rust #rustc 1.98.1 (48a229cea 2026-09-01)RL.SAwjL-df1bddb45adbe94b<%Z>64V`-2d2ab9fb0fe1def5!| L"core_hint_black_box"    unwrap_u8!! $ &ConstantTimeEq(ct_eq(ct_ne ++ .generate_integer_equal 1ConditionallySelectable3conditional_select3conditional_assign3conditional_swap to_signed_int#generate_integer_conditional_select 9;ConditionallyNegatable=conditional_negate??'a?CCFF FFFFunwrap_or_elseLFis_someFis_noneF PPFSSFor_elseVF into_optionYY\\ConstantTimeGreater_ct_gt!generate_unsigned_integer_greaterbConstantTimeLessdct_ltjll lgetChoicep puwy {!}"#$%&'()*+,-./0CtOption1234567BlackBox 89:v8x8x8x8888 8)8)8*8*8-8-8/8/8z8z8|8|8~8~8888888888888882828484858586868888888888888888888888888888888888888888888888888:8:8<8<8>8B88888I8N8O8[8[8^8^8`8`888888888c8c8e8e8k8k88888(3=_d ppq r V_wg"( ((((((((((((LessGreater%ӡy3333333333= ?֞T gřǙșəʙ˙G*R{9 3(_____ddddd  6{UI  gsptpupwp&pCřpppppp!p+ .py{}1\9;pY?bfghij g"(3 C=:_d())v#(4 >GQ) &2 g() g %x2) )x_ÜĜŜƜǜȜ_wĤĤŤError :M  ggg cgbufcثq1ȡ4!  #\ju#!!4--,4- ,, ,D3l3 332{$242ksource9 [T] 444,48  4E  $,E*ăE p E 443N044B'm44$443rhs:& T]' \5,55 irX'dd pcb 5555M'"5 L55/X?.<'@&' 646,68  6' p 666M46'46$663'7&'\7,77 IR8'DmD pCP 7777Lzql'i"7+L77,5<+<'@&k'u 848,88  8' p 888N48'48$883'7&'\9,99 &/ '!J! p P 999 9MzNI'F"9+L99,<+<'@&H'R :L:4:  :<   : ' p :;#:?4:'4:$:v +q&' 4B  ) BB$@B *9$[4M} @,@ inputޜ! %:   '   p E' 4C,CY ; &t '~ M y )$M,MdM fedke e '  ' B   p d MM*MJs#M- z( '% 4M >,M@,MZ < @>&0 ': TTTUTU'  '    UW\W}imVb  Vb Vb   3f*ہ Vb b mb $b   (   b "b   3f*ہ b  M   W -,s4sL ss5s5r"s >Lr@,s4s>@+ /choice9p yyyy  5> y74yy yyy  y24yy z zz6xyk "y x x4y>"@ "@DG͎LdI +*$F18ŀ !      N  ̀ D ڀۀ~pXKC>YsnY  ~#~#~0~a_~nad͎hmask- ̂ӂ+Ԃ*Ղ&Iӂ1 (   0   8       a     ;ăŃȂ}X܂ " H#(0-+)c e͎h +*&I1H       8         # 8 8Ć ن چYXDž "0PNL=ef͎imj)  1    !    v! tqnjg u1  sr ْ penelj&VK͎}`RNqL`.+( / & - \   % ,  C% \" "  e )'%_ b͎f2             "K>;͎<| +*$F.8ŀ # " # C'  " N  ̀ s' ڀۀ~pX"r& "ds&d  ~j~j~0~a_a$Q$ad͎h* ̂ӂ+Ԃ*Ղ&Iӂ. (   0   8       a     ;ăŃȂ}X܂ " Hj(0-+)c e͎h +*&I.H       8         # 8 8Ć ن چYXDž "ײײ0PNL=ef͎ijg)  1    -    s- qnkgd u., so -ٗ mnknig#VK͎z`RNqL`.+( / & - \   % ,  C% \" "  n )'%_ b͎f2             "K>;͎<| !!+!*!$!F!.!!8!ŀ * * * .  * N  !̀ . !ڀ!ۀ!~!pX!) 0)ns! 0n  !~s!~s!~0!~a_,,ad͎h* !̂!ӂ+!Ԃ*!Ղ&!I!ӂ.!!! (!   0!   8    !   a   !  ;!ă!Ń!!Ȃ}X!܂ "! H!s(!0!-+)c e͎h !!+!*!&!I!.!!H! !   !   8    !   !  # 8! 8!Ć !ن !چ!!!YX!Dž "!!!0!PNL=ef͎ijg)  1    .    s. qnkgd u. 0 so 0ٜ mwkwig#VK͎z`RNqL`.+( / & - \   % ,  C% \" "  w )'%_ b͎f2             "K>;͎<| ((+(*($(F(.((8(ŀ {2 q2 x2 .  n2 N  (̀ . (ڀ(ۀ(~(pX(}1 0u1xs( 0x  (~|(~|(~0(~a_33ad͎h* (̂(ӂ+(Ԃ*(Ղ&(I(ӂ.((( ((   0(   8    (   a   (  ;(ă(Ń((Ȃ}X(܂ "( H(|((0(-+)c e͎h ((+(*(&(I(.((H( (   (   8    (   (  # 8( 8(Ć (ن (چ(((YX(Dž "(((0(PNL=ef͎ijg)  1    .    s. qnkgd u. 0 so 0١ mlki%XM͎|bTPsNb0-* 1 ( / ^   ' .  E' ^$! "   ,*(b e͎i5             "NA>͎?! D  D 4׌ 01 $1 +1 D1  1 0 0. 1  0.   0 0 ݌,  $ !  -     Ž: 91&A1?1*2 0**;1 0 * $ ċ ΋4؋?G#+a a03%3229͎  retՏ*$ $ @ 4L74kΏ2 p   <$  4##69͎=u1Dd$l !G5" L ț* 5$ț94͛%  BZ" Lʚ4՚G"G4͎8self_negI8@/֤ # :Bx/b(/ / /Ibvtbi sG @1֤ !!x1 '3!(1 g!'!!S1 1!#!&G.!   