Delan Azabani wrote: > Are there any interesting reasons behind this difference (aside from > a simple mistake in either the implementation or the paper)? > > Does the difference in order have any cryptanalytic implications (it > would surprise me if there were, but I’m not really a cryptographer)?
A simple mistake not easily corrected, but of no consequence.