---------------------------------------start make-------------------------------------------------
make: 'enchive' is up to date.
---------------------------------------make done-------------------------------------------------
---------------------------------------make test-------------------------------------------------
Type of lvalue (char *) not compatible with the effective type of the object being accessed (const char *):
      > in joinstr at src/enchive.c:152:9
        in storage_directory at src/enchive.c:358:9
        in default_pubfile at src/enchive.c:873:5
        in command_keygen at src/enchive.c:1236:9
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-EIO10):
        see C11 section 6.5:7 http://rvdoc.org/C11/6.5
        see C11 section J.2:1 item 37 http://rvdoc.org/C11/J.2
        see CERT-C section EXP39-C http://rvdoc.org/CERT-C/EXP39-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Type of lvalue (char *) not compatible with the effective type of the object being accessed (const char *):
      > in joinstr at src/enchive.c:163:9
        in storage_directory at src/enchive.c:358:9
        in default_pubfile at src/enchive.c:873:5
        in command_keygen at src/enchive.c:1236:9
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-EIO10):
        see C11 section 6.5:7 http://rvdoc.org/C11/6.5
        see C11 section J.2:1 item 37 http://rvdoc.org/C11/J.2
        see CERT-C section EXP39-C http://rvdoc.org/CERT-C/EXP39-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Type of lvalue (char *) not compatible with the effective type of the object being accessed (const char *):
      > in joinstr at src/enchive.c:152:9
        in storage_directory at src/enchive.c:358:9
        in default_secfile at src/enchive.c:882:5
        in command_keygen at src/enchive.c:1239:9
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-EIO10):
        see C11 section 6.5:7 http://rvdoc.org/C11/6.5
        see C11 section J.2:1 item 37 http://rvdoc.org/C11/J.2
        see CERT-C section EXP39-C http://rvdoc.org/CERT-C/EXP39-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Type of lvalue (char *) not compatible with the effective type of the object being accessed (const char *):
      > in joinstr at src/enchive.c:163:9
        in storage_directory at src/enchive.c:358:9
        in default_secfile at src/enchive.c:882:5
        in command_keygen at src/enchive.c:1239:9
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-EIO10):
        see C11 section 6.5:7 http://rvdoc.org/C11/6.5
        see C11 section J.2:1 item 37 http://rvdoc.org/C11/J.2
        see CERT-C section EXP39-C http://rvdoc.org/CERT-C/EXP39-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:275:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:304:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:275:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:304:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:275:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:304:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:275:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_25 at src/curve25519-donna.c:275:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:304:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:275:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:304:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:294:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:294:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:231:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:232:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:294:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:228:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:229:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:231:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:232:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:294:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:216:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:217:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:219:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:220:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:222:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:223:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:237:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:238:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:294:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:308:3
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:309:3
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:318:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:294:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:308:3
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:309:3
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:275:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:304:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:294:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:234:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:235:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:294:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:308:3
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:309:3
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:318:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:213:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:214:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:216:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:217:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:219:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:220:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:222:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:223:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:231:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:232:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:234:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:235:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:237:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:238:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:275:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:304:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:308:3
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:309:3
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:318:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:294:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:275:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:304:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:225:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:226:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:228:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:229:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:275:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:304:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:294:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:216:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:217:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:219:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:220:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:231:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:232:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:308:3
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:309:3
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:318:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:216:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:217:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:219:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:220:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:222:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:223:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:225:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:226:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:228:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:229:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:275:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:304:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:234:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:235:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:237:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:238:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:225:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:226:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:228:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:229:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:231:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:232:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:216:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:217:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:219:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:220:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:222:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:223:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:234:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:235:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:308:3
