Test results for amd64, saber214, crypto_sign/picnicl1fs

[Page version: 20241023 11:56:08]

Test failure

error 111

Compiler output

lowmc.c: lowmc.c:54:20: warning: unused function 'sbox_s128_full' [-Wunused-function]
lowmc.c: static inline void sbox_s128_full(mzd_local_t* in, const word128* mask_a, const word128* mask_b,
lowmc.c:                    ^
lowmc.c: lowmc.c:90:23: warning: unused function 'sbox_s256_lowmc_full' [-Wunused-function]
lowmc.c: static inline word256 sbox_s256_lowmc_full(const word256 min, const word256 mask_a,
lowmc.c:                       ^
lowmc.c: 2 warnings generated.

Compiler output

lowmc.c: lowmc.c:54:20: warning: unused function 'sbox_s128_full' [-Wunused-function]
lowmc.c: static inline void sbox_s128_full(mzd_local_t* in, const word128* mask_a, const word128* mask_b,
lowmc.c:                    ^
lowmc.c: 1 warning generated.

Compiler output

picnic_impl.c: picnic_impl.c: In function 'mpc_LowMC_verify':
picnic_impl.c: picnic_impl.c:533:5: warning: 'mpc_matrix_mul' accessing 24 bytes in a region of size 16 [-Wstringop-overflow=]
picnic_impl.c:   533 |     mpc_matrix_mul(roundKey, keyShares, KMatrix(0, params), params, 2);
picnic_impl.c:       |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
picnic_impl.c: picnic_impl.c:533:5: note: referencing argument 1 of type 'uint32_t **' {aka 'unsigned int **'}
picnic_impl.c: picnic_impl.c:533:5: warning: 'mpc_matrix_mul' accessing 24 bytes in a region of size 16 [-Wstringop-overflow=]
picnic_impl.c: picnic_impl.c:533:5: note: referencing argument 2 of type 'uint32_t **' {aka 'unsigned int **'}
picnic_impl.c: picnic_impl.c:506:6: note: in a call to function 'mpc_matrix_mul'
picnic_impl.c:   506 | void mpc_matrix_mul(uint32_t* output[3], uint32_t* state[3], const uint32_t* matrix,
picnic_impl.c:       |      ^~~~~~~~~~~~~~
picnic_impl.c: picnic_impl.c:534:5: warning: 'mpc_xor' accessing 24 bytes in a region of size 16 [-Wstringop-overflow=]
picnic_impl.c:   534 |     mpc_xor(state, roundKey, params->stateSizeWords, 2);
picnic_impl.c:       |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
picnic_impl.c: picnic_impl.c:534:5: note: referencing argument 1 of type 'uint32_t **' {aka 'unsigned int **'}
picnic_impl.c: picnic_impl.c:534:5: warning: 'mpc_xor' accessing 24 bytes in a region of size 16 [-Wstringop-overflow=]
picnic_impl.c: picnic_impl.c:534:5: note: referencing argument 2 of type 'uint32_t **' {aka 'unsigned int **'}
picnic_impl.c: picnic_impl.c:260:6: note: in a call to function 'mpc_xor'
picnic_impl.c:   260 | void mpc_xor(uint32_t* state[3], uint32_t* in[3], uint32_t len, int players)
picnic_impl.c:       |      ^~~~~~~
picnic_impl.c: picnic_impl.c:537:9: warning: 'mpc_matrix_mul' accessing 24 bytes in a region of size 16 [-Wstringop-overflow=]
picnic_impl.c:   537 |         mpc_matrix_mul(roundKey, keyShares, KMatrix(r, params), params, 2);
picnic_impl.c:       |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
picnic_impl.c: picnic_impl.c:537:9: note: referencing argument 1 of type 'uint32_t **' {aka 'unsigned int **'}
picnic_impl.c: picnic_impl.c:537:9: warning: 'mpc_matrix_mul' accessing 24 bytes in a region of size 16 [-Wstringop-overflow=]
picnic_impl.c: picnic_impl.c:537:9: note: referencing argument 2 of type 'uint32_t **' {aka 'unsigned int **'}
picnic_impl.c: ...

