t1) for s := 0; s < 31; s++ { t0.Square(t0) } r.Mul(r, t0) // v = x^(2^127-1)^2 * x v := new(fiat.P224Element).Square(r) v.Mul(v, x) // r = x^(2^127-1) * x r.Mul(r, x) // for i = n-1 down to 1: // w = v^(2^(i-1)) // if w == -1 then: // v <- v*GG[n-i] // r <- r*GG[n-i-1] var p224MinusOne = new(fiat.P224Element).Sub( new(fiat.P224Element), new(fiat.P224Element).One()) for i := 96 - 1; i >= 1; i-- { w := new(fiat.P224Element).Set(v) for j := 0; j < i-1; j++ { w.Square(w) } cond := w.Equal(p224MinusOne)...