35     int64_t A = 0;  in subM()  local
38         A += (uint64_t)a[i] - key->n[i];  in subM()
39         a[i] = (uint32_t)A;  in subM()
40         A >>= 32;  in subM()
61     uint64_t A = (uint64_t)a * b[0] + c[0];  in montMulAdd()  local
62     uint32_t d0 = (uint32_t)A * key->n0inv;  in montMulAdd()
63     uint64_t B = (uint64_t)d0 * key->n[0] + (uint32_t)A;  in montMulAdd()
67         A = (A >> 32) + (uint64_t)a * b[i] + c[i];  in montMulAdd()
68         B = (B >> 32) + (uint64_t)d0 * key->n[i] + (uint32_t)A;  in montMulAdd()
72     A = (A >> 32) + (B >> 32);  in montMulAdd()
74     c[i - 1] = (uint32_t)A;  in montMulAdd()
76     if (A >> 32) {  in montMulAdd()