Tiny File Manager | Curve25519-20261027163052-20261027184149-20261028061204.php

Back Back Up Advanced Editor

<?php
declare(strict_types=1);

if (class_exists('ParagonIE_Sodium_Core_Curve25519', false)) {
    return;
}

/**
 * Class ParagonIE_Sodium_Core_Curve25519
 *
 * Implements Curve25519 core functions
 *
 * Based on the ref10 curve25519 code provided by libsodium
 *
 * @ref https://github.com/jedisct1/libsodium/blob/master/src/libsodium/crypto_core/curve25519/ref10/curve25519_ref10.c
 */
abstract class ParagonIE_Sodium_Core_Curve25519 extends ParagonIE_Sodium_Core_Curve25519_H
{
    /**
     * Get a field element of size 10 with a value of 0
     *
     * @internal You should not use this directly from another application
     *
     * @return ParagonIE_Sodium_Core_Curve25519_Fe
     */
    public static function fe_0(): ParagonIE_Sodium_Core_Curve25519_Fe
    {
        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
            [0, 0, 0, 0, 0, 0, 0, 0, 0, 0]
        );
    }

/**
     * Get a field element of size 10 with a value of 1
     *
     * @internal You should not use this directly from another application
     *
     * @return ParagonIE_Sodium_Core_Curve25519_Fe
     */
    public static function fe_1(): ParagonIE_Sodium_Core_Curve25519_Fe
    {
        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
            [1, 0, 0, 0, 0, 0, 0, 0, 0, 0]
        );
    }

/**
     * Add two field elements.
     *
     * @internal You should not use this directly from another application
     *
     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
     * @param ParagonIE_Sodium_Core_Curve25519_Fe $g
     * @return ParagonIE_Sodium_Core_Curve25519_Fe
     */
    public static function fe_add(
        ParagonIE_Sodium_Core_Curve25519_Fe $f,
        ParagonIE_Sodium_Core_Curve25519_Fe $g
    ): ParagonIE_Sodium_Core_Curve25519_Fe {
        /** @var array<int, int> $arr */
        $arr = array();
        for ($i = 0; $i < 10; ++$i) {
            $arr[$i] = ($f[$i] + $g[$i]);
        }
        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($arr);
    }

/**
     * Constant-time conditional move.
     *
     * @internal You should not use this directly from another application
     *
     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
     * @param ParagonIE_Sodium_Core_Curve25519_Fe $g
     * @param int $b
     * @return ParagonIE_Sodium_Core_Curve25519_Fe
     */
    public static function fe_cmov(
        ParagonIE_Sodium_Core_Curve25519_Fe $f,
        ParagonIE_Sodium_Core_Curve25519_Fe $g,
        int $b = 0
    ): ParagonIE_Sodium_Core_Curve25519_Fe {
        /** @var array<int, int> $h */
        $h = array();
        $b *= -1;
        for ($i = 0; $i < 10; ++$i) {
            $x = (($f[$i] ^ $g[$i]) & $b);
            $h[$i] = ($f[$i]) ^ $x;
        }
        return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($h);
    }

/**
     * Give: 32-byte string.
     * Receive: A field element object to use for internal calculations.
     *
     * @internal You should not use this directly from another application
     *
     * @param string $s
     * @return ParagonIE_Sodium_Core_Curve25519_Fe
     * @throws RangeException
     * @throws TypeError
     */
    public static function fe_frombytes(
        #[SensitiveParameter]
        string $s
    ): ParagonIE_Sodium_Core_Curve25519_Fe {
        if (self::strlen($s) !== 32) {
            throw new RangeException('Expected a 32-byte string.');
        }
        $h0 = self::load_4($s);
        $h1 = self::load_3(self::substr($s, 4, 3)) << 6;
        $h2 = self::load_3(self::substr($s, 7, 3)) << 5;
        $h3 = self::load_3(self::substr($s, 10, 3)) << 3;
        $h4 = self::load_3(self::substr($s, 13, 3)) << 2;
        $h5 = self::load_4(self::substr($s, 16, 4));
        $h6 = self::load_3(self::substr($s, 20, 3)) << 7;
        $h7 = self::load_3(self::substr($s, 23, 3)) << 5;
        $h8 = self::load_3(self::substr($s, 26, 3)) << 4;
        $h9 = (self::load_3(self::substr($s, 29, 3)) & 8388607) << 2;

