// (r1 + 1) mod m, for r1 in [0, m-1] if r1 == m-1 { r1 = 0 } else { r1++ } } else { // (r1 - 1) % m, for r1 in [0, m-1] if r1 == 0 { r1 = m - 1 } else { r1-- } } } return r1 } // makeHint88 implements MakeHint from FIPS 204 for γ2 = (q - 1) / 88. func makeHint88(ct0, w, cs2 fieldElement) byte { // Same as makeHint32 above. rPlusZ := fieldSub(w, cs2) v1 := highBits88(fieldFromMontgomery(rPlusZ)) r1 := highBits88(fieldFromMontgomery(fieldAdd(rPlusZ, ct0))) return byte(constanttime.ByteEq(v1, r1) ^...

R6, R7 // R6=base R7=len // setup parameters MOVD cnt+112(FP), R8 XC $12, (R1), (R1) // reserved MVC $4, 12(R8), 12(R1) // set chain value MVC $16, (R8), 64(R1) // set initial counter value XC $32, 16(R1), 16(R1) // set hash subkey and tag SLD $3, R7, R12 MOVD R12, 48(R1) // set total AAD length SLD $3, R5, R12 MOVD R12, 56(R1) // set total plaintext/ciphertext length LMG key+8(FP), R8, R9 // R8=base R9=len MVC $16, (R8), 80(R1) // set key CMPBEQ R9, $16, kma MVC $8, 16(R8), 96(R1) CMPBEQ R9, $24, kma...

*   Updated docs for `tf.keras`: New Keras-based
    [get started](http://tensorflow.org/versions/r1.9/get_started), and
    [programmers guide page](http://tensorflow.org/versions/r1.9/programmers_guide/keras).
*   Update `tf.keras` to the Keras 2.1.6 API.
*   Added
    [`tf.keras.layers.CuDNNGRU`](https://www.tensorflow.org/versions/r1.9/api_docs/python/tf/keras/layers/CuDNNGRU)
    and