~/jendhub

def hb

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/aes/aead.bend:379

import bend-collections-laws-crypto@1.0.0.0/proofs/crypto/aes/aead.bend as Aead
import Base
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/aes/gcm.bend as G

379# The GHASH block of the tag, as bytes, and byte i of the tag.
380def hb(+nk: Nat, +nr: Nat, +key: List<&2, U32>, +aad: List<&2, U32>, +c: List<&2, U32>) -> List<&2, U32>:
381  G.block_bytes(G.ghash(G.hash_key(nk, nr, key), List.append(&2, U32, G.pad(aad), List.append(&2, U32, G.pad(c), List.append(&2, U32, G.len64(aad), G.len64(c)))), Word.zero(128n)))

Uses (10)

Used by (2)