func math/bits.Mul64
1057 uses
math/bits (current package)
bits.go#L450: h, l := Mul64(uint64(x), uint64(y))
bits.go#L470: func Mul64(x, y uint64) (hi, lo uint64) {
math
fma.go#L121: pm1, pm2 := bits.Mul64(xm<<10, ym<<11)
trig_reduce.go#L50: z2hi, _ := bits.Mul64(z2, ix)
trig_reduce.go#L51: z1hi, z1lo := bits.Mul64(z1, ix)
crypto/internal/edwards25519
scalar_fiat.go#L95: x6, x5 = bits.Mul64(x4, arg2[3])
scalar_fiat.go#L98: x8, x7 = bits.Mul64(x4, arg2[2])
scalar_fiat.go#L101: x10, x9 = bits.Mul64(x4, arg2[1])
scalar_fiat.go#L104: x12, x11 = bits.Mul64(x4, arg2[0])
scalar_fiat.go#L116: _, x20 = bits.Mul64(x11, 0xd2b51da312547e1b)
scalar_fiat.go#L119: x23, x22 = bits.Mul64(x20, 0x1000000000000000)
scalar_fiat.go#L122: x25, x24 = bits.Mul64(x20, 0x14def9dea2f79cd6)
scalar_fiat.go#L125: x27, x26 = bits.Mul64(x20, 0x5812631a5cf5d3ed)
scalar_fiat.go#L146: x42, x41 = bits.Mul64(x1, arg2[3])
scalar_fiat.go#L149: x44, x43 = bits.Mul64(x1, arg2[2])
scalar_fiat.go#L152: x46, x45 = bits.Mul64(x1, arg2[1])
scalar_fiat.go#L155: x48, x47 = bits.Mul64(x1, arg2[0])
scalar_fiat.go#L182: _, x66 = bits.Mul64(x56, 0xd2b51da312547e1b)
scalar_fiat.go#L185: x69, x68 = bits.Mul64(x66, 0x1000000000000000)
scalar_fiat.go#L188: x71, x70 = bits.Mul64(x66, 0x14def9dea2f79cd6)
scalar_fiat.go#L191: x73, x72 = bits.Mul64(x66, 0x5812631a5cf5d3ed)
scalar_fiat.go#L213: x89, x88 = bits.Mul64(x2, arg2[3])
scalar_fiat.go#L216: x91, x90 = bits.Mul64(x2, arg2[2])
scalar_fiat.go#L219: x93, x92 = bits.Mul64(x2, arg2[1])
scalar_fiat.go#L222: x95, x94 = bits.Mul64(x2, arg2[0])
scalar_fiat.go#L249: _, x113 = bits.Mul64(x103, 0xd2b51da312547e1b)
scalar_fiat.go#L252: x116, x115 = bits.Mul64(x113, 0x1000000000000000)
scalar_fiat.go#L255: x118, x117 = bits.Mul64(x113, 0x14def9dea2f79cd6)
scalar_fiat.go#L258: x120, x119 = bits.Mul64(x113, 0x5812631a5cf5d3ed)
scalar_fiat.go#L280: x136, x135 = bits.Mul64(x3, arg2[3])
scalar_fiat.go#L283: x138, x137 = bits.Mul64(x3, arg2[2])
scalar_fiat.go#L286: x140, x139 = bits.Mul64(x3, arg2[1])
scalar_fiat.go#L289: x142, x141 = bits.Mul64(x3, arg2[0])
scalar_fiat.go#L316: _, x160 = bits.Mul64(x150, 0xd2b51da312547e1b)
scalar_fiat.go#L319: x163, x162 = bits.Mul64(x160, 0x1000000000000000)
scalar_fiat.go#L322: x165, x164 = bits.Mul64(x160, 0x14def9dea2f79cd6)
scalar_fiat.go#L325: x167, x166 = bits.Mul64(x160, 0x5812631a5cf5d3ed)
scalar_fiat.go#L545: _, x2 = bits.Mul64(x1, 0xd2b51da312547e1b)
scalar_fiat.go#L548: x5, x4 = bits.Mul64(x2, 0x1000000000000000)
scalar_fiat.go#L551: x7, x6 = bits.Mul64(x2, 0x14def9dea2f79cd6)
scalar_fiat.go#L554: x9, x8 = bits.Mul64(x2, 0x5812631a5cf5d3ed)
scalar_fiat.go#L567: _, x18 = bits.Mul64(x16, 0xd2b51da312547e1b)
scalar_fiat.go#L570: x21, x20 = bits.Mul64(x18, 0x1000000000000000)
scalar_fiat.go#L573: x23, x22 = bits.Mul64(x18, 0x14def9dea2f79cd6)
scalar_fiat.go#L576: x25, x24 = bits.Mul64(x18, 0x5812631a5cf5d3ed)
scalar_fiat.go#L601: _, x42 = bits.Mul64(x36, 0xd2b51da312547e1b)
scalar_fiat.go#L604: x45, x44 = bits.Mul64(x42, 0x1000000000000000)
scalar_fiat.go#L607: x47, x46 = bits.Mul64(x42, 0x14def9dea2f79cd6)
scalar_fiat.go#L610: x49, x48 = bits.Mul64(x42, 0x5812631a5cf5d3ed)
scalar_fiat.go#L635: _, x66 = bits.Mul64(x60, 0xd2b51da312547e1b)
scalar_fiat.go#L638: x69, x68 = bits.Mul64(x66, 0x1000000000000000)
scalar_fiat.go#L641: x71, x70 = bits.Mul64(x66, 0x14def9dea2f79cd6)
scalar_fiat.go#L644: x73, x72 = bits.Mul64(x66, 0x5812631a5cf5d3ed)
scalar_fiat.go#L705: x6, x5 = bits.Mul64(x4, 0x399411b7c309a3d)
scalar_fiat.go#L708: x8, x7 = bits.Mul64(x4, 0xceec73d217f5be65)
scalar_fiat.go#L711: x10, x9 = bits.Mul64(x4, 0xd00e1ba768859347)
scalar_fiat.go#L714: x12, x11 = bits.Mul64(x4, 0xa40611e3449c0f01)
scalar_fiat.go#L725: _, x19 = bits.Mul64(x11, 0xd2b51da312547e1b)
scalar_fiat.go#L728: x22, x21 = bits.Mul64(x19, 0x1000000000000000)
scalar_fiat.go#L731: x24, x23 = bits.Mul64(x19, 0x14def9dea2f79cd6)
scalar_fiat.go#L734: x26, x25 = bits.Mul64(x19, 0x5812631a5cf5d3ed)
scalar_fiat.go#L751: x38, x37 = bits.Mul64(x1, 0x399411b7c309a3d)
scalar_fiat.go#L754: x40, x39 = bits.Mul64(x1, 0xceec73d217f5be65)
scalar_fiat.go#L757: x42, x41 = bits.Mul64(x1, 0xd00e1ba768859347)
scalar_fiat.go#L760: x44, x43 = bits.Mul64(x1, 0xa40611e3449c0f01)
scalar_fiat.go#L783: _, x59 = bits.Mul64(x51, 0xd2b51da312547e1b)
scalar_fiat.go#L786: x62, x61 = bits.Mul64(x59, 0x1000000000000000)
scalar_fiat.go#L789: x64, x63 = bits.Mul64(x59, 0x14def9dea2f79cd6)
scalar_fiat.go#L792: x66, x65 = bits.Mul64(x59, 0x5812631a5cf5d3ed)
scalar_fiat.go#L809: x78, x77 = bits.Mul64(x2, 0x399411b7c309a3d)
scalar_fiat.go#L812: x80, x79 = bits.Mul64(x2, 0xceec73d217f5be65)
scalar_fiat.go#L815: x82, x81 = bits.Mul64(x2, 0xd00e1ba768859347)
scalar_fiat.go#L818: x84, x83 = bits.Mul64(x2, 0xa40611e3449c0f01)
scalar_fiat.go#L841: _, x99 = bits.Mul64(x91, 0xd2b51da312547e1b)
scalar_fiat.go#L844: x102, x101 = bits.Mul64(x99, 0x1000000000000000)
scalar_fiat.go#L847: x104, x103 = bits.Mul64(x99, 0x14def9dea2f79cd6)
scalar_fiat.go#L850: x106, x105 = bits.Mul64(x99, 0x5812631a5cf5d3ed)
scalar_fiat.go#L867: x118, x117 = bits.Mul64(x3, 0x399411b7c309a3d)
scalar_fiat.go#L870: x120, x119 = bits.Mul64(x3, 0xceec73d217f5be65)
scalar_fiat.go#L873: x122, x121 = bits.Mul64(x3, 0xd00e1ba768859347)
scalar_fiat.go#L876: x124, x123 = bits.Mul64(x3, 0xa40611e3449c0f01)
scalar_fiat.go#L899: _, x139 = bits.Mul64(x131, 0xd2b51da312547e1b)
scalar_fiat.go#L902: x142, x141 = bits.Mul64(x139, 0x1000000000000000)
scalar_fiat.go#L905: x144, x143 = bits.Mul64(x139, 0x14def9dea2f79cd6)
scalar_fiat.go#L908: x146, x145 = bits.Mul64(x139, 0x5812631a5cf5d3ed)
crypto/internal/edwards25519/field
fe.go#L332: mh, ml := bits.Mul64(a, uint64(b))
fe_generic.go#L17: hi, lo := bits.Mul64(a, b)
fe_generic.go#L23: hi, lo := bits.Mul64(a, b)
crypto/internal/nistec/fiat
p224_fiat64.go#L95: x6, x5 = bits.Mul64(x4, arg2[3])
p224_fiat64.go#L98: x8, x7 = bits.Mul64(x4, arg2[2])
p224_fiat64.go#L101: x10, x9 = bits.Mul64(x4, arg2[1])
p224_fiat64.go#L104: x12, x11 = bits.Mul64(x4, arg2[0])
p224_fiat64.go#L116: _, x20 = bits.Mul64(x11, 0xffffffffffffffff)
p224_fiat64.go#L119: x23, x22 = bits.Mul64(x20, 0xffffffff)
p224_fiat64.go#L122: x25, x24 = bits.Mul64(x20, 0xffffffffffffffff)
p224_fiat64.go#L125: x27, x26 = bits.Mul64(x20, 0xffffffff00000000)
p224_fiat64.go#L149: x44, x43 = bits.Mul64(x1, arg2[3])
p224_fiat64.go#L152: x46, x45 = bits.Mul64(x1, arg2[2])
p224_fiat64.go#L155: x48, x47 = bits.Mul64(x1, arg2[1])
p224_fiat64.go#L158: x50, x49 = bits.Mul64(x1, arg2[0])
p224_fiat64.go#L185: _, x68 = bits.Mul64(x58, 0xffffffffffffffff)
p224_fiat64.go#L188: x71, x70 = bits.Mul64(x68, 0xffffffff)
p224_fiat64.go#L191: x73, x72 = bits.Mul64(x68, 0xffffffffffffffff)
p224_fiat64.go#L194: x75, x74 = bits.Mul64(x68, 0xffffffff00000000)
p224_fiat64.go#L219: x93, x92 = bits.Mul64(x2, arg2[3])
p224_fiat64.go#L222: x95, x94 = bits.Mul64(x2, arg2[2])
p224_fiat64.go#L225: x97, x96 = bits.Mul64(x2, arg2[1])
p224_fiat64.go#L228: x99, x98 = bits.Mul64(x2, arg2[0])
p224_fiat64.go#L255: _, x117 = bits.Mul64(x107, 0xffffffffffffffff)
p224_fiat64.go#L258: x120, x119 = bits.Mul64(x117, 0xffffffff)
p224_fiat64.go#L261: x122, x121 = bits.Mul64(x117, 0xffffffffffffffff)
p224_fiat64.go#L264: x124, x123 = bits.Mul64(x117, 0xffffffff00000000)
p224_fiat64.go#L289: x142, x141 = bits.Mul64(x3, arg2[3])
p224_fiat64.go#L292: x144, x143 = bits.Mul64(x3, arg2[2])
p224_fiat64.go#L295: x146, x145 = bits.Mul64(x3, arg2[1])
p224_fiat64.go#L298: x148, x147 = bits.Mul64(x3, arg2[0])
p224_fiat64.go#L325: _, x166 = bits.Mul64(x156, 0xffffffffffffffff)
p224_fiat64.go#L328: x169, x168 = bits.Mul64(x166, 0xffffffff)
p224_fiat64.go#L331: x171, x170 = bits.Mul64(x166, 0xffffffffffffffff)
p224_fiat64.go#L334: x173, x172 = bits.Mul64(x166, 0xffffffff00000000)
p224_fiat64.go#L402: x6, x5 = bits.Mul64(x4, arg1[3])
p224_fiat64.go#L405: x8, x7 = bits.Mul64(x4, arg1[2])
p224_fiat64.go#L408: x10, x9 = bits.Mul64(x4, arg1[1])
p224_fiat64.go#L411: x12, x11 = bits.Mul64(x4, arg1[0])
p224_fiat64.go#L423: _, x20 = bits.Mul64(x11, 0xffffffffffffffff)
p224_fiat64.go#L426: x23, x22 = bits.Mul64(x20, 0xffffffff)
p224_fiat64.go#L429: x25, x24 = bits.Mul64(x20, 0xffffffffffffffff)
p224_fiat64.go#L432: x27, x26 = bits.Mul64(x20, 0xffffffff00000000)
p224_fiat64.go#L456: x44, x43 = bits.Mul64(x1, arg1[3])
p224_fiat64.go#L459: x46, x45 = bits.Mul64(x1, arg1[2])
p224_fiat64.go#L462: x48, x47 = bits.Mul64(x1, arg1[1])
p224_fiat64.go#L465: x50, x49 = bits.Mul64(x1, arg1[0])
p224_fiat64.go#L492: _, x68 = bits.Mul64(x58, 0xffffffffffffffff)
p224_fiat64.go#L495: x71, x70 = bits.Mul64(x68, 0xffffffff)
