108 static __always_inline void fe_freeze(u32 out[10], const u32 in1[10])  in fe_freeze()
151 	out[0] = x52;  in fe_freeze()
152 	out[1] = x56;  in fe_freeze()
153 	out[2] = x60;  in fe_freeze()
154 	out[3] = x64;  in fe_freeze()
155 	out[4] = x68;  in fe_freeze()
156 	out[5] = x72;  in fe_freeze()
157 	out[6] = x76;  in fe_freeze()
158 	out[7] = x80;  in fe_freeze()
159 	out[8] = x84;  in fe_freeze()
160 	out[9] = x88;  in fe_freeze()
226 static noinline void fe_add_impl(u32 out[10], const u32 in1[10], const u32 in2[10])  in fe_add_impl()
248 	out[0] = (x5 + x23);  in fe_add_impl()
249 	out[1] = (x7 + x25);  in fe_add_impl()
250 	out[2] = (x9 + x27);  in fe_add_impl()
251 	out[3] = (x11 + x29);  in fe_add_impl()
252 	out[4] = (x13 + x31);  in fe_add_impl()
253 	out[5] = (x15 + x33);  in fe_add_impl()
254 	out[6] = (x17 + x35);  in fe_add_impl()
255 	out[7] = (x19 + x37);  in fe_add_impl()
256 	out[8] = (x21 + x39);  in fe_add_impl()
257 	out[9] = (x20 + x38);  in fe_add_impl()
269 static noinline void fe_sub_impl(u32 out[10], const u32 in1[10], const u32 in2[10])  in fe_sub_impl()
291 	out[0] = ((0x7ffffda + x5) - x23);  in fe_sub_impl()
292 	out[1] = ((0x3fffffe + x7) - x25);  in fe_sub_impl()
293 	out[2] = ((0x7fffffe + x9) - x27);  in fe_sub_impl()
294 	out[3] = ((0x3fffffe + x11) - x29);  in fe_sub_impl()
295 	out[4] = ((0x7fffffe + x13) - x31);  in fe_sub_impl()
296 	out[5] = ((0x3fffffe + x15) - x33);  in fe_sub_impl()
297 	out[6] = ((0x7fffffe + x17) - x35);  in fe_sub_impl()
298 	out[7] = ((0x3fffffe + x19) - x37);  in fe_sub_impl()
299 	out[8] = ((0x7fffffe + x21) - x39);  in fe_sub_impl()
300 	out[9] = ((0x3fffffe + x20) - x38);  in fe_sub_impl()
312 static noinline void fe_mul_impl(u32 out[10], const u32 in1[10], const u32 in2[10])  in fe_mul_impl()
415 	out[0] = x117;  in fe_mul_impl()
416 	out[1] = x120;  in fe_mul_impl()
417 	out[2] = (x119 + x93);  in fe_mul_impl()
418 	out[3] = x96;  in fe_mul_impl()
419 	out[4] = x99;  in fe_mul_impl()
420 	out[5] = x102;  in fe_mul_impl()
421 	out[6] = x105;  in fe_mul_impl()
422 	out[7] = x108;  in fe_mul_impl()
423 	out[8] = x111;  in fe_mul_impl()
424 	out[9] = x114;  in fe_mul_impl()
444 static noinline void fe_sqr_impl(u32 out[10], const u32 in1[10])  in fe_sqr_impl()
537 	out[0] = x96;  in fe_sqr_impl()
538 	out[1] = x99;  in fe_sqr_impl()
539 	out[2] = (x98 + x72);  in fe_sqr_impl()
540 	out[3] = x75;  in fe_sqr_impl()
541 	out[4] = x78;  in fe_sqr_impl()
542 	out[5] = x81;  in fe_sqr_impl()
543 	out[6] = x84;  in fe_sqr_impl()
544 	out[7] = x87;  in fe_sqr_impl()
545 	out[8] = x90;  in fe_sqr_impl()
546 	out[9] = x93;  in fe_sqr_impl()
560 static __always_inline void fe_loose_invert(fe *out, const fe_loose *z)  in fe_loose_invert()  argument
607 	fe_mul_ttt(out, &t1, &t0);  in fe_loose_invert()
610 static __always_inline void fe_invert(fe *out, const fe *z)  in fe_invert()  argument
614 	fe_loose_invert(out, &l);  in fe_invert()
635 static __always_inline void fe_mul_121666_impl(u32 out[10], const u32 in1[10])  in fe_mul_121666_impl()
738 	out[0] = x117;  in fe_mul_121666_impl()
739 	out[1] = x120;  in fe_mul_121666_impl()
740 	out[2] = (x119 + x93);  in fe_mul_121666_impl()
741 	out[3] = x96;  in fe_mul_121666_impl()
742 	out[4] = x99;  in fe_mul_121666_impl()
743 	out[5] = x102;  in fe_mul_121666_impl()
744 	out[6] = x105;  in fe_mul_121666_impl()
745 	out[7] = x108;  in fe_mul_121666_impl()
746 	out[8] = x111;  in fe_mul_121666_impl()
747 	out[9] = x114;  in fe_mul_121666_impl()
756 void curve25519_generic(u8 out[CURVE25519_KEY_SIZE],  in curve25519_generic()
853 	fe_tobytes(out, &x2);  in curve25519_generic()