func crypto/ed25519/internal/edwards25519.FeSub

19 uses

	crypto/ed25519/internal/edwards25519 (current package)
		edwards25519.go#L42: func FeSub(dst, a, b *FieldElement) {
		edwards25519.go#L667: 	FeSub(&r.Z, &r.Z, &r.X)
		edwards25519.go#L668: 	FeSub(&r.X, &t0, &r.Y)
		edwards25519.go#L669: 	FeSub(&r.T, &r.T, &r.Z)
		edwards25519.go#L697: 	FeSub(&r.yMinusX, &p.Y, &p.X)
		edwards25519.go#L725: 	FeSub(&u, &u, &p.Z) // u = y^2-1
		edwards25519.go#L742: 	FeSub(&check, &vxx, &u) // vx^2-u
		edwards25519.go#L787: 	FeSub(&r.Y, &p.Y, &p.X)
		edwards25519.go#L793: 	FeSub(&r.X, &r.Z, &r.Y)
		edwards25519.go#L796: 	FeSub(&r.T, &t0, &r.T)
		edwards25519.go#L803: 	FeSub(&r.Y, &p.Y, &p.X)
		edwards25519.go#L809: 	FeSub(&r.X, &r.Z, &r.Y)
		edwards25519.go#L811: 	FeSub(&r.Z, &t0, &r.T)
		edwards25519.go#L819: 	FeSub(&r.Y, &p.Y, &p.X)
		edwards25519.go#L824: 	FeSub(&r.X, &r.Z, &r.Y)
		edwards25519.go#L827: 	FeSub(&r.T, &t0, &r.T)
		edwards25519.go#L834: 	FeSub(&r.Y, &p.Y, &p.X)
		edwards25519.go#L839: 	FeSub(&r.X, &r.Z, &r.Y)
		edwards25519.go#L841: 	FeSub(&r.Z, &t0, &r.T)