github.com/likebike/go--@v0.0.0-20190911215757-0bd925d16e96/go/src/math/big/int_test.go (about)

     1  // Copyright 2009 The Go Authors. All rights reserved.
     2  // Use of this source code is governed by a BSD-style
     3  // license that can be found in the LICENSE file.
     4  
     5  package big
     6  
     7  import (
     8  	"bytes"
     9  	"encoding/hex"
    10  	"fmt"
    11  	"math/rand"
    12  	"strconv"
    13  	"strings"
    14  	"testing"
    15  	"testing/quick"
    16  )
    17  
    18  func isNormalized(x *Int) bool {
    19  	if len(x.abs) == 0 {
    20  		return !x.neg
    21  	}
    22  	// len(x.abs) > 0
    23  	return x.abs[len(x.abs)-1] != 0
    24  }
    25  
    26  type funZZ func(z, x, y *Int) *Int
    27  type argZZ struct {
    28  	z, x, y *Int
    29  }
    30  
    31  var sumZZ = []argZZ{
    32  	{NewInt(0), NewInt(0), NewInt(0)},
    33  	{NewInt(1), NewInt(1), NewInt(0)},
    34  	{NewInt(1111111110), NewInt(123456789), NewInt(987654321)},
    35  	{NewInt(-1), NewInt(-1), NewInt(0)},
    36  	{NewInt(864197532), NewInt(-123456789), NewInt(987654321)},
    37  	{NewInt(-1111111110), NewInt(-123456789), NewInt(-987654321)},
    38  }
    39  
    40  var prodZZ = []argZZ{
    41  	{NewInt(0), NewInt(0), NewInt(0)},
    42  	{NewInt(0), NewInt(1), NewInt(0)},
    43  	{NewInt(1), NewInt(1), NewInt(1)},
    44  	{NewInt(-991 * 991), NewInt(991), NewInt(-991)},
    45  	// TODO(gri) add larger products
    46  }
    47  
    48  func TestSignZ(t *testing.T) {
    49  	var zero Int
    50  	for _, a := range sumZZ {
    51  		s := a.z.Sign()
    52  		e := a.z.Cmp(&zero)
    53  		if s != e {
    54  			t.Errorf("got %d; want %d for z = %v", s, e, a.z)
    55  		}
    56  	}
    57  }
    58  
    59  func TestSetZ(t *testing.T) {
    60  	for _, a := range sumZZ {
    61  		var z Int
    62  		z.Set(a.z)
    63  		if !isNormalized(&z) {
    64  			t.Errorf("%v is not normalized", z)
    65  		}
    66  		if (&z).Cmp(a.z) != 0 {
    67  			t.Errorf("got z = %v; want %v", z, a.z)
    68  		}
    69  	}
    70  }
    71  
    72  func TestAbsZ(t *testing.T) {
    73  	var zero Int
    74  	for _, a := range sumZZ {
    75  		var z Int
    76  		z.Abs(a.z)
    77  		var e Int
    78  		e.Set(a.z)
    79  		if e.Cmp(&zero) < 0 {
    80  			e.Sub(&zero, &e)
    81  		}
    82  		if z.Cmp(&e) != 0 {
    83  			t.Errorf("got z = %v; want %v", z, e)
    84  		}
    85  	}
    86  }
    87  
    88  func testFunZZ(t *testing.T, msg string, f funZZ, a argZZ) {
    89  	var z Int
    90  	f(&z, a.x, a.y)
    91  	if !isNormalized(&z) {
    92  		t.Errorf("%s%v is not normalized", msg, z)
    93  	}
    94  	if (&z).Cmp(a.z) != 0 {
    95  		t.Errorf("%s%+v\n\tgot z = %v; want %v", msg, a, &z, a.z)
    96  	}
    97  }
    98  
    99  func TestSumZZ(t *testing.T) {
   100  	AddZZ := func(z, x, y *Int) *Int { return z.Add(x, y) }
   101  	SubZZ := func(z, x, y *Int) *Int { return z.Sub(x, y) }
   102  	for _, a := range sumZZ {
   103  		arg := a
   104  		testFunZZ(t, "AddZZ", AddZZ, arg)
   105  
   106  		arg = argZZ{a.z, a.y, a.x}
   107  		testFunZZ(t, "AddZZ symmetric", AddZZ, arg)
   108  
   109  		arg = argZZ{a.x, a.z, a.y}
   110  		testFunZZ(t, "SubZZ", SubZZ, arg)
   111  
   112  		arg = argZZ{a.y, a.z, a.x}
   113  		testFunZZ(t, "SubZZ symmetric", SubZZ, arg)
   114  	}
   115  }
   116  
   117  func TestProdZZ(t *testing.T) {
   118  	MulZZ := func(z, x, y *Int) *Int { return z.Mul(x, y) }
   119  	for _, a := range prodZZ {
   120  		arg := a
   121  		testFunZZ(t, "MulZZ", MulZZ, arg)
   122  
   123  		arg = argZZ{a.z, a.y, a.x}
   124  		testFunZZ(t, "MulZZ symmetric", MulZZ, arg)
   125  	}
   126  }
   127  
   128  // mulBytes returns x*y via grade school multiplication. Both inputs
   129  // and the result are assumed to be in big-endian representation (to
   130  // match the semantics of Int.Bytes and Int.SetBytes).
   131  func mulBytes(x, y []byte) []byte {
   132  	z := make([]byte, len(x)+len(y))
   133  
   134  	// multiply
   135  	k0 := len(z) - 1
   136  	for j := len(y) - 1; j >= 0; j-- {
   137  		d := int(y[j])
   138  		if d != 0 {
   139  			k := k0
   140  			carry := 0
   141  			for i := len(x) - 1; i >= 0; i-- {
   142  				t := int(z[k]) + int(x[i])*d + carry
   143  				z[k], carry = byte(t), t>>8
   144  				k--
   145  			}
   146  			z[k] = byte(carry)
   147  		}
   148  		k0--
   149  	}
   150  
   151  	// normalize (remove leading 0's)
   152  	i := 0
   153  	for i < len(z) && z[i] == 0 {
   154  		i++
   155  	}
   156  
   157  	return z[i:]
   158  }
   159  
   160  func checkMul(a, b []byte) bool {
   161  	var x, y, z1 Int
   162  	x.SetBytes(a)
   163  	y.SetBytes(b)
   164  	z1.Mul(&x, &y)
   165  
   166  	var z2 Int
   167  	z2.SetBytes(mulBytes(a, b))
   168  
   169  	return z1.Cmp(&z2) == 0
   170  }
   171  
   172  func TestMul(t *testing.T) {
   173  	if err := quick.Check(checkMul, nil); err != nil {
   174  		t.Error(err)
   175  	}
   176  }
   177  
   178  var mulRangesZ = []struct {
   179  	a, b int64
   180  	prod string
   181  }{
   182  	// entirely positive ranges are covered by mulRangesN
   183  	{-1, 1, "0"},
   184  	{-2, -1, "2"},
   185  	{-3, -2, "6"},
   186  	{-3, -1, "-6"},
   187  	{1, 3, "6"},
   188  	{-10, -10, "-10"},
   189  	{0, -1, "1"},                      // empty range
   190  	{-1, -100, "1"},                   // empty range
   191  	{-1, 1, "0"},                      // range includes 0
   192  	{-1e9, 0, "0"},                    // range includes 0
   193  	{-1e9, 1e9, "0"},                  // range includes 0
   194  	{-10, -1, "3628800"},              // 10!
   195  	{-20, -2, "-2432902008176640000"}, // -20!
   196  	{-99, -1,
   197  		"-933262154439441526816992388562667004907159682643816214685929" +
   198  			"638952175999932299156089414639761565182862536979208272237582" +
   199  			"511852109168640000000000000000000000", // -99!
