error 0
 4d76b8688005833b361d800ff564f1f24a90a1b00af16d1599025416236ca611 547859733 136924698150 4300000000 crypto_kem/lotus256/opt 
 ==18037== Memcheck, a memory error detector
 ==18037== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
 ==18037== Using Valgrind-3.15.0.GIT and LibVEX; rerun with -h for copyright info
 ==18037== Command: ./try
 ==18037==
 ==18037== Warning: client switching stacks?  SP change: 0x1ffeffff28 --> 0x1ffedddf18
 ==18037==          to suppress, use: --max-stackframe=2236432 or greater
 ==18037== Invalid write of size 8
 ==18037==    at 0x401F26: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==  Address 0x1ffedddf18 is on thread 1's stack
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x402667: unpack_128elems (pack.c:84)
 ==18037==    by 0x403061: sample_uniform (sampler.c:163)
 ==18037==    by 0x403116: lotus_cpa_pke_keypair (cpa-pke_opt.c:50)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee45f20 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x402688: unpack_128elems (pack.c:85)
 ==18037==    by 0x403061: sample_uniform (sampler.c:163)
 ==18037==    by 0x403116: lotus_cpa_pke_keypair (cpa-pke_opt.c:50)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee45f40 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x4026A8: unpack_128elems (pack.c:86)
 ==18037==    by 0x403061: sample_uniform (sampler.c:163)
 ==18037==    by 0x403116: lotus_cpa_pke_keypair (cpa-pke_opt.c:50)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee45f60 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x4026C8: unpack_128elems (pack.c:87)
 ==18037==    by 0x403061: sample_uniform (sampler.c:163)
 ==18037==    by 0x403116: lotus_cpa_pke_keypair (cpa-pke_opt.c:50)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee45f80 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x4026EB: unpack_128elems (pack.c:88)
 ==18037==    by 0x403061: sample_uniform (sampler.c:163)
 ==18037==    by 0x403116: lotus_cpa_pke_keypair (cpa-pke_opt.c:50)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee45fa0 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x40271B: unpack_128elems (pack.c:89)
 ==18037==    by 0x403061: sample_uniform (sampler.c:163)
 ==18037==    by 0x403116: lotus_cpa_pke_keypair (cpa-pke_opt.c:50)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee45fc0 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x402772: unpack_128elems (pack.c:90)
 ==18037==    by 0x403061: sample_uniform (sampler.c:163)
 ==18037==    by 0x403116: lotus_cpa_pke_keypair (cpa-pke_opt.c:50)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee45fe0 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x4027BE: unpack_128elems (pack.c:95)
 ==18037==    by 0x403061: sample_uniform (sampler.c:163)
 ==18037==    by 0x403116: lotus_cpa_pke_keypair (cpa-pke_opt.c:50)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee46000 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x40280E: unpack_128elems (pack.c:98)
 ==18037==    by 0x403061: sample_uniform (sampler.c:163)
 ==18037==    by 0x403116: lotus_cpa_pke_keypair (cpa-pke_opt.c:50)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee46010 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x4030BB: sample_discrete_gaussian (sampler.c:176)
 ==18037==    by 0x40312A: lotus_cpa_pke_keypair (cpa-pke_opt.c:54)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffedddf20 is on thread 1's stack
 ==18037==  in frame #2, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x4030BB: sample_discrete_gaussian (sampler.c:176)
 ==18037==    by 0x40313F: lotus_cpa_pke_keypair (cpa-pke_opt.c:55)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffef97f20 is on thread 1's stack
 ==18037==  in frame #2, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Warning: client switching stacks?  SP change: 0x1ffeddde98 --> 0x1ffeb33680
 ==18037==          to suppress, use: --max-stackframe=2795544 or greater
 ==18037== Invalid write of size 8
 ==18037==    at 0x403637: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffeb33688 is on thread 1's stack
 ==18037==  in frame #0, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403644: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x404E4F: osfreq (osfreq.c:93)
 ==18037==  Address 0x1ffeb33678 is on thread 1's stack
 ==18037==  in frame #0, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403860: distribute_2x2_nn (lwe-arithmetics_opt.c:219)
 ==18037==    by 0x403648: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee45f20 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x403864: distribute_2x2_nn (lwe-arithmetics_opt.c:219)
 ==18037==    by 0x403648: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffec03690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403878: distribute_2x2_nn (lwe-arithmetics_opt.c:219)
 ==18037==    by 0x403648: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee45f24 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403880: distribute_2x2_nn (lwe-arithmetics_opt.c:221)
 ==18037==    by 0x403648: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee46260 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x403888: distribute_2x2_nn (lwe-arithmetics_opt.c:221)
 ==18037==    by 0x403648: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffec57e90 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403897: distribute_2x2_nn (lwe-arithmetics_opt.c:221)
 ==18037==    by 0x403648: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee46264 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x4038F0: distribute_2x2_nn (lwe-arithmetics_opt.c:225)
 ==18037==    by 0x403648: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffeeeef20 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x4038F5: distribute_2x2_nn (lwe-arithmetics_opt.c:225)
 ==18037==    by 0x403648: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffecac690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403902: distribute_2x2_nn (lwe-arithmetics_opt.c:225)
 ==18037==    by 0x403648: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffeeeef24 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403910: distribute_2x2_nn (lwe-arithmetics_opt.c:227)
