18 	u64 minus_x = ~x + (u64)1U;  in u64_eq_mask()
21 	u64 c = xnx - (u64)1U;  in u64_eq_mask()
35 	u64 c = x_xor_q_ - (u64)1U;  in u64_gte_mask()
41 	u64 b4 = b[4];  in modulo_carry_top()  local
43 	u64 b4_ = b4 & 0x7ffffffffffffLLU;  in modulo_carry_top()
44 	u64 b0_ = b0 + 19 * (b4 >> 51);  in modulo_carry_top()
56 		u128 xi = input[1];  in fproduct_copy_from_wide_()
57 		output[1] = ((u64)(xi));  in fproduct_copy_from_wide_()
77 	output[1] += (u128)input[1] * s;  in fproduct_sum_scalar_multiplication_()
88 		u128 tctrp1 = tmp[ctr + 1];  in fproduct_carry_wide_()
92 		tmp[ctr + 1] = ((tctrp1) + (c));  in fproduct_carry_wide_()
95 		u32 ctr = 1;  in fproduct_carry_wide_()
97 		u128 tctrp1 = tmp[ctr + 1];  in fproduct_carry_wide_()
101 		tmp[ctr + 1] = ((tctrp1) + (c));  in fproduct_carry_wide_()
107 		u128 tctrp1 = tmp[ctr + 1];  in fproduct_carry_wide_()
111 		tmp[ctr + 1] = ((tctrp1) + (c));  in fproduct_carry_wide_()
116 		u128 tctrp1 = tmp[ctr + 1];  in fproduct_carry_wide_()
120 		tmp[ctr + 1] = ((tctrp1) + (c));  in fproduct_carry_wide_()
129 		u32 ctr = 5 - 0 - 1;  in fmul_shift_reduce()
130 		u64 z = output[ctr - 1];  in fmul_shift_reduce()
134 		u32 ctr = 5 - 1 - 1;  in fmul_shift_reduce()
135 		u64 z = output[ctr - 1];  in fmul_shift_reduce()
139 		u32 ctr = 5 - 2 - 1;  in fmul_shift_reduce()
140 		u64 z = output[ctr - 1];  in fmul_shift_reduce()
144 		u32 ctr = 5 - 3 - 1;  in fmul_shift_reduce()
145 		u64 z = output[ctr - 1];  in fmul_shift_reduce()
164 		u64 input2i = input21[1];  in fmul_mul_shift_reduce_()
185 	u64 tmp[5] = { input[0], input[1], input[2], input[3], input[4] };  in fmul_fmul()
187 		u128 b4;  in fmul_fmul()  local
198 		b4 = t[4];  in fmul_fmul()
200 		b4_ = ((b4) & (((u128)(0x7ffffffffffffLLU))));  in fmul_fmul()
201 		b0_ = ((b0) + (((u128)(19) * (((u64)(((b4) >> (51))))))));  in fmul_fmul()
206 		i1 = output[1];  in fmul_fmul()
210 		output[1] = i1_;  in fmul_fmul()
217 	u64 r1 = output[1];  in fsquare_fsquare__()
237 	tmp[1] = s1;  in fsquare_fsquare__()
245 	u128 b4;  in fsquare_fsquare_()  local
255 	b4 = tmp[4];  in fsquare_fsquare_()
257 	b4_ = ((b4) & (((u128)(0x7ffffffffffffLLU))));  in fsquare_fsquare_()
258 	b0_ = ((b0) + (((u128)(19) * (((u64)(((b4) >> (51))))))));  in fsquare_fsquare_()
263 	i1 = output[1];  in fsquare_fsquare_()
267 	output[1] = i1_;  in fsquare_fsquare_()
275 	for (i = 1; i < count1; ++i)  in fsquare_fsquare_times_()
307 	fsquare_fsquare_times(a0, z, 1);  in crecip_crecip()
311 	fsquare_fsquare_times(t00, a0, 1);  in crecip_crecip()
341 	a[1] += b[1];  in fsum()
354 	u64 b4;  in fdifference()  local
357 	b1 = tmp[1];  in fdifference()
360 	b4 = tmp[4];  in fdifference()
362 	tmp[1] = b1 + 0x3ffffffffffff8LLU;  in fdifference()
365 	tmp[4] = b4 + 0x3ffffffffffff8LLU;  in fdifference()
372 		u64 xi = a[1];  in fdifference()
373 		u64 yi = tmp[1];  in fdifference()
374 		a[1] = yi - xi;  in fdifference()
396 	u128 b4;  in fscalar()  local
405 		u64 xi = b[1];  in fscalar()
406 		tmp[1] = ((u128)(xi) * (s));  in fscalar()
421 	b4 = tmp[4];  in fscalar()
423 	b4_ = ((b4) & (((u128)(0x7ffffffffffffLLU))));  in fscalar()
424 	b0_ = ((b0) + (((u128)(19) * (((u64)(((b4) >> (51))))))));  in fscalar()
443 	u32 i = ctr - 1;  in point_swap_conditional_step()
459 	point_swap_conditional_step(a, b, swap1, 1);  in point_swap_conditional5()
518 		fsquare_fsquare_times(x3, xxprime, 1);  in addanddouble_fmonty()
519 		fsquare_fsquare_times(zzzprime, zzprime, 1);  in addanddouble_fmonty()
521 		fsquare_fsquare_times(xx0, x, 1);  in addanddouble_fmonty()
522 		fsquare_fsquare_times(zz0, z, 1);  in addanddouble_fmonty()
559 	byt1 = byt << 1;  in ladder_smallloop_cmult_small_loop_double_step()
594 	nq[0] = 1;  in ladder_cmult()
614 	output3 = i3 >> 1 & 0x7ffffffffffffLLU;  in format_fexpand()
617 	output[1] = output1;  in format_fexpand()
626 	u64 t1 = input[1];  in format_fcontract_first_carry_pass()
639 	input[1] = t1__;  in format_fcontract_first_carry_pass()
654 	u64 t1 = input[1];  in format_fcontract_second_carry_pass()
667 	input[1] = t1__;  in format_fcontract_second_carry_pass()
682 	i1 = input[1];  in format_fcontract_second_carry_full()
686 	input[1] = i1_;  in format_fcontract_second_carry_full()
692 	u64 a1 = input[1];  in format_fcontract_trim()
708 	input[1] = a1_;  in format_fcontract_trim()
717 	u64 t1 = input[1];  in format_fcontract_store()
764 	z[0] = 1;  in curve25519_generic()
776 			x[0] = 1;  in curve25519_generic()