proof/AES_NistInputProof.bend source

proof/AES_NistInputProof.bend on the hub · documented module

import Baseimport ../LAWS.bend as Limport ../libs/AES256GCM.bend as AES# Transport fixture aliases before entering the encryption or decryption code.# Equal fixtures must not force a fresh evaluation of the entire cipher.def encrypt_inputs(+key: AES.SecretKey, +nonce: AES.Nonce,    +aad: List<&2, U32>, +fixture_aad: List<&2, U32>,    +plaintext: List<&2, U32>, +fixture_plaintext: List<&2, U32>,    +expected: List<&2, U32>,    aad_matches: {aad == fixture_aad : List<&2, U32>},    plaintext_matches: {plaintext == fixture_plaintext : List<&2, U32>},    computed: {L.aes256gcm_nist_encrypt_observation(AES.encrypt(key, nonce, fixture_aad, fixture_plaintext)) == expected : List<&2, U32>}) ->    {L.aes256gcm_nist_encrypt_observation(AES.encrypt(key, nonce, aad, plaintext)) == expected : List<&2, U32>}:    Equal.trans(List<&2, U32>,        L.aes256gcm_nist_encrypt_observation(AES.encrypt(key, nonce, aad, plaintext)),        L.aes256gcm_nist_encrypt_observation(AES.encrypt(key, nonce, fixture_aad, plaintext)), expected,        Equal.cong(List<&2, U32>, List<&2, U32>, value =>            L.aes256gcm_nist_encrypt_observation(AES.encrypt(key, nonce, value, plaintext)),            aad, fixture_aad, aad_matches),        Equal.trans(List<&2, U32>,            L.aes256gcm_nist_encrypt_observation(AES.encrypt(key, nonce, fixture_aad, plaintext)),            L.aes256gcm_nist_encrypt_observation(AES.encrypt(key, nonce, fixture_aad, fixture_plaintext)), expected,            Equal.cong(List<&2, U32>, List<&2, U32>, value =>                L.aes256gcm_nist_encrypt_observation(AES.encrypt(key, nonce, fixture_aad, value)),                plaintext, fixture_plaintext, plaintext_matches), computed))def decrypt_inputs(+key: AES.SecretKey, +fixture_key: AES.SecretKey,    +aad: List<&2, U32>, +fixture_aad: List<&2, U32>,    +envelope: AES.Envelope, +fixture_envelope: AES.Envelope,    +expected: Result<&2, &2, AES.Error, List<&2, U32>>,    key_matches: {key == fixture_key : AES.SecretKey},    aad_matches: {aad == fixture_aad : List<&2, U32>},    envelope_matches: {envelope == fixture_envelope : AES.Envelope},    computed: {AES.decrypt(fixture_key, fixture_aad, fixture_envelope) == expected : Result<&2, &2, AES.Error, List<&2, U32>>}) ->    {AES.decrypt(key, aad, envelope) == expected : Result<&2, &2, AES.Error, List<&2, U32>>}:    Equal.trans(Result<&2, &2, AES.Error, List<&2, U32>>,        AES.decrypt(key, aad, envelope), AES.decrypt(fixture_key, aad, envelope), expected,        Equal.cong(AES.SecretKey, Result<&2, &2, AES.Error, List<&2, U32>>,            value => AES.decrypt(value, aad, envelope), key, fixture_key, key_matches),        Equal.trans(Result<&2, &2, AES.Error, List<&2, U32>>,            AES.decrypt(fixture_key, aad, envelope), AES.decrypt(fixture_key, fixture_aad, envelope), expected,            Equal.cong(List<&2, U32>, Result<&2, &2, AES.Error, List<&2, U32>>,                value => AES.decrypt(fixture_key, value, envelope), aad, fixture_aad, aad_matches),            Equal.trans(Result<&2, &2, AES.Error, List<&2, U32>>,                AES.decrypt(fixture_key, fixture_aad, envelope), AES.decrypt(fixture_key, fixture_aad, fixture_envelope), expected,                Equal.cong(AES.Envelope, Result<&2, &2, AES.Error, List<&2, U32>>,                    value => AES.decrypt(fixture_key, fixture_aad, value), envelope, fixture_envelope, envelope_matches), computed)))