aegis-aead 0.2.1 → 0.2.3

package/dist/aes-bs.d.ts

@@ -2,6 +2,16 @@
  * Bitsliced AES implementation using 32-bit integers.
  * Processes 8 AES blocks simultaneously for constant-time operation.
  * Based on the barrel-shiftrows representation by Adomnicai and Peyrin.
+ *
+ * The packed layout matches the reference C implementation: the state words
+ * are permuted so that bit-plane k of byte group g lives in word 4k + g.
+ * The four group lanes of each bit-plane are therefore adjacent, ShiftRows
+ * and MixColumns work on isomorphic quads, and an AES round needs no
+ * per-round transposes.
+ *
+ * The hot-path functions (AEGIS rounds, constant-input packing, keystream
+ * extraction) are fully unrolled over local variables and generated by
+ * scripts/gen-aes-bs.ts.
  */
 /**
  * Bitsliced representation of 8 AES blocks.
@@ -21,10 +31,11 @@ export declare function createAesBlocks(): AesBlocks;
  */
 export declare function createAesBlock(): AesBlock;
 /**
- * Complete AES round (SubBytes + ShiftRows + MixColumns).
- * Note: AddRoundKey is handled separately in AEGIS.
+ * Computes the index of a block word in the unpacked state array.
+ * @param block - Block index (0-7)
+ * @param word - Word index (0-3)
  */
-export declare function aesRound(st: AesBlocks): void;
+export declare function wordIdx(block: number, word: number): number;
 /**
  * Pack 8 AES blocks into bitsliced representation.
  */
@@ -34,38 +45,50 @@ export declare function pack(st: AesBlocks): void;
  */
 export declare function unpack(st: AesBlocks): void;
 /**
- * Pack only blocks 0 and 4 (used for constant inputs in AEGIS-128L).
+ * Put a single AES block into the unpacked state at the given block position.
  */
-export declare function pack04(st: AesBlocks): void;
+export declare function blocksPut(st: AesBlocks, s: AesBlock, block: number): void;
 /**
- * Computes the index into the bitsliced state array.
- * @param block - Block index (0-7)
- * @param word - Word index (0-3)
+ * Load 16 bytes at the given offset into an AES block (little-endian).
  */
-export declare function wordIdx(block: number, word: number): number;
+export declare function blockFromBytes(out: AesBlock, src: Uint8Array, off?: number): void;
+/**
+ * Store an AES block as 16 bytes at the given offset (little-endian).
+ */
+export declare function blockToBytes(out: Uint8Array, src: AesBlock, off?: number): void;
 /**
- * Rotate all blocks right by 1 position (for AEGIS state rotation).
- * Performs (st[i] & 0xfefefefe) >> 1 | (st[i] & 0x01010101) << 7
+ * XOR two AES blocks: out = a ^ b
  */
-export declare function blocksRotr(st: AesBlocks): void;
+export declare function blockXor(out: AesBlock, a: AesBlock, b: AesBlock): void;
 /**
- * Put a single AES block into the bitsliced state at the given block position.
+ * Fused AEGIS-128L update round on the packed state:
+ * st = st ^ rotr8(AESRound(st)) ^ ci, where rotr8 rotates the 8 block lanes.
  */
-export declare function blocksPut(st: AesBlocks, s: AesBlock, block: number): void;
+export declare function aegisRound128(st: AesBlocks, ci: AesBlocks): void;
 /**
- * Load a 16-byte buffer into an AES block (4 uint32 little-endian).
+ * Fused AEGIS-256 update round on the packed state:
+ * st = st ^ rotr6(AESRound(st)) ^ ci, where rotr6 rotates the 6 block lanes.
  */
-export declare function blockFromBytes(out: AesBlock, src: Uint8Array): void;
+export declare function aegisRound256(st: AesBlocks, ci: AesBlocks): void;
 /**
- * Store an AES block to a 16-byte buffer (little-endian).
+ * Pack two message blocks (at positions 0 and 4) into a constant-input state
+ * for the AEGIS-128L round. Specialized pack04 exploiting the sparse input.
  */
-export declare function blockToBytes(out: Uint8Array, src: AesBlock): void;
+export declare function packConstantInput128(out: AesBlocks, m0: AesBlock, m1: AesBlock): void;
 /**
- * XOR two AES blocks: out = a ^ b
+ * Pack one message block (at position 0) into a constant-input state for the
+ * AEGIS-256 round. Specialized pack04_6 exploiting the sparse input.
  */
-export declare function blockXor(out: AesBlock, a: AesBlock, b: AesBlock): void;
+export declare function packConstantInput256(out: AesBlocks, m: AesBlock): void;
+/**
+ * AEGIS-128L keystream extraction from the packed state:
+ * z0 = S6 ^ S1 ^ (S2 & S3), z1 = S2 ^ S5 ^ (S6 & S7), computed lane-wise,
+ * then unpacked (unpack04 restricted to the words feeding blocks 0 and 4).
+ */
+export declare function keystream128(st: AesBlocks, z0: AesBlock, z1: AesBlock): void;
 /**
- * XOR two bitsliced states: a ^= b
+ * AEGIS-256 keystream extraction from the packed state:
+ * z = S1 ^ S4 ^ S5 ^ (S2 & S3), computed lane-wise, then unpacked
+ * (unpack04_6 restricted to the words feeding block 0).
  */
-export declare function blocksXor(a: AesBlocks, b: AesBlocks): void;
-//# sourceMappingURL=aes-bs.d.ts.map
+export declare function keystream256(st: AesBlocks, z: AesBlock): void;