gravityview / GravityView

vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/P2.php

Indentation +40 added lines, -40 removed lines

@@ -1,7 +1,7 @@ 
 <?php
 
 if (class_exists('ParagonIE_Sodium_Core_Curve25519_Ge_P2', false)) {
-    return;
+	return;
 }
 
 /**
@@ -9,46 +9,46 @@ 
  */
 class ParagonIE_Sodium_Core_Curve25519_Ge_P2
 {
-    /**
-     * @var ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public $X;
+	/**
+	 * @var ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public $X;
 
-    /**
-     * @var ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public $Y;
+	/**
+	 * @var ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public $Y;
 
-    /**
-     * @var ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public $Z;
+	/**
+	 * @var ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public $Z;
 
-    /**
-     * ParagonIE_Sodium_Core_Curve25519_Ge_P2 constructor.
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $x
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $y
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $z
-     */
-    public function __construct(
-        ParagonIE_Sodium_Core_Curve25519_Fe $x = null,
-        ParagonIE_Sodium_Core_Curve25519_Fe $y = null,
-        ParagonIE_Sodium_Core_Curve25519_Fe $z = null
-    ) {
-        if ($x === null) {
-            $x = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        }
-        $this->X = $x;
-        if ($y === null) {
-            $y = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        }
-        $this->Y = $y;
-        if ($z === null) {
-            $z = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        }
-        $this->Z = $z;
-    }
+	/**
+	 * ParagonIE_Sodium_Core_Curve25519_Ge_P2 constructor.
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $x
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $y
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $z
+	 */
+	public function __construct(
+		ParagonIE_Sodium_Core_Curve25519_Fe $x = null,
+		ParagonIE_Sodium_Core_Curve25519_Fe $y = null,
+		ParagonIE_Sodium_Core_Curve25519_Fe $z = null
+	) {
+		if ($x === null) {
+			$x = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		}
+		$this->X = $x;
+		if ($y === null) {
+			$y = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		}
+		$this->Y = $y;
+		if ($z === null) {
+			$z = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		}
+		$this->Z = $z;
+	}
 }

Spacing +4 added lines, -4 removed lines

@@ -1,6 +1,6 @@ 
 <?php
 
-if (class_exists('ParagonIE_Sodium_Core_Curve25519_Ge_P2', false)) {
+if ( class_exists( 'ParagonIE_Sodium_Core_Curve25519_Ge_P2', false ) ) {
     return;
 }
 
@@ -38,15 +38,15 @@ 
         ParagonIE_Sodium_Core_Curve25519_Fe $y = null,
         ParagonIE_Sodium_Core_Curve25519_Fe $z = null
     ) {
-        if ($x === null) {
+        if ( $x === null ) {
             $x = new ParagonIE_Sodium_Core_Curve25519_Fe();
         }
         $this->X = $x;
-        if ($y === null) {
+        if ( $y === null ) {
             $y = new ParagonIE_Sodium_Core_Curve25519_Fe();
         }
         $this->Y = $y;
-        if ($z === null) {
+        if ( $z === null ) {
             $z = new ParagonIE_Sodium_Core_Curve25519_Fe();
         }
         $this->Z = $z;

Braces +1 added lines, -2 removed lines

@@ -7,8 +7,7 @@
 /**
  * Class ParagonIE_Sodium_Core_Curve25519_Ge_P2
  */
-class ParagonIE_Sodium_Core_Curve25519_Ge_P2
-{
+class ParagonIE_Sodium_Core_Curve25519_Ge_P2 {
     /**
      * @var ParagonIE_Sodium_Core_Curve25519_Fe
      */

vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/P1p1.php

Indentation +50 added lines, -50 removed lines

@@ -1,64 +1,64 @@
 <?php
 
 if (class_exists('ParagonIE_Sodium_Core_Curve25519_Ge_P1p1', false)) {
-    return;
+	return;
 }
 /**
  * Class ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
  */
 class ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
 {
-    /**
-     * @var ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public $X;
+	/**
+	 * @var ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public $X;
 
-    /**
-     * @var ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public $Y;
+	/**
+	 * @var ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public $Y;
 
-    /**
-     * @var ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public $Z;
+	/**
+	 * @var ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public $Z;
 
-    /**
-     * @var ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public $T;
+	/**
+	 * @var ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public $T;
 
-    /**
-     * ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 constructor.
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $x
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $y
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $z
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $t
-     */
-    public function __construct(
-        ParagonIE_Sodium_Core_Curve25519_Fe $x = null,
-        ParagonIE_Sodium_Core_Curve25519_Fe $y = null,
-        ParagonIE_Sodium_Core_Curve25519_Fe $z = null,
-        ParagonIE_Sodium_Core_Curve25519_Fe $t = null
-    ) {
-        if ($x === null) {
-            $x = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        }
-        $this->X = $x;
-        if ($y === null) {
-            $y = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        }
-        $this->Y = $y;
-        if ($z === null) {
-            $z = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        }
-        $this->Z = $z;
-        if ($t === null) {
-            $t = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        }
-        $this->T = $t;
-    }
+	/**
+	 * ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 constructor.
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $x
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $y
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $z
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $t
+	 */
+	public function __construct(
+		ParagonIE_Sodium_Core_Curve25519_Fe $x = null,
+		ParagonIE_Sodium_Core_Curve25519_Fe $y = null,
+		ParagonIE_Sodium_Core_Curve25519_Fe $z = null,
+		ParagonIE_Sodium_Core_Curve25519_Fe $t = null
+	) {
+		if ($x === null) {
+			$x = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		}
+		$this->X = $x;
+		if ($y === null) {
+			$y = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		}
+		$this->Y = $y;
+		if ($z === null) {
+			$z = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		}
+		$this->Z = $z;
+		if ($t === null) {
+			$t = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		}
+		$this->T = $t;
+	}
 }

Spacing +5 added lines, -5 removed lines

@@ -1,6 +1,6 @@ 
 <?php
 
-if (class_exists('ParagonIE_Sodium_Core_Curve25519_Ge_P1p1', false)) {
+if ( class_exists( 'ParagonIE_Sodium_Core_Curve25519_Ge_P1p1', false ) ) {
     return;
 }
 /**
@@ -44,19 +44,19 @@ 
         ParagonIE_Sodium_Core_Curve25519_Fe $z = null,
         ParagonIE_Sodium_Core_Curve25519_Fe $t = null
     ) {
-        if ($x === null) {
+        if ( $x === null ) {
             $x = new ParagonIE_Sodium_Core_Curve25519_Fe();
         }
         $this->X = $x;
-        if ($y === null) {
+        if ( $y === null ) {
             $y = new ParagonIE_Sodium_Core_Curve25519_Fe();
         }
         $this->Y = $y;
-        if ($z === null) {
+        if ( $z === null ) {
             $z = new ParagonIE_Sodium_Core_Curve25519_Fe();
         }
         $this->Z = $z;
-        if ($t === null) {
+        if ( $t === null ) {
             $t = new ParagonIE_Sodium_Core_Curve25519_Fe();
         }
         $this->T = $t;

Braces +1 added lines, -2 removed lines

@@ -6,8 +6,7 @@
 /**
  * Class ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
  */
-class ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
-{
+class ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 {
     /**
      * @var ParagonIE_Sodium_Core_Curve25519_Fe
      */

vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/Cached.php

Indentation +50 added lines, -50 removed lines

@@ -2,64 +2,64 @@
 
 
 if (class_exists('ParagonIE_Sodium_Core_Curve25519_Ge_Cached', false)) {
-    return;
+	return;
 }
 /**
  * Class ParagonIE_Sodium_Core_Curve25519_Ge_Cached
  */
 class ParagonIE_Sodium_Core_Curve25519_Ge_Cached
 {
-    /**
-     * @var ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public $YplusX;
+	/**
+	 * @var ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public $YplusX;
 
-    /**
-     * @var ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public $YminusX;
+	/**
+	 * @var ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public $YminusX;
 
-    /**
-     * @var ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public $Z;
+	/**
+	 * @var ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public $Z;
 
-    /**
-     * @var ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public $T2d;
+	/**
+	 * @var ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public $T2d;
 
-    /**
-     * ParagonIE_Sodium_Core_Curve25519_Ge_Cached constructor.
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $YplusX
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $YminusX
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $Z
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $T2d
-     */
-    public function __construct(
-        ParagonIE_Sodium_Core_Curve25519_Fe $YplusX = null,
-        ParagonIE_Sodium_Core_Curve25519_Fe $YminusX = null,
-        ParagonIE_Sodium_Core_Curve25519_Fe $Z = null,
-        ParagonIE_Sodium_Core_Curve25519_Fe $T2d = null
-    ) {
-        if ($YplusX === null) {
-            $YplusX = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        }
-        $this->YplusX = $YplusX;
-        if ($YminusX === null) {
-            $YminusX = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        }
-        $this->YminusX = $YminusX;
-        if ($Z === null) {
-            $Z = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        }
-        $this->Z = $Z;
-        if ($T2d === null) {
-            $T2d = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        }
-        $this->T2d = $T2d;
-    }
+	/**
+	 * ParagonIE_Sodium_Core_Curve25519_Ge_Cached constructor.
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $YplusX
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $YminusX
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $Z
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe|null $T2d
+	 */
+	public function __construct(
+		ParagonIE_Sodium_Core_Curve25519_Fe $YplusX = null,
+		ParagonIE_Sodium_Core_Curve25519_Fe $YminusX = null,
+		ParagonIE_Sodium_Core_Curve25519_Fe $Z = null,
+		ParagonIE_Sodium_Core_Curve25519_Fe $T2d = null
+	) {
+		if ($YplusX === null) {
+			$YplusX = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		}
+		$this->YplusX = $YplusX;
+		if ($YminusX === null) {
+			$YminusX = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		}
+		$this->YminusX = $YminusX;
+		if ($Z === null) {
+			$Z = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		}
+		$this->Z = $Z;
+		if ($T2d === null) {
+			$T2d = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		}
+		$this->T2d = $T2d;
+	}
 }

Spacing +5 added lines, -5 removed lines

@@ -1,7 +1,7 @@ 
 <?php
 
 
-if (class_exists('ParagonIE_Sodium_Core_Curve25519_Ge_Cached', false)) {
+if ( class_exists( 'ParagonIE_Sodium_Core_Curve25519_Ge_Cached', false ) ) {
     return;
 }
 /**
@@ -45,19 +45,19 @@ 
         ParagonIE_Sodium_Core_Curve25519_Fe $Z = null,
         ParagonIE_Sodium_Core_Curve25519_Fe $T2d = null
     ) {
-        if ($YplusX === null) {
+        if ( $YplusX === null ) {
             $YplusX = new ParagonIE_Sodium_Core_Curve25519_Fe();
         }
         $this->YplusX = $YplusX;
-        if ($YminusX === null) {
+        if ( $YminusX === null ) {
             $YminusX = new ParagonIE_Sodium_Core_Curve25519_Fe();
         }
         $this->YminusX = $YminusX;
-        if ($Z === null) {
+        if ( $Z === null ) {
             $Z = new ParagonIE_Sodium_Core_Curve25519_Fe();
         }
         $this->Z = $Z;
-        if ($T2d === null) {
+        if ( $T2d === null ) {
             $T2d = new ParagonIE_Sodium_Core_Curve25519_Fe();
         }
         $this->T2d = $T2d;

Braces +1 added lines, -2 removed lines

@@ -7,8 +7,7 @@
 /**
  * Class ParagonIE_Sodium_Core_Curve25519_Ge_Cached
  */
-class ParagonIE_Sodium_Core_Curve25519_Ge_Cached
-{
+class ParagonIE_Sodium_Core_Curve25519_Ge_Cached {
     /**
      * @var ParagonIE_Sodium_Core_Curve25519_Fe
      */

vendor/paragonie/sodium_compat/src/Core/Curve25519/Ge/Precomp.php

Indentation +40 added lines, -40 removed lines

@@ -1,7 +1,7 @@ 
 <?php
 
 if (class_exists('ParagonIE_Sodium_Core_Curve25519_Ge_Precomp', false)) {
-    return;
+	return;
 }
 
 /**
@@ -9,46 +9,46 @@ 
  */
 class ParagonIE_Sodium_Core_Curve25519_Ge_Precomp
 {
-    /**
-     * @var ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public $yplusx;
+	/**
+	 * @var ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public $yplusx;
 
-    /**
-     * @var ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public $yminusx;
+	/**
+	 * @var ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public $yminusx;
 
-    /**
-     * @var ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public $xy2d;
+	/**
+	 * @var ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public $xy2d;
 
-    /**
-     * ParagonIE_Sodium_Core_Curve25519_Ge_Precomp constructor.
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $yplusx
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $yminusx
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $xy2d
-     */
-    public function __construct(
-        ParagonIE_Sodium_Core_Curve25519_Fe $yplusx = null,
-        ParagonIE_Sodium_Core_Curve25519_Fe $yminusx = null,
-        ParagonIE_Sodium_Core_Curve25519_Fe $xy2d = null
-    ) {
-        if ($yplusx === null) {
-            $yplusx = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        }
-        $this->yplusx = $yplusx;
-        if ($yminusx === null) {
-            $yminusx = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        }
-        $this->yminusx = $yminusx;
-        if ($xy2d === null) {
-            $xy2d = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        }
-        $this->xy2d = $xy2d;
-    }
+	/**
+	 * ParagonIE_Sodium_Core_Curve25519_Ge_Precomp constructor.
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $yplusx
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $yminusx
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $xy2d
+	 */
+	public function __construct(
+		ParagonIE_Sodium_Core_Curve25519_Fe $yplusx = null,
+		ParagonIE_Sodium_Core_Curve25519_Fe $yminusx = null,
+		ParagonIE_Sodium_Core_Curve25519_Fe $xy2d = null
+	) {
+		if ($yplusx === null) {
+			$yplusx = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		}
+		$this->yplusx = $yplusx;
+		if ($yminusx === null) {
+			$yminusx = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		}
+		$this->yminusx = $yminusx;
+		if ($xy2d === null) {
+			$xy2d = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		}
+		$this->xy2d = $xy2d;
+	}
 }

Spacing +4 added lines, -4 removed lines

@@ -1,6 +1,6 @@ 
 <?php
 
-if (class_exists('ParagonIE_Sodium_Core_Curve25519_Ge_Precomp', false)) {
+if ( class_exists( 'ParagonIE_Sodium_Core_Curve25519_Ge_Precomp', false ) ) {
     return;
 }
 
@@ -38,15 +38,15 @@ 
         ParagonIE_Sodium_Core_Curve25519_Fe $yminusx = null,
         ParagonIE_Sodium_Core_Curve25519_Fe $xy2d = null
     ) {
-        if ($yplusx === null) {
+        if ( $yplusx === null ) {
             $yplusx = new ParagonIE_Sodium_Core_Curve25519_Fe();
         }
         $this->yplusx = $yplusx;
-        if ($yminusx === null) {
+        if ( $yminusx === null ) {
             $yminusx = new ParagonIE_Sodium_Core_Curve25519_Fe();
         }
         $this->yminusx = $yminusx;
-        if ($xy2d === null) {
+        if ( $xy2d === null ) {
             $xy2d = new ParagonIE_Sodium_Core_Curve25519_Fe();
         }
         $this->xy2d = $xy2d;

Braces +1 added lines, -2 removed lines

@@ -7,8 +7,7 @@
 /**
  * Class ParagonIE_Sodium_Core_Curve25519_Ge_Precomp
  */
-class ParagonIE_Sodium_Core_Curve25519_Ge_Precomp
-{
+class ParagonIE_Sodium_Core_Curve25519_Ge_Precomp {
     /**
      * @var ParagonIE_Sodium_Core_Curve25519_Fe
      */

vendor/paragonie/sodium_compat/src/Core/Curve25519.php

Indentation +3768 added lines, -3768 removed lines

@@ -1,7 +1,7 @@ 
 <?php
 
 if (class_exists('ParagonIE_Sodium_Core_Curve25519', false)) {
-    return;
+	return;
 }
 
