69   int64_t carry0;  in fe_frombytes()  local
86   carry0 = (h0 + (int64_t) (1<<25)) >> 26; h1 += carry0; h0 -= carry0 << 26;  in fe_frombytes()
138   int32_t carry0;  in fe_tobytes()  local
165   carry0 = h0 >> 26; h1 += carry0; h0 -= carry0 << 26;  in fe_tobytes()
434   int64_t carry0;  in fe_mul()  local
450   carry0 = (h0 + (int64_t) (1<<25)) >> 26; h1 += carry0; h0 -= carry0 << 26;  in fe_mul()
489   carry0 = (h0 + (int64_t) (1<<25)) >> 26; h1 += carry0; h0 -= carry0 << 26;  in fe_mul()
604   int64_t carry0;  in fe_sq()  local
615   carry0 = (h0 + (int64_t) (1<<25)) >> 26; h1 += carry0; h0 -= carry0 << 26;  in fe_sq()
632   carry0 = (h0 + (int64_t) (1<<25)) >> 26; h1 += carry0; h0 -= carry0 << 26;  in fe_sq()
861   int64_t carry0;  in fe_sq2()  local
883   carry0 = (h0 + (int64_t) (1<<25)) >> 26; h1 += carry0; h0 -= carry0 << 26;  in fe_sq2()
900   carry0 = (h0 + (int64_t) (1<<25)) >> 26; h1 += carry0; h0 -= carry0 << 26;  in fe_sq2()
3803   int64_t carry0;  in sc_reduce()  local
3952   carry0 = (s0 + (1 << 20)) >> 21;  in sc_reduce()
3953   s1 += carry0;  in sc_reduce()
3954   s0 -= carry0 << 21;  in sc_reduce()
3998   carry0 = s0 >> 21;  in sc_reduce()
3999   s1 += carry0;  in sc_reduce()
4000   s0 -= carry0 << 21;  in sc_reduce()
4043   carry0 = s0 >> 21;  in sc_reduce()
4044   s1 += carry0;  in sc_reduce()
4045   s0 -= carry0 << 21;  in sc_reduce()
4181   int64_t carry0;  in sc_muladd()  local
4239   carry0 = (s0 + (1 << 20)) >> 21;  in sc_muladd()
4240   s1 += carry0;  in sc_muladd()
4241   s0 -= carry0 << 21;  in sc_muladd()
4441   carry0 = (s0 + (1 << 20)) >> 21;  in sc_muladd()
4442   s1 += carry0;  in sc_muladd()
4443   s0 -= carry0 << 21;  in sc_muladd()
4487   carry0 = s0 >> 21;  in sc_muladd()
4488   s1 += carry0;  in sc_muladd()
4489   s0 -= carry0 << 21;  in sc_muladd()
4532   carry0 = s0 >> 21;  in sc_muladd()
4533   s1 += carry0;  in sc_muladd()
4534   s0 -= carry0 << 21;  in sc_muladd()
4741   int64_t carry0;  in fe_mul121666()  local
4758   carry0 = (h0 + (int64_t) (1<<25)) >> 26; h1 += carry0; h0 -= carry0 << 26;  in fe_mul121666()