def rounds
bend-collections@1.0.0.0 · src/crypto/keccak/permutation.bend:81
import bend-collections@1.0.0.0/src/crypto/keccak/permutation.bend as Permutation
import Base
import bend-collections@1.0.0.0/src/crypto/keccak/types.bend as T
import bend-collections@1.0.0.0/src/crypto/keccak/lane.bend as L
81def rounds(n: Nat, +i: Nat, s: T.State) -> T.State:
82 match n s:
83 case 0n s: s
84 case 1n s: rounds_short(1n,i,s)
85 case 2n+p T.S{+a0,+a1,+a2,+a3,+a4,+a5,+a6,+a7,+a8,+a9,+a10,+a11,+a12,+a13,+a14,+a15,+a16,+a17,+a18,+a19,+a20,+a21,+a22,+a23,+a24}:
86 rc0 = constant(i)
87 +c0r0 = L.xor(a0,L.xor(a5,L.xor(a10,L.xor(a15,a20))))
88 +c1r0 = L.xor(a1,L.xor(a6,L.xor(a11,L.xor(a16,a21))))
89 +c2r0 = L.xor(a2,L.xor(a7,L.xor(a12,L.xor(a17,a22))))
90 +c3r0 = L.xor(a3,L.xor(a8,L.xor(a13,L.xor(a18,a23))))
91 +c4r0 = L.xor(a4,L.xor(a9,L.xor(a14,L.xor(a19,a24))))
92 +d0r0 = L.xor(c4r0,L.rol1(c1r0))
93 +d1r0 = L.xor(c0r0,L.rol1(c2r0))
94 +d2r0 = L.xor(c1r0,L.rol1(c3r0))
95 +d3r0 = L.xor(c2r0,L.rol1(c4r0))
96 +d4r0 = L.xor(c3r0,L.rol1(c0r0))
97 +b0r0 = L.rol0(L.xor(a0,d0r0))
98 +b1r0 = L.rol44(L.xor(a6,d1r0))
99 +b2r0 = L.rol43(L.xor(a12,d2r0))
100 +b3r0 = L.rol21(L.xor(a18,d3r0))
101 +b4r0 = L.rol14(L.xor(a24,d4r0))
102 +a0r1 = L.xor(L.chi(b0r0,b1r0,b2r0),rc0)
103 +a1r1 = L.chi(b1r0,b2r0,b3r0)
104 +a2r1 = L.chi(b2r0,b3r0,b4r0)
105 +a3r1 = L.chi(b3r0,b4r0,b0r0)
106 +a4r1 = L.chi(b4r0,b0r0,b1r0)
107 +b5r0 = L.rol28(L.xor(a3,d3r0))
108 +b6r0 = L.rol20(L.xor(a9,d4r0))
109 +b7r0 = L.rol3(L.xor(a10,d0r0))
110 +b8r0 = L.rol45(L.xor(a16,d1r0))
111 +b9r0 = L.rol61(L.xor(a22,d2r0))
112 +a5r1 = L.chi(b5r0,b6r0,b7r0)
113 +a6r1 = L.chi(b6r0,b7r0,b8r0)
114 +a7r1 = L.chi(b7r0,b8r0,b9r0)
115 +a8r1 = L.chi(b8r0,b9r0,b5r0)
116 +a9r1 = L.chi(b9r0,b5r0,b6r0)
117 +b10r0 = L.rol1(L.xor(a1,d1r0))
118 +b11r0 = L.rol6(L.xor(a7,d2r0))
119 +b12r0 = L.rol25(L.xor(a13,d3r0))
120 +b13r0 = L.rol8(L.xor(a19,d4r0))
121 +b14r0 = L.rol18(L.xor(a20,d0r0))
122 +a10r1 = L.chi(b10r0,b11r0,b12r0)
123 +a11r1 = L.chi(b11r0,b12r0,b13r0)
124 +a12r1 = L.chi(b12r0,b13r0,b14r0)
125 +a13r1 = L.chi(b13r0,b14r0,b10r0)
126 +a14r1 = L.chi(b14r0,b10r0,b11r0)
127 +b15r0 = L.rol27(L.xor(a4,d4r0))
128 +b16r0 = L.rol36(L.xor(a5,d0r0))
129 +b17r0 = L.rol10(L.xor(a11,d1r0))
130 +b18r0 = L.rol15(L.xor(a17,d2r0))
131 +b19r0 = L.rol56(L.xor(a23,d3r0))
132 +a15r1 = L.chi(b15r0,b16r0,b17r0)
133 +a16r1 = L.chi(b16r0,b17r0,b18r0)
134 +a17r1 = L.chi(b17r0,b18r0,b19r0)
135 +a18r1 = L.chi(b18r0,b19r0,b15r0)
136 +a19r1 = L.chi(b19r0,b15r0,b16r0)
137 +b20r0 = L.rol62(L.xor(a2,d2r0))
138 +b21r0 = L.rol55(L.xor(a8,d3r0))
139 +b22r0 = L.rol39(L.xor(a14,d4r0))
140 +b23r0 = L.rol41(L.xor(a15,d0r0))
141 +b24r0 = L.rol2(L.xor(a21,d1r0))
142 +a20r1 = L.chi(b20r0,b21r0,b22r0)
