Edit File by line

<?php

[0] Fix | Delete

[1] Fix | Delete

if (class_exists('ParagonIE_Sodium_Core_Curve25519', false)) {

[2] Fix | Delete

return;

[3] Fix | Delete

}

[4] Fix | Delete

[5] Fix | Delete

/**

[6] Fix | Delete

* Class ParagonIE_Sodium_Core_Curve25519

[7] Fix | Delete

[8] Fix | Delete

* Implements Curve25519 core functions

[9] Fix | Delete

[10] Fix | Delete

* Based on the ref10 curve25519 code provided by libsodium

[11] Fix | Delete

[12] Fix | Delete

* @ref https://github.com/jedisct1/libsodium/blob/master/src/libsodium/crypto_core/curve25519/ref10/curve25519_ref10.c

[13] Fix | Delete

[14] Fix | Delete

abstract class ParagonIE_Sodium_Core_Curve25519 extends ParagonIE_Sodium_Core_Curve25519_H

[15] Fix | Delete

{

[16] Fix | Delete

/**

[17] Fix | Delete

* Get a field element of size 10 with a value of 0

[18] Fix | Delete

[19] Fix | Delete

* @internal You should not use this directly from another application

[20] Fix | Delete

[21] Fix | Delete

* @return ParagonIE_Sodium_Core_Curve25519_Fe

[22] Fix | Delete

[23] Fix | Delete

public static function fe_0()

[24] Fix | Delete

{

[25] Fix | Delete

return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(

[26] Fix | Delete

array(0, 0, 0, 0, 0, 0, 0, 0, 0, 0)

[27] Fix | Delete

);

[28] Fix | Delete

}

[29] Fix | Delete

[30] Fix | Delete

/**

[31] Fix | Delete

* Get a field element of size 10 with a value of 1

[32] Fix | Delete

[33] Fix | Delete

* @internal You should not use this directly from another application

[34] Fix | Delete

[35] Fix | Delete

* @return ParagonIE_Sodium_Core_Curve25519_Fe

[36] Fix | Delete

[37] Fix | Delete

public static function fe_1()

[38] Fix | Delete

{

[39] Fix | Delete

return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(

[40] Fix | Delete

array(1, 0, 0, 0, 0, 0, 0, 0, 0, 0)

[41] Fix | Delete

);

[42] Fix | Delete

}

[43] Fix | Delete

[44] Fix | Delete

/**

[45] Fix | Delete

* Add two field elements.

[46] Fix | Delete

[47] Fix | Delete

* @internal You should not use this directly from another application

[48] Fix | Delete

[49] Fix | Delete

* @param ParagonIE_Sodium_Core_Curve25519_Fe $f

[50] Fix | Delete

* @param ParagonIE_Sodium_Core_Curve25519_Fe $g

[51] Fix | Delete

* @return ParagonIE_Sodium_Core_Curve25519_Fe

[52] Fix | Delete

* @psalm-suppress MixedAssignment

[53] Fix | Delete

* @psalm-suppress MixedOperand

[54] Fix | Delete

[55] Fix | Delete

public static function fe_add(

[56] Fix | Delete

ParagonIE_Sodium_Core_Curve25519_Fe $f,

[57] Fix | Delete

ParagonIE_Sodium_Core_Curve25519_Fe $g

[58] Fix | Delete

) {

[59] Fix | Delete

/** @var array<int, int> $arr */

[60] Fix | Delete

$arr = array();

[61] Fix | Delete

for ($i = 0; $i < 10; ++$i) {

[62] Fix | Delete

$arr[$i] = (int) ($f[$i] + $g[$i]);

[63] Fix | Delete

}

[64] Fix | Delete

return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($arr);

[65] Fix | Delete

}

[66] Fix | Delete

[67] Fix | Delete

/**

[68] Fix | Delete

* Constant-time conditional move.

