Section parm_sec.
Variable M_in_Z_ : Z_ (2 ^ w).
Variable ptM'cM'' : Z_ w * Z_ w * Z_ (2 ^ w) * Z_ (2 ^ w) * Z_ (2 ^ w).
Variable d_Sir_Si : Z_ (2 ^ w) * Z_ (2 ^ w).
Variable l_in_Z_ : Z_ (2 ^ w).
Variable x_i_in_Z_ : Z_ (2 ^ w).
Variable h : Z.
Let p_in_Z_w := fst (fst (fst (fst ptM'cM''))).
Let t_in_Z_w := snd (fst (fst (fst ptM'cM''))).
Let M'_in_Z_ := snd (fst (fst ptM'cM'')).
Let c_in_Z_ := snd (fst ptM'cM'').
Let M''_in_Z_ := snd ptM'cM''.
Let M := _Z M_in_Z_.
Let p := _Z p_in_Z_w.
Let t := _Z t_in_Z_w.
Let c := _Z c_in_Z_.
Let M'' := _Z M''_in_Z_.
Let M' := _Z M'_in_Z_.
Let l := _Z l_in_Z_.
Let x_i := _Z x_i_in_Z_.
Definition d_Si := fst d_Sir_Si.
Definition r_Si := snd d_Sir_Si.
Hypothesis d_Si_eq_r_Si_eq : P' M p d_Si r_Si h l_in_Z_.
Hypothesis le_1_M : 1 <= M.
Hypothesis le_M_max : M <= 2 ^ (w - 1).
Hypothesis p_M : p = Zlog_sup M.
Hypothesis t_M : t = w - p \/ M = 1.
Hypothesis c_M : c = 2 ^ p.
Hypothesis M''_M : M'' = (2 ^ t * M) mod 2 ^ w.
Hypothesis M'_M : M' = 2 ^ (p + w) / M mod 2 ^ w.
unfold p. apply le_0__Z. Qed.
apply Zlt_le_weak. exact lt02w. Qed.
Local Hint Resolve le_0_w lt02w le02w : a.
Local Hint Resolve le_0_p : a.
rewrite p_M. generalize le_1_M. case M. intro. absurd (2 <= 0); omega. intros q H.
elim (Zlog_sup_correct2 (Zpos q)). omega. omega. intros q H. absurd (2 <= Zneg q). apply Zlt_not_le.
unfold Z.lt. trivial. assumption. Qed.
rewrite p_M. elim (Zle_lt_or_eq 1 M). intro H. left. apply Z.le_trans with (Zlog_sup 2). simpl. omega.
apply Zlog_sup_seq. omega. intro H. right. symmetry. trivial. assumption. Qed.
elim le_1_p; intro H; omega. Qed.
elim lt_0_p; intro H; omega. Qed.
elim (Zle_lt_or_eq 1 M). intro H. rewrite p_M. generalize le_1_M. case M. intro. absurd (2 <= 0); omega.
intros q H0. elim (Zlog_sup_correct2 (Zpos q)). omega. omega. intros q H0. absurd (1 <= Zneg q).
apply Zlt_not_le. unfold Z.lt. trivial. assumption. omega. assumption. Qed.
Local Hint Resolve lt_2pm1_M : a.
Local Hint Resolve le_M_2pp le_1_p lt_0_p le_0_pm1 : a.
elim (Zle_lt_or_eq 1 M). intro H. replace (2 ^ p) with (1 * M + (2 ^ p - M)). apply Zdiv_mult_plus. omega.
cut (M <= 2 ^ p). omega. auto with a. cut (2 ^ p < M + M). omega.
apply Z.lt_le_trans with (2 ^ (p - 1) + 1 + (2 ^ (p - 1) + 1)).
replace (2 ^ (p - 1) + 1 + (2 ^ (p - 1) + 1)) with (2 ^ (p - 1) + 2 ^ (p - 1) + 2). rewrite Z_pow_plus.
replace (p - 1 + 1) with p. omega. ring. elim le_0_pm1. omega. intro H0. absurd (1 < M). omega.
assumption. ring. cut (2 ^ (p - 1) < M). omega. elim lt_2pm1_M. omega. intro H0. absurd (1 < M). omega.
assumption. ring. intro H0. rewrite p_M. rewrite <- H0. trivial. assumption. Qed.
