final class com.google.crypto.tink.subtle.Ed25519Constants
  minor version: 0
  major version: 59
  flags: flags: (0x0030) ACC_FINAL, ACC_SUPER
  this_class: com.google.crypto.tink.subtle.Ed25519Constants
  super_class: java.lang.Object
{
  static final long[] D;
    descriptor: [J
    flags: (0x0018) ACC_STATIC, ACC_FINAL

  static final long[] D2;
    descriptor: [J
    flags: (0x0018) ACC_STATIC, ACC_FINAL

  static final long[] SQRTM1;
    descriptor: [J
    flags: (0x0018) ACC_STATIC, ACC_FINAL

  static final com.google.crypto.tink.subtle.Ed25519$CachedXYT[][] B_TABLE;
    descriptor: [[Lcom/google/crypto/tink/subtle/Ed25519$CachedXYT;
    flags: (0x0018) ACC_STATIC, ACC_FINAL

  static final com.google.crypto.tink.subtle.Ed25519$CachedXYT[] B2;
    descriptor: [Lcom/google/crypto/tink/subtle/Ed25519$CachedXYT;
    flags: (0x0018) ACC_STATIC, ACC_FINAL

  private static final java.math.BigInteger P_BI;
    descriptor: Ljava/math/BigInteger;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private static final java.math.BigInteger D_BI;
    descriptor: Ljava/math/BigInteger;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private static final java.math.BigInteger D2_BI;
    descriptor: Ljava/math/BigInteger;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private static final java.math.BigInteger SQRTM1_BI;
    descriptor: Ljava/math/BigInteger;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  static void <clinit>();
    descriptor: ()V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=4, locals=5, args_size=0
         0: .line 41
            ldc 2
            invokestatic java.math.BigInteger.valueOf:(J)Ljava/math/BigInteger;
            sipush 255
            invokevirtual java.math.BigInteger.pow:(I)Ljava/math/BigInteger;
            ldc 19
            invokestatic java.math.BigInteger.valueOf:(J)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.subtract:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
         1: .line 40
            putstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
         2: .line 43
            ldc -121665
            invokestatic java.math.BigInteger.valueOf:(J)Ljava/math/BigInteger;
            ldc 121666
            invokestatic java.math.BigInteger.valueOf:(J)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.modInverse:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.mod:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
         3: .line 42
            putstatic com.google.crypto.tink.subtle.Ed25519Constants.D_BI:Ljava/math/BigInteger;
         4: .line 44
            ldc 2
            invokestatic java.math.BigInteger.valueOf:(J)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.D_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.mod:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            putstatic com.google.crypto.tink.subtle.Ed25519Constants.D2_BI:Ljava/math/BigInteger;
         5: .line 46
            ldc 2
            invokestatic java.math.BigInteger.valueOf:(J)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            getstatic java.math.BigInteger.ONE:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.subtract:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            ldc 4
            invokestatic java.math.BigInteger.valueOf:(J)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.divide:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.modPow:(Ljava/math/BigInteger;Ljava/math/BigInteger;)Ljava/math/BigInteger;
         6: .line 45
            putstatic com.google.crypto.tink.subtle.Ed25519Constants.SQRTM1_BI:Ljava/math/BigInteger;
         7: .line 103
            new com.google.crypto.tink.subtle.Ed25519Constants$Point
            dup
            invokespecial com.google.crypto.tink.subtle.Ed25519Constants$Point.<init>:()V
            astore 0 /* b */
        start local 0 // com.google.crypto.tink.subtle.Ed25519Constants$Point b
         8: .line 104
            aload 0 /* b */
            ldc 4
            invokestatic java.math.BigInteger.valueOf:(J)Ljava/math/BigInteger;
            ldc 5
            invokestatic java.math.BigInteger.valueOf:(J)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.modInverse:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.mod:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            putfield com.google.crypto.tink.subtle.Ed25519Constants$Point.y:Ljava/math/BigInteger;
         9: .line 105
            aload 0 /* b */
            aload 0 /* b */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.y:Ljava/math/BigInteger;
            invokestatic com.google.crypto.tink.subtle.Ed25519Constants.recoverX:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            putfield com.google.crypto.tink.subtle.Ed25519Constants$Point.x:Ljava/math/BigInteger;
        10: .line 107
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.D_BI:Ljava/math/BigInteger;
            invokestatic com.google.crypto.tink.subtle.Ed25519Constants.toLittleEndian:(Ljava/math/BigInteger;)[B
            invokestatic com.google.crypto.tink.subtle.Field25519.expand:([B)[J
            putstatic com.google.crypto.tink.subtle.Ed25519Constants.D:[J
        11: .line 108
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.D2_BI:Ljava/math/BigInteger;
            invokestatic com.google.crypto.tink.subtle.Ed25519Constants.toLittleEndian:(Ljava/math/BigInteger;)[B
            invokestatic com.google.crypto.tink.subtle.Field25519.expand:([B)[J
            putstatic com.google.crypto.tink.subtle.Ed25519Constants.D2:[J
        12: .line 109
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.SQRTM1_BI:Ljava/math/BigInteger;
            invokestatic com.google.crypto.tink.subtle.Ed25519Constants.toLittleEndian:(Ljava/math/BigInteger;)[B
            invokestatic com.google.crypto.tink.subtle.Field25519.expand:([B)[J