p224_fiat64.go#L498: x73, x72 = bits.Mul64(x68, 0xffffffffffffffff)
p224_fiat64.go#L501: x75, x74 = bits.Mul64(x68, 0xffffffff00000000)
p224_fiat64.go#L526: x93, x92 = bits.Mul64(x2, arg1[3])
p224_fiat64.go#L529: x95, x94 = bits.Mul64(x2, arg1[2])
p224_fiat64.go#L532: x97, x96 = bits.Mul64(x2, arg1[1])
p224_fiat64.go#L535: x99, x98 = bits.Mul64(x2, arg1[0])
p224_fiat64.go#L562: _, x117 = bits.Mul64(x107, 0xffffffffffffffff)
p224_fiat64.go#L565: x120, x119 = bits.Mul64(x117, 0xffffffff)
p224_fiat64.go#L568: x122, x121 = bits.Mul64(x117, 0xffffffffffffffff)
p224_fiat64.go#L571: x124, x123 = bits.Mul64(x117, 0xffffffff00000000)
p224_fiat64.go#L596: x142, x141 = bits.Mul64(x3, arg1[3])
p224_fiat64.go#L599: x144, x143 = bits.Mul64(x3, arg1[2])
p224_fiat64.go#L602: x146, x145 = bits.Mul64(x3, arg1[1])
p224_fiat64.go#L605: x148, x147 = bits.Mul64(x3, arg1[0])
p224_fiat64.go#L632: _, x166 = bits.Mul64(x156, 0xffffffffffffffff)
p224_fiat64.go#L635: x169, x168 = bits.Mul64(x166, 0xffffffff)
p224_fiat64.go#L638: x171, x170 = bits.Mul64(x166, 0xffffffffffffffff)
p224_fiat64.go#L641: x173, x172 = bits.Mul64(x166, 0xffffffff00000000)
p224_fiat64.go#L813: _, x2 = bits.Mul64(x1, 0xffffffffffffffff)
p224_fiat64.go#L816: x5, x4 = bits.Mul64(x2, 0xffffffff)
p224_fiat64.go#L819: x7, x6 = bits.Mul64(x2, 0xffffffffffffffff)
p224_fiat64.go#L822: x9, x8 = bits.Mul64(x2, 0xffffffff00000000)
p224_fiat64.go#L850: _, x28 = bits.Mul64(x22, 0xffffffffffffffff)
p224_fiat64.go#L853: x31, x30 = bits.Mul64(x28, 0xffffffff)
p224_fiat64.go#L856: x33, x32 = bits.Mul64(x28, 0xffffffffffffffff)
p224_fiat64.go#L859: x35, x34 = bits.Mul64(x28, 0xffffffff00000000)
p224_fiat64.go#L887: _, x54 = bits.Mul64(x48, 0xffffffffffffffff)
p224_fiat64.go#L890: x57, x56 = bits.Mul64(x54, 0xffffffff)
p224_fiat64.go#L893: x59, x58 = bits.Mul64(x54, 0xffffffffffffffff)
p224_fiat64.go#L896: x61, x60 = bits.Mul64(x54, 0xffffffff00000000)
p224_fiat64.go#L924: _, x80 = bits.Mul64(x74, 0xffffffffffffffff)
p224_fiat64.go#L927: x83, x82 = bits.Mul64(x80, 0xffffffff)
p224_fiat64.go#L930: x85, x84 = bits.Mul64(x80, 0xffffffffffffffff)
p224_fiat64.go#L933: x87, x86 = bits.Mul64(x80, 0xffffffff00000000)
p224_fiat64.go#L997: x6, x5 = bits.Mul64(x4, 0xffffffff)
p224_fiat64.go#L1000: x8, x7 = bits.Mul64(x4, 0xfffffffe00000000)
p224_fiat64.go#L1003: x10, x9 = bits.Mul64(x4, 0xffffffff00000000)
p224_fiat64.go#L1006: x12, x11 = bits.Mul64(x4, 0xffffffff00000001)
p224_fiat64.go#L1017: _, x19 = bits.Mul64(x11, 0xffffffffffffffff)
p224_fiat64.go#L1020: x22, x21 = bits.Mul64(x19, 0xffffffff)
p224_fiat64.go#L1023: x24, x23 = bits.Mul64(x19, 0xffffffffffffffff)
p224_fiat64.go#L1026: x26, x25 = bits.Mul64(x19, 0xffffffff00000000)
p224_fiat64.go#L1046: x40, x39 = bits.Mul64(x1, 0xffffffff)
p224_fiat64.go#L1049: x42, x41 = bits.Mul64(x1, 0xfffffffe00000000)
p224_fiat64.go#L1052: x44, x43 = bits.Mul64(x1, 0xffffffff00000000)
p224_fiat64.go#L1055: x46, x45 = bits.Mul64(x1, 0xffffffff00000001)
p224_fiat64.go#L1078: _, x61 = bits.Mul64(x53, 0xffffffffffffffff)
p224_fiat64.go#L1081: x64, x63 = bits.Mul64(x61, 0xffffffff)
p224_fiat64.go#L1084: x66, x65 = bits.Mul64(x61, 0xffffffffffffffff)
p224_fiat64.go#L1087: x68, x67 = bits.Mul64(x61, 0xffffffff00000000)
p224_fiat64.go#L1107: x82, x81 = bits.Mul64(x2, 0xffffffff)
p224_fiat64.go#L1110: x84, x83 = bits.Mul64(x2, 0xfffffffe00000000)
p224_fiat64.go#L1113: x86, x85 = bits.Mul64(x2, 0xffffffff00000000)
p224_fiat64.go#L1116: x88, x87 = bits.Mul64(x2, 0xffffffff00000001)
p224_fiat64.go#L1139: _, x103 = bits.Mul64(x95, 0xffffffffffffffff)
p224_fiat64.go#L1142: x106, x105 = bits.Mul64(x103, 0xffffffff)
p224_fiat64.go#L1145: x108, x107 = bits.Mul64(x103, 0xffffffffffffffff)
p224_fiat64.go#L1148: x110, x109 = bits.Mul64(x103, 0xffffffff00000000)
p224_fiat64.go#L1168: x124, x123 = bits.Mul64(x3, 0xffffffff)
p224_fiat64.go#L1171: x126, x125 = bits.Mul64(x3, 0xfffffffe00000000)
p224_fiat64.go#L1174: x128, x127 = bits.Mul64(x3, 0xffffffff00000000)
p224_fiat64.go#L1177: x130, x129 = bits.Mul64(x3, 0xffffffff00000001)
p224_fiat64.go#L1200: _, x145 = bits.Mul64(x137, 0xffffffffffffffff)
p224_fiat64.go#L1203: x148, x147 = bits.Mul64(x145, 0xffffffff)
p224_fiat64.go#L1206: x150, x149 = bits.Mul64(x145, 0xffffffffffffffff)
p224_fiat64.go#L1209: x152, x151 = bits.Mul64(x145, 0xffffffff00000000)
p256_fiat64.go#L95: x6, x5 = bits.Mul64(x4, arg2[3])
p256_fiat64.go#L98: x8, x7 = bits.Mul64(x4, arg2[2])
p256_fiat64.go#L101: x10, x9 = bits.Mul64(x4, arg2[1])
p256_fiat64.go#L104: x12, x11 = bits.Mul64(x4, arg2[0])
p256_fiat64.go#L117: x21, x20 = bits.Mul64(x11, 0xffffffff00000001)
p256_fiat64.go#L120: x23, x22 = bits.Mul64(x11, 0xffffffff)
p256_fiat64.go#L123: x25, x24 = bits.Mul64(x11, 0xffffffffffffffff)
p256_fiat64.go#L144: x40, x39 = bits.Mul64(x1, arg2[3])
p256_fiat64.go#L147: x42, x41 = bits.Mul64(x1, arg2[2])
p256_fiat64.go#L150: x44, x43 = bits.Mul64(x1, arg2[1])
p256_fiat64.go#L153: x46, x45 = bits.Mul64(x1, arg2[0])
p256_fiat64.go#L181: x65, x64 = bits.Mul64(x54, 0xffffffff00000001)
p256_fiat64.go#L184: x67, x66 = bits.Mul64(x54, 0xffffffff)
p256_fiat64.go#L187: x69, x68 = bits.Mul64(x54, 0xffffffffffffffff)
p256_fiat64.go#L209: x85, x84 = bits.Mul64(x2, arg2[3])
p256_fiat64.go#L212: x87, x86 = bits.Mul64(x2, arg2[2])
p256_fiat64.go#L215: x89, x88 = bits.Mul64(x2, arg2[1])
p256_fiat64.go#L218: x91, x90 = bits.Mul64(x2, arg2[0])
p256_fiat64.go#L246: x110, x109 = bits.Mul64(x99, 0xffffffff00000001)
p256_fiat64.go#L249: x112, x111 = bits.Mul64(x99, 0xffffffff)
p256_fiat64.go#L252: x114, x113 = bits.Mul64(x99, 0xffffffffffffffff)
p256_fiat64.go#L274: x130, x129 = bits.Mul64(x3, arg2[3])
p256_fiat64.go#L277: x132, x131 = bits.Mul64(x3, arg2[2])
p256_fiat64.go#L280: x134, x133 = bits.Mul64(x3, arg2[1])
p256_fiat64.go#L283: x136, x135 = bits.Mul64(x3, arg2[0])
p256_fiat64.go#L311: x155, x154 = bits.Mul64(x144, 0xffffffff00000001)
p256_fiat64.go#L314: x157, x156 = bits.Mul64(x144, 0xffffffff)
p256_fiat64.go#L317: x159, x158 = bits.Mul64(x144, 0xffffffffffffffff)
p256_fiat64.go#L382: x6, x5 = bits.Mul64(x4, arg1[3])
p256_fiat64.go#L385: x8, x7 = bits.Mul64(x4, arg1[2])
p256_fiat64.go#L388: x10, x9 = bits.Mul64(x4, arg1[1])
p256_fiat64.go#L391: x12, x11 = bits.Mul64(x4, arg1[0])
p256_fiat64.go#L404: x21, x20 = bits.Mul64(x11, 0xffffffff00000001)
p256_fiat64.go#L407: x23, x22 = bits.Mul64(x11, 0xffffffff)
p256_fiat64.go#L410: x25, x24 = bits.Mul64(x11, 0xffffffffffffffff)
p256_fiat64.go#L431: x40, x39 = bits.Mul64(x1, arg1[3])
p256_fiat64.go#L434: x42, x41 = bits.Mul64(x1, arg1[2])
p256_fiat64.go#L437: x44, x43 = bits.Mul64(x1, arg1[1])
p256_fiat64.go#L440: x46, x45 = bits.Mul64(x1, arg1[0])
p256_fiat64.go#L468: x65, x64 = bits.Mul64(x54, 0xffffffff00000001)
p256_fiat64.go#L471: x67, x66 = bits.Mul64(x54, 0xffffffff)
p256_fiat64.go#L474: x69, x68 = bits.Mul64(x54, 0xffffffffffffffff)
p256_fiat64.go#L496: x85, x84 = bits.Mul64(x2, arg1[3])
p256_fiat64.go#L499: x87, x86 = bits.Mul64(x2, arg1[2])
p256_fiat64.go#L502: x89, x88 = bits.Mul64(x2, arg1[1])
p256_fiat64.go#L505: x91, x90 = bits.Mul64(x2, arg1[0])
p256_fiat64.go#L533: x110, x109 = bits.Mul64(x99, 0xffffffff00000001)
p256_fiat64.go#L536: x112, x111 = bits.Mul64(x99, 0xffffffff)
p256_fiat64.go#L539: x114, x113 = bits.Mul64(x99, 0xffffffffffffffff)
p256_fiat64.go#L561: x130, x129 = bits.Mul64(x3, arg1[3])
p256_fiat64.go#L564: x132, x131 = bits.Mul64(x3, arg1[2])
p256_fiat64.go#L567: x134, x133 = bits.Mul64(x3, arg1[1])
p256_fiat64.go#L570: x136, x135 = bits.Mul64(x3, arg1[0])
p256_fiat64.go#L598: x155, x154 = bits.Mul64(x144, 0xffffffff00000001)
p256_fiat64.go#L601: x157, x156 = bits.Mul64(x144, 0xffffffff)
p256_fiat64.go#L604: x159, x158 = bits.Mul64(x144, 0xffffffffffffffff)
p256_fiat64.go#L774: x3, x2 = bits.Mul64(x1, 0xffffffff00000001)
p256_fiat64.go#L777: x5, x4 = bits.Mul64(x1, 0xffffffff)
p256_fiat64.go#L780: x7, x6 = bits.Mul64(x1, 0xffffffffffffffff)
p256_fiat64.go#L794: x17, x16 = bits.Mul64(x14, 0xffffffff00000001)
p256_fiat64.go#L797: x19, x18 = bits.Mul64(x14, 0xffffffff)
p256_fiat64.go#L800: x21, x20 = bits.Mul64(x14, 0xffffffffffffffff)
p256_fiat64.go#L826: x39, x38 = bits.Mul64(x32, 0xffffffff00000001)
p256_fiat64.go#L829: x41, x40 = bits.Mul64(x32, 0xffffffff)
p256_fiat64.go#L832: x43, x42 = bits.Mul64(x32, 0xffffffffffffffff)
p256_fiat64.go#L858: x61, x60 = bits.Mul64(x54, 0xffffffff00000001)
p256_fiat64.go#L861: x63, x62 = bits.Mul64(x54, 0xffffffff)
p256_fiat64.go#L864: x65, x64 = bits.Mul64(x54, 0xffffffffffffffff)
p256_fiat64.go#L925: x6, x5 = bits.Mul64(x4, 0x4fffffffd)
p256_fiat64.go#L928: x8, x7 = bits.Mul64(x4, 0xfffffffffffffffe)
