p256OrdMul(x, x, t) p256OrdSqr(x, x, 32) p256OrdMul(x, x, t) sqrs := []int{ 6, 5, 4, 5, 5, 4, 3, 3, 5, 9, 6, 2, 5, 6, 5, 4, 5, 5, 3, 10, 2, 5, 5, 3, 7, 6} muls := []*p256OrdElement{ _101111, _111, _11, _1111, _10101, _101, _101, _101, _111, _101111, _1111, _1, _1, _1111, _111, _111, _111, _101, _11, _101111, _11, _11, _11, _1, _10101, _1111} for i, s := range sqrs { p256OrdSqr(x, x, s) p256OrdMul(x, x, muls[i]) } // Montgomery multiplication by R⁻¹, or 1 outside the domain as R⁻¹×R = 1, // converts a Montgomery...