Ok, I've spent some time looking at open source crypto libraries and wrote up some results here: http://blog.regehr.org/archives/1054 A good number of these problems will go away once shifting into the sign bit is no longer UB, and most of the rest go away once the maintainers of 5 packages fix their rotate functions. John