org.bouncycastle.math.raw.Nat256 Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of bcprov-ext-debug-jdk18on Show documentation
Show all versions of bcprov-ext-debug-jdk18on Show documentation
The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for Java 1.8 and later with debug enabled.
The newest version!
package org.bouncycastle.math.raw;
import java.math.BigInteger;
import org.bouncycastle.util.Pack;
public abstract class Nat256
{
private static final long M = 0xFFFFFFFFL;
public static int add(int[] x, int[] y, int[] z)
{
long c = 0;
c += (x[0] & M) + (y[0] & M);
z[0] = (int)c;
c >>>= 32;
c += (x[1] & M) + (y[1] & M);
z[1] = (int)c;
c >>>= 32;
c += (x[2] & M) + (y[2] & M);
z[2] = (int)c;
c >>>= 32;
c += (x[3] & M) + (y[3] & M);
z[3] = (int)c;
c >>>= 32;
c += (x[4] & M) + (y[4] & M);
z[4] = (int)c;
c >>>= 32;
c += (x[5] & M) + (y[5] & M);
z[5] = (int)c;
c >>>= 32;
c += (x[6] & M) + (y[6] & M);
z[6] = (int)c;
c >>>= 32;
c += (x[7] & M) + (y[7] & M);
z[7] = (int)c;
c >>>= 32;
return (int)c;
}
public static int add(int[] x, int xOff, int[] y, int yOff, int[] z, int zOff)
{
long c = 0;
c += (x[xOff + 0] & M) + (y[yOff + 0] & M);
z[zOff + 0] = (int)c;
c >>>= 32;
c += (x[xOff + 1] & M) + (y[yOff + 1] & M);
z[zOff + 1] = (int)c;
c >>>= 32;
c += (x[xOff + 2] & M) + (y[yOff + 2] & M);
z[zOff + 2] = (int)c;
c >>>= 32;
c += (x[xOff + 3] & M) + (y[yOff + 3] & M);
z[zOff + 3] = (int)c;
c >>>= 32;
c += (x[xOff + 4] & M) + (y[yOff + 4] & M);
z[zOff + 4] = (int)c;
c >>>= 32;
c += (x[xOff + 5] & M) + (y[yOff + 5] & M);
z[zOff + 5] = (int)c;
c >>>= 32;
c += (x[xOff + 6] & M) + (y[yOff + 6] & M);
z[zOff + 6] = (int)c;
c >>>= 32;
c += (x[xOff + 7] & M) + (y[yOff + 7] & M);
z[zOff + 7] = (int)c;
c >>>= 32;
return (int)c;
}
public static int addBothTo(int[] x, int[] y, int[] z)
{
long c = 0;
c += (x[0] & M) + (y[0] & M) + (z[0] & M);
z[0] = (int)c;
c >>>= 32;
c += (x[1] & M) + (y[1] & M) + (z[1] & M);
z[1] = (int)c;
c >>>= 32;
c += (x[2] & M) + (y[2] & M) + (z[2] & M);
z[2] = (int)c;
c >>>= 32;
c += (x[3] & M) + (y[3] & M) + (z[3] & M);
z[3] = (int)c;
c >>>= 32;
c += (x[4] & M) + (y[4] & M) + (z[4] & M);
z[4] = (int)c;
c >>>= 32;
c += (x[5] & M) + (y[5] & M) + (z[5] & M);
z[5] = (int)c;
c >>>= 32;
c += (x[6] & M) + (y[6] & M) + (z[6] & M);
z[6] = (int)c;
c >>>= 32;
c += (x[7] & M) + (y[7] & M) + (z[7] & M);
z[7] = (int)c;
c >>>= 32;
return (int)c;
}
public static int addBothTo(int[] x, int xOff, int[] y, int yOff, int[] z, int zOff)
{
long c = 0;
c += (x[xOff + 0] & M) + (y[yOff + 0] & M) + (z[zOff + 0] & M);
z[zOff + 0] = (int)c;
c >>>= 32;
c += (x[xOff + 1] & M) + (y[yOff + 1] & M) + (z[zOff + 1] & M);
z[zOff + 1] = (int)c;
c >>>= 32;
c += (x[xOff + 2] & M) + (y[yOff + 2] & M) + (z[zOff + 2] & M);
z[zOff + 2] = (int)c;
c >>>= 32;
c += (x[xOff + 3] & M) + (y[yOff + 3] & M) + (z[zOff + 3] & M);
z[zOff + 3] = (int)c;
c >>>= 32;
c += (x[xOff + 4] & M) + (y[yOff + 4] & M) + (z[zOff + 4] & M);
z[zOff + 4] = (int)c;
c >>>= 32;
c += (x[xOff + 5] & M) + (y[yOff + 5] & M) + (z[zOff + 5] & M);
z[zOff + 5] = (int)c;
c >>>= 32;
c += (x[xOff + 6] & M) + (y[yOff + 6] & M) + (z[zOff + 6] & M);
z[zOff + 6] = (int)c;
c >>>= 32;
c += (x[xOff + 7] & M) + (y[yOff + 7] & M) + (z[zOff + 7] & M);
z[zOff + 7] = (int)c;
c >>>= 32;
return (int)c;
}
public static int addTo(int[] x, int[] z)
{
long c = 0;
c += (x[0] & M) + (z[0] & M);
z[0] = (int)c;
c >>>= 32;
c += (x[1] & M) + (z[1] & M);
z[1] = (int)c;
c >>>= 32;
c += (x[2] & M) + (z[2] & M);
z[2] = (int)c;
c >>>= 32;
c += (x[3] & M) + (z[3] & M);
z[3] = (int)c;
c >>>= 32;
c += (x[4] & M) + (z[4] & M);
z[4] = (int)c;
c >>>= 32;
c += (x[5] & M) + (z[5] & M);
z[5] = (int)c;
c >>>= 32;
c += (x[6] & M) + (z[6] & M);
z[6] = (int)c;
c >>>= 32;
c += (x[7] & M) + (z[7] & M);
z[7] = (int)c;
c >>>= 32;
return (int)c;
}
public static int addTo(int[] x, int[] z, int cIn)
{
