-
Notifications
You must be signed in to change notification settings - Fork 1
/
jubjub-24.circuit
15 lines (13 loc) · 30.5 KB
/
jubjub-24.circuit
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
[0.000000] Parsing...
[0.031181] 64 multiplications, 24 temporaries, 153 constraints, 2047 cost
[0.031202] Eliminating...
[0.036209] 64 multiplications, 129 constraints, 1975 cost
[0.036213] Reducing...
[0.126366] 64 multiplications, 129 constraints, 926 cost
[0.126371] Maximizing 1s...
[0.128813] Done
64,0,129; -R0 + L0 = 1; O0 = 0; -R1 + L1 = 1; O1 = 0; -R2 + L2 = 1; O2 = 0; -R3 + L3 = 1; O3 = 0; -R4 + L4 = 1; O4 = 0; -R5 + L5 = 1; O5 = 0; -R6 + L6 = 1; O6 = 0; -R7 + L7 = 1; O7 = 0; -R8 + L8 = 1; O8 = 0; -R9 + L9 = 1; O9 = 0; -R10 + L10 = 1; O10 = 0; -R11 + L11 = 1; O11 = 0; -R12 + L12 = 1; O12 = 0; -R13 + L13 = 1; O13 = 0; -R14 + L14 = 1; O14 = 0; -R15 + L15 = 1; O15 = 0; -R16 + L16 = 1; O16 = 0; -R17 + L17 = 1; O17 = 0; -R18 + L18 = 1; O18 = 0; -R19 + L19 = 1; O19 = 0; -R20 + L20 = 1; O20 = 0; -R21 + L21 = 1; O21 = 0; -R22 + L22 = 1; O22 = 0; -R23 + L23 = 1; O23 = 0; -L24 + L0 = 0; -R24 + L1 = 0; O24 + 43761614841181848836640060563436836929981077120207297347288494535014373124598*L25 + 32269103446714936439983769262136990710725469005847626272964912432556195438855*L0 + 53470148824566042419568143658779164645897136432324031591105781651996231383599*L1 = -29906057699896301565330867720293440045651680527210179749355355245466869592774; R25 - 2*L2 = -1; -L26 + R3 = -1; -R26 + L4 = 0; O26 + 21014290721093653874050402869616240144839777829078930642127268241692916015010*L27 + 37447708648605002961390823892644286535292237354956047616343665579501453451337*L4 + 30291292020152637070930450826530356553284841560358009904384208293049320970610*R3 = 3307806090697943352187013046080939446504106744877303122448895377828881668212; R27 - 2*L5 = -1; -L28 + L6 = 0; -R28 + L7 = 0; O28 + 39422441130629874788198111655788462774110351529600124115545993295029051645684*L29 + 42917028799385590299700293733507678944889494535724212207609436744993250694556*L6 - 45564479698566953479243735330776442972323193012352683437382744426522131912328*L7 = -57537303999655368353381379047846237190672667758130920911173250734940757149551; R29 - 2*L8 = -1; -L30 + L10 = 0; -R30 + L9 = 0; O30 - 38446424868433796858851842953384746620424815807520879497914956603617301801014*L31 - 55773950624693951415836632983097258152703163972044214177119964811812625388646*L9 + 42482794273324292680092874678191174984383984641774082606360053433037358121899*L10 = 47884199894730878472035943320117243385413378225237965751041148459461640533738; R31 - 2*L11 = -1; -L32 + L12 = 0; -R32 + L13 = 0; O32 - 20250612213942354886483967109273225133396174558391381383748768908480982837086*L33 - 35983571209647853706086730739075165119914702551232554045007545515259548181061*L12 + 27117483234944807967701351106842533279345407430290237698040482616936134755505*L13 = -22018281253581861053712925557970578469951932129283828947133701972620421720784; R33 - 2*L14 = -1; -L34 + L15 = 0; -R34 + L16 = 0; O34 - 54738290663229999556376180381941591409728572269951983360814970035388973899548*L35 - 