func math/bits.Mul64
884 uses
math/bits (current package)
bits.go#L444: h, l := Mul64(uint64(x), uint64(y))
bits.go#L464: func Mul64(x, y uint64) (hi, lo uint64) {
math
fma.go#L121: pm1, pm2 := bits.Mul64(xm<<10, ym<<11)
trig_reduce.go#L48: z2hi, _ := bits.Mul64(z2, ix)
trig_reduce.go#L49: z1hi, z1lo := bits.Mul64(z1, ix)
crypto/ed25519/internal/edwards25519/field
fe.go#L328: mh, ml := bits.Mul64(a, uint64(b))
fe_generic.go#L17: hi, lo := bits.Mul64(a, b)
fe_generic.go#L23: hi, lo := bits.Mul64(a, b)
crypto/elliptic/internal/fiat
p224_fiat64.go#L89: x6, x5 = bits.Mul64(x4, arg2[3])
p224_fiat64.go#L92: x8, x7 = bits.Mul64(x4, arg2[2])
p224_fiat64.go#L95: x10, x9 = bits.Mul64(x4, arg2[1])
p224_fiat64.go#L98: x12, x11 = bits.Mul64(x4, arg2[0])
p224_fiat64.go#L110: _, x20 = bits.Mul64(x11, 0xffffffffffffffff)
p224_fiat64.go#L113: x23, x22 = bits.Mul64(x20, 0xffffffff)
p224_fiat64.go#L116: x25, x24 = bits.Mul64(x20, 0xffffffffffffffff)
p224_fiat64.go#L119: x27, x26 = bits.Mul64(x20, 0xffffffff00000000)
p224_fiat64.go#L143: x44, x43 = bits.Mul64(x1, arg2[3])
p224_fiat64.go#L146: x46, x45 = bits.Mul64(x1, arg2[2])
p224_fiat64.go#L149: x48, x47 = bits.Mul64(x1, arg2[1])
p224_fiat64.go#L152: x50, x49 = bits.Mul64(x1, arg2[0])
p224_fiat64.go#L179: _, x68 = bits.Mul64(x58, 0xffffffffffffffff)
p224_fiat64.go#L182: x71, x70 = bits.Mul64(x68, 0xffffffff)
p224_fiat64.go#L185: x73, x72 = bits.Mul64(x68, 0xffffffffffffffff)
p224_fiat64.go#L188: x75, x74 = bits.Mul64(x68, 0xffffffff00000000)
p224_fiat64.go#L213: x93, x92 = bits.Mul64(x2, arg2[3])
p224_fiat64.go#L216: x95, x94 = bits.Mul64(x2, arg2[2])
p224_fiat64.go#L219: x97, x96 = bits.Mul64(x2, arg2[1])
p224_fiat64.go#L222: x99, x98 = bits.Mul64(x2, arg2[0])
p224_fiat64.go#L249: _, x117 = bits.Mul64(x107, 0xffffffffffffffff)
p224_fiat64.go#L252: x120, x119 = bits.Mul64(x117, 0xffffffff)
p224_fiat64.go#L255: x122, x121 = bits.Mul64(x117, 0xffffffffffffffff)
p224_fiat64.go#L258: x124, x123 = bits.Mul64(x117, 0xffffffff00000000)
p224_fiat64.go#L283: x142, x141 = bits.Mul64(x3, arg2[3])
p224_fiat64.go#L286: x144, x143 = bits.Mul64(x3, arg2[2])
p224_fiat64.go#L289: x146, x145 = bits.Mul64(x3, arg2[1])
p224_fiat64.go#L292: x148, x147 = bits.Mul64(x3, arg2[0])
p224_fiat64.go#L319: _, x166 = bits.Mul64(x156, 0xffffffffffffffff)
p224_fiat64.go#L322: x169, x168 = bits.Mul64(x166, 0xffffffff)
p224_fiat64.go#L325: x171, x170 = bits.Mul64(x166, 0xffffffffffffffff)
p224_fiat64.go#L328: x173, x172 = bits.Mul64(x166, 0xffffffff00000000)
p224_fiat64.go#L394: x6, x5 = bits.Mul64(x4, arg1[3])
p224_fiat64.go#L397: x8, x7 = bits.Mul64(x4, arg1[2])
p224_fiat64.go#L400: x10, x9 = bits.Mul64(x4, arg1[1])
p224_fiat64.go#L403: x12, x11 = bits.Mul64(x4, arg1[0])
p224_fiat64.go#L415: _, x20 = bits.Mul64(x11, 0xffffffffffffffff)
p224_fiat64.go#L418: x23, x22 = bits.Mul64(x20, 0xffffffff)
p224_fiat64.go#L421: x25, x24 = bits.Mul64(x20, 0xffffffffffffffff)
p224_fiat64.go#L424: x27, x26 = bits.Mul64(x20, 0xffffffff00000000)
p224_fiat64.go#L448: x44, x43 = bits.Mul64(x1, arg1[3])
p224_fiat64.go#L451: x46, x45 = bits.Mul64(x1, arg1[2])
p224_fiat64.go#L454: x48, x47 = bits.Mul64(x1, arg1[1])
p224_fiat64.go#L457: x50, x49 = bits.Mul64(x1, arg1[0])
p224_fiat64.go#L484: _, x68 = bits.Mul64(x58, 0xffffffffffffffff)
p224_fiat64.go#L487: x71, x70 = bits.Mul64(x68, 0xffffffff)
p224_fiat64.go#L490: x73, x72 = bits.Mul64(x68, 0xffffffffffffffff)
p224_fiat64.go#L493: x75, x74 = bits.Mul64(x68, 0xffffffff00000000)
p224_fiat64.go#L518: x93, x92 = bits.Mul64(x2, arg1[3])
p224_fiat64.go#L521: x95, x94 = bits.Mul64(x2, arg1[2])
p224_fiat64.go#L524: x97, x96 = bits.Mul64(x2, arg1[1])
p224_fiat64.go#L527: x99, x98 = bits.Mul64(x2, arg1[0])
p224_fiat64.go#L554: _, x117 = bits.Mul64(x107, 0xffffffffffffffff)
p224_fiat64.go#L557: x120, x119 = bits.Mul64(x117, 0xffffffff)
p224_fiat64.go#L560: x122, x121 = bits.Mul64(x117, 0xffffffffffffffff)
p224_fiat64.go#L563: x124, x123 = bits.Mul64(x117, 0xffffffff00000000)
p224_fiat64.go#L588: x142, x141 = bits.Mul64(x3, arg1[3])
p224_fiat64.go#L591: x144, x143 = bits.Mul64(x3, arg1[2])
p224_fiat64.go#L594: x146, x145 = bits.Mul64(x3, arg1[1])
p224_fiat64.go#L597: x148, x147 = bits.Mul64(x3, arg1[0])
p224_fiat64.go#L624: _, x166 = bits.Mul64(x156, 0xffffffffffffffff)
p224_fiat64.go#L627: x169, x168 = bits.Mul64(x166, 0xffffffff)
p224_fiat64.go#L630: x171, x170 = bits.Mul64(x166, 0xffffffffffffffff)
p224_fiat64.go#L633: x173, x172 = bits.Mul64(x166, 0xffffffff00000000)
p224_fiat64.go#L799: _, x2 = bits.Mul64(x1, 0xffffffffffffffff)
p224_fiat64.go#L802: x5, x4 = bits.Mul64(x2, 0xffffffff)
p224_fiat64.go#L805: x7, x6 = bits.Mul64(x2, 0xffffffffffffffff)
p224_fiat64.go#L808: x9, x8 = bits.Mul64(x2, 0xffffffff00000000)
p224_fiat64.go#L836: _, x28 = bits.Mul64(x22, 0xffffffffffffffff)
p224_fiat64.go#L839: x31, x30 = bits.Mul64(x28, 0xffffffff)
p224_fiat64.go#L842: x33, x32 = bits.Mul64(x28, 0xffffffffffffffff)
p224_fiat64.go#L845: x35, x34 = bits.Mul64(x28, 0xffffffff00000000)
p224_fiat64.go#L873: _, x54 = bits.Mul64(x48, 0xffffffffffffffff)
p224_fiat64.go#L876: x57, x56 = bits.Mul64(x54, 0xffffffff)
p224_fiat64.go#L879: x59, x58 = bits.Mul64(x54, 0xffffffffffffffff)
p224_fiat64.go#L882: x61, x60 = bits.Mul64(x54, 0xffffffff00000000)
p224_fiat64.go#L910: _, x80 = bits.Mul64(x74, 0xffffffffffffffff)
p224_fiat64.go#L913: x83, x82 = bits.Mul64(x80, 0xffffffff)
p224_fiat64.go#L916: x85, x84 = bits.Mul64(x80, 0xffffffffffffffff)
p224_fiat64.go#L919: x87, x86 = bits.Mul64(x80, 0xffffffff00000000)
p224_fiat64.go#L981: x6, x5 = bits.Mul64(x4, 0xffffffff)
p224_fiat64.go#L984: x8, x7 = bits.Mul64(x4, 0xfffffffe00000000)
p224_fiat64.go#L987: x10, x9 = bits.Mul64(x4, 0xffffffff00000000)
p224_fiat64.go#L990: x12, x11 = bits.Mul64(x4, 0xffffffff00000001)
p224_fiat64.go#L1001: _, x19 = bits.Mul64(x11, 0xffffffffffffffff)
p224_fiat64.go#L1004: x22, x21 = bits.Mul64(x19, 0xffffffff)
p224_fiat64.go#L1007: x24, x23 = bits.Mul64(x19, 0xffffffffffffffff)
p224_fiat64.go#L1010: x26, x25 = bits.Mul64(x19, 0xffffffff00000000)
p224_fiat64.go#L1030: x40, x39 = bits.Mul64(x1, 0xffffffff)
p224_fiat64.go#L1033: x42, x41 = bits.Mul64(x1, 0xfffffffe00000000)
p224_fiat64.go#L1036: x44, x43 = bits.Mul64(x1, 0xffffffff00000000)
p224_fiat64.go#L1039: x46, x45 = bits.Mul64(x1, 0xffffffff00000001)
p224_fiat64.go#L1062: _, x61 = bits.Mul64(x53, 0xffffffffffffffff)
p224_fiat64.go#L1065: x64, x63 = bits.Mul64(x61, 0xffffffff)
p224_fiat64.go#L1068: x66, x65 = bits.Mul64(x61, 0xffffffffffffffff)
p224_fiat64.go#L1071: x68, x67 = bits.Mul64(x61, 0xffffffff00000000)
p224_fiat64.go#L1091: x82, x81 = bits.Mul64(x2, 0xffffffff)
p224_fiat64.go#L1094: x84, x83 = bits.Mul64(x2, 0xfffffffe00000000)
p224_fiat64.go#L1097: x86, x85 = bits.Mul64(x2, 0xffffffff00000000)
p224_fiat64.go#L1100: x88, x87 = bits.Mul64(x2, 0xffffffff00000001)
p224_fiat64.go#L1123: _, x103 = bits.Mul64(x95, 0xffffffffffffffff)
p224_fiat64.go#L1126: x106, x105 = bits.Mul64(x103, 0xffffffff)
p224_fiat64.go#L1129: x108, x107 = bits.Mul64(x103, 0xffffffffffffffff)
p224_fiat64.go#L1132: x110, x109 = bits.Mul64(x103, 0xffffffff00000000)
p224_fiat64.go#L1152: x124, x123 = bits.Mul64(x3, 0xffffffff)
p224_fiat64.go#L1155: x126, x125 = bits.Mul64(x3, 0xfffffffe00000000)
