46   int i,rep;  in reduce_add_sub()  local
54     for(i=0;i<31;i++)  in reduce_add_sub()
56       t = r->v[i] >> 8;  in reduce_add_sub()
57       r->v[i+1] += t;  in reduce_add_sub()
58       r->v[i] &= 255;  in reduce_add_sub()
66   int i,rep;  in reduce_mul()  local
74     for(i=0;i<31;i++)  in reduce_mul()
76       t = r->v[i] >> 8;  in reduce_mul()
77       r->v[i+1] += t;  in reduce_mul()
78       r->v[i] &= 255;  in reduce_mul()
86   int i;  in fe25519_freeze()  local
88   for(i=30;i>0;i--)  in fe25519_freeze()
89     m &= equal(r->v[i],255);  in fe25519_freeze()
95   for(i=30;i>0;i--)  in fe25519_freeze()
96     r->v[i] -= m&255;  in fe25519_freeze()
102   int i;  in fe25519_unpack()  local
103   for(i=0;i<32;i++) r->v[i] = x[i];  in fe25519_unpack()
110   int i;  in fe25519_pack()  local
113   for(i=0;i<32;i++)   in fe25519_pack()
114     r[i] = y.v[i];  in fe25519_pack()
119   int i;  in fe25519_iszero()  local
124   for(i=1;i<32;i++)   in fe25519_iszero()
125     r &= equal(t.v[i],0);  in fe25519_iszero()
131   int i;  in fe25519_iseq_vartime()  local
136   for(i=0;i<32;i++)  in fe25519_iseq_vartime()
137     if(t1.v[i] != t2.v[i]) return 0;  in fe25519_iseq_vartime()
143   int i;  in fe25519_cmov()  local
146   for(i=0;i<32;i++) r->v[i] ^= mask & (x->v[i] ^ r->v[i]);  in fe25519_cmov()
158   int i;  in fe25519_setone()  local
160   for(i=1;i<32;i++) r->v[i]=0;  in fe25519_setone()
165   int i;  in fe25519_setzero()  local
166   for(i=0;i<32;i++) r->v[i]=0;  in fe25519_setzero()
172   int i;  in fe25519_neg()  local
173   for(i=0;i<32;i++) t.v[i]=x->v[i];  in fe25519_neg()
180   int i;  in fe25519_add()  local
181   for(i=0;i<32;i++) r->v[i] = x->v[i] + y->v[i];  in fe25519_add()
187   int i;  in fe25519_sub()  local
191   for(i=1;i<31;i++) t[i] = x->v[i] + 0x1fe;  in fe25519_sub()
192   for(i=0;i<32;i++) r->v[i] = t[i] - y->v[i];  in fe25519_sub()
198   int i,j;  in fe25519_mul()  local
200   for(i=0;i<63;i++)t[i] = 0;  in fe25519_mul()
202   for(i=0;i<32;i++)  in fe25519_mul()
204       t[i+j] += x->v[i] * y->v[j];  in fe25519_mul()
206   for(i=32;i<63;i++)  in fe25519_mul()
207     r->v[i-32] = t[i-32] + times38(t[i]);   in fe25519_mul()
230 	int i;  in fe25519_invert()  local
249 	/* 2^20 - 2^10 */ for (i = 2;i < 10;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }  in fe25519_invert()
254 	/* 2^40 - 2^20 */ for (i = 2;i < 20;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }  in fe25519_invert()
259 	/* 2^50 - 2^10 */ for (i = 2;i < 10;i += 2) { fe25519_square(&t1,&t0); fe25519_square(&t0,&t1); }  in fe25519_invert()
264 	/* 2^100 - 2^50 */ for (i = 2;i < 50;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }  in fe25519_invert()
269 …/* 2^200 - 2^100 */ for (i = 2;i < 100;i += 2) { fe25519_square(&t1,&t0); fe25519_square(&t0,&t1);…  in fe25519_invert()
274 	/* 2^250 - 2^50 */ for (i = 2;i < 50;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }  in fe25519_invert()
296 	int i;  in fe25519_pow2523()  local
307 	/* 2^10 - 2^5 */ for (i = 1;i < 5;i++) { fe25519_square(&t,&t); }  in fe25519_pow2523()
311 	/* 2^20 - 2^10 */ for (i = 1;i < 10;i++) { fe25519_square(&t,&t); }  in fe25519_pow2523()
315 	/* 2^40 - 2^20 */ for (i = 1;i < 20;i++) { fe25519_square(&t,&t); }  in fe25519_pow2523()
319 	/* 2^50 - 2^10 */ for (i = 1;i < 10;i++) { fe25519_square(&t,&t); }  in fe25519_pow2523()
323 	/* 2^100 - 2^50 */ for (i = 1;i < 50;i++) { fe25519_square(&t,&t); }  in fe25519_pow2523()
327 	/* 2^200 - 2^100 */ for (i = 1;i < 100;i++) { fe25519_square(&t,&t); }  in fe25519_pow2523()
331 	/* 2^250 - 2^50 */ for (i = 1;i < 50;i++) { fe25519_square(&t,&t); }  in fe25519_pow2523()