chiark / gitweb /
symm/square-mktab.c, etc.: Provide enough round constants for short keys.
It turns out that one needs 35 round constants to correctly schedule a
32-bit key, not just 32. It further turns out that Clang orders the
various constant tables differently from GCC, which leads to the two
implementations producing different, but both incorrect, answers.
This is all very embarrassing. Fortunately, nobody will use a 32-bit
key and expect anything useful to come of it, and no larger key size is
affected. I think the main effect is that a bunch of the mode test
vectors needed changing.