(v *Element) Bytes() []byte { // This function is outlined to make the allocations inline in the caller // rather than happen on the heap. var out [32]byte return v.bytes(&out) } func (v *Element) bytes(out *[32]byte) []byte { t := *v t.reduce() // Pack five 51-bit limbs into four 64-bit words: // // 255 204 153 102 51 0 // ├──l4──┼──l3──┼──l2──┼──l1──┼──l0──┤ // ├───u3───┼───u2───┼───u1───┼───u0───┤ // 256 192 128 64 0 u0 := t.l1<<51 | t.l0 u1 := t.l2<<(102-64) | t.l1>>(64-51) u2 := t.l3<<(153-128)...