 /**
@@ -15,3771 +15,3771 @@ 
  */
 abstract class ParagonIE_Sodium_Core_Curve25519 extends ParagonIE_Sodium_Core_Curve25519_H
 {
-    /**
-     * Get a field element of size 10 with a value of 0
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public static function fe_0()
-    {
-        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
-            array(0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
-        );
-    }
-
-    /**
-     * Get a field element of size 10 with a value of 1
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public static function fe_1()
-    {
-        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
-            array(1, 0, 0, 0, 0, 0, 0, 0, 0, 0)
-        );
-    }
-
-    /**
-     * Add two field elements.
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $g
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     * @psalm-suppress MixedAssignment
-     * @psalm-suppress MixedOperand
-     */
-    public static function fe_add(
-        ParagonIE_Sodium_Core_Curve25519_Fe $f,
-        ParagonIE_Sodium_Core_Curve25519_Fe $g
-    ) {
-        /** @var array<int, int> $arr */
-        $arr = array();
-        for ($i = 0; $i < 10; ++$i) {
-            $arr[$i] = (int) ($f[$i] + $g[$i]);
-        }
-        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($arr);
-    }
-
-    /**
-     * Constant-time conditional move.
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $g
-     * @param int $b
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     * @psalm-suppress MixedAssignment
-     */
-    public static function fe_cmov(
-        ParagonIE_Sodium_Core_Curve25519_Fe $f,
-        ParagonIE_Sodium_Core_Curve25519_Fe $g,
-        $b = 0
-    ) {
-        /** @var array<int, int> $h */
-        $h = array();
-        $b *= -1;
-        for ($i = 0; $i < 10; ++$i) {
-            $x = (($f[$i] ^ $g[$i]) & $b);
-            $h[$i] = ($f[$i]) ^ $x;
-        }
-        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($h);
-    }
-
-    /**
-     * Create a copy of a field element.
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public static function fe_copy(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
-        $h = clone $f;
-        return $h;
-    }
-
-    /**
-     * Give: 32-byte string.
-     * Receive: A field element object to use for internal calculations.
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param string $s
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     * @throws RangeException
-     * @throws TypeError
-     */
-    public static function fe_frombytes($s)
-    {
-        if (self::strlen($s) !== 32) {
-            throw new RangeException('Expected a 32-byte string.');
-        }
-        $h0 = self::load_4($s);
-        $h1 = self::load_3(self::substr($s, 4, 3)) << 6;
-        $h2 = self::load_3(self::substr($s, 7, 3)) << 5;
-        $h3 = self::load_3(self::substr($s, 10, 3)) << 3;
-        $h4 = self::load_3(self::substr($s, 13, 3)) << 2;
-        $h5 = self::load_4(self::substr($s, 16, 4));
-        $h6 = self::load_3(self::substr($s, 20, 3)) << 7;
-        $h7 = self::load_3(self::substr($s, 23, 3)) << 5;
-        $h8 = self::load_3(self::substr($s, 26, 3)) << 4;
-        $h9 = (self::load_3(self::substr($s, 29, 3)) & 8388607) << 2;
-
-        $carry9 = ($h9 + (1 << 24)) >> 25;
-        $h0 += self::mul($carry9, 19, 5);
-        $h9 -= $carry9 << 25;
-        $carry1 = ($h1 + (1 << 24)) >> 25;
-        $h2 += $carry1;
-        $h1 -= $carry1 << 25;
-        $carry3 = ($h3 + (1 << 24)) >> 25;
-        $h4 += $carry3;
-        $h3 -= $carry3 << 25;
-        $carry5 = ($h5 + (1 << 24)) >> 25;
-        $h6 += $carry5;
-        $h5 -= $carry5 << 25;
-        $carry7 = ($h7 + (1 << 24)) >> 25;
-        $h8 += $carry7;
-        $h7 -= $carry7 << 25;
-
-        $carry0 = ($h0 + (1 << 25)) >> 26;
-        $h1 += $carry0;
-        $h0 -= $carry0 << 26;
-        $carry2 = ($h2 + (1 << 25)) >> 26;
-        $h3 += $carry2;
-        $h2 -= $carry2 << 26;
-        $carry4 = ($h4 + (1 << 25)) >> 26;
-        $h5 += $carry4;
-        $h4 -= $carry4 << 26;
-        $carry6 = ($h6 + (1 << 25)) >> 26;
-        $h7 += $carry6;
-        $h6 -= $carry6 << 26;
-        $carry8 = ($h8 + (1 << 25)) >> 26;
-        $h9 += $carry8;
-        $h8 -= $carry8 << 26;
-
-        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
-            array(
-                (int) $h0,
-                (int) $h1,
-                (int) $h2,
-                (int) $h3,
-                (int) $h4,
-                (int) $h5,
-                (int) $h6,
-                (int) $h7,
-                (int) $h8,
-                (int) $h9
-            )
-        );
-    }
-
-    /**
-     * Convert a field element to a byte string.
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $h
-     * @return string
-     */
-    public static function fe_tobytes(ParagonIE_Sodium_Core_Curve25519_Fe $h)
-    {
-        $h0 = (int) $h[0];
-        $h1 = (int) $h[1];
-        $h2 = (int) $h[2];
-        $h3 = (int) $h[3];
-        $h4 = (int) $h[4];
-        $h5 = (int) $h[5];
-        $h6 = (int) $h[6];
-        $h7 = (int) $h[7];
-        $h8 = (int) $h[8];
-        $h9 = (int) $h[9];
-
-        $q = (self::mul($h9, 19, 5) + (1 << 24)) >> 25;
-        $q = ($h0 + $q) >> 26;
-        $q = ($h1 + $q) >> 25;
-        $q = ($h2 + $q) >> 26;
-        $q = ($h3 + $q) >> 25;
-        $q = ($h4 + $q) >> 26;
-        $q = ($h5 + $q) >> 25;
-        $q = ($h6 + $q) >> 26;
-        $q = ($h7 + $q) >> 25;
-        $q = ($h8 + $q) >> 26;
-        $q = ($h9 + $q) >> 25;
-
-        $h0 += self::mul($q, 19, 5);
-
-        $carry0 = $h0 >> 26;
-        $h1 += $carry0;
-        $h0 -= $carry0 << 26;
-        $carry1 = $h1 >> 25;
-        $h2 += $carry1;
-        $h1 -= $carry1 << 25;
-        $carry2 = $h2 >> 26;
-        $h3 += $carry2;
-        $h2 -= $carry2 << 26;
-        $carry3 = $h3 >> 25;
-        $h4 += $carry3;
-        $h3 -= $carry3 << 25;
-        $carry4 = $h4 >> 26;
-        $h5 += $carry4;
-        $h4 -= $carry4 << 26;
-        $carry5 = $h5 >> 25;
-        $h6 += $carry5;
-        $h5 -= $carry5 << 25;
-        $carry6 = $h6 >> 26;
-        $h7 += $carry6;
-        $h6 -= $carry6 << 26;
-        $carry7 = $h7 >> 25;
-        $h8 += $carry7;
-        $h7 -= $carry7 << 25;
-        $carry8 = $h8 >> 26;
-        $h9 += $carry8;
-        $h8 -= $carry8 << 26;
-        $carry9 = $h9 >> 25;
-        $h9 -= $carry9 << 25;
-
-        /**
-         * @var array<int, int>
-         */
-        $s = array(
-            (int) (($h0 >> 0) & 0xff),
-            (int) (($h0 >> 8) & 0xff),
-            (int) (($h0 >> 16) & 0xff),
-            (int) ((($h0 >> 24) | ($h1 << 2)) & 0xff),
-            (int) (($h1 >> 6) & 0xff),
-            (int) (($h1 >> 14) & 0xff),
-            (int) ((($h1 >> 22) | ($h2 << 3)) & 0xff),
-            (int) (($h2 >> 5) & 0xff),
-            (int) (($h2 >> 13) & 0xff),
-            (int) ((($h2 >> 21) | ($h3 << 5)) & 0xff),
-            (int) (($h3 >> 3) & 0xff),
-            (int) (($h3 >> 11) & 0xff),
-            (int) ((($h3 >> 19) | ($h4 << 6)) & 0xff),
-            (int) (($h4 >> 2) & 0xff),
-            (int) (($h4 >> 10) & 0xff),
-            (int) (($h4 >> 18) & 0xff),
-            (int) (($h5 >> 0) & 0xff),
-            (int) (($h5 >> 8) & 0xff),
-            (int) (($h5 >> 16) & 0xff),
-            (int) ((($h5 >> 24) | ($h6 << 1)) & 0xff),
-            (int) (($h6 >> 7) & 0xff),
-            (int) (($h6 >> 15) & 0xff),
-            (int) ((($h6 >> 23) | ($h7 << 3)) & 0xff),
-            (int) (($h7 >> 5) & 0xff),
-            (int) (($h7 >> 13) & 0xff),
-            (int) ((($h7 >> 21) | ($h8 << 4)) & 0xff),
-            (int) (($h8 >> 4) & 0xff),
-            (int) (($h8 >> 12) & 0xff),
-            (int) ((($h8 >> 20) | ($h9 << 6)) & 0xff),
-            (int) (($h9 >> 2) & 0xff),
-            (int) (($h9 >> 10) & 0xff),
-            (int) (($h9 >> 18) & 0xff)
-        );
-        return self::intArrayToString($s);
-    }
-
-    /**
-     * Is a field element negative? (1 = yes, 0 = no. Used in calculations.)
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
-     * @return int
-     * @throws SodiumException
-     * @throws TypeError
-     */
-    public static function fe_isnegative(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
-        $str = self::fe_tobytes($f);
-        return (int) (self::chrToInt($str[0]) & 1);
-    }
-
-    /**
-     * Returns 0 if this field element results in all NUL bytes.
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
-     * @return bool
-     * @throws SodiumException
-     * @throws TypeError
-     */
-    public static function fe_isnonzero(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
-        static $zero;
-        if ($zero === null) {
-            $zero = str_repeat("\x00", 32);
-        }
-        /** @var string $zero */
-        /** @var string $str */
-        $str = self::fe_tobytes($f);
-        return !self::verify_32($str, (string) $zero);
-    }
-
-    /**
-     * Multiply two field elements
-     *
-     * h = f * g
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @security Is multiplication a source of timing leaks? If so, can we do
-     *           anything to prevent that from happening?
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $g
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public static function fe_mul(
-        ParagonIE_Sodium_Core_Curve25519_Fe $f,
-        ParagonIE_Sodium_Core_Curve25519_Fe $g
-    ) {
-        $f0 = $f[0];
-        $f1 = $f[1];
-        $f2 = $f[2];
-        $f3 = $f[3];
-        $f4 = $f[4];
-        $f5 = $f[5];
-        $f6 = $f[6];
-        $f7 = $f[7];
-        $f8 = $f[8];
-        $f9 = $f[9];
-        $g0 = $g[0];
-        $g1 = $g[1];
-        $g2 = $g[2];
-        $g3 = $g[3];
-        $g4 = $g[4];
-        $g5 = $g[5];
-        $g6 = $g[6];
-        $g7 = $g[7];
-        $g8 = $g[8];
-        $g9 = $g[9];
-        $g1_19 = self::mul($g1, 19, 5);
-        $g2_19 = self::mul($g2, 19, 5);
-        $g3_19 = self::mul($g3, 19, 5);
-        $g4_19 = self::mul($g4, 19, 5);
-        $g5_19 = self::mul($g5, 19, 5);
-        $g6_19 = self::mul($g6, 19, 5);
-        $g7_19 = self::mul($g7, 19, 5);
-        $g8_19 = self::mul($g8, 19, 5);
-        $g9_19 = self::mul($g9, 19, 5);
-        $f1_2 = $f1 << 1;
-        $f3_2 = $f3 << 1;
-        $f5_2 = $f5 << 1;
-        $f7_2 = $f7 << 1;
-        $f9_2 = $f9 << 1;
-        $f0g0    = self::mul($f0,    $g0, 26);
-        $f0g1    = self::mul($f0,    $g1, 25);
-        $f0g2    = self::mul($f0,    $g2, 26);
-        $f0g3    = self::mul($f0,    $g3, 25);
-        $f0g4    = self::mul($f0,    $g4, 26);
-        $f0g5    = self::mul($f0,    $g5, 25);
-        $f0g6    = self::mul($f0,    $g6, 26);
-        $f0g7    = self::mul($f0,    $g7, 25);
-        $f0g8    = self::mul($f0,    $g8, 26);
-        $f0g9    = self::mul($f0,    $g9, 26);
-        $f1g0    = self::mul($f1,    $g0, 26);
-        $f1g1_2  = self::mul($f1_2,  $g1, 25);
-        $f1g2    = self::mul($f1,    $g2, 26);
-        $f1g3_2  = self::mul($f1_2,  $g3, 25);
-        $f1g4    = self::mul($f1,    $g4, 26);
-        $f1g5_2  = self::mul($f1_2,  $g5, 25);
-        $f1g6    = self::mul($f1,    $g6, 26);
-        $f1g7_2  = self::mul($f1_2,  $g7, 25);
-        $f1g8    = self::mul($f1,    $g8, 26);
-        $f1g9_38 = self::mul($g9_19, $f1_2, 26);
-        $f2g0    = self::mul($f2,    $g0, 26);
-        $f2g1    = self::mul($f2,    $g1, 25);
-        $f2g2    = self::mul($f2,    $g2, 26);
-        $f2g3    = self::mul($f2,    $g3, 25);
-        $f2g4    = self::mul($f2,    $g4, 26);
-        $f2g5    = self::mul($f2,    $g5, 25);
-        $f2g6    = self::mul($f2,    $g6, 26);
-        $f2g7    = self::mul($f2,    $g7, 25);
-        $f2g8_19 = self::mul($g8_19, $f2, 26);
-        $f2g9_19 = self::mul($g9_19, $f2, 26);
-        $f3g0    = self::mul($f3,    $g0, 26);
-        $f3g1_2  = self::mul($f3_2,  $g1, 25);
-        $f3g2    = self::mul($f3,    $g2, 26);
-        $f3g3_2  = self::mul($f3_2,  $g3, 25);
-        $f3g4    = self::mul($f3,    $g4, 26);
-        $f3g5_2  = self::mul($f3_2,  $g5, 25);
-        $f3g6    = self::mul($f3,    $g6, 26);
-        $f3g7_38 = self::mul($g7_19, $f3_2, 26);
-        $f3g8_19 = self::mul($g8_19, $f3, 25);
-        $f3g9_38 = self::mul($g9_19, $f3_2, 26);
-        $f4g0    = self::mul($f4,    $g0, 26);
-        $f4g1    = self::mul($f4,    $g1, 25);
-        $f4g2    = self::mul($f4,    $g2, 26);
-        $f4g3    = self::mul($f4,    $g3, 25);
-        $f4g4    = self::mul($f4,    $g4, 26);
-        $f4g5    = self::mul($f4,    $g5, 25);
-        $f4g6_19 = self::mul($g6_19, $f4, 26);
-        $f4g7_19 = self::mul($g7_19, $f4, 26);
-        $f4g8_19 = self::mul($g8_19, $f4, 26);
-        $f4g9_19 = self::mul($g9_19, $f4, 26);
-        $f5g0    = self::mul($f5,    $g0, 26);
-        $f5g1_2  = self::mul($f5_2,  $g1, 25);
-        $f5g2    = self::mul($f5,    $g2, 26);
-        $f5g3_2  = self::mul($f5_2,  $g3, 25);
-        $f5g4    = self::mul($f5,    $g4, 26);
-        $f5g5_38 = self::mul($g5_19, $f5_2, 26);
-        $f5g6_19 = self::mul($g6_19, $f5, 25);
-        $f5g7_38 = self::mul($g7_19, $f5_2, 26);
-        $f5g8_19 = self::mul($g8_19, $f5, 25);
-        $f5g9_38 = self::mul($g9_19, $f5_2, 26);
-        $f6g0    = self::mul($f6,    $g0, 26);
-        $f6g1    = self::mul($f6,    $g1, 25);
-        $f6g2    = self::mul($f6,    $g2, 26);
-        $f6g3    = self::mul($f6,    $g3, 25);
-        $f6g4_19 = self::mul($g4_19, $f6, 26);
-        $f6g5_19 = self::mul($g5_19, $f6, 26);
-        $f6g6_19 = self::mul($g6_19, $f6, 26);
-        $f6g7_19 = self::mul($g7_19, $f6, 26);
-        $f6g8_19 = self::mul($g8_19, $f6, 26);
-        $f6g9_19 = self::mul($g9_19, $f6, 26);
-        $f7g0    = self::mul($f7,    $g0, 26);
-        $f7g1_2  = self::mul($f7_2,  $g1, 25);
-        $f7g2    = self::mul($f7,    $g2, 26);
-        $f7g3_38 = self::mul($g3_19, $f7_2, 26);
-        $f7g4_19 = self::mul($g4_19, $f7, 26);
-        $f7g5_38 = self::mul($g5_19, $f7_2, 26);
-        $f7g6_19 = self::mul($g6_19, $f7, 25);
-        $f7g7_38 = self::mul($g7_19, $f7_2, 26);
-        $f7g8_19 = self::mul($g8_19, $f7, 25);
-        $f7g9_38 = self::mul($g9_19,$f7_2, 26);
-        $f8g0    = self::mul($f8,    $g0, 26);
-        $f8g1    = self::mul($f8,    $g1, 25);
-        $f8g2_19 = self::mul($g2_19, $f8, 26);
-        $f8g3_19 = self::mul($g3_19, $f8, 26);
-        $f8g4_19 = self::mul($g4_19, $f8, 26);
-        $f8g5_19 = self::mul($g5_19, $f8, 26);
-        $f8g6_19 = self::mul($g6_19, $f8, 26);
-        $f8g7_19 = self::mul($g7_19, $f8, 26);
-        $f8g8_19 = self::mul($g8_19, $f8, 26);
-        $f8g9_19 = self::mul($g9_19, $f8, 26);
-        $f9g0    = self::mul($f9,    $g0, 26);
-        $f9g1_38 = self::mul($g1_19, $f9_2, 26);
-        $f9g2_19 = self::mul($g2_19, $f9, 25);
-        $f9g3_38 = self::mul($g3_19, $f9_2, 26);
-        $f9g4_19 = self::mul($g4_19, $f9, 25);
-        $f9g5_38 = self::mul($g5_19, $f9_2, 26);
-        $f9g6_19 = self::mul($g6_19, $f9, 25);
-        $f9g7_38 = self::mul($g7_19, $f9_2, 26);
-        $f9g8_19 = self::mul($g8_19, $f9, 25);
-        $f9g9_38 = self::mul($g9_19, $f9_2, 26);
-        $h0 = $f0g0 + $f1g9_38 + $f2g8_19 + $f3g7_38 + $f4g6_19 + $f5g5_38 + $f6g4_19 + $f7g3_38 + $f8g2_19 + $f9g1_38;
-        $h1 = $f0g1 + $f1g0    + $f2g9_19 + $f3g8_19 + $f4g7_19 + $f5g6_19 + $f6g5_19 + $f7g4_19 + $f8g3_19 + $f9g2_19;
-        $h2 = $f0g2 + $f1g1_2  + $f2g0    + $f3g9_38 + $f4g8_19 + $f5g7_38 + $f6g6_19 + $f7g5_38 + $f8g4_19 + $f9g3_38;
-        $h3 = $f0g3 + $f1g2    + $f2g1    + $f3g0    + $f4g9_19 + $f5g8_19 + $f6g7_19 + $f7g6_19 + $f8g5_19 + $f9g4_19;
-        $h4 = $f0g4 + $f1g3_2  + $f2g2    + $f3g1_2  + $f4g0    + $f5g9_38 + $f6g8_19 + $f7g7_38 + $f8g6_19 + $f9g5_38;
-        $h5 = $f0g5 + $f1g4    + $f2g3    + $f3g2    + $f4g1    + $f5g0    + $f6g9_19 + $f7g8_19 + $f8g7_19 + $f9g6_19;
-        $h6 = $f0g6 + $f1g5_2  + $f2g4    + $f3g3_2  + $f4g2    + $f5g1_2  + $f6g0    + $f7g9_38 + $f8g8_19 + $f9g7_38;
-        $h7 = $f0g7 + $f1g6    + $f2g5    + $f3g4    + $f4g3    + $f5g2    + $f6g1    + $f7g0    + $f8g9_19 + $f9g8_19;
-        $h8 = $f0g8 + $f1g7_2  + $f2g6    + $f3g5_2  + $f4g4    + $f5g3_2  + $f6g2    + $f7g1_2  + $f8g0    + $f9g9_38;
-        $h9 = $f0g9 + $f1g8    + $f2g7    + $f3g6    + $f4g5    + $f5g4    + $f6g3    + $f7g2    + $f8g1    + $f9g0   ;
-
-        $carry0 = ($h0 + (1 << 25)) >> 26;
-        $h1 += $carry0;
-        $h0 -= $carry0 << 26;
-        $carry4 = ($h4 + (1 << 25)) >> 26;
-        $h5 += $carry4;
-        $h4 -= $carry4 << 26;
-
-        $carry1 = ($h1 + (1 << 24)) >> 25;
-        $h2 += $carry1;
-        $h1 -= $carry1 << 25;
-        $carry5 = ($h5 + (1 << 24)) >> 25;
-        $h6 += $carry5;
-        $h5 -= $carry5 << 25;
-
-        $carry2 = ($h2 + (1 << 25)) >> 26;
-        $h3 += $carry2;
-        $h2 -= $carry2 << 26;
-        $carry6 = ($h6 + (1 << 25)) >> 26;
-        $h7 += $carry6;
-        $h6 -= $carry6 << 26;
-
-        $carry3 = ($h3 + (1 << 24)) >> 25;
-        $h4 += $carry3;
-        $h3 -= $carry3 << 25;
-        $carry7 = ($h7 + (1 << 24)) >> 25;
-        $h8 += $carry7;
-        $h7 -= $carry7 << 25;
-
-        $carry4 = ($h4 + (1 << 25)) >> 26;
-        $h5 += $carry4;
-        $h4 -= $carry4 << 26;
-        $carry8 = ($h8 + (1 << 25)) >> 26;
-        $h9 += $carry8;
-        $h8 -= $carry8 << 26;
-
-        $carry9 = ($h9 + (1 << 24)) >> 25;
-        $h0 += self::mul($carry9, 19, 5);
-        $h9 -= $carry9 << 25;
-
-        $carry0 = ($h0 + (1 << 25)) >> 26;
-        $h1 += $carry0;
-        $h0 -= $carry0 << 26;
-
-        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
-            array(
-                (int) $h0,
-                (int) $h1,
-                (int) $h2,
-                (int) $h3,
-                (int) $h4,
-                (int) $h5,
-                (int) $h6,
-                (int) $h7,
-                (int) $h8,
-                (int) $h9
-            )
-        );
-    }
-
-    /**
-     * Get the negative values for each piece of the field element.
-     *
-     * h = -f
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     * @psalm-suppress MixedAssignment
-     */
-    public static function fe_neg(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
-        $h = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        for ($i = 0; $i < 10; ++$i) {
-            $h[$i] = -$f[$i];
-        }
-        return $h;
-    }
-
-    /**
-     * Square a field element
-     *
-     * h = f * f
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public static function fe_sq(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
-        $f0 = (int) $f[0];
-        $f1 = (int) $f[1];
-        $f2 = (int) $f[2];
-        $f3 = (int) $f[3];
-        $f4 = (int) $f[4];
-        $f5 = (int) $f[5];
-        $f6 = (int) $f[6];
-        $f7 = (int) $f[7];
-        $f8 = (int) $f[8];
-        $f9 = (int) $f[9];
-
-        $f0_2 = $f0 << 1;
-        $f1_2 = $f1 << 1;
-        $f2_2 = $f2 << 1;
-        $f3_2 = $f3 << 1;
-        $f4_2 = $f4 << 1;
-        $f5_2 = $f5 << 1;
-        $f6_2 = $f6 << 1;
-        $f7_2 = $f7 << 1;
-        $f5_38 = self::mul($f5, 38, 6);
-        $f6_19 = self::mul($f6, 19, 5);
-        $f7_38 = self::mul($f7, 38, 6);
-        $f8_19 = self::mul($f8, 19, 5);
-        $f9_38 = self::mul($f9, 38, 6);
-        $f0f0    = self::mul($f0,    $f0,    26);
-        $f0f1_2  = self::mul($f0_2,  $f1,    26);
-        $f0f2_2  = self::mul($f0_2,  $f2,    26);
-        $f0f3_2  = self::mul($f0_2,  $f3,    26);
-        $f0f4_2  = self::mul($f0_2,  $f4,    26);
-        $f0f5_2  = self::mul($f0_2,  $f5,    26);
-        $f0f6_2  = self::mul($f0_2,  $f6,    26);
-        $f0f7_2  = self::mul($f0_2,  $f7,    26);
-        $f0f8_2  = self::mul($f0_2,  $f8,    26);
-        $f0f9_2  = self::mul($f0_2,  $f9,    26);
-        $f1f1_2  = self::mul($f1_2,  $f1,    26);
-        $f1f2_2  = self::mul($f1_2,  $f2,    26);
-        $f1f3_4  = self::mul($f1_2,  $f3_2,  26);
-        $f1f4_2  = self::mul($f1_2,  $f4,    26);
-        $f1f5_4  = self::mul($f1_2,  $f5_2,  26);
-        $f1f6_2  = self::mul($f1_2,  $f6,    26);
-        $f1f7_4  = self::mul($f1_2,  $f7_2,  26);
-        $f1f8_2  = self::mul($f1_2,  $f8,    26);
-        $f1f9_76 = self::mul($f9_38, $f1_2,  27);
-        $f2f2    = self::mul($f2,    $f2,    27);
-        $f2f3_2  = self::mul($f2_2,  $f3,    27);
-        $f2f4_2  = self::mul($f2_2,  $f4,    27);
-        $f2f5_2  = self::mul($f2_2,  $f5,    27);
-        $f2f6_2  = self::mul($f2_2,  $f6,    27);
-        $f2f7_2  = self::mul($f2_2,  $f7,    27);
-        $f2f8_38 = self::mul($f8_19, $f2_2,  27);
-        $f2f9_38 = self::mul($f9_38, $f2,    26);
-        $f3f3_2  = self::mul($f3_2,  $f3,    26);
-        $f3f4_2  = self::mul($f3_2,  $f4,    26);
-        $f3f5_4  = self::mul($f3_2,  $f5_2,  26);
-        $f3f6_2  = self::mul($f3_2,  $f6,    26);
-        $f3f7_76 = self::mul($f7_38, $f3_2,  26);
-        $f3f8_38 = self::mul($f8_19, $f3_2,  26);
-        $f3f9_76 = self::mul($f9_38, $f3_2,  26);
-        $f4f4    = self::mul($f4,    $f4,    26);
-        $f4f5_2  = self::mul($f4_2,  $f5,    26);
-        $f4f6_38 = self::mul($f6_19, $f4_2,  27);
-        $f4f7_38 = self::mul($f7_38, $f4,    26);
-        $f4f8_38 = self::mul($f8_19, $f4_2,  27);
-        $f4f9_38 = self::mul($f9_38, $f4,    26);
-        $f5f5_38 = self::mul($f5_38, $f5,    26);
-        $f5f6_38 = self::mul($f6_19, $f5_2,  26);
-        $f5f7_76 = self::mul($f7_38, $f5_2,  26);
-        $f5f8_38 = self::mul($f8_19, $f5_2,  26);
-        $f5f9_76 = self::mul($f9_38, $f5_2,  26);
-        $f6f6_19 = self::mul($f6_19, $f6,    26);
-        $f6f7_38 = self::mul($f7_38, $f6,    26);
-        $f6f8_38 = self::mul($f8_19, $f6_2,  27);
-        $f6f9_38 = self::mul($f9_38, $f6,    26);
-        $f7f7_38 = self::mul($f7_38, $f7,    26);
-        $f7f8_38 = self::mul($f8_19, $f7_2,  26);
-        $f7f9_76 = self::mul($f9_38, $f7_2,  26);
-        $f8f8_19 = self::mul($f8_19, $f8,    26);
-        $f8f9_38 = self::mul($f9_38, $f8,    26);
-        $f9f9_38 = self::mul($f9_38, $f9,    26);
-        $h0 = $f0f0   + $f1f9_76 + $f2f8_38 + $f3f7_76 + $f4f6_38 + $f5f5_38;
-        $h1 = $f0f1_2 + $f2f9_38 + $f3f8_38 + $f4f7_38 + $f5f6_38;
-        $h2 = $f0f2_2 + $f1f1_2  + $f3f9_76 + $f4f8_38 + $f5f7_76 + $f6f6_19;
-        $h3 = $f0f3_2 + $f1f2_2  + $f4f9_38 + $f5f8_38 + $f6f7_38;
-        $h4 = $f0f4_2 + $f1f3_4  + $f2f2    + $f5f9_76 + $f6f8_38 + $f7f7_38;
-        $h5 = $f0f5_2 + $f1f4_2  + $f2f3_2  + $f6f9_38 + $f7f8_38;
-        $h6 = $f0f6_2 + $f1f5_4  + $f2f4_2  + $f3f3_2  + $f7f9_76 + $f8f8_19;
-        $h7 = $f0f7_2 + $f1f6_2  + $f2f5_2  + $f3f4_2  + $f8f9_38;
-        $h8 = $f0f8_2 + $f1f7_4  + $f2f6_2  + $f3f5_4  + $f4f4    + $f9f9_38;
-        $h9 = $f0f9_2 + $f1f8_2  + $f2f7_2  + $f3f6_2  + $f4f5_2;
-
-        $carry0 = ($h0 + (1 << 25)) >> 26;
-        $h1 += $carry0;
-        $h0 -= $carry0 << 26;
-        $carry4 = ($h4 + (1 << 25)) >> 26;
-        $h5 += $carry4;
-        $h4 -= $carry4 << 26;
-
-        $carry1 = ($h1 + (1 << 24)) >> 25;
-        $h2 += $carry1;
-        $h1 -= $carry1 << 25;
-        $carry5 = ($h5 + (1 << 24)) >> 25;
-        $h6 += $carry5;
-        $h5 -= $carry5 << 25;
-
-        $carry2 = ($h2 + (1 << 25)) >> 26;
-        $h3 += $carry2;
-        $h2 -= $carry2 << 26;
-        $carry6 = ($h6 + (1 << 25)) >> 26;
-        $h7 += $carry6;
-        $h6 -= $carry6 << 26;
-
-        $carry3 = ($h3 + (1 << 24)) >> 25;
-        $h4 += $carry3;
-        $h3 -= $carry3 << 25;
-        $carry7 = ($h7 + (1 << 24)) >> 25;
-        $h8 += $carry7;
-        $h7 -= $carry7 << 25;
-
-        $carry4 = ($h4 + (1 << 25)) >> 26;
-        $h5 += $carry4;
-        $h4 -= $carry4 << 26;
-        $carry8 = ($h8 + (1 << 25)) >> 26;
-        $h9 += $carry8;
-        $h8 -= $carry8 << 26;
-
-        $carry9 = ($h9 + (1 << 24)) >> 25;
-        $h0 += self::mul($carry9, 19, 5);
-        $h9 -= $carry9 << 25;
-
-        $carry0 = ($h0 + (1 << 25)) >> 26;
-        $h1 += $carry0;
-        $h0 -= $carry0 << 26;
-
-        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
-            array(
-                (int) $h0,
-                (int) $h1,
-                (int) $h2,
-                (int) $h3,
-                (int) $h4,
-                (int) $h5,
-                (int) $h6,
-                (int) $h7,
-                (int) $h8,
-                (int) $h9
-            )
-        );
-    }
-
-
-    /**
-     * Square and double a field element
-     *
-     * h = 2 * f * f
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public static function fe_sq2(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
-        $f0 = (int) $f[0];
-        $f1 = (int) $f[1];
-        $f2 = (int) $f[2];
-        $f3 = (int) $f[3];
-        $f4 = (int) $f[4];
-        $f5 = (int) $f[5];
-        $f6 = (int) $f[6];
-        $f7 = (int) $f[7];
-        $f8 = (int) $f[8];
-        $f9 = (int) $f[9];
-
-        $f0_2 = $f0 << 1;
-        $f1_2 = $f1 << 1;
-        $f2_2 = $f2 << 1;
-        $f3_2 = $f3 << 1;
-        $f4_2 = $f4 << 1;
-        $f5_2 = $f5 << 1;
-        $f6_2 = $f6 << 1;
-        $f7_2 = $f7 << 1;
-        $f5_38 = self::mul($f5, 38, 6); /* 1.959375*2^30 */
-        $f6_19 = self::mul($f6, 19, 5); /* 1.959375*2^30 */
-        $f7_38 = self::mul($f7, 38, 6); /* 1.959375*2^30 */
-        $f8_19 = self::mul($f8, 19, 5); /* 1.959375*2^30 */
-        $f9_38 = self::mul($f9, 38, 6); /* 1.959375*2^30 */
-        $f0f0 = self::mul($f0, $f0, 24);
-        $f0f1_2 = self::mul($f0_2, $f1, 24);
-        $f0f2_2 = self::mul($f0_2, $f2, 24);
-        $f0f3_2 = self::mul($f0_2, $f3, 24);
-        $f0f4_2 = self::mul($f0_2, $f4, 24);
-        $f0f5_2 = self::mul($f0_2, $f5, 24);
-        $f0f6_2 = self::mul($f0_2, $f6, 24);
-        $f0f7_2 = self::mul($f0_2, $f7, 24);
-        $f0f8_2 = self::mul($f0_2, $f8, 24);
-        $f0f9_2 = self::mul($f0_2, $f9, 24);
-        $f1f1_2 = self::mul($f1_2,  $f1, 24);
-        $f1f2_2 = self::mul($f1_2,  $f2, 24);
-        $f1f3_4 = self::mul($f1_2,  $f3_2, 24);
-        $f1f4_2 = self::mul($f1_2,  $f4, 24);
-        $f1f5_4 = self::mul($f1_2,  $f5_2, 24);
-        $f1f6_2 = self::mul($f1_2,  $f6, 24);
-        $f1f7_4 = self::mul($f1_2,  $f7_2, 24);
-        $f1f8_2 = self::mul($f1_2,  $f8, 24);
-        $f1f9_76 = self::mul($f9_38, $f1_2, 24);
-        $f2f2 = self::mul($f2,  $f2, 24);
-        $f2f3_2 = self::mul($f2_2,  $f3, 24);
-        $f2f4_2 = self::mul($f2_2,  $f4, 24);
-        $f2f5_2 = self::mul($f2_2,  $f5, 24);
-        $f2f6_2 = self::mul($f2_2,  $f6, 24);
-        $f2f7_2 = self::mul($f2_2,  $f7, 24);
-        $f2f8_38 = self::mul($f8_19, $f2_2, 25);
-        $f2f9_38 = self::mul($f9_38, $f2, 24);
-        $f3f3_2 = self::mul($f3_2,  $f3, 24);
-        $f3f4_2 = self::mul($f3_2,  $f4, 24);
-        $f3f5_4 = self::mul($f3_2,  $f5_2, 24);
-        $f3f6_2 = self::mul($f3_2,  $f6, 24);
-        $f3f7_76 = self::mul($f7_38, $f3_2, 24);
-        $f3f8_38 = self::mul($f8_19, $f3_2, 24);
-        $f3f9_76 = self::mul($f9_38, $f3_2, 24);
-        $f4f4 = self::mul($f4,  $f4, 24);
-        $f4f5_2 = self::mul($f4_2,  $f5, 24);
-        $f4f6_38 = self::mul($f6_19, $f4_2, 25);
-        $f4f7_38 = self::mul($f7_38, $f4, 24);
-        $f4f8_38 = self::mul($f8_19, $f4_2, 25);
-        $f4f9_38 = self::mul($f9_38, $f4, 24);
-        $f5f5_38 = self::mul($f5_38, $f5, 24);
-        $f5f6_38 = self::mul($f6_19, $f5_2, 24);
-        $f5f7_76 = self::mul($f7_38, $f5_2, 24);
-        $f5f8_38 = self::mul($f8_19, $f5_2, 24);
-        $f5f9_76 = self::mul($f9_38, $f5_2, 24);
-        $f6f6_19 = self::mul($f6_19, $f6, 24);
-        $f6f7_38 = self::mul($f7_38, $f6, 24);
-        $f6f8_38 = self::mul($f8_19, $f6_2, 25);
-        $f6f9_38 = self::mul($f9_38, $f6, 24);
-        $f7f7_38 = self::mul($f7_38, $f7, 24);
-        $f7f8_38 = self::mul($f8_19, $f7_2, 24);
-        $f7f9_76 = self::mul($f9_38, $f7_2, 24);
-        $f8f8_19 = self::mul($f8_19, $f8, 24);
-        $f8f9_38 = self::mul($f9_38, $f8, 24);
-        $f9f9_38 = self::mul($f9_38, $f9, 24);
-
-        $h0 = (int) ($f0f0 + $f1f9_76 + $f2f8_38 + $f3f7_76 + $f4f6_38 + $f5f5_38) << 1;
-        $h1 = (int) ($f0f1_2 + $f2f9_38 + $f3f8_38 + $f4f7_38 + $f5f6_38) << 1;
-        $h2 = (int) ($f0f2_2 + $f1f1_2  + $f3f9_76 + $f4f8_38 + $f5f7_76 + $f6f6_19) << 1;
-        $h3 = (int) ($f0f3_2 + $f1f2_2  + $f4f9_38 + $f5f8_38 + $f6f7_38) << 1;
-        $h4 = (int) ($f0f4_2 + $f1f3_4  + $f2f2    + $f5f9_76 + $f6f8_38 + $f7f7_38) << 1;
-        $h5 = (int) ($f0f5_2 + $f1f4_2  + $f2f3_2  + $f6f9_38 + $f7f8_38) << 1;
-        $h6 = (int) ($f0f6_2 + $f1f5_4  + $f2f4_2  + $f3f3_2  + $f7f9_76 + $f8f8_19) << 1;
-        $h7 = (int) ($f0f7_2 + $f1f6_2  + $f2f5_2  + $f3f4_2  + $f8f9_38) << 1;
-        $h8 = (int) ($f0f8_2 + $f1f7_4  + $f2f6_2  + $f3f5_4  + $f4f4    + $f9f9_38) << 1;
-        $h9 = (int) ($f0f9_2 + $f1f8_2  + $f2f7_2  + $f3f6_2  + $f4f5_2) << 1;
-
-        $carry0 = ($h0 + (1 << 25)) >> 26;
-        $h1 += $carry0;
-        $h0 -= $carry0 << 26;
-        $carry4 = ($h4 + (1 << 25)) >> 26;
-        $h5 += $carry4;
-        $h4 -= $carry4 << 26;
-
-        $carry1 = ($h1 + (1 << 24)) >> 25;
-        $h2 += $carry1;
-        $h1 -= $carry1 << 25;
-        $carry5 = ($h5 + (1 << 24)) >> 25;
-        $h6 += $carry5;
-        $h5 -= $carry5 << 25;
-
-        $carry2 = ($h2 + (1 << 25)) >> 26;
-        $h3 += $carry2;
-        $h2 -= $carry2 << 26;
-        $carry6 = ($h6 + (1 << 25)) >> 26;
-        $h7 += $carry6;
-        $h6 -= $carry6 << 26;
-
-        $carry3 = ($h3 + (1 << 24)) >> 25;
-        $h4 += $carry3;
-        $h3 -= $carry3 << 25;
-        $carry7 = ($h7 + (1 << 24)) >> 25;
-        $h8 += $carry7;
-        $h7 -= $carry7 << 25;
-
-        $carry4 = ($h4 + (1 << 25)) >> 26;
-        $h5 += $carry4;
-        $h4 -= $carry4 << 26;
-        $carry8 = ($h8 + (1 << 25)) >> 26;
-        $h9 += $carry8;
-        $h8 -= $carry8 << 26;
-
-        $carry9 = ($h9 + (1 << 24)) >> 25;
-        $h0 += self::mul($carry9, 19, 5);
-        $h9 -= $carry9 << 25;
-
-        $carry0 = ($h0 + (1 << 25)) >> 26;
-        $h1 += $carry0;
-        $h0 -= $carry0 << 26;
-
-        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
-            array(
-                (int) $h0,
-                (int) $h1,
-                (int) $h2,
-                (int) $h3,
-                (int) $h4,
-                (int) $h5,
-                (int) $h6,
-                (int) $h7,
-                (int) $h8,
-                (int) $h9
-            )
-        );
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $Z
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public static function fe_invert(ParagonIE_Sodium_Core_Curve25519_Fe $Z)
-    {
-        $z = clone $Z;
-        $t0 = self::fe_sq($z);
-        $t1 = self::fe_sq($t0);
-        $t1 = self::fe_sq($t1);
-        $t1 = self::fe_mul($z, $t1);
-        $t0 = self::fe_mul($t0, $t1);
-        $t2 = self::fe_sq($t0);
-        $t1 = self::fe_mul($t1, $t2);
-        $t2 = self::fe_sq($t1);
-        for ($i = 1; $i < 5; ++$i) {
-            $t2 = self::fe_sq($t2);
-        }
-        $t1 = self::fe_mul($t2, $t1);
-        $t2 = self::fe_sq($t1);
-        for ($i = 1; $i < 10; ++$i) {
-            $t2 = self::fe_sq($t2);
-        }
-        $t2 = self::fe_mul($t2, $t1);
-        $t3 = self::fe_sq($t2);
-        for ($i = 1; $i < 20; ++$i) {
-            $t3 = self::fe_sq($t3);
-        }
-        $t2 = self::fe_mul($t3, $t2);
-        $t2 = self::fe_sq($t2);
-        for ($i = 1; $i < 10; ++$i) {
-            $t2 = self::fe_sq($t2);
-        }
-        $t1 = self::fe_mul($t2, $t1);
-        $t2 = self::fe_sq($t1);
-        for ($i = 1; $i < 50; ++$i) {
-            $t2 = self::fe_sq($t2);
-        }
-        $t2 = self::fe_mul($t2, $t1);
-        $t3 = self::fe_sq($t2);
-        for ($i = 1; $i < 100; ++$i) {
-            $t3 = self::fe_sq($t3);
-        }
-        $t2 = self::fe_mul($t3, $t2);
-        $t2 = self::fe_sq($t2);
-        for ($i = 1; $i < 50; ++$i) {
-            $t2 = self::fe_sq($t2);
-        }
-        $t1 = self::fe_mul($t2, $t1);
-        $t1 = self::fe_sq($t1);
-        for ($i = 1; $i < 5; ++$i) {
-            $t1 = self::fe_sq($t1);
-        }
-        return self::fe_mul($t1, $t0);
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @ref https://github.com/jedisct1/libsodium/blob/68564326e1e9dc57ef03746f85734232d20ca6fb/src/libsodium/crypto_core/curve25519/ref10/curve25519_ref10.c#L1054-L1106
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $z
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public static function fe_pow22523(ParagonIE_Sodium_Core_Curve25519_Fe $z)
-    {
-        # fe_sq(t0, z);
-        # fe_sq(t1, t0);
-        # fe_sq(t1, t1);
-        # fe_mul(t1, z, t1);
-        # fe_mul(t0, t0, t1);
-        # fe_sq(t0, t0);
-        # fe_mul(t0, t1, t0);
-        # fe_sq(t1, t0);
-        $t0 = self::fe_sq($z);
-        $t1 = self::fe_sq($t0);
-        $t1 = self::fe_sq($t1);
-        $t1 = self::fe_mul($z, $t1);
-        $t0 = self::fe_mul($t0, $t1);
-        $t0 = self::fe_sq($t0);
-        $t0 = self::fe_mul($t1, $t0);
-        $t1 = self::fe_sq($t0);
-
-        # for (i = 1; i < 5; ++i) {
-        #     fe_sq(t1, t1);
-        # }
-        for ($i = 1; $i < 5; ++$i) {
-            $t1 = self::fe_sq($t1);
-        }
-
-        # fe_mul(t0, t1, t0);
-        # fe_sq(t1, t0);
-        $t0 = self::fe_mul($t1, $t0);
-        $t1 = self::fe_sq($t0);
-
-        # for (i = 1; i < 10; ++i) {
-        #     fe_sq(t1, t1);
-        # }
-        for ($i = 1; $i < 10; ++$i) {
-            $t1 = self::fe_sq($t1);
-        }
-
-        # fe_mul(t1, t1, t0);
-        # fe_sq(t2, t1);
-        $t1 = self::fe_mul($t1, $t0);
-        $t2 = self::fe_sq($t1);
-
-        # for (i = 1; i < 20; ++i) {
-        #     fe_sq(t2, t2);
-        # }
-        for ($i = 1; $i < 20; ++$i) {
-            $t2 = self::fe_sq($t2);
-        }
-
-        # fe_mul(t1, t2, t1);
-        # fe_sq(t1, t1);
-        $t1 = self::fe_mul($t2, $t1);
-        $t1 = self::fe_sq($t1);
-
-        # for (i = 1; i < 10; ++i) {
-        #     fe_sq(t1, t1);
-        # }
-        for ($i = 1; $i < 10; ++$i) {
-            $t1 = self::fe_sq($t1);
-        }
-
-        # fe_mul(t0, t1, t0);
-        # fe_sq(t1, t0);
-        $t0 = self::fe_mul($t1, $t0);
-        $t1 = self::fe_sq($t0);
-
-        # for (i = 1; i < 50; ++i) {
-        #     fe_sq(t1, t1);
-        # }
-        for ($i = 1; $i < 50; ++$i) {
-            $t1 = self::fe_sq($t1);
-        }
-
-        # fe_mul(t1, t1, t0);
-        # fe_sq(t2, t1);
-        $t1 = self::fe_mul($t1, $t0);
-        $t2 = self::fe_sq($t1);
-
-        # for (i = 1; i < 100; ++i) {
-        #     fe_sq(t2, t2);
-        # }
-        for ($i = 1; $i < 100; ++$i) {
-            $t2 = self::fe_sq($t2);
-        }
-
-        # fe_mul(t1, t2, t1);
-        # fe_sq(t1, t1);
-        $t1 = self::fe_mul($t2, $t1);
-        $t1 = self::fe_sq($t1);
-
-        # for (i = 1; i < 50; ++i) {
-        #     fe_sq(t1, t1);
-        # }
-        for ($i = 1; $i < 50; ++$i) {
-            $t1 = self::fe_sq($t1);
-        }
-
-        # fe_mul(t0, t1, t0);
-        # fe_sq(t0, t0);
-        # fe_sq(t0, t0);
-        # fe_mul(out, t0, z);
-        $t0 = self::fe_mul($t1, $t0);
-        $t0 = self::fe_sq($t0);
-        $t0 = self::fe_sq($t0);
-        return self::fe_mul($t0, $z);
-    }
-
-    /**
-     * Subtract two field elements.
-     *
-     * h = f - g
-     *
-     * Preconditions:
-     * |f| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
-     * |g| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
-     *
-     * Postconditions:
-     * |h| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $g
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     * @psalm-suppress MixedOperand
-     */
-    public static function fe_sub(ParagonIE_Sodium_Core_Curve25519_Fe $f, ParagonIE_Sodium_Core_Curve25519_Fe $g)
-    {
-        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
-            array(
-                (int) ($f[0] - $g[0]),
-                (int) ($f[1] - $g[1]),
-                (int) ($f[2] - $g[2]),
-                (int) ($f[3] - $g[3]),
-                (int) ($f[4] - $g[4]),
-                (int) ($f[5] - $g[5]),
-                (int) ($f[6] - $g[6]),
-                (int) ($f[7] - $g[7]),
-                (int) ($f[8] - $g[8]),
-                (int) ($f[9] - $g[9])
-            )
-        );
-    }
-
-    /**
-     * Add two group elements.
-     *
-     * r = p + q
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_Cached $q
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
-     */
-    public static function ge_add(
-        ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p,
-        ParagonIE_Sodium_Core_Curve25519_Ge_Cached $q
-    ) {
-        $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1();
-        $r->X = self::fe_add($p->Y, $p->X);
-        $r->Y = self::fe_sub($p->Y, $p->X);
-        $r->Z = self::fe_mul($r->X, $q->YplusX);
-        $r->Y = self::fe_mul($r->Y, $q->YminusX);
-        $r->T = self::fe_mul($q->T2d, $p->T);
-        $r->X = self::fe_mul($p->Z, $q->Z);
-        $t0   = self::fe_add($r->X, $r->X);
-        $r->X = self::fe_sub($r->Z, $r->Y);
-        $r->Y = self::fe_add($r->Z, $r->Y);
-        $r->Z = self::fe_add($t0, $r->T);
-        $r->T = self::fe_sub($t0, $r->T);
-        return $r;
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @ref https://github.com/jedisct1/libsodium/blob/157c4a80c13b117608aeae12178b2d38825f9f8f/src/libsodium/crypto_core/curve25519/ref10/curve25519_ref10.c#L1185-L1215
-     * @param string $a
-     * @return array<int, mixed>
-     * @throws SodiumException
-     * @throws TypeError
-     */
-    public static function slide($a)
-    {
-        if (self::strlen($a) < 256) {
-            if (self::strlen($a) < 16) {
-                $a = str_pad($a, 256, '0', STR_PAD_RIGHT);
-            }
-        }
-        /** @var array<int, int> $r */
-        $r = array();
-
-        /** @var int $i */
-        for ($i = 0; $i < 256; ++$i) {
-            $r[$i] = (int) (
-                1 & (
-                    self::chrToInt($a[(int) ($i >> 3)])
-                        >>
-                    ($i & 7)
-                )
-            );
-        }
-
-        for ($i = 0;$i < 256;++$i) {
-            if ($r[$i]) {
-                for ($b = 1;$b <= 6 && $i + $b < 256;++$b) {
-                    if ($r[$i + $b]) {
-                        if ($r[$i] + ($r[$i + $b] << $b) <= 15) {
-                            $r[$i] += $r[$i + $b] << $b;
-                            $r[$i + $b] = 0;
-                        } elseif ($r[$i] - ($r[$i + $b] << $b) >= -15) {
-                            $r[$i] -= $r[$i + $b] << $b;
-                            for ($k = $i + $b; $k < 256; ++$k) {
-                                if (!$r[$k]) {
-                                    $r[$k] = 1;
-                                    break;
-                                }
-                                $r[$k] = 0;
-                            }
-                        } else {
-                            break;
-                        }
-                    }
-                }
-            }
-        }
-        return $r;
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param string $s
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
-     * @throws SodiumException
-     * @throws TypeError
-     */
-    public static function ge_frombytes_negate_vartime($s)
-    {
-        static $d = null;
-        if (!$d) {
-            $d = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d);
-        }
-
-        # fe_frombytes(h->Y,s);
-        # fe_1(h->Z);
-        $h = new ParagonIE_Sodium_Core_Curve25519_Ge_P3(
-            self::fe_0(),
-            self::fe_frombytes($s),
-            self::fe_1()
-        );
-
-        # fe_sq(u,h->Y);
-        # fe_mul(v,u,d);
-        # fe_sub(u,u,h->Z);       /* u = y^2-1 */
-        # fe_add(v,v,h->Z);       /* v = dy^2+1 */
-        $u = self::fe_sq($h->Y);
-        /** @var ParagonIE_Sodium_Core_Curve25519_Fe $d */
-        $v = self::fe_mul($u, $d);
-        $u = self::fe_sub($u, $h->Z); /* u =  y^2 - 1 */
-        $v = self::fe_add($v, $h->Z); /* v = dy^2 + 1 */
-
-        # fe_sq(v3,v);
-        # fe_mul(v3,v3,v);        /* v3 = v^3 */
-        # fe_sq(h->X,v3);
-        # fe_mul(h->X,h->X,v);
-        # fe_mul(h->X,h->X,u);    /* x = uv^7 */
-        $v3 = self::fe_sq($v);
-        $v3 = self::fe_mul($v3, $v); /* v3 = v^3 */
-        $h->X = self::fe_sq($v3);
-        $h->X = self::fe_mul($h->X, $v);
-        $h->X = self::fe_mul($h->X, $u); /* x = uv^7 */
-
-        # fe_pow22523(h->X,h->X); /* x = (uv^7)^((q-5)/8) */
-        # fe_mul(h->X,h->X,v3);
-        # fe_mul(h->X,h->X,u);    /* x = uv^3(uv^7)^((q-5)/8) */
-        $h->X = self::fe_pow22523($h->X); /* x = (uv^7)^((q-5)/8) */
-        $h->X = self::fe_mul($h->X, $v3);
-        $h->X = self::fe_mul($h->X, $u); /* x = uv^3(uv^7)^((q-5)/8) */
-
-        # fe_sq(vxx,h->X);
-        # fe_mul(vxx,vxx,v);
-        # fe_sub(check,vxx,u);    /* vx^2-u */
-        $vxx = self::fe_sq($h->X);
-        $vxx = self::fe_mul($vxx, $v);
-        $check = self::fe_sub($vxx, $u); /* vx^2 - u */
-
-        # if (fe_isnonzero(check)) {
-        #     fe_add(check,vxx,u);  /* vx^2+u */
-        #     if (fe_isnonzero(check)) {
-        #         return -1;
-        #     }
-        #     fe_mul(h->X,h->X,sqrtm1);
-        # }
-        if (self::fe_isnonzero($check)) {
-            $check = self::fe_add($vxx, $u); /* vx^2 + u */
-            if (self::fe_isnonzero($check)) {
-                throw new RangeException('Internal check failed.');
-            }
-            $h->X = self::fe_mul(
-                $h->X,
-                ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1)
-            );
-        }
-
-        # if (fe_isnegative(h->X) == (s[31] >> 7)) {
-        #     fe_neg(h->X,h->X);
-        # }
-        $i = self::chrToInt($s[31]);
-        if (self::fe_isnegative($h->X) === ($i >> 7)) {
-            $h->X = self::fe_neg($h->X);
-        }
-
-        # fe_mul(h->T,h->X,h->Y);
-        $h->T = self::fe_mul($h->X, $h->Y);
-        return $h;
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $R
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $q
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
-     */
-    public static function ge_madd(
-        ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $R,
-        ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p,
-        ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $q
-    ) {
-        $r = clone $R;
-        $r->X = self::fe_add($p->Y, $p->X);
-        $r->Y = self::fe_sub($p->Y, $p->X);
-        $r->Z = self::fe_mul($r->X, $q->yplusx);
-        $r->Y = self::fe_mul($r->Y, $q->yminusx);
-        $r->T = self::fe_mul($q->xy2d, $p->T);
-        $t0 = self::fe_add(clone $p->Z, clone $p->Z);
-        $r->X = self::fe_sub($r->Z, $r->Y);
-        $r->Y = self::fe_add($r->Z, $r->Y);
-        $r->Z = self::fe_add($t0, $r->T);
-        $r->T = self::fe_sub($t0, $r->T);
-
-        return $r;
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $R
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $q
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
-     */
-    public static function ge_msub(
-        ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $R,
-        ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p,
-        ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $q
-    ) {
-        $r = clone $R;
-
-        $r->X = self::fe_add($p->Y, $p->X);
-        $r->Y = self::fe_sub($p->Y, $p->X);
-        $r->Z = self::fe_mul($r->X, $q->yminusx);
-        $r->Y = self::fe_mul($r->Y, $q->yplusx);
-        $r->T = self::fe_mul($q->xy2d, $p->T);
-        $t0 = self::fe_add($p->Z, $p->Z);
-        $r->X = self::fe_sub($r->Z, $r->Y);
-        $r->Y = self::fe_add($r->Z, $r->Y);
-        $r->Z = self::fe_sub($t0, $r->T);
-        $r->T = self::fe_add($t0, $r->T);
-
-        return $r;
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2
-     */
-    public static function ge_p1p1_to_p2(ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p)
-    {
-        $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P2();
-        $r->X = self::fe_mul($p->X, $p->T);
-        $r->Y = self::fe_mul($p->Y, $p->Z);
-        $r->Z = self::fe_mul($p->Z, $p->T);
-        return $r;
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
-     */
-    public static function ge_p1p1_to_p3(ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p)
-    {
-        $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P3();
-        $r->X = self::fe_mul($p->X, $p->T);
-        $r->Y = self::fe_mul($p->Y, $p->Z);
-        $r->Z = self::fe_mul($p->Z, $p->T);
-        $r->T = self::fe_mul($p->X, $p->Y);
-        return $r;
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2
-     */
-    public static function ge_p2_0()
-    {
-        return new ParagonIE_Sodium_Core_Curve25519_Ge_P2(
-            self::fe_0(),
-            self::fe_1(),
-            self::fe_1()
-        );
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P2 $p
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
-     */
-    public static function ge_p2_dbl(ParagonIE_Sodium_Core_Curve25519_Ge_P2 $p)
-    {
-        $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1();
-
-        $r->X = self::fe_sq($p->X);
-        $r->Z = self::fe_sq($p->Y);
-        $r->T = self::fe_sq2($p->Z);
-        $r->Y = self::fe_add($p->X, $p->Y);
-        $t0   = self::fe_sq($r->Y);
-        $r->Y = self::fe_add($r->Z, $r->X);
-        $r->Z = self::fe_sub($r->Z, $r->X);
-        $r->X = self::fe_sub($t0, $r->Y);
-        $r->T = self::fe_sub($r->T, $r->Z);
-
-        return $r;
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
-     */
-    public static function ge_p3_0()
-    {
-        return new ParagonIE_Sodium_Core_Curve25519_Ge_P3(
-            self::fe_0(),
-            self::fe_1(),
-            self::fe_1(),
-            self::fe_0()
-        );
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_Cached
-     */
-    public static function ge_p3_to_cached(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p)
-    {
-        static $d2 = null;
-        if ($d2 === null) {
-            $d2 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d2);
-        }
-        /** @var ParagonIE_Sodium_Core_Curve25519_Fe $d2 */
-        $r = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached();
-        $r->YplusX = self::fe_add($p->Y, $p->X);
-        $r->YminusX = self::fe_sub($p->Y, $p->X);
-        $r->Z = self::fe_copy($p->Z);
-        $r->T2d = self::fe_mul($p->T, $d2);
-        return $r;
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2
-     */
-    public static function ge_p3_to_p2(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p)
-    {
-        return new ParagonIE_Sodium_Core_Curve25519_Ge_P2(
-            self::fe_copy($p->X),
-            self::fe_copy($p->Y),
-            self::fe_copy($p->Z)
-        );
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h
-     * @return string
-     * @throws SodiumException
-     * @throws TypeError
-     */
-    public static function ge_p3_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h)
-    {
-        $recip = self::fe_invert($h->Z);
-        $x = self::fe_mul($h->X, $recip);
-        $y = self::fe_mul($h->Y, $recip);
-        $s = self::fe_tobytes($y);
-        $s[31] = self::intToChr(
-            self::chrToInt($s[31]) ^ (self::fe_isnegative($x) << 7)
-        );
-        return $s;
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
-     */
-    public static function ge_p3_dbl(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p)
-    {
-        $q = self::ge_p3_to_p2($p);
-        return self::ge_p2_dbl($q);
-    }
-
-    /**
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_Precomp
-     */
-    public static function ge_precomp_0()
-    {
-        return new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
-            self::fe_1(),
-            self::fe_1(),
-            self::fe_0()
-        );
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param int $b
-     * @param int $c
-     * @return int
-     */
-    public static function equal($b, $c)
-    {
-        return (int) ((($b ^ $c) - 1) >> 31) & 1;
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param int|string $char
-     * @return int (1 = yes, 0 = no)
-     * @throws SodiumException
-     * @throws TypeError
-     */
-    public static function negative($char)
-    {
-        if (is_int($char)) {
-            return ($char >> 63) & 1;
-        }
-        $x = self::chrToInt(self::substr($char, 0, 1));
-        return (int) ($x >> 63);
-    }
-
-    /**
-     * Conditional move
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $t
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $u
-     * @param int $b
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_Precomp
-     */
-    public static function cmov(
-        ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $t,
-        ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $u,
-        $b
-    ) {
-        if (!is_int($b)) {
-            throw new InvalidArgumentException('Expected an integer.');
-        }
-        return new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
-            self::fe_cmov($t->yplusx,  $u->yplusx,  $b),
-            self::fe_cmov($t->yminusx, $u->yminusx, $b),
-            self::fe_cmov($t->xy2d,    $u->xy2d,    $b)
-        );
-    }
-
-    /**
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_Cached $t
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_Cached $u
-     * @param int $b
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_Cached
-     */
-    public static function ge_cmov_cached(
-        ParagonIE_Sodium_Core_Curve25519_Ge_Cached $t,
-        ParagonIE_Sodium_Core_Curve25519_Ge_Cached $u,
-        $b
-    ) {
-        $b &= 1;
-        $ret = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached();
-        $ret->YplusX  = self::fe_cmov($t->YplusX,  $u->YplusX,  $b);
-        $ret->YminusX = self::fe_cmov($t->YminusX, $u->YminusX, $b);
-        $ret->Z       = self::fe_cmov($t->Z,       $u->Z,       $b);
-        $ret->T2d     = self::fe_cmov($t->T2d,     $u->T2d,     $b);
-        return $ret;
-    }
-
-    /**
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_Cached[] $cached
-     * @param int $b
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_Cached
-     * @throws SodiumException
-     */
-    public static function ge_cmov8_cached(array $cached, $b)
-    {
-        // const unsigned char bnegative = negative(b);
-        // const unsigned char babs      = b - (((-bnegative) & b) * ((signed char) 1 << 1));
-        $bnegative = self::negative($b);
-        $babs = $b - (((-$bnegative) & $b) << 1);
-
-        // ge25519_cached_0(t);
-        $t = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached(
-            self::fe_1(),
-            self::fe_1(),
-            self::fe_1(),
-            self::fe_0()
-        );
-
-        // ge25519_cmov_cached(t, &cached[0], equal(babs, 1));
-        // ge25519_cmov_cached(t, &cached[1], equal(babs, 2));
-        // ge25519_cmov_cached(t, &cached[2], equal(babs, 3));
-        // ge25519_cmov_cached(t, &cached[3], equal(babs, 4));
-        // ge25519_cmov_cached(t, &cached[4], equal(babs, 5));
-        // ge25519_cmov_cached(t, &cached[5], equal(babs, 6));
-        // ge25519_cmov_cached(t, &cached[6], equal(babs, 7));
-        // ge25519_cmov_cached(t, &cached[7], equal(babs, 8));
-        for ($x = 0; $x < 8; ++$x) {
-            $t = self::ge_cmov_cached($t, $cached[$x], self::equal($babs, $x + 1));
-        }
-
-        // fe25519_copy(minust.YplusX, t->YminusX);
-        // fe25519_copy(minust.YminusX, t->YplusX);
-        // fe25519_copy(minust.Z, t->Z);
-        // fe25519_neg(minust.T2d, t->T2d);
-        $minust = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached(
-            self::fe_copy($t->YminusX),
-            self::fe_copy($t->YplusX),
-            self::fe_copy($t->Z),
-            self::fe_neg($t->T2d)
-        );
-        return self::ge_cmov_cached($t, $minust, $bnegative);
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param int $pos
-     * @param int $b
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_Precomp
-     * @throws SodiumException
-     * @throws TypeError
-     * @psalm-suppress MixedArgument
-     * @psalm-suppress MixedArrayAccess
-     * @psalm-suppress MixedArrayOffset
-     */
-    public static function ge_select($pos = 0, $b = 0)
-    {
-        static $base = null;
-        if ($base === null) {
-            $base = array();
-            /** @var int $i */
-            foreach (self::$base as $i => $bas) {
-                for ($j = 0; $j < 8; ++$j) {
-                    $base[$i][$j] = new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
-                        ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($bas[$j][0]),
-                        ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($bas[$j][1]),
-                        ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($bas[$j][2])
-                    );
-                }
-            }
-        }
-        /** @var array<int, array<int, ParagonIE_Sodium_Core_Curve25519_Ge_Precomp>> $base */
-        if (!is_int($pos)) {
-            throw new InvalidArgumentException('Position must be an integer');
-        }
-        if ($pos < 0 || $pos > 31) {
-            throw new RangeException('Position is out of range [0, 31]');
-        }
-
-        $bnegative = self::negative($b);
-        $babs = $b - (((-$bnegative) & $b) << 1);
-
-        $t = self::ge_precomp_0();
-        for ($i = 0; $i < 8; ++$i) {
-            $t = self::cmov(
-                $t,
-                $base[$pos][$i],
-                self::equal($babs, $i + 1)
-            );
-        }
-        $minusT = new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
-            self::fe_copy($t->yminusx),
-            self::fe_copy($t->yplusx),
-            self::fe_neg($t->xy2d)
-        );
-        return self::cmov($t, $minusT, $bnegative);
-    }
-
-    /**
-     * Subtract two group elements.
-     *
-     * r = p - q
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_Cached $q
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
-     */
-    public static function ge_sub(
-        ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p,
-        ParagonIE_Sodium_Core_Curve25519_Ge_Cached $q
-    ) {
-        $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1();
-
-        $r->X = self::fe_add($p->Y, $p->X);
-        $r->Y = self::fe_sub($p->Y, $p->X);
-        $r->Z = self::fe_mul($r->X, $q->YminusX);
-        $r->Y = self::fe_mul($r->Y, $q->YplusX);
-        $r->T = self::fe_mul($q->T2d, $p->T);
-        $r->X = self::fe_mul($p->Z, $q->Z);
-        $t0 = self::fe_add($r->X, $r->X);
-        $r->X = self::fe_sub($r->Z, $r->Y);
-        $r->Y = self::fe_add($r->Z, $r->Y);
-        $r->Z = self::fe_sub($t0, $r->T);
-        $r->T = self::fe_add($t0, $r->T);
-
-        return $r;
-    }
-
-    /**
-     * Convert a group element to a byte string.
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P2 $h
-     * @return string
-     * @throws SodiumException
-     * @throws TypeError
-     */
-    public static function ge_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P2 $h)
-    {
-        $recip = self::fe_invert($h->Z);
-        $x = self::fe_mul($h->X, $recip);
-        $y = self::fe_mul($h->Y, $recip);
-        $s = self::fe_tobytes($y);
-        $s[31] = self::intToChr(
-            self::chrToInt($s[31]) ^ (self::fe_isnegative($x) << 7)
-        );
-        return $s;
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param string $a
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A
-     * @param string $b
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2
-     * @throws SodiumException
-     * @throws TypeError
-     * @psalm-suppress MixedArgument
-     * @psalm-suppress MixedArrayAccess
-     */
-    public static function ge_double_scalarmult_vartime(
-        $a,
-        ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A,
-        $b
-    ) {
-        /** @var array<int, ParagonIE_Sodium_Core_Curve25519_Ge_Cached> $Ai */
-        $Ai = array();
-
-        /** @var array<int, ParagonIE_Sodium_Core_Curve25519_Ge_Precomp> $Bi */
-        static $Bi = array();
-        if (!$Bi) {
-            for ($i = 0; $i < 8; ++$i) {
-                $Bi[$i] = new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
-                    ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$base2[$i][0]),
-                    ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$base2[$i][1]),
-                    ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$base2[$i][2])
-                );
-            }
-        }
-        for ($i = 0; $i < 8; ++$i) {
-            $Ai[$i] = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached(
-                self::fe_0(),
-                self::fe_0(),
-                self::fe_0(),
-                self::fe_0()
-            );
-        }
-
-        # slide(aslide,a);
-        # slide(bslide,b);
-        /** @var array<int, int> $aslide */
-        $aslide = self::slide($a);
-        /** @var array<int, int> $bslide */
-        $bslide = self::slide($b);
-
-        # ge_p3_to_cached(&Ai[0],A);
-        # ge_p3_dbl(&t,A); ge_p1p1_to_p3(&A2,&t);
-        $Ai[0] = self::ge_p3_to_cached($A);
-        $t = self::ge_p3_dbl($A);
-        $A2 = self::ge_p1p1_to_p3($t);
-
-        # ge_add(&t,&A2,&Ai[0]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[1],&u);
-        # ge_add(&t,&A2,&Ai[1]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[2],&u);
-        # ge_add(&t,&A2,&Ai[2]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[3],&u);
-        # ge_add(&t,&A2,&Ai[3]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[4],&u);
-        # ge_add(&t,&A2,&Ai[4]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[5],&u);
-        # ge_add(&t,&A2,&Ai[5]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[6],&u);
-        # ge_add(&t,&A2,&Ai[6]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[7],&u);
-        for ($i = 0; $i < 7; ++$i) {
-            $t = self::ge_add($A2, $Ai[$i]);
-            $u = self::ge_p1p1_to_p3($t);
-            $Ai[$i + 1] = self::ge_p3_to_cached($u);
-        }
-
-        # ge_p2_0(r);
-        $r = self::ge_p2_0();
-
-        # for (i = 255;i >= 0;--i) {
-        #     if (aslide[i] || bslide[i]) break;
-        # }
-        $i = 255;
-        for (; $i >= 0; --$i) {
-            if ($aslide[$i] || $bslide[$i]) {
-                break;
-            }
-        }
-
-        # for (;i >= 0;--i) {
-        for (; $i >= 0; --$i) {
-            # ge_p2_dbl(&t,r);
-            $t = self::ge_p2_dbl($r);
-
-            # if (aslide[i] > 0) {
-            if ($aslide[$i] > 0) {
-                # ge_p1p1_to_p3(&u,&t);
-                # ge_add(&t,&u,&Ai[aslide[i]/2]);
-                $u = self::ge_p1p1_to_p3($t);
-                $t = self::ge_add(
-                    $u,
-                    $Ai[(int) floor($aslide[$i] / 2)]
-                );
-            # } else if (aslide[i] < 0) {
-            } elseif ($aslide[$i] < 0) {
-                # ge_p1p1_to_p3(&u,&t);
-                # ge_sub(&t,&u,&Ai[(-aslide[i])/2]);
-                $u = self::ge_p1p1_to_p3($t);
-                $t = self::ge_sub(
-                    $u,
-                    $Ai[(int) floor(-$aslide[$i] / 2)]
-                );
-            }
-
-            # if (bslide[i] > 0) {
-            if ($bslide[$i] > 0) {
-                /** @var int $index */
-                $index = (int) floor($bslide[$i] / 2);
-                # ge_p1p1_to_p3(&u,&t);
-                # ge_madd(&t,&u,&Bi[bslide[i]/2]);
-                $u = self::ge_p1p1_to_p3($t);
-                $t = self::ge_madd($t, $u, $Bi[$index]);
-            # } else if (bslide[i] < 0) {
-            } elseif ($bslide[$i] < 0) {
-                /** @var int $index */
-                $index = (int) floor(-$bslide[$i] / 2);
-                # ge_p1p1_to_p3(&u,&t);
-                # ge_msub(&t,&u,&Bi[(-bslide[i])/2]);
-                $u = self::ge_p1p1_to_p3($t);
-                $t = self::ge_msub($t, $u, $Bi[$index]);
-            }
-            # ge_p1p1_to_p2(r,&t);
-            $r = self::ge_p1p1_to_p2($t);
-        }
-        return $r;
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param string $a
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
-     * @throws SodiumException
-     * @throws TypeError
-     * @psalm-suppress MixedAssignment
-     * @psalm-suppress MixedOperand
-     */
-    public static function ge_scalarmult($a, $p)
-    {
-        $e = array_fill(0, 64, 0);
-
-        /** @var ParagonIE_Sodium_Core_Curve25519_Ge_Cached[] $pi */
-        $pi = array();
-
-        //        ge25519_p3_to_cached(&pi[1 - 1], p);   /* p */
-        $pi[0] = self::ge_p3_to_cached($p);
-
-        //        ge25519_p3_dbl(&t2, p);
-        //        ge25519_p1p1_to_p3(&p2, &t2);
-        //        ge25519_p3_to_cached(&pi[2 - 1], &p2); /* 2p = 2*p */
-        $t2 = self::ge_p3_dbl($p);
-        $p2 = self::ge_p1p1_to_p3($t2);
-        $pi[1] = self::ge_p3_to_cached($p2);
-
-        //        ge25519_add_cached(&t3, p, &pi[2 - 1]);
-        //        ge25519_p1p1_to_p3(&p3, &t3);
-        //        ge25519_p3_to_cached(&pi[3 - 1], &p3); /* 3p = 2p+p */
-        $t3 = self::ge_add($p, $pi[1]);
-        $p3 = self::ge_p1p1_to_p3($t3);
-        $pi[2] = self::ge_p3_to_cached($p3);
-
-        //        ge25519_p3_dbl(&t4, &p2);
-        //        ge25519_p1p1_to_p3(&p4, &t4);
-        //        ge25519_p3_to_cached(&pi[4 - 1], &p4); /* 4p = 2*2p */
-        $t4 = self::ge_p3_dbl($p2);
-        $p4 = self::ge_p1p1_to_p3($t4);
-        $pi[3] = self::ge_p3_to_cached($p4);
-
-        //        ge25519_add_cached(&t5, p, &pi[4 - 1]);
-        //        ge25519_p1p1_to_p3(&p5, &t5);
-        //        ge25519_p3_to_cached(&pi[5 - 1], &p5); /* 5p = 4p+p */
-        $t5 = self::ge_add($p, $pi[3]);
-        $p5 = self::ge_p1p1_to_p3($t5);
-        $pi[4] = self::ge_p3_to_cached($p5);
-
-        //        ge25519_p3_dbl(&t6, &p3);
-        //        ge25519_p1p1_to_p3(&p6, &t6);
-        //        ge25519_p3_to_cached(&pi[6 - 1], &p6); /* 6p = 2*3p */
-        $t6 = self::ge_p3_dbl($p3);
-        $p6 = self::ge_p1p1_to_p3($t6);
-        $pi[5] = self::ge_p3_to_cached($p6);
-
-        //        ge25519_add_cached(&t7, p, &pi[6 - 1]);
-        //        ge25519_p1p1_to_p3(&p7, &t7);
-        //        ge25519_p3_to_cached(&pi[7 - 1], &p7); /* 7p = 6p+p */
-        $t7 = self::ge_add($p, $pi[5]);
-        $p7 = self::ge_p1p1_to_p3($t7);
-        $pi[6] = self::ge_p3_to_cached($p7);
-
-        //        ge25519_p3_dbl(&t8, &p4);
-        //        ge25519_p1p1_to_p3(&p8, &t8);
-        //        ge25519_p3_to_cached(&pi[8 - 1], &p8); /* 8p = 2*4p */
-        $t8 = self::ge_p3_dbl($p4);
-        $p8 = self::ge_p1p1_to_p3($t8);
-        $pi[7] = self::ge_p3_to_cached($p8);
-
-
-        //        for (i = 0; i < 32; ++i) {
-        //            e[2 * i + 0] = (a[i] >> 0) & 15;
-        //            e[2 * i + 1] = (a[i] >> 4) & 15;
-        //        }
-        for ($i = 0; $i < 32; ++$i) {
-            $e[($i << 1)    ] =  self::chrToInt($a[$i]) & 15;
-            $e[($i << 1) + 1] = (self::chrToInt($a[$i]) >> 4) & 15;
-        }
-        //        /* each e[i] is between 0 and 15 */
-        //        /* e[63] is between 0 and 7 */
-
-        //        carry = 0;
-        //        for (i = 0; i < 63; ++i) {
-        //            e[i] += carry;
-        //            carry = e[i] + 8;
-        //            carry >>= 4;
-        //            e[i] -= carry * ((signed char) 1 << 4);
-        //        }
-        $carry = 0;
-        for ($i = 0; $i < 63; ++$i) {
-            $e[$i] += $carry;
-            $carry = $e[$i] + 8;
-            $carry >>= 4;
-            $e[$i] -= $carry << 4;
-        }
-        //        e[63] += carry;
-        //        /* each e[i] is between -8 and 8 */
-        $e[63] += $carry;
-
-        //        ge25519_p3_0(h);
-        $h = self::ge_p3_0();
-
-        //        for (i = 63; i != 0; i--) {
-        for ($i = 63; $i != 0; --$i) {
-            // ge25519_cmov8_cached(&t, pi, e[i]);
-            $t = self::ge_cmov8_cached($pi, $e[$i]);
-            // ge25519_add_cached(&r, h, &t);
-            $r = self::ge_add($h, $t);
-
-            // ge25519_p1p1_to_p2(&s, &r);
-            // ge25519_p2_dbl(&r, &s);
-            // ge25519_p1p1_to_p2(&s, &r);
-            // ge25519_p2_dbl(&r, &s);
-            // ge25519_p1p1_to_p2(&s, &r);
-            // ge25519_p2_dbl(&r, &s);
-            // ge25519_p1p1_to_p2(&s, &r);
-            // ge25519_p2_dbl(&r, &s);
-            $s = self::ge_p1p1_to_p2($r);
-            $r = self::ge_p2_dbl($s);
-            $s = self::ge_p1p1_to_p2($r);
-            $r = self::ge_p2_dbl($s);
-            $s = self::ge_p1p1_to_p2($r);
-            $r = self::ge_p2_dbl($s);
-            $s = self::ge_p1p1_to_p2($r);
-            $r = self::ge_p2_dbl($s);
-
-            // ge25519_p1p1_to_p3(h, &r);  /* *16 */
-            $h = self::ge_p1p1_to_p3($r); /* *16 */
-        }
-
-        //        ge25519_cmov8_cached(&t, pi, e[i]);
-        //        ge25519_add_cached(&r, h, &t);
-        //        ge25519_p1p1_to_p3(h, &r);
-        $t = self::ge_cmov8_cached($pi, $e[0]);
-        $r = self::ge_add($h, $t);
-        return self::ge_p1p1_to_p3($r);
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param string $a
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
-     * @throws SodiumException
-     * @throws TypeError
-     * @psalm-suppress MixedAssignment
-     * @psalm-suppress MixedOperand
-     */
-    public static function ge_scalarmult_base($a)
-    {
-        /** @var array<int, int> $e */
-        $e = array();
-        $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1();
-
-        for ($i = 0; $i < 32; ++$i) {
-            $dbl = (int) $i << 1;
-            $e[$dbl] = (int) self::chrToInt($a[$i]) & 15;
-            $e[$dbl + 1] = (int) (self::chrToInt($a[$i]) >> 4) & 15;
-        }
-
-        $carry = 0;
-        for ($i = 0; $i < 63; ++$i) {
-            $e[$i] += $carry;
-            $carry = $e[$i] + 8;
-            $carry >>= 4;
-            $e[$i] -= $carry << 4;
-        }
-        $e[63] += (int) $carry;
-
-        $h = self::ge_p3_0();
-
-        for ($i = 1; $i < 64; $i += 2) {
-            $t = self::ge_select((int) floor($i / 2), (int) $e[$i]);
-            $r = self::ge_madd($r, $h, $t);
-            $h = self::ge_p1p1_to_p3($r);
-        }
-
-        $r = self::ge_p3_dbl($h);
-
-        $s = self::ge_p1p1_to_p2($r);
-        $r = self::ge_p2_dbl($s);
-        $s = self::ge_p1p1_to_p2($r);
-        $r = self::ge_p2_dbl($s);
-        $s = self::ge_p1p1_to_p2($r);
-        $r = self::ge_p2_dbl($s);
-
-        $h = self::ge_p1p1_to_p3($r);
-
-        for ($i = 0; $i < 64; $i += 2) {
-            $t = self::ge_select($i >> 1, (int) $e[$i]);
-            $r = self::ge_madd($r, $h, $t);
-            $h = self::ge_p1p1_to_p3($r);
-        }
-        return $h;
-    }
-
-    /**
-     * Calculates (ab + c) mod l
-     * where l = 2^252 + 27742317777372353535851937790883648493
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param string $a
-     * @param string $b
-     * @param string $c
-     * @return string
-     * @throws TypeError
-     */
-    public static function sc_muladd($a, $b, $c)
-    {
-        $a0 = 2097151 & self::load_3(self::substr($a, 0, 3));
-        $a1 = 2097151 & (self::load_4(self::substr($a, 2, 4)) >> 5);
-        $a2 = 2097151 & (self::load_3(self::substr($a, 5, 3)) >> 2);
-        $a3 = 2097151 & (self::load_4(self::substr($a, 7, 4)) >> 7);
-        $a4 = 2097151 & (self::load_4(self::substr($a, 10, 4)) >> 4);
-        $a5 = 2097151 & (self::load_3(self::substr($a, 13, 3)) >> 1);
-        $a6 = 2097151 & (self::load_4(self::substr($a, 15, 4)) >> 6);
-        $a7 = 2097151 & (self::load_3(self::substr($a, 18, 3)) >> 3);
-        $a8 = 2097151 & self::load_3(self::substr($a, 21, 3));
-        $a9 = 2097151 & (self::load_4(self::substr($a, 23, 4)) >> 5);
-        $a10 = 2097151 & (self::load_3(self::substr($a, 26, 3)) >> 2);
-        $a11 = (self::load_4(self::substr($a, 28, 4)) >> 7);
-
-        $b0 = 2097151 & self::load_3(self::substr($b, 0, 3));
-        $b1 = 2097151 & (self::load_4(self::substr($b, 2, 4)) >> 5);
-        $b2 = 2097151 & (self::load_3(self::substr($b, 5, 3)) >> 2);
-        $b3 = 2097151 & (self::load_4(self::substr($b, 7, 4)) >> 7);
-        $b4 = 2097151 & (self::load_4(self::substr($b, 10, 4)) >> 4);
-        $b5 = 2097151 & (self::load_3(self::substr($b, 13, 3)) >> 1);
-        $b6 = 2097151 & (self::load_4(self::substr($b, 15, 4)) >> 6);
-        $b7 = 2097151 & (self::load_3(self::substr($b, 18, 3)) >> 3);
-        $b8 = 2097151 & self::load_3(self::substr($b, 21, 3));
-        $b9 = 2097151 & (self::load_4(self::substr($b, 23, 4)) >> 5);
-        $b10 = 2097151 & (self::load_3(self::substr($b, 26, 3)) >> 2);
-        $b11 = (self::load_4(self::substr($b, 28, 4)) >> 7);
-
-        $c0 = 2097151 & self::load_3(self::substr($c, 0, 3));
-        $c1 = 2097151 & (self::load_4(self::substr($c, 2, 4)) >> 5);
-        $c2 = 2097151 & (self::load_3(self::substr($c, 5, 3)) >> 2);
-        $c3 = 2097151 & (self::load_4(self::substr($c, 7, 4)) >> 7);
-        $c4 = 2097151 & (self::load_4(self::substr($c, 10, 4)) >> 4);
-        $c5 = 2097151 & (self::load_3(self::substr($c, 13, 3)) >> 1);
-        $c6 = 2097151 & (self::load_4(self::substr($c, 15, 4)) >> 6);
-        $c7 = 2097151 & (self::load_3(self::substr($c, 18, 3)) >> 3);
-        $c8 = 2097151 & self::load_3(self::substr($c, 21, 3));
-        $c9 = 2097151 & (self::load_4(self::substr($c, 23, 4)) >> 5);
-        $c10 = 2097151 & (self::load_3(self::substr($c, 26, 3)) >> 2);
-        $c11 = (self::load_4(self::substr($c, 28, 4)) >> 7);
-
-        /* Can't really avoid the pyramid here: */
-        $s0 = $c0 + self::mul($a0, $b0, 24);
-        $s1 = $c1 + self::mul($a0, $b1, 24) + self::mul($a1, $b0, 24);
-        $s2 = $c2 + self::mul($a0, $b2, 24) + self::mul($a1, $b1, 24) + self::mul($a2, $b0, 24);
-        $s3 = $c3 + self::mul($a0, $b3, 24) + self::mul($a1, $b2, 24) + self::mul($a2, $b1, 24) + self::mul($a3, $b0, 24);
-        $s4 = $c4 + self::mul($a0, $b4, 24) + self::mul($a1, $b3, 24) + self::mul($a2, $b2, 24) + self::mul($a3, $b1, 24) +
-               self::mul($a4, $b0, 24);
-        $s5 = $c5 + self::mul($a0, $b5, 24) + self::mul($a1, $b4, 24) + self::mul($a2, $b3, 24) + self::mul($a3, $b2, 24) +
-               self::mul($a4, $b1, 24) + self::mul($a5, $b0, 24);
-        $s6 = $c6 + self::mul($a0, $b6, 24) + self::mul($a1, $b5, 24) + self::mul($a2, $b4, 24) + self::mul($a3, $b3, 24) +
-               self::mul($a4, $b2, 24) + self::mul($a5, $b1, 24) + self::mul($a6, $b0, 24);
-        $s7 = $c7 + self::mul($a0, $b7, 24) + self::mul($a1, $b6, 24) + self::mul($a2, $b5, 24) + self::mul($a3, $b4, 24) +
-               self::mul($a4, $b3, 24) + self::mul($a5, $b2, 24) + self::mul($a6, $b1, 24) + self::mul($a7, $b0, 24);
-        $s8 = $c8 + self::mul($a0, $b8, 24) + self::mul($a1, $b7, 24) + self::mul($a2, $b6, 24) + self::mul($a3, $b5, 24) +
-               self::mul($a4, $b4, 24) + self::mul($a5, $b3, 24) + self::mul($a6, $b2, 24) + self::mul($a7, $b1, 24) +
-               self::mul($a8, $b0, 24);
-        $s9 = $c9 + self::mul($a0, $b9, 24) + self::mul($a1, $b8, 24) + self::mul($a2, $b7, 24) + self::mul($a3, $b6, 24) +
-               self::mul($a4, $b5, 24) + self::mul($a5, $b4, 24) + self::mul($a6, $b3, 24) + self::mul($a7, $b2, 24) +
-               self::mul($a8, $b1, 24) + self::mul($a9, $b0, 24);
-        $s10 = $c10 + self::mul($a0, $b10, 24) + self::mul($a1, $b9, 24) + self::mul($a2, $b8, 24) + self::mul($a3, $b7, 24) +
-               self::mul($a4, $b6, 24) + self::mul($a5, $b5, 24) + self::mul($a6, $b4, 24) + self::mul($a7, $b3, 24) +
-               self::mul($a8, $b2, 24) + self::mul($a9, $b1, 24) + self::mul($a10, $b0, 24);
-        $s11 = $c11 + self::mul($a0, $b11, 24) + self::mul($a1, $b10, 24) + self::mul($a2, $b9, 24) + self::mul($a3, $b8, 24) +
-               self::mul($a4, $b7, 24) + self::mul($a5, $b6, 24) + self::mul($a6, $b5, 24) + self::mul($a7, $b4, 24) +
-               self::mul($a8, $b3, 24) + self::mul($a9, $b2, 24) + self::mul($a10, $b1, 24) + self::mul($a11, $b0, 24);
-        $s12 = self::mul($a1, $b11, 24) + self::mul($a2, $b10, 24) + self::mul($a3, $b9, 24) + self::mul($a4, $b8, 24) +
-               self::mul($a5, $b7, 24) + self::mul($a6, $b6, 24) + self::mul($a7, $b5, 24) + self::mul($a8, $b4, 24) +
-               self::mul($a9, $b3, 24) + self::mul($a10, $b2, 24) + self::mul($a11, $b1, 24);
-        $s13 = self::mul($a2, $b11, 24) + self::mul($a3, $b10, 24) + self::mul($a4, $b9, 24) + self::mul($a5, $b8, 24) +
-               self::mul($a6, $b7, 24) + self::mul($a7, $b6, 24) + self::mul($a8, $b5, 24) + self::mul($a9, $b4, 24) +
-               self::mul($a10, $b3, 24) + self::mul($a11, $b2, 24);
-        $s14 = self::mul($a3, $b11, 24) + self::mul($a4, $b10, 24) + self::mul($a5, $b9, 24) + self::mul($a6, $b8, 24) +
-               self::mul($a7, $b7, 24) + self::mul($a8, $b6, 24) + self::mul($a9, $b5, 24) + self::mul($a10, $b4, 24) +
-               self::mul($a11, $b3, 24);
-        $s15 = self::mul($a4, $b11, 24) + self::mul($a5, $b10, 24) + self::mul($a6, $b9, 24) + self::mul($a7, $b8, 24) +
-               self::mul($a8, $b7, 24) + self::mul($a9, $b6, 24) + self::mul($a10, $b5, 24) + self::mul($a11, $b4, 24);
-        $s16 = self::mul($a5, $b11, 24) + self::mul($a6, $b10, 24) + self::mul($a7, $b9, 24) + self::mul($a8, $b8, 24) +
-               self::mul($a9, $b7, 24) + self::mul($a10, $b6, 24) + self::mul($a11, $b5, 24);
-        $s17 = self::mul($a6, $b11, 24) + self::mul($a7, $b10, 24) + self::mul($a8, $b9, 24) + self::mul($a9, $b8, 24) +
-               self::mul($a10, $b7, 24) + self::mul($a11, $b6, 24);
-        $s18 = self::mul($a7, $b11, 24) + self::mul($a8, $b10, 24) + self::mul($a9, $b9, 24) + self::mul($a10, $b8, 24) +
-               self::mul($a11, $b7, 24);
-        $s19 = self::mul($a8, $b11, 24) + self::mul($a9, $b10, 24) + self::mul($a10, $b9, 24) + self::mul($a11, $b8, 24);
-        $s20 = self::mul($a9, $b11, 24) + self::mul($a10, $b10, 24) + self::mul($a11, $b9, 24);
-        $s21 = self::mul($a10, $b11, 24) + self::mul($a11, $b10, 24);
-        $s22 = self::mul($a11, $b11, 24);
-        $s23 = 0;
-
-        $carry0 = ($s0 + (1 << 20)) >> 21;
-        $s1 += $carry0;
-        $s0 -= $carry0 << 21;
-        $carry2 = ($s2 + (1 << 20)) >> 21;
-        $s3 += $carry2;
-        $s2 -= $carry2 << 21;
-        $carry4 = ($s4 + (1 << 20)) >> 21;
-        $s5 += $carry4;
-        $s4 -= $carry4 << 21;
-        $carry6 = ($s6 + (1 << 20)) >> 21;
-        $s7 += $carry6;
-        $s6 -= $carry6 << 21;
-        $carry8 = ($s8 + (1 << 20)) >> 21;
-        $s9 += $carry8;
-        $s8 -= $carry8 << 21;
-        $carry10 = ($s10 + (1 << 20)) >> 21;
-        $s11 += $carry10;
-        $s10 -= $carry10 << 21;
-        $carry12 = ($s12 + (1 << 20)) >> 21;
-        $s13 += $carry12;
-        $s12 -= $carry12 << 21;
-        $carry14 = ($s14 + (1 << 20)) >> 21;
-        $s15 += $carry14;
-        $s14 -= $carry14 << 21;
-        $carry16 = ($s16 + (1 << 20)) >> 21;
-        $s17 += $carry16;
-        $s16 -= $carry16 << 21;
-        $carry18 = ($s18 + (1 << 20)) >> 21;
-        $s19 += $carry18;
-        $s18 -= $carry18 << 21;
-        $carry20 = ($s20 + (1 << 20)) >> 21;
-        $s21 += $carry20;
-        $s20 -= $carry20 << 21;
-        $carry22 = ($s22 + (1 << 20)) >> 21;
-        $s23 += $carry22;
-        $s22 -= $carry22 << 21;
-
-        $carry1 = ($s1 + (1 << 20)) >> 21;
-        $s2 += $carry1;
-        $s1 -= $carry1 << 21;
-        $carry3 = ($s3 + (1 << 20)) >> 21;
-        $s4 += $carry3;
-        $s3 -= $carry3 << 21;
-        $carry5 = ($s5 + (1 << 20)) >> 21;
-        $s6 += $carry5;
-        $s5 -= $carry5 << 21;
-        $carry7 = ($s7 + (1 << 20)) >> 21;
-        $s8 += $carry7;
-        $s7 -= $carry7 << 21;
-        $carry9 = ($s9 + (1 << 20)) >> 21;
-        $s10 += $carry9;
-        $s9 -= $carry9 << 21;
-        $carry11 = ($s11 + (1 << 20)) >> 21;
-        $s12 += $carry11;
-        $s11 -= $carry11 << 21;
-        $carry13 = ($s13 + (1 << 20)) >> 21;
-        $s14 += $carry13;
-        $s13 -= $carry13 << 21;
-        $carry15 = ($s15 + (1 << 20)) >> 21;
-        $s16 += $carry15;
-        $s15 -= $carry15 << 21;
-        $carry17 = ($s17 + (1 << 20)) >> 21;
-        $s18 += $carry17;
-        $s17 -= $carry17 << 21;
-        $carry19 = ($s19 + (1 << 20)) >> 21;
-        $s20 += $carry19;
-        $s19 -= $carry19 << 21;
-        $carry21 = ($s21 + (1 << 20)) >> 21;
-        $s22 += $carry21;
-        $s21 -= $carry21 << 21;
-
-        $s11 += self::mul($s23, 666643, 20);
-        $s12 += self::mul($s23, 470296, 19);
-        $s13 += self::mul($s23, 654183, 20);
-        $s14 -= self::mul($s23, 997805, 20);
-        $s15 += self::mul($s23, 136657, 18);
-        $s16 -= self::mul($s23, 683901, 20);
-
-        $s10 += self::mul($s22, 666643, 20);
-        $s11 += self::mul($s22, 470296, 19);
-        $s12 += self::mul($s22, 654183, 20);
-        $s13 -= self::mul($s22, 997805, 20);
-        $s14 += self::mul($s22, 136657, 18);
-        $s15 -= self::mul($s22, 683901, 20);
-
-        $s9  += self::mul($s21,  666643, 20);
-        $s10 += self::mul($s21,  470296, 19);
-        $s11 += self::mul($s21,  654183, 20);
-        $s12 -= self::mul($s21,  997805, 20);
-        $s13 += self::mul($s21,  136657, 18);
-        $s14 -= self::mul($s21,  683901, 20);
-
-        $s8  += self::mul($s20,  666643, 20);
-        $s9  += self::mul($s20,  470296, 19);
-        $s10 += self::mul($s20,  654183, 20);
-        $s11 -= self::mul($s20,  997805, 20);
-        $s12 += self::mul($s20,  136657, 18);
-        $s13 -= self::mul($s20,  683901, 20);
-
-        $s7  += self::mul($s19,  666643, 20);
-        $s8  += self::mul($s19,  470296, 19);
-        $s9  += self::mul($s19,  654183, 20);
-        $s10 -= self::mul($s19,  997805, 20);
-        $s11 += self::mul($s19,  136657, 18);
-        $s12 -= self::mul($s19,  683901, 20);
-
-        $s6  += self::mul($s18,  666643, 20);
-        $s7  += self::mul($s18,  470296, 19);
-        $s8  += self::mul($s18,  654183, 20);
-        $s9  -= self::mul($s18,  997805, 20);
-        $s10 += self::mul($s18,  136657, 18);
-        $s11 -= self::mul($s18,  683901, 20);
-
-        $carry6 = ($s6 + (1 << 20)) >> 21;
-        $s7 += $carry6;
-        $s6 -= $carry6 << 21;
-        $carry8 = ($s8 + (1 << 20)) >> 21;
-        $s9 += $carry8;
-        $s8 -= $carry8 << 21;
-        $carry10 = ($s10 + (1 << 20)) >> 21;
-        $s11 += $carry10;
-        $s10 -= $carry10 << 21;
-        $carry12 = ($s12 + (1 << 20)) >> 21;
-        $s13 += $carry12;
-        $s12 -= $carry12 << 21;
-        $carry14 = ($s14 + (1 << 20)) >> 21;
-        $s15 += $carry14;
-        $s14 -= $carry14 << 21;
-        $carry16 = ($s16 + (1 << 20)) >> 21;
-        $s17 += $carry16;
-        $s16 -= $carry16 << 21;
-
-        $carry7 = ($s7 + (1 << 20)) >> 21;
-        $s8 += $carry7;
-        $s7 -= $carry7 << 21;
-        $carry9 = ($s9 + (1 << 20)) >> 21;
-        $s10 += $carry9;
-        $s9 -= $carry9 << 21;
-        $carry11 = ($s11 + (1 << 20)) >> 21;
-        $s12 += $carry11;
-        $s11 -= $carry11 << 21;
-        $carry13 = ($s13 + (1 << 20)) >> 21;
-        $s14 += $carry13;
-        $s13 -= $carry13 << 21;
-        $carry15 = ($s15 + (1 << 20)) >> 21;
-        $s16 += $carry15;
-        $s15 -= $carry15 << 21;
-
-        $s5  += self::mul($s17,  666643, 20);
-        $s6  += self::mul($s17,  470296, 19);
-        $s7  += self::mul($s17,  654183, 20);
-        $s8  -= self::mul($s17,  997805, 20);
-        $s9  += self::mul($s17,  136657, 18);
-        $s10 -= self::mul($s17,  683901, 20);
-
-        $s4 += self::mul($s16,  666643, 20);
-        $s5 += self::mul($s16,  470296, 19);
-        $s6 += self::mul($s16,  654183, 20);
-        $s7 -= self::mul($s16,  997805, 20);
-        $s8 += self::mul($s16,  136657, 18);
-        $s9 -= self::mul($s16,  683901, 20);
-
-        $s3 += self::mul($s15,  666643, 20);
-        $s4 += self::mul($s15,  470296, 19);
-        $s5 += self::mul($s15,  654183, 20);
-        $s6 -= self::mul($s15,  997805, 20);
-        $s7 += self::mul($s15,  136657, 18);
-        $s8 -= self::mul($s15,  683901, 20);
-
-        $s2 += self::mul($s14,  666643, 20);
-        $s3 += self::mul($s14,  470296, 19);
-        $s4 += self::mul($s14,  654183, 20);
-        $s5 -= self::mul($s14,  997805, 20);
-        $s6 += self::mul($s14,  136657, 18);
-        $s7 -= self::mul($s14,  683901, 20);
-
-        $s1 += self::mul($s13,  666643, 20);
-        $s2 += self::mul($s13,  470296, 19);
-        $s3 += self::mul($s13,  654183, 20);
-        $s4 -= self::mul($s13,  997805, 20);
-        $s5 += self::mul($s13,  136657, 18);
-        $s6 -= self::mul($s13,  683901, 20);
-
-        $s0 += self::mul($s12,  666643, 20);
-        $s1 += self::mul($s12,  470296, 19);
-        $s2 += self::mul($s12,  654183, 20);
-        $s3 -= self::mul($s12,  997805, 20);
-        $s4 += self::mul($s12,  136657, 18);
-        $s5 -= self::mul($s12,  683901, 20);
-        $s12 = 0;
-
-        $carry0 = ($s0 + (1 << 20)) >> 21;
-        $s1 += $carry0;
-        $s0 -= $carry0 << 21;
-        $carry2 = ($s2 + (1 << 20)) >> 21;
-        $s3 += $carry2;
-        $s2 -= $carry2 << 21;
-        $carry4 = ($s4 + (1 << 20)) >> 21;
-        $s5 += $carry4;
-        $s4 -= $carry4 << 21;
-        $carry6 = ($s6 + (1 << 20)) >> 21;
-        $s7 += $carry6;
-        $s6 -= $carry6 << 21;
-        $carry8 = ($s8 + (1 << 20)) >> 21;
-        $s9 += $carry8;
-        $s8 -= $carry8 << 21;
-        $carry10 = ($s10 + (1 << 20)) >> 21;
-        $s11 += $carry10;
-        $s10 -= $carry10 << 21;
-
-        $carry1 = ($s1 + (1 << 20)) >> 21;
-        $s2 += $carry1;
-        $s1 -= $carry1 << 21;
-        $carry3 = ($s3 + (1 << 20)) >> 21;
-        $s4 += $carry3;
-        $s3 -= $carry3 << 21;
-        $carry5 = ($s5 + (1 << 20)) >> 21;
-        $s6 += $carry5;
-        $s5 -= $carry5 << 21;
-        $carry7 = ($s7 + (1 << 20)) >> 21;
-        $s8 += $carry7;
-        $s7 -= $carry7 << 21;
-        $carry9 = ($s9 + (1 << 20)) >> 21;
-        $s10 += $carry9;
-        $s9 -= $carry9 << 21;
-        $carry11 = ($s11 + (1 << 20)) >> 21;
-        $s12 += $carry11;
-        $s11 -= $carry11 << 21;
-
-        $s0 += self::mul($s12,  666643, 20);
-        $s1 += self::mul($s12,  470296, 19);
-        $s2 += self::mul($s12,  654183, 20);
-        $s3 -= self::mul($s12,  997805, 20);
-        $s4 += self::mul($s12,  136657, 18);
-        $s5 -= self::mul($s12,  683901, 20);
-        $s12 = 0;
-
-        $carry0 = $s0 >> 21;
-        $s1 += $carry0;
-        $s0 -= $carry0 << 21;
-        $carry1 = $s1 >> 21;
-        $s2 += $carry1;
-        $s1 -= $carry1 << 21;
-        $carry2 = $s2 >> 21;
-        $s3 += $carry2;
-        $s2 -= $carry2 << 21;
-        $carry3 = $s3 >> 21;
-        $s4 += $carry3;
-        $s3 -= $carry3 << 21;
-        $carry4 = $s4 >> 21;
-        $s5 += $carry4;
-        $s4 -= $carry4 << 21;
-        $carry5 = $s5 >> 21;
-        $s6 += $carry5;
-        $s5 -= $carry5 << 21;
-        $carry6 = $s6 >> 21;
-        $s7 += $carry6;
-        $s6 -= $carry6 << 21;
-        $carry7 = $s7 >> 21;
-        $s8 += $carry7;
-        $s7 -= $carry7 << 21;
-        $carry8 = $s8 >> 21;
-        $s9 += $carry8;
-        $s8 -= $carry8 << 21;
-        $carry9 = $s9 >> 21;
-        $s10 += $carry9;
-        $s9 -= $carry9 << 21;
-        $carry10 = $s10 >> 21;
-        $s11 += $carry10;
-        $s10 -= $carry10 << 21;
-        $carry11 = $s11 >> 21;
-        $s12 += $carry11;
-        $s11 -= $carry11 << 21;
-
-        $s0 += self::mul($s12,  666643, 20);
-        $s1 += self::mul($s12,  470296, 19);
-        $s2 += self::mul($s12,  654183, 20);
-        $s3 -= self::mul($s12,  997805, 20);
-        $s4 += self::mul($s12,  136657, 18);
-        $s5 -= self::mul($s12,  683901, 20);
-
-        $carry0 = $s0 >> 21;
-        $s1 += $carry0;
-        $s0 -= $carry0 << 21;
-        $carry1 = $s1 >> 21;
-        $s2 += $carry1;
-        $s1 -= $carry1 << 21;
-        $carry2 = $s2 >> 21;
-        $s3 += $carry2;
-        $s2 -= $carry2 << 21;
-        $carry3 = $s3 >> 21;
-        $s4 += $carry3;
-        $s3 -= $carry3 << 21;
-        $carry4 = $s4 >> 21;
-        $s5 += $carry4;
-        $s4 -= $carry4 << 21;
-        $carry5 = $s5 >> 21;
-        $s6 += $carry5;
-        $s5 -= $carry5 << 21;
-        $carry6 = $s6 >> 21;
-        $s7 += $carry6;
-        $s6 -= $carry6 << 21;
-        $carry7 = $s7 >> 21;
-        $s8 += $carry7;
-        $s7 -= $carry7 << 21;
-        $carry8 = $s8 >> 21;
-        $s9 += $carry8;
-        $s8 -= $carry8 << 21;
-        $carry9 = $s9 >> 21;
-        $s10 += $carry9;
-        $s9 -= $carry9 << 21;
-        $carry10 = $s10 >> 21;
-        $s11 += $carry10;
-        $s10 -= $carry10 << 21;
-
-        /**
-         * @var array<int, int>
-         */
-        $arr = array(
-            (int) (0xff & ($s0 >> 0)),
-            (int) (0xff & ($s0 >> 8)),
-            (int) (0xff & (($s0 >> 16) | $s1 << 5)),
-            (int) (0xff & ($s1 >> 3)),
-            (int) (0xff & ($s1 >> 11)),
-            (int) (0xff & (($s1 >> 19) | $s2 << 2)),
-            (int) (0xff & ($s2 >> 6)),
-            (int) (0xff & (($s2 >> 14) | $s3 << 7)),
-            (int) (0xff & ($s3 >> 1)),
-            (int) (0xff & ($s3 >> 9)),
-            (int) (0xff & (($s3 >> 17) | $s4 << 4)),
-            (int) (0xff & ($s4 >> 4)),
-            (int) (0xff & ($s4 >> 12)),
-            (int) (0xff & (($s4 >> 20) | $s5 << 1)),
-            (int) (0xff & ($s5 >> 7)),
-            (int) (0xff & (($s5 >> 15) | $s6 << 6)),
-            (int) (0xff & ($s6 >> 2)),
-            (int) (0xff & ($s6 >> 10)),
-            (int) (0xff & (($s6 >> 18) | $s7 << 3)),
-            (int) (0xff & ($s7 >> 5)),
-            (int) (0xff & ($s7 >> 13)),
-            (int) (0xff & ($s8 >> 0)),
-            (int) (0xff & ($s8 >> 8)),
-            (int) (0xff & (($s8 >> 16) | $s9 << 5)),
-            (int) (0xff & ($s9 >> 3)),
-            (int) (0xff & ($s9 >> 11)),
-            (int) (0xff & (($s9 >> 19) | $s10 << 2)),
-            (int) (0xff & ($s10 >> 6)),
-            (int) (0xff & (($s10 >> 14) | $s11 << 7)),
-            (int) (0xff & ($s11 >> 1)),
-            (int) (0xff & ($s11 >> 9)),
-            0xff & ($s11 >> 17)
-        );
-        return self::intArrayToString($arr);
-    }
-
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param string $s
-     * @return string
-     * @throws TypeError
-     */
-    public static function sc_reduce($s)
-    {
-        $s0 = 2097151 & self::load_3(self::substr($s, 0, 3));
-        $s1 = 2097151 & (self::load_4(self::substr($s, 2, 4)) >> 5);
-        $s2 = 2097151 & (self::load_3(self::substr($s, 5, 3)) >> 2);
-        $s3 = 2097151 & (self::load_4(self::substr($s, 7, 4)) >> 7);
-        $s4 = 2097151 & (self::load_4(self::substr($s, 10, 4)) >> 4);
-        $s5 = 2097151 & (self::load_3(self::substr($s, 13, 3)) >> 1);
-        $s6 = 2097151 & (self::load_4(self::substr($s, 15, 4)) >> 6);
-        $s7 = 2097151 & (self::load_3(self::substr($s, 18, 4)) >> 3);
-        $s8 = 2097151 & self::load_3(self::substr($s, 21, 3));
-        $s9 = 2097151 & (self::load_4(self::substr($s, 23, 4)) >> 5);
-        $s10 = 2097151 & (self::load_3(self::substr($s, 26, 3)) >> 2);
-        $s11 = 2097151 & (self::load_4(self::substr($s, 28, 4)) >> 7);
-        $s12 = 2097151 & (self::load_4(self::substr($s, 31, 4)) >> 4);
-        $s13 = 2097151 & (self::load_3(self::substr($s, 34, 3)) >> 1);
-        $s14 = 2097151 & (self::load_4(self::substr($s, 36, 4)) >> 6);
-        $s15 = 2097151 & (self::load_3(self::substr($s, 39, 4)) >> 3);
-        $s16 = 2097151 & self::load_3(self::substr($s, 42, 3));
-        $s17 = 2097151 & (self::load_4(self::substr($s, 44, 4)) >> 5);
-        $s18 = 2097151 & (self::load_3(self::substr($s, 47, 3)) >> 2);
-        $s19 = 2097151 & (self::load_4(self::substr($s, 49, 4)) >> 7);
-        $s20 = 2097151 & (self::load_4(self::substr($s, 52, 4)) >> 4);
-        $s21 = 2097151 & (self::load_3(self::substr($s, 55, 3)) >> 1);
-        $s22 = 2097151 & (self::load_4(self::substr($s, 57, 4)) >> 6);
-        $s23 = (self::load_4(self::substr($s, 60, 4)) >> 3);
-
-        $s11 += self::mul($s23,  666643, 20);
-        $s12 += self::mul($s23,  470296, 19);
-        $s13 += self::mul($s23,  654183, 20);
-        $s14 -= self::mul($s23,  997805, 20);
-        $s15 += self::mul($s23,  136657, 18);
-        $s16 -= self::mul($s23,  683901, 20);
-
-        $s10 += self::mul($s22,  666643, 20);
-        $s11 += self::mul($s22,  470296, 19);
-        $s12 += self::mul($s22,  654183, 20);
-        $s13 -= self::mul($s22,  997805, 20);
-        $s14 += self::mul($s22,  136657, 18);
-        $s15 -= self::mul($s22,  683901, 20);
-
-        $s9  += self::mul($s21,  666643, 20);
-        $s10 += self::mul($s21,  470296, 19);
-        $s11 += self::mul($s21,  654183, 20);
-        $s12 -= self::mul($s21,  997805, 20);
-        $s13 += self::mul($s21,  136657, 18);
-        $s14 -= self::mul($s21,  683901, 20);
-
-        $s8  += self::mul($s20,  666643, 20);
-        $s9  += self::mul($s20,  470296, 19);
-        $s10 += self::mul($s20,  654183, 20);
-        $s11 -= self::mul($s20,  997805, 20);
-        $s12 += self::mul($s20,  136657, 18);
-        $s13 -= self::mul($s20,  683901, 20);
-
-        $s7  += self::mul($s19,  666643, 20);
-        $s8  += self::mul($s19,  470296, 19);
-        $s9  += self::mul($s19,  654183, 20);
-        $s10 -= self::mul($s19,  997805, 20);
-        $s11 += self::mul($s19,  136657, 18);
-        $s12 -= self::mul($s19,  683901, 20);
-
-        $s6  += self::mul($s18,  666643, 20);
-        $s7  += self::mul($s18,  470296, 19);
-        $s8  += self::mul($s18,  654183, 20);
-        $s9  -= self::mul($s18,  997805, 20);
-        $s10 += self::mul($s18,  136657, 18);
-        $s11 -= self::mul($s18,  683901, 20);
-
-        $carry6 = ($s6 + (1 << 20)) >> 21;
-        $s7 += $carry6;
-        $s6 -= $carry6 << 21;
-        $carry8 = ($s8 + (1 << 20)) >> 21;
-        $s9 += $carry8;
-        $s8 -= $carry8 << 21;
-        $carry10 = ($s10 + (1 << 20)) >> 21;
-        $s11 += $carry10;
-        $s10 -= $carry10 << 21;
-        $carry12 = ($s12 + (1 << 20)) >> 21;
-        $s13 += $carry12;
-        $s12 -= $carry12 << 21;
-        $carry14 = ($s14 + (1 << 20)) >> 21;
-        $s15 += $carry14;
-        $s14 -= $carry14 << 21;
-        $carry16 = ($s16 + (1 << 20)) >> 21;
-        $s17 += $carry16;
-        $s16 -= $carry16 << 21;
-
-        $carry7 = ($s7 + (1 << 20)) >> 21;
-        $s8 += $carry7;
-        $s7 -= $carry7 << 21;
-        $carry9 = ($s9 + (1 << 20)) >> 21;
-        $s10 += $carry9;
-        $s9 -= $carry9 << 21;
-        $carry11 = ($s11 + (1 << 20)) >> 21;
-        $s12 += $carry11;
-        $s11 -= $carry11 << 21;
-        $carry13 = ($s13 + (1 << 20)) >> 21;
-        $s14 += $carry13;
-        $s13 -= $carry13 << 21;
-        $carry15 = ($s15 + (1 << 20)) >> 21;
-        $s16 += $carry15;
-        $s15 -= $carry15 << 21;
-
-        $s5  += self::mul($s17,  666643, 20);
-        $s6  += self::mul($s17,  470296, 19);
-        $s7  += self::mul($s17,  654183, 20);
-        $s8  -= self::mul($s17,  997805, 20);
-        $s9  += self::mul($s17,  136657, 18);
-        $s10 -= self::mul($s17,  683901, 20);
-
-        $s4 += self::mul($s16,  666643, 20);
-        $s5 += self::mul($s16,  470296, 19);
-        $s6 += self::mul($s16,  654183, 20);
-        $s7 -= self::mul($s16,  997805, 20);
-        $s8 += self::mul($s16,  136657, 18);
-        $s9 -= self::mul($s16,  683901, 20);
-
-        $s3 += self::mul($s15,  666643, 20);
-        $s4 += self::mul($s15,  470296, 19);
-        $s5 += self::mul($s15,  654183, 20);
-        $s6 -= self::mul($s15,  997805, 20);
-        $s7 += self::mul($s15,  136657, 18);
-        $s8 -= self::mul($s15,  683901, 20);
-
-        $s2 += self::mul($s14,  666643, 20);
-        $s3 += self::mul($s14,  470296, 19);
-        $s4 += self::mul($s14,  654183, 20);
-        $s5 -= self::mul($s14,  997805, 20);
-        $s6 += self::mul($s14,  136657, 18);
-        $s7 -= self::mul($s14,  683901, 20);
-
-        $s1 += self::mul($s13,  666643, 20);
-        $s2 += self::mul($s13,  470296, 19);
-        $s3 += self::mul($s13,  654183, 20);
-        $s4 -= self::mul($s13,  997805, 20);
-        $s5 += self::mul($s13,  136657, 18);
-        $s6 -= self::mul($s13,  683901, 20);
-
-        $s0 += self::mul($s12,  666643, 20);
-        $s1 += self::mul($s12,  470296, 19);
-        $s2 += self::mul($s12,  654183, 20);
-        $s3 -= self::mul($s12,  997805, 20);
-        $s4 += self::mul($s12,  136657, 18);
-        $s5 -= self::mul($s12,  683901, 20);
-        $s12 = 0;
-
-        $carry0 = ($s0 + (1 << 20)) >> 21;
-        $s1 += $carry0;
-        $s0 -= $carry0 << 21;
-        $carry2 = ($s2 + (1 << 20)) >> 21;
-        $s3 += $carry2;
-        $s2 -= $carry2 << 21;
-        $carry4 = ($s4 + (1 << 20)) >> 21;
-        $s5 += $carry4;
-        $s4 -= $carry4 << 21;
-        $carry6 = ($s6 + (1 << 20)) >> 21;
-        $s7 += $carry6;
-        $s6 -= $carry6 << 21;
-        $carry8 = ($s8 + (1 << 20)) >> 21;
-        $s9 += $carry8;
-        $s8 -= $carry8 << 21;
-        $carry10 = ($s10 + (1 << 20)) >> 21;
-        $s11 += $carry10;
-        $s10 -= $carry10 << 21;
-
-        $carry1 = ($s1 + (1 << 20)) >> 21;
-        $s2 += $carry1;
-        $s1 -= $carry1 << 21;
-        $carry3 = ($s3 + (1 << 20)) >> 21;
-        $s4 += $carry3;
-        $s3 -= $carry3 << 21;
-        $carry5 = ($s5 + (1 << 20)) >> 21;
-        $s6 += $carry5;
-        $s5 -= $carry5 << 21;
-        $carry7 = ($s7 + (1 << 20)) >> 21;
-        $s8 += $carry7;
-        $s7 -= $carry7 << 21;
-        $carry9 = ($s9 + (1 << 20)) >> 21;
-        $s10 += $carry9;
-        $s9 -= $carry9 << 21;
-        $carry11 = ($s11 + (1 << 20)) >> 21;
-        $s12 += $carry11;
-        $s11 -= $carry11 << 21;
-
-        $s0 += self::mul($s12,  666643, 20);
-        $s1 += self::mul($s12,  470296, 19);
-        $s2 += self::mul($s12,  654183, 20);
-        $s3 -= self::mul($s12,  997805, 20);
-        $s4 += self::mul($s12,  136657, 18);
-        $s5 -= self::mul($s12,  683901, 20);
-        $s12 = 0;
-
-        $carry0 = $s0 >> 21;
-        $s1 += $carry0;
-        $s0 -= $carry0 << 21;
-        $carry1 = $s1 >> 21;
-        $s2 += $carry1;
-        $s1 -= $carry1 << 21;
-        $carry2 = $s2 >> 21;
-        $s3 += $carry2;
-        $s2 -= $carry2 << 21;
-        $carry3 = $s3 >> 21;
-        $s4 += $carry3;
-        $s3 -= $carry3 << 21;
-        $carry4 = $s4 >> 21;
-        $s5 += $carry4;
-        $s4 -= $carry4 << 21;
-        $carry5 = $s5 >> 21;
-        $s6 += $carry5;
-        $s5 -= $carry5 << 21;
-        $carry6 = $s6 >> 21;
-        $s7 += $carry6;
-        $s6 -= $carry6 << 21;
-        $carry7 = $s7 >> 21;
-        $s8 += $carry7;
-        $s7 -= $carry7 << 21;
-        $carry8 = $s8 >> 21;
-        $s9 += $carry8;
-        $s8 -= $carry8 << 21;
-        $carry9 = $s9 >> 21;
-        $s10 += $carry9;
-        $s9 -= $carry9 << 21;
-        $carry10 = $s10 >> 21;
-        $s11 += $carry10;
-        $s10 -= $carry10 << 21;
-        $carry11 = $s11 >> 21;
-        $s12 += $carry11;
-        $s11 -= $carry11 << 21;
-
-        $s0 += self::mul($s12,  666643, 20);
-        $s1 += self::mul($s12,  470296, 19);
-        $s2 += self::mul($s12,  654183, 20);
-        $s3 -= self::mul($s12,  997805, 20);
-        $s4 += self::mul($s12,  136657, 18);
-        $s5 -= self::mul($s12,  683901, 20);
-
-        $carry0 = $s0 >> 21;
-        $s1 += $carry0;
-        $s0 -= $carry0 << 21;
-        $carry1 = $s1 >> 21;
-        $s2 += $carry1;
-        $s1 -= $carry1 << 21;
-        $carry2 = $s2 >> 21;
-        $s3 += $carry2;
-        $s2 -= $carry2 << 21;
-        $carry3 = $s3 >> 21;
-        $s4 += $carry3;
-        $s3 -= $carry3 << 21;
-        $carry4 = $s4 >> 21;
-        $s5 += $carry4;
-        $s4 -= $carry4 << 21;
-        $carry5 = $s5 >> 21;
-        $s6 += $carry5;
-        $s5 -= $carry5 << 21;
-        $carry6 = $s6 >> 21;
-        $s7 += $carry6;
-        $s6 -= $carry6 << 21;
-        $carry7 = $s7 >> 21;
-        $s8 += $carry7;
-        $s7 -= $carry7 << 21;
-        $carry8 = $s8 >> 21;
-        $s9 += $carry8;
-        $s8 -= $carry8 << 21;
-        $carry9 = $s9 >> 21;
-        $s10 += $carry9;
-        $s9 -= $carry9 << 21;
-        $carry10 = $s10 >> 21;
-        $s11 += $carry10;
-        $s10 -= $carry10 << 21;
-
-        /**
-         * @var array<int, int>
-         */
-        $arr = array(
-            (int) ($s0 >> 0),
-            (int) ($s0 >> 8),
-            (int) (($s0 >> 16) | $s1 << 5),
-            (int) ($s1 >> 3),
-            (int) ($s1 >> 11),
-            (int) (($s1 >> 19) | $s2 << 2),
-            (int) ($s2 >> 6),
-            (int) (($s2 >> 14) | $s3 << 7),
-            (int) ($s3 >> 1),
-            (int) ($s3 >> 9),
-            (int) (($s3 >> 17) | $s4 << 4),
-            (int) ($s4 >> 4),
-            (int) ($s4 >> 12),
-            (int) (($s4 >> 20) | $s5 << 1),
-            (int) ($s5 >> 7),
-            (int) (($s5 >> 15) | $s6 << 6),
-            (int) ($s6 >> 2),
-            (int) ($s6 >> 10),
-            (int) (($s6 >> 18) | $s7 << 3),
-            (int) ($s7 >> 5),
-            (int) ($s7 >> 13),
-            (int) ($s8 >> 0),
-            (int) ($s8 >> 8),
-            (int) (($s8 >> 16) | $s9 << 5),
-            (int) ($s9 >> 3),
-            (int) ($s9 >> 11),
-            (int) (($s9 >> 19) | $s10 << 2),
-            (int) ($s10 >> 6),
-            (int) (($s10 >> 14) | $s11 << 7),
-            (int) ($s11 >> 1),
-            (int) ($s11 >> 9),
-            (int) $s11 >> 17
-        );
-        return self::intArrayToString($arr);
-    }
-
-    /**
-     * multiply by the order of the main subgroup l = 2^252+27742317777372353535851937790883648493
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
-     */
-    public static function ge_mul_l(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A)
-    {
-        $aslide = array(
-            13, 0, 0, 0, 0, -1, 0, 0, 0, 0, -11, 0, 0, 0, 0, 0, 0, -5, 0, 0, 0,
-            0, 0, 0, -3, 0, 0, 0, 0, -13, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 3, 0,
-            0, 0, 0, -13, 0, 0, 0, 0, 5, 0, 0, 0, 0, 0, 0, 0, 0, 11, 0, 0, 0,
-            0, 0, 11, 0, 0, 0, 0, -13, 0, 0, 0, 0, 0, 0, -3, 0, 0, 0, 0, 0, -1,
-            0, 0, 0, 0, 3, 0, 0, 0, 0, -11, 0, 0, 0, 0, 0, 0, 0, 15, 0, 0, 0,
-            0, 0, -1, 0, 0, 0, 0, -1, 0, 0, 0, 0, 7, 0, 0, 0, 0, 5, 0, 0, 0, 0,
-            0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
-            0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
-            0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
-            0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
-            0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
-            0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1
-        );
-
-        /** @var array<int, ParagonIE_Sodium_Core_Curve25519_Ge_Cached> $Ai size 8 */
-        $Ai = array();
-
-        # ge_p3_to_cached(&Ai[0], A);
-        $Ai[0] = self::ge_p3_to_cached($A);
-        # ge_p3_dbl(&t, A);
-        $t = self::ge_p3_dbl($A);
-        # ge_p1p1_to_p3(&A2, &t);
-        $A2 = self::ge_p1p1_to_p3($t);
-
-        for ($i = 1; $i < 8; ++$i) {
-            # ge_add(&t, &A2, &Ai[0]);
-            $t = self::ge_add($A2, $Ai[$i - 1]);
-            # ge_p1p1_to_p3(&u, &t);
-            $u = self::ge_p1p1_to_p3($t);
-            # ge_p3_to_cached(&Ai[i], &u);
-            $Ai[$i] = self::ge_p3_to_cached($u);
-        }
-
-        $r = self::ge_p3_0();
-        for ($i = 252; $i >= 0; --$i) {
-            $t = self::ge_p3_dbl($r);
-            if ($aslide[$i] > 0) {
-                # ge_p1p1_to_p3(&u, &t);
-                $u = self::ge_p1p1_to_p3($t);
-                # ge_add(&t, &u, &Ai[aslide[i] / 2]);
-                $t = self::ge_add($u, $Ai[(int)($aslide[$i] / 2)]);
-            } elseif ($aslide[$i] < 0) {
-                # ge_p1p1_to_p3(&u, &t);
-                $u = self::ge_p1p1_to_p3($t);
-                # ge_sub(&t, &u, &Ai[(-aslide[i]) / 2]);
-                $t = self::ge_sub($u, $Ai[(int)(-$aslide[$i] / 2)]);
-            }
-        }
-
-        # ge_p1p1_to_p3(r, &t);
-        return self::ge_p1p1_to_p3($t);
-    }
-
-    /**
-     * @param string $a
-     * @param string $b
-     * @return string
-     */
-    public static function sc25519_mul($a, $b)
-    {
-        //    int64_t a0  = 2097151 & load_3(a);
-        //    int64_t a1  = 2097151 & (load_4(a + 2) >> 5);
-        //    int64_t a2  = 2097151 & (load_3(a + 5) >> 2);
-        //    int64_t a3  = 2097151 & (load_4(a + 7) >> 7);
-        //    int64_t a4  = 2097151 & (load_4(a + 10) >> 4);
-        //    int64_t a5  = 2097151 & (load_3(a + 13) >> 1);
-        //    int64_t a6  = 2097151 & (load_4(a + 15) >> 6);
-        //    int64_t a7  = 2097151 & (load_3(a + 18) >> 3);
-        //    int64_t a8  = 2097151 & load_3(a + 21);
-        //    int64_t a9  = 2097151 & (load_4(a + 23) >> 5);
-        //    int64_t a10 = 2097151 & (load_3(a + 26) >> 2);
-        //    int64_t a11 = (load_4(a + 28) >> 7);
-        $a0  = 2097151 &  self::load_3(self::substr($a, 0, 3));
-        $a1  = 2097151 & (self::load_4(self::substr($a, 2, 4)) >> 5);
-        $a2  = 2097151 & (self::load_3(self::substr($a, 5, 3)) >> 2);
-        $a3  = 2097151 & (self::load_4(self::substr($a, 7, 4)) >> 7);
-        $a4  = 2097151 & (self::load_4(self::substr($a, 10, 4)) >> 4);
-        $a5  = 2097151 & (self::load_3(self::substr($a, 13, 3)) >> 1);
-        $a6  = 2097151 & (self::load_4(self::substr($a, 15, 4)) >> 6);
-        $a7  = 2097151 & (self::load_3(self::substr($a, 18, 3)) >> 3);
-        $a8  = 2097151 &  self::load_3(self::substr($a, 21, 3));
-        $a9  = 2097151 & (self::load_4(self::substr($a, 23, 4)) >> 5);
-        $a10 = 2097151 & (self::load_3(self::substr($a, 26, 3)) >> 2);
-        $a11 = (self::load_4(self::substr($a, 28, 4)) >> 7);
-
-        //    int64_t b0  = 2097151 & load_3(b);
-        //    int64_t b1  = 2097151 & (load_4(b + 2) >> 5);
-        //    int64_t b2  = 2097151 & (load_3(b + 5) >> 2);
-        //    int64_t b3  = 2097151 & (load_4(b + 7) >> 7);
-        //    int64_t b4  = 2097151 & (load_4(b + 10) >> 4);
-        //    int64_t b5  = 2097151 & (load_3(b + 13) >> 1);
-        //    int64_t b6  = 2097151 & (load_4(b + 15) >> 6);
-        //    int64_t b7  = 2097151 & (load_3(b + 18) >> 3);
-        //    int64_t b8  = 2097151 & load_3(b + 21);
-        //    int64_t b9  = 2097151 & (load_4(b + 23) >> 5);
-        //    int64_t b10 = 2097151 & (load_3(b + 26) >> 2);
-        //    int64_t b11 = (load_4(b + 28) >> 7);
-        $b0  = 2097151 &  self::load_3(self::substr($b, 0, 3));
-        $b1  = 2097151 & (self::load_4(self::substr($b, 2, 4)) >> 5);
-        $b2  = 2097151 & (self::load_3(self::substr($b, 5, 3)) >> 2);
-        $b3  = 2097151 & (self::load_4(self::substr($b, 7, 4)) >> 7);
-        $b4  = 2097151 & (self::load_4(self::substr($b, 10, 4)) >> 4);
-        $b5  = 2097151 & (self::load_3(self::substr($b, 13, 3)) >> 1);
-        $b6  = 2097151 & (self::load_4(self::substr($b, 15, 4)) >> 6);
-        $b7  = 2097151 & (self::load_3(self::substr($b, 18, 3)) >> 3);
-        $b8  = 2097151 &  self::load_3(self::substr($b, 21, 3));
-        $b9  = 2097151 & (self::load_4(self::substr($b, 23, 4)) >> 5);
-        $b10 = 2097151 & (self::load_3(self::substr($b, 26, 3)) >> 2);
-        $b11 = (self::load_4(self::substr($b, 28, 4)) >> 7);
-
-        //    s0 = a0 * b0;
-        //    s1 = a0 * b1 + a1 * b0;
-        //    s2 = a0 * b2 + a1 * b1 + a2 * b0;
-        //    s3 = a0 * b3 + a1 * b2 + a2 * b1 + a3 * b0;
-        //    s4 = a0 * b4 + a1 * b3 + a2 * b2 + a3 * b1 + a4 * b0;
-        //    s5 = a0 * b5 + a1 * b4 + a2 * b3 + a3 * b2 + a4 * b1 + a5 * b0;
-        //    s6 = a0 * b6 + a1 * b5 + a2 * b4 + a3 * b3 + a4 * b2 + a5 * b1 + a6 * b0;
-        //    s7 = a0 * b7 + a1 * b6 + a2 * b5 + a3 * b4 + a4 * b3 + a5 * b2 +
-        //        a6 * b1 + a7 * b0;
-        //    s8 = a0 * b8 + a1 * b7 + a2 * b6 + a3 * b5 + a4 * b4 + a5 * b3 +
-        //        a6 * b2 + a7 * b1 + a8 * b0;
-        //    s9 = a0 * b9 + a1 * b8 + a2 * b7 + a3 * b6 + a4 * b5 + a5 * b4 +
-        //        a6 * b3 + a7 * b2 + a8 * b1 + a9 * b0;
-        //    s10 = a0 * b10 + a1 * b9 + a2 * b8 + a3 * b7 + a4 * b6 + a5 * b5 +
-        //        a6 * b4 + a7 * b3 + a8 * b2 + a9 * b1 + a10 * b0;
-        //    s11 = a0 * b11 + a1 * b10 + a2 * b9 + a3 * b8 + a4 * b7 + a5 * b6 +
-        //        a6 * b5 + a7 * b4 + a8 * b3 + a9 * b2 + a10 * b1 + a11 * b0;
-        //    s12 = a1 * b11 + a2 * b10 + a3 * b9 + a4 * b8 + a5 * b7 + a6 * b6 +
-        //        a7 * b5 + a8 * b4 + a9 * b3 + a10 * b2 + a11 * b1;
-        //    s13 = a2 * b11 + a3 * b10 + a4 * b9 + a5 * b8 + a6 * b7 + a7 * b6 +
-        //        a8 * b5 + a9 * b4 + a10 * b3 + a11 * b2;
-        //    s14 = a3 * b11 + a4 * b10 + a5 * b9 + a6 * b8 + a7 * b7 + a8 * b6 +
-        //        a9 * b5 + a10 * b4 + a11 * b3;
-        //    s15 = a4 * b11 + a5 * b10 + a6 * b9 + a7 * b8 + a8 * b7 + a9 * b6 +
-        //        a10 * b5 + a11 * b4;
-        //    s16 =
-        //        a5 * b11 + a6 * b10 + a7 * b9 + a8 * b8 + a9 * b7 + a10 * b6 + a11 * b5;
-        //    s17 = a6 * b11 + a7 * b10 + a8 * b9 + a9 * b8 + a10 * b7 + a11 * b6;
-        //    s18 = a7 * b11 + a8 * b10 + a9 * b9 + a10 * b8 + a11 * b7;
-        //    s19 = a8 * b11 + a9 * b10 + a10 * b9 + a11 * b8;
-        //    s20 = a9 * b11 + a10 * b10 + a11 * b9;
-        //    s21 = a10 * b11 + a11 * b10;
-        //    s22 = a11 * b11;
-        //    s23 = 0;
-        $s0 = self::mul($a0, $b0, 22);
-        $s1 = self::mul($a0, $b1, 22) + self::mul($a1, $b0, 22);
-        $s2 = self::mul($a0, $b2, 22) + self::mul($a1, $b1, 22) + self::mul($a2, $b0, 22);
-        $s3 = self::mul($a0, $b3, 22) + self::mul($a1, $b2, 22) + self::mul($a2, $b1, 22) + self::mul($a3, $b0, 22);
-        $s4 = self::mul($a0, $b4, 22) + self::mul($a1, $b3, 22) + self::mul($a2, $b2, 22) + self::mul($a3, $b1, 22) +
-            self::mul($a4, $b0, 22);
-        $s5 = self::mul($a0, $b5, 22) + self::mul($a1, $b4, 22) + self::mul($a2, $b3, 22) + self::mul($a3, $b2, 22) +
-            self::mul($a4, $b1, 22) + self::mul($a5, $b0, 22);
-        $s6 = self::mul($a0, $b6, 22) + self::mul($a1, $b5, 22) + self::mul($a2, $b4, 22) + self::mul($a3, $b3, 22) +
-            self::mul($a4, $b2, 22) + self::mul($a5, $b1, 22) + self::mul($a6, $b0, 22);
-        $s7 = self::mul($a0, $b7, 22) + self::mul($a1, $b6, 22) + self::mul($a2, $b5, 22) + self::mul($a3, $b4, 22) +
-            self::mul($a4, $b3, 22) + self::mul($a5, $b2, 22) + self::mul($a6, $b1, 22) + self::mul($a7, $b0, 22);
-        $s8 = self::mul($a0, $b8, 22) + self::mul($a1, $b7, 22) + self::mul($a2, $b6, 22) + self::mul($a3, $b5, 22) +
-            self::mul($a4, $b4, 22) + self::mul($a5, $b3, 22) + self::mul($a6, $b2, 22) + self::mul($a7, $b1, 22) +
-            self::mul($a8, $b0, 22);
-        $s9 = self::mul($a0, $b9, 22) + self::mul($a1, $b8, 22) + self::mul($a2, $b7, 22) + self::mul($a3, $b6, 22) +
-            self::mul($a4, $b5, 22) + self::mul($a5, $b4, 22) + self::mul($a6, $b3, 22) + self::mul($a7, $b2, 22) +
-            self::mul($a8, $b1, 22) + self::mul($a9, $b0, 22);
-        $s10 = self::mul($a0, $b10, 22) + self::mul($a1, $b9, 22) + self::mul($a2, $b8, 22) + self::mul($a3, $b7, 22) +
-            self::mul($a4, $b6, 22) + self::mul($a5, $b5, 22) + self::mul($a6, $b4, 22) + self::mul($a7, $b3, 22) +
-            self::mul($a8, $b2, 22) + self::mul($a9, $b1, 22) + self::mul($a10, $b0, 22);
-        $s11 = self::mul($a0, $b11, 22) + self::mul($a1, $b10, 22) + self::mul($a2, $b9, 22) + self::mul($a3, $b8, 22) +
-            self::mul($a4, $b7, 22) + self::mul($a5, $b6, 22) + self::mul($a6, $b5, 22) + self::mul($a7, $b4, 22) +
-            self::mul($a8, $b3, 22) + self::mul($a9, $b2, 22) + self::mul($a10, $b1, 22) + self::mul($a11, $b0, 22);
-        $s12 = self::mul($a1, $b11, 22) + self::mul($a2, $b10, 22) + self::mul($a3, $b9, 22) + self::mul($a4, $b8, 22) +
-            self::mul($a5, $b7, 22) + self::mul($a6, $b6, 22) + self::mul($a7, $b5, 22) + self::mul($a8, $b4, 22) +
-            self::mul($a9, $b3, 22) + self::mul($a10, $b2, 22) + self::mul($a11, $b1, 22);
-        $s13 = self::mul($a2, $b11, 22) + self::mul($a3, $b10, 22) + self::mul($a4, $b9, 22) + self::mul($a5, $b8, 22) +
-            self::mul($a6, $b7, 22) + self::mul($a7, $b6, 22) + self::mul($a8, $b5, 22) + self::mul($a9, $b4, 22) +
-            self::mul($a10, $b3, 22) + self::mul($a11, $b2, 22);
-        $s14 = self::mul($a3, $b11, 22) + self::mul($a4, $b10, 22) + self::mul($a5, $b9, 22) + self::mul($a6, $b8, 22) +
-            self::mul($a7, $b7, 22) + self::mul($a8, $b6, 22) + self::mul($a9, $b5, 22) + self::mul($a10, $b4, 22) +
-            self::mul($a11, $b3, 22);
-        $s15 = self::mul($a4, $b11, 22) + self::mul($a5, $b10, 22) + self::mul($a6, $b9, 22) + self::mul($a7, $b8, 22) +
-            self::mul($a8, $b7, 22) + self::mul($a9, $b6, 22) + self::mul($a10, $b5, 22) + self::mul($a11, $b4, 22);
-        $s16 =
-            self::mul($a5, $b11, 22) + self::mul($a6, $b10, 22) + self::mul($a7, $b9, 22) + self::mul($a8, $b8, 22) +
-            self::mul($a9, $b7, 22) + self::mul($a10, $b6, 22) + self::mul($a11, $b5, 22);
-        $s17 = self::mul($a6, $b11, 22) + self::mul($a7, $b10, 22) + self::mul($a8, $b9, 22) + self::mul($a9, $b8, 22) +
-            self::mul($a10, $b7, 22) + self::mul($a11, $b6, 22);
-        $s18 = self::mul($a7, $b11, 22) + self::mul($a8, $b10, 22) + self::mul($a9, $b9, 22) + self::mul($a10, $b8, 22)
-            + self::mul($a11, $b7, 22);
-        $s19 = self::mul($a8, $b11, 22) + self::mul($a9, $b10, 22) + self::mul($a10, $b9, 22) +
-            self::mul($a11, $b8, 22);
-        $s20 = self::mul($a9, $b11, 22) + self::mul($a10, $b10, 22) + self::mul($a11, $b9, 22);
-        $s21 = self::mul($a10, $b11, 22) + self::mul($a11, $b10, 22);
-        $s22 = self::mul($a11, $b11, 22);
-        $s23 = 0;
-
-        //    carry0 = (s0 + (int64_t) (1L << 20)) >> 21;
-        //    s1 += carry0;
-        //    s0 -= carry0 * ((uint64_t) 1L << 21);
-        $carry0 = ($s0 + (1 << 20)) >> 21;
-        $s1 += $carry0;
-        $s0 -= $carry0 << 21;
-        //    carry2 = (s2 + (int64_t) (1L << 20)) >> 21;
-        //    s3 += carry2;
-        //    s2 -= carry2 * ((uint64_t) 1L << 21);
-        $carry2 = ($s2 + (1 << 20)) >> 21;
-        $s3 += $carry2;
-        $s2 -= $carry2 << 21;
-        //    carry4 = (s4 + (int64_t) (1L << 20)) >> 21;
-        //    s5 += carry4;
-        //    s4 -= carry4 * ((uint64_t) 1L << 21);
-        $carry4 = ($s4 + (1 << 20)) >> 21;
-        $s5 += $carry4;
-        $s4 -= $carry4 << 21;
-        //    carry6 = (s6 + (int64_t) (1L << 20)) >> 21;
-        //    s7 += carry6;
-        //    s6 -= carry6 * ((uint64_t) 1L << 21);
-        $carry6 = ($s6 + (1 << 20)) >> 21;
-        $s7 += $carry6;
-        $s6 -= $carry6 << 21;
-        //    carry8 = (s8 + (int64_t) (1L << 20)) >> 21;
-        //    s9 += carry8;
-        //    s8 -= carry8 * ((uint64_t) 1L << 21);
-        $carry8 = ($s8 + (1 << 20)) >> 21;
-        $s9 += $carry8;
-        $s8 -= $carry8 << 21;
-        //    carry10 = (s10 + (int64_t) (1L << 20)) >> 21;
-        //    s11 += carry10;
-        //    s10 -= carry10 * ((uint64_t) 1L << 21);
-        $carry10 = ($s10 + (1 << 20)) >> 21;
-        $s11 += $carry10;
-        $s10 -= $carry10 << 21;
-        //    carry12 = (s12 + (int64_t) (1L << 20)) >> 21;
-        //    s13 += carry12;
-        //    s12 -= carry12 * ((uint64_t) 1L << 21);
-        $carry12 = ($s12 + (1 << 20)) >> 21;
-        $s13 += $carry12;
-        $s12 -= $carry12 << 21;
-        //    carry14 = (s14 + (int64_t) (1L << 20)) >> 21;
-        //    s15 += carry14;
-        //    s14 -= carry14 * ((uint64_t) 1L << 21);
-        $carry14 = ($s14 + (1 << 20)) >> 21;
-        $s15 += $carry14;
-        $s14 -= $carry14 << 21;
-        //    carry16 = (s16 + (int64_t) (1L << 20)) >> 21;
-        //    s17 += carry16;
-        //    s16 -= carry16 * ((uint64_t) 1L << 21);
-        $carry16 = ($s16 + (1 << 20)) >> 21;
-        $s17 += $carry16;
-        $s16 -= $carry16 << 21;
-        //    carry18 = (s18 + (int64_t) (1L << 20)) >> 21;
-        //    s19 += carry18;
-        //    s18 -= carry18 * ((uint64_t) 1L << 21);
-        $carry18 = ($s18 + (1 << 20)) >> 21;
-        $s19 += $carry18;
-        $s18 -= $carry18 << 21;
-        //    carry20 = (s20 + (int64_t) (1L << 20)) >> 21;
-        //    s21 += carry20;
-        //    s20 -= carry20 * ((uint64_t) 1L << 21);
-        $carry20 = ($s20 + (1 << 20)) >> 21;
-        $s21 += $carry20;
-        $s20 -= $carry20 << 21;
-        //    carry22 = (s22 + (int64_t) (1L << 20)) >> 21;
-        //    s23 += carry22;
-        //    s22 -= carry22 * ((uint64_t) 1L << 21);
-        $carry22 = ($s22 + (1 << 20)) >> 21;
-        $s23 += $carry22;
-        $s22 -= $carry22 << 21;
-
-        //    carry1 = (s1 + (int64_t) (1L << 20)) >> 21;
-        //    s2 += carry1;
-        //    s1 -= carry1 * ((uint64_t) 1L << 21);
-        $carry1 = ($s1 + (1 << 20)) >> 21;
-        $s2 += $carry1;
-        $s1 -= $carry1 << 21;
-        //    carry3 = (s3 + (int64_t) (1L << 20)) >> 21;
-        //    s4 += carry3;
-        //    s3 -= carry3 * ((uint64_t) 1L << 21);
-        $carry3 = ($s3 + (1 << 20)) >> 21;
-        $s4 += $carry3;
-        $s3 -= $carry3 << 21;
-        //    carry5 = (s5 + (int64_t) (1L << 20)) >> 21;
-        //    s6 += carry5;
-        //    s5 -= carry5 * ((uint64_t) 1L << 21);
-        $carry5 = ($s5 + (1 << 20)) >> 21;
-        $s6 += $carry5;
-        $s5 -= $carry5 << 21;
-        //    carry7 = (s7 + (int64_t) (1L << 20)) >> 21;
-        //    s8 += carry7;
-        //    s7 -= carry7 * ((uint64_t) 1L << 21);
-        $carry7 = ($s7 + (1 << 20)) >> 21;
-        $s8 += $carry7;
-        $s7 -= $carry7 << 21;
-        //    carry9 = (s9 + (int64_t) (1L << 20)) >> 21;
-        //    s10 += carry9;
-        //    s9 -= carry9 * ((uint64_t) 1L << 21);
-        $carry9 = ($s9 + (1 << 20)) >> 21;
-        $s10 += $carry9;
-        $s9 -= $carry9 << 21;
-        //    carry11 = (s11 + (int64_t) (1L << 20)) >> 21;
-        //    s12 += carry11;
-        //    s11 -= carry11 * ((uint64_t) 1L << 21);
-        $carry11 = ($s11 + (1 << 20)) >> 21;
-        $s12 += $carry11;
-        $s11 -= $carry11 << 21;
-        //    carry13 = (s13 + (int64_t) (1L << 20)) >> 21;
-        //    s14 += carry13;
-        //    s13 -= carry13 * ((uint64_t) 1L << 21);
-        $carry13 = ($s13 + (1 << 20)) >> 21;
-        $s14 += $carry13;
-        $s13 -= $carry13 << 21;
-        //    carry15 = (s15 + (int64_t) (1L << 20)) >> 21;
-        //    s16 += carry15;
-        //    s15 -= carry15 * ((uint64_t) 1L << 21);
-        $carry15 = ($s15 + (1 << 20)) >> 21;
-        $s16 += $carry15;
-        $s15 -= $carry15 << 21;
-        //    carry17 = (s17 + (int64_t) (1L << 20)) >> 21;
-        //    s18 += carry17;
-        //    s17 -= carry17 * ((uint64_t) 1L << 21);
-        $carry17 = ($s17 + (1 << 20)) >> 21;
-        $s18 += $carry17;
-        $s17 -= $carry17 << 21;
-        //    carry19 = (s19 + (int64_t) (1L << 20)) >> 21;
-        //    s20 += carry19;
-        //    s19 -= carry19 * ((uint64_t) 1L << 21);
-        $carry19 = ($s19 + (1 << 20)) >> 21;
-        $s20 += $carry19;
-        $s19 -= $carry19 << 21;
-        //    carry21 = (s21 + (int64_t) (1L << 20)) >> 21;
-        //    s22 += carry21;
-        //    s21 -= carry21 * ((uint64_t) 1L << 21);
-        $carry21 = ($s21 + (1 << 20)) >> 21;
-        $s22 += $carry21;
-        $s21 -= $carry21 << 21;
-
-        //    s11 += s23 * 666643;
-        //    s12 += s23 * 470296;
-        //    s13 += s23 * 654183;
-        //    s14 -= s23 * 997805;
-        //    s15 += s23 * 136657;
-        //    s16 -= s23 * 683901;
-        $s11 += self::mul($s23, 666643, 20);
-        $s12 += self::mul($s23, 470296, 19);
-        $s13 += self::mul($s23, 654183, 20);
-        $s14 -= self::mul($s23, 997805, 20);
-        $s15 += self::mul($s23, 136657, 18);
-        $s16 -= self::mul($s23, 683901, 20);
-
-        //    s10 += s22 * 666643;
-        //    s11 += s22 * 470296;
-        //    s12 += s22 * 654183;
-        //    s13 -= s22 * 997805;
-        //    s14 += s22 * 136657;
-        //    s15 -= s22 * 683901;
-        $s10 += self::mul($s22, 666643, 20);
-        $s11 += self::mul($s22, 470296, 19);
-        $s12 += self::mul($s22, 654183, 20);
-        $s13 -= self::mul($s22, 997805, 20);
-        $s14 += self::mul($s22, 136657, 18);
-        $s15 -= self::mul($s22, 683901, 20);
-
-        //    s9 += s21 * 666643;
-        //    s10 += s21 * 470296;
-        //    s11 += s21 * 654183;
-        //    s12 -= s21 * 997805;
-        //    s13 += s21 * 136657;
-        //    s14 -= s21 * 683901;
-        $s9 += self::mul($s21, 666643, 20);
-        $s10 += self::mul($s21, 470296, 19);
-        $s11 += self::mul($s21, 654183, 20);
-        $s12 -= self::mul($s21, 997805, 20);
-        $s13 += self::mul($s21, 136657, 18);
-        $s14 -= self::mul($s21, 683901, 20);
-
-        //    s8 += s20 * 666643;
-        //    s9 += s20 * 470296;
-        //    s10 += s20 * 654183;
-        //    s11 -= s20 * 997805;
-        //    s12 += s20 * 136657;
-        //    s13 -= s20 * 683901;
-        $s8 += self::mul($s20, 666643, 20);
-        $s9 += self::mul($s20, 470296, 19);
-        $s10 += self::mul($s20, 654183, 20);
-        $s11 -= self::mul($s20, 997805, 20);
-        $s12 += self::mul($s20, 136657, 18);
-        $s13 -= self::mul($s20, 683901, 20);
-
-        //    s7 += s19 * 666643;
-        //    s8 += s19 * 470296;
-        //    s9 += s19 * 654183;
-        //    s10 -= s19 * 997805;
-        //    s11 += s19 * 136657;
-        //    s12 -= s19 * 683901;
-        $s7 += self::mul($s19, 666643, 20);
-        $s8 += self::mul($s19, 470296, 19);
-        $s9 += self::mul($s19, 654183, 20);
-        $s10 -= self::mul($s19, 997805, 20);
-        $s11 += self::mul($s19, 136657, 18);
-        $s12 -= self::mul($s19, 683901, 20);
-
-        //    s6 += s18 * 666643;
-        //    s7 += s18 * 470296;
-        //    s8 += s18 * 654183;
-        //    s9 -= s18 * 997805;
-        //    s10 += s18 * 136657;
-        //    s11 -= s18 * 683901;
-        $s6 += self::mul($s18, 666643, 20);
-        $s7 += self::mul($s18, 470296, 19);
-        $s8 += self::mul($s18, 654183, 20);
-        $s9 -= self::mul($s18, 997805, 20);
-        $s10 += self::mul($s18, 136657, 18);
-        $s11 -= self::mul($s18, 683901, 20);
-
-        //    carry6 = (s6 + (int64_t) (1L << 20)) >> 21;
-        //    s7 += carry6;
-        //    s6 -= carry6 * ((uint64_t) 1L << 21);
-        $carry6 = ($s6 + (1 << 20)) >> 21;
-        $s7 += $carry6;
-        $s6 -= $carry6 << 21;
-        //    carry8 = (s8 + (int64_t) (1L << 20)) >> 21;
-        //    s9 += carry8;
-        //    s8 -= carry8 * ((uint64_t) 1L << 21);
-        $carry8 = ($s8 + (1 << 20)) >> 21;
-        $s9 += $carry8;
-        $s8 -= $carry8 << 21;
-        //    carry10 = (s10 + (int64_t) (1L << 20)) >> 21;
-        //    s11 += carry10;
-        //    s10 -= carry10 * ((uint64_t) 1L << 21);
-        $carry10 = ($s10 + (1 << 20)) >> 21;
-        $s11 += $carry10;
-        $s10 -= $carry10 << 21;
-        //    carry12 = (s12 + (int64_t) (1L << 20)) >> 21;
-        //    s13 += carry12;
-        //    s12 -= carry12 * ((uint64_t) 1L << 21);
-        $carry12 = ($s12 + (1 << 20)) >> 21;
-        $s13 += $carry12;
-        $s12 -= $carry12 << 21;
-        //    carry14 = (s14 + (int64_t) (1L << 20)) >> 21;
-        //    s15 += carry14;
-        //    s14 -= carry14 * ((uint64_t) 1L << 21);
-        $carry14 = ($s14 + (1 << 20)) >> 21;
-        $s15 += $carry14;
-        $s14 -= $carry14 << 21;
-        //    carry16 = (s16 + (int64_t) (1L << 20)) >> 21;
-        //    s17 += carry16;
-        //    s16 -= carry16 * ((uint64_t) 1L << 21);
-        $carry16 = ($s16 + (1 << 20)) >> 21;
-        $s17 += $carry16;
-        $s16 -= $carry16 << 21;
-
-        //    carry7 = (s7 + (int64_t) (1L << 20)) >> 21;
-        //    s8 += carry7;
-        //    s7 -= carry7 * ((uint64_t) 1L << 21);
-        $carry7 = ($s7 + (1 << 20)) >> 21;
-        $s8 += $carry7;
-        $s7 -= $carry7 << 21;
-        //    carry9 = (s9 + (int64_t) (1L << 20)) >> 21;
-        //    s10 += carry9;
-        //    s9 -= carry9 * ((uint64_t) 1L << 21);
-        $carry9 = ($s9 + (1 << 20)) >> 21;
-        $s10 += $carry9;
-        $s9 -= $carry9 << 21;
-        //    carry11 = (s11 + (int64_t) (1L << 20)) >> 21;
-        //    s12 += carry11;
-        //    s11 -= carry11 * ((uint64_t) 1L << 21);
-        $carry11 = ($s11 + (1 << 20)) >> 21;
-        $s12 += $carry11;
-        $s11 -= $carry11 << 21;
-        //    carry13 = (s13 + (int64_t) (1L << 20)) >> 21;
-        //    s14 += carry13;
-        //    s13 -= carry13 * ((uint64_t) 1L << 21);
-        $carry13 = ($s13 + (1 << 20)) >> 21;
-        $s14 += $carry13;
-        $s13 -= $carry13 << 21;
-        //    carry15 = (s15 + (int64_t) (1L << 20)) >> 21;
-        //    s16 += carry15;
-        //    s15 -= carry15 * ((uint64_t) 1L << 21);
-        $carry15 = ($s15 + (1 << 20)) >> 21;
-        $s16 += $carry15;
-        $s15 -= $carry15 << 21;
-
-        //    s5 += s17 * 666643;
-        //    s6 += s17 * 470296;
-        //    s7 += s17 * 654183;
-        //    s8 -= s17 * 997805;
-        //    s9 += s17 * 136657;
-        //    s10 -= s17 * 683901;
-        $s5 += self::mul($s17, 666643, 20);
-        $s6 += self::mul($s17, 470296, 19);
-        $s7 += self::mul($s17, 654183, 20);
-        $s8 -= self::mul($s17, 997805, 20);
-        $s9 += self::mul($s17, 136657, 18);
-        $s10 -= self::mul($s17, 683901, 20);
-
-        //    s4 += s16 * 666643;
-        //    s5 += s16 * 470296;
-        //    s6 += s16 * 654183;
-        //    s7 -= s16 * 997805;
-        //    s8 += s16 * 136657;
-        //    s9 -= s16 * 683901;
-        $s4 += self::mul($s16, 666643, 20);
-        $s5 += self::mul($s16, 470296, 19);
-        $s6 += self::mul($s16, 654183, 20);
-        $s7 -= self::mul($s16, 997805, 20);
-        $s8 += self::mul($s16, 136657, 18);
-        $s9 -= self::mul($s16, 683901, 20);
-
-        //    s3 += s15 * 666643;
-        //    s4 += s15 * 470296;
-        //    s5 += s15 * 654183;
-        //    s6 -= s15 * 997805;
-        //    s7 += s15 * 136657;
-        //    s8 -= s15 * 683901;
-        $s3 += self::mul($s15, 666643, 20);
-        $s4 += self::mul($s15, 470296, 19);
-        $s5 += self::mul($s15, 654183, 20);
-        $s6 -= self::mul($s15, 997805, 20);
-        $s7 += self::mul($s15, 136657, 18);
-        $s8 -= self::mul($s15, 683901, 20);
-
-        //    s2 += s14 * 666643;
-        //    s3 += s14 * 470296;
-        //    s4 += s14 * 654183;
-        //    s5 -= s14 * 997805;
-        //    s6 += s14 * 136657;
-        //    s7 -= s14 * 683901;
-        $s2 += self::mul($s14, 666643, 20);
-        $s3 += self::mul($s14, 470296, 19);
-        $s4 += self::mul($s14, 654183, 20);
-        $s5 -= self::mul($s14, 997805, 20);
-        $s6 += self::mul($s14, 136657, 18);
-        $s7 -= self::mul($s14, 683901, 20);
-
-        //    s1 += s13 * 666643;
-        //    s2 += s13 * 470296;
-        //    s3 += s13 * 654183;
-        //    s4 -= s13 * 997805;
-        //    s5 += s13 * 136657;
-        //    s6 -= s13 * 683901;
-        $s1 += self::mul($s13, 666643, 20);
-        $s2 += self::mul($s13, 470296, 19);
-        $s3 += self::mul($s13, 654183, 20);
-        $s4 -= self::mul($s13, 997805, 20);
-        $s5 += self::mul($s13, 136657, 18);
-        $s6 -= self::mul($s13, 683901, 20);
-
-        //    s0 += s12 * 666643;
-        //    s1 += s12 * 470296;
-        //    s2 += s12 * 654183;
-        //    s3 -= s12 * 997805;
-        //    s4 += s12 * 136657;
-        //    s5 -= s12 * 683901;
-        //    s12 = 0;
-        $s0 += self::mul($s12, 666643, 20);
-        $s1 += self::mul($s12, 470296, 19);
-        $s2 += self::mul($s12, 654183, 20);
-        $s3 -= self::mul($s12, 997805, 20);
-        $s4 += self::mul($s12, 136657, 18);
-        $s5 -= self::mul($s12, 683901, 20);
-        $s12 = 0;
-
-        //    carry0 = (s0 + (int64_t) (1L << 20)) >> 21;
-        //    s1 += carry0;
-        //    s0 -= carry0 * ((uint64_t) 1L << 21);
-        $carry0 = ($s0 + (1 << 20)) >> 21;
-        $s1 += $carry0;
-        $s0 -= $carry0 << 21;
-        //    carry2 = (s2 + (int64_t) (1L << 20)) >> 21;
-        //    s3 += carry2;
-        //    s2 -= carry2 * ((uint64_t) 1L << 21);
-        $carry2 = ($s2 + (1 << 20)) >> 21;
-        $s3 += $carry2;
-        $s2 -= $carry2 << 21;
-        //    carry4 = (s4 + (int64_t) (1L << 20)) >> 21;
-        //    s5 += carry4;
-        //    s4 -= carry4 * ((uint64_t) 1L << 21);
-        $carry4 = ($s4 + (1 << 20)) >> 21;
-        $s5 += $carry4;
-        $s4 -= $carry4 << 21;
-        //    carry6 = (s6 + (int64_t) (1L << 20)) >> 21;
-        //    s7 += carry6;
-        //    s6 -= carry6 * ((uint64_t) 1L << 21);
-        $carry6 = ($s6 + (1 << 20)) >> 21;
-        $s7 += $carry6;
-        $s6 -= $carry6 << 21;
-        //    carry8 = (s8 + (int64_t) (1L << 20)) >> 21;
-        //    s9 += carry8;
-        //    s8 -= carry8 * ((uint64_t) 1L << 21);
-        $carry8 = ($s8 + (1 << 20)) >> 21;
-        $s9 += $carry8;
-        $s8 -= $carry8 << 21;
-        //    carry10 = (s10 + (int64_t) (1L << 20)) >> 21;
-        //    s11 += carry10;
-        //    s10 -= carry10 * ((uint64_t) 1L << 21);
-        $carry10 = ($s10 + (1 << 20)) >> 21;
-        $s11 += $carry10;
-        $s10 -= $carry10 << 21;
-
-        //    carry1 = (s1 + (int64_t) (1L << 20)) >> 21;
-        //    s2 += carry1;
-        //    s1 -= carry1 * ((uint64_t) 1L << 21);
-        $carry1 = ($s1 + (1 << 20)) >> 21;
-        $s2 += $carry1;
-        $s1 -= $carry1 << 21;
-        //    carry3 = (s3 + (int64_t) (1L << 20)) >> 21;
-        //    s4 += carry3;
-        //    s3 -= carry3 * ((uint64_t) 1L << 21);
-        $carry3 = ($s3 + (1 << 20)) >> 21;
-        $s4 += $carry3;
-        $s3 -= $carry3 << 21;
-        //    carry5 = (s5 + (int64_t) (1L << 20)) >> 21;
-        //    s6 += carry5;
-        //    s5 -= carry5 * ((uint64_t) 1L << 21);
-        $carry5 = ($s5 + (1 << 20)) >> 21;
-        $s6 += $carry5;
-        $s5 -= $carry5 << 21;
-        //    carry7 = (s7 + (int64_t) (1L << 20)) >> 21;
-        //    s8 += carry7;
-        //    s7 -= carry7 * ((uint64_t) 1L << 21);
-        $carry7 = ($s7 + (1 << 20)) >> 21;
-        $s8 += $carry7;
-        $s7 -= $carry7 << 21;
-        //    carry9 = (s9 + (int64_t) (1L << 20)) >> 21;
-        //    s10 += carry9;
-        //    s9 -= carry9 * ((uint64_t) 1L << 21);
-        $carry9 = ($s9 + (1 << 20)) >> 21;
-        $s10 += $carry9;
-        $s9 -= $carry9 << 21;
-        //    carry11 = (s11 + (int64_t) (1L << 20)) >> 21;
-        //    s12 += carry11;
-        //    s11 -= carry11 * ((uint64_t) 1L << 21);
-        $carry11 = ($s11 + (1 << 20)) >> 21;
-        $s12 += $carry11;
-        $s11 -= $carry11 << 21;
-
-        //    s0 += s12 * 666643;
-        //    s1 += s12 * 470296;
-        //    s2 += s12 * 654183;
-        //    s3 -= s12 * 997805;
-        //    s4 += s12 * 136657;
-        //    s5 -= s12 * 683901;
-        //    s12 = 0;
-        $s0 += self::mul($s12, 666643, 20);
-        $s1 += self::mul($s12, 470296, 19);
-        $s2 += self::mul($s12, 654183, 20);
-        $s3 -= self::mul($s12, 997805, 20);
-        $s4 += self::mul($s12, 136657, 18);
-        $s5 -= self::mul($s12, 683901, 20);
-        $s12 = 0;
-
-        //    carry0 = s0 >> 21;
-        //    s1 += carry0;
-        //    s0 -= carry0 * ((uint64_t) 1L << 21);
-        $carry0 = $s0 >> 21;
-        $s1 += $carry0;
-        $s0 -= $carry0 << 21;
-        //    carry1 = s1 >> 21;
-        //    s2 += carry1;
-        //    s1 -= carry1 * ((uint64_t) 1L << 21);
