def cbc_rt.twofish

bend-osdev-crypto@0.1.0.0 · PROOF.bend:1122

import Base
import bend-osdev-cipher-modes@0.1.0.0/cipher_modes.bend as M
import bend-osdev-legacy-ciphers@0.1.0.0/twofish.bend as Tf
import bend-osdev-legacy-ciphers@0.1.0.0/LAWS.bend as LL
import bend-osdev-crypto@0.1.0.0/modes.bend as Md
import bend-osdev-crypto@0.1.0.0/inst_cm.bend as CM

1122def cbc_rt.twofish(+k: Tf.LcTwofishKey, bs: List<&2, M.CmBlock>, +iv: M.CmBlock) -> {bs == Md.cr.cbc.dec(~Tf.LcTwofishKey, ~M.CmBlock, ~Tf.LcTwofish.decrypt, ~CM.CrBlk128.xor, k, Md.cr.cbc.enc(~Tf.LcTwofishKey, ~M.CmBlock, ~Tf.LcTwofish.encrypt, ~CM.CrBlk128.xor, k, bs, iv), iv) : List<&2, M.CmBlock>}:
1123  match bs:
1124    case Nil{}:
1125      {==}
1126    case Con{+p, t}:
1127      %Equal.sym(M.CmBlock, Tf.LcTwofish.decrypt(k, Tf.LcTwofish.encrypt(k, CM.CrBlk128.xor(p, iv))), CM.CrBlk128.xor(p, iv), LL.twofish_round_trip(k, CM.CrBlk128.xor(p, iv))) : {Con{p, t} == Con{CM.CrBlk128.xor(_, iv), Md.cr.cbc.dec(~Tf.LcTwofishKey, ~M.CmBlock, ~Tf.LcTwofish.decrypt, ~CM.CrBlk128.xor, k, Md.cr.cbc.enc(~Tf.LcTwofishKey, ~M.CmBlock, ~Tf.LcTwofish.encrypt, ~CM.CrBlk128.xor, k, t, Tf.LcTwofish.encrypt(k, CM.CrBlk128.xor(p, iv))), Tf.LcTwofish.encrypt(k, CM.CrBlk128.xor(p, iv)))} : List<&2, M.CmBlock>}
1128      %cmblock_xx(p, iv) : {Con{p, t} == Con{_, Md.cr.cbc.dec(~Tf.LcTwofishKey, ~M.CmBlock, ~Tf.LcTwofish.decrypt, ~CM.CrBlk128.xor, k, Md.cr.cbc.enc(~Tf.LcTwofishKey, ~M.CmBlock, ~Tf.LcTwofish.encrypt, ~CM.CrBlk128.xor, k, t, Tf.LcTwofish.encrypt(k, CM.CrBlk128.xor(p, iv))), Tf.LcTwofish.encrypt(k, CM.CrBlk128.xor(p, iv)))} : List<&2, M.CmBlock>}
1129      %cbc_rt.twofish(k, t, Tf.LcTwofish.encrypt(k, CM.CrBlk128.xor(p, iv))) : {Con{p, t} == Con{p, _} : List<&2, M.CmBlock>}
1130      {==}