66   int64_t h7 = load_3(s + 23) << 5;  in fe_frombytes()  local
84   carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_frombytes()
89   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_frombytes()
99   h[7] = h7;  in fe_frombytes()
134   int32_t h7 = h[7];  in fe_tobytes()  local
147   q = (h7 + q) >> 25;  in fe_tobytes()
161   h7 += h6 >> 26; h6 &= kBottom26Bits;  in fe_tobytes()
162   h8 += h7 >> 25; h7 &= kBottom25Bits;  in fe_tobytes()
194   s[22] = (h6 >> 23) | ((uint32_t)(h7) << 3);  in fe_tobytes()
195   s[23] = h7 >> 5;  in fe_tobytes()
196   s[24] = h7 >> 13;  in fe_tobytes()
197   s[25] = (h7 >> 21) | ((uint32_t)(h8) << 4);  in fe_tobytes()
421   int64_t h7 = f0g7+f1g6   +f2g5   +f3g4   +f4g3   +f5g2   +f6g1   +f7g0   +f8g9_19+f9g8_19;  in fe_mul()  local
455   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_mul()
462   carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_mul()
490   h[7] = h7;  in fe_mul()
591   int64_t h7 = f0f7_2+f1f6_2 +f2f5_2 +f3f4_2 +f8f9_38;  in fe_sq()  local
612   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_sq()
615   carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_sq()
631   h[7] = h7;  in fe_sq()
842   int64_t h7 = f0f7_2+f1f6_2 +f2f5_2 +f3f4_2 +f8f9_38;  in fe_sq2()  local
863   h7 += h7;  in fe_sq2()
874   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_sq2()
877   carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_sq2()
893   h[7] = h7;  in fe_sq2()
4760   int64_t h7 = f7 * (int64_t) 121666;  in fe_mul121666()  local
4778   carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_mul121666()
4783   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_mul121666()
4793   h[7] = h7;  in fe_mul121666()