long c = cIn & M;
c += (x[0] & M) + (z[0] & M);
z[0] = (int)c;
c >>>= 32;
c += (x[1] & M) + (z[1] & M);
z[1] = (int)c;
c >>>= 32;
c += (x[2] & M) + (z[2] & M);
z[2] = (int)c;
c >>>= 32;
c += (x[3] & M) + (z[3] & M);
z[3] = (int)c;
c >>>= 32;
c += (x[4] & M) + (z[4] & M);
z[4] = (int)c;
c >>>= 32;
c += (x[5] & M) + (z[5] & M);
z[5] = (int)c;
c >>>= 32;
c += (x[6] & M) + (z[6] & M);
z[6] = (int)c;
c >>>= 32;
c += (x[7] & M) + (z[7] & M);
z[7] = (int)c;
c >>>= 32;
return (int)c;
}
public static int addTo(int[] x, int xOff, int[] z, int zOff, int cIn)
{
long c = cIn & M;
c += (x[xOff + 0] & M) + (z[zOff + 0] & M);
z[zOff + 0] = (int)c;
c >>>= 32;
c += (x[xOff + 1] & M) + (z[zOff + 1] & M);
z[zOff + 1] = (int)c;
c >>>= 32;
c += (x[xOff + 2] & M) + (z[zOff + 2] & M);
z[zOff + 2] = (int)c;
c >>>= 32;
c += (x[xOff + 3] & M) + (z[zOff + 3] & M);
z[zOff + 3] = (int)c;
c >>>= 32;
c += (x[xOff + 4] & M) + (z[zOff + 4] & M);
z[zOff + 4] = (int)c;
c >>>= 32;
c += (x[xOff + 5] & M) + (z[zOff + 5] & M);
z[zOff + 5] = (int)c;
c >>>= 32;
c += (x[xOff + 6] & M) + (z[zOff + 6] & M);
z[zOff + 6] = (int)c;
c >>>= 32;
c += (x[xOff + 7] & M) + (z[zOff + 7] & M);
z[zOff + 7] = (int)c;
c >>>= 32;
return (int)c;
}
public static int addToEachOther(int[] u, int uOff, int[] v, int vOff)
{
long c = 0;
c += (u[uOff + 0] & M) + (v[vOff + 0] & M);
u[uOff + 0] = (int)c;
v[vOff + 0] = (int)c;
c >>>= 32;
c += (u[uOff + 1] & M) + (v[vOff + 1] & M);
u[uOff + 1] = (int)c;
v[vOff + 1] = (int)c;
c >>>= 32;
c += (u[uOff + 2] & M) + (v[vOff + 2] & M);
u[uOff + 2] = (int)c;
v[vOff + 2] = (int)c;
c >>>= 32;
c += (u[uOff + 3] & M) + (v[vOff + 3] & M);
u[uOff + 3] = (int)c;
v[vOff + 3] = (int)c;
c >>>= 32;
c += (u[uOff + 4] & M) + (v[vOff + 4] & M);
u[uOff + 4] = (int)c;
v[vOff + 4] = (int)c;
c >>>= 32;
c += (u[uOff + 5] & M) + (v[vOff + 5] & M);
u[uOff + 5] = (int)c;
v[vOff + 5] = (int)c;
c >>>= 32;
c += (u[uOff + 6] & M) + (v[vOff + 6] & M);
u[uOff + 6] = (int)c;
v[vOff + 6] = (int)c;
c >>>= 32;
c += (u[uOff + 7] & M) + (v[vOff + 7] & M);
u[uOff + 7] = (int)c;
v[vOff + 7] = (int)c;
c >>>= 32;
return (int)c;
}
public static void copy(int[] x, int[] z)
{
z[0] = x[0];
z[1] = x[1];
z[2] = x[2];
z[3] = x[3];
z[4] = x[4];
z[5] = x[5];
z[6] = x[6];
z[7] = x[7];
}
public static void copy(int[] x, int xOff, int[] z, int zOff)
{
z[zOff + 0] = x[xOff + 0];
z[zOff + 1] = x[xOff + 1];
z[zOff + 2] = x[xOff + 2];
z[zOff + 3] = x[xOff + 3];
z[zOff + 4] = x[xOff + 4];
z[zOff + 5] = x[xOff + 5];
z[zOff + 6] = x[xOff + 6];
z[zOff + 7] = x[xOff + 7];
}
public static void copy64(long[] x, long[] z)
{
z[0] = x[0];
z[1] = x[1];
z[2] = x[2];
z[3] = x[3];
}
public static void copy64(long[] x, int xOff, long[] z, int zOff)
{
z[zOff + 0] = x[xOff + 0];
z[zOff + 1] = x[xOff + 1];
z[zOff + 2] = x[xOff + 2];
z[zOff + 3] = x[xOff + 3];
}
public static int[] create()
{
return new int[8];
}
public static long[] create64()
{
return new long[4];
}
public static int[] createExt()
{
return new int[16];
}
public static long[] createExt64()
{
return new long[8];
}
public static boolean diff(int[] x, int xOff, int[] y, int yOff, int[] z, int zOff)
{
boolean pos = gte(x, xOff, y, yOff);
if (pos)
{
sub(x, xOff, y, yOff, z, zOff);
}
else
{
sub(y, yOff, x, xOff, z, zOff);
}
return pos;
}
public static boolean eq(int[] x, int[] y)
{
for (int i = 7; i >= 0; --i)
{
if (x[i] != y[i])
{
return false;
}
}
return true;
}
public static boolean eq64(long[] x, long[] y)
{
for (int i = 3; i >= 0; --i)
{
if (x[i] != y[i])
{
return false;
}
}
return true;
}
public static int[] fromBigInteger(BigInteger x)
{
if (x.signum() < 0 || x.bitLength() > 256)
{
throw new IllegalArgumentException();
}
int[] z = create();
// NOTE: Use a fixed number of loop iterations
for (int i = 0; i < 8; ++i)
{
z[i] = x.intValue();
x = x.shiftRight(32);
}
return z;
}
public static long[] fromBigInteger64(BigInteger x)