143 +a21r1 = L.chi(b21r0,b22r0,b23r0)
144 +a22r1 = L.chi(b22r0,b23r0,b24r0)
145 +a23r1 = L.chi(b23r0,b24r0,b20r0)
146 +a24r1 = L.chi(b24r0,b20r0,b21r0)
147 rc1 = constant(1n+i)
148 +c0r1 = L.xor(a0r1,L.xor(a5r1,L.xor(a10r1,L.xor(a15r1,a20r1))))
149 +c1r1 = L.xor(a1r1,L.xor(a6r1,L.xor(a11r1,L.xor(a16r1,a21r1))))
150 +c2r1 = L.xor(a2r1,L.xor(a7r1,L.xor(a12r1,L.xor(a17r1,a22r1))))
151 +c3r1 = L.xor(a3r1,L.xor(a8r1,L.xor(a13r1,L.xor(a18r1,a23r1))))
152 +c4r1 = L.xor(a4r1,L.xor(a9r1,L.xor(a14r1,L.xor(a19r1,a24r1))))
153 +d0r1 = L.xor(c4r1,L.rol1(c1r1))
154 +d1r1 = L.xor(c0r1,L.rol1(c2r1))
155 +d2r1 = L.xor(c1r1,L.rol1(c3r1))
156 +d3r1 = L.xor(c2r1,L.rol1(c4r1))
157 +d4r1 = L.xor(c3r1,L.rol1(c0r1))
158 +b0r1 = L.rol0(L.xor(a0r1,d0r1))
159 +b1r1 = L.rol44(L.xor(a6r1,d1r1))
160 +b2r1 = L.rol43(L.xor(a12r1,d2r1))
161 +b3r1 = L.rol21(L.xor(a18r1,d3r1))
162 +b4r1 = L.rol14(L.xor(a24r1,d4r1))
163 +out0 = L.xor(L.chi(b0r1,b1r1,b2r1),rc1)
164 +out1 = L.chi(b1r1,b2r1,b3r1)
165 +out2 = L.chi(b2r1,b3r1,b4r1)
166 +out3 = L.chi(b3r1,b4r1,b0r1)
167 +out4 = L.chi(b4r1,b0r1,b1r1)
168 +b5r1 = L.rol28(L.xor(a3r1,d3r1))
169 +b6r1 = L.rol20(L.xor(a9r1,d4r1))
170 +b7r1 = L.rol3(L.xor(a10r1,d0r1))
171 +b8r1 = L.rol45(L.xor(a16r1,d1r1))
172 +b9r1 = L.rol61(L.xor(a22r1,d2r1))
173 +out5 = L.chi(b5r1,b6r1,b7r1)
174 +out6 = L.chi(b6r1,b7r1,b8r1)
175 +out7 = L.chi(b7r1,b8r1,b9r1)
176 +out8 = L.chi(b8r1,b9r1,b5r1)
177 +out9 = L.chi(b9r1,b5r1,b6r1)
178 +b10r1 = L.rol1(L.xor(a1r1,d1r1))
179 +b11r1 = L.rol6(L.xor(a7r1,d2r1))
180 +b12r1 = L.rol25(L.xor(a13r1,d3r1))
181 +b13r1 = L.rol8(L.xor(a19r1,d4r1))
182 +b14r1 = L.rol18(L.xor(a20r1,d0r1))
183 +out10 = L.chi(b10r1,b11r1,b12r1)
184 +out11 = L.chi(b11r1,b12r1,b13r1)
185 +out12 = L.chi(b12r1,b13r1,b14r1)
186 +out13 = L.chi(b13r1,b14r1,b10r1)
187 +out14 = L.chi(b14r1,b10r1,b11r1)
188 +b15r1 = L.rol27(L.xor(a4r1,d4r1))
189 +b16r1 = L.rol36(L.xor(a5r1,d0r1))
190 +b17r1 = L.rol10(L.xor(a11r1,d1r1))
191 +b18r1 = L.rol15(L.xor(a17r1,d2r1))
192 +b19r1 = L.rol56(L.xor(a23r1,d3r1))
193 +out15 = L.chi(b15r1,b16r1,b17r1)
194 +out16 = L.chi(b16r1,b17r1,b18r1)
195 +out17 = L.chi(b17r1,b18r1,b19r1)
196 +out18 = L.chi(b18r1,b19r1,b15r1)
197 +out19 = L.chi(b19r1,b15r1,b16r1)
198 +b20r1 = L.rol62(L.xor(a2r1,d2r1))
199 +b21r1 = L.rol55(L.xor(a8r1,d3r1))
200 +b22r1 = L.rol39(L.xor(a14r1,d4r1))
201 +b23r1 = L.rol41(L.xor(a15r1,d0r1))
202 +b24r1 = L.rol2(L.xor(a21r1,d1r1))
203 +out20 = L.chi(b20r1,b21r1,b22r1)
204 +out21 = L.chi(b21r1,b22r1,b23r1)
205 +out22 = L.chi(b22r1,b23r1,b24r1)
206 +out23 = L.chi(b23r1,b24r1,b20r1)
207 +out24 = L.chi(b24r1,b20r1,b21r1)
208 rounds(p,2n+i,T.S{out0,out1,out2,out3,out4,out5,out6,out7,out8,out9,out10,out11,out12,out13,out14,out15,out16,out17,out18,out19,out20,out21,out22,out23,out24})