Formalization and verification of a circuit for field doubling.
Given a field element x, its double y is obtained via a constraint of the form