G!u!Md# d Ԗ ř  S$Ϊ ř+E߸<NL\Lͩ4$fL ĮH\ܭ,<ȭH12]92]  I#2] 2]T#2<]3]>>] >ް  a "a !!   3f*ہ"a a!a g! ! ggg cg"cثq1ȡ!Ba ي ggg cg"cثq1ȡ! ae !!!Jo$z - "  a  a   a   Argumentf0m֔49d >] ` g  ż      3f*ہ     3f*ہL        x ř Argumentstemplateccg@#  2]2}] [~NeMatchvX]!2]Q2] Y2]~ {I 2]2]\Ͱ taf!a (!a7(!"1aU( !g(  g` $!#=řǙșəʙ˙G*R{9   !  %# Placeholderf formatterf _lifetimefCountf&<$يUQ !!z   msgleft_valA2] right_valI2] !2]h  0  ڰ BQIf#mJ|Ė14 ]94 ] J#4 ] 4]TͲ4]]!4]Q4]Y4]4]Q ̲eJ4 ]4 ]\ $#0V#6*A4 ]—I4 ]!4 ]1  J #J$ \ dʹ 6 4cS?, ٴ ߴ Kij $ճ۳GG+def1_$  #" "6>L\ d ַ6O;(   Lֶ $ GG57fQ0N4, d V^^V '' p< O=#lf*'4,V^2,&'  4~ld  &4\  dؿ  ~ K 7     ##4>  d  #       ˽ P4{Hؾ  ?֞T\$ܽ pnPGNMG Yuik <  qnld !/\  d  y K 7         d     '    ' p<D   S^f|'\$   GGtmpa{&' <h o V ^ ^  V     '   ,  , 4F6<0  7G' p <  '    @" )VnH OL# f*' \$ vV^ gifFֶ5&'$ #! 1/6. ř,*{) řRXAf4<EDNA@L$Ge$ 1D D @H34g":4 x""H I I I I  BI ^I  pI zI I m....  .zI   I .  I I a#" p"      [ 0#<J# J4J/I 00^JqJ 0JH$  4GGi$HIIzIIm..͎^X    '       ' DT T ?HG2D V  ^  ^ V      '    V^^V ' 'D '' p<6  ^xX,"NL?"NL^,f|'^&f| ' #f *  ' #f*'^Lf|'P2fi'4,GG V ^  V^&'RF H&'&'&'&'&'&' 505))N )PQO%  5(5K 4  5855555     =5 P5 5   5   6   5   5  # 5   P5 5 @  5 P5 5855555 "?5P55 5 65 5 #5 P55Ax5H5 '' p<55 5555555]YN Psh5O%-PfZ_ Z P th5T P  '505#(5#(5;985RPB85a] w gtbltbpowbit>W&' 606){)x  6(6   6866666     =6 P6 6   6   6   6   6  # 6   P6 6 C  6 P6 6866666 "?6P66 6 66 6 #6 P66Dx6H6  -6'' p<66 6666666]ssh6ٕ_t X  th6 ٕ  '606j(6j(6RP86 nl^86}y53% ;ZT&' 707) )  7(7Q ;  7877777      =7 P7 7   7   6   7   7  # 7   P7 7 F  7 P7 7877777 " ?7P77 7 67 7 #7 P77Gx7H7  /7'' p<77 7777777]u) sh7& ٚ_v  X  th7x  ٚ  '707s(7s(7TR87pn`87{75' =\T&' 808))  8(8   8888888     @=8 P8 8   8   6   8   8  # 8   P8 8 I  8 P8 8888888 "@?8P88 8 68 8 #8 P88Jx8H8  38'' p<88 8888888]ysh8ٟ_z X  th8 ٟ  '808|(8|(8XV88trd88;9+ A`T&' , l  4 t L      T L      ܠ ` p L      chE 4,,nmu#6>#g i:  `>$,dV^ff^V 'V ^ f f ^   V    '    >$,d       ' ' p< D e _#f*'#f*'^'f|'4@,@,V^fV^f v yFT>&'&'&' , l  4 t L      T L      ܣ e p L      khE 4,,nmu#6>#g iݒ:9 #5=(9 9 9@K UGlv; '3!(;!!"l/; ;_!jr#y! GG!!\ n8$, 04  $4! o7 $6) pq%07> +6=D               $(3=_dpq!BitAnd4! BitAndAssignd!BitOr,! BitOrAssign\!BitXor4! BitXorAssignd! Neg!! Not!" 4"ř  # subtle [![](https://img.shields.io/crates/v/subtle.svg)](https://crates.io/crates/subtle) [![](https://img.shields.io/badge/dynamic/json.svg?label=docs&uri=https%3A%2F%2Fcrates.io%2Fapi%2Fv1%2Fcrates%2Fsubtle%2Fversions&query=%24.versions%5B0%5D.num&colorB=4F74A6)](https://doc.dalek.rs/subtle) [![](https://travis-ci.org/dalek-cryptography/subtle.svg?branch=master)](https://travis-ci.org/dalek-cryptography/subtle)WT **Pure-Rust traits and utilities for constant-time cryptographic implementations.**MJ It consists of a `Choice` type, and a collection of traits using `Choice`SP instead of `bool` which are intended to execute in constant-time. The `Choice` <9 type is a wrapper around a `u8` that holds a `0` or `1`. \  ```toml  subtle = "2.6"<  ```  JG This crate represents a “best-effort” attempt, since side-channels @= are ultimately a property of a deployed cryptographic system <9 including the hardware it runs on, not just of software.  