-        $carry1 = $s1 >> 21;
-        $s2 += $carry1;
-        $s1 -= $carry1 << 21;
-        //    carry2 = s2 >> 21;
-        //    s3 += carry2;
-        //    s2 -= carry2 * ((uint64_t) 1L << 21);
-        $carry2 = $s2 >> 21;
-        $s3 += $carry2;
-        $s2 -= $carry2 << 21;
-        //    carry3 = s3 >> 21;
-        //    s4 += carry3;
-        //    s3 -= carry3 * ((uint64_t) 1L << 21);
-        $carry3 = $s3 >> 21;
-        $s4 += $carry3;
-        $s3 -= $carry3 << 21;
-        //    carry4 = s4 >> 21;
-        //    s5 += carry4;
-        //    s4 -= carry4 * ((uint64_t) 1L << 21);
-        $carry4 = $s4 >> 21;
-        $s5 += $carry4;
-        $s4 -= $carry4 << 21;
-        //    carry5 = s5 >> 21;
-        //    s6 += carry5;
-        //    s5 -= carry5 * ((uint64_t) 1L << 21);
-        $carry5 = $s5 >> 21;
-        $s6 += $carry5;
-        $s5 -= $carry5 << 21;
-        //    carry6 = s6 >> 21;
-        //    s7 += carry6;
-        //    s6 -= carry6 * ((uint64_t) 1L << 21);
-        $carry6 = $s6 >> 21;
-        $s7 += $carry6;
-        $s6 -= $carry6 << 21;
-        //    carry7 = s7 >> 21;
-        //    s8 += carry7;
-        //    s7 -= carry7 * ((uint64_t) 1L << 21);
-        $carry7 = $s7 >> 21;
-        $s8 += $carry7;
-        $s7 -= $carry7 << 21;
-        //    carry8 = s8 >> 21;
-        //    s9 += carry8;
-        //    s8 -= carry8 * ((uint64_t) 1L << 21);
-        $carry8 = $s8 >> 21;
-        $s9 += $carry8;
-        $s8 -= $carry8 << 21;
-        //    carry9 = s9 >> 21;
-        //    s10 += carry9;
-        //    s9 -= carry9 * ((uint64_t) 1L << 21);
-        $carry9 = $s9 >> 21;
-        $s10 += $carry9;
-        $s9 -= $carry9 << 21;
-        //    carry10 = s10 >> 21;
-        //    s11 += carry10;
-        //    s10 -= carry10 * ((uint64_t) 1L << 21);
-        $carry10 = $s10 >> 21;
-        $s11 += $carry10;
-        $s10 -= $carry10 << 21;
-        //    carry11 = s11 >> 21;
-        //    s12 += carry11;
-        //    s11 -= carry11 * ((uint64_t) 1L << 21);
-        $carry11 = $s11 >> 21;
-        $s12 += $carry11;
-        $s11 -= $carry11 << 21;
-
-        //    s0 += s12 * 666643;
-        //    s1 += s12 * 470296;
-        //    s2 += s12 * 654183;
-        //    s3 -= s12 * 997805;
-        //    s4 += s12 * 136657;
-        //    s5 -= s12 * 683901;
-        $s0 += self::mul($s12, 666643, 20);
-        $s1 += self::mul($s12, 470296, 19);
-        $s2 += self::mul($s12, 654183, 20);
-        $s3 -= self::mul($s12, 997805, 20);
-        $s4 += self::mul($s12, 136657, 18);
-        $s5 -= self::mul($s12, 683901, 20);
-
-        //    carry0 = s0 >> 21;
-        //    s1 += carry0;
-        //    s0 -= carry0 * ((uint64_t) 1L << 21);
-        $carry0 = $s0 >> 21;
-        $s1 += $carry0;
-        $s0 -= $carry0 << 21;
-        //    carry1 = s1 >> 21;
-        //    s2 += carry1;
-        //    s1 -= carry1 * ((uint64_t) 1L << 21);
-        $carry1 = $s1 >> 21;
-        $s2 += $carry1;
-        $s1 -= $carry1 << 21;
-        //    carry2 = s2 >> 21;
-        //    s3 += carry2;
-        //    s2 -= carry2 * ((uint64_t) 1L << 21);
-        $carry2 = $s2 >> 21;
-        $s3 += $carry2;
-        $s2 -= $carry2 << 21;
-        //    carry3 = s3 >> 21;
-        //    s4 += carry3;
-        //    s3 -= carry3 * ((uint64_t) 1L << 21);
-        $carry3 = $s3 >> 21;
-        $s4 += $carry3;
-        $s3 -= $carry3 << 21;
-        //    carry4 = s4 >> 21;
-        //    s5 += carry4;
-        //    s4 -= carry4 * ((uint64_t) 1L << 21);
-        $carry4 = $s4 >> 21;
-        $s5 += $carry4;
-        $s4 -= $carry4 << 21;
-        //    carry5 = s5 >> 21;
-        //    s6 += carry5;
-        //    s5 -= carry5 * ((uint64_t) 1L << 21);
-        $carry5 = $s5 >> 21;
-        $s6 += $carry5;
-        $s5 -= $carry5 << 21;
-        //    carry6 = s6 >> 21;
-        //    s7 += carry6;
-        //    s6 -= carry6 * ((uint64_t) 1L << 21);
-        $carry6 = $s6 >> 21;
-        $s7 += $carry6;
-        $s6 -= $carry6 << 21;
-        //    carry7 = s7 >> 21;
-        //    s8 += carry7;
-        //    s7 -= carry7 * ((uint64_t) 1L << 21);
-        $carry7 = $s7 >> 21;
-        $s8 += $carry7;
-        $s7 -= $carry7 << 21;
-        //    carry8 = s8 >> 21;
-        //    s9 += carry8;
-        //    s8 -= carry8 * ((uint64_t) 1L << 21);
-        $carry8 = $s8 >> 21;
-        $s9 += $carry8;
-        $s8 -= $carry8 << 21;
-        //    carry9 = s9 >> 21;
-        //    s10 += carry9;
-        //    s9 -= carry9 * ((uint64_t) 1L << 21);
-        $carry9 = $s9 >> 21;
-        $s10 += $carry9;
-        $s9 -= $carry9 << 21;
-        //    carry10 = s10 >> 21;
-        //    s11 += carry10;
-        //    s10 -= carry10 * ((uint64_t) 1L << 21);
-        $carry10 = $s10 >> 21;
-        $s11 += $carry10;
-        $s10 -= $carry10 << 21;
-
-        $s = array_fill(0, 32, 0);
-        // s[0]  = s0 >> 0;
-        $s[0]  = $s0 >> 0;
-        // s[1]  = s0 >> 8;
-        $s[1]  = $s0 >> 8;
-        // s[2]  = (s0 >> 16) | (s1 * ((uint64_t) 1 << 5));
-        $s[2]  = ($s0 >> 16) | ($s1 << 5);
-        // s[3]  = s1 >> 3;
-        $s[3]  = $s1 >> 3;
-        // s[4]  = s1 >> 11;
-        $s[4]  = $s1 >> 11;
-        // s[5]  = (s1 >> 19) | (s2 * ((uint64_t) 1 << 2));
-        $s[5]  = ($s1 >> 19) | ($s2 << 2);
-        // s[6]  = s2 >> 6;
-        $s[6]  = $s2 >> 6;
-        // s[7]  = (s2 >> 14) | (s3 * ((uint64_t) 1 << 7));
-        $s[7]  = ($s2 >> 14) | ($s3 << 7);
-        // s[8]  = s3 >> 1;
-        $s[8]  = $s3 >> 1;
-        // s[9]  = s3 >> 9;
-        $s[9]  = $s3 >> 9;
-        // s[10] = (s3 >> 17) | (s4 * ((uint64_t) 1 << 4));
-        $s[10] = ($s3 >> 17) | ($s4 << 4);
-        // s[11] = s4 >> 4;
-        $s[11] = $s4 >> 4;
-        // s[12] = s4 >> 12;
-        $s[12] = $s4 >> 12;
-        // s[13] = (s4 >> 20) | (s5 * ((uint64_t) 1 << 1));
-        $s[13] = ($s4 >> 20) | ($s5 << 1);
-        // s[14] = s5 >> 7;
-        $s[14] = $s5 >> 7;
-        // s[15] = (s5 >> 15) | (s6 * ((uint64_t) 1 << 6));
-        $s[15] = ($s5 >> 15) | ($s6 << 6);
-        // s[16] = s6 >> 2;
-        $s[16] = $s6 >> 2;
-        // s[17] = s6 >> 10;
-        $s[17] = $s6 >> 10;
-        // s[18] = (s6 >> 18) | (s7 * ((uint64_t) 1 << 3));
-        $s[18] = ($s6 >> 18) | ($s7 << 3);
-        // s[19] = s7 >> 5;
-        $s[19] = $s7 >> 5;
-        // s[20] = s7 >> 13;
-        $s[20] = $s7 >> 13;
-        // s[21] = s8 >> 0;
-        $s[21] = $s8 >> 0;
-        // s[22] = s8 >> 8;
-        $s[22] = $s8 >> 8;
-        // s[23] = (s8 >> 16) | (s9 * ((uint64_t) 1 << 5));
-        $s[23] = ($s8 >> 16) | ($s9 << 5);
-        // s[24] = s9 >> 3;
-        $s[24] = $s9 >> 3;
-        // s[25] = s9 >> 11;
-        $s[25] = $s9 >> 11;
-        // s[26] = (s9 >> 19) | (s10 * ((uint64_t) 1 << 2));
-        $s[26] = ($s9 >> 19) | ($s10 << 2);
-        // s[27] = s10 >> 6;
-        $s[27] = $s10 >> 6;
-        // s[28] = (s10 >> 14) | (s11 * ((uint64_t) 1 << 7));
-        $s[28] = ($s10 >> 14) | ($s11 << 7);
-        // s[29] = s11 >> 1;
-        $s[29] = $s11 >> 1;
-        // s[30] = s11 >> 9;
-        $s[30] = $s11 >> 9;
-        // s[31] = s11 >> 17;
-        $s[31] = $s11 >> 17;
-        return self::intArrayToString($s);
-    }
-
-    /**
-     * @param string $s
-     * @return string
-     */
-    public static function sc25519_sq($s)
-    {
-        return self::sc25519_mul($s, $s);
-    }
-
-    /**
-     * @param string $s
-     * @param int $n
-     * @param string $a
-     * @return string
-     */
-    public static function sc25519_sqmul($s, $n, $a)
-    {
-        for ($i = 0; $i < $n; ++$i) {
-            $s = self::sc25519_sq($s);
-        }
-        return self::sc25519_mul($s, $a);
-    }
-
-    /**
-     * @param string $s
-     * @return string
-     */
-    public static function sc25519_invert($s)
-    {
-        $_10 = self::sc25519_sq($s);
-        $_11 = self::sc25519_mul($s, $_10);
-        $_100 = self::sc25519_mul($s, $_11);
-        $_1000 = self::sc25519_sq($_100);
-        $_1010 = self::sc25519_mul($_10, $_1000);
-        $_1011 = self::sc25519_mul($s, $_1010);
-        $_10000 = self::sc25519_sq($_1000);
-        $_10110 = self::sc25519_sq($_1011);
-        $_100000 = self::sc25519_mul($_1010, $_10110);
-        $_100110 = self::sc25519_mul($_10000, $_10110);
-        $_1000000 = self::sc25519_sq($_100000);
-        $_1010000 = self::sc25519_mul($_10000, $_1000000);
-        $_1010011 = self::sc25519_mul($_11, $_1010000);
-        $_1100011 = self::sc25519_mul($_10000, $_1010011);
-        $_1100111 = self::sc25519_mul($_100, $_1100011);
-        $_1101011 = self::sc25519_mul($_100, $_1100111);
-        $_10010011 = self::sc25519_mul($_1000000, $_1010011);
-        $_10010111 = self::sc25519_mul($_100, $_10010011);
-        $_10111101 = self::sc25519_mul($_100110, $_10010111);
-        $_11010011 = self::sc25519_mul($_10110, $_10111101);
-        $_11100111 = self::sc25519_mul($_1010000, $_10010111);
-        $_11101011 = self::sc25519_mul($_100, $_11100111);
-        $_11110101 = self::sc25519_mul($_1010, $_11101011);
-
-        $recip = self::sc25519_mul($_1011, $_11110101);
-        $recip = self::sc25519_sqmul($recip, 126, $_1010011);
-        $recip = self::sc25519_sqmul($recip, 9, $_10);
-        $recip = self::sc25519_mul($recip, $_11110101);
-        $recip = self::sc25519_sqmul($recip, 7, $_1100111);
-        $recip = self::sc25519_sqmul($recip, 9, $_11110101);
-        $recip = self::sc25519_sqmul($recip, 11, $_10111101);
-        $recip = self::sc25519_sqmul($recip, 8, $_11100111);
-        $recip = self::sc25519_sqmul($recip, 9, $_1101011);
-        $recip = self::sc25519_sqmul($recip, 6, $_1011);
-        $recip = self::sc25519_sqmul($recip, 14, $_10010011);
-        $recip = self::sc25519_sqmul($recip, 10, $_1100011);
-        $recip = self::sc25519_sqmul($recip, 9, $_10010111);
-        $recip = self::sc25519_sqmul($recip, 10, $_11110101);
-        $recip = self::sc25519_sqmul($recip, 8, $_11010011);
-        return self::sc25519_sqmul($recip, 8, $_11101011);
-    }
-
-    /**
-     * @param string $s
-     * @return string
-     */
-    public static function clamp($s)
-    {
-        $s_ = self::stringToIntArray($s);
-        $s_[0] &= 248;
-        $s_[31] |= 64;
-        $s_[31] &= 128;
-        return self::intArrayToString($s_);
-    }
+	/**
+	 * Get a field element of size 10 with a value of 0
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public static function fe_0()
+	{
+		return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
+			array(0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
+		);
+	}
+
+	/**
+	 * Get a field element of size 10 with a value of 1
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public static function fe_1()
+	{
+		return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
+			array(1, 0, 0, 0, 0, 0, 0, 0, 0, 0)
+		);
+	}
+
+	/**
+	 * Add two field elements.
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $g
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 * @psalm-suppress MixedAssignment
+	 * @psalm-suppress MixedOperand
+	 */
+	public static function fe_add(
+		ParagonIE_Sodium_Core_Curve25519_Fe $f,
+		ParagonIE_Sodium_Core_Curve25519_Fe $g
+	) {
+		/** @var array<int, int> $arr */
+		$arr = array();
+		for ($i = 0; $i < 10; ++$i) {
+			$arr[$i] = (int) ($f[$i] + $g[$i]);
+		}
+		return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($arr);
+	}
+
+	/**
+	 * Constant-time conditional move.
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $g
+	 * @param int $b
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 * @psalm-suppress MixedAssignment
+	 */
+	public static function fe_cmov(
+		ParagonIE_Sodium_Core_Curve25519_Fe $f,
+		ParagonIE_Sodium_Core_Curve25519_Fe $g,
+		$b = 0
+	) {
+		/** @var array<int, int> $h */
+		$h = array();
+		$b *= -1;
+		for ($i = 0; $i < 10; ++$i) {
+			$x = (($f[$i] ^ $g[$i]) & $b);
+			$h[$i] = ($f[$i]) ^ $x;
+		}
+		return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($h);
+	}
+
+	/**
+	 * Create a copy of a field element.
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public static function fe_copy(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+	{
+		$h = clone $f;
+		return $h;
+	}
+
+	/**
+	 * Give: 32-byte string.
+	 * Receive: A field element object to use for internal calculations.
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param string $s
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 * @throws RangeException
+	 * @throws TypeError
+	 */
+	public static function fe_frombytes($s)
+	{
+		if (self::strlen($s) !== 32) {
+			throw new RangeException('Expected a 32-byte string.');
+		}
+		$h0 = self::load_4($s);
+		$h1 = self::load_3(self::substr($s, 4, 3)) << 6;
+		$h2 = self::load_3(self::substr($s, 7, 3)) << 5;
+		$h3 = self::load_3(self::substr($s, 10, 3)) << 3;
+		$h4 = self::load_3(self::substr($s, 13, 3)) << 2;
+		$h5 = self::load_4(self::substr($s, 16, 4));
+		$h6 = self::load_3(self::substr($s, 20, 3)) << 7;
+		$h7 = self::load_3(self::substr($s, 23, 3)) << 5;
+		$h8 = self::load_3(self::substr($s, 26, 3)) << 4;
+		$h9 = (self::load_3(self::substr($s, 29, 3)) & 8388607) << 2;
+
+		$carry9 = ($h9 + (1 << 24)) >> 25;
+		$h0 += self::mul($carry9, 19, 5);
+		$h9 -= $carry9 << 25;
+		$carry1 = ($h1 + (1 << 24)) >> 25;
+		$h2 += $carry1;
+		$h1 -= $carry1 << 25;
+		$carry3 = ($h3 + (1 << 24)) >> 25;
+		$h4 += $carry3;
+		$h3 -= $carry3 << 25;
+		$carry5 = ($h5 + (1 << 24)) >> 25;
+		$h6 += $carry5;
+		$h5 -= $carry5 << 25;
+		$carry7 = ($h7 + (1 << 24)) >> 25;
+		$h8 += $carry7;
+		$h7 -= $carry7 << 25;
+
+		$carry0 = ($h0 + (1 << 25)) >> 26;
+		$h1 += $carry0;
+		$h0 -= $carry0 << 26;
+		$carry2 = ($h2 + (1 << 25)) >> 26;
+		$h3 += $carry2;
+		$h2 -= $carry2 << 26;
+		$carry4 = ($h4 + (1 << 25)) >> 26;
+		$h5 += $carry4;
+		$h4 -= $carry4 << 26;
+		$carry6 = ($h6 + (1 << 25)) >> 26;
+		$h7 += $carry6;
+		$h6 -= $carry6 << 26;
+		$carry8 = ($h8 + (1 << 25)) >> 26;
+		$h9 += $carry8;
+		$h8 -= $carry8 << 26;
+
+		return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
+			array(
+				(int) $h0,
+				(int) $h1,
+				(int) $h2,
+				(int) $h3,
+				(int) $h4,
+				(int) $h5,
+				(int) $h6,
+				(int) $h7,
+				(int) $h8,
+				(int) $h9
+			)
+		);
+	}
+
+	/**
+	 * Convert a field element to a byte string.
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $h
+	 * @return string
+	 */
+	public static function fe_tobytes(ParagonIE_Sodium_Core_Curve25519_Fe $h)
+	{
+		$h0 = (int) $h[0];
+		$h1 = (int) $h[1];
+		$h2 = (int) $h[2];
+		$h3 = (int) $h[3];
+		$h4 = (int) $h[4];
+		$h5 = (int) $h[5];
+		$h6 = (int) $h[6];
+		$h7 = (int) $h[7];
+		$h8 = (int) $h[8];
+		$h9 = (int) $h[9];
+
+		$q = (self::mul($h9, 19, 5) + (1 << 24)) >> 25;
+		$q = ($h0 + $q) >> 26;
+		$q = ($h1 + $q) >> 25;
+		$q = ($h2 + $q) >> 26;
+		$q = ($h3 + $q) >> 25;
+		$q = ($h4 + $q) >> 26;
+		$q = ($h5 + $q) >> 25;
+		$q = ($h6 + $q) >> 26;
+		$q = ($h7 + $q) >> 25;
+		$q = ($h8 + $q) >> 26;
+		$q = ($h9 + $q) >> 25;
+
+		$h0 += self::mul($q, 19, 5);
+
+		$carry0 = $h0 >> 26;
+		$h1 += $carry0;
+		$h0 -= $carry0 << 26;
+		$carry1 = $h1 >> 25;
+		$h2 += $carry1;
+		$h1 -= $carry1 << 25;
+		$carry2 = $h2 >> 26;
+		$h3 += $carry2;
+		$h2 -= $carry2 << 26;
+		$carry3 = $h3 >> 25;
+		$h4 += $carry3;
+		$h3 -= $carry3 << 25;
+		$carry4 = $h4 >> 26;
+		$h5 += $carry4;
+		$h4 -= $carry4 << 26;
+		$carry5 = $h5 >> 25;
+		$h6 += $carry5;
+		$h5 -= $carry5 << 25;
+		$carry6 = $h6 >> 26;
+		$h7 += $carry6;
+		$h6 -= $carry6 << 26;
+		$carry7 = $h7 >> 25;
+		$h8 += $carry7;
+		$h7 -= $carry7 << 25;
+		$carry8 = $h8 >> 26;
+		$h9 += $carry8;
+		$h8 -= $carry8 << 26;
+		$carry9 = $h9 >> 25;
+		$h9 -= $carry9 << 25;
+
+		/**
+		 * @var array<int, int>
+		 */
+		$s = array(
+			(int) (($h0 >> 0) & 0xff),
+			(int) (($h0 >> 8) & 0xff),
+			(int) (($h0 >> 16) & 0xff),
+			(int) ((($h0 >> 24) | ($h1 << 2)) & 0xff),
+			(int) (($h1 >> 6) & 0xff),
+			(int) (($h1 >> 14) & 0xff),
+			(int) ((($h1 >> 22) | ($h2 << 3)) & 0xff),
+			(int) (($h2 >> 5) & 0xff),
+			(int) (($h2 >> 13) & 0xff),
+			(int) ((($h2 >> 21) | ($h3 << 5)) & 0xff),
+			(int) (($h3 >> 3) & 0xff),
+			(int) (($h3 >> 11) & 0xff),
+			(int) ((($h3 >> 19) | ($h4 << 6)) & 0xff),
+			(int) (($h4 >> 2) & 0xff),
+			(int) (($h4 >> 10) & 0xff),
+			(int) (($h4 >> 18) & 0xff),
+			(int) (($h5 >> 0) & 0xff),
+			(int) (($h5 >> 8) & 0xff),
+			(int) (($h5 >> 16) & 0xff),
+			(int) ((($h5 >> 24) | ($h6 << 1)) & 0xff),
+			(int) (($h6 >> 7) & 0xff),
+			(int) (($h6 >> 15) & 0xff),
+			(int) ((($h6 >> 23) | ($h7 << 3)) & 0xff),
+			(int) (($h7 >> 5) & 0xff),
+			(int) (($h7 >> 13) & 0xff),
+			(int) ((($h7 >> 21) | ($h8 << 4)) & 0xff),
+			(int) (($h8 >> 4) & 0xff),
+			(int) (($h8 >> 12) & 0xff),
+			(int) ((($h8 >> 20) | ($h9 << 6)) & 0xff),
+			(int) (($h9 >> 2) & 0xff),
+			(int) (($h9 >> 10) & 0xff),
+			(int) (($h9 >> 18) & 0xff)
+		);
+		return self::intArrayToString($s);
+	}
+
+	/**
+	 * Is a field element negative? (1 = yes, 0 = no. Used in calculations.)
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
+	 * @return int
+	 * @throws SodiumException
+	 * @throws TypeError
+	 */
+	public static function fe_isnegative(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+	{
+		$str = self::fe_tobytes($f);
+		return (int) (self::chrToInt($str[0]) & 1);
+	}
+
+	/**
+	 * Returns 0 if this field element results in all NUL bytes.
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
+	 * @return bool
+	 * @throws SodiumException
+	 * @throws TypeError
+	 */
+	public static function fe_isnonzero(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+	{
+		static $zero;
+		if ($zero === null) {
+			$zero = str_repeat("\x00", 32);
+		}
+		/** @var string $zero */
+		/** @var string $str */
+		$str = self::fe_tobytes($f);
+		return !self::verify_32($str, (string) $zero);
+	}
+
+	/**
+	 * Multiply two field elements
+	 *
+	 * h = f * g
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @security Is multiplication a source of timing leaks? If so, can we do
+	 *           anything to prevent that from happening?
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $g
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public static function fe_mul(
+		ParagonIE_Sodium_Core_Curve25519_Fe $f,
+		ParagonIE_Sodium_Core_Curve25519_Fe $g
+	) {
+		$f0 = $f[0];
+		$f1 = $f[1];
+		$f2 = $f[2];
+		$f3 = $f[3];
+		$f4 = $f[4];
+		$f5 = $f[5];
+		$f6 = $f[6];
+		$f7 = $f[7];
+		$f8 = $f[8];
+		$f9 = $f[9];
+		$g0 = $g[0];
+		$g1 = $g[1];
+		$g2 = $g[2];
+		$g3 = $g[3];
+		$g4 = $g[4];
+		$g5 = $g[5];
+		$g6 = $g[6];
+		$g7 = $g[7];
+		$g8 = $g[8];
+		$g9 = $g[9];
+		$g1_19 = self::mul($g1, 19, 5);
+		$g2_19 = self::mul($g2, 19, 5);
+		$g3_19 = self::mul($g3, 19, 5);
+		$g4_19 = self::mul($g4, 19, 5);
+		$g5_19 = self::mul($g5, 19, 5);
+		$g6_19 = self::mul($g6, 19, 5);
+		$g7_19 = self::mul($g7, 19, 5);
+		$g8_19 = self::mul($g8, 19, 5);
+		$g9_19 = self::mul($g9, 19, 5);
+		$f1_2 = $f1 << 1;
+		$f3_2 = $f3 << 1;
+		$f5_2 = $f5 << 1;
+		$f7_2 = $f7 << 1;
+		$f9_2 = $f9 << 1;
+		$f0g0    = self::mul($f0,    $g0, 26);
+		$f0g1    = self::mul($f0,    $g1, 25);
+		$f0g2    = self::mul($f0,    $g2, 26);
+		$f0g3    = self::mul($f0,    $g3, 25);
+		$f0g4    = self::mul($f0,    $g4, 26);
+		$f0g5    = self::mul($f0,    $g5, 25);
+		$f0g6    = self::mul($f0,    $g6, 26);
+		$f0g7    = self::mul($f0,    $g7, 25);
+		$f0g8    = self::mul($f0,    $g8, 26);
+		$f0g9    = self::mul($f0,    $g9, 26);
+		$f1g0    = self::mul($f1,    $g0, 26);
+		$f1g1_2  = self::mul($f1_2,  $g1, 25);
+		$f1g2    = self::mul($f1,    $g2, 26);
+		$f1g3_2  = self::mul($f1_2,  $g3, 25);
+		$f1g4    = self::mul($f1,    $g4, 26);
+		$f1g5_2  = self::mul($f1_2,  $g5, 25);
+		$f1g6    = self::mul($f1,    $g6, 26);
+		$f1g7_2  = self::mul($f1_2,  $g7, 25);
+		$f1g8    = self::mul($f1,    $g8, 26);
+		$f1g9_38 = self::mul($g9_19, $f1_2, 26);
+		$f2g0    = self::mul($f2,    $g0, 26);
+		$f2g1    = self::mul($f2,    $g1, 25);
+		$f2g2    = self::mul($f2,    $g2, 26);
+		$f2g3    = self::mul($f2,    $g3, 25);
+		$f2g4    = self::mul($f2,    $g4, 26);
+		$f2g5    = self::mul($f2,    $g5, 25);
+		$f2g6    = self::mul($f2,    $g6, 26);
+		$f2g7    = self::mul($f2,    $g7, 25);
+		$f2g8_19 = self::mul($g8_19, $f2, 26);
+		$f2g9_19 = self::mul($g9_19, $f2, 26);
+		$f3g0    = self::mul($f3,    $g0, 26);
+		$f3g1_2  = self::mul($f3_2,  $g1, 25);
+		$f3g2    = self::mul($f3,    $g2, 26);
+		$f3g3_2  = self::mul($f3_2,  $g3, 25);
+		$f3g4    = self::mul($f3,    $g4, 26);
+		$f3g5_2  = self::mul($f3_2,  $g5, 25);
+		$f3g6    = self::mul($f3,    $g6, 26);
+		$f3g7_38 = self::mul($g7_19, $f3_2, 26);
+		$f3g8_19 = self::mul($g8_19, $f3, 25);
+		$f3g9_38 = self::mul($g9_19, $f3_2, 26);
+		$f4g0    = self::mul($f4,    $g0, 26);
+		$f4g1    = self::mul($f4,    $g1, 25);
+		$f4g2    = self::mul($f4,    $g2, 26);
+		$f4g3    = self::mul($f4,    $g3, 25);
+		$f4g4    = self::mul($f4,    $g4, 26);
+		$f4g5    = self::mul($f4,    $g5, 25);
+		$f4g6_19 = self::mul($g6_19, $f4, 26);
+		$f4g7_19 = self::mul($g7_19, $f4, 26);
+		$f4g8_19 = self::mul($g8_19, $f4, 26);
+		$f4g9_19 = self::mul($g9_19, $f4, 26);
+		$f5g0    = self::mul($f5,    $g0, 26);
+		$f5g1_2  = self::mul($f5_2,  $g1, 25);
+		$f5g2    = self::mul($f5,    $g2, 26);
+		$f5g3_2  = self::mul($f5_2,  $g3, 25);
+		$f5g4    = self::mul($f5,    $g4, 26);
+		$f5g5_38 = self::mul($g5_19, $f5_2, 26);
+		$f5g6_19 = self::mul($g6_19, $f5, 25);
+		$f5g7_38 = self::mul($g7_19, $f5_2, 26);
+		$f5g8_19 = self::mul($g8_19, $f5, 25);
+		$f5g9_38 = self::mul($g9_19, $f5_2, 26);
+		$f6g0    = self::mul($f6,    $g0, 26);
+		$f6g1    = self::mul($f6,    $g1, 25);
+		$f6g2    = self::mul($f6,    $g2, 26);
+		$f6g3    = self::mul($f6,    $g3, 25);
+		$f6g4_19 = self::mul($g4_19, $f6, 26);
+		$f6g5_19 = self::mul($g5_19, $f6, 26);
+		$f6g6_19 = self::mul($g6_19, $f6, 26);
+		$f6g7_19 = self::mul($g7_19, $f6, 26);
+		$f6g8_19 = self::mul($g8_19, $f6, 26);
+		$f6g9_19 = self::mul($g9_19, $f6, 26);
+		$f7g0    = self::mul($f7,    $g0, 26);
+		$f7g1_2  = self::mul($f7_2,  $g1, 25);
+		$f7g2    = self::mul($f7,    $g2, 26);
+		$f7g3_38 = self::mul($g3_19, $f7_2, 26);
+		$f7g4_19 = self::mul($g4_19, $f7, 26);
+		$f7g5_38 = self::mul($g5_19, $f7_2, 26);
+		$f7g6_19 = self::mul($g6_19, $f7, 25);
+		$f7g7_38 = self::mul($g7_19, $f7_2, 26);
+		$f7g8_19 = self::mul($g8_19, $f7, 25);
+		$f7g9_38 = self::mul($g9_19,$f7_2, 26);
+		$f8g0    = self::mul($f8,    $g0, 26);
+		$f8g1    = self::mul($f8,    $g1, 25);
+		$f8g2_19 = self::mul($g2_19, $f8, 26);
+		$f8g3_19 = self::mul($g3_19, $f8, 26);
+		$f8g4_19 = self::mul($g4_19, $f8, 26);
+		$f8g5_19 = self::mul($g5_19, $f8, 26);
+		$f8g6_19 = self::mul($g6_19, $f8, 26);
+		$f8g7_19 = self::mul($g7_19, $f8, 26);
+		$f8g8_19 = self::mul($g8_19, $f8, 26);
+		$f8g9_19 = self::mul($g9_19, $f8, 26);
+		$f9g0    = self::mul($f9,    $g0, 26);
+		$f9g1_38 = self::mul($g1_19, $f9_2, 26);
+		$f9g2_19 = self::mul($g2_19, $f9, 25);
+		$f9g3_38 = self::mul($g3_19, $f9_2, 26);
+		$f9g4_19 = self::mul($g4_19, $f9, 25);
+		$f9g5_38 = self::mul($g5_19, $f9_2, 26);
+		$f9g6_19 = self::mul($g6_19, $f9, 25);
+		$f9g7_38 = self::mul($g7_19, $f9_2, 26);
+		$f9g8_19 = self::mul($g8_19, $f9, 25);
+		$f9g9_38 = self::mul($g9_19, $f9_2, 26);
+		$h0 = $f0g0 + $f1g9_38 + $f2g8_19 + $f3g7_38 + $f4g6_19 + $f5g5_38 + $f6g4_19 + $f7g3_38 + $f8g2_19 + $f9g1_38;
+		$h1 = $f0g1 + $f1g0    + $f2g9_19 + $f3g8_19 + $f4g7_19 + $f5g6_19 + $f6g5_19 + $f7g4_19 + $f8g3_19 + $f9g2_19;
+		$h2 = $f0g2 + $f1g1_2  + $f2g0    + $f3g9_38 + $f4g8_19 + $f5g7_38 + $f6g6_19 + $f7g5_38 + $f8g4_19 + $f9g3_38;
+		$h3 = $f0g3 + $f1g2    + $f2g1    + $f3g0    + $f4g9_19 + $f5g8_19 + $f6g7_19 + $f7g6_19 + $f8g5_19 + $f9g4_19;
+		$h4 = $f0g4 + $f1g3_2  + $f2g2    + $f3g1_2  + $f4g0    + $f5g9_38 + $f6g8_19 + $f7g7_38 + $f8g6_19 + $f9g5_38;
+		$h5 = $f0g5 + $f1g4    + $f2g3    + $f3g2    + $f4g1    + $f5g0    + $f6g9_19 + $f7g8_19 + $f8g7_19 + $f9g6_19;
+		$h6 = $f0g6 + $f1g5_2  + $f2g4    + $f3g3_2  + $f4g2    + $f5g1_2  + $f6g0    + $f7g9_38 + $f8g8_19 + $f9g7_38;
+		$h7 = $f0g7 + $f1g6    + $f2g5    + $f3g4    + $f4g3    + $f5g2    + $f6g1    + $f7g0    + $f8g9_19 + $f9g8_19;
+		$h8 = $f0g8 + $f1g7_2  + $f2g6    + $f3g5_2  + $f4g4    + $f5g3_2  + $f6g2    + $f7g1_2  + $f8g0    + $f9g9_38;
+		$h9 = $f0g9 + $f1g8    + $f2g7    + $f3g6    + $f4g5    + $f5g4    + $f6g3    + $f7g2    + $f8g1    + $f9g0   ;
+
+		$carry0 = ($h0 + (1 << 25)) >> 26;
+		$h1 += $carry0;
+		$h0 -= $carry0 << 26;
+		$carry4 = ($h4 + (1 << 25)) >> 26;
+		$h5 += $carry4;
+		$h4 -= $carry4 << 26;
+
+		$carry1 = ($h1 + (1 << 24)) >> 25;
+		$h2 += $carry1;
+		$h1 -= $carry1 << 25;
+		$carry5 = ($h5 + (1 << 24)) >> 25;
+		$h6 += $carry5;
+		$h5 -= $carry5 << 25;
+
+		$carry2 = ($h2 + (1 << 25)) >> 26;
+		$h3 += $carry2;
+		$h2 -= $carry2 << 26;
+		$carry6 = ($h6 + (1 << 25)) >> 26;
+		$h7 += $carry6;
+		$h6 -= $carry6 << 26;
+
+		$carry3 = ($h3 + (1 << 24)) >> 25;
+		$h4 += $carry3;
+		$h3 -= $carry3 << 25;
+		$carry7 = ($h7 + (1 << 24)) >> 25;
+		$h8 += $carry7;
+		$h7 -= $carry7 << 25;
+
+		$carry4 = ($h4 + (1 << 25)) >> 26;
+		$h5 += $carry4;
+		$h4 -= $carry4 << 26;
+		$carry8 = ($h8 + (1 << 25)) >> 26;
+		$h9 += $carry8;
+		$h8 -= $carry8 << 26;
+
+		$carry9 = ($h9 + (1 << 24)) >> 25;
+		$h0 += self::mul($carry9, 19, 5);
+		$h9 -= $carry9 << 25;
+
+		$carry0 = ($h0 + (1 << 25)) >> 26;
+		$h1 += $carry0;
+		$h0 -= $carry0 << 26;
+
+		return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
+			array(
+				(int) $h0,
+				(int) $h1,
+				(int) $h2,
+				(int) $h3,
+				(int) $h4,
+				(int) $h5,
+				(int) $h6,
+				(int) $h7,
+				(int) $h8,
+				(int) $h9
+			)
+		);
+	}
+
+	/**
+	 * Get the negative values for each piece of the field element.
+	 *
+	 * h = -f
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 * @psalm-suppress MixedAssignment
+	 */
+	public static function fe_neg(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+	{
+		$h = new ParagonIE_Sodium_Core_Curve25519_Fe();
+		for ($i = 0; $i < 10; ++$i) {
+			$h[$i] = -$f[$i];
+		}
+		return $h;
+	}
+
+	/**
+	 * Square a field element
+	 *
+	 * h = f * f
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public static function fe_sq(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+	{
+		$f0 = (int) $f[0];
+		$f1 = (int) $f[1];
+		$f2 = (int) $f[2];
+		$f3 = (int) $f[3];
+		$f4 = (int) $f[4];
+		$f5 = (int) $f[5];
+		$f6 = (int) $f[6];
+		$f7 = (int) $f[7];
+		$f8 = (int) $f[8];
+		$f9 = (int) $f[9];
+
+		$f0_2 = $f0 << 1;
+		$f1_2 = $f1 << 1;
+		$f2_2 = $f2 << 1;
+		$f3_2 = $f3 << 1;
+		$f4_2 = $f4 << 1;
+		$f5_2 = $f5 << 1;
+		$f6_2 = $f6 << 1;
+		$f7_2 = $f7 << 1;
+		$f5_38 = self::mul($f5, 38, 6);
+		$f6_19 = self::mul($f6, 19, 5);
+		$f7_38 = self::mul($f7, 38, 6);
+		$f8_19 = self::mul($f8, 19, 5);
+		$f9_38 = self::mul($f9, 38, 6);
+		$f0f0    = self::mul($f0,    $f0,    26);
+		$f0f1_2  = self::mul($f0_2,  $f1,    26);
+		$f0f2_2  = self::mul($f0_2,  $f2,    26);
+		$f0f3_2  = self::mul($f0_2,  $f3,    26);
+		$f0f4_2  = self::mul($f0_2,  $f4,    26);
+		$f0f5_2  = self::mul($f0_2,  $f5,    26);
+		$f0f6_2  = self::mul($f0_2,  $f6,    26);
+		$f0f7_2  = self::mul($f0_2,  $f7,    26);
+		$f0f8_2  = self::mul($f0_2,  $f8,    26);
+		$f0f9_2  = self::mul($f0_2,  $f9,    26);
+		$f1f1_2  = self::mul($f1_2,  $f1,    26);
+		$f1f2_2  = self::mul($f1_2,  $f2,    26);
+		$f1f3_4  = self::mul($f1_2,  $f3_2,  26);
+		$f1f4_2  = self::mul($f1_2,  $f4,    26);
+		$f1f5_4  = self::mul($f1_2,  $f5_2,  26);
+		$f1f6_2  = self::mul($f1_2,  $f6,    26);
+		$f1f7_4  = self::mul($f1_2,  $f7_2,  26);
+		$f1f8_2  = self::mul($f1_2,  $f8,    26);
+		$f1f9_76 = self::mul($f9_38, $f1_2,  27);
+		$f2f2    = self::mul($f2,    $f2,    27);
+		$f2f3_2  = self::mul($f2_2,  $f3,    27);
+		$f2f4_2  = self::mul($f2_2,  $f4,    27);
+		$f2f5_2  = self::mul($f2_2,  $f5,    27);
+		$f2f6_2  = self::mul($f2_2,  $f6,    27);
+		$f2f7_2  = self::mul($f2_2,  $f7,    27);
+		$f2f8_38 = self::mul($f8_19, $f2_2,  27);
+		$f2f9_38 = self::mul($f9_38, $f2,    26);
+		$f3f3_2  = self::mul($f3_2,  $f3,    26);
+		$f3f4_2  = self::mul($f3_2,  $f4,    26);
+		$f3f5_4  = self::mul($f3_2,  $f5_2,  26);
+		$f3f6_2  = self::mul($f3_2,  $f6,    26);
+		$f3f7_76 = self::mul($f7_38, $f3_2,  26);
+		$f3f8_38 = self::mul($f8_19, $f3_2,  26);
+		$f3f9_76 = self::mul($f9_38, $f3_2,  26);
+		$f4f4    = self::mul($f4,    $f4,    26);
+		$f4f5_2  = self::mul($f4_2,  $f5,    26);
+		$f4f6_38 = self::mul($f6_19, $f4_2,  27);
+		$f4f7_38 = self::mul($f7_38, $f4,    26);
+		$f4f8_38 = self::mul($f8_19, $f4_2,  27);
+		$f4f9_38 = self::mul($f9_38, $f4,    26);
+		$f5f5_38 = self::mul($f5_38, $f5,    26);
+		$f5f6_38 = self::mul($f6_19, $f5_2,  26);
+		$f5f7_76 = self::mul($f7_38, $f5_2,  26);
+		$f5f8_38 = self::mul($f8_19, $f5_2,  26);
+		$f5f9_76 = self::mul($f9_38, $f5_2,  26);
+		$f6f6_19 = self::mul($f6_19, $f6,    26);
+		$f6f7_38 = self::mul($f7_38, $f6,    26);
+		$f6f8_38 = self::mul($f8_19, $f6_2,  27);
+		$f6f9_38 = self::mul($f9_38, $f6,    26);
+		$f7f7_38 = self::mul($f7_38, $f7,    26);
+		$f7f8_38 = self::mul($f8_19, $f7_2,  26);
+		$f7f9_76 = self::mul($f9_38, $f7_2,  26);
+		$f8f8_19 = self::mul($f8_19, $f8,    26);
+		$f8f9_38 = self::mul($f9_38, $f8,    26);
+		$f9f9_38 = self::mul($f9_38, $f9,    26);
+		$h0 = $f0f0   + $f1f9_76 + $f2f8_38 + $f3f7_76 + $f4f6_38 + $f5f5_38;
+		$h1 = $f0f1_2 + $f2f9_38 + $f3f8_38 + $f4f7_38 + $f5f6_38;
+		$h2 = $f0f2_2 + $f1f1_2  + $f3f9_76 + $f4f8_38 + $f5f7_76 + $f6f6_19;
+		$h3 = $f0f3_2 + $f1f2_2  + $f4f9_38 + $f5f8_38 + $f6f7_38;
+		$h4 = $f0f4_2 + $f1f3_4  + $f2f2    + $f5f9_76 + $f6f8_38 + $f7f7_38;
+		$h5 = $f0f5_2 + $f1f4_2  + $f2f3_2  + $f6f9_38 + $f7f8_38;
+		$h6 = $f0f6_2 + $f1f5_4  + $f2f4_2  + $f3f3_2  + $f7f9_76 + $f8f8_19;
+		$h7 = $f0f7_2 + $f1f6_2  + $f2f5_2  + $f3f4_2  + $f8f9_38;
+		$h8 = $f0f8_2 + $f1f7_4  + $f2f6_2  + $f3f5_4  + $f4f4    + $f9f9_38;
+		$h9 = $f0f9_2 + $f1f8_2  + $f2f7_2  + $f3f6_2  + $f4f5_2;
+
+		$carry0 = ($h0 + (1 << 25)) >> 26;
+		$h1 += $carry0;
+		$h0 -= $carry0 << 26;
+		$carry4 = ($h4 + (1 << 25)) >> 26;
+		$h5 += $carry4;
+		$h4 -= $carry4 << 26;
+
+		$carry1 = ($h1 + (1 << 24)) >> 25;
+		$h2 += $carry1;
+		$h1 -= $carry1 << 25;
+		$carry5 = ($h5 + (1 << 24)) >> 25;
+		$h6 += $carry5;
+		$h5 -= $carry5 << 25;
+
+		$carry2 = ($h2 + (1 << 25)) >> 26;
+		$h3 += $carry2;
+		$h2 -= $carry2 << 26;
+		$carry6 = ($h6 + (1 << 25)) >> 26;
+		$h7 += $carry6;
+		$h6 -= $carry6 << 26;
+
+		$carry3 = ($h3 + (1 << 24)) >> 25;
+		$h4 += $carry3;
+		$h3 -= $carry3 << 25;
+		$carry7 = ($h7 + (1 << 24)) >> 25;
+		$h8 += $carry7;
+		$h7 -= $carry7 << 25;
+
+		$carry4 = ($h4 + (1 << 25)) >> 26;
+		$h5 += $carry4;
+		$h4 -= $carry4 << 26;
+		$carry8 = ($h8 + (1 << 25)) >> 26;
+		$h9 += $carry8;
+		$h8 -= $carry8 << 26;
+
+		$carry9 = ($h9 + (1 << 24)) >> 25;
+		$h0 += self::mul($carry9, 19, 5);
+		$h9 -= $carry9 << 25;
+
+		$carry0 = ($h0 + (1 << 25)) >> 26;
+		$h1 += $carry0;
+		$h0 -= $carry0 << 26;
+
+		return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
+			array(
+				(int) $h0,
+				(int) $h1,
+				(int) $h2,
+				(int) $h3,
+				(int) $h4,
+				(int) $h5,
+				(int) $h6,
+				(int) $h7,
+				(int) $h8,
+				(int) $h9
+			)
+		);
+	}
+
+
+	/**
+	 * Square and double a field element
+	 *
+	 * h = 2 * f * f
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public static function fe_sq2(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+	{
+		$f0 = (int) $f[0];
+		$f1 = (int) $f[1];
+		$f2 = (int) $f[2];
+		$f3 = (int) $f[3];
+		$f4 = (int) $f[4];
+		$f5 = (int) $f[5];
+		$f6 = (int) $f[6];
+		$f7 = (int) $f[7];
+		$f8 = (int) $f[8];
+		$f9 = (int) $f[9];
+
+		$f0_2 = $f0 << 1;
+		$f1_2 = $f1 << 1;
+		$f2_2 = $f2 << 1;
+		$f3_2 = $f3 << 1;
+		$f4_2 = $f4 << 1;
+		$f5_2 = $f5 << 1;
+		$f6_2 = $f6 << 1;
+		$f7_2 = $f7 << 1;
+		$f5_38 = self::mul($f5, 38, 6); /* 1.959375*2^30 */
+		$f6_19 = self::mul($f6, 19, 5); /* 1.959375*2^30 */
+		$f7_38 = self::mul($f7, 38, 6); /* 1.959375*2^30 */
+		$f8_19 = self::mul($f8, 19, 5); /* 1.959375*2^30 */
+		$f9_38 = self::mul($f9, 38, 6); /* 1.959375*2^30 */
+		$f0f0 = self::mul($f0, $f0, 24);
+		$f0f1_2 = self::mul($f0_2, $f1, 24);
+		$f0f2_2 = self::mul($f0_2, $f2, 24);
+		$f0f3_2 = self::mul($f0_2, $f3, 24);
+		$f0f4_2 = self::mul($f0_2, $f4, 24);
+		$f0f5_2 = self::mul($f0_2, $f5, 24);
+		$f0f6_2 = self::mul($f0_2, $f6, 24);
+		$f0f7_2 = self::mul($f0_2, $f7, 24);
+		$f0f8_2 = self::mul($f0_2, $f8, 24);
+		$f0f9_2 = self::mul($f0_2, $f9, 24);
+		$f1f1_2 = self::mul($f1_2,  $f1, 24);
+		$f1f2_2 = self::mul($f1_2,  $f2, 24);
+		$f1f3_4 = self::mul($f1_2,  $f3_2, 24);
+		$f1f4_2 = self::mul($f1_2,  $f4, 24);
+		$f1f5_4 = self::mul($f1_2,  $f5_2, 24);
+		$f1f6_2 = self::mul($f1_2,  $f6, 24);
+		$f1f7_4 = self::mul($f1_2,  $f7_2, 24);
+		$f1f8_2 = self::mul($f1_2,  $f8, 24);
+		$f1f9_76 = self::mul($f9_38, $f1_2, 24);
+		$f2f2 = self::mul($f2,  $f2, 24);
+		$f2f3_2 = self::mul($f2_2,  $f3, 24);
+		$f2f4_2 = self::mul($f2_2,  $f4, 24);
+		$f2f5_2 = self::mul($f2_2,  $f5, 24);
+		$f2f6_2 = self::mul($f2_2,  $f6, 24);
+		$f2f7_2 = self::mul($f2_2,  $f7, 24);
+		$f2f8_38 = self::mul($f8_19, $f2_2, 25);
+		$f2f9_38 = self::mul($f9_38, $f2, 24);
+		$f3f3_2 = self::mul($f3_2,  $f3, 24);
+		$f3f4_2 = self::mul($f3_2,  $f4, 24);
+		$f3f5_4 = self::mul($f3_2,  $f5_2, 24);
+		$f3f6_2 = self::mul($f3_2,  $f6, 24);
+		$f3f7_76 = self::mul($f7_38, $f3_2, 24);
+		$f3f8_38 = self::mul($f8_19, $f3_2, 24);
+		$f3f9_76 = self::mul($f9_38, $f3_2, 24);
+		$f4f4 = self::mul($f4,  $f4, 24);
+		$f4f5_2 = self::mul($f4_2,  $f5, 24);
+		$f4f6_38 = self::mul($f6_19, $f4_2, 25);
+		$f4f7_38 = self::mul($f7_38, $f4, 24);
+		$f4f8_38 = self::mul($f8_19, $f4_2, 25);
+		$f4f9_38 = self::mul($f9_38, $f4, 24);
+		$f5f5_38 = self::mul($f5_38, $f5, 24);
+		$f5f6_38 = self::mul($f6_19, $f5_2, 24);
+		$f5f7_76 = self::mul($f7_38, $f5_2, 24);
+		$f5f8_38 = self::mul($f8_19, $f5_2, 24);
+		$f5f9_76 = self::mul($f9_38, $f5_2, 24);
+		$f6f6_19 = self::mul($f6_19, $f6, 24);
+		$f6f7_38 = self::mul($f7_38, $f6, 24);
+		$f6f8_38 = self::mul($f8_19, $f6_2, 25);
+		$f6f9_38 = self::mul($f9_38, $f6, 24);
+		$f7f7_38 = self::mul($f7_38, $f7, 24);
+		$f7f8_38 = self::mul($f8_19, $f7_2, 24);
+		$f7f9_76 = self::mul($f9_38, $f7_2, 24);
+		$f8f8_19 = self::mul($f8_19, $f8, 24);
+		$f8f9_38 = self::mul($f9_38, $f8, 24);
+		$f9f9_38 = self::mul($f9_38, $f9, 24);
+
+		$h0 = (int) ($f0f0 + $f1f9_76 + $f2f8_38 + $f3f7_76 + $f4f6_38 + $f5f5_38) << 1;
+		$h1 = (int) ($f0f1_2 + $f2f9_38 + $f3f8_38 + $f4f7_38 + $f5f6_38) << 1;
+		$h2 = (int) ($f0f2_2 + $f1f1_2  + $f3f9_76 + $f4f8_38 + $f5f7_76 + $f6f6_19) << 1;
+		$h3 = (int) ($f0f3_2 + $f1f2_2  + $f4f9_38 + $f5f8_38 + $f6f7_38) << 1;
+		$h4 = (int) ($f0f4_2 + $f1f3_4  + $f2f2    + $f5f9_76 + $f6f8_38 + $f7f7_38) << 1;
+		$h5 = (int) ($f0f5_2 + $f1f4_2  + $f2f3_2  + $f6f9_38 + $f7f8_38) << 1;
+		$h6 = (int) ($f0f6_2 + $f1f5_4  + $f2f4_2  + $f3f3_2  + $f7f9_76 + $f8f8_19) << 1;
+		$h7 = (int) ($f0f7_2 + $f1f6_2  + $f2f5_2  + $f3f4_2  + $f8f9_38) << 1;
+		$h8 = (int) ($f0f8_2 + $f1f7_4  + $f2f6_2  + $f3f5_4  + $f4f4    + $f9f9_38) << 1;
+		$h9 = (int) ($f0f9_2 + $f1f8_2  + $f2f7_2  + $f3f6_2  + $f4f5_2) << 1;
+
+		$carry0 = ($h0 + (1 << 25)) >> 26;
+		$h1 += $carry0;
+		$h0 -= $carry0 << 26;
+		$carry4 = ($h4 + (1 << 25)) >> 26;
+		$h5 += $carry4;
+		$h4 -= $carry4 << 26;
+
+		$carry1 = ($h1 + (1 << 24)) >> 25;
+		$h2 += $carry1;
+		$h1 -= $carry1 << 25;
+		$carry5 = ($h5 + (1 << 24)) >> 25;
+		$h6 += $carry5;
+		$h5 -= $carry5 << 25;
+
+		$carry2 = ($h2 + (1 << 25)) >> 26;
+		$h3 += $carry2;
+		$h2 -= $carry2 << 26;
+		$carry6 = ($h6 + (1 << 25)) >> 26;
+		$h7 += $carry6;
+		$h6 -= $carry6 << 26;
+
+		$carry3 = ($h3 + (1 << 24)) >> 25;
+		$h4 += $carry3;
+		$h3 -= $carry3 << 25;
+		$carry7 = ($h7 + (1 << 24)) >> 25;
+		$h8 += $carry7;
+		$h7 -= $carry7 << 25;
+
+		$carry4 = ($h4 + (1 << 25)) >> 26;
+		$h5 += $carry4;
+		$h4 -= $carry4 << 26;
+		$carry8 = ($h8 + (1 << 25)) >> 26;
+		$h9 += $carry8;
+		$h8 -= $carry8 << 26;
+
+		$carry9 = ($h9 + (1 << 24)) >> 25;
+		$h0 += self::mul($carry9, 19, 5);
+		$h9 -= $carry9 << 25;
+
+		$carry0 = ($h0 + (1 << 25)) >> 26;
+		$h1 += $carry0;
+		$h0 -= $carry0 << 26;
+
+		return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
+			array(
+				(int) $h0,
+				(int) $h1,
+				(int) $h2,
+				(int) $h3,
+				(int) $h4,
+				(int) $h5,
+				(int) $h6,
+				(int) $h7,
+				(int) $h8,
+				(int) $h9
+			)
+		);
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $Z
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public static function fe_invert(ParagonIE_Sodium_Core_Curve25519_Fe $Z)
+	{
+		$z = clone $Z;
+		$t0 = self::fe_sq($z);
+		$t1 = self::fe_sq($t0);
+		$t1 = self::fe_sq($t1);
+		$t1 = self::fe_mul($z, $t1);
+		$t0 = self::fe_mul($t0, $t1);
+		$t2 = self::fe_sq($t0);
+		$t1 = self::fe_mul($t1, $t2);
+		$t2 = self::fe_sq($t1);
+		for ($i = 1; $i < 5; ++$i) {
+			$t2 = self::fe_sq($t2);
+		}
+		$t1 = self::fe_mul($t2, $t1);
+		$t2 = self::fe_sq($t1);
+		for ($i = 1; $i < 10; ++$i) {
+			$t2 = self::fe_sq($t2);
+		}
+		$t2 = self::fe_mul($t2, $t1);
+		$t3 = self::fe_sq($t2);
+		for ($i = 1; $i < 20; ++$i) {
+			$t3 = self::fe_sq($t3);
+		}
+		$t2 = self::fe_mul($t3, $t2);
+		$t2 = self::fe_sq($t2);
+		for ($i = 1; $i < 10; ++$i) {
+			$t2 = self::fe_sq($t2);
+		}
+		$t1 = self::fe_mul($t2, $t1);
+		$t2 = self::fe_sq($t1);
+		for ($i = 1; $i < 50; ++$i) {
+			$t2 = self::fe_sq($t2);
+		}
+		$t2 = self::fe_mul($t2, $t1);
+		$t3 = self::fe_sq($t2);
+		for ($i = 1; $i < 100; ++$i) {
+			$t3 = self::fe_sq($t3);
+		}
+		$t2 = self::fe_mul($t3, $t2);
+		$t2 = self::fe_sq($t2);
+		for ($i = 1; $i < 50; ++$i) {
+			$t2 = self::fe_sq($t2);
+		}
+		$t1 = self::fe_mul($t2, $t1);
+		$t1 = self::fe_sq($t1);
+		for ($i = 1; $i < 5; ++$i) {
+			$t1 = self::fe_sq($t1);
+		}
+		return self::fe_mul($t1, $t0);
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @ref https://github.com/jedisct1/libsodium/blob/68564326e1e9dc57ef03746f85734232d20ca6fb/src/libsodium/crypto_core/curve25519/ref10/curve25519_ref10.c#L1054-L1106
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $z
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public static function fe_pow22523(ParagonIE_Sodium_Core_Curve25519_Fe $z)
+	{
+		# fe_sq(t0, z);
+		# fe_sq(t1, t0);
+		# fe_sq(t1, t1);
+		# fe_mul(t1, z, t1);
+		# fe_mul(t0, t0, t1);
+		# fe_sq(t0, t0);
+		# fe_mul(t0, t1, t0);
+		# fe_sq(t1, t0);
+		$t0 = self::fe_sq($z);
+		$t1 = self::fe_sq($t0);
+		$t1 = self::fe_sq($t1);
+		$t1 = self::fe_mul($z, $t1);
+		$t0 = self::fe_mul($t0, $t1);
+		$t0 = self::fe_sq($t0);
+		$t0 = self::fe_mul($t1, $t0);
+		$t1 = self::fe_sq($t0);
+
+		# for (i = 1; i < 5; ++i) {
+		#     fe_sq(t1, t1);
+		# }
+		for ($i = 1; $i < 5; ++$i) {
+			$t1 = self::fe_sq($t1);
+		}
+
+		# fe_mul(t0, t1, t0);
+		# fe_sq(t1, t0);
+		$t0 = self::fe_mul($t1, $t0);
+		$t1 = self::fe_sq($t0);
+
+		# for (i = 1; i < 10; ++i) {
+		#     fe_sq(t1, t1);
+		# }
+		for ($i = 1; $i < 10; ++$i) {
+			$t1 = self::fe_sq($t1);
+		}
+
+		# fe_mul(t1, t1, t0);
+		# fe_sq(t2, t1);
+		$t1 = self::fe_mul($t1, $t0);
+		$t2 = self::fe_sq($t1);
+
+		# for (i = 1; i < 20; ++i) {
+		#     fe_sq(t2, t2);
+		# }
+		for ($i = 1; $i < 20; ++$i) {
+			$t2 = self::fe_sq($t2);
+		}
+
+		# fe_mul(t1, t2, t1);
+		# fe_sq(t1, t1);
+		$t1 = self::fe_mul($t2, $t1);
+		$t1 = self::fe_sq($t1);
+
+		# for (i = 1; i < 10; ++i) {
+		#     fe_sq(t1, t1);
+		# }
+		for ($i = 1; $i < 10; ++$i) {
+			$t1 = self::fe_sq($t1);
+		}
+
+		# fe_mul(t0, t1, t0);
+		# fe_sq(t1, t0);
+		$t0 = self::fe_mul($t1, $t0);
+		$t1 = self::fe_sq($t0);
+
+		# for (i = 1; i < 50; ++i) {
+		#     fe_sq(t1, t1);
+		# }
+		for ($i = 1; $i < 50; ++$i) {
+			$t1 = self::fe_sq($t1);
+		}
+
+		# fe_mul(t1, t1, t0);
+		# fe_sq(t2, t1);
+		$t1 = self::fe_mul($t1, $t0);
+		$t2 = self::fe_sq($t1);
+
+		# for (i = 1; i < 100; ++i) {
+		#     fe_sq(t2, t2);
+		# }
+		for ($i = 1; $i < 100; ++$i) {
+			$t2 = self::fe_sq($t2);
+		}
+
+		# fe_mul(t1, t2, t1);
+		# fe_sq(t1, t1);
+		$t1 = self::fe_mul($t2, $t1);
+		$t1 = self::fe_sq($t1);
+
+		# for (i = 1; i < 50; ++i) {
+		#     fe_sq(t1, t1);
+		# }
+		for ($i = 1; $i < 50; ++$i) {
+			$t1 = self::fe_sq($t1);
+		}
+
+		# fe_mul(t0, t1, t0);
+		# fe_sq(t0, t0);
+		# fe_sq(t0, t0);
+		# fe_mul(out, t0, z);
+		$t0 = self::fe_mul($t1, $t0);
+		$t0 = self::fe_sq($t0);
+		$t0 = self::fe_sq($t0);
+		return self::fe_mul($t0, $z);
+	}
+
+	/**
+	 * Subtract two field elements.
+	 *
+	 * h = f - g
+	 *
+	 * Preconditions:
+	 * |f| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+	 * |g| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+	 *
+	 * Postconditions:
+	 * |h| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $g
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 * @psalm-suppress MixedOperand
+	 */
+	public static function fe_sub(ParagonIE_Sodium_Core_Curve25519_Fe $f, ParagonIE_Sodium_Core_Curve25519_Fe $g)
+	{
+		return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
+			array(
+				(int) ($f[0] - $g[0]),
+				(int) ($f[1] - $g[1]),
+				(int) ($f[2] - $g[2]),
+				(int) ($f[3] - $g[3]),
+				(int) ($f[4] - $g[4]),
+				(int) ($f[5] - $g[5]),
+				(int) ($f[6] - $g[6]),
+				(int) ($f[7] - $g[7]),
+				(int) ($f[8] - $g[8]),
+				(int) ($f[9] - $g[9])
+			)
+		);
+	}
+
+	/**
+	 * Add two group elements.
+	 *
+	 * r = p + q
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_Cached $q
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
+	 */
+	public static function ge_add(
+		ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p,
+		ParagonIE_Sodium_Core_Curve25519_Ge_Cached $q
+	) {
+		$r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1();
+		$r->X = self::fe_add($p->Y, $p->X);
+		$r->Y = self::fe_sub($p->Y, $p->X);
+		$r->Z = self::fe_mul($r->X, $q->YplusX);
+		$r->Y = self::fe_mul($r->Y, $q->YminusX);
+		$r->T = self::fe_mul($q->T2d, $p->T);
+		$r->X = self::fe_mul($p->Z, $q->Z);
+		$t0   = self::fe_add($r->X, $r->X);
+		$r->X = self::fe_sub($r->Z, $r->Y);
+		$r->Y = self::fe_add($r->Z, $r->Y);
+		$r->Z = self::fe_add($t0, $r->T);
+		$r->T = self::fe_sub($t0, $r->T);
+		return $r;
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @ref https://github.com/jedisct1/libsodium/blob/157c4a80c13b117608aeae12178b2d38825f9f8f/src/libsodium/crypto_core/curve25519/ref10/curve25519_ref10.c#L1185-L1215
+	 * @param string $a
+	 * @return array<int, mixed>
+	 * @throws SodiumException
+	 * @throws TypeError
+	 */
+	public static function slide($a)
+	{
+		if (self::strlen($a) < 256) {
+			if (self::strlen($a) < 16) {
+				$a = str_pad($a, 256, '0', STR_PAD_RIGHT);
+			}
+		}
+		/** @var array<int, int> $r */
+		$r = array();
+
+		/** @var int $i */
+		for ($i = 0; $i < 256; ++$i) {
+			$r[$i] = (int) (
+				1 & (
+					self::chrToInt($a[(int) ($i >> 3)])
+						>>
+					($i & 7)
+				)
+			);
+		}
+
+		for ($i = 0;$i < 256;++$i) {
+			if ($r[$i]) {
+				for ($b = 1;$b <= 6 && $i + $b < 256;++$b) {
+					if ($r[$i + $b]) {
+						if ($r[$i] + ($r[$i + $b] << $b) <= 15) {
+							$r[$i] += $r[$i + $b] << $b;
+							$r[$i + $b] = 0;
+						} elseif ($r[$i] - ($r[$i + $b] << $b) >= -15) {
+							$r[$i] -= $r[$i + $b] << $b;
+							for ($k = $i + $b; $k < 256; ++$k) {
+								if (!$r[$k]) {
+									$r[$k] = 1;
+									break;
+								}
+								$r[$k] = 0;
+							}
+						} else {
+							break;
+						}
+					}
+				}
+			}
+		}
+		return $r;
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param string $s
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
+	 * @throws SodiumException
+	 * @throws TypeError
+	 */
+	public static function ge_frombytes_negate_vartime($s)
+	{
+		static $d = null;
+		if (!$d) {
+			$d = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d);
+		}
+
+		# fe_frombytes(h->Y,s);
+		# fe_1(h->Z);
+		$h = new ParagonIE_Sodium_Core_Curve25519_Ge_P3(
+			self::fe_0(),
+			self::fe_frombytes($s),
+			self::fe_1()
+		);
+
+		# fe_sq(u,h->Y);
+		# fe_mul(v,u,d);
+		# fe_sub(u,u,h->Z);       /* u = y^2-1 */
+		# fe_add(v,v,h->Z);       /* v = dy^2+1 */
+		$u = self::fe_sq($h->Y);
+		/** @var ParagonIE_Sodium_Core_Curve25519_Fe $d */
+		$v = self::fe_mul($u, $d);
+		$u = self::fe_sub($u, $h->Z); /* u =  y^2 - 1 */
+		$v = self::fe_add($v, $h->Z); /* v = dy^2 + 1 */
+
+		# fe_sq(v3,v);
+		# fe_mul(v3,v3,v);        /* v3 = v^3 */
+		# fe_sq(h->X,v3);
+		# fe_mul(h->X,h->X,v);
+		# fe_mul(h->X,h->X,u);    /* x = uv^7 */
+		$v3 = self::fe_sq($v);
+		$v3 = self::fe_mul($v3, $v); /* v3 = v^3 */
+		$h->X = self::fe_sq($v3);
+		$h->X = self::fe_mul($h->X, $v);
+		$h->X = self::fe_mul($h->X, $u); /* x = uv^7 */
+
+		# fe_pow22523(h->X,h->X); /* x = (uv^7)^((q-5)/8) */
+		# fe_mul(h->X,h->X,v3);
+		# fe_mul(h->X,h->X,u);    /* x = uv^3(uv^7)^((q-5)/8) */
+		$h->X = self::fe_pow22523($h->X); /* x = (uv^7)^((q-5)/8) */
+		$h->X = self::fe_mul($h->X, $v3);
+		$h->X = self::fe_mul($h->X, $u); /* x = uv^3(uv^7)^((q-5)/8) */
+
+		# fe_sq(vxx,h->X);
+		# fe_mul(vxx,vxx,v);
+		# fe_sub(check,vxx,u);    /* vx^2-u */
+		$vxx = self::fe_sq($h->X);
+		$vxx = self::fe_mul($vxx, $v);
+		$check = self::fe_sub($vxx, $u); /* vx^2 - u */
+
+		# if (fe_isnonzero(check)) {
+		#     fe_add(check,vxx,u);  /* vx^2+u */
+		#     if (fe_isnonzero(check)) {
+		#         return -1;
+		#     }
+		#     fe_mul(h->X,h->X,sqrtm1);
+		# }
+		if (self::fe_isnonzero($check)) {
+			$check = self::fe_add($vxx, $u); /* vx^2 + u */
+			if (self::fe_isnonzero($check)) {
+				throw new RangeException('Internal check failed.');
+			}
+			$h->X = self::fe_mul(
+				$h->X,
+				ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1)
+			);
+		}
+
+		# if (fe_isnegative(h->X) == (s[31] >> 7)) {
+		#     fe_neg(h->X,h->X);
+		# }
+		$i = self::chrToInt($s[31]);
+		if (self::fe_isnegative($h->X) === ($i >> 7)) {
+			$h->X = self::fe_neg($h->X);
+		}
+
+		# fe_mul(h->T,h->X,h->Y);
+		$h->T = self::fe_mul($h->X, $h->Y);
+		return $h;
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $R
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $q
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
+	 */
+	public static function ge_madd(
+		ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $R,
+		ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p,
+		ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $q
+	) {
+		$r = clone $R;
+		$r->X = self::fe_add($p->Y, $p->X);
+		$r->Y = self::fe_sub($p->Y, $p->X);
+		$r->Z = self::fe_mul($r->X, $q->yplusx);
+		$r->Y = self::fe_mul($r->Y, $q->yminusx);
+		$r->T = self::fe_mul($q->xy2d, $p->T);
+		$t0 = self::fe_add(clone $p->Z, clone $p->Z);
+		$r->X = self::fe_sub($r->Z, $r->Y);
+		$r->Y = self::fe_add($r->Z, $r->Y);
+		$r->Z = self::fe_add($t0, $r->T);
+		$r->T = self::fe_sub($t0, $r->T);
+
+		return $r;
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $R
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $q
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
+	 */
+	public static function ge_msub(
+		ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $R,
+		ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p,
+		ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $q
+	) {
+		$r = clone $R;
+
+		$r->X = self::fe_add($p->Y, $p->X);
+		$r->Y = self::fe_sub($p->Y, $p->X);
+		$r->Z = self::fe_mul($r->X, $q->yminusx);
+		$r->Y = self::fe_mul($r->Y, $q->yplusx);
+		$r->T = self::fe_mul($q->xy2d, $p->T);
+		$t0 = self::fe_add($p->Z, $p->Z);
+		$r->X = self::fe_sub($r->Z, $r->Y);
+		$r->Y = self::fe_add($r->Z, $r->Y);
+		$r->Z = self::fe_sub($t0, $r->T);
+		$r->T = self::fe_add($t0, $r->T);
+
+		return $r;
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2
+	 */
+	public static function ge_p1p1_to_p2(ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p)
+	{
+		$r = new ParagonIE_Sodium_Core_Curve25519_Ge_P2();
+		$r->X = self::fe_mul($p->X, $p->T);
+		$r->Y = self::fe_mul($p->Y, $p->Z);
+		$r->Z = self::fe_mul($p->Z, $p->T);
+		return $r;
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
+	 */
+	public static function ge_p1p1_to_p3(ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p)
+	{
+		$r = new ParagonIE_Sodium_Core_Curve25519_Ge_P3();
+		$r->X = self::fe_mul($p->X, $p->T);
+		$r->Y = self::fe_mul($p->Y, $p->Z);
+		$r->Z = self::fe_mul($p->Z, $p->T);
+		$r->T = self::fe_mul($p->X, $p->Y);
+		return $r;
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2
+	 */
+	public static function ge_p2_0()
+	{
+		return new ParagonIE_Sodium_Core_Curve25519_Ge_P2(
+			self::fe_0(),
+			self::fe_1(),
+			self::fe_1()
+		);
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P2 $p
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
+	 */
+	public static function ge_p2_dbl(ParagonIE_Sodium_Core_Curve25519_Ge_P2 $p)
+	{
+		$r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1();
+
+		$r->X = self::fe_sq($p->X);
+		$r->Z = self::fe_sq($p->Y);
+		$r->T = self::fe_sq2($p->Z);
+		$r->Y = self::fe_add($p->X, $p->Y);
+		$t0   = self::fe_sq($r->Y);
+		$r->Y = self::fe_add($r->Z, $r->X);
+		$r->Z = self::fe_sub($r->Z, $r->X);
+		$r->X = self::fe_sub($t0, $r->Y);
+		$r->T = self::fe_sub($r->T, $r->Z);
+
+		return $r;
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
+	 */
+	public static function ge_p3_0()
+	{
+		return new ParagonIE_Sodium_Core_Curve25519_Ge_P3(
+			self::fe_0(),
+			self::fe_1(),
+			self::fe_1(),
+			self::fe_0()
+		);
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_Cached
+	 */
+	public static function ge_p3_to_cached(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p)
+	{
+		static $d2 = null;
+		if ($d2 === null) {
+			$d2 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d2);
+		}
+		/** @var ParagonIE_Sodium_Core_Curve25519_Fe $d2 */
+		$r = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached();
+		$r->YplusX = self::fe_add($p->Y, $p->X);
+		$r->YminusX = self::fe_sub($p->Y, $p->X);
+		$r->Z = self::fe_copy($p->Z);
+		$r->T2d = self::fe_mul($p->T, $d2);
+		return $r;
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2
+	 */
+	public static function ge_p3_to_p2(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p)
+	{
+		return new ParagonIE_Sodium_Core_Curve25519_Ge_P2(
+			self::fe_copy($p->X),
+			self::fe_copy($p->Y),
+			self::fe_copy($p->Z)
+		);
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h
+	 * @return string
+	 * @throws SodiumException
+	 * @throws TypeError
+	 */
+	public static function ge_p3_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h)
+	{
+		$recip = self::fe_invert($h->Z);
+		$x = self::fe_mul($h->X, $recip);
+		$y = self::fe_mul($h->Y, $recip);
+		$s = self::fe_tobytes($y);
+		$s[31] = self::intToChr(
+			self::chrToInt($s[31]) ^ (self::fe_isnegative($x) << 7)
+		);
+		return $s;
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
+	 */
+	public static function ge_p3_dbl(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p)
+	{
+		$q = self::ge_p3_to_p2($p);
+		return self::ge_p2_dbl($q);
+	}
+
+	/**
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_Precomp
+	 */
+	public static function ge_precomp_0()
+	{
+		return new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
+			self::fe_1(),
+			self::fe_1(),
+			self::fe_0()
+		);
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param int $b
+	 * @param int $c
+	 * @return int
+	 */
+	public static function equal($b, $c)
+	{
+		return (int) ((($b ^ $c) - 1) >> 31) & 1;
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param int|string $char
+	 * @return int (1 = yes, 0 = no)
+	 * @throws SodiumException
+	 * @throws TypeError
+	 */
+	public static function negative($char)
+	{
+		if (is_int($char)) {
+			return ($char >> 63) & 1;
+		}
+		$x = self::chrToInt(self::substr($char, 0, 1));
+		return (int) ($x >> 63);
+	}
+
+	/**
+	 * Conditional move
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $t
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $u
+	 * @param int $b
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_Precomp
+	 */
+	public static function cmov(
+		ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $t,
+		ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $u,
+		$b
+	) {
+		if (!is_int($b)) {
+			throw new InvalidArgumentException('Expected an integer.');
+		}
+		return new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
+			self::fe_cmov($t->yplusx,  $u->yplusx,  $b),
+			self::fe_cmov($t->yminusx, $u->yminusx, $b),
+			self::fe_cmov($t->xy2d,    $u->xy2d,    $b)
+		);
+	}
+
+	/**
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_Cached $t
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_Cached $u
+	 * @param int $b
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_Cached
+	 */
+	public static function ge_cmov_cached(
+		ParagonIE_Sodium_Core_Curve25519_Ge_Cached $t,
+		ParagonIE_Sodium_Core_Curve25519_Ge_Cached $u,
+		$b
+	) {
+		$b &= 1;
+		$ret = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached();
+		$ret->YplusX  = self::fe_cmov($t->YplusX,  $u->YplusX,  $b);
+		$ret->YminusX = self::fe_cmov($t->YminusX, $u->YminusX, $b);
+		$ret->Z       = self::fe_cmov($t->Z,       $u->Z,       $b);
+		$ret->T2d     = self::fe_cmov($t->T2d,     $u->T2d,     $b);
+		return $ret;
+	}
+
+	/**
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_Cached[] $cached
+	 * @param int $b
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_Cached
+	 * @throws SodiumException
+	 */
+	public static function ge_cmov8_cached(array $cached, $b)
+	{
+		// const unsigned char bnegative = negative(b);
+		// const unsigned char babs      = b - (((-bnegative) & b) * ((signed char) 1 << 1));
+		$bnegative = self::negative($b);
+		$babs = $b - (((-$bnegative) & $b) << 1);
+
+		// ge25519_cached_0(t);
+		$t = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached(
+			self::fe_1(),
+			self::fe_1(),
+			self::fe_1(),
+			self::fe_0()
+		);
+
+		// ge25519_cmov_cached(t, &cached[0], equal(babs, 1));
+		// ge25519_cmov_cached(t, &cached[1], equal(babs, 2));
+		// ge25519_cmov_cached(t, &cached[2], equal(babs, 3));
+		// ge25519_cmov_cached(t, &cached[3], equal(babs, 4));
+		// ge25519_cmov_cached(t, &cached[4], equal(babs, 5));
+		// ge25519_cmov_cached(t, &cached[5], equal(babs, 6));
+		// ge25519_cmov_cached(t, &cached[6], equal(babs, 7));
+		// ge25519_cmov_cached(t, &cached[7], equal(babs, 8));
+		for ($x = 0; $x < 8; ++$x) {
+			$t = self::ge_cmov_cached($t, $cached[$x], self::equal($babs, $x + 1));
+		}
+
+		// fe25519_copy(minust.YplusX, t->YminusX);
+		// fe25519_copy(minust.YminusX, t->YplusX);
+		// fe25519_copy(minust.Z, t->Z);
+		// fe25519_neg(minust.T2d, t->T2d);
+		$minust = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached(
+			self::fe_copy($t->YminusX),
+			self::fe_copy($t->YplusX),
+			self::fe_copy($t->Z),
+			self::fe_neg($t->T2d)
+		);
+		return self::ge_cmov_cached($t, $minust, $bnegative);
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param int $pos
+	 * @param int $b
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_Precomp
+	 * @throws SodiumException
+	 * @throws TypeError
+	 * @psalm-suppress MixedArgument
+	 * @psalm-suppress MixedArrayAccess
+	 * @psalm-suppress MixedArrayOffset
+	 */
+	public static function ge_select($pos = 0, $b = 0)
+	{
+		static $base = null;
+		if ($base === null) {
+			$base = array();
+			/** @var int $i */
+			foreach (self::$base as $i => $bas) {
+				for ($j = 0; $j < 8; ++$j) {
+					$base[$i][$j] = new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
+						ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($bas[$j][0]),
+						ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($bas[$j][1]),
+						ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($bas[$j][2])
+					);
+				}
+			}
+		}
+		/** @var array<int, array<int, ParagonIE_Sodium_Core_Curve25519_Ge_Precomp>> $base */
+		if (!is_int($pos)) {
+			throw new InvalidArgumentException('Position must be an integer');
+		}
+		if ($pos < 0 || $pos > 31) {
+			throw new RangeException('Position is out of range [0, 31]');
+		}
+
+		$bnegative = self::negative($b);
+		$babs = $b - (((-$bnegative) & $b) << 1);
+
+		$t = self::ge_precomp_0();
+		for ($i = 0; $i < 8; ++$i) {
+			$t = self::cmov(
+				$t,
+				$base[$pos][$i],
+				self::equal($babs, $i + 1)
+			);
+		}
+		$minusT = new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
+			self::fe_copy($t->yminusx),
+			self::fe_copy($t->yplusx),
+			self::fe_neg($t->xy2d)
+		);
+		return self::cmov($t, $minusT, $bnegative);
+	}
+
+	/**
+	 * Subtract two group elements.
+	 *
+	 * r = p - q
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_Cached $q
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
+	 */
+	public static function ge_sub(
+		ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p,
+		ParagonIE_Sodium_Core_Curve25519_Ge_Cached $q
+	) {
+		$r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1();
+
+		$r->X = self::fe_add($p->Y, $p->X);
+		$r->Y = self::fe_sub($p->Y, $p->X);
+		$r->Z = self::fe_mul($r->X, $q->YminusX);
+		$r->Y = self::fe_mul($r->Y, $q->YplusX);
+		$r->T = self::fe_mul($q->T2d, $p->T);
+		$r->X = self::fe_mul($p->Z, $q->Z);
+		$t0 = self::fe_add($r->X, $r->X);
+		$r->X = self::fe_sub($r->Z, $r->Y);
+		$r->Y = self::fe_add($r->Z, $r->Y);
+		$r->Z = self::fe_sub($t0, $r->T);
+		$r->T = self::fe_add($t0, $r->T);
+
+		return $r;
+	}
+
+	/**
+	 * Convert a group element to a byte string.
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P2 $h
+	 * @return string
+	 * @throws SodiumException
+	 * @throws TypeError
+	 */
+	public static function ge_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P2 $h)
+	{
+		$recip = self::fe_invert($h->Z);
+		$x = self::fe_mul($h->X, $recip);
+		$y = self::fe_mul($h->Y, $recip);
+		$s = self::fe_tobytes($y);
+		$s[31] = self::intToChr(
+			self::chrToInt($s[31]) ^ (self::fe_isnegative($x) << 7)
+		);
+		return $s;
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param string $a
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A
+	 * @param string $b
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2
+	 * @throws SodiumException
+	 * @throws TypeError
+	 * @psalm-suppress MixedArgument
+	 * @psalm-suppress MixedArrayAccess
+	 */
+	public static function ge_double_scalarmult_vartime(
+		$a,
+		ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A,
+		$b
+	) {
+		/** @var array<int, ParagonIE_Sodium_Core_Curve25519_Ge_Cached> $Ai */
+		$Ai = array();
+
+		/** @var array<int, ParagonIE_Sodium_Core_Curve25519_Ge_Precomp> $Bi */
+		static $Bi = array();
+		if (!$Bi) {
+			for ($i = 0; $i < 8; ++$i) {
+				$Bi[$i] = new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
+					ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$base2[$i][0]),
+					ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$base2[$i][1]),
+					ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$base2[$i][2])
+				);
+			}
+		}
+		for ($i = 0; $i < 8; ++$i) {
+			$Ai[$i] = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached(
+				self::fe_0(),
+				self::fe_0(),
+				self::fe_0(),
+				self::fe_0()
+			);
+		}
+
+		# slide(aslide,a);
+		# slide(bslide,b);
+		/** @var array<int, int> $aslide */
+		$aslide = self::slide($a);
+		/** @var array<int, int> $bslide */
+		$bslide = self::slide($b);
+
+		# ge_p3_to_cached(&Ai[0],A);
+		# ge_p3_dbl(&t,A); ge_p1p1_to_p3(&A2,&t);
+		$Ai[0] = self::ge_p3_to_cached($A);
+		$t = self::ge_p3_dbl($A);
+		$A2 = self::ge_p1p1_to_p3($t);
+
+		# ge_add(&t,&A2,&Ai[0]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[1],&u);
+		# ge_add(&t,&A2,&Ai[1]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[2],&u);
+		# ge_add(&t,&A2,&Ai[2]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[3],&u);
+		# ge_add(&t,&A2,&Ai[3]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[4],&u);
+		# ge_add(&t,&A2,&Ai[4]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[5],&u);
+		# ge_add(&t,&A2,&Ai[5]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[6],&u);
+		# ge_add(&t,&A2,&Ai[6]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[7],&u);
+		for ($i = 0; $i < 7; ++$i) {
+			$t = self::ge_add($A2, $Ai[$i]);
+			$u = self::ge_p1p1_to_p3($t);
+			$Ai[$i + 1] = self::ge_p3_to_cached($u);
+		}
+
+		# ge_p2_0(r);
+		$r = self::ge_p2_0();
+
+		# for (i = 255;i >= 0;--i) {
+		#     if (aslide[i] || bslide[i]) break;
+		# }
+		$i = 255;
+		for (; $i >= 0; --$i) {
+			if ($aslide[$i] || $bslide[$i]) {
+				break;
+			}
+		}
+
+		# for (;i >= 0;--i) {
+		for (; $i >= 0; --$i) {
+			# ge_p2_dbl(&t,r);
+			$t = self::ge_p2_dbl($r);
+
+			# if (aslide[i] > 0) {
+			if ($aslide[$i] > 0) {
+				# ge_p1p1_to_p3(&u,&t);
+				# ge_add(&t,&u,&Ai[aslide[i]/2]);
+				$u = self::ge_p1p1_to_p3($t);
+				$t = self::ge_add(
+					$u,
+					$Ai[(int) floor($aslide[$i] / 2)]
+				);
+			# } else if (aslide[i] < 0) {
+			} elseif ($aslide[$i] < 0) {
+				# ge_p1p1_to_p3(&u,&t);
+				# ge_sub(&t,&u,&Ai[(-aslide[i])/2]);
+				$u = self::ge_p1p1_to_p3($t);
+				$t = self::ge_sub(
+					$u,
+					$Ai[(int) floor(-$aslide[$i] / 2)]
+				);
+			}
+
+			# if (bslide[i] > 0) {
+			if ($bslide[$i] > 0) {
+				/** @var int $index */
+				$index = (int) floor($bslide[$i] / 2);
+				# ge_p1p1_to_p3(&u,&t);
+				# ge_madd(&t,&u,&Bi[bslide[i]/2]);
+				$u = self::ge_p1p1_to_p3($t);
+				$t = self::ge_madd($t, $u, $Bi[$index]);
+			# } else if (bslide[i] < 0) {
+			} elseif ($bslide[$i] < 0) {
+				/** @var int $index */
+				$index = (int) floor(-$bslide[$i] / 2);
+				# ge_p1p1_to_p3(&u,&t);
+				# ge_msub(&t,&u,&Bi[(-bslide[i])/2]);
+				$u = self::ge_p1p1_to_p3($t);
+				$t = self::ge_msub($t, $u, $Bi[$index]);
+			}
+			# ge_p1p1_to_p2(r,&t);
+			$r = self::ge_p1p1_to_p2($t);
+		}
+		return $r;
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param string $a
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
+	 * @throws SodiumException
+	 * @throws TypeError
+	 * @psalm-suppress MixedAssignment
+	 * @psalm-suppress MixedOperand
+	 */
+	public static function ge_scalarmult($a, $p)
+	{
+		$e = array_fill(0, 64, 0);
+
+		/** @var ParagonIE_Sodium_Core_Curve25519_Ge_Cached[] $pi */
+		$pi = array();
+
+		//        ge25519_p3_to_cached(&pi[1 - 1], p);   /* p */
+		$pi[0] = self::ge_p3_to_cached($p);
+
+		//        ge25519_p3_dbl(&t2, p);
+		//        ge25519_p1p1_to_p3(&p2, &t2);
+		//        ge25519_p3_to_cached(&pi[2 - 1], &p2); /* 2p = 2*p */
+		$t2 = self::ge_p3_dbl($p);
+		$p2 = self::ge_p1p1_to_p3($t2);
+		$pi[1] = self::ge_p3_to_cached($p2);
+
+		//        ge25519_add_cached(&t3, p, &pi[2 - 1]);
+		//        ge25519_p1p1_to_p3(&p3, &t3);
+		//        ge25519_p3_to_cached(&pi[3 - 1], &p3); /* 3p = 2p+p */
+		$t3 = self::ge_add($p, $pi[1]);
+		$p3 = self::ge_p1p1_to_p3($t3);
+		$pi[2] = self::ge_p3_to_cached($p3);
+
+		//        ge25519_p3_dbl(&t4, &p2);
+		//        ge25519_p1p1_to_p3(&p4, &t4);
+		//        ge25519_p3_to_cached(&pi[4 - 1], &p4); /* 4p = 2*2p */
+		$t4 = self::ge_p3_dbl($p2);
+		$p4 = self::ge_p1p1_to_p3($t4);
+		$pi[3] = self::ge_p3_to_cached($p4);
+
+		//        ge25519_add_cached(&t5, p, &pi[4 - 1]);
+		//        ge25519_p1p1_to_p3(&p5, &t5);
+		//        ge25519_p3_to_cached(&pi[5 - 1], &p5); /* 5p = 4p+p */
+		$t5 = self::ge_add($p, $pi[3]);
+		$p5 = self::ge_p1p1_to_p3($t5);
+		$pi[4] = self::ge_p3_to_cached($p5);
+
+		//        ge25519_p3_dbl(&t6, &p3);
+		//        ge25519_p1p1_to_p3(&p6, &t6);
+		//        ge25519_p3_to_cached(&pi[6 - 1], &p6); /* 6p = 2*3p */
+		$t6 = self::ge_p3_dbl($p3);
+		$p6 = self::ge_p1p1_to_p3($t6);
+		$pi[5] = self::ge_p3_to_cached($p6);
+
+		//        ge25519_add_cached(&t7, p, &pi[6 - 1]);
+		//        ge25519_p1p1_to_p3(&p7, &t7);
+		//        ge25519_p3_to_cached(&pi[7 - 1], &p7); /* 7p = 6p+p */
+		$t7 = self::ge_add($p, $pi[5]);
+		$p7 = self::ge_p1p1_to_p3($t7);
+		$pi[6] = self::ge_p3_to_cached($p7);
+
+		//        ge25519_p3_dbl(&t8, &p4);
+		//        ge25519_p1p1_to_p3(&p8, &t8);
+		//        ge25519_p3_to_cached(&pi[8 - 1], &p8); /* 8p = 2*4p */
+		$t8 = self::ge_p3_dbl($p4);
+		$p8 = self::ge_p1p1_to_p3($t8);
+		$pi[7] = self::ge_p3_to_cached($p8);
+
+
+		//        for (i = 0; i < 32; ++i) {
+		//            e[2 * i + 0] = (a[i] >> 0) & 15;
+		//            e[2 * i + 1] = (a[i] >> 4) & 15;
+		//        }
+		for ($i = 0; $i < 32; ++$i) {
+			$e[($i << 1)    ] =  self::chrToInt($a[$i]) & 15;
+			$e[($i << 1) + 1] = (self::chrToInt($a[$i]) >> 4) & 15;
+		}
+		//        /* each e[i] is between 0 and 15 */
+		//        /* e[63] is between 0 and 7 */
+
+		//        carry = 0;
+		//        for (i = 0; i < 63; ++i) {
+		//            e[i] += carry;
+		//            carry = e[i] + 8;
+		//            carry >>= 4;
+		//            e[i] -= carry * ((signed char) 1 << 4);
+		//        }
+		$carry = 0;
+		for ($i = 0; $i < 63; ++$i) {
+			$e[$i] += $carry;
+			$carry = $e[$i] + 8;
+			$carry >>= 4;
+			$e[$i] -= $carry << 4;
+		}
+		//        e[63] += carry;
+		//        /* each e[i] is between -8 and 8 */
+		$e[63] += $carry;
+
+		//        ge25519_p3_0(h);
+		$h = self::ge_p3_0();
+
+		//        for (i = 63; i != 0; i--) {
+		for ($i = 63; $i != 0; --$i) {
+			// ge25519_cmov8_cached(&t, pi, e[i]);
+			$t = self::ge_cmov8_cached($pi, $e[$i]);
+			// ge25519_add_cached(&r, h, &t);
+			$r = self::ge_add($h, $t);
+
+			// ge25519_p1p1_to_p2(&s, &r);
+			// ge25519_p2_dbl(&r, &s);
+			// ge25519_p1p1_to_p2(&s, &r);
+			// ge25519_p2_dbl(&r, &s);
+			// ge25519_p1p1_to_p2(&s, &r);
+			// ge25519_p2_dbl(&r, &s);
+			// ge25519_p1p1_to_p2(&s, &r);
+			// ge25519_p2_dbl(&r, &s);
+			$s = self::ge_p1p1_to_p2($r);
+			$r = self::ge_p2_dbl($s);
+			$s = self::ge_p1p1_to_p2($r);
+			$r = self::ge_p2_dbl($s);
+			$s = self::ge_p1p1_to_p2($r);
+			$r = self::ge_p2_dbl($s);
+			$s = self::ge_p1p1_to_p2($r);
+			$r = self::ge_p2_dbl($s);
+
+			// ge25519_p1p1_to_p3(h, &r);  /* *16 */
+			$h = self::ge_p1p1_to_p3($r); /* *16 */
+		}
+
+		//        ge25519_cmov8_cached(&t, pi, e[i]);
+		//        ge25519_add_cached(&r, h, &t);
+		//        ge25519_p1p1_to_p3(h, &r);
+		$t = self::ge_cmov8_cached($pi, $e[0]);
+		$r = self::ge_add($h, $t);
+		return self::ge_p1p1_to_p3($r);
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param string $a
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
+	 * @throws SodiumException
+	 * @throws TypeError
+	 * @psalm-suppress MixedAssignment
+	 * @psalm-suppress MixedOperand
+	 */
+	public static function ge_scalarmult_base($a)
+	{
+		/** @var array<int, int> $e */
+		$e = array();
+		$r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1();
+
+		for ($i = 0; $i < 32; ++$i) {
+			$dbl = (int) $i << 1;
+			$e[$dbl] = (int) self::chrToInt($a[$i]) & 15;
+			$e[$dbl + 1] = (int) (self::chrToInt($a[$i]) >> 4) & 15;
+		}
+
+		$carry = 0;
+		for ($i = 0; $i < 63; ++$i) {
+			$e[$i] += $carry;
+			$carry = $e[$i] + 8;
+			$carry >>= 4;
+			$e[$i] -= $carry << 4;
+		}
+		$e[63] += (int) $carry;
+
+		$h = self::ge_p3_0();
+
+		for ($i = 1; $i < 64; $i += 2) {
+			$t = self::ge_select((int) floor($i / 2), (int) $e[$i]);
+			$r = self::ge_madd($r, $h, $t);
+			$h = self::ge_p1p1_to_p3($r);
+		}
+
+		$r = self::ge_p3_dbl($h);
+
+		$s = self::ge_p1p1_to_p2($r);
+		$r = self::ge_p2_dbl($s);
+		$s = self::ge_p1p1_to_p2($r);
+		$r = self::ge_p2_dbl($s);
+		$s = self::ge_p1p1_to_p2($r);
+		$r = self::ge_p2_dbl($s);
+
+		$h = self::ge_p1p1_to_p3($r);
+
+		for ($i = 0; $i < 64; $i += 2) {
+			$t = self::ge_select($i >> 1, (int) $e[$i]);
+			$r = self::ge_madd($r, $h, $t);
+			$h = self::ge_p1p1_to_p3($r);
+		}
+		return $h;
+	}
+
+	/**
+	 * Calculates (ab + c) mod l
+	 * where l = 2^252 + 27742317777372353535851937790883648493
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param string $a
+	 * @param string $b
+	 * @param string $c
+	 * @return string
+	 * @throws TypeError
+	 */
+	public static function sc_muladd($a, $b, $c)
+	{
+		$a0 = 2097151 & self::load_3(self::substr($a, 0, 3));
+		$a1 = 2097151 & (self::load_4(self::substr($a, 2, 4)) >> 5);
+		$a2 = 2097151 & (self::load_3(self::substr($a, 5, 3)) >> 2);
+		$a3 = 2097151 & (self::load_4(self::substr($a, 7, 4)) >> 7);
+		$a4 = 2097151 & (self::load_4(self::substr($a, 10, 4)) >> 4);
+		$a5 = 2097151 & (self::load_3(self::substr($a, 13, 3)) >> 1);
+		$a6 = 2097151 & (self::load_4(self::substr($a, 15, 4)) >> 6);
+		$a7 = 2097151 & (self::load_3(self::substr($a, 18, 3)) >> 3);
+		$a8 = 2097151 & self::load_3(self::substr($a, 21, 3));
+		$a9 = 2097151 & (self::load_4(self::substr($a, 23, 4)) >> 5);
+		$a10 = 2097151 & (self::load_3(self::substr($a, 26, 3)) >> 2);
+		$a11 = (self::load_4(self::substr($a, 28, 4)) >> 7);
+
+		$b0 = 2097151 & self::load_3(self::substr($b, 0, 3));
+		$b1 = 2097151 & (self::load_4(self::substr($b, 2, 4)) >> 5);
+		$b2 = 2097151 & (self::load_3(self::substr($b, 5, 3)) >> 2);
+		$b3 = 2097151 & (self::load_4(self::substr($b, 7, 4)) >> 7);
+		$b4 = 2097151 & (self::load_4(self::substr($b, 10, 4)) >> 4);
+		$b5 = 2097151 & (self::load_3(self::substr($b, 13, 3)) >> 1);
+		$b6 = 2097151 & (self::load_4(self::substr($b, 15, 4)) >> 6);
+		$b7 = 2097151 & (self::load_3(self::substr($b, 18, 3)) >> 3);
+		$b8 = 2097151 & self::load_3(self::substr($b, 21, 3));
+		$b9 = 2097151 & (self::load_4(self::substr($b, 23, 4)) >> 5);
+		$b10 = 2097151 & (self::load_3(self::substr($b, 26, 3)) >> 2);
+		$b11 = (self::load_4(self::substr($b, 28, 4)) >> 7);
+
+		$c0 = 2097151 & self::load_3(self::substr($c, 0, 3));
+		$c1 = 2097151 & (self::load_4(self::substr($c, 2, 4)) >> 5);
+		$c2 = 2097151 & (self::load_3(self::substr($c, 5, 3)) >> 2);
+		$c3 = 2097151 & (self::load_4(self::substr($c, 7, 4)) >> 7);
+		$c4 = 2097151 & (self::load_4(self::substr($c, 10, 4)) >> 4);
+		$c5 = 2097151 & (self::load_3(self::substr($c, 13, 3)) >> 1);
+		$c6 = 2097151 & (self::load_4(self::substr($c, 15, 4)) >> 6);
+		$c7 = 2097151 & (self::load_3(self::substr($c, 18, 3)) >> 3);
+		$c8 = 2097151 & self::load_3(self::substr($c, 21, 3));
+		$c9 = 2097151 & (self::load_4(self::substr($c, 23, 4)) >> 5);
+		$c10 = 2097151 & (self::load_3(self::substr($c, 26, 3)) >> 2);
+		$c11 = (self::load_4(self::substr($c, 28, 4)) >> 7);
+
+		/* Can't really avoid the pyramid here: */
+		$s0 = $c0 + self::mul($a0, $b0, 24);
+		$s1 = $c1 + self::mul($a0, $b1, 24) + self::mul($a1, $b0, 24);
+		$s2 = $c2 + self::mul($a0, $b2, 24) + self::mul($a1, $b1, 24) + self::mul($a2, $b0, 24);
+		$s3 = $c3 + self::mul($a0, $b3, 24) + self::mul($a1, $b2, 24) + self::mul($a2, $b1, 24) + self::mul($a3, $b0, 24);
+		$s4 = $c4 + self::mul($a0, $b4, 24) + self::mul($a1, $b3, 24) + self::mul($a2, $b2, 24) + self::mul($a3, $b1, 24) +
+			   self::mul($a4, $b0, 24);
+		$s5 = $c5 + self::mul($a0, $b5, 24) + self::mul($a1, $b4, 24) + self::mul($a2, $b3, 24) + self::mul($a3, $b2, 24) +
+			   self::mul($a4, $b1, 24) + self::mul($a5, $b0, 24);
+		$s6 = $c6 + self::mul($a0, $b6, 24) + self::mul($a1, $b5, 24) + self::mul($a2, $b4, 24) + self::mul($a3, $b3, 24) +
+			   self::mul($a4, $b2, 24) + self::mul($a5, $b1, 24) + self::mul($a6, $b0, 24);
+		$s7 = $c7 + self::mul($a0, $b7, 24) + self::mul($a1, $b6, 24) + self::mul($a2, $b5, 24) + self::mul($a3, $b4, 24) +
+			   self::mul($a4, $b3, 24) + self::mul($a5, $b2, 24) + self::mul($a6, $b1, 24) + self::mul($a7, $b0, 24);
+		$s8 = $c8 + self::mul($a0, $b8, 24) + self::mul($a1, $b7, 24) + self::mul($a2, $b6, 24) + self::mul($a3, $b5, 24) +
+			   self::mul($a4, $b4, 24) + self::mul($a5, $b3, 24) + self::mul($a6, $b2, 24) + self::mul($a7, $b1, 24) +
+			   self::mul($a8, $b0, 24);
+		$s9 = $c9 + self::mul($a0, $b9, 24) + self::mul($a1, $b8, 24) + self::mul($a2, $b7, 24) + self::mul($a3, $b6, 24) +
+			   self::mul($a4, $b5, 24) + self::mul($a5, $b4, 24) + self::mul($a6, $b3, 24) + self::mul($a7, $b2, 24) +
+			   self::mul($a8, $b1, 24) + self::mul($a9, $b0, 24);
+		$s10 = $c10 + self::mul($a0, $b10, 24) + self::mul($a1, $b9, 24) + self::mul($a2, $b8, 24) + self::mul($a3, $b7, 24) +
+			   self::mul($a4, $b6, 24) + self::mul($a5, $b5, 24) + self::mul($a6, $b4, 24) + self::mul($a7, $b3, 24) +
+			   self::mul($a8, $b2, 24) + self::mul($a9, $b1, 24) + self::mul($a10, $b0, 24);
+		$s11 = $c11 + self::mul($a0, $b11, 24) + self::mul($a1, $b10, 24) + self::mul($a2, $b9, 24) + self::mul($a3, $b8, 24) +
+			   self::mul($a4, $b7, 24) + self::mul($a5, $b6, 24) + self::mul($a6, $b5, 24) + self::mul($a7, $b4, 24) +
+			   self::mul($a8, $b3, 24) + self::mul($a9, $b2, 24) + self::mul($a10, $b1, 24) + self::mul($a11, $b0, 24);
+		$s12 = self::mul($a1, $b11, 24) + self::mul($a2, $b10, 24) + self::mul($a3, $b9, 24) + self::mul($a4, $b8, 24) +
+			   self::mul($a5, $b7, 24) + self::mul($a6, $b6, 24) + self::mul($a7, $b5, 24) + self::mul($a8, $b4, 24) +
+			   self::mul($a9, $b3, 24) + self::mul($a10, $b2, 24) + self::mul($a11, $b1, 24);
+		$s13 = self::mul($a2, $b11, 24) + self::mul($a3, $b10, 24) + self::mul($a4, $b9, 24) + self::mul($a5, $b8, 24) +
+			   self::mul($a6, $b7, 24) + self::mul($a7, $b6, 24) + self::mul($a8, $b5, 24) + self::mul($a9, $b4, 24) +
+			   self::mul($a10, $b3, 24) + self::mul($a11, $b2, 24);
+		$s14 = self::mul($a3, $b11, 24) + self::mul($a4, $b10, 24) + self::mul($a5, $b9, 24) + self::mul($a6, $b8, 24) +
+			   self::mul($a7, $b7, 24) + self::mul($a8, $b6, 24) + self::mul($a9, $b5, 24) + self::mul($a10, $b4, 24) +
+			   self::mul($a11, $b3, 24);
+		$s15 = self::mul($a4, $b11, 24) + self::mul($a5, $b10, 24) + self::mul($a6, $b9, 24) + self::mul($a7, $b8, 24) +
+			   self::mul($a8, $b7, 24) + self::mul($a9, $b6, 24) + self::mul($a10, $b5, 24) + self::mul($a11, $b4, 24);
+		$s16 = self::mul($a5, $b11, 24) + self::mul($a6, $b10, 24) + self::mul($a7, $b9, 24) + self::mul($a8, $b8, 24) +
+			   self::mul($a9, $b7, 24) + self::mul($a10, $b6, 24) + self::mul($a11, $b5, 24);
+		$s17 = self::mul($a6, $b11, 24) + self::mul($a7, $b10, 24) + self::mul($a8, $b9, 24) + self::mul($a9, $b8, 24) +
+			   self::mul($a10, $b7, 24) + self::mul($a11, $b6, 24);
+		$s18 = self::mul($a7, $b11, 24) + self::mul($a8, $b10, 24) + self::mul($a9, $b9, 24) + self::mul($a10, $b8, 24) +
+			   self::mul($a11, $b7, 24);
+		$s19 = self::mul($a8, $b11, 24) + self::mul($a9, $b10, 24) + self::mul($a10, $b9, 24) + self::mul($a11, $b8, 24);
+		$s20 = self::mul($a9, $b11, 24) + self::mul($a10, $b10, 24) + self::mul($a11, $b9, 24);
+		$s21 = self::mul($a10, $b11, 24) + self::mul($a11, $b10, 24);
+		$s22 = self::mul($a11, $b11, 24);
+		$s23 = 0;
+
+		$carry0 = ($s0 + (1 << 20)) >> 21;
+		$s1 += $carry0;
+		$s0 -= $carry0 << 21;
+		$carry2 = ($s2 + (1 << 20)) >> 21;
+		$s3 += $carry2;
+		$s2 -= $carry2 << 21;
+		$carry4 = ($s4 + (1 << 20)) >> 21;
+		$s5 += $carry4;
+		$s4 -= $carry4 << 21;
+		$carry6 = ($s6 + (1 << 20)) >> 21;
+		$s7 += $carry6;
+		$s6 -= $carry6 << 21;
+		$carry8 = ($s8 + (1 << 20)) >> 21;
+		$s9 += $carry8;
+		$s8 -= $carry8 << 21;
+		$carry10 = ($s10 + (1 << 20)) >> 21;
+		$s11 += $carry10;
+		$s10 -= $carry10 << 21;
+		$carry12 = ($s12 + (1 << 20)) >> 21;
+		$s13 += $carry12;
+		$s12 -= $carry12 << 21;
+		$carry14 = ($s14 + (1 << 20)) >> 21;
+		$s15 += $carry14;
+		$s14 -= $carry14 << 21;
+		$carry16 = ($s16 + (1 << 20)) >> 21;
+		$s17 += $carry16;
+		$s16 -= $carry16 << 21;
+		$carry18 = ($s18 + (1 << 20)) >> 21;
+		$s19 += $carry18;
+		$s18 -= $carry18 << 21;
+		$carry20 = ($s20 + (1 << 20)) >> 21;
+		$s21 += $carry20;
+		$s20 -= $carry20 << 21;
+		$carry22 = ($s22 + (1 << 20)) >> 21;
+		$s23 += $carry22;
+		$s22 -= $carry22 << 21;
+
+		$carry1 = ($s1 + (1 << 20)) >> 21;
+		$s2 += $carry1;
+		$s1 -= $carry1 << 21;
+		$carry3 = ($s3 + (1 << 20)) >> 21;
+		$s4 += $carry3;
+		$s3 -= $carry3 << 21;
+		$carry5 = ($s5 + (1 << 20)) >> 21;
+		$s6 += $carry5;
+		$s5 -= $carry5 << 21;
+		$carry7 = ($s7 + (1 << 20)) >> 21;
+		$s8 += $carry7;
+		$s7 -= $carry7 << 21;
+		$carry9 = ($s9 + (1 << 20)) >> 21;
+		$s10 += $carry9;
+		$s9 -= $carry9 << 21;
+		$carry11 = ($s11 + (1 << 20)) >> 21;
+		$s12 += $carry11;
+		$s11 -= $carry11 << 21;
+		$carry13 = ($s13 + (1 << 20)) >> 21;
+		$s14 += $carry13;
+		$s13 -= $carry13 << 21;
+		$carry15 = ($s15 + (1 << 20)) >> 21;
+		$s16 += $carry15;
+		$s15 -= $carry15 << 21;
+		$carry17 = ($s17 + (1 << 20)) >> 21;
+		$s18 += $carry17;
+		$s17 -= $carry17 << 21;
+		$carry19 = ($s19 + (1 << 20)) >> 21;
+		$s20 += $carry19;
+		$s19 -= $carry19 << 21;
+		$carry21 = ($s21 + (1 << 20)) >> 21;
+		$s22 += $carry21;
+		$s21 -= $carry21 << 21;
+
+		$s11 += self::mul($s23, 666643, 20);
+		$s12 += self::mul($s23, 470296, 19);
+		$s13 += self::mul($s23, 654183, 20);
+		$s14 -= self::mul($s23, 997805, 20);
+		$s15 += self::mul($s23, 136657, 18);
+		$s16 -= self::mul($s23, 683901, 20);
+
+		$s10 += self::mul($s22, 666643, 20);
+		$s11 += self::mul($s22, 470296, 19);
+		$s12 += self::mul($s22, 654183, 20);
+		$s13 -= self::mul($s22, 997805, 20);
+		$s14 += self::mul($s22, 136657, 18);
+		$s15 -= self::mul($s22, 683901, 20);
+
+		$s9  += self::mul($s21,  666643, 20);
+		$s10 += self::mul($s21,  470296, 19);
+		$s11 += self::mul($s21,  654183, 20);
+		$s12 -= self::mul($s21,  997805, 20);
+		$s13 += self::mul($s21,  136657, 18);
+		$s14 -= self::mul($s21,  683901, 20);
+
+		$s8  += self::mul($s20,  666643, 20);
+		$s9  += self::mul($s20,  470296, 19);
+		$s10 += self::mul($s20,  654183, 20);
+		$s11 -= self::mul($s20,  997805, 20);
+		$s12 += self::mul($s20,  136657, 18);
+		$s13 -= self::mul($s20,  683901, 20);
+
+		$s7  += self::mul($s19,  666643, 20);
+		$s8  += self::mul($s19,  470296, 19);
+		$s9  += self::mul($s19,  654183, 20);
+		$s10 -= self::mul($s19,  997805, 20);
+		$s11 += self::mul($s19,  136657, 18);
+		$s12 -= self::mul($s19,  683901, 20);
+
+		$s6  += self::mul($s18,  666643, 20);
+		$s7  += self::mul($s18,  470296, 19);
+		$s8  += self::mul($s18,  654183, 20);
+		$s9  -= self::mul($s18,  997805, 20);
+		$s10 += self::mul($s18,  136657, 18);
+		$s11 -= self::mul($s18,  683901, 20);
+
+		$carry6 = ($s6 + (1 << 20)) >> 21;
+		$s7 += $carry6;
+		$s6 -= $carry6 << 21;
+		$carry8 = ($s8 + (1 << 20)) >> 21;
+		$s9 += $carry8;
+		$s8 -= $carry8 << 21;
+		$carry10 = ($s10 + (1 << 20)) >> 21;
+		$s11 += $carry10;
+		$s10 -= $carry10 << 21;
+		$carry12 = ($s12 + (1 << 20)) >> 21;
+		$s13 += $carry12;
+		$s12 -= $carry12 << 21;
+		$carry14 = ($s14 + (1 << 20)) >> 21;
+		$s15 += $carry14;
+		$s14 -= $carry14 << 21;
+		$carry16 = ($s16 + (1 << 20)) >> 21;
+		$s17 += $carry16;
+		$s16 -= $carry16 << 21;
+
+		$carry7 = ($s7 + (1 << 20)) >> 21;
+		$s8 += $carry7;
+		$s7 -= $carry7 << 21;
+		$carry9 = ($s9 + (1 << 20)) >> 21;
+		$s10 += $carry9;
+		$s9 -= $carry9 << 21;
+		$carry11 = ($s11 + (1 << 20)) >> 21;
+		$s12 += $carry11;
+		$s11 -= $carry11 << 21;
+		$carry13 = ($s13 + (1 << 20)) >> 21;
+		$s14 += $carry13;
+		$s13 -= $carry13 << 21;
+		$carry15 = ($s15 + (1 << 20)) >> 21;
+		$s16 += $carry15;
+		$s15 -= $carry15 << 21;
+
+		$s5  += self::mul($s17,  666643, 20);
+		$s6  += self::mul($s17,  470296, 19);
+		$s7  += self::mul($s17,  654183, 20);
+		$s8  -= self::mul($s17,  997805, 20);
+		$s9  += self::mul($s17,  136657, 18);
+		$s10 -= self::mul($s17,  683901, 20);
+
+		$s4 += self::mul($s16,  666643, 20);
+		$s5 += self::mul($s16,  470296, 19);
+		$s6 += self::mul($s16,  654183, 20);
+		$s7 -= self::mul($s16,  997805, 20);
+		$s8 += self::mul($s16,  136657, 18);
+		$s9 -= self::mul($s16,  683901, 20);
+
+		$s3 += self::mul($s15,  666643, 20);
+		$s4 += self::mul($s15,  470296, 19);
+		$s5 += self::mul($s15,  654183, 20);
+		$s6 -= self::mul($s15,  997805, 20);
+		$s7 += self::mul($s15,  136657, 18);
+		$s8 -= self::mul($s15,  683901, 20);
+
+		$s2 += self::mul($s14,  666643, 20);
+		$s3 += self::mul($s14,  470296, 19);
+		$s4 += self::mul($s14,  654183, 20);
+		$s5 -= self::mul($s14,  997805, 20);
+		$s6 += self::mul($s14,  136657, 18);
+		$s7 -= self::mul($s14,  683901, 20);
+
+		$s1 += self::mul($s13,  666643, 20);
+		$s2 += self::mul($s13,  470296, 19);
+		$s3 += self::mul($s13,  654183, 20);
+		$s4 -= self::mul($s13,  997805, 20);
+		$s5 += self::mul($s13,  136657, 18);
+		$s6 -= self::mul($s13,  683901, 20);
+
+		$s0 += self::mul($s12,  666643, 20);
+		$s1 += self::mul($s12,  470296, 19);
+		$s2 += self::mul($s12,  654183, 20);
+		$s3 -= self::mul($s12,  997805, 20);
+		$s4 += self::mul($s12,  136657, 18);
+		$s5 -= self::mul($s12,  683901, 20);
+		$s12 = 0;
+
+		$carry0 = ($s0 + (1 << 20)) >> 21;
+		$s1 += $carry0;
+		$s0 -= $carry0 << 21;
+		$carry2 = ($s2 + (1 << 20)) >> 21;
+		$s3 += $carry2;
+		$s2 -= $carry2 << 21;
+		$carry4 = ($s4 + (1 << 20)) >> 21;
+		$s5 += $carry4;
+		$s4 -= $carry4 << 21;
+		$carry6 = ($s6 + (1 << 20)) >> 21;
+		$s7 += $carry6;
+		$s6 -= $carry6 << 21;
+		$carry8 = ($s8 + (1 << 20)) >> 21;
+		$s9 += $carry8;
+		$s8 -= $carry8 << 21;
+		$carry10 = ($s10 + (1 << 20)) >> 21;
+		$s11 += $carry10;
+		$s10 -= $carry10 << 21;
+
+		$carry1 = ($s1 + (1 << 20)) >> 21;
+		$s2 += $carry1;
+		$s1 -= $carry1 << 21;
+		$carry3 = ($s3 + (1 << 20)) >> 21;
+		$s4 += $carry3;
+		$s3 -= $carry3 << 21;
+		$carry5 = ($s5 + (1 << 20)) >> 21;
+		$s6 += $carry5;
+		$s5 -= $carry5 << 21;
+		$carry7 = ($s7 + (1 << 20)) >> 21;
+		$s8 += $carry7;
+		$s7 -= $carry7 << 21;
+		$carry9 = ($s9 + (1 << 20)) >> 21;
+		$s10 += $carry9;
+		$s9 -= $carry9 << 21;
+		$carry11 = ($s11 + (1 << 20)) >> 21;
+		$s12 += $carry11;
+		$s11 -= $carry11 << 21;
+
+		$s0 += self::mul($s12,  666643, 20);
+		$s1 += self::mul($s12,  470296, 19);
+		$s2 += self::mul($s12,  654183, 20);
+		$s3 -= self::mul($s12,  997805, 20);
+		$s4 += self::mul($s12,  136657, 18);
+		$s5 -= self::mul($s12,  683901, 20);
+		$s12 = 0;
+
+		$carry0 = $s0 >> 21;
+		$s1 += $carry0;
+		$s0 -= $carry0 << 21;
+		$carry1 = $s1 >> 21;
+		$s2 += $carry1;
+		$s1 -= $carry1 << 21;
+		$carry2 = $s2 >> 21;
+		$s3 += $carry2;
+		$s2 -= $carry2 << 21;
+		$carry3 = $s3 >> 21;
+		$s4 += $carry3;
+		$s3 -= $carry3 << 21;
+		$carry4 = $s4 >> 21;
+		$s5 += $carry4;
+		$s4 -= $carry4 << 21;
+		$carry5 = $s5 >> 21;
+		$s6 += $carry5;
+		$s5 -= $carry5 << 21;
+		$carry6 = $s6 >> 21;
+		$s7 += $carry6;
+		$s6 -= $carry6 << 21;
+		$carry7 = $s7 >> 21;
+		$s8 += $carry7;
+		$s7 -= $carry7 << 21;
+		$carry8 = $s8 >> 21;
+		$s9 += $carry8;
+		$s8 -= $carry8 << 21;
+		$carry9 = $s9 >> 21;
+		$s10 += $carry9;
+		$s9 -= $carry9 << 21;
+		$carry10 = $s10 >> 21;
+		$s11 += $carry10;
+		$s10 -= $carry10 << 21;
+		$carry11 = $s11 >> 21;
+		$s12 += $carry11;
+		$s11 -= $carry11 << 21;
+
+		$s0 += self::mul($s12,  666643, 20);
+		$s1 += self::mul($s12,  470296, 19);
+		$s2 += self::mul($s12,  654183, 20);
+		$s3 -= self::mul($s12,  997805, 20);
+		$s4 += self::mul($s12,  136657, 18);
+		$s5 -= self::mul($s12,  683901, 20);
+
+		$carry0 = $s0 >> 21;
+		$s1 += $carry0;
+		$s0 -= $carry0 << 21;
+		$carry1 = $s1 >> 21;
+		$s2 += $carry1;
+		$s1 -= $carry1 << 21;
+		$carry2 = $s2 >> 21;
+		$s3 += $carry2;
+		$s2 -= $carry2 << 21;
+		$carry3 = $s3 >> 21;
+		$s4 += $carry3;
+		$s3 -= $carry3 << 21;
+		$carry4 = $s4 >> 21;
+		$s5 += $carry4;
+		$s4 -= $carry4 << 21;
+		$carry5 = $s5 >> 21;
+		$s6 += $carry5;
+		$s5 -= $carry5 << 21;
+		$carry6 = $s6 >> 21;
+		$s7 += $carry6;
+		$s6 -= $carry6 << 21;
+		$carry7 = $s7 >> 21;
+		$s8 += $carry7;
+		$s7 -= $carry7 << 21;
+		$carry8 = $s8 >> 21;
+		$s9 += $carry8;
+		$s8 -= $carry8 << 21;
+		$carry9 = $s9 >> 21;
+		$s10 += $carry9;
+		$s9 -= $carry9 << 21;
+		$carry10 = $s10 >> 21;
+		$s11 += $carry10;
+		$s10 -= $carry10 << 21;
+
+		/**
+		 * @var array<int, int>
+		 */
+		$arr = array(
+			(int) (0xff & ($s0 >> 0)),
+			(int) (0xff & ($s0 >> 8)),
+			(int) (0xff & (($s0 >> 16) | $s1 << 5)),
+			(int) (0xff & ($s1 >> 3)),
+			(int) (0xff & ($s1 >> 11)),
+			(int) (0xff & (($s1 >> 19) | $s2 << 2)),
+			(int) (0xff & ($s2 >> 6)),
+			(int) (0xff & (($s2 >> 14) | $s3 << 7)),
+			(int) (0xff & ($s3 >> 1)),
+			(int) (0xff & ($s3 >> 9)),
+			(int) (0xff & (($s3 >> 17) | $s4 << 4)),
+			(int) (0xff & ($s4 >> 4)),
+			(int) (0xff & ($s4 >> 12)),
+			(int) (0xff & (($s4 >> 20) | $s5 << 1)),
+			(int) (0xff & ($s5 >> 7)),
+			(int) (0xff & (($s5 >> 15) | $s6 << 6)),
+			(int) (0xff & ($s6 >> 2)),
+			(int) (0xff & ($s6 >> 10)),
+			(int) (0xff & (($s6 >> 18) | $s7 << 3)),
+			(int) (0xff & ($s7 >> 5)),
+			(int) (0xff & ($s7 >> 13)),
+			(int) (0xff & ($s8 >> 0)),
+			(int) (0xff & ($s8 >> 8)),
+			(int) (0xff & (($s8 >> 16) | $s9 << 5)),
+			(int) (0xff & ($s9 >> 3)),
+			(int) (0xff & ($s9 >> 11)),
+			(int) (0xff & (($s9 >> 19) | $s10 << 2)),
+			(int) (0xff & ($s10 >> 6)),
+			(int) (0xff & (($s10 >> 14) | $s11 << 7)),
+			(int) (0xff & ($s11 >> 1)),
+			(int) (0xff & ($s11 >> 9)),
+			0xff & ($s11 >> 17)
+		);
+		return self::intArrayToString($arr);
+	}
+
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param string $s
+	 * @return string
+	 * @throws TypeError
+	 */
+	public static function sc_reduce($s)
+	{
+		$s0 = 2097151 & self::load_3(self::substr($s, 0, 3));
+		$s1 = 2097151 & (self::load_4(self::substr($s, 2, 4)) >> 5);
+		$s2 = 2097151 & (self::load_3(self::substr($s, 5, 3)) >> 2);
+		$s3 = 2097151 & (self::load_4(self::substr($s, 7, 4)) >> 7);
+		$s4 = 2097151 & (self::load_4(self::substr($s, 10, 4)) >> 4);
+		$s5 = 2097151 & (self::load_3(self::substr($s, 13, 3)) >> 1);
+		$s6 = 2097151 & (self::load_4(self::substr($s, 15, 4)) >> 6);
+		$s7 = 2097151 & (self::load_3(self::substr($s, 18, 4)) >> 3);
+		$s8 = 2097151 & self::load_3(self::substr($s, 21, 3));
+		$s9 = 2097151 & (self::load_4(self::substr($s, 23, 4)) >> 5);
+		$s10 = 2097151 & (self::load_3(self::substr($s, 26, 3)) >> 2);
+		$s11 = 2097151 & (self::load_4(self::substr($s, 28, 4)) >> 7);
+		$s12 = 2097151 & (self::load_4(self::substr($s, 31, 4)) >> 4);
+		$s13 = 2097151 & (self::load_3(self::substr($s, 34, 3)) >> 1);
+		$s14 = 2097151 & (self::load_4(self::substr($s, 36, 4)) >> 6);
+		$s15 = 2097151 & (self::load_3(self::substr($s, 39, 4)) >> 3);
+		$s16 = 2097151 & self::load_3(self::substr($s, 42, 3));
+		$s17 = 2097151 & (self::load_4(self::substr($s, 44, 4)) >> 5);
+		$s18 = 2097151 & (self::load_3(self::substr($s, 47, 3)) >> 2);
+		$s19 = 2097151 & (self::load_4(self::substr($s, 49, 4)) >> 7);
+		$s20 = 2097151 & (self::load_4(self::substr($s, 52, 4)) >> 4);
+		$s21 = 2097151 & (self::load_3(self::substr($s, 55, 3)) >> 1);
+		$s22 = 2097151 & (self::load_4(self::substr($s, 57, 4)) >> 6);
+		$s23 = (self::load_4(self::substr($s, 60, 4)) >> 3);
+
+		$s11 += self::mul($s23,  666643, 20);
+		$s12 += self::mul($s23,  470296, 19);
+		$s13 += self::mul($s23,  654183, 20);
+		$s14 -= self::mul($s23,  997805, 20);
+		$s15 += self::mul($s23,  136657, 18);
+		$s16 -= self::mul($s23,  683901, 20);
+
+		$s10 += self::mul($s22,  666643, 20);
+		$s11 += self::mul($s22,  470296, 19);
+		$s12 += self::mul($s22,  654183, 20);
+		$s13 -= self::mul($s22,  997805, 20);
+		$s14 += self::mul($s22,  136657, 18);
+		$s15 -= self::mul($s22,  683901, 20);
+
+		$s9  += self::mul($s21,  666643, 20);
+		$s10 += self::mul($s21,  470296, 19);
+		$s11 += self::mul($s21,  654183, 20);
+		$s12 -= self::mul($s21,  997805, 20);
+		$s13 += self::mul($s21,  136657, 18);
+		$s14 -= self::mul($s21,  683901, 20);
+
+		$s8  += self::mul($s20,  666643, 20);
+		$s9  += self::mul($s20,  470296, 19);
+		$s10 += self::mul($s20,  654183, 20);
+		$s11 -= self::mul($s20,  997805, 20);
+		$s12 += self::mul($s20,  136657, 18);
+		$s13 -= self::mul($s20,  683901, 20);
+
+		$s7  += self::mul($s19,  666643, 20);
+		$s8  += self::mul($s19,  470296, 19);
+		$s9  += self::mul($s19,  654183, 20);
+		$s10 -= self::mul($s19,  997805, 20);
+		$s11 += self::mul($s19,  136657, 18);
+		$s12 -= self::mul($s19,  683901, 20);
+
+		$s6  += self::mul($s18,  666643, 20);
+		$s7  += self::mul($s18,  470296, 19);
+		$s8  += self::mul($s18,  654183, 20);
+		$s9  -= self::mul($s18,  997805, 20);
+		$s10 += self::mul($s18,  136657, 18);
+		$s11 -= self::mul($s18,  683901, 20);
+
+		$carry6 = ($s6 + (1 << 20)) >> 21;
+		$s7 += $carry6;
+		$s6 -= $carry6 << 21;
+		$carry8 = ($s8 + (1 << 20)) >> 21;
+		$s9 += $carry8;
+		$s8 -= $carry8 << 21;
+		$carry10 = ($s10 + (1 << 20)) >> 21;
+		$s11 += $carry10;
+		$s10 -= $carry10 << 21;
+		$carry12 = ($s12 + (1 << 20)) >> 21;
+		$s13 += $carry12;
+		$s12 -= $carry12 << 21;
+		$carry14 = ($s14 + (1 << 20)) >> 21;
+		$s15 += $carry14;
+		$s14 -= $carry14 << 21;
+		$carry16 = ($s16 + (1 << 20)) >> 21;
+		$s17 += $carry16;
+		$s16 -= $carry16 << 21;
+
+		$carry7 = ($s7 + (1 << 20)) >> 21;
+		$s8 += $carry7;
+		$s7 -= $carry7 << 21;
+		$carry9 = ($s9 + (1 << 20)) >> 21;
+		$s10 += $carry9;
+		$s9 -= $carry9 << 21;
+		$carry11 = ($s11 + (1 << 20)) >> 21;
+		$s12 += $carry11;
+		$s11 -= $carry11 << 21;
+		$carry13 = ($s13 + (1 << 20)) >> 21;
+		$s14 += $carry13;
+		$s13 -= $carry13 << 21;
+		$carry15 = ($s15 + (1 << 20)) >> 21;
+		$s16 += $carry15;
+		$s15 -= $carry15 << 21;
+
+		$s5  += self::mul($s17,  666643, 20);
+		$s6  += self::mul($s17,  470296, 19);
+		$s7  += self::mul($s17,  654183, 20);
+		$s8  -= self::mul($s17,  997805, 20);
+		$s9  += self::mul($s17,  136657, 18);
+		$s10 -= self::mul($s17,  683901, 20);
+
+		$s4 += self::mul($s16,  666643, 20);
+		$s5 += self::mul($s16,  470296, 19);
+		$s6 += self::mul($s16,  654183, 20);
+		$s7 -= self::mul($s16,  997805, 20);
+		$s8 += self::mul($s16,  136657, 18);
+		$s9 -= self::mul($s16,  683901, 20);
+
+		$s3 += self::mul($s15,  666643, 20);
+		$s4 += self::mul($s15,  470296, 19);
+		$s5 += self::mul($s15,  654183, 20);
+		$s6 -= self::mul($s15,  997805, 20);
+		$s7 += self::mul($s15,  136657, 18);
+		$s8 -= self::mul($s15,  683901, 20);
+
+		$s2 += self::mul($s14,  666643, 20);
+		$s3 += self::mul($s14,  470296, 19);
+		$s4 += self::mul($s14,  654183, 20);
+		$s5 -= self::mul($s14,  997805, 20);
+		$s6 += self::mul($s14,  136657, 18);
+		$s7 -= self::mul($s14,  683901, 20);
+
+		$s1 += self::mul($s13,  666643, 20);
+		$s2 += self::mul($s13,  470296, 19);
+		$s3 += self::mul($s13,  654183, 20);
+		$s4 -= self::mul($s13,  997805, 20);
+		$s5 += self::mul($s13,  136657, 18);
+		$s6 -= self::mul($s13,  683901, 20);
+
+		$s0 += self::mul($s12,  666643, 20);
+		$s1 += self::mul($s12,  470296, 19);
+		$s2 += self::mul($s12,  654183, 20);
+		$s3 -= self::mul($s12,  997805, 20);
+		$s4 += self::mul($s12,  136657, 18);
+		$s5 -= self::mul($s12,  683901, 20);
+		$s12 = 0;
+
+		$carry0 = ($s0 + (1 << 20)) >> 21;
+		$s1 += $carry0;
+		$s0 -= $carry0 << 21;
+		$carry2 = ($s2 + (1 << 20)) >> 21;
+		$s3 += $carry2;
+		$s2 -= $carry2 << 21;
+		$carry4 = ($s4 + (1 << 20)) >> 21;
+		$s5 += $carry4;
+		$s4 -= $carry4 << 21;
+		$carry6 = ($s6 + (1 << 20)) >> 21;
+		$s7 += $carry6;
+		$s6 -= $carry6 << 21;
+		$carry8 = ($s8 + (1 << 20)) >> 21;
+		$s9 += $carry8;
+		$s8 -= $carry8 << 21;
+		$carry10 = ($s10 + (1 << 20)) >> 21;
+		$s11 += $carry10;
+		$s10 -= $carry10 << 21;
+
+		$carry1 = ($s1 + (1 << 20)) >> 21;
+		$s2 += $carry1;
+		$s1 -= $carry1 << 21;
+		$carry3 = ($s3 + (1 << 20)) >> 21;
+		$s4 += $carry3;
+		$s3 -= $carry3 << 21;
+		$carry5 = ($s5 + (1 << 20)) >> 21;
+		$s6 += $carry5;
+		$s5 -= $carry5 << 21;
+		$carry7 = ($s7 + (1 << 20)) >> 21;
+		$s8 += $carry7;
+		$s7 -= $carry7 << 21;
+		$carry9 = ($s9 + (1 << 20)) >> 21;
+		$s10 += $carry9;
+		$s9 -= $carry9 << 21;
+		$carry11 = ($s11 + (1 << 20)) >> 21;
+		$s12 += $carry11;
+		$s11 -= $carry11 << 21;
+
+		$s0 += self::mul($s12,  666643, 20);
+		$s1 += self::mul($s12,  470296, 19);
+		$s2 += self::mul($s12,  654183, 20);
+		$s3 -= self::mul($s12,  997805, 20);
+		$s4 += self::mul($s12,  136657, 18);
+		$s5 -= self::mul($s12,  683901, 20);
+		$s12 = 0;
+
+		$carry0 = $s0 >> 21;
+		$s1 += $carry0;
+		$s0 -= $carry0 << 21;
+		$carry1 = $s1 >> 21;
+		$s2 += $carry1;
+		$s1 -= $carry1 << 21;
+		$carry2 = $s2 >> 21;
+		$s3 += $carry2;
+		$s2 -= $carry2 << 21;
+		$carry3 = $s3 >> 21;
+		$s4 += $carry3;
+		$s3 -= $carry3 << 21;
+		$carry4 = $s4 >> 21;
+		$s5 += $carry4;
+		$s4 -= $carry4 << 21;
+		$carry5 = $s5 >> 21;
+		$s6 += $carry5;
+		$s5 -= $carry5 << 21;
+		$carry6 = $s6 >> 21;
+		$s7 += $carry6;
+		$s6 -= $carry6 << 21;
+		$carry7 = $s7 >> 21;
+		$s8 += $carry7;
+		$s7 -= $carry7 << 21;
+		$carry8 = $s8 >> 21;
+		$s9 += $carry8;
+		$s8 -= $carry8 << 21;
+		$carry9 = $s9 >> 21;
+		$s10 += $carry9;
+		$s9 -= $carry9 << 21;
+		$carry10 = $s10 >> 21;
+		$s11 += $carry10;
+		$s10 -= $carry10 << 21;
+		$carry11 = $s11 >> 21;
+		$s12 += $carry11;
+		$s11 -= $carry11 << 21;
+
+		$s0 += self::mul($s12,  666643, 20);
+		$s1 += self::mul($s12,  470296, 19);
+		$s2 += self::mul($s12,  654183, 20);
+		$s3 -= self::mul($s12,  997805, 20);
+		$s4 += self::mul($s12,  136657, 18);
+		$s5 -= self::mul($s12,  683901, 20);
+
+		$carry0 = $s0 >> 21;
+		$s1 += $carry0;
+		$s0 -= $carry0 << 21;
+		$carry1 = $s1 >> 21;
+		$s2 += $carry1;
+		$s1 -= $carry1 << 21;
+		$carry2 = $s2 >> 21;
+		$s3 += $carry2;
+		$s2 -= $carry2 << 21;
+		$carry3 = $s3 >> 21;
+		$s4 += $carry3;
+		$s3 -= $carry3 << 21;
+		$carry4 = $s4 >> 21;
+		$s5 += $carry4;
+		$s4 -= $carry4 << 21;
+		$carry5 = $s5 >> 21;
+		$s6 += $carry5;
+		$s5 -= $carry5 << 21;
+		$carry6 = $s6 >> 21;
+		$s7 += $carry6;
+		$s6 -= $carry6 << 21;
+		$carry7 = $s7 >> 21;
+		$s8 += $carry7;
+		$s7 -= $carry7 << 21;
+		$carry8 = $s8 >> 21;
+		$s9 += $carry8;
+		$s8 -= $carry8 << 21;
+		$carry9 = $s9 >> 21;
+		$s10 += $carry9;
+		$s9 -= $carry9 << 21;
+		$carry10 = $s10 >> 21;
+		$s11 += $carry10;
+		$s10 -= $carry10 << 21;
+
+		/**
+		 * @var array<int, int>
+		 */
+		$arr = array(
+			(int) ($s0 >> 0),
+			(int) ($s0 >> 8),
+			(int) (($s0 >> 16) | $s1 << 5),
+			(int) ($s1 >> 3),
+			(int) ($s1 >> 11),
+			(int) (($s1 >> 19) | $s2 << 2),
+			(int) ($s2 >> 6),
+			(int) (($s2 >> 14) | $s3 << 7),
+			(int) ($s3 >> 1),
+			(int) ($s3 >> 9),
+			(int) (($s3 >> 17) | $s4 << 4),
+			(int) ($s4 >> 4),
+			(int) ($s4 >> 12),
+			(int) (($s4 >> 20) | $s5 << 1),
+			(int) ($s5 >> 7),
+			(int) (($s5 >> 15) | $s6 << 6),
+			(int) ($s6 >> 2),
+			(int) ($s6 >> 10),
+			(int) (($s6 >> 18) | $s7 << 3),
+			(int) ($s7 >> 5),
+			(int) ($s7 >> 13),
+			(int) ($s8 >> 0),
+			(int) ($s8 >> 8),
+			(int) (($s8 >> 16) | $s9 << 5),
+			(int) ($s9 >> 3),
+			(int) ($s9 >> 11),
+			(int) (($s9 >> 19) | $s10 << 2),
+			(int) ($s10 >> 6),
+			(int) (($s10 >> 14) | $s11 << 7),
+			(int) ($s11 >> 1),
+			(int) ($s11 >> 9),
+			(int) $s11 >> 17
+		);
+		return self::intArrayToString($arr);
+	}
+
+	/**
+	 * multiply by the order of the main subgroup l = 2^252+27742317777372353535851937790883648493
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
+	 */
+	public static function ge_mul_l(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A)
+	{
+		$aslide = array(
+			13, 0, 0, 0, 0, -1, 0, 0, 0, 0, -11, 0, 0, 0, 0, 0, 0, -5, 0, 0, 0,
+			0, 0, 0, -3, 0, 0, 0, 0, -13, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 3, 0,
+			0, 0, 0, -13, 0, 0, 0, 0, 5, 0, 0, 0, 0, 0, 0, 0, 0, 11, 0, 0, 0,
+			0, 0, 11, 0, 0, 0, 0, -13, 0, 0, 0, 0, 0, 0, -3, 0, 0, 0, 0, 0, -1,
+			0, 0, 0, 0, 3, 0, 0, 0, 0, -11, 0, 0, 0, 0, 0, 0, 0, 15, 0, 0, 0,
+			0, 0, -1, 0, 0, 0, 0, -1, 0, 0, 0, 0, 7, 0, 0, 0, 0, 5, 0, 0, 0, 0,
+			0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+			0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+			0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+			0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+			0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+			0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1
+		);
+
+		/** @var array<int, ParagonIE_Sodium_Core_Curve25519_Ge_Cached> $Ai size 8 */
+		$Ai = array();
+
+		# ge_p3_to_cached(&Ai[0], A);
+		$Ai[0] = self::ge_p3_to_cached($A);
+		# ge_p3_dbl(&t, A);
+		$t = self::ge_p3_dbl($A);
+		# ge_p1p1_to_p3(&A2, &t);
+		$A2 = self::ge_p1p1_to_p3($t);
+
+		for ($i = 1; $i < 8; ++$i) {
+			# ge_add(&t, &A2, &Ai[0]);
+			$t = self::ge_add($A2, $Ai[$i - 1]);
+			# ge_p1p1_to_p3(&u, &t);
+			$u = self::ge_p1p1_to_p3($t);
+			# ge_p3_to_cached(&Ai[i], &u);
+			$Ai[$i] = self::ge_p3_to_cached($u);
+		}
+
+		$r = self::ge_p3_0();
+		for ($i = 252; $i >= 0; --$i) {
+			$t = self::ge_p3_dbl($r);
+			if ($aslide[$i] > 0) {
+				# ge_p1p1_to_p3(&u, &t);
+				$u = self::ge_p1p1_to_p3($t);
+				# ge_add(&t, &u, &Ai[aslide[i] / 2]);
+				$t = self::ge_add($u, $Ai[(int)($aslide[$i] / 2)]);
+			} elseif ($aslide[$i] < 0) {
+				# ge_p1p1_to_p3(&u, &t);
+				$u = self::ge_p1p1_to_p3($t);
+				# ge_sub(&t, &u, &Ai[(-aslide[i]) / 2]);
+				$t = self::ge_sub($u, $Ai[(int)(-$aslide[$i] / 2)]);
+			}
+		}
+
+		# ge_p1p1_to_p3(r, &t);
+		return self::ge_p1p1_to_p3($t);
+	}
+
+	/**
+	 * @param string $a
+	 * @param string $b
+	 * @return string
+	 */
+	public static function sc25519_mul($a, $b)
+	{
+		//    int64_t a0  = 2097151 & load_3(a);
+		//    int64_t a1  = 2097151 & (load_4(a + 2) >> 5);
+		//    int64_t a2  = 2097151 & (load_3(a + 5) >> 2);
+		//    int64_t a3  = 2097151 & (load_4(a + 7) >> 7);
+		//    int64_t a4  = 2097151 & (load_4(a + 10) >> 4);
+		//    int64_t a5  = 2097151 & (load_3(a + 13) >> 1);
+		//    int64_t a6  = 2097151 & (load_4(a + 15) >> 6);
+		//    int64_t a7  = 2097151 & (load_3(a + 18) >> 3);
+		//    int64_t a8  = 2097151 & load_3(a + 21);
+		//    int64_t a9  = 2097151 & (load_4(a + 23) >> 5);
+		//    int64_t a10 = 2097151 & (load_3(a + 26) >> 2);
+		//    int64_t a11 = (load_4(a + 28) >> 7);
+		$a0  = 2097151 &  self::load_3(self::substr($a, 0, 3));
+		$a1  = 2097151 & (self::load_4(self::substr($a, 2, 4)) >> 5);
+		$a2  = 2097151 & (self::load_3(self::substr($a, 5, 3)) >> 2);
+		$a3  = 2097151 & (self::load_4(self::substr($a, 7, 4)) >> 7);
+		$a4  = 2097151 & (self::load_4(self::substr($a, 10, 4)) >> 4);
+		$a5  = 2097151 & (self::load_3(self::substr($a, 13, 3)) >> 1);
+		$a6  = 2097151 & (self::load_4(self::substr($a, 15, 4)) >> 6);
+		$a7  = 2097151 & (self::load_3(self::substr($a, 18, 3)) >> 3);
+		$a8  = 2097151 &  self::load_3(self::substr($a, 21, 3));
+		$a9  = 2097151 & (self::load_4(self::substr($a, 23, 4)) >> 5);
+		$a10 = 2097151 & (self::load_3(self::substr($a, 26, 3)) >> 2);
+		$a11 = (self::load_4(self::substr($a, 28, 4)) >> 7);
+
+		//    int64_t b0  = 2097151 & load_3(b);
+		//    int64_t b1  = 2097151 & (load_4(b + 2) >> 5);
+		//    int64_t b2  = 2097151 & (load_3(b + 5) >> 2);
+		//    int64_t b3  = 2097151 & (load_4(b + 7) >> 7);
+		//    int64_t b4  = 2097151 & (load_4(b + 10) >> 4);
+		//    int64_t b5  = 2097151 & (load_3(b + 13) >> 1);
+		//    int64_t b6  = 2097151 & (load_4(b + 15) >> 6);
+		//    int64_t b7  = 2097151 & (load_3(b + 18) >> 3);
+		//    int64_t b8  = 2097151 & load_3(b + 21);
+		//    int64_t b9  = 2097151 & (load_4(b + 23) >> 5);
+		//    int64_t b10 = 2097151 & (load_3(b + 26) >> 2);
+		//    int64_t b11 = (load_4(b + 28) >> 7);
+		$b0  = 2097151 &  self::load_3(self::substr($b, 0, 3));
+		$b1  = 2097151 & (self::load_4(self::substr($b, 2, 4)) >> 5);
+		$b2  = 2097151 & (self::load_3(self::substr($b, 5, 3)) >> 2);
+		$b3  = 2097151 & (self::load_4(self::substr($b, 7, 4)) >> 7);
+		$b4  = 2097151 & (self::load_4(self::substr($b, 10, 4)) >> 4);
+		$b5  = 2097151 & (self::load_3(self::substr($b, 13, 3)) >> 1);
+		$b6  = 2097151 & (self::load_4(self::substr($b, 15, 4)) >> 6);
+		$b7  = 2097151 & (self::load_3(self::substr($b, 18, 3)) >> 3);
+		$b8  = 2097151 &  self::load_3(self::substr($b, 21, 3));
+		$b9  = 2097151 & (self::load_4(self::substr($b, 23, 4)) >> 5);
+		$b10 = 2097151 & (self::load_3(self::substr($b, 26, 3)) >> 2);
+		$b11 = (self::load_4(self::substr($b, 28, 4)) >> 7);
+
+		//    s0 = a0 * b0;
+		//    s1 = a0 * b1 + a1 * b0;
+		//    s2 = a0 * b2 + a1 * b1 + a2 * b0;
+		//    s3 = a0 * b3 + a1 * b2 + a2 * b1 + a3 * b0;
+		//    s4 = a0 * b4 + a1 * b3 + a2 * b2 + a3 * b1 + a4 * b0;
+		//    s5 = a0 * b5 + a1 * b4 + a2 * b3 + a3 * b2 + a4 * b1 + a5 * b0;
+		//    s6 = a0 * b6 + a1 * b5 + a2 * b4 + a3 * b3 + a4 * b2 + a5 * b1 + a6 * b0;
+		//    s7 = a0 * b7 + a1 * b6 + a2 * b5 + a3 * b4 + a4 * b3 + a5 * b2 +
+		//        a6 * b1 + a7 * b0;
+		//    s8 = a0 * b8 + a1 * b7 + a2 * b6 + a3 * b5 + a4 * b4 + a5 * b3 +
+		//        a6 * b2 + a7 * b1 + a8 * b0;
+		//    s9 = a0 * b9 + a1 * b8 + a2 * b7 + a3 * b6 + a4 * b5 + a5 * b4 +
+		//        a6 * b3 + a7 * b2 + a8 * b1 + a9 * b0;
+		//    s10 = a0 * b10 + a1 * b9 + a2 * b8 + a3 * b7 + a4 * b6 + a5 * b5 +
+		//        a6 * b4 + a7 * b3 + a8 * b2 + a9 * b1 + a10 * b0;
+		//    s11 = a0 * b11 + a1 * b10 + a2 * b9 + a3 * b8 + a4 * b7 + a5 * b6 +
+		//        a6 * b5 + a7 * b4 + a8 * b3 + a9 * b2 + a10 * b1 + a11 * b0;
+		//    s12 = a1 * b11 + a2 * b10 + a3 * b9 + a4 * b8 + a5 * b7 + a6 * b6 +
+		//        a7 * b5 + a8 * b4 + a9 * b3 + a10 * b2 + a11 * b1;
+		//    s13 = a2 * b11 + a3 * b10 + a4 * b9 + a5 * b8 + a6 * b7 + a7 * b6 +
+		//        a8 * b5 + a9 * b4 + a10 * b3 + a11 * b2;
+		//    s14 = a3 * b11 + a4 * b10 + a5 * b9 + a6 * b8 + a7 * b7 + a8 * b6 +
+		//        a9 * b5 + a10 * b4 + a11 * b3;
+		//    s15 = a4 * b11 + a5 * b10 + a6 * b9 + a7 * b8 + a8 * b7 + a9 * b6 +
+		//        a10 * b5 + a11 * b4;
+		//    s16 =
+		//        a5 * b11 + a6 * b10 + a7 * b9 + a8 * b8 + a9 * b7 + a10 * b6 + a11 * b5;
+		//    s17 = a6 * b11 + a7 * b10 + a8 * b9 + a9 * b8 + a10 * b7 + a11 * b6;
+		//    s18 = a7 * b11 + a8 * b10 + a9 * b9 + a10 * b8 + a11 * b7;
+		//    s19 = a8 * b11 + a9 * b10 + a10 * b9 + a11 * b8;
+		//    s20 = a9 * b11 + a10 * b10 + a11 * b9;
+		//    s21 = a10 * b11 + a11 * b10;
+		//    s22 = a11 * b11;
+		//    s23 = 0;
+		$s0 = self::mul($a0, $b0, 22);
+		$s1 = self::mul($a0, $b1, 22) + self::mul($a1, $b0, 22);
+		$s2 = self::mul($a0, $b2, 22) + self::mul($a1, $b1, 22) + self::mul($a2, $b0, 22);
+		$s3 = self::mul($a0, $b3, 22) + self::mul($a1, $b2, 22) + self::mul($a2, $b1, 22) + self::mul($a3, $b0, 22);
+		$s4 = self::mul($a0, $b4, 22) + self::mul($a1, $b3, 22) + self::mul($a2, $b2, 22) + self::mul($a3, $b1, 22) +
+			self::mul($a4, $b0, 22);
+		$s5 = self::mul($a0, $b5, 22) + self::mul($a1, $b4, 22) + self::mul($a2, $b3, 22) + self::mul($a3, $b2, 22) +
+			self::mul($a4, $b1, 22) + self::mul($a5, $b0, 22);
+		$s6 = self::mul($a0, $b6, 22) + self::mul($a1, $b5, 22) + self::mul($a2, $b4, 22) + self::mul($a3, $b3, 22) +
+			self::mul($a4, $b2, 22) + self::mul($a5, $b1, 22) + self::mul($a6, $b0, 22);
+		$s7 = self::mul($a0, $b7, 22) + self::mul($a1, $b6, 22) + self::mul($a2, $b5, 22) + self::mul($a3, $b4, 22) +
+			self::mul($a4, $b3, 22) + self::mul($a5, $b2, 22) + self::mul($a6, $b1, 22) + self::mul($a7, $b0, 22);
+		$s8 = self::mul($a0, $b8, 22) + self::mul($a1, $b7, 22) + self::mul($a2, $b6, 22) + self::mul($a3, $b5, 22) +
+			self::mul($a4, $b4, 22) + self::mul($a5, $b3, 22) + self::mul($a6, $b2, 22) + self::mul($a7, $b1, 22) +
+			self::mul($a8, $b0, 22);
+		$s9 = self::mul($a0, $b9, 22) + self::mul($a1, $b8, 22) + self::mul($a2, $b7, 22) + self::mul($a3, $b6, 22) +
+			self::mul($a4, $b5, 22) + self::mul($a5, $b4, 22) + self::mul($a6, $b3, 22) + self::mul($a7, $b2, 22) +
+			self::mul($a8, $b1, 22) + self::mul($a9, $b0, 22);
+		$s10 = self::mul($a0, $b10, 22) + self::mul($a1, $b9, 22) + self::mul($a2, $b8, 22) + self::mul($a3, $b7, 22) +
+			self::mul($a4, $b6, 22) + self::mul($a5, $b5, 22) + self::mul($a6, $b4, 22) + self::mul($a7, $b3, 22) +
+			self::mul($a8, $b2, 22) + self::mul($a9, $b1, 22) + self::mul($a10, $b0, 22);
+		$s11 = self::mul($a0, $b11, 22) + self::mul($a1, $b10, 22) + self::mul($a2, $b9, 22) + self::mul($a3, $b8, 22) +
+			self::mul($a4, $b7, 22) + self::mul($a5, $b6, 22) + self::mul($a6, $b5, 22) + self::mul($a7, $b4, 22) +
+			self::mul($a8, $b3, 22) + self::mul($a9, $b2, 22) + self::mul($a10, $b1, 22) + self::mul($a11, $b0, 22);
+		$s12 = self::mul($a1, $b11, 22) + self::mul($a2, $b10, 22) + self::mul($a3, $b9, 22) + self::mul($a4, $b8, 22) +
+			self::mul($a5, $b7, 22) + self::mul($a6, $b6, 22) + self::mul($a7, $b5, 22) + self::mul($a8, $b4, 22) +
+			self::mul($a9, $b3, 22) + self::mul($a10, $b2, 22) + self::mul($a11, $b1, 22);
+		$s13 = self::mul($a2, $b11, 22) + self::mul($a3, $b10, 22) + self::mul($a4, $b9, 22) + self::mul($a5, $b8, 22) +
+			self::mul($a6, $b7, 22) + self::mul($a7, $b6, 22) + self::mul($a8, $b5, 22) + self::mul($a9, $b4, 22) +
+			self::mul($a10, $b3, 22) + self::mul($a11, $b2, 22);
+		$s14 = self::mul($a3, $b11, 22) + self::mul($a4, $b10, 22) + self::mul($a5, $b9, 22) + self::mul($a6, $b8, 22) +
+			self::mul($a7, $b7, 22) + self::mul($a8, $b6, 22) + self::mul($a9, $b5, 22) + self::mul($a10, $b4, 22) +
+			self::mul($a11, $b3, 22);
+		$s15 = self::mul($a4, $b11, 22) + self::mul($a5, $b10, 22) + self::mul($a6, $b9, 22) + self::mul($a7, $b8, 22) +
+			self::mul($a8, $b7, 22) + self::mul($a9, $b6, 22) + self::mul($a10, $b5, 22) + self::mul($a11, $b4, 22);
+		$s16 =
+			self::mul($a5, $b11, 22) + self::mul($a6, $b10, 22) + self::mul($a7, $b9, 22) + self::mul($a8, $b8, 22) +
+			self::mul($a9, $b7, 22) + self::mul($a10, $b6, 22) + self::mul($a11, $b5, 22);
+		$s17 = self::mul($a6, $b11, 22) + self::mul($a7, $b10, 22) + self::mul($a8, $b9, 22) + self::mul($a9, $b8, 22) +
+			self::mul($a10, $b7, 22) + self::mul($a11, $b6, 22);
+		$s18 = self::mul($a7, $b11, 22) + self::mul($a8, $b10, 22) + self::mul($a9, $b9, 22) + self::mul($a10, $b8, 22)
+			+ self::mul($a11, $b7, 22);
+		$s19 = self::mul($a8, $b11, 22) + self::mul($a9, $b10, 22) + self::mul($a10, $b9, 22) +
+			self::mul($a11, $b8, 22);
+		$s20 = self::mul($a9, $b11, 22) + self::mul($a10, $b10, 22) + self::mul($a11, $b9, 22);
+		$s21 = self::mul($a10, $b11, 22) + self::mul($a11, $b10, 22);
+		$s22 = self::mul($a11, $b11, 22);
+		$s23 = 0;
+
+		//    carry0 = (s0 + (int64_t) (1L << 20)) >> 21;
+		//    s1 += carry0;
+		//    s0 -= carry0 * ((uint64_t) 1L << 21);
+		$carry0 = ($s0 + (1 << 20)) >> 21;
+		$s1 += $carry0;
+		$s0 -= $carry0 << 21;
+		//    carry2 = (s2 + (int64_t) (1L << 20)) >> 21;
+		//    s3 += carry2;
+		//    s2 -= carry2 * ((uint64_t) 1L << 21);
+		$carry2 = ($s2 + (1 << 20)) >> 21;
+		$s3 += $carry2;
+		$s2 -= $carry2 << 21;
+		//    carry4 = (s4 + (int64_t) (1L << 20)) >> 21;
+		//    s5 += carry4;
+		//    s4 -= carry4 * ((uint64_t) 1L << 21);
+		$carry4 = ($s4 + (1 << 20)) >> 21;
+		$s5 += $carry4;
+		$s4 -= $carry4 << 21;
+		//    carry6 = (s6 + (int64_t) (1L << 20)) >> 21;
+		//    s7 += carry6;
+		//    s6 -= carry6 * ((uint64_t) 1L << 21);
+		$carry6 = ($s6 + (1 << 20)) >> 21;
+		$s7 += $carry6;
+		$s6 -= $carry6 << 21;
+		//    carry8 = (s8 + (int64_t) (1L << 20)) >> 21;
+		//    s9 += carry8;
+		//    s8 -= carry8 * ((uint64_t) 1L << 21);
+		$carry8 = ($s8 + (1 << 20)) >> 21;
+		$s9 += $carry8;
+		$s8 -= $carry8 << 21;
+		//    carry10 = (s10 + (int64_t) (1L << 20)) >> 21;
+		//    s11 += carry10;
+		//    s10 -= carry10 * ((uint64_t) 1L << 21);
+		$carry10 = ($s10 + (1 << 20)) >> 21;
+		$s11 += $carry10;
+		$s10 -= $carry10 << 21;
+		//    carry12 = (s12 + (int64_t) (1L << 20)) >> 21;
+		//    s13 += carry12;
+		//    s12 -= carry12 * ((uint64_t) 1L << 21);
+		$carry12 = ($s12 + (1 << 20)) >> 21;
+		$s13 += $carry12;
+		$s12 -= $carry12 << 21;
+		//    carry14 = (s14 + (int64_t) (1L << 20)) >> 21;
+		//    s15 += carry14;
+		//    s14 -= carry14 * ((uint64_t) 1L << 21);
+		$carry14 = ($s14 + (1 << 20)) >> 21;
+		$s15 += $carry14;
+		$s14 -= $carry14 << 21;
+		//    carry16 = (s16 + (int64_t) (1L << 20)) >> 21;
+		//    s17 += carry16;
+		//    s16 -= carry16 * ((uint64_t) 1L << 21);
+		$carry16 = ($s16 + (1 << 20)) >> 21;
+		$s17 += $carry16;
+		$s16 -= $carry16 << 21;
+		//    carry18 = (s18 + (int64_t) (1L << 20)) >> 21;
+		//    s19 += carry18;
+		//    s18 -= carry18 * ((uint64_t) 1L << 21);
+		$carry18 = ($s18 + (1 << 20)) >> 21;
+		$s19 += $carry18;
+		$s18 -= $carry18 << 21;
+		//    carry20 = (s20 + (int64_t) (1L << 20)) >> 21;
+		//    s21 += carry20;
+		//    s20 -= carry20 * ((uint64_t) 1L << 21);
+		$carry20 = ($s20 + (1 << 20)) >> 21;
+		$s21 += $carry20;
+		$s20 -= $carry20 << 21;
+		//    carry22 = (s22 + (int64_t) (1L << 20)) >> 21;
+		//    s23 += carry22;
+		//    s22 -= carry22 * ((uint64_t) 1L << 21);
+		$carry22 = ($s22 + (1 << 20)) >> 21;
+		$s23 += $carry22;
+		$s22 -= $carry22 << 21;
+
+		//    carry1 = (s1 + (int64_t) (1L << 20)) >> 21;
+		//    s2 += carry1;
+		//    s1 -= carry1 * ((uint64_t) 1L << 21);
+		$carry1 = ($s1 + (1 << 20)) >> 21;
+		$s2 += $carry1;
+		$s1 -= $carry1 << 21;
+		//    carry3 = (s3 + (int64_t) (1L << 20)) >> 21;
+		//    s4 += carry3;
+		//    s3 -= carry3 * ((uint64_t) 1L << 21);
+		$carry3 = ($s3 + (1 << 20)) >> 21;
+		$s4 += $carry3;
+		$s3 -= $carry3 << 21;
+		//    carry5 = (s5 + (int64_t) (1L << 20)) >> 21;
+		//    s6 += carry5;
+		//    s5 -= carry5 * ((uint64_t) 1L << 21);
+		$carry5 = ($s5 + (1 << 20)) >> 21;
+		$s6 += $carry5;
+		$s5 -= $carry5 << 21;
+		//    carry7 = (s7 + (int64_t) (1L << 20)) >> 21;
+		//    s8 += carry7;
+		//    s7 -= carry7 * ((uint64_t) 1L << 21);
+		$carry7 = ($s7 + (1 << 20)) >> 21;
+		$s8 += $carry7;
+		$s7 -= $carry7 << 21;
+		//    carry9 = (s9 + (int64_t) (1L << 20)) >> 21;
+		//    s10 += carry9;
+		//    s9 -= carry9 * ((uint64_t) 1L << 21);
+		$carry9 = ($s9 + (1 << 20)) >> 21;
+		$s10 += $carry9;
+		$s9 -= $carry9 << 21;
+		//    carry11 = (s11 + (int64_t) (1L << 20)) >> 21;
+		//    s12 += carry11;
+		//    s11 -= carry11 * ((uint64_t) 1L << 21);
+		$carry11 = ($s11 + (1 << 20)) >> 21;
+		$s12 += $carry11;
+		$s11 -= $carry11 << 21;
+		//    carry13 = (s13 + (int64_t) (1L << 20)) >> 21;
+		//    s14 += carry13;
+		//    s13 -= carry13 * ((uint64_t) 1L << 21);
+		$carry13 = ($s13 + (1 << 20)) >> 21;
+		$s14 += $carry13;
+		$s13 -= $carry13 << 21;
+		//    carry15 = (s15 + (int64_t) (1L << 20)) >> 21;
+		//    s16 += carry15;
+		//    s15 -= carry15 * ((uint64_t) 1L << 21);
+		$carry15 = ($s15 + (1 << 20)) >> 21;
+		$s16 += $carry15;
+		$s15 -= $carry15 << 21;
+		//    carry17 = (s17 + (int64_t) (1L << 20)) >> 21;
+		//    s18 += carry17;
+		//    s17 -= carry17 * ((uint64_t) 1L << 21);
+		$carry17 = ($s17 + (1 << 20)) >> 21;
+		$s18 += $carry17;
+		$s17 -= $carry17 << 21;
+		//    carry19 = (s19 + (int64_t) (1L << 20)) >> 21;
+		//    s20 += carry19;
+		//    s19 -= carry19 * ((uint64_t) 1L << 21);
+		$carry19 = ($s19 + (1 << 20)) >> 21;
+		$s20 += $carry19;
+		$s19 -= $carry19 << 21;
+		//    carry21 = (s21 + (int64_t) (1L << 20)) >> 21;
+		//    s22 += carry21;
+		//    s21 -= carry21 * ((uint64_t) 1L << 21);
+		$carry21 = ($s21 + (1 << 20)) >> 21;
+		$s22 += $carry21;
+		$s21 -= $carry21 << 21;
+
+		//    s11 += s23 * 666643;
+		//    s12 += s23 * 470296;
+		//    s13 += s23 * 654183;
+		//    s14 -= s23 * 997805;
+		//    s15 += s23 * 136657;
+		//    s16 -= s23 * 683901;
+		$s11 += self::mul($s23, 666643, 20);
+		$s12 += self::mul($s23, 470296, 19);
+		$s13 += self::mul($s23, 654183, 20);
+		$s14 -= self::mul($s23, 997805, 20);
+		$s15 += self::mul($s23, 136657, 18);
+		$s16 -= self::mul($s23, 683901, 20);
+
+		//    s10 += s22 * 666643;
+		//    s11 += s22 * 470296;
+		//    s12 += s22 * 654183;
+		//    s13 -= s22 * 997805;
+		//    s14 += s22 * 136657;
+		//    s15 -= s22 * 683901;
+		$s10 += self::mul($s22, 666643, 20);
+		$s11 += self::mul($s22, 470296, 19);
+		$s12 += self::mul($s22, 654183, 20);
+		$s13 -= self::mul($s22, 997805, 20);
+		$s14 += self::mul($s22, 136657, 18);
+		$s15 -= self::mul($s22, 683901, 20);
+
+		//    s9 += s21 * 666643;
+		//    s10 += s21 * 470296;
+		//    s11 += s21 * 654183;
+		//    s12 -= s21 * 997805;
+		//    s13 += s21 * 136657;
+		//    s14 -= s21 * 683901;
+		$s9 += self::mul($s21, 666643, 20);
+		$s10 += self::mul($s21, 470296, 19);
+		$s11 += self::mul($s21, 654183, 20);
+		$s12 -= self::mul($s21, 997805, 20);
+		$s13 += self::mul($s21, 136657, 18);
+		$s14 -= self::mul($s21, 683901, 20);
+
+		//    s8 += s20 * 666643;
+		//    s9 += s20 * 470296;
+		//    s10 += s20 * 654183;
+		//    s11 -= s20 * 997805;
+		//    s12 += s20 * 136657;
+		//    s13 -= s20 * 683901;
+		$s8 += self::mul($s20, 666643, 20);
+		$s9 += self::mul($s20, 470296, 19);
+		$s10 += self::mul($s20, 654183, 20);
+		$s11 -= self::mul($s20, 997805, 20);
+		$s12 += self::mul($s20, 136657, 18);
+		$s13 -= self::mul($s20, 683901, 20);
+
+		//    s7 += s19 * 666643;
+		//    s8 += s19 * 470296;
+		//    s9 += s19 * 654183;
+		//    s10 -= s19 * 997805;
+		//    s11 += s19 * 136657;
+		//    s12 -= s19 * 683901;
+		$s7 += self::mul($s19, 666643, 20);
+		$s8 += self::mul($s19, 470296, 19);
+		$s9 += self::mul($s19, 654183, 20);
+		$s10 -= self::mul($s19, 997805, 20);
+		$s11 += self::mul($s19, 136657, 18);
+		$s12 -= self::mul($s19, 683901, 20);
+
+		//    s6 += s18 * 666643;
+		//    s7 += s18 * 470296;
+		//    s8 += s18 * 654183;
+		//    s9 -= s18 * 997805;
+		//    s10 += s18 * 136657;
+		//    s11 -= s18 * 683901;
+		$s6 += self::mul($s18, 666643, 20);
+		$s7 += self::mul($s18, 470296, 19);
+		$s8 += self::mul($s18, 654183, 20);
+		$s9 -= self::mul($s18, 997805, 20);
+		$s10 += self::mul($s18, 136657, 18);
+		$s11 -= self::mul($s18, 683901, 20);
+
+		//    carry6 = (s6 + (int64_t) (1L << 20)) >> 21;
+		//    s7 += carry6;
+		//    s6 -= carry6 * ((uint64_t) 1L << 21);
+		$carry6 = ($s6 + (1 << 20)) >> 21;
+		$s7 += $carry6;
+		$s6 -= $carry6 << 21;
+		//    carry8 = (s8 + (int64_t) (1L << 20)) >> 21;
+		//    s9 += carry8;
+		//    s8 -= carry8 * ((uint64_t) 1L << 21);
+		$carry8 = ($s8 + (1 << 20)) >> 21;
+		$s9 += $carry8;
+		$s8 -= $carry8 << 21;
+		//    carry10 = (s10 + (int64_t) (1L << 20)) >> 21;
+		//    s11 += carry10;
+		//    s10 -= carry10 * ((uint64_t) 1L << 21);
+		$carry10 = ($s10 + (1 << 20)) >> 21;
+		$s11 += $carry10;
+		$s10 -= $carry10 << 21;
+		//    carry12 = (s12 + (int64_t) (1L << 20)) >> 21;
+		//    s13 += carry12;
+		//    s12 -= carry12 * ((uint64_t) 1L << 21);
+		$carry12 = ($s12 + (1 << 20)) >> 21;
+		$s13 += $carry12;
+		$s12 -= $carry12 << 21;
+		//    carry14 = (s14 + (int64_t) (1L << 20)) >> 21;
+		//    s15 += carry14;
+		//    s14 -= carry14 * ((uint64_t) 1L << 21);
+		$carry14 = ($s14 + (1 << 20)) >> 21;
+		$s15 += $carry14;
+		$s14 -= $carry14 << 21;
+		//    carry16 = (s16 + (int64_t) (1L << 20)) >> 21;
+		//    s17 += carry16;
+		//    s16 -= carry16 * ((uint64_t) 1L << 21);
+		$carry16 = ($s16 + (1 << 20)) >> 21;
+		$s17 += $carry16;
+		$s16 -= $carry16 << 21;
+
+		//    carry7 = (s7 + (int64_t) (1L << 20)) >> 21;
+		//    s8 += carry7;
+		//    s7 -= carry7 * ((uint64_t) 1L << 21);
+		$carry7 = ($s7 + (1 << 20)) >> 21;
+		$s8 += $carry7;
+		$s7 -= $carry7 << 21;
+		//    carry9 = (s9 + (int64_t) (1L << 20)) >> 21;
+		//    s10 += carry9;
+		//    s9 -= carry9 * ((uint64_t) 1L << 21);
+		$carry9 = ($s9 + (1 << 20)) >> 21;
+		$s10 += $carry9;
+		$s9 -= $carry9 << 21;
+		//    carry11 = (s11 + (int64_t) (1L << 20)) >> 21;
+		//    s12 += carry11;
+		//    s11 -= carry11 * ((uint64_t) 1L << 21);
+		$carry11 = ($s11 + (1 << 20)) >> 21;
+		$s12 += $carry11;
+		$s11 -= $carry11 << 21;
+		//    carry13 = (s13 + (int64_t) (1L << 20)) >> 21;
+		//    s14 += carry13;
+		//    s13 -= carry13 * ((uint64_t) 1L << 21);
+		$carry13 = ($s13 + (1 << 20)) >> 21;
+		$s14 += $carry13;
+		$s13 -= $carry13 << 21;
+		//    carry15 = (s15 + (int64_t) (1L << 20)) >> 21;
+		//    s16 += carry15;
+		//    s15 -= carry15 * ((uint64_t) 1L << 21);
+		$carry15 = ($s15 + (1 << 20)) >> 21;
+		$s16 += $carry15;
+		$s15 -= $carry15 << 21;
+
+		//    s5 += s17 * 666643;
+		//    s6 += s17 * 470296;
+		//    s7 += s17 * 654183;
+		//    s8 -= s17 * 997805;
+		//    s9 += s17 * 136657;
+		//    s10 -= s17 * 683901;
+		$s5 += self::mul($s17, 666643, 20);
+		$s6 += self::mul($s17, 470296, 19);
+		$s7 += self::mul($s17, 654183, 20);
+		$s8 -= self::mul($s17, 997805, 20);
+		$s9 += self::mul($s17, 136657, 18);
+		$s10 -= self::mul($s17, 683901, 20);
+
+		//    s4 += s16 * 666643;
+		//    s5 += s16 * 470296;
+		//    s6 += s16 * 654183;
+		//    s7 -= s16 * 997805;
+		//    s8 += s16 * 136657;
+		//    s9 -= s16 * 683901;
+		$s4 += self::mul($s16, 666643, 20);
+		$s5 += self::mul($s16, 470296, 19);
+		$s6 += self::mul($s16, 654183, 20);
+		$s7 -= self::mul($s16, 997805, 20);
+		$s8 += self::mul($s16, 136657, 18);
+		$s9 -= self::mul($s16, 683901, 20);
+
+		//    s3 += s15 * 666643;
+		//    s4 += s15 * 470296;
+		//    s5 += s15 * 654183;
+		//    s6 -= s15 * 997805;
+		//    s7 += s15 * 136657;
+		//    s8 -= s15 * 683901;
+		$s3 += self::mul($s15, 666643, 20);
+		$s4 += self::mul($s15, 470296, 19);
+		$s5 += self::mul($s15, 654183, 20);
+		$s6 -= self::mul($s15, 997805, 20);
+		$s7 += self::mul($s15, 136657, 18);
+		$s8 -= self::mul($s15, 683901, 20);
+
+		//    s2 += s14 * 666643;
+		//    s3 += s14 * 470296;
+		//    s4 += s14 * 654183;
+		//    s5 -= s14 * 997805;
+		//    s6 += s14 * 136657;
+		//    s7 -= s14 * 683901;
+		$s2 += self::mul($s14, 666643, 20);
+		$s3 += self::mul($s14, 470296, 19);
+		$s4 += self::mul($s14, 654183, 20);
+		$s5 -= self::mul($s14, 997805, 20);
+		$s6 += self::mul($s14, 136657, 18);
+		$s7 -= self::mul($s14, 683901, 20);
+
+		//    s1 += s13 * 666643;
+		//    s2 += s13 * 470296;
+		//    s3 += s13 * 654183;
+		//    s4 -= s13 * 997805;
+		//    s5 += s13 * 136657;
+		//    s6 -= s13 * 683901;
+		$s1 += self::mul($s13, 666643, 20);
+		$s2 += self::mul($s13, 470296, 19);
+		$s3 += self::mul($s13, 654183, 20);
+		$s4 -= self::mul($s13, 997805, 20);
+		$s5 += self::mul($s13, 136657, 18);
+		$s6 -= self::mul($s13, 683901, 20);
+
+		//    s0 += s12 * 666643;
+		//    s1 += s12 * 470296;
+		//    s2 += s12 * 654183;
+		//    s3 -= s12 * 997805;
+		//    s4 += s12 * 136657;
+		//    s5 -= s12 * 683901;
+		//    s12 = 0;
+		$s0 += self::mul($s12, 666643, 20);
+		$s1 += self::mul($s12, 470296, 19);
+		$s2 += self::mul($s12, 654183, 20);
+		$s3 -= self::mul($s12, 997805, 20);
+		$s4 += self::mul($s12, 136657, 18);
+		$s5 -= self::mul($s12, 683901, 20);
+		$s12 = 0;
+
+		//    carry0 = (s0 + (int64_t) (1L << 20)) >> 21;
+		//    s1 += carry0;
+		//    s0 -= carry0 * ((uint64_t) 1L << 21);
+		$carry0 = ($s0 + (1 << 20)) >> 21;
+		$s1 += $carry0;
+		$s0 -= $carry0 << 21;
+		//    carry2 = (s2 + (int64_t) (1L << 20)) >> 21;
+		//    s3 += carry2;
+		//    s2 -= carry2 * ((uint64_t) 1L << 21);
+		$carry2 = ($s2 + (1 << 20)) >> 21;
+		$s3 += $carry2;
+		$s2 -= $carry2 << 21;
+		//    carry4 = (s4 + (int64_t) (1L << 20)) >> 21;
+		//    s5 += carry4;
+		//    s4 -= carry4 * ((uint64_t) 1L << 21);
+		$carry4 = ($s4 + (1 << 20)) >> 21;
+		$s5 += $carry4;
+		$s4 -= $carry4 << 21;
+		//    carry6 = (s6 + (int64_t) (1L << 20)) >> 21;
+		//    s7 += carry6;
+		//    s6 -= carry6 * ((uint64_t) 1L << 21);
+		$carry6 = ($s6 + (1 << 20)) >> 21;
+		$s7 += $carry6;
+		$s6 -= $carry6 << 21;
+		//    carry8 = (s8 + (int64_t) (1L << 20)) >> 21;
+		//    s9 += carry8;
+		//    s8 -= carry8 * ((uint64_t) 1L << 21);
+		$carry8 = ($s8 + (1 << 20)) >> 21;
+		$s9 += $carry8;
+		$s8 -= $carry8 << 21;
+		//    carry10 = (s10 + (int64_t) (1L << 20)) >> 21;
+		//    s11 += carry10;
+		//    s10 -= carry10 * ((uint64_t) 1L << 21);
+		$carry10 = ($s10 + (1 << 20)) >> 21;
+		$s11 += $carry10;
+		$s10 -= $carry10 << 21;
+
+		//    carry1 = (s1 + (int64_t) (1L << 20)) >> 21;
+		//    s2 += carry1;
+		//    s1 -= carry1 * ((uint64_t) 1L << 21);
+		$carry1 = ($s1 + (1 << 20)) >> 21;
+		$s2 += $carry1;
+		$s1 -= $carry1 << 21;
+		//    carry3 = (s3 + (int64_t) (1L << 20)) >> 21;
+		//    s4 += carry3;
+		//    s3 -= carry3 * ((uint64_t) 1L << 21);
+		$carry3 = ($s3 + (1 << 20)) >> 21;
+		$s4 += $carry3;
+		$s3 -= $carry3 << 21;
+		//    carry5 = (s5 + (int64_t) (1L << 20)) >> 21;
+		//    s6 += carry5;
+		//    s5 -= carry5 * ((uint64_t) 1L << 21);
+		$carry5 = ($s5 + (1 << 20)) >> 21;
+		$s6 += $carry5;
+		$s5 -= $carry5 << 21;
+		//    carry7 = (s7 + (int64_t) (1L << 20)) >> 21;
+		//    s8 += carry7;
+		//    s7 -= carry7 * ((uint64_t) 1L << 21);
+		$carry7 = ($s7 + (1 << 20)) >> 21;
+		$s8 += $carry7;
+		$s7 -= $carry7 << 21;
+		//    carry9 = (s9 + (int64_t) (1L << 20)) >> 21;
+		//    s10 += carry9;
+		//    s9 -= carry9 * ((uint64_t) 1L << 21);
+		$carry9 = ($s9 + (1 << 20)) >> 21;
+		$s10 += $carry9;
+		$s9 -= $carry9 << 21;
+		//    carry11 = (s11 + (int64_t) (1L << 20)) >> 21;
+		//    s12 += carry11;
+		//    s11 -= carry11 * ((uint64_t) 1L << 21);
+		$carry11 = ($s11 + (1 << 20)) >> 21;
+		$s12 += $carry11;
+		$s11 -= $carry11 << 21;
+
+		//    s0 += s12 * 666643;
+		//    s1 += s12 * 470296;
+		//    s2 += s12 * 654183;
+		//    s3 -= s12 * 997805;
+		//    s4 += s12 * 136657;
+		//    s5 -= s12 * 683901;
+		//    s12 = 0;
+		$s0 += self::mul($s12, 666643, 20);
+		$s1 += self::mul($s12, 470296, 19);
+		$s2 += self::mul($s12, 654183, 20);
+		$s3 -= self::mul($s12, 997805, 20);
+		$s4 += self::mul($s12, 136657, 18);
+		$s5 -= self::mul($s12, 683901, 20);
+		$s12 = 0;
+
+		//    carry0 = s0 >> 21;
+		//    s1 += carry0;
+		//    s0 -= carry0 * ((uint64_t) 1L << 21);
+		$carry0 = $s0 >> 21;
+		$s1 += $carry0;
+		$s0 -= $carry0 << 21;
+		//    carry1 = s1 >> 21;
+		//    s2 += carry1;
+		//    s1 -= carry1 * ((uint64_t) 1L << 21);
+		$carry1 = $s1 >> 21;
+		$s2 += $carry1;
+		$s1 -= $carry1 << 21;
+		//    carry2 = s2 >> 21;
+		//    s3 += carry2;
+		//    s2 -= carry2 * ((uint64_t) 1L << 21);
+		$carry2 = $s2 >> 21;
+		$s3 += $carry2;
+		$s2 -= $carry2 << 21;
+		//    carry3 = s3 >> 21;
+		//    s4 += carry3;
+		//    s3 -= carry3 * ((uint64_t) 1L << 21);
+		$carry3 = $s3 >> 21;
+		$s4 += $carry3;
+		$s3 -= $carry3 << 21;
+		//    carry4 = s4 >> 21;
+		//    s5 += carry4;
+		//    s4 -= carry4 * ((uint64_t) 1L << 21);
+		$carry4 = $s4 >> 21;
+		$s5 += $carry4;
+		$s4 -= $carry4 << 21;
+		//    carry5 = s5 >> 21;
+		//    s6 += carry5;
+		//    s5 -= carry5 * ((uint64_t) 1L << 21);
+		$carry5 = $s5 >> 21;
+		$s6 += $carry5;
+		$s5 -= $carry5 << 21;
+		//    carry6 = s6 >> 21;
+		//    s7 += carry6;
+		//    s6 -= carry6 * ((uint64_t) 1L << 21);
+		$carry6 = $s6 >> 21;
+		$s7 += $carry6;
+		$s6 -= $carry6 << 21;
+		//    carry7 = s7 >> 21;
+		//    s8 += carry7;
+		//    s7 -= carry7 * ((uint64_t) 1L << 21);
+		$carry7 = $s7 >> 21;
+		$s8 += $carry7;
+		$s7 -= $carry7 << 21;
+		//    carry8 = s8 >> 21;
+		//    s9 += carry8;
+		//    s8 -= carry8 * ((uint64_t) 1L << 21);
+		$carry8 = $s8 >> 21;
+		$s9 += $carry8;
+		$s8 -= $carry8 << 21;
+		//    carry9 = s9 >> 21;
+		//    s10 += carry9;
+		//    s9 -= carry9 * ((uint64_t) 1L << 21);
+		$carry9 = $s9 >> 21;
+		$s10 += $carry9;
+		$s9 -= $carry9 << 21;
+		//    carry10 = s10 >> 21;
+		//    s11 += carry10;
+		//    s10 -= carry10 * ((uint64_t) 1L << 21);
+		$carry10 = $s10 >> 21;
+		$s11 += $carry10;
+		$s10 -= $carry10 << 21;
+		//    carry11 = s11 >> 21;
+		//    s12 += carry11;
+		//    s11 -= carry11 * ((uint64_t) 1L << 21);
+		$carry11 = $s11 >> 21;
+		$s12 += $carry11;
+		$s11 -= $carry11 << 21;
+
+		//    s0 += s12 * 666643;
+		//    s1 += s12 * 470296;
+		//    s2 += s12 * 654183;
+		//    s3 -= s12 * 997805;
+		//    s4 += s12 * 136657;
+		//    s5 -= s12 * 683901;
+		$s0 += self::mul($s12, 666643, 20);
+		$s1 += self::mul($s12, 470296, 19);
+		$s2 += self::mul($s12, 654183, 20);
+		$s3 -= self::mul($s12, 997805, 20);
+		$s4 += self::mul($s12, 136657, 18);
+		$s5 -= self::mul($s12, 683901, 20);
+
+		//    carry0 = s0 >> 21;
+		//    s1 += carry0;
+		//    s0 -= carry0 * ((uint64_t) 1L << 21);
+		$carry0 = $s0 >> 21;
+		$s1 += $carry0;
+		$s0 -= $carry0 << 21;
+		//    carry1 = s1 >> 21;
+		//    s2 += carry1;
+		//    s1 -= carry1 * ((uint64_t) 1L << 21);
+		$carry1 = $s1 >> 21;
+		$s2 += $carry1;
+		$s1 -= $carry1 << 21;
+		//    carry2 = s2 >> 21;
+		//    s3 += carry2;
+		//    s2 -= carry2 * ((uint64_t) 1L << 21);
+		$carry2 = $s2 >> 21;
+		$s3 += $carry2;
+		$s2 -= $carry2 << 21;
+		//    carry3 = s3 >> 21;
+		//    s4 += carry3;
+		//    s3 -= carry3 * ((uint64_t) 1L << 21);
+		$carry3 = $s3 >> 21;
+		$s4 += $carry3;
+		$s3 -= $carry3 << 21;
+		//    carry4 = s4 >> 21;
+		//    s5 += carry4;
+		//    s4 -= carry4 * ((uint64_t) 1L << 21);
+		$carry4 = $s4 >> 21;
+		$s5 += $carry4;
+		$s4 -= $carry4 << 21;
+		//    carry5 = s5 >> 21;
+		//    s6 += carry5;
+		//    s5 -= carry5 * ((uint64_t) 1L << 21);
+		$carry5 = $s5 >> 21;
+		$s6 += $carry5;
+		$s5 -= $carry5 << 21;
+		//    carry6 = s6 >> 21;
+		//    s7 += carry6;
+		//    s6 -= carry6 * ((uint64_t) 1L << 21);
+		$carry6 = $s6 >> 21;
+		$s7 += $carry6;
+		$s6 -= $carry6 << 21;
+		//    carry7 = s7 >> 21;
+		//    s8 += carry7;
+		//    s7 -= carry7 * ((uint64_t) 1L << 21);
+		$carry7 = $s7 >> 21;
+		$s8 += $carry7;
+		$s7 -= $carry7 << 21;
+		//    carry8 = s8 >> 21;
+		//    s9 += carry8;
+		//    s8 -= carry8 * ((uint64_t) 1L << 21);
+		$carry8 = $s8 >> 21;
+		$s9 += $carry8;
+		$s8 -= $carry8 << 21;
+		//    carry9 = s9 >> 21;
+		//    s10 += carry9;
+		//    s9 -= carry9 * ((uint64_t) 1L << 21);
+		$carry9 = $s9 >> 21;
+		$s10 += $carry9;
+		$s9 -= $carry9 << 21;
+		//    carry10 = s10 >> 21;
+		//    s11 += carry10;
+		//    s10 -= carry10 * ((uint64_t) 1L << 21);
+		$carry10 = $s10 >> 21;
+		$s11 += $carry10;
+		$s10 -= $carry10 << 21;
+
+		$s = array_fill(0, 32, 0);
+		// s[0]  = s0 >> 0;
+		$s[0]  = $s0 >> 0;
+		// s[1]  = s0 >> 8;
+		$s[1]  = $s0 >> 8;
+		// s[2]  = (s0 >> 16) | (s1 * ((uint64_t) 1 << 5));
+		$s[2]  = ($s0 >> 16) | ($s1 << 5);
+		// s[3]  = s1 >> 3;
+		$s[3]  = $s1 >> 3;
+		// s[4]  = s1 >> 11;
+		$s[4]  = $s1 >> 11;
+		// s[5]  = (s1 >> 19) | (s2 * ((uint64_t) 1 << 2));
+		$s[5]  = ($s1 >> 19) | ($s2 << 2);
+		// s[6]  = s2 >> 6;
+		$s[6]  = $s2 >> 6;
+		// s[7]  = (s2 >> 14) | (s3 * ((uint64_t) 1 << 7));
+		$s[7]  = ($s2 >> 14) | ($s3 << 7);
+		// s[8]  = s3 >> 1;
+		$s[8]  = $s3 >> 1;
+		// s[9]  = s3 >> 9;
+		$s[9]  = $s3 >> 9;
+		// s[10] = (s3 >> 17) | (s4 * ((uint64_t) 1 << 4));
+		$s[10] = ($s3 >> 17) | ($s4 << 4);
+		// s[11] = s4 >> 4;
+		$s[11] = $s4 >> 4;
+		// s[12] = s4 >> 12;
+		$s[12] = $s4 >> 12;
+		// s[13] = (s4 >> 20) | (s5 * ((uint64_t) 1 << 1));
+		$s[13] = ($s4 >> 20) | ($s5 << 1);
+		// s[14] = s5 >> 7;
+		$s[14] = $s5 >> 7;
+		// s[15] = (s5 >> 15) | (s6 * ((uint64_t) 1 << 6));
+		$s[15] = ($s5 >> 15) | ($s6 << 6);
+		// s[16] = s6 >> 2;
+		$s[16] = $s6 >> 2;
+		// s[17] = s6 >> 10;
+		$s[17] = $s6 >> 10;
+		// s[18] = (s6 >> 18) | (s7 * ((uint64_t) 1 << 3));
+		$s[18] = ($s6 >> 18) | ($s7 << 3);
+		// s[19] = s7 >> 5;
+		$s[19] = $s7 >> 5;
+		// s[20] = s7 >> 13;
+		$s[20] = $s7 >> 13;
+		// s[21] = s8 >> 0;
+		$s[21] = $s8 >> 0;
+		// s[22] = s8 >> 8;
+		$s[22] = $s8 >> 8;
+		// s[23] = (s8 >> 16) | (s9 * ((uint64_t) 1 << 5));
+		$s[23] = ($s8 >> 16) | ($s9 << 5);
+		// s[24] = s9 >> 3;
+		$s[24] = $s9 >> 3;
+		// s[25] = s9 >> 11;
+		$s[25] = $s9 >> 11;
+		// s[26] = (s9 >> 19) | (s10 * ((uint64_t) 1 << 2));
+		$s[26] = ($s9 >> 19) | ($s10 << 2);
+		// s[27] = s10 >> 6;
+		$s[27] = $s10 >> 6;
+		// s[28] = (s10 >> 14) | (s11 * ((uint64_t) 1 << 7));
+		$s[28] = ($s10 >> 14) | ($s11 << 7);
+		// s[29] = s11 >> 1;
+		$s[29] = $s11 >> 1;
+		// s[30] = s11 >> 9;
+		$s[30] = $s11 >> 9;
+		// s[31] = s11 >> 17;
+		$s[31] = $s11 >> 17;
+		return self::intArrayToString($s);
+	}
+
+	/**
+	 * @param string $s
+	 * @return string
+	 */
+	public static function sc25519_sq($s)
+	{
+		return self::sc25519_mul($s, $s);
+	}
+
+	/**
+	 * @param string $s
+	 * @param int $n
+	 * @param string $a
+	 * @return string
+	 */
+	public static function sc25519_sqmul($s, $n, $a)
+	{
+		for ($i = 0; $i < $n; ++$i) {
+			$s = self::sc25519_sq($s);
+		}
+		return self::sc25519_mul($s, $a);
+	}
+
+	/**
+	 * @param string $s
+	 * @return string
+	 */
+	public static function sc25519_invert($s)
+	{
+		$_10 = self::sc25519_sq($s);
+		$_11 = self::sc25519_mul($s, $_10);
+		$_100 = self::sc25519_mul($s, $_11);
+		$_1000 = self::sc25519_sq($_100);
+		$_1010 = self::sc25519_mul($_10, $_1000);
+		$_1011 = self::sc25519_mul($s, $_1010);
+		$_10000 = self::sc25519_sq($_1000);
+		$_10110 = self::sc25519_sq($_1011);
+		$_100000 = self::sc25519_mul($_1010, $_10110);
+		$_100110 = self::sc25519_mul($_10000, $_10110);
+		$_1000000 = self::sc25519_sq($_100000);
+		$_1010000 = self::sc25519_mul($_10000, $_1000000);
+		$_1010011 = self::sc25519_mul($_11, $_1010000);
+		$_1100011 = self::sc25519_mul($_10000, $_1010011);
+		$_1100111 = self::sc25519_mul($_100, $_1100011);
+		$_1101011 = self::sc25519_mul($_100, $_1100111);
+		$_10010011 = self::sc25519_mul($_1000000, $_1010011);
+		$_10010111 = self::sc25519_mul($_100, $_10010011);
+		$_10111101 = self::sc25519_mul($_100110, $_10010111);
+		$_11010011 = self::sc25519_mul($_10110, $_10111101);
+		$_11100111 = self::sc25519_mul($_1010000, $_10010111);
+		$_11101011 = self::sc25519_mul($_100, $_11100111);
+		$_11110101 = self::sc25519_mul($_1010, $_11101011);
+
+		$recip = self::sc25519_mul($_1011, $_11110101);
+		$recip = self::sc25519_sqmul($recip, 126, $_1010011);
+		$recip = self::sc25519_sqmul($recip, 9, $_10);
+		$recip = self::sc25519_mul($recip, $_11110101);
+		$recip = self::sc25519_sqmul($recip, 7, $_1100111);
+		$recip = self::sc25519_sqmul($recip, 9, $_11110101);
+		$recip = self::sc25519_sqmul($recip, 11, $_10111101);
+		$recip = self::sc25519_sqmul($recip, 8, $_11100111);
+		$recip = self::sc25519_sqmul($recip, 9, $_1101011);
+		$recip = self::sc25519_sqmul($recip, 6, $_1011);
+		$recip = self::sc25519_sqmul($recip, 14, $_10010011);
+		$recip = self::sc25519_sqmul($recip, 10, $_1100011);
+		$recip = self::sc25519_sqmul($recip, 9, $_10010111);
+		$recip = self::sc25519_sqmul($recip, 10, $_11110101);
+		$recip = self::sc25519_sqmul($recip, 8, $_11010011);
+		return self::sc25519_sqmul($recip, 8, $_11101011);
+	}
+
+	/**
+	 * @param string $s
+	 * @return string
+	 */
+	public static function clamp($s)
+	{
+		$s_ = self::stringToIntArray($s);
+		$s_[0] &= 248;
+		$s_[31] |= 64;
+		$s_[31] &= 128;
+		return self::intArrayToString($s_);
+	}
 }

