SIDH_p751/p751/arith_decl.go

// +build amd64,!noasm

package p751

import (
	"golang.org/x/sys/cpu"
	. "github.com/cloudflare/p751sidh/internal/isogeny"
)

// If choice = 0, leave x,y unchanged. If choice = 1, set x,y = y,x.
// If choice is neither 0 nor 1 then behaviour is undefined.
// This function executes in constant time.
//go:noescape
func fp751ConditionalSwap(x, y *FpElement, choice uint8)

// Compute z = x + y (mod p).
//go:noescape
func fp751AddReduced(z, x, y *FpElement)

// Compute z = x - y (mod p).
//go:noescape
func fp751SubReduced(z, x, y *FpElement)

// Compute z = x + y, without reducing mod p.
//go:noescape
func fp751AddLazy(z, x, y *FpElement)

// Compute z = x + y, without reducing mod p.
//go:noescape
func fp751X2AddLazy(z, x, y *FpElementX2)

// Compute z = x - y, without reducing mod p.
//go:noescape
func fp751X2SubLazy(z, x, y *FpElementX2)

// Compute z = x * y.
//go:noescape
func fp751Mul(z *FpElementX2, x, y *FpElement)

// Function pointer that should point to one of the
// fp751MontgomeryReduce implementations below.
// When set, it performs Montgomery reduction: set z = x R^{-1} (mod 2*p).
// It may destroy the input value.
func fp751MontgomeryReduce(z *FpElement, x *FpElementX2) {
	if cpu.X86.HasBMI2 && cpu.X86.HasADX {
		fp751MontgomeryReduceBMI2ADX(z,x)
	} else if cpu.X86.HasBMI2 {
		fp751MontgomeryReduceBMI2(z,x)
	} else {
		fp751MontgomeryReduceFallback(z,x)
	}
}

//go:noescape
func fp751MontgomeryReduceBMI2ADX(z *FpElement, x *FpElementX2)

//go:noescape
func fp751MontgomeryReduceBMI2(z *FpElement, x *FpElementX2)

//go:noescape
func fp751MontgomeryReduceFallback(z *FpElement, x *FpElementX2)

// Reduce a field element in [0, 2*p) to one in [0,p).
//go:noescape
func fp751StrongReduce(x *FpElement)