def cbc_rt.cast5

bend-osdev-crypto@0.1.0.0 · PROOF.bend:1403

import Base
import bend-osdev-legacy-ciphers@0.1.0.0/legacy_ciphers.bend as L
import bend-osdev-legacy-ciphers@0.1.0.0/cast5.bend as C5
import bend-osdev-legacy-ciphers@0.1.0.0/LAWS.bend as LL
import bend-osdev-crypto@0.1.0.0/modes.bend as Md
import bend-osdev-crypto@0.1.0.0/inst_lc.bend as LC

1403def cbc_rt.cast5(+k: C5.LcCast5Key, bs: List<&2, L.LcBlock64>, +iv: L.LcBlock64) -> {bs == Md.cr.cbc.dec(~C5.LcCast5Key, ~L.LcBlock64, ~C5.LcCast5.decrypt, ~LC.CrBlk64.xor, k, Md.cr.cbc.enc(~C5.LcCast5Key, ~L.LcBlock64, ~C5.LcCast5.encrypt, ~LC.CrBlk64.xor, k, bs, iv), iv) : List<&2, L.LcBlock64>}:
1404  match bs:
1405    case Nil{}:
1406      {==}
1407    case Con{+p, t}:
1408      %Equal.sym(L.LcBlock64, C5.LcCast5.decrypt(k, C5.LcCast5.encrypt(k, LC.CrBlk64.xor(p, iv))), LC.CrBlk64.xor(p, iv), LL.cast5_round_trip(k, LC.CrBlk64.xor(p, iv))) : {Con{p, t} == Con{LC.CrBlk64.xor(_, iv), Md.cr.cbc.dec(~C5.LcCast5Key, ~L.LcBlock64, ~C5.LcCast5.decrypt, ~LC.CrBlk64.xor, k, Md.cr.cbc.enc(~C5.LcCast5Key, ~L.LcBlock64, ~C5.LcCast5.encrypt, ~LC.CrBlk64.xor, k, t, C5.LcCast5.encrypt(k, LC.CrBlk64.xor(p, iv))), C5.LcCast5.encrypt(k, LC.CrBlk64.xor(p, iv)))} : List<&2, L.LcBlock64>}
1409      %lcblock64_xx(p, iv) : {Con{p, t} == Con{_, Md.cr.cbc.dec(~C5.LcCast5Key, ~L.LcBlock64, ~C5.LcCast5.decrypt, ~LC.CrBlk64.xor, k, Md.cr.cbc.enc(~C5.LcCast5Key, ~L.LcBlock64, ~C5.LcCast5.encrypt, ~LC.CrBlk64.xor, k, t, C5.LcCast5.encrypt(k, LC.CrBlk64.xor(p, iv))), C5.LcCast5.encrypt(k, LC.CrBlk64.xor(p, iv)))} : List<&2, L.LcBlock64>}
1410      %cbc_rt.cast5(k, t, C5.LcCast5.encrypt(k, LC.CrBlk64.xor(p, iv))) : {Con{p, t} == Con{p, _} : List<&2, L.LcBlock64>}
1411      {==}