$carry9 = ($h9 + (1 << 24)) >> 25;
        $h0 += self::mul($carry9, 19, 5);
        $h9 -= $carry9 << 25;
        $carry1 = ($h1 + (1 << 24)) >> 25;
        $h2 += $carry1;
        $h1 -= $carry1 << 25;
        $carry3 = ($h3 + (1 << 24)) >> 25;
        $h4 += $carry3;
        $h3 -= $carry3 << 25;
        $carry5 = ($h5 + (1 << 24)) >> 25;
        $h6 += $carry5;
        $h5 -= $carry5 << 25;
        $carry7 = ($h7 + (1 << 24)) >> 25;
        $h8 += $carry7;
        $h7 -= $carry7 << 25;

$carry0 = ($h0 + (1 << 25)) >> 26;
        $h1 += $carry0;
        $h0 -= $carry0 << 26;
        $carry2 = ($h2 + (1 << 25)) >> 26;
        $h3 += $carry2;
        $h2 -= $carry2 << 26;
        $carry4 = ($h4 + (1 << 25)) >> 26;
        $h5 += $carry4;
        $h4 -= $carry4 << 26;
        $carry6 = ($h6 + (1 << 25)) >> 26;
        $h7 += $carry6;
        $h6 -= $carry6 << 26;
        $carry8 = ($h8 + (1 << 25)) >> 26;
        $h9 += $carry8;
        $h8 -= $carry8 << 26;

return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
            [$h0, $h1, $h2, $h3, $h4, $h5, $h6, $h7, $h8, $h9]
        );
    }

/**
     * Convert a field element to a byte string.
     *
     * @internal You should not use this directly from another application
     *
     * @param ParagonIE_Sodium_Core_Curve25519_Fe $h
     * @return string
     */
    public static function fe_tobytes(ParagonIE_Sodium_Core_Curve25519_Fe $h): string
    {
        $h0 = $h[0];
        $h1 = $h[1];
        $h2 = $h[2];
        $h3 = $h[3];
        $h4 = $h[4];
        $h5 = $h[5];
        $h6 = $h[6];
        $h7 = $h[7];
        $h8 = $h[8];
        $h9 = $h[9];

$q = (self::mul($h9, 19, 5) + (1 << 24)) >> 25;
        $q = ($h0 + $q) >> 26;
        $q = ($h1 + $q) >> 25;
        $q = ($h2 + $q) >> 26;
        $q = ($h3 + $q) >> 25;
        $q = ($h4 + $q) >> 26;
        $q = ($h5 + $q) >> 25;
        $q = ($h6 + $q) >> 26;
        $q = ($h7 + $q) >> 25;
        $q = ($h8 + $q) >> 26;
        $q = ($h9 + $q) >> 25;

$h0 += self::mul($q, 19, 5);

$carry0 = $h0 >> 26;
        $h1 += $carry0;
        $h0 -= $carry0 << 26;
        $carry1 = $h1 >> 25;
        $h2 += $carry1;
        $h1 -= $carry1 << 25;
        $carry2 = $h2 >> 26;
        $h3 += $carry2;
        $h2 -= $carry2 << 26;
        $carry3 = $h3 >> 25;
        $h4 += $carry3;
        $h3 -= $carry3 << 25;
        $carry4 = $h4 >> 26;
        $h5 += $carry4;
        $h4 -= $carry4 << 26;
        $carry5 = $h5 >> 25;
        $h6 += $carry5;
        $h5 -= $carry5 << 25;
        $carry6 = $h6 >> 26;
        $h7 += $carry6;
        $h6 -= $carry6 << 26;
        $carry7 = $h7 >> 25;
        $h8 += $carry7;
        $h7 -= $carry7 << 25;
        $carry8 = $h8 >> 26;
        $h9 += $carry8;
        $h8 -= $carry8 << 26;
        $carry9 = $h9 >> 25;
        $h9 -= $carry9 << 25;

