Tony Arcieri

I pushed up my woefully completed WIP here: https://github.com/RustCrypto/utils/pull/1243 Note that I described it as an experimental library that could help inform a potential `subtle` v3.

@danderson speaking for myself this sounds like an interesting idea, and also for the @RustCrypto crates, particularly `hybrid-array` (where we already support e.g. `bytemuck`)

Curious about https://doc.rust-lang.org/stable/core/num/struct.NonZero.html as well (might need an MSRV-preserving feature-gate)

@acrrd though the `ZeroablePrimitive` trait itself is unstable, there are impls for it for the core integer types already which are usable on stable Rust: https://doc.rust-lang.org/stable/core/num/trait.ZeroablePrimitive.html#implementors Quite a bit of...

FWIW I plan on refactoring those crates soon, and introducing `FieldElement` types which will hopefully make these more exotic use cases easier

cc @carl-wallace

Do you have a concrete code example of where `carrying_add` nee `adc`/`borrowing_sub` nee `sbb` aren't lowering to the relevant hardware intrinsics?

I'd be curious to look at the assembly if you have a code example. `carrying_add`/`add` and `borrowing_sub`/`sbb` are particularly useful on `Limb` as part of a carry chain, and in...

Supporting larger objects is a non-goal. `Length` used to constrain a maximum size specifically to avoid that, but we removed those constraints. The others are valid arguments against this change,...

Can you please open focused issues for specific problems, rather than trying to lump them all into one issue? It seems you are trying to discuss two separate things: 1....