def c6_qbq

bend-osdev-legacy-ciphers@0.1.0.0 · PROOF.bend:1677

import Base
import bend-osdev-cipher-modes@0.1.0.0/cipher_modes.bend as M
import bend-osdev-legacy-ciphers@0.1.0.0/cast6.bend as C6

1677def c6_qbq(+k: C6.LcCast6Ks, +s: M.CmBlock) -> {s == C6.c6.q(k, C6.c6.qbar(k, s)) : M.CmBlock}:
1678  %c6_sc2(k, C6.c6.sb(k, C6.c6.sa(k, C6.c6.sd(k, s)))) : {s == C6.c6.sd(k, C6.c6.sa(k, C6.c6.sb(k, _))) : M.CmBlock}
1679  %c6_sb2(k, C6.c6.sa(k, C6.c6.sd(k, s))) : {s == C6.c6.sd(k, C6.c6.sa(k, _)) : M.CmBlock}
1680  %c6_sa2(k, C6.c6.sd(k, s)) : {s == C6.c6.sd(k, _) : M.CmBlock}
1681  c6_sd2(k, s)