wip

Author: briansmith

crypto/internal.h

@@ -266,6 +266,7 @@ static inline void constant_time_conditional_memxor(void *dst, const void *src,
 #if defined(__GNUC__) && !defined(__clang__)
   // gcc 13.2.0 doesn't automatically vectorize this loop regardless of barrier
   typedef aliasing_uint8_t v32u8 __attribute__((vector_size(32), aligned(1), may_alias));
+  debug_assert_nonsecret(_Alignof(v32u8) == 1);
   size_t n_vec = n&~(size_t)31;
   v32u8 masks = ((aliasing_uint8_t)mask-(v32u8){}); // broadcast
   for (size_t i = 0; i < n_vec; i += 32) {