source 2007 Hisil--Carter--Dawson
parameter b
assume 3 b d = 1
compute R0 = X1^2
compute X3 = R0 X1
compute R0 = Y1^2
compute Y3 = R0 Y1
compute R0 = Z1^2
compute Z3 = R0 Z1
compute R0 = X3-Y3
compute R0 = R0^2
compute R1 = X3-Z3
compute R1 = R1^2
compute R2 = Y3-Z3
compute R2 = R2^2
compute Z3 = Z3+X3
compute Z3 = Z3+Y3
compute Z3 = b Z3
compute R3 = R0+R2
compute R0 = R0+R1
compute R4 = R1+R3
compute Z3 = Z3 R4
compute R4 = R1-R3
compute R4 = R4 X3
compute R3 = R2-R0
compute R3 = Y3 R3
compute X3 = X3 R2
compute X3 = 2 X3
compute X3 = X3-R3
compute Y3 = Y3 R1
compute Y3 = 2 Y3
compute Y3 = Y3-R4