Braces +41 added lines, -82 removed lines

@@ -13,8 +13,7 @@ 
  *
  * @ref https://github.com/jedisct1/libsodium/blob/master/src/libsodium/crypto_core/curve25519/ref10/curve25519_ref10.c
  */
-abstract class ParagonIE_Sodium_Core_Curve25519 extends ParagonIE_Sodium_Core_Curve25519_H
-{
+abstract class ParagonIE_Sodium_Core_Curve25519 extends ParagonIE_Sodium_Core_Curve25519_H {
     /**
      * Get a field element of size 10 with a value of 0
      *
@@ -22,8 +21,7 @@ 
      *
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      */
-    public static function fe_0()
-    {
+    public static function fe_0() {
         return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
             array(0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
         );
@@ -36,8 +34,7 @@ 
      *
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      */
-    public static function fe_1()
-    {
+    public static function fe_1() {
         return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
             array(1, 0, 0, 0, 0, 0, 0, 0, 0, 0)
         );
@@ -100,8 +97,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      */
-    public static function fe_copy(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
+    public static function fe_copy(ParagonIE_Sodium_Core_Curve25519_Fe $f) {
         $h = clone $f;
         return $h;
     }
@@ -117,8 +113,7 @@ 
      * @throws RangeException
      * @throws TypeError
      */
-    public static function fe_frombytes($s)
-    {
+    public static function fe_frombytes($s) {
         if (self::strlen($s) !== 32) {
             throw new RangeException('Expected a 32-byte string.');
         }
@@ -189,8 +184,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Fe $h
      * @return string
      */
-    public static function fe_tobytes(ParagonIE_Sodium_Core_Curve25519_Fe $h)
-    {
+    public static function fe_tobytes(ParagonIE_Sodium_Core_Curve25519_Fe $h) {
         $h0 = (int) $h[0];
         $h1 = (int) $h[1];
         $h2 = (int) $h[2];
@@ -296,8 +290,7 @@ 
      * @throws SodiumException
      * @throws TypeError
      */
-    public static function fe_isnegative(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
+    public static function fe_isnegative(ParagonIE_Sodium_Core_Curve25519_Fe $f) {
         $str = self::fe_tobytes($f);
         return (int) (self::chrToInt($str[0]) & 1);
     }
@@ -312,8 +305,7 @@ 
      * @throws SodiumException
      * @throws TypeError
      */
-    public static function fe_isnonzero(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
+    public static function fe_isnonzero(ParagonIE_Sodium_Core_Curve25519_Fe $f) {
         static $zero;
         if ($zero === null) {
             $zero = str_repeat("\x00", 32);
@@ -557,8 +549,7 @@ 
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      * @psalm-suppress MixedAssignment
      */
-    public static function fe_neg(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
+    public static function fe_neg(ParagonIE_Sodium_Core_Curve25519_Fe $f) {
         $h = new ParagonIE_Sodium_Core_Curve25519_Fe();
         for ($i = 0; $i < 10; ++$i) {
             $h[$i] = -$f[$i];
@@ -576,8 +567,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      */
-    public static function fe_sq(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
+    public static function fe_sq(ParagonIE_Sodium_Core_Curve25519_Fe $f) {
         $f0 = (int) $f[0];
         $f1 = (int) $f[1];
         $f2 = (int) $f[2];
@@ -738,8 +728,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      */
-    public static function fe_sq2(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
+    public static function fe_sq2(ParagonIE_Sodium_Core_Curve25519_Fe $f) {
         $f0 = (int) $f[0];
         $f1 = (int) $f[1];
         $f2 = (int) $f[2];
@@ -896,8 +885,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Fe $Z
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      */
-    public static function fe_invert(ParagonIE_Sodium_Core_Curve25519_Fe $Z)
-    {
+    public static function fe_invert(ParagonIE_Sodium_Core_Curve25519_Fe $Z) {
         $z = clone $Z;
         $t0 = self::fe_sq($z);
         $t1 = self::fe_sq($t0);
@@ -956,8 +944,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Fe $z
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      */
-    public static function fe_pow22523(ParagonIE_Sodium_Core_Curve25519_Fe $z)
-    {
+    public static function fe_pow22523(ParagonIE_Sodium_Core_Curve25519_Fe $z) {
         # fe_sq(t0, z);
         # fe_sq(t1, t0);
         # fe_sq(t1, t1);
@@ -1083,8 +1070,7 @@ 
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      * @psalm-suppress MixedOperand
      */
-    public static function fe_sub(ParagonIE_Sodium_Core_Curve25519_Fe $f, ParagonIE_Sodium_Core_Curve25519_Fe $g)
-    {
+    public static function fe_sub(ParagonIE_Sodium_Core_Curve25519_Fe $f, ParagonIE_Sodium_Core_Curve25519_Fe $g) {
         return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
             array(
                 (int) ($f[0] - $g[0]),
@@ -1140,8 +1126,7 @@ 
      * @throws SodiumException
      * @throws TypeError
      */
-    public static function slide($a)
-    {
+    public static function slide($a) {
         if (self::strlen($a) < 256) {
             if (self::strlen($a) < 16) {
                 $a = str_pad($a, 256, '0', STR_PAD_RIGHT);
@@ -1195,8 +1180,7 @@ 
      * @throws SodiumException
      * @throws TypeError
      */
-    public static function ge_frombytes_negate_vartime($s)
-    {
+    public static function ge_frombytes_negate_vartime($s) {
         static $d = null;
         if (!$d) {
             $d = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d);
@@ -1339,8 +1323,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2
      */
-    public static function ge_p1p1_to_p2(ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p)
-    {
+    public static function ge_p1p1_to_p2(ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p) {
         $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P2();
         $r->X = self::fe_mul($p->X, $p->T);
         $r->Y = self::fe_mul($p->Y, $p->Z);
@@ -1354,8 +1337,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
      */
-    public static function ge_p1p1_to_p3(ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p)
-    {
+    public static function ge_p1p1_to_p3(ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p) {
         $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P3();
         $r->X = self::fe_mul($p->X, $p->T);
         $r->Y = self::fe_mul($p->Y, $p->Z);
@@ -1369,8 +1351,7 @@ 
      *
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2
      */
-    public static function ge_p2_0()
-    {
+    public static function ge_p2_0() {
         return new ParagonIE_Sodium_Core_Curve25519_Ge_P2(
             self::fe_0(),
             self::fe_1(),
@@ -1384,8 +1365,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Ge_P2 $p
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
      */
-    public static function ge_p2_dbl(ParagonIE_Sodium_Core_Curve25519_Ge_P2 $p)
-    {
+    public static function ge_p2_dbl(ParagonIE_Sodium_Core_Curve25519_Ge_P2 $p) {
         $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1();
 
         $r->X = self::fe_sq($p->X);
@@ -1406,8 +1386,7 @@ 
      *
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
      */
-    public static function ge_p3_0()
-    {
+    public static function ge_p3_0() {
         return new ParagonIE_Sodium_Core_Curve25519_Ge_P3(
             self::fe_0(),
             self::fe_1(),
@@ -1422,8 +1401,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_Cached
      */
-    public static function ge_p3_to_cached(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p)
-    {
+    public static function ge_p3_to_cached(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p) {
         static $d2 = null;
         if ($d2 === null) {
             $d2 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d2);
@@ -1443,8 +1421,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2
      */
-    public static function ge_p3_to_p2(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p)
-    {
+    public static function ge_p3_to_p2(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p) {
         return new ParagonIE_Sodium_Core_Curve25519_Ge_P2(
             self::fe_copy($p->X),
             self::fe_copy($p->Y),
@@ -1460,8 +1437,7 @@ 
      * @throws SodiumException
      * @throws TypeError
      */
-    public static function ge_p3_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h)
-    {
+    public static function ge_p3_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h) {
         $recip = self::fe_invert($h->Z);
         $x = self::fe_mul($h->X, $recip);
         $y = self::fe_mul($h->Y, $recip);
@@ -1478,8 +1454,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
      */
-    public static function ge_p3_dbl(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p)
-    {
+    public static function ge_p3_dbl(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p) {
         $q = self::ge_p3_to_p2($p);
         return self::ge_p2_dbl($q);
     }
@@ -1487,8 +1462,7 @@ 
     /**
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_Precomp
      */
-    public static function ge_precomp_0()
-    {
+    public static function ge_precomp_0() {
         return new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
             self::fe_1(),
             self::fe_1(),
@@ -1503,8 +1477,7 @@ 
      * @param int $c
      * @return int
      */
-    public static function equal($b, $c)
-    {
+    public static function equal($b, $c) {
         return (int) ((($b ^ $c) - 1) >> 31) & 1;
     }
 
@@ -1516,8 +1489,7 @@ 
      * @throws SodiumException
      * @throws TypeError
      */
-    public static function negative($char)
-    {
+    public static function negative($char) {
         if (is_int($char)) {
             return ($char >> 63) & 1;
         }
@@ -1576,8 +1548,7 @@ 
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_Cached
      * @throws SodiumException
      */
-    public static function ge_cmov8_cached(array $cached, $b)
-    {
+    public static function ge_cmov8_cached(array $cached, $b) {
         // const unsigned char bnegative = negative(b);
         // const unsigned char babs      = b - (((-bnegative) & b) * ((signed char) 1 << 1));
         $bnegative = self::negative($b);
@@ -1628,8 +1599,7 @@ 
      * @psalm-suppress MixedArrayAccess
      * @psalm-suppress MixedArrayOffset
      */
-    public static function ge_select($pos = 0, $b = 0)
-    {
+    public static function ge_select($pos = 0, $b = 0) {
         static $base = null;
         if ($base === null) {
             $base = array();
@@ -1711,8 +1681,7 @@ 
      * @throws SodiumException
      * @throws TypeError
      */
-    public static function ge_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P2 $h)
-    {
+    public static function ge_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P2 $h) {
         $recip = self::fe_invert($h->Z);
         $x = self::fe_mul($h->X, $recip);
         $y = self::fe_mul($h->Y, $recip);
@@ -1861,8 +1830,7 @@ 
      * @psalm-suppress MixedAssignment
      * @psalm-suppress MixedOperand
      */
-    public static function ge_scalarmult($a, $p)
-    {
+    public static function ge_scalarmult($a, $p) {
         $e = array_fill(0, 64, 0);
 
         /** @var ParagonIE_Sodium_Core_Curve25519_Ge_Cached[] $pi */
@@ -1999,8 +1967,7 @@ 
      * @psalm-suppress MixedAssignment
      * @psalm-suppress MixedOperand
      */
-    public static function ge_scalarmult_base($a)
-    {
+    public static function ge_scalarmult_base($a) {
         /** @var array<int, int> $e */
         $e = array();
         $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1();
@@ -2059,8 +2026,7 @@ 
      * @return string
      * @throws TypeError
      */
-    public static function sc_muladd($a, $b, $c)
-    {
+    public static function sc_muladd($a, $b, $c) {
         $a0 = 2097151 & self::load_3(self::substr($a, 0, 3));
         $a1 = 2097151 & (self::load_4(self::substr($a, 2, 4)) >> 5);
         $a2 = 2097151 & (self::load_3(self::substr($a, 5, 3)) >> 2);
@@ -2510,8 +2476,7 @@ 
      * @return string
      * @throws TypeError
      */
-    public static function sc_reduce($s)
-    {
+    public static function sc_reduce($s) {
         $s0 = 2097151 & self::load_3(self::substr($s, 0, 3));
         $s1 = 2097151 & (self::load_4(self::substr($s, 2, 4)) >> 5);
         $s2 = 2097151 & (self::load_3(self::substr($s, 5, 3)) >> 2);
@@ -2827,8 +2792,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
      */
-    public static function ge_mul_l(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A)
-    {
+    public static function ge_mul_l(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A) {
         $aslide = array(
             13, 0, 0, 0, 0, -1, 0, 0, 0, 0, -11, 0, 0, 0, 0, 0, 0, -5, 0, 0, 0,
             0, 0, 0, -3, 0, 0, 0, 0, -13, 0, 0, 0, 0, 7, 0, 0, 0, 0, 0, 3, 0,
@@ -2888,8 +2852,7 @@ 
      * @param string $b
      * @return string
      */
-    public static function sc25519_mul($a, $b)
-    {
+    public static function sc25519_mul($a, $b) {
         //    int64_t a0  = 2097151 & load_3(a);
         //    int64_t a1  = 2097151 & (load_4(a + 2) >> 5);
         //    int64_t a2  = 2097151 & (load_3(a + 5) >> 2);
@@ -3703,8 +3666,7 @@ 
      * @param string $s
      * @return string
      */
-    public static function sc25519_sq($s)
-    {
+    public static function sc25519_sq($s) {
         return self::sc25519_mul($s, $s);
     }
 
@@ -3714,8 +3676,7 @@ 
      * @param string $a
      * @return string
      */
-    public static function sc25519_sqmul($s, $n, $a)
-    {
+    public static function sc25519_sqmul($s, $n, $a) {
         for ($i = 0; $i < $n; ++$i) {
             $s = self::sc25519_sq($s);
         }
@@ -3726,8 +3687,7 @@ 
      * @param string $s
      * @return string
      */
-    public static function sc25519_invert($s)
-    {
+    public static function sc25519_invert($s) {
         $_10 = self::sc25519_sq($s);
         $_11 = self::sc25519_mul($s, $_10);
         $_100 = self::sc25519_mul($s, $_11);
@@ -3774,8 +3734,7 @@ 
      * @param string $s
      * @return string
      */
-    public static function clamp($s)
-    {
+    public static function clamp($s) {
         $s_ = self::stringToIntArray($s);
         $s_[0] &= 248;
         $s_[31] |= 64;

Spacing +1611 added lines, -1611 removed lines

@@ -1,6 +1,6 @@ 
 <?php
 
-if (class_exists('ParagonIE_Sodium_Core_Curve25519', false)) {
+if ( class_exists( 'ParagonIE_Sodium_Core_Curve25519', false ) ) {
     return;
 }
 
@@ -25,7 +25,7 @@ 
     public static function fe_0()
     {
         return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
-            array(0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
+            array( 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 )
         );
     }
 
@@ -39,7 +39,7 @@ 
     public static function fe_1()
     {
         return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
-            array(1, 0, 0, 0, 0, 0, 0, 0, 0, 0)
+            array( 1, 0, 0, 0, 0, 0, 0, 0, 0, 0 )
         );
     }
 
@@ -60,10 +60,10 @@ 
     ) {
         /** @var array<int, int> $arr */
         $arr = array();
-        for ($i = 0; $i < 10; ++$i) {
-            $arr[$i] = (int) ($f[$i] + $g[$i]);
+        for ( $i = 0; $i < 10; ++$i ) {
+            $arr[ $i ] = (int)( $f[ $i ] + $g[ $i ] );
         }
-        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($arr);
+        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( $arr );
     }
 
     /**
@@ -85,11 +85,11 @@ 
         /** @var array<int, int> $h */
         $h = array();
         $b *= -1;
-        for ($i = 0; $i < 10; ++$i) {
-            $x = (($f[$i] ^ $g[$i]) & $b);
-            $h[$i] = ($f[$i]) ^ $x;
+        for ( $i = 0; $i < 10; ++$i ) {
+            $x = ( ( $f[ $i ] ^ $g[ $i ] ) & $b );
+            $h[ $i ] = ( $f[ $i ] ) ^ $x;
         }
-        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($h);
+        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( $h );
     }
 
     /**
@@ -100,7 +100,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      */
-    public static function fe_copy(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+    public static function fe_copy( ParagonIE_Sodium_Core_Curve25519_Fe $f )
     {
         $h = clone $f;
         return $h;
@@ -117,66 +117,66 @@ 
      * @throws RangeException
      * @throws TypeError
      */
-    public static function fe_frombytes($s)
+    public static function fe_frombytes( $s )
     {
-        if (self::strlen($s) !== 32) {
-            throw new RangeException('Expected a 32-byte string.');
+        if ( self::strlen( $s ) !== 32 ) {
+            throw new RangeException( 'Expected a 32-byte string.' );
         }
-        $h0 = self::load_4($s);
-        $h1 = self::load_3(self::substr($s, 4, 3)) << 6;
-        $h2 = self::load_3(self::substr($s, 7, 3)) << 5;
-        $h3 = self::load_3(self::substr($s, 10, 3)) << 3;
-        $h4 = self::load_3(self::substr($s, 13, 3)) << 2;
-        $h5 = self::load_4(self::substr($s, 16, 4));
-        $h6 = self::load_3(self::substr($s, 20, 3)) << 7;
-        $h7 = self::load_3(self::substr($s, 23, 3)) << 5;
-        $h8 = self::load_3(self::substr($s, 26, 3)) << 4;
-        $h9 = (self::load_3(self::substr($s, 29, 3)) & 8388607) << 2;
-
-        $carry9 = ($h9 + (1 << 24)) >> 25;
-        $h0 += self::mul($carry9, 19, 5);
+        $h0 = self::load_4( $s );
+        $h1 = self::load_3( self::substr( $s, 4, 3 ) ) << 6;
+        $h2 = self::load_3( self::substr( $s, 7, 3 ) ) << 5;
+        $h3 = self::load_3( self::substr( $s, 10, 3 ) ) << 3;
+        $h4 = self::load_3( self::substr( $s, 13, 3 ) ) << 2;
+        $h5 = self::load_4( self::substr( $s, 16, 4 ) );
+        $h6 = self::load_3( self::substr( $s, 20, 3 ) ) << 7;
+        $h7 = self::load_3( self::substr( $s, 23, 3 ) ) << 5;
+        $h8 = self::load_3( self::substr( $s, 26, 3 ) ) << 4;
+        $h9 = ( self::load_3( self::substr( $s, 29, 3 ) ) & 8388607 ) << 2;
+
+        $carry9 = ( $h9 + ( 1 << 24 ) ) >> 25;
+        $h0 += self::mul( $carry9, 19, 5 );
         $h9 -= $carry9 << 25;
-        $carry1 = ($h1 + (1 << 24)) >> 25;
+        $carry1 = ( $h1 + ( 1 << 24 ) ) >> 25;
         $h2 += $carry1;
         $h1 -= $carry1 << 25;
-        $carry3 = ($h3 + (1 << 24)) >> 25;
+        $carry3 = ( $h3 + ( 1 << 24 ) ) >> 25;
         $h4 += $carry3;
         $h3 -= $carry3 << 25;
-        $carry5 = ($h5 + (1 << 24)) >> 25;
+        $carry5 = ( $h5 + ( 1 << 24 ) ) >> 25;
         $h6 += $carry5;
         $h5 -= $carry5 << 25;
-        $carry7 = ($h7 + (1 << 24)) >> 25;
+        $carry7 = ( $h7 + ( 1 << 24 ) ) >> 25;
         $h8 += $carry7;
         $h7 -= $carry7 << 25;
 
