func math/bits.Sub64

205 uses

	math/bits (current package)
		bits.go#L407: 	d64, b64 := Sub64(uint64(x), uint64(y), uint64(borrow))
		bits.go#L431: func Sub64(x, y, borrow uint64) (diff, borrowOut uint64) {

	math
		fma.go#L154: 		pm2, c = bits.Sub64(pm2, zm2, 0)
		fma.go#L155: 		pm1, _ = bits.Sub64(pm1, zm1, c)

	crypto/ecdh
		nist.go#L160: 		_, borrow = bits.Sub64(limbA, limbB, borrow)

	crypto/internal/edwards25519
		scalar_fiat.go#L347: 	x182, x183 = bits.Sub64(x173, 0x5812631a5cf5d3ed, uint64(0x0))
		scalar_fiat.go#L350: 	x184, x185 = bits.Sub64(x175, 0x14def9dea2f79cd6, uint64(fiatScalarUint1(x183)))
		scalar_fiat.go#L353: 	x186, x187 = bits.Sub64(x177, uint64(0x0), uint64(fiatScalarUint1(x185)))
		scalar_fiat.go#L356: 	x188, x189 = bits.Sub64(x179, 0x1000000000000000, uint64(fiatScalarUint1(x187)))
		scalar_fiat.go#L358: 	_, x191 = bits.Sub64(x181, uint64(0x0), uint64(fiatScalarUint1(x189)))
		scalar_fiat.go#L399: 	x9, x10 = bits.Sub64(x1, 0x5812631a5cf5d3ed, uint64(0x0))
		scalar_fiat.go#L402: 	x11, x12 = bits.Sub64(x3, 0x14def9dea2f79cd6, uint64(fiatScalarUint1(x10)))
		scalar_fiat.go#L405: 	x13, x14 = bits.Sub64(x5, uint64(0x0), uint64(fiatScalarUint1(x12)))
		scalar_fiat.go#L408: 	x15, x16 = bits.Sub64(x7, 0x1000000000000000, uint64(fiatScalarUint1(x14)))
		scalar_fiat.go#L410: 	_, x18 = bits.Sub64(uint64(fiatScalarUint1(x8)), uint64(0x0), uint64(fiatScalarUint1(x16)))
		scalar_fiat.go#L439: 	x1, x2 = bits.Sub64(arg1[0], arg2[0], uint64(0x0))
		scalar_fiat.go#L442: 	x3, x4 = bits.Sub64(arg1[1], arg2[1], uint64(fiatScalarUint1(x2)))
		scalar_fiat.go#L445: 	x5, x6 = bits.Sub64(arg1[2], arg2[2], uint64(fiatScalarUint1(x4)))
		scalar_fiat.go#L448: 	x7, x8 = bits.Sub64(arg1[3], arg2[3], uint64(fiatScalarUint1(x6)))
		scalar_fiat.go#L481: 	x1, x2 = bits.Sub64(uint64(0x0), arg1[0], uint64(0x0))
		scalar_fiat.go#L484: 	x3, x4 = bits.Sub64(uint64(0x0), arg1[1], uint64(fiatScalarUint1(x2)))
		scalar_fiat.go#L487: 	x5, x6 = bits.Sub64(uint64(0x0), arg1[2], uint64(fiatScalarUint1(x4)))
		scalar_fiat.go#L490: 	x7, x8 = bits.Sub64(uint64(0x0), arg1[3], uint64(fiatScalarUint1(x6)))
		scalar_fiat.go#L662: 	x85, x86 = bits.Sub64(x78, 0x5812631a5cf5d3ed, uint64(0x0))
		scalar_fiat.go#L665: 	x87, x88 = bits.Sub64(x80, 0x14def9dea2f79cd6, uint64(fiatScalarUint1(x86)))
		scalar_fiat.go#L668: 	x89, x90 = bits.Sub64(x82, uint64(0x0), uint64(fiatScalarUint1(x88)))
		scalar_fiat.go#L671: 	x91, x92 = bits.Sub64(x84, 0x1000000000000000, uint64(fiatScalarUint1(x90)))
		scalar_fiat.go#L673: 	_, x94 = bits.Sub64(uint64(0x0), uint64(0x0), uint64(fiatScalarUint1(x92)))
		scalar_fiat.go#L926: 	x158, x159 = bits.Sub64(x151, 0x5812631a5cf5d3ed, uint64(0x0))
