#define PL V30 #define PH V31 /* * https://choucroutage.com/Papers/SideChannelAttacks/ctrsa-2011-brown.pdf "Software Implementation of the NIST Elliptic Curves Over Prime Fields" * * A = X₁×Z₂² * B = Y₁×Z₂³ * C = X₂×Z₁²-A * D = Y₂×Z₁³-B * X₃ = D² - 2A×C² - C³ * Y₃ = D×(A×C² - X₃) - B×C³ * Z₃ = Z₁×Z₂×C * * Three-operand formula (adopted): http://www.hyperelliptic.org/EFD/g1p/auto-shortw-jacobian-3.html#addition-add-1998-cmo-2 * Temp storage: T1,T2,U1,H,Z3=X3=Y3,S1,R * * T1 = Z1*Z1 * T2 = Z2*Z2 * U1...