[pbsd]

In page 10, should the ring R be GF(2)[X]/(X^32-1) and the map p be from {0,1}^{32} to R?

[cperciva]

I think so yes. I emailed my coauthors to confirm.