38390113464447949567018478247914015996794392609991934458921107900552990608806*L15 - 45469769356493839847728822558732421047736844427300279893380599414060356257319*L16 = 53000765232413967642459995975842185807009289459069967701806221699791157485952; R35 - 2*L17 = -1; -L36 + L18 = 0; -R36 + L19 = 0; O36 - 12320138768187974508291363584285074216609603368214935001790842439339971036275*L37 + 34740865249162108051478986261403064912906864596389695303247319120947531371527*L18 + 12175664601132295430302729103693386396167126719610157530009990204420441928720*L19 = 21420281086610913621358425568141701895597951205998987276730877662875130584225; R37 - 2*L20 = -1; -L38 + L21 = 0; -R38 + L22 = 0; O38 + 39845760052938495303348021919394043410619570282327565431181081898719638189068*L39 - 14299728283372120743352157858364495184129865644674696741042732240122775552150*L21 - 7008011890681353439567955538950767071580814263116066399402704863721366867776*L22 = 10547171005689693146329932453634478263969027121644871014500038439056181411597; R39 - 2*R23 = 1; O25 - O40 = -48299285782010984277546132319090397627111951896538861757731290237225845021652; R40 - 25758063836554693196908199229504721621729641941971332474184303138909611379443*L0 + 11291233376911191389536694739885054786695386896193593308033244950342020590185*L1 + 3363265264840957283186157428945612617240329097799939360463518825408167634185*L25 = 23177059771622734200920270668010317424676771938413839380304100471274429597862; L40 - L41 = 0; L40 - R41 = 0; L40 - L42 = 0; O41 + R42 - 51516127673109386393816398459009443243459283883942664948368606277819222758886*L0 + 22582466753822382779073389479770109573390773792387186616066489900684041180370*L1 + 6726530529681914566372314857891225234480658195599878720927037650816335268370*L25 = 37796029121622316273687516273631511448796945351331127164409162996763916580534; O27 - O42 + O25 - O43 = 0; -R43 - 25758063836554693196908199229504721621729641941971332474184303138909611379443*L0 + 11291233376911191389536694739885054786695386896193593308033244950342020590185*L1 - 30759539956556623185178837535720172364584628569249377782678985276037466457*L4 + R42 + 3363265264840957283186157428945612617240329097799939360463518825408167634185*L25 + 7224137796052607702389482387318843227054137898881038815935328843778405489389*L27 + 5035688805764254729615047036903177527727379034866312505324239583314225212885*R3 = -10044314862782717792338137300180728089344028692773926647944854077388602608041; L43 - L44 = 0; L43 - R44 = 0; L43 - L45 = 0; O44 + R45 - 25758063836554693196908199229504721621729641941971332474184303138909611379443*L0 + 11291233376911191389536694739885054786695386896193593308033244950342020590185*L1 + 61519079913113246370357675071440344729169257138498755565357970552074932914*L4 + R42 + 3363265264840957283186157428945612617240329097799939360463518825408167634185*L25 - 14448275592105215404778964774637686454108275797762077631870657687556810978778*L27 - 10071377611528509459230094073806355055454758069732625010648479166628450425770*R3 = -34730370618505709364286923466684622800675789603782084542002191518702610099859; O29 - O45 + O27 - O46 = 0; -R46 + 30759539956556623185178837535720172364584628569249377782678985276037466457*L4 - 7993354946293882984883407724955613885955035550770435753146331886633043177268*L6 + 25387182148104946511679400703038412770234509789355600795301944182112116641750*L7 + 54004687565420328327057699287858693850601179361354880082095422576097505435544*L29 - 7224137796052607702389482387318843227054137898881038815935328843778405489389*L27 + R45 - 5035688805764254729615047036903177527727379034866312505324239583314225212885*R3 = -43332002092804439844970813330290124051811129101169020711980089346319775915666; L46 - L47 = 0; L46 - R47 = 0; L46 - L48 = 0; O47 + R48 + 30759539956556623185178837535720172364584628569249377782678985276037466457*L4 + 15986709892587765969766815449911227771910071101540871506292663773266086354536*L6 - 50774364296209893023358801406076825540469019578711201590603888364224233283500*L7 + 7782714106475538769455586432970520151635205556365144218414317989323150623249*L29 - 7224137796052607702389482387318843227054137898881038815935328843778405489389*L27 + R45 - 5035688805764254729615047036903177527727379034866312505324239583314225212885*R3 = -53814140807430307305578144514611554460547066987745020852702321890192617154823; O31 - O48 - O49 + O29 = 0; -R49 + 7993354946293882984883407724955613885955035550770435753146331886633043177268*L6 - 25387182148104946511679400703038412770234509789355600795301944182112116641750*L7 + 21083723490013023409268859711249867232140935066618250965981738757181533546676*L9 + 35361509647247546400757678737051292023162572769713343992318410794327733283060*L10 - 54004687565420328327057699287858693850601179361354880082095422576097505435544*L29 + R48 - 49695694995130873991915508336242308319685159231177454393336848369454461072642*L31 = 56564427697681006750831429506917360238056964590703019845635385289189387080852; L49 - L50 = 0; L49 - R50 = 0; L49 - L51 = 0; O50 + R51 + 7993354946293882984883407724955613885955035550770435753146331886633043177268*L6 - 25387182148104946511679400703038412770234509789355600795301944182112116641750*L7 - 42167446980026046818537719422499734464281870133236501931963477514363067093352*L9 + 45069069942821102622055627534585323806512418739648216397968341552862694928217*L10 - 54004687565420328327057699287858693850601179361354880082095422576097505435544*L29 + R48 - 16400699247054447439739968336203291213467245816719995595931466402609239349053*L31 = -7818904872671685538699205189468243032012302788907135449387839980733453906524; O33 - O51 + O31 - O52 = 0; -R52 - 21083723490013023409268859711249867232140935066618250965981738757181533546676*L9 - 35361509647247546400757678737051292023162572769713343992318410794327733283060*L10 + 4008061346841079653139067281374852475888520390017366114582429819763451526317*L12 - 42320092346958758040396236331843963273255991391340671627161255111273903515947*L13 + 27051018152262162480782215677769195370591836428356643022128155724055816898147*L33 + R51 + 49695694995130873991915508336242308319685159231177454393336848369454461072642*L31 = -57311127535598469571366002589097992500607340420623408708575936294810670131572; L52 - L53 = 0; L52 - R53 = 0; L52 - L54 = 0; O53 + R54 - 21083723490013023409268859711249867232140935066618250965981738757181533546676*L9 - 