promote some shifts to unsigned, so as not to invoke undefined behavior