C(0xfffffff));
- x389 = (x387 + x380);
- x390 = (x389 >> 27);
- x391 = (uint32_t)(x389 & UINT32_C(0x7ffffff));
- x392 = (x390 + x379);
- x393 = (x392 >> 28);
- x394 = (uint32_t)(x392 & UINT32_C(0xfffffff));
- x395 = (x393 + x378);
- x396 = (x395 >> 27);
- x397 = (uint32_t)(x395 & UINT32_C(0x7ffffff));
- x398 = (x396 + x377);
- x399 = (x398 >> 27);
- x400 = (uint32_t)(x398 & UINT32_C(0x7ffffff));
- x401 = (x399 + x376);
- x402 = (x401 >> 28);
- x403 = (uint32_t)(x401 & UINT32_C(0xfffffff));
- x404 = (x402 + x375);
- x405 = (x404 >> 27);
- x406 = (uint32_t)(x404 & UINT32_C(0x7ffffff));
- x407 = (x405 + x374);
- x408 = (x407 >> 28);
- x409 = (uint32_t)(x407 & UINT32_C(0xfffffff));
- x410 = (x408 + x373);
- x411 = (x410 >> 27);
- x412 = (uint32_t)(x410 & UINT32_C(0x7ffffff));
- x413 = (x411 + x372);
- x414 = (x413 >> 28);
- x415 = (uint32_t)(x413 & UINT32_C(0xfffffff));
- x416 = (x414 + x371);
- x417 = (x416 >> 27);
- x418 = (uint32_t)(x416 & UINT32_C(0x7ffffff));
- x419 = (x417 + x370);
- x420 = (x419 >> 27);
- x421 = (uint32_t)(x419 & UINT32_C(0x7ffffff));
- x422 = (x420 + x369);
- x423 = (x422 >> 28);
- x424 = (uint32_t)(x422 & UINT32_C(0xfffffff));
- x425 = (x423 + x368);
- x426 = (x425 >> 27);
- x427 = (uint32_t)(x425 & UINT32_C(0x7ffffff));
- x428 = (x426 + x367);
- x429 = (x428 >> 28);
- x430 = (uint32_t)(x428 & UINT32_C(0xfffffff));
- x431 = (x429 + x366);
- x432 = (x431 >> 27);
- x433 = (uint32_t)(x431 & UINT32_C(0x7ffffff));
- x434 = (x432 + x365);
- x435 = (x434 >> 27);
- x436 = (uint32_t)(x434 & UINT32_C(0x7ffffff));
- x437 = (x364 + x435);
- x438 = (uint32_t)(x437 >> 28);
- x439 = (uint32_t)(x437 & UINT32_C(0xfffffff));
- x440 = (x438 + x385);
- x441 = (fiat_secp521r1_uint1)(x440 >> 27);
- x442 = (x440 & UINT32_C(0x7ffffff));
- x443 = (x441 + x388);
- out1[0] = x439;
- out1[1] = x442;
- out1[2] = x443;
- out1[3] = x391;
- out1[4] = x394;
- out1[5] = x397;
- out1[6] = x400;
- out1[7] = x403;
- out1[8] = x406;
- out1[9] = x409;
- out1[10] = x412;
- out1[11] = x415;
- out1[12] = x418;
- out1[13] = x421;
- out1[14] = x424;
- out1[15] = x427;
- out1[16] = x430;
- out1[17] = x433;
- out1[18] = x436;
-}
-
-/*
- * The function fiat_secp521r1_carry_square squares a field element and reduces the result.
- *
- * Postconditions:
- * eval out1 mod m = (eval arg1 * eval arg1) mod m
- *
- */
-static void
-fiat_secp521r1_carry_square(
- fiat_secp521r1_tight_field_element out1,
- const fiat_secp521r1_loose_field_element arg1)
-{
- uint32_t x1;
- uint32_t x2;
- uint32_t x3;
- uint32_t x4;
- uint32_t x5;
- uint32_t x6;
- uint32_t x7;
- uint32_t x8;
- uint32_t x9;
- uint32_t x10;
- uint32_t x11;
- uint32_t x12;
- uint32_t x13;
- uint32_t x14;
- uint32_t x15;
- uint32_t x16;
- uint32_t x17;
- uint32_t x18;
- uint32_t x19;
- uint32_t x20;
- uint32_t x21;
- uint32_t x22;
- uint32_t x23;
- uint32_t x24;
- uint32_t x25;
- uint32_t x26;
- uint32_t x27;
- uint32_t x28;
- uint32_t x29;
- uint32_t x30;
- uint32_t x31;
- uint32_t x32;
- uint32_t x33;
- uint32_t x34;
- uint32_t x35;
- uint32_t x36;
- uint64_t x37;
- uint64_t x38;
- uint64_t x39;
- uint64_t x40;
- uint64_t x41;
- uint64_t x42;
- uint64_t x43;
- uint64_t x44;
- uint64_t x45;
- uint64_t x46;
- uint64_t x47;
- uint64_t x48;
- uint64_t x49;
- uint64_t x50;
- uint64_t x51;
- uint64_t x52;
- uint64_t x53;
- uint64_t x54;
- uint64_t x55;
- uint64_t x56;
- uint64_t x57;
- uint64_t x58;
- uint64_t x59;
- uint64_t x60;
- uint64_t x61;
- uint64_t x62;
- uint64_t x63;
- uint64_t x64;
- uint64_t x65;
- uint64_t x66;
- uint64_t x67;
- uint64_t x68;
- uint64_t x69;
- uint64_t x70;
- uint64_t x71;
- uint64_t x72;
- uint64_t x73;
- uint64_t x74;
- uint64_t x75;
- uint64_t x76;
- uint64_t x77;
- uint64_t x78;
- uint64_t x79;
- uint64_t x80;
- uint64_t x81;
- uint64_t x82;
- uint64_t x83;
- uint64_t x84;
- uint64_t x85;
- uint64_t x86;
- uint64_t x87;
- uint64_t x88;
- uint64_t x89;
- uint64_t x90;
- uint64_t x91;
- uint64_t x92;
- uint64_t x93;
- uint64_t x94;
- uint64_t x95;
- uint64_t x96;
- uint64_t x97;
- uint64_t x98;
- uint64_t x99;
- uint64_t x100;
- uint64_t x101;
- uint64_t x102;
- uint64_t x103;
- uint64_t x104;
- uint64_t x105;
- uint64_t x106;
- uint64_t x107;
- uint64_t x108;
- uint64_t x109;
- uint64_t x110;
- uint64_t x111;
- uint64_t x112;
- uint64_t x113;
- uint64_t x114;
- uint64_t x115;
- uint64_t x116;
- uint64_t x117;
- uint64_t x118;
- uint64_t x119;
- uint64_t x120;
- uint64_t x121;
- uint64_t x122;
- uint64_t x123;
- uint64_t x124;
- uint64_t x125;
- uint64_t x126;
- uint64_t x127;
- uint64_t x128;
- uint64_t x129;
- uint64_t x130;
- uint64_t x131;
- uint64_t x132;
- uint64_t x133;
- uint64_t x134;
- uint64_t x135;
- uint64_t x136;
- uint64_t x137;
- uint64_t x138;
- uint64_t x139;
- uint64_t x140;
- uint64_t x141;
- uint64_t x142;
- uint64_t x143;
- uint64_t x144;
- uint64_t x145;
- uint64_t x146;
- uint64_t x147;
- uint64_t x148;
- uint64_t x149;
- uint64_t x150;
- uint64_t x151;
- uint64_t x152;
- uint64_t x153;
- uint64_t x154;
- uint64_t x155;
- uint64_t x156;
- uint64_t x157;
- uint64_t x158;
- uint64_t x159;
- uint64_t x160;
- uint64_t x161;
- uint64_t x162;
- uint64_t x163;
- uint64_t x164;
- uint64_t x165;
- uint64_t x166;
- uint64_t x167;
- uint64_t x168;
- uint64_t x169;
- uint64_t x170;
- uint64_t x171;
- uint64_t x172;
- uint64_t x173;
- uint64_t x174;
- uint64_t x175;
- uint64_t x176;
- uint64_t x177;
- uint64_t x178;
- uint64_t x179;
- uint64_t x180;
- uint64_t x181;
- uint64_t x182;
- uint64_t x183;
- uint64_t x184;
- uint64_t x185;
- uint64_t x186;
- uint64_t x187;
- uint64_t x188;
- uint64_t x189;
- uint64_t x190;
- uint64_t x191;
- uint64_t x192;
- uint64_t x193;
- uint64_t x194;
- uint64_t x195;
- uint64_t x196;
- uint64_t x197;
- uint64_t x198;
- uint64_t x199;
- uint64_t x200;
- uint64_t x201;
- uint64_t x202;
- uint64_t x203;
- uint64_t x204;
- uint64_t x205;
- uint64_t x206;
- uint64_t x207;
- uint64_t x208;
- uint64_t x209;
- uint64_t x210;
- uint64_t x211;
- uint64_t x212;
- uint64_t x213;
- uint64_t x214;
- uint64_t x215;
- uint64_t x216;
- uint64_t x217;
- uint64_t x218;
- uint64_t x219;
- uint64_t x220;
- uint64_t x221;
- uint64_t x222;
- uint64_t x223;
- uint64_t x224;
- uint64_t x225;
- uint64_t x226;
- uint64_t x227;
- uint64_t x228;
- uint32_t x229;
- uint64_t x230;
- uint64_t x231;
- uint64_t x232;
- uint64_t x233;
- uint64_t x234;
- uint64_t x235;
- uint64_t x236;
- uint64_t x237;
- uint64_t x238;
- uint64_t x239;
- uint64_t x240;
- uint64_t x241;
- uint64_t x242;
- uint64_t x243;
- uint64_t x244;
- uint64_t x245;
- uint64_t x246;
- uint64_t x247;
- uint64_t x248;
- uint64_t x249;
- uint32_t x250;
- uint64_t x251;
- uint64_t x252;
- uint32_t x253;
- uint64_t x254;
- uint64_t x255;
- uint32_t x256;
- uint64_t x257;
- uint64_t x258;
- uint32_t x259;
- uint64_t x260;
- uint64_t x261;
- uint32_t x262;
- uint64_t x263;
- uint64_t x264;
- uint32_t x265;
- uint64_t x266;
- uint64_t x267;
- uint32_t x268;
- uint64_t x269;
- uint64_t x270;
- uint32_t x271;
- uint64_t x272;
- uint64_t x273;
- uint32_t x274;
- uint64_t x275;
- uint64_t x276;
- uint32_t x277;
- uint64_t x278;
- uint64_t x279;
- uint32_t x280;
- uint64_t x281;
- uint64_t x282;
- uint32_t x283;
- uint64_t x284;
- uint64_t x285;
- uint32_t x286;
- uint64_t x287;
- uint64_t x288;
- uint32_t x289;
- uint64_t x290;
- uint64_t x291;
- uint32_t x292;
- uint64_t x293;
- uint64_t x294;
- uint32_t x295;
- uint64_t x296;
- uint64_t x297;
- uint32_t x298;
- uint64_t x299;
- uint64_t x300;
- uint32_t x301;
- uint64_t x302;
- uint32_t x303;
- uint32_t x304;
- uint32_t x305;
- fiat_secp521r1_uint1 x306;
- uint32_t x307;
- uint32_t x308;
- x1 = (arg1[18]);
- x2 = (x1 * 0x2);
- x3 = ((arg1[18]) * 0x2);
- x4 = (arg1[17]);
- x5 = (x4 * 0x2);
- x6 = ((arg1[17]) * 0x2);
- x7 = (arg1[16]);
- x8 = (x7 * 0x2);
- x9 = ((arg1[16]) * 0x2);
- x10 = (arg1[15]);
- x11 = (x10 * 0x2);
- x12 = ((arg1[15]) * 0x2);
- x13 = (arg1[14]);
- x14 = (x13 * 0x2);
- x15 = ((arg1[14]) * 0x2);
- x16 = (arg1[13]);
- x17 = (x16 * 0x2);
- x18 = ((arg1[13]) * 0x2);
- x19 = (arg1[12]);
- x20 = (x19 * 0x2);
- x21 = ((arg1[12]) * 0x2);
- x22 = (arg1[11]);
- x23 = (x22 * 0x2);
- x24 = ((arg1[11]) * 0x2);
- x25 = (arg1[10]);
- x26 = (x25 * 0x2);
- x27 = ((arg1[10]) * 0x2);
- x28 = ((arg1[9]) * 0x2);
- x29 = ((arg1[8]) * 0x2);
- x30 = ((arg1[7]) * 0x2);
- x31 = ((arg1[6]) * 0x2);
- x32 = ((arg1[5]) * 0x2);
- x33 = ((arg1[4]) * 0x2);
- x34 = ((arg1[3]) * 0x2);
- x35 = ((arg1[2]) * 0x2);
- x36 = ((arg1[1]) * 0x2);
- x37 = ((uint64_t)(arg1[18]) * x1);
- x38 = ((uint64_t)(arg1[17]) * (x2 * 0x2));
- x39 = ((uint64_t)(arg1[17]) * (x4 * 0x2));
- x40 = ((uint64_t)(arg1[16]) * x2);
- x41 = ((uint64_t)(arg1[16]) * (x5 * 0x2));
- x42 = ((uint64_t)(arg1[16]) * x7);
- x43 = ((uint64_t)(arg1[15]) * (x2 * 0x2));
- x44 = ((uint64_t)(arg1[15]) * (x5 * 0x2));
- x45 = ((uint64_t)(arg1[15]) * x8);
- x46 = ((uint64_t)(arg1[15]) * (x10 * 0x2));
- x47 = ((uint64_t)(arg1[14]) * x2);
- x48 = ((uint64_t)(arg1[14]) * x5);
- x49 = ((uint64_t)(arg1[14]) * x8);
- x50 = ((uint64_t)(arg1[14]) * x11);
- x51 = ((uint64_t)(arg1[14]) * x13);
- x52 = ((uint64_t)(arg1[13]) * x2);
- x53 = ((uint64_t)(arg1[13]) * (x5 * 0x2));
- x54 = ((uint64_t)(arg1[13]) * x8);
- x55 = ((uint64_t)(arg1[13]) * (x11 * 0x2));
- x56 = ((uint64_t)(arg1[13]) * x14);
- x57 = ((uint64_t)(arg1[13]) * (x16 * 0x2));
- x58 = ((uint64_t)(arg1[12]) * (x2 * 0x2));
- x59 = ((uint64_t)(arg1[12]) * (x5 * 0x2));
- x60 = ((uint64_t)(arg1[12]) * (x8 * 0x2));
- x61 = ((uint64_t)(arg1[12]) * (x11 * 0x2));
- x62 = ((uint64_t)(arg1[12]) * (x14 * 0x2));
- x63 = ((uint64_t)(arg1[12]) * (x17 * 0x2));
- x64 = ((uint64_t)(arg1[12]) * (x19 * 0x2));
- x65 = ((uint64_t)(arg1[11]) * x2);
- x66 = ((uint64_t)(arg1[11]) * (x5 * 0x2));
- x67 = ((uint64_t)(arg1[11]) * x8);
- x68 = ((uint64_t)(arg1[11]) * (x11 * 0x2));
- x69 = ((uint64_t)(arg1[11]) * x14);
- x70 = ((uint64_t)(arg1[11]) * x17);
- x71 = ((uint64_t)(arg1[11]) * (x20 * 0x2));
- x72 = ((uint64_t)(arg1[11]) * x22);
- x73 = ((uint64_t)(arg1[10]) * (x2 * 0x2));
- x74 = ((uint64_t)(arg1[10]) * (x5 * 0x2));
- x75 = ((uint64_t)(arg1[10]) * (x8 * 0x2));
- x76 = ((uint64_t)(arg1[10]) * (x11 * 0x2));
- x77 = ((uint64_t)(arg1[10]) * x14);
- x78 = ((uint64_t)(arg1[10]) * (x17 * 0x2));
- x79 = ((uint64_t)(arg1[10]) * (x20 * 0x2));
- x80 = ((uint64_t)(arg1[10]) * (x23 * 0x2));
- x81 = ((uint64_t)(arg1[10]) * (x25 * 0x2));
- x82 = ((uint64_t)(arg1[9]) * x2);
- x83 = ((uint64_t)(arg1[9]) * (x5 * 0x2));
- x84 = ((uint64_t)(arg1[9]) * x8);
- x85 = ((uint64_t)(arg1[9]) * x11);
- x86 = ((uint64_t)(arg1[9]) * x14);
- x87 = ((uint64_t)(arg1[9]) * x17);
- x88 = ((uint64_t)(arg1[9]) * (x20 * 0x2));
- x89 = ((uint64_t)(arg1[9]) * x23);
- x90 = ((uint64_t)(arg1[9]) * (x26 * 0x2));
- x91 = ((uint64_t)(arg1[9]) * (arg1[9]));
- x92 = ((uint64_t)(arg1[8]) * (x2 * 0x2));
- x93 = ((uint64_t)(arg1[8]) * (x5 * 0x2));
- x94 = ((uint64_t)(arg1[8]) * x8);
- x95 = ((uint64_t)(arg1[8]) * (x11 * 0x2));
- x96 = ((uint64_t)(arg1[8]) * x14);
- x97 = ((uint64_t)(arg1[8]) * (x17 * 0x2));
- x98 = ((uint64_t)(arg1[8]) * (x20 * 0x2));
- x99 = ((uint64_t)(arg1[8]) * (x23 * 0x2));
- x100 = ((uint64_t)(arg1[8]) * (x27 * 0x2));
- x101 = ((uint64_t)(arg1[8]) * x28);
- x102 = ((uint64_t)(arg1[8]) * ((arg1[8]) * 0x2));
- x103 = ((uint64_t)(arg1[7]) * x2);
- x104 = ((uint64_t)(arg1[7]) * x5);
- x105 = ((uint64_t)(arg1[7]) * x8);
- x106 = ((uint64_t)(arg1[7]) * x11);
- x107 = ((uint64_t)(arg1[7]) * x14);
- x108 = ((uint64_t)(arg1[7]) * x17);
- x109 = ((uint64_t)(arg1[7]) * (x20 * 0x2));
- x110 = ((uint64_t)(arg1[7]) * x24);
- x111 = ((uint64_t)(arg1[7]) * x27);
- x112 = ((uint64_t)(arg1[7]) * x28);
- x113 = ((uint64_t)(arg1[7]) * x29);
- x114 = ((uint64_t)(arg1[7]) * (arg1[7]));
- x115 = ((uint64_t)(arg1[6]) * x2);
- x116 = ((uint64_t)(arg1[6]) * (x5 * 0x2));
- x117 = ((uint64_t)(arg1[6]) * x8);
- x118 = ((uint64_t)(arg1[6]) * (x11 * 0x2));
- x119 = ((uint64_t)(arg1[6]) * x14);
- x120 = ((uint64_t)(arg1[6]) * (x17 * 0x2));
- x121 = ((uint64_t)(arg1[6]) * (x21 * 0x2));
- x122 = ((uint64_t)(arg1[6]) * x24);
- x123 = ((uint64_t)(arg1[6]) * (x27 * 0x2));
- x124 = ((uint64_t)(arg1[6]) * x28);
- x125 = ((uint64_t)(arg1[6]) * (x29 * 0x2));
- x126 = ((uint64_t)(arg1[6]) * x30);
- x127 = ((uint64_t)(arg1[6]) * (arg1[6]));
- x128 = ((uint64_t)(arg1[5]) * (x2 * 0x2));
- x129 = ((uint64_t)(arg1[5]) * (x5 * 0x2));
- x130 = ((uint64_t)(arg1[5]) * (x8 * 0x2));
- x131 = ((uint64_t)(arg1[5]) * (x11 * 0x2));
- x132 = ((uint64_t)(arg1[5]) * (x14 * 0x2));
- x133 = ((uint64_t)(arg1[5]) * (x18 * 0x2));
- x134 = ((uint64_t)(arg1[5]) * (x21 * 0x2));
- x135 = ((uint64_t)(arg1[5]) * (x24 * 0x2));
- x136 = ((uint64_t)(arg1[5]) * (x27 * 0x2));
- x137 = ((uint64_t)(arg1[5]) * (x28 * 0x2));
- x138 = ((uint64_t)(arg1[5]) * (x29 * 0x2));
- x139 = ((uint64_t)(arg1[5]) * x30);
- x140 = ((uint64_t)(arg1[5]) * (x31 * 0x2));
- x141 = ((uint64_t)(arg1[5]) * ((arg1[5]) * 0x2));
- x142 = ((uint64_t)(arg1[4]) * x2);
- x143 = ((uint64_t)(arg1[4]) * (x5 * 0x2));
- x144 = ((uint64_t)(arg1[4]) * x8);
- x145 = ((uint64_t)(arg1[4]) * (x11 * 0x2));
- x146 = ((uint64_t)(arg1[4]) * x15);
- x147 = ((uint64_t)(arg1[4]) * x18);
- x148 = ((uint64_t)(arg1[4]) * (x21 * 0x2));
- x149 = ((uint64_t)(arg1[4]) * x24);
- x150 = ((uint64_t)(arg1[4]) * (x27 * 0x2));
- x151 = ((uint64_t)(arg1[4]) * x28);
- x152 = ((uint64_t)(arg1[4]) * x29);
- x153 = ((uint64_t)(arg1[4]) * x30);
- x154 = ((uint64_t)(arg1[4]) * x31);
- x155 = ((uint64_t)(arg1[4]) * (x32 * 0x2));
- x156 = ((uint64_t)(arg1[4]) * (arg1[4]));
- x157 = ((uint64_t)(arg1[3]) * (x2 * 0x2));
- x158 = ((uint64_t)(arg1[3]) * (x5 * 0x2));
- x159 = ((uint64_t)(arg1[3]) * (x8 * 0x2));
- x160 = ((uint64_t)(arg1[3]) * (x12 * 0x2));
- x161 = ((uint64_t)(arg1[3]) * x15);
- x162 = ((uint64_t)(arg1[3]) * (x18 * 0x2));
- x163 = ((uint64_t)(arg1[3]) * (x21 * 0x2));
- x164 = ((uint64_t)(arg1[3]) * (x24 * 0x2));
- x165 = ((uint64_t)(arg1[3]) * (x27 * 0x2));
- x166 = ((uint64_t)(arg1[3]) * x28);
- x167 = ((uint64_t)(arg1[3]) * (x29 * 0x2));
- x168 = ((uint64_t)(arg1[3]) * x30);
- x169 = ((uint64_t)(arg1[3]) * (x31 * 0x2));
- x170 = ((uint64_t)(arg1[3]) * (x32 * 0x2));
- x171 = ((uint64_t)(arg1[3]) * (x33 * 0x2));
- x172 = ((uint64_t)(arg1[3]) * ((arg1[3]) * 0x2));
- x173 = ((uint64_t)(arg1[2]) * x2);
- x174 = ((uint64_t)(arg1[2]) * (x5 * 0x2));
- x175 = ((uint64_t)(arg1[2]) * x9);
- x176 = ((uint64_t)(arg1[2]) * x12);
- x177 = ((uint64_t)(arg1[2]) * x15);
- x178 = ((uint64_t)(arg1[2]) * x18);
- x179 = ((uint64_t)(arg1[2]) * (x21 * 0x2));
- x180 = ((uint64_t)(arg1[2]) * x24);
- x181 = ((uint64_t)(arg1[2]) * x27);
- x182 = ((uint64_t)(arg1[2]) * x28);
- x183 = ((uint64_t)(arg1[2]) * x29);
- x184 = ((uint64_t)(arg1[2]) * x30);
- x185 = ((uint64_t)(arg1[2]) * x31);
- x186 = ((uint64_t)(arg1[2]) * (x32 * 0x2));
- x187 = ((uint64_t)(arg1[2]) * x33);
- x188 = ((uint64_t)(arg1[2]) * x34);
- x189 = ((uint64_t)(arg1[2]) * (arg1[2]));
- x190 = ((uint64_t)(arg1[1]) * (x2 * 0x2));
- x191 = ((uint64_t)(arg1[1]) * (x6 * 0x2));
- x192 = ((uint64_t)(arg1[1]) * x9);
- x193 = ((uint64_t)(arg1[1]) * (x12 * 0x2));
- x194 = ((uint64_t)(arg1[1]) * x15);
- x195 = ((uint64_t)(arg1[1]) * (x18 * 0x2));
- x196 = ((uint64_t)(arg1[1]) * (x21 * 0x2));
- x197 = ((uint64_t)(arg1[1]) * x24);
- x198 = ((uint64_t)(arg1[1]) * (x27 * 0x2));
- x199 = ((uint64_t)(arg1[1]) * x28);
- x200 = ((uint64_t)(arg1[1]) * (x29 * 0x2));
- x201 = ((uint64_t)(arg1[1]) * x30);
- x202 = ((uint64_t)(arg1[1]) * (x31 * 0x2));
- x203 = ((uint64_t)(arg1[1]) * (x32 * 0x2));
- x204 = ((uint64_t)(arg1[1]) * x33);
- x205 = ((uint64_t)(arg1[1]) * (x34 * 0x2));
- x206 = ((uint64_t)(arg1[1]) * x35);
- x207 = ((uint64_t)(arg1[1]) * ((arg1[1]) * 0x2));
- x208 = ((uint64_t)(arg1[0]) * x3);
- x209 = ((uint64_t)(arg1[0]) * x6);
- x210 = ((uint64_t)(arg1[0]) * x9);
- x211 = ((uint64_t)(arg1[0]) * x12);
- x212 = ((uint64_t)(arg1[0]) * x15);
- x213 = ((uint64_t)(arg1[0]) * x18);
- x214 = ((uint64_t)(arg1[0]) * x21);
- x215 = ((uint64_t)(arg1[0]) * x24);
- x216 = ((uint64_t)(arg1[0]) * x27);
- x217 = ((uint64_t)(arg1[0]) * x28);
- x218 = ((uint64_t)(arg1[0]) * x29);
- x219 = ((uint64_t)(arg1[0]) * x30);
- x220 = ((uint64_t)(arg1[0]) * x31);
- x221 = ((uint64_t)(arg1[0]) * x32);
- x222 = ((uint64_t)(arg1[0]) * x33);
- x223 = ((uint64_t)(arg1[0]) * x34);
- x224 = ((uint64_t)(arg1[0]) * x35);
- x225 = ((uint64_t)(arg1[0]) * x36);
- x226 = ((uint64_t)(arg1[0]) * (arg1[0]));
- x227 =
- (x226 +
- (x190 +
- (x174 + (x159 + (x145 + (x132 + (x120 + (x109 + (x99 + x90)))))))));
- x228 = (x227 >> 28);
- x229 = (uint32_t)(x227 & UINT32_C(0xfffffff));
- x230 =
- (x208 +
- (x191 +
- (x175 + (x160 + (x146 + (x133 + (x121 + (x110 + (x100 + x91)))))))));
- x231 =
- (x209 +
- (x192 +
- (x176 + (x161 + (x147 + (x134 + (x122 + (x111 + (x101 + x37)))))))));
- x232 =
- (x210 +
- (x193 +
- (x177 + (x162 + (x148 + (x135 + (x123 + (x112 + (x102 + x38)))))))));
- x233 =
- (x211 +
- (x194 +
- (x178 + (x163 + (x149 + (x136 + (x124 + (x113 + (x40 + x39)))))))));
- x234 =
- (x212 +
- (x195 +
- (x179 + (x164 + (x150 + (x137 + (x125 + (x114 + (x43 + x41)))))))));
- x235 = (x213 +
- (x196 +
- (x180 + (x165 + (x151 + (x138 + (x126 + (x47 + (x44 + x42)))))))));
- x236 = (x214 +
- (x197 +
- (x181 + (x166 + (x152 + (x139 + (x127 + (x52 + (x48 + x45)))))))));
- x237 = (x215 +
- (x198 +
- (x182 + (x167 + (x153 + (x140 + (x58 + (x53 + (x49 + x46)))))))));
- x238 = (x216 +
- (x199 +
- (x183 + (x168 + (x154 + (x141 + (x65 + (x59 + (x54 + x50)))))))));
- x239 = (x217 +
- (x200 +
- (x184 + (x169 + (x155 + (x73 + (x66 + (x60 + (x55 + x51)))))))));
- x240 = (x218 +
- (x201 +
- (x185 + (x170 + (x156 + (x82 + (x74 + (x67 + (x61 + x56)))))))));
- x241 = (x219 +
- (x202 +
- (x186 + (x171 + (x92 + (x83 + (x75 + (x68 + (x62 + x57)))))))));
- x242 = (x220 +
- (x203 +
- (x187 + (x172 + (x103 + (x93 + (x84 + (x76 + (x69 + x63)))))))));
- x243 = (x221 +
- (x204 +
- (x188 + (x115 + (x104 + (x94 + (x85 + (x77 + (x70 + x64)))))))));
- x244 = (x222 +
- (x205 +
- (x189 + (x128 + (x116 + (x105 + (x95 + (x86 + (x78 + x71)))))))));
- x245 = (x223 +
- (x206 +
- (x142 + (x129 + (x117 + (x106 + (x96 + (x87 + (x79 + x72)))))))));
- x246 = (x224 +
- (x207 +
- (x157 + (x143 + (x130 + (x118 + (x107 + (x97 + (x88 + x80)))))))));
- x247 = (x225 +
- (x173 +
- (x158 + (x144 + (x131 + (x119 + (x108 + (x98 + (x89 + x81)))))))));
- x248 = (x228 + x247);
- x249 = (x248 >> 27);
- x250 = (uint32_t)(x248 & UINT32_C(0x7ffffff));
- x251 = (x249 + x246);
- x252 = (x251 >> 28);
- x253 = (uint32_t)(x251 & UINT32_C(0xfffffff));
- x254 = (x252 + x245);
- x255 = (x254 >> 27);
- x256 = (uint32_t)(x254 & UINT32_C(0x7ffffff));
- x257 = (x255 + x244);
- x258 = (x257 >> 28);
- x259 = (uint32_t)(x257 & UINT32_C(0xfffffff));
- x260 = (x258 + x243);
- x261 = (x260 >> 27);
- x262 = (uint32_t)(x260 & UINT32_C(0x7ffffff));
- x263 = (x261 + x242);
- x264 = (x263 >> 27);
- x265 = (uint32_t)(x263 & UINT32_C(0x7ffffff));
- x266 = (x264 + x241);
- x267 = (x266 >> 28);
- x268 = (uint32_t)(x266 & UINT32_C(0xfffffff));
- x269 = (x267 + x240);
- x270 = (x269 >> 27);
- x271 = (uint32_t)(x269 & UINT32_C(0x7ffffff));
- x272 = (x270 + x239);
- x273 = (x272 >> 28);
- x274 = (uint32_t)(x272 & UINT32_C(0xfffffff));
- x275 = (x273 + x238);
- x276 = (x275 >> 27);
- x277 = (uint32_t)(x275 & UINT32_C(0x7ffffff));
- x278 = (x276 + x237);
- x279 = (x278 >> 28);
- x280 = (uint32_t)(x278 & UINT32_C(0xfffffff));
- x281 = (x279 + x236);
- x282 = (x281 >> 27);
- x283 = (uint32_t)(x281 & UINT32_C(0x7ffffff));
- x284 = (x282 + x235);
- x285 = (x284 >> 27);
- x286 = (uint32_t)(x284 & UINT32_C(0x7ffffff));
- x287 = (x285 + x234);
- x288 = (x287 >> 28);
- x289 = (uint32_t)(x287 & UINT32_C(0xfffffff));
- x290 = (x288 + x233);
- x291 = (x290 >> 27);
- x292 = (uint32_t)(x290 & UINT32_C(0x7ffffff));
- x293 = (x291 + x232);
- x294 = (x293 >> 28);
- x295 = (uint32_t)(x293 & UINT32_C(0xfffffff));
- x296 = (x294 + x231);
- x297 = (x296 >> 27);
- x298 = (uint32_t)(x296 & UINT32_C(0x7ffffff));
- x299 = (x297 + x230);
- x300 = (x299 >> 27);
- x301 = (uint32_t)(x299 & UINT32_C(0x7ffffff));
- x302 = (x229 + x300);
- x303 = (uint32_t)(x302 >> 28);
- x304 = (uint32_t)(x302 & UINT32_C(0xfffffff));
- x305 = (x303 + x250);
- x306 = (fiat_secp521r1_uint1)(x305 >> 27);
- x307 = (x305 & UINT32_C(0x7ffffff));
- x308 = (x306 + x253);
- out1[0] = x304;
- out1[1] = x307;
- out1[2] = x308;
- out1[3] = x256;
- out1[4] = x259;
- out1[5] = x262;
- out1[6] = x265;
- out1[7] = x268;
- out1[8] = x271;
- out1[9] = x274;
- out1[10] = x277;
- out1[11] = x280;
- out1[12] = x283;
- out1[13] = x286;
- out1[14] = x289;
- out1[15] = x292;
- out1[16] = x295;
- out1[17] = x298;
- out1[18] = x301;
-}
-
-/*
- * The function fiat_secp521r1_carry_add adds two field elements.
- *
- * Postconditions:
- * eval out1 mod m = (eval arg1 + eval arg2) mod m
- *
- */
-static void
-fiat_secp521r1_carry_add(
- fiat_secp521r1_tight_field_element out1,
- const fiat_secp521r1_tight_field_element arg1,
- const fiat_secp521r1_tight_field_element arg2)
-{
- uint32_t x1;
- uint32_t x2;
- uint32_t x3;
- uint32_t x4;
- uint32_t x5;
- uint32_t x6;
- uint32_t x7;
- uint32_t x8;
- uint32_t x9;
- uint32_t x10;
- uint32_t x11;
- uint32_t x12;
- uint32_t x13;
- uint32_t x14;
- uint32_t x15;
- uint32_t x16;
- uint32_t x17;
- uint32_t x18;
- uint32_t x19;
- uint32_t x20;
- uint32_t x21;
- uint32_t x22;
- uint32_t x23;
- uint32_t x24;
- uint32_t x25;
- uint32_t x26;
- uint32_t x27;
- uint32_t x28;
- uint32_t x29;
- uint32_t x30;
- uint32_t x31;
- uint32_t x32;
- uint32_t x33;
- uint32_t x34;
- uint32_t x35;
- uint32_t x36;
- uint32_t x37;
- uint32_t x38;
- uint32_t x39;
- uint32_t x40;
- x1 = ((arg1[0]) + (arg2[0]));
- x2 = ((x1 >> 28) + ((arg1[1]) + (arg2[1])));
- x3 = ((x2 >> 27) + ((arg1[2]) + (arg2[2])));
- x4 = ((x3 >> 28) + ((arg1[3]) + (arg2[3])));
- x5 = ((x4 >> 27) + ((arg1[4]) + (arg2[4])));
- x6 = ((x5 >> 28) + ((arg1[5]) + (arg2[5])));
- x7 = ((x6 >> 27) + ((arg1[6]) + (arg2[6])));
- x8 = ((x7 >> 27) + ((arg1[7]) + (arg2[7])));
- x9 = ((x8 >> 28) + ((arg1[8]) + (arg2[8])));
- x10 = ((x9 >> 27) + ((arg1[9]) + (arg2[9])));
- x11 = ((x10 >> 28) + ((arg1[10]) + (arg2[10])));
- x12 = ((x11 >> 27) + ((arg1[11]) + (arg2[11])));
- x13 = ((x12 >> 28) + ((arg1[12]) + (arg2[12])));
- x14 = ((x13 >> 27) + ((arg1[13]) + (arg2[13])));
- x15 = ((x14 >> 27) + ((arg1[14]) + (arg2[14])));
- x16 = ((x15 >> 28) + ((arg1[15]) + (arg2[15])));
- x17 = ((x16 >> 27) + ((arg1[16]) + (arg2[16])));
- x18 = ((x17 >> 28) + ((arg1[17]) + (arg2[17])));
- x19 = ((x18 >> 27) + ((arg1[18]) + (arg2[18])));
- x20 = ((x1 & UINT32_C(0xfffffff)) + (x19 >> 27));
- x21 = ((fiat_secp521r1_uint1)(x20 >> 28) + (x2 & UINT32_C(0x7ffffff)));
- x22 = (x20 & UINT32_C(0xfffffff));
- x23 = (x21 & UINT32_C(0x7ffffff));
- x24 = ((fiat_secp521r1_uint1)(x21 >> 27) + (x3 & UINT32_C(0xfffffff)));
- x25 = (x4 & UINT32_C(0x7ffffff));
- x26 = (x5 & UINT32_C(0xfffffff));
- x27 = (x6 & UINT32_C(0x7ffffff));
- x28 = (x7 & UINT32_C(0x7ffffff));
- x29 = (x8 & UINT32_C(0xfffffff));
- x30 = (x9 & UINT32_C(0x7ffffff));
- x31 = (x10 & UINT32_C(0xfffffff));
- x32 = (x11 & UINT32_C(0x7ffffff));
- x33 = (x12 & UINT32_C(0xfffffff));
- x34 = (x13 & UINT32_C(0x7ffffff));
- x35 = (x14 & UINT32_C(0x7ffffff));
- x36 = (x15 & UINT32_C(0xfffffff));
- x37 = (x16 & UINT32_C(0x7ffffff));
- x38 = (x17 & UINT32_C(0xfffffff));
- x39 = (x18 & UINT32_C(0x7ffffff));
- x40 = (x19 & UINT32_C(0x7ffffff));
- out1[0] = x22;
- out1[1] = x23;
- out1[2] = x24;
- out1[3] = x25;
- out1[4] = x26;
- out1[5] = x27;
- out1[6] = x28;
- out1[7] = x29;
- out1[8] = x30;
- out1[9] = x31;
- out1[10] = x32;
- out1[11] = x33;
- out1[12] = x34;
- out1[13] = x35;
- out1[14] = x36;
- out1[15] = x37;
- out1[16] = x38;
- out1[17] = x39;
- out1[18] = x40;
-}
-
-/*
- * The function fiat_secp521r1_carry_sub subtracts two field elements.
- *
- * Postconditions:
- * eval out1 mod m = (eval arg1 - eval arg2) mod m
- *
- */
-static void
-fiat_secp521r1_carry_sub(
- fiat_secp521r1_tight_field_element out1,
- const fiat_secp521r1_tight_field_element arg1,
- const fiat_secp521r1_tight_field_element arg2)
-{
- uint32_t x1;
- uint32_t x2;
- uint32_t x3;
- uint32_t x4;
- uint32_t x5;
- uint32_t x6;
- uint32_t x7;
- uint32_t x8;
- uint32_t x9;
- uint32_t x10;
- uint32_t x11;
- uint32_t x12;
- uint32_t x13;
- uint32_t x14;
- uint32_t x15;
- uint32_t x16;
- uint32_t x17;
- uint32_t x18;
- uint32_t x19;
- uint32_t x20;
- uint32_t x21;
- uint32_t x22;
- uint32_t x23;
- uint32_t x24;
- uint32_t x25;
- uint32_t x26;
- uint32_t x27;
- uint32_t x28;
- uint32_t x29;
- uint32_t x30;
- uint32_t x31;
- uint32_t x32;
- uint32_t x33;
- uint32_t x34;
- uint32_t x35;
- uint32_t x36;
- uint32_t x37;
- uint32_t x38;
- uint32_t x39;
- uint32_t x40;
- x1 = ((UINT32_C(0x1ffffffe) + (arg1[0])) - (arg2[0]));
- x2 = ((x1 >> 28) + ((UINT32_C(0xffffffe) + (arg1[1])) - (arg2[1])));
- x3 = ((x2 >> 27) + ((UINT32_C(0x1ffffffe) + (arg1[2])) - (arg2[2])));
- x4 = ((x3 >> 28) + ((UINT32_C(0xffffffe) + (arg1[3])) - (arg2[3])));
- x5 = ((x4 >> 27) + ((UINT32_C(0x1ffffffe) + (arg1[4])) - (arg2[4])));
- x6 = ((x5 >> 28) + ((UINT32_C(0xffffffe) + (arg1[5])) - (arg2[5])));
- x7 = ((x6 >> 27) + ((UINT32_C(0xffffffe) + (arg1[6])) - (arg2[6])));
- x8 = ((x7 >> 27) + ((UINT32_C(0x1ffffffe) + (arg1[7])) - (arg2[7])));
- x9 = ((x8 >> 28) + ((UINT32_C(0xffffffe) + (arg1[8])) - (arg2[8])));
- x10 = ((x9 >> 27) + ((UINT32_C(0x1ffffffe) + (arg1[9])) - (arg2[9])));
- x11 = ((x10 >> 28) + ((UINT32_C(0xffffffe) + (arg1[10])) - (arg2[10])));
- x12 = ((x11 >> 27) + ((UINT32_C(0x1ffffffe) + (arg1[11])) - (arg2[11])));
- x13 = ((x12 >> 28) + ((UINT32_C(0xffffffe) + (arg1[12])) - (arg2[12])));
- x14 = ((x13 >> 27) + ((UINT32_C(0xffffffe) + (arg1[13])) - (arg2[13])));
- x15 = ((x14 >> 27) + ((UINT32_C(0x1ffffffe) + (arg1[14])) - (arg2[14])));
- x16 = ((x15 >> 28) + ((UINT32_C(0xffffffe) + (arg1[15])) - (arg2[15])));
- x17 = ((x16 >> 27) + ((UINT32_C(0x1ffffffe) + (arg1[16])) - (arg2[16])));
- x18 = ((x17 >> 28) + ((UINT32_C(0xffffffe) + (arg1[17])) - (arg2[17])));
- x19 = ((x18 >> 27) + ((UINT32_C(0xffffffe) + (arg1[18])) - (arg2[18])));
- x20 = ((x1 & UINT32_C(0xfffffff)) + (x19 >> 27));
- x21 = ((fiat_secp521r1_uint1)(x20 >> 28) + (x2 & UINT32_C(0x7ffffff)));
- x22 = (x20 & UINT32_C(0xfffffff));
- x23 = (x21 & UINT32_C(0x7ffffff));
- x24 = ((fiat_secp521r1_uint1)(x21 >> 27) + (x3 & UINT32_C(0xfffffff)));
- x25 = (x4 & UINT32_C(0x7ffffff));
- x26 = (x5 & UINT32_C(0xfffffff));
- x27 = (x6 & UINT32_C(0x7ffffff));
- x28 = (x7 & UINT32_C(0x7ffffff));
- x29 = (x8 & UINT32_C(0xfffffff));
- x30 = (x9 & UINT32_C(0x7ffffff));
- x31 = (x10 & UINT32_C(0xfffffff));
- x32 = (x11 & UINT32_C(0x7ffffff));
- x33 = (x12 & UINT32_C(0xfffffff));
- x34 = (x13 & UINT32_C(0x7ffffff));
- x35 = (x14 & UINT32_C(0x7ffffff));
- x36 = (x15 & UINT32_C(0xfffffff));
- x37 = (x16 & UINT32_C(0x7ffffff));
- x38 = (x17 & UINT32_C(0xfffffff));
- x39 = (x18 & UINT32_C(0x7ffffff));
- x40 = (x19 & UINT32_C(0x7ffffff));
- out1[0] = x22;
- out1[1] = x23;
- out1[2] = x24;
- out1[3] = x25;
- out1[4] = x26;
- out1[5] = x27;
- out1[6] = x28;
- out1[7] = x29;
- out1[8] = x30;
- out1[9] = x31;
- out1[10] = x32;
- out1[11] = x33;
- out1[12] = x34;
- out1[13] = x35;
- out1[14] = x36;
- out1[15] = x37;
- out1[16] = x38;
- out1[17] = x39;
- out1[18] = x40;
-}
+ if (!X || !k || !X->data || !k->data ||
+ X->len < 133 || k->len != 66) {
+ PORT_SetError(SEC_ERROR_INVALID_ARGS);
+ res = SECFailure;
+ return res;
+ }
-/*
- * The function fiat_secp521r1_carry_opp negates a field element.
- *
- * Postconditions:
- * eval out1 mod m = -eval arg1 mod m
- *
- */
-static void
-fiat_secp521r1_carry_opp(
- fiat_secp521r1_tight_field_element out1,
- const fiat_secp521r1_tight_field_element arg1)
-{
- uint32_t x1;
- uint32_t x2;
- uint32_t x3;
- uint32_t x4;
- uint32_t x5;
- uint32_t x6;
- uint32_t x7;
- uint32_t x8;
- uint32_t x9;
- uint32_t x10;
- uint32_t x11;
- uint32_t x12;
- uint32_t x13;
- uint32_t x14;
- uint32_t x15;
- uint32_t x16;
- uint32_t x17;
- uint32_t x18;
- uint32_t x19;
- uint32_t x20;
- uint32_t x21;
- uint32_t x22;
- uint32_t x23;
- uint32_t x24;
- uint32_t x25;
- uint32_t x26;
- uint32_t x27;
- uint32_t x28;
- uint32_t x29;
- uint32_t x30;
- uint32_t x31;
- uint32_t x32;
- uint32_t x33;
- uint32_t x34;
- uint32_t x35;
- uint32_t x36;
- uint32_t x37;
- uint32_t x38;
- uint32_t x39;
- uint32_t x40;
- x1 = (UINT32_C(0x1ffffffe) - (arg1[0]));
- x2 = ((fiat_secp521r1_uint1)(x1 >> 28) + (UINT32_C(0xffffffe) - (arg1[1])));
- x3 =
- ((fiat_secp521r1_uint1)(x2 >> 27) + (UINT32_C(0x1ffffffe) - (arg1[2])));
- x4 = ((fiat_secp521r1_uint1)(x3 >> 28) + (UINT32_C(0xffffffe) - (arg1[3])));
- x5 =
- ((fiat_secp521r1_uint1)(x4 >> 27) + (UINT32_C(0x1ffffffe) - (arg1[4])));
- x6 = ((fiat_secp521r1_uint1)(x5 >> 28) + (UINT32_C(0xffffffe) - (arg1[5])));
- x7 = ((fiat_secp521r1_uint1)(x6 >> 27) + (UINT32_C(0xffffffe) - (arg1[6])));
- x8 =
- ((fiat_secp521r1_uint1)(x7 >> 27) + (UINT32_C(0x1ffffffe) - (arg1[7])));
- x9 = ((fiat_secp521r1_uint1)(x8 >> 28) + (UINT32_C(0xffffffe) - (arg1[8])));
- x10 =
- ((fiat_secp521r1_uint1)(x9 >> 27) + (UINT32_C(0x1ffffffe) - (arg1[9])));
- x11 = ((fiat_secp521r1_uint1)(x10 >> 28) +
- (UINT32_C(0xffffffe) - (arg1[10])));
- x12 = ((fiat_secp521r1_uint1)(x11 >> 27) +
- (UINT32_C(0x1ffffffe) - (arg1[11])));
- x13 = ((fiat_secp521r1_uint1)(x12 >> 28) +
- (UINT32_C(0xffffffe) - (arg1[12])));
- x14 = ((fiat_secp521r1_uint1)(x13 >> 27) +
- (UINT32_C(0xffffffe) - (arg1[13])));
- x15 = ((fiat_secp521r1_uint1)(x14 >> 27) +
- (UINT32_C(0x1ffffffe) - (arg1[14])));
- x16 = ((fiat_secp521r1_uint1)(x15 >> 28) +
- (UINT32_C(0xffffffe) - (arg1[15])));
- x17 = ((fiat_secp521r1_uint1)(x16 >> 27) +
- (UINT32_C(0x1ffffffe) - (arg1[16])));
- x18 = ((fiat_secp521r1_uint1)(x17 >> 28) +
- (UINT32_C(0xffffffe) - (arg1[17])));
- x19 = ((fiat_secp521r1_uint1)(x18 >> 27) +
- (UINT32_C(0xffffffe) - (arg1[18])));
- x20 = ((x1 & UINT32_C(0xfffffff)) +
- (uint32_t)(fiat_secp521r1_uint1)(x19 >> 27));
- x21 = ((fiat_secp521r1_uint1)(x20 >> 28) + (x2 & UINT32_C(0x7ffffff)));
- x22 = (x20 & UINT32_C(0xfffffff));
- x23 = (x21 & UINT32_C(0x7ffffff));
- x24 = ((fiat_secp521r1_uint1)(x21 >> 27) + (x3 & UINT32_C(0xfffffff)));
- x25 = (x4 & UINT32_C(0x7ffffff));
- x26 = (x5 & UINT32_C(0xfffffff));
- x27 = (x6 & UINT32_C(0x7ffffff));
- x28 = (x7 & UINT32_C(0x7ffffff));
- x29 = (x8 & UINT32_C(0xfffffff));
- x30 = (x9 & UINT32_C(0x7ffffff));
- x31 = (x10 & UINT32_C(0xfffffff));
- x32 = (x11 & UINT32_C(0x7ffffff));
- x33 = (x12 & UINT32_C(0xfffffff));
- x34 = (x13 & UINT32_C(0x7ffffff));
- x35 = (x14 & UINT32_C(0x7ffffff));
- x36 = (x15 & UINT32_C(0xfffffff));
- x37 = (x16 & UINT32_C(0x7ffffff));
- x38 = (x17 & UINT32_C(0xfffffff));
- x39 = (x18 & UINT32_C(0x7ffffff));
- x40 = (x19 & UINT32_C(0x7ffffff));
- out1[0] = x22;
- out1[1] = x23;
- out1[2] = x24;
- out1[3] = x25;
- out1[4] = x26;
- out1[5] = x27;
- out1[6] = x28;
- out1[7] = x29;
- out1[8] = x30;
- out1[9] = x31;
- out1[10] = x32;
- out1[11] = x33;
- out1[12] = x34;
- out1[13] = x35;
- out1[14] = x36;
- out1[15] = x37;
- out1[16] = x38;
- out1[17] = x39;
- out1[18] = x40;
-}
+ bool b = Hacl_P521_dh_initiator(derived, k->data);
-/*
- * The function fiat_secp521r1_selectznz is a multi-limb conditional select.
- *
- * Postconditions:
- * eval out1 = (if arg1 = 0 then eval arg2 else eval arg3)
- *
- * Input Bounds:
- * arg1: [0x0 ~> 0x1]
- * arg2: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
- * arg3: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
- * Output Bounds:
- * out1: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]
- */
-static void
-fiat_secp521r1_selectznz(uint32_t out1[19],
- fiat_secp521r1_uint1 arg1,
- const uint32_t arg2[19],
- const uint32_t arg3[19])
-{
- uint32_t x1;
- uint32_t x2;
- uint32_t x3;
- uint32_t x4;
- uint32_t x5;
- uint32_t x6;
- uint32_t x7;
- uint32_t x8;
- uint32_t x9;
- uint32_t x10;
- uint32_t x11;
- uint32_t x12;
- uint32_t x13;
- uint32_t x14;
- uint32_t x15;
- uint32_t x16;
- uint32_t x17;
- uint32_t x18;
- uint32_t x19;
- fiat_secp521r1_cmovznz_u32(&x1, arg1, (arg2[0]), (arg3[0]));
- fiat_secp521r1_cmovznz_u32(&x2, arg1, (arg2[1]), (arg3[1]));
- fiat_secp521r1_cmovznz_u32(&x3, arg1, (arg2[2]), (arg3[2]));
- fiat_secp521r1_cmovznz_u32(&x4, arg1, (arg2[3]), (arg3[3]));
- fiat_secp521r1_cmovznz_u32(&x5, arg1, (arg2[4]), (arg3[4]));
- fiat_secp521r1_cmovznz_u32(&x6, arg1, (arg2[5]), (arg3[5]));
- fiat_secp521r1_cmovznz_u32(&x7, arg1, (arg2[6]), (arg3[6]));
- fiat_secp521r1_cmovznz_u32(&x8, arg1, (arg2[7]), (arg3[7]));
- fiat_secp521r1_cmovznz_u32(&x9, arg1, (arg2[8]), (arg3[8]));
- fiat_secp521r1_cmovznz_u32(&x10, arg1, (arg2[9]), (arg3[9]));
- fiat_secp521r1_cmovznz_u32(&x11, arg1, (arg2[10]), (arg3[10]));
- fiat_secp521r1_cmovznz_u32(&x12, arg1, (arg2[11]), (arg3[11]));
- fiat_secp521r1_cmovznz_u32(&x13, arg1, (arg2[12]), (arg3[12]));
- fiat_secp521r1_cmovznz_u32(&x14, arg1, (arg2[13]), (arg3[13]));
- fiat_secp521r1_cmovznz_u32(&x15, arg1, (arg2[14]), (arg3[14]));
- fiat_secp521r1_cmovznz_u32(&x16, arg1, (arg2[15]), (arg3[15]));
- fiat_secp521r1_cmovznz_u32(&x17, arg1, (arg2[16]), (arg3[16]));
- fiat_secp521r1_cmovznz_u32(&x18, arg1, (arg2[17]), (arg3[17]));
- fiat_secp521r1_cmovznz_u32(&x19, arg1, (arg2[18]), (arg3[18]));
- out1[0] = x1;
- out1[1] = x2;
- out1[2] = x3;
- out1[3] = x4;
- out1[4] = x5;
- out1[5] = x6;
- out1[6] = x7;
- out1[7] = x8;
- out1[8] = x9;
- out1[9] = x10;
- out1[10] = x11;
- out1[11] = x12;
- out1[12] = x13;
- out1[13] = x14;
- out1[14] = x15;
- out1[15] = x16;
- out1[16] = x17;
- out1[17] = x18;
- out1[18] = x19;
-}
+ if (!b) {
+ PORT_SetError(SEC_ERROR_BAD_KEY);
+ res = SECFailure;
+ return res;
+ }
-/*
- * The function fiat_secp521r1_to_bytes serializes a field element to bytes in little-endian order.
- *
- * Postconditions:
- * out1 = map (λ x, ⌊((eval arg1 mod m) mod 2^(8 * (x + 1))) / 2^(8 * x)⌋) [0..65]
- *
- * Output Bounds:
- * out1: [[0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0x1]]
- */
-static void
-fiat_secp521r1_to_bytes(
- uint8_t out1[66], const fiat_secp521r1_tight_field_element arg1)
-{
- uint32_t x1;
- fiat_secp521r1_uint1 x2;
- uint32_t x3;
- fiat_secp521r1_uint1 x4;
- uint32_t x5;
- fiat_secp521r1_uint1 x6;
- uint32_t x7;
- fiat_secp521r1_uint1 x8;
- uint32_t x9;
- fiat_secp521r1_uint1 x10;
- uint32_t x11;
- fiat_secp521r1_uint1 x12;
- uint32_t x13;
- fiat_secp521r1_uint1 x14;
- uint32_t x15;
- fiat_secp521r1_uint1 x16;
- uint32_t x17;
- fiat_secp521r1_uint1 x18;
- uint32_t x19;
- fiat_secp521r1_uint1 x20;
- uint32_t x21;
- fiat_secp521r1_uint1 x22;
- uint32_t x23;
- fiat_secp521r1_uint1 x24;
- uint32_t x25;
- fiat_secp521r1_uint1 x26;
- uint32_t x27;
- fiat_secp521r1_uint1 x28;
- uint32_t x29;
- fiat_secp521r1_uint1 x30;
- uint32_t x31;
- fiat_secp521r1_uint1 x32;
- uint32_t x33;
- fiat_secp521r1_uint1 x34;
- uint32_t x35;
- fiat_secp521r1_uint1 x36;
- uint32_t x37;
- fiat_secp521r1_uint1 x38;
- uint32_t x39;
- uint32_t x40;
- fiat_secp521r1_uint1 x41;
- uint32_t x42;
- fiat_secp521r1_uint1 x43;
- uint32_t x44;
- fiat_secp521r1_uint1 x45;
- uint32_t x46;
- fiat_secp521r1_uint1 x47;
- uint32_t x48;
- fiat_secp521r1_uint1 x49;
- uint32_t x50;
- fiat_secp521r1_uint1 x51;
- uint32_t x52;
- fiat_secp521r1_uint1 x53;
- uint32_t x54;
- fiat_secp521r1_uint1 x55;
- uint32_t x56;
- fiat_secp521r1_uint1 x57;
- uint32_t x58;
- fiat_secp521r1_uint1 x59;
- uint32_t x60;
- fiat_secp521r1_uint1 x61;
- uint32_t x62;
- fiat_secp521r1_uint1 x63;
- uint32_t x64;
- fiat_secp521r1_uint1 x65;
- uint32_t x66;
- fiat_secp521r1_uint1 x67;
- uint32_t x68;
- fiat_secp521r1_uint1 x69;
- uint32_t x70;
- fiat_secp521r1_uint1 x71;
- uint32_t x72;
- fiat_secp521r1_uint1 x73;
- uint32_t x74;
- fiat_secp521r1_uint1 x75;
- uint32_t x76;
- fiat_secp521r1_uint1 x77;
- uint64_t x78;
- uint32_t x79;
- uint64_t x80;
- uint32_t x81;
- uint32_t x82;
- uint32_t x83;
- uint64_t x84;
- uint32_t x85;
- uint64_t x86;
- uint32_t x87;
- uint32_t x88;
- uint32_t x89;
- uint64_t x90;
- uint32_t x91;
- uint64_t x92;
- uint32_t x93;
- uint8_t x94;
- uint32_t x95;
- uint8_t x96;
- uint32_t x97;
- uint8_t x98;
- uint8_t x99;
- uint32_t x100;
- uint8_t x101;
- uint32_t x102;
- uint8_t x103;
- uint32_t x104;
- uint8_t x105;
- uint8_t x106;
- uint64_t x107;
- uint8_t x108;
- uint32_t x109;
- uint8_t x110;
- uint32_t x111;
- uint8_t x112;
- uint32_t x113;
- uint8_t x114;
- uint8_t x115;
- uint32_t x116;
- uint8_t x117;
- uint32_t x118;
- uint8_t x119;
- uint32_t x120;
- uint8_t x121;
- uint8_t x122;
- uint64_t x123;
- uint8_t x124;
- uint32_t x125;
- uint8_t x126;
- uint32_t x127;
- uint8_t x128;
- uint32_t x129;
- uint8_t x130;
- uint8_t x131;
- uint32_t x132;
- uint8_t x133;
- uint32_t x134;
- uint8_t x135;
- uint32_t x136;
- uint8_t x137;
- uint8_t x138;
- uint32_t x139;
- uint8_t x140;
- uint32_t x141;
- uint8_t x142;
- uint32_t x143;
- uint8_t x144;
- uint8_t x145;
- uint8_t x146;
- uint32_t x147;
- uint8_t x148;
- uint32_t x149;
- uint8_t x150;
- uint8_t x151;
- uint32_t x152;
- uint8_t x153;
- uint32_t x154;
- uint8_t x155;
- uint32_t x156;
- uint8_t x157;
- uint8_t x158;
- uint64_t x159;
- uint8_t x160;
- uint32_t x161;
- uint8_t x162;
- uint32_t x163;
- uint8_t x164;
- uint32_t x165;
- uint8_t x166;
- uint8_t x167;
- uint32_t x168;
- uint8_t x169;
- uint32_t x170;
- uint8_t x171;
- uint32_t x172;
- uint8_t x173;
- uint8_t x174;
- uint64_t x175;
- uint8_t x176;
- uint32_t x177;
- uint8_t x178;
- uint32_t x179;
- uint8_t x180;
- uint32_t x181;
- uint8_t x182;
- uint8_t x183;
- uint32_t x184;
- uint8_t x185;
- uint32_t x186;
- uint8_t x187;
- uint32_t x188;
- uint8_t x189;
- uint8_t x190;
- uint32_t x191;
- uint8_t x192;
- uint32_t x193;
- uint8_t x194;
- uint32_t x195;
- uint8_t x196;
- uint8_t x197;
- uint8_t x198;
- uint32_t x199;
- uint8_t x200;
- uint32_t x201;
- uint8_t x202;
- uint8_t x203;
- uint32_t x204;
- uint8_t x205;
- uint32_t x206;
- uint8_t x207;
- uint32_t x208;
- uint8_t x209;
- uint8_t x210;
- uint64_t x211;
- uint8_t x212;
- uint32_t x213;
- uint8_t x214;
- uint32_t x215;
- uint8_t x216;
- uint32_t x217;
- uint8_t x218;
- uint8_t x219;
- uint32_t x220;
- uint8_t x221;
- uint32_t x222;
- uint8_t x223;
- uint32_t x224;
- uint8_t x225;
- uint8_t x226;
- uint64_t x227;
- uint8_t x228;
- uint32_t x229;
- uint8_t x230;
- uint32_t x231;
- uint8_t x232;
- uint32_t x233;
- uint8_t x234;
- fiat_secp521r1_uint1 x235;
- fiat_secp521r1_subborrowx_u28(&x1, &x2, 0x0, (arg1[0]),
- UINT32_C(0xfffffff));
- fiat_secp521r1_subborrowx_u27(&x3, &x4, x2, (arg1[1]), UINT32_C(0x7ffffff));
- fiat_secp521r1_subborrowx_u28(&x5, &x6, x4, (arg1[2]), UINT32_C(0xfffffff));
- fiat_secp521r1_subborrowx_u27(&x7, &x8, x6, (arg1[3]), UINT32_C(0x7ffffff));
- fiat_secp521r1_subborrowx_u28(&x9, &x10, x8, (arg1[4]),
- UINT32_C(0xfffffff));
- fiat_secp521r1_subborrowx_u27(&x11, &x12, x10, (arg1[5]),
- UINT32_C(0x7ffffff));
- fiat_secp521r1_subborrowx_u27(&x13, &x14, x12, (arg1[6]),
- UINT32_C(0x7ffffff));
- fiat_secp521r1_subborrowx_u28(&x15, &x16, x14, (arg1[7]),
- UINT32_C(0xfffffff));
- fiat_secp521r1_subborrowx_u27(&x17, &x18, x16, (arg1[8]),
- UINT32_C(0x7ffffff));
- fiat_secp521r1_subborrowx_u28(&x19, &x20, x18, (arg1[9]),
- UINT32_C(0xfffffff));
- fiat_secp521r1_subborrowx_u27(&x21, &x22, x20, (arg1[10]),
- UINT32_C(0x7ffffff));
- fiat_secp521r1_subborrowx_u28(&x23, &x24, x22, (arg1[11]),
- UINT32_C(0xfffffff));
- fiat_secp521r1_subborrowx_u27(&x25, &x26, x24, (arg1[12]),
- UINT32_C(0x7ffffff));
- fiat_secp521r1_subborrowx_u27(&x27, &x28, x26, (arg1[13]),
- UINT32_C(0x7ffffff));
- fiat_secp521r1_subborrowx_u28(&x29, &x30, x28, (arg1[14]),
- UINT32_C(0xfffffff));
- fiat_secp521r1_subborrowx_u27(&x31, &x32, x30, (arg1[15]),
- UINT32_C(0x7ffffff));
- fiat_secp521r1_subborrowx_u28(&x33, &x34, x32, (arg1[16]),
- UINT32_C(0xfffffff));
- fiat_secp521r1_subborrowx_u27(&x35, &x36, x34, (arg1[17]),
- UINT32_C(0x7ffffff));
- fiat_secp521r1_subborrowx_u27(&x37, &x38, x36, (arg1[18]),
- UINT32_C(0x7ffffff));
- fiat_secp521r1_cmovznz_u32(&x39, x38, 0x0, UINT32_C(0xffffffff));
- fiat_secp521r1_addcarryx_u28(&x40, &x41, 0x0, x1,
- (x39 & UINT32_C(0xfffffff)));
- fiat_secp521r1_addcarryx_u27(&x42, &x43, x41, x3,
- (x39 & UINT32_C(0x7ffffff)));
- fiat_secp521r1_addcarryx_u28(&x44, &x45, x43, x5,
- (x39 & UINT32_C(0xfffffff)));
- fiat_secp521r1_addcarryx_u27(&x46, &x47, x45, x7,
- (x39 & UINT32_C(0x7ffffff)));
- fiat_secp521r1_addcarryx_u28(&x48, &x49, x47, x9,
- (x39 & UINT32_C(0xfffffff)));
- fiat_secp521r1_addcarryx_u27(&x50, &x51, x49, x11,
- (x39 & UINT32_C(0x7ffffff)));
- fiat_secp521r1_addcarryx_u27(&x52, &x53, x51, x13,
- (x39 & UINT32_C(0x7ffffff)));
- fiat_secp521r1_addcarryx_u28(&x54, &x55, x53, x15,
- (x39 & UINT32_C(0xfffffff)));
- fiat_secp521r1_addcarryx_u27(&x56, &x57, x55, x17,
- (x39 & UINT32_C(0x7ffffff)));
- fiat_secp521r1_addcarryx_u28(&x58, &x59, x57, x19,
- (x39 & UINT32_C(0xfffffff)));
- fiat_secp521r1_addcarryx_u27(&x60, &x61, x59, x21,
- (x39 & UINT32_C(0x7ffffff)));
- fiat_secp521r1_addcarryx_u28(&x62, &x63, x61, x23,
- (x39 & UINT32_C(0xfffffff)));
- fiat_secp521r1_addcarryx_u27(&x64, &x65, x63, x25,
- (x39 & UINT32_C(0x7ffffff)));
- fiat_secp521r1_addcarryx_u27(&x66, &x67, x65, x27,
- (x39 & UINT32_C(0x7ffffff)));
- fiat_secp521r1_addcarryx_u28(&x68, &x69, x67, x29,
- (x39 & UINT32_C(0xfffffff)));
- fiat_secp521r1_addcarryx_u27(&x70, &x71, x69, x31,
- (x39 & UINT32_C(0x7ffffff)));
- fiat_secp521r1_addcarryx_u28(&x72, &x73, x71, x33,
- (x39 & UINT32_C(0xfffffff)));
- fiat_secp521r1_addcarryx_u27(&x74, &x75, x73, x35,
- (x39 & UINT32_C(0x7ffffff)));
- fiat_secp521r1_addcarryx_u27(&x76, &x77, x75, x37,
- (x39 & UINT32_C(0x7ffffff)));
- x78 = ((uint64_t)x76 << 6);
- x79 = (x74 << 3);
- x80 = ((uint64_t)x72 << 7);
- x81 = (x70 << 4);
- x82 = (x66 << 5);
- x83 = (x64 << 2);
- x84 = ((uint64_t)x62 << 6);
- x85 = (x60 << 3);
- x86 = ((uint64_t)x58 << 7);
- x87 = (x56 << 4);
- x88 = (x52 << 5);
- x89 = (x50 << 2);
- x90 = ((uint64_t)x48 << 6);
- x91 = (x46 << 3);
- x92 = ((uint64_t)x44 << 7);
- x93 = (x42 << 4);
- x94 = (uint8_t)(x40 & UINT8_C(0xff));
- x95 = (x40 >> 8);
- x96 = (uint8_t)(x95 & UINT8_C(0xff));
- x97 = (x95 >> 8);
- x98 = (uint8_t)(x97 & UINT8_C(0xff));
- x99 = (uint8_t)(x97 >> 8);
- x100 = (x93 + (uint32_t)x99);
- x101 = (uint8_t)(x100 & UINT8_C(0xff));
- x102 = (x100 >> 8);
- x103 = (uint8_t)(x102 & UINT8_C(0xff));
- x104 = (x102 >> 8);
- x105 = (uint8_t)(x104 & UINT8_C(0xff));
- x106 = (uint8_t)(x104 >> 8);
- x107 = (x92 + (uint64_t)x106);
- x108 = (uint8_t)(x107 & UINT8_C(0xff));
- x109 = (uint32_t)(x107 >> 8);
- x110 = (uint8_t)(x109 & UINT8_C(0xff));
- x111 = (x109 >> 8);
- x112 = (uint8_t)(x111 & UINT8_C(0xff));
- x113 = (x111 >> 8);
- x114 = (uint8_t)(x113 & UINT8_C(0xff));
- x115 = (uint8_t)(x113 >> 8);
- x116 = (x91 + (uint32_t)x115);
- x117 = (uint8_t)(x116 & UINT8_C(0xff));
- x118 = (x116 >> 8);
- x119 = (uint8_t)(x118 & UINT8_C(0xff));
- x120 = (x118 >> 8);
- x121 = (uint8_t)(x120 & UINT8_C(0xff));
- x122 = (uint8_t)(x120 >> 8);
- x123 = (x90 + (uint64_t)x122);
- x124 = (uint8_t)(x123 & UINT8_C(0xff));
- x125 = (uint32_t)(x123 >> 8);
- x126 = (uint8_t)(x125 & UINT8_C(0xff));
- x127 = (x125 >> 8);
- x128 = (uint8_t)(x127 & UINT8_C(0xff));
- x129 = (x127 >> 8);
- x130 = (uint8_t)(x129 & UINT8_C(0xff));
- x131 = (uint8_t)(x129 >> 8);
- x132 = (x89 + (uint32_t)x131);
- x133 = (uint8_t)(x132 & UINT8_C(0xff));
- x134 = (x132 >> 8);
- x135 = (uint8_t)(x134 & UINT8_C(0xff));
- x136 = (x134 >> 8);
- x137 = (uint8_t)(x136 & UINT8_C(0xff));
- x138 = (uint8_t)(x136 >> 8);
- x139 = (x88 + (uint32_t)x138);
- x140 = (uint8_t)(x139 & UINT8_C(0xff));
- x141 = (x139 >> 8);
- x142 = (uint8_t)(x141 & UINT8_C(0xff));
- x143 = (x141 >> 8);
- x144 = (uint8_t)(x143 & UINT8_C(0xff));
- x145 = (uint8_t)(x143 >> 8);
- x146 = (uint8_t)(x54 & UINT8_C(0xff));
- x147 = (x54 >> 8);
- x148 = (uint8_t)(x147 & UINT8_C(0xff));
- x149 = (x147 >> 8);
- x150 = (uint8_t)(x149 & UINT8_C(0xff));
- x151 = (uint8_t)(x149 >> 8);
- x152 = (x87 + (uint32_t)x151);
- x153 = (uint8_t)(x152 & UINT8_C(0xff));
- x154 = (x152 >> 8);
- x155 = (uint8_t)(x154 & UINT8_C(0xff));
- x156 = (x154 >> 8);
- x157 = (uint8_t)(x156 & UINT8_C(0xff));
- x158 = (uint8_t)(x156 >> 8);
- x159 = (x86 + (uint64_t)x158);
- x160 = (uint8_t)(x159 & UINT8_C(0xff));
- x161 = (uint32_t)(x159 >> 8);
- x162 = (uint8_t)(x161 & UINT8_C(0xff));
- x163 = (x161 >> 8);
- x164 = (uint8_t)(x163 & UINT8_C(0xff));
- x165 = (x163 >> 8);
- x166 = (uint8_t)(x165 & UINT8_C(0xff));
- x167 = (uint8_t)(x165 >> 8);
- x168 = (x85 + (uint32_t)x167);
- x169 = (uint8_t)(x168 & UINT8_C(0xff));
- x170 = (x168 >> 8);
- x171 = (uint8_t)(x170 & UINT8_C(0xff));
- x172 = (x170 >> 8);
- x173 = (uint8_t)(x172 & UINT8_C(0xff));
- x174 = (uint8_t)(x172 >> 8);
- x175 = (x84 + (uint64_t)x174);
- x176 = (uint8_t)(x175 & UINT8_C(0xff));
- x177 = (uint32_t)(x175 >> 8);
- x178 = (uint8_t)(x177 & UINT8_C(0xff));
- x179 = (x177 >> 8);
- x180 = (uint8_t)(x179 & UINT8_C(0xff));
- x181 = (x179 >> 8);
- x182 = (uint8_t)(x181 & UINT8_C(0xff));
- x183 = (uint8_t)(x181 >> 8);
- x184 = (x83 + (uint32_t)x183);
- x185 = (uint8_t)(x184 & UINT8_C(0xff));
- x186 = (x184 >> 8);
- x187 = (uint8_t)(x186 & UINT8_C(0xff));
- x188 = (x186 >> 8);
- x189 = (uint8_t)(x188 & UINT8_C(0xff));
- x190 = (uint8_t)(x188 >> 8);
- x191 = (x82 + (uint32_t)x190);
- x192 = (uint8_t)(x191 & UINT8_C(0xff));
- x193 = (x191 >> 8);
- x194 = (uint8_t)(x193 & UINT8_C(0xff));
- x195 = (x193 >> 8);
- x196 = (uint8_t)(x195 & UINT8_C(0xff));
- x197 = (uint8_t)(x195 >> 8);
- x198 = (uint8_t)(x68 & UINT8_C(0xff));
- x199 = (x68 >> 8);
- x200 = (uint8_t)(x199 & UINT8_C(0xff));
- x201 = (x199 >> 8);
- x202 = (uint8_t)(x201 & UINT8_C(0xff));
- x203 = (uint8_t)(x201 >> 8);
- x204 = (x81 + (uint32_t)x203);
- x205 = (uint8_t)(x204 & UINT8_C(0xff));
- x206 = (x204 >> 8);
- x207 = (uint8_t)(x206 & UINT8_C(0xff));
- x208 = (x206 >> 8);
- x209 = (uint8_t)(x208 & UINT8_C(0xff));
- x210 = (uint8_t)(x208 >> 8);
- x211 = (x80 + (uint64_t)x210);
- x212 = (uint8_t)(x211 & UINT8_C(0xff));
- x213 = (uint32_t)(x211 >> 8);
- x214 = (uint8_t)(x213 & UINT8_C(0xff));
- x215 = (x213 >> 8);
- x216 = (uint8_t)(x215 & UINT8_C(0xff));
- x217 = (x215 >> 8);
- x218 = (uint8_t)(x217 & UINT8_C(0xff));
- x219 = (uint8_t)(x217 >> 8);
- x220 = (x79 + (uint32_t)x219);
- x221 = (uint8_t)(x220 & UINT8_C(0xff));
- x222 = (x220 >> 8);
- x223 = (uint8_t)(x222 & UINT8_C(0xff));
- x224 = (x222 >> 8);
- x225 = (uint8_t)(x224 & UINT8_C(0xff));
- x226 = (uint8_t)(x224 >> 8);
- x227 = (x78 + (uint64_t)x226);
- x228 = (uint8_t)(x227 & UINT8_C(0xff));
- x229 = (uint32_t)(x227 >> 8);
- x230 = (uint8_t)(x229 & UINT8_C(0xff));
- x231 = (x229 >> 8);
- x232 = (uint8_t)(x231 & UINT8_C(0xff));
- x233 = (x231 >> 8);
- x234 = (uint8_t)(x233 & UINT8_C(0xff));
- x235 = (fiat_secp521r1_uint1)(x233 >> 8);
- out1[0] = x94;
- out1[1] = x96;
- out1[2] = x98;
- out1[3] = x101;
- out1[4] = x103;
- out1[5] = x105;
- out1[6] = x108;
- out1[7] = x110;
- out1[8] = x112;
- out1[9] = x114;
- out1[10] = x117;
- out1[11] = x119;
- out1[12] = x121;
- out1[13] = x124;
- out1[14] = x126;
- out1[15] = x128;
- out1[16] = x130;
- out1[17] = x133;
- out1[18] = x135;
- out1[19] = x137;
- out1[20] = x140;
- out1[21] = x142;
- out1[22] = x144;
- out1[23] = x145;
- out1[24] = x146;
- out1[25] = x148;
- out1[26] = x150;
- out1[27] = x153;
- out1[28] = x155;
- out1[29] = x157;
- out1[30] = x160;
- out1[31] = x162;
- out1[32] = x164;
- out1[33] = x166;
- out1[34] = x169;
- out1[35] = x171;
- out1[36] = x173;
- out1[37] = x176;
- out1[38] = x178;
- out1[39] = x180;
- out1[40] = x182;
- out1[41] = x185;
- out1[42] = x187;
- out1[43] = x189;
- out1[44] = x192;
- out1[45] = x194;
- out1[46] = x196;
- out1[47] = x197;
- out1[48] = x198;
- out1[49] = x200;
- out1[50] = x202;
- out1[51] = x205;
- out1[52] = x207;
- out1[53] = x209;
- out1[54] = x212;
- out1[55] = x214;
- out1[56] = x216;
- out1[57] = x218;
- out1[58] = x221;
- out1[59] = x223;
- out1[60] = x225;
- out1[61] = x228;
- out1[62] = x230;
- out1[63] = x232;
- out1[64] = x234;
- out1[65] = x235;
-}
+ X->len = 133;
+ X->data[0] = EC_POINT_FORM_UNCOMPRESSED;
+ memcpy(X->data + 1, derived, 132);
-/*
- * The function fiat_secp521r1_from_bytes deserializes a field element from bytes in little-endian order.