   200  	},
   201  }
   202  
   203  func TestMulRangeZ(t *testing.T) {
   204  	var tmp Int
   205  	// test entirely positive ranges
   206  	for i, r := range mulRangesN {
   207  		prod := tmp.MulRange(int64(r.a), int64(r.b)).String()
   208  		if prod != r.prod {
   209  			t.Errorf("#%da: got %s; want %s", i, prod, r.prod)
   210  		}
   211  	}
   212  	// test other ranges
   213  	for i, r := range mulRangesZ {
   214  		prod := tmp.MulRange(r.a, r.b).String()
   215  		if prod != r.prod {
   216  			t.Errorf("#%db: got %s; want %s", i, prod, r.prod)
   217  		}
   218  	}
   219  }
   220  
   221  func TestBinomial(t *testing.T) {
   222  	var z Int
   223  	for _, test := range []struct {
   224  		n, k int64
   225  		want string
   226  	}{
   227  		{0, 0, "1"},
   228  		{0, 1, "0"},
   229  		{1, 0, "1"},
   230  		{1, 1, "1"},
   231  		{1, 10, "0"},
   232  		{4, 0, "1"},
   233  		{4, 1, "4"},
   234  		{4, 2, "6"},
   235  		{4, 3, "4"},
   236  		{4, 4, "1"},
   237  		{10, 1, "10"},
   238  		{10, 9, "10"},
   239  		{10, 5, "252"},
   240  		{11, 5, "462"},
   241  		{11, 6, "462"},
   242  		{100, 10, "17310309456440"},
   243  		{100, 90, "17310309456440"},
   244  		{1000, 10, "263409560461970212832400"},
   245  		{1000, 990, "263409560461970212832400"},
   246  	} {
   247  		if got := z.Binomial(test.n, test.k).String(); got != test.want {
   248  			t.Errorf("Binomial(%d, %d) = %s; want %s", test.n, test.k, got, test.want)
   249  		}
   250  	}
   251  }
   252  
   253  func BenchmarkBinomial(b *testing.B) {
   254  	var z Int
   255  	for i := b.N - 1; i >= 0; i-- {
   256  		z.Binomial(1000, 990)
   257  	}
   258  }
   259  
   260  // Examples from the Go Language Spec, section "Arithmetic operators"
   261  var divisionSignsTests = []struct {
   262  	x, y int64
   263  	q, r int64 // T-division
   264  	d, m int64 // Euclidean division
   265  }{
   266  	{5, 3, 1, 2, 1, 2},
   267  	{-5, 3, -1, -2, -2, 1},
   268  	{5, -3, -1, 2, -1, 2},
   269  	{-5, -3, 1, -2, 2, 1},
   270  	{1, 2, 0, 1, 0, 1},
   271  	{8, 4, 2, 0, 2, 0},
   272  }
   273  
   274  func TestDivisionSigns(t *testing.T) {
   275  	for i, test := range divisionSignsTests {
   276  		x := NewInt(test.x)
   277  		y := NewInt(test.y)
   278  		q := NewInt(test.q)
   279  		r := NewInt(test.r)
   280  		d := NewInt(test.d)
   281  		m := NewInt(test.m)
   282  
   283  		q1 := new(Int).Quo(x, y)
   284  		r1 := new(Int).Rem(x, y)
   285  		if !isNormalized(q1) {
   286  			t.Errorf("#%d Quo: %v is not normalized", i, *q1)
   287  		}
   288  		if !isNormalized(r1) {
   289  			t.Errorf("#%d Rem: %v is not normalized", i, *r1)
   290  		}
   291  		if q1.Cmp(q) != 0 || r1.Cmp(r) != 0 {
   292  			t.Errorf("#%d QuoRem: got (%s, %s), want (%s, %s)", i, q1, r1, q, r)
   293  		}
   294  
   295  		q2, r2 := new(Int).QuoRem(x, y, new(Int))
   296  		if !isNormalized(q2) {
   297  			t.Errorf("#%d Quo: %v is not normalized", i, *q2)
   298  		}
   299  		if !isNormalized(r2) {
   300  			t.Errorf("#%d Rem: %v is not normalized", i, *r2)
   301  		}
   302  		if q2.Cmp(q) != 0 || r2.Cmp(r) != 0 {
   303  			t.Errorf("#%d QuoRem: got (%s, %s), want (%s, %s)", i, q2, r2, q, r)
   304  		}
   305  
   306  		d1 := new(Int).Div(x, y)
   307  		m1 := new(Int).Mod(x, y)
   308  		if !isNormalized(d1) {
   309  			t.Errorf("#%d Div: %v is not normalized", i, *d1)
   310  		}
   311  		if !isNormalized(m1) {
   312  			t.Errorf("#%d Mod: %v is not normalized", i, *m1)
   313  		}
   314  		if d1.Cmp(d) != 0 || m1.Cmp(m) != 0 {
   315  			t.Errorf("#%d DivMod: got (%s, %s), want (%s, %s)", i, d1, m1, d, m)
   316  		}
   317  
   318  		d2, m2 := new(Int).DivMod(x, y, new(Int))
   319  		if !isNormalized(d2) {
   320  			t.Errorf("#%d Div: %v is not normalized", i, *d2)
   321  		}
   322  		if !isNormalized(m2) {
   323  			t.Errorf("#%d Mod: %v is not normalized", i, *m2)
   324  		}
   325  		if d2.Cmp(d) != 0 || m2.Cmp(m) != 0 {
   326  			t.Errorf("#%d DivMod: got (%s, %s), want (%s, %s)", i, d2, m2, d, m)
   327  		}
   328  	}
   329  }
   330  
   331  func norm(x nat) nat {
   332  	i := len(x)
   333  	for i > 0 && x[i-1] == 0 {
   334  		i--
   335  	}
   336  	return x[:i]
   337  }
   338  
   339  func TestBits(t *testing.T) {
   340  	for _, test := range []nat{
   341  		nil,
   342  		{0},
   343  		{1},
   344  		{0, 1, 2, 3, 4},
   345  		{4, 3, 2, 1, 0},
   346  		{4, 3, 2, 1, 0, 0, 0, 0},
   347  	} {
   348  		var z Int
   349  		z.neg = true
   350  		got := z.SetBits(test)
   351  		want := norm(test)
   352  		if got.abs.cmp(want) != 0 {
   353  			t.Errorf("SetBits(%v) = %v; want %v", test, got.abs, want)
   354  		}
   355  
   356  		if got.neg {
   357  			t.Errorf("SetBits(%v): got negative result", test)
   358  		}
   359  
   360  		bits := nat(z.Bits())
   361  		if bits.cmp(want) != 0 {
   362  			t.Errorf("%v.Bits() = %v; want %v", z.abs, bits, want)
   363  		}
   364  	}
   365  }
   366  
   367  func checkSetBytes(b []byte) bool {
   368  	hex1 := hex.EncodeToString(new(Int).SetBytes(b).Bytes())
   369  	hex2 := hex.EncodeToString(b)
   370  
   371  	for len(hex1) < len(hex2) {
   372  		hex1 = "0" + hex1
   373  	}
   374  
   375  	for len(hex1) > len(hex2) {
   376  		hex2 = "0" + hex2
   377  	}
   378  
   379  	return hex1 == hex2
   380  }
   381  
   382  func TestSetBytes(t *testing.T) {
   383  	if err := quick.Check(checkSetBytes, nil); err != nil {
   384  		t.Error(err)
   385  	}
   386  }
   387  
   388  func checkBytes(b []byte) bool {
   389  	// trim leading zero bytes since Bytes() won't return them
   390  	// (was issue 12231)
   391  	for len(b) > 0 && b[0] == 0 {
   392  		b = b[1:]
   393  	}
   394  	b2 := new(Int).SetBytes(b).Bytes()
   395  	return bytes.Equal(b, b2)
   396  }
   397  
   398  func TestBytes(t *testing.T) {
   399  	if err := quick.Check(checkBytes, nil); err != nil {
   400  		t.Error(err)
   401  	}
   402  }
   403  
   404  func checkQuo(x, y []byte) bool {
   405  	u := new(Int).SetBytes(x)
   406  	v := new(Int).SetBytes(y)
   407  
   408  	if len(v.abs) == 0 {
   409  		return true
   410  	}
   411  
   412  	r := new(Int)
   413  	q, r := new(Int).QuoRem(u, v, r)
   414  
   415  	if r.Cmp(v) >= 0 {
   416  		return false
   417  	}
   418  
   419  	uprime := new(Int).Set(q)
   420  	uprime.Mul(uprime, v)
   421  	uprime.Add(uprime, r)
   422  
   423  	return uprime.Cmp(u) == 0
   424  }
   425  
   426  var quoTests = []struct {
   427  	x, y string
   428  	q, r string
   429  }{
   430  	{
   431  		"476217953993950760840509444250624797097991362735329973741718102894495832294430498335824897858659711275234906400899559094370964723884706254265559534144986498357",
   432  		"9353930466774385905609975137998169297361893554149986716853295022578535724979483772383667534691121982974895531435241089241440253066816724367338287092081996",
   433  		"50911",
   434  		"1",
   435  	},
   436  	{
   437  		"11510768301994997771168",
   438  		"1328165573307167369775",
   439  		"8",
   440  		"885443715537658812968",
   441  	},
   442  }
   443  
   444  func TestQuo(t *testing.T) {
   445  	if err := quick.Check(checkQuo, nil); err != nil {
   446  		t.Error(err)
   447  	}
   448  
   449  	for i, test := range quoTests {
   450  		x, _ := new(Int).SetString(test.x, 10)
   451  		y, _ := new(Int).SetString(test.y, 10)
   452  		expectedQ, _ := new(Int).SetString(test.q, 10)
   453  		expectedR, _ := new(Int).SetString(test.r, 10)
   454  
   455  		r := new(Int)
   456  		q, r := new(Int).QuoRem(x, y, r)
   457  
   458  		if q.Cmp(expectedQ) != 0 || r.Cmp(expectedR) != 0 {
   459  			t.Errorf("#%d got (%s, %s) want (%s, %s)", i, q, r, expectedQ, expectedR)
   460  		}
   461  	}
   462  }
   463  
   464  func TestQuoStepD6(t *testing.T) {
   465  	// See Knuth, Volume 2, section 4.3.1, exercise 21. This code exercises
   466  	// a code path which only triggers 1 in 10^{-19} cases.
