/* auto-generated; do not edit */

#include "crypto_decode.h"
#include "crypto_int16.h"
#include "crypto_int32.h"
#define int16 crypto_int16
#define int32 crypto_int32

static int16 mullo(int16 x,int16 y)
{
  return x*y;
}

static int16 mulhi(int16 x,int16 y)
{
  return (x*(int32)y)>>16;
}

void crypto_decode(void *v,const unsigned char *s)
{
  int16 *R = v;
  long long i;
  int16 a0,a1,ri,lo,s0,s1;
  
  s += crypto_decode_STRBYTES;
  a1 = 0;
  a1 += *--s; /* 0...255 */
  lo = mullo(a1,-4539);
  a1 = mulhi(a1,1072)-mulhi(lo,3696);
  a1 += *--s; /* -1848...2107 */
  a1 += crypto_int16_negative_mask(a1)&3696; /* 0...3695 */
  R[0] = a1;
  
  /* reconstruct mod 1*[376]+[2516] */
  
  ri = R[0];
  s0 = *--s;
  lo = mullo(ri,20916);
  a0 = mulhi(ri,96)-mulhi(lo,376); /* -188...212 */
  a0 += s0; /* -188...467 */
  a0 -= 376; /* -564..>91 */
  a0 += crypto_int16_negative_mask(a0)&376; /* -188...375 */
  a0 += crypto_int16_negative_mask(a0)&376; /* 0...375 */
  a1 = (ri<<5)+((s0-a0)>>3);
  a1 = mullo(a1,18127);

  /* invalid inputs might need reduction mod 2516 */
  a1 -= 2516;
  a1 += crypto_int16_negative_mask(a1)&2516;

  R[0] = a0;
  R[1] = a1;
  
  /* reconstruct mod 2*[4962]+[2516] */
  
  R[2] = R[1];
  for (i = 0;i >= 0;--i) {
    ri = R[i];
    s1 = *--s;
    s0 = *--s;
    lo = mullo(ri,-3381);
    a0 = mulhi(ri,694)-mulhi(lo,4962); /* -2481...2654 */
    a0 += s1; /* -2481...2909 */
    lo = mullo(a0,-3381);
    a0 = mulhi(a0,694)-mulhi(lo,4962); /* -2508...2511 */
    a0 += s0; /* -2508...2766 */
    a0 += crypto_int16_negative_mask(a0)&4962; /* 0...4961 */
    a1 = (ri<<15)+(s1<<7)+((s0-a0)>>1);
    a1 = mullo(a1,-24751);

    /* invalid inputs might need reduction mod 4962 */
    a1 -= 4962;
    a1 += crypto_int16_negative_mask(a1)&4962;

    R[2*i] = a0;
    R[2*i+1] = a1;
  }
  
  /* reconstruct mod 4*[1127]+[2516] */
  
  R[4] = R[2];
  for (i = 1;i >= 0;--i) {
    ri = R[i];
    s0 = *--s;
    lo = mullo(ri,-14887);
    a0 = mulhi(ri,-433)-mulhi(lo,1127); /* -672...563 */
    a0 += s0; /* -672...818 */
    a0 += crypto_int16_negative_mask(a0)&1127; /* 0...1126 */
    a1 = (ri<<8)+s0-a0;
    a1 = mullo(a1,-10409);

    /* invalid inputs might need reduction mod 1127 */
    a1 -= 1127;
    a1 += crypto_int16_negative_mask(a1)&1127;

    R[2*i] = a0;
    R[2*i+1] = a1;
  }
  
  /* reconstruct mod 9*[537]+[1199] */
  
  ri = R[4];
  s0 = *--s;
  lo = mullo(ri,-31242);
  a0 = mulhi(ri,262)-mulhi(lo,537); /* -269...334 */
  a0 += s0; /* -269...589 */
  a0 -= 537; /* -806..>52 */
  a0 += crypto_int16_negative_mask(a0)&537; /* -269...536 */
  a0 += crypto_int16_negative_mask(a0)&537; /* 0...536 */
  a1 = (ri<<8)+s0-a0;
  a1 = mullo(a1,14889);

  /* invalid inputs might need reduction mod 1199 */
  a1 -= 1199;
  a1 += crypto_int16_negative_mask(a1)&1199;

  R[8] = a0;
  R[9] = a1;
  for (i = 3;i >= 0;--i) {
    ri = R[i];
    s0 = *--s;
    lo = mullo(ri,-31242);
    a0 = mulhi(ri,262)-mulhi(lo,537); /* -269...334 */
    a0 += s0; /* -269...589 */
    a0 -= 537; /* -806..>52 */
    a0 += crypto_int16_negative_mask(a0)&537; /* -269...536 */
    a0 += crypto_int16_negative_mask(a0)&537; /* 0...536 */
    a1 = (ri<<8)+s0-a0;
    a1 = mullo(a1,14889);

