def lt_l
import bend-collections@1.0.0.0/src/crypto/ed25519/scalar.bend as Scalarimport Base
import bend-collections@1.0.0.0/src/crypto/curve25519/field.bend as F
51# x < L: the carry of x + 2^256 - L is 0
52def lt_l(+x: List<&2, U32>) -> Bool:
53 U32.is_eq(F.cr_out(F.carry(F.addl(x, comp_l()), 0)), 0)