Namespace violations

KeccakHashtimes4.o Keccak_HashFinaltimes4 T
KeccakHashtimes4.o Keccak_HashInitializetimes4 T
KeccakHashtimes4.o Keccak_HashSqueezetimes4 T
KeccakHashtimes4.o Keccak_HashUpdatetimes4 T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T
compat.o picnic_explicit_bzero T
compat.o picnic_timingsafe_bcmp T
io.o mzd_from_char_array T
io.o mzd_to_char_array T
lowmc.o lowmc_compute T
lowmc.o lowmc_record_state T
lowmc_128_128_20.o lowmc_128_128_20 D
mpc_lowmc.o get_zkbpp_lowmc_implementation T
mpc_lowmc.o get_zkbpp_lowmc_verify_implementation T
mpc_lowmc.o get_zkbpp_share_implentation T
mzd_additional.o mzd_addmul_v_s128_128 T
mzd_additional.o mzd_addmul_v_s128_129 T
mzd_additional.o mzd_addmul_v_s128_192 T
mzd_additional.o mzd_addmul_v_s128_256 T
mzd_additional.o mzd_addmul_v_s128_30_128 T
mzd_additional.o mzd_addmul_v_s256_128 T
mzd_additional.o mzd_addmul_v_s256_129 T
mzd_additional.o mzd_addmul_v_s256_192 T
mzd_additional.o mzd_addmul_v_s256_256 T
mzd_additional.o mzd_addmul_v_s256_30_128 T
mzd_additional.o mzd_addmul_v_uint64_128 T
mzd_additional.o mzd_addmul_v_uint64_129 T
mzd_additional.o mzd_addmul_v_uint64_192 T
mzd_additional.o mzd_addmul_v_uint64_256 T
mzd_additional.o mzd_addmul_v_uint64_30_128 T
mzd_additional.o mzd_and_s128_128 T
mzd_additional.o mzd_and_s128_256 T
mzd_additional.o mzd_and_s256_128 T
mzd_additional.o mzd_and_s256_256 T
mzd_additional.o mzd_and_uint64_128 T
mzd_additional.o mzd_and_uint64_192 T
mzd_additional.o mzd_and_uint64_256 T
mzd_additional.o mzd_copy_s128_128 T
mzd_additional.o mzd_copy_s128_256 T
mzd_additional.o mzd_copy_s256_128 T
mzd_additional.o mzd_copy_s256_256 T
mzd_additional.o mzd_copy_uint64_128 T
mzd_additional.o mzd_copy_uint64_192 T
mzd_additional.o mzd_copy_uint64_256 T
mzd_additional.o mzd_local_init_ex T
mzd_additional.o mzd_mul_v_parity_uint64_128_30 T
mzd_additional.o mzd_mul_v_s128_128 T
mzd_additional.o mzd_mul_v_s128_128_640 T
mzd_additional.o mzd_mul_v_s128_129 T
mzd_additional.o mzd_mul_v_s128_192 T
mzd_additional.o mzd_mul_v_s128_256 T
mzd_additional.o mzd_mul_v_s256_128 T
mzd_additional.o mzd_mul_v_s256_128_768 T
mzd_additional.o mzd_mul_v_s256_129 T
mzd_additional.o mzd_mul_v_s256_192 T
mzd_additional.o mzd_mul_v_s256_256 T
mzd_additional.o mzd_mul_v_uint64_128 T
mzd_additional.o mzd_mul_v_uint64_128_640 T
mzd_additional.o mzd_mul_v_uint64_129 T
mzd_additional.o mzd_mul_v_uint64_192 T
mzd_additional.o mzd_mul_v_uint64_256 T
mzd_additional.o mzd_shift_left_uint64_128 T
mzd_additional.o mzd_shift_left_uint64_192 T
mzd_additional.o mzd_shift_left_uint64_256 T
mzd_additional.o mzd_shift_right_uint64_128 T
mzd_additional.o mzd_shift_right_uint64_192 T
mzd_additional.o mzd_shift_right_uint64_256 T
mzd_additional.o mzd_shuffle_128_30 T
mzd_additional.o mzd_shuffle_pext_128_30 T
mzd_additional.o mzd_xor_s128_128 T
mzd_additional.o mzd_xor_s128_256 T
mzd_additional.o mzd_xor_s128_640 T
mzd_additional.o mzd_xor_s256_1024 T
mzd_additional.o mzd_xor_s256_128 T
mzd_additional.o mzd_xor_s256_1280 T
mzd_additional.o mzd_xor_s256_256 T
mzd_additional.o mzd_xor_s256_768 T
mzd_additional.o mzd_xor_uint64_128 T
mzd_additional.o mzd_xor_uint64_192 T
mzd_additional.o mzd_xor_uint64_256 T
mzd_additional.o mzd_xor_uint64_640 T
picnic.o picnic_clear_private_key T
picnic.o picnic_get_lowmc_block_size T
picnic.o picnic_get_param_name T
picnic.o picnic_get_private_key_param T
picnic.o picnic_get_private_key_size T
picnic.o picnic_get_public_key_param T
picnic.o picnic_get_public_key_size T
picnic.o picnic_keygen T
picnic.o picnic_read_private_key T
picnic.o picnic_read_public_key T
picnic.o picnic_sign T
picnic.o picnic_signature_size T
picnic.o picnic_sk_to_pk T
picnic.o picnic_validate_keypair T
picnic.o picnic_verify T
picnic.o picnic_write_private_key T
picnic.o picnic_write_public_key T
picnic_impl.o picnic_impl_sign T
picnic_impl.o picnic_impl_verify T
picnic_instances.o picnic_instance_get T
randomness.o rand_bits T

