194 	u64 carry = 0;  in vli_lshift()  local
200 		result[i] = (temp << shift) | carry;  in vli_lshift()
201 		carry = temp >> (64 - shift);  in vli_lshift()
204 	return carry;  in vli_lshift()
211 	u64 carry = 0;  in vli_rshift1()  local
217 		*vli = (temp >> 1) | carry;  in vli_rshift1()
218 		carry = temp << 63;  in vli_rshift1()
226 	u64 carry = 0;  in vli_add()  local
232 		sum = left[i] + right[i] + carry;  in vli_add()
234 			carry = (sum < left[i]);  in vli_add()
239 	return carry;  in vli_add()
378 	u64 carry;  in vli_mod_add()  local
380 	carry = vli_add(result, left, right, ndigits);  in vli_mod_add()
385 	if (carry || vli_cmp(result, mod, ndigits) >= 0)  in vli_mod_add()
413 	int carry;  in vli_mmod_fast_192()  local
418 	carry = vli_add(result, result, tmp, ndigits);  in vli_mmod_fast_192()
423 	carry += vli_add(result, result, tmp, ndigits);  in vli_mmod_fast_192()
427 	carry += vli_add(result, result, tmp, ndigits);  in vli_mmod_fast_192()
429 	while (carry || vli_cmp(curve_prime, result, ndigits) != 1)  in vli_mmod_fast_192()
430 		carry -= vli_sub(result, result, curve_prime, ndigits);  in vli_mmod_fast_192()
439 	int carry;  in vli_mmod_fast_256()  local
450 	carry = vli_lshift(tmp, tmp, 1, ndigits);  in vli_mmod_fast_256()
451 	carry += vli_add(result, result, tmp, ndigits);  in vli_mmod_fast_256()
457 	carry += vli_lshift(tmp, tmp, 1, ndigits);  in vli_mmod_fast_256()
458 	carry += vli_add(result, result, tmp, ndigits);  in vli_mmod_fast_256()
465 	carry += vli_add(result, result, tmp, ndigits);  in vli_mmod_fast_256()
472 	carry += vli_add(result, result, tmp, ndigits);  in vli_mmod_fast_256()
479 	carry -= vli_sub(result, result, tmp, ndigits);  in vli_mmod_fast_256()
486 	carry -= vli_sub(result, result, tmp, ndigits);  in vli_mmod_fast_256()
493 	carry -= vli_sub(result, result, tmp, ndigits);  in vli_mmod_fast_256()
500 	carry -= vli_sub(result, result, tmp, ndigits);  in vli_mmod_fast_256()
502 	if (carry < 0) {  in vli_mmod_fast_256()
504 			carry += vli_add(result, result, curve_prime, ndigits);  in vli_mmod_fast_256()
505 		} while (carry < 0);  in vli_mmod_fast_256()
507 		while (carry || vli_cmp(curve_prime, result, ndigits) != 1)  in vli_mmod_fast_256()
508 			carry -= vli_sub(result, result, curve_prime, ndigits);  in vli_mmod_fast_256()
565 	u64 carry;  in vli_mod_inv()  local
580 		carry = 0;  in vli_mod_inv()
586 				carry = vli_add(u, u, mod, ndigits);  in vli_mod_inv()
589 			if (carry)  in vli_mod_inv()
595 				carry = vli_add(v, v, mod, ndigits);  in vli_mod_inv()
598 			if (carry)  in vli_mod_inv()
609 				carry = vli_add(u, u, mod, ndigits);  in vli_mod_inv()
612 			if (carry)  in vli_mod_inv()
623 				carry = vli_add(v, v, mod, ndigits);  in vli_mod_inv()
626 			if (carry)  in vli_mod_inv()
683 		u64 carry = vli_add(x1, x1, curve_prime, ndigits);  in ecc_point_double_jacobian()  local
686 		x1[ndigits - 1] |= carry << 63;  in ecc_point_double_jacobian()
856 	int carry;  in ecc_point_mult()  local
858 	carry = vli_add(sk[0], scalar, curve->n, ndigits);  in ecc_point_mult()
860 	scalar = sk[!carry];  in ecc_point_mult()