65   int64_t h6 = load_3(s + 20) << 7;  in fe_frombytes()  local
83   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;  in fe_frombytes()
89   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_frombytes()
98   h[6] = h6;  in fe_frombytes()
133   int32_t h6 = h[6];  in fe_tobytes()  local
146   q = (h6 + q) >> 26;  in fe_tobytes()
160   h6 += h5 >> 25; h5 &= kBottom25Bits;  in fe_tobytes()
161   h7 += h6 >> 26; h6 &= kBottom26Bits;  in fe_tobytes()
191   s[19] = (h5 >> 24) | ((uint32_t)(h6) << 1);  in fe_tobytes()
192   s[20] = h6 >> 7;  in fe_tobytes()
193   s[21] = h6 >> 15;  in fe_tobytes()
194   s[22] = (h6 >> 23) | ((uint32_t)(h7) << 3);  in fe_tobytes()
420   int64_t h6 = f0g6+f1g5_2 +f2g4   +f3g3_2 +f4g2   +f5g1_2 +f6g0   +f7g9_38+f8g8_19+f9g7_38;  in fe_mul()  local
448   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;  in fe_mul()
455   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_mul()
489   h[6] = h6;  in fe_mul()
590   int64_t h6 = f0f6_2+f1f5_4 +f2f4_2 +f3f3_2 +f7f9_76+f8f8_19;  in fe_sq()  local
609   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;  in fe_sq()
612   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_sq()
630   h[6] = h6;  in fe_sq()
841   int64_t h6 = f0f6_2+f1f5_4 +f2f4_2 +f3f3_2 +f7f9_76+f8f8_19;  in fe_sq2()  local
862   h6 += h6;  in fe_sq2()
871   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;  in fe_sq2()
874   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_sq2()
892   h[6] = h6;  in fe_sq2()
4759   int64_t h6 = f6 * (int64_t) 121666;  in fe_mul121666()  local
4777   carry5 = h5 + (1 << 24); h6 += carry5 >> 25; h5 -= carry5 & kTop39Bits;  in fe_mul121666()
4783   carry6 = h6 + (1 << 25); h7 += carry6 >> 26; h6 -= carry6 & kTop38Bits;  in fe_mul121666()
4792   h[6] = h6;  in fe_mul121666()