keccak256-circom/go-keccak256-bits-impl/stepmappings.go
go-keccak256-bits-impl/stepmappings.goRaw
1package keccak
2
3func theta(a [25 * 64]bool) [25 * 64]bool {
4 var c0, c1, c2, c3, c4, d [64]bool
5 var r [25 * 64]bool
6
7 copy(c0[:], xor(xor(xor(xor(a[0:1*64], a[5*64:6*64]), a[10*64:11*64]), a[15*64:16*64]), a[20*64:21*64]))
8 copy(c1[:], xor(xor(xor(xor(a[1*64:2*64], a[6*64:7*64]), a[11*64:12*64]), a[16*64:17*64]), a[21*64:22*64]))
9 copy(c2[:], xor(xor(xor(xor(a[2*64:3*64], a[7*64:8*64]), a[12*64:13*64]), a[17*64:18*64]), a[22*64:23*64]))
10 copy(c3[:], xor(xor(xor(xor(a[3*64:4*64], a[8*64:9*64]), a[13*64:14*64]), a[18*64:19*64]), a[23*64:24*64]))
11 copy(c4[:], xor(xor(xor(xor(a[4*64:5*64], a[9*64:10*64]), a[14*64:15*64]), a[19*64:20*64]), a[24*64:25*64]))
12
13 copy(d[:], xor(c4[:], or(leftShift(c1[:], 1), rightShift(c1[:], (64-1)))))
14 copy(r[0:1*64], xor(a[0:1*64], d[:]))
15 copy(r[5*64:6*64], xor(a[5*64:6*64], d[:]))
16 copy(r[10*64:11*64], xor(a[10*64:11*64], d[:]))
17 copy(r[15*64:16*64], xor(a[15*64:16*64], d[:]))
18 copy(r[20*64:21*64], xor(a[20*64:21*64], d[:]))
19
20 copy(d[:], xor(c0[:], or(leftShift(c2[:], 1), rightShift(c2[:], (64-1)))))
21 copy(r[1*64:2*64], xor(a[1*64:2*64], d[:]))
22 copy(r[6*64:7*64], xor(a[6*64:7*64], d[:]))
23 copy(r[11*64:12*64], xor(a[11*64:12*64], d[:]))
24 copy(r[16*64:17*64], xor(a[16*64:17*64], d[:]))
25 copy(r[21*64:22*64], xor(a[21*64:22*64], d[:]))
26
27 copy(d[:], xor(c1[:], or(leftShift(c3[:], 1), rightShift(c3[:], (64-1)))))
28 copy(r[2*64:3*64], xor(a[2*64:3*64], d[:]))
29 copy(r[7*64:8*64], xor(a[7*64:8*64], d[:]))
30 copy(r[12*64:13*64], xor(a[12*64:13*64], d[:]))
31 copy(r[17*64:18*64], xor(a[17*64:18*64], d[:]))
32 copy(r[22*64:23*64], xor(a[22*64:23*64], d[:]))
33
34 copy(d[:], xor(c2[:], or(leftShift(c4[:], 1), rightShift(c4[:], (64-1)))))
35 copy(r[3*64:4*64], xor(a[3*64:4*64], d[:]))
36 copy(r[8*64:9*64], xor(a[8*64:9*64], d[:]))
37 copy(r[13*64:14*64], xor(a[13*64:14*64], d[:]))
38 copy(r[18*64:19*64], xor(a[18*64:19*64], d[:]))
39 copy(r[23*64:24*64], xor(a[23*64:24*64], d[:]))
40
41 copy(d[:], xor(c3[:], or(leftShift(c0[:], 1), rightShift(c0[:], (64-1)))))
42 copy(r[4*64:5*64], xor(a[4*64:5*64], d[:]))
43 copy(r[9*64:10*64], xor(a[9*64:10*64], d[:]))
44 copy(r[14*64:15*64], xor(a[14*64:15*64], d[:]))
45 copy(r[19*64:20*64], xor(a[19*64:20*64], d[:]))
46 copy(r[24*64:25*64], xor(a[24*64:25*64], d[:]))
47 return r
48}
49
50func rhopi(a [25 * 64]bool) [25 * 64]bool {
51 var r [25 * 64]bool
52
53 copy(r[0:1*64], a[0:1*64])
54
55 copy(r[10*64:11*64], or(leftShift(a[1*64:2*64], 1), rightShift(a[1*64:2*64], 64-1)))
