Test results for amd64, panther, crypto_sign/mqom2cat1gf256fastr5

[Page version: 20251223 17:28:48]

Compiler output

blc_default.c: blc_default.c:269:27: warning: passing 'const uint16_t *' (aka 'const unsigned short *') to parameter of type 'void *' discards qualifiers [-Wincompatible-pointer-types-discards-qualifiers]
blc_default.c:         crypto_declassify(&i_star[e], sizeof(i_star[e]));
blc_default.c:                           ^~~~~~~~~~
blc_default.c: .../supercop-data/panther/amd64/include/crypto_declassify.h:4:37: note: passing argument to parameter here
blc_default.c: extern void crypto_declassify(void *,unsigned long long);
blc_default.c:                                     ^
blc_default.c: 1 warning generated.
blc_memopt.c: blc_memopt.c:405:20: warning: passing 'const uint16_t *' (aka 'const unsigned short *') to parameter of type 'void *' discards qualifiers [-Wincompatible-pointer-types-discards-qualifiers]
blc_memopt.c:         crypto_declassify(&i_star[e], sizeof(i_star[e]));
blc_memopt.c:                           ^~~~~~~~~~
blc_memopt.c: .../supercop-data/panther/amd64/include/crypto_declassify.h:4:37: note: passing argument to parameter here
blc_memopt.c: extern void crypto_declassify(void *,unsigned long long);
blc_memopt.c:                                     ^
blc_memopt.c: 1 warning generated.

Compiler output

blc_default.c: In file included from blc_default.c:1:
blc_default.c: In file included from ./blc_default.h:9:
blc_default.c: ./fields.h:160:9: warning: implicit declaration of function 'gf256_mult_avx2' is invalid in C99 [-Wimplicit-function-declaration]
blc_default.c:         return _field_ext_mult(a, b);
blc_default.c:                ^
blc_default.c: ./fields.h:145:25: note: expanded from macro '_field_ext_mult'
blc_default.c: #define _field_ext_mult concat3(FIELD_EXT_PREFIX, _mult_, FIELD_IMPLEMENTATION_SUFFIX)
blc_default.c:                         ^
blc_default.c: ./fields.h:12:26: note: expanded from macro 'concat3'
blc_default.c: #define concat3(a, b, c) _concat3(a, b, c)
blc_default.c:                          ^
blc_default.c: ./fields.h:9:27: note: expanded from macro '_concat3'
blc_default.c: #define _concat3(a, b, c) a ## b ## c
blc_default.c:                           ^
blc_default.c: <scratch space>:107:1: note: expanded from here
blc_default.c: gf256_mult_avx2
blc_default.c: ^
blc_default.c: In file included from blc_default.c:1:
blc_default.c: In file included from ./blc_default.h:9:
blc_default.c: ./fields.h:165:2: warning: implicit declaration of function 'gf256_constant_vect_mult_avx2' is invalid in C99 [-Wimplicit-function-declaration]
blc_default.c:         _field_ext_constant_vect_mult(a, b, c, len);
blc_default.c:         ^
blc_default.c: ./fields.h:146:39: note: expanded from macro '_field_ext_constant_vect_mult'
blc_default.c: #define _field_ext_constant_vect_mult concat3(FIELD_EXT_PREFIX, _constant_vect_mult_, FIELD_IMPLEMENTATION_SUFFIX)
blc_default.c:                                       ^
blc_default.c: ...

Compiler output

blc_default.c: blc_default.c: In function 'BLC_Open_default':
blc_default.c: blc_default.c:269:27: warning: passing argument 1 of 'crypto_declassify' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
blc_default.c:   269 |         crypto_declassify(&i_star[e], sizeof(i_star[e]));
blc_default.c:       |                           ^~~~~~~~~~
blc_default.c: In file included from blc_default.c:5:
blc_default.c: .../supercop-data/panther/amd64/include/crypto_declassify.h:4:31: note: expected 'void *' but argument is of type 'const uint16_t *' {aka 'const short unsigned int *'}
blc_default.c:     4 | extern void crypto_declassify(void *,unsigned long long);
blc_default.c:       |                               ^~~~~~
blc_memopt.c: blc_memopt.c: In function 'BLC_Open_memopt':
blc_memopt.c: blc_memopt.c:405:27: warning: passing argument 1 of 'crypto_declassify' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
blc_memopt.c:   405 |         crypto_declassify(&i_star[e], sizeof(i_star[e]));
blc_memopt.c:       |                           ^~~~~~~~~~
blc_memopt.c: In file included from blc_memopt.c:6:
blc_memopt.c: .../supercop-data/panther/amd64/include/crypto_declassify.h:4:31: note: expected 'void *' but argument is of type 'const uint16_t *' {aka 'const short unsigned int *'}
blc_memopt.c:     4 | extern void crypto_declassify(void *,unsigned long long);
blc_memopt.c:       |                               ^~~~~~

Compiler output

blc_default.c: blc_default.c:269:27: warning: passing 'const uint16_t *' (aka 'const unsigned short *') to parameter of type 'void *' discards qualifiers [-Wincompatible-pointer-types-discards-qualifiers]
blc_default.c:         crypto_declassify(&i_star[e], sizeof(i_star[e]));
blc_default.c:                           ^~~~~~~~~~
blc_default.c: .../supercop-data/panther/amd64/include/crypto_declassify.h:4:37: note: passing argument to parameter here
blc_default.c: extern void crypto_declassify(void *,unsigned long long);
blc_default.c:                                     ^
blc_default.c: 1 warning generated.
blc_memopt.c: blc_memopt.c:405:20: warning: passing 'const uint16_t *' (aka 'const unsigned short *') to parameter of type 'void *' discards qualifiers [-Wincompatible-pointer-types-discards-qualifiers]
blc_memopt.c:         crypto_declassify(&i_star[e], sizeof(i_star[e]));
blc_memopt.c:                           ^~~~~~~~~~
blc_memopt.c: .../supercop-data/panther/amd64/include/crypto_declassify.h:4:37: note: passing argument to parameter here
blc_memopt.c: extern void crypto_declassify(void *,unsigned long long);
blc_memopt.c:                                     ^
blc_memopt.c: 1 warning generated.
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
measure.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
measure.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker

