c448_word_t
c448_word_t limb[C448_SCALAR_LIMBS];
out->limb[i] = (c448_word_t)chain;
sc_subx(out, out->limb, sc_p, sc_p, (c448_word_t)chain);
c448_word_t out = 0;
for (j = 0; j < sizeof(c448_word_t) && k < nbytes; j++, k++)
out |= ((c448_word_t)ser[k]) << (8 * j);
static const c448_word_t MONTGOMERY_FACTOR = (c448_word_t)0x3bd440fae918bc5ULL;
for (j = 0; j < sizeof(c448_word_t); j++, k++)
c448_word_t mask = 0 - (a->limb[0] & 1);
out->limb[i] = (c448_word_t)chain;
out->limb[i] = out->limb[i] >> 1 | (c448_word_t)(chain << (WBITS - 1));
const c448_word_t accum[C448_SCALAR_LIMBS],
const curve448_scalar_t p, c448_word_t extra)
c448_word_t borrow;
out->limb[i] = (c448_word_t)chain;
borrow = (c448_word_t)chain + extra; /* = 0 or -1 */
out->limb[i] = (c448_word_t)chain;
c448_word_t accum[C448_SCALAR_LIMBS + 1] = { 0 };
c448_word_t hi_carry = 0;
c448_word_t mand = a->limb[i];
const c448_word_t *mier = b->limb;
accum[j] = (c448_word_t)chain;
accum[j] = (c448_word_t)chain;
accum[j - 1] = (c448_word_t)chain;
accum[j - 1] = (c448_word_t)chain;