Limbs.freeze: def of bend-collections@1.0.0.0
Import: import bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend as Limbs
Lines 107-112 of bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend: https://jend.leeeet.dev/read.txt?path=bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend&start_line=107&end_line=112

import Base

# The low 16 limbs of h mod p, for h below 2p: g = h + 5 has bit 130 set
# exactly when h >= p, and then its low 128 bits are those of h - p.
def freeze(+h: List<&2, U32>) -> List<&2, U32>:
  +g = carry(16n, add(h, [5]), 0)
  +b = U32.shrn(hd0(skip(16n, g)), 2n)
  select(U32.sub(0, b), take(16n, h), take(16n, g))

Uses (10):
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=List
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=U32
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=U32.shrn
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=U32.sub
  https://jend.leeeet.dev/definition.txt?path=bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend&name=add
  https://jend.leeeet.dev/definition.txt?path=bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend&name=carry
  https://jend.leeeet.dev/definition.txt?path=bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend&name=hd0
  https://jend.leeeet.dev/definition.txt?path=bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend&name=select
  https://jend.leeeet.dev/definition.txt?path=bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend&name=skip
  https://jend.leeeet.dev/definition.txt?path=bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend&name=take