0) _, c2 := bits.Sub(y, x, 0) return not(choice(c1 | c2)) } // Nat represents an arbitrary natural number // // Each Nat has an announced length, which is the number of limbs it has stored. // Operations on this number are allowed to leak this length, but will not leak // any information about the values contained in those limbs. type Nat struct { // limbs is little-endian in base 2^W with W = bits.UintSize. limbs []uint } // preallocTarget is the size in bits of the numbers used to implement the most...