public abstract class org.bouncycastle.math.ec.rfc7748.X448
  minor version: 0
  major version: 59
  flags: flags: (0x0421) ACC_PUBLIC, ACC_SUPER, ACC_ABSTRACT
  this_class: org.bouncycastle.math.ec.rfc7748.X448
  super_class: java.lang.Object
{
  public static final int POINT_SIZE;
    descriptor: I
    flags: (0x0019) ACC_PUBLIC, ACC_STATIC, ACC_FINAL
    ConstantValue: 56

  public static final int SCALAR_SIZE;
    descriptor: I
    flags: (0x0019) ACC_PUBLIC, ACC_STATIC, ACC_FINAL
    ConstantValue: 56

  private static final int C_A;
    descriptor: I
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: 156326

  private static final int C_A24;
    descriptor: I
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL
    ConstantValue: 39082

  public void <init>();
    descriptor: ()V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // org.bouncycastle.math.ec.rfc7748.X448 this
         0: .line 8
            aload 0 /* this */
            invokespecial java.lang.Object.<init>:()V
            return
        end local 0 // org.bouncycastle.math.ec.rfc7748.X448 this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lorg/bouncycastle/math/ec/rfc7748/X448;

  public static boolean calculateAgreement(byte[], int, byte[], int, byte[], int);
    descriptor: ([BI[BI[BI)Z
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=6, locals=6, args_size=6
        start local 0 // byte[] k
        start local 1 // int kOff
        start local 2 // byte[] u
        start local 3 // int uOff
        start local 4 // byte[] r
        start local 5 // int rOff
         0: .line 28
            aload 0 /* k */
            iload 1 /* kOff */
            aload 2 /* u */
            iload 3 /* uOff */
            aload 4 /* r */
            iload 5 /* rOff */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448.scalarMult:([BI[BI[BI)V
         1: .line 29
            aload 4 /* r */
            iload 5 /* rOff */
            bipush 56
            invokestatic org.bouncycastle.util.Arrays.areAllZeroes:([BII)Z
            ifeq 2
            iconst_0
            goto 3
      StackMap locals:
      StackMap stack:
         2: iconst_1
      StackMap locals:
      StackMap stack: int
         3: ireturn
        end local 5 // int rOff
        end local 4 // byte[] r
        end local 3 // int uOff
        end local 2 // byte[] u
        end local 1 // int kOff
        end local 0 // byte[] k
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    4     0     k  [B
            0    4     1  kOff  I
            0    4     2     u  [B
            0    4     3  uOff  I
            0    4     4     r  [B
            0    4     5  rOff  I
    MethodParameters:
      Name  Flags
      k     
      kOff  
      u     
      uOff  
      r     
      rOff  

  private static int decode32(byte[], int);
    descriptor: ([BI)I
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=3, locals=3, args_size=2
        start local 0 // byte[] bs
        start local 1 // int off
         0: .line 34
            aload 0 /* bs */
            iload 1 /* off */
            baload
            sipush 255
            iand
            istore 2 /* n */
        start local 2 // int n
         1: .line 35
            iload 2 /* n */
            aload 0 /* bs */
            iinc 1 /* off */ 1
            iload 1 /* off */
            baload
            sipush 255
            iand
            bipush 8
            ishl
            ior
            istore 2 /* n */
         2: .line 36
            iload 2 /* n */
            aload 0 /* bs */
            iinc 1 /* off */ 1
            iload 1 /* off */
            baload
            sipush 255
            iand
            bipush 16
            ishl
            ior
            istore 2 /* n */
         3: .line 37
            iload 2 /* n */
            aload 0 /* bs */
            iinc 1 /* off */ 1
            iload 1 /* off */
            baload
            bipush 24
            ishl
            ior
            istore 2 /* n */
         4: .line 38
            iload 2 /* n */
            ireturn
        end local 2 // int n
        end local 1 // int off
        end local 0 // byte[] bs
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    5     0    bs  [B
            0    5     1   off  I
            1    5     2     n  I
    MethodParameters:
      Name  Flags
      bs    
      off   