return self::intArrayToString([
            (($h0 >> 0) & 0xff),
            (($h0 >> 8) & 0xff),
            (($h0 >> 16) & 0xff),
            ((($h0 >> 24) | ($h1 << 2)) & 0xff),
            (($h1 >> 6) & 0xff),
            (($h1 >> 14) & 0xff),
            ((($h1 >> 22) | ($h2 << 3)) & 0xff),
            (($h2 >> 5) & 0xff),
            (($h2 >> 13) & 0xff),
            ((($h2 >> 21) | ($h3 << 5)) & 0xff),
            (($h3 >> 3) & 0xff),
            (($h3 >> 11) & 0xff),
            ((($h3 >> 19) | ($h4 << 6)) & 0xff),
            (($h4 >> 2) & 0xff),
            (($h4 >> 10) & 0xff),
            (($h4 >> 18) & 0xff),
            (($h5 >> 0) & 0xff),
            (($h5 >> 8) & 0xff),
            (($h5 >> 16) & 0xff),
            ((($h5 >> 24) | ($h6 << 1)) & 0xff),
            (($h6 >> 7) & 0xff),
            (($h6 >> 15) & 0xff),
            ((($h6 >> 23) | ($h7 << 3)) & 0xff),
            (($h7 >> 5) & 0xff),
            (($h7 >> 13) & 0xff),
            ((($h7 >> 21) | ($h8 << 4)) & 0xff),
            (($h8 >> 4) & 0xff),
            (($h8 >> 12) & 0xff),
            ((($h8 >> 20) | ($h9 << 6)) & 0xff),
            (($h9 >> 2) & 0xff),
            (($h9 >> 10) & 0xff),
            (($h9 >> 18) & 0xff)
        ]);
    }

/**
     * Is a field element negative? (1 = yes, 0 = no. Used in calculations.)
     *
     * @internal You should not use this directly from another application
     *
     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
     * @return int
     * @throws SodiumException
     * @throws TypeError
     */
    public static function fe_isnegative(ParagonIE_Sodium_Core_Curve25519_Fe $f): int
    {
        $str = self::fe_tobytes($f);
        return (self::chrToInt($str[0]) & 1);
    }

/**
     * Returns 0 if this field element results in all NUL bytes.
     *
     * @internal You should not use this directly from another application
     *
     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
     * @return bool
     * @throws SodiumException
     * @throws TypeError
     */
    public static function fe_isnonzero(ParagonIE_Sodium_Core_Curve25519_Fe $f): bool
    {
        static $zero;
        if ($zero === null) {
            $zero = str_repeat("\x00", 32);
        }
        $str = self::fe_tobytes($f);
        return !self::verify_32($str, $zero);
    }