            putstatic com.google.crypto.tink.subtle.Ed25519Constants.SQRTM1:[J
        13: .line 111
            aload 0 /* b */
            astore 1 /* bi */
        start local 1 // com.google.crypto.tink.subtle.Ed25519Constants$Point bi
        14: .line 112
            bipush 32
            bipush 8
            multianewarray [[Lcom/google/crypto/tink/subtle/Ed25519$CachedXYT; 2
            putstatic com.google.crypto.tink.subtle.Ed25519Constants.B_TABLE:[[Lcom/google/crypto/tink/subtle/Ed25519$CachedXYT;
        15: .line 113
            iconst_0
            istore 2 /* i */
        start local 2 // int i
        16: goto 30
        17: .line 114
      StackMap locals: com.google.crypto.tink.subtle.Ed25519Constants$Point com.google.crypto.tink.subtle.Ed25519Constants$Point int
      StackMap stack:
            aload 1 /* bi */
            astore 3 /* bij */
        start local 3 // com.google.crypto.tink.subtle.Ed25519Constants$Point bij
        18: .line 115
            iconst_0
            istore 4 /* j */
        start local 4 // int j
        19: goto 23
        20: .line 116
      StackMap locals: com.google.crypto.tink.subtle.Ed25519Constants$Point int
      StackMap stack:
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.B_TABLE:[[Lcom/google/crypto/tink/subtle/Ed25519$CachedXYT;
            iload 2 /* i */
            aaload
            iload 4 /* j */
            aload 3 /* bij */
            invokestatic com.google.crypto.tink.subtle.Ed25519Constants.getCachedXYT:(Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;)Lcom/google/crypto/tink/subtle/Ed25519$CachedXYT;
            aastore
        21: .line 117
            aload 3 /* bij */
            aload 1 /* bi */
            invokestatic com.google.crypto.tink.subtle.Ed25519Constants.edwards:(Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;)Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;
            astore 3 /* bij */
        22: .line 115
            iinc 4 /* j */ 1
      StackMap locals:
      StackMap stack:
        23: iload 4 /* j */
            bipush 8
            if_icmplt 20
        end local 4 // int j
        24: .line 119
            iconst_0
            istore 4 /* j */
        start local 4 // int j
        25: goto 28
        26: .line 120
      StackMap locals:
      StackMap stack:
            aload 1 /* bi */
            aload 1 /* bi */
            invokestatic com.google.crypto.tink.subtle.Ed25519Constants.edwards:(Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;)Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;
            astore 1 /* bi */
        27: .line 119
            iinc 4 /* j */ 1
      StackMap locals:
      StackMap stack:
        28: iload 4 /* j */
            bipush 8
            if_icmplt 26
        end local 4 // int j
        end local 3 // com.google.crypto.tink.subtle.Ed25519Constants$Point bij
        29: .line 113
            iinc 2 /* i */ 1
      StackMap locals:
      StackMap stack:
        30: iload 2 /* i */
            bipush 32
            if_icmplt 17
        end local 2 // int i
        31: .line 123
            aload 0 /* b */
            astore 1 /* bi */
        32: .line 124
            aload 0 /* b */
            aload 0 /* b */
            invokestatic com.google.crypto.tink.subtle.Ed25519Constants.edwards:(Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;)Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;
            astore 2 /* b2 */
        start local 2 // com.google.crypto.tink.subtle.Ed25519Constants$Point b2
        33: .line 125
            bipush 8
            anewarray com.google.crypto.tink.subtle.Ed25519$CachedXYT
            putstatic com.google.crypto.tink.subtle.Ed25519Constants.B2:[Lcom/google/crypto/tink/subtle/Ed25519$CachedXYT;
        34: .line 126
            iconst_0
            istore 3 /* i */
        start local 3 // int i
        35: goto 39
        36: .line 127
      StackMap locals: com.google.crypto.tink.subtle.Ed25519Constants$Point com.google.crypto.tink.subtle.Ed25519Constants$Point com.google.crypto.tink.subtle.Ed25519Constants$Point int
      StackMap stack:
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.B2:[Lcom/google/crypto/tink/subtle/Ed25519$CachedXYT;
            iload 3 /* i */
            aload 1 /* bi */
            invokestatic com.google.crypto.tink.subtle.Ed25519Constants.getCachedXYT:(Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;)Lcom/google/crypto/tink/subtle/Ed25519$CachedXYT;
            aastore
        37: .line 128
            aload 1 /* bi */
            aload 2 /* b2 */
            invokestatic com.google.crypto.tink.subtle.Ed25519Constants.edwards:(Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;)Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;
            astore 1 /* bi */
        38: .line 126
            iinc 3 /* i */ 1
      StackMap locals:
      StackMap stack:
        39: iload 3 /* i */
            bipush 8
            if_icmplt 36
        end local 3 // int i
        end local 2 // com.google.crypto.tink.subtle.Ed25519Constants$Point b2
        end local 1 // com.google.crypto.tink.subtle.Ed25519Constants$Point bi
        end local 0 // com.google.crypto.tink.subtle.Ed25519Constants$Point b
        40: .line 130
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            8   40     0     b  Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;
           14   40     1    bi  Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;
           16   31     2     i  I
           18   29     3   bij  Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;
           19   24     4     j  I
           25   29     4     j  I
           33   40     2    b2  Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;
           35   40     3     i  I

