def pcbc_rt.xtea

bend-osdev-crypto@0.1.0.0 · PROOF.bend:1524

import Base
import bend-osdev-legacy-ciphers@0.1.0.0/legacy_ciphers.bend as L
import bend-osdev-legacy-ciphers@0.1.0.0/xtea.bend as Xt
import bend-osdev-legacy-ciphers@0.1.0.0/LAWS.bend as LL
import bend-osdev-crypto@0.1.0.0/pcbc.bend as Pc
import bend-osdev-crypto@0.1.0.0/inst_lc.bend as LC

1524def pcbc_rt.xtea(+k: Xt.LcXteaKey, bs: List<&2, L.LcBlock64>, +iv: L.LcBlock64) -> {bs == Pc.cr.pcbc.dec(~Xt.LcXteaKey, ~L.LcBlock64, ~Xt.LcXtea.decrypt, ~LC.CrBlk64.xor, k, Pc.cr.pcbc.enc(~Xt.LcXteaKey, ~L.LcBlock64, ~Xt.LcXtea.encrypt, ~LC.CrBlk64.xor, k, bs, iv), iv) : List<&2, L.LcBlock64>}:
1525  match bs:
1526    case Nil{}:
1527      {==}
1528    case Con{+p, t}:
1529      %Equal.sym(L.LcBlock64, Xt.LcXtea.decrypt(k, Xt.LcXtea.encrypt(k, LC.CrBlk64.xor(p, iv))), LC.CrBlk64.xor(p, iv), LL.xtea_round_trip(k, LC.CrBlk64.xor(p, iv))) : {Con{p, t} == Con{LC.CrBlk64.xor(_, iv), Pc.cr.pcbc.dec(~Xt.LcXteaKey, ~L.LcBlock64, ~Xt.LcXtea.decrypt, ~LC.CrBlk64.xor, k, Pc.cr.pcbc.enc(~Xt.LcXteaKey, ~L.LcBlock64, ~Xt.LcXtea.encrypt, ~LC.CrBlk64.xor, k, t, LC.CrBlk64.xor(p, Xt.LcXtea.encrypt(k, LC.CrBlk64.xor(p, iv)))), LC.CrBlk64.xor(LC.CrBlk64.xor(_, iv), Xt.LcXtea.encrypt(k, LC.CrBlk64.xor(p, iv))))} : List<&2, L.LcBlock64>}
1530      %lcblock64_xx(p, iv) : {Con{p, t} == Con{_, Pc.cr.pcbc.dec(~Xt.LcXteaKey, ~L.LcBlock64, ~Xt.LcXtea.decrypt, ~LC.CrBlk64.xor, k, Pc.cr.pcbc.enc(~Xt.LcXteaKey, ~L.LcBlock64, ~Xt.LcXtea.encrypt, ~LC.CrBlk64.xor, k, t, LC.CrBlk64.xor(p, Xt.LcXtea.encrypt(k, LC.CrBlk64.xor(p, iv)))), LC.CrBlk64.xor(_, Xt.LcXtea.encrypt(k, LC.CrBlk64.xor(p, iv))))} : List<&2, L.LcBlock64>}
1531      %pcbc_rt.xtea(k, t, LC.CrBlk64.xor(p, Xt.LcXtea.encrypt(k, LC.CrBlk64.xor(p, iv)))) : {Con{p, t} == Con{p, _} : List<&2, L.LcBlock64>}
1532      {==}