Laws.Sbox.value: law of bend-collections-laws-crypto@1.0.0.0
Import: import bend-collections-laws-crypto@1.0.0.0/proofs/crypto/aes/laws.bend as Laws
Lines 41-45 of bend-collections-laws-crypto@1.0.0.0/proofs/crypto/aes/laws.bend: https://jend.leeeet.dev/read.txt?path=bend-collections-laws-crypto@1.0.0.0/proofs/crypto/aes/laws.bend&start_line=41&end_line=45

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/aes/sbox.bend as B
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/aes/aes.bend as S

# The constant-time S-box circuit is FIPS 197's S-box (the inverse in
# GF(2^8), {00} to {00}, then the affine map), on every input.
law Sbox.value:
  for +x: U32
  {B.sbox(x) == S.sbox(x) : U32}

Uses (4):
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=U32
  https://jend.leeeet.dev/definition.txt?path=bend-collections-laws-crypto@1.0.0.0/proofs/crypto/aes/sbox.bend&name=sbox_ok
  https://jend.leeeet.dev/definition.txt?path=bend-collections-laws-crypto@1.0.0.0/spec/crypto/aes/aes.bend&name=sbox
  https://jend.leeeet.dev/definition.txt?path=bend-collections-laws-crypto@1.0.0.0/src/crypto/aes/sbox.bend&name=sbox