38 	h[1] = (a0>>26) | ((a1&((1<<19)-1))<< 6); /* (32-26) + 19 =  6+19 = 25 */  in fe_frombytes_impl()
40 	h[3] = (a2>>13) | ((a3&((1<< 6)-1))<<19); /* (32-13) +  6 = 19+ 6 = 25 */  in fe_frombytes_impl()
41 	h[4] = (a3>> 6);                          /* (32- 6)              = 26 */  in fe_frombytes_impl()
43 	h[6] = (a4>>25) | ((a5&((1<<19)-1))<< 7); /* (32-25) + 19 =  7+19 = 26 */  in fe_frombytes_impl()
45 	h[8] = (a6>>12) | ((a7&((1<< 6)-1))<<20); /* (32-12) +  6 = 20+ 6 = 26 */  in fe_frombytes_impl()
46 	h[9] = (a7>> 6)&((1<<25)-1); /*                                     25 */  in fe_frombytes_impl()
109 	{ const u32 x14 = in1[6];  in fe_freeze()
153 	out[6] = x76;  in fe_freeze()
168 	s[4] = h[1] >> 6;  in fe_tobytes()
170 	s[6] = (h[1] >> 22) | (h[2] << 3);  in fe_tobytes()
176 	s[12] = (h[3] >> 19) | (h[4] << 6);  in fe_tobytes()
183 	s[19] = (h[5] >> 24) | (h[6] << 1);  in fe_tobytes()
184 	s[20] = h[6] >> 7;  in fe_tobytes()
185 	s[21] = h[6] >> 15;  in fe_tobytes()
186 	s[22] = (h[6] >> 23) | (h[7] << 3);  in fe_tobytes()
192 	s[28] = (h[8] >> 20) | (h[9] << 6);  in fe_tobytes()
227 	{ const u32 x17 = in1[6];  in fe_add_impl()
231 	{ const u32 x9 = in1[2];  in fe_add_impl()  local
237 	{ const u32 x35 = in2[6];  in fe_add_impl()
246 	out[2] = (x9 + x27);  in fe_add_impl()
250 	out[6] = (x17 + x35);  in fe_add_impl()
270 	{ const u32 x17 = in1[6];  in fe_sub_impl()
274 	{ const u32 x9 = in1[2];  in fe_sub_impl()  local
280 	{ const u32 x35 = in2[6];  in fe_sub_impl()
289 	out[2] = ((0x7fffffe + x9) - x27);  in fe_sub_impl()
293 	out[6] = ((0x7fffffe + x17) - x35);  in fe_sub_impl()
313 	{ const u32 x17 = in1[6];  in fe_mul_impl()
317 	{ const u32 x9 = in1[2];  in fe_mul_impl()  local
323 	{ const u32 x35 = in2[6];  in fe_mul_impl()
332 	{ u64 x42 = ((((u64)(0x2 * x25) * x7) + ((u64)x23 * x9)) + ((u64)x27 * x5));  in fe_mul_impl()
333 	{ u64 x43 = (((((u64)x25 * x9) + ((u64)x27 * x7)) + ((u64)x23 * x11)) + ((u64)x29 * x5));  in fe_mul_impl()
334 …{ u64 x44 = (((((u64)x27 * x9) + (0x2 * (((u64)x25 * x11) + ((u64)x29 * x7)))) + ((u64)x23 * x13))…  in fe_mul_impl()
335 …{ u64 x45 = (((((((u64)x27 * x11) + ((u64)x29 * x9)) + ((u64)x25 * x13)) + ((u64)x31 * x7)) + ((u6…  in fe_mul_impl()
336 … + ((u64)x25 * x15)) + ((u64)x33 * x7))) + ((u64)x27 * x13)) + ((u64)x31 * x9)) + ((u64)x23 * x17)…  in fe_mul_impl()
337 …{ u64 x47 = (((((((((u64)x29 * x13) + ((u64)x31 * x11)) + ((u64)x27 * x15)) + ((u64)x33 * x9)) + (…  in fe_mul_impl()
338 …+ ((u64)x25 * x19)) + ((u64)x37 * x7)))) + ((u64)x27 * x17)) + ((u64)x35 * x9)) + ((u64)x23 * x21)…  in fe_mul_impl()
339 … + ((u64)x29 * x17)) + ((u64)x35 * x11)) + ((u64)x27 * x19)) + ((u64)x37 * x9)) + ((u64)x25 * x21)…  in fe_mul_impl()
340 …+ ((u64)x38 * x7))) + ((u64)x31 * x17)) + ((u64)x35 * x13)) + ((u64)x27 * x21)) + ((u64)x39 * x9));  in fe_mul_impl()
341 …+ ((u64)x37 * x13)) + ((u64)x29 * x21)) + ((u64)x39 * x11)) + ((u64)x27 * x20)) + ((u64)x38 * x9));  in fe_mul_impl()
417 	out[6] = x105;  in fe_mul_impl()
445 	{ const u32 x14 = in1[6];  in fe_sqr_impl()
539 	out[6] = x84;  in fe_sqr_impl()
636 	{ const u32 x17 = in1[6];  in fe_mul_121666_impl()
640 	{ const u32 x9 = in1[2];  in fe_mul_121666_impl()  local
655 	{ u64 x42 = ((((u64)(0x2 * x25) * x7) + ((u64)x23 * x9)) + ((u64)x27 * x5));  in fe_mul_121666_impl()
656 	{ u64 x43 = (((((u64)x25 * x9) + ((u64)x27 * x7)) + ((u64)x23 * x11)) + ((u64)x29 * x5));  in fe_mul_121666_impl()
657 …{ u64 x44 = (((((u64)x27 * x9) + (0x2 * (((u64)x25 * x11) + ((u64)x29 * x7)))) + ((u64)x23 * x13))…  in fe_mul_121666_impl()
658 …{ u64 x45 = (((((((u64)x27 * x11) + ((u64)x29 * x9)) + ((u64)x25 * x13)) + ((u64)x31 * x7)) + ((u6…  in fe_mul_121666_impl()
659 … + ((u64)x25 * x15)) + ((u64)x33 * x7))) + ((u64)x27 * x13)) + ((u64)x31 * x9)) + ((u64)x23 * x17)…  in fe_mul_121666_impl()
660 …{ u64 x47 = (((((((((u64)x29 * x13) + ((u64)x31 * x11)) + ((u64)x27 * x15)) + ((u64)x33 * x9)) + (…  in fe_mul_121666_impl()
661 …+ ((u64)x25 * x19)) + ((u64)x37 * x7)))) + ((u64)x27 * x17)) + ((u64)x35 * x9)) + ((u64)x23 * x21)…  in fe_mul_121666_impl()
662 … + ((u64)x29 * x17)) + ((u64)x35 * x11)) + ((u64)x27 * x19)) + ((u64)x37 * x9)) + ((u64)x25 * x21)…  in fe_mul_121666_impl()
663 …+ ((u64)x38 * x7))) + ((u64)x31 * x17)) + ((u64)x35 * x13)) + ((u64)x27 * x21)) + ((u64)x39 * x9));  in fe_mul_121666_impl()
664 …+ ((u64)x37 * x13)) + ((u64)x29 * x21)) + ((u64)x39 * x11)) + ((u64)x27 * x20)) + ((u64)x38 * x9));  in fe_mul_121666_impl()
740 	out[6] = x105;  in fe_mul_121666_impl()