 ==18037==    by 0x403648: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffeeef260 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x403913: distribute_2x2_nn (lwe-arithmetics_opt.c:227)
 ==18037==    by 0x403648: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed00e90 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403926: distribute_2x2_nn (lwe-arithmetics_opt.c:227)
 ==18037==    by 0x403648: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffeeef264 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid read of size 8
 ==18037==    at 0x403950: distribute_2x2_nn (lwe-arithmetics_opt.c:230)
 ==18037==    by 0x403648: submul (lwe-arithmetics_opt.c:38)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffeb33678 is on thread 1's stack
 ==18037==  in frame #0, created by distribute_2x2_nn (lwe-arithmetics_opt.c:215)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403990: distribute_2x2_nl (lwe-arithmetics_opt.c:243)
 ==18037==    by 0x40365B: submul (lwe-arithmetics_opt.c:39)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffedddf20 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x403994: distribute_2x2_nl (lwe-arithmetics_opt.c:243)
 ==18037==    by 0x40365B: submul (lwe-arithmetics_opt.c:39)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffeb9b690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x4039A8: distribute_2x2_nl (lwe-arithmetics_opt.c:243)
 ==18037==    by 0x40365B: submul (lwe-arithmetics_opt.c:39)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffedddf24 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x4039B0: distribute_2x2_nl (lwe-arithmetics_opt.c:245)
 ==18037==    by 0x40365B: submul (lwe-arithmetics_opt.c:39)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffedde020 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x4039B8: distribute_2x2_nl (lwe-arithmetics_opt.c:245)
 ==18037==    by 0x40365B: submul (lwe-arithmetics_opt.c:39)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffebb5690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x4039C7: distribute_2x2_nl (lwe-arithmetics_opt.c:245)
 ==18037==    by 0x40365B: submul (lwe-arithmetics_opt.c:39)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffedde024 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403A20: distribute_2x2_nl (lwe-arithmetics_opt.c:249)
 ==18037==    by 0x40365B: submul (lwe-arithmetics_opt.c:39)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee11f20 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x403A25: distribute_2x2_nl (lwe-arithmetics_opt.c:249)
 ==18037==    by 0x40365B: submul (lwe-arithmetics_opt.c:39)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffebcf690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403A32: distribute_2x2_nl (lwe-arithmetics_opt.c:249)
 ==18037==    by 0x40365B: submul (lwe-arithmetics_opt.c:39)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee11f24 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403A40: distribute_2x2_nl (lwe-arithmetics_opt.c:251)
 ==18037==    by 0x40365B: submul (lwe-arithmetics_opt.c:39)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee12020 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x403A43: distribute_2x2_nl (lwe-arithmetics_opt.c:251)
 ==18037==    by 0x40365B: submul (lwe-arithmetics_opt.c:39)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffebe9690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403A56: distribute_2x2_nl (lwe-arithmetics_opt.c:251)
 ==18037==    by 0x40365B: submul (lwe-arithmetics_opt.c:39)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffee12024 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403990: distribute_2x2_nl (lwe-arithmetics_opt.c:243)
 ==18037==    by 0x40366B: submul (lwe-arithmetics_opt.c:40)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffef97f20 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x403994: distribute_2x2_nl (lwe-arithmetics_opt.c:243)
 ==18037==    by 0x40366B: submul (lwe-arithmetics_opt.c:40)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffeb33690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x4039A8: distribute_2x2_nl (lwe-arithmetics_opt.c:243)
 ==18037==    by 0x40366B: submul (lwe-arithmetics_opt.c:40)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffef97f24 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x4039B0: distribute_2x2_nl (lwe-arithmetics_opt.c:245)
 ==18037==    by 0x40366B: submul (lwe-arithmetics_opt.c:40)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffef98020 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x4039B8: distribute_2x2_nl (lwe-arithmetics_opt.c:245)
 ==18037==    by 0x40366B: submul (lwe-arithmetics_opt.c:40)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffeb4d690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x4039C7: distribute_2x2_nl (lwe-arithmetics_opt.c:245)
 ==18037==    by 0x40366B: submul (lwe-arithmetics_opt.c:40)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffef98024 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403A20: distribute_2x2_nl (lwe-arithmetics_opt.c:249)
 ==18037==    by 0x40366B: submul (lwe-arithmetics_opt.c:40)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffefcbf20 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x403A25: distribute_2x2_nl (lwe-arithmetics_opt.c:249)
 ==18037==    by 0x40366B: submul (lwe-arithmetics_opt.c:40)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffeb67690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403A32: distribute_2x2_nl (lwe-arithmetics_opt.c:249)
 ==18037==    by 0x40366B: submul (lwe-arithmetics_opt.c:40)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffefcbf24 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403A40: distribute_2x2_nl (lwe-arithmetics_opt.c:251)
 ==18037==    by 0x40366B: submul (lwe-arithmetics_opt.c:40)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffefcc020 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x403A43: distribute_2x2_nl (lwe-arithmetics_opt.c:251)
 ==18037==    by 0x40366B: submul (lwe-arithmetics_opt.c:40)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffeb81690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403A56: distribute_2x2_nl (lwe-arithmetics_opt.c:251)
 ==18037==    by 0x40366B: submul (lwe-arithmetics_opt.c:40)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffefcc024 is on thread 1's stack