p256_fiat64.go#L931: x10, x9 = bits.Mul64(x4, 0xfffffffbffffffff)
p256_fiat64.go#L934: x12, x11 = bits.Mul64(x4, 0x3)
p256_fiat64.go#L946: x20, x19 = bits.Mul64(x11, 0xffffffff00000001)
p256_fiat64.go#L949: x22, x21 = bits.Mul64(x11, 0xffffffff)
p256_fiat64.go#L952: x24, x23 = bits.Mul64(x11, 0xffffffffffffffff)
p256_fiat64.go#L972: x38, x37 = bits.Mul64(x1, 0x4fffffffd)
p256_fiat64.go#L975: x40, x39 = bits.Mul64(x1, 0xfffffffffffffffe)
p256_fiat64.go#L978: x42, x41 = bits.Mul64(x1, 0xfffffffbffffffff)
p256_fiat64.go#L981: x44, x43 = bits.Mul64(x1, 0x3)
p256_fiat64.go#L1005: x60, x59 = bits.Mul64(x51, 0xffffffff00000001)
p256_fiat64.go#L1008: x62, x61 = bits.Mul64(x51, 0xffffffff)
p256_fiat64.go#L1011: x64, x63 = bits.Mul64(x51, 0xffffffffffffffff)
p256_fiat64.go#L1031: x78, x77 = bits.Mul64(x2, 0x4fffffffd)
p256_fiat64.go#L1034: x80, x79 = bits.Mul64(x2, 0xfffffffffffffffe)
p256_fiat64.go#L1037: x82, x81 = bits.Mul64(x2, 0xfffffffbffffffff)
p256_fiat64.go#L1040: x84, x83 = bits.Mul64(x2, 0x3)
p256_fiat64.go#L1064: x100, x99 = bits.Mul64(x91, 0xffffffff00000001)
p256_fiat64.go#L1067: x102, x101 = bits.Mul64(x91, 0xffffffff)
p256_fiat64.go#L1070: x104, x103 = bits.Mul64(x91, 0xffffffffffffffff)
p256_fiat64.go#L1090: x118, x117 = bits.Mul64(x3, 0x4fffffffd)
p256_fiat64.go#L1093: x120, x119 = bits.Mul64(x3, 0xfffffffffffffffe)
p256_fiat64.go#L1096: x122, x121 = bits.Mul64(x3, 0xfffffffbffffffff)
p256_fiat64.go#L1099: x124, x123 = bits.Mul64(x3, 0x3)
p256_fiat64.go#L1123: x140, x139 = bits.Mul64(x131, 0xffffffff00000001)
p256_fiat64.go#L1126: x142, x141 = bits.Mul64(x131, 0xffffffff)
p256_fiat64.go#L1129: x144, x143 = bits.Mul64(x131, 0xffffffffffffffff)
p384_fiat64.go#L97: x8, x7 = bits.Mul64(x6, arg2[5])
p384_fiat64.go#L100: x10, x9 = bits.Mul64(x6, arg2[4])
p384_fiat64.go#L103: x12, x11 = bits.Mul64(x6, arg2[3])
p384_fiat64.go#L106: x14, x13 = bits.Mul64(x6, arg2[2])
p384_fiat64.go#L109: x16, x15 = bits.Mul64(x6, arg2[1])
p384_fiat64.go#L112: x18, x17 = bits.Mul64(x6, arg2[0])
p384_fiat64.go#L130: _, x30 = bits.Mul64(x17, 0x100000001)
p384_fiat64.go#L133: x33, x32 = bits.Mul64(x30, 0xffffffffffffffff)
p384_fiat64.go#L136: x35, x34 = bits.Mul64(x30, 0xffffffffffffffff)
p384_fiat64.go#L139: x37, x36 = bits.Mul64(x30, 0xffffffffffffffff)
p384_fiat64.go#L142: x39, x38 = bits.Mul64(x30, 0xfffffffffffffffe)
p384_fiat64.go#L145: x41, x40 = bits.Mul64(x30, 0xffffffff00000000)
p384_fiat64.go#L148: x43, x42 = bits.Mul64(x30, 0xffffffff)
p384_fiat64.go#L187: x70, x69 = bits.Mul64(x1, arg2[5])
p384_fiat64.go#L190: x72, x71 = bits.Mul64(x1, arg2[4])
p384_fiat64.go#L193: x74, x73 = bits.Mul64(x1, arg2[3])
p384_fiat64.go#L196: x76, x75 = bits.Mul64(x1, arg2[2])
p384_fiat64.go#L199: x78, x77 = bits.Mul64(x1, arg2[1])
p384_fiat64.go#L202: x80, x79 = bits.Mul64(x1, arg2[0])
p384_fiat64.go#L241: _, x106 = bits.Mul64(x92, 0x100000001)
p384_fiat64.go#L244: x109, x108 = bits.Mul64(x106, 0xffffffffffffffff)
p384_fiat64.go#L247: x111, x110 = bits.Mul64(x106, 0xffffffffffffffff)
p384_fiat64.go#L250: x113, x112 = bits.Mul64(x106, 0xffffffffffffffff)
p384_fiat64.go#L253: x115, x114 = bits.Mul64(x106, 0xfffffffffffffffe)
p384_fiat64.go#L256: x117, x116 = bits.Mul64(x106, 0xffffffff00000000)
p384_fiat64.go#L259: x119, x118 = bits.Mul64(x106, 0xffffffff)
p384_fiat64.go#L299: x147, x146 = bits.Mul64(x2, arg2[5])
p384_fiat64.go#L302: x149, x148 = bits.Mul64(x2, arg2[4])
p384_fiat64.go#L305: x151, x150 = bits.Mul64(x2, arg2[3])
p384_fiat64.go#L308: x153, x152 = bits.Mul64(x2, arg2[2])
p384_fiat64.go#L311: x155, x154 = bits.Mul64(x2, arg2[1])
p384_fiat64.go#L314: x157, x156 = bits.Mul64(x2, arg2[0])
p384_fiat64.go#L353: _, x183 = bits.Mul64(x169, 0x100000001)
p384_fiat64.go#L356: x186, x185 = bits.Mul64(x183, 0xffffffffffffffff)
p384_fiat64.go#L359: x188, x187 = bits.Mul64(x183, 0xffffffffffffffff)
p384_fiat64.go#L362: x190, x189 = bits.Mul64(x183, 0xffffffffffffffff)
p384_fiat64.go#L365: x192, x191 = bits.Mul64(x183, 0xfffffffffffffffe)
p384_fiat64.go#L368: x194, x193 = bits.Mul64(x183, 0xffffffff00000000)
p384_fiat64.go#L371: x196, x195 = bits.Mul64(x183, 0xffffffff)
p384_fiat64.go#L411: x224, x223 = bits.Mul64(x3, arg2[5])
p384_fiat64.go#L414: x226, x225 = bits.Mul64(x3, arg2[4])
p384_fiat64.go#L417: x228, x227 = bits.Mul64(x3, arg2[3])
p384_fiat64.go#L420: x230, x229 = bits.Mul64(x3, arg2[2])
p384_fiat64.go#L423: x232, x231 = bits.Mul64(x3, arg2[1])
p384_fiat64.go#L426: x234, x233 = bits.Mul64(x3, arg2[0])
p384_fiat64.go#L465: _, x260 = bits.Mul64(x246, 0x100000001)
p384_fiat64.go#L468: x263, x262 = bits.Mul64(x260, 0xffffffffffffffff)
p384_fiat64.go#L471: x265, x264 = bits.Mul64(x260, 0xffffffffffffffff)
p384_fiat64.go#L474: x267, x266 = bits.Mul64(x260, 0xffffffffffffffff)
p384_fiat64.go#L477: x269, x268 = bits.Mul64(x260, 0xfffffffffffffffe)
p384_fiat64.go#L480: x271, x270 = bits.Mul64(x260, 0xffffffff00000000)
p384_fiat64.go#L483: x273, x272 = bits.Mul64(x260, 0xffffffff)
p384_fiat64.go#L523: x301, x300 = bits.Mul64(x4, arg2[5])
p384_fiat64.go#L526: x303, x302 = bits.Mul64(x4, arg2[4])
p384_fiat64.go#L529: x305, x304 = bits.Mul64(x4, arg2[3])
p384_fiat64.go#L532: x307, x306 = bits.Mul64(x4, arg2[2])
p384_fiat64.go#L535: x309, x308 = bits.Mul64(x4, arg2[1])
p384_fiat64.go#L538: x311, x310 = bits.Mul64(x4, arg2[0])
p384_fiat64.go#L577: _, x337 = bits.Mul64(x323, 0x100000001)
p384_fiat64.go#L580: x340, x339 = bits.Mul64(x337, 0xffffffffffffffff)
p384_fiat64.go#L583: x342, x341 = bits.Mul64(x337, 0xffffffffffffffff)
p384_fiat64.go#L586: x344, x343 = bits.Mul64(x337, 0xffffffffffffffff)
p384_fiat64.go#L589: x346, x345 = bits.Mul64(x337, 0xfffffffffffffffe)
p384_fiat64.go#L592: x348, x347 = bits.Mul64(x337, 0xffffffff00000000)
p384_fiat64.go#L595: x350, x349 = bits.Mul64(x337, 0xffffffff)
p384_fiat64.go#L635: x378, x377 = bits.Mul64(x5, arg2[5])
p384_fiat64.go#L638: x380, x379 = bits.Mul64(x5, arg2[4])
p384_fiat64.go#L641: x382, x381 = bits.Mul64(x5, arg2[3])
p384_fiat64.go#L644: x384, x383 = bits.Mul64(x5, arg2[2])
p384_fiat64.go#L647: x386, x385 = bits.Mul64(x5, arg2[1])
p384_fiat64.go#L650: x388, x387 = bits.Mul64(x5, arg2[0])
p384_fiat64.go#L689: _, x414 = bits.Mul64(x400, 0x100000001)
p384_fiat64.go#L692: x417, x416 = bits.Mul64(x414, 0xffffffffffffffff)
p384_fiat64.go#L695: x419, x418 = bits.Mul64(x414, 0xffffffffffffffff)
p384_fiat64.go#L698: x421, x420 = bits.Mul64(x414, 0xffffffffffffffff)
p384_fiat64.go#L701: x423, x422 = bits.Mul64(x414, 0xfffffffffffffffe)
p384_fiat64.go#L704: x425, x424 = bits.Mul64(x414, 0xffffffff00000000)
p384_fiat64.go#L707: x427, x426 = bits.Mul64(x414, 0xffffffff)
p384_fiat64.go#L804: x8, x7 = bits.Mul64(x6, arg1[5])
p384_fiat64.go#L807: x10, x9 = bits.Mul64(x6, arg1[4])
p384_fiat64.go#L810: x12, x11 = bits.Mul64(x6, arg1[3])
p384_fiat64.go#L813: x14, x13 = bits.Mul64(x6, arg1[2])
p384_fiat64.go#L816: x16, x15 = bits.Mul64(x6, arg1[1])
p384_fiat64.go#L819: x18, x17 = bits.Mul64(x6, arg1[0])
p384_fiat64.go#L837: _, x30 = bits.Mul64(x17, 0x100000001)
p384_fiat64.go#L840: x33, x32 = bits.Mul64(x30, 0xffffffffffffffff)
p384_fiat64.go#L843: x35, x34 = bits.Mul64(x30, 0xffffffffffffffff)
p384_fiat64.go#L846: x37, x36 = bits.Mul64(x30, 0xffffffffffffffff)
p384_fiat64.go#L849: x39, x38 = bits.Mul64(x30, 0xfffffffffffffffe)
p384_fiat64.go#L852: x41, x40 = bits.Mul64(x30, 0xffffffff00000000)
p384_fiat64.go#L855: x43, x42 = bits.Mul64(x30, 0xffffffff)
p384_fiat64.go#L894: x70, x69 = bits.Mul64(x1, arg1[5])
p384_fiat64.go#L897: x72, x71 = bits.Mul64(x1, arg1[4])
p384_fiat64.go#L900: x74, x73 = bits.Mul64(x1, arg1[3])
p384_fiat64.go#L903: x76, x75 = bits.Mul64(x1, arg1[2])
p384_fiat64.go#L906: x78, x77 = bits.Mul64(x1, arg1[1])
p384_fiat64.go#L909: x80, x79 = bits.Mul64(x1, arg1[0])
p384_fiat64.go#L948: _, x106 = bits.Mul64(x92, 0x100000001)
p384_fiat64.go#L951: x109, x108 = bits.Mul64(x106, 0xffffffffffffffff)
p384_fiat64.go#L954: x111, x110 = bits.Mul64(x106, 0xffffffffffffffff)
p384_fiat64.go#L957: x113, x112 = bits.Mul64(x106, 0xffffffffffffffff)
p384_fiat64.go#L960: x115, x114 = bits.Mul64(x106, 0xfffffffffffffffe)
p384_fiat64.go#L963: x117, x116 = bits.Mul64(x106, 0xffffffff00000000)
p384_fiat64.go#L966: x119, x118 = bits.Mul64(x106, 0xffffffff)
p384_fiat64.go#L1006: x147, x146 = bits.Mul64(x2, arg1[5])
p384_fiat64.go#L1009: x149, x148 = bits.Mul64(x2, arg1[4])
p384_fiat64.go#L1012: x151, x150 = bits.Mul64(x2, arg1[3])
p384_fiat64.go#L1015: x153, x152 = bits.Mul64(x2, arg1[2])
p384_fiat64.go#L1018: x155, x154 = bits.Mul64(x2, arg1[1])
p384_fiat64.go#L1021: x157, x156 = bits.Mul64(x2, arg1[0])
p384_fiat64.go#L1060: _, x183 = bits.Mul64(x169, 0x100000001)
