def cs_of
import bend-collections@1.0.0.0/src/crypto/ed25519/point.bend as Pointimport Base
import bend-collections@1.0.0.0/src/crypto/curve25519/field.bend as F
56def cs_of(+d: List<&2, U32>, +xs: List<&2, U32>) -> Cs:
57 Cs{d, F.add(d, d), pow_p14(lit(xs, F.small(2)))}