810     int64_t carry7;  in fe_frombytes()  local
818     carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_frombytes()
1188     int64_t carry7;  in fe_mul()  local
1219     carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_mul()
1362     int64_t carry7;  in fe_sq()  local
1376     carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_sq()
1671     int64_t carry7;  in fe_sq2()  local
1696     carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_sq2()
4339     int64_t carry7;  in fe_mul121666()  local
4347     carry7 = h7 + (1 << 24); h8 += carry7 >> 25; h7 -= carry7 & kTop39Bits;  in fe_mul121666()
4648     int64_t carry7;  in x25519_sc_reduce()  local
4726     carry7 = (s7 + (1 << 20)) >> 21;  in x25519_sc_reduce()
4727     s8  += carry7;  in x25519_sc_reduce()
4728     s7  -= carry7 * (1 << 21);  in x25519_sc_reduce()
4818     carry7 = (s7 + (1 << 20)) >> 21;  in x25519_sc_reduce()
4819     s8  += carry7;  in x25519_sc_reduce()
4820     s7  -= carry7 * (1 << 21);  in x25519_sc_reduce()
4857     carry7 = s7 >> 21;  in x25519_sc_reduce()
4858     s8  += carry7;  in x25519_sc_reduce()
4859     s7  -= carry7 * (1 << 21);  in x25519_sc_reduce()
4902     carry7 = s7 >> 21;  in x25519_sc_reduce()
4903     s8  += carry7;  in x25519_sc_reduce()
4904     s7  -= carry7 * (1 << 21);  in x25519_sc_reduce()
5029     int64_t carry7;  in sc_muladd()  local
5117     carry7 = (s7 + (1 << 20)) >> 21;  in sc_muladd()
5118     s8  += carry7;  in sc_muladd()
5119     s7  -= carry7 * (1 << 21);  in sc_muladd()
5209     carry7 = (s7 + (1 << 20)) >> 21;  in sc_muladd()
5210     s8  += carry7;  in sc_muladd()
5211     s7  -= carry7 * (1 << 21);  in sc_muladd()
5301     carry7 = (s7 + (1 << 20)) >> 21;  in sc_muladd()
5302     s8  += carry7;  in sc_muladd()
5303     s7  -= carry7 * (1 << 21);  in sc_muladd()
5340     carry7 = s7 >> 21;  in sc_muladd()
5341     s8  += carry7;  in sc_muladd()
5342     s7  -= carry7 * (1 << 21);  in sc_muladd()
5385     carry7 = s7 >> 21;  in sc_muladd()
5386     s8  += carry7;  in sc_muladd()
5387     s7  -= carry7 * (1 << 21);  in sc_muladd()