		scalar_fiat.go#L929: 	x160, x161 = bits.Sub64(x153, 0x14def9dea2f79cd6, uint64(fiatScalarUint1(x159)))
		scalar_fiat.go#L932: 	x162, x163 = bits.Sub64(x155, uint64(0x0), uint64(fiatScalarUint1(x161)))
		scalar_fiat.go#L935: 	x164, x165 = bits.Sub64(x157, 0x1000000000000000, uint64(fiatScalarUint1(x163)))
		scalar_fiat.go#L937: 	_, x167 = bits.Sub64(uint64(0x0), uint64(0x0), uint64(fiatScalarUint1(x165)))

	crypto/internal/nistec
		p256_asm.go#L174: 	_, b = bits.Sub64(x[0], p256P[0], b)
		p256_asm.go#L175: 	_, b = bits.Sub64(x[1], p256P[1], b)
		p256_asm.go#L176: 	_, b = bits.Sub64(x[2], p256P[2], b)
		p256_asm.go#L177: 	_, b = bits.Sub64(x[3], p256P[3], b)
		p256_asm.go#L190: 	t2[0], b = bits.Sub64(t1[0], p256P[0], 0)
		p256_asm.go#L191: 	t2[1], b = bits.Sub64(t1[1], p256P[1], b)
		p256_asm.go#L192: 	t2[2], b = bits.Sub64(t1[2], p256P[2], b)
		p256_asm.go#L193: 	t2[3], b = bits.Sub64(t1[3], p256P[3], b)
		p256_asm.go#L371: 	t0, b := bits.Sub64(s[0], 0xf3b9cac2fc632551, 0)
		p256_asm.go#L372: 	t1, b := bits.Sub64(s[1], 0xbce6faada7179e84, b)
		p256_asm.go#L373: 	t2, b := bits.Sub64(s[2], 0xffffffffffffffff, b)
		p256_asm.go#L374: 	t3, b := bits.Sub64(s[3], 0xffffffff00000000, b)

	crypto/internal/nistec/fiat
		p224_fiat64.go#L359: 	x190, x191 = bits.Sub64(x181, uint64(0x1), uint64(0x0))
		p224_fiat64.go#L362: 	x192, x193 = bits.Sub64(x183, 0xffffffff00000000, uint64(p224Uint1(x191)))
		p224_fiat64.go#L365: 	x194, x195 = bits.Sub64(x185, 0xffffffffffffffff, uint64(p224Uint1(x193)))
		p224_fiat64.go#L368: 	x196, x197 = bits.Sub64(x187, 0xffffffff, uint64(p224Uint1(x195)))
		p224_fiat64.go#L370: 	_, x199 = bits.Sub64(x189, uint64(0x0), uint64(p224Uint1(x197)))
		p224_fiat64.go#L666: 	x190, x191 = bits.Sub64(x181, uint64(0x1), uint64(0x0))
		p224_fiat64.go#L669: 	x192, x193 = bits.Sub64(x183, 0xffffffff00000000, uint64(p224Uint1(x191)))
		p224_fiat64.go#L672: 	x194, x195 = bits.Sub64(x185, 0xffffffffffffffff, uint64(p224Uint1(x193)))
		p224_fiat64.go#L675: 	x196, x197 = bits.Sub64(x187, 0xffffffff, uint64(p224Uint1(x195)))
		p224_fiat64.go#L677: 	_, x199 = bits.Sub64(x189, uint64(0x0), uint64(p224Uint1(x197)))
		p224_fiat64.go#L718: 	x9, x10 = bits.Sub64(x1, uint64(0x1), uint64(0x0))
		p224_fiat64.go#L721: 	x11, x12 = bits.Sub64(x3, 0xffffffff00000000, uint64(p224Uint1(x10)))
		p224_fiat64.go#L724: 	x13, x14 = bits.Sub64(x5, 0xffffffffffffffff, uint64(p224Uint1(x12)))
		p224_fiat64.go#L727: 	x15, x16 = bits.Sub64(x7, 0xffffffff, uint64(p224Uint1(x14)))
		p224_fiat64.go#L729: 	_, x18 = bits.Sub64(uint64(p224Uint1(x8)), uint64(0x0), uint64(p224Uint1(x16)))
		p224_fiat64.go#L758: 	x1, x2 = bits.Sub64(arg1[0], arg2[0], uint64(0x0))