  private static void decodeScalar(byte[], int, int[]);
    descriptor: ([BI[I)V
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=6, locals=4, args_size=3
        start local 0 // byte[] k
        start local 1 // int kOff
        start local 2 // int[] n
         0: .line 43
            iconst_0
            istore 3 /* i */
        start local 3 // int i
         1: goto 4
         2: .line 45
      StackMap locals: int
      StackMap stack:
            aload 2 /* n */
            iload 3 /* i */
            aload 0 /* k */
            iload 1 /* kOff */
            iload 3 /* i */
            iconst_4
            imul
            iadd
            invokestatic org.bouncycastle.math.ec.rfc7748.X448.decode32:([BI)I
            iastore
         3: .line 43
            iinc 3 /* i */ 1
      StackMap locals:
      StackMap stack:
         4: iload 3 /* i */
            bipush 14
            if_icmplt 2
        end local 3 // int i
         5: .line 48
            aload 2 /* n */
            iconst_0
            dup2
            iaload
            bipush -4
            iand
            iastore
         6: .line 49
            aload 2 /* n */
            bipush 13
            dup2
            iaload
            ldc -2147483648
            ior
            iastore
         7: .line 50
            return
        end local 2 // int[] n
        end local 1 // int kOff
        end local 0 // byte[] k
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    8     0     k  [B
            0    8     1  kOff  I
            0    8     2     n  [I
            1    5     3     i  I
    MethodParameters:
      Name  Flags
      k     
      kOff  
      n     

  public static void generatePrivateKey(java.security.SecureRandom, byte[]);
    descriptor: (Ljava/security/SecureRandom;[B)V
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=4, locals=2, args_size=2
        start local 0 // java.security.SecureRandom random
        start local 1 // byte[] k
         0: .line 54
            aload 0 /* random */
            aload 1 /* k */
            invokevirtual java.security.SecureRandom.nextBytes:([B)V
         1: .line 56
            aload 1 /* k */
            iconst_0
            dup2
            baload
            sipush 252
            iand
            i2b
            bastore
         2: .line 57
            aload 1 /* k */
            bipush 55
            dup2
            baload
            sipush 128
            ior
            i2b
            bastore
         3: .line 58
            return
        end local 1 // byte[] k
        end local 0 // java.security.SecureRandom random
      LocalVariableTable:
        Start  End  Slot    Name  Signature
            0    4     0  random  Ljava/security/SecureRandom;
            0    4     1       k  [B
    MethodParameters:
        Name  Flags
      random  
      k       

  public static void generatePublicKey(byte[], int, byte[], int);
    descriptor: ([BI[BI)V
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=4, locals=4, args_size=4
        start local 0 // byte[] k
        start local 1 // int kOff
        start local 2 // byte[] r
        start local 3 // int rOff
         0: .line 62
            aload 0 /* k */
            iload 1 /* kOff */
            aload 2 /* r */
            iload 3 /* rOff */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448.scalarMultBase:([BI[BI)V
         1: .line 63
            return
        end local 3 // int rOff
        end local 2 // byte[] r
        end local 1 // int kOff
        end local 0 // byte[] k
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    2     0     k  [B
            0    2     1  kOff  I
            0    2     2     r  [B
            0    2     3  rOff  I
    MethodParameters:
      Name  Flags
      k     
      kOff  
      r     
      rOff  

