law v_gcm_ghash

bend-osdev-gf@0.1.1.0 · LAWS.bend:208

import Base
import bend-osdev-gf@0.1.1.0/gf128.bend as H

208# f38cbb1ad69223dcc3457ae5b6b0f885 (one block of C, then the lengths: 0 bits
209# of A, 128 of C)
210law v_gcm_ghash:
211  {H.Gf128.ghash(H.Gf128.of_words(1726565332, 4018809915, 2286746201, 3392416558), [H.Gf128.of_words(59300558, 1622582162, 4079534777, 1907555960), H.Gf128.of_words(0, 0, 0, 128)]) == H.Gf128.of_words(4086086426, 3599901660, 3276110565, 3065051269) : H.Gf128}