1. added comments.
2. swaped the implementation for free xor circuit: instead of shifting
right k0 and shifting left k1, now shifting left k0 and shifting right
k1.