inline to square, not square_times
amd64 specific ge25519_scalarmult_base_choose_niels
detect features early, so un-used functions can be disabled
make curve25519_neg a little more efficient
add ED25519_NO_INLINE_ASM option
free up a register so choose can be inlined in debug build
replace magic numbers with named constants
remove un-needed carries from mul
add sse2 version for neg
allow impls with enough headroom to not reduce after basic ops (add/sub) if possible
alternative carry ladder for square_times
taken from amd64-51-32k. gcc has some serious issues optimizing the normal carry ladder wrt adding a 64 bit int to a 128 bit int. also _force_ mul_noinline and square_times to not be inlined, otherwise gcc gets overzealous
Merge branch 'master' of github.com:floodyberry/ed25519-donna
accidentally'd a line that is only used with batch verification, re-added
slightly better uint128_t detection
only need 256 bits with raw, not 264 (cosmetic change, only 256 bits were read)
update to exactly match supercop batch verify implementations
32 bit has enough limbs that branching pays off in the lt/lte check
message_pointers accidentally hardcoded as [128], not [test_batch_count]
pacify strict warnings
merge test-batch.c in to test.c