-        $carry0 = ($h0 + (1 << 25)) >> 26;
+        $carry0 = ( $h0 + ( 1 << 25 ) ) >> 26;
         $h1 += $carry0;
         $h0 -= $carry0 << 26;
-        $carry2 = ($h2 + (1 << 25)) >> 26;
+        $carry2 = ( $h2 + ( 1 << 25 ) ) >> 26;
         $h3 += $carry2;
         $h2 -= $carry2 << 26;
-        $carry4 = ($h4 + (1 << 25)) >> 26;
+        $carry4 = ( $h4 + ( 1 << 25 ) ) >> 26;
         $h5 += $carry4;
         $h4 -= $carry4 << 26;
-        $carry6 = ($h6 + (1 << 25)) >> 26;
+        $carry6 = ( $h6 + ( 1 << 25 ) ) >> 26;
         $h7 += $carry6;
         $h6 -= $carry6 << 26;
-        $carry8 = ($h8 + (1 << 25)) >> 26;
+        $carry8 = ( $h8 + ( 1 << 25 ) ) >> 26;
         $h9 += $carry8;
         $h8 -= $carry8 << 26;
 
         return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
             array(
-                (int) $h0,
-                (int) $h1,
-                (int) $h2,
-                (int) $h3,
-                (int) $h4,
-                (int) $h5,
-                (int) $h6,
-                (int) $h7,
-                (int) $h8,
-                (int) $h9
+                (int)$h0,
+                (int)$h1,
+                (int)$h2,
+                (int)$h3,
+                (int)$h4,
+                (int)$h5,
+                (int)$h6,
+                (int)$h7,
+                (int)$h8,
+                (int)$h9
             )
         );
     }
@@ -189,32 +189,32 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Fe $h
      * @return string
      */
-    public static function fe_tobytes(ParagonIE_Sodium_Core_Curve25519_Fe $h)
+    public static function fe_tobytes( ParagonIE_Sodium_Core_Curve25519_Fe $h )
     {
-        $h0 = (int) $h[0];
-        $h1 = (int) $h[1];
-        $h2 = (int) $h[2];
-        $h3 = (int) $h[3];
-        $h4 = (int) $h[4];
-        $h5 = (int) $h[5];
-        $h6 = (int) $h[6];
-        $h7 = (int) $h[7];
-        $h8 = (int) $h[8];
-        $h9 = (int) $h[9];
-
-        $q = (self::mul($h9, 19, 5) + (1 << 24)) >> 25;
-        $q = ($h0 + $q) >> 26;
-        $q = ($h1 + $q) >> 25;
-        $q = ($h2 + $q) >> 26;
-        $q = ($h3 + $q) >> 25;
-        $q = ($h4 + $q) >> 26;
-        $q = ($h5 + $q) >> 25;
-        $q = ($h6 + $q) >> 26;
-        $q = ($h7 + $q) >> 25;
-        $q = ($h8 + $q) >> 26;
-        $q = ($h9 + $q) >> 25;
-
-        $h0 += self::mul($q, 19, 5);
+        $h0 = (int)$h[ 0 ];
+        $h1 = (int)$h[ 1 ];
+        $h2 = (int)$h[ 2 ];
+        $h3 = (int)$h[ 3 ];
+        $h4 = (int)$h[ 4 ];
+        $h5 = (int)$h[ 5 ];
+        $h6 = (int)$h[ 6 ];
+        $h7 = (int)$h[ 7 ];
+        $h8 = (int)$h[ 8 ];
+        $h9 = (int)$h[ 9 ];
+
+        $q = ( self::mul( $h9, 19, 5 ) + ( 1 << 24 ) ) >> 25;
+        $q = ( $h0 + $q ) >> 26;
+        $q = ( $h1 + $q ) >> 25;
+        $q = ( $h2 + $q ) >> 26;
+        $q = ( $h3 + $q ) >> 25;
+        $q = ( $h4 + $q ) >> 26;
+        $q = ( $h5 + $q ) >> 25;
+        $q = ( $h6 + $q ) >> 26;
+        $q = ( $h7 + $q ) >> 25;
+        $q = ( $h8 + $q ) >> 26;
+        $q = ( $h9 + $q ) >> 25;
+
+        $h0 += self::mul( $q, 19, 5 );
 
         $carry0 = $h0 >> 26;
         $h1 += $carry0;
@@ -250,40 +250,40 @@ 
          * @var array<int, int>
          */
         $s = array(
-            (int) (($h0 >> 0) & 0xff),
-            (int) (($h0 >> 8) & 0xff),
-            (int) (($h0 >> 16) & 0xff),
-            (int) ((($h0 >> 24) | ($h1 << 2)) & 0xff),
-            (int) (($h1 >> 6) & 0xff),
-            (int) (($h1 >> 14) & 0xff),
-            (int) ((($h1 >> 22) | ($h2 << 3)) & 0xff),
-            (int) (($h2 >> 5) & 0xff),
-            (int) (($h2 >> 13) & 0xff),
-            (int) ((($h2 >> 21) | ($h3 << 5)) & 0xff),
-            (int) (($h3 >> 3) & 0xff),
-            (int) (($h3 >> 11) & 0xff),
-            (int) ((($h3 >> 19) | ($h4 << 6)) & 0xff),
-            (int) (($h4 >> 2) & 0xff),
-            (int) (($h4 >> 10) & 0xff),
-            (int) (($h4 >> 18) & 0xff),
-            (int) (($h5 >> 0) & 0xff),
-            (int) (($h5 >> 8) & 0xff),
-            (int) (($h5 >> 16) & 0xff),
-            (int) ((($h5 >> 24) | ($h6 << 1)) & 0xff),
-            (int) (($h6 >> 7) & 0xff),
-            (int) (($h6 >> 15) & 0xff),
-            (int) ((($h6 >> 23) | ($h7 << 3)) & 0xff),
-            (int) (($h7 >> 5) & 0xff),
-            (int) (($h7 >> 13) & 0xff),
-            (int) ((($h7 >> 21) | ($h8 << 4)) & 0xff),
-            (int) (($h8 >> 4) & 0xff),
-            (int) (($h8 >> 12) & 0xff),
-            (int) ((($h8 >> 20) | ($h9 << 6)) & 0xff),
-            (int) (($h9 >> 2) & 0xff),
-            (int) (($h9 >> 10) & 0xff),
-            (int) (($h9 >> 18) & 0xff)
+            (int)( ( $h0 >> 0 ) & 0xff ),
+            (int)( ( $h0 >> 8 ) & 0xff ),
+            (int)( ( $h0 >> 16 ) & 0xff ),
+            (int)( ( ( $h0 >> 24 ) | ( $h1 << 2 ) ) & 0xff ),
+            (int)( ( $h1 >> 6 ) & 0xff ),
+            (int)( ( $h1 >> 14 ) & 0xff ),
+            (int)( ( ( $h1 >> 22 ) | ( $h2 << 3 ) ) & 0xff ),
+            (int)( ( $h2 >> 5 ) & 0xff ),
+            (int)( ( $h2 >> 13 ) & 0xff ),
+            (int)( ( ( $h2 >> 21 ) | ( $h3 << 5 ) ) & 0xff ),
+            (int)( ( $h3 >> 3 ) & 0xff ),
+            (int)( ( $h3 >> 11 ) & 0xff ),
+            (int)( ( ( $h3 >> 19 ) | ( $h4 << 6 ) ) & 0xff ),
+            (int)( ( $h4 >> 2 ) & 0xff ),
+            (int)( ( $h4 >> 10 ) & 0xff ),
+            (int)( ( $h4 >> 18 ) & 0xff ),
+            (int)( ( $h5 >> 0 ) & 0xff ),
+            (int)( ( $h5 >> 8 ) & 0xff ),
+            (int)( ( $h5 >> 16 ) & 0xff ),
+            (int)( ( ( $h5 >> 24 ) | ( $h6 << 1 ) ) & 0xff ),
+            (int)( ( $h6 >> 7 ) & 0xff ),
+            (int)( ( $h6 >> 15 ) & 0xff ),
+            (int)( ( ( $h6 >> 23 ) | ( $h7 << 3 ) ) & 0xff ),
+            (int)( ( $h7 >> 5 ) & 0xff ),
+            (int)( ( $h7 >> 13 ) & 0xff ),
+            (int)( ( ( $h7 >> 21 ) | ( $h8 << 4 ) ) & 0xff ),
+            (int)( ( $h8 >> 4 ) & 0xff ),
+            (int)( ( $h8 >> 12 ) & 0xff ),
+            (int)( ( ( $h8 >> 20 ) | ( $h9 << 6 ) ) & 0xff ),
+            (int)( ( $h9 >> 2 ) & 0xff ),
+            (int)( ( $h9 >> 10 ) & 0xff ),
+            (int)( ( $h9 >> 18 ) & 0xff )
         );
-        return self::intArrayToString($s);
+        return self::intArrayToString( $s );
     }
 
     /**
@@ -296,10 +296,10 @@ 
      * @throws SodiumException
      * @throws TypeError
      */
-    public static function fe_isnegative(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+    public static function fe_isnegative( ParagonIE_Sodium_Core_Curve25519_Fe $f )
     {
-        $str = self::fe_tobytes($f);
-        return (int) (self::chrToInt($str[0]) & 1);
+        $str = self::fe_tobytes( $f );
+        return (int)( self::chrToInt( $str[ 0 ] ) & 1 );
     }
 
     /**
@@ -312,16 +312,16 @@ 
      * @throws SodiumException
      * @throws TypeError
      */
-    public static function fe_isnonzero(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+    public static function fe_isnonzero( ParagonIE_Sodium_Core_Curve25519_Fe $f )
     {
         static $zero;
-        if ($zero === null) {
-            $zero = str_repeat("\x00", 32);
+        if ( $zero === null ) {
+            $zero = str_repeat( "\x00", 32 );
         }
         /** @var string $zero */
         /** @var string $str */
-        $str = self::fe_tobytes($f);
-        return !self::verify_32($str, (string) $zero);
+        $str = self::fe_tobytes( $f );
+        return ! self::verify_32( $str, (string)$zero );
     }
 
     /**
@@ -342,206 +342,206 @@ 
         ParagonIE_Sodium_Core_Curve25519_Fe $f,
         ParagonIE_Sodium_Core_Curve25519_Fe $g
     ) {
-        $f0 = $f[0];
-        $f1 = $f[1];
-        $f2 = $f[2];
-        $f3 = $f[3];
-        $f4 = $f[4];
-        $f5 = $f[5];
-        $f6 = $f[6];
-        $f7 = $f[7];
-        $f8 = $f[8];
-        $f9 = $f[9];
-        $g0 = $g[0];
-        $g1 = $g[1];
-        $g2 = $g[2];
-        $g3 = $g[3];
-        $g4 = $g[4];
-        $g5 = $g[5];
-        $g6 = $g[6];
-        $g7 = $g[7];
-        $g8 = $g[8];
-        $g9 = $g[9];
-        $g1_19 = self::mul($g1, 19, 5);
-        $g2_19 = self::mul($g2, 19, 5);
-        $g3_19 = self::mul($g3, 19, 5);
-        $g4_19 = self::mul($g4, 19, 5);
-        $g5_19 = self::mul($g5, 19, 5);
-        $g6_19 = self::mul($g6, 19, 5);
-        $g7_19 = self::mul($g7, 19, 5);
-        $g8_19 = self::mul($g8, 19, 5);
-        $g9_19 = self::mul($g9, 19, 5);
+        $f0 = $f[ 0 ];
+        $f1 = $f[ 1 ];
+        $f2 = $f[ 2 ];
+        $f3 = $f[ 3 ];
+        $f4 = $f[ 4 ];
+        $f5 = $f[ 5 ];
+        $f6 = $f[ 6 ];
+        $f7 = $f[ 7 ];
+        $f8 = $f[ 8 ];
+        $f9 = $f[ 9 ];
+        $g0 = $g[ 0 ];
+        $g1 = $g[ 1 ];
+        $g2 = $g[ 2 ];
+        $g3 = $g[ 3 ];
+        $g4 = $g[ 4 ];
+        $g5 = $g[ 5 ];
+        $g6 = $g[ 6 ];
+        $g7 = $g[ 7 ];
+        $g8 = $g[ 8 ];
+        $g9 = $g[ 9 ];
+        $g1_19 = self::mul( $g1, 19, 5 );
+        $g2_19 = self::mul( $g2, 19, 5 );
+        $g3_19 = self::mul( $g3, 19, 5 );
+        $g4_19 = self::mul( $g4, 19, 5 );
+        $g5_19 = self::mul( $g5, 19, 5 );
+        $g6_19 = self::mul( $g6, 19, 5 );
+        $g7_19 = self::mul( $g7, 19, 5 );
+        $g8_19 = self::mul( $g8, 19, 5 );
+        $g9_19 = self::mul( $g9, 19, 5 );
         $f1_2 = $f1 << 1;
         $f3_2 = $f3 << 1;
         $f5_2 = $f5 << 1;
         $f7_2 = $f7 << 1;
         $f9_2 = $f9 << 1;
-        $f0g0    = self::mul($f0,    $g0, 26);
-        $f0g1    = self::mul($f0,    $g1, 25);
-        $f0g2    = self::mul($f0,    $g2, 26);
-        $f0g3    = self::mul($f0,    $g3, 25);
-        $f0g4    = self::mul($f0,    $g4, 26);
-        $f0g5    = self::mul($f0,    $g5, 25);
-        $f0g6    = self::mul($f0,    $g6, 26);
-        $f0g7    = self::mul($f0,    $g7, 25);
-        $f0g8    = self::mul($f0,    $g8, 26);
-        $f0g9    = self::mul($f0,    $g9, 26);
-        $f1g0    = self::mul($f1,    $g0, 26);
-        $f1g1_2  = self::mul($f1_2,  $g1, 25);
-        $f1g2    = self::mul($f1,    $g2, 26);
-        $f1g3_2  = self::mul($f1_2,  $g3, 25);
-        $f1g4    = self::mul($f1,    $g4, 26);
-        $f1g5_2  = self::mul($f1_2,  $g5, 25);
-        $f1g6    = self::mul($f1,    $g6, 26);
-        $f1g7_2  = self::mul($f1_2,  $g7, 25);
-        $f1g8    = self::mul($f1,    $g8, 26);
-        $f1g9_38 = self::mul($g9_19, $f1_2, 26);
-        $f2g0    = self::mul($f2,    $g0, 26);
-        $f2g1    = self::mul($f2,    $g1, 25);
-        $f2g2    = self::mul($f2,    $g2, 26);
-        $f2g3    = self::mul($f2,    $g3, 25);
-        $f2g4    = self::mul($f2,    $g4, 26);
-        $f2g5    = self::mul($f2,    $g5, 25);
-        $f2g6    = self::mul($f2,    $g6, 26);
-        $f2g7    = self::mul($f2,    $g7, 25);
-        $f2g8_19 = self::mul($g8_19, $f2, 26);
-        $f2g9_19 = self::mul($g9_19, $f2, 26);
-        $f3g0    = self::mul($f3,    $g0, 26);
-        $f3g1_2  = self::mul($f3_2,  $g1, 25);
-        $f3g2    = self::mul($f3,    $g2, 26);
-        $f3g3_2  = self::mul($f3_2,  $g3, 25);
-        $f3g4    = self::mul($f3,    $g4, 26);
-        $f3g5_2  = self::mul($f3_2,  $g5, 25);
-        $f3g6    = self::mul($f3,    $g6, 26);
-        $f3g7_38 = self::mul($g7_19, $f3_2, 26);
-        $f3g8_19 = self::mul($g8_19, $f3, 25);
-        $f3g9_38 = self::mul($g9_19, $f3_2, 26);
-        $f4g0    = self::mul($f4,    $g0, 26);
-        $f4g1    = self::mul($f4,    $g1, 25);
-        $f4g2    = self::mul($f4,    $g2, 26);
-        $f4g3    = self::mul($f4,    $g3, 25);
-        $f4g4    = self::mul($f4,    $g4, 26);
-        $f4g5    = self::mul($f4,    $g5, 25);
-        $f4g6_19 = self::mul($g6_19, $f4, 26);
-        $f4g7_19 = self::mul($g7_19, $f4, 26);
-        $f4g8_19 = self::mul($g8_19, $f4, 26);
-        $f4g9_19 = self::mul($g9_19, $f4, 26);
-        $f5g0    = self::mul($f5,    $g0, 26);
-        $f5g1_2  = self::mul($f5_2,  $g1, 25);
-        $f5g2    = self::mul($f5,    $g2, 26);
-        $f5g3_2  = self::mul($f5_2,  $g3, 25);
-        $f5g4    = self::mul($f5,    $g4, 26);
-        $f5g5_38 = self::mul($g5_19, $f5_2, 26);
-        $f5g6_19 = self::mul($g6_19, $f5, 25);
-        $f5g7_38 = self::mul($g7_19, $f5_2, 26);
-        $f5g8_19 = self::mul($g8_19, $f5, 25);
-        $f5g9_38 = self::mul($g9_19, $f5_2, 26);
-        $f6g0    = self::mul($f6,    $g0, 26);
-        $f6g1    = self::mul($f6,    $g1, 25);
-        $f6g2    = self::mul($f6,    $g2, 26);
-        $f6g3    = self::mul($f6,    $g3, 25);
-        $f6g4_19 = self::mul($g4_19, $f6, 26);
-        $f6g5_19 = self::mul($g5_19, $f6, 26);
-        $f6g6_19 = self::mul($g6_19, $f6, 26);
-        $f6g7_19 = self::mul($g7_19, $f6, 26);
-        $f6g8_19 = self::mul($g8_19, $f6, 26);
-        $f6g9_19 = self::mul($g9_19, $f6, 26);
-        $f7g0    = self::mul($f7,    $g0, 26);
-        $f7g1_2  = self::mul($f7_2,  $g1, 25);
-        $f7g2    = self::mul($f7,    $g2, 26);
-        $f7g3_38 = self::mul($g3_19, $f7_2, 26);
-        $f7g4_19 = self::mul($g4_19, $f7, 26);
-        $f7g5_38 = self::mul($g5_19, $f7_2, 26);
-        $f7g6_19 = self::mul($g6_19, $f7, 25);
-        $f7g7_38 = self::mul($g7_19, $f7_2, 26);
-        $f7g8_19 = self::mul($g8_19, $f7, 25);
-        $f7g9_38 = self::mul($g9_19,$f7_2, 26);
-        $f8g0    = self::mul($f8,    $g0, 26);
-        $f8g1    = self::mul($f8,    $g1, 25);
-        $f8g2_19 = self::mul($g2_19, $f8, 26);
-        $f8g3_19 = self::mul($g3_19, $f8, 26);
-        $f8g4_19 = self::mul($g4_19, $f8, 26);
-        $f8g5_19 = self::mul($g5_19, $f8, 26);
-        $f8g6_19 = self::mul($g6_19, $f8, 26);
-        $f8g7_19 = self::mul($g7_19, $f8, 26);
-        $f8g8_19 = self::mul($g8_19, $f8, 26);
-        $f8g9_19 = self::mul($g9_19, $f8, 26);
-        $f9g0    = self::mul($f9,    $g0, 26);
-        $f9g1_38 = self::mul($g1_19, $f9_2, 26);
-        $f9g2_19 = self::mul($g2_19, $f9, 25);
-        $f9g3_38 = self::mul($g3_19, $f9_2, 26);
-        $f9g4_19 = self::mul($g4_19, $f9, 25);
-        $f9g5_38 = self::mul($g5_19, $f9_2, 26);
-        $f9g6_19 = self::mul($g6_19, $f9, 25);
-        $f9g7_38 = self::mul($g7_19, $f9_2, 26);
-        $f9g8_19 = self::mul($g8_19, $f9, 25);
-        $f9g9_38 = self::mul($g9_19, $f9_2, 26);
+        $f0g0    = self::mul( $f0, $g0, 26 );
+        $f0g1    = self::mul( $f0, $g1, 25 );
+        $f0g2    = self::mul( $f0, $g2, 26 );
+        $f0g3    = self::mul( $f0, $g3, 25 );
+        $f0g4    = self::mul( $f0, $g4, 26 );
+        $f0g5    = self::mul( $f0, $g5, 25 );
+        $f0g6    = self::mul( $f0, $g6, 26 );
+        $f0g7    = self::mul( $f0, $g7, 25 );
+        $f0g8    = self::mul( $f0, $g8, 26 );
+        $f0g9    = self::mul( $f0, $g9, 26 );
+        $f1g0    = self::mul( $f1, $g0, 26 );
+        $f1g1_2  = self::mul( $f1_2, $g1, 25 );
+        $f1g2    = self::mul( $f1, $g2, 26 );
+        $f1g3_2  = self::mul( $f1_2, $g3, 25 );
+        $f1g4    = self::mul( $f1, $g4, 26 );
+        $f1g5_2  = self::mul( $f1_2, $g5, 25 );
+        $f1g6    = self::mul( $f1, $g6, 26 );
+        $f1g7_2  = self::mul( $f1_2, $g7, 25 );
+        $f1g8    = self::mul( $f1, $g8, 26 );
+        $f1g9_38 = self::mul( $g9_19, $f1_2, 26 );
+        $f2g0    = self::mul( $f2, $g0, 26 );
+        $f2g1    = self::mul( $f2, $g1, 25 );
+        $f2g2    = self::mul( $f2, $g2, 26 );
+        $f2g3    = self::mul( $f2, $g3, 25 );
+        $f2g4    = self::mul( $f2, $g4, 26 );
+        $f2g5    = self::mul( $f2, $g5, 25 );
+        $f2g6    = self::mul( $f2, $g6, 26 );
+        $f2g7    = self::mul( $f2, $g7, 25 );
+        $f2g8_19 = self::mul( $g8_19, $f2, 26 );
+        $f2g9_19 = self::mul( $g9_19, $f2, 26 );
+        $f3g0    = self::mul( $f3, $g0, 26 );
+        $f3g1_2  = self::mul( $f3_2, $g1, 25 );
+        $f3g2    = self::mul( $f3, $g2, 26 );
+        $f3g3_2  = self::mul( $f3_2, $g3, 25 );
+        $f3g4    = self::mul( $f3, $g4, 26 );
+        $f3g5_2  = self::mul( $f3_2, $g5, 25 );
+        $f3g6    = self::mul( $f3, $g6, 26 );
+        $f3g7_38 = self::mul( $g7_19, $f3_2, 26 );
+        $f3g8_19 = self::mul( $g8_19, $f3, 25 );
+        $f3g9_38 = self::mul( $g9_19, $f3_2, 26 );
+        $f4g0    = self::mul( $f4, $g0, 26 );
+        $f4g1    = self::mul( $f4, $g1, 25 );
+        $f4g2    = self::mul( $f4, $g2, 26 );
+        $f4g3    = self::mul( $f4, $g3, 25 );
+        $f4g4    = self::mul( $f4, $g4, 26 );
+        $f4g5    = self::mul( $f4, $g5, 25 );
+        $f4g6_19 = self::mul( $g6_19, $f4, 26 );
+        $f4g7_19 = self::mul( $g7_19, $f4, 26 );
+        $f4g8_19 = self::mul( $g8_19, $f4, 26 );
+        $f4g9_19 = self::mul( $g9_19, $f4, 26 );
+        $f5g0    = self::mul( $f5, $g0, 26 );
+        $f5g1_2  = self::mul( $f5_2, $g1, 25 );
+        $f5g2    = self::mul( $f5, $g2, 26 );
+        $f5g3_2  = self::mul( $f5_2, $g3, 25 );
+        $f5g4    = self::mul( $f5, $g4, 26 );
+        $f5g5_38 = self::mul( $g5_19, $f5_2, 26 );
+        $f5g6_19 = self::mul( $g6_19, $f5, 25 );
+        $f5g7_38 = self::mul( $g7_19, $f5_2, 26 );
+        $f5g8_19 = self::mul( $g8_19, $f5, 25 );
+        $f5g9_38 = self::mul( $g9_19, $f5_2, 26 );
+        $f6g0    = self::mul( $f6, $g0, 26 );
+        $f6g1    = self::mul( $f6, $g1, 25 );
+        $f6g2    = self::mul( $f6, $g2, 26 );
+        $f6g3    = self::mul( $f6, $g3, 25 );
+        $f6g4_19 = self::mul( $g4_19, $f6, 26 );
+        $f6g5_19 = self::mul( $g5_19, $f6, 26 );
+        $f6g6_19 = self::mul( $g6_19, $f6, 26 );
+        $f6g7_19 = self::mul( $g7_19, $f6, 26 );
+        $f6g8_19 = self::mul( $g8_19, $f6, 26 );
+        $f6g9_19 = self::mul( $g9_19, $f6, 26 );
+        $f7g0    = self::mul( $f7, $g0, 26 );
+        $f7g1_2  = self::mul( $f7_2, $g1, 25 );
+        $f7g2    = self::mul( $f7, $g2, 26 );
+        $f7g3_38 = self::mul( $g3_19, $f7_2, 26 );
+        $f7g4_19 = self::mul( $g4_19, $f7, 26 );
+        $f7g5_38 = self::mul( $g5_19, $f7_2, 26 );
+        $f7g6_19 = self::mul( $g6_19, $f7, 25 );
+        $f7g7_38 = self::mul( $g7_19, $f7_2, 26 );
+        $f7g8_19 = self::mul( $g8_19, $f7, 25 );
+        $f7g9_38 = self::mul( $g9_19, $f7_2, 26 );
+        $f8g0    = self::mul( $f8, $g0, 26 );
+        $f8g1    = self::mul( $f8, $g1, 25 );
+        $f8g2_19 = self::mul( $g2_19, $f8, 26 );
+        $f8g3_19 = self::mul( $g3_19, $f8, 26 );
+        $f8g4_19 = self::mul( $g4_19, $f8, 26 );
+        $f8g5_19 = self::mul( $g5_19, $f8, 26 );
+        $f8g6_19 = self::mul( $g6_19, $f8, 26 );
+        $f8g7_19 = self::mul( $g7_19, $f8, 26 );
+        $f8g8_19 = self::mul( $g8_19, $f8, 26 );
+        $f8g9_19 = self::mul( $g9_19, $f8, 26 );
+        $f9g0    = self::mul( $f9, $g0, 26 );
+        $f9g1_38 = self::mul( $g1_19, $f9_2, 26 );
+        $f9g2_19 = self::mul( $g2_19, $f9, 25 );
+        $f9g3_38 = self::mul( $g3_19, $f9_2, 26 );
+        $f9g4_19 = self::mul( $g4_19, $f9, 25 );
+        $f9g5_38 = self::mul( $g5_19, $f9_2, 26 );
+        $f9g6_19 = self::mul( $g6_19, $f9, 25 );
+        $f9g7_38 = self::mul( $g7_19, $f9_2, 26 );
+        $f9g8_19 = self::mul( $g8_19, $f9, 25 );
+        $f9g9_38 = self::mul( $g9_19, $f9_2, 26 );
         $h0 = $f0g0 + $f1g9_38 + $f2g8_19 + $f3g7_38 + $f4g6_19 + $f5g5_38 + $f6g4_19 + $f7g3_38 + $f8g2_19 + $f9g1_38;
-        $h1 = $f0g1 + $f1g0    + $f2g9_19 + $f3g8_19 + $f4g7_19 + $f5g6_19 + $f6g5_19 + $f7g4_19 + $f8g3_19 + $f9g2_19;
-        $h2 = $f0g2 + $f1g1_2  + $f2g0    + $f3g9_38 + $f4g8_19 + $f5g7_38 + $f6g6_19 + $f7g5_38 + $f8g4_19 + $f9g3_38;
-        $h3 = $f0g3 + $f1g2    + $f2g1    + $f3g0    + $f4g9_19 + $f5g8_19 + $f6g7_19 + $f7g6_19 + $f8g5_19 + $f9g4_19;
-        $h4 = $f0g4 + $f1g3_2  + $f2g2    + $f3g1_2  + $f4g0    + $f5g9_38 + $f6g8_19 + $f7g7_38 + $f8g6_19 + $f9g5_38;
-        $h5 = $f0g5 + $f1g4    + $f2g3    + $f3g2    + $f4g1    + $f5g0    + $f6g9_19 + $f7g8_19 + $f8g7_19 + $f9g6_19;
-        $h6 = $f0g6 + $f1g5_2  + $f2g4    + $f3g3_2  + $f4g2    + $f5g1_2  + $f6g0    + $f7g9_38 + $f8g8_19 + $f9g7_38;
-        $h7 = $f0g7 + $f1g6    + $f2g5    + $f3g4    + $f4g3    + $f5g2    + $f6g1    + $f7g0    + $f8g9_19 + $f9g8_19;
-        $h8 = $f0g8 + $f1g7_2  + $f2g6    + $f3g5_2  + $f4g4    + $f5g3_2  + $f6g2    + $f7g1_2  + $f8g0    + $f9g9_38;
-        $h9 = $f0g9 + $f1g8    + $f2g7    + $f3g6    + $f4g5    + $f5g4    + $f6g3    + $f7g2    + $f8g1    + $f9g0   ;
-
-        $carry0 = ($h0 + (1 << 25)) >> 26;
+        $h1 = $f0g1 + $f1g0 + $f2g9_19 + $f3g8_19 + $f4g7_19 + $f5g6_19 + $f6g5_19 + $f7g4_19 + $f8g3_19 + $f9g2_19;
+        $h2 = $f0g2 + $f1g1_2 + $f2g0 + $f3g9_38 + $f4g8_19 + $f5g7_38 + $f6g6_19 + $f7g5_38 + $f8g4_19 + $f9g3_38;
+        $h3 = $f0g3 + $f1g2 + $f2g1 + $f3g0 + $f4g9_19 + $f5g8_19 + $f6g7_19 + $f7g6_19 + $f8g5_19 + $f9g4_19;
+        $h4 = $f0g4 + $f1g3_2 + $f2g2 + $f3g1_2 + $f4g0 + $f5g9_38 + $f6g8_19 + $f7g7_38 + $f8g6_19 + $f9g5_38;
+        $h5 = $f0g5 + $f1g4 + $f2g3 + $f3g2 + $f4g1 + $f5g0 + $f6g9_19 + $f7g8_19 + $f8g7_19 + $f9g6_19;
+        $h6 = $f0g6 + $f1g5_2 + $f2g4 + $f3g3_2 + $f4g2 + $f5g1_2 + $f6g0 + $f7g9_38 + $f8g8_19 + $f9g7_38;
+        $h7 = $f0g7 + $f1g6 + $f2g5 + $f3g4 + $f4g3 + $f5g2 + $f6g1 + $f7g0 + $f8g9_19 + $f9g8_19;
+        $h8 = $f0g8 + $f1g7_2 + $f2g6 + $f3g5_2 + $f4g4 + $f5g3_2 + $f6g2 + $f7g1_2 + $f8g0 + $f9g9_38;
+        $h9 = $f0g9 + $f1g8 + $f2g7 + $f3g6 + $f4g5 + $f5g4 + $f6g3 + $f7g2 + $f8g1 + $f9g0;
+
+        $carry0 = ( $h0 + ( 1 << 25 ) ) >> 26;
         $h1 += $carry0;
         $h0 -= $carry0 << 26;
-        $carry4 = ($h4 + (1 << 25)) >> 26;
+        $carry4 = ( $h4 + ( 1 << 25 ) ) >> 26;
         $h5 += $carry4;
         $h4 -= $carry4 << 26;
 
-        $carry1 = ($h1 + (1 << 24)) >> 25;
+        $carry1 = ( $h1 + ( 1 << 24 ) ) >> 25;
         $h2 += $carry1;
         $h1 -= $carry1 << 25;
-        $carry5 = ($h5 + (1 << 24)) >> 25;
+        $carry5 = ( $h5 + ( 1 << 24 ) ) >> 25;
         $h6 += $carry5;
         $h5 -= $carry5 << 25;
 
-        $carry2 = ($h2 + (1 << 25)) >> 26;
+        $carry2 = ( $h2 + ( 1 << 25 ) ) >> 26;
         $h3 += $carry2;
         $h2 -= $carry2 << 26;
-        $carry6 = ($h6 + (1 << 25)) >> 26;
+        $carry6 = ( $h6 + ( 1 << 25 ) ) >> 26;
         $h7 += $carry6;
         $h6 -= $carry6 << 26;
 
-        $carry3 = ($h3 + (1 << 24)) >> 25;
+        $carry3 = ( $h3 + ( 1 << 24 ) ) >> 25;
         $h4 += $carry3;
         $h3 -= $carry3 << 25;
-        $carry7 = ($h7 + (1 << 24)) >> 25;
+        $carry7 = ( $h7 + ( 1 << 24 ) ) >> 25;
         $h8 += $carry7;
         $h7 -= $carry7 << 25;
 
-        $carry4 = ($h4 + (1 << 25)) >> 26;
+        $carry4 = ( $h4 + ( 1 << 25 ) ) >> 26;
         $h5 += $carry4;
         $h4 -= $carry4 << 26;
-        $carry8 = ($h8 + (1 << 25)) >> 26;
+        $carry8 = ( $h8 + ( 1 << 25 ) ) >> 26;
         $h9 += $carry8;
         $h8 -= $carry8 << 26;
 
-        $carry9 = ($h9 + (1 << 24)) >> 25;
-        $h0 += self::mul($carry9, 19, 5);
+        $carry9 = ( $h9 + ( 1 << 24 ) ) >> 25;
+        $h0 += self::mul( $carry9, 19, 5 );
         $h9 -= $carry9 << 25;
 
-        $carry0 = ($h0 + (1 << 25)) >> 26;
+        $carry0 = ( $h0 + ( 1 << 25 ) ) >> 26;
         $h1 += $carry0;
         $h0 -= $carry0 << 26;
 
         return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
             array(
-                (int) $h0,
-                (int) $h1,
-                (int) $h2,
-                (int) $h3,
-                (int) $h4,
-                (int) $h5,
-                (int) $h6,
-                (int) $h7,
-                (int) $h8,
-                (int) $h9
+                (int)$h0,
+                (int)$h1,
+                (int)$h2,
+                (int)$h3,
+                (int)$h4,
+                (int)$h5,
+                (int)$h6,
+                (int)$h7,
+                (int)$h8,
+                (int)$h9
             )
         );
     }
@@ -557,11 +557,11 @@ 
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      * @psalm-suppress MixedAssignment
      */
-    public static function fe_neg(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+    public static function fe_neg( ParagonIE_Sodium_Core_Curve25519_Fe $f )
     {
         $h = new ParagonIE_Sodium_Core_Curve25519_Fe();
-        for ($i = 0; $i < 10; ++$i) {
-            $h[$i] = -$f[$i];
+        for ( $i = 0; $i < 10; ++$i ) {
+            $h[ $i ] = -$f[ $i ];
         }
         return $h;
     }
@@ -576,18 +576,18 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      */
-    public static function fe_sq(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+    public static function fe_sq( ParagonIE_Sodium_Core_Curve25519_Fe $f )
     {
-        $f0 = (int) $f[0];
-        $f1 = (int) $f[1];
-        $f2 = (int) $f[2];
-        $f3 = (int) $f[3];
-        $f4 = (int) $f[4];
-        $f5 = (int) $f[5];
-        $f6 = (int) $f[6];
-        $f7 = (int) $f[7];
-        $f8 = (int) $f[8];
-        $f9 = (int) $f[9];
+        $f0 = (int)$f[ 0 ];
+        $f1 = (int)$f[ 1 ];
+        $f2 = (int)$f[ 2 ];
+        $f3 = (int)$f[ 3 ];
+        $f4 = (int)$f[ 4 ];
+        $f5 = (int)$f[ 5 ];
+        $f6 = (int)$f[ 6 ];
+        $f7 = (int)$f[ 7 ];
+        $f8 = (int)$f[ 8 ];
+        $f9 = (int)$f[ 9 ];
 
         $f0_2 = $f0 << 1;
         $f1_2 = $f1 << 1;
@@ -597,132 +597,132 @@ 
         $f5_2 = $f5 << 1;
         $f6_2 = $f6 << 1;
         $f7_2 = $f7 << 1;
-        $f5_38 = self::mul($f5, 38, 6);
-        $f6_19 = self::mul($f6, 19, 5);
-        $f7_38 = self::mul($f7, 38, 6);
-        $f8_19 = self::mul($f8, 19, 5);
-        $f9_38 = self::mul($f9, 38, 6);
-        $f0f0    = self::mul($f0,    $f0,    26);
-        $f0f1_2  = self::mul($f0_2,  $f1,    26);
-        $f0f2_2  = self::mul($f0_2,  $f2,    26);
-        $f0f3_2  = self::mul($f0_2,  $f3,    26);
-        $f0f4_2  = self::mul($f0_2,  $f4,    26);
-        $f0f5_2  = self::mul($f0_2,  $f5,    26);
-        $f0f6_2  = self::mul($f0_2,  $f6,    26);
-        $f0f7_2  = self::mul($f0_2,  $f7,    26);
-        $f0f8_2  = self::mul($f0_2,  $f8,    26);
-        $f0f9_2  = self::mul($f0_2,  $f9,    26);
-        $f1f1_2  = self::mul($f1_2,  $f1,    26);
-        $f1f2_2  = self::mul($f1_2,  $f2,    26);
-        $f1f3_4  = self::mul($f1_2,  $f3_2,  26);
-        $f1f4_2  = self::mul($f1_2,  $f4,    26);
-        $f1f5_4  = self::mul($f1_2,  $f5_2,  26);
-        $f1f6_2  = self::mul($f1_2,  $f6,    26);
-        $f1f7_4  = self::mul($f1_2,  $f7_2,  26);
-        $f1f8_2  = self::mul($f1_2,  $f8,    26);
-        $f1f9_76 = self::mul($f9_38, $f1_2,  27);
-        $f2f2    = self::mul($f2,    $f2,    27);
-        $f2f3_2  = self::mul($f2_2,  $f3,    27);
-        $f2f4_2  = self::mul($f2_2,  $f4,    27);
-        $f2f5_2  = self::mul($f2_2,  $f5,    27);
-        $f2f6_2  = self::mul($f2_2,  $f6,    27);
-        $f2f7_2  = self::mul($f2_2,  $f7,    27);
-        $f2f8_38 = self::mul($f8_19, $f2_2,  27);
-        $f2f9_38 = self::mul($f9_38, $f2,    26);
-        $f3f3_2  = self::mul($f3_2,  $f3,    26);
-        $f3f4_2  = self::mul($f3_2,  $f4,    26);
-        $f3f5_4  = self::mul($f3_2,  $f5_2,  26);
-        $f3f6_2  = self::mul($f3_2,  $f6,    26);
-        $f3f7_76 = self::mul($f7_38, $f3_2,  26);
-        $f3f8_38 = self::mul($f8_19, $f3_2,  26);
-        $f3f9_76 = self::mul($f9_38, $f3_2,  26);
-        $f4f4    = self::mul($f4,    $f4,    26);
-        $f4f5_2  = self::mul($f4_2,  $f5,    26);
-        $f4f6_38 = self::mul($f6_19, $f4_2,  27);
-        $f4f7_38 = self::mul($f7_38, $f4,    26);
-        $f4f8_38 = self::mul($f8_19, $f4_2,  27);
-        $f4f9_38 = self::mul($f9_38, $f4,    26);
-        $f5f5_38 = self::mul($f5_38, $f5,    26);
-        $f5f6_38 = self::mul($f6_19, $f5_2,  26);
-        $f5f7_76 = self::mul($f7_38, $f5_2,  26);
-        $f5f8_38 = self::mul($f8_19, $f5_2,  26);
-        $f5f9_76 = self::mul($f9_38, $f5_2,  26);
-        $f6f6_19 = self::mul($f6_19, $f6,    26);
-        $f6f7_38 = self::mul($f7_38, $f6,    26);
-        $f6f8_38 = self::mul($f8_19, $f6_2,  27);
-        $f6f9_38 = self::mul($f9_38, $f6,    26);
-        $f7f7_38 = self::mul($f7_38, $f7,    26);
-        $f7f8_38 = self::mul($f8_19, $f7_2,  26);
-        $f7f9_76 = self::mul($f9_38, $f7_2,  26);
-        $f8f8_19 = self::mul($f8_19, $f8,    26);
-        $f8f9_38 = self::mul($f9_38, $f8,    26);
-        $f9f9_38 = self::mul($f9_38, $f9,    26);
-        $h0 = $f0f0   + $f1f9_76 + $f2f8_38 + $f3f7_76 + $f4f6_38 + $f5f5_38;
+        $f5_38 = self::mul( $f5, 38, 6 );
+        $f6_19 = self::mul( $f6, 19, 5 );
+        $f7_38 = self::mul( $f7, 38, 6 );
+        $f8_19 = self::mul( $f8, 19, 5 );
+        $f9_38 = self::mul( $f9, 38, 6 );
+        $f0f0    = self::mul( $f0, $f0, 26 );
+        $f0f1_2  = self::mul( $f0_2, $f1, 26 );
+        $f0f2_2  = self::mul( $f0_2, $f2, 26 );
+        $f0f3_2  = self::mul( $f0_2, $f3, 26 );
+        $f0f4_2  = self::mul( $f0_2, $f4, 26 );
+        $f0f5_2  = self::mul( $f0_2, $f5, 26 );
+        $f0f6_2  = self::mul( $f0_2, $f6, 26 );
+        $f0f7_2  = self::mul( $f0_2, $f7, 26 );
+        $f0f8_2  = self::mul( $f0_2, $f8, 26 );
+        $f0f9_2  = self::mul( $f0_2, $f9, 26 );
+        $f1f1_2  = self::mul( $f1_2, $f1, 26 );
+        $f1f2_2  = self::mul( $f1_2, $f2, 26 );
+        $f1f3_4  = self::mul( $f1_2, $f3_2, 26 );
+        $f1f4_2  = self::mul( $f1_2, $f4, 26 );
+        $f1f5_4  = self::mul( $f1_2, $f5_2, 26 );
+        $f1f6_2  = self::mul( $f1_2, $f6, 26 );
+        $f1f7_4  = self::mul( $f1_2, $f7_2, 26 );
+        $f1f8_2  = self::mul( $f1_2, $f8, 26 );
+        $f1f9_76 = self::mul( $f9_38, $f1_2, 27 );
+        $f2f2    = self::mul( $f2, $f2, 27 );
+        $f2f3_2  = self::mul( $f2_2, $f3, 27 );
+        $f2f4_2  = self::mul( $f2_2, $f4, 27 );
+        $f2f5_2  = self::mul( $f2_2, $f5, 27 );
+        $f2f6_2  = self::mul( $f2_2, $f6, 27 );
+        $f2f7_2  = self::mul( $f2_2, $f7, 27 );
+        $f2f8_38 = self::mul( $f8_19, $f2_2, 27 );
+        $f2f9_38 = self::mul( $f9_38, $f2, 26 );
+        $f3f3_2  = self::mul( $f3_2, $f3, 26 );
+        $f3f4_2  = self::mul( $f3_2, $f4, 26 );
+        $f3f5_4  = self::mul( $f3_2, $f5_2, 26 );
+        $f3f6_2  = self::mul( $f3_2, $f6, 26 );
+        $f3f7_76 = self::mul( $f7_38, $f3_2, 26 );
+        $f3f8_38 = self::mul( $f8_19, $f3_2, 26 );
+        $f3f9_76 = self::mul( $f9_38, $f3_2, 26 );
+        $f4f4    = self::mul( $f4, $f4, 26 );
+        $f4f5_2  = self::mul( $f4_2, $f5, 26 );
+        $f4f6_38 = self::mul( $f6_19, $f4_2, 27 );
+        $f4f7_38 = self::mul( $f7_38, $f4, 26 );
+        $f4f8_38 = self::mul( $f8_19, $f4_2, 27 );
+        $f4f9_38 = self::mul( $f9_38, $f4, 26 );
+        $f5f5_38 = self::mul( $f5_38, $f5, 26 );
+        $f5f6_38 = self::mul( $f6_19, $f5_2, 26 );
+        $f5f7_76 = self::mul( $f7_38, $f5_2, 26 );
+        $f5f8_38 = self::mul( $f8_19, $f5_2, 26 );
+        $f5f9_76 = self::mul( $f9_38, $f5_2, 26 );
+        $f6f6_19 = self::mul( $f6_19, $f6, 26 );
+        $f6f7_38 = self::mul( $f7_38, $f6, 26 );
+        $f6f8_38 = self::mul( $f8_19, $f6_2, 27 );
+        $f6f9_38 = self::mul( $f9_38, $f6, 26 );
+        $f7f7_38 = self::mul( $f7_38, $f7, 26 );
+        $f7f8_38 = self::mul( $f8_19, $f7_2, 26 );
+        $f7f9_76 = self::mul( $f9_38, $f7_2, 26 );
+        $f8f8_19 = self::mul( $f8_19, $f8, 26 );
+        $f8f9_38 = self::mul( $f9_38, $f8, 26 );
+        $f9f9_38 = self::mul( $f9_38, $f9, 26 );
+        $h0 = $f0f0 + $f1f9_76 + $f2f8_38 + $f3f7_76 + $f4f6_38 + $f5f5_38;
         $h1 = $f0f1_2 + $f2f9_38 + $f3f8_38 + $f4f7_38 + $f5f6_38;
-        $h2 = $f0f2_2 + $f1f1_2  + $f3f9_76 + $f4f8_38 + $f5f7_76 + $f6f6_19;
-        $h3 = $f0f3_2 + $f1f2_2  + $f4f9_38 + $f5f8_38 + $f6f7_38;
-        $h4 = $f0f4_2 + $f1f3_4  + $f2f2    + $f5f9_76 + $f6f8_38 + $f7f7_38;
-        $h5 = $f0f5_2 + $f1f4_2  + $f2f3_2  + $f6f9_38 + $f7f8_38;
-        $h6 = $f0f6_2 + $f1f5_4  + $f2f4_2  + $f3f3_2  + $f7f9_76 + $f8f8_19;
-        $h7 = $f0f7_2 + $f1f6_2  + $f2f5_2  + $f3f4_2  + $f8f9_38;
-        $h8 = $f0f8_2 + $f1f7_4  + $f2f6_2  + $f3f5_4  + $f4f4    + $f9f9_38;
-        $h9 = $f0f9_2 + $f1f8_2  + $f2f7_2  + $f3f6_2  + $f4f5_2;
-
-        $carry0 = ($h0 + (1 << 25)) >> 26;
+        $h2 = $f0f2_2 + $f1f1_2 + $f3f9_76 + $f4f8_38 + $f5f7_76 + $f6f6_19;
+        $h3 = $f0f3_2 + $f1f2_2 + $f4f9_38 + $f5f8_38 + $f6f7_38;
+        $h4 = $f0f4_2 + $f1f3_4 + $f2f2 + $f5f9_76 + $f6f8_38 + $f7f7_38;
+        $h5 = $f0f5_2 + $f1f4_2 + $f2f3_2 + $f6f9_38 + $f7f8_38;
+        $h6 = $f0f6_2 + $f1f5_4 + $f2f4_2 + $f3f3_2 + $f7f9_76 + $f8f8_19;
+        $h7 = $f0f7_2 + $f1f6_2 + $f2f5_2 + $f3f4_2 + $f8f9_38;
+        $h8 = $f0f8_2 + $f1f7_4 + $f2f6_2 + $f3f5_4 + $f4f4 + $f9f9_38;
+        $h9 = $f0f9_2 + $f1f8_2 + $f2f7_2 + $f3f6_2 + $f4f5_2;
+
+        $carry0 = ( $h0 + ( 1 << 25 ) ) >> 26;
         $h1 += $carry0;
         $h0 -= $carry0 << 26;
-        $carry4 = ($h4 + (1 << 25)) >> 26;
+        $carry4 = ( $h4 + ( 1 << 25 ) ) >> 26;
         $h5 += $carry4;
         $h4 -= $carry4 << 26;
 
-        $carry1 = ($h1 + (1 << 24)) >> 25;
+        $carry1 = ( $h1 + ( 1 << 24 ) ) >> 25;
         $h2 += $carry1;
         $h1 -= $carry1 << 25;
-        $carry5 = ($h5 + (1 << 24)) >> 25;
+        $carry5 = ( $h5 + ( 1 << 24 ) ) >> 25;
         $h6 += $carry5;
         $h5 -= $carry5 << 25;
 
-        $carry2 = ($h2 + (1 << 25)) >> 26;
+        $carry2 = ( $h2 + ( 1 << 25 ) ) >> 26;
         $h3 += $carry2;
         $h2 -= $carry2 << 26;
-        $carry6 = ($h6 + (1 << 25)) >> 26;
+        $carry6 = ( $h6 + ( 1 << 25 ) ) >> 26;
         $h7 += $carry6;
         $h6 -= $carry6 << 26;
 
-        $carry3 = ($h3 + (1 << 24)) >> 25;
+        $carry3 = ( $h3 + ( 1 << 24 ) ) >> 25;
         $h4 += $carry3;
         $h3 -= $carry3 << 25;
-        $carry7 = ($h7 + (1 << 24)) >> 25;
+        $carry7 = ( $h7 + ( 1 << 24 ) ) >> 25;
         $h8 += $carry7;
         $h7 -= $carry7 << 25;
 
-        $carry4 = ($h4 + (1 << 25)) >> 26;
+        $carry4 = ( $h4 + ( 1 << 25 ) ) >> 26;
         $h5 += $carry4;
         $h4 -= $carry4 << 26;
-        $carry8 = ($h8 + (1 << 25)) >> 26;
+        $carry8 = ( $h8 + ( 1 << 25 ) ) >> 26;
         $h9 += $carry8;
         $h8 -= $carry8 << 26;
 
-        $carry9 = ($h9 + (1 << 24)) >> 25;
-        $h0 += self::mul($carry9, 19, 5);
+        $carry9 = ( $h9 + ( 1 << 24 ) ) >> 25;
+        $h0 += self::mul( $carry9, 19, 5 );
         $h9 -= $carry9 << 25;
 
-        $carry0 = ($h0 + (1 << 25)) >> 26;
+        $carry0 = ( $h0 + ( 1 << 25 ) ) >> 26;
         $h1 += $carry0;
         $h0 -= $carry0 << 26;
 
         return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
             array(
-                (int) $h0,
-                (int) $h1,
-                (int) $h2,
-                (int) $h3,
-                (int) $h4,
-                (int) $h5,
-                (int) $h6,
-                (int) $h7,
-                (int) $h8,
-                (int) $h9
+                (int)$h0,
+                (int)$h1,
+                (int)$h2,
+                (int)$h3,
+                (int)$h4,
+                (int)$h5,
+                (int)$h6,
+                (int)$h7,
+                (int)$h8,
+                (int)$h9
             )
         );
     }
@@ -738,18 +738,18 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      */
-    public static function fe_sq2(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+    public static function fe_sq2( ParagonIE_Sodium_Core_Curve25519_Fe $f )
     {
-        $f0 = (int) $f[0];
-        $f1 = (int) $f[1];
-        $f2 = (int) $f[2];
-        $f3 = (int) $f[3];
-        $f4 = (int) $f[4];
-        $f5 = (int) $f[5];
-        $f6 = (int) $f[6];
-        $f7 = (int) $f[7];
-        $f8 = (int) $f[8];
-        $f9 = (int) $f[9];
+        $f0 = (int)$f[ 0 ];
+        $f1 = (int)$f[ 1 ];
+        $f2 = (int)$f[ 2 ];
+        $f3 = (int)$f[ 3 ];
+        $f4 = (int)$f[ 4 ];
+        $f5 = (int)$f[ 5 ];
+        $f6 = (int)$f[ 6 ];
+        $f7 = (int)$f[ 7 ];
+        $f8 = (int)$f[ 8 ];
+        $f9 = (int)$f[ 9 ];
 
         $f0_2 = $f0 << 1;
         $f1_2 = $f1 << 1;
@@ -759,133 +759,133 @@ 
         $f5_2 = $f5 << 1;
         $f6_2 = $f6 << 1;
         $f7_2 = $f7 << 1;
-        $f5_38 = self::mul($f5, 38, 6); /* 1.959375*2^30 */
-        $f6_19 = self::mul($f6, 19, 5); /* 1.959375*2^30 */
-        $f7_38 = self::mul($f7, 38, 6); /* 1.959375*2^30 */
-        $f8_19 = self::mul($f8, 19, 5); /* 1.959375*2^30 */
-        $f9_38 = self::mul($f9, 38, 6); /* 1.959375*2^30 */
-        $f0f0 = self::mul($f0, $f0, 24);
-        $f0f1_2 = self::mul($f0_2, $f1, 24);
-        $f0f2_2 = self::mul($f0_2, $f2, 24);
-        $f0f3_2 = self::mul($f0_2, $f3, 24);
-        $f0f4_2 = self::mul($f0_2, $f4, 24);
-        $f0f5_2 = self::mul($f0_2, $f5, 24);
-        $f0f6_2 = self::mul($f0_2, $f6, 24);
-        $f0f7_2 = self::mul($f0_2, $f7, 24);
-        $f0f8_2 = self::mul($f0_2, $f8, 24);
-        $f0f9_2 = self::mul($f0_2, $f9, 24);
-        $f1f1_2 = self::mul($f1_2,  $f1, 24);
-        $f1f2_2 = self::mul($f1_2,  $f2, 24);
-        $f1f3_4 = self::mul($f1_2,  $f3_2, 24);
-        $f1f4_2 = self::mul($f1_2,  $f4, 24);
-        $f1f5_4 = self::mul($f1_2,  $f5_2, 24);
-        $f1f6_2 = self::mul($f1_2,  $f6, 24);
-        $f1f7_4 = self::mul($f1_2,  $f7_2, 24);
-        $f1f8_2 = self::mul($f1_2,  $f8, 24);
-        $f1f9_76 = self::mul($f9_38, $f1_2, 24);
-        $f2f2 = self::mul($f2,  $f2, 24);
-        $f2f3_2 = self::mul($f2_2,  $f3, 24);
-        $f2f4_2 = self::mul($f2_2,  $f4, 24);
-        $f2f5_2 = self::mul($f2_2,  $f5, 24);
-        $f2f6_2 = self::mul($f2_2,  $f6, 24);
-        $f2f7_2 = self::mul($f2_2,  $f7, 24);
-        $f2f8_38 = self::mul($f8_19, $f2_2, 25);
-        $f2f9_38 = self::mul($f9_38, $f2, 24);
-        $f3f3_2 = self::mul($f3_2,  $f3, 24);
-        $f3f4_2 = self::mul($f3_2,  $f4, 24);
-        $f3f5_4 = self::mul($f3_2,  $f5_2, 24);
-        $f3f6_2 = self::mul($f3_2,  $f6, 24);
-        $f3f7_76 = self::mul($f7_38, $f3_2, 24);
-        $f3f8_38 = self::mul($f8_19, $f3_2, 24);
-        $f3f9_76 = self::mul($f9_38, $f3_2, 24);
-        $f4f4 = self::mul($f4,  $f4, 24);
-        $f4f5_2 = self::mul($f4_2,  $f5, 24);
-        $f4f6_38 = self::mul($f6_19, $f4_2, 25);
-        $f4f7_38 = self::mul($f7_38, $f4, 24);
-        $f4f8_38 = self::mul($f8_19, $f4_2, 25);
-        $f4f9_38 = self::mul($f9_38, $f4, 24);
-        $f5f5_38 = self::mul($f5_38, $f5, 24);
-        $f5f6_38 = self::mul($f6_19, $f5_2, 24);
-        $f5f7_76 = self::mul($f7_38, $f5_2, 24);
-        $f5f8_38 = self::mul($f8_19, $f5_2, 24);
-        $f5f9_76 = self::mul($f9_38, $f5_2, 24);
-        $f6f6_19 = self::mul($f6_19, $f6, 24);
-        $f6f7_38 = self::mul($f7_38, $f6, 24);
-        $f6f8_38 = self::mul($f8_19, $f6_2, 25);
-        $f6f9_38 = self::mul($f9_38, $f6, 24);
-        $f7f7_38 = self::mul($f7_38, $f7, 24);
-        $f7f8_38 = self::mul($f8_19, $f7_2, 24);
-        $f7f9_76 = self::mul($f9_38, $f7_2, 24);
-        $f8f8_19 = self::mul($f8_19, $f8, 24);
-        $f8f9_38 = self::mul($f9_38, $f8, 24);
-        $f9f9_38 = self::mul($f9_38, $f9, 24);
-
-        $h0 = (int) ($f0f0 + $f1f9_76 + $f2f8_38 + $f3f7_76 + $f4f6_38 + $f5f5_38) << 1;
-        $h1 = (int) ($f0f1_2 + $f2f9_38 + $f3f8_38 + $f4f7_38 + $f5f6_38) << 1;
-        $h2 = (int) ($f0f2_2 + $f1f1_2  + $f3f9_76 + $f4f8_38 + $f5f7_76 + $f6f6_19) << 1;
-        $h3 = (int) ($f0f3_2 + $f1f2_2  + $f4f9_38 + $f5f8_38 + $f6f7_38) << 1;
-        $h4 = (int) ($f0f4_2 + $f1f3_4  + $f2f2    + $f5f9_76 + $f6f8_38 + $f7f7_38) << 1;
-        $h5 = (int) ($f0f5_2 + $f1f4_2  + $f2f3_2  + $f6f9_38 + $f7f8_38) << 1;
-        $h6 = (int) ($f0f6_2 + $f1f5_4  + $f2f4_2  + $f3f3_2  + $f7f9_76 + $f8f8_19) << 1;
-        $h7 = (int) ($f0f7_2 + $f1f6_2  + $f2f5_2  + $f3f4_2  + $f8f9_38) << 1;
-        $h8 = (int) ($f0f8_2 + $f1f7_4  + $f2f6_2  + $f3f5_4  + $f4f4    + $f9f9_38) << 1;
-        $h9 = (int) ($f0f9_2 + $f1f8_2  + $f2f7_2  + $f3f6_2  + $f4f5_2) << 1;
-
-        $carry0 = ($h0 + (1 << 25)) >> 26;
+        $f5_38 = self::mul( $f5, 38, 6 ); /* 1.959375*2^30 */
+        $f6_19 = self::mul( $f6, 19, 5 ); /* 1.959375*2^30 */
+        $f7_38 = self::mul( $f7, 38, 6 ); /* 1.959375*2^30 */
+        $f8_19 = self::mul( $f8, 19, 5 ); /* 1.959375*2^30 */
+        $f9_38 = self::mul( $f9, 38, 6 ); /* 1.959375*2^30 */
+        $f0f0 = self::mul( $f0, $f0, 24 );
+        $f0f1_2 = self::mul( $f0_2, $f1, 24 );
+        $f0f2_2 = self::mul( $f0_2, $f2, 24 );
+        $f0f3_2 = self::mul( $f0_2, $f3, 24 );
+        $f0f4_2 = self::mul( $f0_2, $f4, 24 );
+        $f0f5_2 = self::mul( $f0_2, $f5, 24 );
+        $f0f6_2 = self::mul( $f0_2, $f6, 24 );
+        $f0f7_2 = self::mul( $f0_2, $f7, 24 );
+        $f0f8_2 = self::mul( $f0_2, $f8, 24 );
+        $f0f9_2 = self::mul( $f0_2, $f9, 24 );
+        $f1f1_2 = self::mul( $f1_2, $f1, 24 );
+        $f1f2_2 = self::mul( $f1_2, $f2, 24 );
+        $f1f3_4 = self::mul( $f1_2, $f3_2, 24 );
+        $f1f4_2 = self::mul( $f1_2, $f4, 24 );
+        $f1f5_4 = self::mul( $f1_2, $f5_2, 24 );
+        $f1f6_2 = self::mul( $f1_2, $f6, 24 );
+        $f1f7_4 = self::mul( $f1_2, $f7_2, 24 );
+        $f1f8_2 = self::mul( $f1_2, $f8, 24 );
+        $f1f9_76 = self::mul( $f9_38, $f1_2, 24 );
+        $f2f2 = self::mul( $f2, $f2, 24 );
+        $f2f3_2 = self::mul( $f2_2, $f3, 24 );
+        $f2f4_2 = self::mul( $f2_2, $f4, 24 );
+        $f2f5_2 = self::mul( $f2_2, $f5, 24 );
+        $f2f6_2 = self::mul( $f2_2, $f6, 24 );
+        $f2f7_2 = self::mul( $f2_2, $f7, 24 );
+        $f2f8_38 = self::mul( $f8_19, $f2_2, 25 );
+        $f2f9_38 = self::mul( $f9_38, $f2, 24 );
+        $f3f3_2 = self::mul( $f3_2, $f3, 24 );
+        $f3f4_2 = self::mul( $f3_2, $f4, 24 );
+        $f3f5_4 = self::mul( $f3_2, $f5_2, 24 );
+        $f3f6_2 = self::mul( $f3_2, $f6, 24 );
+        $f3f7_76 = self::mul( $f7_38, $f3_2, 24 );
+        $f3f8_38 = self::mul( $f8_19, $f3_2, 24 );
+        $f3f9_76 = self::mul( $f9_38, $f3_2, 24 );
+        $f4f4 = self::mul( $f4, $f4, 24 );
+        $f4f5_2 = self::mul( $f4_2, $f5, 24 );
+        $f4f6_38 = self::mul( $f6_19, $f4_2, 25 );
+        $f4f7_38 = self::mul( $f7_38, $f4, 24 );
+        $f4f8_38 = self::mul( $f8_19, $f4_2, 25 );
+        $f4f9_38 = self::mul( $f9_38, $f4, 24 );
+        $f5f5_38 = self::mul( $f5_38, $f5, 24 );
+        $f5f6_38 = self::mul( $f6_19, $f5_2, 24 );
+        $f5f7_76 = self::mul( $f7_38, $f5_2, 24 );
+        $f5f8_38 = self::mul( $f8_19, $f5_2, 24 );
+        $f5f9_76 = self::mul( $f9_38, $f5_2, 24 );
+        $f6f6_19 = self::mul( $f6_19, $f6, 24 );
+        $f6f7_38 = self::mul( $f7_38, $f6, 24 );
+        $f6f8_38 = self::mul( $f8_19, $f6_2, 25 );
+        $f6f9_38 = self::mul( $f9_38, $f6, 24 );
+        $f7f7_38 = self::mul( $f7_38, $f7, 24 );
+        $f7f8_38 = self::mul( $f8_19, $f7_2, 24 );
+        $f7f9_76 = self::mul( $f9_38, $f7_2, 24 );
+        $f8f8_19 = self::mul( $f8_19, $f8, 24 );
+        $f8f9_38 = self::mul( $f9_38, $f8, 24 );
+        $f9f9_38 = self::mul( $f9_38, $f9, 24 );
+
+        $h0 = (int)( $f0f0 + $f1f9_76 + $f2f8_38 + $f3f7_76 + $f4f6_38 + $f5f5_38 ) << 1;
+        $h1 = (int)( $f0f1_2 + $f2f9_38 + $f3f8_38 + $f4f7_38 + $f5f6_38 ) << 1;
+        $h2 = (int)( $f0f2_2 + $f1f1_2 + $f3f9_76 + $f4f8_38 + $f5f7_76 + $f6f6_19 ) << 1;
+        $h3 = (int)( $f0f3_2 + $f1f2_2 + $f4f9_38 + $f5f8_38 + $f6f7_38 ) << 1;
+        $h4 = (int)( $f0f4_2 + $f1f3_4 + $f2f2 + $f5f9_76 + $f6f8_38 + $f7f7_38 ) << 1;
+        $h5 = (int)( $f0f5_2 + $f1f4_2 + $f2f3_2 + $f6f9_38 + $f7f8_38 ) << 1;
+        $h6 = (int)( $f0f6_2 + $f1f5_4 + $f2f4_2 + $f3f3_2 + $f7f9_76 + $f8f8_19 ) << 1;
+        $h7 = (int)( $f0f7_2 + $f1f6_2 + $f2f5_2 + $f3f4_2 + $f8f9_38 ) << 1;
+        $h8 = (int)( $f0f8_2 + $f1f7_4 + $f2f6_2 + $f3f5_4 + $f4f4 + $f9f9_38 ) << 1;
+        $h9 = (int)( $f0f9_2 + $f1f8_2 + $f2f7_2 + $f3f6_2 + $f4f5_2 ) << 1;
+
+        $carry0 = ( $h0 + ( 1 << 25 ) ) >> 26;
         $h1 += $carry0;
         $h0 -= $carry0 << 26;
-        $carry4 = ($h4 + (1 << 25)) >> 26;
+        $carry4 = ( $h4 + ( 1 << 25 ) ) >> 26;
         $h5 += $carry4;
         $h4 -= $carry4 << 26;
 
-        $carry1 = ($h1 + (1 << 24)) >> 25;
+        $carry1 = ( $h1 + ( 1 << 24 ) ) >> 25;
         $h2 += $carry1;
         $h1 -= $carry1 << 25;
-        $carry5 = ($h5 + (1 << 24)) >> 25;
+        $carry5 = ( $h5 + ( 1 << 24 ) ) >> 25;
         $h6 += $carry5;
         $h5 -= $carry5 << 25;
 
-        $carry2 = ($h2 + (1 << 25)) >> 26;
+        $carry2 = ( $h2 + ( 1 << 25 ) ) >> 26;
         $h3 += $carry2;
         $h2 -= $carry2 << 26;
-        $carry6 = ($h6 + (1 << 25)) >> 26;
+        $carry6 = ( $h6 + ( 1 << 25 ) ) >> 26;
         $h7 += $carry6;
         $h6 -= $carry6 << 26;
 
-        $carry3 = ($h3 + (1 << 24)) >> 25;
+        $carry3 = ( $h3 + ( 1 << 24 ) ) >> 25;
         $h4 += $carry3;
         $h3 -= $carry3 << 25;
-        $carry7 = ($h7 + (1 << 24)) >> 25;
+        $carry7 = ( $h7 + ( 1 << 24 ) ) >> 25;
         $h8 += $carry7;
         $h7 -= $carry7 << 25;
 
-        $carry4 = ($h4 + (1 << 25)) >> 26;
+        $carry4 = ( $h4 + ( 1 << 25 ) ) >> 26;
         $h5 += $carry4;
         $h4 -= $carry4 << 26;
-        $carry8 = ($h8 + (1 << 25)) >> 26;
+        $carry8 = ( $h8 + ( 1 << 25 ) ) >> 26;
         $h9 += $carry8;
         $h8 -= $carry8 << 26;
 
-        $carry9 = ($h9 + (1 << 24)) >> 25;
-        $h0 += self::mul($carry9, 19, 5);
+        $carry9 = ( $h9 + ( 1 << 24 ) ) >> 25;
+        $h0 += self::mul( $carry9, 19, 5 );
         $h9 -= $carry9 << 25;
 
-        $carry0 = ($h0 + (1 << 25)) >> 26;
+        $carry0 = ( $h0 + ( 1 << 25 ) ) >> 26;
         $h1 += $carry0;
         $h0 -= $carry0 << 26;
 
         return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
             array(
-                (int) $h0,
-                (int) $h1,
-                (int) $h2,
-                (int) $h3,
-                (int) $h4,
-                (int) $h5,
-                (int) $h6,
-                (int) $h7,
-                (int) $h8,
-                (int) $h9
+                (int)$h0,
+                (int)$h1,
+                (int)$h2,
+                (int)$h3,
+                (int)$h4,
+                (int)$h5,
+                (int)$h6,
+                (int)$h7,
+                (int)$h8,
+                (int)$h9
             )
         );
     }
@@ -896,56 +896,56 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Fe $Z
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      */
-    public static function fe_invert(ParagonIE_Sodium_Core_Curve25519_Fe $Z)
+    public static function fe_invert( ParagonIE_Sodium_Core_Curve25519_Fe $Z )
     {
         $z = clone $Z;
-        $t0 = self::fe_sq($z);
-        $t1 = self::fe_sq($t0);
-        $t1 = self::fe_sq($t1);
-        $t1 = self::fe_mul($z, $t1);
-        $t0 = self::fe_mul($t0, $t1);
-        $t2 = self::fe_sq($t0);
-        $t1 = self::fe_mul($t1, $t2);
-        $t2 = self::fe_sq($t1);
-        for ($i = 1; $i < 5; ++$i) {
-            $t2 = self::fe_sq($t2);
+        $t0 = self::fe_sq( $z );
+        $t1 = self::fe_sq( $t0 );
+        $t1 = self::fe_sq( $t1 );
+        $t1 = self::fe_mul( $z, $t1 );
+        $t0 = self::fe_mul( $t0, $t1 );
+        $t2 = self::fe_sq( $t0 );
+        $t1 = self::fe_mul( $t1, $t2 );
+        $t2 = self::fe_sq( $t1 );
+        for ( $i = 1; $i < 5; ++$i ) {
+            $t2 = self::fe_sq( $t2 );
         }
-        $t1 = self::fe_mul($t2, $t1);
-        $t2 = self::fe_sq($t1);
-        for ($i = 1; $i < 10; ++$i) {
-            $t2 = self::fe_sq($t2);
+        $t1 = self::fe_mul( $t2, $t1 );
+        $t2 = self::fe_sq( $t1 );
+        for ( $i = 1; $i < 10; ++$i ) {
+            $t2 = self::fe_sq( $t2 );
         }
-        $t2 = self::fe_mul($t2, $t1);
-        $t3 = self::fe_sq($t2);
-        for ($i = 1; $i < 20; ++$i) {
-            $t3 = self::fe_sq($t3);
+        $t2 = self::fe_mul( $t2, $t1 );
+        $t3 = self::fe_sq( $t2 );
+        for ( $i = 1; $i < 20; ++$i ) {
+            $t3 = self::fe_sq( $t3 );
         }
-        $t2 = self::fe_mul($t3, $t2);
-        $t2 = self::fe_sq($t2);
-        for ($i = 1; $i < 10; ++$i) {
-            $t2 = self::fe_sq($t2);
+        $t2 = self::fe_mul( $t3, $t2 );
+        $t2 = self::fe_sq( $t2 );
+        for ( $i = 1; $i < 10; ++$i ) {
+            $t2 = self::fe_sq( $t2 );
         }
-        $t1 = self::fe_mul($t2, $t1);
-        $t2 = self::fe_sq($t1);
-        for ($i = 1; $i < 50; ++$i) {
-            $t2 = self::fe_sq($t2);
+        $t1 = self::fe_mul( $t2, $t1 );
+        $t2 = self::fe_sq( $t1 );
+        for ( $i = 1; $i < 50; ++$i ) {
+            $t2 = self::fe_sq( $t2 );
         }
-        $t2 = self::fe_mul($t2, $t1);
-        $t3 = self::fe_sq($t2);
-        for ($i = 1; $i < 100; ++$i) {
-            $t3 = self::fe_sq($t3);
+        $t2 = self::fe_mul( $t2, $t1 );
+        $t3 = self::fe_sq( $t2 );
+        for ( $i = 1; $i < 100; ++$i ) {
+            $t3 = self::fe_sq( $t3 );
         }
-        $t2 = self::fe_mul($t3, $t2);
-        $t2 = self::fe_sq($t2);
-        for ($i = 1; $i < 50; ++$i) {
-            $t2 = self::fe_sq($t2);
+        $t2 = self::fe_mul( $t3, $t2 );
+        $t2 = self::fe_sq( $t2 );
+        for ( $i = 1; $i < 50; ++$i ) {
+            $t2 = self::fe_sq( $t2 );
         }
-        $t1 = self::fe_mul($t2, $t1);
-        $t1 = self::fe_sq($t1);
-        for ($i = 1; $i < 5; ++$i) {
-            $t1 = self::fe_sq($t1);
+        $t1 = self::fe_mul( $t2, $t1 );
+        $t1 = self::fe_sq( $t1 );
+        for ( $i = 1; $i < 5; ++$i ) {
+            $t1 = self::fe_sq( $t1 );
         }
-        return self::fe_mul($t1, $t0);
+        return self::fe_mul( $t1, $t0 );
     }
 
     /**
@@ -956,7 +956,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Fe $z
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      */
-    public static function fe_pow22523(ParagonIE_Sodium_Core_Curve25519_Fe $z)
+    public static function fe_pow22523( ParagonIE_Sodium_Core_Curve25519_Fe $z )
     {
         # fe_sq(t0, z);
         # fe_sq(t1, t0);
@@ -966,102 +966,102 @@ 
         # fe_sq(t0, t0);
         # fe_mul(t0, t1, t0);
         # fe_sq(t1, t0);
-        $t0 = self::fe_sq($z);
-        $t1 = self::fe_sq($t0);
-        $t1 = self::fe_sq($t1);
-        $t1 = self::fe_mul($z, $t1);
-        $t0 = self::fe_mul($t0, $t1);
-        $t0 = self::fe_sq($t0);
-        $t0 = self::fe_mul($t1, $t0);
-        $t1 = self::fe_sq($t0);
+        $t0 = self::fe_sq( $z );
+        $t1 = self::fe_sq( $t0 );
+        $t1 = self::fe_sq( $t1 );
+        $t1 = self::fe_mul( $z, $t1 );
+        $t0 = self::fe_mul( $t0, $t1 );
+        $t0 = self::fe_sq( $t0 );
+        $t0 = self::fe_mul( $t1, $t0 );
+        $t1 = self::fe_sq( $t0 );
 
         # for (i = 1; i < 5; ++i) {
         #     fe_sq(t1, t1);
         # }
-        for ($i = 1; $i < 5; ++$i) {
-            $t1 = self::fe_sq($t1);
+        for ( $i = 1; $i < 5; ++$i ) {
+            $t1 = self::fe_sq( $t1 );
         }
 
         # fe_mul(t0, t1, t0);
         # fe_sq(t1, t0);
-        $t0 = self::fe_mul($t1, $t0);
-        $t1 = self::fe_sq($t0);
+        $t0 = self::fe_mul( $t1, $t0 );
+        $t1 = self::fe_sq( $t0 );
 
         # for (i = 1; i < 10; ++i) {
         #     fe_sq(t1, t1);
         # }
-        for ($i = 1; $i < 10; ++$i) {
-            $t1 = self::fe_sq($t1);
+        for ( $i = 1; $i < 10; ++$i ) {
+            $t1 = self::fe_sq( $t1 );
         }
 
         # fe_mul(t1, t1, t0);
         # fe_sq(t2, t1);
-        $t1 = self::fe_mul($t1, $t0);
-        $t2 = self::fe_sq($t1);
+        $t1 = self::fe_mul( $t1, $t0 );
+        $t2 = self::fe_sq( $t1 );
 
         # for (i = 1; i < 20; ++i) {
         #     fe_sq(t2, t2);
         # }
-        for ($i = 1; $i < 20; ++$i) {
-            $t2 = self::fe_sq($t2);
+        for ( $i = 1; $i < 20; ++$i ) {
+            $t2 = self::fe_sq( $t2 );
         }
 
         # fe_mul(t1, t2, t1);
         # fe_sq(t1, t1);
-        $t1 = self::fe_mul($t2, $t1);
-        $t1 = self::fe_sq($t1);
+        $t1 = self::fe_mul( $t2, $t1 );
+        $t1 = self::fe_sq( $t1 );
 
         # for (i = 1; i < 10; ++i) {
         #     fe_sq(t1, t1);
         # }
-        for ($i = 1; $i < 10; ++$i) {
-            $t1 = self::fe_sq($t1);
+        for ( $i = 1; $i < 10; ++$i ) {
+            $t1 = self::fe_sq( $t1 );
         }
 
         # fe_mul(t0, t1, t0);
         # fe_sq(t1, t0);
-        $t0 = self::fe_mul($t1, $t0);
-        $t1 = self::fe_sq($t0);
+        $t0 = self::fe_mul( $t1, $t0 );
+        $t1 = self::fe_sq( $t0 );
 
         # for (i = 1; i < 50; ++i) {
         #     fe_sq(t1, t1);
         # }
-        for ($i = 1; $i < 50; ++$i) {
-            $t1 = self::fe_sq($t1);
+        for ( $i = 1; $i < 50; ++$i ) {
+            $t1 = self::fe_sq( $t1 );
         }
 
         # fe_mul(t1, t1, t0);
         # fe_sq(t2, t1);
-        $t1 = self::fe_mul($t1, $t0);
-        $t2 = self::fe_sq($t1);
+        $t1 = self::fe_mul( $t1, $t0 );
+        $t2 = self::fe_sq( $t1 );
 
         # for (i = 1; i < 100; ++i) {
         #     fe_sq(t2, t2);
         # }
-        for ($i = 1; $i < 100; ++$i) {
-            $t2 = self::fe_sq($t2);
+        for ( $i = 1; $i < 100; ++$i ) {
+            $t2 = self::fe_sq( $t2 );
         }
 
         # fe_mul(t1, t2, t1);
         # fe_sq(t1, t1);
-        $t1 = self::fe_mul($t2, $t1);
-        $t1 = self::fe_sq($t1);
+        $t1 = self::fe_mul( $t2, $t1 );
+        $t1 = self::fe_sq( $t1 );
 
         # for (i = 1; i < 50; ++i) {
         #     fe_sq(t1, t1);
         # }
-        for ($i = 1; $i < 50; ++$i) {
-            $t1 = self::fe_sq($t1);
+        for ( $i = 1; $i < 50; ++$i ) {
+            $t1 = self::fe_sq( $t1 );
         }
 
         # fe_mul(t0, t1, t0);
         # fe_sq(t0, t0);
         # fe_sq(t0, t0);
         # fe_mul(out, t0, z);
-        $t0 = self::fe_mul($t1, $t0);
-        $t0 = self::fe_sq($t0);
-        $t0 = self::fe_sq($t0);
-        return self::fe_mul($t0, $z);
+        $t0 = self::fe_mul( $t1, $t0 );
+        $t0 = self::fe_sq( $t0 );
+        $t0 = self::fe_sq( $t0 );
+        return self::fe_mul( $t0, $z );
     }
 
     /**
@@ -1083,20 +1083,20 @@ 
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      * @psalm-suppress MixedOperand
      */
-    public static function fe_sub(ParagonIE_Sodium_Core_Curve25519_Fe $f, ParagonIE_Sodium_Core_Curve25519_Fe $g)
+    public static function fe_sub( ParagonIE_Sodium_Core_Curve25519_Fe $f, ParagonIE_Sodium_Core_Curve25519_Fe $g )
     {
         return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
             array(
-                (int) ($f[0] - $g[0]),
-                (int) ($f[1] - $g[1]),
-                (int) ($f[2] - $g[2]),
-                (int) ($f[3] - $g[3]),
-                (int) ($f[4] - $g[4]),
-                (int) ($f[5] - $g[5]),
-                (int) ($f[6] - $g[6]),
-                (int) ($f[7] - $g[7]),
-                (int) ($f[8] - $g[8]),
-                (int) ($f[9] - $g[9])
+                (int)( $f[ 0 ] - $g[ 0 ] ),
+                (int)( $f[ 1 ] - $g[ 1 ] ),
+                (int)( $f[ 2 ] - $g[ 2 ] ),
+                (int)( $f[ 3 ] - $g[ 3 ] ),
+                (int)( $f[ 4 ] - $g[ 4 ] ),
+                (int)( $f[ 5 ] - $g[ 5 ] ),
+                (int)( $f[ 6 ] - $g[ 6 ] ),
+                (int)( $f[ 7 ] - $g[ 7 ] ),
+                (int)( $f[ 8 ] - $g[ 8 ] ),
+                (int)( $f[ 9 ] - $g[ 9 ] )
             )
         );
     }
@@ -1117,17 +1117,17 @@ 
         ParagonIE_Sodium_Core_Curve25519_Ge_Cached $q
     ) {
         $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1();
-        $r->X = self::fe_add($p->Y, $p->X);
-        $r->Y = self::fe_sub($p->Y, $p->X);
-        $r->Z = self::fe_mul($r->X, $q->YplusX);
-        $r->Y = self::fe_mul($r->Y, $q->YminusX);
-        $r->T = self::fe_mul($q->T2d, $p->T);
-        $r->X = self::fe_mul($p->Z, $q->Z);
-        $t0   = self::fe_add($r->X, $r->X);
-        $r->X = self::fe_sub($r->Z, $r->Y);
-        $r->Y = self::fe_add($r->Z, $r->Y);
-        $r->Z = self::fe_add($t0, $r->T);
-        $r->T = self::fe_sub($t0, $r->T);
+        $r->X = self::fe_add( $p->Y, $p->X );
+        $r->Y = self::fe_sub( $p->Y, $p->X );
+        $r->Z = self::fe_mul( $r->X, $q->YplusX );
+        $r->Y = self::fe_mul( $r->Y, $q->YminusX );
+        $r->T = self::fe_mul( $q->T2d, $p->T );
+        $r->X = self::fe_mul( $p->Z, $q->Z );
+        $t0   = self::fe_add( $r->X, $r->X );
+        $r->X = self::fe_sub( $r->Z, $r->Y );
+        $r->Y = self::fe_add( $r->Z, $r->Y );
+        $r->Z = self::fe_add( $t0, $r->T );
+        $r->T = self::fe_sub( $t0, $r->T );
         return $r;
     }
 
@@ -1140,42 +1140,42 @@ 
      * @throws SodiumException
      * @throws TypeError
      */
-    public static function slide($a)
+    public static function slide( $a )
     {
-        if (self::strlen($a) < 256) {
-            if (self::strlen($a) < 16) {
-                $a = str_pad($a, 256, '0', STR_PAD_RIGHT);
+        if ( self::strlen( $a ) < 256 ) {
+            if ( self::strlen( $a ) < 16 ) {
+                $a = str_pad( $a, 256, '0', STR_PAD_RIGHT );
             }
         }
         /** @var array<int, int> $r */
         $r = array();
 
         /** @var int $i */
-        for ($i = 0; $i < 256; ++$i) {
-            $r[$i] = (int) (
+        for ( $i = 0; $i < 256; ++$i ) {
+            $r[ $i ] = (int)(
                 1 & (
-                    self::chrToInt($a[(int) ($i >> 3)])
+                    self::chrToInt( $a[ (int)( $i >> 3 ) ] )
                         >>
-                    ($i & 7)
+                    ( $i & 7 )
                 )
             );
         }
 
-        for ($i = 0;$i < 256;++$i) {
-            if ($r[$i]) {
-                for ($b = 1;$b <= 6 && $i + $b < 256;++$b) {
-                    if ($r[$i + $b]) {
-                        if ($r[$i] + ($r[$i + $b] << $b) <= 15) {
-                            $r[$i] += $r[$i + $b] << $b;
-                            $r[$i + $b] = 0;
-                        } elseif ($r[$i] - ($r[$i + $b] << $b) >= -15) {
-                            $r[$i] -= $r[$i + $b] << $b;
-                            for ($k = $i + $b; $k < 256; ++$k) {
-                                if (!$r[$k]) {
-                                    $r[$k] = 1;
+        for ( $i = 0; $i < 256; ++$i ) {
+            if ( $r[ $i ] ) {
+                for ( $b = 1; $b <= 6 && $i + $b < 256; ++$b ) {
+                    if ( $r[ $i + $b ] ) {
+                        if ( $r[ $i ] + ( $r[ $i + $b ] << $b ) <= 15 ) {
+                            $r[ $i ] += $r[ $i + $b ] << $b;
+                            $r[ $i + $b ] = 0;
+                        } elseif ( $r[ $i ] - ( $r[ $i + $b ] << $b ) >= -15 ) {
+                            $r[ $i ] -= $r[ $i + $b ] << $b;
+                            for ( $k = $i + $b; $k < 256; ++$k ) {
+                                if ( ! $r[ $k ] ) {
+                                    $r[ $k ] = 1;
                                     break;
                                 }
-                                $r[$k] = 0;
+                                $r[ $k ] = 0;
                             }
                         } else {
                             break;
@@ -1195,18 +1195,18 @@ 
      * @throws SodiumException
      * @throws TypeError
      */
-    public static function ge_frombytes_negate_vartime($s)
+    public static function ge_frombytes_negate_vartime( $s )
     {
         static $d = null;
-        if (!$d) {
-            $d = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d);
+        if ( ! $d ) {
+            $d = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$d );
         }
 
         # fe_frombytes(h->Y,s);
         # fe_1(h->Z);
         $h = new ParagonIE_Sodium_Core_Curve25519_Ge_P3(
             self::fe_0(),
-            self::fe_frombytes($s),
+            self::fe_frombytes( $s ),
             self::fe_1()
         );
 
@@ -1214,36 +1214,36 @@ 
         # fe_mul(v,u,d);
         # fe_sub(u,u,h->Z);       /* u = y^2-1 */
         # fe_add(v,v,h->Z);       /* v = dy^2+1 */
-        $u = self::fe_sq($h->Y);
+        $u = self::fe_sq( $h->Y );
         /** @var ParagonIE_Sodium_Core_Curve25519_Fe $d */
-        $v = self::fe_mul($u, $d);
-        $u = self::fe_sub($u, $h->Z); /* u =  y^2 - 1 */
-        $v = self::fe_add($v, $h->Z); /* v = dy^2 + 1 */
+        $v = self::fe_mul( $u, $d );
+        $u = self::fe_sub( $u, $h->Z ); /* u =  y^2 - 1 */
+        $v = self::fe_add( $v, $h->Z ); /* v = dy^2 + 1 */
 
         # fe_sq(v3,v);
         # fe_mul(v3,v3,v);        /* v3 = v^3 */
         # fe_sq(h->X,v3);
         # fe_mul(h->X,h->X,v);
         # fe_mul(h->X,h->X,u);    /* x = uv^7 */
-        $v3 = self::fe_sq($v);
-        $v3 = self::fe_mul($v3, $v); /* v3 = v^3 */
-        $h->X = self::fe_sq($v3);
-        $h->X = self::fe_mul($h->X, $v);
-        $h->X = self::fe_mul($h->X, $u); /* x = uv^7 */
+        $v3 = self::fe_sq( $v );
+        $v3 = self::fe_mul( $v3, $v ); /* v3 = v^3 */
+        $h->X = self::fe_sq( $v3 );
+        $h->X = self::fe_mul( $h->X, $v );
+        $h->X = self::fe_mul( $h->X, $u ); /* x = uv^7 */
 
         # fe_pow22523(h->X,h->X); /* x = (uv^7)^((q-5)/8) */
         # fe_mul(h->X,h->X,v3);
         # fe_mul(h->X,h->X,u);    /* x = uv^3(uv^7)^((q-5)/8) */
-        $h->X = self::fe_pow22523($h->X); /* x = (uv^7)^((q-5)/8) */
-        $h->X = self::fe_mul($h->X, $v3);
-        $h->X = self::fe_mul($h->X, $u); /* x = uv^3(uv^7)^((q-5)/8) */
+        $h->X = self::fe_pow22523( $h->X ); /* x = (uv^7)^((q-5)/8) */
+        $h->X = self::fe_mul( $h->X, $v3 );
+        $h->X = self::fe_mul( $h->X, $u ); /* x = uv^3(uv^7)^((q-5)/8) */
 
         # fe_sq(vxx,h->X);
         # fe_mul(vxx,vxx,v);
         # fe_sub(check,vxx,u);    /* vx^2-u */
-        $vxx = self::fe_sq($h->X);
-        $vxx = self::fe_mul($vxx, $v);
-        $check = self::fe_sub($vxx, $u); /* vx^2 - u */
+        $vxx = self::fe_sq( $h->X );
+        $vxx = self::fe_mul( $vxx, $v );
+        $check = self::fe_sub( $vxx, $u ); /* vx^2 - u */
 
         # if (fe_isnonzero(check)) {
         #     fe_add(check,vxx,u);  /* vx^2+u */
@@ -1252,27 +1252,27 @@ 
         #     }
         #     fe_mul(h->X,h->X,sqrtm1);
         # }
-        if (self::fe_isnonzero($check)) {
-            $check = self::fe_add($vxx, $u); /* vx^2 + u */
-            if (self::fe_isnonzero($check)) {
-                throw new RangeException('Internal check failed.');
+        if ( self::fe_isnonzero( $check ) ) {
+            $check = self::fe_add( $vxx, $u ); /* vx^2 + u */
+            if ( self::fe_isnonzero( $check ) ) {
+                throw new RangeException( 'Internal check failed.' );
             }
             $h->X = self::fe_mul(
                 $h->X,
-                ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1)
+                ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$sqrtm1 )
             );
         }
 
         # if (fe_isnegative(h->X) == (s[31] >> 7)) {
         #     fe_neg(h->X,h->X);
         # }
-        $i = self::chrToInt($s[31]);
-        if (self::fe_isnegative($h->X) === ($i >> 7)) {
-            $h->X = self::fe_neg($h->X);
+        $i = self::chrToInt( $s[ 31 ] );
+        if ( self::fe_isnegative( $h->X ) === ( $i >> 7 ) ) {
+            $h->X = self::fe_neg( $h->X );
         }
 
         # fe_mul(h->T,h->X,h->Y);
-        $h->T = self::fe_mul($h->X, $h->Y);
+        $h->T = self::fe_mul( $h->X, $h->Y );
         return $h;
     }
 
@@ -1290,16 +1290,16 @@ 
         ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $q
     ) {
         $r = clone $R;
-        $r->X = self::fe_add($p->Y, $p->X);
-        $r->Y = self::fe_sub($p->Y, $p->X);
-        $r->Z = self::fe_mul($r->X, $q->yplusx);
-        $r->Y = self::fe_mul($r->Y, $q->yminusx);
-        $r->T = self::fe_mul($q->xy2d, $p->T);
-        $t0 = self::fe_add(clone $p->Z, clone $p->Z);
-        $r->X = self::fe_sub($r->Z, $r->Y);
-        $r->Y = self::fe_add($r->Z, $r->Y);
-        $r->Z = self::fe_add($t0, $r->T);
-        $r->T = self::fe_sub($t0, $r->T);
+        $r->X = self::fe_add( $p->Y, $p->X );
+        $r->Y = self::fe_sub( $p->Y, $p->X );
+        $r->Z = self::fe_mul( $r->X, $q->yplusx );
+        $r->Y = self::fe_mul( $r->Y, $q->yminusx );
+        $r->T = self::fe_mul( $q->xy2d, $p->T );
+        $t0 = self::fe_add( clone $p->Z, clone $p->Z );
+        $r->X = self::fe_sub( $r->Z, $r->Y );
+        $r->Y = self::fe_add( $r->Z, $r->Y );
+        $r->Z = self::fe_add( $t0, $r->T );
+        $r->T = self::fe_sub( $t0, $r->T );
 
         return $r;
     }
@@ -1319,16 +1319,16 @@ 
     ) {
         $r = clone $R;
 
-        $r->X = self::fe_add($p->Y, $p->X);
-        $r->Y = self::fe_sub($p->Y, $p->X);
-        $r->Z = self::fe_mul($r->X, $q->yminusx);
-        $r->Y = self::fe_mul($r->Y, $q->yplusx);
-        $r->T = self::fe_mul($q->xy2d, $p->T);
-        $t0 = self::fe_add($p->Z, $p->Z);
-        $r->X = self::fe_sub($r->Z, $r->Y);
-        $r->Y = self::fe_add($r->Z, $r->Y);
-        $r->Z = self::fe_sub($t0, $r->T);
-        $r->T = self::fe_add($t0, $r->T);
+        $r->X = self::fe_add( $p->Y, $p->X );
+        $r->Y = self::fe_sub( $p->Y, $p->X );
+        $r->Z = self::fe_mul( $r->X, $q->yminusx );
+        $r->Y = self::fe_mul( $r->Y, $q->yplusx );
+        $r->T = self::fe_mul( $q->xy2d, $p->T );
+        $t0 = self::fe_add( $p->Z, $p->Z );
+        $r->X = self::fe_sub( $r->Z, $r->Y );
+        $r->Y = self::fe_add( $r->Z, $r->Y );
+        $r->Z = self::fe_sub( $t0, $r->T );
+        $r->T = self::fe_add( $t0, $r->T );
 
         return $r;
     }
@@ -1339,12 +1339,12 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2
      */
-    public static function ge_p1p1_to_p2(ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p)
+    public static function ge_p1p1_to_p2( ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p )
     {
         $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P2();
-        $r->X = self::fe_mul($p->X, $p->T);
-        $r->Y = self::fe_mul($p->Y, $p->Z);
-        $r->Z = self::fe_mul($p->Z, $p->T);
+        $r->X = self::fe_mul( $p->X, $p->T );
+        $r->Y = self::fe_mul( $p->Y, $p->Z );
+        $r->Z = self::fe_mul( $p->Z, $p->T );
         return $r;
     }
 
@@ -1354,13 +1354,13 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
      */
-    public static function ge_p1p1_to_p3(ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p)
+    public static function ge_p1p1_to_p3( ParagonIE_Sodium_Core_Curve25519_Ge_P1p1 $p )
     {
         $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P3();
-        $r->X = self::fe_mul($p->X, $p->T);
-        $r->Y = self::fe_mul($p->Y, $p->Z);
-        $r->Z = self::fe_mul($p->Z, $p->T);
-        $r->T = self::fe_mul($p->X, $p->Y);
+        $r->X = self::fe_mul( $p->X, $p->T );
+        $r->Y = self::fe_mul( $p->Y, $p->Z );
+        $r->Z = self::fe_mul( $p->Z, $p->T );
+        $r->T = self::fe_mul( $p->X, $p->Y );
         return $r;
     }
 
@@ -1384,19 +1384,19 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Ge_P2 $p
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
      */
-    public static function ge_p2_dbl(ParagonIE_Sodium_Core_Curve25519_Ge_P2 $p)
+    public static function ge_p2_dbl( ParagonIE_Sodium_Core_Curve25519_Ge_P2 $p )
     {
         $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1();
 
-        $r->X = self::fe_sq($p->X);
-        $r->Z = self::fe_sq($p->Y);
-        $r->T = self::fe_sq2($p->Z);
-        $r->Y = self::fe_add($p->X, $p->Y);
-        $t0   = self::fe_sq($r->Y);
-        $r->Y = self::fe_add($r->Z, $r->X);
-        $r->Z = self::fe_sub($r->Z, $r->X);
-        $r->X = self::fe_sub($t0, $r->Y);
-        $r->T = self::fe_sub($r->T, $r->Z);
+        $r->X = self::fe_sq( $p->X );
+        $r->Z = self::fe_sq( $p->Y );
+        $r->T = self::fe_sq2( $p->Z );
+        $r->Y = self::fe_add( $p->X, $p->Y );
+        $t0   = self::fe_sq( $r->Y );
+        $r->Y = self::fe_add( $r->Z, $r->X );
+        $r->Z = self::fe_sub( $r->Z, $r->X );
+        $r->X = self::fe_sub( $t0, $r->Y );
+        $r->T = self::fe_sub( $r->T, $r->Z );
 
         return $r;
     }
@@ -1422,18 +1422,18 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_Cached
      */
-    public static function ge_p3_to_cached(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p)
+    public static function ge_p3_to_cached( ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p )
     {
         static $d2 = null;
-        if ($d2 === null) {
-            $d2 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d2);
+        if ( $d2 === null ) {
+            $d2 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$d2 );
         }
         /** @var ParagonIE_Sodium_Core_Curve25519_Fe $d2 */
         $r = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached();
-        $r->YplusX = self::fe_add($p->Y, $p->X);
-        $r->YminusX = self::fe_sub($p->Y, $p->X);
-        $r->Z = self::fe_copy($p->Z);
-        $r->T2d = self::fe_mul($p->T, $d2);
+        $r->YplusX = self::fe_add( $p->Y, $p->X );
+        $r->YminusX = self::fe_sub( $p->Y, $p->X );
+        $r->Z = self::fe_copy( $p->Z );
+        $r->T2d = self::fe_mul( $p->T, $d2 );
         return $r;
     }
 
@@ -1443,12 +1443,12 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_P2
      */
-    public static function ge_p3_to_p2(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p)
+    public static function ge_p3_to_p2( ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p )
     {
         return new ParagonIE_Sodium_Core_Curve25519_Ge_P2(
-            self::fe_copy($p->X),
-            self::fe_copy($p->Y),
-            self::fe_copy($p->Z)
+            self::fe_copy( $p->X ),
+            self::fe_copy( $p->Y ),
+            self::fe_copy( $p->Z )
         );
     }
 
