def fin_len

bend-osdev-aead@0.1.0.0 · PROOF.bend:322

import bend-osdev-aead@0.1.0.0/PROOF.bend as PROOF
import Base
import bend-osdev-bytes@0.1.0.0/bytes.bend as B
import bend-osdev-aead@0.1.0.0/aesround.bend as R
import bend-osdev-aead@0.1.0.0/aegis128.bend as G

322def fin_len(+sb: R.AdSbox, +st: G.AdAegisSt, +al: Nat, +ml: Nat) -> {16n == B.Octets.len(G.ad.ae.final(sb, st, al, ml)) : Nat}:
323  tag_len(G.ad.ae.fin.go(7n, sb, R.AdBlk.xor(G.ad.ae.s3(st), R.AdBlk.of_list(B.append(G.ad.ae.bits(al), G.ad.ae.bits(ml)))), st))

Uses (12)

Used by (1)