1104   int64_t carry14;  in x25519_sc_reduce()  local
1168   carry14 = (s14 + (1 << 20)) >> 21;  in x25519_sc_reduce()
1169   s15 += carry14;  in x25519_sc_reduce()
1170   s14 -= int64_lshift21(carry14);  in x25519_sc_reduce()
1482   int64_t carry14;  in sc_muladd()  local
1547   carry14 = (s14 + (1 << 20)) >> 21;  in sc_muladd()
1548   s15 += carry14;  in sc_muladd()
1549   s14 -= int64_lshift21(carry14);  in sc_muladd()
1657   carry14 = (s14 + (1 << 20)) >> 21;  in sc_muladd()
1658   s15 += carry14;  in sc_muladd()
1659   s14 -= int64_lshift21(carry14);  in sc_muladd()