- *
- * Postconditions:
- * eval out1 mod m = bytes_eval arg1 mod m
- *
- * Input Bounds:
- * arg1: [[0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0xff], [0x0 ~> 0x1]]
- */
-static void
-fiat_secp521r1_from_bytes(fiat_secp521r1_tight_field_element out1,
- const uint8_t arg1[66])
-{
- uint32_t x1;
- uint32_t x2;
- uint32_t x3;
- uint32_t x4;
- uint32_t x5;
- uint32_t x6;
- uint32_t x7;
- uint64_t x8;
- uint32_t x9;
- uint32_t x10;
- uint32_t x11;
- uint32_t x12;
- uint32_t x13;
- uint32_t x14;
- uint32_t x15;
- uint32_t x16;
- uint32_t x17;
- uint8_t x18;
- uint32_t x19;
- uint32_t x20;
- uint32_t x21;
- uint32_t x22;
- uint32_t x23;
- uint32_t x24;
- uint64_t x25;
- uint32_t x26;
- uint32_t x27;
- uint32_t x28;
- uint32_t x29;
- uint32_t x30;
- uint32_t x31;
- uint64_t x32;
- uint32_t x33;
- uint32_t x34;
- uint32_t x35;
- uint32_t x36;
- uint32_t x37;
- uint32_t x38;
- uint32_t x39;
- uint32_t x40;
- uint32_t x41;
- uint8_t x42;
- uint32_t x43;
- uint32_t x44;
- uint32_t x45;
- uint32_t x46;
- uint32_t x47;
- uint32_t x48;
- uint64_t x49;
- uint32_t x50;
- uint32_t x51;
- uint32_t x52;
- uint32_t x53;
- uint32_t x54;
- uint32_t x55;
- uint64_t x56;
- uint32_t x57;
- uint32_t x58;
- uint32_t x59;
- uint32_t x60;
- uint32_t x61;
- uint32_t x62;
- uint32_t x63;
- uint32_t x64;
- uint32_t x65;
- uint8_t x66;
- uint32_t x67;
- uint32_t x68;
- uint32_t x69;
- uint32_t x70;
- uint8_t x71;
- uint32_t x72;
- uint32_t x73;
- uint32_t x74;
- uint32_t x75;
- fiat_secp521r1_uint1 x76;
- uint32_t x77;
- uint32_t x78;
- uint32_t x79;
- uint64_t x80;
- uint32_t x81;
- uint8_t x82;
- uint32_t x83;
- uint32_t x84;
- uint32_t x85;
- uint32_t x86;
- uint8_t x87;
- uint32_t x88;
- uint32_t x89;
- uint32_t x90;
- uint64_t x91;
- uint32_t x92;
- uint8_t x93;
- uint32_t x94;
- uint32_t x95;
- uint32_t x96;
- uint32_t x97;
- uint8_t x98;
- uint32_t x99;
- uint32_t x100;
- uint32_t x101;
- uint32_t x102;
- uint32_t x103;
- uint32_t x104;
- uint32_t x105;
- uint8_t x106;
- uint32_t x107;
- uint32_t x108;
- uint32_t x109;
- uint32_t x110;
- fiat_secp521r1_uint1 x111;
- uint32_t x112;
- uint32_t x113;
- uint32_t x114;
- uint64_t x115;
- uint32_t x116;
- uint8_t x117;
- uint32_t x118;
- uint32_t x119;
- uint32_t x120;
- uint32_t x121;
- uint8_t x122;
- uint32_t x123;
- uint32_t x124;
- uint32_t x125;
- uint64_t x126;
- uint32_t x127;
- uint8_t x128;
- uint32_t x129;
- uint32_t x130;
- uint32_t x131;
- uint32_t x132;
- uint8_t x133;
- uint32_t x134;
- uint32_t x135;
- uint32_t x136;
- uint32_t x137;
- uint32_t x138;
- uint32_t x139;
- uint32_t x140;
- uint8_t x141;
- uint32_t x142;
- uint32_t x143;
- uint32_t x144;
- uint32_t x145;
- fiat_secp521r1_uint1 x146;
- uint32_t x147;
- uint32_t x148;
- uint32_t x149;
- uint64_t x150;
- uint32_t x151;
- uint8_t x152;
- uint32_t x153;
- uint32_t x154;
- uint32_t x155;
- uint32_t x156;
- uint8_t x157;
- uint32_t x158;
- uint32_t x159;
- uint32_t x160;
- uint32_t x161;
- x1 = ((uint32_t)(fiat_secp521r1_uint1)(arg1[65]) << 26);
- x2 = ((uint32_t)(arg1[64]) << 18);
- x3 = ((uint32_t)(arg1[63]) << 10);
- x4 = ((uint32_t)(arg1[62]) << 2);
- x5 = ((uint32_t)(arg1[61]) << 21);
- x6 = ((uint32_t)(arg1[60]) << 13);
- x7 = ((uint32_t)(arg1[59]) << 5);
- x8 = ((uint64_t)(arg1[58]) << 25);
- x9 = ((uint32_t)(arg1[57]) << 17);
- x10 = ((uint32_t)(arg1[56]) << 9);
- x11 = ((uint32_t)(arg1[55]) * 0x2);
- x12 = ((uint32_t)(arg1[54]) << 20);
- x13 = ((uint32_t)(arg1[53]) << 12);
- x14 = ((uint32_t)(arg1[52]) << 4);
- x15 = ((uint32_t)(arg1[51]) << 24);
- x16 = ((uint32_t)(arg1[50]) << 16);
- x17 = ((uint32_t)(arg1[49]) << 8);
- x18 = (arg1[48]);
- x19 = ((uint32_t)(arg1[47]) << 19);
- x20 = ((uint32_t)(arg1[46]) << 11);
- x21 = ((uint32_t)(arg1[45]) << 3);
- x22 = ((uint32_t)(arg1[44]) << 22);
- x23 = ((uint32_t)(arg1[43]) << 14);
- x24 = ((uint32_t)(arg1[42]) << 6);
- x25 = ((uint64_t)(arg1[41]) << 26);
- x26 = ((uint32_t)(arg1[40]) << 18);
- x27 = ((uint32_t)(arg1[39]) << 10);
- x28 = ((uint32_t)(arg1[38]) << 2);
- x29 = ((uint32_t)(arg1[37]) << 21);
- x30 = ((uint32_t)(arg1[36]) << 13);
- x31 = ((uint32_t)(arg1[35]) << 5);
- x32 = ((uint64_t)(arg1[34]) << 25);
- x33 = ((uint32_t)(arg1[33]) << 17);
- x34 = ((uint32_t)(arg1[32]) << 9);
- x35 = ((uint32_t)(arg1[31]) * 0x2);
- x36 = ((uint32_t)(arg1[30]) << 20);
- x37 = ((uint32_t)(arg1[29]) << 12);
- x38 = ((uint32_t)(arg1[28]) << 4);
- x39 = ((uint32_t)(arg1[27]) << 24);
- x40 = ((uint32_t)(arg1[26]) << 16);
- x41 = ((uint32_t)(arg1[25]) << 8);
- x42 = (arg1[24]);
- x43 = ((uint32_t)(arg1[23]) << 19);
- x44 = ((uint32_t)(arg1[22]) << 11);
- x45 = ((uint32_t)(arg1[21]) << 3);
- x46 = ((uint32_t)(arg1[20]) << 22);
- x47 = ((uint32_t)(arg1[19]) << 14);
- x48 = ((uint32_t)(arg1[18]) << 6);
- x49 = ((uint64_t)(arg1[17]) << 26);
- x50 = ((uint32_t)(arg1[16]) << 18);
- x51 = ((uint32_t)(arg1[15]) << 10);
- x52 = ((uint32_t)(arg1[14]) << 2);
- x53 = ((uint32_t)(arg1[13]) << 21);
- x54 = ((uint32_t)(arg1[12]) << 13);
- x55 = ((uint32_t)(arg1[11]) << 5);
- x56 = ((uint64_t)(arg1[10]) << 25);
- x57 = ((uint32_t)(arg1[9]) << 17);
- x58 = ((uint32_t)(arg1[8]) << 9);
- x59 = ((uint32_t)(arg1[7]) * 0x2);
- x60 = ((uint32_t)(arg1[6]) << 20);
- x61 = ((uint32_t)(arg1[5]) << 12);
- x62 = ((uint32_t)(arg1[4]) << 4);
- x63 = ((uint32_t)(arg1[3]) << 24);
- x64 = ((uint32_t)(arg1[2]) << 16);
- x65 = ((uint32_t)(arg1[1]) << 8);
- x66 = (arg1[0]);
- x67 = (x65 + (uint32_t)x66);
- x68 = (x64 + x67);
- x69 = (x63 + x68);
- x70 = (x69 & UINT32_C(0xfffffff));
- x71 = (uint8_t)(x69 >> 28);
- x72 = (x62 + (uint32_t)x71);
- x73 = (x61 + x72);
- x74 = (x60 + x73);
- x75 = (x74 & UINT32_C(0x7ffffff));
- x76 = (fiat_secp521r1_uint1)(x74 >> 27);
- x77 = (x59 + (uint32_t)x76);
- x78 = (x58 + x77);
- x79 = (x57 + x78);
- x80 = (x56 + x79);
- x81 = (uint32_t)(x80 & UINT32_C(0xfffffff));
- x82 = (uint8_t)(x80 >> 28);
- x83 = (x55 + (uint32_t)x82);
- x84 = (x54 + x83);
- x85 = (x53 + x84);
- x86 = (x85 & UINT32_C(0x7ffffff));
- x87 = (uint8_t)(x85 >> 27);
- x88 = (x52 + (uint32_t)x87);
- x89 = (x51 + x88);
- x90 = (x50 + x89);
- x91 = (x49 + x90);
- x92 = (uint32_t)(x91 & UINT32_C(0xfffffff));
- x93 = (uint8_t)(x91 >> 28);
- x94 = (x48 + (uint32_t)x93);
- x95 = (x47 + x94);
- x96 = (x46 + x95);
- x97 = (x96 & UINT32_C(0x7ffffff));
- x98 = (uint8_t)(x96 >> 27);
- x99 = (x45 + (uint32_t)x98);
- x100 = (x44 + x99);
- x101 = (x43 + x100);
- x102 = (x41 + (uint32_t)x42);
- x103 = (x40 + x102);
- x104 = (x39 + x103);
- x105 = (x104 & UINT32_C(0xfffffff));
- x106 = (uint8_t)(x104 >> 28);
- x107 = (x38 + (uint32_t)x106);
- x108 = (x37 + x107);
- x109 = (x36 + x108);
- x110 = (x109 & UINT32_C(0x7ffffff));
- x111 = (fiat_secp521r1_uint1)(x109 >> 27);
- x112 = (x35 + (uint32_t)x111);
- x113 = (x34 + x112);
- x114 = (x33 + x113);
- x115 = (x32 + x114);
- x116 = (uint32_t)(x115 & UINT32_C(0xfffffff));
- x117 = (uint8_t)(x115 >> 28);
- x118 = (x31 + (uint32_t)x117);
- x119 = (x30 + x118);
- x120 = (x29 + x119);
- x121 = (x120 & UINT32_C(0x7ffffff));
- x122 = (uint8_t)(x120 >> 27);
- x123 = (x28 + (uint32_t)x122);
- x124 = (x27 + x123);
- x125 = (x26 + x124);
- x126 = (x25 + x125);
- x127 = (uint32_t)(x126 & UINT32_C(0xfffffff));
- x128 = (uint8_t)(x126 >> 28);
- x129 = (x24 + (uint32_t)x128);
- x130 = (x23 + x129);
- x131 = (x22 + x130);
- x132 = (x131 & UINT32_C(0x7ffffff));
- x133 = (uint8_t)(x131 >> 27);
- x134 = (x21 + (uint32_t)x133);
- x135 = (x20 + x134);
- x136 = (x19 + x135);
- x137 = (x17 + (uint32_t)x18);
- x138 = (x16 + x137);
- x139 = (x15 + x138);
- x140 = (x139 & UINT32_C(0xfffffff));
- x141 = (uint8_t)(x139 >> 28);
- x142 = (x14 + (uint32_t)x141);
- x143 = (x13 + x142);
- x144 = (x12 + x143);
- x145 = (x144 & UINT32_C(0x7ffffff));
- x146 = (fiat_secp521r1_uint1)(x144 >> 27);
- x147 = (x11 + (uint32_t)x146);
- x148 = (x10 + x147);
- x149 = (x9 + x148);
- x150 = (x8 + x149);
- x151 = (uint32_t)(x150 & UINT32_C(0xfffffff));
- x152 = (uint8_t)(x150 >> 28);
- x153 = (x7 + (uint32_t)x152);
- x154 = (x6 + x153);
- x155 = (x5 + x154);
- x156 = (x155 & UINT32_C(0x7ffffff));
- x157 = (uint8_t)(x155 >> 27);
- x158 = (x4 + (uint32_t)x157);
- x159 = (x3 + x158);
- x160 = (x2 + x159);
- x161 = (x1 + x160);
- out1[0] = x70;
- out1[1] = x75;
- out1[2] = x81;
- out1[3] = x86;
- out1[4] = x92;
- out1[5] = x97;
- out1[6] = x101;
- out1[7] = x105;
- out1[8] = x110;
- out1[9] = x116;
- out1[10] = x121;
- out1[11] = x127;
- out1[12] = x132;
- out1[13] = x136;
- out1[14] = x140;
- out1[15] = x145;
- out1[16] = x151;
- out1[17] = x156;
- out1[18] = x161;
-}
+ } else {
+ uint8_t full_key[66] = { 0 };
+ uint8_t *key;
+ uint8_t derived[132] = { 0 };
-/* END verbatim fiat code */
+ if (!X || !k || !P || !X->data || !k->data || !P->data ||
+ X->len < 66 || P->len != 133 ||
+ P->data[0] != EC_POINT_FORM_UNCOMPRESSED) {
+ PORT_SetError(SEC_ERROR_INVALID_ARGS);
+ res = SECFailure;
+ return res;
+ }
-/* curve-related constants */
+ /* We consider keys of up to size 66, or of size 67 with a single leading 0 */
+ if (k->len < 66) {
+ memcpy(full_key + 66 - k->len, k->data, k->len);
+ key = full_key;
+ } else if (k->len == 66) {
+ key = k->data;
+ } else if (k->len == 67 && k->data[0] == 0) {
+ key = k->data + 1;
+ } else {
+ PORT_SetError(SEC_ERROR_INVALID_ARGS);
+ res = SECFailure;
+ return res;
+ }
-static const limb_t const_one[19] = {
- UINT32_C(0x00000001), UINT32_C(0x00000000), UINT32_C(0x00000000),
- UINT32_C(0x00000000), UINT32_C(0x00000000), UINT32_C(0x00000000),
- UINT32_C(0x00000000), UINT32_C(0x00000000), UINT32_C(0x00000000),
- UINT32_C(0x00000000), UINT32_C(0x00000000), UINT32_C(0x00000000),
- UINT32_C(0x00000000), UINT32_C(0x00000000), UINT32_C(0x00000000),
- UINT32_C(0x00000000), UINT32_C(0x00000000), UINT32_C(0x00000000),
- UINT32_C(0x00000000)
-};
+ bool b = Hacl_P521_dh_responder(derived, P->data + 1, key);
-static const limb_t const_b[19] = {
- UINT32_C(0x0B503F00), UINT32_C(0x0451FD46), UINT32_C(0x0869E3DE),
- UINT32_C(0x03F107A5), UINT32_C(0x0C1CD5CF), UINT32_C(0x074EEC6F),
- UINT32_C(0x00B29605), UINT32_C(0x0C7E937B), UINT32_C(0x0193951E),
- UINT32_C(0x0213C2AC), UINT32_C(0x013231DE), UINT32_C(0x07CEE2D2),
- UINT32_C(0x06E66CC5), UINT32_C(0x0516D392), UINT32_C(0x068540EE),
- UINT32_C(0x01A21A0B), UINT32_C(0x09343F25), UINT32_C(0x072C31C3),
- UINT32_C(0x014654FA)
-};
+ if (!b) {
+ PORT_SetError(SEC_ERROR_BAD_KEY);
+ res = SECFailure;
+ return res;
+ }
-/* LUT for scalar multiplication by comb interleaving */
-static const pt_aff_t lut_cmb[13][16] = {
- {
- { { UINT32_C(0x02E5BD66), UINT32_C(0x07E7E31C), UINT32_C(0x048537F2),
- UINT32_C(0x067830AD), UINT32_C(0x0378CD22), UINT32_C(0x01E8BFEA),
- UINT32_C(0x07F0EE09), UINT32_C(0x0FE75928), UINT32_C(0x04B5E77E),
- UINT32_C(0x0A7B7542), UINT32_C(0x05EC0D69), UINT32_C(0x0487E0A2),
- UINT32_C(0x06414FED), UINT32_C(0x04E32409), UINT32_C(0x0395B442),
- UINT32_C(0x03ECB662), UINT32_C(0x09D39B3C), UINT32_C(0x00D6E080),
- UINT32_C(0x031A1638) },
- { UINT32_C(0x0FD16650), UINT32_C(0x03E94769), UINT32_C(0x05848111),
- UINT32_C(0x0610D44E), UINT32_C(0x0D84D4F1), UINT32_C(0x004FEB41),
- UINT32_C(0x062A85C8), UINT32_C(0x0EF42640), UINT32_C(0x06E72995),
- UINT32_C(0x0CCC592F), UINT32_C(0x07A2E4E7), UINT32_C(0x01A05EBE),
- UINT32_C(0x0255E6D1), UINT32_C(0x04C7AA22), UINT32_C(0x0C7D1BD9),
- UINT32_C(0x00A5FB42), UINT32_C(0x078008B9), UINT32_C(0x054F1347),
- UINT32_C(0x0460E4A5) } },
- { { UINT32_C(0x0E37AD7D), UINT32_C(0x0119D2ED), UINT32_C(0x05D40B4B),
- UINT32_C(0x0210C586), UINT32_C(0x086EBAD2), UINT32_C(0x05AD67F8),
- UINT32_C(0x00ED35E8), UINT32_C(0x0A483205), UINT32_C(0x03F164A3),
- UINT32_C(0x051BA35A), UINT32_C(0x074225AF), UINT32_C(0x0AE796B5),
- UINT32_C(0x06C48F66), UINT32_C(0x05A95372), UINT32_C(0x05959479),
- UINT32_C(0x01D6A64B), UINT32_C(0x0232BBB2), UINT32_C(0x04887BC5),
- UINT32_C(0x069CF4D4) },
- { UINT32_C(0x0E86C0E5), UINT32_C(0x0588CA1E), UINT32_C(0x0B2084BE),
- UINT32_C(0x01379274), UINT32_C(0x0C33C417), UINT32_C(0x0477B0F1),
- UINT32_C(0x016AD676), UINT32_C(0x0DC575B0), UINT32_C(0x02DD4CF8),
- UINT32_C(0x0B9DD85C), UINT32_C(0x0563F46A), UINT32_C(0x0C5F4BE2),
- UINT32_C(0x020AA740), UINT32_C(0x078AABFD), UINT32_C(0x0AB814F2),
- UINT32_C(0x01F86C6C), UINT32_C(0x05BBB32F), UINT32_C(0x072FBF4C),
- UINT32_C(0x04FA6C0E) } },
- { { UINT32_C(0x0C8F3078), UINT32_C(0x02B5096E), UINT32_C(0x062E71AB),
- UINT32_C(0x043CDB12), UINT32_C(0x068CA75F), UINT32_C(0x03C4DF9E),
- UINT32_C(0x038897F5), UINT32_C(0x0E301423), UINT32_C(0x03C0C6D5),
- UINT32_C(0x0F59C870), UINT32_C(0x03571E2E), UINT32_C(0x04933C0F),
- UINT32_C(0x076D4FC3), UINT32_C(0x03D2CB77), UINT32_C(0x004EB0BF),
- UINT32_C(0x03C3391C), UINT32_C(0x08658E7B), UINT32_C(0x00A524F4),
- UINT32_C(0x0194AFCF) },
- { UINT32_C(0x0EB090CB), UINT32_C(0x03CC3E8D), UINT32_C(0x09EFF02E),
- UINT32_C(0x00E4AE6A), UINT32_C(0x0DE747C0), UINT32_C(0x00473D7F),
- UINT32_C(0x0188AA01), UINT32_C(0x072CF374), UINT32_C(0x06897C90),
- UINT32_C(0x08E10F76), UINT32_C(0x02F93406), UINT32_C(0x0147B760),
- UINT32_C(0x03A1CB80), UINT32_C(0x00E6C7F4), UINT32_C(0x0A811291),
- UINT32_C(0x02B73114), UINT32_C(0x03ADD914), UINT32_C(0x037BACC0),
- UINT32_C(0x056F9BBC) } },
- { { UINT32_C(0x0816ECD4), UINT32_C(0x04EAD882), UINT32_C(0x04C33403),
- UINT32_C(0x07EA1FB8), UINT32_C(0x0F11BE54), UINT32_C(0x043738EE),
- UINT32_C(0x064D36F9), UINT32_C(0x0FC698D8), UINT32_C(0x0308D0AB),
- UINT32_C(0x0298BB18), UINT32_C(0x02585EE2), UINT32_C(0x08A3C063),
- UINT32_C(0x023D520C), UINT32_C(0x02F91707), UINT32_C(0x0B073A0C),
- UINT32_C(0x0365FDA0), UINT32_C(0x0EC68DDD), UINT32_C(0x0333AB6F),
- UINT32_C(0x015B5747) },
- { UINT32_C(0x0525251B), UINT32_C(0x06B8BC90), UINT32_C(0x0DF8F6B8),
- UINT32_C(0x06254BBB), UINT32_C(0x097E79D9), UINT32_C(0x01647386),
- UINT32_C(0x04A91D1A), UINT32_C(0x0DEC9E2B), UINT32_C(0x050F293C),
- UINT32_C(0x07BCAAD7), UINT32_C(0x033144D9), UINT32_C(0x0375C76F),
- UINT32_C(0x040A093C), UINT32_C(0x05AE2C16), UINT32_C(0x09D68478),
- UINT32_C(0x058317A3), UINT32_C(0x054221A3), UINT32_C(0x07B37554),
- UINT32_C(0x00F4B46D) } },
- { { UINT32_C(0x07CBE207), UINT32_C(0x04562796), UINT32_C(0x0A50CC3E),
- UINT32_C(0x0757B0B9), UINT32_C(0x063D3D42), UINT32_C(0x07DC968C),
- UINT32_C(0x079E2AB6), UINT32_C(0x0134DA35), UINT32_C(0x029E1396),
- UINT32_C(0x0D6CCAE8), UINT32_C(0x0628B718), UINT32_C(0x0A64B12A),
- UINT32_C(0x06E621D1), UINT32_C(0x0769A2A0), UINT32_C(0x0156D488),
- UINT32_C(0x075BF157), UINT32_C(0x04304D45), UINT32_C(0x046B3C3C),
- UINT32_C(0x05614E27) },
- { UINT32_C(0x09AD2A4E), UINT32_C(0x020EA86B), UINT32_C(0x001E6875),
- UINT32_C(0x055D2511), UINT32_C(0x01F5CDB0), UINT32_C(0x03D2AFF6),
- UINT32_C(0x007FAB76), UINT32_C(0x0057AC84), UINT32_C(0x069E5756),
- UINT32_C(0x0688DC1A), UINT32_C(0x0744C7BB), UINT32_C(0x0EDB2096),
- UINT32_C(0x053B873A), UINT32_C(0x01844532), UINT32_C(0x07AE938E),
- UINT32_C(0x055557A2), UINT32_C(0x0BE73E16), UINT32_C(0x0193515D),
- UINT32_C(0x00A8B986) } },
- { { UINT32_C(0x0A0CDB9A), UINT32_C(0x040E02DD), UINT32_C(0x035205D9),
- UINT32_C(0x0049F499), UINT32_C(0x02140570), UINT32_C(0x02F8C644),
- UINT32_C(0x068CD8D7), UINT32_C(0x0663DA1B), UINT32_C(0x05BC5332),
- UINT32_C(0x022CA5E7), UINT32_C(0x058A9E53), UINT32_C(0x02550FBC),
- UINT32_C(0x035F05E1), UINT32_C(0x076AEE3F), UINT32_C(0x0B4315CF),
- UINT32_C(0x01A39573), UINT32_C(0x0BFEA8DE), UINT32_C(0x024B3FBD),
- UINT32_C(0x0229D610) },
- { UINT32_C(0x0E48C808), UINT32_C(0x0074F92C), UINT32_C(0x0336BAB1),
- UINT32_C(0x001C7E90), UINT32_C(0x0CDB72B2), UINT32_C(0x06452A54),
- UINT32_C(0x01C49198), UINT32_C(0x0B42A4AB), UINT32_C(0x048A90E8),
- UINT32_C(0x03705637), UINT32_C(0x02BA9C17), UINT32_C(0x024FB4BA),
- UINT32_C(0x00842F41), UINT32_C(0x01D6EAB3), UINT32_C(0x054FB229),
- UINT32_C(0x00CA8770), UINT32_C(0x0253093A), UINT32_C(0x07F97744),
- UINT32_C(0x025BECC0) } },
- { { UINT32_C(0x02FBCDA7), UINT32_C(0x007848D3), UINT32_C(0x01DFF031),
- UINT32_C(0x07601567), UINT32_C(0x0BA52FB0), UINT32_C(0x01E6AE23),
- UINT32_C(0x01AA852F), UINT32_C(0x003C996A), UINT32_C(0x0445908E),
- UINT32_C(0x070CC265), UINT32_C(0x0257D5EB), UINT32_C(0x08E13BB7),
- UINT32_C(0x03786D30), UINT32_C(0x049FB9B6), UINT32_C(0x0924861A),
- UINT32_C(0x0065D2B4), UINT32_C(0x0D5B39AF), UINT32_C(0x07309872),
- UINT32_C(0x01F8FA63) },
- { UINT32_C(0x022A71C9), UINT32_C(0x01A01FB0), UINT32_C(0x0FD3EE52),
- UINT32_C(0x0555F222), UINT32_C(0x0F0D8667), UINT32_C(0x05472FEE),
- UINT32_C(0x0136FEE9), UINT32_C(0x08BC763F), UINT32_C(0x03D5D583),
- UINT32_C(0x0C425583), UINT32_C(0x04F5CB83), UINT32_C(0x071A71E9),
- UINT32_C(0x061B5508), UINT32_C(0x0676A851), UINT32_C(0x03ED5A08),
- UINT32_C(0x01926DAA), UINT32_C(0x0FDB5234), UINT32_C(0x056DAF03),
- UINT32_C(0x0423B963) } },
- { { UINT32_C(0x0CB8DB55), UINT32_C(0x02FE337B), UINT32_C(0x0F257BD3),
- UINT32_C(0x02D303C7), UINT32_C(0x0C766E36), UINT32_C(0x0723F00C),
- UINT32_C(0x03C3ADE8), UINT32_C(0x0BD00FFE), UINT32_C(0x01CCE27D),
- UINT32_C(0x051C2372), UINT32_C(0x06A65BE2), UINT32_C(0x014B5A5E),
- UINT32_C(0x042D0282), UINT32_C(0x05C7DE61), UINT32_C(0x06D4300F),
- UINT32_C(0x0558FC54), UINT32_C(0x08CBE082), UINT32_C(0x03579724),
- UINT32_C(0x01ADAB62) },
- { UINT32_C(0x01475465), UINT32_C(0x0343480A), UINT32_C(0x057BB2AC),
- UINT32_C(0x0219888D), UINT32_C(0x06491BF6), UINT32_C(0x00CB25B2),
- UINT32_C(0x010A4711), UINT32_C(0x09470A80), UINT32_C(0x01062C89),
- UINT32_C(0x00BDAAFD), UINT32_C(0x020D32E9), UINT32_C(0x02E92D88),
- UINT32_C(0x026EB483), UINT32_C(0x06F824B5), UINT32_C(0x03EDBF63),
- UINT32_C(0x0664D233), UINT32_C(0x023AD4F9), UINT32_C(0x04E2AE27),
- UINT32_C(0x06D1A368) } },
- { { UINT32_C(0x03110AE0), UINT32_C(0x07817A85), UINT32_C(0x034820ED),
- UINT32_C(0x00855E1A), UINT32_C(0x003FE30C), UINT32_C(0x06D5A04E),
- UINT32_C(0x06FA73CC), UINT32_C(0x04FE0287), UINT32_C(0x00A69E67),
- UINT32_C(0x0A10B0EC), UINT32_C(0x049E4D24), UINT32_C(0x0ED35994),
- UINT32_C(0x01A7E8AC), UINT32_C(0x04CF74F1), UINT32_C(0x0923906A),
- UINT32_C(0x03874645), UINT32_C(0x0DB42741), UINT32_C(0x060FE261),
- UINT32_C(0x06C0376D) },
- { UINT32_C(0x00E64647), UINT32_C(0x039CB7C7), UINT32_C(0x0EABEA6B),
- UINT32_C(0x02B29856), UINT32_C(0x00839A41), UINT32_C(0x07C5AB7D),
- UINT32_C(0x0697B3AB), UINT32_C(0x06DD0BF0), UINT32_C(0x05A564EF),
- UINT32_C(0x02647BF3), UINT32_C(0x05856454), UINT32_C(0x02A635A2),
- UINT32_C(0x033DA644), UINT32_C(0x05BCCA9A), UINT32_C(0x0EDDD106),
- UINT32_C(0x011D4E4A), UINT32_C(0x0AEDB782), UINT32_C(0x03AFB62C),
- UINT32_C(0x0215A0FC) } },
- { { UINT32_C(0x08D6A19B), UINT32_C(0x07F0B241), UINT32_C(0x077BC8F1),
- UINT32_C(0x0063CE4B), UINT32_C(0x0C37FB3D), UINT32_C(0x075E9165),
- UINT32_C(0x049192AB), UINT32_C(0x06266967), UINT32_C(0x03B30963),
- UINT32_C(0x01CFE3F4), UINT32_C(0x059B66F2), UINT32_C(0x01FBFFC2),
- UINT32_C(0x01D577D5), UINT32_C(0x022DBBF0), UINT32_C(0x05A1A072),
- UINT32_C(0x07948C2D), UINT32_C(0x08690F81), UINT32_C(0x0490C833),
- UINT32_C(0x02663733) },
- { UINT32_C(0x0BFD0575), UINT32_C(0x0091A695), UINT32_C(0x07FC8952),
- UINT32_C(0x0313D53F), UINT32_C(0x0DDFD693), UINT32_C(0x06458C70),
- UINT32_C(0x058761CC), UINT32_C(0x02EB8CF9), UINT32_C(0x02D963FF),
- UINT32_C(0x0AEE4EE7), UINT32_C(0x05DC6CA8), UINT32_C(0x0D2B3143),
- UINT32_C(0x038ADEF3), UINT32_C(0x033E9457), UINT32_C(0x035B245D),
- UINT32_C(0x01424975), UINT32_C(0x03DAB987), UINT32_C(0x00C4D404),
- UINT32_C(0x04DF5768) } },
- { { UINT32_C(0x03C8C9ED), UINT32_C(0x06F39969), UINT32_C(0x08DA5A85),
- UINT32_C(0x02407274), UINT32_C(0x0D6CDEB2), UINT32_C(0x03B609F5),
- UINT32_C(0x06CA4BF5), UINT32_C(0x0D62A309), UINT32_C(0x0257EAE4),
- UINT32_C(0x0CFF528C), UINT32_C(0x07CEB388), UINT32_C(0x0A606548),
- UINT32_C(0x030BB457), UINT32_C(0x01345DCC), UINT32_C(0x09ED3B10),
- UINT32_C(0x04855085), UINT32_C(0x07A5F679), UINT32_C(0x00234E85),
- UINT32_C(0x06872ECB) },
- { UINT32_C(0x0CBA4DF5), UINT32_C(0x00BC43C9), UINT32_C(0x0996C3CC),
- UINT32_C(0x01E2EC93), UINT32_C(0x0B15F26C), UINT32_C(0x05CB18FB),
- UINT32_C(0x05F5A1D1), UINT32_C(0x0A483295), UINT32_C(0x0741A53D),
- UINT32_C(0x0F4FEFBE), UINT32_C(0x052DED75), UINT32_C(0x09B06028),
- UINT32_C(0x0671464F), UINT32_C(0x0741E002), UINT32_C(0x0E40CE62),
- UINT32_C(0x012DA7C5), UINT32_C(0x067A9058), UINT32_C(0x07A9F1DD),
- UINT32_C(0x04688275) } },
- { { UINT32_C(0x02AF535C), UINT32_C(0x046A5ECE), UINT32_C(0x0CB00D43),
- UINT32_C(0x063584D5), UINT32_C(0x0F881F87), UINT32_C(0x02697B14),
- UINT32_C(0x074F1FC7), UINT32_C(0x0AF5B0AF), UINT32_C(0x06F83FC9),
- UINT32_C(0x0A8A203E), UINT32_C(0x0469A19B), UINT32_C(0x0A092434),
- UINT32_C(0x069E17EC), UINT32_C(0x0773D1CD), UINT32_C(0x0F547B8E),
- UINT32_C(0x01CACEC5), UINT32_C(0x0B26EDB6), UINT32_C(0x03AE5202),
- UINT32_C(0x06B82C9D) },
- { UINT32_C(0x0FA0D000), UINT32_C(0x015C3536), UINT32_C(0x0470ADB0),
- UINT32_C(0x008A151A), UINT32_C(0x030884ED), UINT32_C(0x06EC1F74),
- UINT32_C(0x01E13D93), UINT32_C(0x0E97FCF4), UINT32_C(0x0043361E),
- UINT32_C(0x05B81C21), UINT32_C(0x048F0898), UINT32_C(0x00CAD0C5),
- UINT32_C(0x06243416), UINT32_C(0x03EBACFF), UINT32_C(0x0068471C),
- UINT32_C(0x022858FC), UINT32_C(0x0A700CD1), UINT32_C(0x004BCA70),
- UINT32_C(0x03CB25EA) } },
- { { UINT32_C(0x0F70ACE0), UINT32_C(0x00C2460B), UINT32_C(0x0A7F627F),
- UINT32_C(0x01D6384B), UINT32_C(0x0C9F9078), UINT32_C(0x02A9923F),
- UINT32_C(0x02B743F1), UINT32_C(0x0C36EE4D), UINT32_C(0x01856917),
- UINT32_C(0x03329552), UINT32_C(0x05918A93), UINT32_C(0x0EC471DC),
- UINT32_C(0x01946C41), UINT32_C(0x00039881), UINT32_C(0x05DFF9D2),
- UINT32_C(0x05874A6F), UINT32_C(0x04306946), UINT32_C(0x05AB8B53),
- UINT32_C(0x0553A131) },
- { UINT32_C(0x04C78230), UINT32_C(0x025BCE40), UINT32_C(0x0CD6DA86),
- UINT32_C(0x054A8CE5), UINT32_C(0x0BD7BB78), UINT32_C(0x029A965C),
- UINT32_C(0x068F11B8), UINT32_C(0x02FBC1A0), UINT32_C(0x06354357),
- UINT32_C(0x0CCD4DBD), UINT32_C(0x051102A2), UINT32_C(0x031FD9B0),
- UINT32_C(0x02C008A8), UINT32_C(0x00AD491F), UINT32_C(0x0BB60D3F),
- UINT32_C(0x02A28F80), UINT32_C(0x008E75C4), UINT32_C(0x0522E322),
- UINT32_C(0x03343F73) } },
- { { UINT32_C(0x0002D68B), UINT32_C(0x07643017), UINT32_C(0x088AD06A),
- UINT32_C(0x0408925D), UINT32_C(0x08F2C855), UINT32_C(0x036834C5),
- UINT32_C(0x0289A9D7), UINT32_C(0x0719D483), UINT32_C(0x032123DA),
- UINT32_C(0x0B0A9B01), UINT32_C(0x0230FC26), UINT32_C(0x08B0CFCD),
- UINT32_C(0x074393E1), UINT32_C(0x0439CA9A), UINT32_C(0x089E646F),
- UINT32_C(0x024D4EB8), UINT32_C(0x036D4EC5), UINT32_C(0x03F0431F),
- UINT32_C(0x0580DCFB) },
- { UINT32_C(0x0D90B740), UINT32_C(0x066AECA5), UINT32_C(0x0B5967E7),
- UINT32_C(0x07CE13A8), UINT32_C(0x0CB918FF), UINT32_C(0x052A2ED5),
- UINT32_C(0x009DC3A7), UINT32_C(0x092EBC54), UINT32_C(0x07A491ED),
- UINT32_C(0x0644023D), UINT32_C(0x06F1C343), UINT32_C(0x0EED295B),
- UINT32_C(0x0173D4B0), UINT32_C(0x04FE8C9E), UINT32_C(0x0C06A3FA),
- UINT32_C(0x0028401A), UINT32_C(0x0FC38BCB), UINT32_C(0x020029B9),
- UINT32_C(0x03C565C1) } },
- { { UINT32_C(0x0EDA25DC), UINT32_C(0x03927618), UINT32_C(0x0EDB2C58),
- UINT32_C(0x00B2BAA3), UINT32_C(0x0E7BCCF6), UINT32_C(0x03A11FFE),
- UINT32_C(0x02001D5C), UINT32_C(0x076D7291), UINT32_C(0x029BC068),
- UINT32_C(0x094260B9), UINT32_C(0x0671EECC), UINT32_C(0x07B0A2FB),
- UINT32_C(0x047A1899), UINT32_C(0x07CFA289), UINT32_C(0x065A085F),
- UINT32_C(0x041FBFCB), UINT32_C(0x0050FB67), UINT32_C(0x02D9296D),
- UINT32_C(0x05D31913) },
- { UINT32_C(0x021A0C30), UINT32_C(0x07BBBC48), UINT32_C(0x077F7A30),
- UINT32_C(0x024F84DD), UINT32_C(0x00FC19E6), UINT32_C(0x035C1B4C),
- UINT32_C(0x02861399), UINT32_C(0x0CE0D90B), UINT32_C(0x00E21952),
- UINT32_C(0x0A696F7C), UINT32_C(0x03D6F2B5), UINT32_C(0x07F2D73D),
- UINT32_C(0x03F2D910), UINT32_C(0x00119F7C), UINT32_C(0x01B7B782),
- UINT32_C(0x02CC95B4), UINT32_C(0x033CD00B), UINT32_C(0x005F0FE8),
- UINT32_C(0x046BCE9F) } },
- { { UINT32_C(0x016A8803), UINT32_C(0x057D0E0C), UINT32_C(0x04902444),
- UINT32_C(0x06BC911C), UINT32_C(0x0C88373E), UINT32_C(0x0302735A),
- UINT32_C(0x07E0A60D), UINT32_C(0x04C9D429), UINT32_C(0x05543A90),
- UINT32_C(0x0EE4D9AC), UINT32_C(0x050794BC), UINT32_C(0x0985C982),
- UINT32_C(0x0595F0A9), UINT32_C(0x05ABA2C4), UINT32_C(0x07307B7D),
- UINT32_C(0x06A58CDB), UINT32_C(0x08CC2A00), UINT32_C(0x019E61E1),
- UINT32_C(0x0363A648) },
- { UINT32_C(0x09792D19), UINT32_C(0x04677C73), UINT32_C(0x08631594),
- UINT32_C(0x032F8F6A), UINT32_C(0x098EA86F), UINT32_C(0x032B9330),
- UINT32_C(0x009CD434), UINT32_C(0x04D14790), UINT32_C(0x06B8C324),
- UINT32_C(0x035461EE), UINT32_C(0x06E597DA), UINT32_C(0x00182BBE),
- UINT32_C(0x04A3C432), UINT32_C(0x045AA031), UINT32_C(0x014A30EC),
- UINT32_C(0x009C13A2), UINT32_C(0x0C730FBE), UINT32_C(0x06A8A94C),
- UINT32_C(0x049EC08E) } },
- },
- {
- { { UINT32_C(0x043C6A8B), UINT32_C(0x069E114E), UINT32_C(0x02D17119),
- UINT32_C(0x07161008), UINT32_C(0x04253BA7), UINT32_C(0x06D7E9D1),
- UINT32_C(0x07AFFFEA), UINT32_C(0x0C20088E), UINT32_C(0x009D84CD),
- UINT32_C(0x094B5A8B), UINT32_C(0x070C9B19), UINT32_C(0x0A140336),
- UINT32_C(0x059D32DC), UINT32_C(0x07D5C770), UINT32_C(0x0B702098),
- UINT32_C(0x0646FC6A), UINT32_C(0x06312DAB), UINT32_C(0x05DEF39B),
- UINT32_C(0x07B32BAC) },
- { UINT32_C(0x06B04438), UINT32_C(0x0086BBC2), UINT32_C(0x0CE331EB),
- UINT32_C(0x07A1DB2A), UINT32_C(0x04798584), UINT32_C(0x0632A66E),
- UINT32_C(0x03A4F5AE), UINT32_C(0x03B41996), UINT32_C(0x061944D5),
- UINT32_C(0x0E8ECAB0), UINT32_C(0x00E38A9B), UINT32_C(0x0BBF7088),
- UINT32_C(0x022E1052), UINT32_C(0x00FB1445), UINT32_C(0x0FF1C5EA),
- UINT32_C(0x034DB2F7), UINT32_C(0x04C560D6), UINT32_C(0x050E7FEA),
- UINT32_C(0x00B97B7C) } },
- { { UINT32_C(0x004ED5E3), UINT32_C(0x012DA268), UINT32_C(0x08C92EF3),
- UINT32_C(0x06F60BF9), UINT32_C(0x0656B119), UINT32_C(0x014823AF),
- UINT32_C(0x058D04AC), UINT32_C(0x099D3419), UINT32_C(0x00CFAE71),
- UINT32_C(0x0B423A38), UINT32_C(0x05EA80E2), UINT32_C(0x06C1F218),
- UINT32_C(0x03E72AD5), UINT32_C(0x0691F49A), UINT32_C(0x04310FAB),
- UINT32_C(0x05D250AD), UINT32_C(0x084D7BFA), UINT32_C(0x070595DE),
- UINT32_C(0x017825D9) },
- { UINT32_C(0x0A7D5B37), UINT32_C(0x00B0A7A2), UINT32_C(0x0ED3BDEF),
- UINT32_C(0x02B29FDB), UINT32_C(0x085BCC71), UINT32_C(0x0455FDD9),
- UINT32_C(0x0595CF1F), UINT32_C(0x0040CCA6), UINT32_C(0x04FA2F23),
- UINT32_C(0x04A05DD3), UINT32_C(0x07E18B4E), UINT32_C(0x045A2A46),
- UINT32_C(0x058F2043), UINT32_C(0x038FC52D), UINT32_C(0x0A7666DC),
- UINT32_C(0x0701CE42), UINT32_C(0x04B38B92), UINT32_C(0x01AD842D),
- UINT32_C(0x07A0B6A0) } },
- { { UINT32_C(0x029D2024), UINT32_C(0x0728395A), UINT32_C(0x04DB516D),
- UINT32_C(0x0504C2CE), UINT32_C(0x03C5DEB1), UINT32_C(0x041CFF48),
- UINT32_C(0x014AE223), UINT32_C(0x0856531F), UINT32_C(0x02EC3F65),
- UINT32_C(0x0A46F536), UINT32_C(0x04ECB2AA), UINT32_C(0x0FB7289E),
- UINT32_C(0x03DE9EFF), UINT32_C(0x0724BAA3), UINT32_C(0x0508D541),
- UINT32_C(0x051B73BA), UINT32_C(0x0B38749E), UINT32_C(0x044097DF),
- UINT32_C(0x00E5AC8E) },
- { UINT32_C(0x0DDD93A9), UINT32_C(0x04295052), UINT32_C(0x0E03B84C),
- UINT32_C(0x00B38799), UINT32_C(0x037F6A48), UINT32_C(0x07614753),
- UINT32_C(0x05765258), UINT32_C(0x0E0CA450), UINT32_C(0x07CFB537),
- UINT32_C(0x07342BEF), UINT32_C(0x05C319BB), UINT32_C(0x04F3A1F5),
- UINT32_C(0x04762545), UINT32_C(0x0589360C), UINT32_C(0x0E5A46C8),
- UINT32_C(0x02744137), UINT32_C(0x05E9E991), UINT32_C(0x01523BC2),
- UINT32_C(0x062CDAB6) } },
- { { UINT32_C(0x090E92D6), UINT32_C(0x00FA75A5), UINT32_C(0x040D6969),
- UINT32_C(0x011D7DDB), UINT32_C(0x0B02AC62), UINT32_C(0x07679C7F),
- UINT32_C(0x07FD8A06), UINT32_C(0x0A623D2A), UINT32_C(0x034C8ED2),
- UINT32_C(0x07FB351F), UINT32_C(0x008857BA), UINT32_C(0x09AD9171),
- UINT32_C(0x03CB7A5B), UINT32_C(0x01A56DB4), UINT32_C(0x09225D29),
- UINT32_C(0x07819EC5), UINT32_C(0x0645D37A), UINT32_C(0x0618AED1),
- UINT32_C(0x053A82A2) },
- { UINT32_C(0x0662F537), UINT32_C(0x00AB8407), UINT32_C(0x0FF98DF8),
- UINT32_C(0x03C0F116), UINT32_C(0x0C87DD6F), UINT32_C(0x00995A87),
- UINT32_C(0x036E7BF1), UINT32_C(0x0318B15E), UINT32_C(0x01116415),
- UINT32_C(0x00A53CD8), UINT32_C(0x0237AEF5), UINT32_C(0x065DCC5D),
- UINT32_C(0x048F2118), UINT32_C(0x011F3E13), UINT32_C(0x0AD27061),
- UINT32_C(0x02B7B666), UINT32_C(0x01CB618D), UINT32_C(0x02EC555A),
- UINT32_C(0x058DF8C5) } },
- { { UINT32_C(0x0B9839DA), UINT32_C(0x0047D336), UINT32_C(0x09E93377),
- UINT32_C(0x00074C09), UINT32_C(0x08B5F722), UINT32_C(0x06A0986D),
- UINT32_C(0x03ABD41C), UINT32_C(0x057C1CAA), UINT32_C(0x02B2ACCA),
- UINT32_C(0x0FC9B996), UINT32_C(0x05488187), UINT32_C(0x07861011),
- UINT32_C(0x0163907B), UINT32_C(0x07F6DAF7), UINT32_C(0x0363BC0E),
- UINT32_C(0x058EF00F), UINT32_C(0x05446B66), UINT32_C(0x0514AA79),
- UINT32_C(0x04A03953) },
- { UINT32_C(0x0C1962CE), UINT32_C(0x06493BB1), UINT32_C(0x086D6126),
- UINT32_C(0x00FCE569), UINT32_C(0x0DC92336), UINT32_C(0x015B8163),
- UINT32_C(0x0432A31C), UINT32_C(0x0133A6EE), UINT32_C(0x0578D7AF),
- UINT32_C(0x0840A2D3), UINT32_C(0x064C1FC2), UINT32_C(0x085837C8),
- UINT32_C(0x0641237D), UINT32_C(0x054AF205), UINT32_C(0x0657C4E2),
- UINT32_C(0x04B8B1E0), UINT32_C(0x00272237), UINT32_C(0x05B53E59),
- UINT32_C(0x001FEA03) } },
- { { UINT32_C(0x0D2BF9A7), UINT32_C(0x01A65815), UINT32_C(0x06FC3341),
- UINT32_C(0x065823F4), UINT32_C(0x01599DE7), UINT32_C(0x070CA981),
- UINT32_C(0x067E13C8), UINT32_C(0x009A9A6A), UINT32_C(0x0229B72F),
- UINT32_C(0x09B1BC4A), UINT32_C(0x06BCE69A), UINT32_C(0x0FA69B0D),
- UINT32_C(0x078B83C0), UINT32_C(0x06E62A5C), UINT32_C(0x021D206C),
- UINT32_C(0x04E0CE16), UINT32_C(0x0F728EF3), UINT32_C(0x0453D52E),
- UINT32_C(0x01844B54) },
- { UINT32_C(0x020C30CB), UINT32_C(0x04E85BEE), UINT32_C(0x095E4EAF),
- UINT32_C(0x075E0168), UINT32_C(0x039C14AF), UINT32_C(0x0370EA5A),
- UINT32_C(0x05B0F157), UINT32_C(0x02E11B96), UINT32_C(0x042E3824),
- UINT32_C(0x0D5DC5BB), UINT32_C(0x00451C96), UINT32_C(0x0E911392),
- UINT32_C(0x0724269B), UINT32_C(0x04003692), UINT32_C(0x076FEA68),
- UINT32_C(0x033CBDE1), UINT32_C(0x0417AF7D), UINT32_C(0x00B9592D),
- UINT32_C(0x027FA0B4) } },
- { { UINT32_C(0x0B2E6D92), UINT32_C(0x06E8F69A), UINT32_C(0x0DCD1AA5),
- UINT32_C(0x01FB27B9), UINT32_C(0x04974F21), UINT32_C(0x027768BA),
- UINT32_C(0x02769E05), UINT32_C(0x08C4A5CC), UINT32_C(0x047AF64B),
- UINT32_C(0x08B89BB2), UINT32_C(0x02ED5662), UINT32_C(0x03939461),
- UINT32_C(0x01F7401B), UINT32_C(0x06FDF357), UINT32_C(0x019C98D9),
- UINT32_C(0x07B1E9DD), UINT32_C(0x075DC034), UINT32_C(0x01E0054F),
- UINT32_C(0x02A2F727) },
- { UINT32_C(0x0EB71C5F), UINT32_C(0x023BF702), UINT32_C(0x02236711),
- UINT32_C(0x012F6D73), UINT32_C(0x0CA22E0A), UINT32_C(0x02359757),
- UINT32_C(0x0157DA08), UINT32_C(0x05CB0525), UINT32_C(0x0102CBFE),
- UINT32_C(0x0854B694), UINT32_C(0x07F9F306), UINT32_C(0x0A6E3855),
- UINT32_C(0x024CCD83), UINT32_C(0x0220CC0E), UINT32_C(0x0AAD6848),
- UINT32_C(0x0783A366), UINT32_C(0x0B9AD104), UINT32_C(0x02844B14),
- UINT32_C(0x07B5BC13) } },
- { { UINT32_C(0x01490429), UINT32_C(0x07C3B47C), UINT32_C(0x0DB7A58B),
- UINT32_C(0x04D10D93), UINT32_C(0x08CA405B), UINT32_C(0x07FD087B),
- UINT32_C(0x07C88AC9), UINT32_C(0x07D54451), UINT32_C(0x07010F32),
- UINT32_C(0x06D62976), UINT32_C(0x03752EE7), UINT32_C(0x0A2326FD),
- UINT32_C(0x00445040), UINT32_C(0x03605DB9), UINT32_C(0x03194920),
- UINT32_C(0x01F8F0DF), UINT32_C(0x0F321EF5), UINT32_C(0x0297EC47),
- UINT32_C(0x05C97D9A) },
- { UINT32_C(0x087CA374), UINT32_C(0x04D9BD85), UINT32_C(0x09E4C1E2),
- UINT32_C(0x05C6B60F), UINT32_C(0x03338BE0), UINT32_C(0x06C38E9F),
- UINT32_C(0x030527CA), UINT32_C(0x0F28850A), UINT32_C(0x039421C7),
- UINT32_C(0x02DE48C5), UINT32_C(0x0652719F), UINT32_C(0x097E2E6B),
- UINT32_C(0x0758DD1C), UINT32_C(0x06788A64), UINT32_C(0x01CDEC4A),
- UINT32_C(0x0314A216), UINT32_C(0x022EE734), UINT32_C(0x023BD455),
- UINT32_C(0x05EC7716) } },
- { { UINT32_C(0x03ACF0F9), UINT32_C(0x0203D95A), UINT32_C(0x0286435B),
- UINT32_C(0x01818DC4), UINT32_C(0x02821B92), UINT32_C(0x06AE5102),
- UINT32_C(0x07066934), UINT32_C(0x07BC9150), UINT32_C(0x07BA5607),
- UINT32_C(0x0EC5981C), UINT32_C(0x04C69569), UINT32_C(0x03CC0C2A),
- UINT32_C(0x07DA94A0), UINT32_C(0x07E65511), UINT32_C(0x086234FB),
- UINT32_C(0x05407465), UINT32_C(0x0F825CD7), UINT32_C(0x03F370CC),
- UINT32_C(0x00DC963A) },
- { UINT32_C(0x09436D81), UINT32_C(0x04465793), UINT32_C(0x041DBE76),
- UINT32_C(0x0384C090), UINT32_C(0x005C5350), UINT32_C(0x07296D6A),
- UINT32_C(0x04712C6D), UINT32_C(0x0B8974CF), UINT32_C(0x07A230E5),
- UINT32_C(0x0CBF52A8), UINT32_C(0x016C1814), UINT32_C(0x06EDC3F7),
- UINT32_C(0x0627F679), UINT32_C(0x0750029A), UINT32_C(0x06E2AA55),
- UINT32_C(0x0245FF68), UINT32_C(0x0F8F41C6), UINT32_C(0x00A2BB27),
- UINT32_C(0x052BDC1F) } },
- { { UINT32_C(0x06C8D427), UINT32_C(0x0648C043), UINT32_C(0x045E9C01),
- UINT32_C(0x042CC909), UINT32_C(0x089A90AA), UINT32_C(0x007114E3),
- UINT32_C(0x0085B7C3), UINT32_C(0x0B9DE134), UINT32_C(0x06B0A9E9),
- UINT32_C(0x0AAAEBCC), UINT32_C(0x0092A52A), UINT32_C(0x0D6E2713),
- UINT32_C(0x05857362), UINT32_C(0x0118376C), UINT32_C(0x000A08F8),
- UINT32_C(0x003DE32F), UINT32_C(0x0E3FE6ED), UINT32_C(0x06CFB412),
- UINT32_C(0x043D1662) },
- { UINT32_C(0x0D400463), UINT32_C(0x0448C05A), UINT32_C(0x0AE67E6E),
- UINT32_C(0x059369CB), UINT32_C(0x0A23C77C), UINT32_C(0x06E7F666),
- UINT32_C(0x05BB8233), UINT32_C(0x095E95B6), UINT32_C(0x0284C07C),
- UINT32_C(0x0F6C7097), UINT32_C(0x0443F5D5), UINT32_C(0x0301FE7F),
- UINT32_C(0x023010C9), UINT32_C(0x009D2363), UINT32_C(0x07BD65C2),
- UINT32_C(0x07E297A0), UINT32_C(0x034DDA50), UINT32_C(0x07ADC7E7),
- UINT32_C(0x03060E2B) } },
- { { UINT32_C(0x0924C15F), UINT32_C(0x04E07505), UINT32_C(0x08D0DCCF),
- UINT32_C(0x01D04769), UINT32_C(0x02E2E204), UINT32_C(0x0713097A),
- UINT32_C(0x07E9B59C), UINT32_C(0x07FDCF7A), UINT32_C(0x03E60E03),
- UINT32_C(0x0423C6CD), UINT32_C(0x06A163F7), UINT32_C(0x07C0FA8B),
- UINT32_C(0x01341D2B), UINT32_C(0x06745C51), UINT32_C(0x03C9DE3A),
- UINT32_C(0x06D6D6F5), UINT32_C(0x0F5AF83F), UINT32_C(0x02698DEF),
- UINT32_C(0x06091F29) },
- { UINT32_C(0x0DBEEE78), UINT32_C(0x060A02B3), UINT32_C(0x0558AE6B),
- UINT32_C(0x07100333), UINT32_C(0x0A312381), UINT32_C(0x02FA9A13),
- UINT32_C(0x06D1C0C3), UINT32_C(0x0C625336), UINT32_C(0x03B853CF),
- UINT32_C(0x08B3BE37), UINT32_C(0x0104E5D9), UINT32_C(0x053B9B53),
- UINT32_C(0x02A2D06C), UINT32_C(0x01CDC864), UINT32_C(0x0F04A867),
- UINT32_C(0x07663226), UINT32_C(0x0FD6C54B), UINT32_C(0x040943C5),
- UINT32_C(0x03C04D10) } },
- { { UINT32_C(0x090F8C80), UINT32_C(0x0582A686), UINT32_C(0x0BA42ED6),
- UINT32_C(0x070A8F1E), UINT32_C(0x0AB02D12), UINT32_C(0x01EB5C3D),
- UINT32_C(0x07479B29), UINT32_C(0x04D72C41), UINT32_C(0x0362562E),
- UINT32_C(0x06FAF4FC), UINT32_C(0x033FED54), UINT32_C(0x0229578C),
- UINT32_C(0x005B4CFB), UINT32_C(0x03BA05BF), UINT32_C(0x0B4A3FBC),
- UINT32_C(0x07DBD5D5), UINT32_C(0x05E8639D), UINT32_C(0x07D5867F),
- UINT32_C(0x027FE947) },
- { UINT32_C(0x01982847), UINT32_C(0x008A8D79), UINT32_C(0x0B215B64),
- UINT32_C(0x06EDECCB), UINT32_C(0x045309BE), UINT32_C(0x055465DE),
- UINT32_C(0x0426ED2E), UINT32_C(0x0D49D672), UINT32_C(0x01000B74),
- UINT32_C(0x01206E3C), UINT32_C(0x061A0CA8), UINT32_C(0x020BEC03),
- UINT32_C(0x02104AC7), UINT32_C(0x03FB64AC), UINT32_C(0x097C06BE),
- UINT32_C(0x05DF7C1D), UINT32_C(0x0EFD23AB), UINT32_C(0x042BC8D8),
- UINT32_C(0x02A649D7) } },
- { { UINT32_C(0x0643409F), UINT32_C(0x06A50E0A), UINT32_C(0x00C269C2),
- UINT32_C(0x0130B8C0), UINT32_C(0x0B25EAD2), UINT32_C(0x07A4A516),
- UINT32_C(0x0375B082), UINT32_C(0x0E197F8C), UINT32_C(0x0546B686),
- UINT32_C(0x0B8287C5), UINT32_C(0x04A367C1), UINT32_C(0x07DF58A1),
- UINT32_C(0x05B7DD15), UINT32_C(0x061763FD), UINT32_C(0x0E2DF8E8),
- UINT32_C(0x05ABFC51), UINT32_C(0x087018C8), UINT32_C(0x05935143),
- UINT32_C(0x05E9EFA4) },
- { UINT32_C(0x0AF2F29D), UINT32_C(0x0063F9B1), UINT32_C(0x0FB11A34),
- UINT32_C(0x02D7C22E), UINT32_C(0x08AF67E7), UINT32_C(0x005AC16C),
- UINT32_C(0x047EE080), UINT32_C(0x0B7677A2), UINT32_C(0x04500DDC),
- UINT32_C(0x0137CD80), UINT32_C(0x01CF2369), UINT32_C(0x0DE177B8),
- UINT32_C(0x018122DE), UINT32_C(0x00EDFC0C), UINT32_C(0x0048B9ED),
- UINT32_C(0x043633B7), UINT32_C(0x0666D33E), UINT32_C(0x00317E10),
- UINT32_C(0x066100C3) } },
- { { UINT32_C(0x037B93A2), UINT32_C(0x07917621), UINT32_C(0x048F411C),
- UINT32_C(0x04EF1E2A), UINT32_C(0x0FC8F91F), UINT32_C(0x04090E1D),
- UINT32_C(0x066F78F2), UINT32_C(0x0C2C0207), UINT32_C(0x065E2513),
- UINT32_C(0x0F03BADB), UINT32_C(0x03689AF4), UINT32_C(0x0FE959E2),
- UINT32_C(0x028B6A5E), UINT32_C(0x0101C577), UINT32_C(0x0C3A5192),
- UINT32_C(0x03042F53), UINT32_C(0x0E2A6A29), UINT32_C(0x0231095D),
- UINT32_C(0x06E29445) },
- { UINT32_C(0x07A00331), UINT32_C(0x041D85F7), UINT32_C(0x0D189E24),
- UINT32_C(0x0294578C), UINT32_C(0x04A9E7A3), UINT32_C(0x037F260A),
- UINT32_C(0x060D62BB), UINT32_C(0x07AED3DE), UINT32_C(0x0727FEAB),
- UINT32_C(0x0283C99C), UINT32_C(0x05A11B56), UINT32_C(0x08953348),
- UINT32_C(0x01A388E1), UINT32_C(0x028932F2), UINT32_C(0x0AFFD5A7),
- UINT32_C(0x042CF6C6), UINT32_C(0x072339BA), UINT32_C(0x06344724),
- UINT32_C(0x0395F757) } },
- { { UINT32_C(0x01328CE4), UINT32_C(0x01D69A89), UINT32_C(0x03D3B2E3),
- UINT32_C(0x0780829F), UINT32_C(0x0848A488), UINT32_C(0x057B85BD),
- UINT32_C(0x02051385), UINT32_C(0x06706AD6), UINT32_C(0x02D6482A),
- UINT32_C(0x0A8717D0), UINT32_C(0x05383AC5), UINT32_C(0x03250B87),
- UINT32_C(0x05C77D8D), UINT32_C(0x05198B6D), UINT32_C(0x03FACF90),
- UINT32_C(0x062058A1), UINT32_C(0x008F96B1), UINT32_C(0x01F29CAF),
- UINT32_C(0x00358EC7) },
- { UINT32_C(0x0B620A88), UINT32_C(0x06288694), UINT32_C(0x05B21FAC),
- UINT32_C(0x03F64B44), UINT32_C(0x0DBD251D), UINT32_C(0x06B0D130),
- UINT32_C(0x04314394), UINT32_C(0x02479C97), UINT32_C(0x003417DF),
- UINT32_C(0x0318B1D4), UINT32_C(0x0762DFD7), UINT32_C(0x0DDA6BF1),
- UINT32_C(0x0214A508), UINT32_C(0x0231DEBD), UINT32_C(0x0D8733B2),
- UINT32_C(0x02ACA66C), UINT32_C(0x05C275E4), UINT32_C(0x07A8A625),
- UINT32_C(0x001D2426) } },
- { { UINT32_C(0x0C95FF29), UINT32_C(0x0608C2C5), UINT32_C(0x0404108F),
- UINT32_C(0x03383226), UINT32_C(0x07F8CE0C), UINT32_C(0x0600859C),
- UINT32_C(0x04899A96), UINT32_C(0x00CCD8EA), UINT32_C(0x02796E7C),
- UINT32_C(0x0FB706CC), UINT32_C(0x0111E6FC), UINT32_C(0x027E2706),
- UINT32_C(0x03EBDDF3), UINT32_C(0x02838065), UINT32_C(0x0585FBC0),
- UINT32_C(0x07572ED5), UINT32_C(0x0907E1E4), UINT32_C(0x017E67B8),
- UINT32_C(0x041786F0) },
- { UINT32_C(0x04519732), UINT32_C(0x073D0689), UINT32_C(0x0DF32FF7),
- UINT32_C(0x01246800), UINT32_C(0x068478E9), UINT32_C(0x031DEA3C),
- UINT32_C(0x03E71E8F), UINT32_C(0x08C6C89E), UINT32_C(0x012CDD96),
- UINT32_C(0x0AEEE8F4), UINT32_C(0x0121A9C4), UINT32_C(0x01F73DAA),
- UINT32_C(0x033160E0), UINT32_C(0x062B3F6E), UINT32_C(0x081E3B9C),
- UINT32_C(0x029ED0A5), UINT32_C(0x05F0DBFB), UINT32_C(0x0765E7EB),
- UINT32_C(0x06026E18) } },
- },
- {
- { { UINT32_C(0x0ED2EB86), UINT32_C(0x073B24CD), UINT32_C(0x01308B7E),