NK The traits are implemented using bitwise operations, and should execute in OL constant time provided that a) the bitwise operations are constant-time and PM b) the bitwise operations are not recognized as a conditional assignment and ! optimized back into a branch.  OL For a compiler to recognize that bitwise operations represent a conditionalPM assignment, it needs to know that the value used to generate the bitmasks isJG really a boolean `i1` rather than an `i8` byte value. In an attempt toNK prevent this refinement, the crate tries to hide the value of a `Choice`'sOL inner `u8` by passing it through a volatile read. For more information, see the _About_ section below.QN Rust versions from 1.51 or higher have const generics support. You may enableUR `const-generics` feautre to have `subtle` traits implemented for arrays `[T; N]`.QN Versions prior to `2.2` recommended use of the `nightly` feature to enable anKH optimization barrier; this is not required in versions `2.2` and above.PM Note: the `subtle` crate contains `debug_assert`s to check invariants duringOL debug builds. These invariant checks involve secret-dependent branches, andOL are not present when compiled in release mode. This crate is intended to be used in release mode. ## Documentation,) Documentation is available [here][docs].%" ## Minimum Supported Rust Version Rust **1.41** or higher.ol Minimum supported Rust version can be changed in the future, but it will be done with a minor version bump.d ## AboutQN This library aims to be the Rust equivalent of Go’s `crypto/subtle` module.OL Old versions of the optimization barrier in `impl From for Choice` wereNK based on Tim Maclean's [work on `rust-timing-shield`][rust-timing-shield],JG which attempts to provide a more comprehensive approach for preventing(% software side-channels in Rust code.RO From version `2.2`, it was based on Diane Hosfelt and Amber Sprenkels' work on "Secret Types in Rust".FC `subtle` is authored by isis agora lovecruft and Henry de Valence.t ## WarningRO This code is a low-level library, intended for specific use-cases implementingLI cryptographic protocols. It represents a best-effort attempt to protectRO against some software side-channels. Because side-channel resistance is not aPM property of software alone, but of software together with hardware, any such$! effort is fundamentally limited. **USE AT YOUR OWN RISK**" [docs]: https://docs.rs/subtle`] [rust-timing-shield]: https://www.chosenplaintext.ca/open-source/rust-timing-shield/securityK0https://doc.dalek.rs/assets/dalek-logo-clear.pnglhttps://docs.rs/subtle/2.6.0l$(3=_dpqɝ|pk`Z ՞N K! H" Gř RUXL!OL!=@#&!\),)>; Unwrap the `Choice` wrapper to reveal the underlying `u8`.*T* # Note**FC This function only exists as an **escape hatch** for the rare case+?< where it's not possible to use one of the `subtle`-provided+ trait impls.+,QN **To convert a `Choice` to a `bool`, use the `From` implementation instead.**L, B , $,ԡ-2-DA Convert the `Choice` wrapper into a `bool`, depending on whether.