[69] Fix | Delete

[70] Fix | Delete

* @internal You should not use this directly from another application

[71] Fix | Delete

[72] Fix | Delete

* @param ParagonIE_Sodium_Core_Curve25519_Fe $f

[73] Fix | Delete

* @param ParagonIE_Sodium_Core_Curve25519_Fe $g

[74] Fix | Delete

* @param int $b

[75] Fix | Delete

* @return ParagonIE_Sodium_Core_Curve25519_Fe

[76] Fix | Delete

* @psalm-suppress MixedAssignment

[77] Fix | Delete

[78] Fix | Delete

public static function fe_cmov(

[79] Fix | Delete

ParagonIE_Sodium_Core_Curve25519_Fe $f,

[80] Fix | Delete

ParagonIE_Sodium_Core_Curve25519_Fe $g,

[81] Fix | Delete

$b = 0

[82] Fix | Delete

) {

[83] Fix | Delete

/** @var array<int, int> $h */

[84] Fix | Delete

$h = array();

[85] Fix | Delete

$b *= -1;

[86] Fix | Delete

for ($i = 0; $i < 10; ++$i) {

[87] Fix | Delete

$x = (($f[$i] ^ $g[$i]) & $b);

[88] Fix | Delete

$h[$i] = ($f[$i]) ^ $x;

[89] Fix | Delete

}

[90] Fix | Delete

return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($h);

[91] Fix | Delete

}

[92] Fix | Delete

[93] Fix | Delete

/**

[94] Fix | Delete

* Create a copy of a field element.

[95] Fix | Delete

[96] Fix | Delete

* @internal You should not use this directly from another application

[97] Fix | Delete

[98] Fix | Delete

* @param ParagonIE_Sodium_Core_Curve25519_Fe $f

[99] Fix | Delete

* @return ParagonIE_Sodium_Core_Curve25519_Fe

[100] Fix | Delete

[101] Fix | Delete

public static function fe_copy(ParagonIE_Sodium_Core_Curve25519_Fe $f)

[102] Fix | Delete

{

[103] Fix | Delete

$h = clone $f;

[104] Fix | Delete

return $h;

[105] Fix | Delete

}

[106] Fix | Delete

[107] Fix | Delete

/**

[108] Fix | Delete

* Give: 32-byte string.

[109] Fix | Delete

* Receive: A field element object to use for internal calculations.

[110] Fix | Delete

[111] Fix | Delete

* @internal You should not use this directly from another application

[112] Fix | Delete

[113] Fix | Delete

* @param string $s

[114] Fix | Delete

* @return ParagonIE_Sodium_Core_Curve25519_Fe

[115] Fix | Delete

* @throws RangeException

[116] Fix | Delete

* @throws TypeError

[117] Fix | Delete

[118] Fix | Delete

public static function fe_frombytes($s)

[119] Fix | Delete

{

[120] Fix | Delete

if (self::strlen($s) !== 32) {

[121] Fix | Delete

throw new RangeException('Expected a 32-byte string.');

[122] Fix | Delete

}

[123] Fix | Delete

$h0 = self::load_4($s);

[124] Fix | Delete

$h1 = self::load_3(self::substr($s, 4, 3)) << 6;

[125] Fix | Delete

$h2 = self::load_3(self::substr($s, 7, 3)) << 5;

[126] Fix | Delete

$h3 = self::load_3(self::substr($s, 10, 3)) << 3;

[127] Fix | Delete

$h4 = self::load_3(self::substr($s, 13, 3)) << 2;

[128] Fix | Delete

$h5 = self::load_4(self::substr($s, 16, 4));

[129] Fix | Delete

$h6 = self::load_3(self::substr($s, 20, 3)) << 7;

[130] Fix | Delete

$h7 = self::load_3(self::substr($s, 23, 3)) << 5;

[131] Fix | Delete

$h8 = self::load_3(self::substr($s, 26, 3)) << 4;

[132] Fix | Delete

$h9 = (self::load_3(self::substr($s, 29, 3)) & 8388607) << 2;

[133] Fix | Delete

[134] Fix | Delete

$carry9 = ($h9 + (1 << 24)) >> 25;

[135] Fix | Delete

$h0 += self::mul($carry9, 19, 5);

[136] Fix | Delete

$h9 -= $carry9 << 25;

[137] Fix | Delete

$carry1 = ($h1 + (1 << 24)) >> 25;

[138] Fix | Delete

$h2 += $carry1;

[139] Fix | Delete

$h1 -= $carry1 << 25;

[140] Fix | Delete

$carry3 = ($h3 + (1 << 24)) >> 25;

[141] Fix | Delete

$h4 += $carry3;

[142] Fix | Delete

$h3 -= $carry3 << 25;

[143] Fix | Delete

$carry5 = ($h5 + (1 << 24)) >> 25;

[144] Fix | Delete

$h6 += $carry5;

[145] Fix | Delete

$h5 -= $carry5 << 25;

[146] Fix | Delete

$carry7 = ($h7 + (1 << 24)) >> 25;

[147] Fix | Delete

$h8 += $carry7;

