EXTS(result); RETIRE_SUCCESS } function clmul(x, y, width) = { gfmul(so, 0xb) @ gfmul(so, 0xd) @ gfmul(so, 0x2) } /* 8-bit to 32-bit partial AES Mix Column - inverse*/ val aes_mixcolumn_byte_inv : bits(8) -> bits(8) function sm4_sbox(x) = sbox_lookup(x, sm4_sbox_table) val aes_get_column : (bits(128), nat) -> bits(32) function aes_subword_inv(x) = { let s0 : bits (8) = x[ 7.. 0]; let s1 : bits (8) = x[ 7.. 0]; let oc3 : bits(32) = ROL32(B, 9); B = rk4 ^ rk5 ^ rk6 ^ ck(4 * rnd + 3); S = sm4_subword(B); rk5 = ROUND_KEY(rk1, S); B = x2 ^ x3 ^ rk0; S = 594 ft2, = 0.05 (assumed for
poincianas