+( the underlying `u8` was a `0` or a `1`..T...LI This function exists to avoid having higher-level cryptographic protocol/-* implementations duplicating this pattern.//B? The intended use case for this conversion is at the _end_ of a0KH higher-level primitive implementation: for example, in checking a keyed0LI MAC, where the verification should happen in constant-time (and thus use1C@ a `Choice`) but it is safe to return a `bool` at the end of the2 verification.$2B $e3\3433&44B '45(l5 "B 5 $5'75\5456%,6B '67'd7 "B 7 $7'7\8488&48B i'r8  9(l9 "B 9 $9'9"#""#\:4:!!::B!! #M@$??!?,L@B%% @ $@;B''B$BB&& ';HHEDA An `Eq`-like trait that produces a `Choice` instead of a `bool`.ElE # ExampleEH(!)*)**)J(H%" Determine if two items are equal.II96 The `ct_eq` function should execute in constant time.IlI # ReturnsII'$ * `Choice(1u8)` if `self == other`;J'$ * `Choice(0u8)` if `self != other`.,K > >B( K(>$K ,KM'K)& Determine if two items are NOT equal.KK96 The `ct_ne` function should execute in constant time.LlLLL'$ * `Choice(0u8)` if `self == other`;L'$ * `Choice(1u8)` if `self != other`.,M > >B( M( *>$M M.,, M(tM-)-S%NA> Check whether two slices of `ConstantTimeEq` types are equal.NTNOOC@ This function short-circuits if the lengths of the input slicesODA are different. Otherwise, it should execute in time independentԢP of the slice contents.PPNK Since arrays coerce to slices, this function works with fixed-size arrays:Q$i3*6+456456546nBi,) Select `a` or `b` according to `choice`.iliii# * `a` if `choice == Choice(0)`;j# * `b` if `choice == Choice(1)`.jj2/ This function should execute in constant time.klkk >>B3 n3 n n͎4nr>nB? Conditionally assign `other` to `self`, according to `choice`.oo2olop >"B3 r3$r G͎Gx?sFC Conditionally swap `self` and `other` if `choice == 1`; otherwise,t" reassign both unto themselves.tt2uluu >"B3 x3 6>lHvH͎Hԑzlz z }( z z8z*z z z8z% z z z8z*z z z8z% z z z8z*z z {8{% { { {8{*{ { {8{% { { {8${*{ { {8${% { { {8{*{ { {8{% { { |8{*| | |8|% | | |8|*| | |8|% | | |8|*| | |8|% | | |8$|*| | |8$|% }}0}# }  } }, } } }, }8 }& }8} }*} } , } } 8$}8}8 }, }8 } } + ~ ~ ~84~8 ~8~ ~ ~ 8 ~& ~ ~8$~$ ~8 ~& ~ ~8$~$ ~8͎4~& ~8 4~(~8$~ ~ ڀ 88$    8͎4 8L  88l   , 8 8, 8 % 8    ̀8$ À ŀ ˀ8 ƀ Ȁ8 ʀ+   848 8    88$$ 8 ,&  8$$ 8͎4& 8 4  ă8Ȃ8$̂ т ӂ Ԃ 8͎4Ղ ۂ8L܂  88l   , 8 8, 8 %  8$8$    8$  8 ,% + Ӄ ԃ ۃ84Ճ8 8  8 &  88$$ 8 &  88$$ 8͎4& 8 4  ن88$    8͎4 ƅ8LDž Ѕ х8Ӆ8lօ   , 8 8, 8 % 88  8$    8   8 %  8 8 %  Ć8 ņdž8 ʆ% ˆ .&# `Ordering` is `#[repr(i8)]` where: - `Less` => -1 - `Equal` => 0щ - `Greater` => 1MJ Given this, it's possible to operate on orderings as if they're integers,@= which allows leveraging conditional masking for predication.:4:A  B9 Nj9 :{{͎{Ǝ'<4<A  B; ; <}}͎} ?< A type which can be conditionally negated in constant time.ƔTʔՔٔDA A generic implementation of `ConditionallyNegatable` is providedDA for types `T` which are `ConditionallySelectable` and have `Neg` implemented on `&T`.===">>>1?< Negate `self` if `choice == Choice(1)`; otherwise, leave itt unchanged.2 >"B= = >>$͎4n@@A! AT3A!| B>B0 "B? ʚ? B$Ϛ͎~'DD EE)OL Convert the `CtOption` wrapper into an `Option`, depending on whetherHE the underlying `is_some` `Choice` was a `0` or a `1` once unwrapped.