56
57 copy(r[7*64:8*64], or(leftShift(a[10*64:11*64], 3), rightShift(a[10*64:11*64], 64-3)))
58
59 copy(r[11*64:12*64], or(leftShift(a[7*64:8*64], 6), rightShift(a[7*64:8*64], 64-6)))
60
61 copy(r[17*64:18*64], or(leftShift(a[11*64:12*64], 10), rightShift(a[11*64:12*64], 64-10)))
62
63 copy(r[18*64:19*64], or(leftShift(a[17*64:18*64], 15), rightShift(a[17*64:18*64], 64-15)))
64
65 copy(r[3*64:4*64], or(leftShift(a[18*64:19*64], 21), rightShift(a[18*64:19*64], 64-21)))
66
67 copy(r[5*64:6*64], or(leftShift(a[3*64:4*64], 28), rightShift(a[3*64:4*64], 64-28)))
68
69 copy(r[16*64:17*64], or(leftShift(a[5*64:6*64], 36), rightShift(a[5*64:6*64], 64-36)))
70
71 copy(r[8*64:9*64], or(leftShift(a[16*64:17*64], 45), rightShift(a[16*64:17*64], 64-45)))
72
73 copy(r[21*64:22*64], or(leftShift(a[8*64:9*64], 55), rightShift(a[8*64:9*64], 64-55)))
74
75 copy(r[24*64:25*64], or(leftShift(a[21*64:22*64], 2), rightShift(a[21*64:22*64], 64-2)))
76
77 copy(r[4*64:5*64], or(leftShift(a[24*64:25*64], 14), rightShift(a[24*64:25*64], 64-14)))
78
79 copy(r[15*64:16*64], or(leftShift(a[4*64:5*64], 27), rightShift(a[4*64:5*64], 64-27)))
80
81 copy(r[23*64:24*64], or(leftShift(a[15*64:16*64], 41), rightShift(a[15*64:16*64], 64-41)))
82
83 copy(r[19*64:20*64], or(leftShift(a[23*64:24*64], 56), rightShift(a[23*64:24*64], 64-56)))
84
85 copy(r[13*64:14*64], or(leftShift(a[19*64:20*64], 8), rightShift(a[19*64:20*64], 64-8)))
86
87 copy(r[12*64:13*64], or(leftShift(a[13*64:14*64], 25), rightShift(a[13*64:14*64], 64-25)))
88
89 copy(r[2*64:3*64], or(leftShift(a[12*64:13*64], 43), rightShift(a[12*64:13*64], 64-43)))
90
91 copy(r[20*64:21*64], or(leftShift(a[2*64:3*64], 62), rightShift(a[2*64:3*64], 64-62)))
92
93 copy(r[14*64:15*64], or(leftShift(a[20*64:21*64], 18), rightShift(a[20*64:21*64], 64-18)))
94
95 copy(r[22*64:23*64], or(leftShift(a[14*64:15*64], 39), rightShift(a[14*64:15*64], 64-39)))
96
97 copy(r[9*64:10*64], or(leftShift(a[22*64:23*64], 61), rightShift(a[22*64:23*64], 64-61)))
98
99 copy(r[6*64:7*64], or(leftShift(a[9*64:10*64], 20), rightShift(a[9*64:10*64], 64-20)))
100
101 copy(r[1*64:2*64], or(leftShift(a[6*64:7*64], 44), rightShift(a[6*64:7*64], 64-44)))
102 return r
103}
104
105func chi(a [25 * 64]bool) [25 * 64]bool {
106 var c0, c1, c2, c3, c4 [64]bool
107 var r [25 * 64]bool
108
109 copy(c0[:], a[0:1*64])
110 copy(c1[:], a[1*64:2*64])
111 copy(c2[:], a[2*64:3*64])
112 copy(c3[:], a[3*64:4*64])
113 copy(c4[:], a[4*64:5*64])
114
115 copy(r[0:1*64], xor(a[0:1*64], and(xorSingle(c1[:]), c2[:])))
