245 static void fe_sub(fe h, const fe f, const fe g) {  in fe_sub()  function
996   fe_sub(u, u, h->Z); /* u = y^2-1 */  in x25519_ge_frombytes_vartime()
1011   fe_sub(check, vxx, u); /* vx^2-u */  in x25519_ge_frombytes_vartime()
1067   fe_sub(r->YminusX, p->Y, p->X);  in x25519_ge_p3_to_cached()
1104   fe_sub(r->Z, r->Z, r->X);  in ge_p2_dbl()
1105   fe_sub(r->X, t0, r->Y);  in ge_p2_dbl()
1106   fe_sub(r->T, r->T, r->Z);  in ge_p2_dbl()
1121   fe_sub(r->Y, p->Y, p->X);  in ge_madd()
1126   fe_sub(r->X, r->Z, r->Y);  in ge_madd()
1129   fe_sub(r->T, t0, r->T);  in ge_madd()
1137   fe_sub(r->Y, p->Y, p->X);  in ge_msub()
1142   fe_sub(r->X, r->Z, r->Y);  in ge_msub()
1144   fe_sub(r->Z, t0, r->T);  in ge_msub()
1153   fe_sub(r->Y, p->Y, p->X);  in x25519_ge_add()
1159   fe_sub(r->X, r->Z, r->Y);  in x25519_ge_add()
1162   fe_sub(r->T, t0, r->T);  in x25519_ge_add()
1170   fe_sub(r->Y, p->Y, p->X);  in x25519_ge_sub()
1176   fe_sub(r->X, r->Z, r->Y);  in x25519_ge_sub()
1178   fe_sub(r->Z, t0, r->T);  in x25519_ge_sub()
1213     fe_sub(out->yminusx, y, x);  in x25519_ge_scalarmult_small_precomp()
4822     fe_sub(tmp0, x3, z3);  in x25519_scalar_mult_generic()
4823     fe_sub(tmp1, x2, z2);  in x25519_scalar_mult_generic()
4831     fe_sub(z2, z3, z2);  in x25519_scalar_mult_generic()
4833     fe_sub(tmp1, tmp1, tmp0);  in x25519_scalar_mult_generic()
4932   fe_sub(zminusy, A.Z, A.Y);  in X25519_public_from_private()