def output

bend-collections-laws-crypto@1.0.0.0 · spec/crypto/blake/blake3.bend:134

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/blake/blake3/types.bend as T

134# The new chaining value: word i xor word i+8 of the final state (the 64-byte
135# extended output is not needed for a 32-byte digest).
136def output(+v: List<&2,U32>) -> T.CV:
137  T.CV{U32.xor(at(v,0n),at(v,8n)),U32.xor(at(v,1n),at(v,9n)),U32.xor(at(v,2n),at(v,10n)),U32.xor(at(v,3n),at(v,11n)),U32.xor(at(v,4n),at(v,12n)),U32.xor(at(v,5n),at(v,13n)),U32.xor(at(v,6n),at(v,14n)),U32.xor(at(v,7n),at(v,15n))}