   467  
   468  	u := &Int{false, nat{0, 0, 1 + 1<<(_W-1), _M ^ (1 << (_W - 1))}}
   469  	v := &Int{false, nat{5, 2 + 1<<(_W-1), 1 << (_W - 1)}}
   470  
   471  	r := new(Int)
   472  	q, r := new(Int).QuoRem(u, v, r)
   473  	const expectedQ64 = "18446744073709551613"
   474  	const expectedR64 = "3138550867693340382088035895064302439801311770021610913807"
   475  	const expectedQ32 = "4294967293"
   476  	const expectedR32 = "39614081266355540837921718287"
   477  	if q.String() != expectedQ64 && q.String() != expectedQ32 ||
   478  		r.String() != expectedR64 && r.String() != expectedR32 {
   479  		t.Errorf("got (%s, %s) want (%s, %s) or (%s, %s)", q, r, expectedQ64, expectedR64, expectedQ32, expectedR32)
   480  	}
   481  }
   482  
   483  func BenchmarkQuoRem(b *testing.B) {
   484  	x, _ := new(Int).SetString("153980389784927331788354528594524332344709972855165340650588877572729725338415474372475094155672066328274535240275856844648695200875763869073572078279316458648124537905600131008790701752441155668003033945258023841165089852359980273279085783159654751552359397986180318708491098942831252291841441726305535546071", 0)
   485  	y, _ := new(Int).SetString("7746362281539803897849273317883545285945243323447099728551653406505888775727297253384154743724750941556720663282745352402758568446486952008757638690735720782793164586481245379056001310087907017524411556680030339452580238411650898523599802732790857831596547515523593979861803187084910989428312522918414417263055355460715745539358014631136245887418412633787074173796862711588221766398229333338511838891484974940633857861775630560092874987828057333663969469797013996401149696897591265769095952887917296740109742927689053276850469671231961384715398038978492733178835452859452433234470997285516534065058887757272972533841547437247509415567206632827453524027585684464869520087576386907357207827931645864812453790560013100879070175244115566800303394525802384116508985235998027327908578315965475155235939798618031870849109894283125229184144172630553554607112725169432413343763989564437170644270643461665184965150423819594083121075825", 0)
   486  	q := new(Int)
   487  	r := new(Int)
   488  
   489  	b.ResetTimer()
   490  	for i := 0; i < b.N; i++ {
   491  		q.QuoRem(y, x, r)
   492  	}
   493  }
   494  
   495  var bitLenTests = []struct {
   496  	in  string
   497  	out int
   498  }{
   499  	{"-1", 1},
   500  	{"0", 0},
   501  	{"1", 1},
   502  	{"2", 2},
   503  	{"4", 3},
   504  	{"0xabc", 12},
   505  	{"0x8000", 16},
   506  	{"0x80000000", 32},
   507  	{"0x800000000000", 48},
   508  	{"0x8000000000000000", 64},
   509  	{"0x80000000000000000000", 80},
   510  	{"-0x4000000000000000000000", 87},
   511  }
   512  
   513  func TestBitLen(t *testing.T) {
   514  	for i, test := range bitLenTests {
   515  		x, ok := new(Int).SetString(test.in, 0)
   516  		if !ok {
   517  			t.Errorf("#%d test input invalid: %s", i, test.in)
   518  			continue
   519  		}
   520  
   521  		if n := x.BitLen(); n != test.out {
   522  			t.Errorf("#%d got %d want %d", i, n, test.out)
   523  		}
   524  	}
   525  }
   526  
   527  var expTests = []struct {
   528  	x, y, m string
   529  	out     string
   530  }{
   531  	// y <= 0
   532  	{"0", "0", "", "1"},
   533  	{"1", "0", "", "1"},
   534  	{"-10", "0", "", "1"},
   535  	{"1234", "-1", "", "1"},
   536  
   537  	// m == 1
   538  	{"0", "0", "1", "0"},
   539  	{"1", "0", "1", "0"},
   540  	{"-10", "0", "1", "0"},
   541  	{"1234", "-1", "1", "0"},
   542  
   543  	// misc
   544  	{"5", "1", "3", "2"},
   545  	{"5", "-7", "", "1"},
   546  	{"-5", "-7", "", "1"},
   547  	{"5", "0", "", "1"},
   548  	{"-5", "0", "", "1"},
   549  	{"5", "1", "", "5"},
   550  	{"-5", "1", "", "-5"},
   551  	{"-5", "1", "7", "2"},
   552  	{"-2", "3", "2", "0"},
   553  	{"5", "2", "", "25"},
   554  	{"1", "65537", "2", "1"},
   555  	{"0x8000000000000000", "2", "", "0x40000000000000000000000000000000"},
   556  	{"0x8000000000000000", "2", "6719", "4944"},
   557  	{"0x8000000000000000", "3", "6719", "5447"},
   558  	{"0x8000000000000000", "1000", "6719", "1603"},
   559  	{"0x8000000000000000", "1000000", "6719", "3199"},
   560  	{"0x8000000000000000", "-1000000", "6719", "1"},
   561  
   562  	{"0xffffffffffffffffffffffffffffffff", "0x12345678123456781234567812345678123456789", "0x01112222333344445555666677778889", "0x36168FA1DB3AAE6C8CE647E137F97A"},
   563  
   564  	{
   565  		"2938462938472983472983659726349017249287491026512746239764525612965293865296239471239874193284792387498274256129746192347",
   566  		"298472983472983471903246121093472394872319615612417471234712061",
   567  		"29834729834729834729347290846729561262544958723956495615629569234729836259263598127342374289365912465901365498236492183464",
   568  		"23537740700184054162508175125554701713153216681790245129157191391322321508055833908509185839069455749219131480588829346291",
   569  	},
   570  	// test case for issue 8822
   571  	{
   572  		"11001289118363089646017359372117963499250546375269047542777928006103246876688756735760905680604646624353196869572752623285140408755420374049317646428185270079555372763503115646054602867593662923894140940837479507194934267532831694565516466765025434902348314525627418515646588160955862839022051353653052947073136084780742729727874803457643848197499548297570026926927502505634297079527299004267769780768565695459945235586892627059178884998772989397505061206395455591503771677500931269477503508150175717121828518985901959919560700853226255420793148986854391552859459511723547532575574664944815966793196961286234040892865",
   573  		"0xB08FFB20760FFED58FADA86DFEF71AD72AA0FA763219618FE022C197E54708BB1191C66470250FCE8879487507CEE41381CA4D932F81C2B3F1AB20B539D50DCD",
   574  		"0xAC6BDB41324A9A9BF166DE5E1389582FAF72B6651987EE07FC3192943DB56050A37329CBB4A099ED8193E0757767A13DD52312AB4B03310DCD7F48A9DA04FD50E8083969EDB767B0CF6095179A163AB3661A05FBD5FAAAE82918A9962F0B93B855F97993EC975EEAA80D740ADBF4FF747359D041D5C33EA71D281E446B14773BCA97B43A23FB801676BD207A436C6481F1D2B9078717461A5B9D32E688F87748544523B524B0D57D5EA77A2775D2ECFA032CFBDBF52FB3786160279004E57AE6AF874E7303CE53299CCC041C7BC308D82A5698F3A8D0C38271AE35F8E9DBFBB694B5C803D89F7AE435DE236D525F54759B65E372FCD68EF20FA7111F9E4AFF73",
   575  		"21484252197776302499639938883777710321993113097987201050501182909581359357618579566746556372589385361683610524730509041328855066514963385522570894839035884713051640171474186548713546686476761306436434146475140156284389181808675016576845833340494848283681088886584219750554408060556769486628029028720727393293111678826356480455433909233520504112074401376133077150471237549474149190242010469539006449596611576612573955754349042329130631128234637924786466585703488460540228477440853493392086251021228087076124706778899179648655221663765993962724699135217212118535057766739392069738618682722216712319320435674779146070442",
   576  	},
   577  	{
   578  		"-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
   579  		"0xB08FFB20760FFED58FADA86DFEF71AD72AA0FA763219618FE022C197E54708BB1191C66470250FCE8879487507CEE41381CA4D932F81C2B3F1AB20B539D50DCD",
   580  		"0xAC6BDB41324A9A9BF166DE5E1389582FAF72B6651987EE07FC3192943DB56050A37329CBB4A099ED8193E0757767A13DD52312AB4B03310DCD7F48A9DA04FD50E8083969EDB767B0CF6095179A163AB3661A05FBD5FAAAE82918A9962F0B93B855F97993EC975EEAA80D740ADBF4FF747359D041D5C33EA71D281E446B14773BCA97B43A23FB801676BD207A436C6481F1D2B9078717461A5B9D32E688F87748544523B524B0D57D5EA77A2775D2ECFA032CFBDBF52FB3786160279004E57AE6AF874E7303CE53299CCC041C7BC308D82A5698F3A8D0C38271AE35F8E9DBFBB694B5C803D89F7AE435DE236D525F54759B65E372FCD68EF20FA7111F9E4AFF73",
   581  		"21484252197776302499639938883777710321993113097987201050501182909581359357618579566746556372589385361683610524730509041328855066514963385522570894839035884713051640171474186548713546686476761306436434146475140156284389181808675016576845833340494848283681088886584219750554408060556769486628029028720727393293111678826356480455433909233520504112074401376133077150471237549474149190242010469539006449596611576612573955754349042329130631128234637924786466585703488460540228477440853493392086251021228087076124706778899179648655221663765993962724699135217212118535057766739392069738618682722216712319320435674779146070442",
   582  	},
   583  
   584  	// test cases for issue 13907
   585  	{"0xffffffff00000001", "0xffffffff00000001", "0xffffffff00000001", "0"},
   586  	{"0xffffffffffffffff00000001", "0xffffffffffffffff00000001", "0xffffffffffffffff00000001", "0"},
   587  	{"0xffffffffffffffffffffffff00000001", "0xffffffffffffffffffffffff00000001", "0xffffffffffffffffffffffff00000001", "0"},
   588  	{"0xffffffffffffffffffffffffffffffff00000001", "0xffffffffffffffffffffffffffffffff00000001", "0xffffffffffffffffffffffffffffffff00000001", "0"},
   589  
   590  	{
   591  		"2",
   592  		"0xB08FFB20760FFED58FADA86DFEF71AD72AA0FA763219618FE022C197E54708BB1191C66470250FCE8879487507CEE41381CA4D932F81C2B3F1AB20B539D50DCD",
   593  		"0xAC6BDB41324A9A9BF166DE5E1389582FAF72B6651987EE07FC3192943DB56050A37329CBB4A099ED8193E0757767A13DD52312AB4B03310DCD7F48A9DA04FD50E8083969EDB767B0CF6095179A163AB3661A05FBD5FAAAE82918A9962F0B93B855F97993EC975EEAA80D740ADBF4FF747359D041D5C33EA71D281E446B14773BCA97B43A23FB801676BD207A436C6481F1D2B9078717461A5B9D32E688F87748544523B524B0D57D5EA77A2775D2ECFA032CFBDBF52FB3786160279004E57AE6AF874E7303CE53299CCC041C7BC308D82A5698F3A8D0C38271AE35F8E9DBFBB694B5C803D89F7AE435DE236D525F54759B65E372FCD68EF20FA7111F9E4AFF73", // odd
   594  		"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
   595  	},
   596  	{
   597  		"2",
   598  		"0xB08FFB20760FFED58FADA86DFEF71AD72AA0FA763219618FE022C197E54708BB1191C66470250FCE8879487507CEE41381CA4D932F81C2B3F1AB20B539D50DCD",
   599  		"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even
   600  		"0x7858794B5897C29F4ED0B40913416AB6C48588484E6A45F2ED3E26C941D878E923575AAC434EE2750E6439A6976F9BB4D64CEDB2A53CE8D04DD48CADCDF8E46F22747C6B81C6CEA86C0D873FBF7CEF262BAAC43A522BD7F32F3CDAC52B9337C77B3DCFB3DB3EDD80476331E82F4B1DF8EFDC1220C92656DFC9197BDC1877804E28D928A2A284B8DED506CBA304435C9D0133C246C98A7D890D1DE60CBC53A024361DA83A9B8775019083D22AC6820ED7C3C68F8E801DD4EC779EE0A05C6EB682EF9840D285B838369BA7E148FA27691D524FAEAF7C6ECE2A4B99A294B9F2C241857B5B90CC8BFFCFCF18DFA7D676131D5CD3855A5A3E8EBFA0CDFADB4D198B4A",
   601  	},
   602  }
   603  
   604  func TestExp(t *testing.T) {
   605  	for i, test := range expTests {
   606  		x, ok1 := new(Int).SetString(test.x, 0)
   607  		y, ok2 := new(Int).SetString(test.y, 0)
   608  		out, ok3 := new(Int).SetString(test.out, 0)
   609  
   610  		var ok4 bool
   611  		var m *Int
   612  
   613  		if len(test.m) == 0 {
   614  			m, ok4 = nil, true
   615  		} else {
   616  			m, ok4 = new(Int).SetString(test.m, 0)
   617  		}
   618  
   619  		if !ok1 || !ok2 || !ok3 || !ok4 {
   620  			t.Errorf("#%d: error in input", i)
   621  			continue
   622  		}
   623  
   624  		z1 := new(Int).Exp(x, y, m)
   625  		if !isNormalized(z1) {
   626  			t.Errorf("#%d: %v is not normalized", i, *z1)
   627  		}
   628  		if z1.Cmp(out) != 0 {
   629  			t.Errorf("#%d: got %x want %x", i, z1, out)
   630  		}
   631  
   632  		if m == nil {
   633  			// The result should be the same as for m == 0;
   634  			// specifically, there should be no div-zero panic.
