73   int64_t carry4;  in fe_frombytes()  local
88   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;  in fe_frombytes()
428   int64_t carry4;  in fe_mul()  local
441   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;  in fe_mul()
468   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;  in fe_mul()
598   int64_t carry4;  in fe_sq()  local
606   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;  in fe_sq()
617   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;  in fe_sq()
849   int64_t carry4;  in fe_sq2()  local
868   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;  in fe_sq2()
879   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;  in fe_sq2()
3821   int64_t carry4;  in x25519_sc_reduce()  local
3972   carry4 = (s4 + (1 << 20)) >> 21;  in x25519_sc_reduce()
3973   s5 += carry4;  in x25519_sc_reduce()
3974   s4 -= carry4 << 21;  in x25519_sc_reduce()
4024   carry4 = s4 >> 21;  in x25519_sc_reduce()
4025   s5 += carry4;  in x25519_sc_reduce()
4026   s4 -= carry4 << 21;  in x25519_sc_reduce()
4069   carry4 = s4 >> 21;  in x25519_sc_reduce()
4070   s5 += carry4;  in x25519_sc_reduce()
4071   s4 -= carry4 << 21;  in x25519_sc_reduce()
4199   int64_t carry4;  in sc_muladd()  local
4259   carry4 = (s4 + (1 << 20)) >> 21;  in sc_muladd()
4260   s5 += carry4;  in sc_muladd()
4261   s4 -= carry4 << 21;  in sc_muladd()
4461   carry4 = (s4 + (1 << 20)) >> 21;  in sc_muladd()
4462   s5 += carry4;  in sc_muladd()
4463   s4 -= carry4 << 21;  in sc_muladd()
4513   carry4 = s4 >> 21;  in sc_muladd()
4514   s5 += carry4;  in sc_muladd()
4515   s4 -= carry4 << 21;  in sc_muladd()
4558   carry4 = s4 >> 21;  in sc_muladd()
4559   s5 += carry4;  in sc_muladd()
4560   s4 -= carry4 << 21;  in sc_muladd()
4767   int64_t carry4;  in fe_mul121666()  local
4782   carry4 = h4 + (1 << 25); h5 += carry4 >> 26; h4 -= carry4 & kTop38Bits;  in fe_mul121666()