#define TT0 V11 #define TT1 V12 #define T2 V13 // p256MulAsm Parameters #define X0 V0 #define X1 V1 #define Y0 V2 #define Y1 V3 #define T0 V4 #define T1 V5 #define PL V30 #define PH V31 /* * https://choucroutage.com/Papers/SideChannelAttacks/ctrsa-2011-brown.pdf "Software Implementation of the NIST Elliptic Curves Over Prime Fields" * * A = X₁×Z₂² * B = Y₁×Z₂³ * C = X₂×Z₁²-A * D = Y₂×Z₁³-B * X₃ = D² - 2A×C² - C³ * Y₃ = D×(A×C² - X₃) - B×C³ * Z₃ = Z₁×Z₂×C * * Three-operand formula (adopted): http://www...