p224_fiat64.go#L1158: x128, x127 = bits.Mul64(x3, 0xffffffff00000000)
p224_fiat64.go#L1161: x130, x129 = bits.Mul64(x3, 0xffffffff00000001)
p224_fiat64.go#L1184: _, x145 = bits.Mul64(x137, 0xffffffffffffffff)
p224_fiat64.go#L1187: x148, x147 = bits.Mul64(x145, 0xffffffff)
p224_fiat64.go#L1190: x150, x149 = bits.Mul64(x145, 0xffffffffffffffff)
p224_fiat64.go#L1193: x152, x151 = bits.Mul64(x145, 0xffffffff00000000)
p384_fiat64.go#L91: x8, x7 = bits.Mul64(x6, arg2[5])
p384_fiat64.go#L94: x10, x9 = bits.Mul64(x6, arg2[4])
p384_fiat64.go#L97: x12, x11 = bits.Mul64(x6, arg2[3])
p384_fiat64.go#L100: x14, x13 = bits.Mul64(x6, arg2[2])
p384_fiat64.go#L103: x16, x15 = bits.Mul64(x6, arg2[1])
p384_fiat64.go#L106: x18, x17 = bits.Mul64(x6, arg2[0])
p384_fiat64.go#L124: _, x30 = bits.Mul64(x17, 0x100000001)
p384_fiat64.go#L127: x33, x32 = bits.Mul64(x30, 0xffffffffffffffff)
p384_fiat64.go#L130: x35, x34 = bits.Mul64(x30, 0xffffffffffffffff)
p384_fiat64.go#L133: x37, x36 = bits.Mul64(x30, 0xffffffffffffffff)
p384_fiat64.go#L136: x39, x38 = bits.Mul64(x30, 0xfffffffffffffffe)
p384_fiat64.go#L139: x41, x40 = bits.Mul64(x30, 0xffffffff00000000)
p384_fiat64.go#L142: x43, x42 = bits.Mul64(x30, 0xffffffff)
p384_fiat64.go#L181: x70, x69 = bits.Mul64(x1, arg2[5])
p384_fiat64.go#L184: x72, x71 = bits.Mul64(x1, arg2[4])
p384_fiat64.go#L187: x74, x73 = bits.Mul64(x1, arg2[3])
p384_fiat64.go#L190: x76, x75 = bits.Mul64(x1, arg2[2])
p384_fiat64.go#L193: x78, x77 = bits.Mul64(x1, arg2[1])
p384_fiat64.go#L196: x80, x79 = bits.Mul64(x1, arg2[0])
p384_fiat64.go#L235: _, x106 = bits.Mul64(x92, 0x100000001)
p384_fiat64.go#L238: x109, x108 = bits.Mul64(x106, 0xffffffffffffffff)
p384_fiat64.go#L241: x111, x110 = bits.Mul64(x106, 0xffffffffffffffff)
p384_fiat64.go#L244: x113, x112 = bits.Mul64(x106, 0xffffffffffffffff)
p384_fiat64.go#L247: x115, x114 = bits.Mul64(x106, 0xfffffffffffffffe)
p384_fiat64.go#L250: x117, x116 = bits.Mul64(x106, 0xffffffff00000000)
p384_fiat64.go#L253: x119, x118 = bits.Mul64(x106, 0xffffffff)
p384_fiat64.go#L293: x147, x146 = bits.Mul64(x2, arg2[5])
p384_fiat64.go#L296: x149, x148 = bits.Mul64(x2, arg2[4])
p384_fiat64.go#L299: x151, x150 = bits.Mul64(x2, arg2[3])
p384_fiat64.go#L302: x153, x152 = bits.Mul64(x2, arg2[2])
p384_fiat64.go#L305: x155, x154 = bits.Mul64(x2, arg2[1])
p384_fiat64.go#L308: x157, x156 = bits.Mul64(x2, arg2[0])
p384_fiat64.go#L347: _, x183 = bits.Mul64(x169, 0x100000001)
p384_fiat64.go#L350: x186, x185 = bits.Mul64(x183, 0xffffffffffffffff)
p384_fiat64.go#L353: x188, x187 = bits.Mul64(x183, 0xffffffffffffffff)
p384_fiat64.go#L356: x190, x189 = bits.Mul64(x183, 0xffffffffffffffff)
p384_fiat64.go#L359: x192, x191 = bits.Mul64(x183, 0xfffffffffffffffe)
p384_fiat64.go#L362: x194, x193 = bits.Mul64(x183, 0xffffffff00000000)
p384_fiat64.go#L365: x196, x195 = bits.Mul64(x183, 0xffffffff)
p384_fiat64.go#L405: x224, x223 = bits.Mul64(x3, arg2[5])
p384_fiat64.go#L408: x226, x225 = bits.Mul64(x3, arg2[4])
p384_fiat64.go#L411: x228, x227 = bits.Mul64(x3, arg2[3])
p384_fiat64.go#L414: x230, x229 = bits.Mul64(x3, arg2[2])
p384_fiat64.go#L417: x232, x231 = bits.Mul64(x3, arg2[1])
p384_fiat64.go#L420: x234, x233 = bits.Mul64(x3, arg2[0])
p384_fiat64.go#L459: _, x260 = bits.Mul64(x246, 0x100000001)
p384_fiat64.go#L462: x263, x262 = bits.Mul64(x260, 0xffffffffffffffff)
p384_fiat64.go#L465: x265, x264 = bits.Mul64(x260, 0xffffffffffffffff)
p384_fiat64.go#L468: x267, x266 = bits.Mul64(x260, 0xffffffffffffffff)
p384_fiat64.go#L471: x269, x268 = bits.Mul64(x260, 0xfffffffffffffffe)
p384_fiat64.go#L474: x271, x270 = bits.Mul64(x260, 0xffffffff00000000)
p384_fiat64.go#L477: x273, x272 = bits.Mul64(x260, 0xffffffff)
p384_fiat64.go#L517: x301, x300 = bits.Mul64(x4, arg2[5])
p384_fiat64.go#L520: x303, x302 = bits.Mul64(x4, arg2[4])
p384_fiat64.go#L523: x305, x304 = bits.Mul64(x4, arg2[3])
p384_fiat64.go#L526: x307, x306 = bits.Mul64(x4, arg2[2])
p384_fiat64.go#L529: x309, x308 = bits.Mul64(x4, arg2[1])
p384_fiat64.go#L532: x311, x310 = bits.Mul64(x4, arg2[0])
p384_fiat64.go#L571: _, x337 = bits.Mul64(x323, 0x100000001)
p384_fiat64.go#L574: x340, x339 = bits.Mul64(x337, 0xffffffffffffffff)
p384_fiat64.go#L577: x342, x341 = bits.Mul64(x337, 0xffffffffffffffff)
p384_fiat64.go#L580: x344, x343 = bits.Mul64(x337, 0xffffffffffffffff)
p384_fiat64.go#L583: x346, x345 = bits.Mul64(x337, 0xfffffffffffffffe)
p384_fiat64.go#L586: x348, x347 = bits.Mul64(x337, 0xffffffff00000000)
p384_fiat64.go#L589: x350, x349 = bits.Mul64(x337, 0xffffffff)
p384_fiat64.go#L629: x378, x377 = bits.Mul64(x5, arg2[5])
p384_fiat64.go#L632: x380, x379 = bits.Mul64(x5, arg2[4])
p384_fiat64.go#L635: x382, x381 = bits.Mul64(x5, arg2[3])
p384_fiat64.go#L638: x384, x383 = bits.Mul64(x5, arg2[2])
p384_fiat64.go#L641: x386, x385 = bits.Mul64(x5, arg2[1])
p384_fiat64.go#L644: x388, x387 = bits.Mul64(x5, arg2[0])
p384_fiat64.go#L683: _, x414 = bits.Mul64(x400, 0x100000001)
p384_fiat64.go#L686: x417, x416 = bits.Mul64(x414, 0xffffffffffffffff)
p384_fiat64.go#L689: x419, x418 = bits.Mul64(x414, 0xffffffffffffffff)
p384_fiat64.go#L692: x421, x420 = bits.Mul64(x414, 0xffffffffffffffff)
p384_fiat64.go#L695: x423, x422 = bits.Mul64(x414, 0xfffffffffffffffe)
p384_fiat64.go#L698: x425, x424 = bits.Mul64(x414, 0xffffffff00000000)
p384_fiat64.go#L701: x427, x426 = bits.Mul64(x414, 0xffffffff)
p384_fiat64.go#L796: x8, x7 = bits.Mul64(x6, arg1[5])
p384_fiat64.go#L799: x10, x9 = bits.Mul64(x6, arg1[4])
p384_fiat64.go#L802: x12, x11 = bits.Mul64(x6, arg1[3])
p384_fiat64.go#L805: x14, x13 = bits.Mul64(x6, arg1[2])
p384_fiat64.go#L808: x16, x15 = bits.Mul64(x6, arg1[1])
p384_fiat64.go#L811: x18, x17 = bits.Mul64(x6, arg1[0])
p384_fiat64.go#L829: _, x30 = bits.Mul64(x17, 0x100000001)
p384_fiat64.go#L832: x33, x32 = bits.Mul64(x30, 0xffffffffffffffff)
p384_fiat64.go#L835: x35, x34 = bits.Mul64(x30, 0xffffffffffffffff)
p384_fiat64.go#L838: x37, x36 = bits.Mul64(x30, 0xffffffffffffffff)
p384_fiat64.go#L841: x39, x38 = bits.Mul64(x30, 0xfffffffffffffffe)
p384_fiat64.go#L844: x41, x40 = bits.Mul64(x30, 0xffffffff00000000)
p384_fiat64.go#L847: x43, x42 = bits.Mul64(x30, 0xffffffff)
p384_fiat64.go#L886: x70, x69 = bits.Mul64(x1, arg1[5])
p384_fiat64.go#L889: x72, x71 = bits.Mul64(x1, arg1[4])
p384_fiat64.go#L892: x74, x73 = bits.Mul64(x1, arg1[3])
p384_fiat64.go#L895: x76, x75 = bits.Mul64(x1, arg1[2])
p384_fiat64.go#L898: x78, x77 = bits.Mul64(x1, arg1[1])
p384_fiat64.go#L901: x80, x79 = bits.Mul64(x1, arg1[0])
p384_fiat64.go#L940: _, x106 = bits.Mul64(x92, 0x100000001)
p384_fiat64.go#L943: x109, x108 = bits.Mul64(x106, 0xffffffffffffffff)
p384_fiat64.go#L946: x111, x110 = bits.Mul64(x106, 0xffffffffffffffff)
p384_fiat64.go#L949: x113, x112 = bits.Mul64(x106, 0xffffffffffffffff)
p384_fiat64.go#L952: x115, x114 = bits.Mul64(x106, 0xfffffffffffffffe)
p384_fiat64.go#L955: x117, x116 = bits.Mul64(x106, 0xffffffff00000000)
p384_fiat64.go#L958: x119, x118 = bits.Mul64(x106, 0xffffffff)
p384_fiat64.go#L998: x147, x146 = bits.Mul64(x2, arg1[5])
p384_fiat64.go#L1001: x149, x148 = bits.Mul64(x2, arg1[4])
p384_fiat64.go#L1004: x151, x150 = bits.Mul64(x2, arg1[3])
p384_fiat64.go#L1007: x153, x152 = bits.Mul64(x2, arg1[2])