@@ -1460,14 +1460,14 @@ 
      * @throws SodiumException
      * @throws TypeError
      */
-    public static function ge_p3_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h)
+    public static function ge_p3_tobytes( ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h )
     {
-        $recip = self::fe_invert($h->Z);
-        $x = self::fe_mul($h->X, $recip);
-        $y = self::fe_mul($h->Y, $recip);
-        $s = self::fe_tobytes($y);
-        $s[31] = self::intToChr(
-            self::chrToInt($s[31]) ^ (self::fe_isnegative($x) << 7)
+        $recip = self::fe_invert( $h->Z );
+        $x = self::fe_mul( $h->X, $recip );
+        $y = self::fe_mul( $h->Y, $recip );
+        $s = self::fe_tobytes( $y );
+        $s[ 31 ] = self::intToChr(
+            self::chrToInt( $s[ 31 ] ) ^ ( self::fe_isnegative( $x ) << 7 )
         );
         return $s;
     }
@@ -1478,10 +1478,10 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_P1p1
      */
-    public static function ge_p3_dbl(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p)
+    public static function ge_p3_dbl( ParagonIE_Sodium_Core_Curve25519_Ge_P3 $p )
     {
-        $q = self::ge_p3_to_p2($p);
-        return self::ge_p2_dbl($q);
+        $q = self::ge_p3_to_p2( $p );
+        return self::ge_p2_dbl( $q );
     }
 
     /**
@@ -1503,9 +1503,9 @@ 
      * @param int $c
      * @return int
      */
-    public static function equal($b, $c)
+    public static function equal( $b, $c )
     {
-        return (int) ((($b ^ $c) - 1) >> 31) & 1;
+        return (int)( ( ( $b ^ $c ) - 1 ) >> 31 ) & 1;
     }
 
     /**
@@ -1516,13 +1516,13 @@ 
      * @throws SodiumException
      * @throws TypeError
      */
-    public static function negative($char)
+    public static function negative( $char )
     {
-        if (is_int($char)) {
-            return ($char >> 63) & 1;
+        if ( is_int( $char ) ) {
+            return ( $char >> 63 ) & 1;
         }
-        $x = self::chrToInt(self::substr($char, 0, 1));
-        return (int) ($x >> 63);
+        $x = self::chrToInt( self::substr( $char, 0, 1 ) );
+        return (int)( $x >> 63 );
     }
 
     /**
@@ -1540,13 +1540,13 @@ 
         ParagonIE_Sodium_Core_Curve25519_Ge_Precomp $u,
         $b
     ) {
-        if (!is_int($b)) {
-            throw new InvalidArgumentException('Expected an integer.');
+        if ( ! is_int( $b ) ) {
+            throw new InvalidArgumentException( 'Expected an integer.' );
         }
         return new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
-            self::fe_cmov($t->yplusx,  $u->yplusx,  $b),
-            self::fe_cmov($t->yminusx, $u->yminusx, $b),
-            self::fe_cmov($t->xy2d,    $u->xy2d,    $b)
+            self::fe_cmov( $t->yplusx, $u->yplusx, $b ),
+            self::fe_cmov( $t->yminusx, $u->yminusx, $b ),
+            self::fe_cmov( $t->xy2d, $u->xy2d, $b )
         );
     }
 
@@ -1563,10 +1563,10 @@ 
     ) {
         $b &= 1;
         $ret = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached();
-        $ret->YplusX  = self::fe_cmov($t->YplusX,  $u->YplusX,  $b);
-        $ret->YminusX = self::fe_cmov($t->YminusX, $u->YminusX, $b);
-        $ret->Z       = self::fe_cmov($t->Z,       $u->Z,       $b);
-        $ret->T2d     = self::fe_cmov($t->T2d,     $u->T2d,     $b);
+        $ret->YplusX  = self::fe_cmov( $t->YplusX, $u->YplusX, $b );
+        $ret->YminusX = self::fe_cmov( $t->YminusX, $u->YminusX, $b );
+        $ret->Z       = self::fe_cmov( $t->Z, $u->Z, $b );
+        $ret->T2d     = self::fe_cmov( $t->T2d, $u->T2d, $b );
         return $ret;
     }
 
@@ -1576,12 +1576,12 @@ 
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_Cached
      * @throws SodiumException
      */
-    public static function ge_cmov8_cached(array $cached, $b)
+    public static function ge_cmov8_cached( array $cached, $b )
     {
         // const unsigned char bnegative = negative(b);
         // const unsigned char babs      = b - (((-bnegative) & b) * ((signed char) 1 << 1));
-        $bnegative = self::negative($b);
-        $babs = $b - (((-$bnegative) & $b) << 1);
+        $bnegative = self::negative( $b );
+        $babs = $b - ( ( (-$bnegative) & $b ) << 1 );
 
         // ge25519_cached_0(t);
         $t = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached(
@@ -1599,8 +1599,8 @@ 
         // ge25519_cmov_cached(t, &cached[5], equal(babs, 6));
         // ge25519_cmov_cached(t, &cached[6], equal(babs, 7));
         // ge25519_cmov_cached(t, &cached[7], equal(babs, 8));
-        for ($x = 0; $x < 8; ++$x) {
-            $t = self::ge_cmov_cached($t, $cached[$x], self::equal($babs, $x + 1));
+        for ( $x = 0; $x < 8; ++$x ) {
+            $t = self::ge_cmov_cached( $t, $cached[ $x ], self::equal( $babs, $x + 1 ) );
         }
 
         // fe25519_copy(minust.YplusX, t->YminusX);
@@ -1608,12 +1608,12 @@ 
         // fe25519_copy(minust.Z, t->Z);
         // fe25519_neg(minust.T2d, t->T2d);
         $minust = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached(
-            self::fe_copy($t->YminusX),
-            self::fe_copy($t->YplusX),
-            self::fe_copy($t->Z),
-            self::fe_neg($t->T2d)
+            self::fe_copy( $t->YminusX ),
+            self::fe_copy( $t->YplusX ),
+            self::fe_copy( $t->Z ),
+            self::fe_neg( $t->T2d )
         );
-        return self::ge_cmov_cached($t, $minust, $bnegative);
+        return self::ge_cmov_cached( $t, $minust, $bnegative );
     }
 
     /**
@@ -1628,47 +1628,47 @@ 
      * @psalm-suppress MixedArrayAccess
      * @psalm-suppress MixedArrayOffset
      */
-    public static function ge_select($pos = 0, $b = 0)
+    public static function ge_select( $pos = 0, $b = 0 )
     {
         static $base = null;
-        if ($base === null) {
+        if ( $base === null ) {
             $base = array();
             /** @var int $i */
-            foreach (self::$base as $i => $bas) {
-                for ($j = 0; $j < 8; ++$j) {
-                    $base[$i][$j] = new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
-                        ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($bas[$j][0]),
-                        ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($bas[$j][1]),
-                        ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($bas[$j][2])
+            foreach ( self::$base as $i => $bas ) {
+                for ( $j = 0; $j < 8; ++$j ) {
+                    $base[ $i ][ $j ] = new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
+                        ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( $bas[ $j ][ 0 ] ),
+                        ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( $bas[ $j ][ 1 ] ),
+                        ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( $bas[ $j ][ 2 ] )
                     );
                 }
             }
         }
         /** @var array<int, array<int, ParagonIE_Sodium_Core_Curve25519_Ge_Precomp>> $base */
-        if (!is_int($pos)) {
-            throw new InvalidArgumentException('Position must be an integer');
+        if ( ! is_int( $pos ) ) {
+            throw new InvalidArgumentException( 'Position must be an integer' );
         }
-        if ($pos < 0 || $pos > 31) {
-            throw new RangeException('Position is out of range [0, 31]');
+        if ( $pos < 0 || $pos > 31 ) {
+            throw new RangeException( 'Position is out of range [0, 31]' );
         }
 
-        $bnegative = self::negative($b);
-        $babs = $b - (((-$bnegative) & $b) << 1);
+        $bnegative = self::negative( $b );
+        $babs = $b - ( ( (-$bnegative) & $b ) << 1 );
 
         $t = self::ge_precomp_0();
-        for ($i = 0; $i < 8; ++$i) {
+        for ( $i = 0; $i < 8; ++$i ) {
             $t = self::cmov(
                 $t,
-                $base[$pos][$i],
-                self::equal($babs, $i + 1)
+                $base[ $pos ][ $i ],
+                self::equal( $babs, $i + 1 )
             );
         }
         $minusT = new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
-            self::fe_copy($t->yminusx),
-            self::fe_copy($t->yplusx),
-            self::fe_neg($t->xy2d)
+            self::fe_copy( $t->yminusx ),
+            self::fe_copy( $t->yplusx ),
+            self::fe_neg( $t->xy2d )
         );
-        return self::cmov($t, $minusT, $bnegative);
+        return self::cmov( $t, $minusT, $bnegative );
     }
 
     /**
@@ -1688,17 +1688,17 @@ 
     ) {
         $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1();
 
-        $r->X = self::fe_add($p->Y, $p->X);
-        $r->Y = self::fe_sub($p->Y, $p->X);
-        $r->Z = self::fe_mul($r->X, $q->YminusX);
-        $r->Y = self::fe_mul($r->Y, $q->YplusX);
-        $r->T = self::fe_mul($q->T2d, $p->T);
-        $r->X = self::fe_mul($p->Z, $q->Z);
-        $t0 = self::fe_add($r->X, $r->X);
-        $r->X = self::fe_sub($r->Z, $r->Y);
-        $r->Y = self::fe_add($r->Z, $r->Y);
-        $r->Z = self::fe_sub($t0, $r->T);
-        $r->T = self::fe_add($t0, $r->T);
+        $r->X = self::fe_add( $p->Y, $p->X );
+        $r->Y = self::fe_sub( $p->Y, $p->X );
+        $r->Z = self::fe_mul( $r->X, $q->YminusX );
+        $r->Y = self::fe_mul( $r->Y, $q->YplusX );
+        $r->T = self::fe_mul( $q->T2d, $p->T );
+        $r->X = self::fe_mul( $p->Z, $q->Z );
+        $t0 = self::fe_add( $r->X, $r->X );
+        $r->X = self::fe_sub( $r->Z, $r->Y );
+        $r->Y = self::fe_add( $r->Z, $r->Y );
+        $r->Z = self::fe_sub( $t0, $r->T );
+        $r->T = self::fe_add( $t0, $r->T );
 
         return $r;
     }
@@ -1711,14 +1711,14 @@ 
      * @throws SodiumException
      * @throws TypeError
      */
-    public static function ge_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P2 $h)
+    public static function ge_tobytes( ParagonIE_Sodium_Core_Curve25519_Ge_P2 $h )
     {
-        $recip = self::fe_invert($h->Z);
-        $x = self::fe_mul($h->X, $recip);
-        $y = self::fe_mul($h->Y, $recip);
-        $s = self::fe_tobytes($y);
-        $s[31] = self::intToChr(
-            self::chrToInt($s[31]) ^ (self::fe_isnegative($x) << 7)
+        $recip = self::fe_invert( $h->Z );
+        $x = self::fe_mul( $h->X, $recip );
+        $y = self::fe_mul( $h->Y, $recip );
+        $s = self::fe_tobytes( $y );
+        $s[ 31 ] = self::intToChr(
+            self::chrToInt( $s[ 31 ] ) ^ ( self::fe_isnegative( $x ) << 7 )
         );
         return $s;
     }
@@ -1745,17 +1745,17 @@ 
 
         /** @var array<int, ParagonIE_Sodium_Core_Curve25519_Ge_Precomp> $Bi */
         static $Bi = array();
-        if (!$Bi) {
-            for ($i = 0; $i < 8; ++$i) {
-                $Bi[$i] = new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
-                    ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$base2[$i][0]),
-                    ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$base2[$i][1]),
-                    ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$base2[$i][2])
+        if ( ! $Bi ) {
+            for ( $i = 0; $i < 8; ++$i ) {
+                $Bi[ $i ] = new ParagonIE_Sodium_Core_Curve25519_Ge_Precomp(
+                    ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$base2[ $i ][ 0 ] ),
+                    ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$base2[ $i ][ 1 ] ),
+                    ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$base2[ $i ][ 2 ] )
                 );
             }
         }
-        for ($i = 0; $i < 8; ++$i) {
-            $Ai[$i] = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached(
+        for ( $i = 0; $i < 8; ++$i ) {
+            $Ai[ $i ] = new ParagonIE_Sodium_Core_Curve25519_Ge_Cached(
                 self::fe_0(),
                 self::fe_0(),
                 self::fe_0(),
@@ -1766,15 +1766,15 @@ 
         # slide(aslide,a);
         # slide(bslide,b);
         /** @var array<int, int> $aslide */
-        $aslide = self::slide($a);
+        $aslide = self::slide( $a );
         /** @var array<int, int> $bslide */
-        $bslide = self::slide($b);
+        $bslide = self::slide( $b );
 
         # ge_p3_to_cached(&Ai[0],A);
         # ge_p3_dbl(&t,A); ge_p1p1_to_p3(&A2,&t);
-        $Ai[0] = self::ge_p3_to_cached($A);
-        $t = self::ge_p3_dbl($A);
-        $A2 = self::ge_p1p1_to_p3($t);
+        $Ai[ 0 ] = self::ge_p3_to_cached( $A );
+        $t = self::ge_p3_dbl( $A );
+        $A2 = self::ge_p1p1_to_p3( $t );
 
         # ge_add(&t,&A2,&Ai[0]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[1],&u);
         # ge_add(&t,&A2,&Ai[1]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[2],&u);
@@ -1783,10 +1783,10 @@ 
         # ge_add(&t,&A2,&Ai[4]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[5],&u);
         # ge_add(&t,&A2,&Ai[5]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[6],&u);
         # ge_add(&t,&A2,&Ai[6]); ge_p1p1_to_p3(&u,&t); ge_p3_to_cached(&Ai[7],&u);
-        for ($i = 0; $i < 7; ++$i) {
-            $t = self::ge_add($A2, $Ai[$i]);
-            $u = self::ge_p1p1_to_p3($t);
-            $Ai[$i + 1] = self::ge_p3_to_cached($u);
+        for ( $i = 0; $i < 7; ++$i ) {
+            $t = self::ge_add( $A2, $Ai[ $i ] );
+            $u = self::ge_p1p1_to_p3( $t );
+            $Ai[ $i + 1 ] = self::ge_p3_to_cached( $u );
         }
 
         # ge_p2_0(r);
@@ -1796,56 +1796,56 @@ 
         #     if (aslide[i] || bslide[i]) break;
         # }
         $i = 255;
-        for (; $i >= 0; --$i) {
-            if ($aslide[$i] || $bslide[$i]) {
+        for ( ; $i >= 0; --$i ) {
+            if ( $aslide[ $i ] || $bslide[ $i ] ) {
                 break;
             }
         }
 
         # for (;i >= 0;--i) {
-        for (; $i >= 0; --$i) {
+        for ( ; $i >= 0; --$i ) {
             # ge_p2_dbl(&t,r);
-            $t = self::ge_p2_dbl($r);
+            $t = self::ge_p2_dbl( $r );
 
             # if (aslide[i] > 0) {
-            if ($aslide[$i] > 0) {
+            if ( $aslide[ $i ] > 0 ) {
                 # ge_p1p1_to_p3(&u,&t);
                 # ge_add(&t,&u,&Ai[aslide[i]/2]);
-                $u = self::ge_p1p1_to_p3($t);
+                $u = self::ge_p1p1_to_p3( $t );
                 $t = self::ge_add(
                     $u,
-                    $Ai[(int) floor($aslide[$i] / 2)]
+                    $Ai[ (int)floor( $aslide[ $i ] / 2 ) ]
                 );
             # } else if (aslide[i] < 0) {
-            } elseif ($aslide[$i] < 0) {
+            } elseif ( $aslide[ $i ] < 0 ) {
                 # ge_p1p1_to_p3(&u,&t);
                 # ge_sub(&t,&u,&Ai[(-aslide[i])/2]);
-                $u = self::ge_p1p1_to_p3($t);
+                $u = self::ge_p1p1_to_p3( $t );
                 $t = self::ge_sub(
                     $u,
-                    $Ai[(int) floor(-$aslide[$i] / 2)]
+                    $Ai[ (int)floor(-$aslide[ $i ] / 2) ]
                 );
             }
 
             # if (bslide[i] > 0) {
-            if ($bslide[$i] > 0) {
+            if ( $bslide[ $i ] > 0 ) {
                 /** @var int $index */
-                $index = (int) floor($bslide[$i] / 2);
+                $index = (int)floor( $bslide[ $i ] / 2 );
                 # ge_p1p1_to_p3(&u,&t);
                 # ge_madd(&t,&u,&Bi[bslide[i]/2]);
-                $u = self::ge_p1p1_to_p3($t);
-                $t = self::ge_madd($t, $u, $Bi[$index]);
+                $u = self::ge_p1p1_to_p3( $t );
+                $t = self::ge_madd( $t, $u, $Bi[ $index ] );
             # } else if (bslide[i] < 0) {
-            } elseif ($bslide[$i] < 0) {
+            } elseif ( $bslide[ $i ] < 0 ) {
                 /** @var int $index */
-                $index = (int) floor(-$bslide[$i] / 2);
+                $index = (int)floor(-$bslide[ $i ] / 2);
                 # ge_p1p1_to_p3(&u,&t);
                 # ge_msub(&t,&u,&Bi[(-bslide[i])/2]);
-                $u = self::ge_p1p1_to_p3($t);
-                $t = self::ge_msub($t, $u, $Bi[$index]);
+                $u = self::ge_p1p1_to_p3( $t );
+                $t = self::ge_msub( $t, $u, $Bi[ $index ] );
             }
             # ge_p1p1_to_p2(r,&t);
-            $r = self::ge_p1p1_to_p2($t);
+            $r = self::ge_p1p1_to_p2( $t );
         }
         return $r;
     }
@@ -1861,73 +1861,73 @@ 
      * @psalm-suppress MixedAssignment
      * @psalm-suppress MixedOperand
      */
-    public static function ge_scalarmult($a, $p)
+    public static function ge_scalarmult( $a, $p )
     {
-        $e = array_fill(0, 64, 0);
+        $e = array_fill( 0, 64, 0 );
 
         /** @var ParagonIE_Sodium_Core_Curve25519_Ge_Cached[] $pi */
         $pi = array();
 
         //        ge25519_p3_to_cached(&pi[1 - 1], p);   /* p */
-        $pi[0] = self::ge_p3_to_cached($p);
+        $pi[ 0 ] = self::ge_p3_to_cached( $p );
 
         //        ge25519_p3_dbl(&t2, p);
         //        ge25519_p1p1_to_p3(&p2, &t2);
         //        ge25519_p3_to_cached(&pi[2 - 1], &p2); /* 2p = 2*p */
-        $t2 = self::ge_p3_dbl($p);
-        $p2 = self::ge_p1p1_to_p3($t2);
-        $pi[1] = self::ge_p3_to_cached($p2);
+        $t2 = self::ge_p3_dbl( $p );
+        $p2 = self::ge_p1p1_to_p3( $t2 );
+        $pi[ 1 ] = self::ge_p3_to_cached( $p2 );
 
         //        ge25519_add_cached(&t3, p, &pi[2 - 1]);
         //        ge25519_p1p1_to_p3(&p3, &t3);
         //        ge25519_p3_to_cached(&pi[3 - 1], &p3); /* 3p = 2p+p */
-        $t3 = self::ge_add($p, $pi[1]);
-        $p3 = self::ge_p1p1_to_p3($t3);
-        $pi[2] = self::ge_p3_to_cached($p3);
+        $t3 = self::ge_add( $p, $pi[ 1 ] );
+        $p3 = self::ge_p1p1_to_p3( $t3 );
+        $pi[ 2 ] = self::ge_p3_to_cached( $p3 );
 
         //        ge25519_p3_dbl(&t4, &p2);
         //        ge25519_p1p1_to_p3(&p4, &t4);
         //        ge25519_p3_to_cached(&pi[4 - 1], &p4); /* 4p = 2*2p */
-        $t4 = self::ge_p3_dbl($p2);
-        $p4 = self::ge_p1p1_to_p3($t4);
-        $pi[3] = self::ge_p3_to_cached($p4);
+        $t4 = self::ge_p3_dbl( $p2 );
+        $p4 = self::ge_p1p1_to_p3( $t4 );
+        $pi[ 3 ] = self::ge_p3_to_cached( $p4 );
 
         //        ge25519_add_cached(&t5, p, &pi[4 - 1]);
         //        ge25519_p1p1_to_p3(&p5, &t5);
         //        ge25519_p3_to_cached(&pi[5 - 1], &p5); /* 5p = 4p+p */
-        $t5 = self::ge_add($p, $pi[3]);
-        $p5 = self::ge_p1p1_to_p3($t5);
-        $pi[4] = self::ge_p3_to_cached($p5);
+        $t5 = self::ge_add( $p, $pi[ 3 ] );
+        $p5 = self::ge_p1p1_to_p3( $t5 );
+        $pi[ 4 ] = self::ge_p3_to_cached( $p5 );
 
         //        ge25519_p3_dbl(&t6, &p3);
         //        ge25519_p1p1_to_p3(&p6, &t6);
         //        ge25519_p3_to_cached(&pi[6 - 1], &p6); /* 6p = 2*3p */
-        $t6 = self::ge_p3_dbl($p3);
-        $p6 = self::ge_p1p1_to_p3($t6);
-        $pi[5] = self::ge_p3_to_cached($p6);
+        $t6 = self::ge_p3_dbl( $p3 );
+        $p6 = self::ge_p1p1_to_p3( $t6 );
+        $pi[ 5 ] = self::ge_p3_to_cached( $p6 );
 
         //        ge25519_add_cached(&t7, p, &pi[6 - 1]);
         //        ge25519_p1p1_to_p3(&p7, &t7);
         //        ge25519_p3_to_cached(&pi[7 - 1], &p7); /* 7p = 6p+p */
-        $t7 = self::ge_add($p, $pi[5]);
-        $p7 = self::ge_p1p1_to_p3($t7);
-        $pi[6] = self::ge_p3_to_cached($p7);
+        $t7 = self::ge_add( $p, $pi[ 5 ] );
+        $p7 = self::ge_p1p1_to_p3( $t7 );
+        $pi[ 6 ] = self::ge_p3_to_cached( $p7 );
 
         //        ge25519_p3_dbl(&t8, &p4);
         //        ge25519_p1p1_to_p3(&p8, &t8);
         //        ge25519_p3_to_cached(&pi[8 - 1], &p8); /* 8p = 2*4p */
-        $t8 = self::ge_p3_dbl($p4);
-        $p8 = self::ge_p1p1_to_p3($t8);
-        $pi[7] = self::ge_p3_to_cached($p8);
+        $t8 = self::ge_p3_dbl( $p4 );
+        $p8 = self::ge_p1p1_to_p3( $t8 );
+        $pi[ 7 ] = self::ge_p3_to_cached( $p8 );
 
 
         //        for (i = 0; i < 32; ++i) {
         //            e[2 * i + 0] = (a[i] >> 0) & 15;
         //            e[2 * i + 1] = (a[i] >> 4) & 15;
         //        }
-        for ($i = 0; $i < 32; ++$i) {
-            $e[($i << 1)    ] =  self::chrToInt($a[$i]) & 15;
-            $e[($i << 1) + 1] = (self::chrToInt($a[$i]) >> 4) & 15;
+        for ( $i = 0; $i < 32; ++$i ) {
+            $e[ ( $i << 1 ) ] = self::chrToInt( $a[ $i ] ) & 15;
+            $e[ ( $i << 1 ) + 1 ] = ( self::chrToInt( $a[ $i ] ) >> 4 ) & 15;
         }
         //        /* each e[i] is between 0 and 15 */
         //        /* e[63] is between 0 and 7 */
@@ -1940,25 +1940,25 @@ 
         //            e[i] -= carry * ((signed char) 1 << 4);
         //        }
         $carry = 0;
-        for ($i = 0; $i < 63; ++$i) {
-            $e[$i] += $carry;
-            $carry = $e[$i] + 8;
+        for ( $i = 0; $i < 63; ++$i ) {
+            $e[ $i ] += $carry;
+            $carry = $e[ $i ] + 8;
             $carry >>= 4;
-            $e[$i] -= $carry << 4;
+            $e[ $i ] -= $carry << 4;
         }
         //        e[63] += carry;
         //        /* each e[i] is between -8 and 8 */
-        $e[63] += $carry;
+        $e[ 63 ] += $carry;
 
         //        ge25519_p3_0(h);
         $h = self::ge_p3_0();
 
         //        for (i = 63; i != 0; i--) {
-        for ($i = 63; $i != 0; --$i) {
+        for ( $i = 63; $i != 0; --$i ) {
             // ge25519_cmov8_cached(&t, pi, e[i]);
-            $t = self::ge_cmov8_cached($pi, $e[$i]);
+            $t = self::ge_cmov8_cached( $pi, $e[ $i ] );
             // ge25519_add_cached(&r, h, &t);
-            $r = self::ge_add($h, $t);
+            $r = self::ge_add( $h, $t );
 
             // ge25519_p1p1_to_p2(&s, &r);
             // ge25519_p2_dbl(&r, &s);
@@ -1968,25 +1968,25 @@ 
             // ge25519_p2_dbl(&r, &s);
             // ge25519_p1p1_to_p2(&s, &r);
             // ge25519_p2_dbl(&r, &s);
-            $s = self::ge_p1p1_to_p2($r);
-            $r = self::ge_p2_dbl($s);
-            $s = self::ge_p1p1_to_p2($r);
-            $r = self::ge_p2_dbl($s);
-            $s = self::ge_p1p1_to_p2($r);
-            $r = self::ge_p2_dbl($s);
-            $s = self::ge_p1p1_to_p2($r);
-            $r = self::ge_p2_dbl($s);
+            $s = self::ge_p1p1_to_p2( $r );
+            $r = self::ge_p2_dbl( $s );
+            $s = self::ge_p1p1_to_p2( $r );
+            $r = self::ge_p2_dbl( $s );
+            $s = self::ge_p1p1_to_p2( $r );
+            $r = self::ge_p2_dbl( $s );
+            $s = self::ge_p1p1_to_p2( $r );
+            $r = self::ge_p2_dbl( $s );
 
             // ge25519_p1p1_to_p3(h, &r);  /* *16 */
-            $h = self::ge_p1p1_to_p3($r); /* *16 */
+            $h = self::ge_p1p1_to_p3( $r ); /* *16 */
         }
 
         //        ge25519_cmov8_cached(&t, pi, e[i]);
         //        ge25519_add_cached(&r, h, &t);
         //        ge25519_p1p1_to_p3(h, &r);
-        $t = self::ge_cmov8_cached($pi, $e[0]);
-        $r = self::ge_add($h, $t);
-        return self::ge_p1p1_to_p3($r);
+        $t = self::ge_cmov8_cached( $pi, $e[ 0 ] );
+        $r = self::ge_add( $h, $t );
+        return self::ge_p1p1_to_p3( $r );
     }
 
     /**
@@ -1999,50 +1999,50 @@ 
      * @psalm-suppress MixedAssignment
      * @psalm-suppress MixedOperand
      */
-    public static function ge_scalarmult_base($a)
+    public static function ge_scalarmult_base( $a )
     {
         /** @var array<int, int> $e */
         $e = array();
         $r = new ParagonIE_Sodium_Core_Curve25519_Ge_P1p1();
 
-        for ($i = 0; $i < 32; ++$i) {
-            $dbl = (int) $i << 1;
-            $e[$dbl] = (int) self::chrToInt($a[$i]) & 15;
-            $e[$dbl + 1] = (int) (self::chrToInt($a[$i]) >> 4) & 15;
+        for ( $i = 0; $i < 32; ++$i ) {
+            $dbl = (int)$i << 1;
+            $e[ $dbl ] = (int)self::chrToInt( $a[ $i ] ) & 15;
+            $e[ $dbl + 1 ] = (int)( self::chrToInt( $a[ $i ] ) >> 4 ) & 15;
         }
 
         $carry = 0;
-        for ($i = 0; $i < 63; ++$i) {
-            $e[$i] += $carry;
-            $carry = $e[$i] + 8;
+        for ( $i = 0; $i < 63; ++$i ) {
+            $e[ $i ] += $carry;
+            $carry = $e[ $i ] + 8;
             $carry >>= 4;
-            $e[$i] -= $carry << 4;
+            $e[ $i ] -= $carry << 4;
         }
-        $e[63] += (int) $carry;
+        $e[ 63 ] += (int)$carry;
 
         $h = self::ge_p3_0();
 
-        for ($i = 1; $i < 64; $i += 2) {
-            $t = self::ge_select((int) floor($i / 2), (int) $e[$i]);
-            $r = self::ge_madd($r, $h, $t);
-            $h = self::ge_p1p1_to_p3($r);
+        for ( $i = 1; $i < 64; $i += 2 ) {
+            $t = self::ge_select( (int)floor( $i / 2 ), (int)$e[ $i ] );
+            $r = self::ge_madd( $r, $h, $t );
+            $h = self::ge_p1p1_to_p3( $r );
         }
 
-        $r = self::ge_p3_dbl($h);
+        $r = self::ge_p3_dbl( $h );
 
-        $s = self::ge_p1p1_to_p2($r);
-        $r = self::ge_p2_dbl($s);
-        $s = self::ge_p1p1_to_p2($r);
-        $r = self::ge_p2_dbl($s);
-        $s = self::ge_p1p1_to_p2($r);
-        $r = self::ge_p2_dbl($s);
+        $s = self::ge_p1p1_to_p2( $r );
+        $r = self::ge_p2_dbl( $s );
+        $s = self::ge_p1p1_to_p2( $r );
+        $r = self::ge_p2_dbl( $s );
+        $s = self::ge_p1p1_to_p2( $r );
+        $r = self::ge_p2_dbl( $s );
 
-        $h = self::ge_p1p1_to_p3($r);
+        $h = self::ge_p1p1_to_p3( $r );
 
-        for ($i = 0; $i < 64; $i += 2) {
-            $t = self::ge_select($i >> 1, (int) $e[$i]);
-            $r = self::ge_madd($r, $h, $t);
-            $h = self::ge_p1p1_to_p3($r);
+        for ( $i = 0; $i < 64; $i += 2 ) {
+            $t = self::ge_select( $i >> 1, (int)$e[ $i ] );
+            $r = self::ge_madd( $r, $h, $t );
+            $h = self::ge_p1p1_to_p3( $r );
         }
         return $h;
     }
@@ -2059,330 +2059,330 @@ 
      * @return string
      * @throws TypeError
      */
-    public static function sc_muladd($a, $b, $c)
+    public static function sc_muladd( $a, $b, $c )
     {
-        $a0 = 2097151 & self::load_3(self::substr($a, 0, 3));
-        $a1 = 2097151 & (self::load_4(self::substr($a, 2, 4)) >> 5);
-        $a2 = 2097151 & (self::load_3(self::substr($a, 5, 3)) >> 2);
-        $a3 = 2097151 & (self::load_4(self::substr($a, 7, 4)) >> 7);
-        $a4 = 2097151 & (self::load_4(self::substr($a, 10, 4)) >> 4);
-        $a5 = 2097151 & (self::load_3(self::substr($a, 13, 3)) >> 1);
-        $a6 = 2097151 & (self::load_4(self::substr($a, 15, 4)) >> 6);
-        $a7 = 2097151 & (self::load_3(self::substr($a, 18, 3)) >> 3);
-        $a8 = 2097151 & self::load_3(self::substr($a, 21, 3));
-        $a9 = 2097151 & (self::load_4(self::substr($a, 23, 4)) >> 5);
-        $a10 = 2097151 & (self::load_3(self::substr($a, 26, 3)) >> 2);
-        $a11 = (self::load_4(self::substr($a, 28, 4)) >> 7);
-
-        $b0 = 2097151 & self::load_3(self::substr($b, 0, 3));
-        $b1 = 2097151 & (self::load_4(self::substr($b, 2, 4)) >> 5);
-        $b2 = 2097151 & (self::load_3(self::substr($b, 5, 3)) >> 2);
-        $b3 = 2097151 & (self::load_4(self::substr($b, 7, 4)) >> 7);
-        $b4 = 2097151 & (self::load_4(self::substr($b, 10, 4)) >> 4);
-        $b5 = 2097151 & (self::load_3(self::substr($b, 13, 3)) >> 1);
-        $b6 = 2097151 & (self::load_4(self::substr($b, 15, 4)) >> 6);
-        $b7 = 2097151 & (self::load_3(self::substr($b, 18, 3)) >> 3);
-        $b8 = 2097151 & self::load_3(self::substr($b, 21, 3));
-        $b9 = 2097151 & (self::load_4(self::substr($b, 23, 4)) >> 5);
-        $b10 = 2097151 & (self::load_3(self::substr($b, 26, 3)) >> 2);
-        $b11 = (self::load_4(self::substr($b, 28, 4)) >> 7);
-
-        $c0 = 2097151 & self::load_3(self::substr($c, 0, 3));
-        $c1 = 2097151 & (self::load_4(self::substr($c, 2, 4)) >> 5);
-        $c2 = 2097151 & (self::load_3(self::substr($c, 5, 3)) >> 2);
-        $c3 = 2097151 & (self::load_4(self::substr($c, 7, 4)) >> 7);
-        $c4 = 2097151 & (self::load_4(self::substr($c, 10, 4)) >> 4);
-        $c5 = 2097151 & (self::load_3(self::substr($c, 13, 3)) >> 1);
-        $c6 = 2097151 & (self::load_4(self::substr($c, 15, 4)) >> 6);
-        $c7 = 2097151 & (self::load_3(self::substr($c, 18, 3)) >> 3);
-        $c8 = 2097151 & self::load_3(self::substr($c, 21, 3));
-        $c9 = 2097151 & (self::load_4(self::substr($c, 23, 4)) >> 5);
-        $c10 = 2097151 & (self::load_3(self::substr($c, 26, 3)) >> 2);
-        $c11 = (self::load_4(self::substr($c, 28, 4)) >> 7);
+        $a0 = 2097151 & self::load_3( self::substr( $a, 0, 3 ) );
+        $a1 = 2097151 & ( self::load_4( self::substr( $a, 2, 4 ) ) >> 5 );
+        $a2 = 2097151 & ( self::load_3( self::substr( $a, 5, 3 ) ) >> 2 );
+        $a3 = 2097151 & ( self::load_4( self::substr( $a, 7, 4 ) ) >> 7 );
+        $a4 = 2097151 & ( self::load_4( self::substr( $a, 10, 4 ) ) >> 4 );
+        $a5 = 2097151 & ( self::load_3( self::substr( $a, 13, 3 ) ) >> 1 );
+        $a6 = 2097151 & ( self::load_4( self::substr( $a, 15, 4 ) ) >> 6 );
+        $a7 = 2097151 & ( self::load_3( self::substr( $a, 18, 3 ) ) >> 3 );
+        $a8 = 2097151 & self::load_3( self::substr( $a, 21, 3 ) );
+        $a9 = 2097151 & ( self::load_4( self::substr( $a, 23, 4 ) ) >> 5 );
+        $a10 = 2097151 & ( self::load_3( self::substr( $a, 26, 3 ) ) >> 2 );
+        $a11 = ( self::load_4( self::substr( $a, 28, 4 ) ) >> 7 );
+
+        $b0 = 2097151 & self::load_3( self::substr( $b, 0, 3 ) );
+        $b1 = 2097151 & ( self::load_4( self::substr( $b, 2, 4 ) ) >> 5 );
+        $b2 = 2097151 & ( self::load_3( self::substr( $b, 5, 3 ) ) >> 2 );
+        $b3 = 2097151 & ( self::load_4( self::substr( $b, 7, 4 ) ) >> 7 );
+        $b4 = 2097151 & ( self::load_4( self::substr( $b, 10, 4 ) ) >> 4 );
+        $b5 = 2097151 & ( self::load_3( self::substr( $b, 13, 3 ) ) >> 1 );
+        $b6 = 2097151 & ( self::load_4( self::substr( $b, 15, 4 ) ) >> 6 );
+        $b7 = 2097151 & ( self::load_3( self::substr( $b, 18, 3 ) ) >> 3 );
+        $b8 = 2097151 & self::load_3( self::substr( $b, 21, 3 ) );
+        $b9 = 2097151 & ( self::load_4( self::substr( $b, 23, 4 ) ) >> 5 );
+        $b10 = 2097151 & ( self::load_3( self::substr( $b, 26, 3 ) ) >> 2 );
+        $b11 = ( self::load_4( self::substr( $b, 28, 4 ) ) >> 7 );
+
+        $c0 = 2097151 & self::load_3( self::substr( $c, 0, 3 ) );
+        $c1 = 2097151 & ( self::load_4( self::substr( $c, 2, 4 ) ) >> 5 );
+        $c2 = 2097151 & ( self::load_3( self::substr( $c, 5, 3 ) ) >> 2 );
+        $c3 = 2097151 & ( self::load_4( self::substr( $c, 7, 4 ) ) >> 7 );
+        $c4 = 2097151 & ( self::load_4( self::substr( $c, 10, 4 ) ) >> 4 );
+        $c5 = 2097151 & ( self::load_3( self::substr( $c, 13, 3 ) ) >> 1 );
+        $c6 = 2097151 & ( self::load_4( self::substr( $c, 15, 4 ) ) >> 6 );
+        $c7 = 2097151 & ( self::load_3( self::substr( $c, 18, 3 ) ) >> 3 );
+        $c8 = 2097151 & self::load_3( self::substr( $c, 21, 3 ) );
+        $c9 = 2097151 & ( self::load_4( self::substr( $c, 23, 4 ) ) >> 5 );
+        $c10 = 2097151 & ( self::load_3( self::substr( $c, 26, 3 ) ) >> 2 );
+        $c11 = ( self::load_4( self::substr( $c, 28, 4 ) ) >> 7 );
 
         /* Can't really avoid the pyramid here: */
-        $s0 = $c0 + self::mul($a0, $b0, 24);
-        $s1 = $c1 + self::mul($a0, $b1, 24) + self::mul($a1, $b0, 24);
-        $s2 = $c2 + self::mul($a0, $b2, 24) + self::mul($a1, $b1, 24) + self::mul($a2, $b0, 24);
-        $s3 = $c3 + self::mul($a0, $b3, 24) + self::mul($a1, $b2, 24) + self::mul($a2, $b1, 24) + self::mul($a3, $b0, 24);
-        $s4 = $c4 + self::mul($a0, $b4, 24) + self::mul($a1, $b3, 24) + self::mul($a2, $b2, 24) + self::mul($a3, $b1, 24) +
-               self::mul($a4, $b0, 24);
-        $s5 = $c5 + self::mul($a0, $b5, 24) + self::mul($a1, $b4, 24) + self::mul($a2, $b3, 24) + self::mul($a3, $b2, 24) +
-               self::mul($a4, $b1, 24) + self::mul($a5, $b0, 24);
-        $s6 = $c6 + self::mul($a0, $b6, 24) + self::mul($a1, $b5, 24) + self::mul($a2, $b4, 24) + self::mul($a3, $b3, 24) +
-               self::mul($a4, $b2, 24) + self::mul($a5, $b1, 24) + self::mul($a6, $b0, 24);
-        $s7 = $c7 + self::mul($a0, $b7, 24) + self::mul($a1, $b6, 24) + self::mul($a2, $b5, 24) + self::mul($a3, $b4, 24) +
-               self::mul($a4, $b3, 24) + self::mul($a5, $b2, 24) + self::mul($a6, $b1, 24) + self::mul($a7, $b0, 24);
-        $s8 = $c8 + self::mul($a0, $b8, 24) + self::mul($a1, $b7, 24) + self::mul($a2, $b6, 24) + self::mul($a3, $b5, 24) +
-               self::mul($a4, $b4, 24) + self::mul($a5, $b3, 24) + self::mul($a6, $b2, 24) + self::mul($a7, $b1, 24) +
-               self::mul($a8, $b0, 24);
-        $s9 = $c9 + self::mul($a0, $b9, 24) + self::mul($a1, $b8, 24) + self::mul($a2, $b7, 24) + self::mul($a3, $b6, 24) +
-               self::mul($a4, $b5, 24) + self::mul($a5, $b4, 24) + self::mul($a6, $b3, 24) + self::mul($a7, $b2, 24) +
-               self::mul($a8, $b1, 24) + self::mul($a9, $b0, 24);
-        $s10 = $c10 + self::mul($a0, $b10, 24) + self::mul($a1, $b9, 24) + self::mul($a2, $b8, 24) + self::mul($a3, $b7, 24) +
-               self::mul($a4, $b6, 24) + self::mul($a5, $b5, 24) + self::mul($a6, $b4, 24) + self::mul($a7, $b3, 24) +
-               self::mul($a8, $b2, 24) + self::mul($a9, $b1, 24) + self::mul($a10, $b0, 24);
-        $s11 = $c11 + self::mul($a0, $b11, 24) + self::mul($a1, $b10, 24) + self::mul($a2, $b9, 24) + self::mul($a3, $b8, 24) +
-               self::mul($a4, $b7, 24) + self::mul($a5, $b6, 24) + self::mul($a6, $b5, 24) + self::mul($a7, $b4, 24) +
-               self::mul($a8, $b3, 24) + self::mul($a9, $b2, 24) + self::mul($a10, $b1, 24) + self::mul($a11, $b0, 24);
-        $s12 = self::mul($a1, $b11, 24) + self::mul($a2, $b10, 24) + self::mul($a3, $b9, 24) + self::mul($a4, $b8, 24) +
-               self::mul($a5, $b7, 24) + self::mul($a6, $b6, 24) + self::mul($a7, $b5, 24) + self::mul($a8, $b4, 24) +
-               self::mul($a9, $b3, 24) + self::mul($a10, $b2, 24) + self::mul($a11, $b1, 24);
-        $s13 = self::mul($a2, $b11, 24) + self::mul($a3, $b10, 24) + self::mul($a4, $b9, 24) + self::mul($a5, $b8, 24) +
-               self::mul($a6, $b7, 24) + self::mul($a7, $b6, 24) + self::mul($a8, $b5, 24) + self::mul($a9, $b4, 24) +
-               self::mul($a10, $b3, 24) + self::mul($a11, $b2, 24);
-        $s14 = self::mul($a3, $b11, 24) + self::mul($a4, $b10, 24) + self::mul($a5, $b9, 24) + self::mul($a6, $b8, 24) +
-               self::mul($a7, $b7, 24) + self::mul($a8, $b6, 24) + self::mul($a9, $b5, 24) + self::mul($a10, $b4, 24) +
-               self::mul($a11, $b3, 24);
-        $s15 = self::mul($a4, $b11, 24) + self::mul($a5, $b10, 24) + self::mul($a6, $b9, 24) + self::mul($a7, $b8, 24) +
-               self::mul($a8, $b7, 24) + self::mul($a9, $b6, 24) + self::mul($a10, $b5, 24) + self::mul($a11, $b4, 24);
-        $s16 = self::mul($a5, $b11, 24) + self::mul($a6, $b10, 24) + self::mul($a7, $b9, 24) + self::mul($a8, $b8, 24) +
-               self::mul($a9, $b7, 24) + self::mul($a10, $b6, 24) + self::mul($a11, $b5, 24);
-        $s17 = self::mul($a6, $b11, 24) + self::mul($a7, $b10, 24) + self::mul($a8, $b9, 24) + self::mul($a9, $b8, 24) +
-               self::mul($a10, $b7, 24) + self::mul($a11, $b6, 24);
-        $s18 = self::mul($a7, $b11, 24) + self::mul($a8, $b10, 24) + self::mul($a9, $b9, 24) + self::mul($a10, $b8, 24) +
-               self::mul($a11, $b7, 24);
-        $s19 = self::mul($a8, $b11, 24) + self::mul($a9, $b10, 24) + self::mul($a10, $b9, 24) + self::mul($a11, $b8, 24);
-        $s20 = self::mul($a9, $b11, 24) + self::mul($a10, $b10, 24) + self::mul($a11, $b9, 24);
-        $s21 = self::mul($a10, $b11, 24) + self::mul($a11, $b10, 24);
-        $s22 = self::mul($a11, $b11, 24);
+        $s0 = $c0 + self::mul( $a0, $b0, 24 );
+        $s1 = $c1 + self::mul( $a0, $b1, 24 ) + self::mul( $a1, $b0, 24 );
+        $s2 = $c2 + self::mul( $a0, $b2, 24 ) + self::mul( $a1, $b1, 24 ) + self::mul( $a2, $b0, 24 );
+        $s3 = $c3 + self::mul( $a0, $b3, 24 ) + self::mul( $a1, $b2, 24 ) + self::mul( $a2, $b1, 24 ) + self::mul( $a3, $b0, 24 );
+        $s4 = $c4 + self::mul( $a0, $b4, 24 ) + self::mul( $a1, $b3, 24 ) + self::mul( $a2, $b2, 24 ) + self::mul( $a3, $b1, 24 ) +
+               self::mul( $a4, $b0, 24 );
+        $s5 = $c5 + self::mul( $a0, $b5, 24 ) + self::mul( $a1, $b4, 24 ) + self::mul( $a2, $b3, 24 ) + self::mul( $a3, $b2, 24 ) +
+               self::mul( $a4, $b1, 24 ) + self::mul( $a5, $b0, 24 );
+        $s6 = $c6 + self::mul( $a0, $b6, 24 ) + self::mul( $a1, $b5, 24 ) + self::mul( $a2, $b4, 24 ) + self::mul( $a3, $b3, 24 ) +
+               self::mul( $a4, $b2, 24 ) + self::mul( $a5, $b1, 24 ) + self::mul( $a6, $b0, 24 );
+        $s7 = $c7 + self::mul( $a0, $b7, 24 ) + self::mul( $a1, $b6, 24 ) + self::mul( $a2, $b5, 24 ) + self::mul( $a3, $b4, 24 ) +
+               self::mul( $a4, $b3, 24 ) + self::mul( $a5, $b2, 24 ) + self::mul( $a6, $b1, 24 ) + self::mul( $a7, $b0, 24 );
+        $s8 = $c8 + self::mul( $a0, $b8, 24 ) + self::mul( $a1, $b7, 24 ) + self::mul( $a2, $b6, 24 ) + self::mul( $a3, $b5, 24 ) +
+               self::mul( $a4, $b4, 24 ) + self::mul( $a5, $b3, 24 ) + self::mul( $a6, $b2, 24 ) + self::mul( $a7, $b1, 24 ) +
+               self::mul( $a8, $b0, 24 );
+        $s9 = $c9 + self::mul( $a0, $b9, 24 ) + self::mul( $a1, $b8, 24 ) + self::mul( $a2, $b7, 24 ) + self::mul( $a3, $b6, 24 ) +
+               self::mul( $a4, $b5, 24 ) + self::mul( $a5, $b4, 24 ) + self::mul( $a6, $b3, 24 ) + self::mul( $a7, $b2, 24 ) +
+               self::mul( $a8, $b1, 24 ) + self::mul( $a9, $b0, 24 );
+        $s10 = $c10 + self::mul( $a0, $b10, 24 ) + self::mul( $a1, $b9, 24 ) + self::mul( $a2, $b8, 24 ) + self::mul( $a3, $b7, 24 ) +
+               self::mul( $a4, $b6, 24 ) + self::mul( $a5, $b5, 24 ) + self::mul( $a6, $b4, 24 ) + self::mul( $a7, $b3, 24 ) +
+               self::mul( $a8, $b2, 24 ) + self::mul( $a9, $b1, 24 ) + self::mul( $a10, $b0, 24 );
+        $s11 = $c11 + self::mul( $a0, $b11, 24 ) + self::mul( $a1, $b10, 24 ) + self::mul( $a2, $b9, 24 ) + self::mul( $a3, $b8, 24 ) +
+               self::mul( $a4, $b7, 24 ) + self::mul( $a5, $b6, 24 ) + self::mul( $a6, $b5, 24 ) + self::mul( $a7, $b4, 24 ) +
+               self::mul( $a8, $b3, 24 ) + self::mul( $a9, $b2, 24 ) + self::mul( $a10, $b1, 24 ) + self::mul( $a11, $b0, 24 );
+        $s12 = self::mul( $a1, $b11, 24 ) + self::mul( $a2, $b10, 24 ) + self::mul( $a3, $b9, 24 ) + self::mul( $a4, $b8, 24 ) +
+               self::mul( $a5, $b7, 24 ) + self::mul( $a6, $b6, 24 ) + self::mul( $a7, $b5, 24 ) + self::mul( $a8, $b4, 24 ) +
+               self::mul( $a9, $b3, 24 ) + self::mul( $a10, $b2, 24 ) + self::mul( $a11, $b1, 24 );
+        $s13 = self::mul( $a2, $b11, 24 ) + self::mul( $a3, $b10, 24 ) + self::mul( $a4, $b9, 24 ) + self::mul( $a5, $b8, 24 ) +
+               self::mul( $a6, $b7, 24 ) + self::mul( $a7, $b6, 24 ) + self::mul( $a8, $b5, 24 ) + self::mul( $a9, $b4, 24 ) +
+               self::mul( $a10, $b3, 24 ) + self::mul( $a11, $b2, 24 );
+        $s14 = self::mul( $a3, $b11, 24 ) + self::mul( $a4, $b10, 24 ) + self::mul( $a5, $b9, 24 ) + self::mul( $a6, $b8, 24 ) +
+               self::mul( $a7, $b7, 24 ) + self::mul( $a8, $b6, 24 ) + self::mul( $a9, $b5, 24 ) + self::mul( $a10, $b4, 24 ) +
+               self::mul( $a11, $b3, 24 );
+        $s15 = self::mul( $a4, $b11, 24 ) + self::mul( $a5, $b10, 24 ) + self::mul( $a6, $b9, 24 ) + self::mul( $a7, $b8, 24 ) +
+               self::mul( $a8, $b7, 24 ) + self::mul( $a9, $b6, 24 ) + self::mul( $a10, $b5, 24 ) + self::mul( $a11, $b4, 24 );
+        $s16 = self::mul( $a5, $b11, 24 ) + self::mul( $a6, $b10, 24 ) + self::mul( $a7, $b9, 24 ) + self::mul( $a8, $b8, 24 ) +
+               self::mul( $a9, $b7, 24 ) + self::mul( $a10, $b6, 24 ) + self::mul( $a11, $b5, 24 );
+        $s17 = self::mul( $a6, $b11, 24 ) + self::mul( $a7, $b10, 24 ) + self::mul( $a8, $b9, 24 ) + self::mul( $a9, $b8, 24 ) +
+               self::mul( $a10, $b7, 24 ) + self::mul( $a11, $b6, 24 );
+        $s18 = self::mul( $a7, $b11, 24 ) + self::mul( $a8, $b10, 24 ) + self::mul( $a9, $b9, 24 ) + self::mul( $a10, $b8, 24 ) +
+               self::mul( $a11, $b7, 24 );
+        $s19 = self::mul( $a8, $b11, 24 ) + self::mul( $a9, $b10, 24 ) + self::mul( $a10, $b9, 24 ) + self::mul( $a11, $b8, 24 );
+        $s20 = self::mul( $a9, $b11, 24 ) + self::mul( $a10, $b10, 24 ) + self::mul( $a11, $b9, 24 );
+        $s21 = self::mul( $a10, $b11, 24 ) + self::mul( $a11, $b10, 24 );
+        $s22 = self::mul( $a11, $b11, 24 );
         $s23 = 0;
 
-        $carry0 = ($s0 + (1 << 20)) >> 21;
+        $carry0 = ( $s0 + ( 1 << 20 ) ) >> 21;
         $s1 += $carry0;
         $s0 -= $carry0 << 21;
-        $carry2 = ($s2 + (1 << 20)) >> 21;
+        $carry2 = ( $s2 + ( 1 << 20 ) ) >> 21;
         $s3 += $carry2;
         $s2 -= $carry2 << 21;
-        $carry4 = ($s4 + (1 << 20)) >> 21;
+        $carry4 = ( $s4 + ( 1 << 20 ) ) >> 21;
         $s5 += $carry4;
         $s4 -= $carry4 << 21;
-        $carry6 = ($s6 + (1 << 20)) >> 21;
+        $carry6 = ( $s6 + ( 1 << 20 ) ) >> 21;
         $s7 += $carry6;
         $s6 -= $carry6 << 21;
-        $carry8 = ($s8 + (1 << 20)) >> 21;
+        $carry8 = ( $s8 + ( 1 << 20 ) ) >> 21;
         $s9 += $carry8;
         $s8 -= $carry8 << 21;
-        $carry10 = ($s10 + (1 << 20)) >> 21;
+        $carry10 = ( $s10 + ( 1 << 20 ) ) >> 21;
         $s11 += $carry10;
         $s10 -= $carry10 << 21;
-        $carry12 = ($s12 + (1 << 20)) >> 21;
+        $carry12 = ( $s12 + ( 1 << 20 ) ) >> 21;
         $s13 += $carry12;
         $s12 -= $carry12 << 21;
-        $carry14 = ($s14 + (1 << 20)) >> 21;
+        $carry14 = ( $s14 + ( 1 << 20 ) ) >> 21;
         $s15 += $carry14;
         $s14 -= $carry14 << 21;
-        $carry16 = ($s16 + (1 << 20)) >> 21;
+        $carry16 = ( $s16 + ( 1 << 20 ) ) >> 21;
         $s17 += $carry16;
         $s16 -= $carry16 << 21;
-        $carry18 = ($s18 + (1 << 20)) >> 21;
+        $carry18 = ( $s18 + ( 1 << 20 ) ) >> 21;
         $s19 += $carry18;
         $s18 -= $carry18 << 21;
-        $carry20 = ($s20 + (1 << 20)) >> 21;
+        $carry20 = ( $s20 + ( 1 << 20 ) ) >> 21;
         $s21 += $carry20;
         $s20 -= $carry20 << 21;
-        $carry22 = ($s22 + (1 << 20)) >> 21;
+        $carry22 = ( $s22 + ( 1 << 20 ) ) >> 21;
         $s23 += $carry22;
         $s22 -= $carry22 << 21;
 
-        $carry1 = ($s1 + (1 << 20)) >> 21;
+        $carry1 = ( $s1 + ( 1 << 20 ) ) >> 21;
         $s2 += $carry1;
         $s1 -= $carry1 << 21;
-        $carry3 = ($s3 + (1 << 20)) >> 21;
+        $carry3 = ( $s3 + ( 1 << 20 ) ) >> 21;
         $s4 += $carry3;
         $s3 -= $carry3 << 21;
-        $carry5 = ($s5 + (1 << 20)) >> 21;
+        $carry5 = ( $s5 + ( 1 << 20 ) ) >> 21;
         $s6 += $carry5;
         $s5 -= $carry5 << 21;
-        $carry7 = ($s7 + (1 << 20)) >> 21;
+        $carry7 = ( $s7 + ( 1 << 20 ) ) >> 21;
         $s8 += $carry7;
         $s7 -= $carry7 << 21;
-        $carry9 = ($s9 + (1 << 20)) >> 21;
+        $carry9 = ( $s9 + ( 1 << 20 ) ) >> 21;
         $s10 += $carry9;
         $s9 -= $carry9 << 21;
-        $carry11 = ($s11 + (1 << 20)) >> 21;
+        $carry11 = ( $s11 + ( 1 << 20 ) ) >> 21;
         $s12 += $carry11;
         $s11 -= $carry11 << 21;
-        $carry13 = ($s13 + (1 << 20)) >> 21;
+        $carry13 = ( $s13 + ( 1 << 20 ) ) >> 21;
         $s14 += $carry13;
         $s13 -= $carry13 << 21;
-        $carry15 = ($s15 + (1 << 20)) >> 21;
+        $carry15 = ( $s15 + ( 1 << 20 ) ) >> 21;
         $s16 += $carry15;
         $s15 -= $carry15 << 21;
-        $carry17 = ($s17 + (1 << 20)) >> 21;
+        $carry17 = ( $s17 + ( 1 << 20 ) ) >> 21;
         $s18 += $carry17;
         $s17 -= $carry17 << 21;
-        $carry19 = ($s19 + (1 << 20)) >> 21;
+        $carry19 = ( $s19 + ( 1 << 20 ) ) >> 21;
         $s20 += $carry19;
         $s19 -= $carry19 << 21;
-        $carry21 = ($s21 + (1 << 20)) >> 21;
+        $carry21 = ( $s21 + ( 1 << 20 ) ) >> 21;
         $s22 += $carry21;
         $s21 -= $carry21 << 21;
 
-        $s11 += self::mul($s23, 666643, 20);
-        $s12 += self::mul($s23, 470296, 19);
-        $s13 += self::mul($s23, 654183, 20);
-        $s14 -= self::mul($s23, 997805, 20);
-        $s15 += self::mul($s23, 136657, 18);
-        $s16 -= self::mul($s23, 683901, 20);
-
-        $s10 += self::mul($s22, 666643, 20);
-        $s11 += self::mul($s22, 470296, 19);
-        $s12 += self::mul($s22, 654183, 20);
-        $s13 -= self::mul($s22, 997805, 20);
-        $s14 += self::mul($s22, 136657, 18);
-        $s15 -= self::mul($s22, 683901, 20);
-
-        $s9  += self::mul($s21,  666643, 20);
-        $s10 += self::mul($s21,  470296, 19);
-        $s11 += self::mul($s21,  654183, 20);
-        $s12 -= self::mul($s21,  997805, 20);
-        $s13 += self::mul($s21,  136657, 18);
-        $s14 -= self::mul($s21,  683901, 20);
-
-        $s8  += self::mul($s20,  666643, 20);
-        $s9  += self::mul($s20,  470296, 19);
-        $s10 += self::mul($s20,  654183, 20);
-        $s11 -= self::mul($s20,  997805, 20);
-        $s12 += self::mul($s20,  136657, 18);
-        $s13 -= self::mul($s20,  683901, 20);
-
-        $s7  += self::mul($s19,  666643, 20);
-        $s8  += self::mul($s19,  470296, 19);
-        $s9  += self::mul($s19,  654183, 20);
-        $s10 -= self::mul($s19,  997805, 20);
-        $s11 += self::mul($s19,  136657, 18);
-        $s12 -= self::mul($s19,  683901, 20);
-
-        $s6  += self::mul($s18,  666643, 20);
-        $s7  += self::mul($s18,  470296, 19);
-        $s8  += self::mul($s18,  654183, 20);
-        $s9  -= self::mul($s18,  997805, 20);
-        $s10 += self::mul($s18,  136657, 18);
-        $s11 -= self::mul($s18,  683901, 20);
-
-        $carry6 = ($s6 + (1 << 20)) >> 21;
+        $s11 += self::mul( $s23, 666643, 20 );
+        $s12 += self::mul( $s23, 470296, 19 );
+        $s13 += self::mul( $s23, 654183, 20 );
+        $s14 -= self::mul( $s23, 997805, 20 );
+        $s15 += self::mul( $s23, 136657, 18 );
+        $s16 -= self::mul( $s23, 683901, 20 );
+
+        $s10 += self::mul( $s22, 666643, 20 );
+        $s11 += self::mul( $s22, 470296, 19 );
+        $s12 += self::mul( $s22, 654183, 20 );
+        $s13 -= self::mul( $s22, 997805, 20 );
+        $s14 += self::mul( $s22, 136657, 18 );
+        $s15 -= self::mul( $s22, 683901, 20 );
+
+        $s9  += self::mul( $s21, 666643, 20 );
+        $s10 += self::mul( $s21, 470296, 19 );
+        $s11 += self::mul( $s21, 654183, 20 );
+        $s12 -= self::mul( $s21, 997805, 20 );
+        $s13 += self::mul( $s21, 136657, 18 );
+        $s14 -= self::mul( $s21, 683901, 20 );
+
+        $s8  += self::mul( $s20, 666643, 20 );
+        $s9  += self::mul( $s20, 470296, 19 );
+        $s10 += self::mul( $s20, 654183, 20 );
+        $s11 -= self::mul( $s20, 997805, 20 );
+        $s12 += self::mul( $s20, 136657, 18 );
+        $s13 -= self::mul( $s20, 683901, 20 );
+
+        $s7  += self::mul( $s19, 666643, 20 );
+        $s8  += self::mul( $s19, 470296, 19 );
+        $s9  += self::mul( $s19, 654183, 20 );
+        $s10 -= self::mul( $s19, 997805, 20 );
+        $s11 += self::mul( $s19, 136657, 18 );
+        $s12 -= self::mul( $s19, 683901, 20 );
+
+        $s6  += self::mul( $s18, 666643, 20 );
+        $s7  += self::mul( $s18, 470296, 19 );
+        $s8  += self::mul( $s18, 654183, 20 );
+        $s9  -= self::mul( $s18, 997805, 20 );
+        $s10 += self::mul( $s18, 136657, 18 );
+        $s11 -= self::mul( $s18, 683901, 20 );
+
+        $carry6 = ( $s6 + ( 1 << 20 ) ) >> 21;
         $s7 += $carry6;
         $s6 -= $carry6 << 21;
-        $carry8 = ($s8 + (1 << 20)) >> 21;
+        $carry8 = ( $s8 + ( 1 << 20 ) ) >> 21;
         $s9 += $carry8;
         $s8 -= $carry8 << 21;
-        $carry10 = ($s10 + (1 << 20)) >> 21;
+        $carry10 = ( $s10 + ( 1 << 20 ) ) >> 21;
         $s11 += $carry10;
         $s10 -= $carry10 << 21;
-        $carry12 = ($s12 + (1 << 20)) >> 21;
+        $carry12 = ( $s12 + ( 1 << 20 ) ) >> 21;
         $s13 += $carry12;
         $s12 -= $carry12 << 21;
-        $carry14 = ($s14 + (1 << 20)) >> 21;
+        $carry14 = ( $s14 + ( 1 << 20 ) ) >> 21;
         $s15 += $carry14;
         $s14 -= $carry14 << 21;
-        $carry16 = ($s16 + (1 << 20)) >> 21;
+        $carry16 = ( $s16 + ( 1 << 20 ) ) >> 21;
         $s17 += $carry16;
         $s16 -= $carry16 << 21;
 
-        $carry7 = ($s7 + (1 << 20)) >> 21;
+        $carry7 = ( $s7 + ( 1 << 20 ) ) >> 21;
         $s8 += $carry7;
         $s7 -= $carry7 << 21;
-        $carry9 = ($s9 + (1 << 20)) >> 21;
+        $carry9 = ( $s9 + ( 1 << 20 ) ) >> 21;
         $s10 += $carry9;
         $s9 -= $carry9 << 21;
-        $carry11 = ($s11 + (1 << 20)) >> 21;
+        $carry11 = ( $s11 + ( 1 << 20 ) ) >> 21;
         $s12 += $carry11;
         $s11 -= $carry11 << 21;
-        $carry13 = ($s13 + (1 << 20)) >> 21;
+        $carry13 = ( $s13 + ( 1 << 20 ) ) >> 21;
         $s14 += $carry13;
         $s13 -= $carry13 << 21;
-        $carry15 = ($s15 + (1 << 20)) >> 21;
+        $carry15 = ( $s15 + ( 1 << 20 ) ) >> 21;
         $s16 += $carry15;
         $s15 -= $carry15 << 21;
 
-        $s5  += self::mul($s17,  666643, 20);
-        $s6  += self::mul($s17,  470296, 19);
-        $s7  += self::mul($s17,  654183, 20);
-        $s8  -= self::mul($s17,  997805, 20);
-        $s9  += self::mul($s17,  136657, 18);
-        $s10 -= self::mul($s17,  683901, 20);
-
-        $s4 += self::mul($s16,  666643, 20);
-        $s5 += self::mul($s16,  470296, 19);
-        $s6 += self::mul($s16,  654183, 20);
-        $s7 -= self::mul($s16,  997805, 20);
-        $s8 += self::mul($s16,  136657, 18);
-        $s9 -= self::mul($s16,  683901, 20);
-
-        $s3 += self::mul($s15,  666643, 20);
-        $s4 += self::mul($s15,  470296, 19);
-        $s5 += self::mul($s15,  654183, 20);
-        $s6 -= self::mul($s15,  997805, 20);
-        $s7 += self::mul($s15,  136657, 18);
-        $s8 -= self::mul($s15,  683901, 20);
-
-        $s2 += self::mul($s14,  666643, 20);
-        $s3 += self::mul($s14,  470296, 19);
-        $s4 += self::mul($s14,  654183, 20);
-        $s5 -= self::mul($s14,  997805, 20);
-        $s6 += self::mul($s14,  136657, 18);
-        $s7 -= self::mul($s14,  683901, 20);
-
-        $s1 += self::mul($s13,  666643, 20);
-        $s2 += self::mul($s13,  470296, 19);
-        $s3 += self::mul($s13,  654183, 20);
-        $s4 -= self::mul($s13,  997805, 20);
-        $s5 += self::mul($s13,  136657, 18);
-        $s6 -= self::mul($s13,  683901, 20);
-
-        $s0 += self::mul($s12,  666643, 20);
-        $s1 += self::mul($s12,  470296, 19);
-        $s2 += self::mul($s12,  654183, 20);
-        $s3 -= self::mul($s12,  997805, 20);
-        $s4 += self::mul($s12,  136657, 18);
-        $s5 -= self::mul($s12,  683901, 20);
+        $s5  += self::mul( $s17, 666643, 20 );
+        $s6  += self::mul( $s17, 470296, 19 );
+        $s7  += self::mul( $s17, 654183, 20 );
+        $s8  -= self::mul( $s17, 997805, 20 );
+        $s9  += self::mul( $s17, 136657, 18 );
+        $s10 -= self::mul( $s17, 683901, 20 );
+
+        $s4 += self::mul( $s16, 666643, 20 );
+        $s5 += self::mul( $s16, 470296, 19 );
+        $s6 += self::mul( $s16, 654183, 20 );
+        $s7 -= self::mul( $s16, 997805, 20 );
+        $s8 += self::mul( $s16, 136657, 18 );
+        $s9 -= self::mul( $s16, 683901, 20 );
+
+        $s3 += self::mul( $s15, 666643, 20 );
+        $s4 += self::mul( $s15, 470296, 19 );
+        $s5 += self::mul( $s15, 654183, 20 );
+        $s6 -= self::mul( $s15, 997805, 20 );
+        $s7 += self::mul( $s15, 136657, 18 );
+        $s8 -= self::mul( $s15, 683901, 20 );
+
+        $s2 += self::mul( $s14, 666643, 20 );
+        $s3 += self::mul( $s14, 470296, 19 );
+        $s4 += self::mul( $s14, 654183, 20 );
+        $s5 -= self::mul( $s14, 997805, 20 );
+        $s6 += self::mul( $s14, 136657, 18 );
+        $s7 -= self::mul( $s14, 683901, 20 );
+
+        $s1 += self::mul( $s13, 666643, 20 );
+        $s2 += self::mul( $s13, 470296, 19 );
+        $s3 += self::mul( $s13, 654183, 20 );
+        $s4 -= self::mul( $s13, 997805, 20 );
+        $s5 += self::mul( $s13, 136657, 18 );
+        $s6 -= self::mul( $s13, 683901, 20 );
+
+        $s0 += self::mul( $s12, 666643, 20 );
+        $s1 += self::mul( $s12, 470296, 19 );
+        $s2 += self::mul( $s12, 654183, 20 );
+        $s3 -= self::mul( $s12, 997805, 20 );
+        $s4 += self::mul( $s12, 136657, 18 );
+        $s5 -= self::mul( $s12, 683901, 20 );
         $s12 = 0;
 
-        $carry0 = ($s0 + (1 << 20)) >> 21;
+        $carry0 = ( $s0 + ( 1 << 20 ) ) >> 21;
         $s1 += $carry0;
         $s0 -= $carry0 << 21;
-        $carry2 = ($s2 + (1 << 20)) >> 21;
+        $carry2 = ( $s2 + ( 1 << 20 ) ) >> 21;
         $s3 += $carry2;
         $s2 -= $carry2 << 21;
-        $carry4 = ($s4 + (1 << 20)) >> 21;
+        $carry4 = ( $s4 + ( 1 << 20 ) ) >> 21;
         $s5 += $carry4;
         $s4 -= $carry4 << 21;
-        $carry6 = ($s6 + (1 << 20)) >> 21;
+        $carry6 = ( $s6 + ( 1 << 20 ) ) >> 21;
         $s7 += $carry6;
         $s6 -= $carry6 << 21;
-        $carry8 = ($s8 + (1 << 20)) >> 21;
+        $carry8 = ( $s8 + ( 1 << 20 ) ) >> 21;
         $s9 += $carry8;
         $s8 -= $carry8 << 21;
-        $carry10 = ($s10 + (1 << 20)) >> 21;
+        $carry10 = ( $s10 + ( 1 << 20 ) ) >> 21;
         $s11 += $carry10;
         $s10 -= $carry10 << 21;
 
-        $carry1 = ($s1 + (1 << 20)) >> 21;
+        $carry1 = ( $s1 + ( 1 << 20 ) ) >> 21;
         $s2 += $carry1;
         $s1 -= $carry1 << 21;
-        $carry3 = ($s3 + (1 << 20)) >> 21;
+        $carry3 = ( $s3 + ( 1 << 20 ) ) >> 21;
         $s4 += $carry3;
         $s3 -= $carry3 << 21;
-        $carry5 = ($s5 + (1 << 20)) >> 21;
+        $carry5 = ( $s5 + ( 1 << 20 ) ) >> 21;
         $s6 += $carry5;
         $s5 -= $carry5 << 21;
-        $carry7 = ($s7 + (1 << 20)) >> 21;
+        $carry7 = ( $s7 + ( 1 << 20 ) ) >> 21;
         $s8 += $carry7;
         $s7 -= $carry7 << 21;
-        $carry9 = ($s9 + (1 << 20)) >> 21;
+        $carry9 = ( $s9 + ( 1 << 20 ) ) >> 21;
         $s10 += $carry9;
         $s9 -= $carry9 << 21;
-        $carry11 = ($s11 + (1 << 20)) >> 21;
+        $carry11 = ( $s11 + ( 1 << 20 ) ) >> 21;
         $s12 += $carry11;
         $s11 -= $carry11 << 21;
 
-        $s0 += self::mul($s12,  666643, 20);
-        $s1 += self::mul($s12,  470296, 19);
-        $s2 += self::mul($s12,  654183, 20);
-        $s3 -= self::mul($s12,  997805, 20);
-        $s4 += self::mul($s12,  136657, 18);
-        $s5 -= self::mul($s12,  683901, 20);
+        $s0 += self::mul( $s12, 666643, 20 );
+        $s1 += self::mul( $s12, 470296, 19 );
+        $s2 += self::mul( $s12, 654183, 20 );
+        $s3 -= self::mul( $s12, 997805, 20 );
+        $s4 += self::mul( $s12, 136657, 18 );
+        $s5 -= self::mul( $s12, 683901, 20 );
         $s12 = 0;
 
         $carry0 = $s0 >> 21;
@@ -2422,12 +2422,12 @@ 
         $s12 += $carry11;
         $s11 -= $carry11 << 21;
 
-        $s0 += self::mul($s12,  666643, 20);
-        $s1 += self::mul($s12,  470296, 19);
-        $s2 += self::mul($s12,  654183, 20);
-        $s3 -= self::mul($s12,  997805, 20);
-        $s4 += self::mul($s12,  136657, 18);
-        $s5 -= self::mul($s12,  683901, 20);
+        $s0 += self::mul( $s12, 666643, 20 );
+        $s1 += self::mul( $s12, 470296, 19 );
+        $s2 += self::mul( $s12, 654183, 20 );
+        $s3 -= self::mul( $s12, 997805, 20 );
+        $s4 += self::mul( $s12, 136657, 18 );
+        $s5 -= self::mul( $s12, 683901, 20 );
 
         $carry0 = $s0 >> 21;
         $s1 += $carry0;
@@ -2467,40 +2467,40 @@ 
          * @var array<int, int>
          */
         $arr = array(
-            (int) (0xff & ($s0 >> 0)),
-            (int) (0xff & ($s0 >> 8)),
-            (int) (0xff & (($s0 >> 16) | $s1 << 5)),
-            (int) (0xff & ($s1 >> 3)),
-            (int) (0xff & ($s1 >> 11)),
-            (int) (0xff & (($s1 >> 19) | $s2 << 2)),
-            (int) (0xff & ($s2 >> 6)),
-            (int) (0xff & (($s2 >> 14) | $s3 << 7)),
-            (int) (0xff & ($s3 >> 1)),
-            (int) (0xff & ($s3 >> 9)),
-            (int) (0xff & (($s3 >> 17) | $s4 << 4)),
-            (int) (0xff & ($s4 >> 4)),
-            (int) (0xff & ($s4 >> 12)),
-            (int) (0xff & (($s4 >> 20) | $s5 << 1)),
-            (int) (0xff & ($s5 >> 7)),
-            (int) (0xff & (($s5 >> 15) | $s6 << 6)),
-            (int) (0xff & ($s6 >> 2)),
-            (int) (0xff & ($s6 >> 10)),
-            (int) (0xff & (($s6 >> 18) | $s7 << 3)),
-            (int) (0xff & ($s7 >> 5)),
-            (int) (0xff & ($s7 >> 13)),
-            (int) (0xff & ($s8 >> 0)),
-            (int) (0xff & ($s8 >> 8)),
-            (int) (0xff & (($s8 >> 16) | $s9 << 5)),
-            (int) (0xff & ($s9 >> 3)),
-            (int) (0xff & ($s9 >> 11)),
-            (int) (0xff & (($s9 >> 19) | $s10 << 2)),
-            (int) (0xff & ($s10 >> 6)),
-            (int) (0xff & (($s10 >> 14) | $s11 << 7)),
-            (int) (0xff & ($s11 >> 1)),
-            (int) (0xff & ($s11 >> 9)),
-            0xff & ($s11 >> 17)
+            (int)( 0xff & ( $s0 >> 0 ) ),
+            (int)( 0xff & ( $s0 >> 8 ) ),
+            (int)( 0xff & ( ( $s0 >> 16 ) | $s1 << 5 ) ),
+            (int)( 0xff & ( $s1 >> 3 ) ),
+            (int)( 0xff & ( $s1 >> 11 ) ),
+            (int)( 0xff & ( ( $s1 >> 19 ) | $s2 << 2 ) ),
+            (int)( 0xff & ( $s2 >> 6 ) ),
+            (int)( 0xff & ( ( $s2 >> 14 ) | $s3 << 7 ) ),
+            (int)( 0xff & ( $s3 >> 1 ) ),
+            (int)( 0xff & ( $s3 >> 9 ) ),
+            (int)( 0xff & ( ( $s3 >> 17 ) | $s4 << 4 ) ),
+            (int)( 0xff & ( $s4 >> 4 ) ),
+            (int)( 0xff & ( $s4 >> 12 ) ),
+            (int)( 0xff & ( ( $s4 >> 20 ) | $s5 << 1 ) ),
+            (int)( 0xff & ( $s5 >> 7 ) ),
+            (int)( 0xff & ( ( $s5 >> 15 ) | $s6 << 6 ) ),
+            (int)( 0xff & ( $s6 >> 2 ) ),
+            (int)( 0xff & ( $s6 >> 10 ) ),
+            (int)( 0xff & ( ( $s6 >> 18 ) | $s7 << 3 ) ),
+            (int)( 0xff & ( $s7 >> 5 ) ),
+            (int)( 0xff & ( $s7 >> 13 ) ),
+            (int)( 0xff & ( $s8 >> 0 ) ),
+            (int)( 0xff & ( $s8 >> 8 ) ),
+            (int)( 0xff & ( ( $s8 >> 16 ) | $s9 << 5 ) ),
+            (int)( 0xff & ( $s9 >> 3 ) ),
+            (int)( 0xff & ( $s9 >> 11 ) ),
+            (int)( 0xff & ( ( $s9 >> 19 ) | $s10 << 2 ) ),
+            (int)( 0xff & ( $s10 >> 6 ) ),
+            (int)( 0xff & ( ( $s10 >> 14 ) | $s11 << 7 ) ),
+            (int)( 0xff & ( $s11 >> 1 ) ),
+            (int)( 0xff & ( $s11 >> 9 ) ),
+            0xff & ( $s11 >> 17 )
         );
-        return self::intArrayToString($arr);
+        return self::intArrayToString( $arr );
     }
 
     /**
@@ -2510,197 +2510,197 @@ 
      * @return string
      * @throws TypeError
      */
-    public static function sc_reduce($s)
+    public static function sc_reduce( $s )
     {
-        $s0 = 2097151 & self::load_3(self::substr($s, 0, 3));
-        $s1 = 2097151 & (self::load_4(self::substr($s, 2, 4)) >> 5);
-        $s2 = 2097151 & (self::load_3(self::substr($s, 5, 3)) >> 2);
-        $s3 = 2097151 & (self::load_4(self::substr($s, 7, 4)) >> 7);
-        $s4 = 2097151 & (self::load_4(self::substr($s, 10, 4)) >> 4);
-        $s5 = 2097151 & (self::load_3(self::substr($s, 13, 3)) >> 1);
-        $s6 = 2097151 & (self::load_4(self::substr($s, 15, 4)) >> 6);
-        $s7 = 2097151 & (self::load_3(self::substr($s, 18, 4)) >> 3);
-        $s8 = 2097151 & self::load_3(self::substr($s, 21, 3));
-        $s9 = 2097151 & (self::load_4(self::substr($s, 23, 4)) >> 5);
-        $s10 = 2097151 & (self::load_3(self::substr($s, 26, 3)) >> 2);
-        $s11 = 2097151 & (self::load_4(self::substr($s, 28, 4)) >> 7);
-        $s12 = 2097151 & (self::load_4(self::substr($s, 31, 4)) >> 4);
-        $s13 = 2097151 & (self::load_3(self::substr($s, 34, 3)) >> 1);
-        $s14 = 2097151 & (self::load_4(self::substr($s, 36, 4)) >> 6);
-        $s15 = 2097151 & (self::load_3(self::substr($s, 39, 4)) >> 3);
-        $s16 = 2097151 & self::load_3(self::substr($s, 42, 3));
-        $s17 = 2097151 & (self::load_4(self::substr($s, 44, 4)) >> 5);
-        $s18 = 2097151 & (self::load_3(self::substr($s, 47, 3)) >> 2);
-        $s19 = 2097151 & (self::load_4(self::substr($s, 49, 4)) >> 7);
-        $s20 = 2097151 & (self::load_4(self::substr($s, 52, 4)) >> 4);
-        $s21 = 2097151 & (self::load_3(self::substr($s, 55, 3)) >> 1);
-        $s22 = 2097151 & (self::load_4(self::substr($s, 57, 4)) >> 6);
-        $s23 = (self::load_4(self::substr($s, 60, 4)) >> 3);
-
-        $s11 += self::mul($s23,  666643, 20);
-        $s12 += self::mul($s23,  470296, 19);
-        $s13 += self::mul($s23,  654183, 20);
-        $s14 -= self::mul($s23,  997805, 20);
-        $s15 += self::mul($s23,  136657, 18);
-        $s16 -= self::mul($s23,  683901, 20);
-
-        $s10 += self::mul($s22,  666643, 20);
-        $s11 += self::mul($s22,  470296, 19);
-        $s12 += self::mul($s22,  654183, 20);
-        $s13 -= self::mul($s22,  997805, 20);
-        $s14 += self::mul($s22,  136657, 18);
-        $s15 -= self::mul($s22,  683901, 20);
-
-        $s9  += self::mul($s21,  666643, 20);
-        $s10 += self::mul($s21,  470296, 19);
-        $s11 += self::mul($s21,  654183, 20);
-        $s12 -= self::mul($s21,  997805, 20);
-        $s13 += self::mul($s21,  136657, 18);
-        $s14 -= self::mul($s21,  683901, 20);
-
-        $s8  += self::mul($s20,  666643, 20);
-        $s9  += self::mul($s20,  470296, 19);
-        $s10 += self::mul($s20,  654183, 20);
-        $s11 -= self::mul($s20,  997805, 20);
-        $s12 += self::mul($s20,  136657, 18);
-        $s13 -= self::mul($s20,  683901, 20);
-
-        $s7  += self::mul($s19,  666643, 20);
-        $s8  += self::mul($s19,  470296, 19);
-        $s9  += self::mul($s19,  654183, 20);
-        $s10 -= self::mul($s19,  997805, 20);
-        $s11 += self::mul($s19,  136657, 18);
-        $s12 -= self::mul($s19,  683901, 20);
-
-        $s6  += self::mul($s18,  666643, 20);
-        $s7  += self::mul($s18,  470296, 19);
-        $s8  += self::mul($s18,  654183, 20);
-        $s9  -= self::mul($s18,  997805, 20);
-        $s10 += self::mul($s18,  136657, 18);
-        $s11 -= self::mul($s18,  683901, 20);
-
-        $carry6 = ($s6 + (1 << 20)) >> 21;
+        $s0 = 2097151 & self::load_3( self::substr( $s, 0, 3 ) );
+        $s1 = 2097151 & ( self::load_4( self::substr( $s, 2, 4 ) ) >> 5 );
+        $s2 = 2097151 & ( self::load_3( self::substr( $s, 5, 3 ) ) >> 2 );
+        $s3 = 2097151 & ( self::load_4( self::substr( $s, 7, 4 ) ) >> 7 );
+        $s4 = 2097151 & ( self::load_4( self::substr( $s, 10, 4 ) ) >> 4 );
+        $s5 = 2097151 & ( self::load_3( self::substr( $s, 13, 3 ) ) >> 1 );
+        $s6 = 2097151 & ( self::load_4( self::substr( $s, 15, 4 ) ) >> 6 );
+        $s7 = 2097151 & ( self::load_3( self::substr( $s, 18, 4 ) ) >> 3 );
+        $s8 = 2097151 & self::load_3( self::substr( $s, 21, 3 ) );
+        $s9 = 2097151 & ( self::load_4( self::substr( $s, 23, 4 ) ) >> 5 );
+        $s10 = 2097151 & ( self::load_3( self::substr( $s, 26, 3 ) ) >> 2 );
+        $s11 = 2097151 & ( self::load_4( self::substr( $s, 28, 4 ) ) >> 7 );
+        $s12 = 2097151 & ( self::load_4( self::substr( $s, 31, 4 ) ) >> 4 );
+        $s13 = 2097151 & ( self::load_3( self::substr( $s, 34, 3 ) ) >> 1 );
+        $s14 = 2097151 & ( self::load_4( self::substr( $s, 36, 4 ) ) >> 6 );
+        $s15 = 2097151 & ( self::load_3( self::substr( $s, 39, 4 ) ) >> 3 );
+        $s16 = 2097151 & self::load_3( self::substr( $s, 42, 3 ) );
+        $s17 = 2097151 & ( self::load_4( self::substr( $s, 44, 4 ) ) >> 5 );
+        $s18 = 2097151 & ( self::load_3( self::substr( $s, 47, 3 ) ) >> 2 );
+        $s19 = 2097151 & ( self::load_4( self::substr( $s, 49, 4 ) ) >> 7 );
+        $s20 = 2097151 & ( self::load_4( self::substr( $s, 52, 4 ) ) >> 4 );
+        $s21 = 2097151 & ( self::load_3( self::substr( $s, 55, 3 ) ) >> 1 );
+        $s22 = 2097151 & ( self::load_4( self::substr( $s, 57, 4 ) ) >> 6 );
+        $s23 = ( self::load_4( self::substr( $s, 60, 4 ) ) >> 3 );
+
+        $s11 += self::mul( $s23, 666643, 20 );
+        $s12 += self::mul( $s23, 470296, 19 );
+        $s13 += self::mul( $s23, 654183, 20 );
+        $s14 -= self::mul( $s23, 997805, 20 );
+        $s15 += self::mul( $s23, 136657, 18 );
+        $s16 -= self::mul( $s23, 683901, 20 );
+
+        $s10 += self::mul( $s22, 666643, 20 );
+        $s11 += self::mul( $s22, 470296, 19 );
+        $s12 += self::mul( $s22, 654183, 20 );
+        $s13 -= self::mul( $s22, 997805, 20 );
+        $s14 += self::mul( $s22, 136657, 18 );
+        $s15 -= self::mul( $s22, 683901, 20 );
+
+        $s9  += self::mul( $s21, 666643, 20 );
+        $s10 += self::mul( $s21, 470296, 19 );
+        $s11 += self::mul( $s21, 654183, 20 );
+        $s12 -= self::mul( $s21, 997805, 20 );
+        $s13 += self::mul( $s21, 136657, 18 );
+        $s14 -= self::mul( $s21, 683901, 20 );
+
+        $s8  += self::mul( $s20, 666643, 20 );
+        $s9  += self::mul( $s20, 470296, 19 );
+        $s10 += self::mul( $s20, 654183, 20 );
+        $s11 -= self::mul( $s20, 997805, 20 );
+        $s12 += self::mul( $s20, 136657, 18 );
+        $s13 -= self::mul( $s20, 683901, 20 );
+
+        $s7  += self::mul( $s19, 666643, 20 );
+        $s8  += self::mul( $s19, 470296, 19 );
+        $s9  += self::mul( $s19, 654183, 20 );
+        $s10 -= self::mul( $s19, 997805, 20 );
+        $s11 += self::mul( $s19, 136657, 18 );
+        $s12 -= self::mul( $s19, 683901, 20 );
+
+        $s6  += self::mul( $s18, 666643, 20 );
+        $s7  += self::mul( $s18, 470296, 19 );
+        $s8  += self::mul( $s18, 654183, 20 );
+        $s9  -= self::mul( $s18, 997805, 20 );
+        $s10 += self::mul( $s18, 136657, 18 );
+        $s11 -= self::mul( $s18, 683901, 20 );
+
+        $carry6 = ( $s6 + ( 1 << 20 ) ) >> 21;
         $s7 += $carry6;
         $s6 -= $carry6 << 21;
-        $carry8 = ($s8 + (1 << 20)) >> 21;
+        $carry8 = ( $s8 + ( 1 << 20 ) ) >> 21;
         $s9 += $carry8;
         $s8 -= $carry8 << 21;
-        $carry10 = ($s10 + (1 << 20)) >> 21;
+        $carry10 = ( $s10 + ( 1 << 20 ) ) >> 21;
         $s11 += $carry10;
         $s10 -= $carry10 << 21;
-        $carry12 = ($s12 + (1 << 20)) >> 21;
+        $carry12 = ( $s12 + ( 1 << 20 ) ) >> 21;
         $s13 += $carry12;
         $s12 -= $carry12 << 21;
-        $carry14 = ($s14 + (1 << 20)) >> 21;
+        $carry14 = ( $s14 + ( 1 << 20 ) ) >> 21;
         $s15 += $carry14;
         $s14 -= $carry14 << 21;
-        $carry16 = ($s16 + (1 << 20)) >> 21;
+        $carry16 = ( $s16 + ( 1 << 20 ) ) >> 21;
         $s17 += $carry16;
         $s16 -= $carry16 << 21;
 
-        $carry7 = ($s7 + (1 << 20)) >> 21;
+        $carry7 = ( $s7 + ( 1 << 20 ) ) >> 21;
         $s8 += $carry7;
         $s7 -= $carry7 << 21;
-        $carry9 = ($s9 + (1 << 20)) >> 21;
+        $carry9 = ( $s9 + ( 1 << 20 ) ) >> 21;
         $s10 += $carry9;
         $s9 -= $carry9 << 21;
-        $carry11 = ($s11 + (1 << 20)) >> 21;
+        $carry11 = ( $s11 + ( 1 << 20 ) ) >> 21;
         $s12 += $carry11;
         $s11 -= $carry11 << 21;
-        $carry13 = ($s13 + (1 << 20)) >> 21;
+        $carry13 = ( $s13 + ( 1 << 20 ) ) >> 21;
         $s14 += $carry13;
         $s13 -= $carry13 << 21;
-        $carry15 = ($s15 + (1 << 20)) >> 21;
+        $carry15 = ( $s15 + ( 1 << 20 ) ) >> 21;
         $s16 += $carry15;
         $s15 -= $carry15 << 21;
 
-        $s5  += self::mul($s17,  666643, 20);
-        $s6  += self::mul($s17,  470296, 19);
-        $s7  += self::mul($s17,  654183, 20);
-        $s8  -= self::mul($s17,  997805, 20);
-        $s9  += self::mul($s17,  136657, 18);
-        $s10 -= self::mul($s17,  683901, 20);
-
-        $s4 += self::mul($s16,  666643, 20);
-        $s5 += self::mul($s16,  470296, 19);
-        $s6 += self::mul($s16,  654183, 20);
-        $s7 -= self::mul($s16,  997805, 20);
-        $s8 += self::mul($s16,  136657, 18);
-        $s9 -= self::mul($s16,  683901, 20);
-
-        $s3 += self::mul($s15,  666643, 20);
-        $s4 += self::mul($s15,  470296, 19);
-        $s5 += self::mul($s15,  654183, 20);
-        $s6 -= self::mul($s15,  997805, 20);
-        $s7 += self::mul($s15,  136657, 18);
-        $s8 -= self::mul($s15,  683901, 20);
-
-        $s2 += self::mul($s14,  666643, 20);
-        $s3 += self::mul($s14,  470296, 19);
-        $s4 += self::mul($s14,  654183, 20);
-        $s5 -= self::mul($s14,  997805, 20);
-        $s6 += self::mul($s14,  136657, 18);
-        $s7 -= self::mul($s14,  683901, 20);
-
-        $s1 += self::mul($s13,  666643, 20);
-        $s2 += self::mul($s13,  470296, 19);
-        $s3 += self::mul($s13,  654183, 20);
-        $s4 -= self::mul($s13,  997805, 20);
-        $s5 += self::mul($s13,  136657, 18);
-        $s6 -= self::mul($s13,  683901, 20);
-
-        $s0 += self::mul($s12,  666643, 20);
-        $s1 += self::mul($s12,  470296, 19);
-        $s2 += self::mul($s12,  654183, 20);
-        $s3 -= self::mul($s12,  997805, 20);
-        $s4 += self::mul($s12,  136657, 18);
-        $s5 -= self::mul($s12,  683901, 20);
+        $s5  += self::mul( $s17, 666643, 20 );
+        $s6  += self::mul( $s17, 470296, 19 );
+        $s7  += self::mul( $s17, 654183, 20 );
+        $s8  -= self::mul( $s17, 997805, 20 );
+        $s9  += self::mul( $s17, 136657, 18 );
+        $s10 -= self::mul( $s17, 683901, 20 );
+
+        $s4 += self::mul( $s16, 666643, 20 );
+        $s5 += self::mul( $s16, 470296, 19 );
+        $s6 += self::mul( $s16, 654183, 20 );
+        $s7 -= self::mul( $s16, 997805, 20 );
+        $s8 += self::mul( $s16, 136657, 18 );
+        $s9 -= self::mul( $s16, 683901, 20 );
+
+        $s3 += self::mul( $s15, 666643, 20 );
+        $s4 += self::mul( $s15, 470296, 19 );
+        $s5 += self::mul( $s15, 654183, 20 );
+        $s6 -= self::mul( $s15, 997805, 20 );
+        $s7 += self::mul( $s15, 136657, 18 );
+        $s8 -= self::mul( $s15, 683901, 20 );
+
+        $s2 += self::mul( $s14, 666643, 20 );
+        $s3 += self::mul( $s14, 470296, 19 );
+        $s4 += self::mul( $s14, 654183, 20 );
+        $s5 -= self::mul( $s14, 997805, 20 );
+        $s6 += self::mul( $s14, 136657, 18 );
+        $s7 -= self::mul( $s14, 683901, 20 );
+
+        $s1 += self::mul( $s13, 666643, 20 );
+        $s2 += self::mul( $s13, 470296, 19 );
+        $s3 += self::mul( $s13, 654183, 20 );
+        $s4 -= self::mul( $s13, 997805, 20 );
+        $s5 += self::mul( $s13, 136657, 18 );
+        $s6 -= self::mul( $s13, 683901, 20 );
+
+        $s0 += self::mul( $s12, 666643, 20 );
+        $s1 += self::mul( $s12, 470296, 19 );
+        $s2 += self::mul( $s12, 654183, 20 );
+        $s3 -= self::mul( $s12, 997805, 20 );
+        $s4 += self::mul( $s12, 136657, 18 );
+        $s5 -= self::mul( $s12, 683901, 20 );
         $s12 = 0;
 
-        $carry0 = ($s0 + (1 << 20)) >> 21;
+        $carry0 = ( $s0 + ( 1 << 20 ) ) >> 21;
         $s1 += $carry0;
         $s0 -= $carry0 << 21;
-        $carry2 = ($s2 + (1 << 20)) >> 21;
+        $carry2 = ( $s2 + ( 1 << 20 ) ) >> 21;
         $s3 += $carry2;
         $s2 -= $carry2 << 21;
-        $carry4 = ($s4 + (1 << 20)) >> 21;
+        $carry4 = ( $s4 + ( 1 << 20 ) ) >> 21;
         $s5 += $carry4;
         $s4 -= $carry4 << 21;
-        $carry6 = ($s6 + (1 << 20)) >> 21;
+        $carry6 = ( $s6 + ( 1 << 20 ) ) >> 21;
         $s7 += $carry6;
         $s6 -= $carry6 << 21;
-        $carry8 = ($s8 + (1 << 20)) >> 21;
+        $carry8 = ( $s8 + ( 1 << 20 ) ) >> 21;
         $s9 += $carry8;
         $s8 -= $carry8 << 21;
-        $carry10 = ($s10 + (1 << 20)) >> 21;
+        $carry10 = ( $s10 + ( 1 << 20 ) ) >> 21;
         $s11 += $carry10;
         $s10 -= $carry10 << 21;
 
-        $carry1 = ($s1 + (1 << 20)) >> 21;
+        $carry1 = ( $s1 + ( 1 << 20 ) ) >> 21;
         $s2 += $carry1;
         $s1 -= $carry1 << 21;
-        $carry3 = ($s3 + (1 << 20)) >> 21;
+        $carry3 = ( $s3 + ( 1 << 20 ) ) >> 21;
         $s4 += $carry3;
         $s3 -= $carry3 << 21;
-        $carry5 = ($s5 + (1 << 20)) >> 21;
+        $carry5 = ( $s5 + ( 1 << 20 ) ) >> 21;
         $s6 += $carry5;
         $s5 -= $carry5 << 21;
-        $carry7 = ($s7 + (1 << 20)) >> 21;
+        $carry7 = ( $s7 + ( 1 << 20 ) ) >> 21;
         $s8 += $carry7;
         $s7 -= $carry7 << 21;
-        $carry9 = ($s9 + (1 << 20)) >> 21;
+        $carry9 = ( $s9 + ( 1 << 20 ) ) >> 21;
         $s10 += $carry9;
         $s9 -= $carry9 << 21;
-        $carry11 = ($s11 + (1 << 20)) >> 21;
+        $carry11 = ( $s11 + ( 1 << 20 ) ) >> 21;
         $s12 += $carry11;
         $s11 -= $carry11 << 21;
 
-        $s0 += self::mul($s12,  666643, 20);
-        $s1 += self::mul($s12,  470296, 19);
-        $s2 += self::mul($s12,  654183, 20);
-        $s3 -= self::mul($s12,  997805, 20);
-        $s4 += self::mul($s12,  136657, 18);
-        $s5 -= self::mul($s12,  683901, 20);
+        $s0 += self::mul( $s12, 666643, 20 );
+        $s1 += self::mul( $s12, 470296, 19 );
+        $s2 += self::mul( $s12, 654183, 20 );
+        $s3 -= self::mul( $s12, 997805, 20 );
+        $s4 += self::mul( $s12, 136657, 18 );
+        $s5 -= self::mul( $s12, 683901, 20 );
         $s12 = 0;
 
