Function order_c_digits 

pub fn order_c_digits() -> [b17; 8]

c = l - 2^252 in eight 17-bit digits, least significant first. The top digit is 41, so c < 2^(7 * 17 + 6) = 2^125.