20  * fe limbs are bounded by 1.125*2^26,1.125*2^25,1.125*2^26,1.125*2^25,etc.
25 /* fe_loose limbs are bounded by 3.375*2^26,3.375*2^25,3.375*2^26,3.375*2^25,etc
42 	h[1] = (a0>>26) | ((a1&((1<<19)-1))<< 6); /* (32-26) + 19 =  6+19 = 25 */  in fe_frombytes_impl()
44 	h[3] = (a2>>13) | ((a3&((1<< 6)-1))<<19); /* (32-13) +  6 = 19+ 6 = 25 */  in fe_frombytes_impl()
46 	h[5] = a4&((1<<25)-1);                    /*                        25 */  in fe_frombytes_impl()
47 	h[6] = (a4>>25) | ((a5&((1<<19)-1))<< 7); /* (32-25) + 19 =  7+19 = 26 */  in fe_frombytes_impl()
48 	h[7] = (a5>>19) | ((a6&((1<<12)-1))<<13); /* (32-19) + 12 = 13+12 = 25 */  in fe_frombytes_impl()
50 	h[9] = (a7>> 6)&((1<<25)-1); /*                                     25 */  in fe_frombytes_impl()
61 	/* This function extracts 25 bits of result and 1 bit of carry  in addcarryx_u25()
65 	*low = x & ((1 << 25) - 1);  in addcarryx_u25()
66 	return (x >> 25) & 1;  in addcarryx_u25()
83 	/* This function extracts 25 bits of result and 1 bit of borrow  in subborrow_u25()
87 	*low = x & ((1 << 25) - 1);  in subborrow_u25()
193 	s[25] = (h[7] >> 21) | (h[8] << 4);  in fe_tobytes()
261 /* h = f + g
262  * Can overlap h with f or g.
264 static __always_inline void fe_add(fe_loose *h, const fe *f, const fe *g)  in fe_add()  argument
266 	fe_add_impl(h->v, f->v, g->v);  in fe_add()
304 /* h = f - g
305  * Can overlap h with f or g.
307 static __always_inline void fe_sub(fe_loose *h, const fe *f, const fe *g)  in fe_sub()  argument
309 	fe_sub_impl(h->v, f->v, g->v);  in fe_sub()
428 static __always_inline void fe_mul_ttt(fe *h, const fe *f, const fe *g)  in fe_mul_ttt()  argument
430 	fe_mul_impl(h->v, f->v, g->v);  in fe_mul_ttt()
433 static __always_inline void fe_mul_tlt(fe *h, const fe_loose *f, const fe *g)  in fe_mul_tlt()  argument
435 	fe_mul_impl(h->v, f->v, g->v);  in fe_mul_tlt()
439 fe_mul_tll(fe *h, const fe_loose *f, const fe_loose *g)  in fe_mul_tll()  argument
441 	fe_mul_impl(h->v, f->v, g->v);  in fe_mul_tll()
617 /* Replace (f,g) with (g,f) if b == 1;
618  * replace (f,g) with (f,g) if b == 0.
622 static noinline void fe_cswap(fe *f, fe *g, unsigned int b)  in fe_cswap()  argument
627 		u32 x = f->v[i] ^ g->v[i];  in fe_cswap()
630 		g->v[i] ^= x;  in fe_cswap()