ǦTϦަQN This function exists to avoid ending up with ugly, verbose and/or bad handledQN conversions from the `CtOption` wraps to an `Option` or `Result`.QN This implementation doesn't intend to be constant-time nor try to protect the@= leakage of the `T` since the `Option` will do it anyways.$BCC E$GG HIJKLNOPSVX 4B? This method is used to construct a new `CtOption` and takesǫ?< a value of type `T`, and a `Choice` that determines whether?< the optional value should be `Some` or not. If `is_some` isϬ@= false, the value will still be stored but its value is neverd exposed.BFF H#ʮ<9 Returns the contained value, consuming the `self` value.d # PanicsGD Panics if the value is none with a custom panic message provided byT `msg`.4 BF F I 63 This returns the underlying value but panics if itñ is not `Some`.4BFF JaijQӲ52 This returns the underlying value if it is `Some`$! or the provided value otherwise.L˳BFF Kxvֶq5Ѳ<9 or the value produced by the provided closure otherwise.@= This operates in constant time, because the provided closure is always called.tݶBFMMF #"l#" ŷ LQS߸41 Returns a true `Choice` if this value is `Some`.< BF F N$41 Returns a true `Choice` if this value is `None`.< BF F O$˽~=: Returns a `None` value if the option is `None`, otherwiseEB returns a `CtOption` enclosing the value of the provided closure.@= The closure is given the enclosed value or, if the option is74 `None`, it is provided a dummy value computed using̸ `Default::default()`.ּ޼@µҽBFQRQRF ֽ ٽ<#t# Ǿ Pz|uw=>; returns the result of the provided closure. The closure is<9 given the enclosed value or, if the option is `None`, itB? is provided a dummy value computed using `Default::default()`.@µDBFTUUTF  <ě#\ Sև҇^`bd~NK Returns `self` if it contains a value, and otherwise returns the result of<9 calling `f`. The provided function `f` is always called.<BFWWF #"\ VхͅFH%OHTQQبQ@MJ It's equivalent to the corresponding `From` impl, however this version is" friendlier for type inference.\BFF X7HZZ [4[A  BY Y [͎6]] t^)^,<9 Two `CtOption`s are equal if they are both `Some` and+( their values are equal, or both `None`.,  B\ \ ^$'~OL A type which can be compared in some manner and be determined to be greater" than another of the same type.___"```(%" Determine whether `self > other`.LI The bitwise-NOT of the return value of this function should be usable to! determine if `self <= other`.2lEB A `Choice` with a set bit if `self > other`, and with no set bitst otherwise.l<$! use subtle::ConstantTimeGreater; let x_gt_y = x.ct_gt(&y);&# assert_eq!(x_gt_y.unwrap_u8(), 0); let y_gt_x = y.ct_gt(&x);&# assert_eq!(y_gt_x.unwrap_u8(), 1); let x_gt_x = x.ct_gt(&x);&# assert_eq!(x_gt_x.unwrap_u8(), 0);<, > >B_ _$ ,.!     , 8& 8$ , 8L& 8$*  8$88 , 8  <C Returns Choice::from(1) iff x > y, and Choice::from(0) iff x <= y.F<<T<<> This algoritm would also work for signed integers if we firstA<4 flip the top bit, e.g. `let x: u8 = x ^ 0x80`, etc.7+   848 8,   8$$ 8 ,&  , 8(8 4  688 8$  8 ,% 888  8$ 8 ,% 888 7 % 8%,8 , 8L   888% 88% 888 8  8% 888 7 % 8%,8 , 8L   888% 88% 8 4'8$    8 7 88% *c`c',  Bb b c$ l@LI A type which can be compared in some manner and be determined to be less"dd(>t_>d:/&LA8eee'%" Determine whether `self < other`.L! determine if `self >= other`.IF A default implementation is provided and implemented for the unsigned integer types.2lEB A `Choice` with a set bit if `self < other`, and with no set bitstl<! use subtle::ConstantTimeLess; let x_lt_y = x.ct_lt(&y);&# assert_eq!