Test results for amd64, phoenix, crypto_aead/flexaead256b128v12

[Page version: 20260219 23:43:02]

Test failure

error 111
crypto_aead_decrypt returns nonzero

Compiler output

encrypt.c: encrypt.c:777:2: warning: misleading indentation; statement is not part of the previous 'for' [-Wmisleading-indentation]
encrypt.c:   777 |         dirPFK( block, (*self).nBytes, ((*self).subkeys + SUBKEY0),  (*self).nRounds, (*self).state );
encrypt.c:       |         ^
encrypt.c: encrypt.c:774:5: note: previous statement is here
encrypt.c:   774 |     for( unsigned i = 0; i<(*self).nBytes; i+=8)
encrypt.c:       |     ^
encrypt.c: encrypt.c:799:2: warning: misleading indentation; statement is not part of the previous 'for' [-Wmisleading-indentation]
encrypt.c:   799 |         invPFK( block, (*self).nBytes, ((*self).subkeys + SUBKEY1),  (*self).nRounds, (*self).state );
encrypt.c:       |         ^
encrypt.c: encrypt.c:796:5: note: previous statement is here
encrypt.c:   796 |     for( unsigned i = 0; i<(*self).nBytes; i+=8)
encrypt.c:       |     ^
encrypt.c: 2 warnings generated.

Compiler output

encrypt.c: In function 'dirShuffleLayer',
encrypt.c:     inlined from 'dirPFK' at encrypt.c:631:3,
encrypt.c:     inlined from 'crypto_aead_flexaead256b128v12_ref_timingleaks_encrypt' at encrypt.c:242:2:
encrypt.c: encrypt.c:586:34: warning: writing 32 bytes into a region of size 24 [-Wstringop-overflow=]
encrypt.c:   586 |                 *(state+(2*i+1)) = *(block+(1*(blocklen/2)+i));
encrypt.c:       |                 ~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
encrypt.c: encrypt.c: In function 'crypto_aead_flexaead256b128v12_ref_timingleaks_encrypt':
encrypt.c: encrypt.c:233:27: note: at offset [160, 184] into destination object 'flexaeadv1' of size 184
encrypt.c:   233 |         struct FlexAEADv1 flexaeadv1;
encrypt.c:       |                           ^~~~~~~~~~
encrypt.c: In function 'dirShuffleLayer',
encrypt.c:     inlined from 'dirPFK' at encrypt.c:631:3,
encrypt.c:     inlined from 'crypto_aead_flexaead256b128v12_ref_timingleaks_encrypt' at encrypt.c:244:2:
encrypt.c: encrypt.c:586:34: warning: writing 32 bytes into a region of size 24 [-Wstringop-overflow=]
encrypt.c:   586 |                 *(state+(2*i+1)) = *(block+(1*(blocklen/2)+i));
encrypt.c:       |                 ~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
encrypt.c: encrypt.c: In function 'crypto_aead_flexaead256b128v12_ref_timingleaks_encrypt':
encrypt.c: encrypt.c:233:27: note: at offset [160, 184] into destination object 'flexaeadv1' of size 184
encrypt.c:   233 |         struct FlexAEADv1 flexaeadv1;
encrypt.c:       |                           ^~~~~~~~~~
encrypt.c: In function 'dirShuffleLayer',
encrypt.c:     inlined from 'dirPFK' at encrypt.c:631:3,
encrypt.c:     inlined from 'sumAD' at encrypt.c:745:5,
encrypt.c:     inlined from 'crypto_aead_flexaead256b128v12_ref_timingleaks_encrypt' at encrypt.c:266:3:
encrypt.c: encrypt.c:586:34: warning: writing 32 bytes into a region of size 24 [-Wstringop-overflow=]
encrypt.c: ...

Namespace violations

encrypt.o FlexAEADv1_init T
encrypt.o decryptBlock T
encrypt.o dirMixQuartersLayer T
encrypt.o dirPFK T
encrypt.o dirSBox0 R
encrypt.o dirSBox1 R
encrypt.o dirSBox2 R
encrypt.o dirSBox3 R
encrypt.o dirSBoxLayer T
encrypt.o dirShuffleLayer T
encrypt.o encryptBlock T
encrypt.o invPFK T
encrypt.o invSBox0 R
encrypt.o invSBox1 R
encrypt.o invSBox2 R
encrypt.o invSBox3 R
encrypt.o invSBoxLayer T
encrypt.o invShuffleLayer T
encrypt.o memcpyopt T
encrypt.o mwc32 T
encrypt.o padBlock T
encrypt.o sumAD T
encrypt.o unpadBlock T

Namespace violations

encrypt.o FlexAEADv1_init T
encrypt.o decryptBlock T
encrypt.o dirMixQuartersLayer T
encrypt.o dirPFK T
encrypt.o dirSBox0 R
encrypt.o dirSBox1 R
encrypt.o dirSBox2 R
encrypt.o dirSBox3 R
encrypt.o dirSBoxLayer T
encrypt.o dirShuffleLayer T
encrypt.o encryptBlock T
encrypt.o invPFK T
encrypt.o invSBox0 R
encrypt.o invSBox1 R
encrypt.o invSBox2 R
encrypt.o invSBox3 R
encrypt.o invSBoxLayer T
encrypt.o invShuffleLayer T
encrypt.o mwc32 T
encrypt.o padBlock T
encrypt.o sumAD T
encrypt.o unpadBlock T