154 	u64 carry = 0;  in vli_lshift()  local
160 		result[i] = (temp << shift) | carry;  in vli_lshift()
161 		carry = temp >> (64 - shift);  in vli_lshift()
164 	return carry;  in vli_lshift()
171 	u64 carry = 0;  in vli_rshift1()  local
177 		*vli = (temp >> 1) | carry;  in vli_rshift1()
178 		carry = temp << 63;  in vli_rshift1()
186 	u64 carry = 0;  in vli_add()  local
192 		sum = left[i] + right[i] + carry;  in vli_add()
194 			carry = (sum < left[i]);  in vli_add()
199 	return carry;  in vli_add()
336 	u64 carry;  in vli_mod_add()  local
338 	carry = vli_add(result, left, right);  in vli_mod_add()
343 	if (carry || vli_cmp(result, mod) >= 0)  in vli_mod_add()
368 	int carry;  in vli_mmod_fast()  local
378 	carry = vli_lshift(tmp, tmp, 1);  in vli_mmod_fast()
379 	carry += vli_add(result, result, tmp);  in vli_mmod_fast()
385 	carry += vli_lshift(tmp, tmp, 1);  in vli_mmod_fast()
386 	carry += vli_add(result, result, tmp);  in vli_mmod_fast()
393 	carry += vli_add(result, result, tmp);  in vli_mmod_fast()
400 	carry += vli_add(result, result, tmp);  in vli_mmod_fast()
407 	carry -= vli_sub(result, result, tmp);  in vli_mmod_fast()
414 	carry -= vli_sub(result, result, tmp);  in vli_mmod_fast()
421 	carry -= vli_sub(result, result, tmp);  in vli_mmod_fast()
428 	carry -= vli_sub(result, result, tmp);  in vli_mmod_fast()
430 	if (carry < 0) {  in vli_mmod_fast()
432 			carry += vli_add(result, result, curve_p);  in vli_mmod_fast()
433 		} while (carry < 0);  in vli_mmod_fast()
435 		while (carry || vli_cmp(curve_p, result) != 1)  in vli_mmod_fast()
436 			carry -= vli_sub(result, result, curve_p);  in vli_mmod_fast()
467 	u64 carry;  in vli_mod_inv()  local
482 		carry = 0;  in vli_mod_inv()
488 				carry = vli_add(u, u, mod);  in vli_mod_inv()
491 			if (carry)  in vli_mod_inv()
497 				carry = vli_add(v, v, mod);  in vli_mod_inv()
500 			if (carry)  in vli_mod_inv()
511 				carry = vli_add(u, u, mod);  in vli_mod_inv()
514 			if (carry)  in vli_mod_inv()
525 				carry = vli_add(v, v, mod);  in vli_mod_inv()
528 			if (carry)  in vli_mod_inv()
572 		u64 carry = vli_add(x1, x1, curve_p);  in ecc_point_double_jacobian()  local
574 		x1[NUM_ECC_DIGITS - 1] |= carry << 63;  in ecc_point_double_jacobian()