R. Yin

If the intent is to guard against chosen-ciphertext attacks when the caller fails to check the tag (a catastrophic failure by the caller), I think it would be best to...

This happens if the `riscv64-unknown-elf-gcc` isn't part of an installed [riscv-gnu-toolchain](https://github.com/riscv-collab/riscv-gnu-toolchain), like when you install it from apt. To fix it, add the [riscv-gnu-toolchain](https://github.com/riscv-collab/riscv-gnu-toolchain) to the path like so `export...