196 void fe25519_mul(fe25519 *r, const fe25519 *x, const fe25519 *y)  in fe25519_mul()  function
215   fe25519_mul(r, x, x);  in fe25519_square()
235 	/* 9 */ fe25519_mul(&z9,&t0,x);  in fe25519_invert()
236 	/* 11 */ fe25519_mul(&z11,&z9,&z2);  in fe25519_invert()
238 	/* 2^5 - 2^0 = 31 */ fe25519_mul(&z2_5_0,&t0,&z9);  in fe25519_invert()
245 	/* 2^10 - 2^0 */ fe25519_mul(&z2_10_0,&t0,&z2_5_0);  in fe25519_invert()
250 	/* 2^20 - 2^0 */ fe25519_mul(&z2_20_0,&t1,&z2_10_0);  in fe25519_invert()
255 	/* 2^40 - 2^0 */ fe25519_mul(&t0,&t1,&z2_20_0);  in fe25519_invert()
260 	/* 2^50 - 2^0 */ fe25519_mul(&z2_50_0,&t0,&z2_10_0);  in fe25519_invert()
265 	/* 2^100 - 2^0 */ fe25519_mul(&z2_100_0,&t1,&z2_50_0);  in fe25519_invert()
270 	/* 2^200 - 2^0 */ fe25519_mul(&t1,&t0,&z2_100_0);  in fe25519_invert()
275 	/* 2^250 - 2^0 */ fe25519_mul(&t0,&t1,&z2_50_0);  in fe25519_invert()
282 	/* 2^255 - 21 */ fe25519_mul(r,&t1,&z11);  in fe25519_invert()
301 	/* 9 */ fe25519_mul(&z9,&t,x);  in fe25519_pow2523()
302 	/* 11 */ fe25519_mul(&z11,&z9,&z2);  in fe25519_pow2523()
304 	/* 2^5 - 2^0 = 31 */ fe25519_mul(&z2_5_0,&t,&z9);  in fe25519_pow2523()
308 	/* 2^10 - 2^0 */ fe25519_mul(&z2_10_0,&t,&z2_5_0);  in fe25519_pow2523()
312 	/* 2^20 - 2^0 */ fe25519_mul(&z2_20_0,&t,&z2_10_0);  in fe25519_pow2523()
316 	/* 2^40 - 2^0 */ fe25519_mul(&t,&t,&z2_20_0);  in fe25519_pow2523()
320 	/* 2^50 - 2^0 */ fe25519_mul(&z2_50_0,&t,&z2_10_0);  in fe25519_pow2523()
324 	/* 2^100 - 2^0 */ fe25519_mul(&z2_100_0,&t,&z2_50_0);  in fe25519_pow2523()
328 	/* 2^200 - 2^0 */ fe25519_mul(&t,&t,&z2_100_0);  in fe25519_pow2523()
332 	/* 2^250 - 2^0 */ fe25519_mul(&t,&t,&z2_50_0);  in fe25519_pow2523()
336 	/* 2^252 - 3 */ fe25519_mul(r,&t,x);  in fe25519_pow2523()