3788   int64_t s9 = 2097151 & (load_4(s + 23) >> 5);  in sc_reduce()  local
3837   s9 += s21 * 666643;  in sc_reduce()
3846   s9 += s20 * 470296;  in sc_reduce()
3855   s9 += s19 * 654183;  in sc_reduce()
3864   s9 -= s18 * 997805;  in sc_reduce()
3873   s9 += carry8;  in sc_reduce()
3891   carry9 = (s9 + (1 << 20)) >> 21;  in sc_reduce()
3893   s9 -= carry9 << 21;  in sc_reduce()
3908   s9 += s17 * 136657;  in sc_reduce()
3917   s9 -= s16 * 683901;  in sc_reduce()
3965   s9 += carry8;  in sc_reduce()
3983   carry9 = (s9 + (1 << 20)) >> 21;  in sc_reduce()
3985   s9 -= carry9 << 21;  in sc_reduce()
4023   s9 += carry8;  in sc_reduce()
4025   carry9 = s9 >> 21;  in sc_reduce()
4027   s9 -= carry9 << 21;  in sc_reduce()
4068   s9 += carry8;  in sc_reduce()
4070   carry9 = s9 >> 21;  in sc_reduce()
4072   s9 -= carry9 << 21;  in sc_reduce()
4100   s[23] = (s8 >> 16) | (s9 << 5);  in sc_reduce()
4101   s[24] = s9 >> 3;  in sc_reduce()
4102   s[25] = s9 >> 11;  in sc_reduce()
4103   s[26] = (s9 >> 19) | (s10 << 2);  in sc_reduce()
4166   int64_t s9;  in sc_muladd()  local
4216   s9 = c9 + a0 * b9 + a1 * b8 + a2 * b7 + a3 * b6 + a4 * b5 + a5 * b4 +  in sc_muladd()
4252   s9 += carry8;  in sc_muladd()
4288   carry9 = (s9 + (1 << 20)) >> 21;  in sc_muladd()
4290   s9 -= carry9 << 21;  in sc_muladd()
4326   s9 += s21 * 666643;  in sc_muladd()
4335   s9 += s20 * 470296;  in sc_muladd()
4344   s9 += s19 * 654183;  in sc_muladd()
4353   s9 -= s18 * 997805;  in sc_muladd()
4362   s9 += carry8;  in sc_muladd()
4380   carry9 = (s9 + (1 << 20)) >> 21;  in sc_muladd()
4382   s9 -= carry9 << 21;  in sc_muladd()
4397   s9 += s17 * 136657;  in sc_muladd()
4406   s9 -= s16 * 683901;  in sc_muladd()
4454   s9 += carry8;  in sc_muladd()
4472   carry9 = (s9 + (1 << 20)) >> 21;  in sc_muladd()
4474   s9 -= carry9 << 21;  in sc_muladd()
4512   s9 += carry8;  in sc_muladd()
4514   carry9 = s9 >> 21;  in sc_muladd()
4516   s9 -= carry9 << 21;  in sc_muladd()
4557   s9 += carry8;  in sc_muladd()
4559   carry9 = s9 >> 21;  in sc_muladd()
4561   s9 -= carry9 << 21;  in sc_muladd()
4589   s[23] = (s8 >> 16) | (s9 << 5);  in sc_muladd()
4590   s[24] = s9 >> 3;  in sc_muladd()
4591   s[25] = s9 >> 11;  in sc_muladd()
4592   s[26] = (s9 >> 19) | (s10 << 2);  in sc_muladd()