38 multiplications and 254 squarings is derived from // https://briansmith.org/ecc-inversion-addition-chains-01#p256_scalar_inversion _1 := new(p256OrdElement) _11 := new(p256OrdElement) _101 := new(p256OrdElement) _111 := new(p256OrdElement) _1111 := new(p256OrdElement) _10101 := new(p256OrdElement) _101111 := new(p256OrdElement) t := new(p256OrdElement) // This code operates in the Montgomery domain where R = 2²⁵⁶ mod n and n is // the order of the scalar field. Elements in the Montgomery domain...