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:309:3
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:318:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:225:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:226:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:228:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:229:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:231:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:232:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:237:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:238:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:225:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:226:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:308:3
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:309:3
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:231:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:232:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:234:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:235:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:237:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:238:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:308:3
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:309:3
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:318:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:222:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:223:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:225:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:226:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:228:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:229:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:213:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:214:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:228:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:229:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:216:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:217:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:219:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:220:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:222:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:223:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:228:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:229:3
        in fmonty at src/curve25519-donna.c:695:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:216:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:217:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:219:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:220:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:222:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:223:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:213:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:214:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:234:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:235:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:237:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:238:3
        in fmonty at src/curve25519-donna.c:666:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:234:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:235:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:308:3
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:309:3
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:318:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:216:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:217:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:222:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:223:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:234:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:235:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:237:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:238:3
        in fmonty at src/curve25519-donna.c:669:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:225:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:226:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:308:3
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:309:3
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:318:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmonty at src/curve25519-donna.c:684:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:225:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:226:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:237:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:238:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:231:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:232:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:219:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:220:3
        in fsquare at src/curve25519-donna.c:425:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:213:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:214:3
        in fmonty at src/curve25519-donna.c:711:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:679:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:712:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:670:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:691:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:677:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:696:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:318:5
        in fmonty at src/curve25519-donna.c:705:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmonty at src/curve25519-donna.c:667:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fsquare at src/curve25519-donna.c:426:3
        in fmonty at src/curve25519-donna.c:689:3
        in cmult at src/curve25519-donna.c:762:7
        in curve25519_donna at src/curve25519-donna.c:875:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:213:3
        in fmul at src/curve25519-donna.c:338:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:214:3
        in fmul at src/curve25519-donna.c:338:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:216:3
        in fmul at src/curve25519-donna.c:338:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:217:3
        in fmul at src/curve25519-donna.c:338:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:219:3
        in fmul at src/curve25519-donna.c:338:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:220:3
        in fmul at src/curve25519-donna.c:338:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:222:3
        in fmul at src/curve25519-donna.c:338:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:223:3
        in fmul at src/curve25519-donna.c:338:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:225:3
        in fmul at src/curve25519-donna.c:338:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:226:3
        in fmul at src/curve25519-donna.c:338:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:228:3
        in fmul at src/curve25519-donna.c:338:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:229:3
        in fmul at src/curve25519-donna.c:338:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:234:3
        in fmul at src/curve25519-donna.c:338:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_degree at src/curve25519-donna.c:235:3
        in fmul at src/curve25519-donna.c:338:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_25 at src/curve25519-donna.c:271:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_25 at src/curve25519-donna.c:275:3
        in freduce_coefficients at src/curve25519-donna.c:303:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:304:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:289:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:294:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:308:3
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:309:3
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Conversion to signed integer outside the range that can be represented:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CCV2):
        see C11 section 6.3.1.3:3 http://rvdoc.org/C11/6.3.1.3
        see C11 section J.3.5:1 item 4 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT31-C http://rvdoc.org/CERT-C/INT31-C

