law Gcm.seal

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/aes/laws.bend:109

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/aes/types.bend as T
import bend-collections-laws-crypto@1.0.0.0/src/crypto/aes/aes.bend as A
import bend-collections-laws-crypto@1.0.0.0/src/crypto/aes/gcm.bend as GI
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/aes/gcm.bend as G

109# The implementation's GCM-AE / GCM-AD, for every expanded key, 96-bit
110# nonce, AAD and input.
111law Gcm.seal:
112  for +nk: Nat
113  for +nr: Nat
114  for +key: List<&2, U32>
115  for +n0: U32
116  for +n1: U32
117  for +n2: U32
118  for +n3: U32
119  for +n4: U32
120  for +n5: U32
121  for +n6: U32
122  for +n7: U32
123  for +n8: U32
124  for +n9: U32
125  for +n10: U32
126  for +n11: U32
127  for +aad: List<&2, U32>
128  for +pt: List<&2, U32>
129  {GI.seal_core(A.Schedule{nr, A.expand(nk, nr, key)}, T.W{n0, n1, n2, n3}, T.W{n4, n5, n6, n7}, T.W{n8, n9, n10, n11}, aad, pt) == G.seal(nk, nr, key, [n0, n1, n2, n3, n4, n5, n6, n7, n8, n9, n10, n11], aad, pt) : List<&2, U32>}