- UINT32_C(0x001667D5), UINT32_C(0x06D840A4), UINT32_C(0x01CE15F3),
- UINT32_C(0x00EC4628), UINT32_C(0x0BE255D7), UINT32_C(0x039A76B9),
- UINT32_C(0x0CA76752), UINT32_C(0x02EA45FE), UINT32_C(0x0CB0A354),
- UINT32_C(0x019D90B7), UINT32_C(0x036C0B82), UINT32_C(0x07E353B2),
- UINT32_C(0x00B45E15), UINT32_C(0x0E1E3229), UINT32_C(0x06EED669),
- UINT32_C(0x07975597) },
- { UINT32_C(0x04B5DE1E), UINT32_C(0x05185A2C), UINT32_C(0x0F1C1594),
- UINT32_C(0x01D7FD5B), UINT32_C(0x0CD949EB), UINT32_C(0x02E191E5),
- UINT32_C(0x03295CCA), UINT32_C(0x02F97A05), UINT32_C(0x052209AD),
- UINT32_C(0x0C0AF1C4), UINT32_C(0x07F93AD2), UINT32_C(0x060F26C1),
- UINT32_C(0x0274993E), UINT32_C(0x023CDD4A), UINT32_C(0x08D9B938),
- UINT32_C(0x00D32B5E), UINT32_C(0x04FE5190), UINT32_C(0x01AB014D),
- UINT32_C(0x05DD64A0) } },
- { { UINT32_C(0x0C2CA70B), UINT32_C(0x0346AE90), UINT32_C(0x0F8387AC),
- UINT32_C(0x03ABE62A), UINT32_C(0x029DA053), UINT32_C(0x0041F61B),
- UINT32_C(0x02CBC0BF), UINT32_C(0x05243AE9), UINT32_C(0x0360C16B),
- UINT32_C(0x0C28A299), UINT32_C(0x0795D938), UINT32_C(0x02AC475A),
- UINT32_C(0x0113BEAF), UINT32_C(0x05A671E6), UINT32_C(0x05C8C591),
- UINT32_C(0x06924739), UINT32_C(0x02A54EEF), UINT32_C(0x02F274E3),
- UINT32_C(0x0049A1CD) },
- { UINT32_C(0x0426994D), UINT32_C(0x07F97B31), UINT32_C(0x0DA0C788),
- UINT32_C(0x04B6F8C8), UINT32_C(0x05463D1A), UINT32_C(0x07C155D5),
- UINT32_C(0x00BA793E), UINT32_C(0x0AB08953), UINT32_C(0x042C3976),
- UINT32_C(0x069C681F), UINT32_C(0x02ABCC5A), UINT32_C(0x024C8F72),
- UINT32_C(0x067DF148), UINT32_C(0x0180DD65), UINT32_C(0x042A4819),
- UINT32_C(0x01AFAAD4), UINT32_C(0x0334701F), UINT32_C(0x031ADC33),
- UINT32_C(0x03AA0140) } },
- { { UINT32_C(0x0BEE1F7B), UINT32_C(0x07EA5E6A), UINT32_C(0x06C716A1),
- UINT32_C(0x01C6DCD9), UINT32_C(0x00C62805), UINT32_C(0x06E99086),
- UINT32_C(0x047E4182), UINT32_C(0x04E699EA), UINT32_C(0x017F98AF),
- UINT32_C(0x0C64E476), UINT32_C(0x0464A2AE), UINT32_C(0x0AF646E7),
- UINT32_C(0x0734C8DA), UINT32_C(0x069B3D13), UINT32_C(0x0BD58EFB),
- UINT32_C(0x0572D3C4), UINT32_C(0x0889BAF4), UINT32_C(0x049A880A),
- UINT32_C(0x01790356) },
- { UINT32_C(0x0D71A4FA), UINT32_C(0x017475C1), UINT32_C(0x0B53C845),
- UINT32_C(0x00ED5EC3), UINT32_C(0x072B9DBC), UINT32_C(0x032C8366),
- UINT32_C(0x02B3D21C), UINT32_C(0x0E8E8016), UINT32_C(0x04B6FF58),
- UINT32_C(0x017276EC), UINT32_C(0x069855EF), UINT32_C(0x0342CFC2),
- UINT32_C(0x00D109A0), UINT32_C(0x07614A72), UINT32_C(0x09DC301B),
- UINT32_C(0x036B57F5), UINT32_C(0x06CB91C2), UINT32_C(0x03E8DF1A),
- UINT32_C(0x070FD727) } },
- { { UINT32_C(0x032574BE), UINT32_C(0x04115A04), UINT32_C(0x0F98172F),
- UINT32_C(0x04AEDED0), UINT32_C(0x02519CD4), UINT32_C(0x05A01A73),
- UINT32_C(0x06EEA282), UINT32_C(0x0BBAAC38), UINT32_C(0x02CC4028),
- UINT32_C(0x03AACD20), UINT32_C(0x01A067DD), UINT32_C(0x0AFED584),
- UINT32_C(0x06846B34), UINT32_C(0x01F4D8B2), UINT32_C(0x00AB5080),
- UINT32_C(0x02EFB0FB), UINT32_C(0x09F1C68E), UINT32_C(0x01829F05),
- UINT32_C(0x008F3C67) },
- { UINT32_C(0x062EC0F0), UINT32_C(0x04CAAFE4), UINT32_C(0x08147733),
- UINT32_C(0x038A422E), UINT32_C(0x0085656E), UINT32_C(0x02D1FFD4),
- UINT32_C(0x0731016E), UINT32_C(0x022AA6C1), UINT32_C(0x04385C24),
- UINT32_C(0x06B4D30A), UINT32_C(0x04FF86E3), UINT32_C(0x0540E9AE),
- UINT32_C(0x039185FE), UINT32_C(0x0278D41E), UINT32_C(0x05EEE86F),
- UINT32_C(0x05D399FD), UINT32_C(0x07D5B982), UINT32_C(0x0364A589),
- UINT32_C(0x07E1654F) } },
- { { UINT32_C(0x0D8CB3CC), UINT32_C(0x06C254BF), UINT32_C(0x0FBC2C5D),
- UINT32_C(0x07F746F2), UINT32_C(0x07E4259D), UINT32_C(0x022B49C4),
- UINT32_C(0x04CE0ECE), UINT32_C(0x095F3130), UINT32_C(0x064022C7),
- UINT32_C(0x076A7307), UINT32_C(0x074FEA23), UINT32_C(0x09CDD626),
- UINT32_C(0x0612A401), UINT32_C(0x0562E226), UINT32_C(0x027BA2E0),
- UINT32_C(0x01D98EB5), UINT32_C(0x0A54B2FF), UINT32_C(0x0345BAFC),
- UINT32_C(0x05CE5083) },
- { UINT32_C(0x082FB619), UINT32_C(0x01E59C7B), UINT32_C(0x07C56C18),
- UINT32_C(0x0594E677), UINT32_C(0x0EBA4C47), UINT32_C(0x01F1C6FF),
- UINT32_C(0x016B9F48), UINT32_C(0x0443B057), UINT32_C(0x017930FC),
- UINT32_C(0x0D94B0A6), UINT32_C(0x0501D4ED), UINT32_C(0x0EB5EA2F),
- UINT32_C(0x03F2D8D0), UINT32_C(0x04A1DA92), UINT32_C(0x0A702231),
- UINT32_C(0x063C2830), UINT32_C(0x06F5E127), UINT32_C(0x06BE79CE),
- UINT32_C(0x06600B2F) } },
- { { UINT32_C(0x0F26ECDA), UINT32_C(0x0052168B), UINT32_C(0x0CBDB9E3),
- UINT32_C(0x052FFD0A), UINT32_C(0x02FDCD7B), UINT32_C(0x05791EA2),
- UINT32_C(0x03DF5472), UINT32_C(0x0544715D), UINT32_C(0x032F4FBD),
- UINT32_C(0x05DA4E99), UINT32_C(0x000977D5), UINT32_C(0x0AEE5E82),
- UINT32_C(0x07B5A2B7), UINT32_C(0x02494676), UINT32_C(0x0B416152),
- UINT32_C(0x03AC76C7), UINT32_C(0x0B21FDC6), UINT32_C(0x04ECC50E),
- UINT32_C(0x02A4E6AB) },
- { UINT32_C(0x031E0BB4), UINT32_C(0x05FC9964), UINT32_C(0x014AC466),
- UINT32_C(0x038F82D0), UINT32_C(0x0C0B56B8), UINT32_C(0x0217513C),
- UINT32_C(0x0498C923), UINT32_C(0x076EEC28), UINT32_C(0x03824F59),
- UINT32_C(0x0B7B1382), UINT32_C(0x056FE399), UINT32_C(0x00794841),
- UINT32_C(0x076FEEC8), UINT32_C(0x0219F413), UINT32_C(0x04ABDD19),
- UINT32_C(0x04CE2F28), UINT32_C(0x0F2E86F7), UINT32_C(0x02F472AF),
- UINT32_C(0x06774781) } },
- { { UINT32_C(0x0CEBC7BE), UINT32_C(0x00221686), UINT32_C(0x04E2E2B5),
- UINT32_C(0x02865641), UINT32_C(0x0400F945), UINT32_C(0x01CF69C4),
- UINT32_C(0x002D7B22), UINT32_C(0x04D5A98C), UINT32_C(0x075AA74B),
- UINT32_C(0x0926F727), UINT32_C(0x0318AD6B), UINT32_C(0x009AE911),
- UINT32_C(0x00216BA5), UINT32_C(0x0794C1D5), UINT32_C(0x047BB387),
- UINT32_C(0x05890517), UINT32_C(0x0C438287), UINT32_C(0x04D6AF1C),
- UINT32_C(0x010C34E7) },
- { UINT32_C(0x02E3859D), UINT32_C(0x06690EFE), UINT32_C(0x0F063DCD),
- UINT32_C(0x068C490B), UINT32_C(0x06DE5321), UINT32_C(0x0225E5EC),
- UINT32_C(0x0573AFDE), UINT32_C(0x0C5AD59A), UINT32_C(0x064D175A),
- UINT32_C(0x09D71327), UINT32_C(0x03D7526B), UINT32_C(0x04C7D696),
- UINT32_C(0x05C7C0BF), UINT32_C(0x04314949), UINT32_C(0x064EA7B0),
- UINT32_C(0x008652D7), UINT32_C(0x0EA31279), UINT32_C(0x0668F188),
- UINT32_C(0x035A0886) } },
- { { UINT32_C(0x02EB8133), UINT32_C(0x03EC558C), UINT32_C(0x088B2CEF),
- UINT32_C(0x008352FC), UINT32_C(0x0ECF2FB1), UINT32_C(0x01F0E6BB),
- UINT32_C(0x023E4A68), UINT32_C(0x0B9CC299), UINT32_C(0x02937BC1),
- UINT32_C(0x0A4FE033), UINT32_C(0x03BAB078), UINT32_C(0x078C8608),
- UINT32_C(0x000D53E7), UINT32_C(0x06DA1D39), UINT32_C(0x05E14C61),
- UINT32_C(0x035624BE), UINT32_C(0x06669427), UINT32_C(0x079FAB65),
- UINT32_C(0x0663AC20) },
- { UINT32_C(0x06835A15), UINT32_C(0x013B136D), UINT32_C(0x08DB323F),
- UINT32_C(0x068809A4), UINT32_C(0x02A3957E), UINT32_C(0x0081A010),
- UINT32_C(0x06B7C838), UINT32_C(0x074F156F), UINT32_C(0x00F3A4DB),
- UINT32_C(0x07ADF165), UINT32_C(0x05A07A0A), UINT32_C(0x0585D310),
- UINT32_C(0x02A4FAF9), UINT32_C(0x03A5C451), UINT32_C(0x00426908),
- UINT32_C(0x03C76306), UINT32_C(0x0D3289C2), UINT32_C(0x04FD8A7B),
- UINT32_C(0x03974EFE) } },
- { { UINT32_C(0x01D85118), UINT32_C(0x03F039A9), UINT32_C(0x0A744F66),
- UINT32_C(0x00B874D3), UINT32_C(0x0AD31A3A), UINT32_C(0x07A3C5F8),
- UINT32_C(0x045FFFF5), UINT32_C(0x023754A5), UINT32_C(0x02E38CB8),
- UINT32_C(0x05910E6C), UINT32_C(0x01773ED0), UINT32_C(0x0835A72A),
- UINT32_C(0x01BE848A), UINT32_C(0x07BD444B), UINT32_C(0x0B4AFA36),
- UINT32_C(0x03B51CEC), UINT32_C(0x076A82F4), UINT32_C(0x049B5424),
- UINT32_C(0x01EDBBC3) },
- { UINT32_C(0x0D472029), UINT32_C(0x07322E8C), UINT32_C(0x0891E31F),
- UINT32_C(0x0598F9A4), UINT32_C(0x0B8A6C89), UINT32_C(0x065A918E),
- UINT32_C(0x01B36F21), UINT32_C(0x05650472), UINT32_C(0x053A7D69),
- UINT32_C(0x05F09FDE), UINT32_C(0x03CE6055), UINT32_C(0x017487DC),
- UINT32_C(0x01B03227), UINT32_C(0x013D4913), UINT32_C(0x096CA6AE),
- UINT32_C(0x000E46D4), UINT32_C(0x07F35B2C), UINT32_C(0x06FDC86A),
- UINT32_C(0x0191F319) } },
- { { UINT32_C(0x0CE12393), UINT32_C(0x015F4FB3), UINT32_C(0x0C3E8E50),
- UINT32_C(0x06CE6B2D), UINT32_C(0x0B3C1693), UINT32_C(0x045162F6),
- UINT32_C(0x0407EFF6), UINT32_C(0x00A9135E), UINT32_C(0x047CF46F),
- UINT32_C(0x04E91DC4), UINT32_C(0x036B9A3C), UINT32_C(0x0134193D),
- UINT32_C(0x003E5C05), UINT32_C(0x00082BD9), UINT32_C(0x067D8D47),
- UINT32_C(0x02764530), UINT32_C(0x01E6C320), UINT32_C(0x04A28C2A),
- UINT32_C(0x048FBA5C) },
- { UINT32_C(0x0CE5DBF5), UINT32_C(0x0385772C), UINT32_C(0x019E313F),
- UINT32_C(0x073071A7), UINT32_C(0x0F5FC824), UINT32_C(0x02D63EF3),
- UINT32_C(0x02B70267), UINT32_C(0x0A6BE174), UINT32_C(0x076EA84E),
- UINT32_C(0x0FA0EBFC), UINT32_C(0x06D310F3), UINT32_C(0x01962AC7),
- UINT32_C(0x0209883D), UINT32_C(0x03B86C97), UINT32_C(0x00441CDD),
- UINT32_C(0x0066501C), UINT32_C(0x03267C1F), UINT32_C(0x03EAC5C9),
- UINT32_C(0x00069F5A) } },
- { { UINT32_C(0x01D1EEDB), UINT32_C(0x0706D366), UINT32_C(0x04DB59F7),
- UINT32_C(0x03130058), UINT32_C(0x0FBF1E90), UINT32_C(0x02990341),
- UINT32_C(0x052D42D0), UINT32_C(0x0D9F883C), UINT32_C(0x01C3CC5F),
- UINT32_C(0x0602F8E0), UINT32_C(0x0719E908), UINT32_C(0x0152A103),
- UINT32_C(0x05A33891), UINT32_C(0x0095E49C), UINT32_C(0x07DC00AE),
- UINT32_C(0x00D04AA8), UINT32_C(0x034051A0), UINT32_C(0x01C589DC),
- UINT32_C(0x044769AA) },
- { UINT32_C(0x05A4238D), UINT32_C(0x038BBADC), UINT32_C(0x024C6D7A),
- UINT32_C(0x058D2A82), UINT32_C(0x0BE67DEB), UINT32_C(0x057F5E80),
- UINT32_C(0x055D31EA), UINT32_C(0x0DB49C5A), UINT32_C(0x070BEC2C),
- UINT32_C(0x0F3322C2), UINT32_C(0x06C3108C), UINT32_C(0x0A1130EB),
- UINT32_C(0x01DE1843), UINT32_C(0x002476B9), UINT32_C(0x0C1602A0),
- UINT32_C(0x020FD705), UINT32_C(0x0E87B144), UINT32_C(0x00271FD2),
- UINT32_C(0x02A1E7C8) } },
- { { UINT32_C(0x0BB71E17), UINT32_C(0x00B697E6), UINT32_C(0x027C50D2),
- UINT32_C(0x02FF8F72), UINT32_C(0x052B77CA), UINT32_C(0x02997C16),
- UINT32_C(0x013C0178), UINT32_C(0x0F7FCEE6), UINT32_C(0x040B66E5),
- UINT32_C(0x03A69C37), UINT32_C(0x02E55D76), UINT32_C(0x00F908D4),
- UINT32_C(0x052718AB), UINT32_C(0x0076528F), UINT32_C(0x0306D84E),
- UINT32_C(0x07EBCA7C), UINT32_C(0x01165F7E), UINT32_C(0x01DB45A9),
- UINT32_C(0x067FCC94) },
- { UINT32_C(0x0791633D), UINT32_C(0x047BD9A1), UINT32_C(0x0A26D9CC),
- UINT32_C(0x000BE536), UINT32_C(0x0F022B81), UINT32_C(0x064B6F3C),
- UINT32_C(0x03B7DA09), UINT32_C(0x0F632491), UINT32_C(0x02A9B2EF),
- UINT32_C(0x029A6C74), UINT32_C(0x039178C1), UINT32_C(0x06C1B980),
- UINT32_C(0x025426C4), UINT32_C(0x00AC18E2), UINT32_C(0x0854C009),
- UINT32_C(0x07A990A9), UINT32_C(0x0BA40528), UINT32_C(0x05C4D8A8),
- UINT32_C(0x0628B343) } },
- { { UINT32_C(0x07812A25), UINT32_C(0x0179F4F9), UINT32_C(0x09DE2C08),
- UINT32_C(0x02F4F1F9), UINT32_C(0x04F48E6A), UINT32_C(0x07549212),
- UINT32_C(0x016DCA05), UINT32_C(0x07A3A534), UINT32_C(0x0359AADF),
- UINT32_C(0x0E969384), UINT32_C(0x061DBB0C), UINT32_C(0x0E368BE3),
- UINT32_C(0x07060163), UINT32_C(0x07CA82E3), UINT32_C(0x07332717),
- UINT32_C(0x0002DFB2), UINT32_C(0x03AD0A18), UINT32_C(0x0417995E),
- UINT32_C(0x0326668F) },
- { UINT32_C(0x09EF75E3), UINT32_C(0x07B04772), UINT32_C(0x0852DCD8),
- UINT32_C(0x06097708), UINT32_C(0x0B957C2C), UINT32_C(0x038B98A1),
- UINT32_C(0x02B82598), UINT32_C(0x0F132C73), UINT32_C(0x04CE431B),
- UINT32_C(0x07D4CBE1), UINT32_C(0x049BA972), UINT32_C(0x00D3788D),
- UINT32_C(0x07EDE5A2), UINT32_C(0x0635F8BD), UINT32_C(0x0EB9AB1A),
- UINT32_C(0x02C621B4), UINT32_C(0x0BCBFF41), UINT32_C(0x0439D1F9),
- UINT32_C(0x003044A8) } },
- { { UINT32_C(0x0CF8D334), UINT32_C(0x037C1C48), UINT32_C(0x05CD52D5),
- UINT32_C(0x047578F0), UINT32_C(0x0BE7BC07), UINT32_C(0x06E68827),
- UINT32_C(0x076445CB), UINT32_C(0x0FEBF611), UINT32_C(0x00142073),
- UINT32_C(0x029F031E), UINT32_C(0x076C6434), UINT32_C(0x0F98F9D0),
- UINT32_C(0x034E14D3), UINT32_C(0x038E0268), UINT32_C(0x0191305B),
- UINT32_C(0x032A0200), UINT32_C(0x05EF4C75), UINT32_C(0x02826331),
- UINT32_C(0x04D82A88) },
- { UINT32_C(0x0D51E170), UINT32_C(0x00D3F07F), UINT32_C(0x08365D15),
- UINT32_C(0x0781A3A1), UINT32_C(0x0D4BE663), UINT32_C(0x00175259),
- UINT32_C(0x000C1FA1), UINT32_C(0x0F00FCE0), UINT32_C(0x00299B52),
- UINT32_C(0x0C7D7E01), UINT32_C(0x052A3C59), UINT32_C(0x07C9CF44),
- UINT32_C(0x05E7EE2B), UINT32_C(0x035E7031), UINT32_C(0x0FE2CB7C),
- UINT32_C(0x0403D2B4), UINT32_C(0x0FC9A748), UINT32_C(0x07D461AF),
- UINT32_C(0x006E35B5) } },
- { { UINT32_C(0x0594D02E), UINT32_C(0x075E6F14), UINT32_C(0x03360822),
- UINT32_C(0x03E7DDDB), UINT32_C(0x0F1C6110), UINT32_C(0x072483CF),
- UINT32_C(0x03ECF221), UINT32_C(0x0D658C87), UINT32_C(0x060AC74F),
- UINT32_C(0x0F51CC4C), UINT32_C(0x03EB69F7), UINT32_C(0x07B2F64B),
- UINT32_C(0x0242F07B), UINT32_C(0x058E5984), UINT32_C(0x03A0B7A4),
- UINT32_C(0x03CE806B), UINT32_C(0x06139B85), UINT32_C(0x01DAAFE3),
- UINT32_C(0x0130F7E5) },
- { UINT32_C(0x020891BB), UINT32_C(0x077E28D4), UINT32_C(0x0AAEAA8D),
- UINT32_C(0x00B2D799), UINT32_C(0x0E10388A), UINT32_C(0x001DFD31),
- UINT32_C(0x059F85F1), UINT32_C(0x00BC7E55), UINT32_C(0x05309429),
- UINT32_C(0x0FEDF8A8), UINT32_C(0x06B52B0D), UINT32_C(0x0E3F8A44),
- UINT32_C(0x07A8E2A2), UINT32_C(0x07D5866C), UINT32_C(0x02DBCD7C),
- UINT32_C(0x02895FBE), UINT32_C(0x0F66BDAD), UINT32_C(0x048C3CAD),
- UINT32_C(0x078587AD) } },
- { { UINT32_C(0x0B1B7656), UINT32_C(0x02A1E440), UINT32_C(0x04EF5EA7),
- UINT32_C(0x059FA6A2), UINT32_C(0x0C68CD6D), UINT32_C(0x005E8043),
- UINT32_C(0x01AE592B), UINT32_C(0x00DD5F88), UINT32_C(0x0559B430),
- UINT32_C(0x0BF3DF59), UINT32_C(0x011CBD52), UINT32_C(0x0DDDE17B),
- UINT32_C(0x031D26D8), UINT32_C(0x0148FB57), UINT32_C(0x04EDBF2D),
- UINT32_C(0x07220D0D), UINT32_C(0x0F7B0807), UINT32_C(0x076B1F6E),
- UINT32_C(0x0306320E) },
- { UINT32_C(0x07EEE80E), UINT32_C(0x0754C15A), UINT32_C(0x093487F6),
- UINT32_C(0x023D5CA0), UINT32_C(0x00BD77C2), UINT32_C(0x0271EF5D),
- UINT32_C(0x04FAEAB7), UINT32_C(0x07EBA560), UINT32_C(0x015A18D8),
- UINT32_C(0x039861D4), UINT32_C(0x041FD3C8), UINT32_C(0x0D5863CB),
- UINT32_C(0x066C5F53), UINT32_C(0x06380D15), UINT32_C(0x0E825C9F),
- UINT32_C(0x00BA76BE), UINT32_C(0x0BC4E3B8), UINT32_C(0x06216B12),
- UINT32_C(0x03B4F0D4) } },
- },
- {
- { { UINT32_C(0x0201C48B), UINT32_C(0x073C85A8), UINT32_C(0x095DC61E),
- UINT32_C(0x05F14993), UINT32_C(0x0123BD40), UINT32_C(0x05907610),
- UINT32_C(0x046FBB4C), UINT32_C(0x0A0F3B82), UINT32_C(0x078A34BB),
- UINT32_C(0x003DB127), UINT32_C(0x052D9AD5), UINT32_C(0x05103EE9),
- UINT32_C(0x0465988A), UINT32_C(0x005F3641), UINT32_C(0x085495F9),
- UINT32_C(0x069A8F20), UINT32_C(0x064AA21B), UINT32_C(0x007CCB01),
- UINT32_C(0x04384B61) },
- { UINT32_C(0x051DE678), UINT32_C(0x07820FBE), UINT32_C(0x063426A0),
- UINT32_C(0x01B262F0), UINT32_C(0x0B0B9013), UINT32_C(0x045C8465),
- UINT32_C(0x0240C64E), UINT32_C(0x0DDA697F), UINT32_C(0x0201A64C),
- UINT32_C(0x016B17DF), UINT32_C(0x065E1757), UINT32_C(0x0F6B7334),
- UINT32_C(0x07ED2866), UINT32_C(0x028D6370), UINT32_C(0x0E25340A),
- UINT32_C(0x002693F4), UINT32_C(0x07D889A8), UINT32_C(0x06B215F7),
- UINT32_C(0x062B5959) } },
- { { UINT32_C(0x0D9C3B89), UINT32_C(0x077CC1DC), UINT32_C(0x013DDAA7),
- UINT32_C(0x0111C6F8), UINT32_C(0x0577407F), UINT32_C(0x01FF52EA),
- UINT32_C(0x06D56CA6), UINT32_C(0x06331227), UINT32_C(0x03AB576F),
- UINT32_C(0x0CD7FD4F), UINT32_C(0x06AF74C0), UINT32_C(0x0AD52465),
- UINT32_C(0x041865E8), UINT32_C(0x0546A928), UINT32_C(0x00FE8F9D),
- UINT32_C(0x07C2CDD8), UINT32_C(0x0C0D3434), UINT32_C(0x030F8525),
- UINT32_C(0x05B51E81) },
- { UINT32_C(0x08A5170B), UINT32_C(0x074FC061), UINT32_C(0x0060E606),
- UINT32_C(0x017D8D1E), UINT32_C(0x0A8E0395), UINT32_C(0x0428DCF1),
- UINT32_C(0x046F46B8), UINT32_C(0x05E254D7), UINT32_C(0x05D05211),
- UINT32_C(0x0B46AD84), UINT32_C(0x03446BA1), UINT32_C(0x00CA5FED),
- UINT32_C(0x02A8C267), UINT32_C(0x0570EC98), UINT32_C(0x0750367D),
- UINT32_C(0x0362D78B), UINT32_C(0x0C84DA94), UINT32_C(0x07AF8D8F),
- UINT32_C(0x0583AA8B) } },
- { { UINT32_C(0x09126FAC), UINT32_C(0x06B05898), UINT32_C(0x0872DF85),
- UINT32_C(0x048C3352), UINT32_C(0x0331E5B3), UINT32_C(0x076671FB),
- UINT32_C(0x02076524), UINT32_C(0x0492A4A3), UINT32_C(0x06D57C7C),
- UINT32_C(0x052A5C41), UINT32_C(0x052CA0DF), UINT32_C(0x0E7D0224),
- UINT32_C(0x07241BC6), UINT32_C(0x0234848A), UINT32_C(0x048CE05E),
- UINT32_C(0x01B286B5), UINT32_C(0x0B054813), UINT32_C(0x02F6EDFC),
- UINT32_C(0x0250A4D8) },
- { UINT32_C(0x0831CD9D), UINT32_C(0x04B04313), UINT32_C(0x0F484946),
- UINT32_C(0x03B996C8), UINT32_C(0x00F547BB), UINT32_C(0x007A0AA7),
- UINT32_C(0x065BBAA5), UINT32_C(0x014C49BC), UINT32_C(0x03D6CABB),
- UINT32_C(0x01EF46B3), UINT32_C(0x05A5D159), UINT32_C(0x0EDE3DB4),
- UINT32_C(0x00D1B3A0), UINT32_C(0x02F97DFA), UINT32_C(0x0D68EB87),
- UINT32_C(0x06CE81C0), UINT32_C(0x00D73B27), UINT32_C(0x0342609A),
- UINT32_C(0x019C049C) } },
- { { UINT32_C(0x08BC45E5), UINT32_C(0x015B0C25), UINT32_C(0x0B2A43B0),
- UINT32_C(0x00067BBC), UINT32_C(0x07B24685), UINT32_C(0x0046140C),
- UINT32_C(0x0157806B), UINT32_C(0x049AE2AD), UINT32_C(0x0113F8DF),
- UINT32_C(0x06BBA162), UINT32_C(0x0534E07B), UINT32_C(0x086988E1),
- UINT32_C(0x00E2C213), UINT32_C(0x0513FA95), UINT32_C(0x0EC2A78F),
- UINT32_C(0x02E28447), UINT32_C(0x011B9FFF), UINT32_C(0x01506FAF),
- UINT32_C(0x07B4C5A9) },
- { UINT32_C(0x0AE71753), UINT32_C(0x0151FA30), UINT32_C(0x091691B4),
- UINT32_C(0x02ACCC22), UINT32_C(0x0BA74B18), UINT32_C(0x0073B635),
- UINT32_C(0x02F0EB55), UINT32_C(0x0CC9DF51), UINT32_C(0x0784FCDA),
- UINT32_C(0x0BFAD098), UINT32_C(0x03F5BFD6), UINT32_C(0x006AD5C5),
- UINT32_C(0x014F12F5), UINT32_C(0x0745527A), UINT32_C(0x03A6506B),
- UINT32_C(0x015CF2C8), UINT32_C(0x039A3185), UINT32_C(0x077CD12B),
- UINT32_C(0x02A9BAF3) } },
- { { UINT32_C(0x00D9229F), UINT32_C(0x039D37CD), UINT32_C(0x0948ECC6),
- UINT32_C(0x0072BCB0), UINT32_C(0x0A458017), UINT32_C(0x038A159B),
- UINT32_C(0x0368034D), UINT32_C(0x0B0315FA), UINT32_C(0x01756900),
- UINT32_C(0x04149285), UINT32_C(0x03FFBD8A), UINT32_C(0x0079E774),
- UINT32_C(0x0702A2CF), UINT32_C(0x0641C3A8), UINT32_C(0x0F3751BA),
- UINT32_C(0x028EDF14), UINT32_C(0x090F681A), UINT32_C(0x012CF177),
- UINT32_C(0x04614034) },
- { UINT32_C(0x04E4C072), UINT32_C(0x07E207E1), UINT32_C(0x02D8F8F8),
- UINT32_C(0x013BFA68), UINT32_C(0x0CC798F9), UINT32_C(0x014BAAD6),
- UINT32_C(0x023BD550), UINT32_C(0x0919F8D1), UINT32_C(0x03C00ADA),
- UINT32_C(0x0758236E), UINT32_C(0x058602C2), UINT32_C(0x0FA0FE24),
- UINT32_C(0x01A8C5A6), UINT32_C(0x0026B4C4), UINT32_C(0x0534F014),
- UINT32_C(0x02CF2A7F), UINT32_C(0x00192714), UINT32_C(0x04B51417),
- UINT32_C(0x0168C607) } },
- { { UINT32_C(0x019403A6), UINT32_C(0x04E6BA92), UINT32_C(0x0065202D),
- UINT32_C(0x06FDAE5F), UINT32_C(0x0AD1C130), UINT32_C(0x05C03BED),
- UINT32_C(0x00D7CFCE), UINT32_C(0x02B63E74), UINT32_C(0x06CD8D97),
- UINT32_C(0x00E7608A), UINT32_C(0x05009FCD), UINT32_C(0x01026095),
- UINT32_C(0x058890EC), UINT32_C(0x0662F635), UINT32_C(0x0F16F3A2),
- UINT32_C(0x06B88A1B), UINT32_C(0x000D681A), UINT32_C(0x05689B12),
- UINT32_C(0x0620658C) },
- { UINT32_C(0x0B48EFBA), UINT32_C(0x01574FA6), UINT32_C(0x0FC77D17),
- UINT32_C(0x06CDF2A2), UINT32_C(0x0DCEA8A9), UINT32_C(0x00B1DE26),
- UINT32_C(0x009A7C7A), UINT32_C(0x0435CC54), UINT32_C(0x06E8AF2E),
- UINT32_C(0x09AFC5BC), UINT32_C(0x05124055), UINT32_C(0x045BF6E2),
- UINT32_C(0x0536C8AD), UINT32_C(0x073FE4CD), UINT32_C(0x0A467A40),
- UINT32_C(0x03EB6B38), UINT32_C(0x05F039C6), UINT32_C(0x00622055),
- UINT32_C(0x045DF262) } },
- { { UINT32_C(0x0C5E165D), UINT32_C(0x00A8610A), UINT32_C(0x062AF616),
- UINT32_C(0x055190B9), UINT32_C(0x0F988454), UINT32_C(0x0395472A),
- UINT32_C(0x036DCD3E), UINT32_C(0x0FDA6187), UINT32_C(0x036EC91D),
- UINT32_C(0x0E66FCFC), UINT32_C(0x077BBD1F), UINT32_C(0x0DF3E1C9),
- UINT32_C(0x040454AC), UINT32_C(0x03004F37), UINT32_C(0x0CBDED62),
- UINT32_C(0x03DD5570), UINT32_C(0x05724DFF), UINT32_C(0x07B6002A),
- UINT32_C(0x00B93C70) },
- { UINT32_C(0x06C8A9BC), UINT32_C(0x032D8B60), UINT32_C(0x0C0850D6),
- UINT32_C(0x06C94F36), UINT32_C(0x0649CD3A), UINT32_C(0x000C0E51),
- UINT32_C(0x07B40760), UINT32_C(0x0BFA6092), UINT32_C(0x019FB910),
- UINT32_C(0x092A27FF), UINT32_C(0x02D6F975), UINT32_C(0x0E910EDA),
- UINT32_C(0x01FFB3D4), UINT32_C(0x01814FFF), UINT32_C(0x0985A6F8),
- UINT32_C(0x06787CA6), UINT32_C(0x0B7B7FC6), UINT32_C(0x01532265),
- UINT32_C(0x06228702) } },
- { { UINT32_C(0x0391B195), UINT32_C(0x01F1A68F), UINT32_C(0x0AB9DD28),
- UINT32_C(0x000B690E), UINT32_C(0x0C4FD58F), UINT32_C(0x05292C46),
- UINT32_C(0x0017D075), UINT32_C(0x010E0044), UINT32_C(0x0709FE41),
- UINT32_C(0x02F0CD13), UINT32_C(0x003D99BE), UINT32_C(0x0E6F68D8),
- UINT32_C(0x04608708), UINT32_C(0x05B1F159), UINT32_C(0x0A4CFC70),
- UINT32_C(0x02FB2946), UINT32_C(0x076D32E5), UINT32_C(0x0482F0ED),
- UINT32_C(0x06ED3305) },
- { UINT32_C(0x05C4416F), UINT32_C(0x02270E15), UINT32_C(0x073143E0),
- UINT32_C(0x02F4151F), UINT32_C(0x099069A7), UINT32_C(0x05437AEB),
- UINT32_C(0x027A90CA), UINT32_C(0x0A75E48C), UINT32_C(0x013FC627),
- UINT32_C(0x0300361B), UINT32_C(0x072745C2), UINT32_C(0x0C9DD555),
- UINT32_C(0x05D86308), UINT32_C(0x03713AF4), UINT32_C(0x01AF9EBC),
- UINT32_C(0x0157F18F), UINT32_C(0x0E008EAF), UINT32_C(0x0409010B),
- UINT32_C(0x074F85AA) } },
- { { UINT32_C(0x045C5FF5), UINT32_C(0x046845EE), UINT32_C(0x074B8893),
- UINT32_C(0x036C56E2), UINT32_C(0x0CC7B43B), UINT32_C(0x030C1789),
- UINT32_C(0x05916A34), UINT32_C(0x0F2AFB7C), UINT32_C(0x0154EDEB),
- UINT32_C(0x0407BF3E), UINT32_C(0x05362D80), UINT32_C(0x0CCA97B1),
- UINT32_C(0x041BFF6D), UINT32_C(0x05DAE466), UINT32_C(0x07D9D691),
- UINT32_C(0x023DBF89), UINT32_C(0x05162F52), UINT32_C(0x000CBF57),
- UINT32_C(0x0154EDFD) },
- { UINT32_C(0x08BF712A), UINT32_C(0x06009B91), UINT32_C(0x0AFFBD38),
- UINT32_C(0x03FD6332), UINT32_C(0x06CD1DC8), UINT32_C(0x06C678BF),
- UINT32_C(0x0040E5CE), UINT32_C(0x02743457), UINT32_C(0x060DF50E),
- UINT32_C(0x0691C947), UINT32_C(0x0746D675), UINT32_C(0x0D68B325),
- UINT32_C(0x0290D55C), UINT32_C(0x015B144C), UINT32_C(0x05A0332F),
- UINT32_C(0x0563DB53), UINT32_C(0x04CED890), UINT32_C(0x04AC67C8),
- UINT32_C(0x04387D35) } },
- { { UINT32_C(0x0A66FBB8), UINT32_C(0x05FDBF97), UINT32_C(0x0A47124E),
- UINT32_C(0x03FED0AF), UINT32_C(0x082B44B9), UINT32_C(0x0244ADCE),
- UINT32_C(0x05980D8A), UINT32_C(0x0687D615), UINT32_C(0x07E4662D),
- UINT32_C(0x03F2180A), UINT32_C(0x04BA4DB6), UINT32_C(0x03FE8141),
- UINT32_C(0x04B2BC20), UINT32_C(0x006DF40A), UINT32_C(0x0AB2698D),
- UINT32_C(0x0365D173), UINT32_C(0x08DE4017), UINT32_C(0x079E6BA2),
- UINT32_C(0x02C7A033) },
- { UINT32_C(0x075570A1), UINT32_C(0x06A48901), UINT32_C(0x0492AC74),
- UINT32_C(0x077D2844), UINT32_C(0x0DB87BFD), UINT32_C(0x01D218B2),
- UINT32_C(0x0522DA69), UINT32_C(0x0B4F7CF4), UINT32_C(0x00841BC4),
- UINT32_C(0x0E420155), UINT32_C(0x00BDBB35), UINT32_C(0x0BB5E945),
- UINT32_C(0x06FE4123), UINT32_C(0x0435B025), UINT32_C(0x0ACCEA16),
- UINT32_C(0x00BE381C), UINT32_C(0x0C3F4D0D), UINT32_C(0x03862E1B),
- UINT32_C(0x04A46652) } },
- { { UINT32_C(0x009B3F23), UINT32_C(0x00CFBD75), UINT32_C(0x069BE715),
- UINT32_C(0x009C9678), UINT32_C(0x013F2EB4), UINT32_C(0x04EE1278),
- UINT32_C(0x06387FDD), UINT32_C(0x0329F9F1), UINT32_C(0x048E212F),
- UINT32_C(0x0F24F073), UINT32_C(0x008F0FD5), UINT32_C(0x02F3DAFE),
- UINT32_C(0x039C6160), UINT32_C(0x018F4D1D), UINT32_C(0x0E9D0F18),
- UINT32_C(0x066F0916), UINT32_C(0x09931852), UINT32_C(0x040EEBEA),
- UINT32_C(0x032448BB) },
- { UINT32_C(0x0C226E2C), UINT32_C(0x07706840), UINT32_C(0x0D3C1C34),
- UINT32_C(0x07E4BA61), UINT32_C(0x0A51E4A1), UINT32_C(0x038E00FB),
- UINT32_C(0x06E25F2A), UINT32_C(0x0C263EC1), UINT32_C(0x078D29D8),
- UINT32_C(0x07C7272D), UINT32_C(0x0572E10B), UINT32_C(0x0B83C0DC),
- UINT32_C(0x02179CDB), UINT32_C(0x066C84E3), UINT32_C(0x07675170),
- UINT32_C(0x00BDF2F6), UINT32_C(0x0F52477D), UINT32_C(0x00FE3151),
- UINT32_C(0x05460029) } },
- { { UINT32_C(0x0DA35EBF), UINT32_C(0x066B421E), UINT32_C(0x07116B3C),
- UINT32_C(0x077330D7), UINT32_C(0x0CE4D316), UINT32_C(0x027318E8),
- UINT32_C(0x04CA0B0C), UINT32_C(0x06EFBBCB), UINT32_C(0x027FF80D),
- UINT32_C(0x07B56250), UINT32_C(0x03FBF443), UINT32_C(0x0E5E86E3),
- UINT32_C(0x01050837), UINT32_C(0x027F8C63), UINT32_C(0x0040889F),
- UINT32_C(0x0233D7DC), UINT32_C(0x085C1EB3), UINT32_C(0x0190948B),
- UINT32_C(0x02A42839) },
- { UINT32_C(0x046020F0), UINT32_C(0x04A9DB75), UINT32_C(0x0C1F003A),
- UINT32_C(0x05C091F8), UINT32_C(0x069D2F26), UINT32_C(0x05CBE28A),
- UINT32_C(0x00B98CA0), UINT32_C(0x0C44F77C), UINT32_C(0x06591FB2),
- UINT32_C(0x0336AA95), UINT32_C(0x05A28AC0), UINT32_C(0x0A8AC670),
- UINT32_C(0x0735C3E5), UINT32_C(0x049911B7), UINT32_C(0x04F28112),
- UINT32_C(0x0532B634), UINT32_C(0x00A3E84F), UINT32_C(0x06EA385D),
- UINT32_C(0x01F2A03A) } },
- { { UINT32_C(0x06A09384), UINT32_C(0x0260C3CA), UINT32_C(0x092529A6),
- UINT32_C(0x016D77CF), UINT32_C(0x0B8E2D9A), UINT32_C(0x01055E02),
- UINT32_C(0x055BC4FD), UINT32_C(0x0CA2C0AF), UINT32_C(0x03A4ABF9),
- UINT32_C(0x0290D54C), UINT32_C(0x07B6E3EE), UINT32_C(0x07074346),
- UINT32_C(0x047E1F90), UINT32_C(0x06D2B228), UINT32_C(0x064225A4),
- UINT32_C(0x06F125F2), UINT32_C(0x0D66264B), UINT32_C(0x01B0F052),
- UINT32_C(0x070B7573) },
- { UINT32_C(0x0B2264B8), UINT32_C(0x04D4A619), UINT32_C(0x0AC1F517),
- UINT32_C(0x049FE3F8), UINT32_C(0x08BEDBF0), UINT32_C(0x01EB5F66),
- UINT32_C(0x0145535A), UINT32_C(0x042D102F), UINT32_C(0x04447303),
- UINT32_C(0x067B60A3), UINT32_C(0x043A9645), UINT32_C(0x0D502303),
- UINT32_C(0x0669CEC4), UINT32_C(0x052699E3), UINT32_C(0x0E740F66),
- UINT32_C(0x011DF90D), UINT32_C(0x006017A2), UINT32_C(0x03C99A89),
- UINT32_C(0x069500E3) } },
- { { UINT32_C(0x0184B415), UINT32_C(0x06F26FDD), UINT32_C(0x01E5007E),
- UINT32_C(0x038A2542), UINT32_C(0x0DA8A807), UINT32_C(0x078F5424),
- UINT32_C(0x04D3FA96), UINT32_C(0x0A456FBD), UINT32_C(0x062853C6),
- UINT32_C(0x017211A6), UINT32_C(0x049854E5), UINT32_C(0x0A8F3585),
- UINT32_C(0x079A3009), UINT32_C(0x07AFB481), UINT32_C(0x081AFE37),
- UINT32_C(0x031A410E), UINT32_C(0x0EADF215), UINT32_C(0x02649FCC),
- UINT32_C(0x00A68E58) },
- { UINT32_C(0x0A87B468), UINT32_C(0x0744629E), UINT32_C(0x010788AE),
- UINT32_C(0x00DA10EC), UINT32_C(0x07BD591B), UINT32_C(0x07BC474E),
- UINT32_C(0x02AE7E4E), UINT32_C(0x074ED106), UINT32_C(0x059550A8),
- UINT32_C(0x0C2FBDF7), UINT32_C(0x078A0AB0), UINT32_C(0x019D9F46),
- UINT32_C(0x030FE4BE), UINT32_C(0x00DF9F6A), UINT32_C(0x04D2A38F),
- UINT32_C(0x052B1469), UINT32_C(0x005AE2E6), UINT32_C(0x07E6C02D),
- UINT32_C(0x0283843A) } },
- { { UINT32_C(0x0784F95B), UINT32_C(0x01616DEF), UINT32_C(0x056C696A),
- UINT32_C(0x03B98963), UINT32_C(0x085F2426), UINT32_C(0x07BDAC89),
- UINT32_C(0x05EAFBF9), UINT32_C(0x09A4C8CC), UINT32_C(0x0558AA78),
- UINT32_C(0x0D041BCD), UINT32_C(0x04BDD0B5), UINT32_C(0x037216D5),
- UINT32_C(0x06BD4C93), UINT32_C(0x0042A72A), UINT32_C(0x0B4A6F17),
- UINT32_C(0x0177EE47), UINT32_C(0x028752B7), UINT32_C(0x0750D182),
- UINT32_C(0x04BE36EA) },
- { UINT32_C(0x01DCCF70), UINT32_C(0x05249FC9), UINT32_C(0x063EE812),
- UINT32_C(0x0362E5A3), UINT32_C(0x017DB2F0), UINT32_C(0x05508041),
- UINT32_C(0x078C050C), UINT32_C(0x0C161A22), UINT32_C(0x078E338A),
- UINT32_C(0x0BB9EF36), UINT32_C(0x001185AB), UINT32_C(0x09058EAD),
- UINT32_C(0x00D3AF42), UINT32_C(0x02FBEDA9), UINT32_C(0x0996A3FA),
- UINT32_C(0x02E0B934), UINT32_C(0x08F57F1A), UINT32_C(0x025EB5CE),
- UINT32_C(0x0254456F) } },
- { { UINT32_C(0x08F9B528), UINT32_C(0x04174130), UINT32_C(0x013E12B3),
- UINT32_C(0x022B697D), UINT32_C(0x0B0CEF11), UINT32_C(0x03A2E8E2),
- UINT32_C(0x00D96F4F), UINT32_C(0x0B4B7DF9), UINT32_C(0x0056458A),
- UINT32_C(0x083BA433), UINT32_C(0x068A2473), UINT32_C(0x0D586B52),
- UINT32_C(0x00ACD634), UINT32_C(0x01D1EAD7), UINT32_C(0x03036203),
- UINT32_C(0x000C0094), UINT32_C(0x047A01B9), UINT32_C(0x0212F1A6),
- UINT32_C(0x04D19921) },
- { UINT32_C(0x0837554E), UINT32_C(0x02ECC2C4), UINT32_C(0x0B80FBFE),
- UINT32_C(0x07A5E03B), UINT32_C(0x041C1C48), UINT32_C(0x043DD0D4),
- UINT32_C(0x04C36416), UINT32_C(0x0869B643), UINT32_C(0x028DC568),
- UINT32_C(0x0F15A5D2), UINT32_C(0x00D7FC36), UINT32_C(0x04D7306E),
- UINT32_C(0x0306A221), UINT32_C(0x04950B4A), UINT32_C(0x06DC4FCA),
- UINT32_C(0x048D5878), UINT32_C(0x0032B7DE), UINT32_C(0x000E5973),
- UINT32_C(0x04FFCD15) } },
- },
- {
- { { UINT32_C(0x051368EE), UINT32_C(0x03C182D8), UINT32_C(0x0233E580),
- UINT32_C(0x0467AAF9), UINT32_C(0x038EEE52), UINT32_C(0x01F8CCEB),
- UINT32_C(0x04E7863B), UINT32_C(0x0974DE7F), UINT32_C(0x07C7D47D),
- UINT32_C(0x01F4B806), UINT32_C(0x0059F163), UINT32_C(0x07DFA5B8),
- UINT32_C(0x0449B3CD), UINT32_C(0x0378D1F4), UINT32_C(0x03486C59),
- UINT32_C(0x02FFDC03), UINT32_C(0x0854568F), UINT32_C(0x017FDD91),
- UINT32_C(0x0384B0DC) },
- { UINT32_C(0x08A3F84B), UINT32_C(0x065DE2C1), UINT32_C(0x085945B9),
- UINT32_C(0x04E5C55A), UINT32_C(0x06CB12ED), UINT32_C(0x07B741CC),
- UINT32_C(0x05B2C0EB), UINT32_C(0x0809AC7E), UINT32_C(0x04A46CA2),
- UINT32_C(0x061FF16D), UINT32_C(0x03744313), UINT32_C(0x0C777A3B),
- UINT32_C(0x0207FD18), UINT32_C(0x0539771F), UINT32_C(0x01004BCB),
- UINT32_C(0x04A8FC6F), UINT32_C(0x0F0A63E8), UINT32_C(0x02373910),
- UINT32_C(0x072840F7) } },
- { { UINT32_C(0x0E024391), UINT32_C(0x02781D5D), UINT32_C(0x05026331),
- UINT32_C(0x025635CD), UINT32_C(0x0492939D), UINT32_C(0x00222466),
- UINT32_C(0x0456BF4C), UINT32_C(0x07C8DEE7), UINT32_C(0x000178A5),
- UINT32_C(0x051D50AE), UINT32_C(0x02CE451F), UINT32_C(0x01814C6B),
- UINT32_C(0x0265AE7F), UINT32_C(0x0312E044), UINT32_C(0x0848FF64),
- UINT32_C(0x013BB3DA), UINT32_C(0x0C153136), UINT32_C(0x019DF825),
- UINT32_C(0x0462A6B6) },
- { UINT32_C(0x0E9AB68C), UINT32_C(0x04B05DA9), UINT32_C(0x04C2481A),
- UINT32_C(0x076E7298), UINT32_C(0x09F0C636), UINT32_C(0x01F7D7D4),
- UINT32_C(0x00F9BB8A), UINT32_C(0x0F077B4D), UINT32_C(0x0259165A),
- UINT32_C(0x0592DC29), UINT32_C(0x02303769), UINT32_C(0x0EDF23B9),
- UINT32_C(0x06E3C4F3), UINT32_C(0x026481C0), UINT32_C(0x033547D1),
- UINT32_C(0x04349C82), UINT32_C(0x0FB49FD0), UINT32_C(0x03D48B1E),
- UINT32_C(0x00EDD6A9) } },
- { { UINT32_C(0x09496A3E), UINT32_C(0x0779CC41), UINT32_C(0x0F31204C),
- UINT32_C(0x01DD9727), UINT32_C(0x0B88711D), UINT32_C(0x0531C3F2),
- UINT32_C(0x04294797), UINT32_C(0x043683B3), UINT32_C(0x05DBB4CC),
- UINT32_C(0x06B27F93), UINT32_C(0x04CEFE76), UINT32_C(0x02EF8CFB),
- UINT32_C(0x065C5182), UINT32_C(0x051D70E4), UINT32_C(0x0B92D89E),
- UINT32_C(0x015A48BA), UINT32_C(0x00689714), UINT32_C(0x02F0F899),
- UINT32_C(0x03A05527) },
- { UINT32_C(0x04B88B67), UINT32_C(0x0337896D), UINT32_C(0x0AC27DF4),
- UINT32_C(0x02CFE168), UINT32_C(0x003AC24A), UINT32_C(0x0287B4A1),
- UINT32_C(0x04C9337D), UINT32_C(0x0480FCAA), UINT32_C(0x0385E818),
- UINT32_C(0x0698332E), UINT32_C(0x00B177F0), UINT32_C(0x088F3F24),
- UINT32_C(0x056A2745), UINT32_C(0x06A53116), UINT32_C(0x0101CC1F),
- UINT32_C(0x013E9DBA), UINT32_C(0x06227F55), UINT32_C(0x03D027B4),
- UINT32_C(0x02CD8668) } },
- { { UINT32_C(0x0076683D), UINT32_C(0x076BEE0D), UINT32_C(0x0D7D7B4C),
- UINT32_C(0x0108643A), UINT32_C(0x0F993C30), UINT32_C(0x07B71D95),
- UINT32_C(0x029E4008), UINT32_C(0x034C59B6), UINT32_C(0x00E01922),
- UINT32_C(0x062750BC), UINT32_C(0x00DA23D4), UINT32_C(0x0BF7FFAF),
- UINT32_C(0x016F2E12), UINT32_C(0x0546677C), UINT32_C(0x038327C5),
- UINT32_C(0x07930C31), UINT32_C(0x03297791), UINT32_C(0x06E93707),
- UINT32_C(0x0731AA7A) },
- { UINT32_C(0x0B99594F), UINT32_C(0x0300795B), UINT32_C(0x0C5F3D55),
- UINT32_C(0x01C1DE37), UINT32_C(0x02FD7C9F), UINT32_C(0x001493C6),
- UINT32_C(0x07BB523B), UINT32_C(0x08D81CF9), UINT32_C(0x000974EA),
- UINT32_C(0x04B4CFBC), UINT32_C(0x04354B41), UINT32_C(0x0644AB94),
- UINT32_C(0x0251A61B), UINT32_C(0x0555FAF5), UINT32_C(0x03713B98),
- UINT32_C(0x0597947C), UINT32_C(0x061DDC4D), UINT32_C(0x01C1E655),
- UINT32_C(0x05DDAC10) } },
- { { UINT32_C(0x02662A6A), UINT32_C(0x0721BA5B), UINT32_C(0x08BFB362),
- UINT32_C(0x02A23D78), UINT32_C(0x04F666A1), UINT32_C(0x060FB317),
- UINT32_C(0x0729C7ED), UINT32_C(0x09B1B389), UINT32_C(0x031F8856),
- UINT32_C(0x06913D9E), UINT32_C(0x0779217C), UINT32_C(0x0A3634CD),
- UINT32_C(0x06292B3F), UINT32_C(0x01E6FDE6), UINT32_C(0x0F97C1F0),
- UINT32_C(0x0698999D), UINT32_C(0x0D773548), UINT32_C(0x01ED7CE9),
- UINT32_C(0x00FFC55A) },
- { UINT32_C(0x0D76A58E), UINT32_C(0x0195519C), UINT32_C(0x02C2F7AB),
- UINT32_C(0x061D1820), UINT32_C(0x09A1252D), UINT32_C(0x07772B8E),
- UINT32_C(0x05554A30), UINT32_C(0x0687BCF0), UINT32_C(0x06CE8978),
- UINT32_C(0x0961AAB6), UINT32_C(0x0611194A), UINT32_C(0x097F9E4C),
- UINT32_C(0x07E8543A), UINT32_C(0x076F7FC5), UINT32_C(0x039F7F09),
- UINT32_C(0x074DF751), UINT32_C(0x000B4239), UINT32_C(0x010D59A8),
- UINT32_C(0x03F90438) } },
- { { UINT32_C(0x0DA09D54), UINT32_C(0x06AF7630), UINT32_C(0x02BF95A8),
- UINT32_C(0x055D4226), UINT32_C(0x059FD1D0), UINT32_C(0x06B060C9),
- UINT32_C(0x07D177E4), UINT32_C(0x03F4F180), UINT32_C(0x021C92CF),
- UINT32_C(0x02D3DD59), UINT32_C(0x048EB409), UINT32_C(0x07E17E45),
- UINT32_C(0x05EEE57B), UINT32_C(0x01B0CED0), UINT32_C(0x0E7E68AB),
- UINT32_C(0x043C0C09), UINT32_C(0x0A766549), UINT32_C(0x0006D7E3),
- UINT32_C(0x06CB262D) },
- { UINT32_C(0x045007F6), UINT32_C(0x077C78B0), UINT32_C(0x006040A8),
- UINT32_C(0x06713C8D), UINT32_C(0x09341EBC), UINT32_C(0x0236E27C),
- UINT32_C(0x055A82B4), UINT32_C(0x06F7750F), UINT32_C(0x0669305F),
- UINT32_C(0x017EE81A), UINT32_C(0x01216750), UINT32_C(0x0ED65974),
- UINT32_C(0x03FEF768), UINT32_C(0x01F1588F), UINT32_C(0x0E26B74A),
- UINT32_C(0x078B116C), UINT32_C(0x0B1F0885), UINT32_C(0x05EF5659),
- UINT32_C(0x02E63355) } },
- { { UINT32_C(0x0FB0D3ED), UINT32_C(0x003E5A50), UINT32_C(0x0C55AAAF),
- UINT32_C(0x0289AC3D), UINT32_C(0x05EF5174), UINT32_C(0x0719E0EE),
- UINT32_C(0x01A9C3D8), UINT32_C(0x0DE06CD1), UINT32_C(0x07ED918A),
- UINT32_C(0x0BF6A107), UINT32_C(0x06149FAB), UINT32_C(0x0880197B),
- UINT32_C(0x060CCF4B), UINT32_C(0x015F00A0), UINT32_C(0x026084C4),
- UINT32_C(0x06C15B05), UINT32_C(0x04E4098B), UINT32_C(0x063ED2C8),
- UINT32_C(0x058C6384) },
- { UINT32_C(0x040FA002), UINT32_C(0x01B4B412), UINT32_C(0x08A0A8F3),
- UINT32_C(0x015D5274), UINT32_C(0x0B3D6C31), UINT32_C(0x0241F67E),
- UINT32_C(0x0383A0C0), UINT32_C(0x0D2CCE25), UINT32_C(0x07A721DD),
- UINT32_C(0x0FD7994F), UINT32_C(0x04852FC2), UINT32_C(0x0EEB0BC8),
- UINT32_C(0x05CF0812), UINT32_C(0x06594895), UINT32_C(0x0F6294B1),
- UINT32_C(0x047E9685), UINT32_C(0x03C1ADBF), UINT32_C(0x00B567D9),
- UINT32_C(0x005C4AB1) } },
- { { UINT32_C(0x0696BA83), UINT32_C(0x06603D4F), UINT32_C(0x0885A978),
- UINT32_C(0x011657F3), UINT32_C(0x0774554D), UINT32_C(0x01806495),
- UINT32_C(0x01B33254), UINT32_C(0x0A1BB9D6), UINT32_C(0x03A6DF67),
- UINT32_C(0x03AB9C8C), UINT32_C(0x0737480A), UINT32_C(0x00203D86),
- UINT32_C(0x04CE906D), UINT32_C(0x0751DBBB), UINT32_C(0x01AB53E1),
- UINT32_C(0x01405C83), UINT32_C(0x0894C75D), UINT32_C(0x02ACD3EC),
- UINT32_C(0x02926ACF) },
- { UINT32_C(0x0E8C01EF), UINT32_C(0x043477F5), UINT32_C(0x068FA361),
- UINT32_C(0x07FC59F7), UINT32_C(0x04967BAC), UINT32_C(0x0236FCA8),
- UINT32_C(0x053E4F2C), UINT32_C(0x02BA3E65), UINT32_C(0x05F9F6F0),
- UINT32_C(0x064247B4), UINT32_C(0x021B5084), UINT32_C(0x0894325C),
- UINT32_C(0x04EFE79C), UINT32_C(0x0188ED3F), UINT32_C(0x0D4FE809),
- UINT32_C(0x044BAE94), UINT32_C(0x0C8112AE), UINT32_C(0x05C68229),
- UINT32_C(0x07D43896) } },
- { { UINT32_C(0x046C1FB6), UINT32_C(0x077D8036), UINT32_C(0x0295DD8C),
- UINT32_C(0x04452F28), UINT32_C(0x0B23C464), UINT32_C(0x0644D5BA),
- UINT32_C(0x05069E01), UINT32_C(0x090DF002), UINT32_C(0x03B40591),
- UINT32_C(0x01F28172), UINT32_C(0x06905D57), UINT32_C(0x0DF1C74E),
- UINT32_C(0x05CE4958), UINT32_C(0x079BDE8E), UINT32_C(0x0D3F2F1A),
- UINT32_C(0x04E07C5F), UINT32_C(0x088FF1FA), UINT32_C(0x05C72030),
- UINT32_C(0x03BE09B6) },
- { UINT32_C(0x0A78B572), UINT32_C(0x052D6B4B), UINT32_C(0x091101F1),
- UINT32_C(0x01EB64B1), UINT32_C(0x0AA87947), UINT32_C(0x01ECBA5D),
- UINT32_C(0x03E02CC6), UINT32_C(0x0FDA4839), UINT32_C(0x02FF59B8),
- UINT32_C(0x0CA6ED0F), UINT32_C(0x06C0BD08), UINT32_C(0x0948203F),
- UINT32_C(0x00417563), UINT32_C(0x03ED5E44), UINT32_C(0x09D9F1D1),
- UINT32_C(0x043138E9), UINT32_C(0x087C76A9), UINT32_C(0x0436C464),
- UINT32_C(0x065BC41C) } },
- { { UINT32_C(0x0878503F), UINT32_C(0x02F87D12), UINT32_C(0x02476646),
- UINT32_C(0x0245CC6E), UINT32_C(0x0D4C90B6), UINT32_C(0x03F5323B),
- UINT32_C(0x05B608C2), UINT32_C(0x0E11AA7B), UINT32_C(0x03BBF4CC),
- UINT32_C(0x0E62F0E5), UINT32_C(0x03FDD83B), UINT32_C(0x01FAF12E),
- UINT32_C(0x00E02D6E), UINT32_C(0x0404666D), UINT32_C(0x0A39480C),
- UINT32_C(0x05904EE4), UINT32_C(0x0D422EC7), UINT32_C(0x009272AF),
- UINT32_C(0x065E518B) },
- { UINT32_C(0x0947A480), UINT32_C(0x0638CCA2), UINT32_C(0x0B86EFCD),
- UINT32_C(0x04C5912B), UINT32_C(0x0416F142), UINT32_C(0x066CD9A8),
- UINT32_C(0x0062F342), UINT32_C(0x030CBA20), UINT32_C(0x0675D320),
- UINT32_C(0x02C4F492), UINT32_C(0x04263BD8), UINT32_C(0x0B10ED23),
- UINT32_C(0x00458FD7), UINT32_C(0x064D3804), UINT32_C(0x030CE729),
- UINT32_C(0x055F1902), UINT32_C(0x005C9288), UINT32_C(0x05B65212),
- UINT32_C(0x03463ED7) } },
- { { UINT32_C(0x0002FA40), UINT32_C(0x019C27F1), UINT32_C(0x00CBB750),
- UINT32_C(0x03DB3435), UINT32_C(0x07286E98), UINT32_C(0x0279AAFF),
- UINT32_C(0x06D46384), UINT32_C(0x0A49DB6A), UINT32_C(0x0137478E),
- UINT32_C(0x07036ADC), UINT32_C(0x0156A020), UINT32_C(0x03444CA2),
- UINT32_C(0x014A059C), UINT32_C(0x062920C4), UINT32_C(0x05340D48),
- UINT32_C(0x07AB2B40), UINT32_C(0x060E1CBF), UINT32_C(0x06DBC3C7),
- UINT32_C(0x02A6E451) },
- { UINT32_C(0x02203C97), UINT32_C(0x0318811D), UINT32_C(0x02528A1B),
- UINT32_C(0x04016192), UINT32_C(0x002C3086), UINT32_C(0x031D212C),
- UINT32_C(0x03FC1DA6), UINT32_C(0x0E3A234E), UINT32_C(0x048A2B44),
- UINT32_C(0x046AB91A), UINT32_C(0x03F8806B), UINT32_C(0x073943DE),
- UINT32_C(0x02B12570), UINT32_C(0x024DEAC9), UINT32_C(0x08C3B2AA),
- UINT32_C(0x06910619), UINT32_C(0x01EBE0ED), UINT32_C(0x04FB5E82),
- UINT32_C(0x068938E9) } },
- { { UINT32_C(0x06A8409F), UINT32_C(0x03819FA0), UINT32_C(0x04EBCC7D),
- UINT32_C(0x05295667), UINT32_C(0x00BD47C4), UINT32_C(0x02F397A5),
- UINT32_C(0x00B133A1), UINT32_C(0x073E4AFA), UINT32_C(0x0760D526),
- UINT32_C(0x0D372CAA), UINT32_C(0x0068759A), UINT32_C(0x09A7813F),
- UINT32_C(0x000A0F4E), UINT32_C(0x01EAF02F), UINT32_C(0x09F88085),
- UINT32_C(0x0117D84A), UINT32_C(0x0B583330), UINT32_C(0x07FFDDE3),
- UINT32_C(0x00C0B54F) },
- { UINT32_C(0x0593BC03), UINT32_C(0x05294489), UINT32_C(0x0C95575C),
- UINT32_C(0x06A16930), UINT32_C(0x07E57953), UINT32_C(0x04258C35),
- UINT32_C(0x027EF886), UINT32_C(0x09A129B5), UINT32_C(0x034A8854),
- UINT32_C(0x0BB5AF8F), UINT32_C(0x0469C5BA), UINT32_C(0x000C4849),
- UINT32_C(0x00CE9665), UINT32_C(0x02759E17), UINT32_C(0x087D763E),
- UINT32_C(0x03FB717D), UINT32_C(0x0F3FD635), UINT32_C(0x007CA5FC),
- UINT32_C(0x01D3A8B2) } },
- { { UINT32_C(0x068172DA), UINT32_C(0x05B9F788), UINT32_C(0x0612E973),
