455     fe_loose t;  in x25519_ge_frombytes_vartime()  local
456     fe_neg(&t, &h->X);  in x25519_ge_frombytes_vartime()
457     fe_carry(&h->X, &t);  in x25519_ge_frombytes_vartime()
639   ge_p1p1 t;  in ge_double_scalarmult_vartime()  local
648   ge_p3_dbl(&t, A);  in ge_double_scalarmult_vartime()
649   x25519_ge_p1p1_to_p3(&A2, &t);  in ge_double_scalarmult_vartime()
650   x25519_ge_add(&t, &A2, &Ai[0]);  in ge_double_scalarmult_vartime()
651   x25519_ge_p1p1_to_p3(&u, &t);  in ge_double_scalarmult_vartime()
653   x25519_ge_add(&t, &A2, &Ai[1]);  in ge_double_scalarmult_vartime()
654   x25519_ge_p1p1_to_p3(&u, &t);  in ge_double_scalarmult_vartime()
656   x25519_ge_add(&t, &A2, &Ai[2]);  in ge_double_scalarmult_vartime()
657   x25519_ge_p1p1_to_p3(&u, &t);  in ge_double_scalarmult_vartime()
659   x25519_ge_add(&t, &A2, &Ai[3]);  in ge_double_scalarmult_vartime()
660   x25519_ge_p1p1_to_p3(&u, &t);  in ge_double_scalarmult_vartime()
662   x25519_ge_add(&t, &A2, &Ai[4]);  in ge_double_scalarmult_vartime()
663   x25519_ge_p1p1_to_p3(&u, &t);  in ge_double_scalarmult_vartime()
665   x25519_ge_add(&t, &A2, &Ai[5]);  in ge_double_scalarmult_vartime()
666   x25519_ge_p1p1_to_p3(&u, &t);  in ge_double_scalarmult_vartime()
668   x25519_ge_add(&t, &A2, &Ai[6]);  in ge_double_scalarmult_vartime()
669   x25519_ge_p1p1_to_p3(&u, &t);  in ge_double_scalarmult_vartime()
681     ge_p2_dbl(&t, r);  in ge_double_scalarmult_vartime()
684       x25519_ge_p1p1_to_p3(&u, &t);  in ge_double_scalarmult_vartime()
685       x25519_ge_add(&t, &u, &Ai[aslide[i] / 2]);  in ge_double_scalarmult_vartime()
687       x25519_ge_p1p1_to_p3(&u, &t);  in ge_double_scalarmult_vartime()
688       x25519_ge_sub(&t, &u, &Ai[(-aslide[i]) / 2]);  in ge_double_scalarmult_vartime()
692       x25519_ge_p1p1_to_p3(&u, &t);  in ge_double_scalarmult_vartime()
693       ge_madd(&t, &u, &Bi[bslide[i] / 2]);  in ge_double_scalarmult_vartime()
695       x25519_ge_p1p1_to_p3(&u, &t);  in ge_double_scalarmult_vartime()
696       ge_msub(&t, &u, &Bi[(-bslide[i]) / 2]);  in ge_double_scalarmult_vartime()
699     x25519_ge_p1p1_to_p2(r, &t);  in ge_double_scalarmult_vartime()
1060   fe_loose t;  in ED25519_verify()  local
1061   fe_neg(&t, &A.X);  in ED25519_verify()
1062   fe_carry(&A.X, &t);  in ED25519_verify()
1063   fe_neg(&t, &A.T);  in ED25519_verify()
1064   fe_carry(&A.T, &t);  in ED25519_verify()