#ifndef ED25519_donna
#  if defined(_MSC_VER)
#    define ALIGN(x) __declspec(align(x))
#  elif defined(__GNUC__)
#    undef ALIGN
#    define ALIGN(x) __attribute__((aligned(x)))
#  else
#    ifndef ALIGN
#      define ALIGN(x)
#    endif
#  endif
#endif


#define ed25519_seckey        CRYPTO_NAMESPACE(seckey)
#define ed25519_seckey_expand CRYPTO_NAMESPACE(seckey_expand)
#define ed25519_pubkey        CRYPTO_NAMESPACE(pubkey)
#define ed25519_keygen        CRYPTO_NAMESPACE(keygen)

#define ge_eightpoint     CRYPTO_NAMESPACE(ge_eightpoint)
#define ge_initeightpoint CRYPTO_NAMESPACE(ge_initeightpoint)


#ifdef ED25519_ref10

#include "ref10/crypto_sign.h"
#include "ref10/ge.h"

/* The basepoint multiplied by 8. */
static const ge_cached ge_eightpoint = {
  /* YplusX */
  {
    48496028, -16430416, 15164263, 11885335, 60784617, -4866353, 46481863,
    -2771805, 9708580, 2387263
  },
  /* YmunusX */
  {
    -10173472, -5540046, 21277639, 4080693, 1932823, -14916249, -9515873,
    -21787995, -36575460, 29827857
  },
  /* Z */
  {
    25143927, -10256223, -3515585, 5715072, 19432778, -14905909, 22462083,
    -8862871, 13226552, 743677
  },
  /* T2d */
  {
    -784818, -8208065, -28479270, 5551579, 15746872, 4911053, 19117091,
    11267669, -24569594, 14624995
  }
};
inline static void ge_initeightpoint(void) {}

#endif


#ifdef ED25519_amd64_51_30k

#include "amd64-51-30k/crypto_sign.h"
#include "amd64-51-30k/ge25519.h"

#endif


#ifdef ED25519_amd64_64_24k

#include "amd64-64-24k/crypto_sign.h"
#include "amd64-64-24k/ge25519.h"

#endif


// common
#if defined(ED25519_amd64_51_30k) || defined(ED25519_amd64_64_24k)

#define fe            fe25519
#define ge_p1p1       ge25519_p1p1
#define ge_p3         ge25519_p3
#define ge_p1p1_to_p3 ge25519_p1p1_to_p3
#define ge_p3_tobytes ge25519_pack
#define ge_add        ge25519_pnielsadd_p1p1

#define ge_p3_batchtobytes_destructive_1      ge25519_batchpack_destructive_1
#define ge_p3_batchtobytes_destructive_finish ge25519_batchpack_destructive_finish

#define ge_scalarmult_base CRYPTO_NAMESPACE(ge_scalarmult_base)

#endif


#ifdef ED25519_amd64_51_30k
static inline void ge_scalarmult_base(ge_p3 *gepk,const unsigned char *sk)
{
	sc25519 scsk;

	sc25519_from32bytes(&scsk,sk);
	ge25519_scalarmult_base(gepk,&scsk);
}

/* The basepoint multiplied by 8. */
static const ge25519_pniels ge_eightpoint = {
	// ysubx
	{{ 1880013609944032, 273850692840390, 1250787290086935, 789632210881694, 2001713562248987 }},
	// xaddy
	{{ 1149173309373852, 797611345273702, 1925224452816873, 2065787175387590, 160206517707811 }},
	// z
	{{ 1563516364368503, 383531986082622, 1251481213240650, 1657022631558786, 49907331879479 }},
	// t2d
	{{ 1700965895112270, 372560131616985, 329575203620664, 756160485635107, 981466775886086 }},
};
inline static void ge_initeightpoint(void) {}
#endif


#ifdef ED25519_amd64_64_24k
static inline void ge_scalarmult_base(ge_p3 *gepk,const unsigned char *sk)
{
	sc25519 scsk;

	sc25519_from32bytes(&scsk,sk);
	ge25519_scalarmult_base(gepk,&scsk);
}

/* The basepoint multiplied by 8. */
static const ge25519_pniels ge_eightpoint = {
	// ysubx
	{{ 6788804652057281504U, 531290374162262565U, 6135835192563885415U, 8199018750971852188U }},
	// xaddy
	{{ 1960215011215539612U, 16708348392717346619U, 11897818088205565647U, 656205896531197613U }},
	// z
	{{ 15705615417005288055U, 5341641389565279826U, 1966574939768917451U, 204420431378348998U }},
	// t2d
	{{ 9713713562319586894U, 4328467261753610859U, 8262494979546083277U, 4020087914029409631U }},
};
inline static void ge_initeightpoint(void) {}
#endif