p384_fiat64.go#L1010: x155, x154 = bits.Mul64(x2, arg1[1])
p384_fiat64.go#L1013: x157, x156 = bits.Mul64(x2, arg1[0])
p384_fiat64.go#L1052: _, x183 = bits.Mul64(x169, 0x100000001)
p384_fiat64.go#L1055: x186, x185 = bits.Mul64(x183, 0xffffffffffffffff)
p384_fiat64.go#L1058: x188, x187 = bits.Mul64(x183, 0xffffffffffffffff)
p384_fiat64.go#L1061: x190, x189 = bits.Mul64(x183, 0xffffffffffffffff)
p384_fiat64.go#L1064: x192, x191 = bits.Mul64(x183, 0xfffffffffffffffe)
p384_fiat64.go#L1067: x194, x193 = bits.Mul64(x183, 0xffffffff00000000)
p384_fiat64.go#L1070: x196, x195 = bits.Mul64(x183, 0xffffffff)
p384_fiat64.go#L1110: x224, x223 = bits.Mul64(x3, arg1[5])
p384_fiat64.go#L1113: x226, x225 = bits.Mul64(x3, arg1[4])
p384_fiat64.go#L1116: x228, x227 = bits.Mul64(x3, arg1[3])
p384_fiat64.go#L1119: x230, x229 = bits.Mul64(x3, arg1[2])
p384_fiat64.go#L1122: x232, x231 = bits.Mul64(x3, arg1[1])
p384_fiat64.go#L1125: x234, x233 = bits.Mul64(x3, arg1[0])
p384_fiat64.go#L1164: _, x260 = bits.Mul64(x246, 0x100000001)
p384_fiat64.go#L1167: x263, x262 = bits.Mul64(x260, 0xffffffffffffffff)
p384_fiat64.go#L1170: x265, x264 = bits.Mul64(x260, 0xffffffffffffffff)
p384_fiat64.go#L1173: x267, x266 = bits.Mul64(x260, 0xffffffffffffffff)
p384_fiat64.go#L1176: x269, x268 = bits.Mul64(x260, 0xfffffffffffffffe)
p384_fiat64.go#L1179: x271, x270 = bits.Mul64(x260, 0xffffffff00000000)
p384_fiat64.go#L1182: x273, x272 = bits.Mul64(x260, 0xffffffff)
p384_fiat64.go#L1222: x301, x300 = bits.Mul64(x4, arg1[5])
p384_fiat64.go#L1225: x303, x302 = bits.Mul64(x4, arg1[4])
p384_fiat64.go#L1228: x305, x304 = bits.Mul64(x4, arg1[3])
p384_fiat64.go#L1231: x307, x306 = bits.Mul64(x4, arg1[2])
p384_fiat64.go#L1234: x309, x308 = bits.Mul64(x4, arg1[1])
p384_fiat64.go#L1237: x311, x310 = bits.Mul64(x4, arg1[0])
p384_fiat64.go#L1276: _, x337 = bits.Mul64(x323, 0x100000001)
p384_fiat64.go#L1279: x340, x339 = bits.Mul64(x337, 0xffffffffffffffff)
p384_fiat64.go#L1282: x342, x341 = bits.Mul64(x337, 0xffffffffffffffff)
p384_fiat64.go#L1285: x344, x343 = bits.Mul64(x337, 0xffffffffffffffff)
p384_fiat64.go#L1288: x346, x345 = bits.Mul64(x337, 0xfffffffffffffffe)
p384_fiat64.go#L1291: x348, x347 = bits.Mul64(x337, 0xffffffff00000000)
p384_fiat64.go#L1294: x350, x349 = bits.Mul64(x337, 0xffffffff)
p384_fiat64.go#L1334: x378, x377 = bits.Mul64(x5, arg1[5])
p384_fiat64.go#L1337: x380, x379 = bits.Mul64(x5, arg1[4])
p384_fiat64.go#L1340: x382, x381 = bits.Mul64(x5, arg1[3])
p384_fiat64.go#L1343: x384, x383 = bits.Mul64(x5, arg1[2])
p384_fiat64.go#L1346: x386, x385 = bits.Mul64(x5, arg1[1])
p384_fiat64.go#L1349: x388, x387 = bits.Mul64(x5, arg1[0])
p384_fiat64.go#L1388: _, x414 = bits.Mul64(x400, 0x100000001)
p384_fiat64.go#L1391: x417, x416 = bits.Mul64(x414, 0xffffffffffffffff)
p384_fiat64.go#L1394: x419, x418 = bits.Mul64(x414, 0xffffffffffffffff)
p384_fiat64.go#L1397: x421, x420 = bits.Mul64(x414, 0xffffffffffffffff)
p384_fiat64.go#L1400: x423, x422 = bits.Mul64(x414, 0xfffffffffffffffe)
p384_fiat64.go#L1403: x425, x424 = bits.Mul64(x414, 0xffffffff00000000)
p384_fiat64.go#L1406: x427, x426 = bits.Mul64(x414, 0xffffffff)
p384_fiat64.go#L1633: _, x2 = bits.Mul64(x1, 0x100000001)
p384_fiat64.go#L1636: x5, x4 = bits.Mul64(x2, 0xffffffffffffffff)
p384_fiat64.go#L1639: x7, x6 = bits.Mul64(x2, 0xffffffffffffffff)
p384_fiat64.go#L1642: x9, x8 = bits.Mul64(x2, 0xffffffffffffffff)
p384_fiat64.go#L1645: x11, x10 = bits.Mul64(x2, 0xfffffffffffffffe)
p384_fiat64.go#L1648: x13, x12 = bits.Mul64(x2, 0xffffffff00000000)
p384_fiat64.go#L1651: x15, x14 = bits.Mul64(x2, 0xffffffff)
p384_fiat64.go#L1706: _, x52 = bits.Mul64(x40, 0x100000001)
p384_fiat64.go#L1709: x55, x54 = bits.Mul64(x52, 0xffffffffffffffff)
p384_fiat64.go#L1712: x57, x56 = bits.Mul64(x52, 0xffffffffffffffff)
p384_fiat64.go#L1715: x59, x58 = bits.Mul64(x52, 0xffffffffffffffff)
p384_fiat64.go#L1718: x61, x60 = bits.Mul64(x52, 0xfffffffffffffffe)
p384_fiat64.go#L1721: x63, x62 = bits.Mul64(x52, 0xffffffff00000000)
p384_fiat64.go#L1724: x65, x64 = bits.Mul64(x52, 0xffffffff)
p384_fiat64.go#L1779: _, x102 = bits.Mul64(x90, 0x100000001)
p384_fiat64.go#L1782: x105, x104 = bits.Mul64(x102, 0xffffffffffffffff)
p384_fiat64.go#L1785: x107, x106 = bits.Mul64(x102, 0xffffffffffffffff)
p384_fiat64.go#L1788: x109, x108 = bits.Mul64(x102, 0xffffffffffffffff)
p384_fiat64.go#L1791: x111, x110 = bits.Mul64(x102, 0xfffffffffffffffe)
p384_fiat64.go#L1794: x113, x112 = bits.Mul64(x102, 0xffffffff00000000)
p384_fiat64.go#L1797: x115, x114 = bits.Mul64(x102, 0xffffffff)
p384_fiat64.go#L1852: _, x152 = bits.Mul64(x140, 0x100000001)
p384_fiat64.go#L1855: x155, x154 = bits.Mul64(x152, 0xffffffffffffffff)
p384_fiat64.go#L1858: x157, x156 = bits.Mul64(x152, 0xffffffffffffffff)
p384_fiat64.go#L1861: x159, x158 = bits.Mul64(x152, 0xffffffffffffffff)
p384_fiat64.go#L1864: x161, x160 = bits.Mul64(x152, 0xfffffffffffffffe)
p384_fiat64.go#L1867: x163, x162 = bits.Mul64(x152, 0xffffffff00000000)
p384_fiat64.go#L1870: x165, x164 = bits.Mul64(x152, 0xffffffff)
p384_fiat64.go#L1925: _, x202 = bits.Mul64(x190, 0x100000001)
p384_fiat64.go#L1928: x205, x204 = bits.Mul64(x202, 0xffffffffffffffff)
p384_fiat64.go#L1931: x207, x206 = bits.Mul64(x202, 0xffffffffffffffff)
p384_fiat64.go#L1934: x209, x208 = bits.Mul64(x202, 0xffffffffffffffff)
p384_fiat64.go#L1937: x211, x210 = bits.Mul64(x202, 0xfffffffffffffffe)
p384_fiat64.go#L1940: x213, x212 = bits.Mul64(x202, 0xffffffff00000000)
p384_fiat64.go#L1943: x215, x214 = bits.Mul64(x202, 0xffffffff)
p384_fiat64.go#L1998: _, x252 = bits.Mul64(x240, 0x100000001)
p384_fiat64.go#L2001: x255, x254 = bits.Mul64(x252, 0xffffffffffffffff)
p384_fiat64.go#L2004: x257, x256 = bits.Mul64(x252, 0xffffffffffffffff)
p384_fiat64.go#L2007: x259, x258 = bits.Mul64(x252, 0xffffffffffffffff)
p384_fiat64.go#L2010: x261, x260 = bits.Mul64(x252, 0xfffffffffffffffe)
p384_fiat64.go#L2013: x263, x262 = bits.Mul64(x252, 0xffffffff00000000)
p384_fiat64.go#L2016: x265, x264 = bits.Mul64(x252, 0xffffffff)
p384_fiat64.go#L2109: x8, x7 = bits.Mul64(x6, 0x200000000)
p384_fiat64.go#L2112: x10, x9 = bits.Mul64(x6, 0xfffffffe00000000)
p384_fiat64.go#L2115: x12, x11 = bits.Mul64(x6, 0x200000000)
p384_fiat64.go#L2118: x14, x13 = bits.Mul64(x6, 0xfffffffe00000001)
p384_fiat64.go#L2132: _, x23 = bits.Mul64(x13, 0x100000001)
p384_fiat64.go#L2135: x26, x25 = bits.Mul64(x23, 0xffffffffffffffff)
p384_fiat64.go#L2138: x28, x27 = bits.Mul64(x23, 0xffffffffffffffff)
p384_fiat64.go#L2141: x30, x29 = bits.Mul64(x23, 0xffffffffffffffff)
p384_fiat64.go#L2144: x32, x31 = bits.Mul64(x23, 0xfffffffffffffffe)
p384_fiat64.go#L2147: x34, x33 = bits.Mul64(x23, 0xffffffff00000000)
p384_fiat64.go#L2150: x36, x35 = bits.Mul64(x23, 0xffffffff)
p384_fiat64.go#L2188: x62, x61 = bits.Mul64(x1, 0x200000000)
p384_fiat64.go#L2191: x64, x63 = bits.Mul64(x1, 0xfffffffe00000000)
p384_fiat64.go#L2194: x66, x65 = bits.Mul64(x1, 0x200000000)
p384_fiat64.go#L2197: x68, x67 = bits.Mul64(x1, 0xfffffffe00000001)
p384_fiat64.go#L2229: _, x89 = bits.Mul64(x77, 0x100000001)
p384_fiat64.go#L2232: x92, x91 = bits.Mul64(x89, 0xffffffffffffffff)
p384_fiat64.go#L2235: x94, x93 = bits.Mul64(x89, 0xffffffffffffffff)
p384_fiat64.go#L2238: x96, x95 = bits.Mul64(x89, 0xffffffffffffffff)
