279 static void fe_mul(fe h, const fe f, const fe g) {  in fe_mul()  function
648   fe_mul(t1, z, t1);  in fe_invert()
649   fe_mul(t0, t0, t1);  in fe_invert()
651   fe_mul(t1, t1, t2);  in fe_invert()
656   fe_mul(t1, t2, t1);  in fe_invert()
661   fe_mul(t2, t2, t1);  in fe_invert()
666   fe_mul(t2, t3, t2);  in fe_invert()
671   fe_mul(t1, t2, t1);  in fe_invert()
676   fe_mul(t2, t2, t1);  in fe_invert()
681   fe_mul(t2, t3, t2);  in fe_invert()
686   fe_mul(t1, t2, t1);  in fe_invert()
691   fe_mul(out, t1, t0);  in fe_invert()
909   fe_mul(t1, z, t1);  in fe_pow22523()
910   fe_mul(t0, t0, t1);  in fe_pow22523()
912   fe_mul(t0, t1, t0);  in fe_pow22523()
917   fe_mul(t0, t1, t0);  in fe_pow22523()
922   fe_mul(t1, t1, t0);  in fe_pow22523()
927   fe_mul(t1, t2, t1);  in fe_pow22523()
932   fe_mul(t0, t1, t0);  in fe_pow22523()
937   fe_mul(t1, t1, t0);  in fe_pow22523()
942   fe_mul(t1, t2, t1);  in fe_pow22523()
947   fe_mul(t0, t1, t0);  in fe_pow22523()
952   fe_mul(out, t0, z);  in fe_pow22523()
961   fe_mul(x, h->X, recip);  in x25519_ge_tobytes()
962   fe_mul(y, h->Y, recip);  in x25519_ge_tobytes()
973   fe_mul(x, h->X, recip);  in ge_p3_tobytes()
974   fe_mul(y, h->Y, recip);  in ge_p3_tobytes()
995   fe_mul(v, u, d);  in x25519_ge_frombytes_vartime()
1000   fe_mul(v3, v3, v); /* v3 = v^3 */  in x25519_ge_frombytes_vartime()
1002   fe_mul(h->X, h->X, v);  in x25519_ge_frombytes_vartime()
1003   fe_mul(h->X, h->X, u); /* x = uv^7 */  in x25519_ge_frombytes_vartime()
1006   fe_mul(h->X, h->X, v3);  in x25519_ge_frombytes_vartime()
1007   fe_mul(h->X, h->X, u); /* x = uv^3(uv^7)^((q-5)/8) */  in x25519_ge_frombytes_vartime()
1010   fe_mul(vxx, vxx, v);  in x25519_ge_frombytes_vartime()
1017     fe_mul(h->X, h->X, sqrtm1);  in x25519_ge_frombytes_vartime()
1024   fe_mul(h->T, h->X, h->Y);  in x25519_ge_frombytes_vartime()
1069   fe_mul(r->T2d, p->T, d2);  in x25519_ge_p3_to_cached()
1074   fe_mul(r->X, p->X, p->T);  in x25519_ge_p1p1_to_p2()
1075   fe_mul(r->Y, p->Y, p->Z);  in x25519_ge_p1p1_to_p2()
1076   fe_mul(r->Z, p->Z, p->T);  in x25519_ge_p1p1_to_p2()
1081   fe_mul(r->X, p->X, p->T);  in x25519_ge_p1p1_to_p3()
1082   fe_mul(r->Y, p->Y, p->Z);  in x25519_ge_p1p1_to_p3()
1083   fe_mul(r->Z, p->Z, p->T);  in x25519_ge_p1p1_to_p3()
1084   fe_mul(r->T, p->X, p->Y);  in x25519_ge_p1p1_to_p3()
1122   fe_mul(r->Z, r->X, q->yplusx);  in ge_madd()
1123   fe_mul(r->Y, r->Y, q->yminusx);  in ge_madd()
1124   fe_mul(r->T, q->xy2d, p->T);  in ge_madd()
1138   fe_mul(r->Z, r->X, q->yminusx);  in ge_msub()
1139   fe_mul(r->Y, r->Y, q->yplusx);  in ge_msub()
1140   fe_mul(r->T, q->xy2d, p->T);  in ge_msub()
1154   fe_mul(r->Z, r->X, q->YplusX);  in x25519_ge_add()
1155   fe_mul(r->Y, r->Y, q->YminusX);  in x25519_ge_add()
1156   fe_mul(r->T, q->T2d, p->T);  in x25519_ge_add()
1157   fe_mul(r->X, p->Z, q->Z);  in x25519_ge_add()
1171   fe_mul(r->Z, r->X, q->YminusX);  in x25519_ge_sub()
1172   fe_mul(r->Y, r->Y, q->YplusX);  in x25519_ge_sub()
1173   fe_mul(r->T, q->T2d, p->T);  in x25519_ge_sub()
1174   fe_mul(r->X, p->Z, q->Z);  in x25519_ge_sub()
1214     fe_mul(out->xy2d, x, y);  in x25519_ge_scalarmult_small_precomp()
1215     fe_mul(out->xy2d, out->xy2d, d2);  in x25519_ge_scalarmult_small_precomp()
4826     fe_mul(z3, tmp0, x2);  in x25519_scalar_mult_generic()
4827     fe_mul(z2, z2, tmp1);  in x25519_scalar_mult_generic()
4832     fe_mul(x2, tmp1, tmp0);  in x25519_scalar_mult_generic()
4838     fe_mul(z3, x1, z2);  in x25519_scalar_mult_generic()
4839     fe_mul(z2, tmp1, tmp0);  in x25519_scalar_mult_generic()
4845   fe_mul(x2, x2, z2);  in x25519_scalar_mult_generic()
4934   fe_mul(zplusy, zplusy, zminusy_inv);  in X25519_public_from_private()