   635  			m = &Int{abs: nat{}} // m != nil && len(m.abs) == 0
   636  			z2 := new(Int).Exp(x, y, m)
   637  			if z2.Cmp(z1) != 0 {
   638  				t.Errorf("#%d: got %x want %x", i, z2, z1)
   639  			}
   640  		}
   641  	}
   642  }
   643  
   644  func BenchmarkExp(b *testing.B) {
   645  	x, _ := new(Int).SetString("11001289118363089646017359372117963499250546375269047542777928006103246876688756735760905680604646624353196869572752623285140408755420374049317646428185270079555372763503115646054602867593662923894140940837479507194934267532831694565516466765025434902348314525627418515646588160955862839022051353653052947073136084780742729727874803457643848197499548297570026926927502505634297079527299004267769780768565695459945235586892627059178884998772989397505061206395455591503771677500931269477503508150175717121828518985901959919560700853226255420793148986854391552859459511723547532575574664944815966793196961286234040892865", 0)
   646  	y, _ := new(Int).SetString("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
   647  	n, _ := new(Int).SetString("0xAC6BDB41324A9A9BF166DE5E1389582FAF72B6651987EE07FC3192943DB56050A37329CBB4A099ED8193E0757767A13DD52312AB4B03310DCD7F48A9DA04FD50E8083969EDB767B0CF6095179A163AB3661A05FBD5FAAAE82918A9962F0B93B855F97993EC975EEAA80D740ADBF4FF747359D041D5C33EA71D281E446B14773BCA97B43A23FB801676BD207A436C6481F1D2B9078717461A5B9D32E688F87748544523B524B0D57D5EA77A2775D2ECFA032CFBDBF52FB3786160279004E57AE6AF874E7303CE53299CCC041C7BC308D82A5698F3A8D0C38271AE35F8E9DBFBB694B5C803D89F7AE435DE236D525F54759B65E372FCD68EF20FA7111F9E4AFF73", 0)
   648  	out := new(Int)
   649  	for i := 0; i < b.N; i++ {
   650  		out.Exp(x, y, n)
   651  	}
   652  }
   653  
   654  func BenchmarkExp2(b *testing.B) {
   655  	x, _ := new(Int).SetString("2", 0)
   656  	y, _ := new(Int).SetString("0xAC6BDB41324A9A9BF166DE5E1389582FAF72B6651987EE07FC3192943DB56050A37329CBB4A099ED8193E0757767A13DD52312AB4B03310DCD7F48A9DA04FD50E8083969EDB767B0CF6095179A163AB3661A05FBD5FAAAE82918A9962F0B93B855F97993EC975EEAA80D740ADBF4FF747359D041D5C33EA71D281E446B14773BCA97B43A23FB801676BD207A436C6481F1D2B9078717461A5B9D32E688F87748544523B524B0D57D5EA77A2775D2ECFA032CFBDBF52FB3786160279004E57AE6AF874E7303CE53299CCC041C7BC308D82A5698F3A8D0C38271AE35F8E9DBFBB694B5C803D89F7AE435DE236D525F54759B65E372FCD68EF20FA7111F9E4AFF72", 0)
   657  	n, _ := new(Int).SetString("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
   658  	out := new(Int)
   659  	for i := 0; i < b.N; i++ {
   660  		out.Exp(x, y, n)
   661  	}
   662  }
   663  
   664  func checkGcd(aBytes, bBytes []byte) bool {
   665  	x := new(Int)
   666  	y := new(Int)
   667  	a := new(Int).SetBytes(aBytes)
   668  	b := new(Int).SetBytes(bBytes)
   669  
   670  	d := new(Int).GCD(x, y, a, b)
   671  	x.Mul(x, a)
   672  	y.Mul(y, b)
   673  	x.Add(x, y)
   674  
   675  	return x.Cmp(d) == 0
   676  }
   677  
   678  // euclidGCD is a reference implementation of Euclid's GCD
   679  // algorithm for testing against optimized algorithms.
   680  // Requirements: a, b > 0
   681  func euclidGCD(a, b *Int) *Int {
   682  
   683  	A := new(Int).Set(a)
   684  	B := new(Int).Set(b)
   685  	t := new(Int)
   686  
   687  	for len(B.abs) > 0 {
   688  		// A, B = B, A % B
   689  		t.Rem(A, B)
   690  		A, B, t = B, t, A
   691  	}
   692  	return A
   693  }
   694  
   695  func checkLehmerGcd(aBytes, bBytes []byte) bool {
   696  	a := new(Int).SetBytes(aBytes)
   697  	b := new(Int).SetBytes(bBytes)
   698  
   699  	if a.Sign() <= 0 || b.Sign() <= 0 {
   700  		return true // can only test positive arguments
   701  	}
   702  
   703  	d := new(Int).lehmerGCD(a, b)
   704  	d0 := euclidGCD(a, b)
   705  
   706  	return d.Cmp(d0) == 0
   707  }
   708  
   709  var gcdTests = []struct {
   710  	d, x, y, a, b string
   711  }{
   712  	// a <= 0 || b <= 0
   713  	{"0", "0", "0", "0", "0"},
   714  	{"0", "0", "0", "0", "7"},
   715  	{"0", "0", "0", "11", "0"},
   716  	{"0", "0", "0", "-77", "35"},
   717  	{"0", "0", "0", "64515", "-24310"},
   718  	{"0", "0", "0", "-64515", "-24310"},
   719  
   720  	{"1", "-9", "47", "120", "23"},
   721  	{"7", "1", "-2", "77", "35"},
   722  	{"935", "-3", "8", "64515", "24310"},
   723  	{"935000000000000000", "-3", "8", "64515000000000000000", "24310000000000000000"},
   724  	{"1", "-221", "22059940471369027483332068679400581064239780177629666810348940098015901108344", "98920366548084643601728869055592650835572950932266967461790948584315647051443", "991"},
   725  
   726  	// test early exit (after one Euclidean iteration) in binaryGCD
   727  	{"1", "", "", "1", "98920366548084643601728869055592650835572950932266967461790948584315647051443"},
   728  }
   729  
   730  func testGcd(t *testing.T, d, x, y, a, b *Int) {
   731  	var X *Int
   732  	if x != nil {
   733  		X = new(Int)
   734  	}
   735  	var Y *Int
   736  	if y != nil {
   737  		Y = new(Int)
   738  	}
   739  
   740  	D := new(Int).GCD(X, Y, a, b)
   741  	if D.Cmp(d) != 0 {
   742  		t.Errorf("GCD(%s, %s, %s, %s): got d = %s, want %s", x, y, a, b, D, d)
   743  	}
   744  	if x != nil && X.Cmp(x) != 0 {
   745  		t.Errorf("GCD(%s, %s, %s, %s): got x = %s, want %s", x, y, a, b, X, x)
   746  	}
   747  	if y != nil && Y.Cmp(y) != 0 {
   748  		t.Errorf("GCD(%s, %s, %s, %s): got y = %s, want %s", x, y, a, b, Y, y)
   749  	}
   750  
   751  	// check results in presence of aliasing (issue #11284)
   752  	a2 := new(Int).Set(a)
   753  	b2 := new(Int).Set(b)
   754  	a2.GCD(X, Y, a2, b2) // result is same as 1st argument
   755  	if a2.Cmp(d) != 0 {
   756  		t.Errorf("aliased z = a GCD(%s, %s, %s, %s): got d = %s, want %s", x, y, a, b, a2, d)