transitivity (2 ^ (p + w) / M / 2 ^ w * 2 ^ w + (2 ^ (p + w) / M) mod 2 ^ w).
apply f_equal2 with (f := Zplus). replace (2 ^ (p + w) / M / 2 ^ w) with 1. ring.
rewrite Zdivdivdiv. rewrite Zmult_comm. rewrite <- Zdivdivdiv. rewrite Zpower_exp; auto with a.
rewrite Z_div_mult. symmetry. unfold p. unfold p_in_Z_w. apply div_M_1_again. apply Z.lt_gt. auto with
a. apply Z.le_ge. auto with a.  apply Z.le_ge. auto with a. auto with
a. omega. omega. auto with a. trivial. apply Zdivmod_split.  auto
with a. Qed.
(* <KE EP TOGETHER - multired_equations *)
Let r'_i := ltw d_Si c_in_Z_ r_Si (minusw r_Si M_in_Z_).
Let s_i := ursh x_i_in_Z_ p_in_Z_w.
Let s'_i := multp2 s_i p_in_Z_w.
Let l'_i := minusw x_i_in_Z_ s'_i.
Let s''_i := ltw r'_i c_in_Z_ s_i (minusw s_i M''_in_Z_).
Let h_i := multp2 r'_i t_in_Z_w.
Let h'_i := plusw h_i s''_i.
Let q_i := uhwm h'_i M'_in_Z_.
Let q'_i := plusw q_i h'_i.
Let y_i := multw q'_i M_in_Z_.
Definition d_i := minusw s'_i y_i.
Definition rrr_i := minusw x_i_in_Z_ y_i.
Definition r_i := ltw l'_i M_in_Z_ rrr_i (minusw rrr_i M_in_Z_).
(* KE EP TOGETHER> *)
Let d0 := d_Si. (* notation *)
Let r0 := r_Si. (* notation *)
(* <KE EP TOGETHER - multired_final *)
Let r'0 := ltw d0 M_in_Z_ r0 (minusw r0 M_in_Z_). (* notation *)
Definition r''0 := ltw r'0 M_in_Z_ r'0 (minusw r'0 M_in_Z_). (* only needed after the loop *)
(* KE EP TOGETHER> *)
Definition r'0' := ltw d0 c_in_Z_ r0 (minusw r0 M_in_Z_). (* needed in loop *)
Definition r''0' := ltw r'0' M_in_Z_ r'0' (minusw r'0' M_in_Z_). (* needed in loop *)
Let h_i' := multp2 r''0' t_in_Z_w.
Let h'_i' := plusw h_i' s_i.
Definition g' := r''0. (* only needed after the loop *)
Let x := h * 2 ^ w + l.
apply lt_0_Zpow. fold (0 + 0). apply Zplus_le_compat; auto with a. Qed.
apply lt_0_Zpow. auto with a. Qed.
Local Hint Resolve lt_0_2pp : a.
clear x_i_in_Z_ x_i s_i s'_i l'_i s''_i h'_i q_i q'_i y_i h'_i'.
cut (0 < w). omega. exact lt_0_w. Qed.
Local Hint Resolve le_0_wm1 lt_0_w : a.
clear x_i_in_Z_ x_i s_i s'_i l'_i s''_i h'_i q_i q'_i y_i h'_i'.
rewrite p_M. apply Z.le_lt_trans with (w - 1). rewrite <- Zlog_sup_pow. apply Zlog_sup_seq.
assumption. auto with a. omega. Qed.
apply Zlt_le_weak. exact lt_p_w. Qed.
cut (p <= w). omega. exact le_p_w. Qed.
Local Hint Resolve lt_p_w le_p_w le_0_wmp : a.
unfold M. apply lt_z__Z. Qed.
apply Zlt_le_weak. exact lt_M_2pw. Qed.