Namespace violations

KeccakHashtimes4.o Keccak_HashFinaltimes4 T
KeccakHashtimes4.o Keccak_HashInitializetimes4 T
KeccakHashtimes4.o Keccak_HashSqueezetimes4 T
KeccakHashtimes4.o Keccak_HashUpdatetimes4 T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T
compat.o picnic_explicit_bzero T
compat.o picnic_timingsafe_bcmp T
io.o mzd_from_char_array T
io.o mzd_to_char_array T
lowmc.o lowmc_compute T
lowmc.o lowmc_record_state T
lowmc_128_128_20.o lowmc_128_128_20 D
mpc_lowmc.o get_zkbpp_lowmc_implementation T
mpc_lowmc.o get_zkbpp_lowmc_verify_implementation T
mpc_lowmc.o get_zkbpp_share_implentation T
mzd_additional.o mzd_addmul_v_uint64_128 T
mzd_additional.o mzd_addmul_v_uint64_129 T
mzd_additional.o mzd_addmul_v_uint64_192 T
mzd_additional.o mzd_addmul_v_uint64_256 T
mzd_additional.o mzd_addmul_v_uint64_30_128 T
mzd_additional.o mzd_and_uint64_128 T
mzd_additional.o mzd_and_uint64_192 T
mzd_additional.o mzd_and_uint64_256 T
mzd_additional.o mzd_copy_uint64_128 T
mzd_additional.o mzd_copy_uint64_192 T
mzd_additional.o mzd_copy_uint64_256 T
mzd_additional.o mzd_local_init_ex T
mzd_additional.o mzd_mul_v_parity_uint64_128_30 T
mzd_additional.o mzd_mul_v_uint64_128 T
mzd_additional.o mzd_mul_v_uint64_128_640 T
mzd_additional.o mzd_mul_v_uint64_129 T
mzd_additional.o mzd_mul_v_uint64_192 T
mzd_additional.o mzd_mul_v_uint64_256 T
mzd_additional.o mzd_shift_left_uint64_128 T
mzd_additional.o mzd_shift_left_uint64_192 T
mzd_additional.o mzd_shift_left_uint64_256 T
mzd_additional.o mzd_shift_right_uint64_128 T
mzd_additional.o mzd_shift_right_uint64_192 T
mzd_additional.o mzd_shift_right_uint64_256 T
mzd_additional.o mzd_shuffle_128_30 T
mzd_additional.o mzd_xor_uint64_128 T
mzd_additional.o mzd_xor_uint64_192 T
mzd_additional.o mzd_xor_uint64_256 T
mzd_additional.o mzd_xor_uint64_640 T
picnic.o picnic_clear_private_key T
picnic.o picnic_get_lowmc_block_size T
picnic.o picnic_get_param_name T
picnic.o picnic_get_private_key_param T
picnic.o picnic_get_private_key_size T
picnic.o picnic_get_public_key_param T
picnic.o picnic_get_public_key_size T
picnic.o picnic_keygen T
picnic.o picnic_read_private_key T
picnic.o picnic_read_public_key T
picnic.o picnic_sign T
picnic.o picnic_signature_size T
picnic.o picnic_sk_to_pk T
picnic.o picnic_validate_keypair T
picnic.o picnic_verify T
picnic.o picnic_write_private_key T
picnic.o picnic_write_public_key T
picnic_impl.o picnic_impl_sign T
picnic_impl.o picnic_impl_verify T
picnic_instances.o picnic_instance_get T
randomness.o rand_bits T

