211 	uECC_word_t carry = 0;  in uECC_vli_add()  local
214 		uECC_word_t sum = left[i] + right[i] + carry;  in uECC_vli_add()
216 		carry = cond_set(val, carry, (sum != left[i]));  in uECC_vli_add()
219 	return carry;  in uECC_vli_add()
235 	uECC_word_t carry = 0;  in uECC_vli_rshift1()  local
240 		*vli = (temp >> 1) | carry;  in uECC_vli_rshift1()
241 		carry = temp << (uECC_WORD_BITS - 1);  in uECC_vli_rshift1()
298 	uECC_word_t carry = uECC_vli_add(result, left, right, num_words);  in uECC_vli_modAdd()  local
299 	if (carry || uECC_vli_cmp_unsafe(mod, result, num_words) != 1) {  in uECC_vli_modAdd()
333 	uECC_word_t carry = 0;  in uECC_vli_mmod()  local
337 			mod_multiple[word_shift + index] = (mod[index] << bit_shift) | carry;  in uECC_vli_mmod()
338 			carry = mod[index] >> (uECC_WORD_BITS - bit_shift);  in uECC_vli_mmod()
397 	uECC_word_t carry = 0;  in vli_modInv_update()  local
400 		carry = uECC_vli_add(uv, uv, mod, num_words);  in vli_modInv_update()
403 	if (carry) {  in vli_modInv_update()
524 	int carry;  in vli_mmod_fast_secp256r1()  local
536 	carry = uECC_vli_add(tmp, tmp, tmp, NUM_ECC_WORDS);  in vli_mmod_fast_secp256r1()
537 	carry += uECC_vli_add(result, result, tmp, NUM_ECC_WORDS);  in vli_mmod_fast_secp256r1()
545 	carry += uECC_vli_add(tmp, tmp, tmp, NUM_ECC_WORDS);  in vli_mmod_fast_secp256r1()
546 	carry += uECC_vli_add(result, result, tmp, NUM_ECC_WORDS);  in vli_mmod_fast_secp256r1()
555   	carry += uECC_vli_add(result, result, tmp, NUM_ECC_WORDS);  in vli_mmod_fast_secp256r1()
566 	carry += uECC_vli_add(result, result, tmp, NUM_ECC_WORDS);  in vli_mmod_fast_secp256r1()
575 	carry -= uECC_vli_sub(result, result, tmp, NUM_ECC_WORDS);  in vli_mmod_fast_secp256r1()
585 	carry -= uECC_vli_sub(result, result, tmp, NUM_ECC_WORDS);  in vli_mmod_fast_secp256r1()
596 	carry -= uECC_vli_sub(result, result, tmp, NUM_ECC_WORDS);  in vli_mmod_fast_secp256r1()
607 	carry -= uECC_vli_sub(result, result, tmp, NUM_ECC_WORDS);  in vli_mmod_fast_secp256r1()
609 	if (carry < 0) {  in vli_mmod_fast_secp256r1()
611 			carry += uECC_vli_add(result, result, curve_secp256r1.p, NUM_ECC_WORDS);  in vli_mmod_fast_secp256r1()
613 		while (carry < 0);  in vli_mmod_fast_secp256r1()
615 		while (carry ||   in vli_mmod_fast_secp256r1()
617 			carry -= uECC_vli_sub(result, result, curve_secp256r1.p, NUM_ECC_WORDS);  in vli_mmod_fast_secp256r1()
782 	uECC_word_t carry = uECC_vli_add(k0, k, curve->n, num_n_words) ||  in regularize_k()  local
788 	return carry;  in regularize_k()
799 	uECC_word_t carry;  in EccPoint_compute_public_key()  local
803 	carry = regularize_k(private_key, tmp1, tmp2, curve);  in EccPoint_compute_public_key()
805 	EccPoint_mult(result, curve->G, p2[!carry], 0, curve->num_n_bits + 1, curve);  in EccPoint_compute_public_key()