#ifndef SC25519_H
#define SC25519_H

#include "compat.h"

#define sc25519                  CRYPTO_NAMESPACE(batch_sc25519)
#define shortsc25519             CRYPTO_NAMESPACE(batch_shortsc25519)
#define sc25519_from32bytes      CRYPTO_NAMESPACE(batch_sc25519_from32bytes)
#define shortsc25519_from16bytes CRYPTO_NAMESPACE(batch_shortsc25519_from16bytes)
#define sc25519_from64bytes      CRYPTO_NAMESPACE(batch_sc25519_from64bytes)
#define sc25519_from_shortsc     CRYPTO_NAMESPACE(batch_sc25519_from_shortsc)
#define sc25519_to32bytes        CRYPTO_NAMESPACE(batch_sc25519_to32bytes)
#define sc25519_iszero_vartime   CRYPTO_NAMESPACE(batch_sc25519_iszero_vartime)
#define sc25519_isshort_vartime  CRYPTO_NAMESPACE(batch_sc25519_isshort_vartime)
#define sc25519_lt               CRYPTO_NAMESPACE(batch_sc25519_lt)
#define sc25519_add              CRYPTO_NAMESPACE(batch_sc25519_add)
#define sc25519_sub_nored        CRYPTO_NAMESPACE(batch_sc25519_sub_nored)
#define sc25519_mul              CRYPTO_NAMESPACE(batch_sc25519_mul)
#define sc25519_mul_shortsc      CRYPTO_NAMESPACE(batch_sc25519_mul_shortsc)
#define sc25519_window4          CRYPTO_NAMESPACE(batch_sc25519_window4)
#define sc25519_window5          CRYPTO_NAMESPACE(batch_sc25519_window5)
#define sc25519_slide           CRYPTO_NAMESPACE(batch_sc25519_slide)
#define sc25519_2interleave2     CRYPTO_NAMESPACE(batch_sc25519_2interleave2)
#define sc25519_barrett CRYPTO_NAMESPACE(batch_sc25519_barrett)

typedef struct
{
  unsigned long long v[4];
}
sc25519;

typedef struct
{
  unsigned long long v[2];
}
shortsc25519;

void sc25519_from32bytes(sc25519 *r, const unsigned char x[32]);

void sc25519_from64bytes(sc25519 *r, const unsigned char x[64]);

void sc25519_from_shortsc(sc25519 *r, const shortsc25519 *x);

void sc25519_to32bytes(unsigned char r[32], const sc25519 *x);

int sc25519_iszero_vartime(const sc25519 *x);

int sc25519_lt(const sc25519 *x, const sc25519 *y) SYSVABI;

void sc25519_add(sc25519 *r, const sc25519 *x, const sc25519 *y) SYSVABI;

void sc25519_sub_nored(sc25519 *r, const sc25519 *x, const sc25519 *y) SYSVABI;

void sc25519_mul(sc25519 *r, const sc25519 *x, const sc25519 *y);

void sc25519_mul_shortsc(sc25519 *r, const sc25519 *x, const shortsc25519 *y);

/* Convert s into a representation of the form \sum_{i=0}^{63}r[i]2^(4*i)
 * with r[i] in {-8,...,7}
 */
void sc25519_window4(signed char r[64], const sc25519 *s);

void sc25519_window5(signed char r[51], const sc25519 *s);

void sc25519_slide(signed char r[256], const sc25519 *s, int swindowsize);

void sc25519_2interleave2(unsigned char r[127], const sc25519 *s1, const sc25519 *s2);

void sc25519_barrett(sc25519 *r, unsigned long long x[8]) SYSVABI;

#endif