source 2007 Hisil--Carter--Dawson parameter b assume 3 b d = 1 compute R0 = X1^2 compute X3 = R0 X1 compute R0 = Y1^2 compute Y3 = R0 Y1 compute R0 = Z1^2 compute Z3 = R0 Z1 compute R0 = X3-Y3 compute R0 = R0^2 compute R1 = X3-Z3 compute R1 = R1^2 compute R2 = Y3-Z3 compute R2 = R2^2 compute Z3 = Z3+X3 compute Z3 = Z3+Y3 compute Z3 = b Z3 compute R3 = R0+R2 compute R0 = R0+R1 compute R4 = R1+R3 compute Z3 = Z3 R4 compute R4 = R1-R3 compute R4 = R4 X3 compute R3 = R2-R0 compute R3 = Y3 R3 compute X3 = X3 R2 compute X3 = 2 X3 compute X3 = X3-R3 compute Y3 = Y3 R1 compute Y3 = 2 Y3 compute Y3 = Y3-R4