def c6_sd2

bend-osdev-legacy-ciphers@0.1.0.0 · PROOF.bend:1663

import Base
import bend-osdev-cipher-modes@0.1.0.0/cipher_modes.bend as M
import bend-osdev-legacy-ciphers@0.1.0.0/cast6.bend as C6
import bend-osdev-legacy-ciphers@0.1.0.0/cast5.bend as C5

1663def c6_sd2(k: C6.LcCast6Ks, s: M.CmBlock) -> {s == C6.c6.sd(k, C6.c6.sd(k, s)) : M.CmBlock}:
1664  match k:
1665    case C6.LcCast6Ks{+m0, +m1, +m2, +m3, +r0, +r1, +r2, +r3, +t}:
1666      match s:
1667        case M.CmBlock{+a, b, c, d}:
1668          %u32_xx(d, C5.cast.f(C5.LcCastF1{}, t, a, m3, r3)) : {M.CmBlock{a, b, c, d} == M.CmBlock{a, b, c, _} : M.CmBlock}
1669          {==}