70   int64_t carry1;  in fe_frombytes()  local
81   carry1 = (h1 + (int64_t) (1<<24)) >> 25; h2 += carry1; h1 -= carry1 << 25;  in fe_frombytes()
139   int32_t carry1;  in fe_tobytes()  local
166   carry1 = h1 >> 25; h2 += carry1; h1 -= carry1 << 25;  in fe_tobytes()
435   int64_t carry1;  in fe_mul()  local
457   carry1 = (h1 + (int64_t) (1<<24)) >> 25; h2 += carry1; h1 -= carry1 << 25;  in fe_mul()
605   int64_t carry1;  in fe_sq()  local
618   carry1 = (h1 + (int64_t) (1<<24)) >> 25; h2 += carry1; h1 -= carry1 << 25;  in fe_sq()
862   int64_t carry1;  in fe_sq2()  local
886   carry1 = (h1 + (int64_t) (1<<24)) >> 25; h2 += carry1; h1 -= carry1 << 25;  in fe_sq2()
3804   int64_t carry1;  in sc_reduce()  local
3971   carry1 = (s1 + (1 << 20)) >> 21;  in sc_reduce()
3972   s2 += carry1;  in sc_reduce()
3973   s1 -= carry1 << 21;  in sc_reduce()
4001   carry1 = s1 >> 21;  in sc_reduce()
4002   s2 += carry1;  in sc_reduce()
4003   s1 -= carry1 << 21;  in sc_reduce()
4046   carry1 = s1 >> 21;  in sc_reduce()
4047   s2 += carry1;  in sc_reduce()
4048   s1 -= carry1 << 21;  in sc_reduce()
4182   int64_t carry1;  in sc_muladd()  local
4276   carry1 = (s1 + (1 << 20)) >> 21;  in sc_muladd()
4277   s2 += carry1;  in sc_muladd()
4278   s1 -= carry1 << 21;  in sc_muladd()
4460   carry1 = (s1 + (1 << 20)) >> 21;  in sc_muladd()
4461   s2 += carry1;  in sc_muladd()
4462   s1 -= carry1 << 21;  in sc_muladd()
4490   carry1 = s1 >> 21;  in sc_muladd()
4491   s2 += carry1;  in sc_muladd()
4492   s1 -= carry1 << 21;  in sc_muladd()
4535   carry1 = s1 >> 21;  in sc_muladd()
4536   s2 += carry1;  in sc_muladd()
4537   s1 -= carry1 << 21;  in sc_muladd()
4742   int64_t carry1;  in fe_mul121666()  local
4753   carry1 = (h1 + (int64_t) (1<<24)) >> 25; h2 += carry1; h1 -= carry1 << 25;  in fe_mul121666()