[148] Fix | Delete

$h7 -= $carry7 << 25;

[149] Fix | Delete

[150] Fix | Delete

$carry0 = ($h0 + (1 << 25)) >> 26;

[151] Fix | Delete

$h1 += $carry0;

[152] Fix | Delete

$h0 -= $carry0 << 26;

[153] Fix | Delete

$carry2 = ($h2 + (1 << 25)) >> 26;

[154] Fix | Delete

$h3 += $carry2;

[155] Fix | Delete

$h2 -= $carry2 << 26;

[156] Fix | Delete

$carry4 = ($h4 + (1 << 25)) >> 26;

[157] Fix | Delete

$h5 += $carry4;

[158] Fix | Delete

$h4 -= $carry4 << 26;

[159] Fix | Delete

$carry6 = ($h6 + (1 << 25)) >> 26;

[160] Fix | Delete

$h7 += $carry6;

[161] Fix | Delete

$h6 -= $carry6 << 26;

[162] Fix | Delete

$carry8 = ($h8 + (1 << 25)) >> 26;

[163] Fix | Delete

$h9 += $carry8;

[164] Fix | Delete

$h8 -= $carry8 << 26;

[165] Fix | Delete

[166] Fix | Delete

return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(

[167] Fix | Delete

array(

[168] Fix | Delete

(int) $h0,

[169] Fix | Delete

(int) $h1,

[170] Fix | Delete

(int) $h2,

[171] Fix | Delete

(int) $h3,

[172] Fix | Delete

(int) $h4,

[173] Fix | Delete

(int) $h5,

[174] Fix | Delete

(int) $h6,

[175] Fix | Delete

(int) $h7,

[176] Fix | Delete

(int) $h8,

[177] Fix | Delete

(int) $h9

[178] Fix | Delete

)

[179] Fix | Delete

);

[180] Fix | Delete

}

[181] Fix | Delete

[182] Fix | Delete

/**

[183] Fix | Delete

* Convert a field element to a byte string.

[184] Fix | Delete

[185] Fix | Delete

* @internal You should not use this directly from another application

[186] Fix | Delete

[187] Fix | Delete

* @param ParagonIE_Sodium_Core_Curve25519_Fe $h

[188] Fix | Delete

* @return string

[189] Fix | Delete

[190] Fix | Delete

public static function fe_tobytes(ParagonIE_Sodium_Core_Curve25519_Fe $h)

[191] Fix | Delete

{

[192] Fix | Delete

$h0 = (int) $h[0];

[193] Fix | Delete

$h1 = (int) $h[1];

[194] Fix | Delete

$h2 = (int) $h[2];

[195] Fix | Delete

$h3 = (int) $h[3];

[196] Fix | Delete

$h4 = (int) $h[4];

[197] Fix | Delete

$h5 = (int) $h[5];

[198] Fix | Delete

$h6 = (int) $h[6];

[199] Fix | Delete

$h7 = (int) $h[7];

[200] Fix | Delete

$h8 = (int) $h[8];

[201] Fix | Delete

$h9 = (int) $h[9];

[202] Fix | Delete

[203] Fix | Delete

$q = (self::mul($h9, 19, 5) + (1 << 24)) >> 25;

[204] Fix | Delete

$q = ($h0 + $q) >> 26;

[205] Fix | Delete

$q = ($h1 + $q) >> 25;

[206] Fix | Delete

$q = ($h2 + $q) >> 26;

[207] Fix | Delete

$q = ($h3 + $q) >> 25;

[208] Fix | Delete

$q = ($h4 + $q) >> 26;

[209] Fix | Delete

$q = ($h5 + $q) >> 25;

[210] Fix | Delete

$q = ($h6 + $q) >> 26;

[211] Fix | Delete

$q = ($h7 + $q) >> 25;

[212] Fix | Delete

$q = ($h8 + $q) >> 26;

[213] Fix | Delete

$q = ($h9 + $q) >> 25;

[214] Fix | Delete

[215] Fix | Delete

$h0 += self::mul($q, 19, 5);

[216] Fix | Delete

[217] Fix | Delete

$carry0 = $h0 >> 26;

[218] Fix | Delete

$h1 += $carry0;

[219] Fix | Delete

$h0 -= $carry0 << 26;

[220] Fix | Delete

$carry1 = $h1 >> 25;

[221] Fix | Delete

$h2 += $carry1;

[222] Fix | Delete

$h1 -= $carry1 << 25;

