1102   int64_t carry12;  in x25519_sc_reduce()  local
1165   carry12 = (s12 + (1 << 20)) >> 21;  in x25519_sc_reduce()
1166   s13 += carry12;  in x25519_sc_reduce()
1167   s12 -= int64_lshift21(carry12);  in x25519_sc_reduce()
1480   int64_t carry12;  in sc_muladd()  local
1544   carry12 = (s12 + (1 << 20)) >> 21;  in sc_muladd()
1545   s13 += carry12;  in sc_muladd()
1546   s12 -= int64_lshift21(carry12);  in sc_muladd()
1654   carry12 = (s12 + (1 << 20)) >> 21;  in sc_muladd()
1655   s13 += carry12;  in sc_muladd()
1656   s12 -= int64_lshift21(carry12);  in sc_muladd()