sc_subx
sc_subx(out, a->limb, b, sc_p, 0);
sc_subx(out, out->limb, sc_p, sc_p, (c448_word_t)chain);
sc_subx(out, accum, sc_p, sc_p, hi_carry);