LAWS.aes256gcm_nist_rejects_changed_aad: law of qasim-bend-kit@0.1.0.2
Import: import qasim-bend-kit@0.1.0.2/LAWS.bend as LAWS
Lines 597-602 of qasim-bend-kit@0.1.0.2/LAWS.bend: https://jend.leeeet.dev/read.txt?path=qasim-bend-kit@0.1.0.2/LAWS.bend&start_line=597&end_line=602

import Base
import qasim-bend-kit@0.1.0.2/libs/AES256GCM.bend as AES

# Concrete tamper checks supplement tag uniqueness without claiming collision-
# free authentication for all distinct AAD, nonce, key, or ciphertext inputs.
law aes256gcm_nist_rejects_changed_aad:
    {AES.decrypt(aes256gcm_nist_key(), [1], aes256gcm_nist_empty()) ==
        Fail{AES.AuthenticationFailed{}} :
        Result<&2, &2, AES.Error, List<&2, U32>>}

Uses (11):
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=List
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=Result
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=U32
  https://jend.leeeet.dev/definition.txt?path=qasim-bend-kit@0.1.0.2/LAWS.bend&name=aes256gcm_nist_empty
  https://jend.leeeet.dev/definition.txt?path=qasim-bend-kit@0.1.0.2/LAWS.bend&name=aes256gcm_nist_key
  https://jend.leeeet.dev/definition.txt?path=qasim-bend-kit@0.1.0.2/libs/AES256GCM.bend&name=Error
  https://jend.leeeet.dev/definition.txt?path=qasim-bend-kit@0.1.0.2/libs/AES256GCM.bend&name=decrypt
  https://jend.leeeet.dev/definition.txt?path=qasim-bend-kit@0.1.0.2/proof/AES_NistInputProof.bend&name=decrypt_inputs
  https://jend.leeeet.dev/definition.txt?path=qasim-bend-kit@0.1.0.2/proof/AES_NistTamperVectorProof.bend&name=changed_aad_aad
  https://jend.leeeet.dev/definition.txt?path=qasim-bend-kit@0.1.0.2/proof/AES_NistTamperVectorProof.bend&name=changed_aad_envelope
  https://jend.leeeet.dev/definition.txt?path=qasim-bend-kit@0.1.0.2/proof/AES_NistTamperVectorProof.bend&name=rejects_changed_aad