def add_prog
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/secp256k1/curve.bend as Curveimport Base
57# RCB Algorithm 7 (a = 0). Registers: 0 X1, 1 Y1, 2 Z1, 3 X2, 4 Y2, 5 Z2,
58# 6 b3; the paper's lines, in order, write registers 7..39:
59# t0 = X1 X2 (7) t1 = Y1 Y2 (8) t2 = Z1 Z2 (9)
60# t3 = X1 + Y1 (10) t4 = X2 + Y2 (11) t3 = t3 t4 (12)
61# t4 = t0 + t1 (13) t3 = t3 - t4 (14) t4 = Y1 + Z1 (15)
62# X3 = Y2 + Z2 (16) t4 = t4 X3 (17) X3 = t1 + t2 (18)
63# t4 = t4 - X3 (19) X3 = X1 + Z1 (20) Y3 = X2 + Z2 (21)
64# X3 = X3 Y3 (22) Y3 = t0 + t2 (23) Y3 = X3 - Y3 (24)
65# X3 = t0 + t0 (25) t0 = X3 + t0 (26) t2 = b3 t2 (27)
66# Z3 = t1 + t2 (28) t1 = t1 - t2 (29) Y3 = b3 Y3 (30)
67# X3 = t4 Y3 (31) t2 = t3 t1 (32) X3 = t2 - X3 (33)
68# Y3 = Y3 t0 (34) t1 = t1 Z3 (35) Y3 = t1 + Y3 (36)
69# t0 = t0 t3 (37) Z3 = Z3 t4 (38) Z3 = Z3 + t0 (39)
70# and the result is (X3 : Y3 : Z3) = registers (33 : 36 : 39).
71def add_prog() -> List<&2, SOp>:
72 [SMul{0n, 3n}, SMul{1n, 4n}, SMul{2n, 5n}, SAdd{0n, 1n}, SAdd{3n, 4n},
73 SMul{10n, 11n}, SAdd{7n, 8n}, SSub{12n, 13n}, SAdd{1n, 2n}, SAdd{4n, 5n},
74 SMul{15n, 16n}, SAdd{8n, 9n}, SSub{17n, 18n}, SAdd{0n, 2n}, SAdd{3n, 5n},
75 SMul{20n, 21n}, SAdd{7n, 9n}, SSub{22n, 23n}, SAdd{7n, 7n}, SAdd{25n, 7n},
76 SMul{6n, 9n}, SAdd{8n, 27n}, SSub{8n, 27n}, SMul{6n, 24n}, SMul{19n, 30n},
77 SMul{14n, 29n}, SSub{32n, 31n}, SMul{30n, 26n}, SMul{29n, 28n}, SAdd{35n, 34n},
78 SMul{26n, 14n}, SMul{28n, 19n}, SAdd{38n, 37n}]