Module fiat

Autogenerated: fiat_crypto.js word-by-word-montgomery –lang Rust fr 32 2111115437357092606062206234695386632838870926408408195193685246394721360383 –no-prefix-fiat –public-type-case PascalCase –private-type-case PascalCase curve description: fr machine_wordsize = 32 (from “32”) requested operations: (all) m = 0x4aad957a68b2955982d1347970dec005293a3afc43c8afeb95aee9ac33fd9ff (from “2111115437357092606062206234695386632838870926408408195193685246394721360383”)

NOTE: In addition to the bounds specified above each function, all functions synthesized for this Montgomery arithmetic require the input to be strictly less than the prime modulus (m), and also require the input to be in the unique saturated representation. All functions also ensure that these two properties are true of return values.

Computed values: eval z = z[0] + (z[1] << 32) + (z[2] << 64) + (z[3] << 96) + (z[4] << 128) + (z[5] << 160) + (z[6] << 192) + (z[7] << 224) bytes_eval z = z[0] + (z[1] << 8) + (z[2] << 16) + (z[3] << 24) + (z[4] << 32) + (z[5] << 40) + (z[6] << 48) + (z[7] << 56) + (z[8] << 64) + (z[9] << 72) + (z[10] << 80) + (z[11] << 88) + (z[12] << 96) + (z[13] << 104) + (z[14] << 112) + (z[15] << 120) + (z[16] << 128) + (z[17] << 136) + (z[18] << 144) + (z[19] << 152) + (z[20] << 160) + (z[21] << 168) + (z[22] << 176) + (z[23] << 184) + (z[24] << 192) + (z[25] << 200) + (z[26] << 208) + (z[27] << 216) + (z[28] << 224) + (z[29] << 232) + (z[30] << 240) + (z[31] << 248) twos_complement_eval z = let x1 := z[0] + (z[1] << 32) + (z[2] << 64) + (z[3] << 96) + (z[4] << 128) + (z[5] << 160) + (z[6] << 192) + (z[7] << 224) in if x1 & (2^256-1) < 2^255 then x1 & (2^256-1) else (x1 & (2^256-1)) - 2^256

Structs

FrMontgomeryDomainFieldElement

The type FrMontgomeryDomainFieldElement is a field element in the Montgomery domain. Bounds: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]

FrNonMontgomeryDomainFieldElement

The type FrNonMontgomeryDomainFieldElement is a field element NOT in the Montgomery domain. Bounds: [[0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff], [0x0 ~> 0xffffffff]]

Functions

fr_add

The function fr_add adds two field elements in the Montgomery domain.

fr_addcarryx_u32

The function fr_addcarryx_u32 is an addition with carry.

fr_cmovznz_u32

The function fr_cmovznz_u32 is a single-word conditional move.

fr_divstep

The function fr_divstep computes a divstep.

fr_divstep_precomp

The function fr_divstep_precomp returns the precomputed value for Bernstein-Yang-inversion (in montgomery form).

fr_from_bytes

The function fr_from_bytes deserializes a field element NOT in the Montgomery domain from bytes in little-endian order.

fr_from_montgomery

The function fr_from_montgomery translates a field element out of the Montgomery domain.

fr_msat

The function fr_msat returns the saturated representation of the prime modulus.

fr_mul

The function fr_mul multiplies two field elements in the Montgomery domain.

fr_mulx_u32

The function fr_mulx_u32 is a multiplication, returning the full double-width result.

fr_nonzero

The function fr_nonzero outputs a single non-zero word if the input is non-zero and zero otherwise.

fr_opp

The function fr_opp negates a field element in the Montgomery domain.

fr_selectznz

The function fr_selectznz is a multi-limb conditional select.

fr_set_one

The function fr_set_one returns the field element one in the Montgomery domain.

fr_square

The function fr_square squares a field element in the Montgomery domain.

fr_sub

The function fr_sub subtracts two field elements in the Montgomery domain.

fr_subborrowx_u32

The function fr_subborrowx_u32 is a subtraction with borrow.

fr_to_bytes

The function fr_to_bytes serializes a field element NOT in the Montgomery domain to bytes in little-endian order.

fr_to_montgomery

The function fr_to_montgomery translates a field element into the Montgomery domain.

Type Aliases

FrI1

FrI1 represents values of 1 bits, stored in one byte.

FrI2

FrI2 represents values of 2 bits, stored in one byte.

FrU1

FrU1 represents values of 1 bits, stored in one byte.

FrU2

FrU2 represents values of 2 bits, stored in one byte.