[223] Fix | Delete

$carry2 = $h2 >> 26;

[224] Fix | Delete

$h3 += $carry2;

[225] Fix | Delete

$h2 -= $carry2 << 26;

[226] Fix | Delete

$carry3 = $h3 >> 25;

[227] Fix | Delete

$h4 += $carry3;

[228] Fix | Delete

$h3 -= $carry3 << 25;

[229] Fix | Delete

$carry4 = $h4 >> 26;

[230] Fix | Delete

$h5 += $carry4;

[231] Fix | Delete

$h4 -= $carry4 << 26;

[232] Fix | Delete

$carry5 = $h5 >> 25;

[233] Fix | Delete

$h6 += $carry5;

[234] Fix | Delete

$h5 -= $carry5 << 25;

[235] Fix | Delete

$carry6 = $h6 >> 26;

[236] Fix | Delete

$h7 += $carry6;

[237] Fix | Delete

$h6 -= $carry6 << 26;

[238] Fix | Delete

$carry7 = $h7 >> 25;

[239] Fix | Delete

$h8 += $carry7;

[240] Fix | Delete

$h7 -= $carry7 << 25;

[241] Fix | Delete

$carry8 = $h8 >> 26;

[242] Fix | Delete

$h9 += $carry8;

[243] Fix | Delete

$h8 -= $carry8 << 26;

[244] Fix | Delete

$carry9 = $h9 >> 25;

[245] Fix | Delete

$h9 -= $carry9 << 25;

[246] Fix | Delete

[247] Fix | Delete

/**

[248] Fix | Delete

* @var array<int, int>

[249] Fix | Delete

[250] Fix | Delete

$s = array(

[251] Fix | Delete

(int) (($h0 >> 0) & 0xff),

[252] Fix | Delete

(int) (($h0 >> 8) & 0xff),

[253] Fix | Delete

(int) (($h0 >> 16) & 0xff),

[254] Fix | Delete

(int) ((($h0 >> 24) | ($h1 << 2)) & 0xff),

[255] Fix | Delete

(int) (($h1 >> 6) & 0xff),

[256] Fix | Delete

(int) (($h1 >> 14) & 0xff),

[257] Fix | Delete

(int) ((($h1 >> 22) | ($h2 << 3)) & 0xff),

[258] Fix | Delete

(int) (($h2 >> 5) & 0xff),

[259] Fix | Delete

(int) (($h2 >> 13) & 0xff),

[260] Fix | Delete

(int) ((($h2 >> 21) | ($h3 << 5)) & 0xff),

[261] Fix | Delete

(int) (($h3 >> 3) & 0xff),

[262] Fix | Delete

(int) (($h3 >> 11) & 0xff),

[263] Fix | Delete

(int) ((($h3 >> 19) | ($h4 << 6)) & 0xff),

[264] Fix | Delete

(int) (($h4 >> 2) & 0xff),

[265] Fix | Delete

(int) (($h4 >> 10) & 0xff),

[266] Fix | Delete

(int) (($h4 >> 18) & 0xff),

[267] Fix | Delete

(int) (($h5 >> 0) & 0xff),

[268] Fix | Delete

(int) (($h5 >> 8) & 0xff),

[269] Fix | Delete

(int) (($h5 >> 16) & 0xff),

[270] Fix | Delete

(int) ((($h5 >> 24) | ($h6 << 1)) & 0xff),

[271] Fix | Delete

(int) (($h6 >> 7) & 0xff),

[272] Fix | Delete

(int) (($h6 >> 15) & 0xff),

[273] Fix | Delete

(int) ((($h6 >> 23) | ($h7 << 3)) & 0xff),

[274] Fix | Delete

(int) (($h7 >> 5) & 0xff),

[275] Fix | Delete

(int) (($h7 >> 13) & 0xff),

[276] Fix | Delete

(int) ((($h7 >> 21) | ($h8 << 4)) & 0xff),

[277] Fix | Delete

(int) (($h8 >> 4) & 0xff),

[278] Fix | Delete

(int) (($h8 >> 12) & 0xff),

[279] Fix | Delete

(int) ((($h8 >> 20) | ($h9 << 6)) & 0xff),

[280] Fix | Delete

(int) (($h9 >> 2) & 0xff),

[281] Fix | Delete

(int) (($h9 >> 10) & 0xff),

[282] Fix | Delete

(int) (($h9 >> 18) & 0xff)

[283] Fix | Delete

);

[284] Fix | Delete

return self::intArrayToString($s);

[285] Fix | Delete

}

[286] Fix | Delete

[287] Fix | Delete

/**

[288] Fix | Delete

* Is a field element negative? (1 = yes, 0 = no. Used in calculations.)