p384_fiat64.go#L2241: x98, x97 = bits.Mul64(x89, 0xfffffffffffffffe)
p384_fiat64.go#L2244: x100, x99 = bits.Mul64(x89, 0xffffffff00000000)
p384_fiat64.go#L2247: x102, x101 = bits.Mul64(x89, 0xffffffff)
p384_fiat64.go#L2285: x128, x127 = bits.Mul64(x2, 0x200000000)
p384_fiat64.go#L2288: x130, x129 = bits.Mul64(x2, 0xfffffffe00000000)
p384_fiat64.go#L2291: x132, x131 = bits.Mul64(x2, 0x200000000)
p384_fiat64.go#L2294: x134, x133 = bits.Mul64(x2, 0xfffffffe00000001)
p384_fiat64.go#L2326: _, x155 = bits.Mul64(x143, 0x100000001)
p384_fiat64.go#L2329: x158, x157 = bits.Mul64(x155, 0xffffffffffffffff)
p384_fiat64.go#L2332: x160, x159 = bits.Mul64(x155, 0xffffffffffffffff)
p384_fiat64.go#L2335: x162, x161 = bits.Mul64(x155, 0xffffffffffffffff)
p384_fiat64.go#L2338: x164, x163 = bits.Mul64(x155, 0xfffffffffffffffe)
p384_fiat64.go#L2341: x166, x165 = bits.Mul64(x155, 0xffffffff00000000)
p384_fiat64.go#L2344: x168, x167 = bits.Mul64(x155, 0xffffffff)
p384_fiat64.go#L2382: x194, x193 = bits.Mul64(x3, 0x200000000)
p384_fiat64.go#L2385: x196, x195 = bits.Mul64(x3, 0xfffffffe00000000)
p384_fiat64.go#L2388: x198, x197 = bits.Mul64(x3, 0x200000000)
p384_fiat64.go#L2391: x200, x199 = bits.Mul64(x3, 0xfffffffe00000001)
p384_fiat64.go#L2423: _, x221 = bits.Mul64(x209, 0x100000001)
p384_fiat64.go#L2426: x224, x223 = bits.Mul64(x221, 0xffffffffffffffff)
p384_fiat64.go#L2429: x226, x225 = bits.Mul64(x221, 0xffffffffffffffff)
p384_fiat64.go#L2432: x228, x227 = bits.Mul64(x221, 0xffffffffffffffff)
p384_fiat64.go#L2435: x230, x229 = bits.Mul64(x221, 0xfffffffffffffffe)
p384_fiat64.go#L2438: x232, x231 = bits.Mul64(x221, 0xffffffff00000000)
p384_fiat64.go#L2441: x234, x233 = bits.Mul64(x221, 0xffffffff)
p384_fiat64.go#L2479: x260, x259 = bits.Mul64(x4, 0x200000000)
p384_fiat64.go#L2482: x262, x261 = bits.Mul64(x4, 0xfffffffe00000000)
p384_fiat64.go#L2485: x264, x263 = bits.Mul64(x4, 0x200000000)
p384_fiat64.go#L2488: x266, x265 = bits.Mul64(x4, 0xfffffffe00000001)
p384_fiat64.go#L2520: _, x287 = bits.Mul64(x275, 0x100000001)
p384_fiat64.go#L2523: x290, x289 = bits.Mul64(x287, 0xffffffffffffffff)
p384_fiat64.go#L2526: x292, x291 = bits.Mul64(x287, 0xffffffffffffffff)
p384_fiat64.go#L2529: x294, x293 = bits.Mul64(x287, 0xffffffffffffffff)
p384_fiat64.go#L2532: x296, x295 = bits.Mul64(x287, 0xfffffffffffffffe)
p384_fiat64.go#L2535: x298, x297 = bits.Mul64(x287, 0xffffffff00000000)
p384_fiat64.go#L2538: x300, x299 = bits.Mul64(x287, 0xffffffff)
p384_fiat64.go#L2576: x326, x325 = bits.Mul64(x5, 0x200000000)
p384_fiat64.go#L2579: x328, x327 = bits.Mul64(x5, 0xfffffffe00000000)
p384_fiat64.go#L2582: x330, x329 = bits.Mul64(x5, 0x200000000)
p384_fiat64.go#L2585: x332, x331 = bits.Mul64(x5, 0xfffffffe00000001)
p384_fiat64.go#L2617: _, x353 = bits.Mul64(x341, 0x100000001)
p384_fiat64.go#L2620: x356, x355 = bits.Mul64(x353, 0xffffffffffffffff)
p384_fiat64.go#L2623: x358, x357 = bits.Mul64(x353, 0xffffffffffffffff)
p384_fiat64.go#L2626: x360, x359 = bits.Mul64(x353, 0xffffffffffffffff)
p384_fiat64.go#L2629: x362, x361 = bits.Mul64(x353, 0xfffffffffffffffe)
p384_fiat64.go#L2632: x364, x363 = bits.Mul64(x353, 0xffffffff00000000)
p384_fiat64.go#L2635: x366, x365 = bits.Mul64(x353, 0xffffffff)
p521_fiat64.go#L94: x11, x10 = bits.Mul64(x9, arg2[8])
p521_fiat64.go#L97: x13, x12 = bits.Mul64(x9, arg2[7])
p521_fiat64.go#L100: x15, x14 = bits.Mul64(x9, arg2[6])
p521_fiat64.go#L103: x17, x16 = bits.Mul64(x9, arg2[5])
p521_fiat64.go#L106: x19, x18 = bits.Mul64(x9, arg2[4])
p521_fiat64.go#L109: x21, x20 = bits.Mul64(x9, arg2[3])
p521_fiat64.go#L112: x23, x22 = bits.Mul64(x9, arg2[2])
p521_fiat64.go#L115: x25, x24 = bits.Mul64(x9, arg2[1])
p521_fiat64.go#L118: x27, x26 = bits.Mul64(x9, arg2[0])
p521_fiat64.go#L146: x46, x45 = bits.Mul64(x26, 0x1ff)
p521_fiat64.go#L149: x48, x47 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L152: x50, x49 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L155: x52, x51 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L158: x54, x53 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L161: x56, x55 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L164: x58, x57 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L167: x60, x59 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L170: x62, x61 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L227: x101, x100 = bits.Mul64(x1, arg2[8])
p521_fiat64.go#L230: x103, x102 = bits.Mul64(x1, arg2[7])
p521_fiat64.go#L233: x105, x104 = bits.Mul64(x1, arg2[6])
p521_fiat64.go#L236: x107, x106 = bits.Mul64(x1, arg2[5])
p521_fiat64.go#L239: x109, x108 = bits.Mul64(x1, arg2[4])
p521_fiat64.go#L242: x111, x110 = bits.Mul64(x1, arg2[3])
p521_fiat64.go#L245: x113, x112 = bits.Mul64(x1, arg2[2])
p521_fiat64.go#L248: x115, x114 = bits.Mul64(x1, arg2[1])
p521_fiat64.go#L251: x117, x116 = bits.Mul64(x1, arg2[0])
p521_fiat64.go#L309: x156, x155 = bits.Mul64(x135, 0x1ff)
p521_fiat64.go#L312: x158, x157 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L315: x160, x159 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L318: x162, x161 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L321: x164, x163 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L324: x166, x165 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L327: x168, x167 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L330: x170, x169 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L333: x172, x171 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L391: x212, x211 = bits.Mul64(x2, arg2[8])
p521_fiat64.go#L394: x214, x213 = bits.Mul64(x2, arg2[7])
p521_fiat64.go#L397: x216, x215 = bits.Mul64(x2, arg2[6])
p521_fiat64.go#L400: x218, x217 = bits.Mul64(x2, arg2[5])
p521_fiat64.go#L403: x220, x219 = bits.Mul64(x2, arg2[4])
p521_fiat64.go#L406: x222, x221 = bits.Mul64(x2, arg2[3])
p521_fiat64.go#L409: x224, x223 = bits.Mul64(x2, arg2[2])
p521_fiat64.go#L412: x226, x225 = bits.Mul64(x2, arg2[1])
p521_fiat64.go#L415: x228, x227 = bits.Mul64(x2, arg2[0])
p521_fiat64.go#L473: x267, x266 = bits.Mul64(x246, 0x1ff)
p521_fiat64.go#L476: x269, x268 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L479: x271, x270 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L482: x273, x272 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L485: x275, x274 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L488: x277, x276 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L491: x279, x278 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L494: x281, x280 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L497: x283, x282 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L555: x323, x322 = bits.Mul64(x3, arg2[8])
p521_fiat64.go#L558: x325, x324 = bits.Mul64(x3, arg2[7])
p521_fiat64.go#L561: x327, x326 = bits.Mul64(x3, arg2[6])
p521_fiat64.go#L564: x329, x328 = bits.Mul64(x3, arg2[5])
p521_fiat64.go#L567: x331, x330 = bits.Mul64(x3, arg2[4])
p521_fiat64.go#L570: x333, x332 = bits.Mul64(x3, arg2[3])
p521_fiat64.go#L573: x335, x334 = bits.Mul64(x3, arg2[2])
p521_fiat64.go#L576: x337, x336 = bits.Mul64(x3, arg2[1])
p521_fiat64.go#L579: x339, x338 = bits.Mul64(x3, arg2[0])
p521_fiat64.go#L637: x378, x377 = bits.Mul64(x357, 0x1ff)
