3803   int64_t s10 = 2097151 & (load_3(s + 26) >> 2);  in x25519_sc_reduce()  local
3843   s10 += s22 * 666643;  in x25519_sc_reduce()
3852   s10 += s21 * 470296;  in x25519_sc_reduce()
3861   s10 += s20 * 654183;  in x25519_sc_reduce()
3870   s10 -= s19 * 997805;  in x25519_sc_reduce()
3879   s10 += s18 * 136657;  in x25519_sc_reduce()
3889   carry10 = (s10 + (1 << 20)) >> 21;  in x25519_sc_reduce()
3891   s10 -= carry10 << 21;  in x25519_sc_reduce()
3906   s10 += carry9;  in x25519_sc_reduce()
3923   s10 -= s17 * 683901;  in x25519_sc_reduce()
3981   carry10 = (s10 + (1 << 20)) >> 21;  in x25519_sc_reduce()
3983   s10 -= carry10 << 21;  in x25519_sc_reduce()
3998   s10 += carry9;  in x25519_sc_reduce()
4040   s10 += carry9;  in x25519_sc_reduce()
4042   carry10 = s10 >> 21;  in x25519_sc_reduce()
4044   s10 -= carry10 << 21;  in x25519_sc_reduce()
4085   s10 += carry9;  in x25519_sc_reduce()
4087   carry10 = s10 >> 21;  in x25519_sc_reduce()
4089   s10 -= carry10 << 21;  in x25519_sc_reduce()
4117   s[26] = (s9 >> 19) | (s10 << 2);  in x25519_sc_reduce()
4118   s[27] = s10 >> 6;  in x25519_sc_reduce()
4119   s[28] = (s10 >> 14) | (s11 << 7);  in x25519_sc_reduce()
4181   int64_t s10;  in sc_muladd()  local
4232   s10 = c10 + a0 * b10 + a1 * b9 + a2 * b8 + a3 * b7 + a4 * b6 + a5 * b5 +  in sc_muladd()
4268   carry10 = (s10 + (1 << 20)) >> 21;  in sc_muladd()
4270   s10 -= carry10 << 21;  in sc_muladd()
4303   s10 += carry9;  in sc_muladd()
4332   s10 += s22 * 666643;  in sc_muladd()
4341   s10 += s21 * 470296;  in sc_muladd()
4350   s10 += s20 * 654183;  in sc_muladd()
4359   s10 -= s19 * 997805;  in sc_muladd()
4368   s10 += s18 * 136657;  in sc_muladd()
4378   carry10 = (s10 + (1 << 20)) >> 21;  in sc_muladd()
4380   s10 -= carry10 << 21;  in sc_muladd()
4395   s10 += carry9;  in sc_muladd()
4412   s10 -= s17 * 683901;  in sc_muladd()
4470   carry10 = (s10 + (1 << 20)) >> 21;  in sc_muladd()
4472   s10 -= carry10 << 21;  in sc_muladd()
4487   s10 += carry9;  in sc_muladd()
4529   s10 += carry9;  in sc_muladd()
4531   carry10 = s10 >> 21;  in sc_muladd()
4533   s10 -= carry10 << 21;  in sc_muladd()
4574   s10 += carry9;  in sc_muladd()
4576   carry10 = s10 >> 21;  in sc_muladd()
4578   s10 -= carry10 << 21;  in sc_muladd()
4606   s[26] = (s9 >> 19) | (s10 << 2);  in sc_muladd()
4607   s[27] = s10 >> 6;  in sc_muladd()
4608   s[28] = (s10 >> 14) | (s11 << 7);  in sc_muladd()