Expand description
AES-128 and AES-256 chiplets for Hekate, the Rust zero-knowledge proof engine.
Aes128Chiplet and Aes256Chiplet pair a round table,
AesRound128Air or AesRound256Air, that proves the FIPS 197 round
function with an S-box ROM for the GF(2^8) inversion. trace expands
keys and builds the chiplet traces in constant time.
- AES-128 and AES-256 Encryption: what the proof states and what stays outside it
Re-exports§
pub use aes128::Aes128Chiplet;pub use aes128::Aes128Columns;pub use aes128::AesRound128Air;pub use aes128::CpuAes128Columns;pub use aes128::PhysAes128Columns;pub use aes256::Aes256Chiplet;pub use aes256::Aes256Columns;pub use aes256::AesRound256Air;pub use aes256::CpuAes256Columns;pub use aes256::PhysAes256Columns;
Modules§
Structs§
Constants§
Functions§
- host_
key_ selector_ shape - Host key emit schedule:
KEY_SELECTORfires only on each block’s input row at offset 0. - host_
selector_ shape - Host emit schedule:
SELECTORfires on each block’s input row at offset 0 and output row at offset 1.