		p224_fiat64.go#L761: 	x3, x4 = bits.Sub64(arg1[1], arg2[1], uint64(p224Uint1(x2)))
		p224_fiat64.go#L764: 	x5, x6 = bits.Sub64(arg1[2], arg2[2], uint64(p224Uint1(x4)))
		p224_fiat64.go#L767: 	x7, x8 = bits.Sub64(arg1[3], arg2[3], uint64(p224Uint1(x6)))
		p224_fiat64.go#L954: 	x101, x102 = bits.Sub64(x94, uint64(0x1), uint64(0x0))
		p224_fiat64.go#L957: 	x103, x104 = bits.Sub64(x96, 0xffffffff00000000, uint64(p224Uint1(x102)))
		p224_fiat64.go#L960: 	x105, x106 = bits.Sub64(x98, 0xffffffffffffffff, uint64(p224Uint1(x104)))
		p224_fiat64.go#L963: 	x107, x108 = bits.Sub64(x100, 0xffffffff, uint64(p224Uint1(x106)))
		p224_fiat64.go#L965: 	_, x110 = bits.Sub64(uint64(0x0), uint64(0x0), uint64(p224Uint1(x108)))
		p224_fiat64.go#L1230: 	x166, x167 = bits.Sub64(x159, uint64(0x1), uint64(0x0))
		p224_fiat64.go#L1233: 	x168, x169 = bits.Sub64(x161, 0xffffffff00000000, uint64(p224Uint1(x167)))
		p224_fiat64.go#L1236: 	x170, x171 = bits.Sub64(x163, 0xffffffffffffffff, uint64(p224Uint1(x169)))
		p224_fiat64.go#L1239: 	x172, x173 = bits.Sub64(x165, 0xffffffff, uint64(p224Uint1(x171)))
		p224_fiat64.go#L1241: 	_, x175 = bits.Sub64(uint64(0x0), uint64(0x0), uint64(p224Uint1(x173)))
		p256_fiat64.go#L339: 	x174, x175 = bits.Sub64(x165, 0xffffffffffffffff, uint64(0x0))
		p256_fiat64.go#L342: 	x176, x177 = bits.Sub64(x167, 0xffffffff, uint64(p256Uint1(x175)))
		p256_fiat64.go#L345: 	x178, x179 = bits.Sub64(x169, uint64(0x0), uint64(p256Uint1(x177)))
		p256_fiat64.go#L348: 	x180, x181 = bits.Sub64(x171, 0xffffffff00000001, uint64(p256Uint1(x179)))
		p256_fiat64.go#L350: 	_, x183 = bits.Sub64(x173, uint64(0x0), uint64(p256Uint1(x181)))
		p256_fiat64.go#L626: 	x174, x175 = bits.Sub64(x165, 0xffffffffffffffff, uint64(0x0))
		p256_fiat64.go#L629: 	x176, x177 = bits.Sub64(x167, 0xffffffff, uint64(p256Uint1(x175)))
		p256_fiat64.go#L632: 	x178, x179 = bits.Sub64(x169, uint64(0x0), uint64(p256Uint1(x177)))
		p256_fiat64.go#L635: 	x180, x181 = bits.Sub64(x171, 0xffffffff00000001, uint64(p256Uint1(x179)))
		p256_fiat64.go#L637: 	_, x183 = bits.Sub64(x173, uint64(0x0), uint64(p256Uint1(x181)))
		p256_fiat64.go#L678: 	x9, x10 = bits.Sub64(x1, 0xffffffffffffffff, uint64(0x0))
		p256_fiat64.go#L681: 	x11, x12 = bits.Sub64(x3, 0xffffffff, uint64(p256Uint1(x10)))
		p256_fiat64.go#L684: 	x13, x14 = bits.Sub64(x5, uint64(0x0), uint64(p256Uint1(x12)))
		p256_fiat64.go#L687: 	x15, x16 = bits.Sub64(x7, 0xffffffff00000001, uint64(p256Uint1(x14)))
		p256_fiat64.go#L689: 	_, x18 = bits.Sub64(uint64(p256Uint1(x8)), uint64(0x0), uint64(p256Uint1(x16)))
		p256_fiat64.go#L718: 	x1, x2 = bits.Sub64(arg1[0], arg2[0], uint64(0x0))
		p256_fiat64.go#L721: 	x3, x4 = bits.Sub64(arg1[1], arg2[1], uint64(p256Uint1(x2)))
