| u288 | — |
| RSA2048Chunks | A 2048-bit integer packed into 6 chunks of at most 384 bits each (the top chunk w5 is constrained to 128 bits). Given 22 limbs of 96 bits, groups of 4 consecutive limbs form one u384… |
| RSA2048ReductionWitness | Witness for one modular reduction a * b = q * n + r over Z, where q (quotient) and r (remainder) are 2048-bit integers in chunk representation. |
| E12D | Degree-12 extension field element (generic coefficients). Represents an element of the extension field F _ {q^12} modeled as the quotient ring F_q w /p(w), where p(w) is an irreducible polynomial of… |
| E12T | Degree-12 extension field element using a 2-3-2 tower construction. The field F _ {q^12} is built in three steps:… |