def finish

bend-collections-laws-crypto@1.0.0.0 · spec/crypto/curve25519/x25519.bend:129

import Base
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/curve25519/field.bend as FS

129def finish(+p: Nat, st: LSt) -> List<&2, U32>:
130  match st:
131    case LSt{x2, z2, x3, z3, +swap}:
132      encode_u(p, FS.fmul(p, cs_fst(swap, x2, x3), FS.finv(p, cs_fst(swap, z2, z3))))