35361509647247546400757678737051292023162572769713343992318410794327733283060*L10 - 8016122693682159306278134562749704951777040780034732229164859639526903052634*L12 - 31151904543398679342778512344999981306325581496393561128282652918970354462443*L13 - 54102036304524324961564431355538390741183672856713286044256311448111633796294*L33 + R51 + 49695694995130873991915508336242308319685159231177454393336848369454461072642*L31 = 50238922500844246853201370481810381731145413461636662122128647319698499275768; O35 - O54 + O33 - O55 = 0; -R55 - 4008061346841079653139067281374852475888520390017366114582429819763451526317*L12 + 42320092346958758040396236331843963273255991391340671627161255111273903515947*L13 - 30925179758858758420092819874735141467293633077220787300641083518670966856656*L15 - 33707571304645941338971443993390864549159020866025477546165075696674955507905*L16 - 27051018152262162480782215677769195370591836428356643022128155724055816898147*L33 + R54 - 28577164535188640781590465845702583715167504231203191717700312229510670809387*O34 = 10814196233474167865049515099508495562594842744249364429402445726930995356230; L55 - L56 = 0; L55 - R56 = 0; L55 - L57 = 0; O56 - 4008061346841079653139067281374852475888520390017366114582429819763451526317*L12 + 42320092346958758040396236331843963273255991391340671627161255111273903515947*L13 + 30925179758858758420092819874735141467293633077220787300641083518670966856656*L15 + 33707571304645941338971443993390864549159020866025477546165075696674955507905*L16 - 27051018152262162480782215677769195370591836428356643022128155724055816898147*L33 + R58 + 53317504790820387281667962736454714062800115167062289270597108955310806163273*L18 - 24384704985163662596364158445805620287758811064172727835956989555541490326812*L19 + 48401959718465729902439578533473879812911387872956777157962258478490427591956*L37 + R54 + 28577164535188640781590465845702583715167504231203191717700312229510670809387*O34 = 35916269798090510922666288160452705816825019526264912917870363970386548654690; O37 - O57 + O35 - O58 = 0; -R58 + 30925179758858758420092819874735141467293633077220787300641083518670966856656*L15 + 33707571304645941338971443993390864549159020866025477546165075696674955507905*L16 - 53317504790820387281667962736454714062800115167062289270597108955310806163273*L18 + 24384704985163662596364158445805620287758811064172727835956989555541490326812*L19 - 48401959718465729902439578533473879812911387872956777157962258478490427591956*L37 + R57 + 28577164535188640781590465845702583715167504231203191717700312229510670809387*O34 = 50005387771403869771802054711438677289738048867496429054029328190260630040190; L58 - L59 = 0; L58 - R59 = 0; L58 - L60 = 0; O59 + R60 + 44160425135144966421432903200676234335562781222111963429186163724414256995482*L18 + 42637974281825207634478509671271046989561131086556720874734194474893690513901*L19 + 29413789918080994283747750591733731585896599339795427091281612293953121281531*L37 + R58 = 40883387259124798937583648646754763527591643326097594763014425004452454712417; O39 - O60 + O37 - O61 = 0; -R61 + 53317504790820387281667962736454714062800115167062289270597108955310806163273*L18 - 