Hint Resolve lt_M_2pw le_M_2pw : a.
unfold P' in d_Si_eq_r_Si_eq. tauto. Qed.
unfold P' in d_Si_eq_r_Si_eq. tauto. Qed.
replace (h mod M * 2 ^ w) with (0 + h mod M * 2 ^ (w - p + p)). rewrite Zpower_exp. rewrite Zmult_assoc.
rewrite Zmod_plus_distr_l with (m := 2 ^ p). rewrite Z_mod_plus. rewrite modred with (x := 0).
replace (0 + l mod 2 ^ p mod M) with (l mod 2 ^ p mod M). rewrite modred with (m := 2 ^ p). exact r_Si_eq_lit.
apply Zmod_le_0_z. omega. apply Z.lt_le_trans with M. apply Zmod_lt_z_m. omega. exact le_M_2pp. ring. omega. apply lt_0_Zpow.
auto with a. apply Z.lt_gt. apply Z.lt_le_trans with M. omega. auto with a. apply lt_0_Zpow. auto with a. cut (p < w). omega.
auto with a. apply Z.le_ge. auto with a. replace (w - p + p) with w. ring. ring. Qed.
replace ((h mod M + M) * 2 ^ w) with (0 + (h mod M + M) * 2 ^ (w - p + p)). rewrite Zpower_exp. rewrite Zmult_assoc.
rewrite Zmod_plus_distr_l with (m := 2 ^ p). rewrite Z_mod_plus. rewrite modred with (x := 0).
replace (0 + l mod 2 ^ p mod M) with (l mod 2 ^ p mod M). rewrite modred with (m := 2 ^ p). exact r_Si_eq_lit.
apply Zmod_le_0_z. omega. apply Z.lt_le_trans with M. apply Zmod_lt_z_m. omega. exact le_M_2pp. ring. omega. apply lt_0_Zpow.
auto with a. apply Z.lt_gt. apply Z.lt_le_trans with M. omega. auto with a. apply lt_0_Zpow. auto with a. cut (p < w). omega.
auto with a. apply Z.le_ge. auto with a. replace (w - p + p) with w. ring. ring. Qed.
rewrite <- Zpower_exp. replace (w - p + p) with w. trivial. ring. cut (p < w). omega. auto with a. apply Z.le_ge. auto with a.
Qed.
intros a b c'. replace w with (w - p + p). rewrite Zpower_exp. do 2 rewrite Zmult_assoc. do 2 rewrite Zplus_comm with (m := b).
rewrite Z_mod_plus. rewrite Z_mod_plus. trivial. apply Z.lt_gt. apply lt_0_Zpow. auto with a. apply Z.lt_gt. apply lt_0_Zpow.
auto with a. cut (p < w). omega. auto with a. apply Z.le_ge. auto with a. ring. Qed.
intro H. unfold r'_i. elim (Zle_or_lt c d_Si); intro H0. rewrite ltw_false. simpl. rewrite r_Si_eq_lit. fold M.
rewrite <- Zmod_minus_distr_l. rewrite H. cut (_Z d_Si = 1). intro H1. rewrite H1. rewrite mod_1_0. replace (1 + 0 - 1) with 0.
apply modred. omega. auto with a. ring. rewrite c_M in H0. rewrite p_M in H0. rewrite H in H0. simpl in H0. cut (d_Si < 2).
omega. elim d_Si_eq; intro H1. rewrite H1. apply Z.lt_trans with M. apply Zmod_lt_z_m. omega. omega. elim H1; intro H2.
rewrite H2. rewrite H. rewrite mod_1_0. omega. elim H2; intro H3. rewrite H3. rewrite H. rewrite mod_1_0. omega. rewrite H3.
rewrite H. rewrite mod_1_0. omega. auto with a. assumption. cut (_Z d_Si = 0). intro H1. rewrite ltw_true. rewrite r_Si_eq_lit.
rewrite H1. rewrite H. rewrite mod_1_0. simpl. apply modred. omega. exact lt02w. rewrite H1. fold c. rewrite c_M.
auto with a. elim d_Si_eq; intro H1. rewrite H1. rewrite H. apply mod_1_0. rewrite c_M in H0. rewrite p_M in H0.
rewrite H in H0. simpl in H0. cut (0 <= d_Si). omega. apply le_0__Z. Qed.
intro H. unfold h_i. simpl. rewrite M1_r'_i_eq. fold t. replace (2 ^ t * 0) with 0. apply modred. omega. auto with a. ring.
assumption. Qed.
intro H. unfold h'_i. rewrite Z_from_plusw. rewrite M1_h_i_eq. unfold s''_i. rewrite ltw_true. unfold s_i. simpl. fold p.
rewrite p_M. rewrite H. simpl. fold x_i. replace x_i with (x_i * 1). rewrite Z_div_mult. transitivity x_i. apply modred.
