SubByte is AES' S-box. It is a bijection.

Expand takes a value from AES's space and embeds it in BES's space.

ShiftRows permutes the first sixteen bytes of block with a fixed permutation.

Encrypt encrypts the first block in src into dst. Dst and src may point at the same memory.

getBlock returns the 8-by-8 block of the affine layer at the given position.

GenerateEncryptionKeys creates a white-boxed version of AES with given key for encryption, with any non-determinism generated by seed. Opts specifies

StretchedKey implements BES' key schedule. It returns the 11 round keys derived from the master key.

UnShiftRows permutes the first sixteen bytes of block. It is the inverse of ShiftRows.

AddRoundKey XORs roundKey into block.

Encrypt encrypts the first block in src into dst. Dst and src may point at the same memory.

stepEncoding returns a TyiEncoding if surface = common.Inside and a MBInverseEncoding if surface = common.Outside. It transparently swaps the two in t

xorEncoding produces encodings for intermediate values of XOR tables. All randomness is derived from the random source. If round < 10: surface = comm

GenerateEncryptionKeys creates a white-boxed version of the AES key `key` for encryption, with any non-determinism generated by `seed`.

UnSubByte is the inverse of SubByte. It is a bijection.

subBytes rewrites each byte of the state with the S-Box. unSubBytes and subBytes are the same.

Encrypt encrypts the first block in src into dst. Dst and src may point at the same memory.

MixColumns multiplies each word of block by a fixed elment of GF(2^32).

reftCompose component-wise composes this SBox layer with a concatenated block encoding on the left (input). A shift to apply can be specified.

maskEncoding produces encodings for the outputs of the InputMask and OutputMask. All randomness is derived from the random source; surface is common.I

rightCompose composes a Block encoding on the right.

rightCompose component-wise composes this SBox layer with a concatenated block encoding on the right (output). A shift to apply can be specified.

roundEncoding produces encodings for the output of a series of XOR tables / the input of a TBoxTyiTable or MBInverseTable. All randomness is derived f

Encrypt encrypts the first block in src into dst. Dst and src may point at the same memory.

Encrypt encrypts the first block in src into dst. Dst and src may point at the same memory.

GenerateKeys creates a white-boxed version of the AES key `key`, with any non-determinism generated by `seed`.

StretchedKey implements AES' key schedule. It returns the 11 round keys derived from the master key.

SubBytes rewrites each byte of block with its image under SubByte.

adjust fixes the affine layer for two block encodings which will be moved somewhere else.

byteRoundEncoding concatenates all the round encodings for a single byte. Function parameters are explained in RoundEncoding documentation.

leftCompose composes a Block encoding on the left.

parasites returns the input parasite for each byte of the input of al.

toString converts an 8-by-8 matrix into a hex string.

BlockSize returns the block size of AES. (Necessary to implement cipher.Block.)

Decrypt decrypts the first block in src into dst. Dst and src may point at the same memory.

Decrypt decrypts the first block in src into dst. Dst and src may point at the same memory.

ExpandWord expands one word of the state matrix with the T-Boxes composed with Tyi Tables.

GenerateKeys creates a white-boxed version of the AES key `key`, with any non-determinism generated by `seed`.

MixColumn multiplies the first four bytes of slice by a fixed element of GF(2^32).

Parse parses a byte array into a white-box construction. It returns an error if the byte array isn't long enough.

Parse parses a byte array into a white-box construction. It returns an error if the byte array isn't long enough.

SquashWords squashes an expanded word back into one word with 3 pairwise XORs (calc'd one nibble at a time): (((a ^ b) ^ c) ^ d)

SubWord applies SubByte to each byte of an unsigned integer word and returns the result.

UnMixColumns is the inverse of MixColumns.

UnSubBytes rewrites each byte of block with its image under UnSubByte.

adjust fixes the affine layer for two concatenated block encodings which will be moved into the S-box layer.

backOneRound takes round key i and returns round key i-1.

backOneRound takes round key i and returns round key i-1.

blockMaskEncoding concatenates all the mask encodings for InputMask or TBoxOutputMask into a block encoding, so that it can easily be put on the outpu

clean gets the affine layer back to MixColumns and returns the input and output parasites.

cleanParasites removes the given parasites from the input and output of al. in are the input parasites for this affine layer, and nextIn are the input

crypt pushes the first block in src through the lookup tables (which may compute encryption or decryption) and writes the result to dst. shift is the

ExpandBlock expands the entire state matrix into sixteen blocks.

findMatrix finds an invertible matrix in a basis.

generateBarriers creates the encoding barriers between rounds that compute ShiftRows and re-encodes data.

StandardAES form of Xiao-Lai: func (constr Construction) Encrypt(dst, src []byte) { roundKeys := constr.StretchedKey() copy(dst, src) for i := 0;

getBlock returns the 8-by-8 block of the affine layer at the given position.

newPermutation returns an identity permutation.

shiftRoundKey adds the fixed SubBytes constant to a round key and returns the result as an encoding.Block.

wordStepEncoding concatenates all the step encodings for the full output of a Word table in TBoxTyiTable or MBInverseTable. Function parameters are ex

xorTables generates the XOR Tables for squashing the result of a Tyi Table or MB^(-1) Table.

BlockSize returns the block size of AES. (Necessary to implement cipher.Block.)

Contract takes a value from BES's space and compacts it into AES's space.