Ok, I've spent some time looking at open source crypto libraries and
wrote up some results here:

   http://blog.regehr.org/archives/1054

A good number of these problems will go away once shifting into the sign
bit is no longer UB, and most of the rest go away once the maintainers
of 5 packages fix their rotate functions.

John