{
if (x.signum() < 0 || x.bitLength() > 256)
{
throw new IllegalArgumentException();
}
long[] z = create64();
// NOTE: Use a fixed number of loop iterations
for (int i = 0; i < 4; ++i)
{
z[i] = x.longValue();
x = x.shiftRight(64);
}
return z;
}
public static int getBit(int[] x, int bit)
{
if (bit == 0)
{
return x[0] & 1;
}
if ((bit & 255) != bit)
{
return 0;
}
int w = bit >>> 5;
int b = bit & 31;
return (x[w] >>> b) & 1;
}
public static boolean gte(int[] x, int[] y)
{
for (int i = 7; i >= 0; --i)
{
int x_i = x[i] ^ Integer.MIN_VALUE;
int y_i = y[i] ^ Integer.MIN_VALUE;
if (x_i < y_i)
return false;
if (x_i > y_i)
return true;
}
return true;
}
public static boolean gte(int[] x, int xOff, int[] y, int yOff)
{
for (int i = 7; i >= 0; --i)
{
int x_i = x[xOff + i] ^ Integer.MIN_VALUE;
int y_i = y[yOff + i] ^ Integer.MIN_VALUE;
if (x_i < y_i)
return false;
if (x_i > y_i)
return true;
}
return true;
}
public static boolean isOne(int[] x)
{
if (x[0] != 1)
{
return false;
}
for (int i = 1; i < 8; ++i)
{
if (x[i] != 0)
{
return false;
}
}
return true;
}
public static boolean isOne64(long[] x)
{
if (x[0] != 1L)
{
return false;
}
for (int i = 1; i < 4; ++i)
{
if (x[i] != 0L)
{
return false;
}
}
return true;
}
public static boolean isZero(int[] x)
{
for (int i = 0; i < 8; ++i)
{
if (x[i] != 0)
{
return false;
}
}
return true;
}
public static boolean isZero64(long[] x)
{
for (int i = 0; i < 4; ++i)
{
if (x[i] != 0L)
{
return false;
}
}
return true;
}
public static void mul(int[] x, int[] y, int[] zz)
{
long y_0 = y[0] & M;
long y_1 = y[1] & M;
long y_2 = y[2] & M;
long y_3 = y[3] & M;
long y_4 = y[4] & M;
long y_5 = y[5] & M;
long y_6 = y[6] & M;
long y_7 = y[7] & M;
{
long c = 0, x_0 = x[0] & M;
c += x_0 * y_0;
zz[0] = (int)c;
c >>>= 32;
c += x_0 * y_1;
zz[1] = (int)c;
c >>>= 32;
c += x_0 * y_2;
zz[2] = (int)c;
c >>>= 32;
c += x_0 * y_3;
zz[3] = (int)c;
c >>>= 32;
c += x_0 * y_4;
zz[4] = (int)c;
c >>>= 32;
c += x_0 * y_5;
zz[5] = (int)c;
c >>>= 32;
c += x_0 * y_6;
zz[6] = (int)c;
c >>>= 32;
c += x_0 * y_7;
zz[7] = (int)c;
c >>>= 32;
zz[8] = (int)c;
}
for (int i = 1; i < 8; ++i)
{
long c = 0, x_i = x[i] & M;
c += x_i * y_0 + (zz[i + 0] & M);
zz[i + 0] = (int)c;
c >>>= 32;
c += x_i * y_1 + (zz[i + 1] & M);
zz[i + 1] = (int)c;
c >>>= 32;
c += x_i * y_2 + (zz[i + 2] & M);
zz[i + 2] = (int)c;
c >>>= 32;
c += x_i * y_3 + (zz[i + 3] & M);
zz[i + 3] = (int)c;
c >>>= 32;
c += x_i * y_4 + (zz[i + 4] & M);
zz[i + 4] = (int)c;
c >>>= 32;
c += x_i * y_5 + (zz[i + 5] & M);
zz[i + 5] = (int)c;
c >>>= 32;
c += x_i * y_6 + (zz[i + 6] & M);
zz[i + 6] = (int)c;
c >>>= 32;
c += x_i * y_7 + (zz[i + 7] & M);
zz[i + 7] = (int)c;
c >>>= 32;
zz[i + 8] = (int)c;
}
}
public static void mul(int[] x, int xOff, int[] y, int yOff, int[] zz, int zzOff)
{
long y_0 = y[yOff + 0] & M;
long y_1 = y[yOff + 1] & M;
long y_2 = y[yOff + 2] & M;
long y_3 = y[yOff + 3] & M;
long y_4 = y[yOff + 4] & M;
long y_5 = y[yOff + 5] & M;
long y_6 = y[yOff + 6] & M;
long y_7 = y[yOff + 7] & M;
{
long c = 0, x_0 = x[xOff + 0] & M;
c += x_0 * y_0;
zz[zzOff + 0] = (int)c;
c >>>= 32;
c += x_0 * y_1;
zz[zzOff + 1] = (int)c;
c >>>= 32;
c += x_0 * y_2;
zz[zzOff + 2] = (int)c;
c >>>= 32;
c += x_0 * y_3;
zz[zzOff + 3] = (int)c;
c >>>= 32;
c += x_0 * y_4;
zz[zzOff + 4] = (int)c;
c >>>= 32;
c += x_0 * y_5;
zz[zzOff + 5] = (int)c;
c >>>= 32;
c += x_0 * y_6;
zz[zzOff + 6] = (int)c;
c >>>= 32;
c += x_0 * y_7;
zz[zzOff + 7] = (int)c;
c >>>= 32;
zz[zzOff + 8] = (int)c;
}
for (int i = 1; i < 8; ++i)
{
++zzOff;
long c = 0, x_i = x[xOff + i] & M;
c += x_i * y_0 + (zz[zzOff + 0] & M);
zz[zzOff + 0] = (int)c;
c >>>= 32;
c += x_i * y_1 + (zz[zzOff + 1] & M);
zz[zzOff + 1] = (int)c;
c >>>= 32;
c += x_i * y_2 + (zz[zzOff + 2] & M);
zz[zzOff + 2] = (int)c;
c >>>= 32;
c += x_i * y_3 + (zz[zzOff + 3] & M);
zz[zzOff + 3] = (int)c;
c >>>= 32;
c += x_i * y_4 + (zz[zzOff + 4] & M);