Compiler output

KeccakP-1600-times4-SIMD512.c: KeccakP-1600-times4-SIMD512.c:194:16: error: always_inline function '_mm256_set_epi32' requires target feature 'avx', but would be inlined into function 'KeccakP1600times4_AddLanesAll' that is compiled without support for 'avx'
KeccakP-1600-times4-SIMD512.c:     index512 = LOAD8_32(3*laneOffset+1, 2*laneOffset+1, 1*laneOffset+1, 0*laneOffset+1, 3*laneOffset, 2*laneOffset, 1*laneOffset, 0*laneOffset);
KeccakP-1600-times4-SIMD512.c:                ^
KeccakP-1600-times4-SIMD512.c: KeccakP-1600-times4-SIMD512.c:131:37: note: expanded from macro 'LOAD8_32'
KeccakP-1600-times4-SIMD512.c: #define LOAD8_32(a,b,c,d,e,f,g,h)   _mm256_set_epi32((uint64_t)(a), (uint32_t)(b), (uint32_t)(c), (uint32_t)(d), (uint32_t)(e), (uint32_t)(f), (uint32_t)(g), (uint32_t)(h))
KeccakP-1600-times4-SIMD512.c:                                     ^
KeccakP-1600-times4-SIMD512.c: KeccakP-1600-times4-SIMD512.c:194:16: error: AVX vector return of type '__m256i' (vector of 4 'long long' values) without 'avx' enabled changes the ABI
KeccakP-1600-times4-SIMD512.c: KeccakP-1600-times4-SIMD512.c:131:37: note: expanded from macro 'LOAD8_32'
KeccakP-1600-times4-SIMD512.c: #define LOAD8_32(a,b,c,d,e,f,g,h)   _mm256_set_epi32((uint64_t)(a), (uint32_t)(b), (uint32_t)(c), (uint32_t)(d), (uint32_t)(e), (uint32_t)(f), (uint32_t)(g), (uint32_t)(h))
KeccakP-1600-times4-SIMD512.c:                                     ^
KeccakP-1600-times4-SIMD512.c: KeccakP-1600-times4-SIMD512.c:196:9: error: '__builtin_ia32_gathersiv8di' needs target feature avx512f
KeccakP-1600-times4-SIMD512.c:         Add_In2( 0 );
KeccakP-1600-times4-SIMD512.c:         ^
KeccakP-1600-times4-SIMD512.c: KeccakP-1600-times4-SIMD512.c:192:100: note: expanded from macro 'Add_In2'
KeccakP-1600-times4-SIMD512.c:     #define Add_In2( argIndex )  stateAsLanes512[argIndex/2] = XOR512(stateAsLanes512[argIndex/2], LOAD_GATHER8_64(index512, dataAsLanes+argIndex))
KeccakP-1600-times4-SIMD512.c:                                                                                                    ^
KeccakP-1600-times4-SIMD512.c: KeccakP-1600-times4-SIMD512.c:133:37: note: expanded from macro 'LOAD_GATHER8_64'
KeccakP-1600-times4-SIMD512.c: #define LOAD_GATHER8_64(idx,p)      _mm512_i32gather_epi64( idx, (const void*)(p), 8)
KeccakP-1600-times4-SIMD512.c:                                     ^
KeccakP-1600-times4-SIMD512.c: /usr/lib/llvm-14/lib/clang/14.0.6/include/avx512fintrin.h:7705:13: note: expanded from macro '_mm512_i32gather_epi64'
KeccakP-1600-times4-SIMD512.c:   ((__m512i)__builtin_ia32_gathersiv8di((__v8di)_mm512_undefined_epi32(), \
KeccakP-1600-times4-SIMD512.c:             ^
KeccakP-1600-times4-SIMD512.c: KeccakP-1600-times4-SIMD512.c:196:9: error: always_inline function '_mm512_undefined_epi32' requires target feature 'avx512f', but would be inlined into function 'KeccakP1600times4_AddLanesAll' that is compiled without support for 'avx512f'
KeccakP-1600-times4-SIMD512.c: KeccakP-1600-times4-SIMD512.c:192:100: note: expanded from macro 'Add_In2'
KeccakP-1600-times4-SIMD512.c:     #define Add_In2( argIndex )  stateAsLanes512[argIndex/2] = XOR512(stateAsLanes512[argIndex/2], LOAD_GATHER8_64(index512, dataAsLanes+argIndex))
KeccakP-1600-times4-SIMD512.c: ...

Compiler output

blc_default.c: blc_default.c: In function 'BLC_Open_default':
blc_default.c: blc_default.c:269:27: warning: passing argument 1 of 'crypto_declassify' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
blc_default.c:   269 |         crypto_declassify(&i_star[e], sizeof(i_star[e]));
blc_default.c:       |                           ^~~~~~~~~~
blc_default.c: In file included from blc_default.c:5:
blc_default.c: .../supercop-data/panther/amd64/include/crypto_declassify.h:4:31: note: expected 'void *' but argument is of type 'const uint16_t *' {aka 'const short unsigned int *'}
blc_default.c:     4 | extern void crypto_declassify(void *,unsigned long long);
blc_default.c:       |                               ^~~~~~
blc_memopt.c: blc_memopt.c: In function 'BLC_Open_memopt':
blc_memopt.c: blc_memopt.c:405:27: warning: passing argument 1 of 'crypto_declassify' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
blc_memopt.c:   405 |         crypto_declassify(&i_star[e], sizeof(i_star[e]));
blc_memopt.c:       |                           ^~~~~~~~~~
blc_memopt.c: In file included from blc_memopt.c:6:
blc_memopt.c: .../supercop-data/panther/amd64/include/crypto_declassify.h:4:31: note: expected 'void *' but argument is of type 'const uint16_t *' {aka 'const short unsigned int *'}
blc_memopt.c:     4 | extern void crypto_declassify(void *,unsigned long long);
blc_memopt.c:       |                               ^~~~~~
keygen.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/12/include/immintrin.h:49,
keygen.c:                  from fields_avx512.h:15,
keygen.c:                  from fields.h:124,
keygen.c:                  from crypto_sign_mqom2cat1gf256fastr5.h:8,
keygen.c:                  from crypto_sign.h:4,
keygen.c:                  from keygen.c:2:
keygen.c: In function '_mm512_loadu_epi64',
keygen.c:     inlined from 'gf256_vect_mult_avx512' at fields_avx512.h:277:30,
keygen.c:     inlined from 'gf256_mat_mult_avx512' at fields_avx512.h:293:2,
keygen.c:     inlined from 'field_ext_base_mat_mult' at fields.h:204:2,
keygen.c:     inlined from 'KeyGen' at keygen.c:64:3:
keygen.c: /usr/lib/gcc/x86_64-linux-gnu/12/include/avx512fintrin.h:6451:10: warning: array subscript '__m512i_u[0]' is partly outside array bounds of 'field_base_elt[48]' {aka 'unsigned char[48]'} [-Warray-bounds]
keygen.c:  6451 |   return *(__m512i_u *) __P;
keygen.c:       |          ^~~~~~~~~~~~~~~~~~
keygen.c: keygen.c: In function 'KeyGen':
keygen.c: keygen.c:18:24: note: at offset [0, 47] into object 'x' of size 48
keygen.c:    18 |         field_base_elt x[FIELD_BASE_PACKING(MQOM2_PARAM_MQ_N)];
keygen.c:       |                        ^
piop_default.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/12/include/immintrin.h:49,
piop_default.c:                  from fields_avx512.h:15,
piop_default.c:                  from fields.h:124,
piop_default.c:                  from piop_default.h:5,
piop_default.c:                  from piop.h:9,
piop_default.c:                  from piop_default.c:1:
piop_default.c: In function '_mm512_loadu_epi64',
piop_default.c:     inlined from 'gf256_vect_mult_avx512' at fields_avx512.h:277:30,
piop_default.c:     inlined from 'gf256_mat_mult_avx512' at fields_avx512.h:293:2,
piop_default.c:     inlined from 'field_ext_base_mat_mult' at fields.h:204:2,
piop_default.c:     inlined from 'compute_t1' at piop_default.c:22:3,
piop_default.c:     inlined from 'ComputePz' at piop_default.c:45:2,
piop_default.c:     inlined from 'ComputePAlpha_default' at piop_default.c:112:15:
piop_default.c: /usr/lib/gcc/x86_64-linux-gnu/12/include/avx512fintrin.h:6451:10: warning: array subscript '__m512i_u[0]' is partly outside array bounds of 'const field_base_elt[48]' {aka 'const unsigned char[48]'} [-Warray-bounds]
piop_default.c:  6451 |   return *(__m512i_u *) __P;
piop_default.c:       |          ^~~~~~~~~~~~~~~~~~
piop_default.c: piop_default.c: In function 'ComputePAlpha_default':
piop_default.c: piop_default.c:63:324: note: at offset [0, 47] into object 'x' of size [0, 48]
piop_default.c:    63 | int ComputePAlpha_default(const uint8_t com[MQOM2_PARAM_DIGEST_SIZE], const field_ext_elt x0[MQOM2_PARAM_TAU][FIELD_EXT_PACKING(MQOM2_PARAM_MQ_N)], const field_ext_elt u0[MQOM2_PARAM_TAU][FIELD_EXT_PACKING(MQOM2_PARAM_ETA)], const field_ext_elt u1[MQOM2_PARAM_TAU][FIELD_EXT_PACKING(MQOM2_PARAM_ETA)], const field_base_elt x[FIELD_BASE_PACKING(MQOM2_PARAM_MQ_N)], const uint8_t mseed_eq[2 * MQOM2_PARAM_SEED_SIZE], field_ext_elt alpha0[MQOM2_PARAM_TAU][FIELD_EXT_PACKING(MQOM2_PARAM_ETA)], field_ext_elt alpha1[MQOM2_PARAM_TAU][FIELD_EXT_PACKING(MQOM2_PARAM_ETA)])
piop_default.c:       |                                                                                                                                                                                                                                                                                                               ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
measure.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
measure.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker

Compiler output

blc_default.c: blc_default.c: In function 'BLC_Open_default':
blc_default.c: blc_default.c:269:27: warning: passing argument 1 of 'crypto_declassify' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
blc_default.c:   269 |         crypto_declassify(&i_star[e], sizeof(i_star[e]));
blc_default.c:       |                           ^~~~~~~~~~
blc_default.c: In file included from blc_default.c:5:
blc_default.c: .../supercop-data/panther/amd64/include/crypto_declassify.h:4:31: note: expected 'void *' but argument is of type 'const uint16_t *' {aka 'const short unsigned int *'}
blc_default.c:     4 | extern void crypto_declassify(void *,unsigned long long);
blc_default.c:       |                               ^~~~~~
blc_memopt.c: blc_memopt.c: In function 'BLC_Open_memopt':
blc_memopt.c: blc_memopt.c:405:27: warning: passing argument 1 of 'crypto_declassify' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
blc_memopt.c:   405 |         crypto_declassify(&i_star[e], sizeof(i_star[e]));
blc_memopt.c:       |                           ^~~~~~~~~~
blc_memopt.c: In file included from blc_memopt.c:6:
blc_memopt.c: .../supercop-data/panther/amd64/include/crypto_declassify.h:4:31: note: expected 'void *' but argument is of type 'const uint16_t *' {aka 'const short unsigned int *'}
blc_memopt.c:     4 | extern void crypto_declassify(void *,unsigned long long);
blc_memopt.c:       |                               ^~~~~~
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
measure.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
measure.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker

Compiler output

blc_default.c: blc_default.c: In function 'BLC_Open_default':
blc_default.c: blc_default.c:269:27: warning: passing argument 1 of 'crypto_declassify' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
blc_default.c:   269 |         crypto_declassify(&i_star[e], sizeof(i_star[e]));
blc_default.c:       |                           ^~~~~~~~~~
blc_default.c: In file included from blc_default.c:5:
blc_default.c: .../supercop-data/panther/amd64/include/crypto_declassify.h:4:31: note: expected 'void *' but argument is of type 'const uint16_t *' {aka 'const short unsigned int *'}
blc_default.c:     4 | extern void crypto_declassify(void *,unsigned long long);
blc_default.c:       |                               ^~~~~~
blc_memopt.c: blc_memopt.c: In function 'BLC_Open_memopt':
blc_memopt.c: blc_memopt.c:405:27: warning: passing argument 1 of 'crypto_declassify' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
blc_memopt.c:   405 |         crypto_declassify(&i_star[e], sizeof(i_star[e]));
blc_memopt.c:       |                           ^~~~~~~~~~
blc_memopt.c: In file included from blc_memopt.c:6:
blc_memopt.c: .../supercop-data/panther/amd64/include/crypto_declassify.h:4:31: note: expected 'void *' but argument is of type 'const uint16_t *' {aka 'const short unsigned int *'}
blc_memopt.c:     4 | extern void crypto_declassify(void *,unsigned long long);
blc_memopt.c:       |                               ^~~~~~
piop_default.c: In file included from /usr/lib/gcc/x86_64-linux-gnu/12/include/immintrin.h:49,
piop_default.c:                  from fields_avx512.h:15,
piop_default.c:                  from fields.h:124,
piop_default.c:                  from piop_default.h:5,
piop_default.c:                  from piop.h:9,
piop_default.c:                  from piop_default.c:1:
piop_default.c: In function '_mm512_loadu_epi64',
piop_default.c:     inlined from 'gf256_vect_mult_avx512' at fields_avx512.h:277:30,
piop_default.c:     inlined from 'gf256_mat_mult_avx512' at fields_avx512.h:293:2,
piop_default.c:     inlined from 'field_ext_base_mat_mult' at fields.h:204:2,
piop_default.c:     inlined from 'compute_t1' at piop_default.c:22:3,
piop_default.c:     inlined from 'ComputePz' at piop_default.c:45:2,
piop_default.c:     inlined from 'ComputePAlpha_default' at piop_default.c:112:15:
piop_default.c: /usr/lib/gcc/x86_64-linux-gnu/12/include/avx512fintrin.h:6451:10: warning: array subscript '__m512i_u[0]' is partly outside array bounds of 'const field_base_elt[48]' {aka 'const unsigned char[48]'} [-Warray-bounds]
piop_default.c:  6451 |   return *(__m512i_u *) __P;
piop_default.c:       |          ^~~~~~~~~~~~~~~~~~
piop_default.c: piop_default.c: In function 'ComputePAlpha_default':
piop_default.c: piop_default.c:63:324: note: at offset [0, 47] into object 'x' of size [0, 48]
piop_default.c:    63 | int ComputePAlpha_default(const uint8_t com[MQOM2_PARAM_DIGEST_SIZE], const field_ext_elt x0[MQOM2_PARAM_TAU][FIELD_EXT_PACKING(MQOM2_PARAM_MQ_N)], const field_ext_elt u0[MQOM2_PARAM_TAU][FIELD_EXT_PACKING(MQOM2_PARAM_ETA)], const field_ext_elt u1[MQOM2_PARAM_TAU][FIELD_EXT_PACKING(MQOM2_PARAM_ETA)], const field_base_elt x[FIELD_BASE_PACKING(MQOM2_PARAM_MQ_N)], const uint8_t mseed_eq[2 * MQOM2_PARAM_SEED_SIZE], field_ext_elt alpha0[MQOM2_PARAM_TAU][FIELD_EXT_PACKING(MQOM2_PARAM_ETA)], field_ext_elt alpha1[MQOM2_PARAM_TAU][FIELD_EXT_PACKING(MQOM2_PARAM_ETA)])
piop_default.c:       |                                                                                                                                                                                                                                                                                                               ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
try.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
try.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker
measure.c: /usr/bin/ld: warning: KeccakP-1600-AVX512.o: missing .note.GNU-stack section implies executable stack
measure.c: /usr/bin/ld: NOTE: This behaviour is deprecated and will be removed in a future version of the linker