[289] Fix | Delete

[290] Fix | Delete

* @internal You should not use this directly from another application

[291] Fix | Delete

[292] Fix | Delete

* @param ParagonIE_Sodium_Core_Curve25519_Fe $f

[293] Fix | Delete

* @return int

[294] Fix | Delete

* @throws SodiumException

[295] Fix | Delete

* @throws TypeError

[296] Fix | Delete

[297] Fix | Delete

public static function fe_isnegative(ParagonIE_Sodium_Core_Curve25519_Fe $f)

[298] Fix | Delete

{

[299] Fix | Delete

$str = self::fe_tobytes($f);

[300] Fix | Delete

return (int) (self::chrToInt($str[0]) & 1);

[301] Fix | Delete

}

[302] Fix | Delete

[303] Fix | Delete

/**

[304] Fix | Delete

* Returns 0 if this field element results in all NUL bytes.

[305] Fix | Delete

[306] Fix | Delete

* @internal You should not use this directly from another application

[307] Fix | Delete

[308] Fix | Delete

* @param ParagonIE_Sodium_Core_Curve25519_Fe $f

[309] Fix | Delete

* @return bool

[310] Fix | Delete

* @throws SodiumException

[311] Fix | Delete

* @throws TypeError

[312] Fix | Delete

[313] Fix | Delete

public static function fe_isnonzero(ParagonIE_Sodium_Core_Curve25519_Fe $f)

[314] Fix | Delete

{

[315] Fix | Delete

static $zero;

[316] Fix | Delete

if ($zero === null) {

[317] Fix | Delete

$zero = str_repeat("\x00", 32);

[318] Fix | Delete

}

[319] Fix | Delete

/** @var string $zero */

[320] Fix | Delete

/** @var string $str */

[321] Fix | Delete

$str = self::fe_tobytes($f);

[322] Fix | Delete

return !self::verify_32($str, (string) $zero);

[323] Fix | Delete

}

[324] Fix | Delete

[325] Fix | Delete

/**

[326] Fix | Delete

* Multiply two field elements

[327] Fix | Delete

[328] Fix | Delete

* h = f * g

[329] Fix | Delete

[330] Fix | Delete

* @internal You should not use this directly from another application

[331] Fix | Delete

[332] Fix | Delete

* @security Is multiplication a source of timing leaks? If so, can we do

[333] Fix | Delete

* anything to prevent that from happening?

[334] Fix | Delete

[335] Fix | Delete

* @param ParagonIE_Sodium_Core_Curve25519_Fe $f

[336] Fix | Delete

* @param ParagonIE_Sodium_Core_Curve25519_Fe $g

[337] Fix | Delete

* @return ParagonIE_Sodium_Core_Curve25519_Fe

[338] Fix | Delete

[339] Fix | Delete

public static function fe_mul(

[340] Fix | Delete

ParagonIE_Sodium_Core_Curve25519_Fe $f,

[341] Fix | Delete

ParagonIE_Sodium_Core_Curve25519_Fe $g

[342] Fix | Delete

) {

[343] Fix | Delete

// Ensure limbs aren't oversized.

[344] Fix | Delete

$f = self::fe_normalize($f);

[345] Fix | Delete

$g = self::fe_normalize($g);

[346] Fix | Delete

$f0 = $f[0];

[347] Fix | Delete

$f1 = $f[1];

[348] Fix | Delete

$f2 = $f[2];

[349] Fix | Delete

$f3 = $f[3];

[350] Fix | Delete

$f4 = $f[4];

[351] Fix | Delete

$f5 = $f[5];

[352] Fix | Delete

$f6 = $f[6];

[353] Fix | Delete

$f7 = $f[7];

[354] Fix | Delete

$f8 = $f[8];

[355] Fix | Delete

$f9 = $f[9];

[356] Fix | Delete

$g0 = $g[0];

[357] Fix | Delete

$g1 = $g[1];

[358] Fix | Delete

$g2 = $g[2];

[359] Fix | Delete

$g3 = $g[3];

[360] Fix | Delete

$g4 = $g[4];

[361] Fix | Delete

$g5 = $g[5];

[362] Fix | Delete

$g6 = $g[6];

[363] Fix | Delete

$g7 = $g[7];