- UINT32_C(0x0052E050), UINT32_C(0x099B39D0), UINT32_C(0x061F5F0F),
- UINT32_C(0x0799AF1A), UINT32_C(0x0466C10B), UINT32_C(0x0680E8D3),
- UINT32_C(0x04361EC0), UINT32_C(0x05210B2E), UINT32_C(0x0DF23AB3),
- UINT32_C(0x02B3A0B2), UINT32_C(0x0380194E), UINT32_C(0x09D77AFB),
- UINT32_C(0x06BCE4AB), UINT32_C(0x05EAD2E7), UINT32_C(0x02DD9B74),
- UINT32_C(0x033D66F2) },
- { UINT32_C(0x0BF1C993), UINT32_C(0x04E38933), UINT32_C(0x02FC4FAF),
- UINT32_C(0x0461AE62), UINT32_C(0x0F6D1B38), UINT32_C(0x021B47B4),
- UINT32_C(0x01F061C9), UINT32_C(0x051CC234), UINT32_C(0x01C8E186),
- UINT32_C(0x001C7EF9), UINT32_C(0x0664E0E2), UINT32_C(0x048E8CC7),
- UINT32_C(0x015C9670), UINT32_C(0x0481B87A), UINT32_C(0x05BCAD05),
- UINT32_C(0x003B38E6), UINT32_C(0x00886CA1), UINT32_C(0x00B0D706),
- UINT32_C(0x026557A5) } },
- { { UINT32_C(0x05F0E5DA), UINT32_C(0x03682274), UINT32_C(0x0F4E352F),
- UINT32_C(0x0105AE83), UINT32_C(0x0A820E71), UINT32_C(0x022C5CEC),
- UINT32_C(0x03DD2CFC), UINT32_C(0x0298E61A), UINT32_C(0x00120917),
- UINT32_C(0x0B0B64DF), UINT32_C(0x03C1333E), UINT32_C(0x03C5D41B),
- UINT32_C(0x04B5D215), UINT32_C(0x0187971D), UINT32_C(0x0389EAD7),
- UINT32_C(0x03CFCCE2), UINT32_C(0x063F13FF), UINT32_C(0x0652C165),
- UINT32_C(0x07742EFC) },
- { UINT32_C(0x0931C0F0), UINT32_C(0x018F45E5), UINT32_C(0x0C4C756D),
- UINT32_C(0x0537A469), UINT32_C(0x0433FB52), UINT32_C(0x0754DECC),
- UINT32_C(0x04D896F7), UINT32_C(0x04335219), UINT32_C(0x073BBC0E),
- UINT32_C(0x083BA2C0), UINT32_C(0x012D3B9E), UINT32_C(0x023EABD5),
- UINT32_C(0x04475CF9), UINT32_C(0x07A0DA39), UINT32_C(0x088DDF48),
- UINT32_C(0x002FFFDF), UINT32_C(0x0D8B7000), UINT32_C(0x06504250),
- UINT32_C(0x00F1A818) } },
- { { UINT32_C(0x052228CC), UINT32_C(0x06FA4348), UINT32_C(0x0F049E30),
- UINT32_C(0x0713CA99), UINT32_C(0x0E5D39FE), UINT32_C(0x0057B8DA),
- UINT32_C(0x003125E1), UINT32_C(0x0CC15492), UINT32_C(0x07700BE8),
- UINT32_C(0x08CFE785), UINT32_C(0x00CEB57F), UINT32_C(0x0F478327),
- UINT32_C(0x05A00945), UINT32_C(0x0490F14E), UINT32_C(0x025BA378),
- UINT32_C(0x060ED998), UINT32_C(0x01B249B5), UINT32_C(0x0023BC4C),
- UINT32_C(0x04DEDEC8) },
- { UINT32_C(0x0BA1E090), UINT32_C(0x027EBAC8), UINT32_C(0x0DD6FE71),
- UINT32_C(0x01F0ADDC), UINT32_C(0x0549F634), UINT32_C(0x06BE8416),
- UINT32_C(0x02F156E2), UINT32_C(0x0A531A53), UINT32_C(0x00AFBE73),
- UINT32_C(0x0FFF18EB), UINT32_C(0x0020C1DC), UINT32_C(0x0F409F61),
- UINT32_C(0x04E3859C), UINT32_C(0x015D5ECF), UINT32_C(0x03B3F268),
- UINT32_C(0x0288B503), UINT32_C(0x03A276BD), UINT32_C(0x0286EE9C),
- UINT32_C(0x03166F91) } },
- { { UINT32_C(0x0F1CAC2C), UINT32_C(0x035777A8), UINT32_C(0x0AF34113),
- UINT32_C(0x050DD855), UINT32_C(0x0B6BC9C1), UINT32_C(0x07010D91),
- UINT32_C(0x0452008D), UINT32_C(0x0471A3DA), UINT32_C(0x05830FDC),
- UINT32_C(0x0F222BBE), UINT32_C(0x04848384), UINT32_C(0x049CFD4D),
- UINT32_C(0x01817D66), UINT32_C(0x0724627E), UINT32_C(0x082270B8),
- UINT32_C(0x07ED5A0F), UINT32_C(0x0EEA015A), UINT32_C(0x0700F77E),
- UINT32_C(0x007E36E1) },
- { UINT32_C(0x09244F78), UINT32_C(0x049DAC0A), UINT32_C(0x0573D581),
- UINT32_C(0x001D1B4C), UINT32_C(0x0F0116EB), UINT32_C(0x03CFFD42),
- UINT32_C(0x043FFF66), UINT32_C(0x048523A0), UINT32_C(0x0671CEF3),
- UINT32_C(0x0EC2D7AF), UINT32_C(0x0049EBD0), UINT32_C(0x0F4034B6),
- UINT32_C(0x05C34B54), UINT32_C(0x025E680B), UINT32_C(0x0D2C5BEA),
- UINT32_C(0x06F544F6), UINT32_C(0x0B0CFA5A), UINT32_C(0x018276AE),
- UINT32_C(0x077D6B16) } },
- },
- {
- { { UINT32_C(0x00E10587), UINT32_C(0x01885D11), UINT32_C(0x00A74863),
- UINT32_C(0x02F34C13), UINT32_C(0x0BD4B6A2), UINT32_C(0x00E26C23),
- UINT32_C(0x07F483FF), UINT32_C(0x0A97D9DC), UINT32_C(0x02338A61),
- UINT32_C(0x07F72547), UINT32_C(0x03535AFC), UINT32_C(0x0B8E96B4),
- UINT32_C(0x001E804D), UINT32_C(0x03BD1DFE), UINT32_C(0x0A6ED29A),
- UINT32_C(0x0634588A), UINT32_C(0x0F0F6D32), UINT32_C(0x0117DDE8),
- UINT32_C(0x037107C5) },
- { UINT32_C(0x0BF698BD), UINT32_C(0x0671195E), UINT32_C(0x0E9DC570),
- UINT32_C(0x052CBC52), UINT32_C(0x0C08C8ED), UINT32_C(0x04213081),
- UINT32_C(0x00A08E33), UINT32_C(0x0A4BC1ED), UINT32_C(0x00B396EB),
- UINT32_C(0x0FF34D08), UINT32_C(0x04A4BDD9), UINT32_C(0x0A6F615E),
- UINT32_C(0x0534B5A0), UINT32_C(0x0057D6A7), UINT32_C(0x0F6CE02C),
- UINT32_C(0x06F6315B), UINT32_C(0x0D666709), UINT32_C(0x050AF998),
- UINT32_C(0x006F0E3F) } },
- { { UINT32_C(0x06965640), UINT32_C(0x0081356B), UINT32_C(0x0F41E038),
- UINT32_C(0x06713218), UINT32_C(0x0FB9E806), UINT32_C(0x0121D001),
- UINT32_C(0x07B97EDD), UINT32_C(0x0CDDEFA2), UINT32_C(0x0585D94D),
- UINT32_C(0x065F4CD7), UINT32_C(0x03CFC91B), UINT32_C(0x06B603EF),
- UINT32_C(0x07128C67), UINT32_C(0x030595F0), UINT32_C(0x0E51FB71),
- UINT32_C(0x06217FBE), UINT32_C(0x0B730732), UINT32_C(0x06277C1D),
- UINT32_C(0x04AE17C6) },
- { UINT32_C(0x0CFB1D0D), UINT32_C(0x053AA14E), UINT32_C(0x0442F9BE),
- UINT32_C(0x0786EEC1), UINT32_C(0x0EF775DF), UINT32_C(0x07A66D5B),
- UINT32_C(0x032CDF98), UINT32_C(0x0CA3E106), UINT32_C(0x07042EBA),
- UINT32_C(0x00FD51A1), UINT32_C(0x02B743F2), UINT32_C(0x0D214308),
- UINT32_C(0x03293BD7), UINT32_C(0x0635DC49), UINT32_C(0x0EB86870),
- UINT32_C(0x03EB73BF), UINT32_C(0x07F02587), UINT32_C(0x0017A824),
- UINT32_C(0x01F012DD) } },
- { { UINT32_C(0x0E0BF039), UINT32_C(0x003B2CD3), UINT32_C(0x0C2C0F48),
- UINT32_C(0x039AED35), UINT32_C(0x044C7CCC), UINT32_C(0x0364D078),
- UINT32_C(0x02C04409), UINT32_C(0x0CAEF9C4), UINT32_C(0x05C37F4A),
- UINT32_C(0x0D99EE77), UINT32_C(0x0200140A), UINT32_C(0x0A3BBBDE),
- UINT32_C(0x041E7C9A), UINT32_C(0x0371B744), UINT32_C(0x05A165FF),
- UINT32_C(0x05A7216A), UINT32_C(0x0A9CE444), UINT32_C(0x03DD4951),
- UINT32_C(0x031EC3D2) },
- { UINT32_C(0x08EAF6EB), UINT32_C(0x0703CD67), UINT32_C(0x0DEBC6FB),
- UINT32_C(0x079F8F47), UINT32_C(0x090D3A5B), UINT32_C(0x05FF4EFE),
- UINT32_C(0x05A2BC42), UINT32_C(0x006C3961), UINT32_C(0x00795219),
- UINT32_C(0x0FF8315E), UINT32_C(0x05BD4244), UINT32_C(0x02EEA381),
- UINT32_C(0x02022F89), UINT32_C(0x07878373), UINT32_C(0x084B3FA1),
- UINT32_C(0x0715713B), UINT32_C(0x0EF55815), UINT32_C(0x0748BA61),
- UINT32_C(0x0445AEE6) } },
- { { UINT32_C(0x0DCBF5E2), UINT32_C(0x03557A9E), UINT32_C(0x063D2A67),
- UINT32_C(0x00EFE9F6), UINT32_C(0x09FA350B), UINT32_C(0x03896396),
- UINT32_C(0x01F8036E), UINT32_C(0x0DC0F10D), UINT32_C(0x02B56329),
- UINT32_C(0x02504A0F), UINT32_C(0x063A7100), UINT32_C(0x0FA5A9E7),
- UINT32_C(0x07665FD9), UINT32_C(0x05DE4FB8), UINT32_C(0x00484D0C),
- UINT32_C(0x03AEE4FB), UINT32_C(0x046B10E6), UINT32_C(0x04D5E0D6),
- UINT32_C(0x01F835F4) },
- { UINT32_C(0x047D2B4B), UINT32_C(0x05847634), UINT32_C(0x0C0A675C),
- UINT32_C(0x00120157), UINT32_C(0x07AF8F0E), UINT32_C(0x0251A99B),
- UINT32_C(0x00CEE4D0), UINT32_C(0x07351889), UINT32_C(0x0621596F),
- UINT32_C(0x00C5618B), UINT32_C(0x066E65D2), UINT32_C(0x049D9FBE),
- UINT32_C(0x01E37BCF), UINT32_C(0x01C629C9), UINT32_C(0x0EC1F561),
- UINT32_C(0x02AFE546), UINT32_C(0x0005751E), UINT32_C(0x018C42B2),
- UINT32_C(0x01EAA03C) } },
- { { UINT32_C(0x0D959BD9), UINT32_C(0x038EEBBB), UINT32_C(0x08419A01),
- UINT32_C(0x05F1CCBE), UINT32_C(0x03171501), UINT32_C(0x07C18C55),
- UINT32_C(0x035306D9), UINT32_C(0x011DBDEA), UINT32_C(0x036E5963),
- UINT32_C(0x090BCEBA), UINT32_C(0x01350854), UINT32_C(0x0BB28AF5),
- UINT32_C(0x04F74928), UINT32_C(0x0330FF01), UINT32_C(0x095BA009),
- UINT32_C(0x0578BFB6), UINT32_C(0x0FCF0801), UINT32_C(0x03302535),
- UINT32_C(0x06BFF304) },
- { UINT32_C(0x0384E611), UINT32_C(0x00AD5348), UINT32_C(0x0E493BE6),
- UINT32_C(0x03CA4CDB), UINT32_C(0x0C4D1BD5), UINT32_C(0x027B8CE4),
- UINT32_C(0x02E5B4CB), UINT32_C(0x0707AF6D), UINT32_C(0x06A39971),
- UINT32_C(0x0BA42E4C), UINT32_C(0x0755E74C), UINT32_C(0x04AD6360),
- UINT32_C(0x068A6F0D), UINT32_C(0x023144DE), UINT32_C(0x07375993),
- UINT32_C(0x02780B3A), UINT32_C(0x0E492027), UINT32_C(0x05808694),
- UINT32_C(0x07431A53) } },
- { { UINT32_C(0x010FBD04), UINT32_C(0x019723AA), UINT32_C(0x025CF109),
- UINT32_C(0x03F3A3A7), UINT32_C(0x0D9D8E3F), UINT32_C(0x02F7C4B0),
- UINT32_C(0x03DF7DF6), UINT32_C(0x0B60F06D), UINT32_C(0x02A5D26D),
- UINT32_C(0x0C5F86A4), UINT32_C(0x06E7FCD9), UINT32_C(0x0DEF388F),
- UINT32_C(0x05AC83A6), UINT32_C(0x0217A751), UINT32_C(0x00401D85),
- UINT32_C(0x075A320E), UINT32_C(0x01AE8195), UINT32_C(0x06F4F327),
- UINT32_C(0x04C77D2F) },
- { UINT32_C(0x09493BE8), UINT32_C(0x00A14C7B), UINT32_C(0x091C8FF9),
- UINT32_C(0x01DEAA22), UINT32_C(0x0AB4BA27), UINT32_C(0x0562E012),
- UINT32_C(0x07519BAB), UINT32_C(0x062D9AAA), UINT32_C(0x058B7863),
- UINT32_C(0x08A2419C), UINT32_C(0x035D8277), UINT32_C(0x0F5C3CF3),
- UINT32_C(0x03527C6B), UINT32_C(0x00F3B9E0), UINT32_C(0x0EF25B4A),
- UINT32_C(0x0127A8B4), UINT32_C(0x0CE17BD2), UINT32_C(0x0195E53E),
- UINT32_C(0x071B9B4C) } },
- { { UINT32_C(0x0DAA2FB7), UINT32_C(0x021B0EB2), UINT32_C(0x0B55E936),
- UINT32_C(0x057A20CC), UINT32_C(0x01398941), UINT32_C(0x06E0BA5C),
- UINT32_C(0x07DEDA3A), UINT32_C(0x00B1377E), UINT32_C(0x008093F5),
- UINT32_C(0x00F8C281), UINT32_C(0x05D4332E), UINT32_C(0x0CF54E5F),
- UINT32_C(0x039D7F62), UINT32_C(0x0699AB5B), UINT32_C(0x05FE8914),
- UINT32_C(0x01C38070), UINT32_C(0x0685A0AC), UINT32_C(0x0104BEEE),
- UINT32_C(0x06E340C1) },
- { UINT32_C(0x0FDAA949), UINT32_C(0x02A92433), UINT32_C(0x04E882FB),
- UINT32_C(0x0435EA3D), UINT32_C(0x0CFC4BD1), UINT32_C(0x065698D5),
- UINT32_C(0x02B61BEC), UINT32_C(0x0A7025E9), UINT32_C(0x06C77C84),
- UINT32_C(0x066340BA), UINT32_C(0x07C0B02F), UINT32_C(0x0F9B4BCA),
- UINT32_C(0x0207D1CA), UINT32_C(0x061D80D9), UINT32_C(0x061524CC),
- UINT32_C(0x03F6A9F8), UINT32_C(0x094B6D53), UINT32_C(0x017C53E1),
- UINT32_C(0x00BC771D) } },
- { { UINT32_C(0x0C8D6167), UINT32_C(0x0171F9BD), UINT32_C(0x05943DEC),
- UINT32_C(0x01837B9B), UINT32_C(0x06E46FBD), UINT32_C(0x050C893D),
- UINT32_C(0x0034F50C), UINT32_C(0x0E98EEDA), UINT32_C(0x06603ADA),
- UINT32_C(0x0FF3362D), UINT32_C(0x023406A4), UINT32_C(0x03DC7095),
- UINT32_C(0x03BCCC93), UINT32_C(0x033BDFE7), UINT32_C(0x0AA65D81),
- UINT32_C(0x0739E2AF), UINT32_C(0x03455112), UINT32_C(0x06643DC0),
- UINT32_C(0x020DF18F) },
- { UINT32_C(0x084BF04E), UINT32_C(0x024B7756), UINT32_C(0x059E51F9),
- UINT32_C(0x05998215), UINT32_C(0x03684ACA), UINT32_C(0x065BD6DC),
- UINT32_C(0x03075ACB), UINT32_C(0x01AD9C9A), UINT32_C(0x07375334),
- UINT32_C(0x01731A12), UINT32_C(0x000384D3), UINT32_C(0x02632FF6),
- UINT32_C(0x0023BB3A), UINT32_C(0x0348AF93), UINT32_C(0x088B02BB),
- UINT32_C(0x02C7DE6E), UINT32_C(0x0933F326), UINT32_C(0x00B1B61E),
- UINT32_C(0x076AC60E) } },
- { { UINT32_C(0x0757C756), UINT32_C(0x05545A21), UINT32_C(0x018FFA93),
- UINT32_C(0x06C9A78F), UINT32_C(0x02C61841), UINT32_C(0x040A1739),
- UINT32_C(0x04441B1D), UINT32_C(0x052E0E81), UINT32_C(0x07E14C4D),
- UINT32_C(0x0FFFC0D5), UINT32_C(0x03072E2E), UINT32_C(0x007584A9),
- UINT32_C(0x01259E6D), UINT32_C(0x002D25F5), UINT32_C(0x0C519B94),
- UINT32_C(0x01BB1C14), UINT32_C(0x02CEB824), UINT32_C(0x02BBBEA4),
- UINT32_C(0x035E112A) },
- { UINT32_C(0x0288CF7B), UINT32_C(0x0045C5C7), UINT32_C(0x002D8D8C),
- UINT32_C(0x03BE5B42), UINT32_C(0x0A81E4C6), UINT32_C(0x0141578F),
- UINT32_C(0x033F7AC2), UINT32_C(0x0EE71541), UINT32_C(0x067EAD7B),
- UINT32_C(0x07E75F23), UINT32_C(0x011AF108), UINT32_C(0x047CA170),
- UINT32_C(0x05308227), UINT32_C(0x054879D4), UINT32_C(0x0A37B132),
- UINT32_C(0x00E6D1CA), UINT32_C(0x0629367A), UINT32_C(0x03276C5F),
- UINT32_C(0x004CBC63) } },
- { { UINT32_C(0x00CF69E7), UINT32_C(0x0584FC9D), UINT32_C(0x06952F73),
- UINT32_C(0x0281D51C), UINT32_C(0x037663C6), UINT32_C(0x0537F046),
- UINT32_C(0x0725FFD4), UINT32_C(0x0C66B9FC), UINT32_C(0x049A3EDF),
- UINT32_C(0x0F4FB830), UINT32_C(0x06728E50), UINT32_C(0x07B188F6),
- UINT32_C(0x021C067A), UINT32_C(0x06F06BE8), UINT32_C(0x00AA347B),
- UINT32_C(0x031AABF8), UINT32_C(0x03347446), UINT32_C(0x04B62373),
- UINT32_C(0x043D128D) },
- { UINT32_C(0x02AE7427), UINT32_C(0x00F73AC9), UINT32_C(0x0095D833),
- UINT32_C(0x00E6005C), UINT32_C(0x007FD8B7), UINT32_C(0x074C2204),
- UINT32_C(0x00283649), UINT32_C(0x084EDD51), UINT32_C(0x05AC7321),
- UINT32_C(0x08C40328), UINT32_C(0x04BFB5EF), UINT32_C(0x0A555FE0),
- UINT32_C(0x04C70C7C), UINT32_C(0x076D0055), UINT32_C(0x0425B2E6),
- UINT32_C(0x029D910F), UINT32_C(0x0B0A51DB), UINT32_C(0x04B38F9B),
- UINT32_C(0x01028D80) } },
- { { UINT32_C(0x0F3DE4D2), UINT32_C(0x06047E27), UINT32_C(0x03505298),
- UINT32_C(0x062523ED), UINT32_C(0x0F0D4A9F), UINT32_C(0x0150EF42),
- UINT32_C(0x056CBCAD), UINT32_C(0x0B36A628), UINT32_C(0x071A352A),
- UINT32_C(0x0D7A2CB8), UINT32_C(0x050FEDFC), UINT32_C(0x02BAC823),
- UINT32_C(0x010EDF77), UINT32_C(0x0459668A), UINT32_C(0x04041659),
- UINT32_C(0x07432BB7), UINT32_C(0x0F9651D8), UINT32_C(0x01999DE2),
- UINT32_C(0x00CBECA1) },
- { UINT32_C(0x06A2607F), UINT32_C(0x06DC83E9), UINT32_C(0x005B1A08),
- UINT32_C(0x05B9405C), UINT32_C(0x091E04D3), UINT32_C(0x0546E232),
- UINT32_C(0x0566FE22), UINT32_C(0x0695BB9A), UINT32_C(0x0074A612),
- UINT32_C(0x0E9787A0), UINT32_C(0x077B1860), UINT32_C(0x05404661),
- UINT32_C(0x00184991), UINT32_C(0x02A1C038), UINT32_C(0x0A57F0B8),
- UINT32_C(0x0382A987), UINT32_C(0x0691AC01), UINT32_C(0x02D8A8A9),
- UINT32_C(0x05A19B11) } },
- { { UINT32_C(0x081DC2A6), UINT32_C(0x017A4663), UINT32_C(0x0209D21F),
- UINT32_C(0x06A6AA7F), UINT32_C(0x051CC44C), UINT32_C(0x000D763F),
- UINT32_C(0x034EFD90), UINT32_C(0x0DEE4042), UINT32_C(0x07CBAFFB),
- UINT32_C(0x082C34D9), UINT32_C(0x02EB3FE5), UINT32_C(0x0BF15295),
- UINT32_C(0x027D4089), UINT32_C(0x056DBCC8), UINT32_C(0x024595A7),
- UINT32_C(0x03EC08BE), UINT32_C(0x057085E2), UINT32_C(0x017E7356),
- UINT32_C(0x049CE745) },
- { UINT32_C(0x0123BA29), UINT32_C(0x0045804E), UINT32_C(0x08DEDF0E),
- UINT32_C(0x00CB57D1), UINT32_C(0x0F61E577), UINT32_C(0x06EB6B79),
- UINT32_C(0x05E3EED1), UINT32_C(0x09CB4DCD), UINT32_C(0x05DAE17F),
- UINT32_C(0x034F393E), UINT32_C(0x03F5164C), UINT32_C(0x05F3C4A2),
- UINT32_C(0x0708CC05), UINT32_C(0x04F2CAC7), UINT32_C(0x0798DD7C),
- UINT32_C(0x0513331D), UINT32_C(0x004B3A41), UINT32_C(0x00801443),
- UINT32_C(0x0196B762) } },
- { { UINT32_C(0x0356B52C), UINT32_C(0x03557744), UINT32_C(0x050104FE),
- UINT32_C(0x069B4687), UINT32_C(0x0337937D), UINT32_C(0x018C3F4F),
- UINT32_C(0x00568175), UINT32_C(0x01EE408E), UINT32_C(0x04092DE8),
- UINT32_C(0x05E59E83), UINT32_C(0x0299816F), UINT32_C(0x05556DCC),
- UINT32_C(0x038621D8), UINT32_C(0x0278A753), UINT32_C(0x05BC9211),
- UINT32_C(0x009E162C), UINT32_C(0x0A3409DC), UINT32_C(0x04076EA9),
- UINT32_C(0x0464CEC0) },
- { UINT32_C(0x0A659158), UINT32_C(0x022396D5), UINT32_C(0x08424377),
- UINT32_C(0x0054703B), UINT32_C(0x0D2722F5), UINT32_C(0x03BAEB8A),
- UINT32_C(0x04B65383), UINT32_C(0x07997DDA), UINT32_C(0x07F6A3B2),
- UINT32_C(0x0BAFF348), UINT32_C(0x0299F9D9), UINT32_C(0x0B97AA04),
- UINT32_C(0x02BA4DB8), UINT32_C(0x0696475F), UINT32_C(0x0B68D089),
- UINT32_C(0x0472CB9F), UINT32_C(0x08CACFAE), UINT32_C(0x028807A6),
- UINT32_C(0x009288EF) } },
- { { UINT32_C(0x0ED9CDF5), UINT32_C(0x00B31C4E), UINT32_C(0x0C549857),
- UINT32_C(0x02D7F964), UINT32_C(0x074F9F98), UINT32_C(0x0792DF5F),
- UINT32_C(0x020ED722), UINT32_C(0x0AA8C982), UINT32_C(0x02A2408C),
- UINT32_C(0x053CDF30), UINT32_C(0x01CF47E5), UINT32_C(0x08E3FF2F),
- UINT32_C(0x0333087A), UINT32_C(0x028090D6), UINT32_C(0x032F6CA0),
- UINT32_C(0x02CF642E), UINT32_C(0x0DAB4498), UINT32_C(0x04A66B66),
- UINT32_C(0x07248BCE) },
- { UINT32_C(0x092B1FE6), UINT32_C(0x02AD6EEE), UINT32_C(0x0EB5963E),
- UINT32_C(0x0621B6BD), UINT32_C(0x04A1A8EF), UINT32_C(0x0374D40D),
- UINT32_C(0x0573791F), UINT32_C(0x0DED8513), UINT32_C(0x03AEE0F5),
- UINT32_C(0x03420B85), UINT32_C(0x04366099), UINT32_C(0x087C7CA7),
- UINT32_C(0x00B9ADB9), UINT32_C(0x056E8EBA), UINT32_C(0x0E532676),
- UINT32_C(0x05D27A22), UINT32_C(0x0554F4E5), UINT32_C(0x0474B581),
- UINT32_C(0x02A6694F) } },
- { { UINT32_C(0x080DE633), UINT32_C(0x0639306E), UINT32_C(0x0CA4F76E),
- UINT32_C(0x05BB3DCB), UINT32_C(0x06DA081A), UINT32_C(0x052EA9E2),
- UINT32_C(0x017AF437), UINT32_C(0x07D25D54), UINT32_C(0x0772DE75),
- UINT32_C(0x05670178), UINT32_C(0x06E81696), UINT32_C(0x0D28F3A1),
- UINT32_C(0x07AF022A), UINT32_C(0x07B0D67B), UINT32_C(0x04C17950),
- UINT32_C(0x001B706E), UINT32_C(0x04CE5637), UINT32_C(0x04CE1F2F),
- UINT32_C(0x0211C385) },
- { UINT32_C(0x0E5D0D74), UINT32_C(0x0411D39E), UINT32_C(0x06137F67),
- UINT32_C(0x00487846), UINT32_C(0x01B15D1C), UINT32_C(0x02B65C31),
- UINT32_C(0x06027C03), UINT32_C(0x01F15577), UINT32_C(0x011F0564),
- UINT32_C(0x066BA415), UINT32_C(0x00520E15), UINT32_C(0x01F82222),
- UINT32_C(0x07F8C048), UINT32_C(0x05A09F41), UINT32_C(0x0BBA92E8),
- UINT32_C(0x017E3648), UINT32_C(0x0861CC16), UINT32_C(0x07A9DAF6),
- UINT32_C(0x05F2C6E5) } },
- { { UINT32_C(0x04DA7708), UINT32_C(0x057D4066), UINT32_C(0x01F6A8A0),
- UINT32_C(0x00EE18FE), UINT32_C(0x05BB3FCD), UINT32_C(0x071CB79F),
- UINT32_C(0x038BBCE0), UINT32_C(0x0AAFE87E), UINT32_C(0x0245536B),
- UINT32_C(0x0D0401C6), UINT32_C(0x027984FD), UINT32_C(0x0064D51F),
- UINT32_C(0x04DCF2A2), UINT32_C(0x037E99AD), UINT32_C(0x03487C33),
- UINT32_C(0x068353F1), UINT32_C(0x0BA863FC), UINT32_C(0x00721339),
- UINT32_C(0x0754D195) },
- { UINT32_C(0x09031706), UINT32_C(0x0327DD4E), UINT32_C(0x05DDA163),
- UINT32_C(0x03F893AE), UINT32_C(0x0F1F3959), UINT32_C(0x02EC658A),
- UINT32_C(0x05A438AD), UINT32_C(0x0AE93F30), UINT32_C(0x01D8B56B),
- UINT32_C(0x09592309), UINT32_C(0x0189BB66), UINT32_C(0x050E8D52),
- UINT32_C(0x0526168D), UINT32_C(0x07FD307D), UINT32_C(0x08A4C7BC),
- UINT32_C(0x03B12944), UINT32_C(0x08329BC8), UINT32_C(0x02A4A1CE),
- UINT32_C(0x0087B284) } },
- },
- {
- { { UINT32_C(0x01C86157), UINT32_C(0x0017ED5F), UINT32_C(0x079948D2),
- UINT32_C(0x02FD6755), UINT32_C(0x0A5E2B5C), UINT32_C(0x00395EB0),
- UINT32_C(0x070A6ECC), UINT32_C(0x031E307B), UINT32_C(0x070DA4B9),
- UINT32_C(0x0166FB85), UINT32_C(0x02AF3210), UINT32_C(0x079379FF),
- UINT32_C(0x010504D3), UINT32_C(0x022DFB7B), UINT32_C(0x0C019CF3),
- UINT32_C(0x05E0727A), UINT32_C(0x0CE73CB9), UINT32_C(0x005CF0C7),
- UINT32_C(0x039AD397) },
- { UINT32_C(0x08E15F36), UINT32_C(0x04E08562), UINT32_C(0x0EC12012),
- UINT32_C(0x009F68C4), UINT32_C(0x0733E4B1), UINT32_C(0x014872C8),
- UINT32_C(0x0490CCCC), UINT32_C(0x0E53957D), UINT32_C(0x05CD4F2D),
- UINT32_C(0x082FD79D), UINT32_C(0x05F2B6D8), UINT32_C(0x0C7600B1),
- UINT32_C(0x02D81D79), UINT32_C(0x007520D1), UINT32_C(0x09EEC681),
- UINT32_C(0x04D6FB1B), UINT32_C(0x0641B032), UINT32_C(0x0283E5C0),
- UINT32_C(0x072A39F3) } },
- { { UINT32_C(0x01C9C2EC), UINT32_C(0x03A87BAF), UINT32_C(0x056E06F3),
- UINT32_C(0x02AA4CD5), UINT32_C(0x0D64394D), UINT32_C(0x044B2642),
- UINT32_C(0x018E8ECB), UINT32_C(0x02C6B29E), UINT32_C(0x00B5D0E1),
- UINT32_C(0x0795603C), UINT32_C(0x027FEAC7), UINT32_C(0x07400535),
- UINT32_C(0x04BD90C2), UINT32_C(0x0212CC37), UINT32_C(0x018B9D6C),
- UINT32_C(0x05FC9D53), UINT32_C(0x03C7248E), UINT32_C(0x038A1FEB),
- UINT32_C(0x06C809CE) },
- { UINT32_C(0x06F1CACC), UINT32_C(0x0758DFC1), UINT32_C(0x019C0D17),
- UINT32_C(0x0749CD61), UINT32_C(0x00C0724E), UINT32_C(0x0667F861),
- UINT32_C(0x03CDAF01), UINT32_C(0x0DE66325), UINT32_C(0x0767BD47),
- UINT32_C(0x0A1FDF93), UINT32_C(0x04E66E27), UINT32_C(0x004977BC),
- UINT32_C(0x05EE6515), UINT32_C(0x018DEC59), UINT32_C(0x03B99628),
- UINT32_C(0x02B69F3F), UINT32_C(0x019CC516), UINT32_C(0x07CB4623),
- UINT32_C(0x0353C229) } },
- { { UINT32_C(0x05A2D6F0), UINT32_C(0x04982642), UINT32_C(0x088CE54F),
- UINT32_C(0x06602A66), UINT32_C(0x0A17C84E), UINT32_C(0x02BE4DCE),
- UINT32_C(0x0718C264), UINT32_C(0x0FDCB2D1), UINT32_C(0x01F7AC59),
- UINT32_C(0x0E4C2C6C), UINT32_C(0x01B5B9D3), UINT32_C(0x0CCEB9E5),
- UINT32_C(0x04C7FB08), UINT32_C(0x04600748), UINT32_C(0x09F19FD9),
- UINT32_C(0x011C0141), UINT32_C(0x0A08392D), UINT32_C(0x07099321),
- UINT32_C(0x075F26A3) },
- { UINT32_C(0x0AF35FA1), UINT32_C(0x01CA261B), UINT32_C(0x0FF7838D),
- UINT32_C(0x00432E0D), UINT32_C(0x08296922), UINT32_C(0x077D0499),
- UINT32_C(0x06A4988A), UINT32_C(0x0D91BD7B), UINT32_C(0x007D4895),
- UINT32_C(0x01A77EB2), UINT32_C(0x0491B2C9), UINT32_C(0x07D6BB4E),
- UINT32_C(0x065BB828), UINT32_C(0x05D28C77), UINT32_C(0x034C1831),
- UINT32_C(0x03111000), UINT32_C(0x048A3F8F), UINT32_C(0x007D19EE),
- UINT32_C(0x006FAC9D) } },
- { { UINT32_C(0x0719C87C), UINT32_C(0x07385BC9), UINT32_C(0x01F42502),
- UINT32_C(0x074D4561), UINT32_C(0x02CA79B8), UINT32_C(0x01BE905A),
- UINT32_C(0x044E03DC), UINT32_C(0x05034A1A), UINT32_C(0x012B4964),
- UINT32_C(0x0BF284CE), UINT32_C(0x0080C91A), UINT32_C(0x0B4EE205),
- UINT32_C(0x0121E876), UINT32_C(0x04C7D981), UINT32_C(0x09D6F0D5),
- UINT32_C(0x011438CC), UINT32_C(0x0906A777), UINT32_C(0x05FD89D1),
- UINT32_C(0x01D7C3AC) },
- { UINT32_C(0x0392D834), UINT32_C(0x0199066B), UINT32_C(0x0E53AECD),
- UINT32_C(0x0279A7E5), UINT32_C(0x0E8B313A), UINT32_C(0x04F8A2AF),
- UINT32_C(0x062A274F), UINT32_C(0x0869ED62), UINT32_C(0x01C4081F),
- UINT32_C(0x0DD27618), UINT32_C(0x0093ED89), UINT32_C(0x053869B6),
- UINT32_C(0x07CB8D0C), UINT32_C(0x00D79FE6), UINT32_C(0x04A20332),
- UINT32_C(0x03366324), UINT32_C(0x0C0B74C3), UINT32_C(0x070C316E),
- UINT32_C(0x066AD76F) } },
- { { UINT32_C(0x011FA55B), UINT32_C(0x0775F5E8), UINT32_C(0x0C7BF6F4),
- UINT32_C(0x07FCBE6F), UINT32_C(0x021BE3C2), UINT32_C(0x0017D919),
- UINT32_C(0x01644455), UINT32_C(0x0AEE3FD7), UINT32_C(0x0259DD5E),
- UINT32_C(0x002EC22F), UINT32_C(0x00D308F5), UINT32_C(0x038F6CBC),
- UINT32_C(0x04FDED85), UINT32_C(0x001A53FA), UINT32_C(0x03E09FE9),
- UINT32_C(0x0312E74F), UINT32_C(0x09B20907), UINT32_C(0x078CC1DB),
- UINT32_C(0x066D9E8D) },
- { UINT32_C(0x08C7A5B7), UINT32_C(0x038B0D82), UINT32_C(0x063E4030),
- UINT32_C(0x06CE3A75), UINT32_C(0x0488AD55), UINT32_C(0x0054AAAA),
- UINT32_C(0x044F068C), UINT32_C(0x0CCE69AA), UINT32_C(0x014EF6E0),
- UINT32_C(0x068C0346), UINT32_C(0x01443327), UINT32_C(0x0A416B3D),
- UINT32_C(0x04EB25A7), UINT32_C(0x00B6E80F), UINT32_C(0x0819D7FD),
- UINT32_C(0x061AFFF1), UINT32_C(0x070E8C81), UINT32_C(0x061C5530),
- UINT32_C(0x0473CB02) } },
- { { UINT32_C(0x08D8BE36), UINT32_C(0x057DE7D1), UINT32_C(0x06025FA9),
- UINT32_C(0x0039A5D5), UINT32_C(0x00FD02EF), UINT32_C(0x02EE7913),
- UINT32_C(0x04E5E224), UINT32_C(0x052DC251), UINT32_C(0x04138D66),
- UINT32_C(0x09FAF17A), UINT32_C(0x030D57A1), UINT32_C(0x08B8F06A),
- UINT32_C(0x01D015A2), UINT32_C(0x0153FCA9), UINT32_C(0x0C54D5DF),
- UINT32_C(0x00BAAE4A), UINT32_C(0x0940A0FA), UINT32_C(0x038292EA),
- UINT32_C(0x02C97BC9) },
- { UINT32_C(0x024BFA00), UINT32_C(0x057378C3), UINT32_C(0x0A92C578),
- UINT32_C(0x07A6310B), UINT32_C(0x0F28F901), UINT32_C(0x04ED3F57),
- UINT32_C(0x037C7D8A), UINT32_C(0x00B71701), UINT32_C(0x0173A01A),
- UINT32_C(0x0A9B43A3), UINT32_C(0x0196E612), UINT32_C(0x07111189),
- UINT32_C(0x03F5BC1D), UINT32_C(0x05154B49), UINT32_C(0x0DD68D97),
- UINT32_C(0x0220CC1D), UINT32_C(0x0895DF59), UINT32_C(0x0014717C),
- UINT32_C(0x0384CEF8) } },
- { { UINT32_C(0x05F8022D), UINT32_C(0x07431A94), UINT32_C(0x0A7A9097),
- UINT32_C(0x06FC555D), UINT32_C(0x0578029C), UINT32_C(0x00758DC8),
- UINT32_C(0x00FDAF66), UINT32_C(0x0AE902D1), UINT32_C(0x06FDDF4D),
- UINT32_C(0x056FCD2A), UINT32_C(0x0393CA27), UINT32_C(0x083EDDB9),
- UINT32_C(0x071C8D5E), UINT32_C(0x02DA7EE1), UINT32_C(0x091B7578),
- UINT32_C(0x022CF2B8), UINT32_C(0x08F559AF), UINT32_C(0x00F551D9),
- UINT32_C(0x04CE7872) },
- { UINT32_C(0x0450FD39), UINT32_C(0x05325A33), UINT32_C(0x06D04EAD),
- UINT32_C(0x0111017F), UINT32_C(0x04B7D043), UINT32_C(0x009CD030),
- UINT32_C(0x02760D24), UINT32_C(0x0B333C83), UINT32_C(0x0178F799),
- UINT32_C(0x06E56E99), UINT32_C(0x06AC4002), UINT32_C(0x06C6F55C),
- UINT32_C(0x04212C69), UINT32_C(0x0776C549), UINT32_C(0x05AD10F2),
- UINT32_C(0x07D4C443), UINT32_C(0x093443A3), UINT32_C(0x01E4DAC4),
- UINT32_C(0x062304F4) } },
- { { UINT32_C(0x09FFF942), UINT32_C(0x039E7FBF), UINT32_C(0x0E4E0544),
- UINT32_C(0x01C8EF03), UINT32_C(0x015953E4), UINT32_C(0x0641511A),
- UINT32_C(0x0340D7DD), UINT32_C(0x04FBA207), UINT32_C(0x04DCD411),
- UINT32_C(0x0CE5C435), UINT32_C(0x06C85A54), UINT32_C(0x0596F209),
- UINT32_C(0x006C47CF), UINT32_C(0x039823F7), UINT32_C(0x01721D4C),
- UINT32_C(0x03FE86B7), UINT32_C(0x044008FA), UINT32_C(0x05E107EC),
- UINT32_C(0x0146DF75) },
- { UINT32_C(0x03BF30CF), UINT32_C(0x034E0D17), UINT32_C(0x0C6EB8E1),
- UINT32_C(0x016786DE), UINT32_C(0x0B4F8D94), UINT32_C(0x01E54C18),
- UINT32_C(0x0409537F), UINT32_C(0x0AD69F59), UINT32_C(0x04423A96),
- UINT32_C(0x01427559), UINT32_C(0x0517F981), UINT32_C(0x0C655FF1),
- UINT32_C(0x072A4662), UINT32_C(0x014DB58F), UINT32_C(0x09979D6E),
- UINT32_C(0x05396DDB), UINT32_C(0x03E46CF7), UINT32_C(0x062B9D62),
- UINT32_C(0x0334D070) } },
- { { UINT32_C(0x0C8B2AF6), UINT32_C(0x04C4030A), UINT32_C(0x03F4EA61),
- UINT32_C(0x06B51CFD), UINT32_C(0x08530E96), UINT32_C(0x035106EB),
- UINT32_C(0x07ACB7C9), UINT32_C(0x003FAA6D), UINT32_C(0x005AFE21),
- UINT32_C(0x09C9266C), UINT32_C(0x02684731), UINT32_C(0x0745AC29),
- UINT32_C(0x06162CD8), UINT32_C(0x069A0B95), UINT32_C(0x090B8391),
- UINT32_C(0x0570D83A), UINT32_C(0x09AE0D06), UINT32_C(0x054A95B8),
- UINT32_C(0x02CB380B) },
- { UINT32_C(0x02779E4D), UINT32_C(0x04B32E43), UINT32_C(0x0C0582B0),
- UINT32_C(0x03521F35), UINT32_C(0x089A8F39), UINT32_C(0x03BF1933),
- UINT32_C(0x027659AD), UINT32_C(0x0607CE4F), UINT32_C(0x072A97A4),
- UINT32_C(0x0F6C2DAD), UINT32_C(0x0648C496), UINT32_C(0x02D0AF23),
- UINT32_C(0x036927AF), UINT32_C(0x032E9075), UINT32_C(0x01C0AD79),
- UINT32_C(0x02044936), UINT32_C(0x0DBCFEA2), UINT32_C(0x07DADFF1),
- UINT32_C(0x06EDBCF7) } },
- { { UINT32_C(0x0209B80C), UINT32_C(0x01E54056), UINT32_C(0x0E397930),
- UINT32_C(0x01AD9D0C), UINT32_C(0x0908F895), UINT32_C(0x02A9A26E),
- UINT32_C(0x00744EB0), UINT32_C(0x0B2D7673), UINT32_C(0x00736623),
- UINT32_C(0x0F9EEB98), UINT32_C(0x07E8C693), UINT32_C(0x05615D70),
- UINT32_C(0x077E9858), UINT32_C(0x045C88B2), UINT32_C(0x06BA3291),
- UINT32_C(0x02089363), UINT32_C(0x0D1148CA), UINT32_C(0x026B1CE4),
- UINT32_C(0x0267E39A) },
- { UINT32_C(0x0E9F76E1), UINT32_C(0x0700247A), UINT32_C(0x02F5C013),
- UINT32_C(0x045D6B0B), UINT32_C(0x02398752), UINT32_C(0x011414B8),
- UINT32_C(0x0189B0D8), UINT32_C(0x065621BE), UINT32_C(0x07214CB5),
- UINT32_C(0x0C72745E), UINT32_C(0x026E830D), UINT32_C(0x0BB5064F),
- UINT32_C(0x03BD6991), UINT32_C(0x067AABA6), UINT32_C(0x03AAD9C4),
- UINT32_C(0x01C748B3), UINT32_C(0x0F2AD6A8), UINT32_C(0x07B1AAD0),
- UINT32_C(0x0515A45B) } },
- { { UINT32_C(0x0D45283F), UINT32_C(0x033F0C2B), UINT32_C(0x0EF7ECBA),
- UINT32_C(0x03F31217), UINT32_C(0x0BF2BDDB), UINT32_C(0x05AE5F1D),
- UINT32_C(0x015A33AE), UINT32_C(0x0B1D94AB), UINT32_C(0x00BB377A),
- UINT32_C(0x077D4679), UINT32_C(0x056AF89C), UINT32_C(0x07165F99),
- UINT32_C(0x046A17A3), UINT32_C(0x04CF6178), UINT32_C(0x00269B9B),
- UINT32_C(0x03F1B9F6), UINT32_C(0x07453C34), UINT32_C(0x07253011),
- UINT32_C(0x074559A2) },
- { UINT32_C(0x08D82B0E), UINT32_C(0x00D12F5F), UINT32_C(0x01FD52F5),
- UINT32_C(0x03C4069B), UINT32_C(0x0B01B2FE), UINT32_C(0x05E81250),
- UINT32_C(0x035DC621), UINT32_C(0x034EA726), UINT32_C(0x04613127),
- UINT32_C(0x0B36D680), UINT32_C(0x06F52BC5), UINT32_C(0x04B16171),
- UINT32_C(0x02156292), UINT32_C(0x0180583E), UINT32_C(0x0C8D5B19),
- UINT32_C(0x043B9BE2), UINT32_C(0x097EF032), UINT32_C(0x0307A273),
- UINT32_C(0x02ECC50D) } },
- { { UINT32_C(0x0613AC50), UINT32_C(0x01BBB9CD), UINT32_C(0x032CF181),
- UINT32_C(0x04565F80), UINT32_C(0x09B00E52), UINT32_C(0x011EC5E2),
- UINT32_C(0x05E7561C), UINT32_C(0x05B6572C), UINT32_C(0x072FBF3A),
- UINT32_C(0x04311E38), UINT32_C(0x0350633E), UINT32_C(0x0C27E7E9),
- UINT32_C(0x02DC82FC), UINT32_C(0x01DE746D), UINT32_C(0x078E3236),
- UINT32_C(0x0712B6B0), UINT32_C(0x000A7E83), UINT32_C(0x0115CB1B),
- UINT32_C(0x04C1103F) },
- { UINT32_C(0x0359ED2E), UINT32_C(0x065ADF64), UINT32_C(0x025E3238),
- UINT32_C(0x076BEAFD), UINT32_C(0x072427F7), UINT32_C(0x05DBCD55),
- UINT32_C(0x07AB37FF), UINT32_C(0x0865BFD5), UINT32_C(0x04382D44),
- UINT32_C(0x0F1D5580), UINT32_C(0x06D00533), UINT32_C(0x08D6A784),
- UINT32_C(0x05BB29BF), UINT32_C(0x005CEC3F), UINT32_C(0x06575E68),
- UINT32_C(0x053585D5), UINT32_C(0x0403BCB0), UINT32_C(0x02F77540),
- UINT32_C(0x02470C7F) } },
- { { UINT32_C(0x02C087ED), UINT32_C(0x07961B4B), UINT32_C(0x0F657FC0),
- UINT32_C(0x00B16431), UINT32_C(0x01885C19), UINT32_C(0x029A3FB7),
- UINT32_C(0x0721535D), UINT32_C(0x02FAD79C), UINT32_C(0x0596E385),
- UINT32_C(0x02412161), UINT32_C(0x0289A97A), UINT32_C(0x01B54107),
- UINT32_C(0x0271E7BB), UINT32_C(0x02E3D256), UINT32_C(0x07E3B820),
- UINT32_C(0x07F5A8EE), UINT32_C(0x0C3BD541), UINT32_C(0x01BBC84D),
- UINT32_C(0x02D55A46) },
- { UINT32_C(0x006E7D53), UINT32_C(0x07982C04), UINT32_C(0x09C948A0),
- UINT32_C(0x00A62A93), UINT32_C(0x047CD945), UINT32_C(0x060F1A2B),
- UINT32_C(0x05764587), UINT32_C(0x02111992), UINT32_C(0x03CD3492),
- UINT32_C(0x0E5873CA), UINT32_C(0x04871D26), UINT32_C(0x0EBDD263),
- UINT32_C(0x07899288), UINT32_C(0x00105962), UINT32_C(0x07975B25),
- UINT32_C(0x00D6A34D), UINT32_C(0x02DF3799), UINT32_C(0x02807307),
- UINT32_C(0x06FCAC54) } },
- { { UINT32_C(0x0302E505), UINT32_C(0x02CAC37A), UINT32_C(0x01A79721),
- UINT32_C(0x03B2E74F), UINT32_C(0x0BE5B627), UINT32_C(0x019F58EA),
- UINT32_C(0x03B18976), UINT32_C(0x0663CE37), UINT32_C(0x04C1003E),
- UINT32_C(0x086DCC91), UINT32_C(0x0566BE13), UINT32_C(0x0A0C94D1),
- UINT32_C(0x04A0F522), UINT32_C(0x01CBC165), UINT32_C(0x03D621C1),
- UINT32_C(0x03F68C3D), UINT32_C(0x04156E0A), UINT32_C(0x04C1C807),
- UINT32_C(0x002BF853) },
- { UINT32_C(0x073938D8), UINT32_C(0x076E66F8), UINT32_C(0x0251205F),
- UINT32_C(0x01B82A4E), UINT32_C(0x0C9EAC88), UINT32_C(0x0736DBEE),
- UINT32_C(0x028732CD), UINT32_C(0x03522855), UINT32_C(0x0343EE5A),
- UINT32_C(0x053E49A4), UINT32_C(0x025D55C0), UINT32_C(0x0D4096DF),
- UINT32_C(0x01108518), UINT32_C(0x02AE724F), UINT32_C(0x07514106),
- UINT32_C(0x0301EB15), UINT32_C(0x0D82C2DE), UINT32_C(0x05E3A585),
- UINT32_C(0x036F14AF) } },
- { { UINT32_C(0x07452267), UINT32_C(0x01E0D6D7), UINT32_C(0x04A4A896),
- UINT32_C(0x06D1C7B5), UINT32_C(0x03C983EF), UINT32_C(0x017B4C4A),
- UINT32_C(0x07C8F2FB), UINT32_C(0x078C2CCC), UINT32_C(0x0676C9A3),
- UINT32_C(0x09CD585C), UINT32_C(0x0529FFB0), UINT32_C(0x020720BD),
- UINT32_C(0x07B793B3), UINT32_C(0x07E65DA3), UINT32_C(0x0C89EDD5),
- UINT32_C(0x04009C8D), UINT32_C(0x0EDC15A4), UINT32_C(0x077C8AC3),
- UINT32_C(0x074868C1) },
- { UINT32_C(0x0DBC2674), UINT32_C(0x07B6C41F), UINT32_C(0x0B10636B),
- UINT32_C(0x0607B000), UINT32_C(0x01B2C3EF), UINT32_C(0x014283CF),
- UINT32_C(0x07BD944A), UINT32_C(0x016DA691), UINT32_C(0x0147454E),
- UINT32_C(0x052DE117), UINT32_C(0x06E5CDC4), UINT32_C(0x0C7BE891),
- UINT32_C(0x03BD94DE), UINT32_C(0x00362FA3), UINT32_C(0x0608B5DA),
- UINT32_C(0x000C28A8), UINT32_C(0x06CFAD2C), UINT32_C(0x0502E5EB),
- UINT32_C(0x0081DDC6) } },
- { { UINT32_C(0x0A2FCC67), UINT32_C(0x050EED2A), UINT32_C(0x0EAC3925),
- UINT32_C(0x03CCFE3E), UINT32_C(0x0DC1F4E8), UINT32_C(0x012FD64C),
- UINT32_C(0x02CFA2B3), UINT32_C(0x07921E80), UINT32_C(0x04F76E6D),
- UINT32_C(0x090CBEA8), UINT32_C(0x00304ECF), UINT32_C(0x0933B9C8),
- UINT32_C(0x01E92879), UINT32_C(0x062A922A), UINT32_C(0x03BEBB40),
- UINT32_C(0x0475B5A4), UINT32_C(0x0AB9D3C2), UINT32_C(0x02845E4B),
- UINT32_C(0x073D2AD6) },
- { UINT32_C(0x026C197B), UINT32_C(0x060C44B9), UINT32_C(0x07D6B2DD),
- UINT32_C(0x06E7D188), UINT32_C(0x03B672A1), UINT32_C(0x0277F32F),
- UINT32_C(0x011D4198), UINT32_C(0x07C178F6), UINT32_C(0x02E95A84),
- UINT32_C(0x005619C7), UINT32_C(0x029B73FC), UINT32_C(0x03CAC5E3),
- UINT32_C(0x068A3B5E), UINT32_C(0x07C2DFA8), UINT32_C(0x00EC9903),
- UINT32_C(0x07AEED34), UINT32_C(0x08C0A0D0), UINT32_C(0x02A2FF79),
- UINT32_C(0x06DBE6B8) } },
- },
- {
- { { UINT32_C(0x0C3D1383), UINT32_C(0x04E126EE), UINT32_C(0x0B631DA3),
- UINT32_C(0x03014900), UINT32_C(0x0D3831FE), UINT32_C(0x01BF06C7),
- UINT32_C(0x032CA284), UINT32_C(0x092E0CA0), UINT32_C(0x01703AE0),
- UINT32_C(0x0DCB8158), UINT32_C(0x06FF316B), UINT32_C(0x0ED60D31),
- UINT32_C(0x05DB467E), UINT32_C(0x01F3917A), UINT32_C(0x06770BD1),
- UINT32_C(0x00A944AF), UINT32_C(0x08E2035D), UINT32_C(0x020A054F),
- UINT32_C(0x035F8744) },
- { UINT32_C(0x0A303000), UINT32_C(0x0029FD2C), UINT32_C(0x0A5D9AC4),
- UINT32_C(0x06593596), UINT32_C(0x0288D9B1), UINT32_C(0x02B32376),
- UINT32_C(0x067C4E0D), UINT32_C(0x0D1B984D), UINT32_C(0x04235BF5),
- UINT32_C(0x001AA52B), UINT32_C(0x0221BA35), UINT32_C(0x0B74D0D3),
- UINT32_C(0x03DDFA56), UINT32_C(0x004A6854), UINT32_C(0x01203660),
- UINT32_C(0x0090027D), UINT32_C(0x02356607), UINT32_C(0x064E652F),
- UINT32_C(0x01D4CBEB) } },
- { { UINT32_C(0x05CFE5E0), UINT32_C(0x04C8937C), UINT32_C(0x084C1BC9),
- UINT32_C(0x0651FCA6), UINT32_C(0x0BDAC076), UINT32_C(0x079DB07C),
- UINT32_C(0x01988893), UINT32_C(0x0D8E1644), UINT32_C(0x04F7CFCD),
- UINT32_C(0x05727E1E), UINT32_C(0x073F0B5C), UINT32_C(0x0D975E23),
- UINT32_C(0x06001F51), UINT32_C(0x07B2218F), UINT32_C(0x07159FF4),
- UINT32_C(0x02D8AF28), UINT32_C(0x0F0AFF67), UINT32_C(0x0464C014),
- UINT32_C(0x005A1007) },
- { UINT32_C(0x078A8DB5), UINT32_C(0x035A301E), UINT32_C(0x0E9F9693),
- UINT32_C(0x07A8969A), UINT32_C(0x096A5ECF), UINT32_C(0x03467DDF),
- UINT32_C(0x07AF13AA), UINT32_C(0x0BF17A6B), UINT32_C(0x00FBC9C7),
- UINT32_C(0x002F3F21), UINT32_C(0x01610D30), UINT32_C(0x0A6FEF92),
- UINT32_C(0x00334A31), UINT32_C(0x0619D424), UINT32_C(0x011832DC),
- UINT32_C(0x04A2EBED), UINT32_C(0x092C4F4E), UINT32_C(0x03E72AFA),
- UINT32_C(0x04555CAD) } },
- { { UINT32_C(0x0E8401D3), UINT32_C(0x031A9337), UINT32_C(0x0A68B915),
- UINT32_C(0x006E6E9B), UINT32_C(0x0B1B6E29), UINT32_C(0x01B7F14B),
- UINT32_C(0x047E0BD8), UINT32_C(0x0A8CBD43), UINT32_C(0x024528C3),
- UINT32_C(0x08CA88A7), UINT32_C(0x000A1FEE), UINT32_C(0x0F21E47C),
- UINT32_C(0x07D1A248), UINT32_C(0x04BE0AD5), UINT32_C(0x071E2CED),
- UINT32_C(0x025521CD), UINT32_C(0x0F41E897), UINT32_C(0x0398886C),
- UINT32_C(0x04779FFD) },
- { UINT32_C(0x0A828FA8), UINT32_C(0x017C8B2C), UINT32_C(0x0910B047),
- UINT32_C(0x06160B77), UINT32_C(0x0B98B463), UINT32_C(0x07DF3373),
- UINT32_C(0x0455763C), UINT32_C(0x0F1284BE), UINT32_C(0x00906AAE),
- UINT32_C(0x01A75E0B), UINT32_C(0x07A6DA7C), UINT32_C(0x0FFCAFF1),
- UINT32_C(0x050D6EE5), UINT32_C(0x024BD0BA), UINT32_C(0x08383A01),
- UINT32_C(0x070AE8EA), UINT32_C(0x0CAA2B64), UINT32_C(0x06171B63),
- UINT32_C(0x020CE9FD) } },
- { { UINT32_C(0x0147F509), UINT32_C(0x0074A121), UINT32_C(0x0B1C1B8D),
- UINT32_C(0x00A39076), UINT32_C(0x0E542208), UINT32_C(0x01A08FA4),
- UINT32_C(0x012AA998), UINT32_C(0x0954BE0E), UINT32_C(0x05751A97),
- UINT32_C(0x09EFE174), UINT32_C(0x05C09E0D), UINT32_C(0x0DEE1815),
- UINT32_C(0x000B0415), UINT32_C(0x06D82BE5), UINT32_C(0x000E24A9),
- UINT32_C(0x042F7FD4), UINT32_C(0x0698791D), UINT32_C(0x05A5F79E),
- UINT32_C(0x0334C8D5) },
- { UINT32_C(0x0BB690A0), UINT32_C(0x01835514), UINT32_C(0x031B4F26),
- UINT32_C(0x023AC44F), UINT32_C(0x012CDCD1), UINT32_C(0x059AE369),
- UINT32_C(0x0123A551), UINT32_C(0x0AEBA693), UINT32_C(0x07D984CD),
- UINT32_C(0x0DAD9128), UINT32_C(0x0765643E), UINT32_C(0x0910F0F8),
- UINT32_C(0x03FB31E2), UINT32_C(0x01BD811A), UINT32_C(0x059F6B39),
- UINT32_C(0x049E6619), UINT32_C(0x06B63C96), UINT32_C(0x075166F7),
- UINT32_C(0x025CA72B) } },
- { { UINT32_C(0x055F34E4), UINT32_C(0x00BF08BF), UINT32_C(0x03730236),
- UINT32_C(0x039543BD), UINT32_C(0x05C17F94), UINT32_C(0x00A5C65D),
- UINT32_C(0x06121DA8), UINT32_C(0x099AC777), UINT32_C(0x02DCC3D6),
- UINT32_C(0x09002059), UINT32_C(0x0460BBB3), UINT32_C(0x07A202D8),
- UINT32_C(0x04C44EB5), UINT32_C(0x049D001E), UINT32_C(0x0E783DED),
- UINT32_C(0x0120D789), UINT32_C(0x086FA177), UINT32_C(0x065D19BF),
- UINT32_C(0x042CA8B7) },
- { UINT32_C(0x02860379), UINT32_C(0x06375711), UINT32_C(0x078E9829),
- UINT32_C(0x04F20A43), UINT32_C(0x0ADA67C4), UINT32_C(0x054101F4),
- UINT32_C(0x0602943F), UINT32_C(0x03FD9150), UINT32_C(0x06B8D61B),
- UINT32_C(0x06F5ADD6), UINT32_C(0x06EB2BAC), UINT32_C(0x0A07906A),
- UINT32_C(0x0147EDC1), UINT32_C(0x0477D372), UINT32_C(0x0025B1CE),
- UINT32_C(0x071B32CF), UINT32_C(0x0F40C9C6), UINT32_C(0x02483D0B),
- UINT32_C(0x07A56FCD) } },
- { { UINT32_C(0x0B1B724E), UINT32_C(0x0100B5C8), UINT32_C(0x081380B3),
- UINT32_C(0x048D8711), UINT32_C(0x0E363740), UINT32_C(0x029ED59F),
- UINT32_C(0x05E7819F), UINT32_C(0x02898DC3), UINT32_C(0x03621527),
- UINT32_C(0x0F99DD5D), UINT32_C(0x01DF449E), UINT32_C(0x022C0763),
- UINT32_C(0x04490568), UINT32_C(0x051A6A61), UINT32_C(0x0EE682C8),
- UINT32_C(0x0315AB2B), UINT32_C(0x08BF8EC0), UINT32_C(0x0221F0BD),
- UINT32_C(0x0034A2F5) },
- { UINT32_C(0x0505A0E7), UINT32_C(0x031C759D), UINT32_C(0x006AE380),
- UINT32_C(0x04AD9B4F), UINT32_C(0x0F850346), UINT32_C(0x0053B140),
- UINT32_C(0x060AB23A), UINT32_C(0x021E3C52), UINT32_C(0x002B9A66),
- UINT32_C(0x01646B7A), UINT32_C(0x03977D69), UINT32_C(0x02418634),
- UINT32_C(0x05E2030C), UINT32_C(0x06F8DED9), UINT32_C(0x064302A0),
- UINT32_C(0x0553D4B6), UINT32_C(0x0956D92B), UINT32_C(0x0537BD35),
- UINT32_C(0x07AFABE7) } },
- { { UINT32_C(0x04CB8040), UINT32_C(0x016D2E6C), UINT32_C(0x0DDE4688),
- UINT32_C(0x00DF2559), UINT32_C(0x0A980125), UINT32_C(0x066A1AC7),
- UINT32_C(0x07DF5C4B), UINT32_C(0x0FD3C659), UINT32_C(0x00481C65),
- UINT32_C(0x0AE5A70F), UINT32_C(0x029F751C), UINT32_C(0x00B4A3D4),
- UINT32_C(0x075575BC), UINT32_C(0x045CF25E), UINT32_C(0x06867A07),
- UINT32_C(0x076D7354), UINT32_C(0x0861487C), UINT32_C(0x017CEA2E),
- UINT32_C(0x03228414) },
- { UINT32_C(0x026AE111), UINT32_C(0x038FA015), UINT32_C(0x060716CA),
- UINT32_C(0x04976285), UINT32_C(0x059BC9DE), UINT32_C(0x043BF937),
- UINT32_C(0x035F13A1), UINT32_C(0x0F8D8888), UINT32_C(0x06D5E9F8),
- UINT32_C(0x08616DB1), UINT32_C(0x032C0CBB), UINT32_C(0x0AA3299C),
- UINT32_C(0x03F194B4), UINT32_C(0x00D0F72D), UINT32_C(0x0B3FCCBD),
- UINT32_C(0x02803044), UINT32_C(0x0A08E3C3), UINT32_C(0x037A0997),
- UINT32_C(0x05DC3B19) } },
- { { UINT32_C(0x085193F0), UINT32_C(0x019978F4), UINT32_C(0x0BF0C234),
- UINT32_C(0x04F7BBC1), UINT32_C(0x0722B6D6), UINT32_C(0x013DCEE7),
- UINT32_C(0x05D575CD), UINT32_C(0x0779F809), UINT32_C(0x06335183),
- UINT32_C(0x0DCC718C), UINT32_C(0x02D1E7DB), UINT32_C(0x0F6A6D57),
- UINT32_C(0x065A96BF), UINT32_C(0x065930E7), UINT32_C(0x039B793F),
- UINT32_C(0x06A9BA2E), UINT32_C(0x0C033596), UINT32_C(0x01BE1126),
- UINT32_C(0x03EA93B8) },
- { UINT32_C(0x03161177), UINT32_C(0x002665D5), UINT32_C(0x017B69C9),
- UINT32_C(0x07892DD4), UINT32_C(0x0F6F8ECB), UINT32_C(0x0576AF37),
- UINT32_C(0x03C1E515), UINT32_C(0x05A60E50), UINT32_C(0x02549873),
- UINT32_C(0x09B3D920), UINT32_C(0x029DA082), UINT32_C(0x009DAE44),
- UINT32_C(0x0197C8E7), UINT32_C(0x0154A33B), UINT32_C(0x097B3971),
- UINT32_C(0x023C0423), UINT32_C(0x02B8C68C), UINT32_C(0x04DCA653),
- UINT32_C(0x00079A0F) } },
- { { UINT32_C(0x063E2975), UINT32_C(0x06BEC9ED), UINT32_C(0x0B38790C),