 ==18037==  in frame #3, created by crypto_kem_lotus256_opt_keypair (kem.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403AA0: submat_add_nn (lwe-arithmetics_opt.c:121)
 ==18037==    by 0x40368B: submul (lwe-arithmetics_opt.c:42)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed00e90 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403AA4: submat_add_nn (lwe-arithmetics_opt.c:121)
 ==18037==    by 0x40368B: submul (lwe-arithmetics_opt.c:42)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffecac690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x403AA8: submat_add_nn (lwe-arithmetics_opt.c:121)
 ==18037==    by 0x40368B: submul (lwe-arithmetics_opt.c:42)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed89690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403AB5: submat_add_nn (lwe-arithmetics_opt.c:121)
 ==18037==    by 0x40368B: submul (lwe-arithmetics_opt.c:42)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed00e94 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403AD0: submat_sub_nl (lwe-arithmetics_opt.c:145)
 ==18037==    by 0x4036A6: submul (lwe-arithmetics_opt.c:43)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffebb5690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403AD4: submat_sub_nl (lwe-arithmetics_opt.c:145)
 ==18037==    by 0x4036A6: submul (lwe-arithmetics_opt.c:43)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffeb9b690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 2
 ==18037==    at 0x403AD8: submat_sub_nl (lwe-arithmetics_opt.c:145)
 ==18037==    by 0x4036A6: submul (lwe-arithmetics_opt.c:43)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed6f690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403AE5: submat_sub_nl (lwe-arithmetics_opt.c:145)
 ==18037==    by 0x4036A6: submul (lwe-arithmetics_opt.c:43)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffebb5694 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B07: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed55780 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B0F: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed55770 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B17: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed55760 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B1F: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed55750 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B27: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed55740 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B2F: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed55730 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B37: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed55720 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B3F: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed55710 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B47: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed55700 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B4C: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed556f0 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B51: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed556e0 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B56: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed556d0 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B5B: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed556c0 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B60: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed556b0 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B65: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed556a0 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid write of size 8
 ==18037==    at 0x403B6A: submat_negmul (lwe-arithmetics_opt.c:156)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed55690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403B90: submat_negmul (lwe-arithmetics_opt.c:160)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed6f690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403B95: submat_negmul (lwe-arithmetics_opt.c:160)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed89690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403B9B: submat_negmul (lwe-arithmetics_opt.c:160)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed55690 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037== Invalid read of size 2
 ==18037==    at 0x403BA9: submat_negmul (lwe-arithmetics_opt.c:159)
 ==18037==    by 0x4036BC: submul (lwe-arithmetics_opt.c:44)
 ==18037==    by 0x40314D: lotus_cpa_pke_keypair (cpa-pke_opt.c:57)
 ==18037==    by 0x401F2A: crypto_kem_lotus256_opt_keypair (kem.c:34)
 ==18037==    by 0x401116: test (try.c:108)
 ==18037==    by 0x401B92: main (try-anything.c:295)
 ==18037==  Address 0x1ffed6f694 is on thread 1's stack
 ==18037==  in frame #1, created by submul (lwe-arithmetics_opt.c:29)
 ==18037==
 ==18037==
 ==18037== More than 10000000 total errors detected.  I'm not reporting any more.
 ==18037== Final error counts will be inaccurate.  Go fix your program!
 ==18037== Rerun with --error-limit=no to disable this cutoff.  Note
 ==18037== that errors may occur in your program without prior warning from
 ==18037== Valgrind, because errors are no longer being displayed.
 ==18037==
 ==18037== Warning: client switching stacks?  SP change: 0x1ffeb33680 --> 0x1ffeddde98
 ==18037==          to suppress, use: --max-stackframe=2795544 or greater
 ==18037==          further instances of this message will not be shown.
 ==18037==
 ==18037== HEAP SUMMARY:
 ==18037==     in use at exit: 16,310,192 bytes in 12 blocks
 ==18037==   total heap usage: 42 allocs, 30 frees, 16,329,320 bytes allocated
 ==18037==
 ==18037== LEAK SUMMARY:
 ==18037==    definitely lost: 0 bytes in 0 blocks
 ==18037==    indirectly lost: 0 bytes in 0 blocks
 ==18037==      possibly lost: 16,309,760 bytes in 10 blocks
 ==18037==    still reachable: 432 bytes in 2 blocks
 ==18037==         suppressed: 0 bytes in 0 blocks
 ==18037== Rerun with --leak-check=full to see details of leaked memory
 ==18037==
 ==18037== For lists of detected and suppressed errors, rerun with: -s
 ==18037== ERROR SUMMARY: 10000000 errors from 79 contexts (suppressed: 0 from 0)