  void <init>();
    descriptor: ()V
    flags: (0x0000) 
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // com.google.crypto.tink.subtle.Ed25519Constants this
         0: .line 22
            aload 0 /* this */
            invokespecial java.lang.Object.<init>:()V
            return
        end local 0 // com.google.crypto.tink.subtle.Ed25519Constants this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lcom/google/crypto/tink/subtle/Ed25519Constants;

  private static java.math.BigInteger recoverX(java.math.BigInteger);
    descriptor: (Ljava/math/BigInteger;)Ljava/math/BigInteger;
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=4, locals=3, args_size=1
        start local 0 // java.math.BigInteger y
         0: .line 56
            aload 0 /* y */
            iconst_2
            invokevirtual java.math.BigInteger.pow:(I)Ljava/math/BigInteger;
         1: .line 57
            getstatic java.math.BigInteger.ONE:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.subtract:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
         2: .line 58
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.D_BI:Ljava/math/BigInteger;
            aload 0 /* y */
            iconst_2
            invokevirtual java.math.BigInteger.pow:(I)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic java.math.BigInteger.ONE:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.add:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.modInverse:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
         3: .line 55
            astore 1 /* xx */
        start local 1 // java.math.BigInteger xx
         4: .line 59
            aload 1 /* xx */
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            ldc 3
            invokestatic java.math.BigInteger.valueOf:(J)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.add:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            ldc 8
            invokestatic java.math.BigInteger.valueOf:(J)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.divide:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.modPow:(Ljava/math/BigInteger;Ljava/math/BigInteger;)Ljava/math/BigInteger;
            astore 2 /* x */
        start local 2 // java.math.BigInteger x
         5: .line 60
            aload 2 /* x */
            iconst_2
            invokevirtual java.math.BigInteger.pow:(I)Ljava/math/BigInteger;
            aload 1 /* xx */
            invokevirtual java.math.BigInteger.subtract:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.mod:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic java.math.BigInteger.ZERO:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.equals:(Ljava/lang/Object;)Z
            ifne 7
         6: .line 61
            aload 2 /* x */
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.SQRTM1_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.mod:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            astore 2 /* x */
         7: .line 63
      StackMap locals: java.math.BigInteger java.math.BigInteger
      StackMap stack:
            aload 2 /* x */
            iconst_0
            invokevirtual java.math.BigInteger.testBit:(I)Z
            ifeq 9
         8: .line 64
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            aload 2 /* x */
            invokevirtual java.math.BigInteger.subtract:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            astore 2 /* x */
         9: .line 66
      StackMap locals:
      StackMap stack:
            aload 2 /* x */
            areturn
        end local 2 // java.math.BigInteger x
        end local 1 // java.math.BigInteger xx
        end local 0 // java.math.BigInteger y
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0   10     0     y  Ljava/math/BigInteger;
            4   10     1    xx  Ljava/math/BigInteger;
            5   10     2     x  Ljava/math/BigInteger;
    MethodParameters:
      Name  Flags
      y     