zz[zzOff + 4] = (int)c;
c >>>= 32;
c += x_i * y_5 + (zz[zzOff + 5] & M);
zz[zzOff + 5] = (int)c;
c >>>= 32;
c += x_i * y_6 + (zz[zzOff + 6] & M);
zz[zzOff + 6] = (int)c;
c >>>= 32;
c += x_i * y_7 + (zz[zzOff + 7] & M);
zz[zzOff + 7] = (int)c;
c >>>= 32;
zz[zzOff + 8] = (int)c;
}
}
public static void mul128(int[] x, int[] y128, int[] zz)
{
long x_0 = x[0] & M;
long x_1 = x[1] & M;
long x_2 = x[2] & M;
long x_3 = x[3] & M;
long x_4 = x[4] & M;
long x_5 = x[5] & M;
long x_6 = x[6] & M;
long x_7 = x[7] & M;
{
long c = 0, y_0 = y128[0] & M;
c += y_0 * x_0;
zz[0] = (int)c;
c >>>= 32;
c += y_0 * x_1;
zz[1] = (int)c;
c >>>= 32;
c += y_0 * x_2;
zz[2] = (int)c;
c >>>= 32;
c += y_0 * x_3;
zz[3] = (int)c;
c >>>= 32;
c += y_0 * x_4;
zz[4] = (int)c;
c >>>= 32;
c += y_0 * x_5;
zz[5] = (int)c;
c >>>= 32;
c += y_0 * x_6;
zz[6] = (int)c;
c >>>= 32;
c += y_0 * x_7;
zz[7] = (int)c;
c >>>= 32;
zz[8] = (int)c;
}
for (int i = 1; i < 4; ++i)
{
long c = 0, y_i = y128[i] & M;
c += y_i * x_0 + (zz[i + 0] & M);
zz[i + 0] = (int)c;
c >>>= 32;
c += y_i * x_1 + (zz[i + 1] & M);
zz[i + 1] = (int)c;
c >>>= 32;
c += y_i * x_2 + (zz[i + 2] & M);
zz[i + 2] = (int)c;
c >>>= 32;
c += y_i * x_3 + (zz[i + 3] & M);
zz[i + 3] = (int)c;
c >>>= 32;
c += y_i * x_4 + (zz[i + 4] & M);
zz[i + 4] = (int)c;
c >>>= 32;
c += y_i * x_5 + (zz[i + 5] & M);
zz[i + 5] = (int)c;
c >>>= 32;
c += y_i * x_6 + (zz[i + 6] & M);
zz[i + 6] = (int)c;
c >>>= 32;
c += y_i * x_7 + (zz[i + 7] & M);
zz[i + 7] = (int)c;
c >>>= 32;
zz[i + 8] = (int)c;
}
}
public static int mulAddTo(int[] x, int[] y, int[] zz)
{
long y_0 = y[0] & M;
long y_1 = y[1] & M;
long y_2 = y[2] & M;
long y_3 = y[3] & M;
long y_4 = y[4] & M;
long y_5 = y[5] & M;
long y_6 = y[6] & M;
long y_7 = y[7] & M;
long zc = 0;
for (int i = 0; i < 8; ++i)
{
long c = 0, x_i = x[i] & M;
c += x_i * y_0 + (zz[i + 0] & M);
zz[i + 0] = (int)c;
c >>>= 32;
c += x_i * y_1 + (zz[i + 1] & M);
zz[i + 1] = (int)c;
c >>>= 32;
c += x_i * y_2 + (zz[i + 2] & M);
zz[i + 2] = (int)c;
c >>>= 32;
c += x_i * y_3 + (zz[i + 3] & M);
zz[i + 3] = (int)c;
c >>>= 32;
c += x_i * y_4 + (zz[i + 4] & M);
zz[i + 4] = (int)c;
c >>>= 32;
c += x_i * y_5 + (zz[i + 5] & M);
zz[i + 5] = (int)c;
c >>>= 32;
c += x_i * y_6 + (zz[i + 6] & M);
zz[i + 6] = (int)c;
c >>>= 32;
c += x_i * y_7 + (zz[i + 7] & M);
zz[i + 7] = (int)c;
c >>>= 32;
zc += c + (zz[i + 8] & M);
zz[i + 8] = (int)zc;
zc >>>= 32;
}
return (int)zc;
}
public static int mulAddTo(int[] x, int xOff, int[] y, int yOff, int[] zz, int zzOff)
{
long y_0 = y[yOff + 0] & M;
long y_1 = y[yOff + 1] & M;
long y_2 = y[yOff + 2] & M;
long y_3 = y[yOff + 3] & M;
long y_4 = y[yOff + 4] & M;
long y_5 = y[yOff + 5] & M;
long y_6 = y[yOff + 6] & M;
long y_7 = y[yOff + 7] & M;
long zc = 0;
for (int i = 0; i < 8; ++i)
{
long c = 0, x_i = x[xOff + i] & M;
c += x_i * y_0 + (zz[zzOff + 0] & M);
zz[zzOff + 0] = (int)c;
c >>>= 32;
c += x_i * y_1 + (zz[zzOff + 1] & M);
zz[zzOff + 1] = (int)c;
c >>>= 32;
c += x_i * y_2 + (zz[zzOff + 2] & M);
zz[zzOff + 2] = (int)c;
c >>>= 32;
c += x_i * y_3 + (zz[zzOff + 3] & M);
zz[zzOff + 3] = (int)c;
c >>>= 32;
c += x_i * y_4 + (zz[zzOff + 4] & M);
zz[zzOff + 4] = (int)c;
c >>>= 32;
c += x_i * y_5 + (zz[zzOff + 5] & M);
zz[zzOff + 5] = (int)c;
c >>>= 32;
c += x_i * y_6 + (zz[zzOff + 6] & M);
zz[zzOff + 6] = (int)c;
c >>>= 32;
c += x_i * y_7 + (zz[zzOff + 7] & M);
zz[zzOff + 7] = (int)c;
c >>>= 32;
zc += c + (zz[zzOff + 8] & M);
zz[zzOff + 8] = (int)zc;
zc >>>= 32;
++zzOff;
}
return (int)zc;
}
public static long mul33Add(int w, int[] x, int xOff, int[] y, int yOff, int[] z, int zOff)
{
// assert w >>> 31 == 0;
long c = 0, wVal = w & M;
long x0 = x[xOff + 0] & M;
c += wVal * x0 + (y[yOff + 0] & M);
z[zOff + 0] = (int)c;
c >>>= 32;
long x1 = x[xOff + 1] & M;
c += wVal * x1 + x0 + (y[yOff + 1] & M);
z[zOff + 1] = (int)c;
c >>>= 32;
long x2 = x[xOff + 2] & M;