  private static void pointDouble(int[], int[]);
    descriptor: ([I[I)V
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=3, locals=4, args_size=2
        start local 0 // int[] x
        start local 1 // int[] z
         0: .line 67
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.create:()[I
            astore 2 /* A */
        start local 2 // int[] A
         1: .line 68
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.create:()[I
            astore 3 /* B */
        start local 3 // int[] B
         2: .line 71
            aload 0 /* x */
            aload 1 /* z */
            aload 2 /* A */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.add:([I[I[I)V
         3: .line 72
            aload 0 /* x */
            aload 1 /* z */
            aload 3 /* B */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.sub:([I[I[I)V
         4: .line 73
            aload 2 /* A */
            aload 2 /* A */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.sqr:([I[I)V
         5: .line 74
            aload 3 /* B */
            aload 3 /* B */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.sqr:([I[I)V
         6: .line 75
            aload 2 /* A */
            aload 3 /* B */
            aload 0 /* x */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.mul:([I[I[I)V
         7: .line 76
            aload 2 /* A */
            aload 3 /* B */
            aload 2 /* A */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.sub:([I[I[I)V
         8: .line 77
            aload 2 /* A */
            ldc 39082
            aload 1 /* z */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.mul:([II[I)V
         9: .line 78
            aload 1 /* z */
            aload 3 /* B */
            aload 1 /* z */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.add:([I[I[I)V
        10: .line 79
            aload 1 /* z */
            aload 2 /* A */
            aload 1 /* z */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.mul:([I[I[I)V
        11: .line 80
            return
        end local 3 // int[] B
        end local 2 // int[] A
        end local 1 // int[] z
        end local 0 // int[] x
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0   12     0     x  [I
            0   12     1     z  [I
            1   12     2     A  [I
            2   12     3     B  [I
    MethodParameters:
      Name  Flags
      x     
      z     