  private static com.google.crypto.tink.subtle.Ed25519Constants$Point edwards(com.google.crypto.tink.subtle.Ed25519Constants$Point, com.google.crypto.tink.subtle.Ed25519Constants$Point);
    descriptor: (Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;)Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=4, locals=4, args_size=2
        start local 0 // com.google.crypto.tink.subtle.Ed25519Constants$Point a
        start local 1 // com.google.crypto.tink.subtle.Ed25519Constants$Point b
         0: .line 70
            new com.google.crypto.tink.subtle.Ed25519Constants$Point
            dup
            invokespecial com.google.crypto.tink.subtle.Ed25519Constants$Point.<init>:()V
            astore 2 /* o */
        start local 2 // com.google.crypto.tink.subtle.Ed25519Constants$Point o
         1: .line 71
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.D_BI:Ljava/math/BigInteger;
            aload 0 /* a */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.x:Ljava/math/BigInteger;
            aload 1 /* b */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.x:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            aload 0 /* a */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.y:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            aload 1 /* b */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.y:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.mod:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            astore 3 /* xxyy */
        start local 3 // java.math.BigInteger xxyy
         2: .line 72
            aload 2 /* o */
         3: .line 73
            aload 0 /* a */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.x:Ljava/math/BigInteger;
            aload 1 /* b */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.y:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            aload 1 /* b */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.x:Ljava/math/BigInteger;
            aload 0 /* a */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.y:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.add:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
         4: .line 74
            getstatic java.math.BigInteger.ONE:Ljava/math/BigInteger;
            aload 3 /* xxyy */
            invokevirtual java.math.BigInteger.add:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.modInverse:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
         5: .line 75
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.mod:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
         6: .line 72
            putfield com.google.crypto.tink.subtle.Ed25519Constants$Point.x:Ljava/math/BigInteger;
         7: .line 76
            aload 2 /* o */
         8: .line 77
            aload 0 /* a */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.y:Ljava/math/BigInteger;
            aload 1 /* b */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.y:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            aload 0 /* a */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.x:Ljava/math/BigInteger;
            aload 1 /* b */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.x:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.add:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
         9: .line 78
            getstatic java.math.BigInteger.ONE:Ljava/math/BigInteger;
            aload 3 /* xxyy */
            invokevirtual java.math.BigInteger.subtract:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.modInverse:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
        10: .line 79
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.mod:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
        11: .line 76
            putfield com.google.crypto.tink.subtle.Ed25519Constants$Point.y:Ljava/math/BigInteger;
        12: .line 80
            aload 2 /* o */
            areturn
        end local 3 // java.math.BigInteger xxyy
        end local 2 // com.google.crypto.tink.subtle.Ed25519Constants$Point o
        end local 1 // com.google.crypto.tink.subtle.Ed25519Constants$Point b
        end local 0 // com.google.crypto.tink.subtle.Ed25519Constants$Point a
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0   13     0     a  Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;
            0   13     1     b  Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;
            1   13     2     o  Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;
            2   13     3  xxyy  Ljava/math/BigInteger;
    MethodParameters:
      Name  Flags
      a     
      b     

