Replacing these lines with state[12] = _mm_cvtsi128_si32(self.v[3]) as u32; (i.e. writing only 32 counter bits) does not result in failed tests for the legacy cipher variants (RNG tests fail as expected). We probably should add tests to check cipher behavior in scenarios which overflow 32 bit counter.
Replacing these lines with
state[12] = _mm_cvtsi128_si32(self.v[3]) as u32;(i.e. writing only 32 counter bits) does not result in failed tests for the legacy cipher variants (RNG tests fail as expected). We probably should add tests to check cipher behavior in scenarios which overflow 32 bit counter.