3833   int64_t carry16;  in x25519_sc_reduce()  local
3898   carry16 = (s16 + (1 << 20)) >> 21;  in x25519_sc_reduce()
3899   s17 += carry16;  in x25519_sc_reduce()
3900   s16 -= carry16 << 21;  in x25519_sc_reduce()
4211   int64_t carry16;  in sc_muladd()  local
4277   carry16 = (s16 + (1 << 20)) >> 21;  in sc_muladd()
4278   s17 += carry16;  in sc_muladd()
4279   s16 -= carry16 << 21;  in sc_muladd()
4387   carry16 = (s16 + (1 << 20)) >> 21;  in sc_muladd()
4388   s17 += carry16;  in sc_muladd()
4389   s16 -= carry16 << 21;  in sc_muladd()