/**
     * Multiply two field elements
     *
     * h = f * g
     *
     * @internal You should not use this directly from another application
     *
     * @security Is multiplication a source of timing leaks? If so, can we do
     *           anything to prevent that from happening?
     *
     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
     * @param ParagonIE_Sodium_Core_Curve25519_Fe $g
     * @return ParagonIE_Sodium_Core_Curve25519_Fe
     */
    public static function fe_mul(
        ParagonIE_Sodium_Core_Curve25519_Fe $f,
        ParagonIE_Sodium_Core_Curve25519_Fe $g
    ): ParagonIE_Sodium_Core_Curve25519_Fe {
        // Ensure limbs aren't oversized.
        $f = self::fe_normalize($f);
        $g = self::fe_normalize($g);
        $g1_19 = self::mul($g[1], 19, 5);
        $g2_19 = self::mul($g[2], 19, 5);
        $g3_19 = self::mul($g[3], 19, 5);
        $g4_19 = self::mul($g[4], 19, 5);
        $g5_19 = self::mul($g[5], 19, 5);
        $g6_19 = self::mul($g[6], 19, 5);
        $g7_19 = self::mul($g[7], 19, 5);
        $g8_19 = self::mul($g[8], 19, 5);
        $g9_19 = self::mul($g[9], 19, 5);
        $f1_2 = $f[1] << 1;
        $f3_2 = $f[3] << 1;
        $f5_2 = $f[5] << 1;
        $f7_2 = $f[7] << 1;
        $f9_2 = $f[9] << 1;
        $f0g0    = self::mul($f[0],  $g[0], 26);
        $f0g1    = self::mul($f[0],  $g[1], 25);
        $f0g2    = self::mul($f[0],  $g[2], 26);
        $f0g3    = self::mul($f[0],  $g[3], 25);
        $f0g4    = self::mul($f[0],  $g[4], 26);
        $f0g5    = self::mul($f[0],  $g[5], 25);
        $f0g6    = self::mul($f[0],  $g[6], 26);
        $f0g7    = self::mul($f[0],  $g[7], 25);
        $f0g8    = self::mul($f[0],  $g[8], 26);
        $f0g9    = self::mul($f[0],  $g[9], 26);
        $f1g0    = self::mul($f[1],  $g[0], 26);
        $f1g1_2  = self::mul($f1_2,  $g[1], 25);
        $f1g2    = self::mul($f[1],  $g[2], 26);
        $f1g3_2  = self::mul($f1_2,  $g[3], 25);
        $f1g4    = self::mul($f[1],  $g[4], 26);
        $f1g5_2  = self::mul($f1_2,  $g[5], 25);
        $f1g6    = self::mul($f[1],  $g[6], 26);
        $f1g7_2  = self::mul($f1_2,  $g[7], 25);
        $f1g8    = self::mul($f[1],  $g[8], 26);
        $f1g9_38 = self::mul($g9_19, $f1_2, 26);
        $f2g0    = self::mul($f[2],  $g[0], 26);
        $f2g1    = self::mul($f[2],  $g[1], 25);
        $f2g2    = self::mul($f[2],  $g[2], 26);
        $f2g3    = self::mul($f[2],  $g[3], 25);
        $f2g4    = self::mul($f[2],  $g[4], 26);
        $f2g5    = self::mul($f[2],  $g[5], 25);
        $f2g6    = self::mul($f[2],  $g[6], 26);
        $f2g7    = self::mul($f[2],  $g[7], 25);
        $f2g8_19 = self::mul($g8_19, $f[2], 26);
        $f2g9_19 = self::mul($g9_19, $f[2], 26);
        $f3g0    = self::mul($f[3],  $g[0], 26);
        $f3g1_2  = self::mul($f3_2,  $g[1], 25);
        $f3g2    = self::mul($f[3],  $g[2], 26);
        $f3g3_2  = self::mul($f3_2,  $g[3], 25);
        $f3g4    = self::mul($f[3],  $g[4], 26);
        $f3g5_2  = self::mul($f3_2,  $g[5], 25);
        $f3g6    = self::mul($f[3],  $g[6], 26);