Compiler output

blc_default.c: blc_default.c: In function 'BLC_Open_default':
blc_default.c: blc_default.c:269:27: warning: passing argument 1 of 'crypto_declassify' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
blc_default.c:   269 |         crypto_declassify(&i_star[e], sizeof(i_star[e]));
blc_default.c:       |                           ^~~~~~~~~~
blc_default.c: In file included from macros.h:237,
blc_default.c:                  from endian_compat.h:14,
blc_default.c:                  from brg_endian.h:4,
blc_default.c:                  from KeccakP-1600-SnP.h:24,
blc_default.c:                  from KeccakSponge.h:64,
blc_default.c:                  from KeccakHash.h:25,
blc_default.c:                  from xof.h:12,
blc_default.c:                  from blc_default.h:8,
blc_default.c:                  from blc_default.c:1:
blc_default.c: .../supercop-data/panther/amd64/include/crypto_declassify.h:4:31: note: expected 'void *' but argument is of type 'const uint16_t *' {aka 'const short unsigned int *'}
blc_default.c:     4 | extern void crypto_declassify(void *,unsigned long long);
blc_default.c:       |                               ^~~~~~
blc_memopt.c: blc_memopt.c: In function 'BLC_Open_memopt':
blc_memopt.c: blc_memopt.c:405:27: warning: passing argument 1 of 'crypto_declassify' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
blc_memopt.c:   405 |         crypto_declassify(&i_star[e], sizeof(i_star[e]));
blc_memopt.c:       |                           ^~~~~~~~~~
blc_memopt.c: In file included from macros.h:237,
blc_memopt.c:                  from endian_compat.h:14,
blc_memopt.c:                  from brg_endian.h:4,
blc_memopt.c:                  from KeccakP-1600-SnP.h:24,
blc_memopt.c:                  from KeccakSponge.h:64,
blc_memopt.c:                  from KeccakHash.h:25,
blc_memopt.c:                  from xof.h:12,
blc_memopt.c:                  from blc_memopt.h:8,
blc_memopt.c:                  from blc_memopt.c:1:
blc_memopt.c: .../supercop-data/panther/amd64/include/crypto_declassify.h:4:31: note: expected 'void *' but argument is of type 'const uint16_t *' {aka 'const short unsigned int *'}
blc_memopt.c:     4 | extern void crypto_declassify(void *,unsigned long long);
blc_memopt.c:       |                               ^~~~~~

Namespace violations

KeccakHash.o Keccak_HashFinal T
KeccakHash.o Keccak_HashInitialize T
KeccakHash.o Keccak_HashSqueeze T
KeccakHash.o Keccak_HashUpdate T
KeccakHashtimes4.o Keccak_HashFinaltimes4 T
KeccakHashtimes4.o Keccak_HashInitializetimes4 T
KeccakHashtimes4.o Keccak_HashSqueezetimes4 T
KeccakHashtimes4.o Keccak_HashUpdatetimes4 T
KeccakP-1600-AVX2.o ALLON a
KeccakP-1600-AVX2.o KeccakF1600_FastLoop_Absorb T
KeccakP-1600-AVX2.o KeccakP1600_12rounds_FastLoop_Absorb T
KeccakP-1600-AVX2.o KeccakP1600_AddByte T
KeccakP-1600-AVX2.o KeccakP1600_AddBytes T
KeccakP-1600-AVX2.o KeccakP1600_ExtractAndAddBytes T
KeccakP-1600-AVX2.o KeccakP1600_ExtractBytes T
KeccakP-1600-AVX2.o KeccakP1600_Initialize T
KeccakP-1600-AVX2.o KeccakP1600_OverwriteBytes T
KeccakP-1600-AVX2.o KeccakP1600_OverwriteWithZeroes T
KeccakP-1600-AVX2.o KeccakP1600_Permute_12rounds T
KeccakP-1600-AVX2.o KeccakP1600_Permute_24rounds T
KeccakP-1600-AVX2.o KeccakP1600_Permute_Nrounds T
KeccakP-1600-times4-SIMD256.o KeccakF1600times4_FastLoop_Absorb T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_12rounds_FastLoop_Absorb T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_AddBytes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_AddLanesAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_ExtractAndAddBytes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_ExtractAndAddLanesAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_ExtractBytes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_ExtractLanesAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_InitializeAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_KravatteCompress T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_KravatteExpand T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_OverwriteBytes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_OverwriteLanesAll T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_OverwriteWithZeroes T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_PermuteAll_12rounds T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_PermuteAll_24rounds T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_PermuteAll_4rounds T
KeccakP-1600-times4-SIMD256.o KeccakP1600times4_PermuteAll_6rounds T
KeccakSponge.o KeccakWidth1600_12rounds_Sponge T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeAbsorb T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeInitialize T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeSqueeze T
KeccakSponge.o KeccakWidth1600_Sponge T
KeccakSponge.o KeccakWidth1600_SpongeAbsorb T
KeccakSponge.o KeccakWidth1600_SpongeAbsorbLastFewBits T
KeccakSponge.o KeccakWidth1600_SpongeInitialize T
KeccakSponge.o KeccakWidth1600_SpongeSqueeze T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T
blc_default.o BLC_Commit_default T
blc_default.o BLC_Eval_default T
blc_default.o BLC_Open_default T
blc_memopt.o BLC_Commit_memopt T
blc_memopt.o BLC_Eval_memopt T
blc_memopt.o BLC_Open_memopt T
expand_mq.o ExpandEquations T
expand_mq.o ExpandEquations_memopt_init T
expand_mq.o ExpandEquations_memopt_update T
ggm_tree.o GGMTree_Expand T
ggm_tree.o GGMTree_ExpandPath T
ggm_tree.o GGMTree_GetNextLeaf T
ggm_tree.o GGMTree_GetNextLeafPartial T
ggm_tree.o GGMTree_GetNextLeafPartial_x4 T
ggm_tree.o GGMTree_GetNextLeaf_x4 T
ggm_tree.o GGMTree_InitIncrementalExpansion T
ggm_tree.o GGMTree_InitIncrementalExpansion_x4 T
ggm_tree.o GGMTree_InitIncrementalPartialExpansion T
ggm_tree.o GGMTree_InitIncrementalPartialExpansion_x4 T
ggm_tree.o GGMTree_Open T
ggm_tree.o GGMTree_PartiallyExpand T
keygen.o KeyGen T
piop_default.o ComputePAlpha_default T
piop_default.o RecomputePAlpha_default T
piop_memopt.o ComputePAlpha_memopt T
piop_memopt.o ComputePzEval_xTau T
piop_memopt.o ComputePz_xTau T
piop_memopt.o ExpandBatchingChallenge T
piop_memopt.o RecomputePAlpha_memopt T
prg.o PRG T
prg.o PRG_memopt T
prg.o PRG_x4 T
prg.o PRG_x8 T
rijndael_aes_ni.o aes128_aes_ni_enc T
rijndael_aes_ni.o aes128_aes_ni_enc_x2 T
rijndael_aes_ni.o aes128_aes_ni_enc_x4 T
rijndael_aes_ni.o aes128_aes_ni_enc_x8 T
rijndael_aes_ni.o aes128_aes_ni_setkey_enc T
rijndael_aes_ni.o aes256_aes_ni_enc T
rijndael_aes_ni.o aes256_aes_ni_enc_x2 T
rijndael_aes_ni.o aes256_aes_ni_enc_x4 T
rijndael_aes_ni.o aes256_aes_ni_enc_x8 T
rijndael_aes_ni.o aes256_aes_ni_setkey_enc T
rijndael_aes_ni.o rijndael256_aes_ni_enc T
rijndael_aes_ni.o rijndael256_aes_ni_enc_x2 T
rijndael_aes_ni.o rijndael256_aes_ni_enc_x4 T
rijndael_aes_ni.o rijndael256_aes_ni_enc_x8 T
rijndael_aes_ni.o rijndael256_aes_ni_setkey_enc T
sign.o SampleChallenge T
sign.o Sign T
sign.o Verify T
sign.o crypto_sign_signature T
sign.o crypto_sign_verify T
xof.o xof_init T
xof.o xof_init_x4 T
xof.o xof_squeeze T
xof.o xof_squeeze_x4 T
xof.o xof_update T
xof.o xof_update_x4 T