  private static byte[] toLittleEndian(java.math.BigInteger);
    descriptor: (Ljava/math/BigInteger;)[B
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=5, locals=5, args_size=1
        start local 0 // java.math.BigInteger n
         0: .line 84
            bipush 32
            newarray 8
            astore 1 /* b */
        start local 1 // byte[] b
         1: .line 85
            aload 0 /* n */
            invokevirtual java.math.BigInteger.toByteArray:()[B
            astore 2 /* nBytes */
        start local 2 // byte[] nBytes
         2: .line 86
            aload 2 /* nBytes */
            iconst_0
            aload 1 /* b */
            bipush 32
            aload 2 /* nBytes */
            arraylength
            isub
            aload 2 /* nBytes */
            arraylength
            invokestatic java.lang.System.arraycopy:(Ljava/lang/Object;ILjava/lang/Object;II)V
         3: .line 87
            iconst_0
            istore 3 /* i */
        start local 3 // int i
         4: goto 9
         5: .line 88
      StackMap locals: byte[] byte[] int
      StackMap stack:
            aload 1 /* b */
            iload 3 /* i */
            baload
            istore 4 /* t */
        start local 4 // byte t
         6: .line 89
            aload 1 /* b */
            iload 3 /* i */
            aload 1 /* b */
            aload 1 /* b */
            arraylength
            iload 3 /* i */
            isub
            iconst_1
            isub
            baload
            bastore
         7: .line 90
            aload 1 /* b */
            aload 1 /* b */
            arraylength
            iload 3 /* i */
            isub
            iconst_1
            isub
            iload 4 /* t */
            bastore
        end local 4 // byte t
         8: .line 87
            iinc 3 /* i */ 1
      StackMap locals:
      StackMap stack:
         9: iload 3 /* i */
            aload 1 /* b */
            arraylength
            iconst_2
            idiv
            if_icmplt 5
        end local 3 // int i
        10: .line 92
            aload 1 /* b */
            areturn
        end local 2 // byte[] nBytes
        end local 1 // byte[] b
        end local 0 // java.math.BigInteger n
      LocalVariableTable:
        Start  End  Slot    Name  Signature
            0   11     0       n  Ljava/math/BigInteger;
            1   11     1       b  [B
            2   11     2  nBytes  [B
            4   10     3       i  I
            6    8     4       t  B
    MethodParameters:
      Name  Flags
      n     

  private static com.google.crypto.tink.subtle.Ed25519$CachedXYT getCachedXYT(com.google.crypto.tink.subtle.Ed25519Constants$Point);
    descriptor: (Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;)Lcom/google/crypto/tink/subtle/Ed25519$CachedXYT;
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=6, locals=1, args_size=1
        start local 0 // com.google.crypto.tink.subtle.Ed25519Constants$Point p
         0: .line 96
            new com.google.crypto.tink.subtle.Ed25519$CachedXYT
            dup
         1: .line 97
            aload 0 /* p */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.y:Ljava/math/BigInteger;
            aload 0 /* p */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.x:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.add:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.mod:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            invokestatic com.google.crypto.tink.subtle.Ed25519Constants.toLittleEndian:(Ljava/math/BigInteger;)[B
            invokestatic com.google.crypto.tink.subtle.Field25519.expand:([B)[J
         2: .line 98
            aload 0 /* p */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.y:Ljava/math/BigInteger;
            aload 0 /* p */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.x:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.subtract:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.mod:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            invokestatic com.google.crypto.tink.subtle.Ed25519Constants.toLittleEndian:(Ljava/math/BigInteger;)[B
            invokestatic com.google.crypto.tink.subtle.Field25519.expand:([B)[J
         3: .line 99
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.D2_BI:Ljava/math/BigInteger;
            aload 0 /* p */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.x:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            aload 0 /* p */
            getfield com.google.crypto.tink.subtle.Ed25519Constants$Point.y:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.multiply:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            getstatic com.google.crypto.tink.subtle.Ed25519Constants.P_BI:Ljava/math/BigInteger;
            invokevirtual java.math.BigInteger.mod:(Ljava/math/BigInteger;)Ljava/math/BigInteger;
            invokestatic com.google.crypto.tink.subtle.Ed25519Constants.toLittleEndian:(Ljava/math/BigInteger;)[B
            invokestatic com.google.crypto.tink.subtle.Field25519.expand:([B)[J
         4: .line 96
            invokespecial com.google.crypto.tink.subtle.Ed25519$CachedXYT.<init>:([J[J[J)V
            areturn
        end local 0 // com.google.crypto.tink.subtle.Ed25519Constants$Point p
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    5     0     p  Lcom/google/crypto/tink/subtle/Ed25519Constants$Point;
    MethodParameters:
      Name  Flags
      p     
}
SourceFile: "Ed25519Constants.java"
NestMembers:
  com.google.crypto.tink.subtle.Ed25519Constants$Point
InnerClasses:
  CachedXYT = com.google.crypto.tink.subtle.Ed25519$CachedXYT of com.google.crypto.tink.subtle.Ed25519
  private Point = com.google.crypto.tink.subtle.Ed25519Constants$Point of com.google.crypto.tink.subtle.Ed25519Constants