- UINT32_C(0x022D87D1), UINT32_C(0x0EA228A4), UINT32_C(0x010DBA9F),
- UINT32_C(0x015868D8), UINT32_C(0x080C5E0D), UINT32_C(0x075196CF),
- UINT32_C(0x0A3AFD7E), UINT32_C(0x031A6E14), UINT32_C(0x0E7A5374),
- UINT32_C(0x067A8FE5), UINT32_C(0x06ECEB0D), UINT32_C(0x0B84F9C7),
- UINT32_C(0x0680604D), UINT32_C(0x072314F9), UINT32_C(0x03A2F4B2),
- UINT32_C(0x06C5081F) },
- { UINT32_C(0x0B981980), UINT32_C(0x0349CBF0), UINT32_C(0x072972B5),
- UINT32_C(0x02885527), UINT32_C(0x0150CDBD), UINT32_C(0x07F178E3),
- UINT32_C(0x032B4111), UINT32_C(0x0B2B4EF6), UINT32_C(0x000F21B3),
- UINT32_C(0x039D39FF), UINT32_C(0x07E2383D), UINT32_C(0x0F91A9DF),
- UINT32_C(0x000BF2A4), UINT32_C(0x003EA686), UINT32_C(0x06E3C109),
- UINT32_C(0x05D771D7), UINT32_C(0x03336F2A), UINT32_C(0x00A9A15C),
- UINT32_C(0x0310BC8B) } },
- { { UINT32_C(0x082B5AA4), UINT32_C(0x04A7240C), UINT32_C(0x00ABF375),
- UINT32_C(0x07E33DEB), UINT32_C(0x01BD8789), UINT32_C(0x06BA83A6),
- UINT32_C(0x05A6491B), UINT32_C(0x04DB69BD), UINT32_C(0x010D6A55),
- UINT32_C(0x0D5DAFA1), UINT32_C(0x06C7F999), UINT32_C(0x0185AD3E),
- UINT32_C(0x027EAEB5), UINT32_C(0x006644C8), UINT32_C(0x0B9709E1),
- UINT32_C(0x07676CF0), UINT32_C(0x0508273E), UINT32_C(0x054D3FBB),
- UINT32_C(0x063EFA4A) },
- { UINT32_C(0x010AA767), UINT32_C(0x01CC5A04), UINT32_C(0x0BE5B1B3),
- UINT32_C(0x06950FCE), UINT32_C(0x0E94E6DB), UINT32_C(0x0497BB17),
- UINT32_C(0x00CC06B4), UINT32_C(0x08846F32), UINT32_C(0x0314DC3B),
- UINT32_C(0x0BA27736), UINT32_C(0x0432450D), UINT32_C(0x04925C53),
- UINT32_C(0x03119EE1), UINT32_C(0x04A66669), UINT32_C(0x05FBA305),
- UINT32_C(0x033D4900), UINT32_C(0x0FE789AF), UINT32_C(0x0671EF4B),
- UINT32_C(0x0259D6DF) } },
- { { UINT32_C(0x05C529C4), UINT32_C(0x04097FDD), UINT32_C(0x0296486E),
- UINT32_C(0x05D5E29C), UINT32_C(0x0B3FABA2), UINT32_C(0x0695126C),
- UINT32_C(0x0312362F), UINT32_C(0x08DC4B4B), UINT32_C(0x0413884F),
- UINT32_C(0x067DDD33), UINT32_C(0x055DBD8F), UINT32_C(0x07D0B9CB),
- UINT32_C(0x01BE7C35), UINT32_C(0x043BC43D), UINT32_C(0x00E5A19E),
- UINT32_C(0x017725FC), UINT32_C(0x006A669F), UINT32_C(0x063FD379),
- UINT32_C(0x0682F5E5) },
- { UINT32_C(0x0035FA1B), UINT32_C(0x0302079C), UINT32_C(0x0A397CF2),
- UINT32_C(0x02A9E0EB), UINT32_C(0x0183E8FA), UINT32_C(0x00950C41),
- UINT32_C(0x05ACFED2), UINT32_C(0x0B8DC827), UINT32_C(0x0004B05C),
- UINT32_C(0x0ECD486A), UINT32_C(0x04FBAB30), UINT32_C(0x0A2FE908),
- UINT32_C(0x05C95F6D), UINT32_C(0x06B30876), UINT32_C(0x0F3D7A8A),
- UINT32_C(0x0734E57D), UINT32_C(0x0410C523), UINT32_C(0x057AD388),
- UINT32_C(0x073AF161) } },
- { { UINT32_C(0x033E8718), UINT32_C(0x05E156C6), UINT32_C(0x0188F2D0),
- UINT32_C(0x07B490F4), UINT32_C(0x0D1D9936), UINT32_C(0x045ACF91),
- UINT32_C(0x05EADE92), UINT32_C(0x09204996), UINT32_C(0x03FB05AD),
- UINT32_C(0x0952B30E), UINT32_C(0x066E8B73), UINT32_C(0x02E38706),
- UINT32_C(0x06AD215A), UINT32_C(0x05770FF2), UINT32_C(0x0CCC64AA),
- UINT32_C(0x00A77560), UINT32_C(0x084A4A57), UINT32_C(0x07428950),
- UINT32_C(0x007783FF) },
- { UINT32_C(0x07864A53), UINT32_C(0x02B0B04D), UINT32_C(0x0CE9B903),
- UINT32_C(0x032C4DB9), UINT32_C(0x0ED34B7B), UINT32_C(0x02B9BB80),
- UINT32_C(0x0107A7A1), UINT32_C(0x0133502C), UINT32_C(0x06939D9B),
- UINT32_C(0x07AE6A42), UINT32_C(0x01C55CB0), UINT32_C(0x0A087059),
- UINT32_C(0x011E8069), UINT32_C(0x02AC5D81), UINT32_C(0x0FF470E4),
- UINT32_C(0x068D4B88), UINT32_C(0x03B934D1), UINT32_C(0x01E86F4D),
- UINT32_C(0x00286D40) } },
- { { UINT32_C(0x0A097CC4), UINT32_C(0x07C93D92), UINT32_C(0x03638A82),
- UINT32_C(0x05D44662), UINT32_C(0x034F8801), UINT32_C(0x01E1B0E9),
- UINT32_C(0x03132ED7), UINT32_C(0x0D61A771), UINT32_C(0x0777FA2F),
- UINT32_C(0x0E4D4244), UINT32_C(0x02CDDCA4), UINT32_C(0x01988721),
- UINT32_C(0x0694972F), UINT32_C(0x02AA2585), UINT32_C(0x06A552DD),
- UINT32_C(0x02719251), UINT32_C(0x0C4FD604), UINT32_C(0x033FC4DD),
- UINT32_C(0x02A49BC5) },
- { UINT32_C(0x0ECC32F4), UINT32_C(0x03998CBA), UINT32_C(0x0E555140),
- UINT32_C(0x06BE70C6), UINT32_C(0x02ECE0DB), UINT32_C(0x07D7EE62),
- UINT32_C(0x006B8450), UINT32_C(0x0C677BF6), UINT32_C(0x0065EEBA),
- UINT32_C(0x0C8F791B), UINT32_C(0x05880489), UINT32_C(0x07724E1B),
- UINT32_C(0x00C43815), UINT32_C(0x079C7129), UINT32_C(0x0AC7BD8B),
- UINT32_C(0x00B35A76), UINT32_C(0x0E62F127), UINT32_C(0x06892912),
- UINT32_C(0x069DE730) } },
- { { UINT32_C(0x0D176E2E), UINT32_C(0x04BD43B7), UINT32_C(0x0843A348),
- UINT32_C(0x0749D5C1), UINT32_C(0x0ED9CC05), UINT32_C(0x00305C32),
- UINT32_C(0x037CC7F4), UINT32_C(0x03DF22FB), UINT32_C(0x05799B29),
- UINT32_C(0x0BAA8556), UINT32_C(0x01B9550B), UINT32_C(0x0B71D97D),
- UINT32_C(0x071866D2), UINT32_C(0x042A76ED), UINT32_C(0x0CF558E6),
- UINT32_C(0x05C52446), UINT32_C(0x0E80A5C3), UINT32_C(0x0732DC8B),
- UINT32_C(0x05430293) },
- { UINT32_C(0x08A05AA1), UINT32_C(0x060E94EA), UINT32_C(0x0495DB83),
- UINT32_C(0x07F23E7E), UINT32_C(0x09BABC6A), UINT32_C(0x07B134F3),
- UINT32_C(0x02C60301), UINT32_C(0x0C76C75A), UINT32_C(0x0496E91D),
- UINT32_C(0x0354A538), UINT32_C(0x03F832DB), UINT32_C(0x03139812),
- UINT32_C(0x028BB56E), UINT32_C(0x06BC315A), UINT32_C(0x08F87E08),
- UINT32_C(0x04EB9933), UINT32_C(0x0D94A083), UINT32_C(0x00F1E782),
- UINT32_C(0x00039DA7) } },
- { { UINT32_C(0x0F46E9D5), UINT32_C(0x04AFDE7F), UINT32_C(0x02DD9156),
- UINT32_C(0x03A43A4A), UINT32_C(0x0334CF91), UINT32_C(0x06B820D5),
- UINT32_C(0x02AB098A), UINT32_C(0x010407F3), UINT32_C(0x06E15825),
- UINT32_C(0x0DE19BBC), UINT32_C(0x05C155A7), UINT32_C(0x098AB480),
- UINT32_C(0x027F0A26), UINT32_C(0x001E493A), UINT32_C(0x0D3BF154),
- UINT32_C(0x0022BB7B), UINT32_C(0x092F7F8A), UINT32_C(0x025E06B0),
- UINT32_C(0x0214EC84) },
- { UINT32_C(0x0E367447), UINT32_C(0x07A76C60), UINT32_C(0x0E7F25B2),
- UINT32_C(0x061DC274), UINT32_C(0x08037471), UINT32_C(0x0601CC83),
- UINT32_C(0x077C01C1), UINT32_C(0x0BD797B8), UINT32_C(0x07A2D854),
- UINT32_C(0x0F539925), UINT32_C(0x00056A50), UINT32_C(0x0F52ABBB),
- UINT32_C(0x01C407C4), UINT32_C(0x046E3EC8), UINT32_C(0x08C6B255),
- UINT32_C(0x06BB4D5F), UINT32_C(0x09336DFF), UINT32_C(0x00D914F1),
- UINT32_C(0x01F9DBAA) } },
- { { UINT32_C(0x0D831A04), UINT32_C(0x05A97D33), UINT32_C(0x0906D401),
- UINT32_C(0x01E543D5), UINT32_C(0x063B64A7), UINT32_C(0x01DF1F04),
- UINT32_C(0x07BEAE26), UINT32_C(0x0C4C51CE), UINT32_C(0x071253E1),
- UINT32_C(0x07C5C1BC), UINT32_C(0x0686EDD8), UINT32_C(0x0EADB491),
- UINT32_C(0x06FCC7E8), UINT32_C(0x04DC895B), UINT32_C(0x0DA99CB1),
- UINT32_C(0x07538043), UINT32_C(0x0DCCD221), UINT32_C(0x05338542),
- UINT32_C(0x0263F3E2) },
- { UINT32_C(0x049B2FC3), UINT32_C(0x00D9571D), UINT32_C(0x09A6B74E),
- UINT32_C(0x013E9069), UINT32_C(0x0C142061), UINT32_C(0x0661D5AE),
- UINT32_C(0x078F1467), UINT32_C(0x0568D3A9), UINT32_C(0x02729AA5),
- UINT32_C(0x0749905F), UINT32_C(0x02491337), UINT32_C(0x0A8EED74),
- UINT32_C(0x070FB80C), UINT32_C(0x066BA15B), UINT32_C(0x087A7668),
- UINT32_C(0x03342CBD), UINT32_C(0x0FCD50D2), UINT32_C(0x017CF7F9),
- UINT32_C(0x05DA6EDD) } },
- },
- {
- { { UINT32_C(0x08ECE594), UINT32_C(0x02E6D7AF), UINT32_C(0x0160833B),
- UINT32_C(0x05E9199C), UINT32_C(0x05C1EB44), UINT32_C(0x01F9CDD2),
- UINT32_C(0x04ECBF7E), UINT32_C(0x011F5E2E), UINT32_C(0x00B16683),
- UINT32_C(0x082C80F7), UINT32_C(0x04F6D76E), UINT32_C(0x0A9035A2),
- UINT32_C(0x02A6F996), UINT32_C(0x07CF51EF), UINT32_C(0x011C78A5),
- UINT32_C(0x03E6811A), UINT32_C(0x0DCCBD54), UINT32_C(0x029CA158),
- UINT32_C(0x0188556B) },
- { UINT32_C(0x0EBBFAD7), UINT32_C(0x036D4FEF), UINT32_C(0x0DAD8CB2),
- UINT32_C(0x024C5461), UINT32_C(0x09F7253C), UINT32_C(0x052C8206),
- UINT32_C(0x03009FD7), UINT32_C(0x05A4E883), UINT32_C(0x04FFDBF8),
- UINT32_C(0x07B5A2D0), UINT32_C(0x0487033B), UINT32_C(0x003EABFC),
- UINT32_C(0x0107E479), UINT32_C(0x0479A422), UINT32_C(0x0ECEA707),
- UINT32_C(0x05D06F61), UINT32_C(0x05BD0428), UINT32_C(0x01301D97),
- UINT32_C(0x0137ADE9) } },
- { { UINT32_C(0x008164D4), UINT32_C(0x02998A00), UINT32_C(0x0E9FE1D5),
- UINT32_C(0x05B9A827), UINT32_C(0x0AA45754), UINT32_C(0x06793FDD),
- UINT32_C(0x01D8C060), UINT32_C(0x030ECBF4), UINT32_C(0x01FDC34C),
- UINT32_C(0x0FA8650F), UINT32_C(0x0739AA31), UINT32_C(0x0905FB0D),
- UINT32_C(0x04B98585), UINT32_C(0x04528DD9), UINT32_C(0x0582E0E8),
- UINT32_C(0x0685885D), UINT32_C(0x008F4125), UINT32_C(0x02A15C01),
- UINT32_C(0x023D540D) },
- { UINT32_C(0x039B003C), UINT32_C(0x074C5CC0), UINT32_C(0x029B2FBB),
- UINT32_C(0x07F27890), UINT32_C(0x0C083234), UINT32_C(0x054081D7),
- UINT32_C(0x0109E54D), UINT32_C(0x08920F8E), UINT32_C(0x07D87B98),
- UINT32_C(0x07E36E68), UINT32_C(0x023912DB), UINT32_C(0x071A5BBC),
- UINT32_C(0x0733E49F), UINT32_C(0x058495D0), UINT32_C(0x0068F694),
- UINT32_C(0x012DCC7D), UINT32_C(0x0DC88ED4), UINT32_C(0x06D1A2D4),
- UINT32_C(0x02BBA636) } },
- { { UINT32_C(0x0B78796F), UINT32_C(0x0335FA8E), UINT32_C(0x0243FD16),
- UINT32_C(0x03C6B319), UINT32_C(0x01CD8CA8), UINT32_C(0x0704FAEE),
- UINT32_C(0x04540F1E), UINT32_C(0x092AC9A2), UINT32_C(0x020A1CA3),
- UINT32_C(0x023FC6DD), UINT32_C(0x01EFAF42), UINT32_C(0x00BC4AB2),
- UINT32_C(0x0206DD26), UINT32_C(0x07400CF2), UINT32_C(0x072BD012),
- UINT32_C(0x00840AB3), UINT32_C(0x016D752E), UINT32_C(0x00CEF006),
- UINT32_C(0x0647C23D) },
- { UINT32_C(0x0F6CA70B), UINT32_C(0x05AFF85F), UINT32_C(0x031691E3),
- UINT32_C(0x01063899), UINT32_C(0x02420E8C), UINT32_C(0x03D2D13C),
- UINT32_C(0x059E8A01), UINT32_C(0x0FC5FC43), UINT32_C(0x042A852F),
- UINT32_C(0x06446FD4), UINT32_C(0x0341CB5B), UINT32_C(0x044193ED),
- UINT32_C(0x073BE475), UINT32_C(0x051FCBEA), UINT32_C(0x00D6D405),
- UINT32_C(0x00A0026F), UINT32_C(0x09A09555), UINT32_C(0x0037DFDB),
- UINT32_C(0x0186A76D) } },
- { { UINT32_C(0x06762E69), UINT32_C(0x05E586F2), UINT32_C(0x08A5D295),
- UINT32_C(0x021AEB8A), UINT32_C(0x0D8E9356), UINT32_C(0x05E8F45E),
- UINT32_C(0x04336CB6), UINT32_C(0x04373909), UINT32_C(0x020299B5),
- UINT32_C(0x013EB290), UINT32_C(0x061E0E31), UINT32_C(0x07167125),
- UINT32_C(0x01291CE5), UINT32_C(0x05F204F5), UINT32_C(0x060A0EA2),
- UINT32_C(0x0414B179), UINT32_C(0x064F6F43), UINT32_C(0x0114060E),
- UINT32_C(0x040928CF) },
- { UINT32_C(0x0B54A6C6), UINT32_C(0x010FE7C2), UINT32_C(0x0FDA19CB),
- UINT32_C(0x056B791E), UINT32_C(0x049ED286), UINT32_C(0x02401472),
- UINT32_C(0x048F8CD1), UINT32_C(0x0EAC2400), UINT32_C(0x075D6078),
- UINT32_C(0x0EAAD7B3), UINT32_C(0x051EDE19), UINT32_C(0x0D7E6F09),
- UINT32_C(0x001044A9), UINT32_C(0x0411E3BA), UINT32_C(0x0D3647C4),
- UINT32_C(0x00168497), UINT32_C(0x08BA1235), UINT32_C(0x01C93676),
- UINT32_C(0x01411BDC) } },
- { { UINT32_C(0x07F5FEA0), UINT32_C(0x068F1494), UINT32_C(0x0CF3659A),
- UINT32_C(0x034F4CD5), UINT32_C(0x08840E07), UINT32_C(0x01463227),
- UINT32_C(0x02CE4099), UINT32_C(0x00306A1A), UINT32_C(0x043276DA),
- UINT32_C(0x0C0A79A8), UINT32_C(0x045485DA), UINT32_C(0x0D43B7E5),
- UINT32_C(0x0245D30D), UINT32_C(0x07040ECA), UINT32_C(0x0F0944E2),
- UINT32_C(0x02FAB448), UINT32_C(0x0A3418D6), UINT32_C(0x00AEEE32),
- UINT32_C(0x054B0477) },
- { UINT32_C(0x002E1A49), UINT32_C(0x02417738), UINT32_C(0x003FC230),
- UINT32_C(0x057B81BC), UINT32_C(0x09252F9B), UINT32_C(0x071E923E),
- UINT32_C(0x07556FE9), UINT32_C(0x0405C043), UINT32_C(0x05F4A479),
- UINT32_C(0x00AE6EBC), UINT32_C(0x0470CEA9), UINT32_C(0x043EFE7F),
- UINT32_C(0x032F779B), UINT32_C(0x05D5E4C1), UINT32_C(0x0F412FF3),
- UINT32_C(0x029E0A95), UINT32_C(0x027FF900), UINT32_C(0x0639C4FE),
- UINT32_C(0x05496FF2) } },
- { { UINT32_C(0x093A81E5), UINT32_C(0x06552EA0), UINT32_C(0x076C940F),
- UINT32_C(0x04D9EBF4), UINT32_C(0x07435E68), UINT32_C(0x00026B20),
- UINT32_C(0x022F07A1), UINT32_C(0x0D1152A6), UINT32_C(0x01605EB4),
- UINT32_C(0x021ED2B3), UINT32_C(0x0416BC52), UINT32_C(0x0F03BB25),
- UINT32_C(0x032FD879), UINT32_C(0x0224E24D), UINT32_C(0x0227BC06),
- UINT32_C(0x07E18BB7), UINT32_C(0x0846E10C), UINT32_C(0x025383D2),
- UINT32_C(0x0716FE98) },
- { UINT32_C(0x048353E7), UINT32_C(0x06A51D17), UINT32_C(0x0602B7B4),
- UINT32_C(0x00A3A912), UINT32_C(0x00D41798), UINT32_C(0x009BAAA2),
- UINT32_C(0x014F6863), UINT32_C(0x0B8C9E0C), UINT32_C(0x004E89E7),
- UINT32_C(0x01EA2B4D), UINT32_C(0x069FE41B), UINT32_C(0x0E23CD44),
- UINT32_C(0x0284C3F8), UINT32_C(0x0709633E), UINT32_C(0x00EC122E),
- UINT32_C(0x054C3546), UINT32_C(0x0274CE48), UINT32_C(0x0562858C),
- UINT32_C(0x00845131) } },
- { { UINT32_C(0x093C77DA), UINT32_C(0x01D351AD), UINT32_C(0x023A3C02),
- UINT32_C(0x050A84F5), UINT32_C(0x0D2278BA), UINT32_C(0x0166F47B),
- UINT32_C(0x010E24C3), UINT32_C(0x0171F355), UINT32_C(0x070D70CC),
- UINT32_C(0x0F04C14A), UINT32_C(0x0675CE80), UINT32_C(0x03C92277),
- UINT32_C(0x027C5314), UINT32_C(0x0475432E), UINT32_C(0x0A42C984),
- UINT32_C(0x021A86BA), UINT32_C(0x09667047), UINT32_C(0x0162D620),
- UINT32_C(0x05CE1F5E) },
- { UINT32_C(0x0541016D), UINT32_C(0x04AA27AD), UINT32_C(0x024272A0),
- UINT32_C(0x0124A937), UINT32_C(0x04022798), UINT32_C(0x04C4908F),
- UINT32_C(0x078D2755), UINT32_C(0x05FC4690), UINT32_C(0x03D49867),
- UINT32_C(0x0D0542ED), UINT32_C(0x014AC0C6), UINT32_C(0x0444F4AA),
- UINT32_C(0x0527B53A), UINT32_C(0x04E463E4), UINT32_C(0x084795B9),
- UINT32_C(0x06190D53), UINT32_C(0x01F0982A), UINT32_C(0x06C19AFA),
- UINT32_C(0x02B40A43) } },
- { { UINT32_C(0x0D526DD9), UINT32_C(0x02D2A436), UINT32_C(0x06CBC632),
- UINT32_C(0x06A016EB), UINT32_C(0x0229215C), UINT32_C(0x063A186E),
- UINT32_C(0x056A2652), UINT32_C(0x0982D8F0), UINT32_C(0x04950B55),
- UINT32_C(0x0C34A068), UINT32_C(0x036F958C), UINT32_C(0x0EC7C304),
- UINT32_C(0x00685912), UINT32_C(0x00521605), UINT32_C(0x074386C5),
- UINT32_C(0x06C5C880), UINT32_C(0x01D5C0E0), UINT32_C(0x0321B5FC),
- UINT32_C(0x031F89D8) },
- { UINT32_C(0x0E4F4EFB), UINT32_C(0x042EF02C), UINT32_C(0x0747294D),
- UINT32_C(0x06315147), UINT32_C(0x09826B36), UINT32_C(0x044F7A99),
- UINT32_C(0x00DA6A3B), UINT32_C(0x0B192C6C), UINT32_C(0x017D9CD6),
- UINT32_C(0x07D0FC8D), UINT32_C(0x00306186), UINT32_C(0x0DA5FD2C),
- UINT32_C(0x048EA8B6), UINT32_C(0x041BED38), UINT32_C(0x028A7681),
- UINT32_C(0x0444E09E), UINT32_C(0x07A1C182), UINT32_C(0x06CEB6B8),
- UINT32_C(0x0402E972) } },
- { { UINT32_C(0x0A37CD61), UINT32_C(0x07A90498), UINT32_C(0x03236B70),
- UINT32_C(0x010D1CA8), UINT32_C(0x0C8EE94C), UINT32_C(0x01332402),
- UINT32_C(0x00D01671), UINT32_C(0x0D20BD0A), UINT32_C(0x04F8905D),
- UINT32_C(0x0CB75503), UINT32_C(0x07C71184), UINT32_C(0x04D224FF),
- UINT32_C(0x05EF5D3B), UINT32_C(0x02D2D84B), UINT32_C(0x0776D6B8),
- UINT32_C(0x01B04C47), UINT32_C(0x0C6883AD), UINT32_C(0x041BC984),
- UINT32_C(0x0738830F) },
- { UINT32_C(0x008A7408), UINT32_C(0x01833053), UINT32_C(0x0DCDED77),
- UINT32_C(0x0660E3CD), UINT32_C(0x003541F4), UINT32_C(0x06650324),
- UINT32_C(0x056D1103), UINT32_C(0x012DDC16), UINT32_C(0x04858446),
- UINT32_C(0x031BD98F), UINT32_C(0x07EA97C0), UINT32_C(0x033EA10E),
- UINT32_C(0x07E40598), UINT32_C(0x03935067), UINT32_C(0x06BD3C58),
- UINT32_C(0x0709A382), UINT32_C(0x0FFD62B5), UINT32_C(0x03ACA64E),
- UINT32_C(0x02BDB05C) } },
- { { UINT32_C(0x019DDB66), UINT32_C(0x0151276D), UINT32_C(0x0D169D42),
- UINT32_C(0x07424F74), UINT32_C(0x0073574B), UINT32_C(0x029D6033),
- UINT32_C(0x04805B63), UINT32_C(0x0FF3CCB8), UINT32_C(0x0657BEB9),
- UINT32_C(0x06710C8D), UINT32_C(0x076A0EFE), UINT32_C(0x05FFC38A),
- UINT32_C(0x039B2127), UINT32_C(0x04A7D60B), UINT32_C(0x0D352201),
- UINT32_C(0x0459932F), UINT32_C(0x0A56306E), UINT32_C(0x05D63C8E),
- UINT32_C(0x01727D3E) },
- { UINT32_C(0x0A228C02), UINT32_C(0x0454E2FD), UINT32_C(0x0C5CF406),
- UINT32_C(0x072A6748), UINT32_C(0x09478B3C), UINT32_C(0x01C032C4),
- UINT32_C(0x024B1CF3), UINT32_C(0x07BCB89A), UINT32_C(0x017F8136),
- UINT32_C(0x03BFA207), UINT32_C(0x0032CE35), UINT32_C(0x01301C08),
- UINT32_C(0x01F1D68E), UINT32_C(0x024447E0), UINT32_C(0x00655D3F),
- UINT32_C(0x04B5B6DB), UINT32_C(0x08F50A61), UINT32_C(0x07FE19DA),
- UINT32_C(0x01906979) } },
- { { UINT32_C(0x04E80EB1), UINT32_C(0x052DB749), UINT32_C(0x0FA876FF),
- UINT32_C(0x014D563E), UINT32_C(0x0DD8DCB4), UINT32_C(0x06D08CF5),
- UINT32_C(0x0088B6C9), UINT32_C(0x099DAF2C), UINT32_C(0x06ADE3E9),
- UINT32_C(0x05F27F40), UINT32_C(0x076292C5), UINT32_C(0x02149C44),
- UINT32_C(0x04ECED26), UINT32_C(0x04016166), UINT32_C(0x0E8DD0F0),
- UINT32_C(0x02703366), UINT32_C(0x09A4D3F8), UINT32_C(0x000C4924),
- UINT32_C(0x066F3B89) },
- { UINT32_C(0x00F92986), UINT32_C(0x001B8CB3), UINT32_C(0x0C27E556),
- UINT32_C(0x05EAB0C7), UINT32_C(0x0A95BBEF), UINT32_C(0x011331B7),
- UINT32_C(0x03245504), UINT32_C(0x0B108EBA), UINT32_C(0x0704FE66),
- UINT32_C(0x0AEECF39), UINT32_C(0x0485E096), UINT32_C(0x0D5B3E1E),
- UINT32_C(0x02DB3A00), UINT32_C(0x06FBA80E), UINT32_C(0x0AEE0EA5),
- UINT32_C(0x064273CE), UINT32_C(0x0CD775D3), UINT32_C(0x00232462),
- UINT32_C(0x0347DCE7) } },
- { { UINT32_C(0x029AE558), UINT32_C(0x07BED198), UINT32_C(0x073802BF),
- UINT32_C(0x0528429C), UINT32_C(0x02A79F18), UINT32_C(0x045BFA11),
- UINT32_C(0x07B77865), UINT32_C(0x065D4D35), UINT32_C(0x03701A97),
- UINT32_C(0x03C87FB5), UINT32_C(0x07338AED), UINT32_C(0x0260F0C6),
- UINT32_C(0x032E371B), UINT32_C(0x048EAB15), UINT32_C(0x06488CED),
- UINT32_C(0x04349BDC), UINT32_C(0x09FF872F), UINT32_C(0x01EBC954),
- UINT32_C(0x02644425) },
- { UINT32_C(0x0AAD22D1), UINT32_C(0x04DA634D), UINT32_C(0x0931B0A2),
- UINT32_C(0x0366BA6D), UINT32_C(0x0A03F852), UINT32_C(0x003C4DA2),
- UINT32_C(0x07BDDE59), UINT32_C(0x00543C06), UINT32_C(0x05EA4710),
- UINT32_C(0x0622BACC), UINT32_C(0x03C86D6F), UINT32_C(0x0810EAB1),
- UINT32_C(0x0128E64D), UINT32_C(0x02C5B6EF), UINT32_C(0x0F37432C),
- UINT32_C(0x0391A4CD), UINT32_C(0x09344B8B), UINT32_C(0x007DDA34),
- UINT32_C(0x02408EDC) } },
- { { UINT32_C(0x0EB8B398), UINT32_C(0x068DF986), UINT32_C(0x0BCADF8A),
- UINT32_C(0x01829A9B), UINT32_C(0x017C9B77), UINT32_C(0x0446621A),
- UINT32_C(0x026EE0C4), UINT32_C(0x0E0FE9B2), UINT32_C(0x0528FE1C),
- UINT32_C(0x08E6DD5A), UINT32_C(0x018FB2E0), UINT32_C(0x0FD2A7AB),
- UINT32_C(0x002E71A2), UINT32_C(0x069C2EFB), UINT32_C(0x0156F759),
- UINT32_C(0x04F3A78E), UINT32_C(0x022C4533), UINT32_C(0x069A2816),
- UINT32_C(0x03C034B1) },
- { UINT32_C(0x0D05FF6A), UINT32_C(0x07761186), UINT32_C(0x0D73ABC6),
- UINT32_C(0x06AC086B), UINT32_C(0x0BF965A1), UINT32_C(0x05F6546D),
- UINT32_C(0x07767397), UINT32_C(0x005C4608), UINT32_C(0x005803C4),
- UINT32_C(0x024EE133), UINT32_C(0x05FC51BD), UINT32_C(0x099F0D97),
- UINT32_C(0x00437C0C), UINT32_C(0x0553A827), UINT32_C(0x0FB0EB60),
- UINT32_C(0x06A7AEC5), UINT32_C(0x07C31264), UINT32_C(0x020D4B32),
- UINT32_C(0x045F6381) } },
- { { UINT32_C(0x04D9F1F8), UINT32_C(0x05315A15), UINT32_C(0x01990B25),
- UINT32_C(0x01A6DE98), UINT32_C(0x036D854A), UINT32_C(0x03D25F0D),
- UINT32_C(0x06673F83), UINT32_C(0x04C56936), UINT32_C(0x019ACD66),
- UINT32_C(0x0C1F1C47), UINT32_C(0x04AD0FD3), UINT32_C(0x0148F4FA),
- UINT32_C(0x07BC3A93), UINT32_C(0x02F86E22), UINT32_C(0x0291F62B),
- UINT32_C(0x01F87233), UINT32_C(0x0F616501), UINT32_C(0x06C1B9E5),
- UINT32_C(0x05FB6CAA) },
- { UINT32_C(0x0DAF0C41), UINT32_C(0x050BE47B), UINT32_C(0x0DD799BF),
- UINT32_C(0x00BB8754), UINT32_C(0x07221726), UINT32_C(0x00F26A35),
- UINT32_C(0x0474A809), UINT32_C(0x0250B288), UINT32_C(0x0680A8C1),
- UINT32_C(0x09FDC598), UINT32_C(0x00424EA2), UINT32_C(0x09CADE7E),
- UINT32_C(0x0092845D), UINT32_C(0x0301B24F), UINT32_C(0x0CF7BF3E),
- UINT32_C(0x0747B26E), UINT32_C(0x04110EBF), UINT32_C(0x002FC650),
- UINT32_C(0x066AF8B8) } },
- { { UINT32_C(0x06DBC74A), UINT32_C(0x02C31098), UINT32_C(0x069497D4),
- UINT32_C(0x048864EC), UINT32_C(0x01E12C96), UINT32_C(0x03EE9F03),
- UINT32_C(0x05400CB4), UINT32_C(0x00B9E174), UINT32_C(0x04923BC3),
- UINT32_C(0x0B5B54EA), UINT32_C(0x04A635C8), UINT32_C(0x0039A770),
- UINT32_C(0x079340D3), UINT32_C(0x02B053A6), UINT32_C(0x0AA8C800),
- UINT32_C(0x073E66A4), UINT32_C(0x0304ED5B), UINT32_C(0x007ACB50),
- UINT32_C(0x069EBA57) },
- { UINT32_C(0x04FA3D53), UINT32_C(0x050EF28C), UINT32_C(0x09A3C2CF),
- UINT32_C(0x03DE9C58), UINT32_C(0x085E0F9C), UINT32_C(0x069D187C),
- UINT32_C(0x04624402), UINT32_C(0x0C81F8BF), UINT32_C(0x02E444D9),
- UINT32_C(0x0D776F3C), UINT32_C(0x02B966E8), UINT32_C(0x017A5803),
- UINT32_C(0x005E79FE), UINT32_C(0x017FF63B), UINT32_C(0x05B01559),
- UINT32_C(0x03097D34), UINT32_C(0x0F3A10BA), UINT32_C(0x0712D05A),
- UINT32_C(0x03904282) } },
- { { UINT32_C(0x0727DDB2), UINT32_C(0x0322FBEE), UINT32_C(0x006E2FCD),
- UINT32_C(0x07EA06FF), UINT32_C(0x0BA09E24), UINT32_C(0x00F733F8),
- UINT32_C(0x03D6DCAE), UINT32_C(0x049125D5), UINT32_C(0x077E1A66),
- UINT32_C(0x0D68AE84), UINT32_C(0x04F77FA6), UINT32_C(0x0964F229),
- UINT32_C(0x011AD49C), UINT32_C(0x05CC02E9), UINT32_C(0x03E1CD67),
- UINT32_C(0x06E9B6EE), UINT32_C(0x02ABE8BE), UINT32_C(0x056C7601),
- UINT32_C(0x050C554C) },
- { UINT32_C(0x01B068CF), UINT32_C(0x012F41C1), UINT32_C(0x0CD31293),
- UINT32_C(0x056F1C35), UINT32_C(0x0716CA13), UINT32_C(0x0544293E),
- UINT32_C(0x06007211), UINT32_C(0x04F726E6), UINT32_C(0x007D49EF),
- UINT32_C(0x0E336972), UINT32_C(0x031C46EF), UINT32_C(0x025A6106),
- UINT32_C(0x05AA92B9), UINT32_C(0x011700B0), UINT32_C(0x011058CF),
- UINT32_C(0x00395DAC), UINT32_C(0x02BBCCE0), UINT32_C(0x029EAC52),
- UINT32_C(0x028A26A5) } },
- },
- {
- { { UINT32_C(0x0FFE4858), UINT32_C(0x044AC143), UINT32_C(0x06252D69),
- UINT32_C(0x03691755), UINT32_C(0x0DE0F670), UINT32_C(0x0295E478),
- UINT32_C(0x05945AF8), UINT32_C(0x0A5D32CA), UINT32_C(0x0234DE82),
- UINT32_C(0x0F67E075), UINT32_C(0x06115CED), UINT32_C(0x00AE3A40),
- UINT32_C(0x04F21740), UINT32_C(0x05BA53F6), UINT32_C(0x05840CD3),
- UINT32_C(0x02246AB6), UINT32_C(0x0A7E5891), UINT32_C(0x00E30EE3),
- UINT32_C(0x06E32125) },
- { UINT32_C(0x028DA023), UINT32_C(0x0757D14A), UINT32_C(0x0F1F2367),
- UINT32_C(0x071B23A0), UINT32_C(0x09FF6F22), UINT32_C(0x06AE99FC),
- UINT32_C(0x07D2FAD3), UINT32_C(0x0C60DF70), UINT32_C(0x008ADC3F),
- UINT32_C(0x090D9E92), UINT32_C(0x027C0C30), UINT32_C(0x01553F37),
- UINT32_C(0x047ACF16), UINT32_C(0x017392AB), UINT32_C(0x05D9DD01),
- UINT32_C(0x07D1EF5C), UINT32_C(0x039F6FB5), UINT32_C(0x029DC337),
- UINT32_C(0x04960195) } },
- { { UINT32_C(0x0994A7B1), UINT32_C(0x00E9A7BA), UINT32_C(0x03544C1B),
- UINT32_C(0x0606BDF6), UINT32_C(0x01F3406A), UINT32_C(0x0635C178),
- UINT32_C(0x04CA0BE9), UINT32_C(0x09B74F10), UINT32_C(0x046E4155),
- UINT32_C(0x0655718B), UINT32_C(0x06B58CFD), UINT32_C(0x00E2656C),
- UINT32_C(0x0426833D), UINT32_C(0x063C550C), UINT32_C(0x049DDCA9),
- UINT32_C(0x04F6A9FC), UINT32_C(0x0676F8FD), UINT32_C(0x07BCA38C),
- UINT32_C(0x059BDCBC) },
- { UINT32_C(0x096F6D73), UINT32_C(0x0378FAEB), UINT32_C(0x0AA2949D),
- UINT32_C(0x02979AD2), UINT32_C(0x0FD54FA0), UINT32_C(0x0358AB66),
- UINT32_C(0x012D1C2E), UINT32_C(0x0A3E9433), UINT32_C(0x012502DC),
- UINT32_C(0x0BF42C60), UINT32_C(0x02403252), UINT32_C(0x0B59A13D),
- UINT32_C(0x07CE87D8), UINT32_C(0x06EFA510), UINT32_C(0x0F316813),
- UINT32_C(0x048C6131), UINT32_C(0x0ABB4F2B), UINT32_C(0x00135CF6),
- UINT32_C(0x019B839C) } },
- { { UINT32_C(0x0CDE12CD), UINT32_C(0x01F2EE46), UINT32_C(0x096668FC),
- UINT32_C(0x06800020), UINT32_C(0x0D8D4DC3), UINT32_C(0x01F9D872),
- UINT32_C(0x0074B363), UINT32_C(0x08E353D0), UINT32_C(0x06B87B06),
- UINT32_C(0x05F1A3E4), UINT32_C(0x03D67702), UINT32_C(0x0AD5ACE9),
- UINT32_C(0x024E9994), UINT32_C(0x03C2A440), UINT32_C(0x05A6C55C),
- UINT32_C(0x045CAA47), UINT32_C(0x0AC34E77), UINT32_C(0x068E05E3),
- UINT32_C(0x0598564E) },
- { UINT32_C(0x0366B021), UINT32_C(0x017935A2), UINT32_C(0x04F773DB),
- UINT32_C(0x04629F66), UINT32_C(0x096AE2DC), UINT32_C(0x00DB3EE0),
- UINT32_C(0x05684F63), UINT32_C(0x00391BA5), UINT32_C(0x07270BBB),
- UINT32_C(0x0E28A705), UINT32_C(0x02BB0A4B), UINT32_C(0x097DCA61),
- UINT32_C(0x04E133F5), UINT32_C(0x04899B3E), UINT32_C(0x00637ACF),
- UINT32_C(0x02D4E63D), UINT32_C(0x09635CB7), UINT32_C(0x02DEDDE2),
- UINT32_C(0x02229A95) } },
- { { UINT32_C(0x0CD34315), UINT32_C(0x02E1C8DC), UINT32_C(0x067A6FB7),
- UINT32_C(0x03DB6FAE), UINT32_C(0x07281C55), UINT32_C(0x046AC647),
- UINT32_C(0x002E790C), UINT32_C(0x0F3D1BC4), UINT32_C(0x0533A625),
- UINT32_C(0x06417AC2), UINT32_C(0x018ACECE), UINT32_C(0x0B7019D6),
- UINT32_C(0x06EDA9DA), UINT32_C(0x01938AF8), UINT32_C(0x029911BB),
- UINT32_C(0x03E2995B), UINT32_C(0x0C0E3FBA), UINT32_C(0x011596D1),
- UINT32_C(0x00271C3C) },
- { UINT32_C(0x0356A25A), UINT32_C(0x072A1ED9), UINT32_C(0x0EAF77B0),
- UINT32_C(0x02B4B853), UINT32_C(0x0C759255), UINT32_C(0x02FB6C3D),
- UINT32_C(0x0704DFA8), UINT32_C(0x0D59777F), UINT32_C(0x078F4FA8),
- UINT32_C(0x03C11635), UINT32_C(0x02E52765), UINT32_C(0x02ACB74C),
- UINT32_C(0x007731B9), UINT32_C(0x0137AD56), UINT32_C(0x063A4E6E),
- UINT32_C(0x06744404), UINT32_C(0x09B78353), UINT32_C(0x04631A57),
- UINT32_C(0x018C7F7E) } },
- { { UINT32_C(0x0EAD4FF9), UINT32_C(0x05871450), UINT32_C(0x07F9BF26),
- UINT32_C(0x02BC1D4E), UINT32_C(0x00CD4484), UINT32_C(0x04EBA4AB),
- UINT32_C(0x01DEDBB8), UINT32_C(0x0E25B38D), UINT32_C(0x049D1268),
- UINT32_C(0x0D04AABB), UINT32_C(0x01AEF51D), UINT32_C(0x00829E43),
- UINT32_C(0x05402C62), UINT32_C(0x0368D70D), UINT32_C(0x03775E01),
- UINT32_C(0x04503803), UINT32_C(0x02B6C48D), UINT32_C(0x01FD101D),
- UINT32_C(0x0025FF9E) },
- { UINT32_C(0x0B8B195A), UINT32_C(0x02323FFC), UINT32_C(0x00557FA3),
- UINT32_C(0x073ED365), UINT32_C(0x0A376D54), UINT32_C(0x023A3994),
- UINT32_C(0x00F1CC64), UINT32_C(0x080DCBBA), UINT32_C(0x01BB869C),
- UINT32_C(0x084DE7DF), UINT32_C(0x03102B44), UINT32_C(0x0559CF4A),
- UINT32_C(0x0385604A), UINT32_C(0x05CB3A44), UINT32_C(0x022C8F10),
- UINT32_C(0x00AC8251), UINT32_C(0x0D40C893), UINT32_C(0x00107891),
- UINT32_C(0x06795987) } },
- { { UINT32_C(0x06920A2A), UINT32_C(0x051ED07D), UINT32_C(0x0D40A6DB),
- UINT32_C(0x004D5082), UINT32_C(0x0BB2B0B9), UINT32_C(0x046EEDFC),
- UINT32_C(0x077C4F4D), UINT32_C(0x0025B307), UINT32_C(0x00CCCEED),
- UINT32_C(0x05AD182A), UINT32_C(0x0734F059), UINT32_C(0x0B480EE5),
- UINT32_C(0x0170F1CB), UINT32_C(0x0417A672), UINT32_C(0x05B933B3),
- UINT32_C(0x0279BB07), UINT32_C(0x0341E8CB), UINT32_C(0x071F7EBF),
- UINT32_C(0x0231AF93) },
- { UINT32_C(0x01CA3CCC), UINT32_C(0x042A30AF), UINT32_C(0x0E1E55F1),
- UINT32_C(0x07A6A1AC), UINT32_C(0x0D95EC2F), UINT32_C(0x029E2CCD),
- UINT32_C(0x00847505), UINT32_C(0x0184F443), UINT32_C(0x04B6D717),
- UINT32_C(0x03764831), UINT32_C(0x043E0649), UINT32_C(0x0378A536),
- UINT32_C(0x0430CAB4), UINT32_C(0x05B08C42), UINT32_C(0x0B147E31),
- UINT32_C(0x0270B565), UINT32_C(0x056846E1), UINT32_C(0x0393806E),
- UINT32_C(0x0102687E) } },
- { { UINT32_C(0x0EB5DCD3), UINT32_C(0x0185FC5D), UINT32_C(0x03181617),
- UINT32_C(0x01479862), UINT32_C(0x0D1E00A3), UINT32_C(0x000E2351),
- UINT32_C(0x041EA413), UINT32_C(0x0EC09039), UINT32_C(0x00213EFE),
- UINT32_C(0x02085A51), UINT32_C(0x027B7641), UINT32_C(0x0EE239C0),
- UINT32_C(0x06D0F7BB), UINT32_C(0x0267C803), UINT32_C(0x0B79A7EE),
- UINT32_C(0x0681FFDF), UINT32_C(0x08DFF64B), UINT32_C(0x0688C37C),
- UINT32_C(0x03D1AE9F) },
- { UINT32_C(0x03B68E6C), UINT32_C(0x07F04BE5), UINT32_C(0x060E4D0D),
- UINT32_C(0x0534899D), UINT32_C(0x0FA52B9C), UINT32_C(0x001C4752),
- UINT32_C(0x00BCA60E), UINT32_C(0x041ED165), UINT32_C(0x01DBEB9D),
- UINT32_C(0x04BEFD90), UINT32_C(0x05B1A36F), UINT32_C(0x0C6DA7CD),
- UINT32_C(0x025F29BF), UINT32_C(0x0143D052), UINT32_C(0x099FCD3B),
- UINT32_C(0x04934EE0), UINT32_C(0x00F9287C), UINT32_C(0x06BF2174),
- UINT32_C(0x05D3AAEB) } },
- { { UINT32_C(0x0B07B1BF), UINT32_C(0x008B8614), UINT32_C(0x00E21485),
- UINT32_C(0x07064A8F), UINT32_C(0x04328BCA), UINT32_C(0x0126ADF3),
- UINT32_C(0x07D9CEFE), UINT32_C(0x0B5FE8D9), UINT32_C(0x03B144E7),
- UINT32_C(0x0FF1E126), UINT32_C(0x06AF8F59), UINT32_C(0x07A6CE02),
- UINT32_C(0x07F9BE52), UINT32_C(0x003588EF), UINT32_C(0x0EFF3D3A),
- UINT32_C(0x052C77D2), UINT32_C(0x010CACE8), UINT32_C(0x05B1B51F),
- UINT32_C(0x06F19D06) },
- { UINT32_C(0x042166D8), UINT32_C(0x04CD028C), UINT32_C(0x039C24AE),
- UINT32_C(0x02C03F19), UINT32_C(0x067F4B98), UINT32_C(0x020FC733),
- UINT32_C(0x01DAB42C), UINT32_C(0x02FF3B82), UINT32_C(0x048BCF28),
- UINT32_C(0x019BFE25), UINT32_C(0x05777D5F), UINT32_C(0x06871AF8),
- UINT32_C(0x04139F9E), UINT32_C(0x07211D99), UINT32_C(0x0AD09893),
- UINT32_C(0x01E0FD46), UINT32_C(0x02906E37), UINT32_C(0x028275DB),
- UINT32_C(0x046A1575) } },
- { { UINT32_C(0x08AA3834), UINT32_C(0x06C07864), UINT32_C(0x0E044947),
- UINT32_C(0x03335EFD), UINT32_C(0x067B5E62), UINT32_C(0x034C6315),
- UINT32_C(0x07572306), UINT32_C(0x07CFC444), UINT32_C(0x01B85C68),
- UINT32_C(0x04AE9317), UINT32_C(0x004244BB), UINT32_C(0x02B9387A),
- UINT32_C(0x07EC501D), UINT32_C(0x030A85A4), UINT32_C(0x035462ED),
- UINT32_C(0x0713AD0C), UINT32_C(0x053851AC), UINT32_C(0x02FE3E5B),
- UINT32_C(0x06B40EB3) },
- { UINT32_C(0x053E08C6), UINT32_C(0x05772205), UINT32_C(0x030BB610),
- UINT32_C(0x008EE615), UINT32_C(0x0B7E6CE7), UINT32_C(0x00783E50),
- UINT32_C(0x0096806A), UINT32_C(0x066126FD), UINT32_C(0x051C1C80),
- UINT32_C(0x0ECBCD5E), UINT32_C(0x03A28DED), UINT32_C(0x08FD6395),
- UINT32_C(0x022A192F), UINT32_C(0x0736A4A0), UINT32_C(0x01369C64),
- UINT32_C(0x02AB6ECE), UINT32_C(0x06E0E541), UINT32_C(0x03248146),
- UINT32_C(0x00948603) } },
- { { UINT32_C(0x069B34EA), UINT32_C(0x0336603F), UINT32_C(0x06DBFFB7),
- UINT32_C(0x0300F54C), UINT32_C(0x03402123), UINT32_C(0x04E1356D),
- UINT32_C(0x04422E8C), UINT32_C(0x0C555F86), UINT32_C(0x065AB272),
- UINT32_C(0x053F830F), UINT32_C(0x0579A41E), UINT32_C(0x0FEFEF91),
- UINT32_C(0x004E0795), UINT32_C(0x016107F9), UINT32_C(0x08D654BD),
- UINT32_C(0x04ABFECE), UINT32_C(0x06C9D84D), UINT32_C(0x03813525),
- UINT32_C(0x07CB6F50) },
- { UINT32_C(0x09047156), UINT32_C(0x010B8EB7), UINT32_C(0x0CC6FC83),
- UINT32_C(0x0431B14F), UINT32_C(0x03572502), UINT32_C(0x076096FF),
- UINT32_C(0x0028C298), UINT32_C(0x066F3BBA), UINT32_C(0x00B06491),
- UINT32_C(0x0665164A), UINT32_C(0x04A5A55D), UINT32_C(0x02DAC096),
- UINT32_C(0x03E71E1C), UINT32_C(0x0256A93B), UINT32_C(0x04C0530A),
- UINT32_C(0x062EDF21), UINT32_C(0x0F59E8F8), UINT32_C(0x019409ED),
- UINT32_C(0x07A2F4BF) } },
- { { UINT32_C(0x0665B1CF), UINT32_C(0x0034F110), UINT32_C(0x0E6E0C55),
- UINT32_C(0x05548084), UINT32_C(0x0CB9C817), UINT32_C(0x010A8F87),
- UINT32_C(0x012A9C49), UINT32_C(0x0982F57E), UINT32_C(0x00D5BB56),
- UINT32_C(0x0649D707), UINT32_C(0x00C86A10), UINT32_C(0x0C3ED33B),
- UINT32_C(0x065AEDD0), UINT32_C(0x061D08CC), UINT32_C(0x010AAD5D),
- UINT32_C(0x015E11C5), UINT32_C(0x0CE68252), UINT32_C(0x03DCA282),
- UINT32_C(0x023E7D61) },
- { UINT32_C(0x094CC511), UINT32_C(0x053544CA), UINT32_C(0x067DDC2E),
- UINT32_C(0x022C5BA7), UINT32_C(0x0E503DBC), UINT32_C(0x06CD2E73),
- UINT32_C(0x058CE06F), UINT32_C(0x072AA3E8), UINT32_C(0x06DB1977),
- UINT32_C(0x04494EBF), UINT32_C(0x00968BBC), UINT32_C(0x02E8F607),
- UINT32_C(0x06F93369), UINT32_C(0x00836553), UINT32_C(0x05A73753),
- UINT32_C(0x03A8B586), UINT32_C(0x00A046AC), UINT32_C(0x0211F089),
- UINT32_C(0x0389954D) } },
- { { UINT32_C(0x0BB13D25), UINT32_C(0x023A4F60), UINT32_C(0x05B894C3),
- UINT32_C(0x01F6CF6C), UINT32_C(0x0F316A82), UINT32_C(0x07269483),
- UINT32_C(0x0724D1FF), UINT32_C(0x081060C2), UINT32_C(0x07213116),
- UINT32_C(0x0B65307F), UINT32_C(0x06CB9993), UINT32_C(0x04580D3B),
- UINT32_C(0x064521E7), UINT32_C(0x07FA9810), UINT32_C(0x00B180DF),
- UINT32_C(0x058701A7), UINT32_C(0x08BFB845), UINT32_C(0x0175BF68),
- UINT32_C(0x02BF1464) },
- { UINT32_C(0x04B66F01), UINT32_C(0x059EAFDA), UINT32_C(0x02EB7B38),
- UINT32_C(0x0382ED4B), UINT32_C(0x0D3E8A47), UINT32_C(0x061E1C44),
- UINT32_C(0x06369F05), UINT32_C(0x0221CD6C), UINT32_C(0x033836B4),
- UINT32_C(0x0580C2E2), UINT32_C(0x071C3002), UINT32_C(0x0C51E97D),
- UINT32_C(0x06D684C3), UINT32_C(0x074D62F1), UINT32_C(0x0851439A),
- UINT32_C(0x038AB710), UINT32_C(0x0300D39E), UINT32_C(0x0390C464),
- UINT32_C(0x04D98E09) } },
- { { UINT32_C(0x0140A004), UINT32_C(0x00D68C0B), UINT32_C(0x080890B3),
- UINT32_C(0x07D532CC), UINT32_C(0x05EC2C5B), UINT32_C(0x065415DB),
- UINT32_C(0x021CBEF3), UINT32_C(0x0C92C4C7), UINT32_C(0x002C11E2),
- UINT32_C(0x087FFDBE), UINT32_C(0x00BBD5AB), UINT32_C(0x0D3147C6),
- UINT32_C(0x027322CF), UINT32_C(0x048AE30E), UINT32_C(0x0A78BD27),
- UINT32_C(0x06E52637), UINT32_C(0x0F79BB43), UINT32_C(0x05C2CDD9),
- UINT32_C(0x03AEDAB1) },
- { UINT32_C(0x01F8F797), UINT32_C(0x05E078E8), UINT32_C(0x0A430953),
- UINT32_C(0x079FE860), UINT32_C(0x098B3236), UINT32_C(0x00A0033B),
- UINT32_C(0x0311C26A), UINT32_C(0x02325326), UINT32_C(0x021CEBBC),
- UINT32_C(0x01C498E4), UINT32_C(0x02365440), UINT32_C(0x091FBA94),
- UINT32_C(0x017487BB), UINT32_C(0x0321A8D5), UINT32_C(0x071AEF9F),
- UINT32_C(0x047D457D), UINT32_C(0x01BCFB0E), UINT32_C(0x0071F7BC),
- UINT32_C(0x075AEFAA) } },
- { { UINT32_C(0x0C98DFAE), UINT32_C(0x01C5257A), UINT32_C(0x06506435),
- UINT32_C(0x00916D1A), UINT32_C(0x0D65B633), UINT32_C(0x06BAC13A),
- UINT32_C(0x013D2F72), UINT32_C(0x0B8C7FD1), UINT32_C(0x0068E619),
- UINT32_C(0x0C30A25B), UINT32_C(0x016EBDF8), UINT32_C(0x0D8A2E42),
- UINT32_C(0x01E2AB8D), UINT32_C(0x07855AFB), UINT32_C(0x01F15FBB),
- UINT32_C(0x01DA4917), UINT32_C(0x074DB277), UINT32_C(0x030BAC3C),
- UINT32_C(0x01B1B048) },
- { UINT32_C(0x00C92FB5), UINT32_C(0x00781A5F), UINT32_C(0x0B53EE11),
- UINT32_C(0x04366DE3), UINT32_C(0x0D7AFCA1), UINT32_C(0x04C3CAB8),
- UINT32_C(0x031EB35F), UINT32_C(0x00CDDA16), UINT32_C(0x05DB2AA4),
- UINT32_C(0x0EEC79C5), UINT32_C(0x0123CDB1), UINT32_C(0x0A41DC06),
- UINT32_C(0x06880096), UINT32_C(0x069843C8), UINT32_C(0x0CF78DBD),
- UINT32_C(0x0751C797), UINT32_C(0x0381D873), UINT32_C(0x055DD420),
- UINT32_C(0x011ED33F) } },
- { { UINT32_C(0x0629DD22), UINT32_C(0x0329136A), UINT32_C(0x0F4C3A86),
- UINT32_C(0x02DF1D68), UINT32_C(0x0629460E), UINT32_C(0x04615D04),
- UINT32_C(0x06370A73), UINT32_C(0x0FF4CD28), UINT32_C(0x031AD006),
- UINT32_C(0x08F7AAC2), UINT32_C(0x05792159), UINT32_C(0x0680FF31),
- UINT32_C(0x04E1BAE8), UINT32_C(0x02E9B2B2), UINT32_C(0x0033BF36),
- UINT32_C(0x07DA8F9E), UINT32_C(0x0C93AB40), UINT32_C(0x01D743F3),
- UINT32_C(0x07644D30) },
- { UINT32_C(0x075200EB), UINT32_C(0x07C0784F), UINT32_C(0x0BE5A2EF),
- UINT32_C(0x002C4071), UINT32_C(0x0BB7DD65), UINT32_C(0x004ADBD2),
- UINT32_C(0x040D6568), UINT32_C(0x0F9A3BB6), UINT32_C(0x003E18E7),
- UINT32_C(0x0B2FA6B5), UINT32_C(0x04ED429F), UINT32_C(0x06091338),
- UINT32_C(0x01D161FD), UINT32_C(0x00454AAD), UINT32_C(0x0CAE06AA),
- UINT32_C(0x04E95021), UINT32_C(0x04523C5D), UINT32_C(0x041594F0),
- UINT32_C(0x065084CD) } },
- { { UINT32_C(0x002145D7), UINT32_C(0x047D8374), UINT32_C(0x0467ABA3),
- UINT32_C(0x051CC3F5), UINT32_C(0x0483BB69), UINT32_C(0x05CC8B8E),
- UINT32_C(0x00E452BD), UINT32_C(0x04333A28), UINT32_C(0x04F1A76A),
- UINT32_C(0x0CC64EC5), UINT32_C(0x05D9332C), UINT32_C(0x0E975BFD),
- UINT32_C(0x036AEA82), UINT32_C(0x03B66BE1), UINT32_C(0x0C8D0897),
- UINT32_C(0x00F4E2EA), UINT32_C(0x0E84A7FD), UINT32_C(0x04F8C351),
- UINT32_C(0x03B65097) },
- { UINT32_C(0x0DDB406F), UINT32_C(0x00890ADF), UINT32_C(0x03BBC60E),
- UINT32_C(0x01C0CA21), UINT32_C(0x0A76C2EF), UINT32_C(0x01695DF8),
- UINT32_C(0x07073F32), UINT32_C(0x0EED6813), UINT32_C(0x014D6ADC),
- UINT32_C(0x0AD30E57), UINT32_C(0x0080597C), UINT32_C(0x051E8314),
- UINT32_C(0x02334D30), UINT32_C(0x01C9AC19), UINT32_C(0x0D628FAA),
- UINT32_C(0x03467107), UINT32_C(0x027B5A2C), UINT32_C(0x07FE2414),
- UINT32_C(0x06D835AF) } },
- },
- {
- { { UINT32_C(0x0EF34144), UINT32_C(0x030D91DC), UINT32_C(0x05517757),
- UINT32_C(0x007F4856), UINT32_C(0x07EAF164), UINT32_C(0x058E3931),
- UINT32_C(0x0713CF7A), UINT32_C(0x0D5B04EB), UINT32_C(0x0416E9E6),
- UINT32_C(0x02479D66), UINT32_C(0x03230F77), UINT32_C(0x0E9111E0),
- UINT32_C(0x004A4528), UINT32_C(0x02C7F7D1), UINT32_C(0x02C19F36),
- UINT32_C(0x0456B2EE), UINT32_C(0x083CA160), UINT32_C(0x04377D25),
- UINT32_C(0x02CC5D8D) },
- { UINT32_C(0x024FDE34), UINT32_C(0x056A1AF8), UINT32_C(0x04A1F978),
- UINT32_C(0x07F66131), UINT32_C(0x09CCCEFE), UINT32_C(0x056AE73E),
- UINT32_C(0x0373907A), UINT32_C(0x08E4DFA2), UINT32_C(0x06104B90),
- UINT32_C(0x0CB65FE3), UINT32_C(0x0157AEF0), UINT32_C(0x0346E5AE),
- UINT32_C(0x06A8D9D0), UINT32_C(0x034F592B), UINT32_C(0x06A50F43),
- UINT32_C(0x03B946D2), UINT32_C(0x0B23CFAE), UINT32_C(0x01428E19),
- UINT32_C(0x01E96239) } },
- { { UINT32_C(0x0FF5FDD9), UINT32_C(0x06FD0B27), UINT32_C(0x0E5375B8),
- UINT32_C(0x02903F56), UINT32_C(0x0A0998F1), UINT32_C(0x04C7F7A7),
- UINT32_C(0x07B849C2), UINT32_C(0x01F684C1), UINT32_C(0x03D27FA7),
- UINT32_C(0x0ECDF852), UINT32_C(0x067A0FF9), UINT32_C(0x01170172),
- UINT32_C(0x06847341), UINT32_C(0x0384EC35), UINT32_C(0x097FA0B1),
- UINT32_C(0x056D5954), UINT32_C(0x0811FE39), UINT32_C(0x03141A8E),
- UINT32_C(0x03197AAF) },
- { UINT32_C(0x06B64713), UINT32_C(0x01EA477B), UINT32_C(0x0401B800),
- UINT32_C(0x056A093F), UINT32_C(0x0B18523C), UINT32_C(0x05FBF38B),
- UINT32_C(0x0000837C), UINT32_C(0x0205CC9C), UINT32_C(0x0211586E),
- UINT32_C(0x00E95959), UINT32_C(0x011034DB), UINT32_C(0x0705835C),
- UINT32_C(0x0534A7CA), UINT32_C(0x01BEEAE0), UINT32_C(0x011191B1),
- UINT32_C(0x06AC6C8E), UINT32_C(0x0F65A0B0), UINT32_C(0x01E452CE),
- UINT32_C(0x07AA591C) } },
- { { UINT32_C(0x04BE78BD), UINT32_C(0x06F41AA4), UINT32_C(0x09895DC2),
- UINT32_C(0x05E43C02), UINT32_C(0x0F5ED50D), UINT32_C(0x0055BA85),
- UINT32_C(0x04B88B8C), UINT32_C(0x07C05237), UINT32_C(0x06B089B3),
- UINT32_C(0x09D41AEF), UINT32_C(0x07A77F2E), UINT32_C(0x0B03794F),
- UINT32_C(0x0272136B), UINT32_C(0x013E2617), UINT32_C(0x039B53A2),
- UINT32_C(0x04704526), UINT32_C(0x0958114F), UINT32_C(0x01DF2245),
- UINT32_C(0x0736ACD3) },
- { UINT32_C(0x020FED74), UINT32_C(0x0142B2B5), UINT32_C(0x00BC648B),
- UINT32_C(0x045D8303), UINT32_C(0x01238CE7), UINT32_C(0x041E6696),
- UINT32_C(0x07794FE3), UINT32_C(0x02BC0623), UINT32_C(0x04D21409),
- UINT32_C(0x05FABD03), UINT32_C(0x074FAEA0), UINT32_C(0x08FD5BE6),
- UINT32_C(0x041F41AC), UINT32_C(0x046062AA), UINT32_C(0x06780730),
- UINT32_C(0x035F4E6F), UINT32_C(0x016D4890), UINT32_C(0x05B93E77),
- UINT32_C(0x01E38302) } },
- { { UINT32_C(0x0736B7A8), UINT32_C(0x049E4056), UINT32_C(0x01935194),
- UINT32_C(0x056AFE87), UINT32_C(0x0526EB80), UINT32_C(0x0763756F),
- UINT32_C(0x0438F678), UINT32_C(0x074903F5), UINT32_C(0x0305EF19),
- UINT32_C(0x0434448D), UINT32_C(0x05186915), UINT32_C(0x00E55244),
- UINT32_C(0x017BD6D1), UINT32_C(0x0747C684), UINT32_C(0x0FEE9906),
- UINT32_C(0x07BEA2FE), UINT32_C(0x04C3FEC5), UINT32_C(0x05EAB892),
- UINT32_C(0x03E3B341) },
- { UINT32_C(0x0DEF19D6), UINT32_C(0x03A56FE1), UINT32_C(0x09F33CC0),
- UINT32_C(0x03E3A7C9), UINT32_C(0x04712359), UINT32_C(0x02515669),
- UINT32_C(0x035C962B), UINT32_C(0x08C45240), UINT32_C(0x033CCA10),
- UINT32_C(0x06965FA2), UINT32_C(0x04F88D82), UINT32_C(0x0FDE595A),
- UINT32_C(0x0241F5B1), UINT32_C(0x03F203E1), UINT32_C(0x0BB7CDF8),
- UINT32_C(0x046409AD), UINT32_C(0x08E4A186), UINT32_C(0x01723DD8),
- UINT32_C(0x02B93AF0) } },
- { { UINT32_C(0x0FACC519), UINT32_C(0x027F5A2C), UINT32_C(0x0CA8C450),