[364] Fix | Delete

$g8 = $g[8];

[365] Fix | Delete

$g9 = $g[9];

[366] Fix | Delete

$g1_19 = self::mul($g1, 19, 5);

[367] Fix | Delete

$g2_19 = self::mul($g2, 19, 5);

[368] Fix | Delete

$g3_19 = self::mul($g3, 19, 5);

[369] Fix | Delete

$g4_19 = self::mul($g4, 19, 5);

[370] Fix | Delete

$g5_19 = self::mul($g5, 19, 5);

[371] Fix | Delete

$g6_19 = self::mul($g6, 19, 5);

[372] Fix | Delete

$g7_19 = self::mul($g7, 19, 5);

[373] Fix | Delete

$g8_19 = self::mul($g8, 19, 5);

[374] Fix | Delete

$g9_19 = self::mul($g9, 19, 5);

[375] Fix | Delete

$f1_2 = $f1 << 1;

[376] Fix | Delete

$f3_2 = $f3 << 1;

[377] Fix | Delete

$f5_2 = $f5 << 1;

[378] Fix | Delete

$f7_2 = $f7 << 1;

[379] Fix | Delete

$f9_2 = $f9 << 1;

[380] Fix | Delete

$f0g0 = self::mul($f0, $g0, 26);

[381] Fix | Delete

$f0g1 = self::mul($f0, $g1, 25);

[382] Fix | Delete

$f0g2 = self::mul($f0, $g2, 26);

[383] Fix | Delete

$f0g3 = self::mul($f0, $g3, 25);

[384] Fix | Delete

$f0g4 = self::mul($f0, $g4, 26);

[385] Fix | Delete

$f0g5 = self::mul($f0, $g5, 25);

[386] Fix | Delete

$f0g6 = self::mul($f0, $g6, 26);

[387] Fix | Delete

$f0g7 = self::mul($f0, $g7, 25);

[388] Fix | Delete

$f0g8 = self::mul($f0, $g8, 26);

[389] Fix | Delete

$f0g9 = self::mul($f0, $g9, 26);

[390] Fix | Delete

$f1g0 = self::mul($f1, $g0, 26);

[391] Fix | Delete

$f1g1_2 = self::mul($f1_2, $g1, 25);

[392] Fix | Delete

$f1g2 = self::mul($f1, $g2, 26);

[393] Fix | Delete

$f1g3_2 = self::mul($f1_2, $g3, 25);

[394] Fix | Delete

$f1g4 = self::mul($f1, $g4, 26);

[395] Fix | Delete

$f1g5_2 = self::mul($f1_2, $g5, 25);

[396] Fix | Delete

$f1g6 = self::mul($f1, $g6, 26);

[397] Fix | Delete

$f1g7_2 = self::mul($f1_2, $g7, 25);

[398] Fix | Delete

$f1g8 = self::mul($f1, $g8, 26);

[399] Fix | Delete

$f1g9_38 = self::mul($g9_19, $f1_2, 26);

[400] Fix | Delete

$f2g0 = self::mul($f2, $g0, 26);

[401] Fix | Delete

$f2g1 = self::mul($f2, $g1, 25);

[402] Fix | Delete

$f2g2 = self::mul($f2, $g2, 26);

[403] Fix | Delete

$f2g3 = self::mul($f2, $g3, 25);

[404] Fix | Delete

$f2g4 = self::mul($f2, $g4, 26);

[405] Fix | Delete

$f2g5 = self::mul($f2, $g5, 25);

[406] Fix | Delete

$f2g6 = self::mul($f2, $g6, 26);

[407] Fix | Delete

$f2g7 = self::mul($f2, $g7, 25);

[408] Fix | Delete

$f2g8_19 = self::mul($g8_19, $f2, 26);

[409] Fix | Delete

$f2g9_19 = self::mul($g9_19, $f2, 26);

[410] Fix | Delete

$f3g0 = self::mul($f3, $g0, 26);

[411] Fix | Delete

$f3g1_2 = self::mul($f3_2, $g1, 25);

[412] Fix | Delete

$f3g2 = self::mul($f3, $g2, 26);

[413] Fix | Delete

$f3g3_2 = self::mul($f3_2, $g3, 25);

[414] Fix | Delete

$f3g4 = self::mul($f3, $g4, 26);

[415] Fix | Delete

$f3g5_2 = self::mul($f3_2, $g5, 25);

[416] Fix | Delete

$f3g6 = self::mul($f3, $g6, 26);

