another nit in Gf128 doc

mamonet · Jun 25, 2024 · 0d0c2cb · 0d0c2cb
1 parent fa943e6
commit 0d0c2cb
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/code/gf128/Hacl.Gf128.NI.fst b/code/gf128/Hacl.Gf128.NI.fst
@@ -42,9 +42,9 @@ Comment
 "Initiate GHASH context with the following layout
 
   Authentication Tag     -> CONTEXT.[0] (16-byte)
-  h (carry-less mul) h^3 -> CONTEXT.[1] (16-byte)
-  h (carry-less mul) h^2 -> CONTEXT.[2] (16-byte)
-  h (carry-less mul) h   -> CONTEXT.[3] (16-byte)
+  h * h^3                -> CONTEXT.[1] (16-byte)
+  h * h^2                -> CONTEXT.[2] (16-byte)
+  h * h                  -> CONTEXT.[3] (16-byte)
   h (hash key)           -> CONTEXT.[4] (16-byte)"]
 let gcm_init : gf128_init_st Vec.NI =
   gf128_init #Vec.NI