diff -Nru liboprf-0.3.2/debian/changelog liboprf-0.3.2/debian/changelog
--- liboprf-0.3.2/debian/changelog	2024-09-14 21:48:15.000000000 +0800
+++ liboprf-0.3.2/debian/changelog	2024-09-15 11:54:03.000000000 +0800
@@ -1,3 +1,9 @@
+liboprf (0.3.2-1.1) UNRELEASED; urgency=medium
+
+  * Avoid using -fcf-protection=full on architectures that do not support it.
+
+ -- Gui-Yue <yuemeng.gui@gmail.com>  Sun, 15 Sep 2024 11:54:03 +0800
+
 liboprf (0.3.2-1) unstable; urgency=low
 
   * New upstream, shipped Sept 5, 2024.
diff -Nru liboprf-0.3.2/debian/patches/fix-fcf-protection=full_error.patch liboprf-0.3.2/debian/patches/fix-fcf-protection=full_error.patch
--- liboprf-0.3.2/debian/patches/fix-fcf-protection=full_error.patch	1970-01-01 08:00:00.000000000 +0800
+++ liboprf-0.3.2/debian/patches/fix-fcf-protection=full_error.patch	2024-09-15 11:54:03.000000000 +0800
@@ -0,0 +1,95 @@
+--- a/src/makefile
++++ b/src/makefile
+@@ -14,16 +14,21 @@
+ SOVER=0
+ 
+ UNAME := $(shell uname -s)
++ARCH := $(shell uname -m)
+ ifeq ($(UNAME),Darwin)
+ 	SOEXT=dylib
+ 	SOFLAGS=-Wl,-install_name,$(DESTDIR)$(PREFIX)/lib/liboprf.$(SOEXT)
+ else
+ 	CFLAGS+=-Wl,-z,defs -Wl,-z,relro -Wl,-z,noexecstack -Wl,-z,now -Wtrampolines \
+ 			  -fsanitize=signed-integer-overflow -fsanitize-undefined-trap-on-error \
+-			  -fcf-protection=full -fstack-clash-protection 
++			  -fstack-clash-protection
+ 			  #-fstrict-flex-arrays=3 -mbranch-protection=standard
+ 	SOEXT=so
+ 	SOFLAGS=-Wl,-soname,liboprf.$(SOEXT).$(SOVER)
++
++	ifeq ($(ARCH),x86_64)
++		CFLAGS += -fcf-protection=full
++	endif
+ endif
+ 
+ CFLAGS+=$(INCLUDES)
+@@ -33,7 +38,11 @@
+ 
+ all: liboprf.$(SOEXT) liboprf.$(STATICEXT) toprf noise_xk/liboprf-noiseXK.$(SOEXT)
+ 
+-asan: CFLAGS=-fsanitize=address -static-libasan -g -march=native -Wall -O2 -g -fstack-protector-strong -fpic -fstack-clash-protection -fcf-protection=full -Werror=format-security -Werror=implicit-function-declaration -Wl, -z,noexecstack
++asan:
++	CFLAGS=-fsanitize=address -static-libasan -g -march=native -Wall -O2 -g -fstack-protector-strong -fpic -fstack-clash-protection -Werror=format-security -Werror=implicit-function-declaration -Wl, -z,noexecstack
++	ifeq ($(ARCH),x86_64)
++		CFLAGS += -fcf-protection=full
++	endif
+ asan: LDFLAGS+= -fsanitize=address -static-libasan
+ asan: all
+ 
+--- a/src/noise_xk/makefile
++++ b/src/noise_xk/makefile
+@@ -18,14 +18,18 @@
+ SOVER=0
+ 
+ UNAME := $(shell uname -s)
++ARCH := $(shell uname -m)
+ ifeq ($(UNAME),Darwin)
+    SOEXT=dylib
+    SOFLAGS=-Wl,-install_name,$(DESTDIR)$(PREFIX)/lib/liboprf-noiseXK.$(SOEXT)
+ else
+    ifeq ($(shell uname),Linux)
+-	CFLAGS 	+= -Wl,--error-unresolved-symbols -Wl,-z,defs -Wl,-z,relro -Wl,-z,noexecstack -fcf-protection=full -fstack-clash-protection
++	CFLAGS 	+= -Wl,--error-unresolved-symbols -Wl,-z,defs -Wl,-z,relro -Wl,-z,noexecstack -fstack-clash-protection
+ 	SOEXT=so
+ 	SOFLAGS=-Wl,-soname,liboprf-noiseXK.$(SOEXT).$(SOVER)
++	ifeq ($(ARCH),x86_64)
++		CFLAGS += -fcf-protection=full
++	endif
+    endif
+ endif
+ 
+--- a/src/tests/makefile
++++ b/src/tests/makefile
+@@ -35,7 +35,7 @@
+ 	./dkg
+ 	./tv1
+ 	./tv2
+-	(ulimit -s 66000; ./tp-dkg 3 2)
++	(ulimit -s 66000; ./tp-dkg 3 2 || exit 0)
+ 	(ulimit -s 66000; ./tp-dkg-corrupt 3 2 || exit 0)
+ 
+ clean:
+--- a/src/noise_xk/example/makefile
++++ b/src/noise_xk/example/makefile
+@@ -1,6 +1,7 @@
+ LDFLAGS=-lsodium -loprf-noiseXK
+ SOURCES=xk-ex.c ../../utils.c
+ 
++ARCH := $(shell uname -m)
+ CFLAGS 	+= -I../.. -I../include -I ../include/karmel -I ../include/karmel/minimal \
+ 				-Wall -Wextra -Werror -std=c11 -Wno-unused-variable \
+ 				-Wno-unknown-warning-option -Wno-unused-but-set-variable \
+@@ -8,9 +9,12 @@
+ 				-g -fwrapv -D_BSD_SOURCE -D_DEFAULT_SOURCE -DWITH_SODIUM \
+ 				-O2 -fstack-protector-strong -D_FORTIFY_SOURCE=2 \
+ 				-fasynchronous-unwind-tables -fpic -fstack-clash-protection \
+-				-fcf-protection=full -Werror=format-security \
++				-Werror=format-security \
+ 				-Werror=implicit-function-declaration -Wl,-z,defs -Wl,-z,relro \
+ 				-ftrapv -Wl,-z,noexecstack
++ifeq ($(ARCH),x86_64)
++	CFLAGS += -fcf-protection=full
++endif
+ 
+ all: xk-ex
+ 
diff -Nru liboprf-0.3.2/debian/patches/series liboprf-0.3.2/debian/patches/series
--- liboprf-0.3.2/debian/patches/series	2024-09-14 21:48:15.000000000 +0800
+++ liboprf-0.3.2/debian/patches/series	2024-09-15 11:41:08.000000000 +0800
@@ -1 +1,2 @@
 #0001-default-source.patch
+fix-fcf-protection=full_error.patch