         $carry0 = $s0 >> 21;
@@ -2740,12 +2740,12 @@ 
         $s12 += $carry11;
         $s11 -= $carry11 << 21;
 
-        $s0 += self::mul($s12,  666643, 20);
-        $s1 += self::mul($s12,  470296, 19);
-        $s2 += self::mul($s12,  654183, 20);
-        $s3 -= self::mul($s12,  997805, 20);
-        $s4 += self::mul($s12,  136657, 18);
-        $s5 -= self::mul($s12,  683901, 20);
+        $s0 += self::mul( $s12, 666643, 20 );
+        $s1 += self::mul( $s12, 470296, 19 );
+        $s2 += self::mul( $s12, 654183, 20 );
+        $s3 -= self::mul( $s12, 997805, 20 );
+        $s4 += self::mul( $s12, 136657, 18 );
+        $s5 -= self::mul( $s12, 683901, 20 );
 
         $carry0 = $s0 >> 21;
         $s1 += $carry0;
@@ -2785,40 +2785,40 @@ 
          * @var array<int, int>
          */
         $arr = array(
-            (int) ($s0 >> 0),
-            (int) ($s0 >> 8),
-            (int) (($s0 >> 16) | $s1 << 5),
-            (int) ($s1 >> 3),
-            (int) ($s1 >> 11),
-            (int) (($s1 >> 19) | $s2 << 2),
-            (int) ($s2 >> 6),
-            (int) (($s2 >> 14) | $s3 << 7),
-            (int) ($s3 >> 1),
-            (int) ($s3 >> 9),
-            (int) (($s3 >> 17) | $s4 << 4),
-            (int) ($s4 >> 4),
-            (int) ($s4 >> 12),
-            (int) (($s4 >> 20) | $s5 << 1),
-            (int) ($s5 >> 7),
-            (int) (($s5 >> 15) | $s6 << 6),
-            (int) ($s6 >> 2),
-            (int) ($s6 >> 10),
-            (int) (($s6 >> 18) | $s7 << 3),
-            (int) ($s7 >> 5),
-            (int) ($s7 >> 13),
-            (int) ($s8 >> 0),
-            (int) ($s8 >> 8),
-            (int) (($s8 >> 16) | $s9 << 5),
-            (int) ($s9 >> 3),
-            (int) ($s9 >> 11),
-            (int) (($s9 >> 19) | $s10 << 2),
-            (int) ($s10 >> 6),
-            (int) (($s10 >> 14) | $s11 << 7),
-            (int) ($s11 >> 1),
-            (int) ($s11 >> 9),
-            (int) $s11 >> 17
+            (int)( $s0 >> 0 ),
+            (int)( $s0 >> 8 ),
+            (int)( ( $s0 >> 16 ) | $s1 << 5 ),
+            (int)( $s1 >> 3 ),
+            (int)( $s1 >> 11 ),
+            (int)( ( $s1 >> 19 ) | $s2 << 2 ),
+            (int)( $s2 >> 6 ),
+            (int)( ( $s2 >> 14 ) | $s3 << 7 ),
+            (int)( $s3 >> 1 ),
+            (int)( $s3 >> 9 ),
+            (int)( ( $s3 >> 17 ) | $s4 << 4 ),
+            (int)( $s4 >> 4 ),
+            (int)( $s4 >> 12 ),
+            (int)( ( $s4 >> 20 ) | $s5 << 1 ),
+            (int)( $s5 >> 7 ),
+            (int)( ( $s5 >> 15 ) | $s6 << 6 ),
+            (int)( $s6 >> 2 ),
+            (int)( $s6 >> 10 ),
+            (int)( ( $s6 >> 18 ) | $s7 << 3 ),
+            (int)( $s7 >> 5 ),
+            (int)( $s7 >> 13 ),
+            (int)( $s8 >> 0 ),
+            (int)( $s8 >> 8 ),
+            (int)( ( $s8 >> 16 ) | $s9 << 5 ),
+            (int)( $s9 >> 3 ),
+            (int)( $s9 >> 11 ),
+            (int)( ( $s9 >> 19 ) | $s10 << 2 ),
+            (int)( $s10 >> 6 ),
+            (int)( ( $s10 >> 14 ) | $s11 << 7 ),
+            (int)( $s11 >> 1 ),
+            (int)( $s11 >> 9 ),
+            (int)$s11 >> 17
         );
-        return self::intArrayToString($arr);
+        return self::intArrayToString( $arr );
     }
 
     /**
@@ -2827,7 +2827,7 @@ 
      * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A
      * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
      */
-    public static function ge_mul_l(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A)
+    public static function ge_mul_l( ParagonIE_Sodium_Core_Curve25519_Ge_P3 $A )
     {
         $aslide = array(
             13, 0, 0, 0, 0, -1, 0, 0, 0, 0, -11, 0, 0, 0, 0, 0, 0, -5, 0, 0, 0,
@@ -2848,39 +2848,39 @@ 
         $Ai = array();
 
         # ge_p3_to_cached(&Ai[0], A);
-        $Ai[0] = self::ge_p3_to_cached($A);
+        $Ai[ 0 ] = self::ge_p3_to_cached( $A );
         # ge_p3_dbl(&t, A);
-        $t = self::ge_p3_dbl($A);
+        $t = self::ge_p3_dbl( $A );
         # ge_p1p1_to_p3(&A2, &t);
-        $A2 = self::ge_p1p1_to_p3($t);
+        $A2 = self::ge_p1p1_to_p3( $t );
 
-        for ($i = 1; $i < 8; ++$i) {
+        for ( $i = 1; $i < 8; ++$i ) {
             # ge_add(&t, &A2, &Ai[0]);
-            $t = self::ge_add($A2, $Ai[$i - 1]);
+            $t = self::ge_add( $A2, $Ai[ $i - 1 ] );
             # ge_p1p1_to_p3(&u, &t);
-            $u = self::ge_p1p1_to_p3($t);
+            $u = self::ge_p1p1_to_p3( $t );
             # ge_p3_to_cached(&Ai[i], &u);
-            $Ai[$i] = self::ge_p3_to_cached($u);
+            $Ai[ $i ] = self::ge_p3_to_cached( $u );
         }
 
         $r = self::ge_p3_0();
-        for ($i = 252; $i >= 0; --$i) {
-            $t = self::ge_p3_dbl($r);
-            if ($aslide[$i] > 0) {
+        for ( $i = 252; $i >= 0; --$i ) {
+            $t = self::ge_p3_dbl( $r );
+            if ( $aslide[ $i ] > 0 ) {
                 # ge_p1p1_to_p3(&u, &t);
-                $u = self::ge_p1p1_to_p3($t);
+                $u = self::ge_p1p1_to_p3( $t );
                 # ge_add(&t, &u, &Ai[aslide[i] / 2]);
-                $t = self::ge_add($u, $Ai[(int)($aslide[$i] / 2)]);
-            } elseif ($aslide[$i] < 0) {
+                $t = self::ge_add( $u, $Ai[ (int)( $aslide[ $i ] / 2 ) ] );
+            } elseif ( $aslide[ $i ] < 0 ) {
                 # ge_p1p1_to_p3(&u, &t);
-                $u = self::ge_p1p1_to_p3($t);
+                $u = self::ge_p1p1_to_p3( $t );
                 # ge_sub(&t, &u, &Ai[(-aslide[i]) / 2]);
-                $t = self::ge_sub($u, $Ai[(int)(-$aslide[$i] / 2)]);
+                $t = self::ge_sub( $u, $Ai[ (int)(-$aslide[ $i ] / 2) ] );
             }
         }
 
         # ge_p1p1_to_p3(r, &t);
-        return self::ge_p1p1_to_p3($t);
+        return self::ge_p1p1_to_p3( $t );
     }
 
     /**
@@ -2888,7 +2888,7 @@ 
      * @param string $b
      * @return string
      */
-    public static function sc25519_mul($a, $b)
+    public static function sc25519_mul( $a, $b )
     {
         //    int64_t a0  = 2097151 & load_3(a);
         //    int64_t a1  = 2097151 & (load_4(a + 2) >> 5);
@@ -2902,18 +2902,18 @@ 
         //    int64_t a9  = 2097151 & (load_4(a + 23) >> 5);
         //    int64_t a10 = 2097151 & (load_3(a + 26) >> 2);
         //    int64_t a11 = (load_4(a + 28) >> 7);
-        $a0  = 2097151 &  self::load_3(self::substr($a, 0, 3));
-        $a1  = 2097151 & (self::load_4(self::substr($a, 2, 4)) >> 5);
-        $a2  = 2097151 & (self::load_3(self::substr($a, 5, 3)) >> 2);
-        $a3  = 2097151 & (self::load_4(self::substr($a, 7, 4)) >> 7);
-        $a4  = 2097151 & (self::load_4(self::substr($a, 10, 4)) >> 4);
-        $a5  = 2097151 & (self::load_3(self::substr($a, 13, 3)) >> 1);
-        $a6  = 2097151 & (self::load_4(self::substr($a, 15, 4)) >> 6);
-        $a7  = 2097151 & (self::load_3(self::substr($a, 18, 3)) >> 3);
-        $a8  = 2097151 &  self::load_3(self::substr($a, 21, 3));
-        $a9  = 2097151 & (self::load_4(self::substr($a, 23, 4)) >> 5);
-        $a10 = 2097151 & (self::load_3(self::substr($a, 26, 3)) >> 2);
-        $a11 = (self::load_4(self::substr($a, 28, 4)) >> 7);
+        $a0  = 2097151 &  self::load_3( self::substr( $a, 0, 3 ) );
+        $a1  = 2097151 & ( self::load_4( self::substr( $a, 2, 4 ) ) >> 5 );
+        $a2  = 2097151 & ( self::load_3( self::substr( $a, 5, 3 ) ) >> 2 );
+        $a3  = 2097151 & ( self::load_4( self::substr( $a, 7, 4 ) ) >> 7 );
+        $a4  = 2097151 & ( self::load_4( self::substr( $a, 10, 4 ) ) >> 4 );
+        $a5  = 2097151 & ( self::load_3( self::substr( $a, 13, 3 ) ) >> 1 );
+        $a6  = 2097151 & ( self::load_4( self::substr( $a, 15, 4 ) ) >> 6 );
+        $a7  = 2097151 & ( self::load_3( self::substr( $a, 18, 3 ) ) >> 3 );
+        $a8  = 2097151 &  self::load_3( self::substr( $a, 21, 3 ) );
+        $a9  = 2097151 & ( self::load_4( self::substr( $a, 23, 4 ) ) >> 5 );
+        $a10 = 2097151 & ( self::load_3( self::substr( $a, 26, 3 ) ) >> 2 );
+        $a11 = ( self::load_4( self::substr( $a, 28, 4 ) ) >> 7 );
 
         //    int64_t b0  = 2097151 & load_3(b);
         //    int64_t b1  = 2097151 & (load_4(b + 2) >> 5);
@@ -2927,18 +2927,18 @@ 
         //    int64_t b9  = 2097151 & (load_4(b + 23) >> 5);
         //    int64_t b10 = 2097151 & (load_3(b + 26) >> 2);
         //    int64_t b11 = (load_4(b + 28) >> 7);
-        $b0  = 2097151 &  self::load_3(self::substr($b, 0, 3));
-        $b1  = 2097151 & (self::load_4(self::substr($b, 2, 4)) >> 5);
-        $b2  = 2097151 & (self::load_3(self::substr($b, 5, 3)) >> 2);
-        $b3  = 2097151 & (self::load_4(self::substr($b, 7, 4)) >> 7);
-        $b4  = 2097151 & (self::load_4(self::substr($b, 10, 4)) >> 4);
-        $b5  = 2097151 & (self::load_3(self::substr($b, 13, 3)) >> 1);
-        $b6  = 2097151 & (self::load_4(self::substr($b, 15, 4)) >> 6);
-        $b7  = 2097151 & (self::load_3(self::substr($b, 18, 3)) >> 3);
-        $b8  = 2097151 &  self::load_3(self::substr($b, 21, 3));
-        $b9  = 2097151 & (self::load_4(self::substr($b, 23, 4)) >> 5);
-        $b10 = 2097151 & (self::load_3(self::substr($b, 26, 3)) >> 2);
-        $b11 = (self::load_4(self::substr($b, 28, 4)) >> 7);
+        $b0  = 2097151 &  self::load_3( self::substr( $b, 0, 3 ) );
+        $b1  = 2097151 & ( self::load_4( self::substr( $b, 2, 4 ) ) >> 5 );
+        $b2  = 2097151 & ( self::load_3( self::substr( $b, 5, 3 ) ) >> 2 );
+        $b3  = 2097151 & ( self::load_4( self::substr( $b, 7, 4 ) ) >> 7 );
+        $b4  = 2097151 & ( self::load_4( self::substr( $b, 10, 4 ) ) >> 4 );
+        $b5  = 2097151 & ( self::load_3( self::substr( $b, 13, 3 ) ) >> 1 );
+        $b6  = 2097151 & ( self::load_4( self::substr( $b, 15, 4 ) ) >> 6 );
+        $b7  = 2097151 & ( self::load_3( self::substr( $b, 18, 3 ) ) >> 3 );
+        $b8  = 2097151 &  self::load_3( self::substr( $b, 21, 3 ) );
+        $b9  = 2097151 & ( self::load_4( self::substr( $b, 23, 4 ) ) >> 5 );
+        $b10 = 2097151 & ( self::load_3( self::substr( $b, 26, 3 ) ) >> 2 );
+        $b11 = ( self::load_4( self::substr( $b, 28, 4 ) ) >> 7 );
 
         //    s0 = a0 * b0;
         //    s1 = a0 * b1 + a1 * b0;
@@ -2974,192 +2974,192 @@ 
         //    s21 = a10 * b11 + a11 * b10;
         //    s22 = a11 * b11;
         //    s23 = 0;
-        $s0 = self::mul($a0, $b0, 22);
-        $s1 = self::mul($a0, $b1, 22) + self::mul($a1, $b0, 22);
-        $s2 = self::mul($a0, $b2, 22) + self::mul($a1, $b1, 22) + self::mul($a2, $b0, 22);
-        $s3 = self::mul($a0, $b3, 22) + self::mul($a1, $b2, 22) + self::mul($a2, $b1, 22) + self::mul($a3, $b0, 22);
-        $s4 = self::mul($a0, $b4, 22) + self::mul($a1, $b3, 22) + self::mul($a2, $b2, 22) + self::mul($a3, $b1, 22) +
-            self::mul($a4, $b0, 22);
-        $s5 = self::mul($a0, $b5, 22) + self::mul($a1, $b4, 22) + self::mul($a2, $b3, 22) + self::mul($a3, $b2, 22) +
-            self::mul($a4, $b1, 22) + self::mul($a5, $b0, 22);
-        $s6 = self::mul($a0, $b6, 22) + self::mul($a1, $b5, 22) + self::mul($a2, $b4, 22) + self::mul($a3, $b3, 22) +
-            self::mul($a4, $b2, 22) + self::mul($a5, $b1, 22) + self::mul($a6, $b0, 22);
-        $s7 = self::mul($a0, $b7, 22) + self::mul($a1, $b6, 22) + self::mul($a2, $b5, 22) + self::mul($a3, $b4, 22) +
-            self::mul($a4, $b3, 22) + self::mul($a5, $b2, 22) + self::mul($a6, $b1, 22) + self::mul($a7, $b0, 22);
-        $s8 = self::mul($a0, $b8, 22) + self::mul($a1, $b7, 22) + self::mul($a2, $b6, 22) + self::mul($a3, $b5, 22) +
-            self::mul($a4, $b4, 22) + self::mul($a5, $b3, 22) + self::mul($a6, $b2, 22) + self::mul($a7, $b1, 22) +
-            self::mul($a8, $b0, 22);
-        $s9 = self::mul($a0, $b9, 22) + self::mul($a1, $b8, 22) + self::mul($a2, $b7, 22) + self::mul($a3, $b6, 22) +
-            self::mul($a4, $b5, 22) + self::mul($a5, $b4, 22) + self::mul($a6, $b3, 22) + self::mul($a7, $b2, 22) +
-            self::mul($a8, $b1, 22) + self::mul($a9, $b0, 22);
-        $s10 = self::mul($a0, $b10, 22) + self::mul($a1, $b9, 22) + self::mul($a2, $b8, 22) + self::mul($a3, $b7, 22) +
-            self::mul($a4, $b6, 22) + self::mul($a5, $b5, 22) + self::mul($a6, $b4, 22) + self::mul($a7, $b3, 22) +
-            self::mul($a8, $b2, 22) + self::mul($a9, $b1, 22) + self::mul($a10, $b0, 22);
-        $s11 = self::mul($a0, $b11, 22) + self::mul($a1, $b10, 22) + self::mul($a2, $b9, 22) + self::mul($a3, $b8, 22) +
-            self::mul($a4, $b7, 22) + self::mul($a5, $b6, 22) + self::mul($a6, $b5, 22) + self::mul($a7, $b4, 22) +
-            self::mul($a8, $b3, 22) + self::mul($a9, $b2, 22) + self::mul($a10, $b1, 22) + self::mul($a11, $b0, 22);
-        $s12 = self::mul($a1, $b11, 22) + self::mul($a2, $b10, 22) + self::mul($a3, $b9, 22) + self::mul($a4, $b8, 22) +
-            self::mul($a5, $b7, 22) + self::mul($a6, $b6, 22) + self::mul($a7, $b5, 22) + self::mul($a8, $b4, 22) +
-            self::mul($a9, $b3, 22) + self::mul($a10, $b2, 22) + self::mul($a11, $b1, 22);
-        $s13 = self::mul($a2, $b11, 22) + self::mul($a3, $b10, 22) + self::mul($a4, $b9, 22) + self::mul($a5, $b8, 22) +
-            self::mul($a6, $b7, 22) + self::mul($a7, $b6, 22) + self::mul($a8, $b5, 22) + self::mul($a9, $b4, 22) +
-            self::mul($a10, $b3, 22) + self::mul($a11, $b2, 22);
-        $s14 = self::mul($a3, $b11, 22) + self::mul($a4, $b10, 22) + self::mul($a5, $b9, 22) + self::mul($a6, $b8, 22) +
-            self::mul($a7, $b7, 22) + self::mul($a8, $b6, 22) + self::mul($a9, $b5, 22) + self::mul($a10, $b4, 22) +
-            self::mul($a11, $b3, 22);
-        $s15 = self::mul($a4, $b11, 22) + self::mul($a5, $b10, 22) + self::mul($a6, $b9, 22) + self::mul($a7, $b8, 22) +
-            self::mul($a8, $b7, 22) + self::mul($a9, $b6, 22) + self::mul($a10, $b5, 22) + self::mul($a11, $b4, 22);
+        $s0 = self::mul( $a0, $b0, 22 );
+        $s1 = self::mul( $a0, $b1, 22 ) + self::mul( $a1, $b0, 22 );
+        $s2 = self::mul( $a0, $b2, 22 ) + self::mul( $a1, $b1, 22 ) + self::mul( $a2, $b0, 22 );
+        $s3 = self::mul( $a0, $b3, 22 ) + self::mul( $a1, $b2, 22 ) + self::mul( $a2, $b1, 22 ) + self::mul( $a3, $b0, 22 );
+        $s4 = self::mul( $a0, $b4, 22 ) + self::mul( $a1, $b3, 22 ) + self::mul( $a2, $b2, 22 ) + self::mul( $a3, $b1, 22 ) +
+            self::mul( $a4, $b0, 22 );
+        $s5 = self::mul( $a0, $b5, 22 ) + self::mul( $a1, $b4, 22 ) + self::mul( $a2, $b3, 22 ) + self::mul( $a3, $b2, 22 ) +
+            self::mul( $a4, $b1, 22 ) + self::mul( $a5, $b0, 22 );
+        $s6 = self::mul( $a0, $b6, 22 ) + self::mul( $a1, $b5, 22 ) + self::mul( $a2, $b4, 22 ) + self::mul( $a3, $b3, 22 ) +
+            self::mul( $a4, $b2, 22 ) + self::mul( $a5, $b1, 22 ) + self::mul( $a6, $b0, 22 );
+        $s7 = self::mul( $a0, $b7, 22 ) + self::mul( $a1, $b6, 22 ) + self::mul( $a2, $b5, 22 ) + self::mul( $a3, $b4, 22 ) +
+            self::mul( $a4, $b3, 22 ) + self::mul( $a5, $b2, 22 ) + self::mul( $a6, $b1, 22 ) + self::mul( $a7, $b0, 22 );
+        $s8 = self::mul( $a0, $b8, 22 ) + self::mul( $a1, $b7, 22 ) + self::mul( $a2, $b6, 22 ) + self::mul( $a3, $b5, 22 ) +
+            self::mul( $a4, $b4, 22 ) + self::mul( $a5, $b3, 22 ) + self::mul( $a6, $b2, 22 ) + self::mul( $a7, $b1, 22 ) +
+            self::mul( $a8, $b0, 22 );
+        $s9 = self::mul( $a0, $b9, 22 ) + self::mul( $a1, $b8, 22 ) + self::mul( $a2, $b7, 22 ) + self::mul( $a3, $b6, 22 ) +
+            self::mul( $a4, $b5, 22 ) + self::mul( $a5, $b4, 22 ) + self::mul( $a6, $b3, 22 ) + self::mul( $a7, $b2, 22 ) +
+            self::mul( $a8, $b1, 22 ) + self::mul( $a9, $b0, 22 );
+        $s10 = self::mul( $a0, $b10, 22 ) + self::mul( $a1, $b9, 22 ) + self::mul( $a2, $b8, 22 ) + self::mul( $a3, $b7, 22 ) +
+            self::mul( $a4, $b6, 22 ) + self::mul( $a5, $b5, 22 ) + self::mul( $a6, $b4, 22 ) + self::mul( $a7, $b3, 22 ) +
+            self::mul( $a8, $b2, 22 ) + self::mul( $a9, $b1, 22 ) + self::mul( $a10, $b0, 22 );
+        $s11 = self::mul( $a0, $b11, 22 ) + self::mul( $a1, $b10, 22 ) + self::mul( $a2, $b9, 22 ) + self::mul( $a3, $b8, 22 ) +
+            self::mul( $a4, $b7, 22 ) + self::mul( $a5, $b6, 22 ) + self::mul( $a6, $b5, 22 ) + self::mul( $a7, $b4, 22 ) +
+            self::mul( $a8, $b3, 22 ) + self::mul( $a9, $b2, 22 ) + self::mul( $a10, $b1, 22 ) + self::mul( $a11, $b0, 22 );
+        $s12 = self::mul( $a1, $b11, 22 ) + self::mul( $a2, $b10, 22 ) + self::mul( $a3, $b9, 22 ) + self::mul( $a4, $b8, 22 ) +
+            self::mul( $a5, $b7, 22 ) + self::mul( $a6, $b6, 22 ) + self::mul( $a7, $b5, 22 ) + self::mul( $a8, $b4, 22 ) +
+            self::mul( $a9, $b3, 22 ) + self::mul( $a10, $b2, 22 ) + self::mul( $a11, $b1, 22 );
+        $s13 = self::mul( $a2, $b11, 22 ) + self::mul( $a3, $b10, 22 ) + self::mul( $a4, $b9, 22 ) + self::mul( $a5, $b8, 22 ) +
+            self::mul( $a6, $b7, 22 ) + self::mul( $a7, $b6, 22 ) + self::mul( $a8, $b5, 22 ) + self::mul( $a9, $b4, 22 ) +
+            self::mul( $a10, $b3, 22 ) + self::mul( $a11, $b2, 22 );
+        $s14 = self::mul( $a3, $b11, 22 ) + self::mul( $a4, $b10, 22 ) + self::mul( $a5, $b9, 22 ) + self::mul( $a6, $b8, 22 ) +
+            self::mul( $a7, $b7, 22 ) + self::mul( $a8, $b6, 22 ) + self::mul( $a9, $b5, 22 ) + self::mul( $a10, $b4, 22 ) +
+            self::mul( $a11, $b3, 22 );
+        $s15 = self::mul( $a4, $b11, 22 ) + self::mul( $a5, $b10, 22 ) + self::mul( $a6, $b9, 22 ) + self::mul( $a7, $b8, 22 ) +
+            self::mul( $a8, $b7, 22 ) + self::mul( $a9, $b6, 22 ) + self::mul( $a10, $b5, 22 ) + self::mul( $a11, $b4, 22 );
         $s16 =
-            self::mul($a5, $b11, 22) + self::mul($a6, $b10, 22) + self::mul($a7, $b9, 22) + self::mul($a8, $b8, 22) +
-            self::mul($a9, $b7, 22) + self::mul($a10, $b6, 22) + self::mul($a11, $b5, 22);
-        $s17 = self::mul($a6, $b11, 22) + self::mul($a7, $b10, 22) + self::mul($a8, $b9, 22) + self::mul($a9, $b8, 22) +
-            self::mul($a10, $b7, 22) + self::mul($a11, $b6, 22);
-        $s18 = self::mul($a7, $b11, 22) + self::mul($a8, $b10, 22) + self::mul($a9, $b9, 22) + self::mul($a10, $b8, 22)
-            + self::mul($a11, $b7, 22);
-        $s19 = self::mul($a8, $b11, 22) + self::mul($a9, $b10, 22) + self::mul($a10, $b9, 22) +
-            self::mul($a11, $b8, 22);
-        $s20 = self::mul($a9, $b11, 22) + self::mul($a10, $b10, 22) + self::mul($a11, $b9, 22);
-        $s21 = self::mul($a10, $b11, 22) + self::mul($a11, $b10, 22);
-        $s22 = self::mul($a11, $b11, 22);
+            self::mul( $a5, $b11, 22 ) + self::mul( $a6, $b10, 22 ) + self::mul( $a7, $b9, 22 ) + self::mul( $a8, $b8, 22 ) +
+            self::mul( $a9, $b7, 22 ) + self::mul( $a10, $b6, 22 ) + self::mul( $a11, $b5, 22 );
+        $s17 = self::mul( $a6, $b11, 22 ) + self::mul( $a7, $b10, 22 ) + self::mul( $a8, $b9, 22 ) + self::mul( $a9, $b8, 22 ) +
+            self::mul( $a10, $b7, 22 ) + self::mul( $a11, $b6, 22 );
+        $s18 = self::mul( $a7, $b11, 22 ) + self::mul( $a8, $b10, 22 ) + self::mul( $a9, $b9, 22 ) + self::mul( $a10, $b8, 22 )
+            + self::mul( $a11, $b7, 22 );
+        $s19 = self::mul( $a8, $b11, 22 ) + self::mul( $a9, $b10, 22 ) + self::mul( $a10, $b9, 22 ) +
+            self::mul( $a11, $b8, 22 );
+        $s20 = self::mul( $a9, $b11, 22 ) + self::mul( $a10, $b10, 22 ) + self::mul( $a11, $b9, 22 );
+        $s21 = self::mul( $a10, $b11, 22 ) + self::mul( $a11, $b10, 22 );
+        $s22 = self::mul( $a11, $b11, 22 );
         $s23 = 0;
 
         //    carry0 = (s0 + (int64_t) (1L << 20)) >> 21;
         //    s1 += carry0;
         //    s0 -= carry0 * ((uint64_t) 1L << 21);
-        $carry0 = ($s0 + (1 << 20)) >> 21;
+        $carry0 = ( $s0 + ( 1 << 20 ) ) >> 21;
         $s1 += $carry0;
         $s0 -= $carry0 << 21;
         //    carry2 = (s2 + (int64_t) (1L << 20)) >> 21;
         //    s3 += carry2;
         //    s2 -= carry2 * ((uint64_t) 1L << 21);
-        $carry2 = ($s2 + (1 << 20)) >> 21;
+        $carry2 = ( $s2 + ( 1 << 20 ) ) >> 21;
         $s3 += $carry2;
         $s2 -= $carry2 << 21;
         //    carry4 = (s4 + (int64_t) (1L << 20)) >> 21;
         //    s5 += carry4;
         //    s4 -= carry4 * ((uint64_t) 1L << 21);
-        $carry4 = ($s4 + (1 << 20)) >> 21;
+        $carry4 = ( $s4 + ( 1 << 20 ) ) >> 21;
         $s5 += $carry4;
         $s4 -= $carry4 << 21;
         //    carry6 = (s6 + (int64_t) (1L << 20)) >> 21;
         //    s7 += carry6;
         //    s6 -= carry6 * ((uint64_t) 1L << 21);
-        $carry6 = ($s6 + (1 << 20)) >> 21;
+        $carry6 = ( $s6 + ( 1 << 20 ) ) >> 21;
         $s7 += $carry6;
         $s6 -= $carry6 << 21;
         //    carry8 = (s8 + (int64_t) (1L << 20)) >> 21;
         //    s9 += carry8;
         //    s8 -= carry8 * ((uint64_t) 1L << 21);
-        $carry8 = ($s8 + (1 << 20)) >> 21;
+        $carry8 = ( $s8 + ( 1 << 20 ) ) >> 21;
         $s9 += $carry8;
         $s8 -= $carry8 << 21;
         //    carry10 = (s10 + (int64_t) (1L << 20)) >> 21;
         //    s11 += carry10;
         //    s10 -= carry10 * ((uint64_t) 1L << 21);
-        $carry10 = ($s10 + (1 << 20)) >> 21;
+        $carry10 = ( $s10 + ( 1 << 20 ) ) >> 21;
         $s11 += $carry10;
         $s10 -= $carry10 << 21;
         //    carry12 = (s12 + (int64_t) (1L << 20)) >> 21;
         //    s13 += carry12;
         //    s12 -= carry12 * ((uint64_t) 1L << 21);
-        $carry12 = ($s12 + (1 << 20)) >> 21;
+        $carry12 = ( $s12 + ( 1 << 20 ) ) >> 21;
         $s13 += $carry12;
         $s12 -= $carry12 << 21;
         //    carry14 = (s14 + (int64_t) (1L << 20)) >> 21;
         //    s15 += carry14;
         //    s14 -= carry14 * ((uint64_t) 1L << 21);
-        $carry14 = ($s14 + (1 << 20)) >> 21;
+        $carry14 = ( $s14 + ( 1 << 20 ) ) >> 21;
         $s15 += $carry14;
         $s14 -= $carry14 << 21;
         //    carry16 = (s16 + (int64_t) (1L << 20)) >> 21;
         //    s17 += carry16;
         //    s16 -= carry16 * ((uint64_t) 1L << 21);
-        $carry16 = ($s16 + (1 << 20)) >> 21;
+        $carry16 = ( $s16 + ( 1 << 20 ) ) >> 21;
         $s17 += $carry16;
         $s16 -= $carry16 << 21;
         //    carry18 = (s18 + (int64_t) (1L << 20)) >> 21;
         //    s19 += carry18;
         //    s18 -= carry18 * ((uint64_t) 1L << 21);
-        $carry18 = ($s18 + (1 << 20)) >> 21;
+        $carry18 = ( $s18 + ( 1 << 20 ) ) >> 21;
         $s19 += $carry18;
         $s18 -= $carry18 << 21;
         //    carry20 = (s20 + (int64_t) (1L << 20)) >> 21;
         //    s21 += carry20;
         //    s20 -= carry20 * ((uint64_t) 1L << 21);
-        $carry20 = ($s20 + (1 << 20)) >> 21;
+        $carry20 = ( $s20 + ( 1 << 20 ) ) >> 21;
         $s21 += $carry20;
         $s20 -= $carry20 << 21;
         //    carry22 = (s22 + (int64_t) (1L << 20)) >> 21;
         //    s23 += carry22;
         //    s22 -= carry22 * ((uint64_t) 1L << 21);
-        $carry22 = ($s22 + (1 << 20)) >> 21;
+        $carry22 = ( $s22 + ( 1 << 20 ) ) >> 21;
         $s23 += $carry22;
         $s22 -= $carry22 << 21;
 
         //    carry1 = (s1 + (int64_t) (1L << 20)) >> 21;
         //    s2 += carry1;
         //    s1 -= carry1 * ((uint64_t) 1L << 21);
-        $carry1 = ($s1 + (1 << 20)) >> 21;
+        $carry1 = ( $s1 + ( 1 << 20 ) ) >> 21;
         $s2 += $carry1;
         $s1 -= $carry1 << 21;
         //    carry3 = (s3 + (int64_t) (1L << 20)) >> 21;
         //    s4 += carry3;
         //    s3 -= carry3 * ((uint64_t) 1L << 21);
-        $carry3 = ($s3 + (1 << 20)) >> 21;
+        $carry3 = ( $s3 + ( 1 << 20 ) ) >> 21;
         $s4 += $carry3;
         $s3 -= $carry3 << 21;
         //    carry5 = (s5 + (int64_t) (1L << 20)) >> 21;
         //    s6 += carry5;
         //    s5 -= carry5 * ((uint64_t) 1L << 21);
-        $carry5 = ($s5 + (1 << 20)) >> 21;
+        $carry5 = ( $s5 + ( 1 << 20 ) ) >> 21;
         $s6 += $carry5;
         $s5 -= $carry5 << 21;
         //    carry7 = (s7 + (int64_t) (1L << 20)) >> 21;
         //    s8 += carry7;
         //    s7 -= carry7 * ((uint64_t) 1L << 21);
-        $carry7 = ($s7 + (1 << 20)) >> 21;
+        $carry7 = ( $s7 + ( 1 << 20 ) ) >> 21;
         $s8 += $carry7;
         $s7 -= $carry7 << 21;
         //    carry9 = (s9 + (int64_t) (1L << 20)) >> 21;
         //    s10 += carry9;
         //    s9 -= carry9 * ((uint64_t) 1L << 21);
-        $carry9 = ($s9 + (1 << 20)) >> 21;
+        $carry9 = ( $s9 + ( 1 << 20 ) ) >> 21;
         $s10 += $carry9;
         $s9 -= $carry9 << 21;
         //    carry11 = (s11 + (int64_t) (1L << 20)) >> 21;
         //    s12 += carry11;
         //    s11 -= carry11 * ((uint64_t) 1L << 21);
-        $carry11 = ($s11 + (1 << 20)) >> 21;
+        $carry11 = ( $s11 + ( 1 << 20 ) ) >> 21;
         $s12 += $carry11;
         $s11 -= $carry11 << 21;
         //    carry13 = (s13 + (int64_t) (1L << 20)) >> 21;
         //    s14 += carry13;
         //    s13 -= carry13 * ((uint64_t) 1L << 21);
-        $carry13 = ($s13 + (1 << 20)) >> 21;
+        $carry13 = ( $s13 + ( 1 << 20 ) ) >> 21;
         $s14 += $carry13;
         $s13 -= $carry13 << 21;
         //    carry15 = (s15 + (int64_t) (1L << 20)) >> 21;
         //    s16 += carry15;
         //    s15 -= carry15 * ((uint64_t) 1L << 21);
-        $carry15 = ($s15 + (1 << 20)) >> 21;
+        $carry15 = ( $s15 + ( 1 << 20 ) ) >> 21;
         $s16 += $carry15;
         $s15 -= $carry15 << 21;
         //    carry17 = (s17 + (int64_t) (1L << 20)) >> 21;
         //    s18 += carry17;
         //    s17 -= carry17 * ((uint64_t) 1L << 21);
-        $carry17 = ($s17 + (1 << 20)) >> 21;
+        $carry17 = ( $s17 + ( 1 << 20 ) ) >> 21;
         $s18 += $carry17;
         $s17 -= $carry17 << 21;
         //    carry19 = (s19 + (int64_t) (1L << 20)) >> 21;
         //    s20 += carry19;
         //    s19 -= carry19 * ((uint64_t) 1L << 21);
-        $carry19 = ($s19 + (1 << 20)) >> 21;
+        $carry19 = ( $s19 + ( 1 << 20 ) ) >> 21;
         $s20 += $carry19;
         $s19 -= $carry19 << 21;
         //    carry21 = (s21 + (int64_t) (1L << 20)) >> 21;
         //    s22 += carry21;
         //    s21 -= carry21 * ((uint64_t) 1L << 21);
-        $carry21 = ($s21 + (1 << 20)) >> 21;
+        $carry21 = ( $s21 + ( 1 << 20 ) ) >> 21;
         $s22 += $carry21;
         $s21 -= $carry21 << 21;
 
@@ -3169,12 +3169,12 @@ 
         //    s14 -= s23 * 997805;
         //    s15 += s23 * 136657;
         //    s16 -= s23 * 683901;
-        $s11 += self::mul($s23, 666643, 20);
-        $s12 += self::mul($s23, 470296, 19);
-        $s13 += self::mul($s23, 654183, 20);
-        $s14 -= self::mul($s23, 997805, 20);
-        $s15 += self::mul($s23, 136657, 18);
-        $s16 -= self::mul($s23, 683901, 20);
+        $s11 += self::mul( $s23, 666643, 20 );
+        $s12 += self::mul( $s23, 470296, 19 );
+        $s13 += self::mul( $s23, 654183, 20 );
+        $s14 -= self::mul( $s23, 997805, 20 );
+        $s15 += self::mul( $s23, 136657, 18 );
+        $s16 -= self::mul( $s23, 683901, 20 );
 
         //    s10 += s22 * 666643;
         //    s11 += s22 * 470296;
@@ -3182,12 +3182,12 @@ 
         //    s13 -= s22 * 997805;
         //    s14 += s22 * 136657;
         //    s15 -= s22 * 683901;
-        $s10 += self::mul($s22, 666643, 20);
-        $s11 += self::mul($s22, 470296, 19);
-        $s12 += self::mul($s22, 654183, 20);
-        $s13 -= self::mul($s22, 997805, 20);
-        $s14 += self::mul($s22, 136657, 18);
-        $s15 -= self::mul($s22, 683901, 20);
+        $s10 += self::mul( $s22, 666643, 20 );
+        $s11 += self::mul( $s22, 470296, 19 );
+        $s12 += self::mul( $s22, 654183, 20 );
+        $s13 -= self::mul( $s22, 997805, 20 );
+        $s14 += self::mul( $s22, 136657, 18 );
+        $s15 -= self::mul( $s22, 683901, 20 );
 
         //    s9 += s21 * 666643;
         //    s10 += s21 * 470296;
@@ -3195,12 +3195,12 @@ 
         //    s12 -= s21 * 997805;
         //    s13 += s21 * 136657;
         //    s14 -= s21 * 683901;
-        $s9 += self::mul($s21, 666643, 20);
-        $s10 += self::mul($s21, 470296, 19);
-        $s11 += self::mul($s21, 654183, 20);
-        $s12 -= self::mul($s21, 997805, 20);
-        $s13 += self::mul($s21, 136657, 18);
-        $s14 -= self::mul($s21, 683901, 20);
+        $s9 += self::mul( $s21, 666643, 20 );
+        $s10 += self::mul( $s21, 470296, 19 );
+        $s11 += self::mul( $s21, 654183, 20 );
+        $s12 -= self::mul( $s21, 997805, 20 );
+        $s13 += self::mul( $s21, 136657, 18 );
+        $s14 -= self::mul( $s21, 683901, 20 );
 
         //    s8 += s20 * 666643;
         //    s9 += s20 * 470296;
@@ -3208,12 +3208,12 @@ 
         //    s11 -= s20 * 997805;
         //    s12 += s20 * 136657;
         //    s13 -= s20 * 683901;
-        $s8 += self::mul($s20, 666643, 20);
-        $s9 += self::mul($s20, 470296, 19);
-        $s10 += self::mul($s20, 654183, 20);
-        $s11 -= self::mul($s20, 997805, 20);
-        $s12 += self::mul($s20, 136657, 18);
-        $s13 -= self::mul($s20, 683901, 20);
+        $s8 += self::mul( $s20, 666643, 20 );
+        $s9 += self::mul( $s20, 470296, 19 );
+        $s10 += self::mul( $s20, 654183, 20 );
+        $s11 -= self::mul( $s20, 997805, 20 );
+        $s12 += self::mul( $s20, 136657, 18 );
+        $s13 -= self::mul( $s20, 683901, 20 );
 
         //    s7 += s19 * 666643;
         //    s8 += s19 * 470296;
@@ -3221,12 +3221,12 @@ 
         //    s10 -= s19 * 997805;
         //    s11 += s19 * 136657;
         //    s12 -= s19 * 683901;
-        $s7 += self::mul($s19, 666643, 20);
-        $s8 += self::mul($s19, 470296, 19);
-        $s9 += self::mul($s19, 654183, 20);
-        $s10 -= self::mul($s19, 997805, 20);
-        $s11 += self::mul($s19, 136657, 18);
-        $s12 -= self::mul($s19, 683901, 20);
+        $s7 += self::mul( $s19, 666643, 20 );
+        $s8 += self::mul( $s19, 470296, 19 );
+        $s9 += self::mul( $s19, 654183, 20 );
+        $s10 -= self::mul( $s19, 997805, 20 );
+        $s11 += self::mul( $s19, 136657, 18 );
+        $s12 -= self::mul( $s19, 683901, 20 );
 
         //    s6 += s18 * 666643;
         //    s7 += s18 * 470296;
@@ -3234,78 +3234,78 @@ 
         //    s9 -= s18 * 997805;
         //    s10 += s18 * 136657;
         //    s11 -= s18 * 683901;
-        $s6 += self::mul($s18, 666643, 20);
-        $s7 += self::mul($s18, 470296, 19);
-        $s8 += self::mul($s18, 654183, 20);
-        $s9 -= self::mul($s18, 997805, 20);
-        $s10 += self::mul($s18, 136657, 18);
-        $s11 -= self::mul($s18, 683901, 20);
+        $s6 += self::mul( $s18, 666643, 20 );
+        $s7 += self::mul( $s18, 470296, 19 );
+        $s8 += self::mul( $s18, 654183, 20 );
+        $s9 -= self::mul( $s18, 997805, 20 );
+        $s10 += self::mul( $s18, 136657, 18 );
+        $s11 -= self::mul( $s18, 683901, 20 );
 
         //    carry6 = (s6 + (int64_t) (1L << 20)) >> 21;
         //    s7 += carry6;
         //    s6 -= carry6 * ((uint64_t) 1L << 21);
-        $carry6 = ($s6 + (1 << 20)) >> 21;
+        $carry6 = ( $s6 + ( 1 << 20 ) ) >> 21;
         $s7 += $carry6;
         $s6 -= $carry6 << 21;
         //    carry8 = (s8 + (int64_t) (1L << 20)) >> 21;
         //    s9 += carry8;
         //    s8 -= carry8 * ((uint64_t) 1L << 21);
-        $carry8 = ($s8 + (1 << 20)) >> 21;
+        $carry8 = ( $s8 + ( 1 << 20 ) ) >> 21;
         $s9 += $carry8;
         $s8 -= $carry8 << 21;
         //    carry10 = (s10 + (int64_t) (1L << 20)) >> 21;
         //    s11 += carry10;
         //    s10 -= carry10 * ((uint64_t) 1L << 21);
-        $carry10 = ($s10 + (1 << 20)) >> 21;
+        $carry10 = ( $s10 + ( 1 << 20 ) ) >> 21;
         $s11 += $carry10;
         $s10 -= $carry10 << 21;
         //    carry12 = (s12 + (int64_t) (1L << 20)) >> 21;
         //    s13 += carry12;
         //    s12 -= carry12 * ((uint64_t) 1L << 21);
-        $carry12 = ($s12 + (1 << 20)) >> 21;
+        $carry12 = ( $s12 + ( 1 << 20 ) ) >> 21;
         $s13 += $carry12;
         $s12 -= $carry12 << 21;
         //    carry14 = (s14 + (int64_t) (1L << 20)) >> 21;
         //    s15 += carry14;
         //    s14 -= carry14 * ((uint64_t) 1L << 21);
-        $carry14 = ($s14 + (1 << 20)) >> 21;
+        $carry14 = ( $s14 + ( 1 << 20 ) ) >> 21;
         $s15 += $carry14;
         $s14 -= $carry14 << 21;
         //    carry16 = (s16 + (int64_t) (1L << 20)) >> 21;
         //    s17 += carry16;
         //    s16 -= carry16 * ((uint64_t) 1L << 21);
-        $carry16 = ($s16 + (1 << 20)) >> 21;
+        $carry16 = ( $s16 + ( 1 << 20 ) ) >> 21;
         $s17 += $carry16;
         $s16 -= $carry16 << 21;
 
         //    carry7 = (s7 + (int64_t) (1L << 20)) >> 21;
         //    s8 += carry7;
         //    s7 -= carry7 * ((uint64_t) 1L << 21);
-        $carry7 = ($s7 + (1 << 20)) >> 21;
+        $carry7 = ( $s7 + ( 1 << 20 ) ) >> 21;
         $s8 += $carry7;
         $s7 -= $carry7 << 21;
         //    carry9 = (s9 + (int64_t) (1L << 20)) >> 21;
         //    s10 += carry9;
         //    s9 -= carry9 * ((uint64_t) 1L << 21);
-        $carry9 = ($s9 + (1 << 20)) >> 21;
+        $carry9 = ( $s9 + ( 1 << 20 ) ) >> 21;
         $s10 += $carry9;
         $s9 -= $carry9 << 21;
         //    carry11 = (s11 + (int64_t) (1L << 20)) >> 21;
         //    s12 += carry11;
         //    s11 -= carry11 * ((uint64_t) 1L << 21);
-        $carry11 = ($s11 + (1 << 20)) >> 21;
+        $carry11 = ( $s11 + ( 1 << 20 ) ) >> 21;
         $s12 += $carry11;
         $s11 -= $carry11 << 21;
         //    carry13 = (s13 + (int64_t) (1L << 20)) >> 21;
         //    s14 += carry13;
         //    s13 -= carry13 * ((uint64_t) 1L << 21);
-        $carry13 = ($s13 + (1 << 20)) >> 21;
+        $carry13 = ( $s13 + ( 1 << 20 ) ) >> 21;
         $s14 += $carry13;
         $s13 -= $carry13 << 21;
         //    carry15 = (s15 + (int64_t) (1L << 20)) >> 21;
         //    s16 += carry15;
         //    s15 -= carry15 * ((uint64_t) 1L << 21);
-        $carry15 = ($s15 + (1 << 20)) >> 21;
+        $carry15 = ( $s15 + ( 1 << 20 ) ) >> 21;
         $s16 += $carry15;
         $s15 -= $carry15 << 21;
 
@@ -3315,12 +3315,12 @@ 
         //    s8 -= s17 * 997805;
         //    s9 += s17 * 136657;
         //    s10 -= s17 * 683901;
-        $s5 += self::mul($s17, 666643, 20);
-        $s6 += self::mul($s17, 470296, 19);
-        $s7 += self::mul($s17, 654183, 20);
-        $s8 -= self::mul($s17, 997805, 20);
-        $s9 += self::mul($s17, 136657, 18);
-        $s10 -= self::mul($s17, 683901, 20);
+        $s5 += self::mul( $s17, 666643, 20 );
+        $s6 += self::mul( $s17, 470296, 19 );
+        $s7 += self::mul( $s17, 654183, 20 );
+        $s8 -= self::mul( $s17, 997805, 20 );
+        $s9 += self::mul( $s17, 136657, 18 );
+        $s10 -= self::mul( $s17, 683901, 20 );
 
         //    s4 += s16 * 666643;
         //    s5 += s16 * 470296;
@@ -3328,12 +3328,12 @@ 
         //    s7 -= s16 * 997805;
         //    s8 += s16 * 136657;
         //    s9 -= s16 * 683901;
-        $s4 += self::mul($s16, 666643, 20);
-        $s5 += self::mul($s16, 470296, 19);
-        $s6 += self::mul($s16, 654183, 20);
-        $s7 -= self::mul($s16, 997805, 20);
-        $s8 += self::mul($s16, 136657, 18);
-        $s9 -= self::mul($s16, 683901, 20);
+        $s4 += self::mul( $s16, 666643, 20 );
+        $s5 += self::mul( $s16, 470296, 19 );
+        $s6 += self::mul( $s16, 654183, 20 );
+        $s7 -= self::mul( $s16, 997805, 20 );
+        $s8 += self::mul( $s16, 136657, 18 );
+        $s9 -= self::mul( $s16, 683901, 20 );
 
         //    s3 += s15 * 666643;
         //    s4 += s15 * 470296;
@@ -3341,12 +3341,12 @@ 
         //    s6 -= s15 * 997805;
         //    s7 += s15 * 136657;
         //    s8 -= s15 * 683901;
-        $s3 += self::mul($s15, 666643, 20);
-        $s4 += self::mul($s15, 470296, 19);
-        $s5 += self::mul($s15, 654183, 20);
-        $s6 -= self::mul($s15, 997805, 20);
-        $s7 += self::mul($s15, 136657, 18);
-        $s8 -= self::mul($s15, 683901, 20);
+        $s3 += self::mul( $s15, 666643, 20 );
+        $s4 += self::mul( $s15, 470296, 19 );
+        $s5 += self::mul( $s15, 654183, 20 );
+        $s6 -= self::mul( $s15, 997805, 20 );
+        $s7 += self::mul( $s15, 136657, 18 );
+        $s8 -= self::mul( $s15, 683901, 20 );
 
         //    s2 += s14 * 666643;
         //    s3 += s14 * 470296;
@@ -3354,12 +3354,12 @@ 
         //    s5 -= s14 * 997805;
         //    s6 += s14 * 136657;
         //    s7 -= s14 * 683901;
-        $s2 += self::mul($s14, 666643, 20);
-        $s3 += self::mul($s14, 470296, 19);
-        $s4 += self::mul($s14, 654183, 20);
-        $s5 -= self::mul($s14, 997805, 20);
-        $s6 += self::mul($s14, 136657, 18);
-        $s7 -= self::mul($s14, 683901, 20);
+        $s2 += self::mul( $s14, 666643, 20 );
+        $s3 += self::mul( $s14, 470296, 19 );
+        $s4 += self::mul( $s14, 654183, 20 );
+        $s5 -= self::mul( $s14, 997805, 20 );
+        $s6 += self::mul( $s14, 136657, 18 );
+        $s7 -= self::mul( $s14, 683901, 20 );
 
         //    s1 += s13 * 666643;
         //    s2 += s13 * 470296;
@@ -3367,12 +3367,12 @@ 
         //    s4 -= s13 * 997805;
         //    s5 += s13 * 136657;
         //    s6 -= s13 * 683901;
-        $s1 += self::mul($s13, 666643, 20);
-        $s2 += self::mul($s13, 470296, 19);
-        $s3 += self::mul($s13, 654183, 20);
-        $s4 -= self::mul($s13, 997805, 20);
-        $s5 += self::mul($s13, 136657, 18);
-        $s6 -= self::mul($s13, 683901, 20);
+        $s1 += self::mul( $s13, 666643, 20 );
+        $s2 += self::mul( $s13, 470296, 19 );
+        $s3 += self::mul( $s13, 654183, 20 );
+        $s4 -= self::mul( $s13, 997805, 20 );
+        $s5 += self::mul( $s13, 136657, 18 );
+        $s6 -= self::mul( $s13, 683901, 20 );
 
         //    s0 += s12 * 666643;
         //    s1 += s12 * 470296;
@@ -3381,85 +3381,85 @@ 
         //    s4 += s12 * 136657;
         //    s5 -= s12 * 683901;
         //    s12 = 0;
-        $s0 += self::mul($s12, 666643, 20);
-        $s1 += self::mul($s12, 470296, 19);
-        $s2 += self::mul($s12, 654183, 20);
-        $s3 -= self::mul($s12, 997805, 20);
-        $s4 += self::mul($s12, 136657, 18);
-        $s5 -= self::mul($s12, 683901, 20);
+        $s0 += self::mul( $s12, 666643, 20 );
+        $s1 += self::mul( $s12, 470296, 19 );
+        $s2 += self::mul( $s12, 654183, 20 );
+        $s3 -= self::mul( $s12, 997805, 20 );
+        $s4 += self::mul( $s12, 136657, 18 );
+        $s5 -= self::mul( $s12, 683901, 20 );
         $s12 = 0;
 
         //    carry0 = (s0 + (int64_t) (1L << 20)) >> 21;
         //    s1 += carry0;
         //    s0 -= carry0 * ((uint64_t) 1L << 21);
-        $carry0 = ($s0 + (1 << 20)) >> 21;
+        $carry0 = ( $s0 + ( 1 << 20 ) ) >> 21;
         $s1 += $carry0;
         $s0 -= $carry0 << 21;
         //    carry2 = (s2 + (int64_t) (1L << 20)) >> 21;
         //    s3 += carry2;
         //    s2 -= carry2 * ((uint64_t) 1L << 21);
-        $carry2 = ($s2 + (1 << 20)) >> 21;
+        $carry2 = ( $s2 + ( 1 << 20 ) ) >> 21;
         $s3 += $carry2;
         $s2 -= $carry2 << 21;
         //    carry4 = (s4 + (int64_t) (1L << 20)) >> 21;
         //    s5 += carry4;
         //    s4 -= carry4 * ((uint64_t) 1L << 21);
-        $carry4 = ($s4 + (1 << 20)) >> 21;
+        $carry4 = ( $s4 + ( 1 << 20 ) ) >> 21;
         $s5 += $carry4;
         $s4 -= $carry4 << 21;
         //    carry6 = (s6 + (int64_t) (1L << 20)) >> 21;
         //    s7 += carry6;
         //    s6 -= carry6 * ((uint64_t) 1L << 21);
-        $carry6 = ($s6 + (1 << 20)) >> 21;
+        $carry6 = ( $s6 + ( 1 << 20 ) ) >> 21;
         $s7 += $carry6;
         $s6 -= $carry6 << 21;
         //    carry8 = (s8 + (int64_t) (1L << 20)) >> 21;
         //    s9 += carry8;
         //    s8 -= carry8 * ((uint64_t) 1L << 21);
-        $carry8 = ($s8 + (1 << 20)) >> 21;
+        $carry8 = ( $s8 + ( 1 << 20 ) ) >> 21;
         $s9 += $carry8;
         $s8 -= $carry8 << 21;
         //    carry10 = (s10 + (int64_t) (1L << 20)) >> 21;
         //    s11 += carry10;
         //    s10 -= carry10 * ((uint64_t) 1L << 21);
-        $carry10 = ($s10 + (1 << 20)) >> 21;
+        $carry10 = ( $s10 + ( 1 << 20 ) ) >> 21;
         $s11 += $carry10;
         $s10 -= $carry10 << 21;
 
         //    carry1 = (s1 + (int64_t) (1L << 20)) >> 21;
         //    s2 += carry1;
         //    s1 -= carry1 * ((uint64_t) 1L << 21);
-        $carry1 = ($s1 + (1 << 20)) >> 21;
+        $carry1 = ( $s1 + ( 1 << 20 ) ) >> 21;
         $s2 += $carry1;
         $s1 -= $carry1 << 21;
         //    carry3 = (s3 + (int64_t) (1L << 20)) >> 21;
         //    s4 += carry3;
         //    s3 -= carry3 * ((uint64_t) 1L << 21);
-        $carry3 = ($s3 + (1 << 20)) >> 21;
+        $carry3 = ( $s3 + ( 1 << 20 ) ) >> 21;
         $s4 += $carry3;
         $s3 -= $carry3 << 21;
         //    carry5 = (s5 + (int64_t) (1L << 20)) >> 21;
         //    s6 += carry5;
         //    s5 -= carry5 * ((uint64_t) 1L << 21);
-        $carry5 = ($s5 + (1 << 20)) >> 21;
+        $carry5 = ( $s5 + ( 1 << 20 ) ) >> 21;
         $s6 += $carry5;
         $s5 -= $carry5 << 21;
         //    carry7 = (s7 + (int64_t) (1L << 20)) >> 21;
         //    s8 += carry7;
         //    s7 -= carry7 * ((uint64_t) 1L << 21);
-        $carry7 = ($s7 + (1 << 20)) >> 21;
+        $carry7 = ( $s7 + ( 1 << 20 ) ) >> 21;
         $s8 += $carry7;
         $s7 -= $carry7 << 21;
         //    carry9 = (s9 + (int64_t) (1L << 20)) >> 21;
         //    s10 += carry9;
         //    s9 -= carry9 * ((uint64_t) 1L << 21);
-        $carry9 = ($s9 + (1 << 20)) >> 21;
+        $carry9 = ( $s9 + ( 1 << 20 ) ) >> 21;
         $s10 += $carry9;
         $s9 -= $carry9 << 21;
         //    carry11 = (s11 + (int64_t) (1L << 20)) >> 21;
         //    s12 += carry11;
         //    s11 -= carry11 * ((uint64_t) 1L << 21);
-        $carry11 = ($s11 + (1 << 20)) >> 21;
+        $carry11 = ( $s11 + ( 1 << 20 ) ) >> 21;
         $s12 += $carry11;
         $s11 -= $carry11 << 21;
 
@@ -3470,12 +3470,12 @@ 
         //    s4 += s12 * 136657;
         //    s5 -= s12 * 683901;
         //    s12 = 0;
-        $s0 += self::mul($s12, 666643, 20);
-        $s1 += self::mul($s12, 470296, 19);
-        $s2 += self::mul($s12, 654183, 20);
-        $s3 -= self::mul($s12, 997805, 20);
-        $s4 += self::mul($s12, 136657, 18);
-        $s5 -= self::mul($s12, 683901, 20);
+        $s0 += self::mul( $s12, 666643, 20 );
+        $s1 += self::mul( $s12, 470296, 19 );
+        $s2 += self::mul( $s12, 654183, 20 );
+        $s3 -= self::mul( $s12, 997805, 20 );
+        $s4 += self::mul( $s12, 136657, 18 );
+        $s5 -= self::mul( $s12, 683901, 20 );
         $s12 = 0;
 
         //    carry0 = s0 >> 21;
@@ -3557,12 +3557,12 @@ 
         //    s3 -= s12 * 997805;
         //    s4 += s12 * 136657;
         //    s5 -= s12 * 683901;
-        $s0 += self::mul($s12, 666643, 20);
-        $s1 += self::mul($s12, 470296, 19);
-        $s2 += self::mul($s12, 654183, 20);
-        $s3 -= self::mul($s12, 997805, 20);
-        $s4 += self::mul($s12, 136657, 18);
-        $s5 -= self::mul($s12, 683901, 20);
+        $s0 += self::mul( $s12, 666643, 20 );
+        $s1 += self::mul( $s12, 470296, 19 );
+        $s2 += self::mul( $s12, 654183, 20 );
+        $s3 -= self::mul( $s12, 997805, 20 );
+        $s4 += self::mul( $s12, 136657, 18 );
+        $s5 -= self::mul( $s12, 683901, 20 );
 
         //    carry0 = s0 >> 21;
         //    s1 += carry0;
@@ -3631,81 +3631,81 @@ 
         $s11 += $carry10;
         $s10 -= $carry10 << 21;
 
-        $s = array_fill(0, 32, 0);
+        $s = array_fill( 0, 32, 0 );
         // s[0]  = s0 >> 0;
-        $s[0]  = $s0 >> 0;
+        $s[ 0 ]  = $s0 >> 0;
         // s[1]  = s0 >> 8;
-        $s[1]  = $s0 >> 8;
+        $s[ 1 ]  = $s0 >> 8;
         // s[2]  = (s0 >> 16) | (s1 * ((uint64_t) 1 << 5));
-        $s[2]  = ($s0 >> 16) | ($s1 << 5);
+        $s[ 2 ]  = ( $s0 >> 16 ) | ( $s1 << 5 );
         // s[3]  = s1 >> 3;
-        $s[3]  = $s1 >> 3;
+        $s[ 3 ]  = $s1 >> 3;
         // s[4]  = s1 >> 11;
-        $s[4]  = $s1 >> 11;
+        $s[ 4 ]  = $s1 >> 11;
         // s[5]  = (s1 >> 19) | (s2 * ((uint64_t) 1 << 2));
-        $s[5]  = ($s1 >> 19) | ($s2 << 2);
+        $s[ 5 ]  = ( $s1 >> 19 ) | ( $s2 << 2 );
         // s[6]  = s2 >> 6;
-        $s[6]  = $s2 >> 6;
+        $s[ 6 ]  = $s2 >> 6;
         // s[7]  = (s2 >> 14) | (s3 * ((uint64_t) 1 << 7));
-        $s[7]  = ($s2 >> 14) | ($s3 << 7);
+        $s[ 7 ]  = ( $s2 >> 14 ) | ( $s3 << 7 );
         // s[8]  = s3 >> 1;
-        $s[8]  = $s3 >> 1;
+        $s[ 8 ]  = $s3 >> 1;
         // s[9]  = s3 >> 9;
-        $s[9]  = $s3 >> 9;
+        $s[ 9 ]  = $s3 >> 9;
         // s[10] = (s3 >> 17) | (s4 * ((uint64_t) 1 << 4));
-        $s[10] = ($s3 >> 17) | ($s4 << 4);
+        $s[ 10 ] = ( $s3 >> 17 ) | ( $s4 << 4 );
         // s[11] = s4 >> 4;
-        $s[11] = $s4 >> 4;
+        $s[ 11 ] = $s4 >> 4;
         // s[12] = s4 >> 12;
-        $s[12] = $s4 >> 12;
+        $s[ 12 ] = $s4 >> 12;
         // s[13] = (s4 >> 20) | (s5 * ((uint64_t) 1 << 1));
-        $s[13] = ($s4 >> 20) | ($s5 << 1);
+        $s[ 13 ] = ( $s4 >> 20 ) | ( $s5 << 1 );
         // s[14] = s5 >> 7;
-        $s[14] = $s5 >> 7;
+        $s[ 14 ] = $s5 >> 7;
         // s[15] = (s5 >> 15) | (s6 * ((uint64_t) 1 << 6));
-        $s[15] = ($s5 >> 15) | ($s6 << 6);
+        $s[ 15 ] = ( $s5 >> 15 ) | ( $s6 << 6 );
         // s[16] = s6 >> 2;
-        $s[16] = $s6 >> 2;
+        $s[ 16 ] = $s6 >> 2;
         // s[17] = s6 >> 10;
-        $s[17] = $s6 >> 10;
+        $s[ 17 ] = $s6 >> 10;
         // s[18] = (s6 >> 18) | (s7 * ((uint64_t) 1 << 3));
-        $s[18] = ($s6 >> 18) | ($s7 << 3);
+        $s[ 18 ] = ( $s6 >> 18 ) | ( $s7 << 3 );
         // s[19] = s7 >> 5;
-        $s[19] = $s7 >> 5;
+        $s[ 19 ] = $s7 >> 5;
         // s[20] = s7 >> 13;
-        $s[20] = $s7 >> 13;
+        $s[ 20 ] = $s7 >> 13;
         // s[21] = s8 >> 0;
-        $s[21] = $s8 >> 0;
+        $s[ 21 ] = $s8 >> 0;
         // s[22] = s8 >> 8;
-        $s[22] = $s8 >> 8;
+        $s[ 22 ] = $s8 >> 8;
         // s[23] = (s8 >> 16) | (s9 * ((uint64_t) 1 << 5));
-        $s[23] = ($s8 >> 16) | ($s9 << 5);
+        $s[ 23 ] = ( $s8 >> 16 ) | ( $s9 << 5 );
         // s[24] = s9 >> 3;
-        $s[24] = $s9 >> 3;
+        $s[ 24 ] = $s9 >> 3;
         // s[25] = s9 >> 11;
-        $s[25] = $s9 >> 11;
+        $s[ 25 ] = $s9 >> 11;
         // s[26] = (s9 >> 19) | (s10 * ((uint64_t) 1 << 2));
-        $s[26] = ($s9 >> 19) | ($s10 << 2);
+        $s[ 26 ] = ( $s9 >> 19 ) | ( $s10 << 2 );
         // s[27] = s10 >> 6;
-        $s[27] = $s10 >> 6;
+        $s[ 27 ] = $s10 >> 6;
         // s[28] = (s10 >> 14) | (s11 * ((uint64_t) 1 << 7));
-        $s[28] = ($s10 >> 14) | ($s11 << 7);
+        $s[ 28 ] = ( $s10 >> 14 ) | ( $s11 << 7 );
         // s[29] = s11 >> 1;
-        $s[29] = $s11 >> 1;
+        $s[ 29 ] = $s11 >> 1;
         // s[30] = s11 >> 9;
-        $s[30] = $s11 >> 9;
+        $s[ 30 ] = $s11 >> 9;
         // s[31] = s11 >> 17;
-        $s[31] = $s11 >> 17;
-        return self::intArrayToString($s);
+        $s[ 31 ] = $s11 >> 17;
+        return self::intArrayToString( $s );
     }
 
     /**
      * @param string $s
      * @return string
      */
-    public static function sc25519_sq($s)
+    public static function sc25519_sq( $s )
     {
-        return self::sc25519_mul($s, $s);
+        return self::sc25519_mul( $s, $s );
     }
 
     /**
@@ -3714,72 +3714,72 @@ 
      * @param string $a
      * @return string
      */
-    public static function sc25519_sqmul($s, $n, $a)
+    public static function sc25519_sqmul( $s, $n, $a )
     {
-        for ($i = 0; $i < $n; ++$i) {
-            $s = self::sc25519_sq($s);
+        for ( $i = 0; $i < $n; ++$i ) {
+            $s = self::sc25519_sq( $s );
         }
-        return self::sc25519_mul($s, $a);
+        return self::sc25519_mul( $s, $a );
     }
 
     /**
      * @param string $s
      * @return string
      */
-    public static function sc25519_invert($s)
+    public static function sc25519_invert( $s )
     {
-        $_10 = self::sc25519_sq($s);
-        $_11 = self::sc25519_mul($s, $_10);
-        $_100 = self::sc25519_mul($s, $_11);
-        $_1000 = self::sc25519_sq($_100);
-        $_1010 = self::sc25519_mul($_10, $_1000);
-        $_1011 = self::sc25519_mul($s, $_1010);
-        $_10000 = self::sc25519_sq($_1000);
-        $_10110 = self::sc25519_sq($_1011);
-        $_100000 = self::sc25519_mul($_1010, $_10110);
-        $_100110 = self::sc25519_mul($_10000, $_10110);
-        $_1000000 = self::sc25519_sq($_100000);
-        $_1010000 = self::sc25519_mul($_10000, $_1000000);
-        $_1010011 = self::sc25519_mul($_11, $_1010000);
-        $_1100011 = self::sc25519_mul($_10000, $_1010011);
-        $_1100111 = self::sc25519_mul($_100, $_1100011);
-        $_1101011 = self::sc25519_mul($_100, $_1100111);
-        $_10010011 = self::sc25519_mul($_1000000, $_1010011);
-        $_10010111 = self::sc25519_mul($_100, $_10010011);
-        $_10111101 = self::sc25519_mul($_100110, $_10010111);
-        $_11010011 = self::sc25519_mul($_10110, $_10111101);
-        $_11100111 = self::sc25519_mul($_1010000, $_10010111);
-        $_11101011 = self::sc25519_mul($_100, $_11100111);
-        $_11110101 = self::sc25519_mul($_1010, $_11101011);
-
-        $recip = self::sc25519_mul($_1011, $_11110101);
-        $recip = self::sc25519_sqmul($recip, 126, $_1010011);
-        $recip = self::sc25519_sqmul($recip, 9, $_10);
-        $recip = self::sc25519_mul($recip, $_11110101);
-        $recip = self::sc25519_sqmul($recip, 7, $_1100111);
-        $recip = self::sc25519_sqmul($recip, 9, $_11110101);
-        $recip = self::sc25519_sqmul($recip, 11, $_10111101);
-        $recip = self::sc25519_sqmul($recip, 8, $_11100111);
-        $recip = self::sc25519_sqmul($recip, 9, $_1101011);
-        $recip = self::sc25519_sqmul($recip, 6, $_1011);
-        $recip = self::sc25519_sqmul($recip, 14, $_10010011);
-        $recip = self::sc25519_sqmul($recip, 10, $_1100011);
-        $recip = self::sc25519_sqmul($recip, 9, $_10010111);
-        $recip = self::sc25519_sqmul($recip, 10, $_11110101);
-        $recip = self::sc25519_sqmul($recip, 8, $_11010011);
-        return self::sc25519_sqmul($recip, 8, $_11101011);
+        $_10 = self::sc25519_sq( $s );
+        $_11 = self::sc25519_mul( $s, $_10 );
+        $_100 = self::sc25519_mul( $s, $_11 );
+        $_1000 = self::sc25519_sq( $_100 );
+        $_1010 = self::sc25519_mul( $_10, $_1000 );
+        $_1011 = self::sc25519_mul( $s, $_1010 );
+        $_10000 = self::sc25519_sq( $_1000 );
+        $_10110 = self::sc25519_sq( $_1011 );
+        $_100000 = self::sc25519_mul( $_1010, $_10110 );
+        $_100110 = self::sc25519_mul( $_10000, $_10110 );
+        $_1000000 = self::sc25519_sq( $_100000 );
+        $_1010000 = self::sc25519_mul( $_10000, $_1000000 );
+        $_1010011 = self::sc25519_mul( $_11, $_1010000 );
+        $_1100011 = self::sc25519_mul( $_10000, $_1010011 );
+        $_1100111 = self::sc25519_mul( $_100, $_1100011 );
+        $_1101011 = self::sc25519_mul( $_100, $_1100111 );
+        $_10010011 = self::sc25519_mul( $_1000000, $_1010011 );
+        $_10010111 = self::sc25519_mul( $_100, $_10010011 );
+        $_10111101 = self::sc25519_mul( $_100110, $_10010111 );
+        $_11010011 = self::sc25519_mul( $_10110, $_10111101 );
+        $_11100111 = self::sc25519_mul( $_1010000, $_10010111 );
+        $_11101011 = self::sc25519_mul( $_100, $_11100111 );
+        $_11110101 = self::sc25519_mul( $_1010, $_11101011 );
+
+        $recip = self::sc25519_mul( $_1011, $_11110101 );
+        $recip = self::sc25519_sqmul( $recip, 126, $_1010011 );
+        $recip = self::sc25519_sqmul( $recip, 9, $_10 );
+        $recip = self::sc25519_mul( $recip, $_11110101 );
+        $recip = self::sc25519_sqmul( $recip, 7, $_1100111 );
+        $recip = self::sc25519_sqmul( $recip, 9, $_11110101 );
+        $recip = self::sc25519_sqmul( $recip, 11, $_10111101 );
+        $recip = self::sc25519_sqmul( $recip, 8, $_11100111 );
+        $recip = self::sc25519_sqmul( $recip, 9, $_1101011 );
+        $recip = self::sc25519_sqmul( $recip, 6, $_1011 );
+        $recip = self::sc25519_sqmul( $recip, 14, $_10010011 );
+        $recip = self::sc25519_sqmul( $recip, 10, $_1100011 );
+        $recip = self::sc25519_sqmul( $recip, 9, $_10010111 );
+        $recip = self::sc25519_sqmul( $recip, 10, $_11110101 );
+        $recip = self::sc25519_sqmul( $recip, 8, $_11010011 );
+        return self::sc25519_sqmul( $recip, 8, $_11101011 );
     }
 
     /**
      * @param string $s
      * @return string
      */
-    public static function clamp($s)
+    public static function clamp( $s )
     {
-        $s_ = self::stringToIntArray($s);
-        $s_[0] &= 248;
-        $s_[31] |= 64;
-        $s_[31] &= 128;
-        return self::intArrayToString($s_);
+        $s_ = self::stringToIntArray( $s );
+        $s_[ 0 ] &= 248;
+        $s_[ 31 ] |= 64;
+        $s_[ 31 ] &= 128;
+        return self::intArrayToString( $s_ );
     }
 }