(x_lt_y.unwrap_u8(), 1); let y_lt_x = y.ct_lt(&x);&# assert_eq!(y_lt_x.unwrap_u8(), 0); let x_lt_x = x.ct_lt(&x);&# assert_eq!(x_lt_x.unwrap_u8(), 0);<, > >Bd d e>$ zn'kek',  Bj j k$ lmm $noPM Constructs a new instance of `BlackBox` which will wrap the specified value.YV All access to the inner value will be mediated by a `black_box` optimization barrier.Bll nqkEB Read the inner value, applying an optimization barrier on access.Bll ofk7k"NK The `Choice` struct represents a choice for use in conditional assignment.##PM It is a wrapper around a `u8`, which should have the value either `1` (true)# or `0` (false).$$QN The conversion from `u8` to `Choice` passes the value through an optimization$QN barrier, as a best-effort attempt to prevent the compiler from inferring that%LI the `Choice` value is a boolean. This strategy is based on Tim Maclean's%QN [work on `rust-timing-shield`][rust-timing-shield], which attempts to provide&OL a more comprehensive approach for preventing software side-channels in RustL' code.''PM The `Choice` struct implements operators for AND, OR, XOR, and NOT, to allow(EB combining `Choice` values. These operations do not short-circuit.(( [rust-timing-shield]:(JG https://www.chosenplaintext.ca/open-source/rust-timing-shield/security4)V_wqrBYo1Bpp q)pp )bbbbvvbb Bu)u vbxgx  ggg cg"cثq1ȡ!Bw)w x[z)z\'(\  By\y z \ 0`|)|`'(`  B{`{ | ` L2[~)~\'(\  B}\} ~ \ 4`)`'(`  B`  ` 6[)\'(\  B\  \ m9`)`'(`  B`  ` -;[)\'(\  B\  \ =`)`'(`  B`  ` ?[ )\'(\  B\  \ B` )`'(`  B`  ` `D} 456~A~  B~ JJ͎J>  "B   L͎L?  "B NN͎N 456  B JJ͎J  "B  L͎L  "B NN͎N} 456~A~  B~ VV͎V>  "B   X͎X?  "B [[͎([ 456  B VV͎V  "B  X͎X  "B [[͎([!} 456!~A!~  B!~ bc͎ c!>!  "B!  ! e͎e!?!  "B! =gIg͎Tg 456  B bc͎ c  "B  e͎e  "B =gIg͎Tg(} 456(~A(~  B(~ $o.o͎8o(>(  "B(  ( @q͎Kq(?(  "B( isus͎s 456  B $o.o͎8o  "B  @q͎Kq  "B isus͎sFC The `CtOption` type represents an optional value similar to theĜ@= [`Option`](core::option::Option) type but is intended for use in constant time APIs.B? Any given `CtOption` is either `Some` or `None`, but unlike30 `Option` these variants are not exposed. TheC@ [`is_some()`](CtOption::is_some) method is used to determine ifEB the value is `Some`, and [`unwrap_or()`](CtOption::unwrap_or) and>; [`unwrap_or_else()`](CtOption::unwrap_or_else) methods areB? provided to access the underlying value. The value can also beDA obtained with [`unwrap()`](CtOption::unwrap) but this will panic if it is `None`.C@ Functions that are intended to be constant time may not produce͡C@ valid results for all inputs, such as square root and inversionC@ operations in finite field arithmetic. Returning an `Option`բDA from these functions makes it difficult for the caller to reasonA> about the result in constant time, and returning an incorrectܣ>; value burdens the caller and increases the chance of bugs.DĤ ͤ?