74   int64_t carry5;  in fe_frombytes()  local
83   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;  in fe_frombytes()
429   int64_t carry5;  in fe_mul()  local
448   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;  in fe_mul()
599   int64_t carry5;  in fe_sq()  local
609   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;  in fe_sq()
850   int64_t carry5;  in fe_sq2()  local
871   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;  in fe_sq2()
3822   int64_t carry5;  in x25519_sc_reduce()  local
3991   carry5 = (s5 + (1 << 20)) >> 21;  in x25519_sc_reduce()
3992   s6 += carry5;  in x25519_sc_reduce()
3993   s5 -= carry5 << 21;  in x25519_sc_reduce()
4027   carry5 = s5 >> 21;  in x25519_sc_reduce()
4028   s6 += carry5;  in x25519_sc_reduce()
4029   s5 -= carry5 << 21;  in x25519_sc_reduce()
4072   carry5 = s5 >> 21;  in x25519_sc_reduce()
4073   s6 += carry5;  in x25519_sc_reduce()
4074   s5 -= carry5 << 21;  in x25519_sc_reduce()
4200   int64_t carry5;  in sc_muladd()  local
4296   carry5 = (s5 + (1 << 20)) >> 21;  in sc_muladd()
4297   s6 += carry5;  in sc_muladd()
4298   s5 -= carry5 << 21;  in sc_muladd()
4480   carry5 = (s5 + (1 << 20)) >> 21;  in sc_muladd()
4481   s6 += carry5;  in sc_muladd()
4482   s5 -= carry5 << 21;  in sc_muladd()
4516   carry5 = s5 >> 21;  in sc_muladd()
4517   s6 += carry5;  in sc_muladd()
4518   s5 -= carry5 << 21;  in sc_muladd()
4561   carry5 = s5 >> 21;  in sc_muladd()
4562   s6 += carry5;  in sc_muladd()
4563   s5 -= carry5 << 21;  in sc_muladd()
4768   int64_t carry5;  in fe_mul121666()  local
4777   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;  in fe_mul121666()