unfold x_i. apply le_0__Z. unfold x_i. apply lt_z__Z. ring. omega. ring. rewrite M1_r'_i_eq. fold c. rewrite c_M. auto with a.
assumption. assumption. Qed.
intro z. apply Zmod_le_0_z. auto with a. Qed.
intro z. apply Zmod_le_0_z. omega. Qed.
intros a b. rewrite Zpow_2_w_is_2Zpow_2_wm1. apply Zplus_lt_compat. apply Z.lt_le_trans with M. apply Zmod_lt_z_m. omega.
assumption. apply Z.lt_le_trans with (2 ^ p). apply Zmod_lt_z_m. auto with a. apply Zle_pow_le. auto with a. cut (p < w). omega.
auto with a. Qed.
intros a b. replace w with (w - p + p). rewrite Zpower_exp. rewrite Zmult_assoc. rewrite Zdiv_times_plus.
rewrite Zmod_mult_distr_l. rewrite Zmod_plus_distr_l. rewrite Zmod_mult_distr_l with (a := a). rewrite <- Zmod_plus_distr_l.
rewrite <- Zmod_mult_distr_l. rewrite <- Zdiv_times_plus. rewrite <- Zmult_assoc. rewrite <- Zpower_exp.
replace (w - p + p) with w. trivial. ring. cut (p < w). omega. auto with a. apply Z.le_ge. auto with a. auto with a. omega. omega.
omega. omega. omega. auto with a. cut (p < w). omega. auto with a. apply Z.le_ge. auto with a. ring. Qed.
intros a b. replace w with (w - p + p). rewrite Zpower_exp. rewrite Zmult_assoc. rewrite Zplus_comm. rewrite Z_mod_plus. trivial.
apply Z.lt_gt. apply lt_0_Zpow. auto with a. cut (p <= w). omega. auto with a. apply Z.le_ge. auto with a. ring. Qed.
(* KE EP TOGETHER> *)
unfold r'_i. elim d_Si_eq; intro H. left. rewrite ltw_true. rewrite r_Si_eq_a. rewrite H. apply modred. apply Zplus_le_0_compat.
apply le_0_mod_M. apply le_0_2pp. apply lt_plus_M_2p_2w. rewrite H. apply Z.lt_le_trans with M. apply Zmod_lt_z_m. omega.
fold c. rewrite c_M. exact le_M_2pp. elim H; intro H0. elim (Zle_or_lt c d_Si); intro H1. rewrite ltw_false. simpl. left.
rewrite r_Si_eq_a. rewrite H0. fold M. rewrite <- Zmod_minus_distr_l.
replace (((h mod M * 2 ^ w + l) / 2 ^ p * 2 ^ p) mod M + M + (h mod M * 2 ^ w + (l mod 2 ^ p) mod M) mod 2 ^ p - M)
with (((h mod M * 2 ^ w + l) / 2 ^ p * 2 ^ p) mod M + (h mod M * 2 ^ w + (l mod 2 ^ p) mod M) mod 2 ^ p).
apply modred. apply Zplus_le_0_compat. apply le_0_mod_M. apply le_0_2pp. apply lt_plus_M_2p_2w. ring. auto with a. assumption.
rewrite ltw_true. right. rewrite r_Si_eq_a. rewrite <- H0. apply modred. apply Zplus_le_0_compat. apply le_0__Z. apply le_0_2pp.
apply Z.lt_le_trans with (c + 2 ^ p). apply Zplus_lt_compat. assumption. apply Zmod_lt_z_m. auto with a.
rewrite Zpow_2_w_is_2Zpow_2_wm1. apply Zplus_le_compat. rewrite c_M. apply Zle_pow_le. auto with a. cut (p < w). omega.
auto with a. apply Zle_pow_le. auto with a. cut (p < w). omega. auto with a. assumption. elim H0; intro H1. left.
rewrite ltw_true. rewrite r_Si_eq_b. rewrite H1.
transitivity ((((((h mod M + M) * (2 ^ (w - p) * 2 ^ p) + l) / 2 ^ p * 2 ^ p) mod M + M +
((h mod M + M) * (2 ^ (w - p) * 2 ^ p) + l mod 2 ^ p mod M) mod 2 ^ p) mod
(2 ^ (w - p) * 2 ^ p) - M) mod (2 ^ (w - p) * 2 ^ p)). (* workaround *)
rewrite <- p2wp. rewrite <- Zmod_minus_distr_l.