֞T "D֤,֤|<5/ͤ B/  06/0ͤ?B7pg1ͤg  ggg cg"cثq1ȡ!B1 5!`5'5F5P555A57(5  B5  5 86!`6'6F6P666A67(6  B6  6 7!`7'7F7P777A77(7  B7  7 8!`8'8F8P888A87(8  B8  8 >KH Wrapper type which implements an optimization barrier for all accesses.D $6{UI B`WB np 99 B9 b ::]:etw;;g36  ggg cg"cثq1ȡ!B; ے   z+v?uSto Kan Mj T*j Y\p`\~`\`\`\`e e` n^ s'\ x0~V\,){%[~,)%!~!!,C)%(~E((,n)%Q ыQ NM [ a !HDD< ]; 6 567&80 + * `f1Fl<Fhttps://www.chosenplaintext.ca/open-source/rust-timing-shield/security Optioncore::option::Option core::optionWhttps://crates.io/crates/subtlehttps://doc.dalek.rs/subtleCtOption::unwrap_orunwrap_or_else()CtOption::unwrap_or_elsework on rust-timing-shieldř unwrap_or()https://docs.rs/subtleCtOption::is_somehereCtOption::unwrap is_some()/https://travis-ci.org/dalek-cryptography/subtle unwrap()  !"(3=_d  ####!!!PQPPQChoiceCtOptionvalueis_someBlackBox닖Uբ봑"ǎ/tޅ GӐ DH1a'+D+uk1R-ŭ9+{Sb^%liM>;,_E&]+cưO?Oa*V:'qsN2rkdEmutB|j߄ӵ 43mtuρ/ c{ h|^#n. |@PG,476"KC'GF,K70Q mt?`#>0 PL69PPS9<᫹nXHcD![Z9߿\$sDW5(ԊkIz3S?ZmR/H(xB\ACZdؼс ?%a" vch ºS0 s>%ꠌD{:Ʋ{Ih6ϠG a}ULhwۆSoF 4^] (Df :qґz)Bw&Ulptv/Jy*v2M)zGK4hcռ5Wgw绔 Ɗ@#!KJ s||4E0Yg=j?0e)8Y0'Z0~^XEGGYo5Dn2ؒEQbo6Ԓ0mޞw {UC9rϛNX|]?9]:\{'35+TUm2L5k k`o&zLF\=TKh>:v>p_#Եi*+M;0 N4 D)I%jg}{Kpݙ8S*ACۜ *w;$uZVösQJx/@RL(jTvVJ4D0؄W9|},+c/#h~do})q੮+4`6<ϹcCV-ͲUr}4y~uղ_ /ȍ0hT}6Gs[%ŃzEȈ[ݬ6<ޡk37@PpxB9IߓEs I8|ڕxA7%f^ m nd|>A}C:'4[8ɶ'݌aHEDWo).1i<>h-<M? `2S;:#ontcȰSQ'ٛrڲ2mbjXdoTh温TlOўJ?8SwrYZb~1b 32S}_doTPCEE1V%YN&CW*IYfodÀ,}z̧ U2k-Z<^BFeW;(eYꐱ{0t]ll⡜%!dݳ/ZI~~)a8Gg2a?0O#%nY֖=< 68=Mѱ`V1rSӔ ǡ66(+f"U)D, 3 %Fr%f=!r͂NېxQ+t8#\H[|s?C=6)Qۈҽ,|,O$]4:NJtS5yx4 !LgOf/`H;nҼ%L@*aK1aU{1Ļ{T=cۿr-լ5MxF@[vaG,8 YbNZr ;tC(Ӽo`l;S!Ud@Ʋ5p1ǒx>eRl,y4|XCE=הdVk,?N-6;<4C"jX75hK]۔l{(B%&B[uaff 4&aYK0xkobF|_5hO*ڐ~2NWQ+3]_wZm&VEHP.J&p1:P&1^a_a`a& K#)/5;BI\ 7Q +Me?W1I!8tW  TX@^v%( z kE !B "##X$$%c &/*-0H00#1555555e667D8<<<<=\=w=#>>>>>/?J???>@[@@@TAqAAAjBBBCCC,DD ENEE/FFFNGGBHpHHQIIIpJJdKKLsLLMMNNN%OOP6URUlUUVUVV^W|WJXhX6YTY"Z@Z [\\j\\ ]]] FV&1UB7)  9IxW #$W&901555556Z<<<=j=/>>;??J@@`AAvBCC,EFNHIpKLN UUBVVjWVXBY.Z[N\\?]      +++         + '    '    Q}Co5a%P3E\T)0h8av@M !o##5%&)5*a0!1@56789<|<<&==W>>c??t@@ABB+CCFDDeEEFFFhGGHHhIJJKKLL2MM)NNEX3L'I`;R -D4oSBOS;Yq!"  `mte?t    /"<"###R$$$%]&)*'0B001555555`6667A8c<<<<< =Y=t=>8>>>*?D???9@U@@@OAkAAAeBBB C{CC%DDEKEE,FFFGGG?HmHHNIIIiJJaKKLpLLMMNNN"OOP$U1UMUiUUUVCVRVVVWWuWCXaX/YMYZ9Z[[[[\Z\g\\\]K]Z] ^^^^$^*^0^6^<^B^I^O^V^\^c^i^p^v^~^^^^^^^^^^^^^^^^^^^_ ____#_)_0_6_>_D_M_S_\_b_g_m_r_x_}____________________`` ````%`+`4`:`C`I`N`T`Y`_`d`j`r`x`````````````````````a aaa"a*a0a8a>aFaLaRaXa#)/5;BMe?W1I!8-DkX<%brz OHv]' 4   !1"V###$%&)/*H01'556s785<f<<=w=>>>J??[@@qAABCC,DDNEE/FFNGGpHHQIIpJJKLsLMMNN%OOT&U6URUUUFVVVWXYZb[[[\\\j\\N]]]^^^!^'^-^3^9^?^F^L^S^Y^`^f^m^s^{^^^^^^^^^^^^^^^^^^^^_ ___ _&_-_3_;_A_J_P_Y___d_j_o_u_z_____________________` ````"`(`1`7`@`F`K`Q`V`\`a`g`o`u`}````````````````````a aaaa'a-a5a;aCaIaOaUa[aQ$?3Z%L>t .a D{L=QthjzL.~r   !9"###1$m$$l%,&*50041w555555I6z66708@<<<<<<K=f= >+>>>?7???!@F@@@6A\AAALBrBBBbCCDDD(EE F}FF'GGHJHH/IIIIJJAKlKKQLLLkMMcNNOsOOT.UFUbUUUU-VOVnVV=WfW)XRXY>YZ*ZZ~[[[\4\d\\\]#]W]]K9-RDz6l&Y<o F1En[d rD{&xP]   !3"y###$$Z$$_%&*/00"1j555555<6g667(8:<<<<<<>=`==%>>>?1???