R value is not clamped

[Legrandin]

The r parameter should have 22 of its bits reset to 0 (specifically, when seen as a number, it should be AND-ed with 0x0ffffffc0ffffffc0ffffffc0fffffff).

[Varbin]

r &= 0x0ffffffc0ffffffc0ffffffc0fffffff?

[Legrandin]

Yes, if you see r as a 128 bit number, that is a mask that clears the appropriate bits as per specification.

[Varbin]

Thank you for reporting this (I should have checked the code more carefully!) and sorry for the late (and at first sparse) response.

The issue should've been resolved with 99ca1ba.