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in div_by_2_26 at src/curve25519-donna.c:255:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in div_by_2_26 at src/curve25519-donna.c:259:3
        in freduce_coefficients at src/curve25519-donna.c:317:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

The left operand in a bitwise left-shift is negative:
      > in freduce_coefficients at src/curve25519-donna.c:318:5
        in fmul at src/curve25519-donna.c:339:3
        in curve25519_donna at src/curve25519-donna.c:877:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in fcontract at src/curve25519-donna.c:507:9
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in fcontract at src/curve25519-donna.c:507:9
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in fcontract at src/curve25519-donna.c:508:9
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in fcontract at src/curve25519-donna.c:508:9
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in fcontract at src/curve25519-donna.c:502:9
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in fcontract at src/curve25519-donna.c:502:9
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in fcontract at src/curve25519-donna.c:503:9
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in fcontract at src/curve25519-donna.c:503:9
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in fcontract at src/curve25519-donna.c:517:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in fcontract at src/curve25519-donna.c:517:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in fcontract at src/curve25519-donna.c:518:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in fcontract at src/curve25519-donna.c:518:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise right-shift is negative:
      > in s32_gte at src/curve25519-donna.c:477:3
        in fcontract at src/curve25519-donna.c:579:3
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation defined behavior (IMPL-CEB8):
        see C11 section 6.5.7:5 http://rvdoc.org/C11/6.5.7
        see C11 section J.3.5:1 item 5 http://rvdoc.org/C11/J.3.5
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in s32_gte at src/curve25519-donna.c:477:3
        in fcontract at src/curve25519-donna.c:579:3
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in s32_eq at src/curve25519-donna.c:462:3
        in fcontract at src/curve25519-donna.c:582:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Signed integer overflow:
      > in s32_eq at src/curve25519-donna.c:462:3
        in fcontract at src/curve25519-donna.c:582:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CCV1):
        see C11 section 6.5:5 http://rvdoc.org/C11/6.5
        see C11 section J.2:1 item 36 http://rvdoc.org/C11/J.2
        see CERT-C section INT32-C http://rvdoc.org/CERT-C/INT32-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in s32_eq at src/curve25519-donna.c:463:3
        in fcontract at src/curve25519-donna.c:582:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Signed integer overflow:
      > in s32_eq at src/curve25519-donna.c:463:3
        in fcontract at src/curve25519-donna.c:582:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CCV1):
        see C11 section 6.5:5 http://rvdoc.org/C11/6.5
        see C11 section J.2:1 item 36 http://rvdoc.org/C11/J.2
        see CERT-C section INT32-C http://rvdoc.org/CERT-C/INT32-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in s32_eq at src/curve25519-donna.c:464:3
        in fcontract at src/curve25519-donna.c:582:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Signed integer overflow:
      > in s32_eq at src/curve25519-donna.c:464:3
        in fcontract at src/curve25519-donna.c:582:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CCV1):
        see C11 section 6.5:5 http://rvdoc.org/C11/6.5
        see C11 section J.2:1 item 36 http://rvdoc.org/C11/J.2
        see CERT-C section INT32-C http://rvdoc.org/CERT-C/INT32-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Potential negative zero produced via bitwise operations, undefined under sign and magnitude or one's complement arithmetic, implementation-defined otherwise:
      > in s32_eq at src/curve25519-donna.c:464:3
        in fcontract at src/curve25519-donna.c:582:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Implementation-dependent undefined behavior (IMPLUB-CEB12):
        see C11 section 6.2.6.2:4 http://rvdoc.org/C11/6.2.6.2
        see C11 section J.2:1 item 14 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in s32_eq at src/curve25519-donna.c:465:3
        in fcontract at src/curve25519-donna.c:582:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Signed integer overflow:
      > in s32_eq at src/curve25519-donna.c:465:3
        in fcontract at src/curve25519-donna.c:582:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CCV1):
        see C11 section 6.5:5 http://rvdoc.org/C11/6.5
        see C11 section J.2:1 item 36 http://rvdoc.org/C11/J.2
        see CERT-C section INT32-C http://rvdoc.org/CERT-C/INT32-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in s32_eq at src/curve25519-donna.c:462:3
        in fcontract at src/curve25519-donna.c:584:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Signed integer overflow:
      > in s32_eq at src/curve25519-donna.c:462:3
        in fcontract at src/curve25519-donna.c:584:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CCV1):
        see C11 section 6.5:5 http://rvdoc.org/C11/6.5
        see C11 section J.2:1 item 36 http://rvdoc.org/C11/J.2
        see CERT-C section INT32-C http://rvdoc.org/CERT-C/INT32-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in s32_eq at src/curve25519-donna.c:463:3
        in fcontract at src/curve25519-donna.c:584:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Signed integer overflow:
      > in s32_eq at src/curve25519-donna.c:463:3
        in fcontract at src/curve25519-donna.c:584:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CCV1):
        see C11 section 6.5:5 http://rvdoc.org/C11/6.5
        see C11 section J.2:1 item 36 http://rvdoc.org/C11/J.2
        see CERT-C section INT32-C http://rvdoc.org/CERT-C/INT32-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

The left operand in a bitwise left-shift is negative:
      > in s32_eq at src/curve25519-donna.c:464:3
        in fcontract at src/curve25519-donna.c:584:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CEB4):
        see C11 section 6.5.7:4 http://rvdoc.org/C11/6.5.7
        see C11 section J.2:1 item 52 http://rvdoc.org/C11/J.2
        see CERT-C section INT13-C http://rvdoc.org/CERT-C/INT13-C
        see CERT-C section MSC15-C http://rvdoc.org/CERT-C/MSC15-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Signed integer overflow:
      > in s32_eq at src/curve25519-donna.c:464:3
        in fcontract at src/curve25519-donna.c:584:7
        in curve25519_donna at src/curve25519-donna.c:878:3
        in compute_public at src/enchive.c:766:5
        in command_keygen at src/enchive.c:1273:5
        in main at src/enchive.c:1600:13

    Undefined behavior (UB-CCV1):
        see C11 section 6.5:5 http://rvdoc.org/C11/6.5
        see C11 section J.2:1 item 36 http://rvdoc.org/C11/J.2
        see CERT-C section INT32-C http://rvdoc.org/CERT-C/INT32-C
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1

Fatal error: out of memory.
---------------------------------------make test done-------------------------------------------------