350 static void vli_mod_sub(u64 *result, const u64 *left, const u64 *right,  in vli_mod_sub()  function
566 	vli_mod_sub(z1, x1, z1, curve_p); /* t3 = x1 - z1^2 */  in ecc_point_double_jacobian()
581 	vli_mod_sub(z1, z1, t5, curve_p); /* t3 = B^2 - A */  in ecc_point_double_jacobian()
582 	vli_mod_sub(z1, z1, t5, curve_p); /* t3 = B^2 - 2A = x3 */  in ecc_point_double_jacobian()
583 	vli_mod_sub(t5, t5, z1, curve_p); /* t5 = A - x3 */  in ecc_point_double_jacobian()
585 	vli_mod_sub(t4, x1, t4, curve_p); /* t4 = B * (A - x3) - y1^4 = y3 */  in ecc_point_double_jacobian()
634 	vli_mod_sub(t5, x2, x1, curve_p); /* t5 = x2 - x1 */  in xycz_add()
638 	vli_mod_sub(y2, y2, y1, curve_p); /* t4 = y2 - y1 */  in xycz_add()
641 	vli_mod_sub(t5, t5, x1, curve_p); /* t5 = D - B */  in xycz_add()
642 	vli_mod_sub(t5, t5, x2, curve_p); /* t5 = D - B - C = x3 */  in xycz_add()
643 	vli_mod_sub(x2, x2, x1, curve_p); /* t3 = C - B */  in xycz_add()
645 	vli_mod_sub(x2, x1, t5, curve_p); /* t3 = B - x3 */  in xycz_add()
647 	vli_mod_sub(y2, y2, y1, curve_p); /* t4 = y3 */  in xycz_add()
663 	vli_mod_sub(t5, x2, x1, curve_p); /* t5 = x2 - x1 */  in xycz_add_c()
668 	vli_mod_sub(y2, y2, y1, curve_p); /* t4 = y2 - y1 */  in xycz_add_c()
670 	vli_mod_sub(t6, x2, x1, curve_p); /* t6 = C - B */  in xycz_add_c()
674 	vli_mod_sub(x2, x2, t6, curve_p); /* t3 = x3 */  in xycz_add_c()
676 	vli_mod_sub(t7, x1, x2, curve_p); /* t7 = B - x3 */  in xycz_add_c()
678 	vli_mod_sub(y2, y2, y1, curve_p); /* t4 = y3 */  in xycz_add_c()
681 	vli_mod_sub(t7, t7, t6, curve_p); /* t7 = x3' */  in xycz_add_c()
682 	vli_mod_sub(t6, t7, x1, curve_p); /* t6 = x3' - B */  in xycz_add_c()
684 	vli_mod_sub(y1, t6, y1, curve_p); /* t2 = y3' */  in xycz_add_c()
714 	vli_mod_sub(z, rx[1], rx[0], curve_p); /* X1 - X0 */  in ecc_point_mult()