Namespace violations

KeccakHash.o Keccak_HashFinal T
KeccakHash.o Keccak_HashInitialize T
KeccakHash.o Keccak_HashSqueeze T
KeccakHash.o Keccak_HashUpdate T
KeccakHashtimes4.o Keccak_HashFinaltimes4 T
KeccakHashtimes4.o Keccak_HashInitializetimes4 T
KeccakHashtimes4.o Keccak_HashSqueezetimes4 T
KeccakHashtimes4.o Keccak_HashUpdatetimes4 T
KeccakP-1600-AVX512.o KeccakF1600_FastLoop_Absorb T
KeccakP-1600-AVX512.o KeccakP1600_12rounds_FastLoop_Absorb T
KeccakP-1600-AVX512.o KeccakP1600_AddBytes T
KeccakP-1600-AVX512.o KeccakP1600_ExtractAndAddBytes T
KeccakP-1600-AVX512.o KeccakP1600_ExtractBytes T
KeccakP-1600-AVX512.o KeccakP1600_Initialize T
KeccakP-1600-AVX512.o KeccakP1600_OverwriteBytes T
KeccakP-1600-AVX512.o KeccakP1600_OverwriteWithZeroes T
KeccakP-1600-AVX512.o KeccakP1600_Permute_12rounds T
KeccakP-1600-AVX512.o KeccakP1600_Permute_24rounds T
KeccakP-1600-AVX512.o KeccakP1600_Permute_Nrounds T
KeccakP-1600-times4-SIMD512.o KeccakF1600times4_FastLoop_Absorb T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_12rounds_FastLoop_Absorb T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_AddBytes T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_AddLanesAll T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_ExtractAndAddBytes T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_ExtractAndAddLanesAll T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_ExtractBytes T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_ExtractLanesAll T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_InitializeAll T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_OverwriteBytes T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_OverwriteLanesAll T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_OverwriteWithZeroes T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_PermuteAll_12rounds T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_PermuteAll_24rounds T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_PermuteAll_4rounds T
KeccakP-1600-times4-SIMD512.o KeccakP1600times4_PermuteAll_6rounds T
KeccakSponge.o KeccakWidth1600_12rounds_Sponge T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeAbsorb T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeInitialize T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeSqueeze T
KeccakSponge.o KeccakWidth1600_Sponge T
KeccakSponge.o KeccakWidth1600_SpongeAbsorb T
KeccakSponge.o KeccakWidth1600_SpongeAbsorbLastFewBits T
KeccakSponge.o KeccakWidth1600_SpongeInitialize T
KeccakSponge.o KeccakWidth1600_SpongeSqueeze T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T
blc_default.o BLC_Commit_default T
blc_default.o BLC_Eval_default T
blc_default.o BLC_Open_default T
blc_memopt.o BLC_Commit_memopt T
blc_memopt.o BLC_Eval_memopt T
blc_memopt.o BLC_Open_memopt T
expand_mq.o ExpandEquations T
expand_mq.o ExpandEquations_memopt_init T
expand_mq.o ExpandEquations_memopt_update T
ggm_tree.o GGMTree_Expand T
ggm_tree.o GGMTree_ExpandPath T
ggm_tree.o GGMTree_GetNextLeaf T
ggm_tree.o GGMTree_GetNextLeafPartial T
ggm_tree.o GGMTree_GetNextLeafPartial_x4 T
ggm_tree.o GGMTree_GetNextLeaf_x4 T
ggm_tree.o GGMTree_InitIncrementalExpansion T
ggm_tree.o GGMTree_InitIncrementalExpansion_x4 T
ggm_tree.o GGMTree_InitIncrementalPartialExpansion T
ggm_tree.o GGMTree_InitIncrementalPartialExpansion_x4 T
ggm_tree.o GGMTree_Open T
ggm_tree.o GGMTree_PartiallyExpand T
keygen.o KeyGen T
piop_default.o ComputePAlpha_default T
piop_default.o RecomputePAlpha_default T
piop_memopt.o ComputePAlpha_memopt T
piop_memopt.o ComputePzEval_xTau T
piop_memopt.o ComputePz_xTau T
piop_memopt.o ExpandBatchingChallenge T
piop_memopt.o RecomputePAlpha_memopt T
prg.o PRG T
prg.o PRG_memopt T
prg.o PRG_x4 T
prg.o PRG_x8 T
rijndael_aes_ni.o aes128_aes_ni_enc T
rijndael_aes_ni.o aes128_aes_ni_enc_x2 T
rijndael_aes_ni.o aes128_aes_ni_enc_x4 T
rijndael_aes_ni.o aes128_aes_ni_enc_x8 T
rijndael_aes_ni.o aes128_aes_ni_setkey_enc T
rijndael_aes_ni.o aes256_aes_ni_enc T
rijndael_aes_ni.o aes256_aes_ni_enc_x2 T
rijndael_aes_ni.o aes256_aes_ni_enc_x4 T
rijndael_aes_ni.o aes256_aes_ni_enc_x8 T
rijndael_aes_ni.o aes256_aes_ni_setkey_enc T
rijndael_aes_ni.o rijndael256_aes_ni_enc T
rijndael_aes_ni.o rijndael256_aes_ni_enc_x2 T
rijndael_aes_ni.o rijndael256_aes_ni_enc_x4 T
rijndael_aes_ni.o rijndael256_aes_ni_enc_x8 T
rijndael_aes_ni.o rijndael256_aes_ni_setkey_enc T
sign.o SampleChallenge T
sign.o Sign T
sign.o Verify T
sign.o crypto_sign_signature T
sign.o crypto_sign_verify T
xof.o xof_init T
xof.o xof_init_x4 T
xof.o xof_squeeze T
xof.o xof_squeeze_x4 T
xof.o xof_update T
xof.o xof_update_x4 T

