218 static void felem_sum(felem out, const felem in, const felem in2) {  in felem_sum()  argument
223     out[i] = in[i] + in2[i];  in felem_sum()
224     out[i] += carry;  in felem_sum()
225     carry = out[i] >> 29;  in felem_sum()
226     out[i] &= kBottom29Bits;  in felem_sum()
232     out[i] = in[i] + in2[i];  in felem_sum()
233     out[i] += carry;  in felem_sum()
234     carry = out[i] >> 28;  in felem_sum()
235     out[i] &= kBottom28Bits;  in felem_sum()
238   felem_reduce_carry(out, carry);  in felem_sum()
256 static void felem_diff(felem out, const felem in, const felem in2) {  in felem_diff()  argument
261     out[i] = in[i] - in2[i];  in felem_diff()
262     out[i] += zero31[i];  in felem_diff()
263     out[i] += carry;  in felem_diff()
264     carry = out[i] >> 29;  in felem_diff()
265     out[i] &= kBottom29Bits;  in felem_diff()
271     out[i] = in[i] - in2[i];  in felem_diff()
272     out[i] += zero31[i];  in felem_diff()
273     out[i] += carry;  in felem_diff()
274     carry = out[i] >> 28;  in felem_diff()
275     out[i] &= kBottom28Bits;  in felem_diff()
278   felem_reduce_carry(out, carry);  in felem_diff()
291 static void felem_reduce_degree(felem out, u64 tmp[17]) {  in felem_reduce_degree()  argument
455     out[i] = tmp2[i + 9];  in felem_reduce_degree()
456     out[i] += carry;  in felem_reduce_degree()
457     out[i] += (tmp2[i + 10] << 28) & kBottom29Bits;  in felem_reduce_degree()
458     carry = out[i] >> 29;  in felem_reduce_degree()
459     out[i] &= kBottom29Bits;  in felem_reduce_degree()
462     out[i] = tmp2[i + 9] >> 1;  in felem_reduce_degree()
463     out[i] += carry;  in felem_reduce_degree()
464     carry = out[i] >> 28;  in felem_reduce_degree()
465     out[i] &= kBottom28Bits;  in felem_reduce_degree()
468   out[8] = tmp2[17];  in felem_reduce_degree()
469   out[8] += carry;  in felem_reduce_degree()
470   carry = out[8] >> 29;  in felem_reduce_degree()
471   out[8] &= kBottom29Bits;  in felem_reduce_degree()
473   felem_reduce_carry(out, carry);  in felem_reduce_degree()
480 static void felem_square(felem out, const felem in) {  in felem_square()  argument
521   felem_reduce_degree(out, tmp);  in felem_square()
529 static void felem_mul(felem out, const felem in, const felem in2) {  in felem_mul()  argument
595   felem_reduce_degree(out, tmp);  in felem_mul()
598 static void felem_assign(felem out, const felem in) {  in felem_assign()  argument
599   memcpy(out, in, sizeof(felem));  in felem_assign()
609 static void felem_inv(felem out, const felem in) {  in felem_inv()  argument
667   felem_mul(out, ftmp2, ftmp); /* 2^256 - 2^224 + 2^192 + 2^96 - 3 */  in felem_inv()
674 static void felem_scalar_3(felem out) {  in felem_scalar_3()  argument
679     out[i] *= 3;  in felem_scalar_3()
680     out[i] += carry;  in felem_scalar_3()
681     carry = out[i] >> 29;  in felem_scalar_3()
682     out[i] &= kBottom29Bits;  in felem_scalar_3()
688     out[i] *= 3;  in felem_scalar_3()
689     out[i] += carry;  in felem_scalar_3()
690     carry = out[i] >> 28;  in felem_scalar_3()
691     out[i] &= kBottom28Bits;  in felem_scalar_3()
694   felem_reduce_carry(out, carry);  in felem_scalar_3()
701 static void felem_scalar_4(felem out) {  in felem_scalar_4()  argument
706     next_carry = out[i] >> 27;  in felem_scalar_4()
707     out[i] <<= 2;  in felem_scalar_4()
708     out[i] &= kBottom29Bits;  in felem_scalar_4()
709     out[i] += carry;  in felem_scalar_4()
710     carry = next_carry + (out[i] >> 29);  in felem_scalar_4()
711     out[i] &= kBottom29Bits;  in felem_scalar_4()
717     next_carry = out[i] >> 26;  in felem_scalar_4()
718     out[i] <<= 2;  in felem_scalar_4()
719     out[i] &= kBottom28Bits;  in felem_scalar_4()
720     out[i] += carry;  in felem_scalar_4()
721     carry = next_carry + (out[i] >> 28);  in felem_scalar_4()
722     out[i] &= kBottom28Bits;  in felem_scalar_4()
725   felem_reduce_carry(out, carry);  in felem_scalar_4()
732 static void felem_scalar_8(felem out) {  in felem_scalar_8()  argument
737     next_carry = out[i] >> 26;  in felem_scalar_8()
738     out[i] <<= 3;  in felem_scalar_8()
739     out[i] &= kBottom29Bits;  in felem_scalar_8()
740     out[i] += carry;  in felem_scalar_8()
741     carry = next_carry + (out[i] >> 29);  in felem_scalar_8()
742     out[i] &= kBottom29Bits;  in felem_scalar_8()
748     next_carry = out[i] >> 25;  in felem_scalar_8()
749     out[i] <<= 3;  in felem_scalar_8()
750     out[i] &= kBottom28Bits;  in felem_scalar_8()
751     out[i] += carry;  in felem_scalar_8()
752     carry = next_carry + (out[i] >> 28);  in felem_scalar_8()
753     out[i] &= kBottom28Bits;  in felem_scalar_8()
756   felem_reduce_carry(out, carry);  in felem_scalar_8()
977 static void copy_conditional(felem out, const felem in, limb mask) {  in copy_conditional()  argument
981     const limb tmp = mask & (in[i] ^ out[i]);  in copy_conditional()
982     out[i] ^= tmp;  in copy_conditional()
1179 static void to_montgomery(felem out, const p256_int* in) {  in to_montgomery()  argument
1188       out[i] = P256_DIGIT(&in_shifted, 0) & kBottom29Bits;  in to_montgomery()
1191       out[i] = P256_DIGIT(&in_shifted, 0) & kBottom28Bits;  in to_montgomery()
1200 static void from_montgomery(p256_int* out, const felem in) {  in from_montgomery()  argument
1217   p256_modmul(&SECP256r1_p, &kRInv, top, &result, out);  in from_montgomery()