   757  	}
   758  
   759  	a2 = new(Int).Set(a)
   760  	b2 = new(Int).Set(b)
   761  	b2.GCD(X, Y, a2, b2) // result is same as 2nd argument
   762  	if b2.Cmp(d) != 0 {
   763  		t.Errorf("aliased z = b GCD(%s, %s, %s, %s): got d = %s, want %s", x, y, a, b, b2, d)
   764  	}
   765  }
   766  
   767  func TestGcd(t *testing.T) {
   768  	for _, test := range gcdTests {
   769  		d, _ := new(Int).SetString(test.d, 0)
   770  		x, _ := new(Int).SetString(test.x, 0)
   771  		y, _ := new(Int).SetString(test.y, 0)
   772  		a, _ := new(Int).SetString(test.a, 0)
   773  		b, _ := new(Int).SetString(test.b, 0)
   774  
   775  		testGcd(t, d, nil, nil, a, b)
   776  		testGcd(t, d, x, nil, a, b)
   777  		testGcd(t, d, nil, y, a, b)
   778  		testGcd(t, d, x, y, a, b)
   779  	}
   780  
   781  	if err := quick.Check(checkGcd, nil); err != nil {
   782  		t.Error(err)
   783  	}
   784  
   785  	if err := quick.Check(checkLehmerGcd, nil); err != nil {
   786  		t.Error(err)
   787  	}
   788  }
   789  
   790  type intShiftTest struct {
   791  	in    string
   792  	shift uint
   793  	out   string
   794  }
   795  
   796  var rshTests = []intShiftTest{
   797  	{"0", 0, "0"},
   798  	{"-0", 0, "0"},
   799  	{"0", 1, "0"},
   800  	{"0", 2, "0"},
   801  	{"1", 0, "1"},
   802  	{"1", 1, "0"},
   803  	{"1", 2, "0"},
   804  	{"2", 0, "2"},
   805  	{"2", 1, "1"},
   806  	{"-1", 0, "-1"},
   807  	{"-1", 1, "-1"},
   808  	{"-1", 10, "-1"},
   809  	{"-100", 2, "-25"},
   810  	{"-100", 3, "-13"},
   811  	{"-100", 100, "-1"},
   812  	{"4294967296", 0, "4294967296"},
   813  	{"4294967296", 1, "2147483648"},
   814  	{"4294967296", 2, "1073741824"},
   815  	{"18446744073709551616", 0, "18446744073709551616"},
   816  	{"18446744073709551616", 1, "9223372036854775808"},
   817  	{"18446744073709551616", 2, "4611686018427387904"},
   818  	{"18446744073709551616", 64, "1"},
   819  	{"340282366920938463463374607431768211456", 64, "18446744073709551616"},
   820  	{"340282366920938463463374607431768211456", 128, "1"},
   821  }
   822  
   823  func TestRsh(t *testing.T) {
   824  	for i, test := range rshTests {
   825  		in, _ := new(Int).SetString(test.in, 10)
   826  		expected, _ := new(Int).SetString(test.out, 10)
   827  		out := new(Int).Rsh(in, test.shift)
   828  
   829  		if !isNormalized(out) {
   830  			t.Errorf("#%d: %v is not normalized", i, *out)
   831  		}
   832  		if out.Cmp(expected) != 0 {
   833  			t.Errorf("#%d: got %s want %s", i, out, expected)
   834  		}
   835  	}
   836  }
   837  
   838  func TestRshSelf(t *testing.T) {
   839  	for i, test := range rshTests {
   840  		z, _ := new(Int).SetString(test.in, 10)
   841  		expected, _ := new(Int).SetString(test.out, 10)
   842  		z.Rsh(z, test.shift)
   843  
   844  		if !isNormalized(z) {
   845  			t.Errorf("#%d: %v is not normalized", i, *z)
   846  		}
   847  		if z.Cmp(expected) != 0 {
   848  			t.Errorf("#%d: got %s want %s", i, z, expected)
   849  		}
   850  	}
   851  }
   852  
   853  var lshTests = []intShiftTest{
   854  	{"0", 0, "0"},
   855  	{"0", 1, "0"},
   856  	{"0", 2, "0"},
   857  	{"1", 0, "1"},
   858  	{"1", 1, "2"},
   859  	{"1", 2, "4"},
   860  	{"2", 0, "2"},
   861  	{"2", 1, "4"},
   862  	{"2", 2, "8"},
   863  	{"-87", 1, "-174"},
   864  	{"4294967296", 0, "4294967296"},
   865  	{"4294967296", 1, "8589934592"},
   866  	{"4294967296", 2, "17179869184"},
   867  	{"18446744073709551616", 0, "18446744073709551616"},
   868  	{"9223372036854775808", 1, "18446744073709551616"},
   869  	{"4611686018427387904", 2, "18446744073709551616"},
   870  	{"1", 64, "18446744073709551616"},
   871  	{"18446744073709551616", 64, "340282366920938463463374607431768211456"},
   872  	{"1", 128, "340282366920938463463374607431768211456"},
   873  }
   874  
   875  func TestLsh(t *testing.T) {
   876  	for i, test := range lshTests {
   877  		in, _ := new(Int).SetString(test.in, 10)
   878  		expected, _ := new(Int).SetString(test.out, 10)
   879  		out := new(Int).Lsh(in, test.shift)
   880  
   881  		if !isNormalized(out) {
   882  			t.Errorf("#%d: %v is not normalized", i, *out)
   883  		}
   884  		if out.Cmp(expected) != 0 {
   885  			t.Errorf("#%d: got %s want %s", i, out, expected)
   886  		}
   887  	}
   888  }
   889  
   890  func TestLshSelf(t *testing.T) {
   891  	for i, test := range lshTests {
   892  		z, _ := new(Int).SetString(test.in, 10)
   893  		expected, _ := new(Int).SetString(test.out, 10)
   894  		z.Lsh(z, test.shift)
   895  
   896  		if !isNormalized(z) {
   897  			t.Errorf("#%d: %v is not normalized", i, *z)
   898  		}
   899  		if z.Cmp(expected) != 0 {
   900  			t.Errorf("#%d: got %s want %s", i, z, expected)
   901  		}
   902  	}
   903  }
   904  
   905  func TestLshRsh(t *testing.T) {
   906  	for i, test := range rshTests {
   907  		in, _ := new(Int).SetString(test.in, 10)
   908  		out := new(Int).Lsh(in, test.shift)
   909  		out = out.Rsh(out, test.shift)
   910  
   911  		if !isNormalized(out) {
   912  			t.Errorf("#%d: %v is not normalized", i, *out)
   913  		}
   914  		if in.Cmp(out) != 0 {
   915  			t.Errorf("#%d: got %s want %s", i, out, in)
   916  		}
   917  	}
   918  	for i, test := range lshTests {
   919  		in, _ := new(Int).SetString(test.in, 10)
   920  		out := new(Int).Lsh(in, test.shift)
   921  		out.Rsh(out, test.shift)
   922  
   923  		if !isNormalized(out) {
   924  			t.Errorf("#%d: %v is not normalized", i, *out)
   925  		}
   926  		if in.Cmp(out) != 0 {
   927  			t.Errorf("#%d: got %s want %s", i, out, in)
   928  		}
   929  	}
   930  }
   931  
   932  // Entries must be sorted by value in ascending order.