p384_fiat64.go#L1063: x186, x185 = bits.Mul64(x183, 0xffffffffffffffff)
p384_fiat64.go#L1066: x188, x187 = bits.Mul64(x183, 0xffffffffffffffff)
p384_fiat64.go#L1069: x190, x189 = bits.Mul64(x183, 0xffffffffffffffff)
p384_fiat64.go#L1072: x192, x191 = bits.Mul64(x183, 0xfffffffffffffffe)
p384_fiat64.go#L1075: x194, x193 = bits.Mul64(x183, 0xffffffff00000000)
p384_fiat64.go#L1078: x196, x195 = bits.Mul64(x183, 0xffffffff)
p384_fiat64.go#L1118: x224, x223 = bits.Mul64(x3, arg1[5])
p384_fiat64.go#L1121: x226, x225 = bits.Mul64(x3, arg1[4])
p384_fiat64.go#L1124: x228, x227 = bits.Mul64(x3, arg1[3])
p384_fiat64.go#L1127: x230, x229 = bits.Mul64(x3, arg1[2])
p384_fiat64.go#L1130: x232, x231 = bits.Mul64(x3, arg1[1])
p384_fiat64.go#L1133: x234, x233 = bits.Mul64(x3, arg1[0])
p384_fiat64.go#L1172: _, x260 = bits.Mul64(x246, 0x100000001)
p384_fiat64.go#L1175: x263, x262 = bits.Mul64(x260, 0xffffffffffffffff)
p384_fiat64.go#L1178: x265, x264 = bits.Mul64(x260, 0xffffffffffffffff)
p384_fiat64.go#L1181: x267, x266 = bits.Mul64(x260, 0xffffffffffffffff)
p384_fiat64.go#L1184: x269, x268 = bits.Mul64(x260, 0xfffffffffffffffe)
p384_fiat64.go#L1187: x271, x270 = bits.Mul64(x260, 0xffffffff00000000)
p384_fiat64.go#L1190: x273, x272 = bits.Mul64(x260, 0xffffffff)
p384_fiat64.go#L1230: x301, x300 = bits.Mul64(x4, arg1[5])
p384_fiat64.go#L1233: x303, x302 = bits.Mul64(x4, arg1[4])
p384_fiat64.go#L1236: x305, x304 = bits.Mul64(x4, arg1[3])
p384_fiat64.go#L1239: x307, x306 = bits.Mul64(x4, arg1[2])
p384_fiat64.go#L1242: x309, x308 = bits.Mul64(x4, arg1[1])
p384_fiat64.go#L1245: x311, x310 = bits.Mul64(x4, arg1[0])
p384_fiat64.go#L1284: _, x337 = bits.Mul64(x323, 0x100000001)
p384_fiat64.go#L1287: x340, x339 = bits.Mul64(x337, 0xffffffffffffffff)
p384_fiat64.go#L1290: x342, x341 = bits.Mul64(x337, 0xffffffffffffffff)
p384_fiat64.go#L1293: x344, x343 = bits.Mul64(x337, 0xffffffffffffffff)
p384_fiat64.go#L1296: x346, x345 = bits.Mul64(x337, 0xfffffffffffffffe)
p384_fiat64.go#L1299: x348, x347 = bits.Mul64(x337, 0xffffffff00000000)
p384_fiat64.go#L1302: x350, x349 = bits.Mul64(x337, 0xffffffff)
p384_fiat64.go#L1342: x378, x377 = bits.Mul64(x5, arg1[5])
p384_fiat64.go#L1345: x380, x379 = bits.Mul64(x5, arg1[4])
p384_fiat64.go#L1348: x382, x381 = bits.Mul64(x5, arg1[3])
p384_fiat64.go#L1351: x384, x383 = bits.Mul64(x5, arg1[2])
p384_fiat64.go#L1354: x386, x385 = bits.Mul64(x5, arg1[1])
p384_fiat64.go#L1357: x388, x387 = bits.Mul64(x5, arg1[0])
p384_fiat64.go#L1396: _, x414 = bits.Mul64(x400, 0x100000001)
p384_fiat64.go#L1399: x417, x416 = bits.Mul64(x414, 0xffffffffffffffff)
p384_fiat64.go#L1402: x419, x418 = bits.Mul64(x414, 0xffffffffffffffff)
p384_fiat64.go#L1405: x421, x420 = bits.Mul64(x414, 0xffffffffffffffff)
p384_fiat64.go#L1408: x423, x422 = bits.Mul64(x414, 0xfffffffffffffffe)
p384_fiat64.go#L1411: x425, x424 = bits.Mul64(x414, 0xffffffff00000000)
p384_fiat64.go#L1414: x427, x426 = bits.Mul64(x414, 0xffffffff)
p384_fiat64.go#L1647: _, x2 = bits.Mul64(x1, 0x100000001)
p384_fiat64.go#L1650: x5, x4 = bits.Mul64(x2, 0xffffffffffffffff)
p384_fiat64.go#L1653: x7, x6 = bits.Mul64(x2, 0xffffffffffffffff)
p384_fiat64.go#L1656: x9, x8 = bits.Mul64(x2, 0xffffffffffffffff)
p384_fiat64.go#L1659: x11, x10 = bits.Mul64(x2, 0xfffffffffffffffe)
p384_fiat64.go#L1662: x13, x12 = bits.Mul64(x2, 0xffffffff00000000)
p384_fiat64.go#L1665: x15, x14 = bits.Mul64(x2, 0xffffffff)
p384_fiat64.go#L1720: _, x52 = bits.Mul64(x40, 0x100000001)
p384_fiat64.go#L1723: x55, x54 = bits.Mul64(x52, 0xffffffffffffffff)
p384_fiat64.go#L1726: x57, x56 = bits.Mul64(x52, 0xffffffffffffffff)
p384_fiat64.go#L1729: x59, x58 = bits.Mul64(x52, 0xffffffffffffffff)
p384_fiat64.go#L1732: x61, x60 = bits.Mul64(x52, 0xfffffffffffffffe)
p384_fiat64.go#L1735: x63, x62 = bits.Mul64(x52, 0xffffffff00000000)
p384_fiat64.go#L1738: x65, x64 = bits.Mul64(x52, 0xffffffff)
p384_fiat64.go#L1793: _, x102 = bits.Mul64(x90, 0x100000001)
p384_fiat64.go#L1796: x105, x104 = bits.Mul64(x102, 0xffffffffffffffff)
p384_fiat64.go#L1799: x107, x106 = bits.Mul64(x102, 0xffffffffffffffff)
p384_fiat64.go#L1802: x109, x108 = bits.Mul64(x102, 0xffffffffffffffff)
p384_fiat64.go#L1805: x111, x110 = bits.Mul64(x102, 0xfffffffffffffffe)
p384_fiat64.go#L1808: x113, x112 = bits.Mul64(x102, 0xffffffff00000000)
p384_fiat64.go#L1811: x115, x114 = bits.Mul64(x102, 0xffffffff)
p384_fiat64.go#L1866: _, x152 = bits.Mul64(x140, 0x100000001)
p384_fiat64.go#L1869: x155, x154 = bits.Mul64(x152, 0xffffffffffffffff)
p384_fiat64.go#L1872: x157, x156 = bits.Mul64(x152, 0xffffffffffffffff)
p384_fiat64.go#L1875: x159, x158 = bits.Mul64(x152, 0xffffffffffffffff)
p384_fiat64.go#L1878: x161, x160 = bits.Mul64(x152, 0xfffffffffffffffe)
p384_fiat64.go#L1881: x163, x162 = bits.Mul64(x152, 0xffffffff00000000)
p384_fiat64.go#L1884: x165, x164 = bits.Mul64(x152, 0xffffffff)
p384_fiat64.go#L1939: _, x202 = bits.Mul64(x190, 0x100000001)
p384_fiat64.go#L1942: x205, x204 = bits.Mul64(x202, 0xffffffffffffffff)
p384_fiat64.go#L1945: x207, x206 = bits.Mul64(x202, 0xffffffffffffffff)
p384_fiat64.go#L1948: x209, x208 = bits.Mul64(x202, 0xffffffffffffffff)
p384_fiat64.go#L1951: x211, x210 = bits.Mul64(x202, 0xfffffffffffffffe)
p384_fiat64.go#L1954: x213, x212 = bits.Mul64(x202, 0xffffffff00000000)
p384_fiat64.go#L1957: x215, x214 = bits.Mul64(x202, 0xffffffff)
p384_fiat64.go#L2012: _, x252 = bits.Mul64(x240, 0x100000001)
p384_fiat64.go#L2015: x255, x254 = bits.Mul64(x252, 0xffffffffffffffff)
p384_fiat64.go#L2018: x257, x256 = bits.Mul64(x252, 0xffffffffffffffff)
p384_fiat64.go#L2021: x259, x258 = bits.Mul64(x252, 0xffffffffffffffff)
p384_fiat64.go#L2024: x261, x260 = bits.Mul64(x252, 0xfffffffffffffffe)
p384_fiat64.go#L2027: x263, x262 = bits.Mul64(x252, 0xffffffff00000000)
p384_fiat64.go#L2030: x265, x264 = bits.Mul64(x252, 0xffffffff)
p384_fiat64.go#L2125: x8, x7 = bits.Mul64(x6, 0x200000000)
p384_fiat64.go#L2128: x10, x9 = bits.Mul64(x6, 0xfffffffe00000000)
p384_fiat64.go#L2131: x12, x11 = bits.Mul64(x6, 0x200000000)
p384_fiat64.go#L2134: x14, x13 = bits.Mul64(x6, 0xfffffffe00000001)
p384_fiat64.go#L2148: _, x23 = bits.Mul64(x13, 0x100000001)
p384_fiat64.go#L2151: x26, x25 = bits.Mul64(x23, 0xffffffffffffffff)
p384_fiat64.go#L2154: x28, x27 = bits.Mul64(x23, 0xffffffffffffffff)
p384_fiat64.go#L2157: x30, x29 = bits.Mul64(x23, 0xffffffffffffffff)
p384_fiat64.go#L2160: x32, x31 = bits.Mul64(x23, 0xfffffffffffffffe)
p384_fiat64.go#L2163: x34, x33 = bits.Mul64(x23, 0xffffffff00000000)
p384_fiat64.go#L2166: x36, x35 = bits.Mul64(x23, 0xffffffff)
p384_fiat64.go#L2204: x62, x61 = bits.Mul64(x1, 0x200000000)
p384_fiat64.go#L2207: x64, x63 = bits.Mul64(x1, 0xfffffffe00000000)
p384_fiat64.go#L2210: x66, x65 = bits.Mul64(x1, 0x200000000)
p384_fiat64.go#L2213: x68, x67 = bits.Mul64(x1, 0xfffffffe00000001)
p384_fiat64.go#L2245: _, x89 = bits.Mul64(x77, 0x100000001)
p384_fiat64.go#L2248: x92, x91 = bits.Mul64(x89, 0xffffffffffffffff)
p384_fiat64.go#L2251: x94, x93 = bits.Mul64(x89, 0xffffffffffffffff)
p384_fiat64.go#L2254: x96, x95 = bits.Mul64(x89, 0xffffffffffffffff)
p384_fiat64.go#L2257: x98, x97 = bits.Mul64(x89, 0xfffffffffffffffe)
p384_fiat64.go#L2260: x100, x99 = bits.Mul64(x89, 0xffffffff00000000)
p384_fiat64.go#L2263: x102, x101 = bits.Mul64(x89, 0xffffffff)
p384_fiat64.go#L2301: x128, x127 = bits.Mul64(x2, 0x200000000)
p384_fiat64.go#L2304: x130, x129 = bits.Mul64(x2, 0xfffffffe00000000)
p384_fiat64.go#L2307: x132, x131 = bits.Mul64(x2, 0x200000000)
p384_fiat64.go#L2310: x134, x133 = bits.Mul64(x2, 0xfffffffe00000001)
p384_fiat64.go#L2342: _, x155 = bits.Mul64(x143, 0x100000001)
p384_fiat64.go#L2345: x158, x157 = bits.Mul64(x155, 0xffffffffffffffff)
p384_fiat64.go#L2348: x160, x159 = bits.Mul64(x155, 0xffffffffffffffff)
p384_fiat64.go#L2351: x162, x161 = bits.Mul64(x155, 0xffffffffffffffff)
p384_fiat64.go#L2354: x164, x163 = bits.Mul64(x155, 0xfffffffffffffffe)
p384_fiat64.go#L2357: x166, x165 = bits.Mul64(x155, 0xffffffff00000000)
p384_fiat64.go#L2360: x168, x167 = bits.Mul64(x155, 0xffffffff)
p384_fiat64.go#L2398: x194, x193 = bits.Mul64(x3, 0x200000000)
p384_fiat64.go#L2401: x196, x195 = bits.Mul64(x3, 0xfffffffe00000000)
p384_fiat64.go#L2404: x198, x197 = bits.Mul64(x3, 0x200000000)
p384_fiat64.go#L2407: x200, x199 = bits.Mul64(x3, 0xfffffffe00000001)
p384_fiat64.go#L2439: _, x221 = bits.Mul64(x209, 0x100000001)
p384_fiat64.go#L2442: x224, x223 = bits.Mul64(x221, 0xffffffffffffffff)
p384_fiat64.go#L2445: x226, x225 = bits.Mul64(x221, 0xffffffffffffffff)
p384_fiat64.go#L2448: x228, x227 = bits.Mul64(x221, 0xffffffffffffffff)
p384_fiat64.go#L2451: x230, x229 = bits.Mul64(x221, 0xfffffffffffffffe)
