def pcbc_rt.cast6

bend-osdev-crypto@0.1.0.0 · PROOF.bend:1289

import Base
import bend-osdev-cipher-modes@0.1.0.0/cipher_modes.bend as M
import bend-osdev-legacy-ciphers@0.1.0.0/cast6.bend as C6
import bend-osdev-legacy-ciphers@0.1.0.0/LAWS.bend as LL
import bend-osdev-crypto@0.1.0.0/pcbc.bend as Pc
import bend-osdev-crypto@0.1.0.0/inst_cm.bend as CM

1289def pcbc_rt.cast6(+k: C6.LcCast6Key, bs: List<&2, M.CmBlock>, +iv: M.CmBlock) -> {bs == Pc.cr.pcbc.dec(~C6.LcCast6Key, ~M.CmBlock, ~C6.LcCast6.decrypt, ~CM.CrBlk128.xor, k, Pc.cr.pcbc.enc(~C6.LcCast6Key, ~M.CmBlock, ~C6.LcCast6.encrypt, ~CM.CrBlk128.xor, k, bs, iv), iv) : List<&2, M.CmBlock>}:
1290  match bs:
1291    case Nil{}:
1292      {==}
1293    case Con{+p, t}:
1294      %Equal.sym(M.CmBlock, C6.LcCast6.decrypt(k, C6.LcCast6.encrypt(k, CM.CrBlk128.xor(p, iv))), CM.CrBlk128.xor(p, iv), LL.cast6_round_trip(k, CM.CrBlk128.xor(p, iv))) : {Con{p, t} == Con{CM.CrBlk128.xor(_, iv), Pc.cr.pcbc.dec(~C6.LcCast6Key, ~M.CmBlock, ~C6.LcCast6.decrypt, ~CM.CrBlk128.xor, k, Pc.cr.pcbc.enc(~C6.LcCast6Key, ~M.CmBlock, ~C6.LcCast6.encrypt, ~CM.CrBlk128.xor, k, t, CM.CrBlk128.xor(p, C6.LcCast6.encrypt(k, CM.CrBlk128.xor(p, iv)))), CM.CrBlk128.xor(CM.CrBlk128.xor(_, iv), C6.LcCast6.encrypt(k, CM.CrBlk128.xor(p, iv))))} : List<&2, M.CmBlock>}
1295      %cmblock_xx(p, iv) : {Con{p, t} == Con{_, Pc.cr.pcbc.dec(~C6.LcCast6Key, ~M.CmBlock, ~C6.LcCast6.decrypt, ~CM.CrBlk128.xor, k, Pc.cr.pcbc.enc(~C6.LcCast6Key, ~M.CmBlock, ~C6.LcCast6.encrypt, ~CM.CrBlk128.xor, k, t, CM.CrBlk128.xor(p, C6.LcCast6.encrypt(k, CM.CrBlk128.xor(p, iv)))), CM.CrBlk128.xor(_, C6.LcCast6.encrypt(k, CM.CrBlk128.xor(p, iv))))} : List<&2, M.CmBlock>}
1296      %pcbc_rt.cast6(k, t, CM.CrBlk128.xor(p, C6.LcCast6.encrypt(k, CM.CrBlk128.xor(p, iv)))) : {Con{p, t} == Con{p, _} : List<&2, M.CmBlock>}
1297      {==}