    /* invalid inputs might need reduction mod 537 */
    a1 -= 537;
    a1 += crypto_int16_negative_mask(a1)&537;

    R[2*i] = a0;
    R[2*i+1] = a1;
  }
  
  /* reconstruct mod 19*[5929]+[13244] */
  
  ri = R[9];
  s1 = *--s;
  s0 = *--s;
  lo = mullo(ri,-2830);
  a0 = mulhi(ri,-1854)-mulhi(lo,5929); /* -3428...2964 */
  a0 += s1; /* -3428...3219 */
  lo = mullo(a0,-2830);
  a0 = mulhi(a0,-1854)-mulhi(lo,5929); /* -3056...3061 */
  a0 += s0; /* -3056...3316 */
  a0 += crypto_int16_negative_mask(a0)&5929; /* 0...5928 */
  a1 = (s1<<8)+s0-a0;
  a1 = mullo(a1,29977);

  /* invalid inputs might need reduction mod 13244 */
  a1 -= 13244;
  a1 += crypto_int16_negative_mask(a1)&13244;

  R[18] = a0;
  R[19] = a1;
  for (i = 8;i >= 0;--i) {
    ri = R[i];
    s1 = *--s;
    s0 = *--s;
    lo = mullo(ri,-2830);
    a0 = mulhi(ri,-1854)-mulhi(lo,5929); /* -3428...2964 */
    a0 += s1; /* -3428...3219 */
    lo = mullo(a0,-2830);
    a0 = mulhi(a0,-1854)-mulhi(lo,5929); /* -3056...3061 */
    a0 += s0; /* -3056...3316 */
    a0 += crypto_int16_negative_mask(a0)&5929; /* 0...5928 */
    a1 = (s1<<8)+s0-a0;
    a1 = mullo(a1,29977);

    /* invalid inputs might need reduction mod 5929 */
    a1 -= 5929;
    a1 += crypto_int16_negative_mask(a1)&5929;

    R[2*i] = a0;
    R[2*i+1] = a1;
  }
  
  /* reconstruct mod 39*[77]+[172] */
  
  ri = R[19];
  a0 = ri;
  lo = mullo(a0,-851);
  a0 = mulhi(a0,9)-mulhi(lo,77); /* -39...40 */
  a0 += crypto_int16_negative_mask(a0)&77; /* 0...76 */
  a1 = (ri-a0)>>0;
  a1 = mullo(a1,14469);

  /* invalid inputs might need reduction mod 172 */
  a1 -= 172;
  a1 += crypto_int16_negative_mask(a1)&172;

  R[38] = a0;
  R[39] = a1;
  for (i = 18;i >= 0;--i) {
    ri = R[i];
    a0 = ri;
    lo = mullo(a0,-851);
    a0 = mulhi(a0,9)-mulhi(lo,77); /* -39...40 */
    a0 += crypto_int16_negative_mask(a0)&77; /* 0...76 */
    a1 = (ri-a0)>>0;
    a1 = mullo(a1,14469);

    /* invalid inputs might need reduction mod 77 */
    a1 -= 77;
    a1 += crypto_int16_negative_mask(a1)&77;

    R[2*i] = a0;
    R[2*i+1] = a1;
  }
  
  /* reconstruct mod 79*[140]+[313] */
  
  ri = R[39];
  s0 = *--s;
  lo = mullo(ri,11235);
  a0 = mulhi(ri,36)-mulhi(lo,140); /* -70...79 */
  a0 += s0; /* -70...334 */
  lo = mullo(a0,-468);
  a0 = mulhi(a0,16)-mulhi(lo,140); /* -71...70 */
  a0 += crypto_int16_negative_mask(a0)&140; /* 0...139 */
  a1 = (ri<<6)+((s0-a0)>>2);
  a1 = mullo(a1,-20597);

  /* invalid inputs might need reduction mod 313 */
  a1 -= 313;
  a1 += crypto_int16_negative_mask(a1)&313;

  R[78] = a0;
  R[79] = a1;
  for (i = 38;i >= 0;--i) {
    ri = R[i];
    s0 = *--s;
    lo = mullo(ri,11235);
    a0 = mulhi(ri,36)-mulhi(lo,140); /* -70...79 */
    a0 += s0; /* -70...334 */
    lo = mullo(a0,-468);
    a0 = mulhi(a0,16)-mulhi(lo,140); /* -71...70 */
    a0 += crypto_int16_negative_mask(a0)&140; /* 0...139 */
    a1 = (ri<<6)+((s0-a0)>>2);
    a1 = mullo(a1,-20597);

    /* invalid inputs might need reduction mod 140 */
    a1 -= 140;
    a1 += crypto_int16_negative_mask(a1)&140;