replace ((((h mod M + M) * 2 ^ w + l) / 2 ^ p * 2 ^ p) mod M + M + ((h mod M + M) * 2 ^ w + (l mod 2 ^ p) mod M) mod 2 ^ p - M)
with ((((h mod M + M) * 2 ^ w + l) / 2 ^ p * 2 ^ p) mod M + ((h mod M + M) * 2 ^ w + (l mod 2 ^ p) mod M) mod 2 ^ p).
trivial. ring. exact lt02w. rewrite Zmult_assoc. rewrite mod_over_div. rewrite Zmod_mult_distr_l with (a := h mod M + M).
replace (h mod M + M) with (h mod M + 1 * M). rewrite Z_mod_plus. rewrite <- Zmod_mult_distr_l. rewrite <- mod_over_div.
rewrite <- Zmult_assoc. rewrite <- Zmult_assoc. rewrite <- Zpower_exp. replace (w - p + p) with w.
rewrite mod2p with (c' := h mod M). rewrite <- Zmod_minus_distr_l.
replace (((h mod M * 2 ^ w + l) / 2 ^ p * 2 ^ p) mod M + M + (h mod M * 2 ^ w + (l mod 2 ^ p) mod M) mod 2 ^ p - M)
with (((h mod M * 2 ^ w + l) / 2 ^ p * 2 ^ p) mod M + (h mod M * 2 ^ w + (l mod 2 ^ p) mod M) mod 2 ^ p).
apply modred. apply Zplus_le_0_compat. apply le_0_mod_M. apply le_0_2pp. apply lt_plus_M_2p_2w. ring. auto with a. ring.
cut (p < w). omega. auto with a. apply Z.le_ge. auto with a. auto with a. omega. omega. omega. ring. omega. auto with a.
omega. rewrite H1. apply Z.lt_le_trans with M. apply Zmod_lt_z_m. omega. fold c. rewrite c_M. exact le_M_2pp.
elim (Zle_or_lt c d_Si); intro H2. rewrite ltw_false. simpl. left. rewrite r_Si_eq_b. rewrite H1. fold M.
rewrite <- Zmod_minus_distr_l.
replace ((((h mod M + M) * 2 ^ w + l) / 2 ^ p * 2 ^ p) mod M + M + ((h mod M + M) * 2 ^ w + (l mod 2 ^ p) mod M) mod 2 ^ p - M)
with ((((h mod M + M) * 2 ^ w + l) / 2 ^ p * 2 ^ p) mod M + ((h mod M + M) * 2 ^ w + (l mod 2 ^ p) mod M) mod 2 ^ p).
rewrite modred. rewrite divmultmodM. rewrite Zmod_plus_m. rewrite <- divmultmodM. rewrite r'0plus. rewrite r'0plus. trivial.
omega. apply Zplus_le_0_compat. apply le_0_mod_M. apply le_0_2pp. apply lt_plus_M_2p_2w. ring. auto with a. assumption.
rewrite ltw_true. rewrite r_Si_eq_b. right. rewrite r'0plus. rewrite r'0plus. rewrite modred. rewrite H1. rewrite divmultmodM.
rewrite Zmod_plus_m. rewrite <- divmultmodM. trivial. omega. apply Zplus_le_0_compat. apply le_0__Z. apply le_0_2pp.
apply Z.lt_le_trans with (c + 2 ^ p). apply Zplus_lt_compat. assumption. apply Zmod_lt_z_m. auto with a.
rewrite Zpow_2_w_is_2Zpow_2_wm1. apply Zplus_le_compat. rewrite c_M. apply Zle_pow_le. auto with a. cut (p < w). omega.
auto with a. apply Zle_pow_le. auto with a. cut (p < w). omega. auto with a. assumption. Qed.
elim r'_i_eq; intro H; rewrite H. rewrite Zdiv_a_b_b_Zmod. replace w with (w - p + p). rewrite Zpower_exp.
rewrite Zmult_assoc. rewrite Zmod_km_plus. rewrite Zmod_km_plus. rewrite modred with (x := l mod 2 ^ p mod M).
rewrite <- Zmult_assoc. rewrite <- Zpower_exp. replace (w - p + p) with w.
