Limbs.fin: def of bend-collections@1.0.0.0
Import: import bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend as Limbs
Lines 122-128 of bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend: https://jend.leeeet.dev/read.txt?path=bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend&start_line=122&end_line=128

import Base

# The tag bytes: the low 128 bits of (h mod p) + s. (Entered through a match
# on s, both arms the same: while s is unknown a proof's goal stays one call
# instead of sixteen unfolded byte steps.)
def fin(+h: List<&2, U32>, s: List<&2, U32>) -> List<&2, U32>:
  match s:
    case Nil{}: bytes(16n, add(freeze(h), Nil{}), 0)
    case y <> ys: bytes(16n, add(freeze(h), y <> ys), 0)

Uses (5):
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=List
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=U32
  https://jend.leeeet.dev/definition.txt?path=bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend&name=add
  https://jend.leeeet.dev/definition.txt?path=bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend&name=bytes
  https://jend.leeeet.dev/definition.txt?path=bend-collections@1.0.0.0/src/crypto/poly1305/limbs.bend&name=freeze