I'm about to add new regression tests asconaead128.c.in and asconhas256.c.in (in the pqc branch first). Each has four different implementations of the underlying cryptosystem. ref looks fine (apart from being very slow to compile and needing too much memory when inlining). But the opt32_lowsize (optimized for small code size and 32-bit targets) and bi8 (bit-interleaved version optimized for 8-bit targets) fail the test. And the opt8 (optimized for 8-bit targets) version doesn't even compile.
All are fine for test-host.
Diff:
For the compilation failure, this small code sample reproduces issue:
Last edit: Philipp Klaus Krause 6 days ago
This turned out to be a quite complex issue. I've worked on it all day. The fix for the compilation failure (and a related issue that was masked by it) in in [r16072]. The runtime test failures still need to be addressed.
Related
Commit: [r16072]
I suspect that some of the remaining failures are actually upstream endianness bugs: https://github.com/ascon/ascon-c/issues/25
On the mos6502 all implementations work except opt8 and opt8_lowsize