p384_fiat64.go#L2454: x232, x231 = bits.Mul64(x221, 0xffffffff00000000)
p384_fiat64.go#L2457: x234, x233 = bits.Mul64(x221, 0xffffffff)
p384_fiat64.go#L2495: x260, x259 = bits.Mul64(x4, 0x200000000)
p384_fiat64.go#L2498: x262, x261 = bits.Mul64(x4, 0xfffffffe00000000)
p384_fiat64.go#L2501: x264, x263 = bits.Mul64(x4, 0x200000000)
p384_fiat64.go#L2504: x266, x265 = bits.Mul64(x4, 0xfffffffe00000001)
p384_fiat64.go#L2536: _, x287 = bits.Mul64(x275, 0x100000001)
p384_fiat64.go#L2539: x290, x289 = bits.Mul64(x287, 0xffffffffffffffff)
p384_fiat64.go#L2542: x292, x291 = bits.Mul64(x287, 0xffffffffffffffff)
p384_fiat64.go#L2545: x294, x293 = bits.Mul64(x287, 0xffffffffffffffff)
p384_fiat64.go#L2548: x296, x295 = bits.Mul64(x287, 0xfffffffffffffffe)
p384_fiat64.go#L2551: x298, x297 = bits.Mul64(x287, 0xffffffff00000000)
p384_fiat64.go#L2554: x300, x299 = bits.Mul64(x287, 0xffffffff)
p384_fiat64.go#L2592: x326, x325 = bits.Mul64(x5, 0x200000000)
p384_fiat64.go#L2595: x328, x327 = bits.Mul64(x5, 0xfffffffe00000000)
p384_fiat64.go#L2598: x330, x329 = bits.Mul64(x5, 0x200000000)
p384_fiat64.go#L2601: x332, x331 = bits.Mul64(x5, 0xfffffffe00000001)
p384_fiat64.go#L2633: _, x353 = bits.Mul64(x341, 0x100000001)
p384_fiat64.go#L2636: x356, x355 = bits.Mul64(x353, 0xffffffffffffffff)
p384_fiat64.go#L2639: x358, x357 = bits.Mul64(x353, 0xffffffffffffffff)
p384_fiat64.go#L2642: x360, x359 = bits.Mul64(x353, 0xffffffffffffffff)
p384_fiat64.go#L2645: x362, x361 = bits.Mul64(x353, 0xfffffffffffffffe)
p384_fiat64.go#L2648: x364, x363 = bits.Mul64(x353, 0xffffffff00000000)
p384_fiat64.go#L2651: x366, x365 = bits.Mul64(x353, 0xffffffff)
p521_fiat64.go#L100: x11, x10 = bits.Mul64(x9, arg2[8])
p521_fiat64.go#L103: x13, x12 = bits.Mul64(x9, arg2[7])
p521_fiat64.go#L106: x15, x14 = bits.Mul64(x9, arg2[6])
p521_fiat64.go#L109: x17, x16 = bits.Mul64(x9, arg2[5])
p521_fiat64.go#L112: x19, x18 = bits.Mul64(x9, arg2[4])
p521_fiat64.go#L115: x21, x20 = bits.Mul64(x9, arg2[3])
p521_fiat64.go#L118: x23, x22 = bits.Mul64(x9, arg2[2])
p521_fiat64.go#L121: x25, x24 = bits.Mul64(x9, arg2[1])
p521_fiat64.go#L124: x27, x26 = bits.Mul64(x9, arg2[0])
p521_fiat64.go#L152: x46, x45 = bits.Mul64(x26, 0x1ff)
p521_fiat64.go#L155: x48, x47 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L158: x50, x49 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L161: x52, x51 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L164: x54, x53 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L167: x56, x55 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L170: x58, x57 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L173: x60, x59 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L176: x62, x61 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L233: x101, x100 = bits.Mul64(x1, arg2[8])
p521_fiat64.go#L236: x103, x102 = bits.Mul64(x1, arg2[7])
p521_fiat64.go#L239: x105, x104 = bits.Mul64(x1, arg2[6])
p521_fiat64.go#L242: x107, x106 = bits.Mul64(x1, arg2[5])
p521_fiat64.go#L245: x109, x108 = bits.Mul64(x1, arg2[4])
p521_fiat64.go#L248: x111, x110 = bits.Mul64(x1, arg2[3])
p521_fiat64.go#L251: x113, x112 = bits.Mul64(x1, arg2[2])
p521_fiat64.go#L254: x115, x114 = bits.Mul64(x1, arg2[1])
p521_fiat64.go#L257: x117, x116 = bits.Mul64(x1, arg2[0])
p521_fiat64.go#L315: x156, x155 = bits.Mul64(x135, 0x1ff)
p521_fiat64.go#L318: x158, x157 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L321: x160, x159 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L324: x162, x161 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L327: x164, x163 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L330: x166, x165 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L333: x168, x167 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L336: x170, x169 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L339: x172, x171 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L397: x212, x211 = bits.Mul64(x2, arg2[8])
p521_fiat64.go#L400: x214, x213 = bits.Mul64(x2, arg2[7])
p521_fiat64.go#L403: x216, x215 = bits.Mul64(x2, arg2[6])
p521_fiat64.go#L406: x218, x217 = bits.Mul64(x2, arg2[5])
p521_fiat64.go#L409: x220, x219 = bits.Mul64(x2, arg2[4])
p521_fiat64.go#L412: x222, x221 = bits.Mul64(x2, arg2[3])
p521_fiat64.go#L415: x224, x223 = bits.Mul64(x2, arg2[2])
p521_fiat64.go#L418: x226, x225 = bits.Mul64(x2, arg2[1])
p521_fiat64.go#L421: x228, x227 = bits.Mul64(x2, arg2[0])
p521_fiat64.go#L479: x267, x266 = bits.Mul64(x246, 0x1ff)
p521_fiat64.go#L482: x269, x268 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L485: x271, x270 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L488: x273, x272 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L491: x275, x274 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L494: x277, x276 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L497: x279, x278 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L500: x281, x280 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L503: x283, x282 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L561: x323, x322 = bits.Mul64(x3, arg2[8])
p521_fiat64.go#L564: x325, x324 = bits.Mul64(x3, arg2[7])
p521_fiat64.go#L567: x327, x326 = bits.Mul64(x3, arg2[6])
p521_fiat64.go#L570: x329, x328 = bits.Mul64(x3, arg2[5])
p521_fiat64.go#L573: x331, x330 = bits.Mul64(x3, arg2[4])
p521_fiat64.go#L576: x333, x332 = bits.Mul64(x3, arg2[3])
p521_fiat64.go#L579: x335, x334 = bits.Mul64(x3, arg2[2])
p521_fiat64.go#L582: x337, x336 = bits.Mul64(x3, arg2[1])
p521_fiat64.go#L585: x339, x338 = bits.Mul64(x3, arg2[0])
p521_fiat64.go#L643: x378, x377 = bits.Mul64(x357, 0x1ff)
p521_fiat64.go#L646: x380, x379 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L649: x382, x381 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L652: x384, x383 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L655: x386, x385 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L658: x388, x387 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L661: x390, x389 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L664: x392, x391 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L667: x394, x393 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L725: x434, x433 = bits.Mul64(x4, arg2[8])
p521_fiat64.go#L728: x436, x435 = bits.Mul64(x4, arg2[7])
p521_fiat64.go#L731: x438, x437 = bits.Mul64(x4, arg2[6])
p521_fiat64.go#L734: x440, x439 = bits.Mul64(x4, arg2[5])
p521_fiat64.go#L737: x442, x441 = bits.Mul64(x4, arg2[4])
p521_fiat64.go#L740: x444, x443 = bits.Mul64(x4, arg2[3])
p521_fiat64.go#L743: x446, x445 = bits.Mul64(x4, arg2[2])
p521_fiat64.go#L746: x448, x447 = bits.Mul64(x4, arg2[1])
p521_fiat64.go#L749: x450, x449 = bits.Mul64(x4, arg2[0])
p521_fiat64.go#L807: x489, x488 = bits.Mul64(x468, 0x1ff)
p521_fiat64.go#L810: x491, x490 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L813: x493, x492 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L816: x495, x494 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L819: x497, x496 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L822: x499, x498 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L825: x501, x500 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L828: x503, x502 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L831: x505, x504 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L889: x545, x544 = bits.Mul64(x5, arg2[8])
p521_fiat64.go#L892: x547, x546 = bits.Mul64(x5, arg2[7])
p521_fiat64.go#L895: x549, x548 = bits.Mul64(x5, arg2[6])
p521_fiat64.go#L898: x551, x550 = bits.Mul64(x5, arg2[5])
p521_fiat64.go#L901: x553, x552 = bits.Mul64(x5, arg2[4])
p521_fiat64.go#L904: x555, x554 = bits.Mul64(x5, arg2[3])
p521_fiat64.go#L907: x557, x556 = bits.Mul64(x5, arg2[2])
p521_fiat64.go#L910: x559, x558 = bits.Mul64(x5, arg2[1])
p521_fiat64.go#L913: x561, x560 = bits.Mul64(x5, arg2[0])
p521_fiat64.go#L971: x600, x599 = bits.Mul64(x579, 0x1ff)
p521_fiat64.go#L974: x602, x601 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L977: x604, x603 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L980: x606, x605 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L983: x608, x607 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L986: x610, x609 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L989: x612, x611 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L992: x614, x613 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L995: x616, x615 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L1053: x656, x655 = bits.Mul64(x6, arg2[8])
p521_fiat64.go#L1056: x658, x657 = bits.Mul64(x6, arg2[7])
p521_fiat64.go#L1059: x660, x659 = bits.Mul64(x6, arg2[6])
