245   int i;  in fe_loose_invert()  local
249   for (i = 1; i < 2; ++i) {  in fe_loose_invert()
257   for (i = 1; i < 5; ++i) {  in fe_loose_invert()
262   for (i = 1; i < 10; ++i) {  in fe_loose_invert()
267   for (i = 1; i < 20; ++i) {  in fe_loose_invert()
272   for (i = 1; i < 10; ++i) {  in fe_loose_invert()
277   for (i = 1; i < 50; ++i) {  in fe_loose_invert()
282   for (i = 1; i < 100; ++i) {  in fe_loose_invert()
287   for (i = 1; i < 50; ++i) {  in fe_loose_invert()
292   for (i = 1; i < 5; ++i) {  in fe_loose_invert()
309   for (size_t i = 0; i < len; i++) {  in CRYPTO_memcmp()  local
310     x |= a[i] ^ b[i];  in CRYPTO_memcmp()
350   int i;  in fe_pow22523()  local
354   for (i = 1; i < 2; ++i) {  in fe_pow22523()
362   for (i = 1; i < 5; ++i) {  in fe_pow22523()
367   for (i = 1; i < 10; ++i) {  in fe_pow22523()
372   for (i = 1; i < 20; ++i) {  in fe_pow22523()
377   for (i = 1; i < 10; ++i) {  in fe_pow22523()
382   for (i = 1; i < 50; ++i) {  in fe_pow22523()
387   for (i = 1; i < 100; ++i) {  in fe_pow22523()
392   for (i = 1; i < 50; ++i) {  in fe_pow22523()
397   for (i = 1; i < 2; ++i) {  in fe_pow22523()
597   int i;  in slide()  local
601   for (i = 0; i < 256; ++i) {  in slide()
602     r[i] = 1 & (a[i >> 3] >> (i & 7));  in slide()
605   for (i = 0; i < 256; ++i) {  in slide()
606     if (r[i]) {  in slide()
607       for (b = 1; b <= 6 && i + b < 256; ++b) {  in slide()
608         if (r[i + b]) {  in slide()
609           if (r[i] + (r[i + b] << b) <= 15) {  in slide()
610             r[i] += r[i + b] << b;  in slide()
611             r[i + b] = 0;  in slide()
612           } else if (r[i] - (r[i + b] << b) >= -15) {  in slide()
613             r[i] -= r[i + b] << b;  in slide()
614             for (k = i + b; k < 256; ++k) {  in slide()
642   int i;  in ge_double_scalarmult_vartime()  local
674   for (i = 255; i >= 0; --i) {  in ge_double_scalarmult_vartime()
675     if (aslide[i] || bslide[i]) {  in ge_double_scalarmult_vartime()
680   for (; i >= 0; --i) {  in ge_double_scalarmult_vartime()
683     if (aslide[i] > 0) {  in ge_double_scalarmult_vartime()
685       x25519_ge_add(&t, &u, &Ai[aslide[i] / 2]);  in ge_double_scalarmult_vartime()
686     } else if (aslide[i] < 0) {  in ge_double_scalarmult_vartime()
688       x25519_ge_sub(&t, &u, &Ai[(-aslide[i]) / 2]);  in ge_double_scalarmult_vartime()
691     if (bslide[i] > 0) {  in ge_double_scalarmult_vartime()
693       ge_madd(&t, &u, &Bi[bslide[i] / 2]);  in ge_double_scalarmult_vartime()
694     } else if (bslide[i] < 0) {  in ge_double_scalarmult_vartime()
696       ge_msub(&t, &u, &Bi[(-bslide[i]) / 2]);  in ge_double_scalarmult_vartime()
1086   for (size_t i = 3;; i--) {  in ED25519_verify()  local
1087     if (scopy.u64[i] > kOrder[i]) {  in ED25519_verify()
1089     } else if (scopy.u64[i] < kOrder[i]) {  in ED25519_verify()
1091     } else if (i == 0) {  in ED25519_verify()
1152   for (unsigned i = 0; i < FE_NUM_LIMBS; i++) {  in fe_cswap()  local
1153     fe_limb_t x = f->v[i] ^ g->v[i];  in fe_cswap()
1155     f->v[i] ^= x;  in fe_cswap()
1156     g->v[i] ^= x;  in fe_cswap()