Implementation notes: amd64, cezanne, crypto_kem/ledakemcpa32

Compiler output

gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c: In function 'gf2x_mod_fmac':
gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c:803:39: warning: iteration 1 invokes undefined behavior [-Waggressive-loop-optimizations]
gf2x_arith_mod_xPplusOne.c:   803 |             result[j] ^= (shifted_temp[j] << low_shift_amt) | ( zeroshift_mask &
gf2x_arith_mod_xPplusOne.c:       |                           ~~~~~~~~~~~~^~~
gf2x_arith_mod_xPplusOne.c: gf2x_arith_mod_xPplusOne.c:802:9: note: within this loop
gf2x_arith_mod_xPplusOne.c:   802 |         for (; j < NUM_DIGITS_GF2X_ELEMENT-1 ; j++) {
gf2x_arith_mod_xPplusOne.c:       |         ^~~

Namespace violations

H_Q_matrices_generation.o generateHPosOnes T
H_Q_matrices_generation.o transposeHPosOnes T
aes256.o rijndaelEncrypt T
aes256.o rijndaelKeySetupEnc T
bf_decoding.o bf_decoding_CT T
bf_decoding.o lift_mul_dense_to_sparse_CT T
djbsort.o int32_sort T
gf2x_arith.o gf2x_mul_Kar T
gf2x_arith.o gf2x_mul_TC3 T
gf2x_arith.o gf2x_mul_avx T
gf2x_arith_mod_xPplusOne.o gf2x_mod_fmac T
gf2x_arith_mod_xPplusOne.o gf2x_mod_inverse_KTT T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul_dense_to_sparse T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul_monom T
gf2x_arith_mod_xPplusOne.o gf2x_transpose_in_place T
gf2x_arith_mod_xPplusOne.o rand_circulant_sparse_block T
gf2x_arith_mod_xPplusOne.o rand_error_pos T
gf2x_arith_mod_xPplusOne.o rand_error_pos_shake T
inverse_exp.o gf2x_mod_inverse_exp T
inverse_exp.o inverse_index_permutation_table D
inverse_exp.o pow_2_A T
inverse_exp.o raise_2_i_clmul T
inverse_exp.o raise_2_i_hybrid T
inverse_exp.o raise_2_i_inverse_perm_table_linsweep T
niederreiter_decrypt.o decrypt_niederreiter_indcpa T
niederreiter_encrypt.o encrypt_niederreiter_indcpa T
niederreiter_keygen.o key_gen_niederreiter T
niederreiter_keygen.o privateKey_deletion_niederreiter T
niederreiter_keygen.o publicKey_deletion_niederreiter T
rng.o AES256_CTR_DRBG_Update T
rng.o AES256_ECB T
rng.o DRBG_ctx B
rng.o deterministic_random_byte_generator T
rng.o rand_range T
rng.o rand_range_shake T
rng.o seedexpander T
rng.o seedexpander_from_trng T
rng.o seedexpander_init T
rng.o shake_seedexpander_extract T
rng.o shake_seedexpander_init T

Namespace violations

H_Q_matrices_generation.o generateHPosOnes T
H_Q_matrices_generation.o transposeHPosOnes T
aes256.o rijndaelEncrypt T
aes256.o rijndaelKeySetupEnc T
bf_decoding.o bf_decoding_CT T
bf_decoding.o lift_mul_dense_to_sparse_CT T
djbsort.o int32_sort T
gf2x_arith.o gf2x_mul_Kar T
gf2x_arith.o gf2x_mul_TC3 T
gf2x_arith.o gf2x_mul_comb T
gf2x_arith_mod_xPplusOne.o gf2x_digit_times_poly_mul T
gf2x_arith_mod_xPplusOne.o gf2x_mod_fmac T
gf2x_arith_mod_xPplusOne.o gf2x_mod_inverse_KTT T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul_dense_to_sparse T
gf2x_arith_mod_xPplusOne.o gf2x_mod_mul_monom T
gf2x_arith_mod_xPplusOne.o gf2x_transpose_in_place T
gf2x_arith_mod_xPplusOne.o rand_circulant_sparse_block T
gf2x_arith_mod_xPplusOne.o rand_error_pos T
gf2x_arith_mod_xPplusOne.o rand_error_pos_shake T
inverse_exp.o gf2x_mod_inverse_exp T
inverse_exp.o inverse_factors_table D
inverse_exp.o pow_2_A T
inverse_exp.o raise_2_i_clmul T
inverse_exp.o raise_2_i_factor_inverse_permute T
inverse_exp.o raise_2_i_hybrid T
niederreiter_decrypt.o decrypt_niederreiter_indcpa T
niederreiter_encrypt.o encrypt_niederreiter_indcpa T
niederreiter_keygen.o key_gen_niederreiter T
niederreiter_keygen.o privateKey_deletion_niederreiter T
niederreiter_keygen.o publicKey_deletion_niederreiter T
rng.o AES256_CTR_DRBG_Update T
rng.o AES256_ECB T
rng.o DRBG_ctx B
rng.o deterministic_random_byte_generator T
rng.o rand_range T
rng.o rand_range_shake T
rng.o seedexpander T
rng.o seedexpander_from_trng T
rng.o seedexpander_init T
rng.o shake_seedexpander_extract T
rng.o shake_seedexpander_init T