p521_fiat64.go#L1062: x662, x661 = bits.Mul64(x6, arg2[5])
p521_fiat64.go#L1065: x664, x663 = bits.Mul64(x6, arg2[4])
p521_fiat64.go#L1068: x666, x665 = bits.Mul64(x6, arg2[3])
p521_fiat64.go#L1071: x668, x667 = bits.Mul64(x6, arg2[2])
p521_fiat64.go#L1074: x670, x669 = bits.Mul64(x6, arg2[1])
p521_fiat64.go#L1077: x672, x671 = bits.Mul64(x6, arg2[0])
p521_fiat64.go#L1135: x711, x710 = bits.Mul64(x690, 0x1ff)
p521_fiat64.go#L1138: x713, x712 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1141: x715, x714 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1144: x717, x716 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1147: x719, x718 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1150: x721, x720 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1153: x723, x722 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1156: x725, x724 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1159: x727, x726 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1217: x767, x766 = bits.Mul64(x7, arg2[8])
p521_fiat64.go#L1220: x769, x768 = bits.Mul64(x7, arg2[7])
p521_fiat64.go#L1223: x771, x770 = bits.Mul64(x7, arg2[6])
p521_fiat64.go#L1226: x773, x772 = bits.Mul64(x7, arg2[5])
p521_fiat64.go#L1229: x775, x774 = bits.Mul64(x7, arg2[4])
p521_fiat64.go#L1232: x777, x776 = bits.Mul64(x7, arg2[3])
p521_fiat64.go#L1235: x779, x778 = bits.Mul64(x7, arg2[2])
p521_fiat64.go#L1238: x781, x780 = bits.Mul64(x7, arg2[1])
p521_fiat64.go#L1241: x783, x782 = bits.Mul64(x7, arg2[0])
p521_fiat64.go#L1299: x822, x821 = bits.Mul64(x801, 0x1ff)
p521_fiat64.go#L1302: x824, x823 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1305: x826, x825 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1308: x828, x827 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1311: x830, x829 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1314: x832, x831 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1317: x834, x833 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1320: x836, x835 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1323: x838, x837 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1381: x878, x877 = bits.Mul64(x8, arg2[8])
p521_fiat64.go#L1384: x880, x879 = bits.Mul64(x8, arg2[7])
p521_fiat64.go#L1387: x882, x881 = bits.Mul64(x8, arg2[6])
p521_fiat64.go#L1390: x884, x883 = bits.Mul64(x8, arg2[5])
p521_fiat64.go#L1393: x886, x885 = bits.Mul64(x8, arg2[4])
p521_fiat64.go#L1396: x888, x887 = bits.Mul64(x8, arg2[3])
p521_fiat64.go#L1399: x890, x889 = bits.Mul64(x8, arg2[2])
p521_fiat64.go#L1402: x892, x891 = bits.Mul64(x8, arg2[1])
p521_fiat64.go#L1405: x894, x893 = bits.Mul64(x8, arg2[0])
p521_fiat64.go#L1463: x933, x932 = bits.Mul64(x912, 0x1ff)
p521_fiat64.go#L1466: x935, x934 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1469: x937, x936 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1472: x939, x938 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1475: x941, x940 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1478: x943, x942 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1481: x945, x944 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1484: x947, x946 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1487: x949, x948 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1623: x11, x10 = bits.Mul64(x9, arg1[8])
p521_fiat64.go#L1626: x13, x12 = bits.Mul64(x9, arg1[7])
p521_fiat64.go#L1629: x15, x14 = bits.Mul64(x9, arg1[6])
p521_fiat64.go#L1632: x17, x16 = bits.Mul64(x9, arg1[5])
p521_fiat64.go#L1635: x19, x18 = bits.Mul64(x9, arg1[4])
p521_fiat64.go#L1638: x21, x20 = bits.Mul64(x9, arg1[3])
p521_fiat64.go#L1641: x23, x22 = bits.Mul64(x9, arg1[2])
p521_fiat64.go#L1644: x25, x24 = bits.Mul64(x9, arg1[1])
p521_fiat64.go#L1647: x27, x26 = bits.Mul64(x9, arg1[0])
p521_fiat64.go#L1675: x46, x45 = bits.Mul64(x26, 0x1ff)
p521_fiat64.go#L1678: x48, x47 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1681: x50, x49 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1684: x52, x51 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1687: x54, x53 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1690: x56, x55 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1693: x58, x57 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1696: x60, x59 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1699: x62, x61 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1756: x101, x100 = bits.Mul64(x1, arg1[8])
p521_fiat64.go#L1759: x103, x102 = bits.Mul64(x1, arg1[7])
p521_fiat64.go#L1762: x105, x104 = bits.Mul64(x1, arg1[6])
p521_fiat64.go#L1765: x107, x106 = bits.Mul64(x1, arg1[5])
p521_fiat64.go#L1768: x109, x108 = bits.Mul64(x1, arg1[4])
p521_fiat64.go#L1771: x111, x110 = bits.Mul64(x1, arg1[3])
p521_fiat64.go#L1774: x113, x112 = bits.Mul64(x1, arg1[2])
p521_fiat64.go#L1777: x115, x114 = bits.Mul64(x1, arg1[1])
p521_fiat64.go#L1780: x117, x116 = bits.Mul64(x1, arg1[0])
p521_fiat64.go#L1838: x156, x155 = bits.Mul64(x135, 0x1ff)
p521_fiat64.go#L1841: x158, x157 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1844: x160, x159 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1847: x162, x161 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1850: x164, x163 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1853: x166, x165 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1856: x168, x167 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1859: x170, x169 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1862: x172, x171 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1920: x212, x211 = bits.Mul64(x2, arg1[8])
p521_fiat64.go#L1923: x214, x213 = bits.Mul64(x2, arg1[7])
p521_fiat64.go#L1926: x216, x215 = bits.Mul64(x2, arg1[6])
p521_fiat64.go#L1929: x218, x217 = bits.Mul64(x2, arg1[5])
p521_fiat64.go#L1932: x220, x219 = bits.Mul64(x2, arg1[4])
p521_fiat64.go#L1935: x222, x221 = bits.Mul64(x2, arg1[3])
p521_fiat64.go#L1938: x224, x223 = bits.Mul64(x2, arg1[2])
p521_fiat64.go#L1941: x226, x225 = bits.Mul64(x2, arg1[1])
p521_fiat64.go#L1944: x228, x227 = bits.Mul64(x2, arg1[0])
p521_fiat64.go#L2002: x267, x266 = bits.Mul64(x246, 0x1ff)
p521_fiat64.go#L2005: x269, x268 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2008: x271, x270 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2011: x273, x272 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2014: x275, x274 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2017: x277, x276 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2020: x279, x278 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2023: x281, x280 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2026: x283, x282 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2084: x323, x322 = bits.Mul64(x3, arg1[8])
p521_fiat64.go#L2087: x325, x324 = bits.Mul64(x3, arg1[7])
p521_fiat64.go#L2090: x327, x326 = bits.Mul64(x3, arg1[6])
p521_fiat64.go#L2093: x329, x328 = bits.Mul64(x3, arg1[5])
p521_fiat64.go#L2096: x331, x330 = bits.Mul64(x3, arg1[4])
p521_fiat64.go#L2099: x333, x332 = bits.Mul64(x3, arg1[3])
p521_fiat64.go#L2102: x335, x334 = bits.Mul64(x3, arg1[2])
p521_fiat64.go#L2105: x337, x336 = bits.Mul64(x3, arg1[1])
p521_fiat64.go#L2108: x339, x338 = bits.Mul64(x3, arg1[0])
p521_fiat64.go#L2166: x378, x377 = bits.Mul64(x357, 0x1ff)
p521_fiat64.go#L2169: x380, x379 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2172: x382, x381 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2175: x384, x383 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2178: x386, x385 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2181: x388, x387 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2184: x390, x389 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2187: x392, x391 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2190: x394, x393 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2248: x434, x433 = bits.Mul64(x4, arg1[8])
p521_fiat64.go#L2251: x436, x435 = bits.Mul64(x4, arg1[7])
p521_fiat64.go#L2254: x438, x437 = bits.Mul64(x4, arg1[6])
p521_fiat64.go#L2257: x440, x439 = bits.Mul64(x4, arg1[5])
p521_fiat64.go#L2260: x442, x441 = bits.Mul64(x4, arg1[4])
p521_fiat64.go#L2263: x444, x443 = bits.Mul64(x4, arg1[3])
p521_fiat64.go#L2266: x446, x445 = bits.Mul64(x4, arg1[2])
p521_fiat64.go#L2269: x448, x447 = bits.Mul64(x4, arg1[1])
p521_fiat64.go#L2272: x450, x449 = bits.Mul64(x4, arg1[0])
p521_fiat64.go#L2330: x489, x488 = bits.Mul64(x468, 0x1ff)
