Convert returns the parasite which corresponds to p on the other side of an S-box layer.

Decrypt decrypts the first block in src into dst. Dst and src may point at the same memory.

Decrypt decrypts the first block in src into dst. Dst and src may point at the same memory.

Encrypt encrypts the first block in src into dst. Dst and src may point at the same memory.

GenerateDecryptionKeys creates a white-boxed version of the AES key `key` for decryption, with any non-determinism generated by `seed`.

GenerateDecryptionKeys creates a white-boxed version of AES with given key for decryption, with any non-determinism generated by seed. Opts specifies

Parse parses a byte array into a white-box construction. It returns an error if the byte slice isn't long enough.

Parse parses a byte array into a white-box construction. It returns an error if the byte slice isn't long enough.

[byte-wise position][gate number]

[nibble-wise position][gate number]

RecoverKey returns the AES key used to generate the given white-box construction.

RecoverKey returns the AES key used to generate the given white-box construction.

RecoverKey returns the AES key used to generate the given white-box construction.

UnMixColumn is the inverse of MixColumn.

backOneRound takes round key i and returns round key i-1.

blockOfInverse computes a block of the something something something.

blockParasites returns the input parasite of the block at the given row and column of the linear part of al, or nil if the block is zero.

cleanConstant finds the constant error on the input and output of each middle S-box. It removes it from the S-box and returns it. Note: This function

cleanLeft gets the last affine layer back to a matrix with 16-by-16 blocks along the diagonal, times ShiftRows, times MixColumns and returns the matri

cleanLinear finds the linear error on the input and output of each middle S-box. It removes it from the S-box and returns it. After this function is a

cleanLinear finds the linear error on the input and output of each middle S-box (after the constant error has been removed). It removes it from the S-

compress compute the AND of neighboring bits in src and stores the result in dst.

compress maps a permuted round matrix to a matrix over F_{2^8} by converting each block to its MixColumns coefficient.

findBlockOfInverse finds any S-box transpositions or self-equivalence noise that may be hiding in the given block of the last affine layer and returns

findConstant returns the constant error on the input and output of the middle S-box at position pos.

findLinear returns the linear error on the input and output of the mmiddle S-box at position pos (once the constant error has been removed). The funct

FindPermutation is called on the first affine layer. It returns the permutation matrix corresponding to the row permutation that has occured to the fi

generateAffineMasks creates the random external masks for the construction.

generateAffineMasks creates the random external masks for the construction.

generatePermutation returns a randomly chosen permutation of [0, n) and its inverse.

generateSboxSelfEq returns a randomly chosen affine self-equivalence of the AND gate. This information is packed into a [6]bool. The first pair of boo

generateSelfEquivalence returns a random self-equivalence of the S-box layer, defined by stateSize and compressSize.

generateSelfEquivalence returns a random self-equivalence of the S-box layer, so that \zeta(x) = bInv(\zeta(a(x))).

inputParasite returns the non-GF(2^8) part of the parasite on the output at position col.

isAS returns true if the given Byte encoding might be an AS structure, with 2 4-bit S-boxes.

isBlockOfInverse takes a candidate solution for the given block of the matrix and returns true if it is valid and false if it isn't.

mbInverseEncoding encodes the output of a MB^(-1) Table / the input of a LowXORTable. All randomness is derived from the random source; round is the

outputParasite returns the non-GF(2^8) part of the parasite on the output at position row.

permuteBy permutes the S-boxes according to the 128-by-128 permutation matrix perm. If forwards = true, the forwards permutation is used; else, the ba

shiftRows permutes the bytes of the first block of block, according to AES' ShiftRows operation.

stripScalars gets rid of unknown scalars in each block of the affine layer. It leaves it exactly equal to MixColumns, but there is an unknown scalar i

tyiEncoding encodes the output of a T-Box/Tyi Table / the input of a HighXORTable. All randomness is derived from the random source; round is the cur

unpermute transforms sm until it is equal to a compressed round matrix. sm is mutated to the compressed round matrix, and permIn and permOut are the p

unpermuteStep is one step of the dynamic programming algorithm. It works by moving different twos to the diagonal and checking if this leads to a part

whiten puts an xor-mask on the input to each S-box so that S(0x00) = 0x00.

A "Dead" Encryption is one based on serialized tables, like we'd have in a real use case.

A "Dead" Encryption is one based on serialized tables, like we'd have in a real use case.

A "Live" Encryption is one based on table abstractions, so many computations are performed on-demand.

A "Live" Encryption is one based on table abstractions, so many computations are performed on-demand.

Generate the XOR Tables for squashing the result of a BlockMatrix.

SliceEncoding(position, subPosition int) encoding.Nibble Encodes the output of a matrix slice. position: Position in the state array, counted in *byt

BlockSize returns the block size of AES. (Necessary to implement cipher.Block.)

BlockSize returns the block size of AES. (Necessary to implement cipher.Block.)

BlockSize returns the block size of BES. (Necessary to implement cipher.Block.)

BlockSize returns the block size of AES. (Necessary to implement cipher.Block.)

Decrypt decrypts the first block in src into dst. Dst and src may point at the same memory.

Decrypt is not implemented.

GenerateMasks generates input and output encodings for a white-box AES construction.