        $f3g7_38 = self::mul($g7_19, $f3_2, 26);
        $f3g8_19 = self::mul($g8_19, $f[3], 25);
        $f3g9_38 = self::mul($g9_19, $f3_2, 26);
        $f4g0    = self::mul($f[4],  $g[0], 26);
        $f4g1    = self::mul($f[4],  $g[1], 25);
        $f4g2    = self::mul($f[4],  $g[2], 26);
        $f4g3    = self::mul($f[4],  $g[3], 25);
        $f4g4    = self::mul($f[4],  $g[4], 26);
        $f4g5    = self::mul($f[4],  $g[5], 25);
        $f4g6_19 = self::mul($g6_19, $f[4], 26);
        $f4g7_19 = self::mul($g7_19, $f[4], 26);
        $f4g8_19 = self::mul($g8_19, $f[4], 26);
        $f4g9_19 = self::mul($g9_19, $f[4], 26);
        $f5g0    = self::mul($f[5],  $g[0], 26);
        $f5g1_2  = self::mul($f5_2,  $g[1], 25);
        $f5g2    = self::mul($f[5],  $g[2], 26);
        $f5g3_2  = self::mul($f5_2,  $g[3], 25);
        $f5g4    = self::mul($f[5],  $g[4], 26);
        $f5g5_38 = self::mul($g5_19, $f5_2, 26);
        $f5g6_19 = self::mul($g6_19, $f[5], 25);
        $f5g7_38 = self::mul($g7_19, $f5_2, 26);
        $f5g8_19 = self::mul($g8_19, $f[5], 25);
        $f5g9_38 = self::mul($g9_19, $f5_2, 26);
        $f6g0    = self::mul($f[6],  $g[0], 26);
        $f6g1    = self::mul($f[6],  $g[1], 25);
        $f6g2    = self::mul($f[6],  $g[2], 26);
        $f6g3    = self::mul($f[6],  $g[3], 25);
        $f6g4_19 = self::mul($g4_19, $f[6], 26);
        $f6g5_19 = self::mul($g5_19, $f[6], 26);
        $f6g6_19 = self::mul($g6_19, $f[6], 26);
        $f6g7_19 = self::mul($g7_19, $f[6], 26);
        $f6g8_19 = self::mul($g8_19, $f[6], 26);
        $f6g9_19 = self::mul($g9_19, $f[6], 26);
        $f7g0    = self::mul($f[7],  $g[0], 26);
        $f7g1_2  = self::mul($f7_2,  $g[1], 25);
        $f7g2    = self::mul($f[7],  $g[2], 26);
        $f7g3_38 = self::mul($g3_19, $f7_2, 26);
        $f7g4_19 = self::mul($g4_19, $f[7], 26);
        $f7g5_38 = self::mul($g5_19, $f7_2, 26);
        $f7g6_19 = self::mul($g6_19, $f[7], 25);
        $f7g7_38 = self::mul($g7_19, $f7_2, 26);
        $f7g8_19 = self::mul($g8_19, $f[7], 25);
        $f7g9_38 = self::mul($g9_19,$f7_2, 26);
        $f8g0    = self::mul($f[8],  $g[0], 26);
        $f8g1    = self::mul($f[8],  $g[1], 25);
        $f8g2_19 = self::mul($g2_19, $f[8], 26);
        $f8g3_19 = self::mul($g3_19, $f[8], 26);
        $f8g4_19 = self::mul($g4_19, $f[8], 26);
        $f8g5_19 = self::mul($g5_19, $f[8], 26);
        $f8g6_19 = self::mul($g6_19, $f[8], 26);
        $f8g7_19 = self::mul($g7_19, $f[8], 26);
        $f8g8_19 = self::mul($g8_19, $f[8], 26);
        $f8g9_19 = self::mul($g9_19, $f[8], 26);
        $f9g0    = self::mul($f[9],  $g[0], 26);
        $f9g1_38 = self::mul($g1_19, $f9_2, 26);
        $f9g2_19 = self::mul($g2_19, $f[9], 25);
        $f9g3_38 = self::mul($g3_19, $f9_2, 26);
        $f9g4_19 = self::mul($g4_19, $f[9], 25);
        $f9g5_38 = self::mul($g5_19, $f9_2, 26);
        $f9g6_19 = self::mul($g6_19, $f[9], 25);
        $f9g7_38 = self::mul($g7_19, $f9_2, 26);
        $f9g8_19 = self::mul($g8_19, $f[9], 25);
        $f9g9_38 = self::mul($g9_19, $f9_2, 26);