p521_fiat64.go#L2333: x491, x490 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2336: x493, x492 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2339: x495, x494 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2342: x497, x496 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2345: x499, x498 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2348: x501, x500 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2351: x503, x502 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2354: x505, x504 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2412: x545, x544 = bits.Mul64(x5, arg1[8])
p521_fiat64.go#L2415: x547, x546 = bits.Mul64(x5, arg1[7])
p521_fiat64.go#L2418: x549, x548 = bits.Mul64(x5, arg1[6])
p521_fiat64.go#L2421: x551, x550 = bits.Mul64(x5, arg1[5])
p521_fiat64.go#L2424: x553, x552 = bits.Mul64(x5, arg1[4])
p521_fiat64.go#L2427: x555, x554 = bits.Mul64(x5, arg1[3])
p521_fiat64.go#L2430: x557, x556 = bits.Mul64(x5, arg1[2])
p521_fiat64.go#L2433: x559, x558 = bits.Mul64(x5, arg1[1])
p521_fiat64.go#L2436: x561, x560 = bits.Mul64(x5, arg1[0])
p521_fiat64.go#L2494: x600, x599 = bits.Mul64(x579, 0x1ff)
p521_fiat64.go#L2497: x602, x601 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2500: x604, x603 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2503: x606, x605 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2506: x608, x607 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2509: x610, x609 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2512: x612, x611 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2515: x614, x613 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2518: x616, x615 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2576: x656, x655 = bits.Mul64(x6, arg1[8])
p521_fiat64.go#L2579: x658, x657 = bits.Mul64(x6, arg1[7])
p521_fiat64.go#L2582: x660, x659 = bits.Mul64(x6, arg1[6])
p521_fiat64.go#L2585: x662, x661 = bits.Mul64(x6, arg1[5])
p521_fiat64.go#L2588: x664, x663 = bits.Mul64(x6, arg1[4])
p521_fiat64.go#L2591: x666, x665 = bits.Mul64(x6, arg1[3])
p521_fiat64.go#L2594: x668, x667 = bits.Mul64(x6, arg1[2])
p521_fiat64.go#L2597: x670, x669 = bits.Mul64(x6, arg1[1])
p521_fiat64.go#L2600: x672, x671 = bits.Mul64(x6, arg1[0])
p521_fiat64.go#L2658: x711, x710 = bits.Mul64(x690, 0x1ff)
p521_fiat64.go#L2661: x713, x712 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2664: x715, x714 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2667: x717, x716 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2670: x719, x718 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2673: x721, x720 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2676: x723, x722 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2679: x725, x724 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2682: x727, x726 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2740: x767, x766 = bits.Mul64(x7, arg1[8])
p521_fiat64.go#L2743: x769, x768 = bits.Mul64(x7, arg1[7])
p521_fiat64.go#L2746: x771, x770 = bits.Mul64(x7, arg1[6])
p521_fiat64.go#L2749: x773, x772 = bits.Mul64(x7, arg1[5])
p521_fiat64.go#L2752: x775, x774 = bits.Mul64(x7, arg1[4])
p521_fiat64.go#L2755: x777, x776 = bits.Mul64(x7, arg1[3])
p521_fiat64.go#L2758: x779, x778 = bits.Mul64(x7, arg1[2])
p521_fiat64.go#L2761: x781, x780 = bits.Mul64(x7, arg1[1])
p521_fiat64.go#L2764: x783, x782 = bits.Mul64(x7, arg1[0])
p521_fiat64.go#L2822: x822, x821 = bits.Mul64(x801, 0x1ff)
p521_fiat64.go#L2825: x824, x823 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2828: x826, x825 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2831: x828, x827 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2834: x830, x829 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2837: x832, x831 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2840: x834, x833 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2843: x836, x835 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2846: x838, x837 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2904: x878, x877 = bits.Mul64(x8, arg1[8])
p521_fiat64.go#L2907: x880, x879 = bits.Mul64(x8, arg1[7])
p521_fiat64.go#L2910: x882, x881 = bits.Mul64(x8, arg1[6])
p521_fiat64.go#L2913: x884, x883 = bits.Mul64(x8, arg1[5])
p521_fiat64.go#L2916: x886, x885 = bits.Mul64(x8, arg1[4])
p521_fiat64.go#L2919: x888, x887 = bits.Mul64(x8, arg1[3])
p521_fiat64.go#L2922: x890, x889 = bits.Mul64(x8, arg1[2])
p521_fiat64.go#L2925: x892, x891 = bits.Mul64(x8, arg1[1])
p521_fiat64.go#L2928: x894, x893 = bits.Mul64(x8, arg1[0])
p521_fiat64.go#L2986: x933, x932 = bits.Mul64(x912, 0x1ff)
p521_fiat64.go#L2989: x935, x934 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L2992: x937, x936 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L2995: x939, x938 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L2998: x941, x940 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L3001: x943, x942 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L3004: x945, x944 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L3007: x947, x946 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L3010: x949, x948 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L3331: x3, x2 = bits.Mul64(x1, 0x1ff)
p521_fiat64.go#L3334: x5, x4 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3337: x7, x6 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3340: x9, x8 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3343: x11, x10 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3346: x13, x12 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3349: x15, x14 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3352: x17, x16 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3355: x19, x18 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3432: x71, x70 = bits.Mul64(x54, 0x1ff)
p521_fiat64.go#L3435: x73, x72 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3438: x75, x74 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3441: x77, x76 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3444: x79, x78 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3447: x81, x80 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3450: x83, x82 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3453: x85, x84 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3456: x87, x86 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3533: x139, x138 = bits.Mul64(x122, 0x1ff)
p521_fiat64.go#L3536: x141, x140 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3539: x143, x142 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3542: x145, x144 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3545: x147, x146 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3548: x149, x148 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3551: x151, x150 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3554: x153, x152 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3557: x155, x154 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3634: x207, x206 = bits.Mul64(x190, 0x1ff)
p521_fiat64.go#L3637: x209, x208 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3640: x211, x210 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3643: x213, x212 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3646: x215, x214 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3649: x217, x216 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3652: x219, x218 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3655: x221, x220 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3658: x223, x222 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3735: x275, x274 = bits.Mul64(x258, 0x1ff)
p521_fiat64.go#L3738: x277, x276 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3741: x279, x278 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3744: x281, x280 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3747: x283, x282 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3750: x285, x284 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3753: x287, x286 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3756: x289, x288 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3759: x291, x290 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3836: x343, x342 = bits.Mul64(x326, 0x1ff)
p521_fiat64.go#L3839: x345, x344 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3842: x347, x346 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3845: x349, x348 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3848: x351, x350 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3851: x353, x352 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3854: x355, x354 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3857: x357, x356 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3860: x359, x358 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3937: x411, x410 = bits.Mul64(x394, 0x1ff)
