pub const FIELD_OP_SUB: u128 = 2; // 2u128
Subtract a - b mod p and restore output limb bounds.
a - b mod p