		p256_fiat64.go#L724: 	x5, x6 = bits.Sub64(arg1[2], arg2[2], uint64(p256Uint1(x4)))
		p256_fiat64.go#L727: 	x7, x8 = bits.Sub64(arg1[3], arg2[3], uint64(p256Uint1(x6)))
		p256_fiat64.go#L882: 	x77, x78 = bits.Sub64(x70, 0xffffffffffffffff, uint64(0x0))
		p256_fiat64.go#L885: 	x79, x80 = bits.Sub64(x72, 0xffffffff, uint64(p256Uint1(x78)))
		p256_fiat64.go#L888: 	x81, x82 = bits.Sub64(x74, uint64(0x0), uint64(p256Uint1(x80)))
		p256_fiat64.go#L891: 	x83, x84 = bits.Sub64(x76, 0xffffffff00000001, uint64(p256Uint1(x82)))
		p256_fiat64.go#L893: 	_, x86 = bits.Sub64(uint64(0x0), uint64(0x0), uint64(p256Uint1(x84)))
		p256_fiat64.go#L1149: 	x157, x158 = bits.Sub64(x149, 0xffffffffffffffff, uint64(0x0))
		p256_fiat64.go#L1152: 	x159, x160 = bits.Sub64(x151, 0xffffffff, uint64(p256Uint1(x158)))
		p256_fiat64.go#L1155: 	x161, x162 = bits.Sub64(x153, uint64(0x0), uint64(p256Uint1(x160)))
		p256_fiat64.go#L1158: 	x163, x164 = bits.Sub64(x155, 0xffffffff00000001, uint64(p256Uint1(x162)))
		p256_fiat64.go#L1160: 	_, x166 = bits.Sub64(uint64(p256Uint1(x156)), uint64(0x0), uint64(p256Uint1(x164)))
		p384_fiat64.go#L747: 	x454, x455 = bits.Sub64(x441, 0xffffffff, uint64(0x0))
		p384_fiat64.go#L750: 	x456, x457 = bits.Sub64(x443, 0xffffffff00000000, uint64(p384Uint1(x455)))
		p384_fiat64.go#L753: 	x458, x459 = bits.Sub64(x445, 0xfffffffffffffffe, uint64(p384Uint1(x457)))
		p384_fiat64.go#L756: 	x460, x461 = bits.Sub64(x447, 0xffffffffffffffff, uint64(p384Uint1(x459)))
		p384_fiat64.go#L759: 	x462, x463 = bits.Sub64(x449, 0xffffffffffffffff, uint64(p384Uint1(x461)))
		p384_fiat64.go#L762: 	x464, x465 = bits.Sub64(x451, 0xffffffffffffffff, uint64(p384Uint1(x463)))
		p384_fiat64.go#L764: 	_, x467 = bits.Sub64(x453, uint64(0x0), uint64(p384Uint1(x465)))
		p384_fiat64.go#L1454: 	x454, x455 = bits.Sub64(x441, 0xffffffff, uint64(0x0))
		p384_fiat64.go#L1457: 	x456, x457 = bits.Sub64(x443, 0xffffffff00000000, uint64(p384Uint1(x455)))
		p384_fiat64.go#L1460: 	x458, x459 = bits.Sub64(x445, 0xfffffffffffffffe, uint64(p384Uint1(x457)))
		p384_fiat64.go#L1463: 	x460, x461 = bits.Sub64(x447, 0xffffffffffffffff, uint64(p384Uint1(x459)))
		p384_fiat64.go#L1466: 	x462, x463 = bits.Sub64(x449, 0xffffffffffffffff, uint64(p384Uint1(x461)))
		p384_fiat64.go#L1469: 	x464, x465 = bits.Sub64(x451, 0xffffffffffffffff, uint64(p384Uint1(x463)))
		p384_fiat64.go#L1471: 	_, x467 = bits.Sub64(x453, uint64(0x0), uint64(p384Uint1(x465)))
		p384_fiat64.go#L1524: 	x13, x14 = bits.Sub64(x1, 0xffffffff, uint64(0x0))
		p384_fiat64.go#L1527: 	x15, x16 = bits.Sub64(x3, 0xffffffff00000000, uint64(p384Uint1(x14)))
		p384_fiat64.go#L1530: 	x17, x18 = bits.Sub64(x5, 0xfffffffffffffffe, uint64(p384Uint1(x16)))
