1106   int64_t carry16;  in x25519_sc_reduce()  local
1171   carry16 = (s16 + (1 << 20)) >> 21;  in x25519_sc_reduce()
1172   s17 += carry16;  in x25519_sc_reduce()
1173   s16 -= int64_lshift21(carry16);  in x25519_sc_reduce()
1484   int64_t carry16;  in sc_muladd()  local
1550   carry16 = (s16 + (1 << 20)) >> 21;  in sc_muladd()
1551   s17 += carry16;  in sc_muladd()
1552   s16 -= int64_lshift21(carry16);  in sc_muladd()
1660   carry16 = (s16 + (1 << 20)) >> 21;  in sc_muladd()
1661   s17 += carry16;  in sc_muladd()
1662   s16 -= int64_lshift21(carry16);  in sc_muladd()