112   int64_t A = 0;  in subM()  local
115     A += (uint64_t)a[i] - key->n[i];  in subM()
116     a[i] = (uint32_t)A;  in subM()
117     A >>= 32;  in subM()
141   uint64_t A = (uint64_t)a * b[0] + c[0];  in montMulAdd()  local
142   uint32_t d0 = (uint32_t)A * key->n0inv;  in montMulAdd()
143   uint64_t B = (uint64_t)d0 * key->n[0] + (uint32_t)A;  in montMulAdd()
147     A = (A >> 32) + (uint64_t)a * b[i] + c[i];  in montMulAdd()
148     B = (B >> 32) + (uint64_t)d0 * key->n[i] + (uint32_t)A;  in montMulAdd()
152   A = (A >> 32) + (B >> 32);  in montMulAdd()
154   c[i - 1] = (uint32_t)A;  in montMulAdd()
156   if (A >> 32) {  in montMulAdd()