Cores that don’t count [pdf]

&quot;A deterministic AES mis-computation, which was “self-inverting”: encrypting and decrypting on the same core yielded the identity function, but decryption elsewhere yielded gibberish.&quot;<p>Imagine debugging this.