def c6_sb2

bend-osdev-legacy-ciphers@0.1.0.0 · PROOF.bend:1647

import Base
import bend-osdev-cipher-modes@0.1.0.0/cipher_modes.bend as M
import bend-osdev-legacy-ciphers@0.1.0.0/cast6.bend as C6
import bend-osdev-legacy-ciphers@0.1.0.0/cast5.bend as C5

1647def c6_sb2(k: C6.LcCast6Ks, s: M.CmBlock) -> {s == C6.c6.sb(k, C6.c6.sb(k, s)) : M.CmBlock}:
1648  match k:
1649    case C6.LcCast6Ks{+m0, +m1, +m2, +m3, +r0, +r1, +r2, +r3, +t}:
1650      match s:
1651        case M.CmBlock{a, b, +c, d}:
1652          %u32_xx(b, C5.cast.f(C5.LcCastF2{}, t, c, m1, r1)) : {M.CmBlock{a, b, c, d} == M.CmBlock{a, _, c, d} : M.CmBlock}
1653          {==}