def R

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/aes/ghash_defs.bend:9

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/aes/gcm.bend as I
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/aes/gcm.bend as G

9# The field element of an implementation block (its 16 bytes, as SP 800-38D
10# reads them).
11def R(z: I.Block) -> Word(128n):
12  G.block(I.unpack(z))