SPMU447 June 2026 CC2755P20
Assuming initialization from reset state and denoting plaintext as an array, m[1:x].
The same steps are carried out as for encryption, with the exception that plaintext and ciphertext are swapped.