gfverif per se:

• computation.cpp: maintaining static computation graph
• computation.h
• crypto_uint8.h: wrapper around computation; designed to be replaceable with real uint8
• crypto_int32.h: wrapper around computation; designed to be replaceable with real int32
• crypto_int64.h: wrapper around computation; designed to be replaceable with real int64
• crypto_uint32.h: wrapper around computation; designed to be replaceable with real uint32
• crypto_uint64.h: wrapper around computation; designed to be replaceable with real uint64
• verifier.cpp: wrapper around computation; designed to be replaceable with no-ops
• verifier.h
• unroll: from auditable language to unrolled high-level language
• equal: comparing two unrolled high-level programs

A few small tests:

• Makefile
• test121666.cpp
• testadd.cpp
• testcswap.cpp
• testextract.cpp
• testload.cpp
• testmul.cpp
• teststore.cpp
• testsub.cpp

The 127 demo:

• 127frombytes.cpp
• 127mul.cpp
• 127mul2.cpp
• 127pow.cpp
• 127pow2.cpp
• 127pow3.cpp
• 127tobytes.cpp
• 127tobytes2.cpp

The ref10 experiment:

• fe.h: tweaked from ref10
• fe_0.cpp: tweaked from ref10
• fe_1.cpp: tweaked from ref10
• fe_add.cpp: tweaked from ref10
• fe_copy.cpp: tweaked from ref10
• fe_cswap.cpp: tweaked from ref10
• fe_frombytes.cpp: tweaked from ref10
• fe_mul121666.cpp: tweaked from ref10
• fe_mul.cpp: tweaked from ref10
• fe_sq.cpp: tweaked from ref10
• fe_sub.cpp: tweaked from ref10
• fe_tobytes.cpp: tweaked from ref10
• montgomery.cpp: scaled-down part of testsmult.cpp
• testsmult.cpp
• montaudit.in: human-auditable X25519 specification