*p256MontgomeryDomain) { out1[0] = uint64(0x1) out1[1] = 0xffffffff00000000 out1[2] = 0xffffffffffffffff out1[3] = 0xfffffffe } // p256FromMontgomery translates a field element out of the Montgomery domain. // // Preconditions: // // 0 ≤ eval arg1 < m // // Postconditions: // // eval out1 mod m = (eval arg1 * ((2^64)⁻¹ mod m)^4) mod m // 0 ≤ eval out1 < m func p256FromMontgomery(out1 *p256NonMontgomeryDom, arg1 *p256MontgomeryDomain) { x1 := arg1[0] var x2 uint64 var x3 uint64 x3, x2 = bits.Mul64(x1, 0xffffffff00000001)...