24384704985163662596364158445805620287758811064172727835956989555541490326812*L19 + 55523921953347453110599909679295050379740274602193759586448132726192800950540*L21 + 9440550144010915001571829578893139615047975752588665233854462274686952592643*L22 + 48401959718465729902439578533473879812911387872956777157962258478490427591956*L37 + R60 + 26588579085438804971624499509232953680269632844229627958343423982473042009770*L39 = -57448109824469310150058164586511689294521086999804858656521825859622411481423; L61 - L62 = 0; L61 - R62 = 0; L61 - L63 = 0; R63 - 55523921953347453110599909679295050379740274602193759586448132726192800950540*L21 - 9440550144010915001571829578893139615047975752588665233854462274686952592643*L22 - 26588579085438804971624499509232953680269632844229627958343423982473042009770*L39 = -16054705641021387516377832947988749511955441263832660259476321039874883868276; O62 + 53317504790820387281667962736454714062800115167062289270597108955310806163273*L18 - 24384704985163662596364158445805620287758811064172727835956989555541490326812*L19 - 55523921953347453110599909679295050379740274602193759586448132726192800950540*L21 - 9440550144010915001571829578893139615047975752588665233854462274686952592643*L22 + 48401959718465729902439578533473879812911387872956777157962258478490427591956*L37 + R60 - 26588579085438804971624499509232953680269632844229627958343423982473042009770*L39 = 56042223311768611330506825759078983775751694310465067952929234622054000049202;
Secret inputs:
L = {SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0x8622f5f9, 0x83a711d6, 0x35530e80, 0x298ac2f1, 0x287824b2, 0xf76f6474, 0x7f4919d6, 0x2e300537), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0x96354875, 0x4f6885e1, 0x0842bb28, 0x84bf9b55, 0xef4c3e4f, 0xcf53be58, 0x83c5c830, 0x1623fcbc), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0xd736927f, 0xa5d8ce90, 0x2e0fefb8, 0xf6364c69, 0x695fb4ca, 0xe6f89ab7, 0xa6f2e78a, 0x9cdfa6d7), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0xc64270a6, 0x0d080926, 0x26f781af, 0x480c9a2e, 0x66b6b4b0, 0x4e5e785a, 0x1e63d39b, 0x9e3c266a), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0x1bf48a4b, 0xc6fba45e, 0x571b4b77, 0xfe79ef82, 0x7e6feea1, 0x9ff195b5, 0x91237435, 0xc3f1645a), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0x8475ab80, 0x22690b73, 0x7927c546, 0xd6a5655e, 0x79c2fafa, 0x8e341d69, 0x8eee5798, 0x3bd1482e), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0x5319cb3c, 0xaf7d809a, 0xcbbc253e, 0x06e8f49a, 0x8058f503, 0xa13be5f5, 0x794eda87, 0x2c6a75ef), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0x42ef18e6, 0xd8dd1372, 0xb0eab2ec, 0x0df75026, 0x329dc47f, 0x450a2adc, 0x40cd4ede, 0xe37b78dc), SECP256K1_SCALAR_CONST(0x3207ab36, 0xdfb378d1, 0x67220c68, 0x72bf3fc6, 0x1809c6a8, 0x7dec0dd7, 0x68d3ed02, 0x325d24fb), SECP256K1_SCALAR_CONST(0x3207ab36, 0xdfb378d1, 0x67220c68, 0x72bf3fc6, 0x1809c6a8, 0x7dec0dd7, 0x68d3ed02, 0x325d24fb), SECP256K1_SCALAR_CONST(0x3207ab36, 0xdfb378d1, 0x67220c68, 0x72bf3fc6, 0x1809c6a8, 0x7dec0dd7, 0x68d3ed02, 0x325d24fb), SECP256K1_SCALAR_CONST(0x33423240, 0x22684b20, 0xa6118407, 0xcd7caf70, 0xa60a483d, 0x35444ecb, 0x37a1da3d, 