  public static void precompute();
    descriptor: ()V
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=0, locals=0, args_size=0
         0: .line 84
            invokestatic org.bouncycastle.math.ec.rfc8032.Ed448.precompute:()V
         1: .line 85
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  public static void scalarMult(byte[], int, byte[], int, byte[], int);
    descriptor: ([BI[BI[BI)V
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=4, locals=19, args_size=6
        start local 0 // byte[] k
        start local 1 // int kOff
        start local 2 // byte[] u
        start local 3 // int uOff
        start local 4 // byte[] r
        start local 5 // int rOff
         0: .line 89
            bipush 14
            newarray 10
            astore 6 /* n */
        start local 6 // int[] n
         1: aload 0 /* k */
            iload 1 /* kOff */
            aload 6 /* n */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448.decodeScalar:([BI[I)V
         2: .line 91
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.create:()[I
            astore 7 /* x1 */
        start local 7 // int[] x1
         3: aload 2 /* u */
            iload 3 /* uOff */
            aload 7 /* x1 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.decode:([BI[I)V
         4: .line 92
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.create:()[I
            astore 8 /* x2 */
        start local 8 // int[] x2
         5: aload 7 /* x1 */
            iconst_0
            aload 8 /* x2 */
            iconst_0
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.copy:([II[II)V
         6: .line 93
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.create:()[I
            astore 9 /* z2 */
        start local 9 // int[] z2
         7: aload 9 /* z2 */
            iconst_0
            iconst_1
            iastore
         8: .line 94
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.create:()[I
            astore 10 /* x3 */
        start local 10 // int[] x3
         9: aload 10 /* x3 */
            iconst_0
            iconst_1
            iastore
        10: .line 95
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.create:()[I
            astore 11 /* z3 */
        start local 11 // int[] z3
        11: .line 97
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.create:()[I
            astore 12 /* t1 */
        start local 12 // int[] t1
        12: .line 98
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.create:()[I
            astore 13 /* t2 */
        start local 13 // int[] t2
        13: .line 102
            sipush 447
            istore 14 /* bit */
        start local 14 // int bit
        14: iconst_1
            istore 15 /* swap */
        start local 15 // int swap
        15: .line 106
      StackMap locals: byte[] int byte[] int byte[] int int[] int[] int[] int[] int[] int[] int[] int[] int int
      StackMap stack:
            aload 10 /* x3 */
            aload 11 /* z3 */
            aload 12 /* t1 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.add:([I[I[I)V
        16: .line 107
            aload 10 /* x3 */
            aload 11 /* z3 */
            aload 10 /* x3 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.sub:([I[I[I)V
        17: .line 109
            aload 8 /* x2 */
            aload 9 /* z2 */
            aload 11 /* z3 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.add:([I[I[I)V
        18: .line 110
            aload 8 /* x2 */
            aload 9 /* z2 */
            aload 8 /* x2 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.sub:([I[I[I)V
        19: .line 112
            aload 12 /* t1 */
            aload 8 /* x2 */
            aload 12 /* t1 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.mul:([I[I[I)V
        20: .line 113
            aload 10 /* x3 */
            aload 11 /* z3 */
            aload 10 /* x3 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.mul:([I[I[I)V
        21: .line 114
            aload 11 /* z3 */
            aload 11 /* z3 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.sqr:([I[I)V
        22: .line 115
            aload 8 /* x2 */
            aload 8 /* x2 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.sqr:([I[I)V
        23: .line 117
            aload 11 /* z3 */
            aload 8 /* x2 */
            aload 13 /* t2 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.sub:([I[I[I)V
        24: .line 118
            aload 13 /* t2 */
            ldc 39082
            aload 9 /* z2 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.mul:([II[I)V
        25: .line 119
            aload 9 /* z2 */
            aload 8 /* x2 */
            aload 9 /* z2 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.add:([I[I[I)V
        26: .line 120
            aload 9 /* z2 */
            aload 13 /* t2 */
            aload 9 /* z2 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.mul:([I[I[I)V
        27: .line 121
            aload 8 /* x2 */
            aload 11 /* z3 */
            aload 8 /* x2 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.mul:([I[I[I)V
        28: .line 124
            aload 12 /* t1 */
            aload 10 /* x3 */
            aload 11 /* z3 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.sub:([I[I[I)V
        29: .line 125
            aload 12 /* t1 */
            aload 10 /* x3 */
            aload 10 /* x3 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.add:([I[I[I)V
        30: .line 126
            aload 10 /* x3 */
            aload 10 /* x3 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.sqr:([I[I)V
        31: .line 127
            aload 11 /* z3 */
            aload 11 /* z3 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.sqr:([I[I)V
        32: .line 128
            aload 11 /* z3 */
            aload 7 /* x1 */
            aload 11 /* z3 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.mul:([I[I[I)V
        33: .line 130
            iinc 14 /* bit */ -1
        34: .line 132
            iload 14 /* bit */
            iconst_5
            iushr
            istore 16 /* word */
        start local 16 // int word
        35: iload 14 /* bit */
            bipush 31
            iand
            istore 17 /* shift */
        start local 17 // int shift
        36: .line 133
            aload 6 /* n */
            iload 16 /* word */
            iaload
            iload 17 /* shift */
            iushr
            iconst_1
            iand
            istore 18 /* kt */
        start local 18 // int kt
        37: .line 134
            iload 15 /* swap */
            iload 18 /* kt */
            ixor
            istore 15 /* swap */
        38: .line 135
            iload 15 /* swap */
            aload 8 /* x2 */
            aload 10 /* x3 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.cswap:(I[I[I)V
        39: .line 136
            iload 15 /* swap */
            aload 9 /* z2 */
            aload 11 /* z3 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.cswap:(I[I[I)V
        40: .line 137
            iload 18 /* kt */
            istore 15 /* swap */
        end local 18 // int kt
        end local 17 // int shift
        end local 16 // int word
        41: .line 139
            iload 14 /* bit */
            iconst_2
        42: .line 103
            if_icmpge 15
        43: .line 143
            iconst_0
            istore 16 /* i */
        start local 16 // int i
        44: goto 47
        45: .line 145
      StackMap locals: int
      StackMap stack:
            aload 8 /* x2 */
            aload 9 /* z2 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448.pointDouble:([I[I)V
        46: .line 143
            iinc 16 /* i */ 1
      StackMap locals:
      StackMap stack:
        47: iload 16 /* i */
            iconst_2
            if_icmplt 45
        end local 16 // int i
        48: .line 148
            aload 9 /* z2 */
            aload 9 /* z2 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.inv:([I[I)V
        49: .line 149
            aload 8 /* x2 */
            aload 9 /* z2 */
            aload 8 /* x2 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.mul:([I[I[I)V
        50: .line 151
            aload 8 /* x2 */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.normalize:([I)V
        51: .line 152
            aload 8 /* x2 */
            aload 4 /* r */
            iload 5 /* rOff */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.encode:([I[BI)V
        52: .line 153
            return
        end local 15 // int swap
        end local 14 // int bit
        end local 13 // int[] t2
        end local 12 // int[] t1
        end local 11 // int[] z3
        end local 10 // int[] x3
        end local 9 // int[] z2
        end local 8 // int[] x2
        end local 7 // int[] x1
        end local 6 // int[] n
        end local 5 // int rOff
        end local 4 // byte[] r
        end local 3 // int uOff
        end local 2 // byte[] u
        end local 1 // int kOff
        end local 0 // byte[] k
      LocalVariableTable:
        Start  End  Slot   Name  Signature
            0   53     0      k  [B
            0   53     1   kOff  I
            0   53     2      u  [B
            0   53     3   uOff  I
            0   53     4      r  [B
            0   53     5   rOff  I
            1   53     6      n  [I
            3   53     7     x1  [I
            5   53     8     x2  [I
            7   53     9     z2  [I
            9   53    10     x3  [I
           11   53    11     z3  [I
           12   53    12     t1  [I
           13   53    13     t2  [I
           14   53    14    bit  I
           15   53    15   swap  I
           35   41    16   word  I
           36   41    17  shift  I
           37   41    18     kt  I
           44   48    16      i  I
    MethodParameters:
      Name  Flags
      k     
      kOff  
      u     
      uOff  
      r     
      rOff  