[417] Fix | Delete

$f3g7_38 = self::mul($g7_19, $f3_2, 26);

[418] Fix | Delete

$f3g8_19 = self::mul($g8_19, $f3, 25);

[419] Fix | Delete

$f3g9_38 = self::mul($g9_19, $f3_2, 26);

[420] Fix | Delete

$f4g0 = self::mul($f4, $g0, 26);

[421] Fix | Delete

$f4g1 = self::mul($f4, $g1, 25);

[422] Fix | Delete

$f4g2 = self::mul($f4, $g2, 26);

[423] Fix | Delete

$f4g3 = self::mul($f4, $g3, 25);

[424] Fix | Delete

$f4g4 = self::mul($f4, $g4, 26);

[425] Fix | Delete

$f4g5 = self::mul($f4, $g5, 25);

[426] Fix | Delete

$f4g6_19 = self::mul($g6_19, $f4, 26);

[427] Fix | Delete

$f4g7_19 = self::mul($g7_19, $f4, 26);

[428] Fix | Delete

$f4g8_19 = self::mul($g8_19, $f4, 26);

[429] Fix | Delete

$f4g9_19 = self::mul($g9_19, $f4, 26);

[430] Fix | Delete

$f5g0 = self::mul($f5, $g0, 26);

[431] Fix | Delete

$f5g1_2 = self::mul($f5_2, $g1, 25);

[432] Fix | Delete

$f5g2 = self::mul($f5, $g2, 26);

[433] Fix | Delete

$f5g3_2 = self::mul($f5_2, $g3, 25);

[434] Fix | Delete

$f5g4 = self::mul($f5, $g4, 26);

[435] Fix | Delete

$f5g5_38 = self::mul($g5_19, $f5_2, 26);

[436] Fix | Delete

$f5g6_19 = self::mul($g6_19, $f5, 25);

[437] Fix | Delete

$f5g7_38 = self::mul($g7_19, $f5_2, 26);

[438] Fix | Delete

$f5g8_19 = self::mul($g8_19, $f5, 25);

[439] Fix | Delete

$f5g9_38 = self::mul($g9_19, $f5_2, 26);

[440] Fix | Delete

$f6g0 = self::mul($f6, $g0, 26);

[441] Fix | Delete

$f6g1 = self::mul($f6, $g1, 25);

[442] Fix | Delete

$f6g2 = self::mul($f6, $g2, 26);

[443] Fix | Delete

$f6g3 = self::mul($f6, $g3, 25);

[444] Fix | Delete

$f6g4_19 = self::mul($g4_19, $f6, 26);

[445] Fix | Delete

$f6g5_19 = self::mul($g5_19, $f6, 26);

[446] Fix | Delete

$f6g6_19 = self::mul($g6_19, $f6, 26);

[447] Fix | Delete

$f6g7_19 = self::mul($g7_19, $f6, 26);

[448] Fix | Delete

$f6g8_19 = self::mul($g8_19, $f6, 26);

[449] Fix | Delete

$f6g9_19 = self::mul($g9_19, $f6, 26);

[450] Fix | Delete

$f7g0 = self::mul($f7, $g0, 26);

[451] Fix | Delete

$f7g1_2 = self::mul($f7_2, $g1, 25);

[452] Fix | Delete

$f7g2 = self::mul($f7, $g2, 26);

[453] Fix | Delete

$f7g3_38 = self::mul($g3_19, $f7_2, 26);

[454] Fix | Delete

$f7g4_19 = self::mul($g4_19, $f7, 26);

[455] Fix | Delete

$f7g5_38 = self::mul($g5_19, $f7_2, 26);

[456] Fix | Delete

$f7g6_19 = self::mul($g6_19, $f7, 25);

[457] Fix | Delete

$f7g7_38 = self::mul($g7_19, $f7_2, 26);

[458] Fix | Delete

$f7g8_19 = self::mul($g8_19, $f7, 25);

[459] Fix | Delete

$f7g9_38 = self::mul($g9_19,$f7_2, 26);

[460] Fix | Delete

$f8g0 = self::mul($f8, $g0, 26);

[461] Fix | Delete

$f8g1 = self::mul($f8, $g1, 25);

[462] Fix | Delete

$f8g2_19 = self::mul($g2_19, $f8, 26);

[463] Fix | Delete

$f8g3_19 = self::mul($g3_19, $f8, 26);

[464] Fix | Delete

$f8g4_19 = self::mul($g4_19, $f8, 26);

