844   felem z1z1, z1z1z1, s2, u2, h, i, j, r, rr, v, tmp;  in point_add_mixed()  local
855   felem_mul(j, h, i);  in point_add_mixed()
862   felem_diff(x_out, rr, j);  in point_add_mixed()
868   felem_mul(tmp, y1, j);  in point_add_mixed()
882   felem z1z1, z1z1z1, z2z2, z2z2z2, s1, s2, u1, u2, h, i, j, r, rr, v, tmp;  in point_add()  local
902   felem_mul(j, h, i);  in point_add()
909   felem_diff(x_out, rr, j);  in point_add()
915   felem_mul(tmp, s1, j);  in point_add()
929   felem z1z1, z1z1z1, z2z2, z2z2z2, s1, s2, u1, u2, h, i, j, r, rr, v, tmp;  in point_add_or_double_vartime()  local
951   felem_mul(j, h, i);  in point_add_or_double_vartime()
963   felem_diff(x_out, rr, j);  in point_add_or_double_vartime()
969   felem_mul(tmp, s1, j);  in point_add_or_double_vartime()
990   limb i, j;  in select_affine_point()  local
1001     for (j = 0; j < NLIMBS; j++, table++) {  in select_affine_point()
1002       out_x[j] |= *table & mask;  in select_affine_point()
1004     for (j = 0; j < NLIMBS; j++, table++) {  in select_affine_point()
1005       out_y[j] |= *table & mask;  in select_affine_point()
1014   limb i, j;  in select_jacobian_point()  local
1031     for (j = 0; j < NLIMBS; j++, table++) {  in select_jacobian_point()
1032       out_x[j] |= *table & mask;  in select_jacobian_point()
1034     for (j = 0; j < NLIMBS; j++, table++) {  in select_jacobian_point()
1035       out_y[j] |= *table & mask;  in select_jacobian_point()
1037     for (j = 0; j < NLIMBS; j++, table++) {  in select_jacobian_point()
1038       out_z[j] |= *table & mask;  in select_jacobian_point()
1048   int i, j;  in scalar_base_mult()  local
1066     for (j = 0; j <= 32; j += 32) {  in scalar_base_mult()
1067       char bit0 = p256_get_bit(scalar, 31 - i + j);  in scalar_base_mult()
1068       char bit1 = p256_get_bit(scalar, 95 - i + j);  in scalar_base_mult()
1069       char bit2 = p256_get_bit(scalar, 159 - i + j);  in scalar_base_mult()
1070       char bit3 = p256_get_bit(scalar, 223 - i + j);  in scalar_base_mult()