- UINT32_C(0x03EC651F), UINT32_C(0x0B47E880), UINT32_C(0x01B9DB47),
- UINT32_C(0x06895D1C), UINT32_C(0x0F1857B2), UINT32_C(0x06CC04B3),
- UINT32_C(0x01C2D89D), UINT32_C(0x04525759), UINT32_C(0x0B6EACB4),
- UINT32_C(0x07770FC8), UINT32_C(0x04A7FC79), UINT32_C(0x03B56F1C),
- UINT32_C(0x0248A360), UINT32_C(0x0A73C4C6), UINT32_C(0x04BA5188),
- UINT32_C(0x0400E477) },
- { UINT32_C(0x0AEA3E6E), UINT32_C(0x05DA167B), UINT32_C(0x02C8D4B1),
- UINT32_C(0x074DB11C), UINT32_C(0x05DB2724), UINT32_C(0x04492C83),
- UINT32_C(0x00B62A05), UINT32_C(0x03A036B6), UINT32_C(0x07BC9211),
- UINT32_C(0x05739939), UINT32_C(0x00FD8C64), UINT32_C(0x0E68B0EC),
- UINT32_C(0x050FC3F3), UINT32_C(0x0446466F), UINT32_C(0x0A598C89),
- UINT32_C(0x062CB99D), UINT32_C(0x0C97B1FA), UINT32_C(0x077F1F42),
- UINT32_C(0x051B5A92) } },
- { { UINT32_C(0x09C36058), UINT32_C(0x05929A37), UINT32_C(0x079147E4),
- UINT32_C(0x0546B4E8), UINT32_C(0x0C41B43A), UINT32_C(0x05F16140),
- UINT32_C(0x0124A189), UINT32_C(0x0D01EFB0), UINT32_C(0x00FCDC74),
- UINT32_C(0x0D3E796F), UINT32_C(0x0597A54B), UINT32_C(0x097F7DE8),
- UINT32_C(0x0677C89A), UINT32_C(0x036C6165), UINT32_C(0x0DFFFA33),
- UINT32_C(0x0782CAAE), UINT32_C(0x07E6FE65), UINT32_C(0x04887038),
- UINT32_C(0x0636D482) },
- { UINT32_C(0x071EFA02), UINT32_C(0x07F91B7E), UINT32_C(0x0950028E),
- UINT32_C(0x069527C7), UINT32_C(0x09CE6F6C), UINT32_C(0x01FEEAA0),
- UINT32_C(0x014DED92), UINT32_C(0x0D94B717), UINT32_C(0x014B513D),
- UINT32_C(0x0A97F421), UINT32_C(0x075448FA), UINT32_C(0x041A5F24),
- UINT32_C(0x0721201F), UINT32_C(0x0444C83A), UINT32_C(0x07F6AE04),
- UINT32_C(0x030824B5), UINT32_C(0x0246F2D9), UINT32_C(0x05F21CD9),
- UINT32_C(0x06817477) } },
- { { UINT32_C(0x0DDEF055), UINT32_C(0x01C63F00), UINT32_C(0x0570BDE9),
- UINT32_C(0x07433A8A), UINT32_C(0x099522A9), UINT32_C(0x051DEDFE),
- UINT32_C(0x01712838), UINT32_C(0x0C8ECC33), UINT32_C(0x04846773),
- UINT32_C(0x0D5E2042), UINT32_C(0x017373E7), UINT32_C(0x04742EE4),
- UINT32_C(0x01053131), UINT32_C(0x01BD8B10), UINT32_C(0x01A5A425),
- UINT32_C(0x072BB78A), UINT32_C(0x01A26990), UINT32_C(0x02CD45F0),
- UINT32_C(0x03124D19) },
- { UINT32_C(0x01A2F1BD), UINT32_C(0x02C1057A), UINT32_C(0x07B6C2D1),
- UINT32_C(0x00B79FA6), UINT32_C(0x09B44B1B), UINT32_C(0x0428D7E8),
- UINT32_C(0x04C94C23), UINT32_C(0x0DFB15C5), UINT32_C(0x02F5DBF7),
- UINT32_C(0x0BC452A9), UINT32_C(0x044F06AF), UINT32_C(0x06C3295D),
- UINT32_C(0x0661CB9B), UINT32_C(0x0001E990), UINT32_C(0x022A6D5E),
- UINT32_C(0x03420E57), UINT32_C(0x0D5E7F7E), UINT32_C(0x0593D853),
- UINT32_C(0x00938C95) } },
- { { UINT32_C(0x0899A80A), UINT32_C(0x063E3726), UINT32_C(0x08972EC5),
- UINT32_C(0x037C93BE), UINT32_C(0x031E1342), UINT32_C(0x07C51EDF),
- UINT32_C(0x03702DD4), UINT32_C(0x086F89E1), UINT32_C(0x047EBB47),
- UINT32_C(0x06A291B7), UINT32_C(0x0685EBFA), UINT32_C(0x0EF566F4),
- UINT32_C(0x02FC8735), UINT32_C(0x03A7F885), UINT32_C(0x0963A567),
- UINT32_C(0x02DEC9A4), UINT32_C(0x033285D3), UINT32_C(0x0049779E),
- UINT32_C(0x05AB7D24) },
- { UINT32_C(0x04E67976), UINT32_C(0x03AD342E), UINT32_C(0x006D58B0),
- UINT32_C(0x0490C968), UINT32_C(0x0428E13C), UINT32_C(0x0183F7B5),
- UINT32_C(0x0168EF02), UINT32_C(0x031E9F33), UINT32_C(0x079C2D32),
- UINT32_C(0x0EC6C4B2), UINT32_C(0x06334DE3), UINT32_C(0x04E10D5F),
- UINT32_C(0x0431C81B), UINT32_C(0x001EE024), UINT32_C(0x01F6A3D0),
- UINT32_C(0x0009B04D), UINT32_C(0x0A95C815), UINT32_C(0x06C721B5),
- UINT32_C(0x07DEE1A8) } },
- { { UINT32_C(0x0C112CB8), UINT32_C(0x00691E2E), UINT32_C(0x01DBEB00),
- UINT32_C(0x077CCE8A), UINT32_C(0x03E91FE4), UINT32_C(0x0690BBBF),
- UINT32_C(0x0577CA8A), UINT32_C(0x00B5C974), UINT32_C(0x029377A0),
- UINT32_C(0x06FDF488), UINT32_C(0x00872436), UINT32_C(0x0506D32E),
- UINT32_C(0x055C17BB), UINT32_C(0x03B00666), UINT32_C(0x0D26AAA8),
- UINT32_C(0x03829C3F), UINT32_C(0x08B67A64), UINT32_C(0x0475D296),
- UINT32_C(0x027FEFC5) },
- { UINT32_C(0x06814D18), UINT32_C(0x01588692), UINT32_C(0x0D4F0EDD),
- UINT32_C(0x007DFA60), UINT32_C(0x042E603A), UINT32_C(0x00885394),
- UINT32_C(0x05F797E2), UINT32_C(0x041238B4), UINT32_C(0x052305E5),
- UINT32_C(0x0D9515E8), UINT32_C(0x05B10FCD), UINT32_C(0x08F6C6F8),
- UINT32_C(0x043FB734), UINT32_C(0x014BE940), UINT32_C(0x0E882EEE),
- UINT32_C(0x0077B050), UINT32_C(0x02093150), UINT32_C(0x05A0B712),
- UINT32_C(0x06E640E8) } },
- { { UINT32_C(0x0BE77EA4), UINT32_C(0x03634A86), UINT32_C(0x01F8DFF4),
- UINT32_C(0x005A0F6B), UINT32_C(0x0D30990A), UINT32_C(0x0712090D),
- UINT32_C(0x048C153A), UINT32_C(0x029E8CA3), UINT32_C(0x052B7982),
- UINT32_C(0x01355D1B), UINT32_C(0x00109FDB), UINT32_C(0x029EF3CE),
- UINT32_C(0x02FA1090), UINT32_C(0x033F025F), UINT32_C(0x03D1969F),
- UINT32_C(0x052EDB5F), UINT32_C(0x04D2BEF3), UINT32_C(0x06BF5DE5),
- UINT32_C(0x00C8983F) },
- { UINT32_C(0x04B8EB93), UINT32_C(0x0058C176), UINT32_C(0x00A13CB4),
- UINT32_C(0x053DF577), UINT32_C(0x0156AEB4), UINT32_C(0x005E3851),
- UINT32_C(0x069CEAE2), UINT32_C(0x0030FF4F), UINT32_C(0x001DA227),
- UINT32_C(0x05AF81D3), UINT32_C(0x03D80D8D), UINT32_C(0x0A3E8600),
- UINT32_C(0x03D228FC), UINT32_C(0x0665245C), UINT32_C(0x09E5CE2E),
- UINT32_C(0x03843A9B), UINT32_C(0x02F2D31B), UINT32_C(0x041832DC),
- UINT32_C(0x02E66351) } },
- { { UINT32_C(0x05730C8D), UINT32_C(0x06092618), UINT32_C(0x079F5AFA),
- UINT32_C(0x06F3E0CF), UINT32_C(0x092BC672), UINT32_C(0x0276DE36),
- UINT32_C(0x02D07EDC), UINT32_C(0x0FC6A29F), UINT32_C(0x0486EFA2),
- UINT32_C(0x0909E264), UINT32_C(0x056F98E8), UINT32_C(0x08A33777),
- UINT32_C(0x007820C7), UINT32_C(0x07E651CF), UINT32_C(0x0928B418),
- UINT32_C(0x05EF7EA1), UINT32_C(0x0BE35987), UINT32_C(0x023FE702),
- UINT32_C(0x04B874D9) },
- { UINT32_C(0x001A8D36), UINT32_C(0x03FC40DA), UINT32_C(0x00561AB4),
- UINT32_C(0x036E4547), UINT32_C(0x0D462FB9), UINT32_C(0x07B2E89D),
- UINT32_C(0x0616BF2B), UINT32_C(0x02FA3373), UINT32_C(0x067EE578),
- UINT32_C(0x02B81792), UINT32_C(0x03A32F95), UINT32_C(0x019591EC),
- UINT32_C(0x047F05AA), UINT32_C(0x058E2F29), UINT32_C(0x04CECEE9),
- UINT32_C(0x07DF3632), UINT32_C(0x02BFB16E), UINT32_C(0x03AB1AD0),
- UINT32_C(0x0610FCE9) } },
- { { UINT32_C(0x0CE87EAC), UINT32_C(0x00235BF1), UINT32_C(0x0EAE0AF1),
- UINT32_C(0x03D89DD3), UINT32_C(0x0B789073), UINT32_C(0x01AC0815),
- UINT32_C(0x055721C2), UINT32_C(0x0B2BAD77), UINT32_C(0x05787CF1),
- UINT32_C(0x00C70041), UINT32_C(0x00EEE049), UINT32_C(0x0D01B922),
- UINT32_C(0x022A24F8), UINT32_C(0x0317FAC7), UINT32_C(0x0D5F402C),
- UINT32_C(0x0439541B), UINT32_C(0x07D56CC2), UINT32_C(0x00EB80BF),
- UINT32_C(0x00E40AA6) },
- { UINT32_C(0x0A01F6F0), UINT32_C(0x020DA18A), UINT32_C(0x073C68C0),
- UINT32_C(0x05338AFA), UINT32_C(0x0DDC8CB0), UINT32_C(0x001C0CED),
- UINT32_C(0x07A82BBC), UINT32_C(0x081BF5E1), UINT32_C(0x00B876DD),
- UINT32_C(0x09864ED3), UINT32_C(0x07F89153), UINT32_C(0x0A066C82),
- UINT32_C(0x042461BC), UINT32_C(0x07592D13), UINT32_C(0x02DBFA28),
- UINT32_C(0x0371D64F), UINT32_C(0x0326B139), UINT32_C(0x0545030E),
- UINT32_C(0x03B02EDD) } },
- { { UINT32_C(0x0C8AA41D), UINT32_C(0x02999435), UINT32_C(0x011470BE),
- UINT32_C(0x02448ABD), UINT32_C(0x0C3A559A), UINT32_C(0x03DE4EDA),
- UINT32_C(0x0267ACAB), UINT32_C(0x05B64BAF), UINT32_C(0x06167A36),
- UINT32_C(0x080925DF), UINT32_C(0x0748EB2E), UINT32_C(0x0262E572),
- UINT32_C(0x06655A71), UINT32_C(0x02DC7E31), UINT32_C(0x009FA448),
- UINT32_C(0x05991E95), UINT32_C(0x0FA3D04A), UINT32_C(0x0484BE25),
- UINT32_C(0x0438E396) },
- { UINT32_C(0x044C41BB), UINT32_C(0x02EFDFC2), UINT32_C(0x0F459DA9),
- UINT32_C(0x04A94A2D), UINT32_C(0x03F47C03), UINT32_C(0x07FA71AF),
- UINT32_C(0x03DC178C), UINT32_C(0x0129963B), UINT32_C(0x021E1FD4),
- UINT32_C(0x0E7487EB), UINT32_C(0x00C3DDB0), UINT32_C(0x06EE0434),
- UINT32_C(0x06D2712F), UINT32_C(0x07842656), UINT32_C(0x013F8F26),
- UINT32_C(0x01F9766F), UINT32_C(0x061BD12C), UINT32_C(0x02B96EB7),
- UINT32_C(0x01F8FA20) } },
- { { UINT32_C(0x0FB80E07), UINT32_C(0x050B08F2), UINT32_C(0x064554C9),
- UINT32_C(0x078E1F81), UINT32_C(0x09ED8841), UINT32_C(0x0596ADC2),
- UINT32_C(0x034DF164), UINT32_C(0x020E6E12), UINT32_C(0x018EDA4D),
- UINT32_C(0x0174E31B), UINT32_C(0x03B107F1), UINT32_C(0x010EC155),
- UINT32_C(0x07FA899A), UINT32_C(0x0717505D), UINT32_C(0x05819825),
- UINT32_C(0x0542EC55), UINT32_C(0x038DD6D7), UINT32_C(0x0497E5A0),
- UINT32_C(0x03081495) },
- { UINT32_C(0x064986F4), UINT32_C(0x03BD600B), UINT32_C(0x04B78E0D),
- UINT32_C(0x0098465F), UINT32_C(0x0E7E78C0), UINT32_C(0x0127CC0E),
- UINT32_C(0x07A3BC64), UINT32_C(0x001DBF18), UINT32_C(0x06A78B45),
- UINT32_C(0x0D3A5A6B), UINT32_C(0x0682C6C2), UINT32_C(0x0B8EE95B),
- UINT32_C(0x066E64B3), UINT32_C(0x04178CB0), UINT32_C(0x0FC2F66E),
- UINT32_C(0x04EABB3C), UINT32_C(0x084AF2DE), UINT32_C(0x04C297C1),
- UINT32_C(0x0136B06E) } },
- { { UINT32_C(0x07DF6D6E), UINT32_C(0x01F00ED6), UINT32_C(0x02705D3E),
- UINT32_C(0x038023D6), UINT32_C(0x0A85D53D), UINT32_C(0x01C4664A),
- UINT32_C(0x0610B36C), UINT32_C(0x02BAE274), UINT32_C(0x03566DBB),
- UINT32_C(0x0854659C), UINT32_C(0x00F106D4), UINT32_C(0x09D0A630),
- UINT32_C(0x01B5D98A), UINT32_C(0x01B27CA8), UINT32_C(0x0F254343),
- UINT32_C(0x075491B9), UINT32_C(0x025D2274), UINT32_C(0x04F17B63),
- UINT32_C(0x06865DA3) },
- { UINT32_C(0x0D4C1CFE), UINT32_C(0x0612B559), UINT32_C(0x0D29CCC2),
- UINT32_C(0x06835607), UINT32_C(0x0E442A4F), UINT32_C(0x003F2EA3),
- UINT32_C(0x04DA7E80), UINT32_C(0x079ABF17), UINT32_C(0x062A7A50),
- UINT32_C(0x0FE31E03), UINT32_C(0x044D195D), UINT32_C(0x01A9DC51),
- UINT32_C(0x05B8C361), UINT32_C(0x06390D3D), UINT32_C(0x0544BD42),
- UINT32_C(0x02DB7A09), UINT32_C(0x0367E705), UINT32_C(0x01B34C53),
- UINT32_C(0x055F8181) } },
- { { UINT32_C(0x0F3F00C1), UINT32_C(0x04C36A17), UINT32_C(0x0CB05A60),
- UINT32_C(0x05742C4B), UINT32_C(0x029DC7BA), UINT32_C(0x00946765),
- UINT32_C(0x01F6280B), UINT32_C(0x0A250657), UINT32_C(0x057853BE),
- UINT32_C(0x027C17D4), UINT32_C(0x061E6EE7), UINT32_C(0x068934C0),
- UINT32_C(0x0225275D), UINT32_C(0x004E706A), UINT32_C(0x08A0E33D),
- UINT32_C(0x02EFB382), UINT32_C(0x0231B332), UINT32_C(0x045E20A6),
- UINT32_C(0x076538EE) },
- { UINT32_C(0x072461C9), UINT32_C(0x071D932B), UINT32_C(0x099D4C01),
- UINT32_C(0x0401E666), UINT32_C(0x07DB6FB0), UINT32_C(0x049F43E4),
- UINT32_C(0x056167EA), UINT32_C(0x0D49C41D), UINT32_C(0x05F10CA9),
- UINT32_C(0x080EC5BB), UINT32_C(0x05C98C31), UINT32_C(0x01E1F452),
- UINT32_C(0x07E42338), UINT32_C(0x04049AA9), UINT32_C(0x032E5588),
- UINT32_C(0x01E28C9C), UINT32_C(0x04BCDC8D), UINT32_C(0x04309C54),
- UINT32_C(0x02042514) } },
- },
- {
- { { UINT32_C(0x02648196), UINT32_C(0x01BF352B), UINT32_C(0x0FCEC15F),
- UINT32_C(0x02D3A085), UINT32_C(0x011002A5), UINT32_C(0x026E7651),
- UINT32_C(0x021C2A73), UINT32_C(0x0E3392B7), UINT32_C(0x01A26456),
- UINT32_C(0x00E05940), UINT32_C(0x05C6D0D8), UINT32_C(0x085D0F62),
- UINT32_C(0x03B743E5), UINT32_C(0x05B2C76F), UINT32_C(0x0B270AB3),
- UINT32_C(0x076B0EF8), UINT32_C(0x0E5EF80C), UINT32_C(0x0751E040),
- UINT32_C(0x0769C73A) },
- { UINT32_C(0x0D9BC7BB), UINT32_C(0x01B398D4), UINT32_C(0x094E3D5E),
- UINT32_C(0x0679261C), UINT32_C(0x0F579BC0), UINT32_C(0x0087234F),
- UINT32_C(0x01C48CDA), UINT32_C(0x01065BB9), UINT32_C(0x04A8A1F3),
- UINT32_C(0x097D469B), UINT32_C(0x046FC17A), UINT32_C(0x00CAE969),
- UINT32_C(0x02E690B5), UINT32_C(0x0187C437), UINT32_C(0x000FCD13),
- UINT32_C(0x07C0FA30), UINT32_C(0x02F0D63C), UINT32_C(0x0583AE53),
- UINT32_C(0x036A77FE) } },
- { { UINT32_C(0x01DE62A2), UINT32_C(0x03B6F417), UINT32_C(0x08D8470C),
- UINT32_C(0x041AB290), UINT32_C(0x0D3155E4), UINT32_C(0x043123A7),
- UINT32_C(0x06EC3DAC), UINT32_C(0x09575F29), UINT32_C(0x05CC8C01),
- UINT32_C(0x028CF2E0), UINT32_C(0x00BB01F9), UINT32_C(0x01E4C554),
- UINT32_C(0x07B3F1F5), UINT32_C(0x00E4DC2E), UINT32_C(0x0F6F4AA9),
- UINT32_C(0x03F7C702), UINT32_C(0x0EC18583), UINT32_C(0x02949031),
- UINT32_C(0x05C16F04) },
- { UINT32_C(0x03BFC242), UINT32_C(0x06AF3468), UINT32_C(0x0509C734),
- UINT32_C(0x002581C3), UINT32_C(0x0CD6F167), UINT32_C(0x068B6408),
- UINT32_C(0x07D05F00), UINT32_C(0x0D520CDF), UINT32_C(0x02C463E5),
- UINT32_C(0x003D2B75), UINT32_C(0x02640D09), UINT32_C(0x0C38D324),
- UINT32_C(0x016E198B), UINT32_C(0x01BF3B79), UINT32_C(0x08EFB3AE),
- UINT32_C(0x01B11ADD), UINT32_C(0x0428FEBD), UINT32_C(0x0288A4BC),
- UINT32_C(0x02ED3D8D) } },
- { { UINT32_C(0x0FE3927A), UINT32_C(0x004463DC), UINT32_C(0x0A23634B),
- UINT32_C(0x02C96252), UINT32_C(0x088ACC38), UINT32_C(0x003687F2),
- UINT32_C(0x07070A41), UINT32_C(0x0A3D6F58), UINT32_C(0x02ACC6F9),
- UINT32_C(0x07A117B7), UINT32_C(0x04BF3041), UINT32_C(0x006C3D57),
- UINT32_C(0x05E2A443), UINT32_C(0x00D534BB), UINT32_C(0x01838CCA),
- UINT32_C(0x07E9698D), UINT32_C(0x0463E2DC), UINT32_C(0x05A8243F),
- UINT32_C(0x02BC2618) },
- { UINT32_C(0x0EBC6638), UINT32_C(0x04B3F3FB), UINT32_C(0x0A7F699B),
- UINT32_C(0x070541A8), UINT32_C(0x00275BF7), UINT32_C(0x0335548D),
- UINT32_C(0x00C681F5), UINT32_C(0x0AE9575E), UINT32_C(0x02032835),
- UINT32_C(0x027F35BF), UINT32_C(0x00A83998), UINT32_C(0x04869978),
- UINT32_C(0x04F819CA), UINT32_C(0x075D1DAF), UINT32_C(0x0B79E387),
- UINT32_C(0x033A57AB), UINT32_C(0x057298F2), UINT32_C(0x0583C4E3),
- UINT32_C(0x067E752D) } },
- { { UINT32_C(0x06B4D0F2), UINT32_C(0x059C637E), UINT32_C(0x0515A54F),
- UINT32_C(0x01CB93DA), UINT32_C(0x0AF87FEF), UINT32_C(0x07247119),
- UINT32_C(0x0368E1D8), UINT32_C(0x0287508B), UINT32_C(0x04E3B00B),
- UINT32_C(0x03EDF00C), UINT32_C(0x0060EB2B), UINT32_C(0x009B64B7),
- UINT32_C(0x0059A064), UINT32_C(0x02C48CC2), UINT32_C(0x0D938166),
- UINT32_C(0x039A77EF), UINT32_C(0x04F26973), UINT32_C(0x015B1DA7),
- UINT32_C(0x048D6DB3) },
- { UINT32_C(0x011EBBDB), UINT32_C(0x06BC0045), UINT32_C(0x0275B56E),
- UINT32_C(0x03B89420), UINT32_C(0x013420FC), UINT32_C(0x076F18E5),
- UINT32_C(0x00A74F63), UINT32_C(0x0E0F64B7), UINT32_C(0x00503282),
- UINT32_C(0x094735D1), UINT32_C(0x013CC6D6), UINT32_C(0x0E5C0E1C),
- UINT32_C(0x015BA8D6), UINT32_C(0x07D45F0A), UINT32_C(0x0A29FE38),
- UINT32_C(0x0029F319), UINT32_C(0x03AC2D85), UINT32_C(0x027ECAF3),
- UINT32_C(0x029D9051) } },
- { { UINT32_C(0x0EA400A9), UINT32_C(0x0158306B), UINT32_C(0x015222F8),
- UINT32_C(0x07A029A5), UINT32_C(0x01BD2907), UINT32_C(0x0570C0F6),
- UINT32_C(0x0751FAE1), UINT32_C(0x07964BF7), UINT32_C(0x009AA3B7),
- UINT32_C(0x03DF8285), UINT32_C(0x005D2075), UINT32_C(0x0DDBE6E5),
- UINT32_C(0x04FB407B), UINT32_C(0x05ABE7D8), UINT32_C(0x0C49401A),
- UINT32_C(0x04BA9696), UINT32_C(0x03CCE450), UINT32_C(0x04636480),
- UINT32_C(0x03F1ABE9) },
- { UINT32_C(0x03EA1F68), UINT32_C(0x0676F7FA), UINT32_C(0x078995D6),
- UINT32_C(0x01690C80), UINT32_C(0x0DDD1529), UINT32_C(0x007F78C9),
- UINT32_C(0x0408771E), UINT32_C(0x0513A792), UINT32_C(0x003B85AB),
- UINT32_C(0x016D7EB5), UINT32_C(0x05E5699C), UINT32_C(0x0BECEE12),
- UINT32_C(0x00107C5D), UINT32_C(0x00E4EB89), UINT32_C(0x02F4C652),
- UINT32_C(0x04E39F7A), UINT32_C(0x034AED07), UINT32_C(0x0212550E),
- UINT32_C(0x0188E07E) } },
- { { UINT32_C(0x0FBBA24C), UINT32_C(0x01E20A63), UINT32_C(0x0FA95AAC),
- UINT32_C(0x01C44416), UINT32_C(0x0F08DC76), UINT32_C(0x043CBDF1),
- UINT32_C(0x012ABC29), UINT32_C(0x0F6C4233), UINT32_C(0x06107D90),
- UINT32_C(0x002CBE36), UINT32_C(0x05234963), UINT32_C(0x059E8B8F),
- UINT32_C(0x06167695), UINT32_C(0x04B21ABA), UINT32_C(0x094ABDA3),
- UINT32_C(0x01B5AF79), UINT32_C(0x00351EF1), UINT32_C(0x03FE1EFE),
- UINT32_C(0x03E83BD1) },
- { UINT32_C(0x04ADEFE3), UINT32_C(0x028AF72F), UINT32_C(0x09E0C0D6),
- UINT32_C(0x0104ED8F), UINT32_C(0x0AE0148F), UINT32_C(0x02B05ACD),
- UINT32_C(0x066B1ED0), UINT32_C(0x0A3C6BFA), UINT32_C(0x032BBFF9),
- UINT32_C(0x0F66AD88), UINT32_C(0x04A9A376), UINT32_C(0x0AF0D447),
- UINT32_C(0x047BD087), UINT32_C(0x005F677C), UINT32_C(0x014088B0),
- UINT32_C(0x00EDD8EE), UINT32_C(0x0598516D), UINT32_C(0x03FE1205),
- UINT32_C(0x073098DE) } },
- { { UINT32_C(0x02841A85), UINT32_C(0x0451A0F7), UINT32_C(0x076BCBFC),
- UINT32_C(0x027E002B), UINT32_C(0x04ACD1B5), UINT32_C(0x03AADBAC),
- UINT32_C(0x011F71FA), UINT32_C(0x0E1089CF), UINT32_C(0x058740CA),
- UINT32_C(0x06DB26BB), UINT32_C(0x02494970), UINT32_C(0x07CCD9E0),
- UINT32_C(0x05749062), UINT32_C(0x061E24EF), UINT32_C(0x0BA44927),
- UINT32_C(0x01396A99), UINT32_C(0x0C2129A5), UINT32_C(0x06C4E538),
- UINT32_C(0x02D308F2) },
- { UINT32_C(0x0E7B0D82), UINT32_C(0x0295DE15), UINT32_C(0x059C10B0),
- UINT32_C(0x0240D76A), UINT32_C(0x0AA33AC3), UINT32_C(0x02D5D368),
- UINT32_C(0x05DF8706), UINT32_C(0x0A4B7001), UINT32_C(0x031DBF6C),
- UINT32_C(0x0BC72CD8), UINT32_C(0x046962A7), UINT32_C(0x0D13BB53),
- UINT32_C(0x039B98C0), UINT32_C(0x05AA84ED), UINT32_C(0x058D2735),
- UINT32_C(0x0508AB59), UINT32_C(0x085DF0E3), UINT32_C(0x06AA60D9),
- UINT32_C(0x0192578B) } },
- { { UINT32_C(0x052517BF), UINT32_C(0x07C0E587), UINT32_C(0x038A5531),
- UINT32_C(0x03EE1FF1), UINT32_C(0x062AB6E8), UINT32_C(0x06EF4CCB),
- UINT32_C(0x00A09F25), UINT32_C(0x0DBE8342), UINT32_C(0x01D7E02F),
- UINT32_C(0x094C49AE), UINT32_C(0x01445CE4), UINT32_C(0x0F435B7F),
- UINT32_C(0x07CDF16E), UINT32_C(0x009B8491), UINT32_C(0x0B24E6F7),
- UINT32_C(0x01648959), UINT32_C(0x00615CA9), UINT32_C(0x014879FC),
- UINT32_C(0x015CCCCE) },
- { UINT32_C(0x0BB6E5C0), UINT32_C(0x072270A8), UINT32_C(0x02BC713E),
- UINT32_C(0x0194AF0E), UINT32_C(0x0745C682), UINT32_C(0x00066C6F),
- UINT32_C(0x03D36CF5), UINT32_C(0x0593CBB1), UINT32_C(0x05AE790D),
- UINT32_C(0x06B1FF53), UINT32_C(0x0620A507), UINT32_C(0x0CB462BF),
- UINT32_C(0x068C215C), UINT32_C(0x06AB108C), UINT32_C(0x0B7E3900),
- UINT32_C(0x03D88910), UINT32_C(0x0539E087), UINT32_C(0x04AE3141),
- UINT32_C(0x035ED7D6) } },
- { { UINT32_C(0x0254F3D7), UINT32_C(0x06792204), UINT32_C(0x0230569F),
- UINT32_C(0x03D3FDA9), UINT32_C(0x0B84DD99), UINT32_C(0x07725C4C),
- UINT32_C(0x06B0E7C3), UINT32_C(0x0B78D3DF), UINT32_C(0x078AC360),
- UINT32_C(0x06CAB919), UINT32_C(0x02F4F70A), UINT32_C(0x013A8BD5),
- UINT32_C(0x021D73E0), UINT32_C(0x044B1B4D), UINT32_C(0x0E88A7D4),
- UINT32_C(0x05BAA6EC), UINT32_C(0x0526DE60), UINT32_C(0x01D8806A),
- UINT32_C(0x04244303) },
- { UINT32_C(0x0108C612), UINT32_C(0x0395A34F), UINT32_C(0x0339198F),
- UINT32_C(0x01F179EC), UINT32_C(0x0708D6F3), UINT32_C(0x01DF5235),
- UINT32_C(0x0232C546), UINT32_C(0x030C41B0), UINT32_C(0x015FE8CF),
- UINT32_C(0x0F21BBB4), UINT32_C(0x0323FD77), UINT32_C(0x06DD81ED),
- UINT32_C(0x04136906), UINT32_C(0x054B66A1), UINT32_C(0x0CBBD05A),
- UINT32_C(0x0336CEE8), UINT32_C(0x0FCF1FFD), UINT32_C(0x041BBD8F),
- UINT32_C(0x07AB12C9) } },
- { { UINT32_C(0x0BBE227D), UINT32_C(0x05858F23), UINT32_C(0x04BF491E),
- UINT32_C(0x05728183), UINT32_C(0x079C714E), UINT32_C(0x022A1FCF),
- UINT32_C(0x01EF871B), UINT32_C(0x09EDB7B8), UINT32_C(0x01D525A3),
- UINT32_C(0x0A87DA27), UINT32_C(0x043F0A4E), UINT32_C(0x09B1CDD1),
- UINT32_C(0x00B92721), UINT32_C(0x00B6CCD6), UINT32_C(0x0D63DB15),
- UINT32_C(0x023CE576), UINT32_C(0x0C4080E4), UINT32_C(0x033F2061),
- UINT32_C(0x031AA1D9) },
- { UINT32_C(0x07EC3A20), UINT32_C(0x01C69A3A), UINT32_C(0x001C25C7),
- UINT32_C(0x0210B9C8), UINT32_C(0x08BDFFA8), UINT32_C(0x02E8214B),
- UINT32_C(0x017C3E9B), UINT32_C(0x084D91D9), UINT32_C(0x038B3D24),
- UINT32_C(0x0EC9081E), UINT32_C(0x026E58E8), UINT32_C(0x032908AE),
- UINT32_C(0x02B2F37D), UINT32_C(0x058B11CB), UINT32_C(0x07538C24),
- UINT32_C(0x06945091), UINT32_C(0x0F538568), UINT32_C(0x064897F5),
- UINT32_C(0x03110AAF) } },
- { { UINT32_C(0x093E7BB1), UINT32_C(0x026B09F0), UINT32_C(0x0763D63D),
- UINT32_C(0x01CAD134), UINT32_C(0x053290E7), UINT32_C(0x03190F55),
- UINT32_C(0x05929346), UINT32_C(0x090E1278), UINT32_C(0x01D360D4),
- UINT32_C(0x0AE8B6AE), UINT32_C(0x036A79E4), UINT32_C(0x08B891A0),
- UINT32_C(0x0448F896), UINT32_C(0x02316FA4), UINT32_C(0x0B3F9158),
- UINT32_C(0x045DAD8C), UINT32_C(0x073BD91F), UINT32_C(0x0407FC71),
- UINT32_C(0x0403F724) },
- { UINT32_C(0x0C0213B3), UINT32_C(0x04667E35), UINT32_C(0x0E2CEB9C),
- UINT32_C(0x064EC72A), UINT32_C(0x0A339F01), UINT32_C(0x01E44700),
- UINT32_C(0x029951E3), UINT32_C(0x0F9E1903), UINT32_C(0x0760075A),
- UINT32_C(0x0B3FB167), UINT32_C(0x015349C6), UINT32_C(0x04915326),
- UINT32_C(0x06972404), UINT32_C(0x03D0B541), UINT32_C(0x0FFB253E),
- UINT32_C(0x0670C067), UINT32_C(0x017EDCC3), UINT32_C(0x06348A30),
- UINT32_C(0x0755DC54) } },
- { { UINT32_C(0x0D72BA02), UINT32_C(0x07FF1EEA), UINT32_C(0x0066BDAD),
- UINT32_C(0x039D956A), UINT32_C(0x04E892D7), UINT32_C(0x052419F2),
- UINT32_C(0x034B725A), UINT32_C(0x095A35DA), UINT32_C(0x05559103),
- UINT32_C(0x018A8F9F), UINT32_C(0x04FC3975), UINT32_C(0x0D1740D2),
- UINT32_C(0x0375B900), UINT32_C(0x0761403F), UINT32_C(0x0B953A5F),
- UINT32_C(0x04F2FF71), UINT32_C(0x0E1B0B58), UINT32_C(0x07D8573F),
- UINT32_C(0x053E8C3E) },
- { UINT32_C(0x055A3B73), UINT32_C(0x04EBD845), UINT32_C(0x0D3A5D27),
- UINT32_C(0x03216043), UINT32_C(0x0A2D5A11), UINT32_C(0x03D32430),
- UINT32_C(0x063F87FD), UINT32_C(0x0DBF84E0), UINT32_C(0x04C9934A),
- UINT32_C(0x08BE9480), UINT32_C(0x02F6DE30), UINT32_C(0x052DB294),
- UINT32_C(0x03230313), UINT32_C(0x04592516), UINT32_C(0x0B992B10),
- UINT32_C(0x03125EE2), UINT32_C(0x0445BCF9), UINT32_C(0x07349143),
- UINT32_C(0x05A112C7) } },
- { { UINT32_C(0x0EA0B318), UINT32_C(0x03F1B159), UINT32_C(0x0487E52E),
- UINT32_C(0x05D27B9C), UINT32_C(0x0EBAD615), UINT32_C(0x0459C5D9),
- UINT32_C(0x073079D5), UINT32_C(0x078FD2D4), UINT32_C(0x006B7643),
- UINT32_C(0x0A73DC2C), UINT32_C(0x041938CF), UINT32_C(0x098897E0),
- UINT32_C(0x07660928), UINT32_C(0x058BF110), UINT32_C(0x0696BC61),
- UINT32_C(0x07DE18FC), UINT32_C(0x0B815951), UINT32_C(0x04662BC8),
- UINT32_C(0x054FF046) },
- { UINT32_C(0x052466CC), UINT32_C(0x02C9E253), UINT32_C(0x07D1C495),
- UINT32_C(0x024A0473), UINT32_C(0x0E5AEABA), UINT32_C(0x06DFF20F),
- UINT32_C(0x03CCEFD9), UINT32_C(0x0F806D4B), UINT32_C(0x0192D911),
- UINT32_C(0x06A7E064), UINT32_C(0x0136BD6C), UINT32_C(0x03CF3E59),
- UINT32_C(0x036C910C), UINT32_C(0x02852F51), UINT32_C(0x0D2261F6),
- UINT32_C(0x07B11789), UINT32_C(0x05D5440C), UINT32_C(0x068EB2BF),
- UINT32_C(0x07C9D3D2) } },
- { { UINT32_C(0x03F78C83), UINT32_C(0x026282EB), UINT32_C(0x0E7E58C8),
- UINT32_C(0x01460384), UINT32_C(0x07F8288C), UINT32_C(0x004DDB38),
- UINT32_C(0x068A22C1), UINT32_C(0x03B4E4B7), UINT32_C(0x046EC7F7),
- UINT32_C(0x0F499BF8), UINT32_C(0x00E98F9D), UINT32_C(0x0201835A),
- UINT32_C(0x06CDC18D), UINT32_C(0x054E87E0), UINT32_C(0x09E1190B),
- UINT32_C(0x07C8570C), UINT32_C(0x0EE788C0), UINT32_C(0x003B8466),
- UINT32_C(0x0513D8F7) },
- { UINT32_C(0x082AE76F), UINT32_C(0x0467154F), UINT32_C(0x090D360C),
- UINT32_C(0x04725E35), UINT32_C(0x077F0A4A), UINT32_C(0x01658344),
- UINT32_C(0x07BFD41E), UINT32_C(0x0816DFE5), UINT32_C(0x01A64B33),
- UINT32_C(0x07DEC344), UINT32_C(0x0404AABD), UINT32_C(0x0DD22DB3),
- UINT32_C(0x0372E5A1), UINT32_C(0x01DD7525), UINT32_C(0x01C8CACD),
- UINT32_C(0x06A4B923), UINT32_C(0x0CD78815), UINT32_C(0x03B62E43),
- UINT32_C(0x0182DCE0) } },
- { { UINT32_C(0x04B1FB35), UINT32_C(0x0061A026), UINT32_C(0x099D37D7),
- UINT32_C(0x046459E6), UINT32_C(0x0E8A57EF), UINT32_C(0x001BD06E),
- UINT32_C(0x04A92B84), UINT32_C(0x06098C4C), UINT32_C(0x0358B593),
- UINT32_C(0x0D4DFE1C), UINT32_C(0x063599D3), UINT32_C(0x02DD18DC),
- UINT32_C(0x03007901), UINT32_C(0x01E9DD8D), UINT32_C(0x0400CC35),
- UINT32_C(0x0778E5F5), UINT32_C(0x05D5B6A3), UINT32_C(0x02FD411C),
- UINT32_C(0x02B425A2) },
- { UINT32_C(0x03812C10), UINT32_C(0x03B78EFC), UINT32_C(0x09532CE4),
- UINT32_C(0x04F7D4A9), UINT32_C(0x0F7C04C8), UINT32_C(0x0683AE68),
- UINT32_C(0x011B6140), UINT32_C(0x0156737D), UINT32_C(0x035A4EB9),
- UINT32_C(0x0A0B7443), UINT32_C(0x064319EB), UINT32_C(0x0B315217),
- UINT32_C(0x049C0FB2), UINT32_C(0x004E46BC), UINT32_C(0x0318D072),
- UINT32_C(0x052D3EA9), UINT32_C(0x06A15FA8), UINT32_C(0x02E0D5AB),
- UINT32_C(0x008DD356) } },
- { { UINT32_C(0x0D00894F), UINT32_C(0x0415F67D), UINT32_C(0x0C243D11),
- UINT32_C(0x02B8C573), UINT32_C(0x05C886B6), UINT32_C(0x073E2A37),
- UINT32_C(0x01B4E4FA), UINT32_C(0x09A09251), UINT32_C(0x020282E5),
- UINT32_C(0x0BCA7D2D), UINT32_C(0x066FF292), UINT32_C(0x09926C99),
- UINT32_C(0x03617A48), UINT32_C(0x01530215), UINT32_C(0x063E7DBA),
- UINT32_C(0x078B1DFB), UINT32_C(0x0C3844B7), UINT32_C(0x03201272),
- UINT32_C(0x0778B4FA) },
- { UINT32_C(0x09305F18), UINT32_C(0x04DACE51), UINT32_C(0x0D07FE4D),
- UINT32_C(0x04990FE7), UINT32_C(0x07120719), UINT32_C(0x07AE031B),
- UINT32_C(0x003430FE), UINT32_C(0x00C1FBD4), UINT32_C(0x036A0A51),
- UINT32_C(0x0A6A12BB), UINT32_C(0x072B00FE), UINT32_C(0x0F112F16),
- UINT32_C(0x002D898C), UINT32_C(0x00D7F3F0), UINT32_C(0x02CCB574),
- UINT32_C(0x076345FF), UINT32_C(0x02C9358F), UINT32_C(0x017BCB4B),
- UINT32_C(0x0579734A) } },
- },
- {
- { { UINT32_C(0x0F0DB502), UINT32_C(0x007283D0), UINT32_C(0x08EF623D),
- UINT32_C(0x03EA8C5E), UINT32_C(0x0A209E1F), UINT32_C(0x03A40740),
- UINT32_C(0x02F81888), UINT32_C(0x0722A969), UINT32_C(0x03DCF02A),
- UINT32_C(0x0B8BF42D), UINT32_C(0x046BF6EC), UINT32_C(0x04E7DE79),
- UINT32_C(0x032FE5DF), UINT32_C(0x01C17AC3), UINT32_C(0x088F43CD),
- UINT32_C(0x06D316FF), UINT32_C(0x00B6FB94), UINT32_C(0x03A7A692),
- UINT32_C(0x03E132AC) },
- { UINT32_C(0x045CE248), UINT32_C(0x0462F43F), UINT32_C(0x09F103B7),
- UINT32_C(0x03CE6503), UINT32_C(0x02C55CD7), UINT32_C(0x01FAC8B9),
- UINT32_C(0x07F7D41F), UINT32_C(0x049B3922), UINT32_C(0x0538164A),
- UINT32_C(0x0C32168B), UINT32_C(0x021D15D5), UINT32_C(0x0FBE7AB4),
- UINT32_C(0x049ABD36), UINT32_C(0x06689278), UINT32_C(0x090906E0),
- UINT32_C(0x02853127), UINT32_C(0x032C40D9), UINT32_C(0x0284E722),
- UINT32_C(0x05B9DA3D) } },
- { { UINT32_C(0x08B06389), UINT32_C(0x039D7B29), UINT32_C(0x026E0D8E),
- UINT32_C(0x038E31F2), UINT32_C(0x0F482001), UINT32_C(0x046C5627),
- UINT32_C(0x0153F461), UINT32_C(0x0FC4C626), UINT32_C(0x035A22C9),
- UINT32_C(0x0CB5BCED), UINT32_C(0x032AE85F), UINT32_C(0x097105A2),
- UINT32_C(0x0661090D), UINT32_C(0x02190C38), UINT32_C(0x05F88BB1),
- UINT32_C(0x020AFD4B), UINT32_C(0x07693E86), UINT32_C(0x036234B0),
- UINT32_C(0x0201EE7C) },
- { UINT32_C(0x05177EBC), UINT32_C(0x07334497), UINT32_C(0x021FB6DB),
- UINT32_C(0x00E242A1), UINT32_C(0x06ACC48D), UINT32_C(0x0617860E),
- UINT32_C(0x04002467), UINT32_C(0x006684B4), UINT32_C(0x005E7367),
- UINT32_C(0x02210321), UINT32_C(0x06AE2E12), UINT32_C(0x0A170483),
- UINT32_C(0x06811FED), UINT32_C(0x02AF7598), UINT32_C(0x099B28F0),
- UINT32_C(0x04B2EAC3), UINT32_C(0x03144E87), UINT32_C(0x052C741C),
- UINT32_C(0x00219EE8) } },
- { { UINT32_C(0x00581DC0), UINT32_C(0x076911B9), UINT32_C(0x03F907DF),
- UINT32_C(0x00FD8CCC), UINT32_C(0x0BD0DFDF), UINT32_C(0x0388BBE8),
- UINT32_C(0x0549C09A), UINT32_C(0x0387AC55), UINT32_C(0x07AF40E6),
- UINT32_C(0x0981B7A5), UINT32_C(0x05ADE4BE), UINT32_C(0x052D5C55),
- UINT32_C(0x076A04D2), UINT32_C(0x032751B9), UINT32_C(0x0BCE279F),
- UINT32_C(0x034D2A39), UINT32_C(0x0AEDCDAE), UINT32_C(0x00365DC7),
- UINT32_C(0x03453CBF) },
- { UINT32_C(0x0FAB453E), UINT32_C(0x011CF084), UINT32_C(0x09E21C47),
- UINT32_C(0x06CF3197), UINT32_C(0x00831296), UINT32_C(0x057F4CE5),
- UINT32_C(0x020F8EE8), UINT32_C(0x05B31872), UINT32_C(0x0779598D),
- UINT32_C(0x07C7AC32), UINT32_C(0x05B64DC4), UINT32_C(0x0E058DB2),
- UINT32_C(0x060142F5), UINT32_C(0x0757FAC8), UINT32_C(0x0320EFE8),
- UINT32_C(0x03D158EA), UINT32_C(0x025240D2), UINT32_C(0x0116989D),
- UINT32_C(0x04BFB887) } },
- { { UINT32_C(0x0DB8A57B), UINT32_C(0x0056DCD3), UINT32_C(0x0355B904),
- UINT32_C(0x03D5725A), UINT32_C(0x007C7371), UINT32_C(0x00CF4193),
- UINT32_C(0x020AD78C), UINT32_C(0x0305EFAF), UINT32_C(0x03715E8F),
- UINT32_C(0x04E06800), UINT32_C(0x0464FE0B), UINT32_C(0x041671C5),
- UINT32_C(0x07289FAC), UINT32_C(0x045EC338), UINT32_C(0x049BEE4D),
- UINT32_C(0x06F62A0E), UINT32_C(0x04025E36), UINT32_C(0x05D25CE9),
- UINT32_C(0x07C568B5) },
- { UINT32_C(0x0D4BD6B6), UINT32_C(0x00933993), UINT32_C(0x0B7EEBBA),
- UINT32_C(0x0281309E), UINT32_C(0x065E8268), UINT32_C(0x035579CF),
- UINT32_C(0x05550C9A), UINT32_C(0x0D7980B4), UINT32_C(0x0531F076),
- UINT32_C(0x0CD2F37E), UINT32_C(0x03059FC3), UINT32_C(0x00281179),
- UINT32_C(0x019AAC99), UINT32_C(0x017555A7), UINT32_C(0x0FF849A4),
- UINT32_C(0x04EE5361), UINT32_C(0x08C87DDE), UINT32_C(0x004920CB),
- UINT32_C(0x0472AE6B) } },
- { { UINT32_C(0x05AD0B4E), UINT32_C(0x0000D01D), UINT32_C(0x0A1C822E),
- UINT32_C(0x004A7A0A), UINT32_C(0x0AA08F1E), UINT32_C(0x05917BCC),
- UINT32_C(0x073D4A38), UINT32_C(0x06389FF3), UINT32_C(0x047A94F0),
- UINT32_C(0x06710D9B), UINT32_C(0x0752964E), UINT32_C(0x030EF732),
- UINT32_C(0x01AE9023), UINT32_C(0x0752E2B4), UINT32_C(0x0343C25C),
- UINT32_C(0x04C0A3C3), UINT32_C(0x0B4EFABB), UINT32_C(0x079ACB07),
- UINT32_C(0x05BEE507) },
- { UINT32_C(0x03494AD9), UINT32_C(0x05EA99AF), UINT32_C(0x0389480B),
- UINT32_C(0x05160DCE), UINT32_C(0x010C3CBB), UINT32_C(0x04B92C2A),
- UINT32_C(0x05F2D771), UINT32_C(0x0A57A2FD), UINT32_C(0x007C232D),
- UINT32_C(0x0ECF6652), UINT32_C(0x06762C3E), UINT32_C(0x0531B5E7),
- UINT32_C(0x03E82FC8), UINT32_C(0x01820A9D), UINT32_C(0x010298C1),
- UINT32_C(0x040BB915), UINT32_C(0x06C4DE5F), UINT32_C(0x00F95873),
- UINT32_C(0x00D564BB) } },
- { { UINT32_C(0x06647B76), UINT32_C(0x05951386), UINT32_C(0x01C3CEEE),
- UINT32_C(0x05B4A2A9), UINT32_C(0x00C0D10D), UINT32_C(0x07198ABC),
- UINT32_C(0x0344EBA4), UINT32_C(0x01102AAD), UINT32_C(0x00A6BD8E),
- UINT32_C(0x041FD3B9), UINT32_C(0x072FD40E), UINT32_C(0x04DF271A),
- UINT32_C(0x07951CEE), UINT32_C(0x0434A805), UINT32_C(0x03CBC676),
- UINT32_C(0x07E6DD9D), UINT32_C(0x037A89AF), UINT32_C(0x01076ABD),
- UINT32_C(0x00509445) },
- { UINT32_C(0x0D8A2C33), UINT32_C(0x05E083E6), UINT32_C(0x05C0317D),
- UINT32_C(0x0602A2EA), UINT32_C(0x00A16254), UINT32_C(0x065050EB),
- UINT32_C(0x014C68D6), UINT32_C(0x0EA8DF00), UINT32_C(0x002096BA),
- UINT32_C(0x00D2E7B4), UINT32_C(0x03580F1C), UINT32_C(0x0237FA0E),
- UINT32_C(0x01C7F56A), UINT32_C(0x054A6A4F), UINT32_C(0x03E879F4),
- UINT32_C(0x008B47F5), UINT32_C(0x0EDF35FC), UINT32_C(0x01F3F7F0),
- UINT32_C(0x03E78806) } },
- { { UINT32_C(0x038F6A40), UINT32_C(0x05B8DCB9), UINT32_C(0x07D27CDC),
- UINT32_C(0x03392DA1), UINT32_C(0x066611C2), UINT32_C(0x066344AA),
- UINT32_C(0x05F431C8), UINT32_C(0x07255E87), UINT32_C(0x0135642A),
- UINT32_C(0x051CFCBA), UINT32_C(0x045D25F5), UINT32_C(0x08BB7E3A),
- UINT32_C(0x022605AB), UINT32_C(0x00C874AA), UINT32_C(0x0195652F),
- UINT32_C(0x00E16A23), UINT32_C(0x0D18A297), UINT32_C(0x024B6188),
- UINT32_C(0x025A9403) },
- { UINT32_C(0x04F1EAD3), UINT32_C(0x03669651), UINT32_C(0x0E87093B),
- UINT32_C(0x05F1CF35), UINT32_C(0x019B74E6), UINT32_C(0x0177BF8B),
- UINT32_C(0x036B76B9), UINT32_C(0x0B817B29), UINT32_C(0x009C77FA),
- UINT32_C(0x0202860C), UINT32_C(0x01D1AB54), UINT32_C(0x0B180712),
- UINT32_C(0x06B274AA), UINT32_C(0x0121DBED), UINT32_C(0x0AEA446B),
- UINT32_C(0x044661E9), UINT32_C(0x0C3EE1D4), UINT32_C(0x045027EE),
- UINT32_C(0x014C275F) } },
- { { UINT32_C(0x004023FD), UINT32_C(0x01669241), UINT32_C(0x0693C19B),
- UINT32_C(0x0058FB3D), UINT32_C(0x0756B182), UINT32_C(0x075D0BEC),
- UINT32_C(0x07A393EF), UINT32_C(0x0B75B610), UINT32_C(0x07D0B5FD),
- UINT32_C(0x060DEE19), UINT32_C(0x02373BD5), UINT32_C(0x0A1D84BA),
- UINT32_C(0x07E8F3AA), UINT32_C(0x01D80791), UINT32_C(0x09D535D0),
- UINT32_C(0x01AB79C2), UINT32_C(0x0D7911BC), UINT32_C(0x03496555),
- UINT32_C(0x0370FC52) },
- { UINT32_C(0x0CA626DD), UINT32_C(0x018A8079), UINT32_C(0x02E35F36),
- UINT32_C(0x00EF1C67), UINT32_C(0x0942648A), UINT32_C(0x05578B93),
- UINT32_C(0x07DDB397), UINT32_C(0x095E9BED), UINT32_C(0x07DEB648),
- UINT32_C(0x020D82EB), UINT32_C(0x02384172), UINT32_C(0x0988C739),
- UINT32_C(0x035C1ACA), UINT32_C(0x053C61ED), UINT32_C(0x036A12D0),
- UINT32_C(0x070600B9), UINT32_C(0x05505FED), UINT32_C(0x04D77717),
- UINT32_C(0x04E32DD7) } },
- { { UINT32_C(0x0F32AB3F), UINT32_C(0x03271637), UINT32_C(0x01E6E3C1),
- UINT32_C(0x04B433DF), UINT32_C(0x0313D761), UINT32_C(0x01F05C43),
- UINT32_C(0x01B6E232), UINT32_C(0x0B782E36), UINT32_C(0x0142A283),
- UINT32_C(0x06A37377), UINT32_C(0x063B9255), UINT32_C(0x05FF47C8),
- UINT32_C(0x02270CEE), UINT32_C(0x04B3AC67), UINT32_C(0x07D72B62),
- UINT32_C(0x006133F9), UINT32_C(0x0BFDFB85), UINT32_C(0x04FE3C0B),
- UINT32_C(0x0406E239) },
- { UINT32_C(0x0737D38E), UINT32_C(0x07FBCD12), UINT32_C(0x00F51FBD),
- UINT32_C(0x02A182A2), UINT32_C(0x062DA827), UINT32_C(0x01D9AB6A),
- UINT32_C(0x0539AEBA), UINT32_C(0x0AB608B0), UINT32_C(0x0226B3BB),
- UINT32_C(0x0ED7323F), UINT32_C(0x04ADDB11), UINT32_C(0x05B1E5DF),
- UINT32_C(0x013ECB65), UINT32_C(0x0282983F), UINT32_C(0x02BDD0BD),
- UINT32_C(0x07F0D675), UINT32_C(0x0C80C17E), UINT32_C(0x06B40353),
- UINT32_C(0x01D570D9) } },
- { { UINT32_C(0x0D4D4113), UINT32_C(0x0371ACBF), UINT32_C(0x076D0600),
- UINT32_C(0x06867748), UINT32_C(0x0267DC5C), UINT32_C(0x04199EE8),
- UINT32_C(0x015FF11F), UINT32_C(0x01DBB00A), UINT32_C(0x03C8E489),
- UINT32_C(0x0218373A), UINT32_C(0x00180AE9), UINT32_C(0x0A2CAFBC),
- UINT32_C(0x016437D1), UINT32_C(0x058A25D0), UINT32_C(0x0AB57613),
- UINT32_C(0x07DF8B7E), UINT32_C(0x0985AF6A), UINT32_C(0x04CCAE37),
- UINT32_C(0x0300D01F) },
- { UINT32_C(0x092A3113), UINT32_C(0x05B20515), UINT32_C(0x0F0E530A),
- UINT32_C(0x0605CBBF), UINT32_C(0x05FD19B3), UINT32_C(0x01593B38),
- UINT32_C(0x003D988A), UINT32_C(0x03D76657), UINT32_C(0x017E79DC),
- UINT32_C(0x02EC918C), UINT32_C(0x069A3B0F), UINT32_C(0x06FB78CA),
- UINT32_C(0x07B0B30F), UINT32_C(0x0224A884), UINT32_C(0x0FF6CD50),
- UINT32_C(0x07D9D639), UINT32_C(0x0D753C54), UINT32_C(0x04ED3D38),
- UINT32_C(0x01E9C727) } },
- { { UINT32_C(0x0201CD59), UINT32_C(0x01D5BE35), UINT32_C(0x0B2E0772),
- UINT32_C(0x04E8E2C3), UINT32_C(0x06C76E20), UINT32_C(0x01464A0E),
- UINT32_C(0x056C1CE9), UINT32_C(0x04E3B528), UINT32_C(0x037AAFAB),
- UINT32_C(0x06CE134F), UINT32_C(0x06158AF6), UINT32_C(0x02AF338B),
- UINT32_C(0x025085B6), UINT32_C(0x07AABBFC), UINT32_C(0x0670F3BE),
- UINT32_C(0x0108503F), UINT32_C(0x0DC85D51), UINT32_C(0x07F4439A),
- UINT32_C(0x046E6FC9) },
- { UINT32_C(0x08FFB263), UINT32_C(0x01FF6045), UINT32_C(0x0C4E1676),
- UINT32_C(0x038E4F62), UINT32_C(0x06DD24CD), UINT32_C(0x0142D912),
- UINT32_C(0x015AAC36), UINT32_C(0x0DF58E09), UINT32_C(0x038F3D3B),
- UINT32_C(0x014D0412), UINT32_C(0x0123F0AF), UINT32_C(0x0021ED27),
- UINT32_C(0x0004843B), UINT32_C(0x05BF4326), UINT32_C(0x05A672B0),
- UINT32_C(0x02B6453D), UINT32_C(0x0C7F1450), UINT32_C(0x04A895A4),
- UINT32_C(0x061C3DF9) } },
- { { UINT32_C(0x0E593E49), UINT32_C(0x07ABFF21), UINT32_C(0x076E69C7),
- UINT32_C(0x05C81656), UINT32_C(0x0858D39E), UINT32_C(0x041FC1FA),
- UINT32_C(0x03599A84), UINT32_C(0x0ECF483C), UINT32_C(0x0190C4E8),
- UINT32_C(0x08EA24D2), UINT32_C(0x03536BE7), UINT32_C(0x0E3746C4),
- UINT32_C(0x0632F6BA), UINT32_C(0x05CFBDCC), UINT32_C(0x060097CB),
- UINT32_C(0x04B0546F), UINT32_C(0x0AB5C45F), UINT32_C(0x04F8975E),
- UINT32_C(0x04C5D61F) },
- { UINT32_C(0x062B46F6), UINT32_C(0x07516E20), UINT32_C(0x0C1F955C),
- UINT32_C(0x001F66A2), UINT32_C(0x0ED0D917), UINT32_C(0x0406AF99),
- UINT32_C(0x069CF83E), UINT32_C(0x0D4D8A00), UINT32_C(0x03D763C5),
- UINT32_C(0x0E1FD9A7), UINT32_C(0x0056211F), UINT32_C(0x07531A2F),
- UINT32_C(0x00973B69), UINT32_C(0x021DCD32), UINT32_C(0x09D0AC99),
- UINT32_C(0x0549BFEA), UINT32_C(0x0305E319), UINT32_C(0x01342656),
- UINT32_C(0x001B80FB) } },
- { { UINT32_C(0x031FFCBB), UINT32_C(0x06BC2475), UINT32_C(0x090EA8B2),
- UINT32_C(0x0716EDFB), UINT32_C(0x0418E2AE), UINT32_C(0x0381C978),
- UINT32_C(0x05591029), UINT32_C(0x09BD26C6), UINT32_C(0x0460D4D5),
- UINT32_C(0x07DAA20D), UINT32_C(0x01560E68), UINT32_C(0x04AAAB23),
- UINT32_C(0x01EA985C), UINT32_C(0x0631896F), UINT32_C(0x0FD13830),
- UINT32_C(0x0416257F), UINT32_C(0x069B78E7), UINT32_C(0x0016004F),
- UINT32_C(0x07B5E05F) },
- { UINT32_C(0x0749B010), UINT32_C(0x0716A42F), UINT32_C(0x0DEDE224),
- UINT32_C(0x06E403DB), UINT32_C(0x01FC6739), UINT32_C(0x07F5928B),
- UINT32_C(0x04FF09AE), UINT32_C(0x096D2235), UINT32_C(0x032412BF),
- UINT32_C(0x0635ABB1), UINT32_C(0x0480F063), UINT32_C(0x0BA557CC),
- UINT32_C(0x05C0FEF3), UINT32_C(0x01C7CB5C), UINT32_C(0x09482C2A),
- UINT32_C(0x003CF65B), UINT32_C(0x0F39C07C), UINT32_C(0x00902580),
- UINT32_C(0x053F7D95) } },
- { { UINT32_C(0x00C6A752), UINT32_C(0x0600187B), UINT32_C(0x031FD29E),
- UINT32_C(0x07202D01), UINT32_C(0x08706FD9), UINT32_C(0x003A8DA7),
- UINT32_C(0x02BC4807), UINT32_C(0x0108B8E2), UINT32_C(0x03DCB4C3),
- UINT32_C(0x00E5D109), UINT32_C(0x0133EBE8), UINT32_C(0x0DBC9FDB),
- UINT32_C(0x037A84B4), UINT32_C(0x000D902A), UINT32_C(0x0B159D44),
- UINT32_C(0x0385B949), UINT32_C(0x0BB24FD6), UINT32_C(0x05FFC44B),
- UINT32_C(0x0402B0EA) },
- { UINT32_C(0x0AFA8C2B), UINT32_C(0x03A224AC), UINT32_C(0x08FD7C67),
- UINT32_C(0x072E1371), UINT32_C(0x01FA5FB1), UINT32_C(0x060D59B5),
- UINT32_C(0x004D1058), UINT32_C(0x0193E727), UINT32_C(0x0093B083),
- UINT32_C(0x0ABA0999), UINT32_C(0x07F25ECC), UINT32_C(0x0E8D4648),
- UINT32_C(0x045B908B), UINT32_C(0x02C916E0), UINT32_C(0x052F14F8),
- UINT32_C(0x00430404), UINT32_C(0x0B8E9A2B), UINT32_C(0x00F4BF45),
- UINT32_C(0x03F0A1D1) } },
- { { UINT32_C(0x0CEE5802), UINT32_C(0x00880798), UINT32_C(0x01C63FFC),
- UINT32_C(0x071B8526), UINT32_C(0x0C1068FB), UINT32_C(0x052F9DB3),
- UINT32_C(0x01DDC849), UINT32_C(0x0E84AF14), UINT32_C(0x06CD446D),
- UINT32_C(0x0A9F92C6), UINT32_C(0x01676037), UINT32_C(0x02A0264C),
- UINT32_C(0x0467C53C), UINT32_C(0x051C4EE1), UINT32_C(0x01F47FF0),
- UINT32_C(0x022246B4), UINT32_C(0x07D42402), UINT32_C(0x0287119F),
- UINT32_C(0x04434D4E) },
- { UINT32_C(0x018DA0C0), UINT32_C(0x042E86EE), UINT32_C(0x08509770),
- UINT32_C(0x04EDAEB9), UINT32_C(0x0A4009B5), UINT32_C(0x0335CB55),
- UINT32_C(0x064D21EC), UINT32_C(0x0647F463), UINT32_C(0x07A167F4),
- UINT32_C(0x023FB0E4), UINT32_C(0x062A970D), UINT32_C(0x00205267),
- UINT32_C(0x036D3513), UINT32_C(0x07ABD182), UINT32_C(0x0B51FDBA),
- UINT32_C(0x077B5CD0), UINT32_C(0x0896BFE4), UINT32_C(0x0300338E),
- UINT32_C(0x06FF9581) } },
- { { UINT32_C(0x054184BF), UINT32_C(0x02DCF217), UINT32_C(0x0880D0D9),
- UINT32_C(0x019760C7), UINT32_C(0x0662BD25), UINT32_C(0x06A962DD),
- UINT32_C(0x04C69173), UINT32_C(0x019D4A19), UINT32_C(0x05AD5A5F),
- UINT32_C(0x0E23BF0B), UINT32_C(0x07D3C575), UINT32_C(0x0BCDA9CF),
- UINT32_C(0x019497F7), UINT32_C(0x01914517), UINT32_C(0x027F0C56),
- UINT32_C(0x048ED5F5), UINT32_C(0x078B0933), UINT32_C(0x01A7EB30),
- UINT32_C(0x066D17B3) },
- { UINT32_C(0x00A95EDC), UINT32_C(0x0386D25E), UINT32_C(0x039DE915),
- UINT32_C(0x076A16CE), UINT32_C(0x05DCE4A7), UINT32_C(0x07C40607),
- UINT32_C(0x06F1B7C2), UINT32_C(0x0A817858), UINT32_C(0x0147CB22),
- UINT32_C(0x0D109609), UINT32_C(0x0454D2C5), UINT32_C(0x0D788CF4),
- UINT32_C(0x03DCA054), UINT32_C(0x02A7B716), UINT32_C(0x05C66166),
- UINT32_C(0x01AC2B32), UINT32_C(0x0D0C246B), UINT32_C(0x02E38AD2),
- UINT32_C(0x039CDC10) } },
+ X->len = 66;
+ memcpy(X->data, derived, 66);
}
-};
-
-/*-
- * Finite field inversion.
