Aegis128.ad.ae.z: def of bend-osdev-aead@0.1.0.0
Import: import bend-osdev-aead@0.1.0.0/aegis128.bend as Aegis128
Lines 44-48 of bend-osdev-aead@0.1.0.0/aegis128.bend: https://jend.leeeet.dev/read.txt?path=bend-osdev-aead@0.1.0.0/aegis128.bend&start_line=44&end_line=48

import Base
import bend-osdev-aead@0.1.0.0/aesround.bend as R

# the keystream block S1 xor S4 xor (S2 and S3)
def ad.ae.z(st: AdAegisSt) -> R.AdBlk:
  match st:
    case AdAegisSt{a0, a1, a2, a3, a4}:
      R.AdBlk.xor(R.AdBlk.xor(a1, a4), R.AdBlk.and(a2, a3))

Uses (4):
  https://jend.leeeet.dev/definition.txt?path=bend-osdev-aead@0.1.0.0/aegis128.bend&name=AdAegisSt
  https://jend.leeeet.dev/definition.txt?path=bend-osdev-aead@0.1.0.0/aesround.bend&name=AdBlk
  https://jend.leeeet.dev/definition.txt?path=bend-osdev-aead@0.1.0.0/aesround.bend&name=AdBlk.and
  https://jend.leeeet.dev/definition.txt?path=bend-osdev-aead@0.1.0.0/aesround.bend&name=AdBlk.xor