0xb0e815fa), SECP256K1_SCALAR_CONST(0x33423240, 0x22684b20, 0xa6118407, 0xcd7caf70, 0xa60a483d, 0x35444ecb, 0x37a1da3d, 0xb0e815fa), SECP256K1_SCALAR_CONST(0x33423240, 0x22684b20, 0xa6118407, 0xcd7caf70, 0xa60a483d, 0x35444ecb, 0x37a1da3d, 0xb0e815fa), SECP256K1_SCALAR_CONST(0xed40570c, 0xd608f7e5, 0x296d4311, 0x4915dce7, 0x13c716b0, 0xd8eef5f1, 0x189bed47, 0xe1c51794), SECP256K1_SCALAR_CONST(0xed40570c, 0xd608f7e5, 0x296d4311, 0x4915dce7, 0x13c716b0, 0xd8eef5f1, 0x189bed47, 0xe1c51794), SECP256K1_SCALAR_CONST(0xed40570c, 0xd608f7e5, 0x296d4311, 0x4915dce7, 0x13c716b0, 0xd8eef5f1, 0x189bed47, 0xe1c51794), SECP256K1_SCALAR_CONST(0x1a3f3aa5, 0xa73d71d1, 0xcf329373, 0x6db8f8f5, 0x0bf86a3f, 0x2c9fc29c, 0xa78cc52b, 0x60254ea6), SECP256K1_SCALAR_CONST(0x1a3f3aa5, 0xa73d71d1, 0xcf329373, 0x6db8f8f5, 0x0bf86a3f, 0x2c9fc29c, 0xa78cc52b, 0x60254ea6), SECP256K1_SCALAR_CONST(0x1a3f3aa5, 0xa73d71d1, 0xcf329373, 0x6db8f8f5, 0x0bf86a3f, 0x2c9fc29c, 0xa78cc52b, 0x60254ea6), SECP256K1_SCALAR_CONST(0xa8275a6b, 0x68dba2a8, 0x4683be3e, 0xd037d8ac, 0x7348fb40, 0x213a4d08, 0x0cef929d, 0xdaa139f3), SECP256K1_SCALAR_CONST(0xa8275a6b, 0x68dba2a8, 0x4683be3e, 0xd037d8ac, 0x7348fb40, 0x213a4d08, 0x0cef929d, 0xdaa139f3), SECP256K1_SCALAR_CONST(0xa8275a6b, 0x68dba2a8, 0x4683be3e, 0xd037d8ac, 0x7348fb40, 0x213a4d08, 0x0cef929d, 0xdaa139f3), SECP256K1_SCALAR_CONST(0x62902b84, 0x8d597fe2, 0x61d3388a, 0xbe8a987f, 0x4a48842c, 0x196c6a00, 0x647401af, 0x6afbca2d), SECP256K1_SCALAR_CONST(0x62902b84, 0x8d597fe2, 0x61d3388a, 0xbe8a987f, 0x4a48842c, 0x196c6a00, 0x647401af, 0x6afbca2d), SECP256K1_SCALAR_CONST(0x62902b84, 0x8d597fe2, 0x61d3388a, 0xbe8a987f, 0x4a48842c, 0x196c6a00, 0x647401af, 0x6afbca2d), SECP256K1_SCALAR_CONST(0xe97eb0ad, 0xce217304, 0x47b8fd17, 0x41e8ded9, 0x5d7d5444, 0x68dab0bc, 0xb0380309, 0xdf46cf0d), SECP256K1_SCALAR_CONST(0xe97eb0ad, 0xce217304, 0x47b8fd17, 0x41e8ded9, 0x5d7d5444, 0x68dab0bc, 0xb0380309, 0xdf46cf0d), SECP256K1_SCALAR_CONST(0xe97eb0ad, 0xce217304, 0x47b8fd17, 0x41e8ded9, 0x5d7d5444, 0x68dab0bc, 0xb0380309, 0xdf46cf0d), SECP256K1_SCALAR_CONST(0x7c47fde9, 0xaa39afd3, 0xe21a712c, 0x6901ec3f, 0x087d2017, 0xe035b680, 0x98d58fc5, 0x7505015b), SECP256K1_SCALAR_CONST(0x7c47fde9, 0xaa39afd3, 0xe21a712c, 0x6901ec3f, 0x087d2017, 0xe035b680, 0x98d58fc5, 0x7505015b), SECP256K1_SCALAR_CONST(0x7c47fde9, 0xaa39afd3, 0xe21a712c, 0x6901ec3f, 0x087d2017, 0xe035b680, 0x98d58fc5, 0x7505015b)}
R = {SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xbaaedce6, 0xaf48a03b, 0xbfd25e8c, 0xd0364140), SECP256K1_SCALAR_CONST(0xa68029aa, 0x8a4a0abe, 0xc6ea9644, 0x481f70c2, 0xa3326f34, 0xaf0fc066, 0xfe8ff733, 0xd9f1c429), SECP256K1_SCALAR_CONST(0x3207ab36, 0xdfb378d1, 0x67220c68, 0x72bf3fc6, 0x1809c6a8, 0x7dec0dd7, 0x68d3ed02, 0x325d24fb), SECP256K1_SCALAR_CONST(0xdc55da77, 0xb854c2d0, 0x9edc612d, 0x397545bc, 0x875aee7a, 0xb1667416, 0x3e64a8e6, 0x5ed4897b), SECP256K1_SCALAR_CONST(0x09d0ff43, 0x3e6c3b13, 0xe8159606, 0x3f22d282, 0xa09c0fd7, 0xcf9031ac, 0x816fd6b0, 0x5d3e5c53), SECP256K1_SCALAR_CONST(0x33423240, 0x22684b20, 0xa6118407, 0xcd7caf70, 0xa60a483d, 0x35444ecb, 0x37a1da3d, 0xb0e815fa), SECP256K1_SCALAR_CONST(0xaf1967fc, 0x387a9fe0, 0x9e30aa8d, 0xa674c78f, 