p521_fiat64.go#L640: x380, x379 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L643: x382, x381 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L646: x384, x383 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L649: x386, x385 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L652: x388, x387 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L655: x390, x389 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L658: x392, x391 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L661: x394, x393 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L719: x434, x433 = bits.Mul64(x4, arg2[8])
p521_fiat64.go#L722: x436, x435 = bits.Mul64(x4, arg2[7])
p521_fiat64.go#L725: x438, x437 = bits.Mul64(x4, arg2[6])
p521_fiat64.go#L728: x440, x439 = bits.Mul64(x4, arg2[5])
p521_fiat64.go#L731: x442, x441 = bits.Mul64(x4, arg2[4])
p521_fiat64.go#L734: x444, x443 = bits.Mul64(x4, arg2[3])
p521_fiat64.go#L737: x446, x445 = bits.Mul64(x4, arg2[2])
p521_fiat64.go#L740: x448, x447 = bits.Mul64(x4, arg2[1])
p521_fiat64.go#L743: x450, x449 = bits.Mul64(x4, arg2[0])
p521_fiat64.go#L801: x489, x488 = bits.Mul64(x468, 0x1ff)
p521_fiat64.go#L804: x491, x490 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L807: x493, x492 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L810: x495, x494 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L813: x497, x496 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L816: x499, x498 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L819: x501, x500 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L822: x503, x502 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L825: x505, x504 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L883: x545, x544 = bits.Mul64(x5, arg2[8])
p521_fiat64.go#L886: x547, x546 = bits.Mul64(x5, arg2[7])
p521_fiat64.go#L889: x549, x548 = bits.Mul64(x5, arg2[6])
p521_fiat64.go#L892: x551, x550 = bits.Mul64(x5, arg2[5])
p521_fiat64.go#L895: x553, x552 = bits.Mul64(x5, arg2[4])
p521_fiat64.go#L898: x555, x554 = bits.Mul64(x5, arg2[3])
p521_fiat64.go#L901: x557, x556 = bits.Mul64(x5, arg2[2])
p521_fiat64.go#L904: x559, x558 = bits.Mul64(x5, arg2[1])
p521_fiat64.go#L907: x561, x560 = bits.Mul64(x5, arg2[0])
p521_fiat64.go#L965: x600, x599 = bits.Mul64(x579, 0x1ff)
p521_fiat64.go#L968: x602, x601 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L971: x604, x603 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L974: x606, x605 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L977: x608, x607 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L980: x610, x609 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L983: x612, x611 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L986: x614, x613 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L989: x616, x615 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L1047: x656, x655 = bits.Mul64(x6, arg2[8])
p521_fiat64.go#L1050: x658, x657 = bits.Mul64(x6, arg2[7])
p521_fiat64.go#L1053: x660, x659 = bits.Mul64(x6, arg2[6])
p521_fiat64.go#L1056: x662, x661 = bits.Mul64(x6, arg2[5])
p521_fiat64.go#L1059: x664, x663 = bits.Mul64(x6, arg2[4])
p521_fiat64.go#L1062: x666, x665 = bits.Mul64(x6, arg2[3])
p521_fiat64.go#L1065: x668, x667 = bits.Mul64(x6, arg2[2])
p521_fiat64.go#L1068: x670, x669 = bits.Mul64(x6, arg2[1])
p521_fiat64.go#L1071: x672, x671 = bits.Mul64(x6, arg2[0])
p521_fiat64.go#L1129: x711, x710 = bits.Mul64(x690, 0x1ff)
p521_fiat64.go#L1132: x713, x712 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1135: x715, x714 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1138: x717, x716 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1141: x719, x718 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1144: x721, x720 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1147: x723, x722 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1150: x725, x724 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1153: x727, x726 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L1211: x767, x766 = bits.Mul64(x7, arg2[8])
p521_fiat64.go#L1214: x769, x768 = bits.Mul64(x7, arg2[7])
p521_fiat64.go#L1217: x771, x770 = bits.Mul64(x7, arg2[6])
p521_fiat64.go#L1220: x773, x772 = bits.Mul64(x7, arg2[5])
p521_fiat64.go#L1223: x775, x774 = bits.Mul64(x7, arg2[4])
p521_fiat64.go#L1226: x777, x776 = bits.Mul64(x7, arg2[3])
p521_fiat64.go#L1229: x779, x778 = bits.Mul64(x7, arg2[2])
p521_fiat64.go#L1232: x781, x780 = bits.Mul64(x7, arg2[1])
p521_fiat64.go#L1235: x783, x782 = bits.Mul64(x7, arg2[0])
p521_fiat64.go#L1293: x822, x821 = bits.Mul64(x801, 0x1ff)
p521_fiat64.go#L1296: x824, x823 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1299: x826, x825 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1302: x828, x827 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1305: x830, x829 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1308: x832, x831 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1311: x834, x833 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1314: x836, x835 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1317: x838, x837 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L1375: x878, x877 = bits.Mul64(x8, arg2[8])
p521_fiat64.go#L1378: x880, x879 = bits.Mul64(x8, arg2[7])
p521_fiat64.go#L1381: x882, x881 = bits.Mul64(x8, arg2[6])
p521_fiat64.go#L1384: x884, x883 = bits.Mul64(x8, arg2[5])
p521_fiat64.go#L1387: x886, x885 = bits.Mul64(x8, arg2[4])
p521_fiat64.go#L1390: x888, x887 = bits.Mul64(x8, arg2[3])
p521_fiat64.go#L1393: x890, x889 = bits.Mul64(x8, arg2[2])
p521_fiat64.go#L1396: x892, x891 = bits.Mul64(x8, arg2[1])
p521_fiat64.go#L1399: x894, x893 = bits.Mul64(x8, arg2[0])
p521_fiat64.go#L1457: x933, x932 = bits.Mul64(x912, 0x1ff)
p521_fiat64.go#L1460: x935, x934 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1463: x937, x936 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1466: x939, x938 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1469: x941, x940 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1472: x943, x942 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1475: x945, x944 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1478: x947, x946 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1481: x949, x948 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L1615: x11, x10 = bits.Mul64(x9, arg1[8])
p521_fiat64.go#L1618: x13, x12 = bits.Mul64(x9, arg1[7])
p521_fiat64.go#L1621: x15, x14 = bits.Mul64(x9, arg1[6])
p521_fiat64.go#L1624: x17, x16 = bits.Mul64(x9, arg1[5])
p521_fiat64.go#L1627: x19, x18 = bits.Mul64(x9, arg1[4])
p521_fiat64.go#L1630: x21, x20 = bits.Mul64(x9, arg1[3])
p521_fiat64.go#L1633: x23, x22 = bits.Mul64(x9, arg1[2])
p521_fiat64.go#L1636: x25, x24 = bits.Mul64(x9, arg1[1])
p521_fiat64.go#L1639: x27, x26 = bits.Mul64(x9, arg1[0])
p521_fiat64.go#L1667: x46, x45 = bits.Mul64(x26, 0x1ff)
p521_fiat64.go#L1670: x48, x47 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1673: x50, x49 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1676: x52, x51 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1679: x54, x53 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1682: x56, x55 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1685: x58, x57 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1688: x60, x59 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1691: x62, x61 = bits.Mul64(x26, 0xffffffffffffffff)
