80dc164c7c
- Increase WINDOW_G from 8 to 12 for mulDoubleG (verify): reduces G-side additions from ~32 to ~22 per verification (saves ~110 field ops) - Add batchToAffine using Montgomery's trick: 1 inversion + 3(n-1) muls instead of n individual inversions. Critical for the 1024-entry table. - Table size: 1024 entries × 64 bytes = ~128KB (lazy, built on first use) https://claude.ai/code/session_01BhU63WUe9AhikZxRdw3Lpg