0x1f9ef00e, 0x40105f3a, 0xbfc46144, 0xd8018eaa), SECP256K1_SCALAR_CONST(0x62ac85f0, 0xefba1a8c, 0x1edb439b, 0xe57dd2ed, 0xe804eea4, 0x42169bfc, 0xbb021282, 0x7bc67d0d), SECP256K1_SCALAR_CONST(0xed40570c, 0xd608f7e5, 0x296d4311, 0x4915dce7, 0x13c716b0, 0xd8eef5f1, 0x189bed47, 0xe1c51794), SECP256K1_SCALAR_CONST(0xf24d9bc3, 0xad3149f0, 0x419b0fba, 0x8e90d407, 0x0def27af, 0x25d08fea, 0x621c0093, 0xabcd6fc0), SECP256K1_SCALAR_CONST(0x57179569, 0x927f03c1, 0x2ba3a349, 0xc2e4ff09, 0xf994ca74, 0x4fdce347, 0xa072cec8, 0x43c04e48), SECP256K1_SCALAR_CONST(0x1a3f3aa5, 0xa73d71d1, 0xcf329373, 0x6db8f8f5, 0x0bf86a3f, 0x2c9fc29c, 0xa78cc52b, 0x60254ea6), SECP256K1_SCALAR_CONST(0x172b73c7, 0x3ace627b, 0x5629ee22, 0xf30f8415, 0x134d09b3, 0xa270130d, 0x8c8cd5d6, 0x80db7cca), SECP256K1_SCALAR_CONST(0x26ebebeb, 0x2cf43564, 0xf7adb143, 0xe7e79d7c, 0xe6637499, 0x62d326d0, 0x9bd8403d, 0x42033780), SECP256K1_SCALAR_CONST(0xa8275a6b, 0x68dba2a8, 0x4683be3e, 0xd037d8ac, 0x7348fb40, 0x213a4d08, 0x0cef929d, 0xdaa139f3), SECP256K1_SCALAR_CONST(0x6f80d5f9, 0x4b6dcd42, 0x9cee85a5, 0xb010c589, 0x772b4b80, 0x5df72224, 0x2e479b2c, 0x145f4485), SECP256K1_SCALAR_CONST(0x0665a47f, 0x460a5c1c, 0x5da480d0, 0xff399ae0, 0xf7c3e7ea, 0x486b7112, 0xd7b08955, 0xeb2b06dc), SECP256K1_SCALAR_CONST(0x62902b84, 0x8d597fe2, 0x61d3388a, 0xbe8a987f, 0x4a48842c, 0x196c6a00, 0x647401af, 0x6afbca2d), SECP256K1_SCALAR_CONST(0xd4aaaa94, 0x8f82d5f0, 0xebff297c, 0x1c099c9d, 0x9c30d4a8, 0x7a0ea6b8, 0x76127684, 0x8871f2f6), SECP256K1_SCALAR_CONST(0x1dd5451e, 0x931f9189, 0xa6e4501b, 0x41409c65, 0x84a33c90, 0x84103e56, 0x7c2a87a9, 0x9db89162), SECP256K1_SCALAR_CONST(0xe97eb0ad, 0xce217304, 0x47b8fd17, 0x41e8ded9, 0x5d7d5444, 0x68dab0bc, 0xb0380309, 0xdf46cf0d), SECP256K1_SCALAR_CONST(0x87b4ff89, 0x0a215b40, 0x2e6f77e7, 0xcc892474, 0x4659eb8d, 0x9954654d, 0x2d27b2a1, 0x324f4a95), SECP256K1_SCALAR_CONST(0x45711e68, 0x76717360, 0xc339483b, 0x4da3fa6e, 0xac00242e, 0xaaf1abf9, 0x3c0968d5, 0x408346df), SECP256K1_SCALAR_CONST(0x7c47fde9, 0xaa39afd3, 0xe21a712c, 0x6901ec3f, 0x087d2017, 0xe035b680, 0x98d58fc5, 0x7505015b), SECP256K1_SCALAR_CONST(0xd2f3a6c8, 0x27a194f8, 0x030aff3f, 0xc5285797, 0xdd5021b7, 0x3c1affbb, 0xf4bb8e93, 0xc6e2c3f3)}
O = {SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0x8622f5f9, 0x83a711d6, 0x35530e80, 0x298ac2f1, 0x287824b2, 0xf76f6474, 0x7f4919d6, 0x2e300537), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0x69cab78a, 0xb0977a1e, 0xf7bd44d7, 0x7b4064a8, 0xcb629e96, 0xdff4e1e3, 0x3c0c965c, 0xba124485), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 1), SECP256K1_SCALAR_CONST(0x28c96d80, 0x5a27316f, 0xd1f01047, 0x09c9b395, 0x514f281b, 0xc8500584, 0x18df7702, 0x33569a6a), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0x39bd8f59, 0xf2f7f6d9, 0xd9087e50, 0xb7f365d0, 0x53f82836, 0x60ea27e1, 0xa16e8af1, 0x31fa1ad7), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0x1bf48a4b, 0xc6fba45e, 0x571b4b77, 0xfe79ef82, 0x7e6feea1, 0x9ff195b5, 0x91237435, 0xc3f1645a), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0x7b8a547f, 0xdd96f48c, 0x86d83ab9, 0x295a9aa0, 0x40ebe1ec, 0x211482d2, 0x30e406f4, 0x9464f913), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0xace634c3, 