ParagonIE_Sodium_Core_Curve25519::sc_reduce( string $s ): string

2535    public static function sc_reduce($s)2536    {2537        $s0 = 2097151 & self::load_3(self::substr($s, 0, 3));2538        $s1 = 2097151 & (self::load_4(self::substr($s, 2, 4)) >> 5);2539        $s2 = 2097151 & (self::load_3(self::substr($s, 5, 3)) >> 2);2540        $s3 = 2097151 & (self::load_4(self::substr($s, 7, 4)) >> 7);2541        $s4 = 2097151 & (self::load_4(self::substr($s, 10, 4)) >> 4);2542        $s5 = 2097151 & (self::load_3(self::substr($s, 13, 3)) >> 1);2543        $s6 = 2097151 & (self::load_4(self::substr($s, 15, 4)) >> 6);2544        $s7 = 2097151 & (self::load_3(self::substr($s, 18, 4)) >> 3);2545        $s8 = 2097151 & self::load_3(self::substr($s, 21, 3));2546        $s9 = 2097151 & (self::load_4(self::substr($s, 23, 4)) >> 5);2547        $s10 = 2097151 & (self::load_3(self::substr($s, 26, 3)) >> 2);2548        $s11 = 2097151 & (self::load_4(self::substr($s, 28, 4)) >> 7);2549        $s12 = 2097151 & (self::load_4(self::substr($s, 31, 4)) >> 4);2550        $s13 = 2097151 & (self::load_3(self::substr($s, 34, 3)) >> 1);2551        $s14 = 2097151 & (self::load_4(self::substr($s, 36, 4)) >> 6);2552        $s15 = 2097151 & (self::load_3(self::substr($s, 39, 4)) >> 3);2553        $s16 = 2097151 & self::load_3(self::substr($s, 42, 3));2554        $s17 = 2097151 & (self::load_4(self::substr($s, 44, 4)) >> 5);2555        $s18 = 2097151 & (self::load_3(self::substr($s, 47, 3)) >> 2);2556        $s19 = 2097151 & (self::load_4(self::substr($s, 49, 4)) >> 7);2557        $s20 = 2097151 & (self::load_4(self::substr($s, 52, 4)) >> 4);2558        $s21 = 2097151 & (self::load_3(self::substr($s, 55, 3)) >> 1);2559        $s22 = 2097151 & (self::load_4(self::substr($s, 57, 4)) >> 6);2560        $s23 = 0x1fffffff & (self::load_4(self::substr($s, 60, 4)) >> 3);2561 2562        $s11 += self::mul($s23,  666643, 20);2563        $s12 += self::mul($s23,  470296, 19);2564        $s13 += self::mul($s23,  654183, 20);2565        $s14 -= self::mul($s23,  997805, 20);2566        $s15 += self::mul($s23,  136657, 18);2567        $s16 -= self::mul($s23,  683901, 20);2568 2569        $s10 += self::mul($s22,  666643, 20);2570        $s11 += self::mul($s22,  470296, 19);2571        $s12 += self::mul($s22,  654183, 20);2572        $s13 -= self::mul($s22,  997805, 20);2573        $s14 += self::mul($s22,  136657, 18);2574        $s15 -= self::mul($s22,  683901, 20);2575 2576        $s9  += self::mul($s21,  666643, 20);2577        $s10 += self::mul($s21,  470296, 19);2578        $s11 += self::mul($s21,  654183, 20);2579        $s12 -= self::mul($s21,  997805, 20);2580        $s13 += self::mul($s21,  136657, 18);2581        $s14 -= self::mul($s21,  683901, 20);2582 2583        $s8  += self::mul($s20,  666643, 20);2584        $s9  += self::mul($s20,  470296, 19);2585        $s10 += self::mul($s20,  654183, 20);2586        $s11 -= self::mul($s20,  997805, 20);2587        $s12 += self::mul($s20,  136657, 18);2588        $s13 -= self::mul($s20,  683901, 20);2589 2590        $s7  += self::mul($s19,  666643, 20);2591        $s8  += self::mul($s19,  470296, 19);2592        $s9  += self::mul($s19,  654183, 20);2593        $s10 -= self::mul($s19,  997805, 20);2594        $s11 += self::mul($s19,  136657, 18);2595        $s12 -= self::mul($s19,  683901, 20);2596 2597        $s6  += self::mul($s18,  666643, 20);2598        $s7  += self::mul($s18,  470296, 19);2599        $s8  += self::mul($s18,  654183, 20);2600        $s9  -= self::mul($s18,  997805, 20);2601        $s10 += self::mul($s18,  136657, 18);2602        $s11 -= self::mul($s18,  683901, 20);2603 2604        $carry6 = ($s6 + (1 << 20)) >> 21;2605        $s7 += $carry6;2606        $s6 -= $carry6 << 21;2607        $carry8 = ($s8 + (1 << 20)) >> 21;2608        $s9 += $carry8;2609        $s8 -= $carry8 << 21;2610        $carry10 = ($s10 + (1 << 20)) >> 21;2611        $s11 += $carry10;2612        $s10 -= $carry10 << 21;2613        $carry12 = ($s12 + (1 << 20)) >> 21;2614        $s13 += $carry12;