p521_fiat64.go#L1748: x101, x100 = bits.Mul64(x1, arg1[8])
p521_fiat64.go#L1751: x103, x102 = bits.Mul64(x1, arg1[7])
p521_fiat64.go#L1754: x105, x104 = bits.Mul64(x1, arg1[6])
p521_fiat64.go#L1757: x107, x106 = bits.Mul64(x1, arg1[5])
p521_fiat64.go#L1760: x109, x108 = bits.Mul64(x1, arg1[4])
p521_fiat64.go#L1763: x111, x110 = bits.Mul64(x1, arg1[3])
p521_fiat64.go#L1766: x113, x112 = bits.Mul64(x1, arg1[2])
p521_fiat64.go#L1769: x115, x114 = bits.Mul64(x1, arg1[1])
p521_fiat64.go#L1772: x117, x116 = bits.Mul64(x1, arg1[0])
p521_fiat64.go#L1830: x156, x155 = bits.Mul64(x135, 0x1ff)
p521_fiat64.go#L1833: x158, x157 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1836: x160, x159 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1839: x162, x161 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1842: x164, x163 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1845: x166, x165 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1848: x168, x167 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1851: x170, x169 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1854: x172, x171 = bits.Mul64(x135, 0xffffffffffffffff)
p521_fiat64.go#L1912: x212, x211 = bits.Mul64(x2, arg1[8])
p521_fiat64.go#L1915: x214, x213 = bits.Mul64(x2, arg1[7])
p521_fiat64.go#L1918: x216, x215 = bits.Mul64(x2, arg1[6])
p521_fiat64.go#L1921: x218, x217 = bits.Mul64(x2, arg1[5])
p521_fiat64.go#L1924: x220, x219 = bits.Mul64(x2, arg1[4])
p521_fiat64.go#L1927: x222, x221 = bits.Mul64(x2, arg1[3])
p521_fiat64.go#L1930: x224, x223 = bits.Mul64(x2, arg1[2])
p521_fiat64.go#L1933: x226, x225 = bits.Mul64(x2, arg1[1])
p521_fiat64.go#L1936: x228, x227 = bits.Mul64(x2, arg1[0])
p521_fiat64.go#L1994: x267, x266 = bits.Mul64(x246, 0x1ff)
p521_fiat64.go#L1997: x269, x268 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2000: x271, x270 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2003: x273, x272 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2006: x275, x274 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2009: x277, x276 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2012: x279, x278 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2015: x281, x280 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2018: x283, x282 = bits.Mul64(x246, 0xffffffffffffffff)
p521_fiat64.go#L2076: x323, x322 = bits.Mul64(x3, arg1[8])
p521_fiat64.go#L2079: x325, x324 = bits.Mul64(x3, arg1[7])
p521_fiat64.go#L2082: x327, x326 = bits.Mul64(x3, arg1[6])
p521_fiat64.go#L2085: x329, x328 = bits.Mul64(x3, arg1[5])
p521_fiat64.go#L2088: x331, x330 = bits.Mul64(x3, arg1[4])
p521_fiat64.go#L2091: x333, x332 = bits.Mul64(x3, arg1[3])
p521_fiat64.go#L2094: x335, x334 = bits.Mul64(x3, arg1[2])
p521_fiat64.go#L2097: x337, x336 = bits.Mul64(x3, arg1[1])
p521_fiat64.go#L2100: x339, x338 = bits.Mul64(x3, arg1[0])
p521_fiat64.go#L2158: x378, x377 = bits.Mul64(x357, 0x1ff)
p521_fiat64.go#L2161: x380, x379 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2164: x382, x381 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2167: x384, x383 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2170: x386, x385 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2173: x388, x387 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2176: x390, x389 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2179: x392, x391 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2182: x394, x393 = bits.Mul64(x357, 0xffffffffffffffff)
p521_fiat64.go#L2240: x434, x433 = bits.Mul64(x4, arg1[8])
p521_fiat64.go#L2243: x436, x435 = bits.Mul64(x4, arg1[7])
p521_fiat64.go#L2246: x438, x437 = bits.Mul64(x4, arg1[6])
p521_fiat64.go#L2249: x440, x439 = bits.Mul64(x4, arg1[5])
p521_fiat64.go#L2252: x442, x441 = bits.Mul64(x4, arg1[4])
p521_fiat64.go#L2255: x444, x443 = bits.Mul64(x4, arg1[3])
p521_fiat64.go#L2258: x446, x445 = bits.Mul64(x4, arg1[2])
p521_fiat64.go#L2261: x448, x447 = bits.Mul64(x4, arg1[1])
p521_fiat64.go#L2264: x450, x449 = bits.Mul64(x4, arg1[0])
p521_fiat64.go#L2322: x489, x488 = bits.Mul64(x468, 0x1ff)
p521_fiat64.go#L2325: x491, x490 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2328: x493, x492 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2331: x495, x494 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2334: x497, x496 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2337: x499, x498 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2340: x501, x500 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2343: x503, x502 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2346: x505, x504 = bits.Mul64(x468, 0xffffffffffffffff)
p521_fiat64.go#L2404: x545, x544 = bits.Mul64(x5, arg1[8])
p521_fiat64.go#L2407: x547, x546 = bits.Mul64(x5, arg1[7])
p521_fiat64.go#L2410: x549, x548 = bits.Mul64(x5, arg1[6])
p521_fiat64.go#L2413: x551, x550 = bits.Mul64(x5, arg1[5])
p521_fiat64.go#L2416: x553, x552 = bits.Mul64(x5, arg1[4])
p521_fiat64.go#L2419: x555, x554 = bits.Mul64(x5, arg1[3])
p521_fiat64.go#L2422: x557, x556 = bits.Mul64(x5, arg1[2])
p521_fiat64.go#L2425: x559, x558 = bits.Mul64(x5, arg1[1])
p521_fiat64.go#L2428: x561, x560 = bits.Mul64(x5, arg1[0])
p521_fiat64.go#L2486: x600, x599 = bits.Mul64(x579, 0x1ff)
p521_fiat64.go#L2489: x602, x601 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2492: x604, x603 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2495: x606, x605 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2498: x608, x607 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2501: x610, x609 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2504: x612, x611 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2507: x614, x613 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2510: x616, x615 = bits.Mul64(x579, 0xffffffffffffffff)
p521_fiat64.go#L2568: x656, x655 = bits.Mul64(x6, arg1[8])
p521_fiat64.go#L2571: x658, x657 = bits.Mul64(x6, arg1[7])
p521_fiat64.go#L2574: x660, x659 = bits.Mul64(x6, arg1[6])
p521_fiat64.go#L2577: x662, x661 = bits.Mul64(x6, arg1[5])
p521_fiat64.go#L2580: x664, x663 = bits.Mul64(x6, arg1[4])
p521_fiat64.go#L2583: x666, x665 = bits.Mul64(x6, arg1[3])
p521_fiat64.go#L2586: x668, x667 = bits.Mul64(x6, arg1[2])
p521_fiat64.go#L2589: x670, x669 = bits.Mul64(x6, arg1[1])
p521_fiat64.go#L2592: x672, x671 = bits.Mul64(x6, arg1[0])
p521_fiat64.go#L2650: x711, x710 = bits.Mul64(x690, 0x1ff)
p521_fiat64.go#L2653: x713, x712 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2656: x715, x714 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2659: x717, x716 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2662: x719, x718 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2665: x721, x720 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2668: x723, x722 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2671: x725, x724 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2674: x727, x726 = bits.Mul64(x690, 0xffffffffffffffff)
p521_fiat64.go#L2732: x767, x766 = bits.Mul64(x7, arg1[8])
p521_fiat64.go#L2735: x769, x768 = bits.Mul64(x7, arg1[7])