@@@@@(AVAAA>BlBBBTCCCqDD"EEFqFFGGHDHH#III;JJ2KfKKELLL]MMTNNNgOOT(U=UYUpUUUVIVYVV.W`WXLXY8YY$ZZi[[[\\^\\\\]Q]]S(A5^'PBx 2e H7AUvlU~P2\  "##5$$p%*700{555555M66748B<<<<<=O=h= >->>>?9???%@H@@@;A^AAAQBtBBBgCC DDE*EEFFF,GG$HLHH4IIINJJFKnKKVLLLpMMhNNOxOO UKUgUUV@VVBWhW.XTXY@YZ,ZZ[[\L\\\=]] ~pbQ4F U1i9bwAN !p##6%)b0A5678:<~<'==X>>d??u@AABB,CCGDDfEEGFFiGGHHiIJJKKLL3MM*NN=OOTUVWXYZh[[\u] ~pbQ4G V1j:cxDQ !q##7%)b0B567 8[<~<'==X>>d??u@AABB,CCGDDfEEGFFiGGHHiIJJKKLL3MM*NN=OOUVWXYZ[[\v]i[M<1o@T$Mb,9 ![##!%)M0,55x7 8h<=z=C>>O??`@@vABBCC2DDQEE2FFTGGsHHTIIvJJKLvLMMNN(OOUVWXYZ[m\`]   $ 2 < I V j s | - 6 c l u ~ _ h q z " + 4 = F O X a ? H Q Z Nl   ;"#$9&_160UUQVV[f\]Y]wT< ?,DlFrGy|} Vރ؏D L``b.*1257 :;> @ @:CD?KQMOQQS(UkW}Y[]}_Tacegikmoqt%vwyx Ou vS; >,a.kFqGH|}`U݃6`׏C էK_S)1257 :;> @;CD@KRMOQRS)UlW~Y[]~_Uacegikmoqt&vwyy Pv<[,  |iLEX pW9g ""#<$w%*05Q67;8S=>>??*@@@AAVBBlCDDEEFF1GG)HH9IISJJKKK[LLuMMmN O}OOVJW3XY ZZ\]:&`1I7+ l#X$&-0155555e63<<<<^=#>>/??>@@TAAjBBC EFBHIdKLNTnUVWV^WJX6Y"Z`[\\ ]Q<U[D< U[!%,37>BIPT[_fmqx| 3Le| !%,37>ELSZov!-UY`w  (,48@DLPX\dhpx  (,4<DS[ckow '-39?EKQW]ciou{ %+17=DKRY`gnu|     $ + 2 9 @ G N U \ c j q x      & - 4 ; A G M S Y _ f m t S<U[VC9?+1#:LMNy X#$X&:01566=k=0>>O} \#$Y&>01555556<<=p=4>>@??P@@fAA|BCC>EF`HIKMNUBVVpW\XHY4ZU\\F] ߾ ==BA7HEľžݾB@6HD<5 ƾ; ??ECǾ :?>޾ EB89 o$)ucore_intrinsicsderive_clone_copy_internals  닖UGxi닖U/v[]닖UTtG#)b%Z0닖Ugwo $crate::assert T]]panic_internalsgeneric_assert_internals닖UB! cJ0닖U(k9e,}V닖Uq:Ӈ/} 8닖U4 [$crate::format_args2]] fmt_internalsfmt_arguments_from_str닖U, N2 ]Α닖UUAQ$yq,} fmt_helpers_for_derivegg닖U.*+ a닖U0ryBg닖UZkwA]닖Uvk닖U. 76pq,)gg닖UVKJ])닖U ~ j3닖U^}ub"Y0닖Uk:ֳοc%0닖U%l⡜%!z)Bwul{(B%BZm&VEL>h-<ρ/ cQ4D0؄U{1Ļ%+4G5d6+;eG7g:y8e1969P\2L5k S;:#F\=TiM>;03S?Zmdd>:=!r]_wK)I%j/#h%ŃzpxB92WwUXa$PG,4T5yxvaG+QJx/Ԓ0S}_dS*At6'ԚaffDv2MyР~%f^ M?zS.?9]:\%nYꐱ{Q mt?`Y,8,馂HPMmu:BtEo670Xǒx>5{T=&48[=B<^BFey*xuv>p_Ʋ{IhnE-iK0xkoFuk1+, 3 %Fղ_ /Ȼ^] (sb 3 6 W9|\$s`0~҆ɶ'4 a?0do8#Q'ٛ9(>L@*a#},+cGF,KW>0 PL[0h35+4 Dk3 X 6"`6<ϵJ?8o_:CGA}C:'PS9<᫹]`l;1,?N=t0A8ΗA} !f/CDK|E-%>E;6ϠG ao^XEGG݌aHEDZI~TPNWQ+3JtST剽wUU?TUmDW5a"U)DV%Y\ACZg2k-Z|XC<9]۔A&B[uC 4&aYEѱ`V1 ~)a vchjdo}odW;(eOf/!Kh6(j`r&Ulptv*[nW96J݌q2HL3rV:'qsN5[TӟsQ{<dscpFv/Jw3!wO(!5Wgw|0t]ll)zGKz9+{-n. |@S,}NېxQ+tD{:m+Mdؼс h\H[|sNZr .i<hwۆSqSwr*w@Ʋ53hOH(ԊkIbCڋ;=닖UcCVcȰS4:NJ>ǎ/t&vn ,<%>#!K~UC9rώ1Y֖=<?C=6Cۜ wa8~ _xA7zL{Kpr%-լ5(ݯS }ULpmޞw {dݳ/բ봑j߄ӵOVöscomRg}#ZX75hK@R-ŭ,oF 4rZ9߿_ DH1a')Iߓ͂Mc ,_E&1%/ɯCWo)p14*QjO#]2+-n0e)85AR8cۿr'eRl6"LY0'Z;$uZC,cXW<WsGU"EmM?Oa*4TlOўEQb̧ UC'Vzc `2Yo5_ee3ti9\ ZR6.N35`VIwKq5 uj" 1BPQ Ny} *[N5>,L;bS,_njviiT:sAkH-[ybv;5 q0- /, .- /!PHKN(QTK-' 8.1)#8]K!E ,,LF*>,, -.>,,.1FHIS & ,,""++ ,C$ GC.7+ !.EG(&-'67,DFJP1 '6E9 $'''*LL(.-AD&LF*1((7 - ::  GG7 - ,, E?K'7 - 88 F**          3.P<<N%M<<N2N<<N* 11111'NA1H:NMA*H;#; H.E70 @ EELF#D7 6% $70)4GAC4DF?CEDDDEB?*TMVVVE01' GDDE; AL*<;1:)( $?:AE. $?9&9&BJE<E0 .% BCAGE5 .%/ % SA1 $$&5TMVVVER',KH?H 9A03 ;P# *Q&7J )"+"+"+ -1&,SND6z{!\)V I!)d SO. +---/-.B#$$M#C*Q&N7J &"+"+"+ .0 !!!"*.?#$$L!U^#J  >?[TyF!l -# x86_64-unknown-linux-gnuRB>subtle-d2b64395c76666cb닖UR bbuueeffeebFFFrust-end-file