70   int64_t carry1;  in fe_frombytes()  local
81   carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits;  in fe_frombytes()
425   int64_t carry1;  in fe_mul()  local
447   carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits;  in fe_mul()
595   int64_t carry1;  in fe_sq()  local
608   carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits;  in fe_sq()
846   int64_t carry1;  in fe_sq2()  local
870   carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits;  in fe_sq2()
3818   int64_t carry1;  in x25519_sc_reduce()  local
3985   carry1 = (s1 + (1 << 20)) >> 21;  in x25519_sc_reduce()
3986   s2 += carry1;  in x25519_sc_reduce()
3987   s1 -= carry1 << 21;  in x25519_sc_reduce()
4015   carry1 = s1 >> 21;  in x25519_sc_reduce()
4016   s2 += carry1;  in x25519_sc_reduce()
4017   s1 -= carry1 << 21;  in x25519_sc_reduce()
4060   carry1 = s1 >> 21;  in x25519_sc_reduce()
4061   s2 += carry1;  in x25519_sc_reduce()
4062   s1 -= carry1 << 21;  in x25519_sc_reduce()
4196   int64_t carry1;  in sc_muladd()  local
4290   carry1 = (s1 + (1 << 20)) >> 21;  in sc_muladd()
4291   s2 += carry1;  in sc_muladd()
4292   s1 -= carry1 << 21;  in sc_muladd()
4474   carry1 = (s1 + (1 << 20)) >> 21;  in sc_muladd()
4475   s2 += carry1;  in sc_muladd()
4476   s1 -= carry1 << 21;  in sc_muladd()
4504   carry1 = s1 >> 21;  in sc_muladd()
4505   s2 += carry1;  in sc_muladd()
4506   s1 -= carry1 << 21;  in sc_muladd()
4549   carry1 = s1 >> 21;  in sc_muladd()
4550   s2 += carry1;  in sc_muladd()
4551   s1 -= carry1 << 21;  in sc_muladd()
4764   int64_t carry1;  in fe_mul121666()  local
4775   carry1 = h1 + (1 << 24); h2 += carry1 >> 25; h1 -= carry1 & kTop39Bits;  in fe_mul121666()