vendor/paragonie/sodium_compat/src/Core/Ristretto255.php

Indentation +699 added lines, -699 removed lines

@@ -5,703 +5,703 @@
  */
 class ParagonIE_Sodium_Core_Ristretto255 extends ParagonIE_Sodium_Core_Ed25519
 {
-    const crypto_core_ristretto255_HASHBYTES = 64;
-    const HASH_SC_L = 48;
-    const CORE_H2C_SHA256 = 1;
-    const CORE_H2C_SHA512 = 2;
-
-    /**
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
-     * @param int $b
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     */
-    public static function fe_cneg(ParagonIE_Sodium_Core_Curve25519_Fe $f, $b)
-    {
-        $negf = self::fe_neg($f);
-        return self::fe_cmov($f, $negf, $b);
-    }
-
-    /**
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
-     * @return ParagonIE_Sodium_Core_Curve25519_Fe
-     * @throws SodiumException
-     */
-    public static function fe_abs(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
-        return self::fe_cneg($f, self::fe_isnegative($f));
-    }
-
-    /**
-     * Returns 0 if this field element results in all NUL bytes.
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
-     * @return int
-     * @throws SodiumException
-     */
-    public static function fe_iszero(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
-        static $zero;
-        if ($zero === null) {
-            $zero = str_repeat("\x00", 32);
-        }
-        /** @var string $zero */
-        $str = self::fe_tobytes($f);
-
-        $d = 0;
-        for ($i = 0; $i < 32; ++$i) {
-            $d |= self::chrToInt($str[$i]);
-        }
-        return (($d - 1) >> 31) & 1;
-    }
-
-
-    /**
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $u
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $v
-     * @return array{x: ParagonIE_Sodium_Core_Curve25519_Fe, nonsquare: int}
-     *
-     * @throws SodiumException
-     */
-    public static function ristretto255_sqrt_ratio_m1(
-        ParagonIE_Sodium_Core_Curve25519_Fe $u,
-        ParagonIE_Sodium_Core_Curve25519_Fe $v
-    ) {
-        $sqrtm1 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1);
-
-        $v3 = self::fe_mul(
-            self::fe_sq($v),
-            $v
-        ); /* v3 = v^3 */
-        $x = self::fe_mul(
-            self::fe_mul(
-                self::fe_sq($v3),
-                $u
-            ),
-            $v
-        ); /* x = uv^7 */
-
-        $x = self::fe_mul(
-            self::fe_mul(
-                self::fe_pow22523($x), /* x = (uv^7)^((q-5)/8) */
-                $v3
-            ),
-            $u
-        ); /* x = uv^3(uv^7)^((q-5)/8) */
-
-        $vxx = self::fe_mul(
-            self::fe_sq($x),
-            $v
-        ); /* vx^2 */
-
-        $m_root_check = self::fe_sub($vxx, $u); /* vx^2-u */
-        $p_root_check = self::fe_add($vxx, $u); /* vx^2+u */
-        $f_root_check = self::fe_mul($u, $sqrtm1); /* u*sqrt(-1) */
-        $f_root_check = self::fe_add($vxx, $f_root_check); /* vx^2+u*sqrt(-1) */
-
-        $has_m_root = self::fe_iszero($m_root_check);
-        $has_p_root = self::fe_iszero($p_root_check);
-        $has_f_root = self::fe_iszero($f_root_check);
-
-        $x_sqrtm1 = self::fe_mul($x, $sqrtm1); /* x*sqrt(-1) */
-
-        $x = self::fe_abs(
-            self::fe_cmov($x, $x_sqrtm1, $has_p_root | $has_f_root)
-        );
-        return array(
-            'x' => $x,
-            'nonsquare' => $has_m_root | $has_p_root
-        );
-    }
-
-    /**
-     * @param string $s
-     * @return int
-     * @throws SodiumException
-     */
-    public static function ristretto255_point_is_canonical($s)
-    {
-        $c = (self::chrToInt($s[31]) & 0x7f) ^ 0x7f;
-        for ($i = 30; $i > 0; --$i) {
-            $c |= self::chrToInt($s[$i]) ^ 0xff;
-        }
-        $c = ($c - 1) >> 8;
-        $d = (0xed - 1 - self::chrToInt($s[0])) >> 8;
-        $e = self::chrToInt($s[31]) >> 7;
-
-        return 1 - ((($c & $d) | $e | self::chrToInt($s[0])) & 1);
-    }
-
-    /**
-     * @param string $s
-     * @param bool $skipCanonicalCheck
-     * @return array{h: ParagonIE_Sodium_Core_Curve25519_Ge_P3, res: int}
-     * @throws SodiumException
-     */
-    public static function ristretto255_frombytes($s, $skipCanonicalCheck = false)
-    {
-        if (!$skipCanonicalCheck) {
-            if (!self::ristretto255_point_is_canonical($s)) {
-                throw new SodiumException('S is not canonical');
-            }
-        }
-
-        $s_ = self::fe_frombytes($s);
-        $ss = self::fe_sq($s_); /* ss = s^2 */
-
-        $u1 = self::fe_sub(self::fe_1(), $ss); /* u1 = 1-ss */
-        $u1u1 = self::fe_sq($u1); /* u1u1 = u1^2 */
-
-        $u2 = self::fe_add(self::fe_1(), $ss); /* u2 = 1+ss */
-        $u2u2 = self::fe_sq($u2); /* u2u2 = u2^2 */
-
-        $v = self::fe_mul(
-            ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d),
-            $u1u1
-        ); /* v = d*u1^2 */
-        $v = self::fe_neg($v); /* v = -d*u1^2 */
-        $v = self::fe_sub($v, $u2u2); /* v = -(d*u1^2)-u2^2 */
-        $v_u2u2 = self::fe_mul($v, $u2u2); /* v_u2u2 = v*u2^2 */
-
-        // fe25519_1(one);
-        // notsquare = ristretto255_sqrt_ratio_m1(inv_sqrt, one, v_u2u2);
-        $one = self::fe_1();
-        $result = self::ristretto255_sqrt_ratio_m1($one, $v_u2u2);
-        $inv_sqrt = $result['x'];
-        $notsquare = $result['nonsquare'];
-
-        $h = new ParagonIE_Sodium_Core_Curve25519_Ge_P3();
-
-        $h->X = self::fe_mul($inv_sqrt, $u2);
-        $h->Y = self::fe_mul(self::fe_mul($inv_sqrt, $h->X), $v);
-
-        $h->X = self::fe_mul($h->X, $s_);
-        $h->X = self::fe_abs(
-            self::fe_add($h->X, $h->X)
-        );
-        $h->Y = self::fe_mul($u1, $h->Y);
-        $h->Z = self::fe_1();
-        $h->T = self::fe_mul($h->X, $h->Y);
-
-        $res = - ((1 - $notsquare) | self::fe_isnegative($h->T) | self::fe_iszero($h->Y));
-        return array('h' => $h, 'res' => $res);
-    }
-
-    /**
-     * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h
-     * @return string
-     * @throws SodiumException
-     */
-    public static function ristretto255_p3_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h)
-    {
-        $sqrtm1 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1);
-        $invsqrtamd = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$invsqrtamd);
-
-        $u1 = self::fe_add($h->Z, $h->Y); /* u1 = Z+Y */
-        $zmy = self::fe_sub($h->Z, $h->Y); /* zmy = Z-Y */
-        $u1 = self::fe_mul($u1, $zmy); /* u1 = (Z+Y)*(Z-Y) */
-        $u2 = self::fe_mul($h->X, $h->Y); /* u2 = X*Y */
-
-        $u1_u2u2 = self::fe_mul(self::fe_sq($u2), $u1); /* u1_u2u2 = u1*u2^2 */
-        $one = self::fe_1();
-
-        // fe25519_1(one);
-        // (void) ristretto255_sqrt_ratio_m1(inv_sqrt, one, u1_u2u2);
-        $result = self::ristretto255_sqrt_ratio_m1($one, $u1_u2u2);
-        $inv_sqrt = $result['x'];
-
-        $den1 = self::fe_mul($inv_sqrt, $u1); /* den1 = inv_sqrt*u1 */
-        $den2 = self::fe_mul($inv_sqrt, $u2); /* den2 = inv_sqrt*u2 */
-        $z_inv = self::fe_mul($h->T, self::fe_mul($den1, $den2)); /* z_inv = den1*den2*T */
-
-        $ix = self::fe_mul($h->X, $sqrtm1); /* ix = X*sqrt(-1) */
-        $iy = self::fe_mul($h->Y, $sqrtm1); /* iy = Y*sqrt(-1) */
-        $eden = self::fe_mul($den1, $invsqrtamd);
-
-        $t_z_inv =  self::fe_mul($h->T, $z_inv); /* t_z_inv = T*z_inv */
-        $rotate = self::fe_isnegative($t_z_inv);
-
-        $x_ = self::fe_copy($h->X);
-        $y_ = self::fe_copy($h->Y);
-        $den_inv = self::fe_copy($den2);
-
-        $x_ = self::fe_cmov($x_, $iy, $rotate);
-        $y_ = self::fe_cmov($y_, $ix, $rotate);
-        $den_inv = self::fe_cmov($den_inv, $eden, $rotate);
-
-        $x_z_inv = self::fe_mul($x_, $z_inv);
-        $y_ = self::fe_cneg($y_, self::fe_isnegative($x_z_inv));
-
-
-        // fe25519_sub(s_, h->Z, y_);
-        // fe25519_mul(s_, den_inv, s_);
-        // fe25519_abs(s_, s_);
-        // fe25519_tobytes(s, s_);
-        return self::fe_tobytes(
-            self::fe_abs(
-                self::fe_mul(
-                    $den_inv,
-                    self::fe_sub($h->Z, $y_)
-                )
-            )
-        );
-    }
-
-    /**
-     * @param ParagonIE_Sodium_Core_Curve25519_Fe $t
-     * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
-     *
-     * @throws SodiumException
-     */
-    public static function ristretto255_elligator(ParagonIE_Sodium_Core_Curve25519_Fe $t)
-    {
-        $sqrtm1   = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1);
-        $onemsqd  = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$onemsqd);
-        $d        = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d);
-        $sqdmone  = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqdmone);
-        $sqrtadm1 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtadm1);
-
-        $one = self::fe_1();
-        $r   = self::fe_mul($sqrtm1, self::fe_sq($t));         /* r = sqrt(-1)*t^2 */
-        $u   = self::fe_mul(self::fe_add($r, $one), $onemsqd); /* u = (r+1)*(1-d^2) */
-        $c   = self::fe_neg(self::fe_1());                     /* c = -1 */
-        $rpd = self::fe_add($r, $d);                           /* rpd = r+d */
-
-        $v = self::fe_mul(
-            self::fe_sub(
-                $c,
-                self::fe_mul($r, $d)
-            ),
-            $rpd
-        ); /* v = (c-r*d)*(r+d) */
-
-        $result = self::ristretto255_sqrt_ratio_m1($u, $v);
-        $s = $result['x'];
-        $wasnt_square = 1 - $result['nonsquare'];
-
-        $s_prime = self::fe_neg(
-            self::fe_abs(
-                self::fe_mul($s, $t)
-            )
-        ); /* s_prime = -|s*t| */
-        $s = self::fe_cmov($s, $s_prime, $wasnt_square);
-        $c = self::fe_cmov($c, $r, $wasnt_square);
-
-        // fe25519_sub(n, r, one);            /* n = r-1 */
-        // fe25519_mul(n, n, c);              /* n = c*(r-1) */
-        // fe25519_mul(n, n, ed25519_sqdmone); /* n = c*(r-1)*(d-1)^2 */
-        // fe25519_sub(n, n, v);              /* n =  c*(r-1)*(d-1)^2-v */
-        $n = self::fe_sub(
-            self::fe_mul(
-                self::fe_mul(
-                    self::fe_sub($r, $one),
-                    $c
-                ),
-                $sqdmone
-            ),
-            $v
-        ); /* n =  c*(r-1)*(d-1)^2-v */
-
-        $w0 = self::fe_mul(
-            self::fe_add($s, $s),
-            $v
-        ); /* w0 = 2s*v */
-
-        $w1 = self::fe_mul($n, $sqrtadm1); /* w1 = n*sqrt(ad-1) */
-        $ss = self::fe_sq($s); /* ss = s^2 */
-        $w2 = self::fe_sub($one, $ss); /* w2 = 1-s^2 */
-        $w3 = self::fe_add($one, $ss); /* w3 = 1+s^2 */
-
-        return new ParagonIE_Sodium_Core_Curve25519_Ge_P3(
-            self::fe_mul($w0, $w3),
-            self::fe_mul($w2, $w1),
-            self::fe_mul($w1, $w3),
-            self::fe_mul($w0, $w2)
-        );
-    }
-
-    /**
-     * @param string $h
-     * @return string
-     * @throws SodiumException
-     */
-    public static function ristretto255_from_hash($h)
-    {
-        if (self::strlen($h) !== 64) {
-            throw new SodiumException('Hash must be 64 bytes');
-        }
-        //fe25519_frombytes(r0, h);
-        //fe25519_frombytes(r1, h + 32);
-        $r0 = self::fe_frombytes(self::substr($h, 0, 32));
-        $r1 = self::fe_frombytes(self::substr($h, 32, 32));
-
-        //ristretto255_elligator(&p0, r0);
-        //ristretto255_elligator(&p1, r1);
-        $p0 = self::ristretto255_elligator($r0);
-        $p1 = self::ristretto255_elligator($r1);
-
-        //ge25519_p3_to_cached(&p1_cached, &p1);
-        //ge25519_add_cached(&p_p1p1, &p0, &p1_cached);
-        $p_p1p1 = self::ge_add(
-            $p0,
-            self::ge_p3_to_cached($p1)
-        );
-
-        //ge25519_p1p1_to_p3(&p, &p_p1p1);
-        //ristretto255_p3_tobytes(s, &p);
-        return self::ristretto255_p3_tobytes(
-            self::ge_p1p1_to_p3($p_p1p1)
-        );
-    }
-
-    /**
-     * @param string $p
-     * @return int
-     * @throws SodiumException
-     */
-    public static function is_valid_point($p)
-    {
-        $result = self::ristretto255_frombytes($p);
-        if ($result['res'] !== 0) {
-            return 0;
-        }
-        return 1;
-    }
-
-    /**
-     * @param string $p
-     * @param string $q
-     * @return string
-     * @throws SodiumException
-     */
-    public static function ristretto255_add($p, $q)
-    {
-        $p_res = self::ristretto255_frombytes($p);
-        $q_res = self::ristretto255_frombytes($q);
-        if ($p_res['res'] !== 0 || $q_res['res'] !== 0) {
-            throw new SodiumException('Could not add points');
-        }
-        $p_p3 = $p_res['h'];
-        $q_p3 = $q_res['h'];
-        $q_cached = self::ge_p3_to_cached($q_p3);
-        $r_p1p1 = self::ge_add($p_p3, $q_cached);
-        $r_p3 = self::ge_p1p1_to_p3($r_p1p1);
-        return self::ristretto255_p3_tobytes($r_p3);
-    }
-
-    /**
-     * @param string $p
-     * @param string $q
-     * @return string
-     * @throws SodiumException
-     */
-    public static function ristretto255_sub($p, $q)
-    {
-        $p_res = self::ristretto255_frombytes($p);
-        $q_res = self::ristretto255_frombytes($q);
-        if ($p_res['res'] !== 0 || $q_res['res'] !== 0) {
-            throw new SodiumException('Could not add points');
-        }
-        $p_p3 = $p_res['h'];
-        $q_p3 = $q_res['h'];
-        $q_cached = self::ge_p3_to_cached($q_p3);
-        $r_p1p1 = self::ge_sub($p_p3, $q_cached);
-        $r_p3 = self::ge_p1p1_to_p3($r_p1p1);
-        return self::ristretto255_p3_tobytes($r_p3);
-    }
-
-
-    /**
-     * @param int $hLen
-     * @param ?string $ctx
-     * @param string $msg
-     * @return string
-     * @throws SodiumException
-     * @psalm-suppress PossiblyInvalidArgument hash API
-     */
-    protected static function h2c_string_to_hash_sha256($hLen, $ctx, $msg)
-    {
-        $h = array_fill(0, $hLen, 0);
-        $ctx_len = !is_null($ctx) ? self::strlen($ctx) : 0;
-        if ($hLen > 0xff) {
-            throw new SodiumException('Hash must be less than 256 bytes');
-        }
-
-        if ($ctx_len > 0xff) {
-            $st = hash_init('sha256');
-            self::hash_update($st, "H2C-OVERSIZE-DST-");
-            self::hash_update($st, $ctx);
-            $ctx = hash_final($st, true);
-            $ctx_len = 32;
-        }
-        $t = array(0, $hLen, 0);
-        $ux = str_repeat("\0", 64);
-        $st = hash_init('sha256');
-        self::hash_update($st, $ux);
-        self::hash_update($st, $msg);
-        self::hash_update($st, self::intArrayToString($t));
-        self::hash_update($st, $ctx);
-        self::hash_update($st, self::intToChr($ctx_len));
-        $u0 = hash_final($st, true);
-
-        for ($i = 0; $i < $hLen; $i += 64) {
-            $ux = self::xorStrings($ux, $u0);
-            ++$t[2];
-            $st = hash_init('sha256');
-            self::hash_update($st, $ux);
-            self::hash_update($st, self::intToChr($t[2]));
-            self::hash_update($st, $ctx);
-            self::hash_update($st, self::intToChr($ctx_len));
-            $ux = hash_final($st, true);
-            $amount = min($hLen - $i, 64);
-            for ($j = 0; $j < $amount; ++$j) {
-                $h[$i + $j] = self::chrToInt($ux[$i]);
-            }
-        }
-        return self::intArrayToString(array_slice($h, 0, $hLen));
-    }
-
-    /**
-     * @param int $hLen
-     * @param ?string $ctx
-     * @param string $msg
-     * @return string
-     * @throws SodiumException
-     * @psalm-suppress PossiblyInvalidArgument hash API
-     */
-    protected static function h2c_string_to_hash_sha512($hLen, $ctx, $msg)
-    {
-        $h = array_fill(0, $hLen, 0);
-        $ctx_len = !is_null($ctx) ? self::strlen($ctx) : 0;
-        if ($hLen > 0xff) {
-            throw new SodiumException('Hash must be less than 256 bytes');
-        }
-
-        if ($ctx_len > 0xff) {
-            $st = hash_init('sha256');
-            self::hash_update($st, "H2C-OVERSIZE-DST-");
-            self::hash_update($st, $ctx);
-            $ctx = hash_final($st, true);
-            $ctx_len = 32;
-        }
-        $t = array(0, $hLen, 0);
-        $ux = str_repeat("\0", 128);
-        $st = hash_init('sha512');
-        self::hash_update($st, $ux);
-        self::hash_update($st, $msg);
-        self::hash_update($st, self::intArrayToString($t));
-        self::hash_update($st, $ctx);
-        self::hash_update($st, self::intToChr($ctx_len));
-        $u0 = hash_final($st, true);
-
-        for ($i = 0; $i < $hLen; $i += 128) {
-            $ux = self::xorStrings($ux, $u0);
-            ++$t[2];
-            $st = hash_init('sha512');
-            self::hash_update($st, $ux);
-            self::hash_update($st, self::intToChr($t[2]));
-            self::hash_update($st, $ctx);
-            self::hash_update($st, self::intToChr($ctx_len));
-            $ux = hash_final($st, true);
-            $amount = min($hLen - $i, 128);
-            for ($j = 0; $j < $amount; ++$j) {
-                $h[$i + $j] = self::chrToInt($ux[$i]);
-            }
-        }
-        return self::intArrayToString(array_slice($h, 0, $hLen));
-    }
-
-    /**
-     * @param int $hLen
-     * @param ?string $ctx
-     * @param string $msg
-     * @param int $hash_alg
-     * @return string
-     * @throws SodiumException
-     */
-    public static function h2c_string_to_hash($hLen, $ctx, $msg, $hash_alg)
-    {
-        switch ($hash_alg) {
-            case self::CORE_H2C_SHA256:
-                return self::h2c_string_to_hash_sha256($hLen, $ctx, $msg);
-            case self::CORE_H2C_SHA512:
-                return self::h2c_string_to_hash_sha512($hLen, $ctx, $msg);
-            default:
-                throw new SodiumException('Invalid H2C hash algorithm');
-        }
-    }
-
-    /**
-     * @param ?string $ctx
-     * @param string $msg
-     * @param int $hash_alg
-     * @return string
-     * @throws SodiumException
-     */
-    protected static function _string_to_element($ctx, $msg, $hash_alg)
-    {
-        return self::ristretto255_from_hash(
-            self::h2c_string_to_hash(self::crypto_core_ristretto255_HASHBYTES, $ctx, $msg, $hash_alg)
-        );
-    }
-
-    /**
-     * @return string
-     * @throws SodiumException
-     * @throws Exception
-     */
-    public static function ristretto255_random()
-    {
-        return self::ristretto255_from_hash(
-            ParagonIE_Sodium_Compat::randombytes_buf(self::crypto_core_ristretto255_HASHBYTES)
-        );
-    }
-
-    /**
-     * @return string
-     * @throws SodiumException
-     */
-    public static function ristretto255_scalar_random()
-    {
-        return self::scalar_random();
-    }
-
-    /**
-     * @param string $s
-     * @return string
-     * @throws SodiumException
-     */
-    public static function ristretto255_scalar_complement($s)
-    {
-        return self::scalar_complement($s);
-    }
-
-
-    /**
-     * @param string $s
-     * @return string
-     */
-    public static function ristretto255_scalar_invert($s)
-    {
-        return self::sc25519_invert($s);
-    }
-
-    /**
-     * @param string $s
-     * @return string
-     * @throws SodiumException
-     */
-    public static function ristretto255_scalar_negate($s)
-    {
-        return self::scalar_negate($s);
-    }
-
-    /**
-     * @param string $x
-     * @param string $y
-     * @return string
-     */
-    public static function ristretto255_scalar_add($x, $y)
-    {
-        return self::scalar_add($x, $y);
-    }
-
-    /**
-     * @param string $x
-     * @param string $y
-     * @return string
-     */
-    public static function ristretto255_scalar_sub($x, $y)
-    {
-        return self::scalar_sub($x, $y);
-    }
-
-    /**
-     * @param string $x
-     * @param string $y
-     * @return string
-     */
-    public static function ristretto255_scalar_mul($x, $y)
-    {
-        return self::sc25519_mul($x, $y);
-    }
-
-    /**
-     * @param string $ctx
-     * @param string $msg
-     * @param int $hash_alg
-     * @return string
-     * @throws SodiumException
-     */
-    public static function ristretto255_scalar_from_string($ctx, $msg, $hash_alg)
-    {
-        $h = array_fill(0, 64, 0);
-        $h_be = self::stringToIntArray(
-            self::h2c_string_to_hash(
-                self::HASH_SC_L, $ctx, $msg, $hash_alg
-            )
-        );
-
-        for ($i = 0; $i < self::HASH_SC_L; ++$i) {
-            $h[$i] = $h_be[self::HASH_SC_L - 1 - $i];
-        }
-        return self::ristretto255_scalar_reduce(self::intArrayToString($h));
-    }
-
-    /**
-     * @param string $s
-     * @return string
-     */
-    public static function ristretto255_scalar_reduce($s)
-    {
-        return self::sc_reduce($s);
-    }
-
-    /**
-     * @param string $n
-     * @param string $p
-     * @return string
-     * @throws SodiumException
-     */
-    public static function scalarmult_ristretto255($n, $p)
-    {
-        if (self::strlen($n) !== 32) {
-            throw new SodiumException('Scalar must be 32 bytes, ' . self::strlen($p) . ' given.');
-        }
-        if (self::strlen($p) !== 32) {
-            throw new SodiumException('Point must be 32 bytes, ' . self::strlen($p) . ' given.');
-        }
-        $result = self::ristretto255_frombytes($p);
-        if ($result['res'] !== 0) {
-            throw new SodiumException('Could not multiply points');
-        }
-        $P = $result['h'];
-
-        $t = self::stringToIntArray($n);
-        $t[31] &= 0x7f;
-        $Q = self::ge_scalarmult(self::intArrayToString($t), $P);
-        $q = self::ristretto255_p3_tobytes($Q);
-        if (ParagonIE_Sodium_Compat::is_zero($q)) {
-            throw new SodiumException('An unknown error has occurred');
-        }
-        return $q;
-    }
-
-    /**
-     * @param string $n
-     * @return string
-     * @throws SodiumException
-     */
-    public static function scalarmult_ristretto255_base($n)
-    {
-        $t = self::stringToIntArray($n);
-        $t[31] &= 0x7f;
-        $Q = self::ge_scalarmult_base(self::intArrayToString($t));
-        $q = self::ristretto255_p3_tobytes($Q);
-        if (ParagonIE_Sodium_Compat::is_zero($q)) {
-            throw new SodiumException('An unknown error has occurred');
-        }
-        return $q;
-    }
+	const crypto_core_ristretto255_HASHBYTES = 64;
+	const HASH_SC_L = 48;
+	const CORE_H2C_SHA256 = 1;
+	const CORE_H2C_SHA512 = 2;
+
+	/**
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
+	 * @param int $b
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 */
+	public static function fe_cneg(ParagonIE_Sodium_Core_Curve25519_Fe $f, $b)
+	{
+		$negf = self::fe_neg($f);
+		return self::fe_cmov($f, $negf, $b);
+	}
+
+	/**
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
+	 * @return ParagonIE_Sodium_Core_Curve25519_Fe
+	 * @throws SodiumException
+	 */
+	public static function fe_abs(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+	{
+		return self::fe_cneg($f, self::fe_isnegative($f));
+	}
+
+	/**
+	 * Returns 0 if this field element results in all NUL bytes.
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
+	 * @return int
+	 * @throws SodiumException
+	 */
+	public static function fe_iszero(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+	{
+		static $zero;
+		if ($zero === null) {
+			$zero = str_repeat("\x00", 32);
+		}
+		/** @var string $zero */
+		$str = self::fe_tobytes($f);
+
+		$d = 0;
+		for ($i = 0; $i < 32; ++$i) {
+			$d |= self::chrToInt($str[$i]);
+		}
+		return (($d - 1) >> 31) & 1;
+	}
+
+
+	/**
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $u
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $v
+	 * @return array{x: ParagonIE_Sodium_Core_Curve25519_Fe, nonsquare: int}
+	 *
+	 * @throws SodiumException
+	 */
+	public static function ristretto255_sqrt_ratio_m1(
+		ParagonIE_Sodium_Core_Curve25519_Fe $u,
+		ParagonIE_Sodium_Core_Curve25519_Fe $v
+	) {
+		$sqrtm1 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1);
+
+		$v3 = self::fe_mul(
+			self::fe_sq($v),
+			$v
+		); /* v3 = v^3 */
+		$x = self::fe_mul(
+			self::fe_mul(
+				self::fe_sq($v3),
+				$u
+			),
+			$v
+		); /* x = uv^7 */
+
+		$x = self::fe_mul(
+			self::fe_mul(
+				self::fe_pow22523($x), /* x = (uv^7)^((q-5)/8) */
+				$v3
+			),
+			$u
+		); /* x = uv^3(uv^7)^((q-5)/8) */
+
+		$vxx = self::fe_mul(
+			self::fe_sq($x),
+			$v
+		); /* vx^2 */
+
+		$m_root_check = self::fe_sub($vxx, $u); /* vx^2-u */
+		$p_root_check = self::fe_add($vxx, $u); /* vx^2+u */
+		$f_root_check = self::fe_mul($u, $sqrtm1); /* u*sqrt(-1) */
+		$f_root_check = self::fe_add($vxx, $f_root_check); /* vx^2+u*sqrt(-1) */
+
+		$has_m_root = self::fe_iszero($m_root_check);
+		$has_p_root = self::fe_iszero($p_root_check);
+		$has_f_root = self::fe_iszero($f_root_check);
+
+		$x_sqrtm1 = self::fe_mul($x, $sqrtm1); /* x*sqrt(-1) */
+
+		$x = self::fe_abs(
+			self::fe_cmov($x, $x_sqrtm1, $has_p_root | $has_f_root)
+		);
+		return array(
+			'x' => $x,
+			'nonsquare' => $has_m_root | $has_p_root
+		);
+	}
+
+	/**
+	 * @param string $s
+	 * @return int
+	 * @throws SodiumException
+	 */
+	public static function ristretto255_point_is_canonical($s)
+	{
+		$c = (self::chrToInt($s[31]) & 0x7f) ^ 0x7f;
+		for ($i = 30; $i > 0; --$i) {
+			$c |= self::chrToInt($s[$i]) ^ 0xff;
+		}
+		$c = ($c - 1) >> 8;
+		$d = (0xed - 1 - self::chrToInt($s[0])) >> 8;
+		$e = self::chrToInt($s[31]) >> 7;
+
+		return 1 - ((($c & $d) | $e | self::chrToInt($s[0])) & 1);
+	}
+
+	/**
+	 * @param string $s
+	 * @param bool $skipCanonicalCheck
+	 * @return array{h: ParagonIE_Sodium_Core_Curve25519_Ge_P3, res: int}
+	 * @throws SodiumException
+	 */
+	public static function ristretto255_frombytes($s, $skipCanonicalCheck = false)
+	{
+		if (!$skipCanonicalCheck) {
+			if (!self::ristretto255_point_is_canonical($s)) {
+				throw new SodiumException('S is not canonical');
+			}
+		}
+
+		$s_ = self::fe_frombytes($s);
+		$ss = self::fe_sq($s_); /* ss = s^2 */
+
+		$u1 = self::fe_sub(self::fe_1(), $ss); /* u1 = 1-ss */
+		$u1u1 = self::fe_sq($u1); /* u1u1 = u1^2 */
+
+		$u2 = self::fe_add(self::fe_1(), $ss); /* u2 = 1+ss */
+		$u2u2 = self::fe_sq($u2); /* u2u2 = u2^2 */
+
+		$v = self::fe_mul(
+			ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d),
+			$u1u1
+		); /* v = d*u1^2 */
+		$v = self::fe_neg($v); /* v = -d*u1^2 */
+		$v = self::fe_sub($v, $u2u2); /* v = -(d*u1^2)-u2^2 */
+		$v_u2u2 = self::fe_mul($v, $u2u2); /* v_u2u2 = v*u2^2 */
+
+		// fe25519_1(one);
+		// notsquare = ristretto255_sqrt_ratio_m1(inv_sqrt, one, v_u2u2);
+		$one = self::fe_1();
+		$result = self::ristretto255_sqrt_ratio_m1($one, $v_u2u2);
+		$inv_sqrt = $result['x'];
+		$notsquare = $result['nonsquare'];
+
+		$h = new ParagonIE_Sodium_Core_Curve25519_Ge_P3();
+
+		$h->X = self::fe_mul($inv_sqrt, $u2);
+		$h->Y = self::fe_mul(self::fe_mul($inv_sqrt, $h->X), $v);
+
+		$h->X = self::fe_mul($h->X, $s_);
+		$h->X = self::fe_abs(
+			self::fe_add($h->X, $h->X)
+		);
+		$h->Y = self::fe_mul($u1, $h->Y);
+		$h->Z = self::fe_1();
+		$h->T = self::fe_mul($h->X, $h->Y);
+
+		$res = - ((1 - $notsquare) | self::fe_isnegative($h->T) | self::fe_iszero($h->Y));
+		return array('h' => $h, 'res' => $res);
+	}
+
+	/**
+	 * @param ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h
+	 * @return string
+	 * @throws SodiumException
+	 */
+	public static function ristretto255_p3_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h)
+	{
+		$sqrtm1 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1);
+		$invsqrtamd = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$invsqrtamd);
+
+		$u1 = self::fe_add($h->Z, $h->Y); /* u1 = Z+Y */
+		$zmy = self::fe_sub($h->Z, $h->Y); /* zmy = Z-Y */
+		$u1 = self::fe_mul($u1, $zmy); /* u1 = (Z+Y)*(Z-Y) */
+		$u2 = self::fe_mul($h->X, $h->Y); /* u2 = X*Y */
+
+		$u1_u2u2 = self::fe_mul(self::fe_sq($u2), $u1); /* u1_u2u2 = u1*u2^2 */
+		$one = self::fe_1();
+
+		// fe25519_1(one);
+		// (void) ristretto255_sqrt_ratio_m1(inv_sqrt, one, u1_u2u2);
+		$result = self::ristretto255_sqrt_ratio_m1($one, $u1_u2u2);
+		$inv_sqrt = $result['x'];
+
+		$den1 = self::fe_mul($inv_sqrt, $u1); /* den1 = inv_sqrt*u1 */
+		$den2 = self::fe_mul($inv_sqrt, $u2); /* den2 = inv_sqrt*u2 */
+		$z_inv = self::fe_mul($h->T, self::fe_mul($den1, $den2)); /* z_inv = den1*den2*T */
+
+		$ix = self::fe_mul($h->X, $sqrtm1); /* ix = X*sqrt(-1) */
+		$iy = self::fe_mul($h->Y, $sqrtm1); /* iy = Y*sqrt(-1) */
+		$eden = self::fe_mul($den1, $invsqrtamd);
+
+		$t_z_inv =  self::fe_mul($h->T, $z_inv); /* t_z_inv = T*z_inv */
+		$rotate = self::fe_isnegative($t_z_inv);
+
+		$x_ = self::fe_copy($h->X);
+		$y_ = self::fe_copy($h->Y);
+		$den_inv = self::fe_copy($den2);
+
+		$x_ = self::fe_cmov($x_, $iy, $rotate);
+		$y_ = self::fe_cmov($y_, $ix, $rotate);
+		$den_inv = self::fe_cmov($den_inv, $eden, $rotate);
+
+		$x_z_inv = self::fe_mul($x_, $z_inv);
+		$y_ = self::fe_cneg($y_, self::fe_isnegative($x_z_inv));
+
+
+		// fe25519_sub(s_, h->Z, y_);
+		// fe25519_mul(s_, den_inv, s_);
+		// fe25519_abs(s_, s_);
+		// fe25519_tobytes(s, s_);
+		return self::fe_tobytes(
+			self::fe_abs(
+				self::fe_mul(
+					$den_inv,
+					self::fe_sub($h->Z, $y_)
+				)
+			)
+		);
+	}
+
+	/**
+	 * @param ParagonIE_Sodium_Core_Curve25519_Fe $t
+	 * @return ParagonIE_Sodium_Core_Curve25519_Ge_P3
+	 *
+	 * @throws SodiumException
+	 */
+	public static function ristretto255_elligator(ParagonIE_Sodium_Core_Curve25519_Fe $t)
+	{
+		$sqrtm1   = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1);
+		$onemsqd  = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$onemsqd);
+		$d        = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d);
+		$sqdmone  = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqdmone);
+		$sqrtadm1 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtadm1);
+
+		$one = self::fe_1();
+		$r   = self::fe_mul($sqrtm1, self::fe_sq($t));         /* r = sqrt(-1)*t^2 */
+		$u   = self::fe_mul(self::fe_add($r, $one), $onemsqd); /* u = (r+1)*(1-d^2) */
+		$c   = self::fe_neg(self::fe_1());                     /* c = -1 */
+		$rpd = self::fe_add($r, $d);                           /* rpd = r+d */
+
+		$v = self::fe_mul(
+			self::fe_sub(
+				$c,
+				self::fe_mul($r, $d)
+			),
+			$rpd
+		); /* v = (c-r*d)*(r+d) */
+
+		$result = self::ristretto255_sqrt_ratio_m1($u, $v);
+		$s = $result['x'];
+		$wasnt_square = 1 - $result['nonsquare'];
+
+		$s_prime = self::fe_neg(
+			self::fe_abs(
+				self::fe_mul($s, $t)
+			)
+		); /* s_prime = -|s*t| */
+		$s = self::fe_cmov($s, $s_prime, $wasnt_square);
+		$c = self::fe_cmov($c, $r, $wasnt_square);
+
+		// fe25519_sub(n, r, one);            /* n = r-1 */
+		// fe25519_mul(n, n, c);              /* n = c*(r-1) */
+		// fe25519_mul(n, n, ed25519_sqdmone); /* n = c*(r-1)*(d-1)^2 */
+		// fe25519_sub(n, n, v);              /* n =  c*(r-1)*(d-1)^2-v */
+		$n = self::fe_sub(
+			self::fe_mul(
+				self::fe_mul(
+					self::fe_sub($r, $one),
+					$c
+				),
+				$sqdmone
+			),
+			$v
+		); /* n =  c*(r-1)*(d-1)^2-v */
+
+		$w0 = self::fe_mul(
+			self::fe_add($s, $s),
+			$v
+		); /* w0 = 2s*v */
+
+		$w1 = self::fe_mul($n, $sqrtadm1); /* w1 = n*sqrt(ad-1) */
+		$ss = self::fe_sq($s); /* ss = s^2 */
+		$w2 = self::fe_sub($one, $ss); /* w2 = 1-s^2 */
+		$w3 = self::fe_add($one, $ss); /* w3 = 1+s^2 */
+
+		return new ParagonIE_Sodium_Core_Curve25519_Ge_P3(
+			self::fe_mul($w0, $w3),
+			self::fe_mul($w2, $w1),
+			self::fe_mul($w1, $w3),
+			self::fe_mul($w0, $w2)
+		);
+	}
+
+	/**
+	 * @param string $h
+	 * @return string
+	 * @throws SodiumException
+	 */
+	public static function ristretto255_from_hash($h)
+	{
+		if (self::strlen($h) !== 64) {
+			throw new SodiumException('Hash must be 64 bytes');
+		}
+		//fe25519_frombytes(r0, h);
+		//fe25519_frombytes(r1, h + 32);
+		$r0 = self::fe_frombytes(self::substr($h, 0, 32));
+		$r1 = self::fe_frombytes(self::substr($h, 32, 32));
+
+		//ristretto255_elligator(&p0, r0);
+		//ristretto255_elligator(&p1, r1);
+		$p0 = self::ristretto255_elligator($r0);
+		$p1 = self::ristretto255_elligator($r1);
+
+		//ge25519_p3_to_cached(&p1_cached, &p1);
+		//ge25519_add_cached(&p_p1p1, &p0, &p1_cached);
+		$p_p1p1 = self::ge_add(
+			$p0,
+			self::ge_p3_to_cached($p1)
+		);
+
+		//ge25519_p1p1_to_p3(&p, &p_p1p1);
+		//ristretto255_p3_tobytes(s, &p);
+		return self::ristretto255_p3_tobytes(
+			self::ge_p1p1_to_p3($p_p1p1)
+		);
+	}
+
+	/**
+	 * @param string $p
+	 * @return int
+	 * @throws SodiumException
+	 */
+	public static function is_valid_point($p)
+	{
+		$result = self::ristretto255_frombytes($p);
+		if ($result['res'] !== 0) {
+			return 0;
+		}
+		return 1;
+	}
+
+	/**
+	 * @param string $p
+	 * @param string $q
+	 * @return string
+	 * @throws SodiumException
+	 */
+	public static function ristretto255_add($p, $q)
+	{
+		$p_res = self::ristretto255_frombytes($p);
+		$q_res = self::ristretto255_frombytes($q);
+		if ($p_res['res'] !== 0 || $q_res['res'] !== 0) {
+			throw new SodiumException('Could not add points');
+		}
+		$p_p3 = $p_res['h'];
+		$q_p3 = $q_res['h'];
+		$q_cached = self::ge_p3_to_cached($q_p3);
+		$r_p1p1 = self::ge_add($p_p3, $q_cached);
+		$r_p3 = self::ge_p1p1_to_p3($r_p1p1);
+		return self::ristretto255_p3_tobytes($r_p3);
+	}
+
+	/**
+	 * @param string $p
+	 * @param string $q
+	 * @return string
+	 * @throws SodiumException
+	 */
+	public static function ristretto255_sub($p, $q)
+	{
+		$p_res = self::ristretto255_frombytes($p);
+		$q_res = self::ristretto255_frombytes($q);
+		if ($p_res['res'] !== 0 || $q_res['res'] !== 0) {
+			throw new SodiumException('Could not add points');
+		}
+		$p_p3 = $p_res['h'];
+		$q_p3 = $q_res['h'];
+		$q_cached = self::ge_p3_to_cached($q_p3);
+		$r_p1p1 = self::ge_sub($p_p3, $q_cached);
+		$r_p3 = self::ge_p1p1_to_p3($r_p1p1);
+		return self::ristretto255_p3_tobytes($r_p3);
+	}
+
+
+	/**
+	 * @param int $hLen
+	 * @param ?string $ctx
+	 * @param string $msg
+	 * @return string
+	 * @throws SodiumException
+	 * @psalm-suppress PossiblyInvalidArgument hash API
+	 */
+	protected static function h2c_string_to_hash_sha256($hLen, $ctx, $msg)
+	{
+		$h = array_fill(0, $hLen, 0);
+		$ctx_len = !is_null($ctx) ? self::strlen($ctx) : 0;
+		if ($hLen > 0xff) {
+			throw new SodiumException('Hash must be less than 256 bytes');
+		}
+
+		if ($ctx_len > 0xff) {
+			$st = hash_init('sha256');
+			self::hash_update($st, "H2C-OVERSIZE-DST-");
+			self::hash_update($st, $ctx);
+			$ctx = hash_final($st, true);
+			$ctx_len = 32;
+		}
+		$t = array(0, $hLen, 0);
+		$ux = str_repeat("\0", 64);
+		$st = hash_init('sha256');
+		self::hash_update($st, $ux);
+		self::hash_update($st, $msg);
+		self::hash_update($st, self::intArrayToString($t));
+		self::hash_update($st, $ctx);
+		self::hash_update($st, self::intToChr($ctx_len));
+		$u0 = hash_final($st, true);
+
+		for ($i = 0; $i < $hLen; $i += 64) {
+			$ux = self::xorStrings($ux, $u0);
+			++$t[2];
+			$st = hash_init('sha256');
+			self::hash_update($st, $ux);
+			self::hash_update($st, self::intToChr($t[2]));
+			self::hash_update($st, $ctx);
+			self::hash_update($st, self::intToChr($ctx_len));
+			$ux = hash_final($st, true);
+			$amount = min($hLen - $i, 64);
+			for ($j = 0; $j < $amount; ++$j) {
+				$h[$i + $j] = self::chrToInt($ux[$i]);
+			}
+		}
+		return self::intArrayToString(array_slice($h, 0, $hLen));
+	}
+
+	/**
+	 * @param int $hLen
+	 * @param ?string $ctx
+	 * @param string $msg
+	 * @return string
+	 * @throws SodiumException
+	 * @psalm-suppress PossiblyInvalidArgument hash API
+	 */
+	protected static function h2c_string_to_hash_sha512($hLen, $ctx, $msg)
+	{
+		$h = array_fill(0, $hLen, 0);
+		$ctx_len = !is_null($ctx) ? self::strlen($ctx) : 0;
+		if ($hLen > 0xff) {
+			throw new SodiumException('Hash must be less than 256 bytes');
+		}
+
+		if ($ctx_len > 0xff) {
+			$st = hash_init('sha256');
+			self::hash_update($st, "H2C-OVERSIZE-DST-");
+			self::hash_update($st, $ctx);
+			$ctx = hash_final($st, true);
+			$ctx_len = 32;
+		}
+		$t = array(0, $hLen, 0);
+		$ux = str_repeat("\0", 128);
+		$st = hash_init('sha512');
+		self::hash_update($st, $ux);
+		self::hash_update($st, $msg);
+		self::hash_update($st, self::intArrayToString($t));
+		self::hash_update($st, $ctx);
+		self::hash_update($st, self::intToChr($ctx_len));
+		$u0 = hash_final($st, true);
+
+		for ($i = 0; $i < $hLen; $i += 128) {
+			$ux = self::xorStrings($ux, $u0);
+			++$t[2];
+			$st = hash_init('sha512');
+			self::hash_update($st, $ux);
+			self::hash_update($st, self::intToChr($t[2]));
+			self::hash_update($st, $ctx);
+			self::hash_update($st, self::intToChr($ctx_len));
+			$ux = hash_final($st, true);
+			$amount = min($hLen - $i, 128);
+			for ($j = 0; $j < $amount; ++$j) {
+				$h[$i + $j] = self::chrToInt($ux[$i]);
+			}
+		}
+		return self::intArrayToString(array_slice($h, 0, $hLen));
+	}
+
+	/**
+	 * @param int $hLen
+	 * @param ?string $ctx
+	 * @param string $msg
+	 * @param int $hash_alg
+	 * @return string
+	 * @throws SodiumException
+	 */
+	public static function h2c_string_to_hash($hLen, $ctx, $msg, $hash_alg)
+	{
+		switch ($hash_alg) {
+			case self::CORE_H2C_SHA256:
+				return self::h2c_string_to_hash_sha256($hLen, $ctx, $msg);
+			case self::CORE_H2C_SHA512:
+				return self::h2c_string_to_hash_sha512($hLen, $ctx, $msg);
+			default:
+				throw new SodiumException('Invalid H2C hash algorithm');
+		}
+	}
+
+	/**
+	 * @param ?string $ctx
+	 * @param string $msg
+	 * @param int $hash_alg
+	 * @return string
+	 * @throws SodiumException
+	 */
+	protected static function _string_to_element($ctx, $msg, $hash_alg)
+	{
+		return self::ristretto255_from_hash(
+			self::h2c_string_to_hash(self::crypto_core_ristretto255_HASHBYTES, $ctx, $msg, $hash_alg)
+		);
+	}
+
+	/**
+	 * @return string
+	 * @throws SodiumException
+	 * @throws Exception
+	 */
+	public static function ristretto255_random()
+	{
+		return self::ristretto255_from_hash(
+			ParagonIE_Sodium_Compat::randombytes_buf(self::crypto_core_ristretto255_HASHBYTES)
+		);
+	}
+
+	/**
+	 * @return string
+	 * @throws SodiumException
+	 */
+	public static function ristretto255_scalar_random()
+	{
+		return self::scalar_random();
+	}
+
+	/**
+	 * @param string $s
+	 * @return string
+	 * @throws SodiumException
+	 */
+	public static function ristretto255_scalar_complement($s)
+	{
+		return self::scalar_complement($s);
+	}
+
+
+	/**
+	 * @param string $s
+	 * @return string
+	 */
+	public static function ristretto255_scalar_invert($s)
+	{
+		return self::sc25519_invert($s);
+	}
+
+	/**
+	 * @param string $s
+	 * @return string
+	 * @throws SodiumException
+	 */
+	public static function ristretto255_scalar_negate($s)
+	{
+		return self::scalar_negate($s);
+	}
+
+	/**
+	 * @param string $x
+	 * @param string $y
+	 * @return string
+	 */
+	public static function ristretto255_scalar_add($x, $y)
+	{
+		return self::scalar_add($x, $y);
+	}
+
+	/**
+	 * @param string $x
+	 * @param string $y
+	 * @return string
+	 */
+	public static function ristretto255_scalar_sub($x, $y)
+	{
+		return self::scalar_sub($x, $y);
+	}
+
+	/**
+	 * @param string $x
+	 * @param string $y
+	 * @return string
+	 */
+	public static function ristretto255_scalar_mul($x, $y)
+	{
+		return self::sc25519_mul($x, $y);
+	}
+
+	/**
+	 * @param string $ctx
+	 * @param string $msg
+	 * @param int $hash_alg
+	 * @return string
+	 * @throws SodiumException
+	 */
+	public static function ristretto255_scalar_from_string($ctx, $msg, $hash_alg)
+	{
+		$h = array_fill(0, 64, 0);
+		$h_be = self::stringToIntArray(
+			self::h2c_string_to_hash(
+				self::HASH_SC_L, $ctx, $msg, $hash_alg
+			)
+		);
+
+		for ($i = 0; $i < self::HASH_SC_L; ++$i) {
+			$h[$i] = $h_be[self::HASH_SC_L - 1 - $i];
+		}
+		return self::ristretto255_scalar_reduce(self::intArrayToString($h));
+	}
+
+	/**
+	 * @param string $s
+	 * @return string
+	 */
+	public static function ristretto255_scalar_reduce($s)
+	{
+		return self::sc_reduce($s);
+	}
+
+	/**
+	 * @param string $n
+	 * @param string $p
+	 * @return string
+	 * @throws SodiumException
+	 */
+	public static function scalarmult_ristretto255($n, $p)
+	{
+		if (self::strlen($n) !== 32) {
+			throw new SodiumException('Scalar must be 32 bytes, ' . self::strlen($p) . ' given.');
+		}
+		if (self::strlen($p) !== 32) {
+			throw new SodiumException('Point must be 32 bytes, ' . self::strlen($p) . ' given.');
+		}
+		$result = self::ristretto255_frombytes($p);
+		if ($result['res'] !== 0) {
+			throw new SodiumException('Could not multiply points');
+		}
+		$P = $result['h'];
+
+		$t = self::stringToIntArray($n);
+		$t[31] &= 0x7f;
+		$Q = self::ge_scalarmult(self::intArrayToString($t), $P);
+		$q = self::ristretto255_p3_tobytes($Q);
+		if (ParagonIE_Sodium_Compat::is_zero($q)) {
+			throw new SodiumException('An unknown error has occurred');
+		}
+		return $q;
+	}
+
+	/**
+	 * @param string $n
+	 * @return string
+	 * @throws SodiumException
+	 */
+	public static function scalarmult_ristretto255_base($n)
+	{
+		$t = self::stringToIntArray($n);
+		$t[31] &= 0x7f;
+		$Q = self::ge_scalarmult_base(self::intArrayToString($t));
+		$q = self::ristretto255_p3_tobytes($Q);
+		if (ParagonIE_Sodium_Compat::is_zero($q)) {
+			throw new SodiumException('An unknown error has occurred');
+		}
+		return $q;
+	}
 }

Spacing +263 added lines, -263 removed lines

@@ -15,10 +15,10 @@ 
      * @param int $b
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      */
-    public static function fe_cneg(ParagonIE_Sodium_Core_Curve25519_Fe $f, $b)
+    public static function fe_cneg( ParagonIE_Sodium_Core_Curve25519_Fe $f, $b )
     {
-        $negf = self::fe_neg($f);
-        return self::fe_cmov($f, $negf, $b);
+        $negf = self::fe_neg( $f );
+        return self::fe_cmov( $f, $negf, $b );
     }
 
     /**
@@ -26,9 +26,9 @@ 
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      * @throws SodiumException
      */
-    public static function fe_abs(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+    public static function fe_abs( ParagonIE_Sodium_Core_Curve25519_Fe $f )
     {
-        return self::fe_cneg($f, self::fe_isnegative($f));
+        return self::fe_cneg( $f, self::fe_isnegative( $f ) );
     }
 
     /**
@@ -40,20 +40,20 @@ 
      * @return int
      * @throws SodiumException
      */
-    public static function fe_iszero(ParagonIE_Sodium_Core_Curve25519_Fe $f)
+    public static function fe_iszero( ParagonIE_Sodium_Core_Curve25519_Fe $f )
     {
         static $zero;
-        if ($zero === null) {
-            $zero = str_repeat("\x00", 32);
+        if ( $zero === null ) {
+            $zero = str_repeat( "\x00", 32 );
         }
         /** @var string $zero */
-        $str = self::fe_tobytes($f);
+        $str = self::fe_tobytes( $f );
 
         $d = 0;
-        for ($i = 0; $i < 32; ++$i) {
-            $d |= self::chrToInt($str[$i]);
+        for ( $i = 0; $i < 32; ++$i ) {
+            $d |= self::chrToInt( $str[ $i ] );
         }
-        return (($d - 1) >> 31) & 1;
+        return ( ( $d - 1 ) >> 31 ) & 1;
     }
 
 
@@ -68,15 +68,15 @@ 
         ParagonIE_Sodium_Core_Curve25519_Fe $u,
         ParagonIE_Sodium_Core_Curve25519_Fe $v
     ) {
-        $sqrtm1 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1);
+        $sqrtm1 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$sqrtm1 );
 
         $v3 = self::fe_mul(
-            self::fe_sq($v),
+            self::fe_sq( $v ),
             $v
         ); /* v3 = v^3 */
         $x = self::fe_mul(
             self::fe_mul(
-                self::fe_sq($v3),
+                self::fe_sq( $v3 ),
                 $u
             ),
             $v
@@ -84,30 +84,30 @@ 
 
         $x = self::fe_mul(
             self::fe_mul(
-                self::fe_pow22523($x), /* x = (uv^7)^((q-5)/8) */
+                self::fe_pow22523( $x ), /* x = (uv^7)^((q-5)/8) */
                 $v3
             ),
             $u
         ); /* x = uv^3(uv^7)^((q-5)/8) */
 
         $vxx = self::fe_mul(
-            self::fe_sq($x),
+            self::fe_sq( $x ),
             $v
         ); /* vx^2 */
 
-        $m_root_check = self::fe_sub($vxx, $u); /* vx^2-u */
-        $p_root_check = self::fe_add($vxx, $u); /* vx^2+u */
-        $f_root_check = self::fe_mul($u, $sqrtm1); /* u*sqrt(-1) */
-        $f_root_check = self::fe_add($vxx, $f_root_check); /* vx^2+u*sqrt(-1) */
+        $m_root_check = self::fe_sub( $vxx, $u ); /* vx^2-u */
+        $p_root_check = self::fe_add( $vxx, $u ); /* vx^2+u */
+        $f_root_check = self::fe_mul( $u, $sqrtm1 ); /* u*sqrt(-1) */
+        $f_root_check = self::fe_add( $vxx, $f_root_check ); /* vx^2+u*sqrt(-1) */
 
-        $has_m_root = self::fe_iszero($m_root_check);
-        $has_p_root = self::fe_iszero($p_root_check);
-        $has_f_root = self::fe_iszero($f_root_check);
+        $has_m_root = self::fe_iszero( $m_root_check );
+        $has_p_root = self::fe_iszero( $p_root_check );
+        $has_f_root = self::fe_iszero( $f_root_check );
 
-        $x_sqrtm1 = self::fe_mul($x, $sqrtm1); /* x*sqrt(-1) */
+        $x_sqrtm1 = self::fe_mul( $x, $sqrtm1 ); /* x*sqrt(-1) */
 
         $x = self::fe_abs(
-            self::fe_cmov($x, $x_sqrtm1, $has_p_root | $has_f_root)
+            self::fe_cmov( $x, $x_sqrtm1, $has_p_root | $has_f_root )
         );
         return array(
             'x' => $x,
@@ -120,17 +120,17 @@ 
      * @return int
      * @throws SodiumException
      */
-    public static function ristretto255_point_is_canonical($s)
+    public static function ristretto255_point_is_canonical( $s )
     {
-        $c = (self::chrToInt($s[31]) & 0x7f) ^ 0x7f;
-        for ($i = 30; $i > 0; --$i) {
-            $c |= self::chrToInt($s[$i]) ^ 0xff;
+        $c = ( self::chrToInt( $s[ 31 ] ) & 0x7f ) ^ 0x7f;
+        for ( $i = 30; $i > 0; --$i ) {
+            $c |= self::chrToInt( $s[ $i ] ) ^ 0xff;
         }
-        $c = ($c - 1) >> 8;
-        $d = (0xed - 1 - self::chrToInt($s[0])) >> 8;
-        $e = self::chrToInt($s[31]) >> 7;
+        $c = ( $c - 1 ) >> 8;
+        $d = ( 0xed - 1 - self::chrToInt( $s[ 0 ] ) ) >> 8;
+        $e = self::chrToInt( $s[ 31 ] ) >> 7;
 
-        return 1 - ((($c & $d) | $e | self::chrToInt($s[0])) & 1);
+        return 1 - ( ( ( $c & $d ) | $e | self::chrToInt( $s[ 0 ] ) ) & 1 );
     }
 
     /**
@@ -139,53 +139,53 @@ 
      * @return array{h: ParagonIE_Sodium_Core_Curve25519_Ge_P3, res: int}
      * @throws SodiumException
      */
-    public static function ristretto255_frombytes($s, $skipCanonicalCheck = false)
+    public static function ristretto255_frombytes( $s, $skipCanonicalCheck = false )
     {
-        if (!$skipCanonicalCheck) {
-            if (!self::ristretto255_point_is_canonical($s)) {
-                throw new SodiumException('S is not canonical');
+        if ( ! $skipCanonicalCheck ) {
+            if ( ! self::ristretto255_point_is_canonical( $s ) ) {
+                throw new SodiumException( 'S is not canonical' );
             }
         }
 
-        $s_ = self::fe_frombytes($s);
-        $ss = self::fe_sq($s_); /* ss = s^2 */
+        $s_ = self::fe_frombytes( $s );
+        $ss = self::fe_sq( $s_ ); /* ss = s^2 */
 
-        $u1 = self::fe_sub(self::fe_1(), $ss); /* u1 = 1-ss */
-        $u1u1 = self::fe_sq($u1); /* u1u1 = u1^2 */
+        $u1 = self::fe_sub( self::fe_1(), $ss ); /* u1 = 1-ss */
+        $u1u1 = self::fe_sq( $u1 ); /* u1u1 = u1^2 */
 
-        $u2 = self::fe_add(self::fe_1(), $ss); /* u2 = 1+ss */
-        $u2u2 = self::fe_sq($u2); /* u2u2 = u2^2 */
+        $u2 = self::fe_add( self::fe_1(), $ss ); /* u2 = 1+ss */
+        $u2u2 = self::fe_sq( $u2 ); /* u2u2 = u2^2 */
 
         $v = self::fe_mul(
-            ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d),
+            ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$d ),
             $u1u1
         ); /* v = d*u1^2 */
-        $v = self::fe_neg($v); /* v = -d*u1^2 */
-        $v = self::fe_sub($v, $u2u2); /* v = -(d*u1^2)-u2^2 */
-        $v_u2u2 = self::fe_mul($v, $u2u2); /* v_u2u2 = v*u2^2 */
+        $v = self::fe_neg( $v ); /* v = -d*u1^2 */
+        $v = self::fe_sub( $v, $u2u2 ); /* v = -(d*u1^2)-u2^2 */
+        $v_u2u2 = self::fe_mul( $v, $u2u2 ); /* v_u2u2 = v*u2^2 */
 
         // fe25519_1(one);
         // notsquare = ristretto255_sqrt_ratio_m1(inv_sqrt, one, v_u2u2);
         $one = self::fe_1();
-        $result = self::ristretto255_sqrt_ratio_m1($one, $v_u2u2);
-        $inv_sqrt = $result['x'];
-        $notsquare = $result['nonsquare'];
+        $result = self::ristretto255_sqrt_ratio_m1( $one, $v_u2u2 );
+        $inv_sqrt = $result[ 'x' ];
+        $notsquare = $result[ 'nonsquare' ];
 
         $h = new ParagonIE_Sodium_Core_Curve25519_Ge_P3();
 
-        $h->X = self::fe_mul($inv_sqrt, $u2);
-        $h->Y = self::fe_mul(self::fe_mul($inv_sqrt, $h->X), $v);
+        $h->X = self::fe_mul( $inv_sqrt, $u2 );
+        $h->Y = self::fe_mul( self::fe_mul( $inv_sqrt, $h->X ), $v );
 
-        $h->X = self::fe_mul($h->X, $s_);
+        $h->X = self::fe_mul( $h->X, $s_ );
         $h->X = self::fe_abs(
-            self::fe_add($h->X, $h->X)
+            self::fe_add( $h->X, $h->X )
         );
-        $h->Y = self::fe_mul($u1, $h->Y);
+        $h->Y = self::fe_mul( $u1, $h->Y );
         $h->Z = self::fe_1();
-        $h->T = self::fe_mul($h->X, $h->Y);
+        $h->T = self::fe_mul( $h->X, $h->Y );
 
-        $res = - ((1 - $notsquare) | self::fe_isnegative($h->T) | self::fe_iszero($h->Y));
-        return array('h' => $h, 'res' => $res);
+        $res = - ( ( 1 - $notsquare ) | self::fe_isnegative( $h->T ) | self::fe_iszero( $h->Y ) );
+        return array( 'h' => $h, 'res' => $res );
     }
 
     /**
@@ -193,45 +193,45 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_p3_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h)
+    public static function ristretto255_p3_tobytes( ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h )
     {
-        $sqrtm1 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1);
-        $invsqrtamd = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$invsqrtamd);
+        $sqrtm1 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$sqrtm1 );
+        $invsqrtamd = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$invsqrtamd );
 
-        $u1 = self::fe_add($h->Z, $h->Y); /* u1 = Z+Y */
-        $zmy = self::fe_sub($h->Z, $h->Y); /* zmy = Z-Y */
-        $u1 = self::fe_mul($u1, $zmy); /* u1 = (Z+Y)*(Z-Y) */
-        $u2 = self::fe_mul($h->X, $h->Y); /* u2 = X*Y */
+        $u1 = self::fe_add( $h->Z, $h->Y ); /* u1 = Z+Y */
+        $zmy = self::fe_sub( $h->Z, $h->Y ); /* zmy = Z-Y */
+        $u1 = self::fe_mul( $u1, $zmy ); /* u1 = (Z+Y)*(Z-Y) */
+        $u2 = self::fe_mul( $h->X, $h->Y ); /* u2 = X*Y */
 
-        $u1_u2u2 = self::fe_mul(self::fe_sq($u2), $u1); /* u1_u2u2 = u1*u2^2 */
+        $u1_u2u2 = self::fe_mul( self::fe_sq( $u2 ), $u1 ); /* u1_u2u2 = u1*u2^2 */
         $one = self::fe_1();
 
         // fe25519_1(one);
         // (void) ristretto255_sqrt_ratio_m1(inv_sqrt, one, u1_u2u2);
-        $result = self::ristretto255_sqrt_ratio_m1($one, $u1_u2u2);
-        $inv_sqrt = $result['x'];
+        $result = self::ristretto255_sqrt_ratio_m1( $one, $u1_u2u2 );
+        $inv_sqrt = $result[ 'x' ];
 
-        $den1 = self::fe_mul($inv_sqrt, $u1); /* den1 = inv_sqrt*u1 */
-        $den2 = self::fe_mul($inv_sqrt, $u2); /* den2 = inv_sqrt*u2 */
-        $z_inv = self::fe_mul($h->T, self::fe_mul($den1, $den2)); /* z_inv = den1*den2*T */
+        $den1 = self::fe_mul( $inv_sqrt, $u1 ); /* den1 = inv_sqrt*u1 */
+        $den2 = self::fe_mul( $inv_sqrt, $u2 ); /* den2 = inv_sqrt*u2 */
+        $z_inv = self::fe_mul( $h->T, self::fe_mul( $den1, $den2 ) ); /* z_inv = den1*den2*T */
 
-        $ix = self::fe_mul($h->X, $sqrtm1); /* ix = X*sqrt(-1) */
-        $iy = self::fe_mul($h->Y, $sqrtm1); /* iy = Y*sqrt(-1) */
-        $eden = self::fe_mul($den1, $invsqrtamd);
+        $ix = self::fe_mul( $h->X, $sqrtm1 ); /* ix = X*sqrt(-1) */
+        $iy = self::fe_mul( $h->Y, $sqrtm1 ); /* iy = Y*sqrt(-1) */
+        $eden = self::fe_mul( $den1, $invsqrtamd );
 
-        $t_z_inv =  self::fe_mul($h->T, $z_inv); /* t_z_inv = T*z_inv */
-        $rotate = self::fe_isnegative($t_z_inv);
+        $t_z_inv = self::fe_mul( $h->T, $z_inv ); /* t_z_inv = T*z_inv */
+        $rotate = self::fe_isnegative( $t_z_inv );
 
-        $x_ = self::fe_copy($h->X);
-        $y_ = self::fe_copy($h->Y);
-        $den_inv = self::fe_copy($den2);
+        $x_ = self::fe_copy( $h->X );
+        $y_ = self::fe_copy( $h->Y );
+        $den_inv = self::fe_copy( $den2 );
 
-        $x_ = self::fe_cmov($x_, $iy, $rotate);
-        $y_ = self::fe_cmov($y_, $ix, $rotate);
-        $den_inv = self::fe_cmov($den_inv, $eden, $rotate);
+        $x_ = self::fe_cmov( $x_, $iy, $rotate );
+        $y_ = self::fe_cmov( $y_, $ix, $rotate );
+        $den_inv = self::fe_cmov( $den_inv, $eden, $rotate );
 
-        $x_z_inv = self::fe_mul($x_, $z_inv);
-        $y_ = self::fe_cneg($y_, self::fe_isnegative($x_z_inv));
+        $x_z_inv = self::fe_mul( $x_, $z_inv );
+        $y_ = self::fe_cneg( $y_, self::fe_isnegative( $x_z_inv ) );
 
 
         // fe25519_sub(s_, h->Z, y_);
@@ -242,7 +242,7 @@ 
             self::fe_abs(
                 self::fe_mul(
                     $den_inv,
-                    self::fe_sub($h->Z, $y_)
+                    self::fe_sub( $h->Z, $y_ )
                 )
             )
         );
@@ -254,39 +254,39 @@ 
      *
      * @throws SodiumException
      */
-    public static function ristretto255_elligator(ParagonIE_Sodium_Core_Curve25519_Fe $t)
+    public static function ristretto255_elligator( ParagonIE_Sodium_Core_Curve25519_Fe $t )
     {
-        $sqrtm1   = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1);
-        $onemsqd  = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$onemsqd);
-        $d        = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d);
-        $sqdmone  = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqdmone);
-        $sqrtadm1 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtadm1);
+        $sqrtm1   = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$sqrtm1 );
+        $onemsqd  = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$onemsqd );
+        $d        = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$d );
+        $sqdmone  = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$sqdmone );
+        $sqrtadm1 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray( self::$sqrtadm1 );
 
         $one = self::fe_1();
-        $r   = self::fe_mul($sqrtm1, self::fe_sq($t));         /* r = sqrt(-1)*t^2 */
-        $u   = self::fe_mul(self::fe_add($r, $one), $onemsqd); /* u = (r+1)*(1-d^2) */
-        $c   = self::fe_neg(self::fe_1());                     /* c = -1 */
-        $rpd = self::fe_add($r, $d);                           /* rpd = r+d */
+        $r   = self::fe_mul( $sqrtm1, self::fe_sq( $t ) ); /* r = sqrt(-1)*t^2 */
+        $u   = self::fe_mul( self::fe_add( $r, $one ), $onemsqd ); /* u = (r+1)*(1-d^2) */
+        $c   = self::fe_neg( self::fe_1() ); /* c = -1 */
+        $rpd = self::fe_add( $r, $d ); /* rpd = r+d */
 
         $v = self::fe_mul(
             self::fe_sub(
                 $c,
-                self::fe_mul($r, $d)
+                self::fe_mul( $r, $d )
             ),
             $rpd
         ); /* v = (c-r*d)*(r+d) */
 
-        $result = self::ristretto255_sqrt_ratio_m1($u, $v);
-        $s = $result['x'];
-        $wasnt_square = 1 - $result['nonsquare'];
+        $result = self::ristretto255_sqrt_ratio_m1( $u, $v );
+        $s = $result[ 'x' ];
+        $wasnt_square = 1 - $result[ 'nonsquare' ];
 
         $s_prime = self::fe_neg(
             self::fe_abs(
-                self::fe_mul($s, $t)
+                self::fe_mul( $s, $t )
             )
         ); /* s_prime = -|s*t| */
-        $s = self::fe_cmov($s, $s_prime, $wasnt_square);
-        $c = self::fe_cmov($c, $r, $wasnt_square);
+        $s = self::fe_cmov( $s, $s_prime, $wasnt_square );
+        $c = self::fe_cmov( $c, $r, $wasnt_square );
 
         // fe25519_sub(n, r, one);            /* n = r-1 */
         // fe25519_mul(n, n, c);              /* n = c*(r-1) */
@@ -295,7 +295,7 @@ 
         $n = self::fe_sub(
             self::fe_mul(
                 self::fe_mul(
-                    self::fe_sub($r, $one),
+                    self::fe_sub( $r, $one ),
                     $c
                 ),
                 $sqdmone
@@ -304,20 +304,20 @@ 
         ); /* n =  c*(r-1)*(d-1)^2-v */
 
         $w0 = self::fe_mul(
-            self::fe_add($s, $s),
+            self::fe_add( $s, $s ),
             $v
         ); /* w0 = 2s*v */
 
-        $w1 = self::fe_mul($n, $sqrtadm1); /* w1 = n*sqrt(ad-1) */
-        $ss = self::fe_sq($s); /* ss = s^2 */
-        $w2 = self::fe_sub($one, $ss); /* w2 = 1-s^2 */
-        $w3 = self::fe_add($one, $ss); /* w3 = 1+s^2 */
+        $w1 = self::fe_mul( $n, $sqrtadm1 ); /* w1 = n*sqrt(ad-1) */
+        $ss = self::fe_sq( $s ); /* ss = s^2 */
+        $w2 = self::fe_sub( $one, $ss ); /* w2 = 1-s^2 */
+        $w3 = self::fe_add( $one, $ss ); /* w3 = 1+s^2 */
 
         return new ParagonIE_Sodium_Core_Curve25519_Ge_P3(
-            self::fe_mul($w0, $w3),
-            self::fe_mul($w2, $w1),
-            self::fe_mul($w1, $w3),
-            self::fe_mul($w0, $w2)
+            self::fe_mul( $w0, $w3 ),
+            self::fe_mul( $w2, $w1 ),
+            self::fe_mul( $w1, $w3 ),
+            self::fe_mul( $w0, $w2 )
         );
     }
 
@@ -326,32 +326,32 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_from_hash($h)
+    public static function ristretto255_from_hash( $h )
     {
-        if (self::strlen($h) !== 64) {
-            throw new SodiumException('Hash must be 64 bytes');
+        if ( self::strlen( $h ) !== 64 ) {
+            throw new SodiumException( 'Hash must be 64 bytes' );
         }
         //fe25519_frombytes(r0, h);
         //fe25519_frombytes(r1, h + 32);
-        $r0 = self::fe_frombytes(self::substr($h, 0, 32));
-        $r1 = self::fe_frombytes(self::substr($h, 32, 32));
+        $r0 = self::fe_frombytes( self::substr( $h, 0, 32 ) );
+        $r1 = self::fe_frombytes( self::substr( $h, 32, 32 ) );
 
         //ristretto255_elligator(&p0, r0);
         //ristretto255_elligator(&p1, r1);
-        $p0 = self::ristretto255_elligator($r0);
-        $p1 = self::ristretto255_elligator($r1);
+        $p0 = self::ristretto255_elligator( $r0 );
+        $p1 = self::ristretto255_elligator( $r1 );
 
         //ge25519_p3_to_cached(&p1_cached, &p1);
         //ge25519_add_cached(&p_p1p1, &p0, &p1_cached);
         $p_p1p1 = self::ge_add(
             $p0,
-            self::ge_p3_to_cached($p1)
+            self::ge_p3_to_cached( $p1 )
         );
 
         //ge25519_p1p1_to_p3(&p, &p_p1p1);
         //ristretto255_p3_tobytes(s, &p);
         return self::ristretto255_p3_tobytes(
-            self::ge_p1p1_to_p3($p_p1p1)
+            self::ge_p1p1_to_p3( $p_p1p1 )
         );
     }
 
@@ -360,10 +360,10 @@ 
      * @return int
      * @throws SodiumException
      */
-    public static function is_valid_point($p)
+    public static function is_valid_point( $p )
     {
-        $result = self::ristretto255_frombytes($p);
-        if ($result['res'] !== 0) {
+        $result = self::ristretto255_frombytes( $p );
+        if ( $result[ 'res' ] !== 0 ) {
             return 0;
         }
         return 1;
@@ -375,19 +375,19 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_add($p, $q)
+    public static function ristretto255_add( $p, $q )
     {
-        $p_res = self::ristretto255_frombytes($p);
-        $q_res = self::ristretto255_frombytes($q);
-        if ($p_res['res'] !== 0 || $q_res['res'] !== 0) {
-            throw new SodiumException('Could not add points');
+        $p_res = self::ristretto255_frombytes( $p );
+        $q_res = self::ristretto255_frombytes( $q );
+        if ( $p_res[ 'res' ] !== 0 || $q_res[ 'res' ] !== 0 ) {
+            throw new SodiumException( 'Could not add points' );
         }
-        $p_p3 = $p_res['h'];
-        $q_p3 = $q_res['h'];
-        $q_cached = self::ge_p3_to_cached($q_p3);
-        $r_p1p1 = self::ge_add($p_p3, $q_cached);
-        $r_p3 = self::ge_p1p1_to_p3($r_p1p1);
-        return self::ristretto255_p3_tobytes($r_p3);
+        $p_p3 = $p_res[ 'h' ];
+        $q_p3 = $q_res[ 'h' ];
+        $q_cached = self::ge_p3_to_cached( $q_p3 );
+        $r_p1p1 = self::ge_add( $p_p3, $q_cached );
+        $r_p3 = self::ge_p1p1_to_p3( $r_p1p1 );
+        return self::ristretto255_p3_tobytes( $r_p3 );
     }
 
     /**
@@ -396,19 +396,19 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_sub($p, $q)
+    public static function ristretto255_sub( $p, $q )
     {
-        $p_res = self::ristretto255_frombytes($p);
-        $q_res = self::ristretto255_frombytes($q);
-        if ($p_res['res'] !== 0 || $q_res['res'] !== 0) {
-            throw new SodiumException('Could not add points');
+        $p_res = self::ristretto255_frombytes( $p );
+        $q_res = self::ristretto255_frombytes( $q );
+        if ( $p_res[ 'res' ] !== 0 || $q_res[ 'res' ] !== 0 ) {
+            throw new SodiumException( 'Could not add points' );
         }
-        $p_p3 = $p_res['h'];
-        $q_p3 = $q_res['h'];
-        $q_cached = self::ge_p3_to_cached($q_p3);
-        $r_p1p1 = self::ge_sub($p_p3, $q_cached);
-        $r_p3 = self::ge_p1p1_to_p3($r_p1p1);
-        return self::ristretto255_p3_tobytes($r_p3);
+        $p_p3 = $p_res[ 'h' ];
+        $q_p3 = $q_res[ 'h' ];
+        $q_cached = self::ge_p3_to_cached( $q_p3 );
+        $r_p1p1 = self::ge_sub( $p_p3, $q_cached );
+        $r_p3 = self::ge_p1p1_to_p3( $r_p1p1 );
+        return self::ristretto255_p3_tobytes( $r_p3 );
     }
 
 
@@ -420,46 +420,46 @@ 
      * @throws SodiumException
      * @psalm-suppress PossiblyInvalidArgument hash API
      */
-    protected static function h2c_string_to_hash_sha256($hLen, $ctx, $msg)
+    protected static function h2c_string_to_hash_sha256( $hLen, $ctx, $msg )
     {
-        $h = array_fill(0, $hLen, 0);
-        $ctx_len = !is_null($ctx) ? self::strlen($ctx) : 0;
-        if ($hLen > 0xff) {
-            throw new SodiumException('Hash must be less than 256 bytes');
+        $h = array_fill( 0, $hLen, 0 );
+        $ctx_len = ! is_null( $ctx ) ? self::strlen( $ctx ) : 0;
+        if ( $hLen > 0xff ) {
+            throw new SodiumException( 'Hash must be less than 256 bytes' );
         }
 
-        if ($ctx_len > 0xff) {
-            $st = hash_init('sha256');
-            self::hash_update($st, "H2C-OVERSIZE-DST-");
-            self::hash_update($st, $ctx);
-            $ctx = hash_final($st, true);
+        if ( $ctx_len > 0xff ) {
+            $st = hash_init( 'sha256' );
+            self::hash_update( $st, "H2C-OVERSIZE-DST-" );
+            self::hash_update( $st, $ctx );
+            $ctx = hash_final( $st, true );
             $ctx_len = 32;
         }
-        $t = array(0, $hLen, 0);
-        $ux = str_repeat("\0", 64);
-        $st = hash_init('sha256');
-        self::hash_update($st, $ux);
-        self::hash_update($st, $msg);
-        self::hash_update($st, self::intArrayToString($t));
-        self::hash_update($st, $ctx);
-        self::hash_update($st, self::intToChr($ctx_len));
-        $u0 = hash_final($st, true);
-
-        for ($i = 0; $i < $hLen; $i += 64) {
-            $ux = self::xorStrings($ux, $u0);
-            ++$t[2];
-            $st = hash_init('sha256');
-            self::hash_update($st, $ux);
-            self::hash_update($st, self::intToChr($t[2]));
-            self::hash_update($st, $ctx);
-            self::hash_update($st, self::intToChr($ctx_len));
-            $ux = hash_final($st, true);
-            $amount = min($hLen - $i, 64);
-            for ($j = 0; $j < $amount; ++$j) {
-                $h[$i + $j] = self::chrToInt($ux[$i]);
+        $t = array( 0, $hLen, 0 );
+        $ux = str_repeat( "\0", 64 );
+        $st = hash_init( 'sha256' );
+        self::hash_update( $st, $ux );
+        self::hash_update( $st, $msg );
+        self::hash_update( $st, self::intArrayToString( $t ) );
+        self::hash_update( $st, $ctx );
+        self::hash_update( $st, self::intToChr( $ctx_len ) );
+        $u0 = hash_final( $st, true );
+
+        for ( $i = 0; $i < $hLen; $i += 64 ) {
+            $ux = self::xorStrings( $ux, $u0 );
+            ++$t[ 2 ];
+            $st = hash_init( 'sha256' );
+            self::hash_update( $st, $ux );
+            self::hash_update( $st, self::intToChr( $t[ 2 ] ) );
+            self::hash_update( $st, $ctx );
+            self::hash_update( $st, self::intToChr( $ctx_len ) );
+            $ux = hash_final( $st, true );
+            $amount = min( $hLen - $i, 64 );
+            for ( $j = 0; $j < $amount; ++$j ) {
+                $h[ $i + $j ] = self::chrToInt( $ux[ $i ] );
             }
         }
-        return self::intArrayToString(array_slice($h, 0, $hLen));
+        return self::intArrayToString( array_slice( $h, 0, $hLen ) );
     }
 
     /**
@@ -470,46 +470,46 @@ 
      * @throws SodiumException
      * @psalm-suppress PossiblyInvalidArgument hash API
      */
-    protected static function h2c_string_to_hash_sha512($hLen, $ctx, $msg)
+    protected static function h2c_string_to_hash_sha512( $hLen, $ctx, $msg )
     {
-        $h = array_fill(0, $hLen, 0);
-        $ctx_len = !is_null($ctx) ? self::strlen($ctx) : 0;
-        if ($hLen > 0xff) {
-            throw new SodiumException('Hash must be less than 256 bytes');
+        $h = array_fill( 0, $hLen, 0 );
+        $ctx_len = ! is_null( $ctx ) ? self::strlen( $ctx ) : 0;
+        if ( $hLen > 0xff ) {
+            throw new SodiumException( 'Hash must be less than 256 bytes' );
         }
 
-        if ($ctx_len > 0xff) {
-            $st = hash_init('sha256');
-            self::hash_update($st, "H2C-OVERSIZE-DST-");
-            self::hash_update($st, $ctx);
-            $ctx = hash_final($st, true);
+        if ( $ctx_len > 0xff ) {
+            $st = hash_init( 'sha256' );
+            self::hash_update( $st, "H2C-OVERSIZE-DST-" );
+            self::hash_update( $st, $ctx );
+            $ctx = hash_final( $st, true );
             $ctx_len = 32;
         }
-        $t = array(0, $hLen, 0);
-        $ux = str_repeat("\0", 128);
-        $st = hash_init('sha512');
-        self::hash_update($st, $ux);
-        self::hash_update($st, $msg);
-        self::hash_update($st, self::intArrayToString($t));
-        self::hash_update($st, $ctx);
-        self::hash_update($st, self::intToChr($ctx_len));
-        $u0 = hash_final($st, true);
-
-        for ($i = 0; $i < $hLen; $i += 128) {
-            $ux = self::xorStrings($ux, $u0);
-            ++$t[2];
-            $st = hash_init('sha512');
-            self::hash_update($st, $ux);
-            self::hash_update($st, self::intToChr($t[2]));
-            self::hash_update($st, $ctx);
-            self::hash_update($st, self::intToChr($ctx_len));
-            $ux = hash_final($st, true);
-            $amount = min($hLen - $i, 128);
-            for ($j = 0; $j < $amount; ++$j) {
-                $h[$i + $j] = self::chrToInt($ux[$i]);
+        $t = array( 0, $hLen, 0 );
+        $ux = str_repeat( "\0", 128 );
+        $st = hash_init( 'sha512' );
+        self::hash_update( $st, $ux );
+        self::hash_update( $st, $msg );
+        self::hash_update( $st, self::intArrayToString( $t ) );
+        self::hash_update( $st, $ctx );
+        self::hash_update( $st, self::intToChr( $ctx_len ) );
+        $u0 = hash_final( $st, true );
+
+        for ( $i = 0; $i < $hLen; $i += 128 ) {
+            $ux = self::xorStrings( $ux, $u0 );
+            ++$t[ 2 ];
+            $st = hash_init( 'sha512' );
+            self::hash_update( $st, $ux );
+            self::hash_update( $st, self::intToChr( $t[ 2 ] ) );
+            self::hash_update( $st, $ctx );
+            self::hash_update( $st, self::intToChr( $ctx_len ) );
+            $ux = hash_final( $st, true );
+            $amount = min( $hLen - $i, 128 );
+            for ( $j = 0; $j < $amount; ++$j ) {
+                $h[ $i + $j ] = self::chrToInt( $ux[ $i ] );
             }
         }
-        return self::intArrayToString(array_slice($h, 0, $hLen));
+        return self::intArrayToString( array_slice( $h, 0, $hLen ) );
     }
 
     /**
@@ -520,15 +520,15 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function h2c_string_to_hash($hLen, $ctx, $msg, $hash_alg)
+    public static function h2c_string_to_hash( $hLen, $ctx, $msg, $hash_alg )
     {
-        switch ($hash_alg) {
+        switch ( $hash_alg ) {
             case self::CORE_H2C_SHA256:
-                return self::h2c_string_to_hash_sha256($hLen, $ctx, $msg);
+                return self::h2c_string_to_hash_sha256( $hLen, $ctx, $msg );
             case self::CORE_H2C_SHA512:
-                return self::h2c_string_to_hash_sha512($hLen, $ctx, $msg);
+                return self::h2c_string_to_hash_sha512( $hLen, $ctx, $msg );
             default:
-                throw new SodiumException('Invalid H2C hash algorithm');
+                throw new SodiumException( 'Invalid H2C hash algorithm' );
         }
     }
 
@@ -539,10 +539,10 @@ 
      * @return string
      * @throws SodiumException
      */
-    protected static function _string_to_element($ctx, $msg, $hash_alg)
+    protected static function _string_to_element( $ctx, $msg, $hash_alg )
     {
         return self::ristretto255_from_hash(
-            self::h2c_string_to_hash(self::crypto_core_ristretto255_HASHBYTES, $ctx, $msg, $hash_alg)
+            self::h2c_string_to_hash( self::crypto_core_ristretto255_HASHBYTES, $ctx, $msg, $hash_alg )
         );
     }
 
@@ -554,7 +554,7 @@ 
     public static function ristretto255_random()
     {
         return self::ristretto255_from_hash(
-            ParagonIE_Sodium_Compat::randombytes_buf(self::crypto_core_ristretto255_HASHBYTES)
+            ParagonIE_Sodium_Compat::randombytes_buf( self::crypto_core_ristretto255_HASHBYTES )
         );
     }
 
@@ -572,9 +572,9 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_scalar_complement($s)
+    public static function ristretto255_scalar_complement( $s )
     {
-        return self::scalar_complement($s);
+        return self::scalar_complement( $s );
     }
 
 
@@ -582,9 +582,9 @@ 
      * @param string $s
      * @return string
      */
-    public static function ristretto255_scalar_invert($s)
+    public static function ristretto255_scalar_invert( $s )
     {
-        return self::sc25519_invert($s);
+        return self::sc25519_invert( $s );
     }
 
     /**
@@ -592,9 +592,9 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_scalar_negate($s)
+    public static function ristretto255_scalar_negate( $s )
     {
-        return self::scalar_negate($s);
+        return self::scalar_negate( $s );
     }
 
     /**
@@ -602,9 +602,9 @@ 
      * @param string $y
      * @return string
      */
-    public static function ristretto255_scalar_add($x, $y)
+    public static function ristretto255_scalar_add( $x, $y )
     {
-        return self::scalar_add($x, $y);
+        return self::scalar_add( $x, $y );
     }
 
     /**
@@ -612,9 +612,9 @@ 
      * @param string $y
      * @return string
      */
-    public static function ristretto255_scalar_sub($x, $y)
+    public static function ristretto255_scalar_sub( $x, $y )
     {
-        return self::scalar_sub($x, $y);
+        return self::scalar_sub( $x, $y );
     }
 
     /**
@@ -622,9 +622,9 @@ 
      * @param string $y
      * @return string
      */
-    public static function ristretto255_scalar_mul($x, $y)
+    public static function ristretto255_scalar_mul( $x, $y )
     {
-        return self::sc25519_mul($x, $y);
+        return self::sc25519_mul( $x, $y );
     }
 
     /**
@@ -634,28 +634,28 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_scalar_from_string($ctx, $msg, $hash_alg)
+    public static function ristretto255_scalar_from_string( $ctx, $msg, $hash_alg )
     {
-        $h = array_fill(0, 64, 0);
+        $h = array_fill( 0, 64, 0 );
         $h_be = self::stringToIntArray(
             self::h2c_string_to_hash(
                 self::HASH_SC_L, $ctx, $msg, $hash_alg
             )
         );
 
-        for ($i = 0; $i < self::HASH_SC_L; ++$i) {
-            $h[$i] = $h_be[self::HASH_SC_L - 1 - $i];
+        for ( $i = 0; $i < self::HASH_SC_L; ++$i ) {
+            $h[ $i ] = $h_be[ self::HASH_SC_L - 1 - $i ];
         }
-        return self::ristretto255_scalar_reduce(self::intArrayToString($h));
+        return self::ristretto255_scalar_reduce( self::intArrayToString( $h ) );
     }
 
     /**
      * @param string $s
      * @return string
      */
-    public static function ristretto255_scalar_reduce($s)
+    public static function ristretto255_scalar_reduce( $s )
     {
-        return self::sc_reduce($s);
+        return self::sc_reduce( $s );
     }
 
     /**
@@ -664,26 +664,26 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function scalarmult_ristretto255($n, $p)
+    public static function scalarmult_ristretto255( $n, $p )
     {
-        if (self::strlen($n) !== 32) {
-            throw new SodiumException('Scalar must be 32 bytes, ' . self::strlen($p) . ' given.');
+        if ( self::strlen( $n ) !== 32 ) {
+            throw new SodiumException( 'Scalar must be 32 bytes, ' . self::strlen( $p ) . ' given.' );
         }
-        if (self::strlen($p) !== 32) {
-            throw new SodiumException('Point must be 32 bytes, ' . self::strlen($p) . ' given.');
+        if ( self::strlen( $p ) !== 32 ) {
+            throw new SodiumException( 'Point must be 32 bytes, ' . self::strlen( $p ) . ' given.' );
         }
-        $result = self::ristretto255_frombytes($p);
-        if ($result['res'] !== 0) {
-            throw new SodiumException('Could not multiply points');
+        $result = self::ristretto255_frombytes( $p );
+        if ( $result[ 'res' ] !== 0 ) {
+            throw new SodiumException( 'Could not multiply points' );
         }
-        $P = $result['h'];
-
-        $t = self::stringToIntArray($n);
-        $t[31] &= 0x7f;
-        $Q = self::ge_scalarmult(self::intArrayToString($t), $P);
-        $q = self::ristretto255_p3_tobytes($Q);
-        if (ParagonIE_Sodium_Compat::is_zero($q)) {
-            throw new SodiumException('An unknown error has occurred');
+        $P = $result[ 'h' ];
+
+        $t = self::stringToIntArray( $n );
+        $t[ 31 ] &= 0x7f;
+        $Q = self::ge_scalarmult( self::intArrayToString( $t ), $P );
+        $q = self::ristretto255_p3_tobytes( $Q );
+        if ( ParagonIE_Sodium_Compat::is_zero( $q ) ) {
+            throw new SodiumException( 'An unknown error has occurred' );
         }
         return $q;
     }
@@ -693,14 +693,14 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function scalarmult_ristretto255_base($n)
+    public static function scalarmult_ristretto255_base( $n )
     {
-        $t = self::stringToIntArray($n);
-        $t[31] &= 0x7f;
-        $Q = self::ge_scalarmult_base(self::intArrayToString($t));
-        $q = self::ristretto255_p3_tobytes($Q);
-        if (ParagonIE_Sodium_Compat::is_zero($q)) {
-            throw new SodiumException('An unknown error has occurred');
+        $t = self::stringToIntArray( $n );
+        $t[ 31 ] &= 0x7f;
+        $Q = self::ge_scalarmult_base( self::intArrayToString( $t ) );
+        $q = self::ristretto255_p3_tobytes( $Q );
+        if ( ParagonIE_Sodium_Compat::is_zero( $q ) ) {
+            throw new SodiumException( 'An unknown error has occurred' );
         }
         return $q;
     }

Braces +28 added lines, -56 removed lines

@@ -3,8 +3,7 @@ 
 /**
  * Class ParagonIE_Sodium_Core_Ristretto255
  */
-class ParagonIE_Sodium_Core_Ristretto255 extends ParagonIE_Sodium_Core_Ed25519
-{
+class ParagonIE_Sodium_Core_Ristretto255 extends ParagonIE_Sodium_Core_Ed25519 {
     const crypto_core_ristretto255_HASHBYTES = 64;
     const HASH_SC_L = 48;
     const CORE_H2C_SHA256 = 1;
@@ -15,8 +14,7 @@ 
      * @param int $b
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      */
-    public static function fe_cneg(ParagonIE_Sodium_Core_Curve25519_Fe $f, $b)
-    {
+    public static function fe_cneg(ParagonIE_Sodium_Core_Curve25519_Fe $f, $b) {
         $negf = self::fe_neg($f);
         return self::fe_cmov($f, $negf, $b);
     }
@@ -26,8 +24,7 @@ 
      * @return ParagonIE_Sodium_Core_Curve25519_Fe
      * @throws SodiumException
      */
-    public static function fe_abs(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
+    public static function fe_abs(ParagonIE_Sodium_Core_Curve25519_Fe $f) {
         return self::fe_cneg($f, self::fe_isnegative($f));
     }
 
@@ -40,8 +37,7 @@ 
      * @return int
      * @throws SodiumException
      */
-    public static function fe_iszero(ParagonIE_Sodium_Core_Curve25519_Fe $f)
-    {
+    public static function fe_iszero(ParagonIE_Sodium_Core_Curve25519_Fe $f) {
         static $zero;
         if ($zero === null) {
             $zero = str_repeat("\x00", 32);
@@ -120,8 +116,7 @@ 
      * @return int
      * @throws SodiumException
      */
-    public static function ristretto255_point_is_canonical($s)
-    {
+    public static function ristretto255_point_is_canonical($s) {
         $c = (self::chrToInt($s[31]) & 0x7f) ^ 0x7f;
         for ($i = 30; $i > 0; --$i) {
             $c |= self::chrToInt($s[$i]) ^ 0xff;
@@ -139,8 +134,7 @@ 
      * @return array{h: ParagonIE_Sodium_Core_Curve25519_Ge_P3, res: int}
      * @throws SodiumException
      */
-    public static function ristretto255_frombytes($s, $skipCanonicalCheck = false)
-    {
+    public static function ristretto255_frombytes($s, $skipCanonicalCheck = false) {
         if (!$skipCanonicalCheck) {
             if (!self::ristretto255_point_is_canonical($s)) {
                 throw new SodiumException('S is not canonical');
@@ -193,8 +187,7 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_p3_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h)
-    {
+    public static function ristretto255_p3_tobytes(ParagonIE_Sodium_Core_Curve25519_Ge_P3 $h) {
         $sqrtm1 = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1);
         $invsqrtamd = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$invsqrtamd);
 
@@ -254,8 +247,7 @@ 
      *
      * @throws SodiumException
      */
-    public static function ristretto255_elligator(ParagonIE_Sodium_Core_Curve25519_Fe $t)
-    {
+    public static function ristretto255_elligator(ParagonIE_Sodium_Core_Curve25519_Fe $t) {
         $sqrtm1   = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$sqrtm1);
         $onemsqd  = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$onemsqd);
         $d        = ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(self::$d);
@@ -326,8 +318,7 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_from_hash($h)
-    {
+    public static function ristretto255_from_hash($h) {
         if (self::strlen($h) !== 64) {
             throw new SodiumException('Hash must be 64 bytes');
         }
@@ -360,8 +351,7 @@ 
      * @return int
      * @throws SodiumException
      */
-    public static function is_valid_point($p)
-    {
+    public static function is_valid_point($p) {
         $result = self::ristretto255_frombytes($p);
         if ($result['res'] !== 0) {
             return 0;
@@ -375,8 +365,7 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_add($p, $q)
-    {
+    public static function ristretto255_add($p, $q) {
         $p_res = self::ristretto255_frombytes($p);
         $q_res = self::ristretto255_frombytes($q);
         if ($p_res['res'] !== 0 || $q_res['res'] !== 0) {
@@ -396,8 +385,7 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_sub($p, $q)
-    {
+    public static function ristretto255_sub($p, $q) {
         $p_res = self::ristretto255_frombytes($p);
         $q_res = self::ristretto255_frombytes($q);
         if ($p_res['res'] !== 0 || $q_res['res'] !== 0) {
@@ -420,8 +408,7 @@ 
      * @throws SodiumException
      * @psalm-suppress PossiblyInvalidArgument hash API
      */
-    protected static function h2c_string_to_hash_sha256($hLen, $ctx, $msg)
-    {
+    protected static function h2c_string_to_hash_sha256($hLen, $ctx, $msg) {
         $h = array_fill(0, $hLen, 0);
         $ctx_len = !is_null($ctx) ? self::strlen($ctx) : 0;
         if ($hLen > 0xff) {
@@ -470,8 +457,7 @@ 
      * @throws SodiumException
      * @psalm-suppress PossiblyInvalidArgument hash API
      */
-    protected static function h2c_string_to_hash_sha512($hLen, $ctx, $msg)
-    {
+    protected static function h2c_string_to_hash_sha512($hLen, $ctx, $msg) {
         $h = array_fill(0, $hLen, 0);
         $ctx_len = !is_null($ctx) ? self::strlen($ctx) : 0;
         if ($hLen > 0xff) {
@@ -520,8 +506,7 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function h2c_string_to_hash($hLen, $ctx, $msg, $hash_alg)
-    {
+    public static function h2c_string_to_hash($hLen, $ctx, $msg, $hash_alg) {
         switch ($hash_alg) {
             case self::CORE_H2C_SHA256:
                 return self::h2c_string_to_hash_sha256($hLen, $ctx, $msg);
@@ -539,8 +524,7 @@ 
      * @return string
      * @throws SodiumException
      */
-    protected static function _string_to_element($ctx, $msg, $hash_alg)
-    {
+    protected static function _string_to_element($ctx, $msg, $hash_alg) {
         return self::ristretto255_from_hash(
             self::h2c_string_to_hash(self::crypto_core_ristretto255_HASHBYTES, $ctx, $msg, $hash_alg)
         );
@@ -551,8 +535,7 @@ 
      * @throws SodiumException
      * @throws Exception
      */
-    public static function ristretto255_random()
-    {
+    public static function ristretto255_random() {
         return self::ristretto255_from_hash(
             ParagonIE_Sodium_Compat::randombytes_buf(self::crypto_core_ristretto255_HASHBYTES)
         );
@@ -562,8 +545,7 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_scalar_random()
-    {
+    public static function ristretto255_scalar_random() {
         return self::scalar_random();
     }
 
@@ -572,8 +554,7 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_scalar_complement($s)
-    {
+    public static function ristretto255_scalar_complement($s) {
         return self::scalar_complement($s);
     }
 
@@ -582,8 +563,7 @@ 
      * @param string $s
      * @return string
      */
-    public static function ristretto255_scalar_invert($s)
-    {
+    public static function ristretto255_scalar_invert($s) {
         return self::sc25519_invert($s);
     }
 
@@ -592,8 +572,7 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_scalar_negate($s)
-    {
+    public static function ristretto255_scalar_negate($s) {
         return self::scalar_negate($s);
     }
 
@@ -602,8 +581,7 @@ 
      * @param string $y
      * @return string
      */
-    public static function ristretto255_scalar_add($x, $y)
-    {
+    public static function ristretto255_scalar_add($x, $y) {
         return self::scalar_add($x, $y);
     }
 
@@ -612,8 +590,7 @@ 
      * @param string $y
      * @return string
      */
-    public static function ristretto255_scalar_sub($x, $y)
-    {
+    public static function ristretto255_scalar_sub($x, $y) {
         return self::scalar_sub($x, $y);
     }
 
@@ -622,8 +599,7 @@ 
      * @param string $y
      * @return string
      */
-    public static function ristretto255_scalar_mul($x, $y)
-    {
+    public static function ristretto255_scalar_mul($x, $y) {
         return self::sc25519_mul($x, $y);
     }
 
@@ -634,8 +610,7 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function ristretto255_scalar_from_string($ctx, $msg, $hash_alg)
-    {
+    public static function ristretto255_scalar_from_string($ctx, $msg, $hash_alg) {
         $h = array_fill(0, 64, 0);
         $h_be = self::stringToIntArray(
             self::h2c_string_to_hash(
@@ -653,8 +628,7 @@ 
      * @param string $s
      * @return string
      */
-    public static function ristretto255_scalar_reduce($s)
-    {
+    public static function ristretto255_scalar_reduce($s) {
         return self::sc_reduce($s);
     }
 
@@ -664,8 +638,7 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function scalarmult_ristretto255($n, $p)
-    {
+    public static function scalarmult_ristretto255($n, $p) {
         if (self::strlen($n) !== 32) {
             throw new SodiumException('Scalar must be 32 bytes, ' . self::strlen($p) . ' given.');
         }
@@ -693,8 +666,7 @@ 
      * @return string
      * @throws SodiumException
      */
-    public static function scalarmult_ristretto255_base($n)
-    {
+    public static function scalarmult_ristretto255_base($n) {
         $t = self::stringToIntArray($n);
         $t[31] &= 0x7f;
         $Q = self::ge_scalarmult_base(self::intArrayToString($t));

vendor/paragonie/sodium_compat/src/Core/ChaCha20/Ctx.php

Indentation +105 added lines, -105 removed lines

@@ -1,7 +1,7 @@ 
 <?php
 
 if (class_exists('ParagonIE_Sodium_Core_ChaCha20_Ctx', false)) {
-    return;
+	return;
 }
 
 /**
@@ -9,115 +9,115 @@ 
  */
 class ParagonIE_Sodium_Core_ChaCha20_Ctx extends ParagonIE_Sodium_Core_Util implements ArrayAccess
 {
-    /**
-     * @var SplFixedArray internally, <int, int>
-     */
-    protected $container;
+	/**
+	 * @var SplFixedArray internally, <int, int>
+	 */
+	protected $container;
 
-    /**
-     * ParagonIE_Sodium_Core_ChaCha20_Ctx constructor.
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param string $key     ChaCha20 key.
-     * @param string $iv      Initialization Vector (a.k.a. nonce).
-     * @param string $counter The initial counter value.
-     *                        Defaults to 8 0x00 bytes.
-     * @throws InvalidArgumentException
-     * @throws TypeError
-     */
-    public function __construct($key = '', $iv = '', $counter = '')
-    {
-        if (self::strlen($key) !== 32) {
-            throw new InvalidArgumentException('ChaCha20 expects a 256-bit key.');
-        }
-        if (self::strlen($iv) !== 8) {
-            throw new InvalidArgumentException('ChaCha20 expects a 64-bit nonce.');
-        }
-        $this->container = new SplFixedArray(16);
+	/**
+	 * ParagonIE_Sodium_Core_ChaCha20_Ctx constructor.
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param string $key     ChaCha20 key.
+	 * @param string $iv      Initialization Vector (a.k.a. nonce).
+	 * @param string $counter The initial counter value.
+	 *                        Defaults to 8 0x00 bytes.
+	 * @throws InvalidArgumentException
+	 * @throws TypeError
+	 */
+	public function __construct($key = '', $iv = '', $counter = '')
+	{
+		if (self::strlen($key) !== 32) {
+			throw new InvalidArgumentException('ChaCha20 expects a 256-bit key.');
+		}
+		if (self::strlen($iv) !== 8) {
+			throw new InvalidArgumentException('ChaCha20 expects a 64-bit nonce.');
+		}
+		$this->container = new SplFixedArray(16);
 
-        /* "expand 32-byte k" as per ChaCha20 spec */
-        $this->container[0]  = 0x61707865;
-        $this->container[1]  = 0x3320646e;
-        $this->container[2]  = 0x79622d32;
-        $this->container[3]  = 0x6b206574;
-        $this->container[4]  = self::load_4(self::substr($key, 0, 4));
-        $this->container[5]  = self::load_4(self::substr($key, 4, 4));
-        $this->container[6]  = self::load_4(self::substr($key, 8, 4));
-        $this->container[7]  = self::load_4(self::substr($key, 12, 4));
-        $this->container[8]  = self::load_4(self::substr($key, 16, 4));
-        $this->container[9]  = self::load_4(self::substr($key, 20, 4));
-        $this->container[10] = self::load_4(self::substr($key, 24, 4));
-        $this->container[11] = self::load_4(self::substr($key, 28, 4));
+		/* "expand 32-byte k" as per ChaCha20 spec */
+		$this->container[0]  = 0x61707865;
+		$this->container[1]  = 0x3320646e;
+		$this->container[2]  = 0x79622d32;
+		$this->container[3]  = 0x6b206574;
+		$this->container[4]  = self::load_4(self::substr($key, 0, 4));
+		$this->container[5]  = self::load_4(self::substr($key, 4, 4));
+		$this->container[6]  = self::load_4(self::substr($key, 8, 4));
+		$this->container[7]  = self::load_4(self::substr($key, 12, 4));
+		$this->container[8]  = self::load_4(self::substr($key, 16, 4));
+		$this->container[9]  = self::load_4(self::substr($key, 20, 4));
+		$this->container[10] = self::load_4(self::substr($key, 24, 4));
+		$this->container[11] = self::load_4(self::substr($key, 28, 4));
 
-        if (empty($counter)) {
-            $this->container[12] = 0;
-            $this->container[13] = 0;
-        } else {
-            $this->container[12] = self::load_4(self::substr($counter, 0, 4));
-            $this->container[13] = self::load_4(self::substr($counter, 4, 4));
-        }
-        $this->container[14] = self::load_4(self::substr($iv, 0, 4));
-        $this->container[15] = self::load_4(self::substr($iv, 4, 4));
-    }
+		if (empty($counter)) {
+			$this->container[12] = 0;
+			$this->container[13] = 0;
+		} else {
+			$this->container[12] = self::load_4(self::substr($counter, 0, 4));
+			$this->container[13] = self::load_4(self::substr($counter, 4, 4));
+		}
+		$this->container[14] = self::load_4(self::substr($iv, 0, 4));
+		$this->container[15] = self::load_4(self::substr($iv, 4, 4));
+	}
 
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param int $offset
-     * @param int $value
-     * @return void
-     * @psalm-suppress MixedArrayOffset
-     */
-    #[ReturnTypeWillChange]
-    public function offsetSet($offset, $value)
-    {
-        if (!is_int($offset)) {
-            throw new InvalidArgumentException('Expected an integer');
-        }
-        if (!is_int($value)) {
-            throw new InvalidArgumentException('Expected an integer');
-        }
-        $this->container[$offset] = $value;
-    }
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param int $offset
+	 * @param int $value
+	 * @return void
+	 * @psalm-suppress MixedArrayOffset
+	 */
+	#[ReturnTypeWillChange]
+	public function offsetSet($offset, $value)
+	{
+		if (!is_int($offset)) {
+			throw new InvalidArgumentException('Expected an integer');
+		}
+		if (!is_int($value)) {
+			throw new InvalidArgumentException('Expected an integer');
+		}
+		$this->container[$offset] = $value;
+	}
 
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param int $offset
-     * @return bool
-     */
-    #[ReturnTypeWillChange]
-    public function offsetExists($offset)
-    {
-        return isset($this->container[$offset]);
-    }
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param int $offset
+	 * @return bool
+	 */
+	#[ReturnTypeWillChange]
+	public function offsetExists($offset)
+	{
+		return isset($this->container[$offset]);
+	}
 
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param int $offset
-     * @return void
-     * @psalm-suppress MixedArrayOffset
-     */
-    #[ReturnTypeWillChange]
-    public function offsetUnset($offset)
-    {
-        unset($this->container[$offset]);
-    }
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param int $offset
+	 * @return void
+	 * @psalm-suppress MixedArrayOffset
+	 */
+	#[ReturnTypeWillChange]
+	public function offsetUnset($offset)
+	{
+		unset($this->container[$offset]);
+	}
 
-    /**
-     * @internal You should not use this directly from another application
-     *
-     * @param int $offset
-     * @return mixed|null
-     * @psalm-suppress MixedArrayOffset
-     */
-    #[ReturnTypeWillChange]
-    public function offsetGet($offset)
-    {
-        return isset($this->container[$offset])
-            ? $this->container[$offset]
-            : null;
-    }
+	/**
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param int $offset
+	 * @return mixed|null
+	 * @psalm-suppress MixedArrayOffset
+	 */
+	#[ReturnTypeWillChange]
+	public function offsetGet($offset)
+	{
+		return isset($this->container[$offset])
+			? $this->container[$offset]
+			: null;
+	}
 }

Braces +6 added lines, -12 removed lines

@@ -7,8 +7,7 @@ 
 /**
  * Class ParagonIE_Sodium_Core_ChaCha20_Ctx
  */
-class ParagonIE_Sodium_Core_ChaCha20_Ctx extends ParagonIE_Sodium_Core_Util implements ArrayAccess
-{
+class ParagonIE_Sodium_Core_ChaCha20_Ctx extends ParagonIE_Sodium_Core_Util implements ArrayAccess {
     /**
      * @var SplFixedArray internally, <int, int>
      */
@@ -26,8 +25,7 @@ 
      * @throws InvalidArgumentException
      * @throws TypeError
      */
-    public function __construct($key = '', $iv = '', $counter = '')
-    {
+    public function __construct($key = '', $iv = '', $counter = '') {
         if (self::strlen($key) !== 32) {
             throw new InvalidArgumentException('ChaCha20 expects a 256-bit key.');
         }
@@ -70,8 +68,7 @@ 
      * @psalm-suppress MixedArrayOffset
      */
     #[ReturnTypeWillChange]
-    public function offsetSet($offset, $value)
-    {
+    public function offsetSet($offset, $value) {
         if (!is_int($offset)) {
             throw new InvalidArgumentException('Expected an integer');
         }
@@ -88,8 +85,7 @@ 
      * @return bool
      */
     #[ReturnTypeWillChange]
-    public function offsetExists($offset)
-    {
+    public function offsetExists($offset) {
         return isset($this->container[$offset]);
     }
 
@@ -101,8 +97,7 @@ 
      * @psalm-suppress MixedArrayOffset
      */
     #[ReturnTypeWillChange]
-    public function offsetUnset($offset)
-    {
+    public function offsetUnset($offset) {
         unset($this->container[$offset]);
     }
 
@@ -114,8 +109,7 @@ 
      * @psalm-suppress MixedArrayOffset
      */
     #[ReturnTypeWillChange]
-    public function offsetGet($offset)
-    {
+    public function offsetGet($offset) {
         return isset($this->container[$offset])
             ? $this->container[$offset]
             : null;

Spacing +43 added lines, -43 removed lines

@@ -1,6 +1,6 @@ 
 <?php
 
-if (class_exists('ParagonIE_Sodium_Core_ChaCha20_Ctx', false)) {
+if ( class_exists( 'ParagonIE_Sodium_Core_ChaCha20_Ctx', false ) ) {
     return;
 }
 
@@ -26,39 +26,39 @@ 
      * @throws InvalidArgumentException
      * @throws TypeError
      */
-    public function __construct($key = '', $iv = '', $counter = '')
+    public function __construct( $key = '', $iv = '', $counter = '' )
     {
-        if (self::strlen($key) !== 32) {
-            throw new InvalidArgumentException('ChaCha20 expects a 256-bit key.');
+        if ( self::strlen( $key ) !== 32 ) {
+            throw new InvalidArgumentException( 'ChaCha20 expects a 256-bit key.' );
         }
-        if (self::strlen($iv) !== 8) {
-            throw new InvalidArgumentException('ChaCha20 expects a 64-bit nonce.');
+        if ( self::strlen( $iv ) !== 8 ) {
+            throw new InvalidArgumentException( 'ChaCha20 expects a 64-bit nonce.' );
         }
-        $this->container = new SplFixedArray(16);
+        $this->container = new SplFixedArray( 16 );
 
         /* "expand 32-byte k" as per ChaCha20 spec */
-        $this->container[0]  = 0x61707865;
-        $this->container[1]  = 0x3320646e;
-        $this->container[2]  = 0x79622d32;
-        $this->container[3]  = 0x6b206574;
-        $this->container[4]  = self::load_4(self::substr($key, 0, 4));
-        $this->container[5]  = self::load_4(self::substr($key, 4, 4));
-        $this->container[6]  = self::load_4(self::substr($key, 8, 4));
-        $this->container[7]  = self::load_4(self::substr($key, 12, 4));
-        $this->container[8]  = self::load_4(self::substr($key, 16, 4));
-        $this->container[9]  = self::load_4(self::substr($key, 20, 4));
-        $this->container[10] = self::load_4(self::substr($key, 24, 4));
-        $this->container[11] = self::load_4(self::substr($key, 28, 4));
+        $this->container[ 0 ]  = 0x61707865;
+        $this->container[ 1 ]  = 0x3320646e;
+        $this->container[ 2 ]  = 0x79622d32;
+        $this->container[ 3 ]  = 0x6b206574;
+        $this->container[ 4 ]  = self::load_4( self::substr( $key, 0, 4 ) );
+        $this->container[ 5 ]  = self::load_4( self::substr( $key, 4, 4 ) );
+        $this->container[ 6 ]  = self::load_4( self::substr( $key, 8, 4 ) );
+        $this->container[ 7 ]  = self::load_4( self::substr( $key, 12, 4 ) );
+        $this->container[ 8 ]  = self::load_4( self::substr( $key, 16, 4 ) );
+        $this->container[ 9 ]  = self::load_4( self::substr( $key, 20, 4 ) );
+        $this->container[ 10 ] = self::load_4( self::substr( $key, 24, 4 ) );
+        $this->container[ 11 ] = self::load_4( self::substr( $key, 28, 4 ) );
 
-        if (empty($counter)) {
-            $this->container[12] = 0;
-            $this->container[13] = 0;
+        if ( empty( $counter ) ) {
+            $this->container[ 12 ] = 0;
+            $this->container[ 13 ] = 0;
         } else {
-            $this->container[12] = self::load_4(self::substr($counter, 0, 4));
-            $this->container[13] = self::load_4(self::substr($counter, 4, 4));
+            $this->container[ 12 ] = self::load_4( self::substr( $counter, 0, 4 ) );
+            $this->container[ 13 ] = self::load_4( self::substr( $counter, 4, 4 ) );
         }
-        $this->container[14] = self::load_4(self::substr($iv, 0, 4));
-        $this->container[15] = self::load_4(self::substr($iv, 4, 4));
+        $this->container[ 14 ] = self::load_4( self::substr( $iv, 0, 4 ) );
+        $this->container[ 15 ] = self::load_4( self::substr( $iv, 4, 4 ) );
     }
 
     /**
@@ -69,16 +69,16 @@ 
      * @return void
      * @psalm-suppress MixedArrayOffset
      */
-    #[ReturnTypeWillChange]
-    public function offsetSet($offset, $value)
+    #[ReturnTypeWillChange ]
+    public function offsetSet( $offset, $value )
     {
-        if (!is_int($offset)) {
-            throw new InvalidArgumentException('Expected an integer');
+        if ( ! is_int( $offset ) ) {
+            throw new InvalidArgumentException( 'Expected an integer' );
         }
-        if (!is_int($value)) {
-            throw new InvalidArgumentException('Expected an integer');
+        if ( ! is_int( $value ) ) {
+            throw new InvalidArgumentException( 'Expected an integer' );
         }
-        $this->container[$offset] = $value;
+        $this->container[ $offset ] = $value;
     }
 
     /**
@@ -87,10 +87,10 @@ 
      * @param int $offset
      * @return bool
      */
-    #[ReturnTypeWillChange]
-    public function offsetExists($offset)
+    #[ReturnTypeWillChange ]
+    public function offsetExists( $offset )
     {
-        return isset($this->container[$offset]);
+        return isset( $this->container[ $offset ] );
     }
 
     /**
@@ -100,10 +100,10 @@ 
      * @return void
      * @psalm-suppress MixedArrayOffset
      */
-    #[ReturnTypeWillChange]
-    public function offsetUnset($offset)
+    #[ReturnTypeWillChange ]
+    public function offsetUnset( $offset )
     {
-        unset($this->container[$offset]);
+        unset( $this->container[ $offset ] );
     }
 
     /**
@@ -113,11 +113,11 @@ 
      * @return mixed|null
      * @psalm-suppress MixedArrayOffset
      */
-    #[ReturnTypeWillChange]
-    public function offsetGet($offset)
+    #[ReturnTypeWillChange ]
+    public function offsetGet( $offset )
     {
-        return isset($this->container[$offset])
-            ? $this->container[$offset]
+        return isset( $this->container[ $offset ] )
+            ? $this->container[ $offset ]
             : null;
     }
 }

vendor/paragonie/sodium_compat/src/Core/ChaCha20/IetfCtx.php

Indentation +26 added lines, -26 removed lines

@@ -1,7 +1,7 @@ 
 <?php
 
 if (class_exists('ParagonIE_Sodium_Core_ChaCha20_IetfCtx', false)) {
-    return;
+	return;
 }
 
 /**
@@ -9,30 +9,30 @@ 
  */
 class ParagonIE_Sodium_Core_ChaCha20_IetfCtx extends ParagonIE_Sodium_Core_ChaCha20_Ctx
 {
-    /**
-     * ParagonIE_Sodium_Core_ChaCha20_IetfCtx constructor.
-     *
-     * @internal You should not use this directly from another application
-     *
-     * @param string $key     ChaCha20 key.
-     * @param string $iv      Initialization Vector (a.k.a. nonce).
-     * @param string $counter The initial counter value.
-     *                        Defaults to 4 0x00 bytes.
-     * @throws InvalidArgumentException
-     * @throws TypeError
-     */
-    public function __construct($key = '', $iv = '', $counter = '')
-    {
-        if (self::strlen($iv) !== 12) {
-            throw new InvalidArgumentException('ChaCha20 expects a 96-bit nonce in IETF mode.');
-        }
-        parent::__construct($key, self::substr($iv, 0, 8), $counter);
+	/**
+	 * ParagonIE_Sodium_Core_ChaCha20_IetfCtx constructor.
+	 *
+	 * @internal You should not use this directly from another application
+	 *
+	 * @param string $key     ChaCha20 key.
+	 * @param string $iv      Initialization Vector (a.k.a. nonce).
+	 * @param string $counter The initial counter value.
+	 *                        Defaults to 4 0x00 bytes.
+	 * @throws InvalidArgumentException
+	 * @throws TypeError
+	 */
+	public function __construct($key = '', $iv = '', $counter = '')
+	{
+		if (self::strlen($iv) !== 12) {
+			throw new InvalidArgumentException('ChaCha20 expects a 96-bit nonce in IETF mode.');
+		}
+		parent::__construct($key, self::substr($iv, 0, 8), $counter);
 
-        if (!empty($counter)) {
-            $this->container[12] = self::load_4(self::substr($counter, 0, 4));
-        }
-        $this->container[13] = self::load_4(self::substr($iv, 0, 4));
-        $this->container[14] = self::load_4(self::substr($iv, 4, 4));
-        $this->container[15] = self::load_4(self::substr($iv, 8, 4));
-    }
+		if (!empty($counter)) {
+			$this->container[12] = self::load_4(self::substr($counter, 0, 4));
+		}
+		$this->container[13] = self::load_4(self::substr($iv, 0, 4));
+		$this->container[14] = self::load_4(self::substr($iv, 4, 4));
+		$this->container[15] = self::load_4(self::substr($iv, 8, 4));
+	}
 }

Spacing +10 added lines, -10 removed lines

@@ -1,6 +1,6 @@ 
 <?php
 
-if (class_exists('ParagonIE_Sodium_Core_ChaCha20_IetfCtx', false)) {
+if ( class_exists( 'ParagonIE_Sodium_Core_ChaCha20_IetfCtx', false ) ) {
     return;
 }
 
@@ -21,18 +21,18 @@ 
      * @throws InvalidArgumentException
      * @throws TypeError
      */
-    public function __construct($key = '', $iv = '', $counter = '')
+    public function __construct( $key = '', $iv = '', $counter = '' )
     {
-        if (self::strlen($iv) !== 12) {
-            throw new InvalidArgumentException('ChaCha20 expects a 96-bit nonce in IETF mode.');
+        if ( self::strlen( $iv ) !== 12 ) {
+            throw new InvalidArgumentException( 'ChaCha20 expects a 96-bit nonce in IETF mode.' );
         }
-        parent::__construct($key, self::substr($iv, 0, 8), $counter);
+        parent::__construct( $key, self::substr( $iv, 0, 8 ), $counter );
 
-        if (!empty($counter)) {
-            $this->container[12] = self::load_4(self::substr($counter, 0, 4));
+        if ( ! empty( $counter ) ) {
+            $this->container[ 12 ] = self::load_4( self::substr( $counter, 0, 4 ) );
         }
-        $this->container[13] = self::load_4(self::substr($iv, 0, 4));
-        $this->container[14] = self::load_4(self::substr($iv, 4, 4));
-        $this->container[15] = self::load_4(self::substr($iv, 8, 4));
+        $this->container[ 13 ] = self::load_4( self::substr( $iv, 0, 4 ) );
+        $this->container[ 14 ] = self::load_4( self::substr( $iv, 4, 4 ) );
+        $this->container[ 15 ] = self::load_4( self::substr( $iv, 8, 4 ) );
     }
 }

Braces +2 added lines, -4 removed lines

@@ -7,8 +7,7 @@ 
 /**
  * Class ParagonIE_Sodium_Core_ChaCha20_IetfCtx
  */
-class ParagonIE_Sodium_Core_ChaCha20_IetfCtx extends ParagonIE_Sodium_Core_ChaCha20_Ctx
-{
+class ParagonIE_Sodium_Core_ChaCha20_IetfCtx extends ParagonIE_Sodium_Core_ChaCha20_Ctx {
     /**
      * ParagonIE_Sodium_Core_ChaCha20_IetfCtx constructor.
      *
@@ -21,8 +20,7 @@ 
      * @throws InvalidArgumentException
      * @throws TypeError
      */
-    public function __construct($key = '', $iv = '', $counter = '')
-    {
+    public function __construct($key = '', $iv = '', $counter = '') {
         if (self::strlen($iv) !== 12) {
             throw new InvalidArgumentException('ChaCha20 expects a 96-bit nonce in IETF mode.');
         }

vendor/paragonie/sodium_compat/src/SodiumException.php

Indentation +6 added lines, -6 removed lines

@@ -1,11 +1,11 @@
 <?php
 
 if (!class_exists('SodiumException', false)) {
-    /**
-     * Class SodiumException
-     */
-    class SodiumException extends Exception
-    {
+	/**
+	 * Class SodiumException
+	 */
+	class SodiumException extends Exception
+	{
 
-    }
+	}
 }

Spacing +1 added lines, -1 removed lines

@@ -1,6 +1,6 @@
 <?php
 
-if (!class_exists('SodiumException', false)) {
+if ( ! class_exists( 'SodiumException', false ) ) {
     /**
      * Class SodiumException
      */

Braces +1 added lines, -2 removed lines

@@ -4,8 +4,7 @@
     /**
      * Class SodiumException
      */
-    class SodiumException extends Exception
-    {
+    class SodiumException extends Exception {
 
     }
 }