71 static p256_digit mulAdd(const p256_int* a,  in mulAdd()
72                          p256_digit b,  in mulAdd()
73                          p256_digit top,  in mulAdd()
74                          p256_digit* c) {  in mulAdd()
81     *c++ = (p256_digit)carry;  in mulAdd()
84   return top + (p256_digit)carry;  in mulAdd()
88 static p256_digit subTop(p256_digit top_a,  in subTop()
89                          const p256_digit* a,  in subTop()
90                          p256_digit top_c,  in subTop()
91                          p256_digit* c) {  in subTop()
98     *c++ = (p256_digit)borrow;  in subTop()
103   top_c = (p256_digit)borrow;  in subTop()
110 static p256_digit subM(const p256_int* MOD,  in subM()
111                        p256_digit top,  in subM()
112                        p256_digit* c,  in subM()
113                        p256_digit mask) {  in subM()
119     *c++ = (p256_digit)borrow;  in subM()
122   return top + (p256_digit)borrow;  in subM()
127 static p256_digit addM(const p256_int* MOD,  in addM()
128                        p256_digit top,  in addM()
129                        p256_digit* c,  in addM()
130                        p256_digit mask) {  in addM()
136     *c++ = (p256_digit)carry;  in addM()
139   return top + (p256_digit)carry;  in addM()
145                  const p256_digit top_b,  in p256_modmul()
148   p256_digit tmp[P256_NDIGITS * 2 + 1] = { 0 };  in p256_modmul()
149   p256_digit top = 0;  in p256_modmul()
164     p256_digit reducer[P256_NDIGITS] = { 0 };  in p256_modmul()
165     p256_digit top_reducer;  in p256_modmul()
194 p256_digit p256_shl(const p256_int* a, int n, p256_int* b) {  in p256_shl()
196   p256_digit top = P256_DIGIT(a, P256_NDIGITS - 1);  in p256_shl()
200     p256_digit accu = (P256_DIGIT(a, i) << n);  in p256_shl()
206   top = (p256_digit)((((p256_ddigit)top) << n) >> P256_BITSPERDIGIT);  in p256_shl()
216     p256_digit accu = (P256_DIGIT(a, i) >> n);  in p256_shr()
227     p256_digit accu = (P256_DIGIT(a, i) >> 1);  in p256_shr1()
239   p256_digit notzero = 0;  in p256_cmp()
245     notzero |= !!((p256_digit)borrow);  in p256_cmp()
258     if (c) P256_DIGIT(c, i) = (p256_digit)borrow;  in p256_sub()
271     if (c) P256_DIGIT(c, i) = (p256_digit)carry;  in p256_add()
278 int p256_add_d(const p256_int* a, p256_digit d, p256_int* b) {  in p256_add_d()
284     if (b) P256_DIGIT(b, i) = (p256_digit)carry;  in p256_add_d()