EDWARDS_D
#define TWISTED_D (EDWARDS_D - 1)
gf_mulw(p->t, p->x, EDWARDS_D); /* dy^2 */
gf_mulw(t1, t2, -EDWARDS_D); /* E*-d = a24*E */