  public static void scalarMultBase(byte[], int, byte[], int);
    descriptor: ([BI[BI)V
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=5, locals=6, args_size=4
        start local 0 // byte[] k
        start local 1 // int kOff
        start local 2 // byte[] r
        start local 3 // int rOff
         0: .line 157
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.create:()[I
            astore 4 /* x */
        start local 4 // int[] x
         1: .line 158
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.create:()[I
            astore 5 /* y */
        start local 5 // int[] y
         2: .line 160
            getstatic org.bouncycastle.math.ec.rfc7748.X448$Friend.INSTANCE:Lorg/bouncycastle/math/ec/rfc7748/X448$Friend;
            aload 0 /* k */
            iload 1 /* kOff */
            aload 4 /* x */
            aload 5 /* y */
            invokestatic org.bouncycastle.math.ec.rfc8032.Ed448.scalarMultBaseXY:(Lorg/bouncycastle/math/ec/rfc7748/X448$Friend;[BI[I[I)V
         3: .line 162
            aload 4 /* x */
            aload 4 /* x */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.inv:([I[I)V
         4: .line 163
            aload 4 /* x */
            aload 5 /* y */
            aload 4 /* x */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.mul:([I[I[I)V
         5: .line 164
            aload 4 /* x */
            aload 4 /* x */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.sqr:([I[I)V
         6: .line 166
            aload 4 /* x */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.normalize:([I)V
         7: .line 167
            aload 4 /* x */
            aload 2 /* r */
            iload 3 /* rOff */
            invokestatic org.bouncycastle.math.ec.rfc7748.X448Field.encode:([I[BI)V
         8: .line 168
            return
        end local 5 // int[] y
        end local 4 // int[] x
        end local 3 // int rOff
        end local 2 // byte[] r
        end local 1 // int kOff
        end local 0 // byte[] k
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    9     0     k  [B
            0    9     1  kOff  I
            0    9     2     r  [B
            0    9     3  rOff  I
            1    9     4     x  [I
            2    9     5     y  [I
    MethodParameters:
      Name  Flags
      k     
      kOff  
      r     
      rOff  
}
SourceFile: "X448.java"
NestMembers:
  org.bouncycastle.math.ec.rfc7748.X448$Friend
InnerClasses:
  public Friend = org.bouncycastle.math.ec.rfc7748.X448$Friend of org.bouncycastle.math.ec.rfc7748.X448