820     int64_t carry7;  in fe_frombytes()  local
828     carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_frombytes()
1198     int64_t carry7;  in fe_mul()  local
1229     carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_mul()
1372     int64_t carry7;  in fe_sq()  local
1386     carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_sq()
1681     int64_t carry7;  in fe_sq2()  local
1706     carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_sq2()
4349     int64_t carry7;  in fe_mul121666()  local
4357     carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_mul121666()
4658     int64_t carry7;  in x25519_sc_reduce()  local
4736     carry7 = (s7 + (1 << 20)) >> 21;  in x25519_sc_reduce()
4737     s8  += carry7;  in x25519_sc_reduce()
4738     s7  -= carry7 * (1 << 21);  in x25519_sc_reduce()
4828     carry7 = (s7 + (1 << 20)) >> 21;  in x25519_sc_reduce()
4829     s8  += carry7;  in x25519_sc_reduce()
4830     s7  -= carry7 * (1 << 21);  in x25519_sc_reduce()
4867     carry7 = s7 >> 21;  in x25519_sc_reduce()
4868     s8  += carry7;  in x25519_sc_reduce()
4869     s7  -= carry7 * (1 << 21);  in x25519_sc_reduce()
4912     carry7 = s7 >> 21;  in x25519_sc_reduce()
4913     s8  += carry7;  in x25519_sc_reduce()
4914     s7  -= carry7 * (1 << 21);  in x25519_sc_reduce()
5039     int64_t carry7;  in sc_muladd()  local
5127     carry7 = (s7 + (1 << 20)) >> 21;  in sc_muladd()
5128     s8  += carry7;  in sc_muladd()
5129     s7  -= carry7 * (1 << 21);  in sc_muladd()
5219     carry7 = (s7 + (1 << 20)) >> 21;  in sc_muladd()
5220     s8  += carry7;  in sc_muladd()
5221     s7  -= carry7 * (1 << 21);  in sc_muladd()
5311     carry7 = (s7 + (1 << 20)) >> 21;  in sc_muladd()
5312     s8  += carry7;  in sc_muladd()
5313     s7  -= carry7 * (1 << 21);  in sc_muladd()
5350     carry7 = s7 >> 21;  in sc_muladd()
5351     s8  += carry7;  in sc_muladd()
5352     s7  -= carry7 * (1 << 21);  in sc_muladd()
5395     carry7 = s7 >> 21;  in sc_muladd()
5396     s8  += carry7;  in sc_muladd()
5397     s7  -= carry7 * (1 << 21);  in sc_muladd()