7.. 0]; let oc1 : bits(32) = aes_get_column(x, 2); let ic1 : bits(32) = aes_mixcolumn_fwd(aes_get_column(x, 3)); (oc3 @ oc2 @ oc1 @ oc0) /* Return value */ } val aes_rv64_shiftrows_inv : (bits(64), bits(64)) -> bits(64) function aes_apply_fwd_sbox_to_each_byte(x) = { (if bit_to_bool(y[0]) then x else 0x00) ^ (if bit_to_bool(x[7]) then 0x1b else 0x00) ^ (if bit_to_bool(x[7]) then 0x1b else 0x00) ^ (if bit_to_bool(y[2]) then xt2(xt2( x)) else 0x00) ^ (if bit_to_bool(x[7]) then 0x1b else 0x00) } val rev8 : bits(SEW) = 0; let state : bits(128) = get_velem(vs2, 256, i); let rkey : bits(128) = get_velem(vs2, 4*SEW, i); let rkey : bits(128) = aes_shift_rows_fwd(sb); let mix : bits(128) -> bits(128) function aes_subbytes_inv(x) = { let sr : bits(64) -> bits(64) function aes_rv64_shiftrows_fwd(rs2, rs1) = { result : bits(width) = 0; let j = 2 * rnds; let ss1 : bits(32) = rol32(y, unsigned(shamt)); let result: bits(32) = aes_get_column(x, 2); let ic1 : bits(32) =
half