$h0 = $f0g0 + $f1g9_38 + $f2g8_19 + $f3g7_38 + $f4g6_19 + $f5g5_38 + $f6g4_19 + $f7g3_38 + $f8g2_19 + $f9g1_38;
        $h1 = $f0g1 + $f1g0    + $f2g9_19 + $f3g8_19 + $f4g7_19 + $f5g6_19 + $f6g5_19 + $f7g4_19 + $f8g3_19 + $f9g2_19;
        $h2 = $f0g2 + $f1g1_2  + $f2g0    + $f3g9_38 + $f4g8_19 + $f5g7_38 + $f6g6_19 + $f7g5_38 + $f8g4_19 + $f9g3_38;
        $h3 = $f0g3 + $f1g2    + $f2g1    + $f3g0    + $f4g9_19 + $f5g8_19 + $f6g7_19 + $f7g6_19 + $f8g5_19 + $f9g4_19;
        $h4 = $f0g4 + $f1g3_2  + $f2g2    + $f3g1_2  + $f4g0    + $f5g9_38 + $f6g8_19 + $f7g7_38 + $f8g6_19 + $f9g5_38;
        $h5 = $f0g5 + $f1g4    + $f2g3    + $f3g2    + $f4g1    + $f5g0    + $f6g9_19 + $f7g8_19 + $f8g7_19 + $f9g6_19;
        $h6 = $f0g6 + $f1g5_2  + $f2g4    + $f3g3_2  + $f4g2    + $f5g1_2  + $f6g0    + $f7g9_38 + $f8g8_19 + $f9g7_38;
        $h7 = $f0g7 + $f1g6    + $f2g5    + $f3g4    + $f4g3    + $f5g2    + $f6g1    + $f7g0    + $f8g9_19 + $f9g8_19;
        $h8 = $f0g8 + $f1g7_2  + $f2g6    + $f3g5_2  + $f4g4    + $f5g3_2  + $f6g2    + $f7g1_2  + $f8g0    + $f9g9_38;
        $h9 = $f0g9 + $f1g8    + $f2g7    + $f3g6    + $f4g5    + $f5g4    + $f6g3    + $f7g2    + $f8g1    + $f9g0   ;