p521_fiat64.go#L2738: x771, x770 = bits.Mul64(x7, arg1[6])
p521_fiat64.go#L2741: x773, x772 = bits.Mul64(x7, arg1[5])
p521_fiat64.go#L2744: x775, x774 = bits.Mul64(x7, arg1[4])
p521_fiat64.go#L2747: x777, x776 = bits.Mul64(x7, arg1[3])
p521_fiat64.go#L2750: x779, x778 = bits.Mul64(x7, arg1[2])
p521_fiat64.go#L2753: x781, x780 = bits.Mul64(x7, arg1[1])
p521_fiat64.go#L2756: x783, x782 = bits.Mul64(x7, arg1[0])
p521_fiat64.go#L2814: x822, x821 = bits.Mul64(x801, 0x1ff)
p521_fiat64.go#L2817: x824, x823 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2820: x826, x825 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2823: x828, x827 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2826: x830, x829 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2829: x832, x831 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2832: x834, x833 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2835: x836, x835 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2838: x838, x837 = bits.Mul64(x801, 0xffffffffffffffff)
p521_fiat64.go#L2896: x878, x877 = bits.Mul64(x8, arg1[8])
p521_fiat64.go#L2899: x880, x879 = bits.Mul64(x8, arg1[7])
p521_fiat64.go#L2902: x882, x881 = bits.Mul64(x8, arg1[6])
p521_fiat64.go#L2905: x884, x883 = bits.Mul64(x8, arg1[5])
p521_fiat64.go#L2908: x886, x885 = bits.Mul64(x8, arg1[4])
p521_fiat64.go#L2911: x888, x887 = bits.Mul64(x8, arg1[3])
p521_fiat64.go#L2914: x890, x889 = bits.Mul64(x8, arg1[2])
p521_fiat64.go#L2917: x892, x891 = bits.Mul64(x8, arg1[1])
p521_fiat64.go#L2920: x894, x893 = bits.Mul64(x8, arg1[0])
p521_fiat64.go#L2978: x933, x932 = bits.Mul64(x912, 0x1ff)
p521_fiat64.go#L2981: x935, x934 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L2984: x937, x936 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L2987: x939, x938 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L2990: x941, x940 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L2993: x943, x942 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L2996: x945, x944 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L2999: x947, x946 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L3002: x949, x948 = bits.Mul64(x912, 0xffffffffffffffff)
p521_fiat64.go#L3317: x3, x2 = bits.Mul64(x1, 0x1ff)
p521_fiat64.go#L3320: x5, x4 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3323: x7, x6 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3326: x9, x8 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3329: x11, x10 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3332: x13, x12 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3335: x15, x14 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3338: x17, x16 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3341: x19, x18 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L3418: x71, x70 = bits.Mul64(x54, 0x1ff)
p521_fiat64.go#L3421: x73, x72 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3424: x75, x74 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3427: x77, x76 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3430: x79, x78 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3433: x81, x80 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3436: x83, x82 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3439: x85, x84 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3442: x87, x86 = bits.Mul64(x54, 0xffffffffffffffff)
p521_fiat64.go#L3519: x139, x138 = bits.Mul64(x122, 0x1ff)
p521_fiat64.go#L3522: x141, x140 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3525: x143, x142 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3528: x145, x144 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3531: x147, x146 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3534: x149, x148 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3537: x151, x150 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3540: x153, x152 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3543: x155, x154 = bits.Mul64(x122, 0xffffffffffffffff)
p521_fiat64.go#L3620: x207, x206 = bits.Mul64(x190, 0x1ff)
p521_fiat64.go#L3623: x209, x208 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3626: x211, x210 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3629: x213, x212 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3632: x215, x214 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3635: x217, x216 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3638: x219, x218 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3641: x221, x220 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3644: x223, x222 = bits.Mul64(x190, 0xffffffffffffffff)
p521_fiat64.go#L3721: x275, x274 = bits.Mul64(x258, 0x1ff)
p521_fiat64.go#L3724: x277, x276 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3727: x279, x278 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3730: x281, x280 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3733: x283, x282 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3736: x285, x284 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3739: x287, x286 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3742: x289, x288 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3745: x291, x290 = bits.Mul64(x258, 0xffffffffffffffff)
p521_fiat64.go#L3822: x343, x342 = bits.Mul64(x326, 0x1ff)
p521_fiat64.go#L3825: x345, x344 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3828: x347, x346 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3831: x349, x348 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3834: x351, x350 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3837: x353, x352 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3840: x355, x354 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3843: x357, x356 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3846: x359, x358 = bits.Mul64(x326, 0xffffffffffffffff)
p521_fiat64.go#L3923: x411, x410 = bits.Mul64(x394, 0x1ff)
p521_fiat64.go#L3926: x413, x412 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L3929: x415, x414 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L3932: x417, x416 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L3935: x419, x418 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L3938: x421, x420 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L3941: x423, x422 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L3944: x425, x424 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L3947: x427, x426 = bits.Mul64(x394, 0xffffffffffffffff)
p521_fiat64.go#L4024: x479, x478 = bits.Mul64(x462, 0x1ff)
p521_fiat64.go#L4027: x481, x480 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4030: x483, x482 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4033: x485, x484 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4036: x487, x486 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4039: x489, x488 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4042: x491, x490 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4045: x493, x492 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4048: x495, x494 = bits.Mul64(x462, 0xffffffffffffffff)
p521_fiat64.go#L4125: x547, x546 = bits.Mul64(x530, 0x1ff)
