4656     int64_t carry15;  in x25519_sc_reduce()  local
4738     carry15 = (s15 + (1 << 20)) >> 21;  in x25519_sc_reduce()
4739     s16 += carry15;  in x25519_sc_reduce()
4740     s15 -= carry15 * (1 << 21);  in x25519_sc_reduce()
5037     int64_t carry15;  in sc_muladd()  local
5129     carry15 = (s15 + (1 << 20)) >> 21;  in sc_muladd()
5130     s16 += carry15;  in sc_muladd()
5131     s15 -= carry15 * (1 << 21);  in sc_muladd()
5221     carry15 = (s15 + (1 << 20)) >> 21;  in sc_muladd()
5222     s16 += carry15;  in sc_muladd()
5223     s15 -= carry15 * (1 << 21);  in sc_muladd()