Currently, the sigma function is implemented as per this comment https://github.com/GaloisInc/swanky/blob/bf632dbbf01ca1cce26a348f0e65391ed51c4ac2/scuttlebutt/src/hash_aes.rs#L44 which is not correct. It should be `σ(x₀ || x₁) = (x₀ ⊕ x₁) || x₀` <-- the second half must be replaced by the first half.