969   int64_t s13 = 2097151 & (load_3(s + 34) >> 1);  in x25519_sc_reduce()  local
1000   s13 += s23 * 654183;  in x25519_sc_reduce()
1009   s13 -= s22 * 997805;  in x25519_sc_reduce()
1018   s13 += s21 * 136657;  in x25519_sc_reduce()
1027   s13 -= s20 * 683901;  in x25519_sc_reduce()
1056   s13 += carry12;  in x25519_sc_reduce()
1074   carry13 = (s13 + (1 << 20)) >> 21;  in x25519_sc_reduce()
1076   s13 -= int64_lshift21(carry13);  in x25519_sc_reduce()
1113   s1 += s13 * 666643;  in x25519_sc_reduce()
1114   s2 += s13 * 470296;  in x25519_sc_reduce()
1115   s3 += s13 * 654183;  in x25519_sc_reduce()
1116   s4 -= s13 * 997805;  in x25519_sc_reduce()
1117   s5 += s13 * 136657;  in x25519_sc_reduce()
1118   s6 -= s13 * 683901;  in x25519_sc_reduce()
1119   s13 = 0;  in x25519_sc_reduce()
1347   int64_t s13;  in sc_muladd()  local
1401   s13 = a2 * b11 + a3 * b10 + a4 * b9 + a5 * b8 + a6 * b7 + a7 * b6 + a8 * b5 +  in sc_muladd()
1435   s13 += carry12;  in sc_muladd()
1471   carry13 = (s13 + (1 << 20)) >> 21;  in sc_muladd()
1473   s13 -= int64_lshift21(carry13);  in sc_muladd()
1489   s13 += s23 * 654183;  in sc_muladd()
1498   s13 -= s22 * 997805;  in sc_muladd()
1507   s13 += s21 * 136657;  in sc_muladd()
1516   s13 -= s20 * 683901;  in sc_muladd()
1545   s13 += carry12;  in sc_muladd()
1563   carry13 = (s13 + (1 << 20)) >> 21;  in sc_muladd()
1565   s13 -= int64_lshift21(carry13);  in sc_muladd()
1602   s1 += s13 * 666643;  in sc_muladd()
1603   s2 += s13 * 470296;  in sc_muladd()
1604   s3 += s13 * 654183;  in sc_muladd()
1605   s4 -= s13 * 997805;  in sc_muladd()
1606   s5 += s13 * 136657;  in sc_muladd()
1607   s6 -= s13 * 683901;  in sc_muladd()
1608   s13 = 0;  in sc_muladd()