    R[2*i] = a0;
    R[2*i+1] = a1;
  }
  
  /* reconstruct mod 159*[189]+[423] */
  
  ri = R[79];
  s0 = *--s;
  lo = mullo(ri,-23232);
  a0 = mulhi(ri,64)-mulhi(lo,189); /* -95...110 */
  a0 += s0; /* -95...365 */
  a0 -= 189; /* -284..>176 */
  a0 += crypto_int16_negative_mask(a0)&189; /* -95...188 */
  a0 += crypto_int16_negative_mask(a0)&189; /* 0...188 */
  a1 = (ri<<8)+s0-a0;
  a1 = mullo(a1,-1387);

  /* invalid inputs might need reduction mod 423 */
  a1 -= 423;
  a1 += crypto_int16_negative_mask(a1)&423;

  R[158] = a0;
  R[159] = a1;
  for (i = 78;i >= 0;--i) {
    ri = R[i];
    s0 = *--s;
    lo = mullo(ri,-23232);
    a0 = mulhi(ri,64)-mulhi(lo,189); /* -95...110 */
    a0 += s0; /* -95...365 */
    a0 -= 189; /* -284..>176 */
    a0 += crypto_int16_negative_mask(a0)&189; /* -95...188 */
    a0 += crypto_int16_negative_mask(a0)&189; /* 0...188 */
    a1 = (ri<<8)+s0-a0;
    a1 = mullo(a1,-1387);

    /* invalid inputs might need reduction mod 189 */
    a1 -= 189;
    a1 += crypto_int16_negative_mask(a1)&189;

    R[2*i] = a0;
    R[2*i+1] = a1;
  }
  
  /* reconstruct mod 319*[3511]+[7879] */
  
  ri = R[159];
  s1 = *--s;
  s0 = *--s;
  lo = mullo(ri,-4778);
  a0 = mulhi(ri,1658)-mulhi(lo,3511); /* -1756...2170 */
  a0 += s1; /* -1756...2425 */
  lo = mullo(a0,-4778);
  a0 = mulhi(a0,1658)-mulhi(lo,3511); /* -1800...1816 */
  a0 += s0; /* -1800...2071 */
  a0 += crypto_int16_negative_mask(a0)&3511; /* 0...3510 */
  a1 = (s1<<8)+s0-a0;
  a1 = mullo(a1,24583);

  /* invalid inputs might need reduction mod 7879 */
  a1 -= 7879;
  a1 += crypto_int16_negative_mask(a1)&7879;

  R[318] = a0;
  R[319] = a1;
  for (i = 158;i >= 0;--i) {
    ri = R[i];
    s1 = *--s;
    s0 = *--s;
    lo = mullo(ri,-4778);
    a0 = mulhi(ri,1658)-mulhi(lo,3511); /* -1756...2170 */
    a0 += s1; /* -1756...2425 */
    lo = mullo(a0,-4778);
    a0 = mulhi(a0,1658)-mulhi(lo,3511); /* -1800...1816 */
    a0 += s0; /* -1800...2071 */
    a0 += crypto_int16_negative_mask(a0)&3511; /* 0...3510 */
    a1 = (s1<<8)+s0-a0;
    a1 = mullo(a1,24583);

    /* invalid inputs might need reduction mod 3511 */
    a1 -= 3511;
    a1 += crypto_int16_negative_mask(a1)&3511;

    R[2*i] = a0;
    R[2*i+1] = a1;
  }
  
  /* reconstruct mod 638*[948]+[7879] */
  
  R[638] = R[319];
  for (i = 318;i >= 0;--i) {
    ri = R[i];
    s0 = *--s;
    lo = mullo(ri,-17697);
    a0 = mulhi(ri,460)-mulhi(lo,948); /* -474...589 */
    a0 += s0; /* -474...844 */
    a0 += crypto_int16_negative_mask(a0)&948; /* 0...947 */
    a1 = (ri<<6)+((s0-a0)>>2);
    a1 = mullo(a1,23781);

    /* invalid inputs might need reduction mod 948 */
    a1 -= 948;
    a1 += crypto_int16_negative_mask(a1)&948;

    R[2*i] = a0;
    R[2*i+1] = a1;
  }
  
  /* reconstruct mod 1277*[7879] */
  
  R[1276] = R[638]-3939;
  for (i = 637;i >= 0;--i) {
    ri = R[i];
    s1 = *--s;
    s0 = *--s;
    lo = mullo(ri,-2129);
    a0 = mulhi(ri,2825)-mulhi(lo,7879); /* -3940...4645 */
    a0 += s1; /* -3940...4900 */
    lo = mullo(a0,-2129);
    a0 = mulhi(a0,2825)-mulhi(lo,7879); /* -4110...4150 */
    a0 += s0; /* -4110...4405 */
    a0 += crypto_int16_negative_mask(a0)&7879; /* 0...7878 */
    a1 = (s1<<8)+s0-a0;
    a1 = mullo(a1,17143);

    /* invalid inputs might need reduction mod 7879 */
    a1 -= 7879;
    a1 += crypto_int16_negative_mask(a1)&7879;

    R[2*i] = a0-3939;
    R[2*i+1] = a1-3939;
  }
}