c += wVal * x2 + x1 + (y[yOff + 2] & M);
z[zOff + 2] = (int)c;
c >>>= 32;
long x3 = x[xOff + 3] & M;
c += wVal * x3 + x2 + (y[yOff + 3] & M);
z[zOff + 3] = (int)c;
c >>>= 32;
long x4 = x[xOff + 4] & M;
c += wVal * x4 + x3 + (y[yOff + 4] & M);
z[zOff + 4] = (int)c;
c >>>= 32;
long x5 = x[xOff + 5] & M;
c += wVal * x5 + x4 + (y[yOff + 5] & M);
z[zOff + 5] = (int)c;
c >>>= 32;
long x6 = x[xOff + 6] & M;
c += wVal * x6 + x5 + (y[yOff + 6] & M);
z[zOff + 6] = (int)c;
c >>>= 32;
long x7 = x[xOff + 7] & M;
c += wVal * x7 + x6 + (y[yOff + 7] & M);
z[zOff + 7] = (int)c;
c >>>= 32;
c += x7;
return c;
}
public static int mulByWord(int x, int[] z)
{
long c = 0, xVal = x & M;
c += xVal * (z[0] & M);
z[0] = (int)c;
c >>>= 32;
c += xVal * (z[1] & M);
z[1] = (int)c;
c >>>= 32;
c += xVal * (z[2] & M);
z[2] = (int)c;
c >>>= 32;
c += xVal * (z[3] & M);
z[3] = (int)c;
c >>>= 32;
c += xVal * (z[4] & M);
z[4] = (int)c;
c >>>= 32;
c += xVal * (z[5] & M);
z[5] = (int)c;
c >>>= 32;
c += xVal * (z[6] & M);
z[6] = (int)c;
c >>>= 32;
c += xVal * (z[7] & M);
z[7] = (int)c;
c >>>= 32;
return (int)c;
}
public static int mulByWordAddTo(int x, int[] y, int[] z)
{
long c = 0, xVal = x & M;
c += xVal * (z[0] & M) + (y[0] & M);
z[0] = (int)c;
c >>>= 32;
c += xVal * (z[1] & M) + (y[1] & M);
z[1] = (int)c;
c >>>= 32;
c += xVal * (z[2] & M) + (y[2] & M);
z[2] = (int)c;
c >>>= 32;
c += xVal * (z[3] & M) + (y[3] & M);
z[3] = (int)c;
c >>>= 32;
c += xVal * (z[4] & M) + (y[4] & M);
z[4] = (int)c;
c >>>= 32;
c += xVal * (z[5] & M) + (y[5] & M);
z[5] = (int)c;
c >>>= 32;
c += xVal * (z[6] & M) + (y[6] & M);
z[6] = (int)c;
c >>>= 32;
c += xVal * (z[7] & M) + (y[7] & M);
z[7] = (int)c;
c >>>= 32;
return (int)c;
}
public static int mulWordAddTo(int x, int[] y, int yOff, int[] z, int zOff)
{
long c = 0, xVal = x & M;
c += xVal * (y[yOff + 0] & M) + (z[zOff + 0] & M);
z[zOff + 0] = (int)c;
c >>>= 32;
c += xVal * (y[yOff + 1] & M) + (z[zOff + 1] & M);
z[zOff + 1] = (int)c;
c >>>= 32;
c += xVal * (y[yOff + 2] & M) + (z[zOff + 2] & M);
z[zOff + 2] = (int)c;
c >>>= 32;
c += xVal * (y[yOff + 3] & M) + (z[zOff + 3] & M);
z[zOff + 3] = (int)c;
c >>>= 32;
c += xVal * (y[yOff + 4] & M) + (z[zOff + 4] & M);
z[zOff + 4] = (int)c;
c >>>= 32;
c += xVal * (y[yOff + 5] & M) + (z[zOff + 5] & M);
z[zOff + 5] = (int)c;
c >>>= 32;
c += xVal * (y[yOff + 6] & M) + (z[zOff + 6] & M);
z[zOff + 6] = (int)c;
c >>>= 32;
c += xVal * (y[yOff + 7] & M) + (z[zOff + 7] & M);
z[zOff + 7] = (int)c;
c >>>= 32;
return (int)c;
}
public static int mul33DWordAdd(int x, long y, int[] z, int zOff)
{
// assert x >>> 31 == 0;
// assert zOff <= 4;
long c = 0, xVal = x & M;
long y00 = y & M;
c += xVal * y00 + (z[zOff + 0] & M);
z[zOff + 0] = (int)c;
c >>>= 32;
long y01 = y >>> 32;
c += xVal * y01 + y00 + (z[zOff + 1] & M);
z[zOff + 1] = (int)c;
c >>>= 32;
c += y01 + (z[zOff + 2] & M);
z[zOff + 2] = (int)c;
c >>>= 32;
c += (z[zOff + 3] & M);
z[zOff + 3] = (int)c;
c >>>= 32;
return c == 0 ? 0 : Nat.incAt(8, z, zOff, 4);
}
public static int mul33WordAdd(int x, int y, int[] z, int zOff)
{
// assert x >>> 31 == 0;
// assert zOff <= 5;
long c = 0, xVal = x & M, yVal = y & M;
c += yVal * xVal + (z[zOff + 0] & M);
z[zOff + 0] = (int)c;
c >>>= 32;
c += yVal + (z[zOff + 1] & M);
z[zOff + 1] = (int)c;
c >>>= 32;
c += (z[zOff + 2] & M);
z[zOff + 2] = (int)c;
c >>>= 32;
return c == 0 ? 0 : Nat.incAt(8, z, zOff, 3);
}
public static int mulWordDwordAdd(int x, long y, int[] z, int zOff)
{
// assert zOff <= 5;
long c = 0, xVal = x & M;
c += xVal * (y & M) + (z[zOff + 0] & M);
z[zOff + 0] = (int)c;
c >>>= 32;
c += xVal * (y >>> 32) + (z[zOff + 1] & M);
z[zOff + 1] = (int)c;
c >>>= 32;
c += (z[zOff + 2] & M);
z[zOff + 2] = (int)c;
c >>>= 32;
return c == 0 ? 0 : Nat.incAt(8, z, zOff, 3);
}
public static int mulWord(int x, int[] y, int[] z, int zOff)
{
long c = 0, xVal = x & M;
int i = 0;
do
{
c += xVal * (y[i] & M);