		p384_fiat64.go#L1533: 	x19, x20 = bits.Sub64(x7, 0xffffffffffffffff, uint64(p384Uint1(x18)))
		p384_fiat64.go#L1536: 	x21, x22 = bits.Sub64(x9, 0xffffffffffffffff, uint64(p384Uint1(x20)))
		p384_fiat64.go#L1539: 	x23, x24 = bits.Sub64(x11, 0xffffffffffffffff, uint64(p384Uint1(x22)))
		p384_fiat64.go#L1541: 	_, x26 = bits.Sub64(uint64(p384Uint1(x12)), uint64(0x0), uint64(p384Uint1(x24)))
		p384_fiat64.go#L1576: 	x1, x2 = bits.Sub64(arg1[0], arg2[0], uint64(0x0))
		p384_fiat64.go#L1579: 	x3, x4 = bits.Sub64(arg1[1], arg2[1], uint64(p384Uint1(x2)))
		p384_fiat64.go#L1582: 	x5, x6 = bits.Sub64(arg1[2], arg2[2], uint64(p384Uint1(x4)))
		p384_fiat64.go#L1585: 	x7, x8 = bits.Sub64(arg1[3], arg2[3], uint64(p384Uint1(x6)))
		p384_fiat64.go#L1588: 	x9, x10 = bits.Sub64(arg1[4], arg2[4], uint64(p384Uint1(x8)))
		p384_fiat64.go#L1591: 	x11, x12 = bits.Sub64(arg1[5], arg2[5], uint64(p384Uint1(x10)))
		p384_fiat64.go#L2068: 	x290, x291 = bits.Sub64(x278, 0xffffffff, uint64(0x0))
		p384_fiat64.go#L2071: 	x292, x293 = bits.Sub64(x280, 0xffffffff00000000, uint64(p384Uint1(x291)))
		p384_fiat64.go#L2074: 	x294, x295 = bits.Sub64(x282, 0xfffffffffffffffe, uint64(p384Uint1(x293)))
		p384_fiat64.go#L2077: 	x296, x297 = bits.Sub64(x284, 0xffffffffffffffff, uint64(p384Uint1(x295)))
		p384_fiat64.go#L2080: 	x298, x299 = bits.Sub64(x286, 0xffffffffffffffff, uint64(p384Uint1(x297)))
		p384_fiat64.go#L2083: 	x300, x301 = bits.Sub64(x288, 0xffffffffffffffff, uint64(p384Uint1(x299)))
		p384_fiat64.go#L2085: 	_, x303 = bits.Sub64(uint64(p384Uint1(x289)), uint64(0x0), uint64(p384Uint1(x301)))
		p384_fiat64.go#L2689: 	x391, x392 = bits.Sub64(x379, 0xffffffff, uint64(0x0))
		p384_fiat64.go#L2692: 	x393, x394 = bits.Sub64(x381, 0xffffffff00000000, uint64(p384Uint1(x392)))
		p384_fiat64.go#L2695: 	x395, x396 = bits.Sub64(x383, 0xfffffffffffffffe, uint64(p384Uint1(x394)))
		p384_fiat64.go#L2698: 	x397, x398 = bits.Sub64(x385, 0xffffffffffffffff, uint64(p384Uint1(x396)))
		p384_fiat64.go#L2701: 	x399, x400 = bits.Sub64(x387, 0xffffffffffffffff, uint64(p384Uint1(x398)))
		p384_fiat64.go#L2704: 	x401, x402 = bits.Sub64(x389, 0xffffffffffffffff, uint64(p384Uint1(x400)))
		p384_fiat64.go#L2706: 	_, x404 = bits.Sub64(uint64(p384Uint1(x390)), uint64(0x0), uint64(p384Uint1(x402)))
		p521_fiat64.go#L1545: 	x988, x989 = bits.Sub64(x969, 0xffffffffffffffff, uint64(0x0))
		p521_fiat64.go#L1548: 	x990, x991 = bits.Sub64(x971, 0xffffffffffffffff, uint64(p521Uint1(x989)))
		p521_fiat64.go#L1551: 	x992, x993 = bits.Sub64(x973, 0xffffffffffffffff, uint64(p521Uint1(x991)))
		p521_fiat64.go#L1554: 	x994, x995 = bits.Sub64(x975, 0xffffffffffffffff, uint64(p521Uint1(x993)))