   933  var cmpAbsTests = []string{
   934  	"0",
   935  	"1",
   936  	"2",
   937  	"10",
   938  	"10000000",
   939  	"2783678367462374683678456387645876387564783686583485",
   940  	"2783678367462374683678456387645876387564783686583486",
   941  	"32957394867987420967976567076075976570670947609750670956097509670576075067076027578341538",
   942  }
   943  
   944  func TestCmpAbs(t *testing.T) {
   945  	values := make([]*Int, len(cmpAbsTests))
   946  	var prev *Int
   947  	for i, s := range cmpAbsTests {
   948  		x, ok := new(Int).SetString(s, 0)
   949  		if !ok {
   950  			t.Fatalf("SetString(%s, 0) failed", s)
   951  		}
   952  		if prev != nil && prev.Cmp(x) >= 0 {
   953  			t.Fatal("cmpAbsTests entries not sorted in ascending order")
   954  		}
   955  		values[i] = x
   956  		prev = x
   957  	}
   958  
   959  	for i, x := range values {
   960  		for j, y := range values {
   961  			// try all combinations of signs for x, y
   962  			for k := 0; k < 4; k++ {
   963  				var a, b Int
   964  				a.Set(x)
   965  				b.Set(y)
   966  				if k&1 != 0 {
   967  					a.Neg(&a)
   968  				}
   969  				if k&2 != 0 {
   970  					b.Neg(&b)
   971  				}
   972  
   973  				got := a.CmpAbs(&b)
   974  				want := 0
   975  				switch {
   976  				case i > j:
   977  					want = 1
   978  				case i < j:
   979  					want = -1
   980  				}
   981  				if got != want {
   982  					t.Errorf("absCmp |%s|, |%s|: got %d; want %d", &a, &b, got, want)
   983  				}
   984  			}
   985  		}
   986  	}
   987  }
   988  
   989  var int64Tests = []string{
   990  	// int64
   991  	"0",
   992  	"1",
   993  	"-1",
   994  	"4294967295",
   995  	"-4294967295",
   996  	"4294967296",
   997  	"-4294967296",
   998  	"9223372036854775807",
   999  	"-9223372036854775807",
  1000  	"-9223372036854775808",
  1001  
  1002  	// not int64
  1003  	"0x8000000000000000",
  1004  	"-0x8000000000000001",
  1005  	"38579843757496759476987459679745",
  1006  	"-38579843757496759476987459679745",
  1007  }
  1008  
  1009  func TestInt64(t *testing.T) {
  1010  	for _, s := range int64Tests {
  1011  		var x Int
  1012  		_, ok := x.SetString(s, 0)
  1013  		if !ok {
  1014  			t.Errorf("SetString(%s, 0) failed", s)
  1015  			continue
  1016  		}
  1017  
  1018  		want, err := strconv.ParseInt(s, 0, 64)
  1019  		if err != nil {
  1020  			if err.(*strconv.NumError).Err == strconv.ErrRange {
  1021  				if x.IsInt64() {
  1022  					t.Errorf("IsInt64(%s) succeeded unexpectedly", s)
  1023  				}
  1024  			} else {
  1025  				t.Errorf("ParseInt(%s) failed", s)
  1026  			}
  1027  			continue
  1028  		}
  1029  
  1030  		if !x.IsInt64() {
  1031  			t.Errorf("IsInt64(%s) failed unexpectedly", s)
  1032  		}
  1033  
  1034  		got := x.Int64()
  1035  		if got != want {
  1036  			t.Errorf("Int64(%s) = %d; want %d", s, got, want)
  1037  		}
  1038  	}
  1039  }
  1040  
  1041  var uint64Tests = []string{
  1042  	// uint64
  1043  	"0",
  1044  	"1",
  1045  	"4294967295",
  1046  	"4294967296",
  1047  	"8589934591",
  1048  	"8589934592",
  1049  	"9223372036854775807",
  1050  	"9223372036854775808",
  1051  	"0x08000000000000000",
  1052  
  1053  	// not uint64
  1054  	"0x10000000000000000",
  1055  	"-0x08000000000000000",
  1056  	"-1",
  1057  }
  1058  
  1059  func TestUint64(t *testing.T) {
  1060  	for _, s := range uint64Tests {
  1061  		var x Int
  1062  		_, ok := x.SetString(s, 0)
  1063  		if !ok {
  1064  			t.Errorf("SetString(%s, 0) failed", s)
  1065  			continue
  1066  		}
  1067  
  1068  		want, err := strconv.ParseUint(s, 0, 64)
  1069  		if err != nil {
  1070  			// check for sign explicitly (ErrRange doesn't cover signed input)
  1071  			if s[0] == '-' || err.(*strconv.NumError).Err == strconv.ErrRange {
  1072  				if x.IsUint64() {
  1073  					t.Errorf("IsUint64(%s) succeeded unexpectedly", s)
  1074  				}
  1075  			} else {
  1076  				t.Errorf("ParseUint(%s) failed", s)
  1077  			}
  1078  			continue
  1079  		}
  1080  
  1081  		if !x.IsUint64() {
  1082  			t.Errorf("IsUint64(%s) failed unexpectedly", s)
  1083  		}
  1084  
  1085  		got := x.Uint64()
  1086  		if got != want {
  1087  			t.Errorf("Uint64(%s) = %d; want %d", s, got, want)
  1088  		}
  1089  	}
  1090  }
  1091  
  1092  var bitwiseTests = []struct {
  1093  	x, y                 string
  1094  	and, or, xor, andNot string
  1095  }{
  1096  	{"0x00", "0x00", "0x00", "0x00", "0x00", "0x00"},
  1097  	{"0x00", "0x01", "0x00", "0x01", "0x01", "0x00"},
  1098  	{"0x01", "0x00", "0x00", "0x01", "0x01", "0x01"},
  1099  	{"-0x01", "0x00", "0x00", "-0x01", "-0x01", "-0x01"},
  1100  	{"-0xaf", "-0x50", "-0xf0", "-0x0f", "0xe1", "0x41"},
  1101  	{"0x00", "-0x01", "0x00", "-0x01", "-0x01", "0x00"},
  1102  	{"0x01", "0x01", "0x01", "0x01", "0x00", "0x00"},
  1103  	{"-0x01", "-0x01", "-0x01", "-0x01", "0x00", "0x00"},
  1104  	{"0x07", "0x08", "0x00", "0x0f", "0x0f", "0x07"},
  1105  	{"0x05", "0x0f", "0x05", "0x0f", "0x0a", "0x00"},
  1106  	{"0xff", "-0x0a", "0xf6", "-0x01", "-0xf7", "0x09"},
  1107  	{"0x013ff6", "0x9a4e", "0x1a46", "0x01bffe", "0x01a5b8", "0x0125b0"},
  1108  	{"-0x013ff6", "0x9a4e", "0x800a", "-0x0125b2", "-0x01a5bc", "-0x01c000"},
  1109  	{"-0x013ff6", "-0x9a4e", "-0x01bffe", "-0x1a46", "0x01a5b8", "0x8008"},
  1110  	{
  1111  		"0x1000009dc6e3d9822cba04129bcbe3401",
  1112  		"0xb9bd7d543685789d57cb918e833af352559021483cdb05cc21fd",
  1113  		"0x1000001186210100001000009048c2001",
  1114  		"0xb9bd7d543685789d57cb918e8bfeff7fddb2ebe87dfbbdfe35fd",
  1115  		"0xb9bd7d543685789d57ca918e8ae69d6fcdb2eae87df2b97215fc",
  1116  		"0x8c40c2d8822caa04120b8321400",
  1117  	},
  1118  	{
  1119  		"0x1000009dc6e3d9822cba04129bcbe3401",
  1120  		"-0xb9bd7d543685789d57cb918e833af352559021483cdb05cc21fd",
  1121  		"0x8c40c2d8822caa04120b8321401",
  1122  		"-0xb9bd7d543685789d57ca918e82229142459020483cd2014001fd",
  1123  		"-0xb9bd7d543685789d57ca918e8ae69d6fcdb2eae87df2b97215fe",
  1124  		"0x1000001186210100001000009048c2000",
  1125  	},
  1126  	{
  1127  		"-0x1000009dc6e3d9822cba04129bcbe3401",
  1128  		"-0xb9bd7d543685789d57cb918e833af352559021483cdb05cc21fd",
  1129  		"-0xb9bd7d543685789d57cb918e8bfeff7fddb2ebe87dfbbdfe35fd",
  1130  		"-0x1000001186210100001000009048c2001",
  1131  		"0xb9bd7d543685789d57ca918e8ae69d6fcdb2eae87df2b97215fc",
  1132  		"0xb9bd7d543685789d57ca918e82229142459020483cd2014001fc",
  1133  	},
  1134  }
  1135  
  1136  type bitFun func(z, x, y *Int) *Int
  1137  
  1138  func testBitFun(t *testing.T, msg string, f bitFun, x, y *Int, exp string) {
  1139  	expected := new(Int)
  1140  	expected.SetString(exp, 0)
  1141  
  1142  	out := f(new(Int), x, y)
  1143  	if out.Cmp(expected) != 0 {
  1144  		t.Errorf("%s: got %s want %s", msg, out, expected)
  1145  	}
  1146  }
  1147  
  1148  func testBitFunSelf(t *testing.T, msg string, f bitFun, x, y *Int, exp string) {
  1149  	self := new(Int)
  1150  	self.Set(x)
  1151  	expected := new(Int)
  1152  	expected.SetString(exp, 0)
  1153  
  1154  	self = f(self, self, y)
  1155  	if self.Cmp(expected) != 0 {
  1156  		t.Errorf("%s: got %s want %s", msg, self, expected)
  1157  	}
  1158  }
  1159  
  1160  func altBit(x *Int, i int) uint {
  1161  	z := new(Int).Rsh(x, uint(i))
  1162  	z = z.And(z, NewInt(1))
  1163  	if z.Cmp(new(Int)) != 0 {
  1164  		return 1
  1165  	}
  1166  	return 0
  1167  }
  1168  
  1169  func altSetBit(z *Int, x *Int, i int, b uint) *Int {
  1170  	one := NewInt(1)
  1171  	m := one.Lsh(one, uint(i))
  1172  	switch b {
  1173  	case 1:
  1174  		return z.Or(x, m)
  1175  	case 0:
  1176  		return z.AndNot(x, m)
  1177  	}
  1178  	panic("set bit is not 0 or 1")
  1179  }
  1180  
  1181  func testBitset(t *testing.T, x *Int) {
  1182  	n := x.BitLen()
  1183  	z := new(Int).Set(x)
  1184  	z1 := new(Int).Set(x)
  1185  	for i := 0; i < n+10; i++ {
  1186  		old := z.Bit(i)
  1187  		old1 := altBit(z1, i)
  1188  		if old != old1 {
  1189  			t.Errorf("bitset: inconsistent value for Bit(%s, %d), got %v want %v", z1, i, old, old1)
  1190  		}
  1191  		z := new(Int).SetBit(z, i, 1)
  1192  		z1 := altSetBit(new(Int), z1, i, 1)
  1193  		if z.Bit(i) == 0 {
