def mul_add
import bend-collections@1.0.0.0/src/crypto/ed25519/scalar.bend as Scalarimport Base
import bend-collections@1.0.0.0/src/crypto/curve25519/field.bend as F
import bend-collections@1.0.0.0/src/crypto/curve25519/x25519.bend as X
48def mul_add(+k: List<&2, U32>, +s: List<&2, U32>, r: List<&2, U32>) -> List<&2, U32>:
49 addm(mac(X.bitlen(k), k, s, F.zero()), r)