529 static void felem_mul(felem out, const felem in, const felem in2) {  in felem_mul()  function
616   felem_mul(ftmp, in, ftmp); /* 2^2 - 2^0 */  in felem_inv()
620   felem_mul(ftmp, ftmp, e2); /* 2^4 - 2^0 */  in felem_inv()
626   felem_mul(ftmp, ftmp, e4); /* 2^8 - 2^0 */  in felem_inv()
631   felem_mul(ftmp, ftmp, e8); /* 2^16 - 2^0 */  in felem_inv()
636   felem_mul(ftmp, ftmp, e16); /* 2^32 - 2^0 */  in felem_inv()
642   felem_mul(ftmp, ftmp, in); /* 2^64 - 2^32 + 2^0 */  in felem_inv()
647   felem_mul(ftmp2, e64, e32); /* 2^64 - 2^0 */  in felem_inv()
651   felem_mul(ftmp2, ftmp2, e16); /* 2^80 - 2^0 */  in felem_inv()
655   felem_mul(ftmp2, ftmp2, e8); /* 2^88 - 2^0 */  in felem_inv()
659   felem_mul(ftmp2, ftmp2, e4); /* 2^92 - 2^0 */  in felem_inv()
662   felem_mul(ftmp2, ftmp2, e2); /* 2^94 - 2^0 */  in felem_inv()
665   felem_mul(ftmp2, ftmp2, in); /* 2^96 - 3 */  in felem_inv()
667   felem_mul(out, ftmp2, ftmp); /* 2^256 - 2^224 + 2^192 + 2^96 - 3 */  in felem_inv()
810   felem_mul(beta, x, gamma);  in point_double()
814   felem_mul(alpha, tmp, tmp2);  in point_double()
828   felem_mul(tmp, alpha, tmp);  in point_double()
849   felem_mul(u2, x2, z1z1);  in point_add_mixed()
850   felem_mul(z1z1z1, z1, z1z1);  in point_add_mixed()
851   felem_mul(s2, y2, z1z1z1);  in point_add_mixed()
855   felem_mul(j, h, i);  in point_add_mixed()
858   felem_mul(v, x1, i);  in point_add_mixed()
860   felem_mul(z_out, tmp, h);  in point_add_mixed()
867   felem_mul(y_out, tmp, r);  in point_add_mixed()
868   felem_mul(tmp, y1, j);  in point_add_mixed()
886   felem_mul(u1, x1, z2z2);  in point_add()
893   felem_mul(z2z2z2, z2, z2z2);  in point_add()
894   felem_mul(s1, y1, z2z2z2);  in point_add()
896   felem_mul(u2, x2, z1z1);  in point_add()
897   felem_mul(z1z1z1, z1, z1z1);  in point_add()
898   felem_mul(s2, y2, z1z1z1);  in point_add()
902   felem_mul(j, h, i);  in point_add()
905   felem_mul(v, u1, i);  in point_add()
907   felem_mul(z_out, tmp, h);  in point_add()
914   felem_mul(y_out, tmp, r);  in point_add()
915   felem_mul(tmp, s1, j);  in point_add()
934   felem_mul(u1, x1, z2z2);  in point_add_or_double_vartime()
941   felem_mul(z2z2z2, z2, z2z2);  in point_add_or_double_vartime()
942   felem_mul(s1, y1, z2z2z2);  in point_add_or_double_vartime()
944   felem_mul(u2, x2, z1z1);  in point_add_or_double_vartime()
945   felem_mul(z1z1z1, z1, z1z1);  in point_add_or_double_vartime()
946   felem_mul(s2, y2, z1z1z1);  in point_add_or_double_vartime()
951   felem_mul(j, h, i);  in point_add_or_double_vartime()
959   felem_mul(v, u1, i);  in point_add_or_double_vartime()
961   felem_mul(z_out, tmp, h);  in point_add_or_double_vartime()
968   felem_mul(y_out, tmp, r);  in point_add_or_double_vartime()
969   felem_mul(tmp, s1, j);  in point_add_or_double_vartime()
1108   felem_mul(x_out, nx, z_inv_sq);  in point_to_affine()
1109   felem_mul(z_inv, z_inv, z_inv_sq);  in point_to_affine()
1110   felem_mul(y_out, ny, z_inv);  in point_to_affine()