z[zOff + i] = (int)c;
c >>>= 32;
}
while (++i < 8);
return (int)c;
}
public static void square(int[] x, int[] zz)
{
long x_0 = x[0] & M;
long zz_1;
int c = 0, w;
{
int i = 7, j = 16;
do
{
long xVal = (x[i--] & M);
long p = xVal * xVal;
zz[--j] = (c << 31) | (int)(p >>> 33);
zz[--j] = (int)(p >>> 1);
c = (int)p;
}
while (i > 0);
{
long p = x_0 * x_0;
zz_1 = ((c << 31) & M) | (p >>> 33);
zz[0] = (int)p;
c = (int)(p >>> 32) & 1;
}
}
long x_1 = x[1] & M;
long zz_2 = zz[2] & M;
{
zz_1 += x_1 * x_0;
w = (int)zz_1;
zz[1] = (w << 1) | c;
c = w >>> 31;
zz_2 += zz_1 >>> 32;
}
long x_2 = x[2] & M;
long zz_3 = zz[3] & M;
long zz_4 = zz[4] & M;
{
zz_2 += x_2 * x_0;
w = (int)zz_2;
zz[2] = (w << 1) | c;
c = w >>> 31;
zz_3 += (zz_2 >>> 32) + x_2 * x_1;
zz_4 += zz_3 >>> 32;
zz_3 &= M;
}
long x_3 = x[3] & M;
long zz_5 = (zz[5] & M) + (zz_4 >>> 32); zz_4 &= M;
long zz_6 = (zz[6] & M) + (zz_5 >>> 32); zz_5 &= M;
{
zz_3 += x_3 * x_0;
w = (int)zz_3;
zz[3] = (w << 1) | c;
c = w >>> 31;
zz_4 += (zz_3 >>> 32) + x_3 * x_1;
zz_5 += (zz_4 >>> 32) + x_3 * x_2;
zz_4 &= M;
zz_6 += zz_5 >>> 32;
zz_5 &= M;
}
long x_4 = x[4] & M;
long zz_7 = (zz[7] & M) + (zz_6 >>> 32); zz_6 &= M;
long zz_8 = (zz[8] & M) + (zz_7 >>> 32); zz_7 &= M;
{
zz_4 += x_4 * x_0;
w = (int)zz_4;
zz[4] = (w << 1) | c;
c = w >>> 31;
zz_5 += (zz_4 >>> 32) + x_4 * x_1;
zz_6 += (zz_5 >>> 32) + x_4 * x_2;
zz_5 &= M;
zz_7 += (zz_6 >>> 32) + x_4 * x_3;
zz_6 &= M;
zz_8 += zz_7 >>> 32;
zz_7 &= M;
}
long x_5 = x[5] & M;
long zz_9 = (zz[9] & M) + (zz_8 >>> 32); zz_8 &= M;
long zz_10 = (zz[10] & M) + (zz_9 >>> 32); zz_9 &= M;
{
zz_5 += x_5 * x_0;
w = (int)zz_5;
zz[5] = (w << 1) | c;
c = w >>> 31;
zz_6 += (zz_5 >>> 32) + x_5 * x_1;
zz_7 += (zz_6 >>> 32) + x_5 * x_2;
zz_6 &= M;
zz_8 += (zz_7 >>> 32) + x_5 * x_3;
zz_7 &= M;
zz_9 += (zz_8 >>> 32) + x_5 * x_4;
zz_8 &= M;
zz_10 += zz_9 >>> 32;
zz_9 &= M;
}
long x_6 = x[6] & M;
long zz_11 = (zz[11] & M) + (zz_10 >>> 32); zz_10 &= M;
long zz_12 = (zz[12] & M) + (zz_11 >>> 32); zz_11 &= M;
{
zz_6 += x_6 * x_0;
w = (int)zz_6;
zz[6] = (w << 1) | c;
c = w >>> 31;
zz_7 += (zz_6 >>> 32) + x_6 * x_1;
zz_8 += (zz_7 >>> 32) + x_6 * x_2;
zz_7 &= M;
zz_9 += (zz_8 >>> 32) + x_6 * x_3;
zz_8 &= M;
zz_10 += (zz_9 >>> 32) + x_6 * x_4;
zz_9 &= M;
zz_11 += (zz_10 >>> 32) + x_6 * x_5;
zz_10 &= M;
zz_12 += zz_11 >>> 32;
zz_11 &= M;
}
long x_7 = x[7] & M;
long zz_13 = (zz[13] & M) + (zz_12 >>> 32); zz_12 &= M;
long zz_14 = (zz[14] & M) + (zz_13 >>> 32); zz_13 &= M;
{
zz_7 += x_7 * x_0;
w = (int)zz_7;
zz[7] = (w << 1) | c;
c = w >>> 31;
zz_8 += (zz_7 >>> 32) + x_7 * x_1;
zz_9 += (zz_8 >>> 32) + x_7 * x_2;
zz_10 += (zz_9 >>> 32) + x_7 * x_3;
zz_11 += (zz_10 >>> 32) + x_7 * x_4;
zz_12 += (zz_11 >>> 32) + x_7 * x_5;
zz_13 += (zz_12 >>> 32) + x_7 * x_6;
zz_14 += zz_13 >>> 32;
}
w = (int)zz_8;
zz[8] = (w << 1) | c;
c = w >>> 31;
w = (int)zz_9;
zz[9] = (w << 1) | c;
c = w >>> 31;
w = (int)zz_10;
zz[10] = (w << 1) | c;
c = w >>> 31;
w = (int)zz_11;
zz[11] = (w << 1) | c;
c = w >>> 31;
w = (int)zz_12;
zz[12] = (w << 1) | c;
c = w >>> 31;
w = (int)zz_13;
zz[13] = (w << 1) | c;
c = w >>> 31;
w = (int)zz_14;
zz[14] = (w << 1) | c;
c = w >>> 31;
w = zz[15] + (int)(zz_14 >>> 32);
zz[15] = (w << 1) | c;
}
public static void square(int[] x, int xOff, int[] zz, int zzOff)
{
long x_0 = x[xOff + 0] & M;
long zz_1;
int c = 0, w;
{
int i = 7, j = 16;
do
{
long xVal = (x[xOff + i--] & M);
long p = xVal * xVal;
zz[zzOff + --j] = (c << 31) | (int)(p >>> 33);
zz[zzOff + --j] = (int)(p >>> 1);
c = (int)p;
}
while (i > 0);
{
long p = x_0 * x_0;
zz_1 = ((c << 31) & M) | (p >>> 33);
zz[zzOff + 0] = (int)p;
c = (int)(p >>> 32) & 1;
}
}
long x_1 = x[xOff + 1] & M;
long zz_2 = zz[zzOff + 2] & M;
{
zz_1 += x_1 * x_0;
w = (int)zz_1;
zz[zzOff + 1] = (w << 1) | c;
c = w >>> 31;
zz_2 += zz_1 >>> 32;
}
long x_2 = x[xOff + 2] & M;
long zz_3 = zz[zzOff + 3] & M;
