879 	uint64_t t1[5], t2[5], t3[5], t4[5], t5[5], t6[5], t7[5], tt;  in p256_add()  local
895 	f256_montymul(t5, P1->z, t4);  in p256_add()
896 	f256_montymul(t4, P2->y, t5);  in p256_add()
911 	 * Compute u1*h^2 (in t6) and h^3 (in t5);  in p256_add()
915 	f256_montymul(t5, t7, t2);  in p256_add()
921 	f256_sub(P1->x, P1->x, t5);  in p256_add()
930 	f256_montymul(t1, t5, t3);  in p256_add()
991 	uint64_t t1[5], t2[5], t3[5], t4[5], t5[5], t6[5], t7[5], tt;  in p256_add_mixed()  local
1005 	f256_montymul(t5, P1->z, t4);  in p256_add_mixed()
1006 	f256_montymul(t4, P2->y, t5);  in p256_add_mixed()
1021 	 * Compute u1*h^2 (in t6) and h^3 (in t5);  in p256_add_mixed()
1025 	f256_montymul(t5, t7, t2);  in p256_add_mixed()
1031 	f256_sub(P1->x, P1->x, t5);  in p256_add_mixed()
1040 	f256_montymul(t1, t5, t3);  in p256_add_mixed()
1108 	uint64_t t1[5], t2[5], t3[5], t4[5], t5[5], t6[5], t7[5], tt, zz;
1128 	f256_montymul(t5, P1->z, t4);
1129 	f256_montymul(t4, P2->y, t5);
1149 	 * Compute u1*h^2 (in t6) and h^3 (in t5);
1153 	f256_montymul(t5, t7, t2);
1159 	f256_sub(P1->x, P1->x, t5);
1168 	f256_montymul(t1, t5, t3);
1199 	f256_add(t5, t4, t4);
1200 	f256_add(t4, t4, t5);
1203 	 * Compute x' = m^2 - 2*s (in t5).
1205 	f256_montysquare(t5, t4);
1206 	f256_sub(t5, t3);
1207 	f256_sub(t5, t3);
1212 	f256_sub(t6, t3, t5);
1219 	 * We now have the alternate (doubling) coordinates in (t5,t6,t1).
1223 		P1->x[i] |= tt & t5[i];