77   int64_t carry8;  in fe_frombytes()  local
90   carry8 = h8 + (1 << 25); h9 += carry8 >> 26; h8 -= carry8 & kTop38Bits;  in fe_frombytes()
432   int64_t carry8;  in fe_mul()  local
469   carry8 = h8 + (1 << 25); h9 += carry8 >> 26; h8 -= carry8 & kTop38Bits;  in fe_mul()
602   int64_t carry8;  in fe_sq()  local
618   carry8 = h8 + (1 << 25); h9 += carry8 >> 26; h8 -= carry8 & kTop38Bits;  in fe_sq()
853   int64_t carry8;  in fe_sq2()  local
880   carry8 = h8 + (1 << 25); h9 += carry8 >> 26; h8 -= carry8 & kTop38Bits;  in fe_sq2()
3825   int64_t carry8;  in x25519_sc_reduce()  local
3886   carry8 = (s8 + (1 << 20)) >> 21;  in x25519_sc_reduce()
3887   s9 += carry8;  in x25519_sc_reduce()
3888   s8 -= carry8 << 21;  in x25519_sc_reduce()
3978   carry8 = (s8 + (1 << 20)) >> 21;  in x25519_sc_reduce()
3979   s9 += carry8;  in x25519_sc_reduce()
3980   s8 -= carry8 << 21;  in x25519_sc_reduce()
4036   carry8 = s8 >> 21;  in x25519_sc_reduce()
4037   s9 += carry8;  in x25519_sc_reduce()
4038   s8 -= carry8 << 21;  in x25519_sc_reduce()
4081   carry8 = s8 >> 21;  in x25519_sc_reduce()
4082   s9 += carry8;  in x25519_sc_reduce()
4083   s8 -= carry8 << 21;  in x25519_sc_reduce()
4203   int64_t carry8;  in sc_muladd()  local
4265   carry8 = (s8 + (1 << 20)) >> 21;  in sc_muladd()
4266   s9 += carry8;  in sc_muladd()
4267   s8 -= carry8 << 21;  in sc_muladd()
4375   carry8 = (s8 + (1 << 20)) >> 21;  in sc_muladd()
4376   s9 += carry8;  in sc_muladd()
4377   s8 -= carry8 << 21;  in sc_muladd()
4467   carry8 = (s8 + (1 << 20)) >> 21;  in sc_muladd()
4468   s9 += carry8;  in sc_muladd()
4469   s8 -= carry8 << 21;  in sc_muladd()
4525   carry8 = s8 >> 21;  in sc_muladd()
4526   s9 += carry8;  in sc_muladd()
4527   s8 -= carry8 << 21;  in sc_muladd()
4570   carry8 = s8 >> 21;  in sc_muladd()
4571   s9 += carry8;  in sc_muladd()
4572   s8 -= carry8 << 21;  in sc_muladd()
4771   int64_t carry8;  in fe_mul121666()  local
4784   carry8 = h8 + (1 << 25); h9 += carry8 >> 26; h8 -= carry8 & kTop38Bits;  in fe_mul121666()