Re: Blowfish integer overshift (undefined behavior)

2020-10-29 Thread Niels Möller
Guido Vranken writes: > If you compile with Clang and -fsanitize=undefined, this will print: > > blowfish.c:388:22: runtime error: left shift of 236 by 24 places cannot be > represented in type 'int' > > Explicit casting around the shifted values will fix this. I've pushed a fix, see

Blowfish integer overshift (undefined behavior)

2020-10-27 Thread Guido Vranken
Hi all, My project is Cryptofuzz (https://github.com/guidovranken/cryptofuzz) which uses differential fuzzing to find correctness bugs (and memory bugs as well) in popular cryptographic libraries. It has bindings for Nettle and it tests many of the library's features: