Implementation notes: amd64, shoe, crypto_stream/lexv2

Compiler output

lex.c: In file included from lex.c:1:
lex.c: ./e/lex.c:685:9: warning: array index 10 is past the end of the array (which contains 10 elements) [-Warray-bounds]
lex.c:         ctx->ks[10] = (t0 & 0xFF00FF00) ^ ((t2 & 0xFF00FF00)>>8); /* Leak for odd rounds */
lex.c:         ^       ~~
lex.c: ./e/ecrypt-sync.h:53:3: note: array 'ks' declared here
lex.c:   u32 ks[NUMWORDS];                     /* Keystream words collected from leaks */
lex.c:   ^
lex.c: In file included from lex.c:1:
lex.c: ./e/lex.c:692:6: warning: array index 11 is past the end of the array (which contains 10 elements) [-Warray-bounds]
lex.c:             ctx->ks[11] = ((s0 & 0xFF00FF)<<8) ^ (s2 & 0xFF00FF);    /* Leak for even rounds */
lex.c:             ^       ~~
lex.c: ./e/ecrypt-sync.h:53:3: note: array 'ks' declared here
lex.c:   u32 ks[NUMWORDS];                     /* Keystream words collected from leaks */
lex.c:   ^
lex.c: In file included from lex.c:1:
lex.c: ./e/lex.c:698:13: warning: array index 12 is past the end of the array (which contains 10 elements) [-Warray-bounds]
lex.c:             ctx->ks[12] = (t0 & 0xFF00FF00) ^ ((t2 & 0xFF00FF00)>>8); /* Leak for odd rounds */
lex.c:             ^       ~~
lex.c: ./e/ecrypt-sync.h:53:3: note: array 'ks' declared here
lex.c:   u32 ks[NUMWORDS];                     /* Keystream words collected from leaks */
lex.c:   ^
lex.c: 3 warnings generated.

Compiler output

lex.c: In file included from lex.c:1:
lex.c: e/lex.c: In function 'rijndaelEncrypt':
lex.c: e/lex.c:685:16: warning: array subscript 10 is above array bounds of 'u32[10]' {aka 'unsigned int[10]'} [-Warray-bounds]
lex.c:   685 |         ctx->ks[10] = (t0 & 0xFF00FF00) ^ ((t2 & 0xFF00FF00)>>8); /* Leak for odd rounds */
lex.c:       |         ~~~~~~~^~~~
lex.c: In file included from e/lex.c:34,
lex.c:                  from lex.c:1:
lex.c: e/ecrypt-sync.h:53:7: note: while referencing 'ks'
lex.c:    53 |   u32 ks[NUMWORDS];                     /* Keystream words collected from leaks */
lex.c:       |       ^~
lex.c: In file included from lex.c:1:
lex.c: e/lex.c:692:13: warning: array subscript 11 is above array bounds of 'u32[10]' {aka 'unsigned int[10]'} [-Warray-bounds]
lex.c:   692 |      ctx->ks[11] = ((s0 & 0xFF00FF)<<8) ^ (s2 & 0xFF00FF);    /* Leak for even rounds */
lex.c:       |      ~~~~~~~^~~~
lex.c: In file included from e/lex.c:34,
lex.c:                  from lex.c:1:
lex.c: e/ecrypt-sync.h:53:7: note: while referencing 'ks'
lex.c:    53 |   u32 ks[NUMWORDS];                     /* Keystream words collected from leaks */
lex.c:       |       ^~
lex.c: In file included from lex.c:1:
lex.c: e/lex.c:698:20: warning: array subscript 12 is above array bounds of 'u32[10]' {aka 'unsigned int[10]'} [-Warray-bounds]
lex.c:   698 |             ctx->ks[12] = (t0 & 0xFF00FF00) ^ ((t2 & 0xFF00FF00)>>8); /* Leak for odd rounds */
lex.c:       |             ~~~~~~~^~~~
lex.c: In file included from e/lex.c:34,
lex.c:                  from lex.c:1:
lex.c: ...