binius_circuits/blake2b/
constants.rs

1// Copyright 2025 Irreducible Inc.
2/// BLAKE2b constants
3/// Initialization vectors from SHA-512 (fractional parts of square roots of primes 2..19)
4pub const IV: [u64; 8] = [
5	0x6A09E667F3BCC908, // sqrt(2)
6	0xBB67AE8584CAA73B, // sqrt(3)
7	0x3C6EF372FE94F82B, // sqrt(5)
8	0xA54FF53A5F1D36F1, // sqrt(7)
9	0x510E527FADE682D1, // sqrt(11)
10	0x9B05688C2B3E6C1F, // sqrt(13)
11	0x1F83D9ABFB41BD6B, // sqrt(17)
12	0x5BE0CD19137E2179, // sqrt(19)
13];
14
15/// SIGMA permutation schedule for message words
16/// 12 rounds total: rounds 0-9 have unique permutations, rounds 10-11 reuse 0-1
17pub const SIGMA: [[usize; 16]; 12] = [
18	[0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15],
19	[14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3],
20	[11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4],
21	[7, 9, 3, 1, 13, 12, 11, 14, 2, 6, 5, 10, 4, 0, 15, 8],
22	[9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13],
23	[2, 12, 6, 10, 0, 11, 8, 3, 4, 13, 7, 5, 15, 14, 1, 9],
24	[12, 5, 1, 15, 14, 13, 4, 10, 0, 7, 6, 3, 9, 2, 8, 11],
25	[13, 11, 7, 14, 12, 1, 3, 9, 5, 0, 15, 4, 8, 6, 2, 10],
26	[6, 15, 14, 9, 11, 3, 0, 8, 12, 2, 13, 7, 1, 4, 10, 5],
27	[10, 2, 8, 4, 7, 6, 1, 5, 15, 11, 9, 14, 3, 12, 13, 0],
28	// Rounds 10-11 reuse SIGMA[0] and SIGMA[1]
29	[0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15],
30	[14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3],
31];
32
33/// Rotation constants for the G mixing function
34pub const R1: u32 = 32;
35pub const R2: u32 = 24;
36pub const R3: u32 = 16;
37pub const R4: u32 = 63;
38
39/// Algorithm parameters
40pub const ROUNDS: usize = 12;
41pub const BLOCK_BYTES: usize = 128;
42pub const MAX_OUTPUT_BYTES: usize = 64;
binius_circuits/blake2b/constants.rs

binius_circuits/blake2b/
constants.rs
