Formal correctness proofs and unit tests for the cryptoprimitives are needed in the HDL and simulators, demonstrating or proving that the ISA pseudocode, HDL, and simulator are correctly implemented.
konstantinos again i am assigning this bug to you as a reminder to create unit-test sub-bugs for ed25519 (just like we did for chacha20) and another sub-bug for the long-mul REMAPper (which is best done *not straight away* in the pypowersim style but first in a new test_caller_svp64_longmul.py, just like test_caller_svp64_chacha20.py and others, *and then* an actual long-mul pypowersim test)