Montgomery-form Wider words, on the Montgomery domain defined by the secp256k1 scalar group order.

>>> let one = 1 :: Montgomery
>>> one
1
>>> putStrLn (render one)
(4624529908474429119, 4994812053365940164, 1, 0)

Render a Montgomery value as a String, showing its individual Limbs.

>>> putStrLn (render 1)
(4624529908474429119, 4994812053365940164, 1, 0)

Convert a Wider word to the Montgomery domain.

Retrieve a Montgomery word from the Montgomery domain.

This function is a synonym for retr.

Zero (the additive unit) in the Montgomery domain.

One (the multiplicative unit) in the Montgomery domain.

Constant-time equality comparison.

Variable-time equality comparison.

Montgomery reduction.

The first argument represents the low words, and the second the high words, of an extra-large eight-limb word in Montgomery form.

Retrieve a Montgomery value from the Montgomery domain, producing a Wider word.

Return a if c is truthy, otherwise return b.

>>> import qualified Data.Choice as C
>>> select 0 1 (C.true# ())
1

Addition in the Montgomery domain.

Note that Montgomery is an instance of Num, so you can use + to apply this function.

>>> 1 + 1 :: Montgomery
2

Subtraction in the Montgomery domain.

Note that Montgomery is an instance of Num, so you can use - to apply this function.

>>> 1 - 1 :: Montgomery
0

Multiplication in the Montgomery domain.

Note that Montgomery is an instance of Num, so you can use * to apply this function.

>>> 1 * 1 :: Montgomery
1

Squaring in the Montgomery domain.

>>> sqr 1
1
>>> sqr 2
4
>>> sqr (negate 2)
4

Additive inverse in the Montgomery domain.

Note that Montgomery is an instance of Num, so you can use negate to apply this function.

>>> negate 1 :: Montgomery
115792089237316195423570985008687907852837564279074904382605163141518161494336
>>> (negate 1 :: Montgomery) + 1
0

Multiplicative inverse in the Montgomery domain.

> inv 2

57896044618658097711785492504343953926418782139537452191302581570759080747169 >> inv 2 * 2 1

Exponentiation in the Montgomery domain.

>>> exp 2 3
8
>>> exp 2 10
1024

Check if a Montgomery value is odd.

Note that the comparison is performed in constant time, but we branch when converting to Bool.

>>> odd 1
True
>>> odd 2
False
>>> Data.Word.Wider.odd (retr 3) -- parity is preserved
True