116 _Static_assert(sizeof(fe) == sizeof(fe_limb_t) * FE_NUM_LIMBS,
119 static void fe_frombytes_strict(fe *h, const uint8_t s[32]) {  in fe_frombytes_strict()
126 static void fe_frombytes(fe *h, const uint8_t s[32]) {  in fe_frombytes()
133 static void fe_tobytes(uint8_t s[32], const fe *f) {  in fe_tobytes()
139 static void fe_0(fe *h) {  in fe_0()
141   mbedtls_platform_zeroize(h, sizeof(fe));  in fe_0()
143   _set(h, 0, sizeof(fe));  in fe_0()
148 static void fe_1(fe *h) {  in fe_1()
150   mbedtls_platform_zeroize(h, sizeof(fe));  in fe_1()
152   _set(h, 0, sizeof(fe));  in fe_1()
159 static void fe_add(fe_loose *h, const fe *f, const fe *g) {  in fe_add()
168 static void fe_sub(fe_loose *h, const fe *f, const fe *g) {  in fe_sub()
175 static void fe_carry(fe *h, const fe_loose* f) {  in fe_carry()
190 static void fe_mul_ltt(fe_loose *h, const fe *f, const fe *g) {  in fe_mul_ltt()
194 static void fe_mul_ttt(fe *h, const fe *f, const fe *g) {  in fe_mul_ttt()
198 static void fe_mul_tlt(fe *h, const fe_loose *f, const fe *g) {  in fe_mul_tlt()
202 static void fe_mul_ttl(fe *h, const fe *f, const fe_loose *g) {  in fe_mul_ttl()
206 static void fe_mul_tll(fe *h, const fe_loose *f, const fe_loose *g) {  in fe_mul_tll()
210 static void fe_sq_tl(fe *h, const fe_loose *f) {  in fe_sq_tl()
216 static void fe_sq_tt(fe *h, const fe *f) {  in fe_sq_tt()
223 static void fe_neg(fe_loose *h, const fe *f) {  in fe_neg()
230 static void fe_copy(fe *h, const fe *f) {  in fe_copy()
231   memmove(h, f, sizeof(fe));  in fe_copy()
234 static void fe_copy_lt(fe_loose *h, const fe *f) {  in fe_copy_lt()
236   _Static_assert(sizeof(fe_loose) == sizeof(fe), "fe and fe_loose mismatch");  in fe_copy_lt()
237   memmove(h, f, sizeof(fe));  in fe_copy_lt()
240 static void fe_loose_invert(fe *out, const fe_loose *z) {  in fe_loose_invert()
241   fe t0;  in fe_loose_invert()
242   fe t1;  in fe_loose_invert()
243   fe t2;  in fe_loose_invert()
244   fe t3;  in fe_loose_invert()
298 static void fe_invert(fe *out, const fe *z) {  in fe_invert()
319   fe tight;  in fe_isnonzero()
330 static int fe_isnegative(const fe *f) {  in fe_isnegative()
336 static void fe_sq2_tt(fe *h, const fe *f) {  in fe_sq2_tt()
346 static void fe_pow22523(fe *out, const fe *z) {  in fe_pow22523()
347   fe t0;  in fe_pow22523()
348   fe t1;  in fe_pow22523()
349   fe t2;  in fe_pow22523()
407   fe recip;  in x25519_ge_tobytes()
408   fe x;  in x25519_ge_tobytes()
409   fe y;  in x25519_ge_tobytes()
419   fe u;  in x25519_ge_frombytes_vartime()
421   fe v3;  in x25519_ge_frombytes_vartime()
422   fe vxx;  in x25519_ge_frombytes_vartime()
502   fe trX, trZ, trT;  in ge_p2_dbl()
503   fe t0;  in ge_p2_dbl()
528   fe trY, trZ, trT;  in ge_madd()
545   fe trY, trZ, trT;  in ge_msub()
562   fe trX, trY, trZ, trT;  in x25519_ge_add()
580   fe trX, trY, trZ, trT;  in x25519_ge_sub()
1150 static void fe_cswap(fe *f, fe *g, fe_limb_t b) {  in fe_cswap()
1220 static void fe_mul121666(fe *h, const fe_loose *f) {  in fe_mul121666()
1229   fe x1, x2, z2, x3, z3, tmp0, tmp1;  in x25519_scalar_mult_generic()