Namespace violations

KeccakHashtimes4.o Keccak_HashFinaltimes4 T
KeccakHashtimes4.o Keccak_HashInitializetimes4 T
KeccakHashtimes4.o Keccak_HashSqueezetimes4 T
KeccakHashtimes4.o Keccak_HashUpdatetimes4 T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorb T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeAbsorbLastFewBits T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeInitialize T
KeccakSpongetimes4.o KeccakWidth1600times4_SpongeSqueeze T
compat.o picnic_explicit_bzero T
compat.o picnic_timingsafe_bcmp T
io.o mzd_from_char_array T
io.o mzd_to_char_array T
lowmc.o lowmc_compute T
lowmc.o lowmc_record_state T
lowmc_128_128_20.o lowmc_128_128_20 D
mpc_lowmc.o get_zkbpp_lowmc_implementation T
mpc_lowmc.o get_zkbpp_lowmc_verify_implementation T
mpc_lowmc.o get_zkbpp_share_implentation T
mzd_additional.o mzd_addmul_v_s128_128 T
mzd_additional.o mzd_addmul_v_s128_129 T
mzd_additional.o mzd_addmul_v_s128_192 T
mzd_additional.o mzd_addmul_v_s128_256 T
mzd_additional.o mzd_addmul_v_s128_30_128 T
mzd_additional.o mzd_addmul_v_uint64_128 T
mzd_additional.o mzd_addmul_v_uint64_129 T
mzd_additional.o mzd_addmul_v_uint64_192 T
mzd_additional.o mzd_addmul_v_uint64_256 T
mzd_additional.o mzd_addmul_v_uint64_30_128 T
mzd_additional.o mzd_and_s128_128 T
mzd_additional.o mzd_and_s128_256 T
mzd_additional.o mzd_and_uint64_128 T
mzd_additional.o mzd_and_uint64_192 T
mzd_additional.o mzd_and_uint64_256 T
mzd_additional.o mzd_copy_s128_128 T
mzd_additional.o mzd_copy_s128_256 T
mzd_additional.o mzd_copy_uint64_128 T
mzd_additional.o mzd_copy_uint64_192 T
mzd_additional.o mzd_copy_uint64_256 T
mzd_additional.o mzd_local_init_ex T
mzd_additional.o mzd_mul_v_parity_uint64_128_30 T
mzd_additional.o mzd_mul_v_s128_128 T
mzd_additional.o mzd_mul_v_s128_128_640 T
mzd_additional.o mzd_mul_v_s128_129 T
mzd_additional.o mzd_mul_v_s128_192 T
mzd_additional.o mzd_mul_v_s128_256 T
mzd_additional.o mzd_mul_v_uint64_128 T
mzd_additional.o mzd_mul_v_uint64_128_640 T
mzd_additional.o mzd_mul_v_uint64_129 T
mzd_additional.o mzd_mul_v_uint64_192 T
mzd_additional.o mzd_mul_v_uint64_256 T
mzd_additional.o mzd_shift_left_uint64_128 T
mzd_additional.o mzd_shift_left_uint64_192 T
mzd_additional.o mzd_shift_left_uint64_256 T
mzd_additional.o mzd_shift_right_uint64_128 T
mzd_additional.o mzd_shift_right_uint64_192 T
mzd_additional.o mzd_shift_right_uint64_256 T
mzd_additional.o mzd_shuffle_128_30 T
mzd_additional.o mzd_xor_s128_128 T
mzd_additional.o mzd_xor_s128_256 T
mzd_additional.o mzd_xor_s128_640 T
mzd_additional.o mzd_xor_uint64_128 T
mzd_additional.o mzd_xor_uint64_192 T
mzd_additional.o mzd_xor_uint64_256 T
mzd_additional.o mzd_xor_uint64_640 T
picnic.o picnic_clear_private_key T
picnic.o picnic_get_lowmc_block_size T
picnic.o picnic_get_param_name T
picnic.o picnic_get_private_key_param T
picnic.o picnic_get_private_key_size T
picnic.o picnic_get_public_key_param T
picnic.o picnic_get_public_key_size T
picnic.o picnic_keygen T
picnic.o picnic_read_private_key T
picnic.o picnic_read_public_key T
picnic.o picnic_sign T
picnic.o picnic_signature_size T
picnic.o picnic_sk_to_pk T
picnic.o picnic_validate_keypair T
picnic.o picnic_verify T
picnic.o picnic_write_private_key T
picnic.o picnic_write_public_key T
picnic_impl.o picnic_impl_sign T
picnic_impl.o picnic_impl_verify T
picnic_instances.o picnic_instance_get T
randomness.o rand_bits T