long zz_4 = zz[zzOff + 4] & M;
{
zz_2 += x_2 * x_0;
w = (int)zz_2;
zz[zzOff + 2] = (w << 1) | c;
c = w >>> 31;
zz_3 += (zz_2 >>> 32) + x_2 * x_1;
zz_4 += zz_3 >>> 32;
zz_3 &= M;
}
long x_3 = x[xOff + 3] & M;
long zz_5 = (zz[zzOff + 5] & M) + (zz_4 >>> 32); zz_4 &= M;
long zz_6 = (zz[zzOff + 6] & M) + (zz_5 >>> 32); zz_5 &= M;
{
zz_3 += x_3 * x_0;
w = (int)zz_3;
zz[zzOff + 3] = (w << 1) | c;
c = w >>> 31;
zz_4 += (zz_3 >>> 32) + x_3 * x_1;
zz_5 += (zz_4 >>> 32) + x_3 * x_2;
zz_4 &= M;
zz_6 += zz_5 >>> 32;
zz_5 &= M;
}
long x_4 = x[xOff + 4] & M;
long zz_7 = (zz[zzOff + 7] & M) + (zz_6 >>> 32); zz_6 &= M;
long zz_8 = (zz[zzOff + 8] & M) + (zz_7 >>> 32); zz_7 &= M;
{
zz_4 += x_4 * x_0;
w = (int)zz_4;
zz[zzOff + 4] = (w << 1) | c;
c = w >>> 31;
zz_5 += (zz_4 >>> 32) + x_4 * x_1;
zz_6 += (zz_5 >>> 32) + x_4 * x_2;
zz_5 &= M;
zz_7 += (zz_6 >>> 32) + x_4 * x_3;
zz_6 &= M;
zz_8 += zz_7 >>> 32;
zz_7 &= M;
}
long x_5 = x[xOff + 5] & M;
long zz_9 = (zz[zzOff + 9] & M) + (zz_8 >>> 32); zz_8 &= M;
long zz_10 = (zz[zzOff + 10] & M) + (zz_9 >>> 32); zz_9 &= M;
{
zz_5 += x_5 * x_0;
w = (int)zz_5;
zz[zzOff + 5] = (w << 1) | c;
c = w >>> 31;
zz_6 += (zz_5 >>> 32) + x_5 * x_1;
zz_7 += (zz_6 >>> 32) + x_5 * x_2;
zz_6 &= M;
zz_8 += (zz_7 >>> 32) + x_5 * x_3;
zz_7 &= M;
zz_9 += (zz_8 >>> 32) + x_5 * x_4;
zz_8 &= M;
zz_10 += zz_9 >>> 32;
zz_9 &= M;
}
long x_6 = x[xOff + 6] & M;
long zz_11 = (zz[zzOff + 11] & M) + (zz_10 >>> 32); zz_10 &= M;
long zz_12 = (zz[zzOff + 12] & M) + (zz_11 >>> 32); zz_11 &= M;
{
zz_6 += x_6 * x_0;
w = (int)zz_6;
zz[zzOff + 6] = (w << 1) | c;
c = w >>> 31;
zz_7 += (zz_6 >>> 32) + x_6 * x_1;
zz_8 += (zz_7 >>> 32) + x_6 * x_2;
zz_7 &= M;
zz_9 += (zz_8 >>> 32) + x_6 * x_3;
zz_8 &= M;
zz_10 += (zz_9 >>> 32) + x_6 * x_4;
zz_9 &= M;
zz_11 += (zz_10 >>> 32) + x_6 * x_5;
zz_10 &= M;
zz_12 += zz_11 >>> 32;
zz_11 &= M;
}
long x_7 = x[xOff + 7] & M;
long zz_13 = (zz[zzOff + 13] & M) + (zz_12 >>> 32); zz_12 &= M;
long zz_14 = (zz[zzOff + 14] & M) + (zz_13 >>> 32); zz_13 &= M;
{
zz_7 += x_7 * x_0;
w = (int)zz_7;
zz[zzOff + 7] = (w << 1) | c;
c = w >>> 31;
zz_8 += (zz_7 >>> 32) + x_7 * x_1;
zz_9 += (zz_8 >>> 32) + x_7 * x_2;
zz_10 += (zz_9 >>> 32) + x_7 * x_3;
zz_11 += (zz_10 >>> 32) + x_7 * x_4;
zz_12 += (zz_11 >>> 32) + x_7 * x_5;
zz_13 += (zz_12 >>> 32) + x_7 * x_6;
zz_14 += zz_13 >>> 32;
}
w = (int)zz_8;
zz[zzOff + 8] = (w << 1) | c;
c = w >>> 31;
w = (int)zz_9;
zz[zzOff + 9] = (w << 1) | c;
c = w >>> 31;
w = (int)zz_10;
zz[zzOff + 10] = (w << 1) | c;
c = w >>> 31;
w = (int)zz_11;
zz[zzOff + 11] = (w << 1) | c;
c = w >>> 31;
w = (int)zz_12;
zz[zzOff + 12] = (w << 1) | c;
c = w >>> 31;
w = (int)zz_13;
zz[zzOff + 13] = (w << 1) | c;
c = w >>> 31;
w = (int)zz_14;
zz[zzOff + 14] = (w << 1) | c;
c = w >>> 31;
w = zz[zzOff + 15] + (int)(zz_14 >>> 32);
zz[zzOff + 15] = (w << 1) | c;
}
public static int sub(int[] x, int[] y, int[] z)
{
long c = 0;
c += (x[0] & M) - (y[0] & M);
z[0] = (int)c;
c >>= 32;
c += (x[1] & M) - (y[1] & M);
z[1] = (int)c;
c >>= 32;
c += (x[2] & M) - (y[2] & M);
z[2] = (int)c;
c >>= 32;
c += (x[3] & M) - (y[3] & M);
z[3] = (int)c;
c >>= 32;
c += (x[4] & M) - (y[4] & M);
z[4] = (int)c;
c >>= 32;
c += (x[5] & M) - (y[5] & M);
z[5] = (int)c;
c >>= 32;
c += (x[6] & M) - (y[6] & M);
z[6] = (int)c;
c >>= 32;
c += (x[7] & M) - (y[7] & M);
z[7] = (int)c;
c >>= 32;
return (int)c;
}
public static int sub(int[] x, int xOff, int[] y, int yOff, int[] z, int zOff)
{
long c = 0;
c += (x[xOff + 0] & M) - (y[yOff + 0] & M);
z[zOff + 0] = (int)c;
c >>= 32;
c += (x[xOff + 1] & M) - (y[yOff + 1] & M);
z[zOff + 1] = (int)c;
c >>= 32;
c += (x[xOff + 2] & M) - (y[yOff + 2] & M);
z[zOff + 2] = (int)c;
c >>= 32;
c += (x[xOff + 3] & M) - (y[yOff + 3] & M);
z[zOff + 3] = (int)c;
c >>= 32;
c += (x[xOff + 4] & M) - (y[yOff + 4] & M);
z[zOff + 4] = (int)c;
c >>= 32;
c += (x[xOff + 5] & M) - (y[yOff + 5] & M);
