460   fe_mul_ttt(&h->T, &h->X, &h->Y);  in x25519_ge_frombytes_vartime()
482   fe_mul_ltt(&r->T2d, &p->T, &d2);  in x25519_ge_p3_to_cached()
487   fe_mul_tll(&r->X, &p->X, &p->T);  in x25519_ge_p1p1_to_p2()
489   fe_mul_tll(&r->Z, &p->Z, &p->T);  in x25519_ge_p1p1_to_p2()
494   fe_mul_tll(&r->X, &p->X, &p->T);  in x25519_ge_p1p1_to_p3()
496   fe_mul_tll(&r->Z, &p->Z, &p->T);  in x25519_ge_p1p1_to_p3()
497   fe_mul_tll(&r->T, &p->X, &p->Y);  in x25519_ge_p1p1_to_p3()
516   fe_sub(&r->T, &trT, &trZ);  in ge_p2_dbl()
534   fe_mul_tlt(&trT, &q->xy2d, &p->T);  in ge_madd()
535   fe_add(&r->T, &p->Z, &p->Z);  in ge_madd()
538   fe_carry(&trZ, &r->T);  in ge_madd()
540   fe_sub(&r->T, &trZ, &trT);  in ge_madd()
551   fe_mul_tlt(&trT, &q->xy2d, &p->T);  in ge_msub()
552   fe_add(&r->T, &p->Z, &p->Z);  in ge_msub()
555   fe_carry(&trZ, &r->T);  in ge_msub()
557   fe_add(&r->T, &trZ, &trT);  in ge_msub()
568   fe_mul_tlt(&trT, &q->T2d, &p->T);  in x25519_ge_add()
570   fe_add(&r->T, &trX, &trX);  in x25519_ge_add()
573   fe_carry(&trZ, &r->T);  in x25519_ge_add()
575   fe_sub(&r->T, &trZ, &trT);  in x25519_ge_add()
586   fe_mul_tlt(&trT, &q->T2d, &p->T);  in x25519_ge_sub()
588   fe_add(&r->T, &trX, &trX);  in x25519_ge_sub()
591   fe_carry(&trZ, &r->T);  in x25519_ge_sub()
593   fe_add(&r->T, &trZ, &trT);  in x25519_ge_sub()
1063   fe_neg(&t, &A.T);  in ED25519_verify()
1064   fe_carry(&A.T, &t);  in ED25519_verify()