75   int64_t carry6;  in fe_frombytes()  local
89   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_frombytes()
430   int64_t carry6;  in fe_mul()  local
455   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_mul()
600   int64_t carry6;  in fe_sq()  local
612   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_sq()
851   int64_t carry6;  in fe_sq2()  local
874   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_sq2()
3823   int64_t carry6;  in x25519_sc_reduce()  local
3883   carry6 = (s6 + (1 << 20)) >> 21;  in x25519_sc_reduce()
3884   s7 += carry6;  in x25519_sc_reduce()
3885   s6 -= carry6 << 21;  in x25519_sc_reduce()
3975   carry6 = (s6 + (1 << 20)) >> 21;  in x25519_sc_reduce()
3976   s7 += carry6;  in x25519_sc_reduce()
3977   s6 -= carry6 << 21;  in x25519_sc_reduce()
4030   carry6 = s6 >> 21;  in x25519_sc_reduce()
4031   s7 += carry6;  in x25519_sc_reduce()
4032   s6 -= carry6 << 21;  in x25519_sc_reduce()
4075   carry6 = s6 >> 21;  in x25519_sc_reduce()
4076   s7 += carry6;  in x25519_sc_reduce()
4077   s6 -= carry6 << 21;  in x25519_sc_reduce()
4201   int64_t carry6;  in sc_muladd()  local
4262   carry6 = (s6 + (1 << 20)) >> 21;  in sc_muladd()
4263   s7 += carry6;  in sc_muladd()
4264   s6 -= carry6 << 21;  in sc_muladd()
4372   carry6 = (s6 + (1 << 20)) >> 21;  in sc_muladd()
4373   s7 += carry6;  in sc_muladd()
4374   s6 -= carry6 << 21;  in sc_muladd()
4464   carry6 = (s6 + (1 << 20)) >> 21;  in sc_muladd()
4465   s7 += carry6;  in sc_muladd()
4466   s6 -= carry6 << 21;  in sc_muladd()
4519   carry6 = s6 >> 21;  in sc_muladd()
4520   s7 += carry6;  in sc_muladd()
4521   s6 -= carry6 << 21;  in sc_muladd()
4564   carry6 = s6 >> 21;  in sc_muladd()
4565   s7 += carry6;  in sc_muladd()
4566   s6 -= carry6 << 21;  in sc_muladd()
4769   int64_t carry6;  in fe_mul121666()  local
4783   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_mul121666()