		p521_fiat64.go#L1557: 	x996, x997 = bits.Sub64(x977, 0xffffffffffffffff, uint64(p521Uint1(x995)))
		p521_fiat64.go#L1560: 	x998, x999 = bits.Sub64(x979, 0xffffffffffffffff, uint64(p521Uint1(x997)))
		p521_fiat64.go#L1563: 	x1000, x1001 = bits.Sub64(x981, 0xffffffffffffffff, uint64(p521Uint1(x999)))
		p521_fiat64.go#L1566: 	x1002, x1003 = bits.Sub64(x983, 0xffffffffffffffff, uint64(p521Uint1(x1001)))
		p521_fiat64.go#L1569: 	x1004, x1005 = bits.Sub64(x985, 0x1ff, uint64(p521Uint1(x1003)))
		p521_fiat64.go#L1571: 	_, x1007 = bits.Sub64(x987, uint64(0x0), uint64(p521Uint1(x1005)))
		p521_fiat64.go#L3068: 	x988, x989 = bits.Sub64(x969, 0xffffffffffffffff, uint64(0x0))
		p521_fiat64.go#L3071: 	x990, x991 = bits.Sub64(x971, 0xffffffffffffffff, uint64(p521Uint1(x989)))
		p521_fiat64.go#L3074: 	x992, x993 = bits.Sub64(x973, 0xffffffffffffffff, uint64(p521Uint1(x991)))
		p521_fiat64.go#L3077: 	x994, x995 = bits.Sub64(x975, 0xffffffffffffffff, uint64(p521Uint1(x993)))
		p521_fiat64.go#L3080: 	x996, x997 = bits.Sub64(x977, 0xffffffffffffffff, uint64(p521Uint1(x995)))
		p521_fiat64.go#L3083: 	x998, x999 = bits.Sub64(x979, 0xffffffffffffffff, uint64(p521Uint1(x997)))
		p521_fiat64.go#L3086: 	x1000, x1001 = bits.Sub64(x981, 0xffffffffffffffff, uint64(p521Uint1(x999)))
		p521_fiat64.go#L3089: 	x1002, x1003 = bits.Sub64(x983, 0xffffffffffffffff, uint64(p521Uint1(x1001)))
		p521_fiat64.go#L3092: 	x1004, x1005 = bits.Sub64(x985, 0x1ff, uint64(p521Uint1(x1003)))
		p521_fiat64.go#L3094: 	_, x1007 = bits.Sub64(x987, uint64(0x0), uint64(p521Uint1(x1005)))
		p521_fiat64.go#L3165: 	x19, x20 = bits.Sub64(x1, 0xffffffffffffffff, uint64(0x0))
		p521_fiat64.go#L3168: 	x21, x22 = bits.Sub64(x3, 0xffffffffffffffff, uint64(p521Uint1(x20)))
		p521_fiat64.go#L3171: 	x23, x24 = bits.Sub64(x5, 0xffffffffffffffff, uint64(p521Uint1(x22)))
		p521_fiat64.go#L3174: 	x25, x26 = bits.Sub64(x7, 0xffffffffffffffff, uint64(p521Uint1(x24)))
		p521_fiat64.go#L3177: 	x27, x28 = bits.Sub64(x9, 0xffffffffffffffff, uint64(p521Uint1(x26)))
		p521_fiat64.go#L3180: 	x29, x30 = bits.Sub64(x11, 0xffffffffffffffff, uint64(p521Uint1(x28)))
		p521_fiat64.go#L3183: 	x31, x32 = bits.Sub64(x13, 0xffffffffffffffff, uint64(p521Uint1(x30)))
		p521_fiat64.go#L3186: 	x33, x34 = bits.Sub64(x15, 0xffffffffffffffff, uint64(p521Uint1(x32)))
		p521_fiat64.go#L3189: 	x35, x36 = bits.Sub64(x17, 0x1ff, uint64(p521Uint1(x34)))
		p521_fiat64.go#L3191: 	_, x38 = bits.Sub64(uint64(p521Uint1(x18)), uint64(0x0), uint64(p521Uint1(x36)))
		p521_fiat64.go#L3235: 	x1, x2 = bits.Sub64(arg1[0], arg2[0], uint64(0x0))
		p521_fiat64.go#L3238: 	x3, x4 = bits.Sub64(arg1[1], arg2[1], uint64(p521Uint1(x2)))
