76   int64_t carry7;  in fe_frombytes()  local
84   carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_frombytes()
431   int64_t carry7;  in fe_mul()  local
462   carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_mul()
601   int64_t carry7;  in fe_sq()  local
615   carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_sq()
852   int64_t carry7;  in fe_sq2()  local
877   carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_sq2()
3824   int64_t carry7;  in x25519_sc_reduce()  local
3902   carry7 = (s7 + (1 << 20)) >> 21;  in x25519_sc_reduce()
3903   s8 += carry7;  in x25519_sc_reduce()
3904   s7 -= carry7 << 21;  in x25519_sc_reduce()
3994   carry7 = (s7 + (1 << 20)) >> 21;  in x25519_sc_reduce()
3995   s8 += carry7;  in x25519_sc_reduce()
3996   s7 -= carry7 << 21;  in x25519_sc_reduce()
4033   carry7 = s7 >> 21;  in x25519_sc_reduce()
4034   s8 += carry7;  in x25519_sc_reduce()
4035   s7 -= carry7 << 21;  in x25519_sc_reduce()
4078   carry7 = s7 >> 21;  in x25519_sc_reduce()
4079   s8 += carry7;  in x25519_sc_reduce()
4080   s7 -= carry7 << 21;  in x25519_sc_reduce()
4202   int64_t carry7;  in sc_muladd()  local
4299   carry7 = (s7 + (1 << 20)) >> 21;  in sc_muladd()
4300   s8 += carry7;  in sc_muladd()
4301   s7 -= carry7 << 21;  in sc_muladd()
4391   carry7 = (s7 + (1 << 20)) >> 21;  in sc_muladd()
4392   s8 += carry7;  in sc_muladd()
4393   s7 -= carry7 << 21;  in sc_muladd()
4483   carry7 = (s7 + (1 << 20)) >> 21;  in sc_muladd()
4484   s8 += carry7;  in sc_muladd()
4485   s7 -= carry7 << 21;  in sc_muladd()
4522   carry7 = s7 >> 21;  in sc_muladd()
4523   s8 += carry7;  in sc_muladd()
4524   s7 -= carry7 << 21;  in sc_muladd()
4567   carry7 = s7 >> 21;  in sc_muladd()
4568   s8 += carry7;  in sc_muladd()
4569   s7 -= carry7 << 21;  in sc_muladd()
4770   int64_t carry7;  in fe_mul121666()  local
4778   carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_mul121666()