  1194  			t.Errorf("bitset: bit %d of %s got 0 want 1", i, x)
  1195  		}
  1196  		if z.Cmp(z1) != 0 {
  1197  			t.Errorf("bitset: inconsistent value after SetBit 1, got %s want %s", z, z1)
  1198  		}
  1199  		z.SetBit(z, i, 0)
  1200  		altSetBit(z1, z1, i, 0)
  1201  		if z.Bit(i) != 0 {
  1202  			t.Errorf("bitset: bit %d of %s got 1 want 0", i, x)
  1203  		}
  1204  		if z.Cmp(z1) != 0 {
  1205  			t.Errorf("bitset: inconsistent value after SetBit 0, got %s want %s", z, z1)
  1206  		}
  1207  		altSetBit(z1, z1, i, old)
  1208  		z.SetBit(z, i, old)
  1209  		if z.Cmp(z1) != 0 {
  1210  			t.Errorf("bitset: inconsistent value after SetBit old, got %s want %s", z, z1)
  1211  		}
  1212  	}
  1213  	if z.Cmp(x) != 0 {
  1214  		t.Errorf("bitset: got %s want %s", z, x)
  1215  	}
  1216  }
  1217  
  1218  var bitsetTests = []struct {
  1219  	x string
  1220  	i int
  1221  	b uint
  1222  }{
  1223  	{"0", 0, 0},
  1224  	{"0", 200, 0},
  1225  	{"1", 0, 1},
  1226  	{"1", 1, 0},
  1227  	{"-1", 0, 1},
  1228  	{"-1", 200, 1},
  1229  	{"0x2000000000000000000000000000", 108, 0},
  1230  	{"0x2000000000000000000000000000", 109, 1},
  1231  	{"0x2000000000000000000000000000", 110, 0},
  1232  	{"-0x2000000000000000000000000001", 108, 1},
  1233  	{"-0x2000000000000000000000000001", 109, 0},
  1234  	{"-0x2000000000000000000000000001", 110, 1},
  1235  }
  1236  
  1237  func TestBitSet(t *testing.T) {
  1238  	for _, test := range bitwiseTests {
  1239  		x := new(Int)
  1240  		x.SetString(test.x, 0)
  1241  		testBitset(t, x)
  1242  		x = new(Int)
  1243  		x.SetString(test.y, 0)
  1244  		testBitset(t, x)
  1245  	}
  1246  	for i, test := range bitsetTests {
  1247  		x := new(Int)
  1248  		x.SetString(test.x, 0)
  1249  		b := x.Bit(test.i)
  1250  		if b != test.b {
  1251  			t.Errorf("#%d got %v want %v", i, b, test.b)
  1252  		}
  1253  	}
  1254  	z := NewInt(1)
  1255  	z.SetBit(NewInt(0), 2, 1)
  1256  	if z.Cmp(NewInt(4)) != 0 {
  1257  		t.Errorf("destination leaked into result; got %s want 4", z)
  1258  	}
  1259  }
  1260  
  1261  func BenchmarkBitset(b *testing.B) {
  1262  	z := new(Int)
  1263  	z.SetBit(z, 512, 1)
  1264  	b.ResetTimer()
  1265  	b.StartTimer()
  1266  	for i := b.N - 1; i >= 0; i-- {
  1267  		z.SetBit(z, i&512, 1)
  1268  	}
  1269  }
  1270  
  1271  func BenchmarkBitsetNeg(b *testing.B) {
  1272  	z := NewInt(-1)
  1273  	z.SetBit(z, 512, 0)
  1274  	b.ResetTimer()
  1275  	b.StartTimer()
  1276  	for i := b.N - 1; i >= 0; i-- {
  1277  		z.SetBit(z, i&512, 0)
  1278  	}
  1279  }
  1280  
  1281  func BenchmarkBitsetOrig(b *testing.B) {
  1282  	z := new(Int)
  1283  	altSetBit(z, z, 512, 1)
  1284  	b.ResetTimer()
  1285  	b.StartTimer()
  1286  	for i := b.N - 1; i >= 0; i-- {
  1287  		altSetBit(z, z, i&512, 1)
  1288  	}
  1289  }
  1290  
  1291  func BenchmarkBitsetNegOrig(b *testing.B) {
  1292  	z := NewInt(-1)
  1293  	altSetBit(z, z, 512, 0)
  1294  	b.ResetTimer()
  1295  	b.StartTimer()
  1296  	for i := b.N - 1; i >= 0; i-- {
  1297  		altSetBit(z, z, i&512, 0)
  1298  	}
  1299  }
  1300  
  1301  // tri generates the trinomial 2**(n*2) - 2**n - 1, which is always 3 mod 4 and
  1302  // 7 mod 8, so that 2 is always a quadratic residue.
  1303  func tri(n uint) *Int {
  1304  	x := NewInt(1)
  1305  	x.Lsh(x, n)
  1306  	x2 := new(Int).Lsh(x, n)
  1307  	x2.Sub(x2, x)
  1308  	x2.Sub(x2, intOne)
  1309  	return x2
  1310  }
  1311  
  1312  func BenchmarkModSqrt225_Tonelli(b *testing.B) {
  1313  	p := tri(225)
  1314  	x := NewInt(2)
  1315  	for i := 0; i < b.N; i++ {
  1316  		x.SetUint64(2)
  1317  		x.modSqrtTonelliShanks(x, p)
  1318  	}
  1319  }
  1320  
  1321  func BenchmarkModSqrt224_3Mod4(b *testing.B) {
  1322  	p := tri(225)
  1323  	x := new(Int).SetUint64(2)
  1324  	for i := 0; i < b.N; i++ {
  1325  		x.SetUint64(2)
  1326  		x.modSqrt3Mod4Prime(x, p)
  1327  	}
  1328  }
  1329  
  1330  func BenchmarkModSqrt5430_Tonelli(b *testing.B) {
  1331  	if isRaceBuilder {
  1332  		b.Skip("skipping on race builder")
  1333  	}
  1334  	p := tri(5430)
  1335  	x := new(Int).SetUint64(2)
  1336  	for i := 0; i < b.N; i++ {
  1337  		x.SetUint64(2)
  1338  		x.modSqrtTonelliShanks(x, p)
  1339  	}
  1340  }
  1341  
  1342  func BenchmarkModSqrt5430_3Mod4(b *testing.B) {
  1343  	if isRaceBuilder {
  1344  		b.Skip("skipping on race builder")
  1345  	}
  1346  	p := tri(5430)
  1347  	x := new(Int).SetUint64(2)
  1348  	for i := 0; i < b.N; i++ {
  1349  		x.SetUint64(2)
  1350  		x.modSqrt3Mod4Prime(x, p)
  1351  	}
  1352  }
  1353  
  1354  func TestBitwise(t *testing.T) {
  1355  	x := new(Int)
  1356  	y := new(Int)
  1357  	for _, test := range bitwiseTests {
  1358  		x.SetString(test.x, 0)
  1359  		y.SetString(test.y, 0)
  1360  
  1361  		testBitFun(t, "and", (*Int).And, x, y, test.and)
  1362  		testBitFunSelf(t, "and", (*Int).And, x, y, test.and)
  1363  		testBitFun(t, "andNot", (*Int).AndNot, x, y, test.andNot)
  1364  		testBitFunSelf(t, "andNot", (*Int).AndNot, x, y, test.andNot)
  1365  		testBitFun(t, "or", (*Int).Or, x, y, test.or)
  1366  		testBitFunSelf(t, "or", (*Int).Or, x, y, test.or)
  1367  		testBitFun(t, "xor", (*Int).Xor, x, y, test.xor)
  1368  		testBitFunSelf(t, "xor", (*Int).Xor, x, y, test.xor)
  1369  	}
  1370  }
  1371  
  1372  var notTests = []struct {
  1373  	in  string
  1374  	out string
  1375  }{
  1376  	{"0", "-1"},
  1377  	{"1", "-2"},
  1378  	{"7", "-8"},
  1379  	{"0", "-1"},
  1380  	{"-81910", "81909"},
  1381  	{
  1382  		"298472983472983471903246121093472394872319615612417471234712061",
  1383  		"-298472983472983471903246121093472394872319615612417471234712062",
  1384  	},
  1385  }
  1386  
  1387  func TestNot(t *testing.T) {
  1388  	in := new(Int)
  1389  	out := new(Int)
  1390  	expected := new(Int)
  1391  	for i, test := range notTests {
  1392  		in.SetString(test.in, 10)
  1393  		expected.SetString(test.out, 10)
  1394  		out = out.Not(in)
  1395  		if out.Cmp(expected) != 0 {
  1396  			t.Errorf("#%d: got %s want %s", i, out, expected)
  1397  		}
  1398  		out = out.Not(out)
  1399  		if out.Cmp(in) != 0 {
  1400  			t.Errorf("#%d: got %s want %s", i, out, in)
  1401  		}
  1402  	}
  1403  }
  1404  
  1405  var modInverseTests = []struct {
  1406  	element string
  1407  	modulus string
  1408  }{
  1409  	{"1234567", "458948883992"},
  1410  	{"239487239847", "2410312426921032588552076022197566074856950548502459942654116941958108831682612228890093858261341614673227141477904012196503648957050582631942730706805009223062734745341073406696246014589361659774041027169249453200378729434170325843778659198143763193776859869524088940195577346119843545301547043747207749969763750084308926339295559968882457872412993810129130294592999947926365264059284647209730384947211681434464714438488520940127459844288859336526896320919633919"},
  1411  	{"-10", "13"}, // issue #16984
  1412  }
  1413  
  1414  func TestModInverse(t *testing.T) {
  1415  	var element, modulus, gcd, inverse Int
  1416  	one := NewInt(1)
  1417  	for i, test := range modInverseTests {
  1418  		(&element).SetString(test.element, 10)
  1419  		(&modulus).SetString(test.modulus, 10)
  1420  		(&inverse).ModInverse(&element, &modulus)
  1421  		(&inverse).Mul(&inverse, &element)
  1422  		(&inverse).Mod(&inverse, &modulus)
  1423  		if (&inverse).Cmp(one) != 0 {
  1424  			t.Errorf("#%d: failed (e·e^(-1)=%s)", i, &inverse)
  1425  		}
  1426  	}
  1427  	// exhaustive test for small values
  1428  	for n := 2; n < 100; n++ {
  1429  		(&modulus).SetInt64(int64(n))
  1430  		for x := 1; x < n; x++ {
  1431  			(&element).SetInt64(int64(x))
  1432  			(&gcd).GCD(nil, nil, &element, &modulus)
  1433  			if (&gcd).Cmp(one) != 0 {
  1434  				continue
  1435  			}
  1436  			(&inverse).ModInverse(&element, &modulus)
  1437  			(&inverse).Mul(&inverse, &element)
  1438  			(&inverse).Mod(&inverse, &modulus)
  1439  			if (&inverse).Cmp(one) != 0 {
  1440  				t.Errorf("ModInverse(%d,%d)*%d%%%d=%d, not 1", &element, &modulus, &element, &modulus, &inverse)
  1441  			}
  1442  		}
  1443  	}
  1444  }
  1445  
  1446  // testModSqrt is a helper for TestModSqrt,
  1447  // which checks that ModSqrt can compute a square-root of elt^2.