Namespace violations

api.o params D
hash.o HashFinal T
hash.o HashInit T
hash.o HashSqueeze T
hash.o HashUpdate T
hash.o HashUpdateIntLE T
hash.o fromLittleEndian T
hash.o toLittleEndian T
lowmc_constants.o KMatrix T
lowmc_constants.o KMatrixInv T
lowmc_constants.o LMatrix T
lowmc_constants.o LMatrixInv T
lowmc_constants.o RConstant T
picnic.o get_param_set T
picnic.o get_transform T
picnic.o is_picnic3 T
picnic.o picnic_get_param_name T
picnic.o picnic_keygen T
picnic.o picnic_read_private_key T
picnic.o picnic_read_public_key T
picnic.o picnic_sign T
picnic.o picnic_signature_size T
picnic.o picnic_validate_keypair T
picnic.o picnic_verify T
picnic.o picnic_write_private_key T
picnic.o picnic_write_public_key T
picnic.o print_signature T
picnic3_impl.o ceil_log2 T
picnic3_impl.o deserializeSignature2 T
picnic3_impl.o serializeSignature2 T
picnic3_impl.o sign_picnic3 T
picnic3_impl.o verify_picnic3 T
picnic_impl.o Commit T
picnic_impl.o G T
picnic_impl.o H3 T
picnic_impl.o LowMCEnc T
picnic_impl.o arePaddingBitsZero T
picnic_impl.o computeSeeds T
picnic_impl.o createRandomTape T
picnic_impl.o deserializeSignature T
picnic_impl.o getBit T
picnic_impl.o getBitFromWordArray T
picnic_impl.o getChallenge T
picnic_impl.o matrix_mul T
picnic_impl.o mpc_AND T
picnic_impl.o mpc_AND_verify T
picnic_impl.o mpc_LowMC T
picnic_impl.o mpc_LowMC_verify T
picnic_impl.o mpc_matrix_mul T
picnic_impl.o mpc_substitution T
picnic_impl.o mpc_substitution_verify T
picnic_impl.o mpc_xor T
picnic_impl.o mpc_xor_constant T
picnic_impl.o mpc_xor_constant_verify T
picnic_impl.o numBytes T
picnic_impl.o parity T
picnic_impl.o printHex T
picnic_impl.o prove T
picnic_impl.o random_bytes_supercop T
picnic_impl.o serializeSignature T
picnic_impl.o setBit T
picnic_impl.o setBitInWordArray T
picnic_impl.o setChallenge T
picnic_impl.o sign_picnic1 T
picnic_impl.o verify T
picnic_impl.o verifyProof T
picnic_impl.o xor_array T
picnic_impl.o xor_three T
picnic_impl.o zeroTrailingBits T
picnic_types.o allocateCommitments T
picnic_types.o allocateCommitments2 T
picnic_types.o allocateGCommitments T
picnic_types.o allocateInputs T
picnic_types.o allocateMsgs T
picnic_types.o allocateProof T
picnic_types.o allocateProof2 T
picnic_types.o allocateRandomTape T
picnic_types.o allocateSeeds T
picnic_types.o allocateShares T
picnic_types.o allocateSignature T
picnic_types.o allocateSignature2 T
picnic_types.o allocateView T
picnic_types.o allocateViews T
picnic_types.o freeCommitments T
picnic_types.o freeCommitments2 T
picnic_types.o freeGCommitments T
picnic_types.o freeInputs T
picnic_types.o freeMsgs T
picnic_types.o freeProof T
picnic_types.o freeProof2 T
picnic_types.o freeRandomTape T
picnic_types.o freeSeeds T
picnic_types.o freeShares T
picnic_types.o freeSignature T
picnic_types.o freeSignature2 T
picnic_types.o freeView T
picnic_types.o freeViews T
picnic_types.o getTapeSizeBytes T
tree.o addMerkleNodes T
tree.o buildMerkleTree T
tree.o createTree T
tree.o exists T
tree.o expandSeeds T
tree.o freeTree T
tree.o generateSeeds T
tree.o getLeaf T
tree.o getLeaves T
tree.o getParent T
tree.o getSibling T
tree.o hasLeftChild T
tree.o hasRightChild T
tree.o hasSibling T
tree.o hashSeed T
tree.o isLeafNode T
tree.o isLeftChild T
tree.o openMerkleTree T
tree.o openMerkleTreeSize T
tree.o printLeaves T
tree.o printSeeds T
tree.o reconstructSeeds T
tree.o revealSeeds T
tree.o revealSeedsSize T
tree.o verifyMerkleTree T

