tree fd8b8beb6390ba6a6d6316020ec365e60531af50
parent 2f9b47fb1997bd1ced2c8bf01d8de292387bda12
author David Benjamin <davidben@google.com> 1515019108 -0500
committer Adam Langley <agl@google.com> 1515195506 +0000

Use fiat-crypto's freeze function for fe_tobytes.

It requires a handful of additional intrinsics for now.

Fiat's freeze function only works on the tight bounds, so fe_isnonzero
gains an extra fe_carry. But all other calls of fe_tobytes are of tight
bounds anyway.

Change-Id: I834858cee7863c7344e456d7a7dbf4f414f04ae5
Reviewed-on: https://boringssl-review.googlesource.com/24545
Reviewed-by: Adam Langley <agl@google.com>