x2 := ((x1 & arg3) | ((^x1) & arg2))
	*out1 = x2
}

// p224Mul multiplies two field elements in the Montgomery domain.
//
// Preconditions:
//
//	0 ≤ eval arg1 < m
//	0 ≤ eval arg2 < m
//
// Postconditions:
//
//	eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) * eval (from_montgomery arg2)) mod m
//	0 ≤ eval out1 < m

	x2 := ((x1 & arg3) | ((^x1) & arg2))
	*out1 = x2
}

// p521Mul multiplies two field elements in the Montgomery domain.
//
// Preconditions:
//
//	0 ≤ eval arg1 < m
//	0 ≤ eval arg2 < m
//
// Postconditions:
//
//	eval (from_montgomery out1) mod m = (eval (from_montgomery arg1) * eval (from_montgomery arg2)) mod m
//	0 ≤ eval out1 < m

cGV2sAI+H5qPhF65Ag0EV3WABQEQALzM0Cs9Zvd08xOEvbEBj59LrS9d0HVKQ61g
mkNakWC+jR35VD6FXpe6UYAcBLrEbVYfKw9P0p6MhFKAsb570JoznKGzE1rVYUZQ
zhD0RKje35rvkajvEcjGAWMLTjr87pWHeD0389ER64bzORncfa/l+YP56PI+CThb
2wUvTTONGJkPQUpVhH+P256cQL/Y0Fwu4XLerpwN+YKgMQ47raRcydobPeSfMQr9
fVKRyOzFEOrvNpCVDUqi77d0gLDLjHlIlDyOX5554S8XYLb91eYOiFvnu2pTCKii
ExRCSYK29mAQePKlTCCnQxOjbmBbGS8mVIkpQ5vpvXvzpY3JIjMXaDGqWSQSYGXh