Namespace violations

KeccakHash.o Keccak_HashFinal T
KeccakHash.o Keccak_HashInitialize T
KeccakHash.o Keccak_HashSqueeze T
KeccakHash.o Keccak_HashUpdate T
KeccakHashtimes4.o Keccak_HashFinaltimes4 T
KeccakHashtimes4.o Keccak_HashInitializetimes4 T
KeccakHashtimes4.o Keccak_HashSqueezetimes4 T
KeccakHashtimes4.o Keccak_HashUpdatetimes4 T
KeccakP-1600-inplace32BI.o KeccakP1600_AddByte T
KeccakP-1600-inplace32BI.o KeccakP1600_AddBytes T
KeccakP-1600-inplace32BI.o KeccakP1600_AddBytesInLane T
KeccakP-1600-inplace32BI.o KeccakP1600_AddLanes T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractAndAddBytes T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractAndAddBytesInLane T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractAndAddLanes T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractBytes T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractBytesInLane T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractLanes T
KeccakP-1600-inplace32BI.o KeccakP1600_Initialize T
KeccakP-1600-inplace32BI.o KeccakP1600_OverwriteBytes T
KeccakP-1600-inplace32BI.o KeccakP1600_OverwriteBytesInLane T
KeccakP-1600-inplace32BI.o KeccakP1600_OverwriteLanes T
KeccakP-1600-inplace32BI.o KeccakP1600_OverwriteWithZeroes T
KeccakP-1600-inplace32BI.o KeccakP1600_Permute_12rounds T
KeccakP-1600-inplace32BI.o KeccakP1600_Permute_24rounds T
KeccakP-1600-inplace32BI.o KeccakP1600_Permute_Nrounds T
KeccakP-1600-inplace32BI.o KeccakP1600_SetBytesInLaneToZero T
KeccakP-1600-times4-on1.o KeccakP1600times4_AddByte T
KeccakP-1600-times4-on1.o KeccakP1600times4_AddBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_AddLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractAndAddBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractAndAddLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_InitializeAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_OverwriteBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_OverwriteLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_OverwriteWithZeroes T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_12rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_24rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_4rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_6rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_StaticInitialize T
KeccakSponge.o KeccakWidth1600_12rounds_Sponge T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeAbsorb T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeInitialize T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeSqueeze T
KeccakSponge.o KeccakWidth1600_Sponge T
KeccakSponge.o KeccakWidth1600_SpongeAbsorb T
KeccakSponge.o KeccakWidth1600_SpongeAbsorbLastFewBits T
KeccakSponge.o KeccakWidth1600_SpongeInitialize T
KeccakSponge.o KeccakWidth1600_SpongeSqueeze T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T
blc_default.o BLC_Commit_default T
blc_default.o BLC_Eval_default T
blc_default.o BLC_Open_default T
blc_memopt.o BLC_Commit_memopt T
blc_memopt.o BLC_Eval_memopt T
blc_memopt.o BLC_Open_memopt T
expand_mq.o ExpandEquations T
expand_mq.o ExpandEquations_memopt_init T
expand_mq.o ExpandEquations_memopt_update T
ggm_tree.o GGMTree_Expand T
ggm_tree.o GGMTree_ExpandPath T
ggm_tree.o GGMTree_GetNextLeaf T
ggm_tree.o GGMTree_GetNextLeafPartial T
ggm_tree.o GGMTree_GetNextLeafPartial_x4 T
ggm_tree.o GGMTree_GetNextLeaf_x4 T
ggm_tree.o GGMTree_InitIncrementalExpansion T
ggm_tree.o GGMTree_InitIncrementalExpansion_x4 T
ggm_tree.o GGMTree_InitIncrementalPartialExpansion T
ggm_tree.o GGMTree_InitIncrementalPartialExpansion_x4 T
ggm_tree.o GGMTree_Open T
ggm_tree.o GGMTree_PartiallyExpand T
keygen.o KeyGen T
piop_default.o ComputePAlpha_default T
piop_default.o RecomputePAlpha_default T
piop_memopt.o ComputePAlpha_memopt T
piop_memopt.o ComputePzEval_xTau T
piop_memopt.o ComputePz_xTau T
piop_memopt.o ExpandBatchingChallenge T
piop_memopt.o RecomputePAlpha_memopt T
prg.o PRG T
prg.o PRG_memopt T
prg.o PRG_x4 T
prg.o PRG_x8 T
rijndael_aes_ni.o aes128_aes_ni_enc T
rijndael_aes_ni.o aes128_aes_ni_enc_x2 T
rijndael_aes_ni.o aes128_aes_ni_enc_x4 T
rijndael_aes_ni.o aes128_aes_ni_enc_x8 T
rijndael_aes_ni.o aes128_aes_ni_setkey_enc T
rijndael_aes_ni.o aes256_aes_ni_enc T
rijndael_aes_ni.o aes256_aes_ni_enc_x2 T
rijndael_aes_ni.o aes256_aes_ni_enc_x4 T
rijndael_aes_ni.o aes256_aes_ni_enc_x8 T
rijndael_aes_ni.o aes256_aes_ni_setkey_enc T
rijndael_aes_ni.o rijndael256_aes_ni_enc T
rijndael_aes_ni.o rijndael256_aes_ni_enc_x2 T
rijndael_aes_ni.o rijndael256_aes_ni_enc_x4 T
rijndael_aes_ni.o rijndael256_aes_ni_enc_x8 T
rijndael_aes_ni.o rijndael256_aes_ni_setkey_enc T
sign.o SampleChallenge T
sign.o Sign T
sign.o Verify T
sign.o crypto_sign_signature T
sign.o crypto_sign_verify T
xof.o xof_init T
xof.o xof_init_x4 T
xof.o xof_squeeze T
xof.o xof_squeeze_x4 T
xof.o xof_update T
xof.o xof_update_x4 T

Namespace violations

KeccakHash.o Keccak_HashFinal T
KeccakHash.o Keccak_HashInitialize T
KeccakHash.o Keccak_HashSqueeze T
KeccakHash.o Keccak_HashUpdate T
KeccakHashtimes4.o Keccak_HashFinaltimes4 T
KeccakHashtimes4.o Keccak_HashInitializetimes4 T
KeccakHashtimes4.o Keccak_HashSqueezetimes4 T
KeccakHashtimes4.o Keccak_HashUpdatetimes4 T
KeccakP-1600-inplace32BI.o KeccakP1600_AddByte T
KeccakP-1600-inplace32BI.o KeccakP1600_AddBytes T
KeccakP-1600-inplace32BI.o KeccakP1600_AddBytesInLane T
KeccakP-1600-inplace32BI.o KeccakP1600_AddLanes T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractAndAddBytes T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractAndAddBytesInLane T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractAndAddLanes T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractBytes T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractBytesInLane T
KeccakP-1600-inplace32BI.o KeccakP1600_ExtractLanes T
KeccakP-1600-inplace32BI.o KeccakP1600_Initialize T
KeccakP-1600-inplace32BI.o KeccakP1600_OverwriteBytes T
KeccakP-1600-inplace32BI.o KeccakP1600_OverwriteBytesInLane T
KeccakP-1600-inplace32BI.o KeccakP1600_OverwriteLanes T
KeccakP-1600-inplace32BI.o KeccakP1600_OverwriteWithZeroes T
KeccakP-1600-inplace32BI.o KeccakP1600_Permute_12rounds T
KeccakP-1600-inplace32BI.o KeccakP1600_Permute_24rounds T
KeccakP-1600-inplace32BI.o KeccakP1600_Permute_Nrounds T
KeccakP-1600-inplace32BI.o KeccakP1600_SetBytesInLaneToZero T
KeccakP-1600-times4-on1.o KeccakP1600times4_AddByte T
KeccakP-1600-times4-on1.o KeccakP1600times4_AddBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_AddLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractAndAddBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractAndAddLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_InitializeAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_OverwriteBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_OverwriteLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_OverwriteWithZeroes T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_12rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_24rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_4rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_6rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_StaticInitialize T
KeccakSponge.o KeccakWidth1600_12rounds_Sponge T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeAbsorb T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeInitialize T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeSqueeze T
KeccakSponge.o KeccakWidth1600_Sponge T
KeccakSponge.o KeccakWidth1600_SpongeAbsorb T
KeccakSponge.o KeccakWidth1600_SpongeAbsorbLastFewBits T
KeccakSponge.o KeccakWidth1600_SpongeInitialize T
KeccakSponge.o KeccakWidth1600_SpongeSqueeze T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T
blc_default.o BLC_Commit_default T
blc_default.o BLC_Eval_default T
blc_default.o BLC_Open_default T
blc_memopt.o BLC_Commit_memopt T
blc_memopt.o BLC_Eval_memopt T
blc_memopt.o BLC_Open_memopt T
expand_mq.o ExpandEquations T
expand_mq.o ExpandEquations_memopt_init T
expand_mq.o ExpandEquations_memopt_update T
ggm_tree.o GGMTree_Expand T
ggm_tree.o GGMTree_ExpandPath T
ggm_tree.o GGMTree_GetNextLeaf T
ggm_tree.o GGMTree_GetNextLeafPartial T
ggm_tree.o GGMTree_GetNextLeafPartial_x4 T
ggm_tree.o GGMTree_GetNextLeaf_x4 T
ggm_tree.o GGMTree_InitIncrementalExpansion T
ggm_tree.o GGMTree_InitIncrementalExpansion_x4 T
ggm_tree.o GGMTree_InitIncrementalPartialExpansion T
ggm_tree.o GGMTree_InitIncrementalPartialExpansion_x4 T
ggm_tree.o GGMTree_Open T
ggm_tree.o GGMTree_PartiallyExpand T
keygen.o KeyGen T
piop_default.o ComputePAlpha_default T
piop_default.o RecomputePAlpha_default T
piop_memopt.o ComputePAlpha_memopt T
piop_memopt.o ComputePzEval_xTau T
piop_memopt.o ComputePz_xTau T
piop_memopt.o ExpandBatchingChallenge T
piop_memopt.o RecomputePAlpha_memopt T
prg.o PRG T
prg.o PRG_memopt T
prg.o PRG_x4 T
prg.o PRG_x8 T
rijndael_ct64.o aes128_ct64_enc T
rijndael_ct64.o aes128_ct64_enc_x2 T
rijndael_ct64.o aes128_ct64_enc_x4 T
rijndael_ct64.o aes128_ct64_enc_x8 T
rijndael_ct64.o aes128_ct64_setkey_enc T
rijndael_ct64.o aes256_ct64_enc T
rijndael_ct64.o aes256_ct64_enc_x2 T
rijndael_ct64.o aes256_ct64_enc_x4 T
rijndael_ct64.o aes256_ct64_enc_x8 T
rijndael_ct64.o aes256_ct64_setkey_enc T
rijndael_ct64.o rijndael256_ct64_enc T
rijndael_ct64.o rijndael256_ct64_enc_x2 T
rijndael_ct64.o rijndael256_ct64_enc_x4 T
rijndael_ct64.o rijndael256_ct64_enc_x8 T
rijndael_ct64.o rijndael256_ct64_setkey_enc T
sign.o SampleChallenge T
sign.o Sign T
sign.o Verify T
sign.o crypto_sign_signature T
sign.o crypto_sign_verify T
xof.o xof_init T
xof.o xof_init_x4 T
xof.o xof_squeeze T
xof.o xof_squeeze_x4 T
xof.o xof_update T
xof.o xof_update_x4 T