elim (mod_plus (h mod M * 2 ^ w + l - l mod 2 ^ p) (l mod 2 ^ p) M). intro H0; rewrite H0;
replace (h mod M * 2 ^ w + l - l mod 2 ^ p + l mod 2 ^ p) with (h mod M * 2 ^ w + l). rewrite Zmod_plus_distr_l.
rewrite <- Zmod_mult_distr_l. rewrite <- Zmod_plus_distr_l. tauto. omega. omega. omega. ring.
intro H0; rewrite H0; replace (h mod M * 2 ^ w + l - l mod 2 ^ p + l mod 2 ^ p) with (h mod M * 2 ^ w + l).
rewrite Zmod_plus_distr_l. rewrite <- Zmod_mult_distr_l. rewrite <- Zmod_plus_distr_l. tauto. omega. omega. omega. ring. omega.
ring. cut (p < w). omega. auto with a. apply Z.le_ge. auto with a. apply Zmod_le_0_z. omega. apply Z.lt_le_trans with M.
apply Zmod_lt_z_m. omega. exact le_M_2pp. apply lt_0_Zpow. auto with a. apply lt_0_Zpow. auto with a. cut (p < w). omega.
auto with a. apply Z.le_ge. auto with a. ring. apply lt_0_Zpow. auto with a. right.
cut (((h mod M * 2 ^ w + l) / 2 ^ p * 2 ^ p) mod M + (h mod M * 2 ^ w + (l mod 2 ^ p) mod M) mod 2 ^ p = x mod M \/
((h mod M * 2 ^ w + l) / 2 ^ p * 2 ^ p) mod M + (h mod M * 2 ^ w + (l mod 2 ^ p) mod M) mod 2 ^ p = x mod M + M).
omega.
rewrite Zdiv_a_b_b_Zmod. replace w with (w - p + p). rewrite Zpower_exp.
rewrite Zmult_assoc. rewrite Zmod_km_plus. rewrite Zmod_km_plus. rewrite modred with (x := l mod 2 ^ p mod M).
rewrite <- Zmult_assoc. rewrite <- Zpower_exp. replace (w - p + p) with w.
elim (mod_plus (h mod M * 2 ^ w + l - l mod 2 ^ p) (l mod 2 ^ p) M).
intro H0; rewrite H0; replace (h mod M * 2 ^ w + l - l mod 2 ^ p + l mod 2 ^ p) with (h mod M * 2 ^ w + l).
rewrite Zmod_plus_distr_l. rewrite <- Zmod_mult_distr_l. rewrite <- Zmod_plus_distr_l. tauto. omega. omega. omega. ring.
intro H0; rewrite H0; replace (h mod M * 2 ^ w + l - l mod 2 ^ p + l mod 2 ^ p) with (h mod M * 2 ^ w + l).
rewrite Zmod_plus_distr_l. rewrite <- Zmod_mult_distr_l. rewrite <- Zmod_plus_distr_l. tauto. omega. omega. omega. ring. omega.
ring. cut (p < w). omega. auto with a. apply Z.le_ge. auto with a. apply Zmod_le_0_z. omega. apply Z.lt_le_trans with M.
apply Zmod_lt_z_m. omega. exact le_M_2pp. apply lt_0_Zpow. auto with a. apply lt_0_Zpow. auto with a. cut (p < w). omega.
auto with a. apply Z.le_ge. auto with a. ring. apply lt_0_Zpow. auto with a. Qed.
elim d_Si_eq; intro H. apply Z.lt_trans with M. rewrite H. apply Zmod_lt_z_m. omega. omega. elim H; intro H0. rewrite H0.
cut (((h mod M * 2 ^ w + l) / 2 ^ p * 2 ^ p) mod M < M). omega. apply Zmod_lt_z_m. omega. elim H0; intro H1.
apply Z.lt_trans with M. rewrite H1. apply Zmod_lt_z_m. omega. omega. rewrite H1.
cut ((((h mod M + M) * 2 ^ w + l) / 2 ^ p * 2 ^ p) mod M < M). omega. apply Zmod_lt_z_m. omega. Qed.

Lemma r'0_eq_1 :
_Z r'0 = ((h mod M * 2 ^ w + l) / 2 ^ p * 2 ^ p mod M + l mod 2 ^ p mod M) mod 2 ^ w \/
_Z r'0 = (((h mod M + M) * 2 ^ w + l) / 2 ^ p * 2 ^ p mod M + l mod 2 ^ p mod M) mod 2 ^ w.