  1448  func testModSqrt(t *testing.T, elt, mod, sq, sqrt *Int) bool {
  1449  	var sqChk, sqrtChk, sqrtsq Int
  1450  	sq.Mul(elt, elt)
  1451  	sq.Mod(sq, mod)
  1452  	z := sqrt.ModSqrt(sq, mod)
  1453  	if z != sqrt {
  1454  		t.Errorf("ModSqrt returned wrong value %s", z)
  1455  	}
  1456  
  1457  	// test ModSqrt arguments outside the range [0,mod)
  1458  	sqChk.Add(sq, mod)
  1459  	z = sqrtChk.ModSqrt(&sqChk, mod)
  1460  	if z != &sqrtChk || z.Cmp(sqrt) != 0 {
  1461  		t.Errorf("ModSqrt returned inconsistent value %s", z)
  1462  	}
  1463  	sqChk.Sub(sq, mod)
  1464  	z = sqrtChk.ModSqrt(&sqChk, mod)
  1465  	if z != &sqrtChk || z.Cmp(sqrt) != 0 {
  1466  		t.Errorf("ModSqrt returned inconsistent value %s", z)
  1467  	}
  1468  
  1469  	// test x aliasing z
  1470  	z = sqrtChk.ModSqrt(sqrtChk.Set(sq), mod)
  1471  	if z != &sqrtChk || z.Cmp(sqrt) != 0 {
  1472  		t.Errorf("ModSqrt returned inconsistent value %s", z)
  1473  	}
  1474  
  1475  	// make sure we actually got a square root
  1476  	if sqrt.Cmp(elt) == 0 {
  1477  		return true // we found the "desired" square root
  1478  	}
  1479  	sqrtsq.Mul(sqrt, sqrt) // make sure we found the "other" one
  1480  	sqrtsq.Mod(&sqrtsq, mod)
  1481  	return sq.Cmp(&sqrtsq) == 0
  1482  }
  1483  
  1484  func TestModSqrt(t *testing.T) {
  1485  	var elt, mod, modx4, sq, sqrt Int
  1486  	r := rand.New(rand.NewSource(9))
  1487  	for i, s := range primes[1:] { // skip 2, use only odd primes
  1488  		mod.SetString(s, 10)
  1489  		modx4.Lsh(&mod, 2)
  1490  
  1491  		// test a few random elements per prime
  1492  		for x := 1; x < 5; x++ {
  1493  			elt.Rand(r, &modx4)
  1494  			elt.Sub(&elt, &mod) // test range [-mod, 3*mod)
  1495  			if !testModSqrt(t, &elt, &mod, &sq, &sqrt) {
  1496  				t.Errorf("#%d: failed (sqrt(e) = %s)", i, &sqrt)
  1497  			}
  1498  		}
  1499  
  1500  		if testing.Short() && i > 2 {
  1501  			break
  1502  		}
  1503  	}
  1504  
  1505  	if testing.Short() {
  1506  		return
  1507  	}
  1508  
  1509  	// exhaustive test for small values
  1510  	for n := 3; n < 100; n++ {
  1511  		mod.SetInt64(int64(n))
  1512  		if !mod.ProbablyPrime(10) {
  1513  			continue
  1514  		}
  1515  		isSquare := make([]bool, n)
  1516  
  1517  		// test all the squares
  1518  		for x := 1; x < n; x++ {
  1519  			elt.SetInt64(int64(x))
  1520  			if !testModSqrt(t, &elt, &mod, &sq, &sqrt) {
  1521  				t.Errorf("#%d: failed (sqrt(%d,%d) = %s)", x, &elt, &mod, &sqrt)
  1522  			}
  1523  			isSquare[sq.Uint64()] = true
  1524  		}
  1525  
  1526  		// test all non-squares
  1527  		for x := 1; x < n; x++ {
  1528  			sq.SetInt64(int64(x))
  1529  			z := sqrt.ModSqrt(&sq, &mod)
  1530  			if !isSquare[x] && z != nil {
  1531  				t.Errorf("#%d: failed (sqrt(%d,%d) = nil)", x, &sqrt, &mod)
  1532  			}
  1533  		}
  1534  	}
  1535  }
  1536  
  1537  func TestJacobi(t *testing.T) {
  1538  	testCases := []struct {
  1539  		x, y   int64
  1540  		result int
  1541  	}{
  1542  		{0, 1, 1},
  1543  		{0, -1, 1},
  1544  		{1, 1, 1},
  1545  		{1, -1, 1},
  1546  		{0, 5, 0},
  1547  		{1, 5, 1},
  1548  		{2, 5, -1},
  1549  		{-2, 5, -1},
  1550  		{2, -5, -1},
  1551  		{-2, -5, 1},
  1552  		{3, 5, -1},
  1553  		{5, 5, 0},
  1554  		{-5, 5, 0},
  1555  		{6, 5, 1},
  1556  		{6, -5, 1},
  1557  		{-6, 5, 1},
  1558  		{-6, -5, -1},
  1559  	}
  1560  
  1561  	var x, y Int
  1562  
  1563  	for i, test := range testCases {
  1564  		x.SetInt64(test.x)
  1565  		y.SetInt64(test.y)
  1566  		expected := test.result
  1567  		actual := Jacobi(&x, &y)
  1568  		if actual != expected {
  1569  			t.Errorf("#%d: Jacobi(%d, %d) = %d, but expected %d", i, test.x, test.y, actual, expected)
  1570  		}
  1571  	}
  1572  }
  1573  
  1574  func TestJacobiPanic(t *testing.T) {
  1575  	const failureMsg = "test failure"
  1576  	defer func() {
  1577  		msg := recover()
  1578  		if msg == nil || msg == failureMsg {
  1579  			panic(msg)
  1580  		}
  1581  		t.Log(msg)
  1582  	}()
  1583  	x := NewInt(1)
  1584  	y := NewInt(2)
  1585  	// Jacobi should panic when the second argument is even.
  1586  	Jacobi(x, y)
  1587  	panic(failureMsg)
  1588  }
  1589  
  1590  func TestIssue2607(t *testing.T) {
  1591  	// This code sequence used to hang.
  1592  	n := NewInt(10)
  1593  	n.Rand(rand.New(rand.NewSource(9)), n)
  1594  }
  1595  
  1596  func TestSqrt(t *testing.T) {
  1597  	root := 0
  1598  	r := new(Int)
  1599  	for i := 0; i < 10000; i++ {
  1600  		if (root+1)*(root+1) <= i {
  1601  			root++
  1602  		}
  1603  		n := NewInt(int64(i))
  1604  		r.SetInt64(-2)
  1605  		r.Sqrt(n)
  1606  		if r.Cmp(NewInt(int64(root))) != 0 {
  1607  			t.Errorf("Sqrt(%v) = %v, want %v", n, r, root)
  1608  		}
  1609  	}
  1610  
  1611  	for i := 0; i < 1000; i += 10 {
  1612  		n, _ := new(Int).SetString("1"+strings.Repeat("0", i), 10)
  1613  		r := new(Int).Sqrt(n)
  1614  		root, _ := new(Int).SetString("1"+strings.Repeat("0", i/2), 10)
  1615  		if r.Cmp(root) != 0 {
  1616  			t.Errorf("Sqrt(1e%d) = %v, want 1e%d", i, r, i/2)
  1617  		}
  1618  	}
  1619  
  1620  	// Test aliasing.
  1621  	r.SetInt64(100)
  1622  	r.Sqrt(r)
  1623  	if r.Int64() != 10 {
  1624  		t.Errorf("Sqrt(100) = %v, want 10 (aliased output)", r.Int64())
  1625  	}
  1626  }
  1627  
  1628  // We can't test this together with the other Exp tests above because
  1629  // it requires a different receiver setup.
  1630  func TestIssue22830(t *testing.T) {
  1631  	one := new(Int).SetInt64(1)
  1632  	base, _ := new(Int).SetString("84555555300000000000", 10)
  1633  	mod, _ := new(Int).SetString("66666670001111111111", 10)
  1634  	want, _ := new(Int).SetString("17888885298888888889", 10)
  1635  
  1636  	var tests = []int64{
  1637  		0, 1, -1,
  1638  	}
  1639  
  1640  	for _, n := range tests {
  1641  		m := NewInt(n)
  1642  		if got := m.Exp(base, one, mod); got.Cmp(want) != 0 {
  1643  			t.Errorf("(%v).Exp(%s, 1, %s) = %s, want %s", n, base, mod, got, want)
  1644  		}
  1645  	}
  1646  }
  1647  
  1648  func BenchmarkSqrt(b *testing.B) {
  1649  	n, _ := new(Int).SetString("1"+strings.Repeat("0", 1001), 10)
  1650  	b.ResetTimer()
  1651  	t := new(Int)
  1652  	for i := 0; i < b.N; i++ {
  1653  		t.Sqrt(n)
  1654  	}
  1655  }
  1656  
  1657  func benchmarkIntSqr(b *testing.B, nwords int) {
  1658  	x := new(Int)
  1659  	x.abs = rndNat(nwords)
  1660  	t := new(Int)
  1661  	b.ResetTimer()
  1662  	for i := 0; i < b.N; i++ {
  1663  		t.Mul(x, x)
  1664  	}
  1665  }
  1666  
  1667  func BenchmarkIntSqr(b *testing.B) {
  1668  	for _, n := range sqrBenchSizes {
  1669  		if isRaceBuilder && n > 1e3 {
  1670  			continue
  1671  		}
  1672  		b.Run(fmt.Sprintf("%d", n), func(b *testing.B) {
  1673  			benchmarkIntSqr(b, n)
  1674  		})
  1675  	}
  1676  }