Namespace violations

KeccakHash.o Keccak_HashFinal T
KeccakHash.o Keccak_HashInitialize T
KeccakHash.o Keccak_HashSqueeze T
KeccakHash.o Keccak_HashUpdate T
KeccakHashtimes4.o Keccak_HashFinaltimes4 T
KeccakHashtimes4.o Keccak_HashInitializetimes4 T
KeccakHashtimes4.o Keccak_HashSqueezetimes4 T
KeccakHashtimes4.o Keccak_HashUpdatetimes4 T
KeccakP-1600-opt64.o KeccakF1600_FastLoop_Absorb T
KeccakP-1600-opt64.o KeccakP1600_12rounds_FastLoop_Absorb T
KeccakP-1600-opt64.o KeccakP1600_AddBytes T
KeccakP-1600-opt64.o KeccakP1600_AddBytesInLane T
KeccakP-1600-opt64.o KeccakP1600_AddLanes T
KeccakP-1600-opt64.o KeccakP1600_ExtractAndAddBytes T
KeccakP-1600-opt64.o KeccakP1600_ExtractAndAddBytesInLane T
KeccakP-1600-opt64.o KeccakP1600_ExtractAndAddLanes T
KeccakP-1600-opt64.o KeccakP1600_ExtractBytes T
KeccakP-1600-opt64.o KeccakP1600_ExtractBytesInLane T
KeccakP-1600-opt64.o KeccakP1600_ExtractLanes T
KeccakP-1600-opt64.o KeccakP1600_Initialize T
KeccakP-1600-opt64.o KeccakP1600_OverwriteBytes T
KeccakP-1600-opt64.o KeccakP1600_OverwriteBytesInLane T
KeccakP-1600-opt64.o KeccakP1600_OverwriteLanes T
KeccakP-1600-opt64.o KeccakP1600_OverwriteWithZeroes T
KeccakP-1600-opt64.o KeccakP1600_Permute_12rounds T
KeccakP-1600-opt64.o KeccakP1600_Permute_24rounds T
KeccakP-1600-opt64.o KeccakP1600_Permute_Nrounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_AddByte T
KeccakP-1600-times4-on1.o KeccakP1600times4_AddBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_AddLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractAndAddBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractAndAddLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_InitializeAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_OverwriteBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_OverwriteLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_OverwriteWithZeroes T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_12rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_24rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_4rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_6rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_StaticInitialize T
KeccakSponge.o KeccakWidth1600_12rounds_Sponge T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeAbsorb T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeInitialize T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeSqueeze T
KeccakSponge.o KeccakWidth1600_Sponge T
KeccakSponge.o KeccakWidth1600_SpongeAbsorb T
KeccakSponge.o KeccakWidth1600_SpongeAbsorbLastFewBits T
KeccakSponge.o KeccakWidth1600_SpongeInitialize T
KeccakSponge.o KeccakWidth1600_SpongeSqueeze T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T
blc_default.o BLC_Commit_default T
blc_default.o BLC_Eval_default T
blc_default.o BLC_Open_default T
blc_memopt.o BLC_Commit_memopt T
blc_memopt.o BLC_Eval_memopt T
blc_memopt.o BLC_Open_memopt T
expand_mq.o ExpandEquations T
expand_mq.o ExpandEquations_memopt_init T
expand_mq.o ExpandEquations_memopt_update T
ggm_tree.o GGMTree_Expand T
ggm_tree.o GGMTree_ExpandPath T
ggm_tree.o GGMTree_GetNextLeaf T
ggm_tree.o GGMTree_GetNextLeafPartial T
ggm_tree.o GGMTree_GetNextLeafPartial_x4 T
ggm_tree.o GGMTree_GetNextLeaf_x4 T
ggm_tree.o GGMTree_InitIncrementalExpansion T
ggm_tree.o GGMTree_InitIncrementalExpansion_x4 T
ggm_tree.o GGMTree_InitIncrementalPartialExpansion T
ggm_tree.o GGMTree_InitIncrementalPartialExpansion_x4 T
ggm_tree.o GGMTree_Open T
ggm_tree.o GGMTree_PartiallyExpand T
keygen.o KeyGen T
piop_default.o ComputePAlpha_default T
piop_default.o RecomputePAlpha_default T
piop_memopt.o ComputePAlpha_memopt T
piop_memopt.o ComputePzEval_xTau T
piop_memopt.o ComputePz_xTau T
piop_memopt.o ExpandBatchingChallenge T
piop_memopt.o RecomputePAlpha_memopt T
prg.o PRG T
prg.o PRG_memopt T
prg.o PRG_x4 T
prg.o PRG_x8 T
rijndael_aes_ni.o aes128_aes_ni_enc T
rijndael_aes_ni.o aes128_aes_ni_enc_x2 T
rijndael_aes_ni.o aes128_aes_ni_enc_x4 T
rijndael_aes_ni.o aes128_aes_ni_enc_x8 T
rijndael_aes_ni.o aes128_aes_ni_setkey_enc T
rijndael_aes_ni.o aes256_aes_ni_enc T
rijndael_aes_ni.o aes256_aes_ni_enc_x2 T
rijndael_aes_ni.o aes256_aes_ni_enc_x4 T
rijndael_aes_ni.o aes256_aes_ni_enc_x8 T
rijndael_aes_ni.o aes256_aes_ni_setkey_enc T
rijndael_aes_ni.o rijndael256_aes_ni_enc T
rijndael_aes_ni.o rijndael256_aes_ni_enc_x2 T
rijndael_aes_ni.o rijndael256_aes_ni_enc_x4 T
rijndael_aes_ni.o rijndael256_aes_ni_enc_x8 T
rijndael_aes_ni.o rijndael256_aes_ni_setkey_enc T
sign.o SampleChallenge T
sign.o Sign T
sign.o Verify T
sign.o crypto_sign_signature T
sign.o crypto_sign_verify T
xof.o xof_init T
xof.o xof_init_x4 T
xof.o xof_squeeze T
xof.o xof_squeeze_x4 T
xof.o xof_update T
xof.o xof_update_x4 T

