def lrw_b.aria

bend-osdev-crypto@0.1.0.0 · PROOF.bend:1228

import Base
import bend-osdev-cipher-modes@0.1.0.0/cipher_modes.bend as M
import bend-osdev-legacy-ciphers@0.1.0.0/aria.bend as Ar
import bend-osdev-legacy-ciphers@0.1.0.0/LAWS.bend as LL
import bend-osdev-crypto@0.1.0.0/lrw.bend as Lw
import bend-osdev-crypto@0.1.0.0/inst_cm.bend as CM

1228def lrw_b.aria(+k: Ar.LcAriaKey, t: Maybe<&2, M.CmBlock>, +p: M.CmBlock) -> {p == Lw.cr.lrw.bdec(~Ar.LcAriaKey, ~M.CmBlock, ~Ar.LcAria.decrypt, ~CM.CrBlk128.xor, k, t, Lw.cr.lrw.benc(~Ar.LcAriaKey, ~M.CmBlock, ~Ar.LcAria.encrypt, ~CM.CrBlk128.xor, k, t, p)) : M.CmBlock}:
1229  match t:
1230    case None{}:
1231      Equal.sym(M.CmBlock, Ar.LcAria.decrypt(k, Ar.LcAria.encrypt(k, p)), p, LL.aria_round_trip(k, p))
1232    case Some{+x}:
1233      %cmblock_xx(Ar.LcAria.encrypt(k, CM.CrBlk128.xor(p, x)), x) : {p == CM.CrBlk128.xor(Ar.LcAria.decrypt(k, _), x) : M.CmBlock}
1234      %Equal.sym(M.CmBlock, Ar.LcAria.decrypt(k, Ar.LcAria.encrypt(k, CM.CrBlk128.xor(p, x))), CM.CrBlk128.xor(p, x), LL.aria_round_trip(k, CM.CrBlk128.xor(p, x))) : {p == CM.CrBlk128.xor(_, x) : M.CmBlock}
1235      cmblock_xx(p, x)