def aria.ws
import bend-osdev-legacy-ciphers@0.1.0.0/aria.bend as Ariaimport Base
import bend-osdev-cipher-modes@0.1.0.0/cipher_modes.bend as M
4575# W0 .. W3 and the round keys, for CK1, CK2, CK3 = C(c1), C(c2), C(c3)
4576def aria.ws(+kl: M.CmBlock, +kr: M.CmBlock, c1: Nat, c2: Nat, c3: Nat) -> List<&2, M.CmBlock>:
4577 +w1 = M.CmBlock.xor(aria.fo(kl, aria.c(c1)), kr)
4578 +w2 = M.CmBlock.xor(aria.fe(w1, aria.c(c2)), kl)
4579 +w3 = M.CmBlock.xor(aria.fo(w2, aria.c(c3)), w1)
4580 aria.eks(kl, w1, w2, w3)