Namespace violations

KeccakHash.o Keccak_HashFinal T
KeccakHash.o Keccak_HashInitialize T
KeccakHash.o Keccak_HashSqueeze T
KeccakHash.o Keccak_HashUpdate T
KeccakHashtimes4.o Keccak_HashFinaltimes4 T
KeccakHashtimes4.o Keccak_HashInitializetimes4 T
KeccakHashtimes4.o Keccak_HashSqueezetimes4 T
KeccakHashtimes4.o Keccak_HashUpdatetimes4 T
KeccakP-1600-opt64.o KeccakF1600_FastLoop_Absorb T
KeccakP-1600-opt64.o KeccakP1600_12rounds_FastLoop_Absorb T
KeccakP-1600-opt64.o KeccakP1600_AddBytes T
KeccakP-1600-opt64.o KeccakP1600_AddBytesInLane T
KeccakP-1600-opt64.o KeccakP1600_AddLanes T
KeccakP-1600-opt64.o KeccakP1600_ExtractAndAddBytes T
KeccakP-1600-opt64.o KeccakP1600_ExtractAndAddBytesInLane T
KeccakP-1600-opt64.o KeccakP1600_ExtractAndAddLanes T
KeccakP-1600-opt64.o KeccakP1600_ExtractBytes T
KeccakP-1600-opt64.o KeccakP1600_ExtractBytesInLane T
KeccakP-1600-opt64.o KeccakP1600_ExtractLanes T
KeccakP-1600-opt64.o KeccakP1600_Initialize T
KeccakP-1600-opt64.o KeccakP1600_OverwriteBytes T
KeccakP-1600-opt64.o KeccakP1600_OverwriteBytesInLane T
KeccakP-1600-opt64.o KeccakP1600_OverwriteLanes T
KeccakP-1600-opt64.o KeccakP1600_OverwriteWithZeroes T
KeccakP-1600-opt64.o KeccakP1600_Permute_12rounds T
KeccakP-1600-opt64.o KeccakP1600_Permute_24rounds T
KeccakP-1600-opt64.o KeccakP1600_Permute_Nrounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_AddByte T
KeccakP-1600-times4-on1.o KeccakP1600times4_AddBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_AddLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractAndAddBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractAndAddLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_ExtractLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_InitializeAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_OverwriteBytes T
KeccakP-1600-times4-on1.o KeccakP1600times4_OverwriteLanesAll T
KeccakP-1600-times4-on1.o KeccakP1600times4_OverwriteWithZeroes T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_12rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_24rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_4rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_PermuteAll_6rounds T
KeccakP-1600-times4-on1.o KeccakP1600times4_StaticInitialize T
KeccakSponge.o KeccakWidth1600_12rounds_Sponge T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeAbsorb T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeInitialize T
KeccakSponge.o KeccakWidth1600_12rounds_SpongeSqueeze T
KeccakSponge.o KeccakWidth1600_Sponge T
KeccakSponge.o KeccakWidth1600_SpongeAbsorb T
KeccakSponge.o KeccakWidth1600_SpongeAbsorbLastFewBits T
KeccakSponge.o KeccakWidth1600_SpongeInitialize T
KeccakSponge.o KeccakWidth1600_SpongeSqueeze T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T
blc_default.o BLC_Commit_default T
blc_default.o BLC_Eval_default T
blc_default.o BLC_Open_default T
blc_memopt.o BLC_Commit_memopt T
blc_memopt.o BLC_Eval_memopt T
blc_memopt.o BLC_Open_memopt T
expand_mq.o ExpandEquations T
expand_mq.o ExpandEquations_memopt_init T
expand_mq.o ExpandEquations_memopt_update T
ggm_tree.o GGMTree_Expand T
ggm_tree.o GGMTree_ExpandPath T
ggm_tree.o GGMTree_GetNextLeaf T
ggm_tree.o GGMTree_GetNextLeafPartial T
ggm_tree.o GGMTree_GetNextLeafPartial_x4 T
ggm_tree.o GGMTree_GetNextLeaf_x4 T
ggm_tree.o GGMTree_InitIncrementalExpansion T
ggm_tree.o GGMTree_InitIncrementalExpansion_x4 T
ggm_tree.o GGMTree_InitIncrementalPartialExpansion T
ggm_tree.o GGMTree_InitIncrementalPartialExpansion_x4 T
ggm_tree.o GGMTree_Open T
ggm_tree.o GGMTree_PartiallyExpand T
keygen.o KeyGen T
piop_default.o ComputePAlpha_default T
piop_default.o RecomputePAlpha_default T
piop_memopt.o ComputePAlpha_memopt T
piop_memopt.o ComputePzEval_xTau T
piop_memopt.o ComputePz_xTau T
piop_memopt.o ExpandBatchingChallenge T
piop_memopt.o RecomputePAlpha_memopt T
prg.o PRG T
prg.o PRG_memopt T
prg.o PRG_x4 T
prg.o PRG_x8 T
rijndael_ct64.o aes128_ct64_enc T
rijndael_ct64.o aes128_ct64_enc_x2 T
rijndael_ct64.o aes128_ct64_enc_x4 T
rijndael_ct64.o aes128_ct64_enc_x8 T
rijndael_ct64.o aes128_ct64_setkey_enc T
rijndael_ct64.o aes256_ct64_enc T
rijndael_ct64.o aes256_ct64_enc_x2 T
rijndael_ct64.o aes256_ct64_enc_x4 T
rijndael_ct64.o aes256_ct64_enc_x8 T
rijndael_ct64.o aes256_ct64_setkey_enc T
rijndael_ct64.o rijndael256_ct64_enc T
rijndael_ct64.o rijndael256_ct64_enc_x2 T
rijndael_ct64.o rijndael256_ct64_enc_x4 T
rijndael_ct64.o rijndael256_ct64_enc_x8 T
rijndael_ct64.o rijndael256_ct64_setkey_enc T
sign.o SampleChallenge T
sign.o Sign T
sign.o Verify T
sign.o crypto_sign_signature T
sign.o crypto_sign_verify T
xof.o xof_init T
xof.o xof_init_x4 T
xof.o xof_squeeze T
xof.o xof_squeeze_x4 T
xof.o xof_update T
xof.o xof_update_x4 T

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x13481D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx2_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1376FD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx2_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x132D4D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx2_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A268
   at 0x...: core (try-anything.c:73)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A1D0
   at 0x...: core (try-anything.c:68)
   by 0x...: salsa20.part.0 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A446
   at 0x...: st32 (try-anything.c:47)
   by 0x...: core (try-anything.c:78)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x13575D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx2_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x12D15D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx2_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x133C9D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx2_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1367BD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx2_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x13210D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx2_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x134C9D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx2_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x12C81D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx2_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x13147D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx512_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1338ED
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx512_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x12E82D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx512_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x131A0D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx512_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x128BBD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx512_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x130D3D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx512_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1332AD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx512_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x12DDED
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx512_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x130E8D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx512_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1281BD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_avx512_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x122E1D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_plain32_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x126BDD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_plain32_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x12034D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_plain32_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10A258
   at 0x...: core (try-anything.c:73)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1282ED
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_plain32_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x12284D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_plain32_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11994D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_plain32_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x12270D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_plain32_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x12782D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_plain32_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11F78D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_plain32_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x12784D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_plain32_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x121D3D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_plain32_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x11902D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_plain32_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x13063D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_ref_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1343ED
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_ref_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x12DBED
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_ref_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1369DD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_ref_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x133D1D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_ref_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x1266BD
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_ref_default_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x12FF2D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_ref_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x13503D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_ref_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x12D02D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_ref_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x135F3D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_ref_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x13321D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_ref_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction

TIMECOP error (can be valgrind bug)

error 132

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x125D9D
   at 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex_ECRYPT_encrypt_bytes (u16mask.h:114)
   by 0x...: crypto_stream_chacha20_dolbeau_amd64_avx2_constbranchindex (include/estream-convert-api.h:83)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: crypto_sign_mqom2cat1gf256fastr5_ref_memopt_constbranchindex_keypair (keygen.c:170)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)
Illegal instruction