0x50827f65, 0x3443dac1, 0xf9170b64, 0x3a55e7e3, 0x0e0cba46, 0x46838405, 0xa3cbcb52), SECP256K1_SCALAR_CONST(0, 0, 0, 0, 0, 0, 0, 0), SECP256K1_SCALAR_CONST(0xbd10e719, 0x2722ec8d, 0x4f154d13, 0xf208afd8, 0x88111867, 0x6a3e755f, 0x7f050fad, 0xecbac865), SECP256K1_SCALAR_CONST(0xf0eb6348, 0x7a8d0b78, 0xd93d2339, 0x7214b70a, 0xca06a3f6, 0xcf15ecdd, 0xc5c610d4, 0x9ff2610b), SECP256K1_SCALAR_CONST(0x5dbec3bd, 0x0f62fd22, 0x07648dd1, 0x5f938861, 0x7b5c1586, 0x7dcfc49a, 0xb1eb78ba, 0x1a98a441), SECP256K1_SCALAR_CONST(0xdcb68864, 0x8317994d, 0x21baf1b1, 0xb9160d14, 0x410ca04e, 0x097eb840, 0xd66436c6, 0xb95eb42a), SECP256K1_SCALAR_CONST(0x1337251f, 0xb126f2a8, 0x0b5561a5, 0xebb51a85, 0xb2ce22fb, 0xcde58e16, 0xe4f1796c, 0x2ee39592), SECP256K1_SCALAR_CONST(0xb01bcf02, 0x6d615886, 0xc290e33a, 0x0c994b1e, 0xa6cf9134, 0x87b3e16a, 0xf6722756, 0xb9c901f2), SECP256K1_SCALAR_CONST(0x7caaed43, 0xc8abb6df, 0x2db15e77, 0xe6ae381b, 0xcc4c6978, 0x82aa665a, 0x681e0775, 0xad7e91b3), SECP256K1_SCALAR_CONST(0x15e937c7, 0x4212f4af, 0x9bfbf6a6, 0x9e5be022, 0x50655d3a, 0x259a810c, 0xecce05e9, 0x3fea4d3c), SECP256K1_SCALAR_CONST(0x2ec56e6b, 0x6d1b3f01, 0x6a609ba2, 0x3b3d6056, 0x84f7536f, 0xe4c89cec, 0xcc13be7b, 0x82fa0c8c), SECP256K1_SCALAR_CONST(0xdf254e0b, 0xf1e49032, 0x9e1cec1e, 0xa1f839d3, 0xc949f84d, 0x98c49399, 0xb9a56315, 0x6ac92746), SECP256K1_SCALAR_CONST(0x8361aece, 0x5b3a9817, 0x0cdba279, 0x1fc4df90, 0x96ac34eb, 0x3fbe3a07, 0xc07afd6a, 0xcabdcf3c), SECP256K1_SCALAR_CONST(0x43da73e0, 0xeca26ab4, 0x07231839, 0x96540533, 0xeba95ad1, 0x87d06cd2, 0x3708f61d, 0x7e010b20), SECP256K1_SCALAR_CONST(0xe895c241, 0x6838289e, 0xb83eddf2, 0x2046d8e1, 0xe93a3646, 0x2c5848c9, 0x7e8274d9, 0x55acf58d), SECP256K1_SCALAR_CONST(0x6d1c5764, 0x51bb7299, 0x77e4ebd6, 0x96267c6f, 0xa3dcbd78, 0x83cc1509, 0x73e1e8da, 0x7074cae5), SECP256K1_SCALAR_CONST(0x4af22399, 0x17ff4705, 0xd8dfbc1f, 0x92d87184, 0x143faf90, 0xfa7c557b, 0xc7cafe87, 0x2fb18a4f), SECP256K1_SCALAR_CONST(0xeaae25e3, 0x289e24eb, 0x808511d9, 0xef98e662, 0x934f9253, 0xd4b95c86, 0xd5ecaf7d, 0xc32b8d26), SECP256K1_SCALAR_CONST(0xacd0b8e8, 0x7bf473ff, 0x5d6e7457, 0x383ba3be, 0xe6bb1b20, 0x9b955c3c, 0xabed2a39, 0x65611188), SECP256K1_SCALAR_CONST(0xcafd01fb, 0xaaa9c42d, 0x65fa3a3d, 0xfd081d0f, 0xd5014223, 0x16bab3e8, 0xc00761ad, 0x3746d609), SECP256K1_SCALAR_CONST(0x4a37c2e3, 0x113abaab, 0x975759b0, 0x60c4af84, 0x04faeaff, 0x11937ef5, 0x04d4aa0c, 0x6e23fb03), SECP256K1_SCALAR_CONST(0xde38c660, 0x1cdeb946, 0x23c4bbca, 0xc1acf680, 0x7646ded0, 0x1d8dbe23, 0x7292e0ed, 0xca0cc962), SECP256K1_SCALAR_CONST(0xdc02dc05, 0xedcc3c3b, 0x0af99065, 0x7a269309, 0xccadc81d, 0x38662f61, 0xf66517c5, 0xbb1c51aa), SECP256K1_SCALAR_CONST(0x20ebe689, 0xa6588bfc, 0xf510761b, 0x9cdfdc37, 0x59846676, 0x61cb6d45, 0xc30ba35f, 0xc8397343), SECP256K1_SCALAR_CONST(0x490b3552, 0xd14cdff5, 0x8e48b1ba, 0x4e3fdf06, 0xae33bced, 0x67372224, 0x42aa91c6, 0xf816df33), SECP256K1_SCALAR_CONST(0xa25cb81b, 0x31ea690d, 0xd86681e7, 0xf87483ca, 0xf9fc311f, 0x52de9b90, 0x5b69dbd0, 0x7e9058ee), SECP256K1_SCALAR_CONST(0x405ac8c7, 0x08f9d2be, 0x3739f5cb, 0xdb35b4d0, 0x43991892, 0x2b1da0ac, 0x4fc0863a, 0x43764dc2)}