EDDSA_448_PRIVATE_BYTES
enc[EDDSA_448_PRIVATE_BYTES - 1] = 0;
enc[EDDSA_448_PRIVATE_BYTES - 1] |= 0x80 & gf_lobit(t);
low = ~word_is_zero(enc2[EDDSA_448_PRIVATE_BYTES - 1] & 0x80);
enc2[EDDSA_448_PRIVATE_BYTES - 1] &= ~0x80;
succ &= word_is_zero(enc2[EDDSA_448_PRIVATE_BYTES - 1]);
const uint8_t ed[EDDSA_448_PRIVATE_BYTES],
#define EDDSA_448_SIGNATURE_BYTES (EDDSA_448_PUBLIC_BYTES + EDDSA_448_PRIVATE_BYTES)
const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],
const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],
const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],
EDDSA_448_PRIVATE_BYTES, propq);
const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],
uint8_t secret_scalar_ser[EDDSA_448_PRIVATE_BYTES];
EDDSA_448_PRIVATE_BYTES,
const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],
uint8_t expanded[EDDSA_448_PRIVATE_BYTES * 2];
EDDSA_448_PRIVATE_BYTES, propq))
EDDSA_448_PRIVATE_BYTES);
expanded + EDDSA_448_PRIVATE_BYTES,
EDDSA_448_PRIVATE_BYTES)
uint8_t nonce[2 * EDDSA_448_PRIVATE_BYTES];
uint8_t challenge[2 * EDDSA_448_PRIVATE_BYTES];
const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],
uint8_t challenge[2 * EDDSA_448_PRIVATE_BYTES];
EDDSA_448_PRIVATE_BYTES);
static void clamp(uint8_t secret_scalar_ser[EDDSA_448_PRIVATE_BYTES])
secret_scalar_ser[EDDSA_448_PRIVATE_BYTES - 1] = 0;
secret_scalar_ser[EDDSA_448_PRIVATE_BYTES - 2] |= 0x80;
const uint8_t ed[EDDSA_448_PRIVATE_BYTES],