p521_fiat64.go#L3940: x413, x412 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L3943: x415, x414 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L3946: x417, x416 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L3949: x419, x418 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L3952: x421, x420 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L3955: x423, x422 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L3958: x425, x424 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L3961: x427, x426 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L4038: x479, x478 = bits.Mul64(x462, 0x1ff)
p521_fiat64.go#L4041: x481, x480 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4044: x483, x482 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4047: x485, x484 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4050: x487, x486 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4053: x489, x488 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4056: x491, x490 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4059: x493, x492 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4062: x495, x494 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4139: x547, x546 = bits.Mul64(x530, 0x1ff)
p521_fiat64.go#L4142: x549, x548 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4145: x551, x550 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4148: x553, x552 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4151: x555, x554 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4154: x557, x556 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4157: x559, x558 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4160: x561, x560 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4163: x563, x562 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4286: x2, x1 = bits.Mul64(arg1[0], 0x400000000000)
p521_fiat64.go#L4289: x4, x3 = bits.Mul64(arg1[1], 0x400000000000)
p521_fiat64.go#L4295: x8, x7 = bits.Mul64(x1, 0x1ff)
p521_fiat64.go#L4298: x10, x9 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4301: x12, x11 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4304: x14, x13 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4307: x16, x15 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4310: x18, x17 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4313: x20, x19 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4316: x22, x21 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4319: x24, x23 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4372: x60, x59 = bits.Mul64(arg1[2], 0x400000000000)
p521_fiat64.go#L4396: x76, x75 = bits.Mul64(x43, 0x1ff)
p521_fiat64.go#L4399: x78, x77 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4402: x80, x79 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4405: x82, x81 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4408: x84, x83 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4411: x86, x85 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4414: x88, x87 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4417: x90, x89 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4420: x92, x91 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4473: x128, x127 = bits.Mul64(arg1[3], 0x400000000000)
p521_fiat64.go#L4497: x144, x143 = bits.Mul64(x111, 0x1ff)
p521_fiat64.go#L4500: x146, x145 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4503: x148, x147 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4506: x150, x149 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4509: x152, x151 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4512: x154, x153 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4515: x156, x155 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4518: x158, x157 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4521: x160, x159 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4574: x196, x195 = bits.Mul64(arg1[4], 0x400000000000)
p521_fiat64.go#L4598: x212, x211 = bits.Mul64(x179, 0x1ff)
p521_fiat64.go#L4601: x214, x213 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4604: x216, x215 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4607: x218, x217 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4610: x220, x219 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4613: x222, x221 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4616: x224, x223 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4619: x226, x225 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4622: x228, x227 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4675: x264, x263 = bits.Mul64(arg1[5], 0x400000000000)
p521_fiat64.go#L4699: x280, x279 = bits.Mul64(x247, 0x1ff)
p521_fiat64.go#L4702: x282, x281 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4705: x284, x283 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4708: x286, x285 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4711: x288, x287 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4714: x290, x289 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4717: x292, x291 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4720: x294, x293 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4723: x296, x295 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4776: x332, x331 = bits.Mul64(arg1[6], 0x400000000000)
p521_fiat64.go#L4800: x348, x347 = bits.Mul64(x315, 0x1ff)
p521_fiat64.go#L4803: x350, x349 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4806: x352, x351 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4809: x354, x353 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4812: x356, x355 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4815: x358, x357 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4818: x360, x359 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4821: x362, x361 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4824: x364, x363 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4877: x400, x399 = bits.Mul64(arg1[7], 0x400000000000)
p521_fiat64.go#L4901: x416, x415 = bits.Mul64(x383, 0x1ff)
p521_fiat64.go#L4904: x418, x417 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4907: x420, x419 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4910: x422, x421 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4913: x424, x423 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4916: x426, x425 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4919: x428, x427 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4922: x430, x429 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4925: x432, x431 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4978: x468, x467 = bits.Mul64(arg1[8], 0x400000000000)
p521_fiat64.go#L5002: x484, x483 = bits.Mul64(x451, 0x1ff)
p521_fiat64.go#L5005: x486, x485 = bits.Mul64(x451, 0xffffffffffffffff)
p521_fiat64.go#L5008: x488, x487 = bits.Mul64(x451, 0xffffffffffffffff)
p521_fiat64.go#L5011: x490, x489 = bits.Mul64(x451, 0xffffffffffffffff)
p521_fiat64.go#L5014: x492, x491 = bits.Mul64(x451, 0xffffffffffffffff)
p521_fiat64.go#L5017: x494, x493 = bits.Mul64(x451, 0xffffffffffffffff)
p521_fiat64.go#L5020: x496, x495 = bits.Mul64(x451, 0xffffffffffffffff)
p521_fiat64.go#L5023: x498, x497 = bits.Mul64(x451, 0xffffffffffffffff)
p521_fiat64.go#L5026: x500, x499 = bits.Mul64(x451, 0xffffffffffffffff)
image
geom.go#L291: hi, lo := bits.Mul64(uint64(x), uint64(y))
geom.go#L295: hi, lo = bits.Mul64(lo, uint64(z))
strconv
eisel_lemire.go#L47: xHi, xLo := bits.Mul64(man, detailedPowersOfTen[exp10-detailedPowersOfTenMinExp10][1])
eisel_lemire.go#L51: yHi, yLo := bits.Mul64(man, detailedPowersOfTen[exp10-detailedPowersOfTenMinExp10][0])
eisel_lemire.go#L122: xHi, xLo := bits.Mul64(man, detailedPowersOfTen[exp10-detailedPowersOfTenMinExp10][1])
eisel_lemire.go#L126: yHi, yLo := bits.Mul64(man, detailedPowersOfTen[exp10-detailedPowersOfTenMinExp10][0])
ftoaryu.go#L507: hi, lo := bits.Mul64(uint64(m), pow)
ftoaryu.go#L539: l1, l0 := bits.Mul64(m, pow[0])
ftoaryu.go#L540: h1, h0 := bits.Mul64(m, pow[1])
ftoaryu.go#L566: hi, _ := bits.Mul64(x>>1, 0x89705f4136b4a598) // binary digits of 1e-9
vendor/golang.org/x/crypto/internal/poly1305
bits_go1.13.go#L21: return bits.Mul64(x, y)
 |
The pages are generated with Golds v0.6.7. (GOOS=linux GOARCH=amd64)
Golds is a Go 101 project developed by Tapir Liu.
PR and bug reports are welcome and can be submitted to the issue list.
Please follow @Go100and1 (reachable from the left QR code) to get the latest news of Golds. |