#ifdef ED25519_donna

#define ED25519_CUSTOMRANDOM
#define ED25519_CUSTOMHASH
#include <sodium/crypto_hash_sha512.h>
#include <sodium/randombytes.h>
#include "ed25519-donna/ed25519-donna.h"

static int ed25519_seckey_expand(unsigned char *sk,const unsigned char *seed)
{
	crypto_hash_sha512(sk,seed,32);
	sk[0] &= 248;
	sk[31] &= 127;
	sk[31] |= 64;

	return 0;
}

static int ed25519_seckey(unsigned char *sk)
{
	unsigned char seed[32];

	randombytes(seed,32);
	return ed25519_seckey_expand(sk,seed);
}

static int ed25519_pubkey(unsigned char *pk,const unsigned char *sk)
{
	bignum256modm a;
	ge25519 ALIGN(16) A;

	expand256_modm(a,sk,32);
	ge25519_scalarmult_base_niels(&A,ge25519_niels_base_multiples,a);
	ge25519_pack(pk,&A);

	return 0;
}


static int ed25519_keypair(unsigned char *pk,unsigned char *sk)
{
	ed25519_seckey(sk);
	ed25519_pubkey(pk,sk);

	return 0;
}

#define fe      bignum25519
#define ge_p1p1 ge25519_p1p1
#define ge_p3   ge25519

#define ge_p1p1_to_p3 ge25519_p1p1_to_full
#define ge_p3_tobytes ge25519_pack

#define ge_p3_batchtobytes_destructive_1      ge25519_batchpack_destructive_1
#define ge_p3_batchtobytes_destructive_finish ge25519_batchpack_destructive_finish


#define ge_add             CRYPTO_NAMESPACE(ge_add)
#define ge_scalarmult_base CRYPTO_NAMESPACE(ge_scalarmult_base)


DONNA_INLINE static void ge_add(ge25519_p1p1 *r,const ge25519 *p,const ge25519_pniels *q)
{
	ge25519_pnielsadd_p1p1(r,p,q,0);
}

DONNA_INLINE static void ge_scalarmult_base(ge25519 *A,const unsigned char *sk)
{
	bignum256modm ALIGN(16) a;
	expand256_modm(a,sk,32);
	ge25519_scalarmult_base_niels(A,ge25519_niels_base_multiples,a);
}

#define fe_ysubx CRYPTO_NAMESPACE(fe_ysubx)
#define fe_xaddy CRYPTO_NAMESPACE(fe_xaddy)
#define fe_z     CRYPTO_NAMESPACE(fe_z)
#define fe_t2d   CRYPTO_NAMESPACE(fe_t2d)

static ge25519_pniels ALIGN(16) ge_eightpoint;
// portable representation of (basepoint * 8)
static u8 fe_ysubx[32] = {
	0xE0,0xC3,0x64,0xC7,0xDC,0xAD,0x36,0x5E,
	0x25,0xAA,0x86,0xC8,0xC7,0x85,0x5F,0x07,
	0x67,0x65,0x1C,0x3D,0x99,0xDD,0x26,0x55,
	0x9C,0xB5,0x71,0x1E,0x1D,0xC4,0xC8,0x71,
};
static u8 fe_xaddy[32] = {
	0x9C,0xFD,0xE3,0xC2,0x2A,0x15,0x34,0x1B,
	0x3B,0xE7,0x62,0xAB,0x56,0xFA,0xDF,0xE7,
	0xCF,0xBE,0xB5,0x8D,0x83,0x8A,0x1D,0xA5,
	0xAD,0x3E,0x42,0x42,0xC9,0x4F,0x1B,0x09,
};
static u8 fe_z[32] = {
	0x77,0xAA,0x7F,0x85,0x02,0x8E,0xF5,0xD9,
	0x52,0xFE,0x8F,0xE6,0x8A,0x52,0x21,0x4A,
	0xCB,0x8D,0x1C,0x05,0x7D,0xAD,0x4A,0x1B,
	0xC6,0x7B,0x23,0x9D,0x4C,0x3F,0xD6,0x02,
};
static u8 fe_t2d[32] = {
	0x4E,0x06,0xF4,0xFB,0x04,0x0B,0xCE,0x86,
	0x6B,0x52,0xBB,0x96,0x0A,0xCE,0x11,0x3C,
	0xCD,0xEF,0x4A,0x46,0x68,0x47,0xAA,0x72,
	0x5F,0x65,0x90,0x91,0xA8,0x38,0xCA,0x37,
};

// initialize from packed representation
static void ge_initeightpoint(void)
{
	memset(&ge_eightpoint,0,sizeof(ge_eightpoint));
	curve25519_expand(ge_eightpoint.ysubx,fe_ysubx);
	curve25519_expand(ge_eightpoint.xaddy,fe_xaddy);
	curve25519_expand(ge_eightpoint.z,fe_z);
	curve25519_expand(ge_eightpoint.t2d,fe_t2d);
}

#endif