		p521_fiat64.go#L3241: 	x5, x6 = bits.Sub64(arg1[2], arg2[2], uint64(p521Uint1(x4)))
		p521_fiat64.go#L3244: 	x7, x8 = bits.Sub64(arg1[3], arg2[3], uint64(p521Uint1(x6)))
		p521_fiat64.go#L3247: 	x9, x10 = bits.Sub64(arg1[4], arg2[4], uint64(p521Uint1(x8)))
		p521_fiat64.go#L3250: 	x11, x12 = bits.Sub64(arg1[5], arg2[5], uint64(p521Uint1(x10)))
		p521_fiat64.go#L3253: 	x13, x14 = bits.Sub64(arg1[6], arg2[6], uint64(p521Uint1(x12)))
		p521_fiat64.go#L3256: 	x15, x16 = bits.Sub64(arg1[7], arg2[7], uint64(p521Uint1(x14)))
		p521_fiat64.go#L3259: 	x17, x18 = bits.Sub64(arg1[8], arg2[8], uint64(p521Uint1(x16)))
		p521_fiat64.go#L4217: 	x599, x600 = bits.Sub64(x582, 0xffffffffffffffff, uint64(0x0))
		p521_fiat64.go#L4220: 	x601, x602 = bits.Sub64(x584, 0xffffffffffffffff, uint64(p521Uint1(x600)))
		p521_fiat64.go#L4223: 	x603, x604 = bits.Sub64(x586, 0xffffffffffffffff, uint64(p521Uint1(x602)))
		p521_fiat64.go#L4226: 	x605, x606 = bits.Sub64(x588, 0xffffffffffffffff, uint64(p521Uint1(x604)))
		p521_fiat64.go#L4229: 	x607, x608 = bits.Sub64(x590, 0xffffffffffffffff, uint64(p521Uint1(x606)))
		p521_fiat64.go#L4232: 	x609, x610 = bits.Sub64(x592, 0xffffffffffffffff, uint64(p521Uint1(x608)))
		p521_fiat64.go#L4235: 	x611, x612 = bits.Sub64(x594, 0xffffffffffffffff, uint64(p521Uint1(x610)))
		p521_fiat64.go#L4238: 	x613, x614 = bits.Sub64(x596, 0xffffffffffffffff, uint64(p521Uint1(x612)))
		p521_fiat64.go#L4241: 	x615, x616 = bits.Sub64(x598, 0x1ff, uint64(p521Uint1(x614)))
		p521_fiat64.go#L4243: 	_, x618 = bits.Sub64(uint64(0x0), uint64(0x0), uint64(p521Uint1(x616)))
		p521_fiat64.go#L5080: 	x536, x537 = bits.Sub64(x519, 0xffffffffffffffff, uint64(0x0))
		p521_fiat64.go#L5083: 	x538, x539 = bits.Sub64(x521, 0xffffffffffffffff, uint64(p521Uint1(x537)))
		p521_fiat64.go#L5086: 	x540, x541 = bits.Sub64(x523, 0xffffffffffffffff, uint64(p521Uint1(x539)))
		p521_fiat64.go#L5089: 	x542, x543 = bits.Sub64(x525, 0xffffffffffffffff, uint64(p521Uint1(x541)))
		p521_fiat64.go#L5092: 	x544, x545 = bits.Sub64(x527, 0xffffffffffffffff, uint64(p521Uint1(x543)))
		p521_fiat64.go#L5095: 	x546, x547 = bits.Sub64(x529, 0xffffffffffffffff, uint64(p521Uint1(x545)))
		p521_fiat64.go#L5098: 	x548, x549 = bits.Sub64(x531, 0xffffffffffffffff, uint64(p521Uint1(x547)))
		p521_fiat64.go#L5101: 	x550, x551 = bits.Sub64(x533, 0xffffffffffffffff, uint64(p521Uint1(x549)))
		p521_fiat64.go#L5104: 	x552, x553 = bits.Sub64(x535, 0x1ff, uint64(p521Uint1(x551)))
		p521_fiat64.go#L5106: 	_, x555 = bits.Sub64(uint64(0x0), uint64(0x0), uint64(p521Uint1(x553)))

	net/netip
		uint128.go#L53: 	lo, borrow := bits.Sub64(u.lo, 1, 0)

	vendor/golang.org/x/crypto/internal/poly1305
		bits_go1.13.go#L17: 	return bits.Sub64(x, y, borrow)