59   return (P256_DIGIT(scalar, bit / P256_BITSPERDIGIT)  in p256_get_bit()
65   for (i = 0; i < P256_NDIGITS; ++i) result |= P256_DIGIT(a, i);  in p256_is_zero()
80     carry += (p256_ddigit)P256_DIGIT(a, i) * b;  in mulAdd()
118     borrow -= P256_DIGIT(MOD, i) & mask;  in subM()
135     carry += P256_DIGIT(MOD, i) & mask;  in addM()
155     top = mulAdd(a, P256_DIGIT(b, i), 0, tmp + i);  in p256_modmul()
191 int p256_is_odd(const p256_int* a) { return P256_DIGIT(a, 0) & 1; }  in p256_is_odd()
192 int p256_is_even(const p256_int* a) { return !(P256_DIGIT(a, 0) & 1); }  in p256_is_even()
196   p256_digit top = P256_DIGIT(a, P256_NDIGITS - 1);  in p256_shl()
200     p256_digit accu = (P256_DIGIT(a, i) << n);  in p256_shl()
201     accu |= (P256_DIGIT(a, i - 1) >> (P256_BITSPERDIGIT - n));  in p256_shl()
202     P256_DIGIT(b, i) = accu;  in p256_shl()
204   P256_DIGIT(b, i) = (P256_DIGIT(a, i) << n);  in p256_shl()
216     p256_digit accu = (P256_DIGIT(a, i) >> n);  in p256_shr()
217     accu |= (P256_DIGIT(a, i + 1) << (P256_BITSPERDIGIT - n));  in p256_shr()
218     P256_DIGIT(b, i) = accu;  in p256_shr()
220   P256_DIGIT(b, i) = (P256_DIGIT(a, i) >> n);  in p256_shr()
227     p256_digit accu = (P256_DIGIT(a, i) >> 1);  in p256_shr1()
228     accu |= (P256_DIGIT(a, i + 1) << (P256_BITSPERDIGIT - 1));  in p256_shr1()
229     P256_DIGIT(b, i) = accu;  in p256_shr1()
231   P256_DIGIT(b, i) = (P256_DIGIT(a, i) >> 1) |  in p256_shr1()
242     borrow += (p256_sddigit)P256_DIGIT(a, i) - P256_DIGIT(b, i);  in p256_cmp()
257     borrow += (p256_sddigit)P256_DIGIT(a, i) - P256_DIGIT(b, i);  in p256_sub()
258     if (c) P256_DIGIT(c, i) = (p256_digit)borrow;  in p256_sub()
270     carry += (p256_ddigit)P256_DIGIT(a, i) + P256_DIGIT(b, i);  in p256_add()
271     if (c) P256_DIGIT(c, i) = (p256_digit)carry;  in p256_add()
283     carry += (p256_ddigit)P256_DIGIT(a, i);  in p256_add_d()
284     if (b) P256_DIGIT(b, i) = (p256_digit)carry;  in p256_add_d()
366     P256_DIGIT(dst, i) =  in p256_from_bin()