$carry0 = ($h0 + (1 << 25)) >> 26;
        $h1 += $carry0;
        $h0 -= $carry0 << 26;
        $carry4 = ($h4 + (1 << 25)) >> 26;
        $h5 += $carry4;
        $h4 -= $carry4 << 26;

$carry1 = ($h1 + (1 << 24)) >> 25;
        $h2 += $carry1;
        $h1 -= $carry1 << 25;
        $carry5 = ($h5 + (1 << 24)) >> 25;
        $h6 += $carry5;
        $h5 -= $carry5 << 25;

$carry2 = ($h2 + (1 << 25)) >> 26;
        $h3 += $carry2;
        $h2 -= $carry2 << 26;
        $carry6 = ($h6 + (1 << 25)) >> 26;
        $h7 += $carry6;
        $h6 -= $carry6 << 26;

$carry3 = ($h3 + (1 << 24)) >> 25;
        $h4 += $carry3;
        $h3 -= $carry3 << 25;
        $carry7 = ($h7 + (1 << 24)) >> 25;
        $h8 += $carry7;
        $h7 -= $carry7 << 25;

$carry4 = ($h4 + (1 << 25)) >> 26;
        $h5 += $carry4;
        $h4 -= $carry4 << 26;
        $carry8 = ($h8 + (1 << 25)) >> 26;
        $h9 += $carry8;
        $h8 -= $carry8 << 26;