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10C9ED
   at 0x...: salsa20.part.0 (try-anything.c:102)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10C63A
   at 0x...: core (try-anything.c:53)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x116861
   at 0x...: crypto_stream_chacha20_moon_xop_64_constbranchindex_blocks_xop (chacha.S:101)
   by 0x...: ??? (in /home/djb/supercop-data/saber214/amd64/try/c/gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_sign/picnicl1fs/optimizedct/avx2/work/try-timecop)
   by 0x...: crypto_stream_chacha20_moon_xop_64_constbranchindex (crypto_stream.c:14)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl1fs_optimizedct_avx2_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10B9FD
   at 0x...: salsa20.part.0 (try-anything.c:102)
   by 0x...: salsa20 (try-anything.c:85)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x10B64A
   at 0x...: core (try-anything.c:53)
   by 0x...: salsa20 (try-anything.c:101)
   by 0x...: salsa20 (try-anything.c:81)
   by 0x...: testvector (try-anything.c:124)
   by 0x...: myrandom (try-anything.c:132)
   by 0x...: test (try.c:124)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x112F61
   at 0x...: crypto_stream_chacha20_moon_xop_64_constbranchindex_blocks_xop (chacha.S:101)
   by 0x...: ??? (in /home/djb/supercop-data/saber214/amd64/try/c/gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_sign/picnicl1fs/optimizedct/c/work/try-timecop)
   by 0x...: crypto_stream_chacha20_moon_xop_64_constbranchindex (crypto_stream.c:14)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl1fs_optimizedct_c_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)

TIMECOP error (can be valgrind bug)

error 111

Process terminating with default action of signal 4 (SIGILL)
 Illegal opcode at address 0x113921
   at 0x...: crypto_stream_chacha20_moon_xop_64_constbranchindex_blocks_xop (chacha.S:101)
   by 0x...: ??? (in /home/djb/supercop-data/saber214/amd64/try/c/gcc_-march=native_-mtune=native_-O_-fwrapv_-fPIC_-fPIE_-gdwarf-4_-Wall/constbranchindex/crypto_sign/picnicl1fs/optimizedct/sse2/work/try-timecop)
   by 0x...: crypto_stream_chacha20_moon_xop_64_constbranchindex (crypto_stream.c:14)
   by 0x...: crypto_rng_chacha20_ref_constbranchindex (rng.c:23)
   by 0x...: randombytes_internal (knownrandombytes.c:37)
   by 0x...: randombytes (knownrandombytes.c:56)
   by 0x...: rand_bytes (randomness.c:24)
   by 0x...: rand_bits (randomness.c:143)
   by 0x...: picnic_keygen (picnic.c:116)
   by 0x...: crypto_sign_picnicl1fs_optimizedct_sse2_constbranchindex_keypair (sign.c.i:22)
   by 0x...: test (try.c:128)
   by 0x...: main (try-anything.c:345)