z[zOff + 5] = (int)c;
c >>= 32;
c += (x[xOff + 6] & M) - (y[yOff + 6] & M);
z[zOff + 6] = (int)c;
c >>= 32;
c += (x[xOff + 7] & M) - (y[yOff + 7] & M);
z[zOff + 7] = (int)c;
c >>= 32;
return (int)c;
}
public static int subBothFrom(int[] x, int[] y, int[] z)
{
long c = 0;
c += (z[0] & M) - (x[0] & M) - (y[0] & M);
z[0] = (int)c;
c >>= 32;
c += (z[1] & M) - (x[1] & M) - (y[1] & M);
z[1] = (int)c;
c >>= 32;
c += (z[2] & M) - (x[2] & M) - (y[2] & M);
z[2] = (int)c;
c >>= 32;
c += (z[3] & M) - (x[3] & M) - (y[3] & M);
z[3] = (int)c;
c >>= 32;
c += (z[4] & M) - (x[4] & M) - (y[4] & M);
z[4] = (int)c;
c >>= 32;
c += (z[5] & M) - (x[5] & M) - (y[5] & M);
z[5] = (int)c;
c >>= 32;
c += (z[6] & M) - (x[6] & M) - (y[6] & M);
z[6] = (int)c;
c >>= 32;
c += (z[7] & M) - (x[7] & M) - (y[7] & M);
z[7] = (int)c;
c >>= 32;
return (int)c;
}
public static int subFrom(int[] x, int[] z)
{
long c = 0;
c += (z[0] & M) - (x[0] & M);
z[0] = (int)c;
c >>= 32;
c += (z[1] & M) - (x[1] & M);
z[1] = (int)c;
c >>= 32;
c += (z[2] & M) - (x[2] & M);
z[2] = (int)c;
c >>= 32;
c += (z[3] & M) - (x[3] & M);
z[3] = (int)c;
c >>= 32;
c += (z[4] & M) - (x[4] & M);
z[4] = (int)c;
c >>= 32;
c += (z[5] & M) - (x[5] & M);
z[5] = (int)c;
c >>= 32;
c += (z[6] & M) - (x[6] & M);
z[6] = (int)c;
c >>= 32;
c += (z[7] & M) - (x[7] & M);
z[7] = (int)c;
c >>= 32;
return (int)c;
}
public static int subFrom(int[] x, int[] z, int cIn)
{
long c = cIn & M;
c += (z[0] & M) - (x[0] & M);
z[0] = (int)c;
c >>= 32;
c += (z[1] & M) - (x[1] & M);
z[1] = (int)c;
c >>= 32;
c += (z[2] & M) - (x[2] & M);
z[2] = (int)c;
c >>= 32;
c += (z[3] & M) - (x[3] & M);
z[3] = (int)c;
c >>= 32;
c += (z[4] & M) - (x[4] & M);
z[4] = (int)c;
c >>= 32;
c += (z[5] & M) - (x[5] & M);
z[5] = (int)c;
c >>= 32;
c += (z[6] & M) - (x[6] & M);
z[6] = (int)c;
c >>= 32;
c += (z[7] & M) - (x[7] & M);
z[7] = (int)c;
c >>= 32;
return (int)c;
}
public static int subFrom(int[] x, int xOff, int[] z, int zOff)
{
long c = 0;
c += (z[zOff + 0] & M) - (x[xOff + 0] & M);
z[zOff + 0] = (int)c;
c >>= 32;
c += (z[zOff + 1] & M) - (x[xOff + 1] & M);
z[zOff + 1] = (int)c;
c >>= 32;
c += (z[zOff + 2] & M) - (x[xOff + 2] & M);
z[zOff + 2] = (int)c;
c >>= 32;
c += (z[zOff + 3] & M) - (x[xOff + 3] & M);
z[zOff + 3] = (int)c;
c >>= 32;
c += (z[zOff + 4] & M) - (x[xOff + 4] & M);
z[zOff + 4] = (int)c;
c >>= 32;
c += (z[zOff + 5] & M) - (x[xOff + 5] & M);
z[zOff + 5] = (int)c;
c >>= 32;
c += (z[zOff + 6] & M) - (x[xOff + 6] & M);
z[zOff + 6] = (int)c;
c >>= 32;
c += (z[zOff + 7] & M) - (x[xOff + 7] & M);
z[zOff + 7] = (int)c;
c >>= 32;
return (int)c;
}
public static int subFrom(int[] x, int xOff, int[] z, int zOff, int cIn)
{
long c = cIn & M;
c += (z[zOff + 0] & M) - (x[xOff + 0] & M);
z[zOff + 0] = (int)c;
c >>= 32;
c += (z[zOff + 1] & M) - (x[xOff + 1] & M);
z[zOff + 1] = (int)c;
c >>= 32;
c += (z[zOff + 2] & M) - (x[xOff + 2] & M);
z[zOff + 2] = (int)c;
c >>= 32;
c += (z[zOff + 3] & M) - (x[xOff + 3] & M);
z[zOff + 3] = (int)c;
c >>= 32;
c += (z[zOff + 4] & M) - (x[xOff + 4] & M);
z[zOff + 4] = (int)c;
c >>= 32;
c += (z[zOff + 5] & M) - (x[xOff + 5] & M);
z[zOff + 5] = (int)c;
c >>= 32;
c += (z[zOff + 6] & M) - (x[xOff + 6] & M);
z[zOff + 6] = (int)c;
c >>= 32;
c += (z[zOff + 7] & M) - (x[xOff + 7] & M);
z[zOff + 7] = (int)c;
c >>= 32;
return (int)c;
}
public static BigInteger toBigInteger(int[] x)
{
byte[] bs = new byte[32];
for (int i = 0; i < 8; ++i)
{
int x_i = x[i];
if (x_i != 0)
{
Pack.intToBigEndian(x_i, bs, (7 - i) << 2);
}
}
return new BigInteger(1, bs);
}
public static BigInteger toBigInteger64(long[] x)
{
byte[] bs = new byte[32];
for (int i = 0; i < 4; ++i)
{
long x_i = x[i];
if (x_i != 0L)
{
Pack.longToBigEndian(x_i, bs, (3 - i) << 3);
}
}
return new BigInteger(1, bs);
}
public static void zero(int[] z)
{
z[0] = 0;
z[1] = 0;
z[2] = 0;
z[3] = 0;
z[4] = 0;
z[5] = 0;
z[6] = 0;
z[7] = 0;
}
}