def inv_bits
import bend-collections@1.0.0.0/src/crypto/secp256k1/field.bend as Fieldimport Base
import bend-collections@1.0.0.0/src/crypto/secp256k1/limbs.bend as L
95# the bits of p - 2 = 2^256 - 1 - (c + 1): those of c + 1, flipped
96def inv_bits() -> List<&2, Nat>:
97 L.cbits(L.bits(L.norm16([978n, 0n, 1n])))