[465] Fix | Delete

$f8g5_19 = self::mul($g5_19, $f8, 26);

[466] Fix | Delete

$f8g6_19 = self::mul($g6_19, $f8, 26);

[467] Fix | Delete

$f8g7_19 = self::mul($g7_19, $f8, 26);

[468] Fix | Delete

$f8g8_19 = self::mul($g8_19, $f8, 26);

[469] Fix | Delete

$f8g9_19 = self::mul($g9_19, $f8, 26);

[470] Fix | Delete

$f9g0 = self::mul($f9, $g0, 26);

[471] Fix | Delete

$f9g1_38 = self::mul($g1_19, $f9_2, 26);

[472] Fix | Delete

$f9g2_19 = self::mul($g2_19, $f9, 25);

[473] Fix | Delete

$f9g3_38 = self::mul($g3_19, $f9_2, 26);

[474] Fix | Delete

$f9g4_19 = self::mul($g4_19, $f9, 25);

[475] Fix | Delete

$f9g5_38 = self::mul($g5_19, $f9_2, 26);

[476] Fix | Delete

$f9g6_19 = self::mul($g6_19, $f9, 25);

[477] Fix | Delete

$f9g7_38 = self::mul($g7_19, $f9_2, 26);

[478] Fix | Delete

$f9g8_19 = self::mul($g8_19, $f9, 25);

[479] Fix | Delete

$f9g9_38 = self::mul($g9_19, $f9_2, 26);

[480] Fix | Delete

[481] Fix | Delete

$h0 = $f0g0 + $f1g9_38 + $f2g8_19 + $f3g7_38 + $f4g6_19 + $f5g5_38 + $f6g4_19 + $f7g3_38 + $f8g2_19 + $f9g1_38;

[482] Fix | Delete

$h1 = $f0g1 + $f1g0 + $f2g9_19 + $f3g8_19 + $f4g7_19 + $f5g6_19 + $f6g5_19 + $f7g4_19 + $f8g3_19 + $f9g2_19;

[483] Fix | Delete

$h2 = $f0g2 + $f1g1_2 + $f2g0 + $f3g9_38 + $f4g8_19 + $f5g7_38 + $f6g6_19 + $f7g5_38 + $f8g4_19 + $f9g3_38;

[484] Fix | Delete

$h3 = $f0g3 + $f1g2 + $f2g1 + $f3g0 + $f4g9_19 + $f5g8_19 + $f6g7_19 + $f7g6_19 + $f8g5_19 + $f9g4_19;

[485] Fix | Delete

$h4 = $f0g4 + $f1g3_2 + $f2g2 + $f3g1_2 + $f4g0 + $f5g9_38 + $f6g8_19 + $f7g7_38 + $f8g6_19 + $f9g5_38;

[486] Fix | Delete

$h5 = $f0g5 + $f1g4 + $f2g3 + $f3g2 + $f4g1 + $f5g0 + $f6g9_19 + $f7g8_19 + $f8g7_19 + $f9g6_19;

[487] Fix | Delete

$h6 = $f0g6 + $f1g5_2 + $f2g4 + $f3g3_2 + $f4g2 + $f5g1_2 + $f6g0 + $f7g9_38 + $f8g8_19 + $f9g7_38;

[488] Fix | Delete

$h7 = $f0g7 + $f1g6 + $f2g5 + $f3g4 + $f4g3 + $f5g2 + $f6g1 + $f7g0 + $f8g9_19 + $f9g8_19;

[489] Fix | Delete

$h8 = $f0g8 + $f1g7_2 + $f2g6 + $f3g5_2 + $f4g4 + $f5g3_2 + $f6g2 + $f7g1_2 + $f8g0 + $f9g9_38;

[490] Fix | Delete

$h9 = $f0g9 + $f1g8 + $f2g7 + $f3g6 + $f4g5 + $f5g4 + $f6g3 + $f7g2 + $f8g1 + $f9g0 ;

[491] Fix | Delete

[492] Fix | Delete

$carry0 = ($h0 + (1 << 25)) >> 26;

[493] Fix | Delete

$h1 += $carry0;

[494] Fix | Delete

$h0 -= $carry0 << 26;

[495] Fix | Delete

$carry4 = ($h4 + (1 << 25)) >> 26;

[496] Fix | Delete

$h5 += $carry4;

[497] Fix | Delete

$h4 -= $carry4 << 26;

[498] Fix | Delete

[499] Fix | Delete

12 3 4 5 6 ...8