//	x64       = x32 << 32 + x32
	//	x65       = 2*x64 + 1
	//	x129      = x65 << 64 + x64
	//	x130      = 2*x129 + 1
	//	x259      = x130 << 129 + x129
	//	x260      = 2*x259 + 1
	//	x519      = x260 << 259 + x259
	//	return      x519 << 2 + 1
	//

	var z = new(P521Element).Set(e)
	var t0 = new(P521Element)

	z.Square(x)
	z.Mul(x, z)
	t0.Square(z)
	for s := 1; s < 2; s++ {
		t0.Square(t0)
	}
	z.Mul(z, t0)

	var x508 uint64
	var x509 uint64
	x508, x509 = bits.Add64(x503, x500, uint64(p521Uint1(x507)))
	var x510 uint64
	var x511 uint64
	x510, x511 = bits.Add64(x501, x498, uint64(p521Uint1(x509)))
	var x512 uint64
	var x513 uint64
	x512, x513 = bits.Add64(x499, x496, uint64(p521Uint1(x511)))
	var x514 uint64
	var x515 uint64
	x514, x515 = bits.Add64(x497, x494, uint64(p521Uint1(x513)))

    X503,
    X504,
    X505,
    X506,
    X507,
    X508,
    X509,
    X510,
    X511,
    X512,
    X513,
    X514,
    X515,
    X516,
    X517,
    X518,
    X519,
    X520,
    X521,
    X522,
    X523,
    X524,
    X525,
    X526,
    X527,
    X528,
    X529,
    X530,
    X531,
    X532,
    X533,
    X534,
    X535,

    X503,
    X504,
    X505,
    X506,
    X507,
    X508,
    X509,
    X510,
    X511,
    X512,
    X513,
    X514,
    X515,
    X516,
    X517,
    X518,
    X519,
    X520,
    X521,
    X522,
    X523,
    X524,
    X525,
    X526,
    X527,
    X528,
    X529,
    X530,
    X531,
    X532,
    X533,
    X534,
    X535,

	var x50 uint64
	var x51 uint64
	x50, x51 = bits.Add64(x37, x34, uint64(p384Uint1(x49)))
	var x52 uint64
	var x53 uint64
	x52, x53 = bits.Add64(x35, x32, uint64(p384Uint1(x51)))
	x54 := (uint64(p384Uint1(x53)) + x33)
	var x56 uint64
	_, x56 = bits.Add64(x17, x42, uint64(0x0))
	var x57 uint64
	var x58 uint64
	x57, x58 = bits.Add64(x19, x44, uint64(p384Uint1(x56)))
	var x59 uint64

	x17, x18 = bits.Add64(x8, x5, uint64(p224Uint1(x16)))
	var x19 uint64
	_, x19 = bits.Mul64(x11, 0xffffffffffffffff)
	var x21 uint64
	var x22 uint64
	x22, x21 = bits.Mul64(x19, 0xffffffff)
	var x23 uint64
	var x24 uint64
	x24, x23 = bits.Mul64(x19, 0xffffffffffffffff)
	var x25 uint64
	var x26 uint64
	x26, x25 = bits.Mul64(x19, 0xffffffff00000000)
	var x27 uint64
	var x28 uint64

	var x46 [10<<20]byte
	var x47 [10<<20]byte
	var x48 [10<<20]byte
	var x49 [10<<20]byte
	var x50 [10<<20]byte
	var x51 [10<<20]byte
	var x52 [10<<20]byte
	var x53 [10<<20]byte
	var x54 [10<<20]byte
	var x55 [10<<20]byte
	var x56 [10<<20]byte
	var x57 [10<<20]byte
	var x58 [10<<20]byte
	var x59 [10<<20]byte
	var x60 [10<<20]byte
	var x61 [10<<20]byte
	var x62 [10<<20]byte
	var x63 [10<<20]byte
	var x64 [10<<20]byte

		}
	}
	return fmt.Errorf("x509: subject with cn=%s is not in the allowed list", subject.CommonName)
}

// DefaultVerifyOptions returns VerifyOptions that use the system root certificates, current time,
// and requires certificates to be valid for client auth (x509.ExtKeyUsageClientAuth)
func DefaultVerifyOptions() x509.VerifyOptions {
	return x509.VerifyOptions{
		KeyUsages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
	}

	if template == nil {
		return nil, errors.New("x509: template can not be nil")
	}
	if issuer == nil {
		return nil, errors.New("x509: issuer can not be nil")
	}
	if (issuer.KeyUsage & KeyUsageCRLSign) == 0 {
		return nil, errors.New("x509: issuer must have the crlSign key usage bit set")
	}
	if len(issuer.SubjectKeyId) == 0 {
		return nil, errors.New("x509: issuer certificate doesn't contain a subject key identifier")

	var x57 uint64
	var x58 uint64
	x57, x58 = bits.Add64(x35, x49, uint64(p256Uint1(x56)))
	var x59 uint64
	var x60 uint64
	x60, x59 = bits.Mul64(x51, 0xffffffff00000001)
	var x61 uint64
	var x62 uint64
	x62, x61 = bits.Mul64(x51, 0xffffffff)
	var x63 uint64
	var x64 uint64
	x64, x63 = bits.Mul64(x51, 0xffffffffffffffff)
	var x65 uint64
	var x66 uint64
	x65, x66 = bits.Add64(x64, x61, uint64(0x0))