law camellia_lrw_round_trip

bend-osdev-crypto@0.1.0.0 · LAWS.bend:785

import Base
import bend-osdev-cipher-modes@0.1.0.0/cipher_modes.bend as M
import bend-osdev-legacy-ciphers@0.1.0.0/camellia.bend as Ca
import bend-osdev-crypto@0.1.0.0/lrw.bend as Lw
import bend-osdev-gf@0.1.0.0/gf128.bend as G
import bend-osdev-crypto@0.1.0.0/inst_cm.bend as CM

785# Camellia (legacy-ciphers) in LRW (lrw.bend): decryption undoes encryption, for every key, tweak key, index and list of blocks
786law camellia_lrw_round_trip:
787  for +k: Ca.LcCamelliaKey
788  for +k2: G.Gf128
789  for +i: G.Gf128
790  for +bs: List<&2, M.CmBlock>
791  {Lw.CrLrw.decrypt_blocks(~Ca.LcCamelliaKey, ~M.CmBlock, ~Ca.LcCamellia.decrypt, ~CM.CrBlk128.xor, ~CM.CrBlk128.of_octets, k, k2, i, Lw.CrLrw.encrypt_blocks(~Ca.LcCamelliaKey, ~M.CmBlock, ~Ca.LcCamellia.encrypt, ~CM.CrBlk128.xor, ~CM.CrBlk128.of_octets, k, k2, i, bs)) == bs : List<&2, M.CmBlock>}