- * Computed with exponentiation via FLT.
- * Autogenerated: ecp/secp521r1/fe_inv.op3
- * custom repunit addition chain
- * NB: this is not a real fiat-crypto function, just named that way for consistency.
- */
-static void
-fiat_secp521r1_inv(fe_t output, const fe_t t1)
-{
- int i;
- /* temporary variables */
- fe_t acc, t128, t16, t2, t256, t32, t4, t512, t516, t518, t519, t64, t8;
-
- fiat_secp521r1_carry_square(acc, t1);
- fiat_secp521r1_carry_mul(t2, acc, t1);
- fiat_secp521r1_carry_square(acc, t2);
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t4, acc, t2);
- fiat_secp521r1_carry_square(acc, t4);
- for (i = 0; i < 3; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t8, acc, t4);
- fiat_secp521r1_carry_square(acc, t8);
- for (i = 0; i < 7; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t16, acc, t8);
- fiat_secp521r1_carry_square(acc, t16);
- for (i = 0; i < 15; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t32, acc, t16);
- fiat_secp521r1_carry_square(acc, t32);
- for (i = 0; i < 31; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t64, acc, t32);
- fiat_secp521r1_carry_square(acc, t64);
- for (i = 0; i < 63; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t128, acc, t64);
- fiat_secp521r1_carry_square(acc, t128);
- for (i = 0; i < 127; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t256, acc, t128);
- fiat_secp521r1_carry_square(acc, t256);
- for (i = 0; i < 255; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t512, acc, t256);
- fiat_secp521r1_carry_square(acc, t512);
- for (i = 0; i < 3; i++)
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t516, acc, t4);
- fiat_secp521r1_carry_square(acc, t516);
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(t518, acc, t2);
- fiat_secp521r1_carry_square(acc, t518);
- fiat_secp521r1_carry_mul(t519, acc, t1);
- fiat_secp521r1_carry_square(acc, t519);
- fiat_secp521r1_carry_square(acc, acc);
- fiat_secp521r1_carry_mul(output, acc, t1);
-}
-
-/*-
- * Q := 2P, both projective, Q and P same pointers OK
- * Autogenerated: op3/dbl_proj.op3
- * https://eprint.iacr.org/2015/1060 Alg 6
- * ASSERT: a = -3
- */
-static void
-point_double(pt_prj_t *Q, const pt_prj_t *P)
-{
- /* temporary variables */
- fe_t t0, t1, t2, t3, t4;
- /* constants */
- const limb_t *b = const_b;
- /* set pointers for legacy curve arith */
- const limb_t *X = P->X;
- const limb_t *Y = P->Y;
- const limb_t *Z = P->Z;
- limb_t *X3 = Q->X;
- limb_t *Y3 = Q->Y;
- limb_t *Z3 = Q->Z;
-
- /* the curve arith formula */
- fiat_secp521r1_carry_square(t0, X);
- fiat_secp521r1_carry_square(t1, Y);
- fiat_secp521r1_carry_square(t2, Z);
- fiat_secp521r1_carry_mul(t3, X, Y);
- fiat_secp521r1_carry_add(t3, t3, t3);
- fiat_secp521r1_carry_mul(t4, Y, Z);
- fiat_secp521r1_carry_mul(Z3, X, Z);
- fiat_secp521r1_carry_add(Z3, Z3, Z3);
- fiat_secp521r1_carry_mul(Y3, b, t2);
- fiat_secp521r1_carry_sub(Y3, Y3, Z3);
- fiat_secp521r1_carry_add(X3, Y3, Y3);
- fiat_secp521r1_carry_add(Y3, X3, Y3);
- fiat_secp521r1_carry_sub(X3, t1, Y3);
- fiat_secp521r1_carry_add(Y3, t1, Y3);
- fiat_secp521r1_carry_mul(Y3, X3, Y3);
- fiat_secp521r1_carry_mul(X3, X3, t3);
- fiat_secp521r1_carry_add(t3, t2, t2);
- fiat_secp521r1_carry_add(t2, t2, t3);
- fiat_secp521r1_carry_mul(Z3, b, Z3);
- fiat_secp521r1_carry_sub(Z3, Z3, t2);
- fiat_secp521r1_carry_sub(Z3, Z3, t0);
- fiat_secp521r1_carry_add(t3, Z3, Z3);
- fiat_secp521r1_carry_add(Z3, Z3, t3);
- fiat_secp521r1_carry_add(t3, t0, t0);
- fiat_secp521r1_carry_add(t0, t3, t0);
- fiat_secp521r1_carry_sub(t0, t0, t2);
- fiat_secp521r1_carry_mul(t0, t0, Z3);
- fiat_secp521r1_carry_add(Y3, Y3, t0);
- fiat_secp521r1_carry_add(t0, t4, t4);
- fiat_secp521r1_carry_mul(Z3, t0, Z3);
- fiat_secp521r1_carry_sub(X3, X3, Z3);
- fiat_secp521r1_carry_mul(Z3, t0, t1);
- fiat_secp521r1_carry_add(Z3, Z3, Z3);
- fiat_secp521r1_carry_add(Z3, Z3, Z3);
-}
-
-/*-
- * out1 = (arg1 == 0) ? 0 : nz
- * NB: this is not a "mod p equiv" 0, but literal 0
- * NB: this is not a real fiat-crypto function, just named that way for consistency.
- */
-static void
-fiat_secp521r1_nonzero(limb_t *out1, const fe_t arg1)
-{
- limb_t x1 = 0;
- int i;
-
- for (i = 0; i < LIMB_CNT; i++)
- x1 |= arg1[i];
- *out1 = x1;
-}
-
-/*-
- * R := Q + P where R and Q are projective, P affine.
- * R and Q same pointers OK
- * R and P same pointers not OK
- * Autogenerated: op3/add_mixed.op3
- * https://eprint.iacr.org/2015/1060 Alg 5
- * ASSERT: a = -3
- */
-static void
-point_add_mixed(pt_prj_t *R, const pt_prj_t *Q, const pt_aff_t *P)
-{
- /* temporary variables */
- fe_t t0, t1, t2, t3, t4;
- /* constants */
- const limb_t *b = const_b;
- /* set pointers for legacy curve arith */
- const limb_t *X1 = Q->X;
- const limb_t *Y1 = Q->Y;
- const limb_t *Z1 = Q->Z;
- const limb_t *X2 = P->X;
- const limb_t *Y2 = P->Y;
- fe_t X3;
- fe_t Y3;
- fe_t Z3;
- limb_t nz;
- /* check P for affine inf */
- fiat_secp521r1_nonzero(&nz, P->Y);
-
- /* the curve arith formula */
- fiat_secp521r1_carry_mul(t0, X1, X2);
- fiat_secp521r1_carry_mul(t1, Y1, Y2);
- fiat_secp521r1_carry_add(t3, X2, Y2);
- fiat_secp521r1_carry_add(t4, X1, Y1);
- fiat_secp521r1_carry_mul(t3, t3, t4);
- fiat_secp521r1_carry_add(t4, t0, t1);
- fiat_secp521r1_carry_sub(t3, t3, t4);
- fiat_secp521r1_carry_mul(t4, Y2, Z1);
- fiat_secp521r1_carry_add(t4, t4, Y1);
- fiat_secp521r1_carry_mul(Y3, X2, Z1);
- fiat_secp521r1_carry_add(Y3, Y3, X1);
- fiat_secp521r1_carry_mul(Z3, b, Z1);
- fiat_secp521r1_carry_sub(X3, Y3, Z3);
- fiat_secp521r1_carry_add(Z3, X3, X3);
- fiat_secp521r1_carry_add(X3, X3, Z3);
- fiat_secp521r1_carry_sub(Z3, t1, X3);
- fiat_secp521r1_carry_add(X3, t1, X3);
- fiat_secp521r1_carry_mul(Y3, b, Y3);
- fiat_secp521r1_carry_add(t1, Z1, Z1);
- fiat_secp521r1_carry_add(t2, t1, Z1);
- fiat_secp521r1_carry_sub(Y3, Y3, t2);
- fiat_secp521r1_carry_sub(Y3, Y3, t0);
- fiat_secp521r1_carry_add(t1, Y3, Y3);
- fiat_secp521r1_carry_add(Y3, t1, Y3);
- fiat_secp521r1_carry_add(t1, t0, t0);
- fiat_secp521r1_carry_add(t0, t1, t0);
- fiat_secp521r1_carry_sub(t0, t0, t2);
- fiat_secp521r1_carry_mul(t1, t4, Y3);
- fiat_secp521r1_carry_mul(t2, t0, Y3);
- fiat_secp521r1_carry_mul(Y3, X3, Z3);
- fiat_secp521r1_carry_add(Y3, Y3, t2);
- fiat_secp521r1_carry_mul(X3, t3, X3);
- fiat_secp521r1_carry_sub(X3, X3, t1);
- fiat_secp521r1_carry_mul(Z3, t4, Z3);
- fiat_secp521r1_carry_mul(t1, t3, t0);
- fiat_secp521r1_carry_add(Z3, Z3, t1);
-
- /* if P is inf, throw all that away and take Q */
- fiat_secp521r1_selectznz(R->X, nz, Q->X, X3);
- fiat_secp521r1_selectznz(R->Y, nz, Q->Y, Y3);
- fiat_secp521r1_selectznz(R->Z, nz, Q->Z, Z3);
-}
-
-/*-
- * R := Q + P all projective.
- * R and Q same pointers OK
- * R and P same pointers not OK
- * Autogenerated: op3/add_proj.op3
- * https://eprint.iacr.org/2015/1060 Alg 4
- * ASSERT: a = -3
- */
-static void
-point_add_proj(pt_prj_t *R, const pt_prj_t *Q, const pt_prj_t *P)
-{
- /* temporary variables */
- fe_t t0, t1, t2, t3, t4, t5;
- /* constants */
- const limb_t *b = const_b;
- /* set pointers for legacy curve arith */
- const limb_t *X1 = Q->X;
- const limb_t *Y1 = Q->Y;
- const limb_t *Z1 = Q->Z;
- const limb_t *X2 = P->X;
- const limb_t *Y2 = P->Y;
- const limb_t *Z2 = P->Z;
- limb_t *X3 = R->X;
- limb_t *Y3 = R->Y;
- limb_t *Z3 = R->Z;
-
- /* the curve arith formula */
- fiat_secp521r1_carry_mul(t0, X1, X2);
- fiat_secp521r1_carry_mul(t1, Y1, Y2);
- fiat_secp521r1_carry_mul(t2, Z1, Z2);
- fiat_secp521r1_carry_add(t3, X1, Y1);
- fiat_secp521r1_carry_add(t4, X2, Y2);
- fiat_secp521r1_carry_mul(t3, t3, t4);
- fiat_secp521r1_carry_add(t4, t0, t1);
- fiat_secp521r1_carry_sub(t3, t3, t4);
- fiat_secp521r1_carry_add(t4, Y1, Z1);
- fiat_secp521r1_carry_add(t5, Y2, Z2);
- fiat_secp521r1_carry_mul(t4, t4, t5);
- fiat_secp521r1_carry_add(t5, t1, t2);
- fiat_secp521r1_carry_sub(t4, t4, t5);
- fiat_secp521r1_carry_add(X3, X1, Z1);
- fiat_secp521r1_carry_add(Y3, X2, Z2);
- fiat_secp521r1_carry_mul(X3, X3, Y3);
- fiat_secp521r1_carry_add(Y3, t0, t2);
- fiat_secp521r1_carry_sub(Y3, X3, Y3);
- fiat_secp521r1_carry_mul(Z3, b, t2);
- fiat_secp521r1_carry_sub(X3, Y3, Z3);
- fiat_secp521r1_carry_add(Z3, X3, X3);
- fiat_secp521r1_carry_add(X3, X3, Z3);
- fiat_secp521r1_carry_sub(Z3, t1, X3);
- fiat_secp521r1_carry_add(X3, t1, X3);
- fiat_secp521r1_carry_mul(Y3, b, Y3);
- fiat_secp521r1_carry_add(t1, t2, t2);
- fiat_secp521r1_carry_add(t2, t1, t2);
- fiat_secp521r1_carry_sub(Y3, Y3, t2);
- fiat_secp521r1_carry_sub(Y3, Y3, t0);
- fiat_secp521r1_carry_add(t1, Y3, Y3);
- fiat_secp521r1_carry_add(Y3, t1, Y3);
- fiat_secp521r1_carry_add(t1, t0, t0);
- fiat_secp521r1_carry_add(t0, t1, t0);
- fiat_secp521r1_carry_sub(t0, t0, t2);
- fiat_secp521r1_carry_mul(t1, t4, Y3);
- fiat_secp521r1_carry_mul(t2, t0, Y3);
- fiat_secp521r1_carry_mul(Y3, X3, Z3);
- fiat_secp521r1_carry_add(Y3, Y3, t2);
- fiat_secp521r1_carry_mul(X3, t3, X3);
- fiat_secp521r1_carry_sub(X3, X3, t1);
- fiat_secp521r1_carry_mul(Z3, t4, Z3);
- fiat_secp521r1_carry_mul(t1, t3, t0);
- fiat_secp521r1_carry_add(Z3, Z3, t1);
+ return res;
}
-/* constants */
-#define RADIX 5
-#define DRADIX (1 << RADIX)
-#define DRADIX_WNAF ((DRADIX) << 1)
-
-/*-
- * precomp for wnaf scalar multiplication:
- * precomp[0] = 1P
- * precomp[1] = 3P
- * precomp[2] = 5P
- * precomp[3] = 7P
- * precomp[4] = 9P
- * ...
+/*
+ * ECDSA Signature for P-521
*/
-static void
-precomp_wnaf(pt_prj_t precomp[DRADIX / 2], const pt_aff_t *P)
-{
- int i;
-
- fe_copy(precomp[0].X, P->X);
- fe_copy(precomp[0].Y, P->Y);
- fe_copy(precomp[0].Z, const_one);
- point_double(&precomp[DRADIX / 2 - 1], &precomp[0]);
-
- for (i = 1; i < DRADIX / 2; i++)
- point_add_proj(&precomp[i], &precomp[DRADIX / 2 - 1], &precomp[i - 1]);
-}
-/* fetch a scalar bit */
-static int
-scalar_get_bit(const unsigned char in[66], int idx)
+SECStatus
+ec_secp521r1_sign_digest(ECPrivateKey *key, SECItem *signature,
+ const SECItem *digest, const unsigned char *kb,
+ const unsigned int kblen)
{
- int widx, rshift;
-
- widx = idx >> 3;
- rshift = idx & 0x7;
+ SECStatus res = SECSuccess;
- if (idx < 0 || widx >= 66)
- return 0;
-
- return (in[widx] >> rshift) & 0x1;
-}
-
-/*-
- * Compute "regular" wnaf representation of a scalar.
- * See "Exponent Recoding and Regular Exponentiation Algorithms",
- * Tunstall et al., AfricaCrypt 2009, Alg 6.
- * It forces an odd scalar and outputs digits in
- * {\pm 1, \pm 3, \pm 5, \pm 7, \pm 9, ...}
- * i.e. signed odd digits with _no zeroes_ -- that makes it "regular".
- */
-static void
-scalar_rwnaf(int8_t out[106], const unsigned char in[66])
-{
- int i;
- int8_t window, d;
-
- window = (in[0] & (DRADIX_WNAF - 1)) | 1;
- for (i = 0; i < 105; i++) {
- d = (window & (DRADIX_WNAF - 1)) - DRADIX;
- out[i] = d;
- window = (window - d) >> RADIX;
- window += scalar_get_bit(in, (i + 1) * RADIX + 1) << 1;
- window += scalar_get_bit(in, (i + 1) * RADIX + 2) << 2;
- window += scalar_get_bit(in, (i + 1) * RADIX + 3) << 3;
- window += scalar_get_bit(in, (i + 1) * RADIX + 4) << 4;
- window += scalar_get_bit(in, (i + 1) * RADIX + 5) << 5;
+ if (!key || !signature || !digest || !kb ||
+ !key->privateValue.data ||
+ !signature->data || !digest->data ||
+ key->ecParams.name != ECCurve_NIST_P521) {
+ PORT_SetError(SEC_ERROR_INVALID_ARGS);
+ res = SECFailure;
+ return res;
}
- out[i] = window;
-}
-
-/*-
- * Compute "textbook" wnaf representation of a scalar.
- * NB: not constant time
- */
-static void
-scalar_wnaf(int8_t out[529], const unsigned char in[66])
-{
- int i;
- int8_t window, d;
- window = in[0] & (DRADIX_WNAF - 1);
- for (i = 0; i < 529; i++) {
- d = 0;
- if ((window & 1) && ((d = window & (DRADIX_WNAF - 1)) & DRADIX))
- d -= DRADIX_WNAF;
- out[i] = d;
- window = (window - d) >> 1;
- window += scalar_get_bit(in, i + 1 + RADIX) << RADIX;
+ if (key->privateValue.len != 66 ||
+ kblen == 0 ||
+ digest->len == 0 ||
+ signature->len < 132) {
+ PORT_SetError(SEC_ERROR_INPUT_LEN);
+ res = SECFailure;
+ return res;
}
-}
-/*-
- * Simultaneous scalar multiplication: interleaved "textbook" wnaf.
- * NB: not constant time
- */
-static void
-var_smul_wnaf_two(pt_aff_t *out, const unsigned char a[66],
- const unsigned char b[66], const pt_aff_t *P)
-{
- int i, d, is_neg, is_inf = 1, flipped = 0;
- int8_t anaf[529] = { 0 };
- int8_t bnaf[529] = { 0 };
- pt_prj_t Q = { { 0 }, { 0 }, { 0 } };
- pt_prj_t precomp[DRADIX / 2];
-
- precomp_wnaf(precomp, P);
- scalar_wnaf(anaf, a);
- scalar_wnaf(bnaf, b);
-
- for (i = 528; i >= 0; i--) {
- if (!is_inf)
- point_double(&Q, &Q);
- if ((d = bnaf[i])) {
- if ((is_neg = d < 0) != flipped) {
- fiat_secp521r1_carry_opp(Q.Y, Q.Y);
- flipped ^= 1;
- }
- d = (is_neg) ? (-d - 1) >> 1 : (d - 1) >> 1;
- if (is_inf) {
- /* initialize accumulator */
- fe_copy(Q.X, &precomp[d].X);
- fe_copy(Q.Y, &precomp[d].Y);
- fe_copy(Q.Z, &precomp[d].Z);
- is_inf = 0;
- } else
- point_add_proj(&Q, &Q, &precomp[d]);
- }
- if ((d = anaf[i])) {
- if ((is_neg = d < 0) != flipped) {
- fiat_secp521r1_carry_opp(Q.Y, Q.Y);
- flipped ^= 1;
- }
- d = (is_neg) ? (-d - 1) >> 1 : (d - 1) >> 1;
- if (is_inf) {
- /* initialize accumulator */
- fe_copy(Q.X, &lut_cmb[0][d].X);
- fe_copy(Q.Y, &lut_cmb[0][d].Y);
- fe_copy(Q.Z, const_one);
- is_inf = 0;
- } else
- point_add_mixed(&Q, &Q, &lut_cmb[0][d]);
- }
+ uint8_t hash[66] = { 0 };
+ if (digest->len < 66) {
+ memcpy(hash + 66 - digest->len, digest->data, digest->len);
+ } else {
+ // SEC 1 takes the most significant ceil(log(n)) bits of hash output when the hash output is longer than log(n).
+ hash[0] = digest->data[0] >> 7;
+ for (size_t i=1; i<66; i++) {
+ hash[i] = (digest->data[i-1] << 1) | (digest->data[i] >> 7);
+ }
}
- if (is_inf) {
- /* initialize accumulator to inf: all-zero scalars */
- fe_set_zero(Q.X);
- fe_copy(Q.Y, const_one);
- fe_set_zero(Q.Z);
+ uint8_t nonce[66] = { 0 };
+ if (kblen < 66) {
+ memcpy(nonce + 66 - kblen, kb, kblen);
+ } else {
+ memcpy(nonce, kb, 66);
}
- if (flipped) {
- /* correct sign */
- fiat_secp521r1_carry_opp(Q.Y, Q.Y);
+ bool b = Hacl_P521_ecdsa_sign_p521_without_hash(
+ signature->data, 66, hash,
+ key->privateValue.data, nonce);
+ if (!b) {
+ PORT_SetError(SEC_ERROR_BAD_KEY);
+ res = SECFailure;
+ return res;
}
- /* convert to affine -- NB depends on coordinate system */
- fiat_secp521r1_inv(Q.Z, Q.Z);
- fiat_secp521r1_carry_mul(out->X, Q.X, Q.Z);
- fiat_secp521r1_carry_mul(out->Y, Q.Y, Q.Z);
+ signature->len = 132;
+ return res;
}
-/*-
- * Variable point scalar multiplication with "regular" wnaf.
- * Here "regular" means _no zeroes_, so the sequence of
- * EC arithmetic ops is fixed.
+/*
+ * ECDSA Signature Verification for P-521
*/
-static void
-var_smul_rwnaf(pt_aff_t *out, const unsigned char scalar[66],
- const pt_aff_t *P)
-{
- int i, j, d, diff, is_neg;
- int8_t rnaf[106] = { 0 };
- pt_prj_t Q = { { 0 }, { 0 }, { 0 } }, lut = { { 0 }, { 0 }, { 0 } };
- pt_prj_t precomp[DRADIX / 2];
-
- precomp_wnaf(precomp, P);
- scalar_rwnaf(rnaf, scalar);
-#if defined(_MSC_VER)
- /* result still unsigned: yes we know */
-#pragma warning(push)
-#pragma warning(disable : 4146)
-#endif
+SECStatus
+ec_secp521r1_verify_digest(ECPublicKey *key, const SECItem *signature,
+ const SECItem *digest)
+{
+ SECStatus res = SECSuccess;
- /* initialize accumulator to high digit */
- d = (rnaf[105] - 1) >> 1;
- for (j = 0; j < DRADIX / 2; j++) {
- diff = (1 - (-(d ^ j) >> (8 * sizeof(int) - 1))) & 1;
- fiat_secp521r1_selectznz(Q.X, diff, Q.X, precomp[j].X);
- fiat_secp521r1_selectznz(Q.Y, diff, Q.Y, precomp[j].Y);
- fiat_secp521r1_selectznz(Q.Z, diff, Q.Z, precomp[j].Z);
+ if (!key || !signature || !digest ||
+ !key->publicValue.data ||
+ !signature->data || !digest->data ||
+ key->ecParams.name != ECCurve_NIST_P521) {
+ PORT_SetError(SEC_ERROR_INVALID_ARGS);
+ res = SECFailure;
+ return res;
}
- for (i = 104; i >= 0; i--) {
- for (j = 0; j < RADIX; j++)
- point_double(&Q, &Q);
- d = rnaf[i];
- /* is_neg = (d < 0) ? 1 : 0 */
- is_neg = (d >> (8 * sizeof(int) - 1)) & 1;
- /* d = abs(d) */
- d = (d ^ -is_neg) + is_neg;
- d = (d - 1) >> 1;
- for (j = 0; j < DRADIX / 2; j++) {
- diff = (1 - (-(d ^ j) >> (8 * sizeof(int) - 1))) & 1;
- fiat_secp521r1_selectznz(lut.X, diff, lut.X, precomp[j].X);
- fiat_secp521r1_selectznz(lut.Y, diff, lut.Y, precomp[j].Y);
- fiat_secp521r1_selectznz(lut.Z, diff, lut.Z, precomp[j].Z);
- }
- /* negate lut point if digit is negative */
- fiat_secp521r1_carry_opp(out->Y, lut.Y);
- fiat_secp521r1_selectznz(lut.Y, is_neg, lut.Y, out->Y);
- point_add_proj(&Q, &Q, &lut);
+ if (key->publicValue.len != 133 ||
+ digest->len == 0 ||
+ signature->len != 132) {
+ PORT_SetError(SEC_ERROR_INPUT_LEN);
+ res = SECFailure;
+ return res;
}
-#if defined(_MSC_VER)
-#pragma warning(pop)
-#endif
-
- /* conditionally subtract P if the scalar was even */
- fe_copy(lut.X, precomp[0].X);
- fiat_secp521r1_carry_opp(lut.Y, precomp[0].Y);
- fe_copy(lut.Z, precomp[0].Z);
- point_add_proj(&lut, &lut, &Q);
- fiat_secp521r1_selectznz(Q.X, scalar[0] & 1, lut.X, Q.X);
- fiat_secp521r1_selectznz(Q.Y, scalar[0] & 1, lut.Y, Q.Y);
- fiat_secp521r1_selectznz(Q.Z, scalar[0] & 1, lut.Z, Q.Z);
-
- /* convert to affine -- NB depends on coordinate system */
- fiat_secp521r1_inv(Q.Z, Q.Z);
- fiat_secp521r1_carry_mul(out->X, Q.X, Q.Z);
- fiat_secp521r1_carry_mul(out->Y, Q.Y, Q.Z);
-}
-
-/*-
- * Fixed scalar multiplication: comb with interleaving.
- */
-static void
-fixed_smul_cmb(pt_aff_t *out, const unsigned char scalar[66])
-{
- int i, j, k, d, diff, is_neg = 0;
- int8_t rnaf[106] = { 0 };
- pt_prj_t Q = { { 0 }, { 0 }, { 0 } }, R = { { 0 }, { 0 }, { 0 } };
- pt_aff_t lut = { { 0 }, { 0 } };
-
- scalar_rwnaf(rnaf, scalar);
-
- /* initalize accumulator to inf */
- fe_set_zero(Q.X);
- fe_copy(Q.Y, const_one);
- fe_set_zero(Q.Z);
-
-#if defined(_MSC_VER)
- /* result still unsigned: yes we know */
-#pragma warning(push)
-#pragma warning(disable : 4146)
-#endif
-
- for (i = 8; i >= 0; i--) {
- for (j = 0; i != 8 && j < RADIX; j++)
- point_double(&Q, &Q);
- for (j = 0; j < 13; j++) {
- if (j * 9 + i > 105)
- continue;
- d = rnaf[j * 9 + i];
- /* is_neg = (d < 0) ? 1 : 0 */
- is_neg = (d >> (8 * sizeof(int) - 1)) & 1;
- /* d = abs(d) */
- d = (d ^ -is_neg) + is_neg;
- d = (d - 1) >> 1;
- for (k = 0; k < DRADIX / 2; k++) {
- diff = (1 - (-(d ^ k) >> (8 * sizeof(int) - 1))) & 1;
- fiat_secp521r1_selectznz(lut.X, diff, lut.X, lut_cmb[j][k].X);
- fiat_secp521r1_selectznz(lut.Y, diff, lut.Y, lut_cmb[j][k].Y);
- }
- /* negate lut point if digit is negative */
- fiat_secp521r1_carry_opp(out->Y, lut.Y);
- fiat_secp521r1_selectznz(lut.Y, is_neg, lut.Y, out->Y);
- point_add_mixed(&Q, &Q, &lut);
- }
+ if (key->publicValue.data[0] != EC_POINT_FORM_UNCOMPRESSED) {
+ PORT_SetError(SEC_ERROR_UNSUPPORTED_EC_POINT_FORM);
+ res = SECFailure;
+ return res;
}
-#if defined(_MSC_VER)
-#pragma warning(pop)
-#endif
-
- /* conditionally subtract P if the scalar was even */
- fe_copy(lut.X, lut_cmb[0][0].X);
- fiat_secp521r1_carry_opp(lut.Y, lut_cmb[0][0].Y);
- point_add_mixed(&R, &Q, &lut);
- fiat_secp521r1_selectznz(Q.X, scalar[0] & 1, R.X, Q.X);
- fiat_secp521r1_selectznz(Q.Y, scalar[0] & 1, R.Y, Q.Y);
- fiat_secp521r1_selectznz(Q.Z, scalar[0] & 1, R.Z, Q.Z);
-
- /* convert to affine -- NB depends on coordinate system */
- fiat_secp521r1_inv(Q.Z, Q.Z);
- fiat_secp521r1_carry_mul(out->X, Q.X, Q.Z);
- fiat_secp521r1_carry_mul(out->Y, Q.Y, Q.Z);
-}
-
-/*-
- * Wrapper: simultaneous scalar mutiplication.
- * outx, outy := a * G + b * P
- * where P = (inx, iny).
- * Everything is LE byte ordering.
- */
-static void
-point_mul_two_secp521r1(unsigned char outx[66], unsigned char outy[66],
- const unsigned char a[66],
- const unsigned char b[66],
- const unsigned char inx[66],
- const unsigned char iny[66])
-{
- pt_aff_t P;
-
- fiat_secp521r1_from_bytes(P.X, inx);
- fiat_secp521r1_from_bytes(P.Y, iny);
- /* simultaneous scalar multiplication */
- var_smul_wnaf_two(&P, a, b, &P);
-
- fiat_secp521r1_to_bytes(outx, P.X);
- fiat_secp521r1_to_bytes(outy, P.Y);
-}
-
-/*-
- * Wrapper: fixed scalar mutiplication.
- * outx, outy := scalar * G
- * Everything is LE byte ordering.
- */
-static void
-point_mul_g_secp521r1(unsigned char outx[66], unsigned char outy[66],
- const unsigned char scalar[66])
-{
- pt_aff_t P;
-
- /* fixed scmul function */
- fixed_smul_cmb(&P, scalar);
- fiat_secp521r1_to_bytes(outx, P.X);
- fiat_secp521r1_to_bytes(outy, P.Y);
-}
-
-/*-
- * Wrapper: variable point scalar mutiplication.
- * outx, outy := scalar * P
- * where P = (inx, iny).
- * Everything is LE byte ordering.
- */
-static void
-point_mul_secp521r1(unsigned char outx[66], unsigned char outy[66],
- const unsigned char scalar[66],
- const unsigned char inx[66],
- const unsigned char iny[66])
-{
- pt_aff_t P;
-
- fiat_secp521r1_from_bytes(P.X, inx);
- fiat_secp521r1_from_bytes(P.Y, iny);
- /* var scmul function */
- var_smul_rwnaf(&P, scalar, &P);
- fiat_secp521r1_to_bytes(outx, P.X);
- fiat_secp521r1_to_bytes(outy, P.Y);
-}
-
-#undef RADIX
-#include "ecp.h"
-#include "mpi-priv.h"
-#include "mplogic.h"
-
-/*-
- * reverse bytes -- total hack
- */
-#define MP_BE2LE(a) \
- do { \
- unsigned char z_bswap; \
- z_bswap = a[0]; \
- a[0] = a[65]; \
- a[65] = z_bswap; \
- z_bswap = a[1]; \
- a[1] = a[64]; \
- a[64] = z_bswap; \
- z_bswap = a[2]; \
- a[2] = a[63]; \
- a[63] = z_bswap; \
- z_bswap = a[3]; \
- a[3] = a[62]; \
- a[62] = z_bswap; \
- z_bswap = a[4]; \
- a[4] = a[61]; \
- a[61] = z_bswap; \
- z_bswap = a[5]; \
- a[5] = a[60]; \
- a[60] = z_bswap; \
- z_bswap = a[6]; \
- a[6] = a[59]; \
- a[59] = z_bswap; \
- z_bswap = a[7]; \
- a[7] = a[58]; \
- a[58] = z_bswap; \
- z_bswap = a[8]; \
- a[8] = a[57]; \
- a[57] = z_bswap; \
- z_bswap = a[9]; \
- a[9] = a[56]; \
- a[56] = z_bswap; \
- z_bswap = a[10]; \
- a[10] = a[55]; \
- a[55] = z_bswap; \
- z_bswap = a[11]; \
- a[11] = a[54]; \
- a[54] = z_bswap; \
- z_bswap = a[12]; \
- a[12] = a[53]; \
- a[53] = z_bswap; \
- z_bswap = a[13]; \
- a[13] = a[52]; \
- a[52] = z_bswap; \
- z_bswap = a[14]; \
- a[14] = a[51]; \
- a[51] = z_bswap; \
- z_bswap = a[15]; \
- a[15] = a[50]; \
- a[50] = z_bswap; \
- z_bswap = a[16]; \
- a[16] = a[49]; \
- a[49] = z_bswap; \
- z_bswap = a[17]; \
- a[17] = a[48]; \
- a[48] = z_bswap; \
- z_bswap = a[18]; \
- a[18] = a[47]; \
- a[47] = z_bswap; \
- z_bswap = a[19]; \
- a[19] = a[46]; \
- a[46] = z_bswap; \
- z_bswap = a[20]; \
- a[20] = a[45]; \
- a[45] = z_bswap; \
- z_bswap = a[21]; \
- a[21] = a[44]; \
- a[44] = z_bswap; \
- z_bswap = a[22]; \
- a[22] = a[43]; \
- a[43] = z_bswap; \
- z_bswap = a[23]; \
- a[23] = a[42]; \
- a[42] = z_bswap; \
- z_bswap = a[24]; \
- a[24] = a[41]; \
- a[41] = z_bswap; \
- z_bswap = a[25]; \
- a[25] = a[40]; \
- a[40] = z_bswap; \
- z_bswap = a[26]; \
- a[26] = a[39]; \
- a[39] = z_bswap; \
- z_bswap = a[27]; \
- a[27] = a[38]; \
- a[38] = z_bswap; \
- z_bswap = a[28]; \
- a[28] = a[37]; \
- a[37] = z_bswap; \
- z_bswap = a[29]; \
- a[29] = a[36]; \
- a[36] = z_bswap; \
- z_bswap = a[30]; \
- a[30] = a[35]; \
- a[35] = z_bswap; \
- z_bswap = a[31]; \
- a[31] = a[34]; \
- a[34] = z_bswap; \
- z_bswap = a[32]; \
- a[32] = a[33]; \
- a[33] = z_bswap; \
- } while (0)
-
-static mp_err
-point_mul_g_secp521r1_wrap(const mp_int *n, mp_int *out_x,
- mp_int *out_y, const ECGroup *group)
-{
- unsigned char b_x[66];
- unsigned char b_y[66];
- unsigned char b_n[66];
- mp_err res;
-
- ARGCHK(n != NULL && out_x != NULL && out_y != NULL, MP_BADARG);
-
- /* fail on out of range scalars */
- if (mpl_significant_bits(n) > 521 || mp_cmp_z(n) != MP_GT)
- return MP_RANGE;
-
- MP_CHECKOK(mp_to_fixlen_octets(n, b_n, 66));
- MP_BE2LE(b_n);
- point_mul_g_secp521r1(b_x, b_y, b_n);
- MP_BE2LE(b_x);
- MP_BE2LE(b_y);
- MP_CHECKOK(mp_read_unsigned_octets(out_x, b_x, 66));
- MP_CHECKOK(mp_read_unsigned_octets(out_y, b_y, 66));
-
-CLEANUP:
- return res;
-}
-
-static mp_err
-point_mul_secp521r1_wrap(const mp_int *n, const mp_int *in_x,
- const mp_int *in_y, mp_int *out_x,
- mp_int *out_y, const ECGroup *group)
-{
- unsigned char b_x[66];
- unsigned char b_y[66];
- unsigned char b_n[66];
- mp_err res;
-
- ARGCHK(n != NULL && in_x != NULL && in_y != NULL && out_x != NULL &&
- out_y != NULL,
- MP_BADARG);
-
- /* fail on out of range scalars */
- if (mpl_significant_bits(n) > 521 || mp_cmp_z(n) != MP_GT)
- return MP_RANGE;
-
- MP_CHECKOK(mp_to_fixlen_octets(n, b_n, 66));
- MP_CHECKOK(mp_to_fixlen_octets(in_x, b_x, 66));
- MP_CHECKOK(mp_to_fixlen_octets(in_y, b_y, 66));
- MP_BE2LE(b_x);
- MP_BE2LE(b_y);
- MP_BE2LE(b_n);
- point_mul_secp521r1(b_x, b_y, b_n, b_x, b_y);
- MP_BE2LE(b_x);
- MP_BE2LE(b_y);
- MP_CHECKOK(mp_read_unsigned_octets(out_x, b_x, 66));
- MP_CHECKOK(mp_read_unsigned_octets(out_y, b_y, 66));
-
-CLEANUP:
- return res;
-}
-
-static mp_err
-point_mul_two_secp521r1_wrap(const mp_int *n1, const mp_int *n2,
- const mp_int *in_x,
- const mp_int *in_y, mp_int *out_x,
- mp_int *out_y,
- const ECGroup *group)
-{
- unsigned char b_x[66];
- unsigned char b_y[66];
- unsigned char b_n1[66];
- unsigned char b_n2[66];
- mp_err res;
-
- /* If n2 == NULL or 0, this is just a base-point multiplication. */
- if (n2 == NULL || mp_cmp_z(n2) == MP_EQ)
- return point_mul_g_secp521r1_wrap(n1, out_x, out_y, group);
-
- /* If n1 == NULL or 0, this is just an arbitary-point multiplication. */
- if (n1 == NULL || mp_cmp_z(n1) == MP_EQ)
- return point_mul_secp521r1_wrap(n2, in_x, in_y, out_x, out_y, group);
-
- ARGCHK(in_x != NULL && in_y != NULL && out_x != NULL && out_y != NULL,
- MP_BADARG);
-
- /* fail on out of range scalars */
- if (mpl_significant_bits(n1) > 521 || mp_cmp_z(n1) != MP_GT ||
- mpl_significant_bits(n2) > 521 || mp_cmp_z(n2) != MP_GT)
- return MP_RANGE;
+ uint8_t hash[66] = { 0 };
+ if (digest->len < 66) {
+ memcpy(hash + 66 - digest->len, digest->data, digest->len);
+ } else {
+ // SEC 1 takes the most significant ceil(log(n)) bits of hash output when the hash output is longer than log(n).
+ hash[0] = digest->data[0] >> 7;
+ for (size_t i=1; i<66; i++) {
+ hash[i] = (digest->data[i-1] << 1) | (digest->data[i] >> 7);
+ }
+ }
+
- MP_CHECKOK(mp_to_fixlen_octets(n1, b_n1, 66));
- MP_CHECKOK(mp_to_fixlen_octets(n2, b_n2, 66));
- MP_CHECKOK(mp_to_fixlen_octets(in_x, b_x, 66));
- MP_CHECKOK(mp_to_fixlen_octets(in_y, b_y, 66));
- MP_BE2LE(b_x);
- MP_BE2LE(b_y);
- MP_BE2LE(b_n1);
- MP_BE2LE(b_n2);
- point_mul_two_secp521r1(b_x, b_y, b_n1, b_n2, b_x, b_y);
- MP_BE2LE(b_x);
- MP_BE2LE(b_y);
- MP_CHECKOK(mp_read_unsigned_octets(out_x, b_x, 66));
- MP_CHECKOK(mp_read_unsigned_octets(out_y, b_y, 66));
+ bool b = Hacl_P521_ecdsa_verif_without_hash(
+ 66, hash,
+ key->publicValue.data + 1,
+ signature->data, signature->data + 66);
+ if (!b) {
+ PORT_SetError(SEC_ERROR_BAD_SIGNATURE);
+ res = SECFailure;
+ return res;
+ }
-CLEANUP:
return res;
}
-
-mp_err
-ec_group_set_secp521r1(ECGroup *group, ECCurveName name)
-{
- if (name == ECCurve_NIST_P521) {
- group->base_point_mul = &point_mul_g_secp521r1_wrap;
- group->point_mul = &point_mul_secp521r1_wrap;
- group->points_mul = &point_mul_two_secp521r1_wrap;
- }
- return MP_OKAY;
-}
-
-#endif /* __SIZEOF_INT128__ */
diff -up ./lib/freebl/verified/Hacl_P521.c.p521_hacl ./lib/freebl/verified/Hacl_P521.c
--- ./lib/freebl/verified/Hacl_P521.c.p521_hacl 2024-01-10 14:02:53.234576425 -0800
+++ ./lib/freebl/verified/Hacl_P521.c 2024-01-10 14:04:29.764450895 -0800
@@ -22,86 +22,1438 @@
* SOFTWARE.
*/
+
#include "Hacl_P521.h"
#include "internal/Hacl_Krmllib.h"
#include "internal/Hacl_Bignum_Base.h"
-static inline uint64_t
-bn_is_eq_mask(uint64_t *x, uint64_t *y)
+static inline uint64_t bn_is_eq_mask(uint64_t *x, uint64_t *y)
+{
+ uint64_t mask = (uint64_t)0xFFFFFFFFFFFFFFFFU;
+ KRML_MAYBE_FOR9(i,
+ (uint32_t)0U,
+ (uint32_t)9U,
+ (uint32_t)1U,
+ uint64_t uu____0 = FStar_UInt64_eq_mask(x[i], y[i]);
+ mask = uu____0 & mask;);
+ uint64_t mask1 = mask;
+ return mask1;
+}
+
+static inline void bn_cmovznz(uint64_t *a, uint64_t b, uint64_t *c, uint64_t *d)
+{
+ uint64_t mask = ~FStar_UInt64_eq_mask(b, (uint64_t)0U);
+ KRML_MAYBE_FOR9(i,
+ (uint32_t)0U,
+ (uint32_t)9U,
+ (uint32_t)1U,
+ uint64_t *os = a;
+ uint64_t uu____0 = c[i];
+ uint64_t x = uu____0 ^ (mask & (d[i] ^ uu____0));
+ os[i] = x;);
+}
+
+static inline void bn_add_mod(uint64_t *a, uint64_t *b, uint64_t *c, uint64_t *d)
+{
+ uint64_t c10 = (uint64_t)0U;
+ KRML_MAYBE_FOR2(i,
+ (uint32_t)0U,
+ (uint32_t)2U,
+ (uint32_t)1U,
+ uint64_t t1 = c[(uint32_t)4U * i];
+ uint64_t t20 = d[(uint32_t)4U * i];
+ uint64_t *res_i0 = a + (uint32_t)4U * i;
+ c10 = Lib_IntTypes_Intrinsics_add_carry_u64(c10, t1, t20, res_i0);
+ uint64_t t10 = c[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t t21 = d[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t *res_i1 = a + (uint32_t)4U * i + (uint32_t)1U;
+ c10 = Lib_IntTypes_Intrinsics_add_carry_u64(c10, t10, t21, res_i1);
+ uint64_t t11 = c[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t t22 = d[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t *res_i2 = a + (uint32_t)4U * i + (uint32_t)2U;
+ c10 = Lib_IntTypes_Intrinsics_add_carry_u64(c10, t11, t22, res_i2);
+ uint64_t t12 = c[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t t2 = d[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t *res_i = a + (uint32_t)4U * i + (uint32_t)3U;
+ c10 = Lib_IntTypes_Intrinsics_add_carry_u64(c10, t12, t2, res_i););
+ {
+ uint64_t t1 = c[8U];
+ uint64_t t2 = d[8U];
+ uint64_t *res_i = a + (uint32_t)8U;
+ c10 = Lib_IntTypes_Intrinsics_add_carry_u64(c10, t1, t2, res_i);
+ }
+ uint64_t c0 = c10;
+ uint64_t tmp[9U] = { 0U };
+ uint64_t c1 = (uint64_t)0U;
+ KRML_MAYBE_FOR2(i,
+ (uint32_t)0U,
+ (uint32_t)2U,
+ (uint32_t)1U,
+ uint64_t t1 = a[(uint32_t)4U * i];
+ uint64_t t20 = b[(uint32_t)4U * i];
+ uint64_t *res_i0 = tmp + (uint32_t)4U * i;
+ c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t1, t20, res_i0);
+ uint64_t t10 = a[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t t21 = b[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t *res_i1 = tmp + (uint32_t)4U * i + (uint32_t)1U;
+ c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t10, t21, res_i1);
+ uint64_t t11 = a[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t t22 = b[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t *res_i2 = tmp + (uint32_t)4U * i + (uint32_t)2U;
+ c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t11, t22, res_i2);
+ uint64_t t12 = a[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t t2 = b[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t *res_i = tmp + (uint32_t)4U * i + (uint32_t)3U;
+ c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t12, t2, res_i););
+ {
+ uint64_t t1 = a[8U];
+ uint64_t t2 = b[8U];
+ uint64_t *res_i = tmp + (uint32_t)8U;
+ c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t1, t2, res_i);
+ }
+ uint64_t c11 = c1;
+ uint64_t c2 = c0 - c11;
+ KRML_MAYBE_FOR9(i,
+ (uint32_t)0U,
+ (uint32_t)9U,
+ (uint32_t)1U,
+ uint64_t *os = a;
+ uint64_t x = (c2 & a[i]) | (~c2 & tmp[i]);
+ os[i] = x;);
+}
+
+static inline uint64_t bn_sub(uint64_t *a, uint64_t *b, uint64_t *c)
+{
+ uint64_t c1 = (uint64_t)0U;
+ KRML_MAYBE_FOR2(i,
+ (uint32_t)0U,
+ (uint32_t)2U,
+ (uint32_t)1U,
+ uint64_t t1 = b[(uint32_t)4U * i];
+ uint64_t t20 = c[(uint32_t)4U * i];
+ uint64_t *res_i0 = a + (uint32_t)4U * i;
+ c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t1, t20, res_i0);
+ uint64_t t10 = b[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t t21 = c[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t *res_i1 = a + (uint32_t)4U * i + (uint32_t)1U;
+ c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t10, t21, res_i1);
+ uint64_t t11 = b[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t t22 = c[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t *res_i2 = a + (uint32_t)4U * i + (uint32_t)2U;
+ c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t11, t22, res_i2);
+ uint64_t t12 = b[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t t2 = c[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t *res_i = a + (uint32_t)4U * i + (uint32_t)3U;
+ c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t12, t2, res_i););
+ {
+ uint64_t t1 = b[8U];
+ uint64_t t2 = c[8U];
+ uint64_t *res_i = a + (uint32_t)8U;
+ c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t1, t2, res_i);
+ }
+ uint64_t c10 = c1;
+ return c10;
+}
+
+static inline void bn_sub_mod(uint64_t *a, uint64_t *b, uint64_t *c, uint64_t *d)
{
- uint64_t mask = (uint64_t)0xFFFFFFFFFFFFFFFFU;
- KRML_MAYBE_FOR9(i,
- (uint32_t)0U,
- (uint32_t)9U,
- (uint32_t)1U,
- uint64_t uu____0 = FStar_UInt64_eq_mask(x[i], y[i]);
- mask = uu____0 & mask;);
- uint64_t mask1 = mask;
- return mask1;
+ uint64_t c10 = (uint64_t)0U;
+ KRML_MAYBE_FOR2(i,
+ (uint32_t)0U,
+ (uint32_t)2U,
+ (uint32_t)1U,
+ uint64_t t1 = c[(uint32_t)4U * i];
+ uint64_t t20 = d[(uint32_t)4U * i];
+ uint64_t *res_i0 = a + (uint32_t)4U * i;
+ c10 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c10, t1, t20, res_i0);
+ uint64_t t10 = c[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t t21 = d[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t *res_i1 = a + (uint32_t)4U * i + (uint32_t)1U;
+ c10 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c10, t10, t21, res_i1);
+ uint64_t t11 = c[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t t22 = d[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t *res_i2 = a + (uint32_t)4U * i + (uint32_t)2U;
+ c10 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c10, t11, t22, res_i2);
+ uint64_t t12 = c[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t t2 = d[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t *res_i = a + (uint32_t)4U * i + (uint32_t)3U;
+ c10 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c10, t12, t2, res_i););
+ {
+ uint64_t t1 = c[8U];
+ uint64_t t2 = d[8U];
+ uint64_t *res_i = a + (uint32_t)8U;
+ c10 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c10, t1, t2, res_i);
+ }
+ uint64_t c0 = c10;
+ uint64_t tmp[9U] = { 0U };
+ uint64_t c1 = (uint64_t)0U;
+ KRML_MAYBE_FOR2(i,
+ (uint32_t)0U,
+ (uint32_t)2U,
+ (uint32_t)1U,
+ uint64_t t1 = a[(uint32_t)4U * i];
+ uint64_t t20 = b[(uint32_t)4U * i];
+ uint64_t *res_i0 = tmp + (uint32_t)4U * i;
+ c1 = Lib_IntTypes_Intrinsics_add_carry_u64(c1, t1, t20, res_i0);
+ uint64_t t10 = a[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t t21 = b[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t *res_i1 = tmp + (uint32_t)4U * i + (uint32_t)1U;
+ c1 = Lib_IntTypes_Intrinsics_add_carry_u64(c1, t10, t21, res_i1);
+ uint64_t t11 = a[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t t22 = b[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t *res_i2 = tmp + (uint32_t)4U * i + (uint32_t)2U;
+ c1 = Lib_IntTypes_Intrinsics_add_carry_u64(c1, t11, t22, res_i2);
+ uint64_t t12 = a[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t t2 = b[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t *res_i = tmp + (uint32_t)4U * i + (uint32_t)3U;
+ c1 = Lib_IntTypes_Intrinsics_add_carry_u64(c1, t12, t2, res_i););
+ {
+ uint64_t t1 = a[8U];
+ uint64_t t2 = b[8U];
+ uint64_t *res_i = tmp + (uint32_t)8U;
+ c1 = Lib_IntTypes_Intrinsics_add_carry_u64(c1, t1, t2, res_i);
+ }
+ uint64_t c11 = c1;
+ KRML_HOST_IGNORE(c11);
+ uint64_t c2 = (uint64_t)0U - c0;
+ KRML_MAYBE_FOR9(i,
+ (uint32_t)0U,
+ (uint32_t)9U,
+ (uint32_t)1U,
+ uint64_t *os = a;
+ uint64_t x = (c2 & tmp[i]) | (~c2 & a[i]);
+ os[i] = x;);
}
-static inline uint64_t
-bn_sub(uint64_t *a, uint64_t *b, uint64_t *c)
+static inline void bn_mul(uint64_t *a, uint64_t *b, uint64_t *c)
{
+ memset(a, 0U, (uint32_t)18U * sizeof (uint64_t));
+ KRML_MAYBE_FOR9(i0,
+ (uint32_t)0U,
+ (uint32_t)9U,
+ (uint32_t)1U,
+ uint64_t bj = c[i0];
+ uint64_t *res_j = a + i0;
uint64_t c1 = (uint64_t)0U;
KRML_MAYBE_FOR2(i,
- (uint32_t)0U,
- (uint32_t)2U,
- (uint32_t)1U,
- uint64_t t1 = b[(uint32_t)4U * i];
- uint64_t t20 = c[(uint32_t)4U * i];
- uint64_t *res_i0 = a + (uint32_t)4U * i;
- c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t1, t20, res_i0);
- uint64_t t10 = b[(uint32_t)4U * i + (uint32_t)1U];
- uint64_t t21 = c[(uint32_t)4U * i + (uint32_t)1U];
- uint64_t *res_i1 = a + (uint32_t)4U * i + (uint32_t)1U;
- c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t10, t21, res_i1);
- uint64_t t11 = b[(uint32_t)4U * i + (uint32_t)2U];
- uint64_t t22 = c[(uint32_t)4U * i + (uint32_t)2U];
- uint64_t *res_i2 = a + (uint32_t)4U * i + (uint32_t)2U;
- c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t11, t22, res_i2);
- uint64_t t12 = b[(uint32_t)4U * i + (uint32_t)3U];
- uint64_t t2 = c[(uint32_t)4U * i + (uint32_t)3U];
- uint64_t *res_i = a + (uint32_t)4U * i + (uint32_t)3U;
- c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t12, t2, res_i););
- {
- uint64_t t1 = b[8U];
- uint64_t t2 = c[8U];
- uint64_t *res_i = a + (uint32_t)8U;
- c1 = Lib_IntTypes_Intrinsics_sub_borrow_u64(c1, t1, t2, res_i);
+ (uint32_t)0U,
+ (uint32_t)2U,
+ (uint32_t)1U,
+ uint64_t a_i = b[(uint32_t)4U * i];
+ uint64_t *res_i0 = res_j + (uint32_t)4U * i;
+ c1 = Hacl_Bignum_Base_mul_wide_add2_u64(a_i, bj, c1, res_i0);
+ uint64_t a_i0 = b[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t *res_i1 = res_j + (uint32_t)4U * i + (uint32_t)1U;
+ c1 = Hacl_Bignum_Base_mul_wide_add2_u64(a_i0, bj, c1, res_i1);
+ uint64_t a_i1 = b[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t *res_i2 = res_j + (uint32_t)4U * i + (uint32_t)2U;
+ c1 = Hacl_Bignum_Base_mul_wide_add2_u64(a_i1, bj, c1, res_i2);
+ uint64_t a_i2 = b[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t *res_i = res_j + (uint32_t)4U * i + (uint32_t)3U;
+ c1 = Hacl_Bignum_Base_mul_wide_add2_u64(a_i2, bj, c1, res_i););
+ {
+ uint64_t a_i = b[8U];
+ uint64_t *res_i = res_j + (uint32_t)8U;
+ c1 = Hacl_Bignum_Base_mul_wide_add2_u64(a_i, bj, c1, res_i);
}
- uint64_t c10 = c1;
- return c10;
+ uint64_t r = c1;
+ a[(uint32_t)9U + i0] = r;);
}
-static inline void
-bn_from_bytes_be(uint64_t *a, uint8_t *b)
+static inline void bn_sqr(uint64_t *a, uint64_t *b)
+{
+ memset(a, 0U, (uint32_t)18U * sizeof (uint64_t));
+ KRML_MAYBE_FOR9(i0,
+ (uint32_t)0U,
+ (uint32_t)9U,
+ (uint32_t)1U,
+ uint64_t *ab = b;
+ uint64_t a_j = b[i0];
+ uint64_t *res_j = a + i0;
+ uint64_t c = (uint64_t)0U;
+ for (uint32_t i = (uint32_t)0U; i < i0 / (uint32_t)4U; i++)
+ {
+ uint64_t a_i = ab[(uint32_t)4U * i];
+ uint64_t *res_i0 = res_j + (uint32_t)4U * i;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i, a_j, c, res_i0);
+ uint64_t a_i0 = ab[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t *res_i1 = res_j + (uint32_t)4U * i + (uint32_t)1U;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i0, a_j, c, res_i1);
+ uint64_t a_i1 = ab[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t *res_i2 = res_j + (uint32_t)4U * i + (uint32_t)2U;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i1, a_j, c, res_i2);
+ uint64_t a_i2 = ab[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t *res_i = res_j + (uint32_t)4U * i + (uint32_t)3U;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i2, a_j, c, res_i);
+ }
+ for (uint32_t i = i0 / (uint32_t)4U * (uint32_t)4U; i < i0; i++)
+ {
+ uint64_t a_i = ab[i];
+ uint64_t *res_i = res_j + i;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i, a_j, c, res_i);
+ }
+ uint64_t r = c;
+ a[i0 + i0] = r;);
+ uint64_t c0 = Hacl_Bignum_Addition_bn_add_eq_len_u64((uint32_t)18U, a, a, a);
+ KRML_HOST_IGNORE(c0);
+ uint64_t tmp[18U] = { 0U };
+ KRML_MAYBE_FOR9(i,
+ (uint32_t)0U,
+ (uint32_t)9U,
+ (uint32_t)1U,
+ FStar_UInt128_uint128 res = FStar_UInt128_mul_wide(b[i], b[i]);
+ uint64_t hi = FStar_UInt128_uint128_to_uint64(FStar_UInt128_shift_right(res, (uint32_t)64U));
+ uint64_t lo = FStar_UInt128_uint128_to_uint64(res);
+ tmp[(uint32_t)2U * i] = lo;
+ tmp[(uint32_t)2U * i + (uint32_t)1U] = hi;);
+ uint64_t c1 = Hacl_Bignum_Addition_bn_add_eq_len_u64((uint32_t)18U, a, tmp, a);
+ KRML_HOST_IGNORE(c1);
+}
+
+static inline void bn_to_bytes_be(uint8_t *a, uint64_t *b)
+{
+ uint8_t tmp[72U] = { 0U };
+ KRML_MAYBE_FOR9(i,
+ (uint32_t)0U,
+ (uint32_t)9U,
+ (uint32_t)1U,
+ store64_be(tmp + i * (uint32_t)8U, b[(uint32_t)9U - i - (uint32_t)1U]););
+ memcpy(a, tmp + (uint32_t)6U, (uint32_t)66U * sizeof (uint8_t));
+}
+
+static inline void bn_from_bytes_be(uint64_t *a, uint8_t *b)
+{
+ uint8_t tmp[72U] = { 0U };
+ memcpy(tmp + (uint32_t)6U, b, (uint32_t)66U * sizeof (uint8_t));
+ KRML_MAYBE_FOR9(i,
+ (uint32_t)0U,
+ (uint32_t)9U,
+ (uint32_t)1U,
+ uint64_t *os = a;
+ uint64_t u = load64_be(tmp + ((uint32_t)9U - i - (uint32_t)1U) * (uint32_t)8U);
+ uint64_t x = u;
+ os[i] = x;);
+}
+
+static inline void p521_make_prime(uint64_t *n)
+{
+ n[0U] = (uint64_t)0xffffffffffffffffU;
+ n[1U] = (uint64_t)0xffffffffffffffffU;
+ n[2U] = (uint64_t)0xffffffffffffffffU;
+ n[3U] = (uint64_t)0xffffffffffffffffU;
+ n[4U] = (uint64_t)0xffffffffffffffffU;
+ n[5U] = (uint64_t)0xffffffffffffffffU;
+ n[6U] = (uint64_t)0xffffffffffffffffU;
+ n[7U] = (uint64_t)0xffffffffffffffffU;
+ n[8U] = (uint64_t)0x1ffU;
+}
+
+static inline void p521_make_order(uint64_t *n)
{
- uint8_t tmp[72U] = { 0U };
- memcpy(tmp + (uint32_t)6U, b, (uint32_t)66U * sizeof(uint8_t));
- KRML_MAYBE_FOR9(i,
- (uint32_t)0U,
- (uint32_t)9U,
- (uint32_t)1U,
- uint64_t *os = a;
- uint64_t u = load64_be(tmp + ((uint32_t)9U - i - (uint32_t)1U) * (uint32_t)8U);
- uint64_t x = u;
- os[i] = x;);
+ n[0U] = (uint64_t)0xbb6fb71e91386409U;
+ n[1U] = (uint64_t)0x3bb5c9b8899c47aeU;
+ n[2U] = (uint64_t)0x7fcc0148f709a5d0U;
+ n[3U] = (uint64_t)0x51868783bf2f966bU;
+ n[4U] = (uint64_t)0xfffffffffffffffaU;
+ n[5U] = (uint64_t)0xffffffffffffffffU;
+ n[6U] = (uint64_t)0xffffffffffffffffU;
+ n[7U] = (uint64_t)0xffffffffffffffffU;
+ n[8U] = (uint64_t)0x1ffU;
+}
+
+static inline void p521_make_a_coeff(uint64_t *a)
+{
+ a[0U] = (uint64_t)0xfe7fffffffffffffU;
+ a[1U] = (uint64_t)0xffffffffffffffffU;
+ a[2U] = (uint64_t)0xffffffffffffffffU;
+ a[3U] = (uint64_t)0xffffffffffffffffU;
+ a[4U] = (uint64_t)0xffffffffffffffffU;
+ a[5U] = (uint64_t)0xffffffffffffffffU;
+ a[6U] = (uint64_t)0xffffffffffffffffU;
+ a[7U] = (uint64_t)0xffffffffffffffffU;
+ a[8U] = (uint64_t)0x01ffU;
+}
+
+static inline void p521_make_b_coeff(uint64_t *b)
+{
+ b[0U] = (uint64_t)0x8014654fae586387U;
+ b[1U] = (uint64_t)0x78f7a28fea35a81fU;
+ b[2U] = (uint64_t)0x839ab9efc41e961aU;
+ b[3U] = (uint64_t)0xbd8b29605e9dd8dfU;
+ b[4U] = (uint64_t)0xf0ab0c9ca8f63f49U;
+ b[5U] = (uint64_t)0xf9dc5a44c8c77884U;
+ b[6U] = (uint64_t)0x77516d392dccd98aU;
+ b[7U] = (uint64_t)0x0fc94d10d05b42a0U;
+ b[8U] = (uint64_t)0x4dU;
+}
+
+static inline void p521_make_g_x(uint64_t *n)
+{
+ n[0U] = (uint64_t)0xb331a16381adc101U;
+ n[1U] = (uint64_t)0x4dfcbf3f18e172deU;
+ n[2U] = (uint64_t)0x6f19a459e0c2b521U;
+ n[3U] = (uint64_t)0x947f0ee093d17fd4U;
+ n[4U] = (uint64_t)0xdd50a5af3bf7f3acU;
+ n[5U] = (uint64_t)0x90fc1457b035a69eU;
+ n[6U] = (uint64_t)0x214e32409c829fdaU;
+ n[7U] = (uint64_t)0xe6cf1f65b311cadaU;
+ n[8U] = (uint64_t)0x74U;
+}
+
+static inline void p521_make_g_y(uint64_t *n)
+{
+ n[0U] = (uint64_t)0x28460e4a5a9e268eU;
+ n[1U] = (uint64_t)0x20445f4a3b4fe8b3U;
+ n[2U] = (uint64_t)0xb09a9e3843513961U;
+ n[3U] = (uint64_t)0x2062a85c809fd683U;
+ n[4U] = (uint64_t)0x164bf7394caf7a13U;
+ n[5U] = (uint64_t)0x340bd7de8b939f33U;
+ n[6U] = (uint64_t)0xeccc7aa224abcda2U;
+ n[7U] = (uint64_t)0x022e452fda163e8dU;
+ n[8U] = (uint64_t)0x1e0U;
+}
+
+static inline void p521_make_fmont_R2(uint64_t *n)
+{
+ n[0U] = (uint64_t)0x0U;
+ n[1U] = (uint64_t)0x400000000000U;
+ n[2U] = (uint64_t)0x0U;
+ n[3U] = (uint64_t)0x0U;
+ n[4U] = (uint64_t)0x0U;
+ n[5U] = (uint64_t)0x0U;
+ n[6U] = (uint64_t)0x0U;
+ n[7U] = (uint64_t)0x0U;
+ n[8U] = (uint64_t)0x0U;
+}
+
+static inline void p521_make_fzero(uint64_t *n)
+{
+ memset(n, 0U, (uint32_t)9U * sizeof (uint64_t));
+ n[0U] = (uint64_t)0U;
+}
+
+static inline void p521_make_fone(uint64_t *n)
+{
+ n[0U] = (uint64_t)0x80000000000000U;
+ n[1U] = (uint64_t)0x0U;
+ n[2U] = (uint64_t)0x0U;
+ n[3U] = (uint64_t)0x0U;
+ n[4U] = (uint64_t)0x0U;
+ n[5U] = (uint64_t)0x0U;
+ n[6U] = (uint64_t)0x0U;
+ n[7U] = (uint64_t)0x0U;
+ n[8U] = (uint64_t)0x0U;
+}
+
+static inline void p521_make_qone(uint64_t *f)
+{
+ f[0U] = (uint64_t)0xfb80000000000000U;
+ f[1U] = (uint64_t)0x28a2482470b763cdU;
+ f[2U] = (uint64_t)0x17e2251b23bb31dcU;
+ f[3U] = (uint64_t)0xca4019ff5b847b2dU;
+ f[4U] = (uint64_t)0x2d73cbc3e206834U;
+ f[5U] = (uint64_t)0x0U;
+ f[6U] = (uint64_t)0x0U;
+ f[7U] = (uint64_t)0x0U;
+ f[8U] = (uint64_t)0x0U;
+}
+
+static inline void fmont_reduction(uint64_t *res, uint64_t *x)
+{
+ uint64_t n[9U] = { 0U };
+ p521_make_prime(n);
+ uint64_t c0 = (uint64_t)0U;
+ KRML_MAYBE_FOR9(i0,
+ (uint32_t)0U,
+ (uint32_t)9U,
+ (uint32_t)1U,
+ uint64_t qj = (uint64_t)1U * x[i0];
+ uint64_t *res_j0 = x + i0;
+ uint64_t c = (uint64_t)0U;
+ KRML_MAYBE_FOR2(i,
+ (uint32_t)0U,
+ (uint32_t)2U,
+ (uint32_t)1U,
+ uint64_t a_i = n[(uint32_t)4U * i];
+ uint64_t *res_i0 = res_j0 + (uint32_t)4U * i;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i, qj, c, res_i0);
+ uint64_t a_i0 = n[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t *res_i1 = res_j0 + (uint32_t)4U * i + (uint32_t)1U;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i0, qj, c, res_i1);
+ uint64_t a_i1 = n[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t *res_i2 = res_j0 + (uint32_t)4U * i + (uint32_t)2U;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i1, qj, c, res_i2);
+ uint64_t a_i2 = n[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t *res_i = res_j0 + (uint32_t)4U * i + (uint32_t)3U;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i2, qj, c, res_i););
+ {
+ uint64_t a_i = n[8U];
+ uint64_t *res_i = res_j0 + (uint32_t)8U;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i, qj, c, res_i);
+ }
+ uint64_t r = c;
+ uint64_t c1 = r;
+ uint64_t *resb = x + (uint32_t)9U + i0;
+ uint64_t res_j = x[(uint32_t)9U + i0];
+ c0 = Lib_IntTypes_Intrinsics_add_carry_u64(c0, c1, res_j, resb););
+ memcpy(res, x + (uint32_t)9U, (uint32_t)9U * sizeof (uint64_t));
+ uint64_t c00 = c0;
+ uint64_t tmp[9U] = { 0U };
+ uint64_t c = (uint64_t)0U;
+ KRML_MAYBE_FOR2(i,
+ (uint32_t)0U,
+ (uint32_t)2U,
+ (uint32_t)1U,
+ uint64_t t1 = res[(uint32_t)4U * i];
+ uint64_t t20 = n[(uint32_t)4U * i];
+ uint64_t *res_i0 = tmp + (uint32_t)4U * i;
