38 typedef uint64_t u64;  typedef
92 typedef u64 smallfelem[NLIMBS];
95 static const u64 kPrime[4] = {0xfffffffffffffffful, 0xffffffff, 0,
97 static const u64 bottom63bits = 0x7ffffffffffffffful;
102   out[0] = *((u64 *)&in[0]);  in bin32_to_felem()
103   out[1] = *((u64 *)&in[8]);  in bin32_to_felem()
104   out[2] = *((u64 *)&in[16]);  in bin32_to_felem()
105   out[3] = *((u64 *)&in[24]);  in bin32_to_felem()
111   *((u64 *)&out[0]) = in[0];  in smallfelem_to_bin32()
112   *((u64 *)&out[8]) = in[1];  in smallfelem_to_bin32()
113   *((u64 *)&out[16]) = in[2];  in smallfelem_to_bin32()
114   *((u64 *)&out[24]) = in[3];  in smallfelem_to_bin32()
196 static void felem_scalar(felem out, const u64 scalar) {  in felem_scalar()
204 static void longfelem_scalar(longfelem out, const u64 scalar) {  in longfelem_scalar()
329   u64 a, b, mask;  in felem_shrink()
331   static const u64 kPrime3Test = 0x7fffffff00000001ul; /* 2^63 - 2^32 + 1 */  in felem_shrink()
334   tmp[3] = zero110[3] + in[3] + ((u64)(in[2] >> 64));  in felem_shrink()
337   tmp[2] = zero110[2] + (u64)in[2];  in felem_shrink()
345   tmp[3] = (u64)tmp[3];  in felem_shrink()
353   tmp[3] = (u64)tmp[3];  in felem_shrink()
392   tmp[1] += ((u64)(tmp[0] >> 64));  in felem_shrink()
393   tmp[0] = (u64)tmp[0];  in felem_shrink()
394   tmp[2] += ((u64)(tmp[1] >> 64));  in felem_shrink()
395   tmp[1] = (u64)tmp[1];  in felem_shrink()
396   tmp[3] += ((u64)(tmp[2] >> 64));  in felem_shrink()
397   tmp[2] = (u64)tmp[2];  in felem_shrink()
421   u64 high, low;  in smallfelem_square()
496   u64 small[4];  in felem_square()
510   u64 high, low;  in smallfelem_mul()
739 static void subtract_u64(u64 *result, u64 *carry, u64 v) {  in subtract_u64()
743   *result = (u64)r;  in subtract_u64()
749   u64 all_equal_so_far = 0, result = 0;  in felem_contract()
761     u64 equal;  in felem_contract()
765     result |= all_equal_so_far & ((u64)(a >> 64));  in felem_contract()
787   u64 carry;  in felem_contract()
828   u64 is_p;  in smallfelem_is_zero()
830   u64 is_zero = small[0] | small[1] | small[2] | small[3];  in smallfelem_is_zero()
1089   const u64 mask64 = mask;  in copy_small_conditional()
1472 static void select_point(const u64 idx, unsigned int size,  in select_point()
1475   u64 *outlimbs = &out[0][0];  in select_point()
1479     const u64 *inlimbs = (u64 *)&pre_comp[i][0][0];  in select_point()
1480     u64 mask = i ^ idx;  in select_point()
1513   u64 bits;  in batch_mul()