Original issue here: https://github.com/hacl-star/hacl-star/issues/392 This module remains unverified and we have no plans to fix it and/or include it in EverCrypt proper, because the CTR construction is deprecated