p521_fiat64.go#L4128: x549, x548 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4131: x551, x550 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4134: x553, x552 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4137: x555, x554 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4140: x557, x556 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4143: x559, x558 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4146: x561, x560 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4149: x563, x562 = bits.Mul64(x530, 0xffffffffffffffff)
p521_fiat64.go#L4270: x2, x1 = bits.Mul64(arg1[0], 0x400000000000)
p521_fiat64.go#L4273: x4, x3 = bits.Mul64(arg1[1], 0x400000000000)
p521_fiat64.go#L4279: x8, x7 = bits.Mul64(x1, 0x1ff)
p521_fiat64.go#L4282: x10, x9 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4285: x12, x11 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4288: x14, x13 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4291: x16, x15 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4294: x18, x17 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4297: x20, x19 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4300: x22, x21 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4303: x24, x23 = bits.Mul64(x1, 0xffffffffffffffff)
p521_fiat64.go#L4356: x60, x59 = bits.Mul64(arg1[2], 0x400000000000)
p521_fiat64.go#L4380: x76, x75 = bits.Mul64(x43, 0x1ff)
p521_fiat64.go#L4383: x78, x77 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4386: x80, x79 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4389: x82, x81 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4392: x84, x83 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4395: x86, x85 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4398: x88, x87 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4401: x90, x89 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4404: x92, x91 = bits.Mul64(x43, 0xffffffffffffffff)
p521_fiat64.go#L4457: x128, x127 = bits.Mul64(arg1[3], 0x400000000000)
p521_fiat64.go#L4481: x144, x143 = bits.Mul64(x111, 0x1ff)
p521_fiat64.go#L4484: x146, x145 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4487: x148, x147 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4490: x150, x149 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4493: x152, x151 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4496: x154, x153 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4499: x156, x155 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4502: x158, x157 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4505: x160, x159 = bits.Mul64(x111, 0xffffffffffffffff)
p521_fiat64.go#L4558: x196, x195 = bits.Mul64(arg1[4], 0x400000000000)
p521_fiat64.go#L4582: x212, x211 = bits.Mul64(x179, 0x1ff)
p521_fiat64.go#L4585: x214, x213 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4588: x216, x215 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4591: x218, x217 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4594: x220, x219 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4597: x222, x221 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4600: x224, x223 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4603: x226, x225 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4606: x228, x227 = bits.Mul64(x179, 0xffffffffffffffff)
p521_fiat64.go#L4659: x264, x263 = bits.Mul64(arg1[5], 0x400000000000)
p521_fiat64.go#L4683: x280, x279 = bits.Mul64(x247, 0x1ff)
p521_fiat64.go#L4686: x282, x281 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4689: x284, x283 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4692: x286, x285 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4695: x288, x287 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4698: x290, x289 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4701: x292, x291 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4704: x294, x293 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4707: x296, x295 = bits.Mul64(x247, 0xffffffffffffffff)
p521_fiat64.go#L4760: x332, x331 = bits.Mul64(arg1[6], 0x400000000000)
p521_fiat64.go#L4784: x348, x347 = bits.Mul64(x315, 0x1ff)
p521_fiat64.go#L4787: x350, x349 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4790: x352, x351 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4793: x354, x353 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4796: x356, x355 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4799: x358, x357 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4802: x360, x359 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4805: x362, x361 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4808: x364, x363 = bits.Mul64(x315, 0xffffffffffffffff)
p521_fiat64.go#L4861: x400, x399 = bits.Mul64(arg1[7], 0x400000000000)
p521_fiat64.go#L4885: x416, x415 = bits.Mul64(x383, 0x1ff)
p521_fiat64.go#L4888: x418, x417 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4891: x420, x419 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4894: x422, x421 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4897: x424, x423 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4900: x426, x425 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4903: x428, x427 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4906: x430, x429 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4909: x432, x431 = bits.Mul64(x383, 0xffffffffffffffff)
p521_fiat64.go#L4962: x468, x467 = bits.Mul64(arg1[8], 0x400000000000)
p521_fiat64.go#L4986: x484, x483 = bits.Mul64(x451, 0x1ff)
p521_fiat64.go#L4989: x486, x485 = bits.Mul64(x451, 0xffffffffffffffff)
p521_fiat64.go#L4992: x488, x487 = bits.Mul64(x451, 0xffffffffffffffff)
p521_fiat64.go#L4995: x490, x489 = bits.Mul64(x451, 0xffffffffffffffff)
p521_fiat64.go#L4998: x492, x491 = bits.Mul64(x451, 0xffffffffffffffff)
p521_fiat64.go#L5001: x494, x493 = bits.Mul64(x451, 0xffffffffffffffff)
p521_fiat64.go#L5004: x496, x495 = bits.Mul64(x451, 0xffffffffffffffff)
p521_fiat64.go#L5007: x498, x497 = bits.Mul64(x451, 0xffffffffffffffff)
p521_fiat64.go#L5010: x500, x499 = bits.Mul64(x451, 0xffffffffffffffff)
hash/fnv
fnv.go#L142: s0, s1 := bits.Mul64(prime128Lower, s[1])
fnv.go#L156: s0, s1 := bits.Mul64(prime128Lower, s[1])
strconv
eisel_lemire.go#L47: xHi, xLo := bits.Mul64(man, detailedPowersOfTen[exp10-detailedPowersOfTenMinExp10][1])
eisel_lemire.go#L51: yHi, yLo := bits.Mul64(man, detailedPowersOfTen[exp10-detailedPowersOfTenMinExp10][0])
eisel_lemire.go#L122: xHi, xLo := bits.Mul64(man, detailedPowersOfTen[exp10-detailedPowersOfTenMinExp10][1])
eisel_lemire.go#L126: yHi, yLo := bits.Mul64(man, detailedPowersOfTen[exp10-detailedPowersOfTenMinExp10][0])
ftoaryu.go#L506: hi, lo := bits.Mul64(uint64(m), pow)
ftoaryu.go#L537: l1, l0 := bits.Mul64(m, pow[0])
ftoaryu.go#L538: h1, h0 := bits.Mul64(m, pow[1])
ftoaryu.go#L564: hi, _ := bits.Mul64(x>>1, 0x89705f4136b4a598) // binary digits of 1e-9
vendor/golang.org/x/crypto/curve25519/internal/field
fe.go#L328: mh, ml := bits.Mul64(a, uint64(b))
fe_generic.go#L17: hi, lo := bits.Mul64(a, b)
fe_generic.go#L23: hi, lo := bits.Mul64(a, b)
vendor/golang.org/x/crypto/internal/poly1305
bits_go1.13.go#L21: return bits.Mul64(x, y)