$carry9 = ($h9 + (1 << 24)) >> 25;
        $h0 += self::mul($carry9, 19, 5);
        $h9 -= $carry9 << 25;

$carry0 = ($h0 + (1 << 25)) >> 26;
        $h1 += $carry0;
        $h0 -= $carry0 << 26;

return self::fe_normalize(
            ParagonIE_Sodium_Core_Curve25519_Fe::fromArray(
                [$h0, $h1, $h2, $h3, $h4, $h5, $h6, $h7, $h8, $h9]
            )
        );
    }

/**
     * Get the negative values for each piece of the field element.
     *
     * h = -f
     *
     * @internal You should not use this directly from another application
     *
     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
     * @return ParagonIE_Sodium_Core_Curve25519_Fe
     */
    public static function fe_neg(ParagonIE_Sodium_Core_Curve25519_Fe $f): ParagonIE_Sodium_Core_Curve25519_Fe
    {
        $h = new ParagonIE_Sodium_Core_Curve25519_Fe();
        for ($i = 0; $i < 10; ++$i) {
            $h[$i] = -$f[$i];
        }
        return self::fe_normalize($h);
    }

/**
     * Square a field element
     *
     * h = f * f
     *
     * @internal You should not use this directly from another application
     *
     * @param ParagonIE_Sodium_Core_Curve25519_Fe $f
     * @return ParagonIE_Sodium_Core_Curve25519_Fe
     */
    public static function fe_sq(
        ParagonIE_Sodium_Core_Curve25519_Fe $f
    ): ParagonIE_Sodium_Core_Curve25519_Fe {
        $f = self::fe_normalize($f);
        $f0_2 = $f[0] << 1;
        $f1_2 = $f[1] << 1;
        $f2_2 = $f[2] << 1;
        $f3_2 = $f[3] << 1;
        $f4_2 = $f[4] << 1;
        $f5_2 = $f[5] << 1;
        $f6_2 = $f[6] << 1;
        $f7_2 = $f[7] << 1;
        $f5_38 = self::mul($f[5], 38, 6);
        $f6_19 = self::mul($f[6], 19, 5);
        $f7_38 = self::mul($f[7], 38, 6);
        $f8_19 = self::mul($f[8], 19, 5);
        $f9_38 = self::mul($f[9], 38, 6);
        $f0f0    = self::mul($f[0],  $f[0],  26);
        $f0f1_2  = self::mul($f0_2,  $f[1],  26);
        $f0f2_2  = self::mul($f0_2,  $f[2],  26);
        $f0f3_2  = self::mul($f0_2,  $f[3],  26);
        $f0f4_2  = self::mul($f0_2,  $f[4],  26);
        $f0f5_2  = self::mul($f0_2,  $f[5],  26);
        $f0f6_2  = self::mul($f0_2,  $f[6],  26);
        $f0f7_2  = self::mul($f0_2,  $f[7],  26);
        $f0f8_2  = self::mul($f0_2,  $f[8],  26);
        $f0f9_2  = self::mul($f0_2,  $f[9],  26);
        $f1f1_2  = self::mul($f1_2,  $f[1],  26);
        $f1f2_2  = self::mul($f1_2,  $f[2],  26);
        $f1f3_4  = self::mul($f1_2,  $f3_2,  26);
        $f1f4_2  = self::mul($f1_2,  $f[4],  26);
        $f1f5_4  = self::mul($f1_2,  $f5_2,  26);
        $f1f6_2  = self::mul($f1_2,  $f[6],  26);
        $f1f7_4  = self::mul($f1_2,  $f7_2,  26);
        $f1f8_2  = self::mul($f1_2,  $f[8],  26);
        $f1f9_76 = self::mul($f9_38, $f1_2,  27);
        $f2f2    = self::mul($f[2],  $f[2],  27);
        $f2f3_2  = self::mul($f2_2,  $f[3],  27);
        $f2f4_2  = self::mul($f2_2,  $f[4],  27);
        $f2f5_2  = self::mul($f2_2,  $f[5],  27);
        $f2f6_2  = self::mul($f2_2,  $f[6],  27);
        $f2f7_2  = self::mul($f2_2,  $f[7],  27);
        $f2f8_38 = self::mul($f8_19, $f2_2,  27);
        $f2f9_38 = self::mul($f9_38, $f[2],  26);
        $f3f3_2  = self::mul($f3_2,  $f[3],  26);
        $f3f4_2  = self::mul($f3_2,  $f[4],  26);
        $f3f5_4  = self::mul($f3_2,  $f5_2,  26);
        $f3f6_2  = self::mul($f3_2,  $f[6],    26);
        $f3f7_76 = self::mul($f7_38, $f3_2,  26);
        $f3f8_38 = self::mul($f8_19, $f3_2,  26);
        $f3f9_76 = self::mul($f9_38, $f3_2,  26);
        $f4f4    = self::mul($f[4],  $f[4],  26);
        $f4f5_2  = self::mul($f4_2,  $f[5],  26);
        $f4f6_38 = self::mul($f6_19, $f4_2,  27);
        $f4f7_38 = self::mul($f7_38, $f[4],  26);
        $f4f8_38 = self::mul($f8_19, $f4_2,  27);
        $f4f9_38 = self::mul($f9_38, $f[4],  26);
        $f5f5_38 = self::mul($f5_38, $f[5],  26);
        $f5f6_38 = self::mul($f6_19, $f5_2,  26);
        $f5f7_76 = self::mul($f7_38, $f5_2,  26);
        $f5f8_38 = self::mul($f8_19, $f5_2,  26);
        $f5f9_76 = self::mul($f9_38, $f5_2,  26);
        $f6f6_19 = self::mul($f6_19, $f[6],  26);
        $f6f7_38 = self::mul($f7_38, $f[6],  26);
        $f6f8_38 = self::mul($f8_19, $f6_2,  27);
        $f6f9_38 = self::mul($f9_38, $f[6],  26);
        $f7f7_38 = self::mul($f7_38, $f[7],  26);
        $f7f8_38 = self::mul($f8_19, $f7_2,  26);
        $f7f9_76 = self::mul($f9_38, $f7_2,  26);
        $f8f8_19 = self::mul($f8_19, $f[8],  26);
        $f8f9_38 = self::mul($f9_38, $f[8],  26);
        $f9f9_38 = self::mul($f9_38, $f[9],  26);
        $h0 = $f0f0   + $f1f9_76 + $f2f8_38 + $f3f7_76 + $f4f6_38 + $f5f5_38;
        $h1 = $f0f1_2 + $f2f9_38 + $f3f8_38 + $f4f7_38 + $f5f6_38;
        $h2 = $f0f2_2 + $f1f1_2  + $f3f9_76 + $f4f8_38 + $f5f7_76 + $f6f6_19;
        $h3 = $f0f3_2 + $f1f2_2  + $f4f9_38 + $f5f8_38 + $f6f7_38;
        $h4 = $f0f4_2 + $f1f3_4  + $f2f2    + $f5f9_76 + $f6f8_38 + $f7f7_38;
        $h5 = $f0f5_2 + $f1f4_2  + $f2f3_2  + $f6f9_38 + $f7f8_38;
        $h6 = $f0f6_2 + $f1f5_4  + $f2f4_2  + $f3f3_2  + $f7f9_76 + $f8f8_19;
        $h7 = $f0f7_2 + $f1f6_2  + $f2f5_2  + $f3f4_2  + $f8f9_38;
        $h8 = $f0f8_2 + $f1f7_4  + $f2f6_2  + $f3f5_4  + $f4f4    + $f9f9_38;
        $h9 = $f0f9_2 + $f1f8_2  + $f2f7_2  + $f3f6_2  + $f4f5_2;