116 copy(r[1*64:2*64], xor(a[1*64:2*64], and(xorSingle(c2[:]), c3[:])))
117 copy(r[2*64:3*64], xor(a[2*64:3*64], and(xorSingle(c3[:]), c4[:])))
118 copy(r[3*64:4*64], xor(a[3*64:4*64], and(xorSingle(c4[:]), c0[:])))
119 copy(r[4*64:5*64], xor(a[4*64:5*64], and(xorSingle(c0[:]), c1[:])))
120
121 copy(c0[:], a[5*64:6*64])
122 copy(c1[:], a[6*64:7*64])
123 copy(c2[:], a[7*64:8*64])
124 copy(c3[:], a[8*64:9*64])
125 copy(c4[:], a[9*64:10*64])
126
127 copy(r[5*64:6*64], xor(a[5*64:6*64], and(xorSingle(c1[:]), c2[:])))
128 copy(r[6*64:7*64], xor(a[6*64:7*64], and(xorSingle(c2[:]), c3[:])))
129 copy(r[7*64:8*64], xor(a[7*64:8*64], and(xorSingle(c3[:]), c4[:])))
130 copy(r[8*64:9*64], xor(a[8*64:9*64], and(xorSingle(c4[:]), c0[:])))
131 copy(r[9*64:10*64], xor(a[9*64:10*64], and(xorSingle(c0[:]), c1[:])))
132
133 copy(c0[:], a[10*64:11*64])
134 copy(c1[:], a[11*64:12*64])
135 copy(c2[:], a[12*64:13*64])
136 copy(c3[:], a[13*64:14*64])
137 copy(c4[:], a[14*64:15*64])
138
139 copy(r[10*64:11*64], xor(a[10*64:11*64], and(xorSingle(c1[:]), c2[:])))
140 copy(r[11*64:12*64], xor(a[11*64:12*64], and(xorSingle(c2[:]), c3[:])))
141 copy(r[12*64:13*64], xor(a[12*64:13*64], and(xorSingle(c3[:]), c4[:])))
142 copy(r[13*64:14*64], xor(a[13*64:14*64], and(xorSingle(c4[:]), c0[:])))
143 copy(r[14*64:15*64], xor(a[14*64:15*64], and(xorSingle(c0[:]), c1[:])))
144
145 copy(c0[:], a[15*64:16*64])
146 copy(c1[:], a[16*64:17*64])
147 copy(c2[:], a[17*64:18*64])
148 copy(c3[:], a[18*64:19*64])
149 copy(c4[:], a[19*64:20*64])
150
151 copy(r[15*64:16*64], xor(a[15*64:16*64], and(xorSingle(c1[:]), c2[:])))
152 copy(r[16*64:17*64], xor(a[16*64:17*64], and(xorSingle(c2[:]), c3[:])))
153 copy(r[17*64:18*64], xor(a[17*64:18*64], and(xorSingle(c3[:]), c4[:])))
154 copy(r[18*64:19*64], xor(a[18*64:19*64], and(xorSingle(c4[:]), c0[:])))
155 copy(r[19*64:20*64], xor(a[19*64:20*64], and(xorSingle(c0[:]), c1[:])))
156
157 copy(c0[:], a[20*64:21*64])
158 copy(c1[:], a[21*64:22*64])
159 copy(c2[:], a[22*64:23*64])
160 copy(c3[:], a[23*64:24*64])
161 copy(c4[:], a[24*64:25*64])
162
163 copy(r[20*64:21*64], xor(a[20*64:21*64], and(xorSingle(c1[:]), c2[:])))
164 copy(r[21*64:22*64], xor(a[21*64:22*64], and(xorSingle(c2[:]), c3[:])))
165 copy(r[22*64:23*64], xor(a[22*64:23*64], and(xorSingle(c3[:]), c4[:])))
166 copy(r[23*64:24*64], xor(a[23*64:24*64], and(xorSingle(c4[:]), c0[:])))
167 copy(r[24*64:25*64], xor(a[24*64:25*64], and(xorSingle(c0[:]), c1[:])))
168 return r
169}
170
171func iot(a [25 * 64]bool, r int) [25 * 64]bool {
172 // iota
173 copy(a[0:64], xor(a[0:64], roundConstants[r*64:r*64+64]))
174 return a
175}