-rwxr-xr-x 1544 lib25519-20240928/crypto_nPbatch/montgomery25519/amd64-avx2-4x1-9l-maax/mont25519_batch.c raw
// 4-way variable base scalar multiplication

#include "fe25519.h"
#include "crypto_uint64_vec4x1.h"
#include "mont25519_batch.h"
#include "crypto_powbatch_inv25519.h"

int crypto_nP_4x1(unsigned char q[4][CRYPTO_BYTES], const unsigned char n[4][CRYPTO_BYTES], const unsigned char p[4][CRYPTO_BYTES]) {

	crypto_uint64_vec4x1 r[9] = {{0}};
	crypto_uint64_vec4x1 t[18] = {{0}};
	crypto_uint64_vec4x1 s[4] = {{0}};	
	fe25519_9l a[8];
	fe25519 b[8],c;

	unsigned char i,j,m[4][CRYPTO_BYTES];

	for (i=0;i<4;++i) {

		for (j=0;j<CRYPTO_BYTES;++j) m[i][j] = n[i][j];
		m[i][CRYPTO_BYTES-1] = m[i][CRYPTO_BYTES-1] & 0x7F;
		m[i][CRYPTO_BYTES-1] = m[i][CRYPTO_BYTES-1] | 0x40;
		m[i][0] = m[i][0] & 0xF8;
	}		
	
	for (i=0;i<4;++i) fe25519_unpack(b+i,(const unsigned char *)(m+i));
	
	for (i=0;i<4;++i) for (j=0;j<4;++j) s[i][j] = b[j].l[i];
	
	for (i=0;i<4;++i) {
	
		fe25519_unpack(&c,(const unsigned char *)(p+i));
	  	fe25519_to_9l(a+i,&c);
	}
	
	for (i=0;i<9;++i) for (j=0;j<4;++j) r[i][j] = a[j].l[i];
	
	mladder_4x1(t,r,s);
		
	for (j=0;j<4;++j) {

		for (i=0;i<9;++i) {

			a[j+0].l[i] = t[i+0*9][j]; 
			a[j+4].l[i] = t[i+1*9][j];
		}
		fe25519_from_9l(&b[j+0],&a[j+0]);
		fe25519_from_9l(&b[j+4],&a[j+4]);
	}
	
	for (i=0;i<4;++i) fe25519_pack((unsigned char *)(m+i),&b[i+4]);

	crypto_powbatch_inv25519((unsigned char *)q,(const unsigned char *)m,4);
	
	for (i=0;i<4;++i) fe25519_unpack(b+i+4,(const unsigned char *)(q+i));	

	for (j=0;j<4;++j) {

		fe25519_mul(&c,&b[j+4],&b[j]); 
		fe25519_pack((unsigned char *)(q+j),&c);
	}

	return 0;
}