+ c = Lib_IntTypes_Intrinsics_sub_borrow_u64(c, t1, t20, res_i0);
+ uint64_t t10 = res[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t t21 = n[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t *res_i1 = tmp + (uint32_t)4U * i + (uint32_t)1U;
+ c = Lib_IntTypes_Intrinsics_sub_borrow_u64(c, t10, t21, res_i1);
+ uint64_t t11 = res[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t t22 = n[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t *res_i2 = tmp + (uint32_t)4U * i + (uint32_t)2U;
+ c = Lib_IntTypes_Intrinsics_sub_borrow_u64(c, t11, t22, res_i2);
+ uint64_t t12 = res[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t t2 = n[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t *res_i = tmp + (uint32_t)4U * i + (uint32_t)3U;
+ c = Lib_IntTypes_Intrinsics_sub_borrow_u64(c, t12, t2, res_i););
+ {
+ uint64_t t1 = res[8U];
+ uint64_t t2 = n[8U];
+ uint64_t *res_i = tmp + (uint32_t)8U;
+ c = Lib_IntTypes_Intrinsics_sub_borrow_u64(c, t1, t2, res_i);
+ }
+ uint64_t c1 = c;
+ uint64_t c2 = c00 - c1;
+ KRML_MAYBE_FOR9(i,
+ (uint32_t)0U,
+ (uint32_t)9U,
+ (uint32_t)1U,
+ uint64_t *os = res;
+ uint64_t x1 = (c2 & res[i]) | (~c2 & tmp[i]);
+ os[i] = x1;);
+}
+
+static inline void qmont_reduction(uint64_t *res, uint64_t *x)
+{
+ uint64_t n[9U] = { 0U };
+ p521_make_order(n);
+ uint64_t c0 = (uint64_t)0U;
+ KRML_MAYBE_FOR9(i0,
+ (uint32_t)0U,
+ (uint32_t)9U,
+ (uint32_t)1U,
+ uint64_t qj = (uint64_t)2103001588584519111U * x[i0];
+ uint64_t *res_j0 = x + i0;
+ uint64_t c = (uint64_t)0U;
+ KRML_MAYBE_FOR2(i,
+ (uint32_t)0U,
+ (uint32_t)2U,
+ (uint32_t)1U,
+ uint64_t a_i = n[(uint32_t)4U * i];
+ uint64_t *res_i0 = res_j0 + (uint32_t)4U * i;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i, qj, c, res_i0);
+ uint64_t a_i0 = n[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t *res_i1 = res_j0 + (uint32_t)4U * i + (uint32_t)1U;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i0, qj, c, res_i1);
+ uint64_t a_i1 = n[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t *res_i2 = res_j0 + (uint32_t)4U * i + (uint32_t)2U;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i1, qj, c, res_i2);
+ uint64_t a_i2 = n[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t *res_i = res_j0 + (uint32_t)4U * i + (uint32_t)3U;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i2, qj, c, res_i););
+ {
+ uint64_t a_i = n[8U];
+ uint64_t *res_i = res_j0 + (uint32_t)8U;
+ c = Hacl_Bignum_Base_mul_wide_add2_u64(a_i, qj, c, res_i);
+ }
+ uint64_t r = c;
+ uint64_t c1 = r;
+ uint64_t *resb = x + (uint32_t)9U + i0;
+ uint64_t res_j = x[(uint32_t)9U + i0];
+ c0 = Lib_IntTypes_Intrinsics_add_carry_u64(c0, c1, res_j, resb););
+ memcpy(res, x + (uint32_t)9U, (uint32_t)9U * sizeof (uint64_t));
+ uint64_t c00 = c0;
+ uint64_t tmp[9U] = { 0U };
+ uint64_t c = (uint64_t)0U;
+ KRML_MAYBE_FOR2(i,
+ (uint32_t)0U,
+ (uint32_t)2U,
+ (uint32_t)1U,
+ uint64_t t1 = res[(uint32_t)4U * i];
+ uint64_t t20 = n[(uint32_t)4U * i];
+ uint64_t *res_i0 = tmp + (uint32_t)4U * i;
+ c = Lib_IntTypes_Intrinsics_sub_borrow_u64(c, t1, t20, res_i0);
+ uint64_t t10 = res[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t t21 = n[(uint32_t)4U * i + (uint32_t)1U];
+ uint64_t *res_i1 = tmp + (uint32_t)4U * i + (uint32_t)1U;
+ c = Lib_IntTypes_Intrinsics_sub_borrow_u64(c, t10, t21, res_i1);
+ uint64_t t11 = res[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t t22 = n[(uint32_t)4U * i + (uint32_t)2U];
+ uint64_t *res_i2 = tmp + (uint32_t)4U * i + (uint32_t)2U;
+ c = Lib_IntTypes_Intrinsics_sub_borrow_u64(c, t11, t22, res_i2);
+ uint64_t t12 = res[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t t2 = n[(uint32_t)4U * i + (uint32_t)3U];
+ uint64_t *res_i = tmp + (uint32_t)4U * i + (uint32_t)3U;
+ c = Lib_IntTypes_Intrinsics_sub_borrow_u64(c, t12, t2, res_i););
+ {
+ uint64_t t1 = res[8U];
+ uint64_t t2 = n[8U];
+ uint64_t *res_i = tmp + (uint32_t)8U;
+ c = Lib_IntTypes_Intrinsics_sub_borrow_u64(c, t1, t2, res_i);
+ }
+ uint64_t c1 = c;
+ uint64_t c2 = c00 - c1;
+ KRML_MAYBE_FOR9(i,
+ (uint32_t)0U,
+ (uint32_t)9U,
+ (uint32_t)1U,
+ uint64_t *os = res;
+ uint64_t x1 = (c2 & res[i]) | (~c2 & tmp[i]);
+ os[i] = x1;);
+}
+
+static inline uint64_t bn_is_lt_prime_mask(uint64_t *f)
+{
+ uint64_t tmp[9U] = { 0U };
+ p521_make_prime(tmp);
+ uint64_t c = bn_sub(tmp, f, tmp);
+ return (uint64_t)0U - c;
+}
+
+static inline void fadd(uint64_t *a, uint64_t *b, uint64_t *c)
+{
+ uint64_t n[9U] = { 0U };
+ p521_make_prime(n);
+ bn_add_mod(a, n, b, c);
+}
+
+static inline void fsub(uint64_t *a, uint64_t *b, uint64_t *c)
+{
+ uint64_t n[9U] = { 0U };
+ p521_make_prime(n);
+ bn_sub_mod(a, n, b, c);
+}
+
+static inline void fmul(uint64_t *a, uint64_t *b, uint64_t *c)
+{
+ uint64_t tmp[18U] = { 0U };
+ bn_mul(tmp, b, c);
+ fmont_reduction(a, tmp);
+}
+
+static inline void fsqr(uint64_t *a, uint64_t *b)
+{
+ uint64_t tmp[18U] = { 0U };
+ bn_sqr(tmp, b);
+ fmont_reduction(a, tmp);
+}
+
+static inline void from_mont(uint64_t *a, uint64_t *b)
+{
+ uint64_t tmp[18U] = { 0U };
+ memcpy(tmp, b, (uint32_t)9U * sizeof (uint64_t));
+ fmont_reduction(a, tmp);
+}
+
+static inline void to_mont(uint64_t *a, uint64_t *b)
+{
+ uint64_t r2modn[9U] = { 0U };
+ p521_make_fmont_R2(r2modn);
+ uint64_t tmp[18U] = { 0U };
+ bn_mul(tmp, b, r2modn);
+ fmont_reduction(a, tmp);
+}
+
+static inline void p521_finv(uint64_t *res, uint64_t *a)
+{
+ uint64_t b[9U] = { 0U };
+ b[0U] = (uint64_t)0xfffffffffffffffdU;
+ b[1U] = (uint64_t)0xffffffffffffffffU;
+ b[2U] = (uint64_t)0xffffffffffffffffU;
+ b[3U] = (uint64_t)0xffffffffffffffffU;
+ b[4U] = (uint64_t)0xffffffffffffffffU;
+ b[5U] = (uint64_t)0xffffffffffffffffU;
+ b[6U] = (uint64_t)0xffffffffffffffffU;
+ b[7U] = (uint64_t)0xffffffffffffffffU;
+ b[8U] = (uint64_t)0x1ffU;
+ uint64_t tmp[9U] = { 0U };
+ memcpy(tmp, a, (uint32_t)9U * sizeof (uint64_t));
+ uint64_t table[288U] = { 0U };
+ uint64_t tmp1[9U] = { 0U };
+ uint64_t *t0 = table;
+ uint64_t *t1 = table + (uint32_t)9U;
+ p521_make_fone(t0);
+ memcpy(t1, tmp, (uint32_t)9U * sizeof (uint64_t));
+ KRML_MAYBE_FOR15(i,
+ (uint32_t)0U,
+ (uint32_t)15U,
+ (uint32_t)1U,
+ uint64_t *t11 = table + (i + (uint32_t)1U) * (uint32_t)9U;
+ fsqr(tmp1, t11);
+ memcpy(table + ((uint32_t)2U * i + (uint32_t)2U) * (uint32_t)9U,
+ tmp1,
+ (uint32_t)9U * sizeof (uint64_t));
+ uint64_t *t2 = table + ((uint32_t)2U * i + (uint32_t)2U) * (uint32_t)9U;
+ fmul(tmp1, tmp, t2);
+ memcpy(table + ((uint32_t)2U * i + (uint32_t)3U) * (uint32_t)9U,
+ tmp1,
+ (uint32_t)9U * sizeof (uint64_t)););
+ uint32_t i0 = (uint32_t)520U;
+ uint64_t bits_c = Hacl_Bignum_Lib_bn_get_bits_u64((uint32_t)9U, b, i0, (uint32_t)5U);
+ uint32_t bits_l32 = (uint32_t)bits_c;
+ const uint64_t *a_bits_l = table + bits_l32 * (uint32_t)9U;
+ memcpy(res, (uint64_t *)a_bits_l, (uint32_t)9U * sizeof (uint64_t));
+ uint64_t tmp10[9U] = { 0U };
+ for (uint32_t i = (uint32_t)0U; i < (uint32_t)104U; i++)
+ {
+ KRML_MAYBE_FOR5(i1, (uint32_t)0U, (uint32_t)5U, (uint32_t)1U, fsqr(res, res););
+ uint32_t k = (uint32_t)520U - (uint32_t)5U * i - (uint32_t)5U;
+ uint64_t bits_l = Hacl_Bignum_Lib_bn_get_bits_u64((uint32_t)9U, b, k, (uint32_t)5U);
+ uint32_t bits_l320 = (uint32_t)bits_l;
+ const uint64_t *a_bits_l0 = table + bits_l320 * (uint32_t)9U;
+ memcpy(tmp10, (uint64_t *)a_bits_l0, (uint32_t)9U * sizeof (uint64_t));
+ fmul(res, res, tmp10);
+ }
+}
+
+static inline void p521_fsqrt(uint64_t *res, uint64_t *a)
+{
+ uint64_t b[9U] = { 0U };
+ b[0U] = (uint64_t)0x0U;
+ b[1U] = (uint64_t)0x0U;
+ b[2U] = (uint64_t)0x0U;
+ b[3U] = (uint64_t)0x0U;
+ b[4U] = (uint64_t)0x0U;
+ b[5U] = (uint64_t)0x0U;
+ b[6U] = (uint64_t)0x0U;
+ b[7U] = (uint64_t)0x0U;
+ b[8U] = (uint64_t)0x80U;
+ uint64_t tmp[9U] = { 0U };
+ memcpy(tmp, a, (uint32_t)9U * sizeof (uint64_t));
+ uint64_t table[288U] = { 0U };
+ uint64_t tmp1[9U] = { 0U };
+ uint64_t *t0 = table;
+ uint64_t *t1 = table + (uint32_t)9U;
+ p521_make_fone(t0);
+ memcpy(t1, tmp, (uint32_t)9U * sizeof (uint64_t));
+ KRML_MAYBE_FOR15(i,
+ (uint32_t)0U,
+ (uint32_t)15U,
+ (uint32_t)1U,
+ uint64_t *t11 = table + (i + (uint32_t)1U) * (uint32_t)9U;
+ fsqr(tmp1, t11);
+ memcpy(table + ((uint32_t)2U * i + (uint32_t)2U) * (uint32_t)9U,
+ tmp1,
+ (uint32_t)9U * sizeof (uint64_t));
+ uint64_t *t2 = table + ((uint32_t)2U * i + (uint32_t)2U) * (uint32_t)9U;
+ fmul(tmp1, tmp, t2);
+ memcpy(table + ((uint32_t)2U * i + (uint32_t)3U) * (uint32_t)9U,
+ tmp1,
+ (uint32_t)9U * sizeof (uint64_t)););
+ uint32_t i0 = (uint32_t)520U;
+ uint64_t bits_c = Hacl_Bignum_Lib_bn_get_bits_u64((uint32_t)9U, b, i0, (uint32_t)5U);
+ uint32_t bits_l32 = (uint32_t)bits_c;
+ const uint64_t *a_bits_l = table + bits_l32 * (uint32_t)9U;
+ memcpy(res, (uint64_t *)a_bits_l, (uint32_t)9U * sizeof (uint64_t));
+ uint64_t tmp10[9U] = { 0U };
+ for (uint32_t i = (uint32_t)0U; i < (uint32_t)104U; i++)
+ {
+ KRML_MAYBE_FOR5(i1, (uint32_t)0U, (uint32_t)5U, (uint32_t)1U, fsqr(res, res););
+ uint32_t k = (uint32_t)520U - (uint32_t)5U * i - (uint32_t)5U;
+ uint64_t bits_l = Hacl_Bignum_Lib_bn_get_bits_u64((uint32_t)9U, b, k, (uint32_t)5U);
+ uint32_t bits_l320 = (uint32_t)bits_l;
+ const uint64_t *a_bits_l0 = table + bits_l320 * (uint32_t)9U;
+ memcpy(tmp10, (uint64_t *)a_bits_l0, (uint32_t)9U * sizeof (uint64_t));
+ fmul(res, res, tmp10);
+ }
+}
+
+static inline uint64_t load_qelem_conditional(uint64_t *a, uint8_t *b)
+{
+ bn_from_bytes_be(a, b);
+ uint64_t tmp[9U] = { 0U };
+ p521_make_order(tmp);
+ uint64_t c = bn_sub(tmp, a, tmp);
+ uint64_t is_lt_order = (uint64_t)0U - c;
+ uint64_t bn_zero[9U] = { 0U };
+ uint64_t res = bn_is_eq_mask(a, bn_zero);
+ uint64_t is_eq_zero = res;
+ uint64_t is_b_valid = is_lt_order & ~is_eq_zero;
+ uint64_t oneq[9U] = { 0U };
+ memset(oneq, 0U, (uint32_t)9U * sizeof (uint64_t));
+ oneq[0U] = (uint64_t)1U;
+ KRML_MAYBE_FOR9(i,
+ (uint32_t)0U,
+ (uint32_t)9U,
+ (uint32_t)1U,
+ uint64_t *os = a;
+ uint64_t uu____0 = oneq[i];
+ uint64_t x = uu____0 ^ (is_b_valid & (a[i] ^ uu____0));
+ os[i] = x;);
+ return is_b_valid;
+}
+
+static inline void qmod_short(uint64_t *a, uint64_t *b)
+{
+ uint64_t tmp[9U] = { 0U };
+ p521_make_order(tmp);
+ uint64_t c = bn_sub(tmp, b, tmp);
+ bn_cmovznz(a, c, tmp, b);
+}
+
+static inline void qadd(uint64_t *a, uint64_t *b, uint64_t *c)
+{
+ uint64_t n[9U] = { 0U };
+ p521_make_order(n);
+ bn_add_mod(a, n, b, c);
+}
+
+static inline void qmul(uint64_t *a, uint64_t *b, uint64_t *c)
+{
+ uint64_t tmp[18U] = { 0U };
+ bn_mul(tmp, b, c);
+ qmont_reduction(a, tmp);
+}
+
+static inline void qsqr(uint64_t *a, uint64_t *b)
+{
+ uint64_t tmp[18U] = { 0U };
+ bn_sqr(tmp, b);
+ qmont_reduction(a, tmp);
+}
+
+static inline void from_qmont(uint64_t *a, uint64_t *b)
+{
+ uint64_t tmp[18U] = { 0U };
+ memcpy(tmp, b, (uint32_t)9U * sizeof (uint64_t));
+ qmont_reduction(a, tmp);
+}
+
+static inline void p521_qinv(uint64_t *res, uint64_t *a)
+{
+ uint64_t b[9U] = { 0U };
+ b[0U] = (uint64_t)0xbb6fb71e91386407U;
+ b[1U] = (uint64_t)0x3bb5c9b8899c47aeU;
+ b[2U] = (uint64_t)0x7fcc0148f709a5d0U;
+ b[3U] = (uint64_t)0x51868783bf2f966bU;
+ b[4U] = (uint64_t)0xfffffffffffffffaU;
+ b[5U] = (uint64_t)0xffffffffffffffffU;
+ b[6U] = (uint64_t)0xffffffffffffffffU;
+ b[7U] = (uint64_t)0xffffffffffffffffU;
+ b[8U] = (uint64_t)0x1ffU;
+ uint64_t tmp[9U] = { 0U };
+ memcpy(tmp, a, (uint32_t)9U * sizeof (uint64_t));
+ uint64_t table[288U] = { 0U };
+ uint64_t tmp1[9U] = { 0U };
+ uint64_t *t0 = table;
+ uint64_t *t1 = table + (uint32_t)9U;
+ p521_make_qone(t0);
+ memcpy(t1, tmp, (uint32_t)9U * sizeof (uint64_t));
+ KRML_MAYBE_FOR15(i,
+ (uint32_t)0U,
+ (uint32_t)15U,
+ (uint32_t)1U,
+ uint64_t *t11 = table + (i + (uint32_t)1U) * (uint32_t)9U;
+ qsqr(tmp1, t11);
+ memcpy(table + ((uint32_t)2U * i + (uint32_t)2U) * (uint32_t)9U,
+ tmp1,
+ (uint32_t)9U * sizeof (uint64_t));
+ uint64_t *t2 = table + ((uint32_t)2U * i + (uint32_t)2U) * (uint32_t)9U;
+ qmul(tmp1, tmp, t2);
+ memcpy(table + ((uint32_t)2U * i + (uint32_t)3U) * (uint32_t)9U,
+ tmp1,
+ (uint32_t)9U * sizeof (uint64_t)););
+ uint32_t i0 = (uint32_t)520U;
+ uint64_t bits_c = Hacl_Bignum_Lib_bn_get_bits_u64((uint32_t)9U, b, i0, (uint32_t)5U);
+ uint32_t bits_l32 = (uint32_t)bits_c;
+ const uint64_t *a_bits_l = table + bits_l32 * (uint32_t)9U;
+ memcpy(res, (uint64_t *)a_bits_l, (uint32_t)9U * sizeof (uint64_t));
+ uint64_t tmp10[9U] = { 0U };
+ for (uint32_t i = (uint32_t)0U; i < (uint32_t)104U; i++)
+ {
+ KRML_MAYBE_FOR5(i1, (uint32_t)0U, (uint32_t)5U, (uint32_t)1U, qsqr(res, res););
+ uint32_t k = (uint32_t)520U - (uint32_t)5U * i - (uint32_t)5U;
+ uint64_t bits_l = Hacl_Bignum_Lib_bn_get_bits_u64((uint32_t)9U, b, k, (uint32_t)5U);
+ uint32_t bits_l320 = (uint32_t)bits_l;
+ const uint64_t *a_bits_l0 = table + bits_l320 * (uint32_t)9U;
+ memcpy(tmp10, (uint64_t *)a_bits_l0, (uint32_t)9U * sizeof (uint64_t));
+ qmul(res, res, tmp10);
+ }
+}
+
+static inline void point_add(uint64_t *x, uint64_t *y, uint64_t *xy)
+{
+ uint64_t tmp[81U] = { 0U };
+ uint64_t *t0 = tmp;
+ uint64_t *t1 = tmp + (uint32_t)54U;
+ uint64_t *x3 = t1;
+ uint64_t *y3 = t1 + (uint32_t)9U;
+ uint64_t *z3 = t1 + (uint32_t)18U;
+ uint64_t *t01 = t0;
+ uint64_t *t11 = t0 + (uint32_t)9U;
+ uint64_t *t2 = t0 + (uint32_t)18U;
+ uint64_t *t3 = t0 + (uint32_t)27U;
+ uint64_t *t4 = t0 + (uint32_t)36U;
+ uint64_t *t5 = t0 + (uint32_t)45U;
+ uint64_t *x1 = x;
+ uint64_t *y1 = x + (uint32_t)9U;
+ uint64_t *z10 = x + (uint32_t)18U;
+ uint64_t *x20 = y;
+ uint64_t *y20 = y + (uint32_t)9U;
+ uint64_t *z20 = y + (uint32_t)18U;
+ fmul(t01, x1, x20);
+ fmul(t11, y1, y20);
+ fmul(t2, z10, z20);
+ fadd(t3, x1, y1);
+ fadd(t4, x20, y20);
+ fmul(t3, t3, t4);
+ fadd(t4, t01, t11);
+ uint64_t *y10 = x + (uint32_t)9U;
+ uint64_t *z11 = x + (uint32_t)18U;
+ uint64_t *y2 = y + (uint32_t)9U;
+ uint64_t *z21 = y + (uint32_t)18U;
+ fsub(t3, t3, t4);
+ fadd(t4, y10, z11);
+ fadd(t5, y2, z21);
+ fmul(t4, t4, t5);
+ fadd(t5, t11, t2);
+ fsub(t4, t4, t5);
+ uint64_t *x10 = x;
+ uint64_t *z1 = x + (uint32_t)18U;
+ uint64_t *x2 = y;
+ uint64_t *z2 = y + (uint32_t)18U;
+ fadd(x3, x10, z1);
+ fadd(y3, x2, z2);
+ fmul(x3, x3, y3);
+ fadd(y3, t01, t2);
+ fsub(y3, x3, y3);
+ uint64_t b_coeff[9U] = { 0U };
+ p521_make_b_coeff(b_coeff);
+ fmul(z3, b_coeff, t2);
+ fsub(x3, y3, z3);
+ fadd(z3, x3, x3);
+ fadd(x3, x3, z3);
+ fsub(z3, t11, x3);
+ fadd(x3, t11, x3);
+ uint64_t b_coeff0[9U] = { 0U };
+ p521_make_b_coeff(b_coeff0);
+ fmul(y3, b_coeff0, y3);
+ fadd(t11, t2, t2);
+ fadd(t2, t11, t2);
+ fsub(y3, y3, t2);
+ fsub(y3, y3, t01);
+ fadd(t11, y3, y3);
+ fadd(y3, t11, y3);
+ fadd(t11, t01, t01);
+ fadd(t01, t11, t01);
+ fsub(t01, t01, t2);
+ fmul(t11, t4, y3);
+ fmul(t2, t01, y3);
+ fmul(y3, x3, z3);
+ fadd(y3, y3, t2);
+ fmul(x3, t3, x3);
+ fsub(x3, x3, t11);
+ fmul(z3, t4, z3);
+ fmul(t11, t3, t01);
+ fadd(z3, z3, t11);
+ memcpy(xy, t1, (uint32_t)27U * sizeof (uint64_t));
+}
+
+static inline void point_double(uint64_t *x, uint64_t *xx)
+{
+ uint64_t tmp[45U] = { 0U };
+ uint64_t *x1 = x;
+ uint64_t *z = x + (uint32_t)18U;
+ uint64_t *x3 = xx;
+ uint64_t *y3 = xx + (uint32_t)9U;
+ uint64_t *z3 = xx + (uint32_t)18U;
+ uint64_t *t0 = tmp;
+ uint64_t *t1 = tmp + (uint32_t)9U;
+ uint64_t *t2 = tmp + (uint32_t)18U;
+ uint64_t *t3 = tmp + (uint32_t)27U;
+ uint64_t *t4 = tmp + (uint32_t)36U;
+ uint64_t *x2 = x;
+ uint64_t *y = x + (uint32_t)9U;
+ uint64_t *z1 = x + (uint32_t)18U;
+ fsqr(t0, x2);
+ fsqr(t1, y);
+ fsqr(t2, z1);
+ fmul(t3, x2, y);
+ fadd(t3, t3, t3);
+ fmul(t4, y, z1);
+ fmul(z3, x1, z);
+ fadd(z3, z3, z3);
+ uint64_t b_coeff[9U] = { 0U };
+ p521_make_b_coeff(b_coeff);
+ fmul(y3, b_coeff, t2);
+ fsub(y3, y3, z3);
+ fadd(x3, y3, y3);
+ fadd(y3, x3, y3);
+ fsub(x3, t1, y3);
+ fadd(y3, t1, y3);
+ fmul(y3, x3, y3);
+ fmul(x3, x3, t3);
+ fadd(t3, t2, t2);
+ fadd(t2, t2, t3);
+ uint64_t b_coeff0[9U] = { 0U };
+ p521_make_b_coeff(b_coeff0);
+ fmul(z3, b_coeff0, z3);
+ fsub(z3, z3, t2);
+ fsub(z3, z3, t0);
+ fadd(t3, z3, z3);
+ fadd(z3, z3, t3);
+ fadd(t3, t0, t0);
+ fadd(t0, t3, t0);
+ fsub(t0, t0, t2);
+ fmul(t0, t0, z3);
+ fadd(y3, y3, t0);
+ fadd(t0, t4, t4);
+ fmul(z3, t0, z3);
+ fsub(x3, x3, z3);
+ fmul(z3, t0, t1);
+ fadd(z3, z3, z3);
+ fadd(z3, z3, z3);
+}
+
+static inline void point_zero(uint64_t *one)
+{
+ uint64_t *x = one;
+ uint64_t *y = one + (uint32_t)9U;
+ uint64_t *z = one + (uint32_t)18U;
+ p521_make_fzero(x);
+ p521_make_fone(y);
+ p521_make_fzero(z);
+}
+
+static inline void point_mul(uint64_t *res, uint64_t *scalar, uint64_t *p)
+{
+ uint64_t table[432U] = { 0U };
+ uint64_t tmp[27U] = { 0U };
+ uint64_t *t0 = table;
+ uint64_t *t1 = table + (uint32_t)27U;
+ point_zero(t0);
+ memcpy(t1, p, (uint32_t)27U * sizeof (uint64_t));
+ KRML_MAYBE_FOR7(i,
+ (uint32_t)0U,
+ (uint32_t)7U,
+ (uint32_t)1U,
+ uint64_t *t11 = table + (i + (uint32_t)1U) * (uint32_t)27U;
+ point_double(t11, tmp);
+ memcpy(table + ((uint32_t)2U * i + (uint32_t)2U) * (uint32_t)27U,
+ tmp,
+ (uint32_t)27U * sizeof (uint64_t));
+ uint64_t *t2 = table + ((uint32_t)2U * i + (uint32_t)2U) * (uint32_t)27U;
+ point_add(p, t2, tmp);
+ memcpy(table + ((uint32_t)2U * i + (uint32_t)3U) * (uint32_t)27U,
+ tmp,
+ (uint32_t)27U * sizeof (uint64_t)););
+ uint32_t i0 = (uint32_t)520U;
+ uint64_t bits_c = Hacl_Bignum_Lib_bn_get_bits_u64((uint32_t)9U, scalar, i0, (uint32_t)4U);
+ memcpy(res, (uint64_t *)table, (uint32_t)27U * sizeof (uint64_t));
+ KRML_MAYBE_FOR15(i1,
+ (uint32_t)0U,
+ (uint32_t)15U,
+ (uint32_t)1U,
+ uint64_t c = FStar_UInt64_eq_mask(bits_c, (uint64_t)(i1 + (uint32_t)1U));
+ const uint64_t *res_j = table + (i1 + (uint32_t)1U) * (uint32_t)27U;
+ for (uint32_t i = (uint32_t)0U; i < (uint32_t)27U; i++)
+ {
+ uint64_t *os = res;
+ uint64_t x = (c & res_j[i]) | (~c & res[i]);
+ os[i] = x;
+ });
+ uint64_t tmp0[27U] = { 0U };
+ for (uint32_t i1 = (uint32_t)0U; i1 < (uint32_t)130U; i1++)
+ {
+ KRML_MAYBE_FOR4(i, (uint32_t)0U, (uint32_t)4U, (uint32_t)1U, point_double(res, res););
+ uint32_t k = (uint32_t)520U - (uint32_t)4U * i1 - (uint32_t)4U;
+ uint64_t bits_l = Hacl_Bignum_Lib_bn_get_bits_u64((uint32_t)9U, scalar, k, (uint32_t)4U);
+ memcpy(tmp0, (uint64_t *)table, (uint32_t)27U * sizeof (uint64_t));
+ KRML_MAYBE_FOR15(i2,
+ (uint32_t)0U,
+ (uint32_t)15U,
+ (uint32_t)1U,
+ uint64_t c = FStar_UInt64_eq_mask(bits_l, (uint64_t)(i2 + (uint32_t)1U));
+ const uint64_t *res_j = table + (i2 + (uint32_t)1U) * (uint32_t)27U;
+ for (uint32_t i = (uint32_t)0U; i < (uint32_t)27U; i++)
+ {
+ uint64_t *os = tmp0;
+ uint64_t x = (c & res_j[i]) | (~c & tmp0[i]);
+ os[i] = x;
+ });
+ point_add(res, tmp0, res);
+ }
+}
+
+static inline void point_mul_g(uint64_t *res, uint64_t *scalar)
+{
+ uint64_t g[27U] = { 0U };
+ uint64_t *x = g;
+ uint64_t *y = g + (uint32_t)9U;
+ uint64_t *z = g + (uint32_t)18U;
+ p521_make_g_x(x);
+ p521_make_g_y(y);
+ p521_make_fone(z);
+ point_mul(res, scalar, g);
}
static inline void
-p521_make_order(uint64_t *n)
+point_mul_double_g(uint64_t *res, uint64_t *scalar1, uint64_t *scalar2, uint64_t *p)
{
- n[0U] = (uint64_t)0xbb6fb71e91386409U;
- n[1U] = (uint64_t)0x3bb5c9b8899c47aeU;
- n[2U] = (uint64_t)0x7fcc0148f709a5d0U;
- n[3U] = (uint64_t)0x51868783bf2f966bU;
- n[4U] = (uint64_t)0xfffffffffffffffaU;
- n[5U] = (uint64_t)0xffffffffffffffffU;
- n[6U] = (uint64_t)0xffffffffffffffffU;
- n[7U] = (uint64_t)0xffffffffffffffffU;
- n[8U] = (uint64_t)0x1ffU;
+ uint64_t tmp[27U] = { 0U };
+ point_mul_g(tmp, scalar1);
+ point_mul(res, scalar2, p);
+ point_add(res, tmp, res);
+}
+
+static inline bool
+ecdsa_sign_msg_as_qelem(
+ uint8_t *signature,
+ uint64_t *m_q,
+ uint8_t *private_key,
+ uint8_t *nonce
+)
+{
+ uint64_t rsdk_q[36U] = { 0U };
+ uint64_t *r_q = rsdk_q;
+ uint64_t *s_q = rsdk_q + (uint32_t)9U;
+ uint64_t *d_a = rsdk_q + (uint32_t)18U;
+ uint64_t *k_q = rsdk_q + (uint32_t)27U;
+ uint64_t is_sk_valid = load_qelem_conditional(d_a, private_key);
+ uint64_t is_nonce_valid = load_qelem_conditional(k_q, nonce);
+ uint64_t are_sk_nonce_valid = is_sk_valid & is_nonce_valid;
+ uint64_t p[27U] = { 0U };
+ point_mul_g(p, k_q);
+ uint64_t zinv[9U] = { 0U };
+ uint64_t *px = p;
+ uint64_t *pz = p + (uint32_t)18U;
+ p521_finv(zinv, pz);
+ fmul(r_q, px, zinv);
+ from_mont(r_q, r_q);
+ qmod_short(r_q, r_q);
+ uint64_t kinv[9U] = { 0U };
+ p521_qinv(kinv, k_q);
+ qmul(s_q, r_q, d_a);
+ from_qmont(m_q, m_q);
+ qadd(s_q, m_q, s_q);
+ qmul(s_q, kinv, s_q);
+ bn_to_bytes_be(signature, r_q);
+ bn_to_bytes_be(signature + (uint32_t)66U, s_q);
+ uint64_t bn_zero0[9U] = { 0U };
+ uint64_t res = bn_is_eq_mask(r_q, bn_zero0);
+ uint64_t is_r_zero = res;
+ uint64_t bn_zero[9U] = { 0U };
+ uint64_t res0 = bn_is_eq_mask(s_q, bn_zero);
+ uint64_t is_s_zero = res0;
+ uint64_t m = are_sk_nonce_valid & (~is_r_zero & ~is_s_zero);
+ bool res1 = m == (uint64_t)0xFFFFFFFFFFFFFFFFU;
+ return res1;
+}
+
+static inline bool
+ecdsa_verify_msg_as_qelem(
+ uint64_t *m_q,
+ uint8_t *public_key,
+ uint8_t *signature_r,
+ uint8_t *signature_s
+)
+{
+ uint64_t tmp[63U] = { 0U };
+ uint64_t *pk = tmp;
+ uint64_t *r_q = tmp + (uint32_t)27U;
+ uint64_t *s_q = tmp + (uint32_t)36U;
+ uint64_t *u1 = tmp + (uint32_t)45U;
+ uint64_t *u2 = tmp + (uint32_t)54U;
+ uint64_t p_aff[18U] = { 0U };
+ uint8_t *p_x = public_key;
+ uint8_t *p_y = public_key + (uint32_t)66U;
+ uint64_t *bn_p_x = p_aff;
+ uint64_t *bn_p_y = p_aff + (uint32_t)9U;
+ bn_from_bytes_be(bn_p_x, p_x);
+ bn_from_bytes_be(bn_p_y, p_y);
+ uint64_t *px0 = p_aff;
+ uint64_t *py0 = p_aff + (uint32_t)9U;
+ uint64_t lessX = bn_is_lt_prime_mask(px0);
+ uint64_t lessY = bn_is_lt_prime_mask(py0);
+ uint64_t res0 = lessX & lessY;
+ bool is_xy_valid = res0 == (uint64_t)0xFFFFFFFFFFFFFFFFU;
+ bool res;
+ if (!is_xy_valid)
+ {
+ res = false;
+ }
+ else
+ {
+ uint64_t rp[9U] = { 0U };
+ uint64_t tx[9U] = { 0U };
+ uint64_t ty[9U] = { 0U };
+ uint64_t *px = p_aff;
+ uint64_t *py = p_aff + (uint32_t)9U;
+ to_mont(tx, px);
+ to_mont(ty, py);
+ uint64_t tmp1[9U] = { 0U };
+ fsqr(rp, tx);
+ fmul(rp, rp, tx);
+ p521_make_a_coeff(tmp1);
+ fmul(tmp1, tmp1, tx);
+ fadd(rp, tmp1, rp);
+ p521_make_b_coeff(tmp1);
+ fadd(rp, tmp1, rp);
+ fsqr(ty, ty);
+ uint64_t r = bn_is_eq_mask(ty, rp);
+ uint64_t r0 = r;
+ bool r1 = r0 == (uint64_t)0xFFFFFFFFFFFFFFFFU;
+ res = r1;
+ }
+ if (res)
+ {
+ uint64_t *px = p_aff;
+ uint64_t *py = p_aff + (uint32_t)9U;
+ uint64_t *rx = pk;
+ uint64_t *ry = pk + (uint32_t)9U;
+ uint64_t *rz = pk + (uint32_t)18U;
+ to_mont(rx, px);
+ to_mont(ry, py);
+ p521_make_fone(rz);
+ }
+ bool is_pk_valid = res;
+ bn_from_bytes_be(r_q, signature_r);
+ bn_from_bytes_be(s_q, signature_s);
+ uint64_t tmp10[9U] = { 0U };
+ p521_make_order(tmp10);
+ uint64_t c = bn_sub(tmp10, r_q, tmp10);
+ uint64_t is_lt_order = (uint64_t)0U - c;
+ uint64_t bn_zero0[9U] = { 0U };
+ uint64_t res1 = bn_is_eq_mask(r_q, bn_zero0);
+ uint64_t is_eq_zero = res1;
+ uint64_t is_r_valid = is_lt_order & ~is_eq_zero;
+ uint64_t tmp11[9U] = { 0U };
+ p521_make_order(tmp11);
+ uint64_t c0 = bn_sub(tmp11, s_q, tmp11);
+ uint64_t is_lt_order0 = (uint64_t)0U - c0;
+ uint64_t bn_zero1[9U] = { 0U };
+ uint64_t res2 = bn_is_eq_mask(s_q, bn_zero1);
+ uint64_t is_eq_zero0 = res2;
+ uint64_t is_s_valid = is_lt_order0 & ~is_eq_zero0;
+ bool
+ is_rs_valid =
+ is_r_valid
+ == (uint64_t)0xFFFFFFFFFFFFFFFFU
+ && is_s_valid == (uint64_t)0xFFFFFFFFFFFFFFFFU;
+ if (!(is_pk_valid && is_rs_valid))
+ {
+ return false;
+ }
+ uint64_t sinv[9U] = { 0U };
+ p521_qinv(sinv, s_q);
+ uint64_t tmp1[9U] = { 0U };
+ from_qmont(tmp1, m_q);
+ qmul(u1, sinv, tmp1);
+ uint64_t tmp12[9U] = { 0U };
+ from_qmont(tmp12, r_q);
+ qmul(u2, sinv, tmp12);
+ uint64_t res3[27U] = { 0U };
+ point_mul_double_g(res3, u1, u2, pk);
+ uint64_t *pz0 = res3 + (uint32_t)18U;
+ uint64_t bn_zero[9U] = { 0U };
+ uint64_t res10 = bn_is_eq_mask(pz0, bn_zero);
+ uint64_t m = res10;
+ if (m == (uint64_t)0xFFFFFFFFFFFFFFFFU)
+ {
+ return false;
+ }
+ uint64_t x[9U] = { 0U };
+ uint64_t zinv[9U] = { 0U };
+ uint64_t *px = res3;
+ uint64_t *pz = res3 + (uint32_t)18U;
+ p521_finv(zinv, pz);
+ fmul(x, px, zinv);
+ from_mont(x, x);
+ qmod_short(x, x);
+ uint64_t m0 = bn_is_eq_mask(x, r_q);
+ bool res11 = m0 == (uint64_t)0xFFFFFFFFFFFFFFFFU;
+ return res11;
+}
+
+
+/*******************************************************************************
+
+ Verified C library for ECDSA and ECDH functions over the P-521 NIST curve.
+
+ This module implements signing and verification, key validation, conversions
+ between various point representations, and ECDH key agreement.
+
+*******************************************************************************/
+
+/*****************/
+/* ECDSA signing */
+/*****************/
+
+
+/**
+Create an ECDSA signature WITHOUT hashing first.
+
+ This function is intended to receive a hash of the input.
+ For convenience, we recommend using one of the hash-and-sign combined functions above.
+
+ The argument `msg` MUST be at least 66 bytes (i.e. `msg_len >= 66`).
+
+ NOTE: The equivalent functions in OpenSSL and Fiat-Crypto both accept inputs
+ smaller than 66 bytes. These libraries left-pad the input with enough zeroes to
+ reach the minimum 66 byte size. Clients who need behavior identical to OpenSSL
+ need to perform the left-padding themselves.
+
+ The function returns `true` for successful creation of an ECDSA signature and `false` otherwise.
+
+ The outparam `signature` (R || S) points to 132 bytes of valid memory, i.e., uint8_t[132].
+ The argument `msg` points to `msg_len` bytes of valid memory, i.e., uint8_t[msg_len].
+ The arguments `private_key` and `nonce` point to 66 bytes of valid memory, i.e., uint8_t[66].
+
+ The function also checks whether `private_key` and `nonce` are valid values:
+ • 0 < `private_key` < the order of the curve
+ • 0 < `nonce` < the order of the curve
+*/
+bool
+Hacl_P521_ecdsa_sign_p521_without_hash(
+ uint8_t *signature,
+ uint32_t msg_len,
+ uint8_t *msg,
+ uint8_t *private_key,
+ uint8_t *nonce
+)
+{
+ uint64_t m_q[9U] = { 0U };
+ uint8_t mHash[66U] = { 0U };
+ memcpy(mHash, msg, (uint32_t)66U * sizeof (uint8_t));
+ KRML_HOST_IGNORE(msg_len);
+ bn_from_bytes_be(m_q, mHash);
+ qmod_short(m_q, m_q);
+ bool res = ecdsa_sign_msg_as_qelem(signature, m_q, private_key, nonce);
+ return res;
+}
+
+
+/**********************/
+/* ECDSA verification */
+/**********************/
+
+
+/**
+Verify an ECDSA signature WITHOUT hashing first.
+
+ This function is intended to receive a hash of the input.
+ For convenience, we recommend using one of the hash-and-verify combined functions above.
+
+ The argument `msg` MUST be at least 66 bytes (i.e. `msg_len >= 66`).
+
+ The function returns `true` if the signature is valid and `false` otherwise.
+
+ The argument `msg` points to `msg_len` bytes of valid memory, i.e., uint8_t[msg_len].
+ The argument `public_key` (x || y) points to 132 bytes of valid memory, i.e., uint8_t[132].
+ The arguments `signature_r` and `signature_s` point to 66 bytes of valid memory, i.e., uint8_t[66].
+
+ The function also checks whether `public_key` is valid
+*/
+bool
+Hacl_P521_ecdsa_verif_without_hash(
+ uint32_t msg_len,
+ uint8_t *msg,
+ uint8_t *public_key,
+ uint8_t *signature_r,
+ uint8_t *signature_s
+)
+{
+ uint64_t m_q[9U] = { 0U };
+ uint8_t mHash[66U] = { 0U };
+ memcpy(mHash, msg, (uint32_t)66U * sizeof (uint8_t));
+ KRML_HOST_IGNORE(msg_len);
+ bn_from_bytes_be(m_q, mHash);
+ qmod_short(m_q, m_q);
+ bool res = ecdsa_verify_msg_as_qelem(m_q, public_key, signature_r, signature_s);
+ return res;
+}
+
+
+/******************/
+/* Key validation */
+/******************/
+
+/**
+Public key validation.
+
+ The function returns `true` if a public key is valid and `false` otherwise.
+
+ The argument `public_key` points to 132 bytes of valid memory, i.e., uint8_t[132].
+
+ The public key (x || y) is valid (with respect to SP 800-56A):
+ • the public key is not the “point at infinity”, represented as O.
+ • the affine x and y coordinates of the point represented by the public key are
+ in the range [0, p 1] where p is the prime defining the finite field.
+ • y^2 = x^3 + ax + b where a and b are the coefficients of the curve equation.
+ The last extract is taken from: https://neilmadden.blog/2017/05/17/so-how-do-you-validate-nist-ecdh-public-keys/
+*/
+bool Hacl_P521_validate_public_key(uint8_t *public_key)
+{
+ uint64_t point_jac[27U] = { 0U };
+ uint64_t p_aff[18U] = { 0U };
+ uint8_t *p_x = public_key;
+ uint8_t *p_y = public_key + (uint32_t)66U;
+ uint64_t *bn_p_x = p_aff;
+ uint64_t *bn_p_y = p_aff + (uint32_t)9U;
+ bn_from_bytes_be(bn_p_x, p_x);
+ bn_from_bytes_be(bn_p_y, p_y);
+ uint64_t *px0 = p_aff;
+ uint64_t *py0 = p_aff + (uint32_t)9U;
+ uint64_t lessX = bn_is_lt_prime_mask(px0);
+ uint64_t lessY = bn_is_lt_prime_mask(py0);
+ uint64_t res0 = lessX & lessY;
+ bool is_xy_valid = res0 == (uint64_t)0xFFFFFFFFFFFFFFFFU;
+ bool res;
+ if (!is_xy_valid)
+ {
+ res = false;
+ }
+ else
+ {
+ uint64_t rp[9U] = { 0U };
+ uint64_t tx[9U] = { 0U };
+ uint64_t ty[9U] = { 0U };
+ uint64_t *px = p_aff;
+ uint64_t *py = p_aff + (uint32_t)9U;
+ to_mont(tx, px);
+ to_mont(ty, py);
+ uint64_t tmp[9U] = { 0U };
+ fsqr(rp, tx);
+ fmul(rp, rp, tx);
+ p521_make_a_coeff(tmp);
+ fmul(tmp, tmp, tx);
+ fadd(rp, tmp, rp);
+ p521_make_b_coeff(tmp);
+ fadd(rp, tmp, rp);
+ fsqr(ty, ty);
+ uint64_t r = bn_is_eq_mask(ty, rp);
+ uint64_t r0 = r;
+ bool r1 = r0 == (uint64_t)0xFFFFFFFFFFFFFFFFU;
+ res = r1;
+ }
+ if (res)
+ {
+ uint64_t *px = p_aff;
+ uint64_t *py = p_aff + (uint32_t)9U;
+ uint64_t *rx = point_jac;
+ uint64_t *ry = point_jac + (uint32_t)9U;
+ uint64_t *rz = point_jac + (uint32_t)18U;
+ to_mont(rx, px);
+ to_mont(ry, py);
+ p521_make_fone(rz);
+ }
+ bool res1 = res;
+ return res1;
}
/**
@@ -114,18 +1466,302 @@ Private key validation.
The private key is valid:
• 0 < `private_key` < the order of the curve
*/
+bool Hacl_P521_validate_private_key(uint8_t *private_key)
+{
+ uint64_t bn_sk[9U] = { 0U };
+ bn_from_bytes_be(bn_sk, private_key);
+ uint64_t tmp[9U] = { 0U };
+ p521_make_order(tmp);
+ uint64_t c = bn_sub(tmp, bn_sk, tmp);
+ uint64_t is_lt_order = (uint64_t)0U - c;
+ uint64_t bn_zero[9U] = { 0U };
+ uint64_t res = bn_is_eq_mask(bn_sk, bn_zero);
+ uint64_t is_eq_zero = res;
+ uint64_t res0 = is_lt_order & ~is_eq_zero;
+ return res0 == (uint64_t)0xFFFFFFFFFFFFFFFFU;
+}
+
+/*******************************************************************************
+ Parsing and Serializing public keys.
+
+ A public key is a point (x, y) on the P-521 NIST curve.
+
+ The point can be represented in the following three ways.
+ • raw = [ x || y ], 132 bytes
+ • uncompressed = [ 0x04 || x || y ], 133 bytes
+ • compressed = [ (0x02 for even `y` and 0x03 for odd `y`) || x ], 33 bytes
+
+*******************************************************************************/
+
+
+/**
+Convert a public key from uncompressed to its raw form.
+
+ The function returns `true` for successful conversion of a public key and `false` otherwise.
+
+ The outparam `pk_raw` points to 132 bytes of valid memory, i.e., uint8_t[132].
+ The argument `pk` points to 133 bytes of valid memory, i.e., uint8_t[133].
+
+ The function DOESN'T check whether (x, y) is a valid point.
+*/
+bool Hacl_P521_uncompressed_to_raw(uint8_t *pk, uint8_t *pk_raw)
+{
+ uint8_t pk0 = pk[0U];
+ if (pk0 != (uint8_t)0x04U)
+ {
+ return false;
+ }
+ memcpy(pk_raw, pk + (uint32_t)1U, (uint32_t)132U * sizeof (uint8_t));
+ return true;
+}
+
+/**
+Convert a public key from compressed to its raw form.
+
+ The function returns `true` for successful conversion of a public key and `false` otherwise.
+
+ The outparam `pk_raw` points to 132 bytes of valid memory, i.e., uint8_t[132].
+ The argument `pk` points to 33 bytes of valid memory, i.e., uint8_t[33].
+
+ The function also checks whether (x, y) is a valid point.
+*/
+bool Hacl_P521_compressed_to_raw(uint8_t *pk, uint8_t *pk_raw)
+{
+ uint64_t xa[9U] = { 0U };
+ uint64_t ya[9U] = { 0U };
+ uint8_t *pk_xb = pk + (uint32_t)1U;
+ uint8_t s0 = pk[0U];
+ uint8_t s01 = s0;
+ bool b;
+ if (!(s01 == (uint8_t)0x02U || s01 == (uint8_t)0x03U))
+ {
+ b = false;
+ }
+ else
+ {
+ uint8_t *xb = pk + (uint32_t)1U;
+ bn_from_bytes_be(xa, xb);
+ uint64_t is_x_valid = bn_is_lt_prime_mask(xa);
+ bool is_x_valid1 = is_x_valid == (uint64_t)0xFFFFFFFFFFFFFFFFU;
+ bool is_y_odd = s01 == (uint8_t)0x03U;
+ if (!is_x_valid1)
+ {
+ b = false;
+ }
+ else
+ {
+ uint64_t y2M[9U] = { 0U };
+ uint64_t xM[9U] = { 0U };
+ uint64_t yM[9U] = { 0U };
+ to_mont(xM, xa);
+ uint64_t tmp[9U] = { 0U };
+ fsqr(y2M, xM);
+ fmul(y2M, y2M, xM);
+ p521_make_a_coeff(tmp);
+ fmul(tmp, tmp, xM);
+ fadd(y2M, tmp, y2M);
+ p521_make_b_coeff(tmp);
+ fadd(y2M, tmp, y2M);
+ p521_fsqrt(yM, y2M);
+ from_mont(ya, yM);
+ fsqr(yM, yM);
+ uint64_t r = bn_is_eq_mask(yM, y2M);
+ uint64_t r0 = r;
+ bool is_y_valid = r0 == (uint64_t)0xFFFFFFFFFFFFFFFFU;
+ bool is_y_valid0 = is_y_valid;
+ if (!is_y_valid0)
+ {
+ b = false;
+ }
+ else
+ {
+ uint64_t is_y_odd1 = ya[0U] & (uint64_t)1U;
+ bool is_y_odd2 = is_y_odd1 == (uint64_t)1U;
+ uint64_t zero[9U] = { 0U };
+ if (is_y_odd2 != is_y_odd)
+ {
+ fsub(ya, zero, ya);
+ }
+ b = true;
+ }
+ }
+ }
+ if (b)
+ {
+ memcpy(pk_raw, pk_xb, (uint32_t)66U * sizeof (uint8_t));
+ bn_to_bytes_be(pk_raw + (uint32_t)66U, ya);
+ }
+ return b;
+}
+
+/**
+Convert a public key from raw to its uncompressed form.
+
+ The outparam `pk` points to 133 bytes of valid memory, i.e., uint8_t[133].
+ The argument `pk_raw` points to 132 bytes of valid memory, i.e., uint8_t[132].
+
+ The function DOESN'T check whether (x, y) is a valid point.
+*/
+void Hacl_P521_raw_to_uncompressed(uint8_t *pk_raw, uint8_t *pk)
+{
+ pk[0U] = (uint8_t)0x04U;
+ memcpy(pk + (uint32_t)1U, pk_raw, (uint32_t)132U * sizeof (uint8_t));
+}
+
+/**
+Convert a public key from raw to its compressed form.
+
+ The outparam `pk` points to 33 bytes of valid memory, i.e., uint8_t[33].
+ The argument `pk_raw` points to 132 bytes of valid memory, i.e., uint8_t[132].
+
+ The function DOESN'T check whether (x, y) is a valid point.
+*/
+void Hacl_P521_raw_to_compressed(uint8_t *pk_raw, uint8_t *pk)
+{
+ uint8_t *pk_x = pk_raw;
+ uint8_t *pk_y = pk_raw + (uint32_t)66U;
+ uint64_t bn_f[9U] = { 0U };
+ bn_from_bytes_be(bn_f, pk_y);
+ uint64_t is_odd_f = bn_f[0U] & (uint64_t)1U;
+ pk[0U] = (uint8_t)is_odd_f + (uint8_t)0x02U;
+ memcpy(pk + (uint32_t)1U, pk_x, (uint32_t)66U * sizeof (uint8_t));
+}
+
+
+/******************/
+/* ECDH agreement */
+/******************/
+
+/**
+Compute the public key from the private key.
+
+ The function returns `true` if a private key is valid and `false` otherwise.
+
+ The outparam `public_key` points to 132 bytes of valid memory, i.e., uint8_t[132].
+ The argument `private_key` points to 66 bytes of valid memory, i.e., uint8_t[66].
+
+ The private key is valid:
+ • 0 < `private_key` < the order of the curve.
+*/
+bool Hacl_P521_dh_initiator(uint8_t *public_key, uint8_t *private_key)
+{
+ uint64_t tmp[36U] = { 0U };
+ uint64_t *sk = tmp;
+ uint64_t *pk = tmp + (uint32_t)9U;
+ uint64_t is_sk_valid = load_qelem_conditional(sk, private_key);
+ point_mul_g(pk, sk);
+ uint64_t aff_p[18U] = { 0U };
+ uint64_t zinv[9U] = { 0U };
+ uint64_t *px = pk;
+ uint64_t *py0 = pk + (uint32_t)9U;
+ uint64_t *pz = pk + (uint32_t)18U;
+ uint64_t *x = aff_p;
+ uint64_t *y = aff_p + (uint32_t)9U;
+ p521_finv(zinv, pz);
+ fmul(x, px, zinv);
+ fmul(y, py0, zinv);
+ from_mont(x, x);
+ from_mont(y, y);
+ uint64_t *px0 = aff_p;
+ uint64_t *py = aff_p + (uint32_t)9U;
+ bn_to_bytes_be(public_key, px0);
+ bn_to_bytes_be(public_key + (uint32_t)66U, py);
+ return is_sk_valid == (uint64_t)0xFFFFFFFFFFFFFFFFU;
+}
+
+/**
+Execute the diffie-hellmann key exchange.
+
+ The function returns `true` for successful creation of an ECDH shared secret and
+ `false` otherwise.
+
+ The outparam `shared_secret` points to 132 bytes of valid memory, i.e., uint8_t[132].
+ The argument `their_pubkey` points to 132 bytes of valid memory, i.e., uint8_t[132].
+ The argument `private_key` points to 66 bytes of valid memory, i.e., uint8_t[66].
+
+ The function also checks whether `private_key` and `their_pubkey` are valid.
+*/
bool
-Hacl_P521_validate_private_key(uint8_t *private_key)
+Hacl_P521_dh_responder(uint8_t *shared_secret, uint8_t *their_pubkey, uint8_t *private_key)
{
- uint64_t bn_sk[9U] = { 0U };
- bn_from_bytes_be(bn_sk, private_key);
- uint64_t tmp[9U] = { 0U };
- p521_make_order(tmp);
- uint64_t c = bn_sub(tmp, bn_sk, tmp);
- uint64_t is_lt_order = (uint64_t)0U - c;
- uint64_t bn_zero[9U] = { 0U };
- uint64_t res = bn_is_eq_mask(bn_sk, bn_zero);
- uint64_t is_eq_zero = res;
- uint64_t res0 = is_lt_order & ~is_eq_zero;
- return res0 == (uint64_t)0xFFFFFFFFFFFFFFFFU;
+ uint64_t tmp[264U] = { 0U };
+ uint64_t *sk = tmp;
+ uint64_t *pk = tmp + (uint32_t)9U;
+ uint64_t p_aff[18U] = { 0U };
+ uint8_t *p_x = their_pubkey;
+ uint8_t *p_y = their_pubkey + (uint32_t)66U;
+ uint64_t *bn_p_x = p_aff;
+ uint64_t *bn_p_y = p_aff + (uint32_t)9U;
+ bn_from_bytes_be(bn_p_x, p_x);
+ bn_from_bytes_be(bn_p_y, p_y);
+ uint64_t *px0 = p_aff;
+ uint64_t *py0 = p_aff + (uint32_t)9U;
+ uint64_t lessX = bn_is_lt_prime_mask(px0);
+ uint64_t lessY = bn_is_lt_prime_mask(py0);
+ uint64_t res0 = lessX & lessY;
+ bool is_xy_valid = res0 == (uint64_t)0xFFFFFFFFFFFFFFFFU;
+ bool res;
+ if (!is_xy_valid)
+ {
+ res = false;
+ }
+ else
+ {
+ uint64_t rp[9U] = { 0U };
+ uint64_t tx[9U] = { 0U };
+ uint64_t ty[9U] = { 0U };
+ uint64_t *px = p_aff;
+ uint64_t *py = p_aff + (uint32_t)9U;
+ to_mont(tx, px);
+ to_mont(ty, py);
+ uint64_t tmp1[9U] = { 0U };
+ fsqr(rp, tx);
+ fmul(rp, rp, tx);
+ p521_make_a_coeff(tmp1);
+ fmul(tmp1, tmp1, tx);
+ fadd(rp, tmp1, rp);
+ p521_make_b_coeff(tmp1);
+ fadd(rp, tmp1, rp);
+ fsqr(ty, ty);
+ uint64_t r = bn_is_eq_mask(ty, rp);
+ uint64_t r0 = r;
+ bool r1 = r0 == (uint64_t)0xFFFFFFFFFFFFFFFFU;
+ res = r1;
+ }
+ if (res)
+ {
+ uint64_t *px = p_aff;
+ uint64_t *py = p_aff + (uint32_t)9U;
+ uint64_t *rx = pk;
+ uint64_t *ry = pk + (uint32_t)9U;
+ uint64_t *rz = pk + (uint32_t)18U;
+ to_mont(rx, px);
+ to_mont(ry, py);
+ p521_make_fone(rz);
+ }
+ bool is_pk_valid = res;
+ uint64_t is_sk_valid = load_qelem_conditional(sk, private_key);
+ uint64_t ss_proj[27U] = { 0U };
+ if (is_pk_valid)
+ {
+ point_mul(ss_proj, sk, pk);
+ uint64_t aff_p[18U] = { 0U };
+ uint64_t zinv[9U] = { 0U };
+ uint64_t *px = ss_proj;
+ uint64_t *py1 = ss_proj + (uint32_t)9U;
+ uint64_t *pz = ss_proj + (uint32_t)18U;
+ uint64_t *x = aff_p;
+ uint64_t *y = aff_p + (uint32_t)9U;
+ p521_finv(zinv, pz);
+ fmul(x, px, zinv);
+ fmul(y, py1, zinv);
+ from_mont(x, x);
+ from_mont(y, y);
+ uint64_t *px1 = aff_p;
+ uint64_t *py = aff_p + (uint32_t)9U;
+ bn_to_bytes_be(shared_secret, px1);
+ bn_to_bytes_be(shared_secret + (uint32_t)66U, py);
+ }
+ return is_sk_valid == (uint64_t)0xFFFFFFFFFFFFFFFFU && is_pk_valid;
}
+
diff -up ./lib/freebl/verified/Hacl_P521.h.p521_hacl ./lib/freebl/verified/Hacl_P521.h
--- ./lib/freebl/verified/Hacl_P521.h.p521_hacl 2024-01-10 14:02:53.234576425 -0800
+++ ./lib/freebl/verified/Hacl_P521.h 2024-01-10 14:04:29.764450895 -0800
@@ -22,24 +22,120 @@
* SOFTWARE.
*/
+
#ifndef __Hacl_P521_H
#define __Hacl_P521_H
#if defined(__cplusplus)
extern "C" {
#endif
-
+
#include <string.h>
#include "krml/internal/types.h"
#include "krml/lowstar_endianness.h"
#include "lib_intrinsics.h"
+
+/*******************************************************************************
+
+ Verified C library for ECDSA and ECDH functions over the P-521 NIST curve.
+
+ This module implements signing and verification, key validation, conversions
+ between various point representations, and ECDH key agreement.
+
+*******************************************************************************/
+
+/*****************/
+/* ECDSA signing */
+/*****************/
+
+
+/**
+Create an ECDSA signature WITHOUT hashing first.
+
+ This function is intended to receive a hash of the input.
+ For convenience, we recommend using one of the hash-and-sign combined functions above.
+
+ The argument `msg` MUST be at least 66 bytes (i.e. `msg_len >= 66`).
+
+ NOTE: The equivalent functions in OpenSSL and Fiat-Crypto both accept inputs
+ smaller than 66 bytes. These libraries left-pad the input with enough zeroes to
+ reach the minimum 66 byte size. Clients who need behavior identical to OpenSSL
+ need to perform the left-padding themselves.
+
+ The function returns `true` for successful creation of an ECDSA signature and `false` otherwise.
+
+ The outparam `signature` (R || S) points to 132 bytes of valid memory, i.e., uint8_t[132].
+ The argument `msg` points to `msg_len` bytes of valid memory, i.e., uint8_t[msg_len].
+ The arguments `private_key` and `nonce` point to 66 bytes of valid memory, i.e., uint8_t[66].
+
+ The function also checks whether `private_key` and `nonce` are valid values:
+ • 0 < `private_key` < the order of the curve
+ • 0 < `nonce` < the order of the curve
+*/
+bool
+Hacl_P521_ecdsa_sign_p521_without_hash(
+ uint8_t *signature,
+ uint32_t msg_len,
+ uint8_t *msg,
+ uint8_t *private_key,
+ uint8_t *nonce
+);
+
+
+/**********************/
+/* ECDSA verification */
+/**********************/
+
+
+/**
+Verify an ECDSA signature WITHOUT hashing first.
+
+ This function is intended to receive a hash of the input.
+ For convenience, we recommend using one of the hash-and-verify combined functions above.
+
+ The argument `msg` MUST be at least 66 bytes (i.e. `msg_len >= 66`).
+
+ The function returns `true` if the signature is valid and `false` otherwise.
+
+ The argument `msg` points to `msg_len` bytes of valid memory, i.e., uint8_t[msg_len].
+ The argument `public_key` (x || y) points to 132 bytes of valid memory, i.e., uint8_t[132].
+ The arguments `signature_r` and `signature_s` point to 66 bytes of valid memory, i.e., uint8_t[66].
+
+ The function also checks whether `public_key` is valid
+*/
+bool
+Hacl_P521_ecdsa_verif_without_hash(
+ uint32_t msg_len,
+ uint8_t *msg,
+ uint8_t *public_key,
+ uint8_t *signature_r,
+ uint8_t *signature_s
+);
+
+
/******************/
/* Key validation */
/******************/
/**
+Public key validation.
+
+ The function returns `true` if a public key is valid and `false` otherwise.
+
+ The argument `public_key` points to 132 bytes of valid memory, i.e., uint8_t[132].
+
+ The public key (x || y) is valid (with respect to SP 800-56A):
+ • the public key is not the “point at infinity”, represented as O.
+ • the affine x and y coordinates of the point represented by the public key are
+ in the range [0, p 1] where p is the prime defining the finite field.
+ • y^2 = x^3 + ax + b where a and b are the coefficients of the curve equation.
+ The last extract is taken from: https://neilmadden.blog/2017/05/17/so-how-do-you-validate-nist-ecdh-public-keys/
+*/
+bool Hacl_P521_validate_public_key(uint8_t *public_key);
+
+/**
Private key validation.
The function returns `true` if a private key is valid and `false` otherwise.
@@ -51,6 +147,96 @@ Private key validation.
*/
bool Hacl_P521_validate_private_key(uint8_t *private_key);
+/*******************************************************************************
+ Parsing and Serializing public keys.
+
+ A public key is a point (x, y) on the P-521 NIST curve.
+
+ The point can be represented in the following three ways.
+ • raw = [ x || y ], 132 bytes
+ • uncompressed = [ 0x04 || x || y ], 133 bytes
+ • compressed = [ (0x02 for even `y` and 0x03 for odd `y`) || x ], 33 bytes
+
+*******************************************************************************/
+
+
+/**
+Convert a public key from uncompressed to its raw form.
+
+ The function returns `true` for successful conversion of a public key and `false` otherwise.
+
+ The outparam `pk_raw` points to 132 bytes of valid memory, i.e., uint8_t[132].
+ The argument `pk` points to 133 bytes of valid memory, i.e., uint8_t[133].
+
+ The function DOESN'T check whether (x, y) is a valid point.
+*/
+bool Hacl_P521_uncompressed_to_raw(uint8_t *pk, uint8_t *pk_raw);
+
+/**
+Convert a public key from compressed to its raw form.
+
+ The function returns `true` for successful conversion of a public key and `false` otherwise.
+
+ The outparam `pk_raw` points to 132 bytes of valid memory, i.e., uint8_t[132].
+ The argument `pk` points to 33 bytes of valid memory, i.e., uint8_t[33].
+
+ The function also checks whether (x, y) is a valid point.
+*/
+bool Hacl_P521_compressed_to_raw(uint8_t *pk, uint8_t *pk_raw);
+
+/**
+Convert a public key from raw to its uncompressed form.
+
+ The outparam `pk` points to 133 bytes of valid memory, i.e., uint8_t[133].
+ The argument `pk_raw` points to 132 bytes of valid memory, i.e., uint8_t[132].
+
+ The function DOESN'T check whether (x, y) is a valid point.
+*/
+void Hacl_P521_raw_to_uncompressed(uint8_t *pk_raw, uint8_t *pk);
+
+/**
+Convert a public key from raw to its compressed form.
+
+ The outparam `pk` points to 33 bytes of valid memory, i.e., uint8_t[33].
+ The argument `pk_raw` points to 132 bytes of valid memory, i.e., uint8_t[132].
+
+ The function DOESN'T check whether (x, y) is a valid point.
+*/
+void Hacl_P521_raw_to_compressed(uint8_t *pk_raw, uint8_t *pk);
+
+
+/******************/
+/* ECDH agreement */
+/******************/
+
+/**
+Compute the public key from the private key.
+
+ The function returns `true` if a private key is valid and `false` otherwise.
+
+ The outparam `public_key` points to 132 bytes of valid memory, i.e., uint8_t[132].
+ The argument `private_key` points to 66 bytes of valid memory, i.e., uint8_t[66].
+
+ The private key is valid:
+ • 0 < `private_key` < the order of the curve.
+*/
+bool Hacl_P521_dh_initiator(uint8_t *public_key, uint8_t *private_key);
+
+/**
+Execute the diffie-hellmann key exchange.
+
+ The function returns `true` for successful creation of an ECDH shared secret and
+ `false` otherwise.
+
+ The outparam `shared_secret` points to 132 bytes of valid memory, i.e., uint8_t[132].
+ The argument `their_pubkey` points to 132 bytes of valid memory, i.e., uint8_t[132].
+ The argument `private_key` points to 66 bytes of valid memory, i.e., uint8_t[66].
+
+ The function also checks whether `private_key` and `their_pubkey` are valid.
+*/
+bool
+Hacl_P521_dh_responder(uint8_t *shared_secret, uint8_t *their_pubkey, uint8_t *private_key);
+
#if defined(__cplusplus)
}
#endif