196   uint32_t scalar =  in Shift()  local
200     scalar += (uint32_t)word[0];  in Shift()
201     word[0] = (uint8_t)(scalar & 0x7Fu);  in Shift()
209     scalar += (uint32_t)((word[1] & 0x3Fu) | ((word[0] & 0x1Fu) << 6u));  in Shift()
210     word[0] = (uint8_t)(0xC0 | ((scalar >> 6u) & 0x1F));  in Shift()
211     word[1] = (uint8_t)((word[1] & 0xC0) | (scalar & 0x3F));  in Shift()
216     scalar += (uint32_t)((word[2] & 0x3Fu) | ((word[1] & 0x3Fu) << 6u) |  in Shift()
218     word[0] = (uint8_t)(0xE0 | ((scalar >> 12u) & 0x0F));  in Shift()
219     word[1] = (uint8_t)((word[1] & 0xC0) | ((scalar >> 6u) & 0x3F));  in Shift()
220     word[2] = (uint8_t)((word[2] & 0xC0) | (scalar & 0x3F));  in Shift()
225     scalar += (uint32_t)((word[3] & 0x3Fu) | ((word[2] & 0x3Fu) << 6u) |  in Shift()
227     word[0] = (uint8_t)(0xF0 | ((scalar >> 18u) & 0x07));  in Shift()
228     word[1] = (uint8_t)((word[1] & 0xC0) | ((scalar >> 12u) & 0x3F));  in Shift()
229     word[2] = (uint8_t)((word[2] & 0xC